Function at 0x18003d8b0
Capabilities:
Modify service

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x378]
sub rsp, 0x478
mov eax, dword [rbp + 0x3c8]
lea ebx, [rdx - 0x17]
mov r11, qword [rbp - 0x50]
lea rcx, [0x180000000]
mov rsi, qword [rbp + 0x3e8]
mov r12, r8
xor r8d, r8d
mov dword [rbp + 0x10], ebx
mov qword [rsp + 0x70], r11
mov r14d, edx
mov rdx, qword [rbp + 0x3f0]
lea edi, [r8 + 0xa]
lea r10d, [r8 + 0xb]
lea r9d, [r8 + 0xc]
cmp eax, ebx
jbe 0x18003f1e6
mov r15d, dword [rbp - 0x48]
mov r13, qword [rbp + 0x48]
mov rbx, qword [rbp - 0x50]
lea eax, [r14 - 0x17]
cmp eax, 0x4e
ja case.default.0x18003d957
movzx eax, byte [rcx + rax + 0x411d0]
mov ecx, dword [rcx + rax*4 + 0x41174]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov eax, 0x6b
mov word [rbp + 0x110], ax
mov eax, dword [0x1800e7650]
mov dword [rbp + 0x112], eax
movzx eax, word [0x1800e7654]
mov word [rbp + 0x116], ax
jmp case.0x18003d957.45
cmp dword [rsi], 0x8775
mov eax, r8d
sete al
mov dword [r11 + 4], eax
lea rax, [0x180078810]
mov qword [r11 + 0x20], rax
lea rax, [0x18001d070]
mov qword [r12 + 0x238], rax
lea rax, [0x18001b030]
mov qword [r12 + 0x270], rax
jmp case.0x18003d957.45
lea r8, [rbp - 0x28]
mov dword [rbp - 0x28], 0x38
xor edx, edx
mov ecx, 0x87
call fcn.180013970
mov r11, qword [rsp + 0x70]
mov qword [r12 + 0x2b8], rax
test rax, rax
jne case.0x18003d957.45
mov r9, qword [rsp + 0x70]
mov eax, 0x4b
movzx r13d, byte [rbp + 0x3c8]
mov rsi, qword [rsp + 0x70]
mov r15, qword [rsp + 0x70]
mov qword [rbp - 0x80], r9
mov byte [rsp + 0x68], r13b
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x68], r15
jmp 0x18003f28f
mov eax, 0x65
lea rdx, [0x1800e765c]
mov word [rbp + 0xaf], ax
lea rcx, [rbp + 0xb1]
mov eax, 0x6d
mov word [rbp + 0xb0], ax
lea r8d, [rax - 0x6b]
call fcn.1800b16b0
mov r11, qword [rsp + 0x70]
mov eax, 0x6f
mov word [rbp + 0xb2], ax
jmp case.0x18003d957.45
lea rax, [rbp + 0x110]
sub rax, 2
cmp word [rax + 2], 0
lea rax, [rax + 2]
jne 0x18003da71
movsd xmm0, qword [0x1800e7660]
movsd qword [rax], xmm0
jmp case.0x18003d957.45
mov esi, 0xfe
cmp esi, 0x6338
ja 0x18003dca6
je 0x18003dc65
cmp esi, 0xfe
je 0x18003dc51
cmp esi, 0x21bc
je 0x18003dac9
cmp esi, 0x427a
je 0x18003dc32
jmp 0x18003dcd6
movzx eax, byte [rdx]
cmp al, 0x22
je 0x18003dbae
mov ecx, dword [r12 + 4]
cmp al, 0x5c
je 0x18003db44
test ecx, ecx
jne 0x18003dc32
mov r9, qword [r12 + 8]
lea edx, [rcx + 0x6f]
xor ecx, ecx
xor r8d, r8d
call fcn.1800830f0
cmp rax, 0xfffffffffffffffe
jae 0x18003db33
mov rax, qword [rbp + 0x3f0]
lea rdx, [rsp + 0x60]
mov r9, qword [r12 + 8]
mov r8d, 0xf3
xor ecx, ecx
movzx eax, byte [rax]
mov byte [rsp + 0x60], al
call fcn.1800a1270
cmp eax, 1
jne 0x180041133
xor r8d, r8d
jmp 0x18003dc32
mov dword [r12 + 4], 1
xor r8d, r8d
jmp 0x18003dc32
test ecx, ecx
jne 0x18003dba1
mov r9, qword [r12 + 8]
lea edx, [rcx + 0x6f]
xor ecx, ecx
xor r8d, r8d
call fcn.1800830f0
cmp rax, 0xfffffffffffffffd
jae 0x18003db95
mov r9, qword [r12 + 8]
lea rdx, [rsp + 0x60]
mov r8d, 0xf3
mov byte [rsp + 0x60], 0x5c
xor ecx, ecx
call fcn.1800a1270
cmp eax, 1
jne 0x180041133
xor r8d, r8d
mov dword [r12], 2
jmp 0x18003dc32
mov dword [r12 + 4], 1
xor r8d, r8d
mov dword [r12], 2
jmp 0x18003dc32
cmp qword [r12 + 8], 0
je case.0x18003f239.18
mov esi, 0xf9
nop
mov eax, esi
sub eax, 0xf7
je 0x18003dc0b
sub eax, 1
je 0x18003dbfa
cmp eax, 1
jne 0x18003dc28
mov rax, qword [rbp + 0x3e8]
mov dword [r12], r8d
mov qword [rbp + 0xd8], r8
mov rax, qword [rax + 0x20]
test rax, rax
je 0x18003dc28
mov rcx, qword [r12 + 8]
mov rcx, qword [rcx]
call rax
jmp 0x18003dc25
mov rcx, qword [rbp + 0xd8]
xor edx, edx
call qword [sym.imp.USER32.dll_GetSubMenu]
jmp 0x18003dc25
mov qword [rsp + 0x20], r8
lea rdx, [r12 + 8]
xor r8d, r8d
xor r9d, r9d
mov ecx, 0x11e
call fcn.180018b90
xor r8d, r8d
dec esi
cmp esi, 0xf6
ja 0x18003dbc0
mov rdx, qword [rbp + 0x3f0]
mov esi, 0x427a
mov qword [rbp + 0xe0], r8
mov r15d, r8d
mov dword [rbp - 0x48], r8d
jmp 0x18003dcd6
mov qword [rbp - 0x40], r8
mov dword [rbp + 0xe8], r8d
mov dword [rbp + 0xec], r8d
jmp 0x18003dcd6
mov r9d, dword [rbp + 0xe8]
lea rax, [rbp + 0xe0]
mov rcx, qword [rbp - 0x40]
xor edx, edx
mov dword [rsp + 0x38], r15d
mov qword [rsp + 0x30], rax
mov eax, dword [rbp + 0xec]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r8
xor r8d, r8d
call sub.urlmon.dll_FindMimeFromData
mov rdx, qword [rbp + 0x3f0]
xor r8d, r8d
jmp 0x18003dcd6
cmp esi, 0x83f6
je 0x18003dcce
cmp esi, 0xa4b4
jne 0x18003dcd6
mov eax, dword [rsp + 0x78]
add rsp, 0x478
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov dword [rsp + 0x78], 1
add esi, 0x20be
cmp esi, 0xc474
jbe 0x18003da92
lea r14, [0x180000000]
mov ecx, 0x97
nop dword [rax]
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x96
je case.0x180040e07.0
cmp eax, 1
jne 0x18003e295
movsx eax, byte [rdx]
add eax, 0xffffffde
cmp eax, 0x53
ja case.0x18003dd3b.36
cdqe
movzx eax, byte [r14 + rax + 0x4122c]
mov ecx, dword [r14 + rax*4 + 0x41220]
add rcx, r14
jmp rcx
mov eax, dword [0x1800e7688]
movsd xmm0, qword [str.luec_lugr_lurm]
mov dword [0x180104b70], eax
movzx eax, word [0x1800e768c]
mov word [0x180104b74], ax
movzx eax, byte [0x1800e768e]
mov byte [0x180104b76], al
movsd qword [0x180104b68], xmm0
jmp case.0x18003d957.45
movabs rax, 0x74737953746547
mov qword [rbp + 0xa8], rax
jmp case.0x18003d957.45
mov esi, 0x18
xor r14d, r14d
nop word [rax + rax]
mov eax, esi
sub eax, 0x14
je case.0x18003f7d9.5
sub eax, 1
je 0x18003df38
sub eax, 1
je 0x18003df25
sub eax, 1
je 0x18003dded
cmp eax, 1
jne 0x18003df40
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
jmp 0x18003df40
movsx eax, byte [rdx]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.0x1800406d4.19
lea rdx, [0x180000000]
cdqe
movzx eax, byte [rdx + rax + 0x41288]
mov ecx, dword [rdx + rax*4 + 0x41280]
add rcx, rdx
jmp rcx
cmp dword [r12 + 4], r14d
jne 0x18003df16
mov r9, qword [r12 + 8]
xor r8d, r8d
xor ecx, ecx
lea edx, [r8 + 0x6f]
call fcn.1800830f0
cmp rax, 0xfffffffffffffffe
jae 0x18003df0d
mov rax, qword [rbp + 0x3f0]
lea rdx, [rsp + 0x60]
mov r9, qword [r12 + 8]
mov r8d, 0xf3
xor ecx, ecx
movzx eax, byte [rax]
mov byte [rsp + 0x60], al
call fcn.1800a1270
cmp eax, 1
je 0x18003df16
mov esi, 0xfb
cmp esi, 0xfb
je 0x18003dec9
cmp esi, 0xdba
je 0x18003deb8
cmp esi, 0x1a79
je 0x18003de9a
cmp esi, 0x2738
je case.0x18003f7d9.5
jmp 0x18003deec
cmp byte [rsp + 0x68], r14b
je 0x18003deae
mov rcx, qword [rbp + 0xc8]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov dword [rsp + 0x78], 6
jmp 0x18003deec
cmp dword [rbp + 0xd0], r14d
je 0x18003deec
xor al, al
mov byte [rsp + 0x68], al
jmp 0x18003deec
xor r8d, r8d
mov byte [rsp + 0x68], 1
lea rdx, [rbp + 0xc8]
mov qword [rbp + 0xc8], r14
xor ecx, ecx
call sub.urlmon.dll_CoInternetCreateSecurityManager
mov dword [rbp + 0xd0], eax
add esi, 0xcbf
cmp esi, 0x32fc
jbe 0x18003de74
mov dword [r12], 1
mov esi, 0x17
jmp 0x18003df40
mov dword [r12 + 4], 1
mov dword [r12], 1
mov esi, 0x17
jmp 0x18003df40
lea rcx, [rbp + 0x50]
mov dword [rbp + 0x50], 0x50
call qword [sym.imp.COMDLG32.dll_FindTextW]
jmp 0x18003df40
mov dword [rsp + 0x78], 1
mov rdx, qword [rbp + 0x3f0]
dec esi
cmp esi, 0x13
ja 0x18003dda0
jmp 0x18003e329
mov dword [rbp + 0xb3], 0x726577
jmp case.0x18003d957.45
mov r8d, edi
lea rdx, [rbp + 0x11c]
mov ecx, 0x20
call fcn.1800b1df0
movsd xmm0, qword [str..dll]
movzx eax, word [0x1800e7698]
mov r11, qword [rsp + 0x70]
movsd qword [rbp + 0x120], xmm0
mov word [rbp + 0x128], ax
jmp case.0x18003d957.45
lea rax, [0x18001b070]
mov qword [r12 + 0x280], rax
lea rax, [0x18001d0a0]
mov qword [r12 + 0x248], rax
lea rax, [0x18001bd80]
mov qword [r12 + 0x278], rax
jmp case.0x18003d957.45
mov eax, dword [r12]
cmp eax, 0x1b
ja case.0x18003f239.18
lea r14, [0x180000000]
mov ecx, dword [r14 + rax*4 + 0x412c0]
add rcx, r14
jmp rcx
cmp dword [r12 + 4], 0
jne 0x18003e290
mov r9, qword [r12 + 8]
xor r8d, r8d
xor ecx, ecx
lea edx, [r8 + 0x6f]
call fcn.1800830f0
cmp rax, 0xfffffffffffffffe
jae 0x18003e04d
mov rax, qword [rbp + 0x3f0]
lea rdx, [rsp + 0x60]
mov r9, qword [r12 + 8]
mov r8d, 0xf3
xor ecx, ecx
movzx eax, byte [rax]
mov byte [rsp + 0x60], al
call fcn.1800a1270
cmp eax, 1
jne 0x180041133
jmp 0x18003e290
mov dword [r12 + 4], 1
jmp 0x18003e290
mov esi, 0xba
mov eax, esi
sub eax, 0xba
je 0x18003e0df
cmp eax, 1
jne 0x18003e143
lea esi, [rax + 0x23]
lea edi, [rax + 0x73]
lea r15d, [rax + 0x4e]
lea r12d, [rax + 0x45]
lea r14d, [rax + 0x6f]
cmp esi, 0x30a8
ja 0x18003e1fd
je 0x18003e1cb
cmp esi, 0x24
je 0x18003e1c5
cmp esi, 0x1050
je 0x18003e19b
cmp esi, 0x207c
jne 0x18003e246
movzx eax, word [0x1800e767c]
mov word [rbp + 0x22], di
mov word [rbp + 0x23], r15w
mov word [rbp + 0x24], r14w
mov word [rbp + 0x25], ax
movzx eax, byte [0x1800e767e]
mov byte [rbp + 0x27], al
jmp 0x18003e246
cmp dword [r12 + 4], 0
jne 0x18003e130
mov r9, qword [r12 + 8]
xor r8d, r8d
xor ecx, ecx
lea edx, [r8 + 0x6f]
call fcn.1800830f0
cmp rax, 0xfffffffffffffffa
jae 0x18003e127
mov r9, qword [r12 + 8]
lea rdx, [rsp + 0x60]
mov r8d, 0xf3
mov byte [rsp + 0x60], 0x75
xor ecx, ecx
call fcn.1800a1270
cmp eax, 1
jne 0x180041133
jmp 0x18003e130
mov dword [r12 + 4], 1
mov r13, qword [sym.imp.COMDLG32.dll_GetOpenFileNameA]
mov qword [rbp + 0x48], r13
mov dword [r12], 3
inc esi
cmp esi, 0xbc
jb 0x18003e060
mov ecx, 0x3c
nop word [rax + rax]
mov eax, ecx
sub eax, 0x3a
je 0x18003ed57
sub eax, 1
je 0x18003e271
cmp eax, 1
jne 0x18003e285
xor eax, eax
mov dword [rbp + 8], 4
mov edx, 8
mov qword [rbp - 0x18], rax
mov word [rbp - 0x16], dx
mov dword [rbp + 0xc], eax
jmp 0x18003e285
lea rcx, [rbp + 0x20]
dec rcx
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18003e1a2
movzx eax, word [0x1800e7668]
mov word [rcx], ax
movzx eax, byte [0x1800e766a]
mov byte [rcx + 2], al
jmp 0x18003e246
mov byte [rbp + 0x20], 0
jmp 0x18003e246
mov r8d, 3
mov word [rbp + 0x27], r12w
lea rdx, [0x1800e7674]
lea rcx, [rbp + 0x28]
call fcn.1800b16b0
movzx eax, word [0x1800e7678]
mov word [rbp + 0x2a], ax
movzx eax, byte [0x1800e767a]
mov byte [rbp + 0x2c], al
jmp 0x18003e246
cmp esi, 0x40d4
je 0x18003e23f
cmp esi, 0x5100
je 0x18003e22a
cmp esi, 0x612c
jne 0x18003e246
mov r8, r13
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x170]
call fcn.1800ab090
jmp 0x18003e246
mov eax, dword [str.__p_n]
mov dword [rbp + 0x2f], eax
movzx eax, byte [0x1800e7670]
mov byte [rbp + 0x33], al
jmp 0x18003e246
mov dword [rbp + 0x2c], 0x656d61
add esi, 0x102c
cmp esi, 0x7134
jbe 0x18003e084
mov r12, qword [rbp + 0x3d0]
lea r14, [0x180000000]
mov r15d, dword [rbp - 0x48]
mov edi, 0xa
jmp 0x18003e290
xor eax, eax
xor edx, edx
mov dword [rbp + 4], eax
mov qword [rbp - 0x38], rdx
mov dword [rbp - 0x30], edx
mov dword [rbp], eax
mov dword [rbp - 8], eax
dec ecx
cmp ecx, 0x39
ja 0x18003e160
mov ecx, 0x97
mov rdx, qword [rbp + 0x3f0]
dec ecx
cmp ecx, 0x95
ja 0x18003dd00
mov r11, qword [rsp + 0x70]
mov r14d, 0x1d
jmp case.0x18003d957.45
mov esi, 0xf0
nop
mov eax, esi
sub eax, 0xf0
je 0x18003eccb
sub eax, 0x43
je 0x18003e30b
cmp eax, 0x43
jne 0x18003e317
mov rsi, qword [rbp + 0x3e8]
xor r8d, r8d
mov rdx, qword [rbp + 0x3f0]
mov ecx, 0xe1
nop dword [rax]
mov eax, ecx
sub eax, 0xe1
je 0x18003e3d6
cmp eax, 1
je case.0x180040e07.0
jmp 0x18003e43d
mov ecx, dword [rbp + 0x3c8]
call qword [sym.imp.USER32.dll_GetSysColorBrush]
add esi, 0x43
cmp esi, 0x1b9
jb 0x18003e2c0
mov rdx, qword [rbp + 0x3f0]
mov r11, qword [rsp + 0x70]
mov ecx, 0x65
lea r14d, [rcx - 0x4b]
mov eax, ecx
sub eax, 0x65
je 0x18003e358
sub eax, 0x5f
je 0x18003e34e
cmp eax, 0x5f
je case.0x18003f7d9.5
jmp 0x18003e36a
mov dword [rsp + 0x78], 1
jmp 0x18003e36a
cmp byte [rdx], 0x72
jne case.0x1800406d4.19
mov eax, 8
mov dword [r12], eax
add ecx, 0x5f
cmp ecx, 0x182
jb 0x18003e337
jmp case.0x18003d957.45
mov ecx, 0xfa
nop
mov eax, ecx
sub eax, 0xfa
je case.0x18003d957.24
cmp eax, 1
je case.0x18003dff3.0
inc ecx
cmp ecx, 0xfc
jb 0x18003e380
jmp case.0x18003dff3.11
mov eax, 0x25
nop word [rax + rax]
cmp eax, 0x145
jae case.0x18003dff3.17
cmp eax, 0x25
je 0x18003ed8d
cmp eax, 0xb5
je case.0x18003dff3.0
add eax, 0x90
jmp 0x18003e3b0
movsx eax, byte [rdx]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x1800406d4.19
cdqe
movzx eax, byte [r14 + rax + 0x4136c]
mov ecx, dword [r14 + rax*4 + 0x41330]
add rcx, r14
jmp rcx
mov qword [r12], 1
jmp case.0x18003e3fb.9
mov rax, qword [rsi]
test rax, rax
je 0x18003e411
call rax
mov dword [r12], 0x19
jmp case.0x18003e3fb.9
mov rax, qword [rsi + 8]
test rax, rax
je 0x18003e426
call rax
mov dword [r12], 0x1a
mov rdx, qword [rbp + 0x3f0]
mov ecx, 0xe1
xor r8d, r8d
mov rsi, qword [rbp + 0x3e8]
inc ecx
cmp ecx, 0xe3
jb 0x18003e2f0
mov r11, qword [rsp + 0x70]
mov r14d, 0x1f
jmp case.0x18003d957.45
mov rax, qword [rsi + 0x10]
test rax, rax
je case.0x18003e3fb.9
call rax
jmp case.0x18003e3fb.9
cmp qword [rsi + 0x18], 0
je 0x18003e426
mov edi, dword [rbp - 0x60]
mov esi, r8d
mov r12d, dword [rbp + 0xf0]
mov r14d, 6
mov r15d, dword [rbp + 0xc0]
mov r13, qword [rbp + 0x3e8]
cmp esi, 5
ja case.default.0x18003e4af
lea rdx, [0x180000000]
mov eax, esi
mov ecx, dword [rdx + rax*4 + 0x413e4]
add rcx, rdx
jmp rcx
call qword [r13 + 0x18]
xor r8d, r8d
inc esi
sub r14, 1
jne 0x18003e497
mov r13, qword [rbp + 0x48]
mov dword [rbp - 0x60], edi
lea edi, [r14 + 0xa]
mov dword [rbp + 0xc0], r15d
lea r14, [0x180000000]
mov r15d, dword [rbp - 0x48]
mov dword [rbp + 0xf0], r12d
mov r12, qword [rbp + 0x3d0]
jmp 0x18003e426
mov rcx, rbx
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov qword [rbp + 0xa0], rax
jmp 0x18003e4b5
mov rbx, r8
jmp case.default.0x18003e4af
xorps xmm0, xmm0
mov edi, r8d
movups xmmword [rbp + 0x100], xmm0
mov r12d, r8d
mov r15d, 4
jmp case.default.0x18003e4af
mov rcx, qword [rbp + 0x40]
lea rax, [rbp + 0x100]
mov qword [rsp + 0x38], r8
mov r9d, r15d
mov dword [rsp + 0x30], r8d
mov edx, edi
mov qword [rsp + 0x28], r8
mov r8d, r12d
mov qword [rsp + 0x20], rax
call qword [sym.imp.GDI32.dll_ExtTextOutW]
jmp 0x18003e4b5
mov rcx, qword [rbp + 0xa0]
call qword [sym.imp.USER32.dll_GetDC]
mov qword [rbp + 0x40], rax
test rax, rax
je 0x18003e4b5
mov rcx, qword [rbp + 0xa0]
mov rdx, rax
call qword [sym.imp.USER32.dll_ReleaseDC]
xor r8d, r8d
mov qword [rbp + 0x40], r8
jmp case.default.0x18003e4af
mov dword [r12], 7
jmp case.0x18003e3fb.9
mov dword [r12], edi
jmp case.0x18003e3fb.9
mov dword [r12], 0xe
jmp case.0x18003e3fb.9
mov rax, qword [rsi + 0x48]
test rax, rax
je case.0x18003e3fb.9
call rax
jmp case.0x18003e3fb.9
cmp qword [rsi + 0x50], 0
je 0x18003e5ce
call qword [sym.imp.USER32.dll_GetDesktopWindow]
call qword [rsi + 0x50]
mov dword [r12], 0x1b
jmp case.0x18003e3fb.9
mov esi, 0x24
mov eax, esi
sub eax, 0x23
je 0x18003e655
cmp eax, 1
jne 0x18003e62d
mov qword [rsp + 0x20], r8
lea rcx, [rbp + 0x140]
lea r8, [rbp - 0x28]
mov qword [r12], 0x11
mov r9d, 0x109
mov qword [rbp - 0x28], 5
xor edx, edx
call fcn.1800a1ef0
mov rcx, qword [rax]
mov qword [r12 + 8], rcx
test rcx, rcx
je 0x180041133
xor r8d, r8d
dec esi
cmp esi, 0x22
ja 0x18003e5e0
mov esi, 0x2a
nop dword [rax]
mov eax, esi
sub eax, 0x2a
je 0x18003e67f
cmp eax, 1
je case.0x18003e3fb.9
jmp 0x18003e6e6
mov r9, qword [r12 + 8]
lea rdx, [rsp + 0x60]
mov r8d, 0xf3
mov byte [rsp + 0x60], 0x30
xor ecx, ecx
call fcn.1800a1270
cmp eax, 1
jne 0x180041133
jmp case.0x18003e3fb.9
mov qword [rsp + 0x20], r8
lea rcx, [rbp + 0x150]
lea r8, [rbp - 0x28]
mov qword [r12], 0x18
mov r9d, 0x109
mov qword [rbp - 0x28], 5
xor edx, edx
call fcn.1800a1ef0
mov r9, qword [rax]
mov qword [r12 + 8], r9
test r9, r9
je 0x180041133
mov rax, qword [rbp + 0x3f0]
lea rdx, [rsp + 0x60]
mov r8d, 0xf3
xor ecx, ecx
movzx eax, byte [rax]
mov byte [rsp + 0x60], al
call fcn.1800a1270
cmp eax, 1
jne 0x180041133
inc esi
mov r8d, 0
cmp esi, 0x2c
jb 0x18003e640
mov esi, 0x2a
nop dword [rax]
cmp esi, 0x2d
jae case.0x1800406d4.19
mov eax, esi
sub eax, 0x2a
je 0x18003e751
sub eax, 1
je 0x18003e725
cmp eax, 1
je case.0x18003e3fb.9
inc esi
xor r8d, r8d
jmp 0x18003e700
mov r9, qword [r12 + 8]
lea rdx, [rsp + 0x60]
mov r8d, 0xf3
mov byte [rsp + 0x60], 0x2d
xor ecx, ecx
call fcn.1800a1270
cmp eax, 1
jne 0x180041133
inc esi
xor r8d, r8d
jmp 0x18003e700
mov qword [r12 + 8], r8
lea rcx, [rbp + 0x160]
mov qword [rsp + 0x20], r8
mov r9d, 0x109
lea r8, [rbp - 0x28]
mov qword [r12], 0x17
xor edx, edx
mov qword [rbp - 0x28], 5
call fcn.1800a1ef0
mov rcx, qword [rax]
mov qword [r12 + 8], rcx
test rcx, rcx
je 0x180041133
inc esi
xor r8d, r8d
jmp 0x18003e700
mov esi, 0xe1
mov r14d, 0x19
nop dword [rax]
mov eax, esi
sub eax, 0xe1
je 0x18003e7fa
sub eax, 0x17
je 0x18003e7f4
sub eax, 0x17
je 0x18003e7ce
cmp eax, 0x17
je case.0x18003f7d9.5
jmp 0x18003e803
mov rax, qword [rbp + 0x3e8]
mov rax, qword [rax + 0x30]
test rax, rax
je 0x18003e7ea
call rax
mov rdx, qword [rbp + 0x3f0]
xor r8d, r8d
mov dword [rsp + 0x78], 1
jmp 0x18003e803
mov dword [r12], r8d
jmp 0x18003e803
cmp byte [rdx], 0x65
jne case.0x1800406d4.19
add esi, 0x17
cmp esi, 0x13d
jb 0x18003e7b0
mov r11, qword [rsp + 0x70]
jmp case.0x18003d957.45
mov r14d, 0x1e
jmp case.0x18003d957.45
lea r14, [0x180000000]
mov ecx, 0x83
nop
mov eax, ecx
sub eax, 0x83
je 0x18003e844
cmp eax, 1
je case.0x180040e07.0
jmp 0x18003e8ac
movsx eax, byte [rdx]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.0x1800406d4.19
cdqe
movzx eax, byte [r14 + rax + 0x41404]
mov ecx, dword [r14 + rax*4 + 0x413fc]
add rcx, r14
jmp rcx
mov esi, 0x3b
cmp esi, 0x40
jae case.0x1800406d4.19
mov eax, esi
sub eax, 0x3b
je 0x18003e8e3
sub eax, 1
je 0x18003e939
sub eax, 1
je 0x18003e8d7
sub eax, 1
je 0x18003e939
cmp eax, 1
jne 0x18003e939
mov rdx, qword [rbp + 0x3f0]
mov ecx, 0x83
inc ecx
cmp ecx, 0x85
jb 0x18003e830
mov eax, 0x11a
nop
cmp eax, 0x11a
je 0x18003e940
cmp eax, 0x19f
je case.0x18003f7d9.5
jmp 0x18003e9dd
mov dword [r12], 4
inc esi
jmp 0x18003e870
cmp dword [r12 + 4], 0
jne 0x18003e939
mov r9, qword [r12 + 8]
xor r8d, r8d
xor ecx, ecx
lea edx, [r8 + 0x6f]
call fcn.1800830f0
cmp rax, 0xfffffffffffffffb
jae 0x18003e930
mov r9, qword [r12 + 8]
lea rdx, [rsp + 0x60]
mov r8d, 0xf3
mov byte [rsp + 0x60], 0x75
xor ecx, ecx
call fcn.1800a1270
cmp eax, 1
jne 0x180041133
inc esi
jmp 0x18003e870
mov dword [r12 + 4], 1
inc esi
jmp 0x18003e870
movsx eax, byte [rdx]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.0x1800406d4.19
cdqe
movzx eax, byte [r14 + rax + 0x41444]
mov ecx, dword [r14 + rax*4 + 0x4143c]
add rcx, r14
jmp rcx
cmp dword [r12 + 4], 0
jne 0x18003e9c8
mov r9, qword [r12 + 8]
xor r8d, r8d
xor ecx, ecx
lea edx, [r8 + 0x6f]
call fcn.1800830f0
cmp rax, 0xfffffffffffffffc
jae 0x18003e9b8
mov rax, qword [rbp + 0x3f0]
lea rdx, [rsp + 0x60]
mov r9, qword [r12 + 8]
mov r8d, 0xf3
xor ecx, ecx
movzx eax, byte [rax]
mov byte [rsp + 0x60], al
call fcn.1800a1270
cmp eax, 1
jne 0x180041133
jmp 0x18003e9c1
mov dword [r12 + 4], 1
mov rdx, qword [rbp + 0x3f0]
mov dword [r12], 5
mov eax, 0x11a
mov dword [rsp + 0x78], 1
add eax, 0x85
cmp eax, 0x224
jb 0x18003e8c0
mov r11, qword [rsp + 0x70]
mov r14d, 0x1c
jmp case.0x18003d957.45
mov ecx, 0x79
mov eax, ecx
sub eax, 0x79
je 0x18003ea14
cmp eax, 1
je case.0x180040e07.0
jmp 0x18003ea21
cmp byte [rdx], 0x61
jne case.0x1800406d4.19
mov dword [r12], r10d
inc ecx
cmp ecx, 0x7b
jb 0x18003ea02
mov eax, 0x85
lea r14d, [rax - 0x6d]
cmp eax, 0x85
je 0x18003ea56
cmp eax, 0x10a
je 0x18003ea4c
cmp eax, 0x18f
je case.0x18003f7d9.5
jmp 0x18003ea63
mov dword [rsp + 0x78], 1
jmp 0x18003ea63
cmp byte [rdx], 0x6c
jne case.0x1800406d4.19
mov dword [r12], r9d
add eax, 0x85
cmp eax, 0x214
jb 0x18003ea31
jmp case.0x18003d957.45
mov esi, 0xa9
nop dword [rax]
cmp esi, 0xa9
je 0x18003eb14
cmp esi, 0x264a
je 0x18003eb04
cmp esi, 0x4beb
je 0x18003eafa
cmp esi, 0x718c
je 0x18003eab2
cmp esi, 0x972d
je case.0x180040e07.0
jmp 0x18003eb28
mov r9d, dword [rbp - 0x10]
lea rax, [rbp - 0x80]
mov edx, dword [rbp - 0xc]
mov rcx, qword [rbp - 0x50]
mov qword [rsp + 0x50], r8
mov qword [rsp + 0x48], r8
mov qword [rsp + 0x40], r8
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], r8
mov r8d, dword [rbp - 0x68]
call qword [sym.imp.ADVAPI32.dll_ChangeServiceConfigW]
mov rdx, qword [rbp + 0x3f0]
xor r8d, r8d
jmp 0x18003eb28
mov dword [r12], 0xd
jmp 0x18003eb28
mov dword [rbp - 0x68], 0xffffffff
mov dword [rbp - 0x10], 0xffffffff
jmp 0x18003eb28
cmp byte [rdx], 0x73
mov qword [rbp - 0x50], r8
mov dword [rbp - 0xc], 0xffffffff
jne case.0x1800406d4.19
add esi, 0x25a1
cmp esi, 0xbc25
jbe 0x18003ea80
mov esi, 0xed
mov r14d, 0x17
cmp esi, 0xed
je 0x18003eb5b
cmp esi, 0xb574
je case.0x180040e07.0
jmp 0x18003eb7a
cmp byte [rdx], 0x65
jne case.0x1800406d4.19
mov rax, qword [rbp + 0x3e8]
mov dword [r12], r8d
mov rax, qword [rax + 0x38]
test rax, rax
je 0x18003eb7a
call rax
mov rdx, qword [rbp + 0x3f0]
add esi, 0xb487
mov r8d, 0
cmp esi, 0x1690e
jbe 0x18003eb45
mov r11, qword [rsp + 0x70]
jmp case.0x18003d957.45
lea r14, [0x180000000]
mov eax, 0x36
nop dword [rax + rax]
cmp eax, 0x36
je 0x18003ebc3
cmp eax, 0x38
je case.0x180040e07.0
jmp 0x18003ecbf
movsx eax, byte [rdx]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.0x1800406d4.19
cdqe
movzx eax, byte [r14 + rax + 0x41484]
mov ecx, dword [r14 + rax*4 + 0x4147c]
add rcx, r14
jmp rcx
cmp dword [r12 + 4], 0
jne 0x18003ecb2
mov r9, qword [r12 + 8]
xor r8d, r8d
xor ecx, ecx
lea edx, [r8 + 0x6f]
call fcn.1800830f0
cmp rax, 0xfffffffffffffffd
jae 0x18003eca2
mov rax, qword [rbp + 0x3f0]
lea rdx, [rsp + 0x60]
mov r9, qword [r12 + 8]
mov r8d, 0xf3
xor ecx, ecx
movzx eax, byte [rax]
mov byte [rsp + 0x60], al
call fcn.1800a1270
cmp eax, 1
je 0x18003ecab
mov ebx, 0xb4
lea ecx, [rbx - 0x48]
lea esi, [rbx - 0x71]
lea r14d, [rbx - 0x42]
nop dword [rax]
mov eax, ebx
sub eax, 0xb4
je 0x18003f14d
sub eax, 1
je 0x18003f134
sub eax, 1
je 0x18003f120
sub eax, 1
je 0x18003f0ff
cmp eax, 1
jne 0x18003f151
mov r8, qword [sym.imp.COMDLG32.dll_ChooseColorA]
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0x170]
call fcn.1800ab090
mov ecx, 0x6c
jmp 0x18003f151
mov dword [r12 + 4], 1
mov rdx, qword [rbp + 0x3f0]
mov dword [r12], 6
mov eax, 0x36
add eax, 2
cmp eax, 0x3a
jb 0x18003ebb0
mov r11, qword [rsp + 0x70]
mov r14d, 0x1b
jmp case.0x18003d957.45
movzx eax, word [0x1800e769c]
mov word [rbp + 0xb6], ax
movzx eax, word [0x1800e76a0]
mov word [rbp + 0xb8], ax
movzx eax, word [0x1800e76a4]
mov word [rbp + 0xba], ax
movzx eax, byte [0x1800e76a6]
mov byte [rbp + 0xbc], al
jmp case.0x18003d957.45
mov r11, qword [r12 + 0x2b8]
mov qword [rsp + 0x70], r11
mov dword [r11], 0xffffffff
lea rcx, [0x180000000]
mov rsi, qword [rbp + 0x3e8]
dec r14d
mov rdx, qword [rbp + 0x3f0]
xor r8d, r8d
cmp r14d, dword [rbp + 0x10]
jbe 0x18003f1dd
lea r9d, [r8 + 0xc]
lea r10d, [r8 + 0xb]
jmp 0x18003d931
mov eax, dword [rbp - 8]
lea rcx, [rbp - 0x18]
mov r9d, dword [rbp + 4]
mov r8d, dword [rbp + 8]
mov edx, dword [rbp + 0xc]
mov dword [rsp + 0x30], eax
mov eax, dword [rbp]
mov dword [rsp + 0x28], eax
lea rax, [rbp - 0x38]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_AddAuditAccessAceEx]
mov eax, 7
jmp 0x18003dcba
mov r9, qword [rsp + 0x70]
movzx r13d, byte [rbp + 0x3c8]
mov r14, qword [rsp + 0x70]
mov r15, qword [rsp + 0x70]
mov qword [rbp - 0x80], r9
mov byte [rsp + 0x68], r13b
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x68], r15
mov eax, 0x1e
jmp 0x18003f28f
mov r9, qword [rsp + 0x70]
movzx r13d, byte [rbp + 0x3c8]
mov r14, qword [rsp + 0x70]
mov r15, qword [rsp + 0x70]
mov qword [rbp - 0x80], r9
mov byte [rsp + 0x68], r13b
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x68], r15
mov eax, 0x14
jmp 0x18003f28f
mov r9, qword [rsp + 0x70]
lea r10, [0x180000000]
movzx r13d, byte [rbp + 0x3c8]
mov r14, qword [rsp + 0x70]
mov rax, qword [rsp + 0x70]
mov qword [rbp - 0x80], r9
mov byte [rsp + 0x68], r13b
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x68], rax
mov ecx, 0x11
mov eax, ecx
sub eax, 0x11
je 0x18003f2d0
cmp eax, 1
je case.0x18003f7d9.5
jmp 0x18003f648
mov rax, qword [rsp + 0x70]
movzx r13d, byte [rbp + 0x3c8]
mov r15, qword [rsp + 0x70]
mov qword [rbp - 0x80], rax
mov rax, qword [rsp + 0x70]
mov qword [rbp - 0x60], rax
mov byte [rsp + 0x68], r13b
mov qword [rbp - 0x68], r15
jmp 0x18003f67d
mov r9, qword [rsp + 0x70]
movzx r13d, byte [rbp + 0x3c8]
mov r14, qword [rsp + 0x70]
mov r15, qword [rsp + 0x70]
mov qword [rbp - 0x80], r9
mov byte [rsp + 0x68], r13b
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x68], r15
mov eax, 0x19
jmp 0x18003f28f
mov r9, qword [rsp + 0x70]
lea r10, [0x180000000]
movzx r13d, byte [rbp + 0x3c8]
mov r14, qword [rsp + 0x70]
mov r15, qword [rsp + 0x70]
mov qword [rbp - 0x80], r9
mov byte [rsp + 0x68], r13b
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x68], r15
mov dword [rbp + 0x3c8], 0x17
mov ecx, 0x7c
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x7b
je case.0x180040e07.0
cmp eax, 1
je 0x180040a51
dec ecx
cmp ecx, 0x7a
ja 0x18003eee0
jmp case.0x18003f239.41
mov r9, qword [rsp + 0x70]
movzx r13d, byte [rbp + 0x3c8]
mov r14, qword [rsp + 0x70]
mov r15, qword [rsp + 0x70]
mov qword [rbp - 0x80], r9
mov byte [rsp + 0x68], r13b
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x68], r15
jmp 0x18003f941
mov rax, qword [rsp + 0x70]
lea r10, [0x180000000]
movzx r13d, byte [rbp + 0x3c8]
mov r14, qword [rsp + 0x70]
mov r15, qword [rsp + 0x70]
mov qword [rbp - 0x80], rax
mov byte [rsp + 0x68], r13b
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x68], r15
jmp 0x18003f9b3
mov rax, qword [rsp + 0x70]
lea r10, [0x180000000]
movzx r13d, byte [rbp + 0x3c8]
mov r14, qword [rsp + 0x70]
mov r15, qword [rsp + 0x70]
mov qword [rbp - 0x80], rax
mov byte [rsp + 0x68], r13b
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x68], r15
mov ecx, 0x3e
mov eax, ecx
sub eax, 0x3d
je case.0x180040e07.0
cmp eax, 1
jne 0x18003ff78
movsx edx, byte [rdx]
lea eax, [rdx - 9]
cmp eax, 0x74
ja case.0x1800406d4.19
cdqe
movzx eax, byte [r10 + rax + 0x414d8]
mov ecx, dword [r10 + rax*4 + 0x414bc]
add rcx, r10
jmp rcx
mov rax, qword [rsp + 0x70]
movzx r13d, byte [rbp + 0x3c8]
mov r15, qword [rsp + 0x70]
mov qword [rbp - 0x80], rax
mov rax, qword [rsp + 0x70]
mov qword [rbp - 0x60], rax
mov byte [rsp + 0x68], r13b
mov qword [rbp - 0x68], r15
jmp 0x18003ffa5
mov rax, qword [rsp + 0x70]
lea r10, [0x180000000]
movzx r13d, byte [rbp + 0x3c8]
mov r14, qword [rsp + 0x70]
mov r15, qword [rsp + 0x70]
mov qword [rbp - 0x80], rax
mov byte [rsp + 0x68], r13b
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x68], r15
mov ecx, 0x86
mov eax, ecx
sub eax, 0x85
je case.0x18003f7d9.5
cmp eax, 1
jne 0x180040570
movsx eax, byte [rdx]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x1800406d4.19
cdqe
movzx eax, byte [r10 + rax + 0x41568]
mov ecx, dword [r10 + rax*4 + 0x41550]
add rcx, r10
jmp rcx
mov rax, qword [rsp + 0x70]
movzx r13d, byte [rbp + 0x3c8]
mov r14, qword [rsp + 0x70]
mov r15, qword [rsp + 0x70]
mov qword [rbp - 0x80], rax
mov byte [rsp + 0x68], r13b
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x68], r15
jmp 0x180040599
mov r9, qword [rsp + 0x70]
movzx r13d, byte [rbp + 0x3c8]
mov rdx, qword [rsp + 0x70]
mov r15, qword [rsp + 0x70]
mov qword [rbp - 0x80], r9
mov byte [rsp + 0x68], r13b
mov qword [rbp - 0x60], rdx
mov qword [rbp - 0x68], r15
mov eax, 0x16
jmp 0x18003f28f
mov r9, qword [rsp + 0x70]
movzx r13d, byte [rbp + 0x3c8]
mov rdx, qword [rsp + 0x70]
mov r15, qword [rsp + 0x70]
mov qword [rbp - 0x80], r9
mov byte [rsp + 0x68], r13b
mov qword [rbp - 0x60], rdx
mov qword [rbp - 0x68], r15
mov eax, 0x20
jmp 0x18003f28f
mov eax, 0x20
mov word [rbp - 0x2d], ax
mov eax, 0x25
mov word [rbp - 0x2c], ax
mov eax, 0x70
mov word [rbp - 0x2b], ax
mov word [rbp - 0x2a], di
jmp 0x18003f151
mov eax, 0x6f
mov word [rbp - 0x30], cx
mov word [rbp - 0x2f], ax
mov word [rbp - 0x2e], r14w
jmp 0x18003f151
mov dword [rbp - 0x37], 0x6f6f68
mov eax, 0x6f
mov dword [rbp - 0x34], 0x436573
mov word [rbp - 0x31], ax
jmp 0x18003f151
mov word [rbp - 0x38], si
inc ebx
cmp ebx, 0xb9
jb 0x18003ec50
mov eax, 6
jmp 0x18003dcba
movzx eax, word [rdx]
mov r10, qword [rbp + 0x3d8]
mov rcx, qword [rbp + 0x3e0]
mov r8, qword [rbp + 0x3c0]
mov word [r10], ax
movzx eax, word [rsi]
mov word [r10 + 2], ax
mov eax, dword [rcx]
mov dword [r10 + 4], eax
cmp dword [rcx], 1
jne 0x18003f1a9
mov eax, dword [r8]
mov dword [r10 + 8], eax
mov eax, 1
jmp 0x18003dcba
xor r9d, r9d
mov qword [rsp + 0x20], r12
mov rcx, r10
lea edx, [r9 + 0x43]
call fcn.18004f450
jmp 0x18003dcba
cmp byte [rdx], 0x75
jne case.0x1800406d4.19
mov dword [r12], 9
mov eax, 1
jmp 0x18003dcba
mov eax, dword [rbp + 0x3c8]
mov ebx, dword [rbp + 0x10]
mov r9, qword [rsp + 0x70]
movzx r13d, byte [rbp + 0x3c8]
mov rcx, qword [rsp + 0x70]
mov r15, qword [rsp + 0x70]
mov qword [rbp - 0x80], r9
mov byte [rsp + 0x68], r13b
mov qword [rbp - 0x60], rcx
mov qword [rbp - 0x68], r15
cmp eax, ebx
jbe case.0x18003f7d9.5
add eax, 0xffffffee
cmp eax, 0x53
ja case.0x18003f239.41
lea r10, [0x180000000]
movzx eax, byte [r10 + rax + 0x41640]
mov ecx, dword [r10 + rax*4 + 0x415e0]
add rcx, r10
jmp rcx
mov dword [rsp + 0x48], 0xbb
lea rax, [rbp + 0x110]
mov qword [rsp + 0x40], r8
xor r9d, r9d
mov qword [rsp + 0x38], r8
xor edx, edx
mov qword [rsp + 0x30], rax
xor ecx, ecx
lea rax, [rbp + 0xa8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r8
xor r8d, r8d
call fcn.1800a1640
mov qword [rbp + 0xd8], rax
mov r11, qword [rsp + 0x70]
mov r9, qword [rbp - 0x80]
mov eax, dword [rbp + 0x3c8]
mov rsi, qword [rbp + 0x3e8]
dec eax
mov rdx, qword [rbp + 0x3f0]
xor r8d, r8d
mov ebx, dword [rbp + 0x10]
mov dword [rbp + 0x3c8], eax
jmp 0x18003f20e
lea rax, [0x18001c7b0]
mov qword [r12 + 0x288], rax
lea rax, [0x18001a2f0]
mov qword [r12 + 0x290], rax
jmp case.0x18003f239.41
movsx eax, byte [rdx]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x1800406d4.19
cdqe
movzx eax, byte [r10 + rax + 0x416ac]
mov ecx, dword [r10 + rax*4 + 0x41694]
add rcx, r10
jmp rcx
cmp dword [r12 + 4], 0
jne 0x18003f63b
mov r9, qword [r12 + 8]
xor r8d, r8d
xor ecx, ecx
lea edx, [r8 + 0x6f]
call fcn.1800830f0
cmp rax, 0xfffffffffffffffe
jae 0x18003f353
mov rax, qword [rbp + 0x3f0]
lea rdx, [rbp + 0x3c8]
mov r9, qword [r12 + 8]
mov r8d, 0xf3
xor ecx, ecx
movzx eax, byte [rax]
mov byte [rbp + 0x3c8], al
call fcn.1800a1270
cmp eax, 1
jne 0x180041133
jmp 0x18003f63b
mov dword [r12 + 4], 1
jmp 0x18003f63b
mov r15d, 0x106
cmp r15d, 0x106
je 0x18003f382
cmp r15d, 0x644c
je 0x18003f63b
jmp 0x18003f4b5
cmp qword [r12 + 8], 0
lea r14, [r12 + 8]
je 0x180041133
cmp qword [rsi + 0x28], 0
je 0x18003f48b
mov ebx, 5
lea esi, [rbx + 1]
lea r12d, [rbx + 0x6e]
nop word [rax + rax]
cmp ebx, 5
ja case.default.0x18003f3c6
mov eax, ebx
mov ecx, dword [r10 + rax*4 + 0x41724]
add rcx, r10
jmp rcx
mov qword [rbp - 0x18], r8
lea rdx, [rbp + 0x50]
lea r8, [rbp - 0x18]
mov rcx, r9
call sub.urlmon.dll_CreateURLMoniker
mov r9, qword [rbp - 0x80]
lea r10, [0x180000000]
test eax, eax
je case.default.0x18003f3c6
xor r13b, r13b
jmp case.default.0x18003f3c6
mov dword [rbp + 0x50], 0x640041
mov dword [rbp + 0x54], 0x720064
mov dword [rbp + 0x58], 0x730065
mov word [rbp + 0x5c], r12w
jmp case.default.0x18003f3c6
mov dword [rbp + 0x6a], 0x79
jmp case.default.0x18003f3c6
mov dword [rbp + 0x5e], 0x690044
mov dword [rbp + 0x62], 0x700073
mov dword [rbp + 0x66], 0x61006c
jmp case.default.0x18003f3c6
test r13b, r13b
je 0x18003f43b
mov rcx, qword [rbp - 0x18]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [r14]
mov rax, qword [rbp + 0x3e8]
mov rcx, qword [rcx]
call qword [rax + 0x28]
mov r9, qword [rbp - 0x80]
lea r10, [0x180000000]
jmp case.default.0x18003f3c6
mov r13b, 1
mov qword [rbp - 0x80], r8
mov r9, r8
dec ebx
mov r8d, 0
sub rsi, 1
jne 0x18003f3b0
mov r12, qword [rbp + 0x3d0]
lea edi, [r8 + 0xa]
mov rsi, qword [rbp + 0x3e8]
mov byte [rsp + 0x68], r13b
xor r9d, r9d
mov qword [rsp + 0x20], 0
xor r8d, r8d
mov rdx, r14
mov ecx, 0x11e
call fcn.180018b90
xor r8d, r8d
lea r10, [0x180000000]
mov dword [r12], r8d
mov r9, qword [rbp - 0x80]
add r15d, 0x6346
cmp r15d, 0xc68c
jbe 0x18003f367
mov ebx, 0xaa
cmp ebx, 0xaa
je 0x18003f539
cmp ebx, 0x5e4c
je 0x18003f524
cmp ebx, 0xbbee
je 0x18003f4ff
cmp ebx, 0x11990
jne 0x18003f545
mov dword [r12], 0x1a
jmp 0x18003f63b
mov qword [rsp + 0x20], r8
lea rdx, [r12 + 8]
xor r8d, r8d
xor r9d, r9d
mov ecx, 0x11e
call fcn.180018b90
cmp qword [rsi], 0
je 0x18003f545
call qword [rsi + 8]
jmp 0x18003f545
mov rax, qword [rsi + 0x28]
test rax, rax
je 0x18003f545
mov rcx, qword [r12 + 8]
mov rcx, qword [rcx]
call rax
jmp 0x18003f545
cmp qword [r12 + 8], 0
je 0x180041133
add ebx, 0x5da2
cmp ebx, 0x17688
ja case.0x18003f2f5.12
xor r8d, r8d
jmp 0x18003f4d2
mov esi, 0x87
cmp esi, 0x87
je 0x18003f572
cmp esi, 0xfd2
je 0x18003f4f2
jmp 0x18003f5e1
mov r14, qword [rbp + 0x3e8]
cmp qword [r14 + 0x28], 0
je 0x18003f5c4
mov ebx, 0x7b
mov eax, ebx
sub eax, 0x7a
je 0x18003f5b2
cmp eax, 1
jne 0x18003f5bb
mov rcx, qword [r12 + 8]
test rcx, rcx
je 0x180041133
mov rcx, qword [rcx]
call qword [r14 + 0x28]
mov rcx, qword [r12 + 8]
call fcn.1800b1814
jmp 0x18003f5bb
mov qword [r12 + 8], 0
dec ebx
cmp ebx, 0x79
ja 0x18003f585
jmp 0x18003f5d7
mov rcx, qword [r12 + 8]
call fcn.1800b1814
mov qword [r12 + 8], 0
cmp qword [r14], 0
je 0x18003f5e1
call qword [r14 + 0x18]
add esi, 0xf4b
cmp esi, 0x1e96
jbe 0x18003f560
mov esi, 0x66
nop dword [rax + rax]
cmp esi, 0x5ba4
ja case.0x1800406d4.19
cmp esi, 0x66
je 0x18003f6bf
cmp esi, 0x2e38
jne 0x18003f742
mov rax, qword [rbp + 0x3e8]
mov rax, qword [rax + 0x48]
test rax, rax
je 0x18003f633
call rax
mov dword [r12], 0x1b
mov ecx, 0x11
mov dword [rsp + 0x78], 1
mov r9, qword [rbp - 0x80]
lea r10, [0x180000000]
mov rsi, qword [rbp + 0x3e8]
inc ecx
mov rdx, qword [rbp + 0x3f0]
mov r8d, 0
cmp ecx, 0x13
jb 0x18003ee25
mov r15, qword [rbp - 0x68]
lea r14, [0x180000000]
mov ecx, 0xfb
mov eax, ecx
sub eax, 0xf9
je case.0x18003f7d9.5
sub eax, 1
je 0x18003f855
cmp eax, 1
jne 0x18003f85d
movsx eax, byte [rdx]
add eax, 0xffffffd0
cmp eax, 9
ja case.default.0x18003f6bd
cdqe
mov ecx, dword [r14 + rax*4 + 0x4173c]
add rcx, r14
jmp rcx
mov rdx, qword [rbp + 0x3e8]
cmp qword [rdx + 0x28], 0
je 0x18003f72f
mov ebx, 0x91
mov eax, ebx
sub eax, 0x8f
je 0x18003f700
sub eax, 1
je 0x18003f6f3
cmp eax, 1
jne 0x18003f71a
cmp qword [r12 + 8], 0
je 0x180041133
jmp 0x18003f71a
mov rcx, qword [r12 + 8]
mov rcx, qword [rcx]
call qword [rdx + 0x28]
jmp 0x18003f713
mov rcx, qword [r12 + 8]
call fcn.1800b1814
mov qword [r12 + 8], 0
mov rdx, qword [rbp + 0x3e8]
dec ebx
cmp ebx, 0x8e
ja 0x18003f6d2
add esi, 0x2dd2
jmp 0x18003f600
mov rcx, qword [r12 + 8]
call fcn.1800b1814
mov qword [r12 + 8], 0
add esi, 0x2dd2
jmp 0x18003f600
cmp dword [r12 + 4], 0
jne 0x18003f7b2
mov r9, qword [r12 + 8]
xor r8d, r8d
xor ecx, ecx
lea edx, [r8 + 0x6f]
call fcn.1800830f0
cmp rax, 0xfffffffffffffffe
jae 0x18003f7a9
mov rax, qword [rbp + 0x3f0]
lea rdx, [rbp + 0x3c8]
mov r9, qword [r12 + 8]
mov r8d, 0xf3
xor ecx, ecx
movzx eax, byte [rax]
mov byte [rbp + 0x3c8], al
call fcn.1800a1270
mov ecx, 0xfb
mov dword [r12], 0x15
jmp 0x18003f85d
mov dword [r12 + 4], 1
mov dword [r12], 0x15
mov ecx, 0xfb
jmp 0x18003f85d
mov ebx, r8d
cmp ebx, 5
ja case.default.0x18003f7d9
mov eax, ebx
mov ecx, dword [r14 + rax*4 + 0x41764]
add rcx, r14
jmp rcx
mov byte [rbp - 0x70], 1
mov dword [rbp], 0x10
jmp case.default.0x18003f7d9
mov dword [rsp + 0x78], 7
jmp case.default.0x18003f7d9
mov dword [rbp + 0xc], 1
jmp case.default.0x18003f7d9
mov dword [rbp + 4], 0x10
mov dword [rbp + 8], 0x11
jmp case.default.0x18003f7d9
mov r9d, dword [rbp + 0xc]
mov edx, dword [rbp + 4]
mov ecx, dword [rbp]
mov dword [rsp + 0x20], r8d
mov r8d, dword [rbp + 8]
call qword [sym.imp.COMCTL32.dll_ImageList_Create]
test rax, rax
jne 0x18003f82e
mov byte [rbp - 0x70], al
jmp 0x18003f83d
cmp byte [rbp - 0x70], 0
je 0x18003f83d
mov rcx, rax
call qword [sym.imp.COMCTL32.dll_ImageList_Destroy]
xor r8d, r8d
inc ebx
lea eax, [rbx + 0x35]
cmp eax, 0x3b
jb 0x18003f7c7
mov ecx, 0xfb
jmp 0x18003f85d
mov dword [rsp + 0x78], 1
mov rdx, qword [rbp + 0x3f0]
dec ecx
mov r8d, 0
cmp ecx, 0xf8
ja 0x18003f682
mov r9, qword [rbp - 0x80]
lea eax, [r8 + 0x1a]
mov r11, qword [rsp + 0x70]
jmp 0x18003f28f
lea rax, [0x18001d0e0]
mov dword [rsp + 0x78], 1
mov qword [r12 + 0x358], rax
mov rax, qword [r12 + 0x350]
mov qword [r11 + 0x30], rax
lea rax, [0x18001da20]
mov qword [r12 + 0x350], rax
jmp case.0x18003f239.41
lea rax, [0x18001a2e0]
mov dword [rbp - 8], 2
lea r9, [rbp - 8]
mov qword [r12 + 0x2a0], rax
lea r8, [0x1800e3d40]
mov edx, 0x67
mov rcx, r12
call fcn.180056630
mov r11, qword [rsp + 0x70]
mov rax, qword [r12 + 0x358]
mov qword [r11 + 0x28], rax
jmp 0x18003f285
mov ecx, 0x7a
nop word [rax + rax]
mov eax, ecx
sub eax, 0x7a
je 0x18003f931
sub eax, 1
je 0x18003f927
cmp eax, 1
je case.0x180040e07.0
jmp 0x18003f93a
mov dword [r12], 0xf
jmp 0x18003f93a
cmp byte [rdx], 0x75
jne case.0x1800406d4.19
inc ecx
cmp ecx, 0x7d
jb 0x18003f910
mov dword [rbp + 0x3c8], 0x1f
mov eax, 0x102
cmp eax, 0x102
je 0x18003f964
cmp eax, 0xb568
je case.0x18003f7d9.5
jmp 0x18003f97d
cmp byte [rdx], 0x6c
jne case.0x1800406d4.19
mov dword [r12], 0x10
mov dword [rsp + 0x78], 1
add eax, 0xb466
cmp eax, 0x168cc
jbe 0x18003f950
jmp case.0x18003f239.41
mov ecx, 0xeb
mov eax, ecx
sub eax, 0xea
je case.0x180040e07.0
cmp eax, 1
je 0x18004103e
dec ecx
cmp ecx, 0xe9
ja 0x18003f993
mov ecx, 0x104
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x104
je 0x18003f9d7
cmp eax, 5
je case.0x180040e07.0
jmp 0x18003fa5f
movsx eax, byte [rdx]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x1800406d4.19
cdqe
movzx eax, byte [r10 + rax + 0x41790]
mov ecx, dword [r10 + rax*4 + 0x4177c]
add rcx, r10
jmp rcx
mov rax, qword [rsi + 8]
test rax, rax
je case.0x18003f9fc.9
call rax
jmp 0x18003fa4c
mov ebx, 0x2f
mov eax, ebx
sub eax, 0x2e
je 0x18003fa81
cmp eax, 1
jne 0x18003fa32
mov rax, qword [rsi + 0x18]
test rax, rax
je 0x18003fa27
call rax
mov rax, qword [sym.imp.COMDLG32.dll_ReplaceTextA]
mov qword [rbp - 0x50], rax
dec ebx
cmp ebx, 0x2d
ja 0x18003fa10
mov rax, qword [rsi + 0x50]
test rax, rax
je 0x18003fa44
call rax
mov dword [r12], 0x1b
mov rdx, qword [rbp + 0x3f0]
lea r10, [0x180000000]
mov ecx, 0x104
add ecx, 5
cmp ecx, 0x10e
jb 0x18003f9c0
mov r9, qword [rbp - 0x80]
mov eax, 0x15
mov r11, qword [rsp + 0x70]
jmp 0x18003f28f
mov ebx, 0xe1
mov esi, 0x52
mov r13d, 0x7025
lea r15d, [rbx - 0x71]
lea r12d, [rbx - 0x7c]
nop dword [rax]
mov eax, ebx
sub eax, 0xdd
je 0x18003faef
sub eax, 1
je 0x18003fae1
sub eax, 1
je 0x18003facf
sub eax, 1
je 0x18003fac3
cmp eax, 1
jne 0x18003fb07
mov word [rbp - 0x28], si
jmp 0x18003fb07
mov word [rbp - 0x27], r12w
mov word [rbp - 0x26], r15w
jmp 0x18003fb07
mov eax, 0x6554
mov dword [rbp - 0x25], 0x6563616c
mov word [rbp - 0x21], ax
jmp 0x18003fb07
mov dword [rbp - 0x1f], 0x207478
mov word [rbp - 0x1c], r13w
jmp 0x18003fb07
mov r8, qword [rbp - 0x50]
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x170]
mov word [rbp - 0x1a], di
call fcn.1800ab090
dec ebx
cmp ebx, 0xdc
ja 0x18003faa0
mov r12, qword [rbp + 0x3d0]
movzx r13d, byte [rsp + 0x68]
mov r15, qword [rbp - 0x68]
mov rsi, qword [rbp + 0x3e8]
jmp 0x18003fa4c
mov rsi, qword [rbp + 0x3e8]
lea r10, [0x180000000]
mov rdx, qword [rbp + 0x3f0]
dec ecx
mov r8d, 0
cmp ecx, 0x3c
ja 0x18003ef95
lea r14, [0x180000000]
mov ecx, 0xaa
nop word [rax + rax]
mov eax, ecx
sub eax, 0xaa
je 0x18004001e
cmp eax, 1
je case.0x18003f7d9.5
jmp 0x18004012e
movsx eax, byte [rdx]
add eax, 0xffffffd5
cmp eax, 0xe
ja case.0x1800406d4.19
cdqe
mov ecx, dword [r14 + rax*4 + 0x41808]
add rcx, r14
jmp rcx
mov ebx, 0xfa
cmp ebx, 0xfa
je 0x180040069
cmp ebx, 0x4e20
je 0x18004005f
cmp ebx, 0x9b46
je 0x180040121
jmp 0x1800400a0
mov dword [r12], 0x16
jmp 0x1800400a0
mov r9, qword [r12 + 8]
xor ecx, ecx
mov dword [r12 + 4], r8d
mov r8d, 0xf3
movzx eax, byte [rdx]
lea rdx, [rbp + 0x3c8]
mov byte [rbp + 0x3c8], al
call fcn.1800a1270
cmp eax, 1
jne 0x180041133
mov rdx, qword [rbp + 0x3f0]
add ebx, 0x4d26
mov r8d, 0
cmp ebx, 0xe772
jbe 0x180040041
cmp dword [r12 + 4], 0
jne 0x180040112
mov r9, qword [r12 + 8]
xor r8d, r8d
xor ecx, ecx
lea edx, [r8 + 0x6f]
call fcn.1800830f0
cmp rax, 0xfffffffffffffffe
jae 0x180040109
mov rax, qword [rbp + 0x3f0]
lea rdx, [rbp + 0x3c8]
mov r9, qword [r12 + 8]
mov r8d, 0xf3
xor ecx, ecx
movzx eax, byte [rax]
mov byte [rbp + 0x3c8], al
call fcn.1800a1270
cmp eax, 1
jne 0x180041133
jmp 0x180040112
mov dword [r12 + 4], 1
mov rdx, qword [rbp + 0x3f0]
mov dword [r12], 0x15
mov ecx, 0xaa
mov dword [rsp + 0x78], 1
inc ecx
mov r8d, 0
cmp ecx, 0xac
jb 0x18003ffb0
mov r9, qword [rbp - 0x80]
lea eax, [r8 + 0x1b]
mov r11, qword [rsp + 0x70]
jmp 0x18003f28f
mov ebx, 0x2d
nop dword [rax]
mov eax, ebx
sub eax, 0x2b
je case.0x18003f7d9.5
sub eax, 1
je 0x18004018f
cmp eax, 1
jne 0x180040197
cmp byte [rdx], 0x6c
jne case.0x1800406d4.19
mov dword [r12], r8d
mov rax, qword [rsi + 0x40]
test rax, rax
je 0x180040197
call rax
jmp 0x180040197
mov dword [rsp + 0x78], 1
mov rdx, qword [rbp + 0x3f0]
dec ebx
mov r8d, 0
cmp ebx, 0x2a
ja 0x180040160
jmp 0x18003f280
mov ecx, 0x3e
mov eax, ecx
sub eax, 0x3c
je case.0x18003f7d9.5
sub eax, 1
je 0x1800402d5
cmp eax, 1
jne 0x1800402af
movsx edx, byte [rdx]
lea eax, [rdx - 0x30]
cmp eax, 9
ja case.0x1800406d4.19
cdqe
mov ecx, dword [r10 + rax*4 + 0x41844]
add rcx, r10
jmp rcx
mov r9, qword [r12 + 8]
mov r8d, 0xf3
mov byte [rbp - 0x78], dl
xor ecx, ecx
lea rdx, [rbp - 0x78]
call fcn.1800a1270
mov eax, 0x11
jmp 0x18004029f
cmp dword [r12 + 4], 0
jne 0x18004029a
mov r9, qword [r12 + 8]
xor r8d, r8d
xor ecx, ecx
lea edx, [r8 + 0x6f]
call fcn.1800830f0
cmp rax, 0xffffffffffffffff
jae 0x18004029a
mov r9d, 0x109
mov qword [rbp - 0x40], 5
lea r8, [rbp - 0x40]
mov qword [rsp + 0x20], 0
xor edx, edx
lea rcx, [rbp + 0x160]
call fcn.1800a1ef0
mov r9, qword [rax]
mov qword [r12 + 8], r9
test r9, r9
je 0x180041133
mov rax, qword [rbp + 0x3f0]
lea rdx, [rbp - 0x78]
mov r8d, 0xf3
xor ecx, ecx
movzx eax, byte [rax]
mov byte [rbp - 0x78], al
call fcn.1800a1270
cmp eax, 1
jne 0x180041133
mov dword [r12 + 4], eax
mov eax, 0x18
mov dword [r12], eax
lea r10, [0x180000000]
mov ecx, 0x3e
mov eax, dword [rbp + 0x3c8]
mov rdx, qword [rbp + 0x3f0]
dec ecx
cmp ecx, 0x3b
ja 0x1800401b5
mov r9, qword [rbp - 0x80]
mov r11, qword [rsp + 0x70]
jmp 0x18003f28f
mov eax, 0x18
mov dword [rsp + 0x78], 1
mov dword [rbp + 0x3c8], eax
jmp 0x1800402b5
mov rsi, qword [rbp + 0x3e8]
lea r10, [0x180000000]
mov rdx, qword [rbp + 0x3f0]
dec ecx
mov r8d, 0
cmp ecx, 0x84
ja 0x18003f031
mov eax, 0xfe
nop
cmp eax, 0xfe
je 0x1800405cb
cmp eax, 0x7416
je 0x1800405be
cmp eax, 0xe72e
je case.0x18003f7d9.5
jmp 0x180040662
mov dword [rsp + 0x78], 1
jmp 0x180040662
movsx eax, byte [rdx]
add eax, 0xffffffd0
cmp eax, 9
ja case.0x1800406d4.19
lea r8, [0x180000000]
cdqe
mov ecx, dword [r8 + rax*4 + 0x4186c]
add rcx, r8
jmp rcx
cmp dword [r12 + 4], 0
jne 0x180040655
mov r9, qword [r12 + 8]
xor r8d, r8d
xor ecx, ecx
lea edx, [r8 + 0x6f]
call fcn.1800830f0
cmp rax, 0xffffffffffffffff
jae 0x180040645
mov rax, qword [rbp + 0x3f0]
lea rdx, [rbp + 0x3c8]
mov r9, qword [r12 + 8]
mov r8d, 0xf3
xor ecx, ecx
movzx eax, byte [rax]
mov byte [rbp + 0x3c8], al
call fcn.1800a1270
cmp eax, 1
jne 0x180041133
jmp 0x18004064e
mov dword [r12 + 4], 1
mov rdx, qword [rbp + 0x3f0]
mov dword [r12], 0x13
mov eax, 0xfe
add eax, 0x7318
cmp eax, 0x15948
jbe 0x1800405a0
mov r9, qword [rbp - 0x80]
mov eax, 0x1c
mov r11, qword [rsp + 0x70]
jmp 0x18003f28f
mov ecx, 0x8d
nop word [rax + rax]
mov eax, ecx
sub eax, 0x8b
je case.0x18003f7d9.5
sub eax, 1
je 0x1800409fc
cmp eax, 1
jne 0x180040a04
movsx eax, byte [rdx]
add eax, 0xfffffff7
cmp eax, 0x72
ja case.0x1800406d4.19
cdqe
movzx eax, byte [r10 + rax + 0x418c0]
mov ecx, dword [r10 + rax*4 + 0x41894]
add rcx, r10
jmp rcx
mov ebx, r8d
nop dword [rax]
cmp ebx, 6
ja case.default.0x1800406f6
mov eax, ebx
mov ecx, dword [r10 + rax*4 + 0x41934]
add rcx, r10
jmp rcx
mov dword [rbp + 0x68], 0x61
jmp case.default.0x1800406f6
mov qword [rbp + 0xe0], r8
mov qword [rbp + 0x40], r8
mov dword [rbp - 0x10], r8d
jmp case.default.0x1800406f6
movabs rax, 0x6c007000730069
mov qword [rbp + 0x60], rax
jmp case.default.0x1800406f6
mov dword [rbp + 0x6a], 0x79
mov byte [rsp + 0x60], 1
jmp case.default.0x1800406f6
mov word [rbp + 0x5a], r8w
lea rdx, [0x1800e7732]
mov r8d, 3
lea rcx, [rbp + 0x50]
call fcn.1800b1218
xor r8d, r8d
lea r10, [0x180000000]
jmp case.default.0x1800406f6
mov eax, 0x41
mov word [rbp + 0x50], ax
movabs rax, 0x65007200640064
mov qword [rbp + 0x52], rax
inc ebx
lea eax, [rbx + 0xc3]
cmp eax, 0xca
jb 0x1800406e0
mov dword [r12], 1
mov qword [r12 + 8], r8
mov eax, 0x13
lea r10, [0x180000000]
mov dword [rbp + 0x3c8], eax
mov ecx, 0x8d
jmp 0x180040a0a
mov r9d, dword [rbp - 0x10]
lea r8, [rbp + 0x40]
mov rcx, qword [rbp + 0xe0]
lea rdx, [rbp + 0x50]
call sub.urlmon.dll_CreateURLMonikerEx
test eax, eax
je 0x1800407cd
mov byte [rsp + 0x60], 0
jmp 0x18004078e
cmp byte [rsp + 0x60], 0
je 0x18004078e
mov rcx, qword [rbp + 0x40]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x18004078e
mov rax, qword [rsi]
test rax, rax
je 0x1800407ea
call rax
mov dword [r12], 0x19
jmp 0x18004078e
mov rax, qword [rsi + 0x10]
test rax, rax
je 0x18004078e
call rax
jmp 0x18004078e
mov dword [r12], 7
jmp 0x18004078e
mov dword [r12], edi
jmp 0x18004078e
mov dword [r12], 0xe
jmp 0x18004078e
mov ebx, pe_nt_image_headers64
mov eax, ebx
sub eax, 0x110
je 0x18004083a
cmp eax, 0x45
je 0x18004078e
jmp 0x18004089c
mov qword [rsp + 0x20], r8
lea rcx, [rbp + 0x140]
lea r8, [rbp - 0x40]
mov dword [r12], 0x11
mov r9d, 0x109
mov qword [rbp - 0x40], 5
xor edx, edx
call fcn.1800a1ef0
mov r9, qword [rax]
mov qword [r12 + 8], r9
test r9, r9
je 0x180041133
mov r8d, 0xf3
mov byte [rbp + 0x3c8], 0x30
lea rdx, [rbp + 0x3c8]
xor ecx, ecx
call fcn.1800a1270
cmp eax, 1
jne 0x180041133
add ebx, 0x45
mov r8d, 0
cmp ebx, 0x19a
jb 0x180040826
mov ebx, 0x64
mov eax, ebx
sub eax, 0x64
je 0x180040936
sub eax, 1
je 0x1800408cd
cmp eax, 1
je 0x18004078e
jmp 0x18004093e
mov r9d, 0x109
mov qword [rbp - 0x40], 5
lea r8, [rbp - 0x40]
mov qword [rsp + 0x20], 0
xor edx, edx
lea rcx, [rbp + 0x100]
call fcn.1800a1ef0
mov r9, qword [rax]
mov qword [r12 + 8], r9
test r9, r9
je 0x180041133
mov rax, qword [rbp + 0x3f0]
lea rdx, [rbp + 0x3c8]
mov r8d, 0xf3
xor ecx, ecx
movzx eax, byte [rax]
mov byte [rbp + 0x3c8], al
call fcn.1800a1270
cmp eax, 1
jne 0x180041133
jmp 0x18004093e
mov dword [r12], 0x18
inc ebx
cmp ebx, 0x67
jb 0x1800408b6
mov ebx, 0xef
nop
cmp ebx, 0x11dae
ja case.0x1800406d4.19
cmp ebx, 0xef
je 0x1800409b1
cmp ebx, 0x6029
je 0x180040980
cmp ebx, 0xbf63
je 0x18004078e
add ebx, 0x5f3a
jmp 0x180040950
mov r9, qword [r12 + 8]
lea rdx, [rbp + 0x3c8]
mov r8d, 0xf3
mov byte [rbp + 0x3c8], 0x2d
xor ecx, ecx
call fcn.1800a1270
cmp eax, 1
jne 0x180041133
add ebx, 0x5f3a
jmp 0x180040950
mov eax, 8
mov dword [r12], 0x17
mov r9d, 0x109
mov qword [rbp - 0x40], rax
lea r8, [rbp - 0x40]
mov qword [rsp + 0x20], 0
xor edx, edx
lea rcx, [rbp + 0x20]
call fcn.1800a1ef0
mov rcx, qword [rax]
mov qword [r12 + 8], rcx
test rcx, rcx
je 0x180041133
add ebx, 0x5f3a
jmp 0x180040950
mov dword [rsp + 0x78], 1
mov eax, dword [rbp + 0x3c8]
mov rdx, qword [rbp + 0x3f0]
dec ecx
mov r8d, 0
cmp ecx, 0x8a
ja 0x180040690
mov r9, qword [rbp - 0x80]
mov r11, qword [rsp + 0x70]
jmp 0x18003f28f
lea rcx, [rbp + 0x130]
call qword [rbp + 0xd8]
test eax, eax
jne 0x18003f280
mov byte [rsp + 0x78], al
jmp case.0x18003f7d9.5
movsx eax, byte [rdx]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x1800406d4.19
cdqe
movzx eax, byte [r10 + rax + 0x41970]
mov ecx, dword [r10 + rax*4 + 0x41950]
add rcx, r10
jmp rcx
cmp dword [r12 + 4], 0
jne case.0x180040e07.0
mov r9, qword [r12 + 8]
xor r8d, r8d
xor ecx, ecx
lea edx, [r8 + 0x6f]
call fcn.1800830f0
cmp rax, 0xffffffffffffffff
jae 0x180040b0b
mov r9d, 0x109
mov qword [rbp - 0x50], 5
lea r8, [rbp - 0x50]
mov qword [rsp + 0x20], 0
xor edx, edx
lea rcx, [rbp + 0x20]
call fcn.1800a1ef0
mov r9, qword [rax]
mov qword [r12 + 8], r9
test r9, r9
je 0x180041133
mov rax, qword [rbp + 0x3f0]
lea rdx, [rbp + 0x3c8]
mov r8d, 0xf3
xor ecx, ecx
movzx eax, byte [rax]
mov byte [rbp + 0x3c8], al
call fcn.1800a1270
cmp eax, 1
je case.0x180040e07.0
mov eax, 6
jmp 0x18003dcba
mov dword [r12 + 4], 1
mov eax, 1
jmp 0x18003dcba
mov ebx, 0xc0
mov eax, ebx
sub eax, 0xc0
je 0x180040b37
cmp eax, 1
je case.0x180040e07.0
jmp 0x180040b96
mov qword [rsp + 0x20], r8
lea rcx, [rbp + 0x20]
lea r8, [rbp - 0x50]
mov qword [rbp - 0x50], 5
mov r9d, 0x109
xor edx, edx
call fcn.1800a1ef0
mov r9, qword [rax]
mov qword [r12 + 8], r9
test r9, r9
je 0x180041133
mov r8d, 0xf3
mov byte [rbp + 0x3c8], 0x2e
lea rdx, [rbp + 0x3c8]
xor ecx, ecx
call fcn.1800a1270
cmp eax, 1
jne 0x180041133
mov dword [r12], 0x12
inc ebx
mov r8d, 0
cmp ebx, 0xc2
jb 0x180040b23
mov rdx, qword [rbp + 0x3f0]
mov ebx, 0x5e
mov eax, ebx
sub eax, 0x5e
je 0x180040c12
sub eax, 0x19
je 0x180040bdc
sub eax, 0x19
je 0x180040bd2
cmp eax, 0x19
je case.0x180040e07.0
jmp 0x180040c49
mov dword [r12], 0x14
jmp 0x180040c49
movzx eax, byte [rdx]
mov r8d, 0xf3
mov r9, qword [r12 + 8]
lea rdx, [rbp + 0x3c8]
xor ecx, ecx
mov byte [rbp + 0x3c8], al
call fcn.1800a1270
cmp eax, 1
jne 0x180041133
mov dword [r12 + 4], 0
jmp 0x180040c49
mov r9d, 0x109
mov qword [rbp - 0x50], 5
lea r8, [rbp - 0x50]
mov qword [rsp + 0x20], 0
xor edx, edx
lea rcx, [rbp + 0x20]
call fcn.1800a1ef0
mov rcx, qword [rax]
mov qword [r12 + 8], rcx
test rcx, rcx
je 0x180041133
mov rdx, qword [rbp + 0x3f0]
add ebx, 0x19
cmp ebx, 0xc2
jb 0x180040bb6
movzx esi, byte [rbp + 0x3c8]
mov r15d, 0xb
mov rbx, qword [rbp - 0x50]
mov r14d, dword [rbp + 0x3c8]
mov rdi, qword [rbp - 0x50]
nop dword [rax + rax]
mov eax, r15d
sub eax, 0xb
je 0x180040d13
sub eax, 0x4a
je 0x180040cef
sub eax, 0x4a
je 0x180040cd9
sub eax, 0x4a
je 0x180040ccf
cmp eax, 0x4a
jne 0x180040d3b
test r14d, r14d
movzx eax, sil
mov ecx, 0
cmove ecx, eax
test cl, cl
je case.0x180040e07.0
mov rcx, qword [rbp - 0x18]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 1
jmp 0x18003dcba
mov dword [r12], 0
jmp 0x180040d3b
lea r9, [rbp - 0x18]
mov r8, rdi
mov rdx, rbx
xor ecx, ecx
call sub.urlmon.dll_CreateAsyncBindCtx
mov r14d, eax
jmp 0x180040d3b
xor eax, eax
lea rdx, [r12 + 8]
xor r9d, r9d
mov qword [rbp - 0x18], rax
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov ecx, 0x11e
mov edi, eax
call fcn.180018b90
jmp 0x180040d3b
mov rcx, qword [r12 + 8]
mov sil, 1
test rcx, rcx
je 0x180041133
mov rax, qword [rbp + 0x3e8]
xor ebx, ebx
mov rax, qword [rax + 0x28]
test rax, rax
je 0x180040d3b
mov rcx, qword [rcx]
call rax
add r15d, 0x4a
cmp r15d, 0x17d
jb 0x180040c80
mov ebx, 0xa6
mov eax, ebx
sub eax, 0xa6
je 0x180040da9
sub eax, 0x62
je 0x180040d79
sub eax, 0x62
je 0x180040d6f
cmp eax, 0x62
je case.0x180040e07.0
jmp 0x180040dcc
mov dword [r12], 0x1a
jmp 0x180040dcc
lea rdx, [r12 + 8]
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov ecx, 0x11e
call fcn.180018b90
mov rax, qword [rbp + 0x3e8]
cmp qword [rax], 0
je 0x180040dcc
call qword [rax + 8]
jmp 0x180040dcc
mov rcx, qword [r12 + 8]
test rcx, rcx
je 0x180041133
mov rax, qword [rbp + 0x3e8]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x180040dcc
mov rcx, qword [rcx]
call rax
add ebx, 0x62
cmp ebx, 0x22e
jb 0x180040d51
lea r10, [0x180000000]
mov rdi, qword [rbp - 0x50]
mov esi, 0xc
mov ebx, dword [rbp + 0x3c8]
cmp esi, 0xc
ja case.default.0x180040e07
mov eax, esi
mov ecx, dword [r10 + rax*4 + 0x419e8]
add rcx, r10
jmp rcx
mov rax, qword [rbp + 0x3e8]
xor edi, edi
cmp qword [rax], rdi
je 0x180040e1a
call qword [rax + 0x18]
mov ebx, 2
jmp case.default.0x180040e07
mov eax, 0x6f
mov dword [rbp + 0x5a], eax
jmp case.default.0x180040e07
mov eax, dword [0x1800e76a8]
mov dword [rbp + 0x50], eax
movzx eax, word [0x1800e76ac]
mov word [rbp + 0x54], ax
jmp case.default.0x180040e07
xor eax, eax
lea rdx, [0x1800e76b0]
lea rcx, [rbp + 0x50]
mov word [rbp + 0x7a], ax
lea r8d, [rax + 3]
call fcn.1800b1218
movups xmm0, xmmword [str.http:__]
movups xmmword [rbp + 0x100], xmm0
jmp case.default.0x180040e07
mov eax, dword [0x1800e76c8]
mov dword [rbp + 0x5c], eax
mov eax, dword [0x1800e76d0]
mov dword [rbp + 0x60], eax
movzx eax, word [0x1800e76d4]
mov word [rbp + 0x64], ax
jmp case.default.0x180040e07
mov eax, dword [0x1800e76d8]
mov dword [rbp + 0x74], eax
mov eax, 0x64
mov word [rbp + 0x78], ax
jmp case.default.0x180040e07
mov r8d, 2
mov dword [rbp + 0x54], 0x77
lea rdx, [0x1800e5e68]
lea rcx, [rbp + 0x56]
call fcn.1800b1260
mov dword [rbp + 0x58], 0x63
jmp case.default.0x180040e07
mov rcx, qword [r12 + 8]
test rcx, rcx
je 0x180041133
mov rax, qword [rbp + 0x3e8]
mov rax, qword [rax + 0x28]
test rax, rax
je case.default.0x180040e07
mov rcx, qword [rcx]
call rax
jmp case.default.0x180040e07
mov eax, dword [0x1800e76e0]
lea rdx, [0x1800e76e8]
mov dword [rbp + 0x68], 0x63
lea rcx, [rbp + 0x70]
mov r8d, 3
mov dword [rbp + 0x6a], eax
mov dword [rbp + 0x6e], 0x2f
call fcn.1800b1260
jmp case.default.0x180040e07
mov r9d, ebx
mov dword [r12], 0x1a
mov r8, rdi
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x50]
call sub.urlmon.dll_CoInternetIsFeatureZoneElevationEnabled
jmp case.default.0x180040e07
lea rdx, [r12 + 8]
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov ecx, 0x11e
call fcn.180018b90
jmp case.default.0x180040e07
mov eax, dword [0x1800e76f0]
mov dword [rbp + 0x64], eax
movzx eax, word [0x1800e76f4]
mov word [rbp + 0x68], ax
dec esi
lea r10, [0x180000000]
lea eax, [rsi + 0x9e]
cmp eax, 0x9d
ja 0x180040df1
mov ebx, 0xfc
cmp ebx, 0xfc
je 0x180040fe1
cmp ebx, 0x1998
je 0x180040fc5
cmp ebx, 0x3234
je case.0x180040e07.0
jmp 0x180041022
mov rax, qword [rbp + 0x3e8]
mov rax, qword [rax + 0x48]
test rax, rax
je 0x180040fd7
call rax
mov dword [r12], 0x1b
jmp 0x180041022
mov rcx, qword [r12 + 8]
test rcx, rcx
je 0x180041133
mov rax, qword [rbp + 0x3e8]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x180041004
mov rcx, qword [rcx]
call rax
xor r9d, r9d
mov qword [rsp + 0x20], 0
xor r8d, r8d
lea rdx, [r12 + 8]
mov ecx, 0x11e
call fcn.180018b90
add ebx, 0x189c
cmp ebx, 0x49d4
jbe 0x180040fa7
mov eax, 7
jmp 0x18003dcba
movsx eax, byte [rdx]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x1800406d4.19
cdqe
movzx eax, byte [r10 + rax + 0x41a2c]
mov ecx, dword [r10 + rax*4 + 0x41a1c]
add rcx, r10
jmp rcx
movzx edi, byte [rbp + 0x3c8]
mov ebx, 0xa3
movzx edx, word [rbp + 0x3c8]
nop dword [rax + rax]
mov eax, ebx
sub eax, 0xa3
je 0x1800410c0
sub eax, 0x4b
je 0x1800410ae
cmp eax, 0x4b
jne 0x1800410cb
test dil, dil
je case.0x180040e07.0
movzx ecx, dx
call sub.COMCTL32.dll_InitMUILanguage
mov eax, 1
jmp 0x18003dcba
movzx eax, dil
test dx, dx
mov ecx, r8d
cmovne ecx, eax
movzx edi, cl
jmp 0x1800410cb
mov dil, 1
call sub.COMCTL32.dll_GetMUILanguage
movzx edx, ax
add ebx, 0x4b
cmp ebx, 0x184
jae case.0x180041063.10
xor r8d, r8d
jmp 0x180041080
mov qword [r12 + 8], 0
mov dword [r12], 1
mov eax, 1
jmp 0x18003dcba
mov rax, qword [rsi + 8]
test rax, rax
je 0x180041101
call rax
mov dword [r12], 0x1a
mov eax, 1
jmp 0x18003dcba
mov eax, 6
jmp 0x18003dcba
mov eax, edi
jmp 0x18003dcba
cmp byte [rbp + 0x130], 1
sete byte [rsp + 0x78]
jmp case.0x18003f7d9.5
mov r8, qword [r12]
lea rdx, str.ATL.CComPtr_IPsEnumRuleMetadata_.__
lea rcx, [0x180104b68]
call fcn.180034c60
xor eax, eax
jmp 0x18003dcba