Function at 0x180065c20
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x860]
sub rsp, 0x960
mov rax, qword [0x180080a28]
xor rax, rsp
mov qword [rbp + 0x850], rax
mov r11, qword [rbp + 0x8c0]
mov eax, edx
mov r14, qword [rbp + 0x8c8]
mov r10, r9
mov ebx, dword [rsp + 0x74]
mov r13, r8
mov dword [rsp + 0x68], edx
mov esi, eax
lea r15d, [rax - 0xf]
mov qword [rbp - 0x58], r9
mov qword [rbp - 0x40], rcx
mov rdx, rcx
mov qword [rbp - 0x60], r11
mov qword [rsp + 0x78], r14
mov dword [rsp + 0x70], r15d
cmp eax, r15d
jbe 0x18006612d
lea edi, [rax - 0x46]
lea r12, str.b___NULL
lea r9, str.a___NULL
lea r8, str.c___NULL
cmp edi, 0x56
ja case.0x180065cd7.2
lea rcx, [0x180000000]
movzx eax, byte [rcx + rdi + 0x66f0c]
mov ecx, dword [rcx + rax*4 + 0x66ed0]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
test r10, r10
jne 0x180065d2d
xor ecx, ecx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x58], rcx
lea rdx, [0x180077149]
mov qword [rsp + 0x50], rcx
mov r9d, SHSetInstanceExplorer
mov qword [rsp + 0x48], rcx
xor r8d, r8d
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov dword [rsp + 0x60], ecx
call fcn.18002b8a0
lea r8, str.c___NULL
test r13, r13
jne case.0x180065cd7.2
xor ecx, ecx
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], r8
mov qword [rsp + 0x38], rcx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rcx
lea rdx, [0x180077149]
mov qword [rsp + 0x28], rax
mov r9d, SHSetInstanceExplorer
xor r8d, r8d
mov qword [rsp + 0x20], rcx
mov dword [rsp + 0x60], ecx
call fcn.18002b8a0
jmp case.0x180065cd7.2
mov eax, dword [rdx]
cmp eax, 3
jl 0x180065d92
test al, 1
jne case.0x180065cd7.2
mov eax, reloc.SHELL32.dll_ILFindLastID
jmp 0x180066024
movups xmm0, xmmword [str.PXXZ9:_]
movaps xmmword [rbp + 0x430], xmm0
jmp case.0x180065cd7.2
cmp byte [0x180083d61], 0
je case.0x180065cd7.2
call qword [0x180083d58]
mov byte [0x180083d61], 0
jmp case.0x180065cd7.2
test r11, r11
jne case.0x180065cd7.2
xor ecx, ecx
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], r9
jmp 0x180065d4c
xor r9d, r9d
lea r8, [0x180080b90]
nop dword [rax]
cmp qword [r8], 0
jne 0x180065eb5
mov edx, 0xb6
nop
mov eax, edx
sub eax, 0xb5
je case.0x18006691b.0
cmp eax, 1
jne 0x180065ea7
movups xmm0, xmmword [r11]
mov ebx, r9d
movups xmmword [r8], xmm0
movups xmm1, xmmword [r11 + 0x10]
movups xmmword [r8 + 0x10], xmm1
movups xmm0, xmmword [r11 + 0x20]
movups xmmword [r8 + 0x20], xmm0
movups xmm1, xmmword [r11 + 0x30]
movups xmmword [r8 + 0x30], xmm1
movups xmm0, xmmword [r11 + 0x40]
movups xmmword [r8 + 0x40], xmm0
movups xmm1, xmmword [r11 + 0x50]
movups xmmword [r8 + 0x50], xmm1
movups xmm0, xmmword [r11 + 0x60]
movups xmmword [r8 + 0x60], xmm0
movups xmm1, xmmword [r11 + 0x70]
movups xmmword [r8 + 0x70], xmm1
movups xmm0, xmmword [r11 + 0x80]
movups xmmword [r8 + 0x80], xmm0
movups xmm1, xmmword [r11 + 0x90]
movups xmmword [r8 + 0x90], xmm1
movups xmm0, xmmword [r11 + 0xa0]
movups xmmword [r8 + 0xa0], xmm0
dec edx
cmp edx, 0xb4
ja 0x180065e10
inc r9d
add r8, 0xb0
cmp r9d, 0x20
jl 0x180065e00
mov ebx, 0xffffffff
mov dword [rsp + 0x74], ebx
jmp case.0x180065cd7.2
cmp qword [0x180083190], 0
jne case.0x180065cd7.2
xor ecx, ecx
lea rax, str.requestCodeNotFound
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rax
jmp 0x180065d4c
test r14, r14
jne 0x180065f5b
xor ecx, ecx
lea rax, str.__clang_ast
mov qword [rsp + 0x58], rcx
lea rdx, [0x180077149]
mov qword [rsp + 0x50], rcx
mov r9d, SHSetInstanceExplorer
mov qword [rsp + 0x48], rcx
xor r8d, r8d
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov dword [rsp + 0x60], ecx
call fcn.18002b8a0
mov eax, dword [r13]
add eax, 0xffffff80
cmp eax, 0x180
jbe case.0x180065cd7.2
mov ecx, 0xc7
mov eax, ecx
sub eax, 0xc6
je case.0x18006691b.0
cmp eax, 1
jne 0x180065f8d
mov ebx, 3
mov dword [rsp + 0x74], ebx
dec ecx
cmp ecx, 0xc5
ja 0x180065f72
jmp case.0x180065cd7.2
test r11, r11
jne 0x180065ff4
xor ecx, ecx
lea rax, str.ObjCMethodExpr
mov qword [rsp + 0x58], rcx
lea rdx, [0x180077149]
mov qword [rsp + 0x50], rcx
mov r9d, SHSetInstanceExplorer
mov qword [rsp + 0x48], rcx
xor r8d, r8d
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov dword [rsp + 0x60], ecx
call fcn.18002b8a0
mov r11, qword [rbp - 0x60]
xor edx, edx
lea r8, [0x180080b98]
nop dword [rax]
cmp qword [r8 - 8], 0
je 0x18006605f
movzx eax, byte [r11 + 8]
cmp byte [r8], al
jne 0x18006605f
mov ecx, 0x60
mov eax, ecx
sub eax, 0x60
je 0x18006604e
cmp eax, 0x29
jne 0x180066054
mov eax, ebx
mov rcx, qword [rbp + 0x850]
xor rcx, rsp
call fcn.180072740
mov rbx, qword [rsp + 0x9a8]
add rsp, 0x960
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ebx, edx
mov dword [rsp + 0x74], edx
add ecx, 0x29
cmp ecx, 0xb2
jb 0x180066016
inc edx
add r8, 0xb0
cmp edx, 0x20
jl 0x180066000
jmp case.0x180065cd7.2
test rdx, rdx
jne case.0x180065cd7.2
xor ecx, ecx
lea rax, str.d___NULL
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rax
jmp 0x180065d4c
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, qword [rbp - 0x60]
lea rdx, str.HRESULT_ID3DXBaseMesh::DrawSubset_0x_I32x___0x_I32x
mov rcx, rax
mov r8, qword [r8]
call fcn.180071b60
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
jmp case.0x180065cd7.2
mov r8, rdx
mov dword [rsp + 0x20], 0x32
mov rdx, r11
mov r9, r13
mov rcx, r10
call fcn.18004a5b0
xor r9d, r9d
mov dword [rsp + 0x60], eax
lea r8, [rsp + 0x60]
xor ecx, ecx
lea edx, [r9 + 0x4f]
call fcn.18004f620
mov rbx, rax
mov dword [rsp + 0x74], eax
nop dword [rax + rax]
mov r10, qword [rbp - 0x58]
dec esi
mov rdx, qword [rbp - 0x40]
dec edi
mov r11, qword [rbp - 0x60]
cmp esi, r15d
ja 0x180065ca0
mov eax, dword [rsp + 0x68]
mov edi, dword [rbp - 0x74]
lea r12d, [rax + 0xf]
mov esi, 0x53
mov r15d, eax
lea r8d, [rsi + 0x19]
lea r9d, [rsi - 0x20]
cmp eax, r12d
jae 0x1800666bd
lea r14d, [rax - 0x69]
jmp 0x180066164
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov r11, qword [rbp - 0x60]
cmp r14d, 0x15
ja case.0x180066180.10
lea r8, [0x180000000]
mov ecx, dword [r8 + r14*4 + 0x66f64]
add rcx, r8
jmp rcx
mov r8, qword [rbp - 0x70]
mov edx, 1
mov rcx, qword [rbp - 0x50]
call qword [0x180083250]
mov edi, eax
test eax, eax
je case.0x180066180.10
mov r14, qword [rsp + 0x78]
mov r15d, 0x73
lea r12d, [r15 + 4]
lea r13d, [r15 - 0xf]
mov r9, qword [r14 + 0x40]
xor eax, eax
mov r8, qword [r14 + 0x18]
mov esi, 0x66
mov rdx, qword [r14 + 8]
mov rcx, qword [r14 + 0x10]
mov qword [rsp + 0x40], rax
mov rax, qword [r14 + 0x28]
mov qword [rsp + 0x38], rax
mov rax, qword [r14 + 0x20]
mov qword [rsp + 0x30], rax
mov rax, qword [r14 + 0x30]
mov qword [rsp + 0x28], rax
mov rax, qword [r14 + 0x38]
mov qword [rsp + 0x20], rax
call fcn.18003d230
mov eax, dword [rsp + 0x68]
mov r8d, 0x6c
dec esi
lea r9d, [r8 - 0x39]
jmp 0x1800666cd
mov eax, dword [0x18007ad7c]
movsd xmm0, qword [str.BCDE]
mov dword [rbp + 0x452], eax
movzx eax, word [0x18007ad80]
mov word [rbp + 0x456], ax
movsd qword [rbp + 0x44a], xmm0
jmp case.0x180066180.10
mov eax, dword [r10]
lea r9, [rsp + 0x60]
xor edi, edi
mov dword [rsp + 0x60], eax
mov qword [rsp + 0x30], rdi
xor r8d, r8d
mov qword [rsp + 0x28], rdi
xor edx, edx
mov ecx, 0x119
mov qword [rsp + 0x20], rdi
call fcn.18002d490
test eax, eax
je 0x18006629a
mov ecx, 0x109
cmp ecx, 0x109
je 0x180066286
cmp ecx, 0x53d9
je case.0x18006691b.0
jmp 0x18006628c
mov ebx, eax
mov dword [rsp + 0x74], eax
add ecx, 0x52d0
cmp ecx, 0xa5a0
jbe 0x180066270
lea rax, [rbp - 0x38]
mov qword [rsp + 0x28], rdi
lea r9, [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x70]
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x50]
call fcn.18003d770
mov edi, eax
test eax, eax
je case.0x180066180.10
mov ecx, ILAppendID
nop dword [rax]
mov eax, ecx
sub eax, 0x95
je case.0x18006691b.0
cmp eax, 1
jne 0x1800662e8
mov ebx, edi
mov dword [rsp + 0x74], ebx
dec ecx
cmp ecx, 0x94
ja 0x1800662d0
jmp case.0x180066180.10
mov r8, qword [rbp - 0x68]
mov edx, 1
mov rcx, qword [rbp - 0x50]
call qword [0x180083250]
mov edi, eax
test eax, eax
jne 0x18006619f
mov rcx, qword [rbp - 0x70]
mov rdx, qword [rbp - 0x68]
mov r8, rcx
call qword [0x180083290]
mov edi, eax
test eax, eax
jne 0x18006619f
jmp case.0x180066180.10
mov eax, dword [0x18007ad84]
mov dword [rbp + 0x43e], eax
movzx eax, word [0x18007ad88]
mov word [rbp + 0x442], ax
jmp case.0x180066180.10
mov dword [rbp + 0x180], 0x415357
mov word [rbp + 0x183], si
jmp case.0x180066180.10
mov edx, dword [rdx]
mov rcx, qword [rbp - 0x38]
call qword [0x1800831c8]
mov edi, eax
test eax, eax
jne 0x18006619f
nop
mov esi, 0x108
mov eax, esi
sub eax, 0x108
je 0x1800663c1
sub eax, 1
je 0x1800663ac
cmp eax, 1
jne 0x180066408
mov r8, qword [rbp - 0x68]
mov rdx, qword [rbp - 0x38]
mov rcx, qword [rbp - 0x70]
call qword [0x180083288]
jmp 0x1800663fe
mov r8, qword [rbp - 0x70]
mov edx, 1
mov rcx, qword [rbp - 0x50]
call qword [0x180083250]
jmp 0x1800663fe
mov rax, qword [rbp - 0x58]
lea r8, [rsp + 0x60]
mov r9, qword [rbp - 0x60]
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x47
mov eax, dword [rax]
mov dword [rsp + 0x60], eax
mov eax, dword [r13]
cdq
sub eax, edx
mov rdx, qword [rbp - 0x50]
sar eax, 1
mov dword [rbp - 0x80], eax
call fcn.180043670
mov edi, eax
test eax, eax
jne 0x18006619f
inc esi
cmp esi, 0x10b
jb 0x180066385
mov rcx, qword [rbp - 0x68]
mov edx, 1
call qword [0x1800831f0]
test eax, eax
jne 0x180066380
lea esi, [rax + 0x53]
jmp case.0x180066180.10
mov rsi, qword [rsp + 0x78]
mov qword [rsp + 0x40], 0
lea rax, [rsi + 0x28]
mov qword [rsp + 0x38], rax
lea r10, [rsi + 0x20]
mov qword [rsp + 0x30], r10
lea r11, [rsi + 0x30]
mov qword [rsp + 0x28], r11
lea rdi, [rsi + 0x38]
lea r9, [rsi + 0x40]
mov qword [rsp + 0x20], rdi
lea r8, [rsi + 0x18]
lea rdx, [rsi + 0x10]
lea rcx, [rsi + 8]
call fcn.18003d770
mov edi, eax
test eax, eax
jne 0x1800668b4
lea esi, [rax + 0x53]
jmp case.0x180066180.10
mov rsi, qword [rsp + 0x78]
mov edx, dword [rdx]
mov rcx, qword [rsi + 8]
call qword [0x1800831c8]
mov edi, eax
test eax, eax
jne 0x1800668b4
mov r8, qword [rsi + 0x10]
mov rdx, qword [rbp - 0x70]
mov rcx, qword [rsi + 8]
call qword [0x1800832a8]
mov edi, eax
test eax, eax
jne 0x1800668b4
lea esi, [rax + 0x53]
jmp case.0x180066180.10
mov rsi, qword [rsp + 0x78]
xor r8d, r8d
mov rdx, qword [rbp - 0x68]
mov r9, qword [rsi + 0x40]
mov rcx, qword [rsi + 0x10]
call qword [0x180083270]
mov edi, eax
test eax, eax
jne 0x1800668b4
lea esi, [rax + 0x53]
jmp case.0x180066180.10
mov r8, qword [rbp - 0x68]
mov edx, 1
mov rcx, qword [rbp - 0x48]
call qword [0x180083250]
mov edi, eax
test eax, eax
jne 0x18006619f
mov rax, qword [rsp + 0x78]
xor r8d, r8d
mov rdx, qword [rbp - 0x70]
mov r9, qword [rax + 0x38]
mov rcx, qword [rax + 0x10]
call qword [0x180083270]
mov edi, eax
test eax, eax
jne 0x18006619f
jmp case.0x180066180.10
lea rcx, [rbp + 0x430]
sub rcx, 2
nop word [rax + rax]
cmp word [rcx + 2], 0
lea rcx, [rcx + 2]
jne 0x180066550
movsd xmm0, qword [str.___A]
movzx eax, word [0x18007ad98]
movsd qword [rcx], xmm0
mov word [rcx + 8], ax
jmp case.0x180066180.10
mov esi, 7
mov eax, esi
sub eax, 7
je 0x1800665a5
cmp eax, 1
jne 0x180066603
mov r8, qword [rbp - 0x68]
mov rdx, qword [rbp - 0x38]
mov rcx, qword [rbp - 0x70]
call qword [0x180083288]
jmp 0x1800665f9
mov eax, dword [r10]
lea r8, [rsp + 0x60]
mov dword [rsp + 0x60], eax
lea rcx, [rbp - 0x80]
mov eax, dword [r13]
mov r9, r11
cdq
mov qword [rsp + 0x28], 0
sub eax, edx
mov dword [rsp + 0x20], 0x47
mov rdx, qword [rbp - 0x48]
sar eax, 1
mov dword [rbp - 0x80], eax
call fcn.180043670
mov edi, eax
test eax, eax
jne 0x18006619f
mov r8, qword [rbp - 0x70]
lea edx, [rax + 1]
mov rcx, qword [rbp - 0x48]
call qword [0x180083250]
mov edi, eax
test eax, eax
jne 0x18006619f
mov r10, qword [rbp - 0x58]
inc esi
mov r11, qword [rbp - 0x60]
cmp esi, 9
jb 0x180066585
mov rcx, qword [rbp - 0x68]
mov edx, 1
call qword [0x1800831f0]
mov r10, qword [rbp - 0x58]
mov r11, qword [rbp - 0x60]
test eax, eax
jne case.0x180066180.2
mov esi, 0x53
jmp case.0x180066180.10
mov rax, qword [rsp + 0x78]
mov rdx, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x50]
mov r8, qword [rax + 0x18]
call qword [0x180083258]
mov edi, eax
test eax, eax
jne 0x18006619f
jmp case.0x180066180.10
mov r8d, 2
lea rdx, [0x18007ad9c]
lea rcx, [rbp + 0x430]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 1
lea rdx, [0x18007ada4]
lea rcx, [rbp + 0x430]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r10, qword [rbp - 0x58]
inc r15d
mov rdx, qword [rbp - 0x40]
inc r14d
cmp r15d, r12d
jb 0x180066160
mov r14, qword [rsp + 0x78]
mov r8d, 0x6c
mov eax, dword [rsp + 0x68]
lea r9d, [r8 - 0x39]
mov r15d, 0x73
mov esi, eax
lea r12d, [r15 + 4]
lea r13d, [r15 - 0xf]
add eax, 0xffffffef
cmp esi, eax
jbe 0x1800668bc
lea eax, [rsi - 0x63]
cmp eax, 0x17
ja case.0x1800666f5.106
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0x66fbc]
add rcx, rdx
jmp rcx
mov r8d, 2
lea rdx, [0x1800780fc]
lea rcx, [rbp + 0x226]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp case.0x1800666f5.106
movzx eax, word [0x18007ada8]
mov word [rbp + 0x184], ax
movzx eax, byte [0x18007adaa]
mov byte [rbp + 0x186], al
jmp case.0x1800666f5.106
mov word [rbp + 0x1a2], r8w
jmp case.0x1800666f5.106
mov word [rbp + 0x198], r9w
mov dword [rbp + 0x19a], 0x2e0032
jmp case.0x1800666f5.106
mov dword [rbp + 0x19e], 0x6c0064
jmp case.0x1800666f5.106
mov eax, dword [0x18007adac]
lea rdx, [0x1800780fc]
mov dword [rbp + 0x220], eax
lea rcx, [rbp + 0x220]
movzx eax, word [0x18007adb0]
mov r8d, 1
mov word [rbp + 0x224], ax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp case.0x1800666f5.106
xor eax, eax
mov word [rbp + 0x1a4], ax
jmp case.0x1800666f5.106
mov r8d, 3
lea rdx, [0x18007adb8]
lea rcx, [rbp + 0x220]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov dword [rbp + 0x22e], 0x62
jmp case.0x1800666f5.106
mov ebx, edi
mov dword [rsp + 0x74], ebx
jmp case.0x1800666f5.106
mov r8, qword [r14 + 0x30]
mov rdx, qword [rbp - 0x50]
mov rcx, qword [rbp - 0x48]
call qword [0x1800832a8]
mov edi, eax
test eax, eax
jne case.0x1800666f5.102
mov rdx, qword [r14 + 0x20]
mov rcx, qword [rbp - 0x50]
call qword [0x1800831c0]
mov edi, eax
test eax, eax
jne case.0x1800666f5.102
jmp case.0x1800666f5.106
mov r8d, 5
lea rdx, str.rtup
lea rcx, [rbp + 0x186]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov word [rbp + 0x190], r12w
jmp case.0x1800666f5.106
xor eax, eax
mov edi, eax
jmp 0x18006684c
xor eax, eax
mov r9, qword [rbp - 0x50]
mov esi, 0x65
mov r8, qword [rbp - 0x70]
mov rdx, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x38]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp - 0x48]
mov qword [rsp + 0x20], rax
call fcn.18003d230
jmp case.0x1800666f5.106
mov word [rbp + 0x192], r15w
mov dword [rbp + 0x194], 0x5f0032
jmp case.0x1800666f5.106
mov rdx, qword [r14 + 0x28]
mov rcx, qword [rbp - 0x48]
call qword [0x1800831c0]
mov edi, eax
test eax, eax
jne case.0x1800666f5.102
mov dword [r14], 1
jmp case.0x1800666f5.106
mov r14, rsi
jmp 0x1800661a4
mov edi, dword [rsp + 0x68]
cmp edi, dword [rsp + 0x70]
jbe case.0x18006691b.0
mov r12d, dword [rbp - 0x78]
add edi, 0xffffff94
movzx esi, byte [rsp + 0x6c]
movabs rdx, 0x49002e0067
mov r14d, dword [rbp - 0x78]
mov r8d, 0x75
mov r15d, dword [rbp - 0x78]
mov r13d, dword [rbp - 0x78]
mov eax, dword [rsp + 0x68]
mov ecx, dword [rsp + 0x70]
mov dword [rbp - 0x80], edi
nop dword [rax]
cmp edi, 0xe
ja case.default.0x18006691b
lea r9, [0x180000000]
mov ecx, dword [r9 + rdi*4 + 0x6701c]
add rcx, r9
jmp rcx
mov qword [rbp + 0x232], rdx
mov dword [rbp + 0x238], 0x6e
jmp case.0x18006691b.6
mov dword [rbp + 0x230], 0x75
jmp case.0x18006691b.6
xor eax, eax
mov dword [rsp + 0x30], 0xea
mov qword [rsp + 0x28], rax
lea r8, [rbp + 0x180]
xor r9d, r9d
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x190]
xor ecx, ecx
call fcn.180007c90
mov qword [rbp - 0x28], rax
jmp 0x180066e9e
mov rcx, qword [rbp - 0x60]
xor r9d, r9d
xor edx, edx
mov r8d, 0x93
call fcn.180064410
test al, al
jne 0x180066cf1
mov edi, 0x3c
nop dword [rax + rax]
cmp edi, 0x1b684
ja 0x180066b4b
je 0x180066b3d
cmp edi, 0xc774
ja 0x180066aa5
je 0x180066a96
cmp edi, 0x3c
je 0x180066a79
cmp edi, 0x2814
je 0x180066a6a
cmp edi, 0x4fec
je 0x180066a47
cmp edi, 0x77c4
je 0x180066a2e
cmp edi, 0x9f9c
jne 0x180066cdc
mov r8d, 4
lea rdx, [0x18007ae38]
lea rcx, [rbp + 0x200]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov r8d, 4
lea rdx, [0x18007ae40]
lea rcx, [rbp + 0x206]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x180066cdc
mov dword [rbp + 0x1fc], 0x5f
mov dword [rbp + 0x1fe], 0x70
jmp 0x180066cdc
lea rcx, [rbp + 0x1e8]
sub rcx, 2
cmp word [rcx + 2], 0
lea rcx, [rcx + 2]
jne 0x180066a52
mov eax, dword [0x1800798e4]
mov dword [rcx], eax
jmp 0x180066cdc
mov dword [rbp + 0x1f8], 0x76
jmp 0x180066cdc
movups xmm0, xmmword [str.Z11nati]
mov dword [rbp + 0x1e8], 0x5f
movups xmmword [rbp + 0x1ea], xmm0
jmp 0x180066cdc
mov dword [rbp + 0x20c], 0x5f
jmp 0x180066cdc
cmp edi, 0xef4c
je 0x180066b23
cmp edi, 0x11724
je 0x180066b04
cmp edi, 0x13efc
je 0x180066aee
cmp edi, 0x166d4
je 0x180066ae0
cmp edi, 0x18eac
jne 0x180066cdc
mov dword [rbp + 0x1b0], 0x6f004c
jmp 0x180066cdc
xor eax, eax
mov word [rbp + 0x1b0], ax
jmp 0x180066cdc
movabs rax, 0x740073006f0048
mov qword [rbp + 0x1a8], rax
jmp 0x180066cdc
mov r8d, 1
lea rdx, [0x1800775a0]
lea rcx, [rbp + 0x1e8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp 0x180066cdc
mov eax, 0x64
mov dword [rbp + 0x20e], eax
mov dword [rbp + 0x210], 0x53
jmp 0x180066cdc
xor eax, eax
mov word [rbp + 0x1b4], ax
jmp 0x180066cdc
cmp edi, 0x2a594
ja 0x180066c4a
je 0x180066c3c
cmp edi, 0x1de5c
je 0x180066c14
cmp edi, 0x20634
je 0x180066bf5
cmp edi, 0x22e0c
je 0x180066bd6
cmp edi, 0x255e4
je 0x180066bb0
cmp edi, 0x27dbc
jne 0x180066cdc
mov eax, dword [0x18007af00]
mov dword [rbp + 0x1d4], eax
movzx eax, word [0x18007af04]
mov word [rbp + 0x1d8], ax
jmp 0x180066cdc
xor eax, eax
lea rdx, [0x18007afde]
lea rcx, [rbp + 0x1a8]
mov word [rbp + 0x1ca], ax
lea r8d, [rax + 5]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp 0x180066cdc
mov eax, dword [0x18007ae06]
mov dword [rbp + 0x1c4], eax
movzx eax, word [0x18007ae0a]
mov word [rbp + 0x1c8], ax
jmp 0x180066cdc
mov r8d, 5
lea rdx, [0x18007b0ca]
lea rcx, [rbp + 0x1a8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp 0x180066cdc
mov eax, dword [0x18007ae54]
mov dword [rbp + 0x1b4], eax
movzx eax, word [0x18007ae58]
mov word [rbp + 0x1b8], ax
xor eax, eax
mov word [rbp + 0x1ba], ax
jmp 0x180066cdc
xor eax, eax
mov word [rbp + 0x1da], ax
jmp 0x180066cdc
cmp edi, 0x2cd6c
je 0x180066cb9
cmp edi, 0x31d1c
je 0x180066cb1
cmp edi, 0x344f4
je 0x180066caa
cmp edi, 0x36ccc
je 0x180066c80
cmp edi, 0x394a4
jne 0x180066cdc
mov byte [rsp + 0x74], 0
mov eax, dword [rsp + 0x74]
jmp 0x180066024
mov r8d, r12d
lea rdx, [rbp + 0x640]
lea rcx, [rbp + 0x1e8]
call qword [sym.imp.SHLWAPI.dll_SHUnicodeToUnicode]
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x1a8]
call qword [sym.imp.SHELL32.dll_SHIsFileAvailableOffline]
jmp 0x180066cdc
xor eax, eax
mov dword [rbp - 0x40], eax
jmp 0x180066cdc
mov r12d, 0x104
jmp 0x180066cdc
mov eax, dword [0x18007aff4]
mov dword [rbp + 0x1da], eax
movzx eax, word [0x18007aff8]
mov word [rbp + 0x1de], ax
xor eax, eax
mov word [rbp + 0x1e0], ax
add edi, 0x27d8
cmp edi, 0x3bc40
jbe 0x1800669a0
mov edi, dword [rbp - 0x80]
xor eax, eax
mov ecx, eax
movzx eax, byte [rsp + 0x6c]
cmp dword [rsp + 0x78], ecx
cmove ecx, eax
mov byte [rsp + 0x6c], cl
jmp 0x180066e9e
mov byte [rsp + 0x6c], 1
jmp case.0x18006691b.6
xor eax, eax
lea rdx, [rbp - 0x20]
mov ecx, 0x202
mov dword [rbp - 0x74], eax
call qword [rbp - 0x28]
test eax, eax
je 0x180066e9e
xor edx, edx
mov edi, edx
cmp edi, 8
ja case.0x180066d4e.4
lea r9, [0x180000000]
mov eax, edi
mov ecx, dword [r9 + rax*4 + 0x67058]
add rcx, r9
jmp rcx
mov sil, 1
jmp case.0x180066d4e.4
mov r14d, 3
jmp case.0x180066d4e.4
cmp dword [rbp - 0x58], 0
mov ecx, edx
movzx eax, sil
cmovne ecx, eax
movzx esi, cl
jmp case.0x180066d4e.4
test sil, sil
je case.0x180066d4e.4
mov r8d, dword [rsp + 0x60]
lea r9, [rbp + 0x640]
mov qword [rsp + 0x20], rdx
mov ecx, r15d
mov edx, r14d
call qword [sym.imp.ADVAPI32.dll_SaferSetPolicyInformation]
xor edx, edx
jmp case.0x180066d4e.4
mov qword [rsp + 0x28], rdx
lea rax, [rsp + 0x60]
mov edx, r14d
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x640]
mov r8d, r13d
mov ecx, r15d
call qword [sym.imp.ADVAPI32.dll_SaferGetPolicyInformation]
mov dword [rbp - 0x58], eax
xor edx, edx
jmp case.0x180066d4e.4
mov r15d, 2
jmp case.0x180066d4e.4
mov r13d, 0x190
mov dword [rsp + 0x60], edx
inc edi
lea eax, [rdi + 0x113]
cmp eax, 0x11c
jb 0x180066d31
mov edi, dword [rbp - 0x80]
jmp 0x180066e9e
xor eax, eax
xor r9d, r9d
xor edx, edx
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea r8d, [rax + 0x3f]
call fcn.18000f750
mov byte [rsp + 0x74], al
mov ebx, dword [rsp + 0x74]
jmp 0x180066e9e
mov rcx, qword [rbp - 0x30]
lea rax, [rbp - 0x74]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x78]
xor eax, eax
lea r8, [rbp + 0x220]
lea rdx, [rbp + 0x430]
mov qword [rsp + 0x20], rax
call qword [sym.imp.SHLWAPI.dll_SHGetValueW]
mov dword [rsp + 0x78], eax
jmp 0x180066e9e
mov qword [rbp - 0x30], 0xffffffff80000001
jmp case.0x18006691b.6
mov eax, dword [0x18007b0f0]
mov dword [rbp + 0x23a], eax
movzx eax, word [0x18007b0f4]
mov word [rbp + 0x23e], ax
jmp case.0x18006691b.6
cmp byte [rsp + 0x6c], 0
je case.0x18006691b.6
mov eax, dword [rbp - 0x74]
lea r8, [rbp + 0x220]
mov r9d, dword [rbp - 0x78]
lea rdx, [rbp + 0x430]
mov rcx, qword [rbp - 0x30]
mov dword [rsp + 0x28], eax
xor eax, eax
mov qword [rsp + 0x20], rax
call qword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov r8d, 0x75
movabs rdx, 0x49002e0067
mov ecx, dword [rsp + 0x70]
mov eax, dword [rsp + 0x68]
dec eax
dec edi
mov dword [rsp + 0x68], eax
mov dword [rbp - 0x80], edi
cmp eax, ecx
ja 0x180066900
jmp case.0x18006691b.0