Function at 0x180048e80
Capabilities:
Encode data using base64

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xd0
mov rax, qword [0x180080a28]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov r12, r9
mov rdi, r8
mov qword [rbp - 0x29], r8
mov r14d, edx
mov rdx, rcx
mov qword [rbp - 0x21], rcx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
xor r8d, r8d
mov qword [rbp - 1], r8
lea eax, [r14 - 0x12]
mov dword [rbp - 0x2d], eax
cmp r14d, eax
jbe case.0x180048f25.23
mov ebx, dword [rbp - 0x2d]
mov r15, qword [rbp - 0x21]
mov r13d, dword [rbp - 0x2d]
lea rsi, str.pProcess___0
lea r11, str._Control_.
lea r10, str.VPMINSBZrrk
lea r9, [0x180000000]
lea eax, [r14 - 0x17]
cmp eax, 0x26
ja case.0x180048f25.38
movzx eax, byte [r9 + rax + 0x49e34]
mov ecx, dword [r9 + rax*4 + 0x49df4]
add rcx, r9
jmp rcx
mov dword [rbp - 0x3d], ebx
jmp case.0x180048f25.38
mov qword [rdx], r15
jmp case.0x180048f25.38
lea r8, [rbp - 0x11]
mov edx, 0x5f
xor ecx, ecx
call fcn.18000d0f0
test al, al
je 0x180049d63
mov rdi, qword [rbp - 0x11]
mov rsi, qword [rbp - 9]
cmp rdi, rsi
je 0x18004909b
mov dword [rbp + 7], 0x53004d
mov eax, 0x41
mov word [rbp + 0xb], ax
mov dword [rbp + 0xd], 0x440046
xor eax, eax
mov word [rbp + 0x11], ax
mov eax, dword [r12]
cmp dword [rdi + 0x4c], eax
jne 0x18004908b
mov rax, qword [rbp - 0x29]
mov eax, dword [rax]
cmp dword [rdi + 0x58], eax
jne 0x18004908b
lea rcx, [rdi + 0x74]
mov r8d, 5
lea rdx, [rbp + 7]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x18004908b
mov r8d, 0x73
nop dword [rax + rax]
mov eax, r8d
sub eax, 0x73
je 0x180048fd9
cmp eax, 1
jne 0x18004907e
mov byte [rbp - 0x3d], al
jmp case.0x180048f25.23
mov rcx, qword [rbp - 0x21]
mov rax, rdi
mov edx, 4
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x180048ff0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
inc r8d
cmp r8d, 0x75
jb 0x180048fc0
add rdi, 0x274
cmp rdi, rsi
jne 0x180048f60
mov rdi, qword [rbp - 0x29]
jmp case.0x180048f25.38
mov dword [rbp - 0x3d], r8d
jmp case.0x180048f25.38
mov rcx, qword [r15 + 0x18]
mov rax, qword [r15 + 0x30]
test rcx, rcx
jne 0x1800490c6
test rax, rax
je case.0x180048f25.38
mov r15, rcx
test rax, rax
cmovne r15, rax
jmp case.0x180048f25.32
test rdx, rdx
jne case.0x180048f25.38
mov qword [rsp + 0x58], r8
mov qword [rsp + 0x50], r8
mov qword [rsp + 0x48], r8
mov qword [rsp + 0x40], r10
mov dword [rbp - 0x49], r8d
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], r8
lea rax, [rbp - 0x49]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r8
mov r9d, SHSetInstanceExplorer
xor r8d, r8d
lea rdx, [0x180077149]
xor ecx, ecx
call fcn.18002b8a0
jmp case.0x180048f25.38
mov r14, qword [rbp - 0x29]
cmp dword [r14], 0
je 0x180049c0c
mov esi, 0x90
nop word [rax + rax]
lea eax, [rsi - 0x90]
cmp eax, 5
ja case.0x18004915a.147
mov ecx, dword [r9 + rax*4 + 0x49e5c]
add rcx, r9
jmp rcx
mov edx, dword [rbp - 0x31]
lea eax, [rdx - 1]
cmp eax, 0x30
ja case.0x18004917f.12
movzx eax, byte [r9 + rax + 0x49ea4]
mov ecx, dword [r9 + rax*4 + 0x49e74]
add rcx, r9
jmp rcx
mov edi, 0xc2
nop word [rax + rax]
cmp edi, 0xc2
je 0x180049231
cmp edi, 0x8012
je 0x180049215
cmp edi, 0xff62
je 0x1800491e1
cmp edi, 0x17eb2
jne 0x180049238
xor r9d, r9d
mov r8d, 0xb1
lea rdx, [rbp - 0x41]
xor ecx, ecx
call fcn.18000c4c0
mov rbx, rax
test eax, eax
jne 0x180049c25
mov esi, 0x92
jmp 0x180049be9
mov rcx, qword [r15 + 8]
mov eax, dword [r14]
mov dword [rbp - 0x49], eax
mov dword [rsp + 0x28], 0xfc
mov qword [rsp + 0x20], rcx
xor r9d, r9d
lea r8, [rbp - 0x49]
xor edx, edx
mov rcx, r12
call fcn.180061fc0
mov ebx, eax
test eax, eax
jne 0x180049c25
jmp 0x180049238
mov dword [r15 + 0x10], 1
mov edx, 4
lea ecx, [rdx - 3]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [r15 + 8], rax
jmp 0x180049238
mov dword [r15], 1
add edi, 0x7f50
cmp edi, 0x1fd40
jbe 0x180049190
mov edi, 0x109
nop
cmp edi, 0x24f13
ja 0x1800492af
je 0x180049291
cmp edi, 0x109
je 0x180049288
cmp edi, 0xc5b7
je 0x18004927e
cmp edi, 0x18a65
jne 0x1800492e2
lea rcx, [r15 + 8]
call qword [0x1800831a0]
jmp 0x1800492d8
mov dword [r15 + 0x10], 1
jmp 0x1800492e2
mov dword [r15], 2
jmp 0x1800492e2
mov eax, dword [r14]
mov dword [rbp - 0x49], eax
mov r9d, 0x127
mov r8, qword [r15 + 8]
lea rdx, [rbp - 0x49]
mov rcx, r12
call fcn.18002c7e0
jmp 0x1800492d8
cmp edi, 0x313c1
je 0x1800492c5
cmp edi, 0x3d86f
je 0x180049ae5
jmp 0x1800492e2
lea r9, [rbp - 0x41]
xor edx, edx
lea r8d, [rdx + 0x3c]
mov rcx, qword [r15 + 8]
call fcn.1800315a0
mov ebx, eax
test eax, eax
jne 0x180049c25
add edi, 0xc4ae
cmp edi, 0x49c14
jbe 0x180049250
mov edi, pe_nt_image_headers64
nop dword [rax]
mov eax, edi
sub eax, 0x110
je 0x1800493ad
sub eax, 1
je 0x18004939d
sub eax, 1
je 0x180049351
cmp eax, 1
jne 0x1800493b4
mov eax, dword [r15 + 0x10]
mov dword [rbp - 0x49], eax
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x49]
mov ecx, 0x5e
call fcn.1800355e0
mov ebx, eax
test eax, eax
jne 0x180049c25
mov esi, 0x92
jmp 0x180049be9
mov edx, dword [r15 + 0x10]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rcx, rax
mov qword [r15 + 8], rax
test rax, rax
je 0x180049560
mov eax, dword [r14]
mov dword [rbp - 0x49], eax
mov qword [rsp + 0x20], rcx
lea r9, [rbp - 0x49]
mov r8d, 0xa6
lea rdx, [r15 + 0x10]
mov rcx, r12
call fcn.18002c300
mov ebx, eax
test eax, eax
jne 0x180049c25
jmp 0x1800493b4
mov eax, dword [rbp - 0x41]
lea eax, [rax*8]
mov dword [r15 + 0x10], eax
jmp 0x1800493b4
mov dword [r15], 4
inc edi
cmp edi, 0x114
jb 0x180049300
mov edi, 0x2f
nop word [rax + rax]
mov eax, edi
sub eax, 0x2f
je 0x180049462
sub eax, 1
je 0x180049417
cmp eax, 1
jne 0x180049470
mov eax, dword [r15 + 0x10]
mov dword [rbp - 0x49], eax
lea r9, [rbp - 0x49]
xor edx, edx
lea r8d, [rdx + 0x54]
lea rcx, [rbp - 0x41]
call fcn.180032030
mov ebx, eax
test eax, eax
jne 0x180049c25
mov esi, 0x92
jmp 0x180049be9
mov edx, dword [r15 + 0x10]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r9, rax
mov qword [r15 + 8], rax
test rax, rax
je 0x180049560
mov eax, dword [r14]
mov dword [rbp - 0x49], eax
lea rax, [rbp - 0x49]
mov qword [rsp + 0x20], rax
lea r8, [r15 + 0x10]
mov edx, 0x1e
mov rcx, r12
call fcn.180022730
mov ebx, eax
test eax, eax
jne 0x180049c25
jmp 0x180049470
mov dword [r15], 5
mov eax, dword [rbp - 0x41]
mov dword [r15 + 0x10], eax
inc edi
cmp edi, 0x32
jb 0x1800493d0
xor r8d, r8d
mov edx, 0x84
mov eax, edx
sub eax, 0x80
je 0x180049ae5
sub eax, 1
je 0x1800494f8
sub eax, 1
je 0x1800494f2
sub eax, 1
je 0x1800494ec
cmp eax, 1
jne 0x1800494ff
cmp byte [r12], 5
jne 0x1800494b3
cmp byte [r12 + 1], 0
je 0x1800494e3
mov ecx, 0xa7
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xa7
je 0x1800494d4
cmp eax, 1
je 0x180049c25
jmp 0x1800494d9
mov ebx, 7
inc ecx
cmp ecx, 0xa9
jb 0x1800494c0
mov dword [r15], 6
jmp 0x1800494ff
mov qword [r15 + 8], r8
jmp 0x1800494ff
mov dword [r15 + 0x10], r8d
jmp 0x1800494ff
mov dword [rbp - 0x41], 2
dec edx
cmp edx, 0x7f
ja 0x180049483
mov edi, 0xde
nop
cmp edi, 0x2c1
ja 0x1800495c4
je 0x18004958a
cmp edi, 0xde
je 0x18004957e
cmp edi, 0x17f
je 0x180049572
cmp edi, 0x220
jne 0x18004962d
mov ecx, dword [rbp - 0x41]
mov edx, 4
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [r15 + 8], rax
test rax, rax
jne 0x18004962d
nop word [rax + rax]
mov ebx, ILFindLastID
lea r14d, [rbx + 0x27]
mov rdi, qword [rbp - 0x29]
jmp case.0x180048f25.38
mov eax, dword [rbp - 0x41]
mov dword [r15 + 0x10], eax
jmp 0x18004962d
mov dword [r15], 7
jmp 0x18004962d
mov eax, dword [r14]
mov dword [rbp - 0x49], eax
lea rax, [r15 + 0x10]
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], rax
mov r9, r12
lea r8, [rbp - 0x49]
mov rdx, qword [r15 + 8]
mov ecx, 0x7e
call fcn.18002d490
mov ebx, eax
test eax, eax
jne 0x180049c25
jmp 0x18004962d
cmp edi, 0x362
je 0x1800495e6
cmp edi, 0x403
jne 0x18004962d
mov rax, qword [rbp - 0x19]
mov qword [r15 + 8], rax
mov esi, 0x92
jmp 0x180049be9
mov eax, dword [r15 + 0x10]
mov dword [rbp - 0x49], eax
lea r9, [rbp - 0x49]
lea r8, [rbp - 0x41]
mov edx, 0xd8
mov rcx, qword [r15 + 8]
call fcn.180046c90
mov ebx, eax
test eax, eax
jne 0x180049c25
mov edx, dword [r15 + 0x10]
shl rdx, 2
mov rcx, qword [r15 + 8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
mov qword [rbp - 0x19], rax
cmp rax, 0
je 0x180049ae5
add edi, 0xa1
cmp edi, 0x4a4
jae case.0x18004917f.7
xor r8d, r8d
jmp 0x180049510
mov esi, ILFindLastID
nop dword [rax + rax]
mov eax, esi
sub eax, 0xd
je 0x180049705
sub eax, 0x58
je 0x1800496c5
sub eax, 0x58
je 0x180049673
cmp eax, 0x58
je 0x180049ae5
jmp 0x180049713
mov eax, dword [r14]
mov dword [rbp - 0x49], eax
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x49]
mov r8, qword [r15 + 8]
lea rdx, [r15 + 0x10]
mov ecx, 0xcd
call fcn.180046400
mov ebx, eax
test eax, eax
jne 0x180049c25
mov eax, dword [r15 + 0x10]
mov dword [rbp - 0x49], eax
lea r9, [rbp - 0x49]
mov r8, qword [r15 + 8]
lea edx, [rbx + 0x30]
lea rcx, [rbp - 0x41]
call fcn.18006a2e0
mov ebx, eax
test eax, eax
jne 0x180049c25
jmp 0x180049713
mov edx, dword [r15 + 0x10]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [r15 + 8], rax
test rax, rax
jne 0x180049713
mov ecx, 0x7e
mov eax, ecx
sub eax, 0x7e
je 0x1800496f4
cmp eax, 1
je 0x180049c25
jmp 0x1800496f9
mov ebx, ILFindLastID
inc ecx
cmp ecx, 0x80
jb 0x1800496e2
jmp 0x180049713
mov dword [r15], 0xa
mov eax, dword [rbp - 0x41]
mov dword [r15 + 0x10], eax
add esi, 0x58
cmp esi, 0x16d
jb 0x180049650
mov edi, 0x112
nop word [rax + rax]
mov eax, edi
sub eax, 0x10e
je 0x180049ae5
sub eax, 1
je 0x1800497a4
sub eax, 1
je 0x18004977e
sub eax, 1
je 0x18004975a
cmp eax, 1
jne 0x1800497cc
mov dword [r15], 9
jmp 0x1800497cc
mov eax, dword [rbp - 0x41]
mov dword [r15 + 0x10], eax
mov edx, dword [rbp - 0x41]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [r15 + 8], rax
test rax, rax
je 0x180049560
jmp 0x1800497cc
mov eax, dword [r14]
mov dword [rbp - 0x49], eax
lea rcx, [r15 + 0x10]
lea rax, [rbp - 0x49]
mov qword [rsp + 0x20], rax
mov r9, qword [r15 + 8]
mov r8, r12
mov edx, ILAppendID
call fcn.1800409f0
jmp 0x1800497c2
mov eax, dword [r15 + 0x10]
mov dword [rbp - 0x49], eax
lea r9, [rbp - 0x41]
mov r8d, 0xbe
mov rdx, qword [r15 + 8]
lea rcx, [rbp - 0x49]
call fcn.18000c4c0
test eax, eax
mov ebx, eax
jne 0x180049c25
dec edi
cmp edi, 0x10d
ja 0x180049730
mov edi, 7
nop
mov eax, edi
sub eax, 5
je 0x1800498b9
sub eax, 1
je 0x180049805
cmp eax, 1
jne 0x18004984b
mov dword [r15], 8
mov eax, dword [rbp - 0x41]
mov dword [r15 + 0x10], eax
jmp 0x18004984b
mov edx, dword [r15 + 0x10]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r8, rax
mov qword [r15 + 8], rax
test rax, rax
je 0x180049560
mov eax, dword [r14]
mov dword [rbp - 0x49], eax
mov qword [rsp + 0x20], r12
lea r9, [r15 + 0x10]
lea rdx, [rbp - 0x49]
mov ecx, 0xcb
call fcn.1800587f0
mov ebx, eax
test eax, eax
jne 0x180049c25
dec edi
cmp edi, 4
ja 0x1800497e0
xor r8d, r8d
mov edi, 0x11b
nop word [rax + rax]
cmp edi, 0x26b
ja 0x18004992d
je 0x180049916
mov eax, edi
sub eax, 0x11b
je 0x18004990d
sub eax, 0x70
je 0x180049903
cmp eax, 0x70
jne 0x180049964
lea edx, [rax - 0x4c]
lea ecx, [rax - 0x6f]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [r15 + 8], rax
test rax, rax
jne 0x1800498fb
mov eax, 0x1a
cmp eax, 0x1a
je 0x1800498ea
cmp eax, 0xaaa
je 0x180049c25
jmp 0x1800498ef
mov eax, dword [r15 + 0x10]
mov dword [rbp - 0x49], eax
mov r9, qword [r15 + 8]
lea r8, [rbp - 0x41]
mov edx, 0x95
lea rcx, [rbp - 0x49]
call fcn.180022da0
mov ebx, eax
test eax, eax
jne 0x180049c25
mov esi, 0x92
jmp 0x180049be9
mov ebx, ILFindLastID
add eax, 0xa90
cmp eax, 0x1520
jbe 0x1800498a7
mov eax, dword [r14]
mov dword [rbp - 0x41], eax
jmp 0x180049964
mov dword [r15 + 0x10], 1
jmp 0x180049964
mov dword [r15], ILFindLastID
jmp 0x180049964
mov r9, r12
mov r8, qword [r15 + 8]
lea rdx, [rbp - 0x41]
mov ecx, reloc.SHELL32.dll_ILClone
call fcn.18000e3a0
jmp 0x18004995a
mov eax, edi
sub eax, 0x2db
je 0x180049941
cmp eax, 0x70
je 0x180049ae5
jmp 0x180049964
mov qword [rsp + 0x20], r8
xor r9d, r9d
lea r8d, [r9 + 0x5e]
mov rdx, qword [r15 + 8]
lea rcx, [rbp - 0x41]
call fcn.180013440
test eax, eax
mov ebx, eax
jne 0x180049c25
add edi, 0x70
cmp edi, 0x3bb
mov r8d, 0
jb 0x180049860
mov edx, dword [rbp - 0x31]
mov edi, 0x19
mov dword [rbp - 0x49], edi
cmp edi, 0x44d9
ja 0x180049a3d
je 0x1800499ee
cmp edi, 0x19
je 0x1800499da
cmp edi, 0x1149
je 0x1800499cf
cmp edi, 0x2279
je 0x1800499c2
cmp edi, 0x33a9
jne 0x180049a93
dec dword [r14]
mov dword [rbp - 0x35], 2
jmp 0x180049a93
movzx r13d, byte [r12]
inc r12
jmp 0x180049a93
inc r12
dec dword [r14]
jmp 0x180049a93
mov eax, r8d
cmp edx, 0x30
setne al
add eax, 0xd
mov dword [r15], eax
jmp 0x180049a93
cmp r13d, 0x80
jbe 0x180049a93
mov ecx, 0x119
mov edi, dword [rbp - 0x35]
mov eax, ecx
sub eax, 0x119
je 0x180049a26
sub eax, 0x68
je 0x180049a1b
cmp eax, 0x68
jne 0x180049a2a
add edi, r13d
jmp 0x180049a2a
mov eax, r13d
add r12, rax
sub dword [r14], r13d
jmp 0x180049a2a
and r13d, 0x7f
add ecx, 0x68
cmp ecx, 0x251
jb 0x180049a03
mov dword [rbp - 0x35], edi
mov edi, dword [rbp - 0x49]
jmp 0x180049a93
cmp edi, 0x5609
je 0x180049a6e
cmp edi, 0x6739
je 0x180049a5b
cmp edi, 0x7869
je 0x180049ae5
jmp 0x180049a93
mov eax, dword [rbp - 0x39]
add eax, dword [rbp - 0x35]
mov dword [rbp - 0x39], eax
mov rax, qword [r15 + 0x28]
mov qword [rax + 0x30], r15
jmp 0x180049a93
mov eax, dword [rbp - 0x35]
sub dword [rbp - 0x41], eax
lea rcx, [r15 + 0x28]
mov r9, r12
lea r8, [rbp - 0x41]
mov edx, 0x3d
call fcn.180048e80
mov ebx, eax
test eax, eax
jne 0x180049c25
add edi, 0x1130
mov dword [rbp - 0x49], edi
cmp edi, 0x8980
mov edx, dword [rbp - 0x31]
mov r8d, 0
jbe 0x180049984
mov edi, 0x7d
nop word [rax + rax]
mov eax, edi
sub eax, 0x7c
je 0x180049c06
cmp eax, 1
jne 0x180049ade
mov r15, qword [r15 + 0x18]
mov rcx, qword [r15 + 0x20]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
dec edi
cmp edi, 0x7b
ja 0x180049ac0
mov esi, 0x92
jmp 0x180049be9
movzx eax, byte [r12]
mov dword [rbp - 0x31], eax
mov eax, dword [r14]
mov dword [rbp - 0x49], eax
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], r8
mov dword [rsp + 0x28], SHSetInstanceExplorer
lea rax, [rbp - 0x49]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180051470
mov dword [rbp - 0x41], eax
jmp 0x180049be9
mov ecx, dword [rbp - 0x41]
add r12, rcx
sub dword [r14], ecx
jmp case.0x18004915a.147
mov eax, dword [rbp - 0x39]
add eax, dword [rbp - 0x41]
mov dword [rbp - 0x39], eax
jmp case.0x18004915a.147
mov eax, dword [r14]
cmp dword [rbp - 0x41], eax
ja 0x180049c20
test r15, r15
jne 0x180049b7c
lea edx, [r15 + 0x38]
lea ecx, [rdx - 0x37]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r15, rax
test rax, rax
je 0x180049560
jmp 0x180049be9
mov edi, 0x102
cmp edi, 0x102
je 0x180049ba9
cmp edi, 0x1122
je 0x180049b9f
cmp edi, 0x2142
jne 0x180049bdb
mov r15, qword [r15 + 0x20]
jmp 0x180049bdb
mov rax, qword [r15 + 0x20]
mov qword [rax + 0x18], r15
jmp 0x180049bdb
mov edx, 0x38
lea ecx, [rdx - 0x37]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [r15 + 0x20], rax
test rax, rax
jne 0x180049bdb
mov ecx, 0x2b
mov eax, ecx
sub eax, 0x2a
je 0x180049c25
cmp eax, 1
jne 0x180049bd4
lea ebx, [rax + 0xc]
dec ecx
cmp ecx, 0x29
ja 0x180049bc5
add edi, 0x1020
cmp edi, 0x3060
jbe 0x180049b81
lea r9, [0x180000000]
xor r8d, r8d
inc esi
cmp esi, 0x96
jb 0x180049140
jmp 0x18004912b
xor eax, eax
mov qword [r15 + 0x20], rax
mov r14d, 0x39
mov rdi, qword [rbp - 0x29]
jmp case.0x180048f25.38
mov ebx, 7
mov r14d, 0x34
mov rdi, qword [rbp - 0x29]
jmp case.0x180048f25.38
mov byte [rbp - 0x3d], 0
jmp case.0x180048f25.38
mov eax, dword [rbp - 0x39]
mov dword [rdi], eax
jmp case.0x180048f25.38
test r12, r12
jne 0x180049c96
mov dword [rbp - 0x49], r8d
mov qword [rsp + 0x58], r8
mov qword [rsp + 0x50], r8
mov qword [rsp + 0x48], r8
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], r8
lea rax, [rbp - 0x49]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r8
mov r9d, SHSetInstanceExplorer
xor r8d, r8d
lea rdx, [0x180077149]
xor ecx, ecx
call fcn.18002b8a0
xor r8d, r8d
test rdi, rdi
jne case.0x180048f25.38
mov qword [rsp + 0x58], r8
mov qword [rsp + 0x50], r8
mov qword [rsp + 0x48], r8
mov qword [rsp + 0x40], rsi
jmp 0x1800490ef
mov r15, r8
jmp case.0x180048f25.38
xor edx, edx
lea r8d, [rdx + 0x53]
mov rcx, r15
call fcn.18005b7d0
jmp case.0x180048f25.38
mov dword [rbp - 0x39], r8d
jmp case.0x180048f25.38
imul eax, dword [rdi], 0x38
mov dword [rbp - 0x49], eax
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], r8
mov dword [rsp + 0x28], 0xef
lea rax, [rbp - 0x49]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180051470
test eax, eax
je 0x180049d33
mov edx, 0x117
mov ecx, edx
sub ecx, 0x117
je 0x180049d25
cmp ecx, 0x63
je case.0x180048f25.23
jmp 0x180049d28
mov dword [rbp - 0x3d], eax
add edx, 0x63
cmp edx, 0x1dd
jb 0x180049d14
mov qword [rsp + 0x20], r12
mov r9d, 0x8d
mov r8, rdi
xor edx, edx
mov rcx, r12
call fcn.180052330
mov dword [rbp - 0x3d], eax
dec r14d
cmp r14d, dword [rbp - 0x2d]
jbe case.0x180048f25.23
mov rdx, qword [rbp - 0x21]
xor r8d, r8d
jmp 0x180048ee8
mov byte [rbp - 0x3d], 0
mov r8, qword [rbp - 0x11]
test r8, r8
je 0x180049dc9
mov rcx, qword [rbp - 1]
sub rcx, r8
movabs rax, 0x342da7f2f4960343
imul rcx
sar rdx, 7
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0x274
mov rax, r8
cmp rdx, 0x1000
jb 0x180049dc1
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180049dc1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r8
call fcn.180071f98
mov eax, dword [rbp - 0x3d]
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.180072740
mov rbx, qword [rsp + 0x118]
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret