Function at 0x180049e70
Capabilities:
Encode data using base64
Inspect section memory permissions
Parse credit card information

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3b8]
sub rsp, 0x4b8
mov rax, qword [0x180143ae0]
xor rax, rsp
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x430]
mov r11, rdx
mov r10, qword [rbp + 0x438]
mov ebx, dword [rbp - 0x58]
mov r13d, dword [rsp + 0x70]
mov r12d, dword [rsp + 0x70]
mov qword [rbp - 0x10], rax
mov eax, dword [rbp + 0x420]
mov r14d, eax
mov qword [rbp - 0x30], rdx
xor edx, edx
mov qword [rbp], r9
mov r9, qword [rbp + 0x428]
lea r15d, [rax + 0x18]
mov qword [rbp - 0x38], r8
cmp eax, r15d
mov qword [rbp - 0x68], rcx
mov rax, qword [rbp + 0x100]
mov qword [rsp + 0x78], rax
mov rax, qword [rbp + 0x100]
mov qword [rsp + 0x60], rax
mov qword [rbp - 0x50], r9
mov qword [rbp - 0x40], r10
jae 0x18004a412
movzx eax, word [rsp + 0x50]
mov ecx, dword [rsp + 0x70]
mov rdi, qword [rbp + 0x100]
mov r9d, dword [rsp + 0x70]
mov rsi, qword [rbp + 0x100]
mov dword [rsp + 0x50], eax
movzx eax, byte [rsp + 0x4c]
mov byte [rbp - 0x78], al
mov rax, qword [rbp + 0x100]
mov dword [rsp + 0x44], ecx
mov ecx, dword [rsp + 0x70]
mov dword [rsp + 0x68], ecx
movzx ecx, byte [rsp + 0x4c]
mov qword [rbp + 8], rax
movzx eax, byte [rsp + 0x4c]
mov byte [rsp + 0x58], cl
mov rcx, qword [rbp + 0x100]
mov byte [rsp + 0x59], al
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x48], eax
mov qword [rbp + 0x20], rdi
mov dword [rbp - 0x60], r9d
mov qword [rbp - 8], rcx
jmp 0x180049f86
mov r11, qword [rbp - 0x30]
xor edx, edx
lea eax, [r14 - 0x2d]
lea r8, str.action_inconnue_pour_pragma_pack___ignor
cmp eax, 0x7b
ja case.0x180049fb3.49
lea rdi, [0x180000000]
movzx eax, byte [rdi + rax + 0x4d9dc]
mov ecx, dword [rdi + rax*4 + 0x4d978]
add rcx, rdi
jmp rcx
mov qword [rsp + 0x78], rdx
mov r8d, edx
mov dword [rsp + 0x44], edx
jmp 0x18004a3f0
mov eax, 0x75
mov word [rbp + 0x108], ax
jmp case.0x180049fb3.49
mov qword [rsp + 0x60], rdx
mov dword [rsp + 0x68], edx
jmp case.0x180049fb3.49
mov r8d, dword [rsp + 0x44]
mov r11d, 0x1a
mov dword [rsp + 0x50], r11d
jmp 0x18004a3f5
mov qword [0x180194db8], r8
jmp case.0x180049fb3.49
mov byte [rbp - 0x78], 0
jmp case.0x180049fb3.49
mov qword [rbp + 0x20], rdx
jmp case.0x180049fb3.49
test r10, r10
jne case.0x180049fb3.49
mov edi, 0x81
mov eax, edi
sub eax, 0x81
je 0x18004a03a
cmp eax, 1
je case.0x18004ba09.377
jmp 0x18004a067
mov rax, qword [0x180194da8]
lea r9, str.V176_WeightIdx_WeightIdx
mov rcx, qword [rbp]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x60]
call fcn.1800c8a10
mov ebx, 0xffffffff
mov dword [rbp - 0x58], ebx
inc edi
cmp edi, 0x83
jb 0x18004a026
mov r9d, dword [rbp - 0x60]
jmp case.0x180049fb3.49
mov dword [rbp + 0x10c], 0x720065
jmp case.0x180049fb3.49
mov byte [rbp - 0x54], 0
jmp case.0x180049fb3.49
mov r9d, edx
mov dword [rbp - 0x60], edx
jmp case.0x180049fb3.49
mov qword [rbp + 8], rdx
jmp case.0x180049fb3.49
mov byte [rsp + 0x59], 0
jmp case.0x180049fb3.49
mov byte [rsp + 0x4c], 0
mov byte [rbp - 0x53], 0
jmp case.0x180049fb3.49
mov eax, 0x43
mov word [rbp + 0x104], ax
jmp case.0x180049fb3.49
mov rsi, qword [rbp - 0x50]
jmp case.0x180049fb3.49
mov byte [rsp + 0x58], 0
mov byte [rbp - 0x48], 0
jmp case.0x180049fb3.49
lea rax, str.MediaRouteProvider::TerminateRoute_deserializer
mov qword [0x180194da8], rax
jmp case.0x180049fb3.49
movzx r13d, byte [rsi]
test r13d, r13d
je 0x18004a2e3
movsxd rdi, r12d
nop dword [rax]
mov eax, dword [r10]
inc rsi
lea edx, [rax - 1]
mov dword [r10], edx
test eax, eax
je 0x18004a2e6
cmp r13d, 0x3d
jne 0x18004a198
movzx ecx, byte [rsi]
cmp cl, r13b
je 0x18004a2d3
mov eax, r9d
and eax, 0x80000003
jge 0x18004a147
dec eax
or eax, 0xfffffffc
inc eax
cmp eax, 1
je 0x18004af00
mov rax, qword [rbp]
cmp byte [rax], 0
je 0x18004a2d3
test edx, edx
je 0x18004a2d3
nop word [rax + rax]
movzx ecx, byte [rsi + 1]
inc rsi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isspace]
test eax, eax
jne 0x18004a170
cmp byte [rsi], al
jne 0x18004af00
mov r9d, dword [rbp - 0x60]
xor cl, cl
mov r10, qword [rbp - 0x40]
jmp 0x18004a2d3
mov rax, qword [rbp]
lea rcx, [0x180000000]
movsx edx, byte [r13 + rcx + 0xcbd20]
cmp byte [rax], 0
jne 0x18004a1b9
test dl, dl
js 0x18004a2d0
cmp edx, 0xffffffff
je 0x18004a2d0
cmp edx, 0xfffffffe
je 0x18004af00
mov ecx, r9d
and ecx, 0x80000003
jge 0x18004a1dd
dec ecx
or ecx, 0xfffffffc
inc ecx
test ecx, ecx
je 0x18004a1f9
sub ecx, 1
je 0x18004a22e
sub ecx, 1
je 0x18004a263
cmp ecx, 1
je 0x18004a2a1
jmp 0x18004a2c3
mov ecx, 0xd2
nop
cmp ecx, 0xd2
je 0x18004a216
cmp ecx, 0x193
je 0x18004a2c3
jmp 0x18004a220
movzx eax, dl
shl al, 2
mov byte [rdi + r11], al
add ecx, 0xc1
cmp ecx, 0x254
jb 0x18004a200
mov ecx, 0x100
mov eax, ecx
sub eax, 0x100
je 0x18004a24a
cmp eax, 1
jne 0x18004a259
shl dl, 4
mov byte [rdi + r11], dl
jmp 0x18004a2c3
mov eax, edx
inc r12d
sar eax, 4
or byte [rdi + r11], al
inc rdi
inc ecx
cmp ecx, 0x102
jb 0x18004a233
mov ecx, 0x87
cmp ecx, 0x87
je 0x18004a27a
cmp ecx, 0x123
je 0x18004a2c3
jmp 0x18004a293
mov eax, edx
inc r12d
sar eax, 2
or byte [rdi + r11], al
inc rdi
movzx eax, dl
shl al, 6
mov byte [rdi + r11], al
add ecx, 0x9c
cmp ecx, 0x1bf
jb 0x18004a268
mov eax, 0x16
cmp eax, 0x16
je 0x18004a2b9
add eax, 0x554
cmp eax, 0x554
jbe 0x18004a2a6
jmp 0x18004a2c3
or byte [rdi + r11], dl
inc r12d
inc rdi
inc r9d
mov r14d, 0x30
mov dword [rbp - 0x60], r9d
movzx ecx, byte [rsi]
mov r11, qword [rbp - 0x30]
movzx r13d, cl
test cl, cl
jne 0x18004a110
inc rsi
mov r11d, dword [rsp + 0x50]
mov edx, r12d
mov r8d, dword [rsp + 0x44]
mov dword [rsp + 0x48], edx
jmp 0x18004a3f9
cmp qword [r11], 0x7fffffff
jbe 0x18004a360
mov edi, 0x81
nop word [rax + rax]
mov eax, edi
sub eax, 0x81
je 0x18004a324
cmp eax, 0x1f
je case.0x18004ba09.377
jmp 0x18004a351
mov rax, qword [0x180194da8]
lea r9, str.ATL.CComPtr_IPsLookupConstantSetRelationMetadata_.
mov rcx, qword [rbp]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x5d]
call fcn.1800c8a10
mov ebx, 0xffffffff
mov dword [rbp - 0x58], ebx
add edi, 0x1f
cmp edi, 0xbf
jb 0x18004a310
mov r9d, dword [rbp - 0x60]
cmp qword [rbp - 0x10], 0
jne case.0x180049fb3.49
mov edi, 0x35
mov eax, edi
sub eax, 0x34
je case.0x18004ba09.377
cmp eax, 1
jne 0x18004a3ad
mov rax, qword [0x180194da8]
lea r9, str.policy_value_validation_issues
mov rcx, qword [rbp]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x60]
call fcn.1800c8a10
mov ebx, 0xffffffff
mov dword [rbp - 0x58], ebx
dec edi
cmp edi, 0x33
ja 0x18004a370
mov r9d, dword [rbp - 0x60]
jmp case.0x180049fb3.49
mov r12d, edx
jmp case.0x180049fb3.49
mov eax, 0x73
mov word [rbp + 0x10a], ax
jmp case.0x180049fb3.49
mov dword [rbp + 0x100], 0x44746547
jmp case.0x180049fb3.49
lea rax, str.vcs_tpssplug2_src_tpsscallbacks_handlers.cpp
mov qword [rbp - 8], rdx
mov qword [0x180194db0], rax
mov r8d, dword [rsp + 0x44]
mov r11d, dword [rsp + 0x50]
mov edx, dword [rsp + 0x48]
mov r10, qword [rbp - 0x40]
inc r14d
cmp r14d, r15d
jb 0x180049f80
mov edi, dword [rbp - 0x60]
mov r9, qword [rbp - 0x50]
jmp 0x18004a479
mov eax, dword [rsp + 0x70]
movzx r11d, word [rsp + 0x50]
mov rcx, qword [rbp + 0x100]
mov r8d, dword [rsp + 0x70]
mov edi, dword [rsp + 0x70]
mov edx, dword [rsp + 0x70]
mov dword [rsp + 0x68], eax
movzx eax, byte [rsp + 0x4c]
mov byte [rbp - 0x78], al
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 8], rax
movzx eax, byte [rsp + 0x4c]
mov byte [rsp + 0x59], al
movzx eax, byte [rsp + 0x4c]
mov byte [rsp + 0x58], al
mov dword [rsp + 0x44], r8d
mov dword [rsp + 0x50], r11d
mov dword [rbp - 0x60], edi
mov dword [rsp + 0x48], edx
mov qword [rbp - 8], rcx
mov ecx, dword [rbp + 0x420]
mov esi, ecx
mov dword [rsp + 0x70], ecx
lea eax, [rcx - 0x18]
cmp ecx, eax
movzx eax, byte [rsp + 0x4c]
mov dword [rbp + 0x14], eax
movzx eax, byte [rsp + 0x4c]
mov dword [rbp + 0x10], eax
jbe 0x18004b177
movzx ecx, byte [rsp + 0x4c]
xor r14d, r14d
mov rax, qword [rbp + 0x100]
movsxd r15, edx
mov rdx, qword [rbp + 0x100]
mov byte [rsp + 0x40], cl
mov ecx, esi
mov qword [rbp - 0x70], rdx
mov qword [rbp - 0x80], rax
lea eax, [rsi - 0x29]
movsxd r8, r12d
cmp eax, 0x7c
ja case.default.0x18004a4ef
lea rdx, [0x180000000]
movzx eax, byte [rdx + rax + 0x4dabc]
mov ecx, dword [rdx + rax*4 + 0x4da58]
add rcx, rdx
jmp rcx
mov r9d, 0x78
mov word [rbp + 0x11c], r14w
lea r8, [rbp + 0x100]
xor ecx, ecx
lea rdx, [rbp + 0x108]
call fcn.180097890
mov r10, qword [rbp - 0x40]
mov rdx, rax
mov r11d, dword [rsp + 0x50]
mov qword [rbp - 0x70], rax
jmp 0x18004a588
cmp qword [rbp], 0
jne case.0x18004a4ef.65
mov edi, 0xdc
mov eax, edi
sub eax, 0xdb
je case.0x18004ba09.377
cmp eax, 1
jne 0x18004a571
mov rax, qword [0x180194db0]
lea r9, str._s_is_an_invalid_number
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x60]
call fcn.1800c8a10
mov ebx, 0xffffffff
mov dword [rbp - 0x58], ebx
dec edi
cmp edi, 0xda
ja 0x18004a532
mov r11d, dword [rsp + 0x50]
mov r10, qword [rbp - 0x40]
mov rdx, qword [rbp - 0x70]
mov r9, qword [rbp - 0x80]
movzx edi, byte [rsp + 0x40]
mov ecx, dword [rbp + 0x420]
dec esi
lea eax, [rcx - 0x18]
mov dword [rsp + 0x70], esi
cmp esi, eax
jbe 0x18004b170
mov edi, dword [rbp - 0x60]
mov r9, qword [rbp - 0x50]
jmp 0x18004a4c7
mov byte [rbp + 0x14], 0
mov byte [rbp + 0x10], 0
jmp case.0x18004a4ef.65
mov dword [rbp + 0x28], r14d
jmp case.0x18004a4ef.65
mov eax, 0x6c
mov word [rbp + 0x11a], ax
jmp case.0x18004a4ef.65
mov rax, qword [rbp - 0x30]
cmp qword [rax], 0x7fffffff
jbe 0x18004a633
mov edi, 0x37
cmp edi, 0x37
je 0x18004a5fb
cmp edi, 0xdb
jne 0x18004a620
mov eax, 0xffffffff
jmp 0x18004d953
mov rax, qword [0x180194db8]
lea r9, str.QSslSocket:_cannot_call_unresolved_function_BIO_write
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x5d]
call fcn.1800c8a10
add edi, 0xa4
cmp edi, 0x17f
jb 0x18004a5e4
mov r11d, dword [rsp + 0x50]
cmp qword [rbp - 0x10], 0
jne 0x18004a580
mov edi, 0xa7
mov eax, edi
sub eax, 0xa7
je 0x18004a657
cmp eax, 1
je case.0x18004ba09.377
jmp 0x18004a684
mov rax, qword [0x180194db8]
lea r9, str.GNUTLS_PSK_SHA_3DES_EDE_CBC_SHA1
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x60]
call fcn.1800c8a10
mov ebx, 0xffffffff
mov dword [rbp - 0x58], ebx
inc edi
cmp edi, 0xa9
jb 0x18004a643
jmp 0x18004a57b
mov rax, qword [rbp - 0x30]
cmp qword [rax], 0x7fffffff
jbe 0x18004a6ed
mov edi, 0xd7
mov eax, edi
sub eax, 0xd7
je 0x18004a6b9
cmp eax, 1
je 0x18004a5f1
jmp 0x18004a6de
mov rax, qword [0x180194db0]
lea r9, str.Relocatable_external_references__non_relocatable_code
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x5d]
call fcn.1800c8a10
inc edi
cmp edi, 0xd9
jb 0x18004a6a5
mov r11d, dword [rsp + 0x50]
cmp qword [rbp - 0x10], 0
jne 0x18004a580
mov edi, 0xbf
nop dword [rax]
cmp edi, 0xbf
je 0x18004a716
cmp edi, 0x140
je case.0x18004ba09.377
jmp 0x18004a743
mov rax, qword [0x180194db0]
lea r9, str.It_does_not_contain_a_public_key
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x60]
call fcn.1800c8a10
mov ebx, 0xffffffff
mov dword [rbp - 0x58], ebx
add edi, 0x81
cmp edi, 0x1c1
jb 0x18004a700
jmp 0x18004a57b
mov rdx, qword [rbp - 0x70]
mov r9, r14
mov qword [rbp - 0x80], r14
jmp 0x18004a58c
mov rax, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x10]
mov rax, qword [rax]
cmp qword [rcx], rax
jb case.0x18004a4ef.65
mov edi, 0x21
nop
cmp edi, 0x21
je 0x18004a7a5
cmp edi, 0x187e
je 0x18004a79b
cmp edi, 0x30db
je case.0x18004ba09.377
jmp 0x18004a7ca
mov ebx, 0xffffffff
mov dword [rbp - 0x58], ebx
jmp 0x18004a7ca
mov rax, qword [0x180194da8]
lea r9, str.ResidentTextureLinkClicked
mov rcx, qword [rbp]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x5c]
call fcn.1800c8a10
add edi, 0x185d
cmp edi, 0x4917
jbe 0x18004a780
jmp 0x18004a57b
mov dword [rbp + 0x116], 0x6c0064
jmp case.0x18004a4ef.65
mov rax, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x10]
mov rax, qword [rax]
cmp qword [rcx], rax
jb 0x18004a858
mov edi, StrCmpNICA
mov eax, edi
sub eax, 0x96
je 0x18004a824
sub eax, 1
je 0x18004a81a
cmp eax, 1
je case.0x18004ba09.377
jmp 0x18004a849
mov ebx, 0xffffffff
mov dword [rbp - 0x58], ebx
jmp 0x18004a849
mov rax, qword [0x180194db8]
lea r9, str.__builtin_ia32_vpermt2varqi128_mask
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x5c]
call fcn.1800c8a10
inc edi
cmp edi, 0x99
jb 0x18004a801
mov r11d, dword [rsp + 0x50]
mov rax, qword [rbp]
cmp byte [rax], 2
jbe 0x18004a580
mov edi, 0xe6
nop word [rax + rax]
mov eax, edi
sub eax, 0xe6
je 0x18004a884
cmp eax, 1
je case.0x18004ba09.377
jmp 0x18004a8b1
mov rax, qword [0x180194db8]
lea r9, str.WebFont.MissedCache.DownloadTime.1.10KBTo50KB
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x5a]
call fcn.1800c8a10
mov ebx, 0xffffffff
mov dword [rbp - 0x58], ebx
inc edi
cmp edi, 0xe8
jb 0x18004a870
jmp 0x18004a57b
mov ecx, dword [r9]
cmp ecx, 0x80
jae 0x18004a8e4
mov rax, qword [rbp - 0x10]
movzx r11d, cx
mov dword [rsp + 0x50], r11d
mov rax, qword [rax]
mov byte [r10 + rax], r11b
jmp case.0x18004a4ef.65
cmp ecx, 0x100
jae 0x18004a910
lea eax, [rcx - 0x80]
mov dword [r9], eax
movzx r11d, word [rdx + rax*2 + 0x116490]
mov rax, qword [rbp - 0x10]
mov dword [rsp + 0x50], r11d
mov rax, qword [rax]
mov byte [r10 + rax], r11b
jmp case.0x18004a4ef.65
lea eax, [rcx - 0x2c0]
cmp eax, 0x13f
ja 0x18004a965
mov ecx, reloc.SHLWAPI.dll_IUnknown_GetWindow
mov eax, ecx
sub eax, 0xac
je 0x18004a93e
cmp eax, 0x40
jne 0x18004a945
mov eax, dword [r9]
movzx r11d, word [rdx + rax*2 + 0x116590]
jmp 0x18004a945
add dword [r9], 0xfffffd40
add ecx, 0x40
cmp ecx, 0x12c
jb 0x18004a922
mov rax, qword [rbp - 0x10]
mov dword [rsp + 0x50], r11d
mov rax, qword [rax]
mov byte [r10 + rax], r11b
jmp case.0x18004a4ef.65
lea eax, [rcx - 0x2000]
cmp eax, 0x2ff
ja 0x18004a9bf
mov ecx, 0x100
cmp ecx, 0x100
je 0x18004a995
cmp ecx, 0xaf00
jne 0x18004a99c
mov eax, dword [r9]
movzx r11d, word [rdx + rax*2 + 0x116810]
jmp 0x18004a99c
add dword [r9], 0xffffe000
add ecx, 0xae00
cmp ecx, 0x15c00
jbe 0x18004a977
mov rax, qword [rbp - 0x10]
mov dword [rsp + 0x50], r11d
mov rax, qword [rax]
mov byte [r10 + rax], r11b
jmp case.0x18004a4ef.65
lea eax, [rcx - 0x2500]
cmp eax, 0x17f
ja 0x18004aa19
mov ecx, 0x109
cmp ecx, 0x109
je 0x18004a9ef
cmp ecx, 0x9f6a
jne 0x18004a9f6
mov eax, dword [r9]
movzx r11d, word [rdx + rax*2 + 0x116e10]
jmp 0x18004a9f6
add dword [r9], 0xffffdb00
add ecx, 0x9e61
cmp ecx, 0x13cc2
jbe 0x18004a9d1
mov rax, qword [rbp - 0x10]
mov dword [rsp + 0x50], r11d
mov rax, qword [rax]
mov byte [r10 + rax], r11b
jmp case.0x18004a4ef.65
lea eax, [rcx - 0x3000]
cmp eax, 0x3ff
ja 0x18004aa4e
add dword [r9], 0xffffd000
mov eax, dword [r9]
movzx r11d, word [rdx + rax*2 + 0x117110]
mov rax, qword [rbp - 0x10]
mov dword [rsp + 0x50], r11d
mov rax, qword [rax]
mov byte [r10 + rax], r11b
jmp case.0x18004a4ef.65
lea eax, [rcx - 0x4e00]
cmp eax, 0x51bf
ja 0x18004aa9c
mov ecx, 9
cmp ecx, 9
je 0x18004aa78
cmp ecx, 0xd
jne 0x18004aa7f
mov eax, dword [r9]
movzx r11d, word [rdx + rax*2 + 0x117910]
jmp 0x18004aa7f
add dword [r9], 0xffffb200
add ecx, 4
cmp ecx, 0x11
jb 0x18004aa60
mov rax, qword [rbp - 0x10]
mov dword [rsp + 0x50], r11d
mov rax, qword [rax]
mov byte [r10 + rax], r11b
jmp case.0x18004a4ef.65
lea eax, [rcx - 0xfa00]
cmp eax, 0x3f
ja 0x18004aaf5
mov ecx, 0x67
nop dword [rax]
cmp ecx, 0x67
je 0x18004aacb
cmp ecx, 0x35ea
jne 0x18004aad2
mov eax, dword [r9]
movzx r11d, word [rdx + rax*2 + 0x121c90]
jmp 0x18004aad2
add dword [r9], 0xffff0600
add ecx, 0x3583
cmp ecx, 0x6b06
jbe 0x18004aab0
mov rax, qword [rbp - 0x10]
mov dword [rsp + 0x50], r11d
mov rax, qword [rax]
mov byte [r10 + rax], r11b
jmp case.0x18004a4ef.65
lea eax, [rcx - 0xfe00]
cmp eax, 0x1ff
ja 0x18004ab39
mov ecx, 0xae
mov eax, ecx
sub eax, 0xae
je 0x18004ab23
cmp eax, 1
jne 0x18004ab2a
mov eax, dword [r9]
movzx r11d, word [rdx + rax*2 + 0x121d10]
jmp 0x18004ab2a
add dword [r9], 0xffff0200
inc ecx
cmp ecx, 0xb0
jb 0x18004ab07
mov dword [rsp + 0x50], r11d
mov rax, qword [rbp - 0x10]
mov rax, qword [rax]
mov byte [r10 + rax], r11b
jmp case.0x18004a4ef.65
mov rax, qword [rbp - 0x38]
mov eax, dword [rax]
and eax, 0xf000000
cmp eax, 0x1000000
je 0x18004ac20
cmp eax, 0x2000000
je 0x18004ac10
cmp eax, 0x3000000
jne 0x18004ab95
mov eax, 0xed
nop word [rax + rax]
cmp eax, 0xed
je 0x18004ac10
add eax, 0x34
cmp eax, 0x121
jb 0x18004ab80
mov edi, 0x7a
nop word [rax + rax]
cmp edi, 0x7a
je 0x18004abc5
cmp edi, 0x1034
je 0x18004abbb
cmp edi, 0x1fee
je case.0x18004ba09.377
jmp 0x18004abea
mov ebx, 0xffffffff
mov dword [rbp - 0x58], ebx
jmp 0x18004abea
mov rax, qword [0x180194db0]
lea r9, str.Cannot_map_shared_memory_buffer
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x59]
call fcn.1800c8a10
add edi, 0xfba
cmp edi, 0x2f2e
jbe 0x18004aba0
mov r11d, dword [rsp + 0x50]
mov esi, 0x59
jmp 0x18004a580
mov byte [rsp + 0x58], 0x3d
mov esi, 0x59
jmp 0x18004a580
mov byte [rsp + 0x58], 0
mov esi, 0x59
jmp 0x18004a580
mov eax, PathMakeUniqueName
mov dword [rbp + 0x110], 0x320033
mov word [rbp + 0x114], ax
jmp case.0x18004a4ef.65
mov rax, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x10]
mov rax, qword [rax]
cmp qword [rcx], rax
jb case.0x18004a4ef.65
mov edi, 0x6a
mov eax, edi
sub eax, 0x69
je 0x18004a5f1
cmp eax, 1
jne 0x18004ac98
mov rax, qword [0x180194db0]
lea r9, str.114_27_28_88_WITH_153_AND_462
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x5c]
call fcn.1800c8a10
dec edi
cmp edi, 0x68
ja 0x18004ac63
jmp 0x18004a57b
xor dil, dil
mov byte [rsp + 0x40], dil
test r10, r10
jne 0x18004b120
mov edi, 0x36
nop word [rax + rax]
cmp edi, 0x36
je 0x18004acd0
cmp edi, 0x45
je 0x18004a5f1
jmp 0x18004acf5
mov rax, qword [0x180194db8]
lea r9, str.VM_DEVICE_HOT_PLUG_ENABLED
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x60]
call fcn.1800c8a10
add edi, 0xf
cmp edi, 0x54
jb 0x18004acc0
jmp 0x18004a57b
mov byte [rbp - 0x58], 1
mov ebx, dword [rbp - 0x58]
jmp case.0x18004a4ef.65
mov rax, qword [rbp - 0x30]
mov byte [rax + r8], 0
jmp case.0x18004a4ef.65
cmp r13d, 0x3d
jne case.0x18004a4ef.65
xor esi, esi
lea r14d, [r13 + 0x59]
nop dword [rax]
cmp esi, 7
ja case.0x18004ad43.6
mov ecx, dword [rdx + rsi*4 + 0x4db3c]
add rcx, rdx
jmp rcx
lea rcx, [rbp + 0x160]
call qword [sym.imp.SHLWAPI.dll_PathSkipRootW]
mov ecx, edi
and ecx, 0x80000003
jge 0x18004ad63
dec ecx
or ecx, 0xfffffffc
inc ecx
sub ecx, 1
je 0x18004ad86
sub ecx, 1
je 0x18004af3c
cmp ecx, 1
je 0x18004af43
lea rdx, [0x180000000]
jmp case.0x18004ad43.6
mov edi, 0xc5
nop dword [rax + rax]
cmp edi, 0x32d
ja 0x18004ae8c
je 0x18004ae7d
cmp edi, 0x1cd
ja 0x18004ae1f
je 0x18004ae06
mov eax, edi
sub eax, 0xc5
je 0x18004aded
sub eax, 0x58
je 0x18004adde
cmp eax, 0x58
jne 0x18004af2a
mov eax, 0x65
mov dword [rbp + 0x12e], 0x430064
mov word [rbp + 0x12c], ax
jmp 0x18004af2a
mov dword [rbp + 0x128], 0x6d0061
jmp 0x18004af2a
mov dword [rbp + 0x120], 0x550024
mov dword [rbp + 0x124], 0x6e006e
jmp 0x18004af2a
mov dword [rbp + 0x132], 0x61006c
mov dword [rbp + 0x136], 0x730073
jmp 0x18004af2a
mov eax, edi
sub eax, 0x225
je 0x18004ae62
sub eax, 0x58
je 0x18004ae47
cmp eax, 0x58
jne 0x18004af2a
mov eax, 0x38
mov word [rbp + 0x146], ax
jmp 0x18004af2a
mov eax, 0x36
mov dword [rbp + 0x140], 0x380061
mov word [rbp + 0x144], ax
jmp 0x18004af2a
mov eax, 0x24
mov dword [rbp + 0x13c], 0x780030
mov word [rbp + 0x13a], ax
jmp 0x18004af2a
mov dword [rbp + 0x148], 0x630032
jmp 0x18004af2a
cmp edi, 0x4e5
ja 0x18004aeef
je 0x18004aee6
mov eax, edi
sub eax, 0x385
je 0x18004aece
sub eax, 0x58
je 0x18004aec2
cmp eax, 0x58
jne 0x18004af2a
xor eax, eax
mov dword [rbp + 0x156], 0x240037
mov word [rbp + 0x15a], ax
jmp 0x18004af2a
mov dword [rbp + 0x152], 0x300031
jmp 0x18004af2a
mov eax, 0x66
mov dword [rbp + 0x14e], 0x240036
mov word [rbp + 0x14c], ax
jmp 0x18004af2a
mov dword [rbp + 0x18], 0x104
jmp 0x18004af2a
mov eax, edi
sub eax, 0x53d
je 0x18004af0c
cmp eax, 0x58
jne 0x18004af2a
nop dword [rax]
mov byte [rbp - 0x58], 0
mov eax, dword [rbp - 0x58]
jmp 0x18004d953
mov r9d, 0x10000000
lea r8, [rbp + 0x18]
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x120]
call qword [sym.imp.SHLWAPI.dll_UrlCanonicalizeW]
add edi, 0x58
cmp edi, 0x5ed
jb 0x18004ad90
mov edi, dword [rbp - 0x60]
inc dword [rsp + 0x48]
inc r15
mov rax, qword [rbp - 0x30]
lea rdx, [0x180000000]
mov byte [r15 + rax], 0
jmp case.0x18004ad43.6
mov dword [rbp + 0x18a], 0x74
jmp case.0x18004ad43.6
mov r8d, 1
lea rdx, [0x180125d04]
lea rcx, [rbp + 0x160]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
lea rdx, [0x180000000]
mov dword [rbp + 0x188], 0x63
jmp case.0x18004ad43.6
mov eax, 0x6c
mov dword [rbp + 0x17c], eax
movabs rax, 0x62006f0020
mov qword [rbp + 0x17e], rax
jmp case.0x18004ad43.6
movsd xmm0, qword [0x180125d08]
mov eax, dword [0x180125d10]
movsd qword [rbp + 0x164], xmm0
movups xmm0, xmmword [str.ted_imp]
mov dword [rbp + 0x16c], eax
movups xmmword [rbp + 0x16e], xmm0
jmp case.0x18004ad43.6
mov dword [rbp + 0x160], 0x45
mov dword [rbp + 0x162], 0x78
jmp case.0x18004ad43.6
mov dword [rbp + 0x184], 0x6a
inc r14d
inc esi
cmp r14d, 0x9e
jb 0x18004ad30
mov esi, dword [rsp + 0x70]
xor r14d, r14d
jmp 0x18004a57b
shr r11w, 8
mov dword [rsp + 0x50], r11d
jmp case.0x18004a4ef.65
mov rax, qword [rbp - 0x10]
mov r9, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x70]
movzx edi, byte [rsp + 0x40]
mov ecx, dword [rbp + 0x420]
test rax, rax
je 0x18004a597
mov dword [rax], r12d
jmp 0x18004a597
test r9, r9
jne 0x18004b0bc
mov edi, 0x83
nop dword [rax]
mov eax, edi
sub eax, 0x83
je 0x18004b083
sub eax, 0x42
je 0x18004b079
cmp eax, 0x42
je case.0x18004ba09.377
jmp 0x18004b0a8
mov ebx, 0xffffffff
mov dword [rbp - 0x58], ebx
jmp 0x18004b0a8
mov rax, qword [0x180194db0]
lea r9, str.AddrBook_push_notify_error.
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x60]
call fcn.1800c8a10
add edi, 0x42
cmp edi, 0x149
jb 0x18004b060
mov r10, qword [rbp - 0x40]
mov r11d, dword [rsp + 0x50]
test r10, r10
jne case.0x18004a4ef.65
mov edi, 0x10f
nop word [rax + rax]
mov eax, edi
sub eax, 0x10f
je 0x18004b0e4
cmp eax, 1
je case.0x18004ba09.377
jmp 0x18004b111
mov rax, qword [0x180194db0]
lea r9, str.get_ExceptionSectionSymbol
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x60]
call fcn.1800c8a10
mov ebx, 0xffffffff
mov dword [rbp - 0x58], ebx
inc edi
cmp edi, 0x111
jb 0x18004b0d0
jmp 0x18004a57b
mov r9, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x70]
jmp 0x18004a591
mov r9, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x70]
movzx edi, byte [rsp + 0x40]
jmp 0x18004a597
mov rax, qword [r9]
mov rdx, qword [r10]
sub rdx, rax
nop dword [rax]
movzx ecx, byte [rax]
cmp cl, byte [rax + rdx]
jne 0x18004b166
inc rax
test cl, cl
jne 0x18004b150
xor eax, eax
jmp 0x18004d953
sbb eax, eax
or eax, 1
jmp 0x18004d953
mov r8d, dword [rsp + 0x44]
jmp 0x18004b197
mov rdx, qword [rbp + 0x100]
mov r9, qword [rbp + 0x100]
movzx edi, byte [rsp + 0x4c]
mov qword [rbp - 0x70], rdx
mov qword [rbp - 0x80], r9
mov byte [rsp + 0x40], dil
mov esi, dword [rbp + 0x420]
mov r14d, esi
lea ecx, [rsi + 0x9f0]
mov dword [rsp + 0x48], ecx
cmp esi, ecx
jae 0x18004c865
mov r15d, dword [rbp + 0x18]
mov r12d, dword [rbp + 0x18]
mov r13d, dword [rbp + 0x18]
nop
mov rdi, qword [rbp - 8]
mov rsi, rdi
cmp r14d, 0x149
ja 0x18004b9cb
je 0x18004b8c8
lea eax, [r14 - 0x45]
cmp eax, 0xec
ja case.default.0x18004ba09
lea r9, [0x180000000]
movzx eax, byte [r9 + rax + 0x4db88]
mov ecx, dword [r9 + rax*4 + 0x4db5c]
add rcx, r9
jmp rcx
mov rax, qword [rbp - 0x38]
mov eax, dword [rax]
and eax, 0xf0000
cmp eax, 0x10000
je 0x18004b27a
cmp eax, 0x20000
je 0x18004b291
mov edi, 0x31
cmp edi, 0x31
je 0x18004b237
cmp edi, 0x2553
je case.0x18004ba09.377
jmp 0x18004b261
mov rax, qword [0x180194db8]
lea r9, str.to_support_this_out_of_the_box.
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x59]
call fcn.1800c8a10
mov ebx, 0xffffffff
add edi, 0x2522
cmp edi, 0x4a44
jbe 0x18004b224
mov r14d, 0x75
jmp case.0x18004ba09.383
mov eax, 0x78
nop
cmp eax, 0x78
je 0x18004b2a7
add eax, 0x28c8
cmp eax, 0x28c8
jbe 0x18004b280
mov rax, qword [str.dvacore::utility::AllocatorManager_6144_66080_925152_0_::Dispose]
mov r14d, 0x75
mov qword [rbp + 0x20], rax
jmp case.0x18004ba09.383
mov rax, qword [str.com_yourkit_runtime_HTTPServer_CloseProtectionOutputStream.class]
mov qword [rbp + 0x20], rax
mov r14d, 0x75
jmp case.0x18004ba09.383
mov rax, qword [rbp - 0x50]
lea r9, [rbp + 0x30]
mov edx, dword [rbp + 0x28]
mov r8d, 0x28
mov rcx, qword [rax + 0x270]
call qword [sym.imp.GDI32.dll_DescribePixelFormat]
test eax, eax
jne case.0x18004ba09.383
mov edi, StrCmpNCA
cmp edi, 0x93
je 0x18004b30a
cmp edi, 0x368d
je 0x18004b306
cmp edi, 0x6c87
je case.0x18004ba09.377
jmp 0x18004b31b
xor ebx, ebx
jmp 0x18004b31b
lea rdx, str.long8___OVERLOADABLE___shuffle2_long16__long16__uint8__
mov ecx, 0x10008
call fcn.18003e500
add edi, 0x35fa
cmp edi, 0xa1ee
jbe 0x18004b2e8
jmp case.0x18004ba09.383
mov rax, qword [rbp - 0x10]
mov rcx, qword [rbp - 0x30]
mov rax, qword [rax]
mov qword [rsp + 0x78], rax
add rax, rdi
cmp rax, qword [rcx]
jbe case.0x18004ba09.383
mov edi, 0x3d
nop
mov eax, edi
sub eax, 0x3d
je 0x18004b362
cmp eax, 1
je 0x18004a5f1
jmp 0x18004b387
mov rax, qword [0x180194db0]
lea r9, str.Failed_to_parse_the_UPN_NameID:__
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x5c]
call fcn.1800c8a10
inc edi
cmp edi, 0x3f
jb 0x18004b350
jmp case.0x18004ba09.383
mov rax, qword [rbp - 0x10]
mov ebx, 1
inc qword [rax]
jmp case.0x18004ba09.383
mov rax, qword [rbp - 0x38]
mov ecx, dword [rax]
and ecx, 0xf000000
lea eax, [rcx - 0x1000000]
test eax, 0xfeffffff
je 0x18004b425
cmp ecx, 0x3000000
je 0x18004b450
mov edi, 0x19
nop
mov eax, edi
sub eax, 0x19
je 0x18004b3ee
sub eax, 1
je 0x18004b3e7
cmp eax, 1
je case.0x18004ba09.377
jmp 0x18004b413
mov ebx, 0xffffffff
jmp 0x18004b413
mov rax, qword [0x180194db8]
lea r9, str.Cannot_get_class_interface_list
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x59]
call fcn.1800c8a10
inc edi
cmp edi, 0x1c
jb 0x18004b3d0
mov r14d, 0xdf
jmp case.0x18004ba09.383
mov eax, 0x3a
nop word [rax + rax]
cmp eax, 0x3a
je 0x18004b460
add eax, 0x8c
cmp eax, 0xc6
jb 0x18004b430
nop dword [rax]
nop word [rax + rax]
mov byte [rsp + 0x59], 0x3d
mov r14d, 0xdf
jmp case.0x18004ba09.383
mov byte [rsp + 0x59], 0
mov r14d, 0xdf
jmp case.0x18004ba09.383
mov rax, qword [rbp - 0x38]
mov eax, dword [rax]
and eax, 0xf0000000
je 0x18004b4b0
cmp eax, 0x10000000
je 0x18004b4e2
cmp eax, 0x20000000
je 0x18004b536
cmp eax, 0x30000000
je 0x18004b584
cmp eax, 0x40000000
je 0x18004b5c6
mov r14d, 0x131
jmp case.0x18004ba09.383
mov ecx, 0xce
mov eax, ecx
sub eax, 0xce
je 0x18004b4c9
cmp eax, 1
je case.0x18004b5a2.0
jmp 0x18004b4d8
mov rax, qword [rsp + 0x78]
movzx r8d, byte [r10 + rax]
mov dword [rsp + 0x44], r8d
inc ecx
cmp ecx, 0xd0
jb 0x18004b4b5
mov ecx, 0xdd
cmp ecx, 0xdd
je 0x18004b519
cmp ecx, 0x161
je 0x18004b505
cmp ecx, 0x1e5
je case.0x18004b5a2.0
jmp 0x18004b528
mov rax, qword [rsp + 0x78]
shl r8d, 8
movzx eax, byte [r10 + rax + 1]
or r8d, eax
jmp 0x18004b523
mov rax, qword [rsp + 0x78]
movzx r8d, byte [r10 + rax]
mov dword [rsp + 0x44], r8d
add ecx, 0x84
cmp ecx, 0x269
jb 0x18004b4e7
mov ecx, reloc.SHLWAPI.dll_StrCmpNICA
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x97
je case.0x18004b5a2.0
sub eax, 1
je 0x18004b568
cmp eax, 1
jne 0x18004b57a
mov rax, qword [rsp + 0x78]
movzx r8d, byte [r10 + rax + 1]
shl r8d, 8
jmp 0x18004b575
mov rax, qword [rsp + 0x78]
movzx eax, byte [r10 + rax]
or r8d, eax
mov dword [rsp + 0x44], r8d
dec ecx
cmp ecx, 0x96
ja 0x18004b540
mov edx, 5
nop dword [rax]
cmp edx, 5
ja case.default.0x18004b5a2
mov eax, edx
mov ecx, dword [r9 + rax*4 + 0x4dc78]
add rcx, r9
jmp rcx
mov rax, qword [rsp + 0x78]
movzx r8d, byte [r10 + rax]
shl r8d, 8
mov dword [rsp + 0x44], r8d
dec edx
lea eax, [rdx + 0x109]
cmp eax, 0x108
ja 0x18004b590
mov ecx, 0x76
nop dword [rax + rax]
cmp ecx, 0x1a2
ja 0x18004b67d
je 0x18004b66a
mov eax, ecx
sub eax, 0x76
je 0x18004b65d
sub eax, 0x64
je 0x18004b649
cmp eax, 0x64
jne 0x18004b5f7
shl r8d, 8
add ecx, 0x64
cmp ecx, 0x332
jb 0x18004b5d0
mov dword [rsp + 0x44], r8d
mov r14d, 0x131
jmp case.0x18004ba09.383
mov rax, qword [rsp + 0x78]
movzx eax, byte [r10 + rax + 1]
or r8d, eax
jmp 0x18004b5b2
mov rax, qword [rsp + 0x78]
movzx eax, byte [r10 + rax + 2]
or r8d, eax
jmp 0x18004b5b2
mov rax, qword [rsp + 0x78]
shl r8d, 8
movzx eax, byte [r10 + rax + 3]
or r8d, eax
jmp 0x18004b5b2
mov rax, qword [rsp + 0x78]
shl r8d, 8
movzx eax, byte [r10 + rax + 2]
or r8d, eax
jmp 0x18004b5f7
mov rax, qword [rsp + 0x78]
movzx r8d, byte [r10 + rax + 3]
jmp 0x18004b5f7
mov rax, qword [rsp + 0x78]
movzx eax, byte [r10 + rax + 1]
or r8d, eax
jmp 0x18004b5f7
mov eax, ecx
sub eax, 0x206
je 0x18004b5f3
sub eax, 0x64
je 0x18004b69d
cmp eax, 0x64
je 0x18004b602
jmp 0x18004b5f7
mov rax, qword [rsp + 0x78]
movzx eax, byte [r10 + rax]
or r8d, eax
jmp 0x18004b5f7
test r11w, r11w
je case.0x18004ba09.383
mov ecx, 0x2a
nop
cmp ecx, 0x2a
je 0x18004b6da
cmp ecx, 0x46e
jne 0x18004b6e1
mov rax, qword [rbp - 0x10]
mov rax, qword [rax]
mov byte [r10 + rax], r11b
jmp 0x18004b6e1
mov rax, qword [rbp - 0x10]
inc qword [rax]
add ecx, 0x444
cmp ecx, 0x888
jbe 0x18004b6c0
jmp case.0x18004ba09.383
mov rdi, qword [rbp - 0x50]
cmp qword [rdi + 0x270], 0
jne 0x18004b749
mov edi, 0x5d
cmp edi, 0x5d
je 0x18004b726
cmp edi, reloc.SHLWAPI.dll_SHRegGetIntW
je 0x18004b722
cmp edi, 0x1d3
je case.0x18004ba09.377
jmp 0x18004b737
xor ebx, ebx
jmp 0x18004b737
lea rdx, str._dev_dsp:_ioctl_not_handled_yet__FIXME:
mov ecx, 0x10008
call fcn.18003e500
add edi, 0xbb
cmp edi, 0x28e
jb 0x18004b707
mov rdi, qword [rbp - 0x50]
mov rdx, qword [rbp - 0x30]
lea r8, [rbp + 0x28]
xor esi, esi
xor r9d, r9d
mov qword [rsp + 0x38], rsi
mov ecx, 0x88
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
call fcn.1800ae120
test al, al
jne case.0x18004ba09.383
mov edi, SHRegGetIntW
mov eax, edi
sub eax, 0x114
je case.0x18004ba09.377
cmp eax, 1
jne 0x18004b7a6
lea rdx, str.void_glProgramUniform2ivEXT__s___d___d___s_
mov ecx, 0x10008
call fcn.18003e500
mov ebx, esi
dec edi
cmp edi, 0x113
ja 0x18004b781
jmp case.0x18004ba09.383
mov rax, qword [r10 + 0x38]
test rax, rax
je 0x18004b7c9
mov rax, qword [rax + 0x278]
mov qword [rbp - 0x80], rax
mov rdi, qword [rbp - 0x50]
mov rcx, qword [rdi + 0x248]
call rdx
mov qword [rdi + 0x270], rax
jmp case.0x18004ba09.383
mov rax, qword [rbp - 0x38]
mov ecx, dword [rax]
and ecx, 0xf0000000
je 0x18004b863
lea eax, [rcx - 0x10000000]
test eax, 0xefffffff
je 0x18004b879
lea eax, [rcx - 0x30000000]
test eax, 0xefffffff
je 0x18004b8a2
mov edi, 0x38
mov eax, edi
sub eax, 0x37
je case.0x18004ba09.377
cmp eax, 1
jne 0x18004b84d
mov rax, qword [0x180194db0]
lea r9, str.CPsMetadataCacheFileMappingImpl
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x59]
call fcn.1800c8a10
mov ebx, 0xffffffff
dec edi
mov qword [rbp - 8], rsi
cmp edi, 0x36
ja 0x18004b813
mov r14d, 0x5d
jmp case.0x18004ba09.383
mov eax, StrCmpNICA
cmp eax, 0x95
je 0x18004b8b5
add eax, 5
cmp eax, 0x9a
jb 0x18004b868
mov eax, 9
nop
cmp eax, 9
je 0x18004b88e
cmp eax, 0x5e8
je 0x18004b8bd
jmp 0x18004b896
mov qword [rbp - 8], 2
add eax, 0x5df
cmp eax, 0xbbe
jbe 0x18004b880
mov qword [rbp - 8], 4
mov r14d, 0x5d
jmp case.0x18004ba09.383
mov qword [rbp - 8], 1
mov r14d, 0x5d
jmp case.0x18004ba09.383
mov rax, qword [rbp - 0x38]
mov ecx, dword [rax]
and ecx, 0xf0000000
je 0x18004b8f2
lea eax, [rcx - 0x10000000]
test eax, 0xefffffff
je 0x18004b917
lea eax, [rcx - 0x30000000]
test eax, 0xefffffff
je 0x18004b933
jmp 0x18004b95d
mov eax, 0x9b
nop word [rax + rax]
cmp eax, 0x9b
je 0x18004b9b8
add eax, 0xa3
cmp eax, 0x13e
jb 0x18004b900
mov eax, 0x92
nop dword [rax]
cmp eax, 0x92
je 0x18004b9a5
add eax, 0x62aa
cmp eax, 0x62aa
jbe 0x18004b920
mov eax, 7
cmp eax, 7
je 0x18004b94d
cmp eax, 0x27
jne 0x18004b955
mov r14d, 0x1b3
jmp case.0x18004ba09.383
mov qword [rbp + 8], 4
add eax, 0x20
cmp eax, 0x47
jb 0x18004b938
mov edi, PathMakeUniqueName
mov eax, edi
sub eax, 0x2b
je 0x18004b974
cmp eax, 1
je 0x18004a5f1
jmp 0x18004b999
mov rax, qword [0x180194db8]
lea r9, str.llvm.ppc.altivec.crypto.vpmsumb
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x59]
call fcn.1800c8a10
inc edi
cmp edi, 0x2d
jb 0x18004b962
jmp case.0x18004ba09.383
mov qword [rbp + 8], 2
mov r14d, 0x1b3
jmp case.0x18004ba09.383
mov qword [rbp + 8], 1
mov r14d, 0x1b3
jmp case.0x18004ba09.383
cmp r14d, 0x257
ja 0x18004c036
je 0x18004c004
lea eax, [r14 - 0x179]
cmp eax, 0x8c
ja case.default.0x18004ba09
lea rdx, [0x180000000]
movzx eax, byte [rdx + rax + 0x4dcac]
mov ecx, dword [rdx + rax*4 + 0x4dc90]
add rcx, rdx
jmp rcx
mov rax, qword [rbp - 0x38]
lea rcx, [rsp + 0x70]
mov rsi, qword [rbp - 0x68]
xor r9d, r9d
mov byte [rbp - 0x28], r8b
mov rdx, rsi
lea r8, [rbp - 0x28]
mov eax, dword [rax]
mov dword [rsp + 0x70], eax
lea rax, [rbp - 0x48]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x6a
mov qword [rsp + 0x20], 0
call fcn.180071400
cmp eax, 1
je case.0x18004ba09.383
mov edi, 0xd8
nop dword [rax]
mov eax, edi
sub eax, 0xd8
je 0x18004ba74
cmp eax, 0x5d
je case.0x18004ba09.377
jmp 0x18004ba9d
mov rax, qword [0x180194db0]
lea r9, str.define_convert_short3_rtn_x__convert_short_rtn_x_
mov edx, 0x63
mov qword [rsp + 0x20], rax
mov rcx, rsi
lea r8d, [rdx - 0x62]
call fcn.1800c8a10
mov ebx, 0xffffffff
add edi, 0x5d
cmp edi, 0x192
jb 0x18004ba60
jmp case.0x18004ba09.383
mov rdi, qword [rbp - 0x50]
cmp byte [rdi + 0x2ac], 0
je 0x18004be65
mov esi, StrCmpNCA
nop dword [rax]
nop word [rax + rax]
movsxd r8, r15d
cmp esi, 0x268
ja 0x18004bca3
je 0x18004bbef
mov eax, esi
sub eax, 0x94
je 0x18004bbe7
sub eax, 0x75
je 0x18004bbda
sub eax, 0x75
je 0x18004bbd0
cmp eax, 0x75
jne 0x18004be40
cmp dword [r10 + 0x14], 0x30001
jne 0x18004bb7f
mov ecx, 0x90
nop dword [rax]
cmp ecx, 0x90
je 0x18004bb52
cmp ecx, 0x5970
jne 0x18004bb6f
mov eax, dword [r10 + 0x24]
test eax, eax
je 0x18004bb6f
cmp eax, 0x32001
jne 0x18004bb45
or r13d, 1
jmp 0x18004bb6f
cmp eax, 0x32002
jne 0x18004bb6f
or r13d, 2
jmp 0x18004bb6f
mov eax, r12d
or eax, 2
cmp byte [r10 + 0x20], 0
cmove eax, r12d
cmp byte [r10 + 0x21], 0
mov r12d, eax
je 0x18004bb6f
or r12d, 1
add ecx, 0x58e0
cmp ecx, 0xb1c0
jbe 0x18004bb20
jmp 0x18004bb83
or r13d, 4
mov eax, dword [r10 + 0x28]
test eax, eax
je 0x18004be40
cmp byte [rdi + 0x2af], 0
je 0x18004be40
cmp eax, 0x31001
jne 0x18004bbb4
mov eax, 0x8261
or r12d, 4
mov dword [rbp - 0x60], eax
jmp 0x18004be40
mov ecx, dword [rbp - 0x60]
cmp eax, 0x31002
mov eax, 0x8252
cmove ecx, eax
or r12d, 4
mov dword [rbp - 0x60], ecx
jmp 0x18004be40
xor eax, eax
mov dword [rbp - 0x60], eax
jmp 0x18004be40
xor eax, eax
mov r13d, eax
mov r12d, eax
jmp 0x18004be40
xor r15d, r15d
jmp 0x18004be40
mov edx, dword [r10 + 0x18]
cmp edx, 1
jne 0x18004bc03
cmp dword [r10 + 0x1c], 0
je 0x18004be40
mov r9d, PathMakeUniqueName
nop dword [rax]
cmp r9d, 0x2d
je 0x18004bc53
cmp r9d, 0xba
jne 0x18004bc86
mov ecx, 0x32
cmp ecx, 0x32
jne 0x18004bc43
mov eax, dword [r10 + 0x1c]
add r15d, 2
mov dword [rbp + r8*4 + 0x60], 0x2092
mov dword [rbp + r8*4 + 0x64], eax
add r8, 2
add ecx, 0x258
cmp ecx, 0x4b0
jbe 0x18004bc24
jmp 0x18004bc86
mov eax, 0x5f
cmp eax, 0x5f
je 0x18004bc6b
cmp eax, 0x491b
jne 0x18004bc7a
mov dword [rbp + r8*4 + 0x60], edx
jmp 0x18004bc74
mov dword [rbp + r8*4 + 0x60], 0x2091
inc r15d
inc r8
add eax, 0x48bc
cmp eax, 0x9178
jbe 0x18004bc58
add r9d, 0x8d
cmp r9d, 0x147
jb 0x18004bc10
mov r9, qword [rbp - 0x80]
jmp 0x18004be40
mov eax, esi
sub eax, 0x2dd
je 0x18004be02
sub eax, 0x75
je 0x18004bd79
sub eax, 0x75
je 0x18004bd1a
cmp eax, 0x75
jne 0x18004be40
cmp qword [rdi + 0x278], 0
jne 0x18004be40
mov edi, 0xeb
nop word [rax + rax]
mov eax, edi
sub eax, 0xea
je 0x18004beb0
cmp eax, 1
jne 0x18004bd03
lea rdx, str.ConditionalFormattingClearPivotTable
mov ecx, 0x10007
call fcn.18003e500
dec edi
cmp edi, 0xe9
ja 0x18004bce0
mov r9, qword [rbp - 0x80]
mov rdi, qword [rbp - 0x50]
jmp 0x18004be40
lea rcx, [rbp + 0x60]
mov edx, 0x91
lea rcx, [rcx + r8*4]
xor edi, edi
nop dword [rax]
mov eax, edx
sub eax, 0x91
je 0x18004bd3e
cmp eax, 1
jne 0x18004bd47
inc r15d
mov dword [rcx], edi
add rcx, 4
inc edx
cmp edx, 0x94
jb 0x18004bd30
mov rdi, qword [rbp - 0x50]
lea r8, [rbp + 0x60]
mov rdx, r9
mov rcx, qword [rdi + 0x270]
call qword [rdi + 0x2a0]
mov r9, qword [rbp - 0x80]
mov qword [rdi + 0x278], rax
jmp 0x18004be40
test r13d, r13d
je 0x18004bdba
lea rcx, [rbp + 0x60]
mov edx, 0xce
lea rcx, [rcx + r8*4]
nop dword [rax + rax]
mov eax, edx
sub eax, 0xce
je 0x18004bda3
cmp eax, 1
jne 0x18004bdb0
mov dword [rcx], r13d
jmp 0x18004bda9
mov dword [rcx], 0x9126
inc r15d
add rcx, 4
inc edx
cmp edx, 0xd1
jb 0x18004bd90
mov r8d, dword [rbp - 0x60]
test r8d, r8d
je 0x18004be40
movsxd rax, r15d
lea rdx, [rbp + 0x60]
mov ecx, 5
lea rdx, [rdx + rax*4]
cmp ecx, 5
je 0x18004bde5
cmp ecx, 0xaa
jne 0x18004bdf2
mov dword [rdx], r8d
jmp 0x18004bdeb
mov dword [rdx], 0x8256
inc r15d
add rdx, 4
add ecx, 0xa5
cmp ecx, 0x1f4
jb 0x18004bdd3
jmp 0x18004be40
test r12d, r12d
je 0x18004be40
lea rcx, [rbp + 0x64]
mov eax, 0x104
lea rcx, [rcx + r8*4]
cmp eax, 0x104
jne 0x18004be2d
mov dword [rcx - 4], 0x2094
add r15d, 2
mov dword [rcx], r12d
add rcx, 8
add eax, 0x4920
cmp eax, 0x9240
jbe 0x18004be14
nop dword [rax]
mov r10, qword [rbp - 0x40]
add esi, 0x75
cmp esi, 0x4b1
jb 0x18004bad0
mov edx, 0xee
mov rcx, rdi
call fcn.18005a830
jmp case.0x18004ba09.383
mov esi, 0xb2
nop word [rax + rax]
mov eax, esi
sub eax, 0xb1
je 0x18004bed1
cmp eax, 1
jne 0x18004bf27
mov rcx, qword [rdi + 0x270]
call qword [sym.imp.OPENGL32.dll_wglCreateContext]
mov qword [rdi + 0x278], rax
test rax, rax
jne 0x18004bf23
mov edi, 0x32
mov eax, edi
sub eax, 0x32
je 0x18004beb7
cmp eax, 1
jne 0x18004bec8
xor eax, eax
jmp 0x18004d953
lea rdx, str.userSettingsRegistryRootForDetouring
mov ecx, 0x10008
call fcn.18003e500
inc edi
cmp edi, 0x34
jb 0x18004bea4
jmp 0x18004bf1f
test r9, r9
je 0x18004bf27
mov rdx, qword [rdi + 0x278]
mov rcx, r9
call qword [sym.imp.OPENGL32.dll_wglShareLists]
test eax, eax
jne 0x18004bf23
mov edi, pe_nt_image_headers64
nop
mov eax, edi
sub eax, 0x107
je case.0x18004ba09.377
cmp eax, 1
jne 0x18004bf15
lea rdx, str.vim.vm.device.VirtualFloppyOption.RemoteDeviceBackingOption
mov ecx, 0x10008
call fcn.18003e500
xor ebx, ebx
dec edi
cmp edi, 0x106
ja 0x18004bef0
mov rdi, qword [rbp - 0x50]
mov r9, qword [rbp - 0x80]
dec esi
cmp esi, 0xb0
ja 0x18004be70
mov edx, 0xee
mov rcx, rdi
call fcn.18005a830
jmp case.0x18004ba09.383
mov rax, qword [rbp - 0x50]
lea r8, [rbp + 0x30]
mov edx, dword [rbp + 0x28]
mov rcx, qword [rax + 0x270]
call qword [sym.imp.GDI32.dll_SetPixelFormat]
test eax, eax
jne case.0x18004ba09.383
mov edi, 6
nop dword [rax]
mov eax, edi
sub eax, 5
je case.0x18004ba09.377
cmp eax, 1
jne 0x18004bf93
lea rdx, str.Pin_GpuInsert10EntryProfile_BB_1530_15_220
mov ecx, 0x10008
call fcn.18003e500
xor ebx, ebx
dec edi
cmp edi, 4
ja 0x18004bf70
jmp case.0x18004ba09.383
add qword [rsp + 0x78], rdi
test r8d, 0xffffff00
je case.0x18004ba09.383
mov edi, 0x11e
cmp edi, 0x11e
je 0x18004bfcc
cmp edi, 0x3a18
je 0x18004a5f1
jmp 0x18004bff1
mov rax, qword [0x180194db0]
lea r9, str.UASpoofer.HttpCacheEntriesDeleted
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x59]
call fcn.1800c8a10
add edi, 0x38fa
cmp edi, 0x71f4
jbe 0x18004bfb6
jmp case.0x18004ba09.383
mov rcx, qword [rbp - 0x50]
xor esi, esi
mov qword [rsp + 0x38], rsi
xor r9d, r9d
mov qword [rsp + 0x30], rsi
xor r8d, r8d
mov dword [rsp + 0x28], 0xfb
xor edx, edx
mov qword [rsp + 0x20], rsi
call fcn.18005e2c0
lea ebx, [rsi + 1]
jmp case.0x18004ba09.383
cmp r14d, 0x343
ja 0x18004c373
je 0x18004c306
mov eax, r14d
sub eax, 0x26f
je 0x18004c299
sub eax, 0x52
je case.0x18004ba09.377
cmp eax, 0x18
jne case.default.0x18004ba09
mov rax, qword [rbp - 0x38]
mov eax, dword [rax]
and eax, 0xf0000000
je 0x18004c280
cmp eax, 0x10000000
je 0x18004c0f5
cmp eax, 0x20000000
je 0x18004c142
cmp eax, 0x30000000
je 0x18004c18e
cmp eax, 0x40000000
jne 0x18004c0ea
mov ecx, 0x8d
mov eax, ecx
sub eax, 0x8d
je 0x18004c24d
sub eax, 1
je 0x18004c239
sub eax, 1
je 0x18004c225
sub eax, 1
je 0x18004c21f
cmp eax, 1
jne 0x18004c25d
mov rax, qword [rsp + 0x78]
movzx eax, byte [r10 + rax]
or r8d, eax
mov dword [rsp + 0x44], r8d
mov ecx, dword [rsp + 0x48]
mov r14d, 0x2d9
jmp case.default.0x18004ba09
mov ecx, IUnknown_GetWindow
nop word [rax + rax]
mov eax, ecx
sub eax, 0xa8
je 0x18004c129
sub eax, 1
je 0x18004c115
cmp eax, 1
je 0x18004c0e6
jmp 0x18004c138
mov rax, qword [rsp + 0x78]
shl r8d, 8
movzx eax, byte [r10 + rax + 1]
or r8d, eax
jmp 0x18004c133
mov rax, qword [rsp + 0x78]
movzx r8d, byte [r10 + rax]
mov dword [rsp + 0x44], r8d
inc ecx
cmp ecx, 0xab
jb 0x18004c100
mov ecx, 0xd3
mov eax, ecx
sub eax, 0xd0
je 0x18004c0e6
sub eax, 1
je 0x18004c172
sub eax, 1
je 0x18004c16c
cmp eax, 1
jne 0x18004c184
mov rax, qword [rsp + 0x78]
movzx r8d, byte [r10 + rax + 1]
jmp 0x18004c17f
shl r8d, 8
jmp 0x18004c17f
mov rax, qword [rsp + 0x78]
movzx eax, byte [r10 + rax]
or r8d, eax
mov dword [rsp + 0x44], r8d
dec ecx
cmp ecx, 0xcf
ja 0x18004c147
mov ecx, 0x91
cmp ecx, 0x8881
ja 0x18004c1d1
je 0x18004c1ff
cmp ecx, 0x91
je 0x18004c1c5
cmp ecx, 0x2de1
je 0x18004c1ff
cmp ecx, 0x5b31
jne 0x18004c208
mov rax, qword [rsp + 0x78]
movzx eax, byte [r10 + rax + 1]
or r8d, eax
jmp 0x18004c203
mov rax, qword [rsp + 0x78]
movzx r8d, byte [r10 + rax]
jmp 0x18004c203
cmp ecx, 0xb5d1
je 0x18004c1f1
cmp ecx, 0xe321
jne 0x18004c208
mov rax, qword [rsp + 0x78]
movzx eax, byte [r10 + rax + 3]
jmp 0x18004c0de
mov rax, qword [rsp + 0x78]
movzx eax, byte [r10 + rax + 2]
or r8d, eax
shl r8d, 8
mov dword [rsp + 0x44], r8d
add ecx, 0x2d50
cmp ecx, 0x10fe0
jbe 0x18004c193
jmp 0x18004c09e
shl r8d, 8
jmp 0x18004c258
mov rdx, qword [rsp + 0x78]
shl r8d, 8
movzx eax, byte [r10 + rdx + 1]
or r8d, eax
jmp 0x18004c258
mov rdx, qword [rsp + 0x78]
shl r8d, 8
movzx eax, byte [r10 + rdx + 2]
or r8d, eax
jmp 0x18004c258
mov rdx, qword [rsp + 0x78]
movzx r8d, byte [r10 + rdx + 3]
mov dword [rsp + 0x44], r8d
inc ecx
cmp ecx, 0x92
jb 0x18004c0a3
mov ecx, dword [rsp + 0x48]
mov r14d, 0x2d9
jmp case.default.0x18004ba09
mov rax, qword [rsp + 0x78]
mov r14d, 0x2d9
movzx eax, byte [r10 + rax]
mov dword [rsp + 0x44], eax
jmp case.default.0x18004ba09
mov rdx, qword [rbp - 0x30]
mov rax, qword [rsp + 0x78]
add rax, rdi
cmp rax, qword [rdx]
jbe case.default.0x18004ba09
mov edi, 0xf6
cmp edi, 0xf6
je 0x18004c2c9
cmp edi, 0x2a48
je case.0x18004ba09.377
jmp 0x18004c2f3
mov rax, qword [0x180194db0]
lea r9, str.Return_value_of_DOMDownload.error
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x5c]
call fcn.1800c8a10
mov ebx, 0xffffffff
add edi, 0x2952
cmp edi, 0x52a4
jbe 0x18004c2b3
jmp case.0x18004ba09.383
add qword [rsp + 0x78], rdi
test r8d, 0xffffff00
je case.default.0x18004ba09
mov edi, 0x7e
nop dword [rax]
mov eax, edi
sub eax, 0x7e
je 0x18004c33e
sub eax, 0x19
je 0x18004c337
cmp eax, 0x19
je case.0x18004ba09.377
jmp 0x18004c363
mov ebx, 0xffffffff
jmp 0x18004c363
mov rax, qword [0x180194db0]
lea r9, str.intel.che.nem.custom_filter_f1540
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x59]
call fcn.1800c8a10
add edi, 0x19
cmp edi, 0xc9
jb 0x18004c320
jmp case.0x18004ba09.383
mov eax, r14d
sub eax, 0x3ad
je 0x18004c7a3
cmp eax, 0x6a
jne case.default.0x18004ba09
mov r9, qword [rsp + 0x78]
mov r11, rsi
mov rdi, qword [rbp]
mov rdx, qword [rbp - 0x30]
lea rax, [rsi + r9]
mov byte [rdi], 2
cmp rax, qword [rdx]
ja 0x18004c74d
mov esi, StrCmpNCA
jmp 0x18004c3b6
mov r8d, dword [rsp + 0x44]
cmp esi, 0x93
je 0x18004c56f
cmp esi, 0x1665
je 0x18004c729
cmp esi, 0x2c37
je 0x18004c55c
cmp esi, 0x4209
je 0x18004c4f3
cmp esi, 0x57db
jne 0x18004c72e
movzx eax, byte [rsp + 0x58]
test al, al
je 0x18004c409
cmp r8d, eax
jne 0x18004c409
mov byte [rbp - 0x53], 0
jmp 0x18004c72e
mov rax, qword [rbp - 0x38]
lea rcx, [rsp + 0x70]
mov rdx, qword [rbp - 0x68]
xor r9d, r9d
mov byte [rbp - 0x20], r8b
lea r8, [rbp - 0x20]
mov eax, dword [rax]
mov dword [rsp + 0x70], eax
lea rax, [rbp - 0x53]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x6a
mov qword [rsp + 0x20], 0
call fcn.180071400
cmp eax, 1
je 0x18004c4e3
cmp byte [rsp + 0x58], 0
je 0x18004c4ae
mov edi, 0x125
nop dword [rax + rax]
cmp edi, 0x125
je 0x18004c476
cmp edi, 0x5946
je case.0x18004ba09.377
jmp 0x18004c4a0
mov rax, qword [0x180194db0]
lea r9, str.pQueueCreateInfos____nullptr
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x59]
call fcn.1800c8a10
mov ebx, 0xffffffff
add edi, 0x5821
cmp edi, 0xb042
jbe 0x18004c460
mov rax, qword [rbp - 0x68]
xor r9d, r9d
mov qword [rsp + 0x30], rax
xor r8d, r8d
xor eax, eax
xor edx, edx
mov qword [rsp + 0x28], rax
mov ecx, 0x112
mov qword [rsp + 0x20], rax
call fcn.1800be6b0
mov r9, qword [rsp + 0x78]
mov r11, qword [rbp - 8]
jmp 0x18004c72e
dec byte [rdi]
mov r9, qword [rsp + 0x78]
mov r11, qword [rbp - 8]
jmp 0x18004c72e
test r8d, 0xffffff00
je 0x18004c72e
mov edi, 0xc6
cmp edi, 0xc6
je 0x18004c51b
cmp edi, 0x7bc0
je 0x18004a5f1
jmp 0x18004c540
mov rax, qword [0x180194db0]
lea r9, str.ext_ms_win_mm_wmdrmsdk_l1_1_0.dll
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x59]
call fcn.1800c8a10
add edi, 0x7afa
cmp edi, 0xf5f4
jbe 0x18004c505
mov r9, qword [rsp + 0x78]
mov r11, qword [rbp - 8]
jmp 0x18004c72e
add r9, r11
mov r14d, 0x417
mov qword [rsp + 0x78], r9
jmp 0x18004c72e
mov rax, qword [rbp - 0x38]
mov eax, dword [rax]
and eax, 0xf0000000
je 0x18004c5a5
cmp eax, 0x10000000
je 0x18004c5c5
cmp eax, 0x20000000
je 0x18004c609
cmp eax, 0x30000000
je 0x18004c652
cmp eax, 0x40000000
je 0x18004c6ae
jmp 0x18004c72e
mov eax, 0xc9
nop word [rax + rax]
cmp eax, 0xc9
je 0x18004c720
add eax, 0x10
cmp eax, 0xd9
jb 0x18004c5b0
mov ecx, 0x12a
nop word [rax + rax]
mov eax, ecx
sub eax, 0x12a
je 0x18004c5f1
cmp eax, 1
jne 0x18004c5ff
movzx eax, byte [r10 + r9 + 1]
or r8d, eax
mov dword [rsp + 0x44], r8d
jmp 0x18004c729
movzx r8d, byte [r10 + r9]
shl r8d, 8
mov dword [rsp + 0x44], r8d
inc ecx
cmp ecx, 0x12c
jb 0x18004c5d0
mov ecx, 0x1a
nop
cmp ecx, 0x1a
je 0x18004c635
cmp ecx, 0x514
je 0x18004c62b
cmp ecx, 0xa0e
je 0x18004c729
jmp 0x18004c644
movzx eax, byte [r10 + r9]
or r8d, eax
jmp 0x18004c63f
movzx r8d, byte [r10 + r9 + 1]
shl r8d, 8
mov dword [rsp + 0x44], r8d
add ecx, 0x4fa
cmp ecx, 0xeee
jbe 0x18004c610
mov ecx, 0x58
mov eax, ecx
sub eax, 0x58
je 0x18004c699
sub eax, 1
je 0x18004c68e
sub eax, 1
je 0x18004c683
sub eax, 1
je 0x18004c678
cmp eax, 1
je 0x18004c729
jmp 0x18004c6a7
movzx eax, byte [r10 + r9 + 3]
or r8d, eax
jmp 0x18004c6a2
movzx eax, byte [r10 + r9 + 2]
or r8d, eax
jmp 0x18004c69e
movzx eax, byte [r10 + r9 + 1]
or r8d, eax
jmp 0x18004c69e
movzx r8d, byte [r10 + r9]
shl r8d, 8
mov dword [rsp + 0x44], r8d
inc ecx
cmp ecx, 0x5d
jb 0x18004c657
mov ecx, 0x42
cmp ecx, 0x42
je 0x18004c701
cmp ecx, 0x30ba
je 0x18004c6f6
cmp ecx, 0x6132
je 0x18004c6e7
cmp ecx, 0x91aa
je 0x18004c707
cmp ecx, 0xc222
jne 0x18004c710
movzx eax, byte [r10 + r9]
or r8d, eax
mov dword [rsp + 0x44], r8d
jmp 0x18004c729
movzx eax, byte [r10 + r9 + 1]
shl r8d, 8
or r8d, eax
jmp 0x18004c70b
movzx eax, byte [r10 + r9 + 2]
or r8d, eax
jmp 0x18004c70b
movzx r8d, byte [r10 + r9 + 3]
shl r8d, 8
mov dword [rsp + 0x44], r8d
add ecx, 0x3078
cmp ecx, 0xf258
jbe 0x18004c6b3
jmp 0x18004c72e
movzx eax, byte [r10 + r9]
mov dword [rsp + 0x44], eax
mov esi, 0x1665
mov r10, qword [rbp - 0x40]
add esi, 0x15d2
mov rdi, qword [rbp]
cmp esi, 0x6d1a
jbe 0x18004c3b1
jmp case.0x18004ba09.383
cmp byte [rsp + 0x58], 0
je case.default.0x18004ba09
mov edi, 0x68
nop dword [rax]
mov eax, edi
sub eax, 0x68
je 0x18004c772
cmp eax, 1
je 0x18004a5f1
jmp 0x18004c797
mov rax, qword [0x180194db0]
lea r9, str.P_QCQHQIQKQZQeQhQkQlQmQqQsQuQvQwQ
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x5c]
call fcn.1800c8a10
inc edi
cmp edi, 0x6a
jb 0x18004c760
jmp case.0x18004ba09.383
mov rax, qword [rbp - 0x38]
lea rcx, [rsp + 0x70]
mov rsi, qword [rbp - 0x68]
xor r9d, r9d
mov byte [rbp - 0x18], r8b
mov rdx, rsi
lea r8, [rbp - 0x18]
mov eax, dword [rax]
mov dword [rsp + 0x70], eax
lea rax, [rsp + 0x4c]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x6a
mov qword [rsp + 0x20], 0
call fcn.180071400
cmp eax, 1
je case.0x18004ba09.383
mov edi, 0x4d
nop
mov eax, edi
sub eax, 0x4d
je 0x18004c802
cmp eax, 1
je case.0x18004ba09.377
jmp 0x18004c82b
mov rax, qword [0x180194db0]
lea r9, str.c:gecko34_release32ipcipdlPGMPVideoEncoder.cpp
mov edx, 0x63
mov qword [rsp + 0x20], rax
mov rcx, rsi
lea r8d, [rdx - 0x62]
call fcn.1800c8a10
mov ebx, 0xffffffff
inc edi
cmp edi, 0x4f
jb 0x18004c7f0
mov ecx, dword [rsp + 0x48]
add r14d, 0x6a
cmp r14d, ecx
jae 0x18004c85a
mov r10, qword [rbp - 0x40]
mov r9, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x70]
mov r11d, dword [rsp + 0x50]
mov r8d, dword [rsp + 0x44]
jmp 0x18004b1c0
movzx edi, byte [rsp + 0x40]
mov esi, dword [rbp + 0x420]
imul r15d, esi, 0x78
mov r14d, esi
mov dword [rsp + 0x70], r15d
cmp esi, r15d
ja case.0x18004ba09.377
mov r12d, dword [rsp + 0x68]
mov r13, qword [rbp - 0x40]
cmp r14d, 0xbe2
ja 0x18004d0e2
je 0x18004cecb
cmp r14d, 0x5d0
ja 0x18004cddb
je 0x18004cdcb
cmp r14d, 0x2be
ja 0x18004cd96
je 0x18004cd83
cmp r14d, 0x5d
je 0x18004c905
cmp r14d, 0x75
je 0x18004c8e4
cmp r14d, 0x22e
jne 0x18004d940
mov rcx, qword [rbp - 0x50]
movzx eax, byte [rbp - 0x48]
mov dword [rcx], eax
jmp 0x18004d940
mov rax, qword [rbp - 0x10]
mov rax, qword [rax]
mov qword [rsp + 0x60], rax
mov rax, qword [rbp - 0x50]
movzx edi, byte [rax]
and dil, 0x3f
mov byte [rsp + 0x40], dil
jmp 0x18004d940
mov r8, qword [rsp + 0x78]
mov rdx, qword [rbp - 8]
mov rcx, qword [rbp - 0x30]
lea rax, [rdx + r8]
cmp rax, qword [rcx]
ja 0x18004cd1b
mov esi, 0xfe
cmp esi, 0xfe
je 0x18004cb36
cmp esi, 0x84f4
je 0x18004cb2b
cmp esi, 0x108ea
je 0x18004cabb
cmp esi, 0x18ce0
jne 0x18004ccfa
movzx eax, byte [rsp + 0x58]
mov ecx, dword [rsp + 0x44]
test al, al
je 0x18004c973
cmp ecx, eax
jne 0x18004c96e
mov byte [rbp - 0x54], 0
jmp 0x18004ccfa
movzx eax, byte [rsp + 0x58]
mov rdi, qword [rbp]
cmp byte [rdi], 1
jbe 0x18004c9db
test al, al
je 0x18004ccfa
mov edi, 0x43
nop dword [rax]
mov eax, edi
sub eax, 0x42
je case.0x18004ba09.377
cmp eax, 1
jne 0x18004c9ca
mov rax, qword [0x180194db0]
lea r9, str.VirtualMachine.Interact.Record
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x59]
call fcn.1800c8a10
mov ebx, 0xffffffff
dec edi
cmp edi, 0x41
ja 0x18004c990
mov r8, qword [rsp + 0x78]
jmp 0x18004ccfa
mov rax, qword [rbp - 0x38]
lea r8, [rsp + 0x50]
mov rdx, qword [rbp - 0x68]
xor r9d, r9d
mov byte [rsp + 0x50], cl
lea rcx, [rbp - 0x60]
mov eax, dword [rax]
mov dword [rbp - 0x60], eax
lea rax, [rbp - 0x54]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x6a
mov qword [rsp + 0x20], 0
call fcn.180071400
cmp eax, 1
je 0x18004caaf
cmp byte [rsp + 0x58], 0
je 0x18004ca7e
mov edi, 0x40
nop dword [rax]
mov eax, edi
sub eax, 0x40
je 0x18004ca4e
sub eax, 0x65
je 0x18004ca47
cmp eax, 0x65
je case.0x18004ba09.377
jmp 0x18004ca73
mov ebx, 0xffffffff
jmp 0x18004ca73
mov rax, qword [0x180194db0]
lea r9, str.Onbekend_Imagebestandsformaat_
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x59]
call fcn.1800c8a10
add edi, 0x65
cmp edi, 0x16f
jb 0x18004ca30
mov rax, qword [rbp - 0x68]
xor r9d, r9d
mov qword [rsp + 0x30], rax
xor r8d, r8d
xor eax, eax
xor edx, edx
mov qword [rsp + 0x28], rax
mov ecx, 0x112
mov qword [rsp + 0x20], rax
call fcn.1800be6b0
mov r8, qword [rsp + 0x78]
jmp 0x18004ccfa
dec byte [rdi]
mov r8, qword [rsp + 0x78]
jmp 0x18004ccfa
add r8, rdx
test dword [rsp + 0x44], 0xffffff00
mov qword [rsp + 0x78], r8
je 0x18004ccfa
mov edi, 0x59
nop word [rax + rax]
mov eax, edi
sub eax, 0x58
je case.0x18004ba09.377
cmp eax, 1
jne 0x18004cb1a
mov rax, qword [0x180194db0]
lea r9, str.Reg_key_has_been_deleted:__s_s
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x59]
call fcn.1800c8a10
mov ebx, 0xffffffff
dec edi
cmp edi, 0x57
ja 0x18004cae0
mov r8, qword [rsp + 0x78]
jmp 0x18004ccfa
mov r14d, 0x5d
jmp 0x18004ccfa
mov rax, qword [rbp - 0x38]
mov eax, dword [rax]
and eax, 0xf0000000
je 0x18004cb6c
cmp eax, 0x10000000
je 0x18004cb88
cmp eax, 0x20000000
je 0x18004cbc4
cmp eax, 0x30000000
je 0x18004cc12
cmp eax, 0x40000000
je 0x18004cc82
jmp case.0x18004cca0.0
mov eax, 0xba
cmp eax, 0xba
je 0x18004ccec
add eax, 0x52d4
cmp eax, 0x52d4
jbe 0x18004cb71
mov ecx, 0xa4
nop dword [rax]
mov eax, ecx
sub eax, 0xa4
je 0x18004cbad
cmp eax, 0x26
jne 0x18004cbb9
movzx eax, byte [r8 + r13 + 1]
or dword [rsp + 0x44], eax
jmp case.0x18004cca0.0
movzx eax, byte [r8 + r13]
shl eax, 8
mov dword [rsp + 0x44], eax
add ecx, 0x26
cmp ecx, 0xf0
jb 0x18004cb90
mov ecx, 0xb4
nop dword [rax]
mov eax, ecx
sub eax, 0xb1
je case.0x18004cca0.0
sub eax, 1
je 0x18004cbff
sub eax, 1
je 0x18004cbf8
cmp eax, 1
jne 0x18004cc08
movzx eax, byte [r8 + r13 + 1]
mov dword [rsp + 0x44], eax
jmp 0x18004cc08
shl dword [rsp + 0x44], 8
jmp 0x18004cc08
movzx eax, byte [r8 + r13]
or dword [rsp + 0x44], eax
dec ecx
cmp ecx, 0xb0
ja 0x18004cbd0
xor edx, edx
cmp edx, 5
ja case.default.0x18004cc2b
lea r9, [0x180000000]
mov ecx, dword [r9 + rdx*4 + 0x4dd3c]
add rcx, r9
jmp rcx
mov ecx, dword [rsp + 0x44]
movzx eax, byte [r8 + r13 + 1]
or ecx, eax
shl ecx, 8
mov dword [rsp + 0x44], ecx
jmp case.default.0x18004cc2b
movzx eax, byte [r8 + r13 + 3]
or dword [rsp + 0x44], eax
jmp case.default.0x18004cc2b
mov ecx, dword [rsp + 0x44]
movzx eax, byte [r8 + r13 + 2]
or ecx, eax
shl ecx, 8
mov dword [rsp + 0x44], ecx
jmp case.default.0x18004cc2b
movzx eax, byte [r8 + r13]
mov dword [rsp + 0x44], eax
jmp case.default.0x18004cc2b
shl dword [rsp + 0x44], 8
inc edx
lea eax, [rdx + 0xbd]
cmp eax, 0xc3
jb 0x18004cc14
mov edx, 5
cmp edx, 5
ja case.default.0x18004cca0
lea r9, [0x180000000]
mov eax, edx
mov ecx, dword [r9 + rax*4 + 0x4dd54]
add rcx, r9
jmp rcx
movzx eax, byte [r8 + r13 + 3]
mov dword [rsp + 0x44], eax
jmp case.default.0x18004cca0
shl dword [rsp + 0x44], 8
jmp case.default.0x18004cca0
movzx eax, byte [r8 + r13 + 1]
jmp 0x18004ccce
movzx eax, byte [r8 + r13]
or dword [rsp + 0x44], eax
jmp case.default.0x18004cca0
movzx eax, byte [r8 + r13 + 2]
mov ecx, dword [rsp + 0x44]
or ecx, eax
shl ecx, 8
mov dword [rsp + 0x44], ecx
dec edx
lea eax, [rdx + 0xfb]
cmp eax, 0xfa
ja 0x18004cc87
jmp case.0x18004cca0.0
movzx eax, byte [r8 + r13]
mov dword [rsp + 0x44], eax
mov esi, 0xfe
mov rdx, qword [rbp - 8]
add esi, 0x83f6
cmp esi, 0x20fd8
jbe 0x18004c924
mov esi, dword [rbp + 0x420]
jmp 0x18004d93b
cmp byte [rsp + 0x58], 0
je 0x18004d940
mov edi, 0xf9
nop dword [rax + rax]
cmp edi, 0xf9
je 0x18004cd46
cmp edi, 0x1b3
je case.0x18004ba09.377
jmp 0x18004cd70
mov rax, qword [0x180194db0]
lea r9, str.RegSetValue_failed_with_error__u.
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x5c]
call fcn.1800c8a10
mov ebx, 0xffffffff
add edi, 0xba
cmp edi, 0x26d
jb 0x18004cd30
jmp 0x18004d93b
mov rdx, qword [rbp - 0x50]
shr dword [rdx], 6
mov eax, dword [rdx]
and al, 0x3f
mov dword [rbp + 0x10], eax
jmp 0x18004d940
cmp r14d, 0x3ff
je 0x18004cdbf
cmp r14d, 0x507
jne 0x18004d940
mov rdx, qword [rbp - 0x50]
shr dword [rdx], 6
mov eax, dword [rdx]
and al, 0x3f
mov dword [rbp + 0x14], eax
jmp 0x18004d940
mov rdx, qword [rbp - 0x50]
shl dword [rdx], 6
jmp 0x18004d940
mov rdx, qword [rbp - 0x50]
movzx eax, byte [rsp + 0x4c]
or dword [rdx], eax
jmp 0x18004d940
mov eax, r14d
sub eax, 0x750
je 0x18004cebf
sub eax, 0x51
je 0x18004ceb3
sub eax, 0x1d1
je 0x18004cea4
sub eax, 0x27
je 0x18004ce23
cmp eax, 0x1aa
jne 0x18004d940
mov rdx, qword [rbp - 0x50]
movzx eax, byte [rbp - 0x54]
mov ecx, dword [rdx]
shl ecx, 6
or ecx, eax
mov dword [rdx], ecx
jmp 0x18004d940
mov rax, qword [rbp - 0x50]
mov rcx, qword [rbp + 8]
movzx eax, byte [rax]
and al, 0x3f
mov byte [rbp - 0x78], al
mov rax, qword [rsp + 0x60]
lea rax, [rax + rcx*2]
mov rcx, qword [rbp - 0x30]
cmp rax, qword [rcx]
jbe 0x18004d940
mov edi, 0x12a
nop
mov eax, edi
sub eax, 0x12a
je 0x18004ce70
sub eax, 1
je 0x18004ce69
cmp eax, 1
je case.0x18004ba09.377
jmp 0x18004ce95
mov ebx, 0xffffffff
jmp 0x18004ce95
mov rax, qword [0x180194db8]
lea r9, str.Arquivo_BSF_Setor_de_inicializa
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x5c]
call fcn.1800c8a10
inc edi
cmp edi, 0x12d
jb 0x18004ce50
jmp 0x18004d93b
mov rcx, qword [rbp - 0x50]
movzx eax, byte [rbp - 0x53]
or dword [rcx], eax
jmp 0x18004d940
mov rcx, qword [rbp - 0x50]
shl dword [rcx], 6
jmp 0x18004d940
mov rax, qword [rbp - 0x50]
shr dword [rax], 6
jmp 0x18004d940
movzx eax, byte [rbp - 0x78]
mov rcx, qword [rbp + 0x20]
movzx edx, byte [rax + rcx]
mov rax, qword [rbp - 0x38]
mov dword [rsp + 0x68], edx
mov eax, dword [rax]
and eax, 0xf0000000
je 0x18004d0c0
cmp eax, 0x10000000
je 0x18004cf18
cmp eax, 0x20000000
je 0x18004cf6f
cmp eax, 0x30000000
je 0x18004cfbf
cmp eax, 0x40000000
je 0x18004d040
mov r12d, edx
jmp 0x18004d940
mov ecx, reloc.SHLWAPI.dll_SHRegGetIntW
nop dword [rax]
cmp ecx, reloc.SHLWAPI.dll_SHRegGetIntW
je 0x18004cf4e
cmp ecx, 0xb360
jne 0x18004cf61
mov r12d, dword [rsp + 0x68]
mov r8, qword [rsp + 0x60]
add r8, qword [rbp + 8]
mov r14d, 0xe2b
mov qword [rsp + 0x60], r8
jmp 0x18004d940
mov r8, qword [rsp + 0x60]
mov eax, edx
shr eax, 8
mov byte [r8 + r13], al
mov byte [r8 + r13 + 1], dl
add ecx, 0xb248
cmp ecx, 0x16490
jbe 0x18004cf20
mov r9, qword [rsp + 0x60]
mov ecx, 3
nop dword [rax]
mov eax, ecx
sub eax, 3
je 0x18004cfac
cmp eax, 1
jne 0x18004cfb6
mov r12d, dword [rsp + 0x68]
mov r8, r9
add r8, qword [rbp + 8]
mov r14d, 0xe2b
mov qword [rsp + 0x60], r8
mov byte [r9 + r13], dl
jmp 0x18004d940
mov eax, edx
shr eax, 8
mov byte [r9 + r13 + 1], al
inc ecx
cmp ecx, 5
jb 0x18004cf80
jmp 0x18004cfc4
mov r9, qword [rsp + 0x60]
mov ecx, 0xc8
nop dword [rax]
cmp ecx, 0xc8
je 0x18004d029
cmp ecx, 0x6590
je 0x18004d00b
cmp ecx, 0xca58
jne 0x18004d032
mov r8, qword [rsp + 0x60]
mov r14d, 0xe2b
mov r12d, dword [rsp + 0x68]
mov byte [r8 + r13 + 3], dl
add r8, qword [rbp + 8]
mov qword [rsp + 0x60], r8
jmp 0x18004d940
mov r8, qword [rsp + 0x60]
mov eax, edx
shr eax, 0x10
mov r9, r8
mov byte [r8 + r13 + 1], al
mov eax, edx
shr eax, 8
mov byte [r8 + r13 + 2], al
jmp 0x18004d032
mov eax, edx
shr eax, 0x18
mov byte [r9 + r13], al
add ecx, 0x64c8
cmp ecx, 0x12e58
jbe 0x18004cfd0
mov ecx, 0xe5
cmp ecx, 0xe5
je 0x18004d087
cmp ecx, 0x1a0
je 0x18004d076
cmp ecx, 0x25b
je 0x18004d06b
cmp ecx, 0x316
je 0x18004cf30
jmp 0x18004d0a0
mov rax, qword [rsp + 0x60]
mov byte [rax + r13], dl
jmp 0x18004d0a0
mov r8, qword [rsp + 0x60]
mov eax, edx
shr eax, 8
mov byte [r8 + r13 + 1], al
jmp 0x18004d0a0
mov r8, qword [rsp + 0x60]
mov eax, edx
shr eax, 0x18
mov byte [r8 + r13 + 3], al
mov eax, edx
shr eax, 0x10
mov byte [r8 + r13 + 2], al
add ecx, 0xbb
cmp ecx, 0x3d1
jb 0x18004d045
mov r12d, dword [rsp + 0x68]
jmp 0x18004d940
mov r8, qword [rsp + 0x60]
mov r14d, 0xe2b
mov r12d, dword [rsp + 0x68]
mov byte [r8 + r13], dl
add r8, qword [rbp + 8]
mov qword [rsp + 0x60], r8
jmp 0x18004d940
cmp r14d, 0x12bd
ja 0x18004d343
je 0x18004d14f
mov eax, r14d
sub eax, 0xd14
je 0x18004d13e
sub eax, 0x117
je 0x18004cf35
sub eax, 0xba
je 0x18004d381
sub eax, 0x18f
je 0x18004d126
cmp eax, 0x42
je case.0x18004ba09.377
jmp 0x18004d940
movzx eax, byte [rbp + 0x14]
mov rcx, qword [rbp + 0x20]
movzx eax, byte [rax + rcx]
mov dword [rsp + 0x68], eax
mov r12d, eax
jmp 0x18004d940
mov rcx, qword [rbp - 0x10]
mov rax, qword [rsp + 0x78]
mov qword [rcx], rax
jmp 0x18004d940
mov rax, qword [rbp - 0x38]
mov eax, dword [rax]
and eax, 0xf0000000
je 0x18004d1bf
cmp eax, 0x10000000
je 0x18004d1db
cmp eax, 0x20000000
je 0x18004d220
cmp eax, 0x30000000
je 0x18004d263
cmp eax, 0x40000000
jne 0x18004d1b4
mov ecx, 0x119
nop word [rax + rax]
mov eax, ecx
sub eax, 0x119
je 0x18004d2f4
sub eax, 1
je 0x18004d2db
cmp eax, 1
jne 0x18004d311
mov r12d, dword [rsp + 0x68]
mov r14d, 0x12bd
jmp 0x18004d940
mov eax, 0xea
cmp eax, 0xea
je 0x18004d32f
add eax, 0xb23e
cmp eax, 0xb23e
jbe 0x18004d1c4
mov ecx, 0x3f
cmp ecx, 0x3f
je 0x18004d203
cmp ecx, 0x2e05
je 0x18004d1f7
cmp ecx, 0x5bcb
je 0x18004d1b4
jmp 0x18004d212
mov rax, qword [rsp + 0x60]
mov byte [rax + r13 + 1], r12b
jmp 0x18004d212
mov rdx, qword [rsp + 0x60]
mov eax, r12d
shr eax, 8
mov byte [rdx + r13], al
add ecx, 0x2dc6
cmp ecx, 0x8952
jbe 0x18004d1e0
mov ecx, 0xd1
mov eax, ecx
sub eax, 0xd1
je 0x18004d249
sub eax, 1
je 0x18004d23e
cmp eax, 1
je 0x18004d1b4
jmp 0x18004d259
mov rax, qword [rsp + 0x60]
mov byte [rax + r13], r12b
jmp 0x18004d259
mov rdx, qword [rsp + 0x60]
mov eax, r12d
shr eax, 8
mov byte [rdx + r13 + 1], al
inc ecx
cmp ecx, 0xd4
jb 0x18004d225
mov ecx, 0x127
cmp ecx, 0x127
je 0x18004d2b9
cmp ecx, 0x1c4
je 0x18004d295
cmp ecx, 0x261
jne 0x18004d2c8
mov rax, qword [rsp + 0x60]
mov r14d, 0x12bd
mov byte [rax + r13 + 3], r12b
jmp 0x18004d940
mov r8, qword [rsp + 0x60]
mov eax, dword [rsp + 0x68]
mov r12d, dword [rsp + 0x68]
shr eax, 0x10
mov byte [r8 + r13 + 1], al
mov eax, dword [rsp + 0x68]
shr eax, 8
mov byte [r8 + r13 + 2], al
jmp 0x18004d2c8
mov rdx, qword [rsp + 0x60]
mov eax, r12d
shr eax, 0x18
mov byte [rdx + r13], al
add ecx, 0x9d
cmp ecx, 0x2fe
jb 0x18004d268
jmp 0x18004d180
mov edx, dword [rsp + 0x68]
mov eax, edx
mov r8, qword [rsp + 0x60]
shr eax, 8
mov byte [r8 + r13 + 1], al
mov byte [r8 + r13], dl
jmp 0x18004d311
mov r8, qword [rsp + 0x60]
mov eax, dword [rsp + 0x68]
shr eax, 0x18
mov byte [r8 + r13 + 3], al
mov eax, dword [rsp + 0x68]
shr eax, 0x10
mov byte [r8 + r13 + 2], al
inc ecx
cmp ecx, 0x11c
jb 0x18004d190
mov r12d, dword [rsp + 0x68]
mov r14d, 0x12bd
jmp 0x18004d940
mov rax, qword [rsp + 0x60]
mov r14d, 0x12bd
mov byte [rax + r13], r12b
jmp 0x18004d940
cmp r14d, 0x1506
je 0x18004d8d2
cmp r14d, 0x174f
je 0x18004d602
cmp r14d, 0x1998
je 0x18004d38b
cmp r14d, 0x1be1
je 0x18004d381
cmp r14d, 0x1e2a
je case.0x18004ba09.377
jmp 0x18004d940
mov ebx, 1
jmp 0x18004d940
mov r10, qword [rbp]
cmp byte [r10], 1
jb 0x18004d3a0
cmp byte [rsp + 0x59], 0
je 0x18004d5f1
mov r9, qword [rsp + 0x60]
mov edx, 0x9b
movzx r15d, byte [rsp + 0x59]
mov eax, edx
sub eax, 0x99
je 0x18004d5cb
sub eax, 1
je 0x18004d5be
cmp eax, 1
jne 0x18004d5d9
cmp byte [r10], al
jae 0x18004d3e8
mov rcx, qword [rbp + 0x20]
movzx eax, dil
movzx r8d, byte [rax + rcx]
mov dword [rsp + 0x68], r8d
jmp 0x18004d3fc
test r15b, r15b
je 0x18004d3f7
mov r8d, r15d
mov dword [rsp + 0x68], r15d
jmp 0x18004d3fc
mov r8d, dword [rsp + 0x68]
mov rax, qword [rbp - 0x38]
mov eax, dword [rax]
and eax, 0xf0000000
je 0x18004d436
cmp eax, 0x10000000
je 0x18004d455
cmp eax, 0x20000000
je 0x18004d49a
cmp eax, 0x30000000
je 0x18004d4d5
cmp eax, 0x40000000
je 0x18004d53f
jmp 0x18004d5d9
mov eax, 0xb5
nop dword [rax + rax]
cmp eax, 0xb5
je 0x18004d5a0
add eax, 0x4f
cmp eax, 0x104
jb 0x18004d440
mov ecx, 0x11d
nop word [rax + rax]
mov eax, ecx
sub eax, 0x11b
je 0x18004d5be
sub eax, 1
je 0x18004d483
cmp eax, 1
jne 0x18004d490
mov eax, r8d
shr eax, 8
mov byte [r9 + r13], al
jmp 0x18004d490
mov rax, qword [rsp + 0x60]
mov r9, rax
mov byte [rax + r13 + 1], r8b
dec ecx
cmp ecx, 0x11a
ja 0x18004d460
mov ecx, 0x104
nop
mov eax, ecx
sub eax, 0x103
je 0x18004d5b9
cmp eax, 1
jne 0x18004d4c6
mov r9, qword [rsp + 0x60]
mov eax, r8d
shr eax, 8
mov byte [r9 + r13 + 1], al
mov byte [r9 + r13], r8b
dec ecx
cmp ecx, 0x102
ja 0x18004d4a0
mov r9, qword [rsp + 0x60]
mov ecx, 0xe4
nop word [rax + rax]
mov eax, ecx
sub eax, 0xe4
je 0x18004d52a
sub eax, 0x4f
je 0x18004d50d
sub eax, 0x4f
je 0x18004d4fe
cmp eax, 0x4f
je 0x18004d5be
jmp 0x18004d534
mov rax, qword [rsp + 0x60]
mov r9, rax
mov byte [rax + r13 + 3], r8b
jmp 0x18004d534
mov r9, qword [rsp + 0x60]
mov eax, r8d
shr eax, 0x10
mov byte [r9 + r13 + 1], al
mov eax, r8d
shr eax, 8
mov byte [r9 + r13 + 2], al
jmp 0x18004d534
mov eax, r8d
shr eax, 0x18
mov byte [r9 + r13], al
add ecx, 0x4f
cmp ecx, 0x220
jb 0x18004d4e0
mov ecx, 0xee
mov eax, ecx
sub eax, 0xee
je 0x18004d589
sub eax, 1
je 0x18004d56c
sub eax, 1
je 0x18004d55e
cmp eax, 1
je 0x18004d5be
jmp 0x18004d594
mov rax, qword [rsp + 0x60]
mov r9, rax
mov byte [rax + r13], r8b
jmp 0x18004d594
mov r9, qword [rsp + 0x60]
mov eax, r8d
shr eax, 0x10
mov byte [r9 + r13 + 2], al
mov eax, r8d
shr eax, 8
mov byte [r9 + r13 + 1], al
jmp 0x18004d594
mov eax, r8d
shr eax, 0x18
mov byte [r9 + r13 + 3], al
inc ecx
cmp ecx, 0xf2
jb 0x18004d544
jmp 0x18004d5d9
mov rax, qword [rsp + 0x60]
mov edx, 0x9a
mov r9, rax
mov r14d, 0x1998
mov byte [rax + r13], r8b
jmp 0x18004d5d9
mov r9, qword [rsp + 0x60]
mov edx, 0x9a
mov r14d, 0x1998
jmp 0x18004d5d9
mov rax, qword [rbp + 8]
add qword [rsp + 0x60], rax
mov r9, qword [rsp + 0x60]
dec edx
cmp edx, 0x98
ja 0x18004d3b0
mov r15d, dword [rsp + 0x70]
mov r12d, dword [rsp + 0x68]
mov rcx, qword [rbp - 0x10]
mov rax, qword [rsp + 0x60]
mov qword [rcx], rax
jmp 0x18004d940
mov r10, qword [rbp]
cmp byte [r10], 2
jb 0x18004d617
cmp byte [rsp + 0x59], 0
je 0x18004d867
mov edi, dword [rbp + 0x10]
mov edx, SHRegGetIntW
movzx r15d, byte [rsp + 0x59]
nop word [rax + rax]
mov eax, edx
sub eax, 0x113
je 0x18004d841
sub eax, 1
je 0x18004d839
sub eax, 1
je 0x18004d77f
cmp eax, 1
jne 0x18004d84a
cmp byte [r10], 2
jae 0x18004d672
mov rcx, qword [rbp + 0x20]
movzx eax, dil
movzx r8d, byte [rax + rcx]
mov dword [rsp + 0x68], r8d
jmp 0x18004d686
test r15b, r15b
je 0x18004d681
mov r8d, r15d
mov dword [rsp + 0x68], r15d
jmp 0x18004d686
mov r8d, dword [rsp + 0x68]
mov rax, qword [rbp - 0x38]
mov eax, dword [rax]
and eax, 0xf0000000
je 0x18004d70f
cmp eax, 0x10000000
je 0x18004d735
cmp eax, 0x20000000
je 0x18004d76c
cmp eax, 0x30000000
je 0x18004d7a8
cmp eax, 0x40000000
jne 0x18004d84a
mov ecx, 0xc9
nop dword [rax]
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xc7
je 0x18004d77f
sub eax, 1
je 0x18004d815
cmp eax, 1
jne 0x18004d829
mov r9, qword [rsp + 0x60]
mov eax, r8d
shr eax, 0x18
mov byte [r9 + r13 + 3], al
mov eax, r8d
shr eax, 0x10
mov byte [r9 + r13 + 2], al
jmp 0x18004d829
mov ecx, 0x107
mov eax, ecx
sub eax, 0x106
je 0x18004d77f
cmp eax, 1
jne 0x18004d72b
mov rax, qword [rsp + 0x60]
mov byte [rax + r13], r8b
dec ecx
cmp ecx, 0x105
ja 0x18004d714
mov ecx, 0xbb
nop word [rax + rax]
mov eax, ecx
sub eax, 0xba
je 0x18004d77f
cmp eax, 1
jne 0x18004d762
mov r9, qword [rsp + 0x60]
mov eax, r8d
shr eax, 8
mov byte [r9 + r13], al
mov byte [r9 + r13 + 1], r8b
dec ecx
cmp ecx, 0xb9
ja 0x18004d740
mov ecx, 0x92
mov eax, ecx
sub eax, 0x92
je 0x18004d789
cmp eax, 0x76
jne 0x18004d79d
mov edx, SHRegGetIntW
jmp 0x18004d84a
mov r9, qword [rsp + 0x60]
mov eax, r8d
shr eax, 8
mov byte [r9 + r13 + 1], al
mov byte [r9 + r13], r8b
add ecx, 0x76
cmp ecx, 0x17e
jb 0x18004d771
mov r9, qword [rsp + 0x60]
mov ecx, 0x8b
cmp ecx, 0x8b
je 0x18004d7f8
cmp ecx, 0x3878
je 0x18004d7db
cmp ecx, 0x7065
jne 0x18004d802
mov rax, qword [rsp + 0x60]
mov edx, SHRegGetIntW
mov byte [rax + r13 + 3], r8b
jmp 0x18004d84a
mov r9, qword [rsp + 0x60]
mov eax, r8d
shr eax, 0x10
mov byte [r9 + r13 + 1], al
mov eax, r8d
shr eax, 8
mov byte [r9 + r13 + 2], al
jmp 0x18004d802
mov eax, r8d
shr eax, 0x18
mov byte [r9 + r13], al
add ecx, 0x37ed
cmp ecx, 0xa7c7
jbe 0x18004d7b2
jmp 0x18004d6bf
mov r9, qword [rsp + 0x60]
mov eax, r8d
shr eax, 8
mov byte [r9 + r13 + 1], al
mov byte [r9 + r13], r8b
dec ecx
cmp ecx, 0xc6
ja 0x18004d6d0
jmp 0x18004d84a
mov r14d, 0x174f
jmp 0x18004d84a
mov rax, qword [rbp + 8]
add qword [rsp + 0x60], rax
dec edx
cmp edx, 0x112
ja 0x18004d630
mov r15d, dword [rsp + 0x70]
mov r12d, dword [rsp + 0x68]
movzx edi, byte [rsp + 0x40]
mov rcx, qword [rbp - 0x30]
mov rax, qword [rsp + 0x60]
add rax, qword [rbp + 8]
cmp rax, qword [rcx]
jbe 0x18004d940
mov edi, 0xfe
cmp edi, 0xfe
je 0x18004d898
cmp edi, 0xaba6
je case.0x18004ba09.377
jmp 0x18004d8c2
mov rax, qword [0x180194db8]
lea r9, str._DumpSig__sigaddr___moduleaddr_
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x5c]
call fcn.1800c8a10
mov ebx, 0xffffffff
add edi, 0xaaa8
cmp edi, 0x15550
jbe 0x18004d882
jmp 0x18004d93b
mov rcx, qword [rsp + 0x60]
mov rax, qword [rbp + 8]
add rcx, rax
add rax, rcx
mov qword [rsp + 0x60], rcx
mov rcx, qword [rbp - 0x30]
cmp rax, qword [rcx]
jbe 0x18004d940
mov edi, 0x39
cmp edi, 0x39
je 0x18004d903
cmp edi, 0x720
je case.0x18004ba09.377
jmp 0x18004d92d
mov rax, qword [0x180194db8]
lea r9, str.__s__folder_has_been_removed___
mov rcx, qword [rbp - 0x68]
mov edx, 0x61
mov qword [rsp + 0x20], rax
lea r8d, [rdx - 0x5c]
call fcn.1800c8a10
mov ebx, 0xffffffff
add edi, 0x6e7
cmp edi, 0xdce
jbe 0x18004d8f4
movzx edi, byte [rsp + 0x40]
lea eax, [r14 + rsi]
lea r14d, [rax + rsi*4]
cmp r14d, r15d
jbe 0x18004c883
mov eax, ebx
mov rcx, qword [rbp + 0x3a0]
xor rcx, rsp
call fcn.1800c9c10
add rsp, 0x4b8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret