Function at 0x180064410
Capabilities:
Create service
Delete service
Query or enumerate registry key

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x280]
sub rsp, 0x380
mov rax, qword [0x180080a28]
xor rax, rsp
mov qword [rbp + 0x270], rax
mov r13, r9
mov esi, r8d
mov dword [rbp - 0x7c], r8d
mov r14, rdx
mov rdx, rcx
mov qword [rbp - 0x60], rcx
xor r12d, r12d
mov qword [rbp + 0x88], r12
mov qword [rbp + 0x90], ILFindLastID
mov byte [rbp + 0x78], r12b
mov edi, r8d
imul eax, r8d, 0x402
mov dword [rbp - 0x78], eax
movzx ebx, byte [rsp + 0x78]
mov qword [rbp - 0x40], rbx
cmp r8d, eax
ja 0x180064949
mov r15, qword [rbp - 0x58]
mov r12, qword [rbp - 0x58]
mov rsi, qword [rbp - 0x58]
mov r9d, 0x30
lea eax, [r9 + 2]
lea r11, str.c___NULL
lea r8, str.b___NULL
lea rcx, str.a___NULL
cmp edi, 0x2bef
ja 0x18006475d
je 0x18006474f
cmp edi, 0x111
ja 0x180064685
je 0x18006462f
mov eax, edi
sub eax, 0x45
je 0x18006461d
sub eax, 0x4e
je 0x18006460e
sub eax, 0x2b
je 0x180064564
cmp eax, 0x23
jne 0x180064930
mov rcx, rdx
cmp qword [rdx + 0x18], 0x10
jb 0x18006450a
mov rcx, qword [rdx]
movzx eax, word [rdx + 0x60]
mov word [rsp + 0x78], ax
mov r9d, IUnknown_GetWindow
mov r8, r14
lea rdx, [rsp + 0x78]
call fcn.180028c40
test al, al
je 0x1800649a5
xor ecx, ecx
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], rcx
lea rax, [rbp + 0x78]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rcx
mov r9d, SHSetInstanceExplorer
xor r8d, r8d
mov rdx, qword [rbp - 0x60]
call fcn.180011eb0
jmp 0x180064930
test rdx, rdx
jne 0x1800645b8
mov dword [rsp + 0x70], edx
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rdx
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
mov r9d, SHSetInstanceExplorer
xor r8d, r8d
lea rdx, [0x180077149]
xor ecx, ecx
call fcn.18002b8a0
lea r8, str.b___NULL
test r14, r14
jne 0x180064930
xor ecx, ecx
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], r8
mov dword [rsp + 0x70], ecx
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov r9d, SHSetInstanceExplorer
xor r8d, r8d
lea rdx, [0x180077149]
call fcn.18002b8a0
jmp 0x180064930
mov dword [rbp + 0xb0], 0x73006d
jmp 0x180064930
test rdx, rdx
je case.0x1800649a3.164
lea r12, [rdx - 8]
jmp 0x180064930
test rdx, rdx
jne 0x180064930
mov dword [rsp + 0x70], edx
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rdx
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
mov r9d, SHSetInstanceExplorer
xor r8d, r8d
lea rdx, [0x180077149]
xor ecx, ecx
call fcn.18002b8a0
jmp 0x180064930
cmp edi, 0xed3
je 0x180064746
cmp edi, 0x1d61
je 0x1800646e8
cmp edi, 0x1f95
je 0x1800646d9
cmp edi, 0x28d2
jne 0x180064930
mov r8, r14
mov ecx, 0x3c
call fcn.180049ee0
mov dword [rsp + 0x70], eax
xor r9d, r9d
lea r8, [rsp + 0x70]
lea edx, [r9 + 0x4f]
xor ecx, ecx
call fcn.18004f620
mov dword [rbp - 0x80], eax
jmp 0x180064930
mov dword [rbp + 0xb4], 0x630076
jmp 0x180064930
mov ecx, 0xc5
nop dword [rax]
cmp ecx, 0xc5
je 0x18006472f
cmp ecx, 0x845c
je 0x18006471a
cmp ecx, 0x107f3
jne 0x180064733
cmp dword [0x180080b54], 0
jne 0x180064733
sub qword [0x180080b58], rsi
jmp 0x180064733
mov rdx, rsi
and edx, 3
je 0x180064733
mov eax, 4
sub rax, rdx
add rsi, rax
jmp 0x180064733
lea rsi, [r15 + 8]
add ecx, 0x8397
cmp ecx, 0x18ac5
jbe 0x1800646f0
jmp 0x180064930
mov r15, qword [r12]
jmp 0x180064930
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x180064930
cmp edi, 0x5d99
ja 0x1800648c3
je 0x1800648ba
cmp edi, 0x3057
je 0x180064869
cmp edi, 0x3aa7
je 0x1800647f1
cmp edi, 0x3e97
je 0x1800647e2
cmp edi, 0x50e6
jne 0x180064930
mov ebx, dword [rbp - 0x80]
mov rdx, qword [rbp + 0x90]
cmp rdx, 0x10
jb 0x1800653e1
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800653dc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800653dc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov dword [rbp + 0xb8], 0x310072
jmp 0x180064930
test r14, r14
jne 0x180064845
xor ecx, ecx
mov dword [rsp + 0x70], ecx
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], r8
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov r9d, SHSetInstanceExplorer
xor r8d, r8d
lea rdx, [0x180077149]
call fcn.18002b8a0
lea r11, str.c___NULL
test r13, r13
jne 0x180064930
xor ecx, ecx
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], r11
jmp 0x1800645d7
mov rax, qword [r14]
mov qword [rbp - 0x70], rax
lea r9, [rbp - 0x20]
mov r8d, 0xc8
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x70]
call fcn.1800233a0
test al, al
jne 0x180064930
mov eax, 0xa3
cmp eax, 0xa3
je 0x1800648a8
cmp eax, 0x1978
je case.0x1800649a3.164
jmp 0x1800648ac
mov byte [rbp - 0x80], 0
add eax, 0x18d5
cmp eax, 0x31aa
jbe 0x180064894
jmp 0x180064930
mov word [rbp + 0xbc], ax
jmp 0x180064930
cmp edi, 0x5fcd
je 0x180064903
cmp edi, 0x743d
je 0x1800649b0
cmp edi, 0x7c9b
je 0x1800648f9
cmp edi, 0x9b9d
jne 0x180064930
xor eax, eax
mov word [rbp + 0xc0], ax
mov word [rbp + 0x118], ax
jmp 0x180064930
mov word [rbp + 0xbe], r9w
jmp 0x180064930
mov rax, qword [r14]
mov qword [rbp - 0x70], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
mov r9d, 0x4f
mov r8, qword [rbp - 0x38]
lea rdx, [rbp + 0x78]
mov rcx, r13
call fcn.180059e70
mov rbx, rax
mov qword [rbp - 0x40], rax
imul eax, dword [rbp - 0x7c], 0x36
add edi, eax
mov rdx, qword [rbp - 0x60]
cmp edi, dword [rbp - 0x78]
jbe 0x180064498
mov esi, dword [rbp - 0x7c]
xor r12d, r12d
lea eax, [rsi + 0x13]
mov dword [rbp - 0x48], eax
cmp esi, eax
jae case.0x1800649a3.164
lea r10, [0x180000000]
mov edi, 0x6d
lea r9d, [rdi - 8]
lea r8d, [rdi - 0x4d]
lea r15d, [rdi - 0x3f]
lea r14d, [rdi - 5]
lea r11d, [rdi - 1]
mov r13, qword [rbp - 0x58]
nop dword [rax + rax]
lea eax, [rsi - 0x93]
cmp eax, 0x4f
ja case.0x1800649a3.155
movzx eax, byte [r10 + rax + 0x65460]
mov ecx, dword [r10 + rax*4 + 0x65414]
add rcx, r10
jmp rcx
mov byte [rbp - 0x80], 0
jmp case.0x1800649a3.164
mov r9, r13
mov r8d, ILAppendID
mov rcx, r14
call fcn.18000c4c0
mov dword [rsp + 0x70], eax
xor r9d, r9d
lea r8, [rsp + 0x70]
lea edx, [r9 + 0x4f]
xor ecx, ecx
call fcn.18004f620
mov rbx, rax
jmp 0x18006479a
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x38]
xor r8d, r8d
xor edx, edx
mov ecx, edi
call fcn.180067080
mov byte [rbp - 0x80], bl
jmp 0x180065346
movups xmm0, xmmword [rbp + 0x18]
movups xmmword [rbp + 0x98], xmm0
movsd xmm1, qword [rbp + 0x28]
movsd qword [rbp + 0xa8], xmm1
jmp case.0x1800649a3.155
mov word [rbp + 0xd4], r12w
jmp case.0x1800649a3.155
lea rax, [rbp + 0x118]
mov qword [rbp + 0xa0], rax
jmp case.0x1800649a3.155
mov eax, 0x9e
cmp eax, 0x9e
je 0x180065372
add eax, 0xbb
cmp eax, 0x159
jb 0x180064a43
mov r8d, 1
lea rdx, [0x180078188]
lea rcx, [rbp + 0x118]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp 0x180065346
lea rax, [rbp + 0xc8]
mov qword [rbp + 0xa8], rax
jmp case.0x1800649a3.155
movabs rax, 0x61006500620069
mov qword [rbp + 0x11a], rax
jmp case.0x1800649a3.155
mov word [rbp + 0x122], r12w
jmp case.0x1800649a3.155
lea rax, [rbp + 0xb0]
mov qword [rbp + 0x98], rax
jmp case.0x1800649a3.155
mov dword [rbp + 0xd4], 0x320033
mov word [rbp + 0xd8], r12w
jmp case.0x1800649a3.155
mov qword [rbp - 0x18], 0xffffffff80000001
jmp case.0x1800649a3.155
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x2c]
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x24]
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.SHLWAPI.dll_SHQueryInfoKeyA]
jmp 0x180065346
mov dword [rsp + 0x70], r12d
mov rdi, r12
mov qword [rbp - 0x68], r12
nop word [rax + rax]
mov qword [rbp + 0x48], r12
mov qword [rbp + 0x50], 7
mov word [rbp + 0x38], r12w
mov eax, 0x5c
mov dword [rbp - 0x78], eax
nop dword [rax]
add eax, 0xffffffa4
cmp eax, 0x1d
ja case.0x180064b57.117
mov ecx, dword [r10 + rax*4 + 0x654b0]
add rcx, r10
jmp rcx
mov dword [rbp + 0xfc], 0x650072
jmp case.0x180064b57.117
mov ecx, r12d
movzx eax, byte [rsp + 0x78]
cmp qword [rbp - 0x70], 0
cmovne ecx, eax
mov byte [rsp + 0x78], cl
jmp case.0x180064b57.117
movsd xmm0, qword [0x1800781a2]
movsd qword [rbp + 0x132], xmm0
movzx eax, word [0x1800781aa]
mov word [rbp + 0x13a], ax
jmp case.0x180064b57.117
mov dword [rbp + 0x110], 0x640025
jmp case.0x180064b57.117
mov r8d, 3
lea rdx, [0x1800774e8]
lea rcx, [rbp + 0x38]
call fcn.18002a670
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rax
jmp case.0x180064b57.117
mov dword [rbp + 0xf6], 0x3a006f
mov word [rbp + 0xfa], r8w
jmp case.0x180064b57.117
mov dword [rbp + 0xec], 0x5f0074
jmp case.0x180064b57.117
mov word [rbp + 0x114], r12w
jmp case.0x180064b57.117
movsd xmm0, qword [0x18007823e]
movsd qword [rbp + 0x13c], xmm0
movzx eax, word [0x180078246]
mov word [rbp + 0x144], ax
jmp case.0x180064b57.117
mov dword [rbp + 0x108], 0x6e0069
mov dword [rbp + 0x10c], 0x200067
jmp case.0x180064b57.117
mov eax, dword [0x18007827e]
mov dword [rbp + 0x146], eax
movzx eax, word [0x180078282]
mov word [rbp + 0x14a], ax
jmp case.0x180064b57.117
mov word [rbp + 0x156], r12w
jmp case.0x180064b57.117
mov r8d, 1
lea rdx, [0x1800782aa]
lea rcx, [rbp + 0x130]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov word [rbp + 0x132], r12w
jmp case.0x180064b57.117
cmp byte [rsp + 0x78], 0
je case.0x180064b57.117
mov edi, 0xf2
mov rbx, qword [rbp - 0x70]
mov eax, edi
sub eax, 0xf1
je 0x180064cd5
cmp eax, 1
jne 0x180064ce7
lea r8, [rbp - 0x10]
lea edx, [rax + 3]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_SetServiceObjectSecurity]
jmp 0x180064ce7
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_DeleteService]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
dec edi
cmp edi, 0xf0
ja 0x180064cb5
mov rbx, qword [rbp - 0x40]
jmp 0x180065252
mov eax, 0x74
mov word [rbp + 0x100], ax
jmp case.0x180064b57.117
mov eax, 0x49
mov word [rbp + 0xf0], ax
mov dword [rbp + 0xf2], 0x66006e
jmp case.0x180064b57.117
mov rdx, qword [rbp + rdi*8 + 0x98]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], 0
jne 0x180064d35
lea rcx, [rbp + 0x38]
call fcn.18002a670
jmp case.0x180064b57.117
mov word [rbp + 0x14c], r12w
jmp case.0x180064b57.117
movsd xmm0, qword [0x1800782dc]
movsd qword [rbp + 0x14c], xmm0
movzx eax, word [0x1800782e4]
mov word [rbp + 0x154], ax
jmp case.0x180064b57.117
mov rsi, qword [rbp + 0x48]
mov rcx, qword [rbp + 0x50]
cmp rsi, rcx
jae 0x180064dac
lea rax, [rsi + 1]
mov qword [rbp + 0x48], rax
lea rax, [rbp + 0x38]
cmp rcx, 8
cmovae rax, qword [rbp + 0x38]
mov dword [rax + rsi*2], 0x2e
jmp case.0x180064b57.117
movabs rdx, 0x7ffffffffffffffe
mov rax, rdx
sub rax, rsi
cmp rax, 1
jb 0x18006540d
lea r12, [rsi + 1]
mov r14, qword [rbp + 0x50]
mov rdi, r12
or rdi, 7
cmp rdi, rdx
jbe 0x180064ddf
mov rdi, rdx
jmp 0x180064e00
mov rcx, r14
shr rcx, 1
mov rax, rdx
sub rax, rcx
cmp r14, rax
jbe 0x180064df5
mov rdi, rdx
jmp 0x180064e00
lea rax, [r14 + rcx]
cmp rdi, rax
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp + 0x38]
call fcn.18002a570
mov r15, rax
mov qword [rbp + 0x48], r12
mov qword [rbp + 0x50], rdi
add rsi, rsi
mov r8, rsi
mov rcx, rax
cmp r14, 8
jb 0x180064e7c
mov rdi, qword [rbp + 0x38]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov dword [r15 + rsi], 0x2e
xor r12d, r12d
lea rdx, [r14*2 + 2]
cmp rdx, 0x1000
jb 0x180064e6b
add rdx, 0x27
mov rcx, qword [rdi - 8]
sub rdi, rcx
lea rax, [rdi - 8]
cmp rax, 0x1f
ja 0x1800653ce
mov rdi, rcx
mov rcx, rdi
call fcn.180071f98
mov qword [rbp + 0x38], r15
jmp 0x180065248
lea rdx, [rbp + 0x38]
call sub.VCRUNTIME140.dll_memcpy
mov dword [r15 + rsi], 0x2e
xor r12d, r12d
mov qword [rbp + 0x38], r15
jmp 0x180065248
mov byte [rsp + 0x78], 1
jmp case.0x180064b57.117
mov eax, 0x75
mov word [rbp + 0x102], ax
mov dword [rbp + 0x104], 0x6e0072
jmp case.0x180064b57.117
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], reloc.SHELL32.dll_ILFindLastID
mov r9d, 0xf01ff
lea r8, [rbp + 0xe0]
lea rdx, [rbp + 0x130]
mov rcx, r13
call qword [sym.imp.ADVAPI32.dll_CreateServiceW]
mov qword [rbp - 0x70], rax
lea rcx, [rbp + 0x38]
cmp qword [rbp + 0x50], 8
cmovae rcx, qword [rbp + 0x38]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov qword [rbp - 0x58], rax
jmp case.0x180064b57.117
cmp qword [rbp - 0x58], 0
jne case.0x180064b57.117
mov edi, ILClone
cmp edi, 0x11
ja case.0x180064f5d.2
mov eax, edi
mov ecx, dword [r10 + rax*4 + 0x65528]
add rcx, r10
jmp rcx
mov word [rbp + 0x1d], r8w
mov eax, 0x66
mov word [rbp + 0x1e], ax
jmp case.0x180064f5d.2
mov eax, 0x45
mov word [rbp + 0x18], ax
mov dword [rbp + 0x19], 0x726f7272
jmp case.0x180064f5d.2
mov byte [rbp - 0x80], 0
jmp case.0x180064f5d.2
mov word [rbp + 0x2a], r8w
mov eax, 0x6572
mov word [rbp + 0x2b], ax
jmp case.0x180064f5d.2
mov word [rbp + 0x28], r14w
mov word [rbp + 0x29], r9w
jmp case.0x180064f5d.2
lea rcx, [rbp - 0x74]
call qword [sym.imp.SHELL32.dll_ILFindLastID]
mov r9d, dword [rbp - 0x4c]
lea r8, [rbp - 0x50]
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x18]
call qword [sym.imp.SHLWAPI.dll_UrlApplySchemeA]
mov r8d, 0x20
lea r9d, [r8 + 0x45]
lea r10, [0x180000000]
lea r11d, [r8 + 0x4c]
jmp case.0x180064f5d.2
mov dword [rbp - 0x50], 0x104
jmp case.0x180064f5d.2
mov eax, 0x73
mov word [rbp + 0x21], ax
jmp case.0x180064f5d.2
xor eax, eax
mov word [rbp - 0x74], ax
mov byte [rbp - 0x72], al
mov dword [rbp - 0x4c], 1
jmp case.0x180064f5d.2
mov word [rbp + 0x1f], r11w
mov eax, 0x75
mov word [rbp + 0x20], ax
jmp case.0x180064f5d.2
mov word [rbp + 0x31], r11w
mov word [rbp + 0x32], r9w
jmp case.0x180064f5d.2
mov eax, 0x6d
mov word [rbp + 0x2f], ax
mov eax, 0x70
mov word [rbp + 0x30], ax
jmp case.0x180064f5d.2
mov eax, 0x6173
mov word [rbp + 0x2d], ax
jmp case.0x180064f5d.2
mov word [rbp + 0x22], r14w
mov eax, 0x69
mov word [rbp + 0x23], ax
jmp case.0x180064f5d.2
mov eax, 0x6e
mov word [rbp + 0x24], ax
mov dword [rbp + 0x25], 0x742067
jmp case.0x180064f5d.2
mov eax, 0x72
mov word [rbp + 0x33], ax
mov word [rbp + 0x34], r15w
dec edi
lea eax, [rdi + 0x63]
cmp eax, 0x62
ja 0x180064f47
jmp 0x180065252
mov qword [rbp - 0x70], r12
jmp case.0x180064b57.117
mov dword [rbp + 0xe0], 0x610070
mov eax, 0x78
mov word [rbp + 0xe4], ax
jmp case.0x180064b57.117
mov eax, 0x5f
mov word [rbp + 0xe6], ax
jmp case.0x180064b57.117
mov dword [rbp + 0xe8], 0x650047
jmp case.0x180064b57.117
mov rsi, qword [rdx + 0x10]
mov rdi, rdx
cmp qword [rdx + 0x18], 8
jb 0x1800650ee
mov rdi, qword [rdx]
cmp rsi, 8
jae 0x180065107
movups xmm0, xmmword [rdi]
movups xmmword [rbp + 0x18], xmm0
mov r15d, 7
mov r13, qword [rbp + 0x18]
jmp 0x180065146
mov r15, rsi
or r15, 7
movabs rax, 0x7ffffffffffffffe
cmp r15, rax
cmova r15, rax
lea rdx, [r15 + 1]
lea rcx, [rbp + 0x18]
call fcn.18002a570
mov r13, rax
mov qword [rbp + 0x18], rax
lea r8, [rsi*2 + 2]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x28], rsi
lea r14, [rbp + 0x18]
cmp r15, 8
cmovae r14, r13
cmp rsi, 8
jae 0x18006516e
movups xmm0, xmmword [r14]
mov qword [rbp + 0x70], 7
jmp 0x1800651b2
mov rdi, rsi
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
cmova rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp + 0x58]
call fcn.18002a570
mov qword [rbp + 0x58], rax
lea r8, [rsi*2 + 2]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x70], rdi
movups xmm0, xmmword [rbp + 0x58]
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x68], rsi
mov rcx, qword [rbp + 0x50]
cmp rcx, 8
jb 0x1800651fa
lea rdx, [rcx*2 + 2]
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800651f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800653c7
call fcn.180071f98
movups xmm0, xmmword [rbp + 0x18]
movups xmmword [rbp + 0x38], xmm0
movups xmm0, xmmword [rbp + 0x68]
movups xmmword [rbp + 0x48], xmm0
cmp r15, 8
jb 0x180065245
lea rdx, [r15*2 + 2]
mov rax, r13
cmp rdx, 0x1000
jb 0x18006523d
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800653ce
mov rcx, r13
call fcn.180071f98
mov r13, r12
mov r14d, 0x68
lea r15d, [r14 - 0x3a]
mov rdi, qword [rbp - 0x68]
mov eax, dword [rbp - 0x78]
inc eax
mov dword [rbp - 0x78], eax
cmp eax, 0x7a
mov rdx, qword [rbp - 0x60]
mov r8d, 0x20
lea r9d, [r8 + 0x45]
lea r10, [0x180000000]
lea r11d, [r8 + 0x4c]
jb 0x180064b40
mov rcx, qword [rbp + 0x50]
cmp rcx, 8
jb 0x1800652c0
lea rdx, [rcx*2 + 2]
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800652bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800653d5
call fcn.180071f98
mov ecx, dword [rsp + 0x70]
inc ecx
mov dword [rsp + 0x70], ecx
inc rdi
mov qword [rbp - 0x68], rdi
cmp ecx, 3
mov rdx, qword [rbp - 0x60]
mov r8d, 0x20
lea r9d, [r8 + 0x45]
lea r10, [0x180000000]
lea r11d, [r8 + 0x4c]
jb 0x180064b20
mov esi, dword [rbp - 0x7c]
lea edi, [r8 + 0x4d]
jmp 0x180065354
mov r8d, 5
lea rdx, [0x180078348]
lea rcx, [rbp + 0xc8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov eax, 0x79
mov word [rbp + 0xd2], ax
jmp 0x180065346
mov r8d, 3
lea rdx, [0x1800783be]
lea rcx, [rbp + 0x118]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov word [rbp + 0xc8], r12w
mov r8d, 0x20
lea r9d, [r8 + 0x45]
lea r11d, [r8 + 0x4c]
lea r10, [0x180000000]
inc esi
mov dword [rbp - 0x7c], esi
cmp esi, dword [rbp - 0x48]
jae case.0x1800649a3.164
mov rdx, qword [rbp - 0x60]
jmp 0x180064980
mov byte [rbp - 0x80], 1
jmp case.0x1800649a3.164
mov rdx, qword [rbp + 0x50]
cmp rdx, 8
jb case.0x1800649a3.164
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800653bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800653bd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180071f98
jmp case.0x1800649a3.164
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.180071f98
mov eax, ebx
mov rcx, qword [rbp + 0x270]
xor rcx, rsp
call fcn.180072740
mov rbx, qword [rsp + 0x3d0]
add rsp, 0x380
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1800254c0
nop
nop
pop rdx
invalid