Function at 0x18001aee0
Capabilities:
Persist via run registry key
Query or enumerate registry value

Disassembly:
mov byte [rsp + 0x18], r8b
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xa0
mov qword [rbp + 0x17], 0xfffffffffffffffe
mov qword [rsp + 0xe0], rbx
movzx r13d, dl
mov r12, rcx
mov dword [rbp + 3], 0
mov eax, dword [0x18006aa58]
test al, 1
jne 0x18001af5b
or eax, 1
mov dword [0x18006aa58], eax
lea rcx, [0x180066048]
mov rax, qword [0x180066048]
call qword [rax + 0x18]
add rax, 0x18
mov qword [0x18006aa60], rax
lea rcx, [0x1800493a0]
call fcn.1800296b4
mov eax, dword [0x18006aa58]
test al, 2
jne 0x18001af96
or eax, 2
mov dword [0x18006aa58], eax
lea rcx, [0x180066048]
mov rax, qword [0x180066048]
call qword [rax + 0x18]
add rax, 0x18
mov qword [0x18006aa68], rax
lea rcx, [0x180049380]
call fcn.1800296b4
mov eax, dword [0x18006aa58]
test al, 4
jne 0x18001afcb
or eax, 4
mov dword [0x18006aa58], eax
lea rcx, [0x180066048]
mov rax, qword [0x180066048]
call qword [rax + 0x18]
add rax, 0x18
mov qword [0x18006aa70], rax
lea rcx, [0x180049360]
call fcn.1800296b4
mov rax, qword [0x18006aa68]
cmp dword [rax - 0x10], 0
jne 0x18001bc0c
xor r15d, r15d
lea rcx, [0x180066048]
mov rax, qword [0x180066048]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x39], rbx
lea rcx, [0x180066048]
mov rax, qword [0x180066048]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x41], rax
lea rax, [rbp - 0x49]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.Volatile_Environment
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea r14d, [r15 + 1]
or rsi, 0xffffffffffffffff
test eax, eax
jne 0x18001b3a1
mov rcx, qword [rbp - 0x49]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rax, [rbp - 0x49]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerShell_Folders
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18001b344
mov dword [rbp + 0x7f], 0x104
mov ecx, r14d
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x104
or eax, ecx
jge 0x18001b0aa
mov edx, 0x104
lea rcx, [rbp - 0x39]
call fcn.180002c50
mov rbx, qword [rbp - 0x39]
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rbp - 0x31]
xor r8d, r8d
lea rdx, str.AppData
mov rcx, qword [rbp - 0x49]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x18001b0ff
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.180029cf0
test eax, eax
js 0x18001b0f4
cmp eax, dword [rbx - 0xc]
jg 0x18001b0f4
mov dword [rbx - 0x10], eax
cdqe
mov byte [rax + rbx], 0
jmp 0x18001b150
mov ecx, 0x80070057
call fcn.180002bd0
int3
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], 0
je 0x18001b150
cmp dword [rdx + 0x10], 0
jge 0x18001b12f
cmp dword [rbx - 0xc], 0
jge 0x18001b123
mov ecx, 0x80070057
call fcn.180002bd0
int3
mov dword [rbx - 0x10], 0
mov byte [rbx], 0
jmp 0x18001b150
lock add dword [rdx + 0x10], 0xffffffff
jg 0x18001b13f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x39], rbx
mov dword [rbp + 0x7f], 0x104
mov rax, qword [0x18006aa60]
mov edx, r14d
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, 0x104
or ecx, edx
jge 0x18001b189
mov edx, 0x104
lea rcx, [0x18006aa60]
call fcn.180002c50
mov rax, qword [0x18006aa60]
lea rcx, [rbp + 0x7f]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x31]
xor r8d, r8d
lea rdx, str.Local_AppData
mov rcx, qword [rbp - 0x49]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x18001b1f1
mov rcx, qword [0x18006aa60]
movsxd rdx, dword [rcx - 0xc]
call fcn.180029cf0
test eax, eax
js 0x18001b1e6
mov rcx, qword [0x18006aa60]
cmp eax, dword [rcx - 0xc]
jg 0x18001b1e6
mov dword [rcx - 0x10], eax
movsxd rcx, eax
mov rax, qword [0x18006aa60]
mov byte [rcx + rax], 0
jmp 0x18001b257
mov ecx, 0x80070057
call fcn.180002bd0
int3
mov rax, qword [0x18006aa60]
lea rdx, [rax - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], 0
je 0x18001b257
cmp dword [rdx + 0x10], 0
jge 0x18001b22f
cmp dword [rax - 0xc], 0
jge 0x18001b21c
mov ecx, 0x80070057
call fcn.180002bd0
int3
mov dword [rax - 0x10], 0
mov rax, qword [0x18006aa60]
mov byte [rax], 0
jmp 0x18001b257
lock add dword [rdx + 0x10], 0xffffffff
jg 0x18001b23f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
add rax, 0x18
mov qword [0x18006aa60], rax
mov rbx, qword [rbp - 0x39]
mov dword [rbp + 0x7f], 0x104
mov rax, qword [rbp - 0x41]
mov ecx, r14d
sub ecx, dword [rax - 8]
mov eax, dword [rax - 0xc]
sub eax, 0x104
or eax, ecx
jge 0x18001b282
mov edx, 0x104
lea rcx, [rbp - 0x41]
call fcn.180002c50
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x28], rax
mov rdi, qword [rbp - 0x41]
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x31]
xor r8d, r8d
lea rdx, str.A520A1A4_1780_4FF6_BD18_167343C5AF16
mov rcx, qword [rbp - 0x49]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x18001b2db
movsxd rdx, dword [rdi - 0xc]
mov rcx, rdi
call fcn.180029cf0
test eax, eax
js 0x18001b2d0
cmp eax, dword [rdi - 0xc]
jg 0x18001b2d0
mov dword [rdi - 0x10], eax
cdqe
mov byte [rax + rdi], 0
jmp 0x18001b338
mov ecx, 0x80070057
call fcn.180002bd0
int3
mov rdx, qword [0x18006aa60]
lea rcx, [rdx - 0x18]
mov rdi, qword [rbp - 0x41]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x18001b338
cmp dword [rdi + 0x10], 0
jl 0x18001b32b
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x18001b32b
call fcn.180002110
mov rbx, rax
lock add dword [rdi + 0x10], 0xffffffff
jg 0x18001b31d
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rVariantCopy + 8]
lea rax, [rbx + 0x18]
mov qword [rbp - 0x41], rax
mov rbx, qword [rbp - 0x39]
jmp 0x18001b338
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x41]
call fcn.180002020
mov rcx, qword [rbp - 0x49]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x18001b3a1
mov rdx, qword [0x18006aa60]
lea rcx, [rdx - 0x18]
mov rdi, qword [rbp - 0x41]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x18001b3a1
cmp dword [rdi + 0x10], 0
jl 0x18001b394
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x18001b394
call fcn.180002110
mov rbx, rax
lock add dword [rdi + 0x10], 0xffffffff
jg 0x18001b386
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rVariantCopy + 8]
lea rax, [rbx + 0x18]
mov qword [rbp - 0x41], rax
mov rbx, qword [rbp - 0x39]
jmp 0x18001b3a1
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x41]
call fcn.180002020
call fcn.18001aca0
lea rdi, str.Software_
test al, al
je 0x18001b771
movzx edi, r14b
lea rax, [rbp - 0x49]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftInternet_ExplorerMain
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18001b4d5
mov dword [rbp + 0x7f], 0x104
mov ecx, r14d
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x104
or eax, ecx
jge 0x18001b412
mov edx, 0x104
lea rcx, [rbp - 0x39]
call fcn.180002c50
mov rbx, qword [rbp - 0x39]
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rbp - 0x31]
xor r8d, r8d
lea rdx, str.Isolation
mov rcx, qword [rbp - 0x49]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x18001b4c2
mov eax, dword [0x180069c80]
imul eax, eax
and eax, 0x8000000f
jge 0x18001b457
dec eax
or eax, 0xfffffff0
inc eax
cmp eax, 0xa
jne 0x18001b473
call fcn.1800289f8
mov ecx, dword [0x180069c80]
cmp ecx, eax
jne 0x18001b473
dec ecx
mov dword [0x180069c80], ecx
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.180029cf0
test eax, eax
js 0x18001b4b7
cmp eax, dword [rbx - 0xc]
jg 0x18001b4b7
mov dword [rbx - 0x10], eax
cdqe
mov byte [rax + rbx], 0
xor dil, dil
cmp dword [rbx - 0x10], 0
jl 0x18001b4c2
lea rdx, str.PMIL
mov rcx, rbx
call fcn.18002aa38
test rax, rax
je 0x18001b4c2
cmp eax, ebx
jne 0x18001b4c2
mov r15d, r14d
jmp 0x18001b4c2
mov ecx, 0x80070057
call fcn.180002bd0
int3
mov rcx, qword [rbp - 0x49]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test dil, dil
je 0x18001b5a5
lea rax, [rbp - 0x49]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftInternet_ExplorerAdvancedOptionsCRYPTOPROTECTEDMODESECURITY
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18001b76a
mov dword [rbp + 0x7f], 0x104
sub r14d, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x104
or eax, r14d
jge 0x18001b52d
mov edx, 0x104
lea rcx, [rbp - 0x39]
call fcn.180002c50
mov rbx, qword [rbp - 0x39]
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rbp - 0x31]
xor r8d, r8d
lea rdx, str.DefaultValue
mov rcx, qword [rbp - 0x49]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.180029cf0
test eax, eax
js 0x18001b75f
cmp eax, dword [rbx - 0xc]
jg 0x18001b75f
mov dword [rbx - 0x10], eax
cdqe
mov byte [rax + rbx], 0
mov rcx, qword [rbp - 0x49]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [rbx - 0x10], 0
jl 0x18001b5a5
lea rdx, str.PMIL
mov rcx, rbx
call fcn.18002aa38
test rax, rax
je 0x18001b5a5
cmp eax, ebx
je 0x18001b76a
test r15d, r15d
jne 0x18001b76a
mov qword [rbp - 9], 0
lea rcx, str.Userenv
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x18001b5ff
lea rdx, str.GetAppContainerFolderPath
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x18001b5f3
lea rdx, [rbp - 9]
lea rcx, str.S_1_15_2_1430448594_2639229838_973813799_439329657_1197984847_4069167804_1277922394
call rax
mov rdx, qword [rbp - 9]
call fcn.180009980
mov rcx, qword [rbp - 9]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x18001b618
mov r8d, 0x1e
lea rdx, str.Packageswindows_ie_ac_001AC
lea rcx, [0x18006aa60]
call fcn.1800022e0
lea rcx, [0x180066048]
mov rax, qword [0x180066048]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x29], rbx
lea r15, str.SoftwareClassesLocal_SettingsSoftwareMicrosoftWindowsCurrentVersionAppContainerStoragewindows_ie_ac_001Software_
test r15, 0xffffffffffff0000
jne 0x18001b662
movzx edi, r15w
mov ecx, edi
call fcn.180002840
test rax, rax
je 0x18001b678
mov r8d, edi
mov rdx, rax
lea rcx, [rbp - 0x29]
call fcn.1800023e0
jmp 0x18001b674
mov r8d, 0x7a
mov rdx, r15
lea rcx, [rbp - 0x29]
call fcn.180002020
mov rbx, qword [rbp - 0x29]
lea rdi, [rbx - 0x18]
mov r14, qword [0x18006aa68]
add r14, 0xffffffffffffffe8
cmp rdi, r14
je 0x18001b6dc
cmp dword [r14 + 0x10], 0
jl 0x18001b6c8
mov rax, qword [r14]
cmp qword [rdi], rax
jne 0x18001b6c8
mov rcx, rdi
call fcn.180002110
mov rbx, rax
lock add dword [r14 + 0x10], 0xffffffff
jg 0x18001b6bb
mov rcx, qword [r14]
mov r8, qword [rcx]
mov rdx, r14
call qword [rVariantCopy + 8]
lea rax, [rbx + 0x18]
mov qword [0x18006aa68], rax
jmp 0x18001b6dc
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [0x18006aa68]
call fcn.180002020
nop
lock add dword [rdi + 0x10], 0xffffffff
jg 0x18001b6ef
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + VariantCopy]
mov r8d, dword [0x180069c80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x38e38e39
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
cmp ecx, 3
jne 0x18001b924
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x63
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.1800289f0
mov rcx, rax
call fcn.180028a24
jmp 0x18001b924
mov ecx, 0x80070057
call fcn.180002bd0
int3
lea rdi, str.Software_
call fcn.18001adb0
test al, al
jne 0x18001b7e8
mov rdx, qword [0x18006a750]
lea rcx, [rdx - 0x18]
mov rbx, qword [0x18006aa68]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x18001b8b7
cmp dword [rbx + 0x10], 0
jl 0x18001b7d3
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x18001b7d3
call fcn.180002110
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x18001b7c3
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rVariantCopy + 8]
lea rax, [rdi + 0x18]
mov qword [0x18006aa68], rax
jmp 0x18001b8b7
mov r8d, dword [rdx - 0x10]
lea rcx, [0x18006aa68]
call fcn.180002020
jmp 0x18001b8b7
lea rcx, [0x180066048]
mov rax, qword [0x180066048]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x19], rbx
test rdi, 0xffffffffffff0000
jne 0x18001b82a
movzx edi, di
mov ecx, edi
call fcn.180002840
test rax, rax
je 0x18001b840
mov r8d, edi
mov rdx, rax
lea rcx, [rbp - 0x19]
call fcn.1800023e0
jmp 0x18001b83c
mov r8d, 9
mov rdx, rdi
lea rcx, [rbp - 0x19]
call fcn.180002020
mov rbx, qword [rbp - 0x19]
lea rdi, [rbx - 0x18]
mov r14, qword [0x18006aa68]
add r14, 0xffffffffffffffe8
cmp rdi, r14
je 0x18001b8a4
cmp dword [r14 + 0x10], 0
jl 0x18001b890
mov rax, qword [r14]
cmp qword [rdi], rax
jne 0x18001b890
mov rcx, rdi
call fcn.180002110
mov rbx, rax
lock add dword [r14 + 0x10], 0xffffffff
jg 0x18001b883
mov rcx, qword [r14]
mov r8, qword [rcx]
mov rdx, r14
call qword [rVariantCopy + 8]
lea rax, [rbx + 0x18]
mov qword [0x18006aa68], rax
jmp 0x18001b8a4
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [0x18006aa68]
call fcn.180002020
nop
lock add dword [rdi + 0x10], 0xffffffff
jg 0x18001b8b7
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + VariantCopy]
mov rcx, qword [rbp - 0x41]
add rcx, 0xffffffffffffffe8
mov rbx, qword [0x18006aa60]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x18001b91d
cmp dword [rbx + 0x10], 0
jl 0x18001b906
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x18001b906
call fcn.180002110
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x18001b8f9
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rVariantCopy + 8]
lea rax, [rdi + 0x18]
mov qword [0x18006aa60], rax
jmp 0x18001b91d
mov rdi, qword [rbp - 0x41]
mov r8d, dword [rdi - 0x10]
mov rdx, rdi
lea rcx, [0x18006aa60]
call fcn.180002020
lea r15, str.SoftwareClassesLocal_SettingsSoftwareMicrosoftWindowsCurrentVersionAppContainerStoragewindows_ie_ac_001Software_
mov rcx, qword [0x18006aa68]
cmp dword [rcx - 0x10], 0
jl 0x18001b9be
lea rdx, str.windows_ie_ac_001
call fcn.18002aa38
test rax, rax
je 0x18001b9be
sub eax, dword [0x18006aa68]
test eax, eax
jle 0x18001b9be
mov rdx, qword [0x18006a750]
lea rcx, [rdx - 0x18]
mov rbx, qword [0x18006aa70]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x18001bb52
cmp dword [rbx + 0x10], 0
jl 0x18001b9a9
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x18001b9a9
call fcn.180002110
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x18001b999
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rVariantCopy + 8]
lea rax, [rdi + 0x18]
mov qword [0x18006aa70], rax
jmp 0x18001bb52
mov r8d, dword [rdx - 0x10]
lea rcx, [0x18006aa70]
call fcn.180002020
jmp 0x18001bb52
call fcn.18001adb0
lea rcx, [0x180066048]
test al, al
mov rax, qword [0x180066048]
jne 0x18001ba8d
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x11], rbx
test r15, 0xffffffffffff0000
jne 0x18001ba0e
movzx edi, r15w
mov ecx, edi
call fcn.180002840
test rax, rax
je 0x18001ba24
mov r8d, edi
mov rdx, rax
lea rcx, [rbp - 0x11]
call fcn.1800023e0
jmp 0x18001ba20
mov r8d, 0x7a
mov rdx, r15
lea rcx, [rbp - 0x11]
call fcn.180002020
mov rbx, qword [rbp - 0x11]
lea rdi, [rbx - 0x18]
mov r14, qword [0x18006aa70]
add r14, 0xffffffffffffffe8
cmp rdi, r14
je 0x18001ba88
cmp dword [r14 + 0x10], 0
jl 0x18001ba74
mov rax, qword [r14]
cmp qword [rdi], rax
jne 0x18001ba74
mov rcx, rdi
call fcn.180002110
mov rbx, rax
lock add dword [r14 + 0x10], 0xffffffff
jg 0x18001ba67
mov rcx, qword [r14]
mov r8, qword [rcx]
mov rdx, r14
call qword [rVariantCopy + 8]
lea rax, [rbx + 0x18]
mov qword [0x18006aa70], rax
jmp 0x18001ba88
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [0x18006aa70]
call fcn.180002020
nop
jmp 0x18001bb3f
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x21], rbx
lea rdx, str.Software_
test rdx, 0xffffffffffff0000
jne 0x18001bac8
movzx edi, dx
mov ecx, edi
call fcn.180002840
test rax, rax
je 0x18001badb
mov r8d, edi
mov rdx, rax
lea rcx, [rbp - 0x21]
call fcn.1800023e0
jmp 0x18001bad7
mov r8d, 9
lea rcx, [rbp - 0x21]
call fcn.180002020
mov rbx, qword [rbp - 0x21]
lea rdi, [rbx - 0x18]
mov r14, qword [0x18006aa70]
add r14, 0xffffffffffffffe8
cmp rdi, r14
je 0x18001bb3f
cmp dword [r14 + 0x10], 0
jl 0x18001bb2b
mov rax, qword [r14]
cmp qword [rdi], rax
jne 0x18001bb2b
mov rcx, rdi
call fcn.180002110
mov rbx, rax
lock add dword [r14 + 0x10], 0xffffffff
jg 0x18001bb1e
mov rcx, qword [r14]
mov r8, qword [rcx]
mov rdx, r14
call qword [rVariantCopy + 8]
lea rax, [rbx + 0x18]
mov qword [0x18006aa70], rax
jmp 0x18001bb3f
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [0x18006aa70]
call fcn.180002020
nop
lock add dword [rdi + 0x10], 0xffffffff
jg 0x18001bb52
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + VariantCopy]
mov r8d, 0x1e
lea rdx, str.PlusVid
lea rcx, [0x18006aa68]
call fcn.1800022e0
mov r8d, 0x1e
lea rdx, str.PlusVid
lea rcx, [0x18006aa70]
call fcn.1800022e0
mov rcx, qword [0x18006aa68]
add rcx, 0xffffffffffffffe8
call fcn.180002110
add rax, 0x18
mov qword [rbp + 0xf], rax
mov r8b, 1
mov rdx, 0xffffffff80000001
lea rcx, [rbp + 0xf]
call fcn.18001bc60
mov rcx, qword [0x18006aa70]
add rcx, 0xffffffffffffffe8
call fcn.180002110
add rax, 0x18
mov qword [rbp + 7], rax
mov r8b, 1
mov rdx, 0xffffffff80000001
lea rcx, [rbp + 7]
call fcn.18001bc60
nop
mov rdx, qword [rbp - 0x41]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x18001bbf4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
nop
mov rdx, qword [rbp - 0x39]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x18001bc0c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
cmp byte [rbp + 0x77], 0
je 0x18001bc29
test r13b, r13b
je 0x18001bc20
mov rcx, qword [0x18006aa70]
jmp 0x18001bc30
mov rcx, qword [0x18006aa68]
jmp 0x18001bc30
mov rcx, qword [0x18006aa60]
add rcx, 0xffffffffffffffe8
call fcn.180002110
add rax, 0x18
mov qword [r12], rax
mov rax, r12
mov rbx, qword [rsp + 0xe0]
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret