Function at 0x180005020
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime
Query environment variable

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x2910
call fcn.180019140
sub rsp, rax
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x2900], rax
lea rcx, [rsp + 0x68]
call fcn.180016920
mov dword [rsp + 0x60], 0xb
lea rdx, [0x18002b36a]
lea rcx, [rsp + 0xa10]
call fcn.180016080
mov eax, dword [rsp + 0x60]
add eax, 0x6e
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa10]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa10]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x64
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa10]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa10]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa10]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x2e
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa10]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x64
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa10]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa10]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa10]
call fcn.180016f70
lea rcx, [rsp + 0x15a]
call fcn.180014510
mov qword [rsp + 0x4e0], rax
lea rdx, [rsp + 0x708]
lea rcx, [rsp + 0xa10]
call fcn.1800185c0
mov qword [rsp + 0x4e8], rax
lea rdx, [rsp + 0x740]
lea rcx, [rsp + 0xa10]
call fcn.180018320
mov rcx, qword [rsp + 0x4e0]
mov r9, rcx
mov rcx, qword [rsp + 0x4e8]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xa70]
call fcn.1800135b0
lea rcx, [rsp + 0x15b]
call fcn.180014510
mov qword [rsp + 0x4f0], rax
lea rdx, [rsp + 0x748]
lea rcx, [rsp + 0xa70]
call fcn.180018620
mov qword [rsp + 0x4f8], rax
lea rdx, [rsp + 0x750]
lea rcx, [rsp + 0xa70]
call fcn.180018380
mov rcx, qword [rsp + 0x4f0]
mov r9, rcx
mov rcx, qword [rsp + 0x4f8]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xaf0]
call fcn.180013690
lea rcx, [rsp + 0xaf0]
call fcn.180017f20
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rsp + 0x90], rax
cmp qword [rsp + 0x90], 0
jne 0x1800052c3
mov rcx, qword [rsp + 0x2920]
call fcn.180016920
lea rcx, [rsp + 0xaf0]
call fcn.180016ca0
lea rcx, [rsp + 0xa70]
call fcn.180016cd0
lea rcx, [rsp + 0xa10]
call fcn.180016ca0
lea rcx, [rsp + 0x68]
call fcn.180016d00
mov rax, qword [rsp + 0x2920]
jmp 0x18000cc4a
lea rdx, [0x18002b36b]
lea rcx, [rsp + 0x9f0]
call fcn.180016080
mov eax, dword [rsp + 0x60]
add eax, 0x4e
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x52
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x61
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x64
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x46
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x69
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9f0]
call fcn.180016f70
lea rdx, [0x18002b36c]
lea rcx, [rsp + 0x930]
call fcn.180016080
mov eax, dword [rsp + 0x60]
add eax, 0x4e
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x930]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x930]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x57
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x930]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x72
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x930]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x69
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x930]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x930]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x930]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x46
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x930]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x69
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x930]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x930]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x930]
call fcn.180016f70
lea rcx, [rsp + 0x15c]
call fcn.180014510
mov qword [rsp + 0x500], rax
lea rdx, [rsp + 0x758]
lea rcx, [rsp + 0x9f0]
call fcn.1800185c0
mov qword [rsp + 0x508], rax
lea rdx, [rsp + 0x760]
lea rcx, [rsp + 0x9f0]
call fcn.180018320
mov rcx, qword [rsp + 0x500]
mov r9, rcx
mov rcx, qword [rsp + 0x508]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xad0]
call fcn.1800135b0
lea rcx, [rsp + 0x15d]
call fcn.180014510
mov qword [rsp + 0x510], rax
lea rdx, [rsp + 0x768]
lea rcx, [rsp + 0xad0]
call fcn.180018620
mov qword [rsp + 0x518], rax
lea rdx, [rsp + 0x770]
lea rcx, [rsp + 0xad0]
call fcn.180018380
mov rcx, qword [rsp + 0x510]
mov r9, rcx
mov rcx, qword [rsp + 0x518]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xb50]
call fcn.180013690
lea rcx, [rsp + 0x15e]
call fcn.180014510
mov qword [rsp + 0x2c0], rax
lea rdx, [rsp + 0x778]
lea rcx, [rsp + 0x930]
call fcn.1800185c0
mov qword [rsp + 0x2c8], rax
lea rdx, [rsp + 0x780]
lea rcx, [rsp + 0x930]
call fcn.180018320
mov rcx, qword [rsp + 0x2c0]
mov r9, rcx
mov rcx, qword [rsp + 0x2c8]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xab0]
call fcn.1800135b0
lea rcx, [rsp + 0x165]
call fcn.180014510
mov qword [rsp + 0x2d0], rax
lea rdx, [rsp + 0x558]
lea rcx, [rsp + 0xab0]
call fcn.180018620
mov qword [rsp + 0x2d8], rax
lea rdx, [rsp + 0x560]
lea rcx, [rsp + 0xab0]
call fcn.180018380
mov rcx, qword [rsp + 0x2d0]
mov r9, rcx
mov rcx, qword [rsp + 0x2d8]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xbd0]
call fcn.180013690
lea rdx, [0x18002b36d]
lea rcx, [rsp + 0x950]
call fcn.180016080
mov eax, dword [rsp + 0x60]
add eax, 0x4e
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x950]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x950]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x43
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x950]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x72
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x950]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x950]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x61
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x950]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x950]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x950]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x46
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x950]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x69
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x950]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x950]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x950]
call fcn.180016f70
lea rcx, [rsp + 0x166]
call fcn.180014510
mov qword [rsp + 0x2e0], rax
lea rdx, [rsp + 0x568]
lea rcx, [rsp + 0x950]
call fcn.1800185c0
mov qword [rsp + 0x2e8], rax
lea rdx, [rsp + 0x570]
lea rcx, [rsp + 0x950]
call fcn.180018320
mov rcx, qword [rsp + 0x2e0]
mov r9, rcx
mov rcx, qword [rsp + 0x2e8]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xa90]
call fcn.1800135b0
lea rcx, [rsp + 0x180]
call fcn.180014510
mov qword [rsp + 0x2f0], rax
lea rdx, [rsp + 0x578]
lea rcx, [rsp + 0xa90]
call fcn.180018620
mov qword [rsp + 0x2f8], rax
lea rdx, [rsp + 0x580]
lea rcx, [rsp + 0xa90]
call fcn.180018380
mov rcx, qword [rsp + 0x2f0]
mov r9, rcx
mov rcx, qword [rsp + 0x2f8]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xb30]
call fcn.180013690
lea rcx, [rsp + 0xb50]
call fcn.180017f20
mov rdx, rax
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x188], rax
lea rcx, [rsp + 0x930]
call fcn.180017f20
mov rdx, rax
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x2b0], rax
lea rcx, [rsp + 0xb30]
call fcn.180017f20
mov rdx, rax
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x140], rax
cmp qword [rsp + 0x188], 0
je 0x1800059e1
cmp qword [rsp + 0x2b0], 0
je 0x1800059e1
cmp qword [rsp + 0x140], 0
jne 0x180005aaf
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2920]
call fcn.180016920
lea rcx, [rsp + 0xb30]
call fcn.180016ca0
lea rcx, [rsp + 0xa90]
call fcn.180016cd0
lea rcx, [rsp + 0x950]
call fcn.180016ca0
lea rcx, [rsp + 0xbd0]
call fcn.180016ca0
lea rcx, [rsp + 0xab0]
call fcn.180016cd0
lea rcx, [rsp + 0xb50]
call fcn.180016ca0
lea rcx, [rsp + 0xad0]
call fcn.180016cd0
lea rcx, [rsp + 0x930]
call fcn.180016ca0
lea rcx, [rsp + 0x9f0]
call fcn.180016ca0
lea rcx, [rsp + 0xaf0]
call fcn.180016ca0
lea rcx, [rsp + 0xa70]
call fcn.180016cd0
lea rcx, [rsp + 0xa10]
call fcn.180016ca0
lea rcx, [rsp + 0x68]
call fcn.180016d00
mov rax, qword [rsp + 0x2920]
jmp 0x18000cc4a
lea rdx, [0x18002b36e]
lea rcx, [rsp + 0x9d0]
call fcn.180016080
mov eax, dword [rsp + 0x60]
add eax, 0x6b
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x72
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6e
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x33
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x32
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x2e
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x64
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9d0]
call fcn.180016f70
lea rcx, [rsp + 0x15f]
call fcn.180014510
mov qword [rsp + 0x300], rax
lea rdx, [rsp + 0x588]
lea rcx, [rsp + 0x9d0]
call fcn.1800185c0
mov qword [rsp + 0x308], rax
lea rdx, [rsp + 0x590]
lea rcx, [rsp + 0x9d0]
call fcn.180018320
mov rcx, qword [rsp + 0x300]
mov r9, rcx
mov rcx, qword [rsp + 0x308]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xb10]
call fcn.1800135b0
lea rcx, [rsp + 0x160]
call fcn.180014510
mov qword [rsp + 0x310], rax
lea rdx, [rsp + 0x598]
lea rcx, [rsp + 0xb10]
call fcn.180018620
mov qword [rsp + 0x318], rax
lea rdx, [rsp + 0x5a0]
lea rcx, [rsp + 0xb10]
call fcn.180018380
mov rcx, qword [rsp + 0x310]
mov r9, rcx
mov rcx, qword [rsp + 0x318]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xbb0]
call fcn.180013690
lea rcx, [rsp + 0xbb0]
call fcn.180017f20
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rsp + 0x98], rax
cmp qword [rsp + 0x98], 0
jne 0x180005e1b
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2920]
call fcn.180016920
lea rcx, [rsp + 0xbb0]
call fcn.180016ca0
lea rcx, [rsp + 0xb10]
call fcn.180016cd0
lea rcx, [rsp + 0x9d0]
call fcn.180016ca0
lea rcx, [rsp + 0xb30]
call fcn.180016ca0
lea rcx, [rsp + 0xa90]
call fcn.180016cd0
lea rcx, [rsp + 0x950]
call fcn.180016ca0
lea rcx, [rsp + 0xbd0]
call fcn.180016ca0
lea rcx, [rsp + 0xab0]
call fcn.180016cd0
lea rcx, [rsp + 0xb50]
call fcn.180016ca0
lea rcx, [rsp + 0xad0]
call fcn.180016cd0
lea rcx, [rsp + 0x930]
call fcn.180016ca0
lea rcx, [rsp + 0x9f0]
call fcn.180016ca0
lea rcx, [rsp + 0xaf0]
call fcn.180016ca0
lea rcx, [rsp + 0xa70]
call fcn.180016cd0
lea rcx, [rsp + 0xa10]
call fcn.180016ca0
lea rcx, [rsp + 0x68]
call fcn.180016d00
mov rax, qword [rsp + 0x2920]
jmp 0x18000cc4a
lea rdx, [0x18002b36f]
lea rcx, [rsp + 0x9b0]
call fcn.180016080
mov eax, dword [rsp + 0x60]
add eax, 0x47
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x53
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x79
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x73
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6d
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x49
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6e
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x66
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x9b0]
call fcn.180016f70
lea rcx, [rsp + 0x161]
call fcn.180014510
mov qword [rsp + 0x320], rax
lea rdx, [rsp + 0x5a8]
lea rcx, [rsp + 0x9b0]
call fcn.1800185c0
mov qword [rsp + 0x328], rax
lea rdx, [rsp + 0x5b0]
lea rcx, [rsp + 0x9b0]
call fcn.180018320
mov rcx, qword [rsp + 0x320]
mov r9, rcx
mov rcx, qword [rsp + 0x328]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xb90]
call fcn.1800135b0
lea rcx, [rsp + 0x162]
call fcn.180014510
mov qword [rsp + 0x330], rax
lea rdx, [rsp + 0x5b8]
lea rcx, [rsp + 0xb90]
call fcn.180018620
mov qword [rsp + 0x338], rax
lea rdx, [rsp + 0x5c0]
lea rcx, [rsp + 0xb90]
call fcn.180018380
mov rcx, qword [rsp + 0x330]
mov r9, rcx
mov rcx, qword [rsp + 0x338]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xc50]
call fcn.180013690
lea rdx, [0x18002b3b1]
lea rcx, [rsp + 0x990]
call fcn.180016080
mov eax, dword [rsp + 0x60]
add eax, 0x47
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x990]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x990]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x990]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x56
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x990]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x990]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x72
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x990]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x73
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x990]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x69
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x990]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x990]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6e
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x990]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x45
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x990]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x78
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x990]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x41
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x990]
call fcn.180016f70
lea rcx, [rsp + 0x163]
call fcn.180014510
mov qword [rsp + 0x340], rax
lea rdx, [rsp + 0x5c8]
lea rcx, [rsp + 0x990]
call fcn.1800185c0
mov qword [rsp + 0x348], rax
lea rdx, [rsp + 0x5d0]
lea rcx, [rsp + 0x990]
call fcn.180018320
mov rcx, qword [rsp + 0x340]
mov r9, rcx
mov rcx, qword [rsp + 0x348]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xb70]
call fcn.1800135b0
lea rcx, [rsp + 0x164]
call fcn.180014510
mov qword [rsp + 0x350], rax
lea rdx, [rsp + 0x5d8]
lea rcx, [rsp + 0xb70]
call fcn.180018620
mov qword [rsp + 0x358], rax
lea rdx, [rsp + 0x5e0]
lea rcx, [rsp + 0xb70]
call fcn.180018380
mov rcx, qword [rsp + 0x350]
mov r9, rcx
mov rcx, qword [rsp + 0x358]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xc30]
call fcn.180013690
lea rdx, [0x18002b3b2]
lea rcx, [rsp + 0x8f0]
call fcn.180016080
mov eax, dword [rsp + 0x60]
add eax, 0x47
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x62
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x61
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x4d
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6d
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x72
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x79
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x53
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x61
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x75
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x73
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x45
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8f0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x78
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8f0]
call fcn.180016f70
lea rcx, [rsp + 0x167]
call fcn.180014510
mov qword [rsp + 0x360], rax
lea rdx, [rsp + 0x5e8]
lea rcx, [rsp + 0x8f0]
call fcn.1800185c0
mov qword [rsp + 0x368], rax
lea rdx, [rsp + 0x5f0]
lea rcx, [rsp + 0x8f0]
call fcn.180018320
mov rcx, qword [rsp + 0x360]
mov r9, rcx
mov rcx, qword [rsp + 0x368]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xc10]
call fcn.1800135b0
lea rcx, [rsp + 0x168]
call fcn.180014510
mov qword [rsp + 0x370], rax
lea rdx, [rsp + 0x5f8]
lea rcx, [rsp + 0xc10]
call fcn.180018620
mov qword [rsp + 0x378], rax
lea rdx, [rsp + 0x600]
lea rcx, [rsp + 0xc10]
call fcn.180018380
mov rcx, qword [rsp + 0x370]
mov r9, rcx
mov rcx, qword [rsp + 0x378]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xc90]
call fcn.180013690
lea rdx, [0x18002b3b3]
lea rcx, [rsp + 0x910]
call fcn.180016080
mov eax, dword [rsp + 0x60]
add eax, 0x47
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x910]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x910]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x910]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x43
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x910]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x910]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6d
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x910]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x70
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x910]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x75
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x910]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x910]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x910]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x72
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x910]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x4e
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x910]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x61
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x910]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6d
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x910]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x910]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x41
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x910]
call fcn.180016f70
lea rcx, [rsp + 0x169]
call fcn.180014510
mov qword [rsp + 0x380], rax
lea rdx, [rsp + 0x608]
lea rcx, [rsp + 0x910]
call fcn.1800185c0
mov qword [rsp + 0x388], rax
lea rdx, [rsp + 0x610]
lea rcx, [rsp + 0x910]
call fcn.180018320
mov rcx, qword [rsp + 0x380]
mov r9, rcx
mov rcx, qword [rsp + 0x388]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xbf0]
call fcn.1800135b0
lea rcx, [rsp + 0x150]
call fcn.180014510
mov qword [rsp + 0x390], rax
lea rdx, [rsp + 0x618]
lea rcx, [rsp + 0xbf0]
call fcn.180018620
mov qword [rsp + 0x398], rax
lea rdx, [rsp + 0x620]
lea rcx, [rsp + 0xbf0]
call fcn.180018380
mov rcx, qword [rsp + 0x390]
mov r9, rcx
mov rcx, qword [rsp + 0x398]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xc70]
call fcn.180013690
lea rcx, [rsp + 0xc50]
call fcn.180017f20
mov rdx, rax
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x260], rax
lea rcx, [rsp + 0xc30]
call fcn.180017f20
mov rdx, rax
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x268], rax
lea rcx, [rsp + 0xc90]
call fcn.180017f20
mov rdx, rax
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x270], rax
lea rcx, [rsp + 0xc70]
call fcn.180017f20
mov rdx, rax
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x278], rax
cmp qword [rsp + 0x260], 0
je 0x1800069a1
cmp qword [rsp + 0x268], 0
je 0x1800069a1
cmp qword [rsp + 0x270], 0
je 0x1800069a1
cmp qword [rsp + 0x278], 0
jne 0x180006b40
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2920]
call fcn.180016920
lea rcx, [rsp + 0xc70]
call fcn.180016ca0
lea rcx, [rsp + 0xbf0]
call fcn.180016cd0
lea rcx, [rsp + 0x910]
call fcn.180016ca0
lea rcx, [rsp + 0xc90]
call fcn.180016ca0
lea rcx, [rsp + 0xc10]
call fcn.180016cd0
lea rcx, [rsp + 0x8f0]
call fcn.180016ca0
lea rcx, [rsp + 0xc30]
call fcn.180016ca0
lea rcx, [rsp + 0xb70]
call fcn.180016cd0
lea rcx, [rsp + 0x990]
call fcn.180016ca0
lea rcx, [rsp + 0xc50]
call fcn.180016ca0
lea rcx, [rsp + 0xb90]
call fcn.180016cd0
lea rcx, [rsp + 0x9b0]
call fcn.180016ca0
lea rcx, [rsp + 0xbb0]
call fcn.180016ca0
lea rcx, [rsp + 0xb10]
call fcn.180016cd0
lea rcx, [rsp + 0x9d0]
call fcn.180016ca0
lea rcx, [rsp + 0xb30]
call fcn.180016ca0
lea rcx, [rsp + 0xa90]
call fcn.180016cd0
lea rcx, [rsp + 0x950]
call fcn.180016ca0
lea rcx, [rsp + 0xbd0]
call fcn.180016ca0
lea rcx, [rsp + 0xab0]
call fcn.180016cd0
lea rcx, [rsp + 0xb50]
call fcn.180016ca0
lea rcx, [rsp + 0xad0]
call fcn.180016cd0
lea rcx, [rsp + 0x930]
call fcn.180016ca0
lea rcx, [rsp + 0x9f0]
call fcn.180016ca0
lea rcx, [rsp + 0xaf0]
call fcn.180016ca0
lea rcx, [rsp + 0xa70]
call fcn.180016cd0
lea rcx, [rsp + 0xa10]
call fcn.180016ca0
lea rcx, [rsp + 0x68]
call fcn.180016d00
mov rax, qword [rsp + 0x2920]
jmp 0x18000cc4a
lea rax, [rsp + 0x7d0]
mov rdi, rax
xor eax, eax
mov ecx, 0x94
rep stosb byte [rdi], al
mov dword [rsp + 0x7d0], 0x94
lea rax, [rsp + 0x710]
mov rdi, rax
xor eax, eax
mov ecx, 0x30
rep stosb byte [rdi], al
lea rax, [rsp + 0x790]
mov rdi, rax
xor eax, eax
mov ecx, 0x40
rep stosb byte [rdi], al
mov dword [rsp + 0x1d8], 0x10
mov dword [rsp + 0x790], 0x40
lea rcx, [rsp + 0x710]
call qword [rsp + 0x260]
lea rcx, [rsp + 0x7d0]
call qword [rsp + 0x268]
lea rcx, [rsp + 0x790]
call qword [rsp + 0x270]
lea rdx, [rsp + 0x1d8]
lea rcx, [rsp + 0xea0]
call qword [rsp + 0x278]
mov byte [rsp + 0x106], 0x7b
lea rdx, [rsp + 0x106]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0x107], 0x22
lea rdx, [rsp + 0x107]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0x108], 0x76
lea rdx, [rsp + 0x108]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0x109], 0x65
lea rdx, [rsp + 0x109]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0x110], 0x72
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0x111], 0x73
lea rdx, [rsp + 0x111]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0x112], 0x69
lea rdx, [rsp + 0x112]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xa0], 0x6f
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xa1], 0x6e
lea rdx, [rsp + 0xa1]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xa2], 0x22
lea rdx, [rsp + 0xa2]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xa3], 0x3a
lea rdx, [rsp + 0xa3]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xa4], 0x22
lea rdx, [rsp + 0xa4]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov edx, dword [rsp + 0x7d8]
lea rcx, [rsp + 0xe70]
call fcn.180018a90
mov qword [rsp + 0x3a0], rax
mov edx, dword [rsp + 0x7d4]
lea rcx, [rsp + 0xe50]
call fcn.180018a90
lea r8, [0x18002b3b4]
mov rdx, rax
lea rcx, [rsp + 0xe30]
call fcn.180013900
mov rcx, qword [rsp + 0x3a0]
mov r8, rcx
mov rdx, rax
lea rcx, [rsp + 0xcf0]
call fcn.1800138c0
lea rcx, [rsp + 0xe30]
call fcn.180016ca0
lea rcx, [rsp + 0xe50]
call fcn.180016ca0
lea rcx, [rsp + 0xe70]
call fcn.180016ca0
lea rax, [rsp + 0xcf0]
mov qword [rsp + 0x280], rax
mov rcx, qword [rsp + 0x280]
call fcn.180017f20
mov qword [rsp + 0x1e0], rax
mov rcx, qword [rsp + 0x280]
call fcn.180017f40
mov qword [rsp + 0x3a8], rax
jmp 0x180006df1
mov rax, qword [rsp + 0x1e0]
inc rax
mov qword [rsp + 0x1e0], rax
mov rax, qword [rsp + 0x3a8]
cmp qword [rsp + 0x1e0], rax
je 0x180006e38
mov rax, qword [rsp + 0x1e0]
movzx eax, byte [rax]
mov byte [rsp + 0xa5], al
movzx eax, byte [rsp + 0xa5]
mov byte [rsp + 0xa6], al
lea rdx, [rsp + 0xa6]
lea rcx, [rsp + 0x68]
call fcn.180018950
jmp 0x180006dde
mov byte [rsp + 0xa7], 0x22
lea rdx, [rsp + 0xa7]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xa8], 0x2c
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xa9], 0x22
lea rdx, [rsp + 0xa9]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xaa], 0x63
lea rdx, [rsp + 0xaa]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xab], 0x70
lea rdx, [rsp + 0xab]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xac], 0x75
lea rdx, [rsp + 0xac]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xad], 0x5f
lea rdx, [rsp + 0xad]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xae], 0x63
lea rdx, [rsp + 0xae]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xaf], 0x6f
lea rdx, [rsp + 0xaf]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xb0], 0x75
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xb1], 0x6e
lea rdx, [rsp + 0xb1]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xb2], 0x74
lea rdx, [rsp + 0xb2]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xb3], 0x22
lea rdx, [rsp + 0xb3]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xb4], 0x3a
lea rdx, [rsp + 0xb4]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xb5], 0x22
lea rdx, [rsp + 0xb5]
lea rcx, [rsp + 0x68]
call fcn.180018950
cmp dword [rsp + 0x730], 0xa
jb 0x180007024
xor edx, edx
mov eax, dword [rsp + 0x730]
mov ecx, 0xa
div ecx
add eax, 0x30
mov byte [rsp + 0xb6], al
lea rdx, [rsp + 0xb6]
lea rcx, [rsp + 0x68]
call fcn.180018950
xor edx, edx
mov eax, dword [rsp + 0x730]
mov ecx, 0xa
div ecx
mov eax, edx
add eax, 0x30
mov byte [rsp + 0xb7], al
lea rdx, [rsp + 0xb7]
lea rcx, [rsp + 0x68]
call fcn.180018950
jmp 0x180007047
mov eax, dword [rsp + 0x730]
add eax, 0x30
mov byte [rsp + 0xb8], al
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xb9], 0x22
lea rdx, [rsp + 0xb9]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xba], 0x2c
lea rdx, [rsp + 0xba]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xbb], 0x22
lea rdx, [rsp + 0xbb]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xbc], 0x6d
lea rdx, [rsp + 0xbc]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xbd], 0x65
lea rdx, [rsp + 0xbd]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xbe], 0x6d
lea rdx, [rsp + 0xbe]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xbf], 0x22
lea rdx, [rsp + 0xbf]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xc0], 0x3a
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xc1], 0x22
lea rdx, [rsp + 0xc1]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov rdx, qword [rsp + 0x798]
lea rcx, [rsp + 0xcd0]
call fcn.180018ac0
lea rax, [rsp + 0xcd0]
mov qword [rsp + 0x2b8], rax
mov rcx, qword [rsp + 0x2b8]
call fcn.180017f20
mov qword [rsp + 0x1e8], rax
mov rcx, qword [rsp + 0x2b8]
call fcn.180017f40
mov qword [rsp + 0x3b0], rax
jmp 0x180007195
mov rax, qword [rsp + 0x1e8]
inc rax
mov qword [rsp + 0x1e8], rax
mov rax, qword [rsp + 0x3b0]
cmp qword [rsp + 0x1e8], rax
je 0x1800071dc
mov rax, qword [rsp + 0x1e8]
movzx eax, byte [rax]
mov byte [rsp + 0xc2], al
movzx eax, byte [rsp + 0xc2]
mov byte [rsp + 0xc3], al
lea rdx, [rsp + 0xc3]
lea rcx, [rsp + 0x68]
call fcn.180018950
jmp 0x180007182
mov byte [rsp + 0xc4], 0x22
lea rdx, [rsp + 0xc4]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xc5], 0x2c
lea rdx, [rsp + 0xc5]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xc6], 0x22
lea rdx, [rsp + 0xc6]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xc7], 0x70
lea rdx, [rsp + 0xc7]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xc8], 0x63
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xc9], 0x22
lea rdx, [rsp + 0xc9]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xca], 0x3a
lea rdx, [rsp + 0xca]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xcb], 0x22
lea rdx, [rsp + 0xcb]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov dword [rsp + 0x128], 0
jmp 0x1800072c9
mov eax, dword [rsp + 0x128]
inc eax
mov dword [rsp + 0x128], eax
mov eax, dword [rsp + 0x1d8]
cmp dword [rsp + 0x128], eax
jae 0x180007304
movsxd rax, dword [rsp + 0x128]
movzx eax, byte [rsp + rax + 0xea0]
mov byte [rsp + 0xcc], al
lea rdx, [rsp + 0xcc]
lea rcx, [rsp + 0x68]
call fcn.180018950
jmp 0x1800072b9
mov byte [rsp + 0xcd], 0x22
lea rdx, [rsp + 0xcd]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xce], 0x2c
lea rdx, [rsp + 0xce]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xcf], 0x22
lea rdx, [rsp + 0xcf]
lea rcx, [rsp + 0x68]
call fcn.180018950
lea rdx, [0x18002b3b6]
lea rcx, [rsp + 0x8d0]
call fcn.180016080
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x3f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x3f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x25
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x4c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x4f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x43
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x41
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x4c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x41
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x50
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x50
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x44
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x41
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x54
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x41
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x25
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x47
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x67
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x43
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x68
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x72
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6d
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x55
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x73
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x72
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x20
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x44
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x61
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x61
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x4c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x63
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x61
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x20
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x53
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x61
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8d0]
call fcn.180016f70
lea rcx, [rsp + 0x151]
call fcn.180014510
mov qword [rsp + 0x3b8], rax
lea rdx, [rsp + 0x628]
lea rcx, [rsp + 0x8d0]
call fcn.1800185c0
mov qword [rsp + 0x3c0], rax
lea rdx, [rsp + 0x630]
lea rcx, [rsp + 0x8d0]
call fcn.180018320
mov rcx, qword [rsp + 0x3b8]
mov r9, rcx
mov rcx, qword [rsp + 0x3c0]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xcb0]
call fcn.1800135b0
lea rcx, [rsp + 0xcb0]
call fcn.1800183e0
mov r8d, 0x103
lea rdx, [rsp + 0xeb0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea rax, [rsp + 0xeb0]
mov qword [rsp + 0x120], rax
lea rcx, [rsp + 0xeb0]
call fcn.18001fd2c
shl rax, 1
mov word [rsp + 0x118], ax
movzx eax, word [rsp + 0x118]
add rax, 2
mov word [rsp + 0x11a], ax
mov dword [rsp + 0x1a8], 0x30
mov qword [rsp + 0x1b0], 0
mov dword [rsp + 0x1c0], 0x40
lea rax, [rsp + 0x118]
mov qword [rsp + 0x1b8], rax
mov qword [rsp + 0x1c8], 0
mov qword [rsp + 0x1d0], 0
mov dword [rsp + 0x50], 0
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x40], 0x60
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x250]
lea r8, [rsp + 0x1a8]
mov edx, 0x12019f
lea rcx, [rsp + 0x288]
call qword [rsp + 0x140]
mov dword [rsp + 0x64], eax
cmp dword [rsp + 0x64], 0
jge 0x180007cdb
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2920]
call fcn.180016920
lea rcx, [rsp + 0xcb0]
call fcn.180016cd0
lea rcx, [rsp + 0x8d0]
call fcn.180016ca0
lea rcx, [rsp + 0xcd0]
call fcn.180016ca0
lea rcx, [rsp + 0xcf0]
call fcn.180016ca0
lea rcx, [rsp + 0xc70]
call fcn.180016ca0
lea rcx, [rsp + 0xbf0]
call fcn.180016cd0
lea rcx, [rsp + 0x910]
call fcn.180016ca0
lea rcx, [rsp + 0xc90]
call fcn.180016ca0
lea rcx, [rsp + 0xc10]
call fcn.180016cd0
lea rcx, [rsp + 0x8f0]
call fcn.180016ca0
lea rcx, [rsp + 0xc30]
call fcn.180016ca0
lea rcx, [rsp + 0xb70]
call fcn.180016cd0
lea rcx, [rsp + 0x990]
call fcn.180016ca0
lea rcx, [rsp + 0xc50]
call fcn.180016ca0
lea rcx, [rsp + 0xb90]
call fcn.180016cd0
lea rcx, [rsp + 0x9b0]
call fcn.180016ca0
lea rcx, [rsp + 0xbb0]
call fcn.180016ca0
lea rcx, [rsp + 0xb10]
call fcn.180016cd0
lea rcx, [rsp + 0x9d0]
call fcn.180016ca0
lea rcx, [rsp + 0xb30]
call fcn.180016ca0
lea rcx, [rsp + 0xa90]
call fcn.180016cd0
lea rcx, [rsp + 0x950]
call fcn.180016ca0
lea rcx, [rsp + 0xbd0]
call fcn.180016ca0
lea rcx, [rsp + 0xab0]
call fcn.180016cd0
lea rcx, [rsp + 0xb50]
call fcn.180016ca0
lea rcx, [rsp + 0xad0]
call fcn.180016cd0
lea rcx, [rsp + 0x930]
call fcn.180016ca0
lea rcx, [rsp + 0x9f0]
call fcn.180016ca0
lea rcx, [rsp + 0xaf0]
call fcn.180016ca0
lea rcx, [rsp + 0xa70]
call fcn.180016cd0
lea rcx, [rsp + 0xa10]
call fcn.180016ca0
lea rcx, [rsp + 0x68]
call fcn.180016d00
mov rax, qword [rsp + 0x2920]
jmp 0x18000cc4a
lea rdx, [0x18002b3b7]
lea rcx, [rsp + 0x890]
call fcn.180016080
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x3f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x3f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x25
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x4c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x4f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x43
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x41
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x4c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x41
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x50
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x50
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x44
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x41
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x54
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x41
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x25
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x47
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x67
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x43
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x68
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x72
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6d
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x55
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x73
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x72
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x20
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x44
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x61
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x61
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x44
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x66
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x61
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x75
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x4c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x67
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x69
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6e
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x20
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x44
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x61
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x61
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x890]
call fcn.180016f70
lea rcx, [rsp + 0x152]
call fcn.180014510
mov qword [rsp + 0x3c8], rax
lea rdx, [rsp + 0x638]
lea rcx, [rsp + 0x890]
call fcn.1800185c0
mov qword [rsp + 0x3d0], rax
lea rdx, [rsp + 0x640]
lea rcx, [rsp + 0x890]
call fcn.180018320
mov rcx, qword [rsp + 0x3c8]
mov r9, rcx
mov rcx, qword [rsp + 0x3d0]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xd10]
call fcn.1800135b0
lea rcx, [rsp + 0xd10]
call fcn.1800183e0
mov r8d, 0x103
lea rdx, [rsp + 0x10c0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea rax, [rsp + 0x10c0]
mov qword [rsp + 0x120], rax
lea rcx, [rsp + 0x10c0]
call fcn.18001fd2c
shl rax, 1
mov word [rsp + 0x118], ax
movzx eax, word [rsp + 0x118]
add rax, 2
mov word [rsp + 0x11a], ax
mov dword [rsp + 0x1a8], 0x30
mov qword [rsp + 0x1b0], 0
mov dword [rsp + 0x1c0], 0x40
lea rax, [rsp + 0x118]
mov qword [rsp + 0x1b8], rax
mov qword [rsp + 0x1c8], 0
mov qword [rsp + 0x1d0], 0
mov dword [rsp + 0x50], 0
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x40], 0x60
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x250]
lea r8, [rsp + 0x1a8]
mov edx, 0x12019f
lea rcx, [rsp + 0x298]
call qword [rsp + 0x140]
mov dword [rsp + 0x64], eax
cmp dword [rsp + 0x64], 0
jge 0x180008749
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2920]
call fcn.180016920
lea rcx, [rsp + 0xd10]
call fcn.180016cd0
lea rcx, [rsp + 0x890]
call fcn.180016ca0
lea rcx, [rsp + 0xcb0]
call fcn.180016cd0
lea rcx, [rsp + 0x8d0]
call fcn.180016ca0
lea rcx, [rsp + 0xcd0]
call fcn.180016ca0
lea rcx, [rsp + 0xcf0]
call fcn.180016ca0
lea rcx, [rsp + 0xc70]
call fcn.180016ca0
lea rcx, [rsp + 0xbf0]
call fcn.180016cd0
lea rcx, [rsp + 0x910]
call fcn.180016ca0
lea rcx, [rsp + 0xc90]
call fcn.180016ca0
lea rcx, [rsp + 0xc10]
call fcn.180016cd0
lea rcx, [rsp + 0x8f0]
call fcn.180016ca0
lea rcx, [rsp + 0xc30]
call fcn.180016ca0
lea rcx, [rsp + 0xb70]
call fcn.180016cd0
lea rcx, [rsp + 0x990]
call fcn.180016ca0
lea rcx, [rsp + 0xc50]
call fcn.180016ca0
lea rcx, [rsp + 0xb90]
call fcn.180016cd0
lea rcx, [rsp + 0x9b0]
call fcn.180016ca0
lea rcx, [rsp + 0xbb0]
call fcn.180016ca0
lea rcx, [rsp + 0xb10]
call fcn.180016cd0
lea rcx, [rsp + 0x9d0]
call fcn.180016ca0
lea rcx, [rsp + 0xb30]
call fcn.180016ca0
lea rcx, [rsp + 0xa90]
call fcn.180016cd0
lea rcx, [rsp + 0x950]
call fcn.180016ca0
lea rcx, [rsp + 0xbd0]
call fcn.180016ca0
lea rcx, [rsp + 0xab0]
call fcn.180016cd0
lea rcx, [rsp + 0xb50]
call fcn.180016ca0
lea rcx, [rsp + 0xad0]
call fcn.180016cd0
lea rcx, [rsp + 0x930]
call fcn.180016ca0
lea rcx, [rsp + 0x9f0]
call fcn.180016ca0
lea rcx, [rsp + 0xaf0]
call fcn.180016ca0
lea rcx, [rsp + 0xa70]
call fcn.180016cd0
lea rcx, [rsp + 0xa10]
call fcn.180016ca0
lea rcx, [rsp + 0x68]
call fcn.180016d00
mov rax, qword [rsp + 0x2920]
jmp 0x18000cc4a
lea rdx, [0x18002b3b8]
lea rcx, [rsp + 0x8b0]
call fcn.180016080
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x3f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x3f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x25
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x4c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x4f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x43
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x41
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x4c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x41
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x50
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x50
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x44
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x41
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x54
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x41
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x25
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x47
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x67
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x43
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x68
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x72
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6d
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x55
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x73
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x72
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x20
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x44
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x61
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x61
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x44
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x66
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x61
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x75
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x57
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x62
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x20
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x44
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x61
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x61
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x8b0]
call fcn.180016f70
lea rcx, [rsp + 0x153]
call fcn.180014510
mov qword [rsp + 0x3d8], rax
lea rdx, [rsp + 0x648]
lea rcx, [rsp + 0x8b0]
call fcn.1800185c0
mov qword [rsp + 0x3e0], rax
lea rdx, [rsp + 0x650]
lea rcx, [rsp + 0x8b0]
call fcn.180018320
mov rcx, qword [rsp + 0x3d8]
mov r9, rcx
mov rcx, qword [rsp + 0x3e0]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xd50]
call fcn.1800135b0
lea rcx, [rsp + 0xd50]
call fcn.1800183e0
mov r8d, 0x103
lea rdx, [rsp + 0x12d0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea rax, [rsp + 0x12d0]
mov qword [rsp + 0x120], rax
lea rcx, [rsp + 0x12d0]
call fcn.18001fd2c
shl rax, 1
mov word [rsp + 0x118], ax
movzx eax, word [rsp + 0x118]
add rax, 2
mov word [rsp + 0x11a], ax
mov dword [rsp + 0x1a8], 0x30
mov qword [rsp + 0x1b0], 0
mov dword [rsp + 0x1c0], 0x40
lea rax, [rsp + 0x118]
mov qword [rsp + 0x1b8], rax
mov qword [rsp + 0x1c8], 0
mov qword [rsp + 0x1d0], 0
mov dword [rsp + 0x50], 0
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x40], 0x60
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x250]
lea r8, [rsp + 0x1a8]
mov edx, 0x12019f
lea rcx, [rsp + 0x2a0]
call qword [rsp + 0x140]
mov dword [rsp + 0x64], eax
cmp dword [rsp + 0x64], 0
jge 0x180009197
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2920]
call fcn.180016920
lea rcx, [rsp + 0xd50]
call fcn.180016cd0
lea rcx, [rsp + 0x8b0]
call fcn.180016ca0
lea rcx, [rsp + 0xd10]
call fcn.180016cd0
lea rcx, [rsp + 0x890]
call fcn.180016ca0
lea rcx, [rsp + 0xcb0]
call fcn.180016cd0
lea rcx, [rsp + 0x8d0]
call fcn.180016ca0
lea rcx, [rsp + 0xcd0]
call fcn.180016ca0
lea rcx, [rsp + 0xcf0]
call fcn.180016ca0
lea rcx, [rsp + 0xc70]
call fcn.180016ca0
lea rcx, [rsp + 0xbf0]
call fcn.180016cd0
lea rcx, [rsp + 0x910]
call fcn.180016ca0
lea rcx, [rsp + 0xc90]
call fcn.180016ca0
lea rcx, [rsp + 0xc10]
call fcn.180016cd0
lea rcx, [rsp + 0x8f0]
call fcn.180016ca0
lea rcx, [rsp + 0xc30]
call fcn.180016ca0
lea rcx, [rsp + 0xb70]
call fcn.180016cd0
lea rcx, [rsp + 0x990]
call fcn.180016ca0
lea rcx, [rsp + 0xc50]
call fcn.180016ca0
lea rcx, [rsp + 0xb90]
call fcn.180016cd0
lea rcx, [rsp + 0x9b0]
call fcn.180016ca0
lea rcx, [rsp + 0xbb0]
call fcn.180016ca0
lea rcx, [rsp + 0xb10]
call fcn.180016cd0
lea rcx, [rsp + 0x9d0]
call fcn.180016ca0
lea rcx, [rsp + 0xb30]
call fcn.180016ca0
lea rcx, [rsp + 0xa90]
call fcn.180016cd0
lea rcx, [rsp + 0x950]
call fcn.180016ca0
lea rcx, [rsp + 0xbd0]
call fcn.180016ca0
lea rcx, [rsp + 0xab0]
call fcn.180016cd0
lea rcx, [rsp + 0xb50]
call fcn.180016ca0
lea rcx, [rsp + 0xad0]
call fcn.180016cd0
lea rcx, [rsp + 0x930]
call fcn.180016ca0
lea rcx, [rsp + 0x9f0]
call fcn.180016ca0
lea rcx, [rsp + 0xaf0]
call fcn.180016ca0
lea rcx, [rsp + 0xa70]
call fcn.180016cd0
lea rcx, [rsp + 0xa10]
call fcn.180016ca0
lea rcx, [rsp + 0x68]
call fcn.180016d00
mov rax, qword [rsp + 0x2920]
jmp 0x18000cc4a
lea rdx, [0x18002b3b9]
lea rcx, [rsp + 0x870]
call fcn.180016080
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x3f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x3f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x25
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x4c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x4f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x43
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x41
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x4c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x41
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x50
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x50
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x44
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x41
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x54
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x41
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x25
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x47
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x67
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x43
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x68
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x72
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6d
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x55
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x73
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x72
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x20
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x44
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x61
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x61
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x44
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x66
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x61
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x75
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x4e
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x77
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x72
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6b
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x43
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6b
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x69
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x73
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x870]
call fcn.180016f70
lea rcx, [rsp + 0x154]
call fcn.180014510
mov qword [rsp + 0x3e8], rax
lea rdx, [rsp + 0x658]
lea rcx, [rsp + 0x870]
call fcn.1800185c0
mov qword [rsp + 0x3f0], rax
lea rdx, [rsp + 0x660]
lea rcx, [rsp + 0x870]
call fcn.180018320
mov rcx, qword [rsp + 0x3e8]
mov r9, rcx
mov rcx, qword [rsp + 0x3f0]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xdb0]
call fcn.1800135b0
lea rcx, [rsp + 0xdb0]
call fcn.1800183e0
mov r8d, 0x103
lea rdx, [rsp + 0x14e0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea rax, [rsp + 0x14e0]
mov qword [rsp + 0x120], rax
lea rcx, [rsp + 0x14e0]
call fcn.18001fd2c
shl rax, 1
mov word [rsp + 0x118], ax
movzx eax, word [rsp + 0x118]
add rax, 2
mov word [rsp + 0x11a], ax
mov dword [rsp + 0x1a8], 0x30
mov qword [rsp + 0x1b0], 0
mov dword [rsp + 0x1c0], 0x40
lea rax, [rsp + 0x118]
mov qword [rsp + 0x1b8], rax
mov qword [rsp + 0x1c8], 0
mov qword [rsp + 0x1d0], 0
mov dword [rsp + 0x50], 0
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x40], 0x60
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x250]
lea r8, [rsp + 0x1a8]
mov edx, 0x12019f
lea rcx, [rsp + 0x2a8]
call qword [rsp + 0x140]
mov dword [rsp + 0x64], eax
cmp dword [rsp + 0x64], 0
jge 0x180009cca
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2920]
call fcn.180016920
lea rcx, [rsp + 0xdb0]
call fcn.180016cd0
lea rcx, [rsp + 0x870]
call fcn.180016ca0
lea rcx, [rsp + 0xd50]
call fcn.180016cd0
lea rcx, [rsp + 0x8b0]
call fcn.180016ca0
lea rcx, [rsp + 0xd10]
call fcn.180016cd0
lea rcx, [rsp + 0x890]
call fcn.180016ca0
lea rcx, [rsp + 0xcb0]
call fcn.180016cd0
lea rcx, [rsp + 0x8d0]
call fcn.180016ca0
lea rcx, [rsp + 0xcd0]
call fcn.180016ca0
lea rcx, [rsp + 0xcf0]
call fcn.180016ca0
lea rcx, [rsp + 0xc70]
call fcn.180016ca0
lea rcx, [rsp + 0xbf0]
call fcn.180016cd0
lea rcx, [rsp + 0x910]
call fcn.180016ca0
lea rcx, [rsp + 0xc90]
call fcn.180016ca0
lea rcx, [rsp + 0xc10]
call fcn.180016cd0
lea rcx, [rsp + 0x8f0]
call fcn.180016ca0
lea rcx, [rsp + 0xc30]
call fcn.180016ca0
lea rcx, [rsp + 0xb70]
call fcn.180016cd0
lea rcx, [rsp + 0x990]
call fcn.180016ca0
lea rcx, [rsp + 0xc50]
call fcn.180016ca0
lea rcx, [rsp + 0xb90]
call fcn.180016cd0
lea rcx, [rsp + 0x9b0]
call fcn.180016ca0
lea rcx, [rsp + 0xbb0]
call fcn.180016ca0
lea rcx, [rsp + 0xb10]
call fcn.180016cd0
lea rcx, [rsp + 0x9d0]
call fcn.180016ca0
lea rcx, [rsp + 0xb30]
call fcn.180016ca0
lea rcx, [rsp + 0xa90]
call fcn.180016cd0
lea rcx, [rsp + 0x950]
call fcn.180016ca0
lea rcx, [rsp + 0xbd0]
call fcn.180016ca0
lea rcx, [rsp + 0xab0]
call fcn.180016cd0
lea rcx, [rsp + 0xb50]
call fcn.180016ca0
lea rcx, [rsp + 0xad0]
call fcn.180016cd0
lea rcx, [rsp + 0x930]
call fcn.180016ca0
lea rcx, [rsp + 0x9f0]
call fcn.180016ca0
lea rcx, [rsp + 0xaf0]
call fcn.180016ca0
lea rcx, [rsp + 0xa70]
call fcn.180016cd0
lea rcx, [rsp + 0xa10]
call fcn.180016ca0
lea rcx, [rsp + 0x68]
call fcn.180016d00
mov rax, qword [rsp + 0x2920]
jmp 0x18000cc4a
mov byte [rsp + 0xd0], 0x73
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xd1], 0x74
lea rdx, [rsp + 0xd1]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xd2], 0x61
lea rdx, [rsp + 0xd2]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xd3], 0x74
lea rdx, [rsp + 0xd3]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xd4], 0x65
lea rdx, [rsp + 0xd4]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xd5], 0x22
lea rdx, [rsp + 0xd5]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xd6], 0x3a
lea rdx, [rsp + 0xd6]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xd7], 0x22
lea rdx, [rsp + 0xd7]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov dword [rsp + 0x80], 0
mov dword [rsp + 0x4d8], 0x1000
lea rcx, [rsp + 0x190]
call fcn.180016920
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0x1000
lea rax, [rsp + 0x1900]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x288]
call qword [rsp + 0x188]
mov dword [rsp + 0x64], eax
cmp dword [rsp + 0x64], 0
jge 0x180009e21
cmp dword [rsp + 0x64], 0x103
jne 0x180009ead
cmp dword [rsp + 0x64], 0x103
jne 0x180009e46
xor edx, edx
mov rcx, qword [rsp + 0x288]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [rsp + 0x170]
mov dword [rsp + 0x64], eax
mov eax, dword [rsp + 0x178]
mov dword [rsp + 0x80], eax
lea rdx, [rsp + 0x668]
lea rcx, [rsp + 0x190]
call fcn.180018680
mov rax, qword [rax]
mov qword [rsp + 0x3f8], rax
mov eax, dword [rsp + 0x80]
lea rax, [rsp + rax + 0x1900]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1900]
mov r8, qword [rsp + 0x3f8]
lea rdx, [rsp + 0x670]
lea rcx, [rsp + 0x190]
call fcn.180015d00
cmp dword [rsp + 0x64], 0
jl 0x180009ec5
cmp dword [rsp + 0x80], 0x1000
je 0x180009dbd
mov dword [rsp + 0x10c], 0
mov dword [rsp + 0x88], 0
jmp 0x180009eed
mov eax, dword [rsp + 0x88]
inc eax
mov dword [rsp + 0x88], eax
movsxd rax, dword [rsp + 0x88]
mov qword [rsp + 0x400], rax
lea rcx, [rsp + 0x190]
call fcn.180018a10
sub rax, 4
mov rcx, qword [rsp + 0x400]
cmp rcx, rax
jae 0x18000a00f
movsxd rax, dword [rsp + 0x88]
mov rdx, rax
lea rcx, [rsp + 0x190]
call fcn.180016dd0
movzx eax, byte [rax]
cmp eax, 0x65
jne 0x18000a00a
mov eax, dword [rsp + 0x88]
inc eax
cdqe
mov rdx, rax
lea rcx, [rsp + 0x190]
call fcn.180016dd0
movzx eax, byte [rax]
cmp eax, 0x6e
jne 0x18000a00a
mov eax, dword [rsp + 0x88]
add eax, 2
cdqe
mov rdx, rax
lea rcx, [rsp + 0x190]
call fcn.180016dd0
movzx eax, byte [rax]
cmp eax, 0x63
jne 0x18000a00a
mov eax, dword [rsp + 0x88]
add eax, 3
cdqe
mov rdx, rax
lea rcx, [rsp + 0x190]
call fcn.180016dd0
movzx eax, byte [rax]
cmp eax, 0x72
jne 0x18000a00a
mov eax, dword [rsp + 0x88]
add eax, 4
cdqe
mov rdx, rax
lea rcx, [rsp + 0x190]
call fcn.180016dd0
movzx eax, byte [rax]
cmp eax, 0x79
jne 0x18000a00a
mov eax, dword [rsp + 0x88]
add eax, 5
cdqe
mov rdx, rax
lea rcx, [rsp + 0x190]
call fcn.180016dd0
movzx eax, byte [rax]
cmp eax, 0x70
jne 0x18000a00a
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x10c], eax
jmp 0x18000a00f
jmp 0x180009edd
mov eax, dword [rsp + 0x10c]
add eax, 0x10
mov dword [rsp + 0x10c], eax
lea rdx, [0x18002b3ba]
lea rcx, [rsp + 0xd30]
call fcn.180016080
jmp 0x18000a046
mov eax, dword [rsp + 0x10c]
inc eax
mov dword [rsp + 0x10c], eax
mov eax, dword [rsp + 0x10c]
mov edx, eax
lea rcx, [rsp + 0x190]
call fcn.180016dd0
movzx eax, byte [rax]
cmp eax, 0x22
je 0x18000a08c
mov eax, dword [rsp + 0x10c]
mov edx, eax
lea rcx, [rsp + 0x190]
call fcn.180016dd0
movzx edx, byte [rax]
lea rcx, [rsp + 0xd30]
call fcn.180016f70
jmp 0x18000a036
lea rcx, [rsp + 0xd30]
call fcn.180018710
mov qword [rsp + 0x408], rax
lea rcx, [rsp + 0xd30]
call fcn.180017f20
lea r8, [rsp + 0x4dc]
mov rcx, qword [rsp + 0x408]
mov edx, ecx
mov rcx, rax
call fcn.180004c30
mov qword [rsp + 0x418], rax
mov qword [rsp + 0x470], 0
mov qword [rsp + 0x410], 0
lea r8, [rsp + 0x410]
lea rdx, str.DPAPI
mov rcx, qword [rsp + 0x418]
call fcn.18001ffbc
mov qword [rsp + 0x420], rax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0x540], rax
mov dword [rsp + 0x538], 0x3e8
lea rcx, [rsp + 0x1f0]
call fcn.180016920
lea rdx, [0x18002b3bb]
lea rcx, [rsp + 0xa50]
call fcn.180016080
mov eax, dword [rsp + 0x60]
add eax, 0x43
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa50]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x72
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa50]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x79
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa50]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x70
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa50]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa50]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x33
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa50]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x32
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa50]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x2e
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa50]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x64
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa50]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa50]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa50]
call fcn.180016f70
lea rcx, [rsp + 0x155]
call fcn.180014510
mov qword [rsp + 0x428], rax
lea rdx, [rsp + 0x678]
lea rcx, [rsp + 0xa50]
call fcn.1800185c0
mov qword [rsp + 0x430], rax
lea rdx, [rsp + 0x680]
lea rcx, [rsp + 0xa50]
call fcn.180018320
mov rcx, qword [rsp + 0x428]
mov r9, rcx
mov rcx, qword [rsp + 0x430]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xd90]
call fcn.1800135b0
lea rcx, [rsp + 0x156]
call fcn.180014510
mov qword [rsp + 0x438], rax
lea rdx, [rsp + 0x688]
lea rcx, [rsp + 0xd90]
call fcn.180018620
mov qword [rsp + 0x440], rax
lea rdx, [rsp + 0x690]
lea rcx, [rsp + 0xd90]
call fcn.180018380
mov rcx, qword [rsp + 0x438]
mov r9, rcx
mov rcx, qword [rsp + 0x440]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xdf0]
call fcn.180013690
lea rdx, [0x18002b3c2]
lea rcx, [rsp + 0x970]
call fcn.180016080
mov eax, dword [rsp + 0x60]
add eax, 0x43
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x970]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x72
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x970]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x79
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x970]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x70
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x970]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x970]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x55
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x970]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6e
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x970]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x70
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x970]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x72
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x970]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x970]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x970]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x970]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x63
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x970]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x970]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x44
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x970]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x61
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x970]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x970]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x61
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0x970]
call fcn.180016f70
lea rcx, [rsp + 0x157]
call fcn.180014510
mov qword [rsp + 0x448], rax
lea rdx, [rsp + 0x698]
lea rcx, [rsp + 0x970]
call fcn.1800185c0
mov qword [rsp + 0x450], rax
lea rdx, [rsp + 0x6a0]
lea rcx, [rsp + 0x970]
call fcn.180018320
mov rcx, qword [rsp + 0x448]
mov r9, rcx
mov rcx, qword [rsp + 0x450]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xd70]
call fcn.1800135b0
lea rcx, [rsp + 0x158]
call fcn.180014510
mov qword [rsp + 0x458], rax
lea rdx, [rsp + 0x6a8]
lea rcx, [rsp + 0xd70]
call fcn.180018620
mov qword [rsp + 0x460], rax
lea rdx, [rsp + 0x6b0]
lea rcx, [rsp + 0xd70]
call fcn.180018380
mov rcx, qword [rsp + 0x458]
mov r9, rcx
mov rcx, qword [rsp + 0x460]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xdd0]
call fcn.180013690
lea rcx, [rsp + 0xdd0]
call fcn.180017f20
mov qword [rsp + 0x468], rax
lea rcx, [rsp + 0xdf0]
call fcn.180017f20
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, qword [rsp + 0x468]
mov rdx, rcx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x290], rax
cmp qword [rsp + 0x290], 0
jne 0x18000a945
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2920]
call fcn.180016920
lea rcx, [rsp + 0xdd0]
call fcn.180016ca0
lea rcx, [rsp + 0xd70]
call fcn.180016cd0
lea rcx, [rsp + 0x970]
call fcn.180016ca0
lea rcx, [rsp + 0xdf0]
call fcn.180016ca0
lea rcx, [rsp + 0xd90]
call fcn.180016cd0
lea rcx, [rsp + 0xa50]
call fcn.180016ca0
lea rcx, [rsp + 0x1f0]
call fcn.180016d00
lea rcx, [rsp + 0xd30]
call fcn.180016ca0
lea rcx, [rsp + 0x190]
call fcn.180016d00
lea rcx, [rsp + 0xdb0]
call fcn.180016cd0
lea rcx, [rsp + 0x870]
call fcn.180016ca0
lea rcx, [rsp + 0xd50]
call fcn.180016cd0
lea rcx, [rsp + 0x8b0]
call fcn.180016ca0
lea rcx, [rsp + 0xd10]
call fcn.180016cd0
lea rcx, [rsp + 0x890]
call fcn.180016ca0
lea rcx, [rsp + 0xcb0]
call fcn.180016cd0
lea rcx, [rsp + 0x8d0]
call fcn.180016ca0
lea rcx, [rsp + 0xcd0]
call fcn.180016ca0
lea rcx, [rsp + 0xcf0]
call fcn.180016ca0
lea rcx, [rsp + 0xc70]
call fcn.180016ca0
lea rcx, [rsp + 0xbf0]
call fcn.180016cd0
lea rcx, [rsp + 0x910]
call fcn.180016ca0
lea rcx, [rsp + 0xc90]
call fcn.180016ca0
lea rcx, [rsp + 0xc10]
call fcn.180016cd0
lea rcx, [rsp + 0x8f0]
call fcn.180016ca0
lea rcx, [rsp + 0xc30]
call fcn.180016ca0
lea rcx, [rsp + 0xb70]
call fcn.180016cd0
lea rcx, [rsp + 0x990]
call fcn.180016ca0
lea rcx, [rsp + 0xc50]
call fcn.180016ca0
lea rcx, [rsp + 0xb90]
call fcn.180016cd0
lea rcx, [rsp + 0x9b0]
call fcn.180016ca0
lea rcx, [rsp + 0xbb0]
call fcn.180016ca0
lea rcx, [rsp + 0xb10]
call fcn.180016cd0
lea rcx, [rsp + 0x9d0]
call fcn.180016ca0
lea rcx, [rsp + 0xb30]
call fcn.180016ca0
lea rcx, [rsp + 0xa90]
call fcn.180016cd0
lea rcx, [rsp + 0x950]
call fcn.180016ca0
lea rcx, [rsp + 0xbd0]
call fcn.180016ca0
lea rcx, [rsp + 0xab0]
call fcn.180016cd0
lea rcx, [rsp + 0xb50]
call fcn.180016ca0
lea rcx, [rsp + 0xad0]
call fcn.180016cd0
lea rcx, [rsp + 0x930]
call fcn.180016ca0
lea rcx, [rsp + 0x9f0]
call fcn.180016ca0
lea rcx, [rsp + 0xaf0]
call fcn.180016ca0
lea rcx, [rsp + 0xa70]
call fcn.180016cd0
lea rcx, [rsp + 0xa10]
call fcn.180016ca0
lea rcx, [rsp + 0x68]
call fcn.180016d00
mov rax, qword [rsp + 0x2920]
jmp 0x18000cc4a
lea rax, [rsp + 0x548]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x470]
lea rcx, [rsp + 0x538]
call qword [rsp + 0x290]
test eax, eax
jne 0x18000ac20
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2920]
call fcn.180016920
lea rcx, [rsp + 0xdd0]
call fcn.180016ca0
lea rcx, [rsp + 0xd70]
call fcn.180016cd0
lea rcx, [rsp + 0x970]
call fcn.180016ca0
lea rcx, [rsp + 0xdf0]
call fcn.180016ca0
lea rcx, [rsp + 0xd90]
call fcn.180016cd0
lea rcx, [rsp + 0xa50]
call fcn.180016ca0
lea rcx, [rsp + 0x1f0]
call fcn.180016d00
lea rcx, [rsp + 0xd30]
call fcn.180016ca0
lea rcx, [rsp + 0x190]
call fcn.180016d00
lea rcx, [rsp + 0xdb0]
call fcn.180016cd0
lea rcx, [rsp + 0x870]
call fcn.180016ca0
lea rcx, [rsp + 0xd50]
call fcn.180016cd0
lea rcx, [rsp + 0x8b0]
call fcn.180016ca0
lea rcx, [rsp + 0xd10]
call fcn.180016cd0
lea rcx, [rsp + 0x890]
call fcn.180016ca0
lea rcx, [rsp + 0xcb0]
call fcn.180016cd0
lea rcx, [rsp + 0x8d0]
call fcn.180016ca0
lea rcx, [rsp + 0xcd0]
call fcn.180016ca0
lea rcx, [rsp + 0xcf0]
call fcn.180016ca0
lea rcx, [rsp + 0xc70]
call fcn.180016ca0
lea rcx, [rsp + 0xbf0]
call fcn.180016cd0
lea rcx, [rsp + 0x910]
call fcn.180016ca0
lea rcx, [rsp + 0xc90]
call fcn.180016ca0
lea rcx, [rsp + 0xc10]
call fcn.180016cd0
lea rcx, [rsp + 0x8f0]
call fcn.180016ca0
lea rcx, [rsp + 0xc30]
call fcn.180016ca0
lea rcx, [rsp + 0xb70]
call fcn.180016cd0
lea rcx, [rsp + 0x990]
call fcn.180016ca0
lea rcx, [rsp + 0xc50]
call fcn.180016ca0
lea rcx, [rsp + 0xb90]
call fcn.180016cd0
lea rcx, [rsp + 0x9b0]
call fcn.180016ca0
lea rcx, [rsp + 0xbb0]
call fcn.180016ca0
lea rcx, [rsp + 0xb10]
call fcn.180016cd0
lea rcx, [rsp + 0x9d0]
call fcn.180016ca0
lea rcx, [rsp + 0xb30]
call fcn.180016ca0
lea rcx, [rsp + 0xa90]
call fcn.180016cd0
lea rcx, [rsp + 0x950]
call fcn.180016ca0
lea rcx, [rsp + 0xbd0]
call fcn.180016ca0
lea rcx, [rsp + 0xab0]
call fcn.180016cd0
lea rcx, [rsp + 0xb50]
call fcn.180016ca0
lea rcx, [rsp + 0xad0]
call fcn.180016cd0
lea rcx, [rsp + 0x930]
call fcn.180016ca0
lea rcx, [rsp + 0x9f0]
call fcn.180016ca0
lea rcx, [rsp + 0xaf0]
call fcn.180016ca0
lea rcx, [rsp + 0xa70]
call fcn.180016cd0
lea rcx, [rsp + 0xa10]
call fcn.180016ca0
lea rcx, [rsp + 0x68]
call fcn.180016d00
mov rax, qword [rsp + 0x2920]
jmp 0x18000cc4a
mov dword [rsp + 0x12c], 0
jmp 0x18000ac3d
mov eax, dword [rsp + 0x12c]
inc eax
mov dword [rsp + 0x12c], eax
mov eax, dword [rsp + 0x548]
cmp dword [rsp + 0x12c], eax
jae 0x18000ac75
movsxd rax, dword [rsp + 0x12c]
mov rcx, qword [rsp + 0x550]
add rcx, rax
mov rax, rcx
mov rdx, rax
lea rcx, [rsp + 0x1f0]
call fcn.180018980
jmp 0x18000ac2d
mov byte [rsp + 0xe90], 0x30
mov byte [rsp + 0xe91], 0x31
mov byte [rsp + 0xe92], 0x32
mov byte [rsp + 0xe93], 0x33
mov byte [rsp + 0xe94], 0x34
mov byte [rsp + 0xe95], 0x35
mov byte [rsp + 0xe96], 0x36
mov byte [rsp + 0xe97], 0x37
mov byte [rsp + 0xe98], 0x38
mov byte [rsp + 0xe99], 0x39
mov byte [rsp + 0xe9a], 0x41
mov byte [rsp + 0xe9b], 0x42
mov byte [rsp + 0xe9c], 0x43
mov byte [rsp + 0xe9d], 0x44
mov byte [rsp + 0xe9e], 0x45
mov byte [rsp + 0xe9f], 0x46
mov dword [rsp + 0x130], 0
jmp 0x18000ad12
mov eax, dword [rsp + 0x130]
inc eax
mov dword [rsp + 0x130], eax
movsxd rax, dword [rsp + 0x130]
mov qword [rsp + 0x478], rax
lea rcx, [rsp + 0x1f0]
call fcn.180018a10
mov rcx, qword [rsp + 0x478]
cmp rcx, rax
jae 0x18000adcb
movsxd rax, dword [rsp + 0x130]
mov rdx, rax
lea rcx, [rsp + 0x1f0]
call fcn.180016dd0
movzx eax, byte [rax]
mov byte [rsp + 0x84], al
movsx eax, byte [rsp + 0x84]
and eax, 0xf0
sar eax, 4
cdqe
movzx eax, byte [rsp + rax + 0xe90]
mov byte [rsp + 0xd8], al
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x68]
call fcn.180018950
movsx eax, byte [rsp + 0x84]
and eax, 0xf
sar eax, 0
cdqe
movzx eax, byte [rsp + rax + 0xe90]
mov byte [rsp + 0xd9], al
lea rdx, [rsp + 0xd9]
lea rcx, [rsp + 0x68]
call fcn.180018950
jmp 0x18000ad02
lea rcx, [rsp + 0x190]
call fcn.180018430
lea rcx, [rsp + 0x1f0]
call fcn.180018430
mov byte [rsp + 0xda], 0x22
lea rdx, [rsp + 0xda]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xdb], 0x2c
lea rdx, [rsp + 0xdb]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xdc], 0x22
lea rdx, [rsp + 0xdc]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xdd], 0x6c
lea rdx, [rsp + 0xdd]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xde], 0x6f
lea rdx, [rsp + 0xde]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xdf], 0x67
lea rdx, [rsp + 0xdf]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xe0], 0x69
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xe1], 0x6e
lea rdx, [rsp + 0xe1]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xe2], 0x73
lea rdx, [rsp + 0xe2]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xe3], 0x22
lea rdx, [rsp + 0xe3]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xe4], 0x3a
lea rdx, [rsp + 0xe4]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xe5], 0x22
lea rdx, [rsp + 0xe5]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov dword [rsp + 0x80], 0
lea rcx, [rsp + 0x238]
call fcn.180016920
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0x1000
lea rax, [rsp + 0x1900]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x298]
call qword [rsp + 0x188]
mov dword [rsp + 0x64], eax
cmp dword [rsp + 0x64], 0
jge 0x18000af99
cmp dword [rsp + 0x64], 0x103
jne 0x18000b025
cmp dword [rsp + 0x64], 0x103
jne 0x18000afbe
xor edx, edx
mov rcx, qword [rsp + 0x298]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [rsp + 0x170]
mov dword [rsp + 0x64], eax
mov eax, dword [rsp + 0x178]
mov dword [rsp + 0x80], eax
lea rdx, [rsp + 0x6b8]
lea rcx, [rsp + 0x238]
call fcn.180018680
mov rax, qword [rax]
mov qword [rsp + 0x480], rax
mov eax, dword [rsp + 0x80]
lea rax, [rsp + rax + 0x1900]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1900]
mov r8, qword [rsp + 0x480]
lea rdx, [rsp + 0x6c0]
lea rcx, [rsp + 0x238]
call fcn.180015d00
cmp dword [rsp + 0x64], 0
jl 0x18000b03d
cmp dword [rsp + 0x80], 0x1000
je 0x18000af35
mov dword [rsp + 0x134], 0
jmp 0x18000b05a
mov eax, dword [rsp + 0x134]
inc eax
mov dword [rsp + 0x134], eax
movsxd rax, dword [rsp + 0x134]
mov qword [rsp + 0x488], rax
lea rcx, [rsp + 0x238]
call fcn.180018a10
mov rcx, qword [rsp + 0x488]
cmp rcx, rax
jae 0x18000b113
movsxd rax, dword [rsp + 0x134]
mov rdx, rax
lea rcx, [rsp + 0x238]
call fcn.180016dd0
movzx eax, byte [rax]
mov byte [rsp + 0x85], al
movsx eax, byte [rsp + 0x85]
and eax, 0xf0
sar eax, 4
cdqe
movzx eax, byte [rsp + rax + 0xe90]
mov byte [rsp + 0xe6], al
lea rdx, [rsp + 0xe6]
lea rcx, [rsp + 0x68]
call fcn.180018950
movsx eax, byte [rsp + 0x85]
and eax, 0xf
sar eax, 0
cdqe
movzx eax, byte [rsp + rax + 0xe90]
mov byte [rsp + 0xe7], al
lea rdx, [rsp + 0xe7]
lea rcx, [rsp + 0x68]
call fcn.180018950
jmp 0x18000b04a
lea rcx, [rsp + 0x238]
call fcn.180018430
mov byte [rsp + 0xe8], 0x22
lea rdx, [rsp + 0xe8]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xe9], 0x2c
lea rdx, [rsp + 0xe9]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xea], 0x22
lea rdx, [rsp + 0xea]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xeb], 0x63
lea rdx, [rsp + 0xeb]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xec], 0x61
lea rdx, [rsp + 0xec]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xed], 0x72
lea rdx, [rsp + 0xed]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xee], 0x64
lea rdx, [rsp + 0xee]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xef], 0x73
lea rdx, [rsp + 0xef]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xf0], 0x22
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xf1], 0x3a
lea rdx, [rsp + 0xf1]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xf2], 0x22
lea rdx, [rsp + 0xf2]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov dword [rsp + 0x80], 0
lea rcx, [rsp + 0x220]
call fcn.180016920
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0x1000
lea rax, [rsp + 0x1900]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x2a0]
call qword [rsp + 0x188]
mov dword [rsp + 0x64], eax
cmp dword [rsp + 0x64], 0
jge 0x18000b2ba
cmp dword [rsp + 0x64], 0x103
jne 0x18000b346
cmp dword [rsp + 0x64], 0x103
jne 0x18000b2df
xor edx, edx
mov rcx, qword [rsp + 0x2a0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [rsp + 0x170]
mov dword [rsp + 0x64], eax
mov eax, dword [rsp + 0x178]
mov dword [rsp + 0x80], eax
lea rdx, [rsp + 0x6c8]
lea rcx, [rsp + 0x220]
call fcn.180018680
mov rax, qword [rax]
mov qword [rsp + 0x490], rax
mov eax, dword [rsp + 0x80]
lea rax, [rsp + rax + 0x1900]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1900]
mov r8, qword [rsp + 0x490]
lea rdx, [rsp + 0x6d0]
lea rcx, [rsp + 0x220]
call fcn.180015d00
cmp dword [rsp + 0x64], 0
jl 0x18000b35e
cmp dword [rsp + 0x80], 0x1000
je 0x18000b256
mov dword [rsp + 0x138], 0
jmp 0x18000b37b
mov eax, dword [rsp + 0x138]
inc eax
mov dword [rsp + 0x138], eax
movsxd rax, dword [rsp + 0x138]
mov qword [rsp + 0x498], rax
lea rcx, [rsp + 0x220]
call fcn.180018a10
mov rcx, qword [rsp + 0x498]
cmp rcx, rax
jae 0x18000b434
movsxd rax, dword [rsp + 0x138]
mov rdx, rax
lea rcx, [rsp + 0x220]
call fcn.180016dd0
movzx eax, byte [rax]
mov byte [rsp + 0x86], al
movsx eax, byte [rsp + 0x86]
and eax, 0xf0
sar eax, 4
cdqe
movzx eax, byte [rsp + rax + 0xe90]
mov byte [rsp + 0xf3], al
lea rdx, [rsp + 0xf3]
lea rcx, [rsp + 0x68]
call fcn.180018950
movsx eax, byte [rsp + 0x86]
and eax, 0xf
sar eax, 0
cdqe
movzx eax, byte [rsp + rax + 0xe90]
mov byte [rsp + 0xf4], al
lea rdx, [rsp + 0xf4]
lea rcx, [rsp + 0x68]
call fcn.180018950
jmp 0x18000b36b
lea rcx, [rsp + 0x220]
call fcn.180018430
mov byte [rsp + 0xf5], 0x22
lea rdx, [rsp + 0xf5]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xf6], 0x2c
lea rdx, [rsp + 0xf6]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xf7], 0x22
lea rdx, [rsp + 0xf7]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xf8], 0x63
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xf9], 0x6f
lea rdx, [rsp + 0xf9]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xfa], 0x6f
lea rdx, [rsp + 0xfa]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xfb], 0x6b
lea rdx, [rsp + 0xfb]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xfc], 0x69
lea rdx, [rsp + 0xfc]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xfd], 0x65
lea rdx, [rsp + 0xfd]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xfe], 0x73
lea rdx, [rsp + 0xfe]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0xff], 0x22
lea rdx, [rsp + 0xff]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0x100], 0x3a
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0x101], 0x22
lea rdx, [rsp + 0x101]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov dword [rsp + 0x80], 0
lea rcx, [rsp + 0x208]
call fcn.180016920
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0x1000
lea rax, [rsp + 0x1900]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x2a8]
call qword [rsp + 0x188]
mov dword [rsp + 0x64], eax
cmp dword [rsp + 0x64], 0
jge 0x18000b60f
cmp dword [rsp + 0x64], 0x103
jne 0x18000b69b
cmp dword [rsp + 0x64], 0x103
jne 0x18000b634
xor edx, edx
mov rcx, qword [rsp + 0x2a8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [rsp + 0x170]
mov dword [rsp + 0x64], eax
mov eax, dword [rsp + 0x178]
mov dword [rsp + 0x80], eax
lea rdx, [rsp + 0x6d8]
lea rcx, [rsp + 0x208]
call fcn.180018680
mov rax, qword [rax]
mov qword [rsp + 0x4a0], rax
mov eax, dword [rsp + 0x80]
lea rax, [rsp + rax + 0x1900]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1900]
mov r8, qword [rsp + 0x4a0]
lea rdx, [rsp + 0x6e0]
lea rcx, [rsp + 0x208]
call fcn.180015d00
cmp dword [rsp + 0x64], 0
jl 0x18000b6b3
cmp dword [rsp + 0x80], 0x1000
je 0x18000b5ab
mov dword [rsp + 0x13c], 0
jmp 0x18000b6d0
mov eax, dword [rsp + 0x13c]
inc eax
mov dword [rsp + 0x13c], eax
movsxd rax, dword [rsp + 0x13c]
mov qword [rsp + 0x4a8], rax
lea rcx, [rsp + 0x208]
call fcn.180018a10
mov rcx, qword [rsp + 0x4a8]
cmp rcx, rax
jae 0x18000b789
movsxd rax, dword [rsp + 0x13c]
mov rdx, rax
lea rcx, [rsp + 0x208]
call fcn.180016dd0
movzx eax, byte [rax]
mov byte [rsp + 0x87], al
movsx eax, byte [rsp + 0x87]
and eax, 0xf0
sar eax, 4
cdqe
movzx eax, byte [rsp + rax + 0xe90]
mov byte [rsp + 0x102], al
lea rdx, [rsp + 0x102]
lea rcx, [rsp + 0x68]
call fcn.180018950
movsx eax, byte [rsp + 0x87]
and eax, 0xf
sar eax, 0
cdqe
movzx eax, byte [rsp + rax + 0xe90]
mov byte [rsp + 0x103], al
lea rdx, [rsp + 0x103]
lea rcx, [rsp + 0x68]
call fcn.180018950
jmp 0x18000b6c0
lea rcx, [rsp + 0x208]
call fcn.180018430
mov byte [rsp + 0x104], 0x22
lea rdx, [rsp + 0x104]
lea rcx, [rsp + 0x68]
call fcn.180018950
mov byte [rsp + 0x105], 0x7d
lea rdx, [rsp + 0x105]
lea rcx, [rsp + 0x68]
call fcn.180018950
lea rdx, [0x18002b3c3]
lea rcx, [rsp + 0xa30]
call fcn.180016080
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa30]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x3f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa30]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x3f
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa30]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa30]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x25
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa30]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x54
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa30]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x45
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa30]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x4d
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa30]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x50
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa30]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x25
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa30]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x5c
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa30]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x74
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa30]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6d
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa30]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x70
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa30]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x2e
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa30]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x6b
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa30]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x65
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa30]
call fcn.180016f70
mov eax, dword [rsp + 0x60]
add eax, 0x79
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx edx, al
lea rcx, [rsp + 0xa30]
call fcn.180016f70
lea rcx, [rsp + 0x159]
call fcn.180014510
mov qword [rsp + 0x4b0], rax
lea rdx, [rsp + 0x6e8]
lea rcx, [rsp + 0xa30]
call fcn.1800185c0
mov qword [rsp + 0x4b8], rax
lea rdx, [rsp + 0x6f0]
lea rcx, [rsp + 0xa30]
call fcn.180018320
mov rcx, qword [rsp + 0x4b0]
mov r9, rcx
mov rcx, qword [rsp + 0x4b8]
mov r8, qword [rcx]
mov rdx, qword [rax]
lea rcx, [rsp + 0xe10]
call fcn.1800135b0
lea rcx, [rsp + 0xe10]
call fcn.1800183e0
mov r8d, 0x103
lea rdx, [rsp + 0x16f0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea rax, [rsp + 0x16f0]
mov qword [rsp + 0x120], rax
lea rcx, [rsp + 0x16f0]
call fcn.18001fd2c
shl rax, 1
mov word [rsp + 0x118], ax
movzx eax, word [rsp + 0x118]
add rax, 2
mov word [rsp + 0x11a], ax
mov dword [rsp + 0x1a8], 0x30
mov qword [rsp + 0x1b0], 0
mov dword [rsp + 0x1c0], 0x40
lea rax, [rsp + 0x118]
mov qword [rsp + 0x1b8], rax
mov qword [rsp + 0x1c8], 0
mov qword [rsp + 0x1d0], 0
mov dword [rsp + 0x50], 0
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x40], 0x60
mov dword [rsp + 0x38], 5
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x250]
lea r8, [rsp + 0x1a8]
mov edx, 0x12019f
lea rcx, [rsp + 0x148]
call qword [rsp + 0x140]
mov dword [rsp + 0x64], eax
cmp dword [rsp + 0x64], 0
jge 0x18000be43
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2920]
call fcn.180016920
lea rcx, [rsp + 0xe10]
call fcn.180016cd0
lea rcx, [rsp + 0xa30]
call fcn.180016ca0
lea rcx, [rsp + 0x208]
call fcn.180016d00
lea rcx, [rsp + 0x220]
call fcn.180016d00
lea rcx, [rsp + 0x238]
call fcn.180016d00
lea rcx, [rsp + 0xdd0]
call fcn.180016ca0
lea rcx, [rsp + 0xd70]
call fcn.180016cd0
lea rcx, [rsp + 0x970]
call fcn.180016ca0
lea rcx, [rsp + 0xdf0]
call fcn.180016ca0
lea rcx, [rsp + 0xd90]
call fcn.180016cd0
lea rcx, [rsp + 0xa50]
call fcn.180016ca0
lea rcx, [rsp + 0x1f0]
call fcn.180016d00
lea rcx, [rsp + 0xd30]
call fcn.180016ca0
lea rcx, [rsp + 0x190]
call fcn.180016d00
lea rcx, [rsp + 0xdb0]
call fcn.180016cd0
lea rcx, [rsp + 0x870]
call fcn.180016ca0
lea rcx, [rsp + 0xd50]
call fcn.180016cd0
lea rcx, [rsp + 0x8b0]
call fcn.180016ca0
lea rcx, [rsp + 0xd10]
call fcn.180016cd0
lea rcx, [rsp + 0x890]
call fcn.180016ca0
lea rcx, [rsp + 0xcb0]
call fcn.180016cd0
lea rcx, [rsp + 0x8d0]
call fcn.180016ca0
lea rcx, [rsp + 0xcd0]
call fcn.180016ca0
lea rcx, [rsp + 0xcf0]
call fcn.180016ca0
lea rcx, [rsp + 0xc70]
call fcn.180016ca0
lea rcx, [rsp + 0xbf0]
call fcn.180016cd0
lea rcx, [rsp + 0x910]
call fcn.180016ca0
lea rcx, [rsp + 0xc90]
call fcn.180016ca0
lea rcx, [rsp + 0xc10]
call fcn.180016cd0
lea rcx, [rsp + 0x8f0]
call fcn.180016ca0
lea rcx, [rsp + 0xc30]
call fcn.180016ca0
lea rcx, [rsp + 0xb70]
call fcn.180016cd0
lea rcx, [rsp + 0x990]
call fcn.180016ca0
lea rcx, [rsp + 0xc50]
call fcn.180016ca0
lea rcx, [rsp + 0xb90]
call fcn.180016cd0
lea rcx, [rsp + 0x9b0]
call fcn.180016ca0
lea rcx, [rsp + 0xbb0]
call fcn.180016ca0
lea rcx, [rsp + 0xb10]
call fcn.180016cd0
lea rcx, [rsp + 0x9d0]
call fcn.180016ca0
lea rcx, [rsp + 0xb30]
call fcn.180016ca0
lea rcx, [rsp + 0xa90]
call fcn.180016cd0
lea rcx, [rsp + 0x950]
call fcn.180016ca0
lea rcx, [rsp + 0xbd0]
call fcn.180016ca0
lea rcx, [rsp + 0xab0]
call fcn.180016cd0
lea rcx, [rsp + 0xb50]
call fcn.180016ca0
lea rcx, [rsp + 0xad0]
call fcn.180016cd0
lea rcx, [rsp + 0x930]
call fcn.180016ca0
lea rcx, [rsp + 0x9f0]
call fcn.180016ca0
lea rcx, [rsp + 0xaf0]
call fcn.180016ca0
lea rcx, [rsp + 0xa70]
call fcn.180016cd0
lea rcx, [rsp + 0xa10]
call fcn.180016ca0
lea rcx, [rsp + 0x68]
call fcn.180016d00
mov rax, qword [rsp + 0x2920]
jmp 0x18000cc4a
mov qword [rsp + 0x4c0], 0
lea rcx, [rsp + 0x68]
call fcn.180018a10
mov qword [rsp + 0x4c8], rax
lea rcx, [rsp + 0x68]
call fcn.180017f80
mov qword [rsp + 0x40], 0
lea rcx, [rsp + 0x4c0]
mov qword [rsp + 0x38], rcx
mov rcx, qword [rsp + 0x4c8]
mov dword [rsp + 0x30], ecx
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x148]
call qword [rsp + 0x2b0]
mov dword [rsp + 0x64], eax
cmp dword [rsp + 0x64], 0
jge 0x18000c19c
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2920]
call fcn.180016920
lea rcx, [rsp + 0xe10]
call fcn.180016cd0
lea rcx, [rsp + 0xa30]
call fcn.180016ca0
lea rcx, [rsp + 0x208]
call fcn.180016d00
lea rcx, [rsp + 0x220]
call fcn.180016d00
lea rcx, [rsp + 0x238]
call fcn.180016d00
lea rcx, [rsp + 0xdd0]
call fcn.180016ca0
lea rcx, [rsp + 0xd70]
call fcn.180016cd0
lea rcx, [rsp + 0x970]
call fcn.180016ca0
lea rcx, [rsp + 0xdf0]
call fcn.180016ca0
lea rcx, [rsp + 0xd90]
call fcn.180016cd0
lea rcx, [rsp + 0xa50]
call fcn.180016ca0
lea rcx, [rsp + 0x1f0]
call fcn.180016d00
lea rcx, [rsp + 0xd30]
call fcn.180016ca0
lea rcx, [rsp + 0x190]
call fcn.180016d00
lea rcx, [rsp + 0xdb0]
call fcn.180016cd0
lea rcx, [rsp + 0x870]
call fcn.180016ca0
lea rcx, [rsp + 0xd50]
call fcn.180016cd0
lea rcx, [rsp + 0x8b0]
call fcn.180016ca0
lea rcx, [rsp + 0xd10]
call fcn.180016cd0
lea rcx, [rsp + 0x890]
call fcn.180016ca0
lea rcx, [rsp + 0xcb0]
call fcn.180016cd0
lea rcx, [rsp + 0x8d0]
call fcn.180016ca0
lea rcx, [rsp + 0xcd0]
call fcn.180016ca0
lea rcx, [rsp + 0xcf0]
call fcn.180016ca0
lea rcx, [rsp + 0xc70]
call fcn.180016ca0
lea rcx, [rsp + 0xbf0]
call fcn.180016cd0
lea rcx, [rsp + 0x910]
call fcn.180016ca0
lea rcx, [rsp + 0xc90]
call fcn.180016ca0
lea rcx, [rsp + 0xc10]
call fcn.180016cd0
lea rcx, [rsp + 0x8f0]
call fcn.180016ca0
lea rcx, [rsp + 0xc30]
call fcn.180016ca0
lea rcx, [rsp + 0xb70]
call fcn.180016cd0
lea rcx, [rsp + 0x990]
call fcn.180016ca0
lea rcx, [rsp + 0xc50]
call fcn.180016ca0
lea rcx, [rsp + 0xb90]
call fcn.180016cd0
lea rcx, [rsp + 0x9b0]
call fcn.180016ca0
lea rcx, [rsp + 0xbb0]
call fcn.180016ca0
lea rcx, [rsp + 0xb10]
call fcn.180016cd0
lea rcx, [rsp + 0x9d0]
call fcn.180016ca0
lea rcx, [rsp + 0xb30]
call fcn.180016ca0
lea rcx, [rsp + 0xa90]
call fcn.180016cd0
lea rcx, [rsp + 0x950]
call fcn.180016ca0
lea rcx, [rsp + 0xbd0]
call fcn.180016ca0
lea rcx, [rsp + 0xab0]
call fcn.180016cd0
lea rcx, [rsp + 0xb50]
call fcn.180016ca0
lea rcx, [rsp + 0xad0]
call fcn.180016cd0
lea rcx, [rsp + 0x930]
call fcn.180016ca0
lea rcx, [rsp + 0x9f0]
call fcn.180016ca0
lea rcx, [rsp + 0xaf0]
call fcn.180016ca0
lea rcx, [rsp + 0xa70]
call fcn.180016cd0
lea rcx, [rsp + 0xa10]
call fcn.180016ca0
lea rcx, [rsp + 0x68]
call fcn.180016d00
mov rax, qword [rsp + 0x2920]
jmp 0x18000cc4a
mov rcx, qword [rsp + 0x148]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rsp + 0x50], 0
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x40], 0x60
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x250]
lea r8, [rsp + 0x1a8]
mov edx, 0x12019f
lea rcx, [rsp + 0x148]
call qword [rsp + 0x140]
mov dword [rsp + 0x64], eax
cmp dword [rsp + 0x64], 0
jge 0x18000c4ee
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2920]
call fcn.180016920
lea rcx, [rsp + 0xe10]
call fcn.180016cd0
lea rcx, [rsp + 0xa30]
call fcn.180016ca0
lea rcx, [rsp + 0x208]
call fcn.180016d00
lea rcx, [rsp + 0x220]
call fcn.180016d00
lea rcx, [rsp + 0x238]
call fcn.180016d00
lea rcx, [rsp + 0xdd0]
call fcn.180016ca0
lea rcx, [rsp + 0xd70]
call fcn.180016cd0
lea rcx, [rsp + 0x970]
call fcn.180016ca0
lea rcx, [rsp + 0xdf0]
call fcn.180016ca0
lea rcx, [rsp + 0xd90]
call fcn.180016cd0
lea rcx, [rsp + 0xa50]
call fcn.180016ca0
lea rcx, [rsp + 0x1f0]
call fcn.180016d00
lea rcx, [rsp + 0xd30]
call fcn.180016ca0
lea rcx, [rsp + 0x190]
call fcn.180016d00
lea rcx, [rsp + 0xdb0]
call fcn.180016cd0
lea rcx, [rsp + 0x870]
call fcn.180016ca0
lea rcx, [rsp + 0xd50]
call fcn.180016cd0
lea rcx, [rsp + 0x8b0]
call fcn.180016ca0
lea rcx, [rsp + 0xd10]
call fcn.180016cd0
lea rcx, [rsp + 0x890]
call fcn.180016ca0
lea rcx, [rsp + 0xcb0]
call fcn.180016cd0
lea rcx, [rsp + 0x8d0]
call fcn.180016ca0
lea rcx, [rsp + 0xcd0]
call fcn.180016ca0
lea rcx, [rsp + 0xcf0]
call fcn.180016ca0
lea rcx, [rsp + 0xc70]
call fcn.180016ca0
lea rcx, [rsp + 0xbf0]
call fcn.180016cd0
lea rcx, [rsp + 0x910]
call fcn.180016ca0
lea rcx, [rsp + 0xc90]
call fcn.180016ca0
lea rcx, [rsp + 0xc10]
call fcn.180016cd0
lea rcx, [rsp + 0x8f0]
call fcn.180016ca0
lea rcx, [rsp + 0xc30]
call fcn.180016ca0
lea rcx, [rsp + 0xb70]
call fcn.180016cd0
lea rcx, [rsp + 0x990]
call fcn.180016ca0
lea rcx, [rsp + 0xc50]
call fcn.180016ca0
lea rcx, [rsp + 0xb90]
call fcn.180016cd0
lea rcx, [rsp + 0x9b0]
call fcn.180016ca0
lea rcx, [rsp + 0xbb0]
call fcn.180016ca0
lea rcx, [rsp + 0xb10]
call fcn.180016cd0
lea rcx, [rsp + 0x9d0]
call fcn.180016ca0
lea rcx, [rsp + 0xb30]
call fcn.180016ca0
lea rcx, [rsp + 0xa90]
call fcn.180016cd0
lea rcx, [rsp + 0x950]
call fcn.180016ca0
lea rcx, [rsp + 0xbd0]
call fcn.180016ca0
lea rcx, [rsp + 0xab0]
call fcn.180016cd0
lea rcx, [rsp + 0xb50]
call fcn.180016ca0
lea rcx, [rsp + 0xad0]
call fcn.180016cd0
lea rcx, [rsp + 0x930]
call fcn.180016ca0
lea rcx, [rsp + 0x9f0]
call fcn.180016ca0
lea rcx, [rsp + 0xaf0]
call fcn.180016ca0
lea rcx, [rsp + 0xa70]
call fcn.180016cd0
lea rcx, [rsp + 0xa10]
call fcn.180016ca0
lea rcx, [rsp + 0x68]
call fcn.180016d00
mov rax, qword [rsp + 0x2920]
jmp 0x18000cc4a
mov rdx, qword [rsp + 0x2928]
mov rcx, qword [rsp + 0x148]
call fcn.1800020f0
mov rcx, qword [rsp + 0x148]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rsp + 0x50], 0
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x40], 0x60
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x250]
lea r8, [rsp + 0x1a8]
mov edx, 0x12019f
lea rcx, [rsp + 0x148]
call qword [rsp + 0x140]
mov dword [rsp + 0x64], eax
cmp dword [rsp + 0x64], 0
jge 0x18000c855
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2920]
call fcn.180016920
lea rcx, [rsp + 0xe10]
call fcn.180016cd0
lea rcx, [rsp + 0xa30]
call fcn.180016ca0
lea rcx, [rsp + 0x208]
call fcn.180016d00
lea rcx, [rsp + 0x220]
call fcn.180016d00
lea rcx, [rsp + 0x238]
call fcn.180016d00
lea rcx, [rsp + 0xdd0]
call fcn.180016ca0
lea rcx, [rsp + 0xd70]
call fcn.180016cd0
lea rcx, [rsp + 0x970]
call fcn.180016ca0
lea rcx, [rsp + 0xdf0]
call fcn.180016ca0
lea rcx, [rsp + 0xd90]
call fcn.180016cd0
lea rcx, [rsp + 0xa50]
call fcn.180016ca0
lea rcx, [rsp + 0x1f0]
call fcn.180016d00
lea rcx, [rsp + 0xd30]
call fcn.180016ca0
lea rcx, [rsp + 0x190]
call fcn.180016d00
lea rcx, [rsp + 0xdb0]
call fcn.180016cd0
lea rcx, [rsp + 0x870]
call fcn.180016ca0
lea rcx, [rsp + 0xd50]
call fcn.180016cd0
lea rcx, [rsp + 0x8b0]
call fcn.180016ca0
lea rcx, [rsp + 0xd10]
call fcn.180016cd0
lea rcx, [rsp + 0x890]
call fcn.180016ca0
lea rcx, [rsp + 0xcb0]
call fcn.180016cd0
lea rcx, [rsp + 0x8d0]
call fcn.180016ca0
lea rcx, [rsp + 0xcd0]
call fcn.180016ca0
lea rcx, [rsp + 0xcf0]
call fcn.180016ca0
lea rcx, [rsp + 0xc70]
call fcn.180016ca0
lea rcx, [rsp + 0xbf0]
call fcn.180016cd0
lea rcx, [rsp + 0x910]
call fcn.180016ca0
lea rcx, [rsp + 0xc90]
call fcn.180016ca0
lea rcx, [rsp + 0xc10]
call fcn.180016cd0
lea rcx, [rsp + 0x8f0]
call fcn.180016ca0
lea rcx, [rsp + 0xc30]
call fcn.180016ca0
lea rcx, [rsp + 0xb70]
call fcn.180016cd0
lea rcx, [rsp + 0x990]
call fcn.180016ca0
lea rcx, [rsp + 0xc50]
call fcn.180016ca0
lea rcx, [rsp + 0xb90]
call fcn.180016cd0
lea rcx, [rsp + 0x9b0]
call fcn.180016ca0
lea rcx, [rsp + 0xbb0]
call fcn.180016ca0
lea rcx, [rsp + 0xb10]
call fcn.180016cd0
lea rcx, [rsp + 0x9d0]
call fcn.180016ca0
lea rcx, [rsp + 0xb30]
call fcn.180016ca0
lea rcx, [rsp + 0xa90]
call fcn.180016cd0
lea rcx, [rsp + 0x950]
call fcn.180016ca0
lea rcx, [rsp + 0xbd0]
call fcn.180016ca0
lea rcx, [rsp + 0xab0]
call fcn.180016cd0
lea rcx, [rsp + 0xb50]
call fcn.180016ca0
lea rcx, [rsp + 0xad0]
call fcn.180016cd0
lea rcx, [rsp + 0x930]
call fcn.180016ca0
lea rcx, [rsp + 0x9f0]
call fcn.180016ca0
lea rcx, [rsp + 0xaf0]
call fcn.180016ca0
lea rcx, [rsp + 0xa70]
call fcn.180016cd0
lea rcx, [rsp + 0xa10]
call fcn.180016ca0
lea rcx, [rsp + 0x68]
call fcn.180016d00
mov rax, qword [rsp + 0x2920]
jmp 0x18000cc4a
mov dword [rsp + 0x80], 0
lea rcx, [rsp + 0x520]
call fcn.180016920
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0x1000
lea rax, [rsp + 0x1900]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x148]
call qword [rsp + 0x188]
mov dword [rsp + 0x64], eax
cmp dword [rsp + 0x64], 0
jge 0x18000c8d1
cmp dword [rsp + 0x64], 0x103
jne 0x18000c95d
cmp dword [rsp + 0x64], 0x103
jne 0x18000c8f6
xor edx, edx
mov rcx, qword [rsp + 0x148]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [rsp + 0x170]
mov dword [rsp + 0x64], eax
mov eax, dword [rsp + 0x178]
mov dword [rsp + 0x80], eax
lea rdx, [rsp + 0x6f8]
lea rcx, [rsp + 0x520]
call fcn.180018680
mov rax, qword [rax]
mov qword [rsp + 0x4d0], rax
mov eax, dword [rsp + 0x80]
lea rax, [rsp + rax + 0x1900]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1900]
mov r8, qword [rsp + 0x4d0]
lea rdx, [rsp + 0x700]
lea rcx, [rsp + 0x520]
call fcn.180015d00
cmp dword [rsp + 0x64], 0
jl 0x18000c975
cmp dword [rsp + 0x80], 0x1000
je 0x18000c86d
lea rcx, [rsp + 0x68]
call fcn.180018430
lea rdx, [rsp + 0x520]
mov rcx, qword [rsp + 0x2920]
call fcn.180016820
lea rcx, [rsp + 0x520]
call fcn.180016d00
lea rcx, [rsp + 0xe10]
call fcn.180016cd0
lea rcx, [rsp + 0xa30]
call fcn.180016ca0
lea rcx, [rsp + 0x208]
call fcn.180016d00
lea rcx, [rsp + 0x220]
call fcn.180016d00
lea rcx, [rsp + 0x238]
call fcn.180016d00
lea rcx, [rsp + 0xdd0]
call fcn.180016ca0
lea rcx, [rsp + 0xd70]
call fcn.180016cd0
lea rcx, [rsp + 0x970]
call fcn.180016ca0
lea rcx, [rsp + 0xdf0]
call fcn.180016ca0
lea rcx, [rsp + 0xd90]
call fcn.180016cd0
lea rcx, [rsp + 0xa50]
call fcn.180016ca0
lea rcx, [rsp + 0x1f0]
call fcn.180016d00
lea rcx, [rsp + 0xd30]
call fcn.180016ca0
lea rcx, [rsp + 0x190]
call fcn.180016d00
lea rcx, [rsp + 0xdb0]
call fcn.180016cd0
lea rcx, [rsp + 0x870]
call fcn.180016ca0
lea rcx, [rsp + 0xd50]
call fcn.180016cd0
lea rcx, [rsp + 0x8b0]
call fcn.180016ca0
lea rcx, [rsp + 0xd10]
call fcn.180016cd0
lea rcx, [rsp + 0x890]
call fcn.180016ca0
lea rcx, [rsp + 0xcb0]
call fcn.180016cd0
lea rcx, [rsp + 0x8d0]
call fcn.180016ca0
lea rcx, [rsp + 0xcd0]
call fcn.180016ca0
lea rcx, [rsp + 0xcf0]
call fcn.180016ca0
lea rcx, [rsp + 0xc70]
call fcn.180016ca0
lea rcx, [rsp + 0xbf0]
call fcn.180016cd0
lea rcx, [rsp + 0x910]
call fcn.180016ca0
lea rcx, [rsp + 0xc90]
call fcn.180016ca0
lea rcx, [rsp + 0xc10]
call fcn.180016cd0
lea rcx, [rsp + 0x8f0]
call fcn.180016ca0
lea rcx, [rsp + 0xc30]
call fcn.180016ca0
lea rcx, [rsp + 0xb70]
call fcn.180016cd0
lea rcx, [rsp + 0x990]
call fcn.180016ca0
lea rcx, [rsp + 0xc50]
call fcn.180016ca0
lea rcx, [rsp + 0xb90]
call fcn.180016cd0
lea rcx, [rsp + 0x9b0]
call fcn.180016ca0
lea rcx, [rsp + 0xbb0]
call fcn.180016ca0
lea rcx, [rsp + 0xb10]
call fcn.180016cd0
lea rcx, [rsp + 0x9d0]
call fcn.180016ca0
lea rcx, [rsp + 0xb30]
call fcn.180016ca0
lea rcx, [rsp + 0xa90]
call fcn.180016cd0
lea rcx, [rsp + 0x950]
call fcn.180016ca0
lea rcx, [rsp + 0xbd0]
call fcn.180016ca0
lea rcx, [rsp + 0xab0]
call fcn.180016cd0
lea rcx, [rsp + 0xb50]
call fcn.180016ca0
lea rcx, [rsp + 0xad0]
call fcn.180016cd0
lea rcx, [rsp + 0x930]
call fcn.180016ca0
lea rcx, [rsp + 0x9f0]
call fcn.180016ca0
lea rcx, [rsp + 0xaf0]
call fcn.180016ca0
lea rcx, [rsp + 0xa70]
call fcn.180016cd0
lea rcx, [rsp + 0xa10]
call fcn.180016ca0
lea rcx, [rsp + 0x68]
call fcn.180016d00
mov rax, qword [rsp + 0x2920]
mov rcx, qword [rsp + 0x2900]
xor rcx, rsp
call fcn.1800191a0
add rsp, 0x2910
pop rdi
ret