Function at 0x180030960
Capabilities:
Query or enumerate registry value
Set current directory

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x520]
sub rsp, 0x620
mov rax, qword [0x180045338]
xor rax, rsp
mov qword [rbp + 0x510], rax
xor r11d, r11d
mov qword [rsp + 0x58], r8
lea r15d, [rcx + 0x13]
mov qword [rsp + 0x38], rdx
mov dword [rsp + 0x48], ecx
mov r13, r8
mov dword [rsp + 0x34], r11d
mov r9, rdx
mov dword [rsp + 0x4c], r15d
lea r12d, [r11 + 0x5f]
lea r10, [0x180000000]
mov r14d, ecx
mov esi, r11d
cmp ecx, r15d
jae 0x180030cbb
lea edi, [r11 + 0x13]
mov r12d, 0x6275
lea edx, [rdi + 0x3f]
movabs r10, 0x5f007400650067
lea esi, [rdi + 0x64]
lea ebx, [rcx - 0x5f]
lea r8d, [r11 + 0x46]
lea r15d, [r11 + 0x64]
lea r13, [0x180000000]
nop dword [rax + rax]
cmp ebx, 0x2e
ja case.0x180030a1d.19
movzx eax, byte [rbx + r13 + 0x317e4]
mov ecx, dword [r13 + rax*4 + 0x31794]
add rcx, r13
jmp rcx
mov dword [rbp + 0x94], 0x650044
jmp case.0x180030a1d.19
mov r8d, 2
mov word [rbp + 0x4a], r11w
lea rdx, [0x18003d844]
lea rcx, [rbp + 0x4a]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov eax, 0x6e
mov word [rbp + 0x4e], ax
jmp 0x180030c7a
lea rax, [rsp + 0x50]
mov dword [rsp + 0x40], 0xa00000
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x40]
xor r9d, r9d
mov qword [rsp + 0x20], r11
xor r8d, r8d
mov dword [rsp + 0x50], 1
mov ecx, 0x120
call fcn.180010730
jmp 0x180030c7a
movsd xmm0, qword [0x18003d87c]
movzx eax, word [0x18003d884]
movsd qword [rbp + 0x40], xmm0
mov word [rbp + 0x48], ax
jmp case.0x180030a1d.19
mov dword [rbp - 0x38], 0x450057
mov dword [rbp - 0x34], 0x52
jmp case.0x180030a1d.19
mov word [rbp + 0xa2], r11w
mov dword [rbp - 0x48], 0x5f0043
mov word [rbp - 0x44], r8w
jmp case.0x180030a1d.19
mov r8d, 2
lea rdx, [0x18003d8a8]
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 4
lea rdx, str.h_v
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x180030c7a
mov eax, 0x4c
mov dword [rbp - 0x40], 0x440049
mov word [rbp - 0x42], ax
mov dword [rbp - 0x3c], 0x410052
jmp case.0x180030a1d.19
mov word [rbp - 0x68], r12w
mov byte [rbp - 0x66], 0x65
jmp case.0x180030a1d.19
mov byte [rbp - 0x68], 0
jmp case.0x180030a1d.19
lea rax, [rbp - 0x70]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x180030b50
lea rdx, [rbp - 0x70]
mov rcx, r9
call fcn.18001c630
jmp 0x180030c7a
mov dword [rbp - 0x65], 0x6d6f632e
mov byte [rbp - 0x61], 0
mov byte [rbp - 0x80], 0
jmp case.0x180030a1d.19
mov r8d, 1
mov word [rbp - 0x7f], si
lea rdx, [0x18003d770]
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x180030c7a
mov r8d, 4
lea rdx, [0x18003d8d1]
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp - 0x6c], 0
jmp 0x180030c7a
mov r8d, 1
mov qword [rbp + 0x80], r10
lea rdx, [0x18003d904]
mov word [rbp + 0x88], r11w
lea rcx, [rbp + 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
movsd xmm0, qword [0x18003d922]
movzx eax, word [0x18003d92a]
movsd qword [rbp + 0x8a], xmm0
mov word [rbp + 0x92], ax
jmp 0x180030c7a
mov r8d, 1
lea rdx, [0x18003cb04]
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x180030c7a
mov r8d, 2
lea rdx, [0x18003d94c]
lea rcx, [rbp + 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov word [rbp + 0xa0], r15w
jmp 0x180030c7a
mov dword [rbp - 0x6c], 0x74756f79
jmp case.0x180030a1d.19
mov r8d, 1
mov word [rbp + 0x98], r11w
lea rdx, [0x18003da48]
lea rcx, [rbp + 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov dword [rbp + 0x9a], 0x69
mov r9, qword [rsp + 0x38]
mov r8d, 0x46
movabs r10, 0x5f007400650067
xor r11d, r11d
lea edx, [r8 + 0xc]
inc ebx
sub rdi, 1
jne 0x180030a00
mov r13, qword [rsp + 0x58]
lea r10, [0x180000000]
mov esi, dword [rsp + 0x34]
lea r12d, [rdi + 0x5f]
mov r15d, dword [rsp + 0x4c]
movzx ebx, byte [rsp + 0x30]
cmp r14d, r15d
jae case.0x180030d03.112
mov edi, dword [rsp + 0x40]
mov qword [rsp + 0x50], rdi
lea eax, [r14 - 0x5f]
mov r8d, 0x16
movabs rdx, 0x7fffffffffffffff
cmp eax, 0x34
ja case.0x180030d03.113
movzx eax, byte [r10 + rax + 0x31860]
mov ecx, dword [r10 + rax*4 + 0x31814]
add rcx, r10
jmp rcx
mov r8d, 1
lea rdx, [0x18003da74]
lea rcx, [rbp + 0x5e]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
movsd xmm0, qword [0x18003daec]
movzx eax, word [0x18003daf4]
movsd qword [rbp + 0x60], xmm0
mov word [rbp + 0x68], ax
jmp 0x18003174e
mov r8d, 5
mov word [rbp + 0x6a], r11w
lea rdx, [0x18003db74]
lea rcx, [rbp + 0x6a]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x18003174e
cmp qword [r13 + 0x10], 0x35
jb case.0x180030d03.113
mov r12d, 0x115
nop dword [rax + rax]
cmp r12d, 0x4304b
ja 0x180030f6f
je 0x180030f61
cmp r12d, 0x1e7ff
ja 0x180030ec4
je 0x180030e73
cmp r12d, 0x115
je 0x180030e54
cmp r12d, 0x6277
je 0x180030e3e
cmp r12d, 0xc3d9
je 0x180030e0c
cmp r12d, 0x1253b
je 0x180030ddc
cmp r12d, 0x1869d
jne 0x1800314f3
mov word [rbp + 0x116], r11w
jmp 0x1800314f3
movabs rax, 0x49004600420055
mov qword [rbp + 0x108], rax
mov eax, dword [0x18003dbfa]
mov dword [rbp + 0x110], eax
movzx eax, word [0x18003dbfe]
mov word [rbp + 0x114], ax
jmp 0x1800314f3
mov r8d, 4
mov word [rbp + 0x100], r11w
lea rdx, [0x18003dcee]
lea rcx, [rbp + 0x100]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor r11d, r11d
mov word [rbp + 0x108], r11w
jmp 0x18003139e
movabs rax, 0x4e004100520046
mov qword [rbp + 0xf8], rax
jmp 0x1800314f3
mov r8d, 4
lea rdx, [0x18003dd40]
lea rcx, [rbp + 0xf0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x18003139b
mov r8d, 3
lea rdx, [0x18003dc3e]
lea rcx, [rbp + 0xf0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
xor edi, edi
lea rdx, [0x18003dc98]
movabs rax, 0x54005300490047
mov word [rbp + 0x124], di
lea rcx, [rbp + 0x124]
mov qword [rbp + 0x11c], rax
lea r8d, [rdi + 2]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x18003139b
cmp r12d, 0x24961
je 0x180030f54
cmp r12d, 0x2aac3
je 0x180030f48
cmp r12d, 0x30c25
je 0x180030f33
cmp r12d, 0x36d87
je 0x180030f0e
cmp r12d, 0x3cee9
jne 0x1800314f3
mov eax, 0x4e
mov dword [rbp - 0x1a], 0x450054
mov word [rbp - 0x16], ax
jmp 0x1800314f3
mov eax, 0x5f
mov dword [rbp - 0x24], 0x430043
mov word [rbp - 0x26], ax
mov eax, 0x57
mov word [rbp - 0x20], ax
mov dword [rbp - 0x1e], 0x53005f
jmp 0x1800314f3
mov eax, 0x44
mov dword [rbp - 0x2a], 0x530052
mov word [rbp - 0x2c], ax
jmp 0x1800314f3
mov dword [rbp - 0x30], 0x330044
jmp 0x1800314f3
mov word [rbp + 0x128], r11w
jmp 0x1800314f3
mov eax, 0x43
mov word [rbp - 0x14], ax
jmp 0x1800314f3
cmp r12d, 0x67897
ja 0x180031069
je 0x18003105b
cmp r12d, 0x491ad
je 0x180031048
cmp r12d, 0x4f30f
je 0x180031033
cmp r12d, 0x55471
je 0x180030ff7
cmp r12d, 0x5b5d3
je 0x180030fd7
cmp r12d, 0x61735
jne 0x1800314f3
mov r8d, 3
lea rdx, [0x18003dd20]
lea rcx, [rbp - 0x60]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x18003139b
mov eax, 0x3f
mov dword [rbp - 0x5b], 0x6c3135
mov word [rbp - 0x5e], ax
movzx eax, word [0x18003dd1c]
mov word [rbp - 0x5d], ax
jmp 0x1800314f3
lea rcx, [rbp - 0x60]
mov word [rbp - 4], r11w
dec rcx
mov byte [rbp - 0x60], 0
nop word [rax + rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x180031010
movzx eax, word [0x18003dce0]
mov word [rcx], ax
movzx eax, byte [0x18003dce2]
mov byte [rcx + 2], al
jmp 0x1800314f3
mov eax, 0x4c
mov dword [rbp - 0xa], 0x490041
mov word [rbp - 6], ax
jmp 0x1800314f3
mov dword [rbp - 0x12], 0x4c0049
mov dword [rbp - 0xe], 0x46005a
jmp 0x1800314f3
mov eax, 0x6e
mov word [rbp - 0x55], ax
jmp 0x1800314f3
cmp r12d, 0x6d9f9
je 0x1800314d5
cmp r12d, 0x73b5b
je 0x1800313b3
cmp r12d, 0x7fe1f
je 0x1800310f1
cmp r12d, 0x85f81
je 0x1800310cf
cmp r12d, 0x8c0e3
jne 0x1800314f3
movzx eax, bl
mov rcx, qword [rbp + 0x510]
xor rcx, rsp
call fcn.180039fa0
mov rbx, qword [rsp + 0x660]
add rsp, 0x620
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0xf0]
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
lea rcx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov bl, 1
jmp 0x18003139b
mov rax, qword [r13 + 0x10]
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
cmp rax, 0xb
jb 0x18003178c
add rax, 0xfffffffffffffff5
mov r14d, 6
cmp rax, r14
cmovb r14, rax
cmp qword [r13 + 0x18], 0x10
mov rax, r13
jb 0x18003112c
mov rax, qword [r13]
lea r15, [rax + 0xb]
cmp r14, 0xf
ja 0x180031156
mov r8, r14
mov qword [rsp + 0x70], r14
mov rdx, r15
lea rcx, [rsp + 0x60]
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + r14 + 0x60], 0
jmp 0x1800311e9
cmp r14, rdx
ja 0x180031786
mov rsi, r14
or rsi, 0xf
cmp rsi, rdx
jbe 0x180031170
mov rsi, rdx
jmp 0x180031178
cmp rsi, 0x16
cmovb rsi, r8
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x1800311b1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180031780
mov rcx, rax
call fcn.1800397b0
test rax, rax
je 0x180031779
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1800311c3
test rcx, rcx
je 0x1800311c0
call fcn.1800397b0
mov rdi, rax
jmp 0x1800311c3
mov rdi, r11
mov r8, r14
mov qword [rsp + 0x70], r14
mov rdx, r15
mov qword [rsp + 0x78], rsi
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov esi, dword [rsp + 0x34]
mov byte [rdi + r14], 0
mov qword [rsp + 0x60], rdi
or esi, 1
lea rdx, [rsp + 0x60]
lea rcx, [0x1800442c8]
mov dword [rsp + 0x34], esi
call fcn.1800032b0
mov rax, qword [rsp + 0x78]
cmp rax, 0x10
jb 0x18003123f
mov rcx, qword [rsp + 0x60]
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003123a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180031779
call fcn.1800397ec
mov rax, qword [r13 + 0x10]
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
cmp rax, 0x11
jb 0x18003178c
add rax, 0xffffffffffffffef
mov r14d, 0x24
cmp rax, r14
cmovb r14, rax
cmp qword [r13 + 0x18], 0x10
mov rax, r13
jb 0x18003127a
mov rax, qword [r13]
lea r15, [rax + 0x11]
cmp r14, 0xf
ja 0x1800312a4
mov r8, r14
mov qword [rsp + 0x70], r14
mov rdx, r15
lea rcx, [rsp + 0x60]
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + r14 + 0x60], 0
jmp 0x180031345
movabs rax, 0x7fffffffffffffff
cmp r14, rax
ja 0x180031786
mov rsi, r14
or rsi, 0xf
cmp rsi, rax
jbe 0x1800312c8
mov rsi, rax
jmp 0x1800312d5
cmp rsi, 0x16
mov eax, 0x16
cmovb rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x18003130e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180031780
mov rcx, rax
call fcn.1800397b0
test rax, rax
je 0x180031779
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x18003131f
test rcx, rcx
je 0x18003131d
call fcn.1800397b0
mov rdi, rax
jmp 0x18003131f
xor edi, edi
mov r8, r14
mov qword [rsp + 0x70], r14
mov rdx, r15
mov qword [rsp + 0x78], rsi
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov esi, dword [rsp + 0x34]
mov byte [rdi + r14], 0
mov qword [rsp + 0x60], rdi
or esi, 2
lea rcx, [0x180044288]
lea rdx, [rsp + 0x60]
mov dword [rsp + 0x34], esi
call fcn.1800032b0
mov rax, qword [rsp + 0x78]
cmp rax, 0x10
jb 0x18003139b
mov rcx, qword [rsp + 0x60]
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180031396
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180031779
call fcn.1800397ec
xor r11d, r11d
movabs rdx, 0x7fffffffffffffff
mov r8d, 0x16
jmp 0x1800314f3
mov r8d, 4
lea rdx, [0x18003dc20]
lea rcx, [rbp - 0x4e]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov r14d, 0xb
mov qword [rsp + 0x78], 0xf
cmp qword [r13 + 0x10], r14
mov r15, r13
mov byte [rsp + 0x60], 0
cmovb r14, qword [r13 + 0x10]
cmp qword [r13 + 0x18], 0x10
jb 0x1800313f5
mov r15, qword [r13]
cmp r14, 0xf
ja 0x180031425
mov r8, r14
mov qword [rsp + 0x70], r14
mov rdx, r15
lea rcx, [rsp + 0x60]
call sub.VCRUNTIME140.dll_memmove
or esi, 4
mov byte [rsp + r14 + 0x60], 0
lea rcx, [0x1800442a8]
jmp 0x18003134f
movabs rax, 0x7fffffffffffffff
cmp r14, rax
ja 0x180031786
mov rsi, r14
or rsi, 0xf
cmp rsi, rax
jbe 0x180031449
mov rsi, rax
jmp 0x180031456
cmp rsi, 0x16
mov eax, 0x16
cmovb rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x18003148f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180031780
mov rcx, rax
call fcn.1800397b0
test rax, rax
je 0x180031779
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1800314a0
test rcx, rcx
je 0x18003149e
call fcn.1800397b0
mov rdi, rax
jmp 0x1800314a0
xor edi, edi
mov r8, r14
mov qword [rsp + 0x70], r14
mov rdx, r15
mov qword [rsp + 0x78], rsi
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov esi, dword [rsp + 0x34]
lea rcx, [0x1800442a8]
or esi, 4
mov byte [rdi + r14], 0
mov qword [rsp + 0x60], rdi
jmp 0x18003134f
mov eax, dword [str.g_fil.]
mov dword [rbp - 0x54], eax
movzx eax, word [0x18003db84]
mov word [rbp - 0x50], ax
movzx eax, byte [0x18003db86]
mov byte [rbp - 0x4e], al
add r12d, 0x6162
cmp r12d, 0x92130
jbe 0x180030d70
mov rdi, qword [rsp + 0x50]
mov r14d, dword [rsp + 0x48]
mov r15d, dword [rsp + 0x4c]
jmp case.0x180030d03.113
mov word [rbp + 0x38], r11w
mov qword [rsp + 0x58], 0xffffffff80000001
jmp case.0x180030d03.113
lea rax, [rbp]
mov rdi, 0xffffffffffffffff
nop dword [rax]
inc rdi
cmp word [rax + rdi*2], 0
jne 0x180031540
mov qword [rsp + 0x50], rdi
mov dword [rsp + 0x40], r11d
jmp case.0x180030d03.113
lea rcx, [rbp]
sub rcx, 2
cmp word [rcx + 2], 0
lea rcx, [rcx + 2]
jne 0x180031561
mov eax, dword [0x18003dd88]
mov dword [rcx], eax
movzx eax, word [0x18003dd8c]
mov word [rcx + 4], ax
movabs rax, 0x280065007a
mov qword [rbp + 0x30], rax
mov eax, 0x29
mov word [rbp + 0x36], ax
jmp case.0x180030d03.113
movabs rax, 0x65006d0020006f
mov qword [rbp + 0x50], rax
jmp case.0x180030d03.113
mov r8d, 2
mov word [rbp + 0x58], r11w
lea rdx, [0x18003dda6]
lea rcx, [rbp + 0x40]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov dword [rbp + 0x5c], 0x65
jmp 0x18003174e
mov eax, dword [rsp + 0x40]
lea r9, [rbp + 0x300]
mov rcx, qword [rsp + 0x58]
lea r8, [rbp + 0x40]
lea rdx, [rbp - 0x48]
mov dword [rsp + 0x20], eax
call qword [sym.imp.SHLWAPI.dll_SHRegGetPathW]
lea r8d, [rdi + 1]
lea rdx, [rbp]
lea rcx, [rbp + 0x80]
call qword [sym.imp.SHLWAPI.dll_StrNCatW]
xor bl, bl
jmp 0x18003174e
lea rax, [rbp - 0x80]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x180031620
lea rcx, [r9 + 0x20]
lea rdx, [rbp - 0x80]
call fcn.18001c630
jmp 0x18003174e
mov r8d, 0xa
lea rdx, [rbp + 0x20]
lea ecx, [r8 - 7]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__ltow]
mov r8d, 1
lea rdx, [0x18003bf1c]
lea rcx, [rbp]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov eax, dword [0x18003ddc0]
mov dword [rbp + 0x24], eax
mov eax, dword [0x18003ddc8]
mov dword [rbp + 0x28], eax
movzx eax, word [0x18003ddcc]
mov word [rbp + 0x2c], ax
jmp 0x18003174e
mov eax, 0x1bb
mov word [r9 + 0x60], ax
jmp case.0x180030d03.113
lea rcx, [rbp]
mov word [rbp], r11w
sub rcx, 2
cmp word [rcx + 2], 0
lea rcx, [rcx + 2]
jne 0x1800316a5
mov eax, dword [0x18003ddd8]
movsd xmm0, qword [str.disp.s]
movsd qword [rcx], xmm0
movsd xmm0, qword [str.ize_]
mov dword [rcx + 8], eax
movzx eax, word [0x18003dddc]
mov word [rcx + 0xc], ax
movabs rax, 0x3d00200029
mov qword [rbp + 0x14], rax
movsd qword [rbp + 0xc], xmm0
jmp case.0x180030d03.113
lea rcx, [rbp]
sub rcx, 2
cmp word [rcx + 2], 0
lea rcx, [rcx + 2]
jne 0x1800316f5
mov eax, dword [0x18003ddec]
mov dword [rcx], eax
movzx eax, word [0x18003ddf0]
mov word [rcx + 4], ax
mov dword [rbp + 0x1e], r12d
jmp case.0x180030d03.113
xor edx, edx
lea r8, [r9 + 0x40]
xor r9d, r9d
lea ecx, [rdx + 0x15]
call fcn.180037ea0
jmp 0x18003174e
mov word [rbp + 0x74], r11w
jmp case.0x180030d03.113
cmp qword [r13 + 0x18], 0x10
mov rdx, r13
jb 0x180031741
mov rdx, qword [r13]
mov r8, qword [r13 + 0x10]
lea rcx, [r9 + 0x20]
call fcn.18001c290
xor r11d, r11d
inc r14d
mov dword [rsp + 0x48], r14d
cmp r14d, r15d
jae case.0x180030d03.112
mov r9, qword [rsp + 0x38]
lea r10, [0x180000000]
mov r12d, 0x5f
jmp 0x180030cd2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18001b920
int3
call fcn.18001ba60
int3
call fcn.18001baa0
int3