Function at 0x1800e14b0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x5e0]
sub rsp, 0x6e0
mov rax, qword [0x18017d2b8]
xor rax, rsp
mov qword [rbp + 0x5d0], rax
mov r12, r9
mov qword [rbp - 0x18], r9
mov r13d, r8d
mov dword [rsp + 0x64], r8d
mov r15, rdx
mov qword [rbp - 8], rdx
mov rsi, rcx
movdqa xmm0, xmmword [0x1801600c0]
movdqa xmmword [rbp + 0x250], xmm0
mov byte [rbp + 0x240], 0
movdqa xmm1, xmm0
movdqa xmmword [rbp + 0x270], xmm0
mov byte [rbp + 0x260], 0
movdqa xmmword [rbp + 0x290], xmm0
mov byte [rbp + 0x280], 0
movdqa xmmword [rbp + 0x2c0], xmm0
mov byte [rbp + 0x2b0], 0
movdqa xmmword [rbp + 0x2e0], xmm0
mov byte [rbp + 0x2d0], 0
xor ecx, ecx
mov qword [rbp + 0xe0], rcx
mov word [rbp + 0xe8], cx
movdqu xmmword [rbp + 0xfa], xmm0
mov byte [rbp + 0xea], cl
mov qword [rbp + 0xb0], rcx
mov word [rbp + 0xb8], cx
movdqu xmmword [rbp + 0xca], xmm0
mov byte [rbp + 0xba], cl
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rcx
mov qword [rbp - 0x58], rcx
movdqa xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rcx
mov qword [rbp - 0x38], rcx
mov qword [rbp - 0x30], rcx
mov qword [rbp + 0x110], rcx
mov qword [rbp + reloc.SHLWAPI.dll_SHRegGetIntW], rcx
mov qword [rbp + 0x120], rcx
mov ecx, 0x30
call fcn.18010ff14
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + reloc.SHLWAPI.dll_SHRegGetIntW], rax
xor r8d, r8d
mov qword [rbp + 0x128], r8
xorps xmm2, xmm2
movsd qword [rbp + 0x130], xmm2
mov qword [rbp + 0x138], r8
mov dword [rbp + 0x140], 1
mov qword [rbp + 0x148], r8
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x150], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x160], xmm1
movdqa xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], r8
mov qword [rbp + 0x188], 0xffffffffffffffff
mov dword [rbp + 0x190], r8d
xor eax, eax
movups xmmword [rbp + 0x198], xmm0
movups xmmword [rbp + 0x1a8], xmm0
movups xmmword [rbp + 0x1b8], xmm0
movups xmmword [rbp + 0x1c8], xmm0
mov qword [rbp + 0x1d8], rax
movdqa xmm0, xmmword [0x1801600c0]
movdqa xmmword [rbp + 0x1f0], xmm0
mov byte [rbp + 0x1e0], al
mov word [rbp + 0x200], r8w
mov dword [rbp + 0x204], r8d
mov qword [rbp + 0x208], r8
xorps xmm0, xmm0
movaps xmmword [rbp + 0x210], xmm0
movsd qword [rbp + 0x220], xmm2
mov byte [rbp + 0x228], al
mov qword [rbp + 0x22c], r8
mov ebx, r13d
lea r14d, [r13 + 0x1012]
lea r10d, [r8 + 0x2f]
lea r11d, [r8 + 0x25]
mov edi, dword [rsp + 0x64]
cmp r13d, r14d
jae 0x1800e1f66
movabs rdx, 0x740072003d
movabs rcx, 0x25002f0073
lea r9d, [r8 + 0x63]
mov eax, dword [rsp + 0x64]
mov dword [rsp + 0x60], eax
nop word [rax + rax]
cmp ebx, 0x326
ja 0x1800e1b15
je 0x1800e1ad4
cmp ebx, 0x1b0
ja 0x1800e1927
je 0x1800e18e6
mov eax, ebx
sub eax, 0x3a
je 0x1800e18c6
sub eax, 0xa7
je 0x1800e1859
sub eax, 0x14
je 0x1800e1816
sub eax, 0x18
je 0x1800e1804
cmp eax, 0x8f
jne 0x1800e1ed3
lea r8, str.dists.dss
lea rdx, str.DSS_DIST
lea ecx, [rax - 0x30]
call fcn.18010d280
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xa5
lea r9, [0x18017d4d0]
xor r8d, r8d
mov rdx, rax
lea rcx, str.p_types
call fcn.18007d670
lea r8, str.dists.dss
lea rdx, str.DSS_DIST
mov ecx, 0x5f
call fcn.18010d280
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xa5
lea r9, [0x18017d3e0]
xor r8d, r8d
mov rdx, rax
lea rcx, str.nations
call fcn.18007d670
lea r8, str.dists.dss
lea rdx, str.DSS_DIST
mov ecx, 0x5f
call fcn.18010d280
lea r9, [0x18017d410]
lea rcx, str.regions
jmp 0x1800e1e8a
test r15, r15
jne 0x1800e1ed3
lea edi, [r15 - 0xa]
jmp 0x1800e27a2
mov r8d, 2
lea rdx, [0x180152764]
lea rcx, [rbp + 0x2f2]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov dword [rbp + 0x2f3], 0x766461
mov eax, dword [str.isori]
mov dword [rbp + 0x2f6], eax
movzx eax, word [0x180154520]
mov word [rbp + 0x2fa], ax
jmp 0x1800e1ea6
lea r8, str.dists.dss
lea rdx, str.DSS_DIST
mov ecx, 0x5f
call fcn.18010d280
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xa5
lea r9, [0x18017d4e8]
xor r8d, r8d
mov rdx, rax
lea rcx, str.p_cntr
call fcn.18007d670
lea r8, str.dists.dss
lea rdx, str.DSS_DIST
mov ecx, 0x5f
call fcn.18010d280
lea r9, [0x18017d4b8]
lea rcx, str.colors
jmp 0x1800e1e8a
movzx eax, word [0x1801545ec]
mov word [rbp + 0x2f0], ax
movzx eax, byte [0x1801545ee]
mov byte [rbp + 0x2f2], al
jmp 0x1800e1ed3
mov eax, dword [str.ndia.]
mov dword [rbp + 0x2fb], eax
movzx eax, word [0x1801545c8]
mov word [rbp + 0x2ff], ax
mov word [rbp + 0x300], r9w
mov r8d, 1
lea rdx, [0x18014dfd8]
lea rcx, [rbp + 0x2f0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x1800e1ea6
mov eax, ebx
sub eax, 0x1c8
je 0x1800e1ab2
sub eax, 0x8f
je 0x1800e1a03
sub eax, 0x14
je 0x1800e19d7
sub eax, 0x18
je 0x1800e19c3
cmp eax, 0x8f
jne 0x1800e1ed3
lea r8, str.dists.dss
lea rdx, str.DSS_DIST
lea ecx, [rax - 0x30]
call fcn.18010d280
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xa5
lea r9, [0x18017d470]
xor r8d, r8d
mov rdx, rax
lea rcx, str.category
call fcn.18007d670
lea r8, str.dists.dss
lea rdx, str.DSS_DIST
mov ecx, 0x5f
call fcn.18010d280
lea r9, [0x18017d488]
lea rcx, str.rflag
jmp 0x1800e1e8a
mov rdx, r15
mov ecx, 0xc0
call fcn.1800efac0
mov edi, eax
jmp 0x1800e1ea6
lea rcx, [rbp + 0x2f0]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x1800e19e1
movzx eax, word [0x18014fb80]
mov word [rcx], ax
movabs rcx, 0x25002f0073
jmp 0x1800e1ed3
lea r8, str.dists.dss
lea rdx, str.DSS_DIST
mov ecx, 0x5f
call fcn.18010d280
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xa5
lea r9, [0x18017d428]
xor r8d, r8d
mov rdx, rax
lea rcx, str.o_oprio
call fcn.18007d670
lea r8, str.dists.dss
lea rdx, str.DSS_DIST
mov ecx, 0x5f
call fcn.18010d280
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xa5
lea r9, [0x18017d440]
xor r8d, r8d
mov rdx, rax
lea rcx, str.instruct
call fcn.18007d670
lea r8, str.dists.dss
lea rdx, str.DSS_DIST
mov ecx, 0x5f
call fcn.18010d280
lea r9, [0x18017d458]
lea rcx, str.smode
jmp 0x1800e1e8a
test rsi, rsi
je 0x1800e1f5c
mov eax, dword [r12]
dec eax
cmp eax, 1
ja 0x1800e1f52
mov dword [rsp + 0x60], r8d
jmp 0x1800e1ed3
mov dword [rbp + 0x380], 0x61
mov qword [rbp + 0x382], rdx
mov r8d, 5
lea rdx, str.pmap
lea rcx, [rbp + 0x388]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
movabs rax, 0x640025003a
mov qword [rbp + 0x390], rax
jmp 0x1800e1ea6
cmp ebx, 0x543
ja 0x1800e1da3
je 0x1800e1d78
mov eax, ebx
sub eax, 0x33e
je 0x1800e1d51
sub eax, 0x8f
je 0x1800e1c60
sub eax, 0x14
je 0x1800e1c30
sub eax, 0xa7
je 0x1800e1b81
cmp eax, 0x14
jne 0x1800e1ed3
mov eax, dword [0x18015460c]
mov dword [rbp + 0x39e], eax
mov qword [rbp + 0x3a2], rcx
mov dword [rbp + 0x3a8], 0x64
mov dword [rbp + 0x3aa], r10d
jmp 0x1800e1ed3
lea r8, str.dists.dss
lea rdx, str.DSS_DIST
mov ecx, 0x5f
call fcn.18010d280
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xa5
lea r9, [0x18017d548]
xor r8d, r8d
mov rdx, rax
lea rcx, str.adverbs
call fcn.18007d670
lea r8, str.dists.dss
lea rdx, str.DSS_DIST
mov ecx, 0x5f
call fcn.18010d280
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xa5
lea r9, [0x18017d5a8]
xor r8d, r8d
mov rdx, rax
lea rcx, str.buttonRight
call fcn.18007d670
lea r8, str.dists.dss
lea rdx, str.DSS_DIST
mov ecx, 0x5f
call fcn.18010d280
lea r9, [0x18017d590]
lea rcx, str.isi_Myanmar
jmp 0x1800e1e8a
mov r8d, 1
lea rdx, [0x180150d4c]
lea rcx, [rbp + 0x380]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
movabs rax, 0x72006f0076
mov qword [rbp + 0x398], rax
jmp 0x1800e1ea6
lea r8, str.dists.dss
lea rdx, str.DSS_DIST
mov ecx, 0x5f
call fcn.18010d280
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xa5
lea r9, [0x18017d4a0]
xor r8d, r8d
mov rdx, rax
lea rcx, str.msegmnt
call fcn.18007d670
lea r8, str.dists.dss
lea rdx, str.DSS_DIST
mov ecx, 0x5f
call fcn.18010d280
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xa5
lea r9, [0x18017d518]
xor r8d, r8d
mov rdx, rax
lea rcx, str.nouns
call fcn.18007d670
lea r8, str.dists.dss
lea rdx, str.DSS_DIST
mov ecx, 0x5f
call fcn.18010d280
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xa5
lea r9, [0x18017d578]
xor r8d, r8d
mov rdx, rax
lea rcx, str.verbs
call fcn.18007d670
lea r8, str.dists.dss
lea rdx, str.DSS_DIST
mov ecx, 0x5f
call fcn.18010d280
lea r9, [0x18017d530]
lea rcx, str.WsCopyNode
jmp 0x1800e1e8a
test edi, edi
js 0x1800e27a2
mov dword [rsp + 0x60], edi
mov r9d, 0xdd
xor r8d, r8d
mov rdx, rsi
mov rcx, r15
call fcn.1800ef060
mov edi, eax
jmp 0x1800e1ea6
lea r8, str.dists.dss
lea rdx, str.DSS_DIST
mov ecx, 0x5f
call fcn.18010d280
lea r9, [0x18017d500]
lea rcx, str.articles
jmp 0x1800e1e8a
cmp ebx, 0x557
je 0x1800e1ecb
cmp ebx, 0x5fe
je 0x1800e1e64
cmp ebx, 0x6b9
je 0x1800e1dfa
cmp ebx, 0x774
jne 0x1800e1ed3
lea r8, str.dists.dss
lea rdx, str.DSS_DIST
mov ecx, 0x5f
call fcn.18010d280
lea r9, [0x18017d5d8]
lea rcx, [0x180154534]
jmp 0x1800e1e8a
lea r8, str.dists.dss
lea rdx, str.DSS_DIST
mov ecx, 0x5f
call fcn.18010d280
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xa5
lea r9, [0x18017d5f0]
xor r8d, r8d
mov rdx, rax
lea rcx, str.grammar
call fcn.18007d670
lea r8, str.dists.dss
lea rdx, str.DSS_DIST
mov ecx, 0x5f
call fcn.18010d280
lea r9, [0x18017d5c0]
lea rcx, [0x180154530]
jmp 0x1800e1e8a
lea r8, str.dists.dss
lea rdx, str.DSS_DIST
mov ecx, 0x5f
call fcn.18010d280
lea r9, [0x18017d560]
lea rcx, str.extensionApp
mov qword [rsp + 0x28], 0
mov rdx, rax
xor r8d, r8d
mov dword [rsp + 0x20], 0xa5
call fcn.18007d670
xor r8d, r8d
movabs rcx, 0x25002f0073
movabs rdx, 0x740072003d
lea r9d, [r8 + 0x63]
lea r10d, [r8 + 0x2f]
lea r11d, [r8 + 0x25]
jmp 0x1800e1ed3
mov word [rbp + 0x3ac], r11w
add ebx, 0xbb
cmp ebx, r14d
jb 0x1800e1700
mov edx, dword [rsp + 0x60]
lea ebx, [r13 - 0x15]
mov dword [rsp + 0x50], ebx
cmp r13d, ebx
mov ebx, dword [rsp + 0x68]
jbe case.0x1800e1f50.0
lea esi, [r13 - 0x28]
mov dword [rsp + 0x58], esi
lea r9, [0x180000000]
mov r10d, 0x73
lea r11d, [r10 - 0xe]
mov r12d, dword [rsp + 0x68]
mov r13d, dword [rsp + 0x68]
mov r15, qword [rbp - 8]
movzx r14d, byte [rsp + 0x58]
mov eax, dword [rsp + 0x50]
nop dword [rax]
cmp esi, 0xe5
ja case.default.0x1800e1f50
movzx eax, byte [r9 + rsi + 0xe2a78]
mov ecx, dword [r9 + rax*4 + 0xe2a20]
add rcx, r9
jmp rcx
mov edi, 0xffffffe8
jmp 0x1800e27a2
mov edi, 0xfffffffe
jmp 0x1800e27a2
mov edx, dword [rsp + 0x64]
mov dword [rsp + 0x60], edx
jmp 0x1800e1ee6
lea rax, [0x18000ce30]
mov qword [rsp + 0x68], rax
xor r8d, r8d
lea rdx, [rsp + 0x68]
lea ecx, [r8 + 0x4c]
call fcn.18010d280
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x110]
xor edx, edx
lea r8d, [rdx + 0x72]
lea rcx, [0x18017c1c0]
call fcn.18007ef40
lea r9, [0x180000000]
mov r10d, 0x73
lea r11d, [r10 - 0xe]
jmp case.0x1800e1f50.2
mov edx, 0x48
lea rcx, [0x18017c1c8]
call fcn.180011620
test al, al
jne 0x1800e22b9
mov esi, 0x15
cmp esi, 0x15
ja case.0x1800e2002.4
mov eax, esi
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0xe2b60]
add rcx, rdx
jmp rcx
xor eax, eax
mov word [rbp + 0x72], ax
jmp case.0x1800e2002.4
mov r8d, 2
lea rdx, [0x180154624]
lea rcx, [rbp + 0x50]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 2
lea rdx, [0x18015469e]
lea rcx, [rbp + 0x50]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov eax, dword [0x18015474a]
mov dword [rbp + 0x7a], eax
movzx eax, word [0x18015474e]
mov word [rbp + 0x7e], ax
xor eax, eax
mov word [rbp + 0x80], ax
jmp case.0x1800e2002.4
mov r12d, 0x64
mov r13d, r12d
jmp case.0x1800e2002.4
mov dword [rsp + 0x74], 0x50
jmp case.0x1800e2002.4
mov dword [rsp + 0x7c], 0x3c
mov dword [rsp + 0x78], 0x3c
jmp case.0x1800e2002.4
mov dword [rsp + 0x70], 0x50
jmp case.0x1800e2002.4
xor eax, eax
mov qword [rbp + 0x30], rax
jmp case.0x1800e2002.4
mov dword [rbp + 0x362], 0x53
movsd xmm0, qword [str._E_NOS]
movsd qword [rbp + 0x364], xmm0
mov eax, dword [0x1801547a0]
mov dword [rbp + 0x36c], eax
movzx eax, word [0x1801547a4]
mov word [rbp + 0x370], ax
jmp case.0x1800e2002.4
mov dword [rbp + 0x80], 0x650070
xor eax, eax
mov word [rbp + 0x84], ax
mov dword [rbp + 0x340], 0x730025
mov dword [rbp + 0x344], 0x25002f
jmp case.0x1800e2002.4
mov dword [rbp + 0x34c], 0x730025
mov dword [rbp + 0x350], 0x25002f
jmp case.0x1800e2002.4
xor eax, eax
mov word [rbp + 0x35e], ax
mov qword [rbp + 0x10], rax
mov dword [rbp - 0x7c], 0x2d
mov dword [rbp - 0x80], 0x36
jmp case.0x1800e2002.4
xor eax, eax
mov word [rbp + 0x64], ax
jmp case.0x1800e2002.4
mov eax, dword [0x1801547a8]
mov dword [rbp + 0x370], eax
movabs rax, 0x4d00410045
mov qword [rbp + 0x374], rax
mov r8d, 4
lea rdx, str.MozOtaStatusEvent
lea rcx, [rbp + 0x50]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor eax, eax
mov word [rbp + 0x58], ax
jmp case.0x1800e2002.4
mov dword [rbp + 0x360], 0x4d
jmp case.0x1800e2002.4
mov r8d, 4
lea rdx, [0x1801547ec]
lea rcx, [rbp + 0x50]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp case.0x1800e2002.4
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], r13d
mov r9d, r12d
mov r8d, dword [rbp - 0x80]
mov edx, dword [rbp - 0x7c]
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.GDI32.dll_Arc]
lea rdx, [rbp + 0x50]
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.GDI32.dll_CopyMetaFileW]
lea rdx, [rbp + 0x340]
lea rcx, [rbp + 0x360]
call qword [sym.imp.SHLWAPI.dll_StrSpnW]
jmp case.0x1800e2002.4
mov eax, dword [0x18015481a]
mov dword [rbp + 0x6c], eax
movzx eax, word [0x18015481e]
mov word [rbp + 0x70], ax
jmp case.0x1800e2002.4
mov r8d, 2
lea rdx, [0x180154892]
lea rcx, [rbp + 0x50]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 3
lea rdx, [0x180154926]
lea rcx, [rbp + 0x5c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor eax, eax
mov word [rbp + 0x62], ax
lea r8d, [rax + 1]
lea rdx, [0x18015498c]
lea rcx, [rbp + 0x62]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp case.0x1800e2002.4
mov dword [rbp + 0x348], 0x2f0073
jmp case.0x1800e2002.4
mov eax, 0x73
mov word [rbp + 0x354], ax
mov dword [rbp + 0x356], 0x74002e
mov dword [rbp + 0x35a], 0x63006f
dec esi
lea eax, [rsi + 0x25]
cmp eax, 0x24
ja 0x1800e1fe6
mov esi, dword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
lea rax, [rbp + 0x2f0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1800e22d5
lea rdx, [rbp + 0x2f0]
lea rcx, [rbp + 0x240]
call fcn.180027a60
jmp 0x1800e1fb2
mov rax, qword [rbp - 0x20]
test rax, rax
jne 0x1800e23ee
lea esi, [rax + 8]
jmp 0x1800e2313
xor r8d, r8d
mov eax, esi
sub eax, 8
je 0x1800e23cd
sub eax, 0x65
je 0x1800e2371
sub eax, 0x65
je 0x1800e2338
cmp eax, 0x65
jne 0x1800e23d7
mov edi, ebx
jmp 0x1800e27a2
lea rdx, [rbp + 0x50]
mov rcx, r15
call sub.IMM32.dll_ImmGetCompositionFontW
xor eax, eax
mov ecx, eax
movzx eax, r14b
cmp dword [rbp - 0x78], ecx
cmove ecx, eax
movzx r14d, cl
test cl, cl
je 0x1800e236a
lea r8, [rbp + 0x3c0]
xor edx, edx
xor ecx, ecx
call sub.SHELL32.dll_SHSetUnreadMailCountW
mov ebx, 1
jmp 0x1800e23d7
mov qword [rbp], r8
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], rax
mov dword [rbp + 0xa8], eax
mov dword [rsp + 0x28], 0x104
lea rax, [rbp + 0x3c0]
mov qword [rsp + 0x20], rax
lea r9, [rbp]
lea r8, [rbp + 8]
xor edx, edx
mov rcx, qword [rbp - 0x10]
call sub.SHELL32.dll_SHGetUnreadMailCountW
mov dword [rbp - 0x78], eax
jmp 0x1800e23d7
mov r14b, 1
mov qword [rbp - 0x10], r8
mov r15, r8
add esi, 0x65
cmp esi, 0x19c
jb 0x1800e2310
mov esi, dword [rsp + 0x58]
mov rax, qword [rbp - 0x20]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1800e1fb2
mov rcx, qword [rbp - 0x18]
mov eax, dword [rcx]
cmp eax, 1
je 0x1800e27a0
cmp eax, 2
jne 0x1800e2799
mov esi, 0xb8
nop dword [rax]
cmp esi, 0xb8
je 0x1800e2436
cmp esi, 0x5cb8
je case.0x1800e1f50.0
jmp 0x1800e2468
mov eax, dword [rcx]
mov dword [rsp + 0x68], eax
mov r9d, 8
mov r8, qword [rbp - 8]
lea rdx, [rsp + 0x68]
mov rcx, r8
call fcn.180077d90
mov rdi, rax
test eax, eax
js 0x1800e2795
mov ebx, dword [rsp + 0x60]
add ebx, eax
mov rcx, qword [rbp - 0x18]
add esi, 0x5c00
cmp esi, 0xb800
jbe 0x1800e2420
mov esi, dword [rsp + 0x58]
jmp 0x1800e1fb2
mov eax, 0x1bb
mov word [rsp + 0x58], ax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], r8
lea r9, [rbp + 0xb0]
mov r8d, 0x54
lea rdx, [0x18017c248]
xor ecx, ecx
call fcn.18002a700
xor r9d, r9d
lea r8, [rbp - 0x70]
xor edx, edx
mov ecx, 0xed
call fcn.180019d70
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x68], rax
mov rdx, qword [rbp - 0x68]
cmp rdx, qword [rbp - 0x60]
je 0x1800e24f5
lea rax, [rbp + 0xe0]
mov qword [rdx], rax
add qword [rbp - 0x68], 8
jmp 0x1800e1fb2
lea r8, [rsp + 0x68]
lea rcx, [rbp - 0x70]
call fcn.180005260
jmp 0x1800e1fb2
mov r9d, 0xb0
lea r8, [rbp + 0x110]
xor edx, edx
xor ecx, ecx
call fcn.1800096f0
lea rdx, [rbp + 0x308]
lea rcx, [rbp + 0x380]
call qword [sym.imp.SHLWAPI.dll_StrTrimW]
jmp 0x1800e1fb2
mov ebx, r8d
jmp case.0x1800e1f50.2
mov dword [rbp + 0x316], 0x730069
mov eax, 0x74
mov word [rbp + 0x31a], ax
jmp case.0x1800e1f50.2
mov word [rbp + 0x3ae], r8w
jmp case.0x1800e1f50.2
mov r8d, 1
lea rdx, [0x18015391c]
lea rcx, [rbp + 0x260]
call fcn.180027a60
mov eax, 0x1bb
mov word [rbp + 0x2a0], ax
jmp 0x1800e1fb2
mov eax, 0x77
mov word [rbp + 0x332], ax
mov dword [rbp + 0x334], 0x720061
mov dword [rbp + 0x338], 0x210065
mov word [rbp + 0x33c], r8w
jmp case.0x1800e1f50.2
mov dword [rbp + 0x31c], 0x650072
mov word [rbp + 0x320], r11w
mov dword [rbp + 0x322], 0x640072
jmp case.0x1800e1f50.2
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x68], rax
mov rax, qword [rbp - 0x68]
cmp rax, qword [rbp - 0x60]
je 0x1800e2609
lea rcx, [rbp + 0xb0]
mov qword [rax], rcx
add qword [rbp - 0x68], 8
jmp case.0x1800e1f50.2
lea r8, [rsp + 0x68]
mov rdx, qword [rbp - 0x68]
lea rcx, [rbp - 0x70]
call fcn.180005260
jmp 0x1800e1fb2
mov eax, dword [0x18017c270]
mov dword [rsp + 0x68], eax
lea r8, [rsp + 0x68]
mov edx, 0xe0
lea rcx, [rbp - 0x70]
call fcn.180012590
lea rax, [rbp - 0x70]
mov qword [rbp + 0x20], rax
mov eax, dword [0x18017c270]
mov dword [rbp + 0x28], eax
mov eax, dword [0x18017c274]
mov dword [rbp + 0x2c], eax
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x40], xmm0
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x40]
lea r8, [0x18001ab70]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rbp - 0x20], rax
jmp 0x1800e1fb2
test edi, edi
js 0x1800e27a6
add edx, edi
mov dword [rsp + 0x60], edx
jmp case.0x1800e1f50.2
mov dword [rbp + 0x3ae], 0x64
mov dword [rbp + 0x308], 0x6e004f
jmp case.0x1800e1f50.2
mov dword [rsp + 0x20], 0x8b
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x280]
xor ecx, ecx
call fcn.18001e760
lea r9, [rbp + 0x240]
xor r8d, r8d
lea rdx, [rbp + 0x2b0]
mov ecx, 0xbf
call fcn.180078340
mov eax, 0x1bb
mov word [rsp + 0x58], ax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x30], rax
xor eax, eax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xe0]
lea r8d, [rax + 0x34]
lea rdx, [0x18017c228]
xor ecx, ecx
call fcn.18002a700
jmp 0x1800e1fb2
mov dword [rbp + 0x30c], 0x650067
mov eax, 0x72
mov word [rbp + 0x310], ax
mov dword [rbp + 0x312], 0x670065
jmp case.0x1800e1f50.2
mov dword [rbp + 0x326], 0x200065
mov dword [rbp + 0x32a], 0x6f0073
mov dword [rbp + 0x32e], 0x740066
mov eax, dword [rsp + 0x50]
mov edx, dword [rsp + 0x64]
dec edx
mov dword [rsp + 0x64], edx
dec esi
mov dword [rsp + 0x58], esi
cmp edx, eax
jbe case.0x1800e1f50.0
mov edx, dword [rsp + 0x60]
xor r8d, r8d
jmp 0x1800e1f30
mov edi, 1
jmp 0x1800e27a2
mov ebx, eax
jmp case.0x1800e1f50.0
mov edi, 0xffffffe8
jmp 0x1800e27a6
mov edi, edx
mov ebx, edi
mov edi, ebx
lea rcx, [rbp + 0x188]
call fcn.180007340
mov rbx, qword [rbp + 0x170]
test rbx, rbx
je 0x1800e281c
mov rsi, qword [rbp + 0x178]
cmp rbx, rsi
je 0x1800e27e8
nop word [rax + rax]
mov rcx, rbx
call fcn.180025d30
add rbx, 0x20
cmp rbx, rsi
jne 0x1800e27d0
mov rbx, qword [rbp + 0x170]
mov r8, qword [rbp + 0x180]
sub r8, rbx
sar r8, 5
mov rdx, rbx
lea rcx, [rbp + 0x170]
call fcn.180029540
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x170], xmm0
xor r14d, r14d
mov qword [rbp + 0x180], r14
jmp 0x1800e281f
xor r14d, r14d
mov rdx, qword [rbp + 0x158]
test rdx, rdx
je 0x1800e2857
mov r8, qword [rbp + 0x168]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0x158]
call fcn.1800294a0
mov qword [rbp + 0x158], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x160], xmm0
lea rcx, [rbp + reloc.SHLWAPI.dll_SHRegGetIntW]
call fcn.180007270
nop
mov rbx, qword [rbp - 0x58]
test rbx, rbx
je 0x1800e28fb
mov rsi, qword [rbp - 0x50]
cmp rbx, rsi
je 0x1800e2895
nop word [rax + rax]
mov rcx, rbx
call fcn.180006b80
add rbx, 0x28
cmp rbx, rsi
jne 0x1800e2880
mov rbx, qword [rbp - 0x58]
mov rcx, qword [rbp - 0x48]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x1800e28e7
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800e28e7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.18010ff50
mov qword [rbp - 0x58], r14
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x50], xmm0
mov rdx, qword [rbp - 0x70]
test rdx, rdx
je 0x1800e2924
mov r8, qword [rbp - 0x60]
sub r8, rdx
sar r8, 3
lea rcx, [rbp - 0x70]
call fcn.180029450
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r14
mov rdx, qword [rbp + 0xd2]
cmp rdx, 0x10
jb 0x1800e2968
inc rdx
mov rcx, qword [rbp + 0xba]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800e2963
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800e2963
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18010ff50
movdqa xmm0, xmmword [0x1801600c0]
movdqu xmmword [rbp + 0xca], xmm0
mov byte [rbp + 0xba], 0
mov rdx, qword [rbp + 0x102]
cmp rdx, 0x10
jb 0x1800e29c3
inc rdx
mov rcx, qword [rbp + 0xea]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800e29be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800e29be
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18010ff50
movdqa xmm0, xmmword [0x1801600c0]
movdqu xmmword [rbp + 0xfa], xmm0
mov byte [rbp + 0xea], 0
lea rcx, [rbp + 0x2b0]
call fcn.180006ee0
nop
lea rcx, [rbp + 0x240]
call fcn.180006f90
mov eax, edi
mov rcx, qword [rbp + 0x5d0]
xor rcx, rsp
call fcn.180110960
mov rbx, qword [rsp + 0x730]
add rsp, 0x6e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret