Function at 0x1800685b0
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2430]
mov eax, 0x2530
call fcn.18006ce90
sub rsp, rax
mov edi, dword [rbp + 0x2498]
xor r11d, r11d
mov r13, r8
mov r12, r9
mov r8, rcx
lea rcx, [0x180000000]
lea esi, [rdi + 0x11]
lea r9d, [r11 + 1]
cmp edi, esi
jae 0x180068938
mov rax, qword [rbp - 0x80]
lea r9d, [r11 + 0x74]
mov r14, qword [rsp + 0x58]
lea ebx, [rdi - 0x8d]
mov r15, qword [rsp + 0x58]
lea r11d, [r9 + 1]
mov qword [rsp + 0x78], rax
mov r10d, 0x7261
mov rax, qword [rbp - 0x80]
mov qword [rsp + 0x70], rax
cmp ebx, 0x57
ja case.default.0x180068659
movzx eax, byte [rcx + rbx + 0x695f8]
mov ecx, dword [rcx + rax*4 + 0x695b0]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov word [rbp - 0x6c], r9w
jmp case.0x180068659.17
xor eax, eax
mov dword [rbp - 0x58], eax
jmp case.0x180068659.17
movzx eax, word [rbp + 0xafa]
mov word [0x1800ce8f8], ax
jmp case.0x180068659.17
mov eax, 0x57
mov ecx, 0x53
mov word [rbp - 0x70], ax
mov eax, 0x41
mov word [rbp - 0x6f], cx
mov word [rbp - 0x6e], ax
mov word [rbp - 0x6d], cx
jmp case.0x180068659.17
movzx eax, word [rdx]
mov word [rbp + 0x9e8], ax
xor eax, eax
mov dword [rbp + 0xafc], eax
movsx eax, word [0x1800ce8fc]
mov dword [rbp + 0xb08], eax
jmp case.0x180068659.17
movzx eax, word [r14 + 0xc4]
xor r9d, r9d
movzx ecx, byte [r14 + 0x20]
mov dword [rsp + 0x60], eax
movzx eax, byte [r14 + 0x21]
mov dword [rbp + 0x2498], eax
mov eax, dword [r8]
lea r8d, [r9 + 0x54]
shl eax, cl
movsxd rcx, eax
mov eax, dword [r14 + 0x18]
add rcx, rax
lea rax, [rbp + 0x2498]
add rcx, qword [rdx + 8]
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
xor ecx, ecx
call fcn.180031bb0
mov rdx, qword [rbp + 0x2478]
mov r9d, 0x74
mov r8, qword [rbp + 0x2470]
mov r10d, 0x7261
mov qword [rbp - 0x60], rax
lea r11d, [r9 + 1]
jmp case.0x180068659.17
xor ecx, ecx
mov qword [rbp - 0x18], rcx
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x70], rcx
jmp case.0x180068659.17
mov rcx, qword [0x1800be690]
xor edx, edx
lea r8d, [rdx + 1]
call qword [sym.imp.USER32.dll_InvalidateRect]
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rcx, qword [rbp + 0x2478]
lea r9, [rbp + 0x2498]
xor r8d, r8d
mov dword [rbp + 0x2498], r15d
xor edx, edx
mov rax, qword [rcx]
xor ecx, ecx
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], rcx
mov qword [rbp - 0x80], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
lea rcx, [rbp + 8]
mov dword [rsp + 0x20], 0x28
call fcn.180036ed0
mov rdx, qword [rbp + 0x2478]
mov r9d, 0x74
mov r8, qword [rbp + 0x2470]
mov r10d, 0x7261
lea r11d, [r9 + 1]
jmp case.0x180068659.17
mov r14, qword [rdx]
jmp case.0x180068659.17
mov rax, qword [rbp + 0x2490]
movzx eax, byte [rax]
mov byte [rbp + 0xfe1], al
jmp case.0x180068659.17
mov rcx, qword [0x1800be690]
lea rdx, [rbp + 0x20]
mov dword [rbp + 0x20], 0x2c
call qword [sym.imp.USER32.dll_GetWindowPlacement]
mov rdx, qword [rbp + 0x2478]
mov r9d, 0x74
mov r8, qword [rbp + 0x2470]
mov r10d, 0x7261
mov dword [rbp + 0x28], 9
lea r11d, [r9 + 1]
jmp case.0x180068659.17
xor eax, eax
mov dword [rbp + 0x10ec], edx
mov word [0x1800ce8f8], ax
mov eax, dword [r8]
mov dword [rbp + 0x10f4], eax
mov dword [rbp + 0x10f0], r13d
jmp case.0x180068659.17
mov dword [rbp - 0x6b], 0x747261
mov word [rbp - 0x68], r11w
jmp case.0x180068659.17
mov rcx, qword [0x1800be690]
lea rdx, [rbp + 0x20]
call qword [sym.imp.USER32.dll_SetWindowPlacement]
mov rdx, qword [rbp + 0x2478]
mov r9d, 0x74
mov r8, qword [rbp + 0x2470]
mov r10d, 0x7261
movsxd r15, eax
lea r11d, [r9 + 1]
jmp case.0x180068659.17
xor eax, eax
lea rdx, [rbp + 0x5a0]
mov qword [rbp + 0xaf2], rax
mov word [rbp + 0xafa], ax
lea ecx, [rax - 0xb]
call qword [0x1800ce8f0]
mov rdx, qword [rbp + 0x2478]
mov r9d, 0x74
mov r8, qword [rbp + 0x2470]
mov r10d, 0x7261
lea r11d, [r9 + 1]
jmp case.0x180068659.17
mov eax, dword [r12]
mov dword [rbp + 0x10f8], eax
mov rax, qword [rbp + 0x24a0]
movzx eax, byte [rax]
mov byte [rbp + 0xfe0], al
lea rcx, [0x180000000]
inc ebx
lea eax, [rbx + 0x8d]
cmp eax, esi
jb 0x180068637
mov r12, qword [rsp + 0x70]
mov r9d, 1
mov r13, qword [rsp + 0x78]
xor r11d, r11d
jmp 0x180068945
mov r12, qword [rbp - 0x80]
mov r13, qword [rbp - 0x80]
mov qword [rsp + 0x70], r12
lea eax, [rdi - 0x11]
mov dword [rbp - 0x38], eax
cmp edi, eax
jbe case.0x180068999.157
mov r14, qword [rsp + 0x58]
mov ebx, 0x77
mov rsi, qword [rsp + 0x58]
mov r15, qword [rsp + 0x58]
mov r8d, 2
lea eax, [rdi - 0x9d]
lea r10d, [r8 + 2]
cmp eax, 0x34
ja case.0x180068999.172
movzx eax, byte [rcx + rax + 0x69690]
mov ecx, dword [rcx + rax*4 + 0x69650]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov word [rbp - 0x30], bx
mov dword [rbp - 0x2e], 0x320073
mov dword [rbp - 0x2a], 0x33005f
jmp case.0x180068999.172
movzx eax, byte [rbp + 0xafc]
mov byte [rbp - 0x60], al
jmp case.0x180068999.172
mov rbx, qword [rbp - 0x80]
lea rax, [rsp + 0x68]
mov rcx, rbx
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
lea rdx, [rbp + 0x1c30]
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
movsxd r14, eax
mov rsi, 0xffffffffffffff9d
cmp r14, 2
jne 0x180068a3b
lea rax, [rbp - 8]
xor r9d, r9d
mov qword [rsp + 0x40], rax
lea rdx, [rbp + 0x1c30]
lea rax, [rsp + 0x68]
xor r8d, r8d
mov qword [rsp + 0x38], rax
lea rsi, [r14 - 0x64]
xor eax, eax
mov rcx, rbx
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], eax
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
movsxd r14, eax
mov ebx, 0x77
jmp case.0x180068999.172
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp + 0x2478]
lea r9, [rbp + 0x2498]
xor r8d, r8d
mov dword [rbp + 0x2498], esi
xor edx, edx
mov rax, qword [rcx]
xor ecx, ecx
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
lea rcx, [rbp + 8]
mov dword [rsp + 0x20], 0x28
call fcn.180036ed0
jmp case.0x180068999.172
cmp word [0x1800ce8f8], 0
jne 0x180068abe
mov ecx, 0xfffffd9d
lea rdx, [rbp + 0xb90]
call qword [0x1800ce8f0]
movzx eax, byte [rbp + 0x10ec]
mov byte [rbp - 0x60], al
jmp case.0x180068999.172
lea r9, [rbp - 0x70]
mov word [rbp - 0x1c], r11w
lea r8, [rbp - 0x30]
mov edx, 0xe5
xor ecx, ecx
call fcn.1800588e0
mov ecx, 0x202
lea rdx, [rbp + 0x1a90]
call rax
test eax, eax
jne 0x180068b13
mov r8, qword [rbp + 0x2478]
xor edx, edx
mov ecx, 0x102
call fcn.180028f60
test al, al
jne case.0x180068999.172
mov byte [rbp - 0x60], 0
mov rax, qword [rbp - 0x60]
mov rbx, qword [rsp + 0x2580]
add rsp, 0x2530
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov qword [rsp + 0x78], r11
mov r14, r11
mov rsi, r11
mov qword [rsp + 0x68], r11
mov qword [rbp - 0x80], r11
jmp case.0x180068999.172
test r14, r14
jne case.0x180068999.172
mov ebx, 0xce
nop dword [rax]
cmp ebx, 0xce
je 0x1800693b3
cmp ebx, 0x3ec4
jne 0x18006938b
test r14, r14
jne 0x18006938b
mov eax, dword [rsp + 0x50]
dec eax
cmp eax, 0xa
ja case.0x180068ba2.6
lea r9, [0x180000000]
mov ecx, dword [r9 + rax*4 + 0x696c8]
add rcx, r9
jmp rcx
mov ebx, 0xfd
nop dword [rax]
mov eax, ebx
sub eax, 0xfd
je 0x180068c0a
sub eax, 1
je 0x180068be1
cmp eax, 1
jne 0x180068c7c
mov rcx, r13
call fcn.180072184
test r14, r14
jne 0x18006936f
lea esi, [r14 + 1]
jmp case.0x180068ba2.6
mov r9d, dword [rsp + 0x50]
lea rdx, [rbp + 0x1290]
mov rcx, qword [rsp + 0x68]
xor r8d, r8d
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r13
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
movsxd r14, eax
jmp 0x180068c76
mov rax, qword [rdx]
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0x2498]
mov qword [rsp + 0x60], rax
mov r9d, 0xf0
mov word [rbp + 0x2498], r10w
xor ecx, ecx
call fcn.1800170e0
movsxd rcx, eax
call fcn.18007218c
mov rcx, qword [rbp + 0x2478]
lea r8, [rsp + 0x60]
mov r13, rax
lea rdx, [rbp + 0x2498]
mov eax, 4
mov r9d, 0xf0
mov word [rbp + 0x2498], ax
mov rcx, qword [rcx]
mov qword [rsp + 0x60], rcx
mov rcx, r13
call fcn.1800170e0
movsxd r15, eax
mov r10d, 4
inc ebx
cmp ebx, 0x100
jae case.0x180068ba2.4
mov rdx, qword [rbp + 0x2478]
jmp 0x180068bb0
mov ebx, 0xdb
mov eax, ebx
sub eax, 0xdb
je 0x180068cec
sub eax, 0x33
je 0x180068cb0
cmp eax, 0x33
je case.0x180068ba2.6
jmp 0x180068d1c
mov r9d, dword [rsp + 0x50]
lea rax, [rbp - 0x58]
mov rcx, qword [rsp + 0x68]
lea rdx, [rbp + 0x1290]
mov dword [rsp + 0x28], r10d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
movsxd r14, eax
mov rsi, r14
test eax, eax
jne 0x180068ce7
lea esi, [rax + 1]
jmp 0x180068d1c
neg rsi
jmp 0x180068d1c
mov rax, qword [rbp + 0x2478]
lea r8, [rbp + 0x2498]
lea rdx, [rsp + 0x60]
mov word [rbp + 0x2498], r10w
mov ecx, 0x42
mov rax, qword [rax]
mov qword [rsp + 0x60], rax
call fcn.180018420
mov dword [rbp - 0x58], eax
add ebx, 0x33
mov r10d, 4
cmp ebx, 0x174
jb 0x180068c97
lea r8d, [r10 - 2]
mov ebx, 0x8d
mov dword [rsp + 0x60], ebx
nop
cmp ebx, 0x8d
je 0x1800690ad
cmp ebx, 0x1ca4
je 0x180068d65
cmp ebx, 0x38bb
je case.0x180068ba2.6
jmp 0x1800691b7
mov ecx, dword [rbp + 0x52]
test ecx, ecx
jle 0x18006908e
mov eax, 0x92
mov dword [rbp - 0x54], eax
nop dword [rax + rax]
sub eax, 0x92
je 0x180068f88
sub eax, 1
je 0x180068da6
cmp eax, 1
jne 0x180069071
mov rcx, r13
call fcn.180072184
jmp 0x18006906e
mov edi, 1
movsxd r14, ecx
mov rsi, r13
cmp rdi, r14
jg 0x180068f56
nop word [rax + rax]
mov ebx, 0x40
mov eax, ebx
sub eax, 0x3f
je 0x180068f17
cmp eax, 1
jne 0x180068f34
lea rcx, [rbp + 0x160]
mov rdx, r8
lea rax, [rbp + 0x50]
nop word [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x180068df0
mov eax, dword [rax]
lea rdx, [rbp + 0x160]
mov dword [rcx], eax
xor r9d, r9d
lea rax, [rsp + 0x70]
mov qword [rsp + 0x70], rdi
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov ecx, 0x124
call fcn.180019980
lea rcx, [rax + 1]
call fcn.18007218c
mov r12, rax
lea rcx, [rbp + 0x270]
lea rdx, [rbp + 0x50]
mov r8d, 2
nop word [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
lea rdx, [rdx + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rdx - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rdx - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rdx - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rdx - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rdx - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rdx - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub r8, 1
jne 0x180068e90
mov eax, dword [rdx]
xor r9d, r9d
mov dword [rcx], eax
lea rdx, [rbp + 0x270]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x70], rdi
mov r8, r12
mov qword [rsp + 0x20], rax
mov ecx, 0x124
call fcn.180019980
mov r15, rax
mov byte [rax + r12], 0
jmp 0x180068f34
lea r8, [r15 + 1]
mov rdx, r12
mov rcx, rsi
call fcn.18006e1d0
inc rsi
mov rcx, r12
add rsi, r15
call fcn.180072184
dec ebx
mov r8d, 2
cmp ebx, 0x3e
ja 0x180068dc5
inc rdi
mov qword [rsp + 0x70], r12
cmp rdi, r14
jle 0x180068dc0
mov rax, qword [rsp + 0x78]
lea rdx, [rbp + 0x1290]
mov r9d, dword [rsp + 0x50]
inc eax
mov rcx, qword [rsp + 0x68]
xor r8d, r8d
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r13
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
movsxd r14, eax
jmp 0x18006906e
movsxd rdi, ecx
mov ebx, 1
cmp rbx, rdi
jg 0x18006904f
mov r12, qword [rsp + 0x78]
nop
lea rdx, [rbp + 0x380]
mov rcx, r8
lea rax, [rbp + 0x50]
nop
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rdx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rdx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rdx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rdx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rdx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rdx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rdx - 0x20], xmm0
movups xmmword [rdx - 0x10], xmm1
sub rcx, 1
jne 0x180068fb0
mov ecx, dword [rax]
xor r9d, r9d
mov dword [rdx], ecx
lea rax, [rsp + 0x78]
lea rdx, [rbp + 0x380]
mov qword [rsp + 0x20], rax
mov ecx, 0x124
mov qword [rsp + 0x78], rbx
xor r8d, r8d
call fcn.180019980
inc rax
inc rbx
add r12, rax
mov r8d, 2
cmp rbx, rdi
jle 0x180068fa0
mov qword [rsp + 0x78], r12
mov r12, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x78]
lea rcx, [rbx + 1]
call fcn.18007218c
lea r8, [rbx + 1]
xor edx, edx
mov rcx, rax
mov r13, rax
call fcn.18006e5e0
mov ecx, dword [rbp + 0x52]
mov eax, dword [rbp - 0x54]
mov r8d, 2
inc eax
mov dword [rbp - 0x54], eax
cmp eax, 0x95
jb 0x180068d80
mov ebx, dword [rsp + 0x60]
mov rsi, r14
mov r8d, 2
test r14, r14
jne 0x1800690a5
lea esi, [r14 + 1]
jmp 0x1800691b7
neg rsi
jmp 0x1800691b7
mov rax, qword [rbp + 0x2478]
lea r8, [rsp + 0x60]
mov r9d, 0x47
mov word [rbp + 0x2498], r10w
lea rdx, [rbp + 0x2498]
lea rcx, [rbp + 0x1180]
mov rax, qword [rax]
mov qword [rsp + 0x60], rax
call fcn.180015320
mov r8d, 2
lea rcx, [rbp + 0x490]
mov edx, r8d
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x1800690f2
mov rax, qword [rax]
mov rdx, r8
mov qword [rcx], rax
lea rcx, [rbp + 0x50]
lea rax, [rbp + 0x490]
nop dword [rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x180069160
mov eax, dword [rax]
mov dword [rcx], eax
add ebx, 0x1c17
mov r10d, 4
mov dword [rsp + 0x60], ebx
cmp ebx, 0x5445
jbe 0x180068d40
mov ebx, 0x6e
nop dword [rax + rax]
mov eax, ebx
sub eax, 0x6b
je 0x1800692d5
sub eax, 1
je 0x180069278
sub eax, 1
je 0x180069248
cmp eax, 1
jne 0x1800692a4
mov rax, qword [rbp + 0x2478]
lea r8, [rbp - 0x50]
mov r9d, 0x53
mov word [rbp - 0x50], r10w
lea rdx, [rbp - 0x10]
xor ecx, ecx
mov rax, qword [rax]
mov qword [rbp - 0x10], rax
call fcn.18002dab0
lea r15, [rax + 1]
mov rcx, r15
call fcn.18007218c
mov r8, r15
xor edx, edx
mov rcx, rax
mov r13, rax
call fcn.18006e5e0
jmp 0x1800692a4
mov rax, qword [rbp + 0x2478]
lea r8, [rbp - 0x78]
mov r9d, 0x53
mov word [rbp - 0x78], r10w
lea rdx, [rsp + 0x58]
mov rcx, r13
mov rax, qword [rax]
mov qword [rsp + 0x58], rax
call fcn.18002dab0
mov r15, rax
jmp 0x1800692a4
mov byte [r15 + r13], 0
lea rdx, [rbp + 0x1290]
mov r9d, dword [rsp + 0x50]
xor r8d, r8d
mov rcx, qword [rsp + 0x68]
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r13
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
movsxd r14, eax
dec ebx
mov r10d, 4
cmp ebx, 0x6a
ja 0x1800691e0
mov ebx, 0x20
nop word [rax + rax]
mov eax, ebx
sub eax, 0x20
je 0x1800692fb
cmp eax, 1
je 0x180068bcf
jmp 0x18006935d
test r14, r14
jne 0x1800692eb
mov rcx, r13
lea esi, [r14 + 1]
call fcn.180072184
jmp case.0x180068ba2.6
mov rsi, r14
mov rcx, r13
neg rsi
call fcn.180072184
jmp case.0x180068ba2.6
mov rax, qword [rbp + 0x2478]
lea r8, [rbp + 0x2498]
lea rdx, [rsp + 0x58]
mov word [rbp + 0x2498], r10w
mov ecx, 0x42
mov rax, qword [rax]
mov qword [rsp + 0x58], rax
call fcn.180018420
mov r9d, dword [rsp + 0x50]
lea rdx, [rbp + 0x1290]
movsxd rcx, eax
xor r8d, r8d
mov qword [rbp - 0x18], rcx
lea rax, [rbp - 0x18]
mov rcx, qword [rsp + 0x68]
mov dword [rsp + 0x28], 8
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
movsxd r14, eax
inc ebx
cmp ebx, 0x22
jae case.0x180068ba2.6
mov r10d, 4
jmp 0x1800692c0
mov rsi, r14
neg rsi
mov ebx, 0x3ec4
mov edi, 0xab
mov r10d, 4
mov r8d, 2
mov rdx, qword [rbp + 0x2478]
add ebx, 0x3df6
mov r11d, 0
cmp ebx, 0x7bec
jbe 0x180068b60
lea ebx, [r11 + 0x77]
jmp case.0x180068999.172
mov rcx, qword [rsp + 0x68]
lea rax, [rbp]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x50]
xor r8d, r8d
mov qword [rsp + 0x20], r11
lea rdx, [rbp + 0x1290]
mov rsi, 0xffffffffffffff9f
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
movsxd r14, eax
cmp r14, 2
jne 0x18006937f
mov r8, qword [rbp + 0x2470]
mov rax, qword [r8]
sub rax, 0x5a
je 0x18006943f
sub rax, 1
je 0x180069432
sub rax, 1
je 0x180069428
sub rax, 1
je 0x18006941d
lea r10d, [rsi + 0x65]
cmp rax, 0xb
jne 0x180069452
mov dword [rsp + 0x50], eax
jmp 0x18006944d
mov eax, 3
mov dword [rsp + 0x50], eax
jmp 0x180069447
mov dword [rsp + 0x50], 7
jmp 0x180069447
mov r10d, 4
mov dword [rsp + 0x50], r10d
jmp 0x18006944d
mov dword [rsp + 0x50], 1
mov r10d, 4
xor eax, eax
mov r14d, eax
mov ebx, 0xce
lea edi, [rbx - 0x23]
jmp 0x180069385
xor r9d, r9d
mov dword [rsp + 0x20], 0xef
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800108e0
mov byte [rbp - 0x60], al
jmp case.0x180068999.172
mov rax, qword [rdx]
lea r8, [rbp + 0x2498]
lea rdx, [rsp + 0x58]
mov qword [rsp + 0x58], rax
mov ecx, 0x42
mov word [rbp + 0x2498], r9w
call fcn.180018420
movsxd rbx, eax
lea r8, [rbp - 0x48]
mov eax, 2
lea rdx, [rsp + 0x58]
mov word [rbp - 0x48], ax
lea rcx, [rbp + 0x1c30]
mov rax, qword [rbp + 0x2478]
mov r9d, 0x53
mov rax, qword [rax]
mov qword [rsp + 0x58], rax
call fcn.18002dab0
mov eax, 3
lea r8, [rbp - 0x40]
mov word [rbp - 0x40], ax
lea rdx, [rsp + 0x58]
mov rax, qword [rbp + 0x2478]
lea rcx, [rbp + 0x1290]
mov r9d, 0x53
mov rax, qword [rax]
mov qword [rsp + 0x58], rax
call fcn.18002dab0
xor r9d, r9d
mov qword [rsp + 0x58], rbx
lea rax, [rsp + 0x58]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rax
lea r8d, [r9 + 0x67]
call fcn.180051020
mov qword [rbp - 0x80], rax
mov ebx, 0x77
jmp case.0x180068999.172
mov dword [rbp - 0x26], 0x2e0032
jmp case.0x180068999.172
mov eax, 0x70
mov word [rbp - 0x67], ax
jmp case.0x180068999.172
xor edx, edx
lea rcx, [rbp + 0x1c30]
mov r8d, 0x800
mov r13, r11
call fcn.18006e5e0
xor edx, edx
lea rcx, [rbp + 0x1290]
mov r8d, 0x800
call fcn.18006e5e0
jmp case.0x180068999.172
mov eax, 0x6c
mov dword [rbp - 0x22], 0x6c0064
mov word [rbp - 0x1e], ax
dec edi
cmp edi, dword [rbp - 0x38]
jbe case.0x180068999.157
mov rdx, qword [rbp + 0x2478]
lea rcx, [0x180000000]
mov r9d, 1
xor r11d, r11d
jmp 0x180068967