Function at 0x1800153e0
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x578]
sub rsp, 0x640
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
mov rax, qword [0x18017d2b8]
xor rax, rsp
mov qword [rbp + 0x500], rax
mov r14, r9
mov qword [rbp - 0x68], r9
mov dword [rbp - 0x58], r8d
mov r10, rdx
mov qword [rbp + 0x98], rdx
mov rdx, rcx
mov qword [rbp - 0x80], rcx
mov r9, qword [rbp + 0x5a0]
mov qword [rbp - 0x70], r9
mov r11, qword [rbp + 0x5a8]
mov qword [rbp + 0xa0], r11
xor ebx, ebx
mov dword [rsp + 0x68], ebx
mov qword [rbp + 0xd8], rbx
mov esi, ILFindLastID
mov qword [rbp + 0xe0], rsi
mov byte [rbp + 0xc8], bl
mov eax, r8d
mov dword [rbp - 0x10], eax
lea r12d, [r8 - 0xb]
mov dword [rsp + 0x40], r12d
mov edi, dword [rsp + 0x78]
movsd xmm8, qword [rbp - 8]
mov dword [rsp + 0x48], edi
cmp r8d, r12d
jbe 0x1800165bd
lea esi, [rbx + 0x46]
mov r15d, 0x624e
xorps xmm7, xmm7
mov r12d, dword [rsp + 0x78]
mov r13d, dword [rsp + 0x78]
mov ecx, dword [rsp + 0x40]
add eax, 0xffffffab
cmp eax, 0x2d
ja case.default.0x1800154d9
lea r8, [0x180000000]
movzx eax, byte [r8 + rax + 0x1713c]
mov ecx, dword [r8 + rax*4 + 0x1710c]
add rcx, r8
jmp rcx
movsd xmm0, qword [rdx]
movsd qword [rsp + 0x60], xmm0
movsd xmm1, qword [r14]
movsd qword [rsp + 0x50], xmm1
xor r9d, r9d
mov r8d, 0x10f
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.1800c9e30
mov qword [rsp + 0x58], rax
mov rcx, qword [rbp - 0x80]
movsd xmm0, qword [rcx]
movsd qword [rsp + 0x60], xmm0
movsd xmm1, qword [r14]
movsd qword [rsp + 0x50], xmm1
mov r9d, 0x36
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x50]
xor ecx, ecx
call fcn.180023b20
mov qword [rsp + 0x60], rax
movsd xmm0, qword [rsp + 0x60]
addsd xmm0, qword [rsp + 0x58]
movsd qword [rbp + 0xa8], xmm0
xor ebx, ebx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0xa8]
xor r8d, r8d
mov edx, 0xca
xor ecx, ecx
call fcn.1800d7300
mov qword [rsp + 0x60], rax
jmp 0x180016571
mov rax, qword [rdx]
add rax, 0x10
cmp rax, qword [r14 + 0x10]
jbe 0x1800155c1
mov ecx, 0x91
nop dword [rax]
mov eax, ecx
sub eax, 0x8f
je case.0x180016603.87
cmp eax, 1
jne 0x1800155b7
mov byte [rsp + 0x60], 0
dec ecx
cmp ecx, 0x8e
ja 0x1800155a0
mov dword [rsp + 0x20], 0xdf
mov r9, r14
mov r8, rdx
xor edx, edx
xor ecx, ecx
call fcn.1800774b0
test al, al
jne 0x180016571
xor r8d, r8d
mov ebx, r8d
jmp 0x1800155f3
xor r8d, r8d
cmp ebx, 0xb
ja case.default.0x18001560f
mov eax, ebx
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0x1716c]
add rcx, rdx
jmp rcx
mov eax, dword [str.ackV]
mov dword [rbp + 0x1c6], eax
movzx eax, byte [0x180157590]
mov byte [rbp + 0x1ca], al
jmp case.default.0x18001560f
mov qword [rbp + 0x80], r8
jmp case.default.0x18001560f
mov word [rbp + 0x1b0], r15w
mov byte [rbp + 0x1b2], 0
mov r8d, 4
lea rdx, [0x1801575b7]
lea rcx, [rbp + 0x1b0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov byte [rbp + 0x1b6], 0x4e
jmp case.default.0x18001560f
mov dword [rbp + 0x130], 0x80
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x1e0]
lea r8, [rbp + 0x1c0]
lea rdx, [rbp + 0x1b0]
mov rcx, qword [rbp]
call qword [sym.imp.SHLWAPI.dll_SHRegGetPathA]
mov dword [rbp - 0x48], eax
xor eax, eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x130]
mov r8d, dword [rbp - 0x38]
mov edx, dword [rbp - 0x40]
mov rcx, qword [rbp + 0x80]
call sub.IMM32.dll_ImmGetImeMenuItemsA
jmp case.default.0x18001560f
lea rcx, [rbp + 0x1c0]
dec rcx
nop dword [rax + rax]
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x1800156e0
mov eax, dword [str.indS]
mov dword [rcx], eax
movzx eax, byte [0x1801575c8]
mov byte [rcx + 4], al
mov r8d, 2
lea rdx, [0x18014db70]
lea rcx, [rbp + 0x1c5]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp case.default.0x18001560f
mov dword [rbp + 0x1b7], 0x7365646f
mov byte [rbp + 0x1bb], 0
mov word [rbp + 0x1c0], si
jmp case.default.0x18001560f
mov qword [rbp], 0xffffffff80000001
jmp case.default.0x18001560f
mov ecx, r8d
movzx eax, byte [rsp + 0x44]
cmp dword [rbp - 0x48], 0
cmove ecx, eax
mov byte [rsp + 0x44], cl
cmp cl, 0
je case.default.0x18001560f
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x1e0]
lea r8, [rbp + 0x1c0]
lea rdx, [rbp + 0x1b0]
mov rcx, qword [rbp]
call qword [sym.imp.SHLWAPI.dll_SHRegSetPathA]
jmp case.default.0x18001560f
mov dword [rbp - 0x40], 1
mov dword [rbp - 0x38], reloc.SHELL32.dll_ILFindLastID
jmp case.default.0x18001560f
mov eax, dword [str.aria]
mov dword [rbp + 0x1ca], eax
movzx eax, byte [0x1801575d0]
mov byte [rbp + 0x1ce], al
mov r8d, 2
lea rdx, [0x1801575d4]
lea rcx, [rbp + 0x1ce]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov dword [rbp + 0x1cf], 0x73656c
mov byte [rsp + 0x44], 1
jmp case.default.0x18001560f
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
movups xmmword [rbp + 0x140], xmm0
movups xmmword [rbp + 0x150], xmm0
movups xmmword [rbp + 0x160], xmm0
movups xmmword [rbp + 0x170], xmm0
movups xmmword [rbp + 0x180], xmm0
movups xmmword [rbp + 0x190], xmm0
movups xmmword [rbp + 0x1a0], xmm0
mov dword [rsp + 0x74], r8d
inc ebx
lea eax, [rbx + 0xa]
cmp eax, 0x16
jb 0x1800155f0
jmp 0x180016571
mov qword [0x1801c9ba8], 0
jmp case.0x1800154d9.87
mov dword [rbp - 0x78], 1
xor ebx, ebx
mov dword [rsp + 0x58], ebx
mov eax, dword [r14 + 0x3c]
mov dword [rsp + 0x50], eax
mov dword [rbp - 0x30], 2
lea rax, [rbp - 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x58]
mov r8d, 0xa6
mov rdx, qword [0x1801c9ba8]
lea rcx, [rsp + 0x50]
call fcn.1800f4db0
mov dword [rbp + 0x10], 1
mov dword [rbp + 0x18], ebx
mov eax, dword [r14 + 0x40]
mov dword [rbp + 0x20], eax
mov dword [rbp + 8], 2
lea rax, [rbp + 8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x18]
mov r8d, 0xa6
mov rdx, qword [0x1801c9ba8]
lea rcx, [rbp + 0x20]
call fcn.1800f4db0
jmp 0x180016571
mov dword [rbp + 0x28], 1
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea r8, [rbp + 0x28]
lea edx, [r9 + 0x60]
xor ecx, ecx
call fcn.18002d180
test rax, rax
je 0x180016571
mov r8d, 0x24
mov rdx, rax
xor ecx, ecx
call fcn.1800e64e0
jmp 0x180016571
test edi, edi
jns case.0x1800154d9.87
mov dword [rsp + 0x60], 0xffffffff
jmp case.0x180016603.87
cmp qword [0x1801c9ba8], 0
jne 0x18001595f
mov dword [rsp + 0x58], 0
mov dword [rsp + 0x50], 4
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
mov ecx, 0x111
call fcn.1800b7510
mov qword [0x1801c9ba8], rax
mov dword [rbp + 0x38], 1
mov dword [rbp + 0x58], 0
mov eax, dword [r14]
mov dword [rbp + 0x78], eax
mov dword [rbp + 0x30], 2
lea rax, [rbp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x38]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x58]
mov r8d, 0xa6
mov rdx, qword [0x1801c9ba8]
lea rcx, [rbp + 0x78]
call fcn.1800f4db0
mov esi, 1
add r14, 4
mov qword [rsp + 0x50], r14
mov r15, qword [0x1801c9ba8]
mov edi, 0x28
cmp edi, 0x22f0
ja 0x180015a92
je 0x180015a6f
cmp edi, 0x28
je 0x180015afa
cmp edi, 0x68
je 0x180015a1c
cmp edi, 0xd70
jne 0x180015b77
cmp dword [0x18017d620], 0
jne 0x180015b77
cmp esi, 0xffffffff
je 0x180015b77
mov r8d, 0x7c
lea rdx, [0x18014dc10]
mov rcx, r15
call fcn.18010fd20
jmp 0x180015b77
mov r8d, dword [r15]
test r8d, r8d
je 0x180015b89
mov eax, dword [0x18017b4e0]
cdq
idiv dword [r14]
mov r12d, eax
mov eax, r8d
cdq
idiv dword [r14]
cmp eax, 0x3e8
jle 0x180015b77
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea r8, str.Relaunch___ReleaseTask_GridId_lld_task_p
lea rdx, [0x18014dc04]
call fcn.18010fd20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov eax, dword [0x18017b4e0]
cdq
idiv dword [r14]
mov eax, edx
imul eax, dword [r15]
mov dword [rbp - 0x60], eax
cdq
idiv dword [r14]
imul r12d, dword [r15]
add r12d, eax
jmp 0x180015b77
cmp edi, 0x2800
je 0x180015b89
cmp edi, 0x4578
je 0x180015b38
cmp edi, 0x6800
jne 0x180015b77
mov ebx, 0x98
nop dword [rax + rax]
mov eax, ebx
sub eax, 0x98
je 0x180015ad9
sub eax, 1
je 0x180015af0
cmp eax, 1
je 0x180015b89
jmp 0x180015af0
mov eax, dword [rbp - 0x60]
cdq
idiv dword [r14]
mov esi, edx
cmp dword [r14], 0x12
jge 0x180015af0
mov ecx, edx
call qword [0x18017b500]
inc ebx
cmp ebx, 0x9b
jb 0x180015ac0
mov rcx, r15
cmp dword [0x18017d620], 0
je 0x180015b22
mov r9, r14
mov r8d, 0x12
lea rdx, [0x18014dc08]
call fcn.18010fd20
mov edi, 0x28
jmp 0x180015b77
mov r8, r14
lea rdx, [0x18014dc04]
call fcn.18010fd20
mov edi, 0x28
jmp 0x180015b77
mov ebx, 0x11
lea r14, [0x180000000]
mov edx, r12d
xor ecx, ecx
call qword [0x18017b500]
movsxd rax, dword [0x18017b510]
cmp eax, 0xffffffff
je 0x180015b6c
lea r8, [rax + rax*8]
mov edx, r12d
xor ecx, ecx
call qword [r14 + r8*8 + 0x17b500]
sub rbx, 1
jne 0x180015b44
mov r14, qword [rsp + 0x50]
add edi, 0xd48
cmp edi, 0x6a40
jbe 0x1800159c0
mov esi, 1
mov r14, qword [rbp - 0x68]
add r14, 0x17
mov qword [rsp + 0x50], r14
mov r15, qword [0x1801c9ba8]
mov edi, 0x28
nop word [rax + rax]
cmp edi, 0x22f0
ja 0x180015c82
je 0x180015c5f
cmp edi, 0x28
je 0x180015cea
cmp edi, 0x68
je 0x180015c0c
cmp edi, 0xd70
jne 0x180015d67
cmp dword [0x18017d620], 0
jne 0x180015d67
cmp esi, 0xffffffff
je 0x180015d67
mov r8d, 0x7c
lea rdx, [0x18014dc10]
mov rcx, r15
call fcn.18010fd20
jmp 0x180015d67
mov r8d, dword [r15]
test r8d, r8d
je 0x18001655e
mov eax, dword [0x18017b4e0]
cdq
idiv dword [r14]
mov r13d, eax
mov eax, r8d
cdq
idiv dword [r14]
cmp eax, 0x3e8
jle 0x180015d67
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea r8, str.Relaunch___ReleaseTask_GridId_lld_task_p
lea rdx, [0x18014dc04]
call fcn.18010fd20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov eax, dword [0x18017b4e0]
cdq
idiv dword [r14]
mov eax, edx
imul eax, dword [r15]
mov dword [rbp - 0x1c], eax
cdq
idiv dword [r14]
imul r13d, dword [r15]
add r13d, eax
jmp 0x180015d67
cmp edi, 0x2800
je 0x18001655e
cmp edi, 0x4578
je 0x180015d28
cmp edi, 0x6800
jne 0x180015d67
mov ebx, 0x98
nop dword [rax + rax]
mov eax, ebx
sub eax, 0x98
je 0x180015cc9
sub eax, 1
je 0x180015ce0
cmp eax, 1
je 0x18001655e
jmp 0x180015ce0
mov eax, dword [rbp - 0x1c]
cdq
idiv dword [r14]
mov esi, edx
cmp dword [r14], 9
jge 0x180015ce0
mov ecx, edx
call qword [0x18017b500]
inc ebx
cmp ebx, 0x9b
jb 0x180015cb0
mov rcx, r15
cmp dword [0x18017d620], 0
je 0x180015d12
mov r9, r14
mov r8d, 9
lea rdx, [0x18014dc08]
call fcn.18010fd20
mov edi, 0x28
jmp 0x180015d67
mov r8, r14
lea rdx, [0x18014dc04]
call fcn.18010fd20
mov edi, 0x28
jmp 0x180015d67
mov ebx, 8
lea r14, [0x180000000]
mov edx, r13d
xor ecx, ecx
call qword [0x18017b500]
movsxd rax, dword [0x18017b510]
cmp eax, 0xffffffff
je 0x180015d5c
lea r8, [rax + rax*8]
mov edx, r13d
xor ecx, ecx
call qword [r14 + r8*8 + 0x17b500]
sub rbx, 1
jne 0x180015d34
mov r14, qword [rsp + 0x50]
add edi, 0xd48
cmp edi, 0x6a40
jbe 0x180015bb0
jmp 0x18001655e
movsd xmm0, qword [rdx]
movsd qword [rsp + 0x58], xmm0
movsd xmm1, qword [r14]
movsd qword [rsp + 0x50], xmm1
lea rax, [rbp + 0x6c]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x70]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
mov r8d, 0x66
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0xc0]
call fcn.1800e85c0
test eax, eax
jne 0x18001591d
movsd qword [rbp - 0x30], xmm7
mov eax, dword [rbp + 0x70]
mov dword [rbp - 0x78], eax
mov eax, dword [rbp + 0x6c]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x68]
mov dword [rsp + 0x58], eax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], SHUnicodeToAnsi
lea r9, [rsp + 0x58]
lea r8, [rbp - 0x30]
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x88]
call fcn.180073a10
mov edi, eax
mov dword [rsp + 0x48], eax
jmp 0x180016571
mov esi, 1
add r14, 0x21
mov qword [rsp + 0x50], r14
mov r15, qword [0x1801c9ba8]
mov qword [rsp + 0x58], r15
mov edi, 0x28
cmp edi, 0x22f0
ja 0x180015f1c
je 0x180015ef0
cmp edi, 0x28
je 0x180015f7f
cmp edi, 0x68
je 0x180015e9c
cmp edi, 0xd70
jne 0x180016008
cmp dword [0x18017d620], 0
jne 0x180016008
cmp esi, 0xffffffff
je 0x180016008
mov r8d, 0x7c
lea rdx, [0x18014dc10]
mov rcx, r15
call fcn.18010fd20
jmp 0x180016008
mov r8d, dword [r15]
test r8d, r8d
je 0x18001601a
mov eax, dword [0x18017b4e0]
cdq
idiv dword [r14]
mov dword [rsp + 0x70], eax
mov eax, r8d
cdq
idiv dword [r14]
cmp eax, 0x3e8
jle 0x180016008
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea r8, str.Relaunch___ReleaseTask_GridId_lld_task_p
lea rdx, [0x18014dc04]
call fcn.18010fd20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov eax, dword [0x18017b4e0]
cdq
idiv dword [r14]
mov eax, edx
imul eax, dword [r15]
mov dword [rbp - 0x18], eax
cdq
idiv dword [r14]
mov r9d, dword [rsp + 0x70]
imul r9d, dword [r15]
add eax, r9d
mov dword [rsp + 0x70], eax
jmp 0x180016008
cmp edi, 0x2800
je 0x18001601a
cmp edi, 0x4578
je 0x180015fbd
cmp edi, 0x6800
jne 0x180016008
mov ebx, 0x98
mov eax, ebx
sub eax, 0x98
je 0x180015f5e
sub eax, 1
je 0x180015f75
cmp eax, 1
je 0x18001601a
jmp 0x180015f75
mov eax, dword [rbp - 0x18]
cdq
idiv dword [r14]
mov esi, edx
cmp dword [r14], 9
jge 0x180015f75
mov ecx, edx
call qword [0x18017b500]
inc ebx
cmp ebx, 0x9b
jb 0x180015f45
mov rcx, r15
cmp dword [0x18017d620], 0
je 0x180015fa7
mov r9, r14
mov r8d, 9
lea rdx, [0x18014dc08]
call fcn.18010fd20
mov edi, 0x28
jmp 0x180016008
mov r8, r14
lea rdx, [0x18014dc04]
call fcn.18010fd20
mov edi, 0x28
jmp 0x180016008
mov ebx, 8
mov r14d, dword [rsp + 0x70]
lea r15, [0x180000000]
nop
mov edx, r14d
xor ecx, ecx
call qword [0x18017b500]
movsxd rax, dword [0x18017b510]
cmp eax, 0xffffffff
je 0x180015ff8
lea r8, [rax + rax*8]
mov edx, r14d
xor ecx, ecx
call qword [r15 + r8*8 + 0x17b500]
sub rbx, 1
jne 0x180015fd0
mov r14, qword [rsp + 0x50]
mov r15, qword [rsp + 0x58]
add edi, 0xd48
cmp edi, 0x6a40
jbe 0x180015e40
mov dword [rsp + 0x58], 1
xor edi, edi
mov dword [rbp - 0x78], edi
mov rbx, qword [rbp - 0x68]
mov eax, dword [rbx + 0x2c]
mov dword [rbp - 0x30], eax
mov dword [rsp + 0x50], 2
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x78]
mov r8d, 0xa6
mov rdx, qword [0x1801c9ba8]
lea rcx, [rbp - 0x30]
call fcn.1800f4db0
mov dword [rbp + 0x50], 1
mov dword [rbp + 0x60], edi
mov eax, dword [rbx + 0x30]
mov dword [rbp + 0x40], eax
mov dword [rbp + 0x48], 2
lea rax, [rbp + 0x48]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x60]
mov r8d, 0xa6
mov rdx, qword [0x1801c9ba8]
lea rcx, [rbp + 0x40]
call fcn.1800f4db0
lea esi, [rdi + 1]
lea r14, [rbx + 0x34]
mov qword [rsp + 0x50], r14
mov r15, qword [0x1801c9ba8]
mov qword [rsp + 0x58], r15
mov edi, 0x28
nop word [rax + rax]
cmp edi, 0x22f0
ja 0x1800161ac
je 0x180016180
cmp edi, 0x28
je 0x18001620f
cmp edi, 0x68
je 0x18001612c
cmp edi, 0xd70
jne 0x180016298
cmp dword [0x18017d620], 0
jne 0x180016298
cmp esi, 0xffffffff
je 0x180016298
mov r8d, 0x7c
lea rdx, [0x18014dc10]
mov rcx, r15
call fcn.18010fd20
jmp 0x180016298
mov r8d, dword [r15]
test r8d, r8d
je 0x18001655e
mov eax, dword [0x18017b4e0]
cdq
idiv dword [r14]
mov dword [rsp + 0x6c], eax
mov eax, r8d
cdq
idiv dword [r14]
cmp eax, 0x3e8
jle 0x180016298
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea r8, str.Relaunch___ReleaseTask_GridId_lld_task_p
lea rdx, [0x18014dc04]
call fcn.18010fd20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov eax, dword [0x18017b4e0]
cdq
idiv dword [r14]
mov eax, edx
imul eax, dword [r15]
mov dword [rbp - 0x50], eax
cdq
idiv dword [r14]
mov r9d, dword [rsp + 0x6c]
imul r9d, dword [r15]
add eax, r9d
mov dword [rsp + 0x6c], eax
jmp 0x180016298
cmp edi, 0x2800
je 0x18001655e
cmp edi, 0x4578
je 0x18001624d
cmp edi, 0x6800
jne 0x180016298
mov ebx, 0x98
mov eax, ebx
sub eax, 0x98
je 0x1800161ee
sub eax, 1
je 0x180016205
cmp eax, 1
je 0x18001655e
jmp 0x180016205
mov eax, dword [rbp - 0x50]
cdq
idiv dword [r14]
mov esi, edx
cmp dword [r14], 7
jge 0x180016205
mov ecx, edx
call qword [0x18017b500]
inc ebx
cmp ebx, 0x9b
jb 0x1800161d5
mov rcx, r15
cmp dword [0x18017d620], 0
je 0x180016237
mov r9, r14
mov r8d, 7
lea rdx, [0x18014dc08]
call fcn.18010fd20
mov edi, 0x28
jmp 0x180016298
mov r8, r14
lea rdx, [0x18014dc04]
call fcn.18010fd20
mov edi, 0x28
jmp 0x180016298
mov ebx, 6
mov r14d, dword [rsp + 0x6c]
lea r15, [0x180000000]
nop
mov edx, r14d
xor ecx, ecx
call qword [0x18017b500]
movsxd rax, dword [0x18017b510]
cmp eax, 0xffffffff
je 0x180016288
lea r8, [rax + rax*8]
mov edx, r14d
xor ecx, ecx
call qword [r15 + r8*8 + 0x17b500]
sub rbx, 1
jne 0x180016260
mov r14, qword [rsp + 0x50]
mov r15, qword [rsp + 0x58]
add edi, 0xd48
cmp edi, 0x6a40
ja 0x18001655e
jmp 0x1800160d0
movsd xmm8, qword [r9]
subsd xmm8, qword [rbp + 0x88]
jmp case.0x1800154d9.87
mov r8d, 0x5c
mov rcx, r14
call fcn.18000f610
mov rdi, rax
cmp rax, 8
jae 0x1800163a2
mov ebx, 0xa4
cmp ebx, 0xa4
je 0x18001637a
cmp ebx, 0x126
je 0x180016370
cmp ebx, 0x1a8
je 0x180016341
cmp ebx, 0x22a
je 0x180016314
cmp ebx, 0x2ac
je case.0x180016603.87
jmp 0x18001638c
xor ecx, ecx
movzx eax, byte [rsp + 0x45]
cmp dword [rbp - 0x28], ecx
cmove ecx, eax
mov byte [rsp + 0x45], cl
cmp cl, 0
je 0x18001633a
lea r8, [rbp + 0x2f0]
xor edx, edx
xor ecx, ecx
call sub.SHELL32.dll_SHSetUnreadMailCountW
mov byte [rsp + 0x60], 0
jmp 0x18001638c
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x28], eax
lea rax, [rbp + 0x2f0]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 8]
lea r8, [rbp - 0x20]
xor edx, edx
mov rcx, qword [rbp + 0x90]
call sub.SHELL32.dll_SHGetUnreadMailCountW
mov dword [rbp - 0x28], eax
jmp 0x18001638c
mov dword [rsp + 0x78], 0x104
jmp 0x18001638c
mov byte [rsp + 0x45], 1
xor eax, eax
mov qword [rbp + 0x90], rax
mov qword [rbp - 8], rax
add ebx, 0x82
cmp ebx, 0x32e
jb 0x1800162e2
mov ebx, dword [rsp + 0x68]
mov rcx, qword [rbp - 0x80]
mov rcx, qword [rcx]
sub rcx, rdi
mov qword [rbp + 0xf8], 0
mov qword [rbp + 0x100], ILFindLastID
mov byte [rbp + 0xe8], 0
mov rax, qword [r14 + 0x10]
cmp rax, rcx
jb 0x180017100
sub rax, rcx
cmp rax, rdi
cmovb rdi, rax
mov rax, r14
cmp qword [r14 + 0x18], 0x10
jb 0x1800163ed
mov rax, qword [r14]
lea rdx, [rax + rcx]
mov r8, rdi
lea rcx, [rbp + 0xe8]
call fcn.180027a60
or ebx, 1
mov dword [rsp + 0x68], ebx
lea rsi, [rbp + 0xe8]
mov r14, qword [rbp + 0xe8]
mov r15, qword [rbp + 0x100]
cmp r15, 0x10
cmovae rsi, r14
mov rdi, qword [rbp + 0xf8]
cmp rdi, 0x10
jae 0x180016444
movups xmm6, xmmword [rsi]
mov qword [rbp + 0x120], ILFindLastID
jmp 0x1800164ca
mov rbx, rdi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x180016498
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180017106
mov rcx, rax
call fcn.18010ff14
mov rcx, rax
test rax, rax
je 0x18001659c
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800164a6
test rcx, rcx
je 0x1800164a4
call fcn.18010ff14
jmp 0x1800164a6
xor eax, eax
mov qword [rbp + 0x108], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x120], rbx
movups xmm6, xmmword [rbp + 0x108]
mov qword [rbp + reloc.SHLWAPI.dll_SHRegGetIntW], rdi
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x180016512
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001650d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001659c
call fcn.18010ff50
movups xmmword [rbp + 0xc8], xmm6
movups xmm0, xmmword [rbp + reloc.SHLWAPI.dll_SHRegGetIntW]
movups xmmword [rbp + 0xd8], xmm0
cmp r15, 0x10
jb 0x18001655e
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x180016556
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180017061
mov rcx, r14
call fcn.18010ff50
mov r14, qword [rbp - 0x68]
mov edi, dword [rsp + 0x48]
mov esi, 0x46
mov r15d, 0x624e
mov rdx, qword [rbp - 0x80]
mov r9, qword [rbp - 0x70]
mov ecx, dword [rsp + 0x40]
mov eax, dword [rbp - 0x10]
dec eax
mov dword [rbp - 0x10], eax
cmp eax, ecx
jbe 0x1800165a3
mov ebx, dword [rsp + 0x68]
jmp 0x1800154b2
mov byte [rsp + 0x60], 0
jmp case.0x180016603.87
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rsi, qword [rbp + 0xe0]
mov r12d, dword [rsp + 0x40]
mov r10, qword [rbp + 0x98]
mov r11, qword [rbp + 0xa0]
mov eax, dword [rbp - 0x58]
cmp eax, r12d
jbe 0x180017084
mov r15d, dword [rbp - 0x20]
mov r12d, dword [rbp - 0x20]
mov r13d, dword [rbp - 0x20]
mov ecx, dword [rsp + 0x40]
nop dword [rax]
add eax, 0xffffffab
cmp eax, 0x2d
ja case.default.0x180016603
lea r8, [0x180000000]
movzx eax, byte [r8 + rax + 0x171c8]
mov ecx, dword [r8 + rax*4 + 0x1719c]
add rcx, r8
jmp rcx
mov dword [rbp - 0x28], 1
mov dword [rbp - 0x50], 0
mov eax, dword [r14 + 0x44]
mov dword [rbp - 0x18], eax
mov dword [rsp + 0x78], 2
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x28]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x50]
mov r8d, 0xa6
mov rdx, qword [0x1801c9ba8]
lea rcx, [rbp - 0x18]
call fcn.1800f4db0
mov ecx, dword [rsp + 0x40]
mov rsi, qword [rbp + 0xe0]
mov eax, dword [rbp - 0x58]
dec eax
mov dword [rbp - 0x58], eax
cmp eax, ecx
jbe 0x180017084
mov r14, qword [rbp - 0x68]
mov rdx, qword [rbp - 0x80]
mov r10, qword [rbp + 0x98]
mov r11, qword [rbp + 0xa0]
jmp 0x1800165e0
mov dword [rsp + 0x20], 0xdf
mov r9, r14
mov r8, rdx
xor edx, edx
xor ecx, ecx
call fcn.1800774b0
test al, al
je case.0x18001560f.11
lea rax, [rbp + 0xc8]
mov r9, qword [rbp - 0x70]
cmp r9, rax
je case.0x180016603.95
mov rdx, qword [r9 + 0x18]
cmp rdx, 0x10
jb 0x1800166f2
mov rcx, qword [r9]
inc rdx
cmp rdx, 0x1000
jb 0x1800166e9
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180017061
mov rcx, r8
call fcn.18010ff50
mov r9, qword [rbp - 0x70]
movups xmm0, xmmword [rbp + 0xc8]
movups xmmword [r9], xmm0
movups xmm1, xmmword [rbp + 0xd8]
movups xmmword [r9 + 0x10], xmm1
mov qword [rbp + 0xd8], 0
mov esi, ILFindLastID
mov qword [rbp + 0xe0], rsi
mov byte [rbp + 0xc8], 0
mov ecx, dword [rsp + 0x40]
jmp 0x18001665a
mov edi, 1
lea rsi, [r14 + 0x68]
mov r14, qword [0x1801c9ba8]
mov ebx, 0x28
nop word [rax + rax]
cmp ebx, 0x22f0
ja 0x180016829
je 0x1800167fe
cmp ebx, 0x28
je 0x18001688a
cmp ebx, 0x68
je 0x1800167ac
cmp ebx, 0xd70
jne 0x1800168f9
cmp dword [0x18017d620], 0
jne 0x1800168f9
cmp edi, 0xffffffff
je 0x1800168f9
mov r8d, 0x7c
lea rdx, [0x18014dc10]
mov rcx, r14
call fcn.18010fd20
jmp 0x1800168f9
mov r8d, dword [r14]
test r8d, r8d
je 0x18001690b
mov eax, dword [0x18017b4e0]
cdq
idiv dword [rsi]
mov dword [rsp + 0x74], eax
mov eax, r8d
cdq
idiv dword [rsi]
cmp eax, 0x3e8
jle 0x1800168f9
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea r8, str.Relaunch___ReleaseTask_GridId_lld_task_p
lea rdx, [0x18014dc04]
call fcn.18010fd20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov r8d, dword [r14]
mov eax, dword [0x18017b4e0]
cdq
idiv dword [rsi]
mov r15d, edx
imul r15d, r8d
mov eax, r15d
cdq
idiv dword [rsi]
imul r8d, dword [rsp + 0x74]
add eax, r8d
mov dword [rsp + 0x74], eax
jmp 0x1800168f9
cmp ebx, 0x2800
je 0x18001690b
cmp ebx, 0x4578
je 0x1800168c8
cmp ebx, 0x6800
jne 0x1800168f9
mov ebx, 0x98
mov eax, ebx
sub eax, 0x98
je 0x18001686b
sub eax, 1
je 0x180016880
cmp eax, 1
je 0x18001690b
jmp 0x180016880
mov eax, r15d
cdq
idiv dword [rsi]
mov edi, edx
cmp dword [rsi], 2
jge 0x180016880
mov ecx, edx
call qword [0x18017b500]
inc ebx
cmp ebx, 0x9b
jb 0x180016852
mov rcx, r14
cmp dword [0x18017d620], 0
je 0x1800168b2
mov r9, rsi
mov r8d, 2
lea rdx, [0x18014dc08]
call fcn.18010fd20
mov ebx, 0x28
jmp 0x1800168f9
mov r8, rsi
lea rdx, [0x18014dc04]
call fcn.18010fd20
mov ebx, 0x28
jmp 0x1800168f9
mov edx, dword [rsp + 0x74]
xor ecx, ecx
call qword [0x18017b500]
movsxd rax, dword [0x18017b510]
cmp eax, 0xffffffff
je 0x1800168f9
lea r8, [rax + rax*8]
mov edx, dword [rsp + 0x74]
xor ecx, ecx
lea rax, [0x180000000]
call qword [rax + r8*8 + 0x17b500]
add ebx, 0xd48
cmp ebx, 0x6a40
jbe 0x180016750
mov edi, 1
mov rsi, qword [rbp - 0x68]
mov r14, qword [0x1801c9ba8]
mov ebx, 0x28
cmp ebx, 0x22f0
ja 0x1800169fe
je 0x1800169d0
cmp ebx, 0x28
je 0x180016a61
cmp ebx, 0x68
je 0x18001697c
cmp ebx, 0xd70
jne 0x180016ad2
cmp dword [0x18017d620], 0
jne 0x180016ad2
cmp edi, 0xffffffff
je 0x180016ad2
mov r8d, 0x7c
lea rdx, [0x18014dc10]
mov rcx, r14
call fcn.18010fd20
jmp 0x180016ad2
mov r8d, dword [r14]
test r8d, r8d
je 0x180016ae4
mov eax, dword [0x18017b4e0]
cdq
idiv dword [rsi + 0x6a]
mov dword [rsp + 0x68], eax
mov eax, r8d
cdq
idiv dword [rsi + 0x6a]
cmp eax, 0x3e8
jle 0x180016ad2
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea r8, str.Relaunch___ReleaseTask_GridId_lld_task_p
lea rdx, [0x18014dc04]
call fcn.18010fd20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov r8d, dword [r14]
mov eax, dword [0x18017b4e0]
cdq
idiv dword [rsi + 0x6a]
mov eax, edx
imul eax, r8d
mov dword [rbp - 0x1c], eax
imul r8d, dword [rsp + 0x68]
cdq
idiv dword [rsi + 0x6a]
lea r9d, [rax + r8]
mov dword [rsp + 0x68], r9d
jmp 0x180016ad2
cmp ebx, 0x2800
je 0x180016ae4
cmp ebx, 0x4578
je 0x180016aa1
cmp ebx, 0x6800
jne 0x180016ad2
mov ebx, 0x98
mov eax, ebx
sub eax, 0x98
je 0x180016a40
sub eax, 1
je 0x180016a57
cmp eax, 1
je 0x180016ae4
jmp 0x180016a57
mov eax, dword [rbp - 0x1c]
cdq
idiv dword [rsi + 0x6a]
mov edi, edx
cmp dword [rsi + 0x6a], 2
jge 0x180016a57
mov ecx, edx
call qword [0x18017b500]
inc ebx
cmp ebx, 0x9b
jb 0x180016a27
mov rcx, r14
cmp dword [0x18017d620], 0
je 0x180016a8a
lea r9, [rsi + 0x6a]
mov r8d, 2
lea rdx, [0x18014dc08]
call fcn.18010fd20
mov ebx, 0x28
jmp 0x180016ad2
lea r8, [rsi + 0x6a]
lea rdx, [0x18014dc04]
call fcn.18010fd20
mov ebx, 0x28
jmp 0x180016ad2
mov edx, dword [rsp + 0x68]
xor ecx, ecx
call qword [0x18017b500]
movsxd rax, dword [0x18017b510]
cmp eax, 0xffffffff
je 0x180016ad2
lea r8, [rax + rax*8]
mov edx, dword [rsp + 0x68]
xor ecx, ecx
lea rax, [0x180000000]
call qword [rax + r8*8 + 0x17b500]
add ebx, 0xd48
cmp ebx, 0x6a40
jbe 0x180016920
lea rdx, [0x18014f684]
mov rcx, qword [0x1801c9ba8]
call fcn.18010fd20
mov dword [rsp + 0x60], 0
mov edi, dword [rsp + 0x48]
jmp case.0x180016603.95
movsd qword [rbp + 0x88], xmm8
movsd xmm0, qword [rbp + 0xb0]
movsd qword [rbp - 8], xmm0
movsd xmm1, qword [rbp + 0xb8]
movsd qword [rbp + 0x90], xmm1
lea rax, [rbp - 8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x90]
mov qword [rsp + 0x20], rax
mov r9d, 0xcf
lea r8, [rbp + 0x88]
mov rdx, r11
mov rcx, r10
call fcn.180102dd0
mov rsi, qword [rbp + 0xe0]
test eax, eax
jne 0x180017068
mov ecx, dword [rsp + 0x40]
jmp 0x18001665a
mov dword [rsp + 0x50], 1
xor ebx, ebx
mov dword [rsp + 0x58], ebx
mov eax, dword [r14 + 0x48]
mov dword [rbp - 0x78], eax
mov dword [rbp - 0x60], 2
lea rax, [rbp - 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x58]
mov r8d, 0xa6
mov rdx, qword [0x1801c9ba8]
lea rcx, [rbp - 0x78]
call fcn.1800f4db0
mov dword [rbp - 0x38], 1
mov dword [rbp - 0x40], ebx
mov eax, dword [r14 + 0x4c]
mov dword [rbp - 0x48], eax
mov dword [rbp - 0x30], 2
lea rax, [rbp - 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x38]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x40]
mov r8d, 0xa6
mov rdx, qword [0x1801c9ba8]
lea rcx, [rbp - 0x48]
jmp 0x18001664a
cmp dword [0x18017d620], 0
mov eax, ILFindLastID
jne 0x180016c13
mov eax, dword [r14 + 0x60]
mov dword [rsp + 0x50], eax
mov dword [rbp - 0x60], 1
mov dword [rsp + 0x58], 0
lea rax, [r14 + 0x50]
mov dword [rsp + 0x28], 0x28
mov qword [rsp + 0x20], rax
mov r9, qword [0x1801c9ba8]
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x58]
call fcn.180028b60
mov edi, 1
lea rsi, [r14 + 0x64]
mov r14, qword [0x1801c9ba8]
mov ebx, 0x28
nop word [rax + rax]
cmp ebx, 0x22f0
ja 0x180016d49
je 0x180016d1e
cmp ebx, 0x28
je 0x180016daa
cmp ebx, 0x68
je 0x180016ccc
cmp ebx, 0xd70
jne 0x180016e19
cmp dword [0x18017d620], 0
jne 0x180016e19
cmp edi, 0xffffffff
je 0x180016e19
mov r8d, 0x7c
lea rdx, [0x18014dc10]
mov rcx, r14
call fcn.18010fd20
jmp 0x180016e19
mov r8d, dword [r14]
test r8d, r8d
je 0x180016e2b
mov eax, dword [0x18017b4e0]
cdq
idiv dword [rsi]
mov dword [rsp + 0x6c], eax
mov eax, r8d
cdq
idiv dword [rsi]
cmp eax, 0x3e8
jle 0x180016e19
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea r8, str.Relaunch___ReleaseTask_GridId_lld_task_p
lea rdx, [0x18014dc04]
call fcn.18010fd20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov r8d, dword [r14]
mov eax, dword [0x18017b4e0]
cdq
idiv dword [rsi]
mov r12d, edx
imul r12d, r8d
mov eax, r12d
cdq
idiv dword [rsi]
imul r8d, dword [rsp + 0x6c]
add eax, r8d
mov dword [rsp + 0x6c], eax
jmp 0x180016e19
cmp ebx, 0x2800
je 0x180016e2b
cmp ebx, 0x4578
je 0x180016de8
cmp ebx, 0x6800
jne 0x180016e19
mov ebx, 0x98
mov eax, ebx
sub eax, 0x98
je 0x180016d8b
sub eax, 1
je 0x180016da0
cmp eax, 1
je 0x180016e2b
jmp 0x180016da0
mov eax, r12d
cdq
idiv dword [rsi]
mov edi, edx
cmp dword [rsi], 2
jge 0x180016da0
mov ecx, edx
call qword [0x18017b500]
inc ebx
cmp ebx, 0x9b
jb 0x180016d72
mov rcx, r14
cmp dword [0x18017d620], 0
je 0x180016dd2
mov r9, rsi
mov r8d, 2
lea rdx, [0x18014dc08]
call fcn.18010fd20
mov ebx, 0x28
jmp 0x180016e19
mov r8, rsi
lea rdx, [0x18014dc04]
call fcn.18010fd20
mov ebx, 0x28
jmp 0x180016e19
mov edx, dword [rsp + 0x6c]
xor ecx, ecx
call qword [0x18017b500]
movsxd rax, dword [0x18017b510]
cmp eax, 0xffffffff
je 0x180016e19
lea r8, [rax + rax*8]
mov edx, dword [rsp + 0x6c]
xor ecx, ecx
lea rax, [0x180000000]
call qword [rax + r8*8 + 0x17b500]
add ebx, 0xd48
cmp ebx, 0x6a40
jbe 0x180016c70
mov edi, 1
mov rsi, qword [rbp - 0x68]
mov r14, qword [0x1801c9ba8]
mov ebx, 0x28
cmp ebx, 0x22f0
ja 0x180016f1d
je 0x180016ef0
cmp ebx, 0x28
je 0x180016f80
cmp ebx, 0x68
je 0x180016e9c
cmp ebx, 0xd70
jne 0x180016ff1
cmp dword [0x18017d620], 0
jne 0x180016ff1
cmp edi, 0xffffffff
je 0x180016ff1
mov r8d, 0x7c
lea rdx, [0x18014dc10]
mov rcx, r14
call fcn.18010fd20
jmp 0x180016ff1
mov r8d, dword [r14]
test r8d, r8d
je 0x180016aff
mov eax, dword [0x18017b4e0]
cdq
idiv dword [rsi + 0x66]
mov dword [rsp + 0x70], eax
mov eax, r8d
cdq
idiv dword [rsi + 0x66]
cmp eax, 0x3e8
jle 0x180016ff1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea r8, str.Relaunch___ReleaseTask_GridId_lld_task_p
lea rdx, [0x18014dc04]
call fcn.18010fd20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov r8d, dword [r14]
mov eax, dword [0x18017b4e0]
cdq
idiv dword [rsi + 0x66]
mov r13d, edx
imul r13d, r8d
mov eax, r13d
cdq
idiv dword [rsi + 0x66]
imul r8d, dword [rsp + 0x70]
add eax, r8d
mov dword [rsp + 0x70], eax
jmp 0x180016ff1
cmp ebx, 0x2800
je 0x180016aff
cmp ebx, 0x4578
je 0x180016fc0
cmp ebx, 0x6800
jne 0x180016ff1
mov ebx, 0x98
mov eax, ebx
sub eax, 0x98
je 0x180016f5f
sub eax, 1
je 0x180016f76
cmp eax, 1
je 0x180016aff
jmp 0x180016f76
mov eax, r13d
cdq
idiv dword [rsi + 0x66]
mov edi, edx
cmp dword [rsi + 0x66], 2
jge 0x180016f76
mov ecx, edx
call qword [0x18017b500]
inc ebx
cmp ebx, 0x9b
jb 0x180016f46
mov rcx, r14
cmp dword [0x18017d620], 0
je 0x180016fa9
lea r9, [rsi + 0x66]
mov r8d, 2
lea rdx, [0x18014dc08]
call fcn.18010fd20
mov ebx, 0x28
jmp 0x180016ff1
lea r8, [rsi + 0x66]
lea rdx, [0x18014dc04]
call fcn.18010fd20
mov ebx, 0x28
jmp 0x180016ff1
mov edx, dword [rsp + 0x70]
xor ecx, ecx
call qword [0x18017b500]
movsxd rax, dword [0x18017b510]
cmp eax, 0xffffffff
je 0x180016ff1
lea r8, [rax + rax*8]
mov edx, dword [rsp + 0x70]
xor ecx, ecx
lea rax, [0x180000000]
call qword [rax + r8*8 + 0x17b500]
add ebx, 0xd48
cmp ebx, 0x6a40
ja 0x180016aff
jmp 0x180016e40
movsd xmm0, qword [rdx]
movsd qword [rbp], xmm0
movsd xmm1, qword [r14]
movsd qword [rbp + 0x80], xmm1
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x80]
lea r8, [rbp]
lea rdx, [rbp + 0xb8]
mov ecx, 0x110
call fcn.1800f1360
mov rsi, qword [rbp + 0xe0]
test eax, eax
js 0x180017068
cmovg edi, eax
mov dword [rsp + 0x48], edi
mov ecx, dword [rsp + 0x40]
jmp 0x18001665a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov dword [rsp + 0x60], 0xffffffff
jmp 0x180017084
mov dword [rsp + 0x60], edi
jmp case.0x180016603.87
mov byte [rsp + 0x60], 1
mov rsi, qword [rbp + 0xe0]
cmp rsi, 0x10
jb 0x1800170c2
lea rdx, [rsi + 1]
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800170bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800170bd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18010ff50
mov rax, qword [rsp + 0x60]
mov rcx, qword [rbp + 0x500]
xor rcx, rsp
call fcn.180110960
lea r11, [rsp + 0x640]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180025de0
nop
call fcn.180025c60
int3