Function at 0x1800b22c0
Capabilities:
Parse credit card information
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x50]
sub rsp, 0x150
mov rax, qword [0x180143ae0]
xor rax, rsp
mov qword [rbp + 0x40], rax
mov eax, dword [rsp + 0x50]
lea r13d, [rcx - 0x14]
movzx edi, byte [rsp + 0x70]
xor ebx, ebx
mov qword [rsp + 0x60], r8
mov r15, r9
mov qword [rsp + 0x78], rdx
mov r10, r8
mov dword [rbp - 0x70], eax
mov r11, rdx
mov eax, dword [rsp + 0x50]
lea edx, [rbx + 0x61]
mov dword [rsp + 0x48], ecx
lea r8d, [rbx + 0x1d]
lea r9d, [rbx + 0x7a]
mov r12d, ecx
cmp ecx, r13d
jbe 0x1800b275c
mov r11d, dword [rsp + 0x50]
lea r14d, [rcx - 0x2c]
mov esi, dword [rsp + 0x50]
mov dword [rsp + 0x5c], eax
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x50]
mov dword [rbp - 0x80], eax
mov dword [rsp + 0x4c], r11d
mov dword [rsp + 0x58], esi
nop word [rax + rax]
cmp r14d, 0x68
ja case.0x1800b238b.5
lea rcx, [0x180000000]
movzx eax, byte [rcx + r14 + 0xb45e0]
mov ecx, dword [rcx + rax*4 + 0xb458c]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov dword [rbp - 0x38], 0x656550
jmp case.0x1800b238b.5
mov dword [r10], ebx
jmp case.0x1800b238b.5
cmp qword [rsp + 0x78], 0
jne case.0x1800b238b.5
mov esi, reloc.SHLWAPI.dll_SHRegGetIntW
mov eax, esi
sub eax, 0x117
je case.0x1800b2feb.165
cmp eax, 1
jne 0x1800b23f1
mov rax, qword [0x1801953d0]
lea r9, str.fsmdef_ev_release
mov r8d, 1
mov qword [rsp + 0x20], rax
mov rcx, r15
call fcn.1800c8a10
mov eax, 0xffffffff
mov dword [rsp + 0x40], eax
lea edx, [rax + 0x62]
dec esi
cmp esi, 0x116
ja 0x1800b23b2
mov r10, qword [rsp + 0x60]
mov r11d, dword [rsp + 0x4c]
mov esi, dword [rsp + 0x58]
jmp case.0x1800b238b.5
mov ecx, r11d
mov dword [rsp + 0x5c], ebx
mov eax, 1
shl eax, cl
dec eax
mov dword [rbp - 0x70], eax
jmp case.0x1800b238b.5
movzx r11d, dil
inc r11d
mov dword [rsp + 0x68], 1
mov dword [rsp + 0x4c], r11d
jmp case.0x1800b238b.5
mov dword [rbp - 0x80], ebx
mov edx, ebx
test esi, esi
jle case.0x1800b238b.5
lea rcx, [r10 + 0x824]
mov ebx, 0xffffffff
mov eax, r8d
nop dword [rax + rax]
cmp eax, 0x1d
je 0x1800b2471
cmp eax, 0x9d
jne 0x1800b2477
mov byte [rcx + 3], dl
jmp 0x1800b2477
mov word [rcx], bx
mov byte [rcx + 2], dl
sub eax, 0xffffff80
cmp eax, 0x11d
jb 0x1800b2460
inc edx
add rcx, 4
cmp edx, esi
jl 0x1800b2458
xor ebx, ebx
jmp case.0x1800b238b.5
movzx ecx, dil
mov esi, 1
shl esi, cl
mov dword [rsp + 0x58], esi
jmp case.0x1800b238b.5
mov r8, qword [rsp + 0x78]
xor edx, edx
xor r9d, r9d
lea ecx, [rdx + 0x49]
call fcn.18009aa90
mov r10, qword [rsp + 0x60]
mov rdi, rax
mov r11d, dword [rsp + 0x4c]
jmp case.0x1800b238b.5
test r10, r10
jne 0x1800b252e
mov esi, 0xc5
mov eax, esi
sub eax, 0xc5
je 0x1800b24e8
cmp eax, 0x1c
je case.0x1800b2feb.165
jmp 0x1800b2515
mov rax, qword [0x1801953d0]
lea r9, str.SessionProcessLinks
mov r8d, 1
mov qword [rsp + 0x20], rax
mov rcx, r15
call fcn.1800c8a10
mov eax, 0xffffffff
mov dword [rsp + 0x40], eax
lea edx, [rax + 0x62]
add esi, 0x1c
cmp esi, 0xfd
jb 0x1800b24d4
mov r10, qword [rsp + 0x60]
mov r11d, dword [rsp + 0x4c]
mov esi, dword [rsp + 0x58]
mov rax, qword [rsp + 0x50]
mov rax, qword [rax + 0x18]
mov qword [r10], rax
jmp case.0x1800b238b.5
mov eax, 0x6b
mov word [rbp - 0x35], ax
mov eax, 0x4d
mov word [rbp - 0x34], ax
jmp case.0x1800b238b.5
mov rdx, qword [rsp + 0x78]
xor r9d, r9d
mov qword [rsp + 0x38], rbx
xor r8d, r8d
mov qword [rsp + 0x30], rbx
xor ecx, ecx
mov dword [rsp + 0x28], SHRegGetIntW
mov qword [rsp + 0x20], rbx
call fcn.18006d020
test al, al
je case.0x1800b2feb.165
mov dword [rsp + 0x28], SHTestTokenMembership
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rbx
xor edx, edx
xor ecx, ecx
call fcn.18008bb50
test al, al
je case.0x1800b2feb.165
mov r10, qword [rsp + 0x60]
mov r11d, dword [rsp + 0x4c]
jmp case.0x1800b238b.5
mov rax, qword [rsp + 0x78]
cmp dword [rax], 0xf
jbe case.0x1800b238b.5
mov esi, r9d
nop dword [rax + rax]
mov eax, esi
sub eax, 0x7a
je 0x1800b25e2
cmp eax, 1
je case.0x1800b2feb.165
jmp 0x1800b25f3
xor edx, edx
mov ecx, 0x10003
call fcn.18003e500
mov qword [rsp + 0x40], rbx
inc esi
cmp esi, 0x7c
jb 0x1800b25d0
mov r10, qword [rsp + 0x60]
mov r11d, dword [rsp + 0x4c]
mov esi, dword [rsp + 0x58]
jmp case.0x1800b238b.5
mov eax, 0x65
mov word [rbp - 0x33], ax
jmp case.0x1800b238b.5
cmp byte [0x180143bb9], 0
jne case.0x1800b238b.5
mov esi, 6
nop dword [rax]
cmp esi, 6
je 0x1800b2643
cmp esi, 0x44a
je case.0x1800b2feb.165
jmp 0x1800b2654
xor edx, edx
mov ecx, 0x10001
call fcn.18003e500
mov qword [rsp + 0x40], rbx
add esi, 0x444
cmp esi, 0x888
jbe 0x1800b2630
mov r10, qword [rsp + 0x60]
mov r11d, dword [rsp + 0x4c]
mov esi, dword [rsp + 0x58]
jmp case.0x1800b238b.5
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x50], rax
jmp case.0x1800b238b.5
mov ecx, 0x73
mov word [rbp - 0x32], cx
mov word [rbp - 0x31], cx
jmp case.0x1800b238b.5
lea rax, str.CanonicalizeInstructions
mov qword [rsp + 0x50], rbx
mov qword [0x1801953d0], rax
jmp case.0x1800b238b.5
mov rax, qword [rsp + 0x50]
cmp qword [rax], 0xffffffffffffffff
jne case.0x1800b238b.5
mov esi, 0x26
nop
cmp esi, 0x26
je 0x1800b26e6
cmp esi, 0x1456
je 0x1800b26db
cmp esi, 0x2886
je case.0x1800b2feb.165
jmp 0x1800b270a
mov eax, 0xffffffff
mov dword [rsp + 0x40], eax
jmp 0x1800b270a
mov rax, qword [0x1801953d0]
lea r9, str.VmodlVimFaultOvfConnectedDeviceIso
mov edx, 0x72
mov qword [rsp + 0x20], rax
mov rcx, r15
lea r8d, [rdx - 0x71]
call fcn.1800c8a10
add esi, 0x1430
cmp esi, 0x3c90
jbe 0x1800b26c0
mov r10, qword [rsp + 0x60]
mov r11d, dword [rsp + 0x4c]
mov esi, dword [rsp + 0x58]
jmp case.0x1800b238b.5
mov dword [rsp + 0x40], 1
mov edx, 0x61
dec r12d
dec r14d
lea r8d, [rdx - 0x44]
lea r9d, [rdx + 0x19]
cmp r12d, r13d
ja 0x1800b2360
mov ecx, dword [rsp + 0x48]
mov r11, qword [rsp + 0x78]
mov r9d, dword [rsp + 0x58]
jmp 0x1800b2781
mov r9d, dword [rsp + 0x50]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x5c], eax
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x50]
mov dword [rbp - 0x80], eax
mov dword [rsp + 0x58], r9d
lea r14d, [rcx - 0x12]
mov edx, 4
mov r13d, 0x8d
cmp ecx, r14d
jbe 0x1800b2f82
mov r12d, dword [rsp + 0x50]
lea esi, [rcx - 0x2f]
mov r8d, 0x6761
cmp esi, 0x65
ja case.0x1800b27d0.2
lea rcx, [0x180000000]
movzx eax, byte [rcx + rsi + 0xb4698]
mov ecx, dword [rcx + rax*4 + 0xb464c]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov r8, rdx
lea rdx, [0x180138142]
lea rcx, [rbp - 0x18]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov edx, 4
mov r8d, 0x6761
jmp case.0x1800b27d0.2
mov eax, dword [r11]
lea r9, [rsp + 0x50]
xor r8d, r8d
mov dword [rsp + 0x50], eax
mov rdx, r10
lea ecx, [r8 + 0x4e]
call fcn.180014870
mov qword [rsp + 0x40], rax
jmp 0x1800b27e6
mov dword [rbp - 0x30], 0x57656761
jmp case.0x1800b27d0.2
mov eax, 0xffffffff
lea r12d, [r9 + 2]
mov dword [rbp - 0x78], eax
jmp case.0x1800b27d0.2
cmp dword [r10], 6
ja case.0x1800b27d0.2
mov edx, 0x8f
lea r9, [0x180000000]
nop dword [rax + rax]
mov eax, edx
sub eax, 0x8e
je 0x1800b2871
cmp eax, 1
jne 0x1800b2880
movzx ecx, byte [r15]
movsxd rax, dword [r10]
inc cl
mov byte [r9 + rax*2 + 0x1446b8], cl
jmp 0x1800b2880
movsxd rcx, dword [r10]
movzx eax, byte [r15]
mov byte [r9 + rcx*2 + 0x1446b9], al
dec edx
cmp edx, r13d
ja 0x1800b2850
mov edx, 4
jmp case.0x1800b27d0.2
mov r8d, 5
lea rdx, str.user32.lib
lea rcx, [rbp + 0x10]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp 0x1800b27e6
mov rax, qword [r11]
lea rcx, [0x18000fef0]
mov qword [rax + 0x30], rcx
jmp case.0x1800b27d0.2
mov eax, dword [0x1801381c2]
mov dword [rbp - 0xf], eax
movzx eax, byte [0x1801381c6]
mov byte [rbp - 0xb], al
mov byte [rbp - 0xa], 0
jmp case.0x1800b27d0.2
movzx eax, word [0x1801381e5]
mov word [rbp - 0x18], ax
movzx eax, byte [0x1801381e7]
mov byte [rbp - 0x16], al
jmp case.0x1800b27d0.2
mov byte [rbp - 0x2c], 0
mov word [rbp + 0x10], bx
jmp case.0x1800b27d0.2
mov byte [rbp - 0x15], 0
lea rdx, [0x180138248]
mov r8d, 2
jmp 0x1800b27dc
mov r8, rdx
lea rcx, [rbp + 0x10]
lea rdx, [0x180138360]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov eax, 0x6c
mov word [rbp + 0x22], ax
jmp 0x1800b27e6
mov r8d, 1
mov word [rbp - 8], bx
lea rdx, [0x18013839e]
lea rcx, [rbp - 8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp 0x1800b27e6
mov word [rbp + 0x24], bx
jmp case.0x1800b27d0.2
mov rax, qword [r11]
mov qword [rax + 0x38], r11
dec esi
lea eax, [rsi + 0x2f]
cmp eax, r14d
jbe 0x1800b2f7e
mov r10, qword [rsp + 0x60]
mov r11, qword [rsp + 0x78]
mov r9d, dword [rsp + 0x58]
jmp 0x1800b27a7
mov qword [rsp + 0x30], rbx
mov r9, r11
mov qword [rsp + 0x28], rbx
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rbx
mov ecx, 0xcf
call fcn.18000f190
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r11, qword [rsp + 0x78]
jmp case.0x1800b27d0.59
mov r13, qword [rsp + 0x78]
mov ecx, ebx
mov esi, dword [rbp - 0x80]
mov r8d, dword [rsp + 0x5c]
mov dword [rsp + 0x48], ebx
nop word [rax + rax]
mov r11d, dword [rsp + 0x4c]
cmp esi, r11d
jge 0x1800b2afa
mov r14d, 0x15
mov eax, r14d
sub eax, 0x15
je 0x1800b2a49
sub eax, 0x73
je 0x1800b2a1a
mov r8d, dword [rsp + 0x5c]
cmp eax, 0x73
jne 0x1800b2ada
add esi, 8
mov dword [rbp - 0x80], esi
jmp 0x1800b2ada
mov r8, qword [rsp + 0x78]
xor edx, edx
xor r9d, r9d
lea ecx, [rdx + 0x49]
call fcn.18009aa90
mov r8d, dword [rsp + 0x5c]
mov ecx, esi
movzx edx, al
shl edx, cl
mov ecx, dword [rsp + 0x48]
or r8d, edx
mov dword [rsp + 0x5c], r8d
jmp 0x1800b2ada
test ecx, ecx
jne 0x1800b2acf
mov esi, 0x126
cmp esi, 0x126
je 0x1800b2aa0
cmp esi, 0x7d2e
jne 0x1800b2ab9
test ecx, ecx
jne 0x1800b2ab9
mov ecx, 0x3f
nop
cmp ecx, 0x3f
je 0x1800b2a83
cmp ecx, 0xce
je case.0x1800b2feb.165
jmp 0x1800b2a8c
mov rax, qword [r10 + 8]
mov qword [rsp + 0x40], rax
add ecx, 0x8f
cmp ecx, 0x15d
jb 0x1800b2a70
mov ecx, dword [rsp + 0x48]
jmp 0x1800b2ab9
mov r8, qword [rsp + 0x78]
xor edx, edx
xor r9d, r9d
lea ecx, [rdx + 0x49]
call fcn.18009aa90
movzx ecx, al
mov dword [rsp + 0x48], ecx
mov r10, qword [rsp + 0x60]
add esi, 0x7c08
cmp esi, 0xf810
jbe 0x1800b2a56
mov esi, dword [rbp - 0x80]
mov r8d, dword [rsp + 0x5c]
dec ecx
mov dword [rsp + 0x48], ecx
mov r10, qword [rsp + 0x60]
add r14d, 0x73
cmp r14d, 0x16e
jb 0x1800b29f4
mov r9d, dword [rsp + 0x58]
jmp 0x1800b29e0
mov r14d, 0xfb
mov dword [rsp + 0x50], r14d
nop word [rax + rax]
cmp r14d, 0xfb
je 0x1800b2f04
cmp r14d, 0xb65e
jne 0x1800b2f19
mov edx, dword [rsp + 0x6c]
sub esi, r11d
mov dword [rbp - 0x80], esi
cmp edx, r9d
jne 0x1800b2b9e
mov eax, 0x125
mov r14d, 0xffffffff
cmp eax, 0x125
je 0x1800b2b7c
cmp eax, 0x9f17
je 0x1800b2b63
cmp eax, 0x13d09
jne 0x1800b2b83
mov dword [rbp - 0x78], r14d
mov dword [rsp + 0x68], ebx
jmp 0x1800b2b83
mov ecx, r11d
lea r12d, [r9 + 2]
mov r8d, 1
shl r8d, cl
dec r8d
mov dword [rbp - 0x70], r8d
jmp 0x1800b2b83
movzx r11d, dil
inc r11d
add eax, 0x9df2
cmp eax, 0x1d9d6
jbe 0x1800b2b44
mov r14d, dword [rsp + 0x50]
mov dword [rsp + 0x4c], r11d
jmp 0x1800b2f19
lea eax, [r9 + 1]
cmp edx, eax
jne 0x1800b2c8e
mov esi, 0x8c
nop
cmp esi, 0x8c
je 0x1800b2bdf
cmp esi, 0x6158
je 0x1800b2bd1
cmp esi, 0xc224
je case.0x1800b2feb.165
jmp 0x1800b2c6f
mov rax, qword [r10 + 8]
mov qword [rsp + 0x40], rax
jmp 0x1800b2c6f
mov r15, qword [rsp + 0x78]
mov r9d, 0x88
mov dword [rsp + 0x50], ecx
mov rdx, r15
mov qword [rsp + 0x28], rbx
lea rcx, [rsp + 0x50]
xor r8d, r8d
mov qword [rsp + 0x20], rbx
call fcn.1800815d0
xor edx, edx
xor r9d, r9d
mov r8, r15
lea ecx, [rdx + 0x49]
call fcn.18009aa90
movzx ecx, al
mov dword [rsp + 0x48], ecx
test al, al
je 0x1800b2c6f
nop dword [rax]
nop word [rax + rax]
mov dword [rsp + 0x50], ecx
mov r9d, 0x88
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x28], rbx
xor r8d, r8d
mov qword [rsp + 0x20], rbx
mov rdx, r15
call fcn.1800815d0
xor edx, edx
xor r9d, r9d
mov r8, r15
lea ecx, [rdx + 0x49]
call fcn.18009aa90
movzx ecx, al
test al, al
jne 0x1800b2c30
mov dword [rsp + 0x48], ecx
mov r10, qword [rsp + 0x60]
add esi, 0x60cc
cmp esi, 0x12264
jbe 0x1800b2bb0
mov esi, dword [rbp - 0x80]
jmp 0x1800b2f19
cmp edx, r12d
jg 0x1800b2ea5
mov r15d, 0xe8
nop dword [rax]
cmp r15d, 0xe8
je 0x1800b2e77
cmp r15d, 0x7b40
je 0x1800b2cf3
cmp r15d, 0xf598
jne 0x1800b2e82
test dword [rbp - 0x70], r12d
jne 0x1800b2ceb
cmp r12d, 0xfff
jg 0x1800b2ceb
mov ecx, r11d
mov eax, 1
rol eax, cl
rol eax, 1
dec eax
inc r11d
mov dword [rbp - 0x70], eax
mov dword [rsp + 0x4c], r11d
mov dword [rbp - 0x78], edx
jmp 0x1800b2e82
mov eax, dword [rbp - 0x78]
test eax, eax
js 0x1800b2de6
mov r14d, 0x11a
cmp r14d, 0x11a
je 0x1800b2d61
cmp r14d, 0x3db0
je 0x1800b2d4b
cmp r14d, 0x7a46
jne 0x1800b2dcb
cmp edx, r12d
jne 0x1800b2d36
movzx eax, byte [r13 + 2]
mov byte [r13 + 3], al
jmp 0x1800b2dc8
movsxd rax, edx
movzx eax, byte [r10 + rax*4 + 0x826]
mov byte [r13 + 3], al
jmp 0x1800b2dc8
mov word [r13], ax
cdqe
movzx ecx, byte [r10 + rax*4 + 0x826]
mov byte [r13 + 2], cl
jmp 0x1800b2dc8
movsxd r13, r12d
inc r12d
add r13, 0x209
lea r13, [r10 + r13*4]
cmp r12d, 0x1000
jle 0x1800b2dc8
mov esi, 8
mov eax, esi
sub eax, 8
je 0x1800b2d92
cmp eax, 1
je case.0x1800b2feb.165
jmp 0x1800b2dbd
mov qword [rsp + 0x30], rbx
lea rcx, str.VSfBBdB
mov qword [rsp + 0x28], rbx
mov r9d, 0x111
xor r8d, r8d
mov qword [rsp + 0x20], rbx
xor edx, edx
call fcn.180070ab0
mov qword [rsp + 0x40], rbx
inc esi
cmp esi, 0xa
jb 0x1800b2d80
mov edx, dword [rsp + 0x6c]
mov eax, dword [rbp - 0x78]
mov r10, qword [rsp + 0x60]
add r14d, 0x3c96
cmp r14d, 0xb5c2
jbe 0x1800b2d04
jmp 0x1800b2e3f
cmp edx, r12d
jne 0x1800b2e3f
mov esi, 0x124
cmp esi, 0x124
je 0x1800b2e06
cmp esi, 0x1ac
je case.0x1800b2feb.165
jmp 0x1800b2e31
mov qword [rsp + 0x30], rbx
lea rcx, str.set_DestinationPalette
mov qword [rsp + 0x28], rbx
mov r9d, 0x111
xor r8d, r8d
mov qword [rsp + 0x20], rbx
xor edx, edx
call fcn.180070ab0
mov qword [rsp + 0x40], rbx
add esi, 0x88
cmp esi, 0x234
jb 0x1800b2df0
mov eax, dword [rsp + 0x6c]
lea rdx, [rsp + 0x70]
mov word [rsp + 0x70], ax
mov r9d, IUnknown_GetWindow
mov rax, qword [rsp + 0x60]
xor r8d, r8d
mov qword [rsp + 0x28], rax
xor ecx, ecx
mov qword [rsp + 0x20], rbx
call fcn.18007fc70
mov edx, dword [rsp + 0x6c]
mov r11d, dword [rsp + 0x4c]
jmp 0x1800b2e82
cmp dword [rsp + 0x68], 0
jne 0x1800b2f50
mov r10, qword [rsp + 0x60]
add r15d, 0x7a58
cmp r15d, 0x16f08
jbe 0x1800b2ca0
mov r14d, dword [rsp + 0x50]
mov esi, dword [rbp - 0x80]
jmp 0x1800b2f19
mov esi, SHRegGetIntW
nop word [rax + rax]
cmp esi, 0x117
je 0x1800b2ec6
cmp esi, 0x9f1e
je case.0x1800b2feb.165
jmp 0x1800b2ef1
mov qword [rsp + 0x30], rbx
lea rcx, str.Hora_da_Ilha_Norfolque
mov qword [rsp + 0x28], rbx
mov r9d, 0x111
xor r8d, r8d
mov qword [rsp + 0x20], rbx
xor edx, edx
call fcn.180070ab0
mov qword [rsp + 0x40], rbx
add esi, 0x9e07
cmp esi, 0x13c0e
jbe 0x1800b2eb0
mov esi, dword [rbp - 0x80]
jmp 0x1800b2f19
mov eax, r8d
mov ecx, r11d
and eax, dword [rbp - 0x70]
sar r8d, cl
mov dword [rsp + 0x5c], r8d
mov dword [rsp + 0x6c], eax
mov r10, qword [rsp + 0x60]
add r14d, 0xb563
mov ecx, dword [rsp + 0x48]
mov r11d, dword [rsp + 0x4c]
mov r9d, dword [rsp + 0x58]
mov r8d, dword [rsp + 0x5c]
mov dword [rsp + 0x50], r14d
cmp r14d, 0x16ac6
jbe 0x1800b2b10
jmp 0x1800b29e0
mov qword [rsp + 0x30], rbx
lea rcx, str.selectionType
mov qword [rsp + 0x28], rbx
mov r9d, 0x111
xor r8d, r8d
mov qword [rsp + 0x20], rbx
xor edx, edx
call fcn.180070ab0
mov rax, rbx
jmp 0x1800b451f
mov ecx, dword [rsp + 0x48]
lea eax, [rcx + 0x12]
mov dword [rsp + 0x50], eax
cmp ecx, eax
jae case.0x1800b2feb.165
mov eax, dword [rsp + 0x48]
mov edi, 0x79
mov esi, 0xfc
lea r14d, [rdi - 1]
lea r15d, [rdi - 4]
lea r12d, [rdi - 0x76]
mov r10d, 0x74
add eax, 0xffffff6c
mov r11d, 0x7061
movabs r9, 0x72006500730075
lea r8d, [r10 - 0x1d]
cmp eax, 0x11
ja case.default.0x1800b2feb
lea rcx, [0x180000000]
mov ecx, dword [rcx + rax*4 + 0xb4700]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov r9d, r14d
lea r8, [rbp - 0x28]
lea rdx, [rbp + 0x28]
xor ecx, ecx
call fcn.180097890
mov qword [rbp - 0x70], rax
jmp case.default.0x1800b2feb
mov r9d, r14d
lea r8, [rbp - 0x18]
lea rdx, [rbp - 8]
xor ecx, ecx
call fcn.180097890
mov qword [rbp - 0x78], rax
jmp case.default.0x1800b2feb
mov r9d, r14d
lea r8, [rbp - 0x38]
lea rdx, [rbp + 0x10]
xor ecx, ecx
call fcn.180097890
mov qword [rbp - 0x80], rax
jmp case.default.0x1800b2feb
mov eax, dword [0x180138426]
mov dword [rbp + 6], eax
movzx eax, word [0x18013842a]
mov word [rbp + 0xa], ax
mov word [rbp + 0xc], bx
jmp case.default.0x1800b2feb
mov dword [rbp + 2], 0x2e0032
jmp case.default.0x1800b2feb
mov word [rbp - 0x21], r15w
jmp case.default.0x1800b2feb
mov word [rbp - 0x1b], r8w
mov qword [rbp + 0x28], r9
jmp case.default.0x1800b2feb
mov r8, r12
lea rdx, [0x18013846e]
lea rcx, [rbp + 0x36]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov word [rbp + 0x3c], bx
jmp case.default.0x1800b2feb
mov eax, 0x4d
mov word [rbp - 0x28], ax
mov word [rbp - 0x27], r11w
jmp case.default.0x1800b2feb
mov word [rbp - 0x1c], di
jmp case.default.0x1800b2feb
mov r8, rdx
lea rcx, [rbp - 8]
lea rdx, [0x1801384ba]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp case.default.0x1800b2feb
mov r8, r12
mov word [rbp + 0x30], bx
lea rdx, [0x1801384ea]
lea rcx, [rbp + 0x28]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp case.default.0x1800b2feb
mov dword [rbp - 0x25], 0x726956
mov word [rbp - 0x22], r10w
jmp case.default.0x1800b2feb
mov rdx, qword [rsp + 0x60]
mov r9d, 0x100
test word [rdx + 2], r9w
jne 0x1800b3172
mov ecx, 0xfe
mov eax, ecx
sub eax, 0xfd
je 0x1800b3160
cmp eax, 1
jne 0x1800b3160
movzx eax, word [rdx + 2]
mov edx, 1
movzx ecx, al
call qword [rbp - 0x70]
add eax, 0xfffffff4
cmp eax, 0x63
ja case.0x1800b3154.27
lea rdx, [0x180000000]
movzx eax, byte [rdx + rax + 0xb4788]
mov ecx, dword [rdx + rax*4 + 0xb4748]
add rcx, rdx
jmp rcx
mov rdx, qword [rsp + 0x60]
mov ecx, 0xfe
dec ecx
cmp ecx, esi
ja 0x1800b3116
mov r8d, 0x57
mov r9d, 0x100
mov rax, qword [rsp + 0x78]
mov rax, qword [rax]
add rax, 0xfffffffffffffff8
cmp rax, 0xda
ja case.0x1800b31a1.122
lea r10, [0x180000000]
movzx eax, byte [r10 + rax + 0xb49b8]
mov ecx, dword [r10 + rax*4 + 0xb47ec]
add rcx, r10
jmp rcx
mov eax, 0xffffffff
mov dword [rsp + 0x48], 0xa4
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x6c]
mov dword [rsp + 0x6c], eax
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x68], eax
jmp case.default.0x1800b2feb
mov eax, 0x61
mov word [rbp - 0x20], ax
mov dword [rbp - 0x1f], 0x654b6c
jmp case.default.0x1800b2feb
mov word [rbp + 6], bx
mov eax, dword [rsp + 0x48]
inc eax
mov dword [rsp + 0x48], eax
cmp eax, dword [rsp + 0x50]
jae case.0x1800b2feb.165
mov edx, 4
jmp 0x1800b2fab
mov eax, esi
sub eax, 0xfb
je case.0x1800b2feb.165
cmp eax, 1
jne 0x1800b321a
mov dword [rsp + 0x40], 0x140
dec esi
cmp esi, 0xfa
ja case.0x1800b3154.21
mov eax, 0xd3
nop dword [rax]
mov ecx, eax
sub ecx, 0xd2
je case.0x1800b2feb.165
cmp ecx, 1
jne 0x1800b324b
mov dword [rsp + 0x40], 0x141
dec eax
cmp eax, 0xd1
ja 0x1800b3230
mov eax, 0xc7
nop dword [rax]
cmp eax, 0xc7
je 0x1800b32b2
add eax, 0x9540
cmp eax, 0x9540
jbe 0x1800b3260
mov eax, 0x103
nop dword [rax + rax]
cmp eax, 0x103
je case.0x1800b31a1.71
add eax, 0x52
cmp eax, 0x155
jb 0x1800b3280
mov eax, 0x102
mov ecx, eax
nop dword [rax]
cmp ecx, eax
je 0x1800b32bf
cmp ecx, 0x1b9
je case.0x1800b2feb.165
jmp 0x1800b32c7
mov dword [rsp + 0x40], 0x142
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x144
add ecx, 0xb7
cmp ecx, 0x270
jb 0x1800b32a0
mov eax, SHRegGetIntW
nop word [rax + rax]
cmp eax, 0x116
je 0x1800b3332
add eax, 0x2d
cmp eax, 0x143
jb 0x1800b32e0
mov eax, 0xf8
nop word [rax + rax]
cmp eax, 0xf8
je 0x1800b3d9e
add eax, 0x62
cmp eax, 0x15a
jb 0x1800b3300
mov eax, 0x1d
nop word [rax + rax]
cmp eax, 0x1d
je 0x1800b333f
cmp eax, 0xeba
je case.0x1800b2feb.165
jmp 0x1800b3347
mov dword [rsp + 0x40], 0x145
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x147
add eax, 0xe9d
cmp eax, 0x1d3a
jbe 0x1800b3320
mov eax, 4
nop dword [rax + rax]
cmp eax, 4
je case.0x1800b31a1.76
add eax, 0x49
cmp eax, 0x4d
jb 0x1800b3360
mov ecx, StrCmpNCA
mov eax, ecx
sub eax, 0x93
je 0x1800b338a
cmp eax, 1
je case.0x1800b2feb.165
jmp 0x1800b3392
mov dword [rsp + 0x40], 0x149
inc ecx
cmp ecx, 0x95
jb 0x1800b3376
mov eax, 7
cmp eax, 7
je 0x1800b33b3
cmp eax, 0x524
je case.0x1800b2feb.165
jmp 0x1800b33bb
mov dword [rsp + 0x40], 0x14b
add eax, 0x51d
cmp eax, 0xa3a
jbe 0x1800b33a1
mov eax, 0x7f
nop dword [rax]
cmp eax, 0x7f
je 0x1800b3e54
add eax, 0x45f3
cmp eax, 0x45f3
jbe 0x1800b33d0
nop word [rax + rax]
mov dword [rsp + 0x40], 0x14d
jmp case.0x1800b2feb.165
mov eax, 0xc5
cmp eax, 0xc5
je 0x1800b342d
add eax, 0x1bb4
cmp eax, 0x1bb4
jbe 0x1800b3402
nop word [rax + rax]
mov dword [rsp + 0x40], 0x14a
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x14e
jmp case.0x1800b2feb.165
mov ecx, dword [rsp + 0x6c]
mov r14d, esi
mov edi, 0xa1
mov eax, r14d
sub eax, esi
je 0x1800b3476
sub eax, 1
je 0x1800b345d
cmp eax, 1
je case.0x1800b2feb.165
jmp 0x1800b347f
mov eax, dword [rdx]
sar rax, 0x10
and eax, 0x1ff
cmp eax, ecx
je 0x1800b3492
mov dword [rsp + 0x40], 0x154
jmp 0x1800b347f
xor edx, edx
mov ecx, edi
call qword [rbp - 0x70]
mov ecx, eax
inc r14d
cmp r14d, 0xff
jae case.0x1800b31a1.12
mov rdx, qword [rsp + 0x60]
jmp 0x1800b3446
mov dword [rsp + 0x40], 0x158
jmp case.0x1800b2feb.165
mov esi, dword [rsp + 0x68]
mov edi, IUnknown_GetWindow
mov r14, qword [rbp - 0x78]
mov r15, qword [rbp - 0x80]
cmp edi, 0xab
je 0x1800b3523
cmp edi, 0x7ce9
je 0x1800b351c
cmp edi, 0xf927
je 0x1800b34d6
cmp edi, 0x17565
je case.0x1800b2feb.165
jmp 0x1800b3531
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor r8d, r8d
lea rcx, [rbp - 0x68]
xor edx, edx
call r15
test eax, eax
je 0x1800b3512
mov eax, dword [rbp - 0x60]
add eax, 0xffffff00
test eax, 0xfffffffa
jne 0x1800b3512
cmp qword [rbp - 0x58], 0x12
jne 0x1800b3512
test qword [rbp - 0x50], 0x1000000
je 0x1800b3512
cmp dword [rbp - 0x48], esi
je 0x1800b3560
mov dword [rsp + 0x40], 0x155
jmp 0x1800b3531
call r14
mov esi, eax
jmp 0x1800b3531
mov rax, qword [rsp + 0x60]
mov eax, dword [rax]
bt rax, 0x18
jb 0x1800b3570
add edi, 0x7c3e
cmp edi, 0x1f0f8
jbe 0x1800b34b0
mov edx, 0x35
mov eax, edx
sub eax, 0x35
je 0x1800b3587
sub eax, 0x37
je 0x1800b357d
cmp eax, 0x37
je case.0x1800b2feb.165
jmp 0x1800b35c6
mov dword [rsp + 0x40], 0xfffffffe
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x159
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x156
jmp 0x1800b35c6
mov rax, qword [rsp + 0x60]
mov eax, dword [rax]
bt rax, 0x18
jae 0x1800b35c6
mov ecx, 0xe5
nop word [rax + rax]
mov eax, ecx
sub eax, 0xe5
je 0x1800b35b4
cmp eax, 1
je case.0x1800b2feb.165
jmp 0x1800b35bc
mov dword [rsp + 0x40], 0x15a
inc ecx
cmp ecx, 0xe7
jb 0x1800b35a0
add edx, 0x37
cmp edx, 0xda
jb 0x1800b3548
mov ecx, 0x81
nop word [rax + rax]
mov eax, ecx
sub eax, 0x80
je case.0x1800b2feb.165
cmp eax, 1
jne 0x1800b3608
mov rax, qword [rsp + 0x60]
mov eax, dword [rax]
bt rax, 0x18
jb 0x1800b3650
mov dword [rsp + 0x40], 0x101
dec ecx
cmp ecx, 0x7f
ja 0x1800b35e0
mov eax, 0xd5
cmp eax, 0xd5
je 0x1800b365d
add eax, 0x41bb
cmp eax, 0x41bb
jbe 0x1800b3614
mov ecx, 0xa
mov eax, 0x102
cmp ecx, 0xa
je 0x1800b366b
cmp ecx, 0x56e
je case.0x1800b2feb.165
jmp 0x1800b366f
mov dword [rsp + 0x40], 0x14f
jmp case.0x1800b2feb.165
mov eax, 0x100
mov dword [rsp + 0x40], eax
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], eax
add ecx, 0x564
cmp ecx, 0xac8
jbe 0x1800b3631
nop dword [rax]
mov dword [rsp + 0x40], 0x103
jmp case.0x1800b2feb.165
mov eax, 0xd7
cmp eax, 0xd7
je 0x1800b36a6
cmp eax, 0x11a3
je case.0x1800b2feb.165
jmp 0x1800b36ae
mov dword [rsp + 0x40], 0x10c
add eax, 0x10cc
cmp eax, 0x2198
jbe 0x1800b3692
nop word [rax + rax]
mov dword [rsp + 0x40], 0x10d
jmp case.0x1800b2feb.165
mov ecx, 0x66
mov eax, ecx
sub eax, 0x66
je 0x1800b36e4
cmp eax, 0x7b
je case.0x1800b2feb.165
jmp 0x1800b36ec
mov dword [rsp + 0x40], 0x10a
add ecx, 0x7b
cmp ecx, 0x15c
jb 0x1800b36d2
mov edi, 0xa1
nop dword [rax]
mov eax, edi
sub eax, 0xa0
je case.0x1800b2feb.165
cmp eax, 1
jne 0x1800b371a
mov dword [rsp + 0x40], 0x10b
dec edi
cmp edi, 0x9f
ja 0x1800b3700
mov eax, r12d
sub eax, 2
je case.0x1800b2feb.165
cmp eax, 1
jne 0x1800b373d
mov dword [rsp + 0x40], 0x104
dec r12d
cmp r12d, 1
ja case.0x1800b31a1.27
mov eax, 0x54
nop dword [rax + rax]
mov ecx, eax
sub ecx, 0x53
je case.0x1800b2feb.165
cmp ecx, 1
jne 0x1800b3768
mov dword [rsp + 0x40], 0x105
dec eax
cmp eax, 0x52
ja 0x1800b3750
mov eax, 0x25
cmp eax, 0x25
je 0x1800b37ad
add eax, 0x1461
cmp eax, 0x1461
jbe 0x1800b3774
cmp r14d, 0x78
je 0x1800b37ba
add r14d, 0x82
cmp r14d, 0xfa
jb case.0x1800b31a1.23
nop dword [rax + rax]
mov dword [rsp + 0x40], 0x106
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x107
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x109
jmp case.0x1800b2feb.165
mov eax, 0x56
nop dword [rax]
cmp eax, 0x56
je 0x1800b37fa
add eax, 0x2244
cmp eax, 0x2244
jbe 0x1800b37d0
mov eax, IUnknown_GetWindow
cmp eax, 0xab
je 0x1800b3807
cmp eax, 0x5d84
je case.0x1800b2feb.165
jmp 0x1800b380f
mov dword [rsp + 0x40], 0x122
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x123
add eax, 0x5cd9
cmp eax, 0xb9b2
jbe 0x1800b37e6
mov ecx, 0x29
lea eax, [rcx + 0x6f]
cmp ecx, 0x29
je 0x1800b3836
cmp ecx, 0xc1
je case.0x1800b2feb.165
jmp 0x1800b383e
mov dword [rsp + 0x40], 0x124
add ecx, eax
cmp ecx, 0x159
jb 0x1800b3823
mov ecx, 0xde
nop dword [rax]
mov eax, ecx
sub eax, 0xde
je 0x1800b3864
cmp eax, 1
je case.0x1800b2feb.165
jmp 0x1800b386c
mov dword [rsp + 0x40], 0x125
inc ecx
cmp ecx, 0xe0
jb 0x1800b3850
nop word [rax + rax]
mov dword [rsp + 0x40], 0x126
jmp case.0x1800b2feb.165
cmp r15d, 0x75
je 0x1800b38bd
add r15d, 0xa7
cmp r15d, 0x11c
jb case.0x1800b31a1.88
nop word [rax + rax]
mov dword [rsp + 0x40], 0x128
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x127
jmp case.0x1800b2feb.165
mov ecx, 0x7a
nop
mov eax, ecx
sub eax, edi
je case.0x1800b2feb.165
cmp eax, 1
jne 0x1800b38e7
mov dword [rsp + 0x40], 0x129
dec ecx
cmp ecx, r14d
ja 0x1800b38d0
mov eax, 0x9a
cmp eax, 0x9a
je 0x1800b3938
add eax, 0x15a8
cmp eax, 0x15a8
jbe 0x1800b38f3
mov eax, 0x7e
nop dword [rax + rax]
cmp eax, 0x7e
je 0x1800b3945
add eax, 0x92
cmp eax, 0x110
jb 0x1800b3910
mov eax, 0x1b
cmp eax, 0x1b
je 0x1800b3952
cmp eax, 0x3e7
je case.0x1800b2feb.165
jmp 0x1800b395a
mov dword [rsp + 0x40], 0x12a
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x12b
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x12c
add eax, 0x3cc
cmp eax, 0x798
jbe 0x1800b3926
nop word [rax + rax]
mov dword [rsp + 0x40], 0x12d
jmp case.0x1800b2feb.165
mov eax, PathMakeUniqueName
cmp eax, 0x2d
je 0x1800b3994
cmp eax, 0x6ae
je case.0x1800b2feb.165
jmp 0x1800b399c
mov dword [rsp + 0x40], 0x12e
add eax, 0x681
cmp eax, 0xd02
jbe 0x1800b3982
mov eax, 0x124
nop dword [rax]
cmp eax, 0x124
je 0x1800b39c4
cmp eax, 0x1a7
je case.0x1800b2feb.165
jmp 0x1800b39cc
mov dword [rsp + 0x40], 0x12f
add eax, 0x83
cmp eax, 0x22a
jb 0x1800b39b0
mov ecx, 0xbe
nop dword [rax]
mov eax, ecx
sub eax, 0xbd
je case.0x1800b2feb.165
cmp eax, 1
jne 0x1800b39fa
mov dword [rsp + 0x40], 0x130
dec ecx
cmp ecx, 0xbc
ja 0x1800b39e0
mov edi, 0xa1
nop dword [rax]
mov eax, edi
sub eax, 0xa0
je case.0x1800b2feb.165
cmp eax, 1
jne 0x1800b3a2a
mov dword [rsp + 0x40], 0x131
dec edi
cmp edi, 0x9f
ja 0x1800b3a10
mov eax, 0xde
nop dword [rax]
cmp eax, 0xde
je 0x1800b3a6a
add eax, 0x34
cmp eax, 0x112
jb 0x1800b3a40
mov eax, 0xae
cmp eax, 0xae
je 0x1800b3a77
cmp eax, 0x8124
je case.0x1800b2feb.165
jmp 0x1800b3a7f
mov dword [rsp + 0x40], 0x132
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x133
add eax, 0x8076
cmp eax, 0x100ec
jbe 0x1800b3a56
mov eax, 0x56
mov ecx, eax
sub ecx, 0x56
je 0x1800b3aa2
cmp ecx, 1
je case.0x1800b2feb.165
jmp 0x1800b3aaa
mov dword [rsp + 0x40], 0x134
inc eax
cmp eax, 0x58
jb 0x1800b3a90
mov eax, 0xb3
cmp eax, 0xb3
je 0x1800b3add
add eax, 4
cmp eax, 0xb7
jb 0x1800b3ab6
nop word [rax + rax]
mov dword [rsp + 0x40], 0x136
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x135
jmp case.0x1800b2feb.165
mov eax, 0xbf
nop
cmp eax, 0xbf
je 0x1800b3b32
add eax, 0xa4
cmp eax, 0x163
jb 0x1800b3af0
mov eax, 0x10a
cmp eax, 0x10a
je 0x1800b3b3f
add eax, 0xb
cmp eax, 0x115
jb 0x1800b3b08
mov eax, 0x1a
nop
cmp eax, 0x1a
je 0x1800b3b4c
cmp eax, 0xa0
je case.0x1800b2feb.165
jmp 0x1800b3b54
mov dword [rsp + 0x40], 0x137
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x138
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x139
add eax, 0x86
cmp eax, 0x126
jb 0x1800b3b20
mov eax, StrCmpNICA
mov edx, eax
mov ecx, edx
sub ecx, eax
je 0x1800b3b78
cmp ecx, 1
je case.0x1800b2feb.165
jmp 0x1800b3b80
mov dword [rsp + 0x40], 0x11a
inc edx
cmp edx, 0x9a
jb 0x1800b3b67
mov eax, StrCmpNCA
nop
cmp eax, 0x94
je 0x1800b3bc2
add eax, 0xd4c
cmp eax, 0xd4c
jbe 0x1800b3b90
mov eax, 0x7f
lea ecx, [rax + 2]
nop dword [rax + rax]
mov edx, eax
sub edx, 0x7f
je 0x1800b3bcf
cmp edx, 1
je case.0x1800b2feb.165
jmp 0x1800b3bd7
mov dword [rsp + 0x40], reloc.SHLWAPI.dll_SHRegGetIntW
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x11b
inc eax
cmp eax, ecx
jb 0x1800b3bb0
mov eax, 0x10e
mov ecx, eax
cmp ecx, eax
je 0x1800b3bf6
cmp ecx, 0x5ffa
je case.0x1800b2feb.165
jmp 0x1800b3bfe
mov dword [rsp + 0x40], 0x119
add ecx, 0x5eec
cmp ecx, 0xbdd8
jbe 0x1800b3be4
mov eax, 0x7e
cmp eax, 0x7e
je 0x1800b3c23
cmp eax, 0x3918
je case.0x1800b2feb.165
jmp 0x1800b3c2b
mov dword [rsp + 0x40], 0x11c
add eax, 0x389a
cmp eax, 0x7134
jbe 0x1800b3c11
nop word [rax + rax]
mov dword [rsp + 0x40], 0x157
jmp case.0x1800b2feb.165
mov eax, 0x1a
cmp eax, 0x1a
je 0x1800b3c78
add eax, 0x18
cmp eax, 0x32
jb 0x1800b3c52
mov eax, 0x129
cmp eax, 0x129
je 0x1800b3c85
cmp eax, 0x1cc
je case.0x1800b2feb.165
jmp 0x1800b3c8d
mov dword [rsp + 0x40], 0x15b
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x15c
add eax, 0xa3
cmp eax, 0x26f
jb 0x1800b3c64
mov eax, 0x11
nop
cmp eax, 0x11
je 0x1800b3cb2
cmp eax, 0xd6
je case.0x1800b2feb.165
jmp 0x1800b3cba
mov dword [rsp + 0x40], 0x140
add eax, 0xc5
cmp eax, 0x19b
jb 0x1800b3ca0
nop word [rax + rax]
mov dword [rsp + 0x40], 0x141
jmp case.0x1800b2feb.165
mov eax, 0xd3
mov edx, eax
mov ecx, edx
sub ecx, eax
je 0x1800b3cf5
cmp ecx, 1
je case.0x1800b2feb.165
jmp 0x1800b3cfd
mov dword [rsp + 0x40], 0x142
inc edx
cmp edx, 0xd5
jb 0x1800b3ce4
nop word [rax + rax]
mov dword [rsp + 0x40], 0x143
jmp case.0x1800b2feb.165
mov eax, 0x4b
cmp eax, 0x4b
je 0x1800b3d34
cmp eax, 0x2b11
je case.0x1800b2feb.165
jmp 0x1800b3d3c
mov dword [rsp + 0x40], 0x144
add eax, 0x2ac6
cmp eax, 0x558c
jbe 0x1800b3d22
mov eax, StrCmpNICA
nop dword [rax]
mov ecx, eax
sub ecx, 0x97
je case.0x1800b2feb.165
cmp ecx, 1
jne 0x1800b3d6b
mov dword [rsp + 0x40], 0x145
dec eax
cmp eax, 0x96
ja 0x1800b3d50
mov eax, 0xb1
nop dword [rax]
cmp eax, 0xb1
je 0x1800b3d9e
add eax, 0x3b
cmp eax, 0xec
jb 0x1800b3d80
mov dword [rsp + 0x40], 0x147
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x146
jmp case.0x1800b2feb.165
mov eax, 0x102
mov ecx, eax
sub ecx, 0x101
je case.0x1800b2feb.165
cmp ecx, 1
jne 0x1800b3dcb
mov dword [rsp + 0x40], 0x149
dec eax
cmp eax, r9d
ja 0x1800b3db0
mov ecx, 0xc5
mov eax, ecx
sub eax, 0xc5
je 0x1800b3deb
cmp eax, 0x46
je case.0x1800b2feb.165
jmp 0x1800b3df3
mov dword [rsp + 0x40], 0x14b
add ecx, 0x46
cmp ecx, 0x151
jb 0x1800b3dd7
mov eax, 0x124
cmp eax, 0x124
je 0x1800b3e54
add eax, 0xab18
cmp eax, 0xab18
jbe 0x1800b3e03
mov eax, 0xb5
nop dword [rax + rax]
cmp eax, 0xb5
je case.0x1800b3154.25
add eax, 0x1c48
cmp eax, 0x1c48
jbe 0x1800b3e20
mov eax, 0xc2
nop dword [rax]
cmp eax, 0xc2
je 0x1800b3e61
cmp eax, 0x177e
je case.0x1800b2feb.165
jmp 0x1800b3e69
mov dword [rsp + 0x40], 0x14c
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x14e
add eax, 0x16bc
cmp eax, 0x2d78
jbe 0x1800b3e40
mov dword [rsp + 0x40], 0x14a
jmp case.0x1800b2feb.165
mov eax, 0xc6
mov ecx, eax
nop dword [rax]
cmp ecx, eax
je 0x1800b3eb6
add ecx, 0x59
cmp ecx, 0x11f
jb 0x1800b3e90
mov eax, 7
cmp eax, 7
je 0x1800b3ec3
cmp eax, 0xbf
je case.0x1800b2feb.165
jmp 0x1800b3ecb
mov dword [rsp + 0x40], 0x20
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x30
add eax, 0xb8
cmp eax, 0x177
jb 0x1800b3ea4
nop word [rax + rax]
mov dword [rsp + 0x40], 0x31
jmp case.0x1800b2feb.165
mov eax, 0x53
cmp eax, 0x53
je 0x1800b3f1a
add eax, 0x3f
cmp eax, 0x92
jb 0x1800b3ef2
mov ecx, 0xbf
mov eax, ecx
sub eax, 0xbf
je 0x1800b3f27
cmp eax, 0x6d
je case.0x1800b2feb.165
jmp 0x1800b3f2f
mov dword [rsp + 0x40], 0x32
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x33
add ecx, 0x6d
cmp ecx, 0x199
jb 0x1800b3f06
mov eax, 0xe0
nop
cmp eax, 0xe0
je 0x1800b3f8d
add eax, 0xd
cmp eax, 0xed
jb 0x1800b3f40
mov eax, 0xc6
mov edx, 0x35
nop dword [rax + rax]
mov ecx, eax
sub ecx, 0xc5
je case.0x1800b2feb.165
cmp ecx, 1
jne 0x1800b3f77
mov dword [rsp + 0x40], edx
dec eax
cmp eax, 0xc4
ja 0x1800b3f60
mov dword [rsp + 0x40], 0x36
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x34
jmp case.0x1800b2feb.165
mov ecx, 0x5b
nop
mov eax, ecx
sub eax, 0x5a
je case.0x1800b2feb.165
cmp eax, 1
jne 0x1800b3fb8
mov dword [rsp + 0x40], 0x37
dec ecx
cmp ecx, 0x59
ja 0x1800b3fa0
nop
mov dword [rsp + 0x40], 0x38
jmp case.0x1800b2feb.165
mov eax, 0x102
mov ecx, eax
cmp ecx, eax
je 0x1800b400e
add ecx, 0xc68a
cmp ecx, 0xc68a
jbe 0x1800b3fd4
mov eax, 0xed
nop dword [rax + rax]
cmp eax, 0xed
je 0x1800b401b
add eax, 0x51
cmp eax, 0x13e
jb 0x1800b3ff0
mov dword [rsp + 0x40], 0x43
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x41
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x42
jmp case.0x1800b2feb.165
mov eax, r13d
sub eax, 0x8c
je case.0x1800b2feb.165
cmp eax, 1
jne 0x1800b404b
mov dword [rsp + 0x40], 0x45
dec r13d
cmp r13d, 0x8b
ja case.0x1800b31a1.43
nop word [rax + rax]
mov dword [rsp + 0x40], 0x46
jmp case.0x1800b2feb.165
mov ecx, 0x85
mov eax, ecx
sub eax, 0x84
je case.0x1800b2feb.165
cmp eax, 1
jne 0x1800b408c
mov dword [rsp + 0x40], 0x47
dec ecx
cmp ecx, 0x83
ja 0x1800b4072
mov eax, StrCmpNICA
mov ecx, eax
nop dword [rax]
cmp ecx, eax
je 0x1800b40bf
add ecx, 0xaf
cmp ecx, 0x147
jb 0x1800b40a0
mov dword [rsp + 0x40], 0x49
jmp case.0x1800b2feb.165
mov eax, 0x48
mov dword [rsp + 0x40], eax
jmp case.0x1800b2feb.165
mov eax, 0x14
lea ecx, [rax + 0x36]
cmp eax, 0x14
je 0x1800b40e7
cmp eax, 0xd1
je case.0x1800b2feb.165
jmp 0x1800b40eb
mov dword [rsp + 0x40], ecx
add eax, 0xbd
cmp eax, 0x18e
jb 0x1800b40d5
mov eax, 0xa0
nop dword [rax]
cmp eax, 0xa0
je 0x1800b412a
add eax, 0x7580
cmp eax, 0x7580
jbe 0x1800b4100
mov eax, 0x56
cmp eax, 0x56
je 0x1800b4138
cmp eax, 0xfd
je case.0x1800b2feb.165
jmp 0x1800b4140
mov eax, 0x4b
mov dword [rsp + 0x40], eax
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x4c
add eax, 0xa7
cmp eax, 0x1a4
jb 0x1800b4118
mov eax, 0xae
cmp eax, 0xae
je 0x1800b41a6
add eax, 0x61e0
cmp eax, 0x61e0
jbe 0x1800b4151
mov eax, PathMakeUniqueName
nop dword [rax]
mov ecx, eax
sub ecx, 0x2c
je case.0x1800b2feb.165
cmp ecx, 1
jne 0x1800b4188
mov dword [rsp + 0x40], 0x4e
dec eax
cmp eax, 0x2b
ja 0x1800b4170
mov eax, 0x3d
cmp eax, 0x3d
je 0x1800b41b4
cmp eax, 0xf40
je case.0x1800b2feb.165
jmp 0x1800b41bc
mov eax, 0x4d
mov dword [rsp + 0x40], eax
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x4f
add eax, 0xf03
cmp eax, 0x1e06
jbe 0x1800b4194
cmp edi, 0x79
je 0x1800b41db
cmp edi, 0x3edd
je case.0x1800b2feb.165
jmp 0x1800b41e3
mov dword [rsp + 0x40], 0x50
add edi, 0x3e64
cmp edi, 0x7cc8
jbe case.0x1800b31a1.54
mov eax, 0x11f
cmp eax, 0x11f
je 0x1800b4222
add eax, 6
cmp eax, 0x125
jb 0x1800b41f6
mov eax, 0x5a
nop dword [rax]
cmp eax, 0x5a
je 0x1800b422f
cmp eax, 0x5a0
je case.0x1800b2feb.165
jmp 0x1800b4237
mov dword [rsp + 0x40], 0x51
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x52
add eax, 0x546
cmp eax, 0xa8c
jbe 0x1800b4210
nop dword [rax]
nop word [rax + rax]
mov eax, 0x53
mov dword [rsp + 0x40], eax
jmp case.0x1800b2feb.165
mov edx, 0xf
lea eax, [rdx + 0x45]
mov ecx, edx
sub ecx, 0xf
je 0x1800b4278
cmp ecx, 1
je case.0x1800b2feb.165
jmp 0x1800b427c
mov dword [rsp + 0x40], eax
inc edx
cmp edx, 0x11
jb 0x1800b4266
mov dword [rsp + 0x40], 0x55
jmp case.0x1800b2feb.165
mov edx, 0x23
lea eax, [rdx + 0x33]
mov ecx, edx
sub ecx, 0x23
je 0x1800b42aa
cmp ecx, 1
je case.0x1800b2feb.165
jmp 0x1800b42ae
mov dword [rsp + 0x40], eax
inc edx
cmp edx, 0x25
jb 0x1800b4298
mov ecx, IUnknown_GetWindow
nop word [rax + rax]
mov eax, ecx
sub eax, 0xa8
je 0x1800b42d4
cmp eax, 0x66
je case.0x1800b2feb.165
jmp 0x1800b42d9
mov dword [rsp + 0x40], r8d
add ecx, 0x66
cmp ecx, 0x174
jb 0x1800b42c0
mov eax, 0xbb
nop dword [rax]
cmp eax, 0xbb
je 0x1800b4310
add eax, 0x97f
cmp eax, 0x97f
jbe 0x1800b42f0
mov dword [rsp + 0x40], 0x59
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x58
jmp case.0x1800b2feb.165
mov ecx, 0xbf
lea eax, [rcx - 0x65]
cmp ecx, 0xbf
je 0x1800b433e
cmp ecx, 0x2f01
je case.0x1800b2feb.165
jmp 0x1800b4342
mov dword [rsp + 0x40], eax
add ecx, 0x2e42
cmp ecx, 0x5c84
jbe 0x1800b4325
mov ecx, 0x4a
lea eax, [rcx - 0x1d]
nop dword [rax + rax]
mov edx, ecx
sub edx, 0x49
je case.0x1800b2feb.165
cmp edx, 1
jne 0x1800b4378
mov dword [rsp + 0x40], eax
dec ecx
cmp ecx, 0x48
ja 0x1800b4360
nop
mov eax, 0x3d
mov dword [rsp + 0x40], eax
jmp case.0x1800b2feb.165
mov ecx, 0xd0
mov eax, ecx
sub eax, 0xd0
je 0x1800b43ae
cmp eax, 0x3a
je case.0x1800b2feb.165
jmp 0x1800b43b6
mov dword [rsp + 0x40], 0x5d
add ecx, 0x3a
cmp ecx, 0x144
jb 0x1800b4393
mov eax, 0x61
cmp eax, 0x61
je 0x1800b440a
add eax, 0xbb
cmp eax, 0x11c
jb 0x1800b43c6
mov eax, 0x12
nop dword [rax]
cmp eax, 0x12
je 0x1800b4417
add eax, 0xa68
cmp eax, 0xa68
jbe 0x1800b43e0
mov ecx, 0xae
mov eax, ecx
sub eax, 0xae
je 0x1800b4424
cmp eax, 1
je case.0x1800b2feb.165
jmp 0x1800b442c
mov dword [rsp + 0x40], 0x5c
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x3b
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x27
inc ecx
cmp ecx, 0xb0
jb 0x1800b43f6
mov eax, 0x48
nop dword [rax + rax]
cmp eax, 0x48
je 0x1800b4459
cmp eax, 0x7e0
je case.0x1800b2feb.165
jmp 0x1800b4461
mov dword [rsp + 0x40], 0x60
add eax, 0x798
cmp eax, 0xf30
jbe 0x1800b4440
mov eax, 0xe5
cmp eax, 0xe5
je 0x1800b448d
cmp eax, 0x1ca0
je case.0x1800b2feb.165
jmp 0x1800b4495
mov dword [rsp + 0x40], PathMakeUniqueName
add eax, 0x1bbb
cmp eax, 0x3776
jbe 0x1800b4472
mov ecx, 0xc8
nop word [rax + rax]
mov eax, ecx
sub eax, 0xc8
je 0x1800b44c7
cmp eax, 1
je case.0x1800b2feb.165
jmp 0x1800b44cf
mov dword [rsp + 0x40], PathMakeUniqueName
inc ecx
cmp ecx, 0xca
jb 0x1800b44b0
nop dword [rax]
mov dword [rsp + 0x40], reloc.SHELL32.dll_PathMakeUniqueName
jmp case.0x1800b2feb.165
mov eax, 0x10e
lea edi, [rax - 0x6d]
mov ecx, eax
sub ecx, 0x10d
je case.0x1800b2feb.165
cmp ecx, 1
jne 0x1800b4509
mov dword [rsp + 0x40], edi
dec eax
cmp eax, 0x10c
ja 0x1800b44f2
mov dword [rsp + 0x40], 0xa2
mov rax, qword [rsp + 0x40]
mov rcx, qword [rbp + 0x40]
xor rcx, rsp
call fcn.1800c9c10
mov rbx, qword [rsp + 0x190]
add rsp, 0x150
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov dword [rsp + 0x40], pe_nt_image_headers64
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x148
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x39
jmp case.0x1800b2feb.165
mov dword [rsp + 0x40], 0x44
jmp case.0x1800b2feb.165
mov ecx, 0x5b
mov dword [rsp + 0x40], ecx
jmp case.0x1800b2feb.165