Function at 0x18001c3f0
Capabilities:
Get file size

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x5b0]
sub rsp, 0x6b0
mov rax, qword [0x1800a5088]
xor rax, rsp
mov qword [rbp + 0x5a0], rax
mov eax, ecx
mov dword [rbp - 0x78], ecx
mov r11d, ecx
mov dword [rsp + 0x68], ecx
add ecx, 0x145
mov qword [rbp - 0x80], r9
mov r10, r9
mov qword [rbp - 0x48], r8
movzx r9d, byte [rsp + 0x48]
xor r13d, r13d
mov qword [rbp - 0x70], rdx
mov dword [rsp + 0x58], ecx
mov byte [rsp + 0x49], r9b
cmp eax, ecx
jae 0x18001c61a
movsxd r15, dword [rbp - 0x74]
mov rbx, qword [rbp - 0x40]
mov r14, r15
movzx esi, byte [rsp + 0x40]
movzx edi, byte [rsp + 0x40]
mov r12, qword [rbp - 0x40]
sub eax, 0x10
je 0x18001c5f1
sub eax, 0xb
je 0x18001c5ab
sub eax, 0x23
je 0x18001c54e
sub eax, 0x41
je 0x18001c534
cmp eax, 0x41
jne 0x18001c5fb
movsxd rax, r15d
cmp rax, qword [r10 + 0x10]
jae 0x18001c528
nop word [rax + rax]
mov r8d, 0x76
mov eax, r8d
sub eax, 0x74
je 0x18001c4ed
sub eax, 1
je 0x18001c4e3
cmp eax, 1
jne 0x18001c50d
inc dil
movzx edx, dil
movzx esi, byte [rdx + rbx]
add r9b, sil
movzx eax, r9b
movzx ecx, byte [rax + rbx]
mov byte [rdx + rbx], cl
jmp 0x18001c50d
movzx eax, r9b
mov byte [rax + rbx], sil
jmp 0x18001c50d
movzx eax, r9b
inc r15d
movzx ecx, dil
movzx ecx, byte [rcx + rbx]
add cl, byte [rax + rbx]
movzx eax, cl
movzx ecx, byte [rax + rbx]
xor byte [r14 + r12], cl
inc r14
dec r8d
cmp r8d, 0x73
ja 0x18001c4b6
movsxd rax, r15d
mov byte [rsp + 0x49], r9b
cmp rax, qword [r10 + 0x10]
jb 0x18001c4b0
mov ecx, dword [rsp + 0x58]
mov byte [rbp + 0x100], dil
jmp 0x18001c5fb
cmp qword [r10 + 0x18], 0x10
lea rbx, [rbp]
mov r12, r10
jb 0x18001c5fb
mov r12, qword [r10]
jmp 0x18001c5fb
cmp qword [rdx + 0x18], 0x10
mov r15d, r13d
mov rcx, qword [rdx + 0x10]
mov r14, r13
mov rax, rdx
jb 0x18001c565
mov rax, qword [rdx]
mov dword [rsp + 0x70], ecx
lea r9, [rsp + 0x70]
mov qword [rsp + 0x30], r13
lea r8, [rbp]
mov qword [rsp + 0x28], r13
xor ecx, ecx
mov edx, 0x2c
mov qword [rsp + 0x20], rax
call fcn.180016c00
movzx r9d, byte [rbp + 0x101]
movzx edi, byte [rbp + 0x100]
mov ecx, dword [rsp + 0x58]
mov r10, qword [rbp - 0x80]
mov byte [rsp + 0x49], r9b
jmp 0x18001c5fb
xor r8d, r8d
mov qword [rsp + 0x20], 0
lea r13, [r10 + 0x1e8]
xor ecx, ecx
mov r9, r13
lea edx, [r8 + 0x7c]
call fcn.180032150
test al, al
je 0x18001d4eb
cmp dword [r13], 2
mov ecx, dword [rsp + 0x58]
movzx r9d, byte [rsp + 0x49]
setae byte [rsp + 0x6c]
mov r10, qword [rbp - 0x80]
xor r13d, r13d
jmp 0x18001c5fb
mov dword [rbp + 0x170], 0x6874656d
mov eax, dword [rsp + 0x68]
mov rdx, qword [rbp - 0x70]
add eax, 0x41
mov dword [rsp + 0x68], eax
cmp eax, ecx
jb 0x18001c474
mov r8, qword [rbp - 0x48]
mov r11d, dword [rbp - 0x78]
movzx edi, byte [rsp + 0x40]
lea eax, [r11 + 7]
mov r12, qword [rbp - 0x50]
lea rdx, [0x180000000]
movzx r13d, byte [rsp + 0x48]
mov esi, r11d
mov r15, qword [rsp + 0x50]
mov ebx, 0xa
mov dword [rbp - 0x58], eax
mov dword [rsp + 0x58], edi
cmp esi, eax
jae 0x18001c825
lea eax, [rsi - 0x10]
cmp eax, 0x57
ja case.0x18001c66e.23
movzx eax, byte [rdx + rax + 0x1d5ec]
mov ecx, dword [rdx + rax*4 + 0x1d5cc]
add rcx, rdx
jmp rcx
xor edx, edx
mov qword [rsp + 0x50], r10
lea rcx, [rbp - 0x60]
mov qword [rbp - 0x60], 8
mov r15, r10
lea r8d, [rdx + 0x12]
call fcn.180026bc0
mov qword [rsp + 0x60], rax
jmp 0x18001d4c3
cmp qword [r10 + 0x18], 0x10
mov r8, r10
jb 0x18001c6a6
mov r8, qword [r10]
lea rax, [rsp + 0x78]
xor r9d, r9d
mov qword [rsp + 0x30], rax
xor edx, edx
xor eax, eax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
lea ecx, [rax + 0x4b]
call fcn.18003f710
cmp eax, 1
jne 0x18001d4eb
xor dil, dil
mov dword [rsp + 0x58], edi
jmp 0x18001d4c8
mov r8d, 2
lea rdx, [0x180095181]
lea rcx, [rbp + 0x170]
call fcn.180062ed0
mov r14, qword [rbp - 0x70]
lea rdx, [rbp + 0x1a0]
xor eax, eax
mov qword [rbp + 0x1b8], 0xf
mov rcx, r14
mov qword [rbp + 0x1b0], rax
mov byte [rbp + 0x1a0], al
mov qword [rbp + 0x1d0], rax
mov byte [rbp + 0x1c0], al
mov qword [rbp + 0x1e0], rax
mov qword [rbp + 0x1f8], rax
mov byte [rbp + 0x1e8], al
mov qword [rbp + 0x218], rax
mov byte [rbp + 0x208], al
mov qword [rbp + 0x1d8], 0xf
mov qword [rbp + 0x200], 0xf
mov qword [rbp + 0x220], 0xf
mov qword [rbp + 0x228], 0xffffffffffffffff
call fcn.180045010
lea rcx, [r14 + 0x20]
lea rdx, [rbp + 0x1c0]
call fcn.180045010
mov rax, qword [rbp + 0x1e0]
lea rcx, [r14 + 0x48]
lea rdx, [rbp + 0x1e8]
mov qword [r14 + 0x40], rax
call fcn.180045010
lea rcx, [r14 + 0x68]
lea rdx, [rbp + 0x208]
call fcn.180045010
mov rax, qword [rbp + 0x228]
lea rcx, [rbp + 0x1a0]
mov qword [r14 + 0x88], rax
call fcn.18001d7c0
mov dword [rbp - 0x74], 4
jmp 0x18001d4c8
mov byte [rbp + 0x101], r9b
jmp case.0x18001c66e.23
mov byte [rbp + 0x174], 0
jmp case.0x18001c66e.23
cmp qword [r8 + 0x18], 0x10
mov rax, r8
mov qword [r8 + 0x10], 0
jb 0x18001c80c
mov rax, qword [r8]
mov byte [rax], 0
mov qword [rsp + 0x78], 0
mov qword [rbp - 0x40], 0
jmp case.0x18001c66e.23
lea eax, [r11 + 5]
mov dword [rsp + 0x70], r11d
mov dword [rbp - 0x60], eax
mov r14d, r11d
cmp r14d, eax
jae case.0x18001c66e.20
mov eax, r14d
sub eax, 0x10
je 0x18001d2b1
sub eax, 1
je 0x18001d565
sub eax, 0x56
je 0x18001c94f
sub eax, 1
je 0x18001d2a6
cmp eax, 1
jne 0x18001d4a0
movsxd rax, dword [r15]
cmp eax, 6
ja case.default.0x18001c98e
mov ecx, dword [rdx + rax*4 + 0x1d644]
add rcx, rdx
jmp rcx
mov rax, qword [rsp + 0x60]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], 0
mov ecx, 0xbd
mov byte [rsp + 0x40], 0x7d
call fcn.18003fde0
cmp eax, 1
je case.0x18001c883.0
mov eax, 6
jmp 0x18001d5a0
mov eax, 0xa6
cmp eax, 0xa6
je 0x18001c8da
add eax, 0x31ee
cmp eax, 0x31ee
jbe 0x18001c8c5
jmp case.0x18001c883.0
mov rax, qword [rsp + 0x60]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], 0
mov ecx, 0xbd
mov byte [rsp + 0x40], 0x5d
call fcn.18003fde0
cmp eax, 1
jne 0x18001c8b6
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetTopWindow]
mov rax, qword [r15 + 0x20]
test rax, rax
je 0x18001d4f5
cmp r15, qword [rbp - 0x80]
je 0x18001d4f5
mov r15, qword [r15 + 0x10]
mov qword [rsp + 0x50], r15
test r15, r15
jne 0x18001d4c3
mov r15, rax
mov qword [rsp + 0x50], rax
mov r14d, 0x68
jmp 0x18001d4a0
mov esi, 0x1b
lea eax, [rsi - 0x14]
cmp eax, 7
ja case.default.0x18001c96a
mov ecx, dword [rdx + rax*4 + 0x1d660]
add rcx, rdx
jmp rcx
mov rsi, qword [rsp + 0x50]
mov dword [rbp - 0x68], 0
movsxd rax, dword [rsi]
cmp eax, 6
ja case.default.0x18001c98e
mov ecx, dword [rdx + rax*4 + 0x1d680]
add rcx, rdx
jmp rcx
mov r15d, 7
cmp r15d, 5
jbe case.0x18001c98e.1
mov eax, r15d
sub eax, 6
je 0x18001cf6b
cmp eax, 1
jne 0x18001cdbc
mov rax, qword [rsp + 0x60]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], 0
mov ecx, 0xbd
mov byte [rsp + 0x40], 0x22
call fcn.18003fde0
cmp eax, 1
jne 0x18001c8b6
mov rcx, qword [rsi + 8]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x18001c9f5
mov rdx, qword [rsp + 0x60]
lea r8, [rbp - 0x30]
mov r9d, 0x8a
mov qword [rbp - 0x30], rax
call fcn.180030780
cmp eax, 1
jne 0x18001c8b6
mov rax, qword [rsp + 0x60]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x28], rax
xor r14d, r14d
xor r8d, r8d
mov qword [rsp + 0x20], r14
xor edx, edx
mov byte [rsp + 0x40], 0x22
mov ecx, 0xbd
call fcn.18003fde0
cmp eax, 1
jne 0x18001c8b6
mov rax, qword [rsi + 0x20]
test rax, rax
je 0x18001cd4c
cmp dword [rax], 2
jne 0x18001cdb5
nop dword [rax]
lea rdx, [0x180000000]
cmp r14d, 0xe7
ja case.0x18001ca97.8
movzx eax, byte [rdx + r14 + 0x1d6c0]
mov ecx, dword [rdx + rax*4 + 0x1d69c]
add rcx, rdx
jmp rcx
mov r8d, 1
mov byte [rbp + 0x128], 0
lea rdx, str.More_MacRumors_Stories
lea rcx, [rbp + 0x128]
call fcn.180062ed0
mov r8d, 4
lea rdx, [0x1800952bf]
lea rcx, [rbp + 0x128]
call fcn.180062ed0
mov r8d, 1
lea rdx, [0x1800952d8]
lea rcx, [rbp + 0x12d]
call fcn.18005c310
lea rdx, [0x180000000]
jmp case.0x18001ca97.8
mov eax, 0x614d
mov byte [rbp + 0x130], 0
mov word [rbp + 0x12e], ax
jmp case.0x18001ca97.8
mov r8d, 2
mov word [rbp + 0x130], 0x70
lea rdx, [0x180095344]
lea rcx, [rbp + 0x131]
call fcn.18005c310
lea rdx, [0x180000000]
jmp case.0x18001ca97.8
xor r9d, r9d
lea rax, [rbp + 0x128]
xor edx, edx
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x100
lea r8d, [r9 + 4]
lea rcx, [rdx - 1]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov r12, rax
mov qword [rbp - 0x50], rax
mov esi, 0x42
mov ecx, esi
sub ecx, 0x3f
je 0x18001cc1b
sub ecx, 1
je 0x18001cbf9
sub ecx, 1
je 0x18001cbbf
cmp ecx, 1
jne 0x18001cc60
mov eax, 0x72
mov dword [rbp + 0x178], 0x61736944
mov word [rbp + 0x180], ax
mov eax, 0x6f
mov word [rbp + 0x181], ax
mov dword [rbp + 0x17c], 0x50656c62
jmp 0x18001cc60
mov eax, 0x6957
mov dword [rbp + 0x188], 0x6f646e
mov word [rbp + 0x186], ax
mov eax, 0x77
mov word [rbp + 0x18b], ax
mov eax, 0x73
mov word [rbp + 0x18c], ax
mov dword [rbp + 0x182], 0x73736563
jmp 0x18001cc60
mov eax, 0x47
mov word [rbp + 0x18d], ax
mov dword [rbp + 0x18e], 0x736f68
mov dword [rbp + 0x191], 0x676e6974
jmp 0x18001cc60
mov r8, qword [sym.imp.USER32.dll_DisableProcessWindowsGhosting]
lea rdx, [rbp + 0x178]
mov eax, 0x20
lea rcx, [rbp + 0x1a0]
mov word [rbp + 0x195], ax
mov eax, 0x25
mov word [rbp + 0x196], ax
mov eax, 0x70
mov word [rbp + 0x197], ax
mov word [rbp + 0x198], bx
call fcn.1800011d0
dec esi
cmp esi, 0x3e
ja 0x18001cb70
mov rsi, qword [rsp + 0x50]
lea rdx, [0x180000000]
jmp case.0x18001ca97.8
xor ecx, ecx
movzx eax, r13b
test r12, r12
cmovne ecx, eax
mov byte [rsp + 0x48], cl
movzx r13d, cl
test cl, cl
je 0x18001cca8
xor edx, edx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rsi + 0x28], 0
je 0x18001d51b
mov rax, qword [rsp + 0x60]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], 0
mov ecx, 0xbd
mov byte [rsp + 0x40], 0x3a
call fcn.18003fde0
cmp eax, 1
jne 0x18001c8b6
lea rdx, [0x180000000]
jmp case.0x18001ca97.8
mov r8d, 4
lea rdx, [0x180095373]
lea rcx, [rbp + 0x128]
call fcn.180062ed0
mov r13b, 1
lea rdx, [0x180000000]
mov byte [rsp + 0x48], r13b
jmp case.0x18001ca97.8
mov dword [rbp + 0x133], 0x624f676e
jmp case.0x18001ca97.8
mov byte [rbp + 0x137], 0
add r14d, 0x21
lea eax, [r14 + 0xb1]
cmp eax, 0x1b9
jb 0x18001ca70
dec r15d
jmp 0x18001c996
cmp qword [rsi + 0x28], r14
je 0x18001cd92
mov rax, qword [rsp + 0x60]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], r14
mov ecx, 0xbd
mov byte [rsp + 0x40], 0x3a
call fcn.18003fde0
cmp eax, 1
jne 0x18001c8b6
lea rdx, [0x180000000]
dec r15d
jmp 0x18001c996
mov eax, 0xa0
nop word [rax + rax]
cmp eax, 0xa0
je 0x18001d531
add eax, 0x5c
cmp eax, 0xfc
jb 0x18001cda0
lea rdx, [0x180000000]
dec r15d
jmp 0x18001c996
mov esi, 0x67
nop dword [rax]
cmp esi, 0x5f5b
ja 0x18001d20e
cmp esi, 0x67
je 0x18001ce27
cmp esi, 0x2030
je 0x18001d17f
cmp esi, 0x3ff9
jne 0x18001ce5c
mov rbx, qword [rbp - 0x28]
lea rdx, [0x180000000]
mov esi, 5
lea r14d, [rsi + 1]
lea edi, [rsi + 0x6d]
nop dword [rax]
cmp esi, 5
ja case.default.0x18001ce25
mov eax, esi
mov ecx, dword [rdx + rax*4 + 0x1d7a8]
add rcx, rdx
jmp rcx
mov rax, qword [rsp + 0x60]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], 0
mov ecx, 0xbd
mov byte [rsp + 0x40], 0x7b
call fcn.18003fde0
cmp eax, 1
jne 0x18001c8b6
add esi, 0x1fc9
jmp 0x18001cdd0
mov eax, 0x65
mov dword [rbp + 0x128], 0x74697257
mov word [rbp + 0x12c], ax
jmp case.default.0x18001ce25
mov dword [rbp + 0x13e], 0x6e6f6974
jmp case.default.0x18001ce25
mov r8, rbx
mov dword [rbp + 0x142], 0x702520
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0x3a0]
call fcn.1800011d0
lea rdx, [0x180000000]
jmp case.default.0x18001ce25
mov eax, 0x65
mov dword [rbp + 0x130], 0x746176
mov word [rbp + 0x133], ax
mov dword [rbp + 0x134], 0x6f7250
mov dword [rbp + 0x137], 0x6c6966
jmp case.default.0x18001ce25
mov dword [rbp + 0x13a], 0x63655365
jmp case.default.0x18001ce25
mov eax, 0x50
mov word [rbp + 0x12d], ax
mov eax, 0x69
mov word [rbp + 0x12e], di
mov word [rbp + 0x12f], ax
dec esi
sub r14, 1
jne 0x18001ce10
mov edi, dword [rsp + 0x58]
lea ebx, [r14 + 0xa]
mov r12, qword [rbp - 0x50]
lea esi, [rbx + 0xb]
movzx r13d, byte [rsp + 0x48]
lea r14d, [rbx + 0x5d]
mov r15, qword [rsp + 0x50]
jmp case.default.0x18001c96a
mov esi, 0x53
mov eax, esi
sub eax, 0x53
je 0x18001cfc3
sub eax, 0xe
je 0x18001cfae
sub eax, 0xe
je 0x18001cf7e
sub eax, 0xe
je 0x18001d1fe
cmp eax, 0xe
jne 0x18001cfdb
lea rdx, [0x180000000]
mov r15, qword [rsp + 0x50]
mov esi, 0x15
lea r14d, [rsi + 0x52]
jmp case.default.0x18001c96a
mov rdx, qword [rsp + 0x60]
lea r8, [rsp + 0x70]
mov r9d, 0x8a
mov qword [rsp + 0x70], 4
lea rcx, [rbp + 0x118]
call fcn.180030780
cmp eax, 1
jne 0x18001c8b6
jmp 0x18001cfdb
mov eax, 0x6575
mov byte [rbp + 0x11c], 0
mov word [rbp + 0x11a], ax
jmp 0x18001cfdb
mov eax, 0x74
mov word [rbp + 0x118], ax
mov eax, 0x72
mov word [rbp + 0x119], ax
add esi, 0xe
cmp esi, 0x99
jb 0x18001cf45
mov esi, 0x7d
nop
mov eax, esi
sub eax, 0x7d
je 0x18001d01c
sub eax, 1
je 0x18001d010
sub eax, 1
je 0x18001d194
cmp eax, 1
je 0x18001cf64
jmp 0x18001d03c
mov dword [rbp + 0x121], 0x65736c61
jmp 0x18001d03c
mov r8d, 1
lea rdx, [0x180095381]
lea rcx, [rbp + 0x120]
call fcn.18005c310
mov byte [rbp + 0x121], 0
inc esi
cmp esi, 0x81
jb 0x18001cff0
mov esi, 0x68
nop dword [rax + rax]
cmp esi, 0x65
jbe case.default.0x18001c98e
mov eax, esi
sub eax, 0x66
je 0x18001cf64
sub eax, 1
je 0x18001d1b2
cmp eax, 1
jne 0x18001d0a7
mov eax, 0x756e
mov byte [rbp + 0x112], 0
mov r8d, 1
mov word [rbp + 0x110], ax
lea rdx, [0x180095400]
lea rcx, [rbp + 0x110]
call fcn.180062ed0
mov word [rbp + 0x113], 0x6c
dec esi
jmp 0x18001d050
mov eax, 0x6e
mov word [rbp + 0x166], ax
mov eax, 0x67
mov word [rbp + 0x167], ax
cmp qword [r15 + 0x18], 0
je 0x18001d10b
cmp r15, r10
je 0x18001d10b
mov rax, qword [rsp + 0x60]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], 0
mov ecx, 0xbd
mov byte [rsp + 0x40], 0x2c
call fcn.18003fde0
cmp eax, 1
jne 0x18001c8b6
lea rdx, [0x180000000]
mov qword [rbp - 0x18], 0
jmp case.default.0x18001c96a
mov dword [rbp + 0x15b], 0x636172
jmp case.default.0x18001c96a
mov eax, 0x7473
mov dword [rbp + 0x15e], 0x20726574
mov word [rbp + 0x162], ax
jmp case.default.0x18001c96a
mov eax, 0x63
mov word [rbp + 0x158], ax
mov eax, 0x6168
mov word [rbp + 0x159], ax
jmp case.default.0x18001c96a
mov eax, 0x72
mov word [rbp + 0x164], ax
mov eax, 0x69
mov word [rbp + 0x165], ax
dec esi
cmp esi, 0x13
jbe 0x18001d4a0
mov r10, qword [rbp - 0x80]
jmp 0x18001c954
mov rax, qword [sym.imp.KERNEL32.dll_WritePrivateProfileSectionW]
mov r15, qword [rsp + 0x50]
mov qword [rbp - 0x28], rax
jmp 0x18001d299
mov byte [rbp + 0x125], 0
lea r8, [rsp + 0x70]
mov qword [rsp + 0x70], 5
lea rcx, [rbp + 0x120]
jmp 0x18001d1e5
mov qword [rsp + 0x70], 4
lea r8, [rsp + 0x70]
lea rcx, [rbp + 0x110]
jmp 0x18001d1e5
mov rcx, qword [rsi + 8]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x18001d1d4
mov qword [rbp - 0x20], rax
lea r8, [rbp - 0x20]
mov rdx, qword [rsp + 0x60]
mov r9d, 0x8a
call fcn.180030780
cmp eax, 1
jne 0x18001c8b6
mov r15, qword [rsp + 0x50]
mov r14d, 0x68
jmp 0x18001d4a0
mov rsi, qword [rsp + 0x50]
mov rax, qword [rsp + 0x60]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], 0
mov ecx, 0xbd
mov byte [rsp + 0x40], 0x5b
call fcn.18003fde0
cmp eax, 1
jne 0x18001c8b6
mov rax, qword [rsi + 0x28]
test rax, rax
jne 0x18001d4bb
mov r15, qword [rsp + 0x50]
lea r14d, [rax + 0x68]
jmp 0x18001d4a0
lea rax, [rbp + 0x158]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x18001d271
mov r9d, dword [rbp - 0x68]
lea rdx, [rbp + 0x158]
mov rcx, qword [rbp - 0x18]
mov qword [rsp + 0x20], 0
call qword [sym.imp.USER32.dll_GetTabbedTextExtentA]
mov rax, qword [r15 + 0x28]
test rax, rax
jne 0x18001d4bb
mov r14d, 0x68
jmp 0x18001d4a0
mov rcx, qword [rsp + 0x78]
lea r8, [rbp + 0x170]
xor r9d, r9d
mov dword [rbp - 0x54], 0
mov edx, 0xb8
call fcn.180007be0
test rax, rax
jne 0x18001d385
mov rbx, qword [rbp - 0x70]
mov esi, 0x1c
mov r15, qword [rbp - 0x48]
mov eax, esi
sub eax, 0x1c
je 0x18001d35a
sub eax, 1
je 0x18001d347
cmp eax, 1
jne 0x18001d375
mov rcx, qword [rsp + 0x78]
lea r8, [rbp + 0x150]
xor r9d, r9d
mov edx, 0xb8
call fcn.180007be0
test rax, rax
je 0x18001d32f
mov r8, qword [rsp + 0x78]
mov r9, rbx
mov edx, 6
mov rcx, r15
call fcn.180014ea0
mov edi, eax
jmp 0x18001d375
mov r9, qword [rsp + 0x78]
xor r8d, r8d
xor ecx, ecx
lea edx, [r8 + 0x2c]
call fcn.180006dc0
movzx edi, al
jmp 0x18001d375
mov dword [rbp + 0x152], 0x757461
lea rdx, [0x180090124]
jmp 0x18001d368
mov byte [rbp + 0x150], 0
lea rdx, [0x180095198]
lea rcx, [rbp + 0x150]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
inc esi
cmp esi, 0x1f
jb 0x18001d2e7
jmp 0x18001d492
mov rax, qword [rax + 0x28]
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18001d4a0
movzx eax, word [0x1800951ce]
lea r8, [rsp + 0x68]
mov word [rsp + 0x68], ax
sub r8, rcx
movzx eax, byte [0x1800951d0]
mov byte [rsp + 0x6a], al
mov byte [rsp + 0x6b], 0
nop word [rax + rax]
movzx edx, byte [rcx]
movzx eax, byte [rcx + r8]
sub edx, eax
jne 0x18001d3d3
inc rcx
test eax, eax
jne 0x18001d3c0
test edx, edx
jne 0x18001d4a0
mov rbx, qword [rbp - 0x10]
lea esi, [rdx + 0x13]
mov r15, qword [rbp - 0x70]
lea r14d, [rdx + 0x72]
lea r12d, [rdx + 0x70]
lea r13d, [rdx + 0x73]
mov eax, esi
sub eax, 0x11
je 0x18001d45a
sub eax, 1
je 0x18001d434
cmp eax, 1
jne 0x18001d474
mov eax, 0x61
mov word [rbp + 0x148], r12w
mov word [rbp + 0x149], ax
mov word [rbp + 0x14a], r14w
mov word [rbp + 0x14b], ax
mov eax, 0x6d
mov word [rbp + 0x14c], ax
jmp 0x18001d474
mov rcx, qword [rsp + 0x78]
lea r8, [rbp + 0x148]
xor r9d, r9d
mov word [rbp + 0x14d], r13w
mov edx, 0xb8
call fcn.180007be0
mov rbx, rax
jmp 0x18001d474
test rbx, rbx
je 0x18001d474
mov rcx, qword [rbx + 0x28]
mov r8d, 0x7e
mov rdx, r15
call fcn.180003290
movzx edi, al
dec esi
cmp esi, 0x10
ja 0x18001d3f2
mov r14d, dword [rsp + 0x70]
mov r12, qword [rbp - 0x50]
movzx r13d, byte [rsp + 0x48]
mov qword [rbp - 0x10], rbx
mov r15, qword [rsp + 0x50]
mov ebx, 0xa
mov dword [rsp + 0x58], edi
mov r10, qword [rbp - 0x80]
lea rdx, [0x180000000]
mov eax, dword [rbp - 0x60]
inc r14d
mov dword [rsp + 0x70], r14d
jmp 0x18001c834
mov r15, rax
mov qword [rsp + 0x50], rax
mov esi, 0x67
lea rdx, [0x180000000]
movzx r9d, byte [rsp + 0x49]
inc esi
mov r10, qword [rbp - 0x80]
mov r8, qword [rbp - 0x48]
mov eax, dword [rbp - 0x58]
mov r11d, dword [rbp - 0x78]
jmp 0x18001c648
mov byte [rsp + 0x6c], 0
jmp case.0x18001c66e.20
mov rdx, qword [rsp + 0x60]
mov r9d, 0xbb
xor r8d, r8d
xor ecx, ecx
call fcn.180028eb0
mov rcx, qword [rbp - 0x70]
mov qword [rcx], rax
mov eax, 1
jmp 0x18001d5a0
mov edx, 0xae
lea rcx, [rsp + 0x60]
call fcn.1800329d0
mov eax, 8
jmp 0x18001d5a0
mov edx, 0xae
lea rcx, [rsp + 0x60]
call fcn.1800329d0
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov eax, 8
jmp 0x18001d5a0
mov edx, 0xae
lea rcx, [rsp + 0x60]
call fcn.1800329d0
mov eax, ebx
jmp 0x18001d5a0
xor r9d, r9d
lea rdx, [rsp + 0x78]
mov r8d, 0xb4
xor ecx, ecx
call fcn.180042390
mov r9d, dword [rbp - 0x54]
lea rax, [rbp - 0x38]
mov r8, qword [rbp - 0x40]
lea rdx, [rbp - 0x74]
xor ecx, ecx
mov qword [rsp + 0x20], rax
call qword [sym.imp.USER32.dll_GetUserObjectSecurity]
mov byte [rsp + 0x6c], dil
mov eax, dword [rsp + 0x6c]
mov rcx, qword [rbp + 0x5a0]
xor rcx, rsp
call fcn.180051f60
mov rbx, qword [rsp + 0x6f0]
add rsp, 0x6b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret