Function at 0x180038250
Capabilities:
Check mutex on windows
Get session user name

Disassembly:
push rsi
push rdi
sub rsp, 0x5a8
mov rax, qword [0x1800623f8]
xor rax, rsp
mov qword [rsp + 0x590], rax
call fcn.180046c30
and eax, 0x10000000
test eax, eax
je 0x180038586
mov dword [rsp + 0x294], 3
mov dword [rsp + 0x29c], 9
mov eax, dword [rsp + 0x29c]
test eax, eax
jle 0x180038304
mov eax, dword [rsp + 0x29c]
cmp eax, 1
jle 0x1800382d1
mov eax, dword [rsp + 0x294]
and eax, 0x15f8
mov dword [rsp + 0x294], eax
mov eax, dword [rsp + 0x29c]
sub eax, 2
mov dword [rsp + 0x29c], eax
jmp 0x180038294
mov eax, dword [rsp + 0x294]
cmp eax, 0x80b
jle 0x1800382f2
mov eax, dword [rsp + 0x294]
and eax, 0x84
mov dword [rsp + 0x294], eax
mov eax, dword [rsp + 0x29c]
dec eax
mov dword [rsp + 0x29c], eax
jmp 0x180038294
mov dword [rsp + 0x27c], 6
mov dword [rsp + 0x270], 7
mov eax, dword [rsp + 0x270]
test eax, eax
jle 0x18003838a
mov eax, dword [rsp + 0x270]
cmp eax, 1
jle 0x180038357
mov eax, dword [rsp + 0x27c]
and eax, 0x169a
mov dword [rsp + 0x27c], eax
mov eax, dword [rsp + 0x270]
sub eax, 2
mov dword [rsp + 0x270], eax
jmp 0x18003831a
mov eax, dword [rsp + 0x27c]
cmp eax, 0x809
jle 0x180038378
mov eax, dword [rsp + 0x27c]
and eax, 0x82
mov dword [rsp + 0x27c], eax
mov eax, dword [rsp + 0x270]
dec eax
mov dword [rsp + 0x270], eax
jmp 0x18003831a
mov dword [rsp + 0x284], 7
mov dword [rsp + 0x290], 9
mov eax, dword [rsp + 0x290]
test eax, eax
jle 0x180038410
mov eax, dword [rsp + 0x290]
cmp eax, 1
jle 0x1800383dd
mov eax, dword [rsp + 0x284]
and eax, 0x19b6
mov dword [rsp + 0x284], eax
mov eax, dword [rsp + 0x290]
sub eax, 2
mov dword [rsp + 0x290], eax
jmp 0x1800383a0
mov eax, dword [rsp + 0x284]
cmp eax, 0x80b
jle 0x1800383fe
mov eax, dword [rsp + 0x284]
and eax, 0x84
mov dword [rsp + 0x284], eax
mov eax, dword [rsp + 0x290]
dec eax
mov dword [rsp + 0x290], eax
jmp 0x1800383a0
mov dword [rsp + 0x278], 0
mov dword [rsp + 0x274], 0xd
cmp dword [rsp + 0x274], 0
jle 0x180038486
mov eax, dword [rsp + 0x274]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180038468
mov dword [rsp + 0x278], 4
mov eax, dword [rsp + 0x274]
dec eax
mov dword [rsp + 0x274], eax
jmp 0x180038426
mov dword [rsp + 0x278], 0
mov eax, dword [rsp + 0x274]
sub eax, 2
mov dword [rsp + 0x274], eax
jmp 0x180038426
mov dword [rsp + 0x28c], 2
mov dword [rsp + 0x298], 4
mov eax, dword [rsp + 0x298]
test eax, eax
jle 0x18003850a
mov eax, dword [rsp + 0x298]
cmp eax, 1
jle 0x1800384d9
mov eax, dword [rsp + 0x28c]
and eax, 0x1176
mov dword [rsp + 0x28c], eax
mov eax, dword [rsp + 0x298]
sub eax, 2
mov dword [rsp + 0x298], eax
jmp 0x18003849c
mov eax, dword [rsp + 0x28c]
cmp eax, 0x806
jle 0x1800384f8
mov eax, dword [rsp + 0x28c]
and eax, 0x7f
mov dword [rsp + 0x28c], eax
mov eax, dword [rsp + 0x298]
dec eax
mov dword [rsp + 0x298], eax
jmp 0x18003849c
mov dword [rsp + 0x280], 0
mov dword [rsp + 0x288], 0x14
cmp dword [rsp + 0x288], 0
jle 0x18003857f
mov eax, dword [rsp + 0x288]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180038562
mov dword [rsp + 0x280], 4
mov eax, dword [rsp + 0x288]
dec eax
mov dword [rsp + 0x288], eax
jmp 0x180038520
mov dword [rsp + 0x280], 0
mov eax, dword [rsp + 0x288]
dec eax
mov dword [rsp + 0x288], eax
jmp 0x180038520
xor eax, eax
jmp 0x18003b1a3
mov dword [rsp + 0x2a0], 3
mov dword [rsp + 0x2a4], 8
mov eax, dword [rsp + 0x2a4]
test eax, eax
jle 0x18003860c
mov eax, dword [rsp + 0x2a4]
cmp eax, 1
jle 0x1800385d9
mov eax, dword [rsp + 0x2a0]
and eax, 0x11d0
mov dword [rsp + 0x2a0], eax
mov eax, dword [rsp + 0x2a4]
sub eax, 2
mov dword [rsp + 0x2a4], eax
jmp 0x18003859c
mov eax, dword [rsp + 0x2a0]
cmp eax, 0x80a
jle 0x1800385fa
mov eax, dword [rsp + 0x2a0]
and eax, 0x83
mov dword [rsp + 0x2a0], eax
mov eax, dword [rsp + 0x2a4]
dec eax
mov dword [rsp + 0x2a4], eax
jmp 0x18003859c
mov dword [rsp + 0x2b4], 2
mov dword [rsp + 0x2c4], 0x10
cmp dword [rsp + 0x2c4], 0
jle 0x180038682
mov eax, dword [rsp + 0x2c4]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180038664
mov dword [rsp + 0x2b4], 4
mov eax, dword [rsp + 0x2c4]
dec eax
mov dword [rsp + 0x2c4], eax
jmp 0x180038622
mov dword [rsp + 0x2b4], 4
mov eax, dword [rsp + 0x2c4]
sub eax, 2
mov dword [rsp + 0x2c4], eax
jmp 0x180038622
mov dword [rsp + 0x2ac], 0
mov dword [rsp + 0x2b0], 0x14
cmp dword [rsp + 0x2b0], 0
jle 0x1800386f7
mov eax, dword [rsp + 0x2b0]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800386da
mov dword [rsp + 0x2ac], 4
mov eax, dword [rsp + 0x2b0]
dec eax
mov dword [rsp + 0x2b0], eax
jmp 0x180038698
mov dword [rsp + 0x2ac], 0
mov eax, dword [rsp + 0x2b0]
dec eax
mov dword [rsp + 0x2b0], eax
jmp 0x180038698
mov dword [rsp + 0x2a8], 8
mov dword [rsp + 0x2bc], 3
mov eax, dword [rsp + 0x2bc]
test eax, eax
jle 0x18003877b
mov eax, dword [rsp + 0x2bc]
cmp eax, 1
jle 0x18003874a
mov eax, dword [rsp + 0x2a8]
and eax, 0x1fed
mov dword [rsp + 0x2a8], eax
mov eax, dword [rsp + 0x2bc]
sub eax, 2
mov dword [rsp + 0x2bc], eax
jmp 0x18003870d
mov eax, dword [rsp + 0x2a8]
cmp eax, 0x805
jle 0x180038769
mov eax, dword [rsp + 0x2a8]
and eax, 0x7e
mov dword [rsp + 0x2a8], eax
mov eax, dword [rsp + 0x2bc]
dec eax
mov dword [rsp + 0x2bc], eax
jmp 0x18003870d
mov dword [rsp + 0x2c0], 7
mov dword [rsp + 0x2b8], 0x11
cmp dword [rsp + 0x2b8], 0
jle 0x1800387f0
mov eax, dword [rsp + 0x2b8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800387d3
mov dword [rsp + 0x2c0], 0
mov eax, dword [rsp + 0x2b8]
dec eax
mov dword [rsp + 0x2b8], eax
jmp 0x180038791
mov dword [rsp + 0x2c0], 0
mov eax, dword [rsp + 0x2b8]
dec eax
mov dword [rsp + 0x2b8], eax
jmp 0x180038791
mov edx, 0x1c28
mov ecx, 1
call fcn.18004b01c
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
jne 0x180038e71
mov dword [rsp + 0x2e4], 5
mov dword [rsp + 0x2d8], 5
mov eax, dword [rsp + 0x2d8]
test eax, eax
jle 0x180038896
mov eax, dword [rsp + 0x2d8]
cmp eax, 1
jle 0x180038863
mov eax, dword [rsp + 0x2e4]
and eax, 0x152b
mov dword [rsp + 0x2e4], eax
mov eax, dword [rsp + 0x2d8]
sub eax, 2
mov dword [rsp + 0x2d8], eax
jmp 0x180038826
mov eax, dword [rsp + 0x2e4]
cmp eax, 0x807
jle 0x180038884
mov eax, dword [rsp + 0x2e4]
and eax, 0x80
mov dword [rsp + 0x2e4], eax
mov eax, dword [rsp + 0x2d8]
dec eax
mov dword [rsp + 0x2d8], eax
jmp 0x180038826
mov dword [rsp + 0x2d0], 1
mov dword [rsp + 0x2f0], 3
mov eax, dword [rsp + 0x2f0]
test eax, eax
jle 0x18003891a
mov eax, dword [rsp + 0x2f0]
cmp eax, 1
jle 0x1800388e9
mov eax, dword [rsp + 0x2d0]
and eax, 0x1907
mov dword [rsp + 0x2d0], eax
mov eax, dword [rsp + 0x2f0]
sub eax, 2
mov dword [rsp + 0x2f0], eax
jmp 0x1800388ac
mov eax, dword [rsp + 0x2d0]
cmp eax, 0x805
jle 0x180038908
mov eax, dword [rsp + 0x2d0]
and eax, 0x7e
mov dword [rsp + 0x2d0], eax
mov eax, dword [rsp + 0x2f0]
dec eax
mov dword [rsp + 0x2f0], eax
jmp 0x1800388ac
mov dword [rsp + 0x2fc], 5
mov dword [rsp + 0x2dc], 0xf
cmp dword [rsp + 0x2dc], 0
jle 0x18003898f
mov eax, dword [rsp + 0x2dc]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180038972
mov dword [rsp + 0x2fc], 0
mov eax, dword [rsp + 0x2dc]
dec eax
mov dword [rsp + 0x2dc], eax
jmp 0x180038930
mov dword [rsp + 0x2fc], 4
mov eax, dword [rsp + 0x2dc]
dec eax
mov dword [rsp + 0x2dc], eax
jmp 0x180038930
mov dword [rsp + 0x2c8], 4
mov dword [rsp + 0x2ec], 0x11
cmp dword [rsp + 0x2ec], 0
jle 0x180038a05
mov eax, dword [rsp + 0x2ec]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800389e7
mov dword [rsp + 0x2c8], 4
mov eax, dword [rsp + 0x2ec]
dec eax
mov dword [rsp + 0x2ec], eax
jmp 0x1800389a5
mov dword [rsp + 0x2c8], 4
mov eax, dword [rsp + 0x2ec]
sub eax, 2
mov dword [rsp + 0x2ec], eax
jmp 0x1800389a5
mov dword [rsp + 0x2d4], 6
mov dword [rsp + 0x2f8], 0xa
mov eax, dword [rsp + 0x2f8]
test eax, eax
jle 0x180038a8b
mov eax, dword [rsp + 0x2f8]
cmp eax, 1
jle 0x180038a58
mov eax, dword [rsp + 0x2d4]
and eax, 0x1f29
mov dword [rsp + 0x2d4], eax
mov eax, dword [rsp + 0x2f8]
sub eax, 2
mov dword [rsp + 0x2f8], eax
jmp 0x180038a1b
mov eax, dword [rsp + 0x2d4]
cmp eax, 0x80c
jle 0x180038a79
mov eax, dword [rsp + 0x2d4]
and eax, 0x85
mov dword [rsp + 0x2d4], eax
mov eax, dword [rsp + 0x2f8]
dec eax
mov dword [rsp + 0x2f8], eax
jmp 0x180038a1b
mov dword [rsp + 0x2e8], 3
mov dword [rsp + 0x2f4], 9
mov eax, dword [rsp + 0x2f4]
test eax, eax
jle 0x180038b11
mov eax, dword [rsp + 0x2f4]
cmp eax, 1
jle 0x180038ade
mov eax, dword [rsp + 0x2e8]
and eax, 0x15f8
mov dword [rsp + 0x2e8], eax
mov eax, dword [rsp + 0x2f4]
sub eax, 2
mov dword [rsp + 0x2f4], eax
jmp 0x180038aa1
mov eax, dword [rsp + 0x2e8]
cmp eax, 0x80b
jle 0x180038aff
mov eax, dword [rsp + 0x2e8]
and eax, 0x84
mov dword [rsp + 0x2e8], eax
mov eax, dword [rsp + 0x2f4]
dec eax
mov dword [rsp + 0x2f4], eax
jmp 0x180038aa1
mov dword [rsp + 0x2cc], 4
mov dword [rsp + 0x2e0], 3
mov eax, dword [rsp + 0x2e0]
test eax, eax
jle 0x180038b95
mov eax, dword [rsp + 0x2e0]
cmp eax, 1
jle 0x180038b64
mov eax, dword [rsp + 0x2cc]
and eax, 0x1494
mov dword [rsp + 0x2cc], eax
mov eax, dword [rsp + 0x2e0]
sub eax, 2
mov dword [rsp + 0x2e0], eax
jmp 0x180038b27
mov eax, dword [rsp + 0x2cc]
cmp eax, 0x805
jle 0x180038b83
mov eax, dword [rsp + 0x2cc]
and eax, 0x7e
mov dword [rsp + 0x2cc], eax
mov eax, dword [rsp + 0x2e0]
dec eax
mov dword [rsp + 0x2e0], eax
jmp 0x180038b27
mov dword [rsp + 0x310], 0
mov dword [rsp + 0x304], 0x15
cmp dword [rsp + 0x304], 0
jle 0x180038c0b
mov eax, dword [rsp + 0x304]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180038bed
mov dword [rsp + 0x310], 4
mov eax, dword [rsp + 0x304]
dec eax
mov dword [rsp + 0x304], eax
jmp 0x180038bab
mov dword [rsp + 0x310], 0
mov eax, dword [rsp + 0x304]
sub eax, 2
mov dword [rsp + 0x304], eax
jmp 0x180038bab
mov dword [rsp + 0x314], 7
mov dword [rsp + 0x30c], 0xa
mov eax, dword [rsp + 0x30c]
test eax, eax
jle 0x180038c91
mov eax, dword [rsp + 0x30c]
cmp eax, 1
jle 0x180038c5e
mov eax, dword [rsp + 0x314]
and eax, 0x23c7
mov dword [rsp + 0x314], eax
mov eax, dword [rsp + 0x30c]
sub eax, 2
mov dword [rsp + 0x30c], eax
jmp 0x180038c21
mov eax, dword [rsp + 0x314]
cmp eax, 0x80c
jle 0x180038c7f
mov eax, dword [rsp + 0x314]
and eax, 0x85
mov dword [rsp + 0x314], eax
mov eax, dword [rsp + 0x30c]
dec eax
mov dword [rsp + 0x30c], eax
jmp 0x180038c21
mov dword [rsp + 0x318], 2
mov dword [rsp + 0x324], 0x10
cmp dword [rsp + 0x324], 0
jle 0x180038d07
mov eax, dword [rsp + 0x324]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180038ce9
mov dword [rsp + 0x318], 4
mov eax, dword [rsp + 0x324]
dec eax
mov dword [rsp + 0x324], eax
jmp 0x180038ca7
mov dword [rsp + 0x318], 4
mov eax, dword [rsp + 0x324]
sub eax, 2
mov dword [rsp + 0x324], eax
jmp 0x180038ca7
mov dword [rsp + 0x300], 4
mov dword [rsp + 0x320], 0x11
cmp dword [rsp + 0x320], 0
jle 0x180038d7d
mov eax, dword [rsp + 0x320]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180038d5f
mov dword [rsp + 0x300], 4
mov eax, dword [rsp + 0x320]
dec eax
mov dword [rsp + 0x320], eax
jmp 0x180038d1d
mov dword [rsp + 0x300], 4
mov eax, dword [rsp + 0x320]
sub eax, 2
mov dword [rsp + 0x320], eax
jmp 0x180038d1d
mov dword [rsp + 0x32c], 2
mov dword [rsp + 0x308], 0x13
cmp dword [rsp + 0x308], 0
jle 0x180038df4
mov eax, dword [rsp + 0x308]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180038dd6
mov dword [rsp + 0x32c], 4
mov eax, dword [rsp + 0x308]
sub eax, 2
mov dword [rsp + 0x308], eax
jmp 0x180038d93
mov dword [rsp + 0x32c], 4
mov eax, dword [rsp + 0x308]
sub eax, 2
mov dword [rsp + 0x308], eax
jmp 0x180038d93
mov dword [rsp + 0x328], 0
mov dword [rsp + 0x31c], 0xe
cmp dword [rsp + 0x31c], 0
jle 0x180038e6a
mov eax, dword [rsp + 0x31c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180038e4d
mov dword [rsp + 0x328], 4
mov eax, dword [rsp + 0x31c]
sub eax, 2
mov dword [rsp + 0x31c], eax
jmp 0x180038e0a
mov dword [rsp + 0x328], 4
mov eax, dword [rsp + 0x31c]
dec eax
mov dword [rsp + 0x31c], eax
jmp 0x180038e0a
xor eax, eax
jmp 0x18003b1a3
xor eax, eax
mov word [rsp + 0x60], ax
lea rax, [rsp + 0x62]
mov rdi, rax
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
mov dword [rsp + 0x48], 0x104
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
test eax, eax
jne 0x1800391f6
mov dword [rsp + 0x37c], 4
mov dword [rsp + 0x388], 3
mov eax, dword [rsp + 0x388]
test eax, eax
jle 0x180038f2d
mov eax, dword [rsp + 0x388]
cmp eax, 1
jle 0x180038efc
mov eax, dword [rsp + 0x37c]
and eax, 0xdd8
mov dword [rsp + 0x37c], eax
mov eax, dword [rsp + 0x388]
sub eax, 2
mov dword [rsp + 0x388], eax
jmp 0x180038ebf
mov eax, dword [rsp + 0x37c]
cmp eax, 0x805
jle 0x180038f1b
mov eax, dword [rsp + 0x37c]
and eax, 0x7e
mov dword [rsp + 0x37c], eax
mov eax, dword [rsp + 0x388]
dec eax
mov dword [rsp + 0x388], eax
jmp 0x180038ebf
mov dword [rsp + 0x384], 1
mov dword [rsp + 0x378], 0x10
cmp dword [rsp + 0x378], 0
jle 0x180038fa3
mov eax, dword [rsp + 0x378]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180038f85
mov dword [rsp + 0x384], 4
mov eax, dword [rsp + 0x378]
dec eax
mov dword [rsp + 0x378], eax
jmp 0x180038f43
mov dword [rsp + 0x384], 0
mov eax, dword [rsp + 0x378]
sub eax, 2
mov dword [rsp + 0x378], eax
jmp 0x180038f43
mov dword [rsp + 0x374], 7
mov dword [rsp + 0x398], 8
mov eax, dword [rsp + 0x398]
test eax, eax
jle 0x180039029
mov eax, dword [rsp + 0x398]
cmp eax, 1
jle 0x180038ff6
mov eax, dword [rsp + 0x374]
and eax, 0x2542
mov dword [rsp + 0x374], eax
mov eax, dword [rsp + 0x398]
sub eax, 2
mov dword [rsp + 0x398], eax
jmp 0x180038fb9
mov eax, dword [rsp + 0x374]
cmp eax, 0x80a
jle 0x180039017
mov eax, dword [rsp + 0x374]
and eax, 0x83
mov dword [rsp + 0x374], eax
mov eax, dword [rsp + 0x398]
dec eax
mov dword [rsp + 0x398], eax
jmp 0x180038fb9
mov dword [rsp + 0x370], 1
mov dword [rsp + 0x390], 3
mov eax, dword [rsp + 0x390]
test eax, eax
jle 0x1800390ad
mov eax, dword [rsp + 0x390]
cmp eax, 1
jle 0x18003907c
mov eax, dword [rsp + 0x370]
and eax, 0x1907
mov dword [rsp + 0x370], eax
mov eax, dword [rsp + 0x390]
sub eax, 2
mov dword [rsp + 0x390], eax
jmp 0x18003903f
mov eax, dword [rsp + 0x370]
cmp eax, 0x805
jle 0x18003909b
mov eax, dword [rsp + 0x370]
and eax, 0x7e
mov dword [rsp + 0x370], eax
mov eax, dword [rsp + 0x390]
dec eax
mov dword [rsp + 0x390], eax
jmp 0x18003903f
mov dword [rsp + 0x36c], 4
mov dword [rsp + 0x38c], 0x11
cmp dword [rsp + 0x38c], 0
jle 0x180039123
mov eax, dword [rsp + 0x38c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180039105
mov dword [rsp + 0x36c], 4
mov eax, dword [rsp + 0x38c]
dec eax
mov dword [rsp + 0x38c], eax
jmp 0x1800390c3
mov dword [rsp + 0x36c], 4
mov eax, dword [rsp + 0x38c]
sub eax, 2
mov dword [rsp + 0x38c], eax
jmp 0x1800390c3
mov dword [rsp + 0x380], 2
mov dword [rsp + 0x394], 0x10
cmp dword [rsp + 0x394], 0
jle 0x180039199
mov eax, dword [rsp + 0x394]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18003917b
mov dword [rsp + 0x380], 4
mov eax, dword [rsp + 0x394]
dec eax
mov dword [rsp + 0x394], eax
jmp 0x180039139
mov dword [rsp + 0x380], 4
mov eax, dword [rsp + 0x394]
sub eax, 2
mov dword [rsp + 0x394], eax
jmp 0x180039139
lea rax, [rsp + 0x330]
lea rcx, [0x18005c1c0]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x19
rep movsb byte [rdi], byte [rsi]
mov dword [rsp + 0x20], 0x182d
lea r9, [rsp + 0x368]
lea r8, [rsp + 0x350]
mov edx, 0x18
lea rcx, [rsp + 0x330]
call fcn.18003bca0
lea r8, [rsp + 0x350]
mov edx, 0x104
lea rcx, [rsp + 0x60]
call fcn.180028e10
call fcn.180047070
and eax, 0x10000000
test eax, eax
je 0x18003937e
mov dword [rsp + 0x3b0], 7
mov dword [rsp + 0x3a8], 0x11
cmp dword [rsp + 0x3a8], 0
jle 0x18003927d
mov eax, dword [rsp + 0x3a8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180039260
mov dword [rsp + 0x3b0], 0
mov eax, dword [rsp + 0x3a8]
dec eax
mov dword [rsp + 0x3a8], eax
jmp 0x18003921e
mov dword [rsp + 0x3b0], 0
mov eax, dword [rsp + 0x3a8]
dec eax
mov dword [rsp + 0x3a8], eax
jmp 0x18003921e
mov dword [rsp + 0x3a0], 8
mov dword [rsp + 0x3a4], 3
mov eax, dword [rsp + 0x3a4]
test eax, eax
jle 0x180039301
mov eax, dword [rsp + 0x3a4]
cmp eax, 1
jle 0x1800392d0
mov eax, dword [rsp + 0x3a0]
and eax, 0x1fed
mov dword [rsp + 0x3a0], eax
mov eax, dword [rsp + 0x3a4]
sub eax, 2
mov dword [rsp + 0x3a4], eax
jmp 0x180039293
mov eax, dword [rsp + 0x3a0]
cmp eax, 0x805
jle 0x1800392ef
mov eax, dword [rsp + 0x3a0]
and eax, 0x7e
mov dword [rsp + 0x3a0], eax
mov eax, dword [rsp + 0x3a4]
dec eax
mov dword [rsp + 0x3a4], eax
jmp 0x180039293
mov dword [rsp + 0x3ac], 4
mov dword [rsp + 0x39c], 0x13
cmp dword [rsp + 0x39c], 0
jle 0x180039377
mov eax, dword [rsp + 0x39c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180039359
mov dword [rsp + 0x3ac], 0
mov eax, dword [rsp + 0x39c]
dec eax
mov dword [rsp + 0x39c], eax
jmp 0x180039317
mov dword [rsp + 0x3ac], 0
mov eax, dword [rsp + 0x39c]
sub eax, 2
mov dword [rsp + 0x39c], eax
jmp 0x180039317
xor eax, eax
jmp 0x18003b1a3
mov dword [rsp + 0x3c8], 7
mov dword [rsp + 0x3c4], 0xa
mov eax, dword [rsp + 0x3c4]
test eax, eax
jle 0x180039404
mov eax, dword [rsp + 0x3c4]
cmp eax, 1
jle 0x1800393d1
mov eax, dword [rsp + 0x3c8]
and eax, 0x23c7
mov dword [rsp + 0x3c8], eax
mov eax, dword [rsp + 0x3c4]
sub eax, 2
mov dword [rsp + 0x3c4], eax
jmp 0x180039394
mov eax, dword [rsp + 0x3c8]
cmp eax, 0x80c
jle 0x1800393f2
mov eax, dword [rsp + 0x3c8]
and eax, 0x85
mov dword [rsp + 0x3c8], eax
mov eax, dword [rsp + 0x3c4]
dec eax
mov dword [rsp + 0x3c4], eax
jmp 0x180039394
mov dword [rsp + 0x3c0], 0
mov dword [rsp + 0x3b8], 0x15
cmp dword [rsp + 0x3b8], 0
jle 0x18003947a
mov eax, dword [rsp + 0x3b8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18003945c
mov dword [rsp + 0x3c0], 4
mov eax, dword [rsp + 0x3b8]
dec eax
mov dword [rsp + 0x3b8], eax
jmp 0x18003941a
mov dword [rsp + 0x3c0], 0
mov eax, dword [rsp + 0x3b8]
sub eax, 2
mov dword [rsp + 0x3b8], eax
jmp 0x18003941a
mov dword [rsp + 0x3bc], 2
mov dword [rsp + 0x3b4], 5
mov eax, dword [rsp + 0x3b4]
test eax, eax
jle 0x180039500
mov eax, dword [rsp + 0x3b4]
cmp eax, 1
jle 0x1800394cd
mov eax, dword [rsp + 0x3bc]
and eax, 0x204d
mov dword [rsp + 0x3bc], eax
mov eax, dword [rsp + 0x3b4]
sub eax, 2
mov dword [rsp + 0x3b4], eax
jmp 0x180039490
mov eax, dword [rsp + 0x3bc]
cmp eax, 0x807
jle 0x1800394ee
mov eax, dword [rsp + 0x3bc]
and eax, 0x80
mov dword [rsp + 0x3bc], eax
mov eax, dword [rsp + 0x3b4]
dec eax
mov dword [rsp + 0x3b4], eax
jmp 0x180039490
mov rdx, qword [0x180063fc8]
mov rcx, qword [0x180063f70]
call fcn.180047380
mov qword [rsp + 0x40], rax
cmp qword [rsp + 0x40], 0
jne 0x18003971f
mov dword [rsp + 0x3cc], 4
mov dword [rsp + 0x3e0], 0x11
cmp dword [rsp + 0x3e0], 0
jle 0x180039599
mov eax, dword [rsp + 0x3e0]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18003957c
mov dword [rsp + 0x3cc], 0
mov eax, dword [rsp + 0x3e0]
dec eax
mov dword [rsp + 0x3e0], eax
jmp 0x18003953a
mov dword [rsp + 0x3cc], 4
mov eax, dword [rsp + 0x3e0]
dec eax
mov dword [rsp + 0x3e0], eax
jmp 0x18003953a
mov dword [rsp + 0x3d8], 7
mov dword [rsp + 0x3d0], 4
mov eax, dword [rsp + 0x3d0]
test eax, eax
jle 0x18003961d
mov eax, dword [rsp + 0x3d0]
cmp eax, 1
jle 0x1800395ec
mov eax, dword [rsp + 0x3d8]
and eax, 0x21f3
mov dword [rsp + 0x3d8], eax
mov eax, dword [rsp + 0x3d0]
sub eax, 2
mov dword [rsp + 0x3d0], eax
jmp 0x1800395af
mov eax, dword [rsp + 0x3d8]
cmp eax, 0x806
jle 0x18003960b
mov eax, dword [rsp + 0x3d8]
and eax, 0x7f
mov dword [rsp + 0x3d8], eax
mov eax, dword [rsp + 0x3d0]
dec eax
mov dword [rsp + 0x3d0], eax
jmp 0x1800395af
mov dword [rsp + 0x3d4], 6
mov dword [rsp + 0x3e8], 0xa
mov eax, dword [rsp + 0x3e8]
test eax, eax
jle 0x1800396a3
mov eax, dword [rsp + 0x3e8]
cmp eax, 1
jle 0x180039670
mov eax, dword [rsp + 0x3d4]
and eax, 0x1f29
mov dword [rsp + 0x3d4], eax
mov eax, dword [rsp + 0x3e8]
sub eax, 2
mov dword [rsp + 0x3e8], eax
jmp 0x180039633
mov eax, dword [rsp + 0x3d4]
cmp eax, 0x80c
jle 0x180039691
mov eax, dword [rsp + 0x3d4]
and eax, 0x85
mov dword [rsp + 0x3d4], eax
mov eax, dword [rsp + 0x3e8]
dec eax
mov dword [rsp + 0x3e8], eax
jmp 0x180039633
mov dword [rsp + 0x3e4], 7
mov dword [rsp + 0x3dc], 0x11
cmp dword [rsp + 0x3dc], 0
jle 0x180039718
mov eax, dword [rsp + 0x3dc]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800396fb
mov dword [rsp + 0x3e4], 0
mov eax, dword [rsp + 0x3dc]
dec eax
mov dword [rsp + 0x3dc], eax
jmp 0x1800396b9
mov dword [rsp + 0x3e4], 0
mov eax, dword [rsp + 0x3dc]
dec eax
mov dword [rsp + 0x3dc], eax
jmp 0x1800396b9
xor eax, eax
jmp 0x18003b1a3
mov rcx, qword [rsp + 0x40]
call fcn.180047740
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x3fc], 7
mov dword [rsp + 0x3ec], 0x10
cmp dword [rsp + 0x3ec], 0
jle 0x1800397a4
mov eax, dword [rsp + 0x3ec]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180039787
mov dword [rsp + 0x3fc], 0
mov eax, dword [rsp + 0x3ec]
sub eax, 2
mov dword [rsp + 0x3ec], eax
jmp 0x180039744
mov dword [rsp + 0x3fc], 0
mov eax, dword [rsp + 0x3ec]
dec eax
mov dword [rsp + 0x3ec], eax
jmp 0x180039744
mov dword [rsp + 0x408], 0
mov dword [rsp + 0x40c], 0x14
cmp dword [rsp + 0x40c], 0
jle 0x180039819
mov eax, dword [rsp + 0x40c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800397fc
mov dword [rsp + 0x408], 4
mov eax, dword [rsp + 0x40c]
dec eax
mov dword [rsp + 0x40c], eax
jmp 0x1800397ba
mov dword [rsp + 0x408], 0
mov eax, dword [rsp + 0x40c]
dec eax
mov dword [rsp + 0x40c], eax
jmp 0x1800397ba
mov dword [rsp + 0x400], 1
mov dword [rsp + 0x3f8], 0x15
cmp dword [rsp + 0x3f8], 0
jle 0x18003988f
mov eax, dword [rsp + 0x3f8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180039872
mov dword [rsp + 0x400], 4
mov eax, dword [rsp + 0x3f8]
sub eax, 2
mov dword [rsp + 0x3f8], eax
jmp 0x18003982f
mov dword [rsp + 0x400], 0
mov eax, dword [rsp + 0x3f8]
dec eax
mov dword [rsp + 0x3f8], eax
jmp 0x18003982f
mov dword [rsp + 0x410], 2
mov dword [rsp + 0x404], 0x13
cmp dword [rsp + 0x404], 0
jle 0x180039906
mov eax, dword [rsp + 0x404]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800398e8
mov dword [rsp + 0x410], 4
mov eax, dword [rsp + 0x404]
sub eax, 2
mov dword [rsp + 0x404], eax
jmp 0x1800398a5
mov dword [rsp + 0x410], 4
mov eax, dword [rsp + 0x404]
sub eax, 2
mov dword [rsp + 0x404], eax
jmp 0x1800398a5
mov dword [rsp + 0x3f0], 8
mov dword [rsp + 0x3f4], 0x12
cmp dword [rsp + 0x3f4], 0
jle 0x18003997c
mov eax, dword [rsp + 0x3f4]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18003995e
mov dword [rsp + 0x3f0], 4
mov eax, dword [rsp + 0x3f4]
dec eax
mov dword [rsp + 0x3f4], eax
jmp 0x18003991c
mov dword [rsp + 0x3f0], 0
mov eax, dword [rsp + 0x3f4]
sub eax, 2
mov dword [rsp + 0x3f4], eax
jmp 0x18003991c
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jle 0x18003999a
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x60]
call fcn.18003be40
xor eax, eax
cmp eax, 1
je 0x18003af30
mov r8d, 1
mov rdx, qword [rsp + 0x38]
mov rcx, qword [0x180063c78]
call fcn.1800151a0
test eax, eax
jne 0x1800399ce
mov ecx, dword [0x180062004]
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x18003999a
mov rax, qword [0x180063c78]
cmp dword [rax], 0
jne 0x18003a19d
mov rax, qword [0x180063c78]
add rax, 0x10
mov r8, rax
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov rcx, qword [0x180063c78]
mov qword [rcx + 8], rax
mov dword [rsp + 0x454], 5
mov dword [rsp + 0x43c], 0xf
cmp dword [rsp + 0x43c], 0
jle 0x180039a79
mov eax, dword [rsp + 0x43c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180039a5c
mov dword [rsp + 0x454], 0
mov eax, dword [rsp + 0x43c]
dec eax
mov dword [rsp + 0x43c], eax
jmp 0x180039a1a
mov dword [rsp + 0x454], 4
mov eax, dword [rsp + 0x43c]
dec eax
mov dword [rsp + 0x43c], eax
jmp 0x180039a1a
mov dword [rsp + 0x450], 0
mov dword [rsp + 0x444], 0xe
cmp dword [rsp + 0x444], 0
jle 0x180039aef
mov eax, dword [rsp + 0x444]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180039ad2
mov dword [rsp + 0x450], 4
mov eax, dword [rsp + 0x444]
sub eax, 2
mov dword [rsp + 0x444], eax
jmp 0x180039a8f
mov dword [rsp + 0x450], 4
mov eax, dword [rsp + 0x444]
dec eax
mov dword [rsp + 0x444], eax
jmp 0x180039a8f
mov dword [rsp + 0x42c], 2
mov dword [rsp + 0x428], 5
mov eax, dword [rsp + 0x428]
test eax, eax
jle 0x180039b75
mov eax, dword [rsp + 0x428]
cmp eax, 1
jle 0x180039b42
mov eax, dword [rsp + 0x42c]
and eax, 0x204d
mov dword [rsp + 0x42c], eax
mov eax, dword [rsp + 0x428]
sub eax, 2
mov dword [rsp + 0x428], eax
jmp 0x180039b05
mov eax, dword [rsp + 0x42c]
cmp eax, 0x807
jle 0x180039b63
mov eax, dword [rsp + 0x42c]
and eax, 0x80
mov dword [rsp + 0x42c], eax
mov eax, dword [rsp + 0x428]
dec eax
mov dword [rsp + 0x428], eax
jmp 0x180039b05
mov dword [rsp + 0x430], 1
mov dword [rsp + 0x448], 3
mov eax, dword [rsp + 0x448]
test eax, eax
jle 0x180039bf9
mov eax, dword [rsp + 0x448]
cmp eax, 1
jle 0x180039bc8
mov eax, dword [rsp + 0x430]
and eax, 0x1907
mov dword [rsp + 0x430], eax
mov eax, dword [rsp + 0x448]
sub eax, 2
mov dword [rsp + 0x448], eax
jmp 0x180039b8b
mov eax, dword [rsp + 0x430]
cmp eax, 0x805
jle 0x180039be7
mov eax, dword [rsp + 0x430]
and eax, 0x7e
mov dword [rsp + 0x430], eax
mov eax, dword [rsp + 0x448]
dec eax
mov dword [rsp + 0x448], eax
jmp 0x180039b8b
mov dword [rsp + 0x434], 6
mov dword [rsp + 0x44c], 0xa
mov eax, dword [rsp + 0x44c]
test eax, eax
jle 0x180039c7f
mov eax, dword [rsp + 0x44c]
cmp eax, 1
jle 0x180039c4c
mov eax, dword [rsp + 0x434]
and eax, 0x1f29
mov dword [rsp + 0x434], eax
mov eax, dword [rsp + 0x44c]
sub eax, 2
mov dword [rsp + 0x44c], eax
jmp 0x180039c0f
mov eax, dword [rsp + 0x434]
cmp eax, 0x80c
jle 0x180039c6d
mov eax, dword [rsp + 0x434]
and eax, 0x85
mov dword [rsp + 0x434], eax
mov eax, dword [rsp + 0x44c]
dec eax
mov dword [rsp + 0x44c], eax
jmp 0x180039c0f
mov dword [rsp + 0x438], 0
mov dword [rsp + 0x440], 0x14
cmp dword [rsp + 0x440], 0
jle 0x180039cf4
mov eax, dword [rsp + 0x440]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180039cd7
mov dword [rsp + 0x438], 4
mov eax, dword [rsp + 0x440]
dec eax
mov dword [rsp + 0x440], eax
jmp 0x180039c95
mov dword [rsp + 0x438], 0
mov eax, dword [rsp + 0x440]
dec eax
mov dword [rsp + 0x440], eax
jmp 0x180039c95
mov rax, qword [0x180063c78]
cmp qword [rax + 8], 0
je 0x180039d13
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x18003a190
mov dword [rsp + 0x464], 7
mov dword [rsp + 0x45c], 4
mov eax, dword [rsp + 0x45c]
test eax, eax
jle 0x180039d97
mov eax, dword [rsp + 0x45c]
cmp eax, 1
jle 0x180039d66
mov eax, dword [rsp + 0x464]
and eax, 0x21f3
mov dword [rsp + 0x464], eax
mov eax, dword [rsp + 0x45c]
sub eax, 2
mov dword [rsp + 0x45c], eax
jmp 0x180039d29
mov eax, dword [rsp + 0x464]
cmp eax, 0x806
jle 0x180039d85
mov eax, dword [rsp + 0x464]
and eax, 0x7f
mov dword [rsp + 0x464], eax
mov eax, dword [rsp + 0x45c]
dec eax
mov dword [rsp + 0x45c], eax
jmp 0x180039d29
mov dword [rsp + 0x46c], 2
mov dword [rsp + 0x474], 0x10
cmp dword [rsp + 0x474], 0
jle 0x180039e0d
mov eax, dword [rsp + 0x474]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180039def
mov dword [rsp + 0x46c], 4
mov eax, dword [rsp + 0x474]
dec eax
mov dword [rsp + 0x474], eax
jmp 0x180039dad
mov dword [rsp + 0x46c], 4
mov eax, dword [rsp + 0x474]
sub eax, 2
mov dword [rsp + 0x474], eax
jmp 0x180039dad
mov dword [rsp + 0x460], 4
mov dword [rsp + 0x468], 3
mov eax, dword [rsp + 0x468]
test eax, eax
jle 0x180039e91
mov eax, dword [rsp + 0x468]
cmp eax, 1
jle 0x180039e60
mov eax, dword [rsp + 0x460]
and eax, 0x1494
mov dword [rsp + 0x460], eax
mov eax, dword [rsp + 0x468]
sub eax, 2
mov dword [rsp + 0x468], eax
jmp 0x180039e23
mov eax, dword [rsp + 0x460]
cmp eax, 0x805
jle 0x180039e7f
mov eax, dword [rsp + 0x460]
and eax, 0x7e
mov dword [rsp + 0x460], eax
mov eax, dword [rsp + 0x468]
dec eax
mov dword [rsp + 0x468], eax
jmp 0x180039e23
mov dword [rsp + 0x470], 7
mov dword [rsp + 0x458], 0x11
cmp dword [rsp + 0x458], 0
jle 0x180039f07
mov eax, dword [rsp + 0x458]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180039ee9
mov dword [rsp + 0x470], 0
mov eax, dword [rsp + 0x458]
dec eax
mov dword [rsp + 0x458], eax
jmp 0x180039ea7
mov dword [rsp + 0x470], 4
mov eax, dword [rsp + 0x458]
sub eax, 2
mov dword [rsp + 0x458], eax
jmp 0x180039ea7
mov r8d, 0x8000
xor edx, edx
mov rcx, qword [0x180063c78]
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov dword [rsp + 0x484], 1
mov dword [rsp + 0x47c], 0x15
cmp dword [rsp + 0x47c], 0
jle 0x180039f92
mov eax, dword [rsp + 0x47c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180039f75
mov dword [rsp + 0x484], 4
mov eax, dword [rsp + 0x47c]
sub eax, 2
mov dword [rsp + 0x47c], eax
jmp 0x180039f32
mov dword [rsp + 0x484], 0
mov eax, dword [rsp + 0x47c]
dec eax
mov dword [rsp + 0x47c], eax
jmp 0x180039f32
mov dword [rsp + 0x49c], 2
mov dword [rsp + 0x488], 0x13
cmp dword [rsp + 0x488], 0
jle 0x18003a009
mov eax, dword [rsp + 0x488]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180039feb
mov dword [rsp + 0x49c], 4
mov eax, dword [rsp + 0x488]
sub eax, 2
mov dword [rsp + 0x488], eax
jmp 0x180039fa8
mov dword [rsp + 0x49c], 4
mov eax, dword [rsp + 0x488]
sub eax, 2
mov dword [rsp + 0x488], eax
jmp 0x180039fa8
mov dword [rsp + 0x48c], 6
mov dword [rsp + 0x498], 0xa
mov eax, dword [rsp + 0x498]
test eax, eax
jle 0x18003a08f
mov eax, dword [rsp + 0x498]
cmp eax, 1
jle 0x18003a05c
mov eax, dword [rsp + 0x48c]
and eax, 0x1f29
mov dword [rsp + 0x48c], eax
mov eax, dword [rsp + 0x498]
sub eax, 2
mov dword [rsp + 0x498], eax
jmp 0x18003a01f
mov eax, dword [rsp + 0x48c]
cmp eax, 0x80c
jle 0x18003a07d
mov eax, dword [rsp + 0x48c]
and eax, 0x85
mov dword [rsp + 0x48c], eax
mov eax, dword [rsp + 0x498]
dec eax
mov dword [rsp + 0x498], eax
jmp 0x18003a01f
mov dword [rsp + 0x494], 7
mov dword [rsp + 0x478], 0x11
cmp dword [rsp + 0x478], 0
jle 0x18003a105
mov eax, dword [rsp + 0x478]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18003a0e7
mov dword [rsp + 0x494], 0
mov eax, dword [rsp + 0x478]
dec eax
mov dword [rsp + 0x478], eax
jmp 0x18003a0a5
mov dword [rsp + 0x494], 4
mov eax, dword [rsp + 0x478]
sub eax, 2
mov dword [rsp + 0x478], eax
jmp 0x18003a0a5
mov dword [rsp + 0x480], 4
mov dword [rsp + 0x490], 3
mov eax, dword [rsp + 0x490]
test eax, eax
jle 0x18003a189
mov eax, dword [rsp + 0x490]
cmp eax, 1
jle 0x18003a158
mov eax, dword [rsp + 0x480]
and eax, 0x1494
mov dword [rsp + 0x480], eax
mov eax, dword [rsp + 0x490]
sub eax, 2
mov dword [rsp + 0x490], eax
jmp 0x18003a11b
mov eax, dword [rsp + 0x480]
cmp eax, 0x805
jle 0x18003a177
mov eax, dword [rsp + 0x480]
and eax, 0x7e
mov dword [rsp + 0x480], eax
mov eax, dword [rsp + 0x490]
dec eax
mov dword [rsp + 0x490], eax
jmp 0x18003a11b
xor eax, eax
jmp 0x18003b1a3
mov rax, qword [0x180063c78]
mov dword [rax], 1
call fcn.180036a90
call fcn.180034560
lea rcx, [rsp + 0x60]
call fcn.18003b310
test eax, eax
je 0x18003a1c6
mov ecx, dword [0x180062004]
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x18003999a
mov qword [rsp + 0x418], 0
mov dword [rsp + 0x4ac], 8
mov dword [rsp + 0x4b4], 3
mov eax, dword [rsp + 0x4b4]
test eax, eax
jle 0x18003a256
mov eax, dword [rsp + 0x4b4]
cmp eax, 1
jle 0x18003a225
mov eax, dword [rsp + 0x4ac]
and eax, 0x1fed
mov dword [rsp + 0x4ac], eax
mov eax, dword [rsp + 0x4b4]
sub eax, 2
mov dword [rsp + 0x4b4], eax
jmp 0x18003a1e8
mov eax, dword [rsp + 0x4ac]
cmp eax, 0x805
jle 0x18003a244
mov eax, dword [rsp + 0x4ac]
and eax, 0x7e
mov dword [rsp + 0x4ac], eax
mov eax, dword [rsp + 0x4b4]
dec eax
mov dword [rsp + 0x4b4], eax
jmp 0x18003a1e8
mov dword [rsp + 0x4a0], 3
mov dword [rsp + 0x4bc], 0xf
cmp dword [rsp + 0x4bc], 0
jle 0x18003a2cd
mov eax, dword [rsp + 0x4bc]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18003a2af
mov dword [rsp + 0x4a0], 0
mov eax, dword [rsp + 0x4bc]
sub eax, 2
mov dword [rsp + 0x4bc], eax
jmp 0x18003a26c
mov dword [rsp + 0x4a0], 4
mov eax, dword [rsp + 0x4bc]
sub eax, 2
mov dword [rsp + 0x4bc], eax
jmp 0x18003a26c
mov dword [rsp + 0x4a4], 7
mov dword [rsp + 0x4a8], 0xd
cmp dword [rsp + 0x4a8], 0
jle 0x18003a343
mov eax, dword [rsp + 0x4a8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18003a326
mov dword [rsp + 0x4a4], 0
mov eax, dword [rsp + 0x4a8]
sub eax, 2
mov dword [rsp + 0x4a8], eax
jmp 0x18003a2e3
mov dword [rsp + 0x4a4], 4
mov eax, dword [rsp + 0x4a8]
dec eax
mov dword [rsp + 0x4a8], eax
jmp 0x18003a2e3
mov dword [rsp + 0x4b0], 3
mov dword [rsp + 0x4b8], 0xc
cmp dword [rsp + 0x4b8], 0
jle 0x18003a3ba
mov eax, dword [rsp + 0x4b8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18003a39c
mov dword [rsp + 0x4b0], 0
mov eax, dword [rsp + 0x4b8]
sub eax, 2
mov dword [rsp + 0x4b8], eax
jmp 0x18003a359
mov dword [rsp + 0x4b0], 4
mov eax, dword [rsp + 0x4b8]
sub eax, 2
mov dword [rsp + 0x4b8], eax
jmp 0x18003a359
mov qword [rsp + 0x420], 0
mov dword [rsp + 0x4c0], 0
jmp 0x18003a3e3
mov eax, dword [rsp + 0x4c0]
inc eax
mov dword [rsp + 0x4c0], eax
mov rax, qword [rsp + 0x38]
mov eax, dword [rax]
cmp dword [rsp + 0x4c0], eax
jae 0x18003af1f
movsxd rax, dword [rsp + 0x4c0]
imul rax, rax, 0x2d0
mov rcx, qword [rsp + 0x38]
cmp dword [rcx + rax + 8], 0
je 0x18003a414
jmp 0x18003a3d3
movsxd rax, dword [rsp + 0x4c0]
imul rax, rax, 0x2d0
mov rcx, qword [rsp + 0x38]
cmp dword [rcx + rax + 0x10], 2
je 0x18003a443
movsxd rax, dword [rsp + 0x4c0]
imul rax, rax, 0x2d0
mov rcx, qword [rsp + 0x38]
mov dword [rsp + 0x4cc], 6
mov dword [rsp + 0x4d8], 0xa
mov eax, dword [rsp + 0x4d8]
test eax, eax
jle 0x18003a4c9
mov eax, dword [rsp + 0x4d8]
cmp eax, 1
jle 0x18003a496
mov eax, dword [rsp + 0x4cc]
and eax, 0x1f29
mov dword [rsp + 0x4cc], eax
mov eax, dword [rsp + 0x4d8]
sub eax, 2
mov dword [rsp + 0x4d8], eax
jmp 0x18003a459
mov eax, dword [rsp + 0x4cc]
cmp eax, 0x80c
jle 0x18003a4b7
mov eax, dword [rsp + 0x4cc]
and eax, 0x85
mov dword [rsp + 0x4cc], eax
mov eax, dword [rsp + 0x4d8]
dec eax
mov dword [rsp + 0x4d8], eax
jmp 0x18003a459
mov dword [rsp + 0x4c8], 7
mov dword [rsp + 0x4d4], 0xd
cmp dword [rsp + 0x4d4], 0
jle 0x18003a53f
mov eax, dword [rsp + 0x4d4]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18003a522
mov dword [rsp + 0x4c8], 0
mov eax, dword [rsp + 0x4d4]
sub eax, 2
mov dword [rsp + 0x4d4], eax
jmp 0x18003a4df
mov dword [rsp + 0x4c8], 4
mov eax, dword [rsp + 0x4d4]
dec eax
mov dword [rsp + 0x4d4], eax
jmp 0x18003a4df
mov dword [rsp + 0x4c4], 4
mov dword [rsp + 0x4d0], 3
mov eax, dword [rsp + 0x4d0]
test eax, eax
jle 0x18003a5c3
mov eax, dword [rsp + 0x4d0]
cmp eax, 1
jle 0x18003a592
mov eax, dword [rsp + 0x4c4]
and eax, 0x1891
mov dword [rsp + 0x4c4], eax
mov eax, dword [rsp + 0x4d0]
sub eax, 2
mov dword [rsp + 0x4d0], eax
jmp 0x18003a555
mov eax, dword [rsp + 0x4c4]
cmp eax, 0x805
jle 0x18003a5b1
mov eax, dword [rsp + 0x4c4]
and eax, 0x7e
mov dword [rsp + 0x4c4], eax
mov eax, dword [rsp + 0x4d0]
dec eax
mov dword [rsp + 0x4d0], eax
jmp 0x18003a555
movsxd rax, dword [rsp + 0x4c0]
imul rax, rax, 0x2d0
mov rcx, qword [rsp + 0x38]
mov eax, dword [rcx + rax + 0x10]
mov dword [rsp + 0x58c], eax
cmp dword [rsp + 0x58c], 0
je 0x18003a60d
cmp dword [rsp + 0x58c], 1
je 0x18003a93e
cmp dword [rsp + 0x58c], 4
je 0x18003ac57
jmp 0x18003af1a
movsxd rax, dword [rsp + 0x4c0]
imul rax, rax, 0x2d0
mov rcx, qword [rsp + 0x38]
lea rax, [rcx + rax + 8]
mov rcx, rax
call fcn.18002e360
mov qword [rsp + 0x418], rax
mov dword [rsp + 0x4f4], 2
mov dword [rsp + 0x504], 0x10
cmp dword [rsp + 0x504], 0
jle 0x18003a6ac
mov eax, dword [rsp + 0x504]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18003a68e
mov dword [rsp + 0x4f4], 4
mov eax, dword [rsp + 0x504]
dec eax
mov dword [rsp + 0x504], eax
jmp 0x18003a64c
mov dword [rsp + 0x4f4], 4
mov eax, dword [rsp + 0x504]
sub eax, 2
mov dword [rsp + 0x504], eax
jmp 0x18003a64c
mov dword [rsp + 0x4dc], 2
mov dword [rsp + 0x4e0], 0xa
mov eax, dword [rsp + 0x4e0]
test eax, eax
jle 0x18003a732
mov eax, dword [rsp + 0x4e0]
cmp eax, 1
jle 0x18003a6ff
mov eax, dword [rsp + 0x4dc]
and eax, 0x2106
mov dword [rsp + 0x4dc], eax
mov eax, dword [rsp + 0x4e0]
sub eax, 2
mov dword [rsp + 0x4e0], eax
jmp 0x18003a6c2
mov eax, dword [rsp + 0x4dc]
cmp eax, 0x80c
jle 0x18003a720
mov eax, dword [rsp + 0x4dc]
and eax, 0x85
mov dword [rsp + 0x4dc], eax
mov eax, dword [rsp + 0x4e0]
dec eax
mov dword [rsp + 0x4e0], eax
jmp 0x18003a6c2
mov dword [rsp + 0x4f0], 3
mov dword [rsp + 0x500], 0x12
cmp dword [rsp + 0x500], 0
jle 0x18003a7a9
mov eax, dword [rsp + 0x500]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18003a78b
mov dword [rsp + 0x4f0], 4
mov eax, dword [rsp + 0x500]
sub eax, 2
mov dword [rsp + 0x500], eax
jmp 0x18003a748
mov dword [rsp + 0x4f0], 0
mov eax, dword [rsp + 0x500]
sub eax, 2
mov dword [rsp + 0x500], eax
jmp 0x18003a748
mov dword [rsp + 0x4e8], 9
mov dword [rsp + 0x4fc], 4
mov eax, dword [rsp + 0x4fc]
test eax, eax
jle 0x18003a82d
mov eax, dword [rsp + 0x4fc]
cmp eax, 1
jle 0x18003a7fc
mov eax, dword [rsp + 0x4e8]
and eax, 0x197d
mov dword [rsp + 0x4e8], eax
mov eax, dword [rsp + 0x4fc]
sub eax, 2
mov dword [rsp + 0x4fc], eax
jmp 0x18003a7bf
mov eax, dword [rsp + 0x4e8]
cmp eax, 0x806
jle 0x18003a81b
mov eax, dword [rsp + 0x4e8]
and eax, 0x7f
mov dword [rsp + 0x4e8], eax
mov eax, dword [rsp + 0x4fc]
dec eax
mov dword [rsp + 0x4fc], eax
jmp 0x18003a7bf
mov dword [rsp + 0x4ec], 7
mov dword [rsp + 0x4f8], 9
mov eax, dword [rsp + 0x4f8]
test eax, eax
jle 0x18003a8b3
mov eax, dword [rsp + 0x4f8]
cmp eax, 1
jle 0x18003a880
mov eax, dword [rsp + 0x4ec]
and eax, 0x19b6
mov dword [rsp + 0x4ec], eax
mov eax, dword [rsp + 0x4f8]
sub eax, 2
mov dword [rsp + 0x4f8], eax
jmp 0x18003a843
mov eax, dword [rsp + 0x4ec]
cmp eax, 0x80b
jle 0x18003a8a1
mov eax, dword [rsp + 0x4ec]
and eax, 0x84
mov dword [rsp + 0x4ec], eax
mov eax, dword [rsp + 0x4f8]
dec eax
mov dword [rsp + 0x4f8], eax
jmp 0x18003a843
mov dword [rsp + 0x4e4], 6
mov dword [rsp + 0x508], 0xa
mov eax, dword [rsp + 0x508]
test eax, eax
jle 0x18003a939
mov eax, dword [rsp + 0x508]
cmp eax, 1
jle 0x18003a906
mov eax, dword [rsp + 0x4e4]
and eax, 0x1f29
mov dword [rsp + 0x4e4], eax
mov eax, dword [rsp + 0x508]
sub eax, 2
mov dword [rsp + 0x508], eax
jmp 0x18003a8c9
mov eax, dword [rsp + 0x4e4]
cmp eax, 0x80c
jle 0x18003a927
mov eax, dword [rsp + 0x4e4]
and eax, 0x85
mov dword [rsp + 0x4e4], eax
mov eax, dword [rsp + 0x508]
dec eax
mov dword [rsp + 0x508], eax
jmp 0x18003a8c9
jmp 0x18003af1a
movsxd rax, dword [rsp + 0x4c0]
imul rax, rax, 0x2d0
mov rcx, qword [rsp + 0x38]
lea rax, [rcx + rax + 8]
mov rcx, rax
call fcn.18002ed10
mov qword [rsp + 0x420], rax
cmp qword [rsp + 0x420], 0
je 0x18003a980
mov rcx, qword [rsp + 0x420]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rsp + 0x510], 8
mov dword [rsp + 0x514], 0x12
cmp dword [rsp + 0x514], 0
jle 0x18003a9f6
mov eax, dword [rsp + 0x514]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18003a9d8
mov dword [rsp + 0x510], 4
mov eax, dword [rsp + 0x514]
dec eax
mov dword [rsp + 0x514], eax
jmp 0x18003a996
mov dword [rsp + 0x510], 0
mov eax, dword [rsp + 0x514]
sub eax, 2
mov dword [rsp + 0x514], eax
jmp 0x18003a996
mov dword [rsp + 0x528], 8
mov dword [rsp + 0x534], 3
mov eax, dword [rsp + 0x534]
test eax, eax
jle 0x18003aa7a
mov eax, dword [rsp + 0x534]
cmp eax, 1
jle 0x18003aa49
mov eax, dword [rsp + 0x528]
and eax, 0x1fed
mov dword [rsp + 0x528], eax
mov eax, dword [rsp + 0x534]
sub eax, 2
mov dword [rsp + 0x534], eax
jmp 0x18003aa0c
mov eax, dword [rsp + 0x528]
cmp eax, 0x805
jle 0x18003aa68
mov eax, dword [rsp + 0x528]
and eax, 0x7e
mov dword [rsp + 0x528], eax
mov eax, dword [rsp + 0x534]
dec eax
mov dword [rsp + 0x534], eax
jmp 0x18003aa0c
mov dword [rsp + 0x538], 2
mov dword [rsp + 0x51c], 0x13
cmp dword [rsp + 0x51c], 0
jle 0x18003aaf1
mov eax, dword [rsp + 0x51c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18003aad3
mov dword [rsp + 0x538], 4
mov eax, dword [rsp + 0x51c]
sub eax, 2
mov dword [rsp + 0x51c], eax
jmp 0x18003aa90
mov dword [rsp + 0x538], 4
mov eax, dword [rsp + 0x51c]
sub eax, 2
mov dword [rsp + 0x51c], eax
jmp 0x18003aa90
mov dword [rsp + 0x50c], 4
mov dword [rsp + 0x530], 0x11
cmp dword [rsp + 0x530], 0
jle 0x18003ab66
mov eax, dword [rsp + 0x530]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18003ab49
mov dword [rsp + 0x50c], 0
mov eax, dword [rsp + 0x530]
dec eax
mov dword [rsp + 0x530], eax
jmp 0x18003ab07
mov dword [rsp + 0x50c], 4
mov eax, dword [rsp + 0x530]
dec eax
mov dword [rsp + 0x530], eax
jmp 0x18003ab07
mov dword [rsp + 0x518], 8
mov dword [rsp + 0x524], 0x11
cmp dword [rsp + 0x524], 0
jle 0x18003abdc
mov eax, dword [rsp + 0x524]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18003abbe
mov dword [rsp + 0x518], 4
mov eax, dword [rsp + 0x524]
dec eax
mov dword [rsp + 0x524], eax
jmp 0x18003ab7c
mov dword [rsp + 0x518], 4
mov eax, dword [rsp + 0x524]
sub eax, 2
mov dword [rsp + 0x524], eax
jmp 0x18003ab7c
mov dword [rsp + 0x52c], 1
mov dword [rsp + 0x520], 0x10
cmp dword [rsp + 0x520], 0
jle 0x18003ac52
mov eax, dword [rsp + 0x520]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18003ac34
mov dword [rsp + 0x52c], 4
mov eax, dword [rsp + 0x520]
dec eax
mov dword [rsp + 0x520], eax
jmp 0x18003abf2
mov dword [rsp + 0x52c], 0
mov eax, dword [rsp + 0x520]
sub eax, 2
mov dword [rsp + 0x520], eax
jmp 0x18003abf2
jmp 0x18003af1a
movsxd rax, dword [rsp + 0x4c0]
imul rax, rax, 0x2d0
mov rcx, qword [rsp + 0x38]
lea rax, [rcx + rax + 8]
xor edx, edx
mov rcx, rax
call fcn.180030c50
mov qword [rsp + 0x420], rax
cmp qword [rsp + 0x420], 0
je 0x18003ac9b
mov rcx, qword [rsp + 0x420]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rsp + 0x560], 2
mov dword [rsp + 0x54c], 0x13
cmp dword [rsp + 0x54c], 0
jle 0x18003ad12
mov eax, dword [rsp + 0x54c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18003acf4
mov dword [rsp + 0x560], 4
mov eax, dword [rsp + 0x54c]
sub eax, 2
mov dword [rsp + 0x54c], eax
jmp 0x18003acb1
mov dword [rsp + 0x560], 4
mov eax, dword [rsp + 0x54c]
sub eax, 2
mov dword [rsp + 0x54c], eax
jmp 0x18003acb1
mov dword [rsp + 0x55c], 7
mov dword [rsp + 0x558], 0xa
mov eax, dword [rsp + 0x558]
test eax, eax
jle 0x18003ad98
mov eax, dword [rsp + 0x558]
cmp eax, 1
jle 0x18003ad65
mov eax, dword [rsp + 0x55c]
and eax, 0x23c7
mov dword [rsp + 0x55c], eax
mov eax, dword [rsp + 0x558]
sub eax, 2
mov dword [rsp + 0x558], eax
jmp 0x18003ad28
mov eax, dword [rsp + 0x55c]
cmp eax, 0x80c
jle 0x18003ad86
mov eax, dword [rsp + 0x55c]
and eax, 0x85
mov dword [rsp + 0x55c], eax
mov eax, dword [rsp + 0x558]
dec eax
mov dword [rsp + 0x558], eax
jmp 0x18003ad28
mov dword [rsp + 0x544], 3
mov dword [rsp + 0x550], 8
mov eax, dword [rsp + 0x550]
test eax, eax
jle 0x18003ae1e
mov eax, dword [rsp + 0x550]
cmp eax, 1
jle 0x18003adeb
mov eax, dword [rsp + 0x544]
and eax, 0x11d0
mov dword [rsp + 0x544], eax
mov eax, dword [rsp + 0x550]
sub eax, 2
mov dword [rsp + 0x550], eax
jmp 0x18003adae
mov eax, dword [rsp + 0x544]
cmp eax, 0x80a
jle 0x18003ae0c
mov eax, dword [rsp + 0x544]
and eax, 0x83
mov dword [rsp + 0x544], eax
mov eax, dword [rsp + 0x550]
dec eax
mov dword [rsp + 0x550], eax
jmp 0x18003adae
mov dword [rsp + 0x554], 0
mov dword [rsp + 0x540], 0x15
cmp dword [rsp + 0x540], 0
jle 0x18003ae94
mov eax, dword [rsp + 0x540]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18003ae76
mov dword [rsp + 0x554], 4
mov eax, dword [rsp + 0x540]
dec eax
mov dword [rsp + 0x540], eax
jmp 0x18003ae34
mov dword [rsp + 0x554], 0
mov eax, dword [rsp + 0x540]
sub eax, 2
mov dword [rsp + 0x540], eax
jmp 0x18003ae34
mov dword [rsp + 0x548], 2
mov dword [rsp + 0x53c], 5
mov eax, dword [rsp + 0x53c]
test eax, eax
jle 0x18003af1a
mov eax, dword [rsp + 0x53c]
cmp eax, 1
jle 0x18003aee7
mov eax, dword [rsp + 0x548]
and eax, 0x204d
mov dword [rsp + 0x548], eax
mov eax, dword [rsp + 0x53c]
sub eax, 2
mov dword [rsp + 0x53c], eax
jmp 0x18003aeaa
mov eax, dword [rsp + 0x548]
cmp eax, 0x807
jle 0x18003af08
mov eax, dword [rsp + 0x548]
and eax, 0x80
mov dword [rsp + 0x548], eax
mov eax, dword [rsp + 0x53c]
dec eax
mov dword [rsp + 0x53c], eax
jmp 0x18003aeaa
jmp 0x18003a3d3
mov ecx, dword [0x180062004]
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x18003999a
mov dword [rsp + 0x568], 8
mov dword [rsp + 0x57c], 0x11
cmp dword [rsp + 0x57c], 0
jle 0x18003afa6
mov eax, dword [rsp + 0x57c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18003af88
mov dword [rsp + 0x568], 4
mov eax, dword [rsp + 0x57c]
dec eax
mov dword [rsp + 0x57c], eax
jmp 0x18003af46
mov dword [rsp + 0x568], 4
mov eax, dword [rsp + 0x57c]
sub eax, 2
mov dword [rsp + 0x57c], eax
jmp 0x18003af46
mov dword [rsp + 0x578], 7
mov dword [rsp + 0x588], 0xb
mov eax, dword [rsp + 0x588]
test eax, eax
jle 0x18003b02c
mov eax, dword [rsp + 0x588]
cmp eax, 1
jle 0x18003aff9
mov eax, dword [rsp + 0x578]
and eax, 0x66b
mov dword [rsp + 0x578], eax
mov eax, dword [rsp + 0x588]
sub eax, 2
mov dword [rsp + 0x588], eax
jmp 0x18003afbc
mov eax, dword [rsp + 0x578]
cmp eax, 0x80d
jle 0x18003b01a
mov eax, dword [rsp + 0x578]
and eax, 0x86
mov dword [rsp + 0x578], eax
mov eax, dword [rsp + 0x588]
dec eax
mov dword [rsp + 0x588], eax
jmp 0x18003afbc
mov dword [rsp + 0x56c], 7
mov dword [rsp + 0x574], 0xd
cmp dword [rsp + 0x574], 0
jle 0x18003b0a2
mov eax, dword [rsp + 0x574]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18003b085
mov dword [rsp + 0x56c], 0
mov eax, dword [rsp + 0x574]
sub eax, 2
mov dword [rsp + 0x574], eax
jmp 0x18003b042
mov dword [rsp + 0x56c], 4
mov eax, dword [rsp + 0x574]
dec eax
mov dword [rsp + 0x574], eax
jmp 0x18003b042
mov dword [rsp + 0x570], 7
mov dword [rsp + 0x580], 9
mov eax, dword [rsp + 0x580]
test eax, eax
jle 0x18003b128
mov eax, dword [rsp + 0x580]
cmp eax, 1
jle 0x18003b0f5
mov eax, dword [rsp + 0x570]
and eax, 0x19b6
mov dword [rsp + 0x570], eax
mov eax, dword [rsp + 0x580]
sub eax, 2
mov dword [rsp + 0x580], eax
jmp 0x18003b0b8
mov eax, dword [rsp + 0x570]
cmp eax, 0x80b
jle 0x18003b116
mov eax, dword [rsp + 0x570]
and eax, 0x84
mov dword [rsp + 0x570], eax
mov eax, dword [rsp + 0x580]
dec eax
mov dword [rsp + 0x580], eax
jmp 0x18003b0b8
mov dword [rsp + 0x564], 4
mov dword [rsp + 0x584], 0x11
cmp dword [rsp + 0x584], 0
jle 0x18003b19e
mov eax, dword [rsp + 0x584]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18003b180
mov dword [rsp + 0x564], 4
mov eax, dword [rsp + 0x584]
dec eax
mov dword [rsp + 0x584], eax
jmp 0x18003b13e
mov dword [rsp + 0x564], 4
mov eax, dword [rsp + 0x584]
sub eax, 2
mov dword [rsp + 0x584], eax
jmp 0x18003b13e
mov eax, 1
mov rcx, qword [rsp + 0x590]
xor rcx, rsp
call fcn.180049ea0
add rsp, 0x5a8
pop rdi
pop rsi
ret