Function at 0x18006a570
Capabilities:
Check for software breakpoints

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x348]
sub rsp, 0x410
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
mov rax, qword [0x1800a3d18]
xor rax, rsp
mov qword [rbp + 0x2d0], rax
mov rax, qword [rbp + 0x378]
lea esi, [rdx + 0x13b]
mov r11, qword [rbp + 0x370]
xor edi, edi
mov qword [rbp - 0x70], r9
cmp edx, esi
mov r10, qword [rbp - 0x70]
mov ebx, edx
mov r15, qword [rbp - 0x70]
mov r14, rcx
mov r9, qword [rbp - 0x70]
mov qword [rbp - 0x18], rax
mov eax, edx
mov dword [rsp + 0x40], esi
mov rsi, qword [rbp - 0x70]
mov qword [rsp + 0x70], r8
mov dword [rbp], edx
mov qword [rbp - 0x40], rcx
mov qword [rbp + 0x30], r11
mov dword [rbp - 0x60], edx
jae 0x18006b411
mov rcx, qword [rbp - 8]
mov rdx, qword [rbp - 0x70]
mov r8, qword [rbp - 0x70]
mov rbx, qword [rbp - 0x70]
movsd xmm6, qword [0x18009be88]
movsd xmm7, qword [0x18009bea0]
movsd xmm8, qword [0x18009bf08]
mov r12, qword [rbp + 0x38]
mov r13, qword [rbp + 0x40]
mov qword [rbp + 0x60], rcx
mov rcx, qword [rbp - 0x70]
mov qword [rsp + 0x58], rcx
mov rcx, qword [rbp - 0x70]
mov qword [rsp + 0x60], rcx
mov rcx, qword [rbp - 0x70]
mov qword [rbp - 0x28], rcx
mov rcx, qword [rbp - 0x70]
mov qword [rsp + 0x68], rcx
mov rcx, qword [rbp - 0x70]
mov qword [rbp + 0x68], r9
mov r9, qword [rbp - 0x70]
mov qword [rbp + 0x10], rdx
mov rdx, qword [rbp - 0x70]
mov qword [rbp + 0x58], rcx
mov ecx, dword [rsp + 0x40]
mov qword [rbp + 0x48], r10
mov qword [rbp + 0x50], r15
mov qword [rbp + 0x28], r8
mov qword [rsp + 0x48], r9
mov qword [rbp - 0x68], rdx
mov qword [rbp + 0x20], rbx
nop
add eax, 0xffffff7e
cmp eax, 0xe5
ja case.default.0x18006a6bb
lea r8, [0x180000000]
movzx eax, byte [r8 + rax + 0x6c990]
mov ecx, dword [r8 + rax*4 + 0x6c900]
add rcx, r8
jmp rcx
mov r8, r10
mov edx, 0xb7
mov rcx, r12
call fcn.180058cc0
jmp 0x18006a748
mov ebx, 0x113
nop dword [rax]
nop dword [rax + rax]
mov r14, qword [rbp + 0x18]
mov eax, ebx
sub eax, 0x112
je 0x18006a6fa
cmp eax, 1
jne 0x18006a729
inc dword [0x1800a3e40]
jmp 0x18006a729
mov qword [rsp + 0x30], rdi
lea r9, [rbp - 8]
mov qword [rsp + 0x28], r14
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 0xbe
xor ecx, ecx
call fcn.1800724d0
mov qword [rbp + 0x50], rax
test rax, rax
je 0x18006a890
dec ebx
cmp ebx, 0x111
ja 0x18006a6e0
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__unlink]
mov rax, qword [rbp - 8]
mov qword [rbp + 0x60], rax
mov r14, qword [rbp - 0x40]
mov r9, qword [rsp + 0x48]
mov rdx, qword [rbp - 0x68]
mov ecx, dword [rsp + 0x40]
mov r10, qword [rsp + 0x58]
mov r11, qword [rsp + 0x60]
mov r15, qword [rsp + 0x68]
mov r8, qword [rsp + 0x70]
mov eax, dword [rbp - 0x60]
add eax, 9
mov dword [rbp - 0x60], eax
cmp eax, ecx
jae 0x18006b47b
mov r10, qword [rbp + 0x48]
mov r11, qword [rbp + 0x30]
mov r15, qword [rbp + 0x50]
jmp 0x18006a690
mov r8, qword [rsp + 0x70]
test r8, r8
jne 0x18006b3f9
mov ebx, 0x17
nop
mov eax, ebx
sub eax, 0x16
je 0x18006a8f3
cmp eax, 1
jne 0x18006a7e4
mov dword [rsp + 0x78], eax
lea r9, [rbp - 0x78]
lea rax, [rsp + 0x78]
mov dword [rbp - 0x78], 0xe
lea r8, [0x180092c27]
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x50]
mov dword [rbp - 0x50], edi
mov ecx, 0xe3
call fcn.18000a640
mov rsi, rdi
dec ebx
cmp ebx, 0x15
ja 0x18006a7a0
jmp 0x18006a748
mov rcx, qword [rbp + 0x18]
mov edx, 0x201
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__open]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__close]
mov rcx, qword [rbp - 0x10]
lea r9, [0x18009522c]
add rcx, 0x58
mov qword [rbp + 8], 3
lea r8, [rbp + 8]
mov edx, 0xe2
call fcn.180005e90
jmp 0x18006a748
mov r8, qword [rbp - 0x10]
add r8, 0x58
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov qword [rsp + 0x28], rdi
mov edx, 0x119
xor ecx, ecx
mov qword [rsp + 0x20], rdi
call fcn.180042520
jmp 0x18006a748
mov ebx, 0x7b
cmp ebx, 0x7b
je 0x18006a899
cmp ebx, 0x12f
jne 0x18006a89f
lea rdx, [r13 + 4]
xor ecx, ecx
lea r9, str.MQIsdp
lea r8d, [rbx - 0x15]
call fcn.180025120
test eax, eax
jne 0x18006a89f
nop dword [rax + rax]
lea rax, str.false
jmp 0x18006a8f6
inc dword [0x1800a3e40]
add ebx, 0xb4
cmp ebx, 0x1e3
jb 0x18006a861
mov r14d, StrCmpICA
nop dword [rax]
nop word [rax + rax]
mov eax, r14d
sub eax, 0x98
je 0x18006a969
cmp eax, 0x7a
jne 0x18006a96f
cmp byte [r13 + 0xa], 3
je 0x18006a96f
mov ebx, 0x2a
mov eax, ebx
sub eax, 0x2a
je 0x18006a92f
cmp eax, 0x76
jne 0x18006a95c
mov rax, rsi
mov rcx, qword [rbp + 0x2d0]
xor rcx, rsp
call fcn.18008f350
lea r11, [rsp + 0x410]
mov rbx, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
movsx eax, byte [r13 + 0xa]
lea rcx, str._f____f_n
movaps xmm2, xmm6
movq r8, xmm6
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movq rdx, xmm1
call fcn.18008e9c0
lea rsi, str.false
add ebx, 0x76
cmp ebx, 0x116
jb 0x18006a8e7
jmp 0x18006a96f
inc dword [0x1800a3e40]
add r14d, 0x7a
cmp r14d, 0x18c
jb 0x18006a8c0
jmp 0x18006a744
mov edx, 0xc8
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rbp + 0x48], rax
jmp 0x18006a748
mov dword [rsp + 0x30], 0x7e
xor r9d, r9d
mov qword [rsp + 0x28], r11
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rdi
xor ecx, ecx
call fcn.180068f60
test rax, rax
jne 0x18006a748
mov ebx, 0x67
nop dword [rax]
mov eax, ebx
sub eax, 0x66
je 0x18006abd5
cmp eax, 1
jne 0x18006aa11
mov dword [rsp + 0x78], eax
lea r9, [rbp - 0x78]
lea rax, [rsp + 0x78]
mov dword [rbp - 0x78], 3
lea r8, [0x180092c27]
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x50]
mov dword [rbp - 0x50], edi
mov ecx, 0xe3
call fcn.18000a640
dec ebx
cmp ebx, 0x65
ja 0x18006a9d0
jmp 0x18006a748
mov qword [rbp + 0x68], rdi
mov qword [rbp + 0x10], rdi
jmp case.0x18006a6bb.131
mov r13, qword [rbp + 0x90]
lea r12, str.dllole.cpp
mov qword [rbp + 0x38], r12
mov qword [rbp + 0x40], r13
jmp case.0x18006a6bb.131
mov r14d, 0xec
nop dword [rax + rax]
mov eax, r14d
sub eax, 0xec
je 0x18006aae8
cmp eax, 1
jne 0x18006aaee
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [r12 + rax], dil
jne 0x18006aa70
cmp byte [r13 + 0xf], al
je 0x18006aaee
mov ebx, 0x4c
cmp ebx, 0x4c
je 0x18006aa94
cmp ebx, 0x5d
je 0x18006a8f3
jmp 0x18006aade
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [r12 + rax], dil
jne 0x18006aaa0
movsx eax, al
lea rcx, str._f____f_n
movd xmm2, eax
movsx eax, byte [r13 + 0xf]
cvtdq2pd xmm2, xmm2
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movq r8, xmm2
movq rdx, xmm1
call fcn.18008e9c0
lea rsi, str.false
add ebx, 0x11
cmp ebx, 0x6e
jb 0x18006aa84
jmp 0x18006aaee
inc dword [0x1800a3e40]
inc r14d
cmp r14d, 0xee
jb 0x18006aa50
mov r15d, 0x12
mov eax, r15d
sub eax, 0x11
je 0x18006ab20
cmp eax, 1
jne 0x18006abaa
inc dword [0x1800a3e40]
jmp 0x18006abaa
mov r8, 0xffffffffffffffff
inc r8
cmp byte [r12 + r8], dil
jne 0x18006ab27
mov rdx, r12
lea rcx, [r13 + 0x10]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x18006abaa
mov ebx, 0xcb
mov eax, ebx
sub eax, 0xcb
je 0x18006ab5a
cmp eax, 0x73
je 0x18006a8f3
jmp 0x18006ab9f
mov r8, 0xffffffffffffffff
inc r8
cmp byte [r12 + r8], dil
jne 0x18006ab61
mov rdx, r12
lea rcx, [r13 + 0x10]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
xorps xmm2, xmm2
lea rcx, str._f____f_n
movq r8, xmm2
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movq rdx, xmm1
call fcn.18008e9c0
lea rsi, str.false
add ebx, 0x73
cmp ebx, 0x1b1
jb 0x18006ab46
dec r15d
cmp r15d, 0x10
ja 0x18006ab04
jmp 0x18006a744
xor r9d, r9d
xor edx, edx
xor ecx, ecx
lea r8d, [r9 + 0x78]
call fcn.18002b280
cmp dword [rbp - 0x10], edi
je 0x18006a748
mov rax, rdi
jmp 0x18006a8f6
mov r14d, 0x15
cmp r14d, 0x15
jne 0x18006ac4e
inc dword [0x1800a3e40]
cmp byte [r13 + 0xb], dil
je 0x18006ac4e
mov ebx, 0x41
nop word [rax + rax]
cmp ebx, 0x41
je 0x18006ac13
cmp ebx, 0x240e
je 0x18006a8f3
jmp 0x18006ac40
movsx eax, byte [r13 + 0xb]
lea rcx, str._f____f_n
xorps xmm2, xmm2
movq r8, xmm2
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movq rdx, xmm1
call fcn.18008e9c0
lea rsi, str.false
add ebx, 0x23cd
cmp ebx, 0x479a
jbe 0x18006ac00
add r14d, 0x348
cmp r14d, 0x348
jbe 0x18006abe3
mov r14d, 0x100
mov eax, r14d
sub eax, 0xff
je 0x18006ac7b
cmp eax, 1
jne 0x18006acd7
inc dword [0x1800a3e40]
jmp 0x18006acd7
cmp byte [r13 + 0xc], dil
je 0x18006acd7
mov ebx, 0xcc
cmp ebx, 0xcc
je 0x18006ac9c
cmp ebx, 0x7920
je 0x18006a8f3
jmp 0x18006acc9
movsx eax, byte [r13 + 0xc]
lea rcx, str._f____f_n
xorps xmm2, xmm2
movq r8, xmm2
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movq rdx, xmm1
call fcn.18008e9c0
lea rsi, str.false
add ebx, 0x7854
cmp ebx, 0xf0a8
jbe 0x18006ac86
dec r14d
cmp r14d, 0xfe
ja 0x18006ac64
jmp 0x18006a744
lea rax, str.V890_cmt1469
mov qword [rbp + 0x18], rax
jmp case.0x18006a6bb.131
mov r14d, 0x27
nop
mov eax, r14d
sub eax, 0x26
je 0x18006ad1c
cmp eax, 1
jne 0x18006aded
inc dword [0x1800a3e40]
jmp 0x18006aded
mov rax, 0xffffffffffffffff
inc rax
cmp byte [r12 + rax], dil
jne 0x18006ad23
add rax, 0x10
cmp qword [r10 + 0x60], rax
je 0x18006aded
mov ebx, 0x126
nop
mov eax, ebx
sub eax, 0x124
je 0x18006a8f3
sub eax, 1
je 0x18006add8
cmp eax, 1
jne 0x18006addf
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [r12 + rcx], dil
jne 0x18006ad66
add rcx, 0x10
xorps xmm2, xmm2
js 0x18006ad7f
cvtsi2sd xmm2, rcx
jmp 0x18006ad94
mov rax, rcx
and ecx, 1
shr rax, 1
or rax, rcx
cvtsi2sd xmm2, rax
addsd xmm2, xmm2
mov rcx, qword [r10 + 0x60]
xorps xmm1, xmm1
test rcx, rcx
js 0x18006ada7
cvtsi2sd xmm1, rcx
jmp 0x18006adbc
mov rax, rcx
and ecx, 1
shr rax, 1
or rax, rcx
cvtsi2sd xmm1, rax
addsd xmm1, xmm1
movq r8, xmm2
lea rcx, str._f____f_n
movq rdx, xmm1
call fcn.18008e9c0
mov r10, qword [rbp + 0x48]
jmp 0x18006addf
lea rsi, str.false
dec ebx
cmp ebx, 0x123
ja 0x18006ad40
dec r14d
cmp r14d, 0x25
ja 0x18006ad00
inc dword [0x1800a3e40]
cmp byte [r13 + 2], dil
je 0x18006a744
mov ebx, 0x84
nop
mov eax, ebx
sub eax, 0x84
je 0x18006ae24
cmp eax, 1
je 0x18006a8f3
jmp 0x18006ae51
movsx eax, byte [r13 + 2]
lea rcx, str._f____f_n
xorps xmm2, xmm2
movq r8, xmm2
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movq rdx, xmm1
call fcn.18008e9c0
lea rsi, str.false
inc ebx
cmp ebx, 0x86
jb 0x18006ae10
jmp 0x18006a744
mov edx, 0xc8
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rbp - 0x10], rax
jmp 0x18006a748
mov ecx, dword [rsp + 0x40]
mov r10, rdi
mov qword [rsp + 0x58], rdi
mov r11, rdi
mov qword [rsp + 0x60], rdi
jmp 0x18006a75f
mov r14d, 0x3d
cmp r14d, 0x3d
je 0x18006af06
cmp r14d, 0x14bb
jne 0x18006af0c
cmp byte [r13 + 3], 6
je 0x18006af0c
mov ebx, StrCmpICA
cmp ebx, 0x9a
je 0x18006aec9
cmp ebx, 0x134
je 0x18006a8f3
jmp 0x18006aef6
movsx eax, byte [r13 + 3]
lea rcx, str._f____f_n
movaps xmm2, xmm7
movq r8, xmm7
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movq rdx, xmm1
call fcn.18008e9c0
lea rsi, str.false
add ebx, 0x9a
cmp ebx, 0x134
jbe 0x18006aeb3
jmp 0x18006af0c
inc dword [0x1800a3e40]
add r14d, 0x147e
cmp r14d, 0x28fc
jbe 0x18006ae98
jmp 0x18006a744
cmp dword [r14], edi
jne case.0x18006a6bb.131
lea r9, [rbp]
mov dword [rbp], edi
xor r8d, r8d
mov dword [rsp + 0x20], 0x57
xor edx, edx
xor ecx, ecx
call fcn.180056f60
jmp 0x18006a8f6
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x18006a748
mov qword [rbp + 0x28], rdi
jmp case.0x18006a6bb.131
mov rbx, qword [rbp - 0x10]
lea r9, [0x180095258]
lea r8, [rbp + 8]
mov qword [rbp + 8], 3
mov edx, 0xe2
lea rcx, [rbx + 0x40]
call fcn.180005e90
mov rdx, qword [rbp + 0x18]
lea r9, [rsp + 0x78]
lea r8, [rbp - 0x78]
mov dword [rbp - 0x78], 4
mov rcx, rbx
mov dword [rsp + 0x78], 3
mov dword [rsp + 0x20], 0xb9
call fcn.18005f160
jmp 0x18006a748
mov r13, qword [r10 + 0x58]
mov qword [rbp + 0x40], r13
jmp case.0x18006a6bb.131
mov ecx, 0x90
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r9, rax
mov qword [rsp + 0x48], rax
jmp 0x18006a74d
mov r8, qword [rbp - 0x10]
add r8, 0x40
jmp 0x18006a839
mov qword [rbp + 8], rdx
lea r8, [rbp + 8]
mov edx, 0x95
xor r9d, r9d
xor ecx, ecx
call fcn.18003d780
mov r9, qword [rsp + 0x48]
mov qword [r9 + 0x18], rax
jmp 0x18006a74d
mov ecx, dword [rsp + 0x40]
mov r15, rdi
mov r10, qword [rsp + 0x58]
mov r11, qword [rsp + 0x60]
mov qword [rbp - 0x28], rdi
mov qword [rsp + 0x68], rdi
jmp 0x18006a764
mov rax, qword [rbp - 0x10]
mov qword [rax + 0xa0], 0xbeef
jmp case.0x18006a6bb.131
test r9, r9
jne case.0x18006a6bb.131
mov ebx, 0xbe
mov eax, ebx
sub eax, 0xbe
je 0x18006b068
cmp eax, 0x3a
je 0x18006a8f3
jmp 0x18006b0a0
lea rax, [rsp + 0x78]
mov dword [rsp + 0x78], 1
lea r9, [rbp - 0x78]
mov qword [rsp + 0x20], rax
lea r8, [0x180092c27]
mov dword [rbp - 0x78], 7
lea rdx, [rbp - 0x50]
mov dword [rbp - 0x50], edi
mov ecx, 0xe3
call fcn.18000a640
mov rsi, rdi
add ebx, 0x3a
cmp ebx, 0x132
jb 0x18006b054
jmp 0x18006a748
mov qword [rbp + 0x20], rdi
cmp qword [r11], rdi
je 0x18006b0c2
cmp dword [r14], edi
jge case.0x18006a6bb.131
mov ebx, 0x11d
cmp ebx, 0x11d
je 0x18006b0ea
cmp ebx, 0x835e
je 0x18006b0e5
cmp ebx, 0x1059f
je 0x18006a8f3
jmp 0x18006b11f
mov rsi, rdi
jmp 0x18006b11f
lea rax, [rsp + 0x78]
mov dword [rsp + 0x78], 1
lea r9, [rbp - 0x78]
mov qword [rsp + 0x20], rax
lea r8, [0x180092c27]
mov dword [rbp - 0x78], 0x16
lea rdx, [rbp - 0x50]
mov dword [rbp - 0x50], edi
mov ecx, 0xe3
call fcn.18000a640
add ebx, 0x8241
cmp ebx, 0x186c3
jbe 0x18006b0c7
jmp 0x18006a748
mov eax, dword [rdx]
mov dword [r9 + 0x10], eax
jmp case.0x18006a6bb.131
mov r14d, 0xce
cmp r14d, 0xce
jne 0x18006b1a5
inc dword [0x1800a3e40]
cmp byte [r13 + 0xd], 0x3c
je 0x18006b1a5
mov ebx, 0xfc
nop
mov eax, ebx
sub eax, 0xfc
je 0x18006b174
cmp eax, 1
je 0x18006a890
jmp 0x18006b19b
movsx eax, byte [r13 + 0xd]
lea rcx, str._f____f_n
movaps xmm2, xmm8
movq r8, xmm2
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movq rdx, xmm1
call fcn.18008e9c0
inc ebx
cmp ebx, 0xfe
jb 0x18006b160
add r14d, 0x5f
cmp r14d, 0x12d
jb 0x18006b143
mov r14d, 0xd6
nop dword [rax + rax]
cmp r14d, 0xd6
je 0x18006b234
cmp r14d, 0x3802
jne 0x18006b23a
cmp byte [r13 + 0xe], dil
je 0x18006b23a
mov ebx, 0xde
nop dword [rax]
mov eax, ebx
sub eax, 0xde
je 0x18006b202
sub eax, 1
je 0x18006b1f9
cmp eax, 1
je 0x18006a8f3
jmp 0x18006b228
lea rsi, str.false
jmp 0x18006b228
movsx eax, byte [r13 + 0xe]
lea rcx, str._f____f_n
xorps xmm2, xmm2
movq r8, xmm2
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movq rdx, xmm1
call fcn.18008e9c0
inc ebx
cmp ebx, 0xe1
jb 0x18006b1e0
jmp 0x18006b23a
inc dword [0x1800a3e40]
add r14d, 0x372c
cmp r14d, 0x6e58
jbe 0x18006b1c0
jmp 0x18006a744
movsxd rcx, dword [rbp - 8]
mov rbx, r15
mov qword [rbp + 0x58], rbx
nop
mov rax, rbx
sub rax, r15
cmp rax, rcx
jge case.0x18006a6bb.131
movzx eax, byte [rbx]
inc rbx
mov qword [rbp + 0x58], rbx
cmp al, 0x20
jne 0x18006b260
jmp case.0x18006a6bb.131
xor edx, edx
lea r8, [r9 + 8]
lea ecx, [rdx + 5]
call fcn.180027630
mov r11, qword [rsp + 0x48]
mov r9d, 0x37
xor r8d, r8d
mov qword [rsp + 0x20], rdi
xor edx, edx
xor ecx, ecx
mov dword [r11], eax
call fcn.1800555c0
mov r9, qword [rsp + 0x48]
mov rdx, rax
mov qword [rbp - 0x68], rax
jmp case.0x18006a6bb.131
mov r9, qword [rsp + 0x70]
xor r8d, r8d
xor edx, edx
mov ecx, 0xd5
call fcn.180068a00
mov r14, rax
test rax, rax
je 0x18006a744
mov r12, qword [rbp - 0x40]
mov r15d, 0xdd
mov r13, qword [rsp + 0x70]
nop
mov ecx, r15d
sub ecx, 0xdd
je 0x18006b318
cmp ecx, 0x55
jne 0x18006b3db
mov r8, r14
mov edx, 0xf3
xor ecx, ecx
call fcn.18007c860
jmp 0x18006b3db
mov qword [rsp + 0x28], rdi
mov r9d, 0x37
mov r8, r14
mov qword [rsp + 0x20], rdi
xor edx, edx
xor ecx, ecx
call fcn.180053dd0
mov rbx, rax
test rax, rax
je 0x18006b3db
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov qword [rsp + 0x28], r12
mov r8, rbx
mov edx, 0xf5
mov qword [rsp + 0x20], rdi
xor ecx, ecx
call fcn.180042520
test eax, eax
jne 0x18006b3b3
mov r9, r13
mov qword [rsp + 0x20], rbx
lea r8, str._s__s
mov edx, 0x1f4
lea rcx, [rbp + 0xd0]
call fcn.18008e040
mov r8d, 0x30
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x98]
call fcn.180030880
test eax, eax
jne 0x18006b3b3
mov rcx, qword [rbp + 0x30]
lea r8, [rbp + 0x98]
mov rdx, rbx
call qword [rbp - 0x70]
mov qword [rsp + 0x28], rdi
mov r9d, 0x37
mov r8, r14
mov qword [rsp + 0x20], rdi
xor edx, edx
xor ecx, ecx
call fcn.180053dd0
mov rbx, rax
test rax, rax
jne 0x18006b340
add r15d, 0x55
cmp r15d, 0x187
jb 0x18006b2f0
mov r12, qword [rbp + 0x38]
mov r13, qword [rbp + 0x40]
jmp 0x18006a744
mov ecx, dword [rsp + 0x40]
mov r10, qword [rsp + 0x58]
mov r15, qword [rsp + 0x68]
mov r11, qword [rsp + 0x60]
jmp 0x18006a769
mov rax, qword [rbp - 0x70]
mov r11, qword [rbp - 0x70]
mov r12, qword [rbp - 0x70]
mov rcx, qword [rbp - 0x70]
mov qword [rbp + 0x48], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp + 0x50], rax
mov rax, qword [rbp - 8]
mov qword [rbp + 0x60], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp + 0x68], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp + 0x10], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp + 0x28], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp - 0x68], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp + 0x20], rax
mov qword [rsp + 0x58], r10
mov qword [rsp + 0x60], r11
mov qword [rsp + 0x48], r9
mov qword [rbp - 0x28], r12
mov qword [rsp + 0x68], r15
mov qword [rbp + 0x58], rcx
jmp 0x18006b482
mov r12, qword [rbp - 0x28]
mov ebx, dword [rbp]
imul eax, ebx, 0x1012
mov edx, ebx
mov dword [rsp + 0x50], ebx
mov dword [rbp - 0x10], eax
cmp ebx, eax
ja 0x18006a8f3
movsxd rcx, dword [rsp + 0x40]
mov ebx, dword [rbp - 0x10]
mov r13, rcx
mov qword [rbp - 8], rcx
nop dword [rax + rax]
cmp edx, 0x25ce3
ja 0x18006bad8
je 0x18006ba9b
cmp edx, 0x847c
ja 0x18006b6b7
je 0x18006abd5
cmp edx, 0x3df4
ja 0x18006b5d9
je 0x18006b5d0
mov eax, edx
sub eax, 0x82
je 0x18006b5a1
sub eax, 0x53
je 0x18006b572
sub eax, 0x17
je 0x18006c442
cmp eax, 0x2a
jne 0x18006b542
mov r14, qword [rbp + 0x48]
xor r9d, r9d
mov qword [rsp + 0x30], rdi
mov edx, 0x119
mov qword [rsp + 0x28], rdi
xor ecx, ecx
mov qword [rsp + 0x20], rdi
lea r8, [r14 + 0x58]
call fcn.180042520
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov edx, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x40]
mov r9, qword [rsp + 0x48]
imul eax, dword [rbp], 0x79
add edx, eax
mov dword [rsp + 0x50], edx
cmp edx, dword [rbp - 0x10]
ja 0x18006a8f3
mov r10, qword [rsp + 0x58]
mov r15, qword [rsp + 0x68]
mov r11, qword [rsp + 0x60]
mov r14, qword [rbp - 0x40]
mov r8, qword [rsp + 0x70]
jmp 0x18006b4b0
mov rax, qword [rbp - 0x68]
lea rcx, [rbp - 0x48]
mov r9d, 0xdb
mov qword [rbp - 0x48], rax
xor r8d, r8d
xor edx, edx
call fcn.180058800
mov r9, qword [rsp + 0x48]
mov ecx, dword [rsp + 0x40]
mov edx, dword [rsp + 0x50]
mov dword [r9 + 0x20], edi
jmp 0x18006b542
mov rcx, qword [rbp + 0x58]
lea rdx, str.broupdater::AutoUpdate::WaitForRssCheckMicromodeCompletion
mov rax, qword [rbp + 0x50]
inc dword [0x1800a3e40]
sub rax, rcx
add qword [rbp + 0x60], rax
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18006a890
jmp 0x18006b535
mov rcx, qword [rbp + 0x50]
jmp 0x18006b52f
cmp edx, 0x6582
je 0x18006b6ae
cmp edx, 0x7078
je 0x18006b5fe
cmp edx, 0x7b66
je 0x18006abd5
jmp 0x18006b542
mov rax, qword [rbp + 0x30]
lea r9, [rbp - 0x38]
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], r8
lea r8, [rbp + 0x88]
mov rdx, qword [rax]
mov rax, qword [rdx]
mov ecx, dword [rax]
mov eax, dword [r14]
mov dword [rbp + 0x88], eax
mov rax, qword [rdx + 0x10]
lea rdx, [rsp + 0x78]
mov dword [rsp + 0x78], ecx
mov ecx, 0xe0
mov qword [rsp + 0x20], rax
call fcn.1800745a0
mov qword [rsp + 0x68], rax
test rax, rax
jne 0x18006b535
mov r14d, 0x76
mov ecx, r14d
sub ecx, 0x76
je 0x18006b66b
cmp ecx, 1
je 0x18006abd5
jmp 0x18006b6a0
lea rax, [rsp + 0x78]
mov dword [rsp + 0x78], 1
lea r9, [rbp - 0x78]
mov qword [rsp + 0x20], rax
lea r8, [0x180092c27]
mov dword [rbp - 0x78], 0xc
lea rdx, [rbp - 0x60]
mov dword [rbp - 0x60], edi
mov ecx, 0xe3
call fcn.18000a640
inc r14d
cmp r14d, 0x78
jb 0x18006b658
jmp 0x18006b535
mov dword [r9 + 0x70], edi
jmp 0x18006b542
cmp edx, 0x19389
ja 0x18006b92d
je 0x18006b908
cmp edx, 0xca2f
je 0x18006b8ff
cmp edx, 0xe004
je 0x18006b87c
cmp edx, 0x12edc
je 0x18006b756
cmp edx, 0x14f90
jne 0x18006b542
mov eax, dword [rbp - 0x38]
mov r9d, edi
test eax, eax
jle 0x18006b72c
mov rdx, r11
mov r8, r15
nop word [rax + rax]
mov rax, qword [r8]
lea r8, [r8 + 8]
inc r9d
lea rdx, [rdx + 4]
mov ecx, dword [rax + 0x18]
mov dword [rdx - 4], ecx
mov eax, dword [rbp - 0x38]
cmp r9d, eax
jl 0x18006b710
lea r9, [rsp + 0x78]
mov dword [rsp + 0x78], eax
xor r8d, r8d
mov dword [rsp + 0x20], 0x57
mov rdx, r11
xor ecx, ecx
call fcn.180056f60
mov r12, rax
mov qword [rbp - 0x28], rax
jmp 0x18006b535
cmp dword [r9 + 0x10], 0
mov r13d, edi
mov dword [r9 + 0x50], edi
jle 0x18006c14f
mov r12, rdi
mov rdi, qword [rbp + 0x38]
nop
mov r15d, 0x32
nop word [rax + rax]
mov eax, r15d
sub eax, 0x32
je 0x18006b83b
sub eax, 1
je 0x18006b82e
sub eax, 1
je 0x18006b816
cmp eax, 1
jne 0x18006b843
cmp qword [rdi + 0x58], 0
je 0x18006b7b3
inc dword [r9 + 0x70]
jmp 0x18006b843
cmp qword [rdi + 0x30], 0
jne 0x18006b843
mov r14d, 0x5b
mov eax, r14d
sub eax, 0x5b
je 0x18006b7e4
cmp eax, 0x6c
jne 0x18006b802
movsxd rcx, dword [rdi + 0x18]
lea edx, [rax - 0x64]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rdi + 0x30], rax
jmp 0x18006b802
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, qword [rdi + 8]
lea rdx, str.SRCcolor.x__clamp_SRCcolor.x__16_235__
mov rcx, rax
call fcn.18008e110
add r14d, 0x6c
cmp r14d, 0x133
jb 0x18006b7c4
mov r9, qword [rsp + 0x48]
jmp 0x18006b843
mov eax, dword [rdi + 0x70]
test al, 1
je 0x18006b824
inc dword [r9 + 0x50]
mov eax, dword [rdi + 0x70]
test al, 2
je 0x18006b843
inc dword [r9 + 0x38]
jmp 0x18006b843
cmp qword [rdi + 0x48], 0
je 0x18006b843
inc dword [r9 + 0x20]
jmp 0x18006b843
mov rax, qword [r9 + 0x18]
mov rdi, qword [r12 + rax]
inc r15d
cmp r15d, 0x36
jb 0x18006b780
inc r13d
mov qword [rbp + 0x38], rdi
add r12, 8
cmp r13d, dword [r9 + 0x10]
jl 0x18006b770
mov r12, qword [rbp - 0x28]
xor edi, edi
mov r13, qword [rbp - 8]
mov ecx, dword [rsp + 0x40]
mov edx, dword [rsp + 0x50]
jmp 0x18006b542
movsxd rcx, dword [rbp - 0x38]
mov edx, 4
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rsp + 0x60], rax
test rax, rax
jne 0x18006b535
mov r14d, 0x8e
nop
mov ecx, r14d
sub ecx, 0x8d
je 0x18006abd5
cmp ecx, 1
jne 0x18006b8ee
mov dword [rsp + 0x78], ecx
lea rax, [rsp + 0x78]
mov ecx, 0xe3
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x78]
mov dword [rbp - 0x78], 0xc
lea r8, [0x180092c27]
mov dword [rbp - 0x60], edi
lea rdx, [rbp - 0x60]
call fcn.18000a640
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
dec r14d
cmp r14d, 0x8c
ja 0x18006b8a0
jmp 0x18006b535
mov dword [r9 + 0x38], edi
jmp 0x18006b542
movsxd rcx, dword [r9 + 0x20]
mov edx, 8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r9, qword [rsp + 0x48]
mov ecx, dword [rsp + 0x40]
mov edx, dword [rsp + 0x50]
mov qword [r9 + 0x28], rax
jmp 0x18006b542
cmp edx, 0x1bf1c
je 0x18006b9b0
cmp edx, 0x1f836
je 0x18006b98b
cmp edx, 0x22ea8
jne 0x18006b542
mov rax, qword [rbp + 0x30]
lea r9, [rbp - 0x48]
mov qword [rbp - 0x48], rdi
lea r8, [rbp - 0x80]
mov edx, 0x59
mov qword [rbp - 0x80], r12
mov rax, qword [rax]
mov rcx, qword [rax]
lea rax, [rbp + 0x90]
mov qword [rbp + 0x90], rcx
mov rcx, r10
mov qword [rsp + 0x20], rax
call fcn.180010940
mov rbx, rax
jmp 0x18006b535
movsxd rcx, dword [r9 + 0x20]
mov edx, 8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r9, qword [rsp + 0x48]
mov ecx, dword [rsp + 0x40]
mov edx, dword [rsp + 0x50]
mov qword [r9 + 0x30], rax
jmp 0x18006b542
mov rax, qword [rbp + 0x30]
lea r8, [rbp + 0x80]
mov r9, r15
mov dword [rsp + 0x20], 0x8b
lea rdx, [rsp + 0x78]
mov r10, qword [rax]
mov rax, qword [r10]
mov ecx, dword [rax]
mov eax, dword [rbp - 0x38]
mov dword [rbp + 0x80], eax
mov dword [rsp + 0x78], ecx
mov rcx, qword [r10 + 0x10]
call fcn.1800501e0
mov qword [rsp + 0x58], rax
test rax, rax
jne 0x18006b535
mov r14d, 0x75
nop dword [rax]
mov ecx, r14d
sub ecx, 0x75
je 0x18006ba54
sub ecx, 1
je 0x18006ba3e
sub ecx, 1
je 0x18006ba27
sub ecx, 1
je 0x18006ba22
cmp ecx, 1
je 0x18006a8f3
jmp 0x18006ba89
mov rsi, rdi
jmp 0x18006ba89
xor r8d, r8d
mov qword [rbp - 0x48], r12
mov edx, 0xfc
lea rcx, [rbp - 0x48]
call fcn.180003580
jmp 0x18006ba89
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x18006ba89
lea rax, [rsp + 0x78]
mov dword [rsp + 0x78], 1
lea r9, [rbp - 0x78]
mov qword [rsp + 0x20], rax
lea r8, [0x180092c27]
mov dword [rbp - 0x78], 0xc
lea rdx, [rbp - 0x60]
mov dword [rbp - 0x60], edi
mov ecx, 0xe3
call fcn.18000a640
inc r14d
cmp r14d, 0x7a
jb 0x18006ba00
jmp 0x18006b535
movsxd rcx, dword [r9 + 0x38]
mov edx, 8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rcx, qword [rsp + 0x48]
mov edx, 8
mov qword [rcx + 0x40], rax
movsxd rcx, dword [rcx + 0x38]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r9, qword [rsp + 0x48]
mov ecx, dword [rsp + 0x40]
mov edx, dword [rsp + 0x50]
mov qword [r9 + 0x48], rax
jmp 0x18006b542
cmp edx, 0x45444
ja 0x18006c5b0
je 0x18006c59e
cmp edx, 0x37d4c
ja 0x18006c3f4
je 0x18006c158
cmp edx, 0x29e34
je 0x18006c097
cmp edx, 0x2c190
je 0x18006c05a
cmp edx, 0x30dc0
je 0x18006bb57
cmp edx, 0x3263d
jne 0x18006b542
mov eax, dword [r9 + 0x10]
mov edx, 8
sub eax, dword [r9 + 0x70]
movsxd rcx, eax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r9, qword [rsp + 0x48]
mov ecx, dword [rsp + 0x40]
mov edx, dword [rsp + 0x50]
mov qword [r9 + 0x80], rax
jmp 0x18006b542
mov r14, qword [rbp + 8]
test r14, r14
je 0x18006c048
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x59
mov dword [rsp + 0x78], eax
nop dword [rax]
cmp eax, 0x59
je 0x18006bb9d
cmp eax, 0x1fa3
jne 0x18006c022
mov r14, qword [r14 + 8]
mov qword [rbp + 8], r14
jmp 0x18006c022
mov r14, qword [r14]
mov eax, edi
mov qword [rbp - 0x48], r14
mov dword [rbp - 0x60], eax
nop dword [rax]
mov r15d, 0x58
mov dword [rbp - 0x78], r15d
nop word [rax + rax]
cmp r15d, 0x58
jne 0x18006bff4
test eax, eax
jne 0x18006bbd4
mov r13, qword [r14 + 0x18]
jmp 0x18006bbd8
mov r13, qword [r14 + 0x20]
xor r8d, r8d
mov qword [rbp - 0x80], r13
lea r9, [rbp - 0x80]
xor ecx, ecx
lea edx, [r8 + 0x44]
call fcn.1800579b0
test eax, eax
jne 0x18006bff1
mov r12d, 0xa2
mov r15d, edi
nop
cmp r15d, 0x87
ja case.0x18006bc29.10
lea rdx, [0x180000000]
mov eax, r15d
movzx eax, byte [rdx + rax + 0x6caa4]
mov ecx, dword [rdx + rax*4 + 0x6ca78]
add rcx, rdx
jmp rcx
mov rax, qword [rbp + 0x28]
lea rcx, [rbp - 0x80]
xor r8d, r8d
mov qword [rbp - 0x80], rax
mov edx, 0xfc
call fcn.180003580
jmp case.0x18006bc29.10
test ebx, ebx
je case.0x18006bc29.10
mov r14d, 0x7a
mov eax, r14d
sub eax, 0x7a
je 0x18006bc95
sub eax, 0x66
je 0x18006bc6f
cmp eax, 0x66
je 0x18006abd5
jmp 0x18006bcc4
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [rbp - 0x28]
lea rcx, [rbp - 0x80]
xor r8d, r8d
mov qword [rbp - 0x80], rax
mov edx, 0xfc
call fcn.180003580
jmp 0x18006bcc4
lea rax, [rbp - 0x30]
mov dword [rbp - 0x30], 1
lea r9, [rbp - 0x58]
mov qword [rsp + 0x20], rax
lea r8, [0x180092c27]
mov dword [rbp - 0x58], ebx
lea rdx, [rbp - 0x80]
mov dword [rbp - 0x80], edi
mov ecx, 0xe3
call fcn.18000a640
add r14d, 0x66
cmp r14d, 0x1ac
jb 0x18006bc57
jmp 0x18006bfd4
mov eax, dword [rbp - 0x50]
lea rcx, [rbp - 0x58]
mov r9, qword [rbp + 0x10]
mov edx, 0xec
mov r8, qword [rsp + 0x70]
mov dword [rbp - 0x80], eax
mov rax, qword [rbp - 0x40]
mov qword [rbp + 0x28], r13
mov eax, dword [rax]
mov dword [rbp - 0x58], eax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x28]
mov qword [rsp + 0x20], rax
call fcn.18006a570
mov qword [rbp + 0x28], rax
jmp case.0x18006bc29.10
mov rax, qword [r14 + 8]
lea r8, [rbp + 0x78]
mov r9, qword [rsp + 0x68]
lea rdx, [rbp - 0x80]
mov dword [rsp + 0x20], 0x8b
mov ecx, dword [rax]
mov eax, dword [rbp - 0x38]
mov dword [rbp - 0x80], ecx
mov rcx, qword [r14 + 0x10]
mov dword [rbp + 0x78], eax
call fcn.1800501e0
mov rcx, rax
mov qword [rsp + 0x58], rax
mov rax, qword [rbp - 0x28]
lea r9, [rbp - 0x58]
mov qword [rbp - 0x30], rax
lea r8, [rbp - 0x30]
mov rax, qword [r14 + 8]
mov edx, 0x59
mov qword [rbp - 0x58], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x80], rdi
call fcn.180010940
mov ebx, eax
jmp case.0x18006bc29.10
mov rax, qword [rbp - 0x28]
lea r9, [rbp - 0x58]
mov rcx, qword [rsp + 0x58]
lea r8, [rbp - 0x30]
mov qword [rbp - 0x30], rax
mov edx, 0x59
mov rax, qword [rbp + 0x28]
mov qword [rbp - 0x80], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x58], rdi
call fcn.180010940
mov ebx, eax
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp case.0x18006bc29.10
mov eax, dword [rbp - 0x50]
lea r9, [rbp + 0x70]
mov dword [rbp - 0x80], eax
lea r8, [rbp + 0x40]
mov rax, qword [rbp - 0x40]
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x30], rdi
mov ecx, 0xe0
mov eax, dword [rax]
mov dword [rbp + 0x40], eax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x10]
mov qword [rsp + 0x20], rax
call fcn.1800745a0
mov ecx, dword [rbp + 0x70]
lea r8, [rbp + 0x18]
mov r9, qword [rsp + 0x68]
lea rdx, [rbp - 0x80]
mov dword [rbp - 0x80], ecx
mov ecx, dword [rbp - 0x38]
mov dword [rbp + 0x18], ecx
mov rcx, rax
mov qword [rbp + 0x68], rax
mov dword [rsp + 0x20], 0x8b
call fcn.1800501e0
mov qword [rsp + 0x58], rax
jmp case.0x18006bc29.10
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp case.0x18006bc29.10
test ebx, ebx
je 0x18006beef
mov r14d, 0x12b
nop dword [rax]
mov eax, r14d
sub eax, 0x12b
je 0x18006bea1
sub eax, 1
je 0x18006be9a
sub eax, 1
je 0x18006be7f
cmp eax, 1
je 0x18006abd5
jmp 0x18006bedb
mov rax, qword [rbp - 0x28]
lea rcx, [rbp + 0x10]
xor r8d, r8d
mov qword [rbp + 0x10], rax
mov edx, 0xfc
call fcn.180003580
jmp 0x18006bedb
mov rcx, qword [rsp + 0x68]
jmp 0x18006bed5
lea rax, [rbp - 0x80]
mov dword [rbp - 0x80], 1
lea r9, [rbp - 0x58]
mov qword [rsp + 0x20], rax
lea r8, [0x180092c27]
mov dword [rbp - 0x58], ebx
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], edi
mov ecx, 0xe3
call fcn.18000a640
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
inc r14d
cmp r14d, 0x12f
jb 0x18006be60
mov r14, qword [rbp - 0x48]
mov rax, qword [rbp - 0x40]
lea r9, [rbp - 0x50]
mov r8, qword [rsp + 0x70]
mov edx, 0xf6
mov eax, dword [rax]
mov dword [rbp - 0x58], eax
mov rax, qword [r14 + 8]
mov ecx, dword [rax]
mov rax, qword [r14 + 0x10]
mov dword [rbp - 0x80], ecx
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp - 0x58]
mov qword [rsp + 0x20], rax
call fcn.180009980
mov qword [rbp + 0x10], rax
jmp case.0x18006bc29.10
cmp qword [rbp + 0x10], 0
jne case.0x18006bc29.10
mov r14d, 0xd2
mov eax, r14d
sub eax, 0xd2
je 0x18006bf85
sub eax, 0x58
je 0x18006bf7e
sub eax, 0x58
je 0x18006bf63
cmp eax, 0x58
je 0x18006abd5
jmp 0x18006bfc3
mov rax, qword [rbp - 0x28]
lea rcx, [rbp - 0x80]
xor r8d, r8d
mov qword [rbp - 0x80], rax
mov edx, 0xfc
call fcn.180003580
jmp 0x18006bfc3
mov rcx, qword [rsp + 0x68]
jmp 0x18006bfbd
lea rax, [rbp - 0x80]
mov dword [rbp - 0x80], 1
lea r9, [rbp - 0x58]
mov qword [rsp + 0x20], rax
lea r8, [0x180092c27]
mov dword [rbp - 0x58], 0xc
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], edi
mov ecx, 0xe3
call fcn.18000a640
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add r14d, 0x58
cmp r14d, 0x232
jb 0x18006bf44
mov r14, qword [rbp - 0x48]
add r12d, 0xf
add r15d, 0xf
cmp r12d, 0x138
jb 0x18006bc00
mov r15d, dword [rbp - 0x78]
mov eax, dword [rbp - 0x60]
add r15d, 0x1b28
mov dword [rbp - 0x78], r15d
cmp r15d, 0x1b28
jbe 0x18006bbc0
inc eax
mov dword [rbp - 0x60], eax
cmp eax, 2
jl 0x18006bbb0
mov eax, dword [rsp + 0x78]
mov r14, qword [rbp + 8]
add eax, 0x1f4a
mov dword [rsp + 0x78], eax
cmp eax, 0x3e94
jbe 0x18006bb80
test r14, r14
jne 0x18006bb70
mov r13, qword [rbp - 8]
mov r15, qword [rsp + 0x68]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r12, qword [rbp - 0x28]
jmp 0x18006b535
movsxd rcx, dword [r9 + 0x50]
mov edx, 8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rcx, qword [rsp + 0x48]
mov edx, 8
mov qword [rcx + 0x58], rax
movsxd rcx, dword [rcx + 0x70]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r9, qword [rsp + 0x48]
mov ecx, dword [rsp + 0x40]
mov edx, dword [rsp + 0x50]
mov qword [r9 + 0x78], rax
jmp 0x18006b542
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
test ebx, ebx
je 0x18006b535
mov r14d, 0x6f
nop
cmp r14d, 0x6f
je 0x18006c0fc
cmp r14d, 0x2df6
je 0x18006c0dc
cmp r14d, 0x5b7d
je 0x18006c0d7
cmp r14d, 0x8904
je 0x18006a8f3
jmp 0x18006c136
mov rsi, rdi
jmp 0x18006c136
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r8d, r8d
mov qword [rbp - 0x48], r12
mov edx, 0xfc
lea rcx, [rbp - 0x48]
call fcn.180003580
jmp 0x18006c136
lea rax, [rbp - 0x80]
mov dword [rbp - 0x80], 1
lea r9, [rbp - 0x58]
mov qword [rsp + 0x20], rax
lea r8, [0x180092c27]
mov dword [rbp - 0x58], ebx
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], edi
mov ecx, 0xe3
call fcn.18000a640
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add r14d, 0x2d87
cmp r14d, 0xb61c
jbe 0x18006c0b0
jmp 0x18006b535
mov r13, qword [rbp - 8]
jmp 0x18006b542
mov r9, qword [rbp - 0x18]
mov eax, dword [r9]
add eax, dword [r14]
cmp dword [rbp - 0x38], eax
jne 0x18006c1ab
mov r14d, 0xd4
nop dword [rax]
cmp r14d, 0xd4
je 0x18006c188
cmp r14d, 0x49b4
jne 0x18006c196
mov qword [rbp + 0x20], r12
jmp 0x18006c196
mov rcx, r11
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r11, qword [rsp + 0x60]
add r14d, 0x48e0
cmp r14d, 0x91c0
jbe 0x18006c170
jmp 0x18006b535
mov r15d, 0xe3
cmp r15d, 0x50b1
ja 0x18006c2d8
je 0x18006c2ae
cmp r15d, 0xe3
je 0x18006c27c
cmp r15d, 0x1b7d
je 0x18006c214
cmp r15d, 0x3617
jne 0x18006c3d6
mov rcx, r11
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rbp - 0x18]
mov edx, 4
mov eax, dword [rcx]
add eax, dword [r14]
movsxd rcx, eax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r10, rax
mov qword [rsp + 0x58], rax
jmp 0x18006c3cd
mov rcx, qword [rbp - 0x18]
mov r9d, edi
mov ecx, dword [rcx]
test ecx, ecx
jle 0x18006c254
mov r10, qword [rbp - 0x70]
mov rdi, qword [rbp - 0x18]
nop dword [rax]
mov r8, qword [r10]
lea r10, [r10 + 8]
mov ecx, dword [r14]
add ecx, r9d
inc r9d
movsxd rdx, ecx
mov eax, dword [r8 + 0x18]
mov dword [r11 + rdx*4], eax
mov ecx, dword [rdi]
cmp r9d, ecx
jl 0x18006c230
xor edi, edi
add ecx, dword [r14]
lea r9, [rbp - 0x80]
mov dword [rbp - 0x80], ecx
xor r8d, r8d
xor ecx, ecx
mov dword [rsp + 0x20], 0x57
mov rdx, r11
call fcn.180056f60
mov qword [rbp + 0x20], rax
jmp 0x18006c3c8
cmp dword [r14], 0
mov r9d, edi
jle 0x18006c3d2
mov rdx, r11
nop dword [rax]
mov rax, qword [r8]
lea r8, [r8 + 8]
inc r9d
lea rdx, [rdx + 4]
mov ecx, dword [rax + 0x18]
mov dword [rdx - 4], ecx
cmp r9d, dword [r14]
jl 0x18006c290
jmp 0x18006c3d2
mov eax, dword [r9]
mov ecx, edi
add eax, dword [r14]
test eax, eax
jle 0x18006c3d6
mov rdx, r10
mov dword [rdx], ecx
lea rdx, [rdx + 4]
mov eax, dword [r9]
inc ecx
add eax, dword [r14]
cmp ecx, eax
jl 0x18006c2c1
jmp 0x18006c3d6
cmp r15d, 0x6b4b
je 0x18006c399
cmp r15d, 0x85e5
jne 0x18006c3d6
xor r8d, r8d
mov qword [rbp - 0x48], r12
mov edx, 0xfc
lea rcx, [rbp - 0x48]
call fcn.180003580
test ebx, ebx
je 0x18006c3c8
mov r14d, 0xd8
cmp r14d, 0xd8
je 0x18006c33b
cmp r14d, 0x91f8
je 0x18006c336
cmp r14d, 0x12318
je 0x18006a8f3
jmp 0x18006c383
mov rsi, rdi
jmp 0x18006c383
lea rax, [rbp - 0x80]
mov dword [rbp - 0x80], 1
lea r9, [rbp - 0x58]
mov qword [rsp + 0x20], rax
lea r8, [0x180092c27]
mov dword [rbp - 0x58], ebx
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], edi
mov ecx, 0xe3
call fcn.18000a640
mov rax, qword [rbp + 0x20]
lea rcx, [rbp - 0x48]
xor r8d, r8d
mov qword [rbp - 0x48], rax
mov edx, 0xfc
call fcn.180003580
add r14d, 0x9120
cmp r14d, 0x1b360
jbe 0x18006c315
mov r14, qword [rbp - 0x40]
jmp 0x18006c3c8
mov rax, qword [rbp + 0x20]
lea r8, [rbp - 0x48]
mov r9d, 0xd0
mov qword [rbp - 0x48], rax
mov rdx, r10
mov qword [rbp - 0x80], r12
lea rcx, [rbp - 0x80]
call fcn.180058800
mov rcx, qword [rsp + 0x58]
mov ebx, eax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r10, qword [rsp + 0x58]
mov r11, qword [rsp + 0x60]
mov r9, qword [rbp - 0x18]
mov r8, qword [rsp + 0x70]
add r15d, 0x1a9a
cmp r15d, 0x9f9c
jbe 0x18006c1b1
jmp 0x18006b535
cmp edx, 0x38aea
je 0x18006c45e
cmp edx, 0x3ecd8
je 0x18006c41b
cmp edx, 0x3ef97
jne 0x18006b542
mov dword [rbp - 0x20], edi
mov dword [rbp - 0x1c], edi
jmp 0x18006b542
mov eax, 0x71
cmp eax, 0x71
je 0x18006c432
cmp eax, 0x11f
je 0x18006a8f3
jmp 0x18006c436
mov rsi, qword [rbp + 0x20]
add eax, 0xae
cmp eax, 0x1cd
jb 0x18006c420
mov rax, qword [rbp + 0x30]
mov rax, qword [rax]
mov rdx, qword [rax + 0x18]
mov qword [rbp + 8], rdx
mov edx, dword [rsp + 0x50]
mov byte [rax + 0x24], 2
jmp 0x18006b542
cmp qword [r9 + 0x80], 0
je 0x18006c496
cmp qword [r9 + 0x78], 0
je 0x18006c496
cmp qword [r9 + 0x40], 0
je 0x18006c496
cmp qword [r9 + 0x48], 0
je 0x18006c496
cmp qword [r9 + 0x58], 0
je 0x18006c496
cmp qword [r9 + 0x30], 0
je 0x18006c496
cmp qword [r9 + 0x28], 0
jne 0x18006b542
mov r14d, IUnknown_GetWindow
nop dword [rax]
cmp r14d, 0xc10b
ja 0x18006c52d
je 0x18006c527
cmp r14d, 0xab
je 0x18006c4f2
cmp r14d, 0x30c3
je 0x18006c4e9
cmp r14d, 0x60db
je 0x18006c4e0
cmp r14d, 0x90f3
jne 0x18006c57d
mov rcx, qword [r9 + 0x30]
jmp 0x18006c572
mov rcx, qword [r9 + 0x28]
jmp 0x18006c572
mov rcx, qword [r9 + 0x18]
jmp 0x18006c572
lea rax, [rbp - 0x80]
mov dword [rbp - 0x80], 1
lea r9, [rbp - 0x58]
mov qword [rsp + 0x20], rax
lea r8, [0x180092c27]
mov dword [rbp - 0x58], 7
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], edi
mov ecx, 0xe3
call fcn.18000a640
jmp 0x18006c578
mov rcx, qword [r9 + 0x40]
jmp 0x18006c572
cmp r14d, 0xf123
je 0x18006c56e
cmp r14d, 0x1213b
je 0x18006c568
cmp r14d, 0x15153
je 0x18006c557
cmp r14d, 0x1816b
je 0x18006abd5
jmp 0x18006c57d
mov rcx, qword [r9 + 0x78]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rsp + 0x48]
jmp 0x18006c572
mov rcx, qword [r9 + 0x58]
jmp 0x18006c572
mov rcx, qword [r9 + 0x48]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r9, qword [rsp + 0x48]
add r14d, 0x3018
cmp r14d, 0x1b0d8
jbe 0x18006c4a0
mov ecx, dword [rsp + 0x40]
mov edx, dword [rsp + 0x50]
jmp 0x18006b542
mov ecx, edi
mov qword [rbp - 8], rdi
mov dword [rsp + 0x40], ecx
mov r13, rdi
jmp 0x18006b542
cmp edx, 0x5e6f8
ja 0x18006c8c9
je 0x18006c8ab
movsxd r14, dword [rbp - 0x1c]
movsxd r11, dword [rbp - 0x20]
mov r9, r14
mov r10, r11
cmp edx, 0x4b8f1
je 0x18006c751
cmp edx, 0x51d9e
je 0x18006c746
cmp edx, 0x5824b
jne 0x18006b53d
mov r15, qword [rsp + 0x48]
mov r8d, edi
cmp dword [r15 + 0x10], 0
jle 0x18006c66b
lea r9, [r14*8]
mov rdx, rdi
lea r10, [r11*8]
nop word [rax + rax]
mov rax, qword [r15 + 0x18]
mov rcx, qword [rdx + rax]
cmp qword [rcx + 0x58], 0
je 0x18006c640
mov rax, qword [r15 + 0x78]
inc r11d
mov qword [r10 + rax], rcx
add r10, 8
jmp 0x18006c652
mov rax, qword [r15 + 0x80]
inc r14d
mov qword [r9 + rax], rcx
add r9, 8
inc r8d
add rdx, 8
cmp r8d, dword [r15 + 0x10]
jl 0x18006c620
mov edx, dword [rsp + 0x50]
mov dword [rbp - 0x1c], r14d
mov dword [rbp - 0x20], r11d
cmp dword [r15 + 0x38], 0
mov r9, r15
jle 0x18006c716
mov r14d, 0xe3
nop
mov eax, r14d
sub eax, 0xe3
je 0x18006c6c5
cmp eax, 2
jne 0x18006c6f9
mov eax, dword [r9 + 0x38]
lea r8, [rbp - 0x80]
mov rcx, qword [r15 + 8]
lea rdx, [rbp - 0x58]
mov dword [rbp - 0x80], eax
mov r11, r15
mov eax, dword [r9]
mov r9, qword [r9 + 0x40]
mov dword [rbp - 0x58], eax
mov dword [rsp + 0x20], 0x7f
call fcn.180015440
mov r9, r15
mov qword [r15 + 0x68], rax
jmp 0x18006c6f9
mov eax, dword [r9 + 0x38]
lea r8, [rbp - 0x80]
mov rcx, qword [r15 + 8]
lea rdx, [rbp - 0x58]
mov dword [rbp - 0x80], eax
mov r11, r15
mov eax, dword [r9]
mov r9, qword [r9 + 0x48]
mov dword [rbp - 0x58], eax
mov dword [rsp + 0x20], 0x7f
call fcn.180015440
mov r9, r15
mov qword [r15 + 0x60], rax
inc r14d
cmp r14d, 0xe7
jb 0x18006c680
mov ecx, dword [rsp + 0x40]
mov edx, dword [rsp + 0x50]
jmp 0x18006b542
mov ecx, 0x70
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x6f
je 0x18006c732
cmp eax, 1
jne 0x18006c736
mov qword [r9 + 0x60], rdi
jmp 0x18006c736
mov qword [r9 + 0x68], rdi
dec ecx
cmp ecx, 0x6e
ja 0x18006c720
mov ecx, dword [rsp + 0x40]
jmp 0x18006b542
mov dword [rbp - 0x20], edi
mov dword [rbp - 0x1c], edi
jmp 0x18006b53d
mov r11, qword [rsp + 0x48]
mov r14d, edi
cmp dword [r11 + 0x10], 0
jle 0x18006c8f6
mov r12d, dword [rbp - 0x1c]
mov r11, rdi
mov edi, dword [rbp - 0x20]
nop
mov r8d, 0x4b
nop word [rax + rax]
mov eax, r8d
sub eax, 0x4b
je 0x18006c80c
cmp eax, 0x7c
jne 0x18006c86a
mov r15, qword [rbp + 0x38]
mov eax, dword [r15 + 0x70]
test al, 1
je 0x18006c7b8
mov rax, qword [rsp + 0x48]
inc r12d
mov rax, qword [rax + 0x58]
mov qword [rax + r9*8], r15
inc r9
mov eax, dword [r15 + 0x70]
test al, 4
je 0x18006c86a
mov edx, 0x122
mov eax, edx
sub eax, 0x122
je 0x18006c7de
cmp eax, 0x2d
jne 0x18006c7fb
inc ecx
mov dword [rsp + 0x40], ecx
inc r13
jmp 0x18006c7fb
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx + 0x48]
mov qword [rax + r13*8], r15
mov rcx, qword [rcx + 0x40]
mov rax, qword [r15 + 0x48]
mov qword [rcx + r13*8], rax
mov ecx, dword [rsp + 0x40]
add edx, 0x2d
cmp edx, 0x17c
jb 0x18006c7c5
mov qword [rbp - 8], r13
jmp 0x18006c86a
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx + 0x18]
mov r15, qword [r11 + rax]
mov qword [rbp + 0x38], r15
cmp qword [r15 + 0x48], 0
je 0x18006c86a
mov edx, 0x75
nop dword [rax]
mov eax, edx
sub eax, 0x75
je 0x18006c854
cmp eax, 0x1e
jne 0x18006c85c
mov rcx, qword [rcx + 0x30]
inc edi
mov rax, qword [r15 + 0x48]
mov qword [rcx + r10*8], rax
inc r10
mov rcx, qword [rsp + 0x48]
jmp 0x18006c85c
mov rax, qword [rcx + 0x28]
mov qword [rax + r10*8], r15
add edx, 0x1e
cmp edx, 0xb1
jb 0x18006c830
mov dword [rbp - 0x20], edi
mov ecx, dword [rsp + 0x40]
add r8d, 0x7c
cmp r8d, 0x143
jb 0x18006c780
mov r15, qword [rsp + 0x48]
inc r14d
add r11, 8
mov dword [rbp - 0x1c], r12d
cmp r14d, dword [r15 + 0x10]
jl 0x18006c770
mov r12, qword [rbp - 0x28]
xor edi, edi
mov edx, dword [rsp + 0x50]
mov r9, r15
jmp 0x18006b542
xor edx, edx
lea r8, [r9 + 0x88]
lea rcx, [r9 + 0x8c]
lea r9d, [rdx + 0x25]
call fcn.18000d0b0
jmp 0x18006b535
cmp edx, 0x64ba5
je 0x18006b542
cmp edx, 0x6b052
je 0x18006c8ee
cmp edx, 0x714ff
je 0x18006a8f3
jmp 0x18006b542
mov rsi, r9
jmp 0x18006b542
mov r9, r11
jmp 0x18006b542