Function at 0x180038360
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xd20]
sub rsp, 0xe20
mov rax, qword [0x18007cf38]
xor rax, rsp
mov qword [rbp + 0xd10], rax
mov r15d, r9d
mov dword [rbp - 0x50], r9d
xor r9d, r9d
mov qword [rsp + 0x48], r8
mov ebx, r9d
mov qword [rbp - 0x60], rdx
mov r10, r8
mov qword [rbp + 0xa80], rcx
lea r14d, [r15 + 0x8b8]
mov dword [rsp + 0x58], ebx
mov dword [rbp - 0x68], r15d
mov r8, rdx
mov dword [rbp - 0x38], r14d
mov r11, rcx
mov esi, r15d
cmp r15d, r14d
jae 0x180038e99
mov r13d, dword [rsp + 0x50]
lea ecx, [r9 + 0x70]
mov edi, dword [rbp - 0x54]
lea edx, [rcx - 0xf]
lea r12d, [r9 + 0x38]
nop dword [rax + rax]
cmp esi, 0x163
ja 0x180038bfd
je 0x180038972
cmp esi, 0xc3
ja 0x18003884d
je 0x1800385be
mov eax, esi
sub eax, 0x21
je 0x1800385b2
sub eax, 0x26
je 0x18003846e
sub eax, 0x24
je 0x18003845d
cmp eax, 0x32
jne 0x180038d40
mov eax, dword [str.ref.na]
mov dword [rbp + 0xaa1], eax
movzx eax, word [0x18006a954]
mov word [rbp + 0xaa5], ax
mov eax, 0x67
mov word [rbp + 0xaa7], ax
jmp 0x180038d40
mov eax, dword [r10]
mov r13d, 1
mov dword [rbp - 0x78], eax
jmp 0x180038d40
xor r15d, r15d
cmp dword [r8], r15d
je 0x18003855e
mov esi, 0x5e
nop
cmp esi, 0x5e
je 0x180038517
cmp esi, 0x72
jne 0x18003854c
lea r9, [r10 + 0x198]
mov rax, qword [r9]
lea rbx, [r10 + 0x1a0]
cmp qword [rbx], rax
jne 0x1800384c7
lea r8, [r10 + 0x190]
mov rcx, rbx
lea edx, [rsi - 0x2e]
call fcn.180060df0
test eax, eax
je 0x180038d57
mov r10, qword [rsp + 0x48]
mov rax, qword [rbx]
mov rdx, qword [rbp - 0x80]
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rax], xmm0
movsd xmm1, qword [rdx + 0x30]
movsd qword [rax + 0x10], xmm1
xor eax, eax
mov rcx, qword [r10 + reloc.SHLWAPI.dll_SHRegGetIntW]
add qword [rbx], 0x18
inc qword [r10 + 0x128]
mov dword [r10 + 0x130], eax
cmp dword [rcx], 2
sete al
xor r15d, r15d
mov dword [r10 + 0xfc], eax
lea rax, [rcx + 0x50]
mov qword [r10 + reloc.SHLWAPI.dll_SHRegGetIntW], rax
jmp 0x18003854c
cmp dword [r10 + 0x130], 0
jne 0x180038541
xor r8d, r8d
mov r9, r10
xor ecx, ecx
lea edx, [r8 + 0x2a]
call fcn.180049e00
mov r10, qword [rsp + 0x48]
test eax, eax
jne 0x180038541
mov qword [rbp - 0x80], r15
jmp 0x18003854c
mov rax, qword [r10 + reloc.SHLWAPI.dll_SHRegGetIntW]
mov qword [rbp - 0x80], rax
add esi, 0x14
cmp esi, 0x86
jb 0x180038480
mov esi, dword [rbp - 0x68]
cmp dword [r10 + 0x130], 0
jne 0x180038586
xor r8d, r8d
mov r9, r10
xor ecx, ecx
lea edx, [r8 + 0x2a]
call fcn.180049e00
test eax, eax
je 0x180038e3e
mov r10, qword [rsp + 0x48]
mov rax, qword [r10 + reloc.SHLWAPI.dll_SHRegGetIntW]
mov qword [rbp - 0x80], rax
test rax, rax
je 0x180038e3e
mov r11, qword [rbp + 0xa80]
mov ecx, 0x70
mov r8, qword [rbp - 0x60]
lea edx, [rcx - 0xf]
jmp 0x180038d40
mov word [rbp + 0xaa0], cx
jmp 0x180038d40
mov rdx, qword [rbp - 0x80]
mov eax, dword [rdx]
cmp eax, 0xd
je 0x180038830
cmp dword [r8], 0
jne 0x180038679
cmp eax, 0xf
jne 0x180038d69
mov ebx, 0xbe
mov eax, ebx
sub eax, 0xbd
je 0x180038625
cmp eax, 1
jne 0x180038664
mov rcx, qword [r10 + reloc.SHLWAPI.dll_SHRegGetIntW]
mov eax, r9d
inc qword [r10 + 0x128]
mov dword [r10 + 0x130], r9d
cmp dword [rcx], 2
sete al
mov dword [r10 + 0xfc], eax
lea rax, [rcx + 0x50]
mov qword [r10 + reloc.SHLWAPI.dll_SHRegGetIntW], rax
jmp 0x180038664
cmp dword [r10 + 0x130], 0
jne 0x180038650
xor r8d, r8d
mov r9, r10
xor ecx, ecx
lea edx, [r8 + 0x2a]
call fcn.180049e00
test eax, eax
je 0x180038e3b
mov r10, qword [rsp + 0x48]
xor r9d, r9d
mov rdx, qword [r10 + reloc.SHLWAPI.dll_SHRegGetIntW]
mov qword [rbp - 0x80], rdx
test rdx, rdx
je 0x180038e3b
dec ebx
cmp ebx, 0xbc
ja 0x1800385e5
mov r11, qword [rbp + 0xa80]
mov eax, dword [rdx]
cmp eax, 0x10
jne 0x180038827
mov r14d, 0xc6
nop word [rax + rax]
mov eax, r14d
sub eax, 0xc5
je 0x18003870c
cmp eax, 1
jne 0x180038807
mov rcx, qword [r10 + reloc.SHLWAPI.dll_SHRegGetIntW]
mov eax, r9d
inc qword [r10 + 0x128]
mov dword [r10 + 0x130], r9d
mov r9, r10
cmp dword [rcx], 2
sete al
xor r8d, r8d
mov dword [r10 + 0xfc], eax
lea rax, [rcx + 0x50]
xor ecx, ecx
mov qword [r10 + reloc.SHLWAPI.dll_SHRegGetIntW], rax
lea edx, [r8 + 0x2a]
call fcn.180049e00
mov r10, qword [rsp + 0x48]
xor r9d, r9d
test eax, eax
jne 0x1800386fc
mov edx, r9d
mov qword [rbp - 0x80], rdx
jmp 0x180038807
mov rdx, qword [r10 + reloc.SHLWAPI.dll_SHRegGetIntW]
mov qword [rbp - 0x80], rdx
jmp 0x180038807
test rdx, rdx
je 0x180038e3b
mov ecx, dword [rdx]
lea eax, [rcx - 0xd]
test eax, 0xfffffff9
jne 0x18003879a
cmp ecx, 0x13
je 0x18003879a
mov ebx, reloc.SHELL32.dll_SHSetInstanceExplorer
nop dword [rax + rax]
mov eax, ebx
sub eax, 0xae
je 0x180038dd3
sub eax, 1
je 0x180038754
cmp eax, 1
jne 0x180038787
mov dword [r10 + 0x188], 0x15
jmp 0x180038787
movups xmm0, xmmword [rdx + 0x20]
lea r9, [rbp - 0x10]
mov r8, r10
movsd xmm1, qword [rdx + 0x30]
mov rcx, r11
mov edx, 0xff
movaps xmmword [rbp - 0x10], xmm0
movsd qword [rbp], xmm1
call fcn.18003e4f0
mov rdx, qword [rbp - 0x80]
mov r10, qword [rsp + 0x48]
mov dword [rsp + 0x78], eax
mov r11, qword [rbp + 0xa80]
dec ebx
cmp ebx, 0xad
ja 0x180038730
jmp 0x180038804
mov esi, 0xa7
nop
mov eax, esi
sub eax, 0xa6
je 0x180038e5a
cmp eax, 1
jne 0x1800387f6
lea r9, [r10 + 0x178]
mov rax, qword [r9]
lea rbx, [r10 + 0x180]
cmp qword [rbx], rax
jne 0x1800387e9
lea r8, [r10 + 0x170]
mov edx, 0x44
mov rcx, rbx
call fcn.180060df0
test eax, eax
je 0x180038e30
mov r10, qword [rsp + 0x48]
mov rax, qword [rbx]
mov dword [rax], 0x15
add qword [rbx], 4
dec esi
cmp esi, 0xa5
ja 0x1800387a0
mov rdx, qword [rbp - 0x80]
xor r9d, r9d
mov r11, qword [rbp + 0xa80]
dec r14d
cmp r14d, 0xc4
ja 0x180038690
mov esi, dword [rbp - 0x68]
mov r14d, dword [rbp - 0x38]
jmp 0x180038830
cmp eax, 0xd
jne 0x180038e02
add qword [r10 + 0x180], 0xfffffffffffffffc
mov rax, qword [r10 + 0x180]
mov ecx, dword [rax]
mov dword [r10 + 0x188], ecx
jmp 0x18003859a
mov eax, esi
sub eax, 0xe7
je 0x1800388f3
sub eax, 0xd
je 0x1800388e4
sub eax, 0x25
je 0x1800388d8
cmp eax, 0x26
jne 0x180038d40
add qword [r10 + 0x1a0], 0xffffffffffffffe8
xorps xmm0, xmm0
movups xmmword [r11 + 4], xmm0
xor eax, eax
movups xmmword [r11 + 0x14], xmm0
movups xmmword [r11 + 0x24], xmm0
movups xmmword [r11 + 0x34], xmm0
movups xmmword [r11 + 0x44], xmm0
movups xmmword [r11 + 0x54], xmm0
mov dword [r11 + 0x64], eax
mov rax, qword [rbp - 0x80]
mov dword [r11], 0xa
movups xmm0, xmmword [rax + 0x20]
movups xmmword [r11 + 0x38], xmm0
movsd xmm1, qword [rax + 0x30]
movsd qword [r11 + 0x48], xmm1
movups xmm0, xmmword [rax + 0x38]
movups xmmword [r11 + 0x50], xmm0
movsd xmm1, qword [rax + 0x48]
movsd qword [r11 + 0x60], xmm1
jmp 0x180038d40
mov word [rbp + 0xaa8], dx
jmp 0x180038d40
mov eax, dword [r11]
mov dword [r10 + 0xd0], eax
jmp 0x180038d40
mov r8d, 0x127
mov dword [rbp - 0x58], 1
lea rdx, [rbp - 0x18]
mov dword [rbp - 0x30], r9d
lea rcx, [rbp - 0x30]
mov dword [rbp - 0x18], r9d
call fcn.18000fc20
mov r10, qword [rsp + 0x48]
mov ebx, 2
mov qword [rbp - 0x70], rax
cmp dword [r10], ebx
je 0x18003859a
lea ecx, [r13 - 1]
mov dword [rsp + 0x68], ecx
nop dword [rax]
nop dword [rax + rax]
lea ecx, [rbx - 1]
mov r8d, 0x13a
mov dword [rbp - 0x48], ecx
lea r9, [rbp - 0x48]
mov rcx, rax
lea rdx, [rsp + 0x68]
call fcn.180055cc0
mov r10, qword [rsp + 0x48]
inc ebx
cmp ebx, dword [r10]
jne 0x180038940
mov qword [rbp - 0x70], rax
jmp 0x18003859a
mov r12d, 1
nop dword [rax + rax]
mov eax, dword [r10]
mov r15d, 0x3a
mov ebx, dword [r11]
mov dword [rsp + 0x68], eax
mov eax, r15d
sub eax, 0x36
je 0x1800389cd
sub eax, 1
je 0x1800389bf
cmp eax, 3
jne 0x180038aaf
mov edi, dword [rsp + 0x68]
mov dword [rbp - 0x54], edi
cmp edi, ebx
jl 0x180038abc
mov edi, ebx
mov dword [rbp - 0x54], ebx
jmp 0x180038abe
lea rax, [rsp + 0x68]
mov qword [rbp - 0x28], rax
jmp 0x180038aaf
mov rax, qword [rbp - 0x28]
mov r14, qword [rax + 0x10]
test r14, r14
je 0x180038aaf
add rax, 0x18
cmp rax, r14
je 0x180038aaf
mov esi, 0xc6
mov eax, esi
sub eax, 0xc6
je 0x180038a87
sub eax, 4
je 0x180038a5c
sub eax, 1
je 0x180038a15
cmp eax, 1
je 0x180038aa7
jmp 0x180038a99
mov rdx, qword [rbp - 0x20]
test rdx, rdx
jne 0x180038a52
mov ecx, 0x95
mov eax, ecx
sub eax, 0x95
je 0x180038a38
sub eax, 1
je 0x180038a48
cmp eax, 1
je 0x180038aa7
jmp 0x180038a48
mov qword [0], r9
mov qword [8], r9
inc ecx
cmp ecx, 0x98
jb 0x180038a23
movups xmm0, xmmword [rdx + 0x18]
movups xmmword [r9], xmm0
jmp 0x180038a99
mov rax, qword [r14 + 0x10]
xor r8d, r8d
mov qword [rsp + 0x30], r9
xor edx, edx
mov qword [rsp + 0x28], rax
mov ecx, 0xc8
mov qword [rsp + 0x20], r9
xor r9d, r9d
call fcn.18004fc60
mov qword [rbp - 0x20], rax
jmp 0x180038a96
dec dword [0x180080da0]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r9d, r9d
inc esi
cmp esi, 0xca
jb 0x1800389f0
mov rax, qword [rbp - 0x28]
mov qword [rax + 0x10], r9
dec r15d
cmp r15d, 0x37
ja 0x180038990
mov ebx, edi
dec ebx
cmp r12d, ebx
jg 0x180038be6
mov edi, dword [rsp + 0x70]
mov r14d, 0x109
cmp r14d, 0x109
je 0x180038b5b
cmp r14d, 0x17cf
je 0x180038afa
cmp r14d, 0x2e95
jne 0x180038bb4
add dword [rbp - 0x78], edi
jmp 0x180038bb4
mov rax, qword [rsp + 0x48]
mov r15d, dword [rbp - 0x58]
neg r15d
mov dword [rbp - 0x58], r15d
mov edi, dword [rax]
mov eax, dword [rbp - 0x78]
sub edi, r12d
imul edi, r15d
mov ebx, eax
lea esi, [rdi + rax]
cmp eax, esi
je 0x180038bb4
lea eax, [r13 - 1]
mov dword [rsp + 0x70], eax
nop dword [rax + rax]
mov rcx, qword [rbp - 0x70]
lea eax, [rbx - 1]
lea r9, [rbp - 0x40]
mov dword [rbp - 0x40], eax
mov r8d, 0x13a
lea rdx, [rsp + 0x70]
call fcn.180055cc0
add ebx, r15d
mov qword [rbp - 0x70], rax
cmp ebx, esi
jne 0x180038b30
jmp 0x180038bb4
mov rax, qword [rbp + 0xa80]
mov r15d, dword [rbp - 0x58]
mov edi, dword [rax]
sub edi, r12d
imul edi, r15d
lea ebx, [rdi + r13]
cmp r13d, ebx
je 0x180038bb1
mov esi, dword [rbp - 0x78]
dec esi
nop dword [rax]
mov rcx, qword [rbp - 0x70]
lea eax, [r13 - 1]
lea r9, [rsp + 0x60]
mov dword [rsp + 0x70], eax
mov r8d, 0x13a
mov dword [rsp + 0x60], esi
lea rdx, [rsp + 0x70]
call fcn.180055cc0
add r13d, r15d
mov qword [rbp - 0x70], rax
cmp r13d, ebx
jne 0x180038b80
mov r13d, ebx
add r14d, 0x16c6
cmp r14d, 0x4452
jbe 0x180038ad3
mov r10, qword [rsp + 0x48]
inc r12d
mov r11, qword [rbp + 0xa80]
xor r9d, r9d
mov dword [rsp + 0x70], edi
mov edi, dword [rbp - 0x54]
jmp 0x180038980
mov r10, qword [rsp + 0x48]
mov r12d, 0x38
mov esi, dword [rbp - 0x68]
mov r14d, dword [rbp - 0x38]
jmp 0x18003859a
cmp esi, 0x237
ja 0x180038cfd
je 0x180038dd3
mov eax, esi
sub eax, 0x195
je 0x180038cbf
sub eax, 0x26
je 0x180038c7d
sub eax, 0x24
je 0x180038c45
cmp eax, 0x32
jne 0x180038d40
mov word [rbp + 0xaaf], cx
mov dword [rbp + 0xab8], 0x630069
jmp 0x180038d40
mov rcx, qword [rbp - 0x70]
lea eax, [r13 - 1]
mov dword [rsp + 0x68], eax
lea r9, [rsp + 0x50]
mov eax, dword [rbp - 0x78]
lea rdx, [rsp + 0x68]
dec eax
mov r8d, 0x13a
mov dword [rsp + 0x50], eax
call fcn.180055cc0
mov r10, qword [rsp + 0x48]
mov qword [rbp - 0x70], rax
jmp 0x18003859a
mov rcx, qword [r10 + reloc.SHLWAPI.dll_SHRegGetIntW]
mov eax, r9d
inc qword [r10 + 0x128]
mov dword [r10 + 0x130], r9d
mov dword [rsp + 0x78], 1
cmp dword [rcx], 2
sete al
mov dword [r10 + 0xfc], eax
lea rax, [rcx + 0x50]
mov qword [r10 + reloc.SHLWAPI.dll_SHRegGetIntW], rax
mov ecx, 0x70
jmp 0x180038d40
mov r8d, 1
lea rdx, [0x1800693d8]
lea rcx, [rbp + 0xaa0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov eax, dword [str.ak_.j]
mov r10, qword [rsp + 0x48]
mov dword [rbp + 0xaaa], eax
movzx eax, word [0x18006a94c]
mov word [rbp + 0xaae], ax
jmp 0x18003859a
mov eax, esi
sub eax, 0x25b
je 0x180038e88
sub eax, 0x32
je 0x180038d2c
cmp eax, 0x7c
jne 0x180038d40
mov eax, 0x2f
mov dword [rbp + 0xac4], 0x6c0038
mov word [rbp + 0xac8], ax
jmp 0x180038d40
mov dword [rbp + 0xabc], 0x640075
mov dword [rbp + 0xac0], 0x350074
add esi, 0x7c
mov dword [rbp - 0x68], esi
cmp esi, r14d
jae 0x180038e91
xor r9d, r9d
jmp 0x1800383f0
mov rax, qword [rsp + 0x48]
mov dword [rsp + 0x78], r15d
mov dword [rax], 1
jmp 0x180038dd3
movups xmm0, xmmword [rdx + 0x20]
lea r9, [rbp - 0x10]
mov dword [rsp + 0x28], 0x10f
movsd xmm1, qword [rdx + 0x30]
lea r8, str.default_etw_session_logfile_path
add qword [r10 + 0x1a0], 0xffffffffffffffe8
lea rcx, [rbp + 0xa80]
mov rax, qword [r10 + 0x1a0]
mov rdx, r10
movaps xmmword [rbp - 0x10], xmm0
movsd qword [rbp], xmm1
movups xmm0, xmmword [rax]
movsd xmm1, qword [rax + 0x10]
lea rax, str.option_broadcast_address__s_
movaps xmmword [rbp + 0xa80], xmm0
movsd qword [rbp + 0xa90], xmm1
mov qword [rsp + 0x20], rax
call fcn.18000f830
mov dword [rsp + 0x78], eax
mov rax, qword [rsp + 0x78]
mov rcx, qword [rbp + 0xd10]
xor rcx, rsp
call fcn.180065820
mov rbx, qword [rsp + 0xe68]
add rsp, 0xe20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea r9, [r10 + 0x178]
mov rax, qword [r9]
lea rbx, [r10 + 0x180]
cmp qword [rbx], rax
jne 0x180038e4a
lea r8, [r10 + 0x170]
mov edx, 0x44
mov rcx, rbx
call fcn.180060df0
test eax, eax
jne 0x180038e45
mov rax, qword [rsp + 0x48]
mov dword [rax], 1
xor r15d, r15d
mov dword [rsp + 0x78], r15d
jmp 0x180038dd3
mov r10, qword [rsp + 0x48]
mov rax, qword [rbx]
mov r13d, 0x16
mov dword [rax], r13d
add qword [rbx], 4
mov rcx, qword [rbp + 0xa80]
lea r8, [rsp + 0x50]
xor eax, eax
mov qword [rsp + 0x20], r10
lea rdx, [rsp + 0x60]
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x50], eax
lea r9d, [rax + 0x5a]
call fcn.18000e550
jmp 0x180038dcf
mov rax, qword [rbp - 0x70]
jmp 0x180038dd8
mov ebx, dword [rsp + 0x58]
mov r15d, dword [rbp - 0x50]
lea r14d, [r15 + 0x492]
mov dword [rsp + 0x60], r14d
cmp r15d, r14d
jae 0x180038dd3
mov esi, dword [rsp + 0x50]
mov eax, 0x2e
mov r12, qword [rbp - 0x20]
mov edi, dword [rsp + 0x50]
lea r13d, [rax - 0x18]
mov r8d, 0x7a
movabs rcx, 0x7fffffffffffffff
lea edx, [r8 - 0xc]
cmp r15d, 0x26a
ja 0x180039013
je 0x180038fe7
cmp r15d, 0x125
ja 0x180038f92
je 0x180038f7c
mov eax, r15d
sub eax, 0x21
je 0x180038f57
sub eax, 0x41
je 0x180038f4a
sub eax, 0x41
je 0x180038f3b
cmp eax, 0x41
lea eax, [rdx - 0x40]
jne 0x18003973f
mov dword [rbp + 0xada], 0x610048
mov word [rbp + 0xade], dx
mov dword [rbp + 0xae0], 0x5f0074
jmp 0x18003973f
mov dword [rbp + 0xad6], 0x5f0068
jmp 0x18003973a
mov word [rbp + 0xad4], r8w
jmp 0x18003973a
mov eax, 0x6c
mov dword [rbp + 0xacc], 0x6e0061
mov word [rbp + 0xaca], ax
mov dword [rbp + 0xad0], 0x2f0067
jmp 0x18003973a
mov dword [rbp + 0xae4], 0x570054
mov word [rbp + 0xae8], ax
jmp 0x18003973f
mov eax, r15d
sub eax, 0x166
je 0x180038fd8
sub eax, 0x41
je 0x180038fc9
sub eax, 0x41
je 0x180038fbf
cmp eax, 0x41
jne 0x18003973a
xor eax, eax
mov byte [rsp + 0x42], 1
mov qword [rbp - 0x80], rax
jmp 0x18003973a
mov byte [rsp + 0x41], 1
jmp 0x18003973a
mov dword [rbp + 0xaee], 0x73
jmp 0x18003973a
mov dword [rbp + 0xaea], 0x650072
jmp 0x18003973a
xorps xmm0, xmm0
mov dword [rbp - 0x48], 0x36
xor eax, eax
movups xmmword [rbp + 0x10], xmm0
mov dword [rbp + 0x70], eax
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
jmp 0x18003973a
cmp r15d, 0x3af
ja 0x180039584
je 0x18003954d
mov eax, r15d
sub eax, 0x2ab
je 0x180039540
sub eax, 0x41
je 0x180039535
sub eax, 0x41
je 0x18003907a
cmp eax, 0x41
jne 0x18003973a
mov rcx, qword [rbp - 0x60]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov r8d, esi
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0xaa0]
mov dword [rbp - 0x40], eax
call qword [sym.imp.WINMM.dll_mmioOpenA]
mov qword [rbp - 0x28], rax
jmp 0x18003973a
cmp qword [r10 + 0x10], 0x35
jb 0x18003952a
mov r15d, edx
nop dword [rax + rax]
cmp r15d, 0x296
ja 0x18003949f
je 0x180039489
cmp r15d, 0x6e
je 0x180039393
cmp r15d, 0xf8
je 0x180039374
cmp r15d, 0x182
je 0x180039222
cmp r15d, 0x20c
jne 0x18003950d
mov rax, qword [r10 + 0x10]
xor edx, edx
mov dword [rsp + 0x50], edx
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], dl
cmp rax, 0x11
jb 0x180039771
add rax, 0xffffffffffffffef
mov esi, 0x24
cmp rax, rsi
cmovb rsi, rax
cmp qword [r10 + 0x18], 0x10
mov rax, r10
jb 0x180039110
mov rax, qword [r10]
lea r14, [rax + 0x11]
cmp rsi, 0xf
ja 0x180039137
mov r8, rsi
mov qword [rbp], rsi
mov rdx, r14
lea rcx, [rbp - 0x10]
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rsi - 0x10], 0
jmp 0x1800391c6
cmp rsi, rcx
ja 0x18003976b
mov rdi, rsi
or rdi, 0xf
cmp rdi, rcx
jbe 0x180039151
mov rdi, rcx
jmp 0x180039159
cmp rdi, 0x16
cmovb rdi, r13
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x180039192
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180039765
mov rcx, rax
call fcn.180065064
test rax, rax
je 0x18003975e
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1800391a4
test rcx, rcx
je 0x1800391a1
call fcn.180065064
mov rbx, rax
jmp 0x1800391a4
mov rbx, rdx
mov r8, rsi
mov qword [rbp], rsi
mov rdx, r14
mov qword [rbp + 8], rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rsi], 0
mov qword [rbp - 0x10], rbx
mov ebx, dword [rsp + 0x58]
or ebx, 1
lea rcx, [0x18007ca88]
lea rdx, [rbp - 0x10]
mov dword [rsp + 0x58], ebx
call fcn.18000a680
mov rax, qword [rbp + 8]
cmp rax, 0x10
jb 0x1800394fe
mov rcx, qword [rbp - 0x10]
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180039218
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003975e
call fcn.1800650a0
jmp 0x1800394fe
mov rax, qword [r10 + 0x10]
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
cmp rax, 0xb
jb 0x180039771
add rax, 0xfffffffffffffff5
mov esi, 6
cmp rax, rsi
cmovb rsi, rax
cmp qword [r10 + 0x18], 0x10
mov rax, r10
jb 0x180039259
mov rax, qword [r10]
lea r14, [rax + 0xb]
cmp rsi, 0xf
ja 0x180039280
mov r8, rsi
mov qword [rbp], rsi
mov rdx, r14
lea rcx, [rbp - 0x10]
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rsi - 0x10], 0
jmp 0x18003930e
cmp rsi, rcx
ja 0x18003976b
mov rdi, rsi
or rdi, 0xf
cmp rdi, rcx
jbe 0x18003929a
mov rdi, rcx
jmp 0x1800392a2
cmp rdi, 0x16
cmovb rdi, r13
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x1800392db
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180039765
mov rcx, rax
call fcn.180065064
test rax, rax
je 0x18003975e
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1800392ec
test rcx, rcx
je 0x1800392e7
call fcn.180065064
jmp 0x1800392e9
xor eax, eax
mov rbx, rax
mov r8, rsi
mov qword [rbp], rsi
mov rdx, r14
mov qword [rbp + 8], rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rsi], 0
mov qword [rbp - 0x10], rbx
mov ebx, dword [rsp + 0x58]
or ebx, 2
lea rdx, [rbp - 0x10]
lea rcx, [0x18007cac8]
mov dword [rsp + 0x58], ebx
call fcn.18000a680
mov rax, qword [rbp + 8]
cmp rax, 0x10
jb 0x180039361
mov rcx, qword [rbp - 0x10]
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003935c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003975e
call fcn.1800650a0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov r12, rax
jmp 0x1800394fe
xor eax, eax
lea rcx, [rbp + 0x80]
xor edx, edx
mov qword [rbp - 0x20], rax
mov r8d, 0xa00
call sub.VCRUNTIME140.dll_memset
jmp 0x1800394fe
mov esi, 0xb
mov byte [rsp + 0x40], 1
cmp qword [r10 + 0x10], rsi
mov r14, r10
mov qword [rbp + 8], 0xf
cmovb rsi, qword [r10 + 0x10]
cmp qword [r10 + 0x18], 0x10
mov byte [rbp - 0x10], 0
jb 0x1800393bf
mov r14, qword [r10]
cmp rsi, 0xf
ja 0x1800393ec
mov r8, rsi
mov qword [rbp], rsi
mov rdx, r14
lea rcx, [rbp - 0x10]
call sub.VCRUNTIME140.dll_memmove
or ebx, 4
mov byte [rbp + rsi - 0x10], 0
lea rcx, [0x18007caa8]
jmp 0x1800391d0
cmp rsi, rcx
ja 0x18003976b
mov rdi, rsi
or rdi, 0xf
cmp rdi, rcx
jbe 0x180039406
mov rdi, rcx
jmp 0x18003940e
cmp rdi, 0x16
cmovb rdi, r13
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x180039447
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180039765
mov rcx, rax
call fcn.180065064
test rax, rax
je 0x18003975e
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x180039458
test rcx, rcx
je 0x180039453
call fcn.180065064
jmp 0x180039455
xor eax, eax
mov rbx, rax
mov r8, rsi
mov qword [rbp], rsi
mov rdx, r14
mov qword [rbp + 8], rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rsi], 0
lea rcx, [0x18007caa8]
mov qword [rbp - 0x10], rbx
mov ebx, dword [rsp + 0x58]
or ebx, 4
jmp 0x1800391d0
xor eax, eax
mov ecx, eax
cmp r12, 0xffffffffffffffff
movzx eax, byte [rsp + 0x40]
cmovne ecx, eax
mov byte [rsp + 0x40], cl
jmp 0x180039503
cmp r15d, 0x320
je 0x1800394dd
cmp r15d, 0x3aa
je 0x18003950d
cmp r15d, 0x434
je 0x1800394c9
cmp r15d, 0x4be
je 0x180038dd3
jmp 0x18003950d
mov edx, dword [rsp + 0x50]
mov rcx, qword [rbp - 0x20]
call sub.SHELL32.dll_SHTestTokenMembership
mov byte [rsp + 0x78], 1
jmp 0x1800394fe
cmp byte [rsp + 0x40], 0
je 0x18003950d
lea r9, [rbp - 0x30]
mov r8d, 0x80
lea rdx, [rbp + 0x80]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_ReadConsoleInputW]
mov r10, qword [rsp + 0x48]
movabs rcx, 0x7fffffffffffffff
add r15d, 0x8a
cmp r15d, 0x548
jb 0x180039090
mov r14d, dword [rsp + 0x60]
mov r15d, dword [rbp - 0x50]
xor edx, edx
mov esi, edx
mov edi, edx
jmp 0x18003973a
xor eax, eax
mov qword [rbp - 0x70], rax
jmp 0x18003973a
mov qword [rbp - 0x60], 0xffffffffffffffff
jmp 0x18003973a
lea rcx, [rbp + 0xab8]
call qword [sym.imp.SHLWAPI.dll_PathIsUNCServerShareW]
movzx eax, byte [rsp + 0x42]
xor edx, edx
cmp dword [rbp - 0x40], edx
mov ecx, edx
cmovne ecx, eax
movzx eax, byte [rsp + 0x41]
mov byte [rsp + 0x42], cl
mov ecx, edx
cmp qword [rbp - 0x28], rcx
cmovne ecx, eax
mov byte [rsp + 0x41], cl
jmp 0x18003973a
mov eax, r15d
sub eax, 0x3f0
je 0x1800395ab
sub eax, 0x41
je 0x1800395a1
cmp eax, 0x41
je 0x180038dd3
jmp 0x18003973a
mov byte [rsp + 0x78], 0
jmp 0x18003973a
cmp byte [rsp + 0x41], 0
je 0x18003960e
mov r13, qword [rbp - 0x28]
mov ebx, 0x5e
nop dword [rax + rax]
cmp ebx, 0x5e
je 0x1800395dd
cmp ebx, 0x31f0
jne 0x1800395fa
mov edx, 0x10
mov rcx, r13
call qword [sym.imp.WINMM.dll_mmioClose]
jmp 0x1800395fa
xor eax, eax
lea rdx, [rbp - 0x10]
xorps xmm0, xmm0
mov dword [rbp], eax
mov rcx, r13
movups xmmword [rbp - 0x10], xmm0
lea r8d, [rax + 0x20]
call qword [sym.imp.WINMM.dll_mmioCreateChunk]
add ebx, 0x3192
cmp ebx, 0x6324
jbe 0x1800395c0
mov r13d, 0x16
mov r8, qword [rbp - 0x70]
lea rax, [rbp + 0xb00]
mov edx, dword [rbp - 0x48]
mov r9d, edi
mov rcx, qword [rbp - 0x80]
mov qword [rsp + 0x20], rax
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
cmp byte [rsp + 0x42], 0
je 0x18003973a
mov r13, qword [rbp - 0x60]
mov ebx, 0x46
cmp ebx, 0x1c6
ja 0x1800396da
je 0x1800396b6
cmp ebx, 0x46
je 0x1800396aa
cmp ebx, 0xc6
je 0x1800396a1
cmp ebx, 0x146
jne 0x180039725
mov r8d, 3
lea rdx, [0x18006a9af]
lea rcx, [rbp + 0xa80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov eax, dword [0x18006a9c8]
mov dword [rbp + 0xa87], eax
movzx eax, byte [0x18006a9cc]
mov byte [rbp + 0xa8b], al
jmp 0x180039725
mov byte [rbp + 0xa84], 0
jmp 0x180039725
mov dword [rbp + 0xa80], 0x61766e49
jmp 0x180039725
movzx eax, word [0x18006a979]
mov word [rbp + 0xa8c], ax
movzx eax, byte [0x18006a97b]
mov byte [rbp + 0xa8e], al
mov byte [rbp + 0xa8f], 0
jmp 0x180039725
cmp ebx, 0x246
je 0x18003971a
cmp ebx, 0x2c6
je 0x1800396fd
cmp ebx, 0x346
jne 0x180039725
mov rcx, r13
call qword [sym.imp.dbghelp.dll_SymCleanup]
jmp 0x180039725
lea r8, [rbp - 0x10]
mov dword [rbp - 0x10], 0x20
lea rdx, [rbp + 0xa80]
mov rcx, r13
call qword [sym.imp.dbghelp.dll_SymGetSymFromName64]
jmp 0x180039725
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
sub ebx, 0xffffff80
cmp ebx, 0x3c6
jb 0x180039642
mov r13d, 0x16
mov eax, 0x2e
add r15d, 0x41
mov dword [rbp - 0x50], r15d
cmp r15d, r14d
jae 0x180038dd3
mov r10, qword [rsp + 0x48]
mov ebx, dword [rsp + 0x58]
jmp 0x180038ec3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180021480
int3
call fcn.1800215c0
int3
call fcn.180021600
int3