Function at 0x180047480
Capabilities:
Check for software breakpoints

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x38]
sub rsp, 0x138
mov rax, qword [0x18007cf38]
xor rax, rsp
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0xa0]
mov r13, rdx
mov edx, dword [rbp + 0xd8]
mov rbx, r9
mov r9, qword [rbp + 0xb0]
xor edi, edi
mov r11, qword [rbp + 0xc8]
mov r15, rcx
mov rcx, qword [rbp + 0xb8]
mov r14d, edx
mov r10, qword [rbp + 0xd0]
mov r12, qword [rbp + 0xc0]
mov rsi, qword [rsp + 0x50]
mov qword [rsp + 0x70], rax
mov rax, qword [rbp + 0xa8]
mov qword [rbp - 0x78], rax
mov rax, qword [rbp + 0xe0]
mov qword [rsp + 0x48], rax
lea eax, [rdx + 0x570]
cmp edx, eax
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x38], eax
mov edx, dword [rsp + 0x38]
mov dword [rsp + 0x28], edx
mov qword [rbp - 0x80], rbx
mov qword [rsp + 0x78], r8
mov qword [rsp + 0x58], r9
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x60], r11
mov qword [rsp + 0x40], r10
jae 0x180048a09
mov rax, qword [rbp - 0x78]
mov qword [rsp + 0x30], rax
mov eax, dword [rsp + 0x20]
cmp r14d, 0xbd
ja 0x180048885
je 0x18004766e
mov eax, r14d
sub eax, 0xd
je 0x180048873
sub eax, 4
je 0x1800487b6
sub eax, 0x63
je 0x1800475cf
sub eax, 0xd
je 0x1800475a0
mov rcx, qword [rsp + 0x30]
cmp eax, 4
jne 0x1800475c6
mov eax, esi
and eax, 7
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x20]
jmp 0x180047673
mov rax, qword [r10 + 0x1d8]
mov rcx, qword [rax + 0x10]
sub rcx, qword [rax]
movabs rax, 0x2fffffff40
cmp rcx, rax
mov rcx, qword [rsp + 0x30]
jge 0x1800489c7
mov eax, dword [rsp + 0x20]
jmp 0x180047673
mov ecx, dword [r10]
test ecx, ecx
je 0x1800475fb
sub ecx, 1
je 0x1800476d2
sub ecx, 1
je 0x180047799
cmp ecx, 1
jne 0x1800489f7
mov r14, qword [rsp + 0x68]
jmp 0x18004783c
mov r14, qword [rsp + 0x68]
mov ecx, 0x122
nop word [rax + rax]
mov eax, ecx
sub eax, 0x122
je 0x1800476b8
sub eax, 1
je 0x1800476ab
sub eax, 1
je 0x1800476a3
sub eax, 1
je 0x18004768f
cmp eax, 1
jne 0x1800476c2
mov rax, qword [rsp + 0x70]
mov dword [r12], edi
mov dword [rax], 0x16
mov eax, 0x51eb851f
mov r14d, reloc.SHELL32.dll_SHSetFolderPathW
imul dword [r11]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov rax, qword [rbp - 0x78]
mov dword [rax], edx
mov edx, dword [rsp + 0x28]
mov eax, dword [rsp + 0x20]
mov rcx, qword [rsp + 0x30]
mov r11, qword [rsp + 0x60]
add r14d, 0x74
cmp r14d, eax
jae 0x180048a12
mov rcx, qword [rsp + 0x68]
jmp 0x180047552
mov dword [r13], edi
mov dword [r8], 7
mov dword [r15], 0xe
jmp 0x1800476c2
mov dword [rbx], 0x10
jmp 0x1800476c2
mov rax, qword [rsp + 0x48]
mov dword [rax], 4
jmp 0x1800476c2
mov dword [r9], 0x140
mov dword [r14], edi
inc ecx
cmp ecx, 0x127
jb 0x180047610
jmp 0x1800476d7
mov r14, qword [rsp + 0x68]
mov ecx, SHRegGetIntW
nop dword [rax]
mov eax, ecx
sub eax, 0x117
je 0x18004776f
sub eax, 0x29
je 0x18004775f
sub eax, 0x29
je 0x180047756
sub eax, 0x29
je 0x18004770a
cmp eax, 0x29
je 0x180047648
jmp 0x180047788
mov rax, qword [rsp + 0x70]
mov dword [r15], 0xe
mov dword [rax], 1
mov eax, dword [r11]
cmp eax, 0x3e80
jne 0x180047730
mov dword [r12], 1
jmp 0x180047788
cmp eax, 0x5dc0
jne 0x180047741
mov dword [r12], 2
jmp 0x180047788
cmp eax, 0x7d00
jne 0x1800489e5
mov dword [r12], 3
jmp 0x180047788
mov dword [r8], 0xfffffffe
jmp 0x180047788
mov dword [rbx], 0x10
mov dword [r13], 4
jmp 0x180047788
mov rax, qword [rsp + 0x48]
mov dword [r9], 0x140
mov dword [r14], 2
mov dword [rax], 4
add ecx, 0x29
cmp ecx, 0x1e4
jb 0x1800476e0
jmp 0x18004779e
mov r14, qword [rsp + 0x68]
mov ecx, 8
mov eax, ecx
sub eax, 8
je 0x180047823
sub eax, 1
je 0x180047816
sub eax, 1
je 0x1800477ff
sub eax, 1
je 0x1800477c4
cmp eax, 1
je 0x180047648
jmp 0x180047831
mov rax, qword [rsp + 0x70]
mov dword [r15], 0x1c
mov dword [rax], 0x21
mov eax, dword [r11]
cmp eax, 0x5dc0
jne 0x1800477ea
mov dword [r12], 1
jmp 0x180047831
cmp eax, 0xbb80
jne 0x1800489e5
mov dword [r12], 3
jmp 0x180047831
mov dword [rbx], 0x20
mov dword [r13], 4
mov dword [r8], 7
jmp 0x180047831
mov rax, qword [rsp + 0x48]
mov dword [rax], 5
jmp 0x180047831
mov dword [r9], 0x280
mov dword [r14], 2
inc ecx
cmp ecx, 0xd
jb 0x1800477a3
mov edx, 0x104
cmp edx, 0x4b898
ja 0x1800489f7
cmp edx, 0x206fc
ja 0x1800478cf
je 0x1800478b2
cmp edx, 0x104
je 0x180047891
cmp edx, 0xadac
je 0x180047883
cmp edx, 0x15a54
jne 0x1800487ab
mov dword [r13], 4
add edx, 0xaca8
jmp 0x180047841
mov dword [rbx], 0x20
add edx, 0xaca8
jmp 0x180047841
mov rax, qword [rsp + 0x48]
add edx, 0xaca8
mov dword [r9], 0x280
mov dword [r14], 6
mov dword [rax], 5
jmp 0x180047841
mov rax, qword [rsp + 0x70]
add edx, 0xaca8
mov dword [r8], 7
mov dword [rax], 0x21
jmp 0x180047841
cmp edx, 0x2b3a4
je 0x1800478fa
cmp edx, 0x3604c
je 0x1800487a6
cmp edx, 0x40cf4
je 0x180047648
add edx, 0xaca8
jmp 0x180047841
mov eax, dword [r11]
cmp eax, 0x5140
jg 0x180048077
je 0x180047fe3
cmp eax, 0x3b60
jg 0x180047cee
je 0x180047c8f
cmp eax, 0x3070
jg 0x180047aee
je 0x180047ab0
cmp eax, 0x2a30
jg 0x180047a3e
je 0x1800479cf
cmp eax, 0x2260
je 0x1800479b0
cmp eax, 0x2580
je 0x18004795b
cmp eax, 0x28a0
je 0x180047971
jmp 0x180048763
mov eax, 0x7c
cmp eax, 0x7c
je 0x180047990
add eax, 0x11ec
cmp eax, 0x11ec
jbe 0x180047960
mov edx, 0x3604c
mov dword [r15], 0xc
add edx, 0xaca8
mov dword [r12], 0xd
jmp 0x180047841
mov edx, 0x3604c
mov dword [r15], 0xc
add edx, 0xaca8
mov dword [r12], 1
jmp 0x180047841
mov edx, 0x3604c
mov dword [r15], 0xc
add edx, 0xaca8
mov dword [r12], 0x3b
jmp 0x180047841
mov eax, 0x123
cmp eax, 0x123
je 0x180047a1f
add eax, 0x49e3
cmp eax, 0x49e3
jbe 0x1800479d4
mov eax, 0xf
nop dword [rax]
cmp eax, 0xf
je 0x180047acf
add eax, 0x64
cmp eax, 0x73
jb 0x1800479f0
mov ecx, 0xf7
mov eax, ecx
sub eax, 0xf7
je 0x180047a62
sub eax, 0x20
je 0x180047a58
cmp eax, 0x20
je 0x1800487a6
jmp 0x180047a69
mov edx, 0x3604c
mov dword [r15], 0xc
add edx, 0xaca8
mov dword [r12], 0xe
jmp 0x180047841
cmp eax, 0x2bc0
je 0x1800479e7
cmp eax, 0x2d50
je 0x180047a01
cmp eax, 0x2ee0
je 0x180047a74
jmp 0x180048763
mov dword [r12], 0x10
jmp 0x180047a69
mov dword [r15], 0xc
add ecx, 0x20
cmp ecx, 0x157
jb 0x180047a06
mov eax, 0xff
nop dword [rax]
cmp eax, 0xff
je 0x180047a94
cmp eax, 0x4fb0
je 0x1800487a6
jmp 0x180047aa3
mov dword [r15], 0xc
mov dword [r12], 2
add eax, 0x4eb1
cmp eax, 0x9d62
jbe 0x180047a80
nop
mov edx, 0x3604c
mov dword [r15], 0xc
add edx, 0xaca8
mov dword [r12], 0x11
jmp 0x180047841
mov edx, 0x3604c
mov dword [r15], 0xc
add edx, 0xaca8
mov dword [r12], 0xf
jmp 0x180047841
cmp eax, 0x36b0
jg 0x180047c28
je 0x180047bde
cmp eax, 0x3200
je 0x180047b42
cmp eax, 0x3390
je 0x180047b74
cmp eax, 0x3520
jne 0x180048763
mov ecx, 0x50
nop dword [rax]
mov eax, ecx
sub eax, 0x50
je 0x180047bc8
sub eax, 0x4f
je 0x180047bbe
cmp eax, 0x4f
je 0x1800487a6
jmp 0x180047bcf
mov eax, 0x38
cmp eax, 0x38
je 0x180047b59
cmp eax, 0x1068
je 0x1800487a6
jmp 0x180047b68
mov dword [r15], 0xc
mov dword [r12], 0x12
add eax, 0x1030
cmp eax, 0x2060
jbe 0x180047b47
mov eax, 0xcc
nop dword [rax]
cmp eax, 0xcc
je 0x180047ba6
cmp eax, 0x163
jne 0x180047bad
mov edx, 0x3604c
mov dword [r12], 0x13
add edx, 0xaca8
jmp 0x180047841
mov dword [r15], 0xc
add eax, 0x97
cmp eax, 0x1fa
jb 0x180047b80
jmp 0x180047b18
mov dword [r12], 0x14
jmp 0x180047bcf
mov dword [r15], 0xc
add ecx, 0x4f
cmp ecx, 0x13d
jb 0x180047b20
mov ecx, 0x6e
mov eax, ecx
sub eax, 0x6e
je 0x180047bf5
cmp eax, 0x22
je 0x1800487a6
jmp 0x180047c04
mov dword [r15], 0xc
mov dword [r12], 0x15
add ecx, 0x22
cmp ecx, 0xb2
jb 0x180047be3
mov ecx, 0xe9
mov eax, ecx
sub eax, 0xe9
je 0x180047c3b
cmp eax, 0x7a
je 0x1800487a6
jmp 0x180047c4a
cmp eax, 0x3840
je 0x180047c0f
cmp eax, 0x39d0
je 0x180047c55
jmp 0x180048763
mov dword [r15], 0x10
mov dword [r12], 3
add ecx, 0x7a
cmp ecx, 0x1dd
jb 0x180047c14
mov eax, 0x93
nop word [rax + rax]
cmp eax, 0x93
je 0x180047c74
cmp eax, 0x647d
je 0x1800487a6
jmp 0x180047c83
mov dword [r15], 0x10
mov dword [r12], 0x16
add eax, 0x63ea
cmp eax, 0xc7d4
jbe 0x180047c60
mov eax, 0xd1
cmp eax, 0xd1
je 0x180047ccf
add eax, 0x3511
cmp eax, 0x3511
jbe 0x180047c94
nop word [rax + rax]
mov edx, 0x3604c
mov dword [r15], 0x10
add edx, 0xaca8
mov dword [r12], 0x18
jmp 0x180047841
mov edx, 0x3604c
mov dword [r15], 0x10
add edx, 0xaca8
mov dword [r12], 0x17
jmp 0x180047841
cmp eax, 0x4650
jg 0x180047eb1
je 0x180047e60
cmp eax, 0x41a0
jg 0x180047e06
je 0x180047d9b
cmp eax, 0x3cf0
je 0x180047cb0
cmp eax, 0x3e80
je 0x180047d2a
cmp eax, 0x4010
je 0x180047d5f
jmp 0x180048763
mov eax, 0x89
nop
cmp eax, 0x89
je 0x180047d44
cmp eax, 0x224
je 0x1800487a6
jmp 0x180047d53
mov dword [r15], 0x10
mov dword [r12], 0x19
add eax, 0x19b
cmp eax, 0x336
jbe 0x180047d30
mov ecx, 0x128
nop dword [rax]
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x127
je 0x1800487a6
cmp eax, 1
jne 0x180047d91
mov dword [r15], 0x10
mov dword [r12], 0x1a
dec ecx
cmp ecx, 0x126
ja 0x180047d70
mov eax, 0x41
cmp eax, 0x41
je 0x180047dc3
cmp eax, 0xc4
je 0x180047db9
cmp eax, 0x147
je 0x1800487a6
jmp 0x180047dca
mov dword [r12], 4
jmp 0x180047dca
mov dword [r15], 0x12
add eax, 0x83
cmp eax, 0x1ca
jb 0x180047da0
mov ecx, 0xa4
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xa4
je 0x180047e32
cmp eax, 0x7f
jne 0x180047e39
mov edx, 0x3604c
mov dword [r12], 0x1b
add edx, 0xaca8
jmp 0x180047841
cmp eax, 0x4330
je 0x180047dd6
cmp eax, 0x44c0
jne 0x180048763
mov ecx, 0x11
nop dword [rax]
mov eax, ecx
sub eax, 0x11
je 0x180047e46
cmp eax, 0x77
je 0x1800487a6
jmp 0x180047e55
mov dword [r15], 0x12
add ecx, 0x7f
cmp ecx, 0x1a2
jb 0x180047de0
jmp 0x180047e18
mov dword [r15], 0x12
mov dword [r12], 0x1c
add ecx, 0x77
cmp ecx, 0xff
jb 0x180047e20
mov eax, 0xf
cmp eax, 0xf
je 0x180047e92
add eax, 0x852
cmp eax, 0x852
jbe 0x180047e65
mov ecx, 0x50
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x50
je 0x180047edc
cmp eax, 1
je 0x1800487a6
jmp 0x180047eeb
mov edx, 0x3604c
mov dword [r15], 0x12
add edx, 0xaca8
mov dword [r12], 0x1d
jmp 0x180047841
cmp eax, 0x4c90
jg 0x180047fb6
je 0x180047f4f
cmp eax, 0x47e0
je 0x180047e76
cmp eax, 0x4970
je 0x180047ef2
cmp eax, 0x4b00
je 0x180047f30
jmp 0x180048763
mov dword [r15], 0x12
mov dword [r12], 0x1e
inc ecx
cmp ecx, 0x52
jb 0x180047e80
mov eax, 0x55
cmp eax, 0x55
je 0x180047f1a
cmp eax, 0x2cd3
je 0x180047f10
cmp eax, 0x5951
je 0x1800487a6
jmp 0x180047f21
mov dword [r12], 0x1f
jmp 0x180047f21
mov dword [r15], 0x12
add eax, 0x2c7e
cmp eax, 0x857a
jbe 0x180047ef7
nop dword [rax]
mov edx, 0x3604c
mov dword [r15], 0x14
add edx, 0xaca8
mov dword [r12], 5
jmp 0x180047841
mov ecx, 0xd9
mov eax, ecx
sub eax, 0xd9
je 0x180047f77
sub eax, 1
je 0x180047f6d
cmp eax, 1
je 0x1800487a6
jmp 0x180047f7e
mov dword [r12], 0x20
jmp 0x180047f7e
mov dword [r15], 0x14
inc ecx
cmp ecx, 0xdc
jb 0x180047f54
mov eax, 0xf8
nop dword [rax]
cmp eax, 0xf8
je 0x180048004
cmp eax, 0x1bb
jne 0x18004800b
mov edx, 0x3604c
mov dword [r12], 0x21
add edx, 0xaca8
jmp 0x180047841
cmp eax, 0x4e20
je 0x180047f88
cmp eax, 0x4fb0
jne 0x180048763
mov eax, 0x112
nop dword [rax]
cmp eax, 0x112
je 0x18004801d
add eax, 0x8d48
cmp eax, 0x8d48
jbe 0x180047fd0
mov ecx, 0x112
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x112
je 0x18004803c
cmp eax, 1
je 0x1800487a6
jmp 0x18004804b
mov dword [r15], 0x14
add eax, 0xc3
cmp eax, 0x27e
jb 0x180047f90
jmp 0x180047fc8
mov edx, 0x3604c
mov dword [r15], 0x14
add edx, 0xaca8
mov dword [r12], 0x22
jmp 0x180047841
mov dword [r15], 0x14
mov dword [r12], 0x23
inc ecx
cmp ecx, 0x114
jb 0x180047ff0
mov ecx, 0x69
nop word [rax + rax]
mov eax, ecx
sub eax, 0x69
je 0x1800480ce
sub eax, 0x60
je 0x1800480c4
cmp eax, 0x60
je 0x1800487a6
jmp 0x1800480d5
cmp eax, 0x68b0
jg 0x180048480
je 0x180048401
cmp eax, 0x5dc0
jg 0x1800482dc
je 0x18004825a
cmp eax, 0x5780
jg 0x180048219
je 0x180048143
cmp eax, 0x52d0
je 0x180048055
cmp eax, 0x5460
je 0x1800480e0
cmp eax, 0x55f0
je 0x180048119
jmp 0x180048763
mov dword [r12], 0x24
jmp 0x1800480d5
mov dword [r15], 0x14
add ecx, 0x60
cmp ecx, 0x189
jb 0x180048060
mov ecx, 0x104
mov eax, ecx
sub eax, 0x104
je 0x180048108
sub eax, 1
je 0x1800480fe
cmp eax, 1
je 0x1800487a6
jmp 0x18004810f
mov dword [r12], 6
jmp 0x18004810f
mov dword [r15], 0x16
inc ecx
cmp ecx, 0x107
jb 0x1800480e5
mov ecx, 0xa8
nop
mov eax, ecx
sub eax, 0xa7
je 0x1800481e2
cmp eax, 1
jne 0x180048139
mov dword [r15], 0x16
dec ecx
cmp ecx, 0xa6
ja 0x180048120
mov eax, 0x20
nop dword [rax + rax]
cmp eax, 0x20
je 0x1800481fa
add eax, 0x31
cmp eax, 0x51
jb 0x180048150
mov ecx, 0x107
nop word [rax + rax]
mov eax, ecx
sub eax, 0x106
je 0x180048274
cmp eax, 1
jne 0x180048189
mov dword [r15], 0x16
dec ecx
cmp ecx, 0x105
ja 0x180048170
mov ecx, 0x23
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x22
je 0x1800487a6
cmp eax, 1
jne 0x1800481bf
mov dword [r15], 0x16
mov dword [r12], 0x28
dec ecx
cmp ecx, 0x21
ja 0x1800481a0
mov eax, 0x36
nop dword [rax + rax]
cmp eax, 0x36
je 0x18004823b
cmp eax, 0xc9
je 0x1800487a6
jmp 0x18004824a
mov edx, 0x3604c
mov dword [r12], 0x25
add edx, 0xaca8
jmp 0x180047841
mov edx, 0x3604c
mov dword [r15], 0x16
add edx, 0xaca8
mov dword [r12], 0x26
jmp 0x180047841
cmp eax, 0x5910
je 0x180048161
cmp eax, 0x5aa0
je 0x180048193
cmp eax, 0x5c30
je 0x1800481c6
jmp 0x180048763
mov dword [r15], 0x16
mov dword [r12], 0x29
add eax, 0x93
cmp eax, 0x15c
jb 0x1800481d0
mov eax, 0xc3
nop
cmp eax, 0xc3
je 0x18004828c
cmp eax, 0x5c2b
je 0x1800487a6
jmp 0x18004829b
mov edx, 0x3604c
mov dword [r12], 0x27
add edx, 0xaca8
jmp 0x180047841
mov dword [r15], 0x18
mov dword [r12], 7
add eax, 0x5b68
cmp eax, 0xb6d0
jbe 0x180048260
mov ecx, 0x62
nop dword [rax]
mov eax, ecx
sub eax, 0x62
je 0x18004835e
cmp eax, 1
jne 0x180048365
mov edx, 0x3604c
mov dword [r12], 0x2a
add edx, 0xaca8
jmp 0x180047841
cmp eax, 0x6400
jg 0x1800483bc
je 0x180048336
cmp eax, 0x5f50
je 0x1800482a7
cmp eax, 0x60e0
je 0x180048370
cmp eax, 0x6270
jne 0x180048763
mov ecx, 0x7a
mov eax, ecx
sub eax, 0x7a
je 0x180048328
sub eax, 1
je 0x18004831e
cmp eax, 1
je 0x1800487a6
jmp 0x18004832f
mov dword [r12], 0x2c
jmp 0x18004832f
mov dword [r15], 0x18
inc ecx
cmp ecx, 0x7d
jb 0x180048307
mov ecx, 0x11
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xf
je 0x1800487a6
sub eax, 1
je 0x18004838f
cmp eax, 1
jne 0x180048397
mov dword [r15], 0x18
jmp 0x180048397
mov dword [r15], 0x18
inc ecx
cmp ecx, 0x64
jb 0x1800482b0
mov edx, 0x3604c
mov dword [r15], 0x18
add edx, 0xaca8
mov dword [r12], 0x2b
jmp 0x180047841
mov dword [r12], 0x2d
dec ecx
cmp ecx, 0xe
ja 0x180048340
mov ecx, 0x111
mov eax, ecx
sub eax, 0x111
je 0x1800483d9
sub eax, 1
je 0x1800483cf
cmp eax, 1
je 0x1800487a6
jmp 0x1800483e0
cmp eax, 0x6590
je 0x18004839e
cmp eax, 0x6720
je 0x1800483ea
jmp 0x180048763
mov dword [r12], 0x2e
jmp 0x1800483e0
mov dword [r15], 0x18
inc ecx
cmp ecx, 0x114
jb 0x1800483a3
mov eax, 6
nop
cmp eax, 6
je 0x180048449
add eax, 0x312
cmp eax, 0x312
jbe 0x1800483f0
mov ecx, 0xc0
mov eax, ecx
sub eax, 0xbf
je 0x180048468
cmp eax, 1
jne 0x18004841b
mov dword [r15], 0x1a
dec ecx
cmp ecx, 0xbe
ja 0x180048406
mov ecx, 0x54
nop word [rax + rax]
mov eax, ecx
sub eax, 0x54
je 0x18004851f
cmp eax, 0x32
je 0x1800487a6
jmp 0x18004852e
mov edx, 0x3604c
mov dword [r15], 0x1a
add edx, 0xaca8
mov dword [r12], 8
jmp 0x180047841
mov edx, 0x3604c
mov dword [r12], 0x2f
add edx, 0xaca8
jmp 0x180047841
cmp eax, 0x73a0
jg 0x180048649
je 0x1800485bf
cmp eax, 0x6ef0
jg 0x18004855f
je 0x180048500
cmp eax, 0x6a40
je 0x180048425
cmp eax, 0x6bd0
je 0x180048540
cmp eax, 0x6d60
jne 0x180048763
mov eax, 0x13
cmp eax, 0x13
je 0x1800484e3
cmp eax, 0x7b8
je 0x1800484d9
cmp eax, 0xf5d
je 0x1800487a6
jmp 0x1800484ea
mov dword [r12], 0x32
jmp 0x1800484ea
mov dword [r15], 0x1a
add eax, 0x7a5
cmp eax, 0x16ef
jbe 0x1800484c0
nop word [rax + rax]
mov edx, 0x3604c
mov dword [r15], 0x1a
add edx, 0xaca8
mov dword [r12], 0x33
jmp 0x180047841
mov dword [r15], 0x1a
mov dword [r12], 0x30
add ecx, 0x32
cmp ecx, 0xb8
jb 0x180048430
nop dword [rax]
mov edx, 0x3604c
mov dword [r15], 0x1a
add edx, 0xaca8
mov dword [r12], 0x31
jmp 0x180047841
cmp eax, 0x7080
je 0x180048572
cmp eax, 0x7210
je 0x1800485a0
jmp 0x180048763
mov eax, 0x11
cmp eax, 0x11
je 0x180048587
cmp eax, 0x5c
je 0x1800487a6
jmp 0x180048596
mov dword [r15], 0x1c
mov dword [r12], 9
add eax, 0x4b
cmp eax, 0xa7
jb 0x180048577
mov edx, 0x3604c
mov dword [r15], 0x1c
add edx, 0xaca8
mov dword [r12], 0x34
jmp 0x180047841
mov ecx, reloc.SHLWAPI.dll_SHRegGetIntW
mov eax, ecx
sub eax, reloc.SHLWAPI.dll_SHRegGetIntW
je 0x1800485d8
cmp eax, 0x34
je 0x1800487a6
jmp 0x1800485e7
mov dword [r15], 0x1c
mov dword [r12], 0x35
add ecx, 0x34
cmp ecx, 0x180
jb 0x1800485c4
mov ecx, 0xb9
nop word [rax + rax]
mov eax, ecx
sub eax, 0xb8
je 0x1800486e1
cmp eax, 1
jne 0x180048619
mov dword [r15], 0x1c
dec ecx
cmp ecx, 0xb7
ja 0x180048600
mov ecx, 0xd6
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xd6
je 0x18004867a
sub eax, 1
je 0x180048670
cmp eax, 1
je 0x1800487a6
jmp 0x180048681
cmp eax, 0x79e0
jg 0x1800486f9
je 0x1800486a3
cmp eax, 0x7530
je 0x1800485f2
cmp eax, 0x76c0
je 0x180048623
cmp eax, 0x7850
je 0x18004868b
jmp 0x180048763
mov dword [r12], 0x37
jmp 0x180048681
mov dword [r15], 0x1c
inc ecx
cmp ecx, 0xd9
jb 0x180048630
mov eax, 0xfe
cmp eax, 0xfe
je 0x1800486c2
add eax, 0x3398
cmp eax, 0x3398
jbe 0x180048690
mov edx, 0x3604c
mov dword [r15], 0x1c
add edx, 0xaca8
mov dword [r12], 0xa
jmp 0x180047841
mov edx, 0x3604c
mov dword [r15], 0x1c
add edx, 0xaca8
mov dword [r12], 0x38
jmp 0x180047841
mov edx, 0x3604c
mov dword [r12], 0x36
add edx, 0xaca8
jmp 0x180047841
cmp eax, 0x7b70
je 0x180048709
cmp eax, 0x7d00
je 0x180048748
jmp 0x180048763
mov eax, SHRegGetIntW
nop
cmp eax, 0x115
je 0x180048735
cmp eax, 0x476a
je 0x18004872b
cmp eax, 0x8dbf
je 0x1800487a6
jmp 0x18004873c
mov dword [r12], 0x39
jmp 0x18004873c
mov dword [r15], 0x1c
add eax, 0x4655
cmp eax, 0xd2ff
jbe 0x180048710
mov eax, 0xa8
nop dword [rax]
cmp eax, 0xa8
je 0x180048797
add eax, 0x3f00
cmp eax, 0x3f00
jbe 0x180048750
mov ecx, 0xe2
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xe1
je 0x1800487a6
cmp eax, 1
je 0x1800489e5
dec ecx
cmp ecx, 0xe0
ja 0x180048770
add edx, 0xaca8
jmp 0x180047841
mov dword [r15], 0x1c
mov dword [r12], 0x3a
mov edx, 0x3604c
add edx, 0xaca8
jmp 0x180047841
mov eax, dword [r11]
cmp eax, 0xa
jl 0x1800487fb
mov r8d, 0x10c
lea rcx, [rsp + 0x50]
mov rdx, r10
call fcn.180028220
cmp dword [rsp + 0x54], 0
mov edx, eax
mov dword [rsp + 0x28], eax
jne 0x180048f9d
mov rsi, qword [rsp + 0x50]
mov r10, qword [rsp + 0x40]
mov r9, qword [rsp + 0x58]
mov r8, qword [rsp + 0x78]
jmp 0x18004766a
mov rsi, qword [rsp + 0x60]
mov ebx, 0x7d
cmp ebx, 0x7d
jne 0x18004884d
movsxd r8, eax
lea rcx, [rbp + 0x10]
mov rdx, r10
call sub.VCRUNTIME140.dll_memcpy
mov r8d, 0x10c
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x50]
call fcn.180028220
mov edx, eax
mov dword [rsp + 0x28], eax
mov eax, dword [rsi]
cmp edx, eax
jg 0x180048f9d
cmp dword [rsp + 0x54], 0
jne 0x180048f9d
mov r10, qword [rsp + 0x40]
add ebx, 0x2693
cmp ebx, 0x2693
jbe 0x180048805
mov rsi, qword [rsp + 0x50]
mov r9, qword [rsp + 0x58]
mov r8, qword [rsp + 0x78]
mov rbx, qword [rbp - 0x80]
jmp 0x18004766a
mov rcx, qword [r11 + 0x10]
mov eax, dword [rsp + 0x20]
mov qword [rsp + 0x30], rcx
jmp 0x180047673
mov eax, r14d
sub eax, 0xe8
je 0x180047648
sub eax, 0x11
je 0x1800489b4
sub eax, 0x74
je 0x1800489ad
sub eax, 0x38
je 0x1800488dd
cmp eax, 0x74
jne 0x18004766a
mov rdx, qword [r10]
lea ecx, [rax + 0x15]
call fcn.18003c520
mov r10, qword [rsp + 0x40]
mov r9, qword [rsp + 0x58]
mov r8, qword [rsp + 0x78]
mov qword [r10 + 8], rdi
mov qword [r10 + 0x10], rdi
mov qword [r10], rdi
jmp 0x180047666
mov rax, qword [r10 + 0x10]
cmp qword [r10], rax
je 0x18004766a
mov rdi, qword [rsp + 0x40]
nop
mov ebx, reloc.SHLWAPI.dll_SHRegGetIntW
mov eax, ebx
sub eax, reloc.SHLWAPI.dll_SHRegGetIntW
je 0x180048905
cmp eax, 1
je 0x18004896d
jmp 0x180048978
add qword [rdi + 0x10], 0xffffffffffffffa0
mov ecx, 0x89
mov rax, qword [rdi + 0x10]
movups xmm1, xmmword [rax + 0x20]
movups xmm2, xmmword [rax]
movups xmm0, xmmword [rax + 0x10]
movaps xmmword [rbp - 0x30], xmm1
movups xmm1, xmmword [rax + 0x40]
movaps xmmword [rbp - 0x40], xmm0
movups xmm0, xmmword [rax + 0x50]
movaps xmmword [rbp - 0x10], xmm1
movdqa xmm1, xmm2
psrldq xmm1, 8
movq rdx, xmm1
movaps xmmword [rbp], xmm0
movups xmmword [rbp - 0x68], xmm2
call fcn.18003c520
mov ecx, dword [rbp - 0x68]
sub ecx, 1
je 0x18004895f
sub ecx, 1
je 0x18004895f
cmp ecx, 1
jne 0x180048978
mov rdx, qword [rbp - 0x40]
mov ecx, 0x89
call fcn.18003c520
mov ebx, 0x119
mov r14d, 0x1a5
inc ebx
cmp ebx, 0x11a
jb 0x1800488f5
mov rax, qword [rdi + 0x10]
cmp qword [rdi], rax
jne 0x1800488f0
mov r10, qword [rsp + 0x40]
xor edi, edi
mov r9, qword [rsp + 0x58]
mov r8, qword [rsp + 0x78]
mov rbx, qword [rbp - 0x80]
jmp 0x180047666
add dword [rcx], edx
jmp 0x18004766a
movsxd rax, edx
add r10, rax
mov dword [r9], esi
mov qword [rsp + 0x40], r10
jmp 0x18004766a
mov r13d, dword [rsp + 0x38]
mov rbx, qword [rbp - 0x78]
mov dword [r10], 1
mov r15d, 0x9a6
mov rdx, rcx
jmp 0x180048e08
mov dword [rsp + 0x48], 3
mov rax, qword [rsp + 0x48]
jmp 0x1800490a3
mov dword [rsp + 0x48], 6
mov rax, qword [rsp + 0x48]
jmp 0x1800490a3
mov rcx, qword [rbp - 0x78]
mov qword [rsp + 0x30], rcx
mov eax, dword [rbp + 0xd8]
mov r15d, eax
mov r13d, dword [rsp + 0x38]
mov rbx, qword [rbp - 0x78]
imul eax, eax, 0x2f4
cmp r15d, eax
ja 0x18004909b
cmp r15d, 0x673
ja 0x180048d5f
je 0x180048d31
cmp r15d, 0xbd
ja 0x180048caf
je 0x180048c5b
cmp r15d, 0xd
je 0x180048a97
cmp r15d, 0x11
je 0x180048a7d
cmp r15d, 0x74
jne 0x180048e20
mov dword [rsp + 0x48], edi
mov rax, qword [rsp + 0x48]
jmp 0x1800490a3
imul eax, dword [rbp + 0xd8], 0x3f
sub dword [r11], edx
mov r11, qword [rsp + 0x60]
add r15d, eax
mov eax, dword [rbp + 0xd8]
jmp 0x180048a24
test rcx, rcx
je 0x180048aaf
cmp byte [rcx], 0x21
jne 0x180048b73
cmp byte [rcx + 1], 0
jne 0x180048b73
mov r12d, 0x45
mov eax, r12d
sub eax, 0x44
je 0x180048add
cmp eax, 1
jne 0x180048b61
mov rdx, rcx
mov ecx, 0x89
call fcn.18003c520
mov rcx, qword [rsp + 0x30]
jmp 0x180048b61
mov r14d, 0x125
lea rsi, str.state_machine_failed.
nop word [rax + rax]
mov eax, r14d
sub eax, 0x125
je 0x180048b33
sub eax, 1
je 0x180048b4b
sub eax, 3
je 0x180048b2a
cmp eax, 1
jne 0x180048b3f
lea rax, [rbp - 0x68]
mov qword [rbp - 0x78], rsi
mov r8d, 0x120
mov qword [rbp - 0x80], rax
lea rdx, [rbp - 0x78]
lea rcx, [rbp - 0x80]
call fcn.18000fc20
jmp 0x180048b3f
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x68], xmm0
jmp 0x180048b3f
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__strdup]
mov rbx, rax
inc r14d
cmp r14d, 0x129
jb 0x180048af0
mov rsi, qword [rsp + 0x50]
mov rcx, rbx
mov qword [rsp + 0x30], rbx
test rbx, rbx
je 0x1800489d7
dec r12d
cmp r12d, 0x43
ja 0x180048ab5
mov r10, qword [rsp + 0x40]
mov r8, qword [r10 + 0x1d8]
xor eax, eax
mov qword [rbp - 0x2c], rax
lea r9, [r8 + 8]
mov dword [rbp - 0x24], eax
mov qword [rbp - 0x48], rcx
mov rcx, qword [rsp + 0x60]
mov qword [rbp - 0x50], 1
movups xmm0, xmmword [rcx + 0x38]
mov rax, qword [rcx + 0x18]
movups xmm1, xmmword [rcx + 0x50]
mov qword [rbp - 0x40], rax
mov rax, qword [rcx + 0x20]
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x38], rax
movsd xmm0, qword [rcx + 0x48]
mov eax, dword [rcx + 0x30]
movsd qword [rbp - 0x10], xmm0
movsd xmm0, qword [rcx + 0x60]
lea rcx, [r8 + 0x10]
mov dword [rbp - 0x30], eax
mov rax, qword [r9]
movups xmmword [rbp - 8], xmm1
movsd qword [rbp + 8], xmm0
cmp qword [rcx], rax
jne 0x180048c10
mov edx, 0x44
call fcn.180060df0
test eax, eax
jne 0x180048c0b
mov r8, qword [rsp + 0x40]
mov r15d, 0x9a6
mov rcx, qword [rsp + 0x30]
mov rdx, rcx
mov dword [r8], 1
jmp 0x180048e08
mov r10, qword [rsp + 0x40]
mov rax, qword [r10 + 0x1d8]
movaps xmm0, xmmword [rbp - 0x50]
movaps xmm1, xmmword [rbp - 0x40]
mov rcx, qword [rax + 0x10]
movups xmmword [rcx], xmm0
movaps xmm0, xmmword [rbp - 0x30]
movups xmmword [rcx + 0x10], xmm1
movups xmm1, xmmword [rbp - 0x78]
movups xmmword [rcx + 0x20], xmm0
movaps xmm0, xmmword [rbp - 0x10]
movups xmmword [rcx + 0x30], xmm1
movaps xmm1, xmmword [rbp]
movups xmmword [rcx + 0x40], xmm0
movups xmmword [rcx + 0x50], xmm1
mov rax, qword [r10 + 0x1d8]
add qword [rax + 0x10], 0x60
jmp 0x180048e17
mov rdx, qword [r10 + 0x18]
mov ecx, 0x89
call fcn.18003c520
mov r10, qword [rsp + 0x40]
mov r14, qword [r10 + 0x20]
cmp r14, qword [r10 + 0x28]
je 0x180048e17
nop dword [rax]
mov rdx, qword [r14]
mov ecx, 0x89
call fcn.18003c520
mov rdx, qword [r14 + 8]
mov ecx, 0x89
call fcn.18003c520
mov r10, qword [rsp + 0x40]
add r14, 0x10
cmp r14, qword [r10 + 0x28]
jne 0x180048c80
jmp 0x180048e17
cmp r15d, 0x340
je 0x180048d00
cmp r15d, 0x440
jne 0x180048e20
mov r8d, dword [rsp + 0x38]
test r8d, r8d
je 0x180049015
sub r8d, 1
je 0x180048e3a
sub r8d, 1
je 0x180048ea2
cmp r8d, 3
jne 0x180048f9d
mov rbx, qword [rsp + 0x48]
mov r9, qword [rsp + 0x58]
jmp 0x180048f6a
mov rax, qword [r10 + 0x1d8]
mov rcx, qword [rax + 0x10]
sub rcx, qword [rax]
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
mov r13, rdx
sar r13, 4
mov rax, r13
shr rax, 0x3f
add r13, rax
jmp 0x180048e17
mov rdx, qword [r11 + 8]
lea r8, [rsp + 0x20]
mov r9d, 0x89
mov dword [rsp + 0x20], r13d
mov rcx, r10
call fcn.1800416c0
test eax, eax
je 0x180048a6f
mov dword [rsp + 0x48], r13d
jmp 0x180048e12
cmp r15d, 0x9a6
je 0x18004909b
cmp r15d, 0xcd9
je 0x180048df1
cmp r15d, 0x100c
je 0x180048dd3
cmp r15d, 0x133f
je 0x18004909b
cmp r15d, 0x2f40
jne 0x180048e20
mov rdx, qword [r10 + 0x20]
mov ecx, 0x89
call fcn.18003c520
mov r10, qword [rsp + 0x40]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [r10], xmm0
movups xmmword [r10 + 0x10], xmm0
movups xmmword [r10 + 0x20], xmm0
movups xmmword [r10 + 0x30], xmm0
movups xmmword [r10 + 0x40], xmm0
movups xmmword [r10 + 0x50], xmm0
mov qword [r10 + 0x60], rax
jmp 0x180048e17
imul eax, dword [rbp + 0xd8], 0x3f
mov r11, qword [rsp + 0x60]
mov dword [rsp + 0x48], edi
add r15d, eax
mov eax, dword [rbp + 0xd8]
jmp 0x180048a24
mov rdx, qword [r11 + 8]
mov ecx, 0x89
call fcn.18003c520
mov rax, qword [rsp + 0x60]
mov rdx, qword [rax + 0x18]
mov ecx, 0x89
call fcn.18003c520
mov r10, qword [rsp + 0x40]
mov edx, dword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
imul eax, dword [rbp + 0xd8], 0x3f
mov r11, qword [rsp + 0x60]
add r15d, eax
mov eax, dword [rbp + 0xd8]
jmp 0x180048a24
mov r9, qword [rsp + 0x58]
mov edx, SHSetInstanceExplorer
nop dword [rax]
nop dword [rax + rax]
mov eax, edx
sub eax, 0xac
je 0x180048fe5
cmp eax, 1
jne 0x180048e92
cmp dword [r11], 8
jl 0x180048f9d
movzx eax, byte [r10 + 2]
movzx ecx, byte [r10 + 3]
shl ecx, 8
or ecx, eax
movzx eax, byte [r10 + 1]
shl ecx, 8
or ecx, eax
movzx eax, byte [r10]
shl ecx, 8
or ecx, eax
mov dword [r9 + 4], ecx
dec edx
cmp edx, 0xab
ja 0x180048e50
mov edx, dword [rsp + 0x28]
jmp 0x180048ea7
mov r9, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x48]
mov r14d, SHRegGetIntW
cmp r14d, 0x115
je 0x180048efa
cmp r14d, 0x148f
je 0x180048ee9
cmp r14d, 0x2809
je 0x180048edc
cmp r14d, 0x3b83
je 0x1800490a0
jmp 0x180048f51
movsxd rax, edx
add rax, r10
mov ebx, esi
add rbx, rax
jmp 0x180048f51
mov rax, qword [rsp + 0x68]
mov eax, dword [rax]
add eax, edx
add eax, esi
mov dword [r9 + 8], eax
jmp 0x180048f51
movsxd rax, dword [r11]
mov rdx, r10
cmp eax, 0xa
jge 0x180048f15
mov r8, rax
lea rcx, [rbp + 0x10]
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rbp + 0x10]
mov r8d, 0x10c
lea rcx, [rsp + 0x50]
call fcn.180028220
mov r11, qword [rsp + 0x60]
mov edx, eax
mov rsi, qword [rsp + 0x50]
add eax, esi
cmp dword [r11], eax
jb 0x180048f9d
cmp dword [rsp + 0x54], 0
jne 0x180048f9d
mov rax, qword [rsp + 0x68]
mov r9, qword [rsp + 0x58]
mov ecx, dword [rax]
add ecx, edx
mov dword [r9 + 4], ecx
mov r10, qword [rsp + 0x40]
add r14d, 0x137a
cmp r14d, 0x4de8
jbe 0x180048eb2
mov r8, qword [rsp + 0x40]
mov edx, 0xcd
nop dword [rax]
nop dword [rax + rax]
mov eax, edx
sub eax, 0xcb
je 0x1800490a0
sub eax, 1
je 0x180048fa5
cmp eax, 1
jne 0x180048fd3
cmp dword [r11], 4
jge 0x180048fd3
mov rax, rdi
jmp 0x1800490a3
movzx eax, byte [r8 + 2]
lea rbx, [r8 + 4]
movzx ecx, byte [r8 + 3]
shl ecx, 8
or ecx, eax
movzx eax, byte [r8 + 1]
shl ecx, 8
or ecx, eax
movzx eax, byte [r8]
shl ecx, 8
or ecx, eax
mov dword [r9 + 8], edi
mov dword [r9 + 4], ecx
dec edx
cmp edx, 0xca
ja 0x180048f80
mov rax, rdi
jmp 0x1800490a3
movzx eax, byte [r10 + 6]
movzx ecx, byte [r10 + 7]
shl ecx, 8
or ecx, eax
movzx eax, byte [r10 + 5]
shl ecx, 8
or ecx, eax
movzx eax, byte [r10 + 4]
shl ecx, 8
or ecx, eax
lea rax, [r10 + 8]
mov dword [r9 + 8], ecx
jmp 0x1800490a3
mov eax, dword [r11]
cmp eax, 0xa
jl 0x180049040
mov rcx, qword [rsp + 0x58]
mov r8d, 0x10c
add rcx, 4
mov rdx, r10
call fcn.180028220
mov edx, eax
movsxd rax, edx
add rax, qword [rsp + 0x40]
jmp 0x1800490a3
mov rsi, qword [rsp + 0x58]
mov ebx, SHTestTokenMembership
nop word [rax + rax]
cmp ebx, 0xf3
jne 0x180049089
movsxd r8, eax
lea rcx, [rbp + 0x10]
mov rdx, r10
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rsi + 4]
lea r8d, [rbx + 0x19]
lea rdx, [rbp + 0x10]
call fcn.180028220
mov edx, eax
mov rax, qword [rsp + 0x60]
mov eax, dword [rax]
cmp eax, edx
jl 0x180048f9d
add ebx, 0x65
cmp ebx, 0x158
jae 0x180049036
mov r10, qword [rsp + 0x40]
jmp 0x180049050
mov rbx, qword [rsp + 0x48]
mov rax, rbx
mov rcx, qword [rbp + 0x20]
xor rcx, rsp
call fcn.180065820
add rsp, 0x138
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret