Function at 0x66647b80
Capabilities:
Delete registry key
Set registry value

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3bc
mov dword [esp + 4], 0x66652d20
mov dword [esp], 0x80000001
call sub.advapi32.dll_RegDeleteKeyW
sub esp, 8
test eax, 0xfffffffd
je 0x66647bc0
test byte [0x66650048], 2
jne 0x66647f70
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
lea eax, [ebp - 0x36c]
mov dword [esp + 4], 0x66652d20
mov dword [esp + 8], eax
mov dword [esp], 0x80000001
call sub.advapi32.dll_RegCreateKeyW
sub esp, 0xc
mov ebx, eax
test eax, eax
jne 0x666480c0
mov edi, dword [section..bss]
test edi, edi
je 0x666487ff
mov eax, 0x66652d20
xor esi, esi
shr eax, 0x10
mov dword [ebp - 0x390], eax
lea eax, [ebp - 0x218]
mov dword [ebp - 0x37c], eax
lea eax, [ebp - 0x366]
mov dword [ebp - 0x380], eax
jmp 0x66647c33
mov edi, dword [edi + 0x18]
test edi, edi
je 0x66647d3e
lea ebx, [esi + 1]
test byte [edi + 0x2b], 0x40
jne 0x66647c28
mov edx, dword [edi + 8]
test edx, edx
je 0x66647c28
mov eax, dword [ebp - 0x380]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0x66652ce0
mov dword [esp + 4], 0x11
mov dword [esp], eax
call fcn.66647090
mov eax, dword [edi + 0x28]
mov edx, dword [edi + 8]
mov dword [esp + 8], str._c___s
mov dword [esp + 4], 0x100
not eax
mov dword [esp + 0x10], edx
shr eax, 0x1f
add eax, 0x30
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x37c]
mov dword [esp], eax
call fcn.66647090
mov eax, dword [ebp - 0x37c]
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll__wcslwr]
cmp word [ebp - 0x218], 0
je 0x66648500
mov eax, dword [ebp - 0x37c]
lea esi, [esi]
add eax, 2
cmp word [eax], 0
jne 0x66647cc0
sub eax, dword [ebp - 0x37c]
add eax, 2
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x37c]
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x380]
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x36c]
mov dword [esp], eax
call sub.advapi32.dll_RegSetValueExW
lea ecx, [esi + 2]
mov dword [ebp - 0x38c], eax
sub esp, 0x18
mov dword [ebp - 0x384], ecx
test eax, eax
je 0x66647d2b
test byte [0x66650048], 2
jne 0x666481b0
mov edi, dword [edi + 0x18]
mov esi, ebx
mov ebx, dword [ebp - 0x384]
test edi, edi
jne 0x66647c33
mov eax, dword [ebp - 0x380]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0x66652ce0
mov dword [esp + 4], 0x11
mov dword [esp], eax
call fcn.66647090
mov esi, dword [ebp - 0x37c]
mov dword [esp + 0x10], str.Internal_PCM_Converter
mov dword [esp + 0xc], 0x31
mov dword [esp + 8], str._c___s
mov dword [esp + 4], 0x100
mov dword [esp], esi
call fcn.66647090
cmp word [ebp - 0x218], 0
je 0x66648821
mov eax, esi
nop
add eax, 2
cmp word [eax], 0
jne 0x66647da0
sub eax, dword [ebp - 0x37c]
add eax, 2
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x37c]
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x380]
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x36c]
mov dword [esp], eax
call sub.advapi32.dll_RegSetValueExW
sub esp, 0x18
mov ebx, eax
test eax, eax
je 0x66647f56
test byte [0x66650048], 2
je 0x66647f56
mov eax, 0x66652d20
mov ecx, eax
shr ecx, 0x10
je 0x6664861d
mov dword [esp + 4], 0xffffffff
mov dword [esp], 0x66652d20
call sub.kernel32.dll_IsBadStringPtrW
mov dword [ebp - 0x380], 0x666528f6
sub esp, 8
test eax, eax
jne 0x66648636
lea esi, [esi]
nop
mov edx, eax
lea eax, [eax + 1]
cmp word [edx + edx + 0x66652d22], 0
jne 0x66647e40
mov eax, 0x224c
lea edi, [ebp - 0x222]
mov esi, 0x66652d20
mov dword [ebp - 0x380], ebx
mov word [ebp - 0x344], ax
lea ecx, [ebp - 0x342]
mov eax, 0x53
mov dword [ebp - 0x37c], edi
jmp 0x66647ebc
cmp ax, 9
je 0x666488e0
cmp ax, 0xa
jne 0x6664899f
mov eax, 0x6e5c
add ecx, 2
mov word [ecx - 2], ax
lea edi, [edx - 1]
cmp ecx, dword [ebp - 0x37c]
ja 0x66648a0b
test edx, edx
jle 0x66648a0b
movzx eax, word [esi]
mov edx, edi
add esi, 2
cmp ax, 0xd
je 0x66648981
jbe 0x66647e80
cmp ax, 0x22
je 0x666489f0
cmp ax, 0x5c
jne 0x66648992
mov ebx, 0x5c5c
add ecx, 2
mov word [ecx - 2], bx
jmp 0x66647ea0
mov byte [ecx], 0x22
mov ebx, dword [ebp - 0x384]
lea eax, [ecx + 1]
test edi, edi
jle 0x66647f0d
mov esi, 0x2e2e
mov byte [ecx + 3], 0x2e
lea eax, [ecx + 4]
mov word [ecx + 1], si
mov byte [eax], 0
lea eax, [ebp - 0x344]
mov dword [esp], eax
call fcn.6664f9d0
mov edx, eax
mov eax, dword [ebp - 0x380]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], str.unable_to_write_value_for__s_under_key__s__0x_08x__n
mov dword [esp + 8], str.MSACM_WriteCurrentPriorities
mov dword [esp + 4], 0x66650048
mov dword [esp], 1
call fcn.66647130
mov eax, dword [ebp - 0x36c]
mov dword [esp], eax
call sub.advapi32.dll_RegCloseKey
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov ebx, eax
mov eax, 0x66652d20
mov ecx, eax
shr ecx, 0x10
je 0x666485a9
mov dword [esp + 4], 0xffffffff
mov dword [esp], 0x66652d20
call sub.kernel32.dll_IsBadStringPtrW
mov edx, 0x666528f6
sub esp, 8
test eax, eax
jne 0x6664808a
lea esi, [esi]
lea esi, [esi]
mov edx, eax
lea eax, [eax + 1]
cmp word [edx + edx + 0x66652d22], 0
jne 0x66647fb0
mov eax, 0x224c
mov dword [ebp - 0x37c], ebx
lea ecx, [ebp - 0x216]
mov esi, 0x66652d20
mov word [ebp - 0x218], ax
mov eax, 0x53
jmp 0x66648026
cmp ax, 9
je 0x666484e8
cmp ax, 0xa
jne 0x6664847e
mov eax, 0x6e5c
add ecx, 2
mov word [ecx - 2], ax
lea esi, [esi]
nop
lea edi, [edx - 1]
test edx, edx
jle 0x66648057
lea eax, [ebp - 0xf6]
cmp ecx, eax
ja 0x66648057
movzx eax, word [esi]
mov edx, edi
add esi, 2
cmp ax, 0xd
je 0x66648460
jbe 0x66647fe8
cmp ax, 0x22
je 0x666484d0
cmp ax, 0x5c
jne 0x66648471
mov ebx, 0x5c5c
add ecx, 2
mov word [ecx - 2], bx
jmp 0x66648010
mov byte [ecx], 0x22
mov ebx, dword [ebp - 0x37c]
lea eax, [ecx + 1]
test edi, edi
jle 0x66648077
mov edx, 0x2e2e
mov byte [ecx + 3], 0x2e
lea eax, [ecx + 4]
mov word [ecx + 1], dx
mov byte [eax], 0
lea eax, [ebp - 0x218]
mov dword [esp], eax
call fcn.6664f9d0
mov edx, eax
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], str.unable_to_remove_current_key__s__0x_08x____priority_changes_wont_persist_past_application_end._n
mov dword [esp + 8], str.MSACM_WriteCurrentPriorities
mov dword [esp + 4], 0x66650048
mov dword [esp], 1
call fcn.66647130
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
test byte [0x66650048], 2
je 0x66647bb7
mov eax, 0x66652d20
mov ecx, eax
shr ecx, 0x10
je 0x666485d7
mov dword [esp + 4], 0xffffffff
mov dword [esp], 0x66652d20
call sub.kernel32.dll_IsBadStringPtrW
mov edx, 0x666528f6
sub esp, 8
test eax, eax
jne 0x666485ec
lea esi, [esi]
mov edx, eax
lea eax, [eax + 1]
cmp word [edx + edx + 0x66652d22], 0
jne 0x66648108
mov eax, 0x224c
mov dword [ebp - 0x37c], ebx
lea ecx, [ebp - 0x216]
mov esi, 0x66652d20
mov word [ebp - 0x218], ax
mov eax, 0x53
jmp 0x6664817e
cmp ax, 9
je 0x66648830
cmp ax, 0xa
jne 0x6664885f
mov eax, 0x6e5c
add ecx, 2
mov word [ecx - 2], ax
lea edi, [edx - 1]
test edx, edx
jle 0x66648a47
lea eax, [ebp - 0xf6]
cmp ecx, eax
ja 0x66648a47
movzx eax, word [esi]
mov edx, edi
add esi, 2
cmp ax, 0xd
je 0x66648841
jbe 0x66648140
cmp ax, 0x22
je 0x666488b0
cmp ax, 0x5c
jne 0x66648852
mov edi, 0x5c5c
add ecx, 2
mov word [ecx - 2], di
jmp 0x66648160
mov eax, dword [ebp - 0x390]
test eax, eax
je 0x666487b9
mov dword [esp + 4], 0xffffffff
mov dword [esp], 0x66652d20
call sub.kernel32.dll_IsBadStringPtrW
mov dword [ebp - 0x394], 0x666528f6
sub esp, 8
test eax, eax
jne 0x666482e8
lea esi, [esi]
nop
mov edx, eax
lea eax, [eax + 1]
cmp word [edx + edx + 0x66652d22], 0
jne 0x666481f0
mov eax, 0x224c
lea esi, [ebp - 0x222]
mov dword [ebp - 0x394], edi
lea ecx, [ebp - 0x342]
mov word [ebp - 0x344], ax
mov edi, esi
mov eax, 0x53
mov dword [ebp - 0x388], 0x66652d20
mov dword [ebp - 0x398], ebx
jmp 0x66648276
cmp ax, 9
je 0x66648510
cmp ax, 0xa
jne 0x6664852e
mov eax, 0x6e5c
add ecx, 2
mov word [ecx - 2], ax
lea esi, [edx - 1]
cmp ecx, edi
ja 0x666482ab
test edx, edx
jle 0x666482ab
mov eax, dword [ebp - 0x388]
mov edx, esi
movzx eax, word [eax]
add dword [ebp - 0x388], 2
cmp ax, 0xd
je 0x66648598
jbe 0x66648240
cmp ax, 0x22
je 0x66648580
cmp ax, 0x5c
jne 0x66648521
mov ebx, 0x5c5c
add ecx, 2
mov word [ecx - 2], bx
jmp 0x66648260
mov byte [ecx], 0x22
mov edi, dword [ebp - 0x394]
lea eax, [ecx + 1]
mov ebx, dword [ebp - 0x398]
test esi, esi
jle 0x666482d1
mov edx, 0x2e2e
mov byte [ecx + 3], 0x2e
lea eax, [ecx + 4]
mov word [ecx + 1], dx
mov byte [eax], 0
lea eax, [ebp - 0x344]
mov dword [esp], eax
call fcn.6664f9d0
mov dword [ebp - 0x394], eax
mov esi, dword [edi + 8]
test esi, esi
je 0x66648a01
mov eax, esi
shr eax, 0x10
je 0x666487e5
mov dword [esp + 4], 0xffffffff
mov dword [esp], esi
call sub.kernel32.dll_IsBadStringPtrW
mov edx, 0x666528f6
sub esp, 8
test eax, eax
jne 0x6664840f
cmp word [esi], 0
je 0x66648a7f
lea esi, [esi]
nop
mov edx, eax
lea eax, [eax + 1]
cmp word [esi + edx*2 + 2], 0
jne 0x66648330
mov ecx, 0x224c
lea eax, [ebp - 0x222]
mov dword [ebp - 0x398], edi
mov word [ebp - 0x344], cx
lea ecx, [ebp - 0x342]
mov dword [ebp - 0x39c], ebx
mov dword [ebp - 0x388], eax
jmp 0x666483a1
cmp ax, 9
je 0x666487a8
cmp ax, 0xa
jne 0x6664872a
mov eax, 0x6e5c
add ecx, 2
mov word [ecx - 2], ax
lea eax, [edx - 1]
cmp ecx, dword [ebp - 0x388]
ja 0x666483d5
test edx, edx
jle 0x666483d5
mov edx, eax
movzx eax, word [esi]
add esi, 2
cmp ax, 0xd
je 0x66648791
jbe 0x66648370
cmp ax, 0x22
je 0x66648780
cmp ax, 0x5c
jne 0x6664871d
mov ebx, 0x5c5c
add ecx, 2
mov word [ecx - 2], bx
jmp 0x66648390
mov edi, dword [ebp - 0x398]
mov ebx, dword [ebp - 0x39c]
mov byte [ecx], 0x22
test eax, eax
jle 0x66648a98
mov edx, 0x2e2e
mov byte [ecx + 3], 0x2e
lea eax, [ecx + 4]
mov word [ecx + 1], dx
mov byte [eax], 0
lea eax, [ebp - 0x344]
mov dword [esp], eax
call fcn.6664f9d0
mov edx, eax
mov eax, dword [ebp - 0x38c]
mov dword [esp + 0x10], edx
mov esi, ebx
mov dword [esp + 0xc], str.unable_to_write_value_for__s_under_key__s__0x_08x__n
mov dword [esp + 0x18], eax
mov eax, dword [ebp - 0x394]
mov dword [esp + 8], str.MSACM_WriteCurrentPriorities
mov dword [esp + 0x14], eax
mov dword [esp + 4], 0x66650048
mov dword [esp], 1
call fcn.66647130
mov ebx, dword [ebp - 0x384]
jmp 0x66647c28
mov eax, 0x725c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x66648010
lea edi, [eax - 0x20]
cmp di, 0x5e
jbe 0x666485c3
mov edi, eax
mov byte [ecx], 0x5c
add ecx, 5
shr di, 0xc
movzx edi, di
movzx ebx, byte [edi + str.0123456789abcdef]
mov edi, eax
shr di, 8
and edi, 0xf
mov byte [ecx - 4], bl
movzx ebx, byte [edi + str.0123456789abcdef]
mov edi, eax
and eax, 0xf
shr di, 4
movzx eax, byte [eax + str.0123456789abcdef]
and edi, 0xf
mov byte [ecx - 3], bl
movzx ebx, byte [edi + str.0123456789abcdef]
mov byte [ecx - 1], al
mov byte [ecx - 2], bl
jmp 0x66648010
mov edi, 0x225c
add ecx, 2
mov word [ecx - 2], di
jmp 0x66648010
mov eax, 0x745c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x66648010
mov eax, 2
jmp 0x66647cd2
mov eax, 0x745c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x66648260
lea esi, [eax - 0x20]
cmp si, 0x5e
jbe 0x666485cd
mov esi, eax
mov byte [ecx], 0x5c
add ecx, 5
shr si, 0xc
movzx esi, si
movzx ebx, byte [esi + str.0123456789abcdef]
mov esi, eax
shr si, 8
and esi, 0xf
mov byte [ecx - 4], bl
movzx ebx, byte [esi + str.0123456789abcdef]
mov esi, eax
and eax, 0xf
shr si, 4
movzx eax, byte [eax + str.0123456789abcdef]
and esi, 0xf
mov byte [ecx - 3], bl
movzx ebx, byte [esi + str.0123456789abcdef]
mov byte [ecx - 1], al
mov byte [ecx - 2], bl
jmp 0x66648260
mov esi, 0x225c
add ecx, 2
mov word [ecx - 2], si
jmp 0x66648260
mov eax, 0x725c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x66648260
movzx eax, ax
mov dword [esp], 0x666528e9
mov dword [esp + 4], eax
call fcn.666475e0
mov edx, eax
jmp 0x6664808a
mov byte [ecx], al
add ecx, 1
jmp 0x66648010
mov byte [ecx], al
add ecx, 1
jmp 0x66648260
movzx eax, ax
mov dword [esp], 0x666528e9
mov dword [esp + 4], eax
call fcn.666475e0
mov edx, eax
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], str.unable_to_create_key__s__0x_08x____priority_changes_wont_persist_past_application_end._n
mov dword [esp + 8], str.MSACM_WriteCurrentPriorities
mov dword [esp + 4], 0x66650048
mov dword [esp], 1
call fcn.66647130
jmp 0x66647bb7
movzx eax, ax
mov dword [esp], 0x666528e9
mov dword [esp + 4], eax
call fcn.666475e0
mov dword [ebp - 0x380], eax
mov eax, str.Internal_PCM_Converter
mov ecx, eax
shr ecx, 0x10
je 0x66648aa0
mov dword [esp + 4], 0xffffffff
mov dword [esp], str.Internal_PCM_Converter
call sub.kernel32.dll_IsBadStringPtrW
mov edx, 0x666528f6
sub esp, 8
test eax, eax
jne 0x66647f20
lea esi, [esi]
mov edx, eax
lea eax, [eax + 1]
cmp word [edx + edx + 0x66652ca2], 0
jne 0x66648670
mov eax, 0x224c
lea edi, [ebp - 0x222]
mov esi, str.Internal_PCM_Converter
mov dword [ebp - 0x384], ebx
mov word [ebp - 0x344], ax
lea ecx, [ebp - 0x342]
mov eax, 0x49
mov dword [ebp - 0x37c], edi
jmp 0x666486ec
cmp ax, 9
je 0x666488f8
cmp ax, 0xa
jne 0x66648916
mov eax, 0x6e5c
add ecx, 2
mov word [ecx - 2], ax
lea edi, [edx - 1]
cmp ecx, dword [ebp - 0x37c]
ja 0x66647eed
test edx, edx
jle 0x66647eed
movzx eax, word [esi]
mov edx, edi
add esi, 2
cmp ax, 0xd
je 0x666488cb
jbe 0x666486b0
cmp ax, 0x22
je 0x66648970
cmp ax, 0x5c
jne 0x66648909
mov edi, 0x5c5c
add ecx, 2
mov word [ecx - 2], di
jmp 0x666486d0
lea edi, [eax - 0x20]
cmp di, 0x5e
jbe 0x666488c1
mov edi, eax
mov byte [ecx], 0x5c
add ecx, 5
shr di, 0xc
movzx edi, di
movzx ebx, byte [edi + str.0123456789abcdef]
mov edi, eax
shr di, 8
and edi, 0xf
mov byte [ecx - 4], bl
movzx ebx, byte [edi + str.0123456789abcdef]
mov edi, eax
and eax, 0xf
shr di, 4
movzx eax, byte [eax + str.0123456789abcdef]
and edi, 0xf
mov byte [ecx - 3], bl
movzx ebx, byte [edi + str.0123456789abcdef]
mov byte [ecx - 1], al
mov byte [ecx - 2], bl
jmp 0x66648390
mov edi, 0x225c
add ecx, 2
mov word [ecx - 2], di
jmp 0x66648390
mov eax, 0x725c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x66648390
mov eax, 0x745c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x66648390
mov dword [ebp - 0x388], 0x66652d20
movzx eax, word [ebp - 0x388]
mov dword [esp], 0x666528e9
mov dword [esp + 4], eax
call fcn.666475e0
mov dword [ebp - 0x394], eax
jmp 0x666482e8
movzx eax, si
mov dword [esp], 0x666528e9
mov dword [esp + 4], eax
call fcn.666475e0
mov edx, eax
jmp 0x6664840f
lea eax, [ebp - 0x218]
mov ebx, 1
mov dword [ebp - 0x37c], eax
lea eax, [ebp - 0x366]
mov dword [ebp - 0x380], eax
jmp 0x66647d3e
mov eax, 2
jmp 0x66647db2
mov eax, 0x745c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x66648160
mov eax, 0x725c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x66648160
lea edi, [eax - 0x20]
cmp di, 0x5e
jbe 0x66648aba
mov edi, eax
mov byte [ecx], 0x5c
add ecx, 5
shr di, 0xc
movzx edi, di
movzx ebx, byte [edi + str.0123456789abcdef]
mov edi, eax
shr di, 8
and edi, 0xf
mov byte [ecx - 4], bl
movzx ebx, byte [edi + str.0123456789abcdef]
mov edi, eax
and eax, 0xf
shr di, 4
movzx eax, byte [eax + str.0123456789abcdef]
and edi, 0xf
mov byte [ecx - 3], bl
movzx ebx, byte [edi + str.0123456789abcdef]
mov byte [ecx - 1], al
mov byte [ecx - 2], bl
jmp 0x66648160
mov eax, 0x225c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x66648160
mov byte [ecx], al
add ecx, 1
jmp 0x66648390
mov eax, 0x725c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x666486d0
mov eax, 0x745c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x66647ea0
mov eax, 0x745c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x666486d0
lea edi, [eax - 0x20]
cmp di, 0x5e
jbe 0x66648ac4
mov edi, eax
mov byte [ecx], 0x5c
add ecx, 5
shr di, 0xc
movzx edi, di
movzx ebx, byte [edi + str.0123456789abcdef]
mov edi, eax
shr di, 8
and edi, 0xf
mov byte [ecx - 4], bl
movzx ebx, byte [edi + str.0123456789abcdef]
mov edi, eax
and eax, 0xf
shr di, 4
movzx eax, byte [eax + str.0123456789abcdef]
and edi, 0xf
mov byte [ecx - 3], bl
movzx ebx, byte [edi + str.0123456789abcdef]
mov byte [ecx - 1], al
mov byte [ecx - 2], bl
jmp 0x666486d0
mov eax, 0x225c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x666486d0
mov eax, 0x725c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x66647ea0
lea edi, [eax - 0x20]
cmp di, 0x5e
jbe 0x66648ace
mov edi, eax
mov byte [ecx], 0x5c
add ecx, 5
shr di, 0xc
movzx edi, di
movzx ebx, byte [edi + str.0123456789abcdef]
mov edi, eax
shr di, 8
and edi, 0xf
mov byte [ecx - 4], bl
movzx ebx, byte [edi + str.0123456789abcdef]
mov edi, eax
and eax, 0xf
shr di, 4
movzx eax, byte [eax + str.0123456789abcdef]
and edi, 0xf
mov byte [ecx - 3], bl
movzx ebx, byte [edi + str.0123456789abcdef]
mov byte [ecx - 1], al
mov byte [ecx - 2], bl
jmp 0x66647ea0
mov edi, 0x225c
add ecx, 2
mov word [ecx - 2], di
jmp 0x66647ea0
mov edx, 0x666528ef
jmp 0x6664840f
mov byte [ecx], 0x22
mov ebx, dword [ebp - 0x380]
lea eax, [ecx + 1]
test edi, edi
jle 0x66648a2b
mov edx, 0x2e2e
mov byte [ecx + 3], 0x2e
lea eax, [ecx + 4]
mov word [ecx + 1], dx
mov byte [eax], 0
lea eax, [ebp - 0x344]
mov dword [esp], eax
call fcn.6664f9d0
mov dword [ebp - 0x380], eax
jmp 0x66648636
mov byte [ecx], 0x22
mov ebx, dword [ebp - 0x37c]
lea eax, [ecx + 1]
test edi, edi
jle 0x66648a67
mov esi, 0x2e2e
mov byte [ecx + 3], 0x2e
lea eax, [ecx + 4]
mov word [ecx + 1], si
mov byte [eax], 0
lea eax, [ebp - 0x218]
mov dword [esp], eax
call fcn.6664f9d0
mov edx, eax
jmp 0x666485ec
mov eax, 0x224c
mov byte [ebp - 0x342], 0x22
lea ecx, [ebp - 0x342]
mov word [ebp - 0x344], ax
lea eax, [ecx + 1]
jmp 0x666483fc
movzx eax, ax
mov dword [esp], 0x666528e9
mov dword [esp + 4], eax
call fcn.666475e0
mov edx, eax
jmp 0x66647f20
mov byte [ecx], al
add ecx, 1
jmp 0x66648160
mov byte [ecx], al
add ecx, 1
jmp 0x666486d0
mov byte [ecx], al
add ecx, 1
jmp 0x66647ea0