Function at 0x140044bf0
Capabilities:
Set registry value

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x138]
sub rsp, 0x210
mov qword [rbp - 0x20], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x14029e8b8]
xor rax, rsp
mov qword [rbp + 0x100], rax
call fcn.14000cc80
xor r12d, r12d
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
lea r9d, [r12 + 1]
xor r8d, r8d
lea rdx, str.default
mov rcx, rax
call fcn.1400be7b0
xor eax, eax
mov qword [rbp - 0x48], rax
mov edi, r12d
mov qword [rbp - 0x50], r12
mov dword [rbp - 0x48], r12d
mov qword [rbp - 0x40], r12
mov qword [rbp + 0xd0], r12
lea rax, [rbp + 0xd8]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x2001f
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SOFTWAREClassesFolder_shell
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov esi, eax
test eax, eax
jne 0x140044cd0
mov esi, r12d
mov rdi, qword [rbp + 0xd0]
mov qword [rbp - 0x50], rdi
mov dword [rbp - 0x48], r12d
test esi, esi
je 0x140044e33
call fcn.1400bd640
mov rcx, qword [rax]
mov r8, qword [rcx + 0x10]
mov edx, 1
mov rcx, rax
call r8
cmp al, 1
jne 0x140045a36
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rbp - 0x80], xmm0
mov byte [rsp + 0x70], 0
mov r8d, 0x39
lea rdx, str.d:jenkins.jenkinsworkspace_tabx_tabxmainv2default.cpp
lea rcx, [rsp + 0x70]
call fcn.14000d6b0
nop
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov r8d, 3
lea rdx, [0x1401f5428]
lea rcx, [rsp + 0x50]
call fcn.14000d6b0
nop
mov r9d, 0x3c
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x18]
call fcn.14000b740
mov rbx, rax
lea rdx, str.make_def_create_shell_key_failed:
mov rcx, rax
call fcn.14000c500
mov edx, esi
mov rcx, rbx
call fcn.14002dec0
call fcn.1400bd640
mov r8, qword [rax]
mov rdx, rbx
mov rcx, rax
call qword [r8 + 0x38]
nop
lea rcx, [rbp - 0x18]
call fcn.14000c6a0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x140044ddb
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140044dd6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045b43
call fcn.1401606e8
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140045a36
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140044e29
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045b49
call fcn.1401606e8
jmp 0x140045a36
xor eax, eax
mov qword [rbp - 0x30], rax
mov rsi, r12
mov qword [rbp - 0x38], r12
mov dword [rbp - 0x30], r12d
mov qword [rbp - 0x28], r12
mov qword [rbp + 0xd0], r12
lea rax, [rbp + 0xd8]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x2001f
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea r13, str.openintabx
mov rdx, r13
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov r14d, eax
test eax, eax
jne 0x140044eab
mov r14d, r12d
mov rsi, qword [rbp + 0xd0]
mov qword [rbp - 0x38], rsi
mov dword [rbp - 0x30], r12d
test r14d, r14d
je 0x140045010
call fcn.1400bd640
mov rcx, qword [rax]
mov r8, qword [rcx + 0x10]
mov edx, 1
mov rcx, rax
call r8
cmp al, 1
jne 0x140045a27
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rbp - 0x80], xmm0
mov byte [rsp + 0x70], 0
mov r8d, 0x39
lea rdx, str.d:jenkins.jenkinsworkspace_tabx_tabxmainv2default.cpp
lea rcx, [rsp + 0x70]
call fcn.14000d6b0
nop
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov r8d, 3
lea rdx, [0x1401f5428]
lea rcx, [rsp + 0x50]
call fcn.14000d6b0
nop
mov r9d, reloc.SHELL32.dll_SHGetSetSettings
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x18]
call fcn.14000b740
mov rbx, rax
lea rdx, str.make_def_create_shell_app_failed:
mov rcx, rax
call fcn.14000c500
mov edx, r14d
mov rcx, rbx
call fcn.14002dec0
call fcn.1400bd640
mov r8, qword [rax]
mov rdx, rbx
mov rcx, rax
call qword [r8 + 0x38]
nop
lea rcx, [rbp - 0x18]
call fcn.14000c6a0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x140044fb8
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140044fb3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045b4f
call fcn.1401606e8
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140045a27
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140045006
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045b55
call fcn.1401606e8
jmp 0x140045a27
mov dword [rsp + 0x28], reloc.SHELL32.dll_ILClone
lea rax, [0x1401fcbd8]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r14d, eax
test eax, eax
je 0x14004519e
call fcn.1400bd640
mov rcx, qword [rax]
mov r8, qword [rcx + 0x10]
mov edx, 1
mov rcx, rax
call r8
cmp al, 1
jne 0x140045a27
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rbp - 0x80], xmm0
mov byte [rsp + 0x70], 0
mov r8d, 0x39
lea rdx, str.d:jenkins.jenkinsworkspace_tabx_tabxmainv2default.cpp
lea rcx, [rsp + 0x70]
call fcn.14000d6b0
nop
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov r8d, 3
lea rdx, [0x1401f5428]
lea rcx, [rsp + 0x50]
call fcn.14000d6b0
nop
mov r9d, 0x4b
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x18]
call fcn.14000b740
mov rbx, rax
lea rdx, str.make_def_set_shell_open_menu_failed:
mov rcx, rax
call fcn.14000c500
mov edx, r14d
mov rcx, rbx
call fcn.14002dec0
call fcn.1400bd640
mov r8, qword [rax]
mov rdx, rbx
mov rcx, rax
call qword [r8 + 0x38]
nop
lea rcx, [rbp - 0x18]
call fcn.14000c6a0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x140045147
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140045142
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045b5b
call fcn.1401606e8
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140045a27
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140045006
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045b31
jmp 0x140045006
xor eax, eax
mov qword [rsp + 0x78], rax
mov r14, r12
mov qword [rsp + 0x70], r12
mov dword [rsp + 0x78], r12d
mov qword [rbp - 0x80], r12
mov qword [rbp + 0xd0], r12
lea rax, [rbp + 0xd8]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x2001f
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, str.command
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov r15d, eax
test eax, eax
jne 0x140045218
mov r15d, r12d
mov r14, qword [rbp + 0xd0]
mov qword [rsp + 0x70], r14
mov dword [rsp + 0x78], r12d
test r15d, r15d
je 0x140045379
call fcn.1400bd640
mov rcx, qword [rax]
mov r8, qword [rcx + 0x10]
mov edx, 1
mov rcx, rax
call r8
cmp al, 1
jne 0x140045a18
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x70], 0
mov r8d, 0x39
lea rdx, str.d:jenkins.jenkinsworkspace_tabx_tabxmainv2default.cpp
lea rcx, [rbp - 0x70]
call fcn.14000d6b0
nop
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov r8d, 3
lea rdx, [0x1401f5428]
lea rcx, [rsp + 0x50]
call fcn.14000d6b0
nop
mov r9d, 0x53
lea r8, [rbp - 0x70]
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x18]
call fcn.14000b740
mov rbx, rax
lea rdx, str.make_def_create_shell_command_failed:
mov rcx, rax
call fcn.14000c500
mov edx, r15d
mov rcx, rbx
call fcn.14002dec0
call fcn.1400bd640
mov r8, qword [rax]
mov rdx, rbx
mov rcx, rax
call qword [r8 + 0x38]
nop
lea rcx, [rbp - 0x18]
call fcn.14000c6a0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x140045322
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004531d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045b61
call fcn.1401606e8
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x140045a18
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004536f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045b67
call fcn.1401606e8
jmp 0x140045a18
lea rcx, [rbp + 0xe0]
call fcn.1400441b0
nop
lea rcx, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 8
jb 0x1400453a9
mov rcx, qword [rbp + 0xe0]
test rcx, rcx
jne 0x1400453a9
lea r15d, [rcx + 0xd]
jmp 0x1400453ed
mov rbx, 0xffffffffffffffff
mov rax, rbx
lea rax, [rax + 1]
cmp word [rcx + rax*2], 0
jne 0x1400453b3
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, r14
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r15d, eax
test eax, eax
je 0x14004558b
call fcn.1400bd640
mov rcx, qword [rax]
mov r8, qword [rcx + 0x10]
mov edx, 1
mov rcx, rax
call r8
cmp al, 1
jne 0x14004553d
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x70], 0
mov r8d, 0x39
lea rdx, str.d:jenkins.jenkinsworkspace_tabx_tabxmainv2default.cpp
lea rcx, [rbp - 0x70]
call fcn.14000d6b0
nop
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov r8d, 3
lea rdx, [0x1401f5428]
lea rcx, [rsp + 0x50]
call fcn.14000d6b0
nop
mov r9d, 0x5b
lea r8, [rbp - 0x70]
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x18]
call fcn.14000b740
mov rbx, rax
lea rdx, str.make_def_set_shell_command_failed:
mov rcx, rax
call fcn.14000c500
mov edx, r15d
mov rcx, rbx
call fcn.14002dec0
call fcn.1400bd640
mov r8, qword [rax]
mov rdx, rbx
mov rcx, rax
call qword [r8 + 0x38]
nop
lea rcx, [rbp - 0x18]
call fcn.14000c6a0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x1400454ee
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400454e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045b6d
call fcn.1401606e8
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x14004553d
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140045537
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045b73
call fcn.1401606e8
nop
mov rdx, qword [rbp + 0xf8]
cmp rdx, 8
jb 0x140045a00
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400459fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045b37
jmp 0x1400459fb
mov dword [rsp + 0x28], ILCombine
mov qword [rsp + 0x20], r13
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r15d, eax
test eax, eax
je 0x140045755
call fcn.1400bd640
mov rcx, qword [rax]
mov r8, qword [rcx + 0x10]
mov edx, 1
mov rcx, rax
call r8
cmp al, 1
jne 0x140045707
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x70], 0
mov r8d, 0x39
lea rdx, str.d:jenkins.jenkinsworkspace_tabx_tabxmainv2default.cpp
lea rcx, [rbp - 0x70]
call fcn.14000d6b0
nop
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov r8d, 3
lea rdx, [0x1401f5428]
lea rcx, [rsp + 0x50]
call fcn.14000d6b0
nop
mov r9d, 0x62
lea r8, [rbp - 0x70]
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x18]
call fcn.14000b740
mov rbx, rax
lea rdx, str.make_def_set_shell_default_failed:
mov rcx, rax
call fcn.14000c500
mov edx, r15d
mov rcx, rbx
call fcn.14002dec0
call fcn.1400bd640
mov r8, qword [rax]
mov rdx, rbx
mov rcx, rax
call qword [r8 + 0x38]
nop
lea rcx, [rbp - 0x18]
call fcn.14000c6a0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x1400456b8
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400456b3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045b79
call fcn.1401606e8
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x140045707
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140045701
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045b7f
call fcn.1401606e8
nop
mov rdx, qword [rbp + 0xf8]
cmp rdx, 8
jb 0x140045a00
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400459fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045b3d
jmp 0x1400459fb
lea r15, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 8
cmovae r15, qword [rbp + 0xe0]
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x20106
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, str.SOFTWAREClassesCLSID52205fd8_5dfb_447d_801a_d0b52f2e83e1_shellopennewwindowcommand
mov rdx, 0xffffffff80000001
lea rcx, [rsp + 0x50]
call fcn.140043ed0
movsxd r13, eax
test eax, eax
jne 0x140045851
lea rcx, [0x1401f8430]
mov r12, qword [rsp + 0x50]
test r15, r15
jne 0x1400457d0
lea r15d, [rax + 0xd]
jmp 0x14004580b
lea rbx, [rbx + 1]
cmp word [r15 + rbx*2], 0
jne 0x1400457d0
lea eax, [rbx*2 + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r15
mov r9d, 2
xor r8d, r8d
mov rdx, rcx
mov rcx, r12
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov r15d, eax
lea rcx, [0x1401f8430]
movsxd r13, r15d
test r15d, r15d
je 0x140045826
test r12, r12
je 0x140045821
mov rcx, r12
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor r12d, r12d
jmp 0x140045861
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rcx
mov r9d, 2
xor r8d, r8d
lea rdx, str.DelegateExecute
mov rcx, r12
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
movsxd r13, eax
jmp 0x140045813
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x140045861
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test r13d, r13d
je 0x140045a50
call fcn.1400bd640
mov rcx, qword [rax]
mov r8, qword [rcx + 0x10]
mov edx, 1
mov rcx, rax
call r8
cmp al, 1
jne 0x1400459ba
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x70], 0
mov r8d, 0x39
lea rdx, str.d:jenkins.jenkinsworkspace_tabx_tabxmainv2default.cpp
lea rcx, [rbp - 0x70]
call fcn.14000d6b0
nop
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov r8d, 3
lea rdx, [0x1401f5428]
lea rcx, [rsp + 0x50]
call fcn.14000d6b0
nop
mov r9d, 0x69
lea r8, [rbp - 0x70]
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x18]
call fcn.14000b740
mov rbx, rax
lea rdx, str.make_def_win__e_failed:
mov rcx, rax
call fcn.14000c500
mov edx, r13d
mov rcx, rbx
call fcn.14002dec0
call fcn.1400bd640
mov r8, qword [rax]
mov rdx, rbx
mov rcx, rax
call qword [r8 + 0x38]
nop
lea rcx, [rbp - 0x18]
call fcn.14000c6a0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x14004596b
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140045966
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045b85
call fcn.1401606e8
movdqa xmm0, xmmword [0x1401f5810]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x1400459ba
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400459b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045b8b
call fcn.1401606e8
nop
mov rdx, qword [rbp + 0xf8]
cmp rdx, 8
jb 0x140045a00
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400459fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045b91
call fcn.1401606e8
movdqa xmm0, xmmword [0x1401f5800]
movdqu xmmword [rbp + 0xf0], xmm0
mov word [rbp + 0xe0], r12w
test r14, r14
je 0x140045a27
mov rcx, r14
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
test rsi, rsi
je 0x140045a36
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
test rdi, rdi
je 0x140045a44
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.140045cf0
xor al, al
jmp 0x140045afb
mov rdx, qword [rbp + 0xf8]
cmp rdx, 8
jb 0x140045a96
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140045a91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045b2b
call fcn.1401606e8
movdqa xmm0, xmmword [0x1401f5800]
movdqu xmmword [rbp + 0xf0], xmm0
mov word [rbp + 0xe0], r12w
test r14, r14
je 0x140045abd
mov rcx, r14
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
test rsi, rsi
je 0x140045acc
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
test rdi, rdi
je 0x140045ada
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.14000cb70
mov edx, 1
mov rcx, rax
call fcn.14003ebc0
call fcn.14000cb70
mov rcx, rax
call fcn.14003eb80
mov al, 1
mov rcx, qword [rbp + 0x100]
xor rcx, rsp
call fcn.140160a40
lea r11, [rsp + 0x210]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
int3
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
nop
call fcn.1401b3260
int3