Function at 0x140011150
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xd8]
sub rsp, 0x1d8
mov r14, r9
mov r12, r8
mov r13, rdx
xor ebx, ebx
lea ecx, [rbx + 2]
call fcn.1400e8270
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x60], rax
mov word [rax], bx
lea ecx, [rbx + 2]
call fcn.1400e8270
mov qword [rsp + 0x68], rax
mov qword [rbp - 0x58], rax
mov word [rax], bx
lea ecx, [rbx + 2]
call fcn.1400e8270
mov rdi, rax
mov qword [rbp - 0x20], rax
mov word [rax], bx
lea ecx, [rbx + 2]
call fcn.1400e8270
mov qword [rbp + 0x30], rax
mov word [rax], bx
lea ecx, [rbx + 2]
call fcn.1400e8270
mov qword [rbp - 0x10], rax
mov word [rax], bx
cmp dword [rbp + 0x148], 0xffffffff
jne 0x140011573
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov r13, rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rbp - 0x40], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rbp - 0x48], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rbp - 0x80], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rbp - 0x50], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rsp + 0x78], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov r15, rax
mov qword [rbp - 0x78], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rbx, [0x14011eaa0]
test r12, r12
cmovne rbx, r12
mov rcx, rbx
call fcn.1400e81d8
mov r12, rax
mov qword [rbp - 0x68], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea r9, [rbp - 0x78]
lea r8, [rbp - 0x68]
mov rdx, qword [rbp + 0x128]
lea rcx, [rsp + 0x48]
call fcn.14000b540
nop
lea rcx, [0x14011eaa0]
test r14, r14
cmovne rcx, r14
call fcn.1400e81d8
mov rsi, rax
xor ecx, ecx
call fcn.1400e825c
nop
mov rcx, rbx
call fcn.1400e81d8
mov r14, rax
xor ecx, ecx
call fcn.1400e825c
nop
mov ecx, 2
call fcn.1400e8270
mov qword [rbp - 0x78], rax
xor ecx, ecx
mov word [rax], cx
mov rax, qword [rbp + 0x128]
cmp rax, qword [0x14016aa18]
jne 0x140011336
lea rcx, [0x14011ec08]
jmp 0x14001134f
lea rcx, [0x14011ebf8]
cmp rax, qword [0x14016aa20]
lea rax, [0x14011f8bc]
cmovne rcx, rax
call fcn.1400e81d8
mov qword [rsp + 0x40], rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eb8c]
call fcn.1400e81d8
mov rbx, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eaa0]
mov rax, qword [rsp + 0x40]
test rax, rax
cmovne rcx, rax
call fcn.1400e81d8
mov qword [rsp + 0x60], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.140005790
mov rcx, rbx
call fcn.1400e825c
mov rax, qword [rsp + 0x60]
lea rcx, [0x14011eaa0]
test rax, rax
cmovne rcx, rax
call fcn.1400e81d8
mov qword [rsp + 0x58], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, r14
lea rcx, [rsp + 0x58]
call fcn.140005790
mov rbx, qword [rsp + 0x58]
lea rcx, [0x14011eaa0]
test rbx, rbx
cmovne rcx, rbx
call fcn.1400e81d8
mov qword [rsp + 0x50], rax
mov rcx, qword [rbp - 0x78]
call fcn.1400e825c
mov rcx, rbx
call fcn.1400e825c
mov rcx, qword [rsp + 0x60]
call fcn.1400e825c
mov rcx, qword [rsp + 0x40]
call fcn.1400e825c
cmp word [rsi], 0
je 0x14001148c
lea rcx, [0x14011eb8c]
call fcn.1400e81d8
mov rbx, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eaa0]
test rbx, rbx
cmovne rcx, rbx
call fcn.1400e81d8
mov qword [rsp + 0x58], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, rsi
lea rcx, [rsp + 0x58]
call fcn.140005790
mov rcx, rbx
call fcn.1400e825c
mov rdx, qword [rsp + 0x58]
lea rcx, [rsp + 0x50]
call fcn.140005790
mov rcx, qword [rsp + 0x58]
call fcn.1400e825c
nop
mov ecx, dword [0x1401a9af0]
mov rax, qword gs:[0x58]
mov edx, reloc.OLEAUT32.dll_SafeArrayLock
mov rcx, qword [rax + rcx*8]
mov eax, dword [rdx + rcx]
cmp dword [0x140179250], eax
jg 0x1400123ea
mov rbx, qword [0x140179248]
lea rcx, [0x14011eaa0]
mov rax, qword [rsp + 0x50]
test rax, rax
cmovne rcx, rax
call fcn.1400e81d8
mov qword [0x140179248], rax
mov rcx, rbx
call fcn.1400e825c
xor ebx, ebx
mov dword [rbp + 0x148], ebx
mov rcx, qword [rsp + 0x50]
call fcn.1400e825c
nop
mov rcx, r14
call fcn.1400e825c
nop
mov rcx, rsi
call fcn.1400e825c
nop
mov rcx, qword [rsp + 0x48]
call fcn.1400e825c
nop
mov rcx, r12
call fcn.1400e825c
nop
mov rcx, r15
call fcn.1400e825c
nop
mov rcx, qword [rsp + 0x78]
call fcn.1400e825c
nop
mov rcx, qword [rbp - 0x50]
call fcn.1400e825c
nop
mov rcx, qword [rbp - 0x80]
call fcn.1400e825c
nop
mov rcx, qword [rbp - 0x48]
call fcn.1400e825c
nop
mov rcx, qword [rbp - 0x40]
call fcn.1400e825c
nop
mov rcx, r13
call fcn.1400e825c
mov r13, qword [rbp + 0x128]
mov r14, qword [rbp + 0x138]
mov r12, qword [rbp + 0x130]
mov ecx, dword [0x140178818]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
or eax, 0x20019
lea rcx, [rbp - 0x18]
mov qword [rsp + 0x20], rcx
mov r9d, eax
xor r8d, r8d
mov rdx, r12
mov rcx, r13
call fcn.140009290
test eax, eax
jne 0x140012398
lea ecx, [rax + 2]
call fcn.1400e8270
mov qword [rsp + 0x58], rax
mov word [rax], bx
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov rdx, r14
mov rcx, qword [rbp - 0x18]
call fcn.140019160
test eax, eax
jne 0x140012382
mov rcx, qword [rsp + 0x58]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400115e6
test rax, rax
je 0x140012382
xorps xmm0, xmm0
movdqu xmmword [rbp - 8], xmm0
mov qword [rbp + 8], rbx
xor r9d, r9d
lea r8, [rbp - 8]
movzx edx, word [rbp + 0x140]
call fcn.14000a1a0
mov rdx, rbx
mov qword [rbp - 0x78], rbx
mov rbx, qword [rbp]
mov rax, rbx
mov rsi, qword [rbp - 8]
sub rax, rsi
sar rax, 5
test rax, rax
je 0x140012322
mov ecx, dword [0x1401a9af0]
mov rax, qword gs:[0x58]
lea rax, [rax + rcx*8]
mov qword [rbp - 0x68], rax
lea rdi, [0x14011eaa0]
test r14, r14
cmovne rdi, r14
mov qword [rsp + 0x60], rdi
lea r15, [0x14011eaa0]
test r12, r12
cmovne r15, r12
mov qword [rsp + 0x50], r15
nop word [rax + rax]
mov rbx, rdx
shl rbx, 5
add rbx, rsi
mov rax, qword [rbx + 8]
mov rdx, qword [rax]
lea rcx, [0x14011eaa0]
test rdx, rdx
cmovne rcx, rdx
call fcn.1400e81d8
mov qword [rbp - 0x58], rax
mov rcx, qword [rsp + 0x68]
call fcn.1400e825c
mov ecx, 2
call fcn.1400e8270
mov qword [rbp + 0x10], rax
xor esi, esi
mov word [rax], si
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], rsi
mov rax, qword [rbx + 8]
lea rdx, [rbp + 0x10]
mov rcx, qword [rax]
call fcn.14000a050
mov byte [rsp + 0x20], sil
xor r9d, r9d
lea r8, [rbp + 0x10]
mov rdx, qword [rbp + 0x120]
lea rcx, [rbp - 0x40]
call fcn.14000a570
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.14000bfb0
mov rbx, qword [rbp - 0x48]
lea rcx, [0x14011eaa0]
test rbx, rbx
cmovne rcx, rbx
call fcn.1400e81d8
mov qword [rbp - 0x60], rax
mov rcx, qword [rsp + 0x70]
call fcn.1400e825c
mov rcx, rbx
call fcn.1400e825c
mov rcx, rdi
call fcn.1400e81d8
mov r14, rax
mov qword [rbp - 0x70], rax
xor ecx, ecx
call fcn.1400e825c
nop
mov rcx, r15
call fcn.1400e81d8
mov r15, rax
mov qword [rbp - 0x28], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea ecx, [rsi + 2]
call fcn.1400e8270
mov r12, rax
mov word [rax], si
cmp r13, qword [0x14016aa18]
jne 0x140011784
lea rcx, [0x14011ec08]
jmp 0x14001179d
lea rcx, [0x14011ebf8]
cmp r13, qword [0x14016aa20]
lea rax, [0x14011f8bc]
cmovne rcx, rax
call fcn.1400e81d8
mov rsi, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eb8c]
call fcn.1400e81d8
mov rbx, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eaa0]
test rsi, rsi
cmovne rcx, rsi
call fcn.1400e81d8
mov qword [rsp + 0x40], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.140005790
mov rcx, rbx
call fcn.1400e825c
mov rdi, qword [rsp + 0x40]
lea rcx, [0x14011eaa0]
test rdi, rdi
cmovne rcx, rdi
call fcn.1400e81d8
mov qword [rsp + 0x40], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, r15
lea rcx, [rsp + 0x40]
call fcn.140005790
mov rbx, qword [rsp + 0x40]
lea rcx, [0x14011eaa0]
test rbx, rbx
cmovne rcx, rbx
call fcn.1400e81d8
mov qword [rsp + 0x68], rax
mov rcx, r12
call fcn.1400e825c
mov rcx, rbx
call fcn.1400e825c
mov rcx, rdi
call fcn.1400e825c
mov rcx, rsi
call fcn.1400e825c
cmp word [r14], 0
je 0x1400118cf
lea rcx, [0x14011eb8c]
call fcn.1400e81d8
mov rbx, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eaa0]
test rbx, rbx
cmovne rcx, rbx
call fcn.1400e81d8
mov qword [rsp + 0x40], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, r14
lea rcx, [rsp + 0x40]
call fcn.140005790
mov rcx, rbx
call fcn.1400e825c
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x68]
call fcn.140005790
mov rcx, qword [rsp + 0x40]
call fcn.1400e825c
nop
mov rcx, qword [rsp + 0x60]
call fcn.1400e81d8
mov rdi, rax
mov qword [rbp - 0x30], rax
xor ecx, ecx
call fcn.1400e825c
nop
mov rcx, qword [rsp + 0x50]
call fcn.1400e81d8
mov rsi, rax
mov qword [rbp - 0x38], rax
xor ecx, ecx
call fcn.1400e825c
nop
mov ecx, 2
call fcn.1400e8270
mov qword [rbp - 0x80], rax
xor ecx, ecx
mov word [rax], cx
cmp r13, qword [0x14016aa18]
jne 0x140011926
lea rcx, [0x14011ec08]
jmp 0x14001193f
lea rcx, [0x14011ebf8]
cmp r13, qword [0x14016aa20]
lea rax, [0x14011f8bc]
cmovne rcx, rax
call fcn.1400e81d8
mov r13, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eb8c]
call fcn.1400e81d8
mov rbx, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eaa0]
test r13, r13
cmovne rcx, r13
call fcn.1400e81d8
mov qword [rsp + 0x40], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.140005790
mov rcx, rbx
call fcn.1400e825c
mov r12, qword [rsp + 0x40]
lea rcx, [0x14011eaa0]
test r12, r12
cmovne rcx, r12
call fcn.1400e81d8
mov qword [rsp + 0x40], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, rsi
lea rcx, [rsp + 0x40]
call fcn.140005790
mov rbx, qword [rsp + 0x40]
lea rcx, [0x14011eaa0]
test rbx, rbx
cmovne rcx, rbx
call fcn.1400e81d8
mov qword [rsp + 0x70], rax
mov rcx, qword [rbp - 0x80]
call fcn.1400e825c
mov rcx, rbx
call fcn.1400e825c
mov rcx, r12
call fcn.1400e825c
mov rcx, r13
call fcn.1400e825c
cmp word [rdi], 0
je 0x140011a71
lea rcx, [0x14011eb8c]
call fcn.1400e81d8
mov rbx, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eaa0]
test rbx, rbx
cmovne rcx, rbx
call fcn.1400e81d8
mov qword [rsp + 0x40], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, rdi
lea rcx, [rsp + 0x40]
call fcn.140005790
mov rcx, rbx
call fcn.1400e825c
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x70]
call fcn.140005790
mov rcx, qword [rsp + 0x40]
call fcn.1400e825c
nop
lea rax, [rbp + 0x38]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x10]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x20]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x58]
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x70]
mov rcx, qword [rbp + 0x120]
call fcn.1400058c0
movzx ebx, al
mov rcx, qword [rsp + 0x70]
call fcn.1400e825c
nop
mov rcx, rsi
call fcn.1400e825c
nop
mov rcx, rdi
call fcn.1400e825c
nop
mov rcx, qword [rsp + 0x68]
call fcn.1400e825c
nop
mov rcx, r15
call fcn.1400e825c
nop
mov rcx, r14
call fcn.1400e825c
mov rax, qword [rbp - 0x60]
mov qword [rsp + 0x70], rax
mov rax, qword [rbp - 0x58]
mov qword [rsp + 0x68], rax
test bl, bl
je 0x140012277
cmp dword [rbp + 0x148], 0xffffffff
jne 0x140011fba
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov r13, rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rbp - 0x70], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rbp - 0x28], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rbp - 0x30], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rbp - 0x38], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov qword [rbp - 0x50], rax
xor ecx, ecx
call fcn.1400e825c
nop
lea rcx, [0x14011eaa0]
call fcn.1400e81d8
mov rsi, rax
xor ecx, ecx
call fcn.1400e825c
nop
mov rcx, qword [rsp + 0x50]
call fcn.1400e81d8
mov r12, rax
xor ecx, ecx
call fcn.1400e825c
nop
mov ecx, 2
call fcn.1400e8270
mov qword [rbp - 0x80], rax
xor ecx, ecx
mov word [rax], cx
mov rax, qword [rbp + 0x128]
cmp rax, qword [0x14016aa18]
jne 0x140011bf9
lea rcx, [0x14011ec08]
jmp 0x140011c12
lea rcx, [0x14011ebf8]
cmp rax, qword [0x14016aa20]
lea rax, [0x14011f8bc]
cmovne rcx, rax
call fcn.1400e81d8
mov r14, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eb8c]
call fcn.1400e81d8
mov rbx, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eaa0]
test r14, r14
cmovne rcx, r14
call fcn.1400e81d8
mov qword [rsp + 0x40], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.140005790
mov rcx, rbx
call fcn.1400e825c
mov rdi, qword [rsp + 0x40]
lea rcx, [0x14011eaa0]
test rdi, rdi
cmovne rcx, rdi
call fcn.1400e81d8
mov qword [rsp + 0x40], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, r12
lea rcx, [rsp + 0x40]
call fcn.140005790
mov rbx, qword [rsp + 0x40]
lea rcx, [0x14011eaa0]
test rbx, rbx
cmovne rcx, rbx
call fcn.1400e81d8
mov r15, rax
mov qword [rsp + 0x78], rax
mov rcx, qword [rbp - 0x80]
call fcn.1400e825c
mov rcx, rbx
call fcn.1400e825c
mov rcx, rdi
call fcn.1400e825c
mov rcx, r14
call fcn.1400e825c
cmp word [rsi], 0
je 0x140011d4b
lea rcx, [0x14011eb8c]
call fcn.1400e81d8
mov rbx, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eaa0]
test rbx, rbx
cmovne rcx, rbx
call fcn.1400e81d8
mov qword [rsp + 0x40], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, rsi
lea rcx, [rsp + 0x40]
call fcn.140005790
mov rcx, rbx
call fcn.1400e825c
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x78]
call fcn.140005790
mov rcx, qword [rsp + 0x40]
call fcn.1400e825c
mov r15, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x60]
call fcn.1400e81d8
mov rdi, rax
xor ecx, ecx
call fcn.1400e825c
nop
mov rcx, qword [rsp + 0x50]
call fcn.1400e81d8
mov r14, rax
xor ecx, ecx
call fcn.1400e825c
nop
mov ecx, 2
call fcn.1400e8270
mov qword [rbp - 0x80], rax
xor ecx, ecx
mov word [rax], cx
mov rax, qword [rbp + 0x128]
cmp rax, qword [0x14016aa18]
jne 0x140011da1
lea rcx, [0x14011ec08]
jmp 0x140011dba
lea rcx, [0x14011ebf8]
cmp rax, qword [0x14016aa20]
lea rax, [0x14011f8bc]
cmovne rcx, rax
call fcn.1400e81d8
mov qword [rsp + 0x48], rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eb8c]
call fcn.1400e81d8
mov rbx, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eaa0]
mov rax, qword [rsp + 0x48]
test rax, rax
cmovne rcx, rax
call fcn.1400e81d8
mov qword [rsp + 0x78], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, rbx
lea rcx, [rsp + 0x78]
call fcn.140005790
mov rcx, rbx
call fcn.1400e825c
mov rax, qword [rsp + 0x78]
lea rcx, [0x14011eaa0]
test rax, rax
cmovne rcx, rax
call fcn.1400e81d8
mov qword [rsp + 0x40], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, r14
lea rcx, [rsp + 0x40]
call fcn.140005790
mov rbx, qword [rsp + 0x40]
lea rcx, [0x14011eaa0]
test rbx, rbx
cmovne rcx, rbx
call fcn.1400e81d8
mov qword [rsp + 0x40], rax
mov rcx, qword [rbp - 0x80]
call fcn.1400e825c
mov rcx, rbx
call fcn.1400e825c
mov rcx, qword [rsp + 0x78]
call fcn.1400e825c
mov rcx, qword [rsp + 0x48]
call fcn.1400e825c
cmp word [rdi], 0
je 0x140011ef7
lea rcx, [0x14011eb8c]
call fcn.1400e81d8
mov rbx, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eaa0]
test rbx, rbx
cmovne rcx, rbx
call fcn.1400e81d8
mov qword [rsp + 0x48], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.140005790
mov rcx, rbx
call fcn.1400e825c
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x40]
call fcn.140005790
mov rcx, qword [rsp + 0x48]
call fcn.1400e825c
nop
mov ecx, reloc.OLEAUT32.dll_SafeArrayLock
mov rax, qword [rbp - 0x68]
mov rax, qword [rax]
mov eax, dword [rcx + rax]
cmp dword [0x140179250], eax
jg 0x140012436
mov rbx, qword [0x140179248]
lea rcx, [0x14011eaa0]
mov rax, qword [rsp + 0x40]
test rax, rax
cmovne rcx, rax
call fcn.1400e81d8
mov qword [0x140179248], rax
mov rcx, rbx
call fcn.1400e825c
xor eax, eax
mov dword [rbp + 0x148], eax
mov rcx, qword [rsp + 0x40]
call fcn.1400e825c
nop
mov rcx, r14
call fcn.1400e825c
nop
mov rcx, rdi
call fcn.1400e825c
nop
mov rcx, r15
call fcn.1400e825c
nop
mov rcx, r12
call fcn.1400e825c
nop
mov rcx, rsi
call fcn.1400e825c
nop
mov rcx, qword [rbp - 0x50]
call fcn.1400e825c
nop
mov rcx, qword [rbp - 0x38]
call fcn.1400e825c
nop
mov rcx, qword [rbp - 0x30]
call fcn.1400e825c
nop
mov rcx, qword [rbp - 0x28]
call fcn.1400e825c
nop
mov rcx, qword [rbp - 0x70]
call fcn.1400e825c
nop
mov rcx, r13
call fcn.1400e825c
mov rcx, qword [rsp + 0x60]
call fcn.1400e81d8
mov r14, rax
mov qword [rbp - 0x28], rax
xor ecx, ecx
call fcn.1400e825c
nop
mov rcx, qword [rsp + 0x60]
call fcn.1400e81d8
mov rdi, rax
mov qword [rbp - 0x30], rax
xor ecx, ecx
call fcn.1400e825c
nop
mov rcx, qword [rsp + 0x50]
call fcn.1400e81d8
mov rsi, rax
mov qword [rbp - 0x38], rax
xor ecx, ecx
call fcn.1400e825c
nop
mov ecx, 2
call fcn.1400e8270
mov qword [rbp - 0x70], rax
xor ecx, ecx
mov word [rax], cx
mov r13, qword [rbp + 0x128]
cmp r13, qword [0x14016aa18]
jne 0x140012031
lea rcx, [0x14011ec08]
jmp 0x14001204a
lea rcx, [0x14011ebf8]
cmp r13, qword [0x14016aa20]
lea rax, [0x14011f8bc]
cmovne rcx, rax
call fcn.1400e81d8
mov r12, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eb8c]
call fcn.1400e81d8
mov rbx, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eaa0]
test r12, r12
cmovne rcx, r12
call fcn.1400e81d8
mov qword [rsp + 0x48], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, rbx
lea rcx, [rsp + 0x48]
call fcn.140005790
mov rcx, rbx
call fcn.1400e825c
mov r15, qword [rsp + 0x48]
lea rcx, [0x14011eaa0]
test r15, r15
cmovne rcx, r15
call fcn.1400e81d8
mov qword [rsp + 0x48], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, rsi
lea rcx, [rsp + 0x48]
call fcn.140005790
mov rbx, qword [rsp + 0x48]
lea rcx, [0x14011eaa0]
test rbx, rbx
cmovne rcx, rbx
call fcn.1400e81d8
mov qword [rsp + 0x40], rax
mov rcx, qword [rbp - 0x70]
call fcn.1400e825c
mov rcx, rbx
call fcn.1400e825c
mov rcx, r15
call fcn.1400e825c
mov rcx, r12
call fcn.1400e825c
cmp word [rdi], 0
je 0x14001217c
lea rcx, [0x14011eb8c]
call fcn.1400e81d8
mov rbx, rax
xor ecx, ecx
call fcn.1400e825c
lea rcx, [0x14011eaa0]
test rbx, rbx
cmovne rcx, rbx
call fcn.1400e81d8
mov qword [rsp + 0x48], rax
xor ecx, ecx
call fcn.1400e825c
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.140005790
mov rcx, rbx
call fcn.1400e825c
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x40]
call fcn.140005790
mov rcx, qword [rsp + 0x48]
call fcn.1400e825c
nop
mov ecx, reloc.OLEAUT32.dll_SafeArrayLock
mov rax, qword [rbp - 0x68]
mov rax, qword [rax]
mov eax, dword [rcx + rax]
cmp dword [0x140179250], eax
jg 0x140012482
xor ebx, ebx
cmp dword [rbp + 0x148], 0xffffffff
je 0x14001221f
mov ecx, 2
call fcn.1400e8270
mov r15, rax
mov word [rax], bx
lea rcx, [0x14011eaa0]
mov r12, qword [rsp + 0x40]
test r12, r12
cmovne rcx, r12
call fcn.1400e81d8
mov rbx, rax
mov qword [rbp - 0x70], rax
mov rcx, r15
call fcn.1400e825c
cmp dword [0x140178168], 1
jne 0x1400121eb
lea rcx, str.System
jmp 0x140012207
mov rcx, qword [0x140178378]
test rcx, rcx
je 0x140012200
add rcx, 0x210
jmp 0x140012207
lea rcx, str.Local_System
mov r8, rbx
mov rdx, qword [rsp + 0x70]
call fcn.140060db0
nop
mov rcx, rbx
call fcn.1400e825c
jmp 0x140012252
mov rbx, qword [0x140179248]
lea rcx, [0x14011eaa0]
mov r15, qword [rsp + 0x68]
test r15, r15
cmovne rcx, r15
call fcn.1400e81d8
mov qword [0x140179248], rax
mov rcx, rbx
call fcn.1400e825c
mov r12, qword [rsp + 0x40]
mov rcx, r12
call fcn.1400e825c
nop
mov rcx, rsi
call fcn.1400e825c
nop
mov rcx, rdi
call fcn.1400e825c
nop
mov rcx, r14
call fcn.1400e825c
jmp 0x14001227e
mov r13, qword [rbp + 0x128]
mov rdi, qword [rbp + 0x18]
test rdi, rdi
je 0x1400122e4
mov rbx, rdi
mov rsi, qword [rbp + 0x20]
cmp rdi, rsi
je 0x1400122a4
mov rcx, qword [rbx]
call fcn.1400e825c
add rbx, 8
cmp rbx, rsi
jne 0x140012293
mov rax, qword [rbp + 0x28]
sub rax, rdi
sar rax, 3
lea rdx, [rax*8]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400122dc
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400124ce
mov rcx, rdi
call fcn.1400e0fb8
mov rcx, qword [rbp + 0x10]
call fcn.1400e825c
mov rdx, qword [rbp - 0x78]
inc rdx
mov qword [rbp - 0x78], rdx
mov rbx, qword [rbp]
mov rax, rbx
mov rsi, qword [rbp - 8]
sub rax, rsi
sar rax, 5
cmp rdx, rax
jae 0x14001231e
mov rdi, qword [rsp + 0x60]
mov r15, qword [rsp + 0x50]
jmp 0x140011680
mov rdi, qword [rbp - 0x20]
test rsi, rsi
je 0x140012382
cmp rsi, rbx
je 0x14001234e
nop dword [rax]
lea rcx, [rsi + 8]
call fcn.140002c80
mov rcx, qword [rsi]
call fcn.1400e825c
add rsi, 0x20
cmp rsi, rbx
jne 0x140012330
mov rsi, qword [rbp - 8]
mov rdx, qword [rbp + 8]
sub rdx, rsi
and rdx, 0xffffffffffffffe0
mov rax, rsi
cmp rdx, 0x1000
jb 0x14001237a
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400123e4
mov rcx, rsi
call fcn.1400e0fb8
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rcx, qword [rsp + 0x58]
call fcn.1400e825c
nop
mov rcx, qword [rbp - 0x10]
call fcn.1400e825c
nop
mov rcx, qword [rbp + 0x30]
call fcn.1400e825c
nop
mov rcx, rdi
call fcn.1400e825c
nop
mov rcx, qword [rsp + 0x68]
call fcn.1400e825c
nop
mov rcx, qword [rsp + 0x70]
call fcn.1400e825c
mov eax, dword [rbp + 0x148]
add rsp, 0x1d8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1400e8160
nop
lea rcx, [0x140179250]
call fcn.1400e151c
cmp dword [0x140179250], 0xffffffff
jne 0x1400114b3
mov ecx, 2
call fcn.1400e8270
mov qword [0x140179248], rax
xor ecx, ecx
mov word [rax], cx
lea rcx, [0x14011b1f0]
call fcn.1400e137c
lea rcx, [0x140179250]
call fcn.1400e14bc
jmp 0x1400114b3
lea rcx, [0x140179250]
call fcn.1400e151c
cmp dword [0x140179250], 0xffffffff
jne 0x140011f12
mov ecx, 2
call fcn.1400e8270
mov qword [0x140179248], rax
xor ecx, ecx
mov word [rax], cx
lea rcx, [0x14011b1f0]
call fcn.1400e137c
lea rcx, [0x140179250]
call fcn.1400e14bc
jmp 0x140011f12
lea rcx, [0x140179250]
call fcn.1400e151c
cmp dword [0x140179250], 0xffffffff
jne 0x140012197
mov ecx, 2
call fcn.1400e8270
mov qword [0x140179248], rax
xor ebx, ebx
mov word [rax], bx
lea rcx, [0x14011b1f0]
call fcn.1400e137c
lea rcx, [0x140179250]
call fcn.1400e14bc
jmp 0x140012199
call fcn.1400e8160
int3