Function at 0x18003acb0
Capabilities:
Check http status code
Create pipe
Parse pe header
Read pipe
Write pipe

Disassembly:
mov rax, rsp
mov dword [rax + 0x20], r9d
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xaa8]
sub rsp, 0xb68
movzx edx, word [rbp + 0xac8]
mov rbx, qword [rbp + 0xac0]
mov r13, qword [rbp + 0xac0]
mov r11, qword [rbp + 0x240]
movzx edi, byte [rbp + 0xac8]
movzx esi, byte [rbp + 0xac8]
mov rcx, qword [rbp + 0xac0]
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movsd xmm8, qword [rbp + 0xac0]
movaps xmmword [rax - 0x88], xmm9
mov rax, qword [rbp + 0xac0]
mov qword [rbp + 0x108], rax
mov eax, dword [rbp + 0xac8]
mov dword [rbp - 4], eax
mov rax, qword [rbp + 0xac0]
mov qword [rbp + 0x138], rax
movzx eax, byte [rbp + 0xac8]
mov byte [rsp + 0x70], al
mov eax, dword [rbp + 0xac8]
mov dword [rbp + 0x38], eax
mov eax, dword [rbp + 0xac8]
mov dword [rbp + 0x34], eax
mov eax, dword [rbp + 0xac8]
mov dword [rbp + 0x70], eax
mov rax, qword [rbp + 0xac0]
mov qword [rbp + 0x188], rax
mov eax, dword [rbp + 0xac8]
mov dword [rbp + 0x48], eax
mov rax, qword [rbp + 0xac0]
mov qword [rbp + 0x178], rax
mov rax, qword [rbp + 0xac0]
mov qword [rbp + 0x1c0], rax
mov eax, dword [rbp + 0xac8]
mov dword [rbp + 0x60], eax
mov rax, qword [rbp + 0xac0]
mov qword [rbp + 0x180], rax
mov eax, dword [rbp + 0xac8]
mov dword [rbp + 0x5c], eax
mov eax, dword [rbp + 0xac8]
mov dword [rbp + 0x58], eax
mov eax, dword [rbp + 0xac8]
mov dword [rbp + 0x54], eax
mov eax, dword [rbp + 0xac8]
mov dword [rbp + 0x50], eax
mov eax, dword [rbp + 0xac8]
mov dword [rbp + 0x4c], eax
movzx eax, byte [rbp + 0xac8]
mov byte [rsp + 0x6d], al
mov eax, dword [rbp + 0xac8]
mov dword [rbp + 0x44], eax
mov eax, dword [rbp + 0xac8]
mov dword [rbp + 0x6c], eax
mov rax, qword [rbp + 0xac0]
mov qword [rbp + 0x140], rax
mov rax, qword [rbp + 0xac0]
mov qword [rbp + 0x100], rax
mov eax, dword [rbp + 0xac8]
mov dword [rbp + 0x40], edx
mov rdx, qword [rbp + 0xac0]
mov dword [rbp + 0x64], eax
mov rax, qword [rbp + 0xac0]
mov qword [rbp + 0x1b8], rdx
mov edx, dword [rbp + 0xac8]
mov qword [rbp + 0x1d0], rax
mov eax, dword [rbp + 0xac8]
mov dword [rbp + 0x3c], edx
mov rdx, qword [rbp + 0xac0]
mov dword [rbp + 0x68], eax
mov rax, qword [rbp + 0xac0]
mov qword [rbp + 0x190], rdx
mov edx, dword [rbp + 0xac8]
mov qword [rbp + 0x208], rax
mov qword [rbp + 0xe0], rbx
mov qword [rbp - 0x18], r13
mov qword [rbp + 0x200], r11
mov byte [rsp + 0x75], dil
mov byte [rsp + 0x74], sil
mov qword [rbp - 0x80], rcx
mov dword [rbp + 0x28], edx
mov edx, dword [rbp + 0xac8]
movaps xmm6, xmm8
mov r9, qword [rbp + 0xac0]
movzx r12d, byte [rbp + 0xac8]
movzx r8d, byte [rbp + 0xac8]
mov r10, qword [rbp + 0xac0]
mov r15, qword [rbp + 0xac0]
mov r14d, dword [rbp + 0xac8]
mov dword [rbp + 0x2c], edx
mov edx, dword [rbp + 0xac8]
mov dword [rbp + 0x84], edx
mov edx, dword [rbp + 0xac8]
mov dword [rbp + 0x20], edx
mov edx, dword [rbp + 0xac8]
mov dword [rbp + 0x24], edx
movzx edx, byte [rbp + 0xac8]
mov byte [rsp + 0x71], dl
movzx edx, word [rbp + 0xac8]
mov dword [rbp - 8], edx
mov rdx, qword [rbp + 0xac0]
mov qword [rbp + 0x1b0], rdx
mov edx, dword [rbp + 0xac8]
mov dword [rbp + 0x30], edx
mov rdx, qword [rbp + 0xac0]
mov qword [rbp + 0x1a8], rdx
movzx edx, byte [rbp + 0xac8]
mov byte [rsp + 0x6f], dl
movzx edx, byte [rbp + 0xac8]
mov byte [rsp + 0x6e], dl
mov rdx, qword [rbp + 0xac0]
mov qword [rbp + 0x1c8], rdx
mov edx, dword [rbp + 0xac8]
mov dword [rbp + 0x80], edx
movzx edx, byte [rbp + 0xac8]
mov dword [rbp - 0x2c], edx
mov rdx, qword [rbp + 0xac0]
mov qword [rbp + 0x228], rdx
movzx edx, byte [rbp + 0xac8]
mov byte [rsp + 0x72], dl
mov rdx, qword [rbp + 0xac0]
mov qword [rbp + 0x148], rdx
mov rdx, qword [rbp + 0x108]
mov qword [rbp + 0x378], rdx
mov edx, dword [rbp - 4]
mov dword [rbp + 0x2d4], edx
mov rdx, qword [rbp + 0x138]
mov qword [rbp + 0x380], rdx
movzx edx, byte [rsp + 0x70]
mov byte [rbp], dl
mov edx, dword [rbp + 0x38]
mov dword [rbp + 0x30c], edx
mov edx, dword [rbp + 0x34]
mov dword [rbp + 0xe8], edx
mov edx, dword [rbp + 0x70]
mov dword [rbp + 0xec], edx
mov rdx, qword [rbp + 0x188]
mov qword [rbp + 0x2f0], rdx
mov edx, dword [rbp + 0x48]
mov dword [rbp + 0xf0], edx
mov rdx, qword [rbp + 0x178]
mov qword [rbp + 0x240], rdx
mov rdx, qword [rbp + 0x1c0]
mov qword [rbp + 0x2e0], rdx
mov edx, dword [rbp + 0x60]
mov dword [rbp + 0xf4], edx
mov rdx, qword [rbp + 0x180]
mov qword [rbp + 0x370], rbx
mov rbx, r13
mov qword [rbp + 0x2d8], rdx
mov edx, dword [rbp + 0x5c]
mov dword [rbp + 0xf8], edx
mov qword [rbp + 0x1f8], r9
mov byte [rsp + 0x6c], r12b
mov byte [rsp + 0x73], r8b
mov qword [rbp + 0x130], r10
mov qword [rbp + 0x1a0], r15
mov qword [rbp + 0x198], r14
mov qword [rbp + 0x158], rbx
mov qword [rbp + 0x248], r11
mov byte [rbp - 0x28], dil
mov byte [rbp - 9], sil
mov edx, dword [rbp + 0x58]
mov rsi, rax
mov qword [rbp + 0x350], rax
mov rdi, rcx
mov eax, dword [rbp + 0x40]
mov word [rbp + 0x128], ax
mov rax, qword [rbp + 0x1b8]
mov qword [rbp + 0x3c0], rax
mov eax, dword [rbp + 0x3c]
mov dword [rbp + 0x2b8], eax
mov rax, qword [rbp + 0x190]
mov qword [rbp + 0x3b0], rax
mov eax, dword [rbp + 0x28]
mov dword [rbp + 0x318], eax
mov eax, dword [rbp + 0x2c]
mov dword [rbp + 0x2bc], eax
mov eax, dword [rbp + 0x84]
mov dword [rbp + 0x2f8], eax
mov eax, dword [rbp + 0x20]
mov dword [rbp + 0x2fc], eax
mov eax, dword [rbp + 0x24]
mov dword [rbp + 0x300], eax
movzx eax, byte [rsp + 0x71]
mov byte [rbp - 0xb], al
mov eax, dword [rbp - 8]
mov word [rbp + 0x12a], ax
mov rax, qword [rbp + 0x1b0]
mov qword [rbp + 0x3a0], rax
mov eax, dword [rbp + 0x30]
mov dword [rbp + 0x304], eax
mov rax, qword [rbp + 0x1a8]
mov qword [rbp + 0x348], rcx
mov ecx, dword [rbp + 0x44]
mov qword [rbp + 0x398], rax
movzx eax, byte [rsp + 0x6f]
mov dword [rbp + 0x2cc], ecx
mov rcx, qword [rbp + 0x140]
mov byte [rbp - 0xe], al
movzx eax, byte [rsp + 0x6e]
mov qword [rbp + 0x320], rcx
mov rcx, qword [rbp + 0x100]
mov dword [rbp + 0x170], edx
mov edx, dword [rbp + 0x54]
mov byte [rbp - 0xf], al
mov rax, qword [rbp + 0x1c8]
mov dword [rbp + 0x120], edx
mov edx, dword [rbp + 0x50]
mov qword [rbp + 0x358], rcx
mov ecx, dword [rbp + 0x64]
mov qword [rbp + 0x3e8], rax
mov eax, dword [rbp + 0x80]
mov dword [rbp + 0x2e8], edx
mov edx, dword [rbp + 0x4c]
mov dword [rbp + 0x2c4], ecx
mov rcx, qword [rbp + 0x1d0]
mov dword [rbp + 0x308], eax
mov eax, dword [rbp - 0x2c]
mov dword [rbp + 0x2d0], edx
movzx edx, byte [rsp + 0x6d]
mov qword [rbp + 0x3d0], rcx
mov ecx, dword [rbp + 0x68]
mov dword [rbp + 0x2ec], r14d
mov r14, qword [rbp + 0x148]
mov byte [rbp - 0x10], al
movzx eax, byte [rsp + 0x72]
mov byte [rbp - 0xa], dl
mov edx, dword [rbp + 0x6c]
mov dword [rbp + 0x2c0], ecx
lea rcx, [rbp + 0x3f0]
mov qword [rbp + 0x388], r14
xor r14d, r14d
mov byte [rbp + 1], al
mov dword [rbp + 0x2c8], edx
mov qword [rbp + 0x3a8], r9
mov byte [rbp - 0xc], r12b
mov byte [rbp - 0xd], r8b
mov qword [rbp + 0x390], r10
mov qword [rbp + 0x3e0], r15
call fcn.180053800
lea rcx, [rbp + 0x3f0]
call fcn.1800515e0
mov r11d, dword [rbp + 0xac8]
lea rdx, [r14 - 1]
mov r15d, dword [rbp - 0x20]
lea ecx, [rdx + 2]
movsd xmm9, qword [0x1800948e0]
lea r10d, [r14 + 7]
mov r8d, 6
mov dword [rbp - 0x74], r11d
lea eax, [r11 + 0x10]
mov dword [rbp + 0x260], VarR8FromCy
mov dword [rbp - 0x70], eax
xorps xmm7, xmm7
mov qword [rbp + 0x110], r8
lea r12d, [r14 + 0xa]
mov dword [rsp + 0x78], r15d
lea r9d, [r14 + 5]
cmp r11d, eax
jae 0x18003d2d9
mov rcx, qword [rbp + 0xac0]
mov eax, dword [rbp + 0xac8]
mov r8d, dword [rbp + 0xac8]
mov r11, qword [rbp + 0xac0]
mov edx, dword [rbp + 0xac8]
movzx r9d, byte [rbp + 0xac8]
mov r10d, dword [rbp + 0xac8]
mov dword [rbp + 0x1e0], eax
mov eax, dword [rbp + 0xac8]
mov dword [rbp + 0x1dc], eax
mov rax, qword [rbp + 0xac0]
mov qword [rbp + 0x2b0], rax
mov rax, qword [rbp + 0xac0]
mov qword [rbp + 0x150], rax
mov eax, dword [rbp + 0xac8]
mov dword [rbp + 0x1e8], eax
mov eax, dword [rbp + 0xac8]
mov dword [rbp + 0x1ec], eax
mov eax, dword [rbp + 0xac8]
mov dword [rbp + 0x1e4], eax
mov rax, qword [rbp + 0xac0]
mov qword [rbp + 0x330], rax
mov eax, dword [rbp + 0xac8]
mov dword [rbp + 0x210], eax
mov eax, dword [rbp + 0xac8]
mov dword [rbp + 0x214], eax
mov qword [rbp + 0x230], rcx
movzx ecx, byte [rbp + 0xac8]
mov dword [rbp + 0x1d8], ecx
mov ecx, dword [rbp + 0xac8]
mov dword [rbp + 0x25c], r8d
movzx r8d, byte [rbp + 0xac8]
mov byte [rbp + 0xac0], r8b
mov rax, qword [rbp + 0xac0]
mov qword [rbp + 0x338], rax
movzx eax, byte [rbp + 0xac8]
mov byte [rbp - 0x78], al
mov eax, dword [rbp + 0xac8]
mov dword [rbp + 0x250], eax
mov eax, dword [rbp + 0xac8]
mov dword [rbp + 0x218], eax
movzx eax, byte [rbp + 0xac8]
mov byte [rbp - 0x77], al
mov rax, qword [rbp + 0xac0]
mov qword [rbp + 0x340], rax
mov eax, dword [rbp + 0xac8]
mov dword [rbp + 0x254], eax
mov rax, qword [rbp + 0xac0]
mov qword [rbp + 0x238], rax
mov eax, dword [rbp + 0xac8]
mov dword [rbp + 0xd8], edx
mov rdx, qword [rbp + 0xac0]
mov dword [rbp + 0x258], eax
mov eax, dword [rbp - 0x74]
mov dword [rbp + 0x1f0], ecx
mov ecx, dword [rbp - 0x70]
mov qword [rbp + 0xa0], r11
mov dword [rbp - 0x30], r9d
mov dword [rbp - 0x24], r10d
mov qword [rbp + 0x18], rdx
nop
add eax, 0xffffff70
cmp eax, 0x57
ja case.default.0x18003b41e
lea rcx, [0x180000000]
movzx eax, byte [rcx + rax + 0x410a8]
mov ecx, dword [rcx + rax*4 + 0x41068]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov rcx, qword [rbp + 0xab0]
test rcx, rcx
jne 0x18003b45b
lea r9, [rbp + 0x78]
mov dword [rbp + 0x78], r14d
mov r8d, 0x8c
lea rdx, [0x18008f048]
lea rcx, str._bnafarroa_b
call fcn.1800064b0
mov r11, qword [rbp + 0xa0]
mov rcx, qword [rbp + 0xab0]
mov eax, r14d
lea r10, [0x1800a0eb0]
mov rdx, qword [r10]
test rdx, rdx
je 0x18003b49e
mov r9, rcx
sub r9, rdx
nop dword [rax]
nop word [rax + rax]
movzx r8d, byte [rdx]
movzx ecx, byte [rdx + r9]
sub r8d, ecx
jne 0x18003b495
inc rdx
test ecx, ecx
jne 0x18003b480
test r8d, r8d
je 0x18003d236
mov rcx, qword [rbp + 0xab0]
inc eax
sub r10, 0xffffffffffffff80
cmp eax, 0x20
jl 0x18003b465
mov rdx, qword [rbp + 0x18]
jmp case.0x18003b41e.159
mov rax, qword [rbp + 0xab0]
mov eax, dword [rax]
cmp eax, 0x1b
ja case.default.0x18003b4e3
lea rcx, [0x180000000]
mov ecx, dword [rcx + rax*4 + 0x41100]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov edx, 7
mov dword [rsp + 0x68], edx
nop
cmp edx, 7
ja case.default.0x18003b50d
lea r8, [0x180000000]
mov eax, edx
mov ecx, dword [r8 + rax*4 + 0x41170]
add rcx, r8
jmp rcx
mov dword [rbp + 0x1e0], r14d
mov dword [rbp + 0x1dc], r14d
jmp case.default.0x18003b50d
mov rax, qword [rbp + 0x2b0]
test rax, rax
je 0x18003b549
mov rcx, qword [rbp + 0x150]
mov rdx, rax
call qword [sym.imp.USER32.dll_ReleaseDC]
mov edx, dword [rsp + 0x68]
mov qword [rbp + 0x2b0], r14
mov dword [rbp + 0x1e8], r14d
jmp case.default.0x18003b50d
mov rcx, r14
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov qword [rbp + 0x150], rax
jmp 0x18003b5e3
mov dword [rbp + 0x1e4], r14d
jmp case.default.0x18003b50d
mov eax, dword [rbp + 0x1dc]
mov r9d, dword [rbp + 0x1ec]
mov r8d, dword [rbp + 0x1e4]
mov edx, dword [rbp + 0x1e8]
mov rcx, qword [rbp + 0x2b0]
mov dword [rsp + 0x50], r14d
mov dword [rsp + 0x48], 0x14
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], eax
mov eax, dword [rbp + 0x1e0]
mov dword [rsp + 0x30], eax
mov rax, qword [rbp + 0xac0]
mov qword [rsp + 0x28], rax
mov eax, dword [rbp + 0xac8]
mov dword [rsp + 0x20], eax
call qword [sym.imp.MSIMG32.dll_AlphaBlend]
jmp 0x18003b5e3
mov rcx, qword [rbp + 0x150]
call qword [sym.imp.USER32.dll_GetDC]
mov qword [rbp + 0x2b0], rax
mov edx, dword [rsp + 0x68]
dec edx
mov dword [rsp + 0x68], edx
lea eax, [rdx + 0x6b]
cmp eax, 0x6a
ja 0x18003b4f0
jmp 0x18003c433
mov dword [rbp + 0x1ec], r12d
jmp 0x18003c341
mov ecx, 0xd5
nop
cmp ecx, 0xd3
jbe case.0x18003b4e3.11
mov eax, ecx
sub eax, 0xd4
je case.0x18003b4e3.0
cmp eax, 1
je 0x18003d341
dec ecx
jmp 0x18003b610
mov ecx, 0x70
nop dword [rax + rax]
cmp ecx, 0x72
jae case.0x18003b4e3.15
mov eax, ecx
sub eax, 0x70
je 0x18003db2e
cmp eax, 1
je 0x18003b65d
inc ecx
jmp 0x18003b640
mov rcx, qword [rbp + 0xac0]
lea rdx, [rbp + 0x88]
call qword [sym.imp.ole32.dll_ReadClassStg]
jmp case.0x18003b50d.0
mov ecx, 0x90
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x90
je 0x18003dba5
cmp eax, 1
je 0x18003b6d9
inc ecx
cmp ecx, 0x92
jb 0x18003b680
mov edx, r14d
lea eax, [rdx + 0x40]
mov dword [rsp + 0x68], edx
cmp eax, 0x80
jae case.0x18003b4e3.24
cmp edx, 0x38
ja case.0x18003b6d7.1
lea r8, [0x180000000]
mov eax, edx
movzx eax, byte [r8 + rax + 0x411b4]
mov ecx, dword [r8 + rax*4 + 0x41190]
add rcx, r8
jmp rcx
mov rcx, qword [rbp + 0xac0]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov ecx, dword [rbp + 0x1d8]
test eax, eax
movzx ecx, cl
cmove ecx, r14d
mov dword [rbp + 0x1d8], ecx
test cl, cl
je case.0x18003b50d.0
mov r14, qword [rbp + 0xac0]
mov eax, 0x99
mov dword [rsp + 0x68], eax
cmp eax, 0x99
je 0x18003b74f
cmp eax, 0x126
je 0x18003b73c
cmp eax, 0x1b3
jne 0x18003b767
mov rcx, r14
call qword [sym.imp.dbghelp.dll_SymCleanup]
mov eax, dword [rsp + 0x68]
jmp 0x18003b767
lea rdx, [rbp - 0x68]
mov rcx, r14
call qword [sym.imp.dbghelp.dll_SymGetLineNext64]
mov eax, dword [rsp + 0x68]
jmp 0x18003b767
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rbp - 0x68], xmm0
mov dword [rbp - 0x68], 0x28
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], rcx
add eax, 0x8d
mov dword [rsp + 0x68], eax
cmp eax, 0x240
jb 0x18003b718
xor r14d, r14d
jmp case.0x18003b50d.0
mov eax, VarR8FromCy
add edx, 8
mov word [rbp + 0x160], ax
mov eax, 0x61
mov word [rbp + 0x161], ax
mov dword [rbp + 0x162], 0x46656d
jmp 0x18003b69f
movzx eax, word [0x180092380]
add edx, 8
mov word [rbp - 0x63], ax
movzx eax, byte [0x180092382]
mov byte [rbp - 0x61], al
jmp 0x18003b69f
lea rdx, str.Path
mov byte [rbp - 0x68], 0
lea rcx, [rbp - 0x68]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
mov r8d, 2
lea rdx, [0x18009238c]
lea rcx, [rbp - 0x64]
call fcn.1800650e0
mov edx, dword [rsp + 0x68]
add edx, 8
jmp 0x18003b69f
mov eax, VarCyFromDate
add edx, 8
mov word [rbp + 0x167], ax
mov eax, VarR4FromUI1
mov word [rbp + 0x168], ax
jmp 0x18003b69f
lea rdx, str.reSymbolFilesA
lea rcx, [rbp - 0x61]
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
movzx eax, word [0x1800923a0]
lea rdx, [0x1800923a4]
mov word [rbp - 0x53], ax
lea rcx, [rbp - 0x51]
movzx eax, byte [0x1800923a2]
mov r8d, 3
mov byte [rbp - 0x51], al
call fcn.1800650e0
mov edx, dword [rsp + 0x68]
mov eax, VarCyFromDate
mov word [rbp - 0x4f], ax
add edx, 8
jmp 0x18003b69f
mov eax, 0x6c69
mov word [rbp + 0x165], ax
add edx, 8
jmp 0x18003b69f
xor r9d, r9d
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0x410]
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x160]
call qword [sym.imp.dbghelp.dll_FindExecutableImageEx]
mov r10d, dword [rbp - 0x24]
movzx r8d, byte [rbp + 0xac0]
mov r9d, dword [rbp - 0x30]
mov eax, 0xfd
cmp eax, 0xfd
je 0x18003b8d9
cmp eax, 0x9832
jne 0x18003c11b
mov eax, 1
mov r12d, eax
mov r15d, eax
jmp case.0x18004013d.132
movsx eax, byte [r14]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x18003b906.23
lea r11, [0x180000000]
cdqe
movzx eax, byte [r11 + rax + 0x4122c]
mov ecx, dword [r11 + rax*4 + 0x411f0]
add rcx, r11
jmp rcx
mov rax, qword [rbp + 0xab0]
mov qword [rax], 1
jmp case.0x18003b906.9
mov rax, qword [rbp + 0xab8]
mov rax, qword [rax]
test rax, rax
je 0x18003b92c
call rax
mov rax, qword [rbp + 0xab0]
mov dword [rax], 0x19
jmp case.0x18003b906.9
mov rax, qword [rbp + 0xab8]
cmp qword [rax + 8], 0
je 0x18003b9ed
mov r13, qword [rbp + 0x330]
mov eax, 0x109
mov rbx, qword [rbp + 0xab8]
mov dword [rsp + 0x68], eax
cmp eax, 0x109
je 0x18003b9ad
cmp eax, 0x2332
je 0x18003b985
cmp eax, 0x455b
jne 0x18003b9cb
call qword [rbx + 8]
mov r9d, dword [rbp - 0x30]
jmp 0x18003b9c7
test r9b, r9b
je 0x18003b9cb
mov r9d, 4
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0x310]
xor edx, edx
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_HeapQueryInformation]
mov r9d, dword [rbp - 0x30]
jmp 0x18003b9c7
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r13, rax
mov al, 1
test r13, r13
movzx r9d, al
cmove r9d, r14d
mov dword [rbp - 0x30], r9d
mov eax, dword [rsp + 0x68]
add eax, 0x2229
mov dword [rsp + 0x68], eax
cmp eax, 0x667b
jbe 0x18003b967
mov rbx, qword [rbp + 0x158]
mov qword [rbp + 0x330], r13
mov r13, qword [rbp - 0x18]
mov rax, qword [rbp + 0xab0]
mov dword [rax], 0x1a
jmp case.0x18003b906.9
mov rax, qword [rbp + 0xab8]
mov rax, qword [rax + 0x10]
test rax, rax
je case.0x18003b906.9
call rax
jmp case.0x18003b906.9
mov rax, qword [rbp + 0xab8]
mov rax, qword [rax + 0x18]
test rax, rax
je 0x18003b9ed
call rax
mov rax, qword [rbp + 0xab0]
mov dword [rax], 0x1a
jmp case.0x18003b906.9
mov edx, r14d
mov dword [rsp + 0x68], edx
cmp edx, 5
ja case.default.0x18003ba5b
mov eax, edx
mov ecx, dword [r11 + rax*4 + 0x412a4]
add rcx, r11
jmp rcx
movzx eax, r8b
test r10d, r10d
mov ecx, r14d
cmovne ecx, eax
movzx r8d, cl
mov byte [rbp + 0xac0], cl
jmp case.default.0x18003ba5b
mov eax, VarCyFromDate
mov dword [rbp + 8], 0x6d614e
mov word [rbp + 0xb], ax
jmp case.default.0x18003ba5b
mov eax, VarCyFromDate
mov word [rbp + 0x11], ax
jmp case.default.0x18003ba5b
mov eax, VarR4FromCy
mov word [rbp + 0xc], ax
mov eax, VarCyFromDate
mov dword [rbp + 0xd], 0x697665
mov word [rbp + 0x10], ax
jmp case.default.0x18003ba5b
mov rax, qword [rbp + 0xab0]
lea rcx, [rbp + 8]
mov byte [rbp + 0xac0], 1
mov dword [rax], 7
call qword [sym.imp.WINMM.dll_mciGetDeviceIDA]
mov edx, dword [rsp + 0x68]
lea r11, [0x180000000]
mov r10d, eax
mov dword [rbp - 0x24], eax
mov r8b, 1
inc edx
mov dword [rsp + 0x68], edx
lea eax, [rdx + 0xc2]
cmp eax, 0xc8
jb 0x18003ba45
mov eax, 0xf9
mov dword [rsp + 0x68], eax
sub eax, 0xf9
je 0x18003bc45
sub eax, 1
je 0x18003bc2f
sub eax, 1
je 0x18003bc1a
cmp eax, 1
je case.0x18003b906.9
jmp 0x18003bc4c
test r8b, r8b
je case.0x18003b906.9
mov ebx, dword [rbp + 0x210]
mov r13d, 0xd1
mov edi, dword [rbp + 0x1f0]
nop word [rax + rax]
mov eax, r13d
sub eax, 0xd1
je 0x18003bbdd
sub eax, 0x53
je 0x18003bba9
sub eax, 0x53
je 0x18003bb91
cmp eax, 0x53
jne 0x18003bbe2
test r8b, r8b
je 0x18003bbe2
mov r8d, 0x104
lea rdx, [rbp + 0x410]
mov ecx, ebx
call qword [sym.imp.WINMM.dll_mciGetErrorStringA]
movzx r8d, byte [rbp + 0xac0]
jmp 0x18003bbe2
movzx eax, r8b
test ebx, ebx
mov ecx, r14d
cmovne ecx, eax
movzx r8d, cl
mov byte [rbp + 0xac0], cl
jmp 0x18003bbe2
xor eax, eax
lea r9, [rbp - 0x68]
xorps xmm0, xmm0
mov r9d, r9d
mov r8d, 0x400
mov qword [rbp - 0x58], rax
mov edx, edi
mov dword [rbp - 0x50], eax
mov ecx, r10d
movups xmmword [rbp - 0x68], xmm0
call qword [sym.imp.WINMM.dll_mciSendCommandA]
movzx r8d, byte [rbp + 0xac0]
mov ebx, eax
jmp 0x18003bbe2
mov edi, 0x810
mov r10d, dword [rbp - 0x24]
add r13d, 0x53
cmp r13d, 0x21d
jb 0x18003bb50
mov r13, qword [rbp - 0x18]
mov dword [rbp + 0x1f0], edi
mov rdi, qword [rbp + 0x348]
mov dword [rbp + 0x210], ebx
mov rbx, qword [rbp + 0x158]
jmp case.0x18003b906.9
mov edx, dword [rbp + 0x214]
mov rcx, qword [rbp + 0x338]
call qword [sym.imp.IMM32.dll_ImmGetProperty]
jmp 0x18003bc4c
mov rax, qword [rbp + 0xab0]
mov dword [rbp + 0x214], 4
mov dword [rax], r12d
jmp 0x18003bc4c
mov qword [rbp + 0x338], r14
mov eax, dword [rsp + 0x68]
inc eax
mov dword [rsp + 0x68], eax
cmp eax, 0xfd
jb 0x18003bb00
mov eax, VarR8FromCy
cmp eax, 0x4e
je 0x18003bc92
add eax, 0xb0
cmp eax, 0xfe
jb 0x18003bc66
mov rax, qword [rbp + 0xab8]
mov rax, qword [rax + 0x48]
test rax, rax
je case.0x18003b906.9
call rax
jmp case.0x18003b906.9
mov rax, qword [rbp + 0xab0]
mov esi, 0x25
mov r14d, reloc.OLEAUT32.dll_VarFormatDateTime
mov dword [rax], SafeArrayGetDim
lea r13d, [rsi - 0x1e]
nop
mov eax, r14d
sub eax, 0x60
je 0x18003bd47
sub eax, 1
je 0x18003bd13
sub eax, 1
je 0x18003bcee
cmp eax, 1
jne 0x18003bda0
mov r8, qword [sym.imp.WINMM.dll_midiOutSetVolume]
lea rdx, [rbp + 0xa8]
lea rcx, [rbp + 0x410]
call fcn.180001170
jmp 0x18003bda0
mov r8d, 2
mov word [rbp + 0xb9], si
lea rdx, [0x180091cd8]
lea rcx, [rbp + 0xba]
call fcn.1800650e0
jmp 0x18003bda0
mov r8d, 2
lea rdx, [0x18008f568]
lea rcx, [rbp + 0xb4]
call fcn.1800650e0
mov eax, dword [str.ume]
mov dword [rbp + 0xb5], eax
movzx eax, byte [0x1800923b0]
mov byte [rbp + 0xb9], al
jmp 0x18003bda0
movzx eax, word [0x1800923b4]
lea rdx, [0x18008fb98]
mov word [rbp + 0xa8], ax
lea rcx, [rbp + 0xa8]
movzx eax, byte [0x1800923b6]
mov byte [rbp + 0xaa], al
call qword [sym.imp.KERNEL32.dll_lstrcatA]
mov r8, r13
lea rdx, str.OutSet
lea rcx, [rbp + 0xac]
call fcn.1800650e0
lea rdx, [0x1800923c0]
lea rcx, [rbp + 0xa8]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
inc r14d
cmp r14d, 0x64
jb 0x18003bcb0
mov rsi, qword [rbp + 0x350]
xor r14d, r14d
mov r13, qword [rbp - 0x18]
jmp case.0x18003b906.9
mov rax, qword [rbp + 0xab8]
mov rax, qword [rax + 0x50]
test rax, rax
je 0x18003bdd2
call rax
mov rax, qword [rbp + 0xab0]
mov dword [rax], 0x1b
jmp case.0x18003b906.9
mov eax, 0x101
mov dword [rsp + 0x68], eax
nop dword [rax]
sub eax, 0x100
je case.0x18003b906.9
cmp eax, 1
jne 0x18003be93
mov rax, qword [rbp + 0xab0]
lea rcx, [rbp + 0x118]
mov qword [rsp + 0x58], r14
mov r9d, 0xdc
mov qword [rsp + 0x50], r14
xor r8d, r8d
mov qword [rsp + 0x48], r14
xor edx, edx
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
mov qword [rax], 0x11
mov qword [rbp + 0x118], 5
call fcn.1800054a0
mov rcx, qword [rbp + 0xab0]
mov qword [rcx + 8], rax
test rax, rax
je 0x18003cbb5
lea r9, [rsp + 0x60]
mov byte [rsp + 0x60], 0x30
mov r8d, 0xea
mov rdx, rax
xor ecx, ecx
call fcn.180028780
cmp eax, 1
jne 0x18003cbb5
mov eax, dword [rsp + 0x68]
dec eax
mov dword [rsp + 0x68], eax
cmp eax, 0xff
ja 0x18003bdf0
lea r11, [0x180000000]
mov edx, 9
mov dword [rsp + 0x68], edx
nop dword [rax + rax]
cmp edx, 9
ja case.default.0x18003bed6
mov eax, edx
mov ecx, dword [r11 + rax*4 + 0x412bc]
add rcx, r11
jmp rcx
mov eax, VarR4FromCy
mov word [rbp - 0x56], ax
jmp case.default.0x18003bed6
mov rax, qword [rbp + 0xab0]
mov word [rbp - 0x46], r14w
mov byte [rbp - 0x78], 1
mov dword [rax + 4], r14d
jmp case.default.0x18003bed6
mov dword [rbp - 0x68], 0x4b0048
mov dword [rbp - 0x64], 0x590045
jmp case.default.0x18003bed6
mov eax, 0x52
mov dword [rbp - 0x60], 0x43005f
mov word [rbp - 0x58], ax
mov dword [rbp - 0x5c], 0x520055
jmp case.default.0x18003bed6
cmp dword [rbp + 0x250], 0
mov ecx, r14d
movzx eax, byte [rbp - 0x78]
cmove ecx, eax
mov byte [rbp - 0x78], cl
test cl, cl
je case.default.0x18003bed6
mov rcx, qword [rbp + 0x368]
call qword [sym.imp.SHLWAPI.dll_SHRegCloseUSKey]
mov edx, dword [rsp + 0x68]
jmp case.default.0x18003bed6
mov eax, VarR8FromCy
mov dword [rbp - 0x52], 0x5f0054
mov word [rbp - 0x54], ax
jmp case.default.0x18003bed6
mov rax, qword [rbp + 0xab0]
mov dword [rbp + 0x218], 0xf003f
mov dword [rax], 0x18
jmp case.default.0x18003bed6
mov qword [rsp + 0x58], r14
lea rcx, [rbp + 0x118]
mov qword [rsp + 0x50], r14
mov r9d, 0xdc
mov qword [rsp + 0x48], r14
xor r8d, r8d
mov qword [rsp + 0x40], r14
xor edx, edx
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
mov qword [rbp + 0x118], 5
call fcn.1800054a0
mov rcx, qword [rbp + 0xab0]
mov qword [rcx + 8], rax
test rax, rax
je 0x18003cbb5
mov edx, dword [rbp + 0x218]
lea r9, [rbp + 0x368]
xor r8d, r8d
mov dword [rsp + 0x20], r14d
lea rcx, [rbp - 0x68]
call qword [sym.imp.SHLWAPI.dll_SHRegCreateUSKeyW]
mov dword [rbp + 0x250], eax
lea r9, [rsp + 0x60]
movzx eax, byte [r14]
mov r8d, 0xea
mov byte [rsp + 0x60], al
xor ecx, ecx
mov rax, qword [rbp + 0xab0]
mov rdx, qword [rax + 8]
call fcn.180028780
cmp eax, 1
jne 0x18003cbb5
mov edx, dword [rsp + 0x68]
jmp case.default.0x18003bed6
mov dword [rbp - 0x4e], 0x530055
mov dword [rbp - 0x4a], 0x520045
dec edx
lea r11, [0x180000000]
mov dword [rsp + 0x68], edx
lea eax, [rdx + 0x6e]
cmp eax, 0x6d
ja 0x18003bec0
mov eax, 0xe3
cmp eax, 0x201
jae case.0x18003b906.23
cmp eax, 0xe3
je 0x18003c153
cmp eax, 0x172
jne 0x18003c165
mov qword [rsp + 0x58], r14
lea rcx, [rbp + 0x118]
mov qword [rsp + 0x50], r14
mov r9d, 0xdc
mov qword [rsp + 0x48], r14
xor r8d, r8d
mov qword [rsp + 0x40], r14
xor edx, edx
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
mov qword [rbp + 0x118], 5
call fcn.1800054a0
mov rcx, qword [rbp + 0xab0]
mov qword [rcx + 8], rax
test rax, rax
je 0x18003cbb5
lea r9, [rsp + 0x60]
mov byte [rsp + 0x60], 0x2d
mov r8d, 0xea
mov rdx, rax
xor ecx, ecx
call fcn.180028780
cmp eax, 1
jne 0x18003cbb5
mov eax, 0xfd
mov r10d, dword [rbp - 0x24]
add eax, 0x9735
movzx r8d, byte [rbp + 0xac0]
mov r9d, dword [rbp - 0x30]
cmp eax, 0x12e6a
jbe 0x18003b8b7
mov rdx, qword [rbp + 0x18]
mov eax, 0xb3
mov r11, qword [rbp + 0xa0]
mov ecx, dword [rbp - 0x70]
jmp 0x18003cb93
mov rcx, qword [rbp + 0xab0]
mov qword [rcx], 0x17
mov qword [rcx + 8], r14
add eax, 0x8f
jmp 0x18003c074
mov dword [rbp - 0x74], 0xb5
mov ecx, VarI2FromDisp
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x35
je 0x18003c19b
cmp eax, 1
jne 0x18003c316
mov r12d, eax
mov r15d, eax
jmp case.0x18004013d.132
movsx eax, byte [r14]
add eax, 0xffffffde
cmp eax, 0x53
ja case.0x18003c1c6.36
lea rdx, [0x180000000]
cdqe
movzx eax, byte [rdx + rax + 0x412f0]
mov ecx, dword [rdx + rax*4 + 0x412e4]
add rcx, rdx
jmp rcx
mov rcx, qword [rbp + 0xab0]
cmp dword [rcx + 4], 0
jne 0x18003c311
mov r8, qword [rcx + 8]
mov r9d, 0x52
xor ecx, ecx
xor edx, edx
call fcn.1800165a0
cmp rax, 0xfffffffffffffffe
jae 0x18003c225
movzx eax, byte [r14]
lea r9, [rsp + 0x60]
mov byte [rsp + 0x60], al
mov r8d, 0xea
mov rax, qword [rbp + 0xab0]
xor ecx, ecx
mov rdx, qword [rax + 8]
call fcn.180028780
cmp eax, 1
jne 0x18003c2c4
jmp 0x18003c311
mov rcx, qword [rbp + 0xab0]
mov dword [rcx + 4], 1
jmp 0x18003c311
mov rax, qword [rbp + 0xab0]
cmp dword [rax + 4], 0
jne 0x18003c30b
mov r8, qword [rax + 8]
mov r9d, 0x52
xor edx, edx
xor ecx, ecx
call fcn.1800165a0
cmp rax, 0xfffffffffffffffa
mov rax, qword [rbp + 0xab0]
jae 0x18003c331
mov rdx, qword [rax + 8]
lea r9, [rsp + 0x60]
mov r8d, 0xea
mov byte [rsp + 0x60], 0x75
xor ecx, ecx
call fcn.180028780
cmp eax, 1
je 0x18003c304
mov ecx, VarR4FromCy
mov eax, ecx
sub eax, 0x46
je 0x18003c2ef
sub eax, 1
je 0x18003c2d4
cmp eax, 1
jne 0x18003c2fd
mov r8d, dword [rbp + 0x25c]
lea r9, [rbp + 0x124]
mov edx, dword [rbp + 0xd8]
mov rcx, qword [rbp + 0x230]
call qword [sym.imp.OLEAUT32.dll_VarI2FromDisp]
mov eax, 6
mov r12d, eax
mov r15d, eax
jmp case.0x18004013d.132
mov dword [rbp + 0xd8], r14d
mov dword [rbp + 0x25c], 0x80000000
mov word [rbp + 0x124], r14w
jmp 0x18003c2fd
lea rax, [0x180092364]
mov qword [rbp + 0x230], rax
inc ecx
cmp ecx, 0x49
jb 0x18003c292
mov rax, qword [rbp + 0xab0]
mov dword [rax], 3
mov ecx, VarI2FromDisp
inc ecx
cmp ecx, 0x37
jb 0x18003c180
mov rdx, qword [rbp + 0x18]
mov r11, qword [rbp + 0xa0]
jmp case.0x18003b41e.159
mov dword [rax + 4], 1
jmp 0x18003c30b
lea r8, [0x180000000]
mov ecx, 0xa1
nop word [rax + rax]
mov eax, ecx
sub eax, 0x9f
je case.0x18003b41e.145
sub eax, 1
je 0x18003c416
cmp eax, 1
jne 0x18003c425
movsx eax, byte [r14]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.0x18003c1c6.36
cdqe
movzx eax, byte [r8 + rax + 0x4134c]
mov ecx, dword [r8 + rax*4 + 0x41344]
add rcx, r8
jmp rcx
mov rax, qword [rbp + 0xab0]
cmp dword [rax + 4], 0
jne 0x18003c409
mov r8, qword [rax + 8]
mov r9d, 0x52
xor edx, edx
xor ecx, ecx
call fcn.1800165a0
cmp rax, 0xfffffffffffffffc
jae 0x18003c3f4
movzx eax, byte [r14]
lea r9, [rsp + 0x60]
mov byte [rsp + 0x60], al
mov r8d, 0xea
mov rax, qword [rbp + 0xab0]
xor ecx, ecx
mov rdx, qword [rax + 8]
call fcn.180028780
cmp eax, 1
jne 0x18003c2c4
mov rax, qword [rbp + 0xab0]
jmp 0x18003c402
mov rax, qword [rbp + 0xab0]
mov dword [rax + 4], 1
lea r8, [0x180000000]
mov dword [rax], 5
mov ecx, 0xa1
jmp 0x18003c425
mov r15d, 1
mov dword [rsp + 0x78], r15d
mov dword [rbp - 0x20], r15d
dec ecx
cmp ecx, 0x9e
ja 0x18003c350
mov r11, qword [rbp + 0xa0]
mov rdx, qword [rbp + 0x18]
mov ecx, dword [rbp - 0x70]
mov eax, 0xb7
jmp 0x18003cb93
mov dword [rbp - 0x74], 0xb4
mov ecx, 0x75
nop word [rax + rax]
mov eax, ecx
sub eax, 0x74
je 0x18003b8c9
cmp eax, 1
jne 0x18003c802
movzx eax, byte [r14]
cmp al, 0x22
je 0x18003c7b1
cmp al, 0x5c
mov rax, qword [rbp + 0xab0]
je 0x18003c749
cmp dword [rax + 4], 0
jne 0x18003c7fd
mov edx, 0xba
mov dword [rsp + 0x68], edx
cmp edx, 0x25c8
ja 0x18003c574
je 0x18003c53c
cmp edx, 0xba
je 0x18003c516
cmp edx, 0xd14
je 0x18003c4dc
cmp edx, 0x196e
jne 0x18003c72e
mov qword [rbp + 0x340], r14
jmp 0x18003c72e
mov r8d, 2
lea rdx, [0x1800923c4]
lea rcx, [rbp - 0x68]
call fcn.180060970
mov eax, dword [0x18008ff4c]
mov dword [rbp - 0x58], 0x6c
mov dword [rbp - 0x56], eax
movzx eax, word [0x18008ff50]
mov word [rbp - 0x52], ax
mov byte [rbp - 0x77], 1
jmp 0x18003c723
mov eax, dword [0x1800923d8]
movsd xmm0, qword [str.NameDi]
mov dword [rbp - 0x60], eax
movzx eax, word [0x1800923dc]
mov word [rbp - 0x5c], ax
movsd qword [rbp - 0x68], xmm0
jmp 0x18003c727
mov rcx, qword [rbp + 0x340]
lea r9, [rbp + 0x220]
lea r8, [rbp + 0x314]
mov dword [rbp + 0x314], r14d
lea rdx, [rbp - 0x68]
mov qword [rbp + 0x220], r14
call qword [sym.imp.urlmon.dll_MkParseDisplayNameEx]
mov dword [rbp + 0x254], eax
jmp 0x18003c723
cmp edx, 0x3222
je 0x18003c6fe
cmp edx, 0x3e7c
jne 0x18003c72e
mov r8, qword [rax + 8]
mov r9d, 0x52
xor edx, edx
xor ecx, ecx
call fcn.1800165a0
cmp rax, 0xfffffffffffffffe
jae 0x18003c6ea
mov r8d, 6
mov edx, r14d
mov dword [rbp + 0x78], edx
mov ebx, 0x4374
mov qword [rbp + 0x118], r8
lea edi, [r8 + 0x65]
lea r14d, [r8 + 0x4f]
lea r12d, [r8 + 0x43]
lea r15d, [r8 + 0x5f]
cmp edx, 5
ja case.default.0x18003c5ee
lea r9, [0x180000000]
mov eax, edx
mov ecx, dword [r9 + rax*4 + 0x41384]
add rcx, r9
jmp rcx
mov eax, 0x6e
mov word [rbp + 0xa8], r12w
mov word [rbp + 0xa9], ax
mov dword [rbp + 0xaa], 0x6e726574
mov word [rbp + 0xae], r15w
jmp case.default.0x18003c5ee
mov word [rbp + 0xb4], di
mov word [rbp + 0xb5], r14w
jmp case.default.0x18003c5ee
mov dword [rbp + 0xb1], 0x636172
jmp case.default.0x18003c5ee
mov dword [rbp + 0xb6], 0x206c72
jmp case.default.0x18003c5ee
mov r8, qword [sym.imp.WININET.dll_InternetCrackUrlA]
lea rdx, [rbp + 0xa8]
lea rcx, [rbp + 0x410]
mov dword [rbp + 0xb9], 0xa7025
call fcn.180001170
mov edx, dword [rbp + 0x78]
mov r8, qword [rbp + 0x118]
jmp case.default.0x18003c5ee
mov word [rbp + 0xaf], bx
inc edx
sub r8, 1
mov dword [rbp + 0x78], edx
mov qword [rbp + 0x118], r8
jne 0x18003c5d1
mov rbx, qword [rbp + 0x158]
lea r9, [rsp + 0x60]
mov rdi, qword [rbp + 0x348]
xor r14d, r14d
mov rsi, qword [rbp + 0x350]
mov r8d, 0xea
mov r15d, dword [rsp + 0x78]
xor ecx, ecx
mov r13, qword [rbp - 0x18]
movzx eax, byte [r14]
lea r12d, [r14 + 0xa]
mov byte [rsp + 0x60], al
mov rax, qword [rbp + 0xab0]
mov rdx, qword [rax + 8]
call fcn.180028780
cmp eax, 1
je 0x18003c723
mov eax, 6
mov r15d, eax
jmp case.0x18004013d.132
mov rax, qword [rbp + 0xab0]
mov edx, dword [rsp + 0x68]
mov dword [rax + 4], 1
jmp 0x18003c72e
cmp dword [rbp + 0x254], 0
mov ecx, r14d
movzx eax, byte [rbp - 0x77]
cmove ecx, eax
mov byte [rbp - 0x77], cl
test cl, cl
je 0x18003c727
mov rcx, qword [rbp + 0x220]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov edx, dword [rsp + 0x68]
mov rax, qword [rbp + 0xab0]
add edx, 0xc5a
mov dword [rsp + 0x68], edx
cmp edx, 0x4a1c
jbe 0x18003c4a2
jmp 0x18003c7fd
cmp dword [rax + 4], 0
jne 0x18003c7a9
mov r8, qword [rax + 8]
mov r9d, 0x52
xor edx, edx
xor ecx, ecx
call fcn.1800165a0
cmp rax, 0xfffffffffffffffd
mov rax, qword [rbp + 0xab0]
jae 0x18003c7a2
mov rdx, qword [rax + 8]
lea r9, [rsp + 0x60]
mov r8d, 0xea
mov byte [rsp + 0x60], VarFormatDateTime
xor ecx, ecx
call fcn.180028780
cmp eax, 1
jne 0x18003cbb5
mov rax, qword [rbp + 0xab0]
mov dword [rax], 2
jmp 0x18003c7fd
mov dword [rax + 4], 1
mov dword [rax], 2
jmp 0x18003c7fd
mov rdx, qword [rbp + 0xab0]
mov rcx, qword [rdx + 8]
test rcx, rcx
je 0x18003d23c
mov rax, qword [rbp + 0xab8]
mov dword [rdx], r14d
mov rax, qword [rax + 0x20]
test rax, rax
je 0x18003c7dd
mov rcx, qword [rcx]
call rax
mov rdx, qword [rbp + 0xab0]
xor r9d, r9d
add rdx, 8
mov dword [rsp + 0x20], 0x54
xor r8d, r8d
xor ecx, ecx
call fcn.1800367c0
mov ecx, 0x75
dec ecx
cmp ecx, 0x73
ja 0x18003c460
mov rdx, qword [rbp + 0x18]
mov r11, qword [rbp + 0xa0]
jmp case.0x18003b41e.159
mov r8d, 0x118
mov eax, r8d
sub eax, 0x118
je 0x18003c84e
sub eax, 1
je 0x18003c83d
cmp eax, 1
je case.0x18004013d.132
jmp 0x18003c886
mov r15d, 1
mov dword [rsp + 0x78], r15d
mov dword [rbp - 0x20], r15d
jmp 0x18003c886
mov rax, qword [rbp + 0xab0]
mov edx, dword [rax]
cmp edx, 2
jl 0x18003d218
mov rax, qword [rax + 0x10]
mov ecx, 1
add rax, 4
nop dword [rax]
cmp dword [rax], 0xfffffff
jne 0x18003d218
inc ecx
add rax, 4
cmp ecx, edx
jl 0x18003c870
inc r8d
cmp r8d, 0x11b
jb 0x18003c823
mov rdx, qword [rbp + 0x18]
mov rax, qword [rbp + 0xab0]
mov qword [rbp + 0x238], rax
jmp case.0x18003b41e.159
mov rax, qword [rbp + 0xab0]
mov rax, qword [rax + 0x10]
sub rax, rdx
cmp rax, r11
jb case.0x18003b41e.159
lea rcx, [rbp - 0x68]
mov qword [rbp - 0x58], r14
mov qword [rbp - 0x50], r14
call fcn.1800515e0
mov eax, 0xa4
mov dword [rsp + 0x68], eax
nop word [rax + rax]
cmp eax, 0xa4
je 0x18003c996
cmp eax, 0x12d
je 0x18003c94e
cmp eax, 0x1b6
jne 0x18003c9ec
mov eax, dword [rbp + 0x258]
xor r9d, r9d
mov qword [rsp + 0x40], r14
xor r8d, r8d
mov dword [rbp + 0x78], eax
xor edx, edx
lea rax, [rbp + 0x78]
mov ecx, 0x82
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x68]
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
call fcn.180012f90
mov rcx, qword [rbp + 0xab8]
lea rdx, [rbp - 0x68]
call fcn.180050bc0
jmp 0x18003c9e8
mov rax, qword [rbp + 0xa0]
lea rcx, [rbp - 0x68]
add qword [rbp + 0x18], rax
call fcn.1800510b0
xor edx, edx
mov rcx, rax
lea r8d, [rdx + 0x10]
call fcn.180062604
mov dword [rbp + 0x258], eax
test eax, eax
jne 0x18003c9e8
lea rcx, [rbp - 0x68]
mov byte [rbp - 0x20], al
call fcn.180051260
mov eax, dword [rbp - 0x20]
mov r15d, eax
mov ecx, eax
mov r10d, eax
jmp 0x180041007
lea rcx, [rbp + 0xa8]
call fcn.180053800
lea rcx, [rbp + 0xa8]
call fcn.1800515e0
mov r9, qword [rbp + 0xa0]
lea rcx, [rbp + 0xa8]
mov r8, qword [rbp + 0x18]
mov rdx, qword [rbp + 0xab0]
call fcn.1800516c0
lea rdx, [rbp + 0xa8]
lea rcx, [rbp - 0x68]
call fcn.1800512c0
lea rcx, [rbp + 0xa8]
call fcn.180051260
mov eax, dword [rsp + 0x68]
add eax, 0x89
mov dword [rsp + 0x68], eax
cmp eax, 0x23f
jb 0x18003c8e0
lea rcx, [rbp - 0x68]
call fcn.180051260
mov rax, qword [rbp + 0xab0]
mov rdx, qword [rbp + 0x18]
mov r11, qword [rbp + 0xa0]
mov rax, qword [rax + 0x10]
sub rax, rdx
cmp rax, r11
jae 0x18003c8c0
jmp case.0x18003b41e.159
mov ecx, reloc.OLEAUT32.dll_VarDecMul
mov eax, ecx
sub eax, 0xb2
je 0x18003ca4c
cmp eax, 0x5e
je 0x180040d79
jmp 0x18003cae9
movsx eax, byte [r14]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.0x18003ca77.49
lea rdx, [0x180000000]
cdqe
movzx eax, byte [rdx + rax + 0x413a4]
mov ecx, dword [rdx + rax*4 + 0x4139c]
add rcx, rdx
jmp rcx
mov r15, qword [rbp + 0xab0]
cmp dword [r15 + 4], 0
jne 0x18003cace
mov r8, qword [r15 + 8]
mov r9d, 0x52
xor edx, edx
xor ecx, ecx
call fcn.1800165a0
cmp rax, 0xfffffffffffffffb
jae 0x18003cac6
mov rdx, qword [r15 + 8]
lea r9, [rsp + 0x60]
mov r8d, 0xea
mov byte [rsp + 0x60], 0x75
xor ecx, ecx
call fcn.180028780
cmp eax, 1
jne 0x180040889
jmp 0x18003cace
mov dword [r15 + 4], 1
mov dword [r15], 4
mov r15d, 1
mov ecx, reloc.OLEAUT32.dll_VarDecMul
mov dword [rsp + 0x78], r15d
mov dword [rbp - 0x20], r15d
add ecx, 0x5e
cmp ecx, 0x16e
jb 0x18003ca35
mov rdx, qword [rbp + 0x18]
mov eax, 0xb6
mov r11, qword [rbp + 0xa0]
mov ecx, dword [rbp - 0x70]
jmp 0x18003cb93
mov r11d, 8
mov rdx, r14
mov qword [rbp + 0xa0], r11
mov qword [rbp + 0x18], rdx
jmp case.0x18003b41e.159
mov rcx, qword [rbp + 0xab0]
mov r9, qword [rbp + 0xab8]
cmp rcx, r9
je 0x18003cb6d
mov r8, rcx
mov rdx, r9
mov ecx, VarI2FromDisp
call fcn.1800029a0
mov r15d, eax
test eax, eax
jne 0x180040d79
mov rdx, qword [rbp + 0x18]
mov r11, qword [rbp + 0xa0]
mov rcx, qword [rbp + 0xab0]
mov r9, qword [rbp + 0xab8]
cmp dword [r9], 0
mov eax, r14d
je 0x18003cb7d
cmp dword [rcx + 8], 0
sete al
mov dword [r9 + 8], eax
mov r15d, r14d
mov dword [rsp + 0x78], r14d
mov dword [rbp - 0x20], r14d
mov ecx, dword [rbp - 0x70]
mov eax, dword [rbp - 0x74]
inc eax
mov dword [rbp - 0x74], eax
cmp eax, ecx
jae 0x18003d2bd
mov r10d, dword [rbp - 0x24]
movzx r8d, byte [rbp + 0xac0]
mov r9d, dword [rbp - 0x30]
jmp 0x18003b3f0
mov eax, 6
mov r12d, eax
mov r15d, eax
jmp case.0x18004013d.132
mov eax, 7
mov r12d, eax
mov r15d, eax
jmp case.0x18004013d.132
mov rcx, qword [rbp + 0x370]
mov eax, 0x89
mov rdx, qword [rbp + 0x378]
mov r8d, dword [rbp + 0x2d4]
mov r9, qword [rbp + 0x380]
movzx r10d, byte [rbp]
mov r11d, dword [rbp + 0x30c]
cmp eax, 0x89
je 0x18003cece
mov r13, qword [rbp + 0x388]
add eax, 0x6f5
mov qword [rbp + 0x148], r13
movzx r13d, byte [rbp + 1]
mov byte [rsp + 0x72], r13b
mov r13, qword [rbp + 0x228]
movzx r13d, byte [rbp - 0x10]
mov dword [rbp - 0x2c], r13d
mov r13d, dword [rbp + 0x308]
mov dword [rbp + 0x80], r13d
mov r13, qword [rbp + 0x3e8]
mov qword [rbp + 0x1c8], r13
movzx r13d, byte [rbp - 0xf]
mov byte [rsp + 0x6e], r13b
movzx r13d, byte [rbp - 0xe]
mov byte [rsp + 0x6f], r13b
mov r13d, dword [rbp + 0x2ec]
mov qword [rbp + 0x198], r13
mov r13, qword [rbp + 0x3e0]
mov qword [rbp + 0x1a0], r13
mov r13, qword [rbp + 0x390]
mov qword [rbp + 0x130], r13
mov r13, qword [rbp + 0x398]
mov qword [rbp + 0x1a8], r13
movzx r13d, byte [rbp - 0xd]
mov byte [rsp + 0x73], r13b
mov r13d, dword [rbp + 0x304]
mov dword [rbp + 0x30], r13d
mov r13, qword [rbp + 0x3a0]
mov qword [rbp + 0x1b0], r13
movzx r13d, word [rbp + 0x12a]
mov dword [rbp - 8], r13d
movzx r13d, byte [rbp - 0xc]
mov byte [rsp + 0x6c], r13b
mov r13, qword [rbp + 0x3a8]
mov qword [rbp + 0x1f8], r13
movzx r13d, byte [rbp - 0xb]
mov byte [rsp + 0x71], r13b
mov r13d, dword [rbp + 0x300]
mov dword [rbp + 0x24], r13d
mov r13d, dword [rbp + 0x2fc]
mov dword [rbp + 0x20], r13d
mov r13d, dword [rbp + 0x2f8]
mov dword [rbp + 0x84], r13d
mov r13d, dword [rbp + 0x2bc]
mov dword [rbp + 0x2c], r13d
mov r13d, dword [rbp + 0x318]
mov dword [rbp + 0x28], r13d
mov r13, qword [rbp + 0x3b0]
mov qword [rbp + 0x190], r13
mov r13d, dword [rbp + 0x2b8]
mov dword [rbp + 0x3c], r13d
mov r13, qword [rbp + 0x3c0]
mov qword [rbp + 0x1b8], r13
movzx r13d, word [rbp + 0x128]
mov dword [rbp + 0x40], r13d
mov r13d, dword [rbp + 0x2c0]
mov dword [rbp + 0x68], r13d
mov r13, qword [rbp + 0x3d0]
mov qword [rbp + 0x1d0], r13
mov r13d, dword [rbp + 0x2c4]
mov dword [rbp + 0x64], r13d
mov r13, qword [rbp + 0x358]
mov qword [rbp + 0x100], r13
mov r13, qword [rbp + 0x320]
mov qword [rbp + 0x140], r13
mov r13d, dword [rbp + 0x2c8]
mov dword [rbp + 0x6c], r13d
mov r13d, dword [rbp + 0x2cc]
mov dword [rbp + 0x44], r13d
movzx r13d, byte [rbp - 0xa]
mov byte [rsp + 0x6d], r13b
mov r13d, dword [rbp + 0x2d0]
mov dword [rbp + 0x4c], r13d
mov r13d, dword [rbp + 0x2e8]
mov dword [rbp + 0x50], r13d
mov r13d, dword [rbp + 0x120]
mov dword [rbp + 0x54], r13d
mov r13d, dword [rbp + 0x170]
mov qword [rbp + 0x208], rsi
mov qword [rbp - 0x80], rdi
mov dword [rbp + 0x58], r13d
movaps xmm8, xmm6
mov r13d, dword [rbp + 0xf8]
mov dword [rbp + 0x5c], r13d
mov r13, qword [rbp + 0x2d8]
mov qword [rbp + 0x180], r13
mov r13d, dword [rbp + 0xf4]
mov dword [rbp + 0x60], r13d
mov r13, qword [rbp + 0x2e0]
mov qword [rbp + 0x1c0], r13
mov r13, qword [rbp + 0x240]
mov qword [rbp + 0x178], r13
mov r13d, dword [rbp + 0xf0]
mov dword [rbp + 0x48], r13d
mov r13, qword [rbp + 0x2f0]
mov qword [rbp + 0x188], r13
mov r13d, dword [rbp + 0xec]
mov dword [rbp + 0x70], r13d
movzx r13d, byte [rbp - 9]
mov byte [rsp + 0x74], r13b
movzx r13d, byte [rbp - 0x28]
mov byte [rsp + 0x75], r13b
mov r13, qword [rbp + 0x248]
mov qword [rbp + 0x200], r13
mov r13d, dword [rbp + 0xe8]
mov dword [rbp + 0x34], r13d
mov r13, rbx
mov dword [rbp + 0x38], r11d
mov byte [rsp + 0x70], r10b
mov qword [rbp + 0x138], r9
mov dword [rbp - 4], r8d
mov qword [rbp - 0x18], rbx
mov qword [rbp + 0x108], rdx
mov qword [rbp + 0xe0], rcx
cmp eax, 0x6f5
jbe 0x18003cc02
mov rdi, qword [rbp - 0x80]
mov ebx, 0x6b14
jmp 0x1800406ea
cmp byte [r14], 0x75
je 0x18003cee1
mov eax, 7
mov r15d, eax
jmp case.0x18004013d.132
mov rax, qword [rbp + 0xab0]
mov dword [rax], 9
mov eax, 1
mov r15d, eax
jmp case.0x18004013d.132
mov ebx, 0x2e960
mov edi, 0xf7
nop word [rax + rax]
mov eax, edi
sub eax, 0xf6
je 0x18004101a
cmp eax, 1
jne 0x18003cf53
cmp byte [r14], 0x6c
jne 0x18003d1a4
mov rax, qword [rbp + 0xab0]
mov dword [rax], r14d
mov rax, qword [rbp + 0xab8]
mov rax, qword [rax + 0x40]
test rax, rax
je 0x18003cf48
call rax
mov r15d, 1
mov dword [rsp + 0x78], r15d
dec edi
cmp edi, 0xf5
ja 0x18003cf10
mov rax, qword [rbp + 0x148]
mov qword [rbp + 0x148], rax
movzx eax, byte [rsp + 0x72]
mov byte [rsp + 0x72], al
mov eax, dword [rbp - 0x2c]
mov dword [rbp - 0x2c], eax
mov eax, dword [rbp + 0x80]
mov dword [rbp + 0x80], eax
mov rax, qword [rbp + 0x1c8]
mov qword [rbp + 0x1c8], rax
movzx eax, byte [rsp + 0x6e]
mov byte [rsp + 0x6e], al
movzx eax, byte [rsp + 0x6f]
mov byte [rsp + 0x6f], al
mov rax, qword [rbp + 0x198]
mov qword [rbp + 0x198], rax
mov rax, qword [rbp + 0x1a0]
mov rcx, qword [rbp + 0x208]
mov rdi, qword [rbp - 0x80]
mov qword [rbp + 0x1a0], rax
mov rax, qword [rbp + 0x130]
mov qword [rbp + 0x130], rax
mov rax, qword [rbp + 0x1a8]
mov qword [rbp + 0x1a8], rax
movzx eax, byte [rsp + 0x73]
mov byte [rsp + 0x73], al
mov eax, dword [rbp + 0x30]
mov dword [rbp + 0x30], eax
mov rax, qword [rbp + 0x1b0]
mov qword [rbp + 0x1b0], rax
mov eax, dword [rbp - 8]
mov dword [rbp - 8], eax
movzx eax, byte [rsp + 0x6c]
mov byte [rsp + 0x6c], al
mov rax, qword [rbp + 0x1f8]
mov qword [rbp + 0x1f8], rax
movzx eax, byte [rsp + 0x71]
mov byte [rsp + 0x71], al
mov eax, dword [rbp + 0x24]
mov dword [rbp + 0x24], eax
mov eax, dword [rbp + 0x20]
mov dword [rbp + 0x20], eax
mov eax, dword [rbp + 0x84]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x2c]
mov dword [rbp + 0x2c], eax
mov eax, dword [rbp + 0x28]
mov dword [rbp + 0x28], eax
mov rax, qword [rbp + 0x190]
mov qword [rbp + 0x190], rax
mov eax, dword [rbp + 0x3c]
mov dword [rbp + 0x3c], eax
mov rax, qword [rbp + 0x1b8]
mov qword [rbp + 0x1b8], rax
mov eax, dword [rbp + 0x40]
mov dword [rbp + 0x40], eax
mov eax, dword [rbp + 0x68]
mov dword [rbp + 0x68], eax
mov rax, qword [rbp + 0x1d0]
mov qword [rbp + 0x1d0], rax
mov eax, dword [rbp + 0x64]
mov dword [rbp + 0x64], eax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x140]
mov qword [rbp + 0x140], rax
mov eax, dword [rbp + 0x6c]
mov dword [rbp + 0x6c], eax
mov eax, dword [rbp + 0x44]
mov dword [rbp + 0x44], eax
movzx eax, byte [rsp + 0x6d]
mov byte [rsp + 0x6d], al
mov eax, dword [rbp + 0x4c]
mov dword [rbp + 0x4c], eax
mov eax, dword [rbp + 0x50]
mov dword [rbp + 0x50], eax
mov eax, dword [rbp + 0x54]
mov dword [rbp + 0x54], eax
mov eax, dword [rbp + 0x58]
mov qword [rbp + 0x208], rcx
mov qword [rbp - 0x80], rdi
mov dword [rbp + 0x58], eax
mov eax, dword [rbp + 0x5c]
mov dword [rbp + 0x5c], eax
mov rax, qword [rbp + 0x180]
mov qword [rbp + 0x180], rax
mov eax, dword [rbp + 0x60]
mov dword [rbp + 0x60], eax
mov rax, qword [rbp + 0x1c0]
mov qword [rbp + 0x1c0], rax
mov rax, qword [rbp + 0x178]
mov qword [rbp + 0x178], rax
mov eax, dword [rbp + 0x48]
mov dword [rbp + 0x48], eax
mov rax, qword [rbp + 0x188]
mov qword [rbp + 0x188], rax
mov eax, dword [rbp + 0x70]
mov dword [rbp + 0x70], eax
movzx eax, byte [rsp + 0x74]
mov byte [rsp + 0x74], al
movzx eax, byte [rsp + 0x75]
mov byte [rsp + 0x75], al
mov rax, qword [rbp + 0x200]
mov qword [rbp + 0x200], rax
mov eax, dword [rbp + 0x34]
mov dword [rbp + 0x34], eax
mov eax, dword [rbp + 0x38]
mov dword [rbp + 0x38], eax
movzx eax, byte [rsp + 0x70]
mov byte [rsp + 0x70], al
mov rax, qword [rbp + 0x138]
mov qword [rbp + 0x138], rax
mov eax, dword [rbp - 4]
mov dword [rbp - 4], eax
mov rax, qword [rbp + 0x108]
mov qword [rbp + 0x108], rax
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0xe0], rax
mov qword [rbp - 0x18], r13
jmp 0x1800406ea
mov eax, 7
mov r15d, eax
mov r10d, eax
mov ecx, eax
jmp case.0x18004013d.132
mov rdi, qword [rbp - 0x80]
mov r11d, dword [rbp + 0xac8]
mov ebx, 0x353c2
jmp 0x1800406f1
mov rdi, qword [rbp - 0x80]
mov eax, 0x121
cmp eax, 0x121
je 0x18003eaf5
cmp eax, 0x9504
je 0x18003eae5
cmp eax, 0x128e7
je 0x18003eb6d
jmp 0x18003ecdb
mov rdi, qword [rbp - 0x80]
mov ebx, 0x42886
jmp 0x1800406ea
mov eax, 7
mov r12d, eax
mov r15d, eax
jmp case.0x18004013d.132
mov r15d, r14d
jmp case.0x18004013d.132
mov r15d, 7
mov eax, r15d
mov r10d, r15d
mov ecx, eax
jmp 0x180041007
mov eax, r15d
mov r12d, eax
mov eax, r12d
mov eax, r12d
mov r15d, eax
jmp case.0x18004013d.132
mov rax, 0xffffffffffffffff
mov r15d, eax
mov ecx, eax
mov r10d, eax
jmp 0x180041007
mov rbx, qword [rbp + 0x238]
mov edi, 0x72
nop word [rax + rax]
imul ecx, dword [rbx + 0xc], 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [rbx + 8]
lea rdx, [rbp + 0xac8]
mov rcx, qword [rbx]
xor r9d, r9d
mov r8d, edi
mov dword [rbp + 0xac8], eax
call fcn.180043ab0
jmp 0x18003d270
mov rax, qword [rbp + 0xab0]
cmp rdx, qword [rax + 0x10]
sete byte [rbp - 0x20]
mov r15d, dword [rbp - 0x20]
mov eax, r15d
mov r10d, r15d
mov ecx, eax
jmp 0x180041007
mov r11d, dword [rbp + 0xac8]
mov ecx, 1
lea rdx, [rcx - 2]
lea r8d, [rcx + 5]
lea r9d, [rcx + 4]
lea r10d, [rcx + 6]
mov rdi, qword [rbp - 0x80]
mov ebx, r11d
imul eax, r11d, 0xa29
cmp ebx, eax
ja case.0x18004013d.132
cmp ebx, 0x353c2
ja 0x18003db3c
je 0x18003d1c1
cmp ebx, 0x1aa3a
ja 0x18003d844
je 0x18003d77f
cmp ebx, 0xb2
je 0x18003d408
cmp ebx, 0x6b14
je 0x180040736
cmp ebx, 0xd576
je 0x18003d3b1
cmp ebx, 0x13fd8
jne 0x1800406f1
jmp 0x18003d345
mov rdi, qword [rbp - 0x80]
mov eax, 0x109
nop word [rax + rax]
cmp eax, 0x109
je 0x18003d364
cmp eax, 0xa38e
je 0x18004072b
jmp 0x18003d37b
cmp byte [r14], 0x61
jne case.0x18004068d.12
mov rcx, qword [rbp + 0xab0]
mov dword [rcx], SafeArrayGetDim
add eax, 0xa285
cmp eax, 0x1450a
jbe 0x18003d350
jmp 0x18003d38d
mov rdi, qword [rbp - 0x80]
mov ebx, 0x13fd8
mov eax, 0x1f
cmp eax, 0x1f
je 0x180040714
add eax, 0x15cc
cmp eax, 0x15cc
jbe 0x18003d397
jmp 0x1800406ea
mov eax, 0xd1
cmp eax, 0xd1
je 0x18003d3ed
cmp eax, 0x717b
jne 0x18003d3f7
mov rax, qword [rbp + 0xab0]
mov dword [rax], r14d
mov rax, qword [rbp + 0xab8]
mov rax, qword [rax + 0x30]
test rax, rax
je 0x18003d3e0
call rax
mov eax, 1
mov r15d, eax
jmp 0x180041007
cmp byte [r14], 0x65
jne 0x180040d8f
add eax, 0x70aa
cmp eax, 0xe154
jbe 0x18003d3b6
jmp 0x1800406f1
mov ebx, 0xc8
mov dword [rbp + 0xac0], ebx
mov eax, ebx
sub eax, 0xc8
je 0x18003d603
sub eax, 1
je 0x18003d559
sub eax, 1
je 0x18003d5fc
sub eax, 1
je 0x18003d452
cmp eax, 1
jne 0x18003d607
mov ecx, 1
mov eax, ecx
mov r15d, ecx
mov r10d, ecx
jmp 0x180041007
mov rcx, r14
call qword [sym.imp.COMCTL32.dll_InitializeFlatSB]
mov esi, eax
mov eax, dword [rbp - 0x2c]
test esi, esi
movzx eax, al
cmove eax, r14d
mov dword [rbp - 0x2c], eax
test al, al
je 0x18003d607
mov edi, dword [rbp + 0x80]
mov ebx, 0xf0
mov r13d, 1
cmp ebx, 0x2d9
ja 0x18003d4e8
je 0x18003d4d2
cmp ebx, 0xf0
je 0x18003d4cd
cmp ebx, 0x193
je 0x18003d4bb
cmp ebx, 0x236
jne 0x18003d52e
mov dword [rbp - 0x68], 0x1c
mov dword [rbp - 0x64], 2
jmp 0x18003d52e
xor ecx, ecx
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], rcx
mov dword [rbp - 0x50], ecx
jmp 0x18003d52e
mov edi, r13d
jmp 0x18003d52e
lea r8, [rbp - 0x68]
mov edx, edi
mov rcx, r14
call qword [sym.imp.COMCTL32.dll_FlatSB_GetScrollInfo]
mov esi, eax
mov eax, dword [rbp - 0x2c]
jmp 0x18003d52e
cmp ebx, 0x37c
je 0x18003d51c
cmp ebx, 0x41f
jne 0x18003d52e
test al, al
je 0x18003d52e
xor r9d, r9d
lea r8, [rbp - 0x68]
mov edx, edi
mov rcx, r14
call qword [sym.imp.COMCTL32.dll_FlatSB_SetScrollInfo]
mov rcx, r14
call qword [sym.imp.COMCTL32.dll_UninitializeFlatSB]
mov eax, dword [rbp - 0x2c]
jmp 0x18003d52e
test esi, esi
jne 0x18003d52e
mov rcx, r14
call qword [sym.imp.COMCTL32.dll_UninitializeFlatSB]
xor al, al
mov dword [rbp - 0x2c], eax
add ebx, 0xa3
cmp ebx, 0x4c2
jb 0x18003d485
mov r13, qword [rbp - 0x18]
mov ebx, dword [rbp + 0xac0]
mov dword [rbp + 0x80], edi
mov rdi, qword [rbp - 0x80]
jmp 0x18003d607
mov rcx, r14
call qword [sym.imp.USER32.dll_WindowFromPoint]
movsx eax, byte [r14]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.0x18003d6e5.49
lea rdx, [0x180000000]
cdqe
movzx eax, byte [rdx + rax + 0x413e4]
mov ecx, dword [rdx + rax*4 + 0x413dc]
add rcx, rdx
jmp rcx
mov rbx, qword [rbp + 0xab0]
cmp dword [rbx + 4], 0
jne 0x18003d5f3
mov r8, qword [rbx + 8]
mov r9d, 0x52
xor edx, edx
xor ecx, ecx
call fcn.1800165a0
cmp rax, 0xfffffffffffffffd
jae 0x18003d5ec
movzx eax, byte [r14]
lea r9, [rbp + 0xac0]
mov rdx, qword [rbx + 8]
mov r8d, 0xea
xor ecx, ecx
mov byte [rbp + 0xac0], al
call fcn.180028780
cmp eax, 1
je 0x18003d5f3
mov eax, 6
mov r15d, eax
mov r10d, eax
jmp 0x180041007
mov dword [rbx + 4], 1
mov r8d, 6
mov dword [rbx], r8d
mov ebx, 0xca
jmp 0x18003d607
mov byte [rbp - 0x2c], 1
inc ebx
mov dword [rbp + 0xac0], ebx
cmp ebx, 0xcd
jb 0x18003d413
jmp 0x18003d621
mov rdi, qword [rbp - 0x80]
mov ebx, 0x67
nop word [rax + rax]
mov eax, ebx
sub eax, 0x67
je 0x18003d753
sub eax, 1
je 0x18003d6a5
sub eax, 1
je 0x18003d74c
sub eax, 1
je 0x18003d667
cmp eax, 1
jne 0x18003d758
mov eax, 1
mov r15d, eax
mov r10d, eax
jmp 0x180041007
mov rdx, qword [rbp + 0x1c8]
lea rcx, [rbp + 0x3d0]
xor r8d, r8d
call qword [sym.imp.OLEACC.dll_LresultFromObject]
test rax, rax
je 0x18003d68d
mov byte [rsp + 0x6e], 0
jmp 0x18003d758
cmp byte [rsp + 0x6e], 0
je 0x18003d758
mov rax, qword [r14]
xor ecx, ecx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
jmp 0x18003d758
movsx eax, byte [r14]
movups xmm0, xmmword [0x18007e8e0]
add eax, 0xffffffd0
mov qword [rbp + 0x1c8], r14
movups xmmword [rbp + 0x3d0], xmm0
cmp eax, 0x36
ja case.0x18003d6e5.49
lea rdx, [0x180000000]
cdqe
movzx eax, byte [rdx + rax + 0x41424]
mov ecx, dword [rdx + rax*4 + 0x4141c]
add rcx, rdx
jmp rcx
mov rbx, qword [rbp + 0xab0]
cmp dword [rbx + 4], 0
jne 0x18003d746
mov r8, qword [rbx + 8]
mov r9d, 0x52
xor edx, edx
xor ecx, ecx
call fcn.1800165a0
cmp rax, 0xfffffffffffffffe
jae 0x18003d73f
movzx eax, byte [r14]
lea r9, [rbp + 0xac0]
mov rdx, qword [rbx + 8]
mov r8d, 0xea
xor ecx, ecx
mov byte [rbp + 0xac0], al
call fcn.180028780
cmp eax, 1
jne 0x18003d5dc
mov dword [rbx], eax
lea ebx, [rax + 0x68]
jmp 0x18003d758
mov dword [rbx + 4], 1
mov dword [rbx], 1
mov ebx, 0x69
jmp 0x18003d758
mov byte [rsp + 0x6e], 1
inc ebx
cmp ebx, 0x6c
jb 0x18003d630
mov ebx, reloc.OLEAUT32.dll_VarDecMul
jmp 0x1800406ea
mov rdi, qword [rbp - 0x80]
mov ebx, reloc.OLEAUT32.dll_VarDecMul
jmp 0x1800406ea
mov rdi, qword [rbp - 0x80]
mov ebx, r14d
cmp ebx, 5
ja case.default.0x18003d79e
lea rdx, [0x180000000]
mov eax, ebx
mov ecx, dword [rdx + rax*4 + 0x4145c]
add rcx, rdx
jmp rcx
mov byte [rsp + 0x71], 1
mov dword [rbp + 0x24], reloc.OLEAUT32.dll_SafeArrayGetDim
mov dword [rbp + 0x20], reloc.OLEAUT32.dll_SafeArrayGetDim
jmp case.default.0x18003d79e
cmp byte [r14], 0x73
je case.default.0x18003d79e
mov eax, 7
jmp 0x180041007
mov dword [rbp + 0x84], 0x11
jmp case.default.0x18003d79e
mov rax, qword [rbp + 0xab0]
mov r9d, dword [rbp + 0x28]
mov r8d, dword [rbp + 0x84]
mov edx, dword [rbp + 0x20]
mov ecx, dword [rbp + 0x24]
mov dword [rax], SafeArrayGetDim
mov eax, dword [rbp + 0x2c]
mov dword [rsp + 0x20], eax
call qword [sym.imp.COMCTL32.dll_ImageList_Create]
mov qword [rbp + 0x190], rax
test rax, rax
jne case.default.0x18003d79e
mov byte [rsp + 0x71], al
jmp case.default.0x18003d79e
mov dword [rbp + 0x28], 1
mov dword [rbp + 0x2c], r14d
inc ebx
lea eax, [rbx + 0x11b]
cmp eax, 0x121
jb 0x18003d782
mov ebx, 0x1aa3a
jmp 0x1800406ea
mov rdi, qword [rbp - 0x80]
mov ebx, 0x1aa3a
jmp 0x1800406ea
cmp ebx, 0x2149c
je 0x18003d929
cmp ebx, 0x27efe
je 0x18003d8b0
cmp ebx, 0x2e960
jne 0x1800406f1
cmp byte [r14], 0x6c
je 0x1800407ea
mov ebx, 0xdf
mov eax, ebx
sub eax, 0xdb
je 0x1800407bb
sub eax, 1
je 0x1800407b2
sub eax, 1
je 0x1800407a9
sub eax, 1
je 0x180040797
cmp eax, 1
jne 0x1800407d2
mov dword [rbp + 8], 0x707446
jmp 0x1800407d2
mov eax, 0x96
cmp eax, 0x96
je 0x18003d8ef
cmp eax, 0x3714
je 0x18003d8e0
cmp eax, 0x6d92
je 0x18003d8d7
cmp eax, 0xa410
je 0x18003eb6d
jmp 0x18003d8f9
mov r15d, ecx
mov dword [rsp + 0x78], ecx
jmp 0x18003d8f9
mov rcx, qword [rbp + 0xab0]
mov dword [rcx], reloc.OLEAUT32.dll_SafeArrayDestroy
jmp 0x18003d8f9
cmp byte [r14], 0x75
jne 0x1800407fc
add eax, 0x367e
mov ecx, 1
cmp eax, 0xd9f8
jbe 0x18003d8b5
mov ebx, 0x27efe
jmp 0x1800406f1
mov r11d, dword [rbp + 0xac8]
mov rdi, qword [rbp - 0x80]
mov ebx, 0x27efe
jmp 0x1800406f1
mov eax, 0xda
mov dword [rbp + 0xac0], eax
sub eax, 0xda
je 0x18003d95a
sub eax, 1
je 0x18003d94e
cmp eax, 1
je case.0x18004013d.132
jmp 0x18003db06
mov r15d, ecx
mov dword [rsp + 0x78], ecx
jmp 0x18003db06
cmp byte [r14], 0x65
jne case.0x18004068d.12
mov rax, qword [rbp + 0xab0]
mov dword [rax], r14d
mov rax, qword [rbp + 0xab8]
cmp qword [rax + 0x38], 0
je 0x18003db06
mov ebx, 8
lea r13, [0x180000000]
mov r14, rax
lea esi, [rbx + 1]
lea edi, [rbx + 0x5d]
lea r12d, [rbx + 0x6c]
lea r15d, [rbx + 0x26]
nop dword [rax]
cmp ebx, 8
ja case.default.0x18003d9b6
mov eax, ebx
mov ecx, dword [r13 + rax*4 + 0x41474]
add rcx, r13
jmp rcx
mov eax, 0x53
mov word [rbp + 0x91], ax
mov eax, 0x79
mov word [rbp + 0x92], ax
mov eax, 0x7473
mov word [rbp + 0x93], ax
jmp case.default.0x18003d9b6
mov eax, 0x6576
mov word [rbp + 0x8f], ax
jmp case.default.0x18003d9b6
mov eax, reloc.OLEAUT32.dll_VarR4FromCy
mov word [rbp + 0x88], ax
mov word [rbp + 0x89], di
mov word [rbp + 0x8a], r12w
jmp case.default.0x18003d9b6
call qword [r14 + 0x38]
jmp case.default.0x18003d9b6
movabs rax, 0x720065006b
lea rdx, str.nel32
lea rcx, [rbp - 0x62]
mov qword [rbp - 0x68], rax
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [rbp - 0x58], r15d
jmp case.default.0x18003d9b6
mov word [rbp + 0x95], di
mov eax, 0x6f66
mov dword [rbp + 0x96], 0x6e496d
mov word [rbp + 0x99], ax
jmp case.default.0x18003d9b6
mov eax, VarR8FromCy
mov word [rbp + 0x8b], ax
mov eax, 0x61
mov word [rbp + 0x8c], ax
mov eax, 0x6974
mov word [rbp + 0x8d], ax
jmp case.default.0x18003d9b6
mov r8d, 2
lea rdx, [0x18008f5d4]
lea rcx, [rbp - 0x68]
call fcn.180060970
lea rcx, [rbp - 0x68]
sub rcx, 2
nop dword [rax]
cmp word [rcx + 2], 0
lea rcx, [rcx + 2]
jne 0x18003dab0
mov eax, dword [0x18008f1c8]
mov dword [rcx], eax
lea rcx, [rbp - 0x68]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, [rbp + 0x88]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp case.default.0x18003d9b6
mov byte [rbp + 0x9b], 0
dec ebx
sub rsi, 1
jne 0x18003d9a0
mov r15d, dword [rsp + 0x78]
lea r12d, [rsi + 0xa]
mov r13, qword [rbp - 0x18]
xor r14d, r14d
mov rdi, qword [rbp - 0x80]
mov eax, dword [rbp + 0xac0]
mov ecx, 1
inc eax
mov dword [rbp + 0xac0], eax
cmp eax, 0xdd
jb 0x18003d934
mov ebx, 0x2149c
jmp 0x1800406ea
mov rdi, qword [rbp - 0x80]
mov ebx, 0x2149c
jmp 0x1800406ea
cmp ebx, 0x567ac
ja 0x1800400ed
je 0x18003f325
cmp ebx, 0x3be24
je 0x18003ecf5
cmp ebx, 0x42886
je 0x18003d1cf
cmp ebx, 0x492e8
je 0x18003dd54
cmp ebx, 0x4fd4a
jne 0x1800406f1
mov ecx, 0x102
mov eax, ecx
sub eax, 0x102
je 0x180040807
cmp eax, 1
je 0x180040d63
inc ecx
cmp ecx, 0x104
jb 0x18003db83
jmp 0x18003dba9
mov rdi, qword [rbp - 0x80]
mov esi, VarI2FromDisp
nop
mov eax, esi
sub eax, 0x35
je 0x18003dbce
sub eax, 0x54
je 0x18003dc4a
cmp eax, 0x54
je 0x180040d79
jmp 0x18003dd3b
movsx eax, byte [r14]
add eax, 0xffffffd0
cmp eax, 9
ja case.default.0x18003dbf1
lea rdx, [0x180000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x41498]
add rcx, rdx
jmp rcx
mov rbx, qword [rbp + 0xab0]
cmp dword [rbx + 4], 0
jne 0x18003dc44
mov r8, qword [rbx + 8]
mov r9d, 0x52
xor edx, edx
xor ecx, ecx
call fcn.1800165a0
cmp rax, 0xfffffffffffffffe
jae 0x18003dc3d
movzx eax, byte [r14]
lea r9, [rbp + 0xac0]
mov rdx, qword [rbx + 8]
mov r8d, 0xea
xor ecx, ecx
mov byte [rbp + 0xac0], al
call fcn.180028780
jmp 0x18003dc44
mov dword [rbx + 4], 1
mov dword [rbx], 0x15
mov r15d, 1
mov esi, 0x89
mov dword [rsp + 0x78], r15d
jmp 0x18003dd3b
mov ebx, 0x11
cmp ebx, 0x11
je 0x18003dcfa
cmp ebx, 0xc5
je 0x18003dcdb
cmp ebx, 0x179
jne 0x18003dd29
cmp byte [rsp + 0x72], 0
je 0x18003dcc9
lea rcx, [rbp - 0x28]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x18003dc93
mov rcx, qword [rbp + 0x148]
lea r9, [rbp + 0xf8]
mov r8, rax
mov qword [rsp + 0x20], r14
lea rdx, [rbp - 0x28]
call qword [sym.imp.KERNEL32.dll_WriteConsoleA]
mov rcx, qword [rbp + 0x148]
call qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
mov eax, 7
mov ecx, eax
mov r15d, eax
mov r10d, eax
jmp 0x180041007
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 0x148], rax
cmp rax, 0xffffffffffffffff
jne 0x18003dd29
mov byte [rsp + 0x72], 0
jmp 0x18003dd29
lea r8, [rbp - 0x28]
mov byte [rsp + 0x72], 1
lea rdx, [rbp + 0xac2]
mov word [rbp + 0xac0], r12w
lea rcx, [rbp + 0xac0]
call fcn.180052010
mov qword [rbp + 0x148], 0xffffffffffffffff
add ebx, 0xb4
cmp ebx, 0x22d
jb 0x18003dc64
add esi, 0x54
cmp esi, 0x131
jb 0x18003dbb0
mov ebx, 0x4fd4a
jmp 0x1800406ea
mov ecx, 0xfe
jmp 0x18003dd6b
mov rdx, 0xffffffffffffffff
lea r10d, [rdx + 8]
mov eax, ecx
sub eax, 0xfe
je 0x18003dd82
cmp eax, 1
je 0x180040d8c
jmp 0x18003e6ef
movsx eax, byte [r14]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x18003ddaf.15
lea r9, [0x180000000]
cdqe
movzx eax, byte [r9 + rax + 0x414dc]
mov ecx, dword [r9 + rax*4 + 0x414c0]
add rcx, r9
jmp rcx
mov rbx, qword [rbp + 0xab0]
cmp dword [rbx + 4], 0
jne 0x18003e6df
mov r8, qword [rbx + 8]
mov r9d, 0x52
xor edx, edx
xor ecx, ecx
call fcn.1800165a0
cmp rax, 0xffffffffffffffff
jae 0x18003de16
movzx eax, byte [r14]
lea r9, [rbp + 0xac0]
mov rdx, qword [rbx + 8]
mov r8d, 0xea
xor ecx, ecx
mov byte [rbp + 0xac0], al
call fcn.180028780
cmp eax, 1
je 0x18003e6df
mov eax, 6
mov r15d, eax
mov r10d, eax
jmp 0x180041007
mov dword [rbx + 4], 1
jmp 0x18003e6df
mov ebx, r10d
cmp ebx, 7
ja case.default.0x18003de3b
mov eax, ebx
mov ecx, dword [r9 + rax*4 + 0x41554]
add rcx, r9
jmp rcx
mov eax, dword [0x1800923fd]
mov dword [rbp + 9], eax
movzx eax, byte [0x180092401]
mov byte [rbp + 0xd], al
mov eax, 0x6e45
mov word [rbp + 0xe], ax
mov byte [rbp + 0x10], 0
jmp case.default.0x18003de3b
movzx eax, byte [r14]
lea r9, [rbp + 0xac0]
mov byte [rbp + 0xac0], al
mov r8d, 0xea
mov rax, qword [rbp + 0xab0]
xor ecx, ecx
mov byte [rbp + 0x14], 0
mov byte [rsp + 0x6f], 1
mov rdx, qword [rax + 8]
call fcn.180028780
cmp eax, 1
jne 0x18003e960
lea r9, [0x180000000]
jmp case.default.0x18003de3b
mov word [rbp + 8], 0x53
jmp case.default.0x18003de3b
mov edx, dword [rbp + 0x198]
lea r9, [rbp + 0x238]
lea r8, [rbp + 0xe8]
lea rcx, [rbp + 8]
call qword [sym.imp.RPCRT4.dll_MesEncodeFixedBufferHandleCreate]
lea r9, [0x180000000]
test eax, eax
je case.default.0x18003de3b
mov byte [rsp + 0x6f], 0
jmp case.default.0x18003de3b
mov rax, qword [rbp + 0xab0]
mov dword [rbp + 0xe8], r14d
mov qword [rbp + 0x238], r14
mov dword [rax], 0x14
jmp case.default.0x18003de3b
lea rcx, [rbp + 8]
mov rax, rdx
inc rax
cmp byte [rcx + rax], 0
jne 0x18003df05
mov qword [rbp + 0x198], rax
jmp case.default.0x18003de3b
movzx eax, word [0x1800924ab]
mov word [rbp + 0x10], ax
movzx eax, byte [0x1800924ad]
mov byte [rbp + 0x12], al
mov byte [rbp + 0x13], VarCyFromDate
dec ebx
lea eax, [rbx + 0xcb]
cmp eax, 0xca
jbe case.0x18003ddaf.9
mov rdx, 0xffffffffffffffff
jmp 0x18003de25
cmp byte [rsp + 0x6f], 0
je 0x18003e6df
mov edx, dword [rbp + 0x198]
lea r8, [rbp + 0xac0]
lea rcx, [rbp + 8]
mov qword [rbp + 0xac0], r14
call qword [sym.imp.RPCRT4.dll_MesDecodeBufferHandleCreate]
mov rcx, qword [rbp + 0x238]
test rcx, rcx
je 0x18003df86
call qword [sym.imp.RPCRT4.dll_MesHandleFree]
mov rcx, qword [rbp + 0xac0]
test rcx, rcx
je 0x18003e6df
call qword [sym.imp.RPCRT4.dll_MesHandleFree]
jmp 0x18003e6df
mov ebx, 0x77
mov dword [rbp + 0xd8], ebx
nop dword [rax]
cmp ebx, 0x77
je 0x18003dfc6
cmp ebx, 0x3146
je 0x18003e6df
jmp 0x18003e455
mov rdx, qword [rbp + 0xab0]
add rdx, 8
mov qword [rbp + 0x158], rdx
cmp qword [rdx], 0
je 0x18003e960
mov r8, qword [rbp + 0xab8]
cmp qword [r8 + 0x28], 0
je 0x18003e436
movzx r13d, byte [rsp + 0x73]
mov ebx, 0x11
mov qword [rbp + 0x230], rbx
mov esi, r14d
mov dword [rbp + 0xac0], r14d
mov rdi, rdx
cmp esi, 0x10
ja case.default.0x18003e029
mov eax, esi
mov ecx, dword [r9 + rax*4 + 0x41574]
add rcx, r9
jmp rcx
mov r8d, 2
lea rdx, [0x1800924e4]
lea rcx, [rbp + 0xa8]
call fcn.180065084
mov r8, qword [rbp + 0xab8]
jmp case.default.0x18003e029
mov dword [rbp + 0x290], 0x720066
mov dword [rbp + 0x294], 0x6d006f
jmp case.default.0x18003e029
mov eax, 0x75
mov word [rbp + 0x278], ax
jmp case.default.0x18003e029
mov dword [rbp + 0x270], 0x650044
mov dword [rbp + 0x274], 0x610066
jmp case.default.0x18003e029
mov rcx, qword [rbp + 0x1a8]
lea rax, [rbp + 0x270]
mov qword [rsp + 0x38], r14
mov edx, 3
mov dword [rsp + 0x30], r14d
mov r9d, 0xff
mov dword [rsp + 0x28], 0x200
mov qword [rbp + 0x1a0], rax
lea r8d, [rdx + 3]
mov dword [rsp + 0x20], 0x200
call qword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov qword [rbp + 0x130], rax
cmp rax, 0xffffffffffffffff
jne 0x18003e044
mov ebx, 0xf3
lea edi, [rax + 0x6a]
lea esi, [rax + 0x66]
lea r14d, [rax + 7]
nop word [rax + rax]
cmp ebx, 0x2dc
ja 0x18003e1c3
je 0x18003e1ba
cmp ebx, 0xf3
je 0x18003e18f
cmp ebx, 0x196
je 0x18003e16c
cmp ebx, 0x239
jne 0x18003e20c
lea rdx, [0x18008f568]
mov word [rbp - 0x56], di
lea rcx, [rbp - 0x68]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
lea rdx, [0x1800904f0]
lea rcx, [rbp - 0x68]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
mov r8, r14
lea rdx, str.d__GL
lea rcx, [rbp - 0x53]
call fcn.1800650e0
jmp 0x18003e20c
movzx eax, word [0x1800924f0]
mov word [rbp - 0x5e], ax
movzx eax, word [0x1800924f4]
mov word [rbp - 0x5c], di
mov word [rbp - 0x5b], ax
mov dword [rbp - 0x59], 0x616620
jmp 0x18003e20c
mov eax, dword [str.Crea]
mov dword [rbp - 0x68], eax
mov eax, 0x74
mov word [rbp - 0x64], ax
mov eax, dword [str.Name]
mov word [rbp - 0x63], si
mov dword [rbp - 0x62], eax
movzx eax, byte [0x180092504]
mov byte [rbp - 0x5e], al
jmp 0x18003e20c
mov dword [rbp - 0x4e], 0x253d45
jmp 0x18003e20c
cmp ebx, 0x37f
je 0x18003e1fd
cmp ebx, 0x422
je 0x18003e1f6
cmp ebx, 0x4c5
jne 0x18003e20c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x410]
call fcn.180001170
jmp 0x18003e20c
mov word [rbp - 0x49], r12w
jmp 0x18003e20c
mov eax, 0x75
mov word [rbp - 0x4b], ax
mov word [rbp - 0x4a], 0x2e
add ebx, 0xa3
cmp ebx, 0x568
jb 0x18003e100
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [rbp + 0xac0]
xor r13b, r13b
mov rbx, qword [rbp + 0x230]
xor r14d, r14d
mov rdi, qword [rbp + 0x158]
mov r8, qword [rbp + 0xab8]
jmp case.default.0x18003e029
mov rcx, qword [rdi]
mov rcx, qword [rcx]
call qword [r8 + 0x28]
mov r8, qword [rbp + 0xab8]
jmp case.default.0x18003e029
lea rdx, [0x180092508]
lea rcx, [rbp + 0xa8]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
mov eax, 0x6d
lea rdx, [0x180092510]
lea rcx, [rbp + 0xa8]
mov dword [rbp + 0xc2], eax
call qword [sym.imp.KERNEL32.dll_lstrcatW]
lea rdx, [0x180092518]
lea rcx, [rbp + 0xa8]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
mov r8, qword [rbp + 0xab8]
jmp case.default.0x18003e029
test r13b, r13b
je case.default.0x18003e029
mov rcx, qword [rbp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rdx, qword [rbp + 0x1a0]
lea r9, [rbp + 0x620]
mov rcx, qword [rbp + 0x130]
mov qword [rsp + 0x30], r14
lea r8d, [rax*2 + 2]
lea rax, [rbp + 0x310]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x400
call qword [sym.imp.KERNEL32.dll_TransactNamedPipe]
mov rcx, qword [rbp + 0x130]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8, qword [rbp + 0xab8]
jmp case.default.0x18003e029
mov eax, 0x20
mov word [rbp + 0x298], ax
jmp case.default.0x18003e029
mov eax, 0x69
mov dword [rbp + 0x29a], 0x6c0063
mov word [rbp + 0x29e], ax
mov dword [rbp + 0x2a0], 0x6e0065
jmp case.default.0x18003e029
mov word [rbp + 0x2a6], r14w
mov r13b, 1
mov qword [rbp + 0x130], 0xffffffffffffffff
jmp case.default.0x18003e029
mov eax, 0x74
mov word [rbp + 0x2a4], ax
jmp case.default.0x18003e029
movups xmm0, xmmword [str..pipe]
movabs rax, 0x79006d005c
movups xmmword [rbp + 0xaa], xmm0
mov qword [rbp + 0xb8], rax
jmp case.default.0x18003e029
mov dword [rbp + 0x288], 0x670061
jmp case.default.0x18003e029
lea rax, [rbp + 0xa8]
mov qword [rbp + 0x1a8], rax
jmp case.default.0x18003e029
mov eax, 0x20
mov dword [rbp + 0x27a], 0x74006c
mov word [rbp + 0x27e], ax
mov dword [rbp + 0x280], 0x65006d
mov dword [rbp + 0x284], 0x730073
jmp case.default.0x18003e029
mov dword [rbp + 0x28c], 0x200065
inc esi
lea r9, [0x180000000]
sub rbx, 1
mov dword [rbp + 0xac0], esi
mov qword [rbp + 0x230], rbx
jne 0x18003e013
mov r15d, dword [rsp + 0x78]
mov rdi, qword [rbp - 0x80]
mov rdx, qword [rbp + 0x158]
mov ebx, dword [rbp + 0xd8]
mov byte [rsp + 0x73], r13b
mov r13, qword [rbp - 0x18]
xor r9d, r9d
mov dword [rsp + 0x20], 0x54
xor r8d, r8d
xor ecx, ecx
call fcn.1800367c0
mov rax, qword [rbp + 0xab0]
mov dword [rax], r14d
add ebx, 0x30cf
lea r9, [0x180000000]
mov dword [rbp + 0xd8], ebx
cmp ebx, 0x619e
jbe 0x18003dfb0
mov ebx, 0x1b
nop dword [rax]
cmp ebx, 0x1b
je 0x18003e49f
cmp ebx, 0x1476
jne 0x18003e4f1
mov rax, qword [rbp + 0xab0]
mov dword [rax], 0x1a
jmp 0x18003e6df
mov rsi, qword [rbp + 0xab0]
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x18003e960
mov rax, qword [rbp + 0xab8]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x18003e4c8
mov rcx, qword [rcx]
call rax
xor r9d, r9d
mov dword [rsp + 0x20], 0x54
xor r8d, r8d
lea rdx, [rsi + 8]
xor ecx, ecx
call fcn.1800367c0
mov rax, qword [rbp + 0xab8]
cmp qword [rax], 0
je 0x18003e4f1
call qword [rax + 8]
add ebx, 0x145b
cmp ebx, 0x28b6
jbe 0x18003e480
mov esi, 0x11c
nop dword [rax]
nop dword [rax + rax]
mov eax, esi
sub eax, 0x119
je 0x18003e6df
sub eax, 1
je 0x18003e5a9
sub eax, 1
je 0x18003e597
cmp eax, 1
jne 0x18003e5b6
mov rax, qword [rbp + 0xab8]
mov rbx, qword [rbp + 0xab0]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x18003e578
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x18003e960
mov rcx, qword [rcx]
call rax
xor r9d, r9d
mov dword [rsp + 0x20], 0x54
xor r8d, r8d
lea rdx, [rbx + 8]
xor ecx, ecx
call fcn.1800367c0
jmp 0x18003e5b6
xor r9d, r9d
mov dword [rsp + 0x20], 0x54
xor r8d, r8d
lea rdx, [rbx + 8]
xor ecx, ecx
call fcn.1800367c0
mov qword [rbx + 8], r14
jmp 0x18003e5b6
mov rax, qword [rbp + 0xab8]
cmp qword [rax], 0
je 0x18003e5b6
call qword [rax + 0x18]
jmp 0x18003e5b6
mov rax, qword [rbp + 0xab0]
mov dword [rax], 0x1a
dec esi
cmp esi, 0x118
ja 0x18003e510
mov ebx, 0xb9
nop dword [rax]
cmp ebx, 0xb9
je 0x18003e5f2
cmp ebx, 0x60d6
jne 0x18003e646
mov rax, qword [rbp + 0xab0]
mov dword [rax], 0x1b
jmp 0x18003e6df
mov rsi, qword [rbp + 0xab0]
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x18003e960
mov rax, qword [rbp + 0xab8]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x18003e61b
mov rcx, qword [rcx]
call rax
xor r9d, r9d
mov dword [rsp + 0x20], 0x54
xor r8d, r8d
lea rdx, [rsi + 8]
xor ecx, ecx
call fcn.1800367c0
mov rcx, qword [rbp + 0xab8]
mov rax, qword [rcx + 0x48]
test rax, rax
je 0x18003e646
call rax
add ebx, 0x601d
cmp ebx, 0xc03a
jbe 0x18003e5d0
mov ebx, 0x37
nop dword [rax]
cmp ebx, 0x37
je 0x18003e6ca
cmp ebx, 0x2af8
je 0x18003e6b4
cmp ebx, 0x55b9
je 0x18003e68b
cmp ebx, 0x807a
je 0x180040d8c
cmp ebx, 0xab3b
je 0x18003e6df
jmp 0x18003e6d1
mov edx, dword [rbp + 0x30]
lea r8, [rbp - 0x68]
mov rcx, qword [rbp + 0x1b0]
mov r9d, 0x1c
mov dword [rbp - 0x68], 0x1c
call qword [sym.imp.IMM32.dll_ImmGetCandidateListW]
mov r15d, 7
jmp 0x18003e6d1
xor eax, eax
mov dword [rbp + 0x30], r14d
xorps xmm0, xmm0
mov qword [rbp - 0x58], rax
movups xmmword [rbp - 0x68], xmm0
mov dword [rbp - 0x50], eax
jmp 0x18003e6d1
mov qword [rbp + 0x1b0], r14
add ebx, 0x2ac1
cmp ebx, 0xd5c5
jbe 0x18003e660
mov r15d, 1
mov ecx, 0xfe
mov dword [rsp + 0x78], r15d
inc ecx
cmp ecx, 0x100
jb 0x18003dd60
jmp 0x18003e703
mov rdi, qword [rbp - 0x80]
mov ecx, 0x4b
mov eax, ecx
sub eax, 0x4b
je 0x18003e71d
cmp eax, 0x4b
je 0x180040d8c
jmp 0x18003eabe
movsx eax, byte [r14]
add eax, 0xffffffd5
cmp eax, 0xe
ja case.0x18003e740.44
lea rdx, [0x180000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x415b8]
add rcx, rdx
jmp rcx
mov r15d, 0x6a
mov ebx, r15d
nop dword [rax + rax]
mov eax, ebx
sub eax, r15d
je 0x18003e776
sub eax, 0x34
je 0x18003e767
cmp eax, 0x34
je 0x18003eaae
jmp 0x18003e7ac
mov rax, qword [rbp + 0xab0]
mov dword [rax], 0x16
jmp 0x18003e7ac
mov rcx, qword [rbp + 0xab0]
lea r9, [rbp + 0xac0]
mov r8d, 0xea
mov rdx, qword [rcx + 8]
mov dword [rcx + 4], r14d
xor ecx, ecx
movzx eax, byte [r14]
mov byte [rbp + 0xac0], al
call fcn.180028780
cmp eax, 1
jne 0x18003e960
add ebx, 0x34
cmp ebx, 0x106
jb 0x18003e750
lea rdx, [0x180000000]
jmp 0x18003e7c6
mov r15d, 0x6a
mov rsi, qword [rbp + 0xab0]
cmp dword [rsi + 4], 0
jne 0x18003eaa8
mov ebx, r14d
mov dword [rbp + 0xac0], ebx
cmp ebx, 0x58
ja case.0x18003e7fd.9
mov eax, ebx
movzx eax, byte [rdx + rax + 0x4161c]
mov ecx, dword [rdx + rax*4 + 0x415f4]
add rcx, rdx
jmp rcx
movsx eax, word [rbp - 8]
lea rcx, [rbp + 0x88]
mov qword [rsp + 0x28], rcx
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x20], eax
lea r8d, [r9 + 4]
lea rcx, [rdx - 1]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rsi, rax
test rax, rax
jne 0x18003e837
mov byte [rsp + 0x6c], al
jmp 0x18003e915
movzx eax, byte [rsp + 0x6c]
test al, al
je 0x18003e915
mov r13, qword [rbp + 0x1f8]
mov r15d, 0xf2
movsxd rdi, dword [rbp - 8]
nop word [rax + rax]
cmp r15d, 0xf2
je 0x18003e971
cmp r15d, 0x6ad2
jne 0x18003e8ec
test al, al
je 0x18003e8ec
mov ebx, 0x10c
nop
cmp ebx, 0x10c
je 0x18003e8d2
cmp ebx, 0x82dc
je 0x18003e8a3
cmp ebx, 0x104ac
jne 0x18003e8d9
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x18003e8d9
lea rax, [rbp + 0x248]
mov r8d, 9
lea r9, [rbp + 0xf4]
mov qword [rsp + 0x20], rax
xor edx, edx
mov rcx, r13
call qword [sym.imp.dbghelp.dll_ImageDirectoryEntryToDataEx]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
jmp 0x18003e8d9
mov qword [rbp + 0x248], r14
add ebx, 0x81d0
cmp ebx, 0x18570
jbe 0x18003e880
movzx eax, byte [rsp + 0x6c]
add r15d, 0x69e0
cmp r15d, 0xd3c0
jbe 0x18003e860
mov rdi, qword [rbp - 0x80]
mov ebx, dword [rbp + 0xac0]
mov qword [rbp + 0x1f8], r13
mov r13, qword [rbp - 0x18]
mov rsi, qword [rbp + 0xab0]
mov r9d, 0x52
xor edx, edx
xor ecx, ecx
mov r8, qword [rsi + 8]
call fcn.1800165a0
cmp rax, 0xfffffffffffffffe
jae 0x18003e9ae
movzx eax, byte [r14]
lea r9, [rbp + 0xac0]
mov rdx, qword [rsi + 8]
mov r8d, 0xea
xor ecx, ecx
mov byte [rbp + 0xac0], al
call fcn.180028780
cmp eax, 1
je case.0x18003e7fd.9
mov r15d, 6
mov r10d, r15d
mov eax, r15d
jmp 0x180041007
movsx rax, di
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov edx, 0xf001f
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov r13, rax
test rax, rax
jne 0x18003e8e7
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor al, al
mov byte [rsp + 0x6c], al
jmp 0x18003e8ec
mov dword [rsi + 4], 1
jmp case.0x18003e7fd.9
mov byte [rsp + 0x6c], 1
mov dword [rbp - 8], 0x100
jmp case.0x18003e7fd.9
mov eax, VarR8FromCy
mov word [rbp + 0x95], ax
mov eax, VarCyFromDate
mov word [rbp + 0x96], ax
mov word [rbp + 0x97], r15w
jmp case.0x18003e7fd.9
mov eax, 0x69
mov word [rbp + 0x8b], ax
mov eax, 0x6c
mov word [rbp + 0x8c], ax
mov eax, VarCyFromDate
mov word [rbp + 0x8d], ax
jmp case.0x18003e7fd.9
mov byte [rbp + 0x9b], 0
jmp case.0x18003e7fd.9
mov eax, VarR8FromCy
mov word [rbp + 0x8e], ax
mov eax, 0x61
mov word [rbp + 0x8f], ax
mov eax, 0x6e
mov dword [rbp + 0x90], 0x697070
mov word [rbp + 0x93], ax
jmp case.0x18003e7fd.9
mov eax, VarCyFromDate
mov word [rbp + 0x98], ax
mov eax, 0x7463
mov word [rbp + 0x99], ax
jmp case.0x18003e7fd.9
mov dword [rbp + 0x88], 0x46794d
jmp case.0x18003e7fd.9
mov eax, 0x67
mov word [rbp + 0x94], ax
add ebx, 0xb
lea rdx, [0x180000000]
mov dword [rbp + 0xac0], ebx
mov r15d, 0x6a
lea eax, [rbx + 0xc1]
cmp eax, 0x124
jb 0x18003e7e0
mov dword [rsi], 0x15
mov r15d, 1
mov ecx, 0x4b
mov dword [rsp + 0x78], r15d
add ecx, 0x4b
cmp ecx, 0x96
jbe 0x18003e708
mov ebx, 0x492e8
jmp 0x1800406ea
mov rdi, qword [rbp - 0x80]
mov ebx, 0x492e8
jmp 0x1800406ea
mov r15d, 1
mov dword [rsp + 0x78], r15d
jmp 0x18003ecdb
movsx eax, byte [r14]
add eax, 0xffffffd0
cmp eax, 9
ja case.default.0x18003eb18
lea rdx, [0x180000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x41678]
add rcx, rdx
jmp rcx
mov rbx, qword [rbp + 0xab0]
cmp dword [rbx + 4], 0
jne 0x18003eb7c
mov r8, qword [rbx + 8]
mov r9d, 0x52
xor edx, edx
xor ecx, ecx
call fcn.1800165a0
cmp rax, 0xffffffffffffffff
jae 0x18003eb75
movzx eax, byte [r14]
lea r9, [rbp + 0xac0]
mov rdx, qword [rbx + 8]
mov r8d, 0xea
xor ecx, ecx
mov byte [rbp + 0xac0], al
call fcn.180028780
cmp eax, 1
je 0x18003eb7c
mov r15d, 6
mov eax, r15d
jmp 0x180041007
mov dword [rbx + 4], 1
mov dword [rbx], 0x13
jmp 0x18003ecd6
mov eax, 0x121
mov dword [rbp + 0xac0], eax
sub eax, 0x121
je 0x18003ebc1
sub eax, 1
je 0x18003ebb1
sub eax, 1
je 0x18003eb6d
cmp eax, 1
je 0x18003ecd6
jmp 0x18003ecbd
mov r15d, 7
mov dword [rsp + 0x78], r15d
jmp 0x18003ecbd
mov esi, 7
mov ebx, r14d
lea r14, [0x180000000]
lea edi, [rsi + 0x5a]
lea r13d, [rsi + 0x19]
lea r15d, [rsi + 0x1e]
nop dword [rax + rax]
cmp ebx, 6
ja case.default.0x18003ebf6
mov eax, ebx
mov ecx, dword [r14 + rax*4 + 0x416a0]
add rcx, r14
jmp rcx
mov word [rbp - 0x52], r15w
jmp case.default.0x18003ebf6
movzx eax, word [0x180092530]
mov word [rbp - 0x5d], ax
mov word [rbp - 0x5b], 0x54
jmp case.default.0x18003ebf6
mov dword [rbp - 0x68], 0x656c4f
jmp case.default.0x18003ebf6
mov r8, qword [sym.imp.ole32.dll_OleCreateLinkToFileEx]
lea rdx, [rbp - 0x68]
mov eax, 0x70
lea rcx, [rbp + 0x410]
mov word [rbp - 0x51], ax
mov word [rbp - 0x50], r12w
call fcn.180001170
jmp case.default.0x18003ebf6
mov eax, reloc.OLEAUT32.dll_VarR4FromUI1
mov word [rbp - 0x65], ax
jmp case.default.0x18003ebf6
movzx eax, word [0x1800923a0]
lea rcx, [rbp - 0x68]
mov word [rbp - 0x64], ax
dec rcx
mov word [rbp - 0x62], di
nop dword [rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18003ec70
mov eax, dword [str.teLi]
mov dword [rcx], eax
movzx eax, byte [0x180092538]
mov byte [rcx + 4], al
jmp case.default.0x18003ebf6
movabs rax, 0x7845656c69466f
mov qword [rbp - 0x5a], rax
mov word [rbp - 0x53], r13w
inc ebx
sub rsi, 1
jne 0x18003ebe0
mov r15d, dword [rsp + 0x78]
xor r14d, r14d
mov r13, qword [rbp - 0x18]
mov rdi, qword [rbp - 0x80]
mov eax, dword [rbp + 0xac0]
inc eax
mov dword [rbp + 0xac0], eax
cmp eax, 0x125
jb 0x18003eb92
mov eax, 0x121
add eax, 0x93e3
cmp eax, 0x1bba9
jbe 0x18003d1d4
mov ebx, 0x42886
jmp 0x1800406ea
mov eax, 0x5a
nop word [rax + rax]
cmp eax, 0x5a
je 0x18003ed28
cmp eax, 0x870
je 0x18003ed1c
cmp eax, 0x1086
je case.0x18004013d.132
jmp 0x18003f301
mov r15d, ecx
mov dword [rsp + 0x78], ecx
jmp 0x18003f301
movsx eax, byte [r14]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x18004068d.12
lea rdx, [0x180000000]
cdqe
movzx eax, byte [rdx + rax + 0x416d4]
mov ecx, dword [rdx + rax*4 + 0x416bc]
add rcx, rdx
jmp rcx
mov esi, VarR8FromCy
nop word [rax + rax]
cmp esi, 0x50
je 0x18003ed76
cmp esi, 0x1e00
je 0x18003f2f7
jmp 0x18003f014
mov qword [rsp + 0x58], r14
lea rcx, [rbp + 0xac0]
mov qword [rsp + 0x50], r14
xor r8d, r8d
mov qword [rsp + 0x48], r14
xor edx, edx
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rbp + 0xac0], r9
mov r9d, 0xdc
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
call fcn.1800054a0
mov rbx, qword [rbp + 0xab0]
mov qword [rbx + 8], rax
test rax, rax
jne 0x18003efe6
mov ebx, r14d
cmp ebx, 0x24
ja case.0x18003edef.1
lea rdx, [0x180000000]
mov eax, ebx
mov ecx, dword [rdx + rax*4 + 0x4174c]
add rcx, rdx
jmp rcx
mov dword [rbp + 0x34], 0x104
jmp case.0x18003edef.1
mov word [rbp + 0x28e], r14w
jmp case.0x18003edef.1
mov r8d, 4
mov word [rbp + 0x298], r14w
lea rdx, [0x1800927ae]
lea rcx, [rbp + 0x270]
call fcn.180060970
movabs rax, 0x64002f00630062
mov qword [rbp + 0x2a0], rax
jmp case.0x18003edef.1
mov dword [rbp + 0x2aa], 0x2f0066
jmp case.0x18003edef.1
mov eax, 0x2f
mov word [rbp - 0x64], ax
jmp case.0x18003edef.1
mov r8d, 5
lea rdx, [0x180092990]
lea rcx, [rbp + 0x280]
jmp 0x18003efc6
mov dword [rbp + 0x28a], 0x74006e
jmp case.0x18003edef.1
mov r8d, dword [rbp + 0x38]
lea rax, [rbp + 0xec]
mov dword [rsp + 0x30], r14d
lea r9, [rbp + 0x410]
mov qword [rsp + 0x28], rax
lea rdx, [rbp - 0x68]
mov eax, dword [rbp + 0x34]
lea rcx, [rbp + 0x270]
mov dword [rsp + 0x20], eax
mov dword [rbp + 0xec], r14d
call qword [sym.imp.urlmon.dll_CoInternetCombineUrl]
mov r15d, 6
mov dword [rsp + 0x78], r15d
jmp case.0x18003edef.1
mov word [rbp + 0x2ae], r14w
mov dword [rbp - 0x68], 0x2e002e
jmp case.0x18003edef.1
mov eax, 0x73
mov word [rbp + 0x290], ax
mov eax, dword [0x180092aa6]
mov dword [rbp + 0x292], eax
movzx eax, word [0x180092aaa]
mov word [rbp + 0x296], ax
jmp case.0x18003edef.1
mov eax, 0x2f
mov dword [rbp - 0x5c], 0x650064
mov word [rbp - 0x5e], ax
jmp case.0x18003edef.1
mov r8d, 3
lea rdx, str.httPIO:_Scheme_must_be_part_of_URI.
lea rcx, [rbp + 0x270]
call fcn.180065084
movsd xmm0, qword [0x180092b52]
movzx eax, word [0x180092b5a]
movsd qword [rbp + 0x276], xmm0
mov word [rbp + 0x27e], ax
mov word [rbp + 0x280], r14w
jmp case.0x18003edef.1
mov dword [rbp - 0x62], 0x2e002e
jmp case.0x18003edef.1
mov eax, 0x68
mov dword [rbp - 0x4a], 0x6d0074
mov word [rbp - 0x4c], ax
mov word [rbp - 0x46], r14w
jmp case.0x18003edef.1
mov dword [rbp - 0x58], 0x610066
mov dword [rbp - 0x54], 0x6c0075
mov dword [rbp - 0x50], 0x2e0074
jmp case.0x18003edef.1
mov dword [rbp + 0x38], 0x8000000
jmp case.0x18003edef.1
mov dword [rbp + 0x2a8], VarCyFromDate
jmp case.0x18003edef.1
mov r8d, 1
lea rdx, [0x180092bba]
lea rcx, [rbp + 0x28e]
call fcn.180065084
add ebx, 2
lea eax, [rbx + 0xb1]
cmp eax, 0xd7
jb 0x18003edd3
mov rbx, qword [rbp + 0xab0]
mov rdx, qword [rbx + 8]
lea r9, [rbp + 0xac0]
mov r8d, 0xea
mov byte [rbp + 0xac0], 0x2e
xor ecx, ecx
call fcn.180028780
cmp eax, 1
jne 0x18004048c
mov dword [rbx], 0x12
add esi, 0x1db0
mov r9d, 5
cmp esi, 0x3b60
jbe 0x18003ed60
mov ebx, 0x2a
mov eax, ebx
sub eax, 0x29
je 0x18003f2f7
cmp eax, 1
jne 0x18003f08d
mov rsi, qword [rbp + 0xab0]
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x18004048c
mov rax, qword [rbp + 0xab8]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x18003f06a
mov rcx, qword [rcx]
call rax
xor r9d, r9d
mov dword [rsp + 0x20], 0x54
xor r8d, r8d
lea rdx, [rsi + 8]
xor ecx, ecx
call fcn.1800367c0
mov rax, qword [rbp + 0xab0]
mov dword [rax], r14d
dec ebx
cmp ebx, 0x28
ja 0x18003f031
mov ebx, 0x115
nop dword [rax]
cmp ebx, 0x115
je 0x18003f0c2
cmp ebx, 0x9abb
jne 0x18003f114
mov rsi, qword [rbp + 0xab0]
mov dword [rsi], 0x1a
jmp 0x18003f2f7
mov rsi, qword [rbp + 0xab0]
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x18004048c
mov rax, qword [rbp + 0xab8]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x18003f0eb
mov rcx, qword [rcx]
call rax
xor r9d, r9d
mov dword [rsp + 0x20], 0x54
xor r8d, r8d
lea rdx, [rsi + 8]
xor ecx, ecx
call fcn.1800367c0
mov rax, qword [rbp + 0xab8]
cmp qword [rax], 0
je 0x18003f114
call qword [rax + 8]
add ebx, 0x99a6
cmp ebx, 0x1334c
jbe 0x18003f0a0
mov ebx, 0xb4
nop dword [rax + rax]
cmp ebx, 0xb4
je 0x18003f1a5
cmp ebx, 0x34bc
je 0x18003f16a
cmp ebx, 0x68c4
jne 0x18003f1b7
mov rax, qword [rbp + 0xab8]
cmp qword [rax], 0
je 0x18003f158
call qword [rax + 0x18]
mov rax, qword [rbp + 0xab0]
mov dword [rax], 0x1a
jmp 0x18003f2f7
mov rax, qword [rbp + 0xab8]
mov rsi, qword [rbp + 0xab0]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x18003f18a
mov rcx, qword [rsi + 8]
mov rcx, qword [rcx]
call rax
xor r9d, r9d
mov dword [rsp + 0x20], 0x54
xor r8d, r8d
lea rdx, [rsi + 8]
xor ecx, ecx
call fcn.1800367c0
jmp 0x18003f1b7
mov rax, qword [rbp + 0xab0]
cmp qword [rax + 8], 0
je 0x18004048c
add ebx, 0x3408
cmp ebx, 0x9c18
jbe 0x18003f130
mov ebx, VarR4FromUI1
nop
cmp ebx, 0x41
jae case.0x18004068d.12
mov eax, ebx
sub eax, 0x3f
je 0x18003f25f
cmp eax, 1
jne 0x18003f288
mov rsi, qword [rbp + 0xab0]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 0x54
xor ecx, ecx
lea rdx, [rsi + 8]
call fcn.1800367c0
mov rax, qword [rbp + 0xab8]
cmp qword [rax], 0
je 0x18003f2f1
movzx esi, byte [rsp + 0x70]
mov ebx, 0x17
mov r12d, dword [rbp - 4]
mov rdi, rax
mov r13, 0xffffffffffffffff
mov eax, ebx
sub eax, 0x16
je 0x18003f28f
cmp eax, 1
jne 0x18003f2c8
xor r8d, r8d
mov qword [rbp + 0x138], r13
xor edx, edx
mov rcx, r13
movzx esi, al
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov r12d, eax
jmp 0x18003f2c8
mov rax, qword [rbp + 0xab0]
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18004048c
mov rax, qword [rbp + 0xab8]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x18003f288
mov rcx, qword [rcx]
call rax
inc ebx
jmp 0x18003f1d0
test r12d, r12d
movzx eax, sil
mov ecx, r14d
cmovne ecx, eax
movzx esi, cl
test cl, cl
je 0x18003f2c5
mov rcx, qword [rbp + 0x138]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.dbghelp.dll_SymEnumerateModules64]
mov rcx, qword [rbp + 0x138]
mov r12d, eax
call qword [sym.imp.dbghelp.dll_SymCleanup]
call qword [rdi + 0x48]
dec ebx
cmp ebx, 0x15
ja 0x18003f232
mov r13, qword [rbp - 0x18]
mov rdi, qword [rbp - 0x80]
mov dword [rbp - 4], r12d
mov r12d, 0xa
mov byte [rsp + 0x70], sil
mov rsi, qword [rbp + 0xab0]
mov dword [rsi], 0x1b
mov eax, 0x5a
mov ebx, 0x3be24
mov ecx, 1
add eax, 0x816
lea r9d, [rcx + 4]
cmp eax, 0x1842
jbe 0x18003ed00
jmp 0x1800406ea
mov rdi, qword [rbp - 0x80]
jmp 0x18003f32c
lea r8, [0x180000000]
mov esi, 0x79
mov eax, esi
cmp eax, esi
je 0x18003f347
cmp eax, 0x4fe1
je 0x18003eb6d
jmp 0x18003f45b
movsx edx, byte [r14]
lea eax, [rdx - 0x30]
cmp eax, 9
ja case.default.0x18003f364
cdqe
mov ecx, dword [r8 + rax*4 + 0x417e0]
add rcx, r8
jmp rcx
mov rbx, qword [rbp + 0xab0]
lea r9, [rbp + 0xac0]
mov byte [rbp + 0xac0], dl
mov r8d, 0xea
xor ecx, ecx
mov rdx, qword [rbx + 8]
call fcn.180028780
mov eax, 0x11
jmp 0x18003f44c
mov rbx, qword [rbp + 0xab0]
cmp dword [rbx + 4], 0
jne 0x18003f447
mov r8, qword [rbx + 8]
mov r9d, 0x52
xor edx, edx
xor ecx, ecx
call fcn.1800165a0
cmp rax, 0xffffffffffffffff
jae 0x18003f447
mov qword [rsp + 0x58], r14
lea rcx, [rbp + 0xac0]
mov qword [rsp + 0x50], r14
mov r9d, 0xdc
mov qword [rsp + 0x48], r14
xor r8d, r8d
mov qword [rsp + 0x40], r14
xor edx, edx
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
mov qword [rbp + 0xac0], 5
call fcn.1800054a0
mov qword [rbx + 8], rax
test rax, rax
je 0x180040da4
movzx ecx, byte [r14]
lea r9, [rbp + 0xac0]
mov byte [rbp + 0xac0], cl
mov r8d, 0xea
xor ecx, ecx
mov rdx, rax
call fcn.180028780
cmp eax, 1
jne 0x180040d9a
mov dword [rbx + 4], eax
mov eax, 0x18
mov dword [rbx], eax
mov r15d, 1
mov dword [rsp + 0x78], r15d
mov eax, esi
add eax, 0x4f68
lea r8, [0x180000000]
cmp eax, 0x9ed0
jbe 0x18003f333
jmp 0x18003f478
mov rdi, qword [rbp - 0x80]
mov ecx, 0x111
nop dword [rax]
mov eax, ecx
sub eax, 0x111
je 0x18003f497
cmp eax, 1
je 0x18004100a
jmp 0x1800400c6
movsx eax, byte [r14]
lea rdx, [0x180000000]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x18003f4c2.16
cdqe
movzx eax, byte [rdx + rax + 0x41828]
mov ecx, dword [rdx + rax*4 + 0x41808]
add rcx, rdx
jmp rcx
mov rbx, qword [rbp + 0xab0]
cmp dword [rbx + 4], 0
jne 0x1800400b6
mov r8, qword [rbx + 8]
mov r9d, 0x52
xor edx, edx
xor ecx, ecx
call fcn.1800165a0
cmp rax, 0xffffffffffffffff
jae 0x18003f7d5
mov esi, 0x2f
nop word [rax + rax]
mov eax, esi
sub eax, 0x2d
je 0x18003f74f
sub eax, 1
je 0x18003f525
cmp eax, 1
jne 0x18003f7c5
mov dword [rbp + 0x40], 0xffffffff
jmp 0x18003f7c5
mov qword [rsp + 0x58], r14
lea rcx, [rbp + 0xac0]
mov qword [rsp + 0x50], r14
mov r9d, 0xdc
mov qword [rsp + 0x48], r14
xor r8d, r8d
mov qword [rsp + 0x40], r14
xor edx, edx
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
mov qword [rbp + 0xac0], 5
call fcn.1800054a0
mov qword [rbx + 8], rax
test rax, rax
jne 0x18003f734
mov ebx, 0xb8
cmp ebx, 0x11068
ja 0x18003f65a
je 0x18003f647
cmp ebx, 0x8890
ja 0x18003f60b
je 0x18003f5fd
cmp ebx, 0xb8
je 0x18003f5ea
cmp ebx, 0x2e00
je 0x18003f5ce
cmp ebx, 0x5b48
jne 0x18003f71b
mov eax, 0x2e
mov dword [rbp - 0x56], 0x6f0073
mov word [rbp - 0x52], ax
jmp 0x18003f71b
mov eax, VarCyFromDate
mov dword [rbp - 0x5e], 0x6e006f
mov word [rbp - 0x60], ax
mov dword [rbp - 0x5a], 0x6f0074
jmp 0x18003f71b
mov dword [rbp - 0x68], 0x770077
mov dword [rbp - 0x64], 0x2e0077
jmp 0x18003f71b
mov eax, VarCyFromDate
mov word [rbp - 0x50], ax
jmp 0x18003f71b
cmp ebx, 0xb5d8
je 0x18003f63b
cmp ebx, 0xe320
jne 0x18003f71b
mov eax, 0x2f
mov dword [rbp - 0x48], 0x620061
mov word [rbp - 0x4a], ax
mov dword [rbp - 0x44], 0x2f0063
jmp 0x18003f71b
mov dword [rbp - 0x4e], 0x6d006f
jmp 0x18003f71b
mov dword [rbp - 0x40], 0x650064
mov dword [rbp - 0x3c], 0x2f0066
jmp 0x18003f71b
cmp ebx, 0x1c588
ja 0x18003f6ff
je 0x18003f6e1
cmp ebx, 0x13db0
je 0x18003f6b8
cmp ebx, 0x16af8
je 0x18003f697
cmp ebx, 0x19840
jne 0x18003f71b
mov qword [rbp + 0x1b8], r14
mov dword [rbp + 0x3c], 2
jmp 0x18003f71b
lea rdx, [0x180092540]
lea rcx, [rbp + 0x320]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
mov eax, 0x2f
mov dword [rbp + 0x32c], eax
jmp 0x18003f71b
mov eax, 0x68
mov word [rbp - 0x38], r14w
lea rdx, [0x180092548]
mov dword [rbp + 0x320], eax
lea rcx, [rbp + 0x320]
lea r8d, [rax - 0x66]
call fcn.180060970
jmp 0x18003f71b
mov r9d, dword [rbp + 0x3c]
lea rdx, [rbp + 0x320]
mov r8, qword [rbp + 0x1b8]
lea rcx, [rbp - 0x68]
call qword [sym.imp.urlmon.dll_CoInternetIsFeatureZoneElevationEnabled]
jmp 0x18003f71b
cmp ebx, 0x1f2d0
je 0x18003f715
cmp ebx, 0x22018
je 0x18004100a
jmp 0x18003f71b
mov r15d, 6
add ebx, 0x2d48
cmp ebx, 0x24ca8
jbe 0x18003f581
mov rbx, qword [rbp + 0xab0]
movzx ecx, word [rbp + 0x40]
lea rdx, [rbp + 0x2f0]
movsd qword [rbp + 0x2f0], xmm7
call qword [sym.imp.OLEAUT32.dll_VarFormatDateTime]
jmp 0x18003f7c5
movzx eax, byte [r14]
lea r9, [rbp + 0xac0]
mov rdx, qword [rbx + 8]
mov r8d, 0xea
xor ecx, ecx
mov byte [rbp + 0xac0], al
call fcn.180028780
cmp eax, 1
je 0x18003f7c5
mov ecx, 0xb8
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xb8
je 0x18003f7ac
cmp eax, 0x34
jne 0x18003f7ba
mov rcx, qword [rbp + 0x208]
lea rdx, [rbp + 0x2d8]
call qword [sym.imp.OLEAUT32.dll_VarCyInt]
mov eax, 6
jmp 0x18004100d
mov qword [rbp + 0x208], r14
mov qword [rbp + 0x2d8], r14
add ecx, 0x34
cmp ecx, 0x120
jb 0x18003f780
dec esi
cmp esi, 0x2c
ja 0x18003f500
jmp 0x1800400b6
mov dword [rbx + 4], 1
jmp 0x1800400b6
mov eax, 0x9d
cmp eax, 0x9d
je 0x18003f828
add eax, 0x7c
cmp eax, 0x119
jb 0x18003f7e6
mov ebx, 0xfe
nop dword [rax]
mov eax, ebx
sub eax, 0xfe
je 0x18003f8b8
cmp eax, 1
jne 0x18003f944
mov rax, qword [rbp + 0xab0]
mov dword [rax], 0x14
jmp 0x1800400b6
mov qword [rsp + 0x58], r14
lea rcx, [rbp + 0xac0]
mov qword [rsp + 0x50], r14
mov r9d, 0xdc
mov qword [rsp + 0x48], r14
xor r8d, r8d
mov qword [rsp + 0x40], r14
xor edx, edx
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
mov qword [rbp + 0xac0], 5
call fcn.1800054a0
mov rbx, qword [rbp + 0xab0]
mov qword [rbx + 8], rax
test rax, rax
je 0x18003f7a2
lea r9, [rbp + 0xac0]
mov byte [rbp + 0xac0], 0x2e
mov r8d, 0xea
mov rdx, rax
xor ecx, ecx
call fcn.180028780
cmp eax, 1
jne 0x180040db0
mov dword [rbx], 0x12
jmp 0x1800400b6
mov qword [rsp + 0x58], r14
lea rcx, [rbp + 0xac0]
mov qword [rsp + 0x50], r14
mov r9d, 0xdc
mov qword [rsp + 0x48], r14
xor r8d, r8d
mov qword [rsp + 0x40], r14
xor edx, edx
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
mov qword [rbp + 0xac0], 5
call fcn.1800054a0
mov rsi, qword [rbp + 0xab0]
mov qword [rsi + 8], rax
test rax, rax
je 0x18003f7a2
movzx ecx, byte [r14]
lea r9, [rbp + 0xac0]
mov byte [rbp + 0xac0], cl
mov r8d, 0xea
xor ecx, ecx
mov rdx, rax
call fcn.180028780
cmp eax, 1
jne 0x18003f7a2
mov dword [rsi + 4], r14d
inc ebx
cmp ebx, 0x100
jb 0x18003f800
mov ebx, 0xc3
nop word [rax + rax]
cmp ebx, 0x13ce
ja 0x18003fa99
je 0x18003fa66
cmp ebx, 0xc3
je 0x18003fa55
cmp ebx, 0x492
je 0x18003fa40
cmp ebx, 0x861
je 0x18003fa0e
cmp ebx, 0xc30
je 0x18003f9ba
cmp ebx, 0xfff
jne 0x18003fba8
mov dword [rbp + 0x68], r14d
mov qword [rbp + 0x1d0], r14
mov dword [rbp + 0x64], r12d
jmp 0x18003fba8
mov rcx, qword [rbp + 0x100]
test rcx, rcx
je 0x18003f9dd
mov rdx, rcx
mov rcx, qword [rbp + 0x140]
call qword [sym.imp.USER32.dll_ReleaseDC]
mov qword [rbp + 0x100], r14
mov rax, qword [rbp + 0xab8]
mov dword [rbp + 0x6c], r14d
mov dword [rbp + 0x44], r14d
mov rax, qword [rax + 0x28]
test rax, rax
je 0x18003fba8
mov rcx, qword [rbp + 0xab0]
mov rcx, qword [rcx + 8]
mov rcx, qword [rcx]
call rax
jmp 0x18003fba8
mov rax, qword [rbp + 0xab0]
cmp qword [rax + 8], 0
je 0x18003f7a2
mov rcx, qword [rbp + 0x140]
mov qword [rbp + 0x178], r14
call qword [sym.imp.USER32.dll_GetDC]
mov qword [rbp + 0x100], rax
jmp 0x18003fba8
mov rcx, rdi
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov qword [rbp + 0x140], rax
jmp 0x18003fba8
mov qword [rbp - 0x80], r14
mov rdi, r14
mov byte [rsp + 0x6d], 1
jmp 0x18003fba8
mov rdx, qword [rbp + 0xab0]
xor r9d, r9d
add rdx, 8
mov dword [rbp + 0x60], 0x14
xor r8d, r8d
mov qword [rbp + 0x1c0], r14
xor ecx, ecx
mov dword [rsp + 0x20], 0x54
call fcn.1800367c0
jmp 0x18003fba8
cmp ebx, 0x179d
je 0x18003fb92
cmp ebx, 0x1b6c
je 0x18003fb49
cmp ebx, 0x1f3b
je 0x18003fb30
cmp ebx, 0x230a
jne 0x18003fba8
mov edx, dword [rbp + 0x4c]
mov r9d, dword [rbp + 0x64]
mov r8d, dword [rbp + 0x68]
mov rcx, qword [rbp + 0x100]
mov dword [rsp + 0x50], edx
mov edx, dword [rbp + 0x50]
mov dword [rsp + 0x48], edx
mov edx, dword [rbp + 0x54]
mov dword [rsp + 0x40], edx
mov edx, dword [rbp + 0x58]
mov dword [rsp + 0x38], edx
mov edx, dword [rbp + 0x5c]
mov dword [rsp + 0x30], edx
mov rdx, qword [rbp + 0x180]
mov qword [rsp + 0x28], rdx
mov edx, dword [rbp + 0x60]
mov dword [rsp + 0x20], edx
mov edx, dword [rbp + 0x6c]
call qword [sym.imp.MSIMG32.dll_TransparentBlt]
cmp byte [rsp + 0x6d], 0
je 0x1800400b6
mov rcx, qword [rbp + 0x228]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
jmp 0x1800400b6
movzx eax, byte [rsp + 0x6d]
mov ecx, r14d
cmp dword [rbp + 0x48], 0
mov dword [rbp + 0x4c], r14d
cmove ecx, eax
mov byte [rsp + 0x6d], cl
jmp 0x18003fba8
mov rax, qword [rbp + 0xab0]
mov r9, qword [rbp + 0x1c0]
mov r8, qword [rbp + 0x1d0]
mov edx, dword [rbp + 0x44]
mov rcx, qword [rbp + 0x178]
mov dword [rax], r14d
lea rax, [rbp + 0x228]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], rax
call qword [sym.imp.urlmon.dll_CreateAsyncBindCtxEx]
mov dword [rbp + 0x48], eax
mov dword [rbp + 0x54], r12d
mov dword [rbp + 0x50], 0x14
jmp 0x18003fba8
mov qword [rbp + 0x180], r14
mov dword [rbp + 0x5c], r14d
mov qword [rbp + 0x228], r14
mov dword [rbp + 0x58], r14d
add ebx, 0x3cf
cmp ebx, 0x2616
jbe 0x18003f960
mov esi, 3
nop
mov eax, esi
sub eax, 3
je 0x18003fc31
sub eax, 0x49
je 0x18003fbd7
cmp eax, 0x49
je 0x1800400b6
jmp 0x18003fc43
mov rax, qword [rbp + 0xab8]
mov rbx, qword [rbp + 0xab0]
add rbx, 8
mov rax, qword [rax + 0x28]
test rax, rax
je 0x18003fbfa
mov rcx, qword [rbx]
mov rcx, qword [rcx]
call rax
xor r9d, r9d
mov dword [rsp + 0x20], 0x54
xor r8d, r8d
mov rdx, rbx
xor ecx, ecx
call fcn.1800367c0
mov rax, qword [rbp + 0xab8]
cmp qword [rax], 0
je 0x18003fc22
call qword [rax + 8]
mov rax, qword [rbp + 0xab0]
mov dword [rax], 0x1a
jmp 0x18003fc43
mov rax, qword [rbp + 0xab0]
cmp qword [rax + 8], 0
je 0x18003f7a2
add esi, 0x49
cmp esi, 0xde
jb 0x18003fbc0
mov ebx, 0x125
mov dword [rbp + 0xac0], ebx
nop dword [rax]
mov eax, ebx
sub eax, 0x125
je 0x18003fcb8
cmp eax, 1
jne 0x18003fdd8
mov r15, qword [rbp + 0xab8]
cmp qword [r15], 0
je 0x18003ffb2
mov ebx, r14d
lea esi, [rax + 7]
lea r14, [0x180000000]
lea edi, [rax + 0x64]
lea r13d, [rax + 0x63]
lea r12d, [rax + 0x78]
nop dword [rax + rax]
cmp ebx, 7
ja case.default.0x18003fcb6
mov eax, ebx
mov ecx, dword [r14 + rax*4 + 0x418a0]
add rcx, r14
jmp rcx
mov rsi, qword [rbp + 0xab0]
cmp qword [rsi + 8], 0
je 0x18003f7a2
mov rax, qword [rbp + 0xab8]
cmp qword [rax + 0x28], 0
je 0x18003fdbf
movzx edi, byte [rsp + 0x74]
mov ebx, 0x98
mov r12d, dword [rbp + 0x70]
mov r13, rax
nop dword [rax]
cmp ebx, 0xcd70
ja 0x18003fd61
je 0x18003fd33
cmp ebx, 0x98
je 0x18003fd2e
cmp ebx, 0x44e0
je 0x18003fd25
cmp ebx, 0x8928
jne 0x18003fd90
movups xmm0, xmmword [0x18007e8c0]
mov r12d, r14d
movups xmmword [rbp + 0x3c0], xmm0
jmp 0x18003fd90
mov qword [rbp + 0x188], r14
jmp 0x18003fd90
mov dil, 1
jmp 0x18003fd90
mov rcx, qword [rbp + 0x188]
lea r9, [rbp + 0x220]
lea r8, [rbp + 0x3c0]
mov qword [rbp + 0x220], r14
mov edx, r12d
call qword [sym.imp.OLEACC.dll_AccessibleObjectFromWindow]
test eax, eax
je 0x18003fd90
xor dil, dil
jmp 0x18003fd90
cmp ebx, 0x111b8
je 0x18003fd7e
cmp ebx, 0x15600
jne 0x18003fd90
mov rcx, qword [rsi + 8]
mov rcx, qword [rcx]
call qword [r13 + 0x28]
jmp 0x18003fd90
test dil, dil
je 0x18003fd90
mov rcx, qword [rbp + 0x220]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
add ebx, 0x4448
cmp ebx, 0x199b0
jbe 0x18003fcf0
mov r13, qword [rbp - 0x18]
mov ebx, dword [rbp + 0xac0]
mov dword [rbp + 0x70], r12d
mov r12d, 0xa
mov byte [rsp + 0x74], dil
mov rdi, qword [rbp - 0x80]
xor r9d, r9d
mov dword [rsp + 0x20], 0x54
xor r8d, r8d
lea rdx, [rsi + 8]
xor ecx, ecx
call fcn.1800367c0
inc ebx
mov dword [rbp + 0xac0], ebx
cmp ebx, 0x127
jb 0x18003fc60
mov ebx, 0x4c
mov dword [rbp + 0xac0], ebx
nop word [rax + rax]
mov eax, ebx
sub eax, 0x4a
je 0x1800400de
sub eax, 1
je 0x18004006e
cmp eax, 1
jne 0x180040080
mov rsi, qword [rbp + 0xab0]
cmp qword [rsi + 8], 0
jne 0x18004003a
mov ebx, 0x52
cmp ebx, 0x52
je 0x18004000d
cmp ebx, 0x2f16
je 0x18003ffc4
cmp ebx, 0x5dda
je 0x180041010
jmp 0x180040022
mov r8d, 3
lea rdx, [0x180092550]
lea rcx, [rbp - 0x68]
call fcn.1800666b0
movzx eax, word [0x180092554]
mov word [rbp - 0x56], di
mov word [rbp - 0x55], ax
movzx eax, byte [0x180092556]
mov byte [rbp - 0x53], al
jmp case.default.0x18003fcb6
movabs rax, 0x6c6946656d614e
mov qword [rbp + 0x160], rax
jmp case.default.0x18003fcb6
lea r8, [rbp + 0x410]
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x160]
call qword [sym.imp.dbghelp.dll_FindExecutableImage]
call qword [r15 + 0x18]
jmp case.default.0x18003fcb6
lea rdx, [0x180092558]
lea rcx, [rbp - 0x53]
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [str.eLoc]
mov dword [rbp - 0x52], eax
mov dword [rbp - 0x4e], 0x657461
jmp case.default.0x18003fcb6
movzx eax, word [0x180092564]
lea rdx, [0x180092568]
mov word [rbp - 0x67], ax
lea rcx, [rbp - 0x65]
movzx eax, byte [0x180092566]
mov r8d, 3
mov byte [rbp - 0x65], al
call fcn.1800650e0
mov r8d, 2
mov dword [rbp - 0x63], 0x726568
lea rdx, [0x18009256c]
lea rcx, [rbp - 0x68]
call fcn.1800666b0
jmp case.default.0x18003fcb6
mov word [rbp - 0x4b], r13w
jmp case.default.0x18003fcb6
lea rcx, [rbp - 0x68]
mov word [rbp - 0x5e], r12w
dec rcx
mov dword [rbp - 0x5d], 0x6f626d
nop
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18003ff50
movzx eax, word [0x18008f568]
mov word [rcx], ax
jmp case.default.0x18003fcb6
lea rcx, [rbp + 0x160]
dec rcx
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18003ff70
movzx eax, word [0x180092574]
mov word [rcx], ax
movzx eax, byte [0x180092576]
mov byte [rcx + 2], al
mov eax, VarR8FromCy
mov word [rbp - 0x68], ax
inc ebx
sub rsi, 1
jne 0x18003fca0
mov r13, qword [rbp - 0x18]
lea r12d, [rsi + 0xa]
mov rdi, qword [rbp - 0x80]
xor r14d, r14d
mov rax, qword [rbp + 0xab0]
mov dword [rax], 0x1a
jmp 0x1800400b6
mov r15, qword [rbp + 0x200]
mov rcx, r15
call qword [sym.imp.COMCTL32.dll_InitializeFlatSB]
test eax, eax
jne 0x18003ffe2
mov byte [rsp + 0x75], al
lea r15d, [rax + 6]
jmp 0x180040022
cmp byte [rsp + 0x75], 0
je 0x180040005
mov eax, 1
mov rcx, r15
mov r8d, eax
mov edx, eax
call qword [sym.imp.COMCTL32.dll_FlatSB_ShowScrollBar]
mov rcx, r15
call qword [sym.imp.COMCTL32.dll_UninitializeFlatSB]
mov r15d, 6
jmp 0x180040022
mov rcx, r14
mov byte [rsp + 0x75], 1
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov qword [rbp + 0x200], r14
add ebx, 0x2ec4
cmp ebx, 0x8c4c
jbe 0x18003fe34
mov ebx, dword [rbp + 0xac0]
mov rax, qword [rbp + 0xab8]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x180040053
mov rcx, qword [rsi + 8]
mov rcx, qword [rcx]
call rax
xor r9d, r9d
mov dword [rsp + 0x20], 0x54
xor r8d, r8d
lea rdx, [rsi + 8]
xor ecx, ecx
call fcn.1800367c0
jmp 0x180040080
mov rax, qword [rbp + 0xab8]
mov rax, qword [rax + 0x48]
test rax, rax
je 0x180040080
call rax
dec ebx
mov dword [rbp + 0xac0], ebx
cmp ebx, 0x49
ja 0x18003fe00
lea rdx, [0x180000000]
mov eax, 0x1c
nop dword [rax]
cmp eax, 0x1c
je 0x180040ec4
cmp eax, 0x40
je 0x1800400b6
add eax, 0x24
cmp eax, 0x64
jb 0x1800400a0
mov r15d, 1
mov ecx, 0x111
mov dword [rsp + 0x78], r15d
inc ecx
cmp ecx, 0x113
jb 0x18003f480
mov ebx, 0x567ac
jmp 0x1800406ea
mov rax, qword [rbp + 0xab0]
mov dword [rax], 0x1b
jmp 0x1800400b6
cmp ebx, 0x5d20e
je 0x18004064a
cmp ebx, 0x63c70
je 0x180040112
cmp ebx, 0x6a6d2
je 0x180041010
jmp 0x1800406f1
mov ebx, 0x7c
nop word [rax + rax]
lea eax, [rbx - 0x7c]
cmp eax, 8
ja case.default.0x18004013d
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0x418c0]
add rcx, rdx
jmp rcx
mov r15d, 1
jmp case.default.0x18004013d
mov qword [rbp + 0x150], r14
mov dword [rbp + 0x150], SafeArrayGetDim
mov dword [rbp + 0xf0], 0
jmp case.default.0x18004013d
lea rdx, [rbp + 0xf0]
movaps xmm0, xmm8
call qword [sym.imp.OLEAUT32.dll_VarR4FromCy]
jmp case.default.0x18004013d
mov dword [rbp + 0x360], 0x14
movaps xmm8, xmm9
mov dword [rbp + 0x364], 0x28
jmp case.default.0x18004013d
movsx eax, byte [r14]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x18004068d.12
cdqe
movzx eax, byte [rdx + rax + 0x418f8]
mov ecx, dword [rdx + rax*4 + 0x418e4]
add rcx, rdx
jmp rcx
mov rax, qword [rbp + 0xab8]
mov rax, qword [rax + 8]
test rax, rax
je case.0x1800401c1.9
call rax
mov ebx, 0x7f
jmp case.default.0x18004013d
mov rax, qword [rbp + 0xab8]
mov rax, qword [rax + 0x18]
test rax, rax
je case.0x1800401c1.9
call rax
mov ebx, 0x7f
jmp case.default.0x18004013d
mov rax, qword [rbp + 0xab8]
mov rax, qword [rax + 0x50]
test rax, rax
je 0x180040207
call rax
mov rax, qword [rbp + 0xab0]
mov dword [rax], 0x1b
mov ebx, 0x7f
jmp case.default.0x18004013d
mov dword [rbp + 0x154], 0x16
lea rcx, [rbp + 0x358]
mov rdx, qword [rbp + 0x150]
call qword [sym.imp.USER32.dll_PtInRect]
jmp case.default.0x18004013d
xorps xmm0, xmm0
movups xmmword [rbp + 0x358], xmm0
inc ebx
cmp ebx, 0x85
jb 0x180040120
jmp 0x180040259
mov rdi, qword [rbp - 0x80]
mov r9, qword [rbp + 0xe0]
mov eax, 0x71
mov rsi, qword [rbp + 0x108]
nop dword [rax]
mov qword [rbp + 0x2e0], rsi
mov rdx, r9
mov qword [rbp + 0x240], rdx
mov r8, rsi
mov rbx, r13
cmp eax, 0x71
je 0x1800402ae
cmp eax, 0x297e
je 0x1800402a3
cmp eax, 0x528b
je case.0x18004013d.132
jmp 0x18004033c
mov r15d, 1
jmp 0x18004033c
movsx eax, byte [r14]
add eax, 0xfffffff7
cmp eax, 0x72
ja case.0x18004068d.12
lea r10, [0x180000000]
cdqe
movzx eax, byte [r10 + rax + 0x4199c]
mov ecx, dword [r10 + rax*4 + 0x41970]
add rcx, r10
jmp rcx
mov rbx, qword [rbp + 0xab0]
mov dword [rbx], 1
mov qword [rbx + 8], r14
jmp case.0x1800402db.9
mov rax, qword [rbp + 0xab8]
mov rax, qword [rax]
test rax, rax
je 0x180040308
call rax
mov r9, qword [rbp + 0xe0]
mov rax, qword [rbp + 0xab0]
mov dword [rax], 0x19
jmp case.0x1800402db.9
mov rax, qword [rbp + 0xab8]
mov rax, qword [rax + 0x10]
test rax, rax
je case.0x1800402db.9
call rax
mov r9, qword [rbp + 0xe0]
mov rsi, qword [rbp + 0x108]
mov eax, 0x71
add eax, 0x290d
cmp eax, 0x7b27
jbe 0x180040270
mov r15d, r12d
mov dword [rsp + 0x78], r12d
mov ebx, 0x63c70
jmp 0x1800406ea
mov rax, qword [rbp + 0xab0]
mov dword [rax], 7
jmp case.0x1800402db.9
mov rax, qword [rbp + 0xab0]
mov dword [rax], r12d
jmp case.0x1800402db.9
mov rax, qword [rbp + 0xab0]
mov dword [rax], SafeArrayGetDim
jmp case.0x1800402db.9
mov ebx, 0xe1
nop dword [rax]
mov eax, ebx
sub eax, 0xe1
je 0x180040497
sub eax, 1
je 0x18004041f
sub eax, 1
je 0x180040413
sub eax, 1
je 0x1800403ba
cmp eax, 1
je 0x180040329
jmp 0x1800404ab
mov rax, qword [rbp + 0xab0]
lea r9, [rbp + 0xac0]
mov r8d, 0xea
mov byte [rbp + 0xac0], VarI2FromDisp
xor ecx, ecx
mov rdx, qword [rax + 8]
call fcn.180028780
cmp eax, 1
jne 0x18004048c
mov rcx, qword [rbp + 0xe0]
lea r9, [rbp + 0x3b0]
xorps xmm0, xmm0
lea r8d, [rax + 1]
mov rdx, rsi
movups xmmword [rbp + 0x3b0], xmm0
call qword [sym.imp.IMM32.dll_ImmConfigureIMEW]
jmp 0x1800404ab
mov qword [rbp + 0xe0], r14
jmp 0x1800404ab
mov rcx, r13
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov qword [rsp + 0x58], r14
lea rcx, [rbp + 0xac0]
mov qword [rsp + 0x50], r14
mov r9d, 0xdc
mov qword [rsp + 0x48], r14
xor r8d, r8d
mov qword [rsp + 0x40], r14
xor edx, edx
mov qword [rsp + 0x38], r14
mov rsi, r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
mov qword [rbp + 0x108], r14
mov qword [rbp + 0xac0], 5
call fcn.1800054a0
mov rcx, qword [rbp + 0xab0]
mov qword [rcx + 8], rax
test rax, rax
jne 0x1800404ab
mov r15d, 6
jmp case.0x18004013d.132
mov rax, qword [rbp + 0xab0]
mov r13, r14
mov qword [rbp - 0x18], r14
mov dword [rax], 0x11
inc ebx
cmp ebx, 0xe6
jb 0x180040390
nop dword [rax]
mov rbx, qword [rbp + 0xab0]
lea rcx, [rbp + 0xac0]
mov qword [rsp + 0x58], r14
mov r9d, 0xdc
mov qword [rsp + 0x50], r14
xor r8d, r8d
mov qword [rsp + 0x48], r14
xor edx, edx
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
mov dword [rbx], 0x18
mov qword [rbp + 0xac0], 5
call fcn.1800054a0
mov qword [rbx + 8], rax
test rax, rax
je 0x18004048c
movzx ecx, byte [r14]
lea r9, [rbp + 0xac0]
mov byte [rbp + 0xac0], cl
mov r8d, 0xea
xor ecx, ecx
mov rdx, rax
call fcn.180028780
cmp eax, 1
jne 0x18004048c
jmp 0x180040329
mov esi, 0x11f
nop dword [rax + rax]
cmp esi, 0x28d
jae case.0x18004068d.12
cmp esi, 0x11f
je 0x1800405a0
mov qword [rbp - 0x18], rbx
mov r13, rbx
mov qword [rbp + 0x108], r8
mov r9, rdx
mov qword [rbp + 0xe0], rdx
cmp esi, 0x1d6
je case.0x1800402db.9
add esi, 0xb7
jmp 0x180040560
mov r13, qword [rbp + 0xab0]
lea rcx, [rbp + 0xac0]
mov qword [rsp + 0x58], r14
mov r9d, 0xdc
mov qword [rsp + 0x50], r14
xor r8d, r8d
mov qword [rsp + 0x48], r14
xor edx, edx
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
mov dword [r13], 0x17
mov qword [rbp + 0xac0], 8
call fcn.1800054a0
mov qword [r13 + 8], rax
test rax, rax
je 0x18004048c
lea r9, [rbp + 0xac0]
mov byte [rbp + 0xac0], 0x2d
mov r8d, 0xea
mov rdx, rax
xor ecx, ecx
call fcn.180028780
cmp eax, 1
jne 0x18004048c
mov rdx, qword [rbp + 0x240]
add esi, 0xb7
mov r8, qword [rbp + 0x2e0]
jmp 0x180040560
mov rdi, qword [rbp - 0x80]
mov ecx, 0x125
nop
mov eax, ecx
sub eax, 0x124
je case.0x18004013d.132
cmp eax, 1
jne 0x1800406d1
movsx eax, byte [r14]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x18004068d.12
lea rdx, [0x180000000]
cdqe
movzx eax, byte [rdx + rax + 0x41a20]
mov ecx, dword [rdx + rax*4 + 0x41a10]
add rcx, rdx
jmp rcx
mov rax, qword [rbp + 0xab0]
mov qword [rax + 8], r14
mov dword [rax], 1
jmp case.0x18004068d.9
mov rax, qword [rbp + 0xab8]
mov rax, qword [rax + 8]
test rax, rax
je 0x1800406b4
call rax
mov rax, qword [rbp + 0xab0]
mov dword [rax], 0x1a
mov r15d, 1
mov ecx, 0x125
mov dword [rsp + 0x78], r15d
dec ecx
cmp ecx, 0x123
ja 0x180040650
jmp 0x1800406e5
mov rdi, qword [rbp - 0x80]
mov ebx, 0x5d20e
mov r11d, dword [rbp + 0xac8]
mov ecx, 1
imul eax, r11d, 0x99
lea rdx, [rcx - 2]
add ebx, eax
lea r8d, [rcx + 5]
lea r9d, [rcx + 4]
lea r10d, [rcx + 6]
jmp 0x18003d2e0
cmp byte [r14], 0x6c
jne case.0x18004068d.12
mov rax, qword [rbp + 0xab0]
mov dword [rax], SafeArrayGetDim
mov r15d, 1
jmp case.0x18004013d.132
cmp byte [r14], 0x72
jne 0x18004101d
mov rax, qword [rbp + 0xab0]
mov r15d, ecx
mov dword [rax], 8
mov eax, ecx
jmp case.0x18004013d.132
mov eax, 7
mov r15d, eax
mov r10d, eax
jmp 0x180041007
cmp byte [rsp + 0x71], 0
je 0x18004078d
mov rcx, qword [rbp + 0x190]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov rcx, qword [rbp + 0x190]
call qword [sym.imp.COMCTL32.dll_ImageList_Destroy]
mov eax, 1
jmp 0x180041007
mov eax, VarR4FromCy
mov dword [rbp + 0xb], 0x746547
mov word [rbp + 0xe], ax
jmp 0x1800407d2
mov dword [rbp + 0xf], 0x20656c69
jmp 0x1800407d2
mov dword [rbp + 0x13], 0xa7025
jmp 0x1800407d2
mov r8, qword [sym.imp.WININET.dll_FtpGetFileW]
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x410]
call fcn.180001170
dec ebx
cmp ebx, 0xda
ja 0x18003d873
mov eax, 7
jmp 0x180041013
mov rax, qword [rbp + 0xab0]
mov dword [rax], reloc.OLEAUT32.dll_SafeArrayGetDim
jmp 0x180041015
mov r15d, r10d
mov eax, r10d
jmp 0x180041007
movsx eax, byte [r14]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.0x180040832.14
lea rdx, [0x180000000]
cdqe
movzx eax, byte [rdx + rax + 0x41ab0]
mov ecx, dword [rdx + rax*4 + 0x41a98]
add rcx, rdx
jmp rcx
mov rbx, qword [rbp + 0xab0]
cmp dword [rbx + 4], 0
jne 0x180040d63
mov r8, qword [rbx + 8]
mov r9d, 0x52
xor edx, edx
xor ecx, ecx
call fcn.1800165a0
cmp rax, 0xfffffffffffffffe
jae 0x18004089c
movzx eax, byte [r14]
lea r9, [rbp + 0xac8]
mov rdx, qword [rbx + 8]
mov r8d, 0xea
xor ecx, ecx
mov byte [rbp + 0xac8], al
call fcn.180028780
cmp eax, 1
je 0x180040d63
mov r15d, 6
mov eax, r15d
mov r10d, r15d
mov ecx, eax
jmp 0x180041007
mov r15d, 1
mov dword [rbx + 4], 1
mov eax, r15d
mov r10d, r15d
mov ecx, eax
jmp 0x180041007
mov rdx, qword [rbp + 0xab0]
mov ecx, 0xbe
lea rbx, [rdx + 8]
mov eax, ecx
sub eax, 0xbe
je 0x180040921
cmp eax, 1
jne 0x180040927
mov rax, qword [rbp + 0xab8]
mov rax, qword [rax + 0x28]
test rax, rax
je 0x1800408ec
mov rcx, qword [rbx]
mov rcx, qword [rcx]
call rax
xor r9d, r9d
mov dword [rsp + 0x20], 0x54
xor r8d, r8d
mov rdx, rbx
xor ecx, ecx
call fcn.1800367c0
mov rax, qword [rbp + 0xab0]
mov r15d, 1
mov r10d, r15d
mov dword [rax], r14d
mov eax, r15d
mov ecx, eax
jmp 0x180041007
cmp qword [rbx], 0
je 0x180040933
inc ecx
cmp ecx, 0xc0
jb 0x1800408c6
jmp 0x18004094a
mov eax, r8d
mov r15d, r8d
mov ecx, eax
mov r10d, r8d
jmp 0x180041007
mov rdx, qword [rbp + 0xab0]
mov r11d, VarR8FromCy
mov eax, r11d
sub eax, 0x4d
je 0x180040d63
sub eax, 1
je 0x180040973
cmp eax, 1
jne 0x1800409c4
cmp qword [rdx + 8], 0
je 0x180040889
jmp 0x1800409c4
mov rdi, qword [rbp + 0xab8]
lea rbx, [rdx + 8]
mov rax, qword [rdi + 0x28]
test rax, rax
je 0x18004098f
mov rcx, qword [rbx]
mov rcx, qword [rcx]
call rax
xor r9d, r9d
mov dword [rsp + 0x20], 0x54
xor r8d, r8d
mov rdx, rbx
xor ecx, ecx
call fcn.1800367c0
cmp qword [rdi], 0
je 0x1800409b0
call qword [rdi + 8]
mov rdx, qword [rbp + 0xab0]
mov r11d, dword [rbp + 0x260]
mov dword [rdx], 0x1a
dec r11d
mov dword [rbp + 0x260], r11d
cmp r11d, 0x4c
ja 0x180040950
jmp 0x1800409e1
mov rdx, qword [rbp + 0xab0]
mov rdi, qword [rbp + 0xac0]
mov eax, 0x90
mov rsi, qword [rbp + 0xac0]
mov dword [rbp + 0xac8], eax
mov r15d, dword [rbp + 0xac8]
mov r13d, dword [rbp + 0xac8]
sub eax, 0x90
je 0x180040a50
cmp eax, 0x49
jne 0x180040c69
mov rax, qword [rbp + 0xab8]
cmp qword [rax], 0
je 0x180040cff
mov ebx, 0xd9
nop
cmp ebx, 0xd9
je 0x180040cd0
cmp ebx, 0x28b
jne 0x180040ced
call qword [rax + 0x18]
jmp 0x180040ce6
mov r8, qword [rbp + 0xab8]
cmp qword [r8 + 0x28], 0
je 0x180040c06
mov ebx, SafeArrayGetDim
nop word [rax + rax]
cmp ebx, 0xf6
ja 0x180040b53
je 0x180040b37
mov eax, ebx
sub eax, 0xe
je 0x180040b1f
sub eax, 0x3a
je 0x180040afc
sub eax, 0x3a
je 0x180040acf
cmp eax, 0x3a
jne 0x180040bee
mov rcx, qword [rdx + 8]
mov rcx, qword [rcx]
call qword [r8 + 0x28]
mov rdx, qword [rbp + 0xab0]
mov dword [rbp + 0xec], 0x14
mov qword [rbp + 0x248], r14
mov dword [rbp + 0xe8], r14d
jmp 0x180040bee
test rdi, rdi
je 0x180040ae3
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.USER32.dll_ReleaseDC]
mov rdi, r14
mov rdx, qword [rbp + 0xab0]
mov r13d, r14d
mov dword [rbp + 0xf0], r14d
mov r15d, r12d
jmp 0x180040bee
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetDC]
mov rdx, qword [rbp + 0xab0]
mov rdi, rax
cmp qword [rdx + 8], 0
je 0x180040889
jmp 0x180040bee
mov rcx, r14
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov rdx, qword [rbp + 0xab0]
mov rsi, rax
jmp 0x180040bee
mov rcx, qword [rdx + 8]
mov dword [rbp + 0xac0], r14d
call fcn.180065650
mov rdx, qword [rbp + 0xab0]
jmp 0x180040bee
mov eax, ebx
sub eax, 0x130
je 0x180040bd6
sub eax, 0x3a
je 0x180040b70
cmp eax, 0x3a
jne 0x180040bee
mov qword [rdx + 8], r14
jmp 0x180040bee
mov eax, dword [rbp + 0x170]
mov r9d, r15d
mov edx, dword [rbp + 0xf0]
mov r8d, r13d
mov dword [rsp + 0x50], eax
mov rcx, rdi
mov eax, dword [rbp + 0xf8]
mov dword [rsp + 0x48], eax
mov eax, dword [rbp + 0xf4]
mov dword [rsp + 0x40], eax
mov eax, dword [rbp + 0xac0]
mov dword [rsp + 0x38], eax
mov eax, dword [rbp + 0xe8]
mov dword [rsp + 0x30], eax
mov rax, qword [rbp + 0x248]
mov qword [rsp + 0x28], rax
mov eax, dword [rbp + 0xec]
mov dword [rsp + 0x20], eax
call qword [sym.imp.MSIMG32.dll_TransparentBlt]
mov rdx, qword [rbp + 0xab0]
jmp 0x180040bee
mov dword [rbp + 0xf4], r12d
mov dword [rbp + 0xf8], 0x14
mov dword [rbp + 0x170], r14d
mov r8, qword [rbp + 0xab8]
add ebx, 0x3a
cmp ebx, 0x1de
jb 0x180040a70
jmp 0x180040c69
mov r12d, dword [rbp + 0x120]
mov ebx, 0x89
mov eax, ebx
sub eax, 0x88
je 0x180040c28
cmp eax, 1
jne 0x180040c52
mov r12d, 0x40000000
jmp 0x180040c52
mov rcx, qword [rdx + 8]
call fcn.180065650
mov r8d, 0x104
lea rdx, [rbp + 0x410]
mov ecx, r12d
call qword [sym.imp.OLEACC.dll_GetStateTextA]
mov rdx, qword [rbp + 0xab0]
mov qword [rdx + 8], r14
dec ebx
cmp ebx, 0x87
ja 0x180040c12
mov dword [rbp + 0x120], r12d
mov r12d, 0xa
mov eax, dword [rbp + 0xac8]
add eax, 0x49
mov dword [rbp + 0xac8], eax
cmp eax, 0x122
jb 0x180040a08
mov rsi, qword [rbp + 0xab8]
cmp qword [rsi + 0x28], 0
je 0x180040d3e
mov ebx, VarNeg
nop word [rax + rax]
mov rdi, qword [rbp + 0xab0]
cmp ebx, 0xab
je 0x180040d1f
cmp ebx, 0x12e
jne 0x180040d2a
mov rcx, qword [rdi + 8]
mov rcx, qword [rcx]
call qword [rsi + 0x28]
mov rcx, qword [rdi + 8]
call fcn.180065650
mov qword [rdi + 8], r14
jmp 0x180040d2a
lea rdx, [rbp + 0xac0]
mov qword [rbp + 0xac0], r14
xor ecx, ecx
call qword [sym.imp.OLEACC.dll_WindowFromAccessibleObject]
mov rax, qword [rbp + 0xab8]
add ebx, 0x1b2
cmp ebx, 0x364
jbe 0x180040a30
mov rax, qword [rbp + 0xab0]
mov r15d, 1
mov r10d, r15d
mov dword [rax], 0x1a
mov eax, r15d
mov ecx, eax
jmp 0x180041007
cmp qword [rdi + 8], 0
je 0x180040889
add ebx, 0x83
cmp ebx, 0x1b1
jb 0x180040ca0
jmp 0x180040d52
mov rdi, qword [rbp + 0xab0]
mov rcx, qword [rdi + 8]
call fcn.180065650
mov qword [rdi + 8], r14
mov rax, qword [rsi + 0x48]
test rax, rax
je 0x180040d5d
call rax
mov dword [rdi], 0x1b
mov r15d, 1
mov eax, r15d
mov r10d, r15d
mov ecx, eax
jmp 0x180041007
mov r15d, r10d
mov eax, r15d
mov r10d, r15d
mov ecx, eax
jmp 0x180041007
mov r15d, 7
mov r10d, r15d
mov eax, r10d
mov r15d, eax
jmp 0x180041007
mov eax, 6
jmp 0x180041007
mov eax, 6
jmp 0x180041007
mov ebx, 0x100
mov esi, 0x7246
mov edi, 0x6d6f
mov eax, 0x78
cmp ebx, 0x14b00
ja 0x180040e3e
je 0x180040e35
cmp ebx, 0x100
je 0x180040e13
cmp ebx, 0x6f00
je 0x180040e02
cmp ebx, 0xdd00
jne 0x180040ea8
mov ecx, VarCyFromDate
mov word [rbp + 0xb0], cx
mov word [rbp + 0xb1], si
jmp 0x180040ea8
mov ecx, 0x74
mov word [rbp + 0xaf], cx
jmp 0x180040ea8
mov dword [rbp + 0xa8], 0x656c4f
mov ecx, 0x61
mov dword [rbp + 0xab], 0x657243
mov word [rbp + 0xae], cx
jmp 0x180040ea8
mov word [rbp + 0xb3], di
jmp 0x180040ea8
cmp ebx, 0x1b900
je 0x180040e9e
cmp ebx, 0x22700
je 0x180040e77
cmp ebx, 0x29500
jne 0x180040ea8
mov r8, qword [sym.imp.ole32.dll_OleCreateFromDataEx]
lea rdx, [rbp + 0xa8]
lea rcx, [rbp + 0x410]
call fcn.180001170
mov eax, 0x78
jmp 0x180040ea8
mov ecx, VarR4FromCy
mov word [rbp + 0xb9], cx
mov word [rbp + 0xba], ax
mov dword [rbp + 0xbb], 0x702520
mov word [rbp + 0xbe], r12w
jmp 0x180040ea8
mov dword [rbp + 0xb5], 0x61746144
add ebx, 0x6e00
cmp ebx, 0x30200
jbe 0x180040dc4
mov eax, 6
jmp 0x18004100d
mov eax, 6
mov ebx, 5
nop
cmp ebx, 5
ja case.default.0x180040ee5
mov eax, ebx
mov ecx, dword [rdx + rax*4 + 0x41b28]
add rcx, rdx
jmp rcx
mov r8d, 3
lea rdx, [0x180092583]
lea rcx, [rbp + 0xb4]
call fcn.1800650e0
mov r8d, 3
mov byte [rbp + 0xb7], 0
lea rdx, [0x1800925c6]
lea rcx, [rbp + 0xb7]
call fcn.1800650e0
mov byte [rbp + 0xba], 0
jmp 0x180040fda
mov r8d, 2
mov byte [rbp + 0xb2], 0
lea rdx, [0x180092605]
lea rcx, [rbp + 0xb2]
call fcn.1800650e0
mov byte [rbp + 0xb4], 0
jmp 0x180040fda
mov r8d, 4
mov word [rbp + 0xa8], VarR4FromCy
lea rdx, [0x180092611]
lea rcx, [rbp + 0xa8]
call fcn.1800666b0
mov eax, dword [0x180092641]
mov dword [rbp + 0xad], eax
movzx eax, byte [0x180092645]
mov byte [rbp + 0xb1], al
jmp 0x180040fda
mov r8d, 2
mov byte [rbp + 0xbb], 0
lea rdx, [0x180092684]
lea rcx, [rbp + 0xa8]
call fcn.1800666b0
jmp 0x180040fda
mov byte [rbp + 0xba], 0x20
jmp 0x180040fda
mov r8, qword [sym.imp.WINMM.dll_DrvGetModuleHandle]
lea rdx, [rbp + 0xa8]
lea rcx, [rbp + 0x410]
call fcn.180001170
mov rax, qword [rbp + 0x110]
dec ebx
lea rdx, [0x180000000]
sub rax, 1
mov qword [rbp + 0x110], rax
jne 0x180040ed0
mov eax, 7
jmp 0x180041013
mov eax, 7
mov r15d, eax
mov eax, r15d
mov r15d, eax
mov eax, r15d
mov ecx, eax
mov eax, ecx
mov r15d, ecx
mov r10d, r15d
mov ecx, r10d
mov eax, ecx
mov r15d, eax
jmp case.0x18004013d.132
mov r15d, 7
lea rcx, [rbp + 0x3f0]
call fcn.180051260
lea r11, [rsp + 0xb68]
mov eax, r15d
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret