Function at 0x140035610
Capabilities:
Query environment variable

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xa08]
sub rsp, 0xae0
mov qword [rbp - 0x68], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x140325af8]
xor rax, rsp
mov qword [rbp + 0x9d0], rax
mov r13, rcx
xor esi, esi
mov r12d, esi
mov dword [rsp + 0x50], esi
mov rcx, qword [rcx + 0x70]
test rcx, rcx
je 0x1400356a5
lea rdx, [r13 + 0x78]
cmp qword [rdx + 0x18], 8
jb 0x140035672
mov rdx, qword [rdx]
mov rax, qword [rcx]
lea r8, str.Entry:_RegistryUtilities::EnumerateUserHives__
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 5
mov r9d, 0xbd0
lea r8, str.d:jenkinsworkspace_n_mbcommon_srcmbcommon_registryutilities.cpp
lea rdx, str.mb::common::system::RegistryUtilities::EnumerateUserHives
call qword [rax + 0x20]
mov dword [rbp + 0x40], esi
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xe8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf8], xmm1
movdqu xmmword [rbp + 0x108], xmm0
movdqa xmm0, xmmword [0x1402e5c30]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], si
mov rax, qword [r13]
lea r8, [rbp - 0x30]
lea rdx, [0x140326bb0]
mov rcx, r13
call qword [rax + 0x30]
mov rax, qword [r13]
mov qword [rsp + 0x40], rsi
lea rcx, [rbp + 0x40]
mov qword [rsp + 0x38], rcx
mov byte [rsp + 0x30], 1
mov ecx, 1
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], ecx
lea r9, [rbp + 0xe8]
lea r8, [rbp - 0x28]
mov rdx, qword [rbp - 0x30]
mov rcx, r13
call qword [rax + 0x198]
mov rax, qword [rbp + 0xf0]
cmp qword [rbp + 0xe8], rax
jne 0x1400357e6
mov rcx, qword [r13 + 0x70]
test rcx, rcx
je 0x1400357df
lea rdx, [r13 + 0x78]
cmp qword [rdx + 0x18], 8
jb 0x140035757
mov rdx, qword [rdx]
mov rax, qword [rcx]
mov r10, qword [rax + 0x20]
mov eax, dword [rbp + 0x40]
mov dword [rsp + 0x38], eax
lea rax, str.User_Profile_list_is_empty__The_HKCU_key_paths_will_not_be_expanded_to_any_HKU_paths._Error:__i
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 2
mov r9d, 0xbdb
lea r8, str.d:jenkinsworkspace_n_mbcommon_srcmbcommon_registryutilities.cpp
lea rdx, str.mb::common::system::RegistryUtilities::EnumerateUserHives
call r10
mov rcx, qword [r13 + 0x70]
test rcx, rcx
je 0x1400357df
lea r9, [r13 + 0x78]
cmp qword [r9 + 0x18], 8
jb 0x1400357ac
mov r9, qword [r9]
mov rax, qword [rcx]
lea r10, str.Exit:_false____RegistryUtilities::EnumerateUserHives__
mov qword [rsp + 0x30], r10
mov qword [rsp + 0x28], r9
mov dword [rsp + 0x20], 5
mov r9d, 0xbdc
lea r8, str.d:jenkinsworkspace_n_mbcommon_srcmbcommon_registryutilities.cpp
lea rdx, str.mb::common::system::RegistryUtilities::EnumerateUserHives
call qword [rax + 0x20]
xor bl, bl
jmp 0x140036ee5
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x70], xmm0
call fcn.14003e210
mov qword [rbp + 0x70], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], rsi
mov r14, qword [rbp + 0xe8]
mov r15, qword [rbp + 0xf0]
mov r9, 0xffffffffffffffff
cmp r14, r15
je 0x140036074
movabs r8, 0x7fffffffffffffff
movabs rcx, 0x7ffffffffffffffe
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], rsi
mov rdi, qword [r14 + 0x10]
mov rsi, r14
cmp qword [r14 + 0x18], 8
jb 0x140035854
mov rsi, qword [r14]
cmp rdi, 8
jae 0x140035872
movups xmm0, xmmword [rsi]
movups xmmword [rbp], xmm0
mov qword [rbp + 0x18], 7
lea rcx, [rbp]
jmp 0x1400358fe
mov rbx, rdi
or rbx, 7
cmp rbx, rcx
cmova rbx, rcx
lea rax, [rbx + 1]
lea rdx, [rax + rax]
cmp rax, r8
jbe 0x140035892
mov rdx, r9
jmp 0x14003589b
cmp rdx, 0x1000
jb 0x1400358c5
lea rcx, [rdx + 0x27]
cmp rcx, rdx
cmovbe rcx, r9
call fcn.1401d946c
mov rcx, rax
test rax, rax
je 0x140036f70
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400358d6
test rdx, rdx
je 0x1400358d4
mov rcx, rdx
call fcn.1401d946c
jmp 0x1400358d6
xor eax, eax
mov qword [rbp], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.1401db870
mov qword [rbp + 0x18], rbx
lea rcx, [rbp]
cmp rbx, 8
cmovae rcx, qword [rbp]
mov qword [rbp + 0x10], rdi
xor bl, bl
lea rdx, [rbp - 0x60]
call qword [sym.imp.ADVAPI32.dll_ConvertStringSidToSidW]
test eax, eax
je 0x140035952
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.ADVAPI32.dll_GetSidSubAuthorityCount]
test rax, rax
je 0x140035948
movzx edx, byte [rax]
dec edx
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.ADVAPI32.dll_GetSidSubAuthority]
test rax, rax
je 0x140035948
xor cl, cl
movzx ebx, cl
cmp dword [rax], 0x3e8
mov eax, 1
cmovae ebx, eax
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x140035992
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003598d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036f76
call fcn.1401d94a8
test bl, bl
jne 0x1400359d9
mov rax, qword [rbp + 0xd8]
cmp qword [rbp + 0xe0], rax
je 0x1400359c0
mov rdx, r14
mov rcx, rax
call fcn.14000ca20
add qword [rbp + 0xd8], 0x20
xor esi, esi
jmp 0x14003605f
mov r8, r14
mov rdx, rax
lea rcx, [rbp + 0xd0]
call fcn.14000f7b0
xor esi, esi
jmp 0x14003605f
xor eax, eax
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x98], 7
mov word [rbp + 0x80], ax
mov dword [rbp - 8], eax
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], 7
mov word [rbp - 0x50], ax
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], 7
mov word [rbp], ax
or r12d, 1
mov dword [rsp + 0x50], r12d
mov rdx, qword [0x140326bc0]
inc rdx
lea rcx, [rbp]
call fcn.14000a270
lea r9, [0x140326bb0]
cmp qword [0x140326bc8], 8
cmovae r9, qword [0x140326bb0]
mov rdi, qword [0x140326bc0]
mov rsi, qword [rbp + 0x10]
mov rcx, qword [rbp + 0x18]
mov rax, rcx
sub rax, rsi
cmp rdi, rax
ja 0x140035a95
lea rax, [rdi + rsi]
mov qword [rbp + 0x10], rax
lea rbx, [rbp]
cmp rcx, 8
cmovae rbx, qword [rbp]
lea r8, [rdi + rdi]
lea rcx, [rbx + rsi*2]
mov rdx, r9
call fcn.1401db870
lea rax, [rsi + rdi]
xor esi, esi
mov word [rbx + rax*2], si
jmp 0x140035aab
mov qword [rsp + 0x20], rdi
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp]
call fcn.14000ac60
xor esi, esi
mov rcx, qword [rbp + 0x10]
mov rdx, qword [rbp + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x140035af5
lea rdi, [rcx + 1]
mov qword [rbp + 0x10], rdi
lea rbx, [rbp]
cmp rdx, 8
cmovae rbx, qword [rbp]
lea rcx, [rbx + rcx*2]
mov r8d, 2
lea rdx, [0x1402d4ac8]
call fcn.1401db870
mov word [rbx + rdi*2], si
mov edi, 1
jmp 0x140035b14
mov edi, 1
mov qword [rsp + 0x20], rdi
lea r9, [0x1402d4ac8]
xor r8d, r8d
mov edx, edi
lea rcx, [rbp]
call fcn.14000ac60
mov rdx, r14
cmp qword [r14 + 0x18], 8
jb 0x140035b21
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
lea rcx, [rbp]
call fcn.14000a750
mov qword [rbp + 0x58], rsi
mov qword [rbp + 0x60], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x58], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
or r12d, 2
mov dword [rsp + 0x50], r12d
mov rax, qword [r13]
lea r8, [rbp - 0x58]
lea rdx, [rbp + 0x48]
mov rcx, r13
call qword [rax + 0x30]
nop
mov rdx, qword [rbp + 0x60]
cmp rdx, 8
jb 0x140035bb0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035bab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036f7c
call fcn.1401d94a8
mov qword [rbp + 0x58], rsi
mov qword [rbp + 0x60], 7
mov word [rbp + 0x48], si
and r12d, 0xfffffffe
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x140035c04
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035bff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036f82
call fcn.1401d94a8
mov qword [rbp + 0xb0], rsi
mov qword [rbp + 0xb8], 7
mov word [rbp + 0xa0], si
lea r9, str.ProfileImagePath
mov edx, 0x10
lea rcx, [rbp + 0xa0]
call fcn.14000c3b0
nop
mov rax, qword [r13]
mov qword [rsp + 0x40], rsi
mov byte [rsp + 0x38], 1
mov dword [rsp + 0x30], edi
lea rcx, [rbp - 8]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp + 0x80]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0xa0]
lea r8, [rbp - 0x50]
mov rdx, qword [rbp - 0x58]
mov rcx, r13
call qword [rax + 0x1b0]
nop
mov rdx, qword [rbp + 0xb8]
cmp rdx, 8
jb 0x140035cbc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035cb7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036f88
call fcn.1401d94a8
mov r10, qword [r13 + 0x40]
lea rcx, [rbp + 0x80]
cmp qword [rbp + 0x98], 8
cmovae rcx, qword [rbp + 0x80]
mov rax, qword [r10]
mov r11, qword [rax]
lea rbx, vtable.mb::common::system::Win32.0
cmp rax, rbx
jne 0x140036f40
mov r8d, 0x400
lea rdx, [rbp + 0x1d0]
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
test eax, eax
jne 0x140035da6
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x140035d48
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035d43
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036f8e
call fcn.1401d94a8
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], 7
mov word [rbp - 0x50], si
mov rdx, qword [rbp + 0x98]
cmp rdx, 8
jb 0x14003605f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003605a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036f34
jmp 0x14003605a
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], 7
mov word [rbp], si
lea rax, [rbp + 0x1d0]
mov rdx, 0xffffffffffffffff
inc rdx
cmp word [rax + rdx*2], 0
jne 0x140035dc4
lea rcx, [rbp]
cmp rdx, 7
ja 0x140035dfd
mov qword [rbp + 0x10], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
lea rdx, [rbp + 0x1d0]
call fcn.1401db870
mov word [rbp + rbx], si
lea rbx, vtable.mb::common::system::Win32.0
jmp 0x140035e0a
lea r9, [rbp + 0x1d0]
call fcn.14000c3b0
nop
mov qword [rbp + 0xb0], rsi
mov qword [rbp + 0xb8], 7
mov word [rbp + 0xa0], si
lea r9, str.ntuser.dat
mov edx, 0xa
lea rcx, [rbp + 0xa0]
call fcn.14000c3b0
nop
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], si
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0xa0]
lea rcx, [rbp]
call fcn.14000d0f0
mov rdx, rax
lea rcx, [rbp + 0x1b0]
call fcn.14000ca20
or r12d, 4
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x140035eb3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035eae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036f94
call fcn.1401d94a8
lea rcx, [rbp]
call fcn.14000cdc0
movups xmm0, xmmword [rbp + 0x1b0]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rbp + 0x1c0]
movups xmmword [rbp + 0x10], xmm1
mov rdx, qword [rbp + 0xb8]
cmp rdx, 8
jb 0x140035f18
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035f13
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036f9a
call fcn.1401d94a8
mov r10, qword [r13 + 0x40]
lea rcx, [rbp]
cmp qword [rbp + 0x18], 8
cmovae rcx, qword [rbp]
mov rax, qword [r10]
mov r11, qword [rax + 0x10]
cmp rax, rbx
jne 0x140036f5b
lea r8, [rbp + 0x48]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
test eax, eax
je 0x140035fce
mov eax, dword [rbp + 0x64]
mov dword [rbp + 0xcc], eax
mov eax, dword [rbp + 0x68]
mov dword [rbp + 0xc8], eax
cmp qword [rbp + 0xc8], 0x1e00000
jae 0x140035fce
mov eax, dword [rbp + 0x60]
mov dword [rsp + 0x64], eax
mov eax, dword [rbp + 0x5c]
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0xa0], rax
mov rdx, r14
lea rcx, [rbp + 0xa8]
call fcn.14000ca20
or r12d, 8
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x70]
call fcn.14003f250
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x70]
call fcn.14003f2b0
nop
lea rcx, [rbp + 0xa8]
call fcn.14000cdc0
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x14003600f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036009
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036fa0
call fcn.1401d94a8
nop
lea rcx, [rbp - 0x50]
call fcn.14000cdc0
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 8
jb 0x14003605f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003605a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036fa6
call fcn.1401d94a8
add r14, 0x20
cmp r14, r15
je 0x140036074
mov r9, 0xffffffffffffffff
jmp 0x140035827
mov r8, qword [rbp + 0xd8]
mov rdx, qword [rbp + 0xd0]
lea rcx, [rbp + 0xe8]
call fcn.14003eef0
mov rbx, qword [rbp + 0x70]
cmp rbx, qword [rbx]
je 0x1400361da
mov r9, qword [rbp + 0xf0]
mov rax, rbx
cmp byte [rbx + 0x19], 0
je 0x1400360b1
mov rax, qword [rbx + 0x10]
jmp 0x1400360fd
mov rcx, qword [rbx]
cmp byte [rcx + 0x19], 0
je 0x1400360e1
mov rcx, qword [rbx + 8]
cmp byte [rcx + 0x19], 0
jne 0x1400360d6
cmp rax, qword [rcx]
jne 0x1400360d6
mov rax, rcx
mov rcx, qword [rcx + 8]
cmp byte [rcx + 0x19], 0
je 0x1400360c4
cmp byte [rax + 0x19], 0
jne 0x1400360fd
mov rax, rcx
jmp 0x1400360fd
mov rax, rcx
mov rcx, qword [rcx + 0x10]
cmp byte [rcx + 0x19], 0
jne 0x1400360fd
nop
mov rax, rcx
mov rcx, qword [rcx + 0x10]
cmp byte [rcx + 0x19], 0
je 0x1400360f0
lea r8, [rax + 0x28]
cmp qword [rbp + 0xf8], r9
je 0x140036129
mov rdx, r8
mov rcx, r9
call fcn.14000ca20
mov r9, qword [rbp + 0xf0]
add r9, 0x20
mov qword [rbp + 0xf0], r9
jmp 0x14003613f
mov rdx, r9
lea rcx, [rbp + 0xe8]
call fcn.14000f7b0
mov r9, qword [rbp + 0xf0]
mov rcx, r9
sub rcx, qword [rbp + 0xe8]
sar rcx, 5
mov rax, qword [rbp + 0xd8]
sub rax, qword [rbp + 0xd0]
sar rax, 5
add rax, 0x1f4
cmp rcx, rax
jae 0x1400361da
cmp byte [rbx + 0x19], 0
je 0x140036176
mov rbx, qword [rbx + 0x10]
jmp 0x1400361cd
mov rax, qword [rbx]
cmp byte [rax + 0x19], 0
je 0x1400361ad
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x1400361a2
nop dword [rax]
cmp rbx, qword [rax]
jne 0x1400361a2
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x140036190
cmp byte [rbx + 0x19], 0
jne 0x1400361cd
mov rbx, rax
jmp 0x1400361cd
mov rbx, rax
mov rax, qword [rax + 0x10]
cmp byte [rax + 0x19], 0
jne 0x1400361cd
nop word [rax + rax]
mov rbx, rax
mov rax, qword [rax + 0x10]
cmp byte [rax + 0x19], 0
je 0x1400361c0
mov rax, qword [rbp + 0x70]
cmp rbx, qword [rax]
jne 0x1400360a2
call fcn.14001baf0
mov rcx, rax
call fcn.140061d60
mov r14d, eax
mov dword [rbp - 0x60], eax
lea rcx, [r13 + 0x18]
mov qword [rsp + 0x68], rcx
call fcn.1400132b0
nop
mov rdi, qword [rbp + 0xe8]
mov rsi, qword [rbp + 0xf0]
mov qword [rsp + 0x60], rsi
cmp rdi, rsi
je 0x140036e17
xor r15d, r15d
nop dword [rax + rax]
mov ebx, r12d
mov qword [rbp + 0xb0], r15
mov qword [rbp + 0xb8], 7
mov word [rbp + 0xa0], r15w
mov dword [rbp + 0xc8], r15d
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], 7
mov word [rbp - 0x50], r15w
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r15w
or r12d, 0x10
mov dword [rsp + 0x50], r12d
mov rdx, qword [0x140326bc0]
inc rdx
lea rcx, [rbp + 0x20]
call fcn.14000a270
lea rdx, [0x140326bb0]
cmp qword [0x140326bc8], 8
cmovae rdx, qword [0x140326bb0]
mov r8, qword [0x140326bc0]
lea rcx, [rbp + 0x20]
call fcn.14000a750
mov r8d, 1
lea rdx, [0x1402d4ac8]
lea rcx, [rbp + 0x20]
call fcn.14000a750
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x1400362cc
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
lea rcx, [rbp + 0x20]
call fcn.14000a750
mov qword [rbp + 0x58], r15
mov qword [rbp + 0x60], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x58], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
mov r12d, ebx
or r12d, 0x30
mov dword [rsp + 0x50], r12d
mov rax, qword [r13]
lea r8, [rbp - 0x58]
lea rdx, [rbp + 0x48]
mov rcx, r13
call qword [rax + 0x30]
nop
mov rdx, qword [rbp + 0x60]
cmp rdx, 8
jb 0x14003635f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003635a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036ff0
call fcn.1401d94a8
mov qword [rbp + 0x58], r15
mov qword [rbp + 0x60], 7
mov word [rbp + 0x48], r15w
and r12d, 0xffffffef
mov dword [rsp + 0x50], r12d
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x1400363b9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400363b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036f2e
call fcn.1401d94a8
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r15w
lea r9, str.ProfileImagePath
mov edx, 0x10
lea rcx, [rbp + 0x20]
call fcn.14000c3b0
nop
mov rax, qword [r13]
mov qword [rsp + 0x40], r15
mov byte [rsp + 0x38], 1
mov ebx, 1
mov dword [rsp + 0x30], ebx
lea rcx, [rbp + 0xc8]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp + 0xa0]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x20]
lea r8, [rbp - 0x50]
mov rdx, qword [rbp - 0x58]
mov rcx, r13
call qword [rax + 0x1b0]
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x140036465
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036460
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036f3a
call fcn.1401d94a8
mov r10, qword [r13 + 0x40]
lea rcx, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 8
cmovae rcx, qword [rbp + 0xa0]
mov rax, qword [r10]
mov r11, qword [rax]
lea rdx, vtable.mb::common::system::Win32.0
cmp rax, rdx
jne 0x140036fac
mov r8d, 0x400
lea rdx, [rbp + 0x1d0]
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
test eax, eax
jne 0x1400364c8
lea rcx, [rbp - 0x50]
call fcn.14000cdc0
nop
lea rcx, [rbp + 0xa0]
call fcn.14000cdc0
jmp 0x140036dfc
mov qword [rbp + 0x1c0], r15
mov qword [rbp + 0x1c8], 7
mov word [rbp + 0x1b0], r15w
lea rax, [rbp + 0x1d0]
mov rdx, 0xffffffffffffffff
inc rdx
cmp word [rax + rdx*2], 0
jne 0x1400364f0
lea rcx, [rbp + 0x1b0]
cmp rdx, 7
ja 0x140036531
mov qword [rbp + 0x1c0], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
lea rdx, [rbp + 0x1d0]
call fcn.1401db870
mov word [rbp + rbx + 0x1b0], r15w
mov ebx, 1
jmp 0x14003653e
lea r9, [rbp + 0x1d0]
call fcn.14000c3b0
nop
mov qword [rbp + 0x130], r15
mov qword [rbp + 0x138], 7
mov word [rbp + 0x120], r15w
lea rdx, [0x1402d4824]
lea rcx, [rbp + 0x120]
call fcn.140007e60
nop
mov qword [rbp + 0x140], r15
mov qword [rbp + 0x158], r15
mov qword [rbp + 0x160], 7
mov word [rbp + 0x148], r15w
lea rdx, [0x1402d4824]
lea rcx, [rbp + 0x148]
call fcn.140007e60
nop
xor eax, eax
mov qword [rbp + 0x168], rax
mov dword [rbp + 0x170], r15d
mov qword [rbp + 0x178], r15
mov qword [rbp + 0x190], r15
mov qword [rbp + 0x198], 7
mov word [rbp + 0x180], r15w
lea rdx, [0x1402d4824]
lea rcx, [rbp + 0x180]
call fcn.140007e60
xor eax, eax
mov qword [rbp + 0x1a0], rax
mov dword [rbp + 0x1a8], r15d
lea rax, [rbp + 0x120]
cmp rax, rdi
je 0x14003661e
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x14003660e
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
lea rcx, [rbp + 0x120]
call fcn.14000c510
mov dword [rbp - 8], ebx
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x18], 7
mov word [rbp], r15w
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r15w
lea rdx, str.ntuser.dat
lea rcx, [rbp + 0x20]
call fcn.140007e60
nop
lea r8, [rbp]
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x1b0]
call fcn.14000d0f0
nop
lea rcx, [rbp + 0x20]
call fcn.14000cdc0
mov rcx, qword [r13 + 0x60]
mov rax, qword [rcx]
mov r10, qword [rax + 0x10]
lea rbx, vtable.mb::common::io::FileSystemUtilsWrapper.0
cmp rax, rbx
jne 0x140036fc7
xor r8d, r8d
lea rdx, [rbp - 8]
lea rcx, [rbp]
call fcn.1400519a0
test al, al
je 0x1400366aa
test dword [rbp - 8], 0xfffffffb
je 0x1400366e4
mov r8, rdi
cmp qword [rdi + 0x18], 8
jb 0x1400366b7
mov r8, qword [rdi]
cmp qword [rdi + 0x10], 8
jne 0x140036702
mov edx, 8
lea rax, str.S_1_5_18
mov rcx, rax
sub r8, rax
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x140036702
add rcx, 2
sub rdx, 1
jne 0x1400366d0
lea rdx, [rbp]
cmp qword [rbp + 0x18], 8
cmovae rdx, qword [rbp]
mov r8, qword [rbp + 0x10]
lea rcx, [rbp + 0x148]
call fcn.14000c510
mov eax, 1
mov dword [rbp - 8], eax
mov qword [rbp + 0x90], r15
mov qword [rbp + 0x98], 7
mov word [rbp + 0x80], r15w
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r15w
lea rdx, str.Local_SettingsApplication_DataMicrosoftWindowsUsrClass.dat
cmp r14d, 4
lea rax, str.AppDataLocalMicrosoftWindowsUsrClass.dat
cmovae rdx, rax
lea rcx, [rbp + 0x20]
call fcn.140007e60
nop
lea r8, [rbp + 0x80]
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x1b0]
call fcn.14000d0f0
nop
lea rcx, [rbp + 0x20]
call fcn.14000cdc0
mov rcx, qword [r13 + 0x60]
mov rax, qword [rcx]
mov r10, qword [rax + 0x10]
cmp rax, rbx
jne 0x140036fda
xor r8d, r8d
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x80]
call fcn.1400519a0
test al, al
je 0x1400367d4
test dword [rbp - 8], 0xfffffffb
jne 0x1400367d4
lea rdx, [rbp + 0x80]
cmp qword [rbp + 0x98], 8
cmovae rdx, qword [rbp + 0x80]
mov r8, qword [rbp + 0x90]
lea rcx, [rbp + 0x180]
call fcn.14000c510
mov r8, rdi
mov r14, qword [rdi + 0x18]
cmp r14, 8
jb 0x1400367e4
mov r8, qword [rdi]
mov r12, qword [rdi + 0x10]
cmp r12, 8
jne 0x1400369c5
mov rdx, r12
lea rax, str.S_1_5_18
mov rcx, rax
sub r8, rax
movzx eax, word [rcx]
cmp word [rcx + r8], ax
jne 0x1400369c5
add rcx, 2
sub rdx, 1
jne 0x140036802
mov rcx, qword [r13 + 0x70]
test rcx, rcx
je 0x140036875
mov r8, rdi
cmp r14, 8
jb 0x14003682f
mov r8, qword [rdi]
lea rdx, [r13 + 0x78]
cmp qword [rdx + 0x18], 8
jb 0x14003683d
mov rdx, qword [rdx]
mov rax, qword [rcx]
mov qword [rsp + 0x38], r8
lea r8, str.Adding_default_profile___ls_
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 5
mov r9d, 0xc3e
lea r8, str.d:jenkinsworkspace_n_mbcommon_srcmbcommon_registryutilities.cpp
lea rdx, str.mb::common::system::RegistryUtilities::EnumerateUserHives
call qword [rax + 0x20]
mov dword [rbp + 0x170], 2
mov rdx, rdi
lea rcx, [r13 + 8]
call fcn.14003ec00
mov rbx, rax
cmp rax, qword [r13 + 8]
je 0x1400368c4
lea r8, [rax + 0x20]
cmp qword [rax + 0x38], 8
jb 0x1400368a3
mov r8, qword [rax + 0x20]
mov rcx, rdi
cmp qword [rdi + 0x18], 8
jb 0x1400368b0
mov rcx, qword [rdi]
mov r9, qword [rax + 0x30]
mov rdx, qword [rdi + 0x10]
call fcn.14000f990
shr eax, 0x1f
test al, al
je 0x1400368f6
mov qword [rsp + 0x58], rdi
lea r8, [rsp + 0x58]
lea rcx, [r13 + 8]
call fcn.14003faa0
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rsp + 0x70]
lea rcx, [r13 + 8]
call fcn.14003fb20
mov rbx, qword [rsp + 0x70]
add rbx, 0x40
lea rax, [rbp + 0x120]
cmp rbx, rax
je 0x14003692c
lea rdx, [rbp + 0x120]
cmp qword [rbp + 0x138], 8
cmovae rdx, qword [rbp + 0x120]
mov r8, qword [rbp + 0x130]
mov rcx, rbx
call fcn.14000c510
mov rax, qword [rbp + 0x140]
mov qword [rbx + 0x20], rax
lea rcx, [rbx + 0x28]
lea rax, [rbp + 0x148]
cmp rcx, rax
je 0x14003696a
lea rdx, [rbp + 0x148]
cmp qword [rbp + 0x160], 8
cmovae rdx, qword [rbp + 0x148]
mov r8, qword [rbp + 0x158]
call fcn.14000c510
mov rax, qword [rbp + 0x168]
mov qword [rbx + 0x48], rax
mov eax, dword [rbp + 0x170]
mov dword [rbx + 0x50], eax
mov rax, qword [rbp + 0x178]
mov qword [rbx + 0x58], rax
lea rcx, [rbx + 0x60]
lea rax, [rbp + 0x180]
cmp rcx, rax
je 0x140036d8d
lea rdx, [rbp + 0x180]
cmp qword [rbp + 0x198], 8
cmovae rdx, qword [rbp + 0x180]
mov r8, qword [rbp + 0x190]
call fcn.14000c510
jmp 0x140036d8d
cmp qword [rbp + 0x158], 0
jne 0x140036a3d
cmp qword [rbp + 0x190], 0
jne 0x140036a3d
mov rcx, qword [r13 + 0x70]
test rcx, rcx
je 0x140036dac
mov r8, rdi
cmp r14, 8
jb 0x1400369f2
mov r8, qword [rdi]
lea rdx, [r13 + 0x78]
cmp qword [rdx + 0x18], 8
jb 0x140036a00
mov rdx, qword [rdx]
mov rax, qword [rcx]
mov qword [rsp + 0x38], r8
lea r8, str.No_profile_found_for__ls
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 5
mov r9d, 0xc54
lea r8, str.d:jenkinsworkspace_n_mbcommon_srcmbcommon_registryutilities.cpp
lea rdx, str.mb::common::system::RegistryUtilities::EnumerateUserHives
call qword [rax + 0x20]
jmp 0x140036dac
mov rsi, qword [r13 + 8]
mov rdx, rdi
lea rcx, [r13 + 8]
call fcn.14003ec00
cmp rax, rsi
je 0x140036bf3
lea r8, [rax + 0x20]
cmp qword [rax + 0x38], 8
jb 0x140036a65
mov r8, qword [rax + 0x20]
mov rcx, rdi
cmp r14, 8
jb 0x140036a71
mov rcx, qword [rdi]
mov r9, qword [rax + 0x30]
mov rdx, r12
call fcn.14000f990
shr eax, 0x1f
test al, al
jne 0x140036bf3
mov rdx, rdi
lea rcx, [r13 + 8]
call fcn.14003ec00
mov rbx, rax
cmp rax, rsi
je 0x140036aca
lea r8, [rax + 0x20]
cmp qword [rax + 0x38], 8
jb 0x140036aab
mov r8, qword [rax + 0x20]
mov rcx, rdi
cmp r14, 8
jb 0x140036ab7
mov rcx, qword [rdi]
mov r9, qword [rax + 0x30]
mov rdx, r12
call fcn.14000f990
shr eax, 0x1f
test al, al
je 0x140036afc
mov qword [rsp + 0x58], rdi
lea r8, [rsp + 0x58]
lea rcx, [r13 + 8]
call fcn.14003faa0
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rsp + 0x78]
lea rcx, [r13 + 8]
call fcn.14003fb20
mov rbx, qword [rsp + 0x78]
cmp dword [rbx + 0x90], 3
jne 0x140036bf3
mov rdx, rdi
lea rcx, [r13 + 8]
call fcn.14003ec00
mov rbx, rax
cmp rax, qword [r13 + 8]
je 0x140036b4e
lea r8, [rax + 0x20]
cmp qword [rax + 0x38], 8
jb 0x140036b2d
mov r8, qword [rax + 0x20]
mov rcx, rdi
cmp qword [rdi + 0x18], 8
jb 0x140036b3a
mov rcx, qword [rdi]
mov r9, qword [rax + 0x30]
mov rdx, qword [rdi + 0x10]
call fcn.14000f990
shr eax, 0x1f
test al, al
je 0x140036b7e
mov qword [rsp + 0x58], rdi
lea r8, [rsp + 0x58]
lea rcx, [r13 + 8]
call fcn.14003faa0
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x80]
lea rcx, [r13 + 8]
call fcn.14003fb20
mov rbx, qword [rbp - 0x80]
lea rdx, [rbx + 0x40]
mov rax, qword [r13]
mov rcx, r13
call qword [rax + 0x278]
test al, al
jne 0x140036bf3
mov rcx, qword [r13 + 0x70]
test rcx, rcx
je 0x140036c4f
mov r8, rdi
cmp qword [rdi + 0x18], 8
jb 0x140036bad
mov r8, qword [rdi]
lea rdx, [r13 + 0x78]
cmp qword [rdx + 0x18], 8
jb 0x140036bbb
mov rdx, qword [rdx]
mov rax, qword [rcx]
mov qword [rsp + 0x38], r8
lea r8, str.Failed_to_unload_profile_for_SID__ls_before_replacing_it_with_new_enumerated_values
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 2
mov r9d, 0xc4b
lea r8, str.d:jenkinsworkspace_n_mbcommon_srcmbcommon_registryutilities.cpp
lea rdx, str.mb::common::system::RegistryUtilities::EnumerateUserHives
call qword [rax + 0x20]
mov rcx, qword [r13 + 0x70]
test rcx, rcx
je 0x140036c4f
mov r8, rdi
cmp qword [rdi + 0x18], 8
jb 0x140036c09
mov r8, qword [rdi]
lea rdx, [r13 + 0x78]
cmp qword [rdx + 0x18], 8
jb 0x140036c17
mov rdx, qword [rdx]
mov rax, qword [rcx]
mov qword [rsp + 0x38], r8
lea r8, str.Adding_offline_profile_for__ls
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 5
mov r9d, 0xc4f
lea r8, str.d:jenkinsworkspace_n_mbcommon_srcmbcommon_registryutilities.cpp
lea rdx, str.mb::common::system::RegistryUtilities::EnumerateUserHives
call qword [rax + 0x20]
mov rdx, rdi
lea rcx, [r13 + 8]
call fcn.14003ec00
mov rbx, rax
cmp rax, qword [r13 + 8]
je 0x140036c94
lea r8, [rax + 0x20]
cmp qword [rax + 0x38], 8
jb 0x140036c73
mov r8, qword [rax + 0x20]
mov rcx, rdi
cmp qword [rdi + 0x18], 8
jb 0x140036c80
mov rcx, qword [rdi]
mov r9, qword [rax + 0x30]
mov rdx, qword [rdi + 0x10]
call fcn.14000f990
shr eax, 0x1f
test al, al
je 0x140036cc4
mov qword [rsp + 0x58], rdi
lea r8, [rsp + 0x58]
lea rcx, [r13 + 8]
call fcn.14003faa0
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x78]
lea rcx, [r13 + 8]
call fcn.14003fb20
mov rbx, qword [rbp - 0x78]
add rbx, 0x40
lea rax, [rbp + 0x120]
cmp rbx, rax
je 0x140036cfa
lea rdx, [rbp + 0x120]
cmp qword [rbp + 0x138], 8
cmovae rdx, qword [rbp + 0x120]
mov r8, qword [rbp + 0x130]
mov rcx, rbx
call fcn.14000c510
mov rax, qword [rbp + 0x140]
mov qword [rbx + 0x20], rax
lea rcx, [rbx + 0x28]
lea rax, [rbp + 0x148]
cmp rcx, rax
je 0x140036d38
lea rdx, [rbp + 0x148]
cmp qword [rbp + 0x160], 8
cmovae rdx, qword [rbp + 0x148]
mov r8, qword [rbp + 0x158]
call fcn.14000c510
mov rax, qword [rbp + 0x168]
mov qword [rbx + 0x48], rax
mov eax, dword [rbp + 0x170]
mov dword [rbx + 0x50], eax
mov rax, qword [rbp + 0x178]
mov qword [rbx + 0x58], rax
lea rcx, [rbx + 0x60]
lea rax, [rbp + 0x180]
cmp rcx, rax
je 0x140036d8a
lea rdx, [rbp + 0x180]
cmp qword [rbp + 0x198], 8
cmovae rdx, qword [rbp + 0x180]
mov r8, qword [rbp + 0x190]
call fcn.14000c510
xor r15d, r15d
mov rax, qword [rbp + 0x1a0]
mov qword [rbx + 0x80], rax
mov eax, dword [rbp + 0x1a8]
mov rsi, qword [rsp + 0x60]
mov dword [rbx + 0x88], eax
lea rcx, [rbp + 0x80]
call fcn.14000cdc0
nop
lea rcx, [rbp]
call fcn.14000cdc0
nop
lea rcx, [rbp + 0x120]
call fcn.1400370e0
nop
lea rcx, [rbp + 0x1b0]
call fcn.14000cdc0
nop
lea rcx, [rbp - 0x50]
call fcn.14000cdc0
nop
lea rcx, [rbp + 0xa0]
call fcn.14000cdc0
mov r14d, dword [rbp - 0x60]
mov r12d, dword [rsp + 0x50]
add rdi, 0x20
cmp rdi, rsi
jne 0x140036220
mov rsi, qword [rbp + 0xf0]
mov rdi, qword [rbp + 0xe8]
mov rdx, rsi
mov rcx, rdi
call fcn.14000a7d0
mov rax, qword [rbp + 0xe8]
mov qword [rbp + 0xf0], rax
mov rdi, qword [rbp + 0x108]
mov rbx, qword [rbp + 0x100]
cmp rbx, rdi
je 0x140036e5b
mov rcx, rbx
call fcn.140024a80
add rbx, 0x48
cmp rbx, rdi
jne 0x140036e43
mov rbx, qword [rbp + 0x100]
mov qword [rbp + 0x108], rbx
mov rcx, qword [r13 + 0x70]
test rcx, rcx
je 0x140036eac
lea rdx, [r13 + 0x78]
cmp qword [rdx + 0x18], 8
jb 0x140036e79
mov rdx, qword [rdx]
mov rax, qword [rcx]
lea r8, str.Exit:_true____RegistryUtilities::EnumerateUserHives__
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 5
mov r9d, 0xc5a
lea r8, str.d:jenkinsworkspace_n_mbcommon_srcmbcommon_registryutilities.cpp
lea rdx, str.mb::common::system::RegistryUtilities::EnumerateUserHives
call qword [rax + 0x20]
mov bl, 1
lea rcx, [rsp + 0x68]
call fcn.1400126a0
nop
lea rcx, [rbp + 0xd0]
call fcn.14000ec00
nop
mov r9, qword [rbp + 0x70]
mov r8, qword [r9]
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x70]
call fcn.14003db00
lea rcx, [rbp + 0x70]
call fcn.14003d8d0
nop
lea rcx, [rbp - 0x28]
call fcn.14000cdc0
nop
lea rcx, [rbp + 0xe8]
call fcn.140030780
movzx eax, bl
mov rcx, qword [rbp + 0x9d0]
xor rcx, rsp
call fcn.1401d9c30
lea r11, [rsp + 0xae0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1401e4d9c
nop
call fcn.1401e4d9c
nop
call fcn.1401e4d9c
nop
mov r9d, 0x400
lea r8, [rbp + 0x1d0]
mov rdx, rcx
mov rcx, r10
call r11
jmp 0x140035d00
lea r9, [rbp + 0x48]
xor r8d, r8d
mov rdx, rcx
mov rcx, r10
call r11
jmp 0x140035f46
call fcn.1401e4d9c
int3
call fcn.1401e4d9c
nop
call fcn.1401e4d9c
nop
call fcn.1401e4d9c
int3
call fcn.1401e4d9c
nop
call fcn.1401e4d9c
nop
call fcn.1401e4d9c
nop
call fcn.1401e4d9c
nop
call fcn.1401e4d9c
nop
call fcn.1401e4d9c
nop
mov r9d, 0x400
lea r8, [rbp + 0x1d0]
mov rdx, rcx
mov rcx, r10
call r11
jmp 0x1400364a9
xor r9d, r9d
lea r8, [rbp - 8]
lea rdx, [rbp]
call r10
jmp 0x14003669d
xor r9d, r9d
lea r8, [rbp - 8]
lea rdx, [rbp + 0x80]
call r10
jmp 0x14003679d
call fcn.1401e4d9c
int3