Function at 0x18002c710
Capabilities:
Delete registry value
Impersonate user

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x328]
sub rsp, 0x400
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x180041118]
xor rax, rsp
mov qword [rbp + 0x2e0], rax
mov dword [rsp + 0x40], r9d
mov r14, r8
mov rsi, rdx
mov qword [rbp - 0x58], rcx
mov rdx, qword [rbp + 0x350]
mov qword [rsp + 0x48], rdx
mov r8, qword [rbp + 0x358]
mov qword [rsp + 0x68], r8
xor r15d, r15d
mov edi, r15d
mov ebx, r15d
lea eax, [r9 + 0x11]
mov dword [rsp + 0x30], eax
lea r11, [0x180000000]
cmp r9d, eax
jae 0x18002cb22
lea r12d, [r9 - 0x3b]
mov dword [rsp + 0x3c], r12d
lea r10d, [r15 + 0x65]
lea r9d, [r15 + 0x6f]
movzx r13d, byte [rsp + 0x34]
mov r15d, dword [rsp + 0x48]
mov ecx, eax
cmp r12d, 0x25
ja case.default.0x18002c7cf
movzx eax, byte [r11 + r12 + 0x2d7cc]
mov ecx, dword [r11 + rax*4 + 0x2d784]
add rcx, r11
jmp rcx
mov rdx, qword [rdx]
mov rcx, rsi
call fcn.180037e40
mov rdx, qword [rsp + 0x48]
mov r9d, 0x6f
lea r10d, [r9 - 0xa]
lea r11, [0x180000000]
jmp case.0x18002c7cf.17
mov r8d, 3
lea rdx, [0x18003b5c8]
lea rcx, [rbp + 0x188]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
movsd xmm0, qword [str.icudt51l_ibm_16804_X110_1999.cnv]
movsd qword [rbp + 0x1a0], xmm0
movzx eax, word [0x18003b638]
mov word [rbp + 0x1a8], ax
jmp 0x18002c7dc
mov rdi, r8
cmp qword [r8 + 0x18], 0x10
jb 0x18002c83e
mov rdi, qword [r8]
xor eax, eax
mov qword [rsp + 0x70], rax
mov rbx, r14
cmp qword [r14 + 0x18], 0x10
jb 0x18002c852
mov rbx, qword [r14]
xor r13b, r13b
jmp case.0x18002c7cf.17
cmp qword [r8], 0
jge 0x18002c874
mov rax, qword [rbp - 0x78]
test rax, rax
jle 0x18002c874
inc qword [rbp - 0x80]
sub rax, qword [r14]
mov qword [rbp - 0x78], rax
movaps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x40], xmm0
jmp case.0x18002c7cf.17
mov rcx, qword [rsp + 0x70]
call sub.IMM32.dll_ImmGetOpenStatus
jmp 0x18002c7dc
mov rax, qword [r8]
cqo
idiv qword [r14]
mov qword [rbp - 0x80], rax
mov rdx, qword [rsp + 0x48]
jmp case.0x18002c7cf.17
mov dword [rbp + 0x1aa], 0x330035
jmp case.0x18002c7cf.17
mov r8d, 4
lea rdx, [0x18003b694]
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp 0x18002c7dc
mov r8d, 4
lea rdx, str.submitted_plugins_to_core
lea rcx, [rbp + 0x188]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x18002c7dc
xor eax, eax
mov word [rbp + 0x1ae], ax
lea r8d, [rax + 5]
lea rdx, [0x18003b6ee]
lea rcx, [rbp + 0x1ae]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor eax, eax
mov word [rbp + 0x1b8], ax
lea r8d, [rax + 2]
lea rdx, [0x18003b720]
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp 0x18002c7dc
xor eax, eax
mov qword [rsp + 0x50], rax
cmp qword [rdx], rax
jbe case.0x18002c7cf.17
nop dword [rax + rax]
mov r12d, 0xf4
nop word [rax + rax]
mov eax, r12d
sub eax, 0xf4
je 0x18002ca3a
sub eax, 1
je 0x18002c9b1
cmp eax, 1
jne 0x18002ca4b
mov rcx, r8
mov rdx, qword [r8 + 0x18]
cmp rdx, 0x10
jb 0x18002c98c
mov rcx, qword [r8]
inc rdi
add rcx, qword [r8 + 0x10]
cmp rdi, rcx
jne 0x18002ca4b
mov rdi, r8
cmp rdx, 0x10
jb 0x18002ca4b
mov rdi, qword [r8]
jmp 0x18002ca4b
movzx r9d, r15b
and r9b, 0xf
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x18002c9e5
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x18002c9da
mov rax, qword [rsi]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x18002c9f9
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rsi
call fcn.18001a9b0
mov r8, qword [rsp + 0x68]
mov rcx, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x18002ca06
mov rcx, qword [rsi]
mov rax, qword [rsi + 0x10]
movzx r13d, byte [rcx + rax - 1]
mov rcx, r14
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x18002ca20
mov rcx, qword [r14]
inc rbx
add rcx, qword [r14 + 0x10]
cmp rbx, rcx
jne 0x18002ca4b
mov rbx, r14
cmp rdx, 0x10
jb 0x18002ca4b
mov rbx, qword [r14]
jmp 0x18002ca4b
movsx r15d, byte [rbx]
movzx eax, r13b
add r15d, eax
movsx eax, byte [rdi]
add r15d, eax
inc r12d
cmp r12d, 0xf7
jb 0x18002c960
mov rax, qword [rsp + 0x50]
inc rax
mov qword [rsp + 0x50], rax
mov rdx, qword [rsp + 0x48]
cmp rax, qword [rdx]
jb 0x18002c950
mov r12d, dword [rsp + 0x3c]
jmp 0x18002c7e1
xor eax, eax
mov word [rbp + 0x196], ax
lea r8d, [rax + 1]
lea rdx, [0x18003b766]
lea rcx, [rbp + 0x196]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor eax, eax
mov word [rbp + 0x198], ax
jmp 0x18002c7dc
mov rax, qword [r8]
cqo
idiv qword [r14]
mov qword [rbp - 0x78], rdx
mov rdx, qword [rsp + 0x48]
jmp case.0x18002c7cf.17
mov eax, dword [0x18003b7ca]
mov dword [rbp + 0x1c4], eax
movzx eax, word [0x18003b7ce]
mov word [rbp + 0x1c8], ax
jmp case.0x18002c7cf.17
mov dword [rbp + 0x1ca], 0x65
jmp case.0x18002c7cf.17
mov word [rbp + 0x190], r9w
mov dword [rbp + 0x192], 0x750064
mov ecx, dword [rsp + 0x30]
inc r12d
mov dword [rsp + 0x3c], r12d
lea eax, [r12 + 0x3b]
cmp eax, ecx
mov r8, qword [rsp + 0x68]
jb 0x18002c7b1
mov r9d, dword [rsp + 0x40]
xor r15d, r15d
mov edx, r9d
mov dword [rsp + 0x3c], edx
imul eax, r9d, 0x1a9
mov dword [rsp + 0x48], eax
cmp r9d, eax
ja case.0x18002c7cf.16
mov ecx, 0x73
lea edi, [rcx - 0x2f]
movabs rsi, 0x6c697073207463
lea r14d, [rcx - 7]
mov r12, qword [rbp - 0x58]
movzx r13d, byte [rsp + 0x34]
mov ebx, dword [rsp + 0x60]
movabs r10, 0x7ffffffffffffffe
cmp edx, 0x2e53
ja 0x18002cd2b
je 0x18002cd18
cmp edx, 0x1747
ja 0x18002cc35
je 0x18002cc0a
cmp edx, 0x3b
je 0x18002cbfb
cmp edx, 0x5fe
je 0x18002cbec
cmp edx, 0xbc1
je 0x18002cbcd
cmp edx, 0x1184
jne 0x18002d743
movsd xmm0, qword [str.cr120]
movsd qword [rbp + 0x15e], xmm0
mov eax, dword [0x18003b840]
mov dword [rbp + 0x166], eax
jmp 0x18002d743
mov eax, dword [0x18003b830]
mov dword [rbp + 0x15a], eax
movzx eax, word [0x18003b834]
mov word [rbp + 0x15e], ax
jmp 0x18002d743
mov dword [rbp + 0x158], 0x6d
jmp 0x18002d743
mov dword [rbp + 0x1cc], 0x73
jmp 0x18002d743
mov eax, dword [0x18003b9cc]
mov dword [rbp + 0x120], eax
mov eax, dword [0x18003b9d4]
mov dword [rbp + 0x124], eax
movzx eax, word [0x18003b9d8]
mov word [rbp + 0x128], ax
jmp 0x18002d743
cmp edx, 0x1d0a
je 0x18002ccdb
cmp edx, 0x22cd
je 0x18002cc78
cmp edx, 0x2890
jne 0x18002d743
movups xmm0, xmmword [rbp + 0xd0]
movups xmmword [rbp + 0xe8], xmm0
movsd xmm1, qword [rbp + 0xe0]
movsd qword [rbp + 0xf8], xmm1
jmp 0x18002d743
lea rcx, [rbp + 0x170]
sub rcx, 2
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x18002cc83
mov eax, dword [0x18003b81c]
mov dword [rcx], eax
movzx eax, word [0x18003b820]
mov word [rcx + 4], ax
mov r8d, 3
lea rdx, [0x18003b828]
lea rcx, [rbp + 0x170]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 0xa
lea rdx, [rbp + 0x17e]
lea ecx, [r8 - 8]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__ultow]
mov byte [rsp + 0x35], 1
jmp 0x18002d735
movsd xmm0, qword [str.ay32]
movsd qword [rbp + 0x128], xmm0
movzx eax, word [0x18003a948]
mov word [rbp + 0x130], ax
mov eax, dword [0x18003a930]
mov dword [rbp + 0x170], eax
movzx eax, word [0x18003a934]
mov word [rbp + 0x174], ax
jmp 0x18002d743
lea rax, [rbp + 0x158]
mov qword [rbp + 0xe8], rax
jmp 0x18002d743
cmp edx, 0x4b22
ja 0x18002d6c0
je 0x18002d693
cmp edx, 0x3416
je 0x18002d687
cmp edx, 0x39d9
je 0x18002d674
cmp edx, 0x3f9c
je 0x18002d642
cmp edx, 0x455f
jne 0x18002d743
mov dword [rsp + 0x60], 0x104
mov dword [rsp + 0x5c], r15d
lea rbx, [rbp + 0xe8]
mov qword [rsp + 0x50], rbx
nop word [rax + rax]
mov qword [rbp], r15
mov qword [rbp + 8], 7
mov word [rbp - 0x10], r15w
mov r9d, 0x13
mov dword [rsp + 0x30], r9d
mov edx, r15d
mov dword [rsp + 0x38], edx
cmp edx, 0xf
ja case.default.0x18002cdd6
mov eax, edx
lea rcx, [0x180000000]
mov ecx, dword [rcx + rax*4 + 0x2d7f4]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov byte [rbp + 0xe1], 0
mov r8d, 2
lea rdx, [0x18003b84c]
lea rcx, [rbp + 0xd0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x18002d57e
cmp byte [rsp + 0x34], 0
je 0x18002ce19
mov r8d, dword [rsp + 0x58]
lea rdx, [rbp - 0x30]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.WINMM.dll_mixerSetControlDetails]
lea rax, [rbp - 0x50]
mov qword [rsp + 0x28], rax
mov eax, dword [rbp - 0x68]
mov dword [rsp + 0x20], eax
mov r9d, dword [rbp - 0x6c]
lea r8, [rbp + 0xd0]
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x138]
call qword [sym.imp.ADVAPI32.dll_LogonUserA]
cmp qword [rbp - 0x80], 0
jne 0x18002d57e
mov ebx, 0x34
nop dword [rax + rax]
cmp ebx, 0x2c4
ja 0x18002cf67
je 0x18002cf51
cmp ebx, 0x34
je 0x18002cf2d
cmp ebx, 0xd8
je 0x18002cf10
cmp ebx, 0x17c
je 0x18002cee7
cmp ebx, 0x220
jne 0x18002d011
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
mov dword [rbp + 0xc0], eax
mov dword [rbp - 0x70], r15d
xor r8d, r8d
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x10]
call qword [sym.imp.WINMM.dll_mmioOpenW]
mov r12, rax
jmp 0x18002d011
mov word [rbp + 0x26], r15w
mov r8d, 1
lea rdx, [0x18003b8d0]
lea rcx, [rbp + 0x26]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov word [rbp + 0x28], r15w
mov r13b, 1
jmp 0x18002d011
mov eax, dword [0x18003b8a4]
mov dword [rbp + 0x1e], eax
movzx eax, word [0x18003b8a8]
mov word [rbp + 0x22], ax
mov word [rbp + 0x24], di
jmp 0x18002d011
mov dword [rbp + 0x10], 0x530043
movsd xmm0, qword [0x18003b86a]
movsd qword [rbp + 0x14], xmm0
movzx eax, word [0x18003b872]
mov word [rbp + 0x1c], ax
jmp 0x18002d011
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], rax
jmp 0x18002d011
cmp ebx, 0x368
je 0x18002cfd3
cmp ebx, 0x40c
je 0x18002cfcd
cmp ebx, 0x4b0
jne 0x18002d011
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb case.0x18002c7cf.16
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002d75d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002d75d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov byte [rbp - 0x40], 0
jmp 0x18002d011
mov ecx, r15d
movzx eax, r13b
test r12, r12
cmovne ecx, eax
movzx r13d, cl
test cl, cl
je 0x18002d007
mov r8d, dword [rbp - 0x70]
lea rdx, [rbp + 0x60]
mov rcx, r12
call qword [sym.imp.WINMM.dll_mmioAdvance]
mov edx, 0x10
mov rcx, r12
call qword [sym.imp.WINMM.dll_mmioClose]
lea rcx, [rbp + 0x30]
call qword [sym.imp.ADVAPI32.dll_GetSecurityDescriptorLength]
add ebx, 0xa4
cmp ebx, 0x554
jb 0x18002ce60
mov rbx, qword [rsp + 0x50]
jmp 0x18002d57e
movsd xmm0, qword [str._fill_range]
movsd qword [rbp + 0x147], xmm0
mov eax, dword [0x18003b8f8]
mov dword [rbp + 0x14f], eax
movzx eax, word [0x18003b8fc]
mov word [rbp + 0x152], ax
movzx eax, byte [0x18003b8fe]
mov byte [rbp + 0x154], al
mov eax, dword [str._Z19c]
mov dword [rbp + 0x100], eax
movzx eax, word [0x18003b904]
mov word [rbp + 0x104], ax
jmp case.default.0x18002cdd6
mov r8d, 5
lea rdx, str.Incor
lea rcx, [rbp + 0x138]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
movzx eax, word [0x18003ab64]
mov word [rbp + 0x13d], ax
mov qword [rbp + 0x13f], rsi
mov word [rbp + 0x146], r14w
jmp 0x18002d57e
mov eax, dword [0x18003b91c]
mov dword [rbp + 0xd4], eax
movzx eax, byte [0x18003b920]
mov byte [rbp + 0xd8], al
mov byte [rbp + 0xd9], 0
mov r8d, 3
lea rdx, [0x18003b93a]
lea rcx, [rbp + 0xd9]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp 0x18002d57e
mov eax, dword [str.onve]
mov dword [rbp + 0x105], eax
movzx eax, byte [0x18003b94c]
mov byte [rbp + 0x109], al
mov r8d, 0xb
lea rdx, str.rt_float16
lea rcx, [rbp + 0x109]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp 0x18002d57e
mov r8d, 1
lea rdx, [0x18003b965]
lea rcx, [rbp + 0xe3]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0xe4], 0
mov byte [rsp + 0x34], 1
jmp 0x18002d57e
mov qword [rbp - 0x50], r15
jmp case.default.0x18002cdd6
mov dword [rbp - 0x6c], 5
mov dword [rsp + 0x58], r15d
mov r8d, 3
lea rdx, [0x18003b560]
lea rcx, [rbp - 0x10]
call fcn.18002b7d0
jmp 0x18002d57e
mov dword [rbp - 0x68], r15d
mov r8d, dword [rsp + 0x58]
lea rdx, [rbp - 0x30]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.WINMM.dll_mixerGetControlDetailsA]
mov ebx, eax
lea rcx, [rbp - 0x10]
cmp qword [rbp + 8], 8
cmovae rcx, qword [rbp - 0x10]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov qword [rbp - 0x80], rax
test ebx, ebx
mov rbx, qword [rsp + 0x50]
je 0x18002d57e
mov byte [rsp + 0x34], 0
jmp 0x18002d57e
mov byte [rbp + 0x138], 0
jmp case.default.0x18002cdd6
mov r8d, 0xa
lea rdx, [rbp + 0x119]
lea ecx, [r8 - 9]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itoa]
movzx eax, word [0x18003b97c]
mov word [rbp + 0x11a], ax
mov eax, 0x63
mov word [rbp + 0x11c], ax
lea r8d, [rax - 0x5f]
lea rdx, str.__builtin_ia32_vcvtph2ps512_mask
lea rcx, [rbp + 0xd0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp 0x18002d57e
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
mov rdi, qword [rbp]
mov rcx, qword [rbp + 8]
cmp rdi, rcx
jae 0x18002d27e
lea rax, [rdi + 1]
mov qword [rbp], rax
lea rax, [rbp - 0x10]
cmp rcx, 8
cmovae rax, qword [rbp - 0x10]
mov dword [rax + rdi*2], 0x2e
mov dword [rbp - 0x30], 0x20
mov edi, 0x44
jmp case.default.0x18002cdd6
mov rax, r10
sub rax, rdi
cmp rax, 1
jb 0x18002d77c
lea r15, [rdi + 1]
mov rsi, qword [rbp + 8]
mov rbx, r15
or rbx, 7
cmp rbx, r10
jbe 0x18002d2a7
mov rbx, r10
jmp 0x18002d2c8
mov rcx, rsi
shr rcx, 1
mov rax, r10
sub rax, rcx
cmp rsi, rax
jbe 0x18002d2bd
mov rbx, r10
jmp 0x18002d2c8
lea rax, [rcx + rsi]
cmp rbx, rax
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x10]
call fcn.18002b6d0
mov r14, rax
mov qword [rbp], r15
mov qword [rbp + 8], rbx
add rdi, rdi
mov r8, rdi
mov rcx, rax
cmp rsi, 8
jb 0x18002d33d
mov rbx, qword [rbp - 0x10]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov dword [r14 + rdi], 0x2e
xor r15d, r15d
lea rdx, [rsi*2 + 2]
cmp rdx, 0x1000
jb 0x18002d333
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18002d76e
mov rbx, rcx
mov rcx, rbx
call fcn.180038298
jmp 0x18002d351
lea rdx, [rbp - 0x10]
call sub.VCRUNTIME140.dll_memcpy
mov dword [r14 + rdi], 0x2e
xor r15d, r15d
mov rbx, qword [rsp + 0x50]
mov r9d, dword [rsp + 0x30]
mov edx, dword [rsp + 0x38]
mov qword [rbp - 0x10], r14
mov dword [rbp - 0x30], 0x20
mov edi, 0x44
jmp case.default.0x18002cdd6
mov eax, dword [0x18003b9b4]
mov dword [rbp + 0xdc], eax
movzx eax, byte [0x18003b9b8]
mov byte [rbp + 0xe0], al
jmp case.default.0x18002cdd6
lea rcx, [rbp + 0x100]
dec rcx
nop dword [rax]
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x18002d3a0
movzx eax, word [0x18003b9c0]
mov word [rcx], ax
movzx eax, byte [0x18003b9c2]
mov byte [rcx + 2], al
lea rcx, [rbp + 0x100]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x18002d3c7
movzx eax, word [0x18003b9c4]
mov word [rcx], ax
lea rcx, [rbp + 0x100]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x18002d3e4
mov eax, dword [0x18003b9c8]
mov dword [rcx], eax
jmp case.default.0x18002cdd6
mov rdi, qword [r8 + 0x10]
mov rbx, r8
cmp qword [r8 + 0x18], 8
jb 0x18002d40b
mov rbx, qword [r8]
cmp rdi, 8
jae 0x18002d424
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x10], xmm0
mov r14d, 7
mov r15, qword [rbp + 0x10]
jmp 0x18002d463
mov r14, rdi
or r14, 7
cmp r14, r10
cmova r14, r10
lea rdx, [r14 + 1]
lea rcx, [rbp + 0x10]
call fcn.18002b6d0
mov r15, rax
mov qword [rbp + 0x10], rax
lea r8, [rdi*2 + 2]
mov rdx, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
movabs r10, 0x7ffffffffffffffe
mov qword [rbp + 0x28], r14
mov qword [rbp + 0x20], rdi
lea rsi, [rbp + 0x10]
cmp r14, 8
cmovae rsi, r15
cmp rdi, 8
jae 0x18002d48a
movups xmm6, xmmword [rsi]
mov qword [rbp + 0x48], 7
jmp 0x18002d4c4
mov rbx, rdi
or rbx, 7
cmp rbx, r10
cmova rbx, r10
lea rdx, [rbx + 1]
lea rcx, [rbp + 0x30]
call fcn.18002b6d0
mov qword [rbp + 0x30], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x48], rbx
movups xmm6, xmmword [rbp + 0x30]
mov qword [rbp + 0x40], rdi
mov rcx, qword [rbp + 8]
cmp rcx, 8
jb 0x18002d508
lea rdx, [rcx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002d503
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002d767
call fcn.180038298
movups xmmword [rbp - 0x10], xmm6
movups xmm0, xmmword [rbp + 0x40]
movups xmmword [rbp], xmm0
cmp r14, 8
jb 0x18002d54f
lea rdx, [r14*2 + 2]
mov rax, r15
cmp rdx, 0x1000
jb 0x18002d547
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002d76e
mov rcx, r15
call fcn.180038298
xor r15d, r15d
mov qword [rsp + 0x70], r15
mov rbx, qword [rsp + 0x50]
mov rdx, qword [rbx]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], r15w
jne 0x18002d566
lea rcx, [rbp - 0x10]
call fcn.18002b7d0
mov edi, 0x44
mov edx, dword [rsp + 0x38]
mov r9d, dword [rsp + 0x30]
inc r9d
mov dword [rsp + 0x30], r9d
inc edx
mov dword [rsp + 0x38], edx
cmp r9d, 0x23
mov r8, qword [rsp + 0x68]
movabs rsi, 0x6c697073207463
movabs r10, 0x7ffffffffffffffe
mov r14d, 0x6c
jb 0x18002cdb3
mov rcx, qword [rbp + 8]
cmp rcx, 8
jb 0x18002d5fe
lea rdx, [rcx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002d5f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002d775
call fcn.180038298
mov eax, dword [rsp + 0x5c]
inc eax
mov dword [rsp + 0x5c], eax
add rbx, 8
mov qword [rsp + 0x50], rbx
cmp eax, 3
mov r8, qword [rsp + 0x68]
movabs rsi, 0x6c697073207463
movabs r10, 0x7ffffffffffffffe
mov r14d, 0x6c
jb 0x18002cd90
mov ebx, dword [rsp + 0x60]
jmp 0x18002d735
lea rax, [rbp + 0x170]
mov qword [rbp + 0xf8], rax
mov dword [rsp + 0x20], r15d
lea r9, [rbp - 0x48]
xor r8d, r8d
mov edx, dword [rbp - 0x64]
lea rcx, [rbp + 0x188]
call qword [sym.imp.SHLWAPI.dll_SHRegCreateUSKeyW]
mov dword [rbp - 0x60], eax
jmp 0x18002d735
lea rax, [rbp + 0x120]
mov qword [rbp + 0xf0], rax
jmp 0x18002d743
mov dword [rbp - 0x64], 0xf003f
jmp 0x18002d743
mov ecx, r15d
movzx eax, byte [rsp + 0x35]
cmp dword [rbp - 0x60], 0
cmove ecx, eax
mov byte [rsp + 0x35], cl
cmp cl, 0
je 0x18002d73e
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.SHLWAPI.dll_SHRegDeleteUSValueW]
jmp 0x18002d735
cmp edx, 0x50e5
je 0x18002d71e
cmp edx, 0x56a8
je 0x18002d718
cmp edx, 0x5c6b
jne 0x18002d743
movaps xmm0, xmmword [rbp - 0x40]
mov rax, qword [rbp - 0x58]
movups xmmword [rax], xmm0
mov rcx, qword [rbp + 0x2e0]
xor rcx, rsp
call fcn.1800387b0
lea r11, [rsp + 0x400]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov byte [rbp - 0x40], 1
jmp 0x18002d743
mov r8d, ebx
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.SHLWAPI.dll_SHUnicodeToAnsi]
mov r9d, dword [rsp + 0x40]
mov edx, dword [rsp + 0x3c]
mov ecx, 0x73
imul eax, r9d, 0x19
add edx, eax
mov dword [rsp + 0x3c], edx
cmp edx, dword [rsp + 0x48]
ja case.0x18002c7cf.16
mov r8, qword [rsp + 0x68]
jmp 0x18002cb61
call fcn.180038298
jmp case.0x18002c7cf.16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.18002b5f0
int3