Function at 0x1800e2bc0
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xd0
imul r15d, edx, 0x1298
xor r12d, r12d
mov rsi, r8
mov r13d, edx
mov ebx, edx
cmp edx, r15d
ja 0x1800e368e
mov r14, qword [rbp + 0x7f]
mov edi, dword [rbp + 0x6f]
nop
cmp ebx, 0x3d480
ja 0x1800e30e8
je 0x1800e308b
cmp ebx, 0x15e80
ja 0x1800e2e3b
je 0x1800e2e16
cmp ebx, 0x8c80
ja 0x1800e2da4
je 0x1800e2d4c
mov eax, ebx
sub eax, 0x80
je 0x1800e2d34
sub eax, 0x57
je 0x1800e2d02
sub eax, 0x45a9
je 0x1800e2ca4
cmp eax, 0x2feb
jne 0x1800e367c
cmp qword [r14 + 0x18], r12
je 0x1800e2c6e
cmp dword [r14 + 8], r12d
jge 0x1800e367c
mov qword [rsp + 0x38], r12
xor r9d, r9d
mov qword [rsp + 0x30], r12
xor r8d, r8d
mov dword [rsp + 0x28], 0x64
xor edx, edx
mov rcx, rsi
mov qword [rsp + 0x20], r12
call fcn.1800bdeb0
mov edi, eax
test eax, eax
js 0x1800e4bf2
jmp 0x1800e367c
mov dword [rsp + 0x48], 0x8c
lea rdx, [rbp + 0x7f]
mov qword [rsp + 0x40], r12
xor r9d, r9d
mov qword [rsp + 0x38], r12
xor r8d, r8d
mov qword [rsp + 0x30], r12
xor ecx, ecx
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
mov dword [rbp + 0x7f], r12d
call fcn.18001bca0
xor r9d, r9d
lea r8, [rbp + 0x7f]
xor edx, edx
mov ecx, 0x11c
call fcn.180038780
xor r8d, r8d
lea rdx, [rbp + 0x7f]
lea ecx, [r8 + 0x67]
call fcn.1800daaa0
jmp 0x1800e367c
test rsi, rsi
je 0x1800e3708
mov rcx, qword [rsi]
xor edx, edx
mov r8d, 0xbb
mov edi, r12d
call fcn.1800fde00
mov r14, rax
test rax, rax
jne 0x1800e367c
mov eax, 0xfffffff5
jmp 0x1800e4bf2
cmp dword [rsi], 1
jle 0x1800e367c
mov dword [0x18017d774], 1
jmp 0x1800e367c
lea r8, [rbp + 0x7f]
mov edx, 0xca
xor ecx, ecx
call fcn.1800d1b70
xor r9d, r9d
lea rcx, [rbp + 0x7f]
xor edx, edx
mov r8d, 0xea
call fcn.1800e6cd0
mov qword [rsp + 0x40], r12
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x38], r12
xor r9d, r9d
mov qword [rsp + 0x30], rax
xor r8d, r8d
mov dword [rsp + 0x28], 0x92
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], r12
call fcn.18001a5a0
jmp 0x1800e367c
cmp ebx, 0xd280
je 0x1800e2df3
cmp ebx, 0xebff
je 0x1800e3712
cmp ebx, 0x11880
jne 0x1800e367c
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor r8d, r8d
lea rcx, [rbp + 0x7f]
mov edx, 0x113
call fcn.1800d9450
mov r8d, 0xff
lea rdx, [rbp + 0x7f]
xor ecx, ecx
call fcn.1800d1140
jmp 0x1800e367c
lea rdx, [rbp + 0x7f]
mov ecx, 0x25
call fcn.18010bb20
xor r8d, r8d
lea rcx, [rbp + 0x7f]
lea edx, [r8 + 0x3d]
call fcn.1800d31a0
jmp 0x1800e367c
xor r8d, r8d
lea r9, [rbp + 0x7f]
xor ecx, ecx
lea edx, [r8 + 0x4a]
call fcn.18001c6c0
xor edx, edx
lea r8, [rbp + 0x7f]
lea ecx, [rdx + 0x7f]
call fcn.1800ca4c0
jmp 0x1800e367c
cmp ebx, 0x2bc80
ja 0x1800e2fc4
je 0x1800e2f33
cmp ebx, 0x1a480
je 0x1800e2ec6
cmp ebx, 0x1ea80
je 0x1800e2ead
cmp ebx, 0x23080
je 0x1800e2e94
cmp ebx, 0x27680
jne 0x1800e367c
mov qword [rsp + 0x28], r12
lea rdx, [rbp + 0x7f]
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor r8d, r8d
mov ecx, 0xfb
call fcn.1800186b0
jmp 0x1800e367c
xor r9d, r9d
lea rcx, [rbp + 0x7f]
xor edx, edx
mov r8d, SHTestTokenMembership
call fcn.1800b6ca0
jmp 0x1800e367c
mov edx, 0x109
lea rcx, [rbp + 0x7f]
call fcn.1801000f0
mov r9d, ILFindLastID
jmp 0x1800e366e
mov dword [rsp + 0x68], 0x93
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x60], r12
xor r9d, r9d
mov qword [rsp + 0x58], r12
xor r8d, r8d
mov qword [rsp + 0x50], r12
xor edx, edx
mov qword [rsp + 0x48], r12
xor ecx, ecx
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call fcn.1800f32e0
lea rax, [rbp + 0x7f]
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], r12
mov ecx, 0xf6
call fcn.1800f7010
jmp 0x1800e367c
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x30], r12
xor r9d, r9d
mov qword [rsp + 0x28], r12
xor r8d, r8d
mov edx, 0xcd
mov qword [rsp + 0x20], rax
xor ecx, ecx
call fcn.18000e8e0
mov qword [rsp + 0x88], r12
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x80], r12
xor r9d, r9d
mov qword [rsp + 0x78], r12
xor r8d, r8d
mov qword [rsp + 0x70], r12
xor edx, edx
mov qword [rsp + 0x68], r12
xor ecx, ecx
mov qword [rsp + 0x60], r12
mov dword [rsp + 0x58], 0x71
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call fcn.18002c9b0
jmp 0x1800e367c
cmp ebx, 0x30280
je 0x1800e305d
cmp ebx, 0x34880
je 0x1800e3028
cmp ebx, 0x38e80
jne 0x1800e367c
xor r8d, r8d
lea rdx, [rbp + 0x7f]
mov ecx, 0x11c
call fcn.1800e82d0
xor edx, edx
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
lea r9, [rbp + 0x7f]
xor ecx, ecx
mov qword [rsp + 0x20], r12
lea r8d, [rdx + 0x76]
call fcn.1800e85c0
lea rdx, [rbp + 0x7f]
mov ecx, 0x2f
call fcn.1800e8fe0
jmp 0x1800e367c
xor r8d, r8d
lea rdx, [rbp + 0x7f]
lea ecx, [r8 + 0x69]
call fcn.1800becb0
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x28], r12
mov r9d, 0x7f
mov qword [rsp + 0x20], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180019e80
jmp 0x1800e367c
mov r9d, 0x29
lea r8, [rbp + 0x7f]
xor edx, edx
xor ecx, ecx
call fcn.1800b9b50
xor edx, edx
mov qword [rsp + 0x20], r12
lea r9, [rbp + 0x7f]
xor ecx, ecx
lea r8d, [rdx + 0x65]
call fcn.18007ef40
jmp 0x1800e367c
xor r8d, r8d
lea rdx, [rbp + 0x7f]
mov ecx, 0x112
call fcn.18007ae90
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x28], r12
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
xor edx, edx
mov ecx, SHUnicodeToAnsi
call fcn.1800d21c0
lea rdx, [rbp + 0x7f]
mov ecx, 0x44
call fcn.1800e9760
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor r8d, r8d
lea rcx, [rbp + 0x7f]
mov edx, 0x8f
call fcn.180075620
jmp 0x1800e367c
cmp ebx, 0x64a80
ja 0x1800e3440
je 0x1800e33d9
cmp ebx, 0x53280
ja 0x1800e32c5
je 0x1800e32ad
cmp ebx, 0x41a80
je 0x1800e3255
cmp ebx, 0x46080
je 0x1800e3232
cmp ebx, 0x4a680
je 0x1800e31d6
cmp ebx, 0x4ec80
jne 0x1800e367c
xor r9d, r9d
lea rdx, [rbp + 0x7f]
xor r8d, r8d
mov ecx, 0xf6
call fcn.1800ea210
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x28], r12
mov r9d, 0x4d
mov qword [rsp + 0x20], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180020720
mov qword [rsp + 0x88], r12
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x80], r12
xor r9d, r9d
mov qword [rsp + 0x78], r12
xor r8d, r8d
mov qword [rsp + 0x70], r12
xor ecx, ecx
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x60], r12
lea edx, [r9 + 0x20]
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call fcn.1800ea700
jmp 0x1800e367c
mov qword [rsp + 0x28], r12
lea rdx, [rbp + 0x7f]
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor r8d, r8d
mov ecx, 0xfc
call fcn.1800186b0
mov qword [rsp + 0x50], r12
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x48], r12
mov r9d, 0xeb
mov qword [rsp + 0x40], r12
xor r8d, r8d
mov qword [rsp + 0x38], r12
xor edx, edx
mov qword [rsp + 0x30], rax
xor ecx, ecx
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call fcn.1800e5180
jmp 0x1800e367c
mov qword [rsp + 0x28], r12
lea rcx, [rbp + 0x7f]
xor r9d, r9d
mov dword [rsp + 0x20], 0xff
xor r8d, r8d
xor edx, edx
call fcn.180076c80
jmp 0x1800e367c
xor r9d, r9d
lea r8, [rbp + 0x7f]
mov edx, 0x9c
xor ecx, ecx
call fcn.18000e590
xor edx, edx
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], r12
lea ecx, [rdx + 0x70]
call fcn.180010740
xor r8d, r8d
lea r9, [rbp + 0x7f]
xor ecx, ecx
lea edx, [r8 + 0x5d]
call fcn.18001c6c0
xor r8d, r8d
lea rcx, [rbp + 0x7f]
lea edx, [r8 + 0x67]
call fcn.180012590
jmp 0x1800e367c
lea r9, [rbp + 0x7f]
xor r8d, r8d
xor edx, edx
mov ecx, 0xd0
call fcn.1800ba480
jmp 0x1800e367c
cmp ebx, 0x57880
je 0x1800e3394
cmp ebx, 0x5be80
je 0x1800e3368
cmp ebx, 0x60480
jne 0x1800e367c
mov edx, 0x76
lea rcx, [rbp + 0x7f]
call fcn.1800f2df0
lea r9, [rbp + 0x7f]
xor r8d, r8d
xor edx, edx
mov ecx, 0xdb
call fcn.1800ba480
mov qword [rsp + 0x58], r12
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x50], r12
xor r9d, r9d
mov qword [rsp + 0x48], r12
xor r8d, r8d
mov dword [rsp + 0x40], 0x23
xor edx, edx
mov qword [rsp + 0x38], r12
xor ecx, ecx
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
call fcn.18000c4f0
lea rax, [rbp + 0x7f]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov edx, SHRegGetIntW
xor ecx, ecx
call fcn.180025e00
jmp 0x1800e367c
xor r8d, r8d
lea rcx, [rbp + 0x7f]
lea edx, [r8 + 0x6c]
call fcn.18007a010
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor edx, edx
lea rcx, [rbp + 0x7f]
lea r8d, [r9 + 0x46]
call fcn.1800ed6d0
jmp 0x1800e367c
mov qword [rsp + 0x28], r12
lea r8, [rbp + 0x7f]
mov r9d, 0x11a
mov qword [rsp + 0x20], r12
xor edx, edx
xor ecx, ecx
call fcn.1800eb360
mov r9d, 0x1d
lea r8, [rbp + 0x7f]
xor edx, edx
xor ecx, ecx
call fcn.1800b9b50
xor r8d, r8d
lea rdx, [rbp + 0x7f]
lea ecx, [r8 + 0x47]
call fcn.1800ebd60
jmp 0x1800e367c
mov qword [rsp + 0x88], r12
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x80], r12
xor r9d, r9d
mov qword [rsp + 0x78], r12
xor r8d, r8d
mov qword [rsp + 0x70], r12
xor edx, edx
mov qword [rsp + 0x68], r12
xor ecx, ecx
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x40
mov qword [rsp + 0x20], r12
call fcn.1800ee150
jmp 0x1800e367c
cmp ebx, 0x76280
ja 0x1800e35fa
je 0x1800e3585
cmp ebx, 0x69080
je 0x1800e3539
cmp ebx, 0x6d680
je 0x1800e34bd
cmp ebx, 0x71c80
jne 0x1800e367c
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor edx, edx
lea rcx, [rbp + 0x7f]
mov r8d, 0xbc
call fcn.1800ed6d0
xor r9d, r9d
lea rdx, [rbp + 0x7f]
xor r8d, r8d
mov ecx, SHUnicodeToAnsi
call fcn.1800085a0
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor r8d, r8d
lea rcx, [rbp + 0x7f]
mov edx, 0xde
call fcn.180075620
jmp 0x1800e367c
mov r8d, 0x79
lea rdx, [rbp + 0x7f]
xor ecx, ecx
call fcn.18010b230
mov qword [rsp + 0x60], r12
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x58], r12
xor r9d, r9d
mov qword [rsp + 0x50], r12
xor r8d, r8d
mov qword [rsp + 0x48], rax
xor ecx, ecx
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
lea edx, [r9 + 0x6f]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call fcn.1800eeb60
xor r9d, r9d
mov qword [rsp + 0x30], r12
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x28], r12
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea edx, [r9 + 0x44]
call fcn.180077a30
jmp 0x1800e367c
xor r8d, r8d
lea rcx, [rbp + 0x7f]
mov edx, 0xaf
call fcn.180012590
xor edx, edx
lea r9, [rbp + 0x7f]
xor ecx, ecx
lea r8d, [rdx + 0x41]
call fcn.18007e440
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], r12
xor edx, edx
mov ecx, 0x12a
call fcn.180073d50
jmp 0x1800e367c
lea r9, [rbp + 0x7f]
xor r8d, r8d
mov edx, 0x11f
xor ecx, ecx
call fcn.180024b60
mov qword [rsp + 0x30], r12
lea r9, [rbp + 0x7f]
mov qword [rsp + 0x28], r12
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], r12
mov r8d, 0x96
call fcn.1800e85c0
xor r9d, r9d
lea rcx, [rbp + 0x7f]
xor edx, edx
mov r8d, 0xa4
call fcn.1800cfa10
mov qword [rsp + 0x38], r12
lea rdx, [rbp + 0x7f]
xor r9d, r9d
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
xor r8d, r8d
mov qword [rsp + 0x20], r12
lea ecx, [r9 + 0x16]
call fcn.1800090b0
jmp 0x1800e367c
cmp ebx, 0x7a880
je 0x1800e363f
cmp ebx, 0x7ee80
je 0x1800e362f
cmp ebx, 0x83480
jne 0x1800e367c
lea rax, [rbp + 0x7f]
mov r9d, 0x7b
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor edx, edx
xor ecx, ecx
call fcn.1800ce700
jmp 0x1800e367c
mov edx, reloc.SHLWAPI.dll_SHUnicodeToAnsi
lea rcx, [rbp + 0x7f]
call fcn.1800ef630
jmp 0x1800e367c
mov edx, 0x5b
lea rcx, [rbp + 0x7f]
call fcn.180011620
lea rax, [rbp + 0x7f]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor edx, edx
mov ecx, 0xce
call fcn.18000bf30
mov r9d, 0x101
xor r8d, r8d
lea rcx, [rbp + 0x7f]
xor edx, edx
call fcn.1800ef060
imul eax, r13d, 0x8c
add ebx, eax
cmp ebx, r15d
jbe 0x1800e2c00
lea edi, [r13 + 0x6a4]
mov ebx, r13d
cmp r13d, edi
jae 0x1800e423c
cmp ebx, 0x3d2
ja 0x1800e3d77
je 0x1800e3d08
cmp ebx, 0x210
ja 0x1800e3a51
je 0x1800e39b3
cmp ebx, 0x148
ja 0x1800e38aa
je 0x1800e384a
mov eax, ebx
sub eax, 0x80
je 0x1800e377d
sub eax, 0x32
je 0x1800e3768
sub eax, 0x32
je 0x1800e3719
cmp eax, 0x32
jne 0x1800e4231
lea rdx, [rbp + 0x7f]
lea ecx, [rax + 0x56]
call fcn.1800f0f70
jmp 0x1800e4231
mov eax, 0xfffffff6
jmp 0x1800e4bf2
mov eax, edi
jmp 0x1800e4bf2
xor r9d, r9d
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
lea rdx, [rbp + 0x7f]
xor r8d, r8d
mov qword [rsp + 0x20], r12
lea ecx, [r9 + 0x43]
call fcn.18007c460
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x7f]
xor ecx, ecx
lea edx, [r9 + 0x6a]
call fcn.1800f0a60
mov r8d, 0x91
lea rdx, [rbp + 0x7f]
xor ecx, ecx
call fcn.180103090
jmp 0x1800e4231
xor r8d, r8d
lea rdx, [rbp + 0x7f]
lea ecx, [r8 + 0x3f]
call fcn.1800c7380
jmp 0x1800e4231
lea rdx, [rbp + 0x7f]
mov ecx, 0x83
call fcn.1800efac0
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x28], r12
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
xor edx, edx
mov ecx, 0x121
call fcn.180028e80
mov qword [rsp + 0xc0], r12
lea rax, [rbp + 0x7f]
mov qword [rsp + 0xb8], r12
xor r9d, r9d
mov qword [rsp + 0xb0], r12
xor r8d, r8d
mov qword [rsp + 0xa8], r12
xor edx, edx
mov qword [rsp + 0xa0], rax
xor ecx, ecx
mov qword [rsp + 0x98], r12
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x88], r12
mov qword [rsp + 0x80], r12
mov qword [rsp + 0x78], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x48], 0xdb
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call fcn.1800efe10
jmp 0x1800e4231
lea r9, [rbp + 0x7f]
mov qword [rsp + 0x20], r12
xor r8d, r8d
xor edx, edx
mov ecx, 0xa7
call fcn.1800f1360
lea r8, [rbp + 0x7f]
mov edx, 0x8b
xor ecx, ecx
call fcn.1800c1ca0
mov r8d, SHTestTokenMembership
lea rdx, [rbp + 0x7f]
xor ecx, ecx
call fcn.1800d1140
mov qword [rsp + 0x30], r12
lea r9, [rbp + 0x7f]
mov dword [rsp + 0x28], 0x8a
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], r12
xor ecx, ecx
call fcn.1800f1ab0
jmp 0x1800e4231
mov eax, ebx
sub eax, 0x17a
je 0x1800e397c
sub eax, 0x32
je 0x1800e3966
cmp eax, 0x32
jne 0x1800e4231
mov qword [rsp + 0x88], r12
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x80], r12
xor r9d, r9d
mov qword [rsp + 0x78], r12
xor r8d, r8d
mov qword [rsp + 0x70], r12
xor edx, edx
mov qword [rsp + 0x68], r12
xor ecx, ecx
mov qword [rsp + 0x60], r12
mov dword [rsp + 0x58], 0x19
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call fcn.18002c9b0
mov edx, 0x10d
lea rcx, [rbp + 0x7f]
call fcn.1800f2df0
lea r9, [rbp + 0x7f]
mov qword [rsp + 0x20], r12
xor edx, edx
xor ecx, ecx
mov r8d, reloc.SHELL32.dll_SHTestTokenMembership
call fcn.180018340
xor r8d, r8d
lea rcx, [rbp + 0x7f]
lea edx, [r8 + 0x5a]
call fcn.18007a010
jmp 0x1800e4231
xor edx, edx
lea rcx, [rbp + 0x7f]
mov r8d, 0x84
call fcn.1800f2b20
jmp 0x1800e4231
mov edx, 0x11c
lea rcx, [rbp + 0x7f]
call fcn.180011f70
lea r9, [rbp + 0x7f]
xor r8d, r8d
xor edx, edx
mov ecx, 0xc5
call fcn.1800ba480
mov r8d, 0xb7
lea rdx, [rbp + 0x7f]
xor ecx, ecx
call fcn.1800e64e0
jmp 0x1800e4231
lea rax, [rbp + 0x7f]
xor r9d, r9d
xor edx, edx
mov qword [rsp + 0x20], rax
xor ecx, ecx
mov r8d, 0x99
call fcn.1800fad20
mov qword [rsp + 0x50], r12
lea r9, [rbp + 0x7f]
mov dword [rsp + 0x48], SHUnicodeToAnsi
xor r8d, r8d
mov qword [rsp + 0x40], r12
xor edx, edx
mov qword [rsp + 0x38], r12
xor ecx, ecx
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call fcn.1800f6120
mov dword [rsp + 0x68], 0x5c
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x60], r12
xor r9d, r9d
mov qword [rsp + 0x58], r12
xor r8d, r8d
mov qword [rsp + 0x50], r12
xor edx, edx
mov qword [rsp + 0x48], r12
xor ecx, ecx
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call fcn.1800f32e0
jmp 0x1800e4231
cmp ebx, 0x30a
ja 0x1800e3bb3
je 0x1800e3b4d
mov eax, ebx
sub eax, 0x242
je 0x1800e3b2b
sub eax, 0x32
je 0x1800e3b15
sub eax, 0x32
je 0x1800e3af0
cmp eax, 0x32
jne 0x1800e4231
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor edx, edx
lea r8d, [rax + 3]
lea rcx, [rbp + 0x7f]
call fcn.1800f43f0
lea r8, [rbp + 0x7f]
mov edx, 0x71
xor ecx, ecx
call fcn.1800c1ca0
xor r9d, r9d
mov dword [rsp + 0x28], 0x127
lea r8, [rbp + 0x7f]
mov qword [rsp + 0x20], r12
xor edx, edx
xor ecx, ecx
call fcn.180017830
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x28], r12
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
xor edx, edx
mov ecx, SHSetFolderPathA
call fcn.1800c8a90
jmp 0x1800e4231
lea rax, [rbp + 0x7f]
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], r12
mov ecx, 0x11d
call fcn.1800f7010
jmp 0x1800e4231
mov r8d, 0xa3
lea rdx, [rbp + 0x7f]
xor ecx, ecx
call fcn.180103090
jmp 0x1800e4231
xor edx, edx
lea rcx, [rbp + 0x7f]
lea r8d, [rdx + 0x65]
call fcn.18000f610
lea rdx, [rbp + 0x7f]
mov ecx, 0x93
call fcn.1800f41b0
jmp 0x1800e4231
mov qword [rsp + 0x88], r12
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x80], r12
xor r9d, r9d
mov qword [rsp + 0x78], r12
xor r8d, r8d
mov qword [rsp + 0x70], r12
xor ecx, ecx
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x60], r12
lea edx, [r9 + 0x2f]
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call fcn.1800ea700
jmp 0x1800e4231
mov eax, ebx
sub eax, 0x33c
je 0x1800e3cb7
sub eax, 0x32
je 0x1800e3c64
cmp eax, 0x32
jne 0x1800e4231
mov qword [rsp + 0x50], r12
lea r9, [rbp + 0x7f]
mov dword [rsp + 0x48], reloc.SHLWAPI.dll_SHRegGetIntW
xor r8d, r8d
mov qword [rsp + 0x40], r12
xor edx, edx
mov qword [rsp + 0x38], r12
xor ecx, ecx
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call fcn.1800f6120
lea rax, [rbp + 0x7f]
xor r9d, r9d
mov qword [rsp + 0x50], rax
xor r8d, r8d
mov qword [rsp + 0x48], r12
xor edx, edx
mov qword [rsp + 0x40], r12
xor ecx, ecx
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], reloc.SHLWAPI.dll_SHUnicodeToAnsi
mov qword [rsp + 0x20], r12
call fcn.18010dec0
xor edx, edx
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], r12
lea ecx, [rdx + 0x29]
call fcn.1800f7010
jmp 0x1800e4231
xor edx, edx
lea rcx, [rbp + 0x7f]
lea r8d, [rdx + 0x20]
call fcn.1800f54d0
mov qword [rsp + 0x48], r12
lea r8, [rbp + 0x7f]
mov dword [rsp + 0x40], 0x5c
xor r9d, r9d
mov qword [rsp + 0x38], r12
xor edx, edx
mov qword [rsp + 0x30], r12
xor ecx, ecx
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call fcn.18000ac80
mov edx, 0xef
lea rcx, [rbp + 0x7f]
call fcn.1800f5dc0
jmp 0x1800e4231
mov qword [rsp + 0x28], r12
lea rdx, [rbp + 0x7f]
xor r9d, r9d
mov dword [rsp + 0x20], 0x1f
xor r8d, r8d
xor ecx, ecx
call fcn.1800cc450
lea rax, [rbp + 0x7f]
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], r12
mov r8d, 0xc9
call fcn.1800f4db0
lea rdx, [rbp + 0x7f]
mov ecx, 0x49
call fcn.1800f5220
jmp 0x1800e4231
lea r9, [rbp + 0x7f]
mov qword [rsp + 0x20], r12
xor r8d, r8d
xor edx, edx
mov ecx, 0xfa
call fcn.1800f81f0
lea rax, [rbp + 0x7f]
mov dword [rsp + 0x28], 0x88
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800f8650
lea rax, [rbp + 0x7f]
xor r9d, r9d
mov qword [rsp + 0x48], rax
xor edx, edx
mov qword [rsp + 0x40], r12
xor ecx, ecx
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
lea r8d, [r9 + 0x6e]
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call fcn.1800f88a0
jmp 0x1800e4231
cmp ebx, 0x594
ja 0x1800e4036
je 0x1800e3fea
cmp ebx, 0x4cc
ja 0x1800e3f04
je 0x1800e3ea0
mov eax, ebx
sub eax, 0x404
je 0x1800e3e40
sub eax, 0x32
je 0x1800e3e27
sub eax, 0x32
je 0x1800e3dfe
cmp eax, 0x32
jne 0x1800e4231
lea r9, [rbp + 0x7f]
mov qword [rsp + 0x20], r12
xor r8d, r8d
lea ecx, [rax - 0x27]
xor edx, edx
call fcn.1800fc610
xor r9d, r9d
lea rcx, [rbp + 0x7f]
xor edx, edx
mov r8d, 0x90
call fcn.1800cfd50
mov r9d, 0xfd
lea rdx, [rbp + 0x7f]
xor r8d, r8d
xor ecx, ecx
call fcn.180023b20
jmp 0x1800e4231
xor r9d, r9d
lea rcx, [rbp + 0x7f]
xor r8d, r8d
lea edx, [r9 + 0x3b]
call fcn.1800cd060
xor edx, edx
lea rcx, [rbp + 0x7f]
mov r8d, 0xc7
call fcn.1800fbf70
jmp 0x1800e4231
mov r9d, 0x91
lea rdx, [rbp + 0x7f]
xor r8d, r8d
xor ecx, ecx
call fcn.180023b20
jmp 0x1800e4231
xor r9d, r9d
mov dword [rsp + 0x20], 0xaf
xor r8d, r8d
lea rdx, [rbp + 0x7f]
xor ecx, ecx
call fcn.1800c2500
lea rax, [rbp + 0x7f]
xor r9d, r9d
xor edx, edx
mov qword [rsp + 0x20], rax
xor ecx, ecx
mov r8d, 0xcc
call fcn.1800fad20
mov edx, 0x96
lea rcx, [rbp + 0x7f]
call fcn.18001c3f0
xor r9d, r9d
mov qword [rsp + 0x20], r12
mov r8d, 0xdb
lea rdx, [rbp + 0x7f]
xor ecx, ecx
call fcn.1800d7ff0
jmp 0x1800e4231
mov edx, 0x76
lea rcx, [rbp + 0x7f]
call fcn.1800fcd30
lea rdx, [rbp + 0x7f]
mov ecx, 0x87
call fcn.1800fd2d0
xor r9d, r9d
mov qword [rsp + 0x28], r12
xor r8d, r8d
mov dword [rsp + 0x20], 0x81
lea rdx, [rbp + 0x7f]
xor ecx, ecx
call fcn.18007d670
lea rax, [rbp + 0x7f]
xor r9d, r9d
mov qword [rsp + 0x30], rax
xor r8d, r8d
mov qword [rsp + 0x28], r12
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0x5b
call fcn.18007e800
jmp 0x1800e4231
mov eax, ebx
sub eax, 0x4fe
je 0x1800e3fad
sub eax, 0x32
je 0x1800e3f3e
cmp eax, 0x32
jne 0x1800e4231
lea rdx, [rbp + 0x7f]
lea ecx, [rax + 8]
call fcn.1800fd2d0
lea rdx, [rbp + 0x7f]
mov ecx, 0x98
call fcn.1800f0f70
jmp 0x1800e4231
lea rax, [rbp + 0x7f]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov edx, 0xce
xor ecx, ecx
call fcn.1800fdb20
mov r8d, 0xc9
lea rdx, [rbp + 0x7f]
xor ecx, ecx
call fcn.1800213f0
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x28], r12
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
xor edx, edx
mov ecx, 0xda
call fcn.1800c8a90
xor r9d, r9d
mov qword [rsp + 0x28], r12
xor r8d, r8d
mov dword [rsp + 0x20], 0x99
lea rdx, [rbp + 0x7f]
xor ecx, ecx
call fcn.18007d670
jmp 0x1800e4231
xor r9d, r9d
lea rcx, [rbp + 0x7f]
xor r8d, r8d
lea edx, [r9 + 0x53]
call fcn.1800cd060
xor r8d, r8d
lea rdx, [rbp + 0x7f]
mov ecx, 0x12a
call fcn.1800dc760
xor r9d, r9d
lea rdx, [rbp + 0x7f]
xor r8d, r8d
mov ecx, 0xad
call fcn.180014710
jmp 0x1800e4231
xor edx, edx
lea rcx, [rbp + 0x7f]
lea r8d, [rdx + 0x50]
call fcn.1800fde00
mov qword [rsp + 0x30], r12
lea r9, [rbp + 0x7f]
mov dword [rsp + 0x28], 0xed
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], r12
xor ecx, ecx
call fcn.1800fe9c0
xor edx, edx
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, [rbp + 0x7f]
lea ecx, [rdx + 0x7d]
call fcn.18000b440
jmp 0x1800e4231
cmp ebx, 0x65c
ja 0x1800e417c
je 0x1800e4150
mov eax, ebx
sub eax, 0x5c6
je 0x1800e40e3
sub eax, 0x32
je 0x1800e40af
cmp eax, 0x32
jne 0x1800e4231
lea rdx, [rbp + 0x7f]
lea ecx, [rax + 0x1f]
call fcn.18010bb20
mov edx, 0x113
lea rcx, [rbp + 0x7f]
call fcn.1801000f0
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [rbp + 0x7f]
mov qword [rsp + 0x20], r12
xor edx, edx
mov ecx, 0x102
call fcn.180100480
xor r8d, r8d
lea rdx, [rbp + 0x7f]
lea ecx, [r8 + 0x26]
call fcn.1800ebd60
jmp 0x1800e4231
xor r8d, r8d
lea rdx, [rbp + 0x7f]
mov ecx, 0xa8
call fcn.1800ebd60
xor r8d, r8d
lea rcx, [rbp + 0x7f]
lea edx, [r8 + 0x34]
call fcn.1800ffaf0
mov edx, 0x2f
lea rcx, [rbp + 0x7f]
call fcn.180101a40
jmp 0x1800e4231
mov qword [rsp + 0x30], r12
lea r9, [rbp + 0x7f]
mov dword [rsp + 0x28], 0xfd
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], r12
xor ecx, ecx
call fcn.1800fe9c0
mov qword [rsp + 0x30], r12
lea r8, [rbp + 0x7f]
mov qword [rsp + 0x28], r12
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x20], SHTestTokenMembership
xor ecx, ecx
call fcn.1800c65d0
xor edx, edx
lea rcx, [rbp + 0x7f]
mov r8d, 0xdd
call fcn.1800fbf70
lea r9, [rbp + 0x7f]
xor r8d, r8d
mov edx, 0xc5
xor ecx, ecx
call fcn.1800fee00
jmp 0x1800e4231
mov edx, 0x45
lea rcx, [rbp + 0x7f]
call fcn.180101a40
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor r8d, r8d
lea rdx, [rbp + 0x7f]
mov ecx, 0xd1
call fcn.1800bf430
jmp 0x1800e4231
mov eax, ebx
sub eax, 0x68e
je 0x1800e4202
sub eax, 0x32
je 0x1800e41a9
cmp eax, 0x32
jne 0x1800e4231
xor r8d, r8d
lea rdx, [rbp + 0x7f]
mov ecx, 0x101
call fcn.1800dd6c0
jmp 0x1800e4231
mov qword [rsp + 0x30], r12
lea r9, [rbp + 0x7f]
mov dword [rsp + 0x28], 0x7c
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], r12
xor ecx, ecx
call fcn.1800f1ab0
xor r8d, r8d
lea rcx, [rbp + 0x7f]
mov edx, 0xc6
call fcn.180012590
lea r9, [rbp + 0x7f]
xor r8d, r8d
mov edx, 0xc0
xor ecx, ecx
call fcn.1801009e0
mov r8d, 0x5d
lea rdx, [rbp + 0x7f]
xor ecx, ecx
call fcn.18010b230
jmp 0x1800e4231
mov qword [rsp + 0x40], r12
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x38], rax
mov r9d, SHRegGetIntW
mov qword [rsp + 0x30], r12
xor r8d, r8d
mov qword [rsp + 0x28], r12
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], r12
call fcn.18002b330
add ebx, 0x32
cmp ebx, edi
jb 0x1800e36a1
mov ebx, dword [rbp + 0x6f]
lea edi, [r13 + 0x13b]
cmp r13d, edi
jae 0x1800e4bf0
lea rsi, [0x180000000]
lea r14, str.OB_CERT_OID_tag_creation_failed
nop dword [rax]
cmp r13d, 0x185
ja 0x1800e4b1c
je 0x1800e4aeb
lea eax, [r13 - 0x80]
cmp eax, 0xfc
ja case.0x1800e4294.157
movzx eax, byte [rsi + rax + 0xe4c88]
mov ecx, dword [rsi + rax*4 + 0xe4c10]
add rcx, rsi
jmp rcx
mov qword [rsp + 0x80], r12
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x78], r12
xor r9d, r9d
mov qword [rsp + 0x70], rax
xor r8d, r8d
mov qword [rsp + 0x68], r12
xor edx, edx
mov qword [rsp + 0x60], r12
xor ecx, ecx
mov dword [rsp + 0x58], 0x40
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call fcn.18010d7b0
lea rax, [rbp + 0x7f]
xor r9d, r9d
mov qword [rsp + 0x50], rax
xor r8d, r8d
mov qword [rsp + 0x48], r12
xor edx, edx
mov qword [rsp + 0x40], r12
xor ecx, ecx
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0xeb
mov qword [rsp + 0x20], r12
call fcn.18010dec0
lea rax, [rbp + 0x7f]
xor r9d, r9d
mov qword [rsp + 0x30], rax
xor r8d, r8d
mov qword [rsp + 0x28], r12
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0x10f
call fcn.18007e800
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor r8d, r8d
lea rdx, [rbp + 0x7f]
lea ecx, [r9 + 0x26]
call fcn.180021b60
jmp case.0x1800e4294.157
mov r9d, 0xfd
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x7f]
xor edx, edx
xor ecx, ecx
call fcn.18010cd30
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor r8d, r8d
lea rcx, [rbp + 0x7f]
mov edx, 0x105
call fcn.1800d9450
lea r9, [rbp + 0x7f]
xor r8d, r8d
xor edx, edx
mov ecx, 0x112
call fcn.1800c99c0
jmp case.0x1800e4294.157
mov qword [rsp + 0x80], r12
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x78], r12
xor r9d, r9d
mov qword [rsp + 0x70], rax
xor r8d, r8d
mov qword [rsp + 0x68], r12
xor edx, edx
mov qword [rsp + 0x60], r12
xor ecx, ecx
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x48], 0x42
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call fcn.180104890
xor r8d, r8d
lea rdx, [rbp + 0x7f]
mov ecx, SHTestTokenMembership
call fcn.18007ae90
mov dword [rsp + 0x28], 0x10f
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor r8d, r8d
lea rcx, [rbp + 0x7f]
xor edx, edx
call fcn.180105750
jmp case.0x1800e4294.157
mov qword [rsp + 0x48], r12
lea r8, [rbp + 0x7f]
mov dword [rsp + 0x40], 0x38
xor r9d, r9d
mov qword [rsp + 0x38], r12
xor edx, edx
mov qword [rsp + 0x30], r12
xor ecx, ecx
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call fcn.18000ac80
lea rax, [rbp + 0x7f]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov edx, SHTestTokenMembership
xor ecx, ecx
call fcn.180025e00
mov r8d, 0xc7
lea rdx, [rbp + 0x7f]
xor ecx, ecx
call fcn.180103090
mov qword [rsp + 0x60], r12
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x58], r12
xor r9d, r9d
mov qword [rsp + 0x50], r12
xor r8d, r8d
mov qword [rsp + 0x48], r12
xor edx, edx
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x3f
mov qword [rsp + 0x20], r12
call fcn.18007bab0
jmp case.0x1800e4294.157
lea rax, [rbp + 0x7f]
mov r9d, 0xa2
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor edx, edx
xor ecx, ecx
call fcn.1800ce700
mov edx, 0x24
lea rcx, [rbp + 0x7f]
call fcn.180101a40
jmp case.0x1800e4294.157
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x7f]
mov edx, SHSetFolderPathA
xor ecx, ecx
call fcn.1800d3940
jmp case.0x1800e4294.157
lea rax, [rbp + 0x7f]
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], r12
mov ecx, 0x11d
call fcn.180010740
mov r8d, 0xb5
lea rdx, [rbp + 0x7f]
xor ecx, ecx
call fcn.180103090
mov edx, 0x6e
lea rcx, [rbp + 0x7f]
call fcn.1800fcd30
jmp case.0x1800e4294.157
lea rdx, [rbp + 0x7f]
mov ecx, 0x7c
call fcn.18010bb20
lea rdx, [rbp + 0x7f]
mov ecx, 0x90
call fcn.1800efac0
mov edx, SHRegGetIntW
lea rcx, [rbp + 0x7f]
call fcn.18010c710
xor r9d, r9d
lea rax, [rbp + 0x7f]
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea edx, [r9 + 0x18]
call fcn.18002d180
jmp case.0x1800e4294.157
xor r8d, r8d
lea rdx, [rbp + 0x7f]
mov ecx, 0xbe
call fcn.1800dc760
mov qword [rsp + 0x40], r12
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x38], r12
xor r9d, r9d
mov qword [rsp + 0x30], r12
xor r8d, r8d
mov qword [rsp + 0x28], rax
xor edx, edx
mov ecx, 0x82
mov qword [rsp + 0x20], r12
call fcn.1801050c0
xor r8d, r8d
lea rdx, [rbp + 0x7f]
mov ecx, 0xff
call fcn.1800ebd60
jmp case.0x1800e4294.157
mov qword [rsp + 0x28], r12
lea rdx, [rbp + 0x7f]
xor r9d, r9d
mov dword [rsp + 0x20], SHTestTokenMembership
xor r8d, r8d
xor ecx, ecx
call fcn.1800dc210
lea r9, [rbp + 0x7f]
mov dword [rsp + 0x20], 0xea
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800774b0
jmp case.0x1800e4294.157
lea rax, [rbp + 0x7f]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor edx, edx
mov ecx, 0x106
call fcn.18000bf30
xor r9d, r9d
lea rcx, [rbp + 0x7f]
xor edx, edx
lea r8d, [r9 + 0x4f]
call fcn.1800c9e30
jmp case.0x1800e4294.157
xor r9d, r9d
lea rdx, [rbp + 0x7f]
xor ecx, ecx
lea r8d, [r9 + 0x30]
call fcn.1800c5910
jmp case.0x1800e4294.157
lea rdx, [rbp + 0x7f]
mov ecx, 0x44
call fcn.1800f5220
mov qword [rsp + 0x60], r12
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x58], r12
xor r9d, r9d
mov qword [rsp + 0x50], r12
xor r8d, r8d
mov qword [rsp + 0x48], r12
xor edx, edx
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0xa9
mov qword [rsp + 0x20], r12
call fcn.18007bab0
lea rax, [rbp + 0x7f]
xor r9d, r9d
xor edx, edx
mov qword [rsp + 0x20], rax
xor ecx, ecx
mov r8d, 0x124
call fcn.180007bc0
jmp case.0x1800e4294.157
xor r8d, r8d
lea rdx, [rbp + 0x7f]
lea ecx, [r8 + 0x72]
call fcn.18010d280
mov dword [rsp + 0x28], 0x119
jmp 0x1800e4427
mov qword [rsp + 0x30], r12
lea r8, [rbp + 0x7f]
mov dword [rsp + 0x28], 0x3d
xor r9d, r9d
xor edx, edx
mov qword [rsp + 0x20], r12
xor ecx, ecx
call fcn.180106450
xor r8d, r8d
lea rdx, [rbp + 0x7f]
lea ecx, [r8 + 0x33]
call fcn.1800c7380
jmp case.0x1800e4294.157
mov qword [rsp + 0x38], r12
lea rdx, [rbp + 0x7f]
mov qword [rsp + 0x30], r12
mov r9d, 0x12b
mov qword [rsp + 0x28], r12
xor r8d, r8d
xor ecx, ecx
mov qword [rsp + 0x20], r12
call fcn.18001adb0
xor r9d, r9d
mov dword [rsp + 0x20], 0xa9
xor r8d, r8d
lea rdx, [rbp + 0x7f]
xor ecx, ecx
call fcn.1800d06e0
xor r9d, r9d
lea rax, [rbp + 0x7f]
xor edx, edx
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea r8d, [r9 + 0x11]
call fcn.1800fad20
mov qword [rsp + 0x80], r12
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x78], r12
xor r9d, r9d
mov qword [rsp + 0x70], rax
xor r8d, r8d
mov qword [rsp + 0x68], r12
xor edx, edx
mov qword [rsp + 0x60], r12
xor ecx, ecx
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x48], 0x48
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call fcn.180104890
jmp case.0x1800e4294.157
xor edx, edx
lea r8, [rbp + 0x7f]
xor r9d, r9d
lea ecx, [rdx + 0x39]
call fcn.1800d5870
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor r8d, r8d
lea rcx, [rbp + 0x7f]
lea edx, [r9 + 6]
call fcn.1800b8010
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x7f]
xor edx, edx
mov ecx, SHTestTokenMembership
call fcn.18000b440
jmp case.0x1800e4294.157
lea r8, [rbp + 0x7f]
mov edx, 0xbc
xor ecx, ecx
call fcn.18010ca20
lea r9, [rbp + 0x7f]
xor r8d, r8d
mov edx, 0x93
xor ecx, ecx
call fcn.1801009e0
mov qword [rsp + 0x40], r12
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x38], r12
xor r9d, r9d
mov dword [rsp + 0x30], 0xec
xor r8d, r8d
mov qword [rsp + 0x28], r12
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rax
call fcn.1800bd150
lea rdx, [rbp + 0x7f]
mov ecx, 0x7f
call fcn.18010bb20
jmp case.0x1800e4294.157
lea r8, [rbp + 0x7f]
mov edx, 0x7a
xor ecx, ecx
call fcn.1800d0330
mov qword [rsp + 0x38], r12
lea rdx, [rbp + 0x7f]
mov qword [rsp + 0x30], r12
mov r9d, 0x41
mov qword [rsp + 0x28], r12
xor r8d, r8d
xor ecx, ecx
mov qword [rsp + 0x20], r12
call fcn.18001adb0
jmp case.0x1800e4294.157
xor r9d, r9d
lea rcx, [rbp + 0x7f]
xor r8d, r8d
lea edx, [r9 + 0x69]
call fcn.180024dc0
jmp case.0x1800e4294.157
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x28], r12
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov edx, 0xa1
xor ecx, ecx
call fcn.180102250
jmp case.0x1800e4294.157
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x7f]
mov edx, SHRegGetIntW
xor ecx, ecx
call fcn.1800d3940
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x28], r12
mov r9d, 0x3a
mov qword [rsp + 0x20], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180102dd0
jmp case.0x1800e4294.157
xor edx, edx
lea r8, [rbp + 0x7f]
lea ecx, [rdx + 0x6e]
call fcn.18000ce50
jmp case.0x1800e4294.157
mov r8d, 0x66
lea rdx, [rbp + 0x7f]
xor ecx, ecx
call fcn.18010b230
jmp case.0x1800e4294.157
mov edx, 0x85
lea rcx, [rbp + 0x7f]
call fcn.1800ef630
mov qword [rsp + 0x50], r12
lea r9, [rbp + 0x7f]
mov qword [rsp + 0x48], r12
xor r8d, r8d
mov qword [rsp + 0x40], r12
mov edx, 0x11d
mov qword [rsp + 0x38], r12
xor ecx, ecx
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call fcn.1800b8c50
xor r9d, r9d
mov qword [rsp + 0x28], r12
xor r8d, r8d
mov dword [rsp + 0x20], 0x69
xor edx, edx
lea rcx, [rbp + 0x7f]
call fcn.1800d8c70
jmp case.0x1800e4294.157
mov qword [rsp + 0x40], r12
lea rdx, [rbp + 0x7f]
mov qword [rsp + 0x38], r12
xor r9d, r9d
mov dword [rsp + 0x30], 0xbe
xor r8d, r8d
mov qword [rsp + 0x28], r12
xor ecx, ecx
mov qword [rsp + 0x20], r12
call fcn.180073260
jmp case.0x1800e4294.157
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor edx, edx
lea rcx, [rbp + 0x7f]
mov r8d, 0x121
call fcn.1800c3590
jmp case.0x1800e4294.157
mov r9d, 0x104
lea rcx, [rbp + 0x7f]
xor r8d, r8d
xor edx, edx
call fcn.1801038f0
xor r9d, r9d
lea rcx, [rbp + 0x7f]
xor edx, edx
mov r8d, 0xbb
call fcn.180103ee0
xor r9d, r9d
lea r8, [rbp + 0x7f]
xor edx, edx
mov ecx, 0x104
call fcn.180038780
jmp case.0x1800e4294.157
mov qword [rsp + 0x38], r12
lea rdx, [rbp + 0x7f]
xor r9d, r9d
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
xor r8d, r8d
mov qword [rsp + 0x20], r12
lea ecx, [r9 + 0x32]
call fcn.1800090b0
xor edx, edx
lea rcx, [rbp + 0x7f]
lea r8d, [rdx + 0x68]
call fcn.1800e6940
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea rdx, [rbp + 0x7f]
xor ecx, ecx
lea r8d, [r9 + 6]
call fcn.180105bd0
jmp case.0x1800e4294.157
mov r8d, 0x103
lea rdx, [rbp + 0x7f]
xor ecx, ecx
call fcn.18010b230
lea rax, [rbp + 0x7f]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov edx, 0x104
xor ecx, ecx
call fcn.180025e00
jmp case.0x1800e4294.157
mov eax, r13d
sub eax, 0x18e
je 0x1800e4bc6
sub eax, 9
je 0x1800e4b65
sub eax, 9
je 0x1800e4b4f
sub eax, 9
je 0x1800e4b47
cmp eax, 9
je 0x1800e4bf0
jmp case.0x1800e4294.157
mov ebx, dword [rbp + 0x7f]
jmp case.0x1800e4294.157
cmp dword [rbp + 0x7f], r12d
lea rcx, str.texture2DProjLod_s21_vf4_f1_
cmove rcx, r14
call fcn.18010fd70
jmp case.0x1800e4294.157
mov edx, 0x11d
xor ecx, ecx
call fcn.1801000f0
mov rdx, rax
lea rcx, str.Sauvegarde__s_...
call fcn.18010fd70
mov dword [rsp + 0x50], 0x13
xor r9d, r9d
mov qword [rsp + 0x48], r12
xor r8d, r8d
mov qword [rsp + 0x40], r12
xor edx, edx
mov qword [rsp + 0x38], r12
xor ecx, ecx
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call fcn.1800c2ac0
mov rdx, rax
lea rcx, str.Raw_text_subtitle
call fcn.18010fd70
jmp case.0x1800e4294.157
mov dword [rsp + 0x28], 0x12
lea r9, [rbp + 0x7f]
xor r8d, r8d
mov qword [rsp + 0x20], r12
xor edx, edx
xor ecx, ecx
call fcn.18010e4f0
add r13d, 9
cmp r13d, edi
jb 0x1800e4260
mov eax, ebx
mov rbx, qword [rsp + 0x110]
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret