Function at 0x180017df0
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Parse credit card information
Parse pe header

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2360]
mov eax, 0x2460
call fcn.180083ea0
sub rsp, rax
movaps xmmword [rsp + 0x2450], xmm6
movaps xmmword [rsp + 0x2440], xmm7
movaps xmmword [rsp + 0x2430], xmm8
mov rax, qword [0x18009da48]
xor rax, rsp
mov qword [rbp + 0x2320], rax
mov rax, qword [rbp + 0x23c0]
mov ebx, r8d
mov r8, qword [rbp + 0x23d0]
xor esi, esi
mov r15, qword [rbp + 0x23e8]
mov r11, r9
mov r10, qword [rsp + 0x70]
mov r14, rdx
mov edi, dword [rbp + 0x80]
movsd xmm8, qword [0x1800961a8]
lea r13d, [rsi + 0x7a]
mov r12, qword [rbp - 0x80]
mov qword [rbp + 0x240], rax
mov rax, qword [rbp + 0x23c8]
mov qword [rbp + 0x260], rax
mov rax, qword [rbp + 0x23d8]
mov qword [rbp + 0x270], rax
mov rax, qword [rbp + 0x23e0]
mov qword [rbp + 0x278], rax
mov eax, dword [rbp + 0x80]
mov qword [rbp - 0x38], r9
mov r9, rcx
mov qword [rbp - 0x68], rdx
mov edx, ebx
mov qword [rbp - 0x30], rcx
lea rcx, [0x180000000]
mov qword [rbp + 0x220], rax
mov dword [rbp - 0x78], ebx
mov qword [rbp - 0x20], r8
mov qword [rbp - 0x18], r15
mov qword [rsp + 0x78], r10
mov qword [rbp + 0x20], rdi
lea eax, [rbx + 0x10]
cmp edx, eax
jae 0x18001d535
lea eax, [rdx - 0xd0]
cmp eax, 0x19
ja case.default.0x180017f10
mov ecx, dword [rcx + rax*4 + 0x1d79c]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov dword [rbp + 0x2c2], 0x2e0032
lea rcx, [0x180000000]
mov dword [rbp + 0x2c6], 0x6c0064
inc edx
jmp 0x180017ee5
mov dword [rbp + 0x2ca], 0x6c
lea rcx, [0x180000000]
inc edx
jmp 0x180017ee5
mov eax, dword [r8]
lea rcx, [0x180000000]
mov dword [rbp - 0x44], eax
inc edx
mov dword [rbp + 0xac], esi
mov dword [rbp + 0x44], esi
jmp 0x180017ee5
mov r13d, dword [rbp - 0x44]
mov eax, r13d
and eax, 1
mov dword [rbp + 0x3c], 0xfffffffe
shl eax, 8
mov dword [rbp + 0x78], eax
mov dword [rbp + 0x34], 0xfffffffe
mov dword [rbp + 8], 0xfffffffe
mov dword [rbp - 0x4c], 0xfffffffe
nop dword [rax]
movzx r11d, byte [r10]
mov qword [rbp], r11
test r9, r9
je 0x180018110
mov esi, 0xef
nop word [rax + rax]
cmp esi, 0xef
je 0x1800180e7
cmp esi, 0x90b5
je 0x1800180cd
cmp esi, 0x1207b
je 0x18001800a
cmp esi, 0x1b041
jne 0x180017fe7
mov rbx, qword [rbp - 0x80]
mov qword [rbp + 0x118], rbx
mov r12, qword [rbp - 0x80]
add esi, 0x8fc6
cmp esi, 0x23f18
jbe 0x180017fb0
mov r10, qword [rsp + 0x70]
xor esi, esi
mov r11, qword [rbp]
mov qword [rsp + 0x78], r10
jmp 0x180018124
mov edx, dword [r9]
mov eax, 0x7fffffeb
mov r12, qword [rbp - 0x80]
sub eax, edx
mov rbx, qword [rbp + 0x118]
movsxd rcx, eax
mov rax, r12
sub rax, rbx
cmp rcx, rax
jl 0x18001d116
mov rax, qword [rbp + 0x18]
sub edx, ebx
add edx, r12d
mov dword [r9], edx
test rax, rax
je 0x1800180bd
cmp rax, qword [rbp + 0x238]
jbe 0x180017fe3
mov rdi, qword [rbp + 0x238]
mov ebx, 0x63
mov r15, rax
nop word [rax + rax]
cmp ebx, 0x63
je 0x180018085
cmp ebx, 0x103e
je 0x18001807a
cmp ebx, 0x2019
jne 0x180018096
mov r15, rdi
jmp 0x180018096
mov rax, rdi
sub rax, r15
add r12, rax
jmp 0x180018096
mov r8, r12
mov rdx, r15
sub r8, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
add ebx, 0xfdb
cmp ebx, 0x2f91
jbe 0x180018060
mov rdi, qword [rbp + 0x20]
mov r9, qword [rbp - 0x30]
mov qword [rbp + 0x18], r15
mov r15, qword [rbp - 0x18]
mov qword [rbp - 0x80], r12
jmp 0x180017fe3
mov rax, qword [rbp + 0x238]
mov qword [rbp - 0x80], rax
jmp 0x180017fe3
mov rbx, qword [rbp + 0x118]
cmp qword [rbp - 0x80], rbx
jae 0x180017fe3
mov qword [rbp - 0x80], rbx
jmp 0x180017fe3
mov rax, qword [r15 + 0x20]
add rax, 0x1000
cmp r12, rax
jbe 0x180017fe7
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
mov dword [r14], 0x34
jmp 0x18001b56e
mov rax, qword [r15 + 0x20]
add rax, 0x1000
cmp qword [r15 + 0x40], rax
ja 0x18001d3ce
cmp dword [rbp - 0x60], 0
je 0x18001820b
test r11d, r11d
je 0x18001820b
cmp r11d, 0x5c
jne 0x18001814f
cmp byte [r10 + 1], 0x45
jne 0x18001814f
mov dword [rbp - 0x60], esi
inc r10
jmp 0x18001d0fc
mov ebx, 0x6a
cmp ebx, 0x6a
je 0x180018182
cmp ebx, 0x2a3c
jne 0x1800181f1
mov r12, qword [rbp - 0x80]
mov r9d, 0x65
mov r11, qword [rbp]
lea rbx, [0x180000000]
inc r9d
jmp 0x18001ce9f
mov rax, qword [rbp + 0xc0]
test rax, rax
je 0x1800181bd
test r9, r9
jne 0x1800181b6
mov r9, r10
mov dword [rsp + 0x20], 0xd1
xor r8d, r8d
mov rdx, r15
mov rcx, rax
call fcn.18005c2a0
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
mov qword [rbp + 0xc0], rsi
bt r13d, 0xe
jae 0x1800181f1
mov rax, qword [rbp - 0x80]
mov r9, r10
mov rcx, rax
mov qword [rbp + 0xc0], rax
mov r8d, 0x43
mov rdx, r15
call fcn.18004e5c0
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
mov qword [rbp - 0x80], rax
mov r9, qword [rbp - 0x30]
add ebx, 0x29d2
cmp ebx, 0x53a4
jbe 0x180018154
mov r12, qword [rbp - 0x80]
mov r15, qword [rbp]
lea eax, [r15 - 0x2a]
cmp eax, 1
jbe 0x1800182ab
cmp r15d, 0x3f
je 0x1800182ab
cmp r15d, 0x7b
jne 0x18001824c
lea r9, [r10 + 1]
xor r8d, r8d
lea edx, [r15 + 0x77]
xor ecx, ecx
call fcn.18002c610
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
test eax, eax
jne 0x1800182ab
mov rcx, qword [rbp + 0xc0]
xor r11d, r11d
mov esi, r11d
mov r14d, r11d
test rcx, rcx
je 0x1800182b8
mov edx, dword [rbp + 0xac]
mov eax, edx
dec edx
mov dword [rbp + 0xac], edx
test eax, eax
jg 0x1800182b8
mov rbx, qword [rbp - 0x18]
cmp qword [rbp - 0x30], rsi
jne 0x1800182a2
mov r9, r10
mov dword [rsp + 0x20], 0xd1
xor r8d, r8d
mov rdx, rbx
call fcn.18005c2a0
mov r10, qword [rsp + 0x70]
xor r11d, r11d
mov qword [rsp + 0x78], r10
mov qword [rbp + 0xc0], r11
jmp 0x1800182bc
mov eax, 1
xor r11d, r11d
mov esi, eax
mov r14d, eax
mov rbx, qword [rbp - 0x18]
test r13b, 8
je 0x180018379
mov rax, qword [rbx + 0x18]
movsxd rcx, r15d
test byte [rcx + rax], 1
jne 0x18001d0f2
cmp r15d, 0x23
jne 0x180018379
inc r10
mov qword [rsp + 0x70], r10
mov qword [rsp + 0x78], r10
movzx eax, byte [r10]
test al, al
je 0x180018372
mov r15, qword [rbp - 0x18]
mov rcx, qword [r15 + 0x38]
movzx r8d, al
mov eax, dword [r15 + 0x78]
test eax, eax
je 0x1800183b8
cmp r10, rcx
jae 0x1800183e4
mov edx, dword [rbp - 0x70]
lea rbx, [r15 + 0x7c]
mov qword [rsp + 0x28], rcx
lea r9, [rbp - 0x28]
mov dword [rbp - 0x58], edx
lea r8, [rbp - 0x58]
mov edx, SHSetInstanceExplorer
mov dword [rbp - 0x28], eax
mov rcx, r10
mov qword [rsp + 0x20], rbx
call fcn.18001fc60
mov r10, qword [rsp + 0x70]
test eax, eax
je 0x1800183e4
mov edx, dword [rbx]
movsxd rax, edx
dec r10
add r10, rax
mov qword [rsp + 0x78], r10
mov qword [rsp + 0x70], r10
cmp byte [r10], 0
jne 0x18001d0f6
xor r11d, r11d
mov r15d, r11d
mov qword [rbp], r15
mov r15, qword [rbp - 0x18]
bt r13d, 0xe
jae 0x180018402
test esi, esi
jne 0x180018402
mov rax, qword [rbp - 0x80]
lea r8d, [rsi + 0x43]
mov rcx, rax
mov qword [rbp + 0xc0], rax
mov r9, r10
mov rdx, r15
call fcn.18004e5c0
mov r10, qword [rsp + 0x70]
mov r12, rax
mov qword [rsp + 0x78], r10
mov qword [rbp - 0x80], rax
jmp 0x180018406
movsxd rdx, dword [r15 + 0x7c]
sub rcx, rdx
cmp r10, rcx
ja 0x1800183e4
cmp r8b, byte [r15 + 0x80]
jne 0x1800183e4
cmp edx, 1
je 0x180018352
movzx eax, byte [r15 + 0x81]
cmp byte [r10 + 1], al
je 0x180018352
inc r10
mov qword [rsp + 0x70], r10
mov qword [rsp + 0x78], r10
movzx eax, byte [r10]
test al, al
je 0x18001836f
jmp 0x1800182fa
mov r12, qword [rbp - 0x80]
mov r11, qword [rbp]
lea rbx, [0x180000000]
cmp r11d, 0x7c
ja case.0x180018430.12
movsxd rax, r11d
movzx eax, byte [rbx + rax + 0x1d838]
mov ecx, dword [rbx + rax*4 + 0x1d804]
add rcx, rbx
jmp rcx
mov r11d, dword [rbp - 0x4c]
mov r8d, 0x5d
nop dword [rax]
mov eax, r8d
sub eax, 0x5d
je 0x1800184a3
sub eax, 1
je 0x18001845c
cmp eax, 1
jne 0x1800184b9
mov eax, 1
jmp 0x18001d6f0
mov rax, qword [rbp - 0x38]
mov r9, qword [rbp - 0x30]
mov qword [rax], r12
mov rax, qword [rbp + 0x240]
mov qword [rax], r10
test r9, r9
je 0x1800184b9
mov edx, dword [r9]
mov eax, 0x7fffffeb
mov rbx, qword [rbp + 0x118]
sub eax, edx
movsxd rcx, eax
mov rax, r12
sub rax, rbx
cmp rcx, rax
jl 0x18001d12c
sub edx, ebx
add edx, r12d
mov dword [r9], edx
jmp 0x1800184b9
mov rax, qword [rbp + 0x270]
mov rcx, qword [rbp + 0x278]
mov dword [rax], r11d
mov eax, dword [rbp + 8]
mov dword [rcx], eax
inc r8d
cmp r8d, 0x60
jb 0x180018440
mov ecx, 0x22
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x22
je 0x180018514
sub eax, 1
je 0x18001850c
sub eax, 1
je 0x1800184fe
cmp eax, 1
jne 0x18001852b
mov r10, qword [rsp + 0x70]
xor esi, esi
mov r14, qword [rbp - 0x68]
mov r12, qword [rbp - 0x80]
mov r15, qword [rbp - 0x18]
jmp 0x18001d0fc
mov byte [r12], 0x1a
inc r12
mov qword [rbp - 0x80], r12
jmp 0x18001852b
xor eax, eax
mov qword [rbp + 0x18], rax
jmp 0x18001852b
test r13b, 2
je 0x18001852b
mov eax, dword [rbp - 0x4c]
mov edx, 0xffffffff
cmp eax, 0xfffffffe
cmove eax, edx
mov dword [rbp - 0x4c], eax
inc ecx
cmp ecx, 0x26
jb 0x1800184d0
mov ecx, 2
mov eax, ecx
sub eax, 2
je 0x180018545
cmp eax, 1
je 0x1800184e6
jmp 0x180018557
xor eax, eax
mov byte [r12], 0x1b
inc r12
mov qword [rbp + 0x18], rax
mov qword [rbp - 0x80], r12
inc ecx
cmp ecx, 4
jb 0x180018537
mov ecx, 0x51
mov eax, ecx
sub eax, 0x51
je 0x18001859b
sub eax, 1
je 0x18001857a
cmp eax, 1
je 0x1800184e6
jmp 0x1800185af
mov eax, dword [rbp + 8]
mov dword [rbp + 0x3c], eax
mov eax, r13d
shr eax, 2
and al, 1
mov qword [rbp + 0x18], r12
or al, 0xc
mov byte [r12], al
inc r12
mov qword [rbp - 0x80], r12
jmp 0x1800185af
mov eax, dword [rbp - 0x4c]
mov edx, 0xffffffff
cmp eax, 0xfffffffe
cmove eax, edx
mov dword [rbp - 0x4c], eax
mov dword [rbp + 0x34], eax
inc ecx
cmp ecx, 0x54
jb 0x180018563
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
test dword [r15 + 0x68], 0x2000000
je case.0x18001cec7.101
mov r14, qword [rbp - 0x68]
mov dword [r14], 0x40
jmp 0x18001b566
movzx eax, byte [r10 + 1]
mov qword [rbp + 0x18], r12
cmp al, 0x3d
ja 0x18001861c
movabs rcx, 0x2400400000000000
bt rcx, rax
jae 0x18001861c
lea r8, [rbp + 0x110]
mov edx, 0x107
mov rcx, r10
call fcn.180066200
mov r10, qword [rsp + 0x70]
test eax, eax
jne 0x18001d13c
xor esi, esi
mov edx, esi
mov dword [rbp - 0x28], edx
lea ebx, [rsi + 1]
nop word [rax + rax]
inc r10
mov qword [rsp + 0x70], r10
mov qword [rsp + 0x78], r10
movzx r11d, byte [r10]
mov qword [rbp], r11
cmp r11d, 0x5c
jne 0x180018680
cmp byte [r10 + 1], 0x45
lea rcx, [r10 + 1]
jne 0x18001865b
mov r10, rcx
jmp 0x180018630
mov r8d, 3
lea rdx, [0x180093db0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
mov r10, qword [rsp + 0x70]
test eax, eax
jne 0x180018699
mov edx, dword [rbp - 0x28]
add r10, 3
jmp 0x180018630
test edx, edx
jne 0x180018751
cmp r11d, 0x5e
jne 0x180018751
mov edx, ebx
mov dword [rbp - 0x28], ebx
jmp 0x180018630
mov r11, qword [rbp]
mov qword [rsp + 0x78], r10
mov r15, qword [rbp - 0x80]
mov eax, 0xffffffff
add r15, 4
mov dword [rbp - 0x58], esi
mov dword [rbp - 0x40], eax
xorps xmm0, xmm0
mov dword [rbp - 0x48], esi
mov r12d, esi
mov qword [rbp + 0x90], r15
mov edx, eax
mov r13, r15
movups xmmword [rbp + 0x288], xmm0
movups xmmword [rbp + 0x298], xmm0
test r11d, r11d
je 0x18001d1d1
mov esi, dword [rbp - 0x70]
mov r14d, r12d
test esi, esi
je 0x18001886c
cmp r11d, 0x7f
jbe 0x18001886c
movzx r11d, byte [r10]
mov qword [rbp], r11
cmp r11d, 0xc0
jb 0x18001886c
mov edi, dword [rbp + 0x16c]
lea r13, [0x180000000]
mov r9d, 0x121
mov eax, r9d
sub eax, 0x121
je 0x18001881e
sub eax, 0x6c
je 0x1800187e4
cmp eax, 0x6c
jne 0x180018843
movsxd rax, edi
add r10, rax
mov qword [rsp + 0x70], r10
jmp 0x180018843
cmp r11d, 0x5d
jne 0x1800186a2
test dword [r15 + 0x68], 0x2000000
je 0x1800186a2
mov ecx, 0x4f
nop
mov eax, ecx
sub eax, 0x4d
je 0x1800187c6
sub eax, ebx
je 0x18001879d
cmp eax, ebx
jne 0x1800187b0
test edx, edx
mov eax, 0x6d
mov r8d, ILClone
cmovne eax, r8d
mov byte [r12], al
inc r12
mov qword [rbp - 0x80], r12
jmp 0x1800187b0
mov eax, dword [rbp - 0x4c]
mov r8d, 0xffffffff
cmp eax, 0xfffffffe
cmove eax, r8d
mov dword [rbp - 0x4c], eax
dec ecx
cmp ecx, 0x4c
ja 0x180018770
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
jmp 0x1800186a2
mov r11d, dword [rbp - 0x4c]
mov r10, qword [rsp + 0x70]
mov r14, qword [rbp - 0x68]
mov r12, qword [rbp - 0x80]
mov r15, qword [rbp - 0x18]
mov dword [rbp + 0x34], r11d
jmp 0x18001d0fc
movsxd r8, edi
mov rdx, rbx
cmp rbx, r8
jg 0x180018843
mov ecx, dword [rbp + 0xec]
nop word [rax + rax]
movzx eax, byte [rdx + r10]
sub ecx, 6
and eax, 0x3f
inc rdx
shl eax, cl
or r11d, eax
cmp rdx, r8
jle 0x180018800
mov qword [rbp], r11
jmp 0x18001883d
mov eax, r11d
and eax, 0x3f
movzx edi, byte [rax + r13 + 0x859f0]
and r11d, dword [r13 + rdi*4 + 0x859d8]
lea ecx, [rdi + rdi*2]
add ecx, ecx
shl r11d, cl
mov dword [rbp + 0xec], ecx
add r9d, 0x6c
cmp r9d, 0x265
jb 0x180018721
mov r13, qword [rbp + 0x90]
mov edx, dword [rbp - 0x40]
mov dword [rbp + 0x16c], edi
mov rdi, qword [rbp + 0x20]
mov qword [rbp], r11
mov r9, qword [rbp - 0x30]
test r9, r9
je 0x18001887e
sub r15d, r13d
add dword [r9], r15d
mov r15, r13
mov ecx, dword [rbp - 0x60]
test ecx, ecx
je 0x1800188a7
cmp r11d, 0x5c
jne 0x180018b0d
cmp byte [r10 + 1], 0x45
jne 0x180018b0d
xor ecx, ecx
mov dword [rbp - 0x60], ecx
inc r10
jmp 0x180018eb7
cmp r11d, 0x5b
jne 0x180018a9c
movzx eax, byte [r10 + 1]
cmp al, 0x3d
ja 0x180018b0d
movabs rdx, 0x2400400000000000
bt rdx, rax
jae 0x180018b0d
lea r8, [rbp + 0x110]
mov edx, 0x107
mov rcx, r10
call fcn.180066200
test eax, eax
je 0x180019566
mov r10, qword [rsp + 0x70]
mov rax, qword [rbp - 0x18]
mov qword [rsp + 0x78], r10
cmp byte [r10 + 1], 0x3a
mov rbx, qword [rax + 0x10]
jne 0x18001d17d
lea rcx, [r10 + 2]
mov qword [rsp + 0x70], rcx
movzx esi, byte [rcx]
cmp sil, 0x5e
jne 0x180018930
inc rcx
mov dword [rbp - 0x58], 1
mov qword [rsp + 0x70], rcx
nop dword [rax]
mov eax, dword [rbp + 0x110]
lea r8, [rbp + 0x10]
sub eax, ecx
mov r9d, 0xe0
xor edx, edx
mov dword [rbp + 0x10], eax
call fcn.1800269f0
test eax, eax
js 0x18001d15f
test byte [rbp - 0x44], 1
je 0x180018969
cmp eax, 2
mov r10d, 0
cmovle eax, r10d
jmp 0x18001896c
xor r10d, r10d
lea eax, [rax + rax*2]
movsxd rcx, eax
lea rdx, [0x180000000]
movsxd rax, dword [rdx + rcx*4 + 0x8c5b0]
mov r9d, dword [rdx + rcx*4 + 0x8c5b8]
movups xmm0, xmmword [rax + rbx]
movups xmm1, xmmword [rax + rbx + 0x10]
movsxd rax, dword [rdx + rcx*4 + 0x8c5b4]
movups xmmword [rbp + 0x300], xmm0
movups xmmword [rbp + 0x310], xmm1
test eax, eax
js 0x180018a04
mov r8, rax
lea rcx, [rbp + 0x300]
lea rax, [rbp + 0x300]
mov edx, 0x20
sub r8, rax
add r8, rbx
test r9d, r9d
js 0x1800189f0
nop dword [rax]
movzx eax, byte [r8 + rcx]
or byte [rcx], al
lea rcx, [rcx + 1]
sub rdx, 1
jne 0x1800189d0
jmp 0x180018a04
movzx eax, byte [r8 + rcx]
lea rcx, [rcx + 1]
not al
and byte [rcx - 1], al
sub rdx, 1
jne 0x1800189f0
mov eax, r9d
neg eax
test r9d, r9d
cmovns eax, r9d
cmp eax, 1
jne 0x180018a1e
and byte [rbp + 0x301], 0xc3
jmp 0x180018a2a
cmp eax, 2
jne 0x180018a2a
and byte [rbp + 0x30b], 0x7f
mov rcx, r10
mov edx, 0x20
cmp sil, 0x5e
jne 0x180018a70
nop dword [rax + rax]
movzx eax, byte [rbp + rcx + 0x300]
lea rcx, [rcx + 1]
not al
or byte [rbp + rcx + 0x287], al
sub rdx, 1
jne 0x180018a40
mov r10, qword [rbp + 0x110]
lea r12d, [rdx + 0xa]
inc r10
jmp 0x180018eac
movzx eax, byte [rbp + rcx + 0x300]
or byte [rbp + rcx + 0x288], al
lea rcx, [rcx + 1]
sub rdx, 1
jne 0x180018a70
mov r10, qword [rbp + 0x110]
lea r12d, [rdx + 0xa]
inc r10
jmp 0x180018eac
cmp r11d, 0x5c
jne 0x180018b0d
mov eax, dword [rbp - 0x44]
lea r9, [rsp + 0x78]
mov rcx, qword [rbp - 0x68]
lea rdx, [rsp + 0x70]
mov dword [rbp - 0x10], eax
mov r8d, 0x101
mov dword [rsp + 0x78], ebx
mov rbx, qword [rbp - 0x18]
mov eax, dword [rbx + 0x58]
mov dword [rbp + 0x10], eax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
call fcn.180025b20
mov r11, rax
mov qword [rbp], rax
mov rax, qword [rbp - 0x68]
cmp dword [rax], 0
jne 0x18001d1a8
cmp r11d, 0xfffffffb
jne 0x180018b68
mov r11d, 8
mov r10, qword [rsp + 0x70]
mov qword [rbp], r11
mov ecx, dword [rbp - 0x60]
cmp byte [r10 + 1], 0x5c
jne 0x180018b46
xor r13d, r13d
nop word [rax + rax]
cmp byte [r10 + 2], 0x45
lea rax, [r10 + 2]
jne 0x180018b3c
mov qword [rsp + 0x70], rax
mov ecx, r13d
cmp byte [rax + 1], 0x5c
mov r10, rax
je 0x180018b20
mov r13, qword [rbp + 0x90]
mov dword [rbp - 0x60], ecx
mov rsi, r10
cmp r11d, 0xd
je 0x180018b59
cmp r11d, 0xa
jne 0x180019574
mov r12, qword [rbp - 0x18]
or dword [r12 + 0x6c], 0x20
jmp 0x180019578
cmp r11d, 0xffffffea
jne 0x180018b76
mov r11d, 0x58
jmp 0x180018b01
cmp r11d, 0xffffffef
jne 0x180018b87
mov r11d, 0x52
jmp 0x180018b01
cmp r11d, 0xffffffe6
jne 0x180018bbb
mov r10, qword [rsp + 0x70]
cmp byte [r10 + 1], 0x5c
jne 0x180018ba9
cmp byte [r10 + 2], 0x45
jne 0x180018ba9
add r10, 2
jmp 0x180018eac
mov edx, dword [rbp - 0x40]
mov ebx, 1
mov ecx, ebx
mov dword [rbp - 0x60], ebx
jmp 0x180018eb7
cmp r11d, 0xffffffe7
je 0x180018ea7
test r11d, r11d
jns 0x18001956a
mov r9, qword [rbp - 0x30]
add r12d, 2
mov rdx, qword [rbx + 0x10]
test r9, r9
jne 0x180018d89
mov eax, 0xfffffffa
sub eax, r11d
cmp eax, 5
ja case.default.0x180018c08
lea r8, [0x180000000]
cdqe
mov ecx, dword [r8 + rax*4 + 0x1d8b8]
add rcx, r8
jmp rcx
lea rcx, [rbp + 0x288]
add rdx, 0x40
mov r8d, 0x20
nop dword [rax + rax]
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
or byte [rcx], al
lea rcx, [rcx + 1]
sub r8, 1
jne 0x180018c20
jmp 0x180018ea7
mov ebx, 1
lea rcx, [rbp + 0x288]
mov r14d, ebx
mov dword [rbp - 0x58], ebx
add rdx, 0x40
lea r8d, [rbx + 0x1f]
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
not al
or byte [rcx], al
lea rcx, [rcx + 1]
sub r8, rbx
jne 0x180018c60
mov r10, qword [rsp + 0x70]
mov edx, dword [rbp - 0x40]
mov ecx, dword [rbp - 0x60]
jmp 0x180018ebb
lea rcx, [rbp + 0x288]
add rdx, 0xa0
mov r8d, 0x20
nop dword [rax + rax]
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
or byte [rcx], al
lea rcx, [rcx + 1]
sub r8, 1
jne 0x180018ca0
jmp 0x180018ea7
mov ebx, 1
lea rcx, [rbp + 0x288]
mov r14d, ebx
mov dword [rbp - 0x58], ebx
add rdx, 0xa0
lea r8d, [rbx + 0x1f]
nop word [rax + rax]
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
not al
or byte [rcx], al
lea rcx, [rcx + 1]
sub r8, rbx
jne 0x180018ce0
mov r10, qword [rsp + 0x70]
mov edx, dword [rbp - 0x40]
mov ecx, dword [rbp - 0x60]
jmp 0x180018ebb
lea rax, [rbp + 0x288]
mov r8d, 0x20
sub rdx, rax
lea rcx, [rbp + 0x288]
nop dword [rax + rax]
movzx eax, byte [rdx + rcx]
or byte [rcx], al
lea rcx, [rcx + 1]
sub r8, 1
jne 0x180018d20
and byte [rbp + 0x289], 0xf7
jmp 0x180018ea7
mov ebx, 1
lea rax, [rbp + 0x288]
mov r14d, ebx
mov dword [rbp - 0x58], ebx
lea rcx, [rbp + 0x288]
sub rdx, rax
lea r8d, [rbx + 0x1f]
nop dword [rax]
movzx eax, byte [rcx + rdx]
lea rcx, [rcx + 1]
not al
or byte [rcx - 1], al
sub r8, rbx
jne 0x180018d60
or byte [rbp + 0x289], 8
mov r10, qword [rsp + 0x70]
mov edx, dword [rbp - 0x40]
mov ecx, dword [rbp - 0x60]
jmp 0x180018ebb
cmp r11d, 0xfffffff9
je 0x180018ea7
cmp r11d, 0xfffffffa
je 0x180018ea7
cmp r11d, 0xfffffff5
je 0x180018ea7
cmp r11d, 0xfffffff6
je 0x180018ea7
cmp r11d, 0xfffffff7
je 0x180018ea7
cmp r11d, 0xfffffff8
je 0x180018ea7
cmp r11d, 0xffffffed
jne 0x180019026
or byte [rbp + 0x289], 2
or byte [rbp + 0x28c], 1
or byte [rbp + 0x29c], 1
test esi, esi
je 0x180018ea7
mov ebx, pe_nt_image_headers64
lea r13d, [r11 + 0x14]
nop word [rax + rax]
cmp ebx, 0x19650
ja 0x180018ffb
je 0x180018f9a
cmp ebx, 0x108
je 0x180018f80
cmp ebx, 0x8820
je 0x180018f46
cmp ebx, 0x10f38
jne 0x180018e8e
mov r9, r15
mov dword [rbp + 0x170], 0x2000
lea r8, [rbp + 0x170]
mov dword [rsp + 0x20], 0x104
xor edx, edx
xor ecx, ecx
call fcn.18001ffb0
movsxd rcx, eax
lea r8, [rbp + 0x178]
add r15, rcx
mov dword [rbp + 0x178], 0x200a
mov r9, r15
mov dword [rsp + 0x20], 0x104
xor edx, edx
xor ecx, ecx
call fcn.18001ffb0
movsxd rcx, eax
add r15, rcx
mov byte [r15], r13b
inc r15
add ebx, 0x8718
cmp ebx, 0x32a90
jbe 0x180018e00
mov r13, qword [rbp + 0x90]
mov r10, qword [rsp + 0x70]
mov edx, dword [rbp - 0x40]
mov ecx, dword [rbp - 0x60]
mov ebx, 1
mov r14d, dword [rbp - 0x58]
mov esi, dword [rbp - 0x48]
mov r9d, dword [rbp - 0x70]
inc r10
mov qword [rsp + 0x70], r10
mov qword [rsp + 0x78], r10
movzx eax, byte [r10]
mov r11d, eax
mov qword [rbp], r11
test eax, eax
je 0x18001d1cf
cmp eax, 0x5d
jne 0x1800186e1
test ecx, ecx
jne 0x1800186e1
mov r13d, dword [rbp - 0x28]
cmp r12d, 1
jne 0x180019b30
test esi, esi
jne 0x180019b30
test r9d, r9d
je 0x180018f1f
test r13d, r13d
je 0x180018f1f
cmp edx, 0x80
jge 0x180019b30
mov ebx, 0x38
cmp ebx, 0x38
je 0x180019a67
cmp ebx, 0xce8
jne 0x180019b1a
mov r12, qword [rbp - 0x80]
mov r13d, dword [rbp - 0x44]
jmp 0x18001ce68
mov byte [r15], r13b
lea r8, [rbp + 0x180]
inc r15
mov dword [rbp + 0x180], 0x180e
mov r9, r15
mov dword [rsp + 0x20], 0x104
xor edx, edx
xor ecx, ecx
call fcn.18001ffb0
movsxd rcx, eax
add r15, rcx
mov byte [r15], 2
jmp 0x180018e8b
mov byte [r15], r13b
lea r8, [rbp + 0x188]
mov dword [rbp + 0x188], 0x1680
mov dword [rbp - 0x48], r13d
jmp 0x180018fd9
mov r9, r15
mov dword [rbp + 0x190], 0x202f
lea r8, [rbp + 0x190]
mov dword [rsp + 0x20], 0x104
xor edx, edx
xor ecx, ecx
call fcn.18001ffb0
movsxd rcx, eax
lea r8, [rbp + 0x198]
add r15, rcx
mov byte [r15], r13b
mov dword [rbp + 0x198], 0x205f
inc r15
mov r9, r15
mov dword [rsp + 0x20], 0x104
xor edx, edx
xor ecx, ecx
call fcn.18001ffb0
movsxd rcx, eax
add r15, rcx
jmp 0x180018e8e
cmp ebx, 0x21d68
je 0x180018e88
cmp ebx, 0x2a480
jne 0x180018e8e
mov dword [rbp + 0x1a0], 0x3000
lea r8, [rbp + 0x1a0]
jmp 0x180018fdc
cmp r11d, 0xffffffee
jne 0x1800192f5
mov edi, dword [rbp + 0x88]
xor eax, eax
mov edx, eax
nop word [rax + rax]
mov ecx, 0xc3
mov eax, ecx
sub eax, 0xc3
je 0x180019060
cmp eax, 1
jne 0x180019087
movsxd rax, edx
or byte [rbp + rax + 0x288], dil
jmp 0x180019087
mov ecx, edx
mov edi, 0xff
sub ecx, 1
je 0x18001907d
sub ecx, 3
je 0x180019076
cmp ecx, 0x10
jne 0x180019082
mov edi, 0xfe
jmp 0x180019082
mov edi, 0xfd
mov ecx, 0xc3
inc ecx
cmp ecx, 0xc5
jb 0x180019045
inc edx
mov dword [rbp + 0x88], edi
cmp edx, 0x20
jl 0x180019040
mov rdi, qword [rbp + 0x20]
test esi, esi
je 0x180018ea7
mov ebx, 0x53
lea r13d, [rbx - 0x52]
cmp ebx, 0x2ba
ja 0x180019204
je 0x1800191c9
mov eax, ebx
sub eax, 0x53
je 0x1800191c0
sub eax, 0x7b
je 0x18001917b
sub eax, 0x7b
je 0x180019144
sub eax, 0x7b
je 0x180019102
cmp eax, 0x7b
jne 0x1800192e1
mov dword [rbp + 0x1a8], 0x1fff
lea r8, [rbp + 0x1a8]
jmp 0x1800192c0
mov r9, r15
mov dword [rbp + 0x1b0], 0x180d
lea r8, [rbp + 0x1b0]
mov dword [rsp + 0x20], 0x104
xor edx, edx
xor ecx, ecx
call fcn.18001ffb0
movsxd rcx, eax
lea r8, [rbp + 0x1b8]
add r15, rcx
mov byte [r15], 2
mov dword [rbp + 0x1b8], 0x180f
jmp 0x180019159
mov byte [r15], 2
lea r8, [rbp + 0x1c0]
mov dword [rbp + 0x1c0], 0x1681
inc r15
mov r9, r15
mov dword [rsp + 0x20], 0x104
xor edx, edx
xor ecx, ecx
call fcn.18001ffb0
movsxd rcx, eax
add r15, rcx
jmp 0x1800192e1
mov byte [r15], 2
lea r8, [rbp + 0x1c8]
inc r15
mov dword [rbp + 0x1c8], 0x100
mov r9, r15
mov dword [rsp + 0x20], 0x104
xor edx, edx
xor ecx, ecx
call fcn.18001ffb0
movsxd rcx, eax
lea r8, [rbp + 0x1d0]
add r15, rcx
mov dword [rbp + 0x1d0], 0x167f
jmp 0x18001915c
mov dword [rbp - 0x48], r13d
jmp 0x1800192e1
mov r9, r15
mov dword [rbp + 0x1d8], 0x200b
lea r8, [rbp + 0x1d8]
mov dword [rsp + 0x20], 0x104
xor edx, edx
xor ecx, ecx
call fcn.18001ffb0
lea r8, [rbp + 0x1e0]
mov dword [rbp + 0x1e0], 0x202e
jmp 0x1800192ba
mov eax, ebx
sub eax, 0x335
je 0x180019284
sub eax, 0x7b
je 0x18001924c
sub eax, 0x7b
je 0x180019236
cmp eax, 0x7b
jne 0x1800192e1
mov dword [rbp + 0x1e8], 0x7fffffff
lea r8, [rbp + 0x1e8]
jmp 0x18001915c
mov dword [rbp + 0x1f0], 0x3001
lea r8, [rbp + 0x1f0]
jmp 0x18001915c
mov r9, r15
mov dword [rbp + 0x1f8], 0x2060
lea r8, [rbp + 0x1f8]
mov dword [rsp + 0x20], 0x104
xor edx, edx
xor ecx, ecx
call fcn.18001ffb0
lea r8, [rbp + 0x200]
mov dword [rbp + 0x200], 0x2fff
jmp 0x1800192ba
mov r9, r15
mov dword [rbp + 0x208], 0x2030
lea r8, [rbp + 0x208]
mov dword [rsp + 0x20], 0x104
xor edx, edx
xor ecx, ecx
call fcn.18001ffb0
lea r8, [rbp + 0x210]
mov dword [rbp + 0x210], 0x205e
movsxd rcx, eax
add r15, rcx
mov r9, r15
mov dword [rsp + 0x20], 0x104
xor edx, edx
xor ecx, ecx
call fcn.18001ffb0
movsxd rcx, eax
add r15, rcx
mov byte [r15], 2
inc r15
add ebx, 0x7b
cmp ebx, 0x521
jb 0x1800190b3
jmp 0x180018ea0
cmp r11d, 0xffffffeb
jne 0x180019388
or byte [rbp + 0x289], 0x3c
or byte [rbp + 0x298], 0x20
test esi, esi
je 0x180018ea7
mov ebx, 0x7a
lea r13d, [r11 + 0x16]
nop
mov eax, ebx
sub eax, 0x7a
je 0x180019371
sub eax, r13d
je 0x180019344
cmp eax, r13d
jne 0x18001937c
mov dword [rbp + 0x218], 0x2029
lea r8, [rbp + 0x218]
jmp 0x180019355
mov dword [rbp + 0x248], 0x2028
lea r8, [rbp + 0x248]
mov r9, r15
mov dword [rsp + 0x20], 0x104
xor edx, edx
xor ecx, ecx
call fcn.18001ffb0
movsxd rcx, eax
add r15, rcx
jmp 0x18001937c
mov byte [r15], 2
inc r15
mov dword [rbp - 0x48], r13d
inc ebx
cmp ebx, 0x7d
jb 0x180019320
jmp 0x180018ea0
cmp r11d, 0xffffffec
jne 0x18001954e
mov edi, dword [rbp + 0x50]
xor eax, eax
mov edx, eax
nop dword [rax]
mov ecx, PathYetAnotherMakeUniqueName
cmp ecx, 0x47
je 0x18001941d
cmp ecx, 0x29e1
jne 0x180019425
mov ecx, edx
sub ecx, 1
je 0x1800193d0
cmp ecx, 0xf
je 0x180019405
movsxd rax, edx
mov ecx, 0x29e1
or byte [rbp + rax + 0x288], dil
jmp 0x180019425
mov eax, 6
cmp eax, 6
je 0x1800193f3
cmp eax, 0x144
je 0x1800193ea
cmp eax, 0x282
je 0x18001940b
jmp 0x1800193f9
xor dword [rbp + 0x50], 0x38
mov edi, dword [rbp + 0x50]
jmp 0x1800193f9
xor edi, 4
mov dword [rbp + 0x50], edi
add eax, 0x13e
cmp eax, 0x3ba
jbe 0x1800193d5
xor edi, 0x20
mov dword [rbp + 0x50], edi
movsxd rax, edx
mov ecx, 0x29e1
or byte [rbp + rax + 0x288], dil
jmp 0x180019425
mov edi, 0xff
mov dword [rbp + 0x50], edi
add ecx, 0x299a
cmp ecx, 0x5334
jbe 0x1800193a5
inc edx
cmp edx, 0x20
jl 0x1800193a0
mov rdi, qword [rbp + 0x20]
test esi, esi
je 0x180018ea7
mov ebx, 0x127
mov r13d, 1
nop dword [rax]
cmp ebx, 0x127
je 0x180019533
cmp ebx, 0x9132
je 0x18001952a
cmp ebx, 0x1213d
je 0x1800194d4
cmp ebx, 0x1b148
je 0x1800194a7
cmp ebx, 0x24153
jne 0x180019537
mov dword [rbp + 0x120], 0x7fffffff
lea r8, [rbp + 0x120]
jmp 0x1800194b8
mov dword [rbp + 0x128], 0x2029
lea r8, [rbp + 0x128]
mov r9, r15
mov dword [rsp + 0x20], 0x104
xor edx, edx
xor ecx, ecx
call fcn.18001ffb0
movsxd rcx, eax
add r15, rcx
jmp 0x180019537
mov r9, r15
mov dword [rbp + 0x130], 0x100
lea r8, [rbp + 0x130]
mov dword [rsp + 0x20], 0x104
xor edx, edx
xor ecx, ecx
call fcn.18001ffb0
movsxd rcx, eax
lea r8, [rbp + 0x138]
add r15, rcx
mov dword [rbp + 0x138], 0x2027
mov r9, r15
mov dword [rsp + 0x20], 0x104
xor edx, edx
xor ecx, ecx
call fcn.18001ffb0
movsxd rcx, eax
add r15, rcx
mov byte [r15], 2
inc r15
jmp 0x180019537
mov dword [rbp - 0x48], r13d
add ebx, 0x900b
cmp ebx, 0x2d037
jbe 0x180019460
jmp 0x180018ea0
test byte [rbp - 0x44], 0x40
mov r10, qword [rsp + 0x70]
jne 0x18001d190
movzx r11d, byte [r10]
jmp 0x180018b06
mov r11, qword [rbp]
mov r10, qword [rsp + 0x70]
jmp 0x180018b0a
mov r12, qword [rbp - 0x18]
test ecx, ecx
jne 0x18001992e
cmp byte [r10 + 1], 0x2d
jne 0x18001992e
add r10, 2
mov qword [rsp + 0x70], r10
mov qword [rsp + 0x78], r10
cmp byte [r10], 0x5c
jne 0x180019605
nop
cmp byte [r10 + 1], 0x45
jne 0x1800195bd
add r10, 2
mov qword [rsp + 0x70], r10
mov qword [rsp + 0x78], r10
cmp byte [r10], 0x5c
je 0x1800195a0
jmp 0x180019605
cmp byte [r10], 0x5c
jne 0x180019605
cmp byte [r10 + 1], 0x51
jne 0x180019605
add r10, 2
mov qword [rsp + 0x70], r10
mov qword [rsp + 0x78], r10
cmp byte [r10], 0x5c
jne 0x1800195fb
cmp byte [r10 + 1], 0x45
jne 0x1800195fb
add r10, 2
mov qword [rsp + 0x70], r10
mov qword [rsp + 0x78], r10
cmp byte [r10], 0x5c
je 0x1800195c3
jmp 0x180019605
mov eax, 1
mov ecx, eax
mov dword [rbp - 0x60], eax
movzx eax, byte [r10]
test al, al
je 0x180019926
test ecx, ecx
jne 0x18001961d
cmp al, 0x5d
je 0x180019926
cmp dword [rbp - 0x70], 0
mov ebx, eax
je 0x180019703
cmp eax, 0xc0
jb 0x180019703
mov r13d, dword [rbp + 0x140]
lea r12, [0x180000000]
mov r9d, SHSetFolderPathA
mov edi, 1
nop dword [rax]
mov eax, r9d
sub eax, 0xe2
je 0x180019694
sub eax, edi
je 0x180019672
cmp eax, edi
jne 0x1800196d5
mov eax, ebx
and eax, 0x3f
movzx r13d, byte [rax + r12 + 0x859f0]
jmp 0x1800196d5
movsxd rax, r13d
lea ecx, [r13*2]
add ecx, r13d
add ecx, ecx
mov dword [rbp + 0xf0], ecx
and ebx, dword [r12 + rax*4 + 0x859d8]
shl ebx, cl
jmp 0x1800196d5
movsxd r8, r13d
mov rdx, rdi
cmp rdi, r8
jg 0x1800196cd
mov ecx, dword [rbp + 0xf0]
nop word [rax + rax]
movzx eax, byte [rdx + r10]
sub ecx, 6
and eax, 0x3f
inc rdx
shl eax, cl
or ebx, eax
cmp rdx, r8
jle 0x1800196b0
mov dword [rbp + 0xf0], ecx
add r10, r8
mov qword [rsp + 0x70], r10
dec r9d
cmp r9d, 0xe1
ja 0x180019650
mov rdi, qword [rbp + 0x20]
mov r12, qword [rbp - 0x18]
mov ecx, dword [rbp - 0x60]
mov dword [rbp + 0x140], r13d
mov r13, qword [rbp + 0x90]
mov qword [rsp + 0x78], r10
test ecx, ecx
jne 0x18001977a
cmp ebx, 0x5c
jne 0x18001977a
mov rcx, qword [rbp - 0x68]
lea r9, [rbp + 0x10]
mov eax, 1
lea rdx, [rsp + 0x70]
mov dword [rbp + 0x10], eax
mov r8d, 0x101
mov eax, dword [rbp - 0x44]
mov dword [rbp - 0x10], eax
mov eax, dword [r12 + 0x58]
mov dword [rsp + 0x78], eax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
call fcn.180025b20
mov rbx, rax
mov rax, qword [rbp - 0x68]
cmp dword [rax], 0
jne 0x18001d1a8
test ebx, ebx
jns 0x18001976c
cmp ebx, 0xfffffffb
jne 0x1800197c4
mov ebx, 8
mov r11, qword [rbp]
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
cmp ebx, r11d
jl 0x18001d1bb
je 0x18001992e
cmp ebx, 0xd
je 0x180019793
cmp ebx, 0xa
jne 0x180019799
or dword [r12 + 0x6c], 0x20
cmp dword [rbp - 0x70], 0
je 0x180019867
cmp ebx, 0xff
jg 0x1800197e4
mov eax, dword [rbp - 0x44]
mov esi, eax
and esi, 1
je 0x18001986a
cmp ebx, 0x7f
jle 0x18001986a
jmp 0x1800197ea
cmp ebx, 0xffffffea
jne 0x1800197d0
mov ebx, 0x58
jmp 0x18001976c
mov r11, qword [rbp]
cmp ebx, 0xffffffef
jne 0x180019926
mov ebx, 0x52
jmp 0x180019770
mov esi, dword [rbp - 0x44]
and esi, 1
mov byte [r15], 2
lea r8, [rbp + 0x148]
inc r15
mov dword [rbp - 0x48], 1
mov r9, r15
mov dword [rbp + 0x148], r11d
xor edx, edx
mov dword [rsp + 0x20], 0x104
xor ecx, ecx
call fcn.18001ffb0
movsxd rcx, eax
lea r8, [rbp + 0x150]
add r15, rcx
mov dword [rbp + 0x150], ebx
mov r9, r15
mov dword [rsp + 0x20], 0x104
xor edx, edx
xor ecx, ecx
call fcn.18001ffb0
movsxd rcx, eax
add r15, rcx
test esi, esi
je 0x18001990a
mov r11, qword [rbp]
cmp r11d, 0x7f
jg 0x18001990a
mov r10, qword [rsp + 0x70]
mov ebx, 0x7f
mov eax, dword [rbp - 0x44]
sub r14d, r11d
mov dword [rbp - 0x40], ebx
lea r12d, [rbx + 1]
mov edx, ebx
add r12d, r14d
cmp qword [rbp - 0x30], 0
jne 0x180018eaf
cmp r11d, ebx
jg 0x180018eaf
mov r13, qword [rbp - 0x18]
mov r9d, eax
and r9d, 1
movsxd r8, r11d
nop dword [rax + rax]
mov eax, r11d
test r11d, r11d
jns 0x1800198ac
lea eax, [r11 + 7]
sar eax, 3
movsxd rdx, eax
mov eax, r11d
and eax, 7
movzx ecx, byte [rbp + rdx + 0x288]
bts ecx, eax
mov byte [rbp + rdx + 0x288], cl
test r9d, r9d
je 0x1800198f3
mov rax, qword [r13 + 8]
movzx ecx, byte [r8 + rax]
mov edx, ecx
and ecx, 7
shr rdx, 3
movzx eax, byte [rbp + rdx + 0x288]
bts eax, ecx
mov byte [rbp + rdx + 0x288], al
inc r11d
inc r8
cmp r11d, ebx
jle 0x1800198a0
mov r13, qword [rbp + 0x90]
jmp 0x180018eac
mov esi, dword [rbp - 0x48]
mov r12d, r14d
mov r14d, dword [rbp - 0x58]
mov ebx, esi
mov r10, qword [rsp + 0x70]
mov edx, dword [rbp - 0x40]
mov ecx, dword [rbp - 0x60]
jmp 0x180018ebe
mov qword [rsp + 0x70], rsi
mov r10, rsi
mov r9d, dword [rbp - 0x70]
test r9d, r9d
je 0x18001999b
cmp r11d, 0xff
jg 0x18001994c
test byte [rbp - 0x44], 1
je 0x18001999b
cmp r11d, 0x7f
jle 0x18001999b
mov ebx, 1
mov dword [rsp + 0x20], 0x104
mov byte [r15], bl
lea r8, [rbp + 0x158]
inc r15
mov dword [rbp - 0x48], ebx
mov r9, r15
mov dword [rbp + 0x158], r11d
xor edx, edx
xor ecx, ecx
mov esi, ebx
call fcn.18001ffb0
mov r10, qword [rsp + 0x70]
mov r12d, r14d
mov edx, dword [rbp - 0x40]
mov r14d, dword [rbp - 0x58]
movsxd rcx, eax
add r15, rcx
mov ecx, dword [rbp - 0x60]
jmp 0x180018ebe
mov r13, qword [rbp - 0x18]
mov r8d, 0xa3
mov edi, dword [rbp - 0x44]
mov r12d, r14d
nop dword [rax + rax]
cmp r8d, 0xa3
je 0x180019a07
cmp r8d, 0x168
je 0x1800199d6
cmp r8d, 0x22d
jne 0x180019a31
mov edx, r11d
inc r12d
mov dword [rbp - 0x40], edx
jmp 0x180019a34
test dil, 1
je 0x180019a31
mov rax, qword [r13 + 8]
movsxd rcx, r11d
movzx edx, byte [rcx + rax]
mov ecx, edx
mov r11d, edx
shr rcx, 3
and edx, 7
movzx eax, byte [rbp + rcx + 0x288]
bts eax, edx
mov byte [rbp + rcx + 0x288], al
jmp 0x180019a31
mov eax, r11d
test r11d, r11d
jns 0x180019a13
lea eax, [r11 + 7]
sar eax, 3
movsxd rdx, eax
mov eax, r11d
and eax, 7
movzx ecx, byte [rbp + rdx + 0x288]
bts ecx, eax
mov byte [rbp + rdx + 0x288], cl
mov edx, dword [rbp - 0x40]
add r8d, 0xc5
cmp r8d, 0x2f2
jb 0x1800199b0
mov rdi, qword [rbp + 0x20]
mov ebx, 1
mov r13, qword [rbp + 0x90]
mov esi, dword [rbp - 0x48]
mov r14d, dword [rbp - 0x58]
mov ecx, dword [rbp - 0x60]
jmp 0x180018ec2
mov eax, dword [rbp + 8]
mov dword [rbp + 0x3c], eax
test r13d, r13d
je 0x180019ad3
mov ecx, 0x21
nop word [rax + rax]
mov eax, ecx
sub eax, 0x1d
je 0x1800184e6
sub eax, 1
je 0x180019abf
sub eax, 1
je 0x180019ab6
sub eax, 1
je 0x180019aae
cmp eax, 1
jne 0x180019acc
cmp dword [rbp - 0x4c], 0xfffffffe
jne 0x180019acc
mov dword [rbp - 0x4c], 0xffffffff
jmp 0x180019acc
mov eax, dword [rbp - 0x4c]
mov dword [rbp + 0x34], eax
jmp 0x180019acc
mov rax, qword [rbp - 0x80]
mov byte [rax], 0x1e
jmp 0x180019ac5
mov rax, qword [rbp - 0x80]
mov byte [rax], dl
inc rax
mov qword [rbp - 0x80], rax
dec ecx
cmp ecx, 0x1c
ja 0x180019a80
test r9d, r9d
je 0x180019b0b
cmp edx, 0x7f
jle 0x180019b0b
mov dword [rsp + 0x78], edx
lea r9, [rbp + 0x2a8]
xor edx, edx
mov dword [rsp + 0x20], 0x104
lea r8, [rsp + 0x78]
xor ecx, ecx
call fcn.18001ffb0
mov r9d, dword [rbp - 0x70]
mov rdi, rax
mov qword [rbp + 0x20], rax
jmp 0x180019b1a
mov edi, 1
mov byte [rbp + 0x2a8], dl
mov qword [rbp + 0x20], rdi
add ebx, 0xcb0
cmp ebx, 0x1960
ja 0x180019b30
mov edx, dword [rbp - 0x40]
jmp 0x180018f24
mov edx, dword [rbp - 0x4c]
mov eax, 0xffffffff
movups xmm6, xmmword [rbp + 0x298]
cmp edx, 0xfffffffe
movups xmm7, xmmword [rbp + 0x288]
cmove edx, eax
mov dword [rbp - 0x4c], edx
mov dword [rbp + 0x34], edx
mov edx, dword [rbp + 8]
mov dword [rbp + 0x3c], edx
test esi, esi
je 0x180019c4b
test r14d, r14d
jne 0x180019c4b
mov esi, 0x117
nop
mov eax, esi
sub eax, 0x117
je 0x180019c36
sub eax, 1
je 0x180019c1d
sub eax, 1
je 0x180019bb7
cmp eax, 1
jne 0x180019c3d
mov r13, qword [rbp + 0x18]
mov rcx, qword [rbp - 0x80]
mov eax, ecx
sub eax, r13d
sar eax, 8
mov byte [r13 + 1], al
movzx eax, cl
sub al, r13b
mov byte [r13 + 2], al
jmp 0x1800184e6
test r12d, r12d
jle 0x180019c17
mov ebx, 0xcd
mov eax, ebx
sub eax, 0xcb
je 0x180019c03
sub eax, 1
je 0x180019bf6
cmp eax, 1
jne 0x180019c0b
mov rax, qword [rbp - 0x80]
mov r8, r15
or byte [rax], 2
inc rax
sub r8, rax
mov qword [rbp - 0x80], rax
mov rdx, rax
lea rcx, [rax + 0x20]
call sub.VCRUNTIME140.dll_memmove
jmp 0x180019c0b
mov rax, qword [rbp - 0x80]
movups xmmword [rax], xmm7
movups xmmword [rax + 0x10], xmm6
jmp 0x180019c0b
lea rax, [r15 + 0x20]
mov qword [rbp - 0x80], rax
dec ebx
cmp ebx, 0xca
ja 0x180019bc1
jmp 0x180019c3d
mov qword [rbp - 0x80], r15
jmp 0x180019c3d
mov rcx, qword [rbp - 0x80]
mov byte [rcx], 0x50
add rcx, 3
test r13d, r13d
mov qword [rbp - 0x80], rcx
setne al
mov byte [rcx], al
jmp 0x180019c3d
mov byte [r15], 0
inc r15
inc esi
cmp esi, 0x11b
jb 0x180019b70
mov r11, qword [rbp - 0x80]
cmp r13d, r14d
setne al
add al, 0x4e
mov byte [r11], al
inc r11
test r13d, r13d
je 0x180019ca1
cmp qword [rbp - 0x30], 0
jne 0x180019caa
lea r8, [rbp + 0x288]
mov edx, 0x20
sub r8, r11
mov rcx, r11
nop dword [rax + rax]
movzx eax, byte [r8 + rcx]
lea rcx, [rcx + 1]
not al
mov byte [rcx - 1], al
sub rdx, 1
jne 0x180019c80
add r11, 0x20
mov qword [rbp - 0x80], r11
jmp 0x1800184e6
movups xmmword [r11], xmm7
movups xmmword [r11 + 0x10], xmm6
add r11, 0x20
mov qword [rbp - 0x80], r11
jmp 0x1800184e6
mov ebx, 0x73
nop dword [rax]
cmp ebx, 0x73
je 0x180019d1a
cmp ebx, 0x25bc
je 0x180019cee
cmp ebx, 0x4b05
jne 0x180019d23
mov r14, qword [rbp - 0x68]
cmp dword [r14], 0
jne 0x18001b566
mov r13d, PathMakeUniqueName
jmp case.default.0x180019dda
mov r8, qword [rbp - 0x68]
lea r9, [r10 + 1]
lea rdx, [rbp - 4]
mov dword [rsp + 0x20], 0x31
lea rcx, [rbp - 0x74]
call fcn.180068a10
mov r10, rax
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x70], rax
jmp 0x180019d23
test r14, r14
je case.0x18001cec7.101
add ebx, 0x2549
cmp ebx, 0x6fdb
jbe 0x180019cc0
mov r11, qword [rbp]
lea rbx, [0x180000000]
mov eax, 0xb1
cmp eax, 0xb1
je 0x180019d66
cmp eax, 0x143
je 0x180019d5c
cmp eax, 0x1d5
je 0x18001b176
jmp 0x180019d6b
mov ecx, 0xffffffff
mov dword [rbp - 0x74], ecx
jmp 0x180019d6b
xor ecx, ecx
mov dword [rbp - 4], ecx
add eax, 0x92
cmp eax, 0x267
jb 0x180019d41
mov ecx, SHSetInstanceExplorer
nop dword [rax]
mov eax, ecx
sub eax, 0xae
je 0x180019d94
cmp eax, 0x78
je 0x18001b176
jmp 0x180019da4
mov eax, 1
mov dword [rbp - 4], eax
mov eax, 0xffffffff
mov dword [rbp - 0x74], eax
add ecx, 0x78
cmp ecx, 0x19e
jb 0x180019d80
mov r13d, PathMakeUniqueName
mov dword [rbp - 0x58], r13d
cmp r13d, 0x21
jbe 0x18001b26d
lea eax, [r13 - 0x22]
cmp eax, 8
ja case.default.0x180019dda
mov ecx, dword [rbx + rax*4 + 0x1d8d0]
add rcx, rbx
jmp rcx
mov r14, qword [rbp + 0x18]
movzx ecx, byte [r14]
lea eax, [rcx - 0x1c]
cmp al, 1
jbe 0x18001a964
cmp cl, 0x1e
jne 0x180019f38
mov ebx, 0xc5
nop dword [rax]
mov eax, ebx
sub eax, 0xc5
je 0x180019ea0
sub eax, 1
je 0x180019e20
cmp eax, 1
je 0x18001a997
jmp 0x180019eb4
cmp dword [rbp + 0x38], 0
jne 0x180019eb4
cmp dword [rbp - 0x74], 0
jge 0x180019eb4
mov eax, dword [rbp - 0x44]
lea r9, [r10 + 1]
mov dword [rbp - 0x10], eax
lea rdx, [rbp + 0x10]
mov eax, dword [rbp - 0x70]
lea rcx, [rbp - 0x28]
mov dword [rbp - 0x28], eax
xor esi, esi
mov dword [rsp + 0x38], 0xcb
lea rax, [rsp + 0x78]
mov qword [rsp + 0x30], rax
mov r8, r15
lea rax, [rbp - 0x10]
mov dword [rbp + 0x10], r11d
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
mov dword [rsp + 0x78], 0x1e
call fcn.18000b540
mov r10, qword [rsp + 0x70]
mov r11, qword [rbp]
mov qword [rsp + 0x78], r10
test eax, eax
je 0x180019eb4
mov dword [rbp - 8], esi
mov dword [rbp + 0x38], 1
jmp 0x180019eb4
movzx r11d, byte [r14 + 1]
mov eax, ILFindLastID
mov dword [rbp + 0x84], eax
mov qword [rbp], r11
inc ebx
cmp ebx, 0xc8
jb 0x180019e00
lea rbx, [0x180000000]
cmp dword [rbp + 0x38], 0
je case.default.0x180019dda
xor edi, edi
mov r8d, 0x127
nop dword [rax + rax]
mov eax, r8d
sub eax, 0x127
je 0x18001b104
sub eax, 1
je 0x18001b0f6
cmp eax, 1
jne 0x18001b146
mov esi, dword [rbp + 0xe0]
test esi, esi
jle 0x18001b146
mov rax, qword [rbp + 0x28]
movzx ecx, byte [rax]
add ecx, 0xffffffe1
cmp ecx, 0x20
ja case.0x180019f36.43
movsxd rax, ecx
movzx eax, byte [rbx + rax + 0x1d928]
mov ecx, dword [rbx + rax*4 + 0x1d8f4]
add rcx, rbx
jmp rcx
cmp cl, 0x17
jae 0x180019f4f
mov rdx, qword [rbp + 0xf8]
mov r15d, reloc.SHELL32.dll_SHSetFolderPathA
jmp 0x18001ab4b
lea eax, [rcx - 0x4e]
cmp al, 3
jbe 0x18001a7ff
lea eax, [rcx - 0x5d]
cmp al, 3
jbe 0x180019f7a
cmp cl, 0x6d
je case.0x180019dda.36
mov r14, qword [rbp - 0x68]
mov dword [r14], ILFindLastID
jmp 0x18001b566
mov r15d, 0x7a
mov dword [rbp - 0x28], r15d
cmp r15d, 0x7a
je 0x18001a7a0
cmp r15d, 0x3c0c
je 0x18001a764
cmp r15d, 0x779e
jne 0x18001a7b1
cmp dword [rbp - 0x74], 0xffffffff
jne 0x180019fd3
mov rdx, r14
movzx ecx, byte [rdx + 1]
movzx eax, byte [rdx + 2]
shl rcx, 8
or rcx, rax
add rdx, rcx
cmp byte [rdx], 0x55
jne 0x180019fb1
mov eax, r12d
sub eax, edx
mov dword [rbp + 0xdc], eax
cmp dword [rbp - 4], 0
jne 0x18001a1b3
cmp dword [rbp - 0x74], 1
jg 0x18001a086
mov ebx, SHSetFolderPathA
nop dword [rax]
mov eax, ebx
sub eax, 0xe5
je 0x18001a021
cmp eax, 1
jne 0x18001a070
inc r12
cmp dword [rbp - 0x74], 0
mov qword [rbp - 0x80], r12
je 0x18001a7ce
movzx eax, byte [rbp - 8]
add al, 0x67
mov byte [r14], al
inc r14
mov qword [rbp + 0x18], r14
jmp 0x18001a070
mov eax, dword [rbp - 0x70]
lea rcx, [rbp - 0x10]
mov r9, qword [rbp - 0x18]
mov r8, r14
mov dword [rbp - 0x10], eax
mov edx, 0x6a
mov eax, 1
mov byte [r12], 0
mov dword [rsp + 0x78], eax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x98]
mov qword [rsp + 0x20], rax
call fcn.180020f20
movsxd r8, dword [rbp + 0x4c]
lea rcx, [r14 + 1]
mov rdx, r14
call sub.VCRUNTIME140.dll_memmove
inc ebx
cmp ebx, 0xe7
jb 0x180019ff0
dec dword [rbp - 0x74]
jmp 0x18001a341
mov r15d, dword [rbp - 8]
mov ebx, 0xd0
mov r13d, dword [rbp - 0x70]
movsxd rdi, dword [rbp + 0x4c]
nop word [rax + rax]
cmp ebx, 0x2ef
ja 0x18001a135
je 0x18001a123
cmp ebx, 0xd0
je 0x18001a11c
cmp ebx, 0x185
je 0x18001a0d3
cmp ebx, 0x23a
jne 0x18001a185
add r12, 4
jmp 0x18001a185
mov r9, qword [rbp - 0x18]
lea rcx, [rbp - 0x10]
mov eax, 4
mov dword [rbp - 0x10], r13d
mov dword [rsp + 0x78], eax
mov r8, r14
lea rax, [rsp + 0x78]
mov edx, 0x6a
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x98]
mov qword [rsp + 0x20], rax
call fcn.180020f20
mov r8, rdi
lea rcx, [r14 + 4]
mov rdx, r14
call sub.VCRUNTIME140.dll_memmove
jmp 0x18001a185
mov byte [r12], 0
jmp 0x18001a185
lea eax, [r15 + 0x67]
mov byte [r14], al
mov byte [r14 + 1], 0x5e
add r14, 2
jmp 0x18001a185
cmp ebx, 0x3a4
je 0x18001a164
cmp ebx, 0x459
jne 0x18001a185
mov edx, dword [rbp + 0xd8]
mov eax, edx
sar eax, 8
mov byte [r14], al
mov qword [rbp + 0xb8], r14
mov byte [r14 + 1], dl
add r14, 2
jmp 0x18001a185
mov rcx, qword [rbp + 0xb8]
test rcx, rcx
jne 0x18001a17a
xor eax, eax
mov dword [rbp + 0xd8], eax
jmp 0x18001a185
mov edx, r14d
sub edx, ecx
mov dword [rbp + 0xd8], edx
add ebx, 0xb5
cmp ebx, 0x50e
jb 0x18001a0a0
mov rdi, qword [rbp + 0x20]
mov r15d, dword [rbp - 0x28]
mov r13d, dword [rbp - 0x58]
dec dword [rbp - 0x74]
mov qword [rbp + 0x18], r14
mov qword [rbp - 0x80], r12
jmp 0x18001a341
cmp dword [rbp - 4], 1
jle 0x18001a334
mov r9, qword [rbp - 0x30]
test r9, r9
je 0x18001a23e
mov ecx, reloc.SHELL32.dll_SHTestTokenMembership
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xf5
je 0x18001a1e9
cmp eax, 1
jne 0x18001a22f
mov eax, dword [rbp + 0x160]
add dword [r9], eax
jmp 0x18001a22f
mov edx, dword [rbp + 0x44]
mov eax, dword [rbp - 4]
dec eax
mov r8d, eax
imul r8d, edx
movd xmm0, edx
movd xmm1, eax
cvtdq2pd xmm1, xmm1
mov dword [rbp + 0x160], r8d
cvtdq2pd xmm0, xmm0
mulsd xmm1, xmm0
comisd xmm1, xmm8
ja 0x18001d1ed
mov eax, 0x7fffffeb
sub eax, dword [r9]
cmp eax, r8d
jl 0x18001d1ed
inc ecx
cmp ecx, 0xf7
jb 0x18001a1d0
jmp 0x18001a334
cmp dword [rbp + 0x40], 0
je 0x18001a250
mov eax, dword [rbp + 8]
test eax, eax
cmovs eax, dword [rbp - 0x4c]
mov dword [rbp + 8], eax
mov esi, 1
cmp dword [rbp - 4], esi
jle 0x18001a334
movsxd r15, dword [rbp + 0x4c]
mov rdi, qword [rbp + 0x98]
nop dword [rax]
mov ebx, 0x91
mov eax, ebx
sub eax, 0x91
je 0x18001a296
sub eax, 1
je 0x18001a28d
cmp eax, 1
jne 0x18001a304
add r12, r15
jmp 0x18001a304
mov rdi, qword [rbp + 0x250]
jmp 0x18001a304
mov r14, qword [rbp - 0x18]
mov r8, r15
mov rdx, qword [rbp + 0x18]
mov rcx, r12
mov rax, qword [r14 + 0x40]
mov qword [rbp + 0x250], rax
call sub.VCRUNTIME140.dll_memcpy
mov r8, qword [rbp + 0x250]
mov rdx, rdi
cmp rdi, r8
jae 0x18001a304
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rdx + 1]
movzx ecx, byte [rdx]
shl ecx, 8
or ecx, eax
mov rax, qword [r14 + 0x40]
add ecx, r15d
sar ecx, 8
mov byte [rax], cl
movzx ecx, byte [rdx + 1]
add rdx, 2
mov rax, qword [r14 + 0x40]
add cl, r15b
mov byte [rax + 1], cl
add qword [r14 + 0x40], 2
cmp rdx, r8
jb 0x18001a2d0
inc ebx
cmp ebx, 0x94
jb 0x18001a275
inc esi
mov qword [rbp + 0x98], rdi
mov qword [rbp - 0x80], r12
cmp esi, dword [rbp - 4]
jl 0x18001a270
mov rdi, qword [rbp + 0x20]
mov r15d, dword [rbp - 0x28]
mov r14, qword [rbp + 0x18]
mov eax, dword [rbp - 0x74]
test eax, eax
jle 0x18001a341
mov eax, dword [rbp - 4]
sub dword [rbp - 0x74], eax
mov eax, dword [rbp - 0x74]
test eax, eax
js 0x18001a654
mov r9, qword [rbp - 0x30]
test r9, r9
je 0x18001a3df
test eax, eax
jle 0x18001a3df
mov edx, 0x52
mov eax, edx
sub eax, 0x52
je 0x18001a3bb
cmp eax, 1
jne 0x18001a3d3
mov eax, dword [rbp + 0x44]
movd xmm0, dword [rbp - 0x74]
add eax, 7
cvtdq2pd xmm0, xmm0
movd xmm1, eax
cvtdq2pd xmm1, xmm1
mulsd xmm1, xmm0
comisd xmm1, xmm8
ja 0x18001d1ed
mov ecx, dword [r9]
mov eax, 0x7fffffeb
mov r8d, dword [rbp + 0x164]
sub eax, ecx
cmp eax, r8d
jl 0x18001d1ed
lea eax, [r8 + rcx]
mov dword [r9], eax
jmp 0x18001a3d3
mov r8d, dword [rbp + 0x44]
add r8d, 7
imul r8d, dword [rbp - 0x74]
sub r8d, 6
mov dword [rbp + 0x164], r8d
inc edx
cmp edx, 0x54
jb 0x18001a366
jmp 0x18001a58a
mov esi, dword [rbp - 0x74]
sub esi, 1
js 0x18001a58a
mov r15d, dword [rbp - 8]
mov r13d, dword [rbp + 0x4c]
mov rdi, qword [rbp + 0x98]
nop word [rax + rax]
mov ebx, 0x1a
mov eax, ebx
sub eax, 0x18
je 0x18001a552
sub eax, 1
je 0x18001a4c2
cmp eax, 1
jne 0x18001a55f
mov rax, qword [rbp - 0x18]
mov rax, qword [rax + 0x40]
mov qword [rbp + 0x228], rax
lea eax, [r15 + 0x67]
mov byte [r12], al
inc r12
test esi, esi
je 0x18001a55f
mov ecx, 0x115
nop dword [rax]
mov eax, ecx
sub eax, 0x114
je 0x18001a496
cmp eax, 1
jne 0x18001a4af
mov rax, qword [rbp + 0xb8]
mov byte [r12], 0x5e
inc r12
mov rdx, r12
test rax, rax
jne 0x18001a484
mov dword [rbp + 0x220], eax
mov qword [rbp + 0xb8], r12
jmp 0x18001a4af
sub edx, eax
mov qword [rbp + 0xb8], r12
mov qword [rbp + 0x220], rdx
jmp 0x18001a4af
mov rdx, qword [rbp + 0x220]
mov eax, edx
mov byte [r12 + 1], dl
sar eax, 8
mov byte [r12], al
add r12, 2
dec ecx
cmp ecx, 0x113
ja 0x18001a450
mov qword [rbp - 0x80], r12
jmp 0x18001a55f
movsxd r8, r13d
mov rdx, r14
mov rcx, r12
call sub.VCRUNTIME140.dll_memcpy
mov r9, rdi
cmp rdi, qword [rbp + 0x228]
jae 0x18001a55f
mov r10, qword [rbp - 0x18]
mov eax, 1
mov r11d, dword [rbp + 0x4c]
test esi, esi
mov r13, qword [rbp + 0x228]
mov ecx, 4
mov edx, eax
mov r8d, eax
cmovne edx, ecx
cmovne r8d, ecx
nop word [rax + rax]
movzx eax, byte [r9 + 1]
movzx ecx, byte [r9]
shl ecx, 8
or ecx, eax
mov rax, qword [r10 + 0x40]
add ecx, r11d
add ecx, edx
sar ecx, 8
mov byte [rax], cl
movzx ecx, byte [r9 + 1]
add r9, 2
mov rax, qword [r10 + 0x40]
add cl, r8b
add cl, r11b
mov byte [rax + 1], cl
add qword [r10 + 0x40], 2
cmp r9, r13
jb 0x18001a510
mov r13d, dword [rbp + 0x4c]
jmp 0x18001a55f
mov rdi, qword [rbp + 0x228]
movsxd rax, r13d
add r12, rax
dec ebx
cmp ebx, 0x17
ja 0x18001a405
sub esi, 1
mov qword [rbp + 0x98], rdi
mov qword [rbp - 0x80], r12
jns 0x18001a400
mov rdi, qword [rbp + 0x20]
mov r15d, dword [rbp - 0x28]
mov r13d, dword [rbp - 0x58]
mov r9, qword [rbp + 0xb8]
test r9, r9
je 0x18001a7b1
mov edi, dword [rbp + 0x168]
mov r8d, 0xc3
mov eax, r8d
sub eax, 0xc3
je 0x18001a618
sub eax, 0x1a
je 0x18001a5e2
cmp eax, 0x1a
jne 0x18001a620
mov rcx, qword [rbp + 0x280]
mov eax, edi
mov byte [r12], 0x55
sar eax, 8
mov byte [r12 + 1], al
mov byte [r12 + 2], dil
add r12, 3
mov byte [rcx + 1], al
mov byte [rcx + 2], dil
jmp 0x18001a620
movsxd rax, edi
mov r10, r12
sub r10, rax
mov qword [rbp + 0x280], r10
movzx ecx, byte [r10 + 1]
movzx edx, byte [r10 + 2]
mov eax, ecx
shl eax, 8
or eax, edx
jne 0x18001a60c
xor eax, eax
mov r9d, eax
jmp 0x18001a620
shl rcx, 8
or rcx, rdx
sub r9, rcx
jmp 0x18001a620
mov edi, r12d
sub edi, r9d
inc edi
add r8d, 0x1a
cmp r8d, 0x111
jb 0x18001a5a6
mov dword [rbp + 0x168], edi
mov qword [rbp + 0xb8], r9
mov qword [rbp - 0x80], r12
test r9, r9
jne 0x18001a5a0
mov rdi, qword [rbp + 0x20]
jmp 0x18001a7b1
mov r15d, dword [rbp - 8]
mov r14d, 0xc3
mov rdi, qword [rbp - 0x30]
movsxd r13, dword [rbp + 0xdc]
nop dword [rax]
cmp r14d, 0xc3
je 0x18001a735
cmp r14d, 0x2ffd
jne 0x18001a742
mov r10, qword [rbp + 0x230]
mov rsi, r10
movzx eax, byte [r10 + 2]
movzx ecx, byte [r10 + 1]
shl rcx, 8
or rcx, rax
lea eax, [r15 + 0x56]
sub rsi, rcx
mov byte [r10], al
test rdi, rdi
jne 0x18001a742
cmp byte [rsi], 0x5d
je 0x18001a742
mov eax, 0xa2
cmp eax, 0xa2
jne 0x18001a727
mov rbx, rsi
mov eax, dword [rbp - 0x70]
lea rdx, [rsp + 0x78]
mov dword [rsp + 0x78], eax
mov r9, rbx
xor eax, eax
mov r8d, 0xb4
mov rcx, r10
mov qword [rsp + 0x20], rax
call fcn.1800278c0
test eax, eax
jne 0x18001a718
movzx ecx, byte [rbx + 1]
movzx eax, byte [rbx + 2]
shl rcx, 8
or rcx, rax
add rbx, rcx
cmp byte [rbx], 0x54
jne 0x18001a71b
mov r10, qword [rbp + 0x230]
jmp 0x18001a6d0
add byte [rsi], 3
mov r10, qword [rbp + 0x230]
mov eax, 0xa2
add eax, 0x5f8e
cmp eax, 0x5f8e
jbe 0x18001a6c6
jmp 0x18001a742
mov rcx, r12
sub rcx, r13
mov qword [rbp + 0x230], rcx
add r14d, 0x2f3a
cmp r14d, 0x5e74
jbe 0x18001a670
mov rdi, qword [rbp + 0x20]
mov r15d, dword [rbp - 0x28]
mov r13d, dword [rbp - 0x58]
jmp 0x18001a7b1
xor esi, esi
cmp byte [r14], 0x60
mov qword [rbp + 0xb8], rsi
jne 0x18001a7b1
cmp byte [r14 + 3], 0x66
jne 0x18001a7b1
mov r14, qword [rbp - 0x68]
mov r10, qword [rsp + 0x70]
mov r12, qword [rbp - 0x80]
mov r15, qword [rbp - 0x18]
mov r9, qword [rbp - 0x30]
mov dword [r14], 0x37
mov qword [rsp + 0x78], r10
jmp 0x18001b570
xor eax, eax
mov dword [rbp + 0xdc], eax
mov eax, r12d
sub eax, r14d
mov dword [rbp + 0x4c], eax
add r15d, 0x3b92
mov dword [rbp - 0x28], r15d
cmp r15d, 0xb2b6
ja 0x18001a7f0
mov r14, qword [rbp + 0x18]
jmp 0x180019f84
mov byte [r14], 0x6f
mov rbx, qword [rsp + 0x70]
mov qword [rsp + 0x78], rbx
mov r10, qword [rsp + 0x78]
xor eax, eax
mov qword [rbp + 0x18], rax
lea r13d, [rax + 0x24]
jmp case.default.0x180019dda
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
jmp 0x180019ec2
mov edx, 0xfe
nop dword [rax]
nop dword [rax + rax]
mov eax, edx
sub eax, 0xfe
je 0x18001a938
sub eax, 1
je 0x18001a92b
cmp eax, 1
jne 0x18001a93e
cmp dword [rbp - 4], 0
jne 0x18001a86d
cmp dword [rbp - 0x74], 0xffffffff
jne 0x18001a851
movzx eax, byte [rbp - 8]
add al, 0x46
mov byte [r12], al
inc r12
mov qword [rbp - 0x80], r12
jmp 0x18001a93e
cmp dword [rbp - 0x74], 1
jne 0x18001a88f
movzx eax, byte [rbp - 8]
add al, 0x4a
mov byte [r12], al
inc r12
mov qword [rbp - 0x80], r12
jmp 0x18001a93e
cmp dword [rbp - 4], 1
jne 0x18001a88f
cmp dword [rbp - 0x74], 0xffffffff
jne 0x18001a88f
movzx eax, byte [rbp - 8]
add al, 0x48
mov byte [r12], al
inc r12
mov qword [rbp - 0x80], r12
jmp 0x18001a93e
mov r15d, dword [rbp - 8]
mov ecx, 0x36
xor edi, edi
nop word [rax + rax]
cmp ecx, 0x36
je 0x18001a904
cmp ecx, 0x258c
je 0x18001a8f8
cmp ecx, 0x4ae2
je 0x18001a8e9
cmp ecx, 0x7038
je 0x18001a8de
cmp ecx, 0x958e
jne 0x18001a90f
mov eax, dword [rbp - 0x74]
sar eax, 8
mov byte [r12], al
movzx eax, byte [rbp - 0x74]
mov byte [r12 + 1], al
add r12, 2
jmp 0x18001a90f
cmp dword [rbp - 0x74], 0xffffffff
jne 0x18001a90f
mov dword [rbp - 0x74], edi
jmp 0x18001a90f
movzx eax, byte [rbp - 4]
mov byte [r12 + 1], al
add r12, 2
jmp 0x18001a90f
mov eax, dword [rbp - 4]
sar eax, 8
mov byte [r12], al
jmp 0x18001a90f
lea eax, [r15 + 0x4c]
mov byte [r12], al
inc r12
add ecx, 0x2556
cmp ecx, 0xbaae
jbe 0x18001a8a0
mov rdi, qword [rbp + 0x20]
mov r15, qword [rbp - 0x18]
mov qword [rbp - 0x80], r12
jmp 0x18001a93e
cmp dword [rbp - 0x74], 1
je 0x18001a93e
or dword [r15 + 0x6c], 1
jmp 0x18001a93e
cmp dword [rbp - 0x74], 0
je 0x18001a95b
inc edx
cmp edx, 0x101
jb 0x18001a810
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
jmp 0x180019ec9
mov qword [rbp - 0x80], r14
jmp 0x18001a7d2
mov r14d, 0x9e
nop word [rax + rax]
cmp r14d, 0x9e
je 0x18001aa4c
cmp r14d, 0x4a10
je 0x18001a9bb
cmp r14d, 0x9382
jne 0x18001ab0a
mov r14, qword [rbp + 0x18]
movzx eax, byte [r14]
mov r15d, 0xef
sub al, 0xf
cmp al, 1
jbe 0x18001ab27
mov eax, 0xffffffff
mov dword [rbp + 0xa4], eax
jmp 0x18001ab37
cmp dword [rbp + 0x38], 0
jne 0x18001ab0a
cmp dword [rbp - 0x74], 0
jge 0x18001ab0a
mov eax, dword [rbp - 0x44]
lea r9, [r10 + 1]
mov dword [rbp - 0x10], eax
lea rdx, [rbp + 0x10]
mov eax, dword [rbp - 0x70]
lea rcx, [rbp - 0x28]
mov dword [rbp - 0x28], eax
mov r8, r15
mov rax, qword [rbp + 0x18]
mov dword [rsp + 0x38], 0xcb
mov dword [rbp + 0x10], r11d
movzx eax, byte [rax]
mov dword [rsp + 0x78], eax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2b0]
mov qword [rsp + 0x20], rax
call fcn.18000b540
mov r10, qword [rsp + 0x70]
mov r11, qword [rbp]
mov qword [rsp + 0x78], r10
test eax, eax
je 0x18001ab0a
xor eax, eax
mov dword [rbp + 0x38], 1
mov dword [rbp - 8], eax
jmp 0x18001ab0a
cmp dword [rbp - 0x70], 0
je 0x18001aaeb
cmp byte [r12 - 1], 0
jge 0x18001aaeb
mov rdi, qword [rbp + 0x258]
mov ebx, 0x1a
nop
mov eax, ebx
sub eax, 0x18
je 0x18001aac5
sub eax, 1
je 0x18001aa88
cmp eax, 1
jne 0x18001aace
lea rdi, [r12 - 1]
jmp 0x18001aace
movzx eax, byte [rdi]
and al, 0xc0
cmp al, 0x80
jne 0x18001aaa5
movzx eax, byte [rdi - 1]
dec rdi
and al, 0xc0
cmp al, 0x80
je 0x18001aa91
mov qword [rbp + 0x258], rdi
mov eax, r12d
lea rcx, [rbp + 0x2b0]
sub eax, edi
mov rdx, rdi
mov r15d, eax
movsxd r8, eax
mov qword [rbp], r15
call sub.VCRUNTIME140.dll_memcpy
jmp 0x18001aace
bts r11d, 7
mov qword [rbp], r11
mov r11, qword [rbp]
dec ebx
cmp ebx, 0x17
ja 0x18001aa70
mov r10, qword [rsp + 0x78]
mov qword [rbp + 0x258], rdi
mov rdi, qword [rbp + 0x20]
jmp 0x18001ab0a
cmp dword [rbp - 4], 1
movzx eax, byte [r12 - 1]
mov r11d, eax
mov qword [rbp], r11
jle 0x18001ab0a
mov ecx, dword [r15 + 0x70]
or ecx, eax
or ecx, dword [rbp + 0x78]
mov dword [rbp + 8], ecx
add r14d, 0x4972
cmp r14d, 0xdc56
ja 0x180019ec2
mov r15, qword [rbp - 0x18]
jmp 0x18001a970
movzx eax, byte [r14 + 1]
mov dword [rbp + 0xa4], eax
movzx eax, byte [r14 + 2]
mov rdx, r12
mov dword [rbp + 0xa0], eax
mov qword [rbp + 0xf8], rdx
add r15d, 8
cmp r15d, 0x10f
jae 0x180019ec2
mov eax, r15d
sub eax, 0xe7
je 0x18001aef0
sub eax, 8
je 0x18001a997
sub eax, 8
je 0x18001aec8
sub eax, 8
je 0x18001aeba
cmp eax, 8
jne 0x18001ab47
cmp dword [rbp - 4], 0
jne 0x18001ac04
cmp dword [rbp - 0x74], 0xffffffff
jne 0x18001aba4
movzx eax, byte [rbp - 8]
add al, 0x1f
mov byte [r12], al
inc r12
jmp 0x18001ae51
cmp dword [rbp - 0x74], 1
jne 0x18001abbc
movzx eax, byte [rbp - 8]
add al, 0x23
mov byte [r12], al
inc r12
jmp 0x18001ae51
mov ecx, 0xa5
mov eax, ecx
sub eax, 0xa4
je 0x18001abe8
cmp eax, 1
jne 0x18001abf5
movzx eax, byte [rbp - 8]
add al, 0x25
mov byte [r12], al
inc r12
mov eax, dword [rbp - 0x74]
sar eax, 8
mov byte [r12], al
jmp 0x18001abf5
movzx eax, byte [rbp - 0x74]
mov byte [r12 + 1], al
add r12, 2
dec ecx
cmp ecx, 0xa3
ja 0x18001abc1
jmp 0x18001ae51
cmp dword [rbp - 4], 1
jne 0x18001ac7e
cmp dword [rbp - 0x74], 0xffffffff
jne 0x18001ac22
movzx eax, byte [rbp - 8]
add al, 0x21
mov byte [r12], al
inc r12
jmp 0x18001ae51
mov ecx, ILFindLastID
cmp ecx, 0xc
je 0x18001ac51
cmp ecx, 0x318
jne 0x18001ac6b
mov eax, dword [rbp - 0x74]
dec eax
sar eax, 8
mov byte [r12], al
movzx eax, byte [rbp - 0x74]
dec al
mov byte [r12 + 1], al
add r12, 2
jmp 0x18001ac6b
cmp dword [rbp - 0x74], 1
mov qword [rbp - 0x80], rdx
je 0x18001a7d2
movzx eax, byte [rbp - 8]
lea r12, [rdx + 1]
add al, 0x25
mov byte [rdx], al
add ecx, 0x30c
cmp ecx, 0x618
jbe 0x18001ac27
jmp 0x18001ae51
mov r14d, 2
mov eax, r14d
sub eax, 2
je 0x18001ae26
cmp eax, 1
jne 0x18001ae40
movzx eax, byte [rbp - 4]
mov byte [r12 + 1], al
add r12, 2
cmp dword [rbp - 0x74], 0
jge 0x18001ad22
cmp dword [rbp - 0x70], 0
je 0x18001acec
cmp r11d, 0x80
jl 0x18001acec
mov ebx, r11d
lea rdx, [rbp + 0x2b0]
and ebx, 7
mov rcx, r12
mov r8d, ebx
call sub.VCRUNTIME140.dll_memcpy
movzx eax, byte [rbp - 8]
add r12, rbx
mov r11, qword [rbp]
add al, 0x1f
mov byte [r12], al
inc r12
jmp 0x18001ae40
mov eax, dword [rbp + 0xa4]
mov byte [r12], r11b
inc r12
test eax, eax
js 0x18001ad10
mov ecx, dword [rbp + 0xa0]
mov byte [r12], al
mov byte [r12 + 1], cl
add r12, 2
movzx eax, byte [rbp - 8]
add al, 0x1f
mov byte [r12], al
inc r12
jmp 0x18001ae40
mov eax, dword [rbp - 4]
cmp dword [rbp - 0x74], eax
je 0x18001ae40
mov esi, 0x105
mov eax, esi
sub eax, 0x103
je 0x18001adae
sub eax, 1
je 0x18001ada6
cmp eax, 1
jne 0x18001ae16
cmp dword [rbp - 0x70], 0
je 0x18001ad77
cmp r11d, 0x80
jl 0x18001ad77
mov ebx, r11d
lea rdx, [rbp + 0x2b0]
and ebx, 7
mov rcx, r12
mov r8d, ebx
call sub.VCRUNTIME140.dll_memcpy
mov r11, qword [rbp]
jmp 0x18001ad80
mov byte [r12], r11b
mov ebx, 1
mov eax, dword [rbp + 0xa4]
add r12, rbx
test eax, eax
js 0x18001ae16
mov ecx, dword [rbp + 0xa0]
mov byte [r12], al
mov byte [r12 + 1], cl
add r12, 2
jmp 0x18001ae16
mov eax, dword [rbp - 4]
sub dword [rbp - 0x74], eax
jmp 0x18001ae16
cmp dword [rbp - 0x74], 1
jne 0x18001adc3
movzx eax, byte [rbp - 8]
add al, 0x23
mov byte [r12], al
inc r12
jmp 0x18001ae16
mov ecx, 0xce
cmp ecx, 0xce
je 0x18001adfb
cmp ecx, 0x9274
je 0x18001adef
cmp ecx, 0x1241a
jne 0x18001ae08
movzx eax, byte [rbp - 0x74]
mov byte [r12 + 1], al
add r12, 2
jmp 0x18001ae08
mov eax, dword [rbp - 0x74]
sar eax, 8
mov byte [r12], al
jmp 0x18001ae08
movzx eax, byte [rbp - 8]
add al, 0x25
mov byte [r12], al
inc r12
add ecx, 0x91a6
cmp ecx, 0x1b4f2
jbe 0x18001adc8
dec esi
cmp esi, 0x102
ja 0x18001ad33
jmp 0x18001ae40
movzx eax, byte [rbp + 0x84]
add al, 0x27
mov byte [r12], al
inc r12
mov eax, dword [rbp - 4]
sar eax, 8
mov byte [r12], al
inc r14d
cmp r14d, 4
jb 0x18001ac84
mov r14, qword [rbp + 0x18]
cmp dword [rbp - 0x70], 0
je 0x18001ae99
cmp r11d, 0x80
jl 0x18001ae99
mov ebx, r11d
lea rdx, [rbp + 0x2b0]
and ebx, 7
mov rcx, r12
mov r8d, ebx
call sub.VCRUNTIME140.dll_memcpy
add r12, rbx
mov qword [rbp - 0x80], r12
mov r10, qword [rsp + 0x70]
mov r11, qword [rbp]
mov rdx, qword [rbp + 0xf8]
mov qword [rsp + 0x78], r10
jmp 0x18001ab47
mov rdx, qword [rbp + 0xf8]
mov byte [r12], r11b
inc r12
mov r10, qword [rsp + 0x70]
mov qword [rbp - 0x80], r12
mov qword [rsp + 0x78], r10
jmp 0x18001ab47
mov eax, dword [rbp + 0x84]
add dword [rbp - 8], eax
jmp 0x18001ab47
mov eax, dword [rbp - 0x74]
mov r12, r14
mov qword [rbp - 0x80], r14
test eax, eax
je case.0x180019dda.36
cmp eax, 1
je 0x18001ab47
mov rax, qword [rbp - 0x18]
or dword [rax + 0x6c], 1
jmp 0x18001ab47
cmp dword [rbp + 0x38], 0
movzx r11d, byte [r14]
mov qword [rbp], r11
mov dword [rbp + 0x84], 0x1a
jne 0x18001ab47
cmp dword [rbp - 0x74], 0
jge 0x18001ab47
mov eax, dword [rbp - 0x44]
lea r9, [r10 + 1]
mov r8, qword [rbp - 0x18]
lea rdx, [rbp + 0x10]
mov dword [rbp - 0x10], eax
lea rcx, [rbp - 0x28]
mov eax, dword [rbp - 0x70]
xor ebx, ebx
mov dword [rbp - 0x28], eax
lea rax, [rsp + 0x78]
mov dword [rsp + 0x38], 0xcb
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov dword [rbp + 0x10], ebx
mov dword [rsp + 0x78], r11d
call fcn.18000b540
test eax, eax
je 0x18001ae7f
mov dword [rbp - 8], ebx
mov dword [rbp + 0x38], 1
jmp 0x18001ae7f
mov rax, qword [rbp + 0x28]
mov r8d, 0x129
mov byte [rax], 0x28
jmp 0x18001b146
mov rax, qword [rbp + 0x28]
mov r8d, 0x129
mov byte [rax], 0x29
jmp 0x18001b146
mov rax, qword [rbp + 0x28]
mov r8d, 0x129
mov byte [rax], 0x2a
jmp 0x18001b146
mov rax, qword [rbp + 0x28]
mov r8d, 0x129
mov byte [rax], 0x2b
jmp 0x18001b146
mov rax, qword [rbp + 0x28]
mov r8d, 0x129
mov byte [rax], 0x42
jmp 0x18001b146
mov rax, qword [rbp + 0x28]
mov r8d, 0x129
mov byte [rax], 0x43
jmp 0x18001b146
mov rax, qword [rbp + 0x28]
mov r8d, 0x129
mov byte [rax], 0x44
jmp 0x18001b146
mov rax, qword [rbp + 0x28]
mov r8d, 0x129
mov byte [rax], 0x45
jmp 0x18001b146
mov rax, qword [rbp + 0x28]
mov r8d, 0x129
mov byte [rax], 0x35
jmp 0x18001b146
mov rax, qword [rbp + 0x28]
mov r8d, 0x129
mov byte [rax], 0x36
jmp 0x18001b146
mov rax, qword [rbp + 0x28]
mov r8d, 0x129
mov byte [rax], 0x37
jmp 0x18001b146
mov rax, qword [rbp + 0x28]
mov r8d, 0x129
mov byte [rax], 0x38
jmp 0x18001b146
mov ebx, 0x9e
cmp ebx, 0x9e
je 0x18001b0b7
cmp ebx, 0x281e
je 0x18001b0ab
cmp ebx, 0x4f9e
je 0x18001b095
cmp ebx, 0x771e
je 0x18001b07f
cmp ebx, 0x9e9e
je 0x18001b0dd
jmp 0x18001b0cb
mov rax, qword [rbp + 0x28]
mov ecx, esi
sar ecx, 8
mov byte [rax + 1], cl
mov rax, qword [rbp + 0x28]
mov byte [rax + 2], sil
jmp 0x18001b0cb
mov byte [r12], 0x55
mov eax, esi
sar eax, 8
mov byte [r12 + 1], al
mov byte [r12 + 2], sil
jmp 0x18001b0c7
mov rax, qword [rbp + 0x28]
add esi, 3
mov byte [rax], 0x5d
jmp 0x18001b0cb
mov rdx, qword [rbp + 0x28]
movsxd r8, esi
lea rcx, [rdx + 3]
call sub.VCRUNTIME140.dll_memmove
add r12, 3
add ebx, 0x2780
cmp ebx, 0xc580
jbe 0x18001b055
mov dword [rbp + 0xe0], esi
lea rbx, [0x180000000]
mov qword [rbp - 0x80], r12
mov r8d, 0x129
jmp 0x18001b146
mov eax, r12d
sub eax, dword [rbp + 0x28]
mov dword [rbp + 0xe0], eax
jmp 0x18001b146
mov rax, qword [rbp + 0x28]
movzx edx, byte [rax]
cmp dl, 0x27
je 0x18001b11a
cmp dl, 0x41
je 0x18001b11f
cmp dl, 0x34
jne 0x18001b146
cmp dl, 0x41
jne 0x18001b134
mov rax, qword [rbp + 0x28]
movzx ecx, byte [rax + 3]
sub cl, 0xf
cmp cl, 1
mov ecx, 2
jbe 0x18001b137
mov rcx, rdi
movzx eax, byte [rdx + rbx + 0x863e0]
add rax, rcx
add qword [rbp + 0x28], rax
inc r8d
cmp r8d, 0x12a
jb 0x180019ee0
mov r10, qword [rsp + 0x70]
mov rdi, qword [rbp + 0x20]
mov qword [rsp + 0x78], r10
jmp case.default.0x180019dda
xor eax, eax
mov dword [rbp - 4], eax
mov eax, 1
mov dword [rbp - 0x74], eax
mov r13d, PathMakeUniqueName
jmp case.default.0x180019dda
cmp qword [rbp + 0x18], 0
je 0x18001d20b
cmp dword [rbp - 4], 0
jne case.default.0x180019dda
mov eax, dword [rbp + 0x34]
mov dword [rbp - 0x4c], eax
mov eax, dword [rbp + 0x3c]
mov dword [rbp + 8], eax
jmp case.default.0x180019dda
mov eax, dword [rbp + 0x80]
or dword [r15 + 0x70], eax
jmp case.default.0x180019dda
mov rax, qword [rbp + 0x18]
lea rcx, [r10 + 1]
xor edx, edx
mov qword [rbp + 0x28], rax
movzx eax, byte [rcx]
mov dword [rbp + 0x38], edx
cmp al, 0x2b
jne 0x18001b20b
mov eax, 0xa0
lea edi, [rdx + 1]
cmp eax, 0xa0
je 0x18001b1f1
cmp eax, 0xfa0
jne 0x18001b1f4
inc r10
mov dword [rbp + 0x38], edi
mov qword [rsp + 0x70], r10
jmp 0x18001b1f4
mov dword [rbp - 8], edx
add eax, 0xf00
cmp eax, 0x1e00
jbe 0x18001b1d6
mov rdi, qword [rbp + 0x20]
mov qword [rsp + 0x78], r10
jmp case.default.0x180019dda
cmp al, 0x3f
jne 0x18001b227
mov eax, dword [rbp + 0xe8]
mov r10, rcx
mov dword [rbp - 8], eax
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x70], rcx
jmp case.default.0x180019dda
mov eax, dword [rbp + 0x7c]
mov dword [rbp - 8], eax
jmp case.default.0x180019dda
mov eax, dword [rbp - 0x74]
mov ecx, 0x200
cmp dword [rbp - 4], eax
mov eax, 0
cmove ecx, eax
mov dword [rbp + 0x80], ecx
jmp case.default.0x180019dda
xor eax, eax
mov dword [rbp + 0x84], eax
mov r11, qword [rbp]
lea rbx, [0x180000000]
mov r12, qword [rbp - 0x80]
dec r13d
mov r15, qword [rbp - 0x18]
jmp 0x180019db5
mov r13d, dword [rbp - 0x44]
mov rax, qword [r15 + 0x40]
lea rcx, [r10 + 1]
xor r11d, r11d
mov qword [rsp + 0x70], rcx
movzx r8d, byte [rcx]
mov esi, r13d
mov dword [rbp + 0x58], r11d
mov qword [rbp + 0x98], rax
mov dword [rbp + 0xa8], r11d
lea r14d, [r11 + 0x5f]
cmp r8b, 0x2a
jne 0x18001b3b9
mov rdx, qword [r15 + 0x18]
movzx eax, byte [rcx + 1]
test byte [rax + rdx], 2
je 0x18001b3b9
lea r15, [rcx + 1]
mov qword [rbp + 0x18], r11
mov r10, r15
lea r14, str.__s___.2d__s__.4d__.2d:_.2d:_.2d_GMT
nop dword [rax]
inc r10
mov qword [rsp + 0x70], r10
movzx eax, byte [r10]
test byte [rax + rdx], 2
jne 0x18001b2d0
movzx eax, byte [r10]
mov qword [rsp + 0x78], r10
cmp al, 0x3a
je 0x18001d22f
cmp al, 0x29
jne 0x18001d21b
sub r10d, r15d
lea rbx, [0x180085f68]
mov qword [rsp + 0x78], r10
mov esi, r11d
nop dword [rax]
cmp r10d, dword [rbx]
jne 0x18001b350
movsxd r8, r10d
mov rdx, r14
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
jne 0x18001b34b
mov ecx, 0x43
nop dword [rax]
mov eax, ecx
sub eax, 0x42
je 0x18001b39a
cmp eax, 1
jne 0x18001b344
movzx eax, byte [rbx + 4]
mov byte [r12], al
dec ecx
cmp ecx, 0x41
ja 0x18001b330
mov r10, qword [rsp + 0x78]
mov eax, dword [rbx]
inc esi
inc eax
add rbx, 8
cdqe
add r14, rax
lea rax, [0x180085fa0]
cmp rbx, rax
jl 0x18001b310
mov r15, qword [rbp - 0x18]
mov r10, qword [rsp + 0x70]
mov r12, qword [rbp - 0x80]
mov r14, qword [rbp - 0x68]
cmp esi, 7
jl 0x18001d0fa
mov r9, qword [rbp - 0x30]
mov dword [r14], 0x3c
mov qword [rsp + 0x78], r10
jmp 0x18001b56e
movzx eax, byte [r12]
inc r12
mov r15, qword [rbp - 0x18]
mov qword [rbp - 0x80], r12
cmp al, 0x6e
jne 0x18001b36f
mov eax, 1
mov dword [r15 + 0x74], eax
jmp 0x18001b36f
cmp r8b, 0x3f
jne 0x18001bd3a
lea r10, [rcx + 1]
mov qword [rsp + 0x70], r10
movzx eax, byte [r10]
add eax, 0xffffffdf
mov qword [rsp + 0x78], r10
cmp eax, 0x5b
ja case.0x18001b3f5.46
cdqe
movzx eax, byte [rbx + rax + 0x1d984]
mov ecx, dword [rbx + rax*4 + 0x1d94c]
add rcx, rbx
jmp rcx
inc r10
mov qword [rsp + 0x70], r10
movzx eax, byte [r10]
mov qword [rsp + 0x78], r10
test al, al
je 0x18001d243
cmp al, 0x29
je 0x18001b419
inc r10
jmp 0x18001b3fa
cmp byte [r10], r11b
je 0x18001d243
mov r12, qword [rbp - 0x80]
jmp 0x18001d0f6
mov dword [rbp + 0xa8], 1
mov ecx, 0x30
nop word [rax + rax]
mov eax, ecx
sub eax, 0x2e
je 0x18001c9bb
sub eax, 1
je 0x18001b45b
cmp eax, 1
jne 0x18001b468
lea r14d, [rax + 0x5d]
jmp 0x18001b468
inc r10
mov qword [rsp + 0x78], r10
mov qword [rsp + 0x70], r10
dec ecx
cmp ecx, 0x2d
ja 0x18001b440
mov r9d, PathMakeUniqueName
nop word [rax + rax]
lea eax, [r9 - 0x23]
cmp eax, 9
ja case.default.0x18001b497
mov ecx, dword [rbx + rax*4 + 0x1d9e0]
add rcx, rbx
jmp rcx
cmp dword [r15 + 0x50], 0
mov r13, qword [r15 + 0x48]
mov qword [rbp + 0x100], r13
mov dword [rbp + 0x30], r11d
jle 0x18001b506
movsxd rbx, dword [rbp + 0x48]
mov edi, r11d
nop word [rax + rax]
mov rcx, qword [rbp + 0x60]
lea rdx, [r13 + 2]
mov r8, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x18001b4e4
movsxd rax, dword [r15 + 0x54]
inc edi
add r13, rax
cmp edi, dword [r15 + 0x50]
jl 0x18001b4c0
mov r10, qword [rsp + 0x70]
lea rbx, [0x180000000]
mov dword [rbp + 0x30], edi
xor r11d, r11d
mov rdi, qword [rbp + 0x20]
mov qword [rsp + 0x78], r10
mov qword [rbp + 0x100], r13
mov r9d, 0x24
jmp case.default.0x18001b497
mov edx, dword [rbp + 0xc]
mov eax, r10d
sub eax, dword [rbp + 0x60]
mov dword [rbp + 0x48], eax
test edx, edx
jle 0x18001b536
movzx eax, byte [r10]
inc r10
mov qword [rsp + 0x78], r10
mov qword [rsp + 0x70], r10
cmp eax, edx
jne 0x18001b54f
movzx eax, byte [r10]
inc r10
mov qword [rsp + 0x78], r10
mov qword [rsp + 0x70], r10
cmp al, 0x29
je case.default.0x18001b497
mov eax, 0x12a
cmp eax, 0x12a
je 0x18001b59e
cmp eax, 0x7214
jne 0x18001b5b5
mov r14, qword [rbp - 0x68]
mov r9, qword [rbp - 0x30]
mov r12, qword [rbp - 0x80]
xor esi, esi
mov r11, qword [rbp - 0x38]
mov r13d, 0x7a
mov r8, qword [rbp - 0x20]
mov ebx, dword [rbp - 0x78]
lea rcx, [0x180000000]
mov rax, qword [rbp + 0x240]
mov edx, 0xe9
inc edx
mov qword [rax], r10
jmp 0x180017ee5
mov rcx, qword [rbp - 0x68]
dec r10
mov qword [rsp + 0x78], r10
mov qword [rsp + 0x70], r10
mov dword [rcx], 0x1a
add eax, 0x70ea
cmp eax, 0xe1d4
jbe 0x18001b554
jmp case.default.0x18001b497
mov r8, qword [r15 + 0x18]
inc r10
mov qword [rsp + 0x70], r10
mov qword [rsp + 0x78], r10
mov qword [rbp + 0x60], r10
movzx eax, byte [r10]
test byte [rax + r8], 0x10
je case.default.0x18001b497
mov ecx, dword [rbp - 0x50]
movzx edx, al
mov r11d, 0xffffffff
test ecx, ecx
js 0x18001b615
test byte [rax + rbx + 0x8cf90], 4
je 0x18001b612
lea ecx, [rcx + rcx*4]
movzx eax, dl
lea ecx, [rcx - 0x18]
lea ecx, [rax + rcx*2]
jmp 0x18001b615
mov ecx, r11d
inc r10
mov qword [rsp + 0x70], r10
movzx eax, byte [r10]
movzx edx, al
test byte [rax + r8], 0x10
jne 0x18001b5f6
mov dword [rbp - 0x50], ecx
xor r11d, r11d
mov qword [rsp + 0x78], r10
jmp case.default.0x18001b497
movzx ecx, byte [r10 + 1]
mov rax, qword [r15 + 0x18]
test byte [rcx + rax], 0x10
jne 0x18001b68c
mov ecx, 0xdd
nop
mov eax, ecx
sub eax, 0xdd
je 0x18001b675
sub eax, 1
je 0x18001b669
cmp eax, 1
je 0x18001b562
jmp 0x18001b682
mov rax, qword [rbp - 0x68]
mov dword [rax], 0x1c
jmp 0x18001b682
inc r10
mov qword [rsp + 0x78], r10
mov qword [rsp + 0x70], r10
inc ecx
cmp ecx, 0xe0
jb 0x18001b650
mov dword [rbp - 0x50], r11d
jmp case.default.0x18001b497
movzx eax, byte [r10 + 1]
lea rcx, [r10 + 1]
cmp al, 0x52
jne 0x18001b6ce
cmp byte [r10 + 2], 0x26
jne 0x18001b6ce
add r10, 2
mov dword [rbp + 0xc], 0xffffffff
mov qword [rsp + 0x70], r10
mov byte [r12 + 3], 0x65
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
jmp case.default.0x18001b497
cmp al, 0x3c
jne 0x18001b6eb
mov dword [rbp + 0xc], 0x3e
mov r10, rcx
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x70], rcx
jmp case.default.0x18001b497
cmp al, 0x27
jne 0x18001b708
mov dword [rbp + 0xc], 0x27
mov r10, rcx
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x70], rcx
jmp case.default.0x18001b497
sub al, 0x2b
mov dword [rbp + 0xc], r11d
test al, 0xfd
jne case.default.0x18001b497
mov qword [rsp + 0x70], rcx
mov r10, rcx
movzx eax, byte [rcx]
mov dword [rbp + 0x70], eax
mov qword [rsp + 0x78], rcx
jmp case.default.0x18001b497
cmp byte [r10 + 1], 0x3f
mov r14d, 0x60
jne case.default.0x18001b497
movzx ecx, byte [r10 + 2]
lea eax, [rcx - 0x3c]
cmp al, 1
jbe 0x18001c9bb
cmp cl, 0x21
je 0x18001c9bb
jmp case.default.0x18001b497
mov r8d, dword [rbp + 0x70]
test r8d, r8d
jle case.default.0x18001b497
mov ecx, 0x40
nop
mov eax, ecx
sub eax, 0x3d
je 0x18001c9bb
sub eax, 1
je 0x18001b7e4
sub eax, 1
je 0x18001b7d7
cmp eax, 1
jne 0x18001b7ec
mov r13d, dword [rbp - 0x50]
test r13d, r13d
jle 0x18001d253
cmp r8d, 0x2d
jne 0x18001b7aa
mov eax, dword [r15 + 0x58]
sub eax, r13d
lea r13d, [rax + 1]
jmp 0x18001b7ae
add r13d, dword [r15 + 0x58]
mov dword [rbp - 0x50], r13d
test r13d, r13d
jle 0x18001b7bd
cmp r13d, dword [r15 + 0x5c]
jle 0x18001b7ec
mov r14, qword [rbp - 0x68]
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
mov dword [r14], ILClone
jmp 0x18001b566
mov eax, dword [rbp - 0x50]
sar eax, 8
mov byte [r12 + 4], al
jmp 0x18001b7ec
mov eax, dword [rbp - 0x50]
mov byte [r12 + 5], al
dec ecx
cmp ecx, 0x3c
ja 0x18001b770
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
jmp case.default.0x18001b497
mov byte [r12 + 3], 0x64
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
mov dword [rbp + 0x58], 3
mov dword [rbp + 0x70], 0xffffffff
jmp case.default.0x18001b497
cmp qword [rbp - 0x30], 0
jne 0x18001c9bb
dec r9d
cmp r9d, 0x22
ja 0x18001b480
mov ecx, 0x102
mov eax, ecx
sub eax, 0x102
je 0x18001ba36
cmp eax, 0x4e
je 0x18001c9b3
jmp 0x18001ba3c
mov eax, dword [rbp + 0x30]
cmp eax, dword [r15 + 0x50]
jge 0x18001b8b5
mov r15d, dword [rbp - 0x50]
mov ecx, 0x3e
mov rdx, qword [rbp + 0x100]
mov eax, ecx
sub eax, 0x3d
je 0x18001b89c
cmp eax, 1
jne 0x18001b8a1
movzx eax, byte [rdx + 1]
movzx r15d, byte [rdx]
shl r15d, 8
or r15d, eax
mov eax, r15d
shr eax, 8
mov byte [r12 + 4], al
jmp 0x18001b8a1
mov byte [r12 + 5], r15b
dec ecx
cmp ecx, 0x3c
ja 0x18001b874
mov dword [rbp - 0x50], r15d
mov r15, qword [rbp - 0x18]
jmp 0x18001c9bb
mov eax, dword [rbp - 0x44]
lea rdx, [rbp - 0x10]
mov ebx, dword [rbp + 0x48]
mov r8, r10
mov r9, qword [rbp + 0x60]
mov rcx, r15
shr eax, 3
and eax, 1
mov dword [rsp + 0x78], ebx
mov dword [rbp - 0x10], eax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xd2
call fcn.180026f00
mov dword [rbp + 0x30], eax
mov r9d, eax
test eax, eax
jle 0x18001b909
sar eax, 8
mov byte [r12 + 4], al
mov byte [r12 + 5], r9b
jmp 0x18001c9bb
cmp dword [rbp + 0xc], 0
jne 0x18001b7bd
mov rcx, qword [rbp + 0x60]
cmp byte [rcx], 0x52
jne 0x18001b9df
mov r8d, 0x5a
nop word [rax + rax]
mov eax, r8d
sub eax, 0x58
je 0x18001b9b1
sub eax, 1
je 0x18001b9a2
cmp eax, 1
jne 0x18001b9cd
xor eax, eax
mov r13d, eax
mov dword [rbp - 0x50], eax
mov eax, 1
mov dword [rbp + 0x30], eax
mov r9d, eax
cmp ebx, eax
jle 0x18001b9cd
mov eax, r9d
movzx edx, byte [rax + rcx]
lea rcx, [0x180000000]
test byte [rdx + rcx + 0x8cf90], 4
je 0x18001d26d
lea ecx, [r13*4 - 0x18]
inc r9d
add ecx, r13d
mov dword [rbp + 0x30], r9d
lea r13d, [rdx + rcx*2]
mov rcx, qword [rbp + 0x60]
mov dword [rbp - 0x50], r13d
cmp r9d, ebx
jl 0x18001b961
jmp 0x18001b9c9
cmp dword [rbp - 0x50], 0
jne 0x18001b9cd
mov dword [rbp - 0x50], 0xffff
jmp 0x18001b9cd
mov ecx, dword [rbp - 0x50]
mov eax, ecx
sar eax, 8
mov byte [r12 + 4], al
mov byte [r12 + 3], 0x65
mov byte [r12 + 5], cl
mov rcx, qword [rbp + 0x60]
dec r8d
cmp r8d, 0x57
ja 0x18001b930
jmp 0x18001c9bb
cmp ebx, 6
jne 0x18001ba0a
mov r8d, ebx
lea rdx, str.DEFINE
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
jne 0x18001ba0a
mov byte [r12 + 3], 0x66
mov dword [rbp + 0x58], 1
jmp 0x18001c9bb
mov r13d, dword [rbp - 0x50]
test r13d, r13d
jle 0x18001d2b1
cmp r13d, dword [r15 + 0x5c]
jg 0x18001d2b1
mov eax, r13d
mov byte [r12 + 5], r13b
sar eax, 8
mov byte [r12 + 4], al
jmp 0x18001c9bb
mov r14d, 0x58
add ecx, 0x4e
cmp ecx, 0x19e
jb 0x18001b840
inc r10
mov qword [rsp + 0x70], r10
cmp byte [r10], 0x29
jne 0x18001ba73
mov byte [r12], 0x6d
inc r12
mov r10, qword [rsp + 0x70]
mov qword [rbp - 0x80], r12
mov qword [rbp + 0x18], r11
jmp 0x18001d0f6
mov r14d, 0x59
jmp 0x18001c9bb
mov r9d, 0x123
nop dword [rax]
nop dword [rax + rax]
mov eax, r9d
sub eax, 0x122
je 0x18001c9bb
cmp eax, 1
jne 0x18001bb17
movzx eax, byte [r10 + 1]
cmp al, 0x21
je 0x18001bb60
cmp al, 0x3d
je 0x18001bb50
mov r8d, 0x12a
nop
mov eax, r8d
sub eax, 0x12a
je 0x18001bae6
sub eax, 0x2c
je 0x18001bada
cmp eax, 0x2c
je 0x18001b562
jmp 0x18001bb0a
mov rax, qword [rbp - 0x68]
mov dword [rax], 0x18
jmp 0x18001bb0a
movzx ecx, byte [r10 + 1]
lea rdx, [r10 + 1]
mov rax, qword [r15 + 0x18]
test byte [rcx + rax], 0x10
jne case.0x18001b3f5.35
mov r10, rdx
mov qword [rsp + 0x78], rdx
mov qword [rsp + 0x70], rdx
add r8d, 0x2c
cmp r8d, 0x1ae
jb 0x18001bac0
dec r9d
cmp r9d, 0x121
ja 0x18001ba90
mov ecx, reloc.SHELL32.dll_ILAppendID
nop dword [rax]
mov eax, ecx
sub eax, 0x9a
je 0x18001bb6f
cmp eax, 1
je 0x18001c9b3
jmp 0x18001bb75
mov r14d, 0x5a
add r10, 2
jmp 0x18001c9b6
mov r14d, 0x5b
add r10, 2
jmp 0x18001c9b6
mov r14d, 0x5d
inc ecx
cmp ecx, 0x9c
jb 0x18001bb30
mov byte [r12], 0x53
mov r8d, 0x8a
mov r10, qword [rsp + 0x70]
mov qword [rbp + 0xc0], r12
inc r12
mov qword [rbp - 0x80], r12
mov qword [rsp + 0x78], r10
mov dword [rbp + 0xac], 1
nop dword [rax]
cmp r8d, 0x8a
je 0x18001bc53
cmp r8d, 0x10e
je 0x18001bc2d
cmp r8d, 0x192
je 0x18001bbf4
cmp r8d, 0x216
jne 0x18001bcb0
mov word [r12 + 2], r11w
add r12, 4
mov r10, qword [rsp + 0x70]
mov qword [rbp - 0x80], r12
jmp 0x18001bcab
mov eax, dword [rbp + 0xb0]
mov byte [r12], al
inc r12
mov eax, dword [rsp + 0x70]
sub eax, dword [r15 + 0x30]
inc eax
mov qword [rbp - 0x80], r12
sar eax, 8
mov byte [r12], al
movzx eax, byte [rsp + 0x70]
sub al, byte [r15 + 0x30]
inc al
mov byte [r12 + 1], al
mov r10, qword [rsp + 0x70]
jmp 0x18001bcab
cmp byte [r10], 0x29
jne 0x18001d2d7
cmp dword [rbp + 0xb0], 0xff
jle 0x18001bcb0
mov r14, qword [rbp - 0x68]
mov dword [r14], 0x26
jmp 0x18001b566
inc r10
mov ecx, r11d
mov qword [rsp + 0x70], r10
mov dword [rbp + 0xb0], ecx
mov qword [rsp + 0x78], r10
movzx edx, byte [r10]
test byte [rdx + rbx + 0x8cf90], 4
je 0x18001bcb0
nop word [rax + rax]
movzx eax, dl
lea ecx, [rcx + rcx*4]
inc r10
lea ecx, [rcx - 0x18]
mov qword [rsp + 0x70], r10
lea ecx, [rax + rcx*2]
movzx eax, byte [r10]
movzx edx, al
test byte [rax + rbx + 0x8cf90], 4
jne 0x18001bc80
mov dword [rbp + 0xb0], ecx
mov qword [rsp + 0x78], r10
add r8d, 0x84
cmp r8d, 0x29a
jb 0x18001bbb0
mov r12, qword [rbp - 0x80]
mov qword [rbp + 0x18], r11
jmp 0x18001d0f6
inc r10
mov qword [rsp + 0x70], r10
mov qword [rsp + 0x78], r10
movzx edx, byte [r10]
lea eax, [rdx - 0x3d]
cmp al, 1
jbe 0x18001bcfe
cmp dl, 0x3c
je case.0x18001b3f5.35
mov r14, qword [rbp - 0x68]
mov dword [r14], PathMakeUniqueName
jmp 0x18001b566
mov ecx, 0x1d
mov eax, ecx
sub eax, 0x1d
je 0x18001bd15
cmp eax, 1
je 0x18001c12f
jmp 0x18001bd28
mov eax, r11d
mov dword [rbp + 0xc], PathMakeUniqueName
cmp dl, 0x3e
sete al
mov dword [rbp + 0x6c], eax
inc ecx
cmp ecx, 0x1f
jb 0x18001bd03
mov r14d, 0x80
jmp 0x18001c139
bt r13d, 0xc
jae 0x18001bd4c
mov r14d, 0x5e
jmp 0x18001c9bb
mov ecx, 0x5b
cmp ecx, 0x5b
je 0x18001bd8d
cmp ecx, 0xfb
je 0x18001bd6f
cmp ecx, 0x19b
jne 0x18001bd92
mov dword [rbp + 0x58], 2
jmp 0x18001bd92
mov eax, dword [r15 + 0x58]
inc eax
mov dword [r15 + 0x58], eax
sar eax, 8
mov byte [r12 + 3], al
movzx eax, byte [r15 + 0x58]
mov byte [r12 + 4], al
jmp 0x18001bd92
mov ecx, 0x5b
add ecx, 0xa0
cmp ecx, 0x23b
jb 0x18001bd51
jmp 0x18001c9bb
mov eax, dword [r15 + 0x58]
lea r9, [rbp + 0x10]
mov r14, qword [rbp - 0x68]
lea rdx, [rsp + 0x70]
mov dword [rsp + 0x78], eax
xor esi, esi
lea rax, [rsp + 0x78]
mov qword [rbp + 0x110], r10
mov qword [rsp + 0x28], rax
mov r8d, 0x101
lea rax, [rbp - 0x10]
mov dword [rbp + 0x10], esi
mov rcx, r14
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x10], r13d
call fcn.180025b20
mov r11d, eax
mov qword [rbp], r11
cmp dword [r14], esi
jne 0x18001d3b7
test eax, eax
jns 0x18001ce36
neg r11d
cmp eax, 0xffffffe6
jne 0x18001be3b
mov r10, qword [rsp + 0x70]
cmp byte [r10 + 1], 0x5c
jne 0x18001be2b
cmp byte [r10 + 2], 0x45
jne 0x18001be2b
mov r12, qword [rbp - 0x80]
add r10, 2
jmp 0x18001d0fc
mov r12, qword [rbp - 0x80]
mov dword [rbp - 0x60], 1
jmp 0x18001d0fc
cmp r11d, 0x19
je 0x18001ce28
mov r8d, dword [rbp - 0x4c]
cmp r8d, 0xfffffffe
jne 0x18001be63
lea eax, [r11 - 6]
cmp eax, 0x10
mov eax, 0xffffffff
cmovbe r8d, eax
mov dword [rbp - 0x4c], r8d
mov esi, dword [rbp + 8]
mov dword [rbp + 0x3c], esi
mov dword [rbp + 0x34], r8d
cmp r11d, 0x1b
jne 0x18001c09a
mov rbx, qword [rsp + 0x70]
lea r10d, [r11 + 0x22]
xor esi, esi
mov qword [rsp + 0x78], rbx
mov r9d, esi
nop word [rax + rax]
cmp r9d, 6
ja case.default.0x18001beae
lea rdx, [0x180000000]
mov eax, r9d
mov ecx, dword [rdx + rax*4 + 0x1da08]
add rcx, rdx
jmp rcx
mov dword [rbp + 0xa8], esi
jmp case.default.0x18001beae
movzx eax, byte [rbx + 2]
lea rsi, [rbx + 2]
mov qword [rbp + 0xd0], rsi
test byte [rax + rdx + 0x8cf90], 4
je case.default.0x18001beae
nop dword [rax + rax]
movzx eax, byte [rsi + 1]
inc rsi
test byte [rax + rdx + 0x8cf90], 4
jne 0x18001bee0
mov qword [rbp + 0xd0], rsi
jmp case.default.0x18001beae
mov rax, qword [r15 + 0x40]
mov qword [rbp + 0x98], rax
jmp case.default.0x18001beae
movzx eax, byte [rbx + 1]
sub al, 0x2b
test al, 0xfd
je case.default.0x18001beae
mov ecx, 0xdc
mov eax, ecx
sub eax, 0xdc
je 0x18001bff5
sub eax, 0x18
je 0x18001bf8b
sub eax, 0x18
je 0x18001bf51
cmp eax, 0x18
jne 0x18001bffc
mov r10, qword [rsp + 0x78]
mov dword [rbp + 0x6c], 1
jmp 0x18001c12c
mov rax, qword [rbp + 0xd0]
movzx eax, byte [rax]
cmp eax, dword [rbp + 0xc]
jne 0x18001c053
cmp dword [rbp + 0x68], 0
je 0x18001bffc
mov r10, qword [rsp + 0x78]
inc r10
mov r14d, reloc.SHELL32.dll_ILRemoveLastID
mov qword [rsp + 0x78], r10
mov qword [rsp + 0x70], r10
jmp 0x18001c7c6
movzx ecx, byte [rbx + 1]
lea rsi, [rbx + 1]
mov qword [rbp + 0xd0], rsi
test cl, cl
je 0x18001bfee
mov edi, dword [rbp + 0xc]
xor r14d, r14d
mov r13d, dword [rbp + 0x68]
movzx eax, cl
cmp eax, edi
je 0x18001bfd7
mov rax, qword [r15 + 0x18]
movzx ecx, cl
movzx edx, byte [rcx + rax]
mov eax, r14d
test dl, 4
cmovne eax, r13d
mov r13d, eax
test dl, 0x10
je 0x18001bfd7
movzx ecx, byte [rsi + 1]
inc rsi
test cl, cl
jne 0x18001bfa8
mov rdi, qword [rbp + 0x20]
mov r14, qword [rbp - 0x68]
mov dword [rbp + 0x68], r13d
mov r13d, dword [rbp - 0x44]
mov qword [rbp + 0xd0], rsi
mov ecx, SHTestTokenMembership
jmp 0x18001bffc
mov dword [rbp + 0x68], 1
add ecx, 0x18
cmp ecx, 0x13c
jb 0x18001bf20
jmp case.default.0x18001beae
inc rbx
mov dword [rbp + 0x58], esi
mov qword [rsp + 0x70], rbx
mov eax, 0x27
mov ecx, 0x3e
mov qword [rsp + 0x78], rbx
cmp byte [rbx], 0x3c
cmove eax, ecx
mov dword [rbp + 0xc], eax
jmp case.default.0x18001beae
mov rax, qword [rbp + 0xc8]
mov qword [rbp + 0xd0], rax
inc r10d
inc r9d
cmp r10d, 0x44
jae 0x18001c0a6
xor esi, esi
jmp 0x18001be90
mov r10, qword [rsp + 0x78]
xor esi, esi
mov r12, qword [rbp - 0x80]
mov r15, qword [rbp - 0x18]
mov dword [r14], 0x39
jmp 0x18001d0fc
mov rax, qword [rbp + 0xd0]
mov r10, qword [rsp + 0x78]
movzx eax, byte [rax]
cmp eax, dword [rbp + 0xc]
je 0x18001bf73
mov r12, qword [rbp - 0x80]
mov r15, qword [rbp - 0x18]
mov dword [r14], 0x39
jmp 0x18001d0fc
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
jmp 0x18001c0af
mov r10, qword [rsp + 0x78]
mov r8d, dword [rbp - 0x4c]
cmp r11d, 0x1c
jne 0x18001ccee
movzx eax, byte [r10 + 1]
inc r10
mov qword [rsp + 0x78], r10
cmp al, 0x3c
je 0x18001c0d6
cmp al, 0x27
je 0x18001c0d6
cmp al, 0x7b
jne 0x18001cdf4
mov eax, 0xc3
nop dword [rax + rax]
cmp eax, 0xc3
je 0x18001c104
cmp eax, 0x13ce
jne 0x18001c109
mov qword [rsp + 0x70], r10
movzx eax, byte [r10]
cmp al, 0x3c
jne 0x18001c11a
mov dword [rbp + 0xc], 0x3e
jmp 0x18001c12c
xor ecx, ecx
mov dword [rbp + 0x6c], ecx
add eax, 0x130b
cmp eax, 0x2616
jbe 0x18001c0e0
jmp 0x18001cdf4
cmp al, 0x27
mov ecx, 0x7d
mov eax, 0x27
cmove ecx, eax
mov dword [rbp + 0xc], ecx
xor r11d, r11d
mov r14d, 0xde
add r14d, 0x5e
cmp r14d, 0x312
jae 0x18001c376
cmp r14d, 0x19a
ja 0x18001c1bc
je 0x18001c185
mov eax, r14d
sub eax, 0x80
je 0x18001c17c
sub eax, 0x5e
je 0x18001c36a
cmp eax, 0x5e
jne 0x18001c135
inc r10
mov qword [rsp + 0x78], r10
mov qword [rsp + 0x70], r10
mov qword [rbp + 0x60], r10
jmp 0x18001c135
mov dword [rbp + 0xc], PathMakeUniqueName
jmp 0x18001c135
mov rcx, qword [r15 + 0x18]
movzx eax, byte [r10]
test byte [rax + rcx], 0x10
je 0x18001c135
nop dword [rax]
nop word [rax + rax]
inc r10
mov qword [rsp + 0x70], r10
movzx eax, byte [r10]
test byte [rax + rcx], 0x10
jne 0x18001c1a0
mov qword [rsp + 0x78], r10
jmp 0x18001c135
mov eax, r14d
sub eax, 0x1f8
je 0x18001c35c
sub eax, 0x5e
je 0x18001c1ef
cmp eax, 0x5e
jne 0x18001c135
cmp dword [rbp + 0x6c], 0
jne 0x18001c577
mov r15, qword [rbp]
mov r8d, dword [rbp - 0x4c]
jmp 0x18001cdbf
mov r9, qword [rbp - 0x30]
test r9, r9
je 0x18001c24a
mov ecx, 0x11c
nop dword [rax]
cmp ecx, 0x11c
je 0x18001c216
cmp ecx, 0xdba8
jne 0x18001c237
mov dword [rbp - 0x50], r11d
jmp 0x18001c237
mov ebx, dword [rbp + 0x48]
test ebx, ebx
je 0x18001d308
movzx eax, byte [r10]
cmp eax, dword [rbp + 0xc]
jne 0x18001d2f8
cmp ebx, 0x20
jg 0x18001d2e8
add ecx, 0xda8c
cmp ecx, 0x1b518
jbe 0x18001c200
jmp 0x18001c135
movsxd rcx, dword [rbp + 0x48]
mov ebx, 0x35
mov rsi, rcx
mov eax, ebx
sub eax, 0x33
je 0x18001c2d0
sub eax, 1
je 0x18001c2c9
cmp eax, 1
jne 0x18001c33f
cmp dword [r15 + 0x50], 0
mov r13, qword [r15 + 0x48]
mov qword [rbp + 0x100], r13
mov dword [rbp + 0x30], r11d
jle 0x18001c33f
mov rcx, qword [rbp + 0x60]
lea rdx, [r13 + 2]
mov r8, rsi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
jne 0x18001c2a1
cmp byte [rsi + r13 + 2], al
je 0x18001c2bf
movsxd rax, dword [r15 + 0x54]
add r13, rax
mov eax, dword [rbp + 0x30]
inc eax
mov qword [rbp + 0x100], r13
mov dword [rbp + 0x30], eax
cmp eax, dword [r15 + 0x50]
jl 0x18001c285
jmp 0x18001c335
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
mov ebx, 0x34
jmp 0x18001c33f
mov eax, dword [rbp + 0x30]
cmp eax, dword [r15 + 0x50]
jge 0x18001c2f5
mov rax, qword [rbp + 0x100]
movzx r13d, byte [rax]
movzx eax, byte [rax + 1]
shl r13d, 8
or r13d, eax
mov dword [rbp - 0x50], r13d
jmp 0x18001c33f
mov r9, qword [rbp + 0x60]
lea rdx, [rbp - 0x10]
mov eax, r13d
mov dword [rsp + 0x78], ecx
shr eax, 3
mov r8, r10
and eax, 1
mov rcx, r15
mov dword [rbp - 0x10], eax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xd2
call fcn.180026f00
mov dword [rbp - 0x50], eax
test eax, eax
jle 0x18001b7bd
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
mov r13d, dword [rbp - 0x44]
dec ebx
mov ecx, dword [rbp + 0x48]
mov r11d, 0
cmp ebx, 0x32
ja 0x18001c256
jmp 0x18001c135
mov eax, r10d
sub eax, dword [rbp + 0x60]
mov dword [rbp + 0x48], eax
jmp 0x18001c135
mov dword [rbp + 0x6c], 1
jmp 0x18001c12f
lea rbx, [0x180000000]
inc r10
mov qword [rsp + 0x78], r10
mov qword [rsp + 0x70], r10
mov r14d, reloc.SHELL32.dll_ILRemoveLastID
cmp r14d, 0x6d2c
ja 0x18001ccce
cmp r14d, 0x36a7
ja 0x18001c722
je 0x18001c582
cmp r14d, 0x1b5c
ja 0x18001c4df
je 0x18001c47c
cmp r14d, 0x11
je 0x18001c45c
cmp r14d, 0x92a
je 0x18001c3ec
cmp r14d, 0x1243
jne 0x18001c7c6
mov dword [rbp - 0x50], r11d
jmp 0x18001c7c6
movzx r8d, byte [r10]
mov dword [rbp + 0x70], r8d
cmp r8d, 0x2b
jne 0x18001c429
inc r10
mov qword [rsp + 0x70], r10
mov qword [rsp + 0x78], r10
movzx eax, byte [r10]
test byte [rax + rbx + 0x8cf90], 4
jne 0x18001c7c6
mov r14, qword [rbp - 0x68]
mov dword [r14], 0x3f
jmp 0x18001b566
cmp r8d, 0x2d
jne 0x18001c7c6
movzx eax, byte [r10 + 1]
lea rcx, [r10 + 1]
test byte [rax + rbx + 0x8cf90], 4
je case.0x18001b3f5.46
mov r10, rcx
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x70], rcx
jmp 0x18001c7c6
mov rax, qword [rbp + 0xc8]
mov qword [rbp + 0x108], rax
mov dword [rbp + 0xc], PathMakeUniqueName
mov r14d, reloc.SHELL32.dll_ILRemoveLastID
jmp 0x18001c7c6
movzx edx, byte [r10]
test byte [rdx + rbx + 0x8cf90], 4
je 0x18001c4c2
mov r13d, dword [rbp - 0x50]
nop
movzx eax, dl
lea r13d, [r13 + r13*4]
inc r10
lea r13d, [r13 - 0x18]
mov qword [rsp + 0x70], r10
lea r13d, [rax + r13*2]
movzx eax, byte [r10]
movzx edx, al
test byte [rax + rbx + 0x8cf90], 4
jne 0x18001c490
mov dword [rbp - 0x50], r13d
mov qword [rsp + 0x78], r10
movzx eax, byte [r10]
cmp eax, dword [rbp + 0xc]
je 0x18001c7c6
mov r14, qword [rbp - 0x68]
mov dword [r14], 0x1d
jmp 0x18001b566
cmp r14d, 0x2475
je 0x18001c509
cmp r14d, 0x2d8e
jne 0x18001c7c6
mov rax, qword [r15 + 0x28]
mov qword [rbp + 0x108], rax
mov qword [rbp + 0x18], r12
jmp 0x18001c7c6
mov r8d, dword [rbp + 0x70]
cmp r8d, 0x2d
jne 0x18001c560
mov ecx, 0x79
mov eax, ecx
sub eax, 0x78
je 0x18001c53a
cmp eax, 1
jne 0x18001c54e
cmp dword [rbp - 0x50], 0
jne 0x18001c54e
mov r14, qword [rbp - 0x68]
mov dword [r14], 0x3a
jmp 0x18001b566
mov eax, dword [r15 + 0x58]
sub eax, dword [rbp - 0x50]
inc eax
mov dword [rbp - 0x50], eax
test eax, eax
jle 0x18001d395
dec ecx
cmp ecx, 0x77
ja 0x18001c518
mov r14d, 0x2475
jmp 0x18001c7c6
cmp r8d, 0x2b
jne 0x18001c577
mov r13d, dword [rbp - 0x50]
test r13d, r13d
je 0x18001c52a
add r13d, dword [r15 + 0x58]
mov dword [rbp - 0x50], r13d
mov r14d, 0x2475
jmp 0x18001c7c6
cmp qword [rbp - 0x30], 0
jne 0x18001c7c6
mov esi, 4
cmp esi, 4
je 0x18001c6c5
cmp esi, 0x2d0
jne 0x18001c707
mov rdx, qword [rbp + 0x108]
test rdx, rdx
jne 0x18001c66f
mov ebx, 0xb7
nop dword [rax]
mov eax, ebx
sub eax, 0xb7
je 0x18001c5fe
cmp eax, 0x29
jne 0x18001c65b
mov rax, qword [r15 + 0x40]
mov ecx, r12d
sub ecx, dword [r15 + 0x28]
add ecx, 4
sar ecx, 8
mov byte [rax], cl
movzx ecx, r12b
sub cl, byte [r15 + 0x28]
mov rax, qword [r15 + 0x40]
add cl, 4
mov byte [rax + 1], cl
add qword [r15 + 0x40], 2
jmp 0x18001c651
mov eax, r13d
lea rdx, [rbp - 0x10]
movsxd r13, dword [rbp - 0x50]
xor r9d, r9d
shr eax, 3
mov r8, r10
and eax, 1
mov dword [rsp + 0x78], r13d
mov dword [rbp - 0x10], eax
mov rcx, r15
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xd2
call fcn.180026f00
test eax, eax
js 0x18001b7bd
mov rdx, r13
mov r13d, dword [rbp - 0x44]
add rdx, qword [r15 + 0x28]
mov qword [rbp + 0x108], rdx
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
add ebx, 0x29
cmp ebx, 0x109
jb 0x18001c5c0
jmp 0x18001c707
movzx ecx, byte [rdx + 1]
movzx eax, byte [rdx + 2]
shl ecx, 8
or ecx, eax
jne 0x18001c707
mov eax, dword [rbp - 0x70]
mov r9, rdx
mov r8, qword [rbp + 0x260]
lea rdx, [rsp + 0x78]
mov ecx, 0xea
mov dword [rsp + 0x78], eax
mov qword [rsp + 0x20], r12
call fcn.180028630
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
test eax, eax
je 0x18001c707
mov r14, qword [rbp - 0x68]
mov dword [r14], 0x28
jmp 0x18001b566
mov r13d, dword [rbp - 0x50]
mov byte [r12], 0
test r13d, r13d
je 0x18001c6fd
mov eax, dword [rbp - 0x70]
lea rdx, [rsp + 0x78]
mov r9, qword [r15 + 0x28]
lea rcx, [rbp - 0x10]
mov r8d, 0x6b
mov dword [rsp + 0x78], eax
mov dword [rbp - 0x10], r13d
call fcn.18002bd70
mov qword [rbp + 0x108], rax
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
mov r13d, dword [rbp - 0x44]
add esi, 0x2cc
cmp esi, 0x598
jbe 0x18001c592
jmp 0x18001c7c6
cmp r14d, 0x3fc0
je 0x18001c7a7
cmp r14d, 0x48d9
je 0x18001c775
cmp r14d, 0x51f2
je 0x18001c758
cmp r14d, 0x5b0b
je 0x18001c7be
cmp r14d, 0x6424
jne 0x18001c7c6
mov dword [rbp + 0x44], 9
jmp 0x18001c7c6
add r12, 3
mov word [r12], 0x55
mov byte [r12 + 2], 6
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
jmp 0x18001c7c2
mov rcx, qword [rbp + 0x108]
mov byte [r12], 0x52
mov eax, ecx
sub eax, dword [r15 + 0x28]
sar eax, 8
mov byte [r12 + 1], al
movzx eax, cl
sub al, byte [r15 + 0x28]
mov byte [r12 + 2], al
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
jmp 0x18001c7c6
mov word [r12], 0x5d
mov byte [r12 + 2], 6
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
add r12, 3
mov qword [rbp - 0x80], r12
mov r13d, dword [rbp - 0x44]
lea rbx, [0x180000000]
add r14d, 0x919
xor r11d, r11d
jmp 0x18001c390
movzx eax, byte [r10]
lea rdx, [rbp - 0x28]
mov dword [rbp - 0x28], r11d
mov ecx, r11d
mov dword [rbp - 0x58], ecx
mov esi, r11d
cmp al, 0x29
je 0x18001c8c8
nop dword [rax]
cmp al, 0x3a
je 0x18001c8c2
inc r10
movzx eax, al
sub eax, 0x2d
mov qword [rsp + 0x70], r10
cmp eax, 0x4b
ja case.0x18001c82f.53
cdqe
movzx eax, byte [rbx + rax + 0x1da48]
mov ecx, dword [rbx + rax*4 + 0x1da24]
add rcx, rbx
jmp rcx
lea rdx, [rbp - 0x58]
jmp 0x18001c8b6
mov eax, 0xbe
nop dword [rax]
cmp eax, 0xbe
je 0x18001c850
cmp eax, 0x61f8
je 0x18001c8b6
jmp 0x18001c85b
or dword [rdx], 0x80000
or dword [r15 + 0x6c], 0x10
add eax, 0x613a
cmp eax, 0xc274
jbe 0x18001c840
or dword [rdx], 1
jmp 0x18001c8b6
or dword [rdx], 2
jmp 0x18001c8b6
or dword [rdx], 4
jmp 0x18001c8b6
or dword [rdx], 8
jmp 0x18001c8b6
or dword [rdx], 0x200
jmp 0x18001c8b6
or dword [rdx], 0x40
jmp 0x18001c8b6
mov ecx, reloc.SHELL32.dll_SHSetFolderPathA
nop dword [rax]
mov eax, ecx
sub eax, 0xe6
je 0x18001d319
cmp eax, 1
jne 0x18001c8ac
mov rax, qword [rbp - 0x68]
mov dword [rax], ILFindLastID
dec ecx
cmp ecx, 0xe5
ja 0x18001c890
movzx eax, byte [r10]
cmp al, 0x29
jne 0x18001c800
mov esi, dword [rbp - 0x28]
mov ecx, dword [rbp - 0x58]
or esi, r13d
not ecx
and esi, ecx
cmp byte [r10], 0x29
jne 0x18001c9ad
mov rax, qword [r15 + 0x28]
add rax, 3
cmp r12, rax
jne 0x18001c908
mov rax, qword [rbp - 0x30]
test rax, rax
je 0x18001c8f4
cmp dword [rax], 6
jne 0x18001c908
mov r12, qword [rbp - 0x80]
mov dword [r15 + 0x68], esi
mov dword [rbp - 0x44], esi
mov qword [rbp + 0x18], r11
jmp 0x18001d0f6
mov r15d, dword [rbp + 0x7c]
mov edx, 0x2a
cmp edx, 0x2a
je 0x18001c960
cmp edx, 0xbf
je 0x18001c955
cmp edx, 0x154
je 0x18001c948
cmp edx, 0x1e9
jne 0x18001c97d
mov eax, r15d
mov edi, r13d
xor eax, 1
and edi, 1
shl edi, 8
mov dword [rbp + 0x78], edi
mov dword [rbp + 0xe8], eax
jmp 0x18001c97d
mov r15d, esi
shr r15d, 9
and r15d, 1
jmp 0x18001c97d
mov rax, qword [rbp - 0x20]
mov r13d, esi
mov dword [rax], esi
jmp 0x18001c97d
mov eax, esi
xor eax, r13d
test al, 7
je 0x18001c97d
mov byte [r12], 0x19
movzx eax, sil
and al, 7
mov byte [r12 + 1], al
add r12, 2
add edx, 0x95
cmp edx, 0x27e
jb 0x18001c911
mov r10, qword [rsp + 0x70]
mov rdi, qword [rbp + 0x20]
mov dword [rbp + 0x7c], r15d
mov r15, qword [rbp - 0x18]
mov dword [rbp - 0x44], r13d
mov qword [rbp - 0x80], r12
mov qword [rbp + 0x18], r11
jmp 0x18001d0f6
mov r14d, 0x5e
inc r10
mov qword [rsp + 0x70], r10
mov r9, qword [rbp - 0x68]
lea r8, [rbp - 0x10]
xor eax, eax
mov byte [r12], r14b
mov ebx, dword [r15 + 0x70]
lea rdx, [rbp + 0x10]
mov r13d, eax
mov dword [rsp + 0x78], esi
mov rsi, qword [rbp - 0x30]
lea eax, [r14 - 0x5a]
cmp r14d, 0x5d
mov qword [rbp + 0x28], r12
cmovge r13, r12
mov qword [rbp + 0x18], r13
xor r13d, r13d
cmp eax, 1
mov dword [rbp + 0x44], r13d
mov eax, dword [rbp + 0x58]
mov ecx, r13d
mov dword [rbp - 0x28], eax
setbe cl
mov eax, dword [rbp + 0xa8]
mov dword [rbp + 0x10], eax
mov eax, dword [rbp - 0x44]
and eax, 7
mov dword [rbp - 0x10], ecx
mov dword [rbp + 0xc8], eax
lea rcx, [rbp + 0xc8]
mov qword [rsp + 0x68], rcx
lea rax, [rbp + 0x44]
lea rcx, [rbp + 0x28]
test rsi, rsi
mov qword [rsp + 0x60], rcx
lea rcx, [rbp - 0x28]
cmove rax, r13
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x50], rax
mov rax, qword [rbp + 0x260]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x74]
mov dword [rsp + 0x38], 0x3f
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x54]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
call fcn.18007a460
test eax, eax
je 0x18001d3b1
cmp r14d, 0x60
jne 0x18001cb69
test rsi, rsi
jne 0x18001cb69
mov r9d, dword [rbp + 0x54]
mov edx, 0x119
mov r8d, dword [rbp + 0x74]
mov eax, edx
sub eax, 0x119
je 0x18001cb51
sub eax, 0x2e
je 0x18001cb48
cmp eax, 0x2e
jne 0x18001cb58
mov r10, qword [rbp + 0x268]
mov r11d, dword [rbp + 0xe4]
movzx ecx, byte [r10 + 1]
inc r11d
movzx eax, byte [r10 + 2]
shl rcx, 8
or rcx, rax
add r10, rcx
cmp byte [r10], 0x55
jne 0x18001cae0
cmp byte [r12 + 3], 0x66
mov dword [rbp + 0xe4], r11d
mov qword [rbp + 0x268], r10
jne 0x18001cb25
cmp r11d, 1
jg 0x18001d32b
mov r14d, 0x66
jmp 0x18001cb58
cmp r11d, 2
jg 0x18001d348
cmp r11d, 1
jne 0x18001cb58
mov eax, 0xffffffff
mov r9d, eax
mov dword [rbp + 0x54], eax
mov r8d, eax
mov dword [rbp + 0x74], eax
jmp 0x18001cb58
mov dword [rbp + 0xe4], r13d
jmp 0x18001cb58
mov qword [rbp + 0x268], r12
add edx, 0x2e
cmp edx, 0x1a3
jb 0x18001cab3
jmp 0x18001cb71
mov r9d, dword [rbp + 0x54]
mov r8d, dword [rbp + 0x74]
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
cmp byte [r10], 0x29
jne 0x18001d382
test rsi, rsi
je 0x18001cc26
mov r9d, PathMakeUniqueName
cmp r9d, 0x2e
je 0x18001cbd8
cmp r9d, 0x1e30
je 0x18001cbc4
cmp r9d, 0x3c32
je 0x18001cbd1
cmp r9d, 0x5a34
je 0x18001cbc4
cmp r9d, 0x7836
je 0x1800184e6
jmp 0x18001cc05
mov word [r12], 0x300
add r12, 2
jmp 0x18001cc01
mov byte [r12], 0x55
jmp 0x18001cbfe
mov edx, dword [rbp + 0x44]
mov ecx, 0x7fffffeb
mov r8d, dword [rsi]
sub ecx, r8d
lea eax, [rdx - 6]
cmp ecx, eax
jl 0x18001d365
lea eax, [rdx - 6]
add eax, r8d
mov dword [rsi], eax
mov byte [r12], 0x5e
inc r12
mov qword [rbp - 0x80], r12
add r9d, 0x1e02
cmp r9d, 0x960a
jbe 0x18001cb94
mov r10, qword [rsp + 0x70]
mov r9d, dword [rbp + 0x54]
mov r8d, dword [rbp + 0x74]
mov rax, qword [rbp + 0x28]
xor esi, esi
mov qword [rbp - 0x80], rax
cmp r14d, 0x66
je 0x1800184ed
mov eax, dword [rbp + 8]
mov edx, dword [rbp - 0x4c]
mov dword [rbp + 0x3c], eax
mov dword [rbp + 0x34], edx
mov dword [rbp + 0x40], esi
cmp r14d, 0x5d
jl 0x18001cca6
cmp edx, 0xfffffffe
jne 0x18001cc74
lea eax, [rsi - 1]
test r8d, r8d
js 0x18001cc6c
mov dword [rbp - 0x4c], r8d
mov dword [rbp + 0x40], 1
mov dword [rbp + 0x34], eax
jmp 0x18001cc88
mov dword [rbp - 0x4c], eax
mov dword [rbp + 0x34], eax
jmp 0x18001cc88
test r8d, r8d
js 0x18001cc88
test r9d, r9d
jns 0x18001cc91
mov r9d, r8d
or r9d, ebx
mov dword [rbp + 0x54], r9d
test r9d, r9d
js 0x1800184ed
mov r14, qword [rbp - 0x68]
mov r12, qword [rbp - 0x80]
mov r15, qword [rbp - 0x18]
mov dword [rbp + 8], r9d
jmp 0x18001d0fc
cmp r14d, 0x58
jne 0x1800184ed
test r9d, r9d
js 0x1800184ed
mov r14, qword [rbp - 0x68]
mov r12, qword [rbp - 0x80]
mov r15, qword [rbp - 0x18]
mov dword [rbp + 8], r9d
jmp 0x18001d0fc
mov r12, qword [rbp - 0x80]
xor esi, esi
cmp dword [rbp - 0x4c], 0xfffffffe
mov r14, qword [rbp - 0x68]
jne 0x18001d0fc
mov dword [rbp - 0x4c], 0xffffffff
jmp 0x18001d0fc
cmp r11d, 0x1d
jl 0x18001cddd
mov r15, qword [rbp]
mov edx, 0x39
cmp edx, 0x43
jae 0x18001d0ee
cmp edx, 0x39
je 0x18001cdb4
cmp edx, 0x3b
je 0x18001cda8
cmp edx, 0x3d
je 0x18001cd8f
cmp edx, 0x3f
je 0x18001cd46
cmp edx, 0x41
jne 0x18001cd41
mov rcx, qword [rbp - 0x18]
mov r8d, dword [rbp - 0x50]
cmp r8d, dword [rcx + 0x60]
jle 0x18001cd3d
mov dword [rcx + 0x60], r8d
mov r8d, dword [rbp - 0x4c]
add edx, 2
jmp 0x18001cd01
mov r8d, dword [rbp - 0x50]
mov r9d, 1
mov byte [r12 + 1], r8b
mov ecx, r8d
mov eax, r8d
sar eax, 8
mov byte [r12], al
add r12, 2
mov r10, qword [rsp + 0x70]
mov eax, r9d
shl eax, cl
mov rcx, qword [rbp - 0x18]
cmp r8d, 0x20
mov r8d, dword [rbp - 0x4c]
cmovge eax, r9d
mov qword [rbp - 0x80], r12
or dword [rcx + 0x64], eax
add edx, 2
jmp 0x18001cd01
mov byte [r12], 0x51
inc r12
mov r10, qword [rsp + 0x70]
add edx, 2
mov qword [rbp - 0x80], r12
jmp 0x18001cd01
mov qword [rbp + 0x18], r12
add edx, 2
jmp 0x18001cd01
mov eax, 0xffffffe3
sub eax, r15d
mov dword [rbp - 0x50], eax
cmp r8d, 0xfffffffe
mov eax, 0xffffffff
mov edx, 0x39
cmove r8d, eax
add edx, 2
mov dword [rbp - 0x4c], r8d
jmp 0x18001cd01
cmp r11d, 0x16
je 0x18001d3a5
lea eax, [r11 - 0xf]
cmp eax, 1
jbe 0x18001d3a5
mov r15, qword [rbp]
lea eax, [r11 - 6]
xor esi, esi
cmp eax, 0x10
mov r13d, esi
cmovbe r13, r12
neg r15b
mov byte [r12], r15b
inc r12
mov r10, qword [rsp + 0x70]
mov r15, qword [rbp - 0x18]
mov qword [rbp - 0x80], r12
mov qword [rbp + 0x18], r13
jmp 0x18001d0fc
mov r10, qword [rsp + 0x70]
mov r12, qword [rbp - 0x80]
jmp 0x18001d0fc
cmp dword [rbp - 0x70], esi
je 0x18001ce8b
cmp eax, 0x7f
jle 0x18001ce8b
lea r9, [rbp + 0x2a8]
mov dword [rsp + 0x78], r11d
lea r8, [rsp + 0x78]
mov dword [rsp + 0x20], 0x104
xor edx, edx
xor ecx, ecx
call fcn.18001ffb0
mov edi, eax
mov qword [rbp + 0x20], rdi
mov r10, qword [rsp + 0x70]
mov r15, qword [rbp - 0x18]
lea rbx, [0x180000000]
mov r11, qword [rbp]
mov r9d, 0x68
inc r9d
mov qword [rbp + 0x18], r12
jmp 0x18001ce9f
mov byte [rbp + 0x2a8], r11b
mov edi, 1
jmp 0x18001ce64
mov r9d, 0x65
mov dword [rbp - 0x28], r9d
cmp r9d, 0x6c
jae case.0x18001cec7.107
lea eax, [r9 - 0x65]
cmp eax, 6
ja case.default.0x18001cec7
mov ecx, dword [rbx + rax*4 + 0x1da94]
add rcx, rbx
movsxd rdx, edi
jmp rcx
mov edi, 1
mov byte [rbp + 0x2a8], r11b
mov r11, qword [rbp]
lea rbx, [0x180000000]
mov qword [rbp + 0x20], rdi
inc r9d
jmp 0x18001ce9f
cmp dword [rbp - 0x70], 0
je case.default.0x18001cec7
cmp r11d, 0xc0
jl case.default.0x18001cec7
movzx eax, byte [r10 + 1]
lea r8, [r10 + 1]
and al, 0xc0
cmp al, 0x80
jne case.default.0x18001cec7
lea rdx, [rbp + rdx + 0x2a8]
nop dword [rax + rax]
mov qword [rsp + 0x70], r8
lea rdx, [rdx + 1]
movzx eax, byte [r8]
inc edi
mov byte [rdx - 1], al
mov r10, r8
movzx ecx, byte [r8 + 1]
lea rax, [r8 + 1]
and cl, 0xc0
mov r8, rax
cmp cl, 0x80
je 0x18001cf20
mov r11, qword [rbp]
lea rbx, [0x180000000]
mov qword [rbp + 0x20], rdi
inc r9d
jmp 0x18001ce9f
movzx eax, r13b
and al, 1
or al, 0x1c
mov byte [r12], al
xor eax, eax
inc r12
mov r15d, eax
mov qword [rbp], r15
mov qword [rbp - 0x80], r12
test edi, edi
jle 0x18001cfa8
mov r15d, edi
mov edx, edi
mov qword [rbp], r15
lea rcx, [rbp + 0x2a8]
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
mov byte [r12], al
inc r12
sub rdx, 1
jne 0x18001cf90
mov qword [rbp - 0x80], r12
movzx eax, byte [rbp + 0x2a8]
cmp al, 0xd
je 0x18001cfd3
cmp al, 0xa
je 0x18001cfd3
mov r10, qword [rsp + 0x70]
lea rbx, [0x180000000]
mov r15, qword [rbp - 0x18]
inc r9d
mov r11, qword [rbp]
jmp 0x18001ce9f
mov r15, qword [rbp - 0x18]
lea rbx, [0x180000000]
mov r10, qword [rsp + 0x70]
mov r11, qword [rbp]
or dword [r15 + 0x6c], 0x20
inc r9d
jmp 0x18001ce9f
mov r8d, dword [rbp - 0x4c]
cmp r8d, 0xfffffffe
jne 0x18001d084
mov r13d, dword [rbp + 8]
lea r9d, [r8 + 1]
mov edi, dword [rbp + 0x78]
mov ecx, 0x6a
mov eax, ecx
sub eax, 0x6a
je 0x18001d052
cmp eax, 1
jne 0x18001d05a
cmp rdx, 1
je 0x18001d031
test edi, edi
je 0x18001d031
mov r13d, r9d
mov dword [rbp - 0x4c], r9d
jmp 0x18001d05a
movzx r8d, byte [rbp + 0x2a8]
or r8d, edi
mov dword [rbp - 0x4c], r8d
cmp rdx, 1
je 0x18001d05a
movzx r13d, byte [r12 - 1]
or r13d, dword [r15 + 0x70]
jmp 0x18001d05a
mov dword [rbp + 0x34], r9d
mov dword [rbp + 0x3c], r13d
inc ecx
cmp ecx, 0x6c
jb 0x18001d012
mov r9d, dword [rbp - 0x28]
lea rbx, [0x180000000]
mov rdi, qword [rbp + 0x20]
inc r9d
mov r11, qword [rbp]
mov dword [rbp + 8], r13d
mov r13d, dword [rbp - 0x44]
jmp 0x18001ce9f
mov edi, dword [rbp + 8]
mov ecx, 0x94
mov r13d, dword [rbp + 0x78]
mov eax, ecx
sub eax, 0x94
je 0x18001d0c2
sub eax, 1
je 0x18001d0bd
cmp eax, 1
jne 0x18001d0c6
cmp rdx, 1
je 0x18001d0ae
test r13d, r13d
jne 0x18001d0c6
movzx edi, byte [r12 - 1]
or edi, dword [r15 + 0x70]
or edi, r13d
jmp 0x18001d0c6
mov dword [rbp + 0x3c], edi
jmp 0x18001d0c6
mov dword [rbp + 0x34], r8d
inc ecx
cmp ecx, 0x97
jb 0x18001d090
mov r13d, dword [rbp - 0x44]
lea rbx, [0x180000000]
mov r11, qword [rbp]
inc r9d
mov dword [rbp + 8], edi
mov rdi, qword [rbp + 0x20]
jmp 0x18001ce9f
mov r12, qword [rbp - 0x80]
mov r15, qword [rbp - 0x18]
mov r14, qword [rbp - 0x68]
xor esi, esi
mov r9, qword [rbp - 0x30]
inc r10
mov r13d, dword [rbp - 0x44]
mov qword [rsp + 0x78], r10
mov qword [rsp + 0x70], r10
jmp 0x180017f90
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
mov dword [r14], 0x14
jmp 0x18001b56a
mov r14, qword [rbp - 0x68]
mov dword [r14], 0x14
jmp 0x18001b56a
cmp byte [r10 + 1], 0x3a
mov eax, 0x1f
mov r14, qword [rbp - 0x68]
mov ecx, ILFindLastID
cmove eax, ecx
mov qword [rsp + 0x78], r10
mov dword [r14], eax
jmp 0x18001b566
mov r14, qword [rbp - 0x68]
mov r10, qword [rsp + 0x70]
mov r15, qword [rbp - 0x18]
mov qword [rsp + 0x78], r10
mov dword [r14], 0x1e
jmp 0x18001b566
mov r14, qword [rbp - 0x68]
mov r15, rax
mov dword [r14], 0x1f
jmp 0x18001b566
mov r14, qword [rbp - 0x68]
mov r15, rbx
mov qword [rsp + 0x78], r10
mov dword [r14], 7
jmp 0x18001b56a
mov r10, qword [rsp + 0x70]
mov r15, qword [rbp - 0x18]
mov qword [rsp + 0x78], r10
jmp 0x18001b562
mov r14, qword [rbp - 0x68]
mov r15, qword [rbp - 0x18]
mov dword [r14], 8
jmp 0x18001b566
xor esi, esi
mov r14, qword [rbp - 0x68]
mov r12, qword [rbp - 0x80]
mov r15, qword [rbp - 0x18]
mov r9, qword [rbp - 0x30]
mov dword [r14], 6
jmp 0x18001b570
mov r14, qword [rbp - 0x68]
mov r10, qword [rsp + 0x70]
mov r15, qword [rbp - 0x18]
mov qword [rsp + 0x78], r10
mov dword [r14], 0x14
jmp 0x18001b56a
mov r14, qword [rbp - 0x68]
mov dword [r14], 9
jmp 0x18001b566
mov r14, qword [rbp - 0x68]
mov r15, qword [rbp - 0x18]
mov dword [r14], 0x3c
jmp 0x18001b566
mov r14, qword [rbp - 0x68]
mov r15, qword [rbp - 0x18]
mov dword [r14], 0x3b
jmp 0x18001b566
mov r14, qword [rbp - 0x68]
mov dword [r14], reloc.SHELL32.dll_ILClone
jmp 0x18001b566
mov r14, qword [rbp - 0x68]
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
mov dword [r14], 0x3a
jmp 0x18001b566
mov r10, qword [rsp + 0x70]
xor esi, esi
mov r14, qword [rbp - 0x68]
mov edx, 0xe9
mov rax, qword [rbp + 0x240]
inc edx
mov r12, qword [rbp - 0x80]
mov r9, qword [rbp - 0x30]
lea r13d, [rsi + 0x7a]
mov r11, qword [rbp - 0x38]
mov r8, qword [rbp - 0x20]
mov ebx, dword [rbp - 0x78]
mov dword [r14], ILClone
mov qword [rax], r10
mov qword [rsp + 0x78], r10
jmp 0x180017ee5
mov r14, qword [rbp - 0x68]
test r13d, r13d
mov r10, qword [rsp + 0x70]
mov eax, ILClone
mov ecx, 0x23
mov qword [rsp + 0x78], r10
cmove eax, ecx
mov dword [r14], eax
jmp 0x18001b566
mov r14, qword [rbp - 0x68]
mov eax, 0x27
mov dword [r14], eax
jmp 0x18001b566
mov r14, qword [rbp - 0x68]
mov dword [r14], 0x30
jmp 0x18001b56a
mov r14, qword [rbp - 0x68]
mov dword [r14], PathMakeUniqueName
jmp 0x18001b56a
mov r14, qword [rbp - 0x68]
mov eax, 0x3e
mov dword [r14], eax
jmp 0x18001b56a
dec r10
mov qword [rsp + 0x78], r10
mov qword [rsp + 0x70], r10
jmp 0x18001b562
mov r14, qword [rbp - 0x68]
mov r9, rsi
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
mov dword [r14], 0x36
jmp 0x18001b56a
mov r14, qword [rbp - 0x68]
mov r9, rsi
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
mov dword [r14], 0x1b
jmp 0x18001b56a
mov r14, qword [rbp - 0x68]
mov r9, rsi
mov r10, qword [rsp + 0x70]
mov qword [rsp + 0x78], r10
mov dword [r14], 0x14
jmp 0x18001b56a
mov r14, qword [rbp - 0x68]
mov r9, rsi
mov dword [r14], ILClone
jmp 0x18001b56a
mov r14, qword [rbp - 0x68]
mov dword [r14], ILClone
jmp 0x18001b566
mov dword [r14], PathMakeUniqueName
jmp 0x18001b566
mov r14, qword [rbp - 0x68]
xor esi, esi
mov r10, qword [rsp + 0x70]
mov r12, qword [rbp - 0x80]
mov r9, qword [rbp - 0x30]
mov qword [rsp + 0x78], r10
jmp 0x18001b570
mov dword [r14], 0x34
jmp 0x18001b570
mov qword [rbp + 0x18], rsi
lea rcx, [0x180000000]
mov qword [rbp + 0xc0], rsi
inc edx
jmp 0x180017ee5
mov eax, 0x5f
mov word [rbp + 0x2d0], r13w
mov word [rbp + 0x2d6], ax
lea rcx, [0x180000000]
mov dword [rbp + 0x2d2], 0x7a007a
inc edx
jmp 0x180017ee5
mov dword [rbp - 4], esi
lea rcx, [0x180000000]
mov dword [rbp - 0x74], esi
inc edx
jmp 0x180017ee5
mov eax, dword [rbp - 0x44]
lea rcx, [0x180000000]
shr eax, 0xb
and eax, 1
mov qword [rbp + 0x98], rsi
mov dword [rbp - 0x70], eax
mov eax, dword [rbp - 0x44]
shr eax, 9
and eax, 1
mov dword [rbp + 0x7c], eax
inc edx
jmp 0x180017ee5
mov eax, dword [rbp + 0x7c]
lea rcx, [0x180000000]
xor eax, 1
mov dword [rbp + 0xe8], eax
inc edx
jmp 0x180017ee5
mov rax, qword [rbp - 0x80]
lea rcx, [0x180000000]
mov qword [rbp + 0x238], rax
mov r12, rax
mov dword [rbp - 0x60], esi
inc edx
jmp 0x180017ee5
mov dword [rbp + 0x2b8], 0x730077
lea rcx, [0x180000000]
inc edx
jmp 0x180017ee5
mov rax, qword [r11]
lea rcx, [0x180000000]
mov qword [rbp - 0x80], rax
mov r12, rax
mov qword [rbp + 0x118], rax
inc edx
jmp 0x180017ee5
mov dword [rbp + 0x2be], 0x33005f
lea rcx, [0x180000000]
inc edx
jmp 0x180017ee5
mov eax, 0x32
lea rcx, [0x180000000]
mov word [rbp + 0x2bc], ax
inc edx
jmp 0x180017ee5
mov rax, qword [rbp + 0x240]
mov dword [rbp + 0x40], esi
mov r10, qword [rax]
mov rax, qword [rbp + 0xc8]
mov qword [rbp + 0x110], rax
mov qword [rsp + 0x78], r10
mov qword [rsp + 0x70], r10
lea rcx, [0x180000000]
inc edx
jmp 0x180017ee5
lea esi, [rbx + 0xf]
cmp ebx, esi
jae case.0x18001d57f.13
mov r15d, dword [rbp + 0x80]
mov edx, 0x6e
mov r13, qword [rbp + 0xc8]
add ebx, 0xffffff30
lea r8d, [rdx - 0x2d]
lea r9d, [rdx - 5]
lea r10d, [rdx - 0xd]
cmp ebx, 0x10
ja case.default.0x18001d57f
mov ecx, dword [rcx + rbx*4 + 0x1dab0]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov eax, 0x73
mov word [rbp + 0x2da], ax
jmp case.0x18001d57f.14
test r15d, r15d
js 0x18001d6e9
mov rcx, qword [r11 + 0x18]
mov r14, qword [r11 + 0x10]
mov rax, rcx
sub rax, r14
movsxd rdi, r15d
cmp rdi, rax
ja 0x18001d5e6
lea rax, [rdi + r14]
mov r12, r11
mov qword [r11 + 0x10], rax
cmp rcx, 0x10
jb 0x18001d5c5
mov r12, qword [r11]
lea rcx, [r14 + r12]
mov r8, rdi
lea rdx, [rbp + 0x320]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + r14]
mov byte [rax + r12], 0
jmp 0x18001d763
lea r9, [rbp + 0x320]
mov qword [rsp + 0x20], rdi
xor r8d, r8d
mov rdx, rdi
mov rcx, r11
call fcn.180002ac0
jmp 0x18001d763
mov word [rbp + 0x2d8], r8w
jmp case.0x18001d57f.14
mov rdi, qword [rbp - 0x20]
xor eax, eax
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, rdi
lea ecx, [rax + 0x3f]
call fcn.180051ac0
test al, al
je 0x18001d6e9
mov rcx, qword [rdi]
lea rdx, [rbp + 0x320]
xor r9d, r9d
mov r8d, 0x2000
call qword [rbp + 0xc8]
mov r15d, eax
jmp 0x18001d763
xor r9d, r9d
mov qword [rsp + 0x20], reloc.SHELL32.dll_ILFindLastID
lea r8, [rbp + 0x2b8]
xor edx, edx
mov ecx, SHSetFolderPathA
call fcn.180043060
lea r8, [rbp + 0x2d0]
mov qword [rbp + 0xc8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov r13, rax
jmp 0x18001d763
mov dword [rbp + 0x2dc], 0x43006d
mov dword [rbp + 0x2e0], 0x64006f
mov dword [rbp + 0x2e4], 0x520065
jmp case.0x18001d57f.14
xor eax, eax
mov word [rbp + 0x2fc], ax
jmp case.0x18001d57f.14
mov dword [rbp + 0x2f0], 0x42005f
mov dword [rbp + 0x2f4], 0x670065
jmp case.0x18001d57f.14
test r15d, r15d
jne case.0x18001d57f.14
mov byte [rbp + 0x40], 0
mov eax, dword [rbp + 0x40]
mov rcx, qword [rbp + 0x2320]
xor rcx, rsp
call fcn.180083f10
lea r11, [rsp + 0x2460]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov dword [rbp + 0x2f8], 0x6e0069
jmp case.0x18001d57f.14
mov dword [rbp + 0x2e8], 0x6e0061
mov dword [rbp + 0x2ec], 0x650067
jmp case.0x18001d57f.14
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [rbp + 0x40], 1
jmp 0x18001d763
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov r11, qword [rbp - 0x38]
mov r10d, 0x61
lea r9d, [r10 + 8]
lea r8d, [r10 - 0x20]
lea edx, [r10 + 0xd]
lea rcx, [0x180000000]
inc ebx
lea eax, [rbx + 0xd0]
cmp eax, esi
jb 0x18001d565
jmp case.0x18001d57f.13
xor eax, eax
jmp 0x18001d6f0