Function at 0x180043f30
Capabilities:
Query or enumerate registry key

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x508]
sub rsp, 0x5d0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
mov rax, qword [0x180081de0]
xor rax, rsp
mov qword [rbp + 0x4a0], rax
mov r15, r9
mov r13, r8
mov rsi, rdx
mov dword [rsp + 0x48], ecx
xor r8d, r8d
mov ebx, r8d
mov dword [rsp + 0x44], ebx
mov edi, ecx
lea r12d, [rcx + 0x532]
cmp ecx, r12d
jae 0x1800442bd
xorps xmm7, xmm7
mov ebx, dword [rsp + 0x58]
mov r14, qword [rsp + 0x68]
movsd xmm6, qword [rsp + 0x68]
cmp edi, 0x184
ja 0x180044167
je 0x180044144
mov eax, edi
sub eax, 0x7f
je 0x180044138
sub eax, 0x23
je 0x1800440a2
sub eax, 0x5d
je 0x180044092
sub eax, 5
je 0x18004406e
cmp eax, 0x23
jne 0x1800442a3
mov qword [rbp - 0x60], r8
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rsi + r8], 0
jne 0x180044000
mov rdx, rsi
lea rcx, [rbp - 0x70]
call fcn.180027020
nop
mov r8d, reloc.SHLWAPI.dll_GetAcceptLanguagesA
lea rdx, [rbp - 0x70]
mov rcx, r15
call fcn.180043d50
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x1800442a3
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180044064
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180044341
call fcn.18005f9b8
jmp 0x1800442a3
mov byte [rbp - 0x2c], 0
mov r8d, 1
lea rdx, [0x18007a47e]
lea rcx, [rbp - 0x2c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp - 0x2b], 0
jmp 0x1800442a3
mov ebx, 0xffffffff
mov r14, r8
movaps xmm6, xmm7
jmp 0x1800442a3
mov qword [rbp - 0x60], r8
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [r8 + r13], 0
jne 0x1800440c0
mov rdx, r13
lea rcx, [rbp - 0x70]
call fcn.180027020
nop
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
mov r9d, 0x10e
xor r8d, r8d
mov rdx, r15
xor ecx, ecx
call fcn.180041890
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x1800442a3
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004412e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180044348
call fcn.18005f9b8
jmp 0x1800442a3
mov dword [rbp - 0x30], 0x616f6c66
jmp 0x1800442a3
cmp dword [r13 + 0x80], 2
jl 0x180044261
cmp dword [r13 + 8], 0
jne 0x1800442a3
mov eax, 0xffffff76
jmp 0x1800443e5
cmp edi, 0x189
je 0x18004426b
cmp edi, 0x209
je 0x18004425b
cmp edi, 0x28e
je 0x1800441ff
cmp edi, 0x313
jne 0x1800442a3
cmp ebx, dword [r13 + 0x40]
je 0x180044261
movsxd rax, ebx
lea rcx, [rax + rax*4]
mov rax, qword [r13 + 0x68]
movd xmm2, dword [rax + rcx*8 + 8]
cvtdq2pd xmm2, xmm2
movsd xmm0, qword [rsi]
subsd xmm0, xmm6
mulsd xmm2, xmm0
xorps xmm1, xmm1
cvtsi2sd xmm1, r14
addsd xmm2, xmm1
cvttsd2si rax, xmm2
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x30], 0xb8
mov qword [rsp + 0x28], r13
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
and al, 0x20
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.18004b340
jmp 0x1800443e5
mov ebx, r8d
cmp dword [r13 + 0x40], 0
jle 0x180044254
mov rdi, r8
nop dword [rax]
mov dword [rsp + 0x50], ebx
mov r8d, 0x13f
mov rdx, r13
lea rcx, [rsp + 0x50]
call fcn.1800059f0
mov qword [rsp + 0x60], rax
movsd xmm0, qword [rsp + 0x60]
addsd xmm0, xmm6
comisd xmm0, xmmword [rsi]
ja 0x180044254
movaps xmm6, xmm0
mov rax, qword [r13 + 0x60]
add r14, qword [rax + rdi + 8]
inc ebx
add rdi, 0x10
cmp ebx, dword [r13 + 0x40]
jl 0x180044210
mov edi, 0x28e
jmp 0x1800442a3
comisd xmm7, xmmword [rsi]
jbe 0x1800442a3
mov eax, 0xffffff7d
jmp 0x1800443e5
mov r8d, 3
lea rdx, [0x18007a4d5]
lea rcx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov word [rbp - 0x28], 0x3d
mov r8d, 2
lea rdx, [0x18007a511]
lea rcx, [rbp - 0x27]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp - 0x25], 0
add edi, 0x85
xor r8d, r8d
cmp edi, r12d
jb 0x180043fa4
mov ebx, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x48]
lea esi, [rcx + 0x23a]
mov dword [rsp + 0x58], esi
cmp ecx, esi
jae 0x1800443e1
mov r15d, 0x2032
mov r12d, dword [rsp + 0x58]
mov edi, dword [rsp + 0x58]
mov r14d, dword [rsp + 0x50]
mov r9d, 0x16
movabs r11, 0x697265686e6920
movabs r10, 0x7b2074736e6f63
movabs rdx, 0x7fffffffffffffff
cmp ecx, 0x19c
ja 0x1800443b8
je 0x1800443ab
mov eax, ecx
sub eax, 0x7f
je 0x180044368
sub eax, 0x39
je 0x18004435f
sub eax, 0x39
je 0x18004434f
cmp eax, 0x39
jne 0x180044d6b
mov byte [rbp - 0x16], 0
mov byte [rsp + 0x40], 1
jmp 0x180044d6b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov dword [rbp - 0x1b], 0x29317620
mov byte [rbp - 0x17], 0x3b
jmp 0x180044d6b
mov byte [rbp - 0x1c], 0x2d
jmp 0x180044d6b
mov r8d, 2
lea rdx, [0x18007a81d]
lea rcx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 1
lea rdx, [0x18007a84b]
lea rcx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov dword [rbp - 0x22], 0x76286874
mov word [rbp - 0x1e], r15w
mov ecx, dword [rsp + 0x48]
jmp 0x180044d6b
mov dword [rsp + 0x70], 0x104
jmp 0x180044d6b
mov eax, ecx
sub eax, 0x1d5
je 0x1800444bb
sub eax, 0x39
je 0x1800444a9
sub eax, 0x39
je 0x180044419
cmp eax, 0x39
jne 0x180044d6b
mov byte [rsp + 0x5c], 0
mov eax, dword [rsp + 0x5c]
mov rcx, qword [rbp + 0x4a0]
xor rcx, rsp
call fcn.18005fed0
lea r11, [rsp + 0x5d0]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x68]
xor r8d, r8d
mov edx, r14d
lea rcx, [rbp - 0x30]
call qword [sym.imp.SHLWAPI.dll_SHRegOpenUSKeyA]
mov ebx, eax
mov r9d, dword [rsp + 0x78]
mov r8d, edi
mov edx, dword [rsp + 0x70]
lea rcx, [rbp + 0x290]
call qword [sym.imp.SHLWAPI.dll_StrFromTimeIntervalW]
test ebx, ebx
je 0x180044463
mov byte [rsp + 0x40], 0
mov ecx, dword [rsp + 0x48]
jmp 0x180044d6b
cmp byte [rsp + 0x40], 0
je 0x1800443a2
xor ebx, ebx
mov dword [rsp + 0x28], ebx
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x7c]
lea r8, [rbp - 0x78]
lea rdx, [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.SHLWAPI.dll_SHRegQueryInfoUSKeyA]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.SHLWAPI.dll_SHRegCloseUSKey]
mov ecx, dword [rsp + 0x48]
jmp 0x180044d6b
mov dword [rsp + 0x74], r8d
mov dword [rsp + 0x78], 3
jmp 0x180044d6b
mov dword [rsp + 0x50], 0xf003f
cmp qword [r13 + 0x10], 0x35
jb 0x180044d61
mov r15d, 0x82
nop dword [rax]
nop dword [rax + rax]
cmp r15d, 0x750
ja 0x18004476b
je 0x180044762
cmp r15d, 0x3a6
ja 0x18004468a
je 0x18004466a
cmp r15d, 0x214
ja 0x1800445fc
je 0x1800445d3
cmp r15d, 0x82
je 0x18004457a
cmp r15d, 0x108
je 0x180044551
cmp r15d, 0x18e
jne 0x180044d3f
mov eax, dword [0x18007a688]
mov dword [rbp + 0x2a], eax
movzx eax, word [0x18007a68c]
mov word [rbp + 0x2e], ax
jmp 0x180044d3f
mov word [rbp + 0x24], r8w
mov r8d, 3
lea rdx, [0x18007a762]
lea rcx, [rbp + 0x24]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor r8d, r8d
mov word [rbp + 0x2a], r8w
jmp 0x180044d1b
movzx eax, word [0x18007a5d0]
mov word [rbp + 0x10], ax
mov dword [rbp + 0x12], 0x647376
lea rcx, [rbp + 0x10]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x180044593
movsd xmm0, qword [str._xmm1_xmm]
movsd qword [rcx], xmm0
movzx eax, word [0x18007a5e0]
mov word [rcx + 8], ax
mov r8d, 0xa
lea rdx, [rbp + 0x1e]
lea ecx, [r8 - 8]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itoa]
mov dword [rbp + 0x20], 0x560053
jmp 0x180044d18
mov word [rbp + 0x30], r8w
mov r8d, 5
lea rdx, [0x18007a59c]
lea rcx, [rbp + 0x30]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor r8d, r8d
mov word [rbp + 0x3a], r8w
jmp 0x180044d1b
cmp r15d, 0x29a
je 0x18004464e
cmp r15d, 0x320
jne 0x180044d3f
mov dword [rbp + 0x40], 0x74
movzx eax, word [str.Failed_to_create_IAudioClock:]
mov word [rbp - 0x50], ax
movzx eax, byte [0x18007a642]
mov byte [rbp - 0x4e], al
mov byte [rbp - 0x4d], 0
mov r8d, 3
lea rdx, [0x18007a664]
lea rcx, [rbp - 0x4d]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp 0x180044d18
mov r8d, 3
lea rdx, [0x18007a5f6]
lea rcx, [rbp + 0x20]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp 0x180044d18
mov byte [rbp - 0x4a], 0
mov r8d, 1
lea rdx, [0x18007a70c]
lea rcx, [rbp - 0x4a]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp 0x180044d18
cmp r15d, 0x5be
ja 0x18004471c
je 0x1800446f5
cmp r15d, 0x42c
je 0x1800446ca
cmp r15d, 0x4b2
je 0x1800446c1
cmp r15d, 0x538
jne 0x180044d3f
mov byte [rbp - 0x44], 0
jmp 0x180044d3f
mov byte [rbp - 0x45], 0x72
jmp 0x180044d3f
mov word [rbp - 0x49], 0x74
mov r8d, 1
lea rdx, [0x18007a56c]
lea rcx, [rbp - 0x50]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov eax, 0x7720
mov word [rbp - 0x47], ax
jmp 0x180044d18
movzx eax, word [0x18007a6d2]
mov word [rbp - 0x44], ax
movzx eax, byte [0x18007a6d4]
mov byte [rbp - 0x42], al
mov eax, 0x655c
mov word [rbp - 0x41], ax
mov byte [rbp - 0x3f], 0
jmp 0x180044d3f
cmp r15d, 0x644
je 0x180044759
cmp r15d, 0x6ca
jne 0x180044d3f
mov byte [rbp - 0x3e], 0
mov r8d, 1
lea rdx, [0x18007a738]
lea rcx, [rbp - 0x50]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov dword [rbp - 0x3d], 0x726f6365
jmp 0x180044d18
mov byte [rbp - 0x3f], 0x20
jmp 0x180044d3f
mov byte [rbp - 0x39], 0
jmp 0x180044d3f
cmp r15d, 0xafa
ja 0x1800448bd
je 0x18004488c
cmp r15d, 0x968
ja 0x18004481d
je 0x1800447ed
cmp r15d, 0x7d6
je 0x1800447e1
cmp r15d, 0x85c
je 0x1800447d8
cmp r15d, 0x8e2
jne 0x180044d3f
mov eax, dword [0x18007792c]
mov dword [rbp - 0x10], eax
mov dword [rbp - 0xc], 0x72
mov r8d, 1
lea rdx, [0x180077934]
lea rcx, [rbp - 0x10]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp 0x180044d18
mov byte [rbp - 0x35], 0
jmp 0x180044d3f
mov dword [rbp - 0x39], 0x64252064
jmp 0x180044d3f
mov eax, dword [0x18007a5b0]
mov dword [rbp - 8], eax
mov dword [rbp - 4], 0x43
mov dword [rbp - 2], 0x6f
mov eax, dword [0x18007a5b8]
mov dword [rbp], eax
movzx eax, word [0x18007a5bc]
mov word [rbp + 4], ax
jmp 0x180044d3f
cmp r15d, 0x9ee
je 0x18004485b
cmp r15d, 0xa74
jne 0x180044d3f
mov qword [rbp + 0x48], r10
mov qword [rbp + 0x4f], r11
mov dword [rbp + 0x56], 0x207374
mov eax, dword [str.__u]
mov dword [rbp + 0x59], eax
movzx eax, word [0x18007a558]
mov word [rbp + 0x5d], ax
jmp 0x180044d3f
lea rcx, [rbp - 0x10]
sub rcx, 2
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x180044863
mov eax, dword [0x18007a5c0]
mov dword [rcx], eax
movzx eax, word [0x18007a5c4]
mov word [rcx + 4], ax
mov dword [rbp + 8], 0x6c
jmp 0x180044d3f
movzx eax, word [0x18007a5c8]
mov word [rbp + 0x5e], ax
mov dword [rbp + 0x60], 0x6c6974
lea rcx, [rbp + 0x48]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x1800448a5
movzx eax, word [0x18007a5cc]
mov word [rcx], ax
jmp 0x180044d3f
cmp r15d, 0xb80
je 0x180044aa0
cmp r15d, 0xc06
je 0x18004494d
cmp r15d, 0xc8c
je 0x180044901
cmp r15d, 0xd12
je 0x1800448f7
cmp r15d, 0xd98
je 0x1800443e1
jmp 0x180044d3f
mov byte [rsp + 0x5c], 1
jmp 0x180044d3f
mov r9d, r12d
lea r8, [rsp + 0x7c]
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x10]
call qword [sym.imp.SHLWAPI.dll_UrlUnescapeA]
mov dword [rsp + 0x20], 0x80
lea r9, [rbp + 0x48]
mov r8d, 0x10
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x180]
call qword [sym.imp.SHLWAPI.dll_PathRelativePathToA]
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x20]
call qword [sym.imp.SHLWAPI.dll_StrStrIW]
jmp 0x180044d18
mov dword [rsp + 0x7c], 0x104
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov rax, qword [r13 + 0x10]
cmp rax, 0x11
jb 0x180044d8d
add rax, 0xffffffffffffffef
mov esi, 0x24
cmp rax, rsi
cmovb rsi, rax
mov rax, r13
cmp qword [r13 + 0x18], 0x10
jb 0x18004498d
mov rax, qword [r13]
lea r14, [rax + 0x11]
cmp rsi, 0xf
ja 0x1800449b4
mov qword [rbp - 0x60], rsi
mov r8, rsi
mov rdx, r14
lea rcx, [rbp - 0x70]
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rsi - 0x70], 0
jmp 0x180044a43
cmp rsi, rdx
ja 0x180044d93
mov rdi, rsi
or rdi, 0xf
cmp rdi, rdx
jbe 0x1800449ce
mov rdi, rdx
jmp 0x1800449d6
cmp rdi, 0x16
cmovb rdi, r9
lea rcx, [rdi + 1]
cmp rcx, 0x1000
add byte [rdx + 0x2c], dh
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180044d99
mov rcx, rax
call fcn.18005f97c
test rax, rax
je 0x180044d86
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x180044a21
test rcx, rcx
je 0x180044a1e
call fcn.18005f97c
mov rbx, rax
jmp 0x180044a21
mov rbx, r8
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x58], rdi
mov r8, rsi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rsi], 0
mov qword [rbp - 0x70], rbx
mov ebx, dword [rsp + 0x44]
or ebx, 1
mov dword [rsp + 0x44], ebx
lea rdx, [rbp - 0x70]
lea rcx, [0x1800818d8]
call fcn.180003830
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x180044a95
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180044a90
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180044d86
call fcn.18005f9b8
mov r12d, 0x2000000
jmp 0x180044d18
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov esi, GetAcceptLanguagesA
cmp qword [r13 + 0x10], rsi
cmovb rsi, qword [r13 + 0x10]
mov r14, r13
cmp qword [r13 + 0x18], 0x10
jb 0x180044ac8
mov r14, qword [r13]
cmp rsi, 0xf
ja 0x180044aeb
mov qword [rbp - 0x60], rsi
mov r8, rsi
mov rdx, r14
lea rcx, [rbp - 0x70]
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rsi - 0x70], 0
jmp 0x180044b7a
cmp rsi, rdx
ja 0x180044d93
mov rdi, rsi
or rdi, 0xf
cmp rdi, rdx
jbe 0x180044b05
mov rdi, rdx
jmp 0x180044b0d
cmp rdi, 0x16
cmovb rdi, r9
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x180044b46
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180044d99
mov rcx, rax
call fcn.18005f97c
test rax, rax
je 0x180044d86
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x180044b58
test rcx, rcx
je 0x180044b55
call fcn.18005f97c
mov rbx, rax
jmp 0x180044b58
mov rbx, r8
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x58], rdi
mov r8, rsi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rsi], 0
mov qword [rbp - 0x70], rbx
mov ebx, dword [rsp + 0x44]
or ebx, 2
mov dword [rsp + 0x44], ebx
lea rdx, [rbp - 0x70]
lea rcx, [0x1800818f8]
call fcn.180003830
mov rax, qword [rbp - 0x58]
cmp rax, 0x10
jb 0x180044bcd
lea rdx, [rax + 1]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180044bc8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180044d86
call fcn.18005f9b8
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov rax, qword [r13 + 0x10]
cmp rax, 0xb
jb 0x180044d8d
add rax, 0xfffffffffffffff5
mov esi, 6
cmp rax, rsi
cmovb rsi, rax
mov rax, r13
cmp qword [r13 + 0x18], 0x10
jb 0x180044c05
mov rax, qword [r13]
lea r14, [rax + 0xb]
cmp rsi, 0xf
ja 0x180044c2c
mov qword [rbp - 0x60], rsi
mov r8, rsi
mov rdx, r14
lea rcx, [rbp - 0x70]
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rsi - 0x70], 0
jmp 0x180044cc9
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
ja 0x180044d93
mov rdi, rsi
or rdi, 0xf
cmp rdi, rax
jbe 0x180044c50
mov rdi, rax
jmp 0x180044c5d
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x180044c96
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180044d99
mov rcx, rax
call fcn.18005f97c
test rax, rax
je 0x180044d86
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x180044ca7
test rcx, rcx
je 0x180044ca5
call fcn.18005f97c
mov rbx, rax
jmp 0x180044ca7
xor ebx, ebx
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x58], rdi
mov r8, rsi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rsi], 0
mov qword [rbp - 0x70], rbx
mov ebx, dword [rsp + 0x44]
or ebx, 4
mov dword [rsp + 0x44], ebx
lea rdx, [rbp - 0x70]
lea rcx, [0x180081918]
call fcn.180003830
mov rax, qword [rbp - 0x58]
cmp rax, 0x10
jb 0x180044d18
lea rdx, [rax + 1]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180044d13
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180044d86
call fcn.18005f9b8
xor r8d, r8d
movabs rdx, 0x7fffffffffffffff
mov r9d, 0x16
movabs r10, 0x7b2074736e6f63
movabs r11, 0x697265686e6920
add r15d, 0x86
cmp r15d, 0xe1e
jb 0x1800444e0
mov esi, dword [rsp + 0x58]
mov ecx, dword [rsp + 0x48]
mov r15d, 0x2032
mov edi, 0x84d0
mov r14d, dword [rsp + 0x50]
add ecx, 0x39
mov dword [rsp + 0x48], ecx
cmp ecx, esi
jae 0x1800443e1
mov ebx, dword [rsp + 0x44]
xor r8d, r8d
jmp 0x1800442e3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18001b490
int3
call fcn.18001b450
int3
call fcn.18001b310
int3