Function at 0x160047fe0
Capabilities:
Query or enumerate registry key

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x4a8]
sub rsp, 0x580
mov qword [rbp + 0x50], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x160270bd8]
xor rax, rsp
mov qword [rbp + 0x470], rax
mov r15, rcx
mov qword [rbp - 0x38], rcx
xor r14d, r14d
mov dword [rsp + 0x78], r14d
mov dword [rbp - 0x78], r14d
xor dil, dil
mov byte [rsp + 0x50], dil
mov rax, qword [0x160273928]
mov rax, qword [rax + 0x18]
lea r13, [fcn.1600460d0]
lea rcx, [0x160273928]
cmp rax, r13
jne 0x160096e9a
call fcn.1600460d0
lea rbx, [rax + 0x18]
mov qword [rbp - 0x10], rbx
mov qword [rsp + 0x48], r14
mov qword [rbp + 0x58], r14
mov rcx, qword [r15 + 0x38]
mov rax, qword [rcx]
lea r8, [rsp + 0x48]
lea rdx, [0x1601d5e18]
mov rax, qword [rax]
call qword [case.0x16003fc5a.0]
mov dword [rbp - 0x48], eax
test eax, eax
js 0x160096ea6
mov qword [rbp + 0x18], r14
lea rax, [rbp + 0x98]
mov qword [rbp + 0x88], rax
mov qword [rbp + 0x90], CreateErrorInfo
mov word [rbp + 0x98], r14w
lea rax, fcn.160019c60
mov qword [rbp + 0x80], rax
mov rcx, qword [r15 + 0x38]
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
lea rdx, [fcn.160046570]
cmp rax, rdx
lea rdx, [rbp + 0x18]
jne 0x160096ec7
call fcn.160046570
mov edx, eax
mov dword [rbp - 0x48], eax
test eax, eax
js 0x1600481ee
mov rcx, qword [r15 + 0x38]
mov rax, qword [rcx]
mov rax, qword [rax + 0x48]
lea rdx, [fcn.160046380]
cmp rax, rdx
jne 0x160096ed3
call fcn.160046380
test eax, eax
sete sil
mov dword [rbp - 0x70], r14d
mov rcx, qword [rbp + 0x18]
mov rax, qword [rcx]
mov rax, qword [rax + 0x28]
lea rdx, [fcn.160027d30]
lea r9, [rbp - 0x70]
mov r8d, dword [rbp + 0x90]
cmp rax, rdx
mov rdx, qword [rbp + 0x88]
jne 0x160096edf
call fcn.160027d30
mov edx, eax
mov dword [rbp - 0x48], eax
cmp eax, 0x8007007a
je 0x16004a07d
movzx edi, sil
mov byte [rsp + 0x50], sil
test edx, edx
js 0x1600481ee
mov rcx, qword [rbp + 0x88]
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x160048181
cmp eax, dword [rbp + 0x90]
jae 0x160096eeb
mov dword [rbp + 0x94], eax
mov eax, eax
mov word [rcx + rax*2], r14w
mov rcx, qword [rbp + 0x88]
call fcn.160066bd0
mov r8d, eax
mov rdx, rcx
lea rcx, [rbp - 0x10]
call fcn.160045a10
mov rbx, qword [rbp - 0x10]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_shlwapi_legacy_l1_1_0.dll_PathIsUNCW]
test eax, eax
jne 0x160096f09
movzx edi, sil
mov byte [rsp + 0x50], sil
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_shlwapi_legacy_l1_1_0.dll_PathGetDriveNumberW]
test eax, eax
jg 0x160096f09
movups xmm0, xmmword [0x1601d58c8]
movups xmmword [rbp + 0x220], xmm0
mov esi, 1
mov dword [rbp + 0x230], esi
mov qword [rbp + 0x238], 0x64
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea r14, [fcn.160046ee0]
lea r9, [rbp - 0x68]
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0x220]
cmp rax, r14
jne 0x160096f92
call fcn.160046ee0
mov r12d, SafeArrayDestroy
test eax, eax
je 0x160096f9e
cmp eax, esi
jne 0x1600482e9
xor edx, edx
lea r8d, [rdx + 0x40]
lea rcx, [rbp + 0x220]
call sub.msvcrt.dll_memset
mov dword [rbp + 0x224], 2
mov dword [rbp + 0x228], 2
mov eax, dword [r15 + 0x68]
mov dword [rbp + 0x22c], eax
movups xmm0, xmmword [0x1601d58c8]
movaps xmmword [rbp + 0x230], xmm0
mov dword [rbp + 0x240], esi
mov dword [rbp + 0x248], 0x64
xor eax, eax
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x70], rax
mov word [rbp + 0x60], r12w
mov word [rbp + 0x68], ax
mov rcx, qword [r15 + 0x40]
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
lea rdx, [fcn.16003dbe0]
lea r8, [rbp + 0x60]
cmp rax, rdx
lea rdx, [rbp + 0x220]
jne 0x160096faf
call fcn.16003dbe0
movups xmm0, xmmword [0x1601d9720]
movups xmmword [rbp + 0x220], xmm0
mov dword [rbp + 0x230], esi
mov eax, dword [0x1601d9730]
mov dword [rbp + 0x238], eax
xor eax, eax
mov dword [rbp + 0x23c], eax
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea r9, [rbp - 0x68]
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0x220]
cmp rax, r14
jne 0x160096fbb
call fcn.160046ee0
test eax, eax
jne 0x160049948
cmp word [rsp + 0x60], ax
je 0x160049950
movups xmm0, xmmword [0x1601d5898]
movups xmmword [rbp + 0x220], xmm0
mov dword [rbp + 0x230], esi
mov qword [rbp + 0x238], 0x64
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea r9, [rbp - 0x68]
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0x220]
cmp rax, r14
jne 0x160096fc7
call fcn.160046ee0
test eax, eax
je 0x160096fd3
cmp eax, esi
jne 0x16004846c
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.160042bd8
nop
mov rax, qword [0x160273928]
mov rax, qword [rax + 0x18]
lea rcx, [0x160273928]
cmp rax, r13
jne 0x160096fe4
call fcn.1600460d0
add rax, 0x18
mov qword [rsp + 0x58], rax
mov rcx, qword [rsp + 0x40]
cmp dword [rcx - 0x10], 0
jle 0x160096ff0
mov edx, 0x3a
call qword [sym.imp.msvcrt.dll_wcschr]
test rax, rax
je 0x160096ff8
sub rax, qword [rsp + 0x40]
sar rax, 1
mov r8d, eax
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x40]
call fcn.160042e74
nop
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.160045d7c
nop
mov rcx, qword [rbp + 0x10]
add rcx, 0xffffffffffffffe8
call fcn.160046140
mov rbx, qword [rsp + 0x58]
cmp dword [rbx - 0x10], 0
je 0x160048454
mov r8, rbx
lea rdx, [0x1601d5898]
mov rcx, r15
call fcn.160047e8c
nop
lea rcx, [rbx - 0x18]
call fcn.160046140
nop
mov rcx, qword [rsp + 0x40]
add rcx, 0xffffffffffffffe8
call fcn.160046140
mov rax, qword [0x160273928]
mov rax, qword [rax + 0x18]
lea rcx, [0x160273928]
cmp rax, r13
jne 0x160097000
call fcn.1600460d0
lea rsi, [rax + 0x18]
mov qword [rbp - 0x20], rsi
mov rax, qword [0x160273928]
mov rax, qword [rax + 0x18]
lea rcx, [0x160273928]
cmp rax, r13
jne 0x16009700c
call fcn.1600460d0
add rax, 0x18
mov qword [rbp + 0x10], rax
mov rax, qword [0x160273928]
mov rax, qword [rax + 0x18]
lea rcx, [0x160273928]
cmp rax, r13
jne 0x160097018
call fcn.1600460d0
lea r14, [rax + 0x18]
mov qword [rbp + 0x38], r14
movups xmm0, xmmword [0x1601d5de8]
movups xmmword [rbp + 0x220], xmm0
mov dword [rbp + 0x230], 1
mov qword [rbp + 0x238], 0x64
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea rdx, [fcn.160046ee0]
lea r9, [rbp - 0x68]
lea r8, [rsp + 0x60]
cmp rax, rdx
lea rdx, [rbp + 0x220]
jne 0x160097024
call fcn.160046ee0
test eax, eax
jne 0x1600485f1
cmp word [rsp + 0x60], ax
je 0x1600485f1
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x60]
call fcn.160045658
mov edx, 0x2e
mov rsi, qword [rbp - 0x20]
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_wcsrchr]
mov rbx, rax
test rax, rax
je 0x1600485f1
sub rbx, rsi
sar rbx, 1
test ebx, ebx
jle 0x1600485f1
mov r8d, ebx
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x20]
call fcn.160042e74
nop
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.160045d7c
nop
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
call fcn.160046140
mov r9d, dword [rsi - 0x10]
lea eax, [rbx + 1]
cmp eax, r9d
jge 0x1600485f1
test dil, dil
jne 0x1600485f1
sub r9d, ebx
mov r8d, ebx
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x20]
call fcn.160042cf4
nop
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x38]
call fcn.160045d7c
nop
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
call fcn.160046140
mov r14, qword [rbp + 0x38]
movups xmm0, xmmword [0x1601d5e00]
movups xmmword [rbp + 0x220], xmm0
mov dword [rbp + 0x230], 1
mov qword [rbp + 0x238], 0x64
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea rdx, [fcn.160046ee0]
lea r9, [rbp - 0x68]
lea r8, [rsp + 0x60]
cmp rax, rdx
lea rdx, [rbp + 0x220]
jne 0x160097030
call fcn.160046ee0
test eax, eax
jne 0x1600497ff
cmp word [rsp + 0x60], ax
je 0x160049808
movups xmm0, xmmword [0x1601d5a30]
movups xmmword [rbp + 0x220], xmm0
mov dword [rbp + 0x230], 1
mov qword [rbp + 0x238], SafeArrayPutElement
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea rdx, [fcn.160046ee0]
lea r9, [rbp - 0x68]
lea r8, [rsp + 0x60]
cmp rax, rdx
lea rdx, [rbp + 0x220]
jne 0x160097054
call fcn.160046ee0
test eax, eax
jne 0x160049964
cmp word [rsp + 0x60], ax
je 0x16004996d
mov rax, qword [0x160273928]
mov rax, qword [rax + 0x18]
lea rcx, [0x160273928]
cmp rax, r13
jne 0x160097060
call fcn.1600460d0
lea rbx, [rax + 0x18]
mov qword [rbp - 0x18], rbx
movups xmm0, xmmword [0x1601d5db8]
movups xmmword [rbp + 0x220], xmm0
mov dword [rbp + 0x230], 1
mov qword [rbp + 0x238], SafeArrayGetElemsize
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea rdx, [fcn.160046ee0]
lea r9, [rbp - 0x68]
lea r8, [rsp + 0x60]
cmp rax, rdx
lea rdx, [rbp + 0x220]
jne 0x16009706c
call fcn.160046ee0
test eax, eax
jne 0x160049ebe
cmp word [rsp + 0x60], ax
je 0x160049ec7
lea rdx, [rbp - 0x18]
lea rcx, [rsp + 0x60]
call fcn.160045658
mov rbx, qword [rbp - 0x18]
movups xmm0, xmmword [0x1601d5da0]
movups xmmword [rbp + 0x220], xmm0
mov r12d, 1
mov dword [rbp + 0x230], r12d
mov qword [rbp + 0x238], 4
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea rdx, [fcn.160046ee0]
lea r9, [rbp - 0x68]
lea r8, [rsp + 0x60]
cmp rax, rdx
lea rdx, [rbp + 0x220]
jne 0x1600971da
call fcn.160046ee0
test eax, eax
jne 0x160049984
cmp word [rsp + 0x60], ax
je 0x16004998d
mov rax, qword [0x160273928]
mov rax, qword [rax + 0x18]
lea rcx, [0x160273928]
cmp rax, r13
jne 0x1600971fe
call fcn.1600460d0
lea r13, [rax + 0x18]
mov qword [rbp - 0x28], r13
movups xmm0, xmmword [0x1601d5b10]
movups xmmword [rbp + 0x220], xmm0
mov dword [rbp + 0x230], r12d
mov qword [rbp + 0x238], 0x64
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea rbx, [fcn.160046ee0]
lea r9, [rbp - 0x68]
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0x220]
cmp rax, rbx
jne 0x16009720a
call fcn.160046ee0
test eax, eax
je 0x1600497a7
cmp eax, 1
jne 0x1600497b3
lea rdx, [0x160273928]
lea rcx, [rbp - 0x30]
call fcn.160045c7c
nop
lea rdx, [0x160273928]
lea rcx, [rsp + 0x40]
call fcn.160045c7c
nop
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, [0x1601d6310]
mov rdx, qword [rsp + 0x48]
call fcn.16004a124
test eax, eax
je 0x160049fe3
mov rbx, qword [rbp - 0x30]
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, [0x1601d62e0]
mov rdx, qword [rsp + 0x48]
call fcn.16004a124
test eax, eax
je 0x160097216
mov rdi, qword [rsp + 0x40]
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, [0x1601d62c8]
mov rdx, qword [rsp + 0x48]
call fcn.16004a124
test eax, eax
je 0x160097262
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, [0x1601d6298]
mov rdx, qword [rsp + 0x48]
call fcn.16004a124
test eax, eax
je 0x1600972c1
cmp dword [r13 - 0x10], 0
jne 0x16004a017
lea rcx, [rdi - 0x18]
call fcn.160046140
nop
lea rcx, [rbx - 0x18]
call fcn.160046140
lea rbx, [fcn.160046ee0]
movups xmm0, xmmword [0x1601d5af8]
movups xmmword [rbp + 0x220], xmm0
mov dword [rbp + 0x230], r12d
mov qword [rbp + 0x238], 0x64
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea r9, [rbp - 0x68]
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0x220]
cmp rax, rbx
jne 0x160097312
call fcn.160046ee0
test eax, eax
je 0x1600497ca
cmp eax, 1
jne 0x160048a28
lea rdx, [0x160273928]
lea rcx, [rsp + 0x40]
call fcn.160045c7c
nop
mov r8d, dword [r13 - 0x10]
test r8d, r8d
jne 0x16004a02e
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, [0x1601d62b0]
mov rdx, qword [rsp + 0x48]
call fcn.16004a124
test eax, eax
je 0x16009731e
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, [0x1601d62f8]
mov rdx, qword [rsp + 0x48]
call fcn.16004a124
test eax, eax
je 0x16009736a
mov rbx, qword [rsp + 0x40]
cmp dword [rbx - 0x10], 0
jne 0x16004a040
lea rcx, [rbx - 0x18]
call fcn.160046140
lea rbx, [fcn.160046ee0]
mov rax, qword [0x160273928]
mov rax, qword [rax + 0x18]
lea rdi, [fcn.1600460d0]
lea rcx, [0x160273928]
cmp rax, rdi
jne 0x1600973b6
call fcn.1600460d0
add rax, 0x18
mov qword [rbp - 0x30], rax
movups xmm0, xmmword [0x1601d5a60]
movups xmmword [rbp + 0x220], xmm0
mov dword [rbp + 0x230], r12d
mov qword [rbp + 0x238], 7
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea r9, [rbp - 0x68]
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0x220]
cmp rax, rbx
jne 0x1600973c2
call fcn.160046ee0
test eax, eax
jne 0x1600499bc
cmp word [rsp + 0x60], ax
je 0x1600499c5
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x60]
call fcn.160045658
mov r12, qword [rbp - 0x30]
mov rax, qword [0x160273928]
mov rax, qword [rax + 0x18]
lea rcx, [0x160273928]
cmp rax, rdi
jne 0x1600973ce
call fcn.1600460d0
lea r15, [rax + 0x18]
mov qword [rbp - 0x80], r15
movups xmm0, xmmword [0x1601d5d88]
movups xmmword [rbp + 0x220], xmm0
mov edi, 1
mov dword [rbp + 0x230], edi
mov qword [rbp + 0x238], 3
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea r9, [rbp - 0x68]
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0x220]
cmp rax, rbx
jne 0x1600973da
call fcn.160046ee0
test eax, eax
jne 0x160049829
cmp word [rsp + 0x60], ax
je 0x160049831
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x60]
call fcn.160042854
mov r15, qword [rbp - 0x80]
mov rdi, qword [rbp - 0x38]
mov r14d, 1
cmp dword [rbp - 0x48], 0x80070057
je 0x1600977e8
xor bl, bl
movups xmm0, xmmword [0x1601d5d58]
movups xmmword [rbp + 0x220], xmm0
mov dword [rbp + 0x230], r14d
mov qword [rbp + 0x238], 0x9003
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea rdx, [fcn.160046ee0]
lea r9, [rbp - 0x68]
lea r8, [rsp + 0x60]
cmp rax, rdx
lea rdx, [rbp + 0x220]
jne 0x1600977f1
call fcn.160046ee0
test eax, eax
je 0x1600497db
cmp eax, 1
jne 0x1600497e7
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea rdx, [fcn.160046ee0]
lea r9, [rbp - 0x68]
lea r8, [rsp + 0x60]
cmp rax, rdx
lea rdx, [0x160270c08]
jne 0x1600977fd
call fcn.160046ee0
test eax, eax
je 0x160097809
movups xmm0, xmmword [0x1601d5dd0]
movups xmmword [rbp + 0x220], xmm0
mov dword [rbp + 0x230], r14d
mov qword [rbp + 0x238], 0x64
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea rdx, [fcn.160046ee0]
lea r9, [rbp - 0x68]
lea r8, [rsp + 0x60]
cmp rax, rdx
lea rdx, [rbp + 0x220]
jne 0x160097833
call fcn.160046ee0
test eax, eax
jne 0x160049a02
cmp word [rsp + 0x60], ax
je 0x160049a0b
movups xmm0, xmmword [0x1601d5d70]
movups xmmword [rbp + 0x220], xmm0
mov eax, 1
mov dword [rbp + 0x230], eax
mov qword [rbp + 0x238], 0x64
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea rdx, [fcn.160046ee0]
lea r9, [rbp - 0x68]
lea r8, [rsp + 0x60]
cmp rax, rdx
lea rdx, [rbp + 0x220]
jne 0x16009791f
call fcn.160046ee0
mov r14d, 8
test eax, eax
jne 0x160049911
cmp word [rsp + 0x60], ax
je 0x16004991a
mov rax, qword [0x160273928]
mov rax, qword [rax + 0x18]
lea rbx, [fcn.1600460d0]
lea rcx, [0x160273928]
cmp rax, rbx
jne 0x160097a98
call fcn.1600460d0
lea r14, [rax + 0x18]
mov qword [rbp - 0x78], r14
movups xmm0, xmmword [0x1601d5a90]
movups xmmword [rbp + 0x220], xmm0
mov eax, 1
mov dword [rbp + 0x230], eax
mov qword [rbp + 0x238], 0x64
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea rdx, [fcn.160046ee0]
lea r9, [rbp - 0x68]
lea r8, [rsp + 0x60]
cmp rax, rdx
lea rdx, [rbp + 0x220]
jne 0x160097aa4
call fcn.160046ee0
test eax, eax
jne 0x160049a76
cmp word [rsp + 0x60], ax
je 0x160049a7f
lea rdx, [rbp - 0x78]
lea rcx, [rsp + 0x60]
call fcn.160045658
mov r14, qword [rbp - 0x78]
movups xmm0, xmmword [0x1601d5a78]
movups xmmword [rbp + 0x220], xmm0
mov esi, 1
mov dword [rbp + 0x230], esi
mov qword [rbp + 0x238], 0xa
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea rdx, [fcn.160046ee0]
lea r9, [rbp - 0x68]
lea r8, [rsp + 0x60]
cmp rax, rdx
lea rdx, [rbp + 0x220]
jne 0x160097b15
call fcn.160046ee0
test eax, eax
jne 0x160049b45
cmp word [rsp + 0x60], ax
je 0x160049b4d
mov rax, qword [0x160273928]
mov rax, qword [rax + 0x18]
lea rcx, [0x160273928]
cmp rax, rbx
jne 0x160097b47
call fcn.1600460d0
add rax, 0x18
mov qword [rbp - 0x70], rax
movups xmm0, xmmword [0x1601d5ac0]
movups xmmword [rbp + 0x220], xmm0
mov dword [rbp + 0x230], esi
mov qword [rbp + 0x238], 6
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea rdx, [fcn.160046ee0]
lea r9, [rbp - 0x68]
lea r8, [rsp + 0x60]
cmp rax, rdx
lea rdx, [rbp + 0x220]
jne 0x160097b53
call fcn.160046ee0
test eax, eax
jne 0x160049bc7
cmp word [rsp + 0x60], ax
je 0x160049bd0
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x60]
call fcn.160045658
mov rsi, qword [rbp - 0x70]
movups xmm0, xmmword [0x1601d58b0]
movups xmmword [rbp + 0x220], xmm0
mov eax, 1
mov dword [rbp + 0x230], eax
mov qword [rbp + 0x238], 2
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea rdx, [fcn.160046ee0]
lea r9, [rbp - 0x68]
lea r8, [rsp + 0x60]
cmp rax, rdx
lea rdx, [rbp + 0x220]
jne 0x160097b5f
call fcn.160046ee0
test eax, eax
je 0x160097b6b
cmp eax, 1
jne 0x160048fcf
mov rax, qword [0x160273928]
mov rax, qword [rax + 0x18]
lea rcx, [0x160273928]
cmp rax, rbx
jne 0x160097b7c
call fcn.1600460d0
lea rbx, [rax + 0x18]
mov qword [rsp + 0x78], rbx
mov rdx, rsi
lea rcx, [rsp + 0x40]
call fcn.160042bd8
nop
lea rcx, [rsp + 0x40]
call fcn.1600431bc
mov edx, 0x5c
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.msvcrt.dll_wcsrchr]
test rax, rax
je 0x160048f9e
mov rcx, qword [rsp + 0x40]
sub rax, rcx
sar rax, 1
test eax, eax
jle 0x160048f9e
lea r8d, [rax + 1]
mov r9d, dword [rcx - 0x10]
sub r9d, r8d
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x40]
call fcn.160042cf4
nop
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x78]
call fcn.160045d7c
nop
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
call fcn.160046140
mov rbx, qword [rsp + 0x78]
cmp dword [rbx - 0x10], 0
je 0x160048fb7
mov r8, rbx
lea rdx, [0x1601d58b0]
mov rcx, rdi
call fcn.160047e8c
nop
mov rcx, qword [rsp + 0x40]
add rcx, 0xffffffffffffffe8
call fcn.160046140
nop
lea rcx, [rbx - 0x18]
call fcn.160046140
movups xmm0, xmmword [0x1601d5a48]
movups xmmword [rbp + 0x220], xmm0
mov ebx, 1
mov dword [rbp + 0x230], ebx
mov qword [rbp + 0x238], 8
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea rdi, [fcn.160046ee0]
lea r9, [rbp - 0x68]
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0x220]
cmp rax, rdi
jne 0x160097b88
call fcn.160046ee0
test eax, eax
jne 0x160049c82
cmp word [rsp + 0x60], ax
je 0x160049c8a
movups xmm0, xmmword [0x1601d5aa8]
movups xmmword [rbp + 0x220], xmm0
mov dword [rbp + 0x230], ebx
mov qword [rbp + 0x238], 0x64
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea r9, [rbp - 0x68]
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0x220]
cmp rax, rdi
jne 0x160097ba8
call fcn.160046ee0
test eax, eax
jne 0x160049da0
cmp word [rsp + 0x60], ax
je 0x160049da9
movups xmm0, xmmword [0x1601d5908]
movups xmmword [rbp + 0x220], xmm0
mov dword [rbp + 0x230], ebx
mov qword [rbp + 0x238], 0x64
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
lea r9, [rbp - 0x68]
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0x220]
cmp rax, rdi
jne 0x160097bc8
call fcn.160046ee0
test eax, eax
je 0x160049818
cmp eax, 1
jne 0x160049278
lea rcx, [rsp + 0x48]
call fcn.16000db94
nop
lea rcx, [rbx - 0x18]
call fcn.160046140
mov eax, dword [rbp - 0x48]
mov rcx, qword [rbp + 0x470]
xor rcx, rsp
call fcn.16006e590
lea r11, [rsp + 0x580]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
cmp word [rsp + 0x60], 0
je 0x160048854
lea rdx, [rbp - 0x28]
lea rcx, [rsp + 0x60]
call fcn.160042854
mov r13, qword [rbp - 0x28]
jmp 0x160048941
cmp word [rsp + 0x60], 0
jne 0x160048a28
jmp 0x16004899c
cmp word [rsp + 0x60], 0
je 0x160048bdc
lea r8, [rbp + 0x40]
xor edx, edx
lea rcx, [rsp + 0x60]
call qword [sym.imp.PROPSYS.dll_PropVariantToFileTime]
mov bl, 1
jmp 0x160048c15
cmp eax, 1
jne 0x160048658
cmp dword [r14 - 0x10], 0
je 0x160048658
jmp 0x16009703c
cmp word [rsp + 0x60], 0
jne 0x160049278
cmp eax, edi
jne 0x160048b4f
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
lea r9, [rbp - 0x68]
lea r8, [rsp + 0x60]
lea rdx, [0x160270c50]
mov rax, qword [rax + 0x20]
call qword [case.0x16003fc5a.0]
test eax, eax
je 0x1600973e6
mov eax, dword [r15 - 0x10]
test eax, eax
jne 0x16004986d
cmp dword [r14 - 0x10], eax
jne 0x160049efb
cmp dword [r15 - 0x10], 0
jne 0x160097791
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, [0x1601d6700]
mov rdx, qword [rsp + 0x48]
call fcn.16004a124
test eax, eax
je 0x1600976e8
cmp dword [r15 - 0x10], 0
jne 0x160097791
lea rcx, [r14 - 0x18]
call fcn.1600671e0
add rax, 0x18
mov qword [rsp + 0x58], rax
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x58]
call fcn.160067cb0
mov r15, qword [rbp - 0x80]
cmp dword [r15 - 0x10], 0
jne 0x160097791
movzx ebx, byte [rsp + 0x50]
test bl, bl
jne 0x160097767
lea rdx, str.link
mov rcx, r15
call sub.msvcrt.dll_wcscmp
test eax, eax
je 0x16009779b
mov rdi, qword [rbp - 0x38]
cmp dword [r15 - 0x10], 0
je 0x160048b65
jmp 0x1600977d0
cmp eax, 1
jne 0x160048ce7
lea rdx, [0x160273928]
lea rcx, [rbp - 0x78]
call fcn.160045c7c
nop
cmp dword [r15 - 0x10], 0
jne 0x16009792b
mov rbx, qword [rbp - 0x78]
lea rcx, [rbx - 0x18]
call fcn.160046140
jmp 0x160048ce7
cmp eax, esi
jne 0x16004834e
lea rdx, [0x1601d9720]
mov rcx, r15
call fcn.160047b84
jmp 0x16004834e
cmp eax, 1
jne 0x1600486bf
mov r8, rsi
lea rdx, [0x1601d5a30]
mov rcx, r15
call fcn.160047e8c
jmp 0x1600486bf
cmp eax, r12d
jne 0x1600487ca
lea rdx, [0x160273928]
lea rcx, [rsp + 0x40]
call fcn.160045c7c
nop
cmp dword [rbx - 0x10], 0
jne 0x16004a057
mov rbx, qword [rsp + 0x40]
lea rcx, [rbx - 0x18]
call fcn.160046140
jmp 0x1600487ca
cmp eax, 1
jne 0x160048ab4
lea r9, [rsp + 0x78]
lea r8, [rbp - 0x78]
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x10]
call fcn.160066d50
mov r12, qword [rbp - 0x30]
cmp dword [r12 - 0x10], 0
je 0x160048ac6
mov r8, r12
lea rdx, [0x1601d5a60]
mov rcx, r15
call fcn.160047e8c
jmp 0x160048ac6
cmp eax, 1
jne 0x160048c79
lea rdx, str.picture
lea rcx, [rbp - 0x80]
call fcn.160042ba4
test eax, eax
jns 0x16009783f
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, [0x1601d6808]
mov rdx, qword [rsp + 0x48]
call fcn.16004a124
test eax, eax
je 0x160097905
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, [0x1601d6820]
mov rdx, qword [rsp + 0x48]
call fcn.16004a124
test eax, eax
jne 0x160048c79
jmp 0x160097905
cmp eax, 1
jne 0x160048d7e
mov rax, qword [rbp + 0x10]
cmp dword [rax - 0x10], 0
jne 0x160097ab0
cmp dword [rsi - 0x10], 0
jne 0x160097aef
cmp dword [r12 - 0x10], 0
je 0x160049b23
lea rcx, [r12 - 0x18]
call fcn.1600671e0
add rax, 0x18
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x40]
call fcn.160043218
mov edx, 0x5c
lea rcx, [rbp - 0x30]
call fcn.160042f20
mov rbx, qword [rsp + 0x40]
test eax, eax
jle 0x160097b02
mov r8d, dword [rbx - 0x10]
sub r8d, eax
dec r8d
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x40]
call fcn.160043150
nop
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.160045d7c
nop
mov rcx, qword [rbp - 0x40]
add rcx, 0xffffffffffffffe8
call fcn.160046140
nop
lea rcx, [rbx - 0x18]
call fcn.160046140
lea rbx, [fcn.1600460d0]
mov r14, qword [rbp - 0x78]
cmp dword [r14 - 0x10], 0
je 0x160048d90
mov r8, r14
lea rdx, [0x1601d5a90]
mov rcx, rdi
call fcn.160047e8c
jmp 0x160048d90
cmp eax, esi
jne 0x160048df8
lea rdx, [0x160273928]
lea rcx, [rsp + 0x40]
call fcn.160045c7c
nop
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, [0x1601d67f0]
mov rdx, qword [rsp + 0x48]
call fcn.16004a124
test eax, eax
je 0x160097b21
lea rdx, [rbp - 0x78]
lea rcx, [rsp + 0x40]
call fcn.160045d7c
mov rbx, qword [rsp + 0x40]
cmp dword [rbx - 0x10], 0
je 0x160049bb2
mov r8, rbx
lea rdx, [0x1601d5a78]
mov rcx, rdi
call fcn.160047e8c
nop
lea rcx, [rbx - 0x18]
call fcn.160046140
lea rbx, [fcn.1600460d0]
jmp 0x160048df8
cmp eax, 1
jne 0x160048e83
lea rdx, [0x160273928]
lea rcx, [rsp + 0x78]
call fcn.160045c7c
nop
mov rcx, r12
call fcn.160066bd0
mov r8d, eax
mov rdx, r12
lea rcx, [rsp + 0x78]
call fcn.160045a10
lea rcx, [rsp + 0x78]
call fcn.1600431bc
mov edx, 0x5c
lea rcx, [rsp + 0x78]
call fcn.160042f20
test eax, eax
jle 0x160049c44
mov r8d, eax
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x78]
call fcn.160042e74
nop
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.160045d7c
nop
mov rcx, qword [rbp - 0x40]
add rcx, 0xffffffffffffffe8
call fcn.160046140
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x70]
call fcn.160045d7c
mov rsi, qword [rbp - 0x70]
cmp dword [rsi - 0x10], 0
je 0x160049c6f
mov r8, rsi
lea rdx, [0x1601d5ac0]
mov rcx, rdi
call fcn.160047e8c
nop
mov rcx, qword [rsp + 0x78]
add rcx, 0xffffffffffffffe8
call fcn.160046140
jmp 0x160048e95
cmp eax, ebx
jne 0x160049037
lea rdx, [0x160273928]
lea rcx, [rsp + 0x40]
call fcn.160045c7c
nop
lea rcx, [r12 - 0x18]
call fcn.1600671e0
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rcx, [rsp + 0x78]
call fcn.1600431bc
mov edx, 0x5c
lea rcx, [rsp + 0x78]
call fcn.160042f20
mov ebx, eax
mov rdi, qword [rsp + 0x78]
test eax, eax
jle 0x160097b94
lea r8d, [rax + 1]
mov r9d, dword [rdi - 0x10]
sub r9d, r8d
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x78]
call fcn.160042cf4
nop
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x40]
call fcn.160045d7c
nop
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
call fcn.160046140
lea rdx, [0x1601d65c8]
lea rcx, [rsp + 0x40]
call fcn.160045f18
mov r8d, ebx
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x78]
call fcn.160042e74
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x40]
call fcn.160045e80
nop
mov rcx, qword [rbp - 0x40]
add rcx, 0xffffffffffffffe8
call fcn.160046140
lea rdx, [0x1601d6258]
lea rcx, [rsp + 0x40]
call fcn.160045f18
mov rbx, qword [rsp + 0x40]
mov r8, rbx
lea rdx, [0x1601d5a48]
mov rcx, qword [rbp - 0x38]
call fcn.160047e8c
nop
lea rcx, [rdi - 0x18]
call fcn.160046140
nop
lea rcx, [rbx - 0x18]
call fcn.160046140
mov ebx, 1
lea rdi, [fcn.160046ee0]
jmp 0x160049037
cmp eax, 1
jne 0x160049093
lea rdx, [0x160273928]
lea rcx, [rsp + 0x40]
call fcn.160045c7c
nop
lea rcx, [rsi - 0x18]
call fcn.1600671e0
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rcx, [rsp + 0x78]
call fcn.1600431bc
mov edx, 0x5c
lea rcx, [rsp + 0x78]
call fcn.160042f20
mov ebx, eax
mov rdi, qword [rsp + 0x78]
test eax, eax
jle 0x160097bb4
lea r8d, [rax + 1]
mov r9d, dword [rdi - 0x10]
sub r9d, r8d
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x78]
call fcn.160042cf4
nop
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x40]
call fcn.160045d7c
nop
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
call fcn.160046140
lea rdx, [0x1601d65c8]
lea rcx, [rsp + 0x40]
call fcn.160045f18
mov r8d, ebx
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x78]
call fcn.160042e74
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x40]
call fcn.160045e80
nop
mov rcx, qword [rbp - 0x40]
add rcx, 0xffffffffffffffe8
call fcn.160046140
lea rdx, [0x1601d6258]
lea rcx, [rsp + 0x40]
call fcn.160045f18
mov rbx, qword [rsp + 0x40]
mov r8, rbx
lea rdx, [0x1601d5aa8]
mov rcx, qword [rbp - 0x38]
call fcn.160047e8c
nop
lea rcx, [rdi - 0x18]
call fcn.160046140
nop
lea rcx, [rbx - 0x18]
call fcn.160046140
mov ebx, 1
lea rdi, [fcn.160046ee0]
jmp 0x160049093
cmp eax, 1
jne 0x16004874e
test dil, dil
jne 0x160097078
cmp dword [r14 - 0x10], 0
jne 0x1600971ac
cmp dword [rbx - 0x10], 0
je 0x160048760
jmp 0x1600971c2
test eax, eax
jne 0x160049f17
lea rdx, [0x1601d6b48]
mov rcx, r14
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
je 0x1600974aa
cmp dword [r15 - 0x10], 0
jne 0x160097791
mov dword [rbp - 0x78], edi
mov dword [rbp - 0x70], 0x80
lea rdx, [0x160273928]
lea rcx, [rsp + 0x40]
call fcn.160045c7c
nop
mov rbx, qword [rsp + 0x40]
mov ecx, edi
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
mov edx, dword [rbp - 0x70]
sub eax, edx
or eax, ecx
jge 0x160049f63
lea rcx, [rsp + 0x40]
call fcn.160045abc
mov rbx, qword [rsp + 0x40]
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rbx
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8, r14
lea rdx, str.softwaremicrosoftwindowscurrentversionexplorerkindmap
mov rcx, 0xffffffff80000002
call fcn.16005ac0c
test eax, eax
je 0x1600976c7
lea rcx, [rbx - 0x18]
call fcn.160046140
jmp 0x16004986d
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x60]
call fcn.160042854
mov rbx, qword [rbp - 0x30]
mov r8d, dword [rbx - 0x10]
test r8d, r8d
je 0x1600488a2
mov rdx, rbx
lea rcx, [rbp - 0x28]
call fcn.160045e80
mov r13, qword [rbp - 0x28]
jmp 0x1600488a2
mov r8, r13
lea rdx, [0x1601d5b10]
mov rcx, r15
call fcn.160047e8c
jmp 0x160048927
mov rdx, r13
lea rcx, [rsp + 0x40]
call fcn.160045e80
jmp 0x1600489bb
mov r8, rbx
lea rdx, [0x1601d5af8]
mov rcx, r15
call fcn.160047e8c
jmp 0x160048a18
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x18]
mov rcx, qword [r15 + 0x30]
call fcn.160052804
mov rbx, qword [rsp + 0x40]
cmp dword [rbx - 0x10], 0
je 0x1600499ae
jmp 0x1600971e6
mov rbx, qword [rbp + 0x18]
mov rdi, qword [rbx]
add rdi, 0x28
mov edx, dword [rbp - 0x70]
lea rcx, [rbp + 0x80]
call fcn.160034ad4
mov rdx, rax
lea r9, [rbp - 0x70]
mov r8d, dword [rbp - 0x70]
mov rcx, rbx
mov rax, qword [rdi]
call qword [case.0x16003fc5a.0]
mov edx, eax
mov dword [rbp - 0x48], eax
mov rbx, qword [rbp - 0x10]
jmp 0x160048169
call qword [case.0x16003fc5a.0]
nop
jmp 0x160048061
mov rcx, qword [rbp + 0x4a8]
mov r9d, eax
lea r8, str.onecoreuap_base_appmodel_search_search_searchptypepiptypepifiltsink.cxx
mov edx, 0x28c
call fcn.1600b29f8
nop
jmp 0x1600496cd
call qword [case.0x16003fc5a.0]
nop
jmp 0x1600480f0
call qword [case.0x16003fc5a.0]
nop
jmp 0x16004811d
call qword [case.0x16003fc5a.0]
nop
jmp 0x160048159
mov rcx, qword [rbp + 0x4a8]
mov r9d, 0xce
lea r8, str.onecoreuap_base_appmodel_search_searchcommonincludelmstr.hxx
lea edx, [r9 + 0x2c]
call fcn.160108adc
int3
lea rdx, str.file:__
lea rcx, [rbp + 0x260]
call fcn.160019d88
nop
mov rax, qword [rbp + 0x260]
or r9d, 0xffffffff
mov r8d, dword [rbp + 0x274]
mov rdx, rbx
lea rcx, [rbp + 0x260]
mov rax, qword [rax + 0x20]
call qword [case.0x16003fc5a.0]
mov edx, 0x5c
lea r8d, [rdx - 0x2d]
lea rcx, [rbp + 0x260]
call fcn.160034948
mov rcx, qword [rbp + 0x268]
call fcn.160066bd0
mov r8d, eax
mov rdx, rcx
lea rcx, [rbp - 0x10]
call fcn.160045a10
nop
lea rcx, [rbp + 0x260]
call fcn.160019cb0
movzx edi, sil
mov byte [rsp + 0x50], sil
mov rbx, qword [rbp - 0x10]
jmp 0x1600481ee
call qword [case.0x16003fc5a.0]
nop
jmp 0x160048243
cmp word [rsp + 0x60], 0
jne 0x1600482e9
jmp 0x160048259
call qword [case.0x16003fc5a.0]
nop
jmp 0x1600482e9
call qword [case.0x16003fc5a.0]
nop
jmp 0x16004833b
call qword [case.0x16003fc5a.0]
nop
jmp 0x160048397
cmp word [rsp + 0x60], 0
jne 0x16004846c
jmp 0x1600483a7
call qword [case.0x16003fc5a.0]
nop
jmp 0x1600483d5
or eax, 0xffffffff
jmp 0x160048409
or eax, 0xffffffff
jmp 0x160048409
call qword [case.0x16003fc5a.0]
nop
jmp 0x16004848c
call qword [case.0x16003fc5a.0]
nop
jmp 0x1600484b4
call qword [case.0x16003fc5a.0]
nop
jmp 0x1600484dc
call qword [case.0x16003fc5a.0]
nop
jmp 0x160048538
call qword [case.0x16003fc5a.0]
nop
jmp 0x160048645
mov r8, r14
lea rdx, [0x1601d5e00]
mov rcx, r15
call fcn.160047e8c
nop
jmp 0x160048658
call qword [case.0x16003fc5a.0]
nop
jmp 0x1600486ac
call qword [case.0x16003fc5a.0]
nop
jmp 0x1600486df
call qword [case.0x16003fc5a.0]
nop
jmp 0x16004873b
xor ecx, ecx
mov dword [rbp + 0x268], ecx
lea rax, [rbp + 0x290]
mov qword [rbp + 0x280], rax
mov qword [rbp + 0x288], CreateErrorInfo
mov word [rbp + 0x290], cx
lea rax, fcn.160019c60
mov qword [rbp + 0x278], rax
lea rax, [0x1601bd290]
mov qword [rbp + 0x260], rax
mov dword [rbp + 0x438], ecx
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, [0x16020e6e8]
mov rdx, qword [rsp + 0x48]
call fcn.16004a124
test eax, eax
jne 0x16009710c
mov eax, dword [rsp + 0x68]
and eax, 0x60000000
cmp eax, 0x60000000
jne 0x16009710c
lea rdx, str.Directory
or rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x160097100
jmp 0x160097184
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, [0x16020e6b8]
mov rdx, qword [rsp + 0x48]
call fcn.16004a124
test eax, eax
jne 0x16009716f
or r8d, 0xffffffff
mov rdx, qword [rsp + 0x68]
lea rcx, [rbp + 0x260]
call fcn.160027df8
test eax, eax
js 0x16009716f
lea rcx, [rbp + 0x260]
call fcn.1600ace00
test eax, eax
je 0x16009716f
lea rdx, str.Directory
or rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x160097163
jmp 0x160097184
lea rdx, str.Folder
or rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x16009717a
mov r8d, eax
lea rcx, [rbp - 0x18]
call fcn.160045a10
lea rax, [0x1601bbbd8]
mov qword [rbp + 0x260], rax
lea rcx, [rbp + 0x278]
call fcn.160019cb0
jmp 0x1600971b9
lea rdx, [rbp + 0x38]
lea rcx, [rbp - 0x18]
call fcn.160045d7c
mov rbx, qword [rbp - 0x18]
jmp 0x160049edb
mov r8, rbx
lea rdx, [0x1601d5db8]
mov rcx, r15
call fcn.160047e8c
nop
jmp 0x160048760
call qword [case.0x16003fc5a.0]
nop
jmp 0x1600487b7
mov r8, rbx
lea rdx, [0x1601d5da0]
mov rcx, r15
call fcn.160047e8c
nop
jmp 0x1600499ae
call qword [case.0x16003fc5a.0]
nop
jmp 0x1600487ea
call qword [case.0x16003fc5a.0]
nop
jmp 0x160048843
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x60]
call fcn.160042854
mov rdi, qword [rsp + 0x40]
cmp dword [rdi - 0x10], 0
je 0x1600488ce
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.160042ee8
test eax, eax
je 0x1600488ce
mov r8d, dword [rdi - 0x10]
mov rdx, rdi
lea rcx, [rbp - 0x28]
call fcn.160045e80
mov r13, qword [rbp - 0x28]
jmp 0x1600488ce
lea rdx, [0x160273928]
lea rcx, [rbp - 0x80]
call fcn.160045c7c
nop
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x60]
call fcn.160042854
mov rsi, qword [rbp - 0x80]
cmp dword [rsi - 0x10], 0
je 0x1600972af
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.160042ee8
test eax, eax
je 0x1600972af
mov r8d, dword [rsi - 0x10]
mov rdx, rsi
lea rcx, [rbp - 0x28]
call fcn.160045e80
mov r13, qword [rbp - 0x28]
lea rcx, [rsi - 0x18]
call fcn.160046140
mov rsi, qword [rbp - 0x20]
jmp 0x1600488f5
lea rdx, [0x160273928]
lea rcx, [rsp + 0x58]
call fcn.160045c7c
nop
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x60]
call fcn.160042854
mov rsi, qword [rsp + 0x58]
mov r8d, dword [rsi - 0x10]
test r8d, r8d
je 0x160097300
mov rdx, rsi
lea rcx, [rbp - 0x28]
call fcn.160045e80
mov r13, qword [rbp - 0x28]
lea rcx, [rsi - 0x18]
call fcn.160046140
mov rsi, qword [rbp - 0x20]
jmp 0x16004891c
call qword [case.0x16003fc5a.0]
nop
jmp 0x16004898b
lea rdx, [0x160273928]
lea rcx, [rsp + 0x58]
call fcn.160045c7c
nop
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x60]
call fcn.160042854
mov rbx, qword [rsp + 0x58]
mov r8d, dword [rbx - 0x10]
test r8d, r8d
je 0x16009735b
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.160045e80
nop
lea rcx, [rbx - 0x18]
call fcn.160046140
nop
jmp 0x1600489e2
lea rdx, [0x160273928]
lea rcx, [rsp + 0x58]
call fcn.160045c7c
nop
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x60]
call fcn.160042854
mov rbx, qword [rsp + 0x58]
mov r8d, dword [rbx - 0x10]
test r8d, r8d
je 0x1600973a7
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.160045e80
nop
lea rcx, [rbx - 0x18]
call fcn.160046140
nop
jmp 0x160048a09
call qword [case.0x16003fc5a.0]
nop
jmp 0x160048a4f
call qword [case.0x16003fc5a.0]
nop
jmp 0x160048aa1
call qword [case.0x16003fc5a.0]
nop
jmp 0x160048ae6
call qword [case.0x16003fc5a.0]
nop
jmp 0x160048b3c
lea rdx, [0x160273928]
lea rcx, [rsp + 0x58]
call fcn.160045c7c
nop
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x60]
call fcn.160045658
lea rdx, str.Word.Document
mov rbx, qword [rsp + 0x58]
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x160097437
lea rdx, str.document
or rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x16009742b
jmp 0x16009748b
lea rdx, str.Excel.Sheet
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x160097462
lea rdx, str.document
or rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x160097456
jmp 0x16009748b
lea rdx, str.PowerPoint.Slide
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x16009749b
lea rdx, str.document
or rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x160097481
mov r8d, eax
lea rcx, [rbp - 0x80]
call fcn.160045a10
mov r15, qword [rbp - 0x80]
lea rcx, [rbx - 0x18]
call fcn.160046140
nop
jmp 0x16004985b
xor ebx, ebx
mov qword [rbp - 8], rbx
mov qword [rbp], rbx
mov qword [rbp + 8], rbx
mov r9d, 0x20019
lea r8, str.SoftwareMicrosoftMSNMessengerPerPassportSettings
mov rdx, 0xffffffff80000001
lea rcx, [rbp - 8]
call fcn.1600693a8
test eax, eax
jne 0x160097693
lea rdx, [0x1601d4934]
lea rcx, [rsp + 0x40]
call fcn.160042bd8
nop
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x260]
call fcn.160019d14
nop
lea rdx, [0x1601d4934]
lea rcx, [rbp - 0x48]
call fcn.160042bd8
nop
mov dword [rbp - 0x78], 0x104
mov r8, qword [rbp - 0x48]
mov ecx, edi
sub ecx, dword [r8 - 8]
mov eax, dword [r8 - 0xc]
sub eax, 0x104
or eax, ecx
jge 0x160097544
mov edx, 0x104
lea rcx, [rbp - 0x48]
call fcn.160045abc
mov r8, qword [rbp - 0x48]
lea rax, [rbp - 0x40]
mov qword [rsp + 0x38], rax
xor eax, eax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x78]
mov edx, ebx
mov rcx, qword [rbp - 8]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegEnumKeyExW]
mov edi, eax
inc ebx
lea rcx, [rbp - 0x48]
call fcn.160045e38
test edi, edi
jne 0x1600976ac
xor eax, eax
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x70], rax
mov r9d, 0x20019
mov r8, qword [rbp - 0x48]
mov rdx, qword [rbp - 8]
lea rcx, [rbp + 0x60]
call fcn.1600693a8
test eax, eax
jne 0x1600976a2
mov dword [rbp - 0x70], 0x104
mov r8, qword [rsp + 0x40]
mov ecx, 1
sub ecx, dword [r8 - 8]
mov eax, dword [r8 - 0xc]
sub eax, 0x104
or eax, ecx
jge 0x1600975e6
mov edx, 0x104
lea rcx, [rsp + 0x40]
call fcn.160045abc
mov r8, qword [rsp + 0x40]
lea r9, [rbp - 0x70]
lea rdx, str.MessageLogPath
lea rcx, [rbp + 0x60]
call fcn.1600f6bbc
lea rcx, [rsp + 0x40]
call fcn.160045e38
mov r9, qword [rsp + 0x40]
mov eax, dword [r9 - 0x10]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
mov r8d, dword [rbp + 0x274]
mov rdx, qword [rbp + 0x268]
mov ecx, 1
call fcn.160064b0c
test eax, eax
jne 0x1600976a2
lea rdx, str.instantmessage_communication
or rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x16009763c
mov r8d, eax
lea rcx, [rbp - 0x80]
call fcn.160045a10
nop
lea rcx, [rbp + 0x60]
call fcn.1600693e8
nop
mov rcx, qword [rbp - 0x48]
add rcx, 0xffffffffffffffe8
call fcn.160046140
mov r15, qword [rbp - 0x80]
xor eax, eax
mov dword [rbp - 0x48], eax
lea rcx, [rbp + 0x260]
call fcn.160019cb0
nop
mov rcx, qword [rsp + 0x40]
add rcx, 0xffffffffffffffe8
call fcn.160046140
mov edi, 1
lea rcx, [rbp - 8]
call fcn.1600693e8
nop
jmp 0x160049f17
lea rcx, [rbp + 0x60]
call fcn.1600693e8
nop
mov rcx, qword [rbp - 0x48]
add rcx, 0xffffffffffffffe8
call fcn.160046140
test edi, edi
jne 0x16009766e
mov edi, 1
jmp 0x160097503
lea rcx, [rsp + 0x40]
call fcn.160045e38
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x80]
call fcn.160045d7c
mov r15, qword [rbp - 0x80]
jmp 0x160049f9b
lea rdx, [0x160273928]
lea rcx, [rsp + 0x58]
call fcn.160045c7c
nop
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x60]
call fcn.160045658
mov rbx, qword [rsp + 0x58]
add rbx, 0xffffffffffffffe8
mov rcx, rbx
call fcn.1600671e0
add rax, 0x18
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x40]
mov qword [rbp - 0x40], rax
lea r9, [rbp - 0x80]
lea r8, [rsp + 0x40]
mov edx, 9
lea rcx, [0x160271ea0]
call fcn.1600429d8
nop
mov rcx, qword [rsp + 0x40]
add rcx, 0xffffffffffffffe8
call fcn.160046140
nop
mov rcx, rbx
call fcn.160046140
mov r15, qword [rbp - 0x80]
jmp 0x16004989f
lea rdx, str.folder
or rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x160097772
mov r8d, eax
lea rcx, [rbp - 0x80]
call fcn.160045a10
mov r15, qword [rbp - 0x80]
jmp 0x1600498e6
movzx ebx, byte [rsp + 0x50]
jmp 0x1600498e6
test bl, bl
jne 0x1600498fd
cmp dword [rsp + 0x78], 0
je 0x1600498fd
lea rcx, [rbp - 0x80]
call fcn.1600f70dc
lea rdx, str.program
lea rcx, [rbp - 0x80]
call fcn.160045f18
mov r15, qword [rbp - 0x80]
jmp 0x1600498fd
mov r8, r15
lea rdx, [0x1601d5d88]
mov rcx, rdi
call fcn.160047e8c
nop
jmp 0x160048b65
mov dword [rbp - 0x48], r14d
jmp 0x160048b78
call qword [case.0x16003fc5a.0]
nop
jmp 0x160048bcb
call qword [case.0x16003fc5a.0]
nop
jmp 0x160048c0d
lea r8, [rbp + 0x40]
xor edx, edx
lea rcx, [rsp + 0x60]
call qword [sym.imp.PROPSYS.dll_PropVariantToFileTime]
lea r8, [rbp + 0x40]
lea rdx, [0x1601d5d58]
mov rcx, rdi
call fcn.1600f71bc
nop
jmp 0x1600497f8
call qword [case.0x16003fc5a.0]
nop
jmp 0x160048c66
test bl, bl
je 0x16009784c
lea r8, [rbp + 0x40]
jmp 0x16009790a
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, [0x16020e6d0]
mov rdx, qword [rsp + 0x48]
call fcn.16004a124
test eax, eax
je 0x160097905
xor bl, bl
xor r14b, r14b
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x60]
lea r8, [0x1601d6820]
mov rdx, qword [rsp + 0x48]
call fcn.16004a124
movzx ebx, bl
test eax, eax
mov eax, 1
cmove ebx, eax
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x20]
lea r8, [0x1601d6808]
mov rdx, qword [rsp + 0x48]
call fcn.16004a124
movzx ecx, r14b
test eax, eax
mov eax, 1
cmove ecx, eax
test bl, bl
je 0x1600978f7
test cl, cl
je 0x1600978f1
mov eax, dword [rbp + 0x6c]
mov ecx, dword [rbp + 0x2c]
cmp eax, ecx
jb 0x1600978f1
jne 0x1600978ff
mov eax, dword [rbp + 0x28]
cmp dword [rbp + 0x68], eax
jae 0x1600978ff
lea r8, [rbp + 0x68]
jmp 0x16009790a
lea r8, [rbp + 0x68]
jmp 0x16009790a
test cl, cl
je 0x160048c79
lea r8, [rbp + 0x28]
jmp 0x16009790a
lea r8, [rsp + 0x68]
lea rdx, [0x1601d5dd0]
mov rcx, rdi
call fcn.1600f71bc
nop
jmp 0x160048c79
call qword [case.0x16003fc5a.0]
nop
jmp 0x160048cce
lea rcx, [r15 - 0x18]
call fcn.1600671e0
lea rsi, [rax + 0x18]
mov qword [rbp - 0x70], rsi
xor eax, eax
mov dword [rsp + 0x78], eax
lea r9, [rsp + 0x78]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x70]
call fcn.1600f7444
nop
mov rbx, qword [rbp - 0x78]
lea rcx, [rsp + 0x40]
call fcn.160042cc4
mov r8, rax
lea rdx, [0x1601d98e7]
lea rcx, [rsp + 0x58]
call fcn.1600f6f38
mov rdx, qword [rsp + 0x58]
lea rcx, [rsp + 0x40]
call fcn.160042ee8
test eax, eax
setne dil
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
call fcn.160046140
test dil, dil
je 0x160097a36
mov rdx, qword [rsp + 0x40]
lea rcx, [rbp + 0x48]
call fcn.1600ad5c8
nop
mov word [rbp + 0x20], r14w
mov rdi, qword [rbp + 0x48]
mov qword [rbp + 0x28], rdi
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x200
or eax, ecx
jge 0x1600979e6
mov edx, 0x200
lea rcx, [rbp - 0x78]
call fcn.160045abc
mov rbx, qword [rbp - 0x78]
mov dword [rsp + 0x20], 0x200
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x20]
lea rcx, [0x1601d5d88]
call qword [sym.imp.PROPSYS.dll_PSFormatForDisplay]
test eax, eax
js 0x160097a5b
lea rcx, [rbp - 0x78]
call fcn.160045e38
cmp dword [rbx - 0x10], 0
je 0x160097a5b
mov r8, rbx
lea rdx, [0x1601d5d70]
mov rcx, qword [rbp - 0x38]
call fcn.160047e8c
nop
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x40]
add rcx, 0xffffffffffffffe8
call fcn.160046140
nop
lea rcx, [rsi - 0x18]
call fcn.160046140
mov rsi, qword [rbp - 0x20]
mov rdi, qword [rbp - 0x38]
jmp 0x16004993a
lea r9, [rsp + 0x78]
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x70]
call fcn.1600f7444
nop
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.160045d7c
nop
mov rcx, qword [rbp - 0x40]
add rcx, 0xffffffffffffffe8
call fcn.160046140
nop
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x16009795a
call qword [case.0x16003fc5a.0]
nop
jmp 0x160048d0e
call qword [case.0x16003fc5a.0]
nop
jmp 0x160048d6b
lea rdx, str.program
lea rcx, [rbp - 0x80]
call fcn.160042ba4
test eax, eax
jns 0x160097adc
lea rdx, str.link
lea rcx, [rbp - 0x80]
call fcn.160042ba4
test eax, eax
js 0x160049a8d
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x78]
call fcn.160045d7c
nop
jmp 0x160049b1f
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x78]
call fcn.160045d7c
nop
jmp 0x160049b1f
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x78]
call fcn.160045d7c
nop
jmp 0x160049b0f
call qword [case.0x16003fc5a.0]
nop
jmp 0x160048de5
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x60]
call fcn.160045658
mov r8d, dword [r14 - 0x10]
mov rdx, r14
lea rcx, [rsp + 0x40]
call fcn.160045e80
nop
jmp 0x160049b94
call qword [case.0x16003fc5a.0]
nop
jmp 0x160048e18
call qword [case.0x16003fc5a.0]
nop
jmp 0x160048e70
call qword [case.0x16003fc5a.0]
nop
jmp 0x160048eea
cmp word [rsp + 0x60], 0
jne 0x160048fcf
jmp 0x160048efb
call qword [case.0x16003fc5a.0]
nop
jmp 0x160048f1b
call qword [case.0x16003fc5a.0]
nop
jmp 0x160049024
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x40]
call fcn.160045d7c
nop
jmp 0x160049d63
call qword [case.0x16003fc5a.0]
nop
jmp 0x160049080
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x40]
call fcn.160045d7c
nop
jmp 0x160049e81
call qword [case.0x16003fc5a.0]
nop
jmp 0x1600490dc