Function at 0x140001f60
Capabilities:
Get storage device properties
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov eax, 0x1530
call fcn.140076450
sub rsp, rax
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1400e5558]
xor rax, rsp
mov qword [rbp + 0x14c0], rax
mov r12, rcx
mov qword [rbp], rcx
xor r13d, r13d
mov dword [rbp + 8], r13d
lea rcx, [rbp + 0x640]
call fcn.14004d270
movabs rax, 0x81c60792ecd45270
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x300], rax
movabs r14, 0x73b20847a8721564
mov qword [rbp + 0x18], r14
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x308], rax
movabs rbx, 0x81c60792ecd46833
mov qword [rbp + 0x18], rbx
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x200], rax
mov qword [rbp + 0x18], r14
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x208], rax
movdqa xmm0, xmmword [rbp + 0x300]
pxor xmm0, xmmword [rbp + 0x200]
movdqa xmmword [rbp + 0x300], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x48], xmm0
mov qword [rbp + 0x58], r13
mov qword [rbp + 0x60], r13
lea rax, [rbp + 0x300]
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x140002050
lea rdx, [rbp + 0x300]
lea rcx, [rbp + 0x48]
call fcn.140001c40
lea rax, [rbp + 0x48]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], r13
mov dword [rbp + 0x28], r13d
movabs rax, 0x81c60792ec95477d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x310], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x318], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
movdqa xmm0, xmmword [rbp + 0x310]
pxor xmm0, xmmword [rbp + 0x210]
movdqa xmmword [rbp + 0x310], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x3a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3b0], xmm1
lea rax, [rbp + 0x310]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x1400020f6
lea rdx, [rbp + 0x310]
lea rcx, [rbp + 0x3a0]
call fcn.140001c40
mov dword [rbp + 8], 4
mov rbx, r13
lea rcx, [rbp + 0x48]
cmp qword [rbp + 0x60], 0x10
cmovae rcx, qword [rbp + 0x48]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x1400022f1
mov qword [rbp + 0x2f4], r13
mov dword [rbp + 0x2f0], r13d
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x28]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 8
lea rax, [rbp + 0x18]
mov qword [rsp + 0x20], rax
mov r9d, recv
lea r8, [rbp + 0x2f0]
mov edx, 0x2d1400
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x1400022d5
mov r14d, dword [rbp + 0x1c]
test r14d, r14d
je 0x1400022cb
mov ecx, r14d
call fcn.14008a470
mov rbx, rax
test rax, rax
je 0x1400022cb
mov r8d, r14d
xor edx, edx
mov rcx, rax
call fcn.14007c9f0
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x28]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], rbx
mov r9d, recv
lea r8, [rbp + 0x2f0]
mov edx, 0x2d1400
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x1400022cb
mov eax, dword [rbx + 0x18]
test eax, eax
je 0x1400022cb
lea rdx, [rbx + rax]
cmp byte [rdx], 0
je 0x1400022cb
xorps xmm0, xmm0
movups xmmword [rbp + 0x4a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4b0], xmm1
mov r8, rdi
inc r8
cmp byte [rdx + r8], 0
jne 0x140002241
lea rcx, [rbp + 0x4a0]
call fcn.140001c40
mov rdx, qword [rbp + 0x3b8]
cmp rdx, 0x10
jb 0x140002298
inc rdx
mov rcx, qword [rbp + 0x3a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002293
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003f88
call fcn.1400763ac
movups xmm0, xmmword [rbp + 0x4a0]
movups xmmword [rbp + 0x3a0], xmm0
movups xmm1, xmmword [rbp + 0x4b0]
movups xmmword [rbp + 0x3b0], xmm1
movdqa xmm0, xmmword [0x1400b3890]
movdqu xmmword [rbp + 0x4b0], xmm0
mov byte [rbp + 0x4a0], 0
movabs r14, 0x73b20847a8721564
test rsi, rsi
je 0x1400022e3
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test rbx, rbx
je 0x1400022f1
mov rcx, rbx
call fcn.14008a45c
nop
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x14000232c
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002327
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003f8e
call fcn.1400763ac
mov qword [rbp + 0x58], r13
mov qword [rbp + 0x60], recv
mov byte [rbp + 0x48], 0
mov dword [rbp + 8], 2
lea rdx, [rbp + 0x3a0]
lea rcx, [rbp + 0x640]
call fcn.14004ea00
nop
mov rdx, qword [rbp + 0x3b8]
cmp rdx, 0x10
jb 0x140002398
inc rdx
mov rcx, qword [rbp + 0x3a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002393
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003f94
call fcn.1400763ac
movdqa xmm0, xmmword [0x1400b3890]
movdqu xmmword [rbp + 0x3b0], xmm0
mov byte [rbp + 0x3a0], 0
lea rax, [rbp + 0x168]
mov qword [rbp + 0x10], rax
movabs rax, 0xeeb574f78fbb1a63
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x420], rax
movabs rax, 0x1c65b22c5135b16
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x428], rax
movabs rax, 0xe0bdfde46abe8cb4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x430], rax
movabs rsi, 0x20110441c6288dce
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x438], rax
movabs rbx, 0x81c60792ecd46833
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x840], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x848], rax
movabs r15, 0xe0bdfde46ad9e2dd
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x850], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x858], rax
vmovdqu ymm0, ymmword [rbp + 0x420]
vpxor ymm1, ymm0, ymmword [rbp + 0x840]
vmovdqa ymmword [rbp + 0x420], ymm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x168], xmm0
mov qword [rbp + 0x178], r13
mov qword [rbp + 0x180], r13
lea rax, [rbp + 0x420]
mov r8, rdi
vzeroupper
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400024b0
lea rdx, [rbp + 0x420]
lea rcx, [rbp + 0x168]
call fcn.140001c40
lea rax, [rbp + 0x168]
mov qword [rbp + 0x20], rax
movabs rax, 0xc49446c5a886297b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x540], rax
movabs rax, 0x23fb5a04fb375138
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x548], rax
movabs rax, 0x93c4aeb82496ab89
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x550], rax
movabs rax, 0x547f61029a45e8ba
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x558], rax
movabs rax, 0xe0158a74c4bfcb75
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x560], rax
movabs rax, 0xec7bbf47bd76ba8b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x568], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x6c0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x6c8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x6d0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x6d8], rax
movabs rax, 0x8576e50694d3aa07
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6e0], rax
movabs rax, 0xec7b8f1bcf19c9f8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6e8], rax
vmovdqu ymm0, ymmword [rbp + 0x540]
vpxor ymm1, ymm0, ymmword [rbp + 0x6c0]
vmovdqa ymmword [rbp + 0x540], ymm1
vmovdqa xmm0, xmmword [rbp + 0x560]
vpxor xmm0, xmm0, xmmword [rbp + 0x6e0]
vmovdqa xmmword [rbp + 0x560], xmm0
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0xa8], xmm0
mov qword [rbp + 0xb8], r13
mov qword [rbp + 0xc0], r13
lea rax, [rbp + 0x540]
mov r8, rdi
vzeroupper
inc r8
cmp byte [rax + r8], 0
jne 0x140002633
lea rdx, [rbp + 0x540]
lea rcx, [rbp + 0xa8]
call fcn.140001c40
lea rax, [rbp + 0xa8]
mov qword [rbp + 0x10], rax
mov dword [rbp + 0x2c], 0x200
lea r8, [rbp + 0x168]
cmp qword [rbp + 0x180], 0x10
cmovae r8, qword [rbp + 0x168]
lea rdx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 0x10
cmovae rdx, qword [rbp + 0xa8]
lea rax, [rbp + 0x2c]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x8c0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
mov rcx, 0xffffffff80000002
mov r9d, 2
call qword [sym.imp.ADVAPI32.dll_RegGetValueA]
mov ecx, socket
movabs r15, 0x7fffffffffffffff
test eax, eax
jne 0x1400027c8
cmp dword [rbp + 0x2c], eax
je 0x1400027c8
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b0], xmm0
mov qword [rbp + 0x2c0], r13
mov qword [rbp + 0x2c8], r13
lea rax, [rbp + 0x8c0]
mov rsi, rdi
nop
inc rsi
cmp byte [rax + rsi], 0
jne 0x140002700
cmp rsi, r15
ja 0x140003f9a
mov qword [rbp + 0x2c8], recv
cmp rsi, 0x10
jae 0x140002742
mov qword [rbp + 0x2c0], rsi
mov r8, rsi
lea rdx, [rbp + 0x8c0]
lea rcx, [rbp + 0x2b0]
call fcn.14007c340
jmp 0x1400027ac
mov r14, rsi
or r14, 0xf
cmp r14, r15
jbe 0x140002753
mov r14, r15
jmp 0x14000275a
cmp r14, rcx
cmovb r14, rcx
lea rdx, [r14 + 1]
lea rcx, [rbp + 0x2b0]
call fcn.140001f00
mov rbx, rax
mov qword [rbp + 0x2b0], rax
mov qword [rbp + 0x2c0], rsi
mov qword [rbp + 0x2c8], r14
mov r8, rsi
lea rdx, [rbp + 0x8c0]
mov rcx, rax
call fcn.14007c340
mov byte [rbx + rsi], 0
movabs rbx, 0x81c60792ecd46833
movabs r14, 0x73b20847a8721564
lea rcx, [rbp + 0xa8]
call fcn.140001df0
nop
movabs rsi, 0x20110441c6288dce
jmp 0x14000287b
movabs rax, 0x81c60792ec95477d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x320], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x328], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
movdqa xmm0, xmmword [rbp + 0x320]
pxor xmm0, xmmword [rbp + 0x220]
movdqa xmmword [rbp + 0x320], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b0], xmm0
mov qword [rbp + 0x2c0], r13
mov qword [rbp + 0x2c8], r13
lea rax, [rbp + 0x320]
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140002850
lea rdx, [rbp + 0x320]
lea rcx, [rbp + 0x2b0]
call fcn.140001c40
nop
lea rcx, [rbp + 0xa8]
call fcn.140001df0
nop
lea rcx, [rbp + 0x168]
call fcn.140001df0
mov dword [rbp + 8], 0x1a
lea rdx, [rbp + 0x2b0]
lea rcx, [rbp + 0x640]
call fcn.14004ea00
nop
mov rdx, qword [rbp + 0x2c8]
cmp rdx, 0x10
jb 0x1400028e3
inc rdx
mov rcx, qword [rbp + 0x2b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400028de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003fa0
call fcn.1400763ac
mov qword [rbp + 0x2c0], r13
mov qword [rbp + 0x2c8], recv
mov byte [rbp + 0x2b0], 0
lea rax, [rbp + 0x188]
mov qword [rbp + 0x20], rax
movabs rax, 0xe4aa62c0bf9b2171
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x330], rax
movabs rax, 0x73d77c26ec176605
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x338], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
movdqa xmm0, xmmword [rbp + 0x330]
pxor xmm0, xmmword [rbp + 0x1f0]
movdqa xmmword [rbp + 0x330], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x188], xmm0
mov qword [rbp + 0x198], r13
mov qword [rbp + 0x1a0], r13
lea rax, [rbp + 0x330]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140002991
lea rdx, [rbp + 0x330]
lea rcx, [rbp + 0x188]
call fcn.140001c40
lea rax, [rbp + 0x188]
mov qword [rbp + 0x10], rax
movabs rax, 0xc49446c5a886297b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x580], rax
movabs rax, 0x23fb5a04fb375138
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x588], rax
movabs rax, 0x93c4aeb82496ab89
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x590], rax
movabs rax, 0x735e4d039a45e8ba
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x598], rax
movabs rcx, 0x8576e50694d3aa07
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x5a0], rax
movabs rdx, 0xec7b8f1bcf19c9f8
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x5a8], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x700], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x708], rax
movabs rax, 0xe0bdfde46ad9e2dd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x710], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x718], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x720], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x728], rax
vmovdqu ymm0, ymmword [rbp + 0x580]
vpxor ymm1, ymm0, ymmword [rbp + 0x700]
vmovdqa ymmword [rbp + 0x580], ymm1
vmovdqa xmm0, xmmword [rbp + 0x5a0]
vpxor xmm0, xmm0, xmmword [rbp + 0x720]
vmovdqa xmmword [rbp + 0x5a0], xmm0
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0xc8], xmm0
mov qword [rbp + 0xd8], r13
mov qword [rbp + 0xe0], r13
lea rax, [rbp + 0x580]
mov r8, rdi
vzeroupper
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140002b10
lea rdx, [rbp + 0x580]
lea rcx, [rbp + 0xc8]
call fcn.140001c40
lea rax, [rbp + 0xc8]
mov qword [rbp + 0x20], rax
mov dword [rbp + 0x30], 0x200
lea r8, [rbp + 0x188]
cmp qword [rbp + 0x1a0], 0x10
cmovae r8, qword [rbp + 0x188]
lea rdx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 0x10
cmovae rdx, qword [rbp + 0xc8]
lea rax, [rbp + 0x30]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0xac0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
mov rcx, 0xffffffff80000002
mov r9d, 2
call qword [sym.imp.ADVAPI32.dll_RegGetValueA]
test eax, eax
jne 0x140002c9e
cmp dword [rbp + 0x30], eax
je 0x140002c9e
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
mov qword [rbp + 0x2a0], r13
mov qword [rbp + 0x2a8], r13
lea rax, [rbp + 0xac0]
mov rsi, rdi
nop dword [rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x140002bd0
cmp rsi, r15
ja 0x140003fa6
mov qword [rbp + 0x2a8], recv
cmp rsi, 0x10
jae 0x140002c12
mov qword [rbp + 0x2a0], rsi
mov r8, rsi
lea rdx, [rbp + 0xac0]
lea rcx, [rbp + 0x290]
call fcn.14007c340
jmp 0x140002c82
mov r14, rsi
or r14, 0xf
cmp r14, r15
jbe 0x140002c23
mov r14, r15
jmp 0x140002c30
cmp r14, 0x16
mov eax, socket
cmovb r14, rax
lea rdx, [r14 + 1]
lea rcx, [rbp + 0x290]
call fcn.140001f00
mov rbx, rax
mov qword [rbp + 0x290], rax
mov qword [rbp + 0x2a0], rsi
mov qword [rbp + 0x2a8], r14
mov r8, rsi
lea rdx, [rbp + 0xac0]
mov rcx, rax
call fcn.14007c340
mov byte [rbx + rsi], 0
movabs rbx, 0x81c60792ecd46833
movabs r14, 0x73b20847a8721564
lea rcx, [rbp + 0xc8]
call fcn.140001df0
nop
movabs rsi, 0x20110441c6288dce
jmp 0x140002d4b
movabs rax, 0x81c60792ec95477d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x340], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x348], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
movdqa xmm0, xmmword [rbp + 0x340]
pxor xmm0, xmmword [rbp + 0x230]
movdqa xmmword [rbp + 0x340], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
mov qword [rbp + 0x2a0], r13
mov qword [rbp + 0x2a8], r13
lea rax, [rbp + 0x340]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140002d20
lea rdx, [rbp + 0x340]
lea rcx, [rbp + 0x290]
call fcn.140001c40
nop
lea rcx, [rbp + 0xc8]
call fcn.140001df0
nop
lea rcx, [rbp + 0x188]
call fcn.140001df0
mov dword [rbp + 8], 0x7a
lea rdx, [rbp + 0x290]
lea rcx, [rbp + 0x640]
call fcn.14004ea00
nop
mov rdx, qword [rbp + 0x2a8]
cmp rdx, 0x10
jb 0x140002db3
inc rdx
mov rcx, qword [rbp + 0x290]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002dae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003fac
call fcn.1400763ac
mov qword [rbp + 0x2a0], r13
mov qword [rbp + 0x2a8], recv
mov byte [rbp + 0x290], 0
lea rax, [rbp + 0x1a8]
mov qword [rbp + 0x20], rax
movabs rax, 0xe5a862c4bf9b2171
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x350], rax
movabs rax, 0x73b20847a872670b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x358], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
movdqa xmm0, xmmword [rbp + 0x350]
pxor xmm0, xmmword [rbp + 0x240]
movdqa xmmword [rbp + 0x350], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a8], xmm0
mov qword [rbp + 0x1b8], r13
mov qword [rbp + 0x1c0], r13
lea rax, [rbp + 0x350]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140002e61
lea rdx, [rbp + 0x350]
lea rcx, [rbp + 0x1a8]
call fcn.140001c40
lea rax, [rbp + 0x1a8]
mov qword [rbp + 0x10], rax
movabs rax, 0xc49446c5a886297b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4c0], rax
movabs rax, 0x23fb5a04fb375138
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4c8], rax
movabs rax, 0x93c4aeb82496ab89
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4d0], rax
movabs rax, 0x735e4d039a45e8ba
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4d8], rax
movabs rcx, 0x8576e50694d3aa07
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
movabs rdx, 0xec7b8f1bcf19c9f8
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x740], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x748], rax
movabs rax, 0xe0bdfde46ad9e2dd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x750], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x758], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x760], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x768], rax
vmovdqu ymm0, ymmword [rbp + 0x4c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x740]
vmovdqa ymmword [rbp + 0x4c0], ymm1
vmovdqa xmm0, xmmword [rbp + 0x4e0]
vpxor xmm0, xmm0, xmmword [rbp + 0x760]
vmovdqa xmmword [rbp + 0x4e0], xmm0
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x88], xmm0
mov qword [rbp + 0x98], r13
mov qword [rbp + 0xa0], r13
lea rax, [rbp + 0x4c0]
mov r8, rdi
vzeroupper
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140002fe0
lea rdx, [rbp + 0x4c0]
lea rcx, [rbp + 0x88]
call fcn.140001c40
lea rax, [rbp + 0x88]
mov qword [rbp + 0x20], rax
mov dword [rbp + 0x34], 0x200
lea r8, [rbp + 0x1a8]
cmp qword [rbp + 0x1c0], 0x10
cmovae r8, qword [rbp + 0x1a8]
lea rdx, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0x10
cmovae rdx, qword [rbp + 0x88]
lea rax, [rbp + 0x34]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0xcc0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
mov rcx, 0xffffffff80000002
mov r9d, 2
call qword [sym.imp.ADVAPI32.dll_RegGetValueA]
test eax, eax
jne 0x140003162
cmp dword [rbp + 0x34], eax
je 0x140003162
xorps xmm0, xmm0
movups xmmword [rbp + 0x2d0], xmm0
mov qword [rbp + 0x2e0], r13
mov qword [rbp + 0x2e8], r13
lea rax, [rbp + 0xcc0]
mov rsi, rdi
nop dword [rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x1400030a0
cmp rsi, r15
ja 0x140003fb2
mov qword [rbp + 0x2e8], recv
cmp rsi, 0x10
jae 0x1400030e2
mov qword [rbp + 0x2e0], rsi
mov r8, rsi
lea rdx, [rbp + 0xcc0]
lea rcx, [rbp + 0x2d0]
call fcn.14007c340
jmp 0x140003146
mov rax, rsi
or rax, 0xf
cmp rax, r15
ja 0x1400030fe
mov r15, rax
cmp rax, 0x16
mov eax, socket
cmovb r15, rax
lea rdx, [r15 + 1]
lea rcx, [rbp + 0x2d0]
call fcn.140001f00
mov rbx, rax
mov qword [rbp + 0x2d0], rax
mov qword [rbp + 0x2e0], rsi
mov qword [rbp + 0x2e8], r15
mov r8, rsi
lea rdx, [rbp + 0xcc0]
mov rcx, rax
call fcn.14007c340
mov byte [rbx + rsi], 0
movabs rbx, 0x81c60792ecd46833
lea rcx, [rbp + 0x88]
call fcn.140001df0
nop
movabs rsi, 0x20110441c6288dce
jmp 0x14000320d
movabs rax, 0x81c60792ec95477d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x390], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x398], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
movdqa xmm0, xmmword [rbp + 0x390]
pxor xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x390], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x2d0], xmm0
mov qword [rbp + 0x2e0], r13
mov qword [rbp + 0x2e8], r13
lea rax, [rbp + 0x390]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x1400031e2
lea rdx, [rbp + 0x390]
lea rcx, [rbp + 0x2d0]
call fcn.140001c40
nop
lea rcx, [rbp + 0x88]
call fcn.140001df0
nop
lea rcx, [rbp + 0x1a8]
call fcn.140001df0
mov dword [rbp + 8], 0x1fa
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp + 0x640]
call fcn.14004ea00
nop
mov rdx, qword [rbp + 0x2e8]
cmp rdx, 0x10
jb 0x140003275
inc rdx
mov rcx, qword [rbp + 0x2d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003270
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003fb8
call fcn.1400763ac
mov qword [rbp + 0x2e0], r13
mov qword [rbp + 0x2e8], recv
mov byte [rbp + 0x2d0], 0
lea rax, [rbp + 0x148]
mov qword [rbp + 0x20], rax
movabs rax, 0xe08b6af798a71160
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x440], rax
movabs rax, 0x1c77c24c914600a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x448], rax
movabs rax, 0xe0bdfde46ad990b8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x450], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x458], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x860], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x868], rax
movabs r15, 0xe0bdfde46ad9e2dd
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x870], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x878], rax
vmovdqu ymm0, ymmword [rbp + 0x440]
vpxor ymm1, ymm0, ymmword [rbp + 0x860]
vmovdqa ymmword [rbp + 0x440], ymm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x148], xmm0
mov qword [rbp + 0x158], r13
mov qword [rbp + 0x160], r13
lea rax, [rbp + 0x440]
mov r8, rdi
vzeroupper
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140003380
lea rdx, [rbp + 0x440]
lea rcx, [rbp + 0x148]
call fcn.140001c40
lea rax, [rbp + 0x148]
mov qword [rbp + 0x10], rax
movabs rax, 0xc49446c5a886297b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5c0], rax
movabs rax, 0x23fb5a04fb375138
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5c8], rax
movabs rax, 0x93c4aeb82496ab89
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5d0], rax
movabs rax, 0x735e4d039a45e8ba
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5d8], rax
movabs rcx, 0x8576e50694d3aa07
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x5e0], rax
movabs rdx, 0xec7b8f1bcf19c9f8
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x5e8], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x780], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x788], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x790], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x798], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x7a0], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x7a8], rax
vmovdqu ymm0, ymmword [rbp + 0x5c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x780]
vmovdqa ymmword [rbp + 0x5c0], ymm1
vmovdqa xmm0, xmmword [rbp + 0x5e0]
vpxor xmm0, xmm0, xmmword [rbp + 0x7a0]
vmovdqa xmmword [rbp + 0x5e0], xmm0
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], r13
mov qword [rbp + 0x80], r13
lea rax, [rbp + 0x5c0]
mov r8, rdi
vzeroupper
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400034f0
lea rdx, [rbp + 0x5c0]
lea rcx, [rbp + 0x68]
call fcn.140001c40
lea rax, [rbp + 0x68]
mov qword [rbp + 0x20], rax
mov dword [rbp + 0x38], 0x200
lea r8, [rbp + 0x148]
cmp qword [rbp + 0x160], 0x10
cmovae r8, qword [rbp + 0x148]
lea rdx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0x10
cmovae rdx, qword [rbp + 0x68]
lea rax, [rbp + 0x38]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0xec0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
mov rcx, 0xffffffff80000002
mov r9d, 2
call qword [sym.imp.ADVAPI32.dll_RegGetValueA]
test eax, eax
jne 0x1400035ac
cmp dword [rbp + 0x38], eax
je 0x1400035ac
xorps xmm0, xmm0
movups xmmword [rbp + 0x3c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3d0], xmm1
lea rax, [rbp + 0xec0]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140003596
lea rdx, [rbp + 0xec0]
jmp 0x140003641
movabs rax, 0x81c60792ec95477d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x360], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x368], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x280], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x288], rax
movdqa xmm0, xmmword [rbp + 0x360]
pxor xmm0, xmmword [rbp + 0x280]
movdqa xmmword [rbp + 0x360], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x3c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3d0], xmm1
lea rax, [rbp + 0x360]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140003630
lea rdx, [rbp + 0x360]
lea rcx, [rbp + 0x3c0]
call fcn.140001c40
nop
lea rcx, [rbp + 0x68]
call fcn.140001df0
nop
lea rcx, [rbp + 0x148]
call fcn.140001df0
mov dword [rbp + 8], 0x7fa
lea rdx, [rbp + 0x3c0]
lea rcx, [rbp + 0x640]
call fcn.14004ea00
nop
mov rdx, qword [rbp + 0x3d8]
cmp rdx, 0x10
jb 0x1400036c0
inc rdx
mov rcx, qword [rbp + 0x3c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400036bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003fbe
call fcn.1400763ac
movdqa xmm0, xmmword [0x1400b3890]
movdqu xmmword [rbp + 0x3d0], xmm0
mov byte [rbp + 0x3c0], 0
lea rax, [rbp + 0x1c8]
mov qword [rbp + 0x20], rax
movabs rax, 0xf3966af798a71160
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x460], rax
movabs rax, 0x1ed34633cb07710b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x468], rax
movabs rax, 0xe0bdfde46ad9e2b8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x470], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x478], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x8a0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x8a8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x8b0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x8b8], rax
vmovdqu ymm0, ymmword [rbp + 0x460]
vpxor ymm1, ymm0, ymmword [rbp + 0x8a0]
vmovdqa ymmword [rbp + 0x460], ymm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x1c8], xmm0
mov qword [rbp + 0x1d8], r13
mov qword [rbp + 0x1e0], r13
lea rax, [rbp + 0x460]
mov r8, rdi
vzeroupper
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400037c0
lea rdx, [rbp + 0x460]
lea rcx, [rbp + 0x1c8]
call fcn.140001c40
lea rax, [rbp + 0x1c8]
mov qword [rbp + 0x10], rax
movabs rax, 0xc49446c5a886297b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x600], rax
movabs rax, 0x23fb5a04fb375138
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x608], rax
movabs rax, 0x93c4aeb82496ab89
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x610], rax
movabs rax, 0x735e4d039a45e8ba
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x618], rax
movabs rcx, 0x8576e50694d3aa07
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x620], rax
movabs rdx, 0xec7b8f1bcf19c9f8
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x628], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x800], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x808], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x810], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x818], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x820], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x828], rax
vmovdqu ymm0, ymmword [rbp + 0x600]
vpxor ymm1, ymm0, ymmword [rbp + 0x800]
vmovdqa ymmword [rbp + 0x600], ymm1
vmovdqa xmm0, xmmword [rbp + 0x620]
vpxor xmm0, xmm0, xmmword [rbp + 0x820]
vmovdqa xmmword [rbp + 0x620], xmm0
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x128], xmm0
mov qword [rbp + 0x138], r13
mov qword [rbp + 0x140], r13
lea rax, [rbp + 0x600]
mov r8, rdi
vzeroupper
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140003930
lea rdx, [rbp + 0x600]
lea rcx, [rbp + 0x128]
call fcn.140001c40
lea rax, [rbp + 0x128]
mov qword [rbp + 0x20], rax
mov dword [rbp + 0x3c], 0x200
lea r8, [rbp + 0x1c8]
cmp qword [rbp + 0x1e0], 0x10
cmovae r8, qword [rbp + 0x1c8]
lea rdx, [rbp + 0x128]
cmp qword [rbp + 0x140], 0x10
cmovae rdx, qword [rbp + 0x128]
lea rax, [rbp + 0x3c]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x10c0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
mov rcx, 0xffffffff80000002
mov r9d, 2
call qword [sym.imp.ADVAPI32.dll_RegGetValueA]
test eax, eax
jne 0x1400039f8
cmp dword [rbp + 0x3c], eax
je 0x1400039f8
xorps xmm0, xmm0
movups xmmword [rbp + 0x3e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3f0], xmm1
lea rax, [rbp + 0x10c0]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x1400039e2
lea rdx, [rbp + 0x10c0]
jmp 0x140003a86
movabs rax, 0x81c60792ec95477d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x370], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x378], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
movdqa xmm0, xmmword [rbp + 0x370]
pxor xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x370], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x3e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3f0], xmm1
lea rax, [rbp + 0x370]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140003a75
lea rdx, [rbp + 0x370]
lea rcx, [rbp + 0x3e0]
call fcn.140001c40
nop
lea rcx, [rbp + 0x128]
call fcn.140001df0
nop
lea rcx, [rbp + 0x1c8]
call fcn.140001df0
mov dword [rbp + 8], 0x1ffa
lea rdx, [rbp + 0x3e0]
lea rcx, [rbp + 0x640]
call fcn.14004ea00
nop
mov rdx, qword [rbp + 0x3f8]
cmp rdx, 0x10
jb 0x140003b08
inc rdx
mov rcx, qword [rbp + 0x3e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003b03
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003fc4
call fcn.1400763ac
movdqa xmm0, xmmword [0x1400b3890]
movdqu xmmword [rbp + 0x3f0], xmm0
mov byte [rbp + 0x3e0], 0
lea rax, [rbp + 0xe8]
mov qword [rbp + 0x20], rax
movabs rax, 0xf3a768d089a70971
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x480], rax
movabs rax, 0x7d17d23c7004500
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x488], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x490], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x498], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x880], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x888], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x890], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x898], rax
vmovdqu ymm0, ymmword [rbp + 0x480]
vpxor ymm1, ymm0, ymmword [rbp + 0x880]
vmovdqa ymmword [rbp + 0x480], ymm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0xe8], xmm0
mov qword [rbp + 0xf8], r13
mov qword [rbp + 0x100], r13
lea rax, [rbp + 0x480]
mov r8, rdi
vzeroupper
inc r8
cmp byte [rax + r8], 0
jne 0x140003bf5
lea rdx, [rbp + 0x480]
lea rcx, [rbp + 0xe8]
call fcn.140001c40
lea rax, [rbp + 0xe8]
mov qword [rbp + 0x10], rax
movabs rax, 0xc49446c5a886297b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x500], rax
movabs rax, 0x23fb5a04fb375138
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x508], rax
movabs rax, 0x93c4aeb82496ab89
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x510], rax
movabs rax, 0x735e4d039a45e8ba
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x518], rax
movabs rcx, 0x8576e50694d3aa07
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x520], rax
movabs rdx, 0xec7b8f1bcf19c9f8
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x528], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x7c0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x7c8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x7d0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x7d8], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x7e0], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x7e8], rax
vmovdqu ymm0, ymmword [rbp + 0x500]
vpxor ymm1, ymm0, ymmword [rbp + 0x7c0]
vmovdqa ymmword [rbp + 0x500], ymm1
vmovdqa xmm0, xmmword [rbp + 0x520]
vpxor xmm0, xmm0, xmmword [rbp + 0x7e0]
vmovdqa xmmword [rbp + 0x520], xmm0
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], r13
mov qword [rbp + 0x120], r13
lea rax, [rbp + 0x500]
mov r8, rdi
vzeroupper
inc r8
cmp byte [rax + r8], 0
jne 0x140003d64
lea rdx, [rbp + 0x500]
lea rcx, [rbp + 0x108]
call fcn.140001c40
lea rax, [rbp + 0x108]
mov qword [rbp + 0x20], rax
mov dword [rbp + 0x40], 0x200
lea r8, [rbp + 0xe8]
cmp qword [rbp + 0x100], 0x10
cmovae r8, qword [rbp + 0xe8]
lea rdx, [rbp + 0x108]
cmp qword [rbp + 0x120], 0x10
cmovae rdx, qword [rbp + 0x108]
lea rax, [rbp + 0x40]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x12c0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
mov rcx, 0xffffffff80000002
mov r9d, 2
call qword [sym.imp.ADVAPI32.dll_RegGetValueA]
test eax, eax
jne 0x140003e28
cmp dword [rbp + 0x40], eax
je 0x140003e28
xorps xmm0, xmm0
movups xmmword [rbp + 0x400], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x410], xmm1
lea rax, [rbp + 0x12c0]
inc rdi
cmp byte [rax + rdi], 0
jne 0x140003e13
lea rdx, [rbp + 0x12c0]
jmp 0x140003eb2
movabs rax, 0x81c60792ec95477d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x380], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x388], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x270], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x278], rax
movdqa xmm0, xmmword [rbp + 0x380]
pxor xmm0, xmmword [rbp + 0x270]
movdqa xmmword [rbp + 0x380], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x400], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x410], xmm1
lea rax, [rbp + 0x380]
inc rdi
cmp byte [rax + rdi], 0
jne 0x140003ea2
lea rdx, [rbp + 0x380]
mov r8, rdi
lea rcx, [rbp + 0x400]
call fcn.140001c40
nop
lea rcx, [rbp + 0x108]
call fcn.140001df0
nop
lea rcx, [rbp + 0xe8]
call fcn.140001df0
nop
lea rdx, [rbp + 0x400]
lea rcx, [rbp + 0x640]
call fcn.14004ea00
nop
mov rdx, qword [rbp + 0x418]
cmp rdx, 0x10
jb 0x140003f2d
inc rdx
mov rcx, qword [rbp + 0x400]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003f28
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003f82
call fcn.1400763ac
lea rcx, [rbp + 0x640]
call fcn.14004de20
mov rbx, rax
mov rdx, rax
mov rcx, r12
call fcn.14004e590
mov rcx, rbx
call fcn.1400763ac
mov rax, r12
mov rcx, qword [rbp + 0x14c0]
xor rcx, rsp
call fcn.140076350
lea r11, [rsp + 0x1530]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14008a3e4
nop
call fcn.14008a3e4
nop
call fcn.14008a3e4
nop
call fcn.14008a3e4
nop
call fcn.140001ee0
nop
call fcn.14008a3e4
nop
call fcn.140001ee0
nop
call fcn.14008a3e4
nop
call fcn.140001ee0
nop
call fcn.14008a3e4
int3
call fcn.14008a3e4
int3
call fcn.14008a3e4
int3