Function at 0x180047fb0
Capabilities:
Parse credit card information

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
lea esi, [rdx - 0xd]
xor r12d, r12d
lea r13, [0x180000000]
mov r15, r8
mov r14d, edx
mov rbp, rcx
mov edi, edx
cmp edx, esi
jbe 0x1800480fd
lea ebx, [rdx - 0x35]
nop
cmp ebx, 0x18
ja case.0x180048004.11
mov ecx, dword [r13 + rbx*4 + 0x494b4]
add rcx, r13
jmp rcx
mov qword [r15 + 0x13c], r12
jmp case.0x180048004.11
mov dword [r15 + 0x14c], r12d
jmp case.0x180048004.11
mov eax, dword [r15 + 0x124]
mov dword [r15 + 0x11c], eax
jmp case.0x180048004.11
mov eax, dword [rbp + 0x58]
xor edx, edx
mov r9, rbp
mov dword [r15 + 0x138], eax
xor r8d, r8d
lea ecx, [rdx + 0x19]
call fcn.18000fc10
mov dword [r15 + 0x124], eax
jmp case.0x180048004.11
mov eax, dword [r15 + 0x124]
mov dword [r15 + 0x120], eax
jmp case.0x180048004.11
mov dword [r15 + 0x168], 0xffffffff
mov dword [r15 + 0x170], r12d
jmp case.0x180048004.11
mov dword [r15 + 0x154], r12d
mov dword [r15 + 0x15c], 0xffffffff
jmp case.0x180048004.11
mov dword [r15 + 0x158], r12d
jmp case.0x180048004.11
mov qword [r15 + 0x160], r12
jmp case.0x180048004.11
mov dword [r15 + 0x144], 0xffffffff
jmp case.0x180048004.11
mov dword [r15 + 0x148], r12d
mov dword [r15 + 0x150], 0xffffffff
jmp case.0x180048004.11
lea rcx, [r15 + 0xf8]
mov edx, pe_nt_image_headers64
lea r8, str.HTML_CONTEXTMENU__NAVIGATION__OPEN_IMAGE_IN_NEW_WINDOW
call fcn.18006f620
jmp case.0x180048004.11
mov eax, 7
cmp eax, 7
je 0x180048154
add eax, 0x55
cmp eax, 0x5c
jb 0x1800480e4
dec edi
dec ebx
cmp edi, esi
ja 0x180047ff0
lea edi, [r14 + 0x5f6]
cmp r14d, edi
jae 0x180049491
nop dword [rax]
cmp r14d, 0x33a
ja 0x1800481f7
je 0x1800481e7
cmp r14d, 0x186
ja 0x18004819c
je 0x180048181
mov eax, r14d
sub eax, 0x3f
je 0x180048175
sub eax, 0x6d
je 0x18004815e
cmp eax, 0x6d
jne 0x180049484
mov qword [r15 + 0x184], 0xffffffffffffffff
jmp 0x180049484
mov eax, 0xffffffff
jmp 0x180049495
mov dword [r15 + 0x174], 0xffffffff
mov dword [r15 + 0x178], r12d
jmp 0x180049484
mov dword [r15 + 0x16c], r12d
jmp 0x180049484
mov dword [r15 + 0x18c], 0xffffffff
mov dword [r15 + 0x1a8], 0xffffffff
jmp 0x180049484
mov eax, r14d
sub eax, 0x1f3
je 0x1800481db
sub eax, 0x6d
je 0x1800481c4
cmp eax, 0x6d
jne 0x180049484
mov dword [r15 + 0x194], 0xffffffff
jmp 0x180049484
mov dword [r15 + 0x180], r12d
mov dword [r15 + 0x190], 0xffffffff
jmp 0x180049484
mov dword [r15 + 0x17c], r12d
jmp 0x180049484
mov dword [r15 + 0x198], 0xffffffff
jmp 0x180049484
cmp r14d, 0x4ee
ja 0x180048252
je 0x180048246
mov eax, r14d
sub eax, 0x3a7
je 0x180048236
sub eax, 0x6d
je 0x180048226
cmp eax, 0x6d
jne 0x180049484
mov dword [r15 + 0x130], r12d
jmp 0x180049484
mov dword [r15 + 0x1a4], 0xffffffff
jmp 0x180049484
mov qword [r15 + 0x19c], 0xffffffffffffffff
jmp 0x180049484
mov dword [r15 + 0x134], r12d
jmp 0x180049484
mov eax, r14d
sub eax, 0x55b
je 0x18004829a
cmp eax, 0x6d
jne 0x180049484
movsd xmm0, qword [r15 + 0x13c]
mov eax, dword [r15 + 0x144]
movsd qword [r15 + 0x148], xmm0
movsd qword [r15 + 0x154], xmm0
mov dword [r15 + 0x150], eax
mov dword [r15 + 0x15c], eax
jmp 0x180049484
movsxd rax, dword [r15 + 0x11c]
cmp eax, 0xf6
ja case.0x1800482c0.47
movzx eax, byte [rax + r13 + 0x495d8]
mov ecx, dword [r13 + rax*4 + 0x49518]
add rcx, r13
jmp rcx
mov eax, 0xca
cmp eax, 0xca
je 0x1800482fc
cmp eax, 0x164
je 0x1800482e8
cmp eax, 0x1fe
jne 0x180048307
mov dword [r15 + 0x1b0], r12d
jmp case.0x18004916f.6
mov dword [r15 + 0x164], 6
mov dword [r15 + 0x1ac], r12d
jmp 0x180048307
mov dword [r15 + 0x170], 2
add eax, 0x9a
cmp eax, 0x298
jb 0x1800482c7
mov ecx, 0x7a
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x77
je case.0x18004916f.6
sub eax, 1
je 0x180048354
sub eax, 1
je 0x180048347
cmp eax, 1
jne 0x18004835b
mov dword [r15 + 0x170], 4
jmp 0x18004835b
mov dword [r15 + 0x164], 8
jmp 0x18004835b
mov qword [r15 + 0x1ac], r12
dec ecx
cmp ecx, 0x76
ja 0x180048320
mov eax, 0x113
cmp eax, 0x113
je 0x1800483b3
cmp eax, 0x5d75
je 0x1800483a6
cmp eax, 0xb9d7
je 0x18004839d
cmp eax, 0x11639
je 0x180048390
cmp eax, 0x1729b
je case.0x18004916f.6
jmp 0x1800483be
mov dword [r15 + 0x1b0], 3
jmp 0x1800483be
mov dword [r15 + 0x1ac], r12d
jmp 0x1800483be
mov dword [r15 + 0x164], ILFindLastID
jmp 0x1800483be
mov dword [r15 + 0x170], ILFindLastID
add eax, 0x5c62
cmp eax, 0x1cdea
jbe 0x180048367
mov eax, reloc.SHELL32.dll_PathMakeUniqueName
nop
cmp eax, 0x2f
je 0x180048406
cmp eax, 0xd5
je 0x1800483f9
cmp eax, 0x17b
je 0x1800483f0
cmp eax, 0x221
je 0x1800482dc
jmp 0x180048411
mov dword [r15 + 0x1ac], r12d
jmp 0x180048411
mov dword [r15 + 0x164], reloc.SHELL32.dll_ILFindLastID
jmp 0x180048411
mov dword [r15 + 0x170], 0xffffffff
add eax, 0xa6
cmp eax, 0x2c7
jb 0x1800483d0
mov ecx, 0x63
mov eax, ecx
sub eax, 0x60
je case.0x18004916f.6
sub eax, 1
je 0x18004845d
sub eax, 1
je 0x180048454
cmp eax, 1
jne 0x180048464
mov dword [r15 + 0x170], 0xffffffff
mov dword [r15 + 0x164], 0x18
jmp 0x180048464
mov dword [r15 + 0x1ac], r12d
jmp 0x180048464
mov dword [r15 + 0x1b0], r12d
dec ecx
cmp ecx, 0x5f
ja 0x180048422
mov ecx, 0x127
mov eax, ecx
sub eax, 0x127
je 0x1800484ab
sub eax, 0x10
je 0x180048497
sub eax, 0x10
je 0x18004848e
cmp eax, 0x10
je case.0x18004916f.6
jmp 0x1800484b2
mov dword [r15 + 0x1b0], r12d
jmp 0x1800484b2
mov dword [r15 + 0x164], 4
mov dword [r15 + 0x1ac], r12d
jmp 0x1800484b2
mov dword [r15 + 0x170], r12d
add ecx, 0x10
cmp ecx, 0x167
jb 0x180048470
mov ecx, 0xc0
mov eax, ecx
sub eax, 0xc0
je 0x1800484ef
sub eax, 1
je 0x1800484db
cmp eax, 1
je 0x1800482dc
jmp 0x1800484f6
mov dword [r15 + 0x164], ILFindLastID
mov dword [r15 + 0x1ac], r12d
jmp 0x1800484f6
mov dword [r15 + 0x170], r12d
inc ecx
cmp ecx, 0xc3
jb 0x1800484c2
mov ecx, 0x8a
mov eax, ecx
sub eax, 0x8a
je 0x180048540
sub eax, 0x5f
je 0x18004852c
sub eax, 0x5f
je 0x180048523
cmp eax, 0x5f
je case.0x18004916f.6
jmp 0x18004854b
mov dword [r15 + 0x1b0], r12d
jmp 0x18004854b
mov dword [r15 + 0x164], 4
mov dword [r15 + 0x1ac], r12d
jmp 0x18004854b
mov dword [r15 + 0x170], 2
add ecx, 0x5f
cmp ecx, 0x206
jb 0x180048505
mov ecx, 0x40
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x3e
je 0x1800482dc
sub eax, 1
je 0x180048582
cmp eax, 1
jne 0x180048594
mov dword [r15 + 0x170], 6
jmp 0x180048594
mov dword [r15 + 0x164], 8
mov dword [r15 + 0x1ac], r12d
dec ecx
cmp ecx, 0x3d
ja 0x180048560
mov ecx, 0x12b
mov eax, ecx
sub eax, 0x12b
je 0x1800485c2
sub eax, 1
je 0x1800485b9
cmp eax, 1
je 0x1800482dc
jmp 0x1800485d8
mov dword [r15 + 0x1ac], r12d
jmp 0x1800485d8
mov dword [r15 + 0x170], 5
mov dword [r15 + 0x164], 0x18
inc ecx
cmp ecx, 0x12e
jb 0x1800485a0
mov ecx, 0x12a
cmp ecx, 0x262
ja 0x18004863e
je 0x18004862e
mov eax, ecx
sub eax, 0x12a
je 0x180048621
sub eax, 0x68
je 0x180048611
cmp eax, 0x68
jne 0x180048668
mov dword [r15 + 0x164], ILFindLastID
jmp 0x180048668
mov eax, dword [r15 + 0x138]
add dword [r15 + 0x170], eax
jmp 0x180048668
mov dword [r15 + 0x170], ILFindLastID
jmp 0x180048668
mov eax, dword [r15 + 0x138]
add dword [r15 + 0x164], eax
jmp 0x180048668
mov eax, ecx
sub eax, 0x2ca
je 0x180048652
cmp eax, 0x68
je case.0x18004916f.6
jmp 0x180048668
mov dword [r15 + 0x1ac], 8
mov dword [r15 + 0x1b0], 3
add ecx, 0x68
cmp ecx, 0x39a
jb 0x1800485e7
mov eax, 0x27
nop dword [rax]
cmp eax, 0x27
je 0x1800486c5
cmp eax, 0xd2
je 0x1800486b8
cmp eax, 0x17d
je 0x1800486a0
cmp eax, 0x228
je case.0x18004916f.6
jmp 0x1800486d0
mov dword [r15 + 0x1ac], 8
mov dword [r15 + 0x1b0], 3
jmp 0x1800486d0
mov dword [r15 + 0x164], ILFindLastID
jmp 0x1800486d0
mov dword [r15 + 0x170], ILFindLastID
add eax, 0xab
cmp eax, 0x2d3
jb 0x180048680
mov dword [r15 + 0x13c], 1
mov ecx, 0xc4
nop dword [rax]
mov eax, ecx
sub eax, 0xc0
je case.0x18004916f.6
sub eax, 1
je 0x180048738
sub eax, 1
je 0x18004872b
sub eax, 1
je 0x18004871e
cmp eax, 1
jne 0x180048743
mov dword [r15 + 0x170], 0x18
jmp 0x180048743
mov qword [r15 + 0x160], 1
jmp 0x180048743
mov dword [r15 + 0x1ac], 8
jmp 0x180048743
mov dword [r15 + 0x1b0], 3
dec ecx
cmp ecx, 0xbf
ja 0x1800486f0
mov ecx, 0xd7
mov eax, ecx
sub eax, 0xd3
je case.0x18004916f.6
sub eax, 1
je 0x1800487a1
sub eax, 1
je 0x180048789
sub eax, 1
je 0x180048780
cmp eax, 1
jne 0x1800487b7
mov dword [r15 + 0x170], 0x18
jmp 0x1800487b7
mov dword [r15 + 0x164], r12d
jmp 0x1800487b7
mov dword [r15 + 0x160], 1
mov dword [r15 + 0x13c], 1
jmp 0x1800487b7
mov dword [r15 + 0x1ac], 8
mov dword [r15 + 0x1b0], 3
dec ecx
cmp ecx, 0xd2
ja 0x180048752
mov ecx, 0x11d
mov eax, ecx
sub eax, 0x11d
je 0x180048805
sub eax, 0x1d
je 0x1800487f1
sub eax, 0x1d
je 0x1800487e4
cmp eax, 0x1d
je case.0x18004916f.6
jmp 0x18004880c
mov dword [r15 + 0x1b0], 3
jmp 0x18004880c
mov dword [r15 + 0x164], r12d
mov dword [r15 + 0x1ac], 8
jmp 0x18004880c
mov dword [r15 + 0x170], r12d
add ecx, 0x1d
cmp ecx, 0x191
jb 0x1800487c6
mov edx, 5
nop dword [rax]
cmp edx, 5
ja case.default.0x180048832
mov eax, edx
mov ecx, dword [r13 + rax*4 + 0x496d0]
add rcx, r13
jmp rcx
mov qword [r15 + 0x188], 2
jmp case.default.0x180048832
mov dword [r15 + 0x1a8], 4
jmp case.default.0x180048832
mov eax, dword [r15 + 0x1a8]
mov dword [r15 + 0x170], eax
mov dword [r15 + 0x164], eax
jmp case.default.0x180048832
mov dword [r15 + 0x178], 1
mov dword [r15 + 0x184], 1
jmp case.default.0x180048832
mov dword [r15 + 0x1ac], 8
mov dword [r15 + 0x1b0], 3
dec edx
lea eax, [rdx + 0x8c]
cmp eax, 0x8b
ja 0x180048820
mov eax, 0x47
nop dword [rax + rax]
cmp eax, 0x47
je 0x1800488d2
cmp eax, 0xda
je 0x1800488c9
cmp eax, 0x16d
je case.0x18004916f.6
jmp 0x1800488e4
mov qword [r15 + 0x1ac], r12
jmp 0x1800488e4
mov dword [r15 + 0x170], 0xffffffff
mov dword [r15 + 0x164], r12d
add eax, 0x93
cmp eax, 0x200
jb 0x1800488b0
mov ecx, 0x38
mov eax, ecx
sub eax, 0x38
je 0x180048915
sub eax, 1
je 0x18004890c
cmp eax, 1
je case.0x18004916f.6
jmp 0x18004892b
mov qword [r15 + 0x1ac], r12
jmp 0x18004892b
mov dword [r15 + 0x170], ILFindLastID
mov dword [r15 + 0x164], reloc.SHELL32.dll_ILFindLastID
inc ecx
cmp ecx, 0x3b
jb 0x1800488f5
mov ecx, 0x44
nop word [rax + rax]
mov eax, ecx
sub eax, 0x42
je case.0x18004916f.6
sub eax, 1
je 0x180048969
cmp eax, 1
jne 0x180048970
mov dword [r15 + 0x170], 0xffffffff
mov dword [r15 + 0x164], r12d
jmp 0x180048970
mov qword [r15 + 0x1ac], r12
dec ecx
cmp ecx, 0x41
ja 0x180048940
mov eax, 0x1b
nop dword [rax]
cmp eax, 0x1b
je 0x1800489bb
cmp eax, 0xaa
je 0x1800489a3
cmp eax, 0x139
jne 0x1800489c6
mov dword [r15 + 0x1b0], 3
jmp case.0x18004916f.6
mov dword [r15 + 0x164], reloc.SHELL32.dll_ILFindLastID
mov dword [r15 + 0x1ac], 8
jmp 0x1800489c6
mov dword [r15 + 0x170], reloc.SHELL32.dll_ILFindLastID
add eax, 0x8f
cmp eax, 0x1c8
jb 0x180048980
mov ecx, 0x7a
nop word [rax + rax]
mov eax, ecx
sub eax, 0x78
je case.0x18004916f.6
sub eax, 1
je 0x180048a09
cmp eax, 1
jne 0x180048a10
mov dword [r15 + 0x170], 0xffffffff
mov dword [r15 + 0x164], r12d
jmp 0x180048a10
mov qword [r15 + 0x1ac], r12
dec ecx
cmp ecx, 0x77
ja 0x1800489e0
mov ecx, 0x4b
nop dword [rax]
mov eax, ecx
sub eax, 0x4b
je 0x180048a60
sub eax, 0x63
je 0x180048a57
sub eax, 0x63
je 0x180048a4a
sub eax, 0x63
je 0x180048a41
cmp eax, 0x63
je case.0x18004916f.6
jmp 0x180048a6b
mov dword [r15 + 0x1b0], r12d
jmp 0x180048a6b
mov dword [r15 + 0x1ac], 4
jmp 0x180048a6b
mov dword [r15 + 0x164], r12d
jmp 0x180048a6b
mov dword [r15 + 0x170], 0xffffffff
add ecx, 0x63
cmp ecx, 0x23a
jb 0x180048a20
mov eax, 0x11c
nop dword [rax + rax]
cmp eax, 0x11c
je 0x180048ab8
cmp eax, 0xb828
je 0x180048aab
cmp eax, 0x16f34
je 0x180048aa2
cmp eax, 0x22640
je case.0x18004916f.6
jmp 0x180048ac3
mov qword [r15 + 0x1ac], r12
jmp 0x180048ac3
mov dword [r15 + 0x164], 0x12
jmp 0x180048ac3
mov dword [r15 + 0x170], reloc.SHELL32.dll_ILFindLastID
add eax, 0xb70c
cmp eax, 0x2dc30
jbe 0x180048a80
mov eax, 0x9f
cmp eax, 0x9f
je 0x180048af8
cmp eax, 0x1839
je 0x180048aef
cmp eax, 0x2fd3
je case.0x18004916f.6
jmp 0x180048b0e
mov qword [r15 + 0x1ac], r12
jmp 0x180048b0e
mov dword [r15 + 0x170], 6
mov dword [r15 + 0x164], PathMakeUniqueName
add eax, 0x179a
cmp eax, 0x46ce
jbe 0x180048ad4
mov ecx, SHSetInstanceExplorer
nop
mov eax, ecx
sub eax, 0xaf
je 0x180048b5f
sub eax, 1
je 0x180048b52
sub eax, 1
je 0x180048b3e
cmp eax, 1
je case.0x18004916f.6
jmp 0x180048b6a
mov dword [r15 + 0x1ac], r12d
mov dword [r15 + 0x1b0], 0xffffffff
jmp 0x180048b6a
mov dword [r15 + 0x164], 4
jmp 0x180048b6a
mov dword [r15 + 0x170], 4
inc ecx
cmp ecx, 0xb3
jb 0x180048b20
mov eax, ILFree
nop dword [rax]
cmp eax, 0x98
je 0x180048bc2
cmp eax, 0x5320
je 0x180048bb5
cmp eax, 0xa5a8
je 0x180048bac
cmp eax, 0xf830
jne 0x180048bcd
mov dword [r15 + 0x1b0], 0xa
jmp case.0x18004916f.6
mov dword [r15 + 0x1ac], r12d
jmp 0x180048bcd
mov dword [r15 + 0x164], 4
jmp 0x180048bcd
mov dword [r15 + 0x170], 4
add eax, 0x5288
cmp eax, 0x14a20
jbe 0x180048b80
mov eax, 0x10a
nop
cmp eax, 0x10a
je 0x180048c23
cmp eax, 0x1e22
je 0x180048c16
cmp eax, 0x3b3a
je 0x180048c02
cmp eax, 0x5852
je case.0x18004916f.6
jmp 0x180048c2e
mov dword [r15 + 0x1ac], r12d
mov dword [r15 + 0x1b0], 0xa
jmp 0x180048c2e
mov dword [r15 + 0x164], 8
jmp 0x180048c2e
mov dword [r15 + 0x170], 8
add eax, 0x1d18
cmp eax, 0x7460
jbe 0x180048be0
mov eax, 0x83
nop
cmp eax, 0x83
je 0x180048c87
cmp eax, 0x6a7
je 0x180048c7a
cmp eax, 0xccb
je 0x180048c62
cmp eax, 0x12ef
je case.0x18004916f.6
jmp 0x180048c92
mov dword [r15 + 0x1ac], 0x12
mov dword [r15 + 0x1b0], 0x15
jmp 0x180048c92
mov dword [r15 + 0x170], reloc.SHELL32.dll_ILFindLastID
jmp 0x180048c92
mov dword [r15 + 0x164], ILFindLastID
add eax, 0x624
cmp eax, 0x1890
jbe 0x180048c40
mov ecx, 0xa4
mov eax, ecx
sub eax, 0xa0
je case.0x18004916f.6
sub eax, 1
je 0x180048ce7
sub eax, 1
je 0x180048cde
sub eax, 1
je 0x180048cd1
cmp eax, 1
jne 0x180048cf2
mov dword [r15 + 0x170], 4
jmp 0x180048cf2
mov dword [r15 + 0x164], 6
jmp 0x180048cf2
mov dword [r15 + 0x1ac], r12d
jmp 0x180048cf2
mov dword [r15 + 0x1b0], 0xffffffff
dec ecx
cmp ecx, 0x9f
ja 0x180048ca3
mov ecx, 0x1b
mov eax, ecx
sub eax, 0x1b
je 0x180048d3e
sub eax, 0x6f
je 0x180048d2a
sub eax, 0x6f
je 0x180048d1d
cmp eax, 0x6f
je case.0x18004916f.6
jmp 0x180048d49
mov dword [r15 + 0x1b0], 0xffffffff
jmp 0x180048d49
mov dword [r15 + 0x164], ILFindLastID
mov dword [r15 + 0x1ac], r12d
jmp 0x180048d49
mov dword [r15 + 0x170], 6
add ecx, 0x6f
cmp ecx, 0x1d7
jb 0x180048d01
mov ecx, 0x46
nop dword [rax]
mov eax, ecx
sub eax, 0x43
je case.0x18004916f.6
sub eax, 1
je 0x180048d94
sub eax, 1
je 0x180048d87
cmp eax, 1
jne 0x180048d9f
mov dword [r15 + 0x170], 6
jmp 0x180048d9f
mov dword [r15 + 0x164], 0xffffffff
jmp 0x180048d9f
mov qword [r15 + 0x1ac], 0xffffffffffffffff
dec ecx
cmp ecx, 0x42
ja 0x180048d60
mov eax, 0xbb
nop dword [rax + rax]
cmp eax, 0xbb
je 0x180048ddf
cmp eax, 0x8437
je 0x180048dcb
cmp eax, 0x107b3
je case.0x18004916f.6
jmp 0x180048df5
mov dword [r15 + 0x1ac], r12d
mov dword [r15 + 0x1b0], 0xffffffff
jmp 0x180048df5
mov dword [r15 + 0x170], ILFindLastID
mov dword [r15 + 0x164], ILFindLastID
add eax, 0x837c
cmp eax, 0x18a74
jbe 0x180048db0
mov ecx, 0x26
nop word [rax + rax]
mov eax, ecx
sub eax, 0x23
je case.0x18004916f.6
sub eax, 1
je 0x180048e44
sub eax, 1
je 0x180048e37
cmp eax, 1
jne 0x180048e4f
mov dword [r15 + 0x170], 0xffffffff
jmp 0x180048e4f
mov dword [r15 + 0x164], 0xffffffff
jmp 0x180048e4f
mov qword [r15 + 0x1ac], 0xffffffffffffffff
dec ecx
cmp ecx, 0x22
ja 0x180048e10
mov eax, 0x11a
nop dword [rax + rax]
cmp eax, 0x11a
je 0x180048eb0
cmp eax, 0x4566
je 0x180048ea3
cmp eax, 0x89b2
je 0x180048e96
cmp eax, 0xcdfe
je 0x180048e89
cmp eax, 0x1124a
je case.0x18004916f.6
jmp 0x180048ebb
mov dword [r15 + 0x1b0], 0xffffffff
jmp 0x180048ebb
mov dword [r15 + 0x1ac], 0xffffffff
jmp 0x180048ebb
mov dword [r15 + 0x164], 0xffffffff
jmp 0x180048ebb
mov dword [r15 + 0x170], ILFindLastID
add eax, 0x444c
cmp eax, 0x1557c
jbe 0x180048e60
mov eax, 0x9f
nop dword [rax]
cmp eax, 0x9f
je 0x180048f0d
cmp eax, 0x44f1
je 0x180048ef5
cmp eax, 0x8943
jne 0x180048f18
mov dword [r15 + 0x1b0], 0xffffffff
jmp case.0x18004916f.6
mov dword [r15 + 0x164], 0xffffffff
mov dword [r15 + 0x1ac], 0xffffffff
jmp 0x180048f18
mov dword [r15 + 0x170], 0x12
add eax, 0x4452
cmp eax, 0xccf6
jbe 0x180048ed0
mov ecx, SHTestTokenMembership
nop dword [rax]
mov eax, ecx
sub eax, 0xf4
je 0x180048f56
sub eax, 0x2e
je 0x180048f49
cmp eax, 0x2e
je case.0x18004916f.6
jmp 0x180048f6c
mov qword [r15 + 0x1ac], 0xffffffffffffffff
jmp 0x180048f6c
mov dword [r15 + 0x170], 0x12
mov dword [r15 + 0x164], 0xffffffff
add ecx, 0x2e
cmp ecx, 0x17e
jb 0x180048f30
mov ecx, 0x56
nop dword [rax]
mov eax, ecx
sub eax, 0x56
je 0x180048fa4
sub eax, 1
je 0x180048f97
cmp eax, 1
je case.0x18004916f.6
jmp 0x180048fba
mov qword [r15 + 0x1ac], 0xffffffffffffffff
jmp 0x180048fba
mov dword [r15 + 0x170], 8
mov dword [r15 + 0x164], 0xffffffff
inc ecx
cmp ecx, 0x59
jb 0x180048f80
mov ecx, SHSetFolderPathA
mov eax, ecx
sub eax, 0xe3
je 0x180048ffe
sub eax, 1
je 0x180048ff1
sub eax, 1
je 0x180048fe4
cmp eax, 1
je case.0x18004916f.6
jmp 0x180049014
mov dword [r15 + 0x1b0], 0xffffffff
jmp 0x180049014
mov dword [r15 + 0x1ac], 0xffffffff
jmp 0x180049014
mov dword [r15 + 0x170], 8
mov dword [r15 + 0x164], 0xffffffff
inc ecx
cmp ecx, 0xe7
jb 0x180048fc6
mov edx, r12d
cmp edx, 8
ja case.default.0x180049037
mov eax, edx
mov ecx, dword [r13 + rax*4 + 0x496e8]
add rcx, r13
jmp rcx
mov dword [r15 + 0x1a0], 4
mov dword [r15 + 0x1a4], 7
jmp case.default.0x180049037
mov dword [r15 + 0x1ac], 0xffffffff
jmp case.default.0x180049037
mov dword [r15 + 0x164], 0xffffffff
jmp case.default.0x180049037
mov dword [r15 + 0x170], 0xffffffff
jmp case.default.0x180049037
mov dword [r15 + 0x19c], 4
jmp case.default.0x180049037
mov dword [r15 + 0x190], 2
jmp case.default.0x180049037
mov dword [r15 + 0x194], 4
jmp case.default.0x180049037
mov dword [r15 + 0x198], 3
inc edx
lea eax, [rdx + 0x95]
cmp eax, 0x9e
jb 0x180049021
mov edx, r12d
cmp edx, 5
ja case.default.0x1800490d2
mov eax, edx
mov ecx, dword [r13 + rax*4 + 0x4970c]
add rcx, r13
jmp rcx
mov dword [r15 + 0x1ac], 0xffffffff
jmp case.default.0x1800490d2
mov dword [r15 + 0x1a0], 8
mov dword [r15 + 0x1a4], ILFindLastID
jmp case.default.0x1800490d2
mov dword [r15 + 0x198], 7
mov dword [r15 + 0x19c], 8
jmp case.default.0x1800490d2
mov dword [r15 + 0x190], 6
mov dword [r15 + 0x194], 8
jmp case.default.0x1800490d2
mov dword [r15 + 0x170], 0xffffffff
mov dword [r15 + 0x164], 0xffffffff
inc edx
lea eax, [rdx + 0x3a]
cmp eax, 0x40
jb 0x1800490c0
mov edx, r12d
cmp edx, 0x60
ja case.0x18004916f.7
mov eax, edx
movzx eax, byte [rax + r13 + 0x49744]
mov ecx, dword [r13 + rax*4 + 0x49724]
add rcx, r13
jmp rcx
mov dword [r15 + 0x190], 0x16
mov dword [r15 + 0x194], 0x18
jmp case.0x18004916f.7
mov qword [r15 + 0x1ac], 0xffffffffffffffff
jmp case.0x18004916f.7
mov dword [r15 + 0x198], 0x17
mov dword [r15 + 0x19c], 0x18
jmp case.0x18004916f.7
mov dword [r15 + 0x1a0], 0x18
mov dword [r15 + 0x1a4], 0x1b
jmp case.0x18004916f.7
mov dword [r15 + 0x170], 0xffffffff
jmp case.0x18004916f.7
mov dword [r15 + 0x164], 0xffffffff
add edx, 0x10
lea eax, [rdx + 0x14]
cmp eax, 0x84
jb 0x180049150
mov eax, 0x104
cmp eax, 0x104
je 0x180049218
cmp eax, 0x5654
je 0x18004920f
cmp eax, 0xaba4
je case.0x18004916f.6
jmp 0x18004922e
mov qword [r15 + 0x1ac], r12
jmp 0x18004922e
mov dword [r15 + 0x170], 0xffffffff
mov dword [r15 + 0x164], 4
add eax, 0x5550
cmp eax, 0xfff0
jbe 0x1800491f4
mov eax, 0xc7
nop
cmp eax, 0xc7
je 0x18004927c
cmp eax, 0x3bdb
je 0x18004926f
cmp eax, 0x76ef
je 0x180049262
cmp eax, 0xb203
je case.0x18004916f.6
jmp 0x180049292
mov dword [r15 + 0x1b0], 0xffffffff
jmp 0x180049292
mov dword [r15 + 0x1ac], 0xffffffff
jmp 0x180049292
mov dword [r15 + 0x170], 0xffffffff
mov dword [r15 + 0x164], 0xffffffff
add eax, 0x3b14
cmp eax, 0xec50
jbe 0x180049240
mov ecx, 0x4c
mov eax, ecx
sub eax, 0x4c
je 0x1800492d5
sub eax, 1
je 0x1800492cc
sub eax, 1
je 0x1800492bf
cmp eax, 1
je case.0x18004916f.6
jmp 0x1800492eb
mov dword [r15 + 0x1b0], 0xffffffff
jmp 0x1800492eb
mov dword [r15 + 0x1ac], r12d
jmp 0x1800492eb
mov dword [r15 + 0x170], 1
mov dword [r15 + 0x164], 0x18
inc ecx
cmp ecx, 0x50
jb 0x1800492a3
mov ecx, reloc.SHELL32.dll_PathMakeUniqueName
nop word [rax + rax]
mov eax, ecx
sub eax, 0x2b
je 0x180048993
sub eax, 1
je 0x180049352
sub eax, 1
je 0x18004933f
sub eax, 1
je 0x18004932c
cmp eax, 1
jne 0x180049359
mov dword [r15 + 0x140], 4
jmp 0x180049359
mov eax, dword [r15 + 0x140]
add eax, 0xc
mov dword [r15 + 0x170], eax
jmp 0x180049359
mov eax, dword [r15 + 0x140]
add eax, 0xe
mov dword [r15 + 0x164], eax
jmp 0x180049359
mov dword [r15 + 0x1ac], r12d
dec ecx
cmp ecx, 0x2a
ja 0x180049300
mov edx, 0xfc
cmp edx, 0xfc
je 0x1800493c6
cmp edx, 0x1a94
je 0x1800493a9
cmp edx, 0x342c
je 0x1800493a0
cmp edx, 0x4dc4
je 0x180049393
cmp edx, 0x675c
je case.0x18004916f.6
jmp 0x1800493d1
mov dword [r15 + 0x1b0], 3
jmp 0x1800493d1
mov dword [r15 + 0x1ac], r12d
jmp 0x1800493d1
mov ecx, dword [r15 + 0x140]
lea eax, [rcx + 0xc]
mov dword [r15 + 0x170], eax
lea eax, [rcx + 0xe]
mov dword [r15 + 0x164], eax
jmp 0x1800493d1
mov dword [r15 + 0x140], ILFindLastID
add edx, 0x1998
cmp edx, 0x7ff8
jbe 0x180049365
mov ebx, 0x113
mov eax, ebx
sub eax, 0x113
je 0x1800493f8
cmp eax, 1
je case.0x18004916f.6
jmp 0x180049470
mov r8d, dword [r15 + 0x11c]
lea eax, [r8 - 0x68]
cmp eax, 0xa8
ja 0x180049461
mov eax, 0x70
nop
cmp eax, 0x70
je 0x18004943d
cmp eax, 0x620
je 0x180049430
cmp eax, 0xbd0
jne 0x180049453
mov dword [r15 + 0x1b0], 0xffffffff
jmp 0x180049453
mov dword [r15 + 0x1ac], 0xffffffff
jmp 0x180049453
mov dword [r15 + 0x170], 0xffffffff
mov dword [r15 + 0x164], 0xffffffff
add eax, 0x5b0
cmp eax, 0x1110
jbe 0x180049410
jmp 0x180049470
lea rdx, str.26_35_28_EZH_WITH_TAIL
mov rcx, r15
call fcn.1800250a0
inc ebx
cmp ebx, 0x115
jb 0x1800493e4
mov r14d, 0x55b
add r14d, 0x6d
cmp r14d, edi
jb 0x180048110
mov eax, dword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret