Function at 0x18001d16c
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x108]
sub rsp, 0x1e0
mov rax, qword [0x180053d28]
xor rax, rsp
mov qword [rbp + 0xd0], rax
mov rax, qword [0x180053828]
xor ebx, ebx
mov dil, byte [0x180053810]
mov r8d, 0x4df
mov word [rsp + 0x30], ax
mov eax, dword [0x180053830]
mov dword [rsp + 0x48], 0x4f3d076
mov dword [rsp + 0x44], eax
mov r15, qword [0x1800537e0]
movzx eax, word [0x180053814]
mov word [rsp + 0x38], ax
mov eax, dword [0x180053800]
mov word [rsp + 0x40], ax
mov eax, 0x661a
movsxd r14, dword [0x1800537f4]
mov word [rsp + 0x54], ax
mov eax, 0xffffbc41
mov word [rsp + 0x34], ax
movabs rax, 0xca0efdf530940
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x20], rcx
mov ecx, dword [0x1800537f4]
mov al, byte [0x1800537f0]
mov r9d, dword [0x180053820]
mov dword [rsp + 0x58], 0x7f
mov byte [rsp + 0x68], al
movzx eax, byte [0x18005371f]
mov dword [rsp + 0x64], eax
movzx eax, word [0x180053850]
mov dword [rsp + 0x64], 0xf19256a7
mov dword [rsp + 0x64], 0xc6ce5133
mov dword [rsp + 0x64], 0x1e47
mov word [rsp + 0x5c], ax
movzx eax, word [0x180053818]
mov eax, 0xc4680af6
mov qword [rbp - 0x28], rdx
mov qword [rbp - 0x38], rax
mov eax, dword [0x180b88880]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x48]
movzx edx, cx
add edx, eax
mov dword [rbp - 0x68], 0x31
mov eax, dword [rsp + 0x48]
add eax, edx
mov dword [rbp - 0x74], 0xffff97ed
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x4c]
add eax, 0x2dd
mov dword [rbp - 0x7c], r9d
mov dword [rsp + 0x64], eax
mov ecx, dword [rsp + 0x48]
mov rax, qword [0x180053828]
mov qword [rbp - 0x58], r8
cmp rcx, rax
jl 0x18001d303
cmp byte [0x18005371f], bl
mov eax, ebx
mov rdx, qword [0x180053858]
mov ecx, dword [0x18005381c]
sete al
xor rdx, rax
mov eax, dword [rsp + 0x44]
imul eax, ecx
mov ecx, ebx
add rax, rdx
sete cl
add r9d, r8d
mov dword [rbp - 0x7c], r9d
mov word [rsp + 0x30], cx
mov eax, dword [rsp + 0x4c]
lea rcx, [rbp + 0x30]
movups xmm0, xmmword [0x18003ca28]
add eax, 0x1ef
movups xmm1, xmmword [0x18003ca38]
mov dword [rsp + 0x64], eax
mov eax, dword [0x18003ca48]
mov dword [rbp + 0x50], eax
movzx eax, word [0x18003ca4c]
mov word [rbp + 0x54], ax
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm1
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [rsp + 0x4c]
mov r13d, eax
add ecx, 0x1a1
mov dword [rbp - 0x78], eax
mov dword [rsp + 0x5c], ecx
mov ecx, dword [0x180b88880]
mov dword [rsp + 0x4c], ecx
call qword [sym.imp.USER32.dll_GetFocus]
mov esi, 1
test rax, rax
je 0x18001d380
mov r8d, esi
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetUpdateRect]
movzx eax, word [0x180053840]
mov r9d, 0x4df
mov r8d, dword [rsp + 0x58]
mov ecx, 0x95
movsx r13d, r13w
mov edx, r13d
mov dword [rbp - 0x40], r13d
call fcn.180027320
mov dword [rsp + 0x6c], eax
test ax, ax
jne 0x18001d3b7
mov rcx, qword [0x180053858]
mov ecx, dword [0x18005381c]
mov ecx, dword [0x180053850]
movzx edx, ax
mov eax, dword [rsp + 0x4c]
add eax, 0x22d
cmp qword [0x180053820], rbx
lea edx, [rdx + rcx*2]
mov dword [0x180053850], edx
mov dword [rsp + 0x64], eax
je 0x18001d400
mov r14, qword [0x1800537e8]
mov eax, 0xa17042e3
add r14, rax
movzx eax, word [rsp + 0x40]
mov word [0x180053804], ax
mov eax, dword [rsp + 0x4c]
lea rcx, [rbp + 0x58]
movups xmm0, xmmword [str.The_exact_version]
add eax, 0x1cc
movups xmm1, xmmword [0x18003ca60]
mov dword [rsp + 0x64], eax
mov eax, dword [0x18003ca70]
mov dword [rbp + 0x78], eax
movzx eax, word [0x18003ca74]
mov word [rbp + 0x7c], ax
movups xmmword [rbp + 0x58], xmm0
movups xmmword [rbp + 0x68], xmm1
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsx ecx, r15w
mov edx, ebx
mov byte [0x180053733], al
mov eax, dword [rsp + 0x4c]
add eax, 0x2e4
mov dword [rbp - 0x48], eax
mov eax, dword [rsp + 0x48]
cmp ecx, eax
mov eax, ebx
mov ecx, 0x52
setne dl
cmp r15w, cx
setne al
cmp edx, eax
jae 0x18001d4a6
mov eax, dword [0x18005374c]
mov ecx, 0x4803
add ax, cx
add word [0x1800537b4], ax
mov eax, dword [rsp + 0x44]
add eax, 0x1720
neg eax
sbb cx, cx
neg cx
sub cx, si
mov word [0x18005378c], cx
jmp 0x18001d4b3
movzx eax, word [rbp - 0x7c]
add ax, 0x19
and word [rsp + 0x6c], ax
mov eax, dword [0x180b88880]
mov r9d, 0x5e8fbd1c
mov dword [rsp + 0x4c], eax
xor edx, edx
mov r8d, dword [0x180053800]
mov ecx, dword [0x180053850]
call fcn.180027320
mov word [0x1800537fc], ax
test ax, ax
je 0x18001d52c
mov rcx, qword [0x180053848]
mov r9d, 0xdf
xor edx, edx
lea r8d, [r9 - 0x5d]
call fcn.180027320
mov word [rsp + 0x38], ax
movzx eax, word [rsp + 0x38]
test ax, ax
jne 0x18001d52c
movzx eax, word [0x180053818]
test ax, ax
jne 0x18001d52c
mov ecx, dword [0x1800537f0]
movzx eax, byte [0x18005371f]
imul ecx, eax
mov dword [0x1800537f0], ecx
mov eax, dword [rsp + 0x4c]
lea rcx, [rbp + 0x80]
add eax, 0x33b
mov dword [rbp - 0x70], eax
mov dword [0x180053800], 0xb5
mov eax, dword [0x180053838]
sub eax, 0x1f
mov dword [0x180053800], eax
mov eax, dword [rsp + 0x4c]
movups xmm0, xmmword [str.IDS_COM_CLASS_NOT_]
add eax, 0x165
movups xmm1, xmmword [0x18003ca88]
mov dword [rsp + 0x78], eax
mov eax, dword [0x18003ca98]
mov dword [rbp + 0xa0], eax
movzx eax, word [0x18003ca9c]
mov word [rbp + 0xa4], ax
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm1
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [rsp + 0x48], eax
xor ecx, ecx
mov eax, dword [rsp + 0x4c]
add eax, 0x10f
mov dword [rbp - 0x5c], eax
mov eax, dword [0x180b88880]
mov dword [rsp + 0x4c], eax
mov word [0x180053804], ax
mov eax, dword [rsp + 0x4c]
add eax, 0x1e8
mov dword [rsp + 0x64], eax
mov rax, qword [0x1800537e0]
mov eax, dword [rsp + 0x4c]
add eax, 0x195
mov dword [rsp + 0x64], eax
mov eax, dword [rsp + 0x4c]
add eax, 0x3c9
mov dword [rsp + 0x50], eax
mov eax, dword [0x180b88880]
mov dword [rsp + 0x4c], eax
call fcn.180027480
movzx eax, ax
mov dword [0x1800537f0], eax
test eax, eax
je 0x18001d639
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [0x180053830], eax
test eax, eax
je 0x18001d64e
movzx ecx, word [rsp + 0x38]
mov eax, dword [0x18005381c]
xor ecx, 0xed
sub eax, ecx
mov dword [0x18005381c], eax
jmp 0x18001d64e
mov rax, qword [0x180053858]
mov dword [0x180c1b78c], eax
mov qword [rbp - 0x50], 0x4df
mov eax, dword [rsp + 0x4c]
lea rcx, [rbp - 0x18]
movups xmm0, xmmword [str.__ExceptionPtrReth]
add eax, 0x2bd
mov dword [rbp - 0x80], eax
movzx eax, word [0x18003cab0]
mov word [rbp - 8], ax
mov al, byte [0x18003cab2]
mov byte [rbp - 6], al
movups xmmword [rbp - 0x18], xmm0
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x4c]
add eax, 0x1bc
mov dword [rbp - 0x64], eax
call qword [sym.imp.USER32.dll_GetMessagePos]
mov dword [0x18005380c], eax
mov eax, dword [rsp + 0x4c]
mov ecx, dword [0x1800537f0]
add eax, 0x139
mov dword [rsp + 0x64], eax
call qword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov ecx, dword [0x180b88880]
add dil, dil
mov dword [rsp + 0x60], ecx
movsx rdx, word [rsp + 0x40]
sub dx, word [0x18005379c]
mov dword [rsp + 0x7c], eax
mov eax, 0x61cc
mov r13d, dword [rsp + 0x7c]
add dx, ax
mov word [rsp + 0x40], dx
mov ecx, dword [rsp + 0x60]
add ecx, 0xec
mov dword [rsp + 0x64], ecx
mov eax, dword [0x180053800]
sub dil, al
movzx r15d, word [rsp + 0x38]
mov eax, dword [rsp + 0x60]
sub r15b, 0x14
add eax, 0x289
mov word [rsp + 0x68], r15w
mov dword [rsp + 0x4c], eax
mov r15d, 0xffff97ed
mov rax, qword [0x1800537e0]
and rax, r14
mov r14d, 0x3d
mov qword [rbp - 0x38], rax
mov eax, dword [rsp + 0x60]
mov r12, qword [rbp - 0x38]
add eax, 0x122
mov dword [rsp + 0x3c], eax
mov ecx, 0x35
call fcn.180027480
movzx eax, ax
mov qword [rbp - 0x30], rax
test rax, rax
je 0x18001d803
movzx edx, word [rsp + 0x54]
mov r8d, ebx
movsx eax, word [rsp + 0x40]
mov ecx, ebx
cmp edx, eax
movzx eax, word [rsp + 0x54]
setl r8b
cmp r8d, ebx
je 0x18001d79b
movzx edi, word [0x180053840]
movzx eax, word [rsp + 0x34]
neg dil
mov word [0x180c0aaf4], ax
jmp 0x18001d81b
test dil, dil
je 0x18001d7b6
movsx eax, word [0x180053808]
mov ecx, 0xed959b27
sub ecx, eax
add dword [0x180053810], ecx
jmp 0x18001d81b
movsx eax, word [rsp + 0x30]
movsx r8d, r15w
imul edx, r8d, 0xc3e66a53
cmp edx, eax
jne 0x18001d7d2
mov r15d, 0xffffafe3
jmp 0x18001d81b
movsx eax, word [0x180053840]
sub r8d, dword [0x180053810]
inc eax
add eax, r8d
je 0x18001d81b
movzx eax, word [0x180053844]
mov ecx, 0xe99
add ax, r13w
add ax, cx
mov word [0x180053844], ax
jmp 0x18001d81b
mov eax, dword [rsp + 0x58]
cmp eax, dword [0x1800537f0]
jbe 0x18001d81b
lea eax, [r12 - 0x311e]
mov dword [rsp + 0x58], eax
mov rax, qword [0x1800537e0]
sub r14d, esi
add rax, rsi
mov qword [0x1800537e0], rax
test r14d, r14d
jg 0x18001d747
mov eax, dword [0x180b88880]
mov edx, 0xffff8182
mov r12, qword [rbp - 0x20]
mov r13d, dword [rbp - 0x40]
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x44], 0x3d0fa2fb
mov eax, dword [rsp + 0x60]
add eax, 0x16d
mov dword [rbp - 0x74], r15d
mov dword [rsp + 0x70], eax
mov ecx, dword [rsp + 0x58]
movsx eax, r15w
movzx r15d, word [rsp + 0x68]
mov dword [rbp - 0x6c], edx
cmp eax, ecx
jae 0x18001d893
movsx ecx, word [0x180053840]
mov eax, dword [0x180053814]
imul eax, ecx
mov dword [0x180053814], eax
mov eax, dword [rsp + 0x60]
mov edi, dword [rbp - 0x7c]
add eax, 0x3de
mov dword [rsp + 0x64], eax
mov ecx, dword [rsp + 0x58]
mov rax, qword [0x1800537e8]
cmp rax, rcx
jne 0x18001d8c9
movzx eax, word [rsp + 0x54]
movsx eax, word [0x180053804]
sub eax, 0xec
and edi, eax
mov dword [rbp - 0x7c], edi
mov eax, dword [rsp + 0x60]
mov edx, ebx
add eax, 0x33d
mov dword [rbp - 0x60], eax
movsx rcx, word [0x180053844]
mov eax, dword [rsp + 0x58]
imul rcx, qword [0x180053820]
test rcx, rcx
sete dl
sub edx, eax
mov eax, dword [rsp + 0x44]
movsx ecx, word [0x180053840]
not eax
add edx, eax
sub ecx, 0x2ac91e20
mov eax, dword [0x180b88880]
imul ecx, edx
mov dword [0x180053850], ecx
mov rcx, qword [rbp - 0x50]
mov dword [rsp + 0x60], eax
movzx eax, word [0x180053840]
sar ax, 6
mov word [rsp + 0x30], ax
mov eax, dword [rsp + 0x60]
add dword [0x1800537dc], 0x90c3c515
add eax, 0xfa
mov dword [rsp + 0x64], eax
mov eax, dword [rsp + 0x60]
add eax, 0x271
mov dword [rbp - 0x44], eax
call qword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov dword [rsp + 0x44], eax
lea rcx, [rbp]
mov eax, dword [rsp + 0x60]
movups xmm0, xmmword [str.connection_refused]
add eax, 0x26c
mov dword [rbp - 0x44], eax
movzx eax, word [0x18003cac8]
mov word [rbp + 0x10], ax
mov al, byte [0x18003caca]
mov byte [rbp + 0x12], al
movups xmmword [rbp], xmm0
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov edx, dword [rsp + 0x5c]
mov r11d, eax
mov ecx, dword [rsp + 0x5c]
sub edx, ecx
mov dword [rsp + 0x74], eax
cmp edx, 0x17c
je 0x1800203a5
mov r10d, dword [rsp + 0x6c]
movzx ecx, r10b
movzx r8d, r15b
imul r8d, ecx
cmp byte [r12], 0xe9
mov dword [rsp + 0x60], r8d
jne 0x18001d9dc
mov rcx, qword [rbp - 0x28]
mov eax, 2
mov qword [rcx], rsi
jmp 0x1800203a7
cmp byte [r12], 0x90
jne 0x18001da58
cmp byte [r12 + 1], 0xe9
jne 0x18001dab7
movsxd rcx, dword [0x180053810]
call fcn.18002773c
mov dword [0x18005374c], eax
movzx eax, word [0x180053834]
cmp eax, edi
je 0x18001da21
movzx eax, word [0x180bf015e]
mov ecx, dword [0x180053838]
add ecx, eax
mov dword [0x180053838], ecx
cmp qword [rbp - 0x30], rbx
jne 0x18001da45
movzx eax, word [rsp + 0x38]
movsx ecx, word [rbp - 0x74]
mov word [rsp + 0x38], ax
mov eax, 0x63fe
cwde
imul ecx, eax
mov word [0x180053840], cx
mov rcx, qword [rbp - 0x28]
mov edi, 2
mov qword [rcx], rdi
mov eax, edi
jmp 0x1800203a7
cmp byte [r12], 0x8b
jne 0x18001dab7
cmp byte [r12 + 1], 0xff
jne 0x18001dab7
cmp byte [r12 + 2], 0xe9
jne 0x18001dab7
movzx eax, al
imul eax, dword [0x180053850]
test eax, eax
jne 0x18001da83
mov eax, dword [0x180053838]
movzx eax, r10w
sub eax, 0x3115453d
mov dword [0x1800537f4], eax
mov eax, dword [0x1800537f0]
add eax, 0xffffff24
mov dword [0x1800537dc], eax
mov dword [0x180053734], 0xb8f8
mov edi, 2
jmp 0x180020394
mov eax, dword [rbp - 0x48]
mov edx, 0x372
sub edx, eax
mov ecx, 0x1b5
mov eax, dword [rbp - 0x48]
sub ecx, eax
cmp ecx, edx
je 0x1800203a5
movsx eax, byte [0x180053733]
mov r15, qword [rbp - 0x38]
movzx ecx, r10w
movzx edx, ax
mov eax, 0xffffaa76
imul edx, ecx
mov ecx, dword [rsp + 0x48]
mov word [0x1800537b4], ax
sub ecx, 0x558a
mov rax, qword [0x180053858]
and r10w, dx
mov dword [rsp + 0x6c], r10d
cmp rax, rcx
jne 0x18001dc55
movsx rdi, word [rbp - 0x78]
mov rax, r15
movsxd r12, dword [rsp + 0x7c]
not rax
mov esi, dword [rsp + 0x60]
movzx r14d, r15w
imul rdi, rax
mov eax, 0x157e
mov r15d, 0x4df
not rdi
sub r14w, ax
mov rdx, qword [0x180053858]
mov rcx, rbx
mov eax, dword [0x1800537f4]
xor rdx, rdi
xor rdx, qword [rbp - 0x30]
test eax, eax
mov rax, qword [0x180053858]
sete cl
and word [0x18005379c], r14w
imul rax, rcx
not rax
sub rax, rdx
add ax, word [0x1800537f0]
mov word [0x180053818], ax
mov ecx, dword [rsp + 0x48]
movzx eax, word [0x180053834]
add ecx, 0xe9
cmp eax, ecx
jne 0x18001dc37
call qword [sym.imp.USER32.dll_GetFocus]
mov byte [0x18005371e], al
mov al, byte [0x18005371e]
test al, al
je 0x18001dbf4
movzx eax, word [rsp + 0x40]
test ax, ax
je 0x18001dbd4
test r15w, r15w
je 0x18001dbcd
mov r15d, dword [rbp - 0x68]
jmp 0x18001dc11
mov r15d, dword [rsp + 0x44]
jmp 0x18001dc11
movsxd r13, dword [0x18005383c]
movsx rax, r12w
xor r13, rax
mov al, byte [0x18005371e]
add al, sil
mov qword [rbp - 0x50], r13
and sil, al
jmp 0x18001dc11
movsx rcx, word [0x18005378c]
movabs rax, 0xa4ae193670022
imul rcx, rax
mov qword [0x180053858], rcx
mov ecx, dword [rsp + 0x48]
mov eax, 0xffffaa76
mov word [0x1800537b4], ax
sub ecx, 0x558a
mov rax, qword [0x180053858]
cmp rax, rcx
je 0x18001db45
mov r12, qword [rbp - 0x20]
mov r13d, dword [rbp - 0x40]
mov r11d, dword [rsp + 0x74]
mov dword [rsp + 0x60], esi
mov esi, 1
mov qword [rbp - 0x58], r15
mov r15, qword [rbp - 0x38]
mov eax, dword [rsp + 0x44]
mov edx, ebx
mov r10, qword [rbp - 0x50]
not eax
mov dword [0x18005381c], eax
mov ecx, ebx
mov eax, dword [0x180b88880]
mov dword [rsp + 0x5c], eax
mov eax, dword [rsp + 0x44]
cmp rax, r10
mov eax, dword [rsp + 0x44]
setae dl
cmp eax, 0x31
setae cl
cmp edx, ecx
jae 0x18001dca0
movsx ecx, word [0x180053840]
sub ecx, 0xeb
mov dword [0x18005383c], ecx
jmp 0x18001dcdc
cmp word [0x180053834], bx
je 0x18001dcdc
movsx eax, byte [0x180053733]
movsx ecx, word [0x1800537fc]
sub ecx, eax
lea eax, [rcx + 0x5e8fbd4d]
mov qword [0x1800537e8], rax
movzx ecx, word [rsp + 0x30]
movzx eax, word [rsp + 0x30]
sub cx, word [rbp - 0x58]
sub cx, ax
mov word [rsp + 0x30], cx
mov eax, dword [rsp + 0x5c]
mov r8d, 0x1c86
mov r9d, dword [rbp - 0x78]
add eax, 0x122
mov dword [rbp - 0x68], eax
mov r14d, 0x5e8fbd1c
mov dword [rsp + 0x58], 0x9d
movsx eax, word [0x1800537b4]
cmp eax, r14d
jbe 0x18001dd1a
mov eax, dword [0x180053814]
add dword [0x180053810], eax
jmp 0x18001dd80
movzx ecx, word [0x180053834]
mov rax, qword [0x180053828]
cmp rax, rcx
jl 0x18001dd80
movsx ecx, word [0x180053820]
mov eax, 0x51c5
cwde
imul ecx, eax
mov eax, ebx
test r9w, r9w
movzx edx, r11b
sete al
sub dx, ax
mov eax, 0x42e4
sub dx, ax
mov word [rsp + 0x7c], cx
mov eax, dword [rsp + 0x44]
add dx, ax
mov ecx, dword [0x1800536f4]
movzx eax, r15w
xor cx, word [0x180053814]
not ax
add cx, ax
xor cx, dx
mov word [rsp + 0x6c], cx
sub r8, rsi
jne 0x18001dd00
mov eax, dword [rsp + 0x5c]
mov ecx, 0x14a
add eax, 0xbe1d
mov dword [rbp - 0x78], eax
mov eax, dword [rsp + 0x5c]
movzx edx, byte [0x18005374b]
add eax, 0x13a
mov r8d, dword [0x18005380c]
add r10, rcx
mov qword [rbp - 0x50], r10
mov dword [rbp - 0x68], eax
lea eax, [rdx - 0x7434cd15]
mov dword [0x1800537f4], eax
lea r14d, [r8 + r14*2]
sub rcx, rsi
jne 0x18001ddbb
mov rax, qword [0x180053848]
mov rcx, rbx
test rax, rax
mov dword [rsp + 0x5c], r14d
mov edi, 2
sete cl
mov qword [0x180053858], rcx
mov ecx, dword [rbp - 0x68]
mov eax, dword [rbp - 0x78]
imul ecx, eax
mov eax, 0xe931cb
sub eax, ecx
cmp byte [r12], 0x68
mov dword [rbp - 0x68], eax
jne 0x18001de52
cmp byte [r12 + 5], 0xc3
jne 0x18001e12a
mov ecx, dword [0x180053734]
mov eax, dword [0x180053734]
and ecx, eax
mov eax, dword [rsp + 0x44]
and eax, ecx
test r10, r10
mov dword [0x180053734], eax
cmovne r13d, dword [0x1800537f0]
mov dword [rsp + 0x48], r13d
mov rcx, qword [rbp - 0x28]
mov eax, 3
mov qword [rcx], rsi
jmp 0x1800203a7
cmp byte [r12], 0x90
jne 0x18001e12a
cmp byte [r12 + 1], 0x68
jne 0x18001e12a
cmp byte [r12 + 6], 0xc3
jne 0x18001e12a
call qword [sym.imp.USER32.dll_GetMessageTime]
movsx ecx, word [0x1800537fc]
mov word [0x180053818], ax
not ecx
movzx eax, word [rsp + 0x54]
cmp ecx, eax
jne 0x18001dec3
movzx ecx, byte [0x18005374b]
mov eax, dword [rsp + 0x58]
cmp ecx, eax
jae 0x18001ded4
mov eax, dword [0x180053838]
mov ecx, 0x81e
sub qword [rbp - 0x50], rax
movzx eax, word [rsp + 0x34]
sub ax, cx
mov word [0x1800537f8], ax
jmp 0x18001ded4
movzx eax, word [rsp + 0x34]
mov eax, dword [0x1800536f4]
mov eax, dword [0x180053838]
mov eax, 0x85
mov word [0x1800537fc], ax
mov al, byte [0x18005371e]
mov cl, byte [0x18005371e]
add al, 0x19
add cl, al
mov byte [0x18005371e], cl
mov ecx, dword [0x1800536f4]
movzx eax, word [0x180053834]
cmp ecx, eax
jl 0x18001df18
mov ecx, dword [rsp + 0x58]
movzx eax, word [rsp + 0x6c]
add ecx, eax
mov dword [rsp + 0x58], ecx
jmp 0x18001df3b
mov eax, dword [0x18005381c]
test eax, eax
je 0x18001df3b
mov eax, dword [rsp + 0x44]
test eax, eax
jne 0x18001df30
mov eax, dword [0x18005374c]
mov eax, dword [rsp + 0x58]
mov word [0x180053844], ax
mov eax, dword [0x180b88880]
mov r12d, dword [rbp - 0x74]
mov dword [rsp + 0x4c], eax
movzx eax, word [rsp + 0x38]
cmp eax, r13d
jne 0x18001df77
movsx eax, word [0x1800537b4]
not eax
test eax, eax
je 0x18001df77
mov rax, qword [0x1800537e0]
mov ecx, 0x1bfd
mov eax, dword [rsp + 0x48]
sub ax, cx
add r12w, ax
mov eax, dword [rsp + 0x4c]
mov edx, ebx
add eax, 0xca
mov dword [rsp + 0x78], eax
movsx eax, word [0x1800537fc]
cmp dword [0x180053814], eax
mov eax, ebx
sete dl
cmp dword [0x180053814], 0x64
sete al
cmp edx, eax
jb 0x18001dfad
mov word [0x1800537f8], di
mov eax, dword [rsp + 0x4c]
add eax, 0x2d8
mov dword [rbp - 0x44], eax
movsx eax, word [0x18005378c]
sub dword [0x180053814], eax
mov ecx, dword [rsp + 0x4c]
mov eax, dword [rbp - 0x68]
add ecx, eax
mov dword [rbp - 0x78], ecx
mov ecx, 0x296a
mov dword [0x180053800], ecx
mov eax, dword [0x180053800]
sub eax, 0x7e7e
cmp dword [0x18005383c], eax
jne 0x18001e068
movzx ecx, word [0x18005379c]
call fcn.180027480
movzx ecx, ax
mov edx, ebx
cmp rcx, 9
mov eax, ebx
sete dl
test rcx, rcx
sete al
cmp eax, edx
jb 0x18001e03f
mov al, byte [0x18005371e]
sub sil, al
mov rax, qword [0x180053858]
add byte [0x18005371f], sil
mov r15d, dword [0x1800537dc]
test rax, rax
cmovne r15, qword [0x1800537e0]
jmp 0x18001e061
mov rax, qword [0x180053858]
movzx eax, word [0x180053804]
shl ax, 3
mov word [rsp + 0x40], ax
movsx eax, word [rsp + 0x34]
mov dword [0x1800537f0], eax
movzx eax, word [0x180053844]
mov ecx, dword [rbp - 0x44]
mov eax, dword [rsp + 0x78]
imul ecx, eax
mov eax, dword [rbp - 0x78]
add ecx, eax
mov eax, dword [rbp - 0x78]
and eax, 0x33f
cmp ecx, eax
je 0x1800203a5
test r14d, r14d
jne 0x18001e091
movzx eax, word [rsp + 0x30]
mov rcx, qword [0x1800537e0]
movzx eax, byte [rsp + 0x74]
and rcx, rax
mov qword [0x1800537e0], rcx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov ecx, ebx
mov qword [0x180053858], rax
mov rax, qword [0x180053858]
cmp rax, rdi
mov rax, qword [0x180053858]
setl cl
test rax, rax
sets bl
cmp ebx, ecx
jae 0x18001e102
movsxd rax, dword [0x18005374c]
cmp rax, r15
jne 0x18001e120
mov rax, qword [rbp - 0x50]
add eax, 0x1624b04a
mov dword [0x180053838], eax
mov eax, dword [0x180053810]
add eax, 0xd4b93db
mov dword [rsp + 0x44], eax
jmp 0x18001e120
movzx edx, byte [0x18005374b]
movzx eax, byte [0x1800537b4]
movsx ecx, r12w
cmp ecx, r14d
cmovae edx, eax
mov byte [0x18005374b], dl
mov eax, 3
jmp 0x18001e2b9
mov edx, dword [rbp - 0x5c]
mov eax, dword [rsp + 0x78]
mov ecx, dword [rsp + 0x78]
imul edx, eax
mov eax, dword [rbp - 0x70]
sub ecx, eax
cmp edx, ecx
je 0x1800203a5
movzx eax, word [0x18003cae0]
lea rcx, [rbp + 0x18]
movups xmm0, xmmword [str.._AV_RefCounterBas]
mov word [rbp + 0x28], ax
mov al, byte [0x18003cae2]
mov byte [rbp + 0x2a], al
movups xmmword [rbp + 0x18], xmm0
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov qword [0x180053848], 0x7f
mov ecx, dword [rsp + 0x48]
mov rax, qword [0x180053848]
add ecx, esi
cmp rax, rcx
jne 0x18001e204
mov rax, qword [0x180053848]
test rax, rax
movsx rax, word [rbp - 0x58]
jne 0x18001e1a3
mov rax, qword [0x180053828]
mov word [rsp + 0x38], ax
mov eax, dword [0x180053838]
cmp eax, esi
jne 0x18001e204
movsx ecx, word [0x180053840]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call fcn.180027320
mov r13d, dword [rsp + 0x7c]
mov dword [0x180053838], eax
mov eax, dword [0x180053838]
test eax, eax
jne 0x18001e209
test r13w, r13w
je 0x18001e1ee
mov rcx, qword [0x180053820]
mov qword [rbp - 0x50], rcx
jmp 0x18001e1f6
mov eax, dword [rsp + 0x58]
mov qword [rbp - 0x50], rax
movsx eax, byte [0x180ba7a64]
mov word [rsp + 0x34], ax
jmp 0x18001e209
mov r13d, dword [rsp + 0x7c]
mov eax, dword [0x18005380c]
mov ecx, ebx
test eax, eax
mov qword [0x180053848], 0x7f
mov r8d, 0xed8629e7
cmove cx, ax
mov eax, dword [0x18005381c]
add cx, ax
movzx eax, word [0x180053840]
add ax, cx
mov word [rsp + 0x68], ax
mov al, 0xff
cmp byte [r12], al
jne 0x18001e2c5
cmp byte [r12 + 1], 0x25
jne 0x18001e45c
cmp byte [r12 + 2], bl
jne 0x18001e45c
mov ecx, 0x9b
mov rax, qword [0x180053848]
mov edx, 0x6dc2
xor ax, dx
mov word [rsp + 0x34], ax
mov rax, qword [0x180053858]
add rax, rsi
mov qword [0x180053858], rax
sub rcx, rsi
jne 0x18001e264
movzx eax, word [0x18005378c]
test ax, ax
je 0x18001e2b4
movzx eax, byte [rsp + 0x74]
mov ecx, 0xffff8182
sub ecx, eax
mov eax, dword [rsp + 0x44]
imul eax, ecx
mov qword [0x180053820], rax
mov eax, 4
mov rcx, qword [rbp - 0x28]
mov qword [rcx], rdi
jmp 0x1800203a7
cmp byte [r12], 0x8b
jne 0x18001e45c
cmp byte [r12 + 1], al
jne 0x18001e45c
cmp byte [r12 + 2], al
jne 0x18001e45c
cmp byte [r12 + 3], 0x25
jne 0x18001e45c
mov eax, dword [0x18005380c]
mov dword [0x180c1b7d0], eax
mov dword [0x1800536f4], esi
mov eax, dword [rsp + 0x48]
test eax, eax
je 0x18001e380
mov eax, dword [0x180053830]
cmp r15, rax
jae 0x18001e34d
movzx ecx, word [0x18005378c]
mov eax, dword [rsp + 0x48]
not cx
xor ax, cx
movsx ecx, r14w
movsx edx, ax
movsx eax, byte [0x180053733]
imul edx, ecx
mov ecx, 0x6d3b
add ax, cx
mov word [rbp - 0x58], ax
not dx
mov dword [rbp - 0x6c], edx
jmp 0x18001e380
mov rcx, qword [0x1800537e0]
mov eax, r14d
cmp rax, rcx
jge 0x18001e36c
movzx eax, word [0x180053818]
mov byte [0x180053733], 0x2a
jmp 0x18001e380
mov al, byte [0x18005371e]
test al, al
je 0x18001e380
mov eax, dword [rsp + 0x48]
mov dword [0x18005383c], eax
mov eax, dword [0x180b88880]
mov dword [rsp + 0x7c], eax
mov ecx, dword [rsp + 0x44]
mov eax, dword [rsp + 0x48]
sub ecx, eax
mov eax, dword [rsp + 0x44]
add eax, ecx
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x7c]
add eax, 0x347
mov dword [rsp + 0x78], eax
mov eax, dword [rsp + 0x7c]
add eax, 0x1f5
mov dword [rbp - 0x70], eax
mov eax, dword [rsp + 0x7c]
add eax, 0x404
mov dword [rbp - 0x5c], eax
mov ecx, dword [rbp - 0x70]
mov edx, dword [rsp + 0x78]
add ecx, 0xfffffec3
mov eax, dword [rsp + 0x78]
add edx, ecx
sub eax, 0xb4
cmp eax, edx
je 0x18001e463
mov eax, dword [rsp + 0x58]
mov edx, ebx
movsx ecx, word [0x18005379c]
cmp ecx, eax
mov eax, ebx
sete dl
cmp word [0x18005379c], si
sete al
cmp edx, eax
jne 0x18001e42f
mov eax, dword [0x18005374c]
test eax, eax
je 0x18001e452
mov eax, dword [rsp + 0x44]
test eax, eax
je 0x18001e452
cmp byte [0x180053733], bl
je 0x18001e452
mov rax, qword [0x1800537e0]
mov rax, qword [0x1800537e8]
jmp 0x18001e452
movsx eax, word [rsp + 0x40]
cmp eax, dword [0x1800537dc]
setne bl
cmp ebx, dword [0x1800537f0]
je 0x18001e452
movzx eax, word [rsp + 0x38]
add ax, si
mov word [rsp + 0x38], ax
mov eax, 4
jmp 0x180020049
mov dword [0x180053800], r8d
mov edx, dword [rsp + 0x74]
mov eax, dword [0x180053800]
mov edi, dword [rsp + 0x6c]
movzx r14d, dl
mov dword [rbp - 0x70], r14d
lea ecx, [r14 + 1]
cmp eax, ecx
jne 0x18001e4a0
mov eax, 0xfffff09c
mov word [rbp - 0x74], ax
mov rax, qword [0x1800537e0]
cmp rax, rsi
cmove di, word [0x18005380c]
mov dword [rsp + 0x6c], edi
mov dword [0x180053800], r8d
mov ecx, 0x510
movzx eax, dl
add ax, cx
mov ecx, 0xfffffd8f
mov word [0x18005379c], ax
mov eax, 0xffce
mov word [rsp + 0x38], ax
mov eax, dword [rsp + 0x50]
sub ecx, eax
mov eax, dword [rsp + 0x50]
add ecx, eax
mov eax, dword [rsp + 0x50]
cmp eax, ecx
je 0x1800203a5
mov rcx, qword [0x180053848]
mov rax, qword [0x180053858]
movsx edx, ax
movsx eax, cx
mov ecx, 0x31de
imul eax, edx
mov word [rsp + 0x30], ax
mov rax, qword [0x1800537e0]
sub ax, cx
movsxd rcx, dword [0x180053810]
mov word [0x1800537fc], ax
call fcn.18002773c
mov dword [0x18005374c], eax
mov eax, dword [0x18005374c]
test eax, eax
je 0x18001e5b4
mov ecx, 0xa9
call fcn.18002773c
mov edi, dword [rsp + 0x5c]
mov dword [0x18005380c], eax
mov rax, qword [0x1800537e8]
test rax, rax
je 0x18001e58f
mov rcx, qword [0x1800537e8]
mov edx, ebx
mov rax, qword [0x1800537e0]
cmp rcx, rax
mov rax, qword [0x1800537e8]
mov ecx, ebx
setne dl
cmp rax, 0x48
setne cl
cmp edx, ecx
je 0x18001e635
mov dword [0x1800537dc], 0x416a185d
jmp 0x18001e635
mov rax, qword [0x180053828]
test rax, rax
jne 0x18001e635
movzx eax, byte [0x18005374b]
add eax, 0x3c8df49c
mov dword [rsp + 0x48], eax
jmp 0x18001e635
movzx ecx, word [rsp + 0x54]
mov eax, dword [0x180053800]
cmp eax, ecx
jne 0x18001e5ea
cmp dword [0x180053830], ebx
je 0x18001e5ea
movzx eax, word [rsp + 0x38]
mov ecx, dword [rbp - 0x74]
movzx eax, cx
mov edi, dword [rsp + 0x5c]
test cx, cx
cmovne ax, di
mov word [0x1800537fc], ax
jmp 0x18001e635
test di, di
mov edi, dword [rsp + 0x5c]
je 0x18001e613
mov eax, dword [rsp + 0x58]
mov ecx, 0x2ade
sub edi, eax
movzx eax, word [rsp + 0x34]
add ax, cx
mov dword [rsp + 0x5c], edi
mov word [0x180053818], ax
jmp 0x18001e635
movsx eax, word [rbp - 0x58]
not eax
test eax, eax
je 0x18001e635
mov rcx, qword [0x180053828]
movsxd rax, dword [0x180053810]
sub rcx, rax
mov qword [0x180053828], rcx
mov eax, dword [0x180b88880]
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x50]
add eax, 0x27f
mov dword [rbp - 0x5c], eax
test r15, r15
je 0x18001e66b
movzx eax, word [rsp + 0x54]
mov ecx, dword [0x1800536f4]
add cx, ax
mov eax, 0x2c37
add cx, ax
mov word [rsp + 0x54], cx
mov eax, dword [rsp + 0x50]
mov r12d, dword [rsp + 0x74]
add eax, 0x268
mov esi, dword [rsp + 0x60]
mov r14d, dword [rbp - 0x6c]
mov dword [rbp - 0x78], eax
mov eax, dword [rsp + 0x50]
add eax, 0x276
mov dword [rbp - 0x68], eax
mov eax, 0xd9b2101f
mov qword [0x180053848], rax
movsx rax, word [rsp + 0x30]
mov rdx, qword [0x180053848]
add rdx, rax
movsxd rax, dword [0x180053734]
cmp rax, rdx
jne 0x18001e779
mov edx, dword [0x18005380c]
mov ecx, ebx
cmp edx, dword [0x180053850]
mov eax, ebx
sete cl
cmp edx, 0x52
sete al
cmp ecx, eax
jbe 0x18001e73a
mov r9b, byte [0x180053810]
xor r8d, r8d
mov dl, 0xd2
mov cl, 0x25
call fcn.1800275ec
movsx ecx, al
mov eax, dword [0x180053800]
mov dword [0x1800537f0], ecx
movsx ecx, word [0x180053808]
cmp eax, ecx
je 0x18001e72d
movzx eax, sil
cmp eax, dword [rbp - 0x7c]
jne 0x18001e764
mov rax, qword [0x180053858]
sub r13w, di
add r13w, ax
mov word [rbp - 0x58], r13w
movzx r13d, word [0x180b88880]
jmp 0x18001e764
movsx eax, word [0x18005378c]
mov dword [rsp + 0x44], eax
jmp 0x18001e764
cmp dword [0x1800537f0], ebx
jne 0x18001e764
test r12b, r12b
je 0x18001e764
mov eax, dword [rsp + 0x44]
imul ecx, edx, 0xd3a7
add ecx, eax
imul eax, r15d, 0x8953c625
mov dword [rsp + 0x44], ecx
mov dword [0x1800537dc], eax
movsx eax, r14w
sub eax, 0x5232d367
cmp dword [0x180053814], eax
je 0x18001e690
mov r12, qword [rbp - 0x20]
mov esi, 1
mov r14d, dword [rbp - 0x70]
mov dword [rsp + 0x7c], r13d
cmp byte [r12], 0xb8
jne 0x18001e836
cmp byte [r12 + 5], 0xff
jne 0x18001e836
cmp byte [r12 + 6], 0xe0
jne 0x18001e836
mov eax, dword [rsp + 0x48]
mov ecx, ebx
cmp byte [0x18005374b], bl
sete cl
sub ax, cx
cwde
cmp eax, dword [0x180053850]
jne 0x18001e7d6
cmp word [0x180053804], bx
je 0x18001de41
movzx eax, word [rsp + 0x34]
test ax, ax
je 0x18001e820
cmp dword [0x18005383c], ebx
mov rcx, rbx
movzx eax, word [rsp + 0x38]
sete cl
add rcx, qword [rbp - 0x50]
movsx ecx, word [0x1800537fc]
cmove ebx, eax
movzx eax, byte [0x18005371f]
xor ecx, eax
mov eax, dword [rbp - 0x6c]
cwde
xor eax, ecx
sub eax, ebx
not eax
cdqe
mov qword [0x1800537e0], rax
jmp 0x18001de41
test r13w, r13w
je 0x18001de41
mov rax, qword [0x1800537e0]
jmp 0x18001de41
mov edx, dword [rbp - 0x6c]
mov r13d, 0xffff9bc6
movsx r15d, dx
mov dword [rbp - 0x70], r15d
lea edi, [r15 + 0xe9]
jmp 0x18001e877
movsx ecx, word [0x18005378c]
add ecx, r15d
cmp ecx, esi
jne 0x18001e88a
call qword [sym.imp.USER32.dll_GetFocus]
test rax, rax
je 0x18001e877
mov r8d, esi
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetUpdateRect]
movsx eax, word [0x1800537fc]
mov word [0x1800537b4], r13w
cmp eax, edi
je 0x18001e850
mov eax, dword [rbp - 0x64]
mov ecx, dword [rbp - 0x80]
add eax, 0x14d
add ecx, 0xaf
or ecx, eax
cmp ecx, 0x1f2
je 0x1800203a5
movzx ecx, word [0x180053844]
mov r13d, 0xb4
movzx eax, word [0x180053834]
imul eax, ecx
movsx rcx, word [0x1800537fc]
imul rcx, qword [0x180053820]
mov word [0x180053834], ax
and qword [0x180053820], rcx
mov eax, dword [0x180b88880]
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x50]
add eax, r13d
mov dword [rsp + 0x78], eax
movzx eax, word [rsp + 0x30]
test ax, ax
je 0x18001e90c
mov eax, dword [0x180053850]
mov qword [0x1800537e0], rax
jmp 0x18001e918
mov eax, 0xc6
mov word [0x180053818], ax
mov eax, dword [rsp + 0x50]
mov edx, 0x9a
add eax, 0xc3
mov qword [rsp + 0x20], rbx
mov dword [rbp - 0x80], eax
xor r9d, r9d
movzx ecx, word [rsp + 0x38]
lea r8d, [rdx + 0x2f]
call fcn.180027200
mov qword [0x180053858], rax
mov eax, dword [rsp + 0x58]
movsx eax, word [0x180053818]
cmp dword [0x180053814], eax
jl 0x18001e95d
mov eax, dword [rsp + 0x58]
movzx eax, word [rsp + 0x40]
mov ecx, esi
mov eax, dword [0x18005381c]
mov r9d, 0x65
mov rax, qword [0x180053848]
xor r8d, r8d
movzx edi, byte [rsp + 0x60]
sub ecx, eax
mov eax, dword [0x180053814]
mov edx, r13d
imul eax, ecx
lea ecx, [r9 + 8]
mov dword [0x180053814], eax
mov eax, dword [0x18005381c]
sub eax, edi
mov dword [0x18005381c], eax
mov eax, dword [rsp + 0x50]
add eax, 0xb5e2
mov dword [rbp - 0x64], eax
call fcn.180027320
cdqe
mov qword [rbp - 0x38], rax
test rax, rax
je 0x18001e9da
mov eax, r15d
not eax
movsxd rdx, eax
movsx rax, word [0x18005379c]
xor rdx, rax
mov qword [rbp - 0x38], rdx
jmp 0x18001ea4c
cmp word [0x180053804], bx
je 0x18001e9ef
mov dword [0x180053830], 0x638
jmp 0x18001ea4c
movsx ecx, word [0x180053840]
mov r8d, ebx
mov rax, qword [0x1800537e0]
not ecx
movsxd rdx, ecx
mov ecx, ebx
cmp rdx, rax
mov eax, dword [rbp - 0x7c]
movsx edx, word [0x18005378c]
not eax
setne r8b
cmp eax, edx
sete cl
cmp ecx, r8d
jb 0x18001ea4c
mov dword [0x1800536f4], edi
movzx edx, byte [0x18005371e]
movsx rax, word [rsp + 0x34]
mov rcx, qword [0x1800537e0]
add rax, rdx
add cx, ax
add cx, si
mov word [rsp + 0x40], cx
mov ecx, 0x296a
mov eax, dword [rsp + 0x44]
add eax, 0xe9
mov word [0x1800537b4], cx
cmp dword [0x18005383c], eax
jne 0x18001ea77
mov eax, dword [rsp + 0x48]
add eax, dword [0x180053810]
cmp eax, esi
je 0x18001ea51
mov eax, dword [0x180053800]
mov edx, ebx
not eax
imul ecx, eax, 0x67da
movsx eax, word [rsp + 0x30]
test ecx, ecx
sete dl
sub edx, r14d
sub edx, eax
movsxd rax, edx
mov qword [0x1800537e0], rax
mov ecx, dword [0x180053734]
mov eax, dword [rsp + 0x48]
add ecx, eax
mov dword [rsp + 0x48], ecx
mov edx, dword [rbp - 0x80]
mov eax, dword [rsp + 0x78]
sub edx, eax
mov ecx, dword [rsp + 0x78]
mov eax, 0x44d
add ecx, 0x9e
or ecx, edx
sub eax, ecx
mov dword [rbp - 0x64], eax
call qword [sym.imp.USER32.dll_GetFocus]
mov rdi, rax
test rax, rax
je 0x18001eaf8
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindow]
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsWindowEnabled]
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsWindowUnicode]
movzx ecx, word [0x180053804]
mov edx, ebx
cmp cx, 0x25
mov eax, ebx
mov r13d, 0xa6
setg dl
test cx, cx
setg al
cmp eax, edx
jbe 0x18001eb28
mov eax, 0x774e
mov word [0x180053834], ax
jmp 0x18001eb4d
movzx eax, word [rsp + 0x40]
test ax, ax
je 0x18001eb4d
movsx ecx, word [rsp + 0x40]
movzx eax, word [0x180053834]
sub ecx, eax
sub ecx, dword [rsp + 0x5c]
sub ecx, r13d
mov dword [0x18005381c], ecx
mov eax, dword [0x180b88880]
xor r9d, r9d
mov dword [rsp + 0x50], eax
xor r8d, r8d
mov eax, dword [rsp + 0x50]
xor ecx, ecx
add eax, 0x16b
mov qword [rsp + 0x20], 0x86
mov dword [rsp + 0x78], eax
mov edx, dword [rsp + 0x44]
call fcn.180027200
mov word [rsp + 0x38], ax
mov edx, ebx
movzx eax, word [rsp + 0x38]
mov ecx, ebx
cmp ax, 0x15
movzx eax, word [rsp + 0x38]
setbe dl
test ax, ax
sete cl
cmp ecx, edx
jbe 0x18001ebc3
movzx eax, word [rbp - 0x30]
xor ax, word [0x180053830]
mov r9d, dword [rsp + 0x74]
mov word [rsp + 0x7c], ax
mov eax, dword [0x180b88880]
mov dword [rsp + 0x48], eax
jmp 0x18001ebde
mov r9, qword [rbp - 0x50]
movzx eax, word [0x180b88880]
add r9b, 0x44
mov dword [rsp + 0x74], r9d
mov word [0x180053818], ax
mov eax, dword [rsp + 0x50]
lea r14d, [r15 + 0xf9]
add eax, 0x6a7e
mov dword [rbp - 0x80], eax
movzx eax, word [rsp + 0x34]
add ax, word [0x1800537dc]
mov word [rsp + 0x34], ax
mov eax, dword [rsp + 0x50]
add eax, 0x95
mov dword [rbp - 0x68], eax
mov ecx, dword [rbp - 0x78]
movzx eax, word [0x180b9fce8]
add word [0x1800537f8], ax
mov eax, dword [rbp - 0x78]
xor ecx, eax
mov edx, dword [rbp - 0x5c]
mov eax, dword [rsp + 0x78]
add edx, 0x88
imul edx, ecx
imul ecx, eax, 0xc4
mov eax, dword [rbp - 0x80]
xor eax, ecx
mov ecx, dword [rsp + 0x78]
xor ecx, eax
mov eax, 0x2400
xor ecx, 0x17de9
mov word [0x180053808], ax
movsx eax, word [0x18005379c]
sub ecx, edx
mov dword [rbp - 0x5c], ecx
cmp eax, r14d
jne 0x18001ee1a
mov r12, qword [rbp - 0x38]
mov r13d, dword [rsp + 0x5c]
mov r15d, dword [rsp + 0x7c]
movzx edi, r9b
movsx ecx, word [0x180053844]
add ecx, edi
cmp ecx, esi
jne 0x18001ee0c
mov rax, qword [0x180053828]
test rax, rax
je 0x18001ed0c
movzx ecx, word [0x180053814]
call fcn.180027480
mov r9d, dword [rsp + 0x74]
mov word [rsp + 0x34], ax
movzx eax, word [rsp + 0x34]
test ax, ax
js 0x18001edf0
movsx eax, word [rsp + 0x68]
cmp dword [0x18005380c], eax
jne 0x18001ecfb
movzx eax, byte [0x18005371f]
mov ecx, 0xc9de75db
add ax, ax
mov word [rbp - 0x74], ax
movsx eax, word [0x1800537fc]
sub ecx, eax
mov eax, dword [0x180053800]
add eax, ecx
mov dword [0x180053800], eax
jmp 0x18001edf0
movzx eax, word [0x180053818]
movzx eax, word [rsp + 0x30]
jmp 0x18001edf0
movsx eax, word [rsp + 0x40]
mov edx, ebx
cmp eax, r13d
mov ecx, ebx
movsx eax, word [0x180053804]
setbe dl
cmp eax, 0xb1336f36
setbe cl
cmp ecx, edx
jbe 0x18001ed93
movzx eax, word [0x180053818]
test r12, r12
mov word [0x180bf12ea], ax
mov ecx, ebx
sete cl
movsx eax, r15w
add ecx, eax
mov r8d, ebx
movzx eax, r9b
mov ecx, ebx
sete r8b
test r13d, r13d
cmove cx, ax
mov eax, dword [rsp + 0x48]
add ax, si
xor r8w, cx
movsx ecx, word [0x1800537f8]
movsx edx, ax
movzx eax, word [0x180053818]
imul edx, ecx
add r8w, dx
add ax, r8w
add ax, word [rsp + 0x6c]
mov word [0x1800537fc], ax
jmp 0x18001edf0
mov eax, dword [rsp + 0x44]
neg eax
sbb ecx, ecx
neg ecx
add ecx, 0xfffffffe
cmp dword [0x1800537dc], ebx
jne 0x18001edb2
mov eax, dword [rsp + 0x48]
test eax, eax
mov eax, esi
jne 0x18001edb4
mov eax, ebx
imul ecx, eax
test ecx, ecx
je 0x18001edca
lea eax, [r13 - 0xd7]
mov dword [0x180053838], eax
jmp 0x18001edf0
movzx eax, word [0x18005378c]
mov ecx, ebx
test ax, ax
mov eax, dword [0x18005381c]
sete cl
cmp eax, ecx
je 0x18001edf0
mov eax, dword [0x180b88880]
mov qword [0x180053848], rax
mov eax, 0x2400
mov word [0x180053808], ax
movsx eax, word [0x18005379c]
cmp eax, r14d
je 0x18001ec7e
mov r12, qword [rbp - 0x20]
mov r13d, 0xa6
mov r15d, dword [rbp - 0x70]
cmp byte [r12], 0xb8
mov edi, 0x2c99
jne 0x18001f03a
cmp byte [r12 + 5], 0x50
jne 0x18001f03a
cmp byte [r12 + 6], 0xc3
jne 0x18001f03a
call qword [sym.imp.USER32.dll_GetFocus]
mov rdi, rax
test rax, rax
je 0x18001ee62
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindow]
mov rcx, rdi
call qword [sym.imp.USER32.dll_ArrangeIconicWindows]
mov eax, dword [0x180b88880]
mov dword [rsp + 0x50], eax
mov al, byte [0x18005371e]
test al, al
je 0x18001ee83
mov eax, dword [0x18005374c]
mov r8, rsi
test eax, eax
jne 0x18001ee86
mov r8, rbx
mov eax, dword [0x18005381c]
test eax, eax
je 0x18001ee9e
mov eax, dword [0x180053734]
mov edx, esi
not eax
test eax, eax
jne 0x18001eea0
mov edx, ebx
cmp dword [0x180053830], ebx
mov r9, qword [rbp - 0x30]
je 0x18001eeb3
mov ecx, esi
test r9, r9
jne 0x18001eeb5
mov ecx, ebx
cmp r9, r8
mov eax, ebx
setbe al
and ecx, edx
cmp eax, ecx
je 0x18001eeda
cmp qword [0x180053820], rbx
je 0x18001eefa
mov al, byte [0x18005371f]
mov byte [0x180c15ad4], al
jmp 0x18001eefa
movzx eax, byte [0x180053804]
imul ecx, eax, 0x6e
mov eax, dword [0x180053800]
add eax, dword [0x1800537f0]
mov dword [0x180053800], eax
mov byte [rsp + 0x60], cl
mov eax, dword [rsp + 0x50]
xor edx, edx
add eax, 0x1f1
mov dword [rbp - 0x80], eax
mov r9, qword [0x180053848]
lea ecx, [rdx + 0x40]
lea r8d, [rcx + 0x72]
call fcn.180027320
mov byte [0x180053733], al
test al, al
jne 0x18001ef65
mov eax, dword [rsp + 0x48]
mov ecx, ebx
test eax, eax
mov edx, ebx
mov eax, dword [rsp + 0x44]
sete cl
cmp ecx, r15d
sete dl
cmp edx, eax
ja 0x18001ef65
mov rax, qword [0x180053828]
movsx ecx, word [0x180053818]
mov dword [0x180b9fe6c], eax
movzx eax, byte [0x180c0b5d2]
or ax, cx
mov word [0x180053818], ax
mov eax, dword [rsp + 0x50]
add eax, 0x2c3
mov dword [rbp - 0x80], eax
mov ecx, dword [0x180053838]
movzx eax, byte [rsp + 0x74]
sub ecx, eax
mov eax, dword [0x180053838]
add eax, ecx
mov dword [0x180053838], eax
mov eax, dword [rsp + 0x50]
add eax, 0x2bb
mov dword [rbp - 0x70], eax
mov ecx, dword [rbp - 0x80]
mov eax, dword [rbp - 0x64]
imul ecx, eax
mov eax, dword [rbp - 0x5c]
add ecx, eax
mov eax, dword [rbp - 0x70]
cmp ecx, eax
je 0x18001f043
mov eax, dword [rsp + 0x48]
test eax, eax
je 0x18001f02f
movsx rdx, word [rsp + 0x68]
mov ecx, ebx
cmp rdx, qword [0x180053820]
mov eax, ebx
setl cl
cmp edx, 0x38
setl al
cmp ecx, eax
jae 0x18001eff0
movzx eax, word [rsp + 0x38]
mov ecx, 0x1f5f
add ax, cx
mov word [0x1800537b4], ax
jmp 0x18001de41
cmp dword [0x180053814], ebx
mov ecx, ebx
mov eax, dword [rsp + 0x44]
sete cl
cmp ecx, eax
movsx eax, word [rbp - 0x74]
not eax
seta bl
cmp ebx, eax
jne 0x18001de41
mov eax, dword [rsp + 0x44]
neg eax
sbb cx, cx
neg cx
add cx, 0x11d7
mov word [0x1800537b4], cx
jmp 0x18001de41
mov eax, dword [0x180053734]
jmp 0x18001de41
mov word [0x180053834], di
jmp 0x18001f048
mov edi, 0x2c99
movsx ecx, word [rsp + 0x30]
movzx eax, word [0x180053834]
inc ecx
cmp eax, ecx
jne 0x18001f0e5
mov rax, qword [0x180053828]
cmp rax, rsi
jne 0x18001f0e5
movsx r8d, word [0x18005379c]
mov ecx, r15d
movzx edx, word [0x180053834]
mov r9d, dword [0x180053810]
call fcn.180027320
cmp eax, 0x2d
mov dword [0x180053814], eax
mov edx, ebx
mov ecx, ebx
setle dl
test eax, eax
setle cl
cmp ecx, edx
je 0x18001f0b6
mov ecx, dword [0x180053830]
call qword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov word [0x180053818], ax
jmp 0x18001f0e5
cmp dword [0x18005380c], ebx
jne 0x18001f0e5
mov ecx, dword [0x18005381c]
mov eax, ebx
xor cx, word [rsp + 0x68]
cmp dword [0x180053810], ebx
sete al
sub cx, ax
add cx, word [0x1800537dc]
mov word [0x1800537fc], cx
mov ecx, dword [rsp + 0x3c]
movsx eax, word [0x180053804]
shl eax, 7
mov dword [0x180053814], eax
mov eax, dword [rsp + 0x4c]
or ecx, eax
mov edx, dword [rsp + 0x4c]
mov eax, dword [rsp + 0x4c]
add edx, eax
imul edx, ecx
mov ecx, dword [rsp + 0x3c]
mov eax, dword [rsp + 0x3c]
imul ecx, eax
mov eax, dword [rsp + 0x4c]
mov word [0x180053834], di
sub eax, ecx
cmp edx, eax
je 0x1800203a5
mov al, byte [rsp + 0x60]
lea edi, [r15 + 0x6e46fe0c]
movsxd r15, dword [rbp - 0x74]
add al, 0x20
mov byte [0x18005371f], al
mov ecx, 0x84
movsx eax, word [rsp + 0x34]
mov edx, 0x14e
movsx ecx, cx
imul eax, ecx
imul edi, dword [0x180053850]
mov dword [rbp - 0x48], eax
mov eax, dword [0x180b88880]
mov dword [rbp - 0x80], edi
mov dword [rsp + 0x3c], eax
movsx ecx, word [0x180053840]
sub edx, esi
mov eax, dword [0x180053734]
add word [0x1800537f8], si
xor eax, ecx
mov dword [0x180053734], eax
mov eax, 0x6ff9
add eax, r15d
mov word [rsp + 0x40], ax
test edx, edx
jg 0x18001f16f
mov eax, dword [rsp + 0x3c]
mov rcx, qword [rbp - 0x50]
add eax, 0xd5
mov dword [rbp - 0x40], eax
call qword [sym.imp.USER32.dll_GetParent]
mov dword [0x18005381c], eax
mov eax, dword [0x18005381c]
test eax, eax
je 0x18001f1dc
mov ecx, dword [0x180053838]
movsx eax, word [0x1800537fc]
imul ecx, eax
mov dword [0x180053838], ecx
jmp 0x18001f231
movsx rax, word [rsp + 0x40]
cmp qword [rbp - 0x38], rax
jae 0x18001f225
movsx ecx, word [rsp + 0x40]
mov eax, 0x2f4f
mov word [0x1800537f8], ax
mov edx, 0x3b12
movsx eax, word [0x1800537b4]
imul eax, ecx
mov ecx, ebx
add eax, dword [0x18005383c]
mov rax, qword [0x1800537e8]
sete cl
sub dx, cx
add dx, ax
mov dword [rbp - 0x6c], edx
jmp 0x18001f234
movzx eax, word [rsp + 0x54]
add word [0x1800537fc], di
mov edx, dword [rbp - 0x6c]
mov eax, dword [rsp + 0x3c]
mov ecx, 0xaf5bd1dd
mov r8d, dword [rsp + 0x74]
add eax, 0x1e0
mov dword [rbp - 0x78], eax
movzx r14d, r8b
mov eax, r14d
and eax, 0x867d
not eax
cdqe
mov qword [0x180053848], rax
mov eax, dword [rsp + 0x3c]
add eax, 0x305
mov dword [rbp - 0x64], eax
mov qword [0x1800537e0], rcx
mov eax, dword [rsp + 0x48]
mov rax, qword [0x1800537e0]
movsx rax, word [rbp - 0x58]
mov r9, qword [rbp - 0x30]
sub r9, rax
mov qword [0x1800537e0], rcx
cmp byte [r12], 0xa1
jne 0x18001f44b
cmp byte [r12 + 5], 0xff
jne 0x18001f44b
cmp byte [r12 + 6], 0xe0
jne 0x18001f44b
mov rcx, qword [0x1800537e8]
mov edx, ebx
movsx rax, r15w
cmp rcx, rax
mov rax, qword [0x1800537e8]
mov ecx, ebx
setge dl
cmp rax, 0x1b
setge cl
cmp edx, ecx
jbe 0x18001f2fd
movzx eax, word [0x180053818]
movzx ecx, word [rsp + 0x38]
add cx, ax
movsx r15d, r15w
movsx eax, di
imul r15d, eax
mov word [0x180053818], cx
mov eax, dword [0x180b88880]
mov dword [0x1800537f0], 0x3224
mov dword [rsp + 0x3c], eax
mov ecx, dword [rsp + 0x48]
call qword [sym.imp.USER32.dll_GetWindowTextLengthA]
mov edx, dword [rbp - 0x6c]
mov r9d, 0xadcd2c99
mov r8d, eax
mov eax, dword [rsp + 0x3c]
add eax, 0x115
movsx ecx, dx
mov dword [rsp + 0x50], eax
sub ecx, 0x5232d367
mov edi, dword [0x180053800]
mov eax, dword [rsp + 0x3c]
add eax, 0x40a
mov dword [rbp - 0x64], eax
mov eax, dword [rsp + 0x3c]
add eax, 0x374
mov dword [rbp - 0x80], eax
mov dword [0x180053734], r9d
mov eax, dword [0x180053734]
cmp eax, ecx
jne 0x18001f3b6
mov eax, dword [rsp + 0x44]
add eax, 0xe9
cmp dword [0x18005380c], eax
jne 0x18001f3b6
mov ecx, dword [0x1800537f4]
mov edx, ebx
movsx eax, word [rbp - 0x58]
cmp ecx, eax
mov eax, dword [0x1800537f4]
mov ecx, ebx
setne dl
cmp eax, 0x2f
setne cl
cmp edx, ecx
ja 0x18001f3b6
mov eax, r8d
sub r8b, 0x79
not eax
mov byte [0x180053733], r8b
mov dword [0x18005380c], eax
mov dword [0x180053734], r9d
mov eax, dword [0x18005374c]
mov ecx, dword [rbp - 0x80]
mov eax, dword [rbp - 0x64]
mov edx, dword [rsp + 0x50]
imul ecx, eax
sub edx, ecx
mov ecx, dword [rsp + 0x50]
mov eax, dword [rsp + 0x50]
or ecx, eax
cmp ecx, edx
je 0x1800203a5
movsx ecx, word [rsp + 0x34]
call qword [sym.imp.KERNEL32.dll_SetLastError]
movzx eax, word [rsp + 0x30]
test ax, ax
je 0x18001f42c
mov rcx, qword [0x1800537e8]
movsx rax, r15w
cmp rax, rcx
je 0x18001de41
movsx eax, word [rsp + 0x30]
mov edx, dword [0x18005381c]
xor edx, eax
movzx eax, word [rsp + 0x30]
add ax, dx
mov word [rsp + 0x30], ax
jmp 0x18001de41
cmp word [0x1800537f8], bx
je 0x18001de41
lea ecx, [rdi - 0x4cf53d7]
mov qword [0x1800537e8], rcx
jmp 0x18001de41
mov ecx, dword [rbp - 0x60]
mov eax, dword [rsp + 0x70]
add ecx, 0xfffffc4b
add eax, 0xca
cmp ecx, eax
je 0x1800203a5
mov ecx, dword [rsp + 0x58]
movsx eax, word [0x18005379c]
sub ecx, eax
movsx r10, r15w
mov eax, ecx
mov rcx, qword [0x180053848]
imul rcx, r10
movsx edx, dx
imul rcx, rax
mov rax, rbx
test rcx, rcx
sete al
mov qword [0x1800537e0], rax
mov cl, byte [0x18005371e]
mov al, byte [0x18005371e]
sub cl, al
mov al, byte [0x18005371e]
sub cl, al
mov byte [0x18005371e], cl
add edx, 0xb53815f6
movsx eax, word [0x180053804]
mov dword [0x1800536f4], 0xaf5bd1dd
cmp eax, edx
jne 0x18001f4e1
mov ecx, dword [0x1800537f4]
mov eax, dword [rsp + 0x44]
add ecx, eax
cmp ecx, esi
je 0x18001f4bc
mov ecx, dword [rbp - 0x7c]
add byte [0x18005371f], r13b
movzx edx, word [rsp + 0x68]
movzx eax, di
sub r13d, esi
and ax, dx
add dx, ax
mov rax, rcx
and rax, r9
mov word [rsp + 0x5c], dx
mov r9, rax
test r13d, r13d
jg 0x18001f4f0
mov qword [rbp - 0x30], rax
mov eax, dword [0x180b88880]
mov dword [rsp + 0x3c], eax
mov rcx, qword [0x1800537e8]
mov word [rsp + 0x68], dx
mov rdx, qword [rbp - 0x50]
movzx r9d, r8b
mov r8d, dword [0x180053850]
mov qword [rsp + 0x20], r10
call fcn.180027200
cmp al, 0x28
mov byte [0x180053733], al
mov ecx, ebx
movzx eax, al
setl cl
shr eax, 7
cmp eax, ecx
jbe 0x18001f5b3
movzx eax, word [rsp + 0x38]
test ax, ax
je 0x18001f5db
movzx eax, word [0x180053834]
mov edx, ebx
add eax, 0xf08c
cmp byte [rsp + 0x60], bl
mov qword [0x180053858], rax
mov eax, dword [rsp + 0x58]
movsx ecx, word [rsp + 0x30]
mov eax, ebx
sete al
and edx, eax
imul ecx, edx
movsxd rdx, ecx
movsx rcx, word [rsp + 0x30]
movsx eax, word [0x1800537fc]
add rcx, rdx
add eax, 0x1cf9b19d
add ecx, eax
not ecx
mov dword [0x180053838], ecx
jmp 0x18001f5db
mov eax, dword [0x1800537f0]
cmp rax, qword [rbp - 0x30]
sbb eax, eax
neg eax
add eax, 0xfffffffe
cmp eax, dword [0x18005383c]
jle 0x18001f5db
mov eax, dword [rsp + 0x58]
sub eax, 0xf42d
mov dword [0x180053810], eax
mov eax, dword [rsp + 0x3c]
xor edx, edx
add eax, 0xfee
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x70], eax
lea ecx, [rdx + 0x47]
call fcn.180027320
mov eax, dword [rsp + 0x3c]
movzx r12d, word [rsp + 0x6c]
add eax, 0x10a
mov dword [rbp - 0x60], eax
mov eax, dword [rsp + 0x3c]
add eax, 0x179
mov dword [rbp - 0x60], eax
movzx edi, byte [0x18005371e]
mov eax, dword [rsp + 0x70]
mov ecx, dword [rbp - 0x60]
add eax, 0xebb3
add ecx, 0x18
imul ecx, eax
mov eax, 0x18a2961
sub eax, ecx
mov dword [rbp - 0x64], eax
mov eax, dword [0x180b88880]
mov dword [rsp + 0x3c], eax
movzx eax, word [0x180053818]
test ax, ax
je 0x18001f6ba
mov al, byte [0x18005371e]
mov ecx, dword [0x18005383c]
test al, al
mov eax, r14d
cmovne ecx, dword [0x180053828]
imul eax, r12d
cmp word [rbp - 0x6c], bx
mov dword [0x180053830], ecx
mov ecx, ebx
sete cl
sub ecx, eax
movsx eax, word [0x18005379c]
inc eax
add ecx, eax
movsxd rdx, ecx
movzx ecx, byte [0x18005371e]
movsx rax, word [0x180053804]
and rax, rcx
sub rdx, rax
mov eax, dword [0x1800536f4]
not eax
movsxd rcx, eax
mov rax, qword [0x180053848]
add rcx, rdx
add eax, ecx
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x3c]
mov edx, ebx
add eax, 0x22bf
mov r13d, ebx
mov dword [rsp + 0x70], eax
mov eax, dword [rsp + 0x3c]
add eax, 0x147
mov dword [rsp + 0x70], eax
movzx eax, word [0x180053844]
mov eax, dword [rsp + 0x3c]
add eax, 0x165
mov dword [rsp + 0x70], eax
movsx eax, word [rbp - 0x58]
add eax, dword [0x1800537dc]
mov qword [0x180053858], rax
movzx eax, word [rsp + 0x38]
test ax, ax
movsx eax, word [rsp + 0x34]
movsx ecx, word [rsp + 0x34]
sete dl
add edx, eax
movzx eax, r15w
or ax, word [0x1800537b4]
mov eax, ebx
cmove r13d, edx
imul ecx, r12d
test ecx, ecx
mov ecx, ebx
sete al
sub r13d, eax
movzx eax, word [rsp + 0x30]
test ax, ax
sete cl
add r13d, ecx
movsxd rax, r13d
mov qword [rbp - 0x38], rax
mov eax, dword [rsp + 0x70]
imul ecx, eax, 0x1f40
mov eax, 0x2b95d1
sub eax, ecx
mov dword [rbp - 0x70], eax
call qword [sym.imp.USER32.dll_GetFocus]
mov r14, rax
test rax, rax
je 0x18001f77d
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindow]
mov rcx, r14
call qword [sym.imp.USER32.dll_IsWindowVisible]
mov eax, dword [0x180b88880]
mov edx, 0xf1d6
mov dword [rsp + 0x3c], eax
mov r15d, 0x6a89197b
mov eax, dword [rsp + 0x3c]
add eax, 0xe705
mov dword [rsp + 0x70], eax
mov eax, 0x7723
sub r13w, ax
mov eax, dword [rsp + 0x3c]
add byte [0x180053733], 0x64
add eax, 0x16d
mov dword [rbp - 0x60], eax
mov eax, dword [rsp + 0x3c]
add eax, 0xe4
mov word [0x180053834], dx
mov dword [rsp + 0x78], eax
movsx ecx, word [rsp + 0x30]
movzx eax, word [0x180053834]
inc ecx
cmp eax, ecx
jne 0x18001f890
movsx ecx, word [0x180053844]
mov eax, dword [rsp + 0x58]
cmp eax, ecx
jb 0x18001f85e
movsxd rax, dword [0x18005383c]
mov ecx, ebx
cmp rdi, rax
mov eax, ebx
setne cl
cmp rdi, 0x2e
setne al
cmp ecx, eax
jae 0x18001f84e
mov ecx, dword [0x180053734]
mov eax, dword [rsp + 0x48]
xor ecx, eax
mov eax, dword [0x180053734]
and eax, ecx
mov dword [0x180053734], eax
mov rcx, qword [0x180053848]
mov rax, qword [0x180053858]
xor cx, ax
movzx eax, word [0x1800537dc]
sub ax, cx
mov word [0x180053808], ax
jmp 0x18001f88a
test rdi, rdi
je 0x18001f88a
mov al, byte [rbp - 0x30]
add al, 0x6e
mov byte [rsp + 0x60], al
jmp 0x18001f88a
movzx eax, word [rbp - 0x58]
mov ecx, 0x1691
add ax, cx
movsx ecx, word [0x1800537fc]
mov word [rsp + 0x54], ax
add ecx, 0x2e
movzx eax, word [0x180053844]
xor ax, cx
mov word [0x180053844], ax
mov eax, dword [0x1800536f4]
cmp byte [0x18005374b], bl
movzx eax, word [0x180053844]
mov word [0x180053834], dx
jne 0x18001f8ab
movzx eax, word [rsp + 0x5c]
mov byte [0x180053733], al
mov r9b, 0x4b
mov eax, dword [rsp + 0x78]
xor r8d, r8d
mov ecx, dword [rsp + 0x70]
xor edx, edx
sub ecx, eax
mov eax, dword [rsp + 0x78]
add eax, 0x1c
imul eax, ecx
mov cl, 0xe2
xor eax, 0xe622a9
mov dword [rbp - 0x5c], eax
call fcn.1800275ec
mov byte [0x180053733], al
test al, al
je 0x18001f96d
mov rdx, qword [0x180053858]
mov r8d, ebx
imul rdx, qword [rbp - 0x38]
movzx eax, word [0x180053834]
not eax
not rdx
movsxd rcx, eax
sub rdx, rcx
mov ecx, dword [rsp + 0x74]
add rdx, qword [0x180053820]
movzx eax, cl
not rdx
imul eax, eax, 0x2b014707
mov rcx, rbx
test eax, eax
mov eax, esi
sete cl
imul r12d, dword [0x180053810]
and rdx, rcx
mov rcx, rbx
mov qword [0x180053848], rdx
movsx edx, word [rsp + 0x68]
sub eax, r12d
test rdi, rdi
cmove r8d, eax
movsx eax, word [0x180053840]
add eax, r8d
add edx, eax
mov eax, dword [rbp - 0x7c]
inc eax
add eax, edx
sete cl
mov qword [0x180053820], rcx
mov eax, dword [0x180b88880]
movzx r14d, byte [0x18005371f]
mov dword [rsp + 0x3c], eax
sub r14, 0xb69e
mov eax, dword [rsp + 0x3c]
add eax, 0x24ef
mov dword [rsp + 0x70], eax
movzx eax, byte [rsp + 0x60]
mov ecx, dword [0x180053734]
cmp eax, ecx
jne 0x18001f9b0
mov ecx, dword [0x180053814]
add ecx, 0xbbd7cd60
jmp 0x18001f9b3
mov ecx, dword [rbp - 0x80]
mov eax, dword [rsp + 0x3c]
add eax, 0x90
cmp ecx, dword [0x18005380c]
mov dword [rbp - 0x60], eax
jne 0x18001f9d2
shr rdi, 3
mov word [rsp + 0x40], di
jmp 0x18001f9f4
mov ecx, dword [0x180053838]
mov eax, dword [0x180053838]
sub ecx, dword [0x180053850]
movzx r15d, word [0x180053834]
sub ecx, eax
mov dword [0x180053838], ecx
mov eax, dword [rsp + 0x3c]
mov dl, 0x97
add eax, 0x137
mov dword [rbp - 0x60], eax
movsx eax, word [0x180053804]
sub eax, 0x57c0
mov dword [0x18005381c], eax
mov eax, dword [0x18005374c]
mov ecx, dword [rsp + 0x70]
add word [0x18005379c], ax
or ecx, 0x8add
mov eax, 0xaf5b
sub eax, ecx
mov cl, r13b
mov dword [rbp - 0x80], eax
mov r9, qword [0x1800537e0]
mov r8b, byte [0x180053820]
call fcn.1800275ec
cmp dword [0x1800537f0], ebx
movsx r12d, al
mov eax, dword [0x180b88880]
mov dword [rsp + 0x3c], eax
je 0x18001fa99
movzx eax, word [rsp + 0x54]
test ax, ax
je 0x18001fab2
mov rcx, qword [0x180053858]
movsx rax, r13w
imul rcx, rax
mov rax, qword [0x180053858]
sub rax, rcx
mov qword [0x180053858], rax
mov eax, 0xffffbffb
mov word [0x18005378c], ax
jmp 0x18001fab2
cmp word [rbp - 0x58], bx
je 0x18001fab2
movzx eax, byte [0x18005374b]
mov ecx, 0x4908
sub ax, cx
mov word [rbp - 0x58], ax
mov eax, dword [rsp + 0x3c]
mov rcx, qword [rbp - 0x58]
add eax, 0x9c
movsxd r10, dword [rbp - 0x74]
mov r9d, dword [rsp + 0x6c]
mov dword [rbp - 0x60], eax
mov eax, dword [0x1800536f4]
mov eax, dword [0x18005374c]
test eax, eax
mov r8b, byte [0x18005371e]
sete al
sub cl, al
movsx rax, r10w
add eax, 0x8dee6746
add r8b, cl
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x3c]
add eax, 0xe1
mov dword [rsp + 0x70], eax
test r12d, r12d
je 0x18001fb3f
mov ecx, 0x196
mov eax, dword [0x18005381c]
add r9w, ax
mov r14, qword [0x180053848]
mov eax, 0xe033cbbb
xor r14, rax
mov eax, dword [0x18005381c]
add eax, esi
mov dword [0x18005381c], eax
sub rcx, rsi
jne 0x18001fb0c
mov dword [rsp + 0x6c], r9d
jmp 0x18001fb69
movsx ecx, word [0x18005378c]
movsx eax, word [0x1800537fc]
not ecx
cmp eax, ecx
je 0x18001fb5d
mov eax, dword [rsp + 0x58]
mov eax, dword [rsp + 0x58]
jmp 0x18001fb69
mov eax, dword [0x1800536f4]
mov dword [0x18005383c], eax
mov eax, dword [rsp + 0x3c]
add eax, 0x140
mov dword [rbp - 0x68], eax
test r9w, r9w
je 0x18001fb8f
movzx eax, word [0x1800537dc]
shl ax, 4
mov word [0x180053804], ax
jmp 0x18001fba5
cmp word [0x180053808], bx
je 0x18001fba5
movzx eax, word [rsp + 0x34]
add ax, r10w
xor r10w, ax
mov ecx, dword [rsp + 0x70]
mov eax, dword [rbp - 0x60]
xor ecx, eax
mov eax, dword [rbp - 0x40]
or ecx, 0x153738
mov rdi, qword [rbp - 0x20]
sub ecx, eax
mov eax, dword [rbp - 0x78]
sub ecx, eax
mov edx, dword [rbp - 0x78]
add ecx, 0xffeac8ad
mov eax, dword [rbp - 0x40]
add edx, ecx
add eax, edx
cmp byte [rdi], 0xa1
mov dword [rsp + 0x70], eax
jne 0x18001fe56
cmp byte [rdi + 5], 0x50
jne 0x180020059
cmp byte [rdi + 6], 0xc3
jne 0x180020059
mov eax, dword [0x180053838]
test eax, eax
jne 0x18001fc07
mov eax, dword [0x18005381c]
test eax, eax
je 0x18001fc10
cmp word [0x180053808], bx
jne 0x18001fc31
mov eax, r15d
cmp qword [0x180053820], rax
jg 0x18001fc31
test r13w, r13w
je 0x18001fc3d
mov eax, dword [0x1800537f0]
mov dil, r8b
mov dword [rsp + 0x58], eax
jmp 0x18001fc41
mov al, byte [0x180053850]
mov byte [0x18005374b], al
mov edi, dword [rsp + 0x74]
mov edx, 0xfd56
mov dword [0x18005381c], edx
movsx ecx, word [rsp + 0x30]
mov eax, dword [0x18005381c]
add ecx, edx
cmp eax, ecx
jne 0x18001fc84
mov eax, dword [0x1800536f4]
movsx ecx, r13w
add ecx, 0x9bfd
cmp eax, ecx
jne 0x18001fc84
cmp dword [0x1800537f0], ebx
jne 0x18001fc84
shl r15w, 6
mov word [rsp + 0x54], r15w
mov dword [0x18005381c], edx
mov ecx, dword [0x1800536f4]
mov eax, dword [0x18005381c]
imul ecx, eax
mov dword [0x18005381c], ecx
mov rcx, qword [0x1800537e8]
movzx eax, word [0x180053834]
cmp rax, rcx
jl 0x18001fd2a
movsx r9, word [0x180053808]
mov ecx, 0xd2
movsxd rdx, dword [0x18005381c]
movzx r8d, dil
mov qword [rsp + 0x20], 0x11
call fcn.180027200
mov dword [rsp + 0x48], eax
test r14, r14
je 0x18001fcf4
movsx eax, byte [0x180bf14a3]
mov ecx, dword [rsp + 0x44]
add ecx, eax
mov dword [rsp + 0x44], ecx
jmp 0x18001fd2a
mov rax, qword [0x1800537e8]
mov ecx, ebx
mov r8d, dword [rbp - 0x7c]
cmp r8, rax
mov eax, ebx
setl cl
test r12d, r12d
sete al
cmp ecx, eax
ja 0x18001fd2a
mov eax, dword [rsp + 0x44]
mov eax, dword [0x1800537dc]
movzx ecx, dil
lea ecx, [rcx + rax*2]
mov dword [0x1800537dc], ecx
mov eax, dword [0x180b88880]
mov ecx, 0x4472
mov r10, qword [rbp - 0x58]
sub r10w, word [0x180053804]
mov dword [rsp + 0x3c], eax
mov eax, dword [rsp + 0x3c]
add eax, 0x256
mov dword [rsp + 0x64], eax
movzx eax, word [0x18005383c]
sub ax, cx
mov ecx, ebx
mov word [rsp + 0x40], ax
mov eax, dword [rsp + 0x3c]
movsx r8d, byte [0x180053733]
add eax, 0x1b4
mov dword [rsp + 0x50], eax
not r8d
mov eax, dword [0x1800536f4]
cmp r8d, eax
mov edx, dword [0x180053838]
mov r8d, ebx
sete cl
cmp edx, 0xdc01
sbb r9d, r9d
and r9d, ecx
movzx ecx, word [0x180053844]
movzx eax, word [0x180053818]
mov edx, dword [0x18005374c]
cmp ax, cx
setl r8b
test edx, edx
cmove ebx, r8d
cmp ebx, r9d
ja 0x18001fdd9
movsx eax, word [rsp + 0x34]
mov dword [rsp + 0x44], eax
mov eax, dword [0x18005374c]
sub byte [0x180053733], al
jmp 0x18001fe07
mov ecx, dword [rbp - 0x48]
mov eax, dword [rsp + 0x48]
movsx ecx, cx
cmp ecx, eax
jne 0x18001fe07
mov eax, dword [0x1800536f4]
mov ecx, dword [0x180053800]
mov eax, dword [0x180053800]
add ecx, eax
movsx eax, r10w
add ecx, eax
mov dword [0x180053800], ecx
mov eax, dword [rsp + 0x3c]
add eax, 0x2b0
mov dword [rsp + 0x3c], eax
mov ecx, dword [rsp + 0x3c]
mov eax, dword [rsp + 0x50]
mov edx, dword [rsp + 0x50]
imul ecx, eax
mov eax, dword [rsp + 0x3c]
sub edx, ecx
mov ecx, 0x217
sub edx, eax
mov eax, dword [rsp + 0x3c]
sub ecx, eax
mov eax, dword [rsp + 0x50]
add eax, ecx
cmp eax, edx
je 0x1800203a5
movsx ecx, word [0x180053844]
call qword [sym.imp.KERNEL32.dll_IsValidCodePage]
jmp 0x18001de41
cmp byte [rdi], 0x90
jne 0x180020059
cmp byte [rdi + 1], 0x90
jne 0x180020059
cmp byte [rdi + 3], 0xe9
jne 0x180020059
movsx ecx, word [rsp + 0x30]
mov edi, 0x154bbe05
add ecx, esi
mov dword [0x180053810], edi
cmp dword [0x180053810], ecx
jne 0x18001fea7
cmp dword [0x18005380c], esi
jne 0x18001fea7
movsxd rcx, dword [0x1800537f4]
call qword [sym.imp.USER32.dll_IsIconic]
mov r9d, dword [rsp + 0x6c]
mov esi, dword [rsp + 0x58]
mov eax, 0x85
mov dword [0x180053810], edi
and si, ax
mov eax, dword [0x180b88880]
xor edx, edx
movzx edi, r9w
mov r8d, 0xc9
mov ecx, edi
mov dword [rsp + 0x3c], eax
xor r9d, r9d
call fcn.180027320
mov word [0x1800537fc], ax
movsx eax, word [0x180053804]
cmp eax, edi
je 0x18001ff0c
movzx ecx, word [0x18005378c]
movzx edx, byte [0x180053830]
test cx, cx
movzx eax, byte [0x1800537f8]
cmovne edx, eax
mov byte [0x18005371e], dl
mov eax, dword [rsp + 0x3c]
add eax, 0x208
mov dword [rsp + 0x64], eax
movzx eax, word [0x180053844]
test ax, ax
je 0x18001ff73
mov r8d, dword [rbp - 0x7c]
mov eax, 0xffff8bf4
mov word [0x180053804], ax
movsx eax, word [0x180053808]
movzx edx, si
add edx, eax
lea ecx, [r8 + 0x2789990e]
movsx eax, word [rsp + 0x40]
sub edx, eax
movsx eax, word [0x180053818]
add edx, eax
movzx eax, word [rsp + 0x38]
imul ecx, eax
imul ecx, r8d
test ecx, ecx
sete bl
xor ebx, edx
mov dword [0x180053838], ebx
jmp 0x18001ff7f
mov eax, dword [0x1800536f4]
mov eax, dword [0x18005374c]
mov eax, dword [rsp + 0x3c]
add eax, 0x2f3
cmp edi, dword [0x180053810]
mov dword [rsp + 0x64], eax
jl 0x18001ffcb
movsx eax, byte [0x180053733]
cmp ax, r13w
jge 0x18001ffc4
mov eax, dword [0x180053830]
mov rcx, qword [0x180053828]
sub rcx, rax
mov rax, qword [0x180053828]
add rax, rcx
mov qword [0x180053828], rax
jmp 0x18001ffcb
movzx eax, word [0x180053840]
mov eax, dword [rsp + 0x3c]
add eax, 0x37f
mov dword [rsp + 0x70], eax
mov ecx, dword [rsp + 0x70]
mov eax, dword [rbp - 0x64]
cmp ecx, eax
je 0x1800203a5
mov eax, dword [0x18003cb08]
lea rcx, [rbp + 0xa8]
movups xmm0, xmmword [str._.well_known_openi]
mov dword [rbp + 0xc8], eax
movups xmm1, xmmword [0x18003caf8]
movzx eax, word [0x18003cb0c]
movups xmmword [rbp + 0xa8], xmm0
mov word [rbp + 0xcc], ax
movups xmmword [rbp + 0xb8], xmm1
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsx ecx, word [rsp + 0x34]
mov byte [0x18005374b], al
movzx eax, byte [0x18005374b]
sub cx, ax
mov eax, 3
mov word [rsp + 0x34], cx
mov rcx, qword [rbp - 0x28]
mov qword [rcx], 4
jmp 0x1800203a7
cmp byte [rdi + 5], 0xff
jne 0x180020330
cmp byte [rdi + 6], 0x25
jne 0x180020330
mov r11, qword [rbp - 0x30]
add r12d, esi
movsx r15d, r10w
mov r10d, 0x2c99
mov word [0x180053840], r10w
movsx edx, word [rsp + 0x30]
movsx eax, r11w
add edx, 0xadcd2c99
imul r15d, eax
movsx eax, word [0x180053840]
cmp eax, edx
jne 0x180020137
mov eax, dword [0x180053838]
movsx ecx, r13w
add ecx, 0xf1d6
cmp eax, ecx
jne 0x180020137
mov eax, dword [rsp + 0x44]
test eax, eax
je 0x1800200da
movzx eax, word [0x180053844]
mov ecx, 0x89
sub cl, al
mov byte [0x18005371e], cl
jmp 0x180020137
movsx rcx, word [0x180053808]
mov rax, qword [0x1800537e0]
cmp rcx, rax
je 0x18002011f
movzx eax, word [rsp + 0x34]
mov ecx, dword [rbp - 0x48]
cmp cx, ax
jg 0x18002011f
cmp bx, cx
jl 0x180020137
mov ecx, dword [0x180053734]
mov rax, qword [0x1800537e8]
sub ecx, 0x5cfeef47
and rax, rcx
mov qword [0x1800537e8], rax
jmp 0x180020137
mov ecx, dword [rbp - 0x7c]
add ecx, 0xffffffc6
sub r8b, 0x63
mov qword [0x180053820], rcx
mov byte [0x18005371f], r8b
add r15w, word [0x180053810]
mov edx, ebx
mov r8d, dword [rsp + 0x74]
mov edi, 2
movzx ecx, r8b
mov word [0x180053840], r10w
mov eax, dword [rsp + 0x44]
cmp eax, ecx
mov eax, dword [rsp + 0x44]
mov ecx, ebx
setb dl
cmp eax, edi
setb cl
cmp edx, ecx
jbe 0x180020179
mov dword [0x180053800], 0xb46
mov eax, dword [0x180b88880]
neg r9w
mov dword [rsp + 0x3c], eax
mov eax, dword [0x180053734]
mov eax, dword [0x1800536f4]
sub eax, 0x21664f5e
mov dword [0x1800536f4], eax
mov ecx, dword [rsp + 0x3c]
mov eax, dword [rbp - 0x70]
add ecx, eax
mov dword [rsp + 0x64], ecx
movsx eax, word [rsp + 0x30]
mov word [0x1800537fc], r9w
lea edx, [rax + rax*8]
mov eax, dword [rsp + 0x44]
shl edx, 2
sub eax, edx
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x3c]
add eax, 0x1aa
mov dword [rsp + 0x64], eax
movzx eax, word [0x180053844]
test ax, ax
je 0x180020277
movzx eax, word [rsp + 0x40]
test ax, ax
je 0x18002021c
cmp dword [0x180053814], ebx
mov ecx, 0x2165c4aa
movzx eax, byte [0x18005374b]
mov r14, r11
cmovne eax, ecx
mov dword [0x18005380c], eax
movabs rax, 0x84d520e202c4a
xor r14, rax
jmp 0x18002027d
cmp word [0x180053804], bx
jne 0x180020232
mov eax, dword [0x1800537f4]
mov rdx, rbx
test eax, eax
je 0x180020235
mov rdx, rsi
mov rcx, qword [0x180053848]
mov eax, r12d
add rcx, rax
cmp rdx, rcx
jb 0x18002027d
mov rax, qword [0x180053858]
xor eax, 0x4a3c666
mov dword [0x180053838], eax
mov rax, qword [0x180053858]
imul rcx, rax, 0x8a
mov eax, dword [0x18005374c]
add eax, ecx
mov dword [0x18005374c], eax
jmp 0x18002027d
mov eax, dword [0x180053800]
mov ecx, dword [rsp + 0x3c]
mov eax, dword [rbp - 0x5c]
add ecx, eax
mov dword [rsp + 0x64], ecx
mov ecx, dword [rbp - 0x80]
mov eax, dword [rsp + 0x70]
xor ecx, 0xb4
cmp ecx, eax
je 0x1800203a5
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessorNumber]
mov word [rsp + 0x34], ax
movzx eax, word [rsp + 0x34]
test ax, ax
js 0x180020321
movsx rcx, word [0x180053844]
mov edx, ebx
mov rax, qword [0x180053858]
cmp rcx, rax
movzx eax, word [0x180053844]
mov ecx, ebx
setne dl
cmp ax, 0x3a
setne cl
cmp edx, ecx
jbe 0x180020308
mov eax, dword [0x180b88880]
mov ecx, ebx
mov qword [0x1800537e0], rax
mov eax, dword [0x1800536f4]
test eax, eax
sete cl
cmp ecx, r12d
sete bl
mov qword [0x180053848], rbx
jmp 0x180020321
test r15w, r15w
je 0x180020321
mov ecx, dword [rsp + 0x44]
add ecx, 0x78
mov dword [0x18005374c], ecx
mov word [rsp + 0x54], r14w
mov rcx, qword [rbp - 0x28]
mov eax, esi
mov qword [rcx], 7
jmp 0x1800203a7
mov edx, dword [rbp - 0x44]
mov eax, dword [rsp + 0x64]
or edx, eax
mov eax, dword [rbp - 0x44]
imul ecx, eax, 0x2ca
cmp edx, ecx
je 0x1800203a5
lea rcx, [0x18003cb10]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test r12d, r12d
je 0x180020381
movzx eax, byte [0x18005371f]
cmp eax, dword [0x180053830]
jb 0x180020381
mov rax, qword [0x180053858]
mov ecx, 0xffffac7f
movsx ecx, cx
movsx edx, ax
imul edx, ecx
mov word [rsp + 0x40], dx
cmp byte [rdi], 0x48
jne 0x1800203a5
cmp byte [rdi + 1], 0xff
jne 0x1800203a5
cmp byte [rdi + 2], 0x25
jne 0x1800203a5
mov edi, esi
mov rcx, qword [rbp - 0x28]
mov eax, 3
mov qword [rcx], rax
jmp 0x18001da51
xor eax, eax
mov rcx, qword [rbp + 0xd0]
xor rcx, rsp
call fcn.18002fd30
lea r11, [rsp + 0x1e0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret