Function at 0x180046840
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x620]
sub rsp, 0x720
mov rax, qword [0x180081de0]
xor rax, rsp
mov qword [rbp + 0x610], rax
mov rsi, qword [rbp + 0x680]
xor r11d, r11d
mov edi, dword [rsp + 0x70]
mov r14, rdx
mov qword [rbp - 0x58], rdx
mov ebx, r8d
lea edx, [r8 + 0x2d8]
mov qword [rbp - 0x78], r9
mov dword [rsp + 0x58], ebx
mov r10, r9
mov qword [rbp - 0x50], rsi
lea eax, [r11 + 0x6d]
mov dword [rsp + 0x50], edx
mov r12, rcx
mov dword [rbp - 0x80], edi
mov r13d, r8d
lea r9, [0x180000000]
cmp r8d, edx
jae 0x180046adf
mov ebx, 0x80000000
movabs rcx, 0x66006f006d005f
movabs r15, 0x5f00650076
mov r8d, 0x72
cmp r13d, 0x197
ja 0x180046f0d
je 0x180046f01
lea eax, [r13 - 0x69]
cmp eax, 0xfa
ja case.default.0x180046914
movzx eax, byte [r9 + rax + 0x477c4]
mov ecx, dword [r9 + rax*4 + 0x47794]
add rcx, r9
jmp rcx
mov ecx, 0x51
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x51
je 0x18004696a
sub eax, 1
je 0x180046961
cmp eax, 1
jne 0x1800469d7
mov eax, edi
mov rcx, qword [rbp + 0x610]
xor rcx, rsp
call fcn.18005fed0
mov rbx, qword [rsp + 0x770]
add rsp, 0x720
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov edi, r11d
mov dword [rbp - 0x80], r11d
jmp 0x1800469d7
cmp dword [r12 + 0x80], 4
je 0x1800469ce
nop word [rax + rax]
lea rax, [rsp + 0x60]
mov dword [rsp + 0x68], r11d
mov r9d, 0x10b
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov dword [rsp + 0x60], 1
lea rdx, [rsp + 0x68]
mov rcx, r12
call fcn.18001c510
lea ecx, [rax + rbx]
test ebx, ecx
jne 0x1800469bd
cmp eax, 0xfffffffd
jne 0x180046937
cmp dword [r12 + 0x80], 4
mov r11d, 0
jne 0x180046980
mov ecx, 0x51
lea r13d, [rcx + 0x18]
inc ecx
cmp ecx, 0x54
jb 0x180046920
mov edx, dword [rsp + 0x50]
cmp dword [r12 + 0x80], 2
jge case.0x180046914.116
mov eax, 0xffffff7d
jmp 0x180046937
cmp dword [r12 + 8], 0
je 0x180046f6b
mov rax, qword [r10]
test rax, rax
js 0x1800469f5
cmp rax, qword [r12 + 0x18]
jg 0x1800469f5
cmp dword [r12 + 0x80], 3
jl 0x180046a63
movsxd rcx, dword [r12 + 0x88]
mov rdx, qword [r12 + 0x48]
cmp rax, qword [rdx + rcx*8]
jl 0x180046a3f
cmp rax, qword [rdx + rcx*8 + 8]
jl 0x180046a63
mov dword [rsp + 0x30], SHStripMneumonicA
xor r9d, r9d
mov qword [rsp + 0x28], r12
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], r11
xor ecx, ecx
call fcn.18004b340
xor r11d, r11d
mov eax, dword [r12 + 0x84]
lea r8, [r12 + 0xa0]
mov dword [rsp + 0x40], 0x46
xor r9d, r9d
mov dword [rsp + 0x60], eax
xor edx, edx
lea rax, [rsp + 0x60]
mov qword [r12 + 0x78], 0xffffffffffffffff
mov qword [rsp + 0x38], rax
xor ecx, ecx
mov qword [rsp + 0x30], r11
mov qword [rsp + 0x28], r11
mov qword [rsp + 0x20], r11
call fcn.1800545a0
xor r11d, r11d
mov edx, dword [rsp + 0x50]
movabs rcx, 0x66006f006d005f
mov eax, 0x6d
mov r10, qword [rbp - 0x78]
lea r9, [0x180000000]
add r13d, 0x34
cmp r13d, edx
jb 0x1800468d8
mov ebx, dword [rsp + 0x58]
lea eax, [rbx - 0xf]
mov dword [rbp - 0x60], eax
cmp ebx, eax
jbe case.0x180046b22.123
lea rdx, [0x1800157e0]
mov r8d, 0x44
nop word [rax + rax]
lea eax, [rbx - 0x79]
cmp eax, 0x82
ja case.0x180046b22.136
movzx eax, byte [r9 + rax + 0x47900]
mov ecx, dword [r9 + rax*4 + 0x478c0]
add rcx, r9
jmp rcx
mov word [rbp + 0x5e0], r8w
jmp case.0x180046914.116
mov r8d, 3
mov dword [rbp + 0x5e2], 0x65
lea rdx, [0x1800788a4]
lea rcx, [rbp + 0x5e4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
lea rcx, [rbp + 0x5e0]
mov qword [rbp + 0x5e8], r15
sub rcx, 2
cmp word [rcx + 2], 0
lea rcx, [rcx + 2]
jne 0x180046b64
mov eax, dword [0x1800788ac]
mov dword [rcx], eax
movzx eax, word [0x1800788b0]
mov word [rcx + 4], ax
jmp 0x180046aad
mov eax, dword [0x180078974]
lea rdx, [0x180075678]
mov dword [rbp + 0x5f2], eax
lea rcx, [rbp + 0x5f6]
movzx eax, word [0x180078978]
mov r8d, 2
mov word [rbp + 0x5f6], ax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov r8d, 4
mov dword [rbp + 0x5f8], 0x61
lea rdx, [0x180078980]
lea rcx, [rbp + 0x5fa]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
movsd xmm0, qword [str.hread]
mov eax, dword [0x180078990]
movsd qword [rbp + 0x600], xmm0
mov dword [rbp + 0x608], eax
jmp 0x180046aad
cmp dword [r14], 0
mov r8d, r11d
mov dword [rbp + 0x190], r11d
jle case.0x180046914.116
mov r9, rsi
nop word [rax + rax]
movzx edx, byte [r9]
lea r9, [r9 + 1]
movsxd rcx, dword [rbp + rdx*4 + 0x190]
mov dword [r12 + rcx*4 + 4], r8d
lea eax, [rcx + 1]
inc r8d
mov dword [rbp + rdx*4 + 0x190], eax
cmp r8d, dword [r14]
jl 0x180046c20
jmp 0x180046ab0
xor edx, edx
lea rcx, [rbp + 0x190]
mov r8d, 0x400
call sub.VCRUNTIME140.dll_memset
movsxd rdx, dword [r14]
xor r11d, r11d
mov ecx, r11d
test rdx, rdx
jle 0x180046c83
nop
movzx eax, byte [rsi + rcx]
inc rcx
inc dword [rbp + rax*4 + 0x190]
cmp rcx, rdx
jl 0x180046c70
mov ecx, 1
nop dword [rax + rax]
mov eax, dword [rbp + rcx*4 + 0x18c]
add dword [rbp + rcx*4 + 0x190], eax
mov eax, dword [rbp + rcx*4 + 0x190]
add dword [rbp + rcx*4 + 0x194], eax
mov eax, dword [rbp + rcx*4 + 0x194]
add dword [rbp + rcx*4 + 0x198], eax
mov eax, dword [rbp + rcx*4 + 0x198]
add dword [rbp + rcx*4 + 0x19c], eax
mov eax, dword [rbp + rcx*4 + 0x19c]
add dword [rbp + rcx*4 + 0x1a0], eax
add rcx, 5
cmp rcx, 0x100
jl 0x180046c90
mov ecx, 0xff
nop dword [rax + rax]
mov eax, dword [rbp + rcx*4 + 0x18c]
mov dword [rbp + rcx*4 + 0x190], eax
dec rcx
test rcx, rcx
jg 0x180046cf0
jmp 0x180046ab0
mov eax, dword [r14]
mov r9d, r11d
mov dword [r12], eax
mov eax, dword [r14]
test eax, eax
jle 0x180046d43
mov rdx, rsi
mov r8, r10
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
inc r9d
lea r8, [r8 + 4]
mov ecx, dword [rbp + rax*4 + 0x190]
mov dword [r8 - 4], ecx
mov eax, dword [r14]
cmp r9d, eax
jl 0x180046d22
cdqe
lea rcx, [rbp + 0x194]
mov r8d, 0xff
mov dword [r10 + rax*4], r11d
nop word [rax + rax]
mov eax, dword [rcx - 4]
movsxd rdx, dword [rcx]
inc eax
cmp edx, eax
jne 0x180046d74
mov dword [r12 + rdx*4], 0xffffffff
add rcx, 4
sub r8, 1
jne 0x180046d60
mov dword [r12], 0xffffffff
jmp 0x180046ab0
mov ecx, dword [r14]
mov r15d, 1
mov eax, ecx
not eax
cmp dword [r12], eax
je 0x180046e99
lea eax, [rcx + 1]
mov edx, r11d
mov esi, r11d
test eax, eax
jle 0x180046e67
movsxd rax, esi
mov ecx, dword [r12 + rax*4]
test ecx, ecx
jns 0x180046dc7
sub edx, ecx
sub esi, ecx
jmp 0x180046e59
mov r14d, 0x8c
nop dword [rax]
mov eax, r14d
sub eax, 0x8b
je 0x180046df3
cmp eax, 1
jne 0x180046e45
test edx, edx
je 0x180046e45
mov eax, esi
mov ecx, edx
neg ecx
sub eax, edx
cdqe
mov dword [r12 + rax*4], ecx
jmp 0x180046e45
movsxd rax, esi
lea rdx, [rsp + 0x78]
mov r9d, 0xfb
mov dword [rsp + 0x68], r15d
mov r8, r10
mov dword [rsp + 0x60], esi
movsxd rcx, dword [r12 + rax*4]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov ebx, dword [r10 + rcx*4]
mov rcx, r12
sub ebx, esi
inc ebx
mov dword [rsp + 0x78], ebx
call fcn.1800409d0
mov r10, qword [rbp - 0x78]
add esi, ebx
xor r11d, r11d
mov edx, r11d
dec r14d
cmp r14d, 0x8a
ja 0x180046dd0
mov r14, qword [rbp - 0x58]
mov ecx, dword [r14]
lea eax, [rcx + 1]
cmp esi, eax
jl 0x180046db3
test edx, edx
je 0x180046e7b
mov ecx, edx
neg ecx
sub esi, edx
movsxd rax, esi
mov dword [r12 + rax*4], ecx
mov ecx, dword [r14]
mov eax, ecx
add r15d, r15d
not eax
cmp dword [r12], eax
jne 0x180046da2
mov edx, dword [rsp + 0x50]
mov ebx, 0x80000000
mov rsi, qword [rbp - 0x50]
movabs r15, 0x5f00650076
jmp case.0x180046914.116
mov ecx, 0x27
nop dword [rax]
mov eax, ecx
sub eax, 0x27
je 0x180046eed
sub eax, 1
je 0x180046ee2
sub eax, 1
je 0x180046ecc
cmp eax, 1
je case.0x180046b22.123
jmp 0x180046ef5
mov rax, qword [rbp - 0x60]
cmp byte [rax], 0xfe
je 0x180046f75
mov edi, r11d
mov dword [rbp - 0x80], r11d
jmp 0x180046ef5
lea rax, [rsp + 0x70]
mov qword [rbp - 0x60], rax
jmp 0x180046ef5
mov dword [rsp + 0x70], 0xfeedface
inc ecx
cmp ecx, 0x2b
jb 0x180046eb0
jmp case.0x180046914.116
mov word [rbp + 0x5b0], ax
jmp 0x180046ac3
mov eax, r13d
sub eax, 0x1cb
je 0x180046f57
cmp eax, 0x34
jne case.default.0x180046914
lea r8d, [rax - 0x2f]
lea rdx, [0x180078932]
lea rcx, [rbp + 0x5b0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 1
lea rdx, str.inputGestures
lea rcx, [rbp + 0x5b0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp 0x180046aad
mov qword [rbp + 0x5b2], rcx
mov word [rbp + 0x5ba], r11w
jmp case.default.0x180046914
mov eax, 0xffffff76
jmp 0x180046937
mov eax, 1
jmp 0x180046937
mov word [rbp + 0x5d4], r11w
jmp case.0x180046b22.136
movsd xmm0, qword [0x1800789a8]
lea rdx, [0x1800789c6]
movzx eax, word [0x1800789b0]
lea rcx, [rbp + 0x5d0]
mov r8d, 2
movsd qword [rbp + 0x5c6], xmm0
mov word [rbp + 0x5ce], ax
mov word [rbp + 0x5d0], r11w
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x180047031
mov qword [r12 + 0x90], r11
mov edi, r11d
mov qword [r12 + 0x98], r11
mov dword [rbp - 0x80], r11d
jmp case.0x180046b22.136
xor edx, edx
lea r9, [r12 + 0x218]
xor ecx, ecx
lea r8d, [rdx + 0x76]
call fcn.180007dc0
mov rcx, qword [rbp - 0x78]
mov r9d, 0x8a
xor r8d, r8d
mov rdx, r12
mov rax, qword [rcx]
xor ecx, ecx
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
call fcn.18005b360
test eax, eax
je 0x180047047
mov ebx, 0x7b
mov r10, qword [rbp - 0x78]
lea rdx, [0x1800157e0]
mov r8d, 0x44
jmp case.0x180046b22.136
mov edi, dword [rsp + 0x78]
mov ecx, 0xb1
xor edx, edx
mov eax, ecx
sub eax, 0xad
je 0x18004754b
sub eax, 1
je 0x180047544
sub eax, 1
je 0x180047093
sub eax, 1
je 0x18004708a
cmp eax, 1
jne 0x180047554
mov dword [rsp + 0x68], edx
mov edi, edx
mov dword [rsp + 0x78], edx
jmp 0x180047554
mov dword [rsp + 0x60], edx
jmp 0x180047554
mov eax, dword [r12 + 0x84]
lea r8, [rsp + 0x70]
xor esi, esi
mov dword [rsp + 0x70], eax
lea rdx, [rbp + 0x10]
mov dword [rsp + 0x50], esi
mov r13d, esi
lea ecx, [rsi + 0x51]
call fcn.180042280
xor r9d, r9d
mov dword [rsp + 0x20], 0x73
xor r8d, r8d
lea rcx, [rbp + 0x10]
xor edx, edx
call fcn.180012040
mov r14d, dword [rsp + 0x68]
jmp 0x1800470f0
xor esi, esi
nop dword [rax]
nop word [rax + rax]
cmp dword [r12 + 0x80], 3
jl 0x180047297
mov r9d, 0xa6
lea rdx, [rbp + 0x10]
xor r8d, r8d
lea rcx, [rbp - 0x20]
call fcn.1800047c0
test eax, eax
jle 0x180047297
movsxd rax, dword [r12 + 0x88]
lea rcx, [rax + rax*4]
mov rax, qword [r12 + 0x68]
cmp qword [rax + rcx*8 + 0x20], 0
lea r8, [rax + rcx*8]
je 0x18004727f
mov edx, 0xc3
lea rcx, [rbp - 0x20]
call fcn.18005d4b0
mov rbx, rax
test eax, eax
jns 0x18004716f
lea rdx, [r12 + 0xa0]
mov r9d, 0xa6
xor r8d, r8d
xor ecx, ecx
call fcn.1800047c0
mov ebx, esi
jmp 0x1800471a8
cmp dword [rsp + 0x60], 0
je 0x180047195
test r13d, r13d
jne 0x180047195
lea rdx, [r12 + 0xa0]
mov r9d, 0xa6
xor r8d, r8d
xor ecx, ecx
call fcn.1800047c0
jmp 0x1800471a8
test r14d, r14d
je 0x1800471a8
add eax, r14d
sar eax, 2
add dword [rsp + 0x78], eax
mov edi, dword [rsp + 0x78]
mov r13, qword [rbp - 8]
cmp r13, 0xffffffffffffffff
je 0x18004726e
mov r14d, 0x104
nop dword [rax]
mov eax, r14d
sub eax, 0x103
je 0x1800474f0
cmp eax, 1
jne 0x180047259
movsxd rdx, dword [r12 + 0x88]
mov r15, qword [r12 + 0x60]
lea eax, [rdx + rdx]
movsxd rcx, eax
mov rax, r13
sub rax, qword [r15 + rcx*8]
cmovns rsi, rax
xor eax, eax
mov r8d, eax
mov r9d, eax
mov r10d, eax
cmp rdx, 2
jl 0x180047236
lea rcx, [rdx - 2]
shr rcx, 1
lea rax, [r15 + 0x18]
inc rcx
lea r10, [rcx + rcx]
nop dword [rax + rax]
add r8, qword [rax - 0x10]
add r9, qword [rax]
lea rax, [rax + 0x20]
sub rcx, 1
jne 0x180047220
cmp r10, rdx
jl 0x180047240
cmp r10, rdx
jge 0x180047248
nop dword [rax + rax]
add r10, r10
add rsi, qword [r15 + r10*8 + 8]
movsxd rax, edi
sub r8, rax
add r8, r9
add r8, rsi
mov qword [r12 + 0x78], r8
dec r14d
mov esi, 0
cmp r14d, 0x102
ja 0x1800471c0
mov r13d, dword [rsp + 0x50]
mov r14d, ebx
mov dword [rsp + 0x68], ebx
jmp 0x1800470e0
lea rdx, [r12 + 0xa0]
mov r9d, 0xa6
xor r8d, r8d
xor ecx, ecx
call fcn.1800047c0
test r14d, r14d
jne 0x180047535
mov r9d, 0x11f
mov qword [rsp + 0x70], 0xffffffffffffffff
mov r8, r12
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x40]
call fcn.1800205e0
mov r15, rax
test rax, rax
js 0x180047509
cmp dword [r12 + 0x80], 3
jl 0x180047374
mov qword [rsp + 0x40], rsi
lea rcx, [rbp - 0x40]
mov qword [rsp + 0x38], rsi
xor r9d, r9d
mov qword [rsp + 0x30], rsi
xor r8d, r8d
mov qword [rsp + 0x28], rsi
xor edx, edx
mov dword [rsp + 0x20], 0xda
call fcn.18004ffb0
cmp dword [r12 + 0x84], eax
je 0x18004735c
xor r9d, r9d
lea rcx, [rbp - 0x40]
xor edx, edx
mov r8d, 0xcf
call fcn.180051420
test eax, eax
je 0x18004735c
mov dword [rsp + 0x30], SHStripMneumonicA
xor r9d, r9d
mov qword [rsp + 0x28], r12
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rsi
xor ecx, ecx
call fcn.18004b340
xor r8d, r8d
lea rdx, [rbp + 0x10]
mov ecx, 0xed
call fcn.180044da0
cmp dword [r12 + 0x80], 3
jl 0x180047374
lea r14, [r12 + 0xa0]
jmp 0x180047479
mov qword [rsp + 0x40], rsi
lea rcx, [rbp - 0x40]
mov qword [rsp + 0x38], rsi
xor r9d, r9d
mov qword [rsp + 0x30], rsi
xor r8d, r8d
mov qword [rsp + 0x28], rsi
xor edx, edx
mov dword [rsp + 0x20], 0xda
call fcn.18004ffb0
mov edx, dword [r12 + 0x40]
mov rbx, rax
mov ecx, esi
test edx, edx
jle 0x1800473c5
mov rax, qword [r12 + 0x58]
cmp dword [rax], ebx
je 0x1800473c5
inc ecx
inc rsi
add rax, 4
cmp ecx, edx
jl 0x1800473b4
mov dword [rsp + 0x58], 0x7d
cmp ecx, edx
je 0x1800470e0
mov dword [rsp + 0x40], 0x46
lea rax, [rsp + 0x70]
mov qword [rsp + 0x38], rax
lea r14, [r12 + 0xa0]
xor r13d, r13d
mov dword [r12 + 0x88], ecx
mov qword [rsp + 0x30], r13
xor r9d, r9d
mov qword [rsp + 0x28], r13
mov r8, r14
xor edx, edx
mov qword [rsp + 0x20], r13
xor ecx, ecx
mov dword [r12 + 0x84], ebx
mov dword [rsp + 0x70], ebx
call fcn.1800545a0
mov dword [rsp + 0x40], 0x46
lea rax, [rsp + 0x70]
mov qword [rsp + 0x38], rax
lea r8, [rbp + 0x10]
mov qword [rsp + 0x30], r13
xor r9d, r9d
mov qword [rsp + 0x28], r13
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], r13
mov dword [rsp + 0x70], ebx
call fcn.1800545a0
mov rax, qword [r12 + 0x50]
mov dword [r12 + 0x80], 3
cmp r15, qword [rax + rsi*8]
setle r13b
xor esi, esi
mov dword [rsp + 0x50], r13d
mov qword [rsp + 0x40], rsi
lea rcx, [rbp - 0x40]
mov qword [rsp + 0x38], r14
xor r9d, r9d
mov dword [rsp + 0x30], 0x5c
xor r8d, r8d
mov qword [rsp + 0x28], rsi
xor edx, edx
mov qword [rsp + 0x20], rsi
call fcn.18004a100
mov qword [rsp + 0x40], rsi
lea rax, [rbp + 0x10]
mov qword [rsp + 0x38], rax
lea rcx, [rbp - 0x40]
mov dword [rsp + 0x30], 0x5c
xor r9d, r9d
mov qword [rsp + 0x28], rsi
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rsi
call fcn.18004a100
mov rax, qword [rbp - 0x40]
mov r14d, dword [rsp + 0x68]
movzx eax, byte [rax + 5]
and eax, 4
mov dword [rsp + 0x60], eax
jmp 0x1800470f0
mov ebx, dword [rsp + 0x58]
xor edx, edx
cmp qword [r12 + 0x78], rdx
jge 0x180047544
mov qword [r12 + 0x78], rsi
mov ecx, 0xae
jmp 0x180047554
xor edx, edx
mov dword [rsp + 0x70], 0xffffffff
lea r9, [rsp + 0x70]
mov r8, r12
lea ecx, [rdx + 0x6d]
call fcn.180041e90
mov ebx, dword [rsp + 0x58]
xor edx, edx
mov qword [r12 + 0x78], rax
mov ecx, 0xae
jmp 0x180047554
mov ebx, dword [rsp + 0x58]
xor edx, edx
mov qword [r12 + 0x78], 0xffffffffffffffff
mov ecx, 0xae
jmp 0x180047554
mov ebx, 0x7d
mov dword [rsp + 0x58], ebx
dec ecx
cmp ecx, 0xac
ja 0x180047052
mov edi, dword [rbp - 0x80]
lea rdx, [rbp + 0x10]
xor r8d, r8d
mov ecx, 0xed
call fcn.180044da0
mov r14, qword [rbp - 0x58]
jmp 0x180047031
movzx eax, word [0x1800789d0]
lea rdx, [rsp + 0x50]
mov dword [rbp + 0x5a3], 0x5f657a
mov r8d, 0xad
mov word [rbp + 0x5a6], ax
mov rcx, r12
movzx eax, byte [0x1800789d2]
mov byte [rbp + 0x5a8], al
movzx eax, word [rsi]
mov word [rsp + 0x50], ax
mov qword [rbp - 0x48], 0xffffffff80000001
call fcn.1800425a0
jmp 0x180047031
mov dword [rbp + 0x5d4], 0x610074
mov word [rbp + 0x5d8], r11w
mov byte [rbp + 0x590], 0
jmp case.0x180046b22.136
mov r9d, dword [rbp - 0x6c]
lea rax, [rbp - 0x70]
mov rcx, qword [rbp - 0x48]
lea r8, [rbp + 0x5b0]
mov qword [rsp + 0x30], rax
lea rdx, [rbp + 0x5e0]
lea rax, [rbp - 0x68]
mov qword [rsp + 0x28], r11
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x70], r11d
call qword [sym.imp.SHLWAPI.dll_SHRegGetValueW]
lea rcx, [rbp + 0x590]
call qword [sym.imp.SHLWAPI.dll_PathUnmakeSystemFolderA]
mov r10, qword [rbp - 0x78]
lea rcx, [r12 + 0xa]
cmp rcx, r10
je 0x180047035
cmp qword [r10 + 0x18], 0x10
mov rdx, r10
jb 0x18004764d
mov rdx, qword [r10]
mov r8, qword [r10 + 0x10]
call fcn.180027020
jmp 0x180047031
mov eax, dword [str.ev_ce_]
mov dword [rbp + 0x598], eax
movzx eax, word [0x1800789d8]
mov word [rbp + 0x59c], ax
mov eax, dword [str.ID_Si]
mov dword [rbp + 0x59e], eax
movzx eax, word [0x1800789e0]
mov word [rbp + 0x5a2], ax
jmp case.0x180046b22.136
lea rcx, [rbp + 0x590]
dec rcx
nop
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x1800476a0
movzx eax, word [0x1800789e4]
mov word [rcx], ax
movzx eax, byte [0x1800789e6]
mov byte [rcx + 2], al
mov eax, dword [str._Get_]
mov dword [rbp + 0x592], eax
movzx eax, word [0x1800789ec]
mov word [rbp + 0x596], ax
jmp case.0x180046b22.136
mov eax, dword [r14]
mov ecx, r11d
inc eax
test eax, eax
jle case.0x180046b22.136
mov rdx, r10
nop dword [rax]
movsxd rax, dword [rdx]
lea rdx, [rdx + 4]
mov dword [r12 + rax*4], ecx
inc ecx
mov eax, dword [r14]
inc eax
cmp ecx, eax
jl 0x1800476f0
lea rdx, [0x1800157e0]
jmp case.0x180046b22.136
xor r8d, r8d
mov qword [r12 + 0x78], 0xffffffffffffffff
lea rdx, [rbp + 0x10]
mov ecx, 0xed
call fcn.180044da0
xor edx, edx
mov dword [rsp + 0x30], SHStripMneumonicA
mov qword [rsp + 0x28], r12
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rdx
xor ecx, ecx
call fcn.18004b340
jmp 0x180047031
mov dword [rbp - 0x6c], 0x10
mov qword [r12], rdx
mov dword [rbp - 0x68], r11d
jmp case.0x180046b22.136
mov word [rbp + 0x597], r8w
dec ebx
mov dword [rsp + 0x58], ebx
cmp ebx, dword [rbp - 0x60]
jbe case.0x180046b22.123
mov rsi, qword [rbp - 0x50]
lea r9, [0x180000000]
xor r11d, r11d
jmp 0x180046b00
mov eax, 0xffffff77
jmp 0x180046937