Function at 0x180046760
Capabilities:
Check for software breakpoints
Delete registry key

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x170]
sub rsp, 0x270
mov rax, qword [0x180121650]
xor rax, rsp
mov qword [rbp + 0x168], rax
lea ebx, [r9 + 0x847]
mov qword [rsp + 0x58], rcx
xor r15d, r15d
mov dword [rsp + 0x50], ebx
cmp r9d, ebx
mov dword [rsp + 0x60], r9d
mov ebx, dword [rsp + 0x68]
mov r10, rcx
mov rsi, r8
mov qword [rbp - 0x78], r8
mov r12, rdx
mov qword [rbp - 0x28], rdx
mov edi, r9d
mov dword [rsp + 0x70], r9d
lea rcx, [0x180000000]
jae 0x180046da9
mov r13, qword [rbp - 0x78]
lea edx, [r15 + 0x69]
mov eax, dword [rsp + 0x50]
cmp edi, 0x105
ja 0x18004693f
je 0x1800468ee
lea eax, [rdi - 0x46]
cmp eax, 0xa3
ja case.default.0x180046816
movzx eax, byte [rcx + rax + 0x47150]
mov ecx, dword [rcx + rax*4 + 0x47134]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
cmp dword [r12], 1
jl 0x180046e0e
lea rcx, [0x180000000]
mov eax, dword [rsp + 0x50]
add edi, 0xa3
mov dword [rsp + 0x70], edi
cmp edi, eax
jae 0x180046da4
mov rsi, qword [rbp - 0x78]
jmp 0x1800467e1
mov r9, r10
mov qword [rbp - 0x28], r15
xor edx, edx
mov dword [rbp - 0x70], 0x10
mov r8d, 0xfe
lea rcx, [rbp - 0x70]
mov r12, r15
call fcn.1800dee70
mov r10, qword [rsp + 0x58]
mov edx, 0x69
jmp case.0x180046816.76
mov qword [rsp + 0x30], r15
lea rdx, [r10 + 0x10]
mov qword [rsp + 0x28], r15
mov r9d, 0x59
xor r8d, r8d
mov qword [rsp + 0x20], r15
xor ecx, ecx
call fcn.1800b5310
mov r10, qword [rsp + 0x58]
mov edx, 0x69
jmp case.0x180046816.76
mov word [rbp + 0x136], dx
jmp case.0x180046816.76
movsd xmm0, qword [0x18011674c]
movzx eax, word [0x180116754]
movsd qword [rbp + 0x12c], xmm0
mov word [rbp + 0x134], ax
mov dword [rbp + 0x128], 0x650044
mov word [rbp + 0x136], r15w
jmp case.0x180046816.76
mov dword [rsp + 0x78], r15d
jmp case.0x180046816.76
xor r8d, r8d
cmp dword [r12], 1
jl 0x180046d73
mov r9, qword [r10 + 0x60]
lea rcx, [rbp - 0x18]
mov edx, 0xdf
call fcn.1800e1220
cmp dword [r12], 1
jle 0x180046868
mov rdx, qword [rsi + 8]
xor r9d, r9d
xor r8d, r8d
lea ecx, [r9 + 0x44]
call fcn.1800fc540
mov r10, qword [rsp + 0x58]
mov edx, 0x69
mov dword [rsp + 0x78], eax
jmp case.0x180046816.76
cmp edi, 0x222
ja 0x180046c01
je 0x180046bf5
mov eax, edi
sub eax, 0x15e
je 0x180046a8c
sub eax, 0x21
je 0x180046a62
cmp eax, 0x29
jne case.default.0x180046816
mov rax, qword [rsi]
lea r9, [rbp - 0x58]
mov qword [rsp + 0x30], rax
lea r8, [rbp - 0x18]
lea rax, [rbp - 0x68]
mov dword [rbp - 0x58], r15d
mov qword [rsp + 0x28], rax
lea rcx, [rbp - 0x50]
lea rax, [rbp - 0x60]
mov dword [rbp - 0x60], r15d
mov edx, 0xd4
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x68], r15d
mov dword [rbp - 0x50], r15d
call fcn.1800530f0
mov eax, dword [rbp - 8]
cmp dword [rsp + 0x78], r15d
jne 0x180046a0a
mov r8, qword [rbp - 0x10]
lea rcx, [rbp - 0x48]
mov rdx, qword [rsp + 0x58]
mov r9d, 0xe7
mov dword [rbp - 0x48], eax
call fcn.1800a84c0
mov rdx, qword [rsp + 0x58]
lea rax, [rbp - 0x40]
mov qword [rsp + 0x30], r15
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor ecx, ecx
mov dword [rsp + 0x20], StrCmpICW
mov dword [rbp - 0x40], 1
call fcn.1800e4220
mov edi, dword [rsp + 0x70]
jmp 0x180046a2c
mov rcx, qword [rsp + 0x58]
lea r9, [rbp - 0x38]
mov dword [rbp - 0x38], eax
xor r8d, r8d
mov rax, qword [rbp - 0x10]
mov edx, 0xdb
mov qword [rsp + 0x20], rax
call fcn.18002dea0
mov qword [rsp + 0x38], r15
lea r8, [rbp - 0x18]
mov qword [rsp + 0x30], r15
xor r9d, r9d
mov qword [rsp + 0x28], r15
xor edx, edx
mov ecx, 0xb4
mov qword [rsp + 0x20], r15
call fcn.18002fc30
mov r10, qword [rsp + 0x58]
mov edx, 0x69
jmp case.0x180046816.76
mov rdx, qword [rsi]
xor r9d, r9d
xor r8d, r8d
mov ecx, 0x119
call fcn.1800a59f0
mov r10, qword [rsp + 0x58]
test eax, eax
je 0x180046e0e
mov edx, 0x69
jmp case.0x180046816.76
mov rax, qword [r10]
xor r9d, r9d
mov qword [rsp + 0x40], rax
xor r8d, r8d
mov qword [rsp + 0x38], r15
lea rax, [rbp + 0x10]
mov dword [rsp + 0x30], 0xa1
xor edx, edx
mov qword [rsp + 0x28], rax
xor ecx, ecx
mov qword [rsp + 0x20], r15
call fcn.1800e8110
mov rbx, qword [rsp + 0x58]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf7
xor ecx, ecx
lea r14, [rbx + 0x10]
mov qword [rsp + 0x20], r14
call fcn.18005f7e0
test rax, rax
je 0x180046bcf
nop word [rax + rax]
mov rsi, qword [rax + 0x10]
lea rcx, [rbp + 0xb0]
mov rdx, qword [rbx]
mov r9, rsi
xor r8d, r8d
mov dword [rsp + 0x20], 0x32
call fcn.1800b1a40
movups xmm0, xmmword [rax + 0x10]
mov rdi, qword [rax]
movsd xmm1, qword [rax + 0x20]
movsd qword [rbp + 0x120], xmm1
movups xmmword [rbp + 0x110], xmm0
test rdi, rdi
je 0x180046bab
mov ebx, 0x3c
mov eax, ebx
sub eax, 0x3a
je 0x180046b81
sub eax, 1
je 0x180046b6a
cmp eax, 1
jne 0x180046b9f
mov r9, qword [rsi]
lea r8, [rsp + 0x68]
mov edx, 0x11b
lea rcx, [rbp + 0x10]
mov eax, dword [r9 + 8]
mov r9, qword [r9]
mov dword [rsp + 0x68], eax
call fcn.1800e2a50
jmp 0x180046b9f
mov r9, r12
lea rcx, [rbp + 0x10]
mov r8d, 0x5f
mov rdx, rdi
call fcn.18004f890
jmp 0x180046b9f
xor r9d, r9d
lea rax, [rbp + 0x30]
xor edx, edx
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0xd8]
lea r8d, [r9 + 0x79]
call fcn.1800d9350
dec ebx
cmp ebx, 0x39
ja 0x180046b36
mov rbx, qword [rsp + 0x58]
xor r9d, r9d
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov edx, 0xf7
xor ecx, ecx
call fcn.18005f7e0
test rax, rax
jne 0x180046af0
mov edi, dword [rsp + 0x70]
mov r9d, 0xbf
lea rdx, [rbp + 0x10]
xor r8d, r8d
xor ecx, ecx
call fcn.180029510
mov r10, qword [rsp + 0x58]
mov edx, 0x69
mov ebx, r15d
jmp case.0x180046816.76
mov rax, qword [rsi]
mov r13, qword [rax + 8]
jmp case.default.0x180046816
cmp edi, 0x2c5
je 0x180046c31
cmp edi, 0x368
jne 0x18004682e
mov r9, qword [rbp - 0x30]
mov r8d, 0x122
mov rdx, r10
xor ecx, ecx
call fcn.1800e50a0
mov eax, r15d
jmp 0x1800470b6
xor edx, edx
mov r8d, 0x10b
mov rcx, r10
call fcn.18002b4e0
mov qword [rbp - 0x30], rax
cmp rax, 0
je 0x180046e09
mov r14d, r15d
mov rdi, qword [r13 + 0x10]
cmp dword [r13 + 0x2c], r15d
jbe 0x180046d60
mov r12, rax
nop dword [rax]
nop word [rax + rax]
xor edx, edx
mov r9, rdi
xor r8d, r8d
lea ecx, [rdx + 0x28]
call fcn.1800f5c10
mov rsi, rax
test rax, rax
je 0x180046d4b
test byte [rax + 0x10], 0x20
jne 0x180046d4b
cmp dword [rdi + 8], 1
jne 0x180046cbc
mov rax, qword [rdi + 0x10]
lea r9, [rbp + 0x60]
mov rcx, qword [r13]
lea r8, [rbp - 0x20]
mov edx, 0x85
mov qword [rbp - 0x20], rax
call fcn.1800536f0
jmp 0x180046d07
mov rax, qword [rdi + 0x18]
lea r9, [rbp + 0x150]
mov qword [rbp + 0x150], rax
xor r8d, r8d
mov eax, dword [rdi + 0x20]
xor edx, edx
mov dword [rbp + 0x158], eax
xor ecx, ecx
mov rax, qword [r13]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x60]
mov qword [rsp + 0x38], r15
mov dword [rsp + 0x30], 0xa1
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
call fcn.1800e8110
mov qword [rsp + 0x40], r15
lea rax, [rbp + 0x60]
mov qword [rsp + 0x38], r15
xor r9d, r9d
mov qword [rsp + 0x30], rax
xor r8d, r8d
mov qword [rsp + 0x28], r15
mov rdx, r12
mov ecx, 0x90
mov qword [rsp + 0x20], rsi
call fcn.1800ad5f0
mov r9d, 0xbf
lea rdx, [rbp + 0x60]
xor r8d, r8d
xor ecx, ecx
call fcn.180029510
mov rdi, qword [rdi + 0x48]
inc r14d
cmp r14d, dword [r13 + 0x2c]
jb 0x180046c70
mov r12, qword [rbp - 0x28]
mov edi, dword [rsp + 0x70]
mov edx, 0x69
mov r10, qword [rsp + 0x58]
jmp case.0x180046816.76
lea rax, [rsp + 0x68]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rax
xor r9d, r9d
mov rdx, r10
mov dword [rsp + 0x20], StrCmpICW
xor ecx, ecx
mov dword [rsp + 0x68], r15d
call fcn.1800e4220
mov eax, r15d
jmp 0x1800470b6
mov r9d, dword [rsp + 0x60]
lea r13d, [r9 - 0xc]
cmp r9d, r13d
jbe case.0x180046e07.10
mov r15d, dword [rsp + 0x68]
lea r12d, [r9 - 0x3e]
movzx r14d, byte [rbp - 0x80]
mov rsi, qword [rbp - 0x78]
mov rdi, qword [rbp - 0x78]
mov r11d, 0x73
movabs rdx, 0x6500750047006e
lea r8d, [r11 + 1]
cmp r12d, 0xcc
ja case.0x180046e07.12
movzx eax, byte [rcx + r12 + 0x47228]
mov ecx, dword [rcx + rax*4 + 0x471f4]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov r10, qword [rsp + 0x58]
xor r9d, r9d
xor edx, edx
mov r8d, 0xed
mov rcx, r10
call fcn.1800f3ce0
mov eax, r15d
jmp 0x1800470b6
mov word [rbp + 0x148], r8w
jmp case.0x180046e07.12
mov word [rbp + 0x146], r11w
jmp case.0x180046e07.12
mov r9, r10
mov dword [rsp + 0x78], 0x40
xor edx, edx
lea rcx, [rsp + 0x78]
mov r8d, 0xfe
call fcn.1800dee70
mov r9d, dword [rsp + 0x60]
jmp case.0x180046e07.12
mov r9, r10
xor r8d, r8d
mov edx, StrCmpICW
xor ecx, ecx
call fcn.18002ea30
xor r9d, r9d
xor edx, edx
test al, al
je 0x180046ea3
mov r8, qword [rsp + 0x58]
mov ecx, 0x136
mov qword [rsp + 0x20], rdx
call fcn.180076650
mov r9d, dword [rsp + 0x60]
jmp case.0x180046e07.12
mov rcx, qword [rsp + 0x58]
mov r8d, 0x68
call fcn.18000d8f0
mov r9d, dword [rsp + 0x60]
jmp case.0x180046e07.12
xor ecx, ecx
mov word [rbp + 0x14a], cx
xor eax, eax
lock cmpxchg dword [r10 + 0x11c], ecx
cmp eax, 1
jne 0x180046f98
mov edi, 0xf
nop
mov eax, edi
sub eax, 0xf
je 0x180046f67
sub eax, 1
je 0x180046f3f
cmp eax, 1
jne 0x180046f88
test r15d, r15d
movzx eax, r14b
cmovne ecx, eax
test cl, cl
je case.0x180046e07.10
mov edi, 0x47
cmp edi, 0x47
je 0x18004706b
cmp edi, 0x2edf
je 0x180047052
cmp edi, 0x5d77
jne 0x1800470a2
mov rcx, rsi
call qword [sym.imp.dbghelp.dll_SymCleanup]
jmp 0x1800470a2
mov rsi, 0xffffffffffffffff
xor r8d, r8d
mov rcx, rsi
xor edx, edx
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov r10, qword [rsp + 0x58]
xor ecx, ecx
mov r15d, eax
xchg dword [r10 + 0x11c], ecx
jmp 0x180046f86
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov ecx, 0x136
mov r8, r10
xor edx, edx
mov r14b, 1
call fcn.180076650
mov r10, qword [rsp + 0x58]
xor ecx, ecx
inc edi
cmp edi, 0x12
jb 0x180046ee0
mov r9d, dword [rsp + 0x60]
mov rdi, 0xffffffff80000001
jmp case.0x180046e07.12
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xd8
call fcn.18006b550
test al, al
je 0x1800470e0
xor r9d, r9d
xor edx, edx
xor ecx, ecx
lea r8d, [r9 + 0x4f]
call fcn.180063170
cmp rax, 2
je 0x1800470e0
lea rdx, [rbp + 0x128]
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov r9d, dword [rsp + 0x60]
jmp case.0x180046e07.12
mov qword [rbp + 0x13e], rdx
jmp case.0x180046e07.12
mov eax, 0x6c
mov dword [rbp + 0x13a], 0x490065
mov word [rbp + 0x138], ax
jmp case.0x180046e07.12
xor eax, eax
mov word [rbp + 0x146], ax
jmp case.0x180046e07.12
xor eax, eax
xor ecx, ecx
lock cmpxchg dword [r10 + 0x120], ecx
cmp eax, 1
je 0x1800470ff
dec r9d
dec r12d
mov dword [rsp + 0x60], r9d
cmp r9d, r13d
jbe case.0x180046e07.10
mov r10, qword [rsp + 0x58]
lea rcx, [0x180000000]
jmp 0x180046dcc
lea r8, [rbp + 0x100]
mov rcx, rsi
lea rdx, [rbp + 0x150]
call qword [sym.imp.dbghelp.dll_SymGetSymFromName64]
jmp 0x1800470a2
movups xmm0, xmmword [str.Ad_ToDecoderCache]
movzx eax, word [0x180116780]
mov word [rbp + 0x160], ax
movups xmmword [rbp + 0x150], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
mov dword [rbp + 0x100], 0x20
movups xmmword [rbp + 0x110], xmm0
add edi, 0x2e98
cmp edi, 0x8bc8
jbe 0x180046f10
mov eax, ebx
mov rcx, qword [rbp + 0x168]
xor rcx, rsp
call fcn.1800fd9d0
mov rbx, qword [rsp + 0x2c8]
add rsp, 0x270
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov r8, qword [rsp + 0x58]
xor r9d, r9d
xor edx, edx
mov qword [rsp + 0x20], 0
mov ecx, 0x136
call fcn.180076650
jmp case.0x180046e07.10
xor edi, edi
xor r9d, r9d
mov qword [rsp + 0x30], rdi
xor r8d, r8d
mov qword [rsp + 0x28], rdi
mov rdx, r10
mov dword [rsp + 0x20], 0xf0
call fcn.1800e4220
mov rax, qword [rsp + 0x58]
xchg dword [rax + 0x120], edi
jmp case.0x180046e07.10
xor eax, eax
jmp 0x1800470b6