Function at 0x18005d4f0
Capabilities:
Accept command line arguments
Authenticate hmac
Encrypt data using speck
Hash data using fnv
Query environment variable
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xd78
mov eax, 0xd3b1
mov word [rsp + 0x8dc], ax
movzx eax, byte [0x1800a692f]
mov byte [rsp + 0x44], al
mov byte [rsp + 0x45], 0x5b
mov eax, dword [0x1800a6954]
mov dword [rsp + 0x54], eax
movabs rax, 0xe97fa3ddfe766
mov qword [rsp + 0x80], rax
mov eax, 0x88a9
mov word [rsp + 0x4c], ax
movzx eax, word [0x1800a6a68]
movzx eax, ax
mov dword [rsp + 0x60], eax
movzx eax, byte [0x1800a68e7]
movsx rax, al
mov qword [rsp + 0x78], rax
mov dword [rsp + 0x6c], 0x7f92
mov eax, 0xb6
mov word [rsp + 0x50], ax
mov eax, dword [0x1800a6a3c]
mov word [rsp + 0x58], ax
mov byte [rsp + 0x43], 0x88
mov eax, 0xf9
mov word [rsp + 0x48], ax
movzx eax, word [0x1800a6a40]
movsx rax, ax
mov qword [rsp + 0x90], rax
mov rax, qword [0x1800a6a80]
mov dword [rsp + 0x68], eax
movzx eax, byte [0x1800a68e6]
movsx rax, al
mov qword [rsp + 0x98], rax
movzx eax, word [0x1800a6a40]
movsx rax, ax
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x5c], 0x2497
mov byte [rsp + 0x41], 0xf7
mov qword [rsp + 0x88], 0x31fa
mov byte [rsp + 0x42], 9
movzx eax, byte [0x1800a697e]
mov byte [rsp + 0x46], al
mov byte [rsp + 0x47], 0xe1
mov dword [rsp + 0x64], 0x1e
mov byte [rsp + 0x40], 0x5d
mov dword [rsp + 0xb00], 0x95
mov eax, dword [0x1800a6a4c]
mov byte [rsp + 0x248], al
mov eax, 0x10b3
mov word [rsp + 0x8e0], ax
mov eax, 0x52e6
mov word [rsp + 0x8e4], ax
mov dword [rsp + 0xb04], 0x2fa3
mov eax, 0xffff9dad
mov word [rsp + 0x8e8], ax
movsx rax, word [0x1800a6a6c]
mov qword [rsp + 0xcd8], rax
movzx eax, byte [0x1800a6a28]
mov byte [rsp + 0x249], al
movzx eax, word [0x1800a6a6c]
mov word [rsp + 0x8ec], ax
mov eax, dword [0x1800a6a60]
mov dword [rsp + 0xb08], eax
mov eax, dword [rsp + 0x60]
sub eax, 0xa046
cdqe
mov qword [0x1800a6a50], rax
mov eax, dword [0x180dcc080]
mov dword [rsp + 0xec], eax
mov eax, dword [rsp + 0xec]
add eax, 0xeb
mov dword [rsp + 0x2f0], eax
mov eax, dword [rsp + 0xec]
add eax, 0x299
mov dword [rsp + 0xb0c], eax
movzx eax, byte [0x1800a697f]
movsx ecx, byte [0x1800a692f]
cmp eax, ecx
je 0x18005d6fe
mov dword [rsp + 0x6e0], 1
jmp 0x18005d709
mov dword [rsp + 0x6e0], 0
movzx eax, byte [0x1800a697f]
cmp eax, 0x1a
je 0x18005d722
mov dword [rsp + 0x6dc], 1
jmp 0x18005d72d
mov dword [rsp + 0x6dc], 0
mov eax, dword [rsp + 0x6dc]
cmp dword [rsp + 0x6e0], eax
jg 0x18005d742
jmp 0x18005d819
movzx eax, byte [rsp + 0x42]
movzx eax, al
mov ecx, dword [rsp + 0x64]
sub eax, ecx
mov ecx, dword [rsp + 0x64]
cmp eax, ecx
jge 0x18005d779
mov eax, dword [rsp + 0x54]
sub eax, 0x40
cdqe
mov qword [rsp + 0x90], rax
mov qword [0x1800a6a50], 0x71
jmp 0x18005d819
movzx eax, byte [0x1800a69a6]
movzx eax, al
test eax, eax
je 0x18005d7bc
movzx eax, byte [0x1800a697e]
movsx eax, al
movzx ecx, byte [rsp + 0x45]
movsx ecx, cl
sub eax, ecx
mov byte [0x1800a697e], al
movzx eax, word [rsp + 0x48]
mov rcx, qword [0x1800a6a90]
add rcx, rax
mov rax, rcx
mov qword [0x1800a6a90], rax
jmp 0x18005d819
movzx eax, word [rsp + 0x50]
movzx eax, ax
test eax, eax
jne 0x18005d7d5
mov dword [rsp + 0x6e4], 1
jmp 0x18005d7e0
mov dword [rsp + 0x6e4], 0
cmp dword [rsp + 0x6e4], 0xda
jle 0x18005d819
mov eax, 2
imul rax, rax, 0xc
lea rcx, [0x18107c2d8]
movzx eax, word [rcx + rax]
mov word [rsp + 0x58], ax
mov rax, qword [0x1800a6a70]
xor rax, 0x249b10e5
mov byte [0x1800a692e], al
mov eax, dword [rsp + 0xec]
add eax, 0x41
mov dword [rsp + 0x90c], eax
mov eax, dword [0x180dcc080]
mov dword [rsp + 0xf0], eax
movzx eax, byte [rsp + 0x47]
movzx eax, al
mov ecx, dword [0x1800a6a3c]
cmp eax, ecx
jle 0x18005d856
mov dword [rsp + 0x260], 1
jmp 0x18005d861
mov dword [rsp + 0x260], 0
movzx eax, byte [rsp + 0x47]
movzx eax, al
cmp eax, 0x29
jle 0x18005d87b
mov dword [rsp + 0x6e8], 1
jmp 0x18005d886
mov dword [rsp + 0x6e8], 0
mov eax, dword [rsp + 0x6e8]
cmp dword [rsp + 0x260], eax
jg 0x18005d898
jmp 0x18005d8da
mov eax, dword [rsp + 0x64]
test eax, eax
je 0x18005d8da
movzx eax, word [0x1800a6a20]
mov ecx, dword [rsp + 0x60]
add ecx, eax
mov eax, ecx
movzx ecx, word [0x1800a6a40]
movsx ecx, cx
add eax, ecx
cdqe
movzx ecx, byte [rsp + 0x47]
movzx ecx, cl
mov rdx, qword [rsp + 0x98]
imul rcx, rdx
sub rax, rcx
mov byte [0x1800a69a6], al
mov eax, dword [rsp + 0xf0]
add eax, 0x1ef
mov dword [rsp + 0xb10], eax
movzx eax, byte [rsp + 0x46]
movzx eax, al
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
movabs rax, 0x9b853474bfe9
mov rcx, qword [0x1800a6a78]
add rcx, rax
mov rax, rcx
mov eax, dword [rsp + 0xf0]
add eax, 0x1c1
mov dword [rsp + 0xb14], eax
movzx eax, byte [0x1800a69a6]
movzx eax, al
not eax
test eax, eax
jne 0x18005d956
cmp qword [0x1800a6a10], 0
je 0x18005d949
mov eax, dword [rsp + 0x6c]
test eax, eax
jne 0x18005d956
mov dword [rsp + 0x268], 0
jmp 0x18005d961
mov dword [rsp + 0x268], 1
movzx eax, byte [rsp + 0x41]
movzx eax, al
cmp qword [0x1800a6a78], rax
ja 0x18005d98b
movzx eax, byte [rsp + 0x41]
movzx eax, al
test eax, eax
jne 0x18005d98b
mov dword [rsp + 0x264], 0
jmp 0x18005d996
mov dword [rsp + 0x264], 1
mov eax, dword [rsp + 0x264]
cmp dword [rsp + 0x268], eax
jge 0x18005db14
movzx eax, byte [rsp + 0x45]
movsx eax, al
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov dword [0x1800a6954], eax
mov eax, dword [0x1800a6954]
test eax, eax
je 0x18005db0f
mov rax, qword [rsp + 0x80]
mov ecx, dword [rsp + 0x60]
movsxd rcx, ecx
cmp rax, rcx
jle 0x18005d9ef
mov dword [rsp + 0x270], 1
jmp 0x18005d9fa
mov dword [rsp + 0x270], 0
mov rax, qword [rsp + 0x80]
cmp rax, 0x26
jle 0x18005da15
mov dword [rsp + 0x26c], 1
jmp 0x18005da20
mov dword [rsp + 0x26c], 0
mov eax, dword [rsp + 0x26c]
cmp dword [rsp + 0x270], eax
jge 0x18005da7c
movzx eax, word [rsp + 0x50]
movzx eax, ax
sub eax, 0xbc
mov word [rsp + 0x4c], ax
mov rax, qword [0x1800a6a18]
not rax
movzx ecx, byte [rsp + 0x43]
sub rax, rcx
test rax, rax
jne 0x18005da63
mov byte [rsp + 0xa4], 1
jmp 0x18005da6b
mov byte [rsp + 0xa4], 0
movzx eax, byte [rsp + 0xa4]
mov byte [rsp + 0x42], al
jmp 0x18005db0f
movzx eax, byte [0x1800a697f]
test eax, eax
je 0x18005dacc
movzx eax, byte [rsp + 0x41]
movzx eax, al
mov rcx, qword [rsp + 0x98]
sub rcx, rax
mov rax, rcx
movzx ecx, byte [rsp + 0x46]
movzx ecx, cl
mov edx, dword [0x1800a6a3c]
add edx, ecx
mov ecx, edx
not ecx
movsxd rcx, ecx
add rax, rcx
mov byte [0x1800a68e6], al
mov rax, qword [rsp + 0x70]
inc rax
mov qword [rsp + 0x70], rax
jmp 0x18005db0f
movzx eax, word [rsp + 0x50]
movzx eax, ax
test eax, eax
je 0x18005daf2
movzx eax, byte [0x1800a6902]
movsx eax, al
movzx ecx, word [rsp + 0x48]
imul eax, ecx
mov byte [0x1800a6902], al
jmp 0x18005db0f
xor eax, eax
cmp eax, 0x37
je 0x18005db0f
movzx eax, byte [0x1800a68e7]
movsx eax, al
sar eax, 8
cdqe
mov qword [0x1800a6a58], rax
jmp 0x18005dbac
movzx eax, byte [rsp + 0x40]
movsx eax, al
test eax, eax
jne 0x18005db39
movzx eax, byte [rsp + 0x41]
movzx eax, al
test eax, eax
jne 0x18005db39
mov dword [rsp + 0x274], 1
jmp 0x18005db44
mov dword [rsp + 0x274], 0
movzx eax, byte [0x1800a68e6]
movsx eax, al
movzx ecx, word [0x1800a6a88]
movsx ecx, cx
imul eax, ecx
not eax
mov ecx, dword [rsp + 0x274]
sub ecx, eax
mov eax, ecx
test eax, eax
jne 0x18005dbac
mov eax, 1
imul rax, rax, 0x45
lea rcx, [0x180f64850]
movsx eax, byte [rcx + rax]
movzx ecx, byte [rsp + 0x40]
movsx ecx, cl
sub ecx, eax
mov eax, ecx
mov byte [rsp + 0x40], al
mov eax, dword [0x1800a6a3c]
cdqe
movabs rcx, 0x7098c03ddf195
sub rax, rcx
mov word [0x1800a69bc], ax
mov eax, dword [rsp + 0xf0]
add eax, 0x39e
mov dword [rsp + 0x308], eax
movzx eax, word [0x1800a69bc]
movzx eax, ax
movabs rcx, 0x77f0e0e60865f
sub rax, rcx
mov qword [rsp + 0x70], rax
mov eax, dword [0x1800a6aa0]
cdqe
add rax, qword [rsp + 0x90]
mov dword [0x1800a6aa0], eax
mov eax, dword [0x180dcc080]
mov dword [rsp + 0xf4], eax
movzx eax, byte [0x1800a6902]
movsx eax, al
test eax, eax
jne 0x18005dc19
mov dword [rsp + 0x278], 1
jmp 0x18005dc24
mov dword [rsp + 0x278], 0
movzx eax, byte [rsp + 0x46]
movzx eax, al
add rax, qword [0x1800a6a60]
mov ecx, dword [rsp + 0x64]
mov edx, dword [rsp + 0x278]
imul edx, ecx
mov ecx, edx
movsxd rcx, ecx
add rax, rcx
not rax
mov ecx, dword [0x1800a6aa4]
sub rax, rcx
mov word [0x1800a69bc], ax
mov eax, dword [rsp + 0xf4]
add eax, 0xad
mov dword [rsp + 0xb18], eax
movzx eax, byte [rsp + 0x43]
mov ecx, dword [0x1800a6a30]
cmp eax, ecx
jl 0x18005dc80
jmp 0x18005dc9e
movsx eax, byte [0x1800a692f]
not eax
movzx ecx, word [rsp + 0x4c]
cmp eax, ecx
jl 0x18005dc9e
movzx eax, word [0x180dcc080]
mov word [rsp + 0x48], ax
mov eax, dword [rsp + 0xf4]
add eax, 0x2da
mov dword [rsp + 0xb1c], eax
movzx eax, byte [rsp + 0x46]
movzx eax, al
test eax, eax
je 0x18005dcce
movzx eax, byte [rsp + 0x44]
movsx eax, al
mov dword [rsp + 0x27c], eax
jmp 0x18005dcd9
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x27c], eax
movsxd rax, dword [rsp + 0x27c]
mov qword [0x1800a6a60], rax
mov rax, qword [rsp + 0x70]
add rax, 0x6e
mov dword [0x1800a6a44], eax
mov eax, dword [rsp + 0xf4]
add eax, 0xb1
mov dword [rsp + 0x330], eax
mov eax, dword [0x180dcc080]
mov dword [rsp + 0xf8], eax
movsx eax, word [rsp + 0x58]
mov ecx, dword [0x1800a6a44]
xor ecx, eax
mov eax, ecx
mov ecx, dword [0x1800a6a44]
add ecx, eax
mov eax, ecx
mov dword [0x1800a6a44], eax
movzx eax, byte [rsp + 0x47]
movzx eax, al
mov word [rsp + 0x50], ax
mov eax, dword [rsp + 0xf8]
add eax, 0x307
mov dword [rsp + 0xb20], eax
mov byte [0x1800a69a6], 0x70
mov rax, qword [0x1800a6a80]
add rax, 0x2fe362d7
mov qword [0x1800a6a10], rax
mov eax, dword [rsp + 0xf8]
add eax, 0x5f
mov dword [rsp + 0xb24], eax
mov qword [rsp + 0x88], 3
movzx eax, word [0x1800a6a68]
movzx eax, ax
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x720], rax
cmp qword [rsp + 0x720], 0
je 0x18005ddde
cmp qword [rsp + 0x720], 1
je 0x18005ddf7
cmp qword [rsp + 0x720], 2
je 0x18005de24
cmp qword [rsp + 0x720], 3
je 0x18005de56
jmp 0x18005de99
mov eax, dword [0x1800a6a30]
mov ecx, dword [0x1800a6a8c]
xor eax, ecx
mov dword [0x1800a6a30], eax
jmp 0x18005de99
mov eax, dword [0x1800a6a8c]
mov ecx, dword [rsp + 0x64]
sub eax, ecx
mov byte [0x1800a6903], al
movzx eax, byte [rsp + 0x43]
mov ecx, dword [rsp + 0x60]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x60]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x60], eax
jmp 0x18005de99
mov eax, dword [0x1800a6a3c]
imul eax, dword [0x1800a6aa4]
mov byte [0x1800a68e7], al
mov rax, qword [rsp + 0x80]
mov rcx, qword [0x1800a6a28]
imul rcx, rax
mov rax, rcx
mov qword [0x1800a6a58], rax
jmp 0x18005de99
movzx eax, byte [0x1800a697f]
mov ecx, dword [rsp + 0x54]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x54]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x54], eax
movzx eax, word [0x1800a6a48]
mov rcx, qword [0x1800a6a50]
add rcx, rax
mov rax, rcx
mov rcx, qword [0x1800a6a50]
add rcx, rax
mov rax, rcx
mov qword [0x1800a6a50], rax
mov eax, dword [rsp + 0xf8]
add eax, 0x2f7
mov dword [rsp + 0x34c], eax
mov eax, dword [0x180dcc080]
mov dword [rsp + 0xfc], eax
movzx eax, word [0x1800a6a20]
sub rax, qword [0x1800a6a28]
mov word [0x1800a6a20], ax
mov eax, dword [rsp + 0xfc]
add eax, 0x20f
mov dword [rsp + 0x3a4], eax
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [0x1800a6aa0], eax
mov eax, dword [rsp + 0xfc]
add eax, 0xe6
mov dword [rsp + 0xb28], eax
movzx eax, byte [rsp + 0x41]
movzx eax, al
test eax, eax
je 0x18005df11
jmp 0x18005dfa6
mov eax, dword [rsp + 0x64]
test eax, eax
jne 0x18005df26
mov dword [rsp + 0x284], 1
jmp 0x18005df31
mov dword [rsp + 0x284], 0
mov eax, dword [0x1800a6aa0]
test eax, eax
jne 0x18005df48
mov dword [rsp + 0x280], 1
jmp 0x18005df53
mov dword [rsp + 0x280], 0
mov eax, dword [rsp + 0x280]
cmp dword [rsp + 0x284], eax
jge 0x18005df70
mov dword [rsp + 0x28c], 1
jmp 0x18005df7b
mov dword [rsp + 0x28c], 0
cmp qword [0x1800a6a70], 0x6b
jge 0x18005df92
mov dword [rsp + 0x288], 1
jmp 0x18005df9d
mov dword [rsp + 0x288], 0
mov eax, dword [rsp + 0x288]
not eax
mov eax, dword [rsp + 0xfc]
add eax, 0x149
mov dword [rsp + 0x3a0], eax
mov rax, qword [0x1800a6a80]
movabs rcx, 0xf0f4f11291cd0
sub rax, rcx
mov qword [0x1800a6a18], rax
mov eax, dword [0x180dcc080]
mov dword [rsp + 0x100], eax
mov eax, dword [rsp + 0x100]
add eax, 0x2cc
mov dword [rsp + 0x774], eax
mov rax, qword [rsp + 0x98]
test rax, rax
je 0x18005e003
jmp 0x18005e014
movzx eax, word [rsp + 0x4c]
movzx ecx, byte [rsp + 0x43]
sub eax, ecx
mov word [rsp + 0x4c], ax
mov eax, dword [rsp + 0x100]
add eax, 0x1e1
mov dword [rsp + 0xb2c], eax
mov rcx, qword [0x1800a6aa8]
call qword [sym.imp.USER32.dll_OpenIcon]
mov dword [0x1800a6aa4], eax
mov eax, dword [rsp + 0x100]
add eax, 0x1b3
mov dword [rsp + 0x178], eax
movzx eax, word [rsp + 0x4c]
mov rcx, qword [rsp + 0x70]
cmp rax, rcx
jl 0x18005e069
mov dword [rsp + 0x294], 1
jmp 0x18005e074
mov dword [rsp + 0x294], 0
movzx eax, word [rsp + 0x4c]
cmp eax, 0x41
jl 0x18005e08b
mov dword [rsp + 0x290], 1
jmp 0x18005e096
mov dword [rsp + 0x290], 0
mov eax, dword [rsp + 0x290]
cmp dword [rsp + 0x294], eax
jne 0x18005e172
mov eax, dword [0x1800a6a30]
mov ecx, dword [0x1800a6aa0]
sub eax, ecx
not eax
cdqe
movzx ecx, word [0x1800a6a40]
movsx rcx, cx
mov rdx, qword [rsp + 0x78]
add rdx, rcx
mov rcx, rdx
xor rax, rcx
movzx ecx, byte [rsp + 0x40]
movsx rcx, cl
mov rdx, qword [rsp + 0x98]
imul rdx, rcx
mov rcx, rdx
add rcx, 0xd883
sub rax, rcx
mov byte [0x1800a69a6], al
movzx eax, word [0x1800a6a34]
movzx eax, ax
test eax, eax
jne 0x18005e118
mov dword [rsp + 0x298], 1
jmp 0x18005e123
mov dword [rsp + 0x298], 0
movzx eax, byte [0x1800a697f]
mov rcx, qword [rsp + 0x98]
add rax, rcx
test rax, rax
jne 0x18005e147
mov dword [rsp + 0x29c], 1
jmp 0x18005e152
mov dword [rsp + 0x29c], 0
movsx eax, byte [0x1800a692e]
mov ecx, dword [rsp + 0x298]
add ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x29c]
mov word [0x1800a6a6c], ax
mov eax, dword [0x180dcc080]
mov dword [rsp + 0x104], eax
mov byte [0x1800a6903], 0x4a
mov eax, dword [rsp + 0x104]
add eax, 0x319
mov dword [rsp + 0xb30], eax
movabs rax, 0xc63c437b60cb1
mov qword [0x1800a6a10], rax
mov dword [0x1800a69d4], 0x97
mov eax, dword [rsp + 0x104]
add eax, 0x27c
mov dword [rsp + 0x77c], eax
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov word [rsp + 0x4c], ax
movzx eax, word [0x1800a6a20]
test eax, eax
je 0x18005e1f9
mov rax, qword [0x1800a6a78]
not rax
test rax, rax
je 0x18005e1f9
mov dword [rsp + 0x2a0], 1
jmp 0x18005e204
mov dword [rsp + 0x2a0], 0
mov eax, dword [rsp + 0x2a0]
not eax
cdqe
cmp rax, qword [rsp + 0x90]
ja 0x18005e30f
movzx eax, word [0x1800a69bc]
movzx eax, ax
cmp rax, qword [rsp + 0x90]
jb 0x18005e2b6
movzx eax, word [rsp + 0x50]
movzx eax, ax
test eax, eax
jne 0x18005e24e
mov dword [rsp + 0x2a4], 1
jmp 0x18005e259
mov dword [rsp + 0x2a4], 0
movzx eax, byte [rsp + 0x45]
movsx eax, al
not eax
imul eax, dword [rsp + 0x2a4]
cdqe
mov rcx, qword [rsp + 0x88]
not rcx
mov edx, 0xb0ea
sub rdx, rcx
mov rcx, rdx
movzx edx, byte [rsp + 0x46]
movzx edx, dl
mov r8, qword [rsp + 0x70]
add rdx, r8
add rcx, rdx
not rcx
imul rax, rcx
mov word [0x1800a6a40], ax
mov eax, dword [0x1800a6a8c]
imul eax, eax, 0x792501d5
mov dword [rsp + 0x60], eax
jmp 0x18005e30d
movsxd rax, dword [rsp + 0x5c]
mov rcx, qword [rsp + 0x80]
cmp rax, rcx
jl 0x18005e2d6
mov qword [rsp + 0x9e0], 1
jmp 0x18005e2e2
mov qword [rsp + 0x9e0], 0
mov rax, qword [0x1800a6a78]
not rax
cmp qword [rsp + 0x9e0], rax
jb 0x18005e30d
movsx eax, byte [0x1800a6903]
mov ecx, dword [0x1800a69d4]
sub ecx, eax
mov eax, ecx
mov dword [0x1800a69d4], eax
jmp 0x18005e329
movzx eax, byte [rsp + 0x46]
movzx eax, al
movabs rcx, 0xee8f041f2a1a
sub rax, rcx
mov qword [rsp + 0x78], rax
mov eax, dword [rsp + 0x104]
add eax, 0x117
mov dword [rsp + 0xb34], eax
mov rax, qword [rsp + 0x70]
mov ecx, dword [rsp + 0x60]
movsxd rcx, ecx
cmp rax, rcx
jne 0x18005e35a
mov dword [rsp + 0x2ac], 1
jmp 0x18005e365
mov dword [rsp + 0x2ac], 0
mov rax, qword [rsp + 0x70]
cmp rax, 0x19
jne 0x18005e37d
mov dword [rsp + 0x2a8], 1
jmp 0x18005e388
mov dword [rsp + 0x2a8], 0
mov eax, dword [rsp + 0x2a8]
cmp dword [rsp + 0x2ac], eax
jge 0x18005e49f
mov dword [0x1800a6aa0], 3
mov dword [rsp + 0x64], 0xd3304dbb
movsx rax, byte [0x1800a6903]
mov qword [rsp + 0x70], rax
mov eax, dword [0x1800a6aa0]
mov dword [rsp + 0xd8], eax
cmp dword [rsp + 0xd8], 0
je 0x18005e3f5
cmp dword [rsp + 0xd8], 1
je 0x18005e406
cmp dword [rsp + 0xd8], 2
je 0x18005e424
cmp dword [rsp + 0xd8], 3
je 0x18005e45d
jmp 0x18005e49d
mov rax, qword [0x1800a6a18]
mov word [rsp + 0x48], ax
jmp 0x18005e49d
movzx eax, byte [rsp + 0x47]
movzx eax, al
movabs rcx, 0x195174b34057d
xor rax, rcx
mov qword [0x1800a6a18], rax
jmp 0x18005e49d
movzx eax, byte [rsp + 0x47]
movzx eax, al
test eax, eax
je 0x18005e441
mov rax, qword [0x1800a6a78]
mov qword [rsp + 0x9e8], rax
jmp 0x18005e44e
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x9e8], rax
mov eax, dword [rsp + 0x9e8]
mov dword [0x1800a6a4c], eax
jmp 0x18005e49d
movzx eax, word [rsp + 0x4c]
add rax, qword [rsp + 0x90]
mov word [rsp + 0x4c], ax
movzx eax, word [rsp + 0x48]
mov rcx, qword [rsp + 0x78]
xor rcx, rax
mov rax, rcx
movzx ecx, byte [rsp + 0x43]
movzx edx, byte [rsp + 0x41]
movzx edx, dl
lea ecx, [rcx + rdx + 0xb4bf252]
movsxd rcx, ecx
sub rax, rcx
mov dword [rsp + 0x64], eax
jmp 0x18005e50c
mov eax, dword [rsp + 0x68]
movabs rcx, 0xd108877c1a40b
sub rax, rcx
mov dword [0x1800a6954], eax
movzx eax, byte [rsp + 0x44]
movsx rax, al
add rax, qword [rsp + 0x78]
test rax, rax
jne 0x18005e4d7
mov qword [rsp + 0x9f0], 1
jmp 0x18005e4e3
mov qword [rsp + 0x9f0], 0
mov eax, dword [0x1800a6aa0]
cdqe
mov rcx, qword [0x1800a6a10]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9f0]
xor rcx, rax
mov rax, rcx
mov dword [0x1800a6a38], eax
mov eax, dword [0x180dcc080]
mov dword [rsp + 0x108], eax
mov rax, qword [rsp + 0x80]
movsxd rcx, dword [rsp + 0x54]
cmp rax, rcx
jge 0x18005e62d
movzx eax, byte [rsp + 0x40]
movsx rax, al
sub rax, qword [0x1800a6a78]
test rax, rax
je 0x18005e556
mov eax, dword [rsp + 0x6c]
not eax
mov word [0x1800a6a34], ax
jmp 0x18005e628
cmp dword [rsp + 0x68], 0
je 0x18005e589
movzx eax, byte [0x1800a697e]
movsx eax, al
movsx ecx, byte [0x1800a692f]
add eax, ecx
movzx ecx, byte [0x1800a697e]
movsx ecx, cl
or ecx, eax
mov eax, ecx
mov byte [0x1800a697e], al
jmp 0x18005e628
movzx eax, byte [rsp + 0x46]
movzx eax, al
test eax, eax
je 0x18005e5a3
movzx eax, byte [0x1800a6902]
movsx eax, al
test eax, eax
jne 0x18005e5b8
movzx eax, word [0x1800a6a40]
cwde
sub eax, dword [rsp + 0x5c]
mov word [0x1800a6a40], ax
jmp 0x18005e628
cmp qword [rsp + 0x90], 0
jne 0x18005e5ed
mov rax, qword [rsp + 0x70]
test rax, rax
jne 0x18005e5ed
movzx eax, word [rsp + 0x48]
test eax, eax
je 0x18005e5ed
cmp qword [0x1800a6a50], 0
je 0x18005e5ed
mov dword [rsp + 0x2b0], 1
jmp 0x18005e5f8
mov dword [rsp + 0x2b0], 0
mov eax, dword [rsp + 0x2b0]
not eax
test eax, eax
je 0x18005e628
movzx eax, word [0x1800a6a24]
movzx ecx, byte [rsp + 0x44]
movsx ecx, cl
add eax, ecx
movzx ecx, word [0x1800a6a24]
sub ecx, eax
mov eax, ecx
mov word [0x1800a6a24], ax
jmp 0x18005e6e2
mov rax, qword [0x1800a6a50]
not rax
test rax, rax
je 0x18005e6e2
movzx eax, word [0x1800a6a20]
test eax, eax
jne 0x18005e659
mov qword [rsp + 0x9f8], 1
jmp 0x18005e665
mov qword [rsp + 0x9f8], 0
movzx eax, word [0x1800a6a88]
cwde
test eax, eax
jne 0x18005e67e
mov dword [rsp + 0x2b4], 1
jmp 0x18005e689
mov dword [rsp + 0x2b4], 0
mov rax, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x9f8]
xor rcx, rax
mov rax, rcx
mov ecx, dword [rsp + 0x2b4]
and ecx, 0
movsxd rcx, ecx
sub rax, rcx
movzx ecx, byte [0x1800a6902]
movsx ecx, cl
and ecx, 0x6b
movsxd rcx, ecx
movsx edx, byte [0x1800a6903]
not edx
movsxd rdx, edx
mov r8, qword [0x1800a6a98]
or rdx, r8
xor rcx, rdx
add rax, rcx
mov word [0x1800a69bc], ax
mov eax, dword [rsp + 0x108]
add eax, 0x2bf
mov dword [rsp + 0xe4], eax
mov eax, dword [rsp + 0x108]
add eax, 0x26e
mov dword [rsp + 0x18c], eax
movsx eax, byte [0x1800a692f]
mov ecx, dword [0x1800a6a8c]
xor eax, ecx
mov byte [0x1800a692f], al
mov byte [rsp + 0x42], 0xd9
mov eax, dword [rsp + 0x108]
add eax, 0x2f6
mov dword [rsp + 0xb38], eax
movzx eax, byte [rsp + 0x40]
movsx rax, al
movabs rcx, 0x6f424f2082a50
add rax, rcx
mov byte [0x1800a692f], al
mov eax, dword [0x180dcc080]
mov dword [rsp + 0x110], eax
mov dword [0x1800a6a44], 0
cmp qword [0x1800a6a60], 0
jne 0x18005e77f
mov dword [rsp + 0x2b8], 1
jmp 0x18005e78a
mov dword [rsp + 0x2b8], 0
movzx eax, word [0x1800a69bc]
movzx eax, ax
test eax, eax
jne 0x18005e7a5
mov dword [rsp + 0x2c0], 1
jmp 0x18005e7b0
mov dword [rsp + 0x2c0], 0
mov eax, dword [0x1800a69d4]
add eax, dword [rsp + 0x5c]
test eax, eax
jne 0x18005e7cb
mov dword [rsp + 0x2bc], 1
jmp 0x18005e7d6
mov dword [rsp + 0x2bc], 0
movsx eax, word [rsp + 0x58]
not eax
mov ecx, dword [rsp + 0x2b8]
sub ecx, eax
mov eax, ecx
cdqe
mov rcx, qword [0x1800a6a90]
add rcx, rax
mov rax, rcx
not rax
mov ecx, dword [rsp + 0x2bc]
mov edx, dword [rsp + 0x2c0]
add edx, ecx
mov ecx, edx
movsxd rcx, ecx
xor rax, rcx
test rax, rax
jne 0x18005e826
mov eax, 1
mov word [rsp + 0xb8], ax
jmp 0x18005e830
xor eax, eax
mov word [rsp + 0xb8], ax
movzx eax, word [rsp + 0xb8]
mov word [0x1800a6a6c], ax
mov eax, dword [0x1800a6a44]
mov dword [rsp + 0x920], eax
cmp dword [rsp + 0x920], 0
je 0x18005e858
jmp 0x18005e87c
mov eax, dword [rsp + 0x60]
cdqe
movabs rcx, 0x8c6e897342dd4
add rax, rcx
mov qword [0x1800a6a28], rax
mov dword [0x1800a6a44], 0xb45d130d
mov eax, dword [rsp + 0x110]
add eax, 0x24e
mov dword [rsp + 0xb3c], eax
movzx eax, byte [0x1800a69a6]
mov ecx, 1
imul rcx, rcx, 0x217e
lea rdx, [0x180fe1940]
mov byte [rdx + rcx], al
mov dword [rsp + 0x64], 0x7813e716
mov eax, dword [rsp + 0x110]
add eax, 0xce
mov dword [rsp + 0x78c], eax
mov dword [0x1800a6aa4], 2
mov eax, dword [0x1800a6aa4]
mov dword [rsp + 0x10c], eax
cmp dword [rsp + 0x10c], 0
je 0x18005e8fe
cmp dword [rsp + 0x10c], 1
je 0x18005e90b
cmp dword [rsp + 0x10c], 2
je 0x18005e922
jmp 0x18005e940
movzx eax, byte [0x180dcc080]
mov byte [rsp + 0x42], al
jmp 0x18005e940
mov rax, qword [0x1800a6a80]
and rax, 0xef86
mov qword [rsp + 0x80], rax
jmp 0x18005e940
movsxd rax, dword [rsp + 0x54]
mov rcx, qword [0x1800a6a18]
add rax, rcx
movsxd rcx, dword [rsp + 0x54]
sub rcx, rax
mov rax, rcx
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x110]
add eax, 0x1aa
mov dword [rsp + 0xb40], eax
movzx eax, byte [rsp + 0x42]
movzx eax, al
mov rcx, qword [0x1800a6a98]
sub rax, rcx
test rax, rax
jne 0x18005e977
mov dword [rsp + 0x2c4], 1
jmp 0x18005e982
mov dword [rsp + 0x2c4], 0
movzx eax, byte [rsp + 0x45]
movsx eax, al
imul eax, dword [rsp + 0x2c4]
cdqe
mov qword [rsp + 0x80], rax
mov eax, dword [0x180dcc080]
mov dword [rsp + 0x114], eax
mov eax, dword [rsp + 0x114]
add eax, 0x2ca
mov dword [rsp + 0x844], eax
mov eax, dword [rsp + 0x114]
add eax, 0xfe
mov dword [rsp + 0x588], eax
xor eax, eax
mov word [0x1800a69bc], ax
mov byte [0x1800a6903], 0x78
movzx eax, word [0x1800a69bc]
movzx eax, ax
mov dword [rsp + 0x91c], eax
cmp dword [rsp + 0x91c], 0
je 0x18005e9fc
jmp 0x18005ea5d
movzx eax, byte [rsp + 0x40]
movsx eax, al
test eax, eax
je 0x18005ea1d
movzx eax, byte [0x1800a68e7]
movsx rax, al
mov qword [rsp + 0xa00], rax
jmp 0x18005ea2c
mov rax, qword [0x1800a6a58]
mov qword [rsp + 0xa00], rax
mov rax, qword [rsp + 0xa00]
mov qword [rsp + 0x90], rax
movzx eax, byte [rsp + 0x44]
movsx eax, al
xor eax, 0x64
cdqe
mov rcx, qword [0x1800a6a10]
add rcx, rax
mov rax, rcx
mov qword [0x1800a6a10], rax
mov eax, dword [rsp + 0x114]
add eax, 0x279
mov dword [rsp + 0x584], eax
movzx eax, word [0x1800a6a34]
movzx eax, ax
cmp rax, qword [0x1800a6a58]
je 0x18005eb2e
movzx eax, word [rsp + 0x50]
movzx eax, ax
test eax, eax
jne 0x18005eaa0
mov dword [rsp + 0x2c8], 1
jmp 0x18005eaab
mov dword [rsp + 0x2c8], 0
cmp dword [rsp + 0x2c8], 0x97a9
jne 0x18005eac5
mov dword [rsp + 0x2d0], 1
jmp 0x18005ead0
mov dword [rsp + 0x2d0], 0
movzx eax, byte [0x1800a697f]
test eax, eax
jne 0x18005eae8
mov dword [rsp + 0x2cc], 1
jmp 0x18005eaf3
mov dword [rsp + 0x2cc], 0
movzx eax, word [rsp + 0x4c]
mov ecx, dword [rsp + 0x2cc]
add ecx, eax
mov eax, ecx
not eax
cmp dword [rsp + 0x2d0], eax
jge 0x18005eb29
mov rax, qword [0x1800a6a98]
movabs rcx, 0x1730acb9ccf7d
imul rax, rcx
mov byte [0x1800a6903], al
jmp 0x18005ebb1
cmp qword [0x1800a6aa8], 0
jne 0x18005eb4e
movzx eax, word [rsp + 0x48]
test eax, eax
je 0x18005eb4e
mov dword [rsp + 0x2d8], 1
jmp 0x18005eb59
mov dword [rsp + 0x2d8], 0
movzx eax, byte [rsp + 0x45]
movsx eax, al
not eax
cmp eax, 0xde94
jg 0x18005eb77
mov dword [rsp + 0x2d4], 1
jmp 0x18005eb82
mov dword [rsp + 0x2d4], 0
mov eax, dword [rsp + 0x2d4]
mov ecx, dword [rsp + 0x2d8]
or ecx, eax
mov eax, ecx
test eax, eax
je 0x18005ebb1
movzx eax, word [0x1800a6a40]
movsx rax, ax
sub rax, qword [0x1800a6a78]
mov word [0x1800a6a40], ax
mov eax, dword [0x180dcc080]
mov dword [rsp + 0x118], eax
xor eax, eax
mov word [0x1800a69bc], ax
mov eax, 1
imul rax, rax, 0x94
lea rcx, [0x180fd6570]
movzx eax, byte [rcx + rax]
mov word [0x1800a6a24], ax
movzx eax, word [0x1800a69bc]
movzx eax, ax
mov dword [rsp + 0x918], eax
cmp dword [rsp + 0x918], 0
je 0x18005ec05
jmp 0x18005eca2
movzx eax, word [rsp + 0x4c]
mov rcx, qword [rsp + 0x98]
add rcx, rax
mov rax, rcx
test rax, rax
jne 0x18005ec2a
mov dword [rsp + 0x2dc], 1
jmp 0x18005ec35
mov dword [rsp + 0x2dc], 0
movzx eax, byte [rsp + 0x42]
movzx eax, al
not eax
mov ecx, dword [0x1800a69d4]
xor eax, ecx
not eax
mov ecx, dword [rsp + 0x2dc]
add ecx, eax
mov eax, ecx
mov eax, eax
mov ecx, dword [0x1800a6a3c]
movsxd rcx, ecx
add rcx, qword [0x1800a6a28]
not rcx
mov edx, dword [0x1800a6aa4]
not edx
mov edx, edx
mov r8, qword [0x1800a6a10]
sub r8, rdx
mov rdx, r8
imul rcx, rdx
imul rax, rcx
mov dword [rsp + 0x54], eax
movzx eax, byte [rsp + 0x47]
movzx eax, al
mov rcx, qword [0x1800a6a18]
sub rax, rcx
mov byte [rsp + 0x47], al
mov eax, dword [rsp + 0x118]
add eax, 0x3c2
mov dword [rsp + 0x218], eax
mov eax, dword [0x1800a6aa4]
movabs rcx, 0x945ae1134b593
imul rax, rcx
mov qword [0x1800a6aa8], rax
mov rax, qword [0x1800a6a28]
add rax, 0x77
mov qword [0x1800a6a98], rax
mov eax, dword [rsp + 0x118]
add eax, 0x110
mov dword [rsp + 0xb44], eax
movsx rax, word [rsp + 0x58]
cmp qword [0x1800a6a58], rax
jae 0x18005ed11
mov dword [rsp + 0x2e4], 1
jmp 0x18005ed1c
mov dword [rsp + 0x2e4], 0
cmp qword [0x1800a6a58], 8
jae 0x18005ed33
mov dword [rsp + 0x2e0], 1
jmp 0x18005ed3e
mov dword [rsp + 0x2e0], 0
mov eax, dword [rsp + 0x2e0]
cmp dword [rsp + 0x2e4], eax
jl 0x18005ed5a
call qword [sym.imp.USER32.dll_GetDoubleClickTime]
mov dword [rsp + 0x68], eax
jmp 0x18005ed85
cmp qword [0x1800a6a58], 0
je 0x18005ed85
movzx eax, byte [rsp + 0x46]
movzx eax, al
movzx ecx, word [0x1800a6a20]
and eax, ecx
movzx ecx, byte [rsp + 0x46]
movzx ecx, cl
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x46], al
mov eax, dword [rsp + 0x118]
add eax, 0x2e3
mov dword [rsp + 0xb48], eax
mov eax, dword [0x180dcc080]
mov dword [rsp + 0x11c], eax
mov eax, dword [rsp + 0x11c]
add eax, 0x110
mov dword [rsp + 0x8f8], eax
movzx eax, word [rsp + 0x50]
movzx eax, ax
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov byte [0x1800a697e], al
mov eax, dword [rsp + 0x11c]
add eax, 0xb46f
mov dword [rsp + 0x914], eax
movabs rax, 0x8c842083e9f18
mov rcx, qword [rsp + 0x88]
imul rcx, rax
mov rax, rcx
movzx ecx, word [rsp + 0x48]
mov edx, dword [rsp + 0x68]
xor edx, ecx
mov ecx, edx
not ecx
mov ecx, ecx
and rax, rcx
test rax, rax
jne 0x18005ee20
mov dword [rsp + 0x2ec], 1
jmp 0x18005ee2b
mov dword [rsp + 0x2ec], 0
movzx eax, word [rsp + 0x50]
movzx eax, ax
sub rax, qword [rsp + 0x78]
test rax, rax
jne 0x18005ee4a
mov dword [rsp + 0x2e8], 1
jmp 0x18005ee55
mov dword [rsp + 0x2e8], 0
movzx eax, byte [rsp + 0x42]
movzx eax, al
imul eax, dword [rsp + 0x2e8]
mov ecx, dword [rsp + 0x2ec]
add ecx, eax
mov eax, ecx
cdqe
mov qword [0x1800a6a98], rax
mov eax, dword [rsp + 0x5c]
add eax, 0xb8809e5
cdqe
mov qword [rsp + 0x90], rax
mov eax, dword [rsp + 0x11c]
add eax, 0x4eed
mov dword [rsp + 0x8fc], eax
mov eax, 0x44dd
mov word [0x1800a6a34], ax
movzx eax, word [0x1800a6a34]
movzx eax, ax
mov rcx, qword [rsp + 0x80]
add rax, rcx
cmp qword [0x1800a6a70], rax
jne 0x18005efec
mov eax, dword [rsp + 0x5c]
not eax
mov ecx, dword [0x1800a6a30]
cmp eax, ecx
jle 0x18005ef27
movzx eax, byte [rsp + 0x44]
movsx rax, al
movsx ecx, byte [0x1800a692f]
not ecx
movsxd rcx, ecx
movabs rdx, 0xc995a9a01e9d3
and rcx, rdx
sub rax, rcx
movzx ecx, word [0x1800a6a40]
movsx rcx, cx
add rax, rcx
mov word [rsp + 0x48], ax
mov rax, qword [rsp + 0x80]
sub rax, 0x944a
mov byte [rsp + 0x40], al
mov eax, dword [0x1800a6a4c]
movzx ecx, byte [rsp + 0x45]
movsx ecx, cl
add ecx, 0xb96b7358
cmp eax, ecx
jne 0x18005efec
movzx eax, word [rsp + 0x50]
movzx eax, ax
imul eax, eax, 0x56
mov dword [0x1800a6aa0], eax
movsx eax, byte [0x1800a692e]
test eax, eax
jne 0x18005ef6d
mov qword [rsp + 0xa08], 1
jmp 0x18005ef79
mov qword [rsp + 0xa08], 0
mov rax, qword [rsp + 0xa08]
mov qword [rsp + 0x90], rax
jmp 0x18005ee9f
mov eax, dword [rsp + 0x914]
xor eax, 0x9e91
mov ecx, dword [rsp + 0x8f8]
mov edx, dword [rsp + 0x8fc]
xor ecx, edx
or eax, ecx
mov ecx, 0x73e7
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x798], eax
mov dword [rsp + 0x60], 0x365be8fb
mov eax, dword [0x180dcc080]
mov dword [rsp + 0x120], eax
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
mov qword [0x1800a6a10], rax
mov eax, dword [rsp + 0x120]
add eax, 0xb0
mov dword [rsp + 0x900], eax
mov eax, dword [rsp + 0x120]
add eax, 0x111
mov dword [rsp + 0x904], eax
mov eax, dword [rsp + 0x120]
add eax, 0x1ab7
mov dword [rsp + 0xb4c], eax
movzx eax, byte [rsp + 0x44]
movsx rax, al
mov rcx, qword [0x1800a6a58]
xor rcx, rax
mov rax, rcx
mov byte [0x1800a68e7], al
mov rax, qword [rsp + 0x98]
movzx ecx, word [rsp + 0x50]
movzx ecx, cx
cmp rax, rcx
jg 0x18005f0ab
jmp 0x18005f0c1
mov eax, dword [0x1800a6aa4]
not eax
add eax, 0x6efbe87f
mov eax, eax
mov qword [0x1800a6aa8], rax
mov eax, dword [rsp + 0x900]
mov ecx, dword [rsp + 0x904]
add eax, ecx
mov ecx, 0x328
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x79c], eax
movzx eax, byte [rsp + 0x43]
movzx ecx, word [0x1800a6a40]
movsx ecx, cx
add eax, ecx
movzx ecx, byte [rsp + 0x43]
sub ecx, eax
mov eax, ecx
mov byte [rsp + 0x43], al
movzx eax, word [0x1800a69bc]
movzx eax, ax
mov ecx, dword [rsp + 0x64]
add eax, ecx
movzx ecx, word [rsp + 0x4c]
movzx edx, byte [rsp + 0x45]
movsx edx, dl
sub ecx, edx
and eax, ecx
cdqe
movzx ecx, byte [0x1800a69a6]
movzx ecx, cl
or rcx, qword [rsp + 0x78]
xor rax, rcx
mov word [rsp + 0x50], ax
mov eax, dword [0x180dcc080]
mov dword [rsp + 0x124], eax
mov eax, dword [rsp + 0x124]
add eax, 0xb5c4
mov dword [rsp + 0xb50], eax
movzx eax, byte [0x1800a69a6]
movzx eax, al
mov qword [rsp + 0x90], rax
mov eax, dword [rsp + 0x124]
add eax, 0xbcfa
mov dword [rsp + 0xb54], eax
movzx eax, byte [rsp + 0x46]
movzx eax, al
mov rcx, qword [rsp + 0x98]
sub rax, rcx
movzx ecx, byte [rsp + 0x46]
movzx ecx, cl
sub rcx, rax
mov rax, rcx
mov byte [rsp + 0x46], al
mov eax, dword [rsp + 0x124]
add eax, 0x95
mov dword [rsp + 0x908], eax
mov eax, dword [rsp + 0x908]
mov ecx, 0xdd
sub ecx, eax
mov eax, ecx
xor eax, 0x2b1f
mov ecx, 0x2dda
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x90c]
mov edx, 0x197
sub edx, ecx
mov ecx, edx
mov edx, dword [rsp + 0x2f0]
mov r8d, dword [rsp + 0x2f0]
xor edx, r8d
imul ecx, edx
sub eax, ecx
mov dword [rsp + 0x7a0], eax
mov rax, qword [0x1800a6a98]
not rax
cmp rax, 0xffffffffffff3620
jle 0x18005f220
movabs rax, 0x763f5a50095b5
xor ecx, ecx
mov eax, dword [0x180dcc080]
mov dword [rsp + 0x128], eax
mov eax, dword [rsp + 0x128]
add eax, 0x109
mov dword [rsp + 0xbbc], eax
movsx eax, byte [0x1800a692f]
cmp dword [rsp + 0x5c], eax
jne 0x18005f25a
mov dword [rsp + 0x2f8], 1
jmp 0x18005f265
mov dword [rsp + 0x2f8], 0
cmp dword [rsp + 0x5c], 0x3a
jne 0x18005f279
mov dword [rsp + 0x2f4], 1
jmp 0x18005f284
mov dword [rsp + 0x2f4], 0
mov eax, dword [rsp + 0x2f4]
cmp dword [rsp + 0x2f8], eax
je 0x18005f296
jmp 0x18005f2a8
xor eax, eax
cmp eax, 0xffffffdd
je 0x18005f2a8
mov qword [0x1800a6a10], 0x9bcf
mov eax, dword [rsp + 0x128]
add eax, 0x7d
mov dword [rsp + 0x910], eax
mov rax, qword [rsp + 0x98]
movabs rcx, 0x93bb7518b46b3
sub rax, rcx
mov word [0x1800a6a20], ax
movzx eax, byte [rsp + 0x42]
movzx eax, al
mov rcx, qword [0x1800a6a18]
imul rcx, rax
mov rax, rcx
mov rcx, qword [0x1800a6a18]
or rcx, rax
mov rax, rcx
mov qword [0x1800a6a18], rax
mov eax, dword [rsp + 0x128]
add eax, 0xcfe0
mov dword [rsp + 0xbb8], eax
mov eax, dword [rsp + 0x60]
cdqe
mov ecx, 8
imul rcx, rcx, 0x23
lea rdx, [0x180dcc090]
mov qword [rdx + rcx], rax
movsxd rax, dword [rsp + 0x54]
mov qword [0x1800a6a18], rax
movabs rax, 0xcefac5eb85c8f
mov qword [rsp + 0x78], rax
mov eax, dword [rsp + 0x910]
add eax, 0xbc84
mov ecx, 0xbf45
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7a4], eax
movzx eax, byte [rsp + 0x41]
movzx eax, al
cmp eax, dword [rsp + 0x54]
jg 0x18005f381
mov eax, dword [rsp + 0x54]
sub eax, 0xad7653d9
mov word [rsp + 0x50], ax
jmp 0x18005f3c1
movzx eax, word [0x1800a69bc]
movzx eax, ax
test eax, eax
je 0x18005f3c1
movzx eax, word [0x1800a6a20]
add eax, 0x496ea297
cdqe
mov qword [rsp + 0x80], rax
movzx eax, byte [rsp + 0x40]
movsx rax, al
mov rcx, qword [0x1800a6aa8]
lea rax, [rax + rcx + 0xd754]
mov byte [rsp + 0x40], al
mov eax, dword [0x180dcc080]
mov dword [rsp + 0x12c], eax
mov eax, dword [rsp + 0x12c]
add eax, 0x62a4
mov dword [rsp + 0x728], eax
movzx eax, byte [rsp + 0x44]
movsx eax, al
movzx ecx, byte [rsp + 0x40]
movsx ecx, cl
xor eax, ecx
mov byte [rsp + 0x44], al
mov eax, dword [rsp + 0x12c]
add eax, 0xfa47
mov dword [rsp + 0xbb4], eax
movzx eax, word [0x1800a6a20]
movsx ecx, word [0x1800a6a6c]
cmp eax, ecx
jl 0x18005f429
mov dword [rsp + 0x300], 1
jmp 0x18005f434
mov dword [rsp + 0x300], 0
movzx eax, word [0x1800a6a20]
cmp eax, 0x59
jl 0x18005f44d
mov dword [rsp + 0x2fc], 1
jmp 0x18005f458
mov dword [rsp + 0x2fc], 0
mov eax, dword [rsp + 0x2fc]
cmp dword [rsp + 0x300], eax
jl 0x18005f492
mov eax, 0xca08d15e
mov rcx, qword [rsp + 0x90]
xor rcx, rax
mov rax, rcx
mov word [0x1800a6a20], ax
mov eax, dword [0x180dcc080]
mov qword [rsp + 0x88], rax
jmp 0x18005f4b0
cmp qword [rsp + 0x78], 0
je 0x18005f4b0
mov eax, dword [rsp + 0x6c]
mov ecx, dword [rsp + 0x6c]
add eax, ecx
mov ecx, dword [rsp + 0x6c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c], eax
mov eax, dword [rsp + 0x12c]
add eax, 0xd8e8
mov dword [rsp + 0xbb0], eax
mov eax, dword [rsp + 0x5c]
add eax, 0xb207b562
mov byte [0x1800a697e], al
mov eax, dword [rsp + 0x60]
test eax, eax
jne 0x18005f4e7
mov dword [rsp + 0x304], 1
jmp 0x18005f4f2
mov dword [rsp + 0x304], 0
mov eax, dword [rsp + 0x304]
or eax, 0x9b
cdqe
movabs rcx, 0x973ee3e9edbf7
add rax, rcx
mov rcx, qword [0x1800a6a50]
add rax, rcx
mov qword [rsp + 0x90], rax
mov eax, dword [rsp + 0x728]
add eax, 0xffff9eca
mov ecx, dword [rsp + 0x308]
mov edx, dword [rsp + 0x308]
sub ecx, edx
imul ecx, ecx, 0x3a2
sub eax, ecx
mov dword [rsp + 0x7a8], eax
cmp qword [0x1800a6aa8], 0xb7
jge 0x18005f569
mov eax, dword [rsp + 0x68]
shr eax, 5
mov eax, eax
mov qword [0x1800a6a90], rax
jmp 0x18005f581
cmp qword [0x1800a6a10], 0
je 0x18005f581
mov eax, dword [0x180dcc080]
mov qword [rsp + 0x88], rax
mov eax, dword [0x180dcc080]
mov dword [rsp + 0x130], eax
mov eax, dword [rsp + 0x130]
add eax, 0x1f7d
mov dword [rsp + 0x730], eax
movsx eax, word [rsp + 0x58]
add eax, 0x77
mov byte [rsp + 0x44], al
mov eax, dword [0x1800a6a3c]
cdqe
sub rax, qword [0x1800a6a50]
mov dword [0x1800a6a3c], eax
mov eax, dword [rsp + 0x130]
add eax, 0x998d
mov dword [rsp + 0x734], eax
mov eax, dword [rsp + 0x130]
add eax, 0x4c5c
mov dword [rsp + 0x72c], eax
movsx eax, byte [0x1800a692f]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov qword [0x1800a6a28], 1
movzx eax, byte [0x1800a6902]
movsx rax, al
imul rax, qword [0x1800a6a28]
mov byte [0x1800a6902], al
mov rax, qword [0x1800a6a28]
mov qword [rsp + 0xa10], rax
cmp qword [rsp + 0xa10], 0
je 0x18005f642
cmp qword [rsp + 0xa10], 1
je 0x18005f652
jmp 0x18005f68f
movzx eax, byte [rsp + 0x47]
movzx eax, al
mov dword [0x1800a6954], eax
jmp 0x18005f68f
mov rax, qword [rsp + 0x98]
mov ecx, 1
imul rcx, rcx, 0xe
lea rdx, [0x180e58f88]
mov byte [rdx + rcx], al
movzx eax, byte [rsp + 0x41]
movzx eax, al
mov ecx, dword [0x1800a6a30]
add ecx, eax
mov eax, ecx
mov ecx, dword [0x1800a6a30]
add ecx, eax
mov eax, ecx
mov dword [0x1800a6a30], eax
mov eax, dword [rsp + 0x72c]
add eax, 0xf719
mov ecx, dword [rsp + 0x730]
mov edx, dword [rsp + 0x734]
add ecx, edx
xor eax, ecx
xor eax, 0x1fbd7
mov dword [rsp + 0x7ac], eax
mov ecx, dword [0x1800a6a70]
call qword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov dword [0x1800a6954], eax
mov eax, dword [0x1800a6954]
test eax, eax
jg 0x18005f6f1
mov eax, 2
imul rax, rax, 5
lea rcx, [0x18107c2d8]
movzx eax, byte [rcx + rax]
mov byte [0x1800a69a6], al
jmp 0x18005f745
movzx eax, byte [rsp + 0x43]
movzx ecx, byte [rsp + 0x41]
movzx ecx, cl
cmp eax, ecx
jge 0x18005f70f
mov dword [rsp + 0x30c], 1
jmp 0x18005f71a
mov dword [rsp + 0x30c], 0
movzx eax, word [0x1800a6a48]
cmp dword [rsp + 0x30c], eax
jge 0x18005f745
mov byte [0x1800a697e], 0x88
movzx eax, byte [rsp + 0x45]
movsx eax, al
sub eax, 0xbc2897e5
mov word [0x1800a6a40], ax
mov eax, dword [0x180dcc080]
mov dword [rsp + 0x134], eax
mov eax, dword [0x1800a69d4]
movzx ecx, word [0x1800a6a88]
movsx ecx, cx
cmp eax, ecx
jbe 0x18005f768
jmp 0x18005f7b6
movzx eax, word [0x1800a6a20]
test eax, eax
je 0x18005f7b6
movzx eax, byte [0x1800a6902]
movsx eax, al
add eax, 0xbc5e
mov word [0x1800a6a68], ax
mov eax, dword [0x1800a69d4]
mov eax, eax
mov rcx, qword [rsp + 0x80]
imul rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x80]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x80], rax
mov eax, dword [rsp + 0x134]
add eax, 0x243c
mov dword [rsp + 0xbac], eax
mov eax, dword [rsp + 0x134]
add eax, 0xc9
mov dword [rsp + 0x738], eax
mov eax, dword [rsp + 0x134]
add eax, 0x5f
mov dword [rsp + 0x310], eax
cmp qword [0x1800a6aa8], 0
je 0x18005f809
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0xa18], rax
jmp 0x18005f816
movsxd rax, dword [rsp + 0x5c]
mov qword [rsp + 0xa18], rax
mov eax, dword [rsp + 0xa18]
mov dword [rsp + 0x5c], eax
mov eax, dword [0x180dcc080]
mov qword [0x1800a6a50], rax
mov eax, dword [rsp + 0x310]
mov ecx, 0x740c
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x738]
mov edx, dword [rsp + 0x310]
sub ecx, edx
xor eax, ecx
add eax, 0xffff8cba
mov dword [rsp + 0x7b0], eax
cmp qword [0x1800a6a50], 0
jne 0x18005f873
mov dword [rsp + 0x314], 1
jmp 0x18005f87e
mov dword [rsp + 0x314], 0
mov eax, dword [0x1800a6aa0]
xor eax, dword [rsp + 0x314]
cdqe
mov qword [0x1800a6a80], rax
mov eax, dword [0x180dcc080]
mov dword [rsp + 0x138], eax
movzx eax, byte [rsp + 0x40]
movsx eax, al
movzx ecx, byte [rsp + 0x42]
movzx ecx, cl
imul eax, ecx
movzx ecx, byte [rsp + 0x40]
movsx ecx, cl
sub ecx, eax
mov eax, ecx
mov byte [rsp + 0x40], al
mov eax, dword [rsp + 0x138]
add eax, 0x44
mov dword [rsp + 0x73c], eax
movzx eax, word [0x1800a69bc]
movzx eax, ax
add eax, 0x2a44
movzx ecx, word [rsp + 0x48]
movzx edx, word [0x1800a6a88]
movsx edx, dx
movzx r8d, byte [0x1800a6902]
movsx r8d, r8b
xor edx, r8d
add ecx, edx
xor eax, ecx
mov byte [0x1800a68e6], al
mov eax, dword [rsp + 0x138]
add eax, 0x5007
mov dword [rsp + 0xba8], eax
mov eax, dword [rsp + 0x138]
add eax, 0x258b
mov dword [rsp + 0x318], eax
cmp qword [rsp + 0x90], 0
je 0x18005fa30
mov dword [rsp + 0x64], 4
movzx eax, word [0x1800a6a34]
inc ax
mov word [0x1800a6a34], ax
movzx eax, byte [rsp + 0x42]
movzx eax, al
add eax, 0x704d55d
mov byte [0x1800a697e], al
mov eax, dword [rsp + 0x64]
mov dword [rsp + 0xe8], eax
cmp dword [rsp + 0xe8], 1
je 0x18005f9aa
cmp dword [rsp + 0xe8], 2
je 0x18005f9b8
cmp dword [rsp + 0xe8], 3
je 0x18005f9e1
cmp dword [rsp + 0xe8], 4
je 0x18005fa0d
jmp 0x18005fa2e
movzx eax, word [0x1800a6a40]
cwde
mov dword [rsp + 0x5c], eax
jmp 0x18005fa2e
mov rax, qword [rsp + 0x80]
add rax, 0x2a
mov byte [0x1800a6902], al
mov rax, qword [rsp + 0x88]
sub rax, 0xf586
mov word [0x1800a6a24], ax
jmp 0x18005fa2e
mov rax, qword [0x1800a6a98]
xor rax, 0x5c
mov byte [rsp + 0x45], al
mov eax, dword [0x1800a6aa4]
movabs rcx, 0xb5b82ba29bc1f
sub rax, rcx
mov qword [rsp + 0x98], rax
jmp 0x18005fa2e
mov eax, dword [0x1800a6aa4]
add eax, 0xdbe8729c
mov eax, eax
mov rcx, qword [0x1800a6a98]
add rcx, rax
mov rax, rcx
mov qword [0x1800a6a98], rax
jmp 0x18005fa3a
mov eax, dword [rsp + 0x64]
sar eax, 1
mov dword [rsp + 0x5c], eax
mov eax, dword [rsp + 0x318]
mov ecx, dword [rsp + 0x73c]
imul eax, ecx
mov ecx, dword [rsp + 0x318]
add ecx, 0xbf
or eax, ecx
xor eax, 0x9feb7
mov dword [rsp + 0x7b4], eax
movzx eax, word [0x1800a6a34]
movzx eax, ax
mov rcx, qword [0x1800a6a98]
cmp rax, rcx
jl 0x18005fbcc
movzx eax, word [0x1800a6a20]
cmp dword [rsp + 0x68], eax
jae 0x18005fa9a
mov dword [rsp + 0x320], 1
jmp 0x18005faa5
mov dword [rsp + 0x320], 0
cmp dword [rsp + 0x68], 0x4c
jae 0x18005fab9
mov dword [rsp + 0x31c], 1
jmp 0x18005fac4
mov dword [rsp + 0x31c], 0
mov eax, dword [rsp + 0x31c]
cmp dword [rsp + 0x320], eax
je 0x18005faef
movzx eax, byte [rsp + 0x43]
movabs rcx, 0xa87f290eacc8c
sub rax, rcx
mov byte [rsp + 0x45], al
jmp 0x18005fbca
movzx eax, byte [0x1800a697e]
movsx eax, al
test eax, eax
je 0x18005fb15
movzx eax, word [0x1800a6a88]
cwde
sub eax, dword [rsp + 0x54]
mov word [0x1800a6a88], ax
jmp 0x18005fbca
movzx eax, word [rsp + 0x4c]
test eax, eax
je 0x18005fbb3
movzx eax, byte [rsp + 0x43]
movzx ecx, word [rsp + 0x48]
imul eax, ecx
test eax, eax
jne 0x18005fb40
mov dword [rsp + 0x324], 1
jmp 0x18005fb4b
mov dword [rsp + 0x324], 0
movzx eax, byte [rsp + 0x44]
movsx eax, al
test eax, eax
jne 0x18005fb65
mov qword [rsp + 0xa20], 1
jmp 0x18005fb71
mov qword [rsp + 0xa20], 0
movzx eax, word [0x1800a6a48]
mov ecx, dword [rsp + 0x324]
add ecx, eax
mov eax, ecx
cdqe
mov rcx, qword [0x1800a6a50]
not rcx
mov rdx, qword [rsp + 0xa20]
sub rdx, rcx
mov rcx, rdx
movzx edx, byte [rsp + 0x40]
movsx rdx, dl
imul rcx, rdx
add rax, rcx
mov byte [rsp + 0x47], al
jmp 0x18005fbca
movzx eax, byte [rsp + 0x42]
movzx eax, al
test eax, eax
je 0x18005fbca
mov eax, dword [rsp + 0x60]
add eax, 0x73
mov byte [rsp + 0x47], al
jmp 0x18005fc35
movzx eax, byte [0x1800a6902]
movsx eax, al
test eax, eax
jne 0x18005fbef
movzx eax, word [rsp + 0x4c]
add eax, 0xdc77
cdqe
mov qword [0x1800a6a98], rax
jmp 0x18005fc35
movsx eax, byte [0x1800a692e]
test eax, eax
je 0x18005fc35
mov eax, dword [rsp + 0x68]
mov rcx, qword [rsp + 0x80]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x80]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x80], rax
movsx eax, byte [0x1800a692f]
add eax, dword [0x1800a6a38]
mov byte [0x1800a692f], al
mov eax, dword [0x180dcc080]
mov dword [rsp + 0x13c], eax
movsxd rax, dword [rsp + 0x54]
movabs rcx, 0x6fbcb727c5e3a
add rax, rcx
mov rcx, qword [0x1800a6a80]
sub rcx, rax
mov rax, rcx
mov qword [0x1800a6a80], rax
mov eax, dword [rsp + 0x13c]
add eax, 0x9e
mov dword [rsp + 0x740], eax
mov eax, dword [rsp + 0x13c]
add eax, 0x3359
mov dword [rsp + 0x744], eax
movzx eax, byte [0x180dcc080]
mov byte [0x1800a6903], al
mov eax, dword [rsp + 0x13c]
add eax, 0x2c6e
mov dword [rsp + 0xba4], eax
mov eax, dword [rsp + 0x6c]
cmp eax, 0x2b
jbe 0x18005fcc4
mov dword [rsp + 0x328], 1
jmp 0x18005fccf
mov dword [rsp + 0x328], 0
call qword [sym.imp.USER32.dll_GetFocus]
mov qword [rsp + 0xa28], rax
cmp qword [rsp + 0xa28], 0
je 0x18005fd19
mov rcx, qword [rsp + 0xa28]
call qword [sym.imp.USER32.dll_GetMenu]
mov qword [rsp + 0xcb0], rax
mov edx, 1
mov rcx, qword [rsp + 0xcb0]
call qword [sym.imp.USER32.dll_GetSubMenu]
mov qword [rsp + 0xce0], rax
mov eax, dword [rsp + 0x740]
mov ecx, dword [rsp + 0x744]
xor eax, ecx
xor eax, 0x9a85
xor eax, 0xa86c
mov dword [rsp + 0x7b8], eax
movzx eax, byte [rsp + 0x44]
movsx rax, al
mov rcx, qword [rsp + 0x70]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x70]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x70], rax
movzx eax, word [0x1800a6a88]
cwde
mov ecx, dword [0x1800a69d4]
add ecx, eax
mov eax, ecx
mov ecx, dword [0x1800a69d4]
sub ecx, eax
mov eax, ecx
mov dword [0x1800a69d4], eax
mov eax, dword [0x180dcc080]
mov dword [rsp + 0x140], eax
call qword [sym.imp.USER32.dll_GetShellWindow]
mov byte [0x1800a692f], al
movsx eax, byte [0x1800a692f]
test eax, eax
jle 0x18005fe29
movsx eax, word [0x1800a6a6c]
test eax, eax
je 0x18005fdcd
mov eax, 0xcf73
mov word [rsp + 0x50], ax
mov eax, dword [0x1800a6954]
inc eax
mov dword [0x1800a6954], eax
jmp 0x18005fe27
mov qword [0x1800a6a10], 0xfb
cmp dword [rsp + 0x68], 0
jne 0x18005fded
mov qword [rsp + 0xa30], 1
jmp 0x18005fdf9
mov qword [rsp + 0xa30], 0
movsx rax, byte [0x1800a6903]
mov rcx, qword [0x1800a6a18]
mov rdx, qword [rsp + 0xa30]
add rdx, rcx
mov rcx, rdx
mov rdx, qword [0x1800a6a80]
and rcx, rdx
sub rax, rcx
mov byte [rsp + 0x46], al
jmp 0x18005fe45
movzx eax, byte [rsp + 0x41]
movzx eax, al
mov ecx, dword [rsp + 0x54]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x54]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x140]
add eax, 0x9a76
mov dword [rsp + 0x32c], eax
movzx eax, byte [0x1800a69a6]
movzx eax, al
movzx ecx, byte [0x1800a6902]
movsx ecx, cl
add eax, ecx
movzx ecx, byte [0x1800a69a6]
movzx ecx, cl
sub ecx, eax
mov eax, ecx
mov byte [0x1800a69a6], al
mov eax, dword [rsp + 0x140]
add eax, 0x92
mov dword [rsp + 0x74c], eax
mov eax, dword [rsp + 0x140]
add eax, 0x5b
mov dword [rsp + 0x748], eax
movsx eax, byte [0x1800a692e]
movzx ecx, byte [0x1800a697f]
lea eax, [rcx + rax - 0x63]
mov byte [0x1800a697f], al
movzx eax, byte [rsp + 0x45]
movsx eax, al
mov ecx, 4
imul rcx, rcx, 0xe
lea rdx, [0x180e59160]
mov dword [rdx + rcx], eax
mov byte [rsp + 0x40], 4
movzx eax, byte [0x180dcc080]
mov byte [rsp + 0x41], al
movzx eax, byte [0x1800a6902]
movsx eax, al
imul eax, eax, 0x7e66
cdqe
mov qword [0x1800a6a50], rax
movzx eax, byte [rsp + 0x40]
mov byte [rsp + 0xbc], al
cmp byte [rsp + 0xbc], 0
je 0x18005ff51
cmp byte [rsp + 0xbc], 1
je 0x18005ff83
cmp byte [rsp + 0xbc], 2
je 0x18005ffc6
cmp byte [rsp + 0xbc], 3
je 0x18005ffe3
cmp byte [rsp + 0xbc], 4
je 0x180060017
jmp 0x180060034
mov rax, qword [0x1800a6a90]
mov ecx, 4
imul rcx, rcx, 1
lea rdx, [0x18106f660]
mov dword [rdx + rcx], eax
movzx eax, byte [rsp + 0x47]
movzx eax, al
add rax, qword [0x1800a6a28]
mov byte [rsp + 0x47], al
jmp 0x180060034
movzx eax, byte [0x1800a697e]
movsx rax, al
imul rax, qword [rsp + 0x88]
movzx ecx, byte [0x1800a697e]
movsx rcx, cl
add rcx, rax
mov rax, rcx
mov byte [0x1800a697e], al
movzx eax, word [0x1800a69bc]
movzx eax, ax
sub eax, 0x4e
cdqe
mov qword [0x1800a6a90], rax
jmp 0x180060034
movsx rax, byte [0x1800a6903]
movabs rcx, 0x4da3388445b8c
sub rax, rcx
mov dword [0x1800a6a8c], eax
jmp 0x180060034
mov eax, dword [rsp + 0x68]
mov rcx, qword [rsp + 0x78]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x78]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x78], rax
movzx eax, byte [rsp + 0x47]
movzx eax, al
sub eax, 0x40b2
mov dword [0x1800a69d4], eax
jmp 0x180060034
mov dword [0x1800a6aa0], 0x52c8
movzx eax, byte [rsp + 0x42]
movzx eax, al
add eax, 0x430dd39e
mov dword [0x1800a6a8c], eax
mov eax, dword [rsp + 0x32c]
mov ecx, dword [rsp + 0x32c]
imul eax, ecx
mov ecx, dword [rsp + 0x748]
mov edx, dword [rsp + 0x74c]
imul ecx, edx
sub eax, ecx
mov ecx, 0x5d31fbd9
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x330]
mov edx, dword [rsp + 0x330]
imul ecx, edx
imul ecx, ecx, 0
add eax, ecx
mov dword [rsp + 0x7bc], eax
mov eax, dword [0x1800a69d4]
movsx ecx, word [0x1800a6a6c]
cmp eax, ecx
ja 0x1800600da
movzx eax, word [0x1800a6a48]
test eax, eax
je 0x1800600b7
movzx eax, byte [rsp + 0x40]
movsx eax, al
sar eax, 3
mov byte [rsp + 0x44], al
mov eax, dword [0x1800a6a30]
mov byte [0x1800a6903], al
jmp 0x1800600da
movzx eax, byte [0x1800a6902]
movsx eax, al
cmp eax, dword [rsp + 0x54]
jg 0x1800600da
movzx eax, byte [rsp + 0x44]
movsx eax, al
add eax, 0xeeb1734c
mov byte [0x1800a692f], al
mov eax, dword [0x180dcc080]
mov dword [rsp + 0x144], eax
movzx eax, word [0x1800a6a68]
movzx eax, ax
test eax, eax
je 0x1800601fc
mov eax, dword [0x1800a6954]
cdqe
mov rcx, qword [0x1800a6a80]
sub rcx, rax
mov rax, rcx
test rax, rax
je 0x18006013d
movabs rax, 0xe5ecd9b5e6aed
mov rcx, qword [rsp + 0x90]
sub rcx, rax
mov rax, rcx
test rax, rax
je 0x18006013d
mov dword [rsp + 0x338], 1
jmp 0x180060148
mov dword [rsp + 0x338], 0
movzx eax, byte [rsp + 0x47]
movzx eax, al
test eax, eax
je 0x180060167
xor eax, eax
test eax, eax
je 0x180060167
mov dword [rsp + 0x334], 1
jmp 0x180060172
mov dword [rsp + 0x334], 0
mov eax, dword [rsp + 0x334]
cmp dword [rsp + 0x338], eax
jle 0x1800601a9
movzx eax, byte [rsp + 0x45]
movsx eax, al
sub eax, 0x6b53
mov byte [0x1800a6902], al
mov rax, qword [rsp + 0x78]
add rax, 0xf493
mov word [0x1800a6a20], ax
jmp 0x1800601fa
movzx eax, byte [0x1800a6902]
movsx rax, al
mov rcx, qword [0x1800a6a78]
sub rcx, rax
mov rax, rcx
not rax
test rax, rax
je 0x1800601fa
mov eax, dword [0x180dcc080]
mov dword [rsp + 0x5c], eax
movzx eax, word [0x1800a6a34]
movzx eax, ax
mov ecx, dword [0x1800a6954]
sub eax, ecx
movzx ecx, word [0x1800a6a34]
movzx ecx, cx
sub ecx, eax
mov eax, ecx
mov word [0x1800a6a34], ax
jmp 0x180060226
movzx eax, byte [rsp + 0x43]
test eax, eax
je 0x180060226
movzx eax, byte [rsp + 0x41]
movzx eax, al
movzx ecx, byte [0x1800a697f]
sub eax, ecx
movzx ecx, byte [rsp + 0x41]
movzx ecx, cl
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x41], al
mov eax, dword [rsp + 0x144]
add eax, 0xe2
mov dword [rsp + 0x340], eax
movsx eax, byte [0x1800a692e]
add eax, 0xeb55b240
mov byte [rsp + 0x46], al
mov eax, dword [0x180dcc080]
mov dword [0x1800a6a30], eax
mov eax, dword [rsp + 0x144]
add eax, 0xa3
mov dword [rsp + 0x750], eax
movzx eax, word [0x1800a6a68]
movzx eax, ax
cmp qword [0x1800a6a70], rax
jl 0x18006039e
mov qword [rsp + 0x78], 3
movzx eax, byte [rsp + 0x44]
movsx eax, al
mov ecx, dword [rsp + 0x5c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5c], eax
mov qword [0x1800a6a80], 0x3e1ff1f0
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x718], rax
cmp qword [rsp + 0x718], 0
je 0x1800602e9
cmp qword [rsp + 0x718], 1
je 0x1800602f9
cmp qword [rsp + 0x718], 2
je 0x180060323
cmp qword [rsp + 0x718], 3
je 0x180060371
jmp 0x18006039e
mov qword [0x1800a6a58], 0x1b16
jmp 0x18006039e
mov eax, dword [rsp + 0x5c]
not eax
cdqe
mov rcx, qword [0x1800a6a50]
add rcx, rax
mov rax, rcx
mov ecx, dword [0x1800a6a3c]
movsxd rcx, ecx
sub rax, rcx
mov qword [0x1800a6a18], rax
jmp 0x18006039e
movzx eax, word [rsp + 0x48]
add eax, 0xc5
test eax, eax
jne 0x18006033e
mov dword [rsp + 0x33c], 1
jmp 0x180060349
mov dword [rsp + 0x33c], 0
movzx eax, word [0x1800a6a48]
movzx ecx, byte [rsp + 0x40]
movsx ecx, cl
mov edx, dword [rsp + 0x33c]
imul edx, ecx
mov ecx, edx
imul eax, ecx
not eax
mov byte [0x1800a692e], al
jmp 0x18006039e
movzx eax, byte [rsp + 0x78]
mov byte [rsp + 0x44], al
mov eax, 2
imul rax, rax, 5
lea rcx, [0x18107c2d8]
movzx eax, word [rcx + rax]
movzx ecx, byte [rsp + 0x47]
movzx ecx, cl
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x47], al
mov eax, dword [rsp + 0x144]
add eax, 0x9de7
mov dword [rsp + 0xba0], eax
mov qword [0x1800a6aa8], 4
cmp qword [rsp + 0x88], 0
je 0x1800603d8
movzx eax, word [0x1800a6a40]
mov word [rsp + 0xba], ax
jmp 0x1800603e5
movzx eax, word [rsp + 0x58]
mov word [rsp + 0xba], ax
movsx rax, word [rsp + 0xba]
mov qword [0x1800a6a18], rax
mov rax, qword [0x1800a6aa8]
mov qword [rsp + 0x710], rax
cmp qword [rsp + 0x710], 0
je 0x180060439
cmp qword [rsp + 0x710], 1
je 0x180060476
cmp qword [rsp + 0x710], 3
je 0x180060485
cmp qword [rsp + 0x710], 4
je 0x1800604c6
jmp 0x1800604d5
movzx eax, byte [rsp + 0x43]
movabs rcx, 0xbaa32c296ce90
sub rax, rcx
mov word [0x1800a6a20], ax
movzx eax, byte [rsp + 0x47]
movzx eax, al
mov ecx, dword [0x1800a6a3c]
add ecx, eax
mov eax, ecx
mov ecx, dword [0x1800a6a3c]
add ecx, eax
mov eax, ecx
mov dword [0x1800a6a3c], eax
jmp 0x1800604d5
mov rax, qword [rsp + 0x70]
mov byte [0x1800a68e6], al
jmp 0x1800604d5
movzx eax, byte [0x1800a69a6]
movzx eax, al
sub eax, 0xebc0
cdqe
mov rcx, qword [0x1800a6aa8]
and rcx, rax
mov rax, rcx
mov qword [0x1800a6aa8], rax
movzx eax, word [0x1800a6a68]
movzx eax, ax
mov ecx, dword [0x1800a6a38]
add ecx, eax
mov eax, ecx
mov dword [0x1800a6a38], eax
jmp 0x1800604d5
movabs rax, 0x1bd3286da3de
mov qword [rsp + 0x78], rax
mov eax, dword [rsp + 0x340]
mov ecx, dword [rsp + 0x340]
sub eax, ecx
mov ecx, dword [rsp + 0x750]
add ecx, 0xf8
imul eax, ecx
add eax, 0x20d
mov dword [rsp + 0x7c0], eax
mov eax, dword [0x180dcc080]
mov dword [rsp + 0x148], eax
mov eax, dword [rsp + 0x148]
add eax, 0x1a3f
mov dword [rsp + 0x754], eax
movzx eax, byte [rsp + 0x47]
movzx eax, al
mov ecx, dword [0x1800a6a44]
sub ecx, eax
mov eax, ecx
mov dword [0x1800a6a44], eax
mov eax, dword [rsp + 0x148]
add eax, 0xd1fb
mov dword [rsp + 0xb9c], eax
mov eax, dword [rsp + 0x148]
add eax, 0x41ee
mov dword [rsp + 0x758], eax
movabs rax, 0x1f50be574a978
mov qword [rsp + 0x90], rax
mov eax, 4
mov word [0x1800a6a20], ax
mov dword [rsp + 0x68], 0x69d69030
mov eax, dword [rsp + 0x5c]
add eax, 0x9d
mov dword [rsp + 0x54], eax
movzx eax, word [0x1800a6a20]
mov dword [rsp + 0xcc], eax
cmp dword [rsp + 0xcc], 0
je 0x1800605df
cmp dword [rsp + 0xcc], 1
je 0x1800605ff
cmp dword [rsp + 0xcc], 2
je 0x180060638
cmp dword [rsp + 0xcc], 3
je 0x180060685
cmp dword [rsp + 0xcc], 4
je 0x1800606ae
jmp 0x1800606ec
movsx rax, word [0x1800a6a6c]
movabs rcx, 0xc82cbd119fcf
sub rax, rcx
mov byte [0x1800a697e], al
jmp 0x1800606ec
mov eax, dword [0x1800a6a4c]
imul eax, eax, 0xa7
mov eax, eax
mov qword [0x1800a6a18], rax
movsxd rax, dword [rsp + 0x5c]
mov rcx, qword [rsp + 0x80]
sub rax, rcx
movsxd rcx, dword [rsp + 0x5c]
xor rcx, rax
mov rax, rcx
mov dword [rsp + 0x5c], eax
jmp 0x1800606ec
cmp qword [0x1800a6a28], 0
jne 0x180060650
mov qword [rsp + 0xa38], 1
jmp 0x18006065c
mov qword [rsp + 0xa38], 0
mov rax, qword [0x1800a6a90]
mov rcx, qword [rsp + 0xa38]
sub rcx, rax
mov rax, rcx
mov word [rsp + 0x4c], ax
movzx eax, byte [0x180dcc080]
mov byte [0x1800a697f], al
jmp 0x1800606ec
mov eax, dword [0x1800a6aa4]
mov rcx, qword [0x1800a6a50]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x1800a6a50]
add rcx, rax
mov rax, rcx
mov qword [0x1800a6a50], rax
jmp 0x1800606ec
mov eax, dword [rsp + 0x6c]
add eax, 0xf30b
mov dword [0x1800a69d4], eax
mov eax, dword [0x1800a6aa0]
mov ecx, dword [rsp + 0x5c]
sub ecx, eax
mov eax, ecx
cdqe
movzx ecx, byte [rsp + 0x41]
movzx ecx, cl
mov rdx, qword [0x1800a6a18]
and rdx, rcx
mov rcx, rdx
sub rax, rcx
mov qword [0x1800a6a58], rax
mov eax, dword [rsp + 0x754]
mov ecx, dword [rsp + 0x758]
mov edx, 0xffffa52c
lea rax, [rax + rdx]
lea eax, [rax + rcx]
mov dword [rsp + 0x7c4], eax
mov dword [rsp + 0x54], 0x57
mov eax, dword [0x180dcc080]
mov dword [rsp + 0x14c], eax
mov eax, dword [rsp + 0x14c]
add eax, 0xfb
mov dword [rsp + 0x348], eax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov byte [rsp + 0x41], al
mov eax, dword [rsp + 0x14c]
add eax, 0x2f
mov dword [rsp + 0xb98], eax
mov rax, qword [rsp + 0x98]
not rax
movzx ecx, byte [rsp + 0x46]
movzx ecx, cl
imul rax, rcx
mov rcx, qword [rsp + 0x80]
xor rax, rcx
mov dword [0x1800a69d4], eax
mov eax, dword [rsp + 0x14c]
add eax, 0x78
mov dword [rsp + 0xb94], eax
movzx eax, byte [rsp + 0x44]
movsx eax, al
cmp dword [rsp + 0x54], eax
je 0x1800607fd
movzx eax, byte [rsp + 0x44]
movsx eax, al
movzx ecx, word [0x1800a6a48]
add eax, ecx
mov ecx, dword [rsp + 0x6c]
not ecx
movzx edx, word [rsp + 0x4c]
xor ecx, edx
not ecx
xor eax, ecx
mov eax, eax
movzx ecx, byte [rsp + 0x43]
mov rdx, qword [rsp + 0x98]
sub rcx, rdx
mov rdx, qword [0x1800a6a70]
mov r8, qword [rsp + 0x88]
sub r8, rdx
mov rdx, r8
add rcx, rdx
sub rax, rcx
mov byte [0x1800a692f], al
mov rax, qword [0x1800a6a18]
dec rax
mov qword [0x1800a6a18], rax
mov qword [0x1800a6a98], 0x14
mov rax, qword [0x1800a6a98]
movzx ecx, byte [rsp + 0x44]
movsx ecx, cl
inc ecx
movsxd rcx, ecx
cmp rax, rcx
jne 0x180060879
movzx eax, word [rsp + 0x50]
movzx eax, ax
mov ecx, eax
call qword [sym.imp.USER32.dll_GetParent]
mov word [0x1800a6a34], ax
cmp qword [0x1800a6a28], 1
jne 0x180060879
jmp 0x180060879
mov qword [0x1800a6a98], 0x14
movzx eax, byte [rsp + 0x45]
movsx eax, al
test eax, eax
jne 0x18006089d
mov dword [rsp + 0x344], 1
jmp 0x1800608a8
mov dword [rsp + 0x344], 0
movzx eax, byte [0x1800a68e7]
movsx eax, al
add eax, dword [rsp + 0x344]
mov word [0x1800a69bc], ax
movzx eax, byte [rsp + 0x41]
movzx eax, al
mov rcx, qword [0x1800a6a50]
add rcx, rax
mov rax, rcx
mov rcx, qword [0x1800a6a50]
sub rcx, rax
mov rax, rcx
mov qword [0x1800a6a50], rax
movzx eax, word [rsp + 0x48]
mov ecx, dword [rsp + 0x60]
sub eax, ecx
movzx ecx, word [rsp + 0x48]
or ecx, eax
mov eax, ecx
mov word [rsp + 0x48], ax
mov eax, dword [rsp + 0x348]
mov ecx, dword [rsp + 0x348]
or eax, ecx
add eax, 0x13d
mov ecx, dword [rsp + 0x34c]
mov edx, dword [rsp + 0x34c]
sub ecx, edx
imul ecx, ecx, 0x734
sub eax, ecx
mov dword [rsp + 0x7cc], eax
movzx eax, byte [rsp + 0x45]
movsx eax, al
test eax, eax
je 0x180060953
mov rax, qword [0x1800a6a58]
inc rax
mov qword [0x1800a6a58], rax
mov eax, dword [0x180dcc080]
mov dword [rsp + 0x150], eax
movsxd rax, dword [rsp + 0x5c]
mov rcx, qword [0x1800a6a80]
cmp rax, rcx
jg 0x180060973
jmp 0x180060991
movabs rax, 0xe2517d8884477
mov rcx, qword [0x1800a6a10]
imul rcx, rax
mov rax, rcx
mov byte [0x1800a69a6], al
mov eax, dword [rsp + 0x150]
add eax, 0xc162
mov dword [rsp + 0x154], eax
mov eax, dword [rsp + 0x150]
add eax, 0xb31a
mov dword [rsp + 0xb90], eax
mov rax, qword [0x1800a6a70]
cmp qword [0x1800a6a78], rax
jb 0x1800609d4
mov dword [rsp + 0x354], 1
jmp 0x1800609df
mov dword [rsp + 0x354], 0
cmp qword [0x1800a6a78], 0x24
jb 0x1800609f6
mov dword [rsp + 0x350], 1
jmp 0x180060a01
mov dword [rsp + 0x350], 0
mov eax, dword [rsp + 0x350]
cmp dword [rsp + 0x354], eax
jne 0x180060a21
mov eax, dword [0x1800a6a3c]
dec eax
mov dword [0x1800a6a3c], eax
jmp 0x180060a5e
mov rax, qword [0x1800a6a98]
test rax, rax
je 0x180060a5e
movzx eax, byte [0x1800a68e7]
movsx eax, al
add eax, 0x3bc1
mov dword [rsp + 0x64], eax
mov eax, dword [0x1800a6aa0]
cdqe
mov rcx, qword [rsp + 0x88]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x88], rax
mov eax, dword [rsp + 0x150]
add eax, 0x2e
mov dword [rsp + 0xb8c], eax
movzx eax, byte [rsp + 0x45]
movsx eax, al
cmp dword [0x1800a6a38], eax
jbe 0x180060a81
jmp 0x180060aee
mov rax, qword [rsp + 0x80]
cmp qword [rsp + 0x78], rax
jle 0x180060a9d
mov dword [rsp + 0x35c], 1
jmp 0x180060aa8
mov dword [rsp + 0x35c], 0
mov rax, qword [0x1800a6a98]
test rax, rax
jne 0x180060ac1
mov dword [rsp + 0x358], 1
jmp 0x180060acc
mov dword [rsp + 0x358], 0
mov eax, dword [rsp + 0x358]
cmp dword [rsp + 0x35c], eax
jle 0x180060aee
mov eax, dword [0x1800a6954]
mov ecx, dword [rsp + 0x5c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x5c], eax
mov eax, dword [rsp + 0x154]
mov ecx, dword [rsp + 0x154]
imul eax, ecx
mov ecx, dword [rsp + 0x154]
sub ecx, 0x21
xor eax, ecx
mov eax, eax
mov ecx, 0x92142be1
sub rcx, rax
mov rax, rcx
mov dword [rsp + 0x7d0], eax
mov eax, dword [0x180dcc080]
mov dword [rsp + 0x158], eax
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLCID]
mov dword [0x1800a6a4c], eax
mov eax, dword [rsp + 0x158]
add eax, 0x2ea7
mov dword [rsp + 0x374], eax
movzx eax, byte [rsp + 0x46]
movzx eax, al
cmp rax, qword [0x1800a6a58]
jae 0x180060b69
mov dword [rsp + 0x364], 1
jmp 0x180060b74
mov dword [rsp + 0x364], 0
movzx eax, byte [rsp + 0x46]
movzx eax, al
cmp eax, 0x2f
jge 0x180060b8e
mov dword [rsp + 0x360], 1
jmp 0x180060b99
mov dword [rsp + 0x360], 0
mov eax, dword [rsp + 0x360]
cmp dword [rsp + 0x364], eax
jg 0x180060c51
mov qword [0x1800a6aa8], 0
movzx eax, word [0x1800a6a88]
cwde
movzx ecx, word [0x1800a6a68]
movzx ecx, cx
imul eax, ecx
not eax
cdqe
movzx ecx, byte [0x1800a68e7]
movsx rcx, cl
mov rdx, qword [rsp + 0x98]
imul rdx, rcx
mov rcx, rdx
add rax, rcx
movzx ecx, byte [rsp + 0x40]
movsx rcx, cl
movabs rdx, 0x265e728609ae8
add rcx, rdx
not rcx
movzx edx, byte [rsp + 0x43]
sub rcx, rdx
imul rax, rcx
mov byte [rsp + 0x43], al
mov rax, qword [0x1800a6aa8]
mov qword [rsp + 0xcb8], rax
cmp qword [rsp + 0xcb8], 0
je 0x180060c33
jmp 0x180060c4f
movzx eax, word [0x1800a6a48]
movabs rcx, 0x3e9d7c038dba0
imul rax, rcx
mov word [0x1800a6a20], ax
jmp 0x180060c62
movzx eax, word [0x1800a6a20]
imul eax, eax, 0xada1
mov dword [rsp + 0x60], eax
mov eax, dword [rsp + 0x158]
add eax, 0xe7
mov dword [rsp + 0x75c], eax
mov rax, qword [0x1800a6a90]
movzx ecx, byte [0x1800a697f]
cmp rax, rcx
jae 0x180060c95
mov dword [rsp + 0x36c], 1
jmp 0x180060ca0
mov dword [rsp + 0x36c], 0
mov rax, qword [0x1800a6a90]
cmp rax, 0x64
jae 0x180060cba
mov dword [rsp + 0x368], 1
jmp 0x180060cc5
mov dword [rsp + 0x368], 0
mov eax, dword [rsp + 0x368]
cmp dword [rsp + 0x36c], eax
jle 0x180060cd7
jmp 0x180060cfd
movzx eax, word [0x1800a6a34]
movzx eax, ax
mov ecx, dword [rsp + 0x60]
imul eax, ecx
movzx ecx, word [0x1800a6a34]
movzx ecx, cx
sub ecx, eax
mov eax, ecx
mov word [0x1800a6a34], ax
mov eax, dword [rsp + 0x158]
add eax, 0xe0
mov dword [rsp + 0xb88], eax
movzx eax, word [0x1800a6a40]
movsx rax, ax
sub rax, qword [0x1800a6aa8]
mov word [0x1800a6a40], ax
mov eax, dword [0x1800a69d4]
mov eax, eax
mov rcx, qword [rsp + 0x80]
cmp rax, rcx
je 0x180060d9b
cmp dword [rsp + 0x54], 0
jne 0x180060d52
mov dword [rsp + 0x370], 1
jmp 0x180060d5d
mov dword [rsp + 0x370], 0
movzx eax, byte [rsp + 0x46]
movzx eax, al
mov ecx, dword [rsp + 0x370]
add ecx, eax
mov eax, ecx
mov word [0x1800a6a48], ax
mov rax, qword [0x1800a6a98]
movabs rcx, 0xf68355f44bae5
add rax, rcx
mov ecx, dword [rsp + 0x6c]
mov ecx, ecx
sub rcx, rax
mov rax, rcx
mov dword [rsp + 0x6c], eax
mov eax, dword [rsp + 0x75c]
mov ecx, 0xf0
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x374]
mov edx, dword [rsp + 0x374]
sub ecx, edx
imul eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7d4], eax
lea rax, [rsp + 0xd18]
lea rcx, str.._AV___Ref_count_U
mov rdi, rax
mov rsi, rcx
mov ecx, 0x26
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0xd18]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov byte [rsp + 0x40], al
mov eax, dword [0x180dcc080]
mov dword [rsp + 0x15c], eax
movzx eax, byte [0x1800a697f]
add eax, 0xa2
cdqe
mov qword [rsp + 0x70], rax
movzx eax, byte [rsp + 0x47]
movzx eax, al
movzx ecx, word [0x1800a69bc]
movzx ecx, cx
add eax, ecx
movzx ecx, byte [rsp + 0x47]
movzx ecx, cl
sub ecx, eax
mov eax, ecx
mov byte [rsp + 0x47], al
mov eax, dword [rsp + 0x15c]
add eax, 0x9e
mov dword [rsp + 0x760], eax
movsx eax, word [0x1800a6a6c]
test eax, eax
jne 0x180060e68
mov dword [rsp + 0x378], 1
jmp 0x180060e73
mov dword [rsp + 0x378], 0
mov eax, dword [0x1800a69d4]
cmp eax, dword [rsp + 0x378]
jae 0x180060e8f
mov dword [rsp + 0x380], 1
jmp 0x180060e9a
mov dword [rsp + 0x380], 0
movzx eax, word [0x1800a6a48]
cmp rax, qword [rsp + 0x88]
ja 0x180060eb8
mov dword [rsp + 0x37c], 1
jmp 0x180060ec3
mov dword [rsp + 0x37c], 0
mov eax, dword [rsp + 0x37c]
cmp dword [rsp + 0x380], eax
je 0x180060fe3
movzx eax, byte [rsp + 0x42]
movzx eax, al
cmp qword [rsp + 0x88], rax
jbe 0x180060ef6
cmp qword [0x1800a6a10], 0
je 0x180061006