Function at 0x140114e90
Capabilities:
Query or enumerate registry value

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x88]
sub rsp, 0x188
mov qword [rbp + 0x78], 0xfffffffffffffffe
mov r13, rcx
xor edi, edi
mov qword [rbp - 0x28], rdi
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x10], xmm1
mov qword [rbp], rdi
lea rax, vtable.Core::Xml::XmlDocument.0
mov qword [rbp - 0x30], rax
mov byte [rbp + 8], dil
mov qword [rbp - 0x58], rdi
lea edx, [rdi + 0xb]
lea rcx, [rbp - 0x60]
call fcn.1402028a0
mov eax, dword [rbp - 0x58]
inc eax
movsxd rdx, eax
lea r9d, [rdi + 0xb]
lea r8, str.ScanResults
mov rcx, qword [rbp - 0x60]
call fcn.1402c06dc
lea edx, [rdi + 0xb]
lea rcx, [rbp - 0x60]
call fcn.140203bb0
nop
mov r15d, edi
mov qword [rbp - 0x40], rdi
lea rcx, [rbp - 0x60]
call fcn.140217cc0
test al, al
je 0x140114f5d
lea ecx, [rdi + 0x50]
call fcn.1402bcb4c
mov qword [rbp + 0xd0], rax
test rax, rax
je 0x140114f56
lea r8, [rbp - 0x30]
lea rdx, [rbp - 0x60]
mov rcx, rax
call fcn.140207330
mov r15, rax
jmp 0x140114f59
mov r15, rdi
mov qword [rbp - 0x40], r15
cmp dword [rbp - 0x58], 0
jle 0x140114f6c
mov rcx, qword [rbp - 0x60]
call fcn.1402bd0e0
mov rcx, r13
call fcn.1401129f0
mov r8, qword [rax]
lea rdx, [0x140352550]
mov rcx, r15
call fcn.140207630
xor ecx, ecx
call fcn.1400f4570
mov rbx, rax
test rax, rax
je 0x140115032
lea rdx, [0x140352fe8]
mov rcx, rax
call fcn.1400ed340
cmp eax, 4
jne 0x140115032
mov dword [rbp + 0xd0], edi
mov dword [rbp + 0xd8], eax
lea rax, [rbp + 0xd8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xe0]
xor r8d, r8d
lea rdx, [0x140352fe8]
mov rcx, qword [rbx + 8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
test ebx, ebx
jne 0x140115032
mov edx, dword [rbp + 0xd0]
lea rcx, [rsp + 0x50]
call fcn.14000b500
nop
mov r8, qword [rax]
lea rdx, [0x140356338]
mov rcx, r15
call fcn.140207630
nop
cmp dword [rsp + 0x58], ebx
jle 0x140115032
mov rcx, qword [rsp + 0x50]
call fcn.1402bd0e0
mov rcx, qword [0x140430c00]
test rcx, rcx
je 0x140115071
cmp qword [rcx + 8], 0
je 0x140115071
lea rdx, [rbp - 0x70]
call fcn.1400d5440
nop
mov r8, qword [rax]
lea rdx, str.custom
mov rcx, r15
call fcn.140207630
nop
cmp dword [rbp - 0x68], 0
jle 0x140115071
mov rcx, qword [rbp - 0x70]
call fcn.1402bd0e0
mov rcx, r13
call fcn.140111c10
mov rbx, rax
mov qword [rbp - 0x48], rdi
mov edx, dword [rax + 0xc]
lea r14, [0x14034d1a0]
test edx, edx
jne 0x140115094
mov qword [rbp - 0x50], r14
jmp 0x1401150b5
lea rcx, [rbp - 0x50]
call fcn.1402028a0
movsxd r9, dword [rbx + 0xc]
mov eax, dword [rbp - 0x48]
inc eax
movsxd rdx, eax
mov r8, qword [rbx]
mov rcx, qword [rbp - 0x50]
call fcn.1402c06dc
mov edx, dword [rbx + 0xc]
lea rcx, [rbp - 0x50]
call fcn.140203bb0
nop
mov rcx, r13
call fcn.140111c90
mov ebx, eax
mov r8, qword [rbp - 0x50]
test r8, r8
je 0x140115104
or rcx, 0xffffffffffffffff
nop dword [rax]
inc rcx
cmp word [r8 + rcx*2], 0
jne 0x1401150e0
test rcx, rcx
sete al
test al, al
jne 0x140115104
lea rdx, str.serial
mov rcx, r15
call fcn.140207630
mov qword [rbp - 0x78], rdi
mov edx, 4
lea rcx, [rbp - 0x80]
call fcn.1402028a0
mov eax, dword [rbp - 0x78]
inc eax
movsxd rdx, eax
mov r9d, 4
lea r8, str.free
mov rcx, qword [rbp - 0x80]
call fcn.1402c06dc
mov edx, 4
lea rcx, [rbp - 0x80]
call fcn.140203bb0
nop
test ebx, ebx
je 0x1401151df
test bl, 1
je 0x14011518a
mov edx, 4
lea rcx, [rbp - 0x80]
call fcn.1402028a0
mov eax, dword [rbp - 0x78]
inc eax
movsxd rdx, eax
mov r9d, 4
lea r8, str.paid
mov rcx, qword [rbp - 0x80]
call fcn.1402c06dc
mov edx, 4
lea rcx, [rbp - 0x80]
call fcn.140203bb0
test bl, 2
je 0x1401151c9
mov edx, 5
lea rcx, [rbp - 0x80]
call fcn.1402028a0
mov eax, dword [rbp - 0x78]
inc eax
movsxd rdx, eax
mov r9d, 5
lea r8, str.trial
mov rcx, qword [rbp - 0x80]
call fcn.1402c06dc
mov edx, 5
lea rcx, [rbp - 0x80]
call fcn.140203bb0
bt ebx, 8
jae 0x1401151df
lea rdx, str._expired
lea rcx, [rbp - 0x80]
call fcn.140200ef0
mov r8, qword [rbp - 0x80]
lea rdx, [0x1403563c8]
mov rcx, r15
call fcn.140207630
mov byte [rsp + 0x40], 0
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0xe8]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x54]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x58]
lea r8, [rbp + 0xe0]
lea rdx, [rbp + 0xd8]
mov rcx, r13
call fcn.140111210
mov r8b, 1
lea rdx, [rsp + 0x50]
mov rcx, r13
call fcn.140114950
nop
mov r8, qword [rax]
lea rdx, str.version
mov rcx, r15
call fcn.140207630
nop
cmp dword [rsp + 0x58], 0
jle 0x140115270
mov rcx, qword [rsp + 0x50]
call fcn.1402bd0e0
lea rdx, [rsp + 0x50]
call fcn.140114850
nop
mov r8, qword [rax]
lea rdx, [0x1403563bc]
mov rcx, r15
call fcn.140207630
nop
cmp dword [rsp + 0x58], 0
jle 0x14011529f
mov rcx, qword [rsp + 0x50]
call fcn.1402bd0e0
mov byte [rbp + 0xd0], 0
lea rcx, [rbp + 0xd0]
call fcn.1400f34e0
lea rbx, [0x140351b10]
test al, al
je 0x1401152de
lea r8, [0x1403563d8]
cmp byte [rbp + 0xd0], 0
cmovne r8, rbx
lea rdx, [0x1403563d0]
mov rcx, r15
call fcn.140207630
mov eax, dword [0x1404214a0]
cmp eax, 0xffffffff
jne 0x14011531c
call fcn.140114cf0
test al, al
je 0x1401152fe
mov dword [0x1404214a0], 1
jmp 0x140115321
cmp qword [r13 + 0x2f8], 0
je 0x140115314
mov dword [0x1404214a0], 1
jmp 0x140115321
mov dword [0x1404214a0], edi
jmp 0x140115333
cmp eax, 1
jne 0x140115333
mov r8, rbx
lea rdx, str.kickstarted
mov rcx, r15
call fcn.140207630
mov eax, dword [0x14041ec1c]
test eax, eax
js 0x140115357
lea r8, [0x1403563d8]
cmovne r8, rbx
lea rdx, str.tdl3
mov rcx, r15
call fcn.140207630
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], rdi
mov ecx, dword [r13 + 0x10]
mov edx, 1
test ecx, ecx
je 0x1401153aa
dec ecx
je 0x140115397
dec ecx
lea rcx, [rsp + 0x70]
je 0x140115389
call fcn.1402028a0
lea r8, [0x140310580]
jmp 0x1401153bb
call fcn.1402028a0
lea r8, [0x140357058]
jmp 0x1401153bb
lea rcx, [rsp + 0x70]
call fcn.1402028a0
lea r8, [0x14035641c]
jmp 0x1401153bb
lea rcx, [rsp + 0x70]
call fcn.1402028a0
lea r8, [0x14035705c]
mov eax, dword [rsp + 0x78]
inc eax
mov r9d, 1
