Function at 0x14000c6d0
Capabilities:
Get thread local storage value

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xe8]
sub rsp, 0x1e8
mov r14d, r9d
mov r15, r8
mov rbx, rdx
xor r12d, r12d
lea ecx, [r12 + 2]
call fcn.1400e8270
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x70], rax
mov word [rax], r12w
lea ecx, [r12 + 2]
call fcn.1400e8270
mov rdi, rax
mov qword [rbp - 0x30], rax
mov word [rax], r12w
lea ecx, [r12 + 2]
call fcn.1400e8270
mov qword [rbp + 0x38], rax
mov word [rax], r12w
lea ecx, [r12 + 2]
call fcn.1400e8270
mov qword [rbp - 0x28], rax
mov word [rax], r12w
lea ecx, [r12 + 2]
call fcn.1400e8270
mov rsi, rax
mov qword [rsp + 0x78], rax
mov word [rax], r12w
cmp r14d, 0xffffffff
jne 0x14000cc92
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rbp - 0x40], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rbp - 0x48], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rbp - 0x78], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rsp + 0x48], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rsp + 0x50], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rsp + 0x60], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov r14, rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rax, [0x14011eaa0]
test r15, r15
cmovne rax, r15
mov qword [rbp - 0x60], rax
mov rcx, rax
call fcn.1400e81d8
mov r13, rax
xor ecx, ecx
call fcn.1400e825c
nop
lea ecx, [r12 + 2]
call fcn.1400e8270
mov qword [rbp - 0x80], rax
mov word [rax], r12w
cmp rbx, qword [0x14016aa18]
jne 0x14000c86d
lea rcx, [0x14011ec08]
jmp 0x14000c886
lea rcx, [0x14011ebf8]
cmp rbx, qword [0x14016aa20]
lea rax, [0x14011f8bc]
cmovne rcx, rax
call fcn.1400e81d8
mov r12, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eb8c]
call fcn.1400e81d8
mov rbx, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eaa0]
test r12, r12
cmovne rcx, r12
call fcn.1400e81d8
mov qword [rsp + 0x40], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.140005790
mov rcx, rbx
call fcn.1400e825c
mov rsi, qword [rsp + 0x40]
lea rcx, [0x14011eaa0]
test rsi, rsi
cmovne rcx, rsi
call fcn.1400e81d8
mov qword [rsp + 0x40], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, r13
lea rcx, [rsp + 0x40]
call fcn.140005790
mov rbx, qword [rsp + 0x40]
lea rcx, [0x14011eaa0]
test rbx, rbx
cmovne rcx, rbx
call fcn.1400e81d8
mov r15, rax
mov qword [rsp + 0x58], rax
mov rcx, qword [rbp - 0x80]
call fcn.1400e825c
mov rcx, rbx
call fcn.1400e825c
mov rcx, rsi
call fcn.1400e825c
mov rcx, r12
call fcn.1400e825c
cmp word [r14], 0
je 0x14000c9c0
lea rcx, [0x14011eb8c]
call fcn.1400e81d8
mov rbx, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eaa0]
test rbx, rbx
cmovne rcx, rbx
call fcn.1400e81d8
mov qword [rsp + 0x40], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, r14
lea rcx, [rsp + 0x40]
call fcn.140005790
mov rcx, rbx
call fcn.1400e825c
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x58]
call fcn.140005790
mov rcx, qword [rsp + 0x40]
call fcn.1400e825c
mov r15, qword [rsp + 0x58]
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov rsi, rax
xor ecx, ecx
call fcn.1400e825c
nop
mov rcx, qword [rbp - 0x60]
call fcn.1400e81d8
mov r12, rax
xor ecx, ecx
call fcn.1400e825c
nop
mov ecx, 2
call fcn.1400e8270
mov qword [rbp - 0x80], rax
xor ecx, ecx
mov word [rax], cx
mov rdx, qword [rbp + 0x138]
cmp rdx, qword [0x14016aa18]
jne 0x14000ca17
lea rcx, [0x14011ec08]
jmp 0x14000ca30
lea rcx, [0x14011ebf8]
cmp rdx, qword [0x14016aa20]
lea rax, [0x14011f8bc]
cmovne rcx, rax
call fcn.1400e81d8
mov qword [rsp + 0x58], rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eb8c]
call fcn.1400e81d8
mov rbx, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eaa0]
mov rax, qword [rsp + 0x58]
test rax, rax
cmovne rcx, rax
call fcn.1400e81d8
mov qword [rsp + 0x70], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.140005790
mov rcx, rbx
call fcn.1400e825c
mov rax, qword [rsp + 0x70]
lea rcx, [0x14011eaa0]
test rax, rax
cmovne rcx, rax
call fcn.1400e81d8
mov qword [rsp + 0x40], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, r12
lea rcx, [rsp + 0x40]
call fcn.140005790
mov rbx, qword [rsp + 0x40]
lea rcx, [0x14011eaa0]
test rbx, rbx
cmovne rcx, rbx
call fcn.1400e81d8
mov qword [rsp + 0x68], rax
mov rcx, qword [rbp - 0x80]
call fcn.1400e825c
mov rcx, rbx
call fcn.1400e825c
mov rcx, qword [rsp + 0x70]
call fcn.1400e825c
mov rcx, qword [rsp + 0x58]
call fcn.1400e825c
cmp word [rsi], 0
je 0x14000cb6d
lea rcx, [0x14011eb8c]
call fcn.1400e81d8
mov rbx, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eaa0]
test rbx, rbx
cmovne rcx, rbx
call fcn.1400e81d8
mov qword [rsp + 0x40], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, rsi
lea rcx, [rsp + 0x40]
call fcn.140005790
mov rcx, rbx
call fcn.1400e825c
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x68]
call fcn.140005790
mov rcx, qword [rsp + 0x40]
call fcn.1400e825c
nop
mov ecx, dword [0x1401a9af0]
mov rax, qword gs:[0x58]
mov edx, reloc.OLEAUT32.dll_SafeArrayLock
mov rcx, qword [rax + rcx*8]
mov eax, dword [rdx + rcx]
cmp dword [0x140179250], eax
jle 0x14000cbd3
lea rcx, [0x140179250]
call fcn.1400e151c
cmp dword [0x140179250], 0xffffffff
jne 0x14000cbd3
mov ecx, 2
call fcn.1400e8270
mov qword [0x140179248], rax
xor ecx, ecx
mov word [rax], cx
lea rcx, [0x14011b1f0]
call fcn.1400e137c
lea rcx, [0x140179250]
call fcn.1400e14bc
mov rbx, qword [0x140179248]
lea rcx, [0x14011eaa0]
mov rax, qword [rsp + 0x68]
test rax, rax
cmovne rcx, rax
call fcn.1400e81d8
mov qword [0x140179248], rax
mov rcx, rbx
call fcn.1400e825c
xor eax, eax
mov dword [rbp + 0x148], eax
mov rcx, qword [rsp + 0x68]
call fcn.1400e825c
nop
mov rcx, r12
call fcn.1400e825c
nop
mov rcx, rsi
call fcn.1400e825c
nop
mov rcx, r15
call fcn.1400e825c
nop
mov rcx, r13
call fcn.1400e825c
nop
mov rcx, r14
call fcn.1400e825c
nop
mov rcx, qword [rsp + 0x60]
call fcn.1400e825c
nop
mov rcx, qword [rsp + 0x50]
call fcn.1400e825c
nop
mov rcx, qword [rsp + 0x48]
call fcn.1400e825c
nop
mov rcx, qword [rbp - 0x78]
call fcn.1400e825c
nop
mov rcx, qword [rbp - 0x48]
call fcn.1400e825c
nop
mov rcx, qword [rbp - 0x40]
call fcn.1400e825c
mov rsi, qword [rsp + 0x78]
mov rbx, qword [rbp + 0x138]
mov r15, qword [rbp + 0x140]
mov ecx, dword [0x140178818]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
or eax, 0x20019
lea rcx, [rbp - 0x50]
mov qword [rsp + 0x20], rcx
mov r9d, eax
xor r8d, r8d
mov rdx, r15
mov rcx, rbx
call fcn.140009290
test eax, eax
jne 0x14000d946
xor r15d, r15d
mov dword [rbp - 0x78], r15d
lea ecx, [rax + 2]
call fcn.1400e8270
mov qword [rsp + 0x48], rax
mov word [rax], r15w
lea ecx, [r15 + 2]
call fcn.1400e8270
mov qword [rsp + 0x50], rax
mov word [rax], r15w
lea ecx, [r15 + 2]
call fcn.1400e8270
mov r12, rax
mov qword [rsp + 0x70], rax
mov word [rax], r15w
lea ecx, [r15 + 2]
call fcn.1400e8270
mov r13, rax
mov qword [rbp - 0x10], rax
mov word [rax], r15w
xorps xmm0, xmm0
movdqu xmmword [rbp - 8], xmm0
mov qword [rbp + 8], r15
lea r8, [rsp + 0x50]
xor edx, edx
mov rcx, qword [rbp - 0x50]
call fcn.140018f50
test eax, eax
jne 0x14000d914
mov ecx, dword [0x1401a9af0]
mov rax, qword gs:[0x58]
lea rax, [rax + rcx*8]
mov qword [rbp - 0x80], rax
mov ecx, dword [0x140178818]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, qword [rsp + 0x48]
cmp eax, 0x200
lea rcx, str.Wow6432Node_
je 0x14000cd79
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rsp + 0x48], rax
mov rcx, rbx
call fcn.1400e825c
lea rcx, str.CLSID_
call fcn.1400e81d8
mov rbx, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eaa0]
test rbx, rbx
cmovne rcx, rbx
call fcn.1400e81d8
mov qword [rsp + 0x58], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x58]
call fcn.140005790
mov rcx, rbx
call fcn.1400e825c
lea rcx, [0x14011f8f8]
call fcn.1400e81d8
mov rbx, rax
xor ecx, ecx
call fcn.1400e825c
mov rax, qword [rsp + 0x58]
lea rcx, [0x14011eaa0]
test rax, rax
cmovne rcx, rax
call fcn.1400e81d8
mov qword [rsp + 0x78], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, rbx
lea rcx, [rsp + 0x78]
call fcn.140005790
mov rcx, rbx
call fcn.1400e825c
mov rax, qword [rsp + 0x48]
mov rdi, 0xffffffffffffffff
inc rdi
cmp word [rax + rdi*2], 0
jne 0x14000ce32
mov r10d, 0x7fffffff
cmp rdi, r10
cmovb r10, rdi
mov qword [rsp + 0x40], r10
mov rbx, qword [rsp + 0x78]
mov r14, 0xffffffffffffffff
nop word [rax + rax]
inc r14
cmp word [rbx + r14*2], 0
jne 0x14000ce60
mov ecx, r14d
sub ecx, r15d
movsxd r15, ecx
test ecx, ecx
jle 0x14000ce96
lea rdx, [rdi + r15]
lea rdx, [rdx*2 + 4]
mov rcx, rax
call fcn.1400e8278
mov qword [rsp + 0x48], rax
mov r10, qword [rsp + 0x40]
xor ecx, ecx
movsxd r9, ecx
sub rdi, r9
sub rdi, r10
lea r8, [rdi*2 + 2]
lea rdx, [r9 + r10]
lea rdx, [rax + rdx*2]
add r9, r15
add r9, r10
lea rcx, [rax + r9*2]
call fcn.1400e3010
lea r8, [r14 + r14]
mov rax, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
lea rcx, [rax + rdx*2]
mov rdx, rbx
call fcn.1400e3010
mov rcx, rbx
call fcn.1400e825c
mov rcx, qword [rsp + 0x58]
call fcn.1400e825c
lea rcx, str.HKCRCLSID_
call fcn.1400e81d8
mov rbx, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eaa0]
test rbx, rbx
cmovne rcx, rbx
call fcn.1400e81d8
mov qword [rsp + 0x78], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x78]
call fcn.140005790
mov rcx, rbx
call fcn.1400e825c
mov rdi, qword [rsp + 0x78]
mov rbx, rsi
lea rcx, [0x14011eaa0]
test rdi, rdi
cmovne rcx, rdi
call fcn.1400e81d8
mov rsi, rax
mov qword [rsp + 0x78], rax
mov rcx, rbx
call fcn.1400e825c
mov rcx, rdi
call fcn.1400e825c
mov ecx, dword [0x140178818]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
or eax, 0x20019
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x20], rcx
mov r9d, eax
xor r8d, r8d
mov rdx, qword [rsp + 0x48]
mov rcx, 0xffffffff80000000
call fcn.140009290
test eax, eax
jne 0x14000d86c
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x14011eaa0]
mov rcx, qword [rsp + 0x68]
call fcn.140019160
test eax, eax
jne 0x14000d860
lea rdx, [rbp - 0x10]
mov rcx, qword [rsp + 0x48]
call fcn.14000a460
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp - 0x10]
mov r13, qword [rbp + 0x130]
mov rdx, r13
lea rcx, [rbp - 0x40]
call fcn.14000a570
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.14000bfb0
mov rbx, qword [rbp - 0x48]
lea rcx, [0x14011eaa0]
test rbx, rbx
cmovne rcx, rbx
call fcn.1400e81d8
mov qword [rsp + 0x70], rax
mov rcx, r12
call fcn.1400e825c
mov rcx, rbx
call fcn.1400e825c
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, str.CLSID_
call fcn.1400e81d8
mov rsi, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eaa0]
test rsi, rsi
cmovne rcx, rsi
call fcn.1400e81d8
mov qword [rsp + 0x40], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x40]
call fcn.140005790
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
lea rcx, [0x14011eaa0]
test rdi, rdi
cmovne rcx, rdi
call fcn.1400e81d8
mov qword [rsp + 0x48], rax
mov rcx, rbx
call fcn.1400e825c
mov rcx, rdi
call fcn.1400e825c
mov rcx, rsi
call fcn.1400e825c
mov rax, qword [rsp + 0x50]
lea rcx, [0x14011eaa0]
test rax, rax
cmovne rcx, rax
call fcn.1400e81d8
mov rbx, rax
mov qword [rbp - 0x70], rax
mov rcx, qword [rbp - 0x68]
call fcn.1400e825c
mov ecx, dword [0x140178818]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
or eax, 0x20019
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x20], rcx
mov r9d, eax
xor r8d, r8d
mov rdx, qword [rsp + 0x48]
mov rcx, 0xffffffff80000000
call fcn.140009290
test eax, eax
jne 0x14000d189
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x14011eaa0]
mov rcx, qword [rsp + 0x68]
call fcn.140019160
test eax, eax
jne 0x14000d17e
mov rdx, qword [rsp + 0x48]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x14000d150
test rax, rax
je 0x14000d17e
lea rcx, [0x14011eaa0]
test rdx, rdx
cmovne rcx, rdx
call fcn.1400e81d8
mov qword [rbp - 0x70], rax
mov rcx, rbx
call fcn.1400e825c
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rbx, [0x14011eaa0]
mov rax, qword [rbp + 0x140]
test rax, rax
cmovne rbx, rax
mov qword [rbp - 0x60], rbx
mov rcx, rbx
call fcn.1400e81d8
mov rsi, rax
mov qword [rsp + 0x60], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x60]
mov rdx, qword [rbp + 0x138]
lea rcx, [rbp + 0x18]
call fcn.14000b540
mov r14, rax
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov rdi, rax
mov qword [rsp + 0x40], rax
xor ecx, ecx
call fcn.1400e825c
nop
mov rcx, rbx
call fcn.1400e81d8
mov rbx, rax
mov qword [rsp + 0x58], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x58]
mov rdx, qword [rbp + 0x138]
lea rcx, [rbp + 0x10]
call fcn.14000b540
nop
lea rcx, [rbp + 0x40]
mov qword [rsp + 0x38], rcx
lea rcx, [rbp - 0x28]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp - 0x30]
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x20], rcx
mov r9, r14
mov r8, rax
lea rdx, [rbp - 0x70]
mov rcx, r13
call fcn.1400058c0
movzx r15d, al
mov rcx, qword [rbp + 0x10]
call fcn.1400e825c
nop
mov rcx, rbx
call fcn.1400e825c
nop
mov rcx, rdi
call fcn.1400e825c
nop
mov rcx, qword [rbp + 0x18]
call fcn.1400e825c
nop
mov rcx, rsi
call fcn.1400e825c
mov r13, qword [rbp - 0x70]
mov qword [rbp - 0x68], r13
mov r14, qword [rsp + 0x70]
test r15b, r15b
je 0x14000d7c7
mov r15d, dword [rbp + 0x148]
cmp r15d, 0xffffffff
jne 0x14000d65d
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov r12, rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov r13, rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rbp - 0x58], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rbp - 0x18], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rbp - 0x20], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rbp + 0x28], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov r14, rax
mov qword [rsp + 0x60], rax
xor ecx, ecx
call fcn.1400e825c
nop
mov rcx, qword [rbp - 0x60]
call fcn.1400e81d8
mov r15, rax
mov qword [rsp + 0x40], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x40]
mov rdx, qword [rbp + 0x138]
lea rcx, [rbp + 0x20]
call fcn.14000b540
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov rdi, rax
xor ecx, ecx
call fcn.1400e825c
nop
mov rcx, qword [rbp - 0x60]
call fcn.1400e81d8
mov rsi, rax
xor ecx, ecx
call fcn.1400e825c
nop
mov ecx, 2
call fcn.1400e8270
mov qword [rbp - 0x38], rax
xor ecx, ecx
mov word [rax], cx
mov rax, qword [rbp + 0x138]
cmp rax, qword [0x14016aa18]
jne 0x14000d3eb
lea rcx, [0x14011ec08]
jmp 0x14000d404
lea rcx, [0x14011ebf8]
cmp rax, qword [0x14016aa20]
lea rax, [0x14011f8bc]
cmovne rcx, rax
call fcn.1400e81d8
mov qword [rsp + 0x60], rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eb8c]
call fcn.1400e81d8
mov rbx, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eaa0]
mov rax, qword [rsp + 0x60]
test rax, rax
cmovne rcx, rax
call fcn.1400e81d8
mov qword [rsp + 0x58], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.140005790
mov rcx, rbx
call fcn.1400e825c
mov rax, qword [rsp + 0x58]
lea rcx, [0x14011eaa0]
test rax, rax
cmovne rcx, rax
call fcn.1400e81d8
mov qword [rsp + 0x40], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, rsi
lea rcx, [rsp + 0x40]
call fcn.140005790
mov rbx, qword [rsp + 0x40]
lea rcx, [0x14011eaa0]
test rbx, rbx
cmovne rcx, rbx
call fcn.1400e81d8
mov qword [rsp + 0x40], rax
mov rcx, qword [rbp - 0x38]
call fcn.1400e825c
mov rcx, rbx
call fcn.1400e825c
mov rcx, qword [rsp + 0x58]
call fcn.1400e825c
mov rcx, qword [rsp + 0x60]
call fcn.1400e825c
cmp word [rdi], 0
je 0x14000d541
lea rcx, [0x14011eb8c]
call fcn.1400e81d8
mov rbx, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eaa0]
test rbx, rbx
cmovne rcx, rbx
call fcn.1400e81d8
mov qword [rsp + 0x60], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.140005790
mov rcx, rbx
call fcn.1400e825c
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x40]
call fcn.140005790
mov rcx, qword [rsp + 0x60]
call fcn.1400e825c
nop
mov ecx, reloc.OLEAUT32.dll_SafeArrayLock
mov qword [rbp - 0x38], rcx
mov rax, qword [rbp - 0x80]
mov rax, qword [rax]
mov ecx, dword [rcx + rax]
cmp dword [0x140179250], ecx
jle 0x14000d59f
lea rcx, [0x140179250]
call fcn.1400e151c
cmp dword [0x140179250], 0xffffffff
jne 0x14000d59f
mov ecx, 2
call fcn.1400e8270
mov qword [0x140179248], rax
xor ecx, ecx
mov word [rax], cx
lea rcx, [0x14011b1f0]
call fcn.1400e137c
lea rcx, [0x140179250]
call fcn.1400e14bc
mov rbx, qword [0x140179248]
lea rcx, [0x14011eaa0]
mov rax, qword [rsp + 0x40]
test rax, rax
cmovne rcx, rax
call fcn.1400e81d8
mov qword [0x140179248], rax
mov rcx, rbx
call fcn.1400e825c
xor eax, eax
mov dword [rbp + 0x148], eax
mov rcx, qword [rsp + 0x40]
call fcn.1400e825c
nop
mov rcx, rsi
call fcn.1400e825c
nop
mov rcx, rdi
call fcn.1400e825c
nop
mov rcx, qword [rbp + 0x20]
call fcn.1400e825c
nop
mov rcx, r15
call fcn.1400e825c
nop
mov rcx, r14
call fcn.1400e825c
nop
mov rcx, qword [rbp + 0x28]
call fcn.1400e825c
nop
mov rcx, qword [rbp - 0x20]
call fcn.1400e825c
nop
mov rcx, qword [rbp - 0x18]
call fcn.1400e825c
nop
mov rcx, qword [rbp - 0x58]
call fcn.1400e825c
nop
mov rcx, r13
call fcn.1400e825c
nop
mov rcx, r12
call fcn.1400e825c
mov r14, qword [rsp + 0x70]
mov rbx, qword [rbp - 0x38]
mov r15d, dword [rbp + 0x148]
mov r13, qword [rbp - 0x68]
jmp 0x14000d662
mov ebx, reloc.OLEAUT32.dll_SafeArrayLock
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov rdi, rax
mov qword [rbp - 0x18], rax
xor ecx, ecx
call fcn.1400e825c
nop
mov rcx, qword [rbp - 0x60]
call fcn.1400e81d8
mov rsi, rax
mov qword [rbp - 0x58], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea r9, [rsp + 0x50]
lea r8, [rbp - 0x58]
mov rdx, qword [rbp + 0x138]
lea rcx, [rbp + 0x30]
call fcn.14000b540
mov r12, rax
mov rax, qword [rbp - 0x80]
mov rcx, qword [rax]
mov edx, dword [rbx + rcx]
cmp dword [0x140179250], edx
jle 0x14000d72f
lea rcx, [0x140179250]
call fcn.1400e151c
cmp dword [0x140179250], 0xffffffff
jne 0x14000d706
mov ecx, 2
call fcn.1400e8270
mov qword [0x140179248], rax
xor ecx, ecx
mov word [rax], cx
lea rcx, [0x14011b1f0]
call fcn.1400e137c
lea rcx, [0x140179250]
call fcn.1400e14bc
cmp r15d, 0xffffffff
jne 0x14000d72f
mov rbx, qword [0x140179248]
lea rcx, [0x14011eaa0]
test r13, r13
cmovne rcx, r13
call fcn.1400e81d8
mov qword [0x140179248], rax
jmp 0x14000d7a2
mov ecx, 2
call fcn.1400e8270
mov r15, rax
xor eax, eax
mov word [r15], ax
mov rax, qword [r12]
lea rcx, [0x14011eaa0]
test rax, rax
cmovne rcx, rax
call fcn.1400e81d8
mov rbx, rax
mov qword [rbp - 0x20], rax
mov rcx, r15
call fcn.1400e825c
cmp dword [0x140178168], 1
jne 0x14000d77a
lea rcx, str.System
jmp 0x14000d796
mov rcx, qword [0x140178378]
test rcx, rcx
je 0x14000d78f
add rcx, 0x210
jmp 0x14000d796
lea rcx, str.Local_System
mov r8, rbx
mov rdx, r14
call fcn.140060db0
nop
mov rcx, rbx
call fcn.1400e825c
nop
mov rcx, qword [rbp + 0x30]
call fcn.1400e825c
nop
mov rcx, rsi
call fcn.1400e825c
nop
mov rcx, rdi
call fcn.1400e825c
nop
mov rdi, qword [rbp - 8]
test rdi, rdi
je 0x14000d831
mov rbx, rdi
mov rsi, qword [rbp]
cmp rdi, rsi
je 0x14000d7f1
nop dword [rax]
mov rcx, qword [rbx]
call fcn.1400e825c
add rbx, 8
cmp rbx, rsi
jne 0x14000d7e0
mov rax, qword [rbp + 8]
sub rax, rdi
sar rax, 3
lea rdx, [rax*8]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000d829
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d98f
mov rcx, rdi
call fcn.1400e0fb8
mov rcx, qword [rbp - 0x10]
call fcn.1400e825c
nop
mov rcx, r14
call fcn.1400e825c
nop
mov rcx, qword [rsp + 0x50]
call fcn.1400e825c
nop
mov rcx, qword [rsp + 0x48]
call fcn.1400e825c
mov rsi, qword [rsp + 0x78]
jmp 0x14000d893
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rcx, r13
call fcn.1400e825c
nop
mov rcx, r12
call fcn.1400e825c
nop
mov rcx, qword [rsp + 0x50]
call fcn.1400e825c
nop
mov rcx, qword [rsp + 0x48]
call fcn.1400e825c
mov ebx, dword [rbp - 0x78]
inc ebx
mov dword [rbp - 0x78], ebx
mov ecx, 2
call fcn.1400e8270
mov qword [rsp + 0x48], rax
xor r15d, r15d
mov word [rax], r15w
lea ecx, [r15 + 2]
call fcn.1400e8270
mov qword [rsp + 0x50], rax
mov word [rax], r15w
lea ecx, [r15 + 2]
call fcn.1400e8270
mov r12, rax
mov qword [rsp + 0x70], rax
mov word [rax], r15w
lea ecx, [r15 + 2]
call fcn.1400e8270
mov r13, rax
mov qword [rbp - 0x10], rax
mov word [rax], r15w
xorps xmm0, xmm0
movdqu xmmword [rbp - 8], xmm0
mov qword [rbp + 8], r15
lea r8, [rsp + 0x50]
mov edx, ebx
mov rcx, qword [rbp - 0x50]
call fcn.140018f50
test eax, eax
je 0x14000cd53
mov rdi, qword [rbp - 0x30]
mov rcx, r13
call fcn.1400e825c
nop
mov rcx, r12
call fcn.1400e825c
nop
mov rcx, qword [rsp + 0x50]
call fcn.1400e825c
nop
mov rcx, qword [rsp + 0x48]
call fcn.1400e825c
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rcx, rsi
call fcn.1400e825c
nop
mov rcx, qword [rbp - 0x28]
call fcn.1400e825c
nop
mov rcx, qword [rbp + 0x38]
call fcn.1400e825c
nop
mov rcx, rdi
call fcn.1400e825c
nop
mov rcx, qword [rbp - 0x68]
call fcn.1400e825c
mov eax, dword [rbp + 0x148]
add rsp, 0x1e8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1400e8160
nop
int3