Function at 0x18001fbe0
Capabilities:
Get common file path
Query or enumerate registry value
Set registry value

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x8c0]
sub rsp, 0x9c0
mov rax, qword [0x180059178]
xor rax, rsp
mov qword [rbp + 0x8b0], rax
mov ebx, edx
mov dword [rsp + 0x68], edx
xor r10d, r10d
mov qword [rbp - 0x80], r8
mov r15, r8
mov qword [rsp + 0x60], rcx
mov rdx, rcx
lea r11, [0x180000000]
lea eax, [rbx - 0xf]
mov dword [rsp + 0x48], eax
cmp ebx, eax
jbe 0x180020093
mov r12, qword [rbp - 0x50]
lea r14d, [rbx - 0x81]
movzx edi, byte [rsp + 0x40]
mov r8d, 0x7453
movzx esi, byte [rsp + 0x40]
mov r9d, 0x7261
mov ebx, dword [rsp + 0x58]
mov ecx, eax
movzx r13d, byte [rsp + 0x58]
mov dword [rsp + 0x50], r14d
cmp r14d, 0x44
ja case.default.0x18001fc8e
movzx eax, byte [r11 + r14 + 0x20a24]
mov ecx, dword [r11 + rax*4 + 0x209e4]
add rcx, r11
jmp rcx
mov dword [rbp + 0x183], 0x72617453
jmp case.0x18001fc8e.15
mov byte [rbp + 0x180], 0x57
jmp case.0x18001fc8e.15
mov r9, rdx
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x3b]
call fcn.1800405c0
mov qword [rsp + 0x70], rax
xor r10d, r10d
jmp 0x18002005c
mov r8d, 2
mov byte [rbp + 0x181], 0
lea rdx, [0x18004d9ca]
lea rcx, [rbp + 0x181]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
xor r10d, r10d
mov byte [rbp + 0x183], 0
jmp 0x18002005c
mov dword [rbp + 0x270], 0x5d0068
mov word [rbp + 0x274], r10w
jmp case.0x18001fc8e.15
mov eax, dword [r15]
mov dword [rdx + 0x108], eax
jmp case.0x18001fc8e.15
mov word [rbp + 0x187], 0x74
jmp case.0x18001fc8e.15
cmp dword [rdx], 4
jne 0x180020138
mov r9, qword [rdx + 0x20]
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x3b]
call fcn.1800405c0
mov r10, qword [r15]
mov r15d, 0x23
mov r14d, eax
cmp r15d, 0x23
je 0x18001fdf9
cmp r15d, 0x1275
je 0x18001fd76
cmp r15d, 0x24c7
je 0x18001fe15
jmp 0x18001fe01
mov r8b, 1
nop dword [rax]
mov r9b, 1
cmp sil, r9b
jb 0x18001fdee
movzx r11d, r8b
nop dword [rax]
xor edx, edx
movzx ecx, r9b
imul rcx, r11
mov rax, r14
div rcx
mov edx, r10d
sub edx, eax
mov ecx, eax
sub ecx, r10d
cmp r10, rax
cmovbe edx, ecx
cmp edx, ebx
jae 0x18001fde6
mov eax, 0xc3
nop dword [rax]
cmp eax, 0xc3
je 0x18001fdd4
cmp eax, 0x11f2b
jne 0x18001fdda
test edx, edx
je 0x18001fe15
jmp 0x18001fdda
mov ebx, edx
movzx edi, r8b
add eax, 0x8f34
cmp eax, 0x1ad9c
jbe 0x18001fdc0
inc r9b
cmp r9b, sil
jbe 0x18001fd90
inc r8b
cmp r8b, 0x3f
jbe 0x18001fd80
jmp 0x18001fe01
mov ebx, 0xffffffff
mov sil, 1
add r15d, 0x1252
cmp r15d, 0x36f6
jbe 0x18001fd51
mov byte [rsp + 0x40], dil
mov ecx, 0x72
mov rdx, qword [rsp + 0x40]
mov eax, ecx
sub eax, 0x72
je 0x18001fe69
sub eax, 3
je 0x18001fe37
cmp eax, 1
je 0x18001fe8f
jmp 0x18001fe53
test r12, r12
je 0x18001fe5c
mov rax, r12
shl rax, 4
add rax, 0xfffffffffffffff0
add rax, rdx
mov qword [rsp + 0x58], rax
movzx r13d, al
inc ecx
cmp ecx, 0x75
jb 0x18001fe24
jmp 0x18001fe8f
xor eax, eax
mov qword [rsp + 0x58], rax
movzx r13d, al
jmp 0x18001fe8f
movzx eax, dil
test al, 1
je 0x18001fe8b
cmp eax, 3
jle 0x18001fe86
cmp eax, 0x3f
jge 0x18001fe81
lea r13d, [rdi - 1]
jmp 0x18001fe8f
mov r13b, 0x3e
jmp 0x18001fe8f
mov r13b, 2
jmp 0x18001fe8f
movzx r13d, dil
mov rcx, qword [0x1800592b8]
lea rdx, [rsp + 0x40]
add rcx, 0x20
mov byte [rsp + 0x40], r13b
xor r9d, r9d
mov r8d, 0xc3
movzx edi, r13b
call fcn.18002bcc0
mov r14d, dword [rsp + 0x50]
xor r10d, r10d
mov r15, qword [rbp - 0x80]
jmp 0x18002005c
mov r8d, 4
lea rdx, [0x18004da00]
lea rcx, [rbp + 0x258]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor r10d, r10d
mov word [rbp + 0x260], r10w
jmp 0x18002005c
mov word [rbp + 0x270], r10w
jmp case.0x18001fc8e.15
mov r8d, 2
mov dword [rbp + 0x250], 0x630025
lea rdx, str.ZJ0ZJHZJ_ZJ
mov word [rbp + 0x254], r10w
lea rcx, [rbp + 0x250]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
xor r10d, r10d
jmp 0x18002005c
mov r8d, 4
lea rdx, [0x18004dafa]
lea rcx, [rbp + 0x260]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
movabs rax, 0x73007300200064
xor r10d, r10d
mov qword [rbp + 0x268], rax
jmp 0x18002005c
mov rdx, qword [rdx + 0x10]
lea rcx, [rbp + 0x1a8]
xor r8d, r8d
call fcn.180007660
mov rdx, rax
mov rcx, r15
call fcn.1800080f0
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0x10
jb 0x18001ffc4
mov rcx, qword [rbp + 0x1a8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001ffbf
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180020144
call fcn.180045a08
xor eax, eax
mov rdx, r15
cmp qword [r15 + 0x18], 0x10
mov dword [rsp + 0x78], eax
jb 0x18001ffd7
mov rdx, qword [r15]
mov rax, qword [rsp + 0x60]
mov rcx, rax
cmp qword [rax + 0x18], 0x10
jb 0x18001ffe9
mov rcx, qword [rax]
mov eax, dword [rax + 0x10]
lea r8, [rsp + 0x40]
mov dword [rsp + 0x50], eax
mov r9d, 0xce
lea rax, [rsp + 0x50]
mov byte [rsp + 0x40], 0
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rdx, [rsp + 0x78]
call fcn.180034ce0
test al, al
je 0x180020045
mov eax, dword [rsp + 0x78]
cmp qword [r15 + 0x10], rax
jb 0x1800209de
mov qword [r15 + 0x10], rax
mov rcx, r15
cmp qword [r15 + 0x18], 0x10
jb 0x18002003c
mov rcx, qword [r15]
mov byte [rcx + rax], 0
xor r10d, r10d
jmp 0x18002005c
xor r10d, r10d
mov rax, r15
mov qword [r15 + 0x10], r10
cmp qword [r15 + 0x18], 0x10
jb 0x180020059
mov rax, qword [r15]
mov byte [rax], r10b
mov rdx, qword [rsp + 0x60]
lea r11, [0x180000000]
mov r8d, 0x7453
mov r9d, 0x7261
mov ecx, dword [rsp + 0x48]
dec r14d
mov dword [rsp + 0x50], r14d
lea eax, [r14 + 0x81]
cmp eax, ecx
ja 0x18001fc70
mov ebx, dword [rsp + 0x68]
lea r13d, [rbx + 0xa32]
cmp ebx, r13d
jae case.0x1800204dd.31
mov r14d, dword [rsp + 0x58]
mov ecx, 0x6c
mov r15, qword [rbp - 0x50]
mov r12d, dword [rsp + 0x58]
movzx esi, byte [rsp + 0x40]
mov edi, dword [rsp + 0x58]
lea eax, [rcx + 3]
lea r8d, [rcx + 7]
lea r10d, [rcx - 3]
lea r9d, [rcx + 8]
nop
cmp ebx, 0x54b
ja 0x18002023f
je 0x180020224
cmp ebx, 0x293
ja 0x1800201b3
je 0x1800201a7
cmp ebx, 0x89
je 0x180020185
cmp ebx, 0x137
je 0x180020158
cmp ebx, 0x1e5
jne 0x180020997
xor edx, edx
mov dword [rbp + 0x1d0], 0x6e004f
mov word [rbp + 0x214], dx
mov edx, PathYetAnotherMakeUniqueName
mov word [rbp + 0x1d4], dx
jmp 0x180020997
mov rax, 0xffffffffffffffff
jmp 0x1800209b4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov dword [rsp + 0x70], 0x28
jmp case.0x1800204dd.31
mov dword [rbp + 0x204], 0x5f0032
mov dword [rbp + 0x208], 0x320033
mov dword [rbp + 0x20c], 0x64002e
mov dword [rbp + 0x210], 0x6c006c
jmp 0x180020997
mov edx, 0x7075
mov byte [rbp + 0x18a], 0
mov word [rbp + 0x188], dx
mov dword [rbp + 0x200], 0x730077
jmp 0x180020997
mov word [rbp + 0x1d6], ax
jmp 0x180020997
cmp ebx, 0x341
je 0x180020215
cmp ebx, 0x3ef
je 0x1800201f4
cmp ebx, 0x49d
jne 0x180020997
mov edx, 0x67
mov dword [rbp + 0x1e6], 0x690073
mov word [rbp + 0x1ea], dx
mov dword [rbp + 0x1ec], 0x54006e
jmp 0x180020997
mov dword [rbp + 0x1dc], 0x73004d
mov dword [rbp + 0x1e0], 0x410067
mov word [rbp + 0x1e4], r8w
jmp 0x180020997
mov dword [rbp + 0x1d8], 0x740073
jmp 0x180020997
mov edx, 0x65
mov dword [rbp + 0x1f2], 0x740078
mov word [rbp + 0x1f0], dx
jmp 0x180020997
cmp ebx, 0x8b1
ja 0x180020960
je 0x180020495
cmp ebx, 0x5f9
je 0x180020486
cmp ebx, 0x6a7
je 0x18002046e
cmp ebx, 0x803
jne 0x180020997
xor eax, eax
lea r9, [rbp + 0x200]
lea r8, [rbp + 0x180]
mov qword [rbp - 0x50], rax
mov edx, 0xb8
xor ecx, ecx
call fcn.180008a80
xor ecx, ecx
lea rdx, [rbp - 0x20]
mov dword [rsp + 0x58], ecx
mov ecx, 0x202
call rax
test eax, eax
je 0x180020980
xor edx, edx
mov ebx, edx
cmp ebx, 0xc
ja case.default.0x1800202cf
lea r8, [0x180000000]
mov eax, ebx
mov ecx, dword [r8 + rax*4 + 0x20a6c]
add rcx, r8
jmp rcx
mov dword [rbp + 0x19d], 0x6f705f
jmp case.default.0x1800202cf
mov eax, 0x6f
mov r10d, 0x69
mov word [rbp + 0x199], ax
mov eax, 0x746e
mov word [rbp + 0x19a], r10w
mov word [rbp + 0x19b], ax
jmp 0x18002044d
xor eax, eax
mov dword [rbp + 0x1a8], 0x1c
mov word [rsp + 0x48], ax
mov byte [rsp + 0x4a], al
mov dword [rbp - 0x70], edx
mov dword [rbp - 0x78], 0x1c
jmp case.default.0x1800202cf
xor eax, eax
mov dword [rbp - 0x6c], 0x36
xorps xmm0, xmm0
mov qword [rbp + 0x1b8], rax
movups xmmword [rbp + 0x1a8], xmm0
mov dword [rbp + 0x1c0], eax
mov qword [rbp - 0x40], rdx
jmp case.default.0x1800202cf
mov eax, 0x25
mov word [rbp + 0x190], ax
mov eax, 0x67
mov word [rbp + 0x191], ax
jmp case.default.0x1800202cf
mov dword [rbp + 0x192], 0x61732e63
jmp case.default.0x1800202cf
lea rax, [rbp + 0x190]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x180020392
lea rcx, [rsp + 0x48]
call qword [sym.imp.SHELL32.dll_ILFindLastID]
mov r9d, dword [rbp - 0x78]
lea r8, [rbp + 0x1a8]
mov edx, dword [rbp - 0x74]
mov rcx, qword [rbp - 0x48]
call sub.IMM32.dll_ImmGetCandidateListW
jmp 0x180020445
mov ecx, 0x6c
mov eax, 0x25
mov word [rbp + 0x1a1], cx
mov word [rbp + 0x1a2], ax
lea r10d, [rcx - 3]
jmp 0x180020452
mov dword [rbp + 0x196], 0x706566
jmp case.default.0x1800202cf
mov ecx, 0x6c
mov word [rbp + 0x1a0], cx
lea r10d, [rcx - 3]
jmp 0x180020452
mov qword [rbp - 0x48], rdx
mov qword [rbp - 0x38], rdx
mov dword [rbp - 0x74], edx
jmp case.default.0x1800202cf
mov r9d, dword [rbp - 0x70]
lea rax, [rbp + 0x280]
mov r8, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x38]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
mov edx, dword [rbp - 0x6c]
call qword [sym.imp.SHELL32.dll_SHGetFolderPathAndSubDirA]
mov edx, edi
lea rcx, [rbp + 0x190]
call qword [sym.imp.SHELL32.dll_DoEnvironmentSubstA]
mov byte [rsp + 0x70], 0
xor edx, edx
mov r10d, 0x69
mov ecx, 0x6c
inc ebx
lea eax, [rbx + 0xe8]
cmp eax, 0xf5
jb 0x1800202b2
mov ebx, dword [rsp + 0x68]
jmp 0x180020989
xor edx, edx
mov dword [rbp + 0x1fa], 0x730065
mov word [rbp + 0x1fe], dx
jmp 0x180020997
mov dword [rbp + 0x1f6], 0x720075
jmp 0x180020997
mov qword [rsp + 0x28], rdx
xor eax, eax
mov edx, 0x8f
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call fcn.1800191f0
test al, al
jne 0x180020939
xor edx, edx
mov ebx, edx
nop
cmp ebx, 0x1f
ja case.0x1800204dd.21
lea r8, [0x180000000]
mov eax, ebx
mov ecx, dword [r8 + rax*4 + 0x20aa0]
add rcx, r8
jmp rcx
mov eax, 0x56
mov dword [rbp + 0x2aa], 0x650073
mov word [rbp + 0x218], ax
mov dword [rbp + 0x2ae], 0x74
jmp case.0x1800204dd.21
mov dword [rbp - 0x68], edx
jmp case.0x1800204dd.21
mov dword [rbp + 0x280], 0x700064
mov dword [rbp + reloc.SHELL32.dll_SHChangeNotification_Lock], 0x3a0078
mov dword [rbp + 0x288], 0x72006f
jmp case.0x1800204dd.21
movsd xmm0, qword [0x18004dcd2]
movzx eax, word [0x18004dcda]
movsd qword [rbp + 0x498], xmm0
mov word [rbp + 0x4a0], ax
jmp case.0x1800204dd.21
mov eax, 0x5f
mov dword [rbp + 0x2a4], 0x66006f
mov word [rbp + 0x2a2], ax
mov eax, 0x66
mov word [rbp + 0x2a8], ax
jmp case.0x1800204dd.21
mov rcx, qword [rbp - 0x80]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x54]
mov qword [rsp + 0x20], rdx
lea r8, [rbp + 0x490]
lea rdx, [rbp + 0x280]
call qword [sym.imp.SHLWAPI.dll_SHGetValueW]
mov r9d, dword [rbp - 0x60]
lea r8, [rbp + 0x218]
mov rcx, qword [rbp - 0x30]
lea rdx, [rbp + 0x1a8]
mov dword [rbp - 0x5c], eax
lea rax, [rbp - 0x68]
mov qword [rsp + 0x30], rax
xor eax, eax
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.SHLWAPI.dll_SHRegGetValueW]
movzx ecx, byte [rsp + 0x40]
xor eax, eax
cmp dword [rbp - 0x64], eax
mov edx, eax
cmove edx, ecx
mov byte [rsp + 0x40], dl
xor edx, edx
jmp case.0x1800204dd.21
mov eax, dword [0x18004dd18]
mov dword [rbp + 0x1be], eax
movzx eax, word [0x18004dd1c]
mov word [rbp + 0x1c2], ax
mov word [rbp + 0x1c4], dx
jmp case.0x1800204dd.21
mov rcx, qword [rbp - 0x28]
lea rax, [rbp + 0x6a0]
mov r9d, r14d
mov qword [rsp + 0x20], rax
mov r8, r15
mov edx, r12d
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov dword [rbp - 0x64], eax
xor edx, edx
jmp case.0x1800204dd.21
mov sil, 1
jmp case.0x1800204dd.21
mov eax, 0x78
mov dword [rbp + 0x238], 0x650057
mov word [rbp + 0x248], ax
mov dword [rbp + 0x23c], 0x670069
mov dword [rbp + 0x240], 0x740068
mov dword [rbp + 0x244], 0x640049
jmp case.0x1800204dd.21
mov qword [rbp - 0x30], 0xffffffff80000001
mov r12d, 0x36
mov qword [rbp - 0x28], rdx
mov qword [rbp - 0x80], 0xffffffff80000001
jmp case.0x1800204dd.21
mov r15, rdx
mov dword [rbp - 0x60], reloc.SHELL32.dll_ILFindLastID
mov r14d, edx
jmp case.0x1800204dd.21
cmp dword [rbp - 0x5c], 0
mov ecx, edx
movzx eax, sil
cmove ecx, eax
movzx esi, cl
jmp case.0x1800204dd.21
mov eax, 0x57
mov dword [rbp + 0x21c], 0x370033
mov word [rbp + 0x224], ax
mov dword [rbp + 0x220], 0x5f0030
jmp case.0x1800204dd.21
mov r8d, 3
mov dword [rbp + 0x1c4], PathYetAnotherMakeUniqueName
lea rdx, [0x18004dd84]
lea rcx, [rbp + 0x1c6]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor edx, edx
mov word [rbp + 0x1cc], dx
jmp case.0x1800204dd.21
mov r8d, 3
lea rdx, [0x18004ddf2]
lea rcx, [rbp + 0x490]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov eax, 0x72
xor edx, edx
mov word [rbp + 0x4ac], ax
jmp case.0x1800204dd.21
mov r8d, 2
mov dword [rbp + 0x4ae], 0x6f
lea rdx, [0x18004de50]
lea rcx, [rbp + 0x490]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
xor edx, edx
mov byte [rsp + 0x40], 1
jmp case.0x1800204dd.21
mov eax, 0x70
mov word [rbp + 0x1a8], ax
jmp case.0x1800204dd.21
mov eax, 0x31
mov word [rbp + 0x21a], ax
jmp case.0x1800204dd.21
mov r8d, 2
mov dword [rbp + 0x1aa], 0x52
lea rdx, [0x18004deca]
lea rcx, [rbp + 0x1ac]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor edx, edx
mov word [rbp + 0x1b0], dx
jmp case.0x1800204dd.21
mov dword [rbp - 0x58], edx
jmp case.0x1800204dd.21
mov eax, 0x74
mov dword [rbp + 0x226], 0x690065
mov word [rbp + 0x22e], ax
mov dword [rbp + 0x22a], 0x680067
mov dword [rbp + 0x230], 0x640049
mov dword [rbp + 0x234], 0x5f0078
jmp case.0x1800204dd.21
movsd xmm0, qword [0x18004df2c]
movzx eax, word [0x18004df34]
movsd qword [rbp + 0x1b4], xmm0
mov word [rbp + 0x1bc], ax
mov dword [rbp + 0x1b0], 0x650044
jmp case.0x1800204dd.21
mov byte [rsp + 0x70], 0
jmp case.0x1800204dd.21
mov eax, 0x6e
mov dword [rbp + 0x294], 0x740061
mov word [rbp + 0x292], ax
mov eax, 0x78
mov word [rbp + 0x2a0], ax
mov dword [rbp + 0x298], 0x6f0069
mov dword [rbp + 0x29c], 0x2e006e
jmp case.0x1800204dd.21
mov eax, 0x69
mov dword [rbp + 0x28e], 0x690067
mov word [rbp + 0x28c], ax
jmp case.0x1800204dd.21
cmp byte [rsp + 0x40], 0
je 0x1800208c1
lea r9, [rbp + 0x6a0]
mov r8d, r14d
mov rdx, r15
mov ecx, r12d
call qword [sym.imp.SHELL32.dll_SHSetFolderPathW]
xor edx, edx
test sil, sil
je case.0x1800204dd.21
mov eax, dword [rsp + 0x50]
lea r8, [rbp + 0x490]
mov r9d, dword [rbp - 0x54]
mov rcx, qword [rbp - 0x80]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdx
lea rdx, [rbp + 0x280]
call qword [sym.imp.SHLWAPI.dll_SHSetValueW]
xor edx, edx
jmp case.0x1800204dd.21
mov dword [rbp + 0x4a2], 0x43006e
mov word [rbp + 0x4a6], dx
jmp case.0x1800204dd.21
mov dword [rsp + 0x50], edx
jmp case.0x1800204dd.21
mov word [rbp + 0x24a], dx
mov dword [rbp + 0x490], 0x5f0049
mov dword [rbp + 0x494], 0x65004e
inc ebx
lea eax, [rbx + 0x20]
cmp eax, 0x40
jb 0x1800204c0
mov ebx, dword [rsp + 0x68]
mov edx, dword [rsp + 0x58]
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.SHELL32.dll_DragAcceptFiles]
xor r8d, r8d
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x250]
call qword [sym.imp.SHLWAPI.dll_UrlCompareW]
jmp 0x180020980
cmp ebx, 0x95f
je 0x180020972
cmp ebx, 0xa0d
je case.0x1800204dd.31
jmp 0x180020997
xor edx, edx
lea ecx, [rdx + 0xe]
call fcn.18000fff0
mov byte [rsp + 0x70], al
mov ecx, 0x6c
lea r10d, [rcx - 3]
mov r9d, 0x74
lea r8d, [r9 - 1]
lea eax, [r9 - 5]
mov rdx, qword [rsp + 0x60]
add ebx, 0xae
mov dword [rsp + 0x68], ebx
cmp ebx, r13d
jb 0x1800200d0
mov rax, qword [rsp + 0x70]
mov rcx, qword [rbp + 0x8b0]
xor rcx, rsp
call fcn.1800461b0
mov rbx, qword [rsp + 0xa08]
add rsp, 0x9c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180018060
int3