movsxd rdx, eax
mov rcx, qword [rsp + 0x70]
call fcn.1402c06dc
mov edx, 1
lea rcx, [rsp + 0x70]
call fcn.140203bb0
movsd xmm2, qword [r13 + 0x260]
movq r8, xmm2
lea rdx, str._.0f
lea rcx, [rsp + 0x50]
call fcn.140202d40
nop
mov r8, qword [rax]
lea rdx, str.duration
mov rcx, r15
call fcn.140207630
nop
cmp dword [rsp + 0x58], 0
jle 0x140115427
mov rcx, qword [rsp + 0x50]
call fcn.1402bd0e0
mov r8, qword [rsp + 0x70]
lea rdx, str.method
mov rcx, r15
call fcn.140207630
mov r8d, dword [rbp + 0xd8]
add r8d, dword [rbp + 0xe0]
lea rdx, [0x14034d590]
lea rcx, [rsp + 0x50]
call fcn.140202d40
nop
mov r8, qword [rax]
lea rdx, [0x140356420]
mov rcx, r15
call fcn.140207630
nop
cmp dword [rsp + 0x58], 0
jle 0x14011547f
mov rcx, qword [rsp + 0x50]
call fcn.1402bd0e0
mov r8d, dword [rbp + 0xe8]
lea rdx, [0x14034d590]
lea rcx, [rsp + 0x50]
call fcn.140202d40
nop
mov r8, qword [rax]
lea rdx, [0x140356448]
mov rcx, r15
call fcn.140207630
nop
cmp dword [rsp + 0x58], 0
jle 0x1401154bc
mov rcx, qword [rsp + 0x50]
call fcn.1402bd0e0
lea rcx, [r13 + 0x990]
mov rax, qword [rcx]
mov edx, 0x1388
call qword [rax + 8]
test al, al
je 0x14011571b
lea rax, [r13 + 0x9a0]
mov qword [rbp + 0xd8], rax
lea r12, [rax + 8]
mov qword [rbp + 0xd0], r12
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
nop
cmp dword [r13 + 0x9e8], 0
jle 0x140115712
mov qword [rsp + 0x68], rdi
mov edx, 0xe
lea rcx, [rsp + 0x60]
call fcn.1402028a0
mov eax, dword [rsp + 0x68]
inc eax
movsxd rdx, eax
mov r9d, 0xe
lea r8, str.SecurityCenter
mov rcx, qword [rsp + 0x60]
call fcn.1402c06dc
mov edx, 0xe
lea rcx, [rsp + 0x60]
call fcn.140203bb0
nop
mov rsi, rdi
lea rcx, [rsp + 0x60]
call fcn.140217cc0
test al, al
je 0x14011558b
mov ecx, 0x50
call fcn.1402bcb4c
mov qword [rbp + 0xe0], rax
test rax, rax
je 0x140115588
lea r8, [rbp - 0x30]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.140207330
mov rsi, rax
jmp 0x14011558b
mov rsi, rdi
cmp dword [rsp + 0x68], 0
jle 0x14011559c
mov rcx, qword [rsp + 0x60]
call fcn.1402bd0e0
lea rax, vtable.Core::Dictionary_class_Core::String__bool_::Enumerator.0
mov qword [rbp + 0x60], rax
lea rax, [r13 + 0x9d0]
mov qword [rbp + 0x68], rax
mov rdi, qword [rax + 8]
mov qword [rbp + 0x70], rdi
mov qword [rsp + 0x50], r14
xor ebx, ebx
mov qword [rsp + 0x58], rbx
lea r12, [0x140351b10]
nop dword [rax]
test rdi, rdi
je 0x1401156ea
mov edx, dword [rdi + 0x1c]
lea rcx, [rsp + 0x50]
call fcn.1402028a0
movsxd r9, dword [rdi + 0x1c]
mov eax, dword [rsp + 0x58]
inc eax
movsxd rdx, eax
mov r8, qword [rdi + 0x10]
mov rcx, qword [rsp + 0x50]
call fcn.1402c06dc
mov edx, dword [rdi + 0x1c]
lea rcx, [rsp + 0x50]
call fcn.140203bb0
movzx r14d, byte [rdi + 0x20]
mov rdi, qword [rdi]
mov qword [rbp + 0x70], rdi
mov qword [rbp - 0x68], 0
mov edx, 7
lea rcx, [rbp - 0x70]
call fcn.1402028a0
mov eax, dword [rbp - 0x68]
inc eax
movsxd rdx, eax
mov r9d, 7
lea r8, str.Product
mov rcx, qword [rbp - 0x70]
call fcn.1402c06dc
mov edx, 7
lea rcx, [rbp - 0x70]
call fcn.140203bb0
nop
lea rcx, [rbp - 0x70]
call fcn.140217cc0
test al, al
je 0x140115697
mov ecx, 0x50
call fcn.1402bcb4c
mov qword [rbp + 0xe0], rax
test rax, rax
je 0x140115695
lea r8, [rbp - 0x30]
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.140207330
mov rbx, rax
jmp 0x140115697
xor ebx, ebx
cmp dword [rbp - 0x68], 0
jle 0x1401156a6
mov rcx, qword [rbp - 0x70]
call fcn.1402bd0e0
mov r8, qword [rsp + 0x50]
lea rdx, [0x140351ab8]
mov rcx, rbx
call fcn.140207630
lea r8, [0x1403563d8]
test r14b, r14b
cmovne r8, r12
lea rdx, str.healthy
mov rcx, rbx
call fcn.140207630
mov rax, qword [rsi]
mov rdx, rbx
mov rcx, rsi
call qword [rax + 0x28]
xor ebx, ebx
jmp 0x1401155d0
mov rax, qword [r15]
mov rdx, rsi
mov rcx, r15
call qword [rax + 0x28]
nop
cmp dword [rsp + 0x58], 0
mov r12, qword [rbp + 0xd0]
jle 0x140115710
mov rcx, qword [rsp + 0x50]
call fcn.1402bd0e0
nop
xor edi, edi
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov qword [rsp + 0x58], 0
mov edx, 0xd
lea rcx, [rsp + 0x50]
call fcn.1402028a0
mov eax, dword [rsp + 0x58]
inc eax
movsxd rdx, eax
mov r9d, 0xd
lea r8, str.MalwareHashes
mov rcx, qword [rsp + 0x50]
call fcn.1402c06dc
mov edx, 0xd
lea rcx, [rsp + 0x50]
call fcn.140203bb0
nop
mov r12, rdi
lea rcx, [rsp + 0x50]
call fcn.140217cc0
test al, al
je 0x1401157a3
mov ecx, 0x50
call fcn.1402bcb4c
mov qword [rbp + 0xd0], rax
test rax, rax
je 0x1401157a0
lea r8, [rbp - 0x30]
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140207330
mov r12, rax
jmp 0x1401157a3
mov r12, rdi
cmp dword [rsp + 0x58], 0
jle 0x1401157b4
mov rcx, qword [rsp + 0x50]
call fcn.1402bd0e0
mov rax, qword [r13 + 0x4a0]
mov rbx, qword [rax]
cmp rbx, rax
je 0x1401159ef
lea r15, vtable.Core::Xml::XmlAttributeCollection.0
nop
mov r14, qword [rbx + 0x30]
mov rax, qword [r14 + 0x40]
shr rax, 0x27
test al, 1
je 0x14011598a
mov qword [rsp + 0x68], 0
mov edx, 4
lea rcx, [rsp + 0x60]
call fcn.1402028a0
mov eax, dword [rsp + 0x68]
inc eax
movsxd rdx, eax
mov r9d, 4
lea r8, str.Hash
mov rcx, qword [rsp + 0x60]
call fcn.1402c06dc
mov edx, 4
lea rcx, [rsp + 0x60]
call fcn.140203bb0
nop
mov rsi, rdi
lea rcx, [rsp + 0x60]
call fcn.140217cc0
test al, al
je 0x140115901
mov ecx, 0x50
call fcn.1402bcb4c
mov rsi, rax
mov qword [rbp + 0xd0], rax
test rax, rax
je 0x1401158fe
lea rax, [rbp - 0x30]
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rdi
mov qword [rsi + 0x18], rdi
mov qword [rsi + 0x20], rdi
mov qword [rsi + 0x28], rdi
mov qword [rsi + 0x30], rdi
lea rax, vtable.Core::Xml::XmlElement.0
mov qword [rsi], rax
lea rax, [0x14034d1a0]
mov qword [rsi + 0x38], rax
xor eax, eax
mov qword [rsi + 0x40], rax
mov edx, dword [rsp + 0x6c]
lea rcx, [rsi + 0x38]
call fcn.1402028a0
movsxd r9, dword [rsp + 0x6c]
mov eax, dword [rsi + 0x40]
inc eax
movsxd rdx, eax
mov r8, qword [rsp + 0x60]
mov rcx, qword [rsi + 0x38]
call fcn.1402c06dc
mov edx, dword [rsp + 0x6c]
lea rcx, [rsi + 0x38]
call fcn.140203bb0
mov ecx, 0x30
call fcn.1402bcb4c
test rax, rax
je 0x1401158f8
mov qword [rax], r15
lea rcx, vtable.Core::Collection_class_Core::Xml::XmlAttribute____ptr64_.0
mov qword [rax + 0x10], rcx
xor ecx, ecx
mov dword [rax + 0x18], ecx
mov qword [rax + 0x20], rcx
mov qword [rax + 0x28], rcx
mov qword [rax + 8], rsi
mov qword [rsi + 0x48], rax
jmp 0x140115901
mov rsi, rdi
cmp dword [rsp + 0x68], 0
jle 0x140115912
mov rcx, qword [rsp + 0x60]
call fcn.1402bd0e0
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.1400d9c10
mov r14, rax
mov ecx, 0x48
call fcn.1402bcb4c
mov rdi, rax
mov qword [rbp + 0xd0], rax
test rax, rax
je 0x14011595d
lea r8, [rbp - 0x30]
mov rdx, r14
mov rcx, rax
call fcn.140295b10
lea rax, vtable.Core::Xml::XmlText.0
mov qword [rdi], rax
lea rax, [rbp - 0x30]
mov qword [rdi + 8], rax
jmp 0x14011595f
xor edi, edi
mov rax, qword [rsi]
mov rdx, rdi
mov rcx, rsi
call qword [rax + 0x28]
nop
cmp dword [rbp - 0x68], 0
jle 0x14011597b
mov rcx, qword [rbp - 0x70]
call fcn.1402bd0e0
mov rax, qword [r12]
mov rdx, rsi
mov rcx, r12
call qword [rax + 0x28]
xor edi, edi
cmp byte [rbx + 0x19], 0
jne 0x1401159de
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
jne 0x1401159be
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
jne 0x1401159de
nop word [rax + rax]
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x1401159b0
jmp 0x1401159de
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x1401159db
cmp rbx, qword [rax + 0x10]
jne 0x1401159db
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x1401159c8
mov rbx, rax
cmp rbx, qword [r13 + 0x4a0]
jne 0x1401157d0
mov r15, qword [rbp - 0x40]
mov rax, qword [r15]
mov rdx, r12
mov rcx, r15
call qword [rax + 0x28]
mov rdx, r15
lea rcx, [rbp - 0x30]
call fcn.140206730
mov qword [rbp + 0x18], rdi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x30], xmm1
mov qword [rbp + 0x40], rdi
lea rax, vtable.Core::Xml::XmlDocument.0
mov qword [rbp + 0x10], rax
mov byte [rbp + 0x48], 0
mov qword [rsp + 0x58], 0
mov edx, 0xc
lea rcx, [rsp + 0x50]
call fcn.1402028a0
mov eax, dword [rsp + 0x58]
inc eax
movsxd rdx, eax
mov r9d, 0xc
lea r8, str.Results.ashx
mov rcx, qword [rsp + 0x50]
call fcn.1402c06dc
mov edx, 0xc
lea rcx, [rsp + 0x50]
call fcn.140203bb0
nop
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x30]
lea rdx, [rsp + 0x50]
mov rcx, r13
call fcn.1401189a0
movzx esi, al
cmp dword [rsp + 0x58], 0
jle 0x140115aa0
mov rcx, qword [rsp + 0x50]
call fcn.1402bd0e0
nop
lea r14, vtable.Core::Xml::XmlNode.0
mov qword [rbp + 0x10], r14
mov rbx, qword [rbp + 0x28]
test rbx, rbx
je 0x140115b44
cmp qword [rbx + 0x18], 0
je 0x140115ac7
mov rcx, rbx
call fcn.140209fc0
mov rdi, qword [rbx + 0x28]
mov rax, qword [rbx + 0x30]
test rax, rax
je 0x140115af5
test rdi, rdi
je 0x140115aeb
mov qword [rax + 0x28], rdi
mov rcx, qword [rbx + 0x28]
mov rax, qword [rbx + 0x30]
mov qword [rcx + 0x30], rax
jmp 0x140115b02
mov qword [rax + 0x28], 0
jmp 0x140115b02
test rdi, rdi
je 0x140115b02
mov qword [rdi + 0x30], 0
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140115b2b
cmp qword [rcx + 0x18], rbx
jne 0x140115b19
mov rax, qword [rbx + 0x28]
mov qword [rcx + 0x18], rax
mov rcx, qword [rbx + 0x10]
cmp qword [rcx + 0x20], rbx
jne 0x140115b2b
mov rax, qword [rbx + 0x30]
mov qword [rcx + 0x20], rax
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax]
mov rbx, rdi
test rdi, rdi
jne 0x140115ab8
mov rax, qword [rbp + 0x40]
test rax, rax
je 0x140115b72
mov rcx, qword [rbp + 0x38]
test rcx, rcx
je 0x140115b68
mov qword [rax + 0x28], rcx
mov rcx, qword [rbp + 0x38]
mov rax, qword [rbp + 0x40]
mov qword [rcx + 0x30], rax
jmp 0x140115b7f
mov rax, qword [rbp + 0x40]
mov qword [rax + 0x28], rdi
jmp 0x140115b7f
mov rax, qword [rbp + 0x38]
test rax, rax
je 0x140115b7f
mov qword [rax + 0x30], rdi
mov rcx, qword [rbp + 0x20]
test rcx, rcx
je 0x140115bb0
lea rax, [rbp + 0x10]
cmp qword [rcx + 0x18], rax
jne 0x140115b9e
mov rax, qword [rbp + 0x38]
mov qword [rcx + 0x18], rax
mov rcx, qword [rbp + 0x20]
lea rax, [rbp + 0x10]
cmp qword [rcx + 0x20], rax
jne 0x140115bb0
mov rax, qword [rbp + 0x40]
mov qword [rcx + 0x20], rax
cmp dword [rsp + 0x78], 0
jle 0x140115bc2
mov rcx, qword [rsp + 0x70]
call fcn.1402bd0e0
nop
cmp dword [rbp - 0x78], 0
jle 0x140115bd2
mov rcx, qword [rbp - 0x80]
call fcn.1402bd0e0
nop
cmp dword [rbp - 0x48], 0
jle 0x140115be2
mov rcx, qword [rbp - 0x50]
call fcn.1402bd0e0
nop
mov qword [rbp - 0x30], r14
mov rbx, qword [rbp - 0x18]
test rbx, rbx
je 0x140115c7f
cmp qword [rbx + 0x18], 0
je 0x140115c02
mov rcx, rbx
call fcn.140209fc0
mov rdi, qword [rbx + 0x28]
mov rax, qword [rbx + 0x30]
test rax, rax
je 0x140115c30
test rdi, rdi
je 0x140115c26
mov qword [rax + 0x28], rdi
mov rcx, qword [rbx + 0x28]
mov rax, qword [rbx + 0x30]
mov qword [rcx + 0x30], rax
jmp 0x140115c3d
mov qword [rax + 0x28], 0
jmp 0x140115c3d
test rdi, rdi
je 0x140115c3d
mov qword [rdi + 0x30], 0
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140115c66
cmp qword [rcx + 0x18], rbx
jne 0x140115c54
mov rax, qword [rbx + 0x28]
mov qword [rcx + 0x18], rax
mov rcx, qword [rbx + 0x10]
cmp qword [rcx + 0x20], rbx
jne 0x140115c66
mov rax, qword [rbx + 0x30]
mov qword [rcx + 0x20], rax
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax]
mov rbx, rdi
test rdi, rdi
jne 0x140115bf3
mov rax, qword [rbp]
test rax, rax
je 0x140115cb1
mov rcx, qword [rbp - 8]
test rcx, rcx
je 0x140115ca3
mov qword [rax + 0x28], rcx
mov rcx, qword [rbp - 8]
mov rax, qword [rbp]
mov qword [rcx + 0x30], rax
jmp 0x140115cc2
mov rax, qword [rbp]
mov qword [rax + 0x28], 0
jmp 0x140115cc2
mov rax, qword [rbp - 8]
test rax, rax
je 0x140115cc2
mov qword [rax + 0x30], 0
mov rcx, qword [rbp - 0x20]
test rcx, rcx
je 0x140115cf3
lea rax, [rbp - 0x30]
cmp qword [rcx + 0x18], rax
jne 0x140115ce1
mov rax, qword [rbp - 8]
mov qword [rcx + 0x18], rax
mov rcx, qword [rbp - 0x20]
lea rax, [rbp - 0x30]
cmp qword [rcx + 0x20], rax
jne 0x140115cf3
mov rax, qword [rbp]
mov qword [rcx + 0x20], rax
movzx eax, sil
add rsp, 0x188
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret