Function at 0x180046a90
Capabilities:
Create process on windows
Delete file
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xeb0]
sub rsp, 0xfb0
mov r12d, dword [rbp + 0xf08]
lea edi, [r9 + 0xe]
mov r13, qword [rsp + 0x68]
xor r10d, r10d
mov r15, rcx
lea rcx, [0x180000000]
mov r11d, 2
cmp r9d, edi
jae 0x180047060
mov rax, qword [rsp + 0x68]
lea ebx, [r9 - 0x41]
mov r14, qword [rsp + 0x70]
lea r9d, [r11 + 0x5a]
mov esi, dword [rbp + 0xf08]
lea r10d, [r11 + 1]
lea r11, str.WindowsOrchard_Utilities.exe
mov qword [rsp + 0x60], rax
cmp ebx, 0x3d
ja case.default.0x180046b34
movzx eax, byte [rcx + rbx + 0x47cbc]
mov ecx, dword [rcx + rax*4 + 0x47c80]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
lea rcx, [rbp - 0x10]
mov dword [rbp - 0x10], 0x6f7250
dec rcx
mov dword [rbp - 0xd], 0x736563
nop dword [rax + rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x180046b50
mov eax, dword [0x18009abf8]
mov dword [rcx], eax
jmp case.0x180046b34.14
mov rax, qword [r15]
mov qword [r14], rax
jmp case.0x180046b34.14
mov eax, 1
lea rdx, [rsp + 0x58]
mov word [rsp + 0x58], ax
lea rcx, [rbp + 0x6a0]
mov rax, qword [r8]
mov r9d, 0x47
lea r8, [rsp + 0x68]
mov qword [rsp + 0x68], rax
call fcn.180015320
mov r8d, 2
lea rcx, [rbp + 0x590]
mov edx, r8d
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x180046bb0
mov rax, qword [rax]
mov rdx, r8
mov qword [rcx], rax
lea rcx, [rbp + 0x370]
lea rax, [rbp + 0x590]
nop word [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x180046c20
mov eax, dword [rax]
mov dword [rcx], eax
jmp 0x180046fc5
movzx eax, word [0x18009abfc]
lea rcx, [rbp + 0x260]
mov word [rsp + 0x70], ax
xor edx, edx
movzx eax, byte [0x18009abfe]
mov r8d, 0x104
mov byte [rsp + 0x72], al
mov r12d, 1
xor eax, eax
mov qword [rsp + 0x73], rax
mov dword [rsp + 0x7b], eax
mov byte [rsp + 0x7f], al
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x20], xmm0
call fcn.18006e5e0
lea rcx, [rbp + 0x150]
lea rax, [rbp + 0x260]
lea edx, [r12 + 1]
nop dword [rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, r12
jne 0x180046ce0
mov eax, dword [rax]
mov dword [rcx], eax
xor eax, eax
mov esi, eax
jmp 0x180046fc5
lea r8, [0x1800be480]
mov edx, 0x104
lea rcx, [rbp + 0x480]
call fcn.180071430
mov edx, 0x5c
lea rcx, [rbp + 0x480]
call fcn.18006db00
mov edx, 0x5c
lea rcx, [rbp + 0x480]
mov byte [rax], 0
call fcn.18006db00
mov r13, rax
jmp 0x180046fc5
mov rax, qword [r8]
lea rdx, [rsp + 0x68]
lea r8, [rsp + 0x58]
mov qword [rsp + 0x68], rax
mov ecx, 0x42
mov word [rsp + 0x58], r10w
call fcn.180018420
mov esi, eax
mov eax, 1
mov qword [rsp + 0x60], rax
jmp 0x180046fc5
lea rcx, [rbp - 0x10]
dec rcx
nop
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x180046dc0
mov eax, dword [str.NextW]
mov dword [rcx], eax
movzx eax, word [0x18009ac08]
mov word [rcx + 4], ax
jmp case.0x180046b34.14
mov eax, dword [0x1800ce8dc]
lea rdx, [rbp + 0x8c0]
mov ecx, 0xffffff49
mov dword [rbp + 0xe1c], eax
call qword [0x1800ce8f0]
xor eax, eax
mov word [0x1800ce8f8], ax
jmp 0x180046fc5
mov qword [rbp + 0xe12], r8
jmp case.0x180046b34.14
mov rax, qword [r8]
movsx rdx, word [rdx]
mov rcx, qword [rax]
mov r14, qword [rcx + rdx*8 - 8]
jmp 0x180046fdd
xor edx, edx
lea rcx, [rbp + 0x260]
mov r8d, 0x100
call fcn.18006e5e0
mov r13d, 2
lea rax, [rbp + 0x30]
mov edx, r13d
lea rcx, [rbp + 0x260]
nop word [rax + rax]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x180046e60
mov r8d, 0x104
lea rcx, [rbp + 0x260]
call fcn.18006e5e0
lea rcx, [rbp + 0x480]
mov rdx, r13
lea rax, [rbp + 0x260]
nop word [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x180046ee0
mov eax, dword [rax]
mov dword [rcx], eax
xor eax, eax
mov r13d, eax
jmp 0x180046fc5
xor eax, eax
lea r8, [rbp + 0x370]
mov r9d, 0xb6
mov dword [rsp + 0x50], eax
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], rax
xor ecx, ecx
call fcn.180034b90
mov eax, 2
lea r8, [rsp + 0x58]
mov word [rsp + 0x58], ax
lea rdx, [rsp + 0x68]
mov rax, qword [rbp + 0xf00]
mov ecx, 0x42
mov rax, qword [rax]
mov qword [rsp + 0x68], rax
call fcn.180018420
jmp 0x180046fc5
test esi, esi
mov word [r13], r9w
lea r8, str.GMCH_GB1_REQUESTS.RD_PARTIAL_ANY
mov edx, 0x104
cmove r8, r11
mov rcx, r13
call fcn.180071430
lea rdx, [rbp + 0x150]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
mov r8, qword [rbp + 0xf00]
lea r11, str.WindowsOrchard_Utilities.exe
mov r10d, 3
lea r9d, [r10 + 0x59]
mov rdx, qword [rbp + 0xef8]
lea rcx, [0x180000000]
inc ebx
lea eax, [rbx + 0x41]
cmp eax, edi
jb 0x180046b12
mov rbx, qword [rsp + 0x60]
xor r10d, r10d
lea r11d, [r10 + 2]
mov r15d, dword [rbp + 0xf08]
mov r14d, 0x2e
lea eax, [r15 - 0xf]
cmp r15d, eax
jbe 0x180047755
mov esi, 0xf
lea edi, [r15 - 0x4d]
mov dword [rsp + 0x50], edi
lea r15d, [r14 + 0x18]
mov qword [rsp + 0x68], rsi
mov r9d, 0x7269
lea edx, [rsi + 0x64]
jmp 0x180047076
cmp qword [r8 + 0x10], 4
jb 0x180047c58
cmp qword [r8 + 0x18], 0x10
jb 0x180047054
mov r8, qword [r8]
cmp dword [r8], 0xffffffff
sete al
jmp 0x180047c63
mov rbx, qword [rsp + 0x68]
mov qword [rsp + 0x60], rbx
jmp 0x180047004
mov r11d, 2
cmp edi, 0x30
ja case.0x180047098.15
movzx eax, byte [rcx + rdi + 0x47d3c]
mov ecx, dword [rcx + rax*4 + 0x47cfc]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov r8d, 4
mov word [rbp + 8], r10w
lea rdx, [0x18009ac72]
lea rcx, [rbp]
call fcn.1800711ec
mov r8d, 4
lea rdx, [0x18009ad22]
lea rcx, [rbp + 0x10]
call fcn.180071234
xor r10d, r10d
mov word [rbp + 0x18], r10w
jmp 0x180047720
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x18004771d
mov r15d, 0xe7
nop dword [rax]
mov eax, r15d
sub eax, 0xe6
je 0x180047120
cmp eax, 1
jne 0x1800476fe
mov r8d, r14d
xor edx, edx
xor ecx, ecx
call fcn.18003eae0
mov r8d, r14d
xor edx, edx
xor ecx, ecx
call fcn.18003eae0
jmp 0x1800476fe
mov ebx, 0x2e
xor edx, edx
mov r8d, ebx
xor ecx, ecx
call fcn.18003eae0
lea r9d, [rbx + 0x47]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180032640
lea rdx, [0x1800954e8]
lea rcx, [rbp + 0x150]
call fcn.180074404
mov rsi, rax
test rax, rax
je 0x1800476ec
mov r14d, 0xc4
jmp 0x180047175
mov ebx, 0x2e
mov ecx, r14d
sub ecx, 0xc4
je 0x1800474ce
sub ecx, 1
je 0x1800474bc
sub ecx, 1
je 0x180047466
sub ecx, 1
je 0x18004743a
cmp ecx, 1
jne 0x180047412
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x18004742c
mov edi, ebx
nop dword [rax + rax]
mov eax, edi
sub eax, 0x2e
je 0x1800473cd
sub eax, 0x68
je 0x1800473b5
cmp eax, 0x68
jne 0x180047403
test rsi, rsi
je 0x1800473a6
mov r8, rsi
lea rcx, [rbp + 0x30]
mov edx, 0x100
call fcn.18007432c
test rax, rax
je 0x18004739a
cmp byte [rbp + 0x30], 0
je 0x18004737d
mov ebx, 0xf0
nop
cmp ebx, 0xf0
je 0x180047346
cmp ebx, 0x1a4
je 0x18004730a
cmp ebx, 0x258
je 0x180047244
cmp ebx, 0x30c
jne 0x18004736b
inc r12d
jmp 0x18004736b
lea rcx, [rbp + 0x260]
mov edx, 2
lea rax, [rbp + 0x370]
nop word [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x180047260
mov eax, dword [rax]
mov dword [rcx], eax
lea rcx, [rbp + 0x30]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x1800472c2
mov qword [rsp + 0x70], rax
lea r9, [rbp + 0x30]
mov eax, r12d
lea r8, [rsp + 0x70]
mov qword [rsp + 0x58], rax
lea rcx, [rbp + 0x7b0]
lea rax, [rbp + 0x260]
mov edx, 0xa5
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
call fcn.18003b5b0
jmp 0x18004736b
lea r8, str._WIA
mov edx, 0x100
lea rcx, [rbp + 0x30]
call fcn.180071490
xor eax, eax
mov dword [rsp + 0x58], r12d
mov r9d, 0xb6
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x370]
xor ecx, ecx
lea rdx, [rsp + 0x58]
call fcn.180034b90
jmp 0x18004736b
mov edx, 0xa
lea rcx, [rbp + 0x30]
call fcn.18006db00
lea r8, [0x18009ac00]
mov edx, 0x100
mov rcx, rax
mov r13, rax
call fcn.180071430
add ebx, 0xb4
cmp ebx, 0x3c0
jb 0x180047210
mov r8, rsi
lea rcx, [rbp + 0x30]
mov edx, 0x100
call fcn.18007432c
test rax, rax
jne 0x180047200
lea ebx, [rax + 0x2e]
mov rcx, rsi
call fcn.18007412c
xor eax, eax
mov esi, eax
lea rcx, [rbp + 0x150]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x180047403
lea rdx, [0x1800954e8]
lea rcx, [rbp + 0x150]
call fcn.180074404
mov rsi, rax
jmp 0x180047403
mov r8d, ebx
xor edx, edx
xor ecx, ecx
call fcn.18003eae0
mov r8d, ebx
xor edx, edx
xor ecx, ecx
call fcn.18003eae0
mov r8d, ebx
xor edx, edx
xor ecx, ecx
call fcn.18003eae0
mov r9d, 0x75
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180032640
add edi, 0x68
cmp edi, 0x166
jb 0x1800471c0
mov rbx, qword [rsp + 0x60]
inc r14d
cmp r14d, 0xc9
jb 0x180047170
jmp 0x1800476f8
mov rbx, 0xffffffffffffffff
mov qword [rsp + 0x60], rbx
jmp 0x180047417
mov rcx, qword [0x1800be690]
lea r9, [rbp + 0x20]
xor eax, eax
lea r8, [rbp + 0x480]
mov dword [rsp + 0x28], eax
lea rdx, [0x180095018]
mov qword [rsp + 0x20], rax
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x180047412
lea rdx, [rbp + 0x150]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
lea r8, str.BaseColumnName
mov edx, 0x104
lea rcx, [rbp + 0x150]
call fcn.180071490
lea r8, [0x18009ad48]
mov edx, 0x10
lea rcx, [rbp + 0x20]
call fcn.180071430
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0x121
call fcn.18002ef20
jmp 0x180047412
lea rcx, [rbp + 0x150]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x180047412
mov r8, rsi
lea rcx, [rbp + 0x30]
mov edx, 0x100
call fcn.18007432c
test rax, rax
je 0x1800476d6
nop dword [rax + rax]
movzx ecx, byte [rbp + 0x30]
movzx edx, byte [rbp + 0x32]
movzx eax, byte [rbp + 0x31]
cmp cl, 0x2d
jne 0x180047538
cmp al, 0x31
jne 0x18004751a
test dl, dl
jne 0x18004751a
mov rbx, 0xffffffffffffffff
mov qword [rsp + 0x60], rbx
jmp 0x1800476ab
cmp cl, 0x2d
jne 0x180047538
cmp al, 0x32
jne 0x180047538
test dl, dl
jne 0x180047538
mov rbx, 0xfffffffffffffffe
mov qword [rsp + 0x60], rbx
jmp 0x1800476ab
test cl, cl
je 0x1800476a6
mov ebx, 0x3f
mov eax, ebx
sub eax, 0x3f
je 0x18004768a
sub eax, 1
je 0x180047674
sub eax, 1
je 0x18004765d
cmp eax, 1
jne 0x18004769b
xor eax, eax
mov dword [rsp + 0x58], r12d
mov r9d, 0xb6
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x370]
xor ecx, ecx
lea rdx, [rsp + 0x58]
call fcn.180034b90
lea rcx, [rbp + 0x6a0]
mov edx, 2
lea rax, [rbp + 0x370]
nop dword [rax]
nop word [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x1800475b0
mov eax, dword [rax]
mov dword [rcx], eax
lea rcx, [rbp + 0x30]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x180047612
mov qword [rsp + 0x58], rax
lea r9, [rbp + 0x30]
mov eax, r12d
lea r8, [rsp + 0x58]
mov qword [rsp + 0x70], rax
lea rcx, [rbp + 0x7b0]
lea rax, [rbp + 0x6a0]
mov edx, 0xa5
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
call fcn.18003b5b0
inc r12d
jmp 0x18004769b
lea r8, str._TWAIN
mov edx, 0x100
lea rcx, [rbp + 0x30]
call fcn.180071490
jmp 0x18004769b
lea r8, [0x18009ac00]
mov edx, 0x100
mov rcx, r13
call fcn.180071430
jmp 0x18004769b
mov edx, 0xa
lea rcx, [rbp + 0x30]
call fcn.18006db00
mov r13, rax
inc ebx
cmp ebx, 0x43
jb 0x180047545
mov rbx, qword [rsp + 0x60]
mov r8, rsi
lea rcx, [rbp + 0x30]
mov edx, 0x100
call fcn.18007432c
test rax, rax
jne 0x1800474f0
mov rcx, rsi
call fcn.18007412c
xor eax, eax
mov esi, eax
jmp 0x180047417
mov rbx, qword [rsp + 0x60]
mov rcx, rsi
call fcn.18007412c
xor eax, eax
mov esi, eax
jmp 0x180047417
mov rbx, 0xfffffffffffffffe
mov qword [rsp + 0x60], rbx
mov r14d, 0x2e
dec r15d
cmp r15d, 0xe5
ja 0x1800470f0
mov edi, dword [rsp + 0x50]
mov r15d, 0x46
mov rsi, qword [rsp + 0x68]
xor r10d, r10d
mov edx, 0x73
mov r9d, 0x7269
mov r8, qword [rbp + 0xf00]
lea rcx, [0x180000000]
dec edi
sub rsi, 1
mov dword [rsp + 0x50], edi
mov qword [rsp + 0x68], rsi
jne 0x180047070
mov r15d, dword [rbp + 0xf08]
lea r14d, [r15 + 0x41a]
cmp r15d, r14d
jae 0x180047c5c
mov rbx, qword [rsp + 0x70]
mov ecx, 0x72
mov rsi, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x70]
lea eax, [rcx - 0x3f]
lea edx, [rcx - 0xe]
nop
cmp r15d, 0x28a
ja 0x180047ae2
je 0x180047acf
cmp r15d, 0x15e
ja 0x180047a90
je 0x180047a85
mov eax, r15d
sub eax, 0x7d
je 0x180047a44
sub eax, 0x4b
je 0x180047a24
cmp eax, 0x4b
jne 0x180047c42
movzx eax, word [0x18009adc4]
lea rdx, [rbp - 0x61]
mov r8d, 0xa
mov word [rbp - 0x63], ax
movzx eax, byte [0x18009adc6]
mov byte [rbp - 0x61], al
lea ecx, [r8 - 8]
call fcn.1800723d8
mov r8d, 4
mov dword [rbp - 0x60], 0x616e53
lea rdx, [0x18009adc8]
lea rcx, [rbp - 0x5d]
call fcn.180071f50
mov edx, 0x64
jmp 0x180047c3d
lea r8, str.Enabled:_Slow_2G
mov edx, 0x104
lea rcx, [rbp + 0x150]
call fcn.180071490
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0x121
call fcn.18002ef20
mov rcx, qword [0x1800be690]
lea r9, [rbp + 0x20]
xor eax, eax
lea r8, [rbp + 0x480]
mov dword [rsp + 0x28], eax
lea rdx, [0x180095018]
mov qword [rsp + 0x20], rax
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x18004771d
mov r8, r11
lea rdx, [0x18009ad80]
lea rcx, [rbp + 4]
call fcn.180071234
jmp 0x18004771d
mov rax, qword [r8]
lea r9, [rsp + 0x50]
mov qword [rsp + 0x40], r10
lea rcx, [rbp + 0x130]
mov qword [rsp + 0x38], r10
xor r8d, r8d
mov qword [rsp + 0x70], rax
xor edx, edx
lea rax, [rsp + 0x70]
mov dword [rsp + 0x50], ebx
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r10
mov dword [rsp + 0x20], 0x28
call fcn.180036ed0
jmp 0x18004771d
lea rcx, [rbp + 0x590]
mov rdx, r11
lea rax, [rbp + 0x370]
nop dword [rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x1800478e0
mov eax, dword [rax]
lea r9, [rsp + 0x70]
mov dword [rcx], eax
mov eax, 1
mov word [rsp + 0x50], ax
lea rcx, [rsp + 0x50]
mov rax, qword [r8]
lea r8, [rbp + 0x590]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x58]
mov byte [rsp + 0x58], dl
mov edx, 0x26
mov qword [rsp + 0x20], rax
call fcn.18005fbb0
jmp 0x18004771d
mov word [rbp - 0x7b], dx
mov dword [rbp - 0x7a], 0x323373
jmp case.0x180047098.15
mov word [rbp - 0x74], dx
jmp case.0x180047098.15
mov eax, 0x63
mov dword [rbp - 0x80], 0x6f7250
mov word [rbp - 0x7d], ax
mov eax, 0x65
mov word [rbp - 0x7c], ax
jmp case.0x180047098.15
mov word [rbp - 0x76], r9w
jmp case.0x180047098.15
mov eax, 0x5774
mov byte [rbp - 0x71], 0
mov word [rbp - 0x73], ax
mov dword [rbp - 0x30], 0x65006b
jmp case.0x180047098.15
mov eax, 0x6c
mov dword [rbp - 0x22], 0x2e0032
mov word [rbp - 0x1a], ax
mov dword [rbp - 0x1e], 0x6c0064
jmp case.0x180047098.15
mov dword [rbp], 0x65006b
mov word [rbp + 4], r10w
jmp case.0x180047098.15
mov word [rbp - 0x77], r15w
jmp case.0x180047098.15
mov eax, 0x65
mov dword [rbp - 0x2c], 0x6e0072
mov word [rbp - 0x28], ax
mov dword [rbp - 0x26], 0x33006c
jmp case.0x180047098.15
mov r8d, 4
lea rdx, [0x18009adb4]
lea rcx, [rbp - 0x66]
call fcn.180071f50
mov edx, 0x64
jmp 0x180047c3d
movzx eax, word [0x18009adb8]
lea rdx, str.eateT
mov word [rbp - 0x70], ax
lea rcx, [rbp - 0x6e]
movzx eax, byte [0x18009adba]
mov r8d, 6
mov byte [rbp - 0x6e], al
mov word [rbp - 0x18], r10w
call fcn.180071f50
mov edx, 0x64
mov dword [rbp - 0x69], 0x6c6f6f
jmp 0x180047c3d
mov word [rbp - 0x5a], 0x6f
jmp 0x180047c47
mov eax, r15d
sub eax, 0x1a9
je 0x180047ac6
sub eax, 0x4b
je 0x180047ab6
cmp eax, 0x4b
mov eax, 0x33
jne 0x180047c47
mov word [rbp - 0x4c], cx
jmp 0x180047c47
mov byte [rbp - 0x58], 0
mov dword [rbp - 0x50], 0x65006b
jmp 0x180047c42
mov byte [rbp - 0x59], 0x74
jmp 0x180047c42
mov dword [rbp - 0x4a], 0x65006e
mov dword [rbp - 0x46], 0x33006c
jmp 0x180047c47
cmp r15d, 0x3b6
ja 0x180047bfa
je 0x180047b7d
mov eax, r15d
sub eax, 0x2d5
je 0x180047b6d
sub eax, 0x4b
je 0x180047b61
cmp eax, 0x4b
jne 0x180047c42
lea r9, [rbp - 0x10]
mov word [rbp - 0x38], r10w
lea r8, [rbp]
mov edx, 0xe5
xor ecx, ecx
call fcn.1800588e0
lea r9, [rbp - 0x80]
mov edx, 0xe5
lea r8, [rbp - 0x30]
xor ecx, ecx
mov rbx, rax
call fcn.1800588e0
lea r9, [rbp - 0x70]
mov edx, 0xe5
lea r8, [rbp - 0x50]
xor ecx, ecx
mov rsi, rax
call fcn.1800588e0
mov rdi, rax
mov edx, 0x64
jmp 0x180047c3d
mov dword [rbp - 0x3c], 0x6c006c
jmp 0x180047c42
mov dword [rbp - 0x42], 0x2e0032
mov word [rbp - 0x3e], dx
jmp 0x180047c42
mov r13, qword [rbp + 0xef8]
xor r9d, r9d
xor r8d, r8d
mov rdx, r13
lea ecx, [r9 + 0x38]
call fcn.18001ec70
mov r12, qword [rbp + 0xf00]
mov rax, qword [r12 + 0x260]
cmp rax, 0xffffffffffffffff
jne 0x180047bc4
xor edx, edx
lea ecx, [rax + 3]
call rdi
mov qword [r12 + 0x260], rax
cmp rax, 0xffffffffffffffff
je 0x180047c58
cmp byte [r12 + 0x284], 0
lea rdx, [r12 + 0x28]
mov rcx, rax
je 0x180047be4
mov byte [r12 + 0x284], 0
call rsi
jmp 0x180047be6
call rbx
test eax, eax
je 0x180047c58
lea rax, [r12 + 0x54]
mov edx, 0x64
mov qword [r13], rax
jmp 0x180047c3d
mov eax, r15d
sub eax, 0x401
je 0x180047c21
cmp eax, 0x4b
jne 0x180047c42
mov rax, qword [rbp + 0xf00]
mov rcx, qword [rbp + 0xef8]
mov eax, dword [rax + 0x44]
mov dword [rcx + 0x20], eax
mov al, 1
jmp 0x180047c63
mov rcx, qword [rbp + 0xf00]
mov r13, qword [rbp + 0xef8]
mov eax, dword [rcx + 0x30]
mov dword [r13 + 0x18], eax
mov eax, dword [rcx + 0x48]
mov dword [r13 + 0x1c], eax
mov ecx, 0x72
mov eax, 0x33
add r15d, 0x4b
cmp r15d, r14d
jae 0x180047c5c
xor r10d, r10d
jmp 0x180047780
xor al, al
jmp 0x180047c63
movzx eax, byte [rbp + 0xf08]
mov rbx, qword [rsp + 0xff0]
add rsp, 0xfb0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret