Function at 0x180052140
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x520]
sub rsp, 0x620
mov rax, qword [0x1800cd230]
xor rax, rsp
mov qword [rbp + 0x510], rax
lea esi, [rdx + 0x1ebd]
mov qword [rsp + 0x78], r9
mov r10, r9
mov qword [rbp - 0x68], r8
xor r9d, r9d
mov dword [rbp - 0x80], edx
mov dword [rsp + 0x70], esi
mov r13, rcx
lea rcx, [0x180000000]
mov edi, edx
mov ebx, edx
cmp edx, esi
jae 0x1800522a0
mov r14, qword [rbp + 0x30]
lea edx, [r9 + 0x4d]
mov r12, qword [rbp + 0x30]
lea ecx, [rdx - 9]
mov rsi, qword [rbp + 0x30]
lea r9d, [rdx + 0x1c]
mov r15d, dword [rbp + 0x14]
mov edi, 0x616e
mov eax, dword [rsp + 0x70]
mov r11d, 0x6567
nop dword [rax]
cmp ebx, 0x934
ja 0x180052896
je 0x180052889
cmp ebx, 0x1e8
ja 0x180052527
je case.0x1800537ae.450
cmp ebx, 0x65
ja 0x18005220f
jne 0x180052285
mov r12, qword [r8]
mov r14, r10
add r12, r10
xor eax, eax
mov r15d, eax
jmp case.default.0x18005224e
cmp ebx, 0x1a5
ja 0x180052516
je 0x180052500
lea eax, [rbx - 0xa3]
cmp eax, 0xf7
ja case.default.0x18005224e
lea rcx, [0x180000000]
movzx eax, byte [rcx + rax + 0x5487c]
mov ecx, dword [rcx + rax*4 + 0x5484c]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov r9, r10
xor r8d, r8d
mov edx, 0x102
xor ecx, ecx
call fcn.180013ba0
mov r10, qword [rsp + 0x78]
mov edx, 0x4d
mov r8, qword [rbp - 0x68]
mov r9d, 0x69
mov r11d, 0x6567
mov ecx, 0x44
mov eax, dword [rsp + 0x70]
add ebx, 0x81
cmp ebx, eax
jb 0x1800521d0
mov edi, dword [rbp - 0x80]
lea rcx, [0x180000000]
xor r9d, r9d
lea eax, [rdi + 0x1a4]
mov dword [rbp + 0x14], eax
cmp edi, eax
jae case.0x1800537ae.450
mov r15, qword [rbp + 8]
mov ebx, 0x6a
mov rsi, qword [rbp + 0x30]
movabs rdx, 0x6c0064002e
movzx r13d, byte [rbp - 0x70]
mov r14d, dword [rbp - 0x38]
mov r12d, dword [rsp + 0x70]
nop word [rax + rax]
cmp edi, 0x1a6
ja 0x180053784
je 0x180053711
lea eax, [rdi - 0xa3]
cmp eax, 0xfc
ja case.0x1800537ae.451
movzx eax, byte [rcx + rax + 0x54a0c]
mov ecx, dword [rcx + rax*4 + 0x54974]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
movss xmm0, dword [r10]
movss dword [rbp - 0x6c], xmm0
mov eax, dword [rbp - 0x6c]
and eax, 0xbf800000
or eax, 0x3f800000
mov dword [rbp - 0x6c], eax
jmp case.0x18005224e.164
inc dword [0x1800cddc0]
jmp case.0x18005224e.164
mov eax, dword [str.estr]
mov dword [rbp + 0x289], eax
movzx eax, word [0x1800be358]
mov word [rbp + 0x28d], ax
movzx eax, byte [0x1800be35a]
mov byte [rbp + 0x28f], al
jmp case.0x18005224e.164
mov word [rbp + 0x288], 0x44
jmp case.0x18005224e.164
mov rdx, qword [r10]
xor eax, eax
mov r8, qword [r10 + 8]
mov esi, eax
cmp rdx, r8
jae 0x1800523cc
cmp qword [rdx], 0
je 0x1800523c3
mov rax, qword [rdx + 8]
mov ecx, 1
test rax, rax
je 0x1800523bc
nop word [rax + rax]
mov rax, qword [rax + 8]
inc rcx
test rax, rax
jne 0x1800523b0
cmp rcx, rsi
cmova rsi, rcx
add rdx, 0x10
cmp rdx, r8
jb 0x180052392
mov r8, qword [rbp - 0x68]
mov edx, 0x4d
jmp case.0x18005224e.164
mov dword [rbp + 0x28], r15d
jmp case.0x18005224e.164
movss xmm0, dword [rbp - 0x6c]
movss dword [rbp + 0x28], xmm0
jmp case.0x18005224e.164
cmp qword [0x1800ce138], 0
je case.0x1800537ae.450
test r10, r10
lea rax, str.Miliyan_00
lea rdx, [0x1800babdc]
cmovne rax, r10
mov rcx, rax
mov qword [rsp + 0x78], rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rdi, rax
test rax, rax
je 0x18005249c
mov r9, rax
lea rcx, [0x1800cddc0]
mov edx, 0x374
mov r8d, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
cmp rax, 1
je 0x180052482
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ferror]
test eax, eax
je 0x180052468
lea rcx, str.datasec_start_sec____NULL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x180052482
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.CLIENT_libcurl_7.31.0
call fcn.1800a6fd0
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
test eax, eax
je 0x18005249c
lea rcx, str.No_WebContents_to_override
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
mov r10, qword [rsp + 0x78]
mov edx, 0x4d
mov r8, qword [rbp - 0x68]
mov edi, 0x616e
jmp 0x180052270
cmp r14, r12
jae case.0x18005224e.164
nop dword [rax]
movzx eax, byte [r14]
inc r14
mov ecx, eax
mov edi, eax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isprint]
test eax, eax
je 0x1800524dc
mov ecx, 1
jmp 0x1800524f6
test byte [r13], 2
jne 0x180052fa4
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iscntrl]
xor ecx, ecx
test eax, eax
sete cl
add r15d, ecx
cmp r14, r12
jb 0x1800524c0
jmp 0x18005249c
mov edi, 0x57
mov word [rbp + 0x28f], di
mov edi, 0x616e
jmp 0x180052285
cmp ebx, 0x1d9
je case.0x1800537ae.450
jmp 0x180052285
cmp ebx, 0x5ad
ja 0x180052758
je 0x18005272c
cmp ebx, 0x3a9
ja 0x18005265f
je 0x18005263c
cmp ebx, 0x226
je 0x18005260b
cmp ebx, 0x2a7
je 0x1800525b7
cmp ebx, 0x328
jne 0x180052285
mov r8d, 9
lea rdx, str.SetForeg
lea rcx, [rbp + 0x438]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [str.round]
mov dword [rbp + 0x440], eax
movzx eax, word [0x1800be650]
mov word [rbp + 0x444], ax
mov eax, dword [str.Wind]
mov dword [rbp + 0x445], eax
mov byte [rbp + 0x449], 0x6f
jmp 0x180052262
movsd xmm0, qword [str.ser3]
lea rdx, [0x1800bc910]
movzx eax, word [0x1800be298]
lea rcx, [rbp + 0x450]
mov r8d, 2
movsd qword [rbp + 0x452], xmm0
mov word [rbp + 0x45a], ax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov eax, dword [0x1800bdc9c]
mov dword [rbp + 0x45e], eax
mov eax, 0x6c
mov dword [rbp + 0x462], eax
jmp 0x180052262
mov edi, 0x77
mov dword [rbp + 0x291], 0x6f646e
mov word [rbp + 0x294], di
mov edi, 0x616e
mov byte [rbp + 0x290], 0x69
mov dword [rbp + 0x450], 0x75
jmp 0x180052285
mov r11d, 0x77
mov dword [rbp + 0x3f0], 0x730075
mov word [rbp + 0x44a], r11w
mov r11d, 0x6567
jmp 0x180052285
cmp ebx, 0x42a
je 0x1800526ec
cmp ebx, 0x4ab
je 0x1800526be
cmp ebx, 0x52c
jne 0x180052285
mov edi, 0x70
mov word [rbp + 0x2bb], di
mov edi, 0x68
mov dword [rbp + 0x2bc], 0x637461
mov word [rbp + 0x2bf], di
mov edi, 0x7365
mov word [rbp + 0x2c0], dx
mov word [rbp + 0x2c1], di
mov edi, 0x616e
jmp 0x180052285
xor edx, edx
mov word [rbp + 0x2b8], cx
mov word [rbp + 0x404], dx
mov edx, 0x73
mov word [rbp + 0x2b9], r9w
mov word [rbp + 0x2ba], dx
mov edx, 0x4d
jmp 0x180052285
mov edx, 0x65
mov dword [rbp + 0x3f6], 0x330072
mov word [rbp + 0x3f4], dx
mov edx, 0x6c
mov word [rbp + 0x402], dx
mov edx, 0x4d
mov dword [rbp + 0x3fa], 0x2e0032
mov dword [rbp + 0x3fe], 0x6c0064
jmp 0x180052285
mov edx, 0x65
mov dword [rbp + 0x2c3], 0x676173
mov word [rbp + 0x2c6], dx
mov edx, 0x41
mov word [rbp + 0x2c7], dx
mov edx, 0x4d
jmp 0x180052285
cmp ebx, 0x7b1
ja 0x180052824
je 0x1800527fa
cmp ebx, 0x62e
je 0x1800527c3
cmp ebx, 0x6af
je 0x18005279a
cmp ebx, 0x730
jne 0x180052285
mov dword [rbp + 0x270], 0x447349
mov edi, 0x616e
jmp 0x180052285
mov ecx, 0x64
mov dword [rbp + 0x418], 0x6c006c
mov word [rbp + 0x416], cx
xor ecx, ecx
mov word [rbp + 0x41c], cx
mov ecx, 0x44
jmp 0x180052285
mov r11d, 0x33
mov dword [rbp + 0x408], 0x730075
mov word [rbp + 0x410], r11w
mov r11d, 0x6567
mov dword [rbp + 0x40c], 0x720065
mov dword [rbp + 0x412], 0x2e0032
jmp 0x180052285
mov ecx, 0x61
mov word [rbp + 0x273], r9w
mov word [rbp + 0x274], cx
mov ecx, 0x6c
mov word [rbp + 0x275], cx
mov ecx, 0x44
jmp 0x180052285
cmp ebx, 0x832
je 0x180052875
cmp ebx, 0x8b3
jne 0x180052285
mov r9d, 0x65
mov word [rbp + 0x279], r9w
mov r9d, 0x73
mov word [rbp + 0x27a], r9w
mov word [rbp + 0x27b], r9w
mov r9d, 0x61
mov word [rbp + 0x27c], r9w
mov r9d, 0x69
jmp 0x180052285
mov dword [rbp + 0x276], 0x4d676f
mov edi, 0x616e
jmp 0x180052285
mov word [rbp + 0x27d], r11w
jmp 0x180052285
cmp ebx, 0x1144
ja 0x180052bb6
je 0x180052b84
cmp ebx, 0xd3c
ja 0x180052a84
je 0x180052a3b
cmp ebx, 0xb38
ja 0x18005297c
je 0x180052953
cmp ebx, 0x9b5
je 0x180052931
cmp ebx, 0xa36
je 0x1800528fd
cmp ebx, 0xab7
jne 0x180052285
mov dword [rbp + 0x388], 0x6c006c
mov r9d, 0x69
jmp 0x180052285
mov edi, 0x64
mov dword [rbp + 0x37a], 0x650073
mov word [rbp + 0x386], di
mov edi, 0x616e
mov dword [rbp + 0x37e], 0x330072
mov dword [rbp + 0x382], 0x2e0032
jmp 0x180052285
mov edx, 0x41
mov word [rbp + 0x27f], dx
mov edx, 0x75
mov word [rbp + 0x378], dx
mov edx, 0x4d
jmp 0x180052285
xor ecx, ecx
mov word [rbp + 0x38c], cx
mov ecx, 0x47
mov word [rbp + 0x300], cx
mov ecx, 0x44
mov dword [rbp + 0x301], 0x654d7465
jmp 0x180052285
cmp ebx, 0xbb9
je 0x180052a12
cmp ebx, 0xc3a
je 0x1800529e8
cmp ebx, 0xcbb
jne 0x180052285
mov eax, dword [0x1800bcca0]
lea rcx, [rbp + 0x468]
movsd xmm0, qword [str.r32.d]
sub rcx, 2
mov dword [rbp + 0x476], eax
mov eax, 0x6c
mov dword [rbp + 0x478], eax
movsd qword [rbp + 0x46e], xmm0
nop
cmp word [rcx + 2], 0
lea rcx, [rcx + 2]
jne 0x1800529d0
mov eax, dword [0x1800babb4]
mov dword [rcx], eax
jmp case.0x18005224e.164
mov r8d, 1
lea rdx, [0x1800bcbc4]
lea rcx, [rbp + 0x468]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov eax, 0x65
mov dword [rbp + 0x46c], eax
jmp 0x180052262
mov edi, 0x75
mov dword [rbp + 0x305], 0x617373
mov dword [rbp + 0x468], edi
mov edi, 0x616e
mov dword [rbp + 0x308], 0x416567
jmp 0x180052285
mov eax, dword [str.ShowWindowMenu]
lea rdx, [0x1800be684]
mov dword [rbp + 0x368], eax
lea rcx, [rbp + 0x368]
movzx eax, byte [0x1800be664]
mov r8d, 5
mov byte [rbp + 0x36c], al
mov byte [rbp + 0x36d], 0
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov dword [rbp + 0x338], 0x730075
jmp 0x180052262
cmp ebx, 0xf40
ja 0x180052b3a
je 0x180052b24
cmp ebx, 0xdbd
je 0x180052ae9
cmp ebx, 0xe3e
je 0x180052acc
cmp ebx, 0xebf
jne 0x180052285
mov byte [rbp + 0x228], 0x45
mov word [rbp + 0x229], di
mov byte [rbp + 0x22b], 0
jmp 0x180052285
xor ecx, ecx
mov dword [rbp + 0x348], 0x6c006c
mov word [rbp + 0x34c], cx
mov ecx, 0x44
jmp 0x180052285
mov r9d, 0x65
mov dword [rbp + 0x33e], 0x330072
mov word [rbp + 0x33c], r9w
mov r9d, 0x64
mov word [rbp + 0x346], r9w
mov r9d, 0x69
mov dword [rbp + 0x342], 0x2e0032
jmp 0x180052285
mov edi, 0x6c62
mov word [rbp + 0x22b], di
mov edi, 0x616e
jmp 0x180052285
cmp ebx, 0xfc1
je 0x180052b78
cmp ebx, 0x1042
je 0x180052b6c
cmp ebx, 0x10c3
jne 0x180052285
mov edi, 0x6957
mov word [rbp + 0x22e], di
mov edi, 0x616e
jmp 0x180052285
mov byte [rbp + 0x22e], 0
jmp 0x180052285
mov byte [rbp + 0x22d], 0x65
jmp 0x180052285
mov r8d, 1
mov byte [rbp + 0x230], 0
lea rdx, [0x1800be2a5]
lea rcx, [rbp + 0x230]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, 0x6f64
mov word [rbp + 0x231], ax
jmp 0x180052262
cmp ebx, 0x154c
ja 0x180052dff
je 0x180052db5
cmp ebx, 0x1348
ja 0x180052cf4
je 0x180052cb3
cmp ebx, 0x11c5
je 0x180052c84
cmp ebx, 0x1246
je 0x180052c5a
cmp ebx, 0x12c7
jne 0x180052285
mov r8d, 0xa
lea rdx, [rbp + 0x398]
lea ecx, [r8 - 7]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__ltow]
mov r8d, 2
lea rdx, [0x1800bc910]
lea rcx, [rbp + 0x390]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
movabs rax, 0x6c006c0064
mov qword [rbp + 0x39e], rax
mov eax, dword [str.Check_failed:_value_.]
mov dword [rbp + 0x298], eax
movzx eax, byte [0x1800be62c]
mov byte [rbp + 0x29c], al
jmp 0x180052262
mov eax, 0x73
mov dword [rbp + 0x392], eax
mov eax, dword [0x1800bdc94]
mov dword [rbp + 0x394], eax
movzx eax, word [0x1800bdc98]
mov word [rbp + 0x398], ax
jmp case.default.0x18005224e
xor eax, eax
mov word [rbp + 0x233], 0x77
lea rdx, [0x1800bba40]
mov word [rbp + 0x390], ax
lea rcx, [rbp + 0x390]
lea r8d, [rax + 1]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp 0x180052262
mov r8d, 1
mov byte [rbp + 0x29d], 0
lea rdx, [0x1800be403]
lea rcx, [rbp + 0x29d]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
movzx eax, word [0x1800be45c]
mov word [rbp + 0x29e], ax
movzx eax, byte [0x1800be45e]
mov byte [rbp + 0x2a0], al
jmp 0x180052262
cmp ebx, 0x13c9
je 0x180052da9
cmp ebx, 0x144a
je 0x180052d56
cmp ebx, 0x14cb
jne 0x180052285
mov r8d, 4
lea rdx, [0x1800be2f4]
lea rcx, [rbp + 0x3ac]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov eax, dword [0x1800be314]
mov dword [rbp + 0x3b4], eax
movzx eax, word [0x1800be318]
mov word [rbp + 0x3b8], ax
xor eax, eax
mov word [rbp + 0x3ba], ax
jmp 0x180052262
mov r8d, 3
lea rdx, [0x1800be584]
lea rcx, [rbp + 0x298]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov eax, 0x6e6f
mov byte [rbp + 0x2a6], 0
mov word [rbp + 0x2a4], ax
lea rdx, [0x1800be5f0]
xor eax, eax
lea rcx, [rbp + 0x3a8]
mov word [rbp + 0x3a8], ax
lea r8d, [rax + 2]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp 0x180052262
mov byte [rbp + 0x2a1], 0
jmp 0x180052285
lea rcx, [rbp + 0x2a8]
mov dword [rbp + 0x3ba], 0x6c
dec rcx
mov byte [rbp + 0x2a8], 0
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x180052dd0
movzx eax, word [0x1800be3f4]
mov word [rcx], ax
movzx eax, byte [0x1800be3f6]
mov byte [rcx + 2], al
mov eax, 0x74
mov word [rbp + 0x2aa], ax
jmp case.0x18005224e.164
cmp ebx, 0x1750
ja 0x180052f65
je 0x180052f2b
cmp ebx, 0x15cd
je 0x180052ead
cmp ebx, 0x164e
je 0x180052e5e
cmp ebx, 0x16cf
jne 0x180052285
mov r8d, 5
mov byte [rbp + 0x2d5], 0
lea rdx, [0x1800be4e9]
lea rcx, [rbp + 0x2d5]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0x2da], 0
jmp 0x180052262
mov r8d, 0xa
lea rdx, [rbp + 0x4e8]
lea ecx, [r8 + 0x16]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__ultow]
mov r8d, 4
lea rdx, str..dll
lea rcx, [rbp + 0x4e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov eax, dword [0x1800be493]
mov dword [rbp + 0x2d0], eax
movzx eax, byte [0x1800be497]
mov byte [rbp + 0x2d4], al
jmp 0x180052262
mov eax, dword [str.Window]
lea rdx, [0x1800be2cc]
mov dword [rbp + 0x2ab], eax
lea rcx, [rbp + 0x2b3]
movzx eax, word [0x1800be2c4]
mov r8d, 3
mov word [rbp + 0x2af], ax
movzx eax, word [0x1800be2c8]
mov word [rbp + 0x2b1], ax
movzx eax, byte [0x1800be2ca]
mov byte [rbp + 0x2b3], al
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
movsd xmm0, qword [str.user]
mov eax, 0x41
mov word [rbp + 0x2b5], ax
movzx eax, word [0x1800be2d8]
mov word [rbp + 0x4e8], ax
movsd qword [rbp + 0x4e0], xmm0
jmp 0x180052262
mov r8d, 1
lea rdx, [0x1800be321]
lea rcx, [rbp + 0x2d0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
movzx eax, word [0x1800be33c]
mov word [rbp + 0x2db], ax
movzx eax, byte [0x1800be33e]
mov byte [rbp + 0x2dd], al
jmp 0x180052262
cmp ebx, 0x17d1
je 0x180052f98
cmp ebx, 0x1852
jne 0x180052285
mov eax, dword [0x1800be3a2]
mov dword [rbp + 0x350], eax
movzx eax, word [0x1800be3a6]
mov word [rbp + 0x354], ax
jmp case.default.0x18005224e
mov byte [rbp + 0x2de], 0
jmp 0x180052285
mov dword [rbp + 0x28], 0xffffffff
jmp case.0x1800537ae.450
mov rax, rsi
jmp 0x180054822
mov eax, 0x41
mov dword [rbp + 0x480], 0x730075
mov word [rbp + 0x26a], ax
mov dword [rbp + 0x484], 0x720065
mov dword [rbp + 0x488], 0x320033
jmp case.0x1800537ae.451
mov dword [rbp + 0x42a], 0x2e0032
mov dword [rbp + 0x42e], 0x6c0064
mov dword [rbp + 0x432], 0x6c
jmp case.0x1800537ae.451
mov eax, 0x65
mov dword [rbp + 0x420], 0x730075
mov word [rbp + 0x424], ax
mov dword [rbp + 0x426], 0x330072
jmp case.0x1800537ae.451
mov eax, dword [0x1800bd4f8]
mov dword [rbp + 0x3e8], eax
movzx eax, word [0x1800bd4fc]
mov word [rbp + 0x3ec], ax
jmp case.0x1800537ae.451
mov r8d, 5
mov dword [rbp + 0x3d8], 0x75
lea rdx, str.ser3
lea rcx, [rbp + 0x3da]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov r8d, 0xa
lea rdx, [rbp + 0x3e2]
lea ecx, [r8 - 8]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__ultow]
mov eax, dword [0x1800bba4c]
xor r9d, r9d
mov r10, qword [rsp + 0x78]
mov dword [rbp + 0x3e4], eax
movzx eax, word [0x1800bba50]
mov word [rbp + 0x3e8], ax
jmp case.0x1800537ae.451
mov dword [rbp + 0x267], 0x726f73
jmp case.0x1800537ae.451
mov eax, dword [str.indo]
mov dword [rbp + 0x2e7], eax
mov eax, 0x77
mov word [rbp + 0x2eb], ax
mov dword [rbp + 0x2ec], 0x417845
mov dword [rbp + 0x3c0], 0x730075
jmp case.0x1800537ae.451
lea rcx, [rbp + 0x248]
dec rcx
nop word [rax + rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x180053100
movzx eax, word [0x1800be6e4]
mov word [rcx], ax
mov eax, 0x65
mov word [rbp + 0x255], ax
mov eax, 0x63
mov word [rbp + 0x256], ax
movzx eax, word [0x1800be6e8]
mov word [rbp + 0x257], ax
mov eax, 0x78
mov word [rbp + 0x259], ax
jmp case.0x1800537ae.451
mov eax, dword [0x1800be730]
mov dword [rbp + 0x3c4], eax
movzx eax, word [0x1800be734]
mov word [rbp + 0x3c8], ax
mov dword [rbp + 0x3ca], 0x2e0032
jmp case.0x1800537ae.451
mov byte [rbp + 0x320], 0
jmp case.0x1800537ae.451
mov r8d, 5
mov byte [rbp + 0x31d], 0
lea rdx, [0x1800be75a]
mov word [rbp + 0x498], r9w
lea rcx, [rbp + 0x498]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r10, qword [rsp + 0x78]
movabs rax, 0x6c0064002e0032
xor r9d, r9d
mov qword [rbp + 0x4a2], rax
mov word [rbp + 0x4aa], r9w
jmp case.0x1800537ae.451
mov r8d, 4
mov word [rbp + 0x3d4], r9w
lea rdx, str.GetWCDMAVisiblePage
lea rcx, [rbp + 0x310]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [0x1800be7a1]
xor r9d, r9d
mov r10, qword [rsp + 0x78]
mov dword [rbp + 0x314], eax
movzx eax, byte [0x1800be7a5]
mov byte [rbp + 0x318], al
jmp case.0x1800537ae.451
mov eax, 0x73
mov dword [rbp + 0x2f0], 0x69676552
mov word [rbp + 0x2f4], ax
jmp case.0x1800537ae.451
mov eax, 0x74
mov byte [rbp + 0x2fe], 0
mov word [rbp + 0x2f5], ax
mov eax, 0x6c
mov dword [rbp + 0x2f6], 0x437265
mov word [rbp + 0x2f9], ax
mov dword [rbp + 0x2fa], 0x41737361
jmp case.0x1800537ae.451
mov eax, dword [0x1800be812]
mov dword [rbp + 0x3ce], eax
movzx eax, word [0x1800be816]
mov word [rbp + 0x3d2], ax
jmp case.0x1800537ae.451
mov eax, 0x6c
mov word [rbp + 0x4aa], ax
jmp case.0x1800537ae.451
mov eax, 0x41
mov word [rbp + 0x248], ax
mov eax, 0x64
mov word [rbp + 0x249], ax
mov word [rbp + 0x24a], bx
jmp case.0x1800537ae.451
mov word [rbp + 0x494], r9w
jmp case.0x1800537ae.451
mov eax, 0x52
lea rdx, [0x1800bba58]
lea rcx, [rbp + 0x238]
mov word [rbp + 0x238], ax
lea r8d, [rax - 0x50]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 3
mov word [rbp + 0x23b], 0x65
lea rdx, [0x1800be83c]
lea rcx, [rbp + 0x23c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov r10, qword [rsp + 0x78]
xor r9d, r9d
jmp case.0x1800537ae.451
mov eax, dword [0x1800bc7d0]
movsd xmm0, qword [str.ser32]
mov dword [rbp + 0x4d2], eax
mov eax, 0x6c
mov qword [rbp + 0x4d4], rdx
mov dword [rbp + 0x4da], eax
movsd qword [rbp + 0x4ca], xmm0
jmp case.0x1800537ae.451
mov r8d, 2
lea rdx, [0x1800be866]
lea rcx, [rbp + 0x35e]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov r10, qword [rsp + 0x78]
xor r9d, r9d
mov dword [rbp + 0x362], 0x6c
jmp case.0x1800537ae.451
mov eax, 0x65
mov word [rbp + 0x23e], ax
movzx eax, word [0x1800be8a0]
mov word [rbp + 0x23f], ax
movzx eax, byte [0x1800be8a2]
mov byte [rbp + 0x241], al
mov eax, dword [0x1800be8e0]
mov dword [rbp + 0x4b0], eax
movzx eax, word [0x1800be8e4]
mov word [rbp + 0x4b4], ax
jmp case.0x1800537ae.451
movsd xmm0, qword [0x1800be904]
movzx eax, word [0x1800be90c]
movsd qword [rbp + 0x4b6], xmm0
mov word [rbp + 0x4be], ax
mov dword [rbp + 0x4c0], 0x6c006c
mov word [rbp + 0x4c4], r9w
jmp case.0x1800537ae.451
movzx eax, word [0x1800be914]
lea rdx, str.tWin
mov word [rbp + 0x24b], ax
lea rcx, [rbp + 0x24d]
movzx eax, byte [0x1800be916]
mov r8d, 5
mov byte [rbp + 0x24d], al
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
movzx eax, word [0x1800be920]
xor r9d, r9d
mov r10, qword [rsp + 0x78]
mov word [rbp + 0x251], ax
mov eax, 0x77
mov word [rbp + 0x253], ax
jmp case.0x1800537ae.451
lea rcx, [rbp + 0x260]
mov byte [rbp + 0x260], 0
dec rcx
nop dword [rax + rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x180053470
movzx eax, word [0x1800be924]
mov word [rcx], ax
movzx eax, byte [0x1800be926]
mov byte [rcx + 2], al
jmp case.0x1800537ae.451
mov r8d, 2
mov word [rbp + 0x356], r9w
lea rdx, [0x1800be9c8]
lea rcx, [rbp + 0x350]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r10, qword [rsp + 0x78]
xor r9d, r9d
mov word [rbp + 0x35e], r9w
mov dword [rbp + 0x35a], 0x2e0032
jmp case.0x1800537ae.451
mov r8d, 4
lea rdx, str.Send
lea rcx, [rbp + 0x320]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov eax, dword [str.sage]
xor r9d, r9d
mov r10, qword [rsp + 0x78]
mov dword [rbp + 0x324], 0x73654d
mov dword [rbp + 0x327], eax
mov eax, 0x41
mov word [rbp + 0x32b], ax
jmp case.0x1800537ae.451
mov eax, 0x43
mov word [rbp + 0x2e0], ax
mov eax, 0x74
mov dword [rbp + 0x2e1], 0x616572
mov word [rbp + 0x2e4], ax
mov eax, 0x65
mov word [rbp + 0x2e5], ax
mov eax, 0x57
mov word [rbp + 0x2e6], ax
jmp case.0x1800537ae.451
mov r8d, 3
mov word [rbp + 0x319], 0x52
lea rdx, [0x1800bea22]
lea rcx, [rbp + 0x31a]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov r10, qword [rsp + 0x78]
xor r9d, r9d
jmp case.0x1800537ae.451
mov word [rbp + 0x3c4], r9w
jmp case.0x1800537ae.451
lea r9, [rbp + 0x288]
xor r8d, r8d
mov edx, 0xef
lea rcx, [rbp + 0x450]
call fcn.180042280
lea r9, [rbp + 0x438]
mov qword [rbp + 0xe0], rax
xor r8d, r8d
lea rcx, [rbp + 0x3f0]
mov edx, 0xef
call fcn.180042280
lea r9, [rbp + 0x2b8]
mov qword [rbp + 0xd8], rax
xor r8d, r8d
lea rcx, [rbp + 0x408]
mov edx, 0xef
call fcn.180042280
lea r9, [rbp + 0x270]
mov qword [rbp + 0x118], rax
xor r8d, r8d
lea rcx, [rbp + 0x378]
mov edx, 0xef
call fcn.180042280
mov r10, qword [rsp + 0x78]
xor r9d, r9d
mov qword [rbp + 0x110], rax
jmp case.0x1800537ae.451
mov eax, dword [0x1800bea2a]
mov dword [rbp + 0x330], eax
movzx eax, byte [0x1800bea2e]
mov byte [rbp + 0x334], al
jmp case.0x1800537ae.451
mov word [rbp + 0x4ac], r9w
jmp case.0x1800537ae.451
mov dword [rbp + 0x48c], 0x64002e
mov dword [rbp + 0x490], 0x6c006c
jmp case.0x1800537ae.451
mov eax, 0x61
mov word [rbp + 0x262], ax
movzx eax, word [0x1800bea40]
mov word [rbp + 0x263], ax
mov eax, 0x75
mov word [rbp + 0x265], ax
mov eax, 0x72
mov word [rbp + 0x266], ax
jmp case.0x1800537ae.451
mov r8d, 5
lea rdx, str.user
lea rcx, [rbp + 0x4f8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov eax, dword [0x1800bea50]
xor r9d, r9d
movsd xmm0, qword [str.32.dll]
mov r10, qword [rsp + 0x78]
mov dword [rbp + 0x508], eax
movzx eax, word [0x1800bea54]
mov word [rbp + 0x50c], ax
movsd qword [rbp + 0x500], xmm0
jmp case.0x1800537ae.451
mov eax, 0x75
mov byte [rbp + 0x335], 0
mov dword [rbp + 0x4c8], eax
jmp case.0x1800537ae.451
lea r9, [rbp + 0x300]
xor r8d, r8d
mov edx, 0xef
lea rcx, [rbp + 0x468]
call fcn.180042280
lea r9, [rbp + 0x368]
mov qword [rbp + 0x108], rax
xor r8d, r8d
lea rcx, [rbp + 0x338]
mov edx, 0xef
call fcn.180042280
lea r9, [rbp + 0x228]
mov qword [rbp + 0x100], rax
xor r8d, r8d
lea rcx, [rbp + 0x390]
mov edx, 0xef
call fcn.180042280
mov r10, qword [rsp + 0x78]
xor r9d, r9d
mov qword [rbp + 0xc8], rax
jmp case.0x1800537ae.451
lea eax, [rdi - 0x1ad]
cmp eax, 0x93
ja case.0x1800537ae.451
movzx eax, byte [rcx + rax + 0x54b68]
mov ecx, dword [rcx + rax*4 + 0x54b0c]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov rcx, qword [r10 + 0x10]
mov edx, 1
call qword [rbp + 0xc8]
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rbx + 0x10]
call qword [rbp + 0xd8]
mov rcx, qword [rbx + 0x20]
call qword [rbp + 0xe0]
mov rcx, qword [rbx + 0xc8]
call qword [sym.imp.GDI32.dll_DeleteObject]
mov r8, qword [rbx + 0xb0]
xor r9d, r9d
xor ecx, ecx
lea edx, [r9 + 0x6b]
call fcn.18004a730
mov r10, qword [rsp + 0x78]
xor r9d, r9d
jmp case.0x1800537ae.451
mov rcx, qword [r10 + 0x20]
mov r8d, r10d
mov edx, 0xffffffeb
call qword [rbp + 0xc0]
mov rbx, qword [rsp + 0x78]
lea r8, [0x180007f70]
mov edx, 4
mov rcx, qword [rbx + 0x20]
call qword [rbp + 0xc0]
xor eax, eax
mov ecx, eax
mov rax, qword [rbx + 0xb0]
add rax, 8
cmp dword [rax], 3
je 0x18005385b
nop dword [rax + rax]
inc ecx
lea rax, [rax + 0x20]
cmp dword [rax], 3
jne 0x180053850
movsxd rax, ecx
xor r9d, r9d
shl rax, 2
lea rcx, [rbp + 0x38]
xor edx, edx
mov qword [rbp + 0x38], rax
lea r8d, [r9 + 0x6f]
call fcn.180044e10
mov r10, qword [rsp + 0x78]
xor r9d, r9d
mov dword [rbp - 0x78], 0x3e8
mov qword [r10 + 0xb8], rax
jmp case.0x1800537ae.451
lea r9, [rbp + 0x298]
xor r8d, r8d
mov edx, 0xef
lea rcx, [rbp + 0x3a8]
call fcn.180042280
lea r9, [rbp + 0x2a8]
mov qword [rbp + 0xe8], rax
xor r8d, r8d
lea rcx, [rbp + 0x4e0]
mov edx, 0xef
call fcn.180042280
lea r9, [rbp + 0x2d0]
mov qword [rbp + 0xf0], rax
xor r8d, r8d
lea rcx, [rbp + 0x350]
mov edx, 0xef
call fcn.180042280
lea r9, [rbp + 0x320]
mov qword [rbp + 0xc0], rax
xor r8d, r8d
lea rcx, [rbp + 0x420]
mov edx, 0xef
call fcn.180042280
mov r10, qword [rsp + 0x78]
xor r9d, r9d
mov qword [rbp], rax
jmp case.0x1800537ae.451
mov eax, dword [rbp - 0x20]
mov ecx, dword [rbp - 0x28]
mov rdx, qword [rbp + 0xf8]
lea eax, [rax + rcx*2]
mov rcx, qword [rbp + 0x20]
mov dword [rbp + 0x88], eax
call qword [sym.imp.GDI32.dll_SelectObject]
mov rcx, qword [rsp + 0x78]
mov rdx, qword [rbp + 0x20]
mov rcx, qword [rcx + 0x10]
call qword [rbp + 0x140]
mov r10, qword [rsp + 0x78]
xor r9d, r9d
jmp case.0x1800537ae.451
mov r14, qword [r10 + 0xb0]
mov r12d, dword [rbp - 0x38]
mov eax, r12d
cdq
mov qword [rbp + 0x38], r14
sub eax, edx
mov rdx, qword [r10 + 0xb8]
sar eax, 1
cmp dword [r14 + 8], 3
mov r8d, eax
mov dword [rbp - 0x30], eax
mov dword [rsp + 0x70], eax
mov qword [rbp - 0x18], rdx
je 0x1800547f3
nop dword [rax]
mov ecx, 0x7e
cmp ecx, 0x7e
jne 0x180053f28
mov ecx, dword [r14 + 8]
test ecx, ecx
je 0x180053ce0
sub ecx, 1
je 0x1800539cd
cmp ecx, 1
je 0x180053e45
jmp 0x180053f10
mov ebx, 0x39
cmp ebx, 0x39
je 0x180053b18
cmp ebx, 0x16ef
jne 0x180053bb7
mov rdx, qword [rbp - 0x18]
lea r11, [0x1800bab8f]
mov ebx, dword [rbp - 0x78]
lea r9, [rbp + 0x90]
imul eax, r12d, 0x29
lea rcx, [rbp + 0xb0]
mov dword [rbp + 0xa8], r8d
mov dword [rdx], ebx
mov dword [rbp + 0xb0], ebx
mov dword [rbp + 0x40], 0x200
cdq
mov dword [rbp + 0x90], 0x10203
sub eax, edx
lea rdx, [rbp + 0x80]
sar eax, 1
add eax, r8d
lea r8, str.COMBOBOX
mov dword [rbp + 0x80], eax
mov eax, dword [rbp - 0x20]
mov dword [rbp + 0xa0], eax
mov eax, dword [rbp - 0xc]
mov dword [rbp + 0x98], eax
lea rax, [rbp + 0x40]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0xa8]
mov qword [rsp + 0x48], r10
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x98]
mov dword [rsp + 0x28], 0x105
mov qword [rsp + 0x20], rax
call fcn.180023830
inc ebx
mov qword [rbp + 0x18], rax
mov dword [rbp - 0x78], ebx
mov r12d, SHSetFolderPathW
nop dword [rax + rax]
cmp r12d, 0xe6
je 0x180053cbb
cmp r12d, 0x7f94
jne 0x180053c81
cmp byte [r15], 0
je 0x180053c81
mov r14d, 0x51
nop word [rax + rax]
mov eax, r14d
sub eax, 0x4d
je 0x180053c5f
sub eax, 1
je 0x180053c55
sub eax, 1
je 0x180053bf2
sub eax, 1
je 0x180053bd1
cmp eax, 1
jne 0x180053c62
mov rsi, r15
jmp 0x180053c62
mov edi, dword [rbp - 0x78]
lea eax, [r12 + r12*8]
cdq
mov dword [rbp - 0x80], r9d
and edx, 7
mov dword [rbp - 0x50], r9d
add eax, edx
mov dword [rbp - 0x40], edi
sar eax, 3
lea r9, [rbp - 0x50]
add eax, r8d
lea rcx, [rbp - 0x40]
mov dword [rbp - 0x48], eax
mov eax, r12d
cdq
and edx, 7
add eax, edx
lea rdx, [rbp - 0x48]
sar eax, 3
add eax, r8d
lea r8, str.STATIC
mov dword [rbp - 0x78], eax
mov eax, dword [rbp + 0x10]
mov dword [rbp - 0x60], eax
mov eax, dword [rbp - 0x24]
mov dword [rbp - 0x58], eax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x50], rax
mov rax, qword [r14]
mov qword [rsp + 0x48], r10
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x78]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x58]
mov dword [rsp + 0x28], 0x105
mov qword [rsp + 0x20], rax
call fcn.180023830
mov r8d, dword [rsp + 0x70]
inc edi
mov r10, qword [rsp + 0x78]
mov dword [rbp - 0x78], edi
add ebx, 0x16b6
cmp ebx, 0x2d6c
ja 0x180053f0c
xor r9d, r9d
jmp 0x1800539d2
movzx eax, byte [rsi]
test al, al
je 0x180053c62
nop dword [rax]
cmp al, r13b
je 0x180053c62
movzx eax, byte [rsi + 1]
inc rsi
test al, al
jne 0x180053be0
jmp 0x180053c62
xor r9d, r9d
lea rcx, [rbp + 8]
mov rbx, rsi
xor edx, edx
sub rbx, r15
lea r8d, [r9 + 0x6f]
lea rax, [rbx + 1]
mov qword [rbp + 8], rax
call fcn.180044e10
mov r8, rbx
mov rdx, r15
mov rcx, rax
mov rdi, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov rcx, rdi
mov r9, rdi
sub rcx, r15
xor r8d, r8d
mov edx, 0x143
mov byte [rcx + rsi], 0
mov rcx, qword [rbp + 0x18]
call qword [rbp]
xor r9d, r9d
mov r8d, 0x11b
mov rdx, rdi
xor ecx, ecx
call fcn.1800251e0
jmp 0x180053c62
cmp byte [rsi], 0
je 0x180053c62
inc rsi
jmp 0x180053c62
mov r15, rsi
dec r14d
cmp r14d, 0x4c
ja 0x180053ae0
cmp byte [r15], 0
jne 0x180053ad4
mov rax, qword [rbp + 0x18]
mov r14, qword [rbp + 0x38]
mov rbx, qword [rbp]
add r12d, 0x7eae
cmp r12d, 0xfd5c
jbe 0x180053ab0
movsxd r8, dword [r14 + 0x18]
xor r9d, r9d
mov edx, 0x14e
mov byte [rbp - 0x70], r13b
mov rcx, rax
mov qword [rbp + 8], r15
call rbx
mov r12d, dword [rbp - 0x38]
jmp 0x180053efb
mov rbx, qword [rbp]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x14b
mov rcx, rax
call rbx
mov r15, qword [r14 + 0x10]
mov rax, qword [rbp + 0x18]
movzx r13d, byte [r15]
inc r15
jmp 0x180053c85
mov ebx, 0x47
mov eax, ebx
sub eax, 0x46
je 0x180053eed
cmp eax, 1
jne 0x180053e30
mov edi, dword [rbp - 0x78]
lea eax, [r12 + r12*8]
cdq
mov dword [rbp - 0x40], r9d
and edx, 7
mov dword [rbp - 0x60], r9d
add eax, edx
mov dword [rbp - 0x78], edi
sar eax, 3
lea r9, [rbp - 0x60]
add eax, r8d
lea rcx, [rbp - 0x78]
mov dword [rbp - 0x80], eax
mov eax, r12d
cdq
and edx, 7
add eax, edx
lea rdx, [rbp - 0x80]
sar eax, 3
add eax, r8d
lea r8, str.Static
mov dword [rbp - 0x48], eax
mov eax, dword [rbp + 0x10]
mov dword [rbp - 0x50], eax
mov eax, dword [rbp - 0x24]
mov dword [rbp - 0x58], eax
lea rax, [rbp - 0x40]
mov qword [rsp + 0x50], rax
mov rax, qword [r14]
mov qword [rsp + 0x48], r10
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x48]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x58]
mov dword [rsp + 0x28], 0x105
mov qword [rsp + 0x20], rax
call fcn.180023830
mov rax, qword [rbp - 0x18]
lea r9, [rbp + 0x68]
mov ecx, dword [rsp + 0x70]
lea r8, str.EDIT
mov dword [rbp + 0x50], ecx
inc edi
mov dword [rbp + 0x78], edi
mov dword [rax], edi
lea eax, [r12 + r12*2]
cdq
mov dword [rbp + 0x48], 0x200
sub eax, edx
mov dword [rbp + 0x68], 0x10080
sar eax, 1
lea rdx, [rbp + 0x70]
add eax, ecx
mov rcx, qword [rsp + 0x78]
mov dword [rbp + 0x70], eax
mov eax, dword [rbp - 0x20]
mov dword [rbp + 0x58], eax
mov eax, dword [rbp - 0xc]
mov dword [rbp + 0x60], eax
lea rax, [rbp + 0x48]
mov qword [rsp + 0x50], rax
lea rax, [0x1800bab8f]
mov qword [rsp + 0x48], rcx
lea rcx, [rbp + 0x78]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x50]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x58]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x60]
mov dword [rsp + 0x28], 0x105
mov qword [rsp + 0x20], rax
call fcn.180023830
mov r8d, dword [rsp + 0x70]
inc edi
mov r10, qword [rsp + 0x78]
mov dword [rbp - 0x78], edi
mov qword [rbp + 0x18], rax
dec ebx
mov r9d, 0
cmp ebx, 0x45
ja 0x180053ce5
mov rdx, qword [rbp - 0x18]
mov edi, dword [rbp - 0x78]
lea ebx, [r12 + r8]
xor eax, eax
mov dword [rdx], edi
mov dword [rbp - 0x40], eax
lea r9, [rbp - 0x60]
mov eax, dword [rbp - 0x20]
lea rdx, [rbp - 0x80]
mov dword [rbp - 0x50], eax
lea rcx, [rbp - 0x78]
mov eax, dword [rbp - 0x24]
mov dword [rbp - 0x58], eax
lea rax, [rbp - 0x40]
mov qword [rsp + 0x50], rax
mov rax, qword [r14]
mov qword [rsp + 0x48], r10
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x48]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x58]
mov dword [rbp - 0x48], r8d
lea r8, str.BUTTON
mov dword [rsp + 0x28], 0x105
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x78], edi
mov dword [rbp - 0x60], 0x14003
mov dword [rbp - 0x80], ebx
call fcn.180023830
mov rcx, qword [rsp + 0x78]
xor eax, eax
inc edi
mov r8d, eax
cmp dword [r14 + 0x18], eax
mov rax, qword [rbp - 0x18]
mov rcx, qword [rcx + 0x20]
setne r8b
mov dword [rbp - 0x78], edi
mov edx, dword [rax]
call qword [rbp + reloc.SHELL32.dll_SHSetFolderPathW]
mov r8d, ebx
jmp 0x180053f0c
mov rdx, qword [r14 + 0x10]
mov rcx, qword [rbp + 0x18]
call qword [rbp + SHTestTokenMembership]
mov r8d, dword [rsp + 0x70]
lea eax, [r12 + r12*2]
cdq
sub eax, edx
sar eax, 1
add r8d, eax
mov rdx, qword [rbp - 0x18]
add r8d, dword [rbp - 0x30]
mov ecx, 0x7e
mov r10, qword [rsp + 0x78]
mov edi, 0x20f
mov dword [rsp + 0x70], r8d
add ecx, 0x12b4
mov r9d, 0
cmp ecx, 0x12b4
jbe 0x1800539a5
add r14, 0x20
add rdx, 4
mov qword [rbp + 0x38], r14
mov qword [rbp - 0x18], rdx
cmp dword [r14 + 8], 3
jne 0x1800539a0
mov r14d, dword [rbp - 0x38]
mov r12d, dword [rsp + 0x70]
jmp case.0x1800537ae.451
mov rcx, qword [rbp + 0x20]
mov edx, 0x5a
mov dword [r10 + 0xc4], r9d
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
mov ecx, 8
mov edx, eax
lea r8d, [rcx + 0x40]
call qword [sym.imp.KERNEL32.dll_MulDiv]
lea rcx, str._dcc:_brt:_2
xor r9d, r9d
mov qword [rsp + 0x68], rcx
neg eax
xor ecx, ecx
mov dword [rsp + 0x60], 0x20
mov dword [rsp + 0x58], ecx
xor r8d, r8d
mov dword [rsp + 0x50], ecx
xor edx, edx
mov dword [rsp + 0x48], ecx
mov dword [rsp + 0x40], 1
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], ecx
mov ecx, eax
call qword [sym.imp.GDI32.dll_CreateFontA]
mov rcx, qword [rsp + 0x78]
mov rdx, rax
mov qword [rcx + 0xc8], rax
mov rcx, qword [rbp + 0x20]
call qword [sym.imp.GDI32.dll_SelectObject]
mov r10, qword [rsp + 0x78]
xor r9d, r9d
mov qword [rbp + 0xf8], rax
jmp case.0x1800537ae.451
mov ecx, dword [rbp - 0x24]
lea r8, str.BUTTON
mov eax, r14d
mov dword [rbp - 0x30], r9d
cdq
mov dword [rbp - 0x50], ecx
sub eax, edx
mov dword [rbp - 0x80], 1
sar eax, 1
lea r9, [rbp - 0x58]
add r12d, eax
mov dword [rbp - 0x58], 0x10001
imul eax, r14d, 7
mov dword [rsp + 0x70], r12d
mov dword [rbp - 0x40], r12d
cdq
and edx, 3
add eax, edx
sar eax, 2
add eax, r12d
mov dword [rbp - 0x60], eax
mov eax, dword [rbp - 0x20]
add eax, ecx
lea rcx, [rbp - 0x80]
cdq
sub eax, edx
lea rdx, [rbp - 0x60]
sar eax, 1
sub eax, dword [rbp - 0x28]
mov dword [rbp - 0x48], eax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x50], rax
lea rax, [0x1800be7b8]
mov qword [rsp + 0x48], r10
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x40]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x48]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x50]
mov dword [rsp + 0x28], 0x105
mov qword [rsp + 0x20], rax
call fcn.180023830
mov r10, qword [rsp + 0x78]
xor r9d, r9d
jmp case.0x1800537ae.451
mov ecx, dword [rbp - 0x20]
lea r8, str.BUTTON
imul eax, r14d, 7
mov dword [rbp - 0x30], r9d
lea r9, [rbp - 0x58]
mov dword [rbp - 0x48], ecx
mov dword [rbp - 0x80], 2
mov dword [rbp - 0x58], 0x10000
cdq
mov dword [rbp - 0x40], r12d
and edx, 3
add eax, edx
sar eax, 2
add eax, r12d
mov dword [rbp - 0x60], eax
mov eax, dword [rbp - 0x24]
add eax, ecx
lea rcx, [rbp - 0x80]
cdq
sub eax, edx
lea rdx, [rbp - 0x60]
sar eax, 1
add eax, dword [rbp - 0x28]
mov dword [rbp - 0x50], eax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x50], rax
lea rax, str.Cancel
mov qword [rsp + 0x48], r10
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x40]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x48]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x50]
mov dword [rsp + 0x28], 0x105
mov qword [rsp + 0x20], rax
call fcn.180023830
mov rbx, qword [rsp + 0x78]
xor r9d, r9d
xor r8d, r8d
mov edx, pe_nt_image_headers64
mov rcx, qword [rbx + 0x20]
call qword [rbp]
mov rcx, qword [rbx + 0x10]
xor edx, edx
call qword [rbp + 0xc8]
mov r10, rbx
xor r9d, r9d
jmp case.0x1800537ae.451
lea rax, str.Enqueued____s
lea rcx, [rbp + 0x150]
mov qword [rbp + 0x190], rax
call qword [rbp + 0x30]
mov rcx, qword [rsp + 0x78]
mov rcx, qword [rcx + 0x10]
call qword [rbp + 0x148]
mov rcx, rax
mov qword [rbp + 0x20], rax
mov edx, 1
call qword [sym.imp.GDI32.dll_SetMapMode]
mov r10, qword [rsp + 0x78]
xor r9d, r9d
jmp case.0x1800537ae.451
mov rcx, qword [rbp + 0x20]
lea rdx, [rbp + 0x1f0]
call qword [sym.imp.GDI32.dll_GetTextMetricsA]
test eax, eax
je 0x1800541f0
mov r14d, dword [rbp + 0x1f8]
mov ebx, dword [rbp + 0x204]
add r14d, dword [rbp + 0x1f4]
mov dword [rbp - 0x28], ebx
jmp 0x1800541fd
mov dword [rbp - 0x28], 0x1e
mov r14d, 0x1e
mov rbx, qword [rbp - 0x68]
lea r8, [rbp - 0x30]
mov r9, qword [rsp + 0x78]
lea rcx, [rbp + 0xd0]
xor edx, edx
mov dword [rbp - 0x38], r14d
mov eax, dword [rbx]
mov dword [rbp - 0x30], eax
xor eax, eax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x5d
call fcn.18004cde0
mov r10, qword [rsp + 0x78]
xor r9d, r9d
mov dword [rbp - 8], r9d
mov dword [rbp - 0x10], r9d
mov qword [r10 + 0xb0], rax
mov eax, dword [rbx]
mov dword [r10 + 0xc0], eax
mov eax, r14d
cdq
sub eax, edx
sar eax, 1
mov dword [rbp - 0x6c], eax
jmp case.0x1800537ae.451
mov rcx, qword [r10 + 0x20]
mov edx, 1
call qword [rbp + 0x100]
mov rbx, qword [rbp + 0x108]
lea rcx, [rbp + 0x1a0]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call rbx
test eax, eax
jle 0x1800537fa
nop dword [rax]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x78]
lea rdx, [rbp + 0x1a0]
mov rcx, qword [rcx + 0x20]
call qword [rbp + pe_nt_image_headers64]
test eax, eax
jne 0x1800542c7
lea rcx, [rbp + 0x1a0]
call qword [rbp + 0x118]
mov r10, qword [rsp + 0x78]
cmp dword [r10 + 0xc4], 0
jne case.0x1800537ae.447
xor r9d, r9d
lea rcx, [rbp + 0x1a0]
xor r8d, r8d
xor edx, edx
call rbx
test eax, eax
jg 0x1800542a0
mov r10, qword [rsp + 0x78]
xor r9d, r9d
jmp case.0x1800537ae.451
mov rbx, qword [r10 + 0xb0]
mov ecx, dword [rbx + 8]
cmp ecx, 3
je 0x180054405
mov r12d, dword [rbp - 0x6c]
mov edi, 0x1ec
mov r13d, dword [rbp - 8]
mov r15, qword [rbp + 0x20]
mov dword [rbp - 0x80], edi
mov edi, dword [rbp - 0x10]
test ecx, ecx
je 0x18005437e
sub ecx, 1
je 0x18005437e
cmp ecx, 1
jne 0x1800543d4
mov rdx, qword [rbx]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x180054342
lea r9, [rbp + 0xb8]
mov rcx, r15
call qword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
test eax, eax
je 0x18005436e
mov rax, qword [rbp + 0xb8]
cmp r13d, eax
cmovl r13d, eax
mov eax, r14d
cdq
sub eax, edx
sar eax, 1
add eax, r14d
add r12d, eax
jmp 0x1800543d4
mov rdx, qword [rbx]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x180054390
lea r9, [rbp + 0xb8]
mov rcx, r15
call qword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
test eax, eax
je 0x1800543ba
mov rax, qword [rbp + 0xb8]
cmp edi, eax
cmovl edi, eax
lea ecx, [r14 + r14*2]
test ecx, ecx
jns 0x1800543c4
inc ecx
mov eax, r14d
sar ecx, 1
cdq
sub eax, edx
sar eax, 1
add r12d, eax
add r12d, ecx
mov ecx, dword [rbx + 0x28]
add rbx, 0x20
cmp ecx, 3
jne 0x180054326
mov r15, qword [rbp + 8]
mov r10, qword [rsp + 0x78]
mov dword [rbp - 8], r13d
movzx r13d, byte [rbp - 0x70]
mov dword [rbp - 0x10], edi
mov edi, dword [rbp - 0x80]
mov dword [rbp - 0x6c], r12d
mov r12d, dword [rsp + 0x70]
imul eax, r14d, 7
cdq
and edx, 3
add eax, edx
sar eax, 2
add eax, r14d
add dword [rbp - 0x6c], eax
mov eax, dword [rbp - 0x28]
lea ebx, [rax + rax]
mov eax, dword [rbp - 0x10]
add eax, ebx
mov dword [rbp - 0x24], ebx
mov dword [rbp + 0x10], eax
add eax, ebx
mov dword [rbp - 0xc], eax
xor r9d, r9d
jmp case.0x1800537ae.451
imul eax, dword [rbp - 0x28], 0x1e
mov ecx, dword [rbp - 0xc]
add ecx, eax
mov eax, dword [rbp - 8]
lea eax, [rax + r14*2]
add eax, dword [rbp - 0x24]
cmp ecx, eax
cmovge eax, ecx
mov dword [rbp - 0x20], eax
jmp case.0x1800537ae.451
mov rax, qword [r10 + 0x28]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x168], rax
mov dword [rbp + 0x164], 0x26
mov qword [rbp + 0x170], r9
call qword [rbp + 0x120]
mov r10, qword [rsp + 0x78]
xor r9d, r9d
mov qword [rbp + 0x178], rax
mov qword [rbp + 0x180], 2
jmp case.0x1800537ae.451
mov r14d, dword [rbp + 0x1d0]
mov ebx, 0x75
mov r12d, dword [rbp + 0x1d4]
mov edi, dword [rbp - 0x6c]
mov r15d, dword [rbp + 0x88]
nop dword [rax + rax]
cmp ebx, 0x75
je 0x1800545f6
cmp ebx, 0x12bd
je 0x180054590
cmp ebx, 0x2505
je 0x180054584
cmp ebx, 0x374d
je 0x180054511
cmp ebx, 0x4995
jne 0x180054639
mov rdx, qword [rbp + 0xd0]
xor r9d, r9d
mov r8d, 0x11b
xor ecx, ecx
call fcn.1800251e0
jmp 0x180054626
mov edx, dword [rbp + 0x1dc]
mov rax, qword [r10 + 0x28]
add edx, r12d
mov ecx, dword [rbp + 0x1d8]
mov r8, qword [rbp + 0xd0]
sub ecx, r14d
mov qword [rsp + 0x58], r9
mov qword [rsp + 0x50], rax
mov rax, qword [r10 + 0x10]
mov qword [rsp + 0x48], r9
mov r9d, 0x90c80080
mov qword [rsp + 0x40], rax
mov dword [rbp + 0x1dc], edx
sub edx, r12d
mov dword [rsp + 0x38], edx
mov rdx, qword [rbp + 0x190]
mov dword [rsp + 0x30], ecx
xor ecx, ecx
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r14d
call qword [rbp + 0x128]
mov r10, qword [rsp + 0x78]
mov qword [r10 + 0x20], rax
jmp 0x18005462b
add dword [rbp + 0x1d8], r14d
jmp 0x180054639
mov rcx, qword [r10 + 0x10]
lea rdx, [rbp + 0x1e0]
sub dword [rbp + 0x1d8], r14d
sub dword [rbp + 0x1dc], r12d
call qword [rbp + 0x130]
mov eax, dword [rbp + 0x1e8]
sub eax, dword [rbp + 0x1d8]
add eax, dword [rbp + 0x1e0]
mov r10, qword [rsp + 0x78]
cdq
sub eax, edx
sar eax, 1
mov r14d, eax
mov dword [rbp + 0x1d0], eax
mov eax, dword [rbp + 0x1ec]
sub eax, dword [rbp + 0x1dc]
add eax, dword [rbp + 0x1e4]
cdq
sub eax, edx
sar eax, 1
mov r12d, eax
mov dword [rbp + 0x1d4], eax
jmp 0x180054639
xor r9d, r9d
mov qword [rbp + 0x1d0], 0
xor r8d, r8d
mov dword [rbp + 0x1d8], r15d
mov edx, 0xce0000
mov dword [rbp + 0x1dc], edi
lea rcx, [rbp + 0x1d0]
call qword [rbp + 0x138]
mov r10, qword [rsp + 0x78]
mov r14d, dword [rbp + 0x1d0]
mov r12d, dword [rbp + 0x1d4]
add ebx, 0x1248
mov r9d, 0
cmp ebx, 0x5b68
jbe 0x1800544c0
mov r8, qword [r10 + 0xc8]
lea edx, [r9 + 0x30]
mov rcx, qword [r10 + 0x20]
call qword [rbp]
mov r10, qword [rsp + 0x78]
xor r9d, r9d
mov edi, dword [rbp - 0x80]
mov r15, qword [rbp + 8]
mov r14d, dword [rbp - 0x38]
mov r12d, dword [rsp + 0x70]
jmp case.0x1800537ae.451
mov rdx, qword [r10 + 0xb8]
xor r9d, r9d
mov r8d, 0x11b
xor ecx, ecx
call fcn.1800251e0
mov r10, qword [rsp + 0x78]
xor r9d, r9d
mov eax, r9d
cmp dword [r10 + 0xc4], 2
sete al
mov dword [rbp + 0x28], eax
jmp case.0x1800537ae.451
lea r9, [rbp + 0x260]
xor r8d, r8d
mov edx, 0xef
lea rcx, [rbp + 0x480]
call fcn.180042280
mov rcx, qword [sym.imp.USER32.dll_DefDlgProcA]
xor r9d, r9d
mov r10, qword [rsp + 0x78]
mov qword [rbp + 0x158], rcx
mov dword [rbp + 0x160], r9d
mov qword [rbp + 0x120], rax
mov dword [rbp + 0x150], 0x808
jmp case.0x1800537ae.451
lea r9, [rbp + 0x2e0]
xor r8d, r8d
mov edx, 0xef
lea rcx, [rbp + 0x3c0]
call fcn.180042280
lea r9, [rbp + 0x310]
mov qword [rbp + 0x128], rax
xor r8d, r8d
lea rcx, [rbp + 0x498]
mov edx, 0xef
call fcn.180042280
lea r9, [rbp + 0x248]
mov qword [rbp + 0x130], rax
xor r8d, r8d
lea rcx, [rbp + 0x4f8]
mov edx, 0xef
call fcn.180042280
lea r9, [rbp + 0x238]
mov qword [rbp + 0x138], rax
xor r8d, r8d
lea rcx, [rbp + 0x4b0]
mov edx, 0xef
call fcn.180042280
lea r9, [rbp + 0x330]
mov qword [rbp + 0x140], rax
xor r8d, r8d
lea rcx, [rbp + 0x4c8]
mov edx, 0xef
call fcn.180042280
mov r10, qword [rsp + 0x78]
xor r9d, r9d
mov qword [rbp + 0x148], rax
jmp case.0x1800537ae.451
lea r9, [rbp + 0x2f0]
xor r8d, r8d
mov edx, 0xef
lea rcx, [rbp + 0x3d8]
call fcn.180042280
mov r10, qword [rsp + 0x78]
xor r9d, r9d
mov qword [rbp + 0x30], rax
jmp case.0x1800537ae.451
mov qword [rbp + 0x188], r9
jmp case.0x1800537ae.451
mov edi, 0x22b
xor r9d, r9d
jmp case.0x1800537ae.451
mov r14d, r12d
mov r12d, eax
add edi, 7
lea rcx, [0x180000000]
movabs rdx, 0x6c0064002e
mov dword [rbp - 0x80], edi
mov ebx, 0x6a
cmp edi, dword [rbp + 0x14]
jb 0x1800522e0
mov rax, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x510]
xor rcx, rsp
call fcn.1800a7b10
mov rbx, qword [rsp + 0x660]
add rsp, 0x620
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret