Function at 0x180028e40
Capabilities:
Check http status code

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x660]
sub rsp, 0x760
mov rax, qword [0x1800737f8]
xor rax, rsp
mov qword [rbp + 0x650], rax
mov qword [rsp + 0x40], r8
mov rsi, rdx
mov r13d, ecx
mov dword [rsp + 0x38], ecx
xor r15d, r15d
mov edi, r15d
mov dword [rsp + 0x3c], r15d
mov ebx, ecx
imul r14d, ecx, 0x8f3
lea r10d, [r15 + 0x72]
lea r11d, [r15 + 0x32]
cmp ecx, r14d
ja 0x1800292e5
lea ecx, [r15 + 0x31]
lea edx, [rcx - 1]
movabs r15, 0x79006100650062
movabs r12, 0x730065006c0062
mov rdi, qword [rbp - 0x58]
mov eax, 0x616e
cmp ebx, 0xca3f
ja 0x1800290b7
je 0x1800290ab
cmp ebx, 0x43b3
ja 0x180028fb8
je 0x180028fac
cmp ebx, 0x122
ja 0x180028f6e
je 0x1800293bc
mov eax, ebx
sub eax, 0x6d
je 0x180028f5f
sub eax, 0x3a
je 0x180028f28
cmp eax, 0x22
jne 0x1800292cf
mov dword [rbp + 0x480], 0x73006d
mov dword [rbp + 0x484], 0x630076
jmp 0x1800292cf
test rsi, rsi
jne 0x1800292cf
mov eax, dword [rsp + 0x50]
mov rcx, qword [rbp + 0x650]
xor rcx, rsp
call fcn.1800604b0
mov rbx, qword [rsp + 0x7a0]
add rsp, 0x760
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov dword [rbp + 0x418], 0x32315a5f
jmp 0x1800292cf
cmp ebx, 0x2210
je 0x180028fa0
cmp ebx, 0x3430
je 0x180028f97
cmp ebx, 0x3ed0
jne 0x1800292cf
mov word [rbp + 0x488], r10w
jmp 0x1800292cf
xor eax, eax
mov edi, eax
jmp 0x1800292cf
mov byte [rbp + 0x41c], 0
jmp 0x1800292cf
mov word [rbp + 0x41c], ax
jmp 0x1800292cf
cmp ebx, 0x86f9
ja 0x18002906b
je 0x180029037
cmp ebx, 0x6556
je 0x180029029
cmp ebx, 0x67b9
je 0x180028ff8
cmp ebx, 0x7cd7
jne 0x1800292cf
mov dword [rbp + 0x48a], 0x320031
mov word [rbp + 0x48e], dx
jmp 0x1800292cf
mov rcx, qword [r8 + 0x18]
cmp rcx, qword [r8 + 8]
ja 0x1800292ca
nop word [rax + rax]
mov rax, qword [rsi + 8]
mov qword [rax + rcx*8], rdi
inc rdi
inc rcx
cmp rcx, qword [r8 + 8]
jbe 0x180029010
jmp 0x1800292ca
mov word [rbp + 0x41e], 0x74
jmp 0x1800292cf
mov r8d, 4
lea rdx, [0x18006892b]
lea rcx, [rbp + 0x418]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r9d, 0x7461
mov word [rbp + 0x423], r9w
mov byte [rbp + 0x425], 0
jmp 0x1800292b7
cmp ebx, 0xa89c
je 0x18002908d
cmp ebx, 0xbade
jne 0x1800292cf
xor eax, eax
mov word [rbp + 0x490], ax
jmp 0x1800292cf
mov eax, dword [0x18006884d]
mov dword [rbp + 0x425], eax
movzx eax, byte [0x180068851]
mov byte [rbp + 0x429], al
jmp 0x1800292cf
mov byte [rbp + 0x42a], 0
jmp 0x1800292cf
cmp ebx, 0x174f3
ja 0x1800291ed
je 0x1800291da
cmp ebx, 0x12f28
ja 0x18002917c
je 0x18002914f
cmp ebx, 0xebe2
je 0x180029129
cmp ebx, 0xf8e5
je 0x180029101
cmp ebx, 0x10d85
jne 0x1800292cf
mov word [rbp + 0x42d], 0x3f
jmp 0x1800292cf
mov r8d, 2
lea rdx, [0x1800688e8]
lea rcx, [rbp + 0x450]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor eax, eax
mov word [rbp + 0x454], ax
jmp 0x1800292b7
mov r8d, 3
lea rdx, [0x18006862c]
lea rcx, [rbp + 0x42a]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0x42d], 0
jmp 0x1800292b7
mov r8d, 3
lea rdx, [0x1800687de]
lea rcx, [rbp + 0x4b8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov r9d, 0x65
mov word [rbp + 0x4be], r9w
jmp 0x1800292b7
cmp ebx, 0x136ec
je 0x1800291c5
cmp ebx, 0x150cb
je 0x1800291b7
cmp ebx, 0x1726e
jne 0x1800292cf
mov eax, dword [0x180068952]
mov dword [rbp + 0x4c0], eax
movzx eax, word [0x180068956]
mov word [rbp + 0x4c4], ax
jmp 0x1800292cf
xor eax, eax
mov word [rbp + 0x4c0], ax
jmp 0x1800292cf
mov qword [rbp + 0x454], r15
xor eax, eax
mov word [rbp + 0x45c], ax
jmp 0x1800292cf
lea rdx, [0x180068862]
lea rcx, [rbp + 0x45c]
jmp 0x1800292ab
cmp ebx, 0x1d757
ja 0x18002927b
je 0x180029270
cmp ebx, 0x19411
je 0x18002924b
cmp ebx, 0x1b2fa
je 0x18002923d
cmp ebx, 0x1b5b4
jne 0x1800292cf
mov r8d, 3
lea rdx, [0x180068568]
lea rcx, [rbp + 0x4b8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov dword [rbp + 0x4d2], 0x61007a
jmp 0x1800292b7
xor eax, eax
mov word [rbp + 0x45e], ax
jmp 0x1800292cf
mov eax, dword [0x1800688fa]
mov dword [rbp + 0x4c6], eax
movzx eax, word [0x1800688fe]
mov word [rbp + 0x4ca], ax
xor eax, eax
mov word [rbp + 0x4cc], ax
jmp 0x1800292cf
xor eax, eax
mov word [rbp + 0x4d6], ax
jmp 0x1800292cf
cmp ebx, 0x1f101
je 0x18002929d
cmp ebx, 0x1f8fa
jne 0x1800292cf
mov qword [rbp + 0x4d6], r12
xor eax, eax
mov word [rbp + 0x4de], ax
jmp 0x1800292cf
lea rdx, [0x180068538]
lea rcx, [rbp + 0x45e]
mov r8d, 1
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov r11d, 0x32
lea r10d, [r11 + 0x40]
lea edx, [r11 - 2]
mov r8, qword [rsp + 0x40]
mov ecx, 0x31
imul eax, r13d, 0x4f
add ebx, eax
cmp ebx, r14d
jbe 0x180028ec3
mov edi, dword [rsp + 0x3c]
xor r15d, r15d
mov ebx, r13d
mov dword [rsp + 0x4c], ebx
imul r12d, r13d, 0x3a
mov dword [rsp + 0x30], r12d
cmp r13d, r12d
ja 0x180028f31
mov r11d, 0x54
lea rdx, [0x180000000]
lea r9d, [r11 - 0x1c]
mov r12, qword [rsp + 0x68]
movzx r13d, byte [rsp + 0x35]
mov eax, dword [rsp + 0x30]
mov ecx, ebx
mov r14d, 0x45
movabs rsi, 0x7ffffffffffffffe
movabs r10, 0x7fffffffffffffff
cmp ebx, 0x817
ja 0x1800295f7
je 0x1800295d0
cmp ebx, 0x3ed
ja 0x1800294d0
je 0x1800294b1
cmp ebx, 0x221
ja 0x18002943e
je 0x18002942b
mov eax, ebx
sub eax, 0x6d
je 0x180029402
sub eax, 0x5c
je 0x1800293cf
cmp eax, 0x7e
jne 0x18002a7ce
mov eax, dword [str.pTyp]
mov dword [rbp + 0x439], eax
mov dword [rbp + 0x43d], 0x3d2065
lea r8d, [r14 - 0x42]
lea rdx, [0x180068968]
lea rcx, [rbp + 0x430]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x18002a7b7
xor r8d, r8d
lea edx, [r8 + 0x13]
xor ecx, ecx
call fcn.1800361b0
jmp 0x180028f35
mov word [rbp + 0x460], r15w
movsd xmm0, qword [0x18006898c]
movsd qword [rbp + 0x468], xmm0
movzx eax, word [0x180068994]
mov word [rbp + 0x470], ax
mov word [rbp + 0x472], r15w
jmp 0x18002a7ce
mov eax, dword [str.ref_]
mov dword [rbp + 0x430], eax
movzx eax, word [0x180068d70]
mov word [rbp + 0x434], ax
mov dword [rbp + 0x436], 0x6f5470
jmp 0x18002a7ce
mov r8d, 0x5f
mov word [rbp + 0x443], r8w
jmp 0x18002a7d2
cmp ebx, 0x25b
je 0x1800294a2
cmp ebx, 0x2fb
je 0x18002947a
cmp ebx, 0x3d5
jne 0x18002a7d2
lea rcx, [rbp + 0x430]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x180029464
mov eax, dword [0x180068cdc]
mov dword [rcx], eax
jmp 0x18002a7ca
mov word [rbp + 0x444], r11w
movzx eax, word [0x180068d64]
mov word [rbp + 0x445], ax
movzx eax, byte [0x180068d66]
mov byte [rbp + 0x447], al
jmp 0x18002a7ce
mov dword [rbp + 0x472], 0x79
jmp 0x18002a7d2
mov r8d, 1
lea rdx, [0x180068d30]
lea rcx, [rbp + 0x468]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp 0x18002a7b7
cmp ebx, 0x663
ja 0x18002958f
je 0x180029572
mov eax, ebx
sub eax, 0x4af
je 0x18002953f
sub eax, 0xd0
je 0x180029518
cmp eax, 0xa
mov eax, dword [rsp + 0x30]
jne 0x18002a7d2
mov dword [rbp + 0x4e4], 0x640065
mov dword [rbp + 0x4e8], 0x69006c
jmp 0x18002a7d2
mov dword [rbp + 0x476], 0x32
movups xmm0, xmmword [rbp - 0x18]
movups xmmword [rbp + 0x3e0], xmm0
movsd xmm1, qword [rbp - 8]
movsd qword [rbp + 0x3f0], xmm1
jmp 0x18002a7ce
lea rcx, [rbp + 0x430]
dec rcx
nop dword [rax]
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x180029550
movzx eax, word [0x180065ab8]
mov word [rcx], ax
mov dword [rbp + 0x4e0], 0x720070
jmp 0x18002a7ca
mov r8d, 0x73
mov word [rbp + 0x4ec], r8w
mov dword [rbp + 0x4ee], 0x200074
jmp 0x18002a7d2
mov eax, ebx
sub eax, 0x711
je 0x1800295c6
cmp eax, 0x2c
jne 0x18002a7ce
mov eax, 0x61
mov word [rbp + 0x4f2], ax
mov dword [rbp + 0x4f4], 0x740066
mov dword [rbp + 0x4f8], 0x720065
jmp 0x18002a7ce
mov byte [rsp + 0x35], 1
jmp 0x18002a7ce
mov r8d, 0x20
mov word [rbp + 0x4fc], r8w
mov dword [rbp + 0x4fe], 0x65006d
mov dword [rbp + 0x502], 0x670072
jmp 0x18002a7d2
cmp ebx, 0xc59
ja 0x180029c71
je 0x1800296da
cmp ebx, 0xa35
ja 0x180029692
je 0x180029665
mov eax, ebx
sub eax, 0x8a3
je 0x18002965c
sub eax, 0x4e
je 0x18002964d
cmp eax, 0xda
mov eax, dword [rsp + 0x30]
jne 0x18002a7d2
mov dword [rbp + 0x50a], 0x6f0073
mov dword [rbp + 0x50e], 0x740072
jmp 0x18002a7d2
mov dword [rbp + 0x506], 0x200065
jmp 0x18002a7ce
mov qword [rbp - 0x58], r15
jmp 0x18002a7ce
lea rax, [rbp + 0x480]
mov qword [rbp + 0x3e0], rax
lea rax, [rbp + 0x450]
mov qword [rbp + 0x3e8], rax
call qword [sym.imp.WINMM.dll_joyGetNumDevs]
mov eax, eax
mov qword [rbp - 0x60], rax
jmp 0x18002a7b7
cmp ebx, 0xaa5
je 0x1800296cd
cmp ebx, 0xbc7
jne 0x18002a7d2
lea rax, [rbp + 0x468]
mov qword [rbp + 0x3f0], rax
mov ecx, r15d
movzx eax, byte [rsp + 0x35]
cmp qword [rbp - 0x60], 0xf
cmovbe ecx, eax
mov byte [rsp + 0x35], cl
jmp 0x18002a7ca
mov word [rbp + 0x512], r15w
jmp 0x18002a7d2
cmp qword [r8 + 0x10], 0x35
jb 0x18002a7d2
mov r15d, 0x128
mov dword [rsp + 0x48], r15d
cmp r15d, 0x39c
ja 0x180029b73
je 0x180029b48
cmp r15d, 0x128
je 0x180029a0a
cmp r15d, 0x1c5
je 0x1800299f0
cmp r15d, 0x262
je 0x18002989e
cmp r15d, 0x2ff
jne 0x180029c45
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x18], xmm0
mov dword [rbp - 8], eax
mov qword [rbp - 0x20], ILRemoveLastID
mov byte [rbp - 0x38], al
mov rax, qword [r8 + 0x10]
cmp rax, 0x11
jb 0x18002a81e
add rax, 0xffffffffffffffef
mov esi, 0x24
cmp rax, rsi
cmovb rsi, rax
mov rax, r8
cmp qword [r8 + 0x18], 0x10
jb 0x180029779
mov rax, qword [r8]
lea r14, [rax + 0x11]
cmp rsi, 0xf
ja 0x1800297a0
mov qword [rbp - 0x28], rsi
mov r8, rsi
mov rdx, r14
lea rcx, [rbp - 0x38]
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rsi - 0x38], 0
jmp 0x180029833
cmp rsi, r10
ja 0x18002a82a
mov rdi, rsi
or rdi, 0xf
cmp rdi, r10
jbe 0x1800297ba
mov rdi, r10
jmp 0x1800297c7
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x180029800
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18002a824
mov rcx, rax
call fcn.18005fccc
test rax, rax
je 0x18002a7f2
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x180029811
test rcx, rcx
je 0x18002980c
call fcn.18005fccc
jmp 0x18002980e
xor eax, eax
mov rbx, rax
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x20], rdi
mov r8, rsi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rsi], 0
mov qword [rbp - 0x38], rbx
mov edi, dword [rsp + 0x3c]
or edi, 2
mov dword [rsp + 0x3c], edi
lea rdx, [rbp - 0x38]
lea rcx, [0x180073748]
call fcn.1800034d0
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x180029885
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180029880
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002a7f2
call fcn.18005fd08
xor eax, eax
mov ecx, eax
movzx eax, byte [rsp + 0x36]
cmp dword [rsp + 0x70], ecx
cmovne ecx, eax
mov byte [rsp + 0x36], cl
jmp 0x180029c36
mov qword [rbp - 0x20], ILRemoveLastID
mov byte [rbp - 0x38], 0
mov rax, qword [r8 + 0x10]
cmp rax, 0xb
jb 0x18002a81e
add rax, 0xfffffffffffffff5
mov esi, 6
cmp rax, rsi
cmovb rsi, rax
mov rax, r8
cmp qword [r8 + 0x18], 0x10
jb 0x1800298d5
mov rax, qword [r8]
lea r14, [rax + 0xb]
cmp rsi, 0xf
ja 0x1800298fc
mov qword [rbp - 0x28], rsi
mov r8, rsi
mov rdx, r14
lea rcx, [rbp - 0x38]
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rsi - 0x38], 0
jmp 0x18002998f
cmp rsi, r10
ja 0x18002a82a
mov rdi, rsi
or rdi, 0xf
cmp rdi, r10
jbe 0x180029916
mov rdi, r10
jmp 0x180029923
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x18002995c
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18002a824
mov rcx, rax
call fcn.18005fccc
test rax, rax
je 0x18002a7f2
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x18002996d
test rcx, rcx
je 0x180029968
call fcn.18005fccc
jmp 0x18002996a
xor eax, eax
mov rbx, rax
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x20], rdi
mov r8, rsi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rsi], 0
mov qword [rbp - 0x38], rbx
mov edi, dword [rsp + 0x3c]
or edi, 1
mov dword [rsp + 0x3c], edi
lea rdx, [rbp - 0x38]
lea rcx, [0x180073788]
call fcn.1800034d0
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x1800299e1
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800299dc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002a7f2
call fcn.18005fd08
call qword [sym.imp.WINMM.dll_midiOutGetNumDevs]
mov dword [rsp + 0x70], eax
jmp 0x180029c36
mov byte [rsp + 0x36], 1
mov qword [rbp - 0x40], 0xffffffffffffffff
mov dword [rsp + 0x74], 0x2000000
jmp 0x180029c45
xor edx, edx
mov qword [rbp - 0x50], rdx
mov qword [rbp - 0x20], ILRemoveLastID
mov byte [rbp - 0x38], dl
mov esi, 0xb
cmp qword [r8 + 0x10], rsi
cmovb rsi, qword [r8 + 0x10]
mov r14, r8
cmp qword [r8 + 0x18], 0x10
jb 0x180029a36
mov r14, qword [r8]
cmp rsi, 0xf
ja 0x180029a59
mov qword [rbp - 0x28], rsi
mov r8, rsi
mov rdx, r14
lea rcx, [rbp - 0x38]
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rsi - 0x38], 0
jmp 0x180029aed
cmp rsi, r10
ja 0x18002a82a
mov rdi, rsi
or rdi, 0xf
cmp rdi, r10
jbe 0x180029a73
mov rdi, r10
jmp 0x180029a80
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x180029ab9
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18002a824
mov rcx, rax
call fcn.18005fccc
test rax, rax
je 0x18002a7f2
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x180029acb
test rcx, rcx
je 0x180029ac8
call fcn.18005fccc
mov rbx, rax
jmp 0x180029acb
mov rbx, rdx
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x20], rdi
mov r8, rsi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rsi], 0
mov qword [rbp - 0x38], rbx
mov edi, dword [rsp + 0x3c]
or edi, 4
mov dword [rsp + 0x3c], edi
lea rdx, [rbp - 0x38]
lea rcx, [0x180073768]
call fcn.1800034d0
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x180029c36
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180029b3e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002a7f2
call fcn.18005fd08
jmp 0x180029c36
mov dword [rsp + 0x28], 1
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x74]
mov r8, qword [rbp - 0x40]
mov rdx, qword [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_ObjectPrivilegeAuditAlarmW]
jmp 0x180029c36
cmp r15d, 0x439
je 0x180029ba1
cmp r15d, 0x4d6
je 0x180029b97
cmp r15d, 0x573
je 0x180028f31
jmp 0x180029c45
mov byte [rsp + 0x50], 1
jmp 0x180029c45
cmp byte [rsp + 0x36], 0
je 0x180029c45
mov ebx, 0x11a
mov r12d, dword [rsp + 0x7c]
mov r15d, dword [rsp + 0x78]
nop dword [rax + rax]
mov eax, ebx
sub eax, 0x117
je 0x180029c02
sub eax, 1
je 0x180029bfd
sub eax, 1
je 0x180029bdf
cmp eax, 1
jne 0x180029c18
xor eax, eax
mov r12d, eax
jmp 0x180029c18
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
mov dword [rbp + 0x60], eax
jmp 0x180029c18
mov r15d, r11d
jmp 0x180029c18
mov ecx, r12d
mov r8d, r15d
lea rdx, [rbp + 0x10]
call qword [sym.imp.WINMM.dll_midiOutGetDevCapsW]
mov r11d, 0x54
dec ebx
cmp ebx, 0x116
ja 0x180029bc0
mov dword [rsp + 0x78], r15d
mov dword [rsp + 0x7c], r12d
mov r15d, dword [rsp + 0x48]
mov r12, qword [rsp + 0x68]
movabs r10, 0x7fffffffffffffff
mov r8, qword [rsp + 0x40]
add r15d, 0x9d
mov dword [rsp + 0x48], r15d
cmp r15d, 0x610
mov r11d, 0x54
jb 0x1800296f0
mov ebx, dword [rsp + 0x4c]
lea r9d, [r11 - 0x1c]
jmp 0x18002a7c3
cmp ebx, 0xeeb
ja 0x18002a78f
je 0x180029cf1
mov eax, ebx
sub eax, 0xd33
je 0x180029cb8
sub eax, 0x26
je 0x180029c9d
cmp eax, 0xb4
je 0x180028f31
jmp 0x18002a7ce
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], rax
mov dword [rbp + 0x88], eax
jmp 0x18002a7ce
lea r8, [rbp + 0x540]
lea rdx, [rbp + 0x430]
lea rcx, [rbp + 0x418]
call qword [sym.imp.dbghelp.dll_FindExecutableImage]
lea rdx, [rbp + 0x4e0]
lea rcx, [rbp + 0x4b8]
call qword [sym.imp.SHLWAPI.dll_PathIsContentTypeW]
mov byte [rsp + 0x50], 0
jmp 0x18002a7b7
mov dword [rsp + 0x64], r15d
mov rbx, r15
mov qword [rsp + 0x58], rbx
nop
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x20], 7
mov word [rbp - 0x38], r15w
mov eax, 0x89
mov dword [rsp + 0x48], eax
nop word [rax + rax]
cmp eax, 0x291
ja 0x180029fa1
je 0x180029f66
cmp eax, 0x179
ja 0x180029e66
je 0x180029e3a
add eax, 0xffffff77
cmp eax, 0xc8
ja case.0x18002a32a.983
movzx eax, byte [rdx + rax + 0x2a84c]
mov ecx, dword [rdx + rax*4 + 0x2a830]
add rcx, rdx
jmp rcx
mov r8d, 4
lea rdx, [0x180068a0a]
lea rcx, [rbp + 0x51e]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov word [rbp + 0x526], r15w
mov r8d, 4
lea rdx, [0x180068a4c]
lea rcx, [rbp + 0x518]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
lea rdx, [0x180000000]
mov r9d, 0x38
jmp case.0x18002a32a.983
mov r8d, 3
lea rdx, [0x180068baa]
lea rcx, [rbp + 0x518]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov word [rbp + 0x51e], r15w
lea rdx, [0x180000000]
mov r9d, 0x38
jmp case.0x18002a32a.983
mov eax, dword [0x180068c47]
mov dword [rbp + 0x3f8], eax
movzx eax, byte [0x180068c4b]
mov byte [rbp + 0x3fc], al
mov byte [rbp + 0x3fd], 0
jmp case.0x18002a32a.983
mov eax, 0x72
mov word [rbp + 0x52e], ax
jmp case.0x18002a32a.983
mov word [rbp + 0x534], r15w
jmp case.0x18002a32a.983
mov dword [rbp + 0x530], 0x490055
jmp case.0x18002a32a.983
mov r8d, 2
lea rdx, [0x180068cad]
lea rcx, [rbp + 0x3fd]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
lea rdx, [0x180000000]
mov r9d, 0x38
jmp case.0x18002a32a.983
add eax, 0xfffffe5f
cmp eax, 0xc8
ja case.0x18002a32a.983
movzx eax, byte [rdx + rax + 0x2a934]
mov ecx, dword [rdx + rax*4 + 0x2a918]
add rcx, rdx
jmp rcx
movzx eax, word [0x1800689ad]
mov word [rbp + 0x402], ax
movzx eax, byte [0x1800689af]
mov byte [rbp + 0x404], al
jmp case.0x18002a32a.983
mov byte [rbp + 0x405], 0
mov r8d, 2
lea rdx, [0x1800689d4]
lea rcx, [rbp + 0x405]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0x407], 0
lea rdx, [0x180000000]
mov r9d, 0x38
jmp case.0x18002a32a.983
movzx eax, word [0x180068a8d]
mov word [rbp + 0x3ff], ax
movzx eax, byte [0x180068a8f]
mov byte [rbp + 0x401], al
jmp case.0x18002a32a.983
mov r8d, 1
lea rdx, [0x180068ab9]
lea rcx, [rbp + 0x3f8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
lea rdx, [0x180000000]
mov r9d, 0x38
jmp case.0x18002a32a.983
mov eax, dword [0x180068c0a]
mov dword [rbp + 0x408], eax
movzx eax, byte [0x180068c0e]
mov byte [rbp + 0x40c], al
mov byte [rbp + 0x40d], 0
jmp case.0x18002a32a.983
mov eax, 0x733f
mov word [rbp + 0x40d], ax
jmp case.0x18002a32a.983
mov byte [rbp + 0x40f], 0
mov r8d, 1
lea rdx, str.trufos.inf
lea rcx, [rbp + 0x3f8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov word [rbp + 0x498], r14w
lea rdx, [0x180000000]
mov r9d, 0x38
jmp case.0x18002a32a.983
cmp eax, 0x3a9
ja 0x18002a308
je 0x18002a1bd
add eax, 0xfffffd47
cmp eax, 0xc8
ja case.0x18002a32a.983
movzx eax, byte [rdx + rax + 0x2aa1c]
mov ecx, dword [rdx + rax*4 + 0x2aa00]
add rcx, rdx
jmp rcx
mov eax, 0x35
mov word [rbp + 0x4ac], ax
mov dword [rbp + 0x4ae], 0x390038
mov eax, 0x20
mov word [rbp + 0x4b2], ax
jmp case.0x18002a32a.983
mov word [rbp + 0x4b4], r15w
mov rdi, qword [r8 + 0x10]
mov rbx, r8
cmp qword [r8 + 0x18], 8
jb 0x18002a016
mov rbx, qword [r8]
cmp rdi, 8
jae 0x18002a02f
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x18], xmm0
mov r14d, 7
mov r15, qword [rbp - 0x18]
jmp 0x18002a064
mov r14, rdi
or r14, 7
cmp r14, rsi
cmova r14, rsi
lea rdx, [r14 + 1]
lea rcx, [rbp - 0x18]
call fcn.18001ffc0
mov r15, rax
mov qword [rbp - 0x18], rax
lea r8, [rdi*2 + 2]
mov rdx, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp], r14
mov qword [rbp - 8], rdi
lea rsi, [rbp - 0x18]
cmp r14, 8
cmovae rsi, r15
cmp rdi, 8
jae 0x18002a08b
movups xmm0, xmmword [rsi]
mov qword [rbp + 0x28], 7
jmp 0x18002a0cf
mov rbx, rdi
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rbp + 0x10]
call fcn.18001ffc0
mov qword [rbp + 0x10], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x28], rbx
movups xmm0, xmmword [rbp + 0x10]
movups xmmword [rbp - 0x18], xmm0
mov qword [rbp + 0x20], rdi
mov rax, qword [rbp - 0x20]
cmp rax, 8
jb 0x18002a117
lea rdx, [rax*2 + 2]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a112
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002a7f9
call fcn.18005fd08
movups xmm0, xmmword [rbp - 0x18]
movups xmmword [rbp - 0x38], xmm0
movups xmm0, xmmword [rbp + 0x20]
movups xmmword [rbp - 0x28], xmm0
cmp r14, 8
jb 0x18002a162
lea rdx, [r14*2 + 2]
mov rax, r15
cmp rdx, 0x1000
jb 0x18002a15a
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002a800
mov rcx, r15
call fcn.18005fd08
mov byte [rsp + 0x34], 1
xor r15d, r15d
jmp 0x18002a2e3
mov word [rbp + 0x4aa], r9w
jmp case.0x18002a32a.983
mov dword [rbp + 0x4a2], 0x2d0038
mov dword [rbp + 0x4a6], 0x310038
jmp case.0x18002a32a.983
mov dword [rbp + 0x49a], 0x250037
mov word [rbp + 0x49e], r9w
jmp case.0x18002a32a.983
mov eax, 0x29
mov word [rbp + 0x4a0], ax
jmp case.0x18002a32a.983
mov rdx, qword [rbp + rbx*8 + 0x3e0]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x18002a1d0
lea rcx, [rbp - 0x38]
call fcn.1800200c0
mov rdi, qword [rbp - 0x28]
mov r14, qword [rbp - 0x20]
cmp rdi, r14
jae 0x18002a212
lea rax, [rdi + 1]
mov qword [rbp - 0x28], rax
lea rax, [rbp - 0x38]
cmp r14, 8
cmovae rax, qword [rbp - 0x38]
mov dword [rax + rdi*2], PathMakeUniqueName
jmp 0x18002a2f2
mov rax, rsi
sub rax, rdi
cmp rax, 1
jb 0x18002a818
lea r15, [rdi + 1]
mov rbx, r15
or rbx, 7
cmp rbx, rsi
jbe 0x18002a237
mov rbx, rsi
jmp 0x18002a258
mov rcx, r14
shr rcx, 1
mov rax, rsi
sub rax, rcx
cmp r14, rax
jbe 0x18002a24d
mov rbx, rsi
jmp 0x18002a258
lea rax, [r14 + rcx]
cmp rbx, rax
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x38]
call fcn.18001ffc0
mov rsi, rax
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x20], rbx
add rdi, rdi
mov r8, rdi
mov rcx, rax
cmp r14, 8
jb 0x18002a2cc
mov rbx, qword [rbp - 0x38]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov dword [rsi + rdi], PathMakeUniqueName
xor r15d, r15d
lea rdx, [r14*2 + 2]
cmp rdx, 0x1000
jb 0x18002a2c2
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18002a800
mov rbx, rcx
mov rcx, rbx
call fcn.18005fd08
jmp 0x18002a2df
lea rdx, [rbp - 0x38]
call sub.VCRUNTIME140.dll_memcpy
mov dword [rsi + rdi], PathMakeUniqueName
xor r15d, r15d
mov qword [rbp - 0x38], rsi
mov rbx, qword [rsp + 0x58]
movabs rsi, 0x7ffffffffffffffe
lea rdx, [0x180000000]
mov r9d, 0x38
lea r14d, [r9 + 0xd]
jmp case.0x18002a32a.983
add eax, 0xfffffc2f
cmp eax, 0xc8
ja case.0x18002a32a.983
movzx eax, byte [rdx + rax + 0x2ab04]
mov ecx, dword [rdx + rax*4 + 0x2aae8]
add rcx, rdx
jmp rcx
movzx ecx, byte [rsp + 0x34]
test cl, cl
je case.0x18002a32a.983
mov ebx, 0xac
mov r12d, dword [rbp - 0x80]
mov eax, ebx
sub eax, 0xac
je 0x18002a3c8
sub eax, 1
je 0x18002a3a8
cmp eax, 1
jne 0x18002a37e
test cl, cl
je 0x18002a37e
mov r8d, r12d
lea rdx, [rbp - 0x18]
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.WINMM.dll_mmioAscend]
mov edx, reloc.SHELL32.dll_ILFindLastID
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.WINMM.dll_mmioClose]
movzx ecx, byte [rsp + 0x34]
inc ebx
cmp ebx, 0xaf
jb 0x18002a342
mov dword [rbp - 0x80], r12d
mov r12, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x58]
lea rdx, [0x180000000]
mov r9d, 0x38
jmp case.0x18002a32a.983
mov r9d, r12d
xor r8d, r8d
lea rdx, [rbp - 0x18]
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.WINMM.dll_mmioDescend]
test eax, eax
je 0x18002a379
xor cl, cl
mov byte [rsp + 0x34], cl
jmp 0x18002a37e
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x18], xmm0
mov dword [rbp - 8], eax
lea r12d, [rax + 0x10]
jmp 0x18002a37e
cmp qword [rbp - 0x48], 0
jne case.0x18002a32a.983
mov edi, 0xa8
nop word [rax + rax]
cmp edi, 0x12948
ja 0x18002a48d
je 0x18002a461
cmp edi, 0xa8
je 0x18002a454
cmp edi, 0x4ad0
je 0x18002a43a
cmp edi, 0x94f8
je 0x18002a42b
cmp edi, 0xdf20
jne 0x18002a5a6
mov dword [rbp + 0x10], r9d
jmp 0x18002a5a6
call qword [sym.imp.dbghelp.dll_SymGetOptions]
mov dword [rsp + 0x60], eax
jmp 0x18002a5a6
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], rax
jmp 0x18002a5a6
mov r13b, 1
mov byte [rsp + 0x37], r13b
jmp 0x18002a5a6
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rbp + 0x40], rax
mov dword [rbp + 0x14], 0x80
mov ecx, r15d
movzx eax, byte [rsp + 0x37]
cmp dword [rsp + 0x60], 0
cmovne ecx, eax
mov byte [rsp + 0x37], cl
jmp 0x18002a5a6
cmp edi, 0x17370
je 0x18002a583
cmp edi, 0x1bd98
je 0x18002a56f
cmp edi, 0x207c0
je 0x18002a503
cmp edi, 0x251e8
jne 0x18002a5a6
mov rdx, qword [rbp - 0x20]
cmp rdx, 8
jb 0x180028f31
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a807
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002a807
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
test r13b, r13b
je 0x18002a568
mov ebx, 0xfc
nop dword [rax]
mov eax, ebx
sub eax, 0xfc
je 0x18002a559
cmp eax, 0x52
jne 0x18002a55d
lea rdx, [rbp - 0x68]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_ActivateActCtx]
test eax, eax
jne 0x18002a53d
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_ReleaseActCtx]
xor r13b, r13b
jmp 0x18002a55d
test r13b, r13b
je 0x18002a55d
mov rdx, qword [rbp - 0x68]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DeactivateActCtx]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_ReleaseActCtx]
jmp 0x18002a55d
mov qword [rbp - 0x68], r15
add ebx, 0x52
cmp ebx, 0x1a0
jb 0x18002a510
mov byte [rsp + 0x50], 0
jmp 0x18002a5a6
mov ecx, r15d
movzx eax, r13b
cmp r12, 0xffffffffffffffff
cmovne ecx, eax
movzx r13d, cl
jmp 0x18002a5a6
lea rcx, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_CreateActCtxA]
mov r12, rax
mov qword [rsp + 0x68], rax
cmp byte [rsp + 0x37], 0
je 0x18002a5a6
mov ecx, dword [rsp + 0x60]
call qword [sym.imp.dbghelp.dll_SymSetOptions]
add edi, 0x4a28
cmp edi, 0x29b68
mov r9d, 0x38
jbe 0x18002a3f0
mov rbx, qword [rsp + 0x58]
lea rdx, [0x180000000]
jmp case.0x18002a32a.983
mov r8d, 3
lea rdx, [0x1800658e8]
lea rcx, [rbp - 0x38]
call fcn.1800200c0
mov r8d, dword [rbp - 0x7c]
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x3f8]
call qword [sym.imp.WINMM.dll_mmioOpenA]
mov qword [rbp - 0x70], rax
lea rcx, [rbp - 0x38]
cmp qword [rbp - 0x20], 8
cmovae rcx, qword [rbp - 0x38]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov qword [rbp - 0x48], rax
lea rdx, [0x180000000]
mov r9d, 0x38
jmp case.0x18002a32a.983
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 0xc0], xmm0
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
mov dword [rbp + 0xf0], eax
jmp case.0x18002a32a.983
lea rdx, [rbp + 0x498]
lea rcx, [rbp + 0x518]
call qword [sym.imp.SHLWAPI.dll_StrTrimW]
mov ecx, r15d
movzx eax, byte [rsp + 0x34]
cmp qword [rbp - 0x70], 0
cmovne ecx, eax
mov byte [rsp + 0x34], cl
lea rdx, [0x180000000]
mov r9d, 0x38
jmp case.0x18002a32a.983
mov dword [rbp - 0x7c], r15d
mov eax, dword [rsp + 0x48]
add eax, 0x28
mov dword [rsp + 0x48], eax
cmp eax, 0x4c1
mov r8, qword [rsp + 0x40]
jb 0x180029d20
mov rax, qword [rbp - 0x20]
cmp rax, 8
jb 0x18002a6fa
lea rdx, [rax*2 + 2]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a6f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002a811
call fcn.18005fd08
mov ecx, dword [rsp + 0x64]
inc ecx
mov dword [rsp + 0x64], ecx
inc rbx
mov qword [rsp + 0x58], rbx
cmp ecx, 3
mov r8, qword [rsp + 0x40]
lea rdx, [0x180000000]
mov r9d, 0x38
jb 0x180029d00
cmp byte [rsp + 0x35], 0
je 0x18002a789
mov ebx, 0x71
mov r12d, dword [rbp - 0x78]
mov eax, ebx
sub eax, 0x70
je 0x18002a75f
cmp eax, 1
jne 0x18002a773
xor edx, edx
mov r8d, 0x2d8
lea rcx, [rbp + 0x100]
call sub.VCRUNTIME140.dll_memset
mov r12d, 0x2d8
jmp 0x18002a773
mov r8d, r12d
lea rdx, [rbp + 0x100]
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.WINMM.dll_joyGetDevCapsW]
dec ebx
cmp ebx, 0x6f
ja 0x18002a737
mov dword [rbp - 0x78], r12d
mov r12, qword [rsp + 0x68]
mov ebx, dword [rsp + 0x4c]
jmp 0x18002a7b7
mov ebx, dword [rsp + 0x4c]
jmp 0x18002a7bd
cmp ebx, 0x107d
je 0x18002a7a5
cmp ebx, 0x120f
je 0x180028f31
jmp 0x18002a7d2
lea rdx, [rbp + 0x70]
mov rcx, qword [rbp - 0x58]
call sub.IMM32.dll_ImmGetCompositionWindow
mov byte [rsp + 0x50], 1
mov r9d, 0x38
mov r11d, 0x54
lea rdx, [0x180000000]
mov ecx, dword [rsp + 0x38]
mov eax, dword [rsp + 0x30]
lea ebx, [rbx + rcx*2]
mov dword [rsp + 0x4c], ebx
cmp ebx, eax
ja 0x180028f31
mov r8, qword [rsp + 0x40]
mov edi, dword [rsp + 0x3c]
xor r15d, r15d
jmp 0x180029320
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.18005fd08
jmp 0x180028f31
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1800176d0
nop
call fcn.180017710
int3
call fcn.180017590
int3
call fcn.1800176d0
int3