Function at 0x180007f60
Capabilities:
Check for software breakpoints
Check http status code
Download url
Receive data

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xe68]
sub rsp, 0xf40
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x1800a8088]
xor rax, rsp
mov qword [rbp + 0xe00], rax
mov r15, qword [rbp + 0xb50]
xor r14d, r14d
movsd xmm7, qword [0x1800a0198]
mov r10d, 5
movsd xmm6, qword [rbp + 0xb50]
xorps xmm8, xmm8
mov r13, qword [rbp - 0x40]
lea r12d, [r14 + 0x1a]
mov qword [rbp + 0x10], r10
mov qword [rbp - 0x78], r15
mov dword [rbp - 0x28], 0x131
mov r8d, 0xa
lea rdi, [0x1800a8b90]
lea rdx, [0x1800a8bc0]
lea rcx, [0x1800a8b80]
lea r9d, [r8 + 0x79]
lea ebx, [r8 + 0x2f]
cmp r12d, 0xd82
ja 0x18000894f
je 0x18000888f
cmp r12d, 0x492
ja 0x180008633
je 0x180008500
cmp r12d, 0x1a
je 0x1800084f7
cmp r12d, 0x30
je 0x1800099fb
cmp r12d, 0x113
je 0x180008076
cmp r12d, 0x256
jne 0x1800093cf
lea rax, str.ooooo
mov dword [rbp + 0xf0], 0xffffffe0
mov qword [rbp + 0xf8], rax
mov dword [rbp + 0xf4], r10d
jmp 0x1800093cf
mov edx, dword [r14]
cmp edx, 0x1b
ja case.default.0x180008094
lea r12, [0x180000000]
mov ecx, dword [r12 + rdx*4 + 0xd2d8]
add rcx, r12
jmp rcx
mov ebx, 0x66
nop dword [rax + rax]
mov eax, ebx
sub eax, 0x66
je 0x180008107
sub eax, 1
je 0x1800080e3
sub eax, 1
je 0x1800080da
cmp eax, 1
jne 0x18000814b
lea r8, [rbp + 0xb50]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov r8d, 0xa
lea r10d, [r8 - 5]
jmp 0x1800091e3
mov byte [rbp + 0xb59], 0
jmp 0x18000814b
mov r8d, 1
mov word [rbp + 0xb57], 0x65
lea rdx, [0x180096dbe]
lea rcx, [rbp + 0xb58]
call fcn.18006add0
jmp 0x18000814b
movzx eax, word [0x180096e06]
lea rdx, [0x180096e88]
mov word [rbp + 0xb50], ax
lea rcx, [rbp + 0xb50]
movzx eax, byte [0x180096e08]
mov r8d, 3
mov byte [rbp + 0xb52], al
mov byte [rbp + 0xb53], 0
call fcn.18006c780
mov word [rbp + 0xb56], VarBoolFromStr
inc ebx
cmp ebx, 0x6a
jb 0x1800080a0
mov r10d, 5
mov eax, VarR4FromDec
cmp eax, 0xd3
je 0x180008206
cmp eax, 0x160
je 0x1800081c4
add eax, 0x8d
cmp eax, 0x1ed
jb 0x180008161
mov ebx, reloc.OLEAUT32.dll_VarDateFromCy
cmp ebx, 0x5c
je 0x180008256
cmp ebx, 0x4054
je 0x180008243
cmp ebx, 0x804c
je 0x18000821b
cmp ebx, 0xc044
je 0x180008d40
cmp ebx, 0x1003c
jne 0x18000827e
mov r12d, 0x18b5
jmp 0x1800093cf
mov r9d, dword [rbp - 0x48]
lea rax, [rbp - 0x68]
mov r8, qword [rbp + 8]
xor edx, edx
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov eax, dword [rbp + 0x1c]
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], eax
mov eax, dword [rbp + 0x18]
mov dword [rsp + 0x20], eax
mov qword [rbp - 0x68], r14
call qword [sym.imp.oledlg.dll_OleUIAddVerbMenuA]
mov r12d, 0x18b5
jmp 0x1800093cf
mov qword [rbp + 8], r14
mov dword [rbp - 0x48], r14d
mov dword [rbp + 0x18], r14d
mov dword [rbp + 0x1c], r10d
jmp 0x180009207
mov rcx, r15
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetDC]
test rax, rax
je 0x18000827e
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x18000827e
mov dword [rbp + 0xb6a], 0x67
mov r15, r14
mov qword [rbp - 0x78], r14
jmp 0x18000827e
lea rdx, [0x180096eb0]
lea rcx, [rbp + 0xb60]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [rbp + 0xb66], 0x69
mov dword [rbp + 0xb68], 0x6e
add ebx, 0x3ff8
cmp ebx, 0x13fd8
jbe 0x180008184
jmp case.0x180008094.3
mov edi, 0x88
mov dword [rsp + 0x78], edi
cmp edi, 0x8b
jae case.0x180008094.8
mov eax, edi
sub eax, 0x88
je 0x1800093ee
sub eax, 1
je 0x1800082c9
cmp eax, 1
je 0x1800081b9
inc edi
jmp 0x18000829a
mov ebx, 0x33
lea esi, [rbx + 0x32]
lea edi, [rbx + 0x1f]
lea r14d, [rbx + 0x3d]
lea r13d, [rbx + 0x43]
lea r15d, [rbx + 0x13]
cmp ebx, 0xcc
ja 0x180008390
je 0x180008355
mov eax, ebx
sub eax, 0x33
je 0x180008348
sub eax, 0x33
je 0x180008321
cmp eax, 0x33
jne 0x180008412
mov word [rbp + 0x123], di
mov dword [rbp + 0x124], 0x6f6d65
mov word [rbp + 0x127], r13w
jmp 0x180008412
mov r8d, 2
mov word [rbp + 0x121], VarBoolFromStr
lea rdx, [0x180096eb8]
lea rcx, [rbp + 0x122]
call fcn.18006add0
jmp 0x18000840c
mov word [rbp + 0x120], r15w
jmp 0x180008412
lea rdx, [0x180096ebc]
mov word [rbp + 0x128], si
lea rcx, [rbp + 0x129]
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
lea rdx, [0x180096ec0]
lea rcx, [rbp + 0x12b]
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
mov dword [rbp + 0x12d], 0x6f7463
jmp 0x18000840c
mov eax, ebx
sub eax, 0xff
je 0x1800083c9
sub eax, 0x33
je 0x1800083bf
cmp eax, 0x33
jne 0x180008412
mov r8, qword [sym.imp.WININET.dll_FtpRemoveDirectoryW]
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0xc00]
call fcn.180001120
jmp 0x18000840c
mov word [rbp + 0x135], r8w
jmp 0x180008412
mov r8d, 1
lea rdx, [0x180096908]
lea rcx, [rbp + 0x120]
call fcn.18006c780
lea rdx, [0x180096d24]
lea rcx, [rbp + 0x120]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
movzx eax, word [0x180096ec4]
mov word [rbp + 0x132], ax
mov word [rbp + 0x134], r14w
mov r8d, 0xa
add ebx, 0x33
cmp ebx, 0x165
jbe 0x1800082e0
mov edi, dword [rsp + 0x78]
xor r14d, r14d
mov r15, qword [rbp - 0x78]
inc edi
mov r13, qword [rbp - 0x40]
jmp 0x18000829a
mov ebx, 0x2b
nop dword [rax]
cmp ebx, 0x3e1
jae case.0x180008094.25
cmp ebx, 0x2b
je 0x1800084a8
cmp ebx, 0xe9
je 0x18000941d
cmp ebx, 0x1a7
je 0x180008496
cmp ebx, 0x265
je 0x180008481
cmp ebx, 0x323
je 0x1800081b9
add ebx, 0xbe
jmp 0x180008440
lea rcx, [rbp + 0xc00]
call qword [sym.imp.oledlg.dll_OleUIConvertW]
add ebx, 0xbe
jmp 0x180008440
mov dword [rbp + 0xc00], 0xc0
add ebx, 0xbe
jmp 0x180008440
xor edx, edx
lea rcx, [rbp + 0xc00]
mov r8d, 0xc0
call fcn.180063960
add ebx, 0xbe
jmp 0x180008440
mov ecx, 0x10f
nop dword [rax]
cmp ecx, 0x18f
jae case.default.0x180008094
mov eax, ecx
sub eax, 0x10f
je 0x18000947b
cmp eax, 0x40
je 0x1800081b9
add ecx, 0x40
jmp 0x1800084d0
mov dword [rbp - 0x6c], r14d
jmp 0x1800093cf
mov ecx, 2
call fcn.180066670
mov rcx, rax
lea r8, [0x180096248]
xor r9d, r9d
lea rdx, str.__global_const_short_u_cur__u_cur___min_h2_1__y_2__1___cmsg_step2__x_2_
call fcn.1800010d0
lea rax, [rbp - 0x68]
mov dword [rsp + 0x78], 0xffffffff
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x78]
lea r8, [rbp - 0x80]
mov dword [rsp + 0x20], 0xe4
lea rdx, [rbp - 0x58]
mov qword [rbp - 0x68], r14
xor ecx, ecx
mov dword [rbp - 0x80], r14d
mov qword [rbp - 0x58], r14
call fcn.180040420
mov rsi, rax
mov dword [rbp - 0x80], 0xffffffff
lea rax, [rbp - 0x68]
mov qword [rbp - 0x68], r14
mov qword [rsp + 0x28], rax
lea rbx, [0x1800a8b80]
lea r9, [rbp - 0x80]
mov dword [rsp + 0x20], 0xe4
lea r8, [rsp + 0x78]
mov dword [rsp + 0x78], r14d
lea rdx, [rbp - 0x58]
mov qword [rbp - 0x58], rbx
xor ecx, ecx
call fcn.180040420
mov rdi, rax
mov dword [rbp - 0x80], 0xffffffff
lea rax, [rbp - 0x68]
mov qword [rbp - 0x68], rbx
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x80]
lea r8, [rsp + 0x78]
mov dword [rsp + 0x20], 0xe4
lea rdx, [rbp - 0x58]
mov dword [rsp + 0x78], r14d
xor ecx, ecx
mov qword [rbp - 0x58], r14
call fcn.180040420
mov rbx, rax
mov dword [rbp - 0x80], 0xffffffff
lea rax, [0x1800a8bd0]
mov dword [rsp + 0x78], r14d
mov qword [rbp - 0x68], rax
lea r9, [rbp - 0x80]
lea rax, [0x1800a8b80]
xor ecx, ecx
mov qword [rbp - 0x58], rax
lea r8, [rsp + 0x78]
lea rax, [rbp - 0x68]
mov qword [rsp + 0x28], rax
lea rdx, [rbp - 0x58]
mov dword [rsp + 0x20], 0xe4
call fcn.180040420
add eax, ebx
add eax, esi
add eax, edi
add dword [rbp - 0x6c], eax
jmp 0x1800093cf
cmp r12d, 0x6ce
je 0x18000884e
cmp r12d, 0x90a
je 0x18000876e
cmp r12d, 0xb46
jne 0x1800093cf
lea rax, [0x1800a8bd0]
mov qword [rbp - 0x68], rdx
mov qword [rbp - 0x58], rax
lea r9, [rbp - 0x80]
lea rax, [rbp - 0x68]
mov dword [rbp - 0x80], 0xffffffff
mov qword [rsp + 0x28], rax
lea r8, [rsp + 0x78]
lea rdx, [rbp - 0x58]
mov dword [rsp + 0x20], 0xe4
xor ecx, ecx
mov dword [rsp + 0x78], r14d
call fcn.180040420
mov rsi, rax
mov dword [rbp - 0x80], 0xffffffff
lea rax, [rbp - 0x68]
mov dword [rsp + 0x78], r14d
lea rbx, [0x1800a8b80]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x80]
mov dword [rsp + 0x20], 0xe4
lea r8, [rsp + 0x78]
mov qword [rbp - 0x68], rbx
lea rdx, [rbp - 0x58]
mov qword [rbp - 0x58], rbx
xor ecx, ecx
call fcn.180040420
mov rdi, rax
mov dword [rbp - 0x80], 0xffffffff
lea rax, [0x1800a8b90]
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x58], rax
lea r9, [rbp - 0x80]
lea rax, [rbp - 0x68]
mov dword [rsp + 0x78], r14d
mov qword [rsp + 0x28], rax
lea r8, [rsp + 0x78]
lea rdx, [rbp - 0x58]
mov dword [rsp + 0x20], 0xe4
xor ecx, ecx
call fcn.180040420
mov rbx, rax
mov dword [rbp - 0x80], r14d
lea rax, [0x1800a8b90]
mov dword [rsp + 0x78], r14d
mov qword [rbp - 0x68], rax
lea r9, [rbp - 0x80]
mov qword [rbp - 0x58], rax
lea r8, [rsp + 0x78]
lea rax, [rbp - 0x68]
xor ecx, ecx
mov qword [rsp + 0x28], rax
lea rdx, [rbp - 0x58]
mov dword [rsp + 0x20], 0xe4
call fcn.180040420
add eax, esi
add eax, edi
add eax, ebx
add dword [rbp - 0x6c], eax
jmp 0x1800093cf
lea rax, [0x1800a8bd0]
mov qword [rbp - 0x68], rcx
mov qword [rbp - 0x58], rax
lea r9, [rbp - 0x80]
lea rax, [rbp - 0x68]
mov dword [rbp - 0x80], 0xffffffff
mov qword [rsp + 0x28], rax
lea r8, [rsp + 0x78]
lea rdx, [rbp - 0x58]
mov dword [rsp + 0x20], 0xe4
xor ecx, ecx
mov dword [rsp + 0x78], r14d
call fcn.180040420
mov rdi, rax
mov dword [rbp - 0x80], 0xffffffff
lea rax, [0x1800a8b80]
mov dword [rsp + 0x78], r14d
mov qword [rbp - 0x68], rax
lea r9, [rbp - 0x80]
lea rax, [0x1800a8bc0]
xor ecx, ecx
mov qword [rbp - 0x58], rax
lea r8, [rsp + 0x78]
lea rax, [rbp - 0x68]
mov qword [rsp + 0x28], rax
lea rdx, [rbp - 0x58]
mov dword [rsp + 0x20], 0xe4
call fcn.180040420
mov rbx, rax
mov dword [rbp - 0x80], 0xffffffff
lea rax, [0x1800a8bd0]
mov dword [rsp + 0x78], r14d
mov qword [rbp - 0x68], rax
lea r9, [rbp - 0x80]
lea rax, [0x1800a8bc0]
xor ecx, ecx
mov qword [rbp - 0x58], rax
lea r8, [rsp + 0x78]
lea rax, [rbp - 0x68]
mov qword [rsp + 0x28], rax
lea rdx, [rbp - 0x58]
mov dword [rsp + 0x20], 0xe4
call fcn.180040420
add eax, ebx
add eax, edi
add dword [rbp - 0x6c], eax
jmp 0x1800093cf
mov dword [rbp - 0x80], 0xffffffff
mov qword [rbp - 0x68], rdx
mov dword [rsp + 0x78], r14d
mov qword [rbp - 0x58], rcx
lea rax, [rbp - 0x68]
xor ecx, ecx
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x80]
lea r8, [rsp + 0x78]
mov dword [rsp + 0x20], 0xe4
lea rdx, [rbp - 0x58]
call fcn.180040420
add dword [rbp - 0x6c], eax
jmp 0x1800093cf
lea rax, [rbp + 0xf0]
mov dword [rbp - 0x80], 1
mov qword [rbp - 0x68], rax
lea r9, [rbp - 0x80]
lea rax, [rbp - 0x68]
mov dword [rsp + 0x78], r14d
mov qword [rsp + 0x28], rax
lea r8, [rsp + 0x78]
lea rdx, [rbp - 0x58]
mov dword [rsp + 0x20], 0xe4
xor ecx, ecx
mov qword [rbp - 0x58], rdi
call fcn.180040420
lea r9, [rbp - 0x68]
mov qword [rbp - 0x68], rdi
xor edx, edx
xor ecx, ecx
mov r8d, 0xea
mov rbx, rax
call fcn.180003f40
mov rdi, rax
mov qword [rbp - 0x68], rax
lea rax, [0x1800a8b90]
mov dword [rbp - 0x80], r14d
mov qword [rbp - 0x58], rax
lea r9, [rbp - 0x80]
lea rax, [rbp - 0x68]
mov dword [rsp + 0x78], r14d
mov qword [rsp + 0x28], rax
lea r8, [rsp + 0x78]
lea rdx, [rbp - 0x58]
mov dword [rsp + 0x20], 0xe4
xor ecx, ecx
call fcn.180040420
add eax, ebx
mov qword [rbp - 0x68], rdi
add dword [rbp - 0x6c], eax
lea r9, [rbp - 0x68]
xor r8d, r8d
mov qword [rsp + 0x20], r14
xor edx, edx
mov ecx, 0x93
call fcn.180035cc0
jmp 0x1800093cf
cmp r12d, 0x18b5
ja 0x180008b83
je 0x1800081b9
cmp r12d, 0xfbe
je 0x180008a6a
cmp r12d, 0x11fa
je 0x1800089dd
cmp r12d, 0x1436
je 0x1800089c0
cmp r12d, 0x1672
jne 0x1800093cf
mov ecx, 2
call fcn.180066670
mov ebx, dword [rbp - 0x6c]
lea r8, [0x180096248]
mov rcx, rax
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea rdx, str.__builtin_ia32_pandnq256_mask
call fcn.1800010d0
mov dword [rbp - 0x60], ebx
jmp case.0x18000c54b.6
lea rax, [0x1800a8ba0]
mov dword [rbp - 0x80], r8d
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x68], rdi
mov dword [rsp + 0x78], r8d
jmp 0x180008862
lea rax, [0x1800a8be0]
mov dword [rbp - 0x80], 0xffffffff
mov qword [rbp - 0x58], rax
lea r9, [rbp - 0x80]
lea rax, [rbp - 0x68]
mov qword [rbp - 0x68], rdi
mov qword [rsp + 0x28], rax
lea r8, [rsp + 0x78]
lea rdx, [rbp - 0x58]
mov dword [rsp + 0x20], 0xe4
xor ecx, ecx
mov dword [rsp + 0x78], r14d
call fcn.180040420
mov rbx, rax
mov dword [rbp - 0x80], 3
lea rax, [0x1800a8ba0]
mov qword [rbp - 0x68], rdi
mov qword [rbp - 0x58], rax
lea r9, [rbp - 0x80]
lea rax, [rbp - 0x68]
mov dword [rsp + 0x78], r14d
mov qword [rsp + 0x28], rax
lea r8, [rsp + 0x78]
lea rdx, [rbp - 0x58]
mov dword [rsp + 0x20], 0xe4
xor ecx, ecx
call fcn.180040420
add eax, ebx
add dword [rbp - 0x6c], eax
jmp 0x1800093cf
lea rax, [rbp - 0x68]
mov dword [rbp - 0x80], 0xffffffff
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x80]
lea r8, [rsp + 0x78]
mov dword [rsp + 0x20], 0xe4
lea rdx, [rbp - 0x58]
mov qword [rbp - 0x68], rdi
xor ecx, ecx
mov dword [rsp + 0x78], 0xffffffff
mov qword [rbp - 0x58], rdi
call fcn.180040420
mov rsi, rax
mov dword [rbp - 0x80], 0xffffffff
lea rax, [rbp - 0x68]
mov qword [rbp - 0x68], rdi
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x80]
lea r8, [rsp + 0x78]
mov dword [rsp + 0x20], 0xe4
lea rdx, [rbp - 0x58]
mov dword [rsp + 0x78], 0xa
xor ecx, ecx
mov qword [rbp - 0x58], rdi
call fcn.180040420
mov rdi, rax
mov dword [rbp - 0x80], 1
lea rax, [0x1800a8b90]
mov dword [rsp + 0x78], 1
mov qword [rbp - 0x68], rax
lea r9, [rbp - 0x80]
mov qword [rbp - 0x58], rax
lea r8, [rsp + 0x78]
lea rax, [rbp - 0x68]
xor ecx, ecx
mov qword [rsp + 0x28], rax
lea rdx, [rbp - 0x58]
mov dword [rsp + 0x20], 0xe4
call fcn.180040420
mov rbx, rax
mov dword [rbp - 0x80], 0xffffffff
lea rax, [0x1800a8b90]
mov dword [rsp + 0x78], r14d
mov qword [rbp - 0x68], rax
lea r9, [rbp - 0x80]
lea rax, [0x1800a8b80]
xor ecx, ecx
mov qword [rbp - 0x58], rax
lea r8, [rsp + 0x78]
lea rax, [rbp - 0x68]
mov qword [rsp + 0x28], rax
lea rdx, [rbp - 0x58]
mov dword [rsp + 0x20], 0xe4
call fcn.180040420
add eax, ebx
add eax, edi
add eax, esi
add dword [rbp - 0x6c], eax
jmp 0x1800093cf
cmp r12d, 0x3057
je 0x1800091dc
cmp r12d, 0x47f9
je 0x180008d48
cmp r12d, 0x5f9b
jne 0x1800093cf
mov eax, SafeArrayDestroy
nop
cmp eax, 0xe
je 0x180008bcc
cmp eax, 0x356
je case.0x18000c54b.6
lea r12, [0x180000000]
jmp 0x180008c6e
movsx eax, byte [r14]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.0x18000ccb1.23
lea r12, [0x180000000]
cdqe
movzx eax, byte [r12 + rax + 0xd350]
mov ecx, dword [r12 + rax*4 + 0xd348]
add rcx, r12
jmp rcx
cmp dword [4], 0
jne 0x180008c5f
mov rcx, qword [SafeArrayDestroy]
xor r9d, r9d
xor edx, edx
mov r8d, 0x8a
call fcn.18003bf70
cmp rax, 0xfffffffffffffffc
jae 0x180008c4e
movzx eax, byte [r14]
lea rcx, [rsp + 0x70]
mov rdx, qword [SafeArrayDestroy]
mov r8d, 0xe5
mov byte [rsp + 0x70], al
call fcn.1800237a0
cmp eax, 1
jne 0x18000c8a2
jmp 0x180008c59
mov dword [4], 1
mov r10d, 5
mov dword [r14], r10d
mov eax, SafeArrayDestroy
mov dword [rbp - 0x60], 1
add eax, 0x348
cmp eax, 0x690
jbe 0x180008bb0
mov ecx, reloc.OLEAUT32.dll_DispInvoke
mov eax, ecx
sub eax, 0x1d
je 0x180008c98
cmp eax, 1
je case.0x18000ce9f.0
jmp 0x180008d2a
movsx eax, byte [r14]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.0x18000ccb1.23
cdqe
movzx eax, byte [r12 + rax + 0xd390]
mov ecx, dword [r12 + rax*4 + 0xd388]
add rcx, r12
jmp rcx
cmp dword [4], 0
jne 0x180008d1e
mov rcx, qword [SafeArrayDestroy]
xor r9d, r9d
xor edx, edx
mov r8d, 0x8a
call fcn.18003bf70
cmp rax, 0xfffffffffffffffd
jae 0x180008d13
movzx eax, byte [r14]
lea rcx, [rsp + 0x70]
mov rdx, qword [SafeArrayDestroy]
mov r8d, 0xe5
mov byte [rsp + 0x70], al
call fcn.1800237a0
cmp eax, 1
jne 0x18000c8a2
jmp 0x180008d1e
mov dword [4], 1
mov dword [r14], 6
mov ecx, reloc.OLEAUT32.dll_DispInvoke
inc ecx
cmp ecx, 0x1f
jb 0x180008c83
mov r12d, 0x5f9b
jmp 0x1800093cf
mov r8d, 0xa
jmp 0x180008d4f
lea r12, [0x180000000]
mov eax, 0xcf
cmp eax, 0xcf
je 0x180008d89
cmp eax, 0x6375
je 0x180009103
cmp eax, 0xc61b
je 0x180008d7d
cmp eax, 0x128c1
je case.0x18000c54b.6
jmp 0x180009108
mov dword [rbp - 0x60], 1
jmp 0x180009108
movsx eax, byte [r14]
add eax, 0xffffffde
cmp eax, 0x53
ja case.0x18000ccb1.23
cdqe
movzx eax, byte [r12 + rax + 0xd3d4]
mov ecx, dword [r12 + rax*4 + 0xd3c8]
add rcx, r12
jmp rcx
cmp dword [4], 0
jne 0x180009103
mov rcx, qword [SafeArrayDestroy]
xor r9d, r9d
xor edx, edx
mov r8d, 0x8a
call fcn.18003bf70
cmp rax, 0xfffffffffffffffe
jae 0x180008e0b
movzx eax, byte [r14]
lea rcx, [rsp + 0x70]
mov rdx, qword [SafeArrayDestroy]
mov r8d, 0xe5
mov byte [rsp + 0x70], al
call fcn.1800237a0
cmp eax, 1
jne 0x18000c8a2
jmp 0x180009103
mov dword [4], 1
jmp 0x180009103
cmp dword [4], 0
jne 0x1800090fc
mov ebx, 6
lea edi, [rbx + 1]
jmp 0x180008e47
lea r12, [0x180000000]
cmp ebx, 6
ja case.default.0x180008e5d
mov eax, ebx
mov ecx, dword [r12 + rax*4 + 0xd428]
add rcx, r12
jmp rcx
mov eax, 0x20
mov word [rbp + 0xb80], ax
mov eax, 0x25
mov word [rbp + 0xb81], ax
mov eax, 0x70
mov word [rbp + 0xb82], ax
mov word [rbp + 0xb83], r8w
jmp case.default.0x180008e5d
mov dword [rbp + 0xb77], 0x486c61
jmp case.default.0x180008e5d
mov r8, qword [sym.imp.ole32.dll_CoMarshalHresult]
lea rdx, [rbp + 0xb70]
lea rcx, [rbp + reloc.OLEAUT32.dll_VarI8FromCy]
call fcn.180001120
jmp case.default.0x180008e5d
mov dword [rbp + 0xb70], 0x4d6f43
jmp case.default.0x180008e5d
mov eax, 0x61
mov word [rbp + 0xb73], ax
mov dword [rbp + 0xb74], 0x687372
jmp case.default.0x180008e5d
mov r12d, 0x65
mov eax, 0x74
mov word [rbp + 0xb7b], r12w
mov dword [rbp + 0xb7c], 0x6c7573
mov word [rbp + 0xb7f], ax
jmp 0x180008f11
mov eax, 0x72
mov word [rbp + 0xb7a], ax
mov r12d, 0x65
dec ebx
mov r8d, 0xa
sub rdi, 1
jne 0x180008e40
mov rcx, qword [SafeArrayDestroy]
xor r9d, r9d
mov r15, qword [rbp - 0x78]
xor edx, edx
mov r13, qword [rbp - 0x40]
mov r8d, 0x8a
xor r14d, r14d
call fcn.18003bf70
cmp rax, 0xfffffffffffffffa
jae 0x180008fda
mov rdx, qword [SafeArrayDestroy]
lea rcx, [rsp + 0x70]
mov r8d, 0xe5
mov byte [rsp + 0x70], 0x75
call fcn.1800237a0
cmp eax, 1
je 0x1800090f5
mov ebx, 0xac
nop dword [rax + rax]
cmp ebx, 0xac
je 0x180008f96
cmp ebx, 0x743c
je case.0x18000c54b.6
jmp 0x180008fc7
xor edx, edx
mov dword [rbp - 0x80], r14d
lea rax, [rbp - 0x80]
xor ecx, ecx
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0xc00]
mov dword [rsp + 0x20], 0x104
lea r8d, [rdx + 1]
call qword [sym.imp.WINSPOOL.DRV_GetPrinterDriverDirectoryW]
mov dword [rbp - 0x60], 6
add ebx, 0x7390
cmp ebx, 0xe720
jbe 0x180008f80
jmp 0x1800090f5
mov ebx, r14d
mov edi, 7
cmp ebx, 6
ja case.default.0x180008ffe
lea rdx, [0x180000000]
mov eax, ebx
mov ecx, dword [rdx + rax*4 + 0xd444]
add rcx, rdx
jmp rcx
mov r8, qword [sym.imp.WININET.dll_GetUrlCacheGroupAttributeA]
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0xc00]
call fcn.180001120
jmp case.default.0x180008ffe
mov byte [rbp + 0x13d], r14b
jmp case.default.0x180008ffe
mov eax, 0x63
mov word [rbp + 0x128], ax
mov dword [rbp + 0x129], 0x476568
jmp case.default.0x180008ffe
mov dword [rbp + 0x120], 0x55746547
mov dword [rbp + 0x124], 0x61436c72
jmp case.default.0x180008ffe
mov eax, 0x41
mov word [rbp + 0x130], ax
mov eax, 0x74
mov word [rbp + 0x131], ax
mov word [rbp + 0x132], ax
mov eax, 0x6972
mov word [rbp + 0x133], ax
jmp case.default.0x180008ffe
mov dword [rbp + 0x135], 0x747562
mov word [rbp + 0x138], r12w
mov dword [rbp + reloc.OLEAUT32.dll_VarBstrCmp], 0xa702520
jmp case.default.0x180008ffe
mov eax, 0x72
mov word [rbp + 0x12c], ax
mov eax, 0x6f
mov word [rbp + 0x12d], ax
mov eax, 0x75
mov word [rbp + 0x12e], ax
mov eax, 0x70
mov word [rbp + 0x12f], ax
inc ebx
sub rdi, 1
jne 0x180008fe2
mov r15, qword [rbp - 0x78]
mov dword [4], 1
lea r12, [0x180000000]
mov dword [r14], 3
mov eax, 0x6375
add eax, 0x62a6
mov r8d, 0xa
cmp eax, 0x18a98
jbe 0x180008d54
mov ebx, 0x61
mov ecx, ebx
mov eax, ecx
sub eax, 0x60
je case.0x18000ce9f.0
cmp eax, 1
jne 0x1800091c6
movsx eax, byte [r14]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.0x18000ccb1.23
cdqe
movzx eax, byte [r12 + rax + 0xd468]
mov ecx, dword [r12 + rax*4 + 0xd460]
add rcx, r12
jmp rcx
cmp dword [4], 0
jne 0x1800091bc
mov rcx, qword [SafeArrayDestroy]
xor r9d, r9d
xor edx, edx
mov r8d, 0x8a
call fcn.18003bf70
cmp rax, 0xfffffffffffffffb
jae 0x1800091b1
mov rdx, qword [SafeArrayDestroy]
lea rcx, [rsp + 0x70]
mov r8d, 0xe5
mov byte [rsp + 0x70], 0x75
call fcn.1800237a0
cmp eax, 1
jne 0x18000c8a2
jmp 0x1800091bc
mov dword [4], 1
mov eax, 4
mov dword [r14], eax
mov ecx, ebx
dec ecx
cmp ecx, 0x5f
ja 0x180009125
mov r12d, 0x47f9
jmp 0x1800093cf
lea r12, [0x180000000]
mov eax, 0x96
nop dword [rax + rax]
cmp eax, 0x96
je 0x18000cc8b
add eax, 0x56b8
cmp eax, 0x56b8
jbe 0x1800091f0
mov ebx, VarUI2FromUI1
nop dword [rax]
mov eax, ebx
sub eax, 0xff
je 0x180009254
sub eax, 1
je 0x1800093bb
sub eax, 1
je 0x180009235
cmp eax, 1
je case.0x18000c54b.6
jmp 0x1800093bb
lea rdx, [rbp - 0x18]
movsd qword [rbp - 0x18], xmm8
movaps xmm0, xmm6
call qword [sym.imp.OLEAUT32.dll_VarDateFromCy]
mov dword [rbp - 0x60], 1
jmp 0x1800093bb
movzx eax, byte [r14]
movaps xmm6, xmm7
cmp al, 0x22
je 0x18000937f
cmp al, 0x5c
je 0x180009314
cmp dword [4], 0
jne 0x1800093b6
mov rcx, qword [SafeArrayDestroy]
xor r9d, r9d
xor edx, edx
mov r8d, 0x8a
call fcn.18003bf70
cmp rax, 0xfffffffffffffffe
jae 0x1800092c5
movzx eax, byte [r14]
lea rcx, [rsp + 0x70]
mov rdx, qword [SafeArrayDestroy]
mov r8d, 0xe5
mov byte [rsp + 0x70], al
call fcn.1800237a0
cmp eax, 1
jne 0x18000c8a2
jmp 0x1800093b6
mov ebx, 0x6c
lea esi, [rbx - 0x68]
nop dword [rax]
mov eax, ebx
sub eax, 0x6a
je 0x1800092fe
sub eax, 1
je 0x1800092e6
cmp eax, 1
jne 0x180009304
mov r13, r14
jmp 0x180009304
mov r8d, 0x104
lea rdx, [rbp + 0xc00]
mov rcx, r13
call qword [sym.imp.IMM32.dll_ImmGetDescriptionA]
jmp 0x180009304
mov dword [rsi], 1
dec ebx
cmp ebx, 0x69
ja 0x1800092d0
mov qword [rbp - 0x40], r13
jmp 0x1800093b6
cmp dword [4], 0
jne 0x180009376
mov rcx, qword [SafeArrayDestroy]
xor r9d, r9d
xor edx, edx
mov r8d, 0x8a
call fcn.18003bf70
cmp rax, 0xfffffffffffffffd
jae 0x18000936b
mov rdx, qword [SafeArrayDestroy]
lea rcx, [rsp + 0x70]
mov r8d, 0xe5
mov byte [rsp + 0x70], reloc.OLEAUT32.dll_VarDateFromCy
call fcn.1800237a0
cmp eax, 1
jne 0x18000c8a2
mov dword [r14], 2
jmp 0x1800093b6
mov dword [4], 1
mov dword [r14], 2
jmp 0x1800093b6
mov rcx, qword [SafeArrayDestroy]
test rcx, rcx
je case.default.0x180008094
mov dword [r14], r14d
mov rax, qword [0x20]
test rax, rax
je 0x1800093a5
mov rcx, qword [rcx]
call rax
xor edx, edx
xor ecx, ecx
lea r9d, [rdx + 8]
lea r8d, [rdx + 0x2c]
call fcn.180003f40
mov ebx, VarUI2FromUI1
inc ebx
mov r12d, 0x3057
cmp ebx, 0x103
jb 0x180009210
add r12d, 0x23c
cmp r12d, 0x25fc
ja 0x180009a07
mov r10d, 5
jmp 0x180007fd8
mov r13, qword [rbp - 0x78]
mov esi, 0x112
mov r15, qword [rbp - 0x78]
dec esi
movzx r12d, byte [rsp + 0x60]
mov qword [rbp - 0x78], r15
mov rdi, qword [rbp - 0x78]
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x30], r13
mov byte [rsp + 0x60], r12b
jmp 0x180009a2f
mov r13, qword [rbp - 0x78]
mov esi, 0x108
mov r15, qword [rbp - 0x78]
dec esi
movzx r12d, byte [rsp + 0x60]
mov qword [rbp - 0x78], r15
mov rdi, qword [rbp - 0x78]
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x30], r13
mov byte [rsp + 0x60], r12b
jmp 0x180009a2f
mov r13, qword [rbp - 0x78]
mov esi, 0x107
mov r15, qword [rbp - 0x78]
dec esi
movzx r12d, byte [rsp + 0x60]
mov qword [rbp - 0x78], r15
mov rdi, qword [rbp - 0x78]
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x30], r13
mov byte [rsp + 0x60], r12b
jmp 0x180009a2f
mov r13, qword [rbp - 0x78]
mov r15, qword [rbp - 0x78]
movzx r12d, byte [rsp + 0x60]
mov qword [rbp - 0x78], r15
mov rdi, qword [rbp - 0x78]
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x30], r13
mov byte [rsp + 0x60], r12b
mov esi, 0x104
dec esi
jmp 0x180009a2f
cmp byte [r14], 0x75
jne case.0x18000ccb1.23
mov ebx, 9
mov dword [r14], ebx
mov dword [rbp - 0x60], 1
jmp case.0x18000c54b.6
mov r13, qword [rbp - 0x78]
mov esi, 0x111
mov r15, qword [rbp - 0x78]
dec esi
movzx r12d, byte [rsp + 0x60]
mov qword [rbp - 0x78], r15
mov rdi, qword [rbp - 0x78]
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x30], r13
mov byte [rsp + 0x60], r12b
jmp 0x180009a2f
cmp dl, 0x6c
jne case.0x18000ccb1.23
mov dword [r14], SafeArrayDestroy
mov dword [rbp - 0x60], 1
jmp case.0x18000c54b.6
cmp dl, 0x6c
jne case.0x18000ccb1.23
mov dword [r14], reloc.OLEAUT32.dll_SafeArrayGetDim
mov dword [rbp - 0x60], 1
jmp case.0x18000c54b.6
mov rbx, qword [rbp + 0xb50]
mov esi, 0x10c
mov r15d, dword [rbp - 8]
mov edi, r10d
mov r12d, dword [rbp - 8]
mov r13, qword [rbp + 0xb50]
lea eax, [rsi - 0x2b]
mov dword [rbp - 0x6c], 0xe1
mov dword [rsp + 0x78], r10d
nop dword [rax]
cmp edi, 5
ja case.default.0x18000957c
lea rdx, [0x180000000]
mov eax, edi
mov ecx, dword [rdx + rax*4 + 0xd4a0]
add rcx, rdx
jmp rcx
mov rdx, qword [rbp - 0x68]
mov r8d, r10d
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.GDI32.dll_ExtSelectClipRgn]
mov dword [rbp - 0x60], 1
jmp 0x18000977e
mov rax, qword [0x40]
mov qword [rbp - 0x68], r14
test rax, rax
je 0x180009784
call rax
jmp 0x18000977e
cmp byte [r14], 0x6c
mov rbx, r14
je 0x180009784
mov edi, r14d
cmp edi, 9
ja case.default.0x1800095dc
mov eax, edi
mov ecx, dword [rdx + rax*4 + 0xd4b8]
add rcx, rdx
jmp rcx
mov word [rbp + 0xbde], r14w
jmp case.default.0x1800095dc
mov r8d, 2
lea rdx, [0x180096f1c]
lea rcx, [rbp + 0xba0]
call fcn.18006ab68
mov eax, dword [0x180096fba]
mov dword [rbp + 0xba4], eax
movzx eax, word [0x180096fbe]
mov word [rbp + 0xba8], ax
jmp 0x180009725
mov r15d, r14d
mov r12d, 1
mov r13, r14
jmp case.default.0x1800095dc
mov r8d, 2
mov dword [rbp + 0xbaa], 0x2f
lea rdx, [0x180097160]
lea rcx, [rbp + 0xba0]
call fcn.180065fac
jmp 0x180009725
mov r8d, 4
mov word [rbp + 0xbba], r14w
lea rdx, [0x1800973ba]
lea rcx, [rbp + 0xbba]
call fcn.18006ab68
movsd xmm0, qword [0x1800973fe]
movzx eax, word [0x180097406]
movsd qword [rbp + 0xbc2], xmm0
mov word [rbp + 0xbca], ax
jmp 0x180009725
mov r8d, 4
lea rdx, [0x18009741e]
lea rcx, [rbp + 0xba0]
call fcn.180065fac
mov r8d, 3
lea rdx, [0x180097444]
lea rcx, [rbp + 0xbd4]
call fcn.18006ab68
mov dword [rbp + 0xbda], 0x2f0066
jmp 0x180009725
mov word [rbp + 0xbcc], r14w
jmp case.default.0x1800095dc
movsd xmm0, qword [0x18009756c]
movzx eax, word [0x180097574]
movsd qword [rbp + 0xbb0], xmm0
mov word [rbp + 0xbb8], ax
jmp case.default.0x1800095dc
mov r9, r13
lea r8, [rbp + 0xba0]
mov edx, r12d
mov ecx, r15d
call qword [sym.imp.urlmon.dll_CoInternetIsFeatureEnabledForUrl]
mov dword [rbp - 0x60], 7
lea rdx, [0x180000000]
inc edi
lea eax, [rdi + 0x8e]
cmp eax, 0x98
jb 0x1800095c7
mov edi, dword [rsp + 0x78]
jmp 0x18000977e
mov rcx, qword [rbp - 0x78]
mov dword [r14], r14d
test rcx, rcx
je 0x180009784
mov rdx, rcx
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.USER32.dll_ReleaseDC]
mov qword [rbp - 0x78], r14
jmp 0x18000977e
mov rcx, rbx
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov rcx, rax
mov qword [rbp - 0x20], rax
call qword [sym.imp.USER32.dll_GetDC]
mov qword [rbp - 0x78], rax
mov r10d, 5
mov eax, dword [rbp - 0x6c]
dec eax
dec edi
mov dword [rbp - 0x6c], eax
mov dword [rsp + 0x78], edi
cmp eax, 0xdb
ja 0x180009560
mov r13, qword [rbp - 0x78]
dec esi
mov r15, qword [rbp - 0x78]
movzx r12d, byte [rsp + 0x60]
mov qword [rbp - 0x78], r15
mov rdi, qword [rbp - 0x78]
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x30], r13
mov byte [rsp + 0x60], r12b
jmp 0x180009a2f
mov r13, qword [rbp - 0x78]
mov r15, qword [rbp - 0x78]
movzx r12d, byte [rsp + 0x60]
mov qword [rbp - 0x78], r15
mov rdi, qword [rbp - 0x78]
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x30], r13
mov byte [rsp + 0x60], r12b
jmp 0x180009a61
mov r13, qword [rbp - 0x78]
mov esi, 0x10d
mov r15, qword [rbp - 0x78]
dec esi
movzx r12d, byte [rsp + 0x60]
mov qword [rbp - 0x78], r15
mov rdi, qword [rbp - 0x78]
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x30], r13
mov byte [rsp + 0x60], r12b
jmp 0x180009a2f
mov r13, qword [rbp - 0x78]
mov r15, qword [rbp - 0x78]
movzx r12d, byte [rsp + 0x60]
mov qword [rbp - 0x78], r15
mov rdi, qword [rbp - 0x78]
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x30], r13
mov byte [rsp + 0x60], r12b
mov esi, 0x113
dec esi
jmp 0x180009a2f
mov r13, qword [rbp - 0x78]
lea r8, [0x180000000]
mov r15, qword [rbp - 0x78]
movzx r12d, byte [rsp + 0x60]
mov qword [rbp - 0x78], r15
mov rax, qword [rbp - 0x78]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x30], r13
mov byte [rsp + 0x60], r12b
mov ecx, 0x94
nop dword [rax]
mov eax, ecx
sub eax, 0x92
je case.0x18000c54b.6
sub eax, 1
je 0x18000a465
cmp eax, 1
jne 0x18000a46c
movsx eax, byte [r14]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x18000ccb1.23
cdqe
movzx eax, byte [r8 + rax + 0xd4f8]
mov ecx, dword [r8 + rax*4 + 0xd4e0]
add rcx, r8
jmp rcx
mov r13, qword [rbp - 0x78]
mov r15, qword [rbp - 0x78]
movzx r12d, byte [rsp + 0x60]
mov qword [rbp - 0x78], r15
mov rax, qword [rbp - 0x78]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x30], r13
mov byte [rsp + 0x60], r12b
jmp 0x18000a487
mov r13, qword [rbp - 0x78]
mov esi, 0x109
mov r15, qword [rbp - 0x78]
dec esi
movzx r12d, byte [rsp + 0x60]
mov qword [rbp - 0x78], r15
mov rdi, qword [rbp - 0x78]
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x30], r13
mov byte [rsp + 0x60], r12b
jmp 0x180009a2f
mov r13, qword [rbp - 0x78]
mov esi, 0x106
mov r15, qword [rbp - 0x78]
dec esi
movzx r12d, byte [rsp + 0x60]
mov qword [rbp - 0x78], r15
mov rdi, qword [rbp - 0x78]
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x30], r13
mov byte [rsp + 0x60], r12b
jmp 0x180009a2f
mov r13, qword [rbp - 0x78]
lea r8, [0x180000000]
mov r15, qword [rbp - 0x78]
movzx r12d, byte [rsp + 0x60]
mov qword [rbp - 0x78], r15
mov rax, qword [rbp - 0x78]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x30], r13
mov byte [rsp + 0x60], r12b
jmp 0x18000ab9c
mov r13, qword [rbp - 0x78]
mov esi, 0x10b
mov r15, qword [rbp - 0x78]
dec esi
movzx r12d, byte [rsp + 0x60]
mov qword [rbp - 0x78], r15
mov rdi, qword [rbp - 0x78]
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x30], r13
mov byte [rsp + 0x60], r12b
jmp 0x180009a2f
mov r13, qword [rbp - 0x78]
mov r15, qword [rbp - 0x78]
movzx r12d, byte [rsp + 0x60]
mov qword [rbp - 0x78], r15
mov rdi, qword [rbp - 0x78]
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x30], r13
mov byte [rsp + 0x60], r12b
jmp 0x18000b279
mov r13, qword [rbp - 0x78]
mov r15, qword [rbp - 0x78]
movzx r12d, byte [rsp + 0x60]
mov qword [rbp - 0x78], r15
mov rdi, qword [rbp - 0x78]
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x30], r13
mov byte [rsp + 0x60], r12b
jmp 0x18000b291
mov rax, 0xffffffffffffffff
jmp 0x18000a9ba
mov r13, qword [rbp - 0x78]
mov esi, DispInvoke
mov r15, qword [rbp - 0x78]
movzx r12d, byte [rsp + 0x60]
mov qword [rbp - 0x78], r15
mov rdi, qword [rbp - 0x78]
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x30], r13
mov byte [rsp + 0x60], r12b
cmp esi, 9
jbe case.0x18000c54b.6
lea eax, [rsi - 0x103]
cmp eax, 0x10
ja case.default.0x180009a59
lea r8, [0x180000000]
mov ecx, dword [r8 + rax*4 + 0xd570]
add rcx, r8
jmp rcx
mov r9d, 0x83
mov ebx, r9d
cmp ebx, 0xcb27
ja 0x180009b19
je 0x180009afc
cmp ebx, r9d
je 0x180009ae1
cmp ebx, 0x332c
je 0x180009ad0
cmp ebx, 0x65d5
je 0x180009ab1
cmp ebx, 0x987e
jne 0x180009ba4
cmp byte [r14], 0x65
mov qword [rbp + 0xe0], r14
jne case.0x18000ccb1.23
mov dword [rbp - 0x80], r14d
jmp 0x180009ba4
mov eax, reloc.OLEAUT32.dll_VarR8FromI2
mov byte [rbp - 0x38], 1
mov word [rbp + 0xbe5], ax
mov dword [rbp + 0xbe6], 0x656d61
jmp 0x180009ba4
mov eax, 0x73
mov word [rbp + 0xbe4], ax
jmp 0x180009ba4
mov eax, 0x73
mov dword [rbp + 0xbe0], 0x616c43
mov word [rbp + 0xbe3], ax
jmp 0x180009ba4
movups xmm0, xmmword [0x180085900]
mov dword [r14], r14d
mov qword [rbp + 0x88], r14
movups xmmword [rbp + 0x110], xmm0
jmp 0x180009ba4
cmp ebx, 0xfdd0
je 0x180009b8f
cmp ebx, 0x13079
je 0x180009b37
cmp ebx, 0x16322
je case.0x18000c54b.6
jmp 0x180009ba4
mov r8d, dword [rbp - 0x80]
lea rax, [rbp + 0x88]
mov rcx, qword [rbp + 0xe0]
lea r9, [rbp + 0x110]
lea rdx, [rbp + 0xbe0]
mov qword [rsp + 0x20], rax
call qword [sym.imp.OLEACC.dll_CreateStdAccessibleProxyA]
test eax, eax
je 0x180009b73
mov byte [rbp - 0x38], 0
mov dword [rbp - 0x60], 1
jmp 0x180009b9e
cmp byte [rbp - 0x38], 0
je 0x180009b86
mov rcx, qword [rbp + 0x88]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov dword [rbp - 0x60], 1
jmp 0x180009b9e
mov rax, qword [0x38]
test rax, rax
je 0x180009ba4
call rax
mov r9d, 0x83
add ebx, 0x32a9
cmp ebx, 0x19548
jbe 0x180009a64
mov esi, 0x10d
dec esi
jmp 0x180009a2f
mov edx, 0x63
mov eax, edx
nop dword [rax]
cmp eax, edx
je 0x18000b430
dec eax
cmp eax, 0x62
ja 0x180009bd0
dec esi
jmp 0x180009a2f
mov eax, 0x8e
nop dword [rax + rax]
cmp eax, 0x8e
je 0x18000b74d
add eax, 0x3e20
cmp eax, 0x3e20
jbe 0x180009bf0
mov esi, 0x107
dec esi
jmp 0x180009a2f
mov eax, 0x8b
cmp eax, 0x8b
je 0x180009c42
cmp eax, 0x124
je 0x180009c36
cmp eax, 0x1bd
je case.0x18000c54b.6
jmp 0x180009d1e
mov dword [rbp - 0x60], 1
jmp 0x180009d1e
movsx edx, byte [r14]
lea eax, [rdx - 0x30]
cmp eax, 9
ja case.0x18000ccb1.23
cdqe
mov ecx, dword [r8 + rax*4 + 0xd5b4]
add rcx, r8
jmp rcx
mov byte [rsp + 0x68], dl
lea rcx, [rsp + 0x68]
mov rdx, qword [SafeArrayDestroy]
mov r8d, 0xe5
call fcn.1800237a0
mov eax, SafeArrayLock
jmp 0x180009d0b
cmp dword [4], 0
jne 0x180009d06
mov rcx, qword [SafeArrayDestroy]
xor r9d, r9d
xor edx, edx
mov r8d, 0x8a
call fcn.18003bf70
cmp rax, 0xffffffffffffffff
jae 0x180009d06
lea r9, [rbp - 0x18]
mov qword [rbp - 0x18], 5
xor r8d, r8d
xor edx, edx
mov ecx, 0xec
call fcn.180034c30
mov qword [8], rax
test rax, rax
je 0x18000c8a2
movzx ecx, byte [r14]
mov r8d, 0xe5
mov byte [rsp + 0x68], cl
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.1800237a0
cmp eax, 1
jne 0x18000c8a2
mov dword [4], eax
mov eax, 0x18
mov dword [0], eax
lea r8, [0x180000000]
mov eax, 0x8b
add eax, 0x99
cmp eax, 0x256
jb 0x180009c18
mov esi, 0x108
dec esi
jmp 0x180009a2f
mov dword [rbp - 0x60], 1
dec ecx
lea r8, [0x180000000]
cmp ecx, 0x91
ja 0x180009880
mov r10d, 5
mov eax, 0x44
nop dword [rax]
cmp eax, 0x44
je 0x18000a68e
cmp eax, 0xd7
je 0x18000a50b
cmp eax, 0x16a
je 0x18000a4fb
cmp eax, 0x1fd
jne 0x18000a69d
mov r9d, dword [rbp + 0x44]
lea rax, [rbp + 0xe8]
mov r8, qword [rbp + 0xb88]
xor edx, edx
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov eax, dword [rbp + 0x50]
mov dword [rsp + 0x38], eax
mov eax, dword [rbp + 0x4c]
mov dword [rsp + 0x30], eax
mov eax, dword [rbp + 0x48]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp + 0x70]
mov dword [rsp + 0x20], eax
call qword [sym.imp.oledlg.dll_OleUIAddVerbMenuA]
mov dword [rbp - 0x60], 1
jmp case.0x18000c54b.6
mov dword [rbp + 0x50], r14d
mov qword [rbp + 0xe8], r14
jmp 0x18000a69d
movsx eax, byte [r14]
add eax, 0xffffffd0
mov dword [rbp + 0x48], r10d
cmp eax, 9
ja case.0x18000ccb1.23
lea rdx, [0x180000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0xd610]
add rcx, rdx
jmp rcx
cmp dword [4], 0
jne 0x18000a67c
mov edi, 0xb9
mov r13d, 4
nop dword [rax]
cmp edi, 0xb9
je 0x18000a64b
cmp edi, 0x4335
je 0x18000a637
cmp edi, 0x85b1
jne 0x18000a657
test r12b, r12b
je 0x18000a5ed
mov ebx, 0x8e
nop
mov eax, ebx
sub eax, 0x8b
je 0x18000a5b0
sub eax, 1
je 0x18000a5aa
sub eax, 1
je 0x18000a5a1
cmp eax, 1
jne 0x18000a5df
mov qword [rbp + 0xb0], r14
jmp 0x18000a5df
mov r15, r14
mov dword [rbp + 0x74], r14d
jmp 0x18000a5df
mov dword [rbp + 0x78], r14d
jmp 0x18000a5df
mov r9d, dword [rbp + 0x78]
mov edx, r15d
mov r8d, dword [rbp + 0x74]
mov rcx, qword [rbp + 0xb0]
call qword [sym.imp.WINMM.dll_joySetCapture]
test eax, eax
je 0x18000a5d1
xor r12b, r12b
jmp 0x18000a5df
test r12b, r12b
je 0x18000a5df
mov ecx, r15d
call qword [sym.imp.WINMM.dll_joyReleaseCapture]
dec ebx
cmp ebx, 0x8a
ja 0x18000a580
mov qword [rbp - 0x78], r15
mov rcx, qword [SafeArrayDestroy]
xor r9d, r9d
xor edx, edx
mov r8d, 0x8a
call fcn.18003bf70
cmp rax, 0xfffffffffffffffe
jae 0x18000a62d
movzx eax, byte [r14]
lea rcx, [rsp + 0x68]
mov rdx, qword [SafeArrayDestroy]
mov r8d, 0xe5
mov byte [rsp + 0x68], al
call fcn.1800237a0
jmp 0x18000a657
mov dword [r13], 1
jmp 0x18000a657
movzx eax, r12b
cmp r15, 0xf
mov ecx, r14d
cmovbe ecx, eax
movzx r12d, cl
jmp 0x18000a657
mov r12b, 1
call qword [sym.imp.WINMM.dll_joyGetNumDevs]
mov r15d, eax
add edi, 0x427c
cmp edi, 0xc774
jbe 0x18000a550
mov r13, qword [rbp - 0x30]
mov r10d, 5
mov byte [rsp + 0x60], r12b
mov qword [rbp - 0x78], r15
mov dword [r14], 0x15
mov eax, reloc.OLEAUT32.dll_VarR4FromDec
mov dword [rbp + 0x4c], r14d
jmp 0x18000a69d
mov qword [rbp + 0xb88], r14
mov dword [rbp + 0x44], r14d
mov dword [rbp + 0x70], r14d
add eax, 0x93
cmp eax, 0x290
jb 0x18000a490
mov rdi, qword [rbp - 0x40]
mov esi, 0x109
dec esi
jmp 0x180009a2f
mov ecx, 0x35
mov eax, ecx
sub eax, 0x35
je 0x18000a6e8
sub eax, 1
je 0x18000a6dc
cmp eax, 1
je case.0x18000c54b.6
jmp 0x18000a8bd
mov dword [rbp - 0x60], 1
jmp 0x18000a8bd
movsx eax, byte [r14]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.0x18000ccb1.23
cdqe
movzx eax, byte [r8 + rax + 0xd640]
mov ecx, dword [r8 + rax*4 + 0xd638]
add rcx, r8
jmp rcx
mov ebx, 0x47
nop word [rax + rax]
cmp ebx, 0x6c2a
ja case.0x18000ccb1.23
cmp ebx, 0x365c
ja 0x18000a878
je 0x18000a854
cmp ebx, 0x47
je 0x18000a842
cmp ebx, 0x124e
je 0x18000a7a8
cmp ebx, 0x2455
jne 0x18000a8e2
test rdi, rdi
je 0x18000a777
mov rcx, qword [rbp + 0xb8]
mov rdx, rdi
call qword [sym.imp.USER32.dll_ReleaseDC]
mov rdi, r14
mov qword [rbp - 0x40], r14
xorps xmm0, xmm0
mov dword [rbp + 0x58], 3
movups xmmword [rbp + 0xba0], xmm0
mov dword [r14], 1
add ebx, 0x1207
movups xmmword [rbp + 0xbb0], xmm0
movups xmmword [rbp + 0xbc0], xmm0
jmp 0x18000a720
mov rcx, qword [rbp + 0xc0]
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov rcx, rax
mov qword [rbp + 0xb8], rax
call qword [sym.imp.USER32.dll_GetDC]
cmp dword [4], 0
mov rdi, rax
mov qword [rbp - 0x40], rax
jne 0x18000a8e2
mov rcx, qword [SafeArrayDestroy]
xor r9d, r9d
xor edx, edx
mov r8d, 0x8a
call fcn.18003bf70
cmp rax, 0xfffffffffffffffe
jae 0x18000a82c
movzx eax, byte [r14]
lea rcx, [rsp + 0x68]
mov rdx, qword [SafeArrayDestroy]
mov r8d, 0xe5
mov byte [rsp + 0x68], al
call fcn.1800237a0
cmp eax, 1
jne 0x18000c8a2
add ebx, 0x1207
jmp 0x18000a720
mov dword [4], 1
add ebx, 0x1207
jmp 0x18000a720
mov qword [rbp + 0xc0], r14
add ebx, 0x1207
jmp 0x18000a720
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x120], xmm0
mov dword [rbp + 0x140], eax
add ebx, 0x1207
movups xmmword [rbp + 0x130], xmm0
jmp 0x18000a720
cmp ebx, 0x4863
je 0x18000a8d4
cmp ebx, 0x5a6a
jne 0x18000a8e2
mov eax, dword [rbp + 0x60]
lea r9, [rbp + 0x120]
mov r8d, dword [rbp + 0x58]
lea rdx, [rbp + 0xba0]
mov dword [rsp + 0x28], eax
mov rcx, rdi
mov eax, dword [rbp + 0x5c]
mov dword [rsp + 0x20], eax
call qword [sym.imp.MSIMG32.dll_GradientFill]
mov ecx, 0x35
lea r8, [0x180000000]
inc ecx
cmp ecx, 0x38
jb 0x18000a6c2
mov esi, 0x112
dec esi
jmp 0x180009a2f
mov dword [rbp + 0x5c], 3
mov dword [rbp + 0x60], 2
add ebx, 0x1207
jmp 0x18000a720
mov ebx, 5
cmp ebx, 5
ja case.default.0x18000a908
mov eax, ebx
mov ecx, dword [r8 + rax*4 + 0xd678]
add rcx, r8
jmp rcx
mov eax, dword [rbp + 0x20]
mov r9d, dword [rbp + 0x28]
mov r8d, dword [rbp + 0x24]
mov edx, dword [rbp + 0x2c]
mov rcx, qword [rbp - 0x20]
mov dword [rsp + 0x50], r14d
mov dword [rsp + 0x48], reloc.OLEAUT32.dll_SafeArrayLock
mov dword [rsp + 0x40], 0xa
mov dword [rsp + 0x38], eax
mov eax, dword [rbp + 0x30]
mov dword [rsp + 0x30], eax
mov rax, qword [rbp + 0xc8]
mov qword [rsp + 0x28], rax
mov eax, dword [rbp + 0x54]
mov dword [rsp + 0x20], eax
call qword [sym.imp.MSIMG32.dll_AlphaBlend]
jmp case.default.0x18000a908
mov rax, qword [0x30]
mov dword [rbp + 0x54], reloc.OLEAUT32.dll_SafeArrayLock
mov qword [rbp + 0xc8], r14
mov dword [rbp + 0x30], r14d
mov dword [rbp + 0x20], r14d
test rax, rax
je case.default.0x18000a908
call rax
jmp case.default.0x18000a908
mov rcx, r14
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov rcx, rax
mov qword [rbp + 0xd0], rax
call qword [sym.imp.USER32.dll_GetDC]
cmp byte [r14], 0x65
mov qword [rbp - 0x20], rax
je case.default.0x18000a908
mov dword [rbp - 0x60], 7
mov rax, qword [rbp - 0x60]
mov rcx, qword [rbp + 0xe00]
xor rcx, rsp
call fcn.1800618d0
lea r11, [rsp + 0xf40]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov dword [rbp - 0x60], 1
jmp case.default.0x18000a908
mov rdx, qword [rbp - 0x20]
test rdx, rdx
je 0x18000aa1c
mov rcx, qword [rbp + 0xd0]
call qword [sym.imp.USER32.dll_ReleaseDC]
mov qword [rbp - 0x20], r14
mov dword [rbp + 0x2c], r14d
mov dword [rbp + 0x24], r14d
mov dword [rbp + 0x28], 0xa
mov dword [r14], r14d
dec ebx
lea r8, [0x180000000]
lea eax, [rbx + 0x5e]
cmp eax, 0x5d
ja 0x18000a8f2
dec esi
jmp 0x180009a2f
mov ecx, 0x2c
nop
mov eax, ecx
sub eax, 0x2c
je 0x18000aa65
cmp eax, 1
je case.0x18000c54b.6
jmp 0x18000aaef
movsx eax, byte [r14]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x18000ccb1.23
cdqe
movzx eax, byte [r8 + rax + 0xd6a0]
mov ecx, dword [r8 + rax*4 + 0xd690]
add rcx, r8
jmp rcx
mov qword [8], r14
mov dword [r14], 1
jmp case.0x18000aa8b.9
mov ebx, 0x123
cmp ebx, 0x128
jae case.0x18000ccb1.23
mov eax, ebx
sub eax, 0x123
je 0x18000ab83
sub eax, 1
je 0x18000ab69
sub eax, 1
je 0x18000ab50
sub eax, 1
je 0x18000ab06
cmp eax, 1
jne 0x18000ab8f
lea r8, [0x180000000]
mov ecx, 0x2c
mov dword [rbp - 0x60], 1
inc ecx
cmp ecx, 0x2e
jb 0x18000aa50
mov esi, 0x106
dec esi
jmp 0x180009a2f
mov edx, dword [rbp - 4]
lea r9, [rbp - 0x58]
mov rcx, qword [rbp + 0xd8]
lea r8, [rbp + 0xb70]
mov dword [r14], DispInvoke
call qword [sym.imp.OLEACC.dll_AccessibleObjectFromWindow]
test eax, eax
je 0x18000ab38
mov byte [rsp + 0x70], 0
inc ebx
jmp 0x18000aaa3
cmp byte [rsp + 0x70], 0
je 0x18000ab8f
mov rcx, qword [rbp - 0x58]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
inc ebx
jmp 0x18000aaa3
movups xmm0, xmmword [0x1800858f0]
mov qword [rbp - 0x58], r14
inc ebx
movups xmmword [rbp + 0xb70], xmm0
jmp 0x18000aaa3
mov rax, qword [SafeArrayDestroy]
test rax, rax
je 0x18000ab78
call rax
mov dword [rbp - 4], r14d
inc ebx
jmp 0x18000aaa3
mov byte [rsp + 0x70], 1
mov qword [rbp + 0xd8], r14
inc ebx
jmp 0x18000aaa3
mov r10d, 5
mov ecx, 0x42
mov eax, ecx
sub eax, 0x42
je 0x18000abbf
sub eax, 0x34
je 0x18000ac37
cmp eax, 0x34
je case.0x18000ce9f.0
jmp 0x18000ac3c
movsx eax, byte [r14]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x18000ccb1.23
cdqe
movzx eax, byte [r8 + rax + 0xd730]
mov ecx, dword [r8 + rax*4 + 0xd718]
add rcx, r8
jmp rcx
lea r9, [rbp - 0x18]
mov qword [rbp - 0x18], r10
xor r8d, r8d
xor edx, edx
mov ecx, 0xec
call fcn.180034c30
mov qword [8], rax
test rax, rax
je 0x18000c8a2
mov r8d, 0xe5
mov byte [rsp + 0x68], 0x2e
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.1800237a0
cmp eax, 1
jne 0x18000c8a2
mov dword [r14], SafeArrayLock
mov ecx, 0x76
add ecx, 0x34
lea r8, [0x180000000]
mov r10d, 5
cmp ecx, 0xde
jb 0x18000aba1
mov rdi, qword [rbp - 0x40]
mov esi, 0x10b
dec esi
jmp 0x180009a2f
mov ebx, 0x57
nop dword [rax]
cmp ebx, 0x57
je 0x18000ac9d
cmp ebx, 0xc3c
je 0x18000ac8a
cmp ebx, 0x1821
jne 0x18000acc0
mov dword [r14], r14d
jmp 0x18000ac37
xor edx, edx
xor ecx, ecx
lea r9d, [rdx + 8]
lea r8d, [rdx + 0x2c]
call fcn.180003f40
jmp 0x18000acc0
mov rcx, qword [SafeArrayDestroy]
test rcx, rcx
je 0x18000c8a2
mov rax, qword [0x28]
test rax, rax
je 0x18000acc0
mov rcx, qword [rcx]
call rax
add ebx, 0xbe5
cmp ebx, 0x23af
jbe 0x18000ac70
mov edi, 0x115
mov eax, edi
sub eax, 0x115
je 0x18000acea
cmp eax, 1
je 0x18000ac37
jmp 0x18000ad9c
mov rcx, qword [SafeArrayDestroy]
test rcx, rcx
je 0x18000c8a2
mov rax, qword [0x28]
test rax, rax
je 0x18000ad0d
mov rcx, qword [rcx]
call rax
mov esi, 8
xor edx, edx
mov r9d, esi
xor ecx, ecx
lea r8d, [rsi + 0x24]
call fcn.180003f40
cmp qword [r14], 0
je 0x18000ad95
mov ebx, VarUI2FromUI1
nop dword [rax]
mov eax, ebx
sub eax, 0xfb
je 0x18000ad89
cmp eax, 1
jne 0x18000ad8b
lea r9, [rbp + 8]
mov qword [rbp + 8], r14
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.RPCRT4.dll_MesEncodeIncrementalHandleCreate]
test eax, eax
jne 0x18000ad8b
lea r8, [rbp - 0x18]
mov qword [rbp - 0x18], r14
xor edx, edx
xor ecx, ecx
call qword [sym.imp.RPCRT4.dll_MesDecodeIncrementalHandleCreate]
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x18000ad78
call qword [sym.imp.RPCRT4.dll_MesHandleFree]
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x18000ad8b
call qword [sym.imp.RPCRT4.dll_MesHandleFree]
jmp 0x18000ad8b
call qword [rsi]
dec ebx
cmp ebx, 0xfa
ja 0x18000ad30
mov dword [r14], DispInvoke
inc edi
cmp edi, 0x117
jb 0x18000acd3
mov esi, 0x17
nop
mov eax, esi
sub eax, 0x15
je 0x18000ac37
sub eax, 1
je 0x18000aef4
cmp eax, 1
jne 0x18000af33
cmp qword [8], 0
jne 0x18000af33
mov edi, 0xaa
cmp edi, 0xaa
je 0x18000adfa
cmp edi, 0x1f36
je 0x18000c8a2
jmp 0x18000aee0
mov ebx, 0x6a
lea r14d, [rbx + 5]
cmp ebx, 0x6a
je 0x18000aea2
cmp ebx, 0x3924
je 0x18000ae6d
cmp ebx, 0x71de
jne 0x18000aecb
movzx eax, word [0x180096ec4]
lea rdx, [rbp + 0x120]
mov r8, qword [sym.imp.WININET.dll_GetUrlCacheEntryInfoW]
lea rcx, [rbp + reloc.OLEAUT32.dll_VarI8FromCy]
mov word [rbp + 0x133], r14w
mov word [rbp + 0x134], ax
movzx eax, word [0x180096918]
mov word [rbp + 0x136], ax
movzx eax, byte [0x18009691a]
mov byte [rbp + 0x138], al
call fcn.180001120
jmp 0x18000aecb
mov eax, dword [str.heEn]
mov dword [rbp + 0x129], eax
mov eax, dword [str.tryInf]
mov dword [rbp + 0x12d], eax
movzx eax, word [0x180097818]
mov word [rbp + 0x131], ax
movzx eax, byte [0x18009781a]
mov byte [rbp + 0x133], al
jmp 0x18000aecb
movzx eax, word [0x180097808]
mov dword [rbp + 0x120], 0x746547
mov word [rbp + 0x123], ax
mov byte [rbp + 0x125], 0x6c
mov dword [rbp + 0x126], 0x636143
add ebx, 0x38ba
cmp ebx, 0xaa2e
jbe 0x18000ae03
xor r14d, r14d
add edi, 0x1e8c
cmp edi, 0x3d18
jbe 0x18000ade1
jmp 0x18000af33
mov rax, qword [0x28]
test rax, rax
je 0x18000af0e
mov rcx, qword [SafeArrayDestroy]
mov rcx, qword [rcx]
call rax
xor edx, edx
xor ecx, ecx
lea r9d, [rdx + 8]
lea r8d, [rdx + 0x2c]
call fcn.180003f40
cmp qword [r14], 0
je 0x18000af2c
call qword [DispInvoke]
mov dword [r14], DispInvoke
dec esi
cmp esi, 0x14
ja 0x18000adb0
mov edi, 0x39
mov dword [rsp + 0x78], edi
cmp edi, 0x201
ja case.0x18000ccb1.23
cmp edi, 0x39
je 0x18000af83
cmp edi, 0xe4
je 0x18000af74
cmp edi, 0x18f
je 0x18000ac37
add edi, 0xab
jmp 0x18000af43
mov dword [r14], DispInvoke
add edi, 0xab
jmp 0x18000af43
mov rcx, qword [SafeArrayDestroy]
test rcx, rcx
je 0x18000c8a2
mov rax, qword [0x28]
test rax, rax
je 0x18000afa6
mov rcx, qword [rcx]
call rax
xor edx, edx
xor ecx, ecx
lea r9d, [rdx + 8]
lea r8d, [rdx + 0x2c]
call fcn.180003f40
cmp qword [r14], 0
je 0x18000b083
mov ebx, 0xe9
lea edi, [rbx - 0x77]
lea r14d, [rdi - 0xd]
lea r13d, [rbx - 0x7c]
mov eax, ebx
sub eax, 0xe7
je 0x18000b025
sub eax, 1
je 0x18000b019
cmp eax, 1
jne 0x18000b059
mov eax, 0x53
mov dword [rbp + 0x127], 0x46657079
mov word [rbp + 0x120], ax
mov eax, 0x5474
mov word [rbp + 0x125], ax
mov dword [rbp + 0x121], 0x65476d79
mov word [rbp + 0x12b], di
jmp 0x18000b059
mov dword [rbp + 0x12c], 0x614e6d6f
jmp 0x18000b059
mov r8, qword [sym.imp.dbghelp.dll_SymGetTypeFromName]
lea rdx, [rbp + 0x120]
mov word [rbp + 0x130], r13w
lea rcx, [rbp + reloc.OLEAUT32.dll_VarI8FromCy]
mov word [rbp + 0x131], r14w
mov dword [rbp + 0x132], 0x702520
call fcn.180001120
dec ebx
cmp ebx, 0xe6
ja 0x18000afd1
call qword [VarR8FromI2]
mov edi, dword [rsp + 0x78]
xor r14d, r14d
mov r15, qword [rbp - 0x78]
movzx r12d, byte [rsp + 0x60]
mov r13, qword [rbp - 0x30]
add edi, 0xab
jmp 0x18000af43
mov ebx, 0x71
lea eax, [rbx - 0x69]
cmp eax, 8
ja case.default.0x18000b0aa
mov ecx, dword [r8 + rax*4 + 0xd7a8]
add rcx, r8
jmp rcx
mov r8d, 2
lea rdx, [0x18009782b]
lea rcx, [rbp + 0xb6a]
call fcn.18006add0
mov byte [rbp + 0xb6c], 0
mov byte [rbp - 0x70], 1
jmp case.default.0x18000b0aa
lea rcx, [rbp + 0xb60]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x18000b0e3
mov dword [rbp - 0x6c], eax
movsx eax, byte [r14]
add eax, 0xffffffd0
mov dword [rbp], r14d
cmp eax, 9
ja case.0x18000ccb1.23
cdqe
mov ecx, dword [r8 + rax*4 + 0xd7cc]
add rcx, r8
jmp rcx
cmp dword [4], 0
jne 0x18000b170
mov rcx, qword [SafeArrayDestroy]
xor r9d, r9d
xor edx, edx
mov r8d, 0x8a
call fcn.18003bf70
cmp rax, 0xffffffffffffffff
jae 0x18000b165
movzx eax, byte [r14]
lea rcx, [rsp + 0x68]
mov rdx, qword [SafeArrayDestroy]
mov r8d, 0xe5
mov byte [rsp + 0x68], al
call fcn.1800237a0
cmp eax, 1
jne 0x18000c8a2
jmp 0x18000b170
mov dword [4], 1
mov dword [r14], SafeArrayLock
mov edx, dword [rbp - 0x6c]
lea r9, [rbp - 0x68]
lea r8, [rbp]
mov qword [rbp - 0x68], r14
lea rcx, [rbp + 0xb60]
mov ebx, 0x6c
call qword [sym.imp.RPCRT4.dll_MesEncodeFixedBufferHandleCreate]
mov dword [rbp - 0x48], eax
jmp case.default.0x18000b0aa
cmp byte [rbp - 0x70], 0
je 0x18000b1df
mov edx, dword [rbp - 0x6c]
lea r8, [rbp - 0x18]
lea rcx, [rbp + 0xb60]
mov qword [rbp - 0x18], r14
call qword [sym.imp.RPCRT4.dll_MesDecodeBufferHandleCreate]
mov rcx, qword [rbp - 0x68]
mov dword [rbp - 0x48], eax
test rcx, rcx
je 0x18000b1d0
call qword [sym.imp.RPCRT4.dll_MesHandleFree]
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x18000b1df
call qword [sym.imp.RPCRT4.dll_MesHandleFree]
mov dword [rbp - 0x60], 1
jmp case.default.0x18000b0aa
mov eax, 0x4567
mov byte [rbp + 0xb6a], 0
mov word [rbp + 0xb65], ax
movzx eax, word [0x18009786a]
mov word [rbp + 0xb67], ax
movzx eax, byte [0x18009786c]
mov byte [rbp + 0xb69], al
jmp case.default.0x18000b0aa
mov word [rbp + 0xb60], 0x53
jmp case.default.0x18000b0aa
movzx eax, byte [rbp - 0x70]
mov ecx, r14d
cmp dword [rbp - 0x48], 0
cmove ecx, eax
mov byte [rbp - 0x70], cl
jmp case.default.0x18000b0aa
movzx eax, word [0x18009787b]
mov word [rbp + 0xb62], ax
movzx eax, byte [0x18009787d]
mov byte [rbp + 0xb64], al
mov byte [rbp + 0xb61], 0x74
mov byte [rbp + 0xb65], 0
dec ebx
lea r8, [0x180000000]
cmp ebx, 0x68
ja 0x18000b093
mov ebx, 0x39
mov eax, 0x2d
nop
cmp eax, 0x2d
je 0x18000c646
add eax, 0x5a
cmp eax, 0x5a
jbe 0x18000b280
mov ecx, 0x2c
nop word [rax + rax]
mov eax, ecx
sub eax, 0x2a
je 0x18000c616
sub eax, 1
je 0x18000b412
cmp eax, 1
jne 0x18000b419
movsx eax, byte [r14]
add eax, 0xffffffd5
mov qword [rbp + 0xb50], r14
cmp eax, 0xe
ja case.0x18000ccb1.23
lea rdx, [0x180000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0xd7f4]
add rcx, rdx
jmp rcx
mov rdx, qword [SafeArrayDestroy]
lea rcx, [rsp + 0x68]
mov dword [4], r14d
mov r8d, 0xe5
movzx eax, byte [r14]
mov byte [rsp + 0x68], al
call fcn.1800237a0
cmp eax, 1
jne 0x18000c8a2
mov eax, 0x16
mov dword [0], eax
lea ecx, [rax + 0x16]
jmp 0x18000b419
cmp dword [4], 0
jne 0x18000b401
mov rcx, qword [SafeArrayDestroy]
xor r9d, r9d
xor edx, edx
mov r8d, 0x8a
call fcn.18003bf70
cmp rax, 0xfffffffffffffffe
jae 0x18000b3f6
mov ebx, 0xab
mov eax, ebx
sub eax, 0xab
je 0x18000b3d7
cmp eax, 1
jne 0x18000b3e6
xor edx, edx
lea rcx, [rbp + 0xc00]
mov r8d, 0xf0
call fcn.180063960
mov r8d, dword [rbp - 0x24]
lea rax, [rsp + 0x78]
mov edx, dword [rbp + 4]
lea r9, [rbp + 0xc00]
mov rcx, qword [rbp - 0x10]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x78], r14d
call qword [sym.imp.OLEACC.dll_AccessibleChildren]
movzx eax, byte [r14]
lea rcx, [rsp + 0x68]
mov byte [rsp + 0x68], al
mov r8d, 0xe5
mov eax, 8
mov rdx, qword [rax]
call fcn.1800237a0
cmp eax, 1
jne 0x18000c8a2
jmp 0x18000b3e6
mov qword [rbp - 0x10], r14
mov dword [rbp + 4], r14d
mov dword [rbp - 0x24], 1
inc ebx
cmp ebx, 0xad
jb 0x18000b363
jmp 0x18000b401
mov dword [4], 1
mov eax, 0x15
mov dword [0], eax
lea ecx, [rax + 0x17]
jmp 0x18000b419
mov dword [rbp - 8], 0x104
dec ecx
mov esi, 0x10a
cmp ecx, 0x29
ja 0x18000b2a0
dec esi
jmp 0x180009a2f
movsx eax, byte [r14]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x18000b456.13
cdqe
movzx eax, byte [r8 + rax + 0xd844]
mov ecx, dword [r8 + rax*4 + 0xd830]
add rcx, r8
jmp rcx
cmp qword [8], 0
je case.0x18000ce9f.0
mov edi, dword [rbp - 0x50]
mov ebx, SafeArrayDestroy
movabs r13, 0x64002f002e
mov esi, 0xa
nop
cmp esi, 0xa
ja case.default.0x18000b496
mov eax, esi
mov ecx, dword [r8 + rax*4 + 0xd8bc]
add rcx, r8
jmp rcx
mov dword [rbp + 0xba4], 0x700074
mov dword [rbp + 0xba8], 0x2f003a
jmp case.default.0x18000b496
mov r8d, 5
lea rdx, str..._.
lea rcx, [rbp + 0x120]
call fcn.18006ab68
lea rdx, str.efault.h
mov qword [rbp + 0x128], r13
lea rcx, [rbp + 0x120]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
mov r8d, 3
lea rdx, [0x180097654]
lea rcx, [rbp + 0x13e]
call fcn.18006ab68
lea r8, [0x180000000]
mov edx, 0x63
jmp case.default.0x18000b496
mov dword [rbp + 0xba0], 0x740068
jmp case.default.0x18000b496
lea rax, [rbp - 0x24]
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x28], rax
lea r9, [rbp + reloc.OLEAUT32.dll_VarI8FromCy]
mov r8d, edi
mov dword [rsp + 0x20], 0x104
lea rdx, [rbp + 0x120]
mov dword [rbp - 0x24], r14d
lea rcx, [rbp + 0xba0]
call qword [sym.imp.urlmon.dll_CoInternetCombineUrl]
lea r8, [0x180000000]
mov edx, 0x63
jmp case.default.0x18000b496
mov dword [rbp + 0xbac], 0x77002f
mov dword [rbp + 0xbb0], 0x770077
mov dword [rbp + 0xbb4], 0x63002e
jmp case.default.0x18000b496
mov dword [rbp + 0xbca], 0x2f006d
mov dword [rbp + 0xbce], 0x620061
mov dword [rbp + 0xbd2], 0x2f0063
jmp case.default.0x18000b496
mov edi, 0x8000000
jmp case.default.0x18000b496
mov eax, 8
call qword [rax]
lea r8, [0x180000000]
mov edx, 0x63
jmp case.default.0x18000b496
mov dword [rbp + 0xbc6], 0x6f0063
jmp case.default.0x18000b496
mov dword [rbp + 0xbd6], 0x650064
mov dword [rbp + 0xbda], 0x2f0066
mov word [rbp + 0xbde], r14w
jmp case.default.0x18000b496
mov eax, 0x6f
mov dword [rbp + 0xbba], 0x74006e
mov word [rbp + 0xbb8], ax
mov dword [rbp + 0xbbe], 0x73006f
mov dword [rbp + 0xbc2], 0x2e006f
dec esi
sub rbx, 1
jne 0x18000b480
mov dword [rbp - 0x60], 1
jmp case.0x18000c54b.6
mov rax, qword [DispInvoke]
test rax, rax
je case.0x18000ce9f.0
call rax
mov dword [rbp - 0x60], 1
jmp case.0x18000c54b.6
mov esi, dword [rbp - 0x50]
mov ebx, r14d
mov r15d, dword [rbp - 0x50]
mov r12d, dword [rbp - 0x50]
mov r13d, dword [rbp - 0x50]
mov r10, qword [rbp + 0xb50]
nop word [rax + rax]
cmp ebx, 7
ja case.default.0x18000b682
mov eax, ebx
mov ecx, dword [r8 + rax*4 + 0xd8e8]
add rcx, r8
jmp rcx
mov esi, r14d
mov r15d, 0xa
jmp case.default.0x18000b682
mov r12d, 0xa
mov qword [rbp - 0x10], r14
mov dword [rbp + 4], r14d
lea r13d, [r12 + 0xa]
jmp case.default.0x18000b682
mov dword [rbp - 4], r14d
jmp case.default.0x18000b682
mov dword [rbp - 0x24], reloc.OLEAUT32.dll_SafeArrayLock
jmp case.default.0x18000b682
mov rcx, r14
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetDC]
mov r10, rax
test rax, rax
je 0x18000b6df
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.USER32.dll_ReleaseDC]
mov r10, r14
lea r8, [0x180000000]
inc ebx
lea eax, [rbx + 0xa5]
cmp eax, 0xad
jb 0x18000b670
mov dword [rbp - 0x60], 1
jmp case.0x18000c54b.6
mov dword [rbp], r14d
jmp case.default.0x18000b682
mov eax, dword [rbp - 0x24]
mov r9d, r12d
mov r8d, dword [rbp]
mov rcx, r10
mov edx, dword [rbp - 4]
mov dword [rsp + 0x50], r14d
mov dword [rsp + 0x48], eax
mov eax, dword [rbp + 4]
mov dword [rsp + 0x40], r15d
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], eax
mov rax, qword [rbp - 0x10]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r13d
call qword [sym.imp.MSIMG32.dll_TransparentBlt]
jmp case.0x18000ccb1.23
movsx eax, byte [r14]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x18000b773.16
cdqe
movzx eax, byte [r8 + rax + 0xd928]
mov ecx, dword [r8 + rax*4 + 0xd908]
add rcx, r8
jmp rcx
mov esi, dword [rbp - 0x50]
mov r15d, 0x80
movzx r12d, byte [rbp - 0x70]
mov r13d, 0x6944
mov dword [rsp + 0x78], r15d
mov qword [rbp - 0x68], rsi
cmp r15d, 0x80
je 0x18000bb13
cmp r15d, 0x1e80
je 0x18000bae7
cmp r15d, 0x3c80
je 0x18000bab8
cmp r15d, 0x5a80
je 0x18000b81d
cmp r15d, 0x7880
jne 0x18000bb4e
test r12b, r12b
je case.0x18000ce9f.0
lea r8, [rbp - 0x68]
mov qword [rbp - 0x68], r14
mov edx, esi
lea rcx, [rbp + 0xb60]
call qword [sym.imp.RPCRT4.dll_MesDecodeBufferHandleCreate]
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x18000b7fe
call qword [sym.imp.RPCRT4.dll_MesHandleFree]
mov rcx, qword [rbp - 0x68]
test rcx, rcx
je case.0x18000ce9f.0
call qword [sym.imp.RPCRT4.dll_MesHandleFree]
mov dword [rbp - 0x60], 1
jmp case.0x18000c54b.6
cmp dword [4], 0
jne 0x18000ba89
mov rcx, qword [SafeArrayDestroy]
xor r9d, r9d
xor edx, edx
mov r8d, 0x8a
call fcn.18003bf70
cmp rax, 0xffffffffffffffff
jae 0x18000ba0d
lea r9, [rbp - 0x10]
mov qword [rbp - 0x10], 5
xor r8d, r8d
xor edx, edx
mov ecx, 0xec
call fcn.180034c30
mov qword [8], rax
test rax, rax
je 0x18000c8a2
movzx ecx, byte [r14]
mov r8d, 0xe5
mov byte [rsp + 0x68], cl
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.1800237a0
cmp eax, 1
je 0x18000ba89
mov edi, 0x97
mov dword [rbp - 0x48], edi
mov eax, edi
sub eax, 0x97
je 0x18000b8bc
cmp eax, 1
je case.0x18000c54b.6
jmp 0x18000b9fa
mov ebx, 2
mov r15d, 0x656d
lea edi, [rbx + 0x71]
lea esi, [rbx + 0x4c]
lea r14d, [rbx + 8]
lea r12d, [rbx + 0x4d]
nop word [rax + rax]
cmp ebx, 0x216
ja 0x18000b96c
je 0x18000b95e
cmp ebx, 2
je 0x18000b940
cmp ebx, 0x87
je 0x18000b92c
cmp ebx, 0x10c
je 0x18000b91b
cmp ebx, 0x191
jne 0x18000b9cd
mov word [rbp + 0xb7c], si
jmp 0x18000b9cd
mov eax, 0x66
mov word [rbp + 0xb7b], ax
jmp 0x18000b9cd
mov word [rbp + 0xb79], di
mov word [rbp + 0xb7a], r12w
jmp 0x18000b9cd
mov word [rbp + 0xb70], r13w
mov dword [rbp + 0xb72], 0x65477073
mov dword [rbp + 0xb76], 0x444974
jmp 0x18000b9cd
mov eax, 0x61
mov word [rbp + 0xb7d], ax
jmp 0x18000b9cd
cmp ebx, 0x29b
je 0x18000b9c5
cmp ebx, 0x320
je 0x18000b9bc
cmp ebx, 0x3a5
je 0x18000b9a8
cmp ebx, 0x42a
jne 0x18000b9cd
mov r8, qword [sym.imp.OLEAUT32.dll_DispInvoke]
lea rdx, [rbp + 0xb70]
lea rcx, [rbp + reloc.OLEAUT32.dll_VarI8FromCy]
call fcn.180001120
jmp 0x18000b9cd
mov dword [rbp + 0xb81], 0x702520
mov word [rbp + 0xb84], r14w
jmp 0x18000b9cd
mov word [rbp + 0xb80], di
jmp 0x18000b9cd
mov word [rbp + 0xb7e], r15w
add ebx, 0x85
cmp ebx, 0x4af
jb 0x18000b8e0
mov edi, dword [rbp - 0x48]
xor r14d, r14d
mov rsi, qword [rbp - 0x68]
mov r15d, dword [rsp + 0x78]
movzx r12d, byte [rbp - 0x70]
mov dword [rbp - 0x60], 6
inc edi
mov dword [rbp - 0x48], edi
cmp edi, 0x99
jb 0x18000b8a5
jmp 0x18000ba89
mov ebx, 0x52
lea r13d, [rbx - 0x4e]
lea r14d, [rbx - 0xc]
nop word [rax + rax]
mov eax, ebx
sub eax, 0x52
je 0x18000ba4c
sub eax, 0x64
je 0x18000ba3b
cmp eax, 0x64
jne 0x18000ba75
mov dword [r13], 1
jmp 0x18000ba75
xor edx, edx
lea rcx, [rbp + 0xb70]
call qword [sym.imp.KERNEL32.dll_GetCompressedFileSizeW]
jmp 0x18000ba75
lea rax, [rbp + 0xb70]
mov dword [rbp + 0xb70], r14d
sub rax, 2
nop
cmp word [rax + 2], 0
lea rax, [rax + 2]
jne 0x18000ba60
movups xmm0, xmmword [str.ileName]
movups xmmword [rax], xmm0
add ebx, 0x64
cmp ebx, 0x17e
jb 0x18000ba20
xor r14d, r14d
mov r13d, 0x6944
lea r9, [rbp + 8]
mov qword [rbp + 8], r14
lea r8, [rbp - 0x24]
mov edx, esi
lea rcx, [rbp + 0xb60]
call qword [sym.imp.RPCRT4.dll_MesEncodeFixedBufferHandleCreate]
test eax, eax
je 0x18000bb4e
xor r12b, r12b
mov byte [rbp - 0x70], r12b
jmp 0x18000bb4e
mov r12b, 1
mov byte [rbp + 0xb6c], 0
mov byte [rbp - 0x70], r12b
lea rax, [rbp + 0xb60]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], 0
jne 0x18000bad4
mov qword [rbp - 0x68], rsi
mov dword [rbp - 0x24], r14d
jmp 0x18000bb4e
mov r8d, 3
mov dword [rbp + 0xb65], 0x636e4567
lea rdx, [0x18009769c]
mov byte [rbp + 0xb69], 0
lea rcx, [rbp + 0xb69]
call fcn.18006add0
jmp 0x18000bb4e
mov r8d, 2
lea rdx, [0x1800976bd]
lea rcx, [rbp + 0xb60]
call fcn.18006add0
movzx eax, word [0x1800976e8]
mov word [rbp + 0xb62], ax
movzx eax, byte [0x1800976ea]
mov byte [rbp + 0xb64], al
mov byte [rbp + 0xb65], 0
add r15d, 0x1e00
mov dword [rsp + 0x78], r15d
cmp r15d, 0x9600
jbe 0x18000b792
lea r9, [rbp - 0x10]
mov qword [rbp - 0x10], 5
xor r8d, r8d
xor edx, edx
mov ecx, 0xec
call fcn.180034c30
mov qword [8], rax
test rax, rax
je 0x18000c8a2
mov r8d, 0xe5
mov byte [rsp + 0x68], 0x2e
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.1800237a0
cmp eax, 1
jne 0x18000c8a2
mov dword [r14], SafeArrayLock
mov dword [rbp - 0x60], eax
jmp case.0x18000c54b.6
mov eax, 0xa9
cmp eax, 0xa9
je 0x18000bbf9
add eax, 0x6ee8
cmp eax, 0x6ee8
jbe 0x18000bbc8
mov ebx, 0x31
mov eax, ebx
sub eax, 0x31
je 0x18000bc95
cmp eax, 1
je case.0x18000ce9f.0
jmp 0x18000bccc
lea r9, [rbp - 0x10]
mov qword [rbp - 0x10], 5
xor r8d, r8d
xor edx, edx
mov ecx, 0xec
call fcn.180034c30
mov rdx, rax
mov qword [8], rdx
test rax, rax
je 0x18000c8a2
movzx eax, byte [r14]
lea rcx, [rsp + 0x68]
mov r8d, 0xe5
mov byte [rsp + 0x68], al
call fcn.1800237a0
cmp eax, 1
je 0x18000bc7a
mov r15d, 0x50
nop dword [rax + rax]
mov eax, r15d
sub eax, 0x4f
je 0x18000c8a2
cmp eax, 1
jne 0x18000bc71
lea rdx, [rbp - 0x10]
mov qword [rbp - 0x10], r14
xor ecx, ecx
call qword [sym.imp.OLEACC.dll_WindowFromAccessibleObject]
dec r15d
cmp r15d, 0x4e
ja 0x18000bc50
mov dword [4], r14d
mov dword [r14], reloc.OLEAUT32.dll_SafeArrayLock
mov dword [rbp - 0x60], 1
jmp case.0x18000c54b.6
mov rcx, qword [SafeArrayDestroy]
test rcx, rcx
je 0x18000c8a2
mov rax, qword [0x28]
test rax, rax
je 0x18000bcb8
mov rcx, qword [rcx]
call rax
xor edx, edx
xor ecx, ecx
lea r9d, [rdx + 8]
lea r8d, [rdx + 0x2c]
call fcn.180003f40
mov dword [r14], r14d
inc ebx
cmp ebx, 0x33
jb 0x18000bbe0
lea r8, [0x180000000]
mov rdi, qword [rbp + 0xb50]
mov eax, 0x131
mov r13d, dword [rbp - 0x50]
mov edx, 5
mov r15d, dword [rbp - 0x50]
mov esi, dword [rbp - 0x50]
movzx ebx, byte [rsp + 0x60]
nop
cmp edx, 5
ja case.default.0x18000bd12
mov eax, edx
mov ecx, dword [r8 + rax*4 + 0xd9a0]
add rcx, r8
jmp rcx
mov rax, qword [0x28]
mov dword [rbp + 0x20], reloc.OLEAUT32.dll_SafeArrayGetDim
test rax, rax
je 0x18000bd39
mov rcx, qword [SafeArrayDestroy]
mov rcx, qword [rcx]
call rax
mov rdx, qword [rbp + 0x10]
mov dword [rbp + 0x2c], SafeArrayLock
jmp 0x18000bd6f
xor edx, edx
xor ecx, ecx
lea r9d, [rdx + 8]
lea r8d, [rdx + 0x2c]
call fcn.180003f40
cmp qword [r14], 0
mov dword [rbp + 0x24], 1
mov dword [rbp + 0x28], r14d
je 0x18000bd6b
call qword [OleUIPromptUserA]
mov rdx, qword [rbp + 0x10]
mov eax, dword [rbp - 0x28]
dec eax
dec edx
mov dword [rbp - 0x28], eax
mov qword [rbp + 0x10], rdx
cmp eax, 0x12b
jbe case.0x18000b773.14
lea r8, [0x180000000]
jmp 0x18000bd00
test rdi, rdi
movzx eax, bl
mov ecx, r14d
cmovne ecx, eax
mov byte [rsp + 0x60], cl
movzx ebx, cl
test cl, cl
je 0x18000bf40
mov r12d, 6
mov dword [rbp - 0x48], r12d
nop dword [rax]
cmp r12d, 6
je 0x18000bea8
cmp r12d, 0x162
je 0x18000be85
cmp r12d, 0x2be
jne 0x18000beb6
cmp r15d, 0xffffffff
jne 0x18000bdf3
mov rcx, rdi
call qword [sym.imp.COMCTL32.dll_ImageList_Destroy]
cmp r15d, 0xffffffff
movzx eax, bl
mov ecx, r14d
cmovne ecx, eax
mov byte [rsp + 0x60], cl
movzx ebx, cl
test cl, cl
je 0x18000beb6
mov r12, qword [rbp - 0x10]
mov ebx, 0x28
mov eax, ebx
sub eax, 0x26
je 0x18000be6a
sub eax, 1
je 0x18000be2e
cmp eax, 1
jne 0x18000be73
mov esi, r14d
jmp 0x18000be73
mov r9d, dword [rbp - 4]
mov eax, 0x20
mov dword [rsp + 0x48], eax
mov r8, r12
mov eax, dword [rbp]
mov edx, r13d
mov dword [rsp + 0x40], esi
mov rcx, rdi
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], eax
mov eax, dword [rbp + 4]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp - 0x24]
mov dword [rsp + 0x20], eax
call qword [sym.imp.COMCTL32.dll_ImageList_DrawEx]
jmp 0x18000be73
mov rcx, rdi
call qword [sym.imp.COMCTL32.dll_ImageList_Destroy]
dec ebx
cmp ebx, 0x25
ja 0x18000be18
mov r12d, dword [rbp - 0x48]
movzx ebx, byte [rsp + 0x60]
jmp 0x18000beb6
mov rcx, rdi
mov dword [rbp - 0x24], 0xa
mov dword [rbp + 4], reloc.OLEAUT32.dll_SafeArrayLock
mov dword [rbp], reloc.OLEAUT32.dll_SafeArrayLock
call qword [sym.imp.COMCTL32.dll_ImageList_GetBkColor]
mov r15d, eax
jmp 0x18000beb6
mov r13d, r14d
mov qword [rbp - 0x10], r14
mov dword [rbp - 4], 0xa
add r12d, 0x15c
mov dword [rbp - 0x48], r12d
cmp r12d, 0x414
jbe 0x18000bdc0
movzx ebx, byte [rsp + 0x60]
jmp 0x18000bd6b
mov eax, dword [rbp + 0x28]
mov r9d, dword [rbp + 0x24]
mov r8d, dword [rbp + 0x2c]
mov edx, dword [rbp + 0x20]
mov ecx, dword [rbp + 0x30]
mov dword [rsp + 0x20], eax
call qword [sym.imp.COMCTL32.dll_ImageList_Create]
mov rdi, rax
mov dword [r14], DispInvoke
jmp 0x18000bd6b
cmp qword [8], 0
mov bl, 1
jne 0x18000bf34
mov ecx, 0xcf
mov eax, ecx
sub eax, 0xce
je 0x18000bf48
cmp eax, 1
jne 0x18000bf2a
mov byte [rsp + 0x68], bl
mov qword [rbp - 0x68], r14
dec ecx
cmp ecx, 0xcd
ja 0x18000bf14
mov dword [rbp + 0x30], reloc.OLEAUT32.dll_SafeArrayGetDim
jmp 0x18000bd6f
movzx ebx, cl
jmp 0x18000bd6f
lea r9, [rbp - 0x68]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.RPCRT4.dll_MesEncodeIncrementalHandleCreate]
test eax, eax
jne 0x18000c8a2
cmp byte [rsp + 0x68], al
je 0x18000c8a2
lea r8, [rbp + 8]
mov qword [rbp + 8], r14
xor edx, edx
xor ecx, ecx
call qword [sym.imp.RPCRT4.dll_MesDecodeIncrementalHandleCreate]
mov rcx, qword [rbp - 0x68]
test rcx, rcx
je 0x18000bf8c
call qword [sym.imp.RPCRT4.dll_MesHandleFree]
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x18000c8a2
call qword [sym.imp.RPCRT4.dll_MesHandleFree]
mov dword [rbp - 0x60], 6
jmp case.0x18000c54b.6
mov rsi, qword [rbp + 0xb50]
mov r15d, 0x105
movzx edi, byte [rsp + 0x68]
nop dword [rax]
mov eax, r15d
sub eax, 0x105
je 0x18000c039
sub eax, 1
je 0x18000c016
sub eax, 1
je 0x18000c000
sub eax, 1
je 0x18000bfe7
cmp eax, 1
je case.0x18000ce9f.0
jmp 0x18000c16a
cmp qword [r14], 0
je 0x18000bff4
call qword [DispInvoke]
mov dword [r14], DispInvoke
jmp 0x18000c16a
xor edx, edx
xor ecx, ecx
lea r9d, [rdx + 8]
lea r8d, [rdx + 0x2c]
call fcn.180003f40
jmp 0x18000c16a
mov rax, qword [0x28]
test rax, rax
je 0x18000c16a
mov rcx, qword [SafeArrayDestroy]
mov rcx, qword [rcx]
call rax
jmp 0x18000c16a
cmp qword [8], 0
jne 0x18000c16a
mov ebx, 0x118
nop dword [rax]
mov eax, ebx
sub eax, 0x118
je 0x18000c121
sub eax, 1
je 0x18000c10b
sub eax, 1
je 0x18000c0ce
sub eax, 1
je 0x18000c07e
cmp eax, 1
je case.0x18000c54b.6
jmp 0x18000c15c
lea r8, [rbp - 0x20]
mov qword [rbp - 0x20], r14
lea rdx, [rbp + 0x120]
mov rcx, rsi
call qword [sym.imp.urlmon.dll_CreateURLMoniker]
test eax, eax
je 0x18000c0a9
xor dil, dil
mov dword [rbp - 0x60], 6
jmp 0x18000c15c
test dil, dil
je 0x18000c0c2
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.urlmon.dll_IsAsyncMoniker]
mov rcx, qword [rbp - 0x20]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov dword [rbp - 0x60], 6
jmp 0x18000c15c
mov r8d, 3
lea rdx, [0x180097738]
lea rcx, [rbp + 0x120]
call fcn.180065fac
movsd xmm0, qword [str.splay]
mov dil, 1
mov eax, dword [0x180097748]
mov rsi, r14
movsd qword [rbp + 0x132], xmm0
mov dword [rbp + 0x13a], eax
jmp 0x18000c15c
lea rdx, [0x18009774c]
lea rcx, [rbp + 0x128]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x18000c15c
mov r8d, 2
mov word [rbp + 0x120], r14w
lea rdx, [0x180097728]
lea rcx, [rbp + 0x120]
call fcn.180065fac
mov eax, dword [0x180097730]
mov dword [rbp + 0x124], eax
movzx eax, word [0x180097734]
mov word [rbp + 0x128], ax
inc ebx
cmp ebx, 0x11d
jb 0x18000c050
inc r15d
cmp r15d, 0x10a
jb 0x18000bfc0
mov rdi, qword [rbp + 0xb50]
mov r15d, 0x50
mov r12d, 0xf7
mov edx, 0x6441
mov dword [rsp + 0x78], r12d
mov ecx, 0x7448
lea r13d, [r15 + 0x14]
mov eax, r12d
sub eax, 0xf5
je case.0x18000ce9f.0
sub eax, 1
je 0x18000c4e8
cmp eax, 1
jne 0x18000c4fe
cmp qword [8], 0
jne 0x18000c3a4
mov esi, 0xbc
mov dword [rbp - 0x48], esi
nop word [rax + rax]
mov eax, esi
sub eax, 0xbc
je 0x18000c38c
sub eax, 1
je 0x18000c211
sub eax, 1
je 0x18000c205
cmp eax, 1
je case.0x18000c54b.6
jmp 0x18000c393
mov dword [rbp - 0x60], 6
jmp 0x18000c393
mov ebx, VarBoolFromStr
lea esi, [rbx - 4]
lea r14d, [rbx - 0x13]
lea r15d, [rbx - 6]
lea r12d, [rbx - 5]
nop word [rax + rax]
cmp ebx, 0xbb8
ja 0x18000c2c8
je 0x18000c2ab
cmp ebx, 0x78
je 0x18000c29f
cmp ebx, 0x348
je 0x18000c293
cmp ebx, 0x618
je 0x18000c26c
cmp ebx, 0x8e8
jne 0x18000c369
mov word [rbp + 0x128], r14w
jmp 0x18000c369
mov eax, 0x70
mov word [rbp + 0x123], ax
mov eax, 0x52
mov dword [rbp + 0x124], 0x646441
mov word [rbp + 0x127], ax
jmp 0x18000c369
mov word [rbp + 0x122], si
jmp 0x18000c369
mov word [rbp + 0x120], cx
jmp 0x18000c369
mov eax, 0x71
mov word [rbp + 0x129], ax
mov eax, 0x75
mov word [rbp + 0x12a], ax
jmp 0x18000c369
cmp ebx, 0xe88
je 0x18000c357
cmp ebx, 0x1158
je 0x18000c331
cmp ebx, 0x1428
je 0x18000c327
cmp ebx, 0x16f8
jne 0x18000c369
mov word [rbp + 0x134], r12w
lea rdx, [rbp + 0x120]
mov r8, rdi
mov dword [rbp + 0x135], 0xa702520
lea rcx, [rbp + reloc.OLEAUT32.dll_VarI8FromCy]
mov byte [rbp + reloc.OLEAUT32.dll_VarBstrCmp], 0
call fcn.180001120
mov ecx, 0x7448
mov edx, 0x6441
jmp 0x18000c369
mov word [rbp + 0x133], r15w
jmp 0x18000c369
mov eax, 0x61
mov word [rbp + 0x12f], r14w
mov word [rbp + 0x130], ax
mov word [rbp + 0x131], r13w
mov word [rbp + 0x132], r14w
jmp 0x18000c369
mov word [rbp + 0x12b], r14w
mov dword [rbp + 0x12c], 0x487473
add ebx, 0x2d0
cmp ebx, 0x1950
jbe 0x18000c230
mov esi, dword [rbp - 0x48]
xor r14d, r14d
mov r12d, dword [rsp + 0x78]
lea r15d, [r14 + 0x50]
jmp 0x18000c393
mov rdi, qword [sym.imp.WININET.dll_HttpAddRequestHeadersA]
inc esi
mov dword [rbp - 0x48], esi
cmp esi, 0xc0
jb 0x18000c1e0
cmp qword [0x28], 0
je 0x18000c4d5
mov ebx, 0x66
lea r14d, [rbx - 0x62]
lea r13d, [rbx - 0x41]
mov eax, ebx
sub eax, 0x66
je 0x18000c476
sub eax, 0x57
je 0x18000c42d
cmp eax, 0x57
jne 0x18000c4ad
lea rdx, [0x180097760]
lea rcx, [rbp + 0xb80]
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
mov r8d, 2
mov word [rbp + 0xb81], r13w
lea rdx, [0x180096eb8]
lea rcx, [rbp + 0xb82]
call fcn.18006add0
mov r8, qword [sym.imp.WINSPOOL.DRV_AddPrinterDriverW]
lea rdx, [rbp + 0xb70]
lea rcx, [rbp + reloc.OLEAUT32.dll_VarI8FromCy]
call fcn.180001120
jmp 0x18000c4ad
lea rdx, [0x180096d20]
lea rcx, [rbp + 0xb70]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [str.Drive]
lea rdx, [0x180096908]
mov dword [rbp + 0xb7a], eax
lea rcx, [rbp + 0xb7f]
movzx eax, word [0x18009775c]
mov r8d, 2
mov word [rbp + 0xb7e], ax
call fcn.18006add0
jmp 0x18000c4ad
mov r8, r14
lea rdx, [0x180097754]
lea rcx, [rbp + 0xb70]
call fcn.18006add0
mov eax, dword [str.rint]
mov word [rbp + 0xb73], r15w
mov dword [rbp + 0xb74], eax
movzx eax, byte [0x180096d1c]
mov byte [rbp + 0xb78], al
add ebx, 0x57
cmp ebx, 0x16b
jb 0x18000c3c0
mov rcx, qword [SafeArrayDestroy]
mov rcx, qword [rcx]
call qword [0x28]
xor r14d, r14d
lea r13d, [r14 + 0x64]
xor edx, edx
xor ecx, ecx
lea r9d, [rdx + 8]
lea r8d, [rdx + 0x2c]
call fcn.180003f40
jmp 0x18000c4fe
mov rax, qword [VarR8FromI2]
test rax, rax
je 0x18000c4f7
call rax
mov dword [r14], DispInvoke
dec r12d
mov ecx, 0x7448
mov dword [rsp + 0x78], r12d
mov edx, 0x6441
cmp r12d, 0xf4
ja 0x18000c1a0
lea r8, [0x180000000]
mov r12d, dword [rbp - 0x50]
mov edi, r14d
mov ebx, dword [rbp - 0x50]
mov rsi, qword [rbp + 0xb50]
cmp edi, 6
ja case.0x18000c54b.2
mov eax, edi
mov ecx, dword [r8 + rax*4 + 0xd9b8]
add rcx, r8
jmp rcx
xor r9d, r9d
mov dword [rsp + 0x20], r12d
mov r8d, ebx
lea rdx, [rbp + 0xb60]
mov rcx, rsi
call qword [sym.imp.GDI32.dll_GetGlyphIndicesW]
jmp case.0x18000c54b.2
mov rcx, r14
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov rcx, rax
mov r15, rax
call qword [sym.imp.USER32.dll_GetDC]
mov rsi, rax
test rax, rax
je case.0x18000c54b.2
mov rdx, rax
mov rcx, r15
call qword [sym.imp.USER32.dll_ReleaseDC]
mov rsi, r14
jmp case.0x18000c54b.2
mov dword [rbp + 0xb60], 0x740053
mov dword [rbp + 0xb64], 0x690072
mov dword [rbp + 0xb68], 0x67006e
mov word [rbp + 0xb6c], r14w
jmp case.0x18000c54b.2
mov dword [rbp - 0x60], 7
jmp case.0x18000c54b.2
lea rax, [rbp + 0xb60]
mov rbx, 0xffffffffffffffff
nop word [rax + rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x18000c5e0
mov r12d, 1
inc edi
lea r8, [0x180000000]
lea eax, [rdi + 0xcc]
cmp eax, 0xd3
jb 0x18000c535
mov dword [rbp - 0x60], 1
jmp case.0x18000c54b.6
mov r9d, dword [rbp - 8]
lea r8, [rbp + reloc.OLEAUT32.dll_VarI8FromCy]
mov rcx, qword [rbp + 0xb50]
xor edx, edx
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
call qword [sym.imp.urlmon.dll_URLDownloadToCacheFileW]
mov dword [rbp - 0x60], 1
jmp case.0x18000c54b.6
movsx eax, byte [r14]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x18000ccb1.23
lea rdx, [0x180000000]
cdqe
movzx eax, byte [rdx + rax + 0xd9f0]
mov ecx, dword [rdx + rax*4 + 0xd9d4]
add rcx, rdx
jmp rcx
cmp dword [4], 0
jne case.0x18000ce9f.0
mov rcx, qword [SafeArrayDestroy]
xor r9d, r9d
xor edx, edx
mov r8d, 0x8a
call fcn.18003bf70
cmp rax, 0xffffffffffffffff
jae 0x18000c6d4
movzx eax, byte [r14]
lea rcx, [rsp + 0x68]
mov rdx, qword [SafeArrayDestroy]
mov r8d, 0xe5
mov byte [rsp + 0x68], al
call fcn.1800237a0
cmp eax, 1
je case.0x18000ce9f.0
mov dword [rbp - 0x60], 6
jmp case.0x18000c54b.6
mov dword [4], 1
mov dword [rbp - 0x60], 1
jmp case.0x18000c54b.6
mov eax, ebx
sub eax, 0x37
je case.0x18000ce9f.0
sub eax, 1
je 0x18000c762
cmp eax, 1
jne 0x18000c76f
movzx eax, byte [r14]
lea rcx, [rsp + 0x68]
mov rdx, qword [SafeArrayDestroy]
mov r8d, 0xe5
mov byte [rsp + 0x68], al
call fcn.1800237a0
cmp eax, 1
jne 0x18000c8a2
xorps xmm0, xmm0
mov dword [r14], reloc.OLEAUT32.dll_SafeArrayLock
xor eax, eax
movups xmmword [rbp + 0xba0], xmm0
mov dword [rbp + 0xba0], 0x38
movups xmmword [rbp + 0xbb0], xmm0
mov qword [rbp + 0xbd0], rax
movups xmmword [rbp + 0xbc0], xmm0
jmp 0x18000c76f
lea rcx, [rbp + 0xba0]
call qword [sym.imp.urlmon.dll_WriteHitLogging]
dec ebx
cmp ebx, 0x36
ja case.0x18000c671.12
mov eax, VarR4FromDec
nop
cmp eax, 0xd3
je 0x18000c7cd
add eax, 0x2e
cmp eax, 0x101
jb 0x18000c780
mov ebx, VarUI2FromUI1
nop word [rax + rax]
cmp ebx, 0xfc
je 0x18000c839
cmp ebx, 0x7e0
je 0x18000c819
cmp ebx, 0xec4
je 0x18000c810
cmp ebx, 0x15a8
je case.0x18000ce9f.0
jmp 0x18000c858
mov rcx, qword [SafeArrayDestroy]
test rcx, rcx
je 0x18000c8a2
mov rax, qword [0x28]
test rax, rax
je 0x18000c7f0
mov rcx, qword [rcx]
call rax
xor edx, edx
xor ecx, ecx
lea r9d, [rdx + 8]
lea r8d, [rdx + 0x2c]
call fcn.180003f40
mov dword [r14], r14d
mov dword [rbp - 0x60], 1
jmp case.0x18000c54b.6
mov dword [r14], DispInvoke
jmp 0x18000c858
xor edx, edx
xor ecx, ecx
lea r9d, [rdx + 8]
lea r8d, [rdx + 0x2c]
call fcn.180003f40
cmp qword [r14], 0
je 0x18000c858
call qword [OleUIPromptUserA]
jmp 0x18000c858
mov rcx, qword [SafeArrayDestroy]
test rcx, rcx
je 0x18000c89c
mov rax, qword [0x28]
test rax, rax
je 0x18000c858
mov rcx, qword [rcx]
call rax
add ebx, 0x6e4
cmp ebx, 0x1b90
jbe 0x18000c7a0
mov rax, qword [0x28]
test rax, rax
je 0x18000c8ae
mov rcx, qword [SafeArrayDestroy]
test rcx, rcx
je 0x18000c8a2
mov rcx, qword [rcx]
call rax
xor edx, edx
xor ecx, ecx
lea r9d, [rdx + 8]
lea r8d, [rdx + 0x2c]
call fcn.180003f40
jmp 0x18000c8c7
call qword [sym.imp.IMM32.dll_ImmIsIME]
mov dword [rbp - 0x60], 6
jmp case.0x18000c54b.6
xor edx, edx
xor ecx, ecx
lea r9d, [rdx + 8]
lea r8d, [rdx + 0x2c]
call fcn.180003f40
mov qword [8], r14
cmp qword [r14], 0
je 0x18000c974
mov ebx, 0x21
lea r14d, [rbx + 0x44]
nop word [rax + rax]
mov eax, ebx
sub eax, 0x21
je 0x18000c946
sub eax, 1
je 0x18000c91e
sub eax, 1
je 0x18000c8ff
cmp eax, 1
jne 0x18000c966
call qword [DispInvoke]
jmp 0x18000c966
xor r9d, r9d
lea rdx, [rbp + 0xc00]
mov r8d, 0x104
lea rcx, [rbp + 0xb60]
call qword [sym.imp.dbghelp.dll_UnDecorateSymbolName]
jmp 0x18000c966
mov word [rbp + 0xb68], r14w
mov eax, 0x6d
mov dword [rbp + 0xb69], 0x614e64
mov word [rbp + 0xb6c], ax
mov word [rbp + 0xb6d], r14w
jmp 0x18000c966
mov eax, 0x74
mov dword [rbp + 0xb64], 0x61726f
mov word [rbp + 0xb67], ax
mov dword [rbp + 0xb60], 0x6365443f
inc ebx
cmp ebx, 0x25
jb 0x18000c8e0
xor r14d, r14d
mov dword [r14], DispInvoke
mov dword [rbp - 0x60], 1
jmp case.0x18000c54b.6
mov ebx, 0xe9
nop dword [rax]
mov eax, ebx
sub eax, 0xe9
je 0x18000c9ab
cmp eax, 1
jne 0x18000c9df
mov rax, qword [VarR8FromI2]
jmp 0x18000cfd3
mov rcx, qword [SafeArrayDestroy]
test rcx, rcx
je 0x18000c8a2
mov rax, qword [0x28]
test rax, rax
je 0x18000c9ce
mov rcx, qword [rcx]
call rax
xor edx, edx
xor ecx, ecx
lea r9d, [rdx + 8]
lea r8d, [rdx + 0x2c]
call fcn.180003f40
inc ebx
cmp ebx, 0xeb
jb 0x18000c990
jmp case.0x18000ccb1.23
cmp byte [r14], 0x75
jne case.0x18000ccb1.23
mov dword [r14], reloc.OLEAUT32.dll_SafeArrayDestroy
mov dword [rbp - 0x60], 1
jmp case.0x18000c54b.6
cmp byte [r14], 0x72
jne case.0x18000ccb1.23
mov eax, 8
mov dword [rbp - 0x60], 1
mov dword [r14], eax
jmp case.0x18000c54b.6
cmp byte [r14], 0x73
jne case.0x18000ccb1.23
mov dword [r14], SafeArrayDestroy
mov dword [rbp - 0x60], 1
jmp case.0x18000c54b.6
cmp byte [r14], 0x61
jne case.0x18000ccb1.23
mov ebx, SafeArrayDestroy
mov dword [rbp - 0x60], 1
mov dword [r14], ebx
jmp case.0x18000c54b.6
mov edi, dword [rbp - 0x50]
mov ecx, 0x11f
mov esi, dword [rbp - 0x50]
mov r15, qword [rbp + 0xb50]
mov eax, ecx
sub eax, 0x11f
je 0x18000ca8d
cmp eax, 1
je case.0x18000c54b.6
jmp 0x18000cc71
movsx eax, byte [r14]
add eax, 0xfffffff7
cmp eax, 0x72
ja case.0x18000ccb1.23
cdqe
movzx eax, byte [r8 + rax + 0xda94]
mov ecx, dword [r8 + rax*4 + 0xda68]
add rcx, r8
jmp rcx
mov dword [r14], 1
mov qword [8], r14
jmp case.0x18000cab3.9
mov rax, qword [r14]
test rax, rax
je 0x18000cad3
call rax
mov dword [r14], DispInvoke
jmp case.0x18000cab3.9
mov rax, qword [reloc.OLEAUT32.dll_SafeArrayGetDim]
test rax, rax
je case.0x18000cab3.9
call rax
jmp case.0x18000cab3.9
mov dword [r14], 7
jmp case.0x18000cab3.9
mov ebx, reloc.OLEAUT32.dll_VarR8FromI2
mov eax, ebx
sub eax, 0x4e
je 0x18000cb67
sub eax, 1
je 0x18000cb51
sub eax, 1
je 0x18000cb24
cmp eax, 1
je case.0x18000cab3.9
jmp 0x18000cb6a
mov dword [rsp + 0x38], r14d
lea rax, [rbp + 0xb50]
mov qword [rsp + 0x30], rax
mov r9d, edi
mov dword [rsp + 0x28], esi
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], r14
mov rcx, r15
call qword [sym.imp.urlmon.dll_FindMimeFromData]
jmp 0x18000cb6a
mov edi, r14d
mov dword [r14], 0xa
mov esi, r14d
mov qword [rbp + 0xb50], r14
jmp 0x18000cb6a
mov r15, r14
inc ebx
cmp ebx, 0x52
jb 0x18000cb08
mov dword [r14], SafeArrayLock
jmp case.0x18000cab3.9
lea r9, [rbp + 0xb88]
mov dword [r14], SafeArrayLock
xor r8d, r8d
mov qword [rbp + 0xb88], 5
xor edx, edx
mov ecx, 0xec
call fcn.180034c30
mov qword [8], rax
test rax, rax
je 0x18000c8a2
mov byte [rsp + 0x68], 0x30
jmp 0x18000cc42
lea r9, [rbp + 0xb88]
mov dword [r14], DispInvoke
xor r8d, r8d
mov qword [rbp + 0xb88], 5
xor edx, edx
mov ecx, 0xec
call fcn.180034c30
mov qword [8], rax
test rax, rax
je 0x18000c8a2
movzx ecx, byte [r14]
mov byte [rsp + 0x68], cl
jmp 0x18000cc42
mov eax, 8
mov dword [r14], DispInvoke
lea r9, [rbp + 0xb88]
mov qword [rbp + 0xb88], rax
xor r8d, r8d
xor edx, edx
mov ecx, 0xec
call fcn.180034c30
mov qword [8], rax
test rax, rax
je 0x18000c8a2
mov byte [rsp + 0x68], 0x2d
mov r8d, 0xe5
lea rcx, [rsp + 0x68]
mov rdx, rax
call fcn.1800237a0
cmp eax, 1
jne 0x18000c8a2
mov ecx, 0x11f
mov dword [rbp - 0x60], 1
lea r8, [0x180000000]
inc ecx
cmp ecx, 0x121
jb 0x18000ca76
mov dword [rbp - 0x60], 0xa
jmp case.0x18000c54b.6
movsx eax, byte [r14]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x18000ccb1.23
cdqe
movzx eax, byte [r12 + rax + 0xdb44]
mov ecx, dword [r12 + rax*4 + 0xdb08]
add rcx, r12
jmp rcx
mov ebx, 0x104
mov edi, 0x656c
nop dword [rax]
cmp ebx, 0x7ae4
ja 0x18000cd69
je 0x18000cd40
cmp ebx, 0x104
je 0x18000cd1b
cmp ebx, 0x29a4
je 0x18000ccf6
cmp ebx, 0x5244
jne 0x18000cdcb
mov byte [rbp + 0xb57], 0x3f
jmp 0x18000cdcb
mov eax, dword [0x180096ce7]
mov dword [rbp + 0xb52], eax
movzx eax, byte [0x180096ceb]
mov byte [rbp + 0xb56], al
mov byte [rbp + 0xb57], 0
jmp 0x18000cdcb
mov r8d, 2
lea rdx, [0x180096cc7]
lea rcx, [rbp + 0xb50]
call fcn.18006add0
mov byte [rbp + 0xb52], 0
jmp 0x18000cdcb
mov r8d, 4
mov byte [rbp + 0xb58], 0
lea rdx, [0x180096c83]
mov byte [rbp + 0xb88], 0
lea rcx, [rbp + 0xb88]
call fcn.18006c780
jmp 0x18000cdcb
cmp ebx, 0xa384
je 0x18000cda4
cmp ebx, 0xf4c4
je 0x18000cd87
cmp ebx, 0x11d64
je case.0x18000ce9f.0
jmp 0x18000cdcb
lea r8, [rbp + 0xc00]
lea rdx, [rbp + 0xb88]
lea rcx, [rbp + 0xb50]
call qword [sym.imp.dbghelp.dll_SearchTreeForFile]
jmp 0x18000cdcb
mov r8d, 2
lea rdx, [0x180096cf9]
lea rcx, [rbp + 0xb8c]
call fcn.18006add0
mov word [rbp + 0xb8e], di
mov byte [rbp + 0xb90], 0
add ebx, 0x28a0
cmp ebx, 0x14500
jbe 0x18000ccc0
mov ebx, 9
cmp ebx, 9
je 0x18000ce36
cmp ebx, 0x34
je 0x18000cdf7
cmp ebx, 0x5f
je case.0x18000ce9f.0
jmp 0x18000ce3e
xorps xmm0, xmm0
mov dword [r14], 1
xorps xmm1, xmm1
lea r8, [rbp + 0xb70]
lea rdx, [rbp + reloc.OLEAUT32.dll_VarUI2FromUI1]
lea rcx, [rbp + 0x110]
movups xmmword [rbp + 0x110], xmm0
movups xmmword [rbp + reloc.OLEAUT32.dll_VarUI2FromUI1], xmm1
movups xmmword [rbp + 0xb70], xmm0
call qword [sym.imp.OLEAUT32.dll_VarDecMul]
jmp 0x18000ce3e
mov dword [4], r14d
add ebx, 0x2b
cmp ebx, 0x8a
jb 0x18000cde2
mov rax, qword [r14]
test rax, rax
je 0x18000ce53
call rax
mov dword [r14], DispInvoke
mov dword [rbp - 0x60], 1
jmp case.0x18000c54b.6
movzx ebx, byte [rsp + 0x68]
mov rdi, qword [rbp + 0xb50]
mov r15d, dword [rbp - 0x50]
mov r12d, dword [rbp - 0x50]
mov esi, dword [rbp - 0x50]
mov r13d, dword [rbp - 0x50]
cmp r10d, 5
ja case.default.0x18000ce9f
lea rdx, [0x180000000]
mov eax, r10d
mov ecx, dword [rdx + rax*4 + 0xdbbc]
add rcx, rdx
jmp rcx
test bl, bl
je case.default.0x18000ce9f
mov rcx, rdi
call qword [sym.imp.COMCTL32.dll_ImageList_Destroy]
mov r10, qword [rbp + 0x10]
jmp case.default.0x18000ce9f
mov r15d, 1
mov r12d, r14d
jmp case.default.0x18000ce9f
movzx eax, bl
test rdi, rdi
mov ecx, r14d
cmovne ecx, eax
movzx ebx, cl
jmp case.default.0x18000ce9f
mov ecx, dword [rbp - 8]
mov r9d, r15d
mov r8d, esi
mov dword [r14], DispInvoke
mov edx, r13d
mov dword [rsp + 0x20], r12d
call qword [sym.imp.COMCTL32.dll_ImageList_Create]
mov r10, qword [rbp + 0x10]
mov rdi, rax
jmp case.default.0x18000ce9f
mov rax, qword [SafeArrayDestroy]
mov bl, 1
mov dword [rbp - 8], reloc.OLEAUT32.dll_SafeArrayGetDim
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
test rax, rax
je 0x18000cf19
call rax
mov r10, qword [rbp + 0x10]
mov esi, SafeArrayLock
dec r10d
mov qword [rbp + 0x10], r10
lea eax, [r10 + 0x6f]
cmp eax, 0x6e
ja 0x18000ce81
mov rax, qword [reloc.OLEAUT32.dll_SafeArrayGetDim]
test rax, rax
je case.0x18000ce9f.0
call rax
mov dword [rbp - 0x60], 1
jmp case.0x18000c54b.6
mov rax, qword [DispInvoke]
test rax, rax
je 0x18000c974
call rax
mov dword [r14], DispInvoke
mov dword [rbp - 0x60], 1
jmp case.0x18000c54b.6
mov dword [r14], 7
mov dword [rbp - 0x60], 1
jmp case.0x18000c54b.6
mov dword [r14], r8d
mov dword [rbp - 0x60], 1
jmp case.0x18000c54b.6
mov dword [r14], SafeArrayLock
mov dword [rbp - 0x60], 1
jmp case.0x18000c54b.6
mov rax, qword [VarR8FromI2]
test rax, rax
je case.0x18000ce9f.0
call rax
mov dword [rbp - 0x60], 1
jmp case.0x18000c54b.6
mov rax, qword [0x50]
test rax, rax
je 0x18000cfda
call rax
mov dword [r14], DispInvoke
mov dword [rbp - 0x60], 1
jmp case.0x18000c54b.6
mov ebx, 0x83
mov eax, ebx
sub eax, 0x80
je case.0x18000ce9f.0
sub eax, 1
je 0x18000d04f
sub eax, 1
je 0x18000d01f
cmp eax, 1
jne 0x18000d075
mov dword [4], r14d
mov dword [r14], SafeArrayLock
jmp 0x18000d075
lea r9, [rbp + 0xb50]
mov qword [rbp + 0xb50], r10
xor r8d, r8d
xor edx, edx
mov ecx, 0xec
call fcn.180034c30
mov qword [8], rax
test rax, rax
je 0x18000c8a2
jmp 0x18000d075
mov rdx, qword [SafeArrayDestroy]
lea rcx, [rsp + 0x68]
mov r8d, 0xe5
mov byte [rsp + 0x68], 0x30
call fcn.1800237a0
cmp eax, 1
jne 0x18000c8a2
dec ebx
mov r10d, 5
cmp ebx, 0x7f
ja 0x18000cff2
movzx edi, byte [rsp + 0x68]
mov esi, 7
lea r15d, [rsi + 0x72]
lea r13d, [rsi + 0x46]
mov eax, esi
sub eax, 7
je 0x18000d0ad
cmp eax, 1
je 0x18000c69f
jmp 0x18000d21e
lea r9, [rbp + 0xb50]
mov dword [4], r14d
xor r8d, r8d
mov dword [r14], DispInvoke
xor edx, edx
mov qword [rbp + 0xb50], 5
mov ecx, 0xec
call fcn.180034c30
mov qword [8], rax
test rax, rax
jne 0x18000d21e
mov ebx, 0x75
mov eax, ebx
sub eax, 0x75
je 0x18000d1bc
sub eax, 0x12
je 0x18000d18a
sub eax, 0x12
je 0x18000d15e
sub eax, 0x12
je 0x18000d11f
cmp eax, 0x12
je case.0x18000c54b.6
jmp 0x18000d20f
test dil, dil
je 0x18000d152
mov rcx, qword [rbp - 0x20]
lea rdx, [rbp + 0x120]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], rax
call qword [sym.imp.WINSPOOL.DRV_ResetPrinterA]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.WINSPOOL.DRV_ClosePrinter]
mov dword [rbp - 0x60], 6
jmp 0x18000d20f
xor r8d, r8d
mov qword [rbp - 0x20], 0xffffffffffffffff
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0xb60]
call qword [sym.imp.WINSPOOL.DRV_OpenPrinterA]
test eax, eax
jne 0x18000d20f
xor dil, dil
jmp 0x18000d20f
mov r8d, 4
lea rdx, str.rint
lea rcx, [rbp + 0xb60]
call fcn.18006c780
lea rdx, [0x180096d20]
lea rcx, [rbp + 0xb6a]
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
mov dil, 1
jmp 0x18000d20f
movzx eax, word [0x180096d28]
lea rdx, [0x180096d2c]
mov word [rbp + 0xb60], r13w
lea rcx, [rbp + 0xb60]
mov word [rbp + 0xb61], r15w
mov word [rbp + 0xb62], ax
movzx eax, byte [0x180096d2a]
mov byte [rbp + 0xb64], al
call qword [sym.imp.KERNEL32.dll_lstrcatA]
lea rdx, [0x180096d30]
lea rcx, [rbp + 0xb60]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
add ebx, 0x12
cmp ebx, 0xcf
jb 0x18000d0f3
inc esi
cmp esi, 9
jb 0x18000d098
mov ebx, 0x32
nop
cmp ebx, 0x32
je 0x18000d2a7
cmp ebx, 0xd5
je 0x18000d273
cmp ebx, 0x178
jne 0x18000d2be
mov rdx, qword [SafeArrayDestroy]
lea rcx, [rsp + 0x68]
mov r8d, 0xe5
mov byte [rsp + 0x68], 0x2d
call fcn.1800237a0
cmp eax, 1
jne 0x18000c8a2
mov dword [rbp - 0x60], eax
jmp case.0x18000c54b.6
lea r9, [rbp + 0xb50]
mov qword [rbp + 0xb50], 5
xor r8d, r8d
xor edx, edx
mov ecx, 0xec
call fcn.180034c30
mov qword [8], rax
test rax, rax
je 0x18000c8a2
jmp 0x18000d2be
mov dword [4], r14d
mov dword [r14], DispInvoke
mov qword [8], r14
add ebx, 0xa3
cmp ebx, 0x21b
jb 0x18000d230
jmp case.0x18000ccb1.23