Function at 0x18000b6d0
Capabilities:
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x798]
sub rsp, 0x870
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x180081de0]
xor rax, rsp
mov qword [rbp + 0x750], rax
mov edi, edx
mov dword [rsp + 0x70], edx
mov r14, rcx
mov qword [rbp - 0x78], rcx
mov ebx, edx
mov dword [rsp + 0x68], edx
imul eax, edx, 0x762
mov dword [rsp + 0x78], eax
xor r12d, r12d
cmp edx, eax
ja 0x18000db0e
lea r13, [0x1800825d0]
lea r15, [0x180082748]
lea r11, [0x180068f60]
lea rsi, [0x180069d10]
lea r14, [0x180069d80]
lea rcx, [0x18006a660]
lea r8, [0x1800697c0]
lea r9, [0x180069830]
lea r10, [0x180069ca0]
movabs rdx, 0x6500620069006c
lea rax, [0x18006a1f0]
cmp ebx, 0x1849d
ja 0x18000bc3f
je 0x18000bc26
cmp ebx, 0x8573
ja 0x18000ba16
je 0x18000b833
mov eax, ebx
sub eax, 0xc5
je 0x18000b825
sub eax, 0x48
je 0x18000b802
cmp eax, 0x60ae
jne 0x18000daf7
movzx eax, word [0x1800776cd]
mov word [rbp + 0x5d9], ax
movzx eax, byte [0x1800776cf]
mov byte [rbp + 0x5db], al
mov byte [rbp + 0x5dc], 0x6f
movzx eax, word [0x1800776f5]
mov word [rbp + 0x5dd], ax
movzx eax, byte [0x1800776f7]
mov byte [rbp + 0x5df], al
jmp 0x18000daf7
mov dword [rsp + 0x68], 0x4030201
lea r8, [rsp + 0x68]
lea rdx, [0x180082450]
mov ecx, 0x51
call fcn.180042280
jmp 0x18000daca
mov word [rbp + 0x5d8], 0x73
jmp 0x18000daf7
mov dword [rsp + 0x68], 0x4030201
lea r8, [rsp + 0x68]
mov rdx, r13
mov ecx, 0x51
call fcn.180042280
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x49]
call fcn.18003cc80
mov dword [rbp - 0x80], 0x11
mov dword [rbp - 0x7c], 0xffffffff
lea rax, [0x180068cc0]
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0xd8], r12
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._12_15_22D__s_7_16_19d__s_5_0_3d
call fcn.18005f710
mov dword [rsp + 0x60], r12d
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x68], r12d
lea rax, [rsp + 0x68]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 0x1a
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0xd0]
lea rcx, [rbp - 0x80]
call fcn.1800317a0
movdqa xmm0, xmmword [0x18007b7d0]
movdqu xmmword [rbp + 0x550], xmm0
movdqa xmm1, xmmword [0x18007b8a0]
movdqu xmmword [rbp + 0x560], xmm1
lea rax, [0x180068d30]
mov qword [rbp - 0x40], rax
lea rax, [0x180068da0]
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x30], r12
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Cbrs_sharing_a_single_exit_stub
call fcn.18005f710
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x68], r12d
mov dword [rsp + 0x60], r12d
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, 0x1a
lea r8, [rsp + 0x58]
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x550]
call fcn.1800317a0
movdqa xmm0, xmmword [0x18007b7a0]
movdqu xmmword [rbp + 0xf0], xmm0
movdqa xmm1, xmmword [0x18007b7f0]
movdqu xmmword [rbp + 0x100], xmm1
movdqa xmm0, xmmword [0x18007b880]
movdqu xmmword [rbp + 0x110], xmm0
lea rax, [0x180068e40]
mov qword [rbp - 0x40], rax
lea rax, [0x180068eb0]
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x30], r12
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.__s_is_not_a_scalar_variable
call fcn.18005f710
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x68], r12d
mov dword [rsp + 0x60], r12d
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, 0x1a
lea r8, [rsp + 0x58]
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0xf0]
call fcn.1800317a0
jmp 0x18000daca
cmp ebx, 0xc2b1
je 0x18000bc17
cmp ebx, 0x109d9
je 0x18000ba5b
cmp ebx, 0x123a7
jne 0x18000daf7
mov byte [rbp + 0x5e4], 0x5f
mov eax, dword [0x180077321]
mov dword [rbp + 0x5e5], eax
movzx eax, byte [0x180077325]
mov byte [rbp + 0x5e9], al
jmp 0x18000daf7
movdqa xmm0, xmmword [0x18007b890]
movdqu xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x60], r11
lea rax, [0x180069020]
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], r12
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.typedef_struct__OrcProgram_OrcProgram_
call fcn.18005f710
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x68], r12d
mov dword [rsp + 0x60], r12d
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, 0x1a
lea r8, [rsp + 0x58]
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x40]
call fcn.1800317a0
movdqa xmm0, xmmword [0x18007b7c0]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0xffffffff
lea rax, [0x1800690a0]
mov qword [rbp + 0x550], rax
lea rax, [0x180069110]
mov qword [rbp + 0x558], rax
lea rax, [0x180069580]
mov qword [rbp + 0x560], rax
mov qword [rbp + 0x568], r12
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.NativeCommandHandler_initialized...
call fcn.18005f710
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x68], r12d
mov dword [rsp + 0x60], r12d
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, 0x1a
lea r8, [rsp + 0x58]
lea rdx, [rbp + 0x550]
lea rcx, [rbp - 0x40]
call fcn.1800317a0
movdqa xmm0, xmmword [0x18007b7b0]
movdqu xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], 0
mov dword [rbp - 0x48], 0xffffffff
lea rax, [0x180069610]
mov qword [rbp + 0x550], rax
lea rax, [0x180069680]
mov qword [rbp + 0x558], rax
lea rax, [0x180069750]
mov qword [rbp + 0x560], rax
mov qword [rbp + 0x568], r12
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.LL_SAVE_4_REG_STARTING_FROM_R212
call fcn.18005f710
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x68], r12d
mov dword [rsp + 0x60], r12d
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, 0x1a
lea r8, [rsp + 0x58]
lea rdx, [rbp + 0x550]
lea rcx, [rbp - 0x60]
call fcn.1800317a0
jmp 0x18000daca
mov dword [rbp + 0x5e0], 0x4547414d
jmp 0x18000daf7
mov dword [rbp + 0x5ea], 0x3d20294c
mov dword [rbp + 0x5ee], 0x3831203d
jmp 0x18000daf7
cmp ebx, 0x24689
ja 0x18000bfa3
je 0x18000bf56
cmp ebx, 0x18e3f
je 0x18000bdc5
cmp ebx, 0x1e593
je 0x18000bdaf
cmp ebx, 0x212a5
jne 0x18000daf7
movdqa xmm0, xmmword [0x18007b7e0]
movdqu xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x50], 0xff
mov dword [rbp - 0x4c], 0xffffffff
mov qword [rbp + 0x550], rsi
mov qword [rbp + 0x558], r14
mov qword [rbp + 0x560], rax
mov qword [rbp + 0x568], rcx
mov qword [rbp + 0x570], r12
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.char3___OVERLOADABLE___convert_char_sat_rte_uchar3__
call fcn.18005f710
mov dword [rsp + 0x58], 3
mov dword [rsp + 0x68], 2
mov dword [rsp + 0x60], 0x64
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, 0x1a
lea r8, [rsp + 0x58]
lea rdx, [rbp + 0x550]
lea rcx, [rbp - 0x60]
call fcn.1800317a0
movdqa xmm0, xmmword [0x18007b8b0]
movdqu xmmword [rbp - 0x40], xmm0
lea rax, [0x18006a6e0]
mov qword [rbp + 0x550], rax
lea rax, [0x18006a750]
mov qword [rbp + 0x558], rax
lea rax, str.OggS
mov qword [rbp + 0x560], rax
mov qword [rbp + 0x568], r12
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._DeleteVertexShaderOpenGL_USC__YGXAAPAX_Z
call fcn.18005f710
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x68], r12d
mov dword [rsp + 0x60], r12d
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, 0x1a
lea r8, [rsp + 0x58]
lea rdx, [rbp + 0x550]
lea rcx, [rbp - 0x40]
call fcn.1800317a0
jmp 0x18000daca
mov byte [rbp + 0x5f2], 0
mov dword [rbp + 0x5f8], 0x73006d
jmp 0x18000daf7
lea rcx, [rbp + 0x140]
lea rax, [0x18007add0]
mov edx, 8
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x18000bde0
mov rax, qword [rax]
mov qword [rcx], rax
mov qword [rbp + 0x550], r8
mov qword [rbp + 0x558], r9
mov qword [rbp + 0x560], r10
mov qword [rbp + 0x568], r12
lea ecx, [rdx + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.SetHotkey___:_Save___ret__0x_x
call fcn.18005f710
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x68], r12d
mov dword [rsp + 0x60], r12d
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, 0x1a
lea r8, [rsp + 0x58]
lea rdx, [rbp + 0x550]
lea rcx, [rbp + 0x140]
call fcn.1800317a0
movdqa xmm0, xmmword [0x18007b7e0]
movdqu xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x50], 0xff
mov dword [rbp - 0x4c], 0xffffffff
mov qword [rbp + 0x550], rsi
mov qword [rbp + 0x558], r14
lea rax, [0x18006a1f0]
mov qword [rbp + 0x560], rax
lea rax, [0x18006a660]
mov qword [rbp + 0x568], rax
mov qword [rbp + 0x570], r12
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.ServiceConsolePortGroupProfile
call fcn.18005f710
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x68], r12d
mov dword [rsp + 0x60], r12d
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, 0x1a
lea r8, [rsp + 0x58]
lea rdx, [rbp + 0x550]
lea rcx, [rbp - 0x60]
call fcn.1800317a0
jmp 0x18000daca
mov eax, dword [0x180077402]
mov dword [rbp + 0x5fc], eax
movzx eax, word [0x180077406]
mov word [rbp + 0x600], ax
mov word [rbp + 0x602], r12w
mov r8d, 2
lea rdx, [0x180077438]
lea rcx, [rbp + 0x5f8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov eax, 0x30
mov word [rbp + 0x606], ax
jmp 0x18000daca
cmp ebx, 0x2970b
je 0x18000bffd
cmp ebx, 0x2a77f
je 0x18000bfc7
cmp ebx, 0x31b71
jne 0x18000daf7
mov eax, r12d
jmp 0x18000e768
mov word [rbp + 0x608], r12w
mov qword [rbp + 0x610], rdx
mov word [rbp + 0x618], r12w
mov r8d, 2
lea rdx, [0x1800773d4]
lea rcx, [rbp + 0x618]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x18000daca
mov r14d, 0x52
mov dword [rsp + 0x58], r14d
nop dword [rax + rax]
cmp r14d, 0x52
je 0x18000d915
cmp r14d, 0x5d
je 0x18000d8c2
cmp r14d, 0x68
je 0x18000c68a
cmp r14d, 0x73
je 0x18000c06c
cmp r14d, 0x7e
jne 0x18000da9e
lea rbx, [rbp - 0x20]
lea edi, [r14 - 0x79]
nop word [rax + rax]
mov rdx, rbx
mov ecx, 0xf1
call fcn.18002fec0
add rbx, 0x20
sub rdi, 1
jne 0x18000c050
jmp 0x18000da9e
mov ebx, r12d
mov edi, 8
lea r13, [0x180000000]
nop dword [rax + rax]
cmp ebx, 7
ja case.default.0x18000c096
mov eax, ebx
mov ecx, dword [r13 + rax*4 + 0xe7b4]
add rcx, r13
jmp rcx
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._Driver_Uninstall_Begin_______
call fcn.18005f710
mov dword [rsp + 0x28], 0x56
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov rdx, r15
xor ecx, ecx
call fcn.18001ba90
mov eax, dword [rbp + 0x18]
mov dword [rsp + 0x60], eax
lea r8, [rsp + 0x60]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
movsxd r8, dword [rbp + 0x18]
mov rdx, qword [rbp + 0x10]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
jmp case.default.0x18000c096
mov eax, dword [rbp + 0x38]
mov dword [rsp + 0x60], eax
mov r8d, 0x9c
lea rdx, [rsp + 0x60]
mov rcx, r15
call fcn.18004c570
lea r9, [rbp + 0x550]
mov r8, r15
xor edx, edx
mov ecx, 0xe0
call fcn.180032210
test eax, eax
jg case.default.0x18000c096
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
jmp case.default.0x18000c096
mov eax, dword [rbp + 0x28]
mov dword [rsp + 0x60], eax
lea r8, [rsp + 0x60]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
mov ecx, dword [rbp + 0x28]
add ecx, 0xffffffec
movsxd r8, ecx
mov rdx, qword [rbp + 0x20]
add rdx, 0x14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbp + 0x28]
add eax, 0xffffffec
mov dword [rsp + 0x60], eax
mov r8d, 0x9c
lea rdx, [rsp + 0x60]
mov rcx, r15
call fcn.18004c570
mov eax, dword [rbp + 0x38]
mov dword [rsp + 0x60], eax
lea r8, [rsp + 0x60]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
movsxd r8, dword [rbp + 0x38]
mov rdx, qword [rbp + 0x30]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
jmp case.default.0x18000c096
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.ok._n
call fcn.18005f710
jmp case.default.0x18000c096
mov eax, dword [rbp + 0x18]
jmp 0x18000c32a
mov eax, dword [rbp + 0x18]
mov dword [rsp + 0x60], eax
lea r8, [rsp + 0x60]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
movsxd r8, dword [rbp + 0x18]
mov rdx, qword [rbp + 0x10]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbp + 0x18]
mov dword [rsp + 0x60], eax
mov r8d, 0x9c
lea rdx, [rsp + 0x60]
mov rcx, r15
call fcn.18004c570
mov eax, dword [rbp + 0x28]
mov dword [rsp + 0x60], eax
lea r8, [rsp + 0x60]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
mov rcx, qword [rbp + 0x20]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
mov ecx, dword [rcx + 0x10]
mov dword [rax + 0x10], ecx
mov dword [rsp + 0x60], 0x14
jmp 0x18000c32e
lea r9, [rbp + 0x550]
mov r8, r15
xor edx, edx
mov ecx, 0xe0
call fcn.180032210
test eax, eax
jle 0x18000c2a9
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
lea r9, [rbp + 0x550]
mov r8, r15
xor edx, edx
mov ecx, 0xe0
call fcn.180032210
test eax, eax
jg 0x18000c2df
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
lea r9, [rbp + 0x550]
mov r8, r15
xor edx, edx
mov ecx, 0xe0
call fcn.180032210
test eax, eax
jle case.default.0x18000c096
jmp 0x18000c135
mov eax, dword [rbp + 8]
mov dword [rsp + 0x60], eax
lea r8, [rsp + 0x60]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
movsxd r8, dword [rbp + 8]
mov rdx, qword [rbp]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbp + 8]
mov dword [rsp + 0x60], eax
mov r8d, 0x9c
lea rdx, [rsp + 0x60]
mov rcx, r15
call fcn.18004c570
inc ebx
sub rdi, 1
jne 0x18000c080
mov ebx, 0x1f
lea r13, [0x1800825d0]
nop dword [rax]
cmp ebx, 0x4a3b
ja 0x18000c585
je 0x18000c542
cmp ebx, 0x1f
je 0x18000c4a2
cmp ebx, 0x12a6
je 0x18000c462
cmp ebx, 0x252d
je 0x18000c3c6
cmp ebx, 0x37b4
jne 0x18000c673
mov eax, dword [rbp + 0x38]
mov dword [rsp + 0x60], eax
lea r8, [rsp + 0x60]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
mov ecx, dword [rbp + 0x38]
add ecx, 0xfffffffb
movsxd r8, ecx
mov rdx, qword [rbp + 0x30]
jmp 0x18000c66b
mov eax, dword [rbp + 0x28]
mov dword [rsp + 0x60], eax
mov r8d, 0x9c
lea rdx, [rsp + 0x60]
mov rcx, r15
call fcn.18004c570
mov eax, dword [rbp + 0x28]
mov dword [rsp + 0x60], eax
lea r8, [rsp + 0x60]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
movsxd r8, dword [rbp + 0x28]
mov rdx, qword [rbp + 0x20]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbp + 0x28]
mov dword [rsp + 0x60], eax
mov r8d, 0x9c
lea rdx, [rsp + 0x60]
mov rcx, r15
call fcn.18004c570
lea r9, [rbp + 0x550]
mov r8, r15
xor edx, edx
mov ecx, 0xe0
call fcn.180032210
test eax, eax
jg 0x18000c673
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
jmp 0x18000c673
mov eax, dword [rbp + 0x18]
mov dword [rsp + 0x60], eax
mov r8d, 0x9c
lea rdx, [rsp + 0x60]
mov rcx, r15
call fcn.18004c570
mov eax, dword [rbp + 0x28]
mov dword [rsp + 0x60], eax
lea r8, [rsp + 0x60]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
movsxd r8, dword [rbp + 0x28]
mov rdx, qword [rbp + 0x20]
jmp 0x18000c66b
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.SERVICE_KERNEL_DRIVER
call fcn.18005f710
mov dword [rsp + 0x28], 0x56
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov rdx, r15
xor ecx, ecx
call fcn.18001ba90
mov eax, dword [rbp + 8]
mov dword [rsp + 0x60], eax
lea r8, [rsp + 0x60]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
movsxd r8, dword [rbp + 8]
mov rdx, qword [rbp]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbp + 8]
mov dword [rsp + 0x60], eax
mov r8d, 0x9c
lea rdx, [rsp + 0x60]
mov rcx, r15
call fcn.18004c570
mov eax, dword [rbp + 0x18]
mov dword [rsp + 0x60], eax
lea r8, [rsp + 0x60]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
movsxd r8, dword [rbp + 0x18]
mov rdx, qword [rbp + 0x10]
jmp 0x18000c66b
mov eax, dword [rbp + 0x38]
add eax, 0xfffffffb
mov dword [rsp + 0x60], eax
mov r8d, 0x9c
lea rdx, [rsp + 0x60]
mov rcx, r15
call fcn.18004c570
mov eax, dword [rbp + 0x48]
mov dword [rsp + 0x60], eax
lea r8, [rsp + 0x60]
and al, 0x60
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
movsxd r8, dword [rbp + 0x48]
mov rdx, qword [rbp + 0x40]
jmp 0x18000c66b
cmp ebx, 0x5cc2
je 0x18000c630
cmp ebx, 0x6f49
je 0x18000c5f7
cmp ebx, 0x81d0
jne 0x18000c673
lea r9, [rbp + 0x550]
mov r8, r15
xor edx, edx
mov ecx, 0xe0
call fcn.180032210
test eax, eax
jg 0x18000c5db
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.ok._n
call fcn.18005f710
jmp 0x18000c673
mov eax, dword [rbp + 0x58]
mov dword [rsp + 0x60], eax
mov r8d, 0x9c
lea rdx, [rsp + 0x60]
mov rcx, r15
call fcn.18004c570
lea r9, [rbp + 0x550]
mov r8, r15
xor edx, edx
mov ecx, 0xe0
call fcn.180032210
test eax, eax
jle 0x18000c673
jmp 0x18000c441
mov eax, dword [rbp + 0x48]
mov dword [rsp + 0x60], eax
mov r8d, 0x9c
lea rdx, [rsp + 0x60]
mov rcx, r15
call fcn.18004c570
mov eax, dword [rbp + 0x58]
mov dword [rsp + 0x60], eax
lea r8, [rsp + 0x60]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
movsxd r8, dword [rbp + 0x58]
mov rdx, qword [rbp + 0x50]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add ebx, 0x1287
cmp ebx, 0x9438
jbe 0x18000c360
jmp 0x18000da9e
mov esi, 9
nop
lea rdx, [0x180000000]
cmp esi, 9
ja case.default.0x18000c6ac
mov eax, esi
mov ecx, dword [rdx + rax*4 + 0xe7d4]
add rcx, rdx
jmp rcx
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x60], r12d
mov dword [rsp + 0x50], r12d
mov qword [rsp + 0x28], r12
lea rax, [rbp + 0x580]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x50]
mov ecx, 0xcc
call fcn.180029c50
jmp 0x18000c837
mov r9d, 0xa6
xor r8d, r8d
mov rdx, r13
lea rcx, [rbp + 0x580]
call fcn.1800047c0
cmp eax, 1
je 0x18000c725
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
mov dword [rsp + 0x60], 0xffffffff
mov dword [rsp + 0x50], 1
mov dword [rsp + 0x58], 1
mov qword [rsp + 0x28], r12
lea rax, [rbp + 0x580]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
mov ecx, 0xcc
call fcn.180029c50
mov r9d, 0xa6
xor r8d, r8d
mov rdx, r13
lea rcx, [rbp + 0x580]
call fcn.1800047c0
cmp eax, 1
je 0x18000c7a0
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
mov dword [rsp + 0x60], 0xffffffff
mov dword [rsp + 0x50], 2
mov dword [rsp + 0x58], 1
mov qword [rsp + 0x28], r12
lea rax, [rbp + 0x580]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
mov ecx, 0xcc
call fcn.180029c50
mov r9d, 0xa6
xor r8d, r8d
mov rdx, r13
lea rcx, [rbp + 0x580]
call fcn.1800047c0
cmp eax, 1
je 0x18000c837
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
jmp 0x18000c837
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.OnlineMeetingExternalLink
call fcn.18005f710
mov ebx, 0x5c
lea rdx, [0x180000000]
dec esi
lea eax, [rsi + 0x27]
cmp eax, 0x26
ja 0x18000c690
mov esi, reloc.SHLWAPI.dll_StrCmpNICW
nop word [rax + rax]
cmp esi, 0x1ab
ja 0x18000d129
je case.0x18000c895.160
lea eax, [rsi - 0x9a]
cmp eax, 0xfc
ja case.0x18000c895.166
movzx eax, byte [rdx + rax + 0xe830]
mov ecx, dword [rdx + rax*4 + 0xe7fc]
add rcx, rdx
jmp rcx
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r13
cmp byte [rbx + 0x5c], bh
mov dword [rsp + 0x30], ebx
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x550]
call fcn.18004a100
lea r9, [rbp + 0x550]
mov r8, r15
xor edx, edx
mov ecx, 0xe0
call fcn.180032210
lea r9, [rbp + 0x550]
mov r8, r15
xor edx, edx
mov ecx, 0xe0
call fcn.180032210
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], ebx
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x550]
call fcn.18004a100
lea r9d, [rbx + 0x4a]
xor r8d, r8d
mov rdx, r13
lea rcx, [rbp + 0x580]
call fcn.1800047c0
cmp eax, 1
je 0x18000c83c
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
lea edx, [rbx + 0x3a]
xor ecx, ecx
call fcn.18002f660
jmp 0x18000c83c
mov dword [rsp + 0x28], 0x56
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov rdx, r15
xor ecx, ecx
call fcn.18001ba90
mov dword [rsp + 0x20], 0x73
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r13
call fcn.180012040
jmp 0x18000c837
mov r9d, 0xa6
xor r8d, r8d
mov rdx, r13
lea rcx, [rbp + 0x580]
call fcn.1800047c0
cmp eax, 1
je 0x18000c9d1
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
mov dword [rsp + 0x50], 9
mov dword [rsp + 0x58], 0x4c
mov dword [rsp + 0x60], 0xffffffff
mov qword [rsp + 0x28], r12
lea rax, [rbp + 0x580]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
mov ecx, 0xcc
call fcn.180029c50
jmp 0x18000c837
mov dword [rsp + 0x60], 0xffffffff
mov dword [rsp + 0x50], 3
mov dword [rsp + 0x58], 0x62
mov qword [rsp + 0x28], r12
lea rax, [rbp + 0x580]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
mov ecx, 0xcc
call fcn.180029c50
mov r9d, 0xa6
xor r8d, r8d
mov rdx, r13
lea rcx, [rbp + 0x580]
call fcn.1800047c0
cmp eax, 1
je 0x18000ca93
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
mov dword [rsp + 0x60], 0x1388
mov dword [rsp + 0x50], 4
mov dword [rsp + 0x58], 0xfef
mov qword [rsp + 0x28], r12
lea rax, [rbp + 0x580]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
mov ecx, 0xcc
call fcn.180029c50
mov r9d, 0xa6
xor r8d, r8d
mov rdx, r13
lea rcx, [rbp + 0x580]
call fcn.1800047c0
cmp eax, 0xffffffff
je 0x18000c837
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Phx::Boolean_doReportSecurityObject__0
call fcn.18005f710
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r9d, 0xa6
xor r8d, r8d
mov rdx, r13
lea rcx, [rbp + 0x580]
call fcn.1800047c0
cmp eax, 1
je 0x18000cb55
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
mov dword [rsp + 0x50], 0xa
mov dword [rsp + 0x58], 0x22
jmp 0x18000c9e1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.ok._n
jmp 0x18000c832
lea rbx, [rbp - 0x18]
mov edi, 5
nop dword [rax]
mov eax, dword [rbx]
mov dword [rsp + 0x50], eax
lea r8, [rsp + 0x50]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
movsxd r8, dword [rbx]
mov rdx, qword [rbx - 8]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbx]
mov dword [rsp + 0x50], eax
mov r8d, 0x9c
lea rdx, [rsp + 0x50]
mov rcx, r15
call fcn.18004c570
mov eax, dword [rbx + 0x10]
mov dword [rsp + 0x50], eax
lea r8, [rsp + 0x50]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
movsxd r8, dword [rbx + 0x10]
mov rdx, qword [rbx + 8]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbx + 0x10]
mov dword [rsp + 0x50], eax
mov r8d, 0x9c
lea rdx, [rsp + 0x50]
mov rcx, r15
call fcn.18004c570
lea rbx, [rbx + 0x20]
sub rdi, 1
jne 0x18000cb90
lea r9, [rbp + 0x550]
mov r8, r15
xor edx, edx
mov ecx, 0xe0
call fcn.180032210
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r13
mov ebx, 0x5c
mov dword [rsp + 0x30], ebx
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x550]
call fcn.18004a100
lea r9, [rbp + 0x550]
mov r8, r15
xor edx, edx
mov ecx, 0xe0
call fcn.180032210
jmp 0x18000c83c
mov ebx, 0x5c
jmp 0x18000c843
mov dword [rsp + 0x60], 0xffffffff
mov dword [rsp + 0x50], 1
mov dword [rsp + 0x58], 1
mov qword [rsp + 0x28], r12
lea rax, [rbp + 0x550]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
mov ecx, 0xcc
call fcn.180029c50
mov r9d, 0xa6
xor r8d, r8d
mov rdx, r13
lea rcx, [rbp + 0x550]
call fcn.1800047c0
cmp eax, 1
je 0x18000cd08
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
mov dword [rsp + 0x60], 0xffffffff
mov dword [rsp + 0x50], 2
mov dword [rsp + 0x58], 1
jmp 0x18000d0fa
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.QFile::readLine:_Read_operation_not_permitted
call fcn.18005f710
jmp case.0x18000c895.166
mov r9d, 0xa6
xor r8d, r8d
mov rdx, r13
lea rcx, [rbp + 0x550]
call fcn.1800047c0
cmp eax, 1
je 0x18000cd7d
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
mov dword [rsp + 0x60], 0xffffffff
mov dword [rsp + 0x50], 6
mov dword [rsp + 0x58], 1
jmp 0x18000d0fa
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], ebx
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.18004a100
jmp case.0x18000c895.166
mov r9d, 0xa6
xor r8d, r8d
mov rdx, r13
lea rcx, [rbp + 0x550]
call fcn.1800047c0
cmp eax, 1
je 0x18000ce01
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
mov dword [rsp + 0x60], 0xffffffff
mov dword [rsp + 0x50], 7
mov dword [rsp + 0x58], 0xb8a
jmp 0x18000d0fa
mov dword [rsp + 0x28], 0x56
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov rdx, r15
xor ecx, ecx
call fcn.18001ba90
mov dword [rsp + 0x20], 0x73
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r13
call fcn.180012040
lea rbx, [rbp - 0x18]
mov edi, 5
nop dword [rax]
mov eax, dword [rbx]
mov dword [rsp + 0x50], eax
lea r8, [rsp + 0x50]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
movsxd r8, dword [rbx]
mov rdx, qword [rbx - 8]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbx]
mov dword [rsp + 0x50], eax
mov r8d, 0x9c
lea rdx, [rsp + 0x50]
mov rcx, r15
call fcn.18004c570
mov eax, dword [rbx + 0x10]
mov dword [rsp + 0x50], eax
lea r8, [rsp + 0x50]
lea eax, [rsp + 0x50]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
movsxd r8, dword [rbx + 0x10]
mov rdx, qword [rbx + 8]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbx + 0x10]
mov dword [rsp + 0x50], eax
mov r8d, 0x9c
lea rdx, [rsp + 0x50]
mov rcx, r15
call fcn.18004c570
lea rbx, [rbx + 0x20]
sub rdi, 1
jne 0x18000ce60
lea r9, [rbp - 0x60]
mov r8, r15
xor edx, edx
mov ecx, 0xe0
call fcn.180032210
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r13
mov ebx, 0x5c
mov dword [rsp + 0x30], ebx
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.18004a100
jmp case.0x18000c895.166
lea r9, [rbp - 0x60]
mov r8, r15
xor edx, edx
mov ecx, 0xe0
call fcn.180032210
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], ebx
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.18004a100
lea r9, [rbp - 0x60]
mov r8, r15
xor edx, edx
mov ecx, 0xe0
call fcn.180032210
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], ebx
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.18004a100
lea r9, [rbp - 0x60]
mov r8, r15
xor edx, edx
mov ecx, 0xe0
call fcn.180032210
jmp case.0x18000c895.166
mov r9d, 0xa6
xor r8d, r8d
mov rdx, r13
lea rcx, [rbp + 0x550]
call fcn.1800047c0
cmp eax, 1
je 0x18000d000
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
mov dword [rsp + 0x60], 0xffffffff
mov dword [rsp + 0x50], 5
mov dword [rsp + 0x58], 1
jmp 0x18000d0fa
mov dword [rsp + 0x60], 0xffffffff
mov dword [rsp + 0x50], 3
mov dword [rsp + 0x58], 0x62
mov qword [rsp + 0x28], r12
lea rax, [rbp + 0x550]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
and al, 0x50
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
mov ecx, 0xcc
call fcn.180029c50
mov r9d, 0xa6
xor r8d, r8d
mov rdx, r13
lea rcx, [rbp + 0x550]
call fcn.1800047c0
cmp eax, 1
je 0x18000d098
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
mov dword [rsp + 0x60], 0x1388
mov dword [rsp + 0x50], 4
mov dword [rsp + 0x58], 0xfef
jmp 0x18000d0fa
mov r9d, 0xa6
xor r8d, r8d
mov rdx, r13
lea rcx, [rbp + 0x550]
call fcn.1800047c0
cmp eax, 1
je 0x18000d0eb
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
mov dword [rsp + 0x60], r12d
mov dword [rsp + 0x50], r12d
mov dword [rsp + 0x58], r12d
mov qword [rsp + 0x28], r12
lea rax, [rbp + 0x550]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
mov ecx, 0xcc
call fcn.180029c50
jmp case.0x18000c895.166
mov eax, esi
sub eax, 0x1c0
je 0x18000d19c
cmp eax, 0x15
jne case.0x18000c895.166
mov dword [rsp + 0x60], 0x4650
mov dword [rsp + 0x50], 0x11
mov dword [rsp + 0x58], 0x12c
mov qword [rsp + 0x28], r12
lea rax, [rbp + 0x550]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
mov ecx, 0xcc
call fcn.180029c50
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.ok._n
call fcn.18005f710
jmp case.0x18000c895.166
mov dword [rsp + 0x60], 0x2328
mov dword [rsp + 0x50], 8
mov dword [rsp + 0x58], 0x809
mov qword [rsp + 0x28], r12
lea rax, [rbp + 0x550]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
mov ecx, 0xcc
call fcn.180029c50
mov r9d, 0xa6
xor r8d, r8d
mov rdx, r13
lea rcx, [rbp + 0x550]
call fcn.1800047c0
cmp eax, 0xffffffff
jne 0x18000db79
mov r9d, 0xa6
xor r8d, r8d
mov rdx, r13
lea rcx, [rbp + 0x550]
call fcn.1800047c0
cmp eax, 1
je case.0x18000c895.166
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
add esi, 0x15
cmp esi, 0x1ea
lea rdx, [0x180000000]
jb 0x18000c860
mov ebx, 0x126
cmp ebx, 0x2e2
ja 0x18000d52d
je 0x18000d445
cmp ebx, 0x126
je 0x18000d3df
cmp ebx, 0x1ba
je 0x18000d357
cmp ebx, 0x24e
jne 0x18000d63f
mov eax, dword [rbp + 8]
mov dword [rsp + 0x50], eax
lea r8, [rsp + 0x50]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
mov rdx, qword [rbp]
mov ecx, dword [rdx + 0x17]
mov dword [rax], ecx
movzx ecx, byte [rdx + 0x1b]
mov byte [rax + 4], cl
mov dword [rsp + 0x50], 5
mov r8d, 0x9c
lea rdx, [rsp + 0x50]
mov rcx, r15
call fcn.18004c570
lea r9, [rbp + 0x550]
push rax
add eax, 0x8b4d0000
invalid
xor edx, edx
mov ecx, 0xe0
call fcn.180032210
test eax, eax
jle 0x18000d303
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
mov eax, dword [rbp + 8]
mov dword [rsp + 0x50], eax
lea r8, [rsp + 0x50]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
mov ecx, dword [rbp + 8]
add ecx, 0xffffffe4
movsxd r8, ecx
mov rdx, qword [rbp]
add rdx, 0x1c
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbp + 8]
add eax, 0xffffffe4
mov dword [rsp + 0x50], eax
mov r8d, 0x9c
lea rdx, [rsp + 0x50]
mov rcx, r15
call fcn.18004c570
jmp 0x18000d63f
mov dword [rsp + 0x50], 3
mov r8d, 0x9c
lea rdx, [rsp + 0x50]
mov rcx, r15
call fcn.18004c570
lea r9, [rbp + 0x550]
mov r8, r15
xor edx, edx
mov ecx, 0xe0
call fcn.180032210
test eax, eax
jle 0x18000d3a8
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
mov eax, dword [rbp + 8]
mov dword [rsp + 0x50], eax
lea r8, [rsp + 0x50]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
mov rcx, qword [rbp]
movups xmm0, xmmword [rcx + 3]
movups xmmword [rax], xmm0
mov ecx, dword [rcx + 0x13]
mov dword [rax + 0x10], ecx
mov dword [rsp + 0x50], 0x14
jmp 0x18000d5f6
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.slot.GetClientBufferSize____size
call fcn.18005f710
mov dword [rsp + 0x28], 0x56
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov rdx, r15
xor ecx, ecx
call fcn.18001ba90
mov eax, dword [rbp + 8]
mov dword [rsp + 0x50], eax
lea r8, [rsp + 0x50]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
mov rdx, qword [rbp]
movzx ecx, word [rdx]
mov word [rax], cx
movzx ecx, byte [rdx + 2]
mov byte [rax + 2], cl
jmp 0x18000d63f
lea r9, [rbp + 0x550]
mov r8, r15
xor edx, edx
mov ecx, 0xe0
call fcn.180032210
test eax, eax
jle 0x18000d47b
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
mov eax, dword [rbp + 0x18]
mov dword [rsp + 0x50], eax
lea r8, [rsp + 0x50]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
mov rcx, qword [rbp + 0x10]
mov edx, 7
nop dword [rax]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rdx, 1
jne 0x18000d4a0
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
mov rcx, qword [rcx + 0x60]
mov qword [rax + 0x60], rcx
jmp 0x18000d63f
cmp ebx, 0x376
je 0x18000d5ee
cmp ebx, 0x40a
jne 0x18000d63f
mov eax, dword [rbp + 0x18]
mov dword [rsp + 0x50], eax
lea r8, [rsp + 0x50]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
mov ecx, dword [rbp + 0x18]
add ecx, 0xfffffc18
movsxd r8, ecx
mov rdx, qword [rbp + 0x10]
add rdx, 0x3e8
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbp + 0x18]
add eax, 0xfffffc18
mov dword [rsp + 0x50], eax
mov r8d, 0x9c
lea rdx, [rsp + 0x50]
mov rcx, r15
call fcn.18004c570
lea r9, [rbp + 0x550]
mov r8, r15
xor edx, edx
mov ecx, 0xe0
call fcn.180032210
test eax, eax
jg 0x18000d5d2
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.ok._n
call fcn.18005f710
jmp 0x18000d63f
mov dword [rsp + 0x50], 0x3e8
mov r8d, 0x9c
lea rdx, [rsp + 0x50]
mov rcx, r15
call fcn.18004c570
lea r9, [rbp + 0x550]
mov r8, r15
xor edx, edx
mov ecx, 0xe0
call fcn.180032210
test eax, eax
jle 0x18000d63f
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
add ebx, 0x94
cmp ebx, 0x49e
jb 0x18000d253
mov ebx, r12d
mov edi, 7
lea r13, [0x180000000]
cmp ebx, 6
ja case.default.0x18000d676
mov eax, ebx
mov ecx, dword [r13 + rax*4 + 0xe930]
add rcx, r13
jmp rcx
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.__WMCPcntrl_:_DuplicateHandle_shMem_
call fcn.18005f710
mov dword [rsp + 0x28], 0x56
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov rdx, r15
xor ecx, ecx
call fcn.18001ba90
mov eax, dword [rbp + 8]
mov dword [rsp + 0x50], eax
lea r8, [rsp + 0x50]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
movsxd r8, dword [rbp + 8]
mov rdx, qword [rbp]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbp + 8]
mov dword [rsp + 0x50], eax
mov r8d, 0x9c
lea rdx, [rsp + 0x50]
mov rcx, r15
call fcn.18004c570
jmp case.default.0x18000d676
mov eax, dword [rbp + 0x18]
jmp 0x18000d6db
mov dword [rsp + 0x50], 0x14
mov r8d, 0x9c
lea rdx, [rsp + 0x50]
mov rcx, r15
call fcn.18004c570
lea r9, [rbp + 0x550]
mov r8, r15
xor edx, edx
mov ecx, 0xe0
call fcn.180032210
test eax, eax
jg 0x18000d74d
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
lea r9, [rbp + 0x550]
mov r8, r15
xor edx, edx
mov ecx, 0xe0
call fcn.180032210
test eax, eax
jle 0x18000d783
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
mov eax, dword [rbp + 8]
mov dword [rsp + 0x50], eax
lea r8, [rsp + 0x50]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
mov ecx, dword [rbp + 8]
add ecx, 0xffffffec
movsxd r8, ecx
mov rdx, qword [rbp]
add rdx, 0x14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbp + 8]
add eax, 0xffffffec
jmp 0x18000d6db
mov eax, dword [rbp + 0x18]
mov dword [rsp + 0x50], eax
lea r8, [rsp + 0x50]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
movsxd r8, dword [rbp + 0x18]
mov rdx, qword [rbp + 0x10]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
jmp case.default.0x18000d676
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.ok._n
call fcn.18005f710
jmp case.default.0x18000d676
mov eax, dword [rbp + 0x18]
mov dword [rsp + 0x50], eax
lea r8, [rsp + 0x50]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
movsxd r8, dword [rbp + 0x18]
mov rdx, qword [rbp + 0x10]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbp + 0x18]
mov dword [rsp + 0x50], eax
mov r8d, 0x9c
lea rdx, [rsp + 0x50]
mov rcx, r15
call fcn.18004c570
lea r9, [rbp + 0x550]
mov r8, r15
xor edx, edx
mov ecx, 0xe0
call fcn.180032210
test eax, eax
jg case.default.0x18000d676
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
mov edx, StrCmpNICW
xor ecx, ecx
call fcn.18002f660
jmp case.default.0x18000d676
mov eax, dword [rbp + 8]
mov dword [rsp + 0x50], eax
lea r8, [rsp + 0x50]
mov edx, 0x1f
mov rcx, r15
call fcn.180042970
mov rcx, qword [rbp]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
mov ecx, dword [rcx + 0x10]
mov dword [rax + 0x10], ecx
inc ebx
sub rdi, 1
jne 0x18000d660
jmp 0x18000da97
mov rcx, qword [rbp - 0x68]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ebx, r12d
nop
movsxd rax, ebx
shl rax, 5
lea rdi, [rbp - 0x20]
add rdi, rax
lea r8, [0x180082450]
add eax, 0x74b6b
mov edx, 0xd1
mov rcx, rdi
call fcn.180017e70
test eax, eax
je 0x18000db9f
mov r8, rdi
mov edx, 0x25
xor ecx, ecx
call fcn.18002b7f0
inc ebx
cmp ebx, 5
jl 0x18000d8d0
jmp 0x18000da9e
mov ecx, 0x100000
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp - 0x68], rax
movdqa xmm0, xmmword [0x18007b470]
movdqa xmm1, xmmword [0x18007b820]
movdqa xmm2, xmmword [0x18007b800]
movdqa xmm3, xmmword [0x18007b810]
mov dword [rbp + 0x130], 0x3e8
mov dword [rbp + 0x134], 0x12c
movaps xmmword [rbp + 0x80], xmm0
movaps xmmword [rbp + 0x90], xmm1
movaps xmmword [rbp + 0xa0], xmm2
movaps xmmword [rbp + 0xb0], xmm3
movsd xmm0, qword [rbp + 0x130]
movsd qword [rbp + 0xc0], xmm0
mov dword [rbp + 0xc8], 0xffffffff
mov r14d, r12d
mov rbx, r12
mov dword [rsp + 0x20], 0x73
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [0x180082450]
call fcn.180012040
mov edi, r12d
lea r15, [rbp + 0x80]
mov r13d, 0x3e8
mov esi, 0x9e
mov eax, esi
sub eax, 0x9c
je 0x18000da16
sub eax, 1
je 0x18000d9f9
cmp eax, 1
jne 0x18000da59
mov ecx, dword [r15]
mov dword [rsp + 0x74], ecx
movsxd rax, r14d
add rax, qword [rbp - 0x68]
mov qword [rbp + 0x550], rax
mov dword [rbp + 0x558], ecx
jmp 0x18000da59
mov eax, dword [rbp + r12*4 + 0x84]
shr eax, 0x1f
mov dword [rbp + 0x560], eax
movsxd rax, r13d
mov qword [rbp + 0x568], rax
jmp 0x18000da59
xor eax, eax
mov ecx, eax
mov edx, dword [rsp + 0x74]
test edx, edx
jle 0x18000da40
add r14d, edx
mov r8, qword [rbp - 0x68]
nop dword [rax]
lea eax, [rdi + rcx]
mov byte [rbx + r8], al
inc rbx
inc ecx
cmp ecx, edx
jl 0x18000da30
mov r8d, 0x80
lea rdx, [rbp + 0x550]
lea rcx, [0x180082450]
call fcn.180011ac0
dec esi
cmp esi, 0x9b
ja 0x18000d9c5
inc edi
add r13d, 0x3e8
movsxd r12, edi
lea r15, [rbp + 0x80]
lea r15, [r15 + r12*4]
cmp dword [r15], 0xffffffff
jne 0x18000d9c0
mov r14d, dword [rsp + 0x58]
lea r15, [0x180082748]
xor r12d, r12d
lea r13, [0x1800825d0]
add r14d, 0xb
mov dword [rsp + 0x58], r14d
cmp r14d, 0x89
jb 0x18000c010
mov ebx, dword [rsp + 0x68]
mov edi, dword [rsp + 0x70]
lea rsi, [0x180069d10]
lea r14, [0x180069d80]
lea r11, [0x180068f60]
lea r10, [0x180069ca0]
lea r9, [0x180069830]
lea r8, [0x1800697c0]
movabs rdx, 0x6500620069006c
lea rcx, [0x18006a660]
imul eax, edi, 0x7e
add ebx, eax
mov dword [rsp + 0x68], ebx
cmp ebx, dword [rsp + 0x78]
jbe 0x18000b77c
mov r14, qword [rbp - 0x78]
lea eax, [rdi - 0xf]
mov dword [rsp + 0x50], eax
cmp edi, eax
jbe case.0x18000db77.183
mov esi, 0x61
lea edx, [rsi - 0x30]
lea ebx, [rsi - 0x33]
movabs r8, 0x7ffffffffffffffe
lea r9d, [rsi - 0x13]
lea r10d, [rsi + 0x13]
lea r11d, [rsi + 4]
lea r15d, [rsi + 2]
mov r13, qword [rbp - 0x80]
nop word [rax + rax]
lea eax, [rdi - 0xb7]
cmp eax, 0xe
ja case.default.0x18000db77
lea rcx, [0x180000000]
mov ecx, dword [rcx + rax*4 + 0xe94c]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._autofill_autofill_confirmemail_form.html
call fcn.18005f710
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.permanent_generation_verification_disabled
call fcn.18005f710
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rsp + 0x68], r12d
lea rdi, [rbp + 0xd0]
mov qword [rsp + 0x60], rdi
nop word [rax + rax]
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r12w
mov r12d, SHRegGetIntW
nop word [rax + rax]
cmp r12d, 0x277
ja 0x18000dee9
je 0x18000dec5
mov eax, r12d
sub eax, 0x117
je 0x18000de90
sub eax, 0x58
je 0x18000de45
sub eax, 0x58
je 0x18000dde6
cmp eax, 0x58
jne 0x18000e4c5
lea r8d, [rax - 0x57]
lea rdx, [0x1800779b0]
lea rcx, [rbp + 0xf0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov rsi, qword [r14 + 0x10]
mov rbx, r14
cmp qword [r14 + 0x18], 8
jb 0x18000dc65
mov rbx, qword [r14]
cmp rsi, 8
jae 0x18000dc83
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x580], xmm0
mov edi, 7
mov r14, qword [rbp + 0x580]
jmp 0x18000dcc8
mov rdi, rsi
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
cmova rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp + 0x580]
call fcn.180026c00
mov r14, rax
mov qword [rbp + 0x580], rax
lea r8, [rsi*2 + 2]
mov rdx, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x598], rdi
mov qword [rbp + 0x590], rsi
lea r15, [rbp + 0x580]
cmp rdi, 8
cmovae r15, r14
cmp rsi, 8
jae 0x18000dcfc
movups xmm6, xmmword [r15]
mov qword [rbp + 0x568], 7
jmp 0x18000dd4c
mov rbx, rsi
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rbp + 0x550]
call fcn.180026c00
mov qword [rbp + 0x550], rax
lea r8, [rsi*2 + 2]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x568], rbx
movups xmm6, xmmword [rbp + 0x550]
mov qword [rbp + 0x560], rsi
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x18000dd93
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000dd8e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e758
call fcn.18005f9b8
movups xmmword [rbp - 0x60], xmm6
movups xmm0, xmmword [rbp + 0x560]
movups xmmword [rbp - 0x50], xmm0
cmp rdi, 8
jb 0x18000e4b6
lea rdx, [rdi*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x18000ddd9
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e79d
mov rcx, r14
call fcn.18005f9b8
jmp 0x18000e4b6
mov r8d, 5
lea rdx, [0x180077752]
lea rcx, [rbp + 0x104]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor ebx, ebx
mov word [rbp + 0x10e], bx
lea r8d, [rbx + 5]
lea rdx, [0x180077782]
lea rcx, [rbp + 0xf0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
lea r8d, [rbx + 2]
lea rdx, [0x180077808]
lea rcx, [rbp + reloc.SHLWAPI.dll_SHRegGetIntW]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov word [rbp + 0x11c], bx
jmp 0x18000e4bb
xor ebx, ebx
mov word [rbp + 0xf0], bx
lea r8d, [rbx + 5]
lea rdx, [0x180077846]
lea rcx, [rbp + 0xf0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
movsd xmm0, qword [0x1800778be]
movsd qword [rbp + 0xfa], xmm0
movzx eax, word [0x1800778c6]
mov word [rbp + 0x102], ax
mov word [rbp + 0x104], bx
jmp 0x18000e4bb
movabs rax, 0x49005600450052
mov qword [rbp - 0x40], rax
xor ebx, ebx
mov word [rbp - 0x38], bx
lea r8d, [rbx + 5]
lea rdx, [0x180077994]
lea rcx, [rbp - 0x40]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov dword [rbp - 0x2e], 0x44
jmp 0x18000e4bb
mov rdx, qword [rdi]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x18000ded0
lea rcx, [rbp - 0x60]
call fcn.180026d00
jmp 0x18000e4bb
mov eax, r12d
sub eax, 0x2cf
je 0x18000e3a1
sub eax, 0x58
je 0x18000e373
sub eax, 0x58
je 0x18000e364
cmp eax, 0x58
jne 0x18000e4c5
test r13, r13
jne 0x18000e4c5
invalid
add byte [rax], al
mov ebx, 0x5d
cmp ebx, 0x278
ja 0x18000e191
je 0x18000e16c
cmp ebx, 0x152
ja 0x18000e0ce
je 0x18000e0bf
mov eax, ebx
sub eax, 0x5d
je 0x18000e075
sub eax, 0x31
je 0x18000e022
sub eax, 0x31
je 0x18000dfe7
sub eax, 0x31
je 0x18000df92
cmp eax, 0x31
jne 0x18000e350
mov dword [rbp + 0x57c], 0x6e
mov dword [rbp + 0x80], 0x57005f
mov dword [rbp + 0x84], 0x6e0069
jmp 0x18000e350
lea rax, [rbp + 0x550]
sub rax, 2
nop dword [rax]
lea rax, [rax + 2]
cmp word [rax], 0
jne 0x18000dfa0
movsd xmm0, qword [0x180077938]
movsd qword [rax], xmm0
movzx ecx, word [0x180077940]
mov word [rax + 8], cx
lea rcx, [rbp + 0x550]
sub rcx, 2
nop dword [rax]
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x18000dfd0
mov eax, dword [0x180075678]
mov dword [rcx], eax
jmp 0x18000e350
mov r8d, 2
lea rdx, [0x180077944]
lea rcx, [rbp + 0x550]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov eax, dword [0x18007794c]
mov dword [rbp + 0x56a], eax
mov dword [rbp + 0x56e], esi
mov dword [rbp + 0x570], 0x73
jmp 0x18000e30a
mov eax, dword [0x18007791c]
mov dword [rbp + 0x55c], eax
movzx eax, word [0x180077920]
mov word [rbp + 0x560], ax
mov r8d, 1
lea rdx, [0x180075674]
lea rcx, [rbp + 0x550]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov eax, dword [0x180077924]
mov dword [rbp + 0x562], eax
movzx eax, word [0x180077928]
mov word [rbp + 0x566], ax
jmp 0x18000e30a
movabs rax, 0x4900780077
mov qword [rbp + 0x550], rax
mov r8d, 2
lea rdx, [0x18007792c]
lea rcx, [rbp + 0x550]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 1
lea rdx, [0x180077934]
lea rcx, [rbp + 0x550]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp 0x18000e30a
mov dword [rbp + 0x88], 0x74004e
jmp 0x18000e350
mov eax, ebx
sub eax, 0x183
je 0x18000e15b
sub eax, 0x31
je 0x18000e138
sub eax, 0x31
je 0x18000e12b
sub eax, 0x31
je 0x18000e11e
cmp eax, 0x31
jne 0x18000e350
mov word [rbp + 0x9a], r11w
mov dword [rbp + 0x9c], 0x740078
mov dword [rbp + 0xa0], 0x610050
mov dword [rbp + 0xa4], 0x6b0063
jmp 0x18000e350
mov word [rbp + 0x98], r9w
jmp 0x18000e350
mov word [rbp + 0x96], r10w
jmp 0x18000e350
mov eax, 0x70
mov word [rbp + 0x8e], ax
mov dword [rbp + 0x90], 0x470063
mov word [rbp + 0x94], r11w
jmp 0x18000e350
mov eax, 0x4c
mov word [rbp + 0x8c], ax
jmp 0x18000e350
mov dword [rbp + 0xa8], 0x740065
mov dword [rbp + 0xac], 0x3a0049
mov eax, 0x5c
mov word [rbp + 0xb0], ax
jmp 0x18000e350
cmp ebx, 0x39e
ja 0x18000e266
je 0x18000e24d
mov eax, ebx
sub eax, 0x2a9
je 0x18000e234
sub eax, 0x31
je 0x18000e217
sub eax, 0x31
je 0x18000e1fe
sub eax, 0x31
je 0x18000e1de
cmp eax, 0x31
jne 0x18000e350
mov dword [rbp + 0x59a], 0x66002d
mov word [rbp + 0x59e], si
jmp 0x18000e350
mov word [rbp + 0x590], dx
mov dword [rbp + 0x592], 0x620037
mov dword [rbp + 0x596], 0x300030
jmp 0x18000e350
mov dword [rbp + 0x588], 0x3a0033
mov dword [rbp + 0x58c], 0x32005c
jmp 0x18000e350
mov word [rbp + 0x580], dx
mov dword [rbp + 0x582], 0x380032
mov word [rbp + 0x586], si
jmp 0x18000e350
mov dword [rbp + 0xb2], 0x400044
mov dword [rbp + 0xb6], 0x34
jmp 0x18000e350
mov dword [rbp + 0x5a0], 0x2d0031
mov dword [rbp + 0x5a4], 0x350036
jmp 0x18000e350
mov eax, ebx
sub eax, 0x3cf
je 0x18000e33c
sub eax, 0x31
je 0x18000e31d
sub eax, 0x31
je 0x18000e2d9
cmp eax, 0x31
jne 0x18000e350
mov byte [rsp + 0x58], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb case.0x18000db77.183
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e75f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000e75f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor eax, eax
mov word [rbp + 0x5b8], ax
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x580]
lea rcx, [rbp + 0x550]
call qword [sym.imp.SHLWAPI.dll_PathCommonPrefixW]
lea rcx, [rbp + 0x80]
call qword [sym.imp.SHLWAPI.dll_PathGetDriveNumberW]
mov edx, 0x31
lea r9d, [rdx + 0x1d]
lea r10d, [rdx + 0x43]
lea r11d, [rdx + 0x34]
jmp 0x18000e350
mov eax, 0x35
mov word [rbp + 0x5b0], ax
mov dword [rbp + 0x5b2], 0x2d0033
mov word [rbp + 0x5b6], dx
jmp 0x18000e350
mov dword [rbp + 0x5a8], 0x640033
mov dword [rbp + 0x5ac], 0x630032
add ebx, 0x31
cmp ebx, 0x493
jb 0x18000df20
jmp 0x18000e4bb
lea rcx, [rbp - 0x40]
call qword [sym.imp.SHLWAPI.dll_PathIsFileSpecW]
jmp 0x18000e4bb
lea rcx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rcx, qword [rbp - 0x60]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov r13, rax
lea rcx, [rbp + 0xf0]
call qword [sym.imp.SHLWAPI.dll_PathIsUNCServerShareW]
jmp 0x18000e4bb
mov rdi, qword [rbp - 0x50]
mov rcx, qword [rbp - 0x48]
cmp rdi, rcx
jae 0x18000e3cf
lea rax, [rdi + 1]
mov qword [rbp - 0x50], rax
lea rax, [rbp - 0x60]
cmp rcx, 8
cmovae rax, qword [rbp - 0x60]
mov dword [rax + rdi*2], 0x2e
jmp 0x18000e4a0
mov rax, r8
sub rax, rdi
cmp rax, 1
jb 0x18000e7ab
lea r15, [rdi + 1]
mov rsi, qword [rbp - 0x48]
mov rbx, r15
or rbx, 7
cmp rbx, r8
jbe 0x18000e3f8
mov rbx, r8
jmp 0x18000e419
mov rcx, rsi
shr rcx, 1
mov rax, r8
sub rax, rcx
cmp rsi, rax
jbe 0x18000e40e
mov rbx, r8
jmp 0x18000e419
lea rax, [rsi + rcx]
cmp rbx, rax
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x60]
call fcn.180026c00
mov r14, rax
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], rbx
add rdi, rdi
mov r8, rdi
mov rcx, rax
cmp rsi, 8
jb 0x18000e48b
mov rbx, qword [rbp - 0x60]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov dword [r14 + rdi], 0x2e
lea rdx, [rsi*2 + 2]
cmp rdx, 0x1000
jb 0x18000e481
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18000e79d
mov rbx, rcx
mov rcx, rbx
call fcn.18005f9b8
jmp 0x18000e49c
lea rdx, [rbp - 0x60]
call sub.VCRUNTIME140.dll_memcpy
mov dword [r14 + rdi], 0x2e
mov qword [rbp - 0x60], r14
mov r8d, 3
lea rdx, [0x180074e28]
lea rcx, [rbp - 0x60]
call fcn.180026d00
mov rdi, qword [rsp + 0x60]
movabs r8, 0x7ffffffffffffffe
add r12d, 0x58
cmp r12d, 0x42f
mov r14, qword [rbp - 0x78]
mov edx, 0x31
lea esi, [rdx + 0x30]
lea r9d, [rdx + 0x1d]
lea r10d, [rdx + 0x43]
lea r11d, [rdx + 0x34]
jb 0x18000dc00
mov rcx, qword [rbp - 0x48]
cmp rcx, 8
jb 0x18000e52e
lea rdx, [rcx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e529
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e7a4
call fcn.18005f9b8
mov eax, dword [rsp + 0x68]
inc eax
mov dword [rsp + 0x68], eax
add rdi, 8
mov qword [rsp + 0x60], rdi
cmp eax, 3
mov r14, qword [rbp - 0x78]
mov edx, 0x31
lea esi, [rdx + 0x30]
lea r12d, [rdx - 0x31]
movabs r8, 0x7ffffffffffffffe
lea r9d, [rdx + 0x1d]
lea r10d, [rdx + 0x43]
lea r11d, [rdx + 0x34]
jb 0x18000dbe0
mov edi, dword [rsp + 0x70]
lea ebx, [rdx - 3]
lea r15d, [rdx + 0x32]
jmp case.default.0x18000db77
movabs rax, 0x6c00730073
mov qword [rbp + 0x628], rax
mov eax, dword [0x180074e30]
mov dword [rbp + 0x62e], eax
movzx eax, word [0x180074e34]
mov word [rbp + 0x632], ax
mov r8d, 4
lea rdx, [0x1800779d0]
lea rcx, [rbp + 0x632]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov edx, 0x31
movabs r8, 0x7ffffffffffffffe
lea r9d, [rdx + 0x1d]
lea r10d, [rdx + 0x43]
lea r11d, [rdx + 0x34]
jmp case.default.0x18000db77
mov byte [rbp + 0x5d2], 0
jmp case.default.0x18000db77
mov eax, dword [0x1800779df]
mov dword [rbp + 0x5c9], eax
movzx eax, byte [0x1800779e3]
mov byte [rbp + 0x5cd], al
mov byte [rbp + 0x5ce], 0
jmp case.default.0x18000db77
mov byte [rbp + 0x5d1], 0x6b
jmp case.default.0x18000db77
mov eax, dword [0x1800779f5]
mov dword [rbp + 0x5c4], eax
movzx eax, byte [0x1800779f9]
mov byte [rbp + 0x5c8], al
jmp case.default.0x18000db77
mov byte [rsp + 0x58], 1
jmp case.default.0x18000db77
mov dword [rsp + 0x78], 0xf
lea rax, [rbp + 0x610]
mov qword [rbp + 0xd8], rax
mov qword [rbp - 0x80], r12
jmp case.default.0x18000db77
mov r8d, 3
lea rdx, [0x180077a2a]
lea rcx, [rbp + 0x5c0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x18000e5c5
lea rax, [rbp + 0x628]
mov qword [rbp + 0xe0], rax
jmp case.default.0x18000db77
movups xmm0, xmmword [rbp - 0x60]
movups xmmword [rbp + 0xd0], xmm0
movsd xmm1, qword [rbp - 0x50]
movsd qword [rbp + 0xe0], xmm1
mov dword [rsp + 0x74], 0x10
lea rax, [rbp + 0x5f8]
mov qword [rbp + 0xd0], rax
jmp case.default.0x18000db77
mov dword [rbp - 0x70], 0x104
mov r8d, 8
lea rdx, [rbp + 0x5c0]
lea rcx, [rbp + 0x5d8]
call qword [sym.imp.SHLWAPI.dll_StrCmpNA]
lea rax, [rbp - 0x70]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x640]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8, qword [rbp - 0x80]
mov edx, dword [rsp + 0x78]
mov ecx, dword [rsp + 0x74]
call qword [sym.imp.SHLWAPI.dll_AssocQueryStringByKeyA]
jmp 0x18000e5c5
mov word [rbp + 0x620], r12w
mov dword [rbp + 0x5c0], 0x4d4f4356
mov byte [rbp + 0x5c4], 0
jmp case.default.0x18000db77
mov dword [rbp + 0x61c], 0x320033
dec edi
mov dword [rsp + 0x70], edi
cmp edi, dword [rsp + 0x50]
jbe case.0x18000db77.183
mov r14, qword [rbp - 0x78]
xor r12d, r12d
jmp 0x18000db50
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.18005f9b8
mov eax, dword [rsp + 0x58]
mov rcx, qword [rbp + 0x750]
xor rcx, rsp
call fcn.18005fed0
lea r11, [rsp + 0x870]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.18001b450
int3