Function at 0x1800a4f80
Capabilities:
Check for software breakpoints
Check http status code
Parse pe header

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x47d8]
mov eax, 0x48d8
call fcn.1800c9ba0
sub rsp, rax
mov rax, qword [0x180143ae0]
xor rax, rsp
mov qword [rbp + 0x47c0], rax
mov r13d, dword [rbp + 0x4850]
mov rsi, r9
mov r15, qword [rbp + 0x4840]
mov r12, rdx
mov r10, qword [rbp + 0x4848]
mov r14, rcx
mov qword [rsp + 0x50], r9
lea eax, [r13 + 0x10]
mov qword [rsp + 0x70], r8
mov qword [rbp + 0x10], rdx
mov qword [rbp - 0x58], rcx
mov qword [rsp + 0x78], r15
mov qword [rsp + 0x58], r10
mov dword [rsp + 0x68], eax
cmp r13d, eax
jae case.0x1800a5041.292
mov ebx, dword [rsp + 0x68]
mov qword [rsp + 0x60], rbx
xor edx, edx
lea eax, [r13 - 0x11b]
lea rdi, str.localmem_sum_lid___sum__localmem_sum_lid__
mov r11d, 0xb7
lea r9, [0x180000000]
cmp eax, 0x25
ja case.0x1800a5041.298
movzx eax, byte [r9 + rax + 0xab21c]
mov ecx, dword [r9 + rax*4 + 0xab1dc]
add rcx, r9
jmp rcx
cmp dword [r8], 0
mov r12d, edx
jle 0x1800a5634
mov rbx, qword [rbp - 0x58]
nop dword [rax]
nop dword [rax + rax]
mov r14d, 0xc5
nop word [rax + rax]
mov eax, r14d
sub eax, 0xc2
je 0x1800a55e7
sub eax, 1
je 0x1800a53be
sub eax, 1
je 0x1800a50ac
cmp eax, 1
jne case.0x1800a50e3.3
mov ecx, dword [r15]
imul ecx, dword [rsi]
imul ecx, r12d
add rcx, rbx
mov qword [rsp + 0x40], rcx
jmp case.0x1800a50e3.3
mov r15d, dword [rsi]
imul r15d, dword [r10]
mov rax, qword [rsp + 0x78]
mov eax, dword [rax]
imul r15d, r12d
lea edx, [rax*8 - 0xa]
add edx, dword [r10]
add r15, qword [rbp - 0x60]
cmp edx, 0x19
ja case.0x1800a50e3.3
movsxd rax, edx
mov ecx, dword [r9 + rax*4 + 0xab244]
add rcx, r9
jmp rcx
mov edx, 0x89
nop word [rax + rax]
mov eax, edx
sub eax, 0x89
je 0x1800a5104
cmp eax, 1
je 0x1800a53be
jmp 0x1800a512d
mov ecx, dword [rsi]
sub ecx, 1
js 0x1800a512d
mov r8, qword [rsp + 0x40]
movzx eax, byte [r8]
inc r8
mov byte [r15], al
mov byte [r15 + 1], 0xff
add r15, 2
sub ecx, 1
jns 0x1800a5110
mov qword [rsp + 0x40], r8
inc edx
cmp edx, 0x8b
jb 0x1800a50f0
mov edx, 0x109
nop dword [rax]
mov eax, edx
sub eax, 0x108
je 0x1800a53be
cmp eax, 1
jne 0x1800a5180
mov ecx, dword [rsi]
sub ecx, eax
js 0x1800a5180
mov r8, qword [rsp + 0x40]
nop dword [rax]
movzx eax, byte [r8]
inc r8
mov byte [r15 + 2], al
mov byte [r15 + 1], al
mov byte [r15], al
add r15, 3
sub ecx, 1
jns 0x1800a5160
mov qword [rsp + 0x40], r8
dec edx
cmp edx, 0x107
ja 0x1800a5140
mov edx, 0xa6
nop
mov eax, edx
sub eax, 0xa5
je 0x1800a53be
cmp eax, 1
jne 0x1800a51d5
mov ecx, dword [rsi]
sub ecx, eax
js 0x1800a51d5
mov r8, qword [rsp + 0x40]
nop dword [rax]
movzx eax, byte [r8]
inc r8
mov byte [r15 + 2], al
mov byte [r15 + 1], al
mov byte [r15], al
mov byte [r15 + 3], 0xff
add r15, 4
sub ecx, 1
jns 0x1800a51b0
mov qword [rsp + 0x40], r8
dec edx
cmp edx, 0xa4
ja 0x1800a5190
mov edx, 0x119
nop dword [rax]
nop dword [rax + rax]
mov eax, edx
sub eax, reloc.SHLWAPI.dll_SHRegGetIntW
je 0x1800a53be
cmp eax, 1
jne 0x1800a5228
mov ecx, dword [rsi]
sub ecx, eax
js 0x1800a5228
mov r8, qword [rsp + 0x40]
nop dword [rax]
movzx eax, byte [r8]
add r8, 2
mov byte [r15], al
inc r15
sub ecx, 1
jns 0x1800a5210
mov qword [rsp + 0x40], r8
dec edx
cmp edx, 0x117
ja 0x1800a51f0
mov eax, 0x127
nop word [rax + rax]
cmp eax, 0x127
je 0x1800a5387
add eax, 0x297c
cmp eax, 0x297c
jbe 0x1800a5240
mov eax, 0x63
nop dword [rax]
cmp eax, 0x63
je 0x1800a53c9
add eax, 0x27d5
cmp eax, 0x27d5
jbe 0x1800a5260
mov eax, 0x18
nop word [rax + rax]
cmp eax, 0x18
je 0x1800a5411
add eax, 0x840
cmp eax, 0x840
jbe 0x1800a5280
mov r14, qword [rsp + 0x50]
mov esi, 0xe9
nop
mov eax, esi
sub eax, 0xe8
je 0x1800a53be
cmp eax, 1
jne 0x1800a5306
mov edi, dword [r14]
sub edi, eax
js 0x1800a5306
mov r14, qword [rsp + 0x40]
nop
movzx eax, byte [r14 + 2]
lea r9, [rbp - 0x50]
mov dword [rbp - 0x40], eax
lea r8, [rbp - 0x48]
movzx eax, byte [r14 + 1]
lea rdx, [rbp - 0x40]
mov dword [rbp - 0x48], eax
mov ecx, 0x77
movzx eax, byte [r14]
mov dword [rbp - 0x50], eax
call fcn.1800421a0
mov byte [r15], al
add r14, 3
inc r15
sub edi, 1
jns 0x1800a52c0
mov qword [rsp + 0x40], r14
mov r14, qword [rsp + 0x50]
dec esi
cmp esi, 0xe7
ja 0x1800a52a0
mov rsi, qword [rsp + 0x50]
mov edi, dword [rsi]
sub edi, 1
js 0x1800a53be
mov r8, qword [rsp + 0x40]
nop word [rax + rax]
movzx eax, byte [r8 + 2]
lea r9, [rbp - 0x38]
mov dword [rbp - 0x28], eax
lea rdx, [rbp - 0x28]
movzx eax, byte [r8 + 1]
mov ecx, 0x77
mov dword [rbp - 0x30], eax
movzx eax, byte [r8]
lea r8, [rbp - 0x30]
mov dword [rbp - 0x38], eax
call fcn.1800421a0
mov r8, qword [rsp + 0x40]
mov byte [r15], al
add r8, 3
mov byte [r15 + 1], 0xff
lea r15, [r15 + 2]
sub edi, 1
mov qword [rsp + 0x40], r8
jns 0x1800a5330
mov r14d, 0xc3
jmp case.0x1800a50e3.3
mov edx, dword [rsi]
sub edx, 1
js 0x1800a53be
mov r8, qword [rsp + 0x40]
lea rcx, [r15 + 1]
nop word [rax + rax]
movzx eax, byte [r8]
add r8, 2
mov byte [rcx + 1], al
sub edx, 1
mov byte [rcx], al
mov byte [rcx - 1], al
lea rcx, [rcx + 3]
jns 0x1800a53a0
mov qword [rsp + 0x40], r8
mov r14d, 0xc3
jmp case.0x1800a50e3.3
mov edx, dword [rsi]
sub edx, 1
js 0x1800a53be
mov r8, qword [rsp + 0x40]
lea rcx, [r15 + 1]
nop dword [rax]
movzx eax, byte [r8]
mov byte [rcx + 1], al
mov byte [rcx], al
mov byte [rcx - 1], al
lea rcx, [rcx + 4]
movzx eax, byte [r8 + 1]
add r8, 2
sub edx, 1
mov byte [rcx - 2], al
jns 0x1800a53e0
mov qword [rsp + 0x40], r8
mov r14d, 0xc3
jmp case.0x1800a50e3.3
mov edx, dword [rsi]
sub edx, 1
js 0x1800a53be
mov r8, qword [rsp + 0x40]
lea rcx, [r15 + 2]
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r8]
mov byte [rcx - 2], al
lea rcx, [rcx + 4]
movzx eax, byte [r8 + 1]
mov byte [rcx - 5], al
movzx eax, byte [r8 + 2]
add r8, 3
sub edx, 1
mov byte [rcx - 4], al
mov byte [rcx - 3], 0xff
jns 0x1800a5430
mov qword [rsp + 0x40], r8
mov r14d, 0xc3
jmp case.0x1800a50e3.3
mov r8, qword [rsp + 0x40]
mov esi, 0x3f
mov qword [rsp + 0x40], r8
mov eax, esi
sub eax, 0x3f
je 0x1800a5489
cmp eax, 1
je 0x1800a53be
jmp 0x1800a54e6
mov rax, qword [rsp + 0x50]
mov edi, dword [rax]
sub edi, 1
js 0x1800a54e6
nop word [rax + rax]
movzx eax, byte [r8 + 2]
lea r9, [rbp - 0x20]
mov dword [rbp - 0x10], eax
lea rdx, [rbp - 0x10]
movzx eax, byte [r8 + 1]
mov ecx, 0x77
mov dword [rbp - 0x18], eax
movzx eax, byte [r8]
lea r8, [rbp - 0x18]
mov dword [rbp - 0x20], eax
call fcn.1800421a0
mov r8, qword [rsp + 0x40]
add r8, 4
mov byte [r15], al
inc r15
mov qword [rsp + 0x40], r8
sub edi, 1
jns 0x1800a54a0
inc esi
cmp esi, 0x41
jb 0x1800a5477
mov esi, 0x119
mov eax, esi
sub eax, 0x119
je 0x1800a5506
cmp eax, 1
je 0x1800a53be
jmp 0x1800a556c
mov rax, qword [rsp + 0x50]
mov edi, dword [rax]
sub edi, 1
js 0x1800a556c
mov rcx, qword [rsp + 0x40]
nop word [rax + rax]
movzx eax, byte [rcx + 2]
lea r9, [rbp - 8]
mov dword [rbp + 8], eax
lea r8, [rbp]
movzx eax, byte [rcx + 1]
lea rdx, [rbp + 8]
mov dword [rbp], eax
movzx eax, byte [rcx]
mov ecx, 0x77
mov dword [rbp - 8], eax
call fcn.1800421a0
mov rcx, qword [rsp + 0x40]
mov byte [r15], al
movzx eax, byte [rcx + 3]
add rcx, 4
mov byte [r15 + 1], al
add r15, 2
sub edi, 1
mov qword [rsp + 0x40], rcx
jns 0x1800a5520
inc esi
cmp esi, 0x11b
jb 0x1800a54f2
mov rsi, qword [rsp + 0x50]
mov edx, 0xa1
nop dword [rax]
nop dword [rax + rax]
mov eax, edx
sub eax, 0xa0
je 0x1800a53be
cmp eax, 1
jne 0x1800a55db
mov ecx, dword [rsi]
sub ecx, eax
js 0x1800a55db
mov r8, qword [rsp + 0x40]
nop dword [rax]
movzx eax, byte [r8]
mov byte [r15], al
movzx eax, byte [r8 + 1]
mov byte [r15 + 1], al
movzx eax, byte [r8 + 2]
add r8, 4
mov byte [r15 + 2], al
add r15, 3
sub ecx, 1
jns 0x1800a55b0
mov qword [rsp + 0x40], r8
dec edx
cmp edx, 0x9f
ja 0x1800a5590
jmp case.0x1800a50e3.3
mov r13d, 0x13e
mov rsi, qword [rsp + 0x50]
lea r9, [0x180000000]
mov r15, qword [rsp + 0x78]
dec r14d
mov r10, qword [rsp + 0x58]
cmp r14d, 0xc1
ja 0x1800a5070
mov r8, qword [rsp + 0x70]
lea r9, [0x180000000]
inc r12d
cmp r12d, dword [r8]
jl 0x1800a5060
mov rbx, qword [rsp + 0x60]
mov r14, qword [rbp - 0x58]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r12, qword [rbp + 0x10]
jmp case.0x1800a5041.298
mov rax, qword [rbp - 0x60]
mov qword [rsp + 0x48], rax
jmp case.0x1800a5041.298
mov ebx, 1
mov qword [0x180194fe0], rdi
mov qword [rsp + 0x60], rbx
jmp case.0x1800a5041.298
cmp qword [rbp - 0x60], 0
jne case.0x1800a5041.298
mov edi, 0xd0
nop word [rax + rax]
mov eax, edi
sub eax, 0xce
je case.0x1800a5041.292
sub eax, 1
je 0x1800a56a4
cmp eax, 1
jne 0x1800a56d1
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor edx, edx
jmp 0x1800a56d1
mov qword [rsp + 0x30], rdx
lea rcx, str.outofmem
mov qword [rsp + 0x28], rdx
mov r9d, 0x111
mov qword [rsp + 0x20], rdx
xor r8d, r8d
xor edx, edx
call fcn.180070ab0
xor edx, edx
mov qword [rsp + 0x48], rdx
dec edi
cmp edi, 0xcd
ja 0x1800a5680
jmp case.0x1800a5041.298
mov eax, dword [r15]
cmp dword [r10], eax
jne case.0x1800a5041.298
mov rax, r14
jmp 0x1800a571a
test rsi, rsi
jne case.0x1800a5041.298
mov edi, 0x59
nop
cmp edi, 0x59
je 0x1800a573d
cmp edi, 0x3d89
jne 0x1800a5761
mov dword [rsp + 0x48], 0xffffffff
mov rax, qword [rsp + 0x48]
mov rcx, qword [rbp + 0x47c0]
xor rcx, rsp
call fcn.1800c9c10
add rsp, 0x48d8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rax, qword [0x180194fe0]
lea r9, str.icudt51l_ibm_856_P100_1995.cnv
mov edx, 0x61
mov qword [rsp + 0x20], rax
mov rcx, r12
lea r8d, [rdx - 0x60]
call fcn.1800c8a10
add edi, 0x3d30
cmp edi, 0x7a60
jbe 0x1800a5700
jmp case.0x1800a5041.298
test r15, r15
jne 0x1800a57cb
mov edi, 0xd7
nop
mov eax, edi
sub eax, 0xd7
je 0x1800a5790
cmp eax, 1
je case.0x1800a5041.292
jmp 0x1800a57bc
mov rax, qword [0x180194fe0]
lea r9, str.ROI_Generation_Algorithm
mov edx, 0x61
mov qword [rsp + 0x20], rax
mov rcx, r12
lea r8d, [rdx - 0x60]
call fcn.1800c8a10
mov dword [rsp + 0x48], 0xffffffff
inc edi
cmp edi, 0xd9
jb 0x1800a5780
mov r10, qword [rsp + 0x58]
cmp qword [r10], 0x7fffffff
jbe case.0x1800a5041.298
mov edi, 0x6f
nop dword [rax]
mov eax, edi
sub eax, 0x6d
je case.0x1800a5041.292
sub eax, 1
je 0x1800a581b
cmp eax, 1
jne 0x1800a5823
mov rax, qword [0x180194fe0]
lea r9, str.0http:__www.microsoft.com_pki_mscorp_mswww_5_.crt0
mov edx, 0x61
mov qword [rsp + 0x20], rax
mov rcx, r12
lea r8d, [rdx - 0x5d]
call fcn.1800c8a10
jmp 0x1800a5823
mov dword [rsp + 0x48], 0xffffffff
dec edi
cmp edi, 0x6c
ja 0x1800a57e0
jmp case.0x1800a5041.298
mov dword [rsp + 0x48], 1
jmp case.0x1800a5041.298
mov eax, dword [r8]
lea r9, [rbp + 0x18]
imul eax, dword [r10]
xor r8d, r8d
mov qword [rsp + 0x28], rdx
xor ecx, ecx
mov qword [rsp + 0x20], rdx
lea edx, [r8 + 0x67]
imul eax, dword [rsi]
mov qword [rbp + 0x18], rax
call fcn.1800691c0
mov qword [rbp - 0x60], rax
jmp case.0x1800a5041.298
mov rax, qword [r10]
cmp qword [rsi], rax
jb 0x1800a58e7
mov edi, 0xd2
nop dword [rax]
cmp edi, 0xd2
je 0x1800a5896
cmp edi, 0x25bc
je case.0x1800a5041.292
jmp 0x1800a58c2
mov rax, qword [0x180194fe0]
lea r9, str.SplitRed_too_many_blocks:
mov edx, 0x61
mov qword [rsp + 0x20], rax
mov rcx, r12
lea r8d, [rdx - 0x5c]
call fcn.1800c8a10
mov dword [rsp + 0x48], 0xffffffff
add edi, 0x24ea
cmp edi, 0x49d4
jbe 0x1800a5880
mov r10, qword [rsp + 0x58]
lea r9, [0x180000000]
mov r8, qword [rsp + 0x70]
mov r11d, 0xb7
mov ecx, dword [r8]
cmp ecx, 0x556a
jg 0x1800a7ae5
je 0x1800aa4d8
cmp ecx, 0x4e2
jg 0x1800a5d16
je 0x1800a59f1
sub ecx, 0x36a
je 0x1800aa992
sub ecx, 0x3a
je 0x1800ab060
sub ecx, 4
je 0x1800a5959
sub ecx, 0xd
je 0x1800a5973
cmp ecx, 1
je 0x1800a59d7
mov edi, 1
nop dword [rax + rax]
mov eax, edi
sub eax, 1
je 0x1800ab0a1
cmp eax, 4
je 0x1800a570d
jmp 0x1800ab0cc
mov eax, r11d
nop dword [rax]
cmp eax, r11d
je 0x1800a5a7e
add eax, 0x56
cmp eax, 0x10d
jb 0x1800a5960
mov edi, 0x30
cmp edi, 0x30
je 0x1800a598b
cmp edi, 0x9f0
je case.0x1800a5041.289
jmp 0x1800a59c2
mov rax, qword [r10]
lea rdx, [rbp - 0x80]
mov qword [rbp + 0x20], rax
mov r9d, 0x6c
mov eax, dword [r14]
mov r8, r12
mov dword [rbp - 0x80], eax
mov rcx, r15
lea rax, [rbp + 0x20]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
call fcn.1800815d0
mov ebx, eax
mov qword [rsp + 0x60], rbx
add edi, 0x9c0
cmp edi, 0x1380
ja 0x1800a59d7
mov r10, qword [rsp + 0x58]
jmp 0x1800a5978
mov eax, 0x10b
nop dword [rax]
cmp eax, 0x10b
je 0x1800a5a2e
add eax, 0x72
cmp eax, 0x17d
jb 0x1800a59e0
mov r8d, 0x9c
lea r9, [0x180000000]
nop
mov eax, r8d
sub eax, 0x9b
je case.0x1800a5041.289
cmp eax, 1
jne 0x1800a5cde
mov ecx, dword [r14]
cmp ecx, 0x80
jae 0x1800a5abf
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a5cdb
mov rax, qword [rsp + 0x58]
lea rdx, [rbp + 0x28]
mov qword [rsp + 0x38], r15
mov r9, r12
mov qword [rsp + 0x30], rsi
xor r8d, r8d
xor ecx, ecx
mov rax, qword [rax]
mov qword [rbp + 0x28], rax
mov eax, dword [r14]
mov dword [rbp - 0x78], eax
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], IUnknown_GetWindow
call fcn.180049e70
mov ebx, eax
mov qword [rsp + 0x60], rbx
mov r13d, 0x12f
jmp case.0x1800a5041.298
mov rax, qword [r10]
lea r8, [rsp + 0x60]
mov qword [rsp + 0x60], rax
lea rdx, [rbp - 0x70]
mov eax, dword [r14]
mov r9, r12
mov qword [rsp + 0x28], rsi
mov ecx, 0xc3
mov dword [rbp - 0x70], eax
mov qword [rsp + 0x20], r15
call fcn.180013920
mov rbx, rax
mov qword [rsp + 0x60], rax
mov r13d, 0x12f
jmp case.0x1800a5041.298
lea eax, [rcx - 0xa0]
cmp eax, 0x7f
ja 0x1800a5ae9
add dword [r14], 0xffffff60
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcd180]
mov byte [r15 + rcx], al
jmp 0x1800a5cdb
lea eax, [rcx - 0x138]
cmp eax, 0x47
ja 0x1800a5b34
mov edx, 6
nop dword [rax]
mov eax, edx
sub eax, 6
je 0x1800a5b21
cmp eax, 1
jne 0x1800a5b28
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcd200]
mov byte [r15 + rcx], al
jmp 0x1800a5b28
add dword [r14], 0xfffffec8
inc edx
cmp edx, 8
jb 0x1800a5b00
jmp 0x1800a5cdb
lea eax, [rcx - 0x2d8]
cmp eax, 7
ja 0x1800a5b5e
add dword [r14], 0xfffffd28
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcc8f8]
mov byte [r15 + rcx], al
jmp 0x1800a5cdb
lea eax, [rcx - 0x2010]
cmp eax, 0x17
ja 0x1800a5bac
mov edx, 0x25
nop
cmp edx, 0x25
je 0x1800a5b92
cmp edx, 0x940
jne 0x1800a5b99
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcd248]
mov byte [r15 + rcx], al
jmp 0x1800a5b99
add dword [r14], 0xffffdff0
add edx, 0x91b
cmp edx, 0x1236
jbe 0x1800a5b70
jmp 0x1800a5cdb
lea eax, [rcx - 0x2030]
cmp eax, 0xf
ja 0x1800a5bf4
mov edx, 5
nop dword [rax]
mov eax, edx
sub eax, 5
je 0x1800a5be1
cmp eax, 1
jne 0x1800a5be8
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcd260]
mov byte [r15 + rcx], al
jmp 0x1800a5be8
add dword [r14], 0xffffdfd0
inc edx
cmp edx, 7
jb 0x1800a5bc0
jmp 0x1800a5cdb
mov edx, 0x58
nop dword [rax]
mov eax, edx
sub eax, 0x58
je 0x1800a5c15
cmp eax, 0x7c
je 0x1800a5cc7
jmp 0x1800a5ccc
mov ecx, dword [r14]
sub ecx, 0x2c7
je 0x1800a5c2f
sub ecx, 0x1de5
je 0x1800a5c57
cmp ecx, 0x76
je 0x1800a5c88
jmp 0x1800a5ca1
mov ecx, 0x1d
cmp ecx, 0x1d
je 0x1800a5c44
cmp ecx, 0x5f
je 0x1800a5cc7
jmp 0x1800a5c4c
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa1
add ecx, 0x42
cmp ecx, 0xa1
jb 0x1800a5c34
mov ecx, 0xc0
nop dword [rax]
cmp ecx, 0xc0
je 0x1800a5c72
cmp ecx, 0x14b
je 0x1800a5cc7
jmp 0x1800a5c7a
mov rax, qword [rsi]
mov byte [r15 + rax], 0x80
add ecx, 0x8b
cmp ecx, 0x1d6
jb 0x1800a5c60
mov eax, 0xe9
nop dword [rax]
cmp eax, 0xe9
je 0x1800a5cbf
add eax, 0x73
cmp eax, 0x15c
jb 0x1800a5c90
mov eax, 0x35
cmp eax, 0x35
je 0x1800a5cb5
add eax, 0x1f
cmp eax, 0x54
jb 0x1800a5ca6
jmp 0x1800a5ccc
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
jmp 0x1800a5cc7
mov rax, qword [rsi]
mov byte [r15 + rax], reloc.SHLWAPI.dll_StrCmpNICA
mov edx, 0xd4
add edx, 0x7c
cmp edx, 0x150
jb 0x1800a5c00
inc qword [rsi]
dec r8d
cmp r8d, 0x9a
ja 0x1800a5a00
lea r9, [0x180000000]
mov r8d, 0x42
nop dword [rax + rax]
mov eax, r8d
sub eax, 0x42
je 0x1800a5d47
cmp eax, 1
je case.0x1800a5041.289
jmp 0x1800a5ffd
cmp ecx, 0x4e9f
jg 0x1800a7ad4
je 0x1800a7a4d
sub ecx, 0x4e3
cmp ecx, 7
ja case.0x1800a7b02.28602
movsxd rax, ecx
mov ecx, dword [r9 + rax*4 + 0xab2ac]
add rcx, r9
jmp rcx
mov ecx, dword [r14]
cmp ecx, 0x80
jae 0x1800a5d5e
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a5ffa
lea eax, [rcx - 0xa0]
cmp eax, 0x1f
ja 0x1800a5dac
mov edx, 0x3a
nop
cmp edx, 0x3a
je 0x1800a5d92
cmp edx, 0xb1a
jne 0x1800a5d99
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcd370]
mov byte [r15 + rcx], al
jmp 0x1800a5d99
add dword [r14], 0xffffff60
add edx, 0xae0
cmp edx, 0x15c0
jbe 0x1800a5d70
jmp 0x1800a5ffa
lea eax, [rcx - 0x400]
cmp eax, 0x5f
ja 0x1800a5df4
mov edx, 7
nop dword [rax]
mov eax, edx
sub eax, 6
je 0x1800a5dd5
cmp eax, 1
jne 0x1800a5de8
add dword [r14], 0xfffffc00
jmp 0x1800a5de8
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcd390]
mov byte [r15 + rcx], al
dec edx
cmp edx, 5
ja 0x1800a5dc0
jmp 0x1800a5ffa
lea eax, [rcx - 0x2010]
cmp eax, 0x17
ja 0x1800a5e3d
mov edx, 0xee
mov eax, edx
sub eax, 0xee
je 0x1800a5e27
cmp eax, 1
jne 0x1800a5e2e
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcd3f0]
mov byte [r15 + rcx], al
jmp 0x1800a5e2e
add dword [r14], 0xffffdff0
inc edx
cmp edx, 0xf0
jb 0x1800a5e04
jmp 0x1800a5ffa
mov eax, 0xec
cmp eax, 0xec
jne 0x1800a5fed
mov eax, dword [r14]
cmp eax, 0x203a
ja 0x1800a5f3a
je 0x1800a5ef0
sub eax, 0x490
je 0x1800a5efd
sub eax, 1
je 0x1800a5f20
sub eax, 0x1b9f
je 0x1800a5e86
cmp eax, 9
je 0x1800a5eb9
jmp 0x1800a5f95
mov ecx, 0x22
nop dword [rax + rax]
cmp ecx, 0x22
je 0x1800a5ea3
cmp ecx, 0xc9
je 0x1800a5fe8
jmp 0x1800a5eab
mov rax, qword [rsi]
mov byte [r15 + rax], 0x89
add ecx, 0xa7
cmp ecx, 0x170
jb 0x1800a5e90
mov ecx, 0x91
nop
mov eax, ecx
sub eax, 0x90
je 0x1800a5fe8
cmp eax, 1
jne 0x1800a5eda
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8b
dec ecx
cmp ecx, 0x8f
ja 0x1800a5ec0
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9b
jmp 0x1800a5fe8
mov eax, 0x124
cmp eax, 0x124
je 0x1800a5f2d
add eax, 0xa9
cmp eax, 0x1cd
jb 0x1800a5f02
nop word [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb4
jmp 0x1800a5fe8
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa5
jmp 0x1800a5fe8
sub eax, 0x20ac
je 0x1800a5fe0
sub eax, 0x6a
je 0x1800a5f51
cmp eax, 0xc
je 0x1800a5f69
jmp 0x1800a5f95
mov eax, 0xe1
cmp eax, 0xe1
je 0x1800a5fca
add eax, 0x8d81
cmp eax, 0x8d81
jbe 0x1800a5f56
mov ecx, 0x47
nop
cmp ecx, 0x47
je 0x1800a5f7f
cmp ecx, 0xe7
je 0x1800a5fe8
jmp 0x1800a5f87
mov rax, qword [rsi]
mov byte [r15 + rax], reloc.SHLWAPI.dll_StrCmpNICA
add ecx, 0xa0
cmp ecx, 0x187
jb 0x1800a5f70
mov ecx, 0x127
nop word [rax + rax]
cmp ecx, 0x127
je 0x1800a5fb2
cmp ecx, 0x4772
je 0x1800a5fe8
jmp 0x1800a5fba
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
add ecx, 0x464b
cmp ecx, 0x8c96
jbe 0x1800a5fa0
jmp 0x1800a5fe8
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb9
jmp 0x1800a5fe8
mov rax, qword [rsi]
mov byte [r15 + rax], 0x88
mov eax, 0xec
inc eax
cmp eax, 0xed
jb 0x1800a5e42
inc qword [rsi]
inc r8d
cmp r8d, 0x44
jb 0x1800a5d00
mov r8d, 0x47
cmp r8d, 0x47
je 0x1800a6031
cmp r8d, 0x2f6d
jne 0x1800a639a
inc qword [rsi]
mov r13d, 0x12f
jmp case.0x1800a5041.298
mov ecx, dword [r14]
cmp ecx, 0x80
jae 0x1800a6048
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a639a
lea eax, [rcx - 0xa0]
cmp eax, 0x5f
ja 0x1800a605f
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a639a
lea eax, [rcx - 0x2010]
cmp eax, 0x17
ja 0x1800a60af
mov edx, 0xa1
nop
cmp edx, 0xa1
je 0x1800a6095
cmp edx, 0x158
jne 0x1800a609c
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcd408]
mov byte [r15 + rcx], al
jmp 0x1800a609c
add dword [r14], 0xffffdff0
add edx, 0xb7
cmp edx, 0x20f
jb 0x1800a6070
jmp 0x1800a639a
mov edx, 0x61
mov eax, edx
sub eax, 0x60
je 0x1800a638a
cmp eax, 1
jne 0x1800a638f
mov eax, dword [r14]
cmp eax, 0x192
ja 0x1800a6274
je 0x1800a6224
add eax, 0xfffffeae
cmp eax, 0x2c
ja case.0x1800a60fe.345
movzx eax, byte [r9 + rax + 0xab2ec]
mov ecx, dword [r9 + rax*4 + 0xab2cc]
add rcx, r9
jmp rcx
mov ecx, 0x81
nop word [rax + rax]
mov eax, ecx
sub eax, 0x80
je 0x1800a638a
cmp eax, 1
jne 0x1800a612a
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8c
dec ecx
cmp ecx, 0x7f
ja 0x1800a6110
mov ecx, 0x58
cmp ecx, 0x58
je 0x1800a6149
cmp ecx, 0xea
je 0x1800a638a
jmp 0x1800a6151
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9c
add ecx, 0x92
cmp ecx, 0x17c
jb 0x1800a6136
mov ecx, 0x109
mov eax, ecx
sub eax, 0x109
je 0x1800a6178
cmp eax, 1
je 0x1800a638a
jmp 0x1800a6180
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8a
inc ecx
cmp ecx, 0x10b
jb 0x1800a6164
mov ecx, 0x34
nop
cmp ecx, 0x34
je 0x1800a61a3
cmp ecx, 0x1ba0
je 0x1800a638a
jmp 0x1800a61ab
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9a
add ecx, 0x1b6c
cmp ecx, 0x36d8
jbe 0x1800a6190
mov ecx, 0x4a
nop
mov eax, ecx
sub eax, 0x49
je 0x1800a638a
cmp eax, 1
jne 0x1800a61d8
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9f
dec ecx
cmp ecx, 0x48
ja 0x1800a61c0
mov eax, 0xd9
cmp eax, 0xd9
je 0x1800a625a
add eax, 0x3f
cmp eax, reloc.SHLWAPI.dll_SHRegGetIntW
jb 0x1800a61e4
mov ecx, 0xce
nop word [rax + rax]
mov eax, ecx
sub eax, 0xcd
je 0x1800a638a
cmp eax, 1
jne 0x1800a621a
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9e
dec ecx
cmp ecx, 0xcc
ja 0x1800a6200
mov eax, 0xb9
nop dword [rax]
cmp eax, 0xb9
je 0x1800a6267
add eax, 0x34
cmp eax, 0xed
jb 0x1800a6230
mov ecx, 0xcc
mov eax, ecx
sub eax, 0xcc
je 0x1800a62cb
cmp eax, 1
je 0x1800a638a
jmp 0x1800a62d3
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8e
jmp 0x1800a638a
mov rax, qword [rsi]
mov byte [r15 + rax], 0x83
jmp 0x1800a638a
cmp eax, 0x2039
ja 0x1800a62ee
je 0x1800a62b1
sub eax, 0x2c6
je 0x1800a6241
sub eax, 0x16
je 0x1800a62e1
cmp eax, 0x1d54
jne case.0x1800a60fe.345
mov eax, 0xcf
nop dword [rax]
cmp eax, 0xcf
je 0x1800a62be
add eax, 0x1e
cmp eax, 0xed
jb 0x1800a62a0
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8b
jmp 0x1800a638a
mov rax, qword [rsi]
mov byte [r15 + rax], 0x89
jmp 0x1800a638a
mov rax, qword [rsi]
mov byte [r15 + rax], 0x88
inc ecx
cmp ecx, 0xce
jb 0x1800a6246
mov rax, qword [rsi]
mov byte [r15 + rax], StrCmpNICA
jmp 0x1800a638a
sub eax, 0x203a
je 0x1800a6301
sub eax, 0x72
je 0x1800a6326
cmp eax, 0x76
je 0x1800a6343
jmp case.0x1800a60fe.345
mov ecx, 0xd0
mov eax, ecx
sub eax, 0xcf
je 0x1800a638a
cmp eax, 1
jne 0x1800a631c
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9b
dec ecx
cmp ecx, 0xce
ja 0x1800a6306
mov eax, 0xee
nop dword [rax + rax]
cmp eax, 0xee
je 0x1800a6382
add eax, 0x549a
cmp eax, 0x549a
jbe 0x1800a6330
mov eax, 0x64
cmp eax, 0x64
je 0x1800a6378
add eax, 0x63
cmp eax, 0xc7
jb 0x1800a6348
mov eax, 0xcb
cmp eax, eax
je 0x1800a636e
add eax, 0xcb
cmp eax, 0xcb
jbe 0x1800a635e
jmp 0x1800a638f
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
jmp 0x1800a638a
mov rax, qword [rsi]
mov byte [r15 + rax], reloc.SHLWAPI.dll_StrCmpNICA
jmp 0x1800a638a
mov rax, qword [rsi]
mov byte [r15 + rax], 0x80
mov edx, 0x60
dec edx
cmp edx, 0x5f
ja 0x1800a60b4
add r8d, 0x2f26
cmp r8d, 0x5e4c
jbe 0x1800a6010
mov r8d, 0x6c
mov eax, r8d
sub eax, 0x6c
je 0x1800a63ca
cmp eax, 1
je 0x1800a6023
jmp 0x1800a65df
mov ecx, dword [r14]
cmp ecx, 0x80
jae 0x1800a63e1
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a65df
lea eax, [rcx - 0xa0]
cmp eax, 0x1f
ja 0x1800a642a
mov edx, 0x12a
mov eax, edx
sub eax, 0x12a
je 0x1800a6414
cmp eax, 1
jne 0x1800a641b
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcd560]
mov byte [r15 + rcx], al
jmp 0x1800a641b
add dword [r14], 0xffffff60
inc edx
cmp edx, 0x12c
jb 0x1800a63f1
jmp 0x1800a65df
lea eax, [rcx - 0x380]
cmp eax, 0x4f
ja 0x1800a647a
mov edx, 0x86
nop word [rax + rax]
mov eax, edx
sub eax, 0x86
je 0x1800a6463
cmp eax, 0x1e
jne 0x1800a646a
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcd580]
mov byte [r15 + rcx], al
jmp 0x1800a646a
add dword [r14], 0xfffffc80
add edx, 0x1e
cmp edx, 0xc2
jb 0x1800a6440
jmp 0x1800a65df
lea eax, [rcx - 0x2010]
cmp eax, 0x17
ja 0x1800a64a4
add dword [r14], 0xffffdff0
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcd5d0]
mov byte [r15 + rcx], al
jmp 0x1800a65df
mov edx, 0xdd
nop dword [rax]
mov eax, edx
sub eax, 0xdd
je 0x1800a64c7
cmp eax, 1
je 0x1800a65cc
jmp 0x1800a65d1
mov eax, dword [r14]
cmp eax, 0x203a
ja 0x1800a654d
je 0x1800a6540
sub eax, 0x192
je 0x1800a6530
sub eax, 0x1e9e
je 0x1800a64eb
cmp eax, 9
je 0x1800a6520
jmp 0x1800a6599
mov ecx, 0xf6
cmp ecx, 0xf6
je 0x1800a6506
cmp ecx, 0x33e4
je 0x1800a65cc
jmp 0x1800a650e
mov rax, qword [rsi]
mov byte [r15 + rax], 0x89
add ecx, 0x32ee
cmp ecx, 0x65dc
jbe 0x1800a64f0
nop dword [rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8b
jmp 0x1800a65cc
mov rax, qword [rsi]
mov byte [r15 + rax], 0x83
jmp 0x1800a65cc
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9b
jmp 0x1800a65cc
sub eax, 0x20ac
je 0x1800a655b
cmp eax, 0x76
je 0x1800a6571
jmp 0x1800a6599
mov eax, 0x7b
cmp eax, 0x7b
je 0x1800a65c4
add eax, 0x86
cmp eax, 0x101
jb 0x1800a6560
mov ecx, 0x11a
mov eax, ecx
sub eax, 0x11a
je 0x1800a6586
cmp eax, 0x60
je 0x1800a65cc
jmp 0x1800a658e
mov rax, qword [rsi]
mov byte [r15 + rax], reloc.SHLWAPI.dll_StrCmpNICA
add ecx, 0x60
cmp ecx, 0x1da
jb 0x1800a6576
mov ecx, 0xbe
nop
mov eax, ecx
sub eax, 0xbe
je 0x1800a65b0
cmp eax, 1
je 0x1800a65cc
jmp 0x1800a65b8
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
inc ecx
cmp ecx, 0xc0
jb 0x1800a65a0
jmp 0x1800a65d1
mov rax, qword [rsi]
mov byte [r15 + rax], 0x80
mov edx, 0xde
inc edx
cmp edx, 0xdf
jb 0x1800a64b0
inc r8d
cmp r8d, 0x6e
jb 0x1800a63b4
mov r8d, reloc.SHELL32.dll_SHTestTokenMembership
mov eax, r8d
sub eax, 0xf5
je 0x1800a660a
cmp eax, 0x45
je case.0x1800a5041.289
jmp 0x1800a69de
mov ecx, dword [r14]
cmp ecx, 0x80
jae 0x1800a6621
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a69db
cmp ecx, 0xa0
jb 0x1800a663d
cmp ecx, 0xd0
jae 0x1800a6645
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a69db
cmp ecx, 0xd0
jb 0x1800a668e
cmp ecx, 0x100
jae 0x1800a668e
mov edx, 0x51
cmp edx, 0x51
je 0x1800a6674
cmp edx, 0x3852
jne 0x1800a667b
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcd680]
mov byte [r15 + rcx], al
jmp 0x1800a667b
add dword [r14], 0xffffff30
add edx, 0x3801
cmp edx, 0x7002
jbe 0x1800a6652
jmp 0x1800a69db
lea eax, [rcx - 0x2010]
cmp eax, 0x17
ja 0x1800a66b8
add dword [r14], 0xffffdff0
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcd5e8]
mov byte [r15 + rcx], al
jmp 0x1800a69db
mov eax, 0xff
nop dword [rax]
cmp eax, 0xff
jne 0x1800a69cb
mov eax, dword [r14]
cmp eax, 0x2c6
ja 0x1800a6890
je 0x1800a6843
add eax, 0xfffffee2
cmp eax, 0x74
ja case.0x1800a6701.298
movzx eax, byte [r9 + rax + 0xab350]
mov ecx, dword [r9 + rax*4 + 0xab31c]
add rcx, r9
jmp rcx
mov rax, qword [rsi]
mov byte [r15 + rax], 0xd0
jmp 0x1800a69c6
mov eax, 0x120
cmp eax, 0x120
je 0x1800a676d
add eax, 0x3840
cmp eax, 0x3840
jbe 0x1800a6715
mov ecx, 0xcd
nop dword [rax]
mov eax, ecx
sub eax, 0xcc
je 0x1800a69c6
cmp eax, 1
jne 0x1800a674a
mov rax, qword [rsi]
mov byte [r15 + rax], 0xdd
dec ecx
cmp ecx, 0xcb
ja 0x1800a6730
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0xfd
jmp 0x1800a69c6
mov rax, qword [rsi]
mov byte [r15 + rax], 0xf0
jmp 0x1800a69c6
mov ecx, 0x6d
nop
mov eax, ecx
sub eax, 0x6d
je 0x1800a6792
cmp eax, 1
je 0x1800a69c6
jmp 0x1800a679a
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8c
inc ecx
cmp ecx, 0x6f
jb 0x1800a6780
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9c
jmp 0x1800a69c6
mov ecx, 0x40
mov eax, ecx
sub eax, 0x40
je 0x1800a67c5
cmp eax, 0x4a
je 0x1800a69c6
jmp 0x1800a67cd
mov rax, qword [rsi]
mov byte [r15 + rax], 0xde
add ecx, 0x4a
cmp ecx, 0xd4
jb 0x1800a67b3
nop dword [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0xfe
jmp 0x1800a69c6
mov ecx, 0x7c
mov eax, ecx
sub eax, 0x7b
je 0x1800a69c6
cmp eax, 1
jne 0x1800a680a
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8a
dec ecx
cmp ecx, 0x7a
ja 0x1800a67f2
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9a
jmp 0x1800a69c6
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9f
jmp 0x1800a69c6
mov eax, 0x39
cmp eax, 0x39
je 0x1800a6864
add eax, 0x26f7
cmp eax, 0x26f7
jbe 0x1800a6832
mov ecx, SHTestTokenMembership
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xf3
je 0x1800a6871
cmp eax, 1
je 0x1800a69c6
jmp 0x1800a6879
mov rax, qword [rsi]
mov byte [r15 + rax], 0x83
jmp 0x1800a69c6
mov rax, qword [rsi]
mov byte [r15 + rax], 0x88
inc ecx
cmp ecx, 0xf5
jb 0x1800a6850
mov rax, qword [rsi]
mov byte [r15 + rax], StrCmpNICA
jmp 0x1800a69c6
cmp eax, 0x203a
ja 0x1800a6954
je 0x1800a6911
sub eax, 0x2dc
je 0x1800a6883
sub eax, 0x1d54
je 0x1800a68b5
cmp eax, 9
je 0x1800a68e5
jmp case.0x1800a6701.298
mov ecx, 0x34
nop word [rax + rax]
mov eax, ecx
sub eax, 0x34
je 0x1800a68d2
cmp eax, 0x4f
je 0x1800a69c6
jmp 0x1800a68da
mov rax, qword [rsi]
mov byte [r15 + rax], 0x89
add ecx, 0x4f
cmp ecx, 0xd2
jb 0x1800a68c0
mov ecx, 0x7a
nop word [rax + rax]
mov eax, ecx
sub eax, 0x7a
je 0x1800a6902
cmp eax, 1
je 0x1800a69c6
jmp 0x1800a690a
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8b
inc ecx
cmp ecx, 0x7c
jb 0x1800a68f0
mov ecx, 0xa6
mov eax, ecx
sub eax, 0xa6
je 0x1800a692a
cmp eax, 0x40
je 0x1800a69c6
jmp 0x1800a6932
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9b
add ecx, 0x40
cmp ecx, 0x126
jb 0x1800a6916
mov ecx, 0x103
cmp ecx, 0x103
je 0x1800a6962
cmp ecx, 0x359f
je 0x1800a69c6
jmp 0x1800a696a
sub eax, 0x20ac
je 0x1800a693d
cmp eax, 0x76
je 0x1800a6978
jmp case.0x1800a6701.298
mov rax, qword [rsi]
mov byte [r15 + rax], 0x80
add ecx, 0x349c
cmp ecx, 0x6938
jbe 0x1800a6942
mov ecx, PathMakeUniqueName
nop dword [rax]
mov eax, ecx
sub eax, 0x2e
je 0x1800a698e
cmp eax, 0x7d
je 0x1800a69c6
jmp 0x1800a6996
mov rax, qword [rsi]
mov byte [r15 + rax], reloc.SHLWAPI.dll_StrCmpNICA
add ecx, 0x7d
cmp ecx, 0x128
jb 0x1800a6980
mov ecx, 0xd7
mov eax, ecx
sub eax, 0xd6
je 0x1800a69c6
cmp eax, 1
jne 0x1800a69bc
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
dec ecx
cmp ecx, 0xd5
ja 0x1800a69a6
mov eax, 0xff
add eax, 0x1fe0
cmp eax, 0x1fe0
jbe 0x1800a66c0
inc qword [rsi]
add r8d, 0x45
cmp r8d, 0x17f
jb 0x1800a65f2
mov r8d, 0xbf
nop word [rax + rax]
mov eax, r8d
sub eax, 0xbd
je case.0x1800a5041.289
sub eax, 1
je 0x1800a6de2
cmp eax, 1
jne 0x1800a6de5
mov ecx, dword [r14]
cmp ecx, 0x80
jae 0x1800a6a37
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a6de5
lea eax, [rcx - 0xa0]
cmp eax, 0x1f
ja 0x1800a6a5a
mov dword [r14], eax
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcd7b0]
mov byte [r15 + rcx], al
jmp 0x1800a6de5
lea eax, [rcx - 0x5b0]
cmp eax, 0x17
ja 0x1800a6aaf
mov edx, 0x10a
nop word [rax + rax]
cmp edx, 0x10a
je 0x1800a6a95
cmp edx, 0x1ba
jne 0x1800a6a9c
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcd7d0]
mov byte [r15 + rcx], al
jmp 0x1800a6a9c
add dword [r14], 0xfffffa50
add edx, 0xb0
cmp edx, 0x26a
jb 0x1800a6a70
jmp 0x1800a6de5
lea eax, [rcx - 0x5d0]
cmp eax, 0x27
ja 0x1800a6af4
mov edx, 0x29
nop
mov eax, edx
sub eax, 0x28
je 0x1800a6ad5
cmp eax, 1
jne 0x1800a6ae8
add dword [r14], 0xfffffa30
jmp 0x1800a6ae8
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcd7e8]
mov byte [r15 + rcx], al
dec edx
cmp edx, 0x27
ja 0x1800a6ac0
jmp 0x1800a6de5
lea eax, [rcx - 0x2010]
cmp eax, 0x17
ja 0x1800a6b38
mov edx, 0x38
mov eax, edx
sub eax, 0x38
je 0x1800a6b25
cmp eax, 1
jne 0x1800a6b2c
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcd810]
mov byte [r15 + rcx], al
jmp 0x1800a6b2c
add dword [r14], 0xffffdff0
inc edx
cmp edx, 0x3a
jb 0x1800a6b04
jmp 0x1800a6de5
mov eax, 0xa2
nop dword [rax]
cmp eax, 0xa2
jne 0x1800a6dd3
mov eax, dword [r14]
cmp eax, 0x200f
ja 0x1800a6ce7
je 0x1800a6c80
cmp eax, 0x2c6
ja 0x1800a6c6d
je 0x1800a6bfa
sub eax, 0xd7
je 0x1800a6bab
sub eax, 0x20
je 0x1800a6bc1
cmp eax, 0x9b
je 0x1800a6bd3
mov ecx, 0x89
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x89
je 0x1800a6db8
cmp eax, 1
je 0x1800a6dce
jmp 0x1800a6dc0
mov eax, 5
cmp eax, 5
je 0x1800a6bed
add eax, 0xc7
cmp eax, 0xcc
jb 0x1800a6bb0
mov eax, 0x24
cmp eax, 0x24
je 0x1800a6be0
add eax, 4
cmp eax, 0x28
jb 0x1800a6bc6
mov rax, qword [rsi]
mov byte [r15 + rax], 0x83
jmp 0x1800a6dce
mov rax, qword [rsi]
mov byte [r15 + rax], 0xba
jmp 0x1800a6dce
mov rax, qword [rsi]
mov byte [r15 + rax], IUnknown_GetWindow
jmp 0x1800a6dce
mov ecx, 0x23
nop
mov eax, ecx
sub eax, 0x23
je 0x1800a6c12
cmp eax, 1
je 0x1800a6dce
jmp 0x1800a6c1a
mov rax, qword [rsi]
mov byte [r15 + rax], 0x88
inc ecx
cmp ecx, 0x25
jb 0x1800a6c00
mov ecx, 0x127
nop word [rax + rax]
mov eax, ecx
sub eax, 0x126
je 0x1800a6dce
cmp eax, 1
jne 0x1800a6c4a
mov rax, qword [rsi]
mov byte [r15 + rax], StrCmpNICA
dec ecx
cmp ecx, 0x125
ja 0x1800a6c30
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0xfd
jmp 0x1800a6dce
cmp eax, 0x2dc
je 0x1800a6c21
cmp eax, 0x200e
je 0x1800a6c60
jmp case.0x1800a6d0b.8246
mov eax, 0x7b
cmp eax, 0x7b
je 0x1800a6cda
add eax, 0x29cd
cmp eax, 0x29cd
jbe 0x1800a6c85
mov eax, 0x1f
nop dword [rax + rax]
cmp eax, 0x1f
je 0x1800a6d0d
add eax, 0xf80
cmp eax, 0xf80
jbe 0x1800a6ca0
mov eax, 0x28
cmp eax, 0x28
je 0x1800a6d1a
add eax, 0x29
cmp eax, 0x51
jb 0x1800a6cb6
mov ecx, 0x68
mov eax, ecx
sub eax, 0x68
je 0x1800a6d27
cmp eax, 0x19
je 0x1800a6dce
jmp 0x1800a6d2f
mov rax, qword [rsi]
mov byte [r15 + rax], 0xfe
jmp 0x1800a6dce
add eax, 0xffffdfd0
cmp eax, 0xf2
ja case.0x1800a6d0b.8246
movzx eax, byte [r9 + rax + 0xab3e4]
mov ecx, dword [r9 + rax*4 + 0xab3c8]
add rcx, r9
jmp rcx
mov rax, qword [rsi]
mov byte [r15 + rax], 0x89
jmp 0x1800a6dce
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8b
jmp 0x1800a6dce
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9b
add ecx, 0x19
cmp ecx, 0x9a
jb 0x1800a6cc8
mov ecx, 0x83
nop
cmp ecx, 0x83
je 0x1800a6d52
cmp ecx, 0x3a56
je 0x1800a6dce
jmp 0x1800a6d5a
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa4
add ecx, 0x39d3
cmp ecx, 0x73a6
jbe 0x1800a6d40
mov ecx, SHRegGetIntW
nop dword [rax]
mov eax, ecx
sub eax, 0x115
je 0x1800a6d80
cmp eax, 5
je 0x1800a6dce
jmp 0x1800a6d88
mov rax, qword [rsi]
mov byte [r15 + rax], 0x80
add ecx, 5
cmp ecx, 0x11f
jb 0x1800a6d70
mov eax, 0x1f
cmp eax, 0x1f
je 0x1800a6dae
add eax, 0x554
cmp eax, 0x554
jbe 0x1800a6d98
jmp case.0x1800a6d0b.8246
mov rax, qword [rsi]
mov byte [r15 + rax], reloc.SHLWAPI.dll_StrCmpNICA
jmp 0x1800a6dce
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
inc ecx
cmp ecx, 0x8b
jb 0x1800a6b90
mov eax, 0xa2
inc eax
cmp eax, 0xa3
jb 0x1800a6b40
jmp 0x1800a6de5
inc qword [rsi]
dec r8d
cmp r8d, 0xbc
ja 0x1800a6a00
mov r8d, SHRegGetIntW
nop dword [rax + rax]
mov eax, r8d
sub eax, 0x113
je case.0x1800a5041.289
cmp eax, 1
jne 0x1800a72cd
mov ecx, dword [r14]
cmp ecx, 0x80
jae 0x1800a6e2e
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a72ca
lea eax, [rcx - 0xa0]
cmp eax, 0x1f
ja 0x1800a6e51
mov dword [r14], eax
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcd940]
mov byte [r15 + rcx], al
jmp 0x1800a72ca
lea eax, [rcx - 0xe0]
cmp eax, 0x1f
ja 0x1800a6e7b
add dword [r14], 0xffffff20
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcd960]
mov byte [r15 + rcx], al
jmp 0x1800a72ca
lea eax, [rcx - 0x618]
cmp eax, 0x3f
ja 0x1800a6ea5
add dword [r14], 0xfffff9e8
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcd980]
mov byte [r15 + rcx], al
jmp 0x1800a72ca
lea eax, [rcx - 0x2008]
cmp eax, 0x1f
ja 0x1800a6eee
mov edx, reloc.SHELL32.dll_SHTestTokenMembership
mov eax, edx
sub eax, 0xf4
je 0x1800a6ecc
cmp eax, 1
jne 0x1800a6edf
add dword [r14], 0xffffdff8
jmp 0x1800a6edf
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcd9c0]
mov byte [r15 + rcx], al
dec edx
cmp edx, 0xf3
ja 0x1800a6eb5
jmp 0x1800a72ca
mov eax, 0xd4
cmp eax, 0xd4
jne 0x1800a72bd
mov eax, dword [r14]
cmp eax, 0x60c
ja 0x1800a704d
je 0x1800a6fe1
sub eax, 0xd7
je 0x1800a7020
sub eax, 0x7b
je 0x1800a6f58
sub eax, 1
je 0x1800a6f8f
sub eax, 0x3f
je 0x1800a6fa3
cmp eax, 0x134
je 0x1800a6fc9
mov eax, 0x7e
nop dword [rax]
cmp eax, 0x7e
je 0x1800a729c
add eax, 0x53
cmp eax, 0xd1
jb 0x1800a6f40
jmp 0x1800a72b8
mov ecx, reloc.SHLWAPI.dll_StrCmpNCA
nop dword [rax]
cmp ecx, 0x97
je 0x1800a6f79
cmp ecx, 0x561e
je 0x1800a72b8
jmp 0x1800a6f81
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8c
add ecx, 0x5587
cmp ecx, 0xab0e
jbe 0x1800a6f60
mov eax, 0x54
cmp eax, 0x54
je 0x1800a7007
add eax, 0x40
cmp eax, 0x94
jb 0x1800a6f94
mov ecx, 8
mov eax, ecx
sub eax, 8
je 0x1800a6fba
cmp eax, 1
je 0x1800a72b8
jmp 0x1800a6fc2
mov rax, qword [rsi]
mov byte [r15 + rax], 0x83
inc ecx
cmp ecx, 0xa
jb 0x1800a6fa8
mov eax, 0xd1
nop
cmp eax, 0xd1
je 0x1800a6ffa
add eax, 0x17
cmp eax, 0xe8
jb 0x1800a6fd0
mov ecx, 0xe0
mov eax, ecx
sub eax, 0xe0
je 0x1800a702d
cmp eax, 0x7f
je 0x1800a72b8
jmp 0x1800a7035
mov rax, qword [rsi]
mov byte [r15 + rax], 0x88
jmp 0x1800a72b8
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9c
jmp 0x1800a72b8
mov rax, qword [rsi]
mov byte [r15 + rax], 0xd7
jmp 0x1800a72b8
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa1
add ecx, 0x7f
cmp ecx, 0x1de
jb 0x1800a6fe6
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8a
jmp 0x1800a72b8
cmp eax, 0x2030
ja 0x1800a725e
je 0x1800a71fa
add eax, 0xfffff987
cmp eax, 0x59
ja case.0x1800a7080.1669
movzx eax, byte [r9 + rax + 0xab50c]
mov ecx, dword [r9 + rax*4 + 0xab4d8]
add rcx, r9
jmp rcx
mov rax, qword [rsi]
mov byte [r15 + rax], 0x81
jmp 0x1800a72b8
mov ecx, 0xfa
cmp ecx, 0xfa
je 0x1800a70ad
cmp ecx, 0xa6fe
je 0x1800a72b8
jmp 0x1800a70b5
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8d
add ecx, 0xa604
cmp ecx, 0x14c08
jbe 0x1800a7094
mov eax, 0x4b
cmp eax, 0x4b
je 0x1800a710a
add eax, 0xba
cmp eax, 0x105
jb 0x1800a70c8
mov eax, 0x16
nop
cmp eax, 0x16
je 0x1800a7117
add eax, 0x98
cmp eax, 0xae
jb 0x1800a70e0
mov ecx, 0xf0
mov eax, ecx
sub eax, 0xf0
je 0x1800a7124
cmp eax, 0x5a
je 0x1800a72b8
jmp 0x1800a712c
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8f
jmp 0x1800a72b8
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9a
jmp 0x1800a72b8
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8e
add ecx, 0x5a
cmp ecx, 0x1a4
jb 0x1800a70f6
nop word [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], StrCmpNICA
jmp 0x1800a72b8
mov rax, qword [rsi]
mov byte [r15 + rax], 0x90
jmp 0x1800a72b8
mov eax, 0xc5
cmp eax, 0xc5
je 0x1800a7192
add eax, 0x7b2
cmp eax, 0x7b2
jbe 0x1800a7162
mov ecx, 0x3f
nop word [rax + rax]
mov eax, ecx
sub eax, 0x3f
je 0x1800a719f
cmp eax, 1
je 0x1800a72b8
jmp 0x1800a71a7
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9f
jmp 0x1800a72b8
mov rax, qword [rsi]
mov byte [r15 + rax], IUnknown_GetWindow
inc ecx
cmp ecx, 0x41
jb 0x1800a7180
mov ecx, 0xa7
cmp ecx, 0xa7
je 0x1800a71cc
cmp ecx, 0x32e2
je 0x1800a72b8
jmp 0x1800a71d4
mov rax, qword [rsi]
mov byte [r15 + rax], 0xc0
add ecx, 0x323b
cmp ecx, 0x6476
jbe 0x1800a71b3
mov eax, 0xbc
cmp eax, 0xbc
je 0x1800a724a
add eax, 0xbc0
cmp eax, 0xbc0
jbe 0x1800a71e7
mov eax, 0xd4
nop
cmp eax, 0xd4
je 0x1800a7254
add eax, 0x60e4
cmp eax, 0x60e4
jbe 0x1800a7200
mov eax, 0x122
nop dword [rax + rax]
cmp eax, 0x122
je 0x1800a72b0
add eax, 0x83
cmp eax, 0x1a5
jb 0x1800a7220
nop word [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9b
jmp 0x1800a72b8
mov rax, qword [rsi]
mov byte [r15 + rax], 0xff
jmp 0x1800a72b8
mov rax, qword [rsi]
mov byte [r15 + rax], 0x89
jmp 0x1800a72b8
sub eax, 0x2039
je 0x1800a7213
sub eax, 1
je 0x1800a7240
sub eax, 0x72
je 0x1800a72a6
cmp eax, 0x76
jne case.0x1800a7080.1669
mov ecx, 1
nop dword [rax]
cmp ecx, 1
je 0x1800a7292
add ecx, 0x36
cmp ecx, 0x37
jb 0x1800a7280
jmp case.0x1800a7080.1669
mov rax, qword [rsi]
mov byte [r15 + rax], reloc.SHLWAPI.dll_StrCmpNICA
jmp 0x1800a72b8
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
jmp 0x1800a72b8
mov rax, qword [rsi]
mov byte [r15 + rax], 0x80
jmp 0x1800a72b8
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8b
mov eax, 0xd4
dec eax
cmp eax, 0xd3
ja 0x1800a6ef3
inc qword [rsi]
dec r8d
cmp r8d, 0x112
ja 0x1800a6e00
mov r8d, 0x45
cmp r8d, 0x45
je 0x1800a72fb
cmp r8d, 0xf7
je 0x1800a6023
jmp 0x1800a7539
mov ecx, dword [r14]
cmp ecx, 0x80
jae 0x1800a7312
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a7539
lea eax, [rcx - 0xa0]
cmp eax, 0xdf
ja 0x1800a7337
mov dword [r14], eax
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcdae0]
mov byte [r15 + rcx], al
jmp 0x1800a7539
lea eax, [rcx - 0x2010]
cmp eax, 0x17
ja 0x1800a7383
mov edx, 0x79
cmp edx, 0x79
je 0x1800a7369
cmp edx, 0x5606
jne 0x1800a7370
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcd828]
mov byte [r15 + rcx], al
jmp 0x1800a7370
add dword [r14], 0xffffdff0
add edx, 0x558d
cmp edx, 0xab1a
jbe 0x1800a7347
jmp 0x1800a7539
mov eax, 0xc8
nop dword [rax + rax]
cmp eax, 0xc8
jne 0x1800a7529
mov eax, dword [r14]
cmp eax, 0x2039
ja 0x1800a746d
je 0x1800a73e1
sub eax, 0x2c7
je 0x1800a73fb
sub eax, 0x12
je 0x1800a742c
sub eax, 2
je 0x1800a7460
cmp eax, 0x1d55
jne 0x1800a74e3
mov eax, 0x85
cmp eax, 0x85
je 0x1800a73ee
add eax, 0x34
cmp eax, 0xb9
jb 0x1800a73d0
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8b
jmp 0x1800a7524
mov rax, qword [rsi]
mov byte [r15 + rax], 0x89
jmp 0x1800a7524
mov ecx, 0xb3
cmp ecx, 0xb3
je 0x1800a7416
cmp ecx, 0x66c9
je 0x1800a7524
jmp 0x1800a741e
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8e
add ecx, 0x6616
cmp ecx, 0xcc2c
jbe 0x1800a7400
mov ecx, 0x120
cmp ecx, 0x120
je 0x1800a7447
cmp ecx, 0x9000
je 0x1800a7524
jmp 0x1800a744f
mov rax, qword [rsi]
mov byte [r15 + rax], 0xff
add ecx, 0x8ee0
cmp ecx, 0x11dc0
jbe 0x1800a7431
nop dword [rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9e
jmp 0x1800a7524
sub eax, 0x203a
je 0x1800a7480
sub eax, 0x72
je 0x1800a749c
cmp eax, 0x76
je 0x1800a74c9
jmp 0x1800a74e3
mov eax, SHTestTokenMembership
cmp eax, 0xf2
je 0x1800a751c
add eax, 0x81
cmp eax, 0x173
jb 0x1800a7485
mov ecx, 0x9b
cmp ecx, 0x9b
je 0x1800a74b3
cmp ecx, 0x51bd
je 0x1800a7524
jmp 0x1800a74bb
mov rax, qword [rsi]
mov byte [r15 + rax], 0x80
add ecx, 0x5122
cmp ecx, 0xa244
jbe 0x1800a74a1
mov eax, 0xa5
nop
cmp eax, 0xa5
je 0x1800a7512
add eax, 0xa3
cmp eax, 0x148
jb 0x1800a74d0
mov ecx, 0xb5
cmp ecx, 0xb5
je 0x1800a74fa
cmp ecx, 0x1043
je 0x1800a7524
jmp 0x1800a7502
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
add ecx, 0xf8e
cmp ecx, 0x1f1c
jbe 0x1800a74e8
jmp 0x1800a7524
mov rax, qword [rsi]
mov byte [r15 + rax], reloc.SHLWAPI.dll_StrCmpNICA
jmp 0x1800a7524
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9b
mov eax, 0xc8
add eax, 0x28a0
cmp eax, 0x28a0
jbe 0x1800a7390
add r8d, 0xb2
cmp r8d, 0x1a9
jb 0x1800a72e3
mov r8d, 0x88
nop dword [rax]
nop word [rax + rax]
mov eax, r8d
sub eax, 0x87
je case.0x1800a5041.289
cmp eax, 1
jne 0x1800a7972
mov ecx, dword [r14]
cmp ecx, 0x80
jae 0x1800a7592
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a796f
cmp ecx, 0xa0
jb 0x1800a75ae
cmp ecx, 0xc0
jae 0x1800a75b6
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a796f
cmp ecx, 0xc0
jb 0x1800a7602
cmp ecx, 0x108
jae 0x1800a7602
mov edx, 0x2a
cmp edx, 0x2a
je 0x1800a75e8
cmp edx, 0x17f4
jne 0x1800a75ef
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcdcc0]
mov byte [r15 + rcx], al
jmp 0x1800a75ef
add dword [r14], 0xffffff40
add edx, 0x17ca
cmp edx, 0x2f94
jbe 0x1800a75c3
jmp 0x1800a796f
lea eax, [rcx - 0x2010]
cmp eax, 0x17
ja 0x1800a764e
mov edx, 0xcc
mov eax, edx
sub eax, 0xcc
je 0x1800a7638
cmp eax, 1
jne 0x1800a763f
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcdd08]
mov byte [r15 + rcx], al
jmp 0x1800a763f
add dword [r14], 0xffffdff0
inc edx
cmp edx, 0xce
jb 0x1800a7612
jmp 0x1800a796f
mov edx, SHTestTokenMembership
cmp edx, 0xf4
je 0x1800a766c
cmp edx, 0xaa9c
je 0x1800a7958
jmp 0x1800a795d
mov eax, dword [r14]
cmp eax, 0x2c6
ja 0x1800a7805
je 0x1800a77bb
add eax, 0xfffffef0
cmp eax, 0xa0
ja case.0x1800a7838.738
movzx eax, byte [r9 + rax + 0xab594]
mov ecx, dword [r9 + rax*4 + 0xab568]
add rcx, r9
jmp rcx
mov eax, 0x120
nop dword [rax + rax]
cmp eax, 0x120
je 0x1800a771d
add eax, 0x35
cmp eax, 0x155
jb 0x1800a76b0
mov eax, 0xb8
cmp eax, 0xb8
je 0x1800a772a
add eax, 0x1140
cmp eax, 0x1140
jbe 0x1800a76c6
mov ecx, SHTestTokenMembership
nop
mov eax, ecx
sub eax, 0xf0
je 0x1800a7958
cmp eax, 1
jne 0x1800a76fe
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8c
dec ecx
cmp ecx, 0xef
ja 0x1800a76e0
nop dword [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9c
jmp 0x1800a7958
mov rax, qword [rsi]
mov byte [r15 + rax], 0xd0
jmp 0x1800a7958
mov rax, qword [rsi]
mov byte [r15 + rax], 0xf0
jmp 0x1800a7958
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9f
jmp 0x1800a7958
mov eax, 0x22
cmp eax, 0x22
je 0x1800a7770
add eax, 0xb2
cmp eax, 0xd4
jb 0x1800a7752
mov rax, qword [rsi]
mov byte [r15 + rax], 0xd5
jmp 0x1800a7958
mov rax, qword [rsi]
mov byte [r15 + rax], 0x83
jmp 0x1800a7958
mov rax, qword [rsi]
mov byte [r15 + rax], reloc.SHELL32.dll_SHTestTokenMembership
jmp 0x1800a7958
mov eax, 0x81
cmp eax, 0x81
je 0x1800a77de
add eax, 0x6f
cmp eax, 0xf0
jb 0x1800a7792
mov eax, 0xa7
cmp eax, 0xa7
je 0x1800a77eb
add eax, 0x4a5e
cmp eax, 0x4a5e
jbe 0x1800a77a8
mov eax, 0x30
cmp eax, 0x30
je 0x1800a77f8
add eax, 0x15f0
cmp eax, 0x15f0
jbe 0x1800a77c0
mov rax, qword [rsi]
mov byte [r15 + rax], StrCmpNICA
jmp 0x1800a7958
mov rax, qword [rsi]
mov byte [r15 + rax], 0xdd
jmp 0x1800a7958
mov rax, qword [rsi]
mov byte [r15 + rax], 0xfd
jmp 0x1800a7958
mov rax, qword [rsi]
mov byte [r15 + rax], 0x88
jmp 0x1800a7958
cmp eax, 0x2030
ja 0x1800a798c
je 0x1800a78ea
add eax, 0xfffffd24
cmp eax, 0x47
ja case.0x1800a7838.738
movzx eax, byte [r9 + rax + 0xab654]
mov ecx, dword [r9 + rax*4 + 0xab638]
add rcx, r9
jmp rcx
mov rax, qword [rsi]
mov byte [r15 + rax], 0xcc
jmp 0x1800a7958
mov rax, qword [rsi]
mov byte [r15 + rax], 0xec
jmp 0x1800a7958
mov eax, 0xe7
cmp eax, 0xe7
je 0x1800a78cb
add eax, 0x18
cmp eax, 0xff
jb 0x1800a7862
mov ecx, SHRegGetIntW
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x115
je 0x1800a7958
cmp eax, 1
jne 0x1800a789e
mov rax, qword [rsi]
mov byte [r15 + rax], 0xd2
dec ecx
cmp ecx, 0x114
ja 0x1800a7880
mov ecx, 0x84
nop dword [rax]
mov eax, ecx
sub eax, 0x84
je 0x1800a78d8
cmp eax, 1
je 0x1800a7958
jmp 0x1800a78e0
mov rax, qword [rsi]
mov byte [r15 + rax], 0xde
jmp 0x1800a7958
mov rax, qword [rsi]
mov byte [r15 + rax], SHTestTokenMembership
inc ecx
cmp ecx, 0x86
jb 0x1800a78b0
mov ecx, IUnknown_GetWindow
nop
mov eax, ecx
sub eax, 0xaa
je 0x1800a7907
cmp eax, 1
je 0x1800a7958
jmp 0x1800a790f
mov rax, qword [rsi]
mov byte [r15 + rax], 0x89
inc ecx
cmp ecx, 0xac
jb 0x1800a78f0
mov ecx, 0x113
nop
mov eax, ecx
sub eax, 0x112
je 0x1800a7958
cmp eax, 1
jne 0x1800a793a
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8b
dec ecx
cmp ecx, 0x111
ja 0x1800a7920
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9b
mov edx, 0xaa9c
add edx, 0xa9a8
cmp edx, 0x15350
jbe 0x1800a7653
inc qword [rsi]
dec r8d
cmp r8d, 0x86
ja 0x1800a7560
mov r8, qword [rsp + 0x70]
jmp case.0x1800a7b02.28602
sub eax, 0x2039
je 0x1800a7919
sub eax, 1
je 0x1800a7950
sub eax, 0x71
je 0x1800a7a09
sub eax, 1
je 0x1800a7a40
cmp eax, 0x76
jne case.0x1800a7838.738
mov ecx, 0x38
mov eax, ecx
sub eax, 0x37
je 0x1800a7958
cmp eax, 1
jne 0x1800a79c8
mov rax, qword [rsi]
mov byte [r15 + rax], reloc.SHLWAPI.dll_StrCmpNICA
dec ecx
cmp ecx, 0x36
ja 0x1800a79b0
mov ecx, 0x32
cmp ecx, 0x32
je 0x1800a79ee
cmp ecx, 0x15e
je 0x1800a7958
jmp 0x1800a79f6
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
add ecx, 0x12c
cmp ecx, 0x258
jbe 0x1800a79d4
jmp 0x1800a795d
mov ecx, SHTestTokenMembership
nop
mov eax, ecx
sub eax, 0xf3
je 0x1800a7958
cmp eax, 1
jne 0x1800a7a2e
mov rax, qword [rsi]
mov byte [r15 + rax], 0xfe
dec ecx
cmp ecx, 0xf2
ja 0x1800a7a10
nop dword [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0x80
jmp 0x1800a7958
mov r9d, 0x53
cmp r9d, 0x53
je 0x1800a7a6f
cmp r9d, 0x29d3
je case.0x1800a5041.289
jmp 0x1800a7a8d
mov ecx, dword [r14]
mov edx, 0x1a
mov r8, qword [rsi]
cmp ecx, 0x80
movzx eax, cl
cmovb edx, eax
mov byte [r15 + r8], dl
inc qword [rsi]
add r9d, 0x2980
cmp r9d, 0x5300
jbe 0x1800a7a53
lea r9, [0x180000000]
mov edx, 0x5d
nop dword [rax]
mov eax, edx
sub eax, 0x5c
je case.0x1800a5041.289
cmp eax, 1
jne 0x1800a7b0c
mov ecx, dword [r14]
mov rax, qword [rsi]
cmp ecx, 0x100
jae 0x1800a7b04
mov byte [r15 + rax], cl
jmp 0x1800a7b09
cmp ecx, 0x5182
je 0x1800a9d77
jmp case.0x1800a7b02.28602
sub ecx, 0x6faf
cmp ecx, 0xf
ja case.0x1800a7b02.28602
movsxd rax, ecx
mov ecx, dword [r9 + rax*4 + 0xab69c]
add rcx, r9
jmp rcx
mov byte [r15 + rax], 0x1a
inc qword [rsi]
dec edx
cmp edx, 0x5b
ja 0x1800a7ab0
mov r8d, SHTestTokenMembership
nop dword [rax]
mov eax, r8d
sub eax, 0xf3
je 0x1800a7b3c
cmp eax, 1
je 0x1800a6023
jmp 0x1800a7c31
mov edx, dword [r14]
cmp edx, 0xa0
jae 0x1800a7b57
mov rax, qword [rsi]
mov byte [r15 + rax], dl
jmp 0x1800a7c31
cmp edx, 0x120
jae 0x1800a7ba3
mov edx, 0x52
mov eax, edx
sub eax, 0x52
je 0x1800a7b90
cmp eax, 1
jne 0x1800a7b97
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcc530]
mov byte [r15 + rcx], al
jmp 0x1800a7b97
add dword [r14], 0xffffff60
inc edx
cmp edx, 0x54
jb 0x1800a7b64
jmp 0x1800a7c31
lea eax, [rdx - 0x138]
cmp eax, 0x47
ja 0x1800a7bf4
mov edx, SHRegGetIntW
mov eax, edx
sub eax, 0x115
je 0x1800a7be1
cmp eax, 1
jne 0x1800a7be8
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcc5b0]
mov byte [r15 + rcx], al
jmp 0x1800a7be8
add dword [r14], 0xfffffec8
inc edx
cmp edx, 0x117
jb 0x1800a7bb3
jmp 0x1800a7c31
lea eax, [rdx - 0x2d8]
cmp eax, 7
ja 0x1800a7c1b
mov dword [r14], eax
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcc5f8]
mov byte [r15 + rcx], al
jmp 0x1800a7c31
mov rcx, qword [rsi]
cmp edx, 0x2c7
mov eax, 0x1a
cmove eax, r11d
mov byte [rcx + r15], al
inc r8d
cmp r8d, 0xf5
jb 0x1800a7b20
mov r8d, 0xfc
nop word [rax + rax]
mov eax, r8d
sub eax, 0xfb
je case.0x1800a5041.289
cmp eax, 1
jne 0x1800a7f02
mov ecx, dword [r14]
cmp ecx, 0xa0
jae 0x1800a7c82
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a7eff
cmp ecx, 0x100
jae 0x1800a7cac
lea eax, [rcx - 0xa0]
mov dword [r14], eax
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcc6c0]
mov byte [r15 + rcx], al
jmp 0x1800a7eff
lea eax, [rcx - 0x108]
cmp eax, 7
ja 0x1800a7cd3
mov dword [r14], eax
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcc720]
mov byte [r15 + rcx], al
jmp 0x1800a7eff
lea eax, reloc.SHLWAPI.dll_SHRegGetIntW
cmp eax, 0xf
ja 0x1800a7d01
add dword [r14], 0xfffffee8
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcc728]
mov byte [r15 + rcx], al
jmp 0x1800a7eff
lea eax, [rcx - 0x130]
cmp eax, 7
ja 0x1800a7d2f
add dword [r14], 0xfffffed0
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcc738]
mov byte [r15 + rcx], al
jmp 0x1800a7eff
lea eax, [rcx - 0x158]
cmp eax, 7
ja 0x1800a7d5d
add dword [r14], 0xfffffea8
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcc740]
mov byte [r15 + rcx], al
jmp 0x1800a7eff
mov eax, 0xfd
cmp eax, 0xfd
je 0x1800a7d7d
cmp eax, 0x1b0
je 0x1800a7eea
jmp 0x1800a7eef
mov eax, dword [r14]
cmp eax, 0x17c
ja 0x1800a7ea9
je 0x1800a7e17
sub eax, 0x16c
je 0x1800a7db7
sub eax, 1
je 0x1800a7dd7
cmp eax, 0xe
je 0x1800a7df1
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
jmp 0x1800a7eea
mov eax, 0x126
nop dword [rax]
cmp eax, 0x126
je 0x1800a7e53
add eax, 0x7d2e
cmp eax, 0x7d2e
jbe 0x1800a7dc0
mov eax, 0x30
nop dword [rax]
cmp eax, 0x30
je 0x1800a7e46
add eax, 0xfc0
cmp eax, 0xfc0
jbe 0x1800a7de0
mov eax, IUnknown_GetWindow
nop word [rax + rax]
cmp eax, 0xa8
je 0x1800a7e39
add eax, 0xa3
cmp eax, 0x14b
jb 0x1800a7e00
mov ecx, 0x103
nop dword [rax]
cmp ecx, 0x103
je 0x1800a7e60
cmp ecx, 0x3cb4
je 0x1800a7eea
jmp 0x1800a7e68
mov rax, qword [rsi]
mov byte [r15 + rax], 0xaf
jmp 0x1800a7eea
mov rax, qword [rsi]
mov byte [r15 + rax], 0xfd
jmp 0x1800a7eea
mov rax, qword [rsi]
mov byte [r15 + rax], 0xdd
jmp 0x1800a7eea
mov rax, qword [rsi]
mov byte [r15 + rax], 0xbf
add ecx, 0x3bb1
cmp ecx, 0x7762
jbe 0x1800a7e20
mov eax, 0x5c
nop dword [rax + rax]
cmp eax, 0x5c
je 0x1800a7ee2
add eax, 0xa9
cmp eax, 0x105
jb 0x1800a7e80
mov ecx, 0x59
cmp ecx, 0x59
je 0x1800a7ec2
cmp ecx, 0x70
je 0x1800a7eea
jmp 0x1800a7eca
sub eax, 0x2d8
je 0x1800a7e76
cmp eax, 1
je 0x1800a7e91
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
jmp 0x1800a7eea
mov rax, qword [rsi]
mov byte [r15 + rax], 0xff
add ecx, 0x17
cmp ecx, 0x87
jb 0x1800a7e96
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
jmp 0x1800a7eea
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa2
mov eax, 0x1b0
add eax, 0xb3
cmp eax, 0x263
jb 0x1800a7d62
inc qword [rsi]
dec r8d
cmp r8d, 0xfa
ja 0x1800a7c50
mov r8d, 0x61
nop dword [rax + rax]
mov eax, r8d
sub eax, 0x5f
je case.0x1800a5041.289
sub eax, 1
je 0x1800a80fb
cmp eax, 1
jne 0x1800a80fe
mov ecx, dword [r14]
cmp ecx, 0xa0
jae 0x1800a7f59
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a80fe
cmp ecx, 0x158
jae 0x1800a7fba
mov edx, 0x10a
nop word [rax + rax]
cmp edx, 0x10a
je 0x1800a7fa0
cmp edx, 0xf96
jne 0x1800a7fa7
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcc820]
mov byte [r15 + rcx], al
jmp 0x1800a7fa7
add dword [r14], 0xffffff60
add edx, 0xe8c
cmp edx, 0x1d18
jbe 0x1800a7f70
jmp 0x1800a80fe
lea eax, [rcx - 0x160]
cmp eax, 0x1f
ja 0x1800a801a
mov edx, 0xa3
nop word [rax + rax]
cmp edx, 0xa3
je 0x1800a8000
cmp edx, 0x357c
jne 0x1800a8007
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcc8d8]
mov byte [r15 + rcx], al
jmp 0x1800a8007
add dword [r14], 0xfffffea0
add edx, 0x34d9
cmp edx, 0x69b2
jbe 0x1800a7fd0
jmp 0x1800a80fe
mov eax, 0x7e
nop
cmp eax, 0x7e
je 0x1800a8039
cmp eax, 0x5136
je 0x1800a80e1
jmp 0x1800a80e6
mov ecx, dword [r14]
sub ecx, 0x2c7
je 0x1800a805f
sub ecx, 0x12
je 0x1800a8083
cmp ecx, 2
je 0x1800a809b
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
jmp 0x1800a80e1
mov ecx, 0x43
mov eax, ecx
sub eax, 0x42
je 0x1800a80e1
cmp eax, 1
jne 0x1800a807c
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb7
dec ecx
cmp ecx, 0x41
ja 0x1800a8064
mov eax, 0x110
cmp eax, 0x110
je 0x1800a80d9
add eax, 0xa5c0
cmp eax, 0xa5c0
jbe 0x1800a8088
mov ecx, 0x13
cmp ecx, 0x13
je 0x1800a80b6
cmp ecx, 0xa77
je 0x1800a80e1
jmp 0x1800a80be
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb2
add ecx, 0xa64
cmp ecx, 0x14c8
jbe 0x1800a80a0
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
jmp 0x1800a80e1
mov rax, qword [rsi]
mov byte [r15 + rax], 0xff
mov eax, 0x5136
add eax, 0x50b8
cmp eax, 0xa170
jbe 0x1800a8020
jmp 0x1800a80fe
inc qword [rsi]
dec r8d
cmp r8d, 0x5e
ja 0x1800a7f20
mov edx, 0x12
mov eax, edx
sub eax, 0x12
je 0x1800a813a
sub eax, 1
je 0x1800a8132
cmp eax, 1
je case.0x1800a5041.289
jmp 0x1800a8277
inc qword [rsi]
jmp 0x1800a8277
mov ecx, dword [r14]
cmp ecx, 0xa1
jae 0x1800a8155
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a8277
lea eax, [rcx - 0x400]
cmp eax, 0x5f
ja 0x1800a817f
add dword [r14], 0xfffffc00
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcc9c0]
mov byte [r15 + rcx], al
jmp 0x1800a8277
mov ecx, 0xf8
nop dword [rax]
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xf7
je 0x1800a8264
cmp eax, 1
jne 0x1800a8269
mov ecx, dword [r14]
sub ecx, 0xa7
je 0x1800a81cf
sub ecx, 6
je 0x1800a81fb
cmp ecx, 0x2069
je 0x1800a8213
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
jmp 0x1800a8264
mov ecx, 0x54
cmp ecx, 0x54
je 0x1800a81eb
cmp ecx, 0x57
je 0x1800a8264
jmp 0x1800a81f3
mov rax, qword [rsi]
mov byte [r15 + rax], 0xfd
add ecx, 3
cmp ecx, 0x5a
jb 0x1800a81d4
mov eax, SHRegGetIntW
cmp eax, 0x114
je 0x1800a825c
add eax, 0xbe
cmp eax, 0x1d2
jb 0x1800a8200
mov ecx, 0x100
nop dword [rax + rax]
cmp ecx, 0x100
je 0x1800a8239
cmp ecx, 0xb000
je 0x1800a8264
jmp 0x1800a8241
mov rax, qword [rsi]
mov byte [r15 + rax], 0xf0
add ecx, 0xaf00
cmp ecx, 0x15e00
jbe 0x1800a8220
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
jmp 0x1800a8264
mov rax, qword [rsi]
mov byte [r15 + rax], 0xad
mov ecx, 0xf7
dec ecx
cmp ecx, 0xf6
ja 0x1800a8190
inc edx
cmp edx, 0x15
jb 0x1800a8110
mov edx, 0x110
nop word [rax + rax]
mov eax, edx
sub eax, 0x110
je 0x1800a82bc
sub eax, 1
je 0x1800a82b4
cmp eax, 1
je case.0x1800a5041.289
jmp 0x1800a83db
inc qword [rsi]
jmp 0x1800a83db
mov ecx, dword [r14]
cmp ecx, 0xa1
jae 0x1800a82d7
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a83db
lea eax, [rcx - 0x618]
cmp eax, 0x3f
ja 0x1800a82fe
mov dword [r14], eax
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xccae0]
mov byte [r15 + rcx], al
jmp 0x1800a83db
mov eax, 0xd8
cmp eax, 0xd8
jne 0x1800a83ce
mov ecx, dword [r14]
sub ecx, 0xa4
je 0x1800a832c
sub ecx, 9
je 0x1800a8354
cmp ecx, 0x55f
je 0x1800a8373
jmp 0x1800a8389
mov ecx, PathMakeUniqueName
mov eax, ecx
sub eax, 0x2a
je 0x1800a83c9
cmp eax, 1
jne 0x1800a834d
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa4
dec ecx
cmp ecx, 0x29
ja 0x1800a8331
mov eax, 0x123
nop dword [rax]
cmp eax, 0x123
je 0x1800a83c1
add eax, 0x787e
cmp eax, 0x787e
jbe 0x1800a8360
mov eax, 0x21
cmp eax, 0x21
je 0x1800a83b4
add eax, 0xfdb
cmp eax, 0xfdb
jbe 0x1800a8378
mov eax, 0x11
nop
cmp eax, 0x11
je 0x1800a83a7
add eax, 0x8c
cmp eax, 0x9d
jb 0x1800a8390
jmp 0x1800a83c9
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
jmp 0x1800a83c9
mov rax, qword [rsi]
mov byte [r15 + rax], reloc.SHLWAPI.dll_IUnknown_GetWindow
jmp 0x1800a83c9
mov rax, qword [rsi]
mov byte [r15 + rax], 0xad
mov eax, 0xd8
inc eax
cmp eax, 0xd9
jb 0x1800a8303
inc edx
cmp edx, 0x113
jb 0x1800a8290
mov r8d, 0x66
nop
mov eax, r8d
sub eax, 0x66
je 0x1800a8417
sub eax, 1
je 0x1800a840f
cmp eax, 1
je case.0x1800a5041.289
jmp 0x1800a86bd
inc qword [rsi]
jmp 0x1800a86bd
mov ecx, dword [r14]
cmp ecx, 0xa0
jae 0x1800a8432
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a86bd
cmp ecx, 0xb8
jae 0x1800a847c
mov edx, 0xb4
nop
mov eax, edx
sub eax, 0xb4
je 0x1800a8466
cmp eax, 1
jne 0x1800a846d
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcc748]
mov byte [r15 + rcx], al
jmp 0x1800a846d
add dword [r14], 0xffffff60
inc edx
cmp edx, 0xb6
jb 0x1800a8440
jmp 0x1800a86bd
add ecx, 0xfffffc80
cmp ecx, 0x4f
ja 0x1800a84a1
mov dword [r14], ecx
mov eax, ecx
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xccbe0]
mov byte [r15 + rcx], al
jmp 0x1800a86bd
mov eax, 0x74
cmp eax, 0x74
je 0x1800a84bf
cmp eax, 0x202c
je 0x1800a86a8
jmp 0x1800a86ad
mov eax, dword [r14]
cmp eax, 0x2018
ja 0x1800a85ea
je 0x1800a85d0
sub eax, 0xbb
je 0x1800a84fe
sub eax, 2
je 0x1800a8536
sub eax, 0x2bd
je 0x1800a8570
cmp eax, 0x1c9b
je 0x1800a85ad
jmp 0x1800a86a0
mov ecx, SHTestTokenMembership
cmp ecx, 0xf1
je 0x1800a8520
cmp ecx, 0xb1ed
je 0x1800a86a8
jmp 0x1800a8528
mov rax, qword [rsi]
mov byte [r15 + rax], 0xbb
add ecx, 0xb0fc
cmp ecx, 0x161f8
jbe 0x1800a8503
mov ecx, 0x79
nop dword [rax + rax]
cmp ecx, 0x79
je 0x1800a855a
cmp ecx, 0x50d3
je 0x1800a86a8
jmp 0x1800a8562
mov rax, qword [rsi]
mov byte [r15 + rax], 0xbd
add ecx, 0x505a
cmp ecx, 0xa0b4
jbe 0x1800a8540
mov ecx, 0x106
nop word [rax + rax]
mov eax, ecx
sub eax, 0x106
je 0x1800a859b
cmp eax, 1
je 0x1800a86a8
jmp 0x1800a85a3
mov rax, qword [rsi]
mov byte [r15 + rax], IUnknown_GetWindow
inc ecx
cmp ecx, 0x108
jb 0x1800a8580
mov eax, IUnknown_GetWindow
cmp eax, 0xa9
je 0x1800a85dd
add eax, 0x548
cmp eax, 0x548
jbe 0x1800a85b2
nop word [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa1
jmp 0x1800a86a8
mov rax, qword [rsi]
mov byte [r15 + rax], 0xaf
jmp 0x1800a86a8
sub eax, 0x2019
je 0x1800a8606
sub eax, 0x93
je 0x1800a8638
cmp eax, 3
je 0x1800a8669
jmp 0x1800a86a0
mov ecx, 0x113
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x112
je 0x1800a86a8
cmp eax, 1
jne 0x1800a862e
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa2
dec ecx
cmp ecx, 0x111
ja 0x1800a8610
mov ecx, 0x129
nop dword [rax]
mov eax, ecx
sub eax, 0x129
je 0x1800a8657
cmp eax, 1
je 0x1800a86a8
jmp 0x1800a865f
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa4
inc ecx
cmp ecx, 0x12b
jb 0x1800a8640
mov ecx, 0xfd
nop
mov eax, ecx
sub eax, 0xfd
je 0x1800a868b
cmp eax, 0x41
je 0x1800a86a8
jmp 0x1800a8693
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa5
add ecx, 0x41
cmp ecx, 0x17f
jb 0x1800a8670
nop
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
mov eax, 0x202c
add eax, 0x1fb8
cmp eax, 0x3f70
jbe 0x1800a84a6
inc r8d
cmp r8d, 0x69
jb 0x1800a83f0
mov r8d, 0xd5
mov eax, r8d
sub eax, 0xd4
je 0x1800a6023
cmp eax, 1
jne 0x1800a88aa
mov ecx, dword [r14]
cmp ecx, 0xa0
jae 0x1800a8702
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a88aa
cmp ecx, 0xc0
jae 0x1800a874f
mov edx, 0x5d
nop
mov eax, edx
sub eax, 0x5d
je 0x1800a873c
cmp eax, 1
jne 0x1800a8743
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcccf0]
mov byte [r15 + rcx], al
jmp 0x1800a8743
add dword [r14], 0xffffff60
inc edx
cmp edx, 0x5f
jb 0x1800a8710
jmp 0x1800a88aa
add ecx, 0xfffffa30
cmp ecx, 0x1f
ja 0x1800a8778
mov dword [r14], ecx
mov eax, ecx
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xccd10]
mov byte [r15 + rcx], al
jmp 0x1800a88aa
mov eax, 0x11a
nop dword [rax]
cmp eax, 0x11a
jne 0x1800a889d
mov ecx, dword [r14]
sub ecx, 0xd7
je 0x1800a8890
sub ecx, 0x20
je 0x1800a8880
sub ecx, 0x1f17
je 0x1800a87bb
sub ecx, 1
je 0x1800a87f0
cmp ecx, 8
je 0x1800a8818
jmp 0x1800a8831
mov ecx, 0x6a
cmp ecx, 0x6a
je 0x1800a87da
cmp ecx, 0x19ac
je 0x1800a8898
jmp 0x1800a87e2
mov rax, qword [rsi]
mov byte [r15 + rax], 0xfd
add ecx, 0x1942
cmp ecx, 0x3284
jbe 0x1800a87c0
mov ecx, 3
mov eax, ecx
sub eax, 2
je 0x1800a8898
cmp eax, 1
jne 0x1800a8811
mov rax, qword [rsi]
mov byte [r15 + rax], 0xfe
dec ecx
cmp ecx, 1
ja 0x1800a87f5
mov eax, 0x20
nop dword [rax]
cmp eax, 0x20
je 0x1800a886f
add eax, 0x1120
cmp eax, 0x1120
jbe 0x1800a8820
mov ecx, 0xcd
nop word [rax + rax]
mov eax, ecx
sub eax, 0xcd
je 0x1800a8857
cmp eax, 0x3c
je 0x1800a8898
jmp 0x1800a885f
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
add ecx, 0x3c
cmp ecx, 0x145
jb 0x1800a8840
jmp 0x1800a8898
mov rax, qword [rsi]
mov byte [r15 + rax], 0xdf
jmp 0x1800a8898
mov rax, qword [rsi]
mov byte [r15 + rax], 0xba
jmp 0x1800a8898
mov rax, qword [rsi]
mov byte [r15 + rax], IUnknown_GetWindow
mov eax, 0x11a
inc eax
cmp eax, 0x11b
jb 0x1800a8780
dec r8d
cmp r8d, 0xd3
ja 0x1800a86d0
mov r8d, 0xa0
mov eax, r8d
sub eax, 0xa0
je 0x1800a88dc
cmp eax, 1
je case.0x1800a5041.289
jmp 0x1800a8a8b
mov ecx, dword [r14]
cmp ecx, 0xd0
jae 0x1800a88f7
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a8a88
cmp ecx, 0x100
jae 0x1800a8955
mov edx, 0x123
nop dword [rax]
nop dword [rax + rax]
mov eax, edx
sub eax, 0x123
je 0x1800a893e
cmp eax, 0x6e
jne 0x1800a8945
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xccd90]
mov byte [r15 + rcx], al
jmp 0x1800a8945
add dword [r14], 0xffffff30
add edx, 0x6e
cmp edx, 0x1ff
jb 0x1800a8910
jmp 0x1800a8a88
mov ecx, 0x33
nop word [rax + rax]
mov eax, ecx
sub eax, 0x33
je 0x1800a8979
cmp eax, 1
je 0x1800a8a78
jmp 0x1800a8a7d
mov eax, dword [r14]
add eax, 0xfffffee2
cmp eax, 0x41
ja case.0x1800a899e.292
movzx eax, byte [r9 + rax + 0xab6f8]
mov ecx, dword [r9 + rax*4 + 0xab6dc]
add rcx, r9
jmp rcx
mov rax, qword [rsi]
mov byte [r15 + rax], 0xd0
jmp 0x1800a8a78
mov ecx, 0x103
cmp ecx, 0x103
je 0x1800a89cf
cmp ecx, 0x2369
je 0x1800a8a78
jmp 0x1800a89d7
mov rax, qword [rsi]
mov byte [r15 + rax], 0xf0
add ecx, 0x2266
cmp ecx, 0x44cc
jbe 0x1800a89b2
mov ecx, 0x48
nop word [rax + rax]
cmp ecx, 0x48
je 0x1800a8a03
cmp ecx, 0x5f
je 0x1800a8a78
jmp 0x1800a8a0b
mov rax, qword [rsi]
mov byte [r15 + rax], 0xdd
add ecx, 0x17
cmp ecx, 0x76
jb 0x1800a89f0
mov eax, 0x10c
cmp eax, 0x10c
je 0x1800a8a4b
add eax, 0x7540
cmp eax, 0x7540
jbe 0x1800a8a18
mov eax, 0x59
cmp eax, 0x59
je 0x1800a8a58
add eax, 0x5e
cmp eax, r11d
jb 0x1800a8a30
mov rax, qword [rsi]
mov byte [r15 + rax], 0xfe
jmp 0x1800a8a78
mov rax, qword [rsi]
mov byte [r15 + rax], 0xfd
jmp 0x1800a8a78
mov rax, qword [rsi]
mov byte [r15 + rax], 0xde
jmp 0x1800a8a78
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
mov ecx, 0x34
inc ecx
cmp ecx, 0x35
jb 0x1800a8960
inc qword [rsi]
inc r8d
cmp r8d, 0xa2
jb 0x1800a88c0
mov r8d, 0x66
mov eax, r8d
sub eax, 0x66
je 0x1800a8abb
cmp eax, 1
je 0x1800a6023
jmp 0x1800a8dda
mov ecx, dword [r14]
cmp ecx, 0xa1
jae 0x1800a8ad6
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a8dda
lea eax, [rcx - 0xc0]
cmp eax, 0x8f
ja 0x1800a8b37
mov edx, 0x65
nop dword [rax + rax]
cmp edx, 0x65
je 0x1800a8b1d
cmp edx, 0x126
jne 0x1800a8b24
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcbf80]
mov byte [r15 + rcx], al
jmp 0x1800a8b24
add dword [r14], 0xffffff40
add edx, 0xc1
cmp edx, reloc.SHLWAPI.dll_SHLoadIndirectString
jb 0x1800a8af0
jmp 0x1800a8dda
lea eax, [rcx - 0x160]
cmp eax, 0xf
ja 0x1800a8b94
mov edx, 0xfd
nop word [rax + rax]
mov eax, edx
sub eax, 0xfd
je 0x1800a8b7e
cmp eax, 1
jne 0x1800a8b85
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcc010]
mov byte [r15 + rcx], al
jmp 0x1800a8b85
add dword [r14], 0xfffffea0
inc edx
cmp edx, 0xff
jb 0x1800a8b50
jmp 0x1800a8dda
mov eax, 0x107
nop dword [rax]
cmp eax, 0x107
jne 0x1800a8dcd
mov eax, dword [r14]
cmp eax, 0x172
ja 0x1800a8cf3
je 0x1800a8c9d
sub eax, 0xa7
je 0x1800a8bee
sub eax, 6
je 0x1800a8c23
sub eax, 3
je 0x1800a8c5d
cmp eax, 7
je 0x1800a8c90
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
jmp 0x1800a8dc8
mov ecx, 0x39
cmp ecx, 0x39
je 0x1800a8c0d
cmp ecx, 0x474
je 0x1800a8dc8
jmp 0x1800a8c15
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa7
add ecx, 0x43b
cmp ecx, 0x876
jbe 0x1800a8bf3
mov ecx, 0xc1
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xc1
je 0x1800a8c4b
cmp eax, 1
je 0x1800a8dc8
jmp 0x1800a8c53
mov rax, qword [rsi]
mov byte [r15 + rax], 0xad
inc ecx
cmp ecx, 0xc3
jb 0x1800a8c30
mov ecx, IUnknown_GetWindow
mov eax, ecx
sub eax, 0xa7
je 0x1800a8dc8
cmp eax, 1
jne 0x1800a8c80
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb0
dec ecx
cmp ecx, 0xa6
ja 0x1800a8c62
nop word [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb7
jmp 0x1800a8dc8
mov ecx, 0xb9
cmp ecx, 0xb9
je 0x1800a8cbf
cmp ecx, 0x1fcc
je 0x1800a8dc8
jmp 0x1800a8cc7
mov rax, qword [rsi]
mov byte [r15 + rax], 0xd9
add ecx, 0x1f13
cmp ecx, 0x3e26
jbe 0x1800a8ca2
mov ecx, 0x27
nop word [rax + rax]
cmp ecx, 0x27
je 0x1800a8d5a
cmp ecx, 0xe5
je 0x1800a8dc8
jmp 0x1800a8d62
sub eax, 0x173
je 0x1800a8cd5
sub eax, 0xa
je 0x1800a8d74
sub eax, 1
je 0x1800a8dc0
cmp eax, 0x1e97
jne 0x1800a8d50
mov ecx, 0x3d
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x3d
je 0x1800a8d39
cmp eax, 1
je 0x1800a8dc8
jmp 0x1800a8d41
mov rax, qword [rsi]
mov byte [r15 + rax], 0xbd
inc ecx
cmp ecx, 0x3f
jb 0x1800a8d20
nop dword [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
jmp 0x1800a8dc8
mov rax, qword [rsi]
mov byte [r15 + rax], 0xf9
add ecx, 0xbe
cmp ecx, 0x1a3
jb 0x1800a8ce0
mov ecx, 0x8e
nop dword [rax]
cmp ecx, 0x8e
je 0x1800a8d9d
cmp ecx, 0x3f3c
je 0x1800a8dc8
jmp 0x1800a8da5
mov rax, qword [rsi]
mov byte [r15 + rax], reloc.SHLWAPI.dll_IUnknown_GetWindow
add ecx, 0x3eae
cmp ecx, 0x7d5c
jbe 0x1800a8d80
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0xbc
mov eax, 0x107
inc eax
cmp eax, 0x108
jb 0x1800a8ba0
inc r8d
cmp r8d, 0x68
jb 0x1800a8aa1
mov r8d, 0xdd
nop dword [rax]
cmp r8d, 0xdd
je 0x1800a8e0c
cmp r8d, 0x2893
je case.0x1800a5041.289
jmp 0x1800a8e65
mov ecx, dword [r14]
mov rdx, qword [rsi]
cmp ecx, 0xa1
jae 0x1800a8e27
mov byte [r15 + rdx], cl
jmp 0x1800a8e62
lea eax, [rcx - 0xe01]
cmp eax, 0x39
ja 0x1800a8e42
sub cl, 0x60
mov byte [r15 + rdx], cl
jmp 0x1800a8e62
lea eax, [rcx - 0xe3f]
cmp eax, 0x1c
ja 0x1800a8e5d
sub cl, 0x60
mov byte [r15 + rdx], cl
jmp 0x1800a8e62
mov byte [r15 + rdx], 0x1a
inc qword [rsi]
add r8d, 0x27b6
cmp r8d, 0x4f6c
jbe 0x1800a8df0
mov edx, 0xb5
nop
cmp edx, 0xb5
je 0x1800a8eab
cmp edx, 0x892a
je 0x1800a8ea6
cmp edx, 0x1119f
je case.0x1800a5041.289
jmp 0x1800a8f1d
inc qword [rsi]
jmp 0x1800a8f1d
mov ecx, dword [r14]
cmp ecx, 0xa0
jae 0x1800a8ec3
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a8f1d
cmp ecx, 0x180
jae 0x1800a8eee
add dword [r14], 0xffffff60
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcc0e0]
mov byte [r15 + rcx], al
jmp 0x1800a8f1d
lea eax, [rcx - 0x2018]
cmp eax, 7
ja 0x1800a8f15
mov dword [r14], eax
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcbeb8]
mov byte [r15 + rcx], al
jmp 0x1800a8f1d
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
add edx, 0x8875
cmp edx, 0x1995f
jbe 0x1800a8e80
mov r8d, PathMakeUniqueName
cmp r8d, 0x2d
je 0x1800a8f51
cmp r8d, 0x681
je 0x1800a6023
jmp 0x1800a953b
mov ecx, dword [r14]
cmp ecx, 0xa1
jae 0x1800a8f6c
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a953b
lea eax, [rcx - 0xc0]
cmp eax, 0x3f
ja 0x1800a8f9a
add dword [r14], 0xffffff40
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcc280]
mov byte [r15 + rcx], al
jmp 0x1800a953b
lea eax, [rcx - 0x170]
cmp eax, 7
ja 0x1800a8fc1
mov dword [r14], eax
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcc2c0]
mov byte [r15 + rcx], al
jmp 0x1800a953b
lea eax, [rcx - 0x1e80]
cmp eax, 7
ja 0x1800a9015
mov edx, 0x9a
mov eax, edx
sub eax, 0x99
je 0x1800a8ff3
cmp eax, 1
jne 0x1800a9006
add dword [r14], 0xffffe180
jmp 0x1800a9006
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcc2c8]
mov byte [r15 + rcx], al
dec edx
cmp edx, 0x98
ja 0x1800a8fd1
jmp 0x1800a953b
mov ecx, 0xe6
nop word [rax + rax]
mov eax, ecx
sub eax, 0xe6
je 0x1800a903b
cmp eax, 1
je 0x1800a9528
jmp 0x1800a952d
mov eax, dword [r14]
cmp eax, 0x1e02
ja 0x1800a92a1
je 0x1800a921a
add eax, 0xffffff5d
cmp eax, 0xd5
ja case.0x1800a92c5.7698
movzx eax, byte [r9 + rax + 0xab76c]
mov ecx, dword [r9 + rax*4 + 0xab73c]
add rcx, r9
jmp rcx
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa3
jmp 0x1800a9528
mov ecx, 0x126
cmp ecx, 0x126
je 0x1800a90af
cmp ecx, 0x9d56
je 0x1800a9528
jmp 0x1800a90b7
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa7
add ecx, 0x9c30
cmp ecx, 0x13860
jbe 0x1800a9092
mov ecx, 0x23
nop word [rax + rax]
mov eax, ecx
sub eax, 0x23
je 0x1800a90e9
cmp eax, 0x63
je 0x1800a9528
jmp 0x1800a90f1
mov rax, qword [rsi]
mov byte [r15 + rax], IUnknown_GetWindow
add ecx, 0x63
cmp ecx, 0xe9
jb 0x1800a90d0
mov ecx, 0x18
mov eax, ecx
sub eax, 0x18
je 0x1800a911a
cmp eax, 1
je 0x1800a9528
jmp 0x1800a9122
mov rax, qword [rsi]
mov byte [r15 + rax], 0xad
inc ecx
cmp ecx, 0x1a
jb 0x1800a9101
nop dword [rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0xae
jmp 0x1800a9528
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb6
jmp 0x1800a9528
mov ecx, 0x6e
mov eax, ecx
sub eax, 0x6e
je 0x1800a916b
cmp eax, 1
je 0x1800a9528
jmp 0x1800a9173
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa4
inc ecx
cmp ecx, 0x70
jb 0x1800a9152
mov eax, 0x7b
nop
cmp eax, 0x7b
je 0x1800a91bb
add eax, 0x488d
cmp eax, 0x488d
jbe 0x1800a9180
mov ecx, 0xfa
nop word [rax + rax]
mov eax, ecx
sub eax, 0xfa
je 0x1800a91c8
cmp eax, 1
je 0x1800a9528
jmp 0x1800a91d0
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa5
jmp 0x1800a9528
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb2
inc ecx
cmp ecx, 0xfc
jb 0x1800a91a0
mov eax, 0xe2
nop
cmp eax, 0xe2
je 0x1800a920d
add eax, 0x8002
cmp eax, 0x8002
jbe 0x1800a91e0
nop word [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0xaf
jmp 0x1800a9528
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb3
jmp 0x1800a9528
mov eax, 0x18
nop
cmp eax, 0x18
je 0x1800a9294
add eax, 0x888
cmp eax, 0x888
jbe 0x1800a9220
mov eax, PathMakeUniqueName
cmp eax, 0x2c
je 0x1800a92c7
add eax, 0x3c
cmp eax, 0x68
jb 0x1800a9236
mov eax, 0xd8
nop dword [rax]
cmp eax, 0xd8
je 0x1800a92d4
sub eax, 0xffffff80
cmp eax, 0x158
jb 0x1800a9250
mov eax, 0x1d
cmp eax, 0x1d
je 0x1800a92e1
add eax, 0xc6
cmp eax, 0xe3
jb 0x1800a9266
mov ecx, SHTestTokenMembership
nop dword [rax]
mov eax, ecx
sub eax, 0xf4
je 0x1800a92ee
cmp eax, 0x51
je 0x1800a9528
jmp 0x1800a92f6
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa1
jmp 0x1800a9528
add eax, 0xffffe1fd
cmp eax, 0xf0
ja case.0x1800a92c5.7698
movzx eax, byte [r9 + rax + 0xab884]
mov ecx, dword [r9 + rax*4 + 0xab844]
add rcx, r9
jmp rcx
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa2
jmp 0x1800a9528
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa6
jmp 0x1800a9528
mov rax, qword [rsi]
mov byte [r15 + rax], IUnknown_GetWindow
jmp 0x1800a9528
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb0
add ecx, 0x51
cmp ecx, 0x196
jb 0x1800a9280
mov ecx, 0x70
nop word [rax + rax]
cmp ecx, 0x70
je 0x1800a932a
cmp ecx, 0x2e60
je 0x1800a9528
jmp 0x1800a9332
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb1
add ecx, 0x2df0
cmp ecx, 0x5be0
jbe 0x1800a9310
mov ecx, 0xed
nop word [rax + rax]
mov eax, ecx
sub eax, 0xed
je 0x1800a936b
cmp eax, 1
je 0x1800a9528
jmp 0x1800a9373
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb4
inc ecx
cmp ecx, 0xef
jb 0x1800a9350
mov eax, 9
cmp eax, 9
je 0x1800a93bd
add eax, 0x98
cmp eax, 0xa1
jb 0x1800a9382
mov ecx, 0x9a
nop dword [rax]
cmp ecx, 0x9a
je 0x1800a93ca
cmp ecx, 0x137
je 0x1800a9528
jmp 0x1800a93d2
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb5
jmp 0x1800a9528
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb7
add ecx, 0x9d
cmp ecx, 0x1d4
jb 0x1800a93a0
mov ecx, 0x26
cmp ecx, 0x26
je 0x1800a93ff
cmp ecx, 0x90e
je 0x1800a9528
jmp 0x1800a9407
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb9
add ecx, 0x8e8
cmp ecx, 0x11d0
jbe 0x1800a93e5
mov ecx, 0x32
nop word [rax + rax]
mov eax, ecx
sub eax, 0x31
je 0x1800a9528
cmp eax, 1
jne 0x1800a943c
mov rax, qword [rsi]
mov byte [r15 + rax], 0xbb
dec ecx
cmp ecx, 0x30
ja 0x1800a9420
mov ecx, 0x81
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x81
je 0x1800a946b
cmp eax, 1
je 0x1800a9528
jmp 0x1800a9473
mov rax, qword [rsi]
mov byte [r15 + rax], 0xbf
inc ecx
cmp ecx, 0x83
jb 0x1800a9450
mov eax, 0x21
cmp eax, 0x21
je 0x1800a94b5
add eax, 0x2f
cmp eax, 0x50
jb 0x1800a9482
mov ecx, 0x27
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x27
je 0x1800a94bf
cmp eax, 1
je 0x1800a9528
jmp 0x1800a94c7
mov rax, qword [rsi]
mov byte [r15 + rax], 0xd7
jmp 0x1800a9528
mov rax, qword [rsi]
mov byte [r15 + rax], 0xf7
inc ecx
cmp ecx, 0x29
jb 0x1800a94a0
nop
mov rax, qword [rsi]
mov byte [r15 + rax], reloc.SHLWAPI.dll_IUnknown_GetWindow
jmp 0x1800a9528
mov ecx, 0x8d
cmp ecx, 0x8d
je 0x1800a94ff
cmp ecx, 0x122
je 0x1800a9528
jmp 0x1800a9507
mov rax, qword [rsi]
mov byte [r15 + rax], 0xbc
add ecx, 0x95
cmp ecx, 0x1b7
jb 0x1800a94e2
nop word [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
mov ecx, 0xe7
inc ecx
cmp ecx, 0xe8
jb 0x1800a9020
add r8d, 0x654
cmp r8d, 0xca8
jbe 0x1800a8f35
mov r8d, 0x9f
nop word [rax + rax]
mov eax, r8d
sub eax, 0x9e
je case.0x1800a5041.289
cmp eax, 1
jne 0x1800a9829
mov ecx, dword [r14]
cmp ecx, 0xa0
jae 0x1800a9592
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a9826
cmp ecx, 0xc0
jae 0x1800a95ed
mov edx, 0x112
cmp edx, 0x112
je 0x1800a95d3
cmp edx, 0xce92
jne 0x1800a95da
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcc310]
mov byte [r15 + rcx], al
jmp 0x1800a95da
add dword [r14], 0xffffff60
add edx, 0xcd80
cmp edx, 0x19b00
jbe 0x1800a95a3
jmp 0x1800a9826
cmp ecx, 0x100
jae 0x1800a9605
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a9826
mov eax, 0x18
nop word [rax + rax]
cmp eax, 0x18
jne 0x1800a9816
mov eax, dword [r14]
cmp eax, 0x178
ja 0x1800a972a
je 0x1800a9710
sub eax, 0x152
je 0x1800a9658
sub eax, 1
je 0x1800a968c
sub eax, 0xd
je 0x1800a96b4
cmp eax, 1
je 0x1800a96ed
jmp 0x1800a97d7
mov ecx, 0x35
nop dword [rax]
mov eax, ecx
sub eax, 0x35
je 0x1800a9679
cmp eax, 0x71
je 0x1800a9811
jmp 0x1800a9681
mov rax, qword [rsi]
mov byte [r15 + rax], 0xbc
add ecx, 0x71
cmp ecx, 0x117
jb 0x1800a9660
mov ecx, 0x39
mov eax, ecx
sub eax, 0x38
je 0x1800a9811
cmp eax, 1
jne 0x1800a96ad
mov rax, qword [rsi]
mov byte [r15 + rax], 0xbd
dec ecx
cmp ecx, 0x37
ja 0x1800a9691
mov ecx, 0xa3
nop dword [rax]
mov eax, ecx
sub eax, 0xa3
je 0x1800a96db
cmp eax, 1
je 0x1800a9811
jmp 0x1800a96e3
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa6
inc ecx
cmp ecx, 0xa5
jb 0x1800a96c0
mov eax, 0x18
cmp eax, 0x18
je 0x1800a971d
add eax, 0x828
cmp eax, 0x828
jbe 0x1800a96f2
nop word [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0xbe
jmp 0x1800a9811
mov rax, qword [rsi]
mov byte [r15 + rax], IUnknown_GetWindow
jmp 0x1800a9811
sub eax, 0x17d
je 0x1800a974e
sub eax, 1
je 0x1800a9781
cmp eax, 0x1f2e
je 0x1800a97a7
jmp 0x1800a97d7
mov ecx, 0x8b
mov eax, ecx
sub eax, 0x8b
je 0x1800a976e
cmp eax, 0x3e
je 0x1800a9811
jmp 0x1800a9776
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb4
add ecx, 0x3e
cmp ecx, 0x107
jb 0x1800a9753
mov eax, 0xfe
nop word [rax + rax]
cmp eax, 0xfe
je 0x1800a9809
add eax, 0x9ec
cmp eax, 0x9ec
jbe 0x1800a9790
mov ecx, 0x57
nop dword [rax]
cmp ecx, 0x57
je 0x1800a97c7
cmp ecx, 0x5a
je 0x1800a9811
jmp 0x1800a97cf
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa4
add ecx, 3
cmp ecx, 0x5d
jb 0x1800a97b0
mov eax, 0xd0
nop dword [rax]
cmp eax, 0xd0
je 0x1800a97fc
add eax, 0x2970
cmp eax, 0x2970
jbe 0x1800a97e0
jmp 0x1800a9811
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
jmp 0x1800a9811
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb8
mov eax, 0x18
add eax, 0x11d0
cmp eax, 0x11d0
jbe 0x1800a9610
inc qword [rsi]
dec r8d
cmp r8d, 0x9d
ja 0x1800a9560
mov r8d, 0xc7
nop
mov eax, r8d
sub eax, 0xc5
je case.0x1800a5041.289
sub eax, 1
je 0x1800a9d64
cmp eax, 1
jne 0x1800a9d67
mov ecx, dword [r14]
cmp ecx, 0xa1
jae 0x1800a987b
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800a9d67
lea eax, [rcx - 0xa8]
cmp eax, 0x5f
ja 0x1800a98da
mov edx, 0xad
nop
cmp edx, 0xad
je 0x1800a98c0
cmp edx, 0x8113
jne 0x1800a98c7
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcc3f0]
mov byte [r15 + rcx], al
jmp 0x1800a98c7
add dword [r14], 0xffffff58
add edx, 0x8066
cmp edx, 0x100cc
jbe 0x1800a9890
jmp 0x1800a9d67
lea eax, [rcx - 0x140]
cmp eax, 7
ja 0x1800a9933
mov edx, 0x12
nop
mov eax, edx
sub eax, 0x12
je 0x1800a991c
cmp eax, 0x7b
jne 0x1800a9923
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcc450]
mov byte [r15 + rcx], al
jmp 0x1800a9923
add dword [r14], 0xfffffec0
add edx, 0x7b
cmp edx, 0x108
jb 0x1800a98f0
jmp 0x1800a9d67
lea eax, [rcx - 0x150]
cmp eax, 7
ja 0x1800a998f
mov edx, 0x63
nop word [rax + rax]
mov eax, edx
sub eax, 0x63
je 0x1800a997c
cmp eax, 1
jne 0x1800a9983
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcc458]
mov byte [r15 + rcx], al
jmp 0x1800a9983
add dword [r14], 0xfffffeb0
inc edx
cmp edx, 0x65
jb 0x1800a9950
jmp 0x1800a9d67
lea eax, [rcx - 0x178]
cmp eax, 7
ja 0x1800a99e7
mov edx, 0xce
mov eax, edx
sub eax, 0xcd
je 0x1800a99c5
cmp eax, 1
jne 0x1800a99d8
add dword [r14], 0xfffffe88
jmp 0x1800a99d8
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcc460]
mov byte [r15 + rcx], al
dec edx
cmp edx, 0xcc
ja 0x1800a99a3
jmp 0x1800a9d67
lea eax, [rcx - 0x218]
cmp eax, 7
ja 0x1800a9a4a
mov edx, SHTestTokenMembership
nop dword [rax + rax]
cmp edx, 0xf2
je 0x1800a9a30
cmp edx, 0x413a
jne 0x1800a9a37
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcc468]
mov byte [r15 + rcx], al
jmp 0x1800a9a37
add dword [r14], 0xfffffde8
add edx, 0x4048
cmp edx, 0x8090
jbe 0x1800a9a00
jmp 0x1800a9d67
mov eax, 0x102
nop
cmp eax, 0x102
jne 0x1800a9d4f
mov eax, dword [r14]
cmp eax, 0x201d
ja 0x1800a9c9d
je 0x1800a9c90
add eax, 0xffffff59
cmp eax, 0xca
ja case.0x1800a9a93.180
movzx eax, byte [r9 + rax + 0xab9b0]
mov ecx, dword [r9 + rax*4 + 0xab978]
add rcx, r9
jmp rcx
mov eax, 0x53
nop word [rax + rax]
cmp eax, 0x53
je 0x1800a9ac0
add eax, 0x70
cmp eax, 0xc3
jb 0x1800a9aa0
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb2
jmp 0x1800a9d4a
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa7
jmp 0x1800a9d4a
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb9
jmp 0x1800a9d4a
mov ecx, 0xee
cmp ecx, 0xee
je 0x1800a9aff
cmp ecx, 0x88aa
je 0x1800a9d4a
jmp 0x1800a9b07
mov rax, qword [rsi]
mov byte [r15 + rax], 0xd0
add ecx, 0x87bc
cmp ecx, 0x10f78
jbe 0x1800a9ae2
nop word [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0xf0
jmp 0x1800a9d4a
mov rax, qword [rsi]
mov byte [r15 + rax], 0xdd
jmp 0x1800a9d4a
mov rax, qword [rsi]
mov byte [r15 + rax], 0xfd
jmp 0x1800a9d4a
mov ecx, 0xdd
cmp ecx, 0xdd
je 0x1800a9b6f
cmp ecx, 0x53bd
je 0x1800a9d4a
jmp 0x1800a9b77
mov rax, qword [rsi]
mov byte [r15 + rax], 0xd7
add ecx, 0x52e0
cmp ecx, 0xa5c0
jbe 0x1800a9b52
mov ecx, 0x87
nop word [rax + rax]
mov eax, ecx
sub eax, 0x87
je 0x1800a9bab
cmp eax, 1
je 0x1800a9d4a
jmp 0x1800a9bb3
mov rax, qword [rsi]
mov byte [r15 + rax], 0xf7
inc ecx
cmp ecx, 0x89
jb 0x1800a9b90
mov ecx, 0x4e
mov eax, ecx
sub eax, 0x4d
je 0x1800a9d4a
cmp eax, 1
jne 0x1800a9bde
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa6
dec ecx
cmp ecx, 0x4c
ja 0x1800a9bc2
mov ecx, 0xb5
nop word [rax + rax]
cmp ecx, 0xb5
je 0x1800a9c0d
cmp ecx, 0x13d
je 0x1800a9d4a
jmp 0x1800a9c15
mov rax, qword [rsi]
mov byte [r15 + rax], IUnknown_GetWindow
add ecx, 0x88
cmp ecx, 0x1c5
jb 0x1800a9bf0
mov eax, 0x123
nop dword [rax + rax]
cmp eax, 0x123
je 0x1800a9c6a
add eax, 0x66
cmp eax, 0x189
jb 0x1800a9c30
mov ecx, 5
nop word [rax + rax]
cmp ecx, 5
je 0x1800a9c77
cmp ecx, 0xb3
je 0x1800a9d4a
jmp 0x1800a9c7f
mov rax, qword [rsi]
mov byte [r15 + rax], 0xd8
jmp 0x1800a9d4a
mov rax, qword [rsi]
mov byte [r15 + rax], 0xf8
add ecx, 0xae
cmp ecx, 0x161
jb 0x1800a9c50
nop dword [rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb5
jmp 0x1800a9d4a
cmp eax, 0x201e
je 0x1800a9cb8
cmp eax, 0x20ac
je 0x1800a9ce7
jmp case.0x1800a9a93.180
mov ecx, PathMakeUniqueName
nop dword [rax]
cmp ecx, 0x2c
je 0x1800a9cd7
cmp ecx, 0x37
je 0x1800a9d4a
jmp 0x1800a9cdf
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa5
add ecx, 0xb
cmp ecx, 0x42
jb 0x1800a9cc0
mov eax, 0xc7
nop dword [rax]
cmp eax, 0xc7
je 0x1800a9d42
add eax, 0x99
cmp eax, 0x160
jb 0x1800a9cf0
mov ecx, 0x110
nop dword [rax]
mov eax, ecx
sub eax, 0x110
je 0x1800a9d2b
cmp eax, 1
je 0x1800a9d4a
jmp 0x1800a9d33
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
inc ecx
cmp ecx, 0x112
jb 0x1800a9d10
jmp 0x1800a9d4a
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa4
mov eax, 0x102
add eax, 0x3a74
cmp eax, 0x3a74
jbe 0x1800a9a50
jmp 0x1800a9d67
inc qword [rsi]
dec r8d
cmp r8d, 0xc4
ja 0x1800a9840
mov r8d, 0xd4
nop dword [rax]
cmp r8d, 0xd4
je 0x1800a9d9f
cmp r8d, 0x82d8
je case.0x1800a5041.289
jmp 0x1800aa4c4
mov ecx, dword [r14]
cmp ecx, 0x80
jae 0x1800a9dba
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800aa4c1
lea eax, [rcx - 0x410]
cmp eax, 0x3f
ja 0x1800a9e0f
mov edx, 0x64
nop
mov eax, edx
sub eax, 0x64
je 0x1800a9dfc
cmp eax, 1
jne 0x1800a9e03
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xccec0]
mov byte [r15 + rcx], al
jmp 0x1800a9e03
add dword [r14], 0xfffffbf0
inc edx
cmp edx, 0x66
jb 0x1800a9dd0
jmp 0x1800aa4c1
lea eax, [rcx - 0x2550]
cmp eax, 0x1f
ja 0x1800a9e67
mov edx, 0xb2
mov eax, edx
sub eax, 0xb1
je 0x1800a9e45
cmp eax, 1
jne 0x1800a9e58
add dword [r14], 0xffffdab0
jmp 0x1800a9e58
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xccf00]
mov byte [r15 + rcx], al
dec edx
cmp edx, 0xb0
ja 0x1800a9e23
jmp 0x1800aa4c1
mov eax, 9
nop dword [rax]
cmp eax, 9
jne 0x1800aa4b6
mov eax, dword [r14]
cmp eax, 0x2500
ja 0x1800aa1a8
je 0x1800aa162
cmp eax, 0x451
ja 0x1800aa007
je 0x1800a9fbd
cmp eax, 0xb2
ja 0x1800a9f2d
je 0x1800a9f20
sub eax, 0xa0
je 0x1800a9ed9
sub eax, 9
je 0x1800a9f00
cmp eax, 7
jne case.0x1800aa1cc.9493
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9c
jmp 0x1800aa4b1
mov eax, 0xdd
nop
cmp eax, 0xdd
je 0x1800a9f0d
add eax, 0xa406
cmp eax, 0xa406
jbe 0x1800a9ee0
nop word [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0xbf
jmp 0x1800aa4b1
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9a
jmp 0x1800aa4b1
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9d
jmp 0x1800aa4b1
sub eax, r11d
je 0x1800a9fb0
sub eax, 0x40
je 0x1800a9f66
cmp eax, 0x30a
je 0x1800a9f90
mov eax, 0xd
nop
cmp eax, 0xd
je 0x1800aa4a9
add eax, 0x41
cmp eax, 0x41
jbe 0x1800a9f50
jmp 0x1800aa4b1
mov eax, 0x88
nop dword [rax + rax]
cmp eax, 0x88
je 0x1800a9f9d
add eax, 0xae
cmp eax, 0x136
jb 0x1800a9f70
nop word [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb3
jmp 0x1800aa4b1
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9f
jmp 0x1800aa4b1
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9e
jmp 0x1800aa4b1
mov eax, 0xf0
cmp eax, 0xf0
je 0x1800a9ffa
add eax, 0x7b
cmp eax, 0x16b
jb 0x1800a9fc2
mov ecx, 0x6a
nop dword [rax]
cmp ecx, 0x6a
je 0x1800aa036
cmp ecx, 0x4f80
je 0x1800aa4b1
jmp 0x1800aa03e
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa3
jmp 0x1800aa4b1
cmp eax, 0x2264
ja 0x1800aa13d
je 0x1800aa097
sub eax, 0x2219
je 0x1800a9fd7
sub eax, 1
je 0x1800aa04c
cmp eax, 0x2e
je 0x1800aa068
jmp case.0x1800aa1cc.9493
mov rax, qword [rsi]
mov byte [r15 + rax], StrCmpNICA
add ecx, 0x4f16
cmp ecx, 0x9e2c
jbe 0x1800a9fe0
mov eax, 0x80
cmp eax, 0x80
je 0x1800aa0bb
add eax, 0x5b00
cmp eax, 0x5b00
jbe 0x1800aa051
mov ecx, 0x20
nop dword [rax]
cmp ecx, 0x20
je 0x1800aa087
cmp ecx, 0x42
je 0x1800aa4b1
jmp 0x1800aa08f
mov rax, qword [rsi]
mov byte [r15 + rax], reloc.SHLWAPI.dll_StrCmpNCA
add ecx, 0x22
cmp ecx, 0x64
jb 0x1800aa070
mov ecx, 0xc0
nop dword [rax]
mov eax, ecx
sub eax, 0xc0
je 0x1800aa0c8
cmp eax, 0x11
je 0x1800aa4b1
jmp 0x1800aa0d0
mov rax, qword [rsi]
mov byte [r15 + rax], StrCmpNICA
jmp 0x1800aa4b1
mov rax, qword [rsi]
mov byte [r15 + rax], StrCmpNICA
add ecx, 0x11
cmp ecx, 0xe2
jb 0x1800aa0a0
mov eax, 0xbf
cmp eax, 0xbf
je 0x1800aa155
add eax, 0x8d03
cmp eax, 0x8d03
jbe 0x1800aa0e0
mov ecx, 0xca
nop dword [rax]
mov eax, ecx
sub eax, 0xc9
je 0x1800aa4b1
cmp eax, 1
jne 0x1800aa11e
mov rax, qword [rsi]
mov byte [r15 + rax], StrCmpNCA
dec ecx
cmp ecx, 0xc8
ja 0x1800aa100
nop dword [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9b
jmp 0x1800aa4b1
sub eax, 0x2265
je 0x1800aa0db
sub eax, 0xbb
je 0x1800aa0f7
cmp eax, 1
je 0x1800aa130
jmp case.0x1800aa1cc.9493
mov rax, qword [rsi]
mov byte [r15 + rax], reloc.SHLWAPI.dll_StrCmpNICA
jmp 0x1800aa4b1
mov eax, 0x11
cmp eax, 0x11
je 0x1800aa19b
add eax, 8
cmp eax, 0x19
jb 0x1800aa167
mov ecx, 0x101
nop dword [rax]
mov eax, ecx
sub eax, 0x101
je 0x1800aa1ce
cmp eax, 0x5c
je 0x1800aa4b1
jmp 0x1800aa1d6
mov rax, qword [rsi]
mov byte [r15 + rax], 0x80
jmp 0x1800aa4b1
add eax, 0xffffdafe
cmp eax, 0x9e
ja case.0x1800aa1cc.9493
movzx eax, byte [r9 + rax + 0xabacc]
mov ecx, dword [r9 + rax*4 + 0xaba7c]
add rcx, r9
jmp rcx
mov rax, qword [rsi]
mov byte [r15 + rax], 0x81
add ecx, 0x5c
cmp ecx, 0x1b9
jb 0x1800aa180
mov ecx, 0xfa
nop word [rax + rax]
mov eax, ecx
sub eax, 0xfa
je 0x1800aa20b
cmp eax, 1
je 0x1800aa4b1
jmp 0x1800aa213
mov rax, qword [rsi]
mov byte [r15 + rax], 0x82
inc ecx
cmp ecx, 0xfc
jb 0x1800aa1f0
nop dword [rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0x83
jmp 0x1800aa4b1
mov ecx, 0x51
mov eax, ecx
sub eax, 0x51
je 0x1800aa24b
cmp eax, 1
je 0x1800aa4b1
jmp 0x1800aa253
mov rax, qword [rsi]
mov byte [r15 + rax], 0x84
inc ecx
cmp ecx, 0x53
jb 0x1800aa232
mov eax, 0x59
nop
cmp eax, 0x59
je 0x1800aa2bd
add eax, 0xd36
cmp eax, 0xd36
jbe 0x1800aa260
mov eax, 0xe4
nop word [rax + rax]
cmp eax, 0xe4
je 0x1800aa2ca
add eax, 0x8b
cmp eax, 0x16f
jb 0x1800aa280
mov ecx, 0x119
nop dword [rax]
cmp ecx, 0x119
je 0x1800aa2d7
cmp ecx, 0x19d
je 0x1800aa4b1
jmp 0x1800aa2df
mov rax, qword [rsi]
mov byte [r15 + rax], 0x85
jmp 0x1800aa4b1
mov rax, qword [rsi]
mov byte [r15 + rax], 0x86
jmp 0x1800aa4b1
mov rax, qword [rsi]
mov byte [r15 + rax], 0x87
add ecx, 0x84
cmp ecx, 0x221
jb 0x1800aa2a0
mov ecx, 0x10e
mov eax, ecx
sub eax, 0x10d
je 0x1800aa4b1
cmp eax, 1
jne 0x1800aa310
mov rax, qword [rsi]
mov byte [r15 + rax], 0x88
dec ecx
cmp ecx, 0x10c
ja 0x1800aa2f2
nop word [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0x89
jmp 0x1800aa4b1
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8a
jmp 0x1800aa4b1
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8b
jmp 0x1800aa4b1
mov ecx, 0xc4
mov eax, ecx
sub eax, 0xc4
je 0x1800aa36d
cmp eax, 1
je 0x1800aa4b1
jmp 0x1800aa375
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8c
inc ecx
cmp ecx, 0xc6
jb 0x1800aa352
mov eax, 0x1c
cmp eax, 0x1c
je 0x1800aa3dd
add eax, 0x79
cmp eax, 0x95
jb 0x1800aa384
mov eax, 0x3c
nop dword [rax]
cmp eax, 0x3c
je 0x1800aa3ea
add eax, 0x618
cmp eax, 0x618
jbe 0x1800aa3a0
mov ecx, 0xde
nop word [rax + rax]
cmp ecx, 0xde
je 0x1800aa3f7
cmp ecx, 0x16b
je 0x1800aa4b1
jmp 0x1800aa3ff
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8d
jmp 0x1800aa4b1
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8e
jmp 0x1800aa4b1
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8f
add ecx, 0x8d
cmp ecx, 0x1f8
jb 0x1800aa3c0
mov eax, 0x85
cmp eax, 0x85
je 0x1800aa44d
add eax, 0x40f1
cmp eax, 0x40f1
jbe 0x1800aa412
mov ecx, 0xdb
nop
cmp ecx, 0xdb
je 0x1800aa45a
cmp ecx, 0x797a
je 0x1800aa4b1
jmp 0x1800aa462
mov rax, qword [rsi]
mov byte [r15 + rax], 0x90
jmp 0x1800aa4b1
mov rax, qword [rsi]
mov byte [r15 + rax], 0x91
add ecx, 0x789f
cmp ecx, 0xf13e
jbe 0x1800aa430
mov rax, qword [rsi]
mov byte [r15 + rax], 0x92
jmp 0x1800aa4b1
mov eax, 0x6d
cmp eax, 0x6d
je 0x1800aa49c
add eax, 0x345f
cmp eax, 0x345f
jbe 0x1800aa482
jmp case.0x1800aa1cc.9493
mov rax, qword [rsi]
mov byte [r15 + rax], StrCmpNCA
jmp 0x1800aa4b1
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
mov eax, 9
inc eax
cmp eax, 0xa
jb 0x1800a9e70
inc qword [rsi]
add r8d, 0x8204
cmp r8d, 0x10408
jbe 0x1800a9d80
mov r8d, 0x5f
nop
cmp r8d, 0x5f
je 0x1800aa4fc
cmp r8d, 0x3219
je case.0x1800a5041.289
jmp 0x1800aa97e
mov ecx, dword [r14]
cmp ecx, 0x80
jae 0x1800aa517
mov rax, qword [rsi]
mov byte [r15 + rax], cl
jmp 0x1800aa97b
lea eax, [rcx - 0x410]
cmp eax, 0x3f
ja 0x1800aa56e
mov edx, 0xa
nop dword [rax + rax]
cmp edx, 0xa
je 0x1800aa55a
cmp edx, 0x33
jne 0x1800aa561
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcd020]
mov byte [r15 + rcx], al
jmp 0x1800aa561
add dword [r14], 0xfffffbf0
add edx, 0x29
cmp edx, 0x5c
jb 0x1800aa530
jmp 0x1800aa97b
lea eax, [rcx - 0x2550]
cmp eax, 0x1f
ja 0x1800aa5c1
mov edx, 0x27
mov eax, edx
sub eax, 0x27
je 0x1800aa5ae
cmp eax, 1
jne 0x1800aa5b5
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcd060]
mov byte [r15 + rcx], al
jmp 0x1800aa5b5
add dword [r14], 0xffffdab0
inc edx
cmp edx, 0x29
jb 0x1800aa582
jmp 0x1800aa97b
mov ecx, 0x87
nop word [rax + rax]
mov eax, ecx
sub eax, 0x87
je 0x1800aa5eb
cmp eax, 1
je 0x1800aa968
jmp 0x1800aa96d
mov eax, dword [r14]
cmp eax, 0x2320
ja 0x1800aaafd
je 0x1800aaa77
cmp eax, 0x401
ja 0x1800aa7c7
je 0x1800aa769
add eax, 0xffffff60
cmp eax, 0x57
ja case.0x1800aabba.9493
movzx eax, byte [r9 + rax + 0xabb88]
mov ecx, dword [r9 + rax*4 + 0xabb6c]
add rcx, r9
jmp rcx
mov eax, 0xe3
nop dword [rax]
cmp eax, 0xe3
je 0x1800aa67d
add eax, 0x73
cmp eax, 0x156
jb 0x1800aa640
mov ecx, 0x128
nop word [rax + rax]
cmp ecx, 0x128
je 0x1800aa68a
cmp ecx, 0xbff0
je 0x1800aa968
jmp 0x1800aa692
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9a
jmp 0x1800aa968
mov rax, qword [rsi]
mov byte [r15 + rax], 0xbf
add ecx, 0xbec8
cmp ecx, 0x17d90
jbe 0x1800aa660
mov ecx, IUnknown_GetWindow
nop word [rax + rax]
mov eax, ecx
sub eax, 0xa9
je 0x1800aa6cb
cmp eax, 0x66
je 0x1800aa968
jmp 0x1800aa6d3
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9c
add ecx, 0x66
cmp ecx, 0x175
jb 0x1800aa6b0
mov ecx, 0x106
mov eax, ecx
sub eax, 0x106
je 0x1800aa6fe
cmp eax, 0x4c
je 0x1800aa968
jmp 0x1800aa706
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9d
add ecx, 0x4c
cmp ecx, 0x19e
jb 0x1800aa6e3
mov ecx, 0xe5
nop word [rax + rax]
mov eax, ecx
sub eax, 0xe5
je 0x1800aa73b
cmp eax, 1
je 0x1800aa968
jmp 0x1800aa743
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9e
inc ecx
cmp ecx, 0xe7
jb 0x1800aa720
mov eax, 0xe6
cmp eax, 0xe6
je 0x1800aa7ad
add eax, 0x86c4
cmp eax, 0x86c4
jbe 0x1800aa752
mov eax, 0x56
nop
cmp eax, 0x56
je 0x1800aa7ba
add eax, 0x1be2
cmp eax, 0x1be2
jbe 0x1800aa770
mov ecx, 0x123
nop word [rax + rax]
cmp ecx, 0x123
je 0x1800aa7fc
cmp ecx, 0x467a
je 0x1800aa968
jmp 0x1800aa804
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9f
jmp 0x1800aa968
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb3
jmp 0x1800aa968
cmp eax, 0x490
ja 0x1800aa92a
je 0x1800aa910
add eax, 0xfffffbfc
cmp eax, 0x53
ja case.0x1800aabba.9493
movzx eax, byte [r9 + rax + 0xabc00]
mov ecx, dword [r9 + rax*4 + 0xabbe0]
add rcx, r9
jmp rcx
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb4
add ecx, 0x4557
cmp ecx, 0x8aae
jbe 0x1800aa790
nop word [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb6
jmp 0x1800aa968
mov ecx, r11d
cmp ecx, r11d
je 0x1800aa84a
cmp ecx, 0x15f
je 0x1800aa968
jmp 0x1800aa852
mov rax, qword [rsi]
mov byte [r15 + rax], 0xb7
add ecx, 0xa8
cmp ecx, 0x207
jb 0x1800aa830
mov ecx, 0xe3
nop word [rax + rax]
cmp ecx, 0xe3
je 0x1800aa88d
cmp ecx, 0x1a2
je 0x1800aa968
jmp 0x1800aa895
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa3
add ecx, 0xbf
cmp ecx, 0x261
jb 0x1800aa870
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa4
jmp 0x1800aa968
mov ecx, 0xe2
nop word [rax + rax]
cmp ecx, 0xe2
je 0x1800aa8dd
cmp ecx, 0x162
je 0x1800aa968
jmp 0x1800aa8e5
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa6
sub ecx, 0xffffff80
cmp ecx, 0x1e2
jb 0x1800aa8c0
mov ecx, 1
cmp ecx, 1
je 0x1800aa91d
add ecx, 0x27
cmp ecx, 0x27
jbe 0x1800aa8f5
nop word [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0xbd
jmp 0x1800aa968
mov rax, qword [rsi]
mov byte [r15 + rax], 0xa7
jmp 0x1800aa968
cmp eax, 0x2248
ja 0x1800aaaca
je 0x1800aaa08
sub eax, 0x491
je 0x1800aaab0
sub eax, 0x1d88
je 0x1800aa9bb
cmp eax, 1
je 0x1800aa9ec
nop word [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
mov ecx, 0x88
inc ecx
cmp ecx, 0x89
jb 0x1800aa5d0
inc qword [rsi]
add r8d, 0x31ba
cmp r8d, 0x6374
jbe 0x1800aa4e0
mov edx, 0x11d
nop word [rax + rax]
mov eax, edx
sub eax, 0x11d
je 0x1800aae4d
cmp eax, 1
je case.0x1800a5041.289
jmp 0x1800ab049
mov ecx, 0x35
cmp ecx, 0x35
je 0x1800aa9d6
cmp ecx, 0xf0
je 0x1800aa968
jmp 0x1800aa9de
mov rax, qword [rsi]
mov byte [r15 + rax], StrCmpNICA
add ecx, 0xbb
cmp ecx, 0x1ab
jb 0x1800aa9c0
mov eax, 0xcd
cmp eax, 0xcd
je 0x1800aaa9c
add eax, 0x80ed
cmp eax, 0x80ed
jbe 0x1800aa9f1
mov eax, 0x7a
nop dword [rax]
cmp eax, 0x7a
je 0x1800aaabd
add eax, 0x69
cmp eax, 0xe3
jb 0x1800aaa10
mov ecx, 0x100
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xff
je 0x1800aa968
cmp eax, 1
jne 0x1800aaa4e
mov rax, qword [rsi]
mov byte [r15 + rax], StrCmpNICA
dec ecx
cmp ecx, 0xfe
ja 0x1800aaa30
mov eax, 0x123
nop dword [rax]
cmp eax, 0x123
je 0x1800aaae3
add eax, 0x6894
cmp eax, 0x6894
jbe 0x1800aaa60
mov eax, 0x11a
nop dword [rax]
cmp eax, 0x11a
je 0x1800aaaf0
add eax, 0x9ea0
cmp eax, 0x9ea0
jbe 0x1800aaa80
jmp 0x1800aab19
mov rax, qword [rsi]
mov byte [r15 + rax], StrCmpNICA
jmp 0x1800aa968
mov rax, qword [rsi]
mov byte [r15 + rax], 0xad
jmp 0x1800aa968
mov rax, qword [rsi]
mov byte [r15 + rax], reloc.SHLWAPI.dll_StrCmpNCA
jmp 0x1800aa968
sub eax, 0x2264
je 0x1800aaa23
cmp eax, 1
je 0x1800aaa58
jmp case.0x1800aabba.9493
mov rax, qword [rsi]
mov byte [r15 + rax], reloc.SHLWAPI.dll_StrCmpNICA
jmp 0x1800aa968
mov rax, qword [rsi]
mov byte [r15 + rax], StrCmpNCA
jmp 0x1800aa968
cmp eax, 0x2500
ja 0x1800aab96
je 0x1800aab4d
cmp eax, 0x2321
jne case.0x1800aabba.9493
mov ecx, 0xf0
nop
mov eax, ecx
sub eax, 0xf0
je 0x1800aab3b
cmp eax, 1
je 0x1800aa968
jmp 0x1800aab43
mov rax, qword [rsi]
mov byte [r15 + rax], 0x9b
inc ecx
cmp ecx, 0xf2
jb 0x1800aab20
mov eax, 0x9c
cmp eax, 0x9c
je 0x1800aab89
add eax, 0x73c8
cmp eax, 0x73c8
jbe 0x1800aab52
mov ecx, 4
nop
mov eax, ecx
sub eax, 4
je 0x1800aabbc
cmp eax, 1
je 0x1800aa968
jmp 0x1800aabc4
mov rax, qword [rsi]
mov byte [r15 + rax], 0x80
jmp 0x1800aa968
add eax, 0xffffdafe
cmp eax, 0x9e
ja case.0x1800aabba.9493
movzx eax, byte [r9 + rax + 0xabca4]
mov ecx, dword [r9 + rax*4 + 0xabc54]
add rcx, r9
jmp rcx
mov rax, qword [rsi]
mov byte [r15 + rax], 0x81
inc ecx
cmp ecx, 6
jb 0x1800aab70
mov ecx, StrCmpNICA
mov eax, ecx
sub eax, 0x95
je 0x1800aa968
cmp eax, 1
jne 0x1800aabee
mov rax, qword [rsi]
mov byte [r15 + rax], 0x82
dec ecx
cmp ecx, 0x94
ja 0x1800aabd0
nop dword [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0x83
jmp 0x1800aa968
mov ecx, r11d
cmp ecx, r11d
je 0x1800aac2a
cmp ecx, 0x171
je 0x1800aa968
jmp 0x1800aac32
mov rax, qword [rsi]
mov byte [r15 + rax], 0x84
add ecx, 0xba
cmp ecx, 0x22b
jb 0x1800aac10
mov rax, qword [rsi]
mov byte [r15 + rax], 0x85
jmp 0x1800aa968
mov ecx, 0x7c
cmp ecx, 0x7c
je 0x1800aac6c
cmp ecx, 0x425c
je 0x1800aa968
jmp 0x1800aac74
mov rax, qword [rsi]
mov byte [r15 + rax], 0x86
add ecx, 0x41e0
cmp ecx, 0x83c0
jbe 0x1800aac52
mov eax, 0x63
cmp eax, 0x63
je 0x1800aacad
add eax, 0x21a5
cmp eax, 0x21a5
jbe 0x1800aac87
nop dword [rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0x88
jmp 0x1800aa968
mov rax, qword [rsi]
mov byte [r15 + rax], 0x87
jmp 0x1800aa968
mov rax, qword [rsi]
mov byte [r15 + rax], 0x89
jmp 0x1800aa968
mov ecx, 0xd2
mov eax, ecx
sub eax, 0xd2
je 0x1800aaced
cmp eax, 0x7e
je 0x1800aa968
jmp 0x1800aacf5
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8a
add ecx, 0x7e
cmp ecx, 0x1ce
jb 0x1800aacd2
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8b
jmp 0x1800aa968
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8c
jmp 0x1800aa968
mov ecx, SHRegGetIntW
mov eax, ecx
sub eax, 0x115
je 0x1800aad3d
cmp eax, 0x3e
je 0x1800aa968
jmp 0x1800aad45
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8d
add ecx, 0x3e
cmp ecx, 0x191
jb 0x1800aad22
mov ecx, 0x5e
mov eax, ecx
sub eax, 0x5d
je 0x1800aa968
cmp eax, 1
jne 0x1800aad71
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8e
dec ecx
cmp ecx, 0x5c
ja 0x1800aad55
mov ecx, 0xec
nop dword [rax]
mov eax, ecx
sub eax, 0xec
je 0x1800aad9b
cmp eax, 1
je 0x1800aa968
jmp 0x1800aada3
mov rax, qword [rsi]
mov byte [r15 + rax], 0x8f
inc ecx
cmp ecx, 0xee
jb 0x1800aad80
nop dword [rax]
mov rax, qword [rsi]
mov byte [r15 + rax], 0x90
jmp 0x1800aa968
mov ecx, 0xb8
mov eax, ecx
sub eax, r11d
je 0x1800aa968
cmp eax, 1
jne 0x1800aadde
mov rax, qword [rsi]
mov byte [r15 + rax], 0x91
dec ecx
cmp ecx, 0xb6
ja 0x1800aadc2
mov ecx, 0xda
nop dword [rax]
cmp ecx, 0xda
je 0x1800aae0d
cmp ecx, 0x8ace
je 0x1800aa968
jmp 0x1800aae15
mov rax, qword [rsi]
mov byte [r15 + rax], 0x92
add ecx, 0x89f4
cmp ecx, 0x113e8
jbe 0x1800aadf0
mov eax, r11d
cmp eax, r11d
je 0x1800aae40
add eax, 0xb0
cmp eax, 0x167
jb 0x1800aae26
jmp case.0x1800aabba.9493
mov rax, qword [rsi]
mov byte [r15 + rax], StrCmpNCA
jmp 0x1800aa968
mov ecx, dword [r14]
cmp ecx, 0x80
jb 0x1800ab03f
cmp ecx, 0xa0
je 0x1800ab03f
lea eax, [rcx - 0xe00]
cmp eax, 0x5f
ja 0x1800aae8f
mov dword [r14], eax
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcde20]
mov byte [r15 + rcx], al
jmp 0x1800ab046
lea eax, [rcx - 0x2018]
cmp eax, 7
ja 0x1800aaebd
add dword [r14], 0xffffdfe8
mov eax, dword [r14]
mov rcx, qword [rsi]
movzx eax, byte [rax + r9 + 0xcde80]
mov byte [r15 + rcx], al
jmp 0x1800ab046
mov eax, StrCmpNICA
cmp eax, 0x98
jne 0x1800ab02d
mov ecx, dword [r14]
sub ecx, 0x2013
je 0x1800aafe7
sub ecx, 1
je 0x1800ab020
sub ecx, 0xe
je 0x1800aaf08
sub ecx, 4
je 0x1800aaf3d
cmp ecx, 0x86
je 0x1800aaf75
jmp 0x1800aafb3
mov ecx, 0xae
nop dword [rax]
mov eax, ecx
sub eax, 0xae
je 0x1800aaf2b
cmp eax, 1
je 0x1800ab028
jmp 0x1800aaf33
mov rax, qword [rsi]
mov byte [r15 + rax], StrCmpNICA
inc ecx
cmp ecx, 0xb0
jb 0x1800aaf10
mov ecx, SHRegGetIntW
cmp ecx, 0x117
je 0x1800aaf5f
cmp ecx, 0xb946
je 0x1800ab028
jmp 0x1800aaf67
mov rax, qword [rsi]
mov byte [r15 + rax], 0x85
add ecx, 0xb82f
cmp ecx, 0x1705e
jbe 0x1800aaf42
mov ecx, 0x122
nop word [rax + rax]
cmp ecx, 0x122
je 0x1800aaf9d
cmp ecx, 0x3ae8
je 0x1800ab028
jmp 0x1800aafa5
mov rax, qword [rsi]
mov byte [r15 + rax], 0x80
add ecx, 0x39c6
cmp ecx, 0x738c
jbe 0x1800aaf80
mov eax, 0x45
nop dword [rax + rax]
cmp eax, 0x45
je 0x1800aafda
add eax, 0x92
cmp eax, 0xd7
jb 0x1800aafc0
jmp 0x1800ab028
mov rax, qword [rsi]
mov byte [r15 + rax], 0x1a
jmp 0x1800ab028
mov ecx, 0x76
nop dword [rax]
mov eax, ecx
sub eax, 0x76
je 0x1800ab009
cmp eax, 1
je 0x1800ab028
jmp 0x1800ab011
mov rax, qword [rsi]
mov byte [r15 + rax], StrCmpNICA
inc ecx
cmp ecx, 0x78
jb 0x1800aaff0
nop dword [rax + rax]
mov rax, qword [rsi]
mov byte [r15 + rax], reloc.SHLWAPI.dll_StrCmpNCA
mov eax, StrCmpNICA
dec eax
cmp eax, 0x97
ja 0x1800aaec2
jmp 0x1800ab046
mov rax, qword [rsi]
mov byte [r15 + rax], cl
inc qword [rsi]
inc edx
cmp edx, 0x11f
jb 0x1800aa9a0
nop word [rax + rax]
mov rax, qword [r10]
lea rdx, [rbp - 0x68]
mov qword [rbp + 0x30], rax
mov r9, r12
mov eax, dword [r14]
mov r8, r15
mov dword [rbp - 0x68], eax
mov ecx, 0x75
lea rax, [rbp + 0x30]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rax
call fcn.180078460
mov ebx, eax
mov r13d, 0x12f
mov qword [rsp + 0x60], rbx
jmp case.0x1800a5041.298
mov eax, dword [r8]
lea r9, str.while_removing_driver_package
mov dword [rsp + 0x28], eax
mov edx, 0x61
mov rax, qword [0x180194fe0]
mov rcx, r12
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x59]
call fcn.1800c8a10
mov r8, qword [rsp + 0x70]
add edi, 4
cmp edi, 8
jbe 0x1800a5940
jmp case.0x1800a5041.298
mov edi, StrCmpNICA
nop word [rax + rax]
cmp edi, 0x96
je 0x1800ab10d
cmp edi, 0x1d4c
je case.0x1800a5041.292
jmp 0x1800ab13f
mov qword [rsp + 0x38], rdx
lea r8, [rbp + 0x40]
xor r9d, r9d
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], r15
mov rcx, r10
mov qword [rsp + 0x20], rdx
lea edx, [r9 + 0x34]
call fcn.1800c0ce0
mov r10, qword [rsp + 0x58]
xor edx, edx
mov dword [rsp + 0x48], eax
add edi, 0x1cb6
cmp edi, 0x396c
jbe 0x1800ab0f0
mov qword [rbp + 0x40], r14
jmp case.0x1800a5041.298
cmp ebx, 1
je case.0x1800a5041.298
mov edi, 0xeb
nop dword [rax]
nop dword [rax + rax]
mov eax, edi
sub eax, 0xea
je case.0x1800a5041.292
cmp eax, 1
jne 0x1800ab1b2
mov rax, qword [0x180194fe0]
lea r9, str.c:gecko34_release32ipcipdlPHttpChannelParent.cpp
mov edx, 0x72
mov qword [rsp + 0x20], rax
mov rcx, r12
lea r8d, [rdx - 0x69]
call fcn.1800c8a10
mov dword [rsp + 0x48], 0xffffffff
dec edi
cmp edi, 0xe9
ja 0x1800ab170
inc r13d
cmp r13d, dword [rsp + 0x68]
jae case.0x1800a5041.292
mov r10, qword [rsp + 0x58]
mov r8, qword [rsp + 0x70]
jmp 0x1800a5007