Function at 0x140009280
Capabilities:
Enumerate processes
Get common file path
Query or enumerate registry value

Disassembly:
push rbp
push rbx
lea rbp, [rsp - 0x4b8]
sub rsp, 0x5b8
mov rax, qword [0x140017058]
xor rax, rsp
mov qword [rbp + 0x490], rax
mov edx, 0x8b
mov qword [0x1400173c0], rcx
call qword [sym.imp.USER32.dll_LoadIconW]
mov edx, 0x208
lea rcx, [0x140017bd0]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__wgetcwd]
xor edx, edx
mov dword [rbp + 0x20], 0x238
lea ecx, [rdx + 2]
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rbx, rax
test rax, rax
je 0x140009349
lea rdx, [rbp + 0x20]
mov rcx, rax
call sub.KERNEL32.dll_Process32FirstW
test eax, eax
je 0x140009349
lea rdx, str.3dsmax.exe
lea rcx, [rbp + 0x4c]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x14000955d
lea rdx, [rbp + 0x20]
mov rcx, rbx
call sub.KERNEL32.dll_Process32NextW
test eax, eax
je 0x140009349
nop dword [rax]
lea rdx, str.3dsmax.exe
lea rcx, [rbp + 0x4c]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x14000955d
lea rdx, [rbp + 0x20]
mov rcx, rbx
call sub.KERNEL32.dll_Process32NextW
test eax, eax
jne 0x140009320
mov rcx, rbx
mov qword [rsp + 0x5e8], r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r12d, r12d
lea rax, [rbp + 0x280]
xor r9d, r9d
mov dword [0x140017ff8], r12d
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea edx, [r12 + 0x28]
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
lea r8, [rbp + 0x280]
lea rdx, str._sQuickTiles_
lea rcx, [0x140017de0]
call qword [sym.imp.USER32.dll_wsprintfW]
lea r8, [rsp + 0x40]
mov dword [rsp + 0x30], 0x100
lea rdx, str.SoftwareQuickPluginsQuickTiles
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
jne 0x140009415
mov rcx, qword [rsp + 0x40]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rdx, str.InstallLibdir
lea rax, [rbp + 0x20]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x14000940a
lea r8, [rbp + 0x20]
lea rdx, [0x140011814]
lea rcx, [0x140017de0]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x5d8], rsi
mov qword [rsp + 0x5e0], rdi
mov qword [rsp + 0x5b0], r13
mov qword [rsp + 0x5a8], r14
mov qword [rsp + 0x5a0], r15
call fcn.140007460
mov ecx, r12d
cmp qword [0x140017ff0], rcx
mov dword [rsp + 0x30], ecx
jbe 0x1400097d3
nop word [rax + rax]
lea r8d, [rcx + 0x7e2]
lea rcx, [rbp + 0x260]
lea rdx, [0x1400118ec]
call fcn.140009220
lea rax, [rbp + 0x260]
mov qword [rbp - 0x30], r12
mov r8, 0xffffffffffffffff
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400094a0
lea rdx, [rbp + 0x260]
lea rcx, [rbp - 0x40]
call fcn.140005070
mov r12, qword [0x140017fe8]
mov r13, qword [rbp - 0x28]
mov r15, r12
mov rsi, qword [rbp - 0x30]
mov r14, qword [rbp - 0x40]
mov rbx, qword [r12 + 8]
cmp byte [rbx + 0x19], 0
jne 0x140009520
nop dword [rax + rax]
cmp r13, 0x10
lea rdx, [rbp - 0x40]
lea rcx, [rbx + 0x20]
cmovae rdx, r14
cmp qword [rbx + 0x38], 0x10
jb 0x1400094fb
mov rcx, qword [rbx + 0x20]
mov rdi, qword [rbx + 0x30]
cmp rsi, rdi
mov r8, rdi
cmovb r8, rsi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140009587
js 0x14000958c
mov r15, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x1400094e0
cmp byte [r15 + 0x19], 0
jne 0x140009597
cmp qword [r15 + 0x38], 0x10
lea rdx, [r15 + 0x20]
jb 0x140009536
mov rdx, qword [r15 + 0x20]
mov rbx, qword [r15 + 0x30]
lea rcx, [rbp - 0x40]
cmp r13, 0x10
mov r8, rsi
cmovae rcx, r14
cmp rbx, rsi
cmovb r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140009592
js 0x140009597
jmp 0x14000959a
mov rcx, qword [0x1400173c0]
lea r9, [0x140001210]
xor r8d, r8d
mov qword [rsp + 0x20], 0
mov edx, 0x86
call qword [sym.imp.USER32.dll_DialogBoxParamW]
jmp 0x14000a04a
cmp rdi, rsi
jae 0x140009514
mov rbx, qword [rbx + 0x10]
jmp 0x14000951a
cmp rsi, rbx
jae 0x14000959a
mov r15, r12
cmp r13, 0x10
jb 0x1400095d8
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1400095c9
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009bd6
mov rcx, r14
call fcn.14000f244
mov r12, qword [0x140017fe8]
cmp r15, r12
je 0x1400097b6
xor r12d, r12d
mov qword [rbp - 0x28], 0xf
mov qword [rbp - 0x30], r12
lea rax, [rbp + 0x260]
mov byte [rbp - 0x40], r12b
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r12b
jne 0x140009602
lea rdx, [rbp + 0x260]
lea rcx, [rbp - 0x40]
call fcn.140005070
mov rdi, qword [0x140017fe8]
mov r15, qword [rbp - 0x28]
mov r14, rdi
mov rsi, qword [rbp - 0x30]
mov r13, qword [rbp - 0x40]
mov rbx, qword [rdi + 8]
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rbx
mov dword [rsp + 0x60], r12d
cmp byte [rbx + 0x19], r12b
jne 0x1400096a2
nop word [rax + rax]
cmp r15, 0x10
mov qword [rsp + 0x58], rbx
lea rdx, [rbp - 0x40]
cmovae rdx, r13
lea rcx, [rbx + 0x20]
cmp qword [rbx + 0x38], 0x10
jb 0x140009670
mov rcx, qword [rbx + 0x20]
mov rdi, qword [rbx + 0x30]
cmp rsi, rdi
mov r8, rdi
cmovb r8, rsi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400096e1
js 0x1400096e6
mov r14, rbx
mov dword [rsp + 0x60], 1
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], r12b
je 0x140009650
mov rdi, qword [rsp + 0x50]
cmp byte [r14 + 0x19], r12b
jne 0x1400096f6
cmp qword [r14 + 0x38], 0x10
lea rdx, [r14 + 0x20]
jb 0x1400096b7
mov rdx, qword [r14 + 0x20]
mov rbx, qword [r14 + 0x30]
lea rcx, [rbp - 0x40]
cmp r15, 0x10
mov r8, rsi
cmovae rcx, r13
cmp rbx, rsi
cmovb r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400096f1
js 0x1400096f6
jmp 0x140009772
cmp rdi, rsi
jae 0x140009689
mov rbx, qword [rbx + 0x10]
mov dword [rsp + 0x60], r12d
jmp 0x140009697
cmp rsi, rbx
jae 0x140009772
movabs rax, 0x38e38e38e38e38e
cmp qword [0x140017ff0], rax
je 0x14000a06b
mov ecx, 0x48
call fcn.14000f200
mov r8, rax
lea rdx, [rbp - 0x50]
lea rcx, [0x140017fe8]
mov qword [rax + 0x30], r12
mov qword [rax + 0x38], r12
movups xmm0, xmmword [rbp - 0x40]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rbp - 0x30]
movups xmm0, xmmword [rsp + 0x58]
movups xmmword [rax + 0x30], xmm1
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], r12b
mov qword [rax + 0x40], r12
mov qword [rax], rdi
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rdi
mov word [rax + 0x18], r12w
movaps xmmword [rbp - 0x50], xmm0
call fcn.140004b50
mov r14, rax
mov rax, qword [r14 + 0x40]
mov byte [rax], r12b
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x1400097b9
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400097af
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009865
call fcn.14000f244
jmp 0x1400097b9
xor r12d, r12d
mov ecx, dword [rsp + 0x30]
inc ecx
movsxd rax, ecx
cmp rax, qword [0x140017ff0]
mov dword [rsp + 0x30], ecx
jb 0x140009460
xorps xmm0, xmm0
mov qword [rsp + 0x68], r12
lea r8, [rsp + 0x58]
mov rcx, 0xffffffff80000001
lea rdx, str.SoftwareQuickPluginsQuickTiles
movdqu xmmword [rsp + 0x58], xmm0
call fcn.140003e20
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x58]
mov rax, rsi
sub rax, rdi
sar rax, 5
mov qword [rbp - 0x50], rax
test rax, rax
je 0x140009afa
mov rdx, r12
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x50], rdx
mov rbx, rdx
mov qword [rbp - 0x28], r12
shl rbx, 5
movabs rax, 0x7fffffffffffffff
add rbx, rdi
cmp qword [rbx + 0x18], 0x10
mov r14, qword [rbx + 0x10]
jb 0x14000984d
mov rbx, qword [rbx]
cmp r14, 0x10
jae 0x14000986c
movups xmm0, xmmword [rbx]
mov esi, 0xf
movups xmmword [rbp - 0x40], xmm0
mov rdi, qword [rbp - 0x40]
jmp 0x1400098d8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rsi, r14
or rsi, 0xf
cmp rsi, rax
cmova rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x1400098b3
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000a071
mov rcx, rax
call fcn.14000f200
test rax, rax
je 0x14000997b
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400098c5
test rcx, rcx
je 0x1400098c2
call fcn.14000f200
mov rdi, rax
jmp 0x1400098c5
mov rdi, r12
lea r8, [r14 + 1]
mov qword [rbp - 0x40], rdi
mov rdx, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea eax, [r14 - 4]
mov qword [rbp - 0x28], rsi
movsxd rcx, eax
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
cmp r14, rcx
jb 0x14000a065
movsxd r8, r14d
lea rdx, [rbp - 0x40]
sub r14, rcx
cmp r14, r8
cmovb r8, r14
cmp rsi, 0x10
cmovae rdx, rdi
add rdx, rcx
lea rcx, [rbp - 0x20]
call fcn.140005070
cmp qword [rbp - 8], 0x10
lea rcx, [rbp - 0x20]
cmovae rcx, qword [rbp - 0x20]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
test eax, eax
jne 0x140009982
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x140009a77
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009a72
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009a72
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rsi, qword [0x140017fe8]
mov r13, qword [rbp - 8]
mov r14, rsi
mov rdi, qword [rbp - 0x10]
mov r15, qword [rbp - 0x20]
mov rbx, qword [rsi + 8]
mov qword [rsp + 0x40], rsi
cmp byte [rbx + 0x19], 0
jne 0x1400099fd
nop word [rax + rax]
cmp r13, 0x10
lea rdx, [rbp - 0x20]
lea rcx, [rbx + 0x20]
cmovae rdx, r15
cmp qword [rbx + 0x38], 0x10
jb 0x1400099cb
mov rcx, qword [rbx + 0x20]
mov rsi, qword [rbx + 0x30]
cmp rdi, rsi
mov r8, rsi
cmovb r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140009bdd
js 0x140009be6
mov r14, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x1400099b0
mov rsi, qword [rsp + 0x40]
cmp byte [r14 + 0x19], 0
jne 0x140009a40
cmp qword [r14 + 0x38], 0x10
lea rdx, [r14 + 0x20]
jb 0x140009a13
mov rdx, qword [r14 + 0x20]
mov rbx, qword [r14 + 0x30]
lea rcx, [rbp - 0x20]
cmp r13, 0x10
mov r8, rdi
cmovae rcx, r15
cmp rbx, rdi
cmovb r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140009bef
jns 0x140009bf8
cmp r13, 0x10
jb 0x140009a77
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x140009a6f
mov r15, qword [r15 - 8]
add rdx, 0x27
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000997b
mov rcx, r15
call fcn.14000f244
mov rdx, qword [rbp - 0x28]
mov byte [rbp - 0x20], 0
mov qword [rbp - 8], 0xf
mov qword [rbp - 0x10], r12
cmp rdx, 0x10
jb 0x140009ac2
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009abd
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000997b
call fcn.14000f244
mov ecx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x50]
inc ecx
mov rdi, qword [rsp + 0x58]
inc rdx
movsxd rax, ecx
mov dword [rsp + 0x30], ecx
mov qword [rsp + 0x50], rdx
cmp rax, qword [rbp - 0x50]
jb 0x140009827
mov rsi, qword [rsp + 0x60]
mov dword [0x140017ff8], 2
mov dword [0x140017040], 1
lea rbx, [0x140000000]
nop dword [rax + rax]
movsxd r9, dword [0x140017ff8]
xor r8d, r8d
mov rcx, qword [0x1400173c0]
mov qword [rsp + 0x20], r12
movzx edx, word [rbx + r9*4 + 0x17000]
mov r9, qword [rbx + r9*8 + 0x17018]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
mov dword [0x140017040], eax
test eax, eax
jns 0x140009b10
cmp dword [0x140017ff8], 0
jl 0x140009b77
mov rcx, qword [0x1400173c0]
lea r9, [0x1400070e0]
xor r8d, r8d
mov qword [rsp + 0x20], r12
mov edx, 0x87
call qword [sym.imp.USER32.dll_DialogBoxParamW]
mov dword [0x140017040], eax
test eax, eax
jns 0x140009b10
test rdi, rdi
je 0x14000a01a
mov rbx, rdi
cmp rdi, rsi
je 0x140009ba1
nop dword [rax]
mov rcx, rbx
call fcn.1400034f0
add rbx, 0x20
cmp rbx, rsi
jne 0x140009b90
mov rdx, qword [rsp + 0x68]
mov rax, rdi
sub rdx, rdi
and rdx, 0xffffffffffffffe0
cmp rdx, 0x1000
jb 0x14000a012
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a012
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rsi, rdi
jae 0x1400099ec
mov rbx, qword [rbx + 0x10]
jmp 0x1400099f2
cmp rdi, rbx
jb 0x140009a40
cmp r14, rsi
je 0x140009a40
cmp qword [rbp - 0x28], 0x10
lea r14, [rbp - 0x40]
mov rax, qword [rbp - 0x40]
mov rsi, qword [rbp - 0x30]
cmovae r14, rax
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], rax
cmp rsi, 0x10
jae 0x140009c46
movups xmm0, xmmword [r14]
mov qword [rbp - 0x68], rsi
mov rsi, qword [rsp + 0x40]
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x60], 0xf
jmp 0x140009cdc
movabs rax, 0x7fffffffffffffff
mov rbx, rsi
or rbx, 0xf
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140009c9a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000a077
mov rcx, rax
call fcn.14000f200
mov rcx, rax
test rax, rax
je 0x14000a00b
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140009ca9
test rcx, rcx
je 0x140009ca6
call fcn.14000f200
jmp 0x140009ca9
mov rax, r12
lea r8, [rsi + 1]
mov qword [rbp - 0x78], rax
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov r13, qword [rbp - 8]
mov rdi, qword [rbp - 0x10]
mov r15, qword [rbp - 0x20]
mov qword [rbp - 0x68], rsi
mov rsi, qword [0x140017fe8]
mov qword [rsp + 0x40], rsi
mov qword [rbp - 0x60], rbx
mov rbx, qword [rsi + 8]
mov r14, rsi
mov qword [rsp + 0x70], rbx
mov dword [rsp + 0x78], r12d
cmp byte [rbx + 0x19], 0
jne 0x140009d45
cmp r13, 0x10
mov qword [rsp + 0x70], rbx
lea rdx, [rbp - 0x20]
cmovae rdx, r15
lea rcx, [rbx + 0x20]
cmp qword [rbx + 0x38], 0x10
jb 0x140009d13
mov rcx, qword [rbx + 0x20]
mov rsi, qword [rbx + 0x30]
cmp rdi, rsi
mov r8, rsi
cmovb r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140009d82
js 0x140009d87
mov r14, rbx
mov dword [rsp + 0x78], 1
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x140009cf3
mov rsi, qword [rsp + 0x40]
cmp byte [r14 + 0x19], 0
jne 0x140009d97
cmp qword [r14 + 0x38], 0x10
lea rdx, [r14 + 0x20]
jb 0x140009d5b
mov rdx, qword [r14 + 0x20]
mov rbx, qword [r14 + 0x30]
lea rcx, [rbp - 0x20]
cmp r13, 0x10
mov r8, rdi
cmovae rcx, r15
cmp rbx, rdi
cmovb r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140009d92
js 0x140009d97
jmp 0x140009dfe
cmp rsi, rdi
jae 0x140009d2c
mov rbx, qword [rbx + 0x10]
mov dword [rsp + 0x78], r12d
jmp 0x140009d3a
cmp rdi, rbx
jae 0x140009dfe
movabs rax, 0x38e38e38e38e38e
cmp qword [0x140017ff0], rax
je 0x14000a083
mov ecx, 0x48
call fcn.14000f200
lea rdx, [rbp - 0x20]
mov rdi, rax
lea rcx, [rax + 0x20]
call fcn.1400031a0
movups xmm0, xmmword [rsp + 0x70]
mov qword [rdi + 0x40], r12
lea rdx, [rsp + 0x40]
mov qword [rdi], rsi
lea rcx, [0x140017fe8]
mov qword [rdi + 8], rsi
mov r8, rdi
mov qword [rdi + 0x10], rsi
movaps xmmword [rsp + 0x40], xmm0
mov word [rdi + 0x18], 0
call fcn.140004b50
mov r14, rax
lea r8, [rbp - 0x78]
mov rdx, 0xffffffff80000001
lea rcx, [rbp]
call fcn.140007230
mov rdi, qword [r14 + 0x40]
mov rbx, rax
add rdi, 0x28
cmp rdi, rax
je 0x140009e47
mov rcx, rdi
call fcn.1400034f0
movups xmm0, xmmword [rbx]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x140009e82
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009e7d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a00b
call fcn.14000f244
mov r13, qword [0x140017fe8]
mov rsi, qword [rbp - 8]
mov rdi, r13
mov r15, qword [rbp - 0x10]
mov r14, qword [rbp - 0x20]
mov rbx, qword [r13 + 8]
mov qword [rsp + 0x70], rbx
mov dword [rsp + 0x78], r12d
cmp byte [rbx + 0x19], 0
jne 0x140009eff
nop dword [rax]
cmp rsi, 0x10
mov qword [rsp + 0x70], rbx
lea r8, [rbp - 0x20]
cmovae r8, r14
lea rcx, [rbx + 0x20]
cmp qword [rbx + 0x38], 0x10
jb 0x140009ed0
mov rcx, qword [rbx + 0x20]
mov rdx, qword [rbx + 0x30]
mov r9, r15
call fcn.140003070
test eax, eax
jns 0x140009eeb
mov rbx, qword [rbx + 0x10]
mov dword [rsp + 0x78], r12d
jmp 0x140009ef9
mov rdi, rbx
mov dword [rsp + 0x78], 1
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x140009eb0
cmp byte [rdi + 0x19], 0
jne 0x140009f30
cmp qword [rdi + 0x38], 0x10
lea r8, [rdi + 0x20]
jb 0x140009f14
mov r8, qword [rdi + 0x20]
mov r9, qword [rdi + 0x30]
lea rcx, [rbp - 0x20]
cmp rsi, 0x10
mov rdx, r15
cmovae rcx, r14
call fcn.140003070
test eax, eax
jns 0x140009f9e
movabs rax, 0x38e38e38e38e38e
cmp qword [0x140017ff0], rax
je 0x14000a07d
mov edx, 1
lea rcx, [0x140017fe8]
call fcn.140004f60
lea rdx, [rbp - 0x20]
mov rdi, rax
lea rcx, [rax + 0x20]
call fcn.1400031a0
movups xmm0, xmmword [rsp + 0x70]
mov qword [rdi + 0x40], r12
lea rdx, [rsp + 0x40]
mov qword [rdi], r13
lea rcx, [0x140017fe8]
mov qword [rdi + 8], r13
mov r8, rdi
mov qword [rdi + 0x10], r13
movaps xmmword [rsp + 0x40], xmm0
mov word [rdi + 0x18], 0
call fcn.140004b50
mov rdi, rax
mov rax, qword [rdi + 0x40]
mov byte [rax], 1
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x140009fe0
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009fdb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000997b
call fcn.14000f244
mov rax, qword [rbp - 0x28]
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
cmp rax, 0x10
jb 0x140009ac2
mov rcx, qword [rbp - 0x58]
lea rdx, [rax + 1]
jmp 0x140009a98
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.14000f244
mov r14, qword [rsp + 0x5a8]
mov r13, qword [rsp + 0x5b0]
mov rsi, qword [rsp + 0x5d8]
mov rdi, qword [rsp + 0x5e0]
mov r15, qword [rsp + 0x5a0]
mov r12, qword [rsp + 0x5e8]
xor eax, eax
mov rcx, qword [rbp + 0x490]
xor rcx, rsp
call fcn.14000f5c0
add rsp, 0x5b8
pop rbx
pop rbp
ret
call fcn.140004ee0
int3
call fcn.140004e60
int3
call fcn.140004e20
int3
call fcn.140004e20
int3
call fcn.140004e60
int3
call fcn.140004e60
int3