Function at 0x180026b20
Capabilities:
Set registry value

Disassembly:
push rbp
push rbx
push rdi
push r12
push r15
lea rbp, [rsp - 0x160]
sub rsp, 0x260
mov rax, qword [0x1800c6d00]
xor rax, rsp
mov qword [rbp + 0x150], rax
mov r8, qword [rcx + 0x10]
mov r15, rcx
mov ecx, 0x8000
movzx eax, word [r8]
mov edx, eax
cmp ax, cx
jb 0x18001dada
mov eax, dword [0x1800cab54]
shl eax, 0x10
or edx, eax
xor ebx, ebx
mov qword [rsp + 0x298], rsi
lea r12, [0x1800c5a80]
mov qword [rsp + 0x2a8], r14
mov eax, ebx
mov rcx, r12
cmp dword [rcx], edx
je 0x18001db49
inc eax
add rcx, 0x20
cmp eax, 0x4e
jb 0x18001daf8
mov eax, 0xd
mov edi, 1
mov word [0x1800cc9e8], ax
mov r14, qword [rsp + 0x2a8]
movzx eax, di
mov rsi, qword [rsp + 0x298]
mov rcx, qword [rbp + 0x150]
xor rcx, rsp
call fcn.180032180
add rsp, 0x260
pop r15
pop r12
pop rdi
pop rbx
pop rbp
ret
movsxd r14, eax
shl r14, 5
add r14, r12
je 0x18001db07
cmp dword [r14 + 0x10], ebx
je 0x18001db07
cmp qword [r14 + 8], rbx
je 0x18001db07
mov eax, 0xa01
cmp word [r15 + 0xe], ax
jne 0x18001dc5a
cmp dword [0x1800c6530], 4
jne 0x18001dc46
test r8, r8
je 0x18001dc50
mov eax, 0x1005
cmp word [r8], ax
jne 0x18001dc46
mov eax, 0xffff
cmp word [r8 + 2], ax
jne 0x18001dc46
cmp qword [r8 + 4], rbx
jne 0x18001dc46
mov qword [rsp + 0x2a0], r13
lea rdi, [0x1800c5a82]
mov r13d, 7
mov esi, ebx
cmp dword [rdi + 0xe], ebx
je 0x18001dc2b
movzx eax, word [rdi]
test ax, ax
je 0x18001dbdc
cmp eax, dword [0x1800cab54]
jne 0x18001dc2b
cmp qword [rdi + 6], rbx
je 0x18001dc2b
movups xmm0, xmmword [r15]
movsxd rdx, esi
lea rcx, [rsp + 0x30]
shl rdx, 5
movups xmmword [rsp + 0x30], xmm0
add rdx, r12
mov word [rsp + 0x3e], r13w
mov qword [rsp + 0x40], rbx
call qword [r14 + 8]
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x18001dc2b
mov rcx, qword [rcx + 4]
test rcx, rcx
je 0x18001dc2b
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rax, qword [rsp + 0x40]
mov qword [rax + 4], rbx
inc esi
add rdi, 0x20
cmp esi, 0x4e
jb 0x18001dbc7
mov r13, qword [rsp + 0x2a0]
movzx edi, bx
jmp 0x18001db18
mov eax, 0xb
jmp 0x18001db0c
mov eax, 0xa
jmp 0x18001db0c
mov rax, qword [r14 + 8]
mov rdx, r14
mov rcx, r15
call rax
mov rcx, qword [0x1800cc980]
movzx edi, ax
call fcn.180006a80
test al, 0x20
je 0x18001db18
test di, di
jne 0x18001db18
movzx ecx, word [r15 + 0xe]
mov r14, qword [r15 + 0x10]
sub ecx, 1
je 0x18001dcac
sub ecx, 1
je 0x18001dcac
sub ecx, 1
je 0x18001dcac
sub ecx, 4
je 0x18001dcac
cmp ecx, 1
jne 0x18001db18
test r14, r14
je 0x18001dc50
lea r8, [0x1800aa838]
mov edx, 0x1f4
lea rcx, [rsp + 0x50]
call fcn.180065ef0
movzx ecx, word [r14 + 2]
sub ecx, 3
je 0x18001df96
sub ecx, 1
je 0x18001dea9
sub ecx, 1
je 0x18001de47
cmp ecx, 1
je 0x18001dd07
lea r8, str.TWON____
mov edx, 0x1f4
lea rcx, [rsp + 0x50]
call fcn.1800790b8
jmp 0x18001e067
mov rcx, qword [r14 + 4]
call qword [sym.imp.KERNEL32.dll_GlobalLock]
mov rsi, rax
test rax, rax
je 0x18001e067
lea r8, str.TWON_RANGE
mov edx, 0x1f4
lea rcx, [rsp + 0x50]
call fcn.1800790b8
movzx ecx, word [rsi]
call fcn.180020210
mov r8, rax
lea rcx, [rsp + 0x50]
mov edx, 0x1f4
call fcn.1800790b8
lea r8, str._CurVal
mov edx, 0x1f4
lea rcx, [rsp + 0x50]
call fcn.1800790b8
movzx r8d, word [rsi]
lea r9, [rsi + 0x12]
mov edx, 0x1f4
mov dword [rsp + 0x20], ebx
lea rcx, [rsp + 0x50]
call fcn.18001f920
lea r8, str._DefVal
mov edx, 0x1f4
lea rcx, [rsp + 0x50]
call fcn.1800790b8
movzx r8d, word [rsi]
lea r9, [rsi + 0xe]
mov edx, 0x1f4
mov dword [rsp + 0x20], ebx
lea rcx, [rsp + 0x50]
call fcn.18001f920
lea r8, str._Range_
mov edx, 0x1f4
lea rcx, [rsp + 0x50]
call fcn.1800790b8
movzx r8d, word [rsi]
lea r9, [rsi + 2]
mov edx, 0x1f4
mov dword [rsp + 0x20], ebx
lea rcx, [rsp + 0x50]
call fcn.18001f920
lea r8, [0x1800aa8f4]
mov edx, 0x1f4
lea rcx, [rsp + 0x50]
call fcn.1800790b8
movzx r8d, word [rsi]
lea r9, [rsi + 6]
mov edx, 0x1f4
mov dword [rsp + 0x20], ebx
lea rcx, [rsp + 0x50]
call fcn.18001f920
lea r8, str.__Step
mov edx, 0x1f4
lea rcx, [rsp + 0x50]
call fcn.1800790b8
lea r9, [rsi + 0xa]
movzx r8d, word [rsi]
lea rcx, [rsp + 0x50]
mov edx, 0x1f4
mov dword [rsp + 0x20], ebx
call fcn.18001f920
jmp 0x18001e05d
mov rcx, qword [r14 + 4]
call qword [sym.imp.KERNEL32.dll_GlobalLock]
mov rsi, rax
test rax, rax
je 0x18001e067
lea r8, str.TWON_ONEVALUE
mov edx, 0x1f4
lea rcx, [rsp + 0x50]
call fcn.1800790b8
movzx ecx, word [rsi]
call fcn.180020210
mov r8, rax
lea rcx, [rsp + 0x50]
mov edx, 0x1f4
call fcn.1800790b8
lea r8, str._Val
mov edx, 0x1f4
lea rcx, [rsp + 0x50]
call fcn.1800790b8
lea r9, [rsi + 2]
jmp 0x18001de2b
mov rcx, qword [r14 + 4]
call qword [sym.imp.KERNEL32.dll_GlobalLock]
mov rsi, rax
test rax, rax
je 0x18001e067
lea r8, str.TWON_ENUMERATION
mov edx, 0x1f4
lea rcx, [rsp + 0x50]
call fcn.1800790b8
movzx ecx, word [rsi]
call fcn.180020210
mov r8, rax
lea rcx, [rsp + 0x50]
mov edx, 0x1f4
call fcn.1800790b8
lea r8, [0x1800a9860]
mov edx, 0x1f4
lea rcx, [rsp + 0x50]
call fcn.1800790b8
lea rcx, [rsp + 0x50]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], bl
jne 0x18001df11
mov r9d, dword [rsi + 2]
lea rcx, [rsp + 0x50]
add rcx, rax
lea r8, str._ICnt_u_CurIX_u_DefIX_u_IList
mov edx, 0x1f4
sub rdx, rax
mov eax, dword [rsi + 0xa]
mov dword [rsp + 0x28], eax
mov eax, dword [rsi + 6]
mov dword [rsp + 0x20], eax
call fcn.180004550
cmp dword [rsi + 2], ebx
jbe 0x18001e05d
movzx r8d, word [rsi]
lea r9, [rsi + 0xe]
mov edx, 0x1f4
mov dword [rsp + 0x20], ebx
lea rcx, [rsp + 0x50]
call fcn.18001f920
cmp eax, 5
jbe 0x18001e05d
lea r8, [0x1800a9860]
mov edx, 0x1f4
lea rcx, [rsp + 0x50]
call fcn.1800790b8
inc ebx
cmp ebx, dword [rsi + 2]
jb 0x18001df50
jmp 0x18001e05d
mov rcx, qword [r14 + 4]
call qword [sym.imp.KERNEL32.dll_GlobalLock]
mov rsi, rax
test rax, rax
je 0x18001e067
lea r8, str.TWON_ARRAY
mov edx, 0x1f4
lea rcx, [rsp + 0x50]
call fcn.1800790b8
movzx ecx, word [rsi]
call fcn.180020210
mov r8, rax
lea rcx, [rsp + 0x50]
mov edx, 0x1f4
call fcn.1800790b8
lea rcx, [rsp + 0x50]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], bl
jne 0x18001dfe8
mov r9d, dword [rsi + 2]
lea rcx, [rsp + 0x50]
mov edx, 0x1f4
lea r8, str._ICnt_u_IList
sub rdx, rax
add rcx, rax
call fcn.180004550
cmp dword [rsi + 2], ebx
jbe 0x18001e05d
nop word [rax + rax]
movzx r8d, word [rsi]
lea r9, [rsi + 6]
mov edx, 0x1f4
mov dword [rsp + 0x20], ebx
lea rcx, [rsp + 0x50]
call fcn.18001f920
cmp eax, 5
jbe 0x18001e05d
lea r8, [0x1800a9860]
mov edx, 0x1f4
lea rcx, [rsp + 0x50]
call fcn.1800790b8
inc ebx
cmp ebx, dword [rsi + 2]
jb 0x18001e020
mov rcx, qword [r14 + 4]
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rcx, qword [0x1800cc980]
lea r8, [rsp + 0x50]
xor r9d, r9d
mov edx, 0x20
call fcn.180007320
jmp 0x18001db18
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x1800c6d00]
xor rax, rsp
mov qword [rbp - 0x10], rax
movzx edx, word [rcx + 0xe]
mov r12, qword [rcx + 0x10]
sub edx, 1
je 0x1800240db
cmp edx, 5
je 0x180023e0f
mov eax, 9
mov edi, 1
mov word [0x1800cc9e8], ax
movzx eax, di
jmp 0x18002442f
cmp dword [0x1800c6530], 4
jne 0x1800240c2
mov rcx, qword [r12 + 4]
call qword [sym.imp.KERNEL32.dll_GlobalLock]
mov rbx, rax
test rax, rax
je 0x1800240aa
mov rcx, qword [r12 + 4]
mov r15d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_GlobalSize]
cmp dword [0x1800cd0c8], 0
mov r14, rax
je 0x180023e62
mov r8d, r14d
lea rcx, [0x1800abf20]
mov rdx, rbx
call fcn.180029f90
xor esi, esi
cmp r14d, 0x10
jbe 0x180024087
mov edi, 1
mov dword [rbp - 0x50], esi
cmp byte [rbx + 3], 0x28
jne 0x180024082
cmp byte [rbx + 9], 0x29
jne 0x180024082
lea rcx, [rbx + 4]
lea r8, [rbp - 0x50]
lea rdx, [0x1800a5e7c]
call fcn.1800059f0
cmp eax, edi
jne 0x180024078
cmp dword [rbp - 0x50], esi
je 0x180024078
mov r8d, 3
lea rdx, [0x1800abf10]
mov rcx, rbx
call fcn.180065f60
test eax, eax
jne 0x180023ee0
mov rax, qword [0x1800c5798]
lea rcx, [rbx + 0xd]
mov edx, dword [rbp - 0x50]
call rax
mov r15d, eax
jmp 0x180024065
mov r8d, 3
lea rdx, [0x1800abf14]
mov rcx, rbx
call fcn.180065f60
test eax, eax
jne 0x180023f0b
mov edx, dword [rbp - 0x50]
lea rcx, [rbx + 0xd]
call qword [0x1800c5968]
jmp 0x180024065
mov r8d, 3
lea rdx, [0x1800abf18]
mov rcx, rbx
call fcn.180065f60
test eax, eax
jne 0x180024065
lea rax, [rbx + 0xd]
mov dword [rbp - 0x1c], edi
mov qword [rbp - 0x28], rax
lea rcx, [0x1800cab90]
mov eax, dword [rbp - 0x50]
mov dword [rbp - 0x20], eax
call fcn.18002a080
xor r9d, r9d
mov qword [rsp + 0x28], rsi
lea r8, [0x1800cac50]
mov qword [rsp + 0x20], rsi
lea rdx, [0x1800aae30]
lea rcx, [rbp - 0x28]
call fcn.180004de0
xor r9d, r9d
mov qword [rsp + 0x28], rsi
lea r8, [0x1800cac54]
mov qword [rsp + 0x20], rsi
lea rdx, [0x1800aae48]
lea rcx, [rbp - 0x28]
call fcn.180004de0
xor r9d, r9d
mov qword [rsp + 0x28], rsi
lea r8, [0x1800cac58]
mov qword [rsp + 0x20], rsi
lea rdx, [0x1800aae68]
lea rcx, [rbp - 0x28]
call fcn.180004de0
xor r9d, r9d
mov qword [rsp + 0x28], rsi
lea r8, [0x1800cac5c]
mov qword [rsp + 0x20], rsi
lea rdx, [0x1800aae88]
lea rcx, [rbp - 0x28]
call fcn.180004de0
xor r9d, r9d
mov qword [rsp + 0x28], rsi
lea r8, [0x1800cac64]
mov qword [rsp + 0x20], rsi
lea rdx, [0x1800aaea0]
lea rcx, [rbp - 0x28]
call fcn.180004de0
xor r9d, r9d
mov qword [rsp + 0x28], rsi
lea r8, [0x1800cac68]
mov qword [rsp + 0x20], rsi
lea rdx, [0x1800aaec0]
lea rcx, [rbp - 0x28]
call fcn.180004de0
xor r9d, r9d
mov qword [rsp + 0x28], rsi
lea r8, [0x1800cac60]
mov qword [rsp + 0x20], rsi
lea rdx, [0x1800aaee0]
lea rcx, [rbp - 0x28]
call fcn.180004de0
xor r9d, r9d
mov qword [rsp + 0x28], rsi
lea r8, [0x1800cac6c]
mov qword [rsp + 0x20], rsi
lea rdx, [0x1800aaef8]
lea rcx, [rbp - 0x28]
call fcn.180004de0
mov ecx, dword [rbp - 0x50]
mov eax, 0xfffffff0
sub eax, ecx
add ecx, 0x10
add r14d, eax
add rbx, rcx
cmp r14d, 0x10
ja 0x180023e73
test r15d, r15d
je 0x180024093
mov eax, 0xa
mov word [0x1800cc9e8], ax
mov rcx, qword [r12 + 4]
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
test r15d, r15d
setne sil
jmp 0x18002442c
mov r13d, 2
mov eax, 1
mov word [0x1800cc9e8], r13w
jmp 0x18002442f
mov eax, 0xb
mov edi, 1
mov word [0x1800cc9e8], ax
movzx eax, di
jmp 0x18002442f
cmp dword [0x1800c6530], 4
jne 0x1800243df
xor esi, esi
mov qword [rbp - 0x38], rsi
mov edi, esi
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x40], rsi
call qword [0x1800c5790]
mov r14, rax
test rax, rax
je 0x180024124
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GlobalLock]
mov qword [rbp - 0x38], rax
test rax, rax
je 0x180024124
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GlobalSize]
mov rdi, rax
mov ebx, esi
mov qword [rbp - 0x28], rbx
call qword [0x1800c5960]
mov r15, rax
test rax, rax
je 0x18002415a
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GlobalLock]
mov qword [rbp - 0x30], rax
test rax, rax
je 0x18002415a
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GlobalSize]
mov rbx, rax
mov qword [rbp - 0x28], rax
mov ecx, 0xbb8
mov dword [rbp - 0x4c], esi
mov dword [rbp - 0x50], 0xbb8
call fcn.1800429e8
mov r13, rax
test rax, rax
je 0x180024292
mov ecx, dword [0x1800cac50]
lea r9, [0x1800aae30]
mov dword [rsp + 0x20], ecx
lea r8, [rbp - 0x50]
lea rcx, [rbp - 0x48]
mov qword [rbp - 0x48], rax
lea rdx, [rbp - 0x4c]
call fcn.180005210
mov ecx, dword [0x1800cac54]
lea r9, [0x1800aae48]
mov dword [rsp + 0x20], ecx
lea r8, [rbp - 0x50]
lea rcx, [rbp - 0x48]
lea rdx, [rbp - 0x4c]
call fcn.180005210
mov eax, dword [0x1800cac58]
lea r9, [0x1800aae68]
lea r8, [rbp - 0x50]
mov dword [rsp + 0x20], eax
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x48]
call fcn.180005210
mov eax, dword [0x1800cac5c]
lea r9, [0x1800aae88]
lea r8, [rbp - 0x50]
mov dword [rsp + 0x20], eax
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x48]
call fcn.180005210
mov eax, dword [0x1800cac64]
lea r9, [0x1800aaea0]
lea r8, [rbp - 0x50]
mov dword [rsp + 0x20], eax
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x48]
call fcn.180005210
mov eax, dword [0x1800cac68]
lea r9, [0x1800aaec0]
lea r8, [rbp - 0x50]
mov dword [rsp + 0x20], eax
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x48]
call fcn.180005210
mov eax, dword [0x1800cac60]
lea r9, [0x1800aaee0]
lea r8, [rbp - 0x50]
mov dword [rsp + 0x20], eax
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x48]
call fcn.180005210
mov eax, dword [0x1800cac6c]
lea r9, [0x1800aaef8]
lea r8, [rbp - 0x50]
mov dword [rsp + 0x20], eax
lea rdx, [rbp - 0x4c]
lea rcx, [rbp - 0x48]
call fcn.180005210
mov qword [rbp - 0x40], r13
mov eax, esi
test edi, edi
je 0x18002429b
lea eax, [rdi + 0x10]
test ebx, ebx
je 0x1800242a4
add eax, 0x10
add eax, ebx
mov ebx, dword [rbp - 0x4c]
test ebx, ebx
je 0x1800242b0
add eax, 0x10
add eax, ebx
mov r13d, 2
test eax, eax
je 0x180024391
mov edx, eax
mov ecx, r13d
mov dword [r12], eax
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov qword [r12 + 4], rax
test rax, rax
je 0x180024391
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GlobalLock]
mov qword [rbp - 0x48], rax
test rax, rax
je 0x180024391
mov r9, qword [rbp - 0x38]
lea rdx, [0x1800abf10]
mov r8d, edi
lea rcx, [rbp - 0x48]
call fcn.180030b60
mov r9, qword [rbp - 0x30]
lea rdx, [0x1800abf14]
mov r8d, dword [rbp - 0x28]
lea rcx, [rbp - 0x48]
call fcn.180030b60
test ebx, ebx
je 0x180024384
lea r9, [0x1800abf18]
mov dword [rsp + 0x20], ebx
lea r8, str._3s__5u__
mov edx, 0x17
lea rcx, [rbp - 0x28]
call fcn.180004550
mov rdi, qword [rbp - 0x48]
mov r8, rbx
movsd xmm0, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x40]
movsd qword [rdi], xmm0
lea rcx, [rdi + 0xd]
mov eax, dword [rbp - 0x20]
mov dword [rdi + 8], eax
movzx eax, byte [rbp - 0x1c]
mov byte [rdi + 0xc], al
call fcn.1800a1e50
mov eax, dword [0x1800abf0c]
mov word [rbx + rdi + 0xd], ax
movzx eax, byte [0x1800abf0e]
mov byte [rbx + rdi + 0xf], al
mov rcx, qword [r12 + 4]
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x18002439e
mov esi, 1
mov word [0x1800cc9e8], r13w
test r14, r14
je 0x1800243b5
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GlobalFree]
test r15, r15
je 0x1800243cc
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rax, qword [rbp - 0x40]
test rax, rax
je 0x1800243f0
mov rcx, rax
call fcn.1800429d4
jmp 0x1800243f0
mov eax, 0xb
mov esi, 1
mov word [0x1800cc9e8], ax
cmp dword [0x1800cd0c8], 0
je 0x18002442c
test si, si
jne 0x18002442c
mov rcx, qword [r12 + 4]
call qword [sym.imp.KERNEL32.dll_GlobalLock]
test rax, rax
je 0x180024421
mov r8d, dword [r12]
lea rcx, [0x1800abf1c]
mov rdx, rax
call fcn.180029f90
mov rcx, qword [r12 + 4]
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
movzx eax, si
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.180032180
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x100]
sub rsp, 0x200
mov rax, qword [0x1800c6d00]
xor rax, rsp
mov qword [rbp + 0xf0], rax
movzx edx, word [rcx + 0xe]
xor r14d, r14d
sub edx, 1
je 0x1800256ca
sub edx, 0x400
je 0x180024be1
cmp edx, 1
je 0x1800248b6
mov eax, 9
mov r14d, 1
mov word [0x1800cc9e8], ax
jmp 0x1800258b8
cmp dword [0x1800cc9f8], r14d
jle 0x1800248eb
cmp dword [0x1800cca08], r14d
je 0x1800248dc
lea rcx, [0x1800cca10]
mov dword [0x1800cca08], r14d
call qword [case.0x180030475.0]
movzx edx, word [0x1800cc9f8]
xor ecx, ecx
call qword [case.0x180030475.0]
mov rcx, qword [0x1800ccd88]
test rcx, rcx
je 0x18002491a
cmp qword [0x1800ccd90], r14
je 0x180024914
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rcx, qword [0x1800ccd88]
mov qword [0x1800ccd90], r14
call qword [sym.imp.KERNEL32.dll_GlobalFree]
xor edx, edx
lea rcx, [0x1800cc9f0]
mov r8d, 0x3b0
call fcn.1800a24f0
mov ecx, dword [0x1800c6530]
sub ecx, 3
je 0x180024bcd
sub ecx, 1
je 0x180024968
sub ecx, 1
je 0x180024968
sub ecx, 1
je 0x180024968
cmp ecx, 1
je 0x180024968
mov eax, 0xb
mov r14d, 1
mov word [0x1800cc9e8], ax
jmp 0x1800258b8
xorps xmm0, xmm0
mov dword [0x1800d8010], r14d
xor eax, eax
xor ecx, ecx
movups xmmword [0x1800cd160], xmm0
mov qword [0x1800cd1a0], rax
movups xmmword [0x1800cd170], xmm0
movups xmmword [0x1800cd180], xmm0
movups xmmword [0x1800cd190], xmm0
call qword [case.0x180030475.0]
lea rdx, str.UI_MainDlg
lea rcx, [0x1800cc988]
call fcn.18002a210
mov rcx, qword [0x1800cc990]
mov qword [0x1800cc990], r14
call qword [sym.imp.COMCTL32.dll_ImageList_Destroy]
lea r8, str.SOFTWAREJuK_
mov edx, 0x12c
lea rcx, [rbp - 0x40]
call fcn.180065ef0
lea r8, [0x1800cb928]
mov edx, 0x12c
lea rcx, [rbp - 0x40]
call fcn.1800790b8
lea r8, [0x1800ab2d0]
mov edx, 0x12c
lea rcx, [rbp - 0x40]
call fcn.1800790b8
lea rax, [rsp + 0x60]
mov byte [rsp + 0x50], r14b
mov qword [rsp + 0x40], rax
lea r9, [rsp + 0x50]
lea rax, [rsp + 0x58]
xor r8d, r8d
mov qword [rsp + 0x38], rax
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x30], r14
mov rcx, 0xffffffff80000002
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], r14d
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x180024bc3
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx ecx, word [rsp + 0x72]
movzx edx, word [rsp + 0x70]
movzx r8d, word [rsp + 0x6e]
movzx eax, word [rsp + 0x74]
movzx r10d, word [rsp + 0x6a]
movzx r9d, word [rsp + 0x68]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], ecx
lea rcx, [rsp + 0x78]
mov dword [rsp + 0x30], edx
mov edx, 0x3c
mov dword [rsp + 0x28], r8d
lea r8, str._04u__02u__02u__02u:_02u:_02u
mov dword [rsp + 0x20], r10d
call fcn.180004550
mov rbx, 0xffffffffffffffff
lea rcx, [rsp + 0x78]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r14b
jne 0x180024ac0
mov rcx, qword [rsp + 0x58]
lea rdx, str.P2.CloseDS
inc eax
mov esi, 1
mov dword [rsp + 0x28], eax
mov r9d, esi
lea rax, [rsp + 0x78]
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov r9d, dword [0x1800cc998]
lea r8, [0x1800a5e7c]
mov edx, 0x3c
lea rcx, [rsp + 0x78]
call fcn.180004550
lea rcx, [rsp + 0x78]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r14b
jne 0x180024b20
mov rcx, qword [rsp + 0x58]
lea rdx, str.P3.MaxState
inc eax
mov r9d, esi
mov dword [rsp + 0x28], eax
xor r8d, r8d
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov eax, dword [0x1800cc9d8]
lea r8, str.N:_u_M:_u_F:_u
mov r9d, dword [0x1800cc9d0]
lea rcx, [rsp + 0x78]
mov dword [rsp + 0x28], eax
mov edx, 0x3c
mov eax, dword [0x1800cc9d4]
mov dword [rsp + 0x20], eax
call fcn.180004550
lea rax, [rsp + 0x78]
inc rbx
cmp byte [rax + rbx], r14b
jne 0x180024b87
mov rcx, qword [rsp + 0x58]
lea rax, [rsp + 0x78]
inc ebx
lea rdx, str.P4.ScnCount
mov dword [rsp + 0x28], ebx
mov r9d, esi
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, 3
call fcn.180023b50
call fcn.18002af40
mov ecx, 2
call fcn.180023b50
jmp 0x1800258b8
cmp dword [0x1800c6530], 3
jne 0x1800256aa
cmp dword [0x1800d8010], r14d
je 0x180024c0e
mov edi, 4
mov r14d, 1
mov word [0x1800cc9e8], di
jmp 0x1800258b8
mov rax, qword [rcx]
lea r8, str.SOFTWAREJuK_
mov edx, 0x12c
movups xmm0, xmmword [rax]
movaps xmmword [0x1800d8010], xmm0
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [0x1800d8020], xmm1
movups xmm0, xmmword [rax + 0x20]
movaps xmmword [0x1800d8030], xmm0
movups xmm1, xmmword [rax + 0x30]
movaps xmmword [0x1800d8040], xmm1
movups xmm0, xmmword [rax + 0x40]
movaps xmmword [0x1800d8050], xmm0
movups xmm1, xmmword [rax + 0x50]
movaps xmmword [0x1800d8060], xmm1
movups xmm0, xmmword [rax + 0x60]
movaps xmmword [0x1800d8070], xmm0
movups xmm1, xmmword [rax + 0x70]
movaps xmmword [0x1800d8080], xmm1
movups xmm0, xmmword [rax + 0x80]
movaps xmmword [0x1800d8090], xmm0
movsd xmm1, qword [rax + 0x90]
movsd qword [0x1800d80a0], xmm1
mov eax, dword [rax + 0x98]
mov dword [0x1800d80a8], eax
mov rax, qword [rcx + 0x10]
lea rcx, [rbp - 0x40]
movups xmm0, xmmword [rax]
movaps xmmword [0x1800d80b0], xmm0
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [0x1800d80c0], xmm1
movups xmm0, xmmword [rax + 0x20]
movaps xmmword [0x1800d80d0], xmm0
movups xmm1, xmmword [rax + 0x30]
movaps xmmword [0x1800d80e0], xmm1
movups xmm0, xmmword [rax + 0x40]
movaps xmmword [0x1800d80f0], xmm0
movups xmm1, xmmword [rax + 0x50]
movaps xmmword [0x1800d8100], xmm1
movups xmm0, xmmword [rax + 0x60]
movaps xmmword [0x1800d8110], xmm0
movups xmm1, xmmword [rax + 0x70]
movaps xmmword [0x1800d8120], xmm1
movups xmm0, xmmword [rax + 0x80]
movaps xmmword [0x1800d8130], xmm0
movsd xmm1, qword [rax + 0x90]
movsd qword [0x1800d8140], xmm1
mov eax, dword [rax + 0x98]
mov dword [0x1800d8148], eax
call fcn.180065ef0
lea r8, [0x1800cb928]
mov edx, 0x12c
lea rcx, [rbp - 0x40]
call fcn.1800790b8
lea r8, [0x1800ab2d0]
mov edx, 0x12c
lea rcx, [rbp - 0x40]
call fcn.1800790b8
lea rax, [rsp + 0x60]
mov byte [rsp + 0x50], r14b
mov qword [rsp + 0x40], rax
lea r9, [rsp + 0x50]
lea rax, [rsp + 0x58]
xor r8d, r8d
mov qword [rsp + 0x38], rax
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x30], r14
mov rcx, 0xffffffff80000002
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], r14d
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
mov esi, 1
mov rbx, 0xffffffffffffffff
test eax, eax
jne 0x18002544c
lea rdi, [0x1800d812a]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rdi + rax], r14b
jne 0x180024dc0
mov rcx, qword [rsp + 0x58]
lea rdx, str.Info.DSProduct
inc eax
mov r9d, esi
mov dword [rsp + 0x28], eax
xor r8d, r8d
mov qword [rsp + 0x20], rdi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x1800cc980]
lea r9, str.Info.DSProduct
lea r8, str._s__s_
mov qword [rsp + 0x20], rdi
mov edx, 8
call fcn.1800073b0
movzx eax, word [0x1800d80b6]
lea rcx, [0x1800d80bc]
movzx r9d, word [0x1800d80b4]
lea r8, str._u._u___s_
mov qword [rsp + 0x28], rcx
mov edx, 0x3c
lea rcx, [rsp + 0x78]
mov dword [rsp + 0x20], eax
call fcn.180004550
lea rcx, [rsp + 0x78]
mov rax, rbx
nop dword [rax]
inc rax
cmp byte [rcx + rax], r14b
jne 0x180024e50
mov rcx, qword [rsp + 0x58]
lea rdx, str.Info.DSVersion
inc eax
mov r9d, esi
mov dword [rsp + 0x28], eax
xor r8d, r8d
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x1800cc980]
lea rax, [rsp + 0x78]
lea r9, str.Info.DSVersion
mov qword [rsp + 0x20], rax
lea r8, str._s__s_
mov edx, 8
call fcn.1800073b0
movzx eax, word [0x1800d80e0]
lea r8, str._u._u
movzx r9d, word [0x1800d80de]
lea rcx, [rsp + 0x78]
mov edx, 0x3c
mov dword [rsp + 0x20], eax
call fcn.180004550
lea rcx, [rsp + 0x78]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r14b
jne 0x180024ee0
mov rcx, qword [rsp + 0x58]
lea rdx, str.Info.DSProtocol
inc eax
mov r9d, esi
mov dword [rsp + 0x28], eax
xor r8d, r8d
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x1800cc980]
lea rax, [rsp + 0x78]
lea r9, str.Info.DSProtocol
mov qword [rsp + 0x20], rax
lea r8, str._s_s
mov edx, 8
call fcn.1800073b0
lea r8, [0x1800d8046]
mov edx, 0x3c
lea rcx, [rsp + 0x78]
call fcn.180065ef0
lea rcx, [rsp + 0x78]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r14b
jne 0x180024f60
mov rcx, qword [rsp + 0x58]
lea rdx, str.Info.ApplicationManufactor
inc eax
mov r9d, esi
mov dword [rsp + 0x28], eax
xor r8d, r8d
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x1800cc980]
lea rax, [rsp + 0x78]
lea r9, str.Info.ApplicationManufactor
mov qword [rsp + 0x20], rax
lea r8, str._s__s_
mov edx, 8
call fcn.1800073b0
lea r8, [0x1800d808a]
mov edx, 0x3c
lea rcx, [rsp + 0x78]
call fcn.180065ef0
lea rcx, [rsp + 0x78]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r14b
jne 0x180024fe0
mov rcx, qword [rsp + 0x58]
lea rdx, str.Info.ApplicationProducName
inc eax
mov r9d, esi
mov dword [rsp + 0x28], eax
xor r8d, r8d
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x1800cc980]
lea rax, [rsp + 0x78]
lea r9, str.Info.ApplicationProducName
mov qword [rsp + 0x20], rax
lea r8, str._s__s_
mov edx, 8
call fcn.1800073b0
lea r8, [0x1800d8068]
mov edx, 0x3c
lea rcx, [rsp + 0x78]
call fcn.180065ef0
lea rcx, [rsp + 0x78]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r14b
jne 0x180025060
mov rcx, qword [rsp + 0x58]
lea rdx, str.Info.ApplicationProdFamily
inc eax
mov r9d, esi
mov dword [rsp + 0x28], eax
xor r8d, r8d
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x1800cc980]
lea rax, [rsp + 0x78]
lea r9, str.Info.ApplicationProdFamily
mov qword [rsp + 0x20], rax
lea r8, str._s__s_
mov edx, 8
call fcn.1800073b0
movzx eax, word [0x1800d8016]
lea r8, str._u._u
movzx r9d, word [0x1800d8014]
lea rcx, [rsp + 0x78]
mov edx, 0x3c
mov dword [rsp + 0x20], eax
call fcn.180004550
lea rcx, [rsp + 0x78]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r14b
jne 0x1800250f0
mov rcx, qword [rsp + 0x58]
lea rdx, str.Info.ApplicationVersionNum
inc eax
mov r9d, esi
mov dword [rsp + 0x28], eax
xor r8d, r8d
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x1800cc980]
lea rax, [rsp + 0x78]
lea r9, str.Info.ApplicationVersionNum
mov qword [rsp + 0x20], rax
lea r8, str._s_s
mov edx, 8
call fcn.1800073b0
lea r8, [0x1800d801c]
mov edx, 0x3c
lea rcx, [rsp + 0x78]
call fcn.180065ef0
lea rcx, [rsp + 0x78]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r14b
jne 0x180025170
mov rcx, qword [rsp + 0x58]
lea rdx, str.Info.ApplicationInformation
inc eax
mov r9d, esi
mov dword [rsp + 0x28], eax
xor r8d, r8d
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x1800cc980]
lea rax, [rsp + 0x78]
lea r9, str.Info.ApplicationInformation
mov qword [rsp + 0x20], rax
lea r8, str._s__s_
mov edx, 8
call fcn.1800073b0
movzx ecx, word [0x1800d8018]
call fcn.180011830
movzx r9d, word [0x1800d8018]
lea r8, str._u___s_
mov edx, 0x3c
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x78]
call fcn.180004550
lea rcx, [rsp + 0x78]
mov rax, rbx
inc rax
cmp byte [rcx + rax], r14b
jne 0x180025201
mov rcx, qword [rsp + 0x58]
lea rdx, str.Info.ApplicationLanguage
inc eax
mov r9d, esi
mov dword [rsp + 0x28], eax
xor r8d, r8d
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x1800cc980]
lea rax, [rsp + 0x78]
lea r9, str.Info.ApplicationLanguage
mov qword [rsp + 0x20], rax
lea r8, str._s_s
mov edx, 8
call fcn.1800073b0
movzx eax, word [0x1800d8040]
lea r8, str._u._u
movzx r9d, word [0x1800d803e]
lea rcx, [rsp + 0x78]
mov edx, 0x3c
mov dword [rsp + 0x20], eax
call fcn.180004550
lea rcx, [rsp + 0x78]
mov rax, rbx
nop dword [rax]
inc rax
cmp byte [rcx + rax], r14b
jne 0x180025290
mov rcx, qword [rsp + 0x58]
lea rdx, str.Info.ApplicationProtocol
inc eax
mov r9d, esi
mov dword [rsp + 0x28], eax
xor r8d, r8d
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [0x1800cc980]
lea rax, [rsp + 0x78]
lea r9, str.Info.ApplicationProtocol
mov qword [rsp + 0x20], rax
lea r8, str._s_s
mov edx, 8
call fcn.1800073b0
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx ecx, word [rsp + 0x72]
movzx edx, word [rsp + 0x70]
movzx r8d, word [rsp + 0x6e]
movzx eax, word [rsp + 0x74]
movzx r10d, word [rsp + 0x6a]
movzx r9d, word [rsp + 0x68]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], ecx
lea rcx, [rsp + 0x78]
mov dword [rsp + 0x30], edx
mov edx, 0x3c
mov dword [rsp + 0x28], r8d
lea r8, str._04u__02u__02u__02u:_02u:_02u
mov dword [rsp + 0x20], r10d
call fcn.180004550
lea rcx, [rsp + 0x78]
mov rax, rbx
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], r14b
jne 0x180025350
mov rcx, qword [rsp + 0x58]
lea rdx, str.P1.OpenDS
inc eax
mov r9d, esi
mov dword [rsp + 0x28], eax
xor r8d, r8d
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x78]
mov byte [rsp + 0x78], r14b
mov rax, rbx
nop
inc rax
cmp byte [rcx + rax], r14b
jne 0x180025390
mov rcx, qword [rsp + 0x58]
lea rdx, str.P2.CloseDS
inc eax
mov r9d, esi
mov dword [rsp + 0x28], eax
xor r8d, r8d
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x78]
mov rax, rbx
nop dword [rax]
inc rax
cmp byte [rcx + rax], r14b
jne 0x1800253d0
mov rcx, qword [rsp + 0x58]
lea rdx, str.P3.MaxState
inc eax
mov r9d, esi
mov dword [rsp + 0x28], eax
xor r8d, r8d
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x78]
mov rax, rbx
nop dword [rax]
inc rax
cmp byte [rcx + rax], r14b
jne 0x180025410
mov rcx, qword [rsp + 0x58]
lea rdx, str.P4.ScnCount
inc eax
mov r9d, esi
mov dword [rsp + 0x28], eax
xor r8d, r8d
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
xorps xmm0, xmm0
cmp dword [0x1800cc9c0], eax
mov edi, 4
movups xmmword [0x1800cab40], xmm0
mov qword [0x1800cab50], rax
je 0x18002559d
mov qword [rsp + 0x228], r15
lea rdx, str.MFM_Dietrich_Hofmaier_GmbH
mov r8d, 0x1a
lea rcx, [0x1800d8046]
mov r15d, r14d
call fcn.180065f60
test eax, eax
jne 0x1800254fe
lea rdx, str.Scanner_Driver
lea rcx, [0x1800d8068]
call fcn.18007b6f0
test eax, eax
jne 0x1800254f3
lea rdx, str.TWAIN_Interface_DLL
lea rcx, [0x1800d808a]
call fcn.18007b6f0
test eax, eax
jne 0x1800254f3
cmp dword [0x1800cc9c0], esi
jle 0x1800254f0
mov r9d, edi
lea r8, str.Init_DPU_TWAIN_DS
lea rdx, str.Enter_Kodak_Custom_Mode_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
sete r15b
jmp 0x1800254f3
mov r15d, esi
test r15d, r15d
je 0x180025595
jmp 0x18002552c
cmp dword [0x1800cc9c0], 0xf
jle 0x180025595
mov r9d, 0x104
lea r8, str.Init_DPU_TWAIN_DS
lea rdx, str.Enter_Kodak_Custom_Mode_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x180025595
mov rcx, qword [0x1800cc980]
lea r8, str.SpecialMode:_mfm_Hofmaier_
xor r9d, r9d
mov edx, 2
call fcn.180007320
cmp dword [0x1800cbcec], r14d
mov dword [0x1800cab54], esi
mov dword [0x1800cab40], 8
mov dword [0x1800cab44], esi
jne 0x180025570
mov dword [0x1800cbcec], 5
cmp dword [0x1800cc974], r14d
jne 0x180025583
mov dword [0x1800cc974], 6
mov dword [0x1800cab48], esi
mov dword [0x1800cab4c], esi
mov dword [0x1800cab50], esi
mov r15, qword [rsp + 0x228]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [0x1800cd160], xmm0
mov qword [0x1800cd1a0], rax
movups xmmword [0x1800cd170], xmm0
movups xmmword [0x1800cd180], xmm0
movups xmmword [0x1800cd190], xmm0
call fcn.1800276d0
test eax, eax
je 0x180025686
xor edx, edx
lea rcx, [0x1800cc9f0]
mov r8d, 0x3b0
call fcn.1800a24f0
xor ecx, ecx
mov qword [0x1800cd148], r14
mov dword [0x1800cd150], esi
mov dword [0x1800cd154], esi
call qword [case.0x180030475.0]
mov rcx, qword [0x1800cc980]
lea r8, str.___Startup_initialisation_done___
xor r9d, r9d
mov edx, ebx
call fcn.180007320
mov ecx, edi
call fcn.180023b50
cmp dword [0x1800cc9ac], r14d
je 0x180025666
mov ebx, dword [0x1800cad88]
mov edi, dword [0x1800cad8c]
mov dword [0x1800cad88], esi
mov dword [0x1800cad8c], esi
call fcn.180021290
call fcn.18002b140
mov rcx, rax
mov edx, esi
call fcn.180009fa0
mov dword [0x1800cad88], ebx
mov dword [0x1800cad8c], edi
call fcn.180020190
mov rax, qword [0x1800c5470]
test rax, rax
je 0x1800258b8
lea rdx, [0x180030250]
xor ecx, ecx
call rax
jmp 0x1800258b8
call fcn.18002af40
mov ecx, 2
call fcn.180023b50
mov eax, 3
movzx r14d, si
mov word [0x1800cc9e8], ax
jmp 0x1800258b8
mov eax, 0xb
mov edi, 4
cmovg ax, di
mov r14d, 1
mov word [0x1800cc9e8], ax
jmp 0x1800258b8
mov rbx, qword [rcx + 0x10]
movaps xmm0, xmmword [0x1800d80b0]
movups xmmword [rbx], xmm0
movaps xmm1, xmmword [0x1800d80c0]
movups xmmword [rbx + 0x10], xmm1
movaps xmm0, xmmword [0x1800d80d0]
movups xmmword [rbx + 0x20], xmm0
movaps xmm1, xmmword [0x1800d80e0]
movups xmmword [rbx + 0x30], xmm1
movaps xmm0, xmmword [0x1800d80f0]
movups xmmword [rbx + 0x40], xmm0
movaps xmm1, xmmword [0x1800d8100]
movups xmmword [rbx + 0x50], xmm1
movaps xmm0, xmmword [0x1800d8110]
movups xmmword [rbx + 0x60], xmm0
movaps xmm1, xmmword [0x1800d8120]
movups xmmword [rbx + 0x70], xmm1
movaps xmm0, xmmword [0x1800d8130]
movups xmmword [rbx + 0x80], xmm0
movsd xmm1, qword [0x1800d8140]
movsd qword [rbx + 0x90], xmm1
mov eax, dword [0x1800d8148]
mov dword [rbx + 0x98], eax
mov rcx, qword [0x1800cc980]
call fcn.180006a80
test al, 8
je 0x1800258b8
mov r9d, dword [rbx]
lea r8, [0x1800ab578]
mov rcx, qword [0x1800cc980]
mov edx, 8
call fcn.1800073b0
movzx r9d, word [rbx + 4]
lea r8, [0x1800ab5a0]
mov rcx, qword [0x1800cc980]
mov edx, 8
call fcn.1800073b0
movzx r9d, word [rbx + 6]
lea r8, [0x1800ab5c8]
mov rcx, qword [0x1800cc980]
mov edx, 8
call fcn.1800073b0
movzx r9d, word [rbx + 8]
lea r8, [0x1800ab5f0]
mov rcx, qword [0x1800cc980]
mov edx, 8
call fcn.1800073b0
movzx r9d, word [rbx + 0xa]
lea r8, [0x1800ab618]
mov rcx, qword [0x1800cc980]
mov edx, 8
call fcn.1800073b0
mov rcx, qword [0x1800cc980]
lea r9, [rbx + 0xc]
lea r8, [0x1800ab640]
mov edx, 8
call fcn.1800073b0
movzx r9d, word [rbx + 0x2e]
lea r8, [0x1800ab668]
mov rcx, qword [0x1800cc980]
mov edx, 8
call fcn.1800073b0
movzx r9d, word [rbx + 0x30]
lea r8, [0x1800ab690]
mov rcx, qword [0x1800cc980]
mov edx, 8
call fcn.1800073b0
mov r9d, dword [rbx + 0x32]
lea r8, [0x1800ab6b8]
mov rcx, qword [0x1800cc980]
mov edx, 8
call fcn.1800073b0
mov rcx, qword [0x1800cc980]
lea r9, [rbx + 0x36]
lea r8, [0x1800ab6e0]
mov edx, 8
call fcn.1800073b0
mov rcx, qword [0x1800cc980]
lea r9, [rbx + 0x58]
lea r8, [0x1800ab708]
mov edx, 8
call fcn.1800073b0
mov rcx, qword [0x1800cc980]
lea r9, [rbx + 0x7a]
lea r8, [0x1800ab730]
mov edx, 8
call fcn.1800073b0
movzx eax, r14w
mov rcx, qword [rbp + 0xf0]
xor rcx, rsp
call fcn.180032180
lea r11, [rsp + 0x200]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x20
movzx edx, word [rcx + 0xe]
xor edi, edi
mov rsi, qword [rcx + 0x10]
movzx ebp, di
sub edx, 1
je 0x18002631c
sub edx, 6
je 0x1800262cf
sub edx, 0x6fa
je 0x18002616e
cmp edx, 1
je 0x180026118
mov eax, 9
jmp 0x180026347
mov eax, dword [0x1800c6530]
cmp eax, 6
jl 0x180026342
cmp eax, 7
jl 0x180026147
mov rcx, qword [0x1800cc980]
lea r8, str.__Call_in_State_6_only___
xor r9d, r9d
mov edx, 2
call fcn.180007320
mov ebx, 1
mov dword [0x1800cceb8], ebx
call qword [0x1800c5710]
xor edx, edx
xor ecx, ecx
call fcn.180030940
neg eax
sbb cx, cx
mov word [rsi], cx
jmp 0x180026353
cmp dword [0x1800c6530], 6
jl 0x180026342
cmp dword [0x1800cc9f0], edi
mov ebx, 1
mov dword [rsp + 0x40], edi
mov r14d, 0xffff
je 0x1800261b8
cmp word [0x1800cc9f4], di
je 0x1800261b8
mov eax, dword [0x1800ccb68]
lea rcx, [0x1800cc9f0]
mov dword [rsi + 2], eax
mov word [rsi], di
call fcn.18002a190
jmp 0x180026241
mov eax, dword [0x1800ccb68]
lea rcx, [0x1800cc9f0]
mov dword [rsi + 2], eax
mov word [rsi], di
call fcn.18002a190
cmp dword [0x1800cc9f0], edi
je 0x1800261ef
cmp word [0x1800cc9f4], di
je 0x1800261ef
mov word [rsi], bx
lea r8, str.__report_IMG_error.
mov ebx, edi
jmp 0x18002622d
cmp dword [0x1800c6678], edi
je 0x180026226
cmp dword [0x1800cad40], edi
lea rdx, [rsp + 0x40]
mov ecx, dword [0x1800c6674]
cmove rdx, rdi
call fcn.180030940
test eax, eax
je 0x18002621d
mov word [rsi], r14w
mov ebx, edi
jmp 0x180026241
lea r8, str.__no_more_IMGs.
jmp 0x18002622d
lea r8, str.__all_IMGs_done.
mov rcx, qword [0x1800cc980]
xor r9d, r9d
mov edx, 2
call fcn.180007320
cmp dword [rsp + 0x40], edi
je 0x180026279
mov rcx, qword [0x1800cc980]
lea r8, [0x1800ab948]
xor r9d, r9d
mov edx, 0x20
call fcn.180007320
mov word [rsi], r14w
movzx ebp, word [0x1800c653c]
mov word [0x1800cc9e8], di
jmp 0x180026353
test ebx, ebx
je 0x1800262bb
mov rcx, qword [0x1800cc980]
lea r8, [0x1800ab958]
xor r9d, r9d
mov edx, 0x20
call fcn.180007320
mov rcx, qword [0x1800cc988]
xor edx, edx
mov dword [0x1800cc9a4], edi
mov dword [0x1800cc9a8], edi
mov dword [0x1800cc9cc], edi
call fcn.180027d50
mov word [rsi], di
cmp word [rsi], di
setne dil
lea ecx, [rdi + 5]
call fcn.180023b50
jmp 0x180026353
mov ecx, dword [0x1800c6530]
sub ecx, 6
je 0x1800262df
cmp ecx, 1
jne 0x180026342
call qword [0x1800c56c8]
mov dword [0x1800cc9a8], edi
mov ebx, 1
mov dword [0x1800cc9a4], ebx
mov ecx, 5
mov word [rsi], di
mov dword [rsi + 2], edi
call fcn.180023b50
mov rcx, qword [0x1800cc988]
xor edx, edx
mov dword [0x1800cc9cc], edi
call fcn.180027d50
jmp 0x180026353
cmp dword [0x1800c6530], 4
jl 0x180026342
call qword [0x1800c5738]
mov ecx, edi
mov dword [rsi + 2], edi
test eax, eax
mov r14d, 0xffff
cmovg cx, r14w
mov word [rsi], cx
jmp 0x180026353
mov eax, 0xb
mov ebp, 1
mov word [0x1800cc9e8], ax
mov rbx, qword [rsp + 0x48]
movzx eax, bp
mov rbp, qword [rsp + 0x50]
add rsp, 0x20
pop r14
pop rdi
pop rsi
ret
push rsi
push r12
push r15
sub rsp, 0x80
mov rax, qword [0x1800c6d00]
xor rax, rsp
mov qword [rsp + 0x60], rax
movzx edx, word [rcx + 0xe]
xor r12d, r12d
mov r15, qword [rcx + 0x10]
mov ecx, edx
sub ecx, 0x501
je 0x180026a22
sub ecx, 1
je 0x180026688
cmp ecx, 1
je 0x180026688
mov eax, 9
mov esi, 1
mov word [0x1800cc9e8], ax
movzx eax, si
jmp 0x1800269ca
cmp dword [0x1800c6530], 4
mov esi, 1
jne 0x180026a46
mov qword [rsp + 0xa8], rbx
mov eax, 0x503
mov qword [rsp + 0x70], r14
mov r14d, 2
mov qword [rsp + 0xb0], rbp
cmp dx, ax
jne 0x1800266cd
mov dword [0x1800c6784], r14d
mov ebp, 0x642
jmp 0x1800266e5
mov ebp, 0x640
mov dword [0x1800c6784], esi
cmp word [r15], r12w
jne 0x1800266e5
mov dword [0x1800c6784], r12d
mov rbx, qword [r15 + 4]
mov rcx, rbx
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1800266fd
mov qword [0x1800cc9e0], rbx
cmp word [0x1800cd0d0], r12w
je 0x18002672d
lea rdx, [0x1800cd0d0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
mov rcx, rax
mov rbx, rax
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x18002672d
mov qword [0x1800cc9e0], rbx
mov qword [rsp + 0xb8], rdi
call fcn.1800276d0
mov eax, dword [0x1800c6550]
mov rcx, qword [0x1800cc988]
mov dword [0x1800c6678], eax
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x1800268b1
movsxd rbx, dword [0x1800c6784]
mov rdi, qword [0x1800cc9e0]
call fcn.180005d70
lea r9, [0x180027b40]
mov qword [rsp + 0x20], rbx
mov r8, rdi
mov rdx, rbp
mov rcx, rax
call qword [sym.imp.USER32.dll_CreateDialogParamW]
mov rcx, rax
mov qword [0x1800cc988], rax
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1800268b1
mov rcx, qword [0x1800cc988]
mov qword [rsp + 0x78], r13
call qword [sym.imp.USER32.dll_GetParent]
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindow]
mov ebx, r12d
mov r13d, esi
neg eax
mov r14d, r12d
sbb rbp, rbp
neg rbp
cmp dword [0x1800cc9b4], ebx
je 0x180026879
mov rcx, qword [0x1800cc988]
mov edx, 0x7d5
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
lea rdx, [rsp + 0x40]
mov r12, rax
call qword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
je 0x18002685d
mov rcx, qword [0x1800cc988]
mov edx, 2
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
lea rdx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
je 0x18002685d
mov edi, dword [rsp + 0x44]
sub edi, dword [rsp + 0x54]
test edi, edi
jle 0x18002685d
mov rcx, qword [0x1800cc988]
lea rdx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
je 0x18002685d
mov r14d, dword [rsp + 0x48]
xor r13d, r13d
mov ebx, dword [rsp + 0x4c]
sub r14d, dword [rsp + 0x40]
sub ebx, dword [rsp + 0x44]
add ebx, edi
mov edx, 5
mov rcx, r12
call qword [sym.imp.USER32.dll_ShowWindow]
mov edx, esi
mov rcx, r12
call qword [sym.imp.USER32.dll_EnableWindow]
xor r12d, r12d
mov r9d, dword [0x1800c6564]
lea rdx, [rbp - 1]
mov r8d, dword [0x1800c6560]
mov rcx, qword [0x1800cc988]
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], r14d
call qword [sym.imp.USER32.dll_SetWindowPos]
mov r13, qword [rsp + 0x78]
mov r14d, 2
cmp qword [0x1800cc988], 0
mov rbp, qword [rsp + 0xb0]
jne 0x180026908
mov ecx, 0x102
mov word [0x1800cc9e8], r14w
mov dword [0x1800cc9a8], r12d
call fcn.180023430
lea rcx, [0x1800cc9f0]
call fcn.18002a190
call qword [0x1800c5728]
xor ecx, ecx
call qword [case.0x180030475.0]
mov ecx, 4
call fcn.180023b50
movzx eax, si
jmp 0x1800269b5
mov word [r15 + 2], r12w
call fcn.180021290
mov ecx, 5
call fcn.180023b50
mov eax, dword [0x1800c6784]
test eax, eax
jne 0x18002697c
mov eax, dword [0x1800cc9b0]
test eax, eax
je 0x1800269e4
mov ebx, dword [0x1800cad88]
mov edi, dword [0x1800cad8c]
test al, 2
je 0x18002694a
mov dword [0x1800cad88], esi
test al, 4
je 0x180026954
mov dword [0x1800cad8c], esi
call fcn.18002b140
mov rcx, rax
mov edx, esi
call fcn.180009fa0
mov dword [0x1800cad88], ebx
mov dword [0x1800cad8c], edi
call fcn.180020190
mov eax, dword [0x1800c6784]
test eax, eax
jle 0x1800269e4
mov rcx, qword [0x1800cc988]
mov edx, r14d
mov ebx, dword [0x1800c6568]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
mov edx, ebx
call qword [sym.imp.USER32.dll_EnableWindow]
mov rcx, qword [0x1800cc988]
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
movzx eax, r12w
mov rdi, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xa8]
mov r14, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.180032180
add rsp, 0x80
pop r15
pop r12
pop rsi
ret
call fcn.18002a310
test eax, eax
jne 0x1800269f7
mov dword [0x1800cca00], 0xffffffff
cmp dword [0x1800c6530], 5
jne 0x180026a14
mov ecx, 0x101
call fcn.180023430
mov ecx, 6
call fcn.180023b50
mov dword [0x1800cc9a4], esi
mov dword [0x1800cc9a8], esi
jmp 0x1800269b1
mov ecx, dword [0x1800c6530]
mov dword [0x1800c6784], 0xffffffff
sub ecx, 4
je 0x180026a5a
sub ecx, 1
je 0x180026a5a
cmp ecx, 1
je 0x180026a5a
mov esi, 1
mov eax, 0xb
mov word [0x1800cc9e8], ax
movzx eax, si
jmp 0x1800269ca
xor ecx, ecx
call qword [case.0x180030475.0]
lea rdx, str.UI_MainDlg
lea rcx, [0x1800cc988]
call fcn.18002a210
mov rcx, qword [0x1800cc990]
mov qword [0x1800cc990], r12
call qword [sym.imp.COMCTL32.dll_ImageList_Destroy]
mov ecx, 4
mov dword [0x1800cc9a8], r12d
call fcn.180023b50
movzx eax, r12w
jmp 0x1800269ca
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
movzx eax, word [rcx + 0xc]
mov rdi, rcx
dec eax
cmp eax, 0xd
ja case.0x180026b54.2
cdqe
lea rbx, [0x180000000]
mov eax, dword [rbx + rax*4 + 0x271d8]
add rax, rbx
jmp rax
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp 0x18001da90
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp 0x180024850
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp 0x1800260d0
mov rsi, qword [rcx + 0x10]
xor ebx, ebx
cmp word [rcx + 0xe], 1
je 0x180026bc3
mov eax, 9
mov ebx, 1
mov word [0x1800cc9e8], ax
movzx eax, bx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov eax, dword [0x1800c6530]
add eax, 0xfffffffc
cmp eax, 2
ja 0x180026c89
mov dword [rsi], 0x8000
mov qword [rsi + 4], 0xffffffffffffffff
cmp dword [0x1800cc9f8], ebx
jle 0x180026c9a
cmp dword [0x1800cca08], ebx
jne 0x180026c4c
mov r8d, 2
lea rdx, [0x1800ccb28]
lea rcx, [0x1800cc9f0]
call fcn.18002d3f0
movzx ecx, word [rdi + 0xc]
lea rdx, [0x1800ccb28]
call fcn.180030880
cmp dword [0x1800cca08], ebx
jne 0x180026c4c
mov eax, 0x8003
mov ebx, 1
mov word [0x1800cc9e8], ax
movzx eax, bx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov eax, dword [0x1800cca70]
mov dword [rsi + 8], eax
mov eax, dword [0x1800cca70]
mov dword [rsi + 4], eax
mov ecx, dword [0x1800cca78]
mov eax, dword [0x1800cca70]
test ecx, ecx
jle 0x180026c70
mov dword [rsi], ecx
cmp dword [rsi], eax
jbe 0x180026c9a
mov dword [rsi], eax
movzx eax, bx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov eax, 0xb
mov ebx, 1
mov word [0x1800cc9e8], ax
movzx eax, bx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp 0x180026630
mov rdx, qword [rcx + 0x10]
movzx ecx, word [rcx + 0xe]
sub ecx, 1
je 0x180026d2e
cmp ecx, 5
je 0x180026cf7
mov eax, 9
mov ecx, 1
mov word [0x1800cc9e8], ax
movzx eax, cx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
cmp dword [0x1800c6530], 6
jne 0x180026d52
mov ecx, dword [rdx]
cmp ecx, 2
je 0x180026d13
mov eax, 9
mov word [0x1800cc9e8], ax
xor ebx, ebx
cmp ecx, 2
setne bl
movzx eax, bx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
cmp dword [0x1800c6530], 4
jl 0x180026d52
xor ebx, ebx
mov dword [rdx], 2
movzx eax, bx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov eax, 0xb
mov ecx, 1
mov word [0x1800cc9e8], ax
movzx eax, cx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov rsi, qword [rcx + 0x10]
xor ebx, ebx
movzx ecx, word [rcx + 0xe]
sub ecx, 1
je 0x180026f00
sub ecx, 2
je 0x180026eb2
sub ecx, 3
je 0x180026e38
cmp ecx, 1
je 0x180026dc4
mov eax, 5
mov ebx, 1
mov word [0x1800cc9e8], ax
movzx eax, bx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov eax, dword [0x1800c6530]
add eax, 0xfffffffc
cmp eax, 2
ja 0x180026f4a
lea r8, [0x1800c6570]
mov edx, 0x104
lea rcx, [0x1800ccdb0]
call fcn.180065ef0
mov eax, dword [0x1800cad48]
mov dword [0x1800cad54], eax
test rsi, rsi
je 0x180026f5b
lea r8, [0x1800ccdb0]
mov edx, 0x100
mov rcx, rsi
call fcn.180065ef0
movzx eax, word [0x1800cad54]
mov word [rsi + 0x100], ax
movzx eax, bx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov eax, dword [0x1800c6530]
add eax, 0xfffffffc
cmp eax, 2
ja 0x180026f4a
movzx ecx, word [rsi + 0x100]
call fcn.1800205a0
test eax, eax
je 0x180026e8e
mov r8, rsi
lea rcx, [0x1800ccdb0]
mov edx, 0x104
call fcn.180065ef0
movzx eax, word [rsi + 0x100]
mov dword [0x1800cad54], eax
movzx eax, bx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov eax, 9
mov ebx, 1
mov word [0x1800cc9e8], ax
movzx eax, bx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov eax, dword [0x1800c6530]
add eax, 0xfffffffc
cmp eax, 2
ja 0x180026f4a
lea r8, [0x1800c6570]
mov edx, 0x100
mov rcx, rsi
call fcn.180065ef0
movzx eax, word [0x1800cad48]
mov word [rsi + 0x100], ax
movzx eax, bx
mov word [rsi + 0x102], bx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov eax, dword [0x1800c6530]
add eax, 0xfffffffc
cmp eax, 2
ja 0x180026f4a
lea r8, [0x1800ccdb0]
mov edx, 0x100
mov rcx, rsi
call fcn.180065ef0
movzx eax, word [0x1800cad54]
mov word [rsi + 0x100], ax
movzx eax, bx
mov word [rsi + 0x102], bx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov eax, 0xb
mov ebx, 1
mov word [0x1800cc9e8], ax
movzx eax, bx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp 0x180023db0
mov rsi, qword [rcx + 0x10]
movzx ecx, word [rcx + 0xe]
sub ecx, 0x801
je 0x18002705e
sub ecx, 4
je 0x18002702a
xor ebx, ebx
sub ecx, 1
je 0x180026fcf
cmp ecx, 2
je 0x180026fd5
mov eax, 9
mov ecx, 1
mov word [0x1800cc9e8], ax
movzx eax, cx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov dword [0x1800c6cb0], ebx
xor edx, edx
mov r8d, 0x468
mov rcx, rsi
call fcn.1800a24f0
lea r8, [rsi + 0x20c]
mov edx, 0x100
lea rcx, [rsi + 0x100]
lea r9, [0x1800c6cb0]
call fcn.1800200d0
test eax, eax
jne 0x180027014
mov edx, 0x12
mov word [0x1800cc9e8], dx
sete bl
movzx eax, bx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
test rsi, rsi
je 0x18002703f
xor edx, edx
mov r8d, 0x468
mov rcx, rsi
call fcn.1800a24f0
mov dword [0x1800c6cb0], 0x15b3
xor ebx, ebx
movzx eax, bx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov edx, dword [rsi + 0x20c]
lea r8, [rsi + 0x268]
mov rcx, rsi
call fcn.180020be0
test eax, eax
jne 0x180027049
cmp byte [rsi], 0x2f
jne 0x18002708a
cmp byte [rsi + 1], al
jne 0x18002708a
cmp dword [rsi + 0x20c], 8
je 0x180027049
mov edx, 0x12
mov ecx, 1
mov word [0x1800cc9e8], dx
movzx eax, cx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov rsi, qword [rcx + 0x10]
test rsi, rsi
je 0x180027190
cmp word [rcx + 0xe], 1
jne 0x180027190
mov eax, dword [0x1800c6530]
add eax, 0xfffffffc
cmp eax, 3
ja 0x18002716c
xor edx, edx
mov r8d, 0x126
mov rcx, rsi
call fcn.1800a24f0
call fcn.180029d90
test eax, eax
je 0x180027190
movsxd rcx, dword [0x1800cd18c]
cmp ecx, dword [0x1800cd188]
je 0x180027130
movzx edx, word [rbx + rcx*2 + 0xcd190]
xor ebx, ebx
cmp rcx, 9
jb 0x180027121
mov dword [0x1800cd18c], ebx
movzx ecx, bx
mov dword [rsi], edx
jmp 0x180027141
inc ecx
mov dword [0x1800cd18c], ecx
movzx ecx, bx
mov dword [rsi], edx
jmp 0x180027141
mov eax, 0xb
mov ecx, 1
mov word [0x1800cc9e8], ax
mov eax, dword [0x1800cd160]
test eax, eax
jle 0x1800271a1
mov eax, dword [0x1800cd160]
dec eax
mov dword [0x1800cd160], eax
movzx eax, cx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov eax, 0xb
mov ecx, 1
mov word [0x1800cc9e8], ax
movzx eax, cx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov eax, 9
mov ecx, 1
mov word [0x1800cc9e8], ax
movzx eax, cx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov rbx, qword [rsp + 0x30]
mov eax, 9
mov rsi, qword [rsp + 0x38]
mov word [0x1800cc9e8], ax
mov eax, 1
add rsp, 0x20
pop rdi
ret