Function at 0x140051f40
Capabilities:
Parse credit card information
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb0]
sub rsp, 0x1b0
mov rax, qword [0x1400a0018]
xor rax, rsp
mov qword [rbp + 0xa0], rax
mov r9d, 0x4ae
lea r8, [0x1400a3000]
mov r15d, 0x400
lea rdx, [0x1400a2ff0]
mov rbx, rcx
lea r13, [0x140000000]
mov edi, 1
mov r14d, 0x1001
lea r11d, [r9 - 0x4a]
lea r10d, [r15 + 1]
mov eax, dword [r8 - 0x10]
cmp eax, r15d
jae 0x140051fc0
mov qword [r13 + rax*8 + 0xbe560], rdx
jmp 0x140052367
cmp dword [r8], 6
jne 0x140051fe3
cmp eax, reloc.mfc140u.dll_CFontHolder::GetFontHandle
jb 0x140052367
add eax, 0xffffe9ff
mov qword [r13 + rax*8 + 0xc2bf0], rdx
jmp 0x140052367
cmp dword [r8], 8
jne 0x140052014
cmp eax, 0x1501
jb 0x140052002
add eax, 0xffffeaff
mov qword [r13 + rax*8 + 0xc2bb0], rdx
jmp 0x140052367
add eax, 0xfffffbce
mov qword [r13 + rax*8 + 0xc24a0], rdx
jmp 0x140052367
cmp dword [r8], 7
jne 0x140052037
cmp eax, 0x1701
jb 0x140052367
add eax, 0xffffe8ff
mov qword [r13 + rax*8 + 0xc2b88], rdx
jmp 0x140052367
cmp dword [r8], 0xe
jne 0x14005204f
add eax, 0xfffffc00
mov qword [r13 + rax*8 + 0xc1238], rdx
jmp 0x140052367
cmp dword [r8], 0xd
jne 0x14005207e
cmp eax, r11d
jb 0x14005206c
add eax, 0xfffffb9c
mov qword [r13 + rax*8 + 0xc1008], rdx
jmp 0x140052367
add eax, 0xfffffc00
mov qword [r13 + rax*8 + 0xc0df8], rdx
jmp 0x140052367
cmp dword [r8], 0x26
jne 0x140052096
add eax, 0xfffffb9b
mov qword [r13 + rax*8 + 0xc1f80], rdx
jmp 0x140052367
cmp dword [r8], 0xf
jne 0x1400520b7
cmp eax, r11d
jb 0x140052367
add eax, 0xfffffb9c
mov qword [r13 + rax*8 + 0xc06b8], rdx
jmp 0x140052367
cmp dword [r8], 0x10
jne 0x1400520da
cmp eax, 0x1200
jb 0x140052367
add eax, 0xffffee00
mov qword [r13 + rax*8 + 0xc1e90], rdx
jmp 0x140052367
cmp dword [r8], 0x11
jne 0x1400520fb
cmp eax, r10d
jb 0x140052367
add eax, 0xfffffbff
mov qword [r13 + rax*8 + 0xbe548], rdx
jmp 0x140052367
cmp dword [r8], 0x12
jne 0x14005211e
cmp eax, 0x1000
jb 0x140052367
add eax, 0xfffff000
mov qword [r13 + rax*8 + 0xc17f0], rdx
jmp 0x140052367
cmp dword [r8], 0x13
jne 0x14005213f
cmp eax, r10d
jb 0x140052367
add eax, 0xfffffbff
mov qword [r13 + rax*8 + 0xc1760], rdx
jmp 0x140052367
cmp dword [r8], 0x14
jne 0x140052160
cmp eax, r10d
jb 0x140052367
add eax, 0xfffffbff
mov qword [r13 + rax*8 + 0xc16c0], rdx
jmp 0x140052367
cmp dword [r8], 0x15
jne 0x140052178
add eax, 0xfffffc00
mov qword [r13 + rax*8 + 0xc1250], rdx
jmp 0x140052367
cmp dword [r8], 0x16
jne 0x140052199
cmp eax, r10d
jb 0x140052367
add eax, 0xfffffbff
mov qword [r13 + rax*8 + 0xc1370], rdx
jmp 0x140052367
cmp dword [r8], 0x17
jne 0x1400521bc
cmp eax, 0x1300
jb 0x140052367
add eax, 0xffffed00
mov qword [r13 + rax*8 + 0xc1040], rdx
jmp 0x140052367
cmp dword [r8], 0x18
jne 0x1400521dd
cmp eax, r10d
jb 0x140052367
add eax, 0xfffffbff
mov qword [r13 + rax*8 + 0xc0e30], rdx
jmp 0x140052367
cmp dword [r8], 0x19
jne 0x140052200
cmp eax, reloc.mfc140u.dll_COleCntrFrameWndEx::EnableAutoHidePanes
jb 0x140052367
add eax, 0xffffef00
mov qword [r13 + rax*8 + 0xc0bb0], rdx
jmp 0x140052367
cmp dword [r8], 0x1a
jne 0x140052223
cmp eax, 0x465
jb 0x140052367
add eax, 0xfffffb9b
mov qword [r13 + rax*8 + 0xc0b40], rdx
jmp 0x140052367
cmp dword [r8], 0x1d
jne 0x140052244
cmp eax, r10d
jb 0x140052367
add eax, 0xfffffbff
mov qword [r13 + rax*8 + 0xc0ad0], rdx
jmp 0x140052367
cmp dword [r8], 0x1e
jne 0x140052265
cmp eax, r14d
jb 0x140052367
add eax, 0xffffefff
mov qword [r13 + rax*8 + 0xc09d0], rdx
jmp 0x140052367
cmp dword [r8], 0x1f
jne 0x140052286
cmp eax, r14d
jb 0x140052367
add eax, 0xffffefff
mov qword [r13 + rax*8 + 0xc0840], rdx
jmp 0x140052367
cmp dword [r8], 0x20
jne 0x1400522a7
cmp eax, r10d
jb 0x140052367
add eax, 0xfffffbff
mov qword [r13 + rax*8 + 0xc06e0], rdx
jmp 0x140052367
cmp dword [r8], 0x21
jne 0x1400522ca
cmp eax, 0x1401
jb 0x140052367
add eax, 0xffffebff
mov qword [r13 + rax*8 + 0xc0650], rdx
jmp 0x140052367
cmp dword [r8], 0x22
jne 0x1400522e8
cmp eax, r11d
jb 0x140052367
add eax, 0xfffffb9c
mov qword [r13 + rax*8 + 0xc0620], rdx
jmp 0x140052367
cmp dword [r8], 0x23
jne 0x140052304
cmp eax, 0x700
jb 0x140052367
add eax, 0xfffff900
mov qword [r13 + rax*8 + 0xc0600], rdx
jmp 0x140052367
cmp dword [r8], 0x24
jne 0x14005231e
cmp eax, r10d
jb 0x140052367
add eax, 0xfffffbff
mov qword [r13 + rax*8 + 0xc05e0], rdx
jmp 0x140052367
cmp dword [r8], 0x25
jne 0x14005233a
cmp eax, 0x485
jb 0x140052367
add eax, 0xfffffb7b
mov qword [r13 + rax*8 + 0xc05c0], rdx
jmp 0x140052367
cmp dword [r8], 0
jne 0x140052367
lea ecx, [rax - 0x2001]
cmp ecx, 0xb
ja 0x140052355
mov qword [r13 + rcx*8 + 0xc0560], rdx
jmp 0x140052367
add eax, 0xfffffbff
cmp eax, 0x65
ja 0x140052367
mov qword [r13 + rax*8 + 0xc20c0], rdx
add rdx, 0x38
add r8, 0x38
sub r9, rdi
jne 0x140051faa
mov dword [rsp + 0x30], 0x80
test rbx, rbx
je 0x1400523e5
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rbp + 0x20]
mov rcx, rbx
lea rdx, str.MsgFiltersMask
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1400523e5
xor edx, edx
lea r9, [0x1400be140]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rbp + rcx + 0x20], al
je 0x1400523d9
mov byte [r9], dil
add edx, edi
add r9, rdi
cmp edx, r15d
jl 0x1400523bd
jmp 0x1400523f7
mov r8, r15
lea rcx, [0x1400be140]
mov dl, dil
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x30], 0x1c
test rbx, rbx
je 0x140052467
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rbp]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskRichEdit
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140052467
xor edx, edx
lea r9, [0x1400be060]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rbp + rcx], al
je 0x140052458
mov byte [r9], dil
add edx, edi
add r9, rdi
cmp edx, 0xdd
jl 0x14005243c
jmp 0x14005247c
mov r8d, 0xdd
lea rcx, [0x1400be060]
mov dl, dil
call sub.VCRUNTIME140.dll_memset
mov r15d, 2
movabs r14, 0x101010101010101
mov dword [rsp + 0x30], r15d
test rbx, rbx
je 0x1400524f7
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x48]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskEditEx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1400524f7
xor edx, edx
lea r8, [0x1400be058]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rsp + rcx + 0x48], al
je 0x1400524eb
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, 8
jl 0x1400524cf
jmp 0x1400524fe
mov qword [0x1400be058], r14
mov dword [rsp + 0x30], edi
test rbx, rbx
je 0x140052568
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x38]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskCombo
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140052568
xor edx, edx
lea r8, [0x1400bdd3c]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rsp + rcx + 0x38], al
je 0x14005255c
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, 4
jl 0x140052540
jmp 0x14005256f
mov dword [0x1400bdd3c], r14d
mov dword [rsp + 0x30], r15d
test rbx, rbx
je 0x1400525da
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x4c]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskBtn
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1400525da
xor edx, edx
lea r8, [0x1400be048]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rsp + rcx + 0x4c], al
je 0x1400525ce
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, 0xc
jl 0x1400525b2
jmp 0x1400525e8
mov qword [0x1400be048], r14
mov dword [0x1400be050], r14d
mov dword [rsp + 0x30], r15d
test rbx, rbx
je 0x140052653
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x50]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskCCtl
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140052653
xor edx, edx
lea r8, [0x1400bdca0]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rsp + rcx + 0x50], al
je 0x140052647
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, 0xc
jl 0x14005262b
jmp 0x140052661
mov qword [0x1400bdca0], r14
mov dword [0x1400bdca8], r14d
mov r12d, 3
mov dword [rsp + 0x30], r12d
test rbx, rbx
je 0x1400526d2
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x60]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskFM
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1400526d2
xor edx, edx
lea r8, [0x1400bdc88]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rsp + rcx + 0x60], al
je 0x1400526c6
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, 0x16
jl 0x1400526aa
jmp 0x1400526f3
movdqa xmm0, xmmword [0x140096840]
movq rax, xmm0
mov dword [0x1400bdc98], eax
mov word [0x1400bdc9c], ax
movups xmmword [0x1400bdc88], xmm0
mov dword [rsp + 0x30], 0xd
test rbx, rbx
je 0x140052760
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rbp - 0x40]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskCF
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140052760
xor edx, edx
lea r9, [0x1400bdc20]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rbp + rcx - 0x40], al
je 0x140052754
mov byte [r9], dil
add edx, edi
add r9, rdi
cmp edx, 0x66
jl 0x140052738
jmp 0x140052775
mov r8d, 0x66
lea rcx, [0x1400bdc20]
mov dl, dil
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x30], edi
test rbx, rbx
je 0x1400527df
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x39]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskDlg
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1400527df
xor edx, edx
lea r8, [0x1400bdcfc]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rsp + rcx + 0x39], al
je 0x1400527d3
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, r12d
jl 0x1400527b7
jmp 0x1400527ee
mov word [0x1400bdcfc], r14w
mov byte [0x1400bdcfe], r14b
mov dword [rsp + 0x30], edi
test rbx, rbx
je 0x140052858
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x3a]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskCDlg
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140052858
xor edx, edx
lea r8, [0x1400bdeec]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rsp + rcx + 0x3a], al
je 0x14005284c
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, 7
jl 0x140052830
jmp 0x14005286e
mov dword [0x1400bdeec], r14d
mov word [0x1400bdef0], r14w
mov byte [0x1400bdef2], r14b
mov dword [rsp + 0x30], edi
test rbx, rbx
je 0x1400528d8
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x3b]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskPSD
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1400528d8
xor edx, edx
lea r8, [0x1400bdd34]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rsp + rcx + 0x3b], al
je 0x1400528cc
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, 7
jl 0x1400528b0
jmp 0x1400528ee
mov dword [0x1400bdd34], r14d
mov word [0x1400bdd38], r14w
mov byte [0x1400bdd3a], r14b
mov dword [rsp + 0x30], 6
test rbx, rbx
je 0x14005295b
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rbp - 0x7c]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskPSh
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x14005295b
xor edx, edx
lea r8, [0x1400be020]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rbp + rcx - 0x7c], al
je 0x14005294f
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, 0x28
jl 0x140052933
jmp 0x140052979
movdqa xmm0, xmmword [0x140096840]
movups xmmword [0x1400be020], xmm0
movups xmmword [0x1400be030], xmm0
movq qword [0x1400be040], xmm0
mov dword [rsp + 0x30], edi
mov r15d, 5
test rbx, rbx
je 0x1400529e9
