Function at 0x1800153c0
Capabilities:
Log keystrokes via input method manager

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2f8]
sub rsp, 0x3f8
mov eax, dword [rbp + 0x358]
mov r13, rcx
mov r12d, dword [rbp + 0x358]
xor ebx, ebx
mov edi, dword [rsp + 0x38]
mov r15d, 0xd6
mov qword [rsp + 0x40], rax
mov qword [rbp - 0x28], r12
mov r10d, 0x46
lea eax, [r15 - 0x67]
lea r11, [0x180000000]
lea esi, [r10 + 0x1f]
lea edx, [rsi - 6]
lea r14d, [r10 + 0x28]
cmp eax, 0x76
ja case.0x18001544d.115
movzx eax, byte [r11 + rax + 0x18480]
mov ecx, dword [r11 + rax*4 + 0x1844c]
add rcx, r11
jmp rcx
mov ecx, 0x4e
mov eax, ecx
sub eax, 0x4e
je 0x180015472
sub eax, 1
je 0x180015541
cmp eax, 1
je 0x180016a06
jmp 0x180015546
movsx eax, byte [rbx]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.0x18001813e.19
cdqe
movzx eax, byte [r11 + rax + 0x18500]
mov ecx, dword [r11 + rax*4 + 0x184f8]
add rcx, r11
jmp rcx
cmp dword [r13 + 4], ebx
jne 0x180015539
mov r9, qword [r13 + 8]
mov ecx, 0xcd
nop dword [rax]
mov eax, ecx
sub eax, 0xcc
je 0x180015500
sub eax, 1
je 0x1800154d5
sub eax, 3
je 0x1800154e9
cmp eax, 1
jne 0x1800154dd
mov rax, qword [r9 + 8]
sub rax, qword [r9]
mov qword [rbp - 0x20], rax
jmp 0x1800154dd
mov rax, qword [r9 + 8]
mov qword [rbp + 0x18], rax
dec ecx
cmp ecx, 0xc9
ja 0x1800154b0
jmp 0x180015500
mov rax, qword [rbp - 0x20]
sub rax, qword [0]
mov qword [rbp - 0x20], rax
shr rax, 0x3f
mov byte [rbp + 0x18], al
cmp qword [rbp + 0x18], 0xfffffffffffffffb
jae 0x180015531
mov r8d, 0x42
mov byte [rsp + 0x30], 0x75
lea rdx, [rsp + 0x30]
mov rcx, r9
call fcn.18001e4a0
cmp eax, 1
jne 0x180015aa6
lea r11, [0x180000000]
jmp 0x180015539
mov dword [r13 + 4], 1
mov dword [r13], 4
mov ecx, 0x4f
inc ecx
cmp ecx, 0x51
jb 0x180015454
mov r15d, 0x6e
jmp 0x180015802
mov ecx, 0xc
mov eax, ecx
sub eax, 0xa
je case.0x1800167a1.83
sub eax, 1
je 0x180015662
cmp eax, 1
jne 0x180015671
movsx edx, byte [rbx]
lea eax, [rdx - 0x30]
cmp eax, 0x36
ja case.0x18001813e.19
cdqe
movzx eax, byte [r11 + rax + 0x18540]
mov ecx, dword [r11 + rax*4 + 0x18538]
add rcx, r11
jmp rcx
cmp dword [r13 + 4], ebx
jne 0x180015653
mov r9, qword [r13 + 8]
mov ecx, 0xcd
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xcc
je 0x180015610
sub eax, 1
je 0x1800155e5
sub eax, 3
je 0x1800155f9
cmp eax, 1
jne 0x1800155ed
mov rax, qword [r9 + 8]
sub rax, qword [r9]
mov qword [rbp + 0x10], rax
jmp 0x1800155ed
mov rax, qword [r9 + 8]
mov qword [rbp + 8], rax
dec ecx
cmp ecx, 0xc9
ja 0x1800155c0
jmp 0x180015610
mov rax, qword [rbp + 0x10]
sub rax, qword [0]
mov qword [rbp + 0x10], rax
shr rax, 0x3f
mov byte [rbp + 8], al
cmp qword [rbp + 8], 0xfffffffffffffffd
jae 0x18001564b
mov byte [rsp + 0x30], dl
mov r8d, 0x42
lea rdx, [rsp + 0x30]
mov rcx, r9
call fcn.18001e4a0
cmp eax, 1
jne 0x180015aa6
lea r11, [0x180000000]
mov dword [r13], 6
lea ecx, [rax + 0xb]
jmp 0x180015671
mov dword [r13 + 4], 1
mov dword [r13], 6
mov ecx, 0xc
jmp 0x180015671
mov edi, 1
mov r15d, 0x83
mov dword [rsp + 0x38], edi
dec ecx
cmp ecx, 9
ja 0x180015561
jmp case.0x18001544d.115
mov ecx, 0x56
mov eax, ecx
sub eax, 0x56
je 0x1800156b0
cmp eax, 1
jne 0x1800156b9
mov dword [r13], ebx
mov rax, qword [0x30]
test rax, rax
je 0x180016a06
call rax
mov eax, 1
jmp 0x1800156f3
cmp byte [rbx], 0x65
jne case.0x18001813e.19
inc ecx
cmp ecx, 0x58
jb 0x180015686
mov eax, 0x8b
cmp eax, 0x8b
je 0x18001604b
cmp eax, 0x6956
je 0x180016041
cmp eax, 0xd221
je 0x180016036
cmp eax, 0x13aec
jne 0x180016054
mov eax, edi
add rsp, 0x3f8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
movsd xmm1, qword [r13 + 0x18]
xorps xmm0, xmm0
mov eax, dword [r13 + 0x30]
cvtsi2sd xmm0, rax
divsd xmm1, xmm0
movsd qword [r13 + 0x18], xmm1
jmp case.0x18001544d.115
mov eax, dword [r13]
cmp eax, 0x1b
ja case.default.0x180015740
mov ecx, dword [r11 + rax*4 + 0x18578]
add rcx, r11
jmp rcx
mov r15d, 0x6e
mov ecx, r15d
nop dword [rax + rax]
mov eax, ecx
sub eax, r15d
je 0x18001579f
sub eax, 1
je 0x1800157fe
cmp eax, 1
jne 0x1800157a6
cmp dword [rsp + 0x54], ebx
mov ecx, ebx
movzx eax, byte [rbp + 0x350]
cmove ecx, eax
mov byte [rbp + 0x350], cl
test cl, cl
je 0x180015aec
mov esi, 0x7f
mov eax, esi
sub eax, 0x7d
je 0x1800157d0
sub eax, 1
je 0x1800157b8
cmp eax, 1
jne 0x1800157df
mov qword [rbp], rbx
jmp 0x1800157df
mov byte [rbp + 0x350], 1
inc ecx
cmp ecx, 0x71
jb 0x180015750
mov r15d, 0x7c
jmp case.0x18001544d.115
lea r8, [rbp]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.RPCRT4.dll_MesDecodeIncrementalHandleCreate]
mov rcx, qword [rbp + 0x78]
mov dword [rsp + 0x54], eax
jmp 0x1800157d4
mov rcx, qword [rbp]
test rcx, rcx
je 0x1800157df
call qword [sym.imp.RPCRT4.dll_MesHandleFree]
dec esi
cmp esi, 0x7c
ja 0x180015788
mov edx, 0x5f
lea r11, [0x180000000]
lea r10d, [rdx - 0x19]
lea esi, [rdx + 6]
jmp 0x180015aec
mov qword [rbp + 0x78], rbx
mov eax, 0xa5
cmp eax, 0xa5
je 0x18001581e
cmp eax, 0x3435
je 0x180016a06
jmp 0x180015942
movsx eax, byte [rbx]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.0x18001813e.19
cdqe
movzx eax, byte [r11 + rax + 0x185f0]
mov ecx, dword [r11 + rax*4 + 0x185e8]
add rcx, r11
jmp rcx
mov r14d, 0x1e
nop dword [rax + rax]
cmp r14d, 0x5e56
ja case.0x18001813e.19
cmp r14d, 0x288c
ja 0x180015913
je 0x180015900
cmp r14d, 0x1e
je 0x1800158e1
cmp r14d, 0xd98
je 0x1800158c0
cmp r14d, 0x1b12
jne 0x180015ada
mov r8d, 3
lea rdx, [0x180065e8c]
lea rcx, [rbp + 0x28]
call fcn.18003a150
movzx eax, word [0x180065e90]
add r14d, 0xd7a
mov word [rbp + 0x2a], ax
movzx eax, byte [0x180065e92]
mov byte [rbp + 0x2c], al
jmp 0x180015850
movzx eax, word [0x180065e80]
add r14d, 0xd7a
mov word [rbp + 0x24], r15w
mov word [rbp + 0x25], ax
mov word [rbp + 0x27], r15w
jmp 0x180015850
mov eax, dword [str.Stri]
add r14d, 0xd7a
mov dword [rbp + 0x20], eax
movzx eax, byte [0x180065e88]
mov byte [rbp + 0x24], al
jmp 0x180015850
mov byte [rbp + 0x348], 1
add r14d, 0xd7a
jmp 0x180015850
cmp r14d, 0x3606
je 0x180015a11
cmp r14d, 0x4380
je 0x18001595d
cmp r14d, 0x50fa
jne 0x180015ada
mov eax, 0xa5
lea r11, [0x180000000]
add eax, 0x3390
cmp eax, 0x6720
jbe 0x180015807
mov r15d, 0x7c
jmp case.0x18001544d.115
lea r9, [rbp + 0x80]
mov dword [r13], 5
lea r8, [rbp + 0x30]
mov edx, r12d
lea rcx, [rbp + 0x20]
call qword [sym.imp.RPCRT4.dll_MesEncodeFixedBufferHandleCreate]
test eax, eax
je 0x180015993
mov byte [rbp + 0x348], bl
add r14d, 0xd7a
jmp 0x180015850
cmp byte [rbp + 0x348], bl
je 0x180015ada
mov rcx, qword [rbp + 0x80]
mov esi, 0xe3
nop dword [rax + rax]
cmp esi, 0xe3
je 0x1800159cd
cmp esi, 0x95db
jne 0x1800159f7
test rcx, rcx
je 0x1800159f7
call qword [sym.imp.RPCRT4.dll_MesHandleFree]
jmp 0x1800159f0
xor r8d, r8d
mov qword [rbp + 0x70], rbx
lea rax, [rbp + 0x30]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x70]
mov dword [rsp + 0x20], r12d
lea edx, [r8 + 1]
call qword [sym.imp.RPCRT4.dll_MesBufferHandleReset]
mov rcx, qword [rbp + 0x80]
add esi, 0x94f8
cmp esi, 0x129f0
jbe 0x1800159b0
add r14d, 0xd7a
jmp 0x180015850
cmp dword [r13 + 4], ebx
jne 0x180015ab8
xor ecx, ecx
call qword [sym.imp.RPCRT4.dll_I_RpcMapWin32Status]
mov r9, qword [r13 + 8]
mov ecx, 0xcd
nop dword [rax]
mov eax, ecx
sub eax, 0xcc
je 0x180015a80
sub eax, 1
je 0x180015a55
sub eax, 3
je 0x180015a69
cmp eax, 1
jne 0x180015a5d
mov rax, qword [r9 + 8]
sub rax, qword [r9]
mov qword [rbp - 8], rax
jmp 0x180015a5d
mov rax, qword [r9 + 8]
mov qword [rbp - 0x58], rax
dec ecx
cmp ecx, 0xc9
ja 0x180015a30
jmp 0x180015a80
mov rax, qword [rbp - 8]
sub rax, qword [0]
mov qword [rbp - 8], rax
shr rax, 0x3f
mov byte [rbp - 0x58], al
cmp qword [rbp - 0x58], 0xfffffffffffffffc
jae 0x180015ab0
movzx eax, byte [rbx]
lea rdx, [rsp + 0x30]
mov r8d, 0x42
mov byte [rsp + 0x30], al
mov rcx, r9
call fcn.18001e4a0
cmp eax, 1
je 0x180015ab8
mov eax, 6
jmp 0x1800156f3
mov dword [r13 + 4], 1
lea rax, [rbp + 0x20]
mov r12, 0xffffffffffffffff
inc r12
cmp byte [rax + r12], bl
jne 0x180015ac3
mov qword [rbp - 0x28], r12
mov dword [rbp + 0x30], ebx
mov qword [rbp + 0x80], rbx
add r14d, 0xd7a
jmp 0x180015850
mov r15d, 0x6e
mov r14d, edx
nop
cmp r14d, 0x13b
ja 0x180015ba2
je 0x180015b87
mov eax, r14d
sub eax, 0x5f
je 0x180015b67
sub eax, 0x2c
je 0x180015b58
sub eax, 0x2c
je 0x180015b4b
sub eax, 0x2c
je 0x180015b3e
cmp eax, 0x2c
jne 0x180015f52
mov word [rsp + 0x76], r15w
mov dword [rsp + 0x78], 0x4f0067
mov dword [rsp + 0x7c], 0x6a0062
jmp 0x180015f52
mov dword [rsp + 0x72], 0x690070
jmp 0x180015f52
mov dword [rsp + 0x6e], 0x700061
jmp 0x180015f52
mov eax, 0x4d
mov word [rsp + 0x6c], ax
jmp 0x180015f52
mov dword [rsp + 0x60], 0x79004d
mov word [rsp + 0x64], r10w
mov dword [rsp + 0x66], 0x6c0069
mov word [rsp + 0x6a], si
jmp 0x180015f52
mov word [rbp - 0x80], si
mov dword [rbp - 0x7e], 0x740063
mov word [rbp - 0x7a], bx
mov byte [rbp + 0x358], 1
jmp 0x180015f52
mov eax, r14d
sub eax, 0x167
je 0x180015c71
sub eax, 0x2c
je case.0x180015c9a.9
sub eax, 0x2c
je 0x180015c68
sub eax, 0x2c
je 0x180015bd5
cmp eax, 0x2c
je 0x180016a06
jmp 0x180015f52
xor r9d, r9d
lea rax, [rsp + 0x60]
xor edx, edx
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x100
lea r8d, [r9 + 4]
lea rcx, [rdx - 1]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rsi, rax
test rax, rax
jne 0x180015c0d
mov byte [rbp + 0x358], bl
jmp 0x180015f52
cmp byte [rbp + 0x358], bl
je 0x180015f52
lea r9, [rbp + 0xa8]
mov rcx, rsi
lea r8, [rbp + 0xa0]
lea rdx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
jne 0x180015c4c
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [rbp + 0x358], bl
jmp 0x180015f52
lea rdx, [rbp + 0x68]
lea rcx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_LocalFileTimeToFileTime]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x180015f52
mov qword [rbp + 0x68], rbx
jmp 0x180015f52
movsx eax, byte [rbx]
add eax, 0xfffffff7
mov qword [rbp - 0x60], rbx
cmp eax, 0x74
ja case.0x18001813e.19
cdqe
movzx eax, byte [r11 + rax + 0x18664]
mov ecx, dword [r11 + rax*4 + 0x18628]
add rcx, r11
jmp rcx
mov qword [r13], 1
jmp case.0x180015c9a.9
mov esi, ebx
nop dword [rax + rax]
cmp esi, 5
ja case.default.0x180015cc6
mov eax, esi
mov ecx, dword [r11 + rax*4 + 0x186dc]
add rcx, r11
jmp rcx
mov rax, qword [rbx]
test rax, rax
je 0x180015cd2
call rax
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.USER32.dll_GetDC]
mov qword [rbp - 0x70], rax
jmp case.default.0x180015cc6
mov rcx, rbx
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov qword [rbp - 0x30], rax
jmp case.default.0x180015cc6
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x180015d0b
mov rdx, rcx
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.USER32.dll_ReleaseDC]
mov qword [rbp - 0x70], rbx
mov rax, qword [sym.imp.WINMM.dll_midiOutOpen]
mov qword [rbp + 0x98], rax
mov qword [rbp + 0x60], rbx
jmp case.default.0x180015cc6
mov dword [r13], 0x19
jmp case.default.0x180015cc6
mov rdx, qword [rbp + 0x60]
lea rax, [rbp + 0xb8]
mov rcx, qword [rbp - 0x70]
xorps xmm0, xmm0
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
movups xmmword [rbp + 0xb8], xmm0
call qword [sym.imp.GDI32.dll_EnumEnhMetaFile]
inc esi
lea eax, [rsi + 0x84]
cmp eax, 0x8a
jae case.0x180015c9a.22
lea r11, [0x180000000]
jmp 0x180015cb0
mov r8, qword [rbp + 0x98]
lea rdx, str.midiOutOpen__p
lea rcx, [rbp + 0xf0]
call fcn.180001120
jmp case.0x180015c9a.9
mov rax, qword [8]
test rax, rax
je 0x180015d9c
call rax
mov dword [r13], 0x1a
jmp case.0x180015c9a.9
mov rax, qword [0x10]
test rax, rax
je case.0x180015c9a.9
call rax
jmp case.0x180015c9a.9
mov rax, qword [0x18]
jmp 0x180015d95
mov dword [r13], 7
jmp case.0x180015c9a.9
mov dword [r13], 0xa
jmp case.0x180015c9a.9
mov dword [r13], 0xe
jmp case.0x180015c9a.9
mov rax, qword [0x48]
test rax, rax
je case.0x180015c9a.9
call rax
jmp case.0x180015c9a.9
mov rax, qword [0x50]
test rax, rax
je 0x180015e19
call rax
mov dword [r13], 0x1b
jmp case.0x180015c9a.9
mov ecx, 0xa3
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xa3
je 0x180015e6b
cmp eax, 0x46
jne 0x180015e73
lea rdx, [rsp + 0x48]
mov qword [rsp + 0x48], 5
lea ecx, [rax + 0xd]
call fcn.18001b9c0
mov qword [r13 + 8], rax
test rax, rax
je 0x180015aa6
mov byte [rsp + 0x30], 0x30
jmp 0x180015f22
mov qword [r13], 0x11
add ecx, 0x46
cmp ecx, 0x12f
jb 0x180015e30
mov esi, 0x71
mov eax, esi
sub eax, 0x70
je 0x180015ee7
cmp eax, 1
jne 0x180015eba
lea rdx, [rsp + 0x48]
mov qword [r13], 0x18
lea ecx, [rax + 0x52]
mov qword [rsp + 0x48], 5
call fcn.18001b9c0
mov qword [r13 + 8], rax
test rax, rax
je 0x180015aa6
dec esi
cmp esi, 0x6f
ja 0x180015e83
mov ecx, 0x66
cmp ecx, 0x64
jbe case.0x18001813e.19
mov eax, ecx
sub eax, 0x65
je 0x180015ef4
cmp eax, 1
jne 0x180015ee3
mov qword [r13], 0x17
dec ecx
jmp 0x180015ec6
movzx eax, byte [rbx]
mov rcx, qword [r13 + 8]
mov byte [rsp + 0x30], al
jmp 0x180015f25
lea rdx, [rsp + 0x48]
mov qword [r13 + 8], rbx
mov ecx, 0x53
mov qword [rsp + 0x48], 5
call fcn.18001b9c0
mov qword [r13 + 8], rax
test rax, rax
je 0x180015aa6
mov byte [rsp + 0x30], 0x2d
mov rcx, rax
mov r8d, 0x42
lea rdx, [rsp + 0x30]
call fcn.18001e4a0
cmp eax, 1
jne 0x180015aa6
mov r14d, 0x193
mov qword [rbp + 0xa0], rbx
mov qword [rbp + 0xa8], rbx
mov r10d, 0x46
lea r11, [0x180000000]
add r14d, 0x2c
lea esi, [r10 + 0x1f]
cmp r14d, 0x243
jb 0x180015af0
lea r15d, [r10 + 0x21]
jmp case.0x18001544d.115
mov esi, 0xd5
mov eax, esi
sub eax, 0xd5
je 0x180016008
sub eax, 1
je 0x180015ff2
sub eax, 1
je 0x180015fa0
cmp eax, 1
je 0x180016a06
jmp 0x18001601d
mov r14, qword [rbp + 0xb0]
xor r8d, r8d
mov r9d, dword [rsp + 0x58]
mov rcx, r14
mov edx, dword [rsp + 0x50]
call qword [sym.imp.IMM32.dll_ImmGetCompositionStringA]
test eax, eax
jne 0x180015fc6
mov byte [rsp + 0x3c], bl
jmp 0x18001601d
cmp byte [rsp + 0x3c], bl
je 0x18001601d
xor r9d, r9d
mov dword [rsp + 0x28], ebx
xor r8d, r8d
mov dword [rsp + 0x50], 0x12
mov rcx, r14
mov qword [rsp + 0x20], rbx
lea edx, [r9 + 0x12]
call qword [sym.imp.IMM32.dll_ImmSetCompositionStringA]
jmp 0x18001601d
mov dword [rsp + 0x50], 0x80
mov dword [rsp + 0x58], ebx
mov dword [r13], 9
jmp 0x18001601d
cmp byte [rbx], 0x75
mov byte [rsp + 0x3c], 1
mov qword [rbp + 0xb0], rbx
jne case.0x18001813e.19
inc esi
cmp esi, 0xd9
jb 0x180015f82
mov r15d, 0x91
jmp case.0x18001544d.115
mov edi, 1
mov dword [rsp + 0x38], edi
jmp 0x180016054
mov dword [r13], 0xb
jmp 0x180016054
cmp byte [rbx], 0x61
jne case.0x18001813e.19
add eax, 0x68cb
cmp eax, 0x1a32c
jbe 0x1800156c5
mov r15d, 0x98
jmp case.0x18001544d.115
mov r15d, 0x75
jmp case.0x18001544d.115
mov ecx, 0x55
nop
mov eax, ecx
sub eax, 0x55
je 0x180016095
cmp eax, 1
je case.0x1800167a1.83
jmp 0x18001616e
movsx edx, byte [rbx]
lea eax, [rdx - 0x30]
cmp eax, 0x36
ja case.0x18001813e.19
cdqe
movzx eax, byte [r11 + rax + 0x186fc]
mov ecx, dword [r11 + rax*4 + 0x186f4]
add rcx, r11
jmp rcx
cmp dword [r13 + 4], ebx
jne 0x180016158
mov r9, qword [r13 + 8]
mov ecx, 0xcd
nop
mov eax, ecx
sub eax, 0xcc
je 0x180016120
sub eax, 1
je 0x1800160f5
sub eax, 3
je 0x180016109
cmp eax, 1
jne 0x1800160fd
mov rax, qword [r9 + 8]
sub rax, qword [r9]
mov qword [rbp - 0x38], rax
jmp 0x1800160fd
mov rax, qword [r9 + 8]
mov qword [rbp - 0x40], rax
dec ecx
cmp ecx, 0xc9
ja 0x1800160d0
jmp 0x180016120
mov rax, qword [rbp - 0x38]
sub rax, qword [0]
mov qword [rbp - 0x38], rax
shr rax, 0x3f
mov byte [rbp - 0x40], al
cmp qword [rbp - 0x40], 0xfffffffffffffffe
jae 0x180016150
mov byte [rsp + 0x30], dl
mov r8d, 0x42
lea rdx, [rsp + 0x30]
mov rcx, r9
call fcn.18001e4a0
cmp eax, 1
jne 0x180015aa6
lea r11, [0x180000000]
jmp 0x180016158
mov dword [r13 + 4], 1
mov dword [r13], 1
mov edi, 1
mov ecx, 0x55
mov dword [rsp + 0x38], edi
inc ecx
cmp ecx, 0x57
jb 0x180016080
mov r15d, 0x8a
jmp case.0x18001544d.115
mov eax, 0xaf
nop dword [rax]
cmp eax, 0xaf
je 0x1800161bc
cmp eax, 0x42fe
je 0x1800161ae
cmp eax, 0x854d
je case.0x1800167a1.83
jmp 0x180016395
mov edi, 1
mov dword [rsp + 0x38], edi
jmp 0x180016395
movzx edx, byte [rbx]
movzx eax, dl
cmp dl, 0x22
je 0x180016324
mov ecx, dword [r13 + 4]
cmp al, 0x5c
je 0x180016279
test ecx, ecx
jne 0x180016390
mov r9, qword [r13 + 8]
mov ecx, 0xcd
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xcc
je 0x180016240
sub eax, 1
je 0x180016215
sub eax, 3
je 0x180016229
cmp eax, 1
jne 0x18001621d
mov rax, qword [r9 + 8]
sub rax, qword [r9]
mov qword [rbp - 0x48], rax
jmp 0x18001621d
mov rax, qword [r9 + 8]
mov qword [rbp - 0x50], rax
dec ecx
cmp ecx, 0xc9
ja 0x1800161f0
jmp 0x180016240
mov rax, qword [rbp - 0x48]
sub rax, qword [0]
mov qword [rbp - 0x48], rax
shr rax, 0x3f
mov byte [rbp - 0x50], al
cmp qword [rbp - 0x50], 0xfffffffffffffffe
jae 0x18001626c
mov byte [rsp + 0x30], dl
mov r8d, 0x42
lea rdx, [rsp + 0x30]
mov rcx, r9
call fcn.18001e4a0
cmp eax, 1
jne 0x180015aa6
jmp 0x180016390
mov dword [r13 + 4], 1
jmp 0x180016390
test ecx, ecx
jne 0x18001631a
mov r9, qword [r13 + 8]
mov ecx, 0xcd
nop word [rax + rax]
mov eax, ecx
sub eax, 0xcc
je 0x1800162e0
sub eax, 1
je 0x1800162b5
sub eax, 3
je 0x1800162c9
cmp eax, 1
jne 0x1800162bd
mov rax, qword [r9 + 8]
sub rax, qword [r9]
mov qword [rbp - 0x68], rax
jmp 0x1800162bd
mov rax, qword [r9 + 8]
mov qword [rbp + 0x58], rax
dec ecx
cmp ecx, 0xc9
ja 0x180016290
jmp 0x1800162e0
mov rax, qword [rbp - 0x68]
sub rax, qword [0]
mov qword [rbp - 0x68], rax
shr rax, 0x3f
mov byte [rbp + 0x58], al
cmp qword [rbp + 0x58], 0xfffffffffffffffd
jae 0x180016312
mov r8d, 0x42
mov byte [rsp + 0x30], 0x5c
lea rdx, [rsp + 0x30]
mov rcx, r9
call fcn.18001e4a0
cmp eax, 1
jne 0x180015aa6
mov dword [r13], 2
jmp 0x180016390
mov dword [r13 + 4], 1
mov dword [r13], 2
jmp 0x180016390
cmp qword [r13 + 8], rbx
je case.default.0x180015740
mov r12, qword [rbp - 0x18]
mov esi, 0xc4
mov eax, esi
sub eax, 0xc4
je 0x180016376
sub eax, 0x34
je 0x180016355
cmp eax, 0x34
jne 0x18001637d
lea r8, [r13 + 8]
call fcn.18000f3b0
jmp 0x18001637d
mov rax, qword [0x20]
test rax, rax
je 0x18001636b
mov rcx, qword [r13 + 8]
mov rcx, qword [rcx]
call rax
mov rcx, r12
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
jmp 0x18001637d
mov dword [r13], ebx
mov r12, rbx
add esi, 0x34
cmp esi, 0x160
jb 0x180016337
mov qword [rbp - 0x18], r12
mov r12, qword [rbp - 0x28]
mov eax, 0xaf
add eax, 0x424f
cmp eax, 0xc6ed
jbe 0x180016190
lea r11, [0x180000000]
mov r14d, 0x6e
mov ecx, 0x9a
mov eax, ecx
sub eax, 0x9a
je 0x1800163ce
cmp eax, 1
je 0x180016a06
jmp 0x18001653f
movsx edx, byte [rbx]
lea eax, [rdx - 0x22]
cmp eax, 0x53
ja case.0x18001813e.19
cdqe
movzx eax, byte [r11 + rax + 0x18740]
mov ecx, dword [r11 + rax*4 + 0x18734]
add rcx, r11
jmp rcx
cmp dword [r13 + 4], ebx
jne 0x18001653a
mov r9, qword [r13 + 8]
mov ecx, 0xcd
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xcc
je 0x180016460
sub eax, 1
je 0x180016435
sub eax, 3
je 0x180016449
cmp eax, 1
jne 0x18001643d
mov rax, qword [r9 + 8]
sub rax, qword [r9]
mov qword [rbp + 0x50], rax
jmp 0x18001643d
mov rax, qword [r9 + 8]
mov qword [rbp + 0x38], rax
dec ecx
cmp ecx, 0xc9
ja 0x180016410
jmp 0x180016460
mov rax, qword [rbp + 0x50]
sub rax, qword [0]
mov qword [rbp + 0x50], rax
shr rax, 0x3f
mov byte [rbp + 0x38], al
cmp qword [rbp + 0x38], 0xfffffffffffffffe
jae 0x18001648c
mov byte [rsp + 0x30], dl
mov r8d, 0x42
lea rdx, [rsp + 0x30]
mov rcx, r9
call fcn.18001e4a0
cmp eax, 1
jne 0x180015aa6
jmp 0x18001653a
mov dword [r13 + 4], 1
jmp 0x18001653a
cmp dword [r13 + 4], ebx
jne 0x180016532
mov r9, qword [r13 + 8]
mov ecx, 0xcd
nop dword [rax]
mov eax, ecx
sub eax, 0xcc
je 0x180016500
sub eax, 1
je 0x1800164d5
sub eax, 3
je 0x1800164e9
cmp eax, 1
jne 0x1800164dd
mov rax, qword [r9 + 8]
sub rax, qword [r9]
mov qword [rbp + 0x40], rax
jmp 0x1800164dd
mov rax, qword [r9 + 8]
mov qword [rbp + 0x48], rax
dec ecx
cmp ecx, 0xc9
ja 0x1800164b0
jmp 0x180016500
mov rax, qword [rbp + 0x40]
sub rax, qword [0]
mov qword [rbp + 0x40], rax
shr rax, 0x3f
mov byte [rbp + 0x48], al
cmp qword [rbp + 0x48], 0xfffffffffffffffa
jae 0x18001652a
mov r8d, 0x42
mov byte [rsp + 0x30], 0x75
lea rdx, [rsp + 0x30]
mov rcx, r9
call fcn.18001e4a0
cmp eax, 1
jne 0x180015aa6
jmp 0x180016532
mov dword [r13 + 4], 1
mov dword [r13], 3
mov ecx, 0x9a
inc ecx
lea r11, [0x180000000]
cmp ecx, 0x9c
jb 0x1800163b7
mov r15d, r14d
jmp case.0x18001544d.115
mov ecx, 0xd4
mov eax, ecx
sub eax, 0xd4
je 0x180016594
sub eax, 0xd
je 0x18001658a
sub eax, 0xd
je 0x18001657f
cmp eax, 0xd
je case.0x1800167a1.83
jmp 0x18001659d
mov edi, 1
mov dword [rsp + 0x38], edi
jmp 0x18001659d
mov dword [r13], 0xc
jmp 0x18001659d
cmp byte [rbx], 0x6c
jne case.0x18001813e.19
add ecx, 0xd
cmp ecx, 0x108
jb 0x180016561
mov eax, 0xef
lea r15d, [rax - 0x50]
cmp eax, 0xef
je 0x1800165d1
cmp eax, 0x170
jne 0x1800165da
mov dword [r13], 0xd
mov eax, 1
jmp 0x1800156f3
cmp byte [rbx], 0x73
jne case.0x18001813e.19
add eax, 0x81
cmp eax, 0x1f1
jb 0x1800165b1
jmp case.0x18001544d.115
mov esi, 0xbc
lea r15d, [rsi - 0x16]
mov eax, esi
sub eax, 0xbc
je 0x180016629
sub eax, 0x7f
je 0x180016623
sub eax, 0x7f
je 0x180016612
cmp eax, 0x7f
je 0x180016a06
jmp 0x180016632
mov rax, qword [0x38]
test rax, rax
je 0x180016632
call rax
jmp 0x180016632
mov dword [r13], ebx
jmp 0x180016632
cmp byte [rbx], 0x65
jne case.0x18001813e.19
add esi, 0x7f
cmp esi, 0x2b8
jb 0x1800165f4
jmp case.0x18001544d.115
mov esi, ebx
mov qword [r13 + 0x18], rbx
mov dword [rsp + 0x48], ebx
cmp dword [r13 + 0x30], ebx
jbe case.0x18001544d.115
mov eax, ebx
nop dword [rax + rax]
mov rdx, qword [r13 + 0x38]
lea rcx, [rax + rax*2]
shl rcx, 4
mov r8d, 0x20
add rdx, rcx
add rcx, qword [r13 + 0x40]
call fcn.180020c50
mov r14, qword [r13]
mov qword [rbp + 0x88], rax
mov rcx, r14
mov dword [rsp + 0x68], ebx
mov rax, qword [r14 + 8]
mov qword [rsp + 0x60], rax
cmp byte [rax + 0x19], bl
jne 0x1800166c7
nop
mov qword [rsp + 0x60], rax
cmp dword [rax + 0x20], esi
jae 0x1800166b4
mov rax, qword [rax + 0x10]
mov dword [rsp + 0x68], ebx
jmp 0x1800166c2
mov rcx, rax
mov dword [rsp + 0x68], 1
mov rax, qword [rax]
cmp byte [rax + 0x19], bl
je 0x1800166a0
cmp byte [rcx + 0x19], bl
jne 0x1800166d1
cmp esi, dword [rcx + 0x20]
jae 0x180016728
movabs rax, 0x555555555555555
cmp qword [r13 + 8], rax
je 0x180018444
mov ecx, 0x30
call fcn.180031f30
movups xmm0, xmmword [rsp + 0x60]
mov r8, rax
lea rdx, [rsp + 0x60]
mov eax, dword [rsp + 0x48]
mov rcx, r13
movaps xmmword [rsp + 0x60], xmm0
mov dword [r8 + 0x20], eax
mov qword [r8 + 0x28], rbx
mov qword [r8], r14
mov qword [r8 + 8], r14
mov qword [r8 + 0x10], r14
mov word [r8 + 0x18], bx
call fcn.180028cb0
mov rcx, rax
movsd xmm0, qword [rbp + 0x88]
movsd qword [rcx + 0x28], xmm0
mov esi, dword [rsp + 0x48]
addsd xmm0, qword [r13 + 0x18]
inc esi
mov dword [rsp + 0x48], esi
mov eax, esi
movsd qword [r13 + 0x18], xmm0
cmp esi, dword [r13 + 0x30]
jb 0x180016660
add r15d, 7
cmp r15d, 0x131
jb 0x180015414
mov r12, qword [rsp + 0x40]
mov eax, 0xd6
mov dword [rbp + 0x348], eax
cmp eax, 0xc8
jbe case.0x1800167a1.83
add eax, 0xffffffad
cmp eax, 0xd
ja case.default.0x1800167a1
lea r11, [0x180000000]
mov ecx, dword [r11 + rax*4 + 0x18794]
add rcx, r11
jmp rcx
mov eax, dword [rsp + 0x54]
mov r8, qword [rsp + 0x40]
mov r14, qword [rbp - 8]
mov rcx, qword [rbp - 0x20]
mov edx, dword [rsp + 0x50]
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x58], eax
mov eax, dword [rbp - 0x28]
mov dword [rbp - 0x28], eax
mov rax, qword [rbp - 0x68]
mov qword [rbp - 0x68], rax
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x40], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 8], rax
mov rax, qword [rbp]
mov qword [rbp], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x10], rax
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x48], eax
movzx eax, byte [rbp + 0x358]
mov byte [rbp + 0x358], al
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x50], rax
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x48], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x30]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x60], rax
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x58], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp - 0x70], rax
mov eax, 0x5f
mov qword [rsp + 0x40], r8
dec eax
mov r8, qword [rbp + 0x18]
mov r12, qword [rsp + 0x40]
mov dword [rsp + 0x38], edi
mov qword [rbp - 8], r14
mov dword [rsp + 0x50], edx
mov qword [rbp + 0x18], r8
mov qword [rbp - 0x20], rcx
jmp 0x180016772
mov r12, qword [rsp + 0x40]
mov eax, 0xcd
nop word [rax + rax]
cmp eax, 0xcd
je 0x180016d10
cmp eax, 0x39a8
je 0x180016d02
cmp eax, 0x7283
je case.0x1800167a1.83
jmp 0x18001704c
mov r12, qword [rsp + 0x40]
jmp 0x18001705c
mov r12, qword [rsp + 0x40]
mov ecx, 0xb5
nop word [rax + rax]
mov eax, ecx
sub eax, 0xb5
je 0x180017360
sub eax, 0x14
je 0x180017473
cmp eax, 0x14
je 0x180016a06
jmp 0x180017478
mov r12, qword [rsp + 0x40]
mov eax, 0x5c
dec eax
jmp 0x180016772
mov r12, qword [rsp + 0x40]
jmp 0x1800175e4
mov r12, qword [rsp + 0x40]
mov eax, 0x55
dec eax
jmp 0x180016772
mov r12, qword [rsp + 0x40]
mov ecx, 0xdd
nop word [rax + rax]
mov eax, ecx
sub eax, 0xdb
je 0x180016a06
sub eax, 1
je 0x18001773d
cmp eax, 1
jne 0x180017742
movsx edx, byte [rbx]
lea eax, [rdx - 0x30]
cmp eax, 9
ja case.0x18001813e.19
cdqe
mov ecx, dword [r11 + rax*4 + 0x187cc]
add rcx, r11
jmp rcx
mov r12, qword [rsp + 0x40]
jmp 0x1800177b1
mov r12, qword [rsp + 0x40]
mov eax, 0x56
dec eax
jmp 0x180016772
mov r12, qword [rsp + 0x40]
mov eax, 0xa8
cmp eax, 0xa8
je 0x1800180ac
cmp eax, 0x2f40
je 0x1800180a1
cmp eax, 0x5dd8
je case.0x1800167a1.83
jmp 0x1800180bd
mov r12, qword [rsp + 0x40]
mov eax, 0x60
dec eax
jmp 0x180016772
mov r12, qword [rsp + 0x40]
mov ecx, 0xfb
mov eax, ecx
sub eax, 0xfb
je 0x180018339
cmp eax, 1
je 0x180016a06
jmp 0x180018409
mov r12, qword [rsp + 0x40]
mov eax, 0x57
dec eax
jmp 0x180016772
mov eax, 0xa
jmp 0x1800156f3
cmp byte [rbx], 0x72
jne case.0x18001813e.19
mov dword [r13], 8
mov eax, 1
jmp 0x1800156f3
mov ecx, 0x11f
mov eax, ecx
sub eax, 0x11f
je 0x180016a28
cmp eax, 0x6f
je 0x180016a06
jmp 0x180016aea
movsx edx, byte [rbx]
lea eax, [rdx - 9]
cmp eax, 0x74
ja case.0x18001813e.19
cdqe
movzx eax, byte [r11 + rax + 0x18810]
mov ecx, dword [r11 + rax*4 + 0x187f4]
add rcx, r11
jmp rcx
cmp dword [r13 + 4], 0
jne 0x180016ade
mov r9, qword [r13 + 8]
mov ecx, 0xcd
mov eax, ecx
sub eax, 0xcc
je 0x180016ab3
sub eax, 1
je 0x180016a88
sub eax, 3
je 0x180016a9c
cmp eax, 1
jne 0x180016a90
mov rax, qword [r9 + 8]
sub rax, qword [r9]
mov qword [rbp - 0x50], rax
jmp 0x180016a90
mov rax, qword [r9 + 8]
mov qword [rbp + 0x48], rax
dec ecx
cmp ecx, 0xc9
ja 0x180016a63
jmp 0x180016ab3
mov rax, qword [rbp - 0x50]
sub rax, qword [0]
mov qword [rbp - 0x50], rax
shr rax, 0x3f
mov byte [rbp + 0x48], al
cmp qword [rbp + 0x48], 0xffffffffffffffff
jae 0x180016b06
mov byte [rbp + 0x350], dl
mov r8d, 0x42
lea rdx, [rbp + 0x350]
mov rcx, r9
call fcn.18001e4a0
cmp eax, 1
jne 0x180015aa6
mov ecx, 0x11f
lea r11, [0x180000000]
add ecx, 0x6f
cmp ecx, 0x1fd
jb 0x180016a15
mov eax, dword [rbp + 0x348]
dec eax
jmp 0x180016772
mov dword [r13 + 4], 1
jmp 0x180016ade
mov rcx, qword [r13 + 8]
mov r8d, 0x42
mov byte [rbp + 0x350], dl
lea rdx, [rbp + 0x350]
call fcn.18001e4a0
cmp eax, 1
jne 0x180015aa6
mov dword [r13], 0x14
jmp 0x180016ade
mov r14d, 0x52
mov eax, r14d
sub eax, 0x50
je 0x180016ade
sub eax, 1
je 0x180016b64
cmp eax, 1
jne 0x180016b89
cmp qword [r13 + 8], 0
je 0x180015aa6
jmp 0x180016b89
mov rax, qword [0x28]
lea rsi, [r13 + 8]
test rax, rax
je 0x180016b7d
mov rcx, qword [rsi]
mov rcx, qword [rcx]
call rax
mov r8, rsi
call fcn.18000f3b0
mov dword [r13], ebx
dec r14d
cmp r14d, 0x4f
ja 0x180016b45
mov esi, 0xac
cmp esi, 0xac
je 0x180016bd6
cmp esi, 0x2448
je 0x180016bc7
cmp esi, 0x47e4
je 0x180016bbd
cmp esi, 0x6b80
je 0x180016ade
jmp 0x180016bfe
mov dword [r13], 0x1a
jmp 0x180016bfe
cmp qword [rbx], 0
je 0x180016bfe
call qword [8]
jmp 0x180016bfe
mov rcx, qword [r13 + 8]
test rcx, rcx
je 0x180015aa6
mov rax, qword [0x28]
test rax, rax
je 0x180016bf5
mov rcx, qword [rcx]
call rax
lea r8, [r13 + 8]
call fcn.18000f3b0
add esi, 0x239c
cmp esi, 0x8e70
jbe 0x180016b97
mov esi, 0x51
cmp esi, 0x51
je 0x180016c36
cmp esi, 0xe7
je 0x180016c2c
cmp esi, 0x17d
je 0x180016ade
jmp 0x180016c7a
mov dword [r13], 0x1a
jmp 0x180016c7a
mov rax, qword [0x28]
test rax, rax
je 0x180016c60
mov rcx, qword [r13 + 8]
test rcx, rcx
je 0x180015aa6
mov rcx, qword [rcx]
call rax
lea r8, [r13 + 8]
call fcn.18000f3b0
jmp 0x180016c6d
lea r8, [r13 + 8]
call fcn.18000f3b0
mov qword [r13 + 8], rbx
cmp qword [rbx], 0
je 0x180016c7a
call qword [0x18]
add esi, 0x96
cmp esi, 0x213
jb 0x180016c11
mov r14d, 0x96
nop
cmp r14d, 0x93
jbe case.0x18001813e.19
mov eax, r14d
sub eax, 0x94
je 0x180016ade
sub eax, 1
je 0x180016cc5
cmp eax, 1
jne 0x180016cfd
cmp qword [r13 + 8], 0
je 0x180015aa6
dec r14d
jmp 0x180016c90
mov rax, qword [0x28]
lea rsi, [r13 + 8]
test rax, rax
je 0x180016cde
mov rcx, qword [rsi]
mov rcx, qword [rcx]
call rax
mov r8, rsi
call fcn.18000f3b0
mov rax, qword [0x48]
test rax, rax
je 0x180016cf5
call rax
mov dword [r13], 0x1b
dec r14d
jmp 0x180016c90
mov edi, 1
mov dword [rsp + 0x38], edi
jmp 0x18001704c
movsx eax, byte [rbx]
add eax, 0xffffffd5
cmp eax, 0xe
ja case.0x180016d2c.44
cdqe
mov ecx, dword [r11 + rax*4 + 0x18888]
add rcx, r11
jmp rcx
mov esi, 0xc5
cmp esi, 0xc5
je 0x180016d8f
cmp esi, 0x85e6
jne 0x180016dce
mov r14, qword [rbp - 8]
mov esi, 0xae
cmp esi, 0x15120
ja 0x180016e95
je 0x180016e61
cmp esi, 0xae
je 0x180016e54
cmp esi, 0x70d4
je 0x180016e38
cmp esi, 0xe0fa
jne 0x180016ec0
mov byte [rbp - 0xf], 0
jmp 0x180016ec0
mov rcx, qword [r13 + 8]
lea rdx, [rbp + 0x350]
mov dword [r13 + 4], ebx
mov r8d, 0x42
movzx eax, byte [rbx]
mov byte [rbp + 0x350], al
call fcn.18001e4a0
cmp eax, 1
jne 0x180015aa6
mov rax, qword [sym.imp.WINMM.dll_waveOutWrite]
mov qword [rbp - 8], rax
mov dword [r13], 0x16
add esi, 0x8521
cmp esi, 0x10a42
jbe 0x180016d33
cmp dword [r13 + 4], 0
jne 0x180016f57
mov r9, qword [r13 + 8]
mov ecx, 0xcd
nop dword [rax]
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xcc
je 0x180016f0d
sub eax, 1
je 0x180016ede
sub eax, 3
je 0x180016ef6
cmp eax, 1
jne 0x180016ee6
mov rax, qword [r9 + 8]
sub rax, qword [r9]
mov qword [rbp - 0x48], rax
jmp 0x180016ee6
mov r8d, 4
mov byte [rbp - 0x13], 0
lea rdx, [0x180065eeb]
lea rcx, [rbp - 0x13]
call fcn.18003a150
jmp 0x180016ec0
mov dword [rbp - 0x18], 0x65766177
mov byte [rbp - 0x14], 0x4f
jmp 0x180016ec0
mov r8d, 3
lea rdx, [0x180065f06]
lea rcx, [rbp - 0x18]
call fcn.18003a9b0
mov r8d, 1
lea rdx, [0x180065f1e]
lea rcx, [rbp - 0x18]
call fcn.18003a9b0
mov word [rbp - 0xb], 0x25
jmp 0x180016ec0
cmp esi, 0x1c146
je 0x180016eba
cmp esi, 0x2316c
jne 0x180016ec0
mov r8, r14
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0xf0]
call fcn.180001120
jmp 0x180016ec0
mov word [rbp - 0xa], 0x70
add esi, 0x7026
cmp esi, 0x2a0e4
jbe 0x180016d50
lea r11, [0x180000000]
jmp case.0x180016f86.0
mov rax, qword [r9 + 8]
mov qword [rbp + 0x40], rax
dec ecx
cmp ecx, 0xc9
ja 0x180016e00
jmp 0x180016f0d
mov rax, qword [rbp - 0x48]
sub rax, qword [0]
mov qword [rbp - 0x48], rax
shr rax, 0x3f
mov byte [rbp + 0x40], al
cmp qword [rbp + 0x40], 0xfffffffffffffffe
jae 0x180016f4f
movzx eax, byte [rbx]
lea rdx, [rbp + 0x350]
mov r8d, 0x42
mov byte [rbp + 0x350], al
mov rcx, r9
call fcn.18001e4a0
cmp eax, 1
jne 0x180015aa6
mov dword [r13], 0x15
lea r11, [0x180000000]
jmp case.0x180016f86.0
mov dword [r13 + 4], 1
mov dword [r13], 0x15
lea r11, [0x180000000]
jmp case.0x180016f86.0
mov esi, 5
cmp esi, 5
ja case.default.0x180016f86
mov eax, esi
mov ecx, dword [r11 + rax*4 + 0x188c4]
add rcx, r11
jmp rcx
mov eax, dword [rsp + 0x54]
lea r9, [rsp + 0x60]
mov r8d, dword [rbp - 0x28]
lea rdx, [rbp + 0xb8]
mov rcx, qword [rbp - 0x68]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x20], eax
call qword [sym.imp.MSIMG32.dll_GradientFill]
jmp case.default.0x180016f86
mov r14, qword [rbp - 0x68]
test r14, r14
je 0x180016fce
mov rcx, qword [rbp - 0x40]
mov rdx, r14
call qword [sym.imp.USER32.dll_ReleaseDC]
mov qword [rbp - 0x68], rbx
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
movups xmmword [rbp + 0xc8], xmm0
movups xmmword [rbp + 0xd8], xmm0
jmp case.default.0x180016f86
mov rcx, rbx
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov rcx, rax
mov qword [rbp - 0x40], rax
call qword [sym.imp.USER32.dll_GetDC]
mov qword [rbp - 0x68], rax
jmp case.default.0x180016f86
xorps xmm0, xmm0
mov dword [rbp - 0x28], 3
xor eax, eax
mov dword [rsp + 0x58], 3
movups xmmword [rsp + 0x60], xmm0
mov dword [rbp - 0x80], eax
movups xmmword [rsp + 0x70], xmm0
mov dword [rsp + 0x54], 2
dec esi
lea r11, [0x180000000]
lea eax, [rsi + 0x118]
cmp eax, 0x117
ja 0x180016f70
mov eax, 0xcd
add eax, 0x38db
cmp eax, 0xaa91
jbe 0x180016880
mov ecx, 1
mov eax, ecx
sub eax, 1
je 0x18001707f
sub eax, 1
je 0x180017308
cmp eax, 1
je 0x180016a06
jmp 0x180017308
movsx edx, byte [rbx]
lea eax, [rdx - 9]
cmp eax, 0x74
ja case.0x18001813e.19
cdqe
movzx eax, byte [r11 + rax + 0x188f4]
mov ecx, dword [r11 + rax*4 + 0x188dc]
add rcx, r11
jmp rcx
cmp dword [r13 + 4], 0
jne 0x180017303
mov r9, qword [r13 + 8]
mov ecx, 0xcd
nop word [rax + rax]
mov eax, ecx
sub eax, 0xcc
je 0x180017110
sub eax, 1
je 0x1800170e5
sub eax, 3
je 0x1800170f9
cmp eax, 1
jne 0x1800170ed
mov rax, qword [r9 + 8]
sub rax, qword [r9]
mov qword [rbp - 0x38], rax
jmp 0x1800170ed
mov rax, qword [r9 + 8]
mov qword [rbp + 0x38], rax
dec ecx
cmp ecx, 0xc9
ja 0x1800170c0
jmp 0x180017110
mov rax, qword [rbp - 0x38]
sub rax, qword [0]
mov qword [rbp - 0x38], rax
shr rax, 0x3f
mov byte [rbp + 0x38], al
cmp qword [rbp + 0x38], 0xfffffffffffffffe
jae 0x180017140
mov byte [rbp + 0x350], dl
mov r8d, 0x42
lea rdx, [rbp + 0x350]
mov rcx, r9
call fcn.18001e4a0
cmp eax, 1
jne 0x180015aa6
jmp 0x180017303
mov dword [r13 + 4], 1
jmp 0x180017303
mov esi, 0xac
mov eax, esi
sub eax, 0xac
je 0x180017171
sub eax, 1
je 0x18001716b
cmp eax, 1
je 0x180017303
jmp 0x180017199
mov dword [r13], ebx
jmp 0x180017199
mov rcx, qword [r13 + 8]
test rcx, rcx
je 0x180015aa6
mov rax, qword [0x28]
test rax, rax
je 0x180017190
mov rcx, qword [rcx]
call rax
lea r8, [r13 + 8]
call fcn.18000f3b0
inc esi
cmp esi, 0xaf
jb 0x180017152
mov esi, 0x5a
cmp esi, 0x5a
je 0x1800171da
cmp esi, 0x3624
je 0x1800171c3
cmp esi, 0x6bee
je 0x180017303
jmp 0x180017202
cmp qword [rbx], 0
je 0x1800171d0
call qword [8]
mov dword [r13], 0x1a
jmp 0x180017202
mov rcx, qword [r13 + 8]
test rcx, rcx
je 0x180015aa6
mov rax, qword [0x28]
test rax, rax
je 0x1800171f9
mov rcx, qword [rcx]
call rax
lea r8, [r13 + 8]
call fcn.18000f3b0
add esi, 0x35ca
cmp esi, 0xa15e
jbe 0x1800171a8
mov r14d, 0x2f
cmp r14d, 0x2f
je 0x180017241
cmp r14d, 0x1c75
je 0x180017237
cmp r14d, 0x38bb
je 0x180017303
jmp 0x1800172b2
mov dword [r13], 0x1a
jmp 0x1800172b2
cmp qword [0x28], 0
je 0x180017298
mov esi, 0x11e
mov eax, esi
sub eax, 0x11e
je 0x180017275
sub eax, 1
je 0x18001726a
cmp eax, 1
jne 0x18001728c
mov qword [r13 + 8], rbx
jmp 0x18001728c
mov rcx, qword [r13 + 8]
call fcn.18003a610
jmp 0x18001728c
mov rcx, qword [r13 + 8]
test rcx, rcx
je 0x180015aa6
mov rcx, qword [rcx]
mov eax, 0x28
call qword [rax]
inc esi
cmp esi, 0x121
jb 0x180017251
jmp 0x1800172a5
mov rcx, qword [r13 + 8]
call fcn.18003a610
mov qword [r13 + 8], rbx
cmp qword [rbx], 0
je 0x1800172b2
call qword [0x18]
add r14d, 0x1c46
cmp r14d, 0x54d2
jbe 0x180017216
mov esi, 0x121
nop dword [rax + rax]
cmp esi, 0x166fe
ja case.0x18001813e.19
cmp esi, 0x121
je 0x180017326
cmp esi, 0xb4a0
jne 0x180017355
mov rax, qword [0x48]
test rax, rax
je 0x1800172fb
call rax
mov dword [r13], 0x1b
mov ecx, 1
inc ecx
lea r11, [0x180000000]
cmp ecx, 4
jb 0x180017061
mov eax, 0x5a
dec eax
jmp 0x180016772
cmp qword [0x28], 0
mov rcx, qword [r13 + 8]
je 0x18001734c
test rcx, rcx
je 0x180015aa6
mov rcx, qword [rcx]
mov eax, 0x28
call qword [rax]
mov rcx, qword [r13 + 8]
call fcn.18003a610
mov qword [r13 + 8], rbx
add esi, 0xb37f
jmp 0x1800172d0
movsx edx, byte [rbx]
lea eax, [rdx - 0x30]
cmp eax, 9
ja case.0x18001813e.19
cdqe
mov ecx, dword [r11 + rax*4 + 0x1896c]
add rcx, r11
jmp rcx
mov rcx, qword [r13 + 8]
mov r8d, 0x42
mov byte [rbp + 0x350], dl
lea rdx, [rbp + 0x350]
call fcn.18001e4a0
mov dword [r13], 0x11
jmp 0x180017473
cmp dword [r13 + 4], 0
jne 0x18001746b
mov rdx, qword [r13 + 8]
mov ecx, 0xcd
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xcc
je 0x180017410
sub eax, 1
je 0x1800173e5
sub eax, 3
je 0x1800173f9
cmp eax, 1
jne 0x1800173ed
mov rax, qword [rdx + 8]
sub rax, qword [rdx]
mov qword [rbp - 0x30], rax
jmp 0x1800173ed
mov rax, qword [rdx + 8]
mov qword [rbp + 0x50], rax
dec ecx
cmp ecx, 0xc9
ja 0x1800173c0
jmp 0x180017410
mov rax, qword [rbp - 0x30]
sub rax, qword [0]
mov qword [rbp - 0x30], rax
shr rax, 0x3f
mov byte [rbp + 0x50], al
cmp qword [rbp + 0x50], 0xffffffffffffffff
jae 0x18001746b
lea rdx, [rbp + 0x350]
mov qword [rbp + 0x350], 5
mov ecx, 0x53
call fcn.18001b9c0
mov qword [r13 + 8], rax
test rax, rax
je 0x180015aa6
movzx ecx, byte [rbx]
lea rdx, [rbp + 0x350]
mov byte [rbp + 0x350], cl
mov r8d, 0x42
mov rcx, rax
call fcn.18001e4a0
cmp eax, 1
jne 0x180015aa6
mov dword [r13 + 4], eax
mov dword [r13], 0x18
mov ecx, 0xc9
add ecx, 0x14
lea r11, [0x180000000]
cmp ecx, 0xf1
jb 0x1800168c0
mov eax, 0x58
dec eax
jmp 0x180016772
mov r14d, 0x9a
mov eax, r14d
sub eax, 0x97
je case.0x1800167a1.83
sub eax, 1
je 0x1800175c4
sub eax, 1
je case.0x1800174e6.9
cmp eax, 1
jne 0x1800175cd
movsx eax, byte [rbx]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x1800174e6.12
cdqe
movzx eax, byte [r11 + rax + 0x189a4]
mov ecx, dword [r11 + rax*4 + 0x18994]
add rcx, r11
jmp rcx
mov qword [r13 + 8], rbx
mov dword [r13], 1
mov r14d, 0x99
jmp 0x1800175cd
mov rax, qword [8]
test rax, rax
je 0x18001750e
call rax
mov dword [r13], 0x1a
mov r14d, 0x99
jmp 0x1800175cd
mov esi, 0x62
nop word [rax + rax]
mov eax, esi
sub eax, 0x5f
je case.0x18001813e.19
sub eax, 1
je 0x180017585
sub eax, 1
je 0x180017570
cmp eax, 1
jne 0x1800175b7
movups xmm0, xmmword [str.SourceOfTheList]
mov qword [rbp + 8], rbx
movups xmm1, xmmword [0x180065f40]
mov qword [rbp], rbx
movups xmmword [rbp + 0xb8], xmm0
movups xmmword [rbp + 0xc8], xmm1
jmp 0x1800175b7
xor eax, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x78], eax
jmp 0x1800175b7
mov rdx, qword [rbp]
lea r9, [rsp + 0x60]
mov rcx, qword [rbp + 8]
lea r8, [rbp + 0xb8]
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x1c
mov dword [rsp + 0x60], 0x1c
call qword [sym.imp.IMM32.dll_ImmGetConversionListW]
dec esi
cmp esi, 0x5e
ja 0x180017530
jmp 0x1800175cd
mov edi, 1
mov dword [rsp + 0x38], edi
dec r14d
lea r11, [0x180000000]
cmp r14d, 0x96
ja 0x1800174a0
mov eax, 0xc2
nop dword [rax]
cmp eax, 0xc2
je 0x180017616
cmp eax, 0x83dc
je 0x18001760b
cmp eax, 0x106f6
je case.0x1800167a1.83
jmp 0x18001767b
mov edi, 1
mov dword [rsp + 0x38], edi
jmp 0x18001767b
movsx eax, byte [rbx]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x18001813e.19
cdqe
movzx eax, byte [r11 + rax + 0x18a30]
mov ecx, dword [r11 + rax*4 + 0x18a1c]
add rcx, r11
jmp rcx
mov rax, qword [8]
test rax, rax
je case.0x18001763b.9
call rax
jmp case.0x18001763b.9
mov rax, qword [0x18]
test rax, rax
je case.0x18001763b.9
call rax
jmp case.0x18001763b.9
mov rax, qword [0x50]
test rax, rax
je 0x18001766e
call rax
mov dword [r13], 0x1b
mov eax, 0xc2
add eax, 0x831a
lea r11, [0x180000000]
cmp eax, 0x1894e
jbe 0x1800175f0
mov eax, 0x55
dec eax
jmp 0x180016772
cmp dword [r13 + 4], 0
jne 0x180017735
mov r9, qword [r13 + 8]
mov ecx, 0xcd
mov eax, ecx
sub eax, 0xcc
je 0x180017702
sub eax, 1
je 0x1800176d7
sub eax, 3
je 0x1800176eb
cmp eax, 1
jne 0x1800176df
mov rax, qword [r9 + 8]
sub rax, qword [r9]
mov qword [rbp - 0x60], rax
jmp 0x1800176df
mov rax, qword [r9 + 8]
mov qword [rbp + 0x60], rax
dec ecx
cmp ecx, 0xc9
ja 0x1800176b2
jmp 0x180017702
mov rax, qword [rbp - 0x60]
sub rax, qword [0]
mov qword [rbp - 0x60], rax
shr rax, 0x3f
mov byte [rbp + 0x60], al
cmp qword [rbp + 0x60], 0xfffffffffffffffe
jae 0x18001772d
mov byte [rbp + 0x350], dl
mov r8d, 0x42
lea rdx, [rbp + 0x350]
mov rcx, r9
call fcn.18001e4a0
lea r11, [0x180000000]
jmp 0x180017735
mov dword [r13 + 4], 1
mov dword [r13], 0x15
mov ecx, 0xdc
dec ecx
cmp ecx, 0xda
ja 0x180016920
mov eax, 0x59
dec eax
jmp 0x180016772
mov esi, 0x104
cmp esi, 0x104
je 0x180017777
cmp esi, 0xc300
je case.0x1800167a1.83
jmp 0x18001779c
cmp byte [rbx], 0x6c
jne case.0x18001813e.19
mov dword [r13], ebx
mov rax, qword [0x40]
test rax, rax
je 0x180017793
call rax
mov edi, 1
mov dword [rsp + 0x38], edi
add esi, 0xc1fc
cmp esi, 0x183f8
jbe 0x180017761
lea r11, [0x180000000]
mov eax, 0xb5
cmp eax, 0xb5
je 0x1800177e2
cmp eax, 0x240f
je 0x1800177d4
cmp eax, 0x4769
je case.0x1800167a1.83
jmp 0x180017b40
mov edi, 1
mov dword [rsp + 0x38], edi
jmp 0x180017b40
movsx eax, byte [rbx]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x18001813e.19
cdqe
movzx eax, byte [r11 + rax + 0x18ac0]
mov ecx, dword [r11 + rax*4 + 0x18aa8]
add rcx, r11
jmp rcx
mov esi, 0x75
nop
cmp esi, 0x75
je 0x18001785b
cmp esi, 0x3246
je 0x18001782b
cmp esi, 0x6417
je 0x180017b3b
jmp 0x180017884
mov rcx, qword [r13 + 8]
lea rdx, [rbp + 0x350]
mov r8d, 0x42
mov byte [rbp + 0x350], 0x2e
call fcn.18001e4a0
cmp eax, 1
jne 0x180015aa6
mov dword [r13], 0x12
jmp 0x180017884
lea rdx, [rbp + 0x350]
mov qword [rbp + 0x350], 5
mov ecx, 0x53
call fcn.18001b9c0
mov qword [r13 + 8], rax
test rax, rax
je 0x180015aa6
add esi, 0x31d1
cmp esi, 0x9573
jbe 0x180017810
mov esi, 0xdd
nop dword [rax + rax]
cmp esi, 0xdd
je 0x1800178c2
cmp esi, 0x19a
jne 0x1800178e1
lea r8, [r13 + 8]
call fcn.18000f3b0
mov dword [r13], ebx
jmp 0x180017b3b
mov rcx, qword [r13 + 8]
test rcx, rcx
je 0x180015aa6
mov rax, qword [0x28]
test rax, rax
je 0x1800178e1
mov rcx, qword [rcx]
call rax
add esi, 0xbd
cmp esi, 0x257
jb 0x1800178a0
mov esi, 0x95
cmp esi, 0x95
je 0x18001791e
cmp esi, 0x62f2
jne 0x180017946
cmp qword [rbx], 0
je 0x180017911
call qword [8]
mov dword [r13], 0x1a
jmp 0x180017b3b
mov rcx, qword [r13 + 8]
test rcx, rcx
je 0x180015aa6
mov rax, qword [0x28]
test rax, rax
je 0x18001793d
mov rcx, qword [rcx]
call rax
lea r8, [r13 + 8]
call fcn.18000f3b0
add esi, 0x625d
cmp esi, 0xc4ba
jbe 0x1800178f4
mov r15d, 0x15
mov dword [rbp + 0x350], r15d
mov eax, r15d
sub eax, 0x15
je 0x180017a8c
sub eax, 0x75
je 0x180017980
cmp eax, 0x75
je 0x180017b3b
jmp 0x180017abf
cmp qword [rbx], 0
je 0x18001798d
call qword [0x18]
mov rbx, qword [rbp + 0x10]
mov esi, 7
mov dword [r13], 0x1a
lea r13, [0x180000000]
lea r14d, [rsi + 1]
lea edi, [rsi + 0x19]
lea r12d, [rsi + 0x5e]
lea r15d, [rsi + 0x67]
cmp esi, 7
ja case.default.0x1800179ca
mov eax, esi
mov ecx, dword [r13 + rax*4 + 0x18b38]
add rcx, r13
jmp rcx
mov eax, 0x61
mov word [rsp + 0x6d], ax
mov word [rsp + 0x6e], r15w
jmp case.default.0x1800179ca
mov eax, 0x4d
mov word [rsp + 0x66], ax
mov eax, 0x6f
mov word [rsp + 0x67], ax
mov eax, 0x64
mov word [rsp + 0x68], ax
mov dword [rsp + 0x69], 0x48656c75
jmp case.default.0x1800179ca
mov eax, 0x7025
mov word [rsp + 0x73], ax
jmp case.default.0x1800179ca
mov r8, rbx
mov byte [rsp + 0x75], 0
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xf0]
call fcn.180001120
jmp case.default.0x1800179ca
mov eax, 0x74
mov word [rsp + 0x65], ax
jmp case.default.0x1800179ca
mov dword [rsp + 0x61], 0x477672
mov word [rsp + 0x64], r12w
jmp case.default.0x1800179ca
mov eax, 0x44
mov word [rsp + 0x60], ax
jmp case.default.0x1800179ca
mov dword [rsp + 0x6f], 0x656c64
mov word [rsp + 0x72], di
dec esi
sub r14, 1
jne 0x1800179b4
mov edi, dword [rsp + 0x38]
xor ebx, ebx
mov r15d, dword [rbp + 0x350]
mov r13, qword [rbp + 0x340]
mov r12, qword [rsp + 0x40]
jmp 0x180017abf
mov rcx, qword [r13 + 8]
test rcx, rcx
je 0x180015aa6
mov rax, qword [0x28]
test rax, rax
je 0x180017aab
mov rcx, qword [rcx]
call rax
lea r8, [r13 + 8]
call fcn.18000f3b0
mov rax, qword [sym.imp.WINMM.dll_DrvGetModuleHandle]
mov qword [rbp + 0x10], rax
add r15d, 0x75
mov dword [rbp + 0x350], r15d
cmp r15d, 0x174
jb 0x180017961
mov esi, 0x116
nop dword [rax]
cmp esi, 0x114
jbe case.0x18001813e.19
mov eax, esi
sub eax, 0x115
je 0x180017b33
cmp eax, 1
jne 0x180017b2f
mov rcx, qword [r13 + 8]
test rcx, rcx
je 0x180015aa6
mov rax, qword [0x28]
test rax, rax
je 0x180017b19
mov rcx, qword [rcx]
call rax
lea r8, [r13 + 8]
call fcn.18000f3b0
cmp qword [rbx], 0
je 0x180017b2f
call qword [0x48]
dec esi
jmp 0x180017ae0
mov dword [r13], 0x1b
mov eax, 0xb5
add eax, 0x235a
lea r11, [0x180000000]
cmp eax, 0x6a0e
jbe 0x1800177b6
mov eax, 0x5e
dec eax
jmp 0x180016772
mov eax, 0x1a
cmp eax, 0x1a
je 0x180017b7b
cmp eax, 0x22
je 0x180016a06
jmp 0x180018089
movsx eax, byte [rbx]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x18001813e.19
cdqe
movzx eax, byte [r11 + rax + 0x18b78]
mov ecx, dword [r11 + rax*4 + 0x18b58]
add rcx, r11
jmp rcx
cmp dword [r13 + 4], 0
jne 0x18001807d
mov rdx, qword [r13 + 8]
mov ecx, 0xcd
mov eax, ecx
sub eax, 0xcc
je 0x180017c06
sub eax, 1
je 0x180017bdb
sub eax, 3
je 0x180017bef
cmp eax, 1
jne 0x180017be3
mov rax, qword [rdx + 8]
sub rax, qword [rdx]
mov qword [rbp - 0x58], rax
jmp 0x180017be3
mov rax, qword [rdx + 8]
mov qword [rbp + 0x68], rax
dec ecx
cmp ecx, 0xc9
ja 0x180017bb6
jmp 0x180017c06
mov rax, qword [rbp - 0x58]
sub rax, qword [0]
mov qword [rbp - 0x58], rax
shr rax, 0x3f
mov byte [rbp + 0x68], al
cmp qword [rbp + 0x68], 0xffffffffffffffff
jae 0x180017c62
lea rdx, [rbp + 0x350]
mov qword [rbp + 0x350], 5
mov ecx, 0x53
call fcn.18001b9c0
mov qword [r13 + 8], rax
test rax, rax
je 0x180015aa6
movzx ecx, byte [rbx]
lea rdx, [rbp + 0x350]
mov byte [rbp + 0x350], cl
mov r8d, 0x42
mov rcx, rax
call fcn.18001e4a0
cmp eax, 1
jne 0x180015aa6
jmp 0x18001807d
mov dword [r13 + 4], 1
jmp 0x18001807d
mov esi, ebx
cmp esi, 6
ja case.default.0x180017c87
mov eax, esi
mov ecx, dword [r11 + rax*4 + 0x18bf0]
add rcx, r11
jmp rcx
mov rcx, qword [r13 + 8]
lea rdx, [rbp + 0x350]
mov r8d, 0x42
mov dword [rbp + 0x58], ebx
mov byte [rbp + 0x350], 0x2e
call fcn.18001e4a0
cmp eax, 1
jne 0x180015aa6
lea r9, [rbp + 0x70]
mov qword [rbp + 0x70], rbx
lea r8, [rbp + 0x58]
mov edx, r12d
lea rcx, [rbp + 0x88]
call qword [sym.imp.RPCRT4.dll_MesEncodeFixedBufferHandleCreate]
mov dword [rsp + 0x48], eax
jmp 0x180017d9f
movzx eax, byte [rbp + 0x358]
mov ecx, ebx
cmp dword [rsp + 0x48], 0
mov dword [r13], 0x12
cmove ecx, eax
mov byte [rbp + 0x358], cl
jmp case.default.0x180017c87
lea rdx, [0x180065f50]
lea rcx, [rbp + 0x88]
jmp 0x180017d99
lea rdx, [rbp + 0x350]
mov qword [rbp + 0x350], 5
mov ecx, 0x53
call fcn.18001b9c0
mov qword [r13 + 8], rax
test rax, rax
je 0x180015aa6
lea rcx, [rbp + 0x88]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x180017d45
mov qword [rsp + 0x40], rax
mov r12, rax
jmp 0x180017d9f
lea rcx, [rbp + 0x88]
dec rcx
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x180017d62
movsd xmm0, qword [str.ngEncode]
movzx eax, byte [0x180065f60]
movsd qword [rcx], xmm0
mov byte [rcx + 8], al
mov byte [rbp + 0x358], 1
jmp case.default.0x180017c87
lea rdx, [0x180065f64]
lea rcx, [rbp + 0x8a]
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
lea r11, [0x180000000]
inc esi
lea eax, [rsi + 0x11f]
cmp eax, 0x126
jb 0x180017c71
mov esi, 0xe1
nop
mov eax, esi
sub eax, 0xdf
je 0x180017ed3
sub eax, 1
je 0x180017e8c
cmp eax, 1
jne 0x180017e9c
lea rdx, [rbp + 0x350]
mov qword [rbp + 0x350], 5
lea ecx, [rax + 0x52]
call fcn.18001b9c0
mov qword [r13 + 8], rax
test rax, rax
je 0x180015aa6
movzx ecx, byte [rbx]
lea rdx, [rbp + 0x350]
mov byte [rbp + 0x350], cl
mov r8d, 0x42
mov rcx, rax
call fcn.18001e4a0
cmp eax, 1
jne 0x180015aa6
mov qword [rbp - 0x20], rbx
jmp 0x180017e9c
cmp byte [rbp + 0x358], 0
je 0x18001807d
lea r8, [rbp + 0x350]
mov qword [rbp + 0x350], rbx
mov edx, r12d
lea rcx, [rbp + 0x88]
call qword [sym.imp.RPCRT4.dll_MesDecodeBufferHandleCreate]
mov rcx, qword [rbp + 0x70]
mov dword [rsp + 0x48], eax
test rcx, rcx
je 0x180017e71
call qword [sym.imp.RPCRT4.dll_MesHandleFree]
mov rcx, qword [rbp + 0x350]
test rcx, rcx
je 0x18001807d
call qword [sym.imp.RPCRT4.dll_MesHandleFree]
jmp 0x18001807d
mov qword [r13], 0x14
mov dword [rsp + 0x50], ebx
mov qword [rbp + 0x18], rbx
dec esi
cmp esi, 0xde
ja 0x180017dc0
mov esi, 0xcf
nop
mov eax, esi
sub eax, 0xcf
je 0x180017f20
sub eax, 0x11
je 0x180017f08
sub eax, 0x11
je 0x180017efd
sub eax, 0x11
je 0x180017ef7
cmp eax, 0x11
je 0x18001807d
jmp 0x180017f2b
mov r8, qword [rbp + 0x18]
xor r9d, r9d
mov edx, dword [rsp + 0x50]
mov rcx, qword [rbp - 0x20]
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call qword [sym.imp.USER32.dll_SendMessageCallbackW]
jmp 0x18001807d
mov dword [r13], ebx
jmp 0x180017f2b
lea r8, [r13 + 8]
call fcn.18000f3b0
jmp 0x180017f2b
mov rax, qword [0x28]
test rax, rax
je 0x180017f2b
mov rcx, qword [r13 + 8]
mov rcx, qword [rcx]
call rax
jmp 0x180017f2b
cmp qword [r13 + 8], 0
je 0x180015aa6
add esi, 0x11
cmp esi, 0x124
jb 0x180017eb0
mov esi, 0x20
nop
mov eax, esi
sub eax, 0x20
je 0x180017f59
cmp eax, 1
jne 0x180017f8e
mov dword [r13], 0x1a
jmp 0x18001807d
mov rcx, qword [r13 + 8]
test rcx, rcx
je 0x180015aa6
mov rax, qword [0x28]
test rax, rax
je 0x180017f78
mov rcx, qword [rcx]
call rax
lea r8, [r13 + 8]
call fcn.18000f3b0
cmp qword [rbx], 0
je 0x180017f8e
call qword [8]
inc esi
cmp esi, 0x22
jb 0x180017f40
mov esi, 0x2f
nop word [rax + rax]
cmp esi, 0x2f
je 0x180017fe5
cmp esi, 0xd09
je 0x180017fcd
cmp esi, 0x19e3
je 0x180017fc3
cmp esi, 0x26bd
je 0x18001807d
jmp 0x180018004
mov dword [r13], 0x1a
jmp 0x180018004
lea r8, [r13 + 8]
call fcn.18000f3b0
cmp qword [rbx], 0
je 0x180018004
call qword [0x18]
jmp 0x180018004
mov rcx, qword [r13 + 8]
test rcx, rcx
je 0x180015aa6
mov rax, qword [0x28]
test rax, rax
je 0x180018004
mov rcx, qword [rcx]
call rax
add esi, 0xcda
cmp esi, 0x3368
jbe 0x180017fa0
mov esi, 0xba
nop word [rax + rax]
cmp esi, 0xb8
jbe case.0x18001813e.19
mov eax, esi
sub eax, 0xb9
je 0x180018075
cmp eax, 1
jne 0x180018071
mov rcx, qword [r13 + 8]
test rcx, rcx
je 0x180015aa6
mov rax, qword [0x28]
test rax, rax
je 0x180018059
mov rcx, qword [rcx]
call rax
lea r8, [r13 + 8]
call fcn.18000f3b0
mov rax, qword [0x48]
test rax, rax
je 0x180018071
call rax
dec esi
jmp 0x180018020
mov dword [r13], 0x1b
mov eax, 0x1a
lea r11, [0x180000000]
add eax, 8
cmp eax, 0x2a
jb 0x180017b68
mov eax, 0x56
dec eax
jmp 0x180016772
mov edi, 1
mov dword [rsp + 0x38], edi
jmp 0x1800180bd
cmp byte [rbx], 0x75
jne case.0x18001813e.19
mov dword [r13], 0xf
add eax, 0x2e98
cmp eax, 0x8bc8
jbe 0x180016982
mov eax, 0x60
dec eax
jmp 0x180016772
mov ecx, 0x17
nop
mov eax, ecx
sub eax, 0x17
je 0x180018119
sub eax, 0x7c
je case.0x18001813e.9
sub eax, 0x7c
je 0x180018109
cmp eax, 0x7c
je case.0x1800167a1.83
mov eax, dword [rbp + 0x348]
jmp 0x1800182de
mov eax, dword [rbp + 0x348]
mov edi, 1
jmp 0x1800182de
movsx eax, byte [rbx]
add eax, 0xfffffff7
cmp eax, 0x72
ja case.0x18001813e.19
cdqe
movzx eax, byte [r11 + rax + 0x18c38]
mov ecx, dword [r11 + rax*4 + 0x18c0c]
add rcx, r11
jmp rcx
mov dword [r13], 1
mov qword [r13 + 8], rbx
jmp case.0x18001813e.9
mov rax, qword [rbx]
test rax, rax
je 0x18001815b
call rax
mov dword [r13], 0x19
jmp case.0x18001813e.9
mov rax, qword [0x10]
test rax, rax
je case.0x18001813e.9
call rax
jmp case.0x18001813e.9
mov dword [r13], 7
jmp case.0x18001813e.9
mov dword [r13], 0xa
jmp case.0x18001813e.9
mov dword [r13], 0xe
jmp case.0x18001813e.9
mov esi, 0x111
nop dword [rax]
mov eax, esi
sub eax, 0x10f
je case.0x18001813e.9
sub eax, 1
je 0x1800181f8
cmp eax, 1
jne 0x18001821e
lea rdx, [rbp + 0x350]
mov dword [r13], 0x11
lea ecx, [rax + 0x52]
mov qword [rbp + 0x350], 5
call fcn.18001b9c0
mov qword [r13 + 8], rax
test rax, rax
je 0x180015aa6
jmp 0x18001821e
mov rcx, qword [r13 + 8]
lea rdx, [rbp + 0x350]
mov r8d, 0x42
mov byte [rbp + 0x350], 0x30
call fcn.18001e4a0
cmp eax, 1
jne 0x180015aa6
dec esi
cmp esi, 0x10e
ja 0x1800181b0
mov esi, 0x6e
nop dword [rax]
mov eax, esi
sub eax, 0x6e
je 0x180018247
cmp eax, 1
jne 0x180018278
movzx eax, byte [rbx]
mov byte [rbp + 0x350], al
jmp 0x1800182a8
lea rdx, [rbp + 0x350]
mov dword [r13], 0x18
mov ecx, 0x53
mov qword [rbp + 0x350], 5
call fcn.18001b9c0
mov qword [r13 + 8], rax
test rax, rax
je 0x180015aa6
inc esi
cmp esi, 0x70
jb 0x180018230
mov esi, 0x78
cmp esi, 0x3c00
ja case.0x18001813e.19
cmp esi, 0x78
je 0x1800182fd
cmp esi, 0x1e78
jne 0x18001832e
mov byte [rbp + 0x350], 0x2d
mov rcx, qword [r13 + 8]
lea rdx, [rbp + 0x350]
mov r8d, 0x42
call fcn.18001e4a0
cmp eax, 1
jne 0x180015aa6
mov eax, 0x54
lea r11, [0x180000000]
mov dword [rbp + 0x348], eax
mov ecx, 0x93
add ecx, 0x7c
cmp ecx, 0x207
jb 0x1800180e0
mov edi, 0xa
dec eax
mov dword [rsp + 0x38], edi
jmp 0x180016772
lea rdx, [rbp + 0x350]
mov dword [r13], 0x17
mov ecx, 0x53
mov qword [rbp + 0x350], 8
call fcn.18001b9c0
mov qword [r13 + 8], rax
test rax, rax
je 0x180015aa6
add esi, 0x1e00
jmp 0x180018284
movsx edx, byte [rbx]
lea eax, [rdx - 0x30]
cmp eax, 9
ja case.0x18001813e.19
cdqe
mov ecx, dword [r11 + rax*4 + 0x18cac]
add rcx, r11
jmp rcx
cmp dword [r13 + 4], 0
jne 0x1800183fc
mov r9, qword [r13 + 8]
mov ecx, 0xcd
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xcc
je 0x1800183c0
sub eax, 1
je 0x180018395
sub eax, 3
je 0x1800183a9
cmp eax, 1
jne 0x18001839d
mov rax, qword [r9 + 8]
sub rax, qword [r9]
mov qword [rbp - 0x70], rax
jmp 0x18001839d
mov rax, qword [r9 + 8]
mov qword [rbp + 0x78], rax
dec ecx
cmp ecx, 0xc9
ja 0x180018370
jmp 0x1800183c0
mov rax, qword [rbp - 0x70]
sub rax, qword [0]
mov qword [rbp - 0x70], rax
shr rax, 0x3f
mov byte [rbp + 0x78], al
cmp qword [rbp + 0x78], 0xffffffffffffffff
jae 0x1800183f4
mov byte [rbp + 0x350], dl
mov r8d, 0x42
lea rdx, [rbp + 0x350]
mov rcx, r9
call fcn.18001e4a0
cmp eax, 1
jne 0x180015aa6
lea r11, [0x180000000]
jmp 0x1800183fc
mov dword [r13 + 4], 1
mov dword [r13], 0x13
mov ecx, 0xfb
inc ecx
cmp ecx, 0xfd
jb 0x1800169c3
mov eax, 0x5d
dec eax
jmp 0x180016772
cmp byte [rbx], 0x6c
jne case.0x18001813e.19
mov dword [r13], 0x10
mov eax, 1
jmp 0x1800156f3
mov eax, 7
jmp 0x1800156f3
call fcn.180001280
int3