Function at 0x18002eaf0
Capabilities:
Check if file exists
Query or enumerate registry key

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov qword [rbp - 0x30], 0xfffffffffffffffe
mov qword [rsp + 0x150], rbx
mov rax, qword [0x180146748]
xor rax, rsp
mov qword [rbp + 8], rax
mov edi, r9d
mov r14, r8
mov qword [rbp - 0x50], r8
mov rsi, rdx
mov qword [rbp - 0x48], rdx
mov qword [rbp - 0x28], r8
xor r15d, r15d
mov r13d, r15d
mov dword [rsp + 0x54], r15d
call fcn.18000a3f0
mov rcx, rax
test rax, rax
je 0x18002f6e3
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x48], rbx
mov dword [rsp + 0x50], 0x208
mov r12d, r15d
mov qword [rbp - 0x70], r15
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
mov r9d, edi
xor r8d, r8d
mov rdx, qword [r14]
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x18002ebf6
lea rdx, [rbx - 0x18]
mov rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18002ebb5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [r14]
sub rdx, 0x18
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x18002ebcf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rbp + 8]
xor rcx, rsp
call fcn.18008c720
mov rbx, qword [rsp + 0x150]
add rsp, 0x110
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
xor esi, esi
mov qword [rbp - 0x80], rsi
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x104
or eax, ecx
jge 0x18002ec2d
mov edx, 0x104
lea rcx, [rsp + 0x48]
call fcn.18000b0d0
mov rbx, qword [rsp + 0x48]
lea r14, [rbx - 0xc]
cmp dword [r14], 0x104
jl 0x18002f6ee
lea r15, [rbx - 0x10]
mov dword [r15], 0x104
mov word [rbx + 0x208], si
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x50]
mov r8, rbx
xor edx, edx
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov edi, eax
movsxd rdx, dword [r14]
mov rcx, rbx
call fcn.1800bf270
test eax, eax
js 0x18002f6d8
cmp eax, dword [r14]
jg 0x18002f6d8
mov dword [r15], eax
movsxd rcx, eax
mov word [rbx + rcx*2], si
mov rsi, 0xffffffffffffffff
test edi, edi
jne 0x18002f03b
cmp edi, 0xea
je 0x18002f03b
xor edi, edi
mov qword [rbp - 0x60], rdi
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x18002ef63
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x104
or eax, ecx
jge 0x18002ed10
mov edx, 0x104
lea rcx, [rsp + 0x48]
call fcn.18000b0d0
mov rbx, qword [rsp + 0x48]
lea r14, [rbx - 0xc]
cmp dword [r14], 0x104
jl 0x18002f725
lea r15, [rbx - 0x10]
mov dword [r15], 0x104
mov word [rbx + 0x208], di
call fcn.18000a3f0
test rax, rax
je 0x18002f71a
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
cmp rbx, 0x10000
jae 0x18002ed69
movzx edx, bx
lea rcx, [rbp - 0x78]
call fcn.18000af40
jmp 0x18002ed8a
mov rax, rsi
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x18002ed70
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp - 0x78]
call fcn.18000b310
nop
mov rdi, qword [rsp + 0x78]
cmp qword [rbp - 0x80], rdi
je 0x18002edb1
mov rbx, qword [rbp - 0x78]
lea rcx, [rbx - 0x18]
call fcn.1800099e0
add rax, 0x18
mov qword [rdi], rax
add qword [rsp + 0x78], 8
jmp 0x18002edc6
lea r8, [rbp - 0x78]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.18002e500
mov rbx, qword [rbp - 0x78]
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18002eddf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rax, qword [rsp + 0x78]
sub rax, qword [rsp + 0x70]
cmp rax, 8
jae 0x18002ef54
call fcn.18000a3f0
test rax, rax
je 0x18002f70f
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x58], rbx
lea rax, str.none
cmp rax, 0x10000
jae 0x18002ee39
movzx edx, ax
lea rcx, [rsp + 0x58]
call fcn.18000af40
mov rbx, qword [rsp + 0x58]
jmp 0x18002ef01
xor ecx, ecx
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rcx
mov r9d, esi
mov r8, rax
xor edx, edx
lea ecx, [rdx + 3]
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea edi, [rax - 1]
test edi, edi
jle 0x18002eeb3
mov edx, 1
sub edx, dword [rbx - 8]
mov ecx, dword [rbx - 0xc]
sub ecx, edi
or ecx, edx
jge 0x18002ee7e
mov edx, edi
lea rcx, [rsp + 0x58]
call fcn.18000b0d0
mov rbx, qword [rsp + 0x58]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rbx
mov r9d, esi
lea r8, str.none
xor edx, edx
lea ecx, [rdx + 3]
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp edi, dword [rbx - 0xc]
jg 0x18002f6f9
mov dword [rbx - 0x10], edi
movsxd rax, edi
xor ecx, ecx
mov word [rbx + rax*2], cx
jmp 0x18002ef01
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], 0
je 0x18002ef01
cmp dword [rdx + 0x10], 0
jge 0x18002eeda
cmp dword [rbx - 0xc], 0
jl 0x18002f704
xor eax, eax
mov dword [rbx - 0x10], eax
mov word [rbx], ax
jmp 0x18002ef01
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18002eeef
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x58], rbx
mov rdi, qword [rsp + 0x78]
cmp qword [rbp - 0x80], rdi
je 0x18002ef24
lea rcx, [rbx - 0x18]
call fcn.1800099e0
add rax, 0x18
mov qword [rdi], rax
add qword [rsp + 0x78], 8
jmp 0x18002ef3b
lea r8, [rsp + 0x58]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.18002e500
mov rbx, qword [rsp + 0x58]
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18002ef54
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rbx, qword [rsp + 0x48]
inc r12d
mov dword [rsp + 0x50], 0x208
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], 0
je 0x18002efbc
cmp dword [rdx + 0x10], 0
jge 0x18002ef95
cmp dword [r14], 0
jl 0x18002f730
xor edi, edi
mov dword [r15], edi
mov word [rbx], di
jmp 0x18002efbe
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18002efaa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x48], rbx
xor edi, edi
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x104
or eax, ecx
jge 0x18002efe6
mov edx, 0x104
lea rcx, [rsp + 0x48]
call fcn.18000b0d0
mov rbx, qword [rsp + 0x48]
lea r14, [rbx - 0xc]
cmp dword [r14], 0x104
jl 0x18002f73b
lea r15, [rbx - 0x10]
mov dword [r15], 0x104
mov word [rbx + 0x208], di
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x50]
mov r8, rbx
mov edx, r12d
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov edi, eax
test eax, eax
jmp 0x18002eca9
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdi, qword [rsp + 0x70]
mov qword [rsp + 0x68], rdi
mov r14, qword [rsp + 0x78]
mov qword [rbp - 0x38], r14
cmp rdi, r14
je 0x18002f57a
lea rax, [0x180155550]
nop dword [rax + rax]
lea r14, [0x1801553f0]
mov qword [rbp - 0x68], r14
nop dword [rax + rax]
cmp byte [r14 + 0x19], 0
jne 0x18002f547
call fcn.18000a3f0
mov rcx, rax
test rax, rax
je 0x18002f6c1
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
mov r9, qword [rdi]
mov rax, qword [rbp - 0x50]
mov r8, qword [rax]
lea rdx, str._s_s
lea rcx, [rsp + 0x60]
call fcn.1800241e0
call fcn.18000a3f0
mov rcx, rax
test rax, rax
je 0x18002f7c6
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x40], rbx
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x100
or eax, ecx
jge 0x18002f10e
mov edx, 0x100
lea rcx, [rsp + 0x40]
call fcn.18000b0d0
mov rbx, qword [rsp + 0x40]
mov r9, rbx
mov r8, qword [r14 + 0x10]
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rbp - 0x48]
call fcn.180092380
test eax, eax
jne 0x18002f168
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18002f141
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18002f540
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
jmp 0x18002f540
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.1800bf270
test eax, eax
js 0x18002f7bb
cmp eax, dword [rbx - 0xc]
jg 0x18002f7bb
mov dword [rbx - 0x10], eax
cdqe
xor r12d, r12d
mov word [rbx + rax*2], r12w
mov eax, dword [rbx - 0x10]
test eax, eax
je 0x18002f127
cmp eax, 4
jl 0x18002f127
test eax, eax
jg 0x18002f1a6
mov edi, esi
jmp 0x18002f1c5
mov edx, 0x22
mov rcx, rbx
call fcn.1800bbf10
mov rdi, rax
test rax, rax
jne 0x18002f1bf
mov edi, esi
jmp 0x18002f1c5
sub rdi, rbx
sar rdi, 1
mov ecx, dword [rbx - 0x10]
lea eax, [rcx - 1]
test eax, eax
js 0x18002f1f0
cmp eax, ecx
jge 0x18002f1f0
mov edx, 0x22
cdqe
lea rcx, [rbx + rax*2]
call fcn.1800bbf10
test rax, rax
je 0x18002f1f0
sub rax, rbx
sar rax, 1
jmp 0x18002f1f2
mov eax, esi
test edi, edi
jne 0x18002f34a
mov edx, dword [rbx - 0x10]
lea r8d, [rdx - 1]
cmp eax, r8d
jne 0x18002f34a
lea eax, [rdx - 2]
mov ecx, r12d
test eax, eax
cmovns ecx, eax
cmp ecx, 0x7ffffffe
jg 0x18002f773
lea eax, [rcx + 1]
cmp eax, edx
cmovle r8d, ecx
mov edi, r12d
cmp edx, 1
cmovge edi, r8d
lea r14, [rbx - 0x18]
mov rcx, qword [r14]
test rcx, rcx
je 0x18002f24b
mov rax, qword [rcx]
call qword [rax + 0x20]
test rax, rax
jne 0x18002f259
call fcn.18000a3f0
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
lea r15, [rbx + 2]
test rax, rax
je 0x18002f768
test r15, r15
jne 0x18002f273
test edi, edi
jne 0x18002f74c
mov r9, qword [rax]
mov r8d, 2
mov edx, edi
mov rcx, rax
call qword [r9]
test rax, rax
je 0x18002f762
lea rbx, [rax + 0x18]
mov qword [rbp - 0x20], rbx
test edi, edi
js 0x18002f757
cmp edi, dword [rbx - 0xc]
jg 0x18002f757
mov dword [rbx - 0x10], edi
movsxd rax, edi
lea rdx, [rax + rax]
mov word [rdx + rbx], r12w
mov r9, rdx
mov r8, r15
mov rcx, rbx
call fcn.18000d2d0
or r13d, 1
mov dword [rsp + 0x54], r13d
lea rcx, [rbx - 0x18]
cmp rcx, r14
je 0x18002f323
cmp dword [r14 + 0x10], 0
jl 0x18002f311
mov rax, qword [r14]
cmp qword [rcx], rax
jne 0x18002f311
call fcn.1800099e0
mov rdi, rax
mov ecx, esi
lock xadd dword [r14 + 0x10], ecx
sub ecx, 1
jg 0x18002f306
mov rcx, qword [r14]
mov r8, qword [rcx]
mov rdx, r14
call qword [r8 + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x40], rax
jmp 0x18002f323
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.18000b310
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18002f341
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov dword [rsp + 0x54], r13d
mov r14, qword [rbp - 0x68]
mov rbx, qword [rsp + 0x40]
call fcn.18000a3f0
mov rcx, rax
test rax, rax
je 0x18002f7b0
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x58], rax
mov rdx, qword [r14 + 8]
lea rcx, [rbp - 0x18]
call fcn.180057cf0
nop
lea r8, [rbp - 0x18]
cmp qword [rbp], 8
cmovae r8, qword [rbp - 0x18]
lea rdx, [0x1800fa8a8]
lea rcx, [rbp - 0x58]
call fcn.1800241e0
mov rdi, qword [rbp - 0x58]
cmp byte [r14 + 0x18], 0
je 0x18002f44c
movsxd rax, dword [rdi - 0x10]
mov r15, rdi
sub r15, rbx
sar r15, 1
mov r12d, dword [rbx - 0x10]
test eax, eax
js 0x18002f79f
mov rdx, rax
mov rcx, rdi
call fcn.1800bf270
mov r13, rax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, r12d
jl 0x18002f794
lea r14d, [r12 + rax]
test r14d, r14d
js 0x18002f789
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, ecx
jge 0x18002f40c
mov edx, r14d
lea rcx, [rsp + 0x40]
call fcn.18000b0d0
mov rbx, qword [rsp + 0x40]
cmp r15, r12
lea r8, [rbx + r15*2]
jbe 0x18002f418
mov r8, rdi
movsxd rdx, r13d
add rdx, rdx
lea rcx, [rbx + r12*2]
mov r9, rdx
call fcn.18000d2d0
cmp r14d, dword [rbx - 0xc]
jg 0x18002f77e
mov dword [rbx - 0x10], r14d
movsxd rax, r14d
xor r12d, r12d
mov word [rbx + rax*2], r12w
mov r14, qword [rbp - 0x68]
mov r13d, dword [rsp + 0x54]
test rdi, rdi
je 0x18002f67d
cmp dword [rbx - 0x10], 0
jl 0x18002f67d
mov rdx, rdi
mov rcx, rbx
call fcn.1800bbfa4
test rax, rax
je 0x18002f67d
sub rax, rbx
sar rax, 1
cmp eax, 4
jl 0x18002f67d
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x18002f634
mov rdx, qword [rbp]
cmp rdx, 8
jb 0x18002f4d3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002f4ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002f7aa
call fcn.18008c16c
mov qword [rbp - 8], r12
mov qword [rbp], 7
mov word [rbp - 0x18], r12w
lea rdx, [rdi - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18002f4fe
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18002f51d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18002f53b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdi, qword [rsp + 0x68]
lea rax, [0x180155550]
add r14, 0x20
mov qword [rbp - 0x68], r14
cmp r14, rax
jne 0x18002f080
add rdi, 8
mov qword [rsp + 0x68], rdi
cmp rdi, qword [rbp - 0x38]
jne 0x18002f070
mov rbx, qword [rsp + 0x48]
mov r14, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x70]
test rdi, rdi
je 0x18002f60e
cmp rdi, r14
je 0x18002f5bf
nop dword [rax + rax]
mov rdx, qword [rdi]
sub rdx, 0x18
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18002f5ac
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
add rdi, 8
cmp rdi, r14
jne 0x18002f590
mov rbx, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x70]
mov rax, qword [rbp - 0x80]
sub rax, rdi
sar rax, 3
lea rdx, [rax*8]
mov rax, rdi
cmp rdx, 0x1000
jb 0x18002f5f7
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002f746
mov rcx, rdi
call fcn.18008c16c
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
xor ecx, ecx
mov qword [rbp - 0x80], rcx
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18002f628
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rax, qword [rbp - 0x50]
mov rdx, qword [rax]
jmp 0x18002ebb8
mov byte [r14 + 0x19], 1
mov rdx, qword [rbp]
cmp rdx, 8
jb 0x18002f4d3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002f4ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002f6cc
jmp 0x18002f4ce
mov rdx, qword [rbp]
cmp rdx, 8
jb 0x18002f4d3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002f4ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002f6d2
jmp 0x18002f4ce
mov ecx, 0x80004005
call fcn.180009990
nop
call fcn.1800beee8
int3
call fcn.1800beee8
nop
mov ecx, 0x80070057
call fcn.180009990
nop
mov ecx, 0x80004005
call fcn.180009990
nop
mov ecx, 0x80070057
call fcn.180009990
nop
mov ecx, 0x80070057
call fcn.180009990
int3
mov ecx, 0x80070057
call fcn.180009990
nop
mov ecx, 0x80004005
call fcn.180009990
int3
mov ecx, 0x80004005
call fcn.180009990
int3
mov ecx, 0x80070057
call fcn.180009990
int3
mov ecx, 0x80070057
call fcn.180009990
int3
mov ecx, 0x80070057
call fcn.180009990
nop
call fcn.1800beee8
nop
mov ecx, 0x80070057
call fcn.180009990
int3
mov ecx, 0x80070057
call fcn.180009990
int3
call fcn.18000b6a0
int3
mov ecx, 0x80004005
call fcn.180009990
int3
mov ecx, 0x80070216
call fcn.180009990
nop
mov ecx, 0x80070057
call fcn.180009990
int3
mov ecx, 0x80070057
call fcn.180009990
int3
mov ecx, 0x80070057
call fcn.180009990
int3
mov ecx, 0x80070057
call fcn.180009990
nop
call fcn.1800beee8
nop
mov ecx, 0x80004005
call fcn.180009990
int3
mov ecx, 0x80070057
call fcn.180009990
nop
mov ecx, 0x80004005
call fcn.180009990
int3