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x3c]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskAni
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1400529e9
xor edx, edx
lea r8, [0x1400bdfa8]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rsp + rcx + 0x3c], al
je 0x1400529dd
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, r15d
jl 0x1400529c1
jmp 0x1400529f7
mov dword [0x1400bdfa8], r14d
mov byte [0x1400bdfac], r14b
mov dword [rsp + 0x30], 4
test rbx, rbx
je 0x140052a65
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x6c]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskHdr
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140052a65
xor edx, edx
lea r8, [0x1400bdf88]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rsp + rcx + 0x6c], al
je 0x140052a59
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, 0x1d
jl 0x140052a3d
jmp 0x140052a8c
movdqa xmm0, xmmword [0x140096840]
movq rax, xmm0
mov qword [0x1400bdf98], rax
mov dword [0x1400bdfa0], eax
mov byte [0x1400bdfa4], al
movups xmmword [0x1400bdf88], xmm0
mov dword [rsp + 0x30], 0xe
test rbx, rbx
je 0x140052af9
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rbp - 0x30]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskTB
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140052af9
xor edx, edx
lea r9, [0x1400bdfb0]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rbp + rcx - 0x30], al
je 0x140052aed
mov byte [r9], dil
add edx, edi
add r9, rdi
cmp edx, 0x69
jl 0x140052ad1
jmp 0x140052b0e
mov r8d, 0x69
lea rcx, [0x1400bdfb0]
mov dl, dil
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x30], 8
test rbx, rbx
je 0x140052b7b
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rbp - 0x60]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskTT
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140052b7b
xor edx, edx
lea r8, [0x1400bdf48]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rbp + rcx - 0x60], al
je 0x140052b6f
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, 0x3b
jl 0x140052b53
jmp 0x140052bb1
movdqa xmm0, xmmword [0x140096840]
movq rax, xmm0
mov qword [0x1400bdf78], rax
mov word [0x1400bdf80], ax
mov byte [0x1400bdf82], al
movups xmmword [0x1400bdf48], xmm0
movups xmmword [0x1400bdf58], xmm0
movups xmmword [0x1400bdf68], xmm0
mov dword [rsp + 0x30], r12d
test rbx, rbx
je 0x140052c1c
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x64]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskStat
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140052c1c
xor edx, edx
lea r8, [0x1400bdf30]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rsp + rcx + 0x64], al
je 0x140052c10
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, 0x14
jl 0x140052bf4
jmp 0x140052c33
movdqa xmm0, xmmword [0x140096840]
movups xmmword [0x1400bdf30], xmm0
movd dword [0x1400bdf40], xmm0
mov dword [rsp + 0x30], r15d
test rbx, rbx
je 0x140052c9e
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x74]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskTrk
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140052c9e
xor edx, edx
lea r8, [0x1400bdf08]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rsp + rcx + 0x74], al
je 0x140052c92
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, 0x23
jl 0x140052c76
jmp 0x140052cc3
movdqa xmm0, xmmword [0x140096840]
movups xmmword [0x1400bdf08], xmm0
mov word [0x1400bdf28], r14w
movups xmmword [0x1400bdf18], xmm0
mov byte [0x1400bdf2a], r14b
mov dword [rsp + 0x30], 2
test rbx, rbx
je 0x140052d31
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x54]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskUpDn
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140052d31
xor edx, edx
lea r8, [0x1400bdef8]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rsp + rcx + 0x54], al
je 0x140052d25
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, 0xe
jl 0x140052d09
jmp 0x140052d47
mov qword [0x1400bdef8], r14
mov dword [0x1400bdf00], r14d
mov word [0x1400bdf04], r14w
mov dword [rsp + 0x30], r12d
test rbx, rbx
je 0x140052db2
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x68]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskProg
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140052db2
xor edx, edx
lea r8, [0x1400bded8]
invalid
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rsp + rcx + 0x68], al
je 0x140052da6
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, 0x11
jl 0x140052d8a
jmp 0x140052dc8
movdqa xmm0, xmmword [0x140096840]
movups xmmword [0x1400bded8], xmm0
mov byte [0x1400bdee8], r14b
mov dword [rsp + 0x30], edi
test rbx, rbx
je 0x140052e32
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x3d]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskHK
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140052e32
xor edx, edx
lea r8, [0x1400bdcbc]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rsp + rcx + 0x3d], al
je 0x140052e26
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, r12d
jl 0x140052e0a
jmp 0x140052e41
mov word [0x1400bdcbc], r14w
mov byte [0x1400bdcbe], r14b
mov dword [rsp + 0x30], 0x1b
test rbx, rbx
je 0x140052eb1
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rbp - 0x20]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskLV
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140052eb1
xor edx, edx
lea r9, [0x1400bde00]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rbp + rcx - 0x20], al
je 0x140052ea2
mov byte [r9], dil
add edx, edi
add r9, rdi
cmp edx, 0xd4
jl 0x140052e86
jmp 0x140052ec6
mov r8d, 0xd4
lea rcx, [0x1400bde00]
mov dl, dil
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x30], 0xa
test rbx, rbx
je 0x140052f33
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rbp - 0x50]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskTV
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140052f33
xor edx, edx
lea r8, [0x1400bddb0]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rbp + rcx - 0x50], al
je 0x140052f27
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, 0x49
jl 0x140052f0b
jmp 0x140052f69
movdqa xmm0, xmmword [0x140096840]
movq rax, xmm0
mov qword [0x1400bddf0], rax
mov byte [0x1400bddf8], al
movups xmmword [0x1400bddb0], xmm0
movups xmmword [0x1400bddc0], xmm0
movups xmmword [0x1400bddd0], xmm0
movups xmmword [0x1400bdde0], xmm0
mov dword [rsp + 0x30], 8
test rbx, rbx
je 0x140052fd6
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rbp - 0x58]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskTab
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140052fd6
xor edx, edx
lea r8, [0x1400bdd70]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rbp + rcx - 0x58], al
je 0x140052fca
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, 0x3f
jl 0x140052fae
jmp 0x140053012
movdqa xmm0, xmmword [0x140096840]
movq rax, xmm0
mov qword [0x1400bdda0], rax
mov dword [0x1400bdda8], eax
mov word [0x1400bddac], ax
mov byte [0x1400bddae], al
movups xmmword [0x1400bdd70], xmm0
movups xmmword [0x1400bdd80], xmm0
movups xmmword [0x1400bdd90], xmm0
mov r12d, 2
mov dword [rsp + 0x30], r12d
test rbx, rbx
je 0x140053083
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x58]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskCbEx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140053083
xor edx, edx
lea r8, [0x1400bdd60]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rsp + rcx + 0x58], al
je 0x140053077
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, 0xe
jl 0x14005305b
jmp 0x140053099
mov qword [0x1400bdd60], r14
mov dword [0x1400bdd68], r14d
mov word [0x1400bdd6c], r14w
mov dword [rsp + 0x30], r15d
test rbx, rbx
je 0x140053104
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x7c]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskMC
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140053104
xor edx, edx
lea r8, [0x1400bdd40]
mov eax, edx
mov ecx, edx
and eax, 7
shr rcx, 3
mov al, byte [rax + r13 + 0x71708]
test byte [rsp + rcx + 0x7c], al
je 0x1400530f8
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, 0x20
jl 0x1400530dc
jmp 0x14005311a
movdqa xmm0, xmmword [0x140096840]
movups xmmword [0x1400bdd40], xmm0
movups xmmword [0x1400bdd50], xmm0
mov dword [rsp + 0x30], 7
test rbx, rbx
je 0x140053187
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rbp - 0x6c]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskDT
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140053187
xor edx, edx
lea r8, [0x1400bdd00]
mov ecx, edx
mov eax, edx
shr rax, 3
and ecx, 7
mov al, byte [rbp + rax - 0x6c]
test byte [rcx + r13 + 0x71708], al
je 0x14005317b
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, 0x32
jl 0x14005315f
jmp 0x1400531ac
movdqa xmm0, xmmword [0x140096840]
movups xmmword [0x1400bdd00], xmm0
mov word [0x1400bdd30], r14w
movups xmmword [0x1400bdd10], xmm0
movups xmmword [0x1400bdd20], xmm0
mov dword [rsp + 0x30], 6
test rbx, rbx
je 0x140053219
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rbp - 0x74]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskRbr
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140053219
xor edx, edx
lea r8, [0x1400bdcd0]
mov ecx, edx
mov eax, edx
shr rax, 3
and ecx, 7
mov al, byte [rbp + rax - 0x74]
test byte [rcx + r13 + 0x71708], al
je 0x14005320d
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, 0x2c
jl 0x1400531f1
jmp 0x14005323f
movdqa xmm0, xmmword [0x140096840]
movups xmmword [0x1400bdcd0], xmm0
movups xmmword [0x1400bdce0], xmm0
movq qword [0x1400bdcf0], xmm0
movd dword [0x1400bdcf8], xmm0
mov dword [rsp + 0x30], r12d
test rbx, rbx
je 0x1400532aa
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x5c]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskPgr
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1400532aa
xor edx, edx
lea r8, [0x1400bdcc0]
mov ecx, edx
mov eax, edx
shr rax, 3
and ecx, 7
mov al, byte [rsp + rax + 0x5c]
test byte [rcx + r13 + 0x71708], al
je 0x14005329e
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, 0xd
jl 0x140053282
jmp 0x1400532bf
mov qword [0x1400bdcc0], r14
mov dword [0x1400bdcc8], r14d
mov byte [0x1400bdccc], r14b
mov dword [rsp + 0x30], edi
test rbx, rbx
je 0x140053329
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x3e]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskIP
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140053329
xor edx, edx
lea r8, [0x1400bdcb4]
mov ecx, edx
mov eax, edx
shr rax, 3
and ecx, 7
mov al, byte [rsp + rax + 0x3e]
test byte [rcx + r13 + 0x71708], al
je 0x14005331d
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, 6
jl 0x140053301
jmp 0x140053338
mov dword [0x1400bdcb4], r14d
mov word [0x1400bdcb8], r14w
mov dword [rsp + 0x30], edi
test rbx, rbx
je 0x1400533a6
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x3f]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskLink
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1400533a6
xor edx, edx
lea r8, [0x1400bdcb0]
lea r15d, [rax + 4]
mov ecx, edx
mov eax, edx
shr rax, 3
and ecx, 7
mov al, byte [rsp + rax + 0x3f]
test byte [rcx + r13 + 0x71708], al
je 0x14005339a
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, r15d
jl 0x14005337e
jmp 0x1400533b3
mov dword [0x1400bdcb0], r14d
mov r15d, 4
mov dword [rsp + 0x30], edi
test rbx, rbx
je 0x14005341d
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x40]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskNAC
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x14005341d
xor edx, edx
lea r8, [0x1400bdcac]
mov ecx, edx
mov eax, edx
shr rax, 3
and ecx, 7
mov al, byte [rsp + rax + 0x40]
test byte [rcx + r13 + 0x71708], al
je 0x140053411
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, r15d
jl 0x1400533f5
jmp 0x140053424
mov dword [0x1400bdcac], r14d
mov dword [rsp + 0x30], edi
test rbx, rbx
je 0x14005348e
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x41]
mov rcx, rbx
lea rdx, str.MsgFiltersMaskDLC
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x14005348e
xor edx, edx
lea r8, [0x1400bdc1c]
mov ecx, edx
mov eax, edx
shr rax, 3
and ecx, 7
mov al, byte [rsp + rax + 0x41]
test byte [rcx + r13 + 0x71708], al
je 0x140053482
mov byte [r8], dil
add edx, edi
add r8, rdi
cmp edx, r15d
jl 0x140053466
jmp 0x140053495
mov dword [0x1400bdc1c], r14d
mov dword [rsp + 0x30], r15d
test rbx, rbx
je 0x1400534fe
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x44]
mov rcx, rbx
lea rdx, str.MsgFilters
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1400534fe
mov ecx, dword [rsp + 0x44]
test dil, cl
mov eax, dword [0x1400bdf2c]
cmovne eax, edi
test r12b, cl
mov dword [0x1400bdf2c], eax
mov eax, dword [0x1400bdef4]
cmovne eax, edi
mov dword [0x1400bdef4], eax
test r15b, cl
je 0x140053510
jmp 0x14005350a
mov dword [0x1400bdf2c], edi
mov dword [0x1400bdef4], edi
mov dword [0x1400bded4], edi
mov dword [rsp + 0x30], r15d
test rbx, rbx
je 0x140053591
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x44]
mov rcx, rbx
lea rdx, str.WinFilters
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140053591
mov ecx, dword [rsp + 0x44]
test dil, cl
mov eax, dword [0x1400be540]
cmovne eax, edi
test r12b, cl
mov dword [0x1400be540], eax
mov eax, dword [0x1400be054]
cmovne eax, edi
test r15b, cl
mov dword [0x1400be054], eax
mov eax, dword [0x1400bdf44]
cmovne eax, edi
mov dword [0x1400bdf44], eax
test cl, 8
je 0x1400535ad
mov dword [0x1400be01c], edi
jmp 0x1400535ad
and dword [0x1400be540], 0
and dword [0x1400be054], 0
and dword [0x1400bdf44], 0
and dword [0x1400be01c], 0
mov dword [rsp + 0x30], r15d
test rbx, rbx
je 0x140053669
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x44]
mov rcx, rbx
lea rdx, str.OutputFilters
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140053669
mov ecx, dword [rsp + 0x44]
bt ecx, 9
mov eax, dword [0x1400bdc14]
cmovb eax, edi
test r12b, cl
mov dword [0x1400bdc14], eax
mov eax, dword [0x1400bdc10]
cmovne eax, edi
test r15b, cl
mov dword [0x1400bdc10], eax
mov eax, dword [0x1400bdc0c]
cmovne eax, edi
test cl, 8
mov dword [0x1400bdc0c], eax
mov eax, dword [0x1400bdc08]
cmovne eax, edi
test cl, 0x10
mov dword [0x1400bdc08], eax
mov eax, dword [0x1400bdc04]
cmovne eax, edi
test cl, 0x20
mov dword [0x1400bdc04], eax
mov eax, dword [0x1400bdc00]
cmovne eax, edi
mov dword [0x1400bdc00], eax
test cl, 0x40
je 0x140053697
mov dword [0x1400bdbac], edi
jmp 0x140053697
and dword [0x1400bdc10], 0
and dword [0x1400bdc08], 0
and dword [0x1400bdc00], 0
and dword [0x1400bdbac], 0
mov dword [0x1400bdc14], edi
mov dword [0x1400bdc0c], edi
mov dword [0x1400bdc04], edi
mov dword [rsp + 0x30], r15d
test rbx, rbx
je 0x1400536e5
lea rax, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rax, [rsp + 0x70]
mov rcx, rbx
lea rdx, str.Lines
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1400536e5
mov ecx, dword [rsp + 0x70]
mov dword [0x1400bdba8], ecx
lea eax, [rcx - 1]
cmp eax, 0xf423f
jbe 0x1400536ef
mov dword [0x1400bdba8], 0x61a8
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.1400615f0
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret