Function at 0x180048ff0
Capabilities:
Get geographical location
Query environment variable
Query or enumerate registry key

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x490]
sub rsp, 0x590
mov rax, qword [0x1800737f8]
xor rax, rsp
mov qword [rbp + 0x480], rax
mov ebx, dword [rbp + 0x4f8]
lea rdi, [0x180000000]
mov qword [rbp - 0x78], rdx
mov r12, r8
mov qword [rbp - 0x70], r8
xor r11d, r11d
mov r8, rdx
mov qword [rbp - 0x68], r9
lea edx, [rbx - 0xc]
mov r13, r9
mov r9, qword [rsp + 0x60]
cmp ebx, edx
mov dword [rsp + 0x34], edx
mov r15, rcx
mov rdx, qword [rsp + 0x60]
mov r14d, ebx
mov qword [rsp + 0x78], rdx
mov qword [rbp - 0x80], r9
jbe 0x18004928f
mov eax, dword [rsp + 0x34]
lea esi, [rbx - 0x22]
movabs r10, 0x65006c00730073
nop
cmp esi, 0x3d
ja case.default.0x18004909b
movzx eax, byte [rdi + rsi + 0x4a664]
mov ecx, dword [rdi + rax*4 + 0x4a634]
add rcx, rdi
jmp rcx
imul rax, qword [r8], 0x38
imul rcx, r9, 0x38
mov qword [rax + rdx + 0x20], r9
mov rax, qword [r8]
mov qword [rcx + rdx + 0x28], rax
mov qword [rcx + rdx], r13
jmp case.0x18004909b.11
imul rax, qword [r8], 0x38
mov rdx, qword [r12]
mov r9, qword [r12 + 8]
mov qword [rsp + 0x78], rdx
mov qword [rbp - 0x80], r9
mov rcx, qword [rax + rdx + 0x20]
test rcx, rcx
je case.0x18004909b.11
imul rax, rcx, 0x38
mov qword [rax + rdx + 0x28], r9
imul rax, qword [r8], 0x38
imul rcx, r9, 0x38
mov rax, qword [rax + rdx + 0x20]
mov qword [rcx + rdx + 0x20], rax
jmp case.0x18004909b.11
mov qword [rbp + 0x330], r10
jmp case.0x18004909b.11
mov r8d, 0x116
mov dword [rsp + 0x48], 2
lea rdx, [rsp + 0x48]
mov rcx, r12
call fcn.180021e20
xor r11d, r11d
mov edi, r11d
cmp qword [r12 + 8], r11
jbe 0x1800491a9
mov ebx, r11d
nop word [rax + rax]
mov rax, qword [rbp - 0x78]
mov r9, qword [rax]
test r9, r9
je 0x18004915c
mov rdx, qword [r12]
mov r8, r13
add rdx, rbx
mov rcx, r12
call r9
mov rax, qword [r12]
mov r8d, 0x63
mov rdx, r12
mov rcx, qword [rbx + rax]
call fcn.18004adb0
test eax, eax
jne 0x180049350
mov rax, qword [r12]
mov r8d, 0xf6
mov rcx, r12
mov rdx, qword [rbx + rax]
call fcn.18000b240
test eax, eax
jne 0x180049350
inc rdi
add rbx, 0x48
cmp rdi, qword [r12 + 8]
jb 0x180049140
xor r11d, r11d
mov rdx, qword [rsp + 0x78]
lea rdi, [0x180000000]
mov r8, qword [rbp - 0x78]
movabs r10, 0x65006c00730073
mov r9, qword [rbp - 0x80]
mov dword [rsp + 0x58], r11d
jmp case.0x18004909b.11
mov eax, 0x57
mov word [rbp + 0x240], ax
jmp case.0x18004909b.11
mov eax, 0x6c
mov word [rbp + 0x346], ax
jmp case.0x18004909b.11
mov r8d, 4
mov word [rbp + 0x33e], r11w
lea rdx, [0x180067768]
lea rcx, [rbp + 0x330]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov rdx, qword [rsp + 0x78]
movabs r10, 0x65006c00730073
mov r8, qword [rbp - 0x78]
xor r11d, r11d
mov r9, qword [rbp - 0x80]
jmp case.0x18004909b.11
cmp qword [r12], 0xffffffffffffffff
setne byte [rsp + 0x58]
jmp case.0x18004909b.11
mov r8d, 1
mov word [rbp + 0x338], r11w
lea rdx, [0x180067782]
lea rcx, [rbp + 0x330]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov dword [rbp + 0x33a], 0x330079
jmp 0x180049215
mov rax, qword [r15]
imul rcx, r9, 0x38
mov qword [rcx + rdx + 8], rax
mov eax, dword [rsp + 0x34]
dec r14d
dec esi
cmp r14d, eax
ja 0x180049080
mov ebx, dword [rbp + 0x4f8]
imul eax, ebx, 0x4a1
mov r13d, ebx
mov dword [rsp + 0x3c], ebx
movzx r8d, byte [rsp + 0x3c]
mov byte [rsp + 0x31], r8b
mov dword [rsp + 0x6c], eax
cmp ebx, eax
ja 0x1800498a3
mov eax, dword [rsp + 0x48]
mov ecx, 0x74
movzx r14d, word [rsp + 0x3c]
movabs r15, 0x320033005f
movzx esi, byte [rsp + 0x3c]
mov edi, dword [rbp - 0x50]
mov rbx, qword [rbp - 0x58]
mov dword [rsp + 0x68], eax
mov rax, qword [rsp + 0x60]
mov qword [rbp - 0x48], rax
movzx eax, byte [rsp + 0x3c]
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x40], r14d
movabs r10, 0x6c006c0064
mov r11d, 0x7075
cmp r13d, 0x3c6e
ja 0x180049474
je 0x180049455
cmp r13d, 0x1450
ja 0x1800493f6
je 0x1800493ce
cmp r13d, 0x32
je 0x18004936b
cmp r13d, 0x41
je 0x18004935d
cmp r13d, 0x50
jne 0x18004986a
mov eax, 0x53
mov word [rbp + 0x241], ax
jmp 0x18004986a
mov dword [rsp + 0x58], 1
jmp case.0x18004a39a.0
xor eax, eax
mov word [rbp + 0x348], ax
jmp 0x18004986a
mov rcx, qword [rbp + 0x4f0]
imul rax, r9, 0x38
mov qword [rax + rdx + 0x10], rcx
inc qword [r12 + 8]
mov rax, qword [r12 + 8]
cmp rax, qword [r12 + 0x10]
jb 0x1800494ce
mov rcx, qword [r12]
lea r9, [rsp + 0x60]
add rax, 0x1000
xor edx, edx
mov qword [r12 + 0x10], rax
mov r8d, 0x12a
imul rax, rax, 0x38
mov qword [rsp + 0x60], rax
call fcn.1800101a0
movzx r8d, byte [rsp + 0x31]
mov ecx, 0x74
mov qword [r12], rax
jmp 0x18004986a
mov eax, dword [0x180067832]
mov dword [rbp + 0x2b0], eax
movzx eax, word [0x180067836]
mov word [rbp + 0x2b4], ax
xor eax, eax
mov word [rbp + 0x2b6], ax
jmp 0x18004986a
cmp r13d, 0x1900
je 0x18004943a
cmp r13d, 0x285f
je 0x180049429
cmp r13d, 0x31b0
jne 0x18004986a
mov word [rbp + 0x247], cx
mov word [rbp + 0x248], r11w
jmp 0x18004986a
mov eax, 0x65
mov word [rbp + 0x2b6], ax
jmp 0x18004986a
mov eax, 0x7261
mov dword [rbp + 0x242], 0x745341
mov word [rbp + 0x245], ax
jmp 0x18004986a
mov eax, dword [0x1800677c8]
mov dword [rbp + 0x2b8], eax
movzx eax, word [0x1800677cc]
mov word [rbp + 0x2bc], ax
jmp 0x18004986a
cmp r13d, 0x648c
ja 0x18004950e
je 0x1800494fd
cmp r13d, 0x4a60
je 0x1800494e7
cmp r13d, 0x507d
je 0x1800494d8
cmp r13d, 0x6310
jne 0x18004986a
mov eax, 0x73
lea rdx, [rbp + 0x354]
mov dword [rbp + 0x352], eax
lea r8d, [rax - 0x69]
lea ecx, [rax - 0x71]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__ultow]
mov qword [rbp + 0x356], r15
movzx r8d, byte [rsp + 0x31]
mov ecx, 0x74
jmp 0x18004986a
mov dword [rbp + 0x2be], 0x2e0032
jmp 0x18004986a
mov byte [rbp + 0x24a], 0
mov dword [rbp + 0x350], 0x77
jmp 0x18004986a
mov eax, 0x64
mov word [rbp + 0x2c2], ax
jmp 0x18004986a
cmp r13d, 0x7bc0
je 0x180049851
cmp r13d, 0x9470
je 0x18004981a
cmp r13d, 0xad20
jne 0x18004986a
call qword [sym.imp.WINMM.dll_waveInGetNumDevs]
lea rcx, [rbp + 8]
mov dword [rsp + 0x68], eax
call qword [sym.imp.GDI32.dll_CreateBrushIndirect]
mov ecx, 0x202
lea rdx, [rbp + 0x90]
mov qword [rbp - 0x48], rax
call qword [rbp - 0x20]
test eax, eax
je 0x1800494c8
mov r15d, 0xac
mov dword [rsp + 0x54], r15d
nop
cmp r15d, 0x374
ja 0x180049628
je 0x180049607
cmp r15d, 0xac
je 0x1800495fc
cmp r15d, 0x15e
je 0x1800495e1
cmp r15d, 0x210
je 0x1800495c3
cmp r15d, 0x2c2
jne 0x1800497e6
xor eax, eax
mov ecx, eax
test rbx, rbx
movzx eax, byte [rsp + 0x30]
cmovne ecx, eax
mov byte [rsp + 0x30], cl
jmp 0x1800497e6
movsx rcx, r14w
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp - 0x58], rax
mov rbx, rax
mov dword [rsp + 0x48], 1
jmp 0x1800497e6
xor eax, eax
mov byte [rsp + 0x30], 1
mov r14d, 0x400
mov qword [rbp - 0x40], rax
mov dword [rsp + 0x40], r14d
jmp 0x1800497e6
xor eax, eax
mov qword [rbp - 0x60], rax
jmp 0x1800497e6
mov eax, dword [rsp + 0x48]
lea r9, [rbp - 8]
mov rdx, qword [rbp - 0x40]
xor r8d, r8d
mov rcx, qword [rbp - 0x60]
mov dword [rsp + 0x20], eax
call sub.ADVAPI32.dll_LsaRemoveAccountRights
jmp 0x1800497e6
cmp r15d, 0x426
je 0x180049656
cmp r15d, 0x4d8
je 0x18004964c
cmp r15d, 0x58a
je case.0x18004a39a.0
jmp 0x1800497e6
mov byte [rsp + 0x58], 0
jmp 0x1800497e6
cmp byte [rsp + 0x30], 0
je 0x1800497e6
mov r13d, dword [rsp + 0x40]
mov r14d, 6
mov r15d, dword [rsp + 0x70]
lea r12d, [r14 + 1]
cmp r14d, 6
ja case.default.0x180049693
lea rdx, [0x180000000]
mov eax, r14d
mov ecx, dword [rdx + rax*4 + 0x4a6a4]
add rcx, rdx
jmp rcx
movsx r8d, r13w
lea rcx, [rbp + 0x230]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
jmp case.default.0x180049693
test sil, sil
je 0x18004971f
mov ebx, 0xfb
nop dword [rax + rax]
mov eax, ebx
sub eax, 0xfb
je 0x18004970f
sub eax, 1
je 0x1800496fe
cmp eax, 1
jne 0x180049715
xor eax, eax
mov ecx, eax
test edi, edi
movzx eax, sil
cmovne ecx, eax
movzx esi, cl
test cl, cl
je 0x180049715
mov r8d, 0x104
lea rdx, [rbp + 0x370]
mov ecx, edi
call qword [sym.imp.WINMM.dll_waveOutGetErrorTextA]
jmp 0x180049715
lea rdx, [rsp + 0x74]
xor ecx, ecx
call qword [sym.imp.WINMM.dll_waveOutGetID]
mov edi, eax
jmp 0x180049715
xor eax, eax
mov dword [rsp + 0x74], eax
inc ebx
cmp ebx, 0xfe
jb 0x1800496c0
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [rbp - 0x58]
jmp case.default.0x180049693
mov r8d, 1
mov byte [rbp + 0x230], 0
lea rdx, [0x180065aa0]
lea rcx, [rbp + 0x230]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp case.default.0x180049693
mov eax, dword [str.tartN]
lea rcx, [rbp + 0x230]
mov dword [rbp + 0x231], eax
dec rcx
movzx eax, word [0x180067804]
mov word [rbp + 0x235], ax
mov eax, 0x65
mov word [rbp + 0x236], ax
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x180049785
mov eax, dword [str.twork]
mov dword [rcx], eax
movzx eax, word [0x18006780c]
mov word [rcx + 4], ax
jmp case.default.0x180049693
xor eax, eax
mov ecx, eax
test r15d, r15d
movzx eax, sil
cmovne ecx, eax
movzx esi, cl
jmp case.default.0x180049693
call qword [sym.imp.WINMM.dll_waveOutGetNumDevs]
mov r15d, eax
jmp case.default.0x180049693
mov sil, 1
dec r14d
sub r12, 1
jne 0x180049675
mov r13d, dword [rsp + 0x3c]
mov r14d, dword [rsp + 0x40]
mov dword [rsp + 0x70], r15d
mov r15d, dword [rsp + 0x54]
add r15d, 0xb2
mov dword [rsp + 0x54], r15d
cmp r15d, 0x63c
jb 0x180049570
mov r12, qword [rbp - 0x70]
mov ecx, 0x74
movzx r8d, byte [rsp + 0x31]
movabs r15, 0x320033005f
jmp 0x18004986a
mov al, 1
lea rdx, [rbp + 0x350]
mov r8d, 0x6e
mov dword [rsp + 0x50], eax
lea rcx, [rbp + 0x240]
call fcn.1800041c0
movzx r8d, byte [rsp + 0x31]
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
mov qword [rbp - 0x20], rax
mov ecx, 0x74
jmp 0x18004986a
mov r8b, 1
mov dword [rbp + 0x35c], PathMakeUniqueName
mov byte [rsp + 0x31], r8b
mov qword [rbp + 0x35e], r10
imul eax, dword [rbp + 0x4f8], 0x4f
mov r9, qword [rbp - 0x80]
add r13d, eax
mov dword [rsp + 0x3c], r13d
cmp r13d, dword [rsp + 0x6c]
ja 0x18004988e
mov rdx, qword [rsp + 0x78]
jmp 0x1800492f3
mov ebx, dword [rbp + 0x4f8]
mov edi, dword [rsp + 0x50]
mov r10, qword [rbp - 0x48]
mov r11d, dword [rsp + 0x68]
jmp 0x1800498bf
mov r10, qword [rsp + 0x60]
movzx edi, byte [rsp + 0x3c]
mov r11d, dword [rsp + 0x48]
mov qword [rbp - 0x48], r10
mov dword [rsp + 0x50], edi
mov dword [rsp + 0x68], r11d
lea edx, [rbx + 0xc]
mov dword [rsp + 0x48], ebx
mov dword [rsp + 0x40], edx
mov eax, ebx
cmp ebx, edx
jae 0x18004a33a
mov r13d, dword [rsp + 0x54]
xor ebx, ebx
mov r15, qword [rbp - 0x60]
mov r12d, dword [rsp + 0x70]
add eax, 0xffffffce
cmp eax, 0x21
ja case.0x180049909.54
lea rsi, [0x180000000]
movzx eax, byte [rsi + rax + 0x4a6f4]
mov ecx, dword [rsi + rax*4 + 0x4a6c0]
add rcx, rsi
jmp rcx
mov eax, 0x6c
mov dword [rbp + 0x31c], 0x320033
mov word [rbp + 0x324], ax
mov dword [rbp + 0x320], 0x64002e
jmp case.0x180049909.54
mov dword [rbp + 0x310], 0x730073
mov dword [rbp + 0x314], 0x65006c
mov dword [rbp + 0x318], 0x790061
jmp case.0x180049909.54
test r8b, r8b
je 0x180049965
mov rcx, r10
call qword [sym.imp.GDI32.dll_DeleteObject]
mov edx, dword [rsp + 0x40]
test dil, dil
je case.0x180049909.54
mov r15d, dword [rbp - 0x38]
mov r14d, 0xd0
mov dword [rsp + 0x6c], r14d
nop dword [rax]
cmp r14d, 0xd0
je 0x180049aed
cmp r14d, 0x23c0
jne 0x180049af6
mov rcx, qword [rbp - 0x10]
lea rdx, [rbp - 0x34]
call qword [sym.imp.WINMM.dll_waveInGetID]
test eax, eax
movzx edi, dil
mov esi, eax
mov eax, 0
cmove edi, eax
mov dword [rsp + 0x50], edi
test dil, dil
je 0x180049af6
mov ebx, ILRemoveLastID
lea edi, [rax + 0xe]
mov r14d, 0x5f3f
cmp ebx, 0xd
ja case.default.0x1800499ef
lea rdx, [0x180000000]
mov eax, ebx
mov ecx, dword [rdx + rax*4 + 0x4a718]
add rcx, rdx
jmp rcx
lea rcx, [rbp + 0x250]
call qword [sym.imp.SHLWAPI.dll_UrlGetLocationA]
jmp case.default.0x1800499ef
mov eax, 0x6e
mov word [rbp + 0x258], ax
jmp case.default.0x1800499ef
mov byte [rbp + 0x26d], 0
jmp case.default.0x1800499ef
mov dword [rbp + 0x255], 0x616863
jmp case.default.0x1800499ef
mov dword [rbp + 0x25f], 0x2074736e
jmp case.default.0x1800499ef
mov eax, 0x67
mov word [rbp + 0x259], ax
mov eax, 0x65
mov word [rbp + 0x25a], ax
mov eax, 0x64
mov word [rbp + 0x25b], ax
jmp case.default.0x1800499ef
mov dword [rbp + 0x269], 0x29262067
jmp case.default.0x1800499ef
mov dword [rbp + 0x25c], 0x6f6328
jmp case.default.0x1800499ef
mov word [rbp + 0x253], r14w
jmp case.default.0x1800499ef
mov dword [rbp + 0x265], 0x6e697274
jmp case.default.0x1800499ef
mov r8d, r15d
lea rdx, [rbp + 0x370]
mov ecx, esi
call qword [sym.imp.WINMM.dll_waveInGetErrorTextA]
jmp case.default.0x1800499ef
mov eax, 0x51
mov word [rbp + 0x263], ax
mov eax, 0x53
mov word [rbp + 0x264], ax
jmp case.default.0x1800499ef
mov r15d, 0x104
jmp case.default.0x1800499ef
mov dword [rbp + 0x250], 0x696431
dec ebx
sub rdi, 1
jne 0x1800499d3
mov r14d, dword [rsp + 0x6c]
mov edi, dword [rsp + 0x50]
mov dword [rbp - 0x38], r15d
jmp 0x180049af6
xor eax, eax
mov dword [rbp - 0x34], eax
mov qword [rbp - 0x10], rax
add r14d, 0x22f0
mov dword [rsp + 0x6c], r14d
cmp r14d, 0x45e0
jbe 0x180049980
mov r15, qword [rbp - 0x60]
mov r12d, dword [rsp + 0x70]
mov r13d, dword [rsp + 0x54]
mov edx, dword [rsp + 0x40]
jmp 0x18004a30d
mov rax, qword [rbp - 0x70]
imul rcx, qword [rax + 8], 0x38
mov rax, qword [rax]
mov qword [rcx + rax], rbx
jmp case.0x180049909.54
mov r8, qword [rbp - 0x70]
xor ebx, ebx
imul rcx, qword [r8 + 8], 0x38
mov rax, qword [r8]
mov qword [rcx + rax + 0x10], rbx
imul rcx, qword [r8 + 8], 0x38
mov rax, qword [r8]
mov qword [rcx + rax + 0x18], rbx
imul rcx, qword [r8 + 8], 0x38
mov rax, qword [r8]
mov qword [rcx + rax + 0x20], rbx
jmp case.0x180049909.54
mov eax, 0x6c
mov word [rbp + 0x326], ax
jmp case.0x180049909.54
xor r9d, r9d
xor r8d, r8d
mov edx, 0x116
xor ecx, ecx
call fcn.1800044f0
mov edx, dword [rsp + 0x40]
mov byte [rsp + 0x58], al
jmp case.0x180049909.54
mov r8, qword [rbp - 0x70]
xor r10d, r10d
mov qword [rsp + 0x58], r9
imul rcx, qword [r8 + 8], 0x38
mov rax, qword [r8]
mov qword [rcx + rax + 0x28], r10
imul rcx, qword [r8 + 8], 0x38
mov rax, qword [r8]
mov qword [rcx + rax + 0x30], r10
jmp 0x18004a30d
xor eax, eax
mov ecx, eax
test r11d, r11d
movzx eax, dil
cmovne ecx, eax
movzx edi, cl
mov dword [rsp + 0x50], edi
jmp 0x18004a30d
movzx eax, r8b
xor r14d, r14d
mov r8, qword [rbp - 0x70]
test r10, r10
mov ecx, r14d
cmovne ecx, eax
xor edx, edx
mov byte [rsp + 0x31], cl
mov ecx, 0xc9
call fcn.180028e40
test al, al
jne 0x18004a2f0
mov esi, 0x3b
cmp esi, 0x1ba45
ja 0x180049ed6
je 0x180049e94
cmp esi, 0xdd40
ja 0x180049d86
je 0x180049d5b
cmp esi, 0x5ef4
ja 0x180049ce2
je 0x180049cbb
cmp esi, 0x3b
je 0x180049c94
cmp esi, 0x1fce
je 0x180049c6b
cmp esi, 0x3f61
jne 0x18004a2de
mov word [rbp + 0x290], r14w
jmp 0x18004a2de
mov eax, dword [0x180067cf0]
mov dword [rbp + 0x286], eax
movzx eax, word [0x180067cf4]
mov word [rbp + 0x28a], ax
mov dword [rbp + 0x28c], 0x730056
jmp 0x18004a2de
mov eax, dword [0x180067954]
mov dword [rbp + 0x280], eax
movzx eax, word [0x180067958]
mov word [rbp + 0x284], ax
mov word [rbp + 0x286], r14w
jmp 0x18004a2de
mov eax, dword [0x1800678a2]
mov dword [rbp + 0x290], eax
movzx eax, word [0x1800678a6]
mov word [rbp + 0x294], ax
mov word [rbp + 0x296], r14w
jmp 0x18004a2de
cmp esi, 0x7e87
je 0x180049d32
cmp esi, 0x9e1a
je 0x180049d25
cmp esi, 0xbdad
jne 0x18004a2de
mov eax, dword [0x180067b26]
mov dword [rbp + 0x29a], eax
movzx eax, word [0x180067b2a]
mov word [rbp + 0x29e], ax
mov word [rbp + 0x2a0], r14w
jmp 0x18004a2de
mov word [rbp + 0x29a], r14w
jmp 0x18004a2de
mov r8d, 1
mov dword [rbp + 0x296], 0x56
lea rdx, [0x180067d2e]
lea rcx, [rbp + 0x298]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x18004a2de
mov r8d, 2
lea rdx, str.vVC:_Transport_send_failed__instance:__s__sessionId:__d__listener:__s__channel:__s__status:__0x_x__completionContext:__p
lea rcx, [rbp + 0x2a0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov eax, PathYetAnotherMakeUniqueName
mov word [rbp + 0x2a4], ax
jmp 0x18004a2de
cmp esi, 0x15b8c
ja 0x180049e18
je 0x180049df5
cmp esi, 0xfcd3
je 0x180049de6
cmp esi, 0x11c66
je 0x180049dd7
cmp esi, 0x13bf9
jne 0x18004a2de
mov r8d, 2
mov word [rbp + 0x2ac], r14w
lea rdx, [0x180067d40]
lea rcx, [rbp + 0x2f0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x18004a2de
mov dword [rbp + 0x2a8], 0x41006f
jmp 0x18004a2de
mov dword [rbp + 0x2a6], 0x4f
jmp 0x18004a2de
lea rcx, [rbp + 0x2f0]
sub rcx, 2
cmp word [rcx + 2], 0
lea rcx, [rcx + 2]
jne 0x180049e00
mov eax, dword [0x180067a84]
mov dword [rcx], eax
jmp 0x18004a2de
cmp esi, 0x17b1f
je 0x180049e4b
cmp esi, 0x19ab2
jne 0x18004a2de
mov eax, dword [0x1800678fc]
mov dword [rbp + 0x302], eax
movzx eax, word [0x180067900]
mov word [rbp + 0x306], ax
jmp 0x18004a2de
mov eax, dword [0x180067910]
lea rdx, [0x1800654bc]
movsd xmm0, qword [str.MManag]
lea rcx, [rbp + 0x300]
mov dword [rbp + 0x2fc], eax
mov r8d, 2
movzx eax, word [0x180067914]
mov word [rbp + 0x300], ax
movsd qword [rbp + 0x2f4], xmm0
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x18004a2de
lea rcx, [rbp + 0x2f0]
mov dword [rbp + 0x306], 0x72
sub rcx, 2
mov dword [rbp + 0x308], 0x72
cmp word [rcx + 2], 0
lea rcx, [rcx + 2]
jne 0x180049eb3
mov eax, dword [0x180067980]
mov dword [rcx], eax
movzx eax, word [0x180067984]
mov word [rcx + 4], ax
jmp 0x18004a2de
cmp esi, 0x2b6dd
ja 0x180049fab
je 0x180049f8f
cmp esi, 0x25824
ja 0x180049f69
je 0x180049f3a
cmp esi, 0x1d9d8
je 0x180049f2b
cmp esi, 0x1f96b
je 0x180049f21
cmp esi, 0x23891
jne 0x18004a2de
mov dword [rbp - 0x28], 0xf003f
mov qword [rbp + 0x230], r14
jmp 0x18004a2de
mov byte [rsp + 0x38], 1
jmp 0x18004a2de
mov byte [rsp + 0x30], 1
mov byte [rsp + 0x3c], 1
jmp 0x18004a2de
xorps xmm0, xmm0
mov dword [rbp - 0x30], 2
xor eax, eax
movups xmmword [rbp + 0x20], xmm0
mov dword [rbp + 0x80], eax
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
jmp 0x18004a2de
cmp esi, 0x277b7
je 0x180049f86
cmp esi, 0x2974a
jne 0x18004a2de
mov dword [rbp - 0x24], r14d
jmp 0x18004a2de
mov dword [rbp - 0x2c], r14d
jmp 0x18004a2de
mov r8d, dword [rbp - 0x30]
lea rcx, [rbp + 0x230]
xor edx, edx
call qword [sym.imp.GDI32.dll_CreatePolygonRgn]
mov qword [rbp - 0x40], rax
jmp 0x18004a2de
cmp esi, 0x33529
ja 0x18004a2c3
je 0x18004a248
cmp esi, 0x2d670
je 0x18004a1f0
cmp esi, 0x2f603
je 0x18004a1c5
cmp esi, 0x31596
jne 0x18004a2de
cmp byte [rsp + 0x38], 0
je 0x180049ff2
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.GDI32.dll_DeleteObject]
movzx edx, byte [rsp + 0x30]
test dl, dl
je 0x18004a2de
mov edi, 0x82
cmp edi, 0x82
je 0x18004a18e
cmp edi, 0x119
je 0x18004a16e
cmp edi, 0x1b0
jne 0x18004a1a4
test r13d, r13d
movzx eax, dl
mov ecx, r14d
cmove ecx, eax
mov byte [rsp + 0x30], cl
movzx edx, cl
test cl, cl
je 0x18004a1a4
mov ebx, 0x1e
lea r14d, [rbx + 0x12]
nop dword [rax]
cmp ebx, 0x2c6a
ja 0x18004a0df
je 0x18004a0af
cmp ebx, 0x1e
je 0x18004a0a3
cmp ebx, 0xee2
je 0x18004a084
cmp ebx, 0x1da6
jne 0x18004a152
mov word [rbp + 0x272], r14w
jmp 0x18004a152
mov r8d, 2
lea rdx, [0x180067854]
lea rcx, [rbp + 0x270]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x18004a152
mov byte [rbp + 0x270], 0
jmp 0x18004a152
mov r8d, 0xa
lea rdx, [rbp + 0x273]
lea ecx, [r8 - 1]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itoa]
mov r8d, 0xa
lea rdx, [rbp + 0x274]
lea ecx, [r8 - 4]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itoa]
jmp 0x18004a152
cmp ebx, 0x3b2e
je 0x18004a12c
cmp ebx, 0x58b6
je 0x18004a114
cmp ebx, 0x677a
jne 0x18004a152
lea rcx, [rbp + 0x270]
call qword [sym.imp.SHLWAPI.dll_StrToIntA]
mov edx, reloc.SHELL32.dll_ILFindLastID
mov rcx, r15
call qword [sym.imp.WINMM.dll_mmioClose]
jmp 0x18004a152
mov r8d, r12d
lea rdx, [rbp + 0x250]
mov rcx, r15
call qword [sym.imp.WINMM.dll_mmioAscend]
mov r13d, eax
jmp 0x18004a152
mov eax, dword [str._ang]
mov dword [rbp + 0x275], eax
mov eax, dword [str.Table]
mov dword [rbp + 0x279], eax
movzx eax, word [0x180067850]
mov word [rbp + 0x27d], ax
add ebx, 0xec4
cmp ebx, 0x7620
jbe 0x18004a050
movzx edx, byte [rsp + 0x30]
xor r14d, r14d
jmp 0x18004a1a4
mov r9d, r12d
lea rdx, [rbp + 0x250]
xor r8d, r8d
mov rcx, r15
call qword [sym.imp.WINMM.dll_mmioDescend]
movzx edx, byte [rsp + 0x30]
mov r13d, eax
jmp 0x18004a1a4
xor eax, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x250], xmm0
mov dword [rbp + 0x260], eax
lea r12d, [rax + 0x10]
add edi, 0x97
cmp edi, 0x247
jb 0x18004a004
mov dword [rsp + 0x54], r13d
mov dword [rsp + 0x70], r12d
jmp 0x18004a2de
movzx eax, byte [rsp + 0x30]
test r15, r15
mov ecx, r14d
cmovne ecx, eax
movzx eax, byte [rsp + 0x3c]
cmp dword [rsp + 0x74], 0
mov byte [rsp + 0x30], cl
mov ecx, r14d
cmove ecx, eax
mov byte [rsp + 0x3c], cl
jmp 0x18004a2de
mov r8d, dword [rbp - 0x2c]
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x280]
call qword [sym.imp.WINMM.dll_mmioOpenW]
mov edx, dword [rbp - 0x28]
lea r9, [rsp + 0x60]
mov r15, rax
mov qword [rbp - 0x60], rax
mov eax, dword [rbp - 0x24]
lea rcx, [rbp + 0x2f0]
xor r8d, r8d
mov dword [rsp + 0x20], eax
call qword [sym.imp.SHLWAPI.dll_SHRegOpenUSKeyW]
movzx ecx, byte [rsp + 0x38]
mov edx, r14d
cmp qword [rbp - 0x40], 0
mov dword [rsp + 0x74], eax
cmovne edx, ecx
mov byte [rsp + 0x38], dl
jmp 0x18004a2de
cmp byte [rsp + 0x3c], 0
je 0x18004a2de
mov r15d, dword [rbp - 0x50]
mov ebx, 0x88
nop dword [rax]
mov eax, ebx
sub eax, 0x86
je 0x18004a2a4
sub eax, 1
je 0x18004a278
cmp eax, 1
jne 0x18004a2af
mov r15d, r14d
jmp 0x18004a2af
mov rcx, qword [rsp + 0x60]
lea rax, [rbp - 0x18]
mov dword [rsp + 0x28], r15d
lea r9, [rbp - 0x20]
lea r8, [rbp - 0x58]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x78]
call qword [sym.imp.SHLWAPI.dll_SHRegQueryInfoUSKeyW]
mov dword [rsp + 0x74], eax
jmp 0x18004a2af
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.SHLWAPI.dll_SHRegCloseUSKey]
dec ebx
cmp ebx, 0x85
ja 0x18004a260
mov dword [rbp - 0x50], r15d
mov r15, qword [rbp - 0x60]
jmp 0x18004a2de
cmp esi, 0x354bc
je 0x18004a2d9
cmp esi, 0x3744f
je case.0x18004a39a.0
jmp 0x18004a2de
mov byte [rsp + 0x58], 0
add esi, 0x1f93
cmp esi, 0x393a7
jbe 0x180049c13
mov edx, dword [rsp + 0x40]
mov edi, dword [rsp + 0x50]
jmp 0x18004a30d
xor eax, eax
mov dword [rbp + 0x2c4], 0x6c006c
mov word [rbp + 0x2c8], ax
xor ebx, ebx
mov eax, dword [rsp + 0x48]
mov r9, qword [rbp - 0x80]
inc eax
movzx r8d, byte [rsp + 0x31]
mov r10, qword [rbp - 0x48]
mov r11d, dword [rsp + 0x68]
mov dword [rsp + 0x48], eax
cmp eax, edx
jb 0x1800498e4
mov ebx, dword [rbp + 0x4f8]
cmp ebx, dword [rsp + 0x34]
jbe case.0x18004a39a.0
mov rsi, qword [rbp + 0x230]
lea edi, [rbx - 0x37]
mov rbx, qword [rbp - 0x68]
mov r14, qword [rbp + 0x230]
mov r13, qword [rbp + 0x230]
mov r12, qword [rbp + 0x230]
mov r15, qword [rbp + 0x230]
mov eax, dword [rbp + 0x4f8]
mov ecx, dword [rsp + 0x34]
nop dword [rax + rax]
cmp edi, 0x19
ja case.default.0x18004a39a
lea rdx, [0x180000000]
mov ecx, dword [rdx + rdi*4 + 0x4a750]
add rcx, rdx
jmp rcx
mov r14d, 0x6e
lea rdx, [rbp + 0x310]
mov r8d, r14d
lea ecx, [r14 + 1]
call fcn.1800041c0
mov r8d, r14d
lea rdx, [rbp + 0x2d0]
lea ecx, [r14 - 0x62]
mov rsi, rax
call fcn.1800041c0
mov r14, rax
xor eax, eax
mov qword [rbx], rax
jmp case.0x18004a39a.11
call rsi
mov rcx, rax
call r14
mov rcx, qword [rbp - 0x78]
mov qword [rcx], rax
test rax, rax
je 0x18004a5fe
mov rcx, rax
call r13
mov qword [rbx], rax
jmp case.0x18004a39a.11
mov r13d, 0x6e
lea rdx, [rbp + 0x330]
mov r8d, r13d
lea ecx, [r13 - 0x43]
call fcn.1800041c0
mov r8d, r13d
lea rdx, str.ssleay32.dll
lea ecx, [r13 - 0x17]
mov r12, rax
call fcn.1800041c0
mov r8d, r13d
lea rdx, [rbp + 0x2b0]
lea ecx, [r13 - 0x23]
mov r15, rax
call fcn.1800041c0
mov r13, rax
jmp case.0x18004a39a.11
mov rcx, qword [rbp - 0x68]
cmp qword [rcx], 0
jne 0x18004a4ad
mov ebx, 0xbd
nop word [rax + rax]
cmp ebx, 0xbd
je 0x18004a476
cmp ebx, 0x732c
je case.0x18004a39a.0
jmp 0x18004a49f
mov rdx, qword [rbp - 0x78]
xor eax, eax
mov qword [rsp + 0x28], rax
mov r9d, 0xe3
mov qword [rsp + 0x20], rcx
xor r8d, r8d
xor ecx, ecx
call fcn.180023910
mov rcx, qword [rbp - 0x68]
mov byte [rsp + 0x58], 0
add ebx, 0x726f
cmp ebx, 0xe4de
jbe 0x18004a460
mov rax, qword [rbp - 0x70]
mov rcx, qword [rcx]
mov edx, dword [rax]
call r15
mov rbx, qword [rbp - 0x68]
jmp case.0x18004a39a.11
movsd xmm0, qword [0x180067e0a]
movzx eax, word [0x180067e12]
movsd qword [rbp + 0x2d6], xmm0
mov word [rbp + 0x2de], ax
mov dword [rbp + 0x2d2], 0x6c0073
jmp case.0x18004a39a.11
xor eax, eax
mov dword [rbp + 0x2d0], 0x73
mov word [rbp + 0x328], ax
jmp case.0x18004a39a.11
xor eax, eax
mov word [rbp + 0x2e8], ax
jmp case.0x18004a39a.11
mov r8d, 1
lea rdx, [0x180067e34]
lea rcx, [rbp + 0x2e4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov eax, 0x6c
mov word [rbp + 0x2e6], ax
jmp case.0x18004a39a.11
mov rcx, qword [rbx]
call r12
cmp eax, 1
je 0x18004a5b8
mov ebx, 0x3b
cmp ebx, 0x3b
je 0x18004a563
cmp ebx, 0xc2
je case.0x18004a39a.0
jmp 0x18004a5a6
mov rdx, qword [rbp - 0x78]
xor eax, eax
mov qword [rsp + 0x28], rax
mov r9d, 0xe3
mov rax, qword [rbp - 0x68]
xor r8d, r8d
xor ecx, ecx
mov qword [rsp + 0x20], rax
call fcn.180023910
mov r9d, 2
lea r8, [rsp + 0x78]
mov edx, 0x20001009
lea ecx, [r9 + 0x7d]
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
mov byte [rsp + 0x58], 0
add ebx, 0x87
cmp ebx, 0x149
jb 0x18004a550
mov rbx, qword [rbp - 0x68]
mov byte [rsp + 0x58], 1
jmp case.0x18004a39a.11
xor eax, eax
lea rdx, [0x180067e96]
lea rcx, [rbp + 0x2d0]
mov word [rbp + 0x2e0], ax
lea r8d, [rax + 2]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov eax, dword [rbp + 0x4f8]
mov ecx, dword [rsp + 0x34]
dec eax
dec edi
mov dword [rbp + 0x4f8], eax
cmp eax, ecx
ja 0x18004a380
jmp case.0x18004a39a.0
mov byte [rsp + 0x58], 0
mov rax, qword [rsp + 0x58]
mov rcx, qword [rbp + 0x480]
xor rcx, rsp
call fcn.1800604b0
mov rbx, qword [rsp + 0x5d0]
add rsp, 0x590
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret