Function at 0x140358b20
Capabilities:
Delete registry key

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x108
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x80], 0xfffffffffffffffe
mov eax, dword [0x140b7dfd0]
mov edx, dword [0x140b7dfd4]
lea ebx, [rax - 1]
imul ebx, eax
test bl, 1
sete byte [rbp - 0x10]
cmp edx, 0xa
setl byte [rbp - 0x50]
mov qword [rbp - 0x58], rcx
mov eax, 0xc5b648ed
jmp 0x140358b86
mov eax, 0x6a1c840c
nop word cs:[rax + rax]
cmp ecx, 0xa
cmovl eax, edx
cmp eax, 0xb4c6b56
jg 0x140358be0
cmp eax, 0xbfe358d4
jg 0x140358c30
cmp eax, 0x96a151bc
je 0x140358ca0
cmp eax, 0xa2699e58
je 0x140358d1a
cmp eax, 0xb4c79210
jne 0x140358b86
mov eax, dword [0x140b7dfd0]
mov ecx, dword [0x140b7dfd4]
lea ebx, [rax - 1]
imul ebx, eax
mov edx, 0x5a2b84fe
mov eax, 0x5a2b84fe
test bl, 1
je 0x140358b80
jmp 0x140358c96
cmp eax, 0x5a2b84fd
jg 0x140358c5b
cmp eax, 0xb4c6b57
je 0x140358ce3
cmp eax, 0x36b0bdf5
je 0x140358d51
cmp eax, 0x3790bbf1
jne 0x140358b86
mov eax, dword [0x140b7dfd0]
mov ecx, dword [0x140b7dfd4]
lea ebx, [rax - 1]
imul ebx, eax
mov edx, 0x96a151bc
mov eax, 0x96a151bc
test bl, 1
je 0x140358b80
jmp 0x140358b71
cmp eax, 0xbfe358d5
je 0x140358ced
cmp eax, 0xc5b648ed
je 0x140358d5b
cmp eax, 0xd4021fde
jne 0x140358b86
mov eax, 0xa2699e58
jmp 0x140358b86
cmp eax, 0x6a1c840c
je 0x140358cf7
cmp eax, 0x7efc4d51
jne 0x140358d7e
mov eax, dword [0x140b7dfd0]
mov ecx, dword [0x140b7dfd4]
lea ebx, [rax - 1]
imul ebx, eax
mov edx, 0xb4c79210
mov eax, 0xb4c79210
test bl, 1
je 0x140358b80
mov eax, 0xbfe358d5
jmp 0x140358b80
mov rax, qword [rbp + 0x28]
movzx ecx, word [0x140719989]
mov word [rax + 8], cx
mov rcx, qword [0x140719981]
mov qword [rax], rcx
mov eax, dword [0x140b7dfd0]
mov ecx, dword [0x140b7dfd4]
lea ebx, [rax - 1]
imul ebx, eax
mov edx, 0xb4c6b57
mov eax, 0xb4c6b57
test bl, 1
je 0x140358b80
jmp 0x140358b71
mov eax, 0x7efc4d51
jmp 0x140358b86
mov eax, 0xb4c79210
jmp 0x140358b86
mov rax, qword [rbp + 0x28]
movzx ecx, word [0x140719989]
mov word [rax + 8], cx
mov rcx, qword [0x140719981]
mov qword [rax], rcx
mov eax, 0x96a151bc
jmp 0x140358b86
lea rax, [rbp - 0x30]
mov qword [rbp + 0x28], rax
mov eax, dword [0x140b7dfd0]
mov ecx, dword [0x140b7dfd4]
lea ebx, [rax - 1]
imul ebx, eax
mov edx, 0x36b0bdf5
mov eax, 0x36b0bdf5
test bl, 1
je 0x140358b80
mov eax, 0xd4021fde
jmp 0x140358b80
mov eax, 0x3790bbf1
jmp 0x140358b86
movzx ecx, byte [rbp - 0x10]
cmp byte [rbp - 0x50], 0
mov edx, 0xa2699e58
mov eax, 0xa2699e58
jne 0x140358d74
mov eax, 0xd4021fde
test cl, cl
cmovne eax, edx
jmp 0x140358b86
cmp eax, 0x5a2b84fe
jne 0x140358b86
mov eax, dword [0x140b7ea00]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x140b7ea04], 0xa
setl cl
or cl, al
mov r12d, 0xef2d0616
mov eax, 0xe5b2cfce
cmove r12d, eax
mov r10d, 0xe0f413a1
cmove r10d, eax
mov ebx, 0xb2faaec2
mov eax, 0x63e0086d
cmove ebx, eax
mov r14d, 0x5ee7f77b
cmove r14d, eax
mov r9d, 0x3ac4b342
mov ecx, 0x707d0bdc
cmove r9d, ecx
mov r13d, 0xd5615233
cmove r13d, ecx
mov ecx, dword [0x140b7e918]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x140b7e91c], 0xa
setl dl
or dl, cl
mov eax, 0x96ec6ac9
mov ecx, 0xcd4f7c5a
cmove eax, ecx
mov dword [rbp + 8], eax
mov eax, 0xf22b0ae0
cmove eax, ecx
mov dword [rbp + 0x50], eax
mov eax, 0xfdb8c9f1
mov ecx, 0xe3f68a6d
cmove eax, ecx
mov dword [rbp + 0xc], eax
mov eax, 0x6f1cea4
cmove eax, ecx
mov dword [rbp + 0x54], eax
mov eax, 0xf068b231
mov ecx, 0x71df0100
cmove eax, ecx
mov dword [rbp + 0x10], eax
mov eax, 0x3cd1f41
cmove eax, ecx
mov dword [rbp + 4], eax
mov ecx, dword [0x140b7e218]
lea eax, [rcx - 1]
imul eax, ecx
mov dword [rbp + 0x14], eax
test al, 1
mov ecx, 0x95cb4728
mov eax, 0x56f316f
cmove eax, ecx
mov edx, dword [0x140b7e21c]
mov dword [rbp + 0x1c], edx
cmp edx, 0xa
cmovl eax, ecx
mov dword [rbp + 0x18], eax
mov edx, 0x5a11ccec
mov r11d, 0xe6c95e82
jmp 0x140358eb0
lea rax, [rbp - 0x30]
mov qword [rbp - 0x10], rax
mov edx, 0xe4d859e1
nop dword [rax]
mov ecx, edx
cmp edx, 0xf553558f
jle 0x140358f00
cmp ecx, 0x2bbbd016
jle 0x140358f70
cmp ecx, 0x6837cb3e
jg 0x140358fa3
cmp ecx, 0x5a11ccec
je 0x14035924e
cmp ecx, 0x6085234d
jne 0x140359550
cmp byte [rbp + 0x20], 0
mov edx, 0x6837cb3f
mov eax, 0xf5535590
cmovne edx, eax
jmp 0x140358eb0
cmp ecx, 0xe3f68a6c
jg 0x140358f30
cmp ecx, 0xa77abe51
jg 0x140358fc7
mov edx, dword [rbp + 0x54]
cmp ecx, 0x814ca85b
je 0x140358eb0
mov edx, ecx
cmp ecx, 0x96ec6ac9
jne 0x140358eb0
mov edx, 0x6837cb3f
jmp 0x140358eb0
cmp ecx, 0xf068b230
jg 0x140358fee
cmp ecx, 0xe3f68a6d
je 0x1403592f9
mov edx, ecx
cmp ecx, 0xe4d859e1
jne 0x140358eb0
mov rcx, qword [rbp - 0x10]
mov qword [rbp - 0x50], rcx
mov edx, 0x2bbbd017
jmp 0x140358eb0
cmp ecx, 0x3cd1f40
jg 0x140359010
mov edx, dword [rbp + 4]
cmp ecx, 0xf5535590
je 0x140358eb0
mov edx, ecx
cmp ecx, 0xfdb8c9f1
jne 0x140358eb0
mov edx, 0xa77abe52
jmp 0x140358eb0
cmp ecx, 0x6837cb3f
je 0x140358e9c
mov edx, ecx
cmp ecx, 0x71df0100
jne 0x140358eb0
mov edx, 0x3cd1f41
jmp 0x140358eb0
mov edx, dword [rbp + 0x50]
cmp ecx, 0xa77abe52
je 0x140358eb0
mov edx, ecx
cmp ecx, 0xcd4f7c5a
jne 0x140358eb0
mov edx, 0xf22b0ae0
jmp 0x140358eb0
cmp ecx, 0xf068b231
je 0x140359520
mov edx, ecx
cmp ecx, 0xf22b0ae0
jne 0x140358eb0
mov edx, dword [rbp + 8]
jmp 0x140358eb0
cmp ecx, 0x3cd1f41
je 0x14035952a
mov edx, ecx
cmp ecx, 0x6f1cea4
jne 0x140358eb0
mov r8, qword [rbp + 0x60]
mov esi, 0xc3200a1a
jmp 0x140359040
mov esi, 0x8697be96
mov ecx, dword [rbp + 0x68]
nop dword [rax]
mov edi, esi
cmp esi, 0xef2d0615
jle 0x1403590c0
cmp edi, 0x5ee7f77a
jg 0x140359100
cmp edi, 0x3ac4b341
jg 0x140359163
cmp edi, 0xef2d0616
je 0x140359035
mov esi, edi
cmp edi, 0x36a372b
jne 0x140359040
movsxd rdx, dword [rbp + 0x78]
imul rsi, rdx, 0x4ec4ec4f
mov rdi, rsi
shr rdi, 0x3f
sar rsi, 0x24
add esi, edi
imul esi, esi, 0x34
sub edx, esi
lea esi, [rdx + 0x36]
mov edi, dword [rbp + 0x58]
mov r15d, 0xc9
sub r15d, edx
and r15d, edi
not edi
and edi, esi
or r15d, edi
mov rdx, qword [rbp + 0x28]
mov byte [rbp + rdx - 0x30], r15b
mov esi, 0xbfcbf37f
jmp 0x140359040
cmp edi, 0xd5615232
jle 0x140359130
cmp edi, 0xe5b2cfcd
jg 0x1403591a8
cmp edi, 0xd5615233
je 0x14035920d
mov esi, edi
cmp edi, 0xe0f413a1
jne 0x140359040
mov edx, dword [rbp + 0x78]
add edx, 1
mov dword [rbp + 0x68], edx
mov esi, r12d
jmp 0x140359040
cmp edi, 0x6b2175ca
jg 0x140359185
mov esi, ebx
cmp edi, 0x5ee7f77b
je 0x140359040
mov esi, edi
cmp edi, 0x63e0086d
jne 0x140359040
mov esi, 0x5ee7f77b
jmp 0x140359040
cmp edi, 0xbfcbf37e
jle 0x1403591dc
mov esi, r10d
cmp edi, 0xbfcbf37f
je 0x140359040
mov esi, edi
cmp edi, 0xc3200a1a
jne 0x140359040
mov esi, 0x6b2175cb
jmp 0x140359040
cmp edi, 0x3ac4b342
je 0x1403591ef
mov esi, edi
cmp edi, 0x50435ba4
jne 0x140359040
mov esi, r14d
jmp 0x140359040
cmp edi, 0x6b2175cb
je 0x140359201
mov esi, edi
cmp edi, 0x707d0bdc
jne 0x140359040
mov edx, dword [rbp + 0x78]
mov esi, 0xd5615233
jmp 0x140359040
cmp edi, 0xe5b2cfce
je 0x14035921f
mov esi, edi
cmp edi, 0xe6c95e82
jne 0x140359040
movsxd rdx, dword [rbp + 0x78]
mov qword [rbp + 0x28], rdx
mov rdx, qword [rbp + 0x28]
movsx edx, byte [r8 + rdx]
mov dword [rbp + 0x58], edx
mov esi, 0x36a372b
jmp 0x140359040
cmp edi, 0x8697be96
jne 0x140359238
mov dword [rbp + 0x78], ecx
mov esi, r13d
jmp 0x140359040
cmp byte [rbp + 0x48], 0
mov esi, 0x50435ba4
cmovne esi, r11d
jmp 0x140359040
mov esi, 0x8697be96
xor ecx, ecx
jmp 0x140359040
mov edx, dword [rbp + 0x78]
cmp edx, 0xa
setl byte [rbp + 0x48]
mov esi, r9d
jmp 0x140359040
mov edx, dword [rbp + 0x78]
mov edx, dword [rbp + 0x78]
mov edx, dword [rbp + 0x78]
mov edx, dword [rbp + 0x78]
mov edx, dword [rbp + 0x78]
mov esi, 0xe0f413a1
jmp 0x140359040
mov esi, edi
cmp edi, 0xb2faaec2
jne 0x140359040
mov edx, dword [rbp + 0xc]
jmp 0x140358eb0
test byte [rbp + 0x14], 1
sete byte [rbp + 0x58]
cmp dword [rbp + 0x1c], 0xa
setl byte [rbp + 0x68]
mov edi, 0xbc3511e4
mov r8b, byte [rbp - 0x27]
nop word [rax + rax]
cmp edi, 0x2b3acdd8
jg 0x1403592a0
cmp edi, 0x95cb4728
je 0x1403592ca
cmp edi, 0xbc3511e4
je 0x1403592d1
cmp edi, 0x56f316f
jne 0x140359270
mov edi, 0x5cda6273
jmp 0x140359270
cmp edi, 0x2b3acdd9
je 0x14035953a
cmp edi, 0x5cda6273
je 0x1403592ed
cmp edi, 0x79ebc696
jne 0x140359270
cmp byte [rbp + 0x78], 0
setne dl
mov edi, 0x2b3acdd9
jmp 0x140359270
mov edi, 0x79ebc696
jmp 0x140359270
movzx ecx, byte [rbp + 0x58]
cmp byte [rbp + 0x68], 0
mov edi, 0x56f316f
mov eax, 0x5cda6273
cmovne edi, eax
test cl, cl
cmovne edi, eax
jmp 0x140359270
mov byte [rbp + 0x78], r8b
mov edi, dword [rbp + 0x18]
jmp 0x140359270
mov r8, qword [rbp + 0x60]
mov edx, 0xc3200a1a
jmp 0x140359310
mov edx, 0x8697be96
mov edi, dword [rbp + 0x68]
nop dword [rax]
mov esi, edx
cmp edx, 0xef2d0615
jle 0x140359390
cmp esi, 0x5ee7f77a
jg 0x1403593d0
cmp esi, 0x3ac4b341
jg 0x140359433
cmp esi, 0xef2d0616
je 0x140359304
mov edx, esi
cmp esi, 0x36a372b
jne 0x140359310
movsxd rdx, dword [rbp + 0x78]
imul rsi, rdx, 0x4ec4ec4f
mov rax, rsi
shr rax, 0x3f
sar rsi, 0x24
add esi, eax
imul eax, esi, 0x34
sub edx, eax
lea eax, [rdx + 0x36]
mov esi, dword [rbp + 0x58]
mov ecx, 0xc9
sub ecx, edx
and ecx, esi
not esi
and esi, eax
or ecx, esi
mov rax, qword [rbp + 0x28]
mov byte [rbp + rax - 0x30], cl
mov edx, 0xbfcbf37f
jmp 0x140359310
cmp esi, 0xd5615232
jle 0x140359400
cmp esi, 0xe5b2cfcd
jg 0x140359478
cmp esi, 0xd5615233
je 0x1403594dd
mov edx, esi
cmp esi, 0xe0f413a1
jne 0x140359310
mov eax, dword [rbp + 0x78]
add eax, 1
mov dword [rbp + 0x68], eax
mov edx, r12d
jmp 0x140359310
cmp esi, 0x6b2175ca
jg 0x140359455
mov edx, ebx
cmp esi, 0x5ee7f77b
je 0x140359310
mov edx, esi
cmp esi, 0x63e0086d
jne 0x140359310
mov edx, 0x5ee7f77b
jmp 0x140359310
cmp esi, 0xbfcbf37e
jle 0x1403594ac
mov edx, r10d
cmp esi, 0xbfcbf37f
je 0x140359310
mov edx, esi
cmp esi, 0xc3200a1a
jne 0x140359310
mov edx, 0x6b2175cb
jmp 0x140359310
cmp esi, 0x3ac4b342
je 0x1403594bf
mov edx, esi
cmp esi, 0x50435ba4
jne 0x140359310
mov edx, r14d
jmp 0x140359310
cmp esi, 0x6b2175cb
je 0x1403594d1
mov edx, esi
cmp esi, 0x707d0bdc
jne 0x140359310
mov eax, dword [rbp + 0x78]
mov edx, 0xd5615233
jmp 0x140359310
cmp esi, 0xe5b2cfce
je 0x1403594ef
mov edx, esi
cmp esi, 0xe6c95e82
jne 0x140359310
movsxd rdx, dword [rbp + 0x78]
mov qword [rbp + 0x28], rdx
mov rdx, qword [rbp + 0x28]
movsx edx, byte [r8 + rdx]
mov dword [rbp + 0x58], edx
mov edx, 0x36a372b
jmp 0x140359310
cmp esi, 0x8697be96
jne 0x140359508
mov dword [rbp + 0x78], edi
mov edx, r13d
jmp 0x140359310
cmp byte [rbp + 0x48], 0
mov edx, 0x50435ba4
cmovne edx, r11d
jmp 0x140359310
mov edx, 0x8697be96
xor edi, edi
jmp 0x140359310
mov edx, dword [rbp + 0x78]
cmp edx, 0xa
setl byte [rbp + 0x48]
mov edx, r9d
jmp 0x140359310
mov eax, dword [rbp + 0x78]
mov eax, dword [rbp + 0x78]
mov eax, dword [rbp + 0x78]
mov eax, dword [rbp + 0x78]
mov eax, dword [rbp + 0x78]
mov edx, 0xe0f413a1
jmp 0x140359310
mov edx, esi
cmp esi, 0xb2faaec2
jne 0x140359310
mov edx, 0x6f1cea4
jmp 0x140358eb0
mov edx, 0x814ca85b
jmp 0x140358eb0
lea rax, [rbp - 0x30]
mov qword [rbp + 0x60], rax
mov edx, dword [rbp + 0x10]
jmp 0x140358eb0
and dl, 1
mov byte [rbp + 0x28], dl
mov cl, byte [rbp + 0x28]
mov byte [rbp + 0x20], cl
mov edx, 0x6085234d
jmp 0x140358eb0
mov edx, ecx
cmp ecx, 0x2bbbd017
jne 0x140358eb0
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x1403595e5
mov rdi, rax
lea rdx, str.RegistryMachineSystemCurrentControlSetServices_
lea rbx, [rbp - 0x30]
mov rcx, rbx
mov rsi, qword [rbp - 0x58]
mov r8, rsi
call fcn.1403583a0
mov rcx, rbx
call fcn.140358950
lea rcx, [rbp - 0x10]
mov rdx, rax
call sub.ntdll.dll_RtlInitUnicodeString
lea rdx, str.SYSTEMCurrentControlSetServices_
lea rcx, [rbp + 0x28]
mov r8, rsi
call fcn.1403583a0
lea rcx, [rbp + 0x28]
call fcn.140358950
lea r8, [rbp + 0x20]
mov rcx, 0xffffffff80000002
mov rdx, rax
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
je 0x1403595fd
mov sil, 1
cmp eax, 2
je 0x140359bb6
xor esi, esi
jmp 0x140359bb6
xor esi, esi
mov eax, esi
add rsp, 0x108
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov rcx, qword [rbp + 0x20]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rdx, str.NtUnloadDriver
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rbp - 0x10]
call rax
test eax, eax
je 0x140359b97
mov eax, dword [0x140b7dfe8]
mov ecx, dword [0x140b7dfec]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x68]
mov edx, 0xd62d064
mov eax, 0xa91f0d58
cmove eax, edx
cmp ecx, 0xa
setl byte [rbp + 0x78]
cmovl eax, edx
mov edx, 0xd7eedccd
mov ecx, 0xa7b10d12
nop
cmp edx, 0xd7eedccc
jg 0x140359690
cmp edx, 0xa7b10d12
je 0x1403596bf
cmp edx, 0xa91f0d58
je 0x1403596c3
cmp edx, 0xaca10d1a
jne 0x140359660
jmp 0x1403596d8
cmp edx, 0xd62d064
je 0x1403596ca
cmp edx, 0xf8767f08
je 0x1403596d1
cmp edx, 0xd7eedccd
jne 0x140359660
movzx ebx, byte [rbp + 0x68]
cmp byte [rbp + 0x78], 0
mov edx, 0xa91f0d58
cmovne edx, ecx
test bl, bl
cmovne edx, ecx
jmp 0x140359660
mov edx, eax
jmp 0x140359660
mov edx, 0xa7b10d12
jmp 0x140359660
mov edx, 0xf8767f08
jmp 0x140359660
mov edx, 0xaca10d1a
jmp 0x140359660
lea r15, [rbp - 0x50]
mov qword [rbp + 0x60], r15
mov rax, qword [rbp + 0x60]
movups xmm0, xmmword [0x140719996]
movups xmmword [rax + 0xb], xmm0
movups xmm0, xmmword [0x14071998b]
movups xmmword [rax], xmm0
mov eax, dword [0x140b7dfd8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete byte [rbp + 0x77]
mov eax, dword [0x140b7dfdc]
sete dl
cmp eax, 0xa
setl al
setl byte [rbp + 0x76]
mov ecx, dword [0x140b7e3c8]
lea ebx, [rcx - 1]
imul ebx, ecx
test bl, 1
sete cl
cmp dword [0x140b7e3cc], 0xa
setl bl
or bl, cl
mov r9d, 0xf41501a5
mov ebx, 0xe6c140b7
cmove r9d, ebx
mov r11d, 0xef74469a
cmove r11d, ebx
mov ebx, 0x2ceeb3fe
mov esi, 0x3e116a66
cmove ebx, esi
mov r14d, 0xe884b360
cmove r14d, esi
or al, dl
mov ecx, 0x25f2be76
mov eax, 0xf487a527
cmove ecx, eax
mov dword [rbp + 0x50], ecx
mov r12d, 0xf3918a17
cmove r12d, eax
mov ecx, 0xc2949798
mov eax, 0xa49f2ca7
cmove ecx, eax
mov dword [rbp + 0x54], ecx
mov esi, 0xa970d737
mov r13d, 0xfc9a4b9d
jmp 0x1403597b0
mov esi, 0x8560302
nop dword [rax + rax]
mov eax, esi
cmp esi, 0x25f2be75
jg 0x1403597f0
cmp eax, 0xc2f1e291
jg 0x140359830
cmp eax, 0xa970d736
jg 0x14035989e
cmp eax, 0x987861a3
je 0x140359ac5
mov esi, eax
cmp eax, 0xa49f2ca7
jne 0x1403597b0
mov esi, 0x44d6ea13
jmp 0x1403597b0
cmp eax, 0x50700dc6
jle 0x140359870
cmp eax, 0x6f2c39f9
jg 0x1403598c0
cmp eax, 0x50700dc7
je 0x1403597a6
mov esi, eax
cmp eax, 0x61b1140c
jne 0x1403597b0
mov rax, qword [rbp + 0x58]
mov qword [rbp + 0x68], rax
mov esi, 0xc2f1e292
jmp 0x1403597b0
cmp eax, 0xf487a526
jle 0x140359aae
cmp eax, 0xf487a527
je 0x140359b41
mov esi, eax
cmp eax, 0x8560302
jne 0x1403597b0
mov qword [rbp + 0x58], r15
mov esi, 0x61b1140c
jmp 0x1403597b0
cmp eax, 0x25f2be76
je 0x140359b4b
mov esi, r12d
cmp eax, 0x41388990
je 0x1403597b0
mov esi, eax
cmp eax, 0x44d6ea13
jne 0x1403597b0
mov esi, dword [rbp + 0x54]
jmp 0x1403597b0
cmp eax, 0xa970d737
je 0x140359adb
mov esi, eax
cmp eax, 0xc2949798
jne 0x1403597b0
mov esi, 0x6f2c39fa
jmp 0x1403597b0
cmp eax, 0x6f2c39fa
je 0x140359af9
mov esi, eax
cmp eax, 0x7b8103c1
jne 0x1403597b0
mov r10, qword [rbp + 0x48]
mov edx, 0x98bc51d2
jmp 0x1403598f0
mov edx, 0x94caf8c8
nop dword [rax + rax]
mov r8d, edx
cmp edx, 0xf41501a4
jle 0x140359930
cmp r8d, 0x2cd2b67c
jle 0x140359980
cmp r8d, 0x3e116a65
jle 0x140359a17
cmp r8d, 0x3e116a66
je 0x140359a2c
mov edx, r8d
cmp r8d, 0x41872348
jne 0x1403598f0
mov edx, r14d
jmp 0x1403598f0
cmp r8d, 0xe6c140b6
jg 0x1403599d0
cmp r8d, 0x94caf8c8
je 0x140359a36
cmp r8d, 0x98bc51d2
je 0x140359a7d
mov edx, r8d
cmp r8d, 0xa208902c
jne 0x1403598f0
mov dword [rbp + 0x70], esi
mov edx, dword [rbp + 0x70]
cmp edx, 0x1b
mov edx, 0x41872348
cmovl edx, r13d
jmp 0x1403598f0
cmp r8d, 0xf41501a5
je 0x1403598e3
mov edx, r11d
cmp r8d, 0xfc9a4b9d
je 0x1403598f0
mov edx, r8d
cmp r8d, 0x186b9a7e
jne 0x1403598f0
mov rax, qword [rbp + 0x78]
movzx ecx, byte [rbp + 0x74]
mov byte [rbp + rax - 0x50], cl
mov esi, dword [rbp + 0x70]
add esi, 1
mov edx, 0xa208902c
jmp 0x1403598f0
cmp r8d, 0xe6c140b7
je 0x140359a87
mov edx, ebx
cmp r8d, 0xe884b360
je 0x1403598f0
mov edx, r8d
cmp r8d, 0xef74469a
jne 0x1403598f0
movsxd rdx, dword [rbp + 0x70]
mov qword [rbp + 0x78], rdx
mov rdx, qword [rbp + 0x78]
add rdx, r10
mov qword [rbp + 0x60], rdx
mov edx, r9d
jmp 0x1403598f0
cmp r8d, 0x2cd2b67d
jne 0x140359a94
mov edx, 0xa208902c
xor esi, esi
jmp 0x1403598f0
mov edx, 0xe884b360
jmp 0x1403598f0
mov rdx, qword [rbp + 0x60]
movsxd rcx, dword [rbp + 0x70]
imul rdi, rcx, 0x4ec4ec4f
mov rax, rdi
shr rax, 0x3f
sar rdi, 0x24
add edi, eax
imul eax, edi, 0x34
sub ecx, eax
mov eax, 0xc9
sub eax, ecx
add ecx, 0x36
and eax, 0xde
and ecx, 0x21
or ecx, eax
xor cl, byte [rdx]
xor cl, 0xde
mov byte [rbp + 0x74], cl
mov edx, 0x186b9a7e
jmp 0x1403598f0
mov edx, 0x2cd2b67d
jmp 0x1403598f0
mov eax, dword [rbp + 0x70]
mov edx, 0xef74469a
jmp 0x1403598f0
mov edx, r8d
cmp r8d, 0x2ceeb3fe
jne 0x1403598f0
mov esi, 0x50700dc7
jmp 0x1403597b0
cmp eax, 0xf3918a17
jne 0x140359b55
mov qword [rbp + 0x48], r15
mov esi, dword [rbp + 0x50]
jmp 0x1403597b0
cmp byte [rbp + 0x75], 0
mov esi, 0x8560302
mov eax, 0x41388990
cmovne esi, eax
jmp 0x1403597b0
mov al, byte [rbp + 0x77]
cmp byte [rbp + 0x76], 0
mov esi, 0xa49f2ca7
mov ecx, 0x44d6ea13
cmovne esi, ecx
test al, al
cmovne esi, ecx
jmp 0x1403597b0
lea rax, [rbp - 0x36]
mov qword [rbp + 0x60], rax
mov eax, 0xa8b8dbb4
nop word cs:[rax + rax]
cmp eax, 0x7ec88eea
je 0x140359b2f
cmp eax, 0xa8b8dbb4
jne 0x140359b10
mov rax, qword [rbp + 0x60]
movsx eax, byte [rax]
mov dword [rbp + 0x78], eax
mov eax, 0x7ec88eea
jmp 0x140359b10
cmp dword [rbp + 0x78], 0
setne byte [rbp + 0x75]
mov esi, 0x987861a3
jmp 0x1403597b0
mov esi, 0xf3918a17
jmp 0x1403597b0
mov esi, 0x7b8103c1
jmp 0x1403597b0
mov esi, eax
cmp eax, 0xc2f1e292
jne 0x1403597b0
mov rdx, qword [rbp + 0x68]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1402bf9e0
mov rcx, rax
call fcn.1402a4230
lea rcx, [rbp + 0x28]
call fcn.140358950
mov rcx, 0xffffffff80000002
mov rdx, rax
call qword [sym.imp.ADVAPI32.dll_RegDeleteTreeW]
xor esi, esi
jmp 0x140359bb6
lea rcx, [rbp + 0x28]
call fcn.140358950
mov rcx, 0xffffffff80000002
mov rdx, rax
call qword [sym.imp.ADVAPI32.dll_RegDeleteTreeW]
test eax, eax
sete sil
lea rdi, [rbp + 0x28]
mov rcx, rdi
call fcn.14028f210
mov eax, 0x37d704b3
nop word [rax + rax]
cmp eax, 0xd44bc859
je 0x140359bed
cmp eax, 0x37d704b3
jne 0x140359bd0
mov rcx, rdi
call fcn.1403244e0
mov eax, 0xd44bc859
jmp 0x140359bd0
lea rdi, [rbp - 0x30]
mov rcx, rdi
call fcn.14028f210
mov eax, 0x37d704b3
nop
cmp eax, 0xd44bc859
je 0x1403595e7
cmp eax, 0x37d704b3
jne 0x140359c00
mov rcx, rdi
call fcn.1403244e0
mov eax, 0xd44bc859
jmp 0x140359c00