Function at 0x18001d0f0
Capabilities:
Check for software breakpoints

Disassembly:
mov r11, rsp
mov qword [r11 + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r14
lea rbp, [r11 - 0xbd8]
sub rsp, 0xcb0
mov rax, qword [0x1800ca088]
xor rax, rsp
mov qword [rbp + 0xba0], rax
mov r12, qword [rbp]
xor ebx, ebx
mov esi, dword [rbp + 0x18]
mov r14d, 0x33
mov qword [r11 + 8], r13
mov edi, r14d
mov qword [rsp + 0x48], rbx
mov qword [rbp + 0x28], rdx
mov qword [r11 + 0x18], r15
cmp edi, r14d
je 0x18001d1d5
cmp edi, 0x45
je 0x18001d1ab
cmp edi, 0x48
je 0x18001d1a2
cmp edi, 0x68
je 0x18001d180
cmp edi, 0x6b
jne 0x18001d1e9
lea edx, [rdi + 0xe]
mov qword [rbp + 8], 8
lea rcx, [rbp + 8]
call fcn.18001b550
mov rdx, qword [rbp + 0x28]
mov qword [rsp + 0x60], rax
jmp 0x18001d1e9
test esi, esi
jns 0x18001d1e9
mov eax, 0x37
nop dword [rax]
cmp eax, 0x37
je 0x18001d2a3
dec eax
cmp eax, 0x36
ja 0x18001d190
jmp 0x18001d1e9
mov r12, rdx
mov qword [rbp], rdx
jmp 0x18001d1e9
mov eax, dword [rdx]
lea r9, [rbp - 0x20]
xor edx, edx
mov dword [rbp - 0x20], 1
lea r8, [rsp + 0x38]
mov dword [rsp + 0x38], eax
mov ecx, 0xa0
call fcn.18006f750
mov rdx, qword [rbp + 0x28]
mov esi, eax
jmp 0x18001d1e9
mov ecx, dword [rdx]
sub ecx, 1
je 0x18001d2aa
cmp ecx, 1
je 0x18001d2c0
add edi, 0x23
cmp edi, 0x105
jb 0x18001d140
mov eax, dword [rsp + 0x38]
mov r15d, r14d
mov edi, dword [rsp + 0x38]
mov r9d, dword [rsp + 0x38]
mov r11d, dword [rsp + 0x38]
movzx r14d, byte [rsp + 0x31]
movzx r8d, byte [rsp + 0x31]
mov r13, qword [rsp + 0x48]
mov r10, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
mov dword [rbp - 0x48], eax
movzx eax, word [rsp + 0x58]
mov dword [rbp - 0x38], eax
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x18], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp - 8], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x20], rax
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x38], eax
movzx eax, byte [rsp + 0x31]
mov byte [rsp + 0x31], al
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x68], eax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 8], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x10], rax
mov qword [rbp - 0x30], rdi
mov qword [rsp + 0x70], r13
mov dword [rsp + 0x40], r9d
mov dword [rsp + 0x50], r11d
mov byte [rsp + 0x32], r14b
mov byte [rsp + 0x30], r8b
mov qword [rbp - 0x28], r10
mov qword [rbp - 0x40], rdx
jmp 0x18001d42b
mov eax, esi
jmp 0x18001d840
mov eax, 0x53
nop
cmp eax, 0x53
je 0x18001d359
dec eax
cmp eax, 0x52
ja 0x18001d2b0
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movzx edx, word [rsp + 0x58]
mov edi, dword [rsp + 0x38]
mov r8d, dword [rsp + 0x38]
mov qword [rsp + 0x70], rax
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x50], eax
movzx eax, byte [rsp + 0x31]
mov byte [rsp + 0x32], al
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x18], rcx
movzx ecx, byte [rsp + 0x31]
mov qword [rbp - 8], rax
mov rax, qword [rsp + 0x48]
mov dword [rbp - 0x38], edx
mov edx, dword [rsp + 0x38]
mov byte [rsp + 0x30], cl
mov rcx, qword [rsp + 0x48]
mov qword [rbp - 0x28], rax
mov dword [rsp + 0x38], edx
mov eax, dword [rsp + 0x38]
movzx edx, byte [rsp + 0x31]
mov dword [rsp + 0x68], eax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x20], rcx
mov rcx, qword [rsp + 0x48]
mov qword [rbp + 8], rax
mov qword [rbp - 0x30], rdi
mov dword [rbp - 0x48], r8d
mov byte [rsp + 0x31], dl
mov qword [rbp + 0x10], rcx
jmp 0x18001d3f9
mov rax, qword [rdx + 8]
mov edi, dword [rsp + 0x38]
movzx ecx, byte [rsp + 0x31]
mov qword [rbp - 0x30], rdi
mov dword [rax + 0x150c], 0x775c7dd5
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x70], rax
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x38]
mov dword [rbp - 0x48], eax
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x50], eax
movzx eax, word [rsp + 0x58]
mov dword [rbp - 0x38], eax
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x18], rax
movzx eax, byte [rsp + 0x31]
mov byte [rsp + 0x32], al
mov rax, qword [rsp + 0x48]
mov qword [rbp - 8], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x20], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x28], rax
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x38], eax
movzx eax, byte [rsp + 0x31]
mov byte [rsp + 0x31], al
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x68], eax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 8], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x10], rax
mov byte [rsp + 0x30], cl
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x40], rax
mov r15d, r14d
mov rdx, qword [rbp - 0x40]
dec r15d
movzx r14d, byte [rsp + 0x32]
mov r10, qword [rbp - 0x28]
movzx r8d, byte [rsp + 0x30]
mov r9d, dword [rsp + 0x40]
mov r11d, dword [rsp + 0x50]
mov r13, qword [rsp + 0x70]
cmp r15d, 0x2f
jbe 0x18001e5d1
mov eax, r15d
sub eax, 0x23
je 0x18001e49e
sub eax, 1
je 0x18001d469
sub eax, 1
je 0x18001d728
cmp eax, 0xe
jne 0x18001d405
lea r14d, [rax + 0x25]
jmp 0x18001d402
mov r13, qword [rsp + 0x70]
mov rdx, qword [rbp - 0x40]
mov r15d, 0x24
mov ecx, 0xe
mov dword [rsp + 0x58], r15d
nop dword [rax]
cmp ecx, 0x98
jae 0x18001d405
cmp ecx, 0xe
je 0x18001d500
cmp ecx, 0x3c
je case.0x18001d51f.0
cmp ecx, 0x6a
jne 0x18001d6f9
cmp qword [r12 + 0x20], 0
je 0x18001e639
cmp r12, qword [rbp + 0x28]
je 0x18001e639
cmp qword [r12 + 0x10], 0
je 0x18001d4df
mov eax, 0x76
cmp eax, 0x76
je 0x18001d705
inc eax
cmp eax, 0x77
jb 0x18001d4c6
mov rdx, qword [rbp - 0x40]
add ecx, 0x2e
jmp 0x18001d480
mov eax, 0x65
cmp eax, 0x65
je 0x18001e485
add eax, 0x55
cmp eax, 0xba
jb 0x18001d4e4
mov rdx, qword [rbp - 0x40]
add ecx, 0x2e
jmp 0x18001d480
movsxd rax, dword [r12]
lea r10, [0x180000000]
cmp eax, 6
ja case.default.0x18001d51f
mov ecx, dword [r10 + rax*4 + 0x1e690]
add rcx, r10
jmp rcx
mov esi, 0xa0
mov eax, esi
sub eax, 0xa0
je 0x18001d56f
cmp eax, 1
jne 0x18001d5b4
mov esi, ebx
lea r14d, [rax + 9]
lea ebx, [rax + 0x71]
lea r10, [0x180000000]
lea edi, [rax + 0x24]
lea r13d, [rax + 0x6f]
lea r15d, [rax + 0x64]
lea r12d, [rax + 0x60]
cmp esi, 9
ja case.default.0x18001d56d
mov eax, esi
mov ecx, dword [r10 + rax*4 + 0x1e6ac]
add rcx, r10
jmp rcx
mov rcx, qword [rsp + 0x60]
lea r8, [rsp + 0x78]
mov edx, 0x30
mov byte [rsp + 0x78], 0x7d
call fcn.180072e90
cmp eax, 1
je 0x18001d5a9
mov eax, 0x93
cmp eax, 0x93
je 0x18001e5c7
add eax, 0x16f8
cmp eax, 0x16f8
jbe 0x18001d592
mov rdx, qword [sym.imp.USER32.dll_DdeFreeDataHandle]
mov qword [rbp - 0x40], rdx
inc esi
cmp esi, 0xa2
jb 0x18001d526
mov eax, 0x3f
cmp eax, 0x3f
je 0x18001d6bb
add eax, 0xd89
cmp eax, 0xd89
jbe 0x18001d5c7
mov rdx, qword [rbp - 0x40]
mov ecx, 0x3c
add ecx, 0x2e
jmp 0x18001d480
mov dword [rbp + 0x741], 0x466564
mov word [rbp + 0x744], bx
jmp case.default.0x18001d56d
mov word [rbp + 0x752], di
jmp case.default.0x18001d56d
mov dword [rbp + 0x74e], 0x20656c64
jmp case.default.0x18001d56d
mov eax, 0x4465
mov word [rbp + 0x746], ax
jmp case.default.0x18001d56d
mov dword [rbp + 0x749], 0x61486174
jmp case.default.0x18001d56d
mov word [rbp + 0x745], r15w
jmp case.default.0x18001d56d
mov word [rbp + 0x748], r12w
jmp case.default.0x18001d56d
mov eax, 0x44
mov word [rbp + 0x740], ax
jmp case.default.0x18001d56d
mov eax, 0x6e
mov word [rbp + 0x74d], ax
jmp case.default.0x18001d56d
mov r8, rdx
mov word [rbp + 0x753], r13w
lea rdx, [rbp + 0x740]
lea rcx, [rbp + 0x7a0]
call fcn.180001170
lea r10, [0x180000000]
mov rdx, qword [rbp - 0x40]
inc esi
sub r14, 1
jne 0x18001d557
mov rdi, qword [rbp - 0x30]
xor ebx, ebx
mov r15d, dword [rsp + 0x58]
mov ecx, 0x3c
mov r12, qword [rbp]
add ecx, 0x2e
mov r13, qword [rsp + 0x70]
jmp 0x18001d480
mov rcx, qword [rsp + 0x60]
lea r8, [rbp - 0x80]
mov edx, 0x30
mov byte [rbp - 0x80], 0x5d
call fcn.180072e90
cmp eax, 1
je case.0x18001d51f.0
mov eax, 0xac
nop dword [rax]
cmp eax, 0xac
je 0x18001e5c7
dec eax
cmp eax, 0xab
ja 0x18001d6e0
mov ecx, 0x3c
mov rdx, qword [rbp - 0x40]
add ecx, 0x2e
jmp 0x18001d480
mov r12, qword [r12 + 0x10]
movzx r14d, byte [rsp + 0x32]
mov r10, qword [rbp - 0x28]
movzx r8d, byte [rsp + 0x30]
mov r9d, dword [rsp + 0x40]
mov r11d, dword [rsp + 0x50]
mov qword [rbp], r12
mov r15d, 0x46
nop
mov esi, 0xbb
nop word [rax + rax]
cmp esi, 0xb4
jbe 0x18001e493
lea eax, [rsi - 0xb5]
cmp eax, 6
ja case.default.0x18001d76c
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0x1e6d4]
add rcx, rdx
jmp rcx
mov rcx, rbx
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov r13, rax
mov qword [rsp + 0x70], rax
jmp 0x18001df3f
movsxd rax, dword [r12]
lea r10, [0x180000000]
cmp eax, 6
ja case.default.0x18001d51f
mov ecx, dword [r10 + rax*4 + 0x1e6f0]
add rcx, r10
jmp rcx
mov r13d, 0xc
nop dword [rax + rax]
lea eax, [r13 - 0xc]
cmp eax, 0x11
ja case.default.0x18001d7c8
mov ecx, dword [r10 + rax*4 + 0x1e70c]
add rcx, r10
jmp rcx
mov edx, dword [rbp - 0x48]
lea rcx, [rbp + 0x770]
mov dword [rsp + 0x20], r9d
xor r8d, r8d
lea r9, [rbp + 0x48]
call qword [sym.imp.SHLWAPI.dll_SHRegOpenUSKeyW]
mov dword [rsp + 0x50], eax
mov rax, qword [r12 + 0x20]
test rax, rax
je 0x18001d8ed
cmp dword [rax], 2
jne 0x18001dc94
cmp qword [r12 + 0x28], 0
je 0x18001d89d
mov rcx, qword [rsp + 0x60]
lea r8, [rbp - 0x78]
mov edx, 0x30
mov byte [rbp - 0x78], 0x3a
call fcn.180072e90
cmp eax, 1
je 0x18001dc94
mov ecx, 0x6c
mov eax, ecx
sub eax, 0x6c
je 0x18001d876
cmp eax, 1
jne 0x18001d87f
mov eax, edi
mov r15, qword [rsp + 0xcf0]
mov r13, qword [rsp + 0xce0]
mov rcx, qword [rbp + 0xba0]
xor rcx, rsp
call fcn.1800803f0
mov rbx, qword [rsp + 0xcf8]
add rsp, 0xcb0
pop r14
pop r12
pop rdi
pop rsi
pop rbp
ret
mov edi, 6
mov qword [rbp - 0x30], rdi
inc ecx
cmp ecx, 0x6e
jb 0x18001d832
movzx r8d, byte [rsp + 0x30]
lea r10, [0x180000000]
mov r9d, dword [rsp + 0x40]
jmp case.default.0x18001d7c8
mov esi, 0xc1
mov eax, esi
sub eax, 0xc1
je 0x18001d8b7
cmp eax, 0x2a
jne 0x18001d8cb
mov eax, 8
jmp 0x18001d840
mov edx, 0x55
lea rcx, [rsp + 0x60]
call fcn.180009b10
mov qword [rsp + 0x48], rbx
add esi, 0x2a
cmp esi, 0x115
jb 0x18001d8a2
movzx r8d, byte [rsp + 0x30]
lea r10, [0x180000000]
mov r9d, dword [rsp + 0x40]
jmp case.default.0x18001d7c8
mov r15d, 0x13
cmp r15d, 0x140
ja 0x18001d9de
je 0x18001d9cf
lea r10, [0x180000000]
cmp r15d, 0x94
ja 0x18001d986
je 0x18001d975
cmp r15d, 0x13
je 0x18001d95a
cmp r15d, 0x3e
je 0x18001d93f
cmp r15d, 0x69
jne case.0x18001da0b.369
mov eax, 0x70
mov word [rbp + 0x760], ax
jmp case.0x18001da0b.369
mov eax, 0x61
mov dword [rbp + 0x75c], 0x4d656c
mov word [rbp + 0x75f], ax
jmp case.0x18001da0b.369
mov eax, 0x69
mov dword [rbp + 0x758], 0x46794d
mov word [rbp + 0x75b], ax
jmp case.0x18001da0b.369
mov eax, 0x70
mov word [rbp + 0x761], ax
jmp case.0x18001da0b.369
mov eax, r15d
sub eax, 0xbf
je 0x18001d9be
sub eax, 0x2b
je 0x18001d9af
cmp eax, 0x2b
jne case.0x18001da0b.369
mov eax, 0x62
mov word [rbp + 0x766], ax
jmp case.0x18001da0b.369
mov dword [rbp + 0x763], 0x4f676e
jmp case.0x18001da0b.369
mov eax, 0x69
mov word [rbp + 0x762], ax
jmp case.0x18001da0b.369
mov dword [rbp + 0x767], 0x7463656a
jmp 0x18001dbeb
lea eax, [r15 - 0x16b]
lea r10, [0x180000000]
cmp eax, 0xd7
ja case.0x18001da0b.369
movzx eax, byte [r10 + rax + 0x1e770]
mov ecx, dword [r10 + rax*4 + 0x1e754]
add rcx, r10
jmp rcx
cmp qword [rbp - 0x18], 0
mov ecx, ebx
movzx eax, r14b
cmovne ecx, eax
movzx r14d, cl
mov byte [rsp + 0x32], cl
jmp case.0x18001da0b.369
mov r14b, 1
mov byte [rbp + 0x76b], 0
mov byte [rsp + 0x32], r14b
jmp case.0x18001da0b.369
test r14b, r14b
je case.0x18001da0b.369
mov r14d, 0x8e
nop dword [rax + rax]
mov eax, r14d
sub eax, 0x8e
je 0x18001daed
cmp eax, 1
jne 0x18001db10
mov rcx, qword [rbp - 8]
test rcx, rcx
jne 0x18001da84
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [rsp + 0x32], 0
jmp 0x18001db10
cmp byte [rsp + 0x32], 0
je 0x18001db10
mov esi, 0x7d
mov eax, esi
sub eax, 0x7b
je 0x18001dad0
sub eax, 1
je 0x18001daaf
cmp eax, 1
jne 0x18001dae4
mov qword [rbp + 0x38], rbx
mov qword [rbp + 0x30], rbx
jmp 0x18001dae4
lea rax, [rbp + 0x18]
mov dword [rbp + 0x18], ebx
lea r9, [rbp + 0x30]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x38]
mov edx, 4
call qword [sym.imp.dbghelp.dll_MiniDumpReadDumpStream]
jmp 0x18001dae0
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 8]
dec esi
cmp esi, 0x7a
ja 0x18001da94
jmp 0x18001db10
movsx rax, word [rbp - 0x38]
xor r9d, r9d
mov rcx, qword [rbp - 0x18]
xor r8d, r8d
mov edx, 0xf001f
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [rbp - 8], rax
inc r14d
cmp r14d, 0x90
jb 0x18001da50
movzx r14d, byte [rsp + 0x32]
jmp 0x18001dbeb
mov dword [rbp - 0x38], 0x100
jmp case.0x18001da0b.369
cmp qword [r12 + 0x28], 0
je 0x18001db86
mov rcx, qword [rsp + 0x60]
lea r8, [rbp - 0x70]
mov edx, 0x30
mov byte [rbp - 0x70], 0x3a
call fcn.180072e90
cmp eax, 1
je 0x18001dbeb
mov ecx, 0x12
mov eax, ecx
sub eax, 0x11
je case.0x18001e4cb.5
cmp eax, 1
jne 0x18001db7d
mov edi, 6
mov qword [rbp - 0x30], rdi
dec ecx
cmp ecx, 0x10
ja 0x18001db64
jmp 0x18001dbeb
mov esi, 0xbd
nop dword [rax + rax]
mov eax, esi
sub eax, 0xbc
je 0x18001d8b0
cmp eax, 1
jne 0x18001dbb4
lea edx, [rax + 0x54]
lea rcx, [rsp + 0x60]
call fcn.180009b10
mov qword [rsp + 0x48], rbx
dec esi
cmp esi, 0xbb
ja 0x18001db90
jmp 0x18001dbeb
movsx eax, word [rbp - 0x38]
lea rcx, [rbp + 0x758]
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x20], eax
lea r8d, [r9 + 4]
lea rcx, [rdx - 1]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov qword [rbp - 0x18], rax
lea r10, [0x180000000]
add r15d, 0x2b
cmp r15d, 0x26d
jb 0x18001d8f3
movzx r8d, byte [rsp + 0x30]
mov r9d, dword [rsp + 0x40]
jmp case.default.0x18001d7c8
mov dword [rbp + 0x77e], 0x520052
jmp case.default.0x18001d7c8
mov r9d, ebx
mov dword [rsp + 0x40], ebx
jmp case.default.0x18001d7c8
mov eax, 0x48
mov word [rbp + 0x770], ax
jmp case.default.0x18001d7c8
mov r8, qword [r12 + 8]
mov rax, 0xffffffffffffffff
mov dword [rbp - 0x48], 0xf003f
inc rax
cmp byte [r8 + rax], 0
jne 0x18001dc52
mov rcx, qword [rsp + 0x60]
lea r9, [rbp + 0x40]
mov edx, 0x29
mov qword [rbp + 0x40], rax
call fcn.18003bda0
cmp eax, 1
je 0x18001dc94
mov eax, 0xc3
nop dword [rax]
cmp eax, 0xc3
je 0x18001e5c7
inc eax
cmp eax, 0xc4
jb 0x18001dc80
movzx r8d, byte [rsp + 0x30]
lea r10, [0x180000000]
mov r9d, dword [rsp + 0x40]
jmp case.default.0x18001d7c8
movzx eax, r8b
test r11d, r11d
mov ecx, ebx
cmove ecx, eax
movzx r8d, cl
mov byte [rsp + 0x30], cl
jmp case.default.0x18001d7c8
mov word [rbp + 0x792], bx
jmp case.default.0x18001d7c8
mov dword [rbp + 0x776], 0x5f0059
jmp case.default.0x18001d7c8
mov dword [rbp + 0x782], 0x4e0045
jmp case.default.0x18001d7c8
mov rcx, qword [rsp + 0x60]
lea r8, [rbp - 0x68]
mov edx, 0x30
mov byte [rbp - 0x68], 0x22
call fcn.180072e90
cmp eax, 1
je 0x18001dc94
mov ecx, 0xc4
nop
mov eax, ecx
sub eax, 0xc4
je 0x18001dd24
cmp eax, 4
je case.0x18001e4cb.5
jmp 0x18001dd2d
mov edi, 6
mov qword [rbp - 0x30], rdi
add ecx, 4
cmp ecx, 0xcc
jb 0x18001dd10
movzx r8d, byte [rsp + 0x30]
lea r10, [0x180000000]
mov r9d, dword [rsp + 0x40]
jmp case.default.0x18001d7c8
mov rcx, qword [rsp + 0x60]
lea r8, [rbp - 0x60]
mov edx, 0x30
mov byte [rbp - 0x60], 0x22
call fcn.180072e90
cmp eax, 1
je 0x18001dc94
mov ecx, 0x72
mov eax, ecx
sub eax, 0x72
je 0x18001dd86
cmp eax, 1
je case.0x18001e4cb.5
jmp 0x18001dd8f
mov edi, 6
mov qword [rbp - 0x30], rdi
inc ecx
cmp ecx, 0x74
jb 0x18001dd74
movzx r8d, byte [rsp + 0x30]
lea r10, [0x180000000]
mov r9d, dword [rsp + 0x40]
jmp case.default.0x18001d7c8
mov dword [rbp + 0x772], 0x45004b
jmp case.default.0x18001d7c8
mov dword [rbp + 0x78e], 0x520045
jmp case.default.0x18001d7c8
mov dword [rbp + 0x786], 0x5f0054
mov dword [rbp + 0x78a], 0x530055
jmp case.default.0x18001d7c8
test r8b, r8b
je case.default.0x18001d7c8
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.SHLWAPI.dll_SHRegCloseUSKey]
movzx r8d, byte [rsp + 0x30]
lea r10, [0x180000000]
mov r9d, dword [rsp + 0x40]
jmp case.default.0x18001d7c8
mov dword [rbp + 0x77a], 0x550043
jmp case.default.0x18001d7c8
mov r8b, 1
mov byte [rsp + 0x30], r8b
mov r11d, dword [rsp + 0x50]
inc r13d
cmp r13d, 0x1e
jb 0x18001d7b0
mov ecx, 0x92
nop word [rax + rax]
mov eax, ecx
sub eax, 0x92
je 0x18001e3bf
cmp eax, 0x5f
je case.0x18001d7c8.29
add ecx, 0x5f
cmp ecx, 0x150
jb 0x18001de30
mov esi, 0x2b
cmp esi, 0x2b
je 0x18001deb3
cmp esi, 0x40
jne 0x18001dee4
cmp qword [r12 + 0x28], 0
mov rdx, qword [rbp - 0x40]
mov r13, qword [rsp + 0x70]
je 0x18001d469
mov eax, 3
nop
cmp eax, 3
je 0x18001df18
mov r10, qword [rbp - 0x28]
mov r15d, 0x46
movzx r8d, byte [rsp + 0x30]
mov r9d, dword [rsp + 0x40]
mov r11d, dword [rsp + 0x50]
mov r13, qword [rsp + 0x70]
cmp eax, 0x5f
je 0x18001d730
jmp 0x18001df21
mov rcx, qword [rsp + 0x60]
lea r8, [rbp - 0x58]
mov edx, 0x30
mov byte [rbp - 0x58], 0x7b
call fcn.180072e90
cmp eax, 1
je 0x18001dee4
mov eax, 0x2d
cmp eax, 0x2d
je 0x18001e5c7
dec eax
cmp eax, 0x2c
ja 0x18001ded4
add esi, 0x15
cmp esi, 0x55
jb 0x18001de56
mov r15d, 0x46
mov esi, r15d
nop dword [rax]
cmp esi, 0x46
je 0x18001df92
cmp esi, 0x54
je 0x18001df60
cmp esi, 0x62
je case.0x18001d76c.183
jmp 0x18001dfd9
mov r12, qword [r12 + 0x28]
mov qword [rbp], r12
add eax, 0x5c
cmp eax, 0xbb
jb 0x18001de80
mov r15d, 0x46
mov r13, qword [rsp + 0x70]
mov esi, 0xb7
mov r10, qword [rbp - 0x28]
movzx r14d, byte [rsp + 0x32]
dec esi
movzx r8d, byte [rsp + 0x30]
mov r9d, dword [rsp + 0x40]
mov r11d, dword [rsp + 0x50]
jmp 0x18001d740
cmp qword [r12 + 0x28], 0
mov rdx, qword [rbp - 0x40]
mov r13, qword [rsp + 0x70]
je 0x18001d469
mov eax, 0x1c
nop word [rax + rax]
cmp eax, 0x1c
je 0x18001e39d
inc eax
cmp eax, 0x1d
jb 0x18001df80
jmp 0x18001dfd9
mov rcx, qword [rsp + 0x60]
lea r8, [rbp - 0x50]
mov edx, 0x30
mov byte [rbp - 0x50], 0x5b
call fcn.180072e90
cmp eax, 1
je 0x18001dfd9
mov ecx, 0x60
mov eax, ecx
sub eax, 0x60
je 0x18001dfc5
cmp eax, 0x37
je case.0x18001e4cb.5
jmp 0x18001dfce
mov edi, 6
mov qword [rbp - 0x30], rdi
add ecx, 0x37
cmp ecx, 0xce
jb 0x18001dfb3
add esi, 0xe
cmp esi, 0x70
jb 0x18001df00
mov esi, 0xb0
nop word [rax + rax]
mov rdx, qword [rbp - 0x40]
mov eax, esi
mov r13, qword [rsp + 0x70]
sub eax, 0xae
je 0x18001d469
sub eax, 1
je 0x18001e01b
cmp eax, 1
jne 0x18001e08b
mov word [rbp + 0x720], 0x74
jmp 0x18001e08b
lea rcx, [rbp + 0x720]
dec rcx
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18001e025
mov eax, dword [0x1800b1920]
lea r9, [rbp + 0x50]
mov dword [rcx], eax
lea r8, [rbp + 0x720]
mov rcx, qword [rsp + 0x60]
mov edx, 0x29
mov qword [rbp + 0x50], 4
call fcn.18003bda0
cmp eax, 1
je 0x18001e08b
mov ecx, 0x83
mov eax, ecx
sub eax, 0x83
je 0x18001e077
cmp eax, 0x4c
je case.0x18001e4cb.5
jmp 0x18001e080
mov edi, 6
mov qword [rbp - 0x30], rdi
add ecx, 0x4c
cmp ecx, 0x11b
jb 0x18001e063
dec esi
cmp esi, 0xad
ja 0x18001dff0
mov esi, 0x90
nop
mov eax, esi
sub eax, 0x8c
je 0x18001e1ae
sub eax, 1
je 0x18001e41a
sub eax, 1
je 0x18001e115
sub eax, 1
je 0x18001e0ff
cmp eax, 1
jne 0x18001e169
movzx eax, word [0x1800b1928]
lea rdx, [0x1800b0e8c]
mov word [rbp + 0x710], ax
lea rcx, [rbp + 0x710]
movzx eax, byte [0x1800b192a]
mov r8d, 1
mov byte [rbp + 0x712], al
call fcn.180089030
jmp 0x18001e169
lea rdx, [0x1800b1924]
lea rcx, [rbp + 0x710]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
jmp 0x18001e169
mov rcx, qword [rsp + 0x60]
lea r9, [rbp + 0x58]
lea r8, [rbp + 0x710]
mov qword [rbp + 0x58], 5
mov edx, 0x29
call fcn.18003bda0
cmp eax, 1
je 0x18001e169
mov ecx, 0xbc
mov eax, ecx
sub eax, 0xbc
je 0x18001e155
cmp eax, 0x36
je case.0x18001e4cb.5
jmp 0x18001e15e
mov edi, 6
mov qword [rbp - 0x30], rdi
add ecx, 0x36
cmp ecx, 0x128
jb 0x18001e141
dec esi
cmp esi, 0x8b
ja 0x18001e0a0
mov esi, 0x6a
nop dword [rax]
cmp esi, 0x142
jae 0x18001e49e
mov eax, esi
sub eax, 0x6a
je 0x18001e290
sub eax, 0x48
je 0x18001e42a
cmp eax, 0x48
je case.0x18001d76c.183
add esi, 0x48
jmp 0x18001e180
mov esi, ebx
mov r14d, 9
nop word [rax + rax]
cmp esi, 0x98
ja case.0x18001e1e7.9
lea rdx, [0x180000000]
mov eax, esi
movzx eax, byte [rdx + rax + 0x1e870]
mov ecx, dword [rdx + rax*4 + 0x1e848]
add rcx, rdx
jmp rcx
mov word [rbp + 0x728], r15w
jmp case.0x18001e1e7.9
mov eax, 0x7845
mov word [rbp + 0x734], ax
jmp case.0x18001e1e7.9
mov eax, 0x20
mov word [rbp + 0x736], ax
jmp case.0x18001e1e7.9
mov eax, 0x7025
mov byte [rbp + 0x739], 0
mov word [rbp + 0x737], ax
jmp case.0x18001e1e7.9
mov eax, 0x65
mov word [rbp + 0x733], ax
jmp case.0x18001e1e7.9
mov dword [rbp + 0x72f], 0x72756f
jmp case.0x18001e1e7.9
mov eax, 0x7365
mov dword [rbp + 0x729], 0x52646e69
mov word [rbp + 0x72d], ax
jmp case.0x18001e1e7.9
mov eax, 0x63
mov word [rbp + 0x732], ax
jmp case.0x18001e1e7.9
mov r8, qword [rbp + 0x20]
lea rdx, [rbp + 0x728]
lea rcx, [rbp + 0x9a0]
call fcn.180001170
add esi, 0x13
sub r14, 1
jne 0x18001e1c0
jmp case.0x18001d76c.183
movzx eax, word [0x1800b192c]
lea rdx, [0x1800b1930]
mov word [rbp + 0x718], ax
lea rcx, [rbp + 0x718]
movzx eax, byte [0x1800b192e]
mov byte [rbp + 0x71a], al
call qword [sym.imp.KERNEL32.dll_lstrcatA]
add esi, 0x48
jmp 0x18001e180
test r10, r10
je 0x18001e2e0
mov rdx, r10
mov rcx, r13
call qword [sym.imp.USER32.dll_ReleaseDC]
mov r10, rbx
mov qword [rbp - 0x28], rbx
nop
mov word [rbp - 0x10], bx
jmp case.default.0x18001d76c
mov dword [rsp + 0x38], ebx
mov qword [rbp + 0x60], rbx
jmp case.default.0x18001d76c
cmp qword [r12 + 0x18], 0
je 0x18001e338
cmp r12, qword [rbp + 0x28]
je 0x18001e338
mov rcx, qword [rsp + 0x60]
lea r8, [rsp + 0x58]
mov edx, 0x30
mov byte [rsp + 0x58], 0x2c
call fcn.180072e90
cmp eax, 1
je 0x18001e338
mov eax, 0x3f
cmp eax, 0x3f
je 0x18001e5c7
add eax, 0x40
cmp eax, 0x7f
jb 0x18001e327
mov rcx, r13
call qword [sym.imp.USER32.dll_GetDC]
mov r10, rax
mov qword [rbp - 0x28], rax
jmp case.default.0x18001d76c
mov r8d, dword [rsp + 0x38]
lea r9, [rbp + 0x60]
lea rdx, [rbp - 0x10]
mov rcx, r10
call qword [sym.imp.GDI32.dll_GetTextExtentPointI]
cmp qword [r12 + 0x28], 0
je 0x18001d460
mov ecx, IUnknown_AtomicRelease
mov eax, ecx
sub eax, 0xa5
je 0x18001e384
cmp eax, 0x2e
je 0x18001e3a6
jmp 0x18001e38d
mov r12, qword [r12 + 0x28]
mov qword [rbp], r12
add ecx, 0x2e
cmp ecx, 0x101
jb 0x18001e374
jmp 0x18001df3f
mov r12, qword [r12 + 0x28]
mov qword [rbp], r12
mov r10, qword [rbp - 0x28]
movzx r8d, byte [rsp + 0x30]
mov r9d, dword [rsp + 0x40]
mov r11d, dword [rsp + 0x50]
jmp 0x18001d730
mov r8, qword [r12 + 8]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [r8 + rax], 0
jne 0x18001e3d0
mov rcx, qword [rsp + 0x60]
lea r9, [rbp + 0x68]
mov edx, 0x29
mov qword [rbp + 0x68], rax
call fcn.18003bda0
cmp eax, 1
je 0x18001d460
mov eax, IUnknown_AtomicRelease
nop
cmp eax, 0xa5
je 0x18001e5c7
add eax, 0x5a
cmp eax, 0xff
jb 0x18001e400
jmp 0x18001d460
mov r8, qword [sym.imp.KERNEL32.dll_FindResourceExW]
mov qword [rbp + 0x20], r8
jmp 0x18001d460
mov rcx, qword [rsp + 0x60]
lea r9, [rbp + 0x70]
lea r8, [rbp + 0x718]
mov qword [rbp + 0x70], 4
mov edx, 0x29
call fcn.18003bda0
cmp eax, 1
je 0x18001d460
mov ecx, 0x36
nop word [rax + rax]
mov eax, ecx
sub eax, 0x35
je case.0x18001e4cb.5
cmp eax, 1
jne 0x18001e479
mov edi, 6
mov qword [rbp - 0x30], rdi
dec ecx
cmp ecx, 0x34
ja 0x18001e460
jmp 0x18001d460
mov r12, qword [r12 + 0x20]
mov qword [rbp], r12
jmp 0x18001d469
mov r15d, 0x25
jmp 0x18001d405
lea r10, [0x180000000]
mov r15d, 0x23
mov dword [rbp - 0x20], ebx
mov dword [rsp + 0x58], r15d
mov esi, ebx
cmp esi, 5
ja case.default.0x18001e4cb
mov eax, esi
mov ecx, dword [r10 + rax*4 + 0x1e90c]
add rcx, r10
jmp rcx
mov byte [rsp + 0x31], 1
jmp case.default.0x18001e4cb
movzx eax, byte [rsp + 0x31]
mov ecx, ebx
cmp dword [rsp + 0x68], 0
cmovne ecx, eax
mov byte [rsp + 0x31], cl
jmp case.default.0x18001e4cb
cmp byte [rsp + 0x31], 0
je 0x18001e573
mov rsi, qword [rbp + 0x10]
mov edi, 0x29
mov r15, qword [rbp + 8]
mov eax, edi
sub eax, 0x26
je 0x18001e557
sub eax, 1
je 0x18001e534
sub eax, 1
je 0x18001e51e
cmp eax, 1
jne 0x18001e560
mov r15, rbx
jmp 0x18001e560
xor edx, edx
lea rcx, [rbp + 0x80]
mov r8d, 0x690
call fcn.180082760
jmp 0x18001e560
lea r8, [rbp + 0x80]
mov dword [rbp + 0x80], 0x690
mov rdx, r15
mov rcx, rsi
call qword [sym.imp.dbghelp.dll_SymGetModuleInfo64]
mov dword [rsp + 0x68], eax
jmp 0x18001e560
mov rcx, rsi
call qword [sym.imp.dbghelp.dll_SymCleanup]
dec edi
cmp edi, 0x25
ja 0x18001e503
mov esi, dword [rbp - 0x20]
mov qword [rbp + 8], r15
mov r15d, dword [rsp + 0x58]
mov edi, 0xa
mov qword [rbp - 0x30], rdi
jmp case.default.0x18001e4cb
mov edx, 0x55
mov qword [rbp + 0x10], 0xffffffffffffffff
lea rcx, [rsp + 0x60]
call fcn.180009b10
jmp case.default.0x18001e4cb
mov rcx, qword [rbp + 0x10]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov dword [rsp + 0x68], eax
inc esi
lea r10, [0x180000000]
mov dword [rbp - 0x20], esi
lea eax, [rsi + 0x53]
cmp eax, 0x59
jb 0x18001e4b5
jmp 0x18001d405
mov eax, 6
jmp 0x18001d840
mov rsi, qword [rsp + 0x48]
mov r14d, 0x33
cmp r14d, 0x2f
jbe case.0x18001e4cb.5
mov eax, r14d
sub eax, 0x24
je 0x18001e649
sub eax, 1
je 0x18001e63e
sub eax, 0x1f
je case.0x18001e4cb.5
cmp eax, 1
jne 0x18001e688
mov eax, dword [rsi]
lea r9, [rsp + 0x68]
mov dword [rsp + 0x68], eax
xor r8d, r8d
mov rax, qword [rbp + 0x28]
xor edx, edx
mov ecx, 0xb5
mov eax, dword [rax]
mov dword [rbp - 0x48], eax
lea rax, [rbp - 0x48]
mov qword [rsp + 0x20], rax
call fcn.180024200
mov rdi, rax
dec r14d
jmp 0x18001e5dc
mov rsi, qword [rsp + 0x48]
mov r14d, 0x25
dec r14d
jmp 0x18001e5dc
mov ebx, 0x80
nop
mov eax, ebx
sub eax, 0x80
je 0x18001e668
cmp eax, 4
jne 0x18001e67d
mov eax, 1
jmp 0x18001d840
mov rcx, qword [rsp + 0x60]
xor r8d, r8d
mov edx, 0x9e
call fcn.18003d6e0
mov qword [rsi], rax
add ebx, 4
cmp ebx, 0x88
jb 0x18001e650
dec r14d
jmp 0x18001e5dc