Function at 0x1285b320
Capabilities:
Check for time delay via gettickcount
Query or enumerate registry value
Set registry value

Disassembly:
mov r11, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x250
mov qword [rsp + 0x178], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rbp
mov qword [r11 + 0x18], rsi
mov rax, qword [0x12a52ee0]
xor rax, rsp
mov qword [rsp + 0x248], rax
xor ebx, ebx
mov dword [rsp + 0xa8], ebx
mov dword [0x129ad8d0], ebx
lea rcx, [r11 - 0x1d0]
call fcn.1283ca40
test eax, eax
je 0x1285ca81
cmp qword [0x129adf08], rbx
je 0x1285ca7f
mov r13d, dword [rsp + 0xa8]
mov dword [0x129ad8d4], r13d
mov r15d, ebx
mov eax, dword [section.voshkdat]
cmp eax, 5
setb r15b
mov dword [rsp + 0xd0], r15d
test r15d, r15d
je 0x1285b3c1
inc eax
mov dword [section.voshkdat], eax
mov dword [0x129ad8d8], r15d
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0xf0], eax
mov qword [rsp + 0x148], 7
mov qword [rsp + 0x140], rbx
mov word [rsp + 0x130], bx
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, str.Sys_windir
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, str.Sys_windir
lea rcx, [rsp + 0x128]
call fcn.12803dc0
nop
lea rdx, [0x129ad960]
lea rcx, [rsp + 0x128]
call fcn.12888930
test eax, eax
sete dil
cmp qword [rsp + 0x148], 8
jb 0x1285b44f
mov rcx, qword [rsp + 0x130]
call fcn.12958250
mov qword [rsp + 0x148], 7
mov qword [rsp + 0x140], rbx
mov word [rsp + 0x130], bx
test dil, dil
je 0x1285b505
mov qword [rsp + 0x170], 7
mov qword [rsp + 0x168], rbx
mov word [rsp + 0x158], bx
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [0x129beb70]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [0x129beb70]
lea rcx, [rsp + 0x150]
call fcn.12803dc0
nop
lea rdx, [0x129ad960]
lea rcx, [rsp + 0x150]
call fcn.12888930
nop
cmp qword [rsp + 0x170], 8
jb 0x1285b4e9
mov rcx, qword [rsp + 0x158]
call fcn.12958250
mov qword [rsp + 0x170], 7
mov qword [rsp + 0x168], rbx
mov word [rsp + 0x158], bx
mov qword [rsp + 0x120], 7
mov qword [rsp + 0x118], rbx
mov word [rsp + 0x108], bx
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, str.VosInstallDir
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, str.VosInstallDir
lea rcx, [rsp + 0x100]
call fcn.12803dc0
nop
lea rdx, [0x129ad938]
lea rcx, [rsp + 0x100]
call fcn.12888930
nop
cmp qword [rsp + 0x120], 8
jb 0x1285b57a
mov rcx, qword [rsp + 0x108]
call fcn.12958250
mov qword [rsp + 0x120], 7
mov qword [rsp + 0x118], rbx
mov word [rsp + 0x108], bx
mov r8, qword [0x129ad950]
test r8, r8
je 0x1285ca7b
mov rdx, qword [0x129ad978]
test rdx, rdx
je 0x1285ca7b
mov dword [0x129ad8e4], 0x10
xor eax, eax
or rcx, 0xffffffffffffffff
lea rbp, str.SoftwareWINDOWSFonts_
mov rdi, rbp
repne scasw ax, word [rdi]
not rcx
lea r12, [rbp + rcx*2 - 2]
lea ebx, [rax + 0x5c]
lea rsi, [0x129bcb5c]
lea r14d, [rax + 0x53]
cmp rbp, r12
je 0x1285b671
lea rdi, [r8 - 1]
cmp r8, rdi
ja 0x1285b600
call fcn.129581ac
lea rax, [0x129ad940]
cmp qword [0x129ad958], 8
cmovae rax, qword [0x129ad940]
cmp word [rax + rdi*2], bx
je 0x1285b631
mov r8d, ebx
mov edx, 1
lea rcx, [0x129ad938]
call fcn.12803b90
mov rcx, rsi
mov eax, ebx
cmp r14w, ax
je 0x1285b64a
add rcx, 2
mov ax, word [rcx]
test ax, ax
jne 0x1285b636
jmp 0x1285b651
lea rbp, [0x129cded2]
mov r8, r12
mov rdx, rbp
lea rcx, [0x129ad938]
call fcn.1281aed0
mov rdx, qword [0x129ad978]
mov r8, qword [0x129ad950]
mov qword [0x129ad928], r8
xor eax, eax
or rcx, 0xffffffffffffffff
lea rbp, str.Fonts_
mov rdi, rbp
repne scasw ax, word [rdi]
not rcx
lea r12, [rbp + rcx*2 - 2]
cmp rbp, r12
je 0x1285b723
test rdx, rdx
je 0x1285b6cc
lea rdi, [rdx - 1]
cmp rdx, rdi
ja 0x1285b6af
call fcn.129581ac
lea rax, [0x129ad968]
cmp qword [0x129ad980], 8
cmovae rax, qword [0x129ad968]
cmp word [rax + rdi*2], bx
je 0x1285b6e0
mov r8d, ebx
mov edx, 1
lea rcx, [0x129ad960]
call fcn.12803b90
mov rcx, rsi
mov eax, ebx
mov edx, 0x46
nop word [rax + rax]
cmp dx, ax
je 0x1285b703
add rcx, 2
mov ax, word [rcx]
test ax, ax
jne 0x1285b6f0
jmp 0x1285b70a
lea rbp, [0x129cdec2]
mov r8, r12
mov rdx, rbp
lea rcx, [0x129ad960]
call fcn.1281aed0
mov rdx, qword [0x129ad978]
mov qword [0x129ad930], rdx
lea r8, str.Globalhopedotvoseventvemainend
xor edx, edx
mov ecx, 0x100000
call qword [sym.imp.KERNEL32.dll_OpenEventW]
mov qword [0x129ad900], rax
xor ebp, ebp
mov qword [rsp + 0xd8], rbp
call fcn.1280d740
mov rcx, rax
mov qword [rsp + 0x28], rbp
mov dword [rsp + 0x20], 1
lea r9, [rsp + 0xd8]
mov r8d, 0x2001f
lea rdx, str.SOFTWAREHopedotVOSSYSTEMREGROOTHKLM
call fcn.1283e760
lea r14, [0x129ada00]
test eax, eax
je 0x1285b79c
mov edx, eax
lea rcx, str.UpF.error_RegCreateKey_vos_failed:_0x_x
call fcn.12805270
jmp 0x1285ca01
mov qword [rsp + 0x180], rbp
mov qword [rsp + 0x188], rbp
mov dword [rsp + 0x190], ebp
mov dword [rsp + 0x194], ebp
mov dword [rsp + 0x198], ebp
mov dword [rsp + 0x19c], ebp
mov dword [rsp + 0x1a0], ebp
mov dword [rsp + 0x1a4], ebp
mov dword [rsp + 0x1a8], ebp
mov dword [rsp + 0x1ac], ebp
mov dword [rsp + 0x1b0], 1
lea rax, [rsp + 0x1b8]
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0x1d8], 7
mov qword [rsp + 0x1d0], rbp
mov word [rsp + 0x1c0], bp
lea rcx, [rsp + 0x1e0]
call fcn.12805600
nop
mov dword [rsp + 0x90], ebp
xor eax, eax
mov dword [rsp + 0x94], eax
mov rdi, qword [rsp + 0xd8]
lea r12d, [rax + 0x57]
mov rcx, qword [rsp + 0x188]
test rcx, rcx
je 0x1285b860
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x188], rbp
mov qword [rsp + 0x180], rbp
mov dword [rsp + 0x1ac], ebp
mov dword [rsp + 0x1a8], ebp
mov dword [rsp + 0x1a0], ebp
mov dword [rsp + 0x19c], ebp
mov dword [rsp + 0x198], ebp
mov dword [rsp + 0x194], ebp
mov dword [rsp + 0x190], ebp
mov dword [rsp + 0x1a4], ebp
test rdi, rdi
je 0x1285c9d6
mov qword [rsp + 0xf8], rbp
lea rax, [rsp + 0xf8]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftWindows_NTCurrentVersionFonts
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov r12d, eax
test eax, eax
jne 0x1285c9d6
mov rbp, qword [rsp + 0xf8]
lea rax, [rsp + 0x90]
mov qword [rsp + 0x58], rax
xor ecx, ecx
mov qword [rsp + 0x50], rcx
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x19c]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x198]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rcx
lea rax, [rsp + 0x194]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x190]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbp
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
mov r12d, eax
test eax, eax
jne 0x1285c9d6
cmp dword [rsp + 0x1b0], eax
je 0x1285b985
mov ecx, dword [rsp + 0x19c]
mov eax, dword [rsp + 0x194]
cmp eax, ecx
cmova ecx, eax
mov dword [rsp + 0x1a4], ecx
jmp 0x1285b993
mov ecx, dword [rsp + 0x194]
mov dword [rsp + 0x1a4], ecx
inc ecx
mov dword [rsp + 0x1a4], ecx
mov edx, ecx
cmp rdx, 0xffffffffffffffff
je 0x1285b9fc
mov rdi, qword [rsp + 0x1d0]
cmp rdx, rdi
je 0x1285ba04
cmp rdx, rdi
ja 0x1285b9d8
or r8, 0xffffffffffffffff
lea rcx, [rsp + 0x1b8]
call fcn.128033a0
mov rdi, qword [rsp + 0x1d0]
mov ecx, dword [rsp + 0x1a4]
jmp 0x1285ba04
xor r8d, r8d
sub rdx, rdi
lea rcx, [rsp + 0x1b8]
call fcn.12803b90
mov rdi, qword [rsp + 0x1d0]
mov ecx, dword [rsp + 0x1a4]
jmp 0x1285ba04
mov rdi, qword [rsp + 0x1d0]
cmp qword [rsp + 0x1d8], 8
jb 0x1285ba1e
cmp qword [rsp + 0x1c0], 0
je 0x1285c9d0
mov eax, ecx
cmp rdi, rax
jb 0x1285c9d0
mov qword [rsp + 0x180], rbp
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x188], rax
xor edi, edi
mov dword [rsp + 0x1a8], edi
mov dword [rsp + 0x1ac], edi
cmp dword [rsp + 0x198], edi
je 0x1285c9e5
mov r14, rdi
mov r15, rdi
mov qword [rsp + 0xc8], rdi
mov dword [rsp + 0x88], edi
mov dword [rsp + 0x60], 1
mov qword [rsp + 0xb8], rdi
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftWindows_NTCurrentVersionFonts
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x1285babf
mov edx, eax
lea rcx, str.UpF.error_RegOpenKeyEx_host_failed:_0x_x
call fcn.12805270
mov qword [rsp + 0x78], rdi
mov qword [rsp + 0x240], 7
mov qword [rsp + 0x238], rdi
mov word [rsp + 0x228], di
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [0x129beea0]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [0x129beea0]
lea rcx, [rsp + 0x220]
call fcn.12803dc0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rbp, str.SoftwareHopedotVOSPrepareFontVos
mov rdi, rbp
repne scasw ax, word [rdi]
not rcx
lea r12, [rbp + rcx*2 - 2]
cmp rbp, r12
je 0x1285bbb2
mov rax, qword [rsp + 0x238]
test rax, rax
je 0x1285bb6b
lea rdi, [rax - 1]
cmp rax, rdi
ja 0x1285bb4a
call fcn.129581ac
lea rax, [rsp + 0x228]
cmp qword [rsp + 0x240], 8
cmovae rax, qword [rsp + 0x228]
cmp word [rax + rdi*2], 0x5c
je 0x1285bb80
mov r8d, ebx
mov edx, 1
lea rcx, [rsp + 0x220]
call fcn.12803b90
mov eax, 0x53
cmp ax, bx
je 0x1285bb98
add rsi, 2
mov bx, word [rsi]
test bx, bx
jne 0x1285bb85
jmp 0x1285bb9f
lea rbp, [0x129bf452]
mov r8, r12
mov rdx, rbp
lea rcx, [rsp + 0x220]
call fcn.1281aed0
call fcn.1280d740
mov rcx, rax
xor esi, esi
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 1
lea r9, [rsp + 0x78]
mov r8d, 0x2001f
lea rdx, [rsp + 0x220]
call fcn.12837b80
lea r12d, [rsi + 8]
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1285c00f
mov dword [rsp + 0x68], esi
mov dword [rsp + 0x64], 4
lea rax, [rsp + 0x64]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x88]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x68]
xor r8d, r8d
lea rdx, str.ExcludeHost
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1285bc46
cmp dword [rsp + 0x68], 4
jne 0x1285bc46
mov eax, esi
cmp dword [rsp + 0x88], eax
setne al
mov dword [rsp + 0x60], eax
mov dword [rsp + 0xb0], esi
xor eax, eax
mov dword [rsp + 0xb4], eax
mov dword [rsp + 0x64], r12d
lea rax, [rsp + 0x64]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x68]
xor r8d, r8d
lea rdx, str.LastWriteTimeFontKey
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
movabs rbx, 0xd6bf94d5e57a42bd
test eax, eax
jne 0x1285bd41
cmp dword [rsp + 0x68], 3
jne 0x1285bd41
cmp dword [rsp + 0x64], r12d
jne 0x1285bd41
mov eax, dword [rsp + 0x90]
cmp dword [rsp + 0xb0], eax
je 0x1285bd7f
mov eax, dword [rsp + 0x94]
cmp dword [rsp + 0xb4], eax
je 0x1285bd79
mov dword [rsp + 0x28], r12d
lea rax, [rsp + 0x90]
mov qword [rsp + 0x20], rax
mov r9d, 3
xor r8d, r8d
lea rdx, str.LastWriteTimeFontKey
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x90]
sub rcx, qword [rsp + 0xb0]
mov rax, rbx
imul rcx
add rdx, rcx
sar rdx, 0x17
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, 0x11
jl 0x1285bd85
mov edi, 1
mov dword [rsp + 0x60], edi
jmp 0x1285bd89
mov dword [rsp + 0x28], r12d
lea rax, [rsp + 0x90]
mov qword [rsp + 0x20], rax
mov r9d, 3
xor r8d, r8d
lea rdx, str.LastWriteTimeFontKey
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edi, 1
mov dword [rsp + 0x60], edi
jmp 0x1285bd89
mov edi, dword [rsp + 0x60]
jmp 0x1285bd89
mov edi, dword [rsp + 0x60]
jmp 0x1285bd89
mov edi, dword [rsp + 0x60]
mov rcx, qword [rsp + 0xb8]
test rcx, rcx
je 0x1285bf26
mov dword [rsp + 0x80], esi
xor eax, eax
mov dword [rsp + 0x84], eax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
test eax, eax
jne 0x1285bf2c
mov dword [rsp + 0xc0], esi
xor eax, eax
mov dword [rsp + 0xc4], eax
mov dword [rsp + 0x64], r12d
lea rax, [rsp + 0x64]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x68]
xor r8d, r8d
lea rdx, str.LastWriteTimeFontKeyHost
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1285beee
cmp dword [rsp + 0x68], 3
jne 0x1285beee
cmp dword [rsp + 0x64], r12d
jne 0x1285beee
mov eax, dword [rsp + 0x80]
cmp dword [rsp + 0xc0], eax
je 0x1285bf3e
mov eax, dword [rsp + 0x84]
cmp dword [rsp + 0xc4], eax
je 0x1285bf44
mov dword [rsp + 0x28], r12d
lea rcx, [rsp + 0x80]
mov qword [rsp + 0x20], rcx
mov r9d, 3
xor r8d, r8d
lea rdx, str.LastWriteTimeFontKeyHost
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test edi, edi
jne 0x1285bf38
mov rcx, qword [rsp + 0x80]
sub rcx, qword [rsp + 0xc0]
mov rax, rbx
imul rcx
add rdx, rcx
sar rdx, 0x17
mov rax, rdx
shr rax, 0x3f
add rdx, rax
jns 0x1285bedd
neg rdx
cmp rdx, 0x11
jl 0x1285bf32
mov edi, 1
mov dword [rsp + 0x60], edi
jmp 0x1285bf48
mov dword [rsp + 0x28], r12d
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
mov r9d, 3
xor r8d, r8d
lea rdx, str.LastWriteTimeFontKeyHost
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edi, 1
mov dword [rsp + 0x60], edi
jmp 0x1285bf48
mov edi, dword [rsp + 0x60]
jmp 0x1285bf48
mov edi, dword [rsp + 0x60]
jmp 0x1285bf48
mov edi, dword [rsp + 0x60]
jmp 0x1285bf48
mov edi, dword [rsp + 0x60]
jmp 0x1285bf48
mov edi, dword [rsp + 0x60]
jmp 0x1285bf48
mov edi, dword [rsp + 0x60]
test r13d, r13d
je 0x1285c00b
mov dword [rsp + 0xac], esi
mov dword [rsp + 0x64], 4
lea rax, [rsp + 0x64]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xac]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x68]
xor r8d, r8d
lea rdx, str.ExcludeIntervalWaitTime
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1285bfae
mov eax, dword [0x129ad8e8]
cmp dword [rsp + 0x68], 4
cmove eax, dword [rsp + 0xac]
mov dword [0x129ad8e8], eax
mov dword [rsp + 0x9c], esi
mov dword [rsp + 0x64], 4
lea rax, [rsp + 0x64]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x9c]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x68]
xor r8d, r8d
lea rdx, str.ExcludeIntervalSwitchToThread
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1285c00b
mov eax, dword [0x129ad8f0]
cmp dword [rsp + 0x68], 4
cmove eax, dword [rsp + 0x9c]
mov dword [0x129ad8f0], eax
test edi, edi
je 0x1285c021
cmp qword [rsp + 0xb8], rsi
jne 0x1285c44c
mov dword [rsp + 0x60], esi
mov dword [rsp + 0x98], esi
lea r13, [0x129ada00]
nop
mov ebp, dword [rsp + 0x1ac]
mov edx, dword [rsp + 0x1a0]
add rdx, 4
lea rcx, [rsp + 0x1e0]
mov rax, qword [rsp + 0x1e0]
call qword [rax + 0x18]
mov rbx, rax
lea rcx, [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1e0]
call qword [rdx + 0x10]
mov rdi, rax
mov dword [rsp + 0x70], eax
test rbx, rbx
je 0x1285c25c
cmp eax, dword [rsp + 0x1a0]
jb 0x1285c25c
mov edx, dword [rsp + 0x1a4]
cmp rdx, 0xffffffffffffffff
je 0x1285c0cd
mov rax, qword [rsp + 0x1d0]
cmp rdx, rax
je 0x1285c0cd
cmp rdx, rax
ja 0x1285c0ba
or r8, 0xffffffffffffffff
lea rcx, [rsp + 0x1b8]
call fcn.128033a0
jmp 0x1285c0cd
xor r8d, r8d
sub rdx, rax
lea rcx, [rsp + 0x1b8]
call fcn.12803b90
lea r8, [rsp + 0x1c0]
cmp qword [rsp + 0x1d8], r12
cmovae r8, qword [rsp + 0x1c0]
mov eax, dword [rsp + 0x1d0]
mov dword [rsp + 0xe8], eax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
lea rax, [rsp + 0x98]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0xe8]
mov edx, ebp
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.ADVAPI32.dll_RegEnumValueW]
mov ebx, eax
test eax, eax
je 0x1285c256
cmp eax, 0xea
jne 0x1285c256
mov edi, dword [rsp + 0x70]
cmp edi, dword [rsp + 0x1a0]
jbe 0x1285c263
mov dword [rsp + 0x1a0], edi
lea rdx, [rdi + 4]
lea rcx, [rsp + 0x1e0]
mov rax, qword [rsp + 0x1e0]
call qword [rax + 0x18]
mov rsi, rax
lea rcx, [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1e0]
call qword [rdx + 0x10]
mov edi, eax
mov dword [rsp + 0x70], eax
test rsi, rsi
je 0x1285c252
cmp eax, dword [rsp + 0x1a0]
jb 0x1285c261
mov edx, dword [rsp + 0x1a4]
cmp rdx, 0xffffffffffffffff
je 0x1285c1e8
mov rax, qword [rsp + 0x1d0]
cmp rdx, rax
je 0x1285c1e8
cmp rdx, rax
ja 0x1285c1d5
or r8, 0xffffffffffffffff
lea rcx, [rsp + 0x1b8]
call fcn.128033a0
jmp 0x1285c1e8
xor r8d, r8d
sub rdx, rax
lea rcx, [rsp + 0x1b8]
call fcn.12803b90
lea r8, [rsp + 0x1c0]
cmp qword [rsp + 0x1d8], r12
cmovae r8, qword [rsp + 0x1c0]
mov eax, dword [rsp + 0x1d0]
mov dword [rsp + 0xec], eax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rsi
lea rax, [rsp + 0x98]
mov qword [rsp + 0x28], rax
xor esi, esi
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0xec]
mov edx, ebp
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.ADVAPI32.dll_RegEnumValueW]
mov ebx, eax
mov edi, dword [rsp + 0x70]
jmp 0x1285c263
xor esi, esi
jmp 0x1285c263
mov edi, dword [rsp + 0x70]
jmp 0x1285c263
mov ebx, r12d
jmp 0x1285c263
xor esi, esi
inc dword [rsp + 0x1ac]
test ebx, ebx
jne 0x1285c8a9
lea rax, [rsp + 0x1c0]
cmp qword [rsp + 0x1d8], r12
cmovae rax, qword [rsp + 0x1c0]
cmp word [rax], bx
je 0x1285c293
inc r14
shr edi, 1
je 0x1285c030
mov rcx, qword [rsp + 0x208]
mov rbx, qword [rsp + 0x200]
cmp rcx, rbx
je 0x1285c030
cmp rbx, rcx
jbe 0x1285c2be
call fcn.1295850c
mov rax, qword [rsp + 0x1e8]
test rax, rax
jne 0x1285c2d5
call fcn.1295850c
mov r11, rsi
jmp 0x1285c2d8
mov r11, qword [rax]
cmp rbx, qword [r11 + 0x20]
jb 0x1285c2e3
call fcn.1295850c
test rbx, rbx
je 0x1285c030
mov word [rbx + rdi*2], si
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
mov rdx, rbx
lea rcx, [0x129ad9f8]
call fcn.12803dc0
mov rdx, qword [0x129ada10]
test rdx, rdx
je 0x1285c030
mov r9, qword [0x129ada18]
mov r10, qword [0x129ada00]
test rdx, rdx
je 0x1285c3e5
mov rax, r13
cmp r9, r12
cmovae rax, r10
lea r8, [rax + rdx*2]
mov rdi, r13
cmp r9, r12
cmovae rdi, r10
cmp rdi, r8
jae 0x1285c3e5
nop word [rax + rax]
mov ecx, 3
lea rax, [0x129cde00]
movzx edx, word [rdi]
nop
cmp word [rax], dx
je 0x1285c38a
add rax, 2
sub rcx, 1
jne 0x1285c370
add rdi, 2
cmp rdi, r8
jae 0x1285c3e5
jmp 0x1285c360
mov rax, r13
cmp r9, r12
cmovae rax, r10
sub rdi, rax
sar rdi, 1
cmp rdi, 0xffffffffffffffff
je 0x1285c3e5
mov rbx, qword [0x129ad9e8]
lea r9, [0x129ad9f8]
mov r8, qword [rbx + 8]
mov rdx, rbx
lea rcx, [0x129ad9c0]
call fcn.128088b0
mov rdi, rax
mov edx, 1
lea rcx, [0x129ad9c0]
call fcn.12808040
mov qword [rbx + 8], rdi
mov rcx, qword [rdi + 8]
mov qword [rcx], rdi
jmp 0x1285c030
mov rdx, r13
cmp r9, r12
cmovae rdx, r10
lea rcx, str..CompositeFont
call fcn.12823cf0
test al, al
jne 0x1285c444
mov rbx, qword [0x129ad9b0]
lea r9, [0x129ad9f8]
mov r8, qword [rbx + 8]
mov rdx, rbx
lea rcx, [0x129ad988]
call fcn.128088b0
mov rdi, rax
mov edx, 1
lea rcx, [0x129ad988]
call fcn.12808040
mov qword [rbx + 8], rdi
mov rcx, qword [rdi + 8]
mov qword [rcx], rdi
jmp 0x1285c030
inc r15
jmp 0x1285c030
mov dword [rsp + 0xa0], esi
lea r13, [0x129ada00]
nop word [rax + rax]
mov ebp, dword [rsp + 0x1ac]
mov edx, dword [rsp + 0x1a0]
add rdx, 4
lea rcx, [rsp + 0x1e0]
mov rax, qword [rsp + 0x1e0]
call qword [rax + 0x18]
mov rbx, rax
lea rcx, [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1e0]
call qword [rdx + 0x10]
mov rdi, rax
mov dword [rsp + 0x6c], eax
test rbx, rbx
je 0x1285c688
cmp eax, dword [rsp + 0x1a0]
jb 0x1285c688
mov edx, dword [rsp + 0x1a4]
cmp rdx, 0xffffffffffffffff
je 0x1285c4fd
mov rax, qword [rsp + 0x1d0]
cmp rdx, rax
je 0x1285c4fd
cmp rdx, rax
ja 0x1285c4ea
or r8, 0xffffffffffffffff
lea rcx, [rsp + 0x1b8]
call fcn.128033a0
jmp 0x1285c4fd
xor r8d, r8d
sub rdx, rax
lea rcx, [rsp + 0x1b8]
call fcn.12803b90
lea r8, [rsp + 0x1c0]
cmp qword [rsp + 0x1d8], r12
cmovae r8, qword [rsp + 0x1c0]
mov eax, dword [rsp + 0x1d0]
mov dword [rsp + 0xe4], eax
lea rax, [rsp + 0x6c]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0xe4]
mov edx, ebp
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.ADVAPI32.dll_RegEnumValueW]
mov ebx, eax
test eax, eax
je 0x1285c682
cmp eax, 0xea
jne 0x1285c682
mov edi, dword [rsp + 0x6c]
cmp edi, dword [rsp + 0x1a0]
jbe 0x1285c693
mov dword [rsp + 0x1a0], edi
lea rdx, [rdi + 4]
lea rcx, [rsp + 0x1e0]
mov rax, qword [rsp + 0x1e0]
call qword [rax + 0x18]
mov rsi, rax
lea rcx, [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1e0]
call qword [rdx + 0x10]
mov edi, eax
mov dword [rsp + 0x6c], eax
test rsi, rsi
je 0x1285c691
cmp eax, dword [rsp + 0x1a0]
jb 0x1285c68d
mov edx, dword [rsp + 0x1a4]
cmp rdx, 0xffffffffffffffff
je 0x1285c618
mov rax, qword [rsp + 0x1d0]
cmp rdx, rax
je 0x1285c618
cmp rdx, rax
ja 0x1285c605
or r8, 0xffffffffffffffff
lea rcx, [rsp + 0x1b8]
call fcn.128033a0
jmp 0x1285c618
xor r8d, r8d
sub rdx, rax
lea rcx, [rsp + 0x1b8]
call fcn.12803b90
lea r8, [rsp + 0x1c0]
cmp qword [rsp + 0x1d8], r12
cmovae r8, qword [rsp + 0x1c0]
mov eax, dword [rsp + 0x1d0]
mov dword [rsp + 0xe0], eax
lea rax, [rsp + 0x6c]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rsi
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x28], rax
xor esi, esi
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0xe0]
mov edx, ebp
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.ADVAPI32.dll_RegEnumValueW]
mov ebx, eax
mov edi, dword [rsp + 0x6c]
jmp 0x1285c693
mov edi, dword [rsp + 0x6c]
jmp 0x1285c693
mov ebx, r12d
jmp 0x1285c693
xor esi, esi
jmp 0x1285c693
xor esi, esi
inc dword [rsp + 0x1ac]
test ebx, ebx
jne 0x1285c8a9
lea rdx, [rsp + 0x1c0]
cmp qword [rsp + 0x1d8], r12
cmovae rdx, qword [rsp + 0x1c0]
cmp word [rdx], bx
je 0x1285c6c3
inc r14
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rsp + 0xb8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x1285c89c
shr edi, 1
je 0x1285c460
mov rcx, qword [rsp + 0x208]
mov rbx, qword [rsp + 0x200]
cmp rcx, rbx
je 0x1285c460
cmp rbx, rcx
jbe 0x1285c714
call fcn.1295850c
mov rax, qword [rsp + 0x1e8]
test rax, rax
jne 0x1285c72b
call fcn.1295850c
mov r11, rsi
jmp 0x1285c72e
mov r11, qword [rax]
cmp rbx, qword [r11 + 0x20]
jb 0x1285c739
call fcn.1295850c
test rbx, rbx
je 0x1285c460
mov word [rbx + rdi*2], si
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
mov rdx, rbx
lea rcx, [0x129ad9f8]
call fcn.12803dc0
mov rdx, qword [0x129ada10]
test rdx, rdx
je 0x1285c460
mov r9, qword [0x129ada18]
mov r10, qword [0x129ada00]
test rdx, rdx
je 0x1285c835
mov rax, r13
cmp r9, r12
cmovae rax, r10
lea r8, [rax + rdx*2]
mov rdi, r13
cmp r9, r12
cmovae rdi, r10
cmp rdi, r8
jae 0x1285c835
mov ecx, 3
lea rax, [0x129cde00]
movzx edx, word [rdi]
nop
cmp word [rax], dx
je 0x1285c7da
add rax, 2
sub rcx, 1
jne 0x1285c7c0
add rdi, 2
cmp rdi, r8
jae 0x1285c835
jmp 0x1285c7b0
mov rax, r13
cmp r9, r12
cmovae rax, r10
sub rdi, rax
sar rdi, 1
cmp rdi, 0xffffffffffffffff
je 0x1285c835
mov rbx, qword [0x129ad9e8]
lea r9, [0x129ad9f8]
mov r8, qword [rbx + 8]
mov rdx, rbx
lea rcx, [0x129ad9c0]
call fcn.128088b0
mov rdi, rax
mov edx, 1
lea rcx, [0x129ad9c0]
call fcn.12808040
mov qword [rbx + 8], rdi
mov rcx, qword [rdi + 8]
mov qword [rcx], rdi
jmp 0x1285c460
mov rdx, r13
cmp r9, r12
cmovae rdx, r10
lea rcx, str..CompositeFont
call fcn.12823cf0
test al, al
jne 0x1285c894
mov rbx, qword [0x129ad9b0]
lea r9, [0x129ad9f8]
mov r8, qword [rbx + 8]
mov rdx, rbx
lea rcx, [0x129ad988]
call fcn.128088b0
mov rdi, rax
mov edx, 1
lea rcx, [0x129ad988]
call fcn.12808040
mov qword [rbx + 8], rdi
mov rcx, qword [rdi + 8]
mov qword [rcx], rdi
jmp 0x1285c460
inc r15
jmp 0x1285c460
inc qword [rsp + 0xc8]
jmp 0x1285c460
mov qword [0x129ad918], r14
mov qword [0x129ad920], r15
mov rcx, qword [0x129ad9b8]
mov rdx, qword [0x129ad9f0]
add rdx, rcx
mov qword [0x129ad910], rdx
mov eax, esi
setne al
mov dword [0x129ad8d0], eax
test eax, eax
je 0x1285c8e9
mov eax, 1
xchg dword [0x129ad8e0], eax
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1285c977
mov eax, esi
mov dword [rsp + 0xa4], eax
mov rdi, qword [rsp + 0xc8]
test rdi, rdi
je 0x1285c92b
test r14, r14
je 0x1285c92b
imul rdi, rdi, 0x64
xor edx, edx
mov rax, rdi
div r14
cmp eax, 0xa
cmovb eax, esi
mov dword [rsp + 0xa4], eax
mov edx, esi
test eax, eax
setne dl
cmp dword [rsp + 0x88], eax
jne 0x1285c941
cmp dword [rsp + 0x60], edx
je 0x1285c971
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0xa4]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.ExcludeHost
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0xb8]
test rcx, rcx
je 0x1285c98b
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
cmp qword [rsp + 0x240], 8
jb 0x1285c9a3
mov rcx, qword [rsp + 0x228]
call fcn.12958250
mov qword [rsp + 0x240], 7
mov qword [rsp + 0x238], rsi
mov word [rsp + 0x228], si
lea r14, [0x129ada00]
mov r15d, dword [rsp + 0xd0]
jmp 0x1285c9e5
mov r12d, 8
mov edx, r12d
lea rcx, str.UpF.error_regenuminit_vos_failed:_0x_x
call fcn.12805270
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rsp + 0x180]
call fcn.1281aae0
mov eax, dword [0x129ad8e0]
test eax, eax
je 0x1285ca16
call fcn.1283cb00
xchg dword [0x129ad8e0], eax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
test r15d, r15d
je 0x1285ca6f
sub eax, dword [rsp + 0xf0]
mov edx, eax
lea r8, str._6.2f__s
lea rcx, [0x129ad9f8]
call fcn.1281c060
cmp qword [0x129ada18], 8
cmovae r14, qword [0x129ada00]
mov r8d, dword [0x129ad8f0]
mov rdx, r14
lea rcx, str.UpF.prepare_elapsedtime:__s__ExcludeIntervalSwitchToThread:_0x_x
call fcn.12805270
lea rcx, [0x129ad9f8]
call fcn.12803f90
mov dword [0x129abb10], 1
jmp 0x1285ca7f
xor eax, eax
jmp 0x1285ca81
xor eax, eax
mov rcx, qword [rsp + 0x248]
xor rcx, rsp
call fcn.12959850
lea r11, [rsp + 0x250]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret