Function at 0x18000ac40
Capabilities:
Copy file

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3f8]
sub rsp, 0x4f8
mov rax, qword [0x18005b6d8]
xor rax, rsp
mov qword [rbp + 0x3e0], rax
mov r15d, dword [rbp + 0x460]
mov rdi, r9
mov rax, qword [rbp + 0x488]
mov r10, r8
mov r11, qword [rbp + 0x468]
mov rsi, rdx
mov r9, qword [rbp + 0x478]
mov r13, qword [rbp + 0x480]
lea ebx, [r15 - 0x13]
mov qword [rbp + 8], r8
mov r8, qword [rbp + 0x470]
mov qword [rbp - 0x20], rax
mov eax, r15d
mov qword [rbp + 0x20], rdx
mov rdx, rcx
mov qword [rbp + 0x18], rcx
mov qword [rbp - 8], r11
mov qword [rbp], r8
mov qword [rbp - 0x40], r9
mov qword [rbp + 0x28], r13
mov dword [rbp - 0x48], eax
mov dword [rsp + 0x68], ebx
cmp r15d, ebx
jbe 0x18000b853
mov r15d, dword [rbp - 0x34]
mov r14d, dword [rbp - 0x14]
mov r12d, dword [rbp - 0x50]
mov qword [rbp + 0x10], r15
nop word [rax + rax]
add eax, 0xffffffa9
cmp eax, 0x60
ja case.0x18000ad1c.89
lea rcx, [0x180000000]
movzx eax, byte [rcx + rax + 0xc298]
mov ecx, dword [rcx + rax*4 + 0xc248]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov eax, dword [r9]
lea rcx, [rbp - 0x28]
mov rdx, qword [rbp - 0x20]
lea r9, [rsp + 0x78]
mov dword [rbp - 0x28], eax
mov eax, dword [r8]
mov r8d, 0x18
add eax, dword [rsi]
mov dword [rbp - 0x70], eax
mov eax, dword [r13]
add eax, dword [r11]
mov dword [rsp + 0x78], eax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
call fcn.18003b580
mov dword [rbp - 0x28], eax
jmp case.0x18000ad1c.89
cmp dword [rbp - 0x28], 0
je 0x18000af6b
mov r15, qword [rbp + 0x18]
mov ebx, 0x128
mov r14d, dword [rbp - 0x80]
mov r12d, dword [rbp - 0x78]
nop dword [rax + rax]
cmp ebx, 0x128
je 0x18000ae9e
cmp ebx, 0x1b9
je 0x18000adfc
cmp ebx, 0x24a
jne 0x18000af40
mov eax, dword [r10]
lea r8, [rbp - 0x58]
mov dword [rbp - 0x58], eax
lea rdx, [rbp - 0x80]
mov eax, dword [r9]
lea rcx, [rbp - 0x78]
inc eax
mov dword [rbp - 0x68], r12d
mov dword [rbp - 0x70], eax
mov eax, dword [r15]
dec eax
mov dword [rbp - 0x60], r14d
mov dword [rbp - 0x78], eax
mov eax, dword [rsi]
mov dword [rbp - 0x80], eax
mov eax, dword [r13]
mov dword [rsp + 0x78], eax
mov rax, qword [rbp - 0x20]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x68]
jmp 0x18000af12
mov eax, dword [r10]
lea rdx, [rsp + 0x78]
mov dword [rbp - 0x68], eax
lea rcx, [rbp - 0x70]
mov eax, dword [r9]
mov r9, rdi
inc eax
mov dword [rbp - 0x60], r14d
mov dword [rbp - 0x80], eax
mov eax, dword [r15]
dec eax
mov dword [rbp - 0x70], eax
mov eax, dword [r8]
lea r8, [rbp - 0x68]
mov dword [rbp - 0x58], eax
mov eax, dword [rsi]
mov dword [rsp + 0x78], eax
mov eax, dword [r13]
mov dword [rbp - 0x78], eax
mov rax, qword [rbp - 0x20]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x78]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x58]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xa4
call fcn.18000ac40
mov rcx, qword [rbp + 8]
mov dword [rbp - 0x58], r12d
mov eax, dword [rcx]
mov dword [rbp - 0x68], eax
mov rax, qword [rbp - 0x40]
mov eax, dword [rax]
inc eax
mov dword [rbp - 0x80], eax
mov eax, dword [r15]
dec eax
mov dword [rbp - 0x70], eax
mov rax, qword [rbp - 8]
mov eax, dword [rax]
mov dword [rbp - 0x60], eax
jmp 0x18000aed9
mov r8d, dword [r15]
mov eax, 1
mov edx, dword [r11]
mov ecx, r8d
shl eax, cl
mov rcx, qword [rbp]
sar eax, 1
mov dword [rbp - 0x60], edx
mov ecx, dword [rcx]
lea r14d, [rdx + rax]
mov dword [rbp - 0x58], ecx
lea r12d, [rcx + rax]
mov eax, dword [r10]
mov dword [rbp - 0x68], eax
mov eax, dword [r9]
inc eax
mov dword [rbp - 0x80], eax
lea eax, [r8 - 1]
mov dword [rbp - 0x70], eax
mov eax, dword [rsi]
lea rcx, [rbp - 0x70]
mov dword [rsp + 0x78], eax
lea rdx, [rsp + 0x78]
mov eax, dword [r13]
lea r8, [rbp - 0x68]
mov dword [rbp - 0x78], eax
mov rax, qword [rbp - 0x20]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x78]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x58]
mov qword [rsp + 0x30], rax
mov r9, rdi
lea rax, [rbp - 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xa4
call fcn.18000ac40
mov r9, qword [rbp - 0x40]
mov r10, qword [rbp + 8]
mov r11, qword [rbp - 8]
mov r8, qword [rbp]
add ebx, 0x91
cmp ebx, 0x2db
jb 0x18000ad80
mov r15, qword [rbp + 0x10]
mov dword [rbp - 0x78], r12d
mov r12d, dword [rbp - 0x50]
mov dword [rbp - 0x80], r14d
mov r14d, dword [rbp - 0x14]
jmp 0x18000b74a
mov ecx, dword [rdx]
lea r9, [rbp - 0x60]
mov rdx, qword [rbp - 0x20]
xor eax, eax
mov dword [rbp - 0x68], eax
mov eax, 1
shl eax, cl
lea rcx, [rsp + 0x78]
mov dword [rsp + 0x78], eax
mov eax, dword [r8]
lea r8, [rbp - 0x68]
add eax, dword [rsi]
mov dword [rbp - 0x58], eax
mov eax, dword [r13]
add eax, dword [r11]
mov dword [rbp - 0x60], eax
lea rax, [rbp - 0x58]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0xf7
call fcn.18003eec0
jmp case.0x18000ad1c.89
mov eax, 0x77
mov dword [rbp + 0x1f7], 0x707574
mov word [rbp + 0x220], ax
jmp case.0x18000ad1c.89
mov edx, dword [r13]
mov r8, qword [rbp - 0x20]
mov rax, qword [r8 + 0x47fc8]
mov ecx, dword [rax + 0x36c]
sar edx, cl
imul edx, dword [rax + 0x360]
mov eax, dword [rdi]
sar eax, cl
add eax, edx
cdqe
lea rcx, [rax + rax*2]
mov rax, qword [r8 + 0x49840]
lea rdx, [rax + rcx*4]
mov eax, dword [rsi]
movzx ecx, word [rdx + 2]
bts ecx, eax
mov word [rdx + 2], cx
jmp case.0x18000ad1c.89
mov word [rbp + 0x250], 0x6e
jmp case.0x18000ad1c.89
mov r8d, 3
lea rdx, [0x1800567c2]
lea rcx, [rbp + 0x238]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov byte [rbp + 0x24f], 0x6e
jmp case.0x18000ad1c.89
mov eax, 0x6c20
mov dword [rbp + 0x23f], 0x6564206e
mov word [rbp + 0x243], ax
jmp case.0x18000ad1c.89
cmp dword [r13], 0
jne 0x18000b183
mov ebx, 0x129
mov eax, ebx
sub eax, 0x129
je 0x18000b159
sub eax, 0x75
je 0x18000b0e6
sub eax, 0x75
je 0x18000b0a6
cmp eax, 0x75
je case.0x18000ad1c.144
jmp 0x18000b16a
cmp dword [rbp - 0x18], 0
lea rax, str.2Nx2N
lea r8, [0x180055108]
mov ecx, 2
cmovne r8, rax
lea rdx, str.___s_n
call fcn.180035ef0
cmp dword [rbp - 0x18], 0
mov eax, 3
mov ecx, 0
cmovne eax, ecx
mov dword [rbp - 0x4c], eax
jmp 0x18000b16a
xor edx, edx
mov dword [rbp + 0x1e8], 5
mov qword [rsp + 0x38], rdx
lea r9, [rdi + 0x130]
mov qword [rsp + 0x30], rdx
mov eax, 1
mov dword [rbp + 0x1d4], eax
xor r8d, r8d
movsxd rax, dword [rdi + 0x8c]
mov dword [rbp + 0x1d0], edx
movsd xmm0, qword [rbp + 0x1d0]
movsd qword [rbp + 0x1e0], xmm0
movsxd rcx, dword [rbp + rax*4 + 0x1e0]
add rcx, 0x40
lea rax, [rdi + rcx*8]
xor ecx, ecx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
mov edx, 0x12b
call fcn.18003a280
mov dword [rbp - 0x18], eax
jmp 0x18000b16a
lea rdx, str.USER_SIGNOUT_SUCCESS
mov ecx, 2
call fcn.180035ef0
add ebx, 0x75
cmp ebx, 0x2fd
jb 0x18000b081
xor eax, eax
mov dword [rbp - 0x4c], eax
jmp 0x18000b74a
mov r13d, 0x2e
nop dword [rax]
cmp r13d, 0x2e
je 0x18000b4ba
cmp r13d, 0x10e4
jne 0x18000b50c
mov edx, dword [rbp - 0xc]
test edx, edx
jne 0x18000b7a6
mov rax, qword [rbp - 0x20]
mov ecx, dword [rsi]
mov rax, qword [rax + 0x47fc8]
cmp ecx, dword [rax + 0x32c]
jle 0x18000b397
cmp byte [rax + 0x242], dl
jne 0x18000b242
mov ebx, 0x71
cmp ebx, 0x71
je 0x18000b1f1
cmp ebx, 0x4fe5
jne 0x18000b22f
neg edx
sbb eax, eax
add eax, 2
jmp 0x18000c223
lea eax, [r15 + 1]
xor r8d, r8d
movsxd rcx, eax
lea r9, [rdi + 0x130]
add rcx, 0x40
mov edx, 0x12b
lea rax, [rdi + rcx*8]
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
call fcn.18003a280
mov edx, eax
mov dword [rbp - 0xc], eax
add ebx, 0x4f74
cmp ebx, 0x9ee8
jbe 0x18000b1d8
jmp 0x18000b50c
xor edx, edx
mov esi, edx
cmp esi, 0x3c
ja case.0x18000b26c.1
lea r8, [0x180000000]
mov eax, esi
movzx eax, byte [r8 + rax + 0xc318]
mov ecx, dword [r8 + rax*4 + 0xc2fc]
add rcx, r8
jmp rcx
test r14d, r14d
jne case.0x18000b26c.1
cmp dword [rbp - 0x38], r14d
jne case.0x18000b26c.1
lea eax, [r14 + 6]
jmp 0x18000c223
cmp dword [rbp - 0x10], 0
je case.0x18000b26c.1
test r14d, r14d
jne case.0x18000b26c.1
lea eax, [r14 + 2]
jmp 0x18000c223
cmp dword [rbp - 0x10], 0
je case.0x18000b26c.1
test r14d, r14d
je case.0x18000b26c.1
mov eax, 1
jmp 0x18000c223
mov qword [rsp + 0x38], rdx
lea eax, [r15 + 1]
mov qword [rsp + 0x30], rdx
lea r9, [rdi + 0x130]
movsxd rcx, eax
xor r8d, r8d
add rcx, 0x40
lea rax, [rdi + rcx*8]
xor ecx, ecx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
mov edx, 0x12b
call fcn.18003a280
mov r14d, eax
mov dword [rbp - 0x14], eax
lea eax, [r15 + 2]
xor r8d, r8d
movsxd rcx, eax
lea r9, [rdi + 0x130]
add rcx, 0x40
mov edx, 0x12b
lea rax, [rdi + rcx*8]
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
call fcn.18003a280
mov dword [rbp - 0x10], eax
xor edx, edx
jmp case.0x18000b26c.1
lea rax, [rdi + 0x130]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov edx, 0x15a
xor ecx, ecx
call fcn.180021210
mov dword [rbp - 0x38], eax
test r14d, r14d
jne 0x18000b777
xor edx, edx
jmp case.0x18000b26c.1
test r14d, r14d
jne case.0x18000b26c.1
cmp dword [rbp - 0x38], r14d
jne 0x18000b78f
add esi, 0xc
lea eax, [rsi + 0x1a]
cmp eax, 0x62
jb 0x18000b246
mov rsi, qword [rbp + 0x20]
jmp 0x18000b50c
cmp ecx, 3
jne 0x18000b401
mov ebx, 0x34
mov eax, ebx
sub eax, 0x34
je 0x18000b3b3
cmp eax, 0x5c
je 0x18000b1e5
jmp 0x18000b3f1
lea eax, [r15 + 1]
xor r8d, r8d
movsxd rcx, eax
lea r9, [rdi + 0x130]
add rcx, 0x40
mov edx, 0x12b
lea rax, [rdi + rcx*8]
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
call fcn.18003a280
mov edx, eax
mov dword [rbp - 0xc], eax
add ebx, 0x5c
cmp ebx, 0xec
jb 0x18000b3a1
jmp 0x18000b50c
mov ebx, 0x51
nop word [rax + rax]
mov eax, ebx
sub eax, 0x4f
je 0x18000b799
sub eax, 1
je 0x18000b467
cmp eax, 1
jne 0x18000b4ad
lea eax, [r15 + 1]
xor r8d, r8d
movsxd rcx, eax
lea r9, [rdi + 0x130]
add rcx, 0x40
mov edx, 0x12b
lea rax, [rdi + rcx*8]
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
call fcn.18003a280
mov dword [rbp - 0x34], eax
jmp 0x18000b4ad
cmp dword [rbp - 0x34], 0
jne 0x18000b2b9
lea eax, [r15 + 2]
xor r8d, r8d
movsxd rcx, eax
lea r9, [rdi + 0x130]
add rcx, 0x40
mov edx, 0x12b
lea rax, [rdi + rcx*8]
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
call fcn.18003a280
mov dword [rbp - 0x30], eax
dec ebx
cmp ebx, 0x4e
ja 0x18000b410
jmp 0x18000b50c
cmp dword [rdi + 0x8c], 1
lea rax, [rdi + 0x200]
mov r15d, 5
lea r9, [rdi + 0x130]
mov ecx, 1
mov edx, 0x12b
cmove r15d, ecx
xor ecx, ecx
mov qword [rsp + 0x38], rcx
xor r8d, r8d
mov qword [rsp + 0x30], rcx
mov qword [rbp + 0x10], r15
lea rax, [rax + r15*8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
call fcn.18003a280
mov dword [rbp - 0xc], eax
add r13d, 0x10b6
cmp r13d, 0x216c
jbe 0x18000b190
mov r13, qword [rbp + 0x28]
xor eax, eax
mov dword [rbp - 0x4c], eax
jmp 0x18000b74a
mov eax, 0x57
mov word [rbp + 0x1f0], ax
mov eax, 0x7261
mov word [rbp + 0x1f5], ax
mov dword [rbp + 0x1f1], 0x74534153
jmp case.0x18000ad1c.89
mov r8d, 3
mov byte [rbp + 0x245], 0
lea rdx, [0x180056831]
lea rcx, [rbp + 0x245]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp case.0x18000ad1c.89
mov eax, dword [rsi]
lea rdx, str.Check_failed:_callback.func.
mov r9d, dword [r13]
mov ecx, 2
mov r8d, dword [rdi]
mov dword [rsp + 0x20], eax
call fcn.180035ef0
jmp case.0x18000ad1c.89
movzx eax, word [0x180056863]
lea rdx, [0x1800568df]
mov word [rbp + 0x238], ax
lea rcx, [rbp + 0x238]
movzx eax, byte [0x180056865]
mov r8d, 4
mov byte [rbp + 0x23a], al
mov byte [rbp + 0x23b], 0
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp case.0x18000ad1c.89
mov ebx, 0x6d
mov eax, ebx
sub eax, 0x6c
je 0x18000b7ad
cmp eax, 1
jne 0x18000b606
mov r8d, r12d
lea rdx, str.OID_GEN_VENDOR_ID
lea ecx, [rax + 1]
call fcn.180035ef0
dec ebx
cmp ebx, 0x6b
ja 0x18000b5e4
mov ebx, dword [rsp + 0x68]
mov eax, 0x73
mov word [rbp + 0x222], ax
jmp case.0x18000ad1c.89
mov r8d, 4
lea rdx, [0x18005691d]
lea rcx, [rbp + 0x248]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0x24c], 0
jmp case.0x18000ad1c.89
mov byte [rbp + 0x248], 0
jmp case.0x18000ad1c.89
lea rdx, str.Scene_Detect
mov ecx, 2
call fcn.180035ef0
mov eax, dword [rdi + 0x8c]
lea rbx, [rdi + 0x130]
dec eax
mov r9, rbx
cdqe
xor r8d, r8d
add rax, 0x1ca
mov edx, 0x12b
lea rcx, [rdi + rax*8]
xor eax, eax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov qword [rsp + 0x20], rax
call fcn.18003a280
mov dword [rbp - 0x50], eax
mov r12d, eax
test eax, eax
je 0x18000b74a
mov ecx, 0xba
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xba
je 0x18000b732
sub eax, 1
je 0x18000b6dc
cmp eax, 1
jne 0x18000b738
mov dword [rbp - 0x48], 0x58
jmp 0x18000b738
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
mov edx, 0x15a
xor ecx, ecx
call fcn.180021210
test eax, eax
je 0x18000b72b
nop word [rax + rax]
mov eax, dword [rdi + 0xa0]
inc r12d
dec eax
cmp r12d, eax
je 0x18000b72b
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
mov edx, 0x15a
xor ecx, ecx
call fcn.180021210
test eax, eax
jne 0x18000b700
mov ecx, 0xbb
jmp 0x18000b738
mov r12d, 1
inc ecx
cmp ecx, 0xbd
jb 0x18000b6c0
mov dword [rbp - 0x50], r12d
mov ebx, dword [rsp + 0x68]
mov eax, dword [rbp - 0x48]
dec eax
mov dword [rbp - 0x48], eax
cmp eax, ebx
jbe 0x18000b84c
mov rdx, qword [rbp + 0x18]
mov r9, qword [rbp - 0x40]
mov r10, qword [rbp + 8]
mov r11, qword [rbp - 8]
mov r8, qword [rbp]
jmp 0x18000acf0
test eax, eax
jne 0x18000b785
mov eax, 4
jmp 0x18000c223
mov eax, 5
jmp 0x18000c223
mov eax, 7
jmp 0x18000c223
neg dword [rbp - 0x30]
sbb eax, eax
add eax, 3
jmp 0x18000c223
xor eax, eax
jmp 0x18000c223
mov eax, r12d
jmp 0x18000c223
mov rbx, qword [rbp - 0x20]
xor edi, edi
mov dword [rsp + 0x38], 0xb5
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
movzx eax, byte [rbx]
mov byte [rsp + 0x68], al
lea rax, [rsp + 0x68]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
call fcn.180023820
test al, al
jne 0x18000b843
movzx eax, byte [rbx]
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x28], rdi
xor r9d, r9d
xor r8d, r8d
mov byte [rsp + 0x68], al
mov ecx, 0xaa
mov qword [rsp + 0x20], rdi
call fcn.1800189d0
test al, al
jne 0x18000b843
movzx eax, byte [rbx]
lea r8, [rsp + 0x68]
xor r9d, r9d
mov byte [rsp + 0x68], al
xor edx, edx
mov ecx, 0x95
call fcn.18002f970
test al, al
jne 0x18000b843
mov byte [rbp - 0x4c], dil
jmp case.0x18000ad1c.144
mov byte [rbp - 0x4c], 1
jmp case.0x18000ad1c.144
mov r15d, dword [rbp + 0x460]
lea eax, [r15 + 0x12]
mov dword [rbp - 0x18], eax
cmp r15d, eax
jae case.0x18000ad1c.144
movzx esi, word [rsp + 0x68]
mov ebx, dword [rbp - 0x34]
mov r8, qword [rbp + 0x1f0]
mov edx, dword [rbp + 0x220]
mov r13, qword [rbp + 0x10]
mov rdi, qword [rbp + 0x18]
mov r12d, dword [rbp - 0x48]
mov r14, qword [rbp - 0x40]
mov dword [rbp - 0x50], esi
mov dword [rbp - 0x30], ebx
mov r11d, 0x63
lea eax, [r15 - 0x7e]
lea r10d, [r11 + 0x11]
lea r9d, [r11 - 0x40]
cmp eax, 0x11
ja case.default.0x18000b8c1
lea rcx, [0x180000000]
mov ecx, dword [rcx + rax*4 + 0xc358]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov esi, 0x83
xor r14d, r14d
nop dword [rax + rax]
mov eax, esi
sub eax, 0x82
je 0x18000b9de
sub eax, 1
je 0x18000b9a1
sub eax, 5
je 0x18000b990
sub eax, 4
je 0x18000b90b
cmp eax, 1
jne 0x18000b9d3
mov edx, r14d
mov dword [rbp + 0x220], edx
jmp 0x18000b9d3
mov ecx, 0x9e
cmp ecx, 0x9e
je 0x18000b952
cmp ecx, 0x6ca
je 0x18000b977
cmp ecx, 0xcf6
jne 0x18000b97c
mov esi, 0x8c
cmp r12d, edx
jne 0x18000b97c
cmp edx, 0x40
jae 0x18000b97c
mov eax, r12d
mov qword [rbp + rax*8 + 0x228], r8
mov edx, dword [rbp + 0x220]
inc edx
mov dword [rbp + 0x220], edx
jmp 0x18000b97c
mov r12d, r14d
test edx, edx
je 0x18000b97c
nop dword [rax]
mov eax, r12d
cmp qword [rbp + rax*8 + 0x228], r8
je 0x18000b977
inc r12d
cmp r12d, edx
jb 0x18000b960
jmp 0x18000b97c
mov ecx, 0x6ca
add ecx, 0x62c
cmp ecx, 0x1284
jbe 0x18000b910
mov dword [rbp - 0x48], r12d
jmp 0x18000b9d3
cmp byte [0x180063839], r14b
je 0x18000b9d3
call qword [0x180063820]
jmp 0x18000b9c6
xor r8d, r8d
lea rcx, [rbp + 0x220]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rcx, rax
lea rdx, [rbp + 0x1f0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov edx, dword [rbp + 0x220]
mov r8, qword [rbp + 0x1f0]
dec esi
cmp esi, 0x7e
ja 0x18000b8d0
mov r14, qword [rbp - 0x40]
mov r13, rdi
mov qword [rbp + 0x18], rdi
mov qword [rbp + 0x10], rdi
jmp case.default.0x18000b8c1
mov eax, dword [str.O__]
mov dword [rbp + 0x25d], eax
movzx eax, word [0x180056954]
mov word [rbp + 0x261], ax
jmp case.default.0x18000b8c1
mov word [rbp + 0x262], r9w
mov dword [rbp + 0x288], 0x6f0073
jmp case.default.0x18000b8c1
mov ecx, dword [rbp - 0x34]
call qword [sym.imp.RPCRT4.dll_I_RpcMapWin32Status]
mov r8, qword [rbp + 0x1f0]
mov edx, dword [rbp + 0x220]
jmp case.default.0x18000b8c1
mov dword [rbp + 0x224], 0x5f0032
mov dword [rbp + 0x228], 0x320033
jmp case.default.0x18000b8c1
lea r8, [rbp + 0x2d0]
lea rdx, [rbp + 0x258]
lea rcx, [rbp + 0x238]
call qword [sym.imp.dbghelp.dll_FindDebugInfoFile]
mov eax, 1
lea rdx, [rbp + 0x288]
mov dword [rsp + 0x28], eax
lea rcx, str.GNUTLS_ECDH_ANON_NULL_SHA1
xor eax, eax
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_CopyFileExW]
mov r8, qword [rbp + 0x1f0]
mov edx, dword [rbp + 0x220]
jmp case.default.0x18000b8c1
mov eax, 0x77
mov dword [rbp + 0x2a2], 0x760061
mov word [rbp + 0x2a0], ax
jmp case.default.0x18000b8c1
xor eax, eax
mov word [rbp + 0x2a6], ax
jmp case.default.0x18000b8c1
mov dword [rbp + 0x28c], 0x6e0075
mov dword [rbp + 0x290], 0x2f0064
jmp case.default.0x18000b8c1
xor eax, eax
mov dword [rbp - 0x34], eax
jmp case.default.0x18000b8c1
mov ecx, 0x202
lea rdx, [rbp + 0x30]
call r13
test eax, eax
je 0x18000c04b
mov r15d, 0xf5
mov dword [rbp - 0x38], r15d
nop dword [rax]
cmp r15d, 0x6cec1
ja 0x18000bcff
je 0x18000bceb
cmp r15d, 0x367db
ja 0x18000bc5f
je 0x18000bc35
cmp r15d, 0xf5
je 0x18000bbfa
cmp r15d, 0xaf23
je 0x18000bbcd
cmp r15d, 0x15d51
je 0x18000bba7
cmp r15d, 0x20b7f
je 0x18000bb87
cmp r15d, 0x2b9ad
jne 0x18000c02c
mov byte [rbp + 0x20b], 0
jmp 0x18000c02c
movzx eax, word [0x1800569eb]
mov word [rbp + 0x208], ax
movzx eax, byte [0x1800569ed]
mov byte [rbp + 0x20a], al
jmp 0x18000c02c
mov r8d, 1
lea rdx, [0x1800569b3]
lea rcx, [rbp + 0x207]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0x208], 0
jmp 0x18000c02c
mov r8d, 1
mov byte [rbp + 0x206], 0
lea rdx, [0x180056c18]
lea rcx, [rbp + 0x206]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0x207], 0
jmp 0x18000c02c
movzx eax, word [0x180056ae6]
mov word [rbp + 0x200], ax
movzx eax, byte [0x180056ae8]
mov byte [rbp + 0x202], al
movzx eax, word [0x180056b02]
mov word [rbp + 0x203], ax
movzx eax, byte [0x180056b04]
mov byte [rbp + 0x205], al
jmp 0x18000c02c
movzx eax, word [0x180056b51]
mov word [rbp + 0x20b], ax
movzx eax, byte [0x180056b53]
mov byte [rbp + 0x20d], al
mov dword [rbp + 0x20e], 0x20747865
jmp 0x18000c02c
cmp r15d, 0x41609
je 0x18000bcdf
cmp r15d, 0x4c437
je 0x18000bc9f
cmp r15d, 0x57265
je 0x18000bc93
cmp r15d, 0x62093
jne 0x18000c02c
mov byte [rbp + 0x217], 0
jmp 0x18000c02c
mov byte [rbp + 0x216], 0x61
jmp 0x18000c02c
mov r8d, 2
lea rdx, [0x180056b9d]
lea rcx, [rbp + 0x212]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov r8d, 2
mov byte [rbp + 0x214], 0
lea rdx, [0x180056be6]
lea rcx, [rbp + 0x214]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp 0x18000c02c
mov byte [rbp + 0x212], 0
jmp 0x18000c02c
xor eax, eax
mov word [rbp + 0x217], 0x6d
mov qword [rbp + 0x20], rax
jmp 0x18000c02c
cmp r15d, 0xb9203
ja 0x18000bdc6
je 0x18000bd85
cmp r15d, 0x77cef
je 0x18000bd7b
cmp r15d, 0x82b1d
je 0x18000bd6d
cmp r15d, 0x8d94b
je 0x18000bd60
cmp r15d, 0x98779
je 0x18000bd4d
cmp r15d, 0xa35a7
jne 0x18000c02c
xor edx, edx
mov qword [rbp + 0x28], rdx
mov dword [rbp - 0x58], edx
jmp 0x18000c02c
mov dword [rbp - 0x68], 0xa
mov dword [rbp - 0x60], 0x14
jmp 0x18000c02c
mov esi, 0x100
mov dword [rbp - 0x50], esi
jmp 0x18000c02c
xor edx, edx
mov dword [rsp + 0x78], edx
mov dword [rbp - 0x28], edx
jmp 0x18000c02c
mov byte [rsp + 0x60], 1
jmp 0x18000c02c
xor eax, eax
mov dword [rbp - 0x78], 0x14
xor r9d, r9d
mov dword [rbp - 0x80], eax
xor edx, edx
movsx eax, si
lea rcx, [rbp + 0x200]
mov qword [rsp + 0x28], rcx
lea r8d, [r9 + 4]
mov dword [rsp + 0x20], eax
lea rcx, [rdx - 1]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov esi, dword [rbp - 0x50]
mov r14, rax
mov qword [rbp - 0x40], rax
jmp 0x18000c02c
cmp r15d, 0xc4031
je 0x18000c025
cmp r15d, 0xcee5f
je 0x18000c00b
cmp r15d, 0xd9c8d
je 0x18000bdfb
cmp r15d, 0xe4abb
je case.0x18000ad1c.144
jmp 0x18000c02c
mov eax, dword [rbp - 0x70]
mov r9d, dword [rbp - 0x68]
mov r8d, dword [rbp - 0x28]
mov edx, dword [rsp + 0x78]
mov rcx, qword [rbp + 0x20]
mov dword [rsp + 0x50], ebx
mov dword [rsp + 0x48], eax
mov eax, dword [rbp - 0x78]
mov dword [rsp + 0x40], eax
mov eax, dword [rbp - 0x80]
mov dword [rsp + 0x38], eax
mov eax, dword [rbp - 0x58]
mov dword [rsp + 0x30], eax
mov rax, qword [rbp + 0x28]
mov qword [rsp + 0x28], rax
mov eax, dword [rbp - 0x60]
mov dword [rsp + 0x20], eax
call qword [sym.imp.GDI32.dll_GdiAlphaBlend]
cmp byte [rsp + 0x60], 0
je 0x18000c005
movsx rax, si
xor r9d, r9d
mov rsi, qword [rbp - 0x40]
xor r8d, r8d
mov rcx, rsi
mov qword [rsp + 0x20], rax
mov edx, 0xf001f
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov r14, rax
movzx eax, byte [rsp + 0x60]
mov byte [rsp + 0x60], al
test r14, r14
jne 0x18000be8d
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor al, al
mov byte [rsp + 0x60], al
test al, al
je 0x18000bfff
mov r13, qword [rbp - 0x40]
mov esi, 0xc0
lea r15d, [rsi - 0x61]
lea r12d, [rsi - 0x6d]
nop word [rax + rax]
cmp esi, 0x1a340
ja 0x18000bf3c
je 0x18000bf2d
cmp esi, 0xc0
je 0x18000bf0a
cmp esi, 0x8c40
je 0x18000bee9
cmp esi, 0x117c0
jne 0x18000bfcd
mov dword [rbp + 0x27a], 0x57004f
jmp 0x18000bfcd
mov word [rbp + 0x270], r15w
mov dword [rbp + 0x272], 0x4e0055
mov dword [rbp + 0x276], 0x4e004b
jmp 0x18000bfcd
mov eax, 0x54
mov word [rbp + 0x268], r12w
mov word [rbp + 0x26e], ax
mov dword [rbp + 0x26a], 0x470045
jmp 0x18000bfcd
mov dword [rbp + 0x27e], 0x4e
jmp 0x18000bfcd
cmp esi, 0x22ec0
je 0x18000bf77
cmp esi, 0x2ba40
je 0x18000bf5f
cmp esi, 0x345c0
jne 0x18000bfcd
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x18000bfcd
lea r8, [rbp + 0x2a8]
xor edx, edx
lea rcx, [rbp + 0x268]
call qword [sym.imp.SHLWAPI.dll_StrRStrIW]
jmp 0x18000bfcd
mov r8d, 9
lea r9, [rbp - 0xc]
xor edx, edx
mov rcx, r14
call qword [sym.imp.dbghelp.dll_ImageDirectoryEntryToData]
mov eax, dword [0x1800569a8]
mov rcx, r14
movups xmm0, xmmword [str.include_c_v1]
mov dword [rbp + 0x2c0], eax
movzx eax, word [0x1800569ac]
movsd xmm1, qword [0x1800569a0]
movups xmmword [rbp + 0x2a8], xmm0
mov word [rbp + 0x2c4], ax
movsd qword [rbp + 0x2b8], xmm1
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
add esi, 0x8b80
cmp esi, 0x3d080
jbe 0x18000beb0
mov ebx, dword [rbp - 0x30]
mov rdi, qword [rbp + 0x18]
mov r15d, dword [rbp - 0x38]
mov r12d, dword [rbp - 0x48]
mov r13, qword [rbp + 0x10]
mov r14, qword [rbp - 0x40]
mov esi, dword [rbp - 0x50]
mov byte [rbp - 0x4c], 0
jmp 0x18000c02c
mov r14, rsi
mov esi, dword [rbp - 0x50]
mov byte [rbp - 0x4c], 0
jmp 0x18000c02c
xor eax, eax
mov ecx, eax
mov dword [rbp - 0x30], eax
mov ebx, eax
test r14, r14
movzx eax, byte [rsp + 0x60]
cmovne ecx, eax
mov byte [rsp + 0x60], cl
jmp 0x18000c02c
mov dword [rbp - 0x70], 0xa
add r15d, 0xae2e
mov dword [rbp - 0x38], r15d
cmp r15d, 0xef7f4
jbe 0x18000bb20
mov r15d, dword [rbp + 0x460]
mov rax, qword [rbp - 0x20]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov edx, 0x18a
xor ecx, ecx
call fcn.180021210
test al, al
jne 0x18000ba31
mov esi, 5
cmp esi, 5
ja case.default.0x18000c08f
lea rdx, [0x180000000]
mov eax, esi
mov ecx, dword [rdx + rax*4 + 0xc3a0]
add rcx, rdx
jmp rcx
xor ecx, ecx
mov qword [rbp - 8], rcx
jmp case.default.0x18000c08f
xor eax, eax
mov ecx, eax
movzx eax, byte [rsp + 0x70]
cmp dword [rbp - 0x10], ecx
cmovne ecx, eax
mov byte [rsp + 0x70], cl
jmp case.default.0x18000c08f
mov rcx, qword [rbp - 8]
lea rdx, [rbp]
xor eax, eax
mov qword [rbp], rax
call sub.IMM32.dll_ImmGetStatusWindowPos
mov ecx, 0xfffffff5
mov dword [rbp - 0x10], eax
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 8], rax
jmp case.default.0x18000c08f
mov r15, qword [rbp + 8]
xor eax, eax
mov ecx, eax
cmp r15, 0xffffffffffffffff
movzx eax, byte [rsp + 0x68]
cmovne ecx, eax
cmp byte [rsp + 0x70], 0
movzx eax, cl
mov byte [rsp + 0x68], cl
je 0x18000c10f
mov rcx, qword [rbp - 8]
lea rdx, [rbp]
call sub.IMM32.dll_ImmSetStatusWindowPos
movzx eax, byte [rsp + 0x68]
test al, al
je case.default.0x18000c08f
lea rdx, [rbp - 0x14]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je case.default.0x18000c08f
mov edx, dword [rbp - 0x14]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
jmp case.default.0x18000c08f
mov byte [rsp + 0x70], 1
mov byte [rsp + 0x68], 1
dec esi
lea eax, [rsi + 0x87]
cmp eax, 0x86
ja 0x18000c073
mov r8, qword [rbp + 0x1f0]
mov edx, dword [rbp + 0x220]
mov r15d, dword [rbp + 0x460]
jmp case.default.0x18000b8c1
mov word [rbp + 0x25c], r9w
jmp case.default.0x18000b8c1
mov dword [rbp + 0x296], 0x610068
mov word [rbp + 0x29a], r10w
mov dword [rbp + 0x29c], 0x2e0031
jmp case.default.0x18000b8c1
mov eax, 0x2e
mov dword [rbp + 0x22e], 0x6c0064
mov word [rbp + 0x22c], ax
mov eax, 0x6c
mov word [rbp + 0x232], ax
jmp case.default.0x18000b8c1
mov word [rbp + 0x294], r11w
jmp case.default.0x18000b8c1
xor eax, eax
mov word [rbp + 0x234], ax
jmp case.default.0x18000b8c1
mov dword [rbp + 0x258], 0x237723
mov byte [rbp + 0x25b], 0x63
inc r15d
mov dword [rbp + 0x460], r15d
cmp r15d, dword [rbp - 0x18]
jae case.0x18000ad1c.144
mov esi, dword [rbp - 0x50]
jmp 0x18000b88e
mov byte [rbp - 0x4c], 0
jmp case.0x18000ad1c.144
xor eax, eax
xor r9d, r9d
mov qword [rsp + 0x38], rax
xor r8d, r8d
mov dword [rsp + 0x30], 0xb8
xor edx, edx
mov qword [rsp + 0x28], rax
xor ecx, ecx
mov qword [rsp + 0x20], rax
call fcn.18000cda0
mov byte [rbp - 0x4c], al
mov eax, dword [rbp - 0x4c]
mov rcx, qword [rbp + 0x3e0]
xor rcx, rsp
call fcn.180046be0
add rsp, 0x4f8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret