Function at 0x1800aba40
Capabilities:
Get common file path

Disassembly:
cmp r14d, 0x3fb
ja 0x180030013
je 0x18002fff9
movsxd rcx, dword [rbp + 0x28]
mov rsi, rcx
cmp r14d, 0x1f0
ja 0x18002fc51
je 0x18002fa17
mov eax, r14d
sub eax, 0x66
je 0x18002fa09
sub eax, 0x81
je 0x18002f971
sub eax, 0x44
je 0x18002f884
mov rsi, qword [rbp + 0x10]
cmp eax, 0x81
jne 0x18002f8bc
movsxd rax, dword [rsi]
shl rax, 2
lea rcx, [rax + 0xf]
cmp rcx, rax
ja 0x18002f84b
mov rcx, rdx
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.1800bf9d0
mov r11, qword [rbp + 0x30]
sub rsp, rcx
xorps xmm9, xmm9
xorps xmm10, xmm10
movss dword [rbp + 0x20], xmm9
xorps xmm6, xmm6
movss dword [rbp + 0x24], xmm10
movaps xmm8, xmm2
lea rax, [rsp + 0x40]
mov qword [rbp + 0x58], rax
jmp 0x18002f8b8
lea rax, [rcx*4]
lea rcx, [rax + 0xf]
cmp rcx, rax
ja 0x18002f898
mov rcx, rdx
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.1800bf9d0
sub rsp, rcx
lea rax, [rsp + 0x40]
mov qword [rbp + 0x38], rax
mov r11, qword [rbp + 0x30]
mov rsi, qword [rbp + 0x10]
mov r10, qword [rbp + 0x18]
mov eax, dword [rbp]
movss xmm2, dword [0x18034d2e8]
lea rcx, [0x180000000]
add r14d, 0xc5
movabs rdx, 0xffffffffffffff0
mov r9d, 0x27
cmp r14d, eax
jb 0x18002f7e0
mov rcx, qword [rbp + 0x98]
xor rcx, rbp
call fcn.1800bfa40
mov rbx, qword [rbp + 0x170]
mov rsi, qword [rbp + 0x178]
mov rdi, qword [rbp + 0x180]
movaps xmm6, xmmword [rbp + 0x130]
movaps xmm7, xmmword [rbp + 0x120]
movaps xmm8, xmmword [rbp + 0x110]
movaps xmm9, xmmword [rbp + 0x100]
movaps xmm10, xmmword [rbp + 0xf0]
movaps xmm11, xmmword [rbp + 0xe0]
movaps xmm12, xmmword [rbp + 0xd0]
movaps xmm13, xmmword [rbp + 0xc0]
movaps xmm14, xmmword [rbp + 0xb0]
movaps xmm15, xmmword [rbp + 0xa0]
lea rsp, [rbp + 0x140]
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rsi, qword [rbp + 0x10]
movsxd rcx, dword [rsi]
shl rcx, 2
lea rax, [rcx + 0xf]
cmp rax, rcx
ja 0x18002f988
mov rax, rdx
and rax, 0xfffffffffffffff0
call fcn.1800bf9d0
sub rsp, rax
lea rax, [rcx + 0xf]
lea r13, [rsp + 0x40]
mov qword [rbp + 0x68], r13
cmp rax, rcx
ja 0x18002f9a9
mov rax, rdx
and rax, 0xfffffffffffffff0
call fcn.1800bf9d0
sub rsp, rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x50], rax
lea rax, [rcx + 0xf]
cmp rax, rcx
ja 0x18002f9ca
mov rax, rdx
and rax, 0xfffffffffffffff0
call fcn.1800bf9d0
sub rsp, rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x60], rax
lea rax, [rcx + 0xf]
cmp rax, rcx
ja 0x18002f9eb
mov rax, rdx
and rax, 0xfffffffffffffff0
call fcn.1800bf9d0
mov r11, qword [rbp + 0x30]
sub rsp, rax
lea r12, [rsp + 0x40]
mov qword [rbp + 0x48], r12
jmp 0x18002f8b8
mov rsi, qword [rbp + 0x10]
mov eax, dword [rsi]
mov dword [rbp + 0x28], eax
jmp 0x18002f8bc
mov rdx, qword [rbp + 0x10]
lea rax, [rbp + 0x70]
mov qword [rsp + 0x30], rax
lea r8, [rbp + 0x78]
mov rax, qword [rbp + 0x190]
mov r9d, reloc.SHELL32.dll_SHSetFolderPathA
mov dword [rbp + 0x78], ecx
lea rcx, [rbp + 0x80]
mov rdx, qword [rdx + 0x30]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r10
mov dword [rbp + 0x70], 0xffffffff
mov dword [rbp + 0x80], 0x430c0000
call fcn.18002f6b0
mov eax, dword [rbp + 0x28]
xor r9d, r9d
mov r10, qword [rbp + 0x38]
mov r11, qword [rbp + 0x190]
test eax, eax
jle 0x18002fb2e
cmp eax, 0x10
jb 0x18002fb2e
dec eax
movsxd rcx, eax
lea rax, [r11 + rcx*4]
lea rdx, [r10 + rcx*4]
cmp r10, rax
ja 0x18002faa0
cmp rdx, r11
jae 0x18002fb2e
mov r8, qword [rbp + 0x18]
lea rax, [r8 + rcx*4]
cmp r10, rax
ja 0x18002fab6
cmp rdx, r8
jae 0x18002fb32
mov eax, dword [rbp + 0x28]
mov ecx, eax
and ecx, 0x8000000f
jge 0x18002faca
dec ecx
or ecx, 0xfffffff0
inc ecx
sub eax, ecx
mov rdx, r10
mov rcx, qword [rbp + 0x18]
sub rcx, r11
movsxd r8, eax
sub rdx, r11
lea rax, [r11 + 0x10]
movups xmm0, xmmword [rax - 0x10]
add r9, 0x10
movups xmm1, xmmword [rcx + rax - 0x10]
movups xmm2, xmmword [rcx + rax]
subps xmm1, xmm0
movups xmm0, xmmword [rax]
subps xmm2, xmm0
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rdx + rax - 0x10], xmm1
movups xmm1, xmmword [rcx + rax + 0x10]
movups xmmword [rdx + rax], xmm2
movups xmm2, xmmword [rcx + rax + 0x20]
subps xmm1, xmm0
movups xmm0, xmmword [rax + 0x20]
subps xmm2, xmm0
movups xmmword [rdx + rax + 0x10], xmm1
movups xmmword [rdx + rax + 0x20], xmm2
add rax, 0x40
cmp r9, r8
jl 0x18002fae0
mov r8, qword [rbp + 0x18]
cmp r9, rsi
jge 0x18002fbec
mov rax, rsi
sub rax, r9
cmp rax, 4
jl 0x18002fbbb
mov rcx, r8
lea rax, [r9 + 1]
mov r8, rsi
lea rax, [r11 + rax*4]
sub r8, r9
mov rdx, r10
sub r8, 4
sub rcx, r11
shr r8, 2
sub rdx, r11
inc r8
lea r9, [r9 + r8*4]
movss xmm0, dword [rcx + rax - 4]
subss xmm0, dword [rax - 4]
movss dword [rdx + rax - 4], xmm0
movss xmm1, dword [rax + rcx]
subss xmm1, dword [rax]
movss dword [rax + rdx], xmm1
movss xmm0, dword [rcx + rax + 4]
subss xmm0, dword [rax + 4]
movss dword [rdx + rax + 4], xmm0
movss xmm1, dword [rcx + rax + 8]
subss xmm1, dword [rax + 8]
movss dword [rdx + rax + 8], xmm1
add rax, 0x10
sub r8, 1
jne 0x18002fb70
cmp r9, rsi
jge 0x18002fbec
mov rcx, qword [rbp + 0x18]
lea rax, [r11 + r9*4]
mov rdx, r10
sub rcx, r11
sub rdx, r11
sub rsi, r9
movss xmm0, dword [rax + rcx]
subss xmm0, dword [rax]
movss dword [rax + rdx], xmm0
add rax, 4
sub rsi, 1
jne 0x18002fbd4
mov rsi, qword [rbp + 0x10]
lea r8, [rbp + 0x90]
mov r9d, reloc.SHELL32.dll_SHSetFolderPathA
mov rax, qword [rsi + 8]
mov rdx, qword [rsi + 0x30]
mov ecx, dword [rax + 0x80]
mov eax, dword [rbp + 0x28]
mov dword [rbp + 0x90], eax
lea rax, [rbp + 0x88]
mov qword [rsp + 0x30], rax
mov dword [rbp + 0x88], ecx
lea rcx, [rbp + 8]
mov qword [rsp + 0x28], r11
mov qword [rsp + 0x20], r10
mov dword [rbp + 8], 0
call fcn.18002f6b0
movsd xmm3, qword [0x18034d340]
mov r11, qword [rbp + 0x30]
jmp 0x18002f8b8
mov eax, r14d
sub eax, 0x271
je 0x18002ffdd
sub eax, 0x44
je 0x18002fe7c
sub eax, 0x81
je 0x18002fe37
cmp eax, 0x44
jne 0x18002fe73
xor r10d, r10d
cmp rsi, 4
jl 0x18002fdcb
mov rax, qword [rbp + 0x190]
lea rdx, [rcx - 4]
mov r9, qword [rbp + 0x38]
mov r13d, 0x27
mov r12, qword [rbp + 0x10]
sub r9, rax
shr rdx, 2
inc rdx
lea r8, [rax + 4]
lea r10, [rdx*4]
nop dword [rax + rax]
movss xmm0, dword [r8 - 4]
movss xmm1, dword [r8]
cvtps2pd xmm0, xmm0
cvtps2pd xmm1, xmm1
addsd xmm0, xmm3
addsd xmm1, xmm3
cvttsd2si ecx, xmm0
cmp ecx, 0x28
cmovge ecx, r13d
xor eax, eax
test ecx, ecx
cmovns eax, ecx
movsxd rcx, eax
mov rax, qword [r12 + 8]
movss xmm0, dword [rax + rcx*4 + 0x150]
addss xmm0, dword [r8 + r9 - 4]
cvttsd2si ecx, xmm1
movss xmm1, dword [r8 + 4]
cmp ecx, 0x28
movss dword [r8 - 4], xmm0
cvtps2pd xmm1, xmm1
cmovge ecx, r13d
xor eax, eax
test ecx, ecx
cmovns eax, ecx
movsxd rcx, eax
mov rax, qword [r12 + 8]
addsd xmm1, xmm3
movss xmm0, dword [rax + rcx*4 + 0x150]
addss xmm0, dword [r8 + r9]
cvttsd2si ecx, xmm1
movss xmm1, dword [r8 + 8]
cmp ecx, 0x28
movss dword [r8], xmm0
cvtps2pd xmm1, xmm1
cmovge ecx, r13d
xor eax, eax
test ecx, ecx
cmovns eax, ecx
movsxd rcx, eax
mov rax, qword [r12 + 8]
addsd xmm1, xmm3
movss xmm0, dword [rax + rcx*4 + 0x150]
addss xmm0, dword [r8 + r9 + 4]
cvttsd2si ecx, xmm1
movss dword [r8 + 4], xmm0
cmp ecx, 0x28
cmovge ecx, r13d
xor eax, eax
test ecx, ecx
cmovns eax, ecx
movsxd rcx, eax
mov rax, qword [r12 + 8]
movss xmm0, dword [rax + rcx*4 + 0x150]
addss xmm0, dword [r8 + r9 + 8]
movss dword [r8 + 8], xmm0
add r8, 0x10
sub rdx, 1
jne 0x18002fcc0
mov r13, qword [rbp + 0x68]
lea r9d, [rdx + 0x27]
mov r12, qword [rbp + 0x48]
cmp r10, rsi
jge 0x18002f8b4
mov rax, qword [rbp + 0x190]
mov r8, qword [rbp + 0x38]
mov r13, qword [rbp + 0x10]
sub r8, rax
sub rsi, r10
lea rdx, [rax + r10*4]
movss xmm0, dword [rdx]
cvtps2pd xmm0, xmm0
addsd xmm0, xmm3
cvttsd2si ecx, xmm0
cmp ecx, 0x28
cmovge ecx, r9d
xor eax, eax
test ecx, ecx
cmovns eax, ecx
movsxd rcx, eax
mov rax, qword [r13 + 8]
movss xmm0, dword [rax + rcx*4 + 0x150]
addss xmm0, dword [rdx + r8]
movss dword [rdx], xmm0
add rdx, 4
sub rsi, 1
jne 0x18002fded
mov r13, qword [rbp + 0x68]
jmp 0x18002f8b4
movss xmm0, dword [r11]
movaps xmm1, xmm2
mov rax, qword [rbp + 0x190]
addss xmm0, dword [rax]
maxss xmm1, xmm0
movaps xmm0, xmm1
movss dword [rbp + 0x44], xmm1
mulss xmm0, xmm1
cvtps2pd xmm1, xmm0
mulsd xmm1, xmm3
cvtpd2ps xmm0, xmm1
movss dword [rbp + 0x40], xmm0
addss xmm11, xmm0
addss xmm7, xmm0
mov rsi, qword [rbp + 0x10]
jmp 0x18002f8bc
mov r9, qword [rbp + 0x38]
xor r8d, r8d
test ecx, ecx
jle 0x18002ff1a
cmp ecx, 0x10
jb 0x18002ff1a
lea eax, [rcx - 1]
movsxd rcx, eax
lea rax, [r10 + rcx*4]
lea rdx, [r9 + rcx*4]
cmp r9, rax
ja 0x18002feac
cmp rdx, r10
jae 0x18002ff1a
mov eax, dword [rbp + 0x28]
mov ecx, eax
and ecx, 0x8000000f
jge 0x18002fec0
dec ecx
or ecx, 0xfffffff0
inc ecx
sub eax, ecx
mov rcx, r10
movsxd rdx, eax
sub rcx, r9
lea rax, [r9 + 0x10]
nop
movups xmm0, xmmword [rax - 0x10]
add r8, 0x10
movups xmm1, xmmword [rcx + rax - 0x10]
movups xmm2, xmmword [rcx + rax]
subps xmm1, xmm0
movups xmmword [rax - 0x10], xmm1
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rcx + rax + 0x10]
subps xmm2, xmm0
movups xmmword [rax], xmm2
movups xmm0, xmmword [rax + 0x10]
subps xmm1, xmm0
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmm1, xmmword [rcx + rax + 0x20]
subps xmm1, xmm0
movups xmmword [rax + 0x20], xmm1
add rax, 0x40
cmp r8, rdx
jl 0x18002fed0
cmp r8, rsi
jge 0x18002fe73
mov rax, rsi
sub rax, r8
cmp rax, 4
jl 0x18002ffa7
lea rax, [r8 + 1]
mov rdx, rsi
sub rdx, r8
lea rax, [r9 + rax*4]
sub rdx, 4
mov rcx, r10
shr rdx, 2
sub rcx, r9
inc rdx
lea r8, [r8 + rdx*4]
nop dword [rax]
nop word [rax + rax]
movss xmm0, dword [rcx + rax - 4]
subss xmm0, dword [rax - 4]
movss dword [rax - 4], xmm0
movss xmm1, dword [rax + rcx]
subss xmm1, dword [rax]
movss dword [rax], xmm1
movss xmm0, dword [rcx + rax + 4]
subss xmm0, dword [rax + 4]
movss dword [rax + 4], xmm0
movss xmm1, dword [rcx + rax + 8]
subss xmm1, dword [rax + 8]
movss dword [rax + 8], xmm1
add rax, 0x10
sub rdx, 1
jne 0x18002ff60
cmp r8, rsi
jge 0x18002fe73
mov rcx, r10
lea rax, [r9 + r8*4]
sub rcx, r9
sub rsi, r8
movss xmm0, dword [rax + rcx]
subss xmm0, dword [rax]
movss dword [rax], xmm0
add rax, 4
sub rsi, 1
jne 0x18002ffbd
mov rsi, qword [rbp + 0x10]
jmp 0x18002f8bc
mov rsi, qword [rbp + 0x10]
xorps xmm14, xmm14
xorps xmm13, xmm13
xorps xmm12, xmm12
xorps xmm7, xmm7
xorps xmm11, xmm11
jmp 0x18002f8bc
movss xmm0, dword [rbp + 0x44]
mulss xmm0, dword [rbp + 0x40]
movss dword [r13], xmm11
addss xmm13, xmm0
jmp 0x18002f8bf
movsxd r9, r15d
cmp r14d, 0x7d4
ja 0x1800306d1
je 0x1800306c6
cmp r14d, 0x4c0
je 0x1800306a5
cmp r14d, 0x585
je 0x1800303cc
cmp r14d, 0x64a
je 0x1800301fd
cmp r14d, 0x70f
jne 0x18002f8bf
mov r9, qword [rbp + 0x198]
xor r15d, r15d
xorps xmm15, xmm15
nop dword [rax + rax]
mov r8d, 0x107
nop word [rax + rax]
cmp r8d, 0x107
je 0x1800301c6
cmp r8d, 0x8bb8
je 0x180030197
cmp r8d, 0x11669
je 0x18003015e
cmp r8d, 0x1a11a
je 0x180030105
cmp r8d, 0x22bcb
jne 0x1800301d8
movaps xmm0, xmm7
movaps xmm6, xmm15
mulss xmm6, xmm10
movaps xmm8, xmm12
mulss xmm0, xmm7
addss xmm6, xmm9
mulss xmm8, xmm11
subss xmm8, xmm0
movss xmm0, dword [r9]
divss xmm6, xmm8
movaps xmm1, xmm6
subss xmm1, dword [r11]
comiss xmm0, xmm1
jbe 0x1800301d8
movss dword [r9], xmm1
jmp 0x1800301d8
mov r10, qword [rbp + 0x58]
movaps xmm9, xmm13
movsxd rax, edi
mov rcx, r10
shl rax, 2
movsxd rdx, ebx
sub rcx, rax
mulss xmm9, xmm12
movss xmm14, dword [r10 + rdx*4]
subss xmm14, dword [rcx]
movaps xmm0, xmm14
movaps xmm10, xmm14
mulss xmm0, xmm7
mulss xmm10, xmm11
subss xmm9, xmm0
movaps xmm0, xmm13
mulss xmm0, xmm7
subss xmm10, xmm0
movss dword [rbp + 0x20], xmm9
movss dword [rbp + 0x24], xmm10
jmp 0x1800301d8
mov rdx, qword [rbp + 0x50]
movsxd rcx, ebx
movsxd rax, edi
neg rax
movss xmm7, dword [rdx + rcx*4]
subss xmm7, dword [rdx + rax*4]
mov rdx, qword [rbp + 0x60]
movss xmm12, dword [rdx + rax*4]
addss xmm12, dword [rdx + rcx*4]
mov rdx, qword [rbp + 0x48]
movss xmm13, dword [rdx + rax*4]
addss xmm13, dword [rdx + rcx*4]
jmp 0x1800301d8
mov rax, qword [rbp + 0x1a0]
mov edi, ebx
sub edi, dword [rax]
jns 0x1800306bb
movsxd rax, edi
mov rcx, r13
shl rax, 2
sub rcx, rax
movsxd rax, ebx
movss xmm11, dword [rcx]
addss xmm11, dword [r13 + rax*4]
jmp 0x1800301d8
mov rax, qword [rbp + 0x1a0]
mov eax, dword [rax]
cdq
sub eax, edx
sar eax, 1
lea ebx, [r15 + rax]
add r8d, 0x8ab1
cmp r8d, 0x2b575
jbe 0x180030080
inc r15d
addss xmm15, xmm2
add r9, 4
jmp 0x180030070
lea r8, [r10 + r9*4]
mov r10, qword [rbp + 0x198]
sub r10, qword [rbp + 0x18]
nop dword [rax]
mov edx, 5
cmp edx, 5
ja case.default.0x180030231
mov eax, edx
mov ecx, dword [rcx + rax*4 + 0x308cc]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
xorps xmm0, xmm0
maxss xmm0, xmm6
movaps xmm1, xmm0
movaps xmm6, xmm0
subss xmm1, dword [r11]
movss dword [r10 + r8], xmm1
jmp 0x180030337
mov eax, dword [r8]
mov edi, eax
sar edi, 0x10
movzx ebx, ax
jmp 0x180030337
mov eax, dword [rsi]
cmp ebx, eax
jge 0x180030365
movsxd rax, ebx
movsxd rcx, edi
movss xmm11, dword [r13 + rax*4]
subss xmm11, dword [r13 + rcx*4]
jmp 0x180030337
mov r11, qword [rbp + 0x50]
movsxd rcx, ebx
movsxd rax, edi
movss xmm7, dword [r11 + rcx*4]
subss xmm7, dword [r11 + rax*4]
mov r11, qword [rbp + 0x60]
movss xmm13, dword [r12 + rcx*4]
subss xmm13, dword [r12 + rax*4]
movss xmm12, dword [r11 + rcx*4]
subss xmm12, dword [r11 + rax*4]
mov r11, qword [rbp + 0x30]
jmp 0x180030337
mov r11, qword [rbp + 0x58]
movaps xmm9, xmm13
movsxd rax, ebx
movsxd rcx, edi
mulss xmm9, xmm12
movss xmm14, dword [r11 + rax*4]
subss xmm14, dword [r11 + rcx*4]
mov r11, qword [rbp + 0x30]
movaps xmm0, xmm14
movaps xmm10, xmm14
mulss xmm0, xmm7
mulss xmm10, xmm11
subss xmm9, xmm0
movaps xmm0, xmm13
mulss xmm0, xmm7
subss xmm10, xmm0
movss dword [rbp + 0x20], xmm9
movss dword [rbp + 0x24], xmm10
jmp 0x180030337
movaps xmm8, xmm12
movaps xmm0, xmm7
movaps xmm6, xmm15
mulss xmm8, xmm11
mulss xmm6, xmm10
mulss xmm0, xmm7
addss xmm6, xmm9
subss xmm8, xmm0
divss xmm6, xmm8
lea rcx, [0x180000000]
dec edx
lea eax, [rdx + 0x111]
cmp eax, 0x110
ja 0x180030215
inc r15d
addss xmm15, xmm2
inc r9
add r8, 4
jmp 0x180030210
mov r14d, 0x64a
cmp r15d, eax
jge 0x1800303b7
mov rax, qword [rbp + 0x198]
lea rax, [rax + r9*4]
nop dword [rax + rax]
movaps xmm0, xmm15
xorps xmm6, xmm6
mulss xmm0, xmm10
addss xmm15, xmm2
inc r15d
addss xmm0, xmm9
divss xmm0, xmm8
maxss xmm6, xmm0
movaps xmm0, xmm6
subss xmm0, dword [r11]
movss dword [rax], xmm0
add rax, 4
cmp r15d, dword [rsi]
jl 0x180030380
mov rax, qword [rbp + 0x1a0]
cmp dword [rax], 0
jle 0x18002f8ee
jmp 0x18002f8b8
mov r11, qword [rbp + 0x48]
mov r10d, 1
mov rsi, qword [rbp + 0x58]
movaps xmm1, xmm2
mov rax, qword [rbp + 0x10]
movss dword [r11], xmm13
movss dword [rsi], xmm14
cmp dword [rax], r10d
jle 0x180030522
mov r15, qword [rbp + 0x190]
lea r9, [rsi + 4]
mov r14, qword [rbp + 0x60]
sub r15, rsi
movss xmm9, dword [rbp + 0x44]
sub r11, rsi
movss xmm10, dword [rbp + 0x40]
mov r12, r13
mov r13, qword [rbp + 0x30]
sub r12, rsi
mov rsi, qword [rbp + 0x50]
sub rsi, qword [rbp + 0x58]
sub r14, qword [rbp + 0x58]
nop dword [rax + rax]
xor edx, edx
lea r8d, [rdx + 7]
cmp edx, 6
ja case.default.0x180030450
mov ecx, dword [rcx + rdx*4 + 0x308e4]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
movaps xmm10, xmm9
mulss xmm10, xmm9
movaps xmm0, xmm10
addss xmm11, xmm10
mulss xmm0, xmm1
addss xmm7, xmm0
mulss xmm0, xmm1
addss xmm12, xmm0
jmp 0x1800304d3
movss xmm0, dword [r15 + r9]
movaps xmm9, xmm2
addss xmm0, dword [r13]
maxss xmm9, xmm0
jmp 0x1800304d3
movss dword [r9], xmm14
jmp 0x1800304d3
movaps xmm0, xmm9
mulss xmm0, xmm10
addss xmm13, xmm0
jmp 0x1800304d3
movss dword [r11 + r9], xmm13
jmp 0x1800304d3
movaps xmm0, xmm10
movss dword [r12 + r9], xmm11
mulss xmm0, xmm1
mulss xmm0, xmm9
addss xmm14, xmm0
jmp 0x1800304d3
movss dword [rsi + r9], xmm7
movss dword [r14 + r9], xmm12
lea rcx, [0x180000000]
inc edx
sub r8, 1
jne 0x180030436
mov rax, qword [rbp + 0x10]
addss xmm1, xmm2
inc r10d
movss dword [rbp + 0x40], xmm10
add r9, 4
movss dword [rbp + 0x44], xmm9
cmp r10d, dword [rax]
jl 0x180030430
movss xmm9, dword [rbp + 0x20]
movss xmm10, dword [rbp + 0x24]
mov r13, qword [rbp + 0x68]
mov rsi, qword [rbp + 0x58]
mov r11, qword [rbp + 0x48]
mov r8, qword [rbp + 0x18]
xor r15d, r15d
mov r9, qword [rbp + 0x198]
xorps xmm15, xmm15
sub r9, r8
nop word [rax + rax]
mov edx, 5
cmp edx, 5
ja case.default.0x180030561
mov eax, edx
mov ecx, dword [rcx + rax*4 + 0x30900]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov rax, qword [rbp + 0x30]
xorps xmm0, xmm0
maxss xmm0, xmm6
movaps xmm1, xmm0
movaps xmm6, xmm0
subss xmm1, dword [rax]
movss dword [r8 + r9], xmm1
jmp case.default.0x180030561
movzx ebx, word [r8]
mov r10, qword [rbp + 0x50]
movsxd rcx, edi
neg rcx
movss xmm7, dword [r10 + rbx*4]
movss xmm11, dword [r13 + rcx*4]
addss xmm11, dword [r13 + rbx*4]
subss xmm7, dword [r10 + rcx*4]
jmp case.default.0x180030561
movsx edi, word [r8 + 2]
test edi, edi
js case.default.0x180030561
mov r12, qword [rbp + 0x48]
mov r14d, 0x585
jmp 0x18002f8b0
mov r10, qword [rbp + 0x60]
movsxd rax, edi
mov rcx, r10
shl rax, 2
sub rcx, rax
movsxd rax, ebx
movss xmm12, dword [rcx]
addss xmm12, dword [r10 + rax*4]
jmp case.default.0x180030561
movaps xmm8, xmm12
movaps xmm0, xmm7
movaps xmm6, xmm15
mulss xmm8, xmm11
mulss xmm6, xmm10
mulss xmm0, xmm7
addss xmm6, xmm9
subss xmm8, xmm0
divss xmm6, xmm8
jmp case.default.0x180030561
movsxd rax, ebx
movsxd rcx, edi
neg rcx
movss xmm14, dword [rsi + rax*4]
movss xmm13, dword [r11 + rcx*4]
addss xmm13, dword [r11 + rax*4]
subss xmm14, dword [rsi + rcx*4]
movaps xmm9, xmm13
movaps xmm0, xmm14
mulss xmm9, xmm12
mulss xmm0, xmm7
movaps xmm10, xmm14
mulss xmm10, xmm11
subss xmm9, xmm0
movaps xmm0, xmm13
mulss xmm0, xmm7
subss xmm10, xmm0
movss dword [rbp + 0x20], xmm9
movss dword [rbp + 0x24], xmm10
dec edx
lea rcx, [0x180000000]
lea eax, [rdx + 0xf6]
cmp eax, 0xf5
ja 0x180030545
inc r15d
addss xmm15, xmm2
add r8, 4
lea rcx, [0x180000000]
jmp 0x180030540
mov rax, qword [rbp + 0x50]
movss dword [rax], xmm7
mov rax, qword [rbp + 0x60]
movss dword [rax], xmm12
jmp 0x18002f8bc
mov r12, qword [rbp + 0x48]
mov r10, qword [rbp + 0x18]
mov eax, dword [rbp]
mov r14d, 0x7d4
jmp 0x18002f8bf
cmp r14d, 0x899
je 0x18003074e
cmp r14d, 0x95e
je 0x1800308be
cmp r14d, 0xa23
jne 0x18002f8bf
cmp r15d, dword [rsi]
jge 0x18002f8bf
mov rax, qword [rbp + 0x198]
lea rax, [rax + r9*4]
nop dword [rax + rax]
movss xmm0, dword [rax]
movaps xmm6, xmm15
mulss xmm6, xmm10
addss xmm6, xmm9
divss xmm6, xmm8
movaps xmm1, xmm6
subss xmm1, dword [r11]
comiss xmm0, xmm1
jbe 0x180030738
movss dword [rax], xmm1
inc r15d
addss xmm15, xmm2
add rax, 4
cmp r15d, dword [rsi]
jl 0x180030710
jmp 0x18002f8bc
mov rax, qword [rbp + 0x198]
lea r9, [rax + r9*4]
nop dword [rax]
xor r8d, r8d
cmp r8d, 5
ja case.default.0x18003077f
mov ecx, dword [rcx + r8*4 + 0x30918]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
movss xmm0, dword [r9]
lea rcx, [0x180000000]
movaps xmm1, xmm6
subss xmm1, dword [r11]
comiss xmm0, xmm1
jbe case.default.0x18003077f
movss dword [r9], xmm1
jmp case.default.0x18003077f
mov rax, qword [rbp + 0x1a0]
mov ecx, dword [rax]
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
lea ebx, [r15 + rax]
mov edi, ebx
sub edi, ecx
jmp 0x180030893
cmp ebx, dword [rsi]
jge 0x1800308bb
mov rdx, qword [rbp + 0x50]
movsxd rcx, ebx
movsxd rax, edi
movss xmm11, dword [r13 + rcx*4]
movss xmm7, dword [rdx + rcx*4]
subss xmm11, dword [r13 + rax*4]
subss xmm7, dword [rdx + rax*4]
jmp 0x180030893
movaps xmm6, xmm15
mulss xmm6, xmm10
addss xmm6, xmm9
divss xmm6, xmm8
jmp 0x180030893
mov rdx, qword [rbp + 0x58]
movaps xmm9, xmm13
movsxd rax, ebx
movaps xmm8, xmm12
movsxd rcx, edi
mulss xmm9, xmm12
movss xmm14, dword [rdx + rax*4]
subss xmm14, dword [rdx + rcx*4]
mulss xmm8, xmm11
movaps xmm0, xmm14
movaps xmm10, xmm14
mulss xmm0, xmm7
mulss xmm10, xmm11
subss xmm9, xmm0
movaps xmm0, xmm13
mulss xmm0, xmm7
subss xmm10, xmm0
movss dword [rbp + 0x20], xmm9
movaps xmm0, xmm7
mulss xmm0, xmm7
movss dword [rbp + 0x24], xmm10
subss xmm8, xmm0
jmp 0x180030893
mov rdx, qword [rbp + 0x60]
movsxd rcx, ebx
movsxd rax, edi
movss xmm12, dword [rdx + rcx*4]
movss xmm13, dword [r12 + rcx*4]
subss xmm12, dword [rdx + rax*4]
subss xmm13, dword [r12 + rax*4]
lea rcx, [0x180000000]
inc r8d
lea eax, [r8 + 2]
cmp eax, 8
jb 0x180030763
inc r15d
addss xmm15, xmm2
add r9, 4
jmp 0x180030760
mov eax, dword [rbp]
mov r14d, 0x95e
jmp 0x18002f8bf
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x838]
sub rsp, 0x938
mov rax, qword [0x180357660]
xor rax, rsp
mov qword [rbp + 0x820], rax
mov r14d, dword [rbp + 0x8a8]
xor ebx, ebx
mov r11, qword [rbp + 0x8a0]
mov r15, rcx
mov rdi, qword [rsp + 0x70]
mov rsi, r8
imul eax, r14d, 0x840
mov r10, rdx
mov qword [rbp - 0x30], rcx
mov r13d, r14d
mov qword [rbp - 0x78], r9
lea rcx, [0x180000000]
mov qword [rbp - 0x68], r8
mov qword [rsp + 0x68], rdx
mov qword [rbp], r11
mov dword [rbp - 0x70], r14d
mov dword [rsp + 0x50], eax
mov qword [rbp - 0x38], rdi
cmp r14d, eax
ja 0x1800ac6d3
mov r14d, dword [rsp + 0x50]
movabs rcx, 0x2e00320033
mov r12, qword [rbp - 0x20]
mov r15d, dword [rsp + 0x50]
mov eax, 0x6573
mov r8d, 0x43
lea edx, [rax - 1]
cmp r13d, 0xb733
ja 0x1800ac23e
je 0x1800ac211
cmp r13d, 0x27c9
ja 0x1800abe87
je case.0x1800ac731.201
cmp r13d, 0x961
ja 0x1800abcd3
je 0x1800abc9e
mov eax, r13d
sub eax, 0x31
je 0x1800abc3b
sub eax, 0x38
je 0x1800abc29
sub eax, 0x4b
je 0x1800abbc4
sub eax, 0x3f
je 0x1800abb91
cmp eax, 0x32
jne 0x1800ac112
mov rax, qword [rsi]
lea r8, [rbp - 0x50]
mov qword [rbp - 0x40], rax
xor r9d, r9d
mov rax, qword [rbp - 0x30]
xor edx, edx
xor ecx, ecx
mov r14d, ebx
mov eax, dword [rax]
mov dword [rbp - 0x50], eax
mov eax, 0x64
mov dword [rsp + 0x20], eax
call fcn.1800a49e0
mov r9, qword [rbp - 0x78]
mov r12, rax
mov r10, qword [rsp + 0x68]
mov qword [r9], rax
jmp 0x1800ac108
mov eax, 0x65
mov dword [rbp + 0x100], 0x6c6552
mov word [rbp + 0x103], ax
mov eax, 0x61
mov word [rbp + 0x104], ax
mov eax, 0x73
mov word [rbp + 0x105], ax
jmp 0x1800ac112
mov rax, qword [rbp - 0x30]
mov rsi, qword [rsi]
mov qword [rbp - 0x28], rsi
movsxd rcx, dword [rax]
mov rax, qword [r9 + 0x18]
mov rdx, qword [rax + rcx*8]
lea rax, [0x180358ad0]
test rdx, rdx
je 0x1800abbea
lea rax, [rdx + 8]
mov qword [rbp - 0x48], rax
cmp dword [r11 + 4], ebx
je 0x1800ac104
mov r9, r11
mov r8d, 0x89
mov rdx, rax
mov rcx, rsi
call fcn.1800b3920
mov dword [rbp - 0x58], eax
test eax, eax
jne 0x1800abfa0
mov r10, qword [rsp + 0x68]
mov rsi, qword [rbp - 0x68]
mov r9, qword [rbp - 0x78]
jmp 0x1800ac108
and dword [r10 + 0x30], 0xffffffef
or dword [r10 + 0x30], 0x80
jmp 0x1800ac112
mov eax, dword [0x180348468]
mov dword [rbp + 0x278], eax
movzx eax, word [0x18034846c]
mov word [rbp + 0x27c], ax
lea rax, [rbp + 0x278]
sub rax, 2
cmp word [rax + 2], bx
lea rax, [rax + 2]
jne 0x1800abc60
movsd xmm0, qword [0x180348470]
lea rdx, [0x180348478]
mov r8d, 1
movsd qword [rax], xmm0
lea rcx, [rbp + 0x278]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r10, qword [rsp + 0x68]
mov r9, qword [rbp - 0x78]
jmp 0x1800ac108
mov eax, 0x64
mov qword [rbp + reloc.SHELL32.dll_SHChangeNotification_Lock], rcx
mov dword [rbp + 0x28a], eax
mov eax, dword [0x180341f58]
mov dword [rbp + 0x28c], eax
movzx eax, word [0x180341f5c]
mov word [rbp + 0x290], ax
mov qword [rbp - 0x18], rbx
jmp 0x1800ac112
cmp r13d, 0x1291
je 0x1800abe4e
cmp r13d, 0x1419
je 0x1800abde8
cmp r13d, 0x1bc1
je 0x1800abd9c
cmp r13d, 0x2274
je 0x1800abd36
cmp r13d, 0x24f1
jne 0x1800ac112
mov rax, rdi
mov rcx, qword [rbp + 0x820]
xor rcx, rsp
call fcn.1800bfa40
add rsp, 0x938
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
cmp dword [r11 + 4], ebx
je 0x1800ac112
cmp dword [r10 + 0x1c], ebx
je 0x1800ac112
mov rax, qword [rbp - 0x30]
mov rdx, r11
mov rcx, qword [rbp - 0x28]
mov r8, qword [rbp - 0x48]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x78]
mov eax, dword [rax]
mov dword [rsp + 0x78], eax
mov rax, qword [r9 + 0x30]
lea r9, [r10 + 0x18]
mov dword [rsp + 0x28], reloc.SHELL32.dll_SHSetInstanceExplorer
mov qword [rsp + 0x20], rax
call fcn.1800322e0
mov dword [rbp - 0x58], eax
test eax, eax
jne 0x1800abfa0
mov r10, qword [rsp + 0x68]
mov r9, qword [rbp - 0x78]
jmp 0x1800ac108
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ILRemoveLastID]
mov r9d, dword [rsp + 0x58]
lea rax, [rbp + 0x500]
mov r8, qword [rbp - 0x10]
mov edx, dword [rbp - 0x80]
mov rcx, qword [rbp - 0x18]
mov qword [rsp + 0x20], rax
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
call qword [rbp - 8]
mov r10, qword [rsp + 0x68]
cmp eax, 1
mov r9, qword [rbp - 0x78]
sete byte [rsp + 0x70]
mov rdi, qword [rsp + 0x70]
mov qword [rbp - 0x38], rdi
jmp 0x1800ac108
mov eax, dword [0x180358ac4]
lea rcx, [rbp - 0x60]
mov dword [rsp + 0x78], eax
mov r8, rsi
mov eax, dword [r9]
mov rdx, r10
mov dword [rbp - 0x60], eax
mov r9d, SHSetInstanceExplorer
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
call fcn.180025680
test eax, eax
je 0x1800ade60
mov r10, qword [rsp + 0x68]
lea rdi, [0x1800c2800]
mov r9, qword [rbp - 0x78]
lea rcx, [0x180000000]
cdqe
add rdi, qword [rcx + rax*8 + 0xc29a0]
mov qword [rbp - 0x38], rdi
mov qword [rsp + 0x70], rdi
jmp 0x1800ac108
mov r9d, 0xe0
mov dword [rbp - 0x80], 0x36
xor edx, edx
mov qword [rbp - 0x10], rbx
lea rcx, [rbp + 0x278]
lea r8d, [r9 - 0x29]
call fcn.180012510
mov r10, qword [rsp + 0x68]
mov r9, qword [rbp - 0x78]
mov qword [rbp - 8], rax
mov dword [rsp + 0x58], ebx
jmp 0x1800ac108
cmp r13d, 0x6f05
ja 0x1800ac177
je 0x1800ac169
cmp r13d, 0x2e83
je 0x1800ac139
cmp r13d, 0x3815
je 0x1800abfae
cmp r13d, 0x4434
je 0x1800abf5b
cmp r13d, 0x5c13
je 0x1800abf2c
cmp r13d, 0x65f4
jne 0x1800ac112
mov rax, qword [rbp - 0x30]
movsxd r8, dword [rax]
mov rax, qword [r9 + 0x18]
mov rdx, qword [rax + r8*8]
test rdx, rdx
je 0x1800ac108
test byte [rdx + 0x30], 0x10
je 0x1800ac108
mov qword [rsp + 0x38], r11
xor edx, edx
mov qword [rsp + 0x30], r9
mov rcx, rsi
mov dword [rsp + 0x78], r8d
lea r9, [rsp + 0x78]
mov qword [rsp + 0x28], r10
xor r8d, r8d
mov dword [rsp + 0x20], 0x149
call fcn.18004cd90
jmp 0x1800abd83
movsd xmm0, qword [0x180348650]
mov eax, 0x65
mov word [rbp + 0x10d], ax
movzx eax, word [0x180348658]
mov word [rbp + 0x238], ax
movsd qword [rbp + 0x230], xmm0
jmp 0x1800ac112
mov r9, qword [rbp - 0x28]
lea rcx, [rbp - 0x58]
mov r8, r11
mov edx, 0x45
call fcn.1800958c0
mov r8, qword [rbp - 0x30]
mov r10, qword [rsp + 0x68]
movsxd rdx, dword [r8]
mov rcx, qword [r10 + 8]
mov qword [rcx + rdx*8], rax
movsxd rcx, dword [r8]
mov rax, qword [r10 + 8]
cmp qword [rax + rcx*8], rbx
jne 0x1800abc20
mov eax, dword [rbp - 0x58]
test eax, eax
je 0x1800abd93
mov dword [rsp + 0x70], eax
mov rax, qword [rsp + 0x70]
jmp 0x1800abd13
mov rsi, qword [rbp - 0x40]
movzx eax, byte [rsi]
test al, al
je 0x1800ac0e5
nop dword [rax]
cmp al, 0x2c
je 0x1800ac0dd
mov r13d, 0x6b
nop
cmp r13d, 0x6b
je 0x1800ac08e
cmp r13d, 0xdcb
jne 0x1800ac0be
test r15d, r15d
jle 0x1800ac080
dec r15d
mov esi, 0x11a
cmp esi, 0x11a
je 0x1800ac00d
cmp esi, 0x94b6
jne 0x1800ac065
inc r14d
jmp 0x1800ac065
mov r8d, dword [r10]
mov eax, r14d
cdq
lea ecx, [r8 - 1]
idiv ecx
imul ecx, r8d
cmp r14d, ecx
jge 0x1800ac02f
imul eax, r8d
lea ecx, [rax + rdx]
lea edx, [rcx + 1]
jmp 0x1800ac042
sub eax, r8d
mov ecx, r8d
imul ecx, edx
add ecx, eax
inc edx
imul edx, r8d
add edx, eax
mov dword [rbp - 0x60], edx
lea r9, [rsp + 0x78]
mov dword [rsp + 0x78], ecx
lea rdx, [rbp - 0x60]
mov rcx, r12
mov r8d, 0xd1
call fcn.180094540
mov r10, qword [rsp + 0x68]
add esi, 0x939c
cmp esi, 0x12738
jbe 0x1800abff8
test r15d, r15d
jg 0x1800abff0
mov rsi, qword [rbp - 0x40]
dec r15d
cmp dword [rsp + 0x60], ebx
je 0x1800ac0be
inc r14d
jmp 0x1800ac0be
movsx ecx, byte [rsi]
cmp cl, 0x5f
jne 0x1800ac09b
mov r15d, ebx
jmp 0x1800ac0aa
lea eax, [rcx - 0x61]
cmp al, 0x19
ja 0x1800ac68f
lea r15d, [rcx - 0x60]
inc rsi
mov eax, ebx
cmp r15d, 0x19
mov qword [rbp - 0x40], rsi
setne al
mov dword [rsp + 0x60], eax
add r13d, 0xd60
cmp r13d, 0x1ac0
jbe 0x1800abfd0
movzx eax, byte [rsi]
test al, al
jne 0x1800abfc0
mov r9, qword [rbp - 0x78]
mov r13d, dword [rbp - 0x70]
mov rax, qword [rbp - 0x68]
mov qword [rax], rsi
mov eax, dword [r10]
lea ecx, [rax*2 - 2]
imul ecx, eax
inc ecx
cmp r14d, ecx
jne 0x1800ac6a8
mov rsi, qword [rbp - 0x68]
movabs rcx, 0x2e00320033
mov eax, dword [rbp + 0x8a8]
lea eax, [rax + rax*2]
shl eax, 4
add r13d, eax
mov dword [rbp - 0x70], r13d
cmp r13d, dword [rsp + 0x50]
ja 0x1800ac6c1
mov r11, qword [rbp]
jmp 0x1800abade
mov edx, 0x75
mov dword [rbp + 0x106], 0x70614365
mov eax, 0x74
mov word [rbp + 0x10a], ax
mov word [rbp + 0x10b], dx
mov edx, 0x72
mov word [rbp + 0x10c], dx
jmp 0x1800ac112
mov rdi, rbx
mov qword [rbp - 0x38], rbx
mov qword [rsp + 0x70], rbx
jmp 0x1800ac112
cmp r13d, 0x87b4
je 0x1800ac1ff
cmp r13d, 0x89a3
je 0x1800ac1a8
cmp r13d, 0xa5f5
je case.0x1800ac731.201
cmp r13d, 0xa974
je case.0x1800ac731.201
jmp 0x1800ac112
mov r8d, 2
mov word [rbp + 0x23a], bx
lea rdx, [0x1803483bc]
lea rcx, [rbp + 0x23a]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov r8d, 3
mov word [rbp + 0x23e], bx
lea rdx, [0x1803483ea]
lea rcx, [rbp + 0x23e]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov r10, qword [rsp + 0x68]
mov r9, qword [rbp - 0x78]
mov word [rbp + 0x244], bx
jmp 0x1800ac108
mov dword [rsp + 0x70], ebx
mov rdi, qword [rsp + 0x70]
mov qword [rbp - 0x38], rdi
jmp 0x1800ac112
mov dword [rbp + 0x110], 0x746553
mov edx, 0x75
mov word [rbp + 0x113], r8w
mov dword [rbp + 0x114], 0x747061
mov word [rbp + 0x117], dx
jmp 0x1800ac112
cmp r13d, 0x2ac63
ja 0x1800ac459
je 0x1800ac44d
cmp r13d, 0x1c893
ja 0x1800ac375
je 0x1800ac30d
cmp r13d, 0xe4c3
je 0x1800ac2f1
cmp r13d, 0x11253
je 0x1800ac2d6
cmp r13d, 0x13fe3
je 0x1800ac2c7
cmp r13d, 0x16d73
je 0x1800ac2b8
cmp r13d, 0x19b03
jne 0x1800ac112
mov dword [rbp + 0x1b2], 0x6c
mov dword [rbp + 0x170], 0x6e617254
mov byte [rbp + 0x174], bl
jmp 0x1800ac112
mov dword [rbp + 0x1ae], 0x6c0064
jmp 0x1800ac112
mov dword [rbp + 0x1aa], 0x2e0032
jmp 0x1800ac112
mov edx, 0x33
mov dword [rbp + 0x1a4], 0x720065
mov word [rbp + 0x1a8], dx
jmp 0x1800ac112
mov word [rbp + 0x118], dx
mov byte [rbp + 0x11a], bl
mov dword [rbp + 0x1a0], 0x730075
jmp 0x1800ac112
mov r8d, 4
lea rdx, [0x1803485c3]
lea rcx, [rbp + 0x174]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov r8d, 5
mov byte [rbp + 0x178], bl
lea rdx, [0x1803485d2]
lea rcx, [rbp + 0x170]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 2
lea rdx, [0x180348603]
lea rcx, [rbp + 0x17d]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov r10, qword [rsp + 0x68]
mov r9, qword [rbp - 0x78]
mov byte [rbp + 0x17f], bl
jmp 0x1800ac108
cmp r13d, 0x1f623
je 0x1800ac441
cmp r13d, 0x223b3
je 0x1800ac409
cmp r13d, 0x25143
je 0x1800ac3e3
cmp r13d, 0x27ed3
jne 0x1800ac112
mov r8d, 3
lea rdx, [0x180348500]
lea rcx, [rbp + 0x1b8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 1
lea rdx, [0x18034853c]
lea rcx, [rbp + 0x1ca]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov r10, qword [rsp + 0x68]
mov r9, qword [rbp - 0x78]
jmp 0x1800ac108
mov eax, dword [0x180348404]
mov dword [rbp + 0x1be], eax
movzx eax, word [0x180348408]
mov word [rbp + 0x1c2], ax
mov word [rbp + 0x1c4], bx
jmp 0x1800ac112
mov r8d, 2
mov byte [rbp + 0x180], bl
lea rdx, [0x1803484d8]
lea rcx, [rbp + 0x1b8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov r10, qword [rsp + 0x68]
mov r9, qword [rbp - 0x78]
mov dword [rbp + 0x1bc], 0x65
jmp 0x1800ac108
mov byte [rbp + 0x17f], 0x65
jmp 0x1800ac112
mov word [rbp + 0x1cc], bx
jmp 0x1800ac112
cmp r13d, 0x3bdc3
ja 0x1800ac5d6
je 0x1800ac589
cmp r13d, 0x2d9f3
je 0x1800ac566
cmp r13d, 0x30783
je 0x1800ac535
cmp r13d, 0x33513
je 0x1800ac4fa
cmp r13d, 0x362a3
je 0x1800ac4ee
cmp r13d, 0x39033
jne 0x1800ac112
mov r8d, 4
mov byte [rbp + 0xe0], bl
lea rdx, [0x18034866b]
lea rcx, [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
movzx eax, word [0x180348690]
mov r10, qword [rsp + 0x68]
mov r9, qword [rbp - 0x78]
mov word [rbp + 0xe4], ax
movzx eax, byte [0x180348692]
mov byte [rbp + 0xe6], al
jmp 0x1800ac108
mov word [rbp + 0x25c], bx
jmp 0x1800ac112
mov eax, PathMakeUniqueName
mov dword [rbp + 0x24c], 0x720065
mov word [rbp + 0x254], ax
mov eax, 0x6c
mov word [rbp + 0x25a], ax
mov dword [rbp + 0x250], 0x320033
mov dword [rbp + 0x256], 0x6c0064
jmp 0x1800ac112
mov eax, 0x53
mov dword [rbp + 0x248], 0x730075
mov word [rbp + 0x193], ax
mov eax, 0x65
mov dword [rbp + 0x194], 0x746174
mov word [rbp + 0x197], ax
jmp 0x1800ac112
mov dword [rbp + 0x18c], 0x627965
mov dword [rbp + 0x18f], 0x6472616f
mov dword [rbp + 0x188], 0x4b746547
jmp 0x1800ac112
mov r8d, 1
mov byte [rbp + 0xe7], bl
lea rdx, [0x18034848a]
lea rcx, [rbp + 0xe7]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [0x1803484af]
mov r10, qword [rsp + 0x68]
mov r9, qword [rbp - 0x78]
mov dword [rbp + 0x160], eax
movzx eax, byte [0x1803484b3]
mov byte [rbp + 0x164], al
mov byte [rbp + 0xe8], bl
jmp 0x1800ac108
cmp r13d, 0x3eb53
je 0x1800ac683
cmp r13d, 0x418e3
je 0x1800ac648
cmp r13d, 0x44673
je 0x1800ac61d
cmp r13d, 0x47403
jne 0x1800ac112
mov eax, 0x64
mov dword [rbp + 0x1f2], 0x2e0032
mov word [rbp + 0x1f6], ax
jmp 0x1800ac112
mov edx, 0x33
mov byte [rbp + 0x16d], bl
mov word [rbp + 0x1f0], dx
mov dword [rbp + 0x1e8], 0x730075
mov dword [rbp + 0x1ec], 0x720065
jmp 0x1800ac112
movzx eax, word [0x180348578]
mov word [rbp + 0x167], ax
movzx eax, byte [0x18034857a]
mov byte [rbp + 0x169], al
movzx eax, word [0x18034859d]
mov word [rbp + 0x16a], ax
movzx eax, byte [0x18034859f]
mov byte [rbp + 0x16c], al
jmp 0x1800ac112
mov word [rbp + 0x165], ax
jmp 0x1800ac112
mov rdx, r12
mov ecx, 0x22
call fcn.1800b73a0
lea rax, str._define_MUI_FINISHPAGE_RUN___INSTDIR_
jmp 0x1800abd13
mov rdx, r12
mov ecx, 0x22
call fcn.1800b73a0
lea rax, str.float16___OVERLOADABLE___step_float16__float16__
jmp 0x1800abd13
mov r14d, dword [rbp + 0x8a8]
lea rcx, [0x180000000]
mov r15, qword [rbp - 0x30]
lea esi, [r14 - 0x2b]
mov dword [rbp - 0x80], esi
cmp r14d, esi
jbe case.0x1800ac731.201
mov r13d, dword [rsp + 0x50]
mov edx, 0x6d
mov r8d, 0x7469
mov r12d, 0x4165
lea r11d, [rdx - 0x1e]
lea r9d, [rdx - 0x29]
nop dword [rax]
nop word [rax + rax]
lea eax, [r14 - 0xc9]
cmp eax, 0x2a
ja case.default.0x1800ac731
mov ecx, dword [rcx + rax*4 + 0xade68]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov eax, dword [str.eNam]
mov dword [rbp + 0x13a], eax
movzx eax, word [0x180348754]
mov word [rbp + 0x13e], ax
movzx eax, byte [0x180348756]
mov byte [rbp + 0x140], al
mov dword [rbp + 0x2b8], 0x6f0063
mov word [rbp + 0x2bc], dx
jmp case.default.0x1800ac731
mov dword [rbp + 0x130], 0x746547
mov word [rbp + 0x133], r11w
mov word [rbp + 0x22c], bx
jmp case.default.0x1800ac731
mov byte [rbp + 0xf5], 0x75
mov word [rbp + 0xf6], r8w
mov byte [rbp + 0xf8], 0
jmp case.default.0x1800ac731
mov eax, dword [0x1803487b4]
lea rdx, [0x1803487d6]
mov dword [rbp + 0x2be], eax
lea rcx, [rbp + 0x2b8]
movzx eax, word [0x1803487b8]
mov r8d, 5
mov word [rbp + 0x2c2], ax
mov word [rbp + 0x2c4], bx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 1
lea rdx, [0x18034883e]
lea rcx, [rbp + 0x2ce]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x1800adc91
mov r9d, 0xe0
lea r8, [rbp + 0xc0]
xor edx, edx
lea rcx, [rbp + 0x200]
call fcn.180012510
mov r9d, 0xe0
mov qword [rbp - 8], rax
lea r8, [rbp + 0xf0]
xor edx, edx
lea rcx, [0x1803426e8]
call fcn.180012510
mov qword [rsp + 0x70], rax
jmp 0x1800adc91
movzx eax, word [0x180348866]
mov word [rbp + 0xfa], ax
movzx eax, byte [0x180348868]
mov byte [rbp + 0xfc], al
mov byte [rbp + 0xf9], 0x65
jmp case.default.0x1800ac731
mov r8d, 3
mov word [rbp + 0xc4], 0x61
lea rdx, [0x1803488a6]
lea rcx, [rbp + 0xc5]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp 0x1800adc91
mov r8d, 1
lea rdx, [0x1803488b9]
lea rcx, [rbp + 0xfe]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0xff], 0
jmp 0x1800adc91
mov word [rbp + 0x120], r9w
jmp case.default.0x1800ac731
mov r12, qword [rbp - 0x68]
mov edx, 0xffffffeb
mov rcx, qword [r12]
call qword [rbp + 0x40]
movsxd r14, eax
mov rax, qword [rbp - 0x78]
mov qword [rbp - 0x48], r14
mov edx, dword [rax]
mov eax, edx
cmp edx, 0x200
ja 0x1800ad3a2
je 0x1800ad309
cmp eax, 0x100
ja 0x1800acc21
je 0x1800ac931
sub eax, 2
je 0x1800adcc5
sub eax, 0xd
je 0x1800adce7
cmp eax, 1
jne case.0x1800ad3cb.516
mov rcx, qword [r12]
call qword [rbp + 0x48]
mov rax, rbx
jmp 0x1800abd13
mov rdi, qword [rbp - 0x48]
mov r14d, 0x3f
mov r12, qword [rsp + 0x68]
cmp r14d, 0x3f
je 0x1800acbca
cmp r14d, 0x15a8
je 0x1800aca1f
cmp r14d, 0x2b11
je 0x1800acbaa
cmp r14d, 0x407a
jne case.0x1800aca62.32
cmp r13d, 0xffffffff
je 0x1800ac9b9
mov rax, qword [rdi + 8]
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov edx, 0xfa
mov dword [rsp + 0x60], r13d
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], ebx
mov dword [rsp + 0x50], ebx
call fcn.1800b92b0
test eax, eax
jne case.0x1800aca62.32
xor ecx, ecx
call qword [rsp + 0x70]
jmp case.0x1800aca62.32
mov rbx, qword [rbp + 0x30]
mov esi, 0xb6
mov rdi, qword [rbp - 0x68]
cmp esi, 0xb6
je 0x1800ac9de
cmp esi, 0x7a48
jne 0x1800aca06
lea rcx, [rbp + 0x70]
call rbx
jmp 0x1800aca06
mov rax, qword [rdi]
mov qword [rbp + 0x70], rax
mov rax, qword [r12]
mov qword [rbp + 0x80], rax
mov eax, dword [r15]
and eax, 0xdfff
mov dword [rbp + 0x78], 0x100
mov qword [rbp + 0x88], rax
add esi, 0x7992
cmp esi, 0xf324
jbe 0x1800ac9c6
mov rdi, qword [rbp - 0x48]
xor ebx, ebx
jmp case.0x1800aca62.32
cmp dword [rbp - 0x60], 0
je 0x1800aca33
test byte [rbp + 0x301], 0x80
mov edx, 0x1000
jne 0x1800aca35
mov edx, ebx
mov rax, qword [r12]
add rax, 0xfffffffffffffff4
cmp rax, 0x5d
ja case.0x1800aca62.32
lea r8, [0x180000000]
movzx eax, byte [r8 + rax + 0xadf68]
mov ecx, dword [r8 + rax*4 + 0xadf14]
add rcx, r8
jmp rcx
mov eax, dword [r15]
bt rax, 0x18
jb 0x1800aca7f
mov r13d, 0x4034
mov r14d, 0x2b11
jmp case.0x1800aca62.32
mov r13d, edx
mov r14d, 0x2b11
or r13d, dword [rbp - 0x70]
or r13d, 0x20b
jmp case.0x1800aca62.32
mov eax, dword [r15]
bt rax, 0x18
jb 0x1800acab3
mov r13d, 0x4036
mov r14d, 0x2b11
jmp case.0x1800aca62.32
mov r13d, edx
mov r14d, 0x2b11
or r13d, dword [rbp - 0x70]
or r13d, 0x20c
jmp case.0x1800aca62.32
mov eax, dword [r15]
bt rax, 0x18
jb 0x1800acae7
mov r13d, 0x4038
mov r14d, 0x2b11
jmp case.0x1800aca62.32
mov r13d, edx
mov r14d, 0x2b11
or r13d, dword [rbp - 0x70]
or r13d, 0x209
jmp case.0x1800aca62.32
mov eax, dword [r15]
bt rax, 0x18
jb 0x1800acb1b
mov r13d, 0x4032
mov r14d, 0x2b11
jmp case.0x1800aca62.32
mov r13d, edx
mov r14d, 0x2b11
or r13d, dword [rbp - 0x70]
or r13d, 0x20a
jmp case.0x1800aca62.32
mov eax, dword [r15]
bt rax, 0x18
jb 0x1800acbaa
mov r13d, 0x4039
mov r14d, 0x2b11
jmp case.0x1800aca62.32
mov eax, dword [r15]
bt rax, 0x18
jb 0x1800acbaa
mov r13d, 0x4033
mov r14d, 0x2b11
jmp case.0x1800aca62.32
mov eax, dword [r15]
bt rax, 0x18
jb 0x1800acbaa
mov r13d, 0x4037
mov r14d, 0x2b11
jmp case.0x1800aca62.32
mov eax, dword [r15]
bt rax, 0x18
jb 0x1800acbaa
mov r13d, 0x4031
mov r14d, 0x2b11
jmp case.0x1800aca62.32
mov eax, dword [r15]
bt rax, 0x18
jb 0x1800acbaa
mov r13d, 0x4030
mov r14d, 0x2b11
jmp case.0x1800aca62.32
mov eax, dword [r15]
bt rax, 0x18
jb 0x1800acbaa
mov r13d, 0x4035
mov r14d, 0x2b11
jmp case.0x1800aca62.32
lea rcx, [rbp + 0x2f0]
mov r13d, 0xffffffff
call qword [rbp + 0x38]
mov dword [rbp - 0x60], eax
cmp eax, 0
je 0x1800acbf2
test byte [rbp + 0x300], 0x80
mov dword [rbp - 0x70], 0x2000
jne case.0x1800aca62.32
mov dword [rbp - 0x70], ebx
add r14d, 0x1569
cmp r14d, 0x55a4
jbe 0x1800ac940
mov rdi, qword [rbp - 0x38]
mov r14d, 0xcb
mov esi, dword [rbp - 0x80]
mov r12d, 0x4165
jmp 0x1800adc91
sub eax, 0x102
je 0x1800ade1e
sub eax, 0xf
je 0x1800acc92
cmp eax, 2
jne case.0x1800ad3cb.516
cmp dword [r14 + 0x88], 0
je 0x1800ade60
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rdx, qword [r14 + 8]
xorps xmm0, xmm0
mov ecx, eax
mov r8d, 0x126
sub ecx, dword [r14 + 0x8c]
mov edi, eax
cvtsi2ss xmm0, rcx
lea rcx, [rsp + 0x50]
mulss xmm0, dword [0x18034d21c]
movss dword [rsp + 0x50], xmm0
call fcn.180080270
mov rax, rbx
mov dword [r14 + 0x8c], edi
jmp 0x1800abd13
mov rdx, qword [rsp + 0x68]
mov r15d, dword [rdx]
and r15d, 0xfffffff0
lea eax, [r15 - 0x10]
cmp eax, 0xf0
ja case.0x1800accca.31
lea r8, [0x180000000]
cdqe
movzx eax, byte [r8 + rax + 0xae008]
mov ecx, dword [r8 + rax*4 + 0xadfc8]
add rcx, r8
jmp rcx
mov dword [rsp + 0x60], 0x6e
mov dword [rsp + 0x58], ebx
mov dword [rsp + 0x50], ebx
jmp 0x1800ad361
mov rcx, qword [r14 + 8]
mov r9d, 0xfe
xor r8d, r8d
xor edx, edx
call fcn.1800a6e40
mov r14d, 0xcb
mov r12d, 0x4165
jmp 0x1800adc91
mov dword [rsp + 0x60], 0x75
mov dword [rsp + 0x58], ebx
mov dword [rsp + 0x50], ebx
jmp 0x1800ad361
mov dword [rsp + 0x60], reloc.SHELL32.dll_ILClone
mov dword [rsp + 0x58], ebx
mov dword [rsp + 0x50], ebx
jmp 0x1800ad361
mov rdx, qword [r14 + 8]
mov ecx, 0xd6
call fcn.1800801b0
mov rsi, rax
test rax, rax
je 0x1800acd8f
mov rax, qword [r12]
xor r9d, r9d
mov qword [rbp], rax
xor r8d, r8d
lea rax, [rbp]
mov rdx, rsi
mov qword [rsp + 0x28], rax
lea ecx, [r9 + 0x22]
mov qword [rsp + 0x20], rbx
call fcn.1800afb20
mov rdx, rsi
mov ecx, 0x22
call fcn.1800b73a0
mov esi, dword [rbp - 0x80]
mov r14d, 0xcb
mov r12d, 0x4165
jmp 0x1800adc91
mov ecx, 0x30
call qword [rbp - 8]
mov rdx, rsi
mov ecx, 0x22
call fcn.1800b73a0
mov esi, dword [rbp - 0x80]
mov r14d, 0xcb
mov r12d, 0x4165
jmp 0x1800adc91
mov r8, qword [r14 + 8]
mov edx, 0x84
xor ecx, ecx
call fcn.18007fbb0
test rax, rax
je case.0x1800ad3cb.516
mov rcx, qword [r12]
lea r8, str.IsCaseSensitive
mov r9d, ILClone
mov rdx, rax
call qword [rbp - 0x40]
mov r14d, 0xcb
mov r12d, 0x4165
jmp 0x1800adc91
mov dword [rsp + 0x60], 0x71
mov dword [rsp + 0x58], ebx
mov dword [rsp + 0x50], ebx
jmp 0x1800ad361
mov dword [rsp + 0x50], ebx
mov r9, r14
lea rdx, [rsp + 0x50]
mov r8d, 0x93
xor ecx, ecx
call fcn.1800094e0
test eax, eax
je case.0x1800ad3cb.516
jmp 0x1800ad2db
mov dword [rsp + 0x50], 1
jmp 0x1800ace12
mov dword [rsp + 0x50], 2
jmp 0x1800ace12
mov r9, r14
mov dword [rsp + 0x50], 3
mov r8d, 0x93
lea rdx, [rsp + 0x50]
xor ecx, ecx
call fcn.1800094e0
test eax, eax
je case.0x1800ad3cb.516
xor edx, edx
mov r8, r14
lea ecx, [rdx + 0x42]
call fcn.180091830
mov r14d, 0xcb
mov r12d, 0x4165
jmp 0x1800adc91
mov r8, r14
mov edx, 0x79
xor ecx, ecx
call fcn.180010220
mov r14d, 0xcb
mov r12d, 0x4165
jmp 0x1800adc91
mov r14d, SHSetInstanceExplorer
mov eax, r14d
sub eax, 0xad
je 0x1800ad10c
sub eax, 1
je 0x1800ad100
sub eax, 1
je 0x1800ad0d8
sub eax, 1
je 0x1800ad0a3
cmp eax, 1
jne 0x1800ad177
mov qword [rbp + 0x340], rbx
lea rcx, [rbp + 0x2f0]
cmp r15d, 0xe0
jne 0x1800aceff
call qword [rbp + 0x18]
jmp 0x1800acf02
call qword [rbp + ILClone]
test eax, eax
je 0x1800ad177
cmp r15d, 0xe0
jne 0x1800acffc
mov esi, 0xa5
nop dword [rax]
mov eax, esi
sub eax, 0xa5
je 0x1800acf41
cmp eax, 0x26
jne 0x1800acfe8
mov rcx, qword [rbp - 0x28]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
jmp 0x1800acfe8
lea rdx, [0x1803444e4]
lea rcx, [rbp + 0x3f0]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov qword [rbp - 0x28], rax
test rax, rax
je 0x1800acfab
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea r9, [rbp + 0x3f0]
mov r8d, 0x104
lea rdx, str.state_item::file_serialize_error_ofstream_not_valid
lea rcx, [rbp + 0x610]
call fcn.1800bf030
mov rcx, qword [r12]
lea r8, str.Question
mov r9d, 0x24
lea rdx, [rbp + 0x610]
call qword [rbp - 0x40]
cmp eax, 6
jne 0x1800ad61c
lea rdx, [0x180346fa8]
lea rcx, [rbp + 0x3f0]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov qword [rbp - 0x28], rax
mov rcx, rax
test rax, rax
je 0x1800ad19b
mov rax, qword [rbp - 0x48]
lea r9, [0x18009cb40]
mov edx, 0xb7
mov r8, qword [rax + 8]
call fcn.1800a12a0
add esi, 0x26
cmp esi, 0xf1
jb 0x1800acf20
jmp 0x1800ad177
mov esi, SHTestTokenMembership
mov eax, esi
sub eax, 0xf0
je 0x1800ad067
sub eax, 1
je 0x1800ad05b
cmp eax, 1
jne 0x1800ad090
lea rdx, [0x1803444e4]
lea rcx, [rbp + 0x3f0]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov qword [rbp - 0x10], rax
mov rcx, rax
test rax, rax
je 0x1800ad1ca
mov rax, qword [rbp - 0x48]
mov rdx, rcx
mov r8d, 0x69
lea rcx, [0x18009c8d0]
mov r9, qword [rax + 8]
call fcn.180072760
mov qword [rbp + 8], rax
jmp 0x1800ad090
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
jmp 0x1800ad090
mov rax, qword [rbp + 8]
test rax, rax
jne 0x1800ad1f9
mov rcx, qword [rbp - 0x48]
lea rdx, [rsp + 0x50]
mov r8d, 0x8c
mov dword [rsp + 0x50], 0x3f800000
call fcn.180085b00
dec esi
cmp esi, 0xef
ja 0x1800ad001
jmp 0x1800ad177
cmp r15d, 0xe0
mov dword [rbp + 0x350], ebx
lea rax, str.GED_MASKS_TABLE_ENTRY_TYPE_NEXT_TABLE
mov dword [rbp + 0x2f0], 0x88
lea rcx, str._s:_Failed_to_encrypt__s_to__s.
cmove rax, rcx
mov qword [rbp + 0x348], rax
jmp 0x1800ad177
lea rax, [rbp + 0x3f0]
mov byte [rbp + 0x3f0], 0
mov qword [rbp + 0x320], rax
mov dword [rbp + 0x328], 0x104
mov qword [rbp + 0x330], rbx
jmp 0x1800ad177
mov dword [rbp + 0x31c], 1
jmp 0x1800ad177
xorps xmm0, xmm0
xor eax, eax
mov qword [rbp + 0x380], rax
mov rax, qword [r12]
movups xmmword [rbp + 0x2f0], xmm0
mov qword [rbp + 0x2f8], rax
lea rax, str.VideoYValidStartLine
movups xmmword [rbp + 0x300], xmm0
mov qword [rbp + 0x308], rax
movups xmmword [rbp + 0x310], xmm0
mov qword [rbp + 0x310], rbx
movups xmmword [rbp + 0x320], xmm0
movups xmmword [rbp + 0x330], xmm0
movups xmmword [rbp + 0x340], xmm0
movups xmmword [rbp + 0x350], xmm0
movups xmmword [rbp + 0x360], xmm0
movups xmmword [rbp + 0x370], xmm0
inc r14d
cmp r14d, 0xb2
jb 0x1800aceb1
mov esi, dword [rbp - 0x80]
mov r14d, 0xcb
mov r12d, 0x4165
jmp 0x1800adc91
mov rcx, qword [r12]
lea r8, str.Error
mov r9d, ILClone
lea rdx, str.size___GEN_INS_MAX_SIZE
call qword [rbp - 0x40]
mov esi, dword [rbp - 0x80]
mov r14d, 0xcb
mov r12d, 0x4165
jmp 0x1800adc91
mov rcx, qword [r12]
lea r8, str.Error
mov r9d, ILClone
lea rdx, str.OnHudConfigurationStateChanged
call qword [rbp - 0x40]
mov esi, dword [rbp - 0x80]
mov r14d, 0xcb
mov r12d, 0x4165
jmp 0x1800adc91
mov rcx, qword [r12]
lea r8, str.Error
mov r9d, ILClone
mov rdx, rax
call qword [rbp - 0x40]
mov esi, dword [rbp - 0x80]
mov r14d, 0xcb
mov r12d, 0x4165
jmp 0x1800adc91
mov r8d, 0x72
mov rdx, r14
xor ecx, ecx
call fcn.1800a8d50
mov r14d, 0xcb
mov r12d, 0x4165
jmp 0x1800adc91
cmp dword [0x18035777c], 2
mov rax, qword [r14]
jne 0x1800ad274
mov rcx, qword [rax + 0x10]
mov r8d, 0x72
mov rdx, r14
call fcn.1800a8d50
mov r14d, 0xcb
mov r12d, 0x4165
jmp 0x1800adc91
mov rcx, qword [rax + 8]
mov r8d, 0x72
mov rdx, r14
call fcn.1800a8d50
mov r14d, 0xcb
mov r12d, 0x4165
jmp 0x1800adc91
mov rax, qword [rdx]
and rax, 0xfffffffffffffff0
sub rax, 0x101
shr rax, 4
test eax, eax
js case.0x1800ad3cb.516
cmp eax, dword [r14 + 0x90]
jge case.0x1800ad3cb.516
mov rcx, qword [r14 + 0x98]
xor edx, edx
mov r9, qword [r14 + 8]
mov r8d, 0x90
cdqe
mov rcx, qword [rcx + rax*8]
call fcn.18005ce20
mov qword [rsp + 0x28], rbx
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rbx
mov edx, 0x93
mov rcx, r14
call fcn.18008b490
mov r14d, 0xcb
mov r12d, 0x4165
jmp 0x1800adc91
mov r12, qword [rsp + 0x68]
mov rax, qword [r12]
test al, 0x14
je 0x1800ad31d
mov eax, 0x204
jmp 0x1800ad344
test al, 2
jne 0x1800ad33f
xor edx, edx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
lea ecx, [rdx + 0x4c]
call fcn.180083a50
test eax, eax
mov eax, 0x203
je 0x1800ad344
mov eax, 0x205
mov dword [rsp + 0x60], eax
movsx eax, word [r15 + 2]
sub eax, dword [r14 + 0x44]
mov dword [rsp + 0x58], eax
movsx eax, word [r15]
sub eax, dword [r14 + 0x40]
mov dword [rsp + 0x50], eax
mov rax, qword [r14 + 8]
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov edx, 0xfa
lea rcx, [rsp + 0x58]
call fcn.1800b92b0
test eax, eax
jne case.0x1800ad3cb.516
xor ecx, ecx
call qword [rsp + 0x70]
mov r14d, 0xcb
mov r12d, 0x4165
jmp 0x1800adc91
add eax, 0xfffffdff
cmp eax, 0x13
ja case.0x1800ad3cb.516
lea r8, [0x180000000]
movzx eax, byte [r8 + rax + 0xae10c]
mov ecx, dword [r8 + rax*4 + 0xae0fc]
add rcx, r8
jmp rcx
cmp edx, 0x207
je 0x1800ad410
mov r12, qword [rsp + 0x68]
test byte [r12], 4
jne 0x1800ad410
cmp edx, 0x204
je 0x1800ad409
xor edx, edx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
lea ecx, [rdx + 0x4c]
call fcn.180083a50
test eax, eax
jne 0x1800ad409
mov eax, 0x200
jmp 0x1800ad415
mov eax, 0x202
jmp 0x1800ad415
mov eax, 0x201
mov dword [rsp + 0x60], eax
lea r9, [rsp + 0x50]
movsx eax, word [r15 + 2]
lea r8, [rsp + 0x60]
sub eax, dword [r14 + 0x44]
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], eax
mov edx, 0xfa
movsx eax, word [r15]
sub eax, dword [r14 + 0x40]
mov dword [rsp + 0x50], eax
mov rax, qword [r14 + 8]
mov qword [rsp + 0x20], rax
call fcn.1800b92b0
test eax, eax
jne 0x1800ad45e
xor ecx, ecx
call qword [rsp + 0x70]
mov rax, qword [rbp - 0x68]
mov rcx, qword [rax]
call qword [rbp + 0x28]
mov r14d, 0xcb
mov r12d, 0x4165
jmp 0x1800adc91
cmp edx, 0x208
je 0x1800ad4bc
mov r12, qword [rsp + 0x68]
test byte [r12], 4
jne 0x1800ad4bc
cmp edx, 0x205
je 0x1800ad4b5
xor edx, edx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
lea ecx, [rdx + 0x4c]
call fcn.180083a50
test eax, eax
jne 0x1800ad4b5
mov eax, 0x206
jmp 0x1800ad4c1
mov eax, 0x208
jmp 0x1800ad4c1
mov eax, 0x207
mov dword [rsp + 0x60], eax
lea r9, [rsp + 0x50]
movsx eax, word [r15 + 2]
lea r8, [rsp + 0x60]
sub eax, dword [r14 + 0x44]
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], eax
mov edx, 0xfa
movsx eax, word [r15]
sub eax, dword [r14 + 0x40]
mov dword [rsp + 0x50], eax
mov rax, qword [r14 + 8]
mov qword [rsp + 0x20], rax
call fcn.1800b92b0
test eax, eax
jne 0x1800ad50a
xor ecx, ecx
call qword [rsp + 0x70]
call qword [rbp + 0x20]
mov r14d, 0xcb
mov r12d, 0x4165
jmp 0x1800adc91
mov r12, qword [rsp + 0x68]
mov esi, 0x42
nop dword [rax + rax]
cmp esi, 0x42
je 0x1800ad5ba
cmp esi, 0x2184
je 0x1800ad552
cmp esi, 0x42c6
je case.0x1800ac731.201
jmp 0x1800ad606
mov rdx, qword [rsp + 0x68]
mov r15, qword [rbp - 0x18]
mov rax, qword [rdx]
sub rax, 3
cmp rax, 2
jbe 0x1800ad576
mov ecx, dword [rsp + 0x78]
add ecx, dword [r15 + 4]
mov dword [r15 + 0xc], ecx
jmp 0x1800ad582
mov eax, dword [r15 + 0xc]
sub eax, dword [rsp + 0x78]
mov dword [r15 + 4], eax
mov rax, qword [rdx]
cmp rax, 7
ja 0x1800ad5a2
mov ecx, 0x92
bt rcx, rax
jae 0x1800ad5a2
mov eax, dword [r15 + 8]
sub eax, dword [rbp - 0x50]
mov dword [r15], eax
jmp 0x1800ad5ac
mov ecx, dword [rbp - 0x50]
add ecx, dword [r15]
mov dword [r15 + 8], ecx
mov edi, 1
mov r12, rdx
mov qword [rbp - 0x38], rdi
jmp 0x1800ad606
mov rcx, qword [r12]
mov edx, ebx
mov r15, qword [r15]
mov qword [rbp - 0x18], r15
lea rax, [rcx - 1]
cmp rax, 2
jbe 0x1800ad5d7
cmp rcx, 6
jne 0x1800ad5dc
mov edx, 1
lea rax, [rsp + 0x78]
mov dword [rsp + 0x50], edx
mov qword [rsp + 0x28], rax
lea r8, [rbp - 0x50]
mov r9, r15
mov dword [rsp + 0x20], 0x4c
mov rdx, r14
lea rcx, [rsp + 0x50]
call fcn.1800293d0
mov r15, qword [rbp - 0x30]
add esi, 0x2142
cmp esi, 0x63c6
jbe 0x1800ad530
mov esi, dword [rbp - 0x80]
mov r14d, 0xcb
mov r12d, 0x4165
jmp 0x1800adc91
mov r9d, 0xe0
lea r8, [rbp + 0xe0]
xor edx, edx
lea rcx, [0x1803426e8]
call fcn.180012510
mov qword [rbp + 0x58], rax
jmp 0x1800adc91
mov r8d, 2
lea rdx, [0x1803424e8]
lea rcx, [rbp + 0x121]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, 0x73
mov word [rbp + 0x122], ax
movzx eax, word [0x180348a00]
mov word [rbp + 0x123], ax
movzx eax, byte [0x180348a02]
mov byte [rbp + 0x125], al
jmp 0x1800adc91
mov r8d, 3
lea rdx, [0x180348a1b]
lea rcx, [rbp + 0xd0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, 0x6173
mov word [rbp + 0xd3], ax
movzx eax, word [0x180348a3d]
mov word [rbp + 0xd5], ax
movzx eax, byte [0x180348a3f]
mov byte [rbp + 0xd7], al
jmp 0x1800adc91
mov r9d, 0xe0
lea r8, [rbp + 0x160]
xor edx, edx
lea rcx, [rbp + 0x1e8]
call fcn.180012510
mov r9d, 0xe0
mov qword [rbp + 0x50], rax
lea r8, str.BeginPaint
xor edx, edx
lea rcx, [rbp + 0x218]
call fcn.180012510
mov r9d, 0xe0
mov qword [rbp - 0x20], rax
lea r8, [rbp + 0x130]
xor edx, edx
lea rcx, [rbp + 0x2b8]
call fcn.180012510
mov r9d, 0xe0
mov qword [rbp + 0x10], rax
lea r8, [rbp + 0x148]
xor edx, edx
lea rcx, [rbp + 0x298]
call fcn.180012510
mov r9d, 0xe0
mov qword [rbp + 0x18], rax
lea r8, [rbp + 0xd0]
xor edx, edx
lea rcx, [rbp + 0x1d0]
call fcn.180012510
mov qword [rbp - 0x40], rax
jmp 0x1800adc91
mov rax, qword [rbp - 0x78]
mov r9, qword [r15]
mov r8, qword [r10]
mov edx, dword [rax]
mov rax, qword [rbp - 0x68]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_DefWindowProcA]
mov rdi, rax
mov qword [rbp - 0x38], rax
jmp 0x1800adc91
mov eax, 0x6565
mov byte [rbp + 0xca], 0
mov r8d, 1
mov word [rbp + 0xc8], ax
lea rdx, [0x180348a72]
lea rcx, [rbp + 0xc0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 3
lea rdx, [0x180348aa4]
lea rcx, [rbp + 0x200]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x1800adc91
movzx eax, word [0x180348b10]
movsd xmm0, qword [0x180348b08]
mov word [rbp + 0x2e2], ax
movabs rax, 0x6c006c0064002e
mov qword [rbp + 0x2e4], rax
movsd qword [rbp + 0x2da], xmm0
mov word [rbp + 0x2ec], bx
mov dword [rbp + 0x260], 0x75
jmp case.default.0x1800ac731
mov word [rbp + 0xd8], 0x6f
jmp case.default.0x1800ac731
mov eax, dword [0x180341f58]
lea r8, [rbp + 0x100]
mov dword [rbp + 0x270], eax
lea rcx, [rbp + 0x230]
movzx eax, word [0x180341f5c]
mov r9d, 0xe0
xor edx, edx
mov word [rbp + 0x274], ax
call fcn.180012510
mov r9d, 0xe0
mov qword [rbp + 0x20], rax
lea r8, [rbp + 0x110]
xor edx, edx
lea rcx, [rbp + 0x1a0]
call fcn.180012510
mov r9d, 0xe0
mov qword [rbp + 0x28], rax
lea r8, [rbp + 0x170]
xor edx, edx
lea rcx, [rbp + 0x1b8]
call fcn.180012510
mov r9d, 0xe0
mov qword [rbp + 0x30], rax
lea r8, [rbp + 0x188]
xor edx, edx
lea rcx, [rbp + 0x248]
call fcn.180012510
mov qword [rbp + 0x38], rax
jmp 0x1800adc91
mov dword [rbp + 0x206], 0x72
jmp case.default.0x1800ac731
mov eax, 0x65
mov word [rbp + 0x21c], ax
jmp case.default.0x1800ac731
mov byte [rbp + 0xf8], 0x4d
jmp case.default.0x1800ac731
mov dword [rbp + 0x1e0], 0x6c006c
mov word [rbp + 0x1e4], bx
jmp case.default.0x1800ac731
mov r9d, 0xe0
lea r8, [rbp + 0x120]
xor edx, edx
lea rcx, [rbp + 0x2d8]
call fcn.180012510
mov r9d, 0xe0
mov qword [rbp + 0x48], rax
lea r8, str.GetWindowLongA
xor edx, edx
lea rcx, [rbp + 0x260]
call fcn.180012510
mov qword [rbp + 0x40], rax
jmp 0x1800adc91
lea rax, [rbp + 0x298]
sub rax, 2
nop
cmp word [rax + 2], 0
lea rax, [rax + 2]
jne 0x1800ad970
movsd xmm0, qword [0x180348b18]
lea rdx, [0x1803422e0]
mov r8d, 2
movsd qword [rax], xmm0
lea rcx, [rbp + 0x2ae]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x1800adc91
mov eax, 0x64
mov dword [rbp + 0x21e], 0x330072
mov word [rbp + 0x226], ax
mov dword [rbp + 0x222], 0x2e0032
jmp case.default.0x1800ac731
mov word [rbp + 0x155], dx
mov word [rbp + 0x156], r12w
mov byte [rbp + 0x158], 0
jmp case.default.0x1800ac731
mov dword [rbp + 0x228], 0x6c006c
jmp case.default.0x1800ac731
movzx eax, word [0x180348b24]
mov word [rbp + 0xc1], ax
movzx eax, byte [0x180348b26]
mov byte [rbp + 0xc3], al
mov byte [rbp + 0xc0], 0x4d
mov byte [rbp + 0xc4], 0
jmp case.default.0x1800ac731
mov eax, dword [str.oyWind]
lea rdx, [0x180346680]
mov dword [rbp + 0x125], eax
lea rcx, [rbp + 0x12b]
movzx eax, word [0x180348b48]
mov r8d, 3
mov word [rbp + 0x129], ax
movzx eax, byte [0x180348b4a]
mov byte [rbp + 0x12b], al
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov r8d, 1
lea rdx, [0x180348b98]
lea rcx, [rbp + 0x2d8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov word [rbp + 0x2da], bx
jmp 0x1800adc91
mov r8d, 3
mov dword [rbp + 0x208], 0x320033
lea rdx, [0x180348bf0]
mov word [rbp + 0x20c], bx
lea rcx, [rbp + 0x200]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp 0x1800adc91
mov eax, 0x33
mov dword [rbp + 0x1d4], 0x720065
mov word [rbp + 0x1d8], ax
jmp case.default.0x1800ac731
mov r8d, 1
mov word [rbp + 0xd9], 0x78
lea rdx, [0x180348c0f]
lea rcx, [rbp + 0xda]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0xdb], 0
mov dword [rbp + 0x1d0], 0x730075
jmp 0x1800adc91
mov eax, dword [0x180348c18]
movsd xmm0, qword [str.lg32]
mov dword [rbp + 0x298], eax
mov eax, dword [0x180348c20]
mov dword [rbp + 0x29c], eax
movzx eax, word [0x180348c30]
mov word [rbp + 0x2a8], ax
movsd qword [rbp + 0x2a0], xmm0
jmp case.default.0x1800ac731
mov eax, PathYetAnotherMakeUniqueName
mov word [rbp + 0x2d0], bx
mov word [rbp + 0x148], ax
mov eax, 0x65
mov word [rbp + 0x149], ax
mov eax, 0x74
mov word [rbp + 0x14a], ax
mov dword [rbp + 0x14b], 0x65766153
jmp case.default.0x1800ac731
mov eax, 0x64
mov dword [rbp + 0x1da], 0x2e0032
mov word [rbp + 0x1de], ax
jmp case.default.0x1800ac731
mov eax, dword [str.enFi]
mov dword [rbp + 0x135], eax
mov eax, 0x6c
mov word [rbp + 0x139], ax
mov byte [rbp + 0x134], 0x70
jmp case.default.0x1800ac731
mov word [rbp + 0xfd], 0x67
jmp case.default.0x1800ac731
mov r8d, 5
mov dword [rbp + 0x212], 0x6c
lea rdx, [0x180348c63]
mov byte [rbp + 0xf0], 0
lea rcx, [rbp + 0xf0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x1800adc91
mov dword [rbp + 0x1f8], 0x6c006c
mov word [rbp + 0x1fc], bx
mov dword [rbp + 0x218], 0x730075
jmp case.default.0x1800ac731
mov eax, 0x46
mov word [rbp + 0x14f], ax
mov eax, 0x614e
mov dword [rbp + 0x150], 0x656c69
mov word [rbp + 0x153], ax
jmp case.default.0x1800ac731
mov r8d, 0xa
lea rdx, [rbp + 0x268]
movabs rax, 0x7200650073
mov qword [rbp + 0x262], rax
lea ecx, [r8 + 0x16]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__ltow]
mov r8d, 1
lea rdx, [0x180341f38]
lea rcx, [rbp + 0x260]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov eax, 0x64
mov dword [rbp + 0x26e], eax
mov edx, 0x6d
mov r8d, 0x7469
lea r9d, [rdx - 0x29]
lea r11d, [rdx - 0x1e]
dec r14d
cmp r14d, esi
jbe case.0x1800ac731.201
mov r10, qword [rsp + 0x68]
lea rcx, [0x180000000]
mov r15, qword [rbp - 0x30]
jmp 0x1800ac710
mov eax, 0xb9
nop word [rax + rax]
cmp eax, 0xb9
je 0x1800addea
add eax, 0x91
cmp eax, 0x14a
jb 0x1800adcd0
mov r12, qword [rbp - 0x20]
mov r14d, SHSetFolderPathA
mov rsi, qword [rbp - 0x20]
mov r15, qword [rbp - 0x20]
mov rbx, qword [rbp - 0x48]
mov r13, qword [rbp + 0x58]
mov eax, r14d
sub eax, 0xe2
je 0x1800addb4
sub eax, 1
je 0x1800adda2
sub eax, 1
je 0x1800add39
cmp eax, 1
jne 0x1800addd1
mov rax, qword [rbp - 0x68]
lea rdx, [rbp + 0x70]
mov rcx, qword [rax]
call r13
jmp 0x1800addd1
lea r8, [rbp + 0x7c]
lea rdx, [rbx + 0x40]
lea rcx, [rbp + 0x58]
call qword [rbp + 0x50]
mov r8d, dword [rbp + 0x5c]
mov r10d, r8d
mov edx, dword [rbp + 0x58]
mov eax, edx
mov ecx, dword [rbp + 0x64]
sub r10d, dword [rbx + 0x44]
sub ecx, r8d
sub eax, dword [rbx + 0x40]
mov r9d, dword [rbp + 0x60]
mov dword [rsp + 0x40], 0xcc0020
sub r9d, edx
mov dword [rsp + 0x38], r10d
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], ecx
mov rcx, r15
call qword [sym.imp.GDI32.dll_BitBlt]
mov rdx, r12
mov rcx, rsi
call qword [sym.imp.GDI32.dll_SelectObject]
mov rcx, rsi
call qword [sym.imp.GDI32.dll_DeleteDC]
jmp 0x1800addd1
mov rdx, qword [rbx + 0x30]
mov rcx, rsi
call qword [sym.imp.GDI32.dll_SelectObject]
mov r12, rax
jmp 0x1800addd1
mov rax, qword [rbp - 0x68]
lea rdx, [rbp + 0x70]
mov rcx, qword [rax]
call qword [rbp - 0x20]
mov rcx, rax
mov r15, rax
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov rsi, rax
inc r14d
cmp r14d, 0xe6
jb 0x1800add01
xor ebx, ebx
mov eax, ebx
jmp 0x1800abd13
xor r9d, r9d
mov qword [rsp + 0x20], rbx
mov r8, r14
xor edx, edx
mov ecx, 0x13c
call fcn.18009da50
mov r8, r14
xor edx, edx
mov ecx, 0x122
call fcn.180065670
xor ecx, ecx
call qword [rsp + 0x70]
mov rax, rbx
jmp 0x1800abd13
mov r12, qword [rsp + 0x68]
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x60]
mov dword [rsp + 0x58], ebx
mov edx, 0xfa
mov dword [rsp + 0x50], ebx
lea rcx, [rsp + 0x58]
movzx eax, byte [r12]
mov dword [rsp + 0x60], eax
mov rax, qword [r14 + 8]
mov qword [rsp + 0x20], rax
call fcn.1800b92b0
test eax, eax
jne 0x1800ade60
xor ecx, ecx
call qword [rsp + 0x70]
mov rax, rbx
jmp 0x1800abd13