Function at 0x18001b6f0
Capabilities:
Identify system language via api
Parse credit card information

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x528
mov eax, 0x8ed
mov word [rsp + 0x26c], ax
movzx eax, word [0x1800a6364]
mov dword [rsp + 0xa0], eax
mov qword [rsp + 0xb8], 0x5419
mov byte [rsp + 0x62], 0x27
mov eax, dword [0x1800a6384]
mov byte [rsp + 0x60], al
movzx eax, word [0x1800a6364]
mov qword [rsp + 0xa8], rax
movabs rax, 0x65064226e0c44
mov qword [rsp + 0xd8], rax
mov byte [rsp + 0x63], 0x34
mov qword [rsp + 0xf8], 0xb9
movzx eax, word [0x1800a6330]
mov word [rsp + 0x88], ax
mov qword [rsp + 0x90], 0x54
movsx eax, word [0x1800a6254]
mov dword [rsp + 0x7c], eax
movabs rax, 0xa4ab50b5a9482
mov qword [rsp + 0xf0], rax
movzx eax, word [0x1800a6244]
movsx rax, ax
mov qword [rsp + 0x98], rax
mov rax, qword [0x1800a6308]
mov qword [rsp + 0x80], rax
mov rax, qword [0x1800a62f8]
mov dword [rsp + 0x78], eax
movzx eax, word [0x1800a62c4]
mov byte [rsp + 0x6e], al
mov eax, dword [0x1800a62dc]
cdqe
mov qword [rsp + 0xb0], rax
movzx eax, byte [0x1800a6284]
mov byte [rsp + 0x61], al
mov rax, qword [0x1800a6328]
mov qword [rsp + 0xe0], rax
mov eax, dword [0x1800a6378]
mov dword [rsp + 0x74], eax
mov byte [rsp + 0x6c], 0x4a
movzx eax, byte [0x1800a637c]
mov byte [rsp + 0x6d], al
mov rax, qword [0x1800a6338]
mov word [rsp + 0x64], ax
movzx eax, word [0x1800a6380]
mov word [rsp + 0x70], ax
movzx eax, word [0x1800a6358]
mov word [rsp + 0x268], ax
mov byte [rsp + 0x12c], 0xad
mov dword [rsp + 0x3c8], 0x2336b0c2
mov dword [rsp + 0x378], 7
mov qword [rsp + 0x460], 9
mov dword [rsp + 0x37c], 0x9897
mov dword [rsp + 0x380], 0x3298
mov eax, 0xde
mov word [rsp + 0x28c], ax
mov eax, dword [0x1800a6330]
mov dword [rsp + 0x384], eax
mov byte [rsp + 0x120], 0x2a
movzx eax, byte [0x1800a61fb]
movsx eax, al
movzx ecx, byte [0x1800a622e]
movsx ecx, cl
cmp eax, ecx
jl 0x18001b8d7
mov dword [rsp + 0x218], 1
jmp 0x18001b8e2
mov dword [rsp + 0x218], 0
movzx eax, byte [0x1800a61fb]
movsx eax, al
cmp eax, 0x49
jl 0x18001b8fe
mov dword [rsp + 0x214], 1
jmp 0x18001b909
mov dword [rsp + 0x214], 0
mov eax, dword [rsp + 0x214]
cmp dword [rsp + 0x218], eax
jle 0x18001ba4e
lea rcx, [0x180086978]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov eax, eax
mov qword [0x1800a6300], rax
mov rax, qword [0x1800a6300]
test rax, rax
je 0x18001b94c
mov dword [rsp + 0x220], 1
jmp 0x18001b957
mov dword [rsp + 0x220], 0
mov rax, qword [0x1800a6300]
cmp rax, 2
je 0x18001b971
mov dword [rsp + 0x21c], 1
jmp 0x18001b97c
mov dword [rsp + 0x21c], 0
mov eax, dword [rsp + 0x21c]
cmp dword [rsp + 0x220], eax
jl 0x18001b9d4
cmp qword [0x1800a6328], 0
jne 0x18001b9a3
mov dword [rsp + 0x224], 1
jmp 0x18001b9ae
mov dword [rsp + 0x224], 0
mov eax, dword [0x1800a626c]
mov ecx, dword [rsp + 0x224]
sub ecx, eax
mov eax, ecx
movzx ecx, byte [rsp + 0x61]
movsx ecx, cl
sub eax, ecx
not eax
mov dword [rsp + 0xa0], eax
jmp 0x18001ba4c
movzx eax, byte [0x1800a622b]
test eax, eax
je 0x18001b9f3
mov eax, dword [0x1800a6378]
imul eax, eax, 0x40
cdqe
mov qword [0x1800a6330], rax
jmp 0x18001ba4c
xor eax, eax
cmp eax, 0xdc58
je 0x18001ba4c
cmp qword [rsp + 0xe0], 0
je 0x18001ba16
mov eax, dword [0x1800a6354]
mov dword [rsp + 0x228], eax
jmp 0x18001ba24
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0x228], eax
movzx eax, byte [rsp + 0x228]
mov byte [0x1800a622f], al
movzx eax, word [rsp + 0x64]
movabs rcx, 0x7c516a813801
sub rax, rcx
mov qword [rsp + 0xd8], rax
jmp 0x18001ba5a
mov eax, 0x2afe
mov word [0x1800a636c], ax
mov eax, dword [0x1803be0b0]
mov dword [rsp + 0x130], eax
mov eax, dword [rsp + 0x130]
add eax, 0x311
mov dword [rsp + 0x388], eax
movzx eax, byte [0x1800a6243]
mov byte [0x1800a61ff], al
mov eax, dword [rsp + 0x130]
add eax, 0x1ad
mov dword [rsp + 0x38c], eax
mov dword [rsp + 0x7c], 4
movzx eax, byte [rsp + 0x80]
mov byte [rsp + 0x62], al
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0xc0], eax
cmp dword [rsp + 0xc0], 0
je 0x18001bafc
cmp dword [rsp + 0xc0], 1
je 0x18001bb42
cmp dword [rsp + 0xc0], 2
je 0x18001bb6b
cmp dword [rsp + 0xc0], 3
je 0x18001bbad
cmp dword [rsp + 0xc0], 4
je 0x18001bbef
jmp 0x18001bc26
movzx eax, word [0x1800a62c4]
movzx eax, ax
test eax, eax
jne 0x18001bb17
mov dword [rsp + 0x22c], 1
jmp 0x18001bb22
mov dword [rsp + 0x22c], 0
movzx eax, word [rsp + 0x70]
cwde
mov ecx, dword [rsp + 0x22c]
add ecx, eax
mov eax, ecx
cdqe
mov qword [rsp + 0x90], rax
jmp 0x18001bc26
movzx eax, word [0x1800a62c4]
movzx eax, ax
mov ecx, dword [rsp + 0x74]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x74], eax
movsx eax, byte [rsp + 0x6e]
sar eax, 5
mov byte [0x1800a6243], al
jmp 0x18001bc26
mov rax, qword [0x1800a6370]
mov rcx, qword [0x1800a6348]
add rcx, rax
mov rax, rcx
mov dword [0x1800a62dc], eax
movzx eax, word [rsp + 0x64]
mov rcx, qword [0x1800a6308]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x1800a6308]
sub rcx, rax
mov rax, rcx
mov qword [0x1800a6308], rax
jmp 0x18001bc26
movzx eax, byte [0x1800a61fb]
movsx rax, al
mov rcx, qword [0x1800a6328]
imul rcx, rax
mov rax, rcx
mov rcx, qword [0x1800a6328]
add rcx, rax
mov rax, rcx
mov qword [0x1800a6328], rax
imul rax, qword [rsp + 0x80], 0x8353
mov qword [0x1800a6320], rax
jmp 0x18001bc26
imul rax, qword [rsp + 0x90], 0xf506
mov word [0x1800a6364], ax
movsxd rax, dword [0x1800a626c]
movabs rcx, 0x3581ff484d96f
sub rax, rcx
movsx rcx, byte [rsp + 0x60]
xor rcx, rax
mov rax, rcx
mov byte [rsp + 0x60], al
mov eax, dword [rsp + 0x130]
add eax, 0x399
mov dword [rsp + 0x390], eax
mov eax, dword [0x1803be0b0]
mov dword [rsp + 0x134], eax
movabs rax, 0xd4414552d280a
mov rcx, qword [rsp + 0xb8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x90], rax
mov rax, qword [0x1800a6370]
shr rax, 7
mov qword [0x1800a62f0], rax
mov eax, dword [rsp + 0x134]
add eax, 0x441
mov dword [rsp + 0x394], eax
movsx eax, byte [rsp + 0x60]
test eax, eax
je 0x18001bd43
movzx eax, word [0x1800a6360]
mov rcx, qword [rsp + 0x98]
cmp rax, rcx
jg 0x18001bcb9
mov dword [rsp + 0x13c], 1
jmp 0x18001bcc4
mov dword [rsp + 0x13c], 0
movzx eax, word [0x1800a6360]
cmp eax, 0x3c
jg 0x18001bcdd
mov dword [rsp + 0x230], 1
jmp 0x18001bce8
mov dword [rsp + 0x230], 0
mov eax, dword [rsp + 0x230]
cmp dword [rsp + 0x13c], eax
jge 0x18001bd41
mov eax, 0xffff9a67
mov word [0x1800a6244], ax
mov rax, qword [rsp + 0xe0]
not rax
mov rcx, qword [0x1800a6358]
imul rcx, rax
mov rax, rcx
movsx ecx, byte [0x1800a6243]
movzx edx, word [0x1800a6360]
add ecx, edx
movsxd rcx, ecx
sub rax, rcx
add rax, qword [0x1800a6308]
mov qword [0x1800a6358], rax
jmp 0x18001bda8
cmp qword [rsp + 0xe0], 0
jne 0x18001bd87
movzx eax, word [0x1800a6380]
cwde
test eax, eax
jne 0x18001bd67
mov dword [rsp + 0x140], 1
jmp 0x18001bd72
mov dword [rsp + 0x140], 0
movzx eax, word [0x1800a62c4]
movzx eax, ax
add eax, dword [rsp + 0x140]
test eax, eax
jne 0x18001bda8
imul rax, qword [0x1800a6330], 0x99
mov qword [rsp + 0x80], rax
movzx eax, byte [0x1800a61fe]
mov word [0x1800a636c], ax
mov eax, dword [rsp + 0x134]
add eax, 0x1fd
mov dword [rsp + 0x118], eax
mov rax, qword [0x1800a62f8]
test rax, rax
je 0x18001bdfb
mov eax, 0x9bfc62f6
mov rcx, qword [rsp + 0xf8]
and rcx, rax
mov rax, rcx
mov byte [0x1800a622f], al
movzx eax, word [0x1800a6350]
movzx eax, ax
add eax, 0xa4f67ffa
mov eax, eax
mov qword [rsp + 0x80], rax
jmp 0x18001be1e
mov rax, qword [0x1800a6330]
add rax, 0x3aefe397
mov dword [0x1800a6384], eax
mov eax, dword [0x1800a6368]
add eax, 0x971f349b
mov word [rsp + 0x64], ax
mov eax, dword [rsp + 0x134]
add eax, 0x11d
mov dword [rsp + 0x278], eax
movzx eax, word [0x1800a6360]
cmp rax, qword [0x1800a6320]
je 0x18001be4e
mov dword [rsp + 0x148], 1
jmp 0x18001be59
mov dword [rsp + 0x148], 0
movzx eax, word [0x1800a6360]
cmp eax, 0x10
je 0x18001be72
mov dword [rsp + 0x144], 1
jmp 0x18001be7d
mov dword [rsp + 0x144], 0
mov eax, dword [rsp + 0x144]
cmp dword [rsp + 0x148], eax
jne 0x18001beac
movzx eax, byte [rsp + 0x63]
movzx eax, al
mov ecx, 2
imul rcx, rcx, 0x2b6b
lea rdx, [0x1803ec770]
mov word [rdx + rcx], ax
mov eax, dword [0x1803be0b0]
mov dword [rsp + 0x100], eax
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov eax, eax
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0xa8]
test rax, rax
jae 0x18001bee3
mov dword [rsp + 0x150], 1
jmp 0x18001beee
mov dword [rsp + 0x150], 0
mov rax, qword [rsp + 0xa8]
cmp rax, 6
jae 0x18001bf09
mov dword [rsp + 0x14c], 1
jmp 0x18001bf14
mov dword [rsp + 0x14c], 0
mov eax, dword [rsp + 0x14c]
cmp dword [rsp + 0x150], eax
jle 0x18001bf52
lea rax, [rsp + 0x478]
lea rcx, str.OAuthResponse::Fil
mov rdi, rax
mov rsi, rcx
mov ecx, 0x13
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x478]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [rsp + 0x74], eax
mov eax, dword [rsp + 0x100]
add eax, 0x3ae
mov dword [rsp + 0x1b0], eax
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
mov word [rsp + 0x70], ax
mov eax, dword [rsp + 0x100]
add eax, 0x342
mov dword [rsp + 0x1ac], eax
movzx eax, byte [0x1800a61fb]
movsx rax, al
mov qword [rsp + 0xf0], rax
mov rax, qword [0x1800a62e0]
shl rax, 4
mov byte [rsp + 0x6c], al
mov eax, dword [rsp + 0x100]
add eax, 0x260
mov dword [rsp + 0x3c4], eax
movsx eax, byte [0x1800a622f]
add eax, 0x2fa19496
mov word [rsp + 0x70], ax
mov eax, dword [0x1803be0b0]
mov dword [rsp + 0x104], eax
lea rax, [rsp + 0x490]
lea rcx, [0x1800869a0]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x13
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x490]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov byte [rsp + 0x60], al
mov eax, dword [rsp + 0x104]
add eax, 0xc6
mov dword [rsp + 0x1b8], eax
movzx eax, word [0x1800a636c]
dec ax
mov word [0x1800a636c], ax
mov eax, dword [rsp + 0x104]
add eax, 0x29b
mov dword [rsp + 0x1b4], eax
mov eax, dword [rsp + 0x104]
add eax, 0x87
mov dword [rsp + 0x398], eax
mov eax, dword [0x1803be0b0]
mov dword [rsp + 0x108], eax
mov rax, qword [rsp + 0xe0]
add rax, 0x9b28
mov byte [rsp + 0x6e], al
mov eax, dword [rsp + 0x108]
add eax, 0x2a6
mov dword [rsp + 0x39c], eax
mov rax, qword [rsp + 0xa8]
not rax
movzx ecx, word [rsp + 0x64]
add ecx, 0x591e136
movsxd rcx, ecx
imul rax, rcx
movzx ecx, word [0x1800a6360]
mov edx, 0xdc
sub edx, ecx
mov ecx, edx
movzx edx, byte [0x1800a622e]
movsx edx, dl
sub ecx, edx
movsxd rcx, ecx
add rax, rcx
mov word [0x1800a6380], ax
mov rax, qword [0x1800a6300]
mov rcx, qword [0x1800a6348]
imul rcx, rax
mov rax, rcx
mov qword [0x1800a6348], rax
mov eax, dword [rsp + 0x108]
add eax, 0x2bc
mov dword [rsp + 0x27c], eax
mov eax, dword [rsp + 0x108]
add eax, 0x398
mov dword [rsp + 0x1c4], eax
mov eax, dword [0x1803be0b0]
mov dword [rsp + 0x10c], eax
mov eax, dword [rsp + 0x10c]
add eax, 0x1b4
mov dword [rsp + 0x3a0], eax
mov rax, qword [rsp + 0x98]
test rax, rax
je 0x18001c152
movzx eax, word [0x1800a6244]
movsx rax, ax
mov rcx, rax
call qword [sym.imp.USER32.dll_GetTopWindow]
mov eax, eax
mov qword [0x1800a6340], rax
mov eax, dword [rsp + 0x10c]
add eax, 0x1f1
mov dword [rsp + 0xc8], eax
movzx eax, word [0x1800a6380]
cwde
movzx ecx, word [0x1800a6284]
or eax, ecx
test eax, eax
jne 0x18001c188
mov qword [rsp + 0x2b0], 1
jmp 0x18001c194
mov qword [rsp + 0x2b0], 0
mov rax, qword [0x1800a6338]
mov ecx, 0xc8d3016d
sub rax, rcx
sub rax, qword [rsp + 0x2b0]
movzx ecx, word [0x1800a62c4]
movzx ecx, cx
movsx edx, word [0x1800a636c]
xor ecx, edx
movsxd rcx, ecx
movzx edx, word [rsp + 0x64]
xor rdx, qword [rsp + 0x90]
not rdx
add rcx, rdx
or rax, rcx
mov qword [rsp + 0x98], rax
mov eax, dword [rsp + 0x10c]
add eax, 0x25f
mov dword [rsp + 0x1c8], eax
mov rax, qword [0x1800a62f8]
movzx ecx, byte [rsp + 0x63]
movzx ecx, cl
lea rax, [rcx + rax + 0xc1ed]
mov byte [rsp + 0x63], al
movzx eax, byte [0x1800a622b]
movsx ecx, word [rsp + 0x88]
not ecx
imul eax, ecx
cdqe
mov qword [rsp + 0xd8], rax
mov eax, dword [0x1803be0b0]
mov dword [rsp + 0x110], eax
mov qword [rsp + 0xd8], 4
mov eax, dword [0x1800a6340]
mov dword [0x1800a626c], eax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x238], rax
cmp qword [rsp + 0x238], 0
je 0x18001c2a8
cmp qword [rsp + 0x238], 1
je 0x18001c2d5
cmp qword [rsp + 0x238], 2
je 0x18001c310
cmp qword [rsp + 0x238], 3
je 0x18001c335
cmp qword [rsp + 0x238], 4
je 0x18001c341
jmp 0x18001c36c
movzx eax, word [0x1800a6360]
mov rcx, qword [0x1800a6308]
xor rcx, rax
mov rax, rcx
mov rcx, qword [0x1800a6308]
sub rcx, rax
mov rax, rcx
mov qword [0x1800a6308], rax
jmp 0x18001c36c
mov rax, qword [0x1800a62e8]
mov rcx, qword [0x1800a62e8]
sub rcx, rax
mov rax, rcx
mov qword [0x1800a62e8], rax
mov rax, qword [rsp + 0xf8]
mov rcx, qword [rsp + 0x80]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x80], rax
jmp 0x18001c36c
movzx eax, word [0x1800a6284]
sub rax, qword [rsp + 0xb8]
movzx ecx, word [0x1800a6284]
sub rcx, rax
mov rax, rcx
mov word [0x1800a6284], ax
jmp 0x18001c36c
mov dword [0x1800a637c], 0xd9afcaa5
jmp 0x18001c36c
mov rax, qword [0x1800a62e0]
sub rax, 0xae
mov qword [0x1800a6330], rax
movsx rax, word [rsp + 0x88]
xor rax, qword [0x1800a6328]
mov qword [0x1800a62e0], rax
mov eax, dword [rsp + 0x110]
add eax, 0xce9d
mov dword [rsp + 0x3a4], eax
call qword [sym.imp.USER32.dll_GetFocus]
mov qword [rsp + 0x2b8], rax
cmp qword [rsp + 0x2b8], 0
je 0x18001c3ae
mov rcx, qword [rsp + 0x2b8]
call qword [sym.imp.USER32.dll_GetWindowDC]
mov qword [rsp + 0x448], rax
mov eax, dword [rsp + 0x110]
add eax, 0xdb
mov dword [rsp + 0x3a8], eax
lea rax, [rsp + 0x4a8]
lea rcx, str.api_ms_win_core_sy
mov rdi, rax
mov rsi, rcx
mov ecx, 0x13
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x4a8]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
cdqe
mov qword [rsp + 0x90], rax
mov eax, dword [rsp + 0x110]
add eax, 0xee
mov dword [rsp + 0x270], eax
mov byte [0x1800a622b], 0xcb
mov eax, dword [0x1800a62dc]
not eax
mov ecx, dword [rsp + 0x78]
cmp eax, ecx
je 0x18001c42d
mov qword [rsp + 0x2c0], 1
jmp 0x18001c439
mov qword [rsp + 0x2c0], 0
mov rax, qword [rsp + 0x2c0]
mov rcx, qword [0x1800a6310]
sub rcx, rax
mov rax, rcx
test rax, rax
jne 0x18001c45e
cmp qword [rsp + 0xf8], 0
je 0x18001c46b
movzx eax, byte [rsp + 0x63]
dec al
mov byte [rsp + 0x63], al
jmp 0x18001c489
mov rax, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xf8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xf8], rax
mov eax, dword [rsp + 0x270]
imul eax, eax, 0x3b96
mov ecx, 0x3765d8
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x274], eax
mov eax, dword [0x1803be0b0]
mov dword [rsp + 0x114], eax
mov eax, dword [rsp + 0x74]
cdqe
mov rcx, qword [rsp + 0x98]
add rcx, rax
mov rax, rcx
mov byte [0x1800a61ff], al
movzx eax, word [0x1800a6284]
mov rcx, qword [rsp + 0x98]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x98]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x98], rax
mov eax, dword [rsp + 0x114]
add eax, 0x2a5
mov dword [rsp + 0x290], eax
movsx rax, word [0x1800a6254]
cmp qword [0x1800a6340], rax
jl 0x18001c529
mov dword [rsp + 0x158], 1
jmp 0x18001c534
mov dword [rsp + 0x158], 0
cmp qword [0x1800a6340], 0x35
jl 0x18001c54b
mov dword [rsp + 0x154], 1
jmp 0x18001c556
mov dword [rsp + 0x154], 0
mov eax, dword [rsp + 0x154]
cmp dword [rsp + 0x158], eax
jne 0x18001c58d
mov rax, qword [0x1800a6328]
sub rax, 0x41
movzx ecx, byte [0x1800a622e]
movsx rcx, cl
sub rcx, rax
mov rax, rcx
mov byte [0x1800a622e], al
jmp 0x18001c657
mov eax, dword [0x1800a6378]
cdqe
mov rcx, qword [rsp + 0xf0]
not rcx
cmp rax, rcx
jae 0x18001c5b2
mov dword [rsp + 0x15c], 1
jmp 0x18001c5bd
mov dword [rsp + 0x15c], 0
cmp dword [rsp + 0x15c], 0xfffffffe
jle 0x18001c5ec
movsx eax, byte [0x1800a6243]
movzx ecx, byte [rsp + 0x63]
movzx ecx, cl
and eax, ecx
mov dword [rsp + 0x74], eax
movzx eax, byte [rsp + 0x80]
mov byte [0x1800a61fb], al
jmp 0x18001c657
mov eax, dword [rsp + 0x74]
not eax
test eax, eax
je 0x18001c622
movsx rax, word [rsp + 0x88]
mov rcx, qword [0x1800a6300]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x1800a6300]
sub rcx, rax
mov rax, rcx
mov qword [0x1800a6300], rax
jmp 0x18001c657
mov rax, qword [rsp + 0xa8]
not rax
test rax, rax
je 0x18001c657
movzx eax, byte [rsp + 0x61]
movsx eax, al
shl eax, 4
cdqe
mov qword [rsp + 0x98], rax
movzx eax, byte [rsp + 0x63]
movzx eax, al
mov qword [rsp + 0xd8], rax
mov eax, dword [rsp + 0x114]
add eax, 0x323
mov dword [rsp + 0x288], eax
movzx eax, byte [0x1800a61fe]
not eax
cdqe
mov rcx, qword [0x1800a62e0]
cmp rax, rcx
je 0x18001c690
mov eax, dword [0x1803be0b0]
mov qword [0x1800a62f8], rax
jmp 0x18001c6af
cmp qword [rsp + 0xb0], 0
je 0x18001c6af
mov byte [0x1800a61fe], 0x99
mov eax, dword [rsp + 0x74]
sub eax, 0x39
mov dword [0x1800a6384], eax
mov eax, dword [rsp + 0x114]
add eax, 0x14a
mov dword [rsp + 0x1d0], eax
mov eax, dword [rsp + 0x274]
mov dword [rsp + 0x68], eax
mov qword [rsp + 0x3d8], 0
call qword [sym.imp.USER32.dll_GetCursor]
mov qword [rsp + 0x3d0], rax
cmp qword [rsp + 0x3d0], 0
je 0x18001c707
mov rcx, qword [rsp + 0x3d8]
call qword [sym.imp.USER32.dll_GetCaretPos]
mov dword [rsp + 0x3ac], eax
movsx eax, word [0x1800a636c]
test eax, eax
jl 0x18001c71f
mov dword [rsp + 0x164], 1
jmp 0x18001c72a
mov dword [rsp + 0x164], 0
movsx eax, word [0x1800a636c]
cmp eax, 8
jl 0x18001c743
mov dword [rsp + 0x160], 1
jmp 0x18001c74e
mov dword [rsp + 0x160], 0
mov eax, dword [rsp + 0x160]
cmp dword [rsp + 0x164], eax
jg 0x18001c87f
mov eax, dword [rsp + 0x74]
cdqe
cmp qword [0x1800a6348], rax
jb 0x18001c7ae
movabs rax, 0x6c91118ecf7d7
mov rcx, qword [rsp + 0xb0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x90], rax
movzx eax, byte [rsp + 0x62]
movsx eax, al
movzx ecx, word [0x1800a6350]
movzx ecx, cx
add eax, ecx
mov byte [rsp + 0x62], al
jmp 0x18001c87d
movzx eax, word [rsp + 0x70]
cwde
test eax, eax
je 0x18001c7c9
mov rax, qword [rsp + 0xd8]
mov byte [rsp + 0x6c], al
jmp 0x18001c87d
mov eax, dword [rsp + 0x78]
cdqe
cmp qword [rsp + 0x80], rax
jge 0x18001c7e6
mov dword [rsp + 0x16c], 1
jmp 0x18001c7f1
mov dword [rsp + 0x16c], 0
cmp qword [rsp + 0x90], 0xffffffffffffffa4
jge 0x18001c809
mov dword [rsp + 0x168], 1
jmp 0x18001c814
mov dword [rsp + 0x168], 0
mov eax, dword [rsp + 0x168]
cmp dword [rsp + 0x16c], eax
jl 0x18001c87d
movzx eax, word [rsp + 0x64]
test eax, eax
jne 0x18001c83b
mov qword [rsp + 0x2a8], 1
jmp 0x18001c847
mov qword [rsp + 0x2a8], 0
mov rax, qword [0x1800a6370]
not rax
mov rcx, qword [rsp + 0x2a8]
xor rcx, rax
mov rax, rcx
or rax, qword [rsp + 0x80]
mov dword [0x1800a6384], eax
mov eax, dword [rsp + 0x74]
sub eax, 0x9686
mov word [0x1800a636c], ax
jmp 0x18001c89f
movzx eax, byte [rsp + 0x62]
movsx eax, al
mov ecx, dword [0x1800a6378]
add eax, ecx
movzx ecx, byte [rsp + 0x62]
movsx ecx, cl
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x62], al
mov eax, dword [rsp + 0x7c]
test eax, eax
je 0x18001c925
mov qword [0x1800a6338], 0
mov eax, 0xc3808a8b
mov rcx, qword [0x1800a6358]
add rcx, rax
mov rax, rcx
movsx rcx, byte [0x1800a6243]
sub rcx, rax
mov rax, rcx
mov byte [0x1800a6243], al
mov rax, qword [rsp + 0x98]
mov rcx, qword [0x1800a6370]
sub rax, rcx
mov qword [rsp + 0x98], rax
mov rax, qword [0x1800a6338]
mov qword [rsp + 0x3e0], rax
cmp qword [rsp + 0x3e0], 0
je 0x18001c90e
jmp 0x18001c923
movzx eax, byte [0x1800a61fb]
movsx eax, al
add eax, 0xe54e
mov dword [0x1800a6368], eax
jmp 0x18001c941
movabs rax, 0x71887b8ae3
mov rcx, qword [rsp + 0x80]
and rcx, rax
mov rax, rcx
mov byte [rsp + 0x6c], al
mov rax, qword [rsp + 0x540]
mov qword [rsp + 0x3e8], rax
mov qword [rsp + 0x250], 0xffffffffffffffff
inc qword [rsp + 0x250]
mov rax, qword [rsp + 0x3e8]
mov rcx, qword [rsp + 0x250]
cmp byte [rax + rcx], 0
jne 0x18001c95d
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x2e0], rax
mov eax, dword [0x1800a6378]
mov byte [0x1800a61fb], al
mov rax, qword [rsp + 0x548]
mov qword [rsp + 0x3f0], rax
mov qword [rsp + 0x258], 0xffffffffffffffff
inc qword [rsp + 0x258]
mov rax, qword [rsp + 0x3f0]
mov rcx, qword [rsp + 0x258]
cmp byte [rax + rcx], 0
jne 0x18001c9b3
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0x2f0], rax
mov rax, qword [rsp + 0x90]
mov rcx, qword [0x1800a6310]
add rcx, rax
mov rax, rcx
mov qword [0x1800a6310], rax
mov eax, dword [0x1800a6384]
cdqe
movabs rcx, 0x48c9a36c3d3be
imul rax, rcx
mov byte [0x1800a622f], al
mov rax, qword [rsp + 0x550]
mov qword [rsp + 0x3f8], rax
mov qword [rsp + 0x240], 0xffffffffffffffff
inc qword [rsp + 0x240]
mov rax, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x240]
cmp byte [rax + rcx], 0
jne 0x18001ca35
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x300], rax
mov qword [rsp + 0x450], 0
movzx eax, word [0x1800a622c]
movzx eax, ax
mov eax, dword [rsp + 0xa0]
cdqe
movabs rcx, 0x67fdfc423d424
sub rax, rcx
mov qword [rsp + 0xd8], rax
mov eax, dword [0x1800a6378]
imul eax, eax, 0xbbca829b
movsx ecx, word [0x1800a636c]
add ecx, eax
mov eax, ecx
mov word [0x1800a636c], ax
lea rax, [rsp + 0x4c0]
mov rdi, rax
xor eax, eax
mov ecx, 0x58
rep stosb byte [rdi], al
mov qword [rsp + 0x90], 3
movabs rax, 0xadfa2c45916a6
mov rcx, qword [0x1800a6340]
imul rcx, rax
mov rax, rcx
mov qword [0x1800a6310], rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x248], rax
cmp qword [rsp + 0x248], 0
je 0x18001cb3d
cmp qword [rsp + 0x248], 1
je 0x18001cb8c
cmp qword [rsp + 0x248], 2
je 0x18001cbab
cmp qword [rsp + 0x248], 3
je 0x18001cbe4
jmp 0x18001cbf4
movzx eax, byte [rsp + 0x63]
movzx eax, al
xor rax, qword [0x1800a6328]
mov byte [rsp + 0x63], al
mov rax, qword [rsp + 0x98]
test rax, rax
je 0x18001cb6e
mov rax, qword [0x1800a6348]
mov qword [rsp + 0x2c8], rax
jmp 0x18001cb7e
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x2c8], rax
movzx eax, byte [rsp + 0x2c8]
mov byte [rsp + 0x62], al
jmp 0x18001cbf4
movzx eax, word [rsp + 0x64]
movzx ecx, byte [rsp + 0x62]
movsx ecx, cl
add eax, ecx
movzx ecx, word [rsp + 0x64]
add ecx, eax
mov eax, ecx
mov word [rsp + 0x64], ax
jmp 0x18001cbf4
mov dword [0x1800a6354], 4
movzx eax, byte [rsp + 0x61]
movsx rax, al
mov rcx, qword [rsp + 0xf0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xf0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xf0], rax
jmp 0x18001cbf4
mov eax, dword [0x1800a626c]
shl eax, 2
mov word [0x1800a62c4], ax
mov qword [rsp + 0x2a0], 0
movzx eax, byte [0x1800a622b]
mov rcx, qword [0x1800a6310]
add rcx, rax
mov rax, rcx
mov dword [rsp + 0x7c], eax
mov qword [rsp + 0x410], 0x1f0fff
mov byte [0x1800a61fb], 4
movzx eax, byte [rsp + 0x61]
movsx eax, al
sub eax, 0xbcdf0e93
mov dword [rsp + 0x78], eax
movzx eax, byte [0x1800a61fb]
mov byte [rsp + 0xc4], al
cmp byte [rsp + 0xc4], 0
je 0x18001cc7e
cmp byte [rsp + 0xc4], 1
je 0x18001cc92
cmp byte [rsp + 0xc4], 2
je 0x18001ccaa
cmp byte [rsp + 0xc4], 3
je 0x18001ccbe
cmp byte [rsp + 0xc4], 4
je 0x18001ccda
jmp 0x18001cce9
mov eax, dword [0x1800a62dc]
mov ecx, dword [rsp + 0x7c]
add eax, ecx
mov dword [0x1800a62dc], eax
jmp 0x18001cce9
mov rax, qword [rsp + 0x98]
mov ecx, 0xb79731e5
add rax, rcx
mov byte [0x1800a622e], al
jmp 0x18001cce9
movsx eax, word [0x1800a6254]
add eax, 0xb4d1
mov dword [0x1800a6384], eax
jmp 0x18001cce9
mov rax, qword [0x1800a62f8]
mov ecx, 0xc2d87832
imul rax, rcx
not rax
mov qword [0x1800a6340], rax
jmp 0x18001cce9
mov rax, qword [0x1800a6328]
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0x408], 0x1f03ff
mov rax, qword [0x1800a62e8]
cmp qword [0x1800a6328], rax
jne 0x18001cd12
mov dword [rsp + 0x174], 1
jmp 0x18001cd1d
mov dword [rsp + 0x174], 0
cmp qword [0x1800a6328], 0x56
jne 0x18001cd34
mov dword [rsp + 0x170], 1
jmp 0x18001cd3f
mov dword [rsp + 0x170], 0
mov eax, dword [rsp + 0x170]
cmp dword [rsp + 0x174], eax
jge 0x18001cd6e
mov eax, dword [rsp + 0x7c]
cdqe
mov rcx, qword [0x1800a6370]
sub rcx, rax
mov rax, rcx
mov qword [0x1800a6370], rax
jmp 0x18001ce49
mov rax, qword [0x1800a6318]
mov rcx, qword [0x1800a6308]
sub rcx, rax
mov rax, rcx
test rax, rax
je 0x18001ce49
movzx eax, byte [0x1800a61fb]
movsx rax, al
movabs rcx, 0x4c3b1b2b595e4
add rax, rcx
mov byte [rsp + 0x6d], al
movzx eax, word [0x1800a62c4]
movzx eax, ax
mov rcx, qword [rsp + 0xa8]
and rcx, qword [rsp + 0xb8]
add rax, rcx
test rax, rax
jne 0x18001cdd7
mov qword [rsp + 0x2d8], 1
jmp 0x18001cde3
mov qword [rsp + 0x2d8], 0
movzx eax, word [rsp + 0x70]
cwde
test eax, eax
jne 0x18001cdfb
mov qword [rsp + 0x2d0], 1
jmp 0x18001ce07
mov qword [rsp + 0x2d0], 0
movzx eax, byte [0x1800a61fb]
movsx rax, al
sub rax, qword [rsp + 0xb8]
mov rcx, qword [0x1800a62e0]
mov rdx, qword [rsp + 0x2d0]
sub rdx, rcx
mov rcx, rdx
imul rax, rcx
mov rcx, qword [rsp + 0x2d8]
or rcx, rax
mov rax, rcx
mov word [rsp + 0x88], ax
mov dword [rsp + 0x280], 1
mov dword [rsp + 0x284], 8
mov edx, 4
mov rcx, qword [rsp + 0x2e0]
call fcn.1800781f4
mov qword [rsp + 0x308], rax
mov edx, 4
mov rcx, qword [rsp + 0x2f0]
call fcn.1800781f4
mov qword [rsp + 0x400], rax
mov edx, 4
mov rcx, qword [rsp + 0x300]
call fcn.1800781f4
mov qword [rsp + 0x310], rax
mov r8, qword [rsp + 0x2e0]
mov rdx, qword [rsp + 0x540]
mov rcx, qword [rsp + 0x308]
call fcn.1800783fc
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov eax, eax
mov qword [rsp + 0xf8], rax
mov eax, dword [rsp + 0x68]
inc eax
mov dword [rsp + 0x68], eax
movzx eax, word [0x1800a6350]
movzx eax, ax
cmp eax, dword [0x1800a626c]
jg 0x18001cf03
mov dword [rsp + 0x17c], 1
jmp 0x18001cf0e
mov dword [rsp + 0x17c], 0
movzx eax, word [0x1800a6350]
movzx eax, ax
cmp eax, 0x3b
jg 0x18001cf2a
mov dword [rsp + 0x178], 1
jmp 0x18001cf35
mov dword [rsp + 0x178], 0
mov eax, dword [rsp + 0x178]
cmp dword [rsp + 0x17c], eax
je 0x18001d079
movzx eax, byte [0x1800a61fe]
movabs rcx, 0x536a03a1e3e13
cmp rax, rcx
jne 0x18001cf6d
mov qword [rsp + 0x2e8], 1
jmp 0x18001cf79
mov qword [rsp + 0x2e8], 0
movzx eax, byte [0x1800a61fe]
mov rcx, qword [rsp + 0xb0]
sub rcx, rax
mov rax, rcx
cmp qword [rsp + 0x2e8], rax
jle 0x18001cfa5
mov dword [rsp + 0x188], 1
jmp 0x18001cfb0
mov dword [rsp + 0x188], 0
movzx eax, byte [rsp + 0x6d]
movabs rcx, 0x27cb7ec88279
cmp rax, rcx
jg 0x18001cfd1
mov dword [rsp + 0x180], 1
jmp 0x18001cfdc
mov dword [rsp + 0x180], 0
movsx eax, byte [0x1800a622f]
movzx ecx, word [rsp + 0x64]
not ecx
add eax, ecx
cmp eax, dword [rsp + 0x180]
jg 0x18001d002
mov dword [rsp + 0x184], 1
jmp 0x18001d00d
mov dword [rsp + 0x184], 0
mov eax, dword [rsp + 0x184]
cmp dword [rsp + 0x188], eax
jg 0x18001d033
movzx eax, byte [rsp + 0x61]
movsx eax, al
mov ecx, dword [rsp + 0x74]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x74], eax
jmp 0x18001d079
movzx eax, word [0x1800a62c4]
movzx eax, ax
test eax, eax
je 0x18001d05f
movsx rax, byte [rsp + 0x60]
mov rcx, qword [rsp + 0x80]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x80], rax
jmp 0x18001d079
movzx eax, word [0x1800a6364]
test eax, eax
jne 0x18001d079
mov rax, qword [rsp + 0x98]
mov qword [0x1800a6358], rax
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x68], eax
movzx eax, byte [0x1800a61fe]
cmp rax, qword [0x1800a62e8]
ja 0x18001d09e
mov dword [rsp + 0x190], 1
jmp 0x18001d0a9
mov dword [rsp + 0x190], 0
movzx eax, byte [0x1800a61fe]
cmp eax, 0x2e
jg 0x18001d0c2
mov dword [rsp + 0x18c], 1
jmp 0x18001d0cd
mov dword [rsp + 0x18c], 0
mov eax, dword [rsp + 0x18c]
cmp dword [rsp + 0x190], eax
jge 0x18001d17c
mov rax, qword [0x1800a62e0]
cmp rax, qword [0x1800a6310]
ja 0x18001d0fe
mov dword [rsp + 0x198], 1
jmp 0x18001d109
mov dword [rsp + 0x198], 0
mov rax, qword [0x1800a62e0]
cmp rax, 0x5e
jg 0x18001d123
mov dword [rsp + 0x194], 1
jmp 0x18001d12e
mov dword [rsp + 0x194], 0
mov eax, dword [rsp + 0x194]
cmp dword [rsp + 0x198], eax
jle 0x18001d15e
movzx eax, word [0x1800a622c]
movzx eax, ax
movabs rcx, 0x73077eb87e174
add rax, rcx
mov qword [0x1800a6300], rax
jmp 0x18001d17c
mov eax, dword [rsp + 0x78]
imul eax, eax, 0x5c
mov byte [0x1800a622f], al
mov rax, qword [0x1800a62f8]
inc rax
mov qword [0x1800a62f8], rax
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x68], eax
mov r8, qword [rsp + 0x2f0]
mov rdx, qword [rsp + 0x548]
mov rcx, qword [rsp + 0x400]
call fcn.1800783fc
mov eax, 0x69c6
mov word [0x1800a62c4], ax
movzx eax, word [0x1800a6284]
mov ecx, dword [rsp + 0xa0]
add ecx, 0x6b510b45
cmp eax, ecx
jne 0x18001d1ef
movzx eax, word [0x1800a6244]
movsx rax, ax
add rax, qword [rsp + 0xb8]
cmp rax, 1
jne 0x18001d1ef
jmp 0x18001d1a1
mov eax, dword [rsp + 0x68]
inc eax
mov dword [rsp + 0x68], eax
movzx eax, word [rsp + 0x64]
imul eax, eax, 0xe32d1004
mov word [0x1800a6364], ax
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x68], eax
cmp qword [rsp + 0xb0], 0
je 0x18001d296
mov eax, dword [0x1800a6384]
sar eax, 8
cdqe
mov qword [rsp + 0xb0], rax
mov rax, qword [0x1800a62e0]
not rax
movzx ecx, byte [rsp + 0x6d]
not ecx
movsxd rcx, ecx
add rax, rcx
test rax, rax
jne 0x18001d25b
mov qword [rsp + 0x2f8], 1
jmp 0x18001d267
mov qword [rsp + 0x2f8], 0
movzx eax, word [0x1800a6364]
mov rcx, qword [rsp + 0x80]
add rcx, rax
mov rax, rcx
not rax
mov rcx, qword [rsp + 0x2f8]
add rcx, rax
mov rax, rcx
mov word [0x1800a62c4], ax
jmp 0x18001d2c0
mov dword [0x1800a6384], 8
movzx eax, word [rsp + 0x64]
mov rcx, qword [rsp + 0xd8]
sub rax, rcx
movzx ecx, word [rsp + 0x64]
or rcx, rax
mov rax, rcx
mov word [rsp + 0x64], ax
mov eax, dword [rsp + 0x118]
mov ecx, dword [rsp + 0x118]
sub eax, ecx
mov ecx, dword [rsp + 0x278]
mov edx, dword [rsp + 0x118]
imul ecx, edx
imul eax, ecx
mov ecx, dword [rsp + 0x68]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x68], eax
mov r8, qword [rsp + 0x300]
mov rdx, qword [rsp + 0x550]
mov rcx, qword [rsp + 0x310]
call fcn.1800783fc
mov rax, qword [0x1800a62e0]
cmp rax, qword [rsp + 0xb0]
je 0x18001d32b
mov dword [rsp + 0x1a0], 1
jmp 0x18001d336
mov dword [rsp + 0x1a0], 0
mov rax, qword [0x1800a62e0]
cmp rax, 0x3d
je 0x18001d350
mov dword [rsp + 0x19c], 1
jmp 0x18001d35b
mov dword [rsp + 0x19c], 0
mov eax, dword [rsp + 0x19c]
cmp dword [rsp + 0x1a0], eax
jl 0x18001d3ab
movzx eax, byte [rsp + 0x61]
movsx rax, al
movabs rcx, 0x6691ec4ecf810
sub rax, rcx
mov word [0x1800a6350], ax
mov rax, qword [0x1800a6348]
xor rax, 0xa099
mov ecx, dword [rsp + 0x74]
movsxd rcx, ecx
add rcx, rax
mov rax, rcx
mov dword [rsp + 0x74], eax
jmp 0x18001d44e
cmp qword [0x1800a6310], 0
jne 0x18001d3c2
mov dword [rsp + 0x1a8], 1
jmp 0x18001d3cd
mov dword [rsp + 0x1a8], 0
movsx eax, byte [0x1800a622f]
test eax, eax
jne 0x18001d3e5
mov dword [rsp + 0x1a4], 1
jmp 0x18001d3f0
mov dword [rsp + 0x1a4], 0
mov eax, dword [rsp + 0x1a4]
cmp dword [rsp + 0x1a8], eax
jl 0x18001d44e
mov eax, dword [0x1800a62dc]
cdqe
mov rcx, qword [0x1800a62e0]
sub rax, rcx
mov ecx, dword [0x1800a62dc]
movsxd rcx, ecx
sub rcx, rax
mov rax, rcx
mov dword [0x1800a62dc], eax
mov eax, dword [rsp + 0x78]
cdqe
mov rcx, qword [0x1800a62e8]
add rcx, rax
mov rax, rcx
mov rcx, qword [0x1800a62e8]
add rcx, rax
mov rax, rcx
mov qword [0x1800a62e8], rax
mov eax, dword [rsp + 0x68]
inc eax
mov ecx, dword [rsp + 0x1ac]
mov edx, dword [rsp + 0x1ac]
sub ecx, edx
mov edx, dword [rsp + 0x1b0]
mov edi, dword [rsp + 0x1b0]
sub edx, edi
imul ecx, edx
sub eax, ecx
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x1b4]
mov ecx, dword [rsp + 0x1b4]
xor eax, ecx
mov ecx, dword [rsp + 0x1b8]
mov edx, dword [rsp + 0x1b8]
xor ecx, edx
add ecx, dword [rsp + 0x68]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x68], eax
mov rdx, qword [rsp + 0x308]
lea rcx, [rsp + 0x428]
call qword [sym.imp.ntdll.dll_RtlInitUnicodeString]
movabs rax, 0xb306d784d3ff
mov qword [0x1800a62f0], rax
mov rax, qword [0x1800a62e0]
movzx ecx, byte [rsp + 0x62]
movsx ecx, cl
add ecx, 0x11
movsxd rcx, ecx
cmp rax, rcx
jne 0x18001d5a8
movzx eax, byte [0x1800a622e]
movsx rax, al
add rax, qword [rsp + 0xb8]
cmp rax, 1
jne 0x18001d5a8
mov eax, dword [0x1800a62dc]
cdqe
cmp rax, qword [rsp + 0xe0]
jge 0x18001d532
mov dword [rsp + 0x1c0], 1
jmp 0x18001d53d
mov dword [rsp + 0x1c0], 0
mov eax, dword [0x1800a62dc]
cmp eax, 0x2f
jge 0x18001d555
mov dword [rsp + 0x1bc], 1
jmp 0x18001d560
mov dword [rsp + 0x1bc], 0
mov eax, dword [rsp + 0x1bc]
cmp dword [rsp + 0x1c0], eax
je 0x18001d572
jmp 0x18001d591
movzx eax, byte [rsp + 0x61]
movsx eax, al
test eax, eax
je 0x18001d591
mov rax, qword [rsp + 0xb8]
add rax, 0x2c84a6af
mov word [rsp + 0x64], ax
jmp 0x18001d4c7
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
mov qword [rsp + 0x90], rax
mov eax, dword [rsp + 0x68]
inc eax
mov dword [rsp + 0x68], eax
mov dword [0x1800a6354], 0x6a0
mov rax, qword [rsp + 0xb8]
add rax, 0x2b44
cmp qword [0x1800a6330], rax
jne 0x18001d61f
movsxd rax, dword [0x1800a6368]
mov rcx, qword [rsp + 0xa8]
add rax, rcx
cmp rax, 1
jne 0x18001d61f
jmp 0x18001d5c3
movsx rax, word [0x1800a636c]
mov rcx, qword [rsp + 0x80]
sub rcx, rax
mov rax, rcx
mov dword [rsp + 0x7c], eax
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x1c4]
mov ecx, dword [rsp + 0x1c4]
sub eax, ecx
mov ecx, dword [rsp + 0x27c]
add ecx, 0x18
imul eax, ecx
mov ecx, dword [rsp + 0x68]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x68], eax
mov rdx, qword [rsp + 0x310]
lea rcx, [rsp + 0x468]
call qword [sym.imp.ntdll.dll_RtlInitUnicodeString]
mov eax, dword [rsp + 0x68]
inc eax
mov dword [rsp + 0x68], eax
call qword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
movzx eax, ax
mov qword [rsp + 0xf0], rax
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0xc8]
mov ecx, dword [rsp + 0xc8]
imul eax, ecx
mov ecx, dword [rsp + 0xc8]
mov edx, dword [rsp + 0xc8]
xor ecx, edx
imul eax, ecx
mov ecx, dword [rsp + 0x1c8]
mov edx, dword [rsp + 0xc8]
imul ecx, edx
mov edx, dword [rsp + 0x1c8]
imul edx, edx, 0x2b3
xor ecx, edx
imul eax, ecx
mov ecx, dword [rsp + 0x68]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x280]
mov dword [rsp + 0x50], eax
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
lea rax, [rsp + 0x468]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x428]
lea rcx, [rsp + 0x2a0]
call qword [sym.imp.ntdll.dll_RtlCreateProcessParametersEx]
mov dword [rsp + 0xcc], eax
cmp dword [rsp + 0xcc], 0
jge 0x18001da64
movzx eax, word [0x1800a6360]
mov qword [0x1800a6328], 0xf7ca
movsx eax, byte [rsp + 0x60]
add eax, 0xf7ca
cdqe
cmp qword [0x1800a6328], rax
jne 0x18001d7da
mov eax, dword [0x1800a6384]
cdqe
mov rcx, qword [rsp + 0xa8]
add rcx, 0x5db5
cmp rax, rcx
jne 0x18001d7da
jmp 0x18001d7da
mov qword [0x1800a6328], 0xf7ca
movzx eax, byte [rsp + 0x6c]
movzx eax, al
and eax, 0x5a5d
cdqe
mov qword [rsp + 0xd8], rax
movzx eax, byte [0x1800a622b]
imul rax, qword [rsp + 0x90]
test rax, rax
jne 0x18001d81f
mov qword [rsp + 0x318], 1
jmp 0x18001d82b
mov qword [rsp + 0x318], 0
movsxd rax, dword [0x1800a6368]
mov rcx, qword [rsp + 0xa8]
imul rcx, rax
mov rax, rcx
test rax, rax
jne 0x18001d854
mov qword [rsp + 0x320], 1
jmp 0x18001d860
mov qword [rsp + 0x320], 0
movabs rax, 0x8d6598c32743a
mov rcx, qword [rsp + 0xe0]
sub rcx, rax
mov rax, rcx
xor rax, qword [rsp + 0x318]
mov rcx, qword [rsp + 0xa8]
mov rdx, qword [rsp + 0x320]
sub rdx, rcx
mov rcx, rdx
not rcx
imul rax, rcx
mov byte [rsp + 0x62], al
movzx eax, byte [rsp + 0x6c]
movzx eax, al
movzx ecx, word [rsp + 0x64]
cmp eax, ecx
jg 0x18001d8c3
movabs rax, 0xb26c039368aa7
mov qword [0x1800a62f8], rax
mov eax, dword [0x1803be0b0]
mov dword [rsp + 0x11c], eax
movzx eax, byte [rsp + 0x6d]
movsx ecx, word [0x1800a6254]
xor eax, ecx
mov ecx, dword [rsp + 0x78]
lea eax, [rax + rcx + 0x338d1ee7]
test eax, eax
jne 0x18001d8fb
mov qword [rsp + 0x330], 1
jmp 0x18001d907
mov qword [rsp + 0x330], 0
mov eax, dword [0x1800a6378]
mov ecx, dword [0x1800a637c]
add ecx, eax
mov eax, ecx
test eax, eax
jne 0x18001d929
mov qword [rsp + 0x328], 1
jmp 0x18001d935
mov qword [rsp + 0x328], 0
mov rax, qword [0x1800a6300]
add rax, qword [rsp + 0x328]
mov rcx, qword [rsp + 0x330]
imul rcx, rax
mov rax, rcx
mov qword [0x1800a62f0], rax
mov eax, dword [rsp + 0x11c]
add eax, 0x332
mov dword [rsp + 0x1cc], eax
mov eax, dword [rsp + 0x11c]
add eax, 0x1a5
mov dword [rsp + 0x3b0], eax
mov eax, dword [rsp + 0x11c]
add eax, 0x38b
mov dword [rsp + 0x3b4], eax
mov eax, dword [rsp + 0x1cc]
add eax, 0x16e
or eax, 0xd3
mov ecx, dword [rsp + 0x1cc]
add ecx, 0xc6
cmp eax, ecx
je 0x18001da64
mov rax, qword [rsp + 0xd8]
cmp qword [0x1800a6340], rax
jg 0x18001d9f5
movzx eax, byte [0x1800a622e]
movsx eax, al
imul eax, eax, 0xd9d0
mov byte [rsp + 0x6d], al
mov rax, qword [rsp + 0xb0]
add rax, 0xb8
mov word [0x1800a6380], ax
jmp 0x18001da31
mov eax, dword [0x1800a6384]
cdqe
mov rcx, qword [rsp + 0x98]
sub rax, rcx
mov word [0x1800a636c], ax
mov rax, qword [0x1800a6318]
imul rax, rax, 0xff28
movzx ecx, word [0x1800a6364]
sub rcx, rax
mov rax, rcx
mov word [0x1800a6364], ax
mov eax, dword [0x1800a62dc]
cdqe
mov rcx, qword [0x1800a62f0]
sub rax, rcx
mov ecx, dword [0x1800a62dc]
movsxd rcx, ecx
sub rcx, rax
mov rax, rcx
mov dword [0x1800a62dc], eax
mov eax, dword [rsp + 0xcc]
jmp 0x18001e7ce
mov qword [rsp + 0x4c0], 0x58
mov dword [rsp + 0x4c8], 0
call fcn.18002a680
mov r8d, 0x60
mov edx, dword [rsp + 0x284]
mov rcx, qword [rax + 0x30]
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov qword [rsp + 0xe8], rax
mov rax, qword [rsp + 0xe8]
mov qword [rax], 0x28
mov eax, 0x20
imul rax, rax, 0
mov rcx, qword [rsp + 0xe8]
mov qword [rcx + rax + 8], 0x20005
movzx eax, word [rsp + 0x428]
mov ecx, 0x20
imul rcx, rcx, 0
mov rdx, qword [rsp + 0xe8]
mov qword [rdx + rcx + 0x10], rax
mov eax, 0x20
imul rax, rax, 0
mov rcx, qword [rsp + 0xe8]
mov rdx, qword [rsp + 0x430]
mov qword [rcx + rax + 0x18], rdx
cmp dword [rsp + 0x558], 0
je 0x18001df2b
movzx eax, word [0x1800a6350]
movzx eax, ax
movabs rcx, 0x329f1ae343b1
xor rax, rcx
mov qword [rsp + 0x98], rax
movzx eax, word [0x1800a6244]
cwde
sub eax, 0x7a58a668
mov word [0x1800a6350], ax
mov rax, qword [0x1800a6300]
mov ecx, dword [rsp + 0x78]
movsxd rcx, ecx
lea rax, [rcx + rax + 0xa4]
mov dword [rsp + 0x78], eax
mov ecx, dword [rsp + 0x558]
call fcn.18001b460
mov qword [rsp + 0x348], rax
mov eax, dword [rsp + 0x1d0]
imul eax, eax, 0x38d
mov ecx, dword [rsp + 0x1d0]
mov edx, dword [rsp + 0x288]
imul ecx, edx
mov edx, dword [rsp + 0x290]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x18001ded9
lea rax, [rsp + 0x438]
lea rcx, str._wcsicmp
mov rdi, rax
mov rsi, rcx
mov ecx, 9
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x438]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov byte [rsp + 0x6d], al
cmp qword [rsp + 0x348], 0
jne 0x18001ded9
mov eax, dword [0x1800a6378]
test eax, eax
je 0x18001dbed
jmp 0x18001dc0e
mov eax, dword [rsp + 0x78]
cdqe
mov rcx, qword [0x1800a6370]
add rax, rcx
mov ecx, dword [rsp + 0x78]
movsxd rcx, ecx
sub rcx, rax
mov rax, rcx
mov dword [rsp + 0x78], eax
mov rax, qword [rsp + 0xf0]
mov rcx, qword [rsp + 0x90]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x90]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x90], rax
mov eax, dword [0x1803be0b0]
mov dword [rsp + 0x138], eax
mov eax, dword [rsp + 0x138]
add eax, 0x2e7
mov dword [rsp + 0x3b8], eax
mov eax, dword [rsp + 0x138]
add eax, 0x279
mov dword [rsp + 0x294], eax
movsx rax, byte [rsp + 0x60]
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindow]
mov byte [rsp + 0x6d], al
mov rax, qword [rsp + 0x90]
not rax
movzx ecx, byte [rsp + 0x63]
movzx ecx, cl
cmp rax, rcx
je 0x18001dca6
mov qword [rsp + 0x338], 1
jmp 0x18001dcb2
mov qword [rsp + 0x338], 0
mov eax, dword [rsp + 0x7c]
test eax, eax
je 0x18001dcd2
movsx eax, word [0x1800a636c]
test eax, eax
je 0x18001dcd2
mov dword [rsp + 0x1d8], 1
jmp 0x18001dcdd
mov dword [rsp + 0x1d8], 0
mov rax, qword [0x1800a62f0]
mov ecx, dword [0x1800a62dc]
movsxd rcx, ecx
cmp rax, rcx
jne 0x18001dcff
mov dword [rsp + 0x1d4], 1
jmp 0x18001dd0a
mov dword [rsp + 0x1d4], 0
mov eax, dword [rsp + 0x1d4]
cmp dword [rsp + 0x1d8], eax
jne 0x18001dd28
mov qword [rsp + 0x340], 1
jmp 0x18001dd34
mov qword [rsp + 0x340], 0
mov rax, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x338]
add rcx, rax
mov rax, rcx
imul rax, qword [rsp + 0x340]
test rax, rax
je 0x18001dd95
movzx eax, word [0x1800a6284]
mov rcx, qword [0x1800a6300]
add rax, rcx
mov qword [0x1800a6338], rax
mov rax, qword [0x1800a6310]
add rax, 0xd771
mov rcx, qword [rsp + 0xb0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb0], rax
jmp 0x18001ddc8
movsx eax, byte [rsp + 0x60]
test eax, eax
je 0x18001ddae
movzx eax, word [0x1800a6360]
mov dword [rsp + 0x1dc], eax
jmp 0x18001ddb9
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x1dc], eax
movzx eax, word [rsp + 0x1dc]
mov word [0x1800a6244], ax
mov eax, dword [rsp + 0x138]
add eax, 0x1be
mov dword [rsp + 0x1e0], eax
mov eax, dword [rsp + 0x1e0]
mov ecx, dword [rsp + 0x294]
imul eax, ecx
mov ecx, dword [rsp + 0x1e0]
imul ecx, ecx, 0xa9
cmp eax, ecx
je 0x18001ded9
movzx eax, byte [rsp + 0x61]
movsx eax, al
movzx ecx, word [0x1800a62c4]
movzx ecx, cx
add eax, ecx
mov byte [rsp + 0x61], al
mov rax, qword [rsp + 0xf0]
add rax, 0x6f768d6c
mov word [0x1800a6360], ax
mov dword [0x1800a6354], 0xd7c63974
mov eax, dword [0x1800a6378]
cdqe
mov rcx, qword [rsp + 0xb8]
add rcx, 0x2b44
cmp rax, rcx
jne 0x18001ded9
movzx eax, word [0x1800a6360]
movzx ecx, byte [rsp + 0x62]
movsx ecx, cl
add eax, ecx
cmp eax, 1
jne 0x18001ded9
mov byte [rsp + 0x60], 0
mov eax, dword [0x1800a6368]
mov ecx, dword [0x1800a6368]
and ecx, eax
mov eax, ecx
mov dword [0x1800a6368], eax
movzx eax, byte [0x1800a62e8]
mov byte [rsp + 0x61], al
movzx eax, byte [rsp + 0x60]
mov byte [rsp + 0x260], al
cmp byte [rsp + 0x260], 0
je 0x18001deac
jmp 0x18001debe
mov eax, dword [rsp + 0x74]
sub eax, 0xf6c5
cdqe
mov qword [0x1800a62f0], rax
jmp 0x18001de2e
mov eax, 0x20
imul rax, rax, 1
mov rcx, qword [rsp + 0xe8]
mov qword [rcx + rax + 8], 0x60000
mov eax, 0x20
imul rax, rax, 1
mov rcx, qword [rsp + 0xe8]
mov qword [rcx + rax + 0x10], 8
mov eax, 0x20
imul rax, rax, 1
mov rcx, qword [rsp + 0xe8]
mov rdx, qword [rsp + 0x348]
mov qword [rcx + rax + 0x18], rdx
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x4c0]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x40], rax
mov eax, dword [rsp + 0x578]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x570]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9d, dword [rsp + 0x408]
mov r8d, dword [rsp + 0x410]
mov rdx, qword [rsp + 0x568]
mov rcx, qword [rsp + 0x560]
call fcn.1800049c0
mov dword [rsp + 0xcc], eax
cmp dword [rsp + 0xcc], 0
jge 0x18001e4c1
mov rax, qword [0x1800a6300]
sub rax, 0xff
mov byte [rsp + 0x61], al
mov qword [rsp + 0x420], 0
mov qword [rsp + 0x418], 0
call qword [sym.imp.USER32.dll_GetFocus]
mov qword [rsp + 0x298], rax
cmp qword [rsp + 0x298], 0
je 0x18001e031
mov rdx, qword [rsp + 0x418]
mov rcx, qword [rsp + 0x298]
call qword [sym.imp.USER32.dll_BeginPaint]
mov qword [rsp + 0x458], rax
mov rdx, qword [rsp + 0x420]
mov rcx, qword [rsp + 0x298]
call qword [sym.imp.USER32.dll_EndPaint]
mov dword [rsp + 0x3bc], eax
cmp qword [rsp + 0xe0], 0
jle 0x18001e049
mov dword [rsp + 0x1e8], 1
jmp 0x18001e054
mov dword [rsp + 0x1e8], 0
cmp qword [rsp + 0xe0], 0x5d
jle 0x18001e06c
mov dword [rsp + 0x1e4], 1
jmp 0x18001e077
mov dword [rsp + 0x1e4], 0
mov eax, dword [rsp + 0x1e4]
cmp dword [rsp + 0x1e8], eax
jle 0x18001e116
movzx eax, word [0x1800a6244]
cwde
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
movsx eax, word [0x1800a636c]
test eax, eax
jle 0x18001e0cc
movsx rax, byte [0x1800a622f]
add rax, qword [rsp + 0x80]
movsx rcx, byte [0x1800a622f]
add rcx, rax
mov rax, rcx
mov byte [0x1800a622f], al
jmp 0x18001e111
mov rax, qword [0x1800a6318]
test rax, rax
je 0x18001e0e9
mov rax, qword [0x1800a6348]
mov qword [rsp + 0x350], rax
jmp 0x18001e0f8
movzx eax, byte [0x1800a61fe]
mov qword [rsp + 0x350], rax
mov eax, dword [rsp + 0x350]
mov dword [0x1800a6354], eax
movzx eax, word [0x1800a6358]
mov word [rsp + 0x64], ax
jmp 0x18001e1a7
movzx eax, word [rsp + 0x70]
cwde
not eax
cdqe
cmp rax, qword [0x1800a6340]
jne 0x18001e136
mov dword [rsp + 0x1ec], 1
jmp 0x18001e141
mov dword [rsp + 0x1ec], 0
cmp qword [rsp + 0x90], 0
jne 0x18001e164
movzx eax, byte [0x1800a61fe]
test eax, eax
jne 0x18001e164
mov dword [rsp + 0x1f0], 0
jmp 0x18001e16f
mov dword [rsp + 0x1f0], 1
mov eax, dword [rsp + 0x1ec]
not eax
cmp eax, dword [rsp + 0x1f0]
jne 0x18001e1a7
movzx eax, word [rsp + 0x64]
mov rcx, qword [0x1800a6338]
and rcx, rax
mov rax, rcx
mov rcx, qword [0x1800a6338]
add rcx, rax
mov rax, rcx
mov qword [0x1800a6338], rax
mov eax, dword [0x1803be0b0]
mov dword [rsp + 0x128], eax
mov dword [rsp + 0xa0], 2
mov rax, qword [0x1800a6370]
sub rax, 0x8cf9
mov qword [rsp + 0x90], rax
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0x124], eax
cmp dword [rsp + 0x124], 0
je 0x18001e202
cmp dword [rsp + 0x124], 1
je 0x18001e22c
cmp dword [rsp + 0x124], 2
je 0x18001e246
jmp 0x18001e269
mov rax, qword [rsp + 0xa8]
mov rcx, qword [0x1800a6338]
xor rax, rcx
mov rcx, qword [rsp + 0xa8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa8], rax
jmp 0x18001e269
movzx eax, byte [0x1800a61fb]
movsx eax, al
xor eax, 0xa635
cdqe
mov qword [0x1800a6300], rax
jmp 0x18001e269
mov eax, 0xdb32cdaa
mov rcx, qword [0x1800a62e8]
sub rcx, rax
mov rax, rcx
mov byte [0x1800a622f], al
mov eax, dword [0x1800a6354]
mov word [rsp + 0x64], ax
mov eax, dword [rsp + 0x128]
add eax, 0x22e
mov dword [rsp + 0x264], eax
movsx rax, byte [rsp + 0x6e]
cmp qword [0x1800a6330], rax
ja 0x18001e2b5
mov rax, qword [rsp + 0x98]
sub rax, 0xe9
movzx ecx, byte [0x1800a622e]
movsx rcx, cl
sub rcx, rax
mov rax, rcx
mov byte [0x1800a622e], al
jmp 0x18001e370
mov eax, dword [rsp + 0x7c]
cdqe
cmp rax, qword [rsp + 0xf8]
jae 0x18001e2d9
movzx eax, word [0x1800a6380]
cwde
xor eax, 0xd
mov dword [rsp + 0x74], eax
jmp 0x18001e370
movzx eax, word [0x1800a6364]
cmp eax, dword [0x1800a637c]
jne 0x18001e2f5
mov dword [rsp + 0x1f4], 1
jmp 0x18001e300
mov dword [rsp + 0x1f4], 0
movzx eax, byte [0x1800a622b]
cmp eax, dword [rsp + 0x1f4]
jne 0x18001e31d
mov dword [rsp + 0x1f8], 1
jmp 0x18001e328
mov dword [rsp + 0x1f8], 0
mov eax, dword [rsp + 0x1f8]
not eax
test eax, eax
je 0x18001e370
movzx eax, byte [rsp + 0x62]
movsx rax, al
movabs rcx, 0x27365d963d3d6
add rax, rcx
mov word [0x1800a6254], ax
mov rax, qword [rsp + 0x80]
mov rcx, qword [rsp + 0xb8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb8], rax
mov eax, dword [rsp + 0x128]
add eax, 0x33a
mov dword [rsp + 0x1fc], eax
mov eax, dword [rsp + 0x128]
add eax, 0x385
mov dword [rsp + 0x3c0], eax
mov eax, dword [rsp + 0x1fc]
mov ecx, dword [rsp + 0x1fc]
sub eax, ecx
mov ecx, dword [rsp + 0x264]
imul ecx, ecx, 0x2e9
cmp eax, ecx
je 0x18001e4c1
movsx rax, byte [rsp + 0x60]
mov rcx, qword [0x1800a6300]
cmp rax, rcx
jbe 0x18001e3da
mov dword [rsp + 0x204], 1
jmp 0x18001e3e5
mov dword [rsp + 0x204], 0
movsx eax, byte [rsp + 0x60]
cmp eax, 0x29
jle 0x18001e3fc
mov dword [rsp + 0x200], 1
jmp 0x18001e407
mov dword [rsp + 0x200], 0
mov eax, dword [rsp + 0x200]
cmp dword [rsp + 0x204], eax
je 0x18001e469
mov rax, qword [0x1800a6300]
test rax, rax
je 0x18001e435
movzx eax, byte [rsp + 0x6c]
movzx eax, al
mov qword [rsp + 0x358], rax
jmp 0x18001e445
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x358], rax
mov eax, dword [rsp + 0x358]
mov dword [0x1800a6384], eax
movzx eax, word [0x1800a6364]
sub eax, 0xe3c4f149
mov eax, eax
mov qword [0x1800a6318], rax
jmp 0x18001e4c1
movzx eax, word [0x1800a6360]
test eax, eax
jne 0x18001e4c1
mov eax, dword [rsp + 0x78]
cdqe
imul rax, qword [rsp + 0xb8]
movzx ecx, word [rsp + 0x64]
and ecx, 0xbd
movsxd rcx, ecx
add rax, rcx
test rax, rax
jne 0x18001e4a8
mov eax, 1
mov word [rsp + 0xd0], ax
jmp 0x18001e4b2
xor eax, eax
mov word [rsp + 0xd0], ax
movzx eax, word [rsp + 0xd0]
mov word [0x1800a6284], ax
call fcn.18002a680
mov r8, qword [rsp + 0xe8]
xor edx, edx
mov rcx, qword [rax + 0x30]
call qword [sym.imp.ntdll.dll_RtlFreeHeap]
mov rax, qword [0x1800a6300]
movzx ecx, word [0x1800a622c]
movzx ecx, cx
cmp rax, rcx
jne 0x18001e4fd
mov dword [rsp + 0x20c], 1
jmp 0x18001e508
mov dword [rsp + 0x20c], 0
mov rax, qword [0x1800a6300]
cmp rax, 5
jne 0x18001e522
mov dword [rsp + 0x208], 1
jmp 0x18001e52d
mov dword [rsp + 0x208], 0
mov eax, dword [rsp + 0x208]
cmp dword [rsp + 0x20c], eax
jg 0x18001e5f9
movzx eax, word [rsp + 0x70]
cwde
test eax, eax
je 0x18001e5c4
cmp qword [0x1800a62e8], 0
jne 0x18001e563
mov qword [rsp + 0x360], 1
jmp 0x18001e56f
mov qword [rsp + 0x360], 0
movzx eax, word [0x1800a6350]
movzx eax, ax
mov rcx, qword [0x1800a62e8]
imul rcx, rax
mov rax, rcx
not rax
mov rcx, qword [rsp + 0x360]
or rcx, rax
mov rax, rcx
test rax, rax
jne 0x18001e5aa
mov dword [rsp + 0x210], 1
jmp 0x18001e5b5
mov dword [rsp + 0x210], 0
mov eax, dword [rsp + 0x210]
mov dword [0x1800a6384], eax
jmp 0x18001e5f4
mov rax, qword [rsp + 0xd8]
add rax, 0x60e4
mov word [0x1800a6244], ax
movsx rax, byte [rsp + 0x60]
movabs rcx, 0xdca6a844f6f27
add rax, rcx
mov qword [rsp + 0xb8], rax
jmp 0x18001e694
mov rax, qword [0x1800a6300]
test rax, rax
jne 0x18001e613
mov qword [rsp + 0x368], 1
jmp 0x18001e61f
mov qword [rsp + 0x368], 0
mov rax, qword [0x1800a6320]
mov rcx, qword [rsp + 0x368]
add rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0xb0]
jbe 0x18001e640
jmp 0x18001e694
xor eax, eax
cmp eax, 0x6a28
je 0x18001e65a
mov eax, dword [0x1800a62dc]
sar eax, 5
mov byte [0x1800a61ff], al
jmp 0x18001e694
mov eax, dword [0x1800a6354]
mov ecx, dword [rsp + 0x78]
cmp eax, ecx
jb 0x18001e694
movzx eax, word [0x1800a6380]
movsx rax, ax
mov rcx, qword [0x1800a62f0]
add rcx, rax
mov rax, rcx
mov rcx, qword [0x1800a62f0]
sub rcx, rax
mov rax, rcx
mov qword [0x1800a62f0], rax
mov eax, dword [rsp + 0x68]
inc eax
mov dword [rsp + 0x68], eax
movabs rax, 0x2b131b2576319
mov rcx, qword [rsp + 0x80]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa8], rax
mov eax, dword [rsp + 0xa0]
cdqe
mov rcx, qword [0x1800a62f8]
add rcx, rax
mov rax, rcx
mov qword [0x1800a62f8], rax
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x68], eax
mov qword [rsp + 0xb0], 1
movsx rax, byte [rsp + 0x60]
mov rcx, qword [0x1800a6330]
sub rcx, rax
mov rax, rcx
mov qword [0x1800a6330], rax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x370], rax
cmp qword [rsp + 0x370], 0
je 0x18001e731
cmp qword [rsp + 0x370], 1
je 0x18001e76f
jmp 0x18001e784
mov eax, 0x9f644d5d
mov rcx, qword [rsp + 0xb0]
imul rcx, rax
mov rax, rcx
movzx ecx, word [rsp + 0x64]
and rcx, rax
mov rax, rcx
mov word [rsp + 0x64], ax
movzx eax, byte [rsp + 0x63]
movzx eax, al
mov ecx, dword [0x1800a62dc]
sub ecx, eax
mov eax, ecx
mov dword [0x1800a62dc], eax
jmp 0x18001e784
movzx eax, word [0x1800a6380]
cwde
shl eax, 6
cdqe
mov qword [rsp + 0xf0], rax
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x68], eax
mov rcx, qword [rsp + 0x2a0]
call qword [sym.imp.ntdll.dll_RtlDestroyProcessParameters]
mov eax, dword [rsp + 0x68]
inc eax
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x68], eax
movzx eax, word [0x1800a6284]
add eax, 0xf3
mov word [0x1800a6284], ax
mov eax, dword [rsp + 0xcc]
add rsp, 0x528
pop rdi
pop rsi
ret