Function at 0x180001000
Capabilities:
Check mutex on windows

Disassembly:
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x318
mov rax, qword [0x1800623f8]
xor rax, rsp
mov qword [rsp + 0x308], rax
mov dword [rsp + 0xa8], 0
lea rax, [rsp + 0x98]
lea rcx, [0x18005b568]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xe
rep movsb byte [rdi], byte [rsi]
mov dword [rsp + 0x20], 0xbd9
lea r9, [rsp + 0x78]
lea r8, [rsp + 0x40]
mov edx, 0xd
lea rcx, [rsp + 0x98]
call fcn.18003bca0
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rsp + 0x80], rax
mov dword [rsp + 0x11c], 5
mov dword [rsp + 0x104], 0xf
cmp dword [rsp + 0x104], 0
jle 0x1800010f3
mov eax, dword [rsp + 0x104]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800010d6
mov dword [rsp + 0x11c], 0
mov eax, dword [rsp + 0x104]
dec eax
mov dword [rsp + 0x104], eax
jmp 0x180001094
mov dword [rsp + 0x11c], 4
mov eax, dword [rsp + 0x104]
dec eax
mov dword [rsp + 0x104], eax
jmp 0x180001094
mov dword [rsp + 0x118], 0
mov dword [rsp + 0x10c], 0xe
cmp dword [rsp + 0x10c], 0
jle 0x180001169
mov eax, dword [rsp + 0x10c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000114c
mov dword [rsp + 0x118], 4
mov eax, dword [rsp + 0x10c]
sub eax, 2
mov dword [rsp + 0x10c], eax
jmp 0x180001109
mov dword [rsp + 0x118], 4
mov eax, dword [rsp + 0x10c]
dec eax
mov dword [rsp + 0x10c], eax
jmp 0x180001109
mov dword [rsp + 0xf4], 2
mov dword [rsp + 0xf0], 5
mov eax, dword [rsp + 0xf0]
test eax, eax
jle 0x1800011ef
mov eax, dword [rsp + 0xf0]
cmp eax, 1
jle 0x1800011bc
mov eax, dword [rsp + 0xf4]
and eax, 0x204d
mov dword [rsp + 0xf4], eax
mov eax, dword [rsp + 0xf0]
sub eax, 2
mov dword [rsp + 0xf0], eax
jmp 0x18000117f
mov eax, dword [rsp + 0xf4]
cmp eax, 0x807
jle 0x1800011dd
mov eax, dword [rsp + 0xf4]
and eax, 0x80
mov dword [rsp + 0xf4], eax
mov eax, dword [rsp + 0xf0]
dec eax
mov dword [rsp + 0xf0], eax
jmp 0x18000117f
mov dword [rsp + 0xf8], 1
mov dword [rsp + 0x110], 3
mov eax, dword [rsp + 0x110]
test eax, eax
jle 0x180001273
mov eax, dword [rsp + 0x110]
cmp eax, 1
jle 0x180001242
mov eax, dword [rsp + 0xf8]
and eax, 0x1907
mov dword [rsp + 0xf8], eax
mov eax, dword [rsp + 0x110]
sub eax, 2
mov dword [rsp + 0x110], eax
jmp 0x180001205
mov eax, dword [rsp + 0xf8]
cmp eax, 0x805
jle 0x180001261
mov eax, dword [rsp + 0xf8]
and eax, 0x7e
mov dword [rsp + 0xf8], eax
mov eax, dword [rsp + 0x110]
dec eax
mov dword [rsp + 0x110], eax
jmp 0x180001205
mov dword [rsp + 0xfc], 6
mov dword [rsp + 0x114], 0xa
mov eax, dword [rsp + 0x114]
test eax, eax
jle 0x1800012f9
mov eax, dword [rsp + 0x114]
cmp eax, 1
jle 0x1800012c6
mov eax, dword [rsp + 0xfc]
and eax, 0x1f29
mov dword [rsp + 0xfc], eax
mov eax, dword [rsp + 0x114]
sub eax, 2
mov dword [rsp + 0x114], eax
jmp 0x180001289
mov eax, dword [rsp + 0xfc]
cmp eax, 0x80c
jle 0x1800012e7
mov eax, dword [rsp + 0xfc]
and eax, 0x85
mov dword [rsp + 0xfc], eax
mov eax, dword [rsp + 0x114]
dec eax
mov dword [rsp + 0x114], eax
jmp 0x180001289
mov dword [rsp + 0x100], 0
mov dword [rsp + 0x108], 0x14
cmp dword [rsp + 0x108], 0
jle 0x18000136e
mov eax, dword [rsp + 0x108]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180001351
mov dword [rsp + 0x100], 4
mov eax, dword [rsp + 0x108]
dec eax
mov dword [rsp + 0x108], eax
jmp 0x18000130f
mov dword [rsp + 0x100], 0
mov eax, dword [rsp + 0x108]
dec eax
mov dword [rsp + 0x108], eax
jmp 0x18000130f
lea rax, [rsp + 0xb0]
lea rcx, [0x18005b578]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xe
rep movsb byte [rdi], byte [rsi]
mov dword [rsp + 0x20], 0x18f1
lea r9, [rsp + 0x58]
lea r8, [rsp + 0x88]
mov edx, 0xd
lea rcx, [rsp + 0xb0]
call fcn.18003bca0
lea rdx, [rsp + 0x88]
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xc0], rax
mov dword [rsp + 0x12c], 7
mov dword [rsp + 0x124], 4
mov eax, dword [rsp + 0x124]
test eax, eax
jle 0x180001453
mov eax, dword [rsp + 0x124]
cmp eax, 1
jle 0x180001422
mov eax, dword [rsp + 0x12c]
and eax, 0x21f3
mov dword [rsp + 0x12c], eax
mov eax, dword [rsp + 0x124]
sub eax, 2
mov dword [rsp + 0x124], eax
jmp 0x1800013e5
mov eax, dword [rsp + 0x12c]
cmp eax, 0x806
jle 0x180001441
mov eax, dword [rsp + 0x12c]
and eax, 0x7f
mov dword [rsp + 0x12c], eax
mov eax, dword [rsp + 0x124]
dec eax
mov dword [rsp + 0x124], eax
jmp 0x1800013e5
mov dword [rsp + 0x134], 2
mov dword [rsp + 0x13c], 0x10
cmp dword [rsp + 0x13c], 0
jle 0x1800014c9
mov eax, dword [rsp + 0x13c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800014ab
mov dword [rsp + 0x134], 4
mov eax, dword [rsp + 0x13c]
dec eax
mov dword [rsp + 0x13c], eax
jmp 0x180001469
mov dword [rsp + 0x134], 4
mov eax, dword [rsp + 0x13c]
sub eax, 2
mov dword [rsp + 0x13c], eax
jmp 0x180001469
mov dword [rsp + 0x128], 4
mov dword [rsp + 0x130], 3
mov eax, dword [rsp + 0x130]
test eax, eax
jle 0x18000154d
mov eax, dword [rsp + 0x130]
cmp eax, 1
jle 0x18000151c
mov eax, dword [rsp + 0x128]
and eax, 0x1494
mov dword [rsp + 0x128], eax
mov eax, dword [rsp + 0x130]
sub eax, 2
mov dword [rsp + 0x130], eax
jmp 0x1800014df
mov eax, dword [rsp + 0x128]
cmp eax, 0x805
jle 0x18000153b
mov eax, dword [rsp + 0x128]
and eax, 0x7e
mov dword [rsp + 0x128], eax
mov eax, dword [rsp + 0x130]
dec eax
mov dword [rsp + 0x130], eax
jmp 0x1800014df
mov dword [rsp + 0x138], 7
mov dword [rsp + 0x120], 0x11
cmp dword [rsp + 0x120], 0
jle 0x1800015c3
mov eax, dword [rsp + 0x120]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800015a5
mov dword [rsp + 0x138], 0
mov eax, dword [rsp + 0x120]
dec eax
mov dword [rsp + 0x120], eax
jmp 0x180001563
mov dword [rsp + 0x138], 4
mov eax, dword [rsp + 0x120]
sub eax, 2
mov dword [rsp + 0x120], eax
jmp 0x180001563
cmp qword [rsp + 0xc0], 0
jne 0x180001849
mov dword [rsp + 0x14c], 1
mov dword [rsp + 0x144], 0x15
cmp dword [rsp + 0x144], 0
jle 0x180001648
mov eax, dword [rsp + 0x144]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000162b
mov dword [rsp + 0x14c], 4
mov eax, dword [rsp + 0x144]
sub eax, 2
mov dword [rsp + 0x144], eax
jmp 0x1800015e8
mov dword [rsp + 0x14c], 0
mov eax, dword [rsp + 0x144]
dec eax
mov dword [rsp + 0x144], eax
jmp 0x1800015e8
mov dword [rsp + 0x164], 2
mov dword [rsp + 0x150], 0x13
cmp dword [rsp + 0x150], 0
jle 0x1800016bf
mov eax, dword [rsp + 0x150]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800016a1
mov dword [rsp + 0x164], 4
mov eax, dword [rsp + 0x150]
sub eax, 2
mov dword [rsp + 0x150], eax
jmp 0x18000165e
mov dword [rsp + 0x164], 4
mov eax, dword [rsp + 0x150]
sub eax, 2
mov dword [rsp + 0x150], eax
jmp 0x18000165e
mov dword [rsp + 0x154], 6
mov dword [rsp + 0x160], 0xa
mov eax, dword [rsp + 0x160]
test eax, eax
jle 0x180001745
mov eax, dword [rsp + 0x160]
cmp eax, 1
jle 0x180001712
mov eax, dword [rsp + 0x154]
and eax, 0x1f29
mov dword [rsp + 0x154], eax
mov eax, dword [rsp + 0x160]
sub eax, 2
mov dword [rsp + 0x160], eax
jmp 0x1800016d5
mov eax, dword [rsp + 0x154]
cmp eax, 0x80c
jle 0x180001733
mov eax, dword [rsp + 0x154]
and eax, 0x85
mov dword [rsp + 0x154], eax
mov eax, dword [rsp + 0x160]
dec eax
mov dword [rsp + 0x160], eax
jmp 0x1800016d5
mov dword [rsp + 0x15c], 7
mov dword [rsp + 0x140], 0x11
cmp dword [rsp + 0x140], 0
jle 0x1800017bb
mov eax, dword [rsp + 0x140]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000179d
mov dword [rsp + 0x15c], 0
mov eax, dword [rsp + 0x140]
dec eax
mov dword [rsp + 0x140], eax
jmp 0x18000175b
mov dword [rsp + 0x15c], 4
mov eax, dword [rsp + 0x140]
sub eax, 2
mov dword [rsp + 0x140], eax
jmp 0x18000175b
mov dword [rsp + 0x148], 4
mov dword [rsp + 0x158], 3
mov eax, dword [rsp + 0x158]
test eax, eax
jle 0x18000183f
mov eax, dword [rsp + 0x158]
cmp eax, 1
jle 0x18000180e
mov eax, dword [rsp + 0x148]
and eax, 0x1494
mov dword [rsp + 0x148], eax
mov eax, dword [rsp + 0x158]
sub eax, 2
mov dword [rsp + 0x158], eax
jmp 0x1800017d1
mov eax, dword [rsp + 0x148]
cmp eax, 0x805
jle 0x18000182d
mov eax, dword [rsp + 0x148]
and eax, 0x7e
mov dword [rsp + 0x148], eax
mov eax, dword [rsp + 0x158]
dec eax
mov dword [rsp + 0x158], eax
jmp 0x1800017d1
jmp 0x1800031af
mov dword [rsp + 0x174], 8
mov dword [rsp + 0x17c], 3
mov eax, dword [rsp + 0x17c]
test eax, eax
jle 0x1800018cd
mov eax, dword [rsp + 0x17c]
cmp eax, 1
jle 0x18000189c
mov eax, dword [rsp + 0x174]
and eax, 0x1fed
mov dword [rsp + 0x174], eax
mov eax, dword [rsp + 0x17c]
sub eax, 2
mov dword [rsp + 0x17c], eax
jmp 0x18000185f
mov eax, dword [rsp + 0x174]
cmp eax, 0x805
jle 0x1800018bb
mov eax, dword [rsp + 0x174]
and eax, 0x7e
mov dword [rsp + 0x174], eax
mov eax, dword [rsp + 0x17c]
dec eax
mov dword [rsp + 0x17c], eax
jmp 0x18000185f
mov dword [rsp + 0x168], 3
mov dword [rsp + 0x184], 0xf
cmp dword [rsp + 0x184], 0
jle 0x180001944
mov eax, dword [rsp + 0x184]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180001926
mov dword [rsp + 0x168], 0
mov eax, dword [rsp + 0x184]
sub eax, 2
mov dword [rsp + 0x184], eax
jmp 0x1800018e3
mov dword [rsp + 0x168], 4
mov eax, dword [rsp + 0x184]
sub eax, 2
mov dword [rsp + 0x184], eax
jmp 0x1800018e3
mov dword [rsp + 0x16c], 7
mov dword [rsp + 0x170], 0xd
cmp dword [rsp + 0x170], 0
jle 0x1800019ba
mov eax, dword [rsp + 0x170]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000199d
mov dword [rsp + 0x16c], 0
mov eax, dword [rsp + 0x170]
sub eax, 2
mov dword [rsp + 0x170], eax
jmp 0x18000195a
mov dword [rsp + 0x16c], 4
mov eax, dword [rsp + 0x170]
dec eax
mov dword [rsp + 0x170], eax
jmp 0x18000195a
mov dword [rsp + 0x178], 3
mov dword [rsp + 0x180], 0xc
cmp dword [rsp + 0x180], 0
jle 0x180001a31
mov eax, dword [rsp + 0x180]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180001a13
mov dword [rsp + 0x178], 0
mov eax, dword [rsp + 0x180]
sub eax, 2
mov dword [rsp + 0x180], eax
jmp 0x1800019d0
mov dword [rsp + 0x178], 4
mov eax, dword [rsp + 0x180]
sub eax, 2
mov dword [rsp + 0x180], eax
jmp 0x1800019d0
mov r9d, 0x40
mov r8d, 0x3000
mov edx, 0x118
xor ecx, ecx
call qword [rsp + 0xc0]
mov rcx, qword [rsp + 0x330]
mov qword [rcx], rax
mov rax, qword [rsp + 0x330]
cmp qword [rax], 0
jne 0x180001bf2
mov dword [rsp + 0x190], 6
mov dword [rsp + 0x19c], 0xa
mov eax, dword [rsp + 0x19c]
test eax, eax
jle 0x180001aee
mov eax, dword [rsp + 0x19c]
cmp eax, 1
jle 0x180001abb
mov eax, dword [rsp + 0x190]
and eax, 0x1f29
mov dword [rsp + 0x190], eax
mov eax, dword [rsp + 0x19c]
sub eax, 2
mov dword [rsp + 0x19c], eax
jmp 0x180001a7e
mov eax, dword [rsp + 0x190]
cmp eax, 0x80c
jle 0x180001adc
mov eax, dword [rsp + 0x190]
and eax, 0x85
mov dword [rsp + 0x190], eax
mov eax, dword [rsp + 0x19c]
dec eax
mov dword [rsp + 0x19c], eax
jmp 0x180001a7e
mov dword [rsp + 0x18c], 7
mov dword [rsp + 0x198], 0xd
cmp dword [rsp + 0x198], 0
jle 0x180001b64
mov eax, dword [rsp + 0x198]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180001b47
mov dword [rsp + 0x18c], 0
mov eax, dword [rsp + 0x198]
sub eax, 2
mov dword [rsp + 0x198], eax
jmp 0x180001b04
mov dword [rsp + 0x18c], 4
mov eax, dword [rsp + 0x198]
dec eax
mov dword [rsp + 0x198], eax
jmp 0x180001b04
mov dword [rsp + 0x188], 4
mov dword [rsp + 0x194], 3
mov eax, dword [rsp + 0x194]
test eax, eax
jle 0x180001be8
mov eax, dword [rsp + 0x194]
cmp eax, 1
jle 0x180001bb7
mov eax, dword [rsp + 0x188]
and eax, 0x1891
mov dword [rsp + 0x188], eax
mov eax, dword [rsp + 0x194]
sub eax, 2
mov dword [rsp + 0x194], eax
jmp 0x180001b7a
mov eax, dword [rsp + 0x188]
cmp eax, 0x805
jle 0x180001bd6
mov eax, dword [rsp + 0x188]
and eax, 0x7e
mov dword [rsp + 0x188], eax
mov eax, dword [rsp + 0x194]
dec eax
mov dword [rsp + 0x194], eax
jmp 0x180001b7a
jmp 0x1800031af
call fcn.180046c30
and eax, 0x10000000
test eax, eax
je 0x180001c0a
jmp 0x1800031af
mov r8d, 1
xor edx, edx
mov rax, qword [rsp + 0x330]
mov rcx, qword [rax]
call fcn.1800151a0
test eax, eax
jne 0x180001c30
jmp 0x1800031af
call fcn.180047070
and eax, 0x10000000
test eax, eax
je 0x180001f4c
mov dword [rsp + 0x1b8], 2
mov dword [rsp + 0x1c8], 0x10
cmp dword [rsp + 0x1c8], 0
jle 0x180001cb8
mov eax, dword [rsp + 0x1c8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180001c9a
mov dword [rsp + 0x1b8], 4
mov eax, dword [rsp + 0x1c8]
dec eax
mov dword [rsp + 0x1c8], eax
jmp 0x180001c58
mov dword [rsp + 0x1b8], 4
mov eax, dword [rsp + 0x1c8]
sub eax, 2
mov dword [rsp + 0x1c8], eax
jmp 0x180001c58
mov dword [rsp + 0x1a0], 2
mov dword [rsp + 0x1a4], 0xa
mov eax, dword [rsp + 0x1a4]
test eax, eax
jle 0x180001d3e
mov eax, dword [rsp + 0x1a4]
cmp eax, 1
jle 0x180001d0b
mov eax, dword [rsp + 0x1a0]
and eax, 0x2106
mov dword [rsp + 0x1a0], eax
mov eax, dword [rsp + 0x1a4]
sub eax, 2
mov dword [rsp + 0x1a4], eax
jmp 0x180001cce
mov eax, dword [rsp + 0x1a0]
cmp eax, 0x80c
jle 0x180001d2c
mov eax, dword [rsp + 0x1a0]
and eax, 0x85
mov dword [rsp + 0x1a0], eax
mov eax, dword [rsp + 0x1a4]
dec eax
mov dword [rsp + 0x1a4], eax
jmp 0x180001cce
mov dword [rsp + 0x1b4], 3
mov dword [rsp + 0x1c4], 0x12
cmp dword [rsp + 0x1c4], 0
jle 0x180001db5
mov eax, dword [rsp + 0x1c4]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180001d97
mov dword [rsp + 0x1b4], 4
mov eax, dword [rsp + 0x1c4]
sub eax, 2
mov dword [rsp + 0x1c4], eax
jmp 0x180001d54
mov dword [rsp + 0x1b4], 0
mov eax, dword [rsp + 0x1c4]
sub eax, 2
mov dword [rsp + 0x1c4], eax
jmp 0x180001d54
mov dword [rsp + 0x1ac], 9
mov dword [rsp + 0x1c0], 4
mov eax, dword [rsp + 0x1c0]
test eax, eax
jle 0x180001e39
mov eax, dword [rsp + 0x1c0]
cmp eax, 1
jle 0x180001e08
mov eax, dword [rsp + 0x1ac]
and eax, 0x197d
mov dword [rsp + 0x1ac], eax
mov eax, dword [rsp + 0x1c0]
sub eax, 2
mov dword [rsp + 0x1c0], eax
jmp 0x180001dcb
mov eax, dword [rsp + 0x1ac]
cmp eax, 0x806
jle 0x180001e27
mov eax, dword [rsp + 0x1ac]
and eax, 0x7f
mov dword [rsp + 0x1ac], eax
mov eax, dword [rsp + 0x1c0]
dec eax
mov dword [rsp + 0x1c0], eax
jmp 0x180001dcb
mov dword [rsp + 0x1b0], 7
mov dword [rsp + 0x1bc], 9
mov eax, dword [rsp + 0x1bc]
test eax, eax
jle 0x180001ebf
mov eax, dword [rsp + 0x1bc]
cmp eax, 1
jle 0x180001e8c
mov eax, dword [rsp + 0x1b0]
and eax, 0x19b6
mov dword [rsp + 0x1b0], eax
mov eax, dword [rsp + 0x1bc]
sub eax, 2
mov dword [rsp + 0x1bc], eax
jmp 0x180001e4f
mov eax, dword [rsp + 0x1b0]
cmp eax, 0x80b
jle 0x180001ead
mov eax, dword [rsp + 0x1b0]
and eax, 0x84
mov dword [rsp + 0x1b0], eax
mov eax, dword [rsp + 0x1bc]
dec eax
mov dword [rsp + 0x1bc], eax
jmp 0x180001e4f
mov dword [rsp + 0x1a8], 6
mov dword [rsp + 0x1cc], 0xa
mov eax, dword [rsp + 0x1cc]
test eax, eax
jle 0x180001f45
mov eax, dword [rsp + 0x1cc]
cmp eax, 1
jle 0x180001f12
mov eax, dword [rsp + 0x1a8]
and eax, 0x1f29
mov dword [rsp + 0x1a8], eax
mov eax, dword [rsp + 0x1cc]
sub eax, 2
mov dword [rsp + 0x1cc], eax
jmp 0x180001ed5
mov eax, dword [rsp + 0x1a8]
cmp eax, 0x80c
jle 0x180001f33
mov eax, dword [rsp + 0x1a8]
and eax, 0x85
mov dword [rsp + 0x1a8], eax
mov eax, dword [rsp + 0x1cc]
dec eax
mov dword [rsp + 0x1cc], eax
jmp 0x180001ed5
xor eax, eax
jmp 0x180003440
mov dword [rsp + 0x1d4], 8
mov dword [rsp + 0x1d8], 0x12
cmp dword [rsp + 0x1d8], 0
jle 0x180001fc2
mov eax, dword [rsp + 0x1d8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180001fa4
mov dword [rsp + 0x1d4], 4
mov eax, dword [rsp + 0x1d8]
dec eax
mov dword [rsp + 0x1d8], eax
jmp 0x180001f62
mov dword [rsp + 0x1d4], 0
mov eax, dword [rsp + 0x1d8]
sub eax, 2
mov dword [rsp + 0x1d8], eax
jmp 0x180001f62
mov dword [rsp + 0x1ec], 8
mov dword [rsp + 0x1f8], 3
mov eax, dword [rsp + 0x1f8]
test eax, eax
jle 0x180002046
mov eax, dword [rsp + 0x1f8]
cmp eax, 1
jle 0x180002015
mov eax, dword [rsp + 0x1ec]
and eax, 0x1fed
mov dword [rsp + 0x1ec], eax
mov eax, dword [rsp + 0x1f8]
sub eax, 2
mov dword [rsp + 0x1f8], eax
jmp 0x180001fd8
mov eax, dword [rsp + 0x1ec]
cmp eax, 0x805
jle 0x180002034
mov eax, dword [rsp + 0x1ec]
and eax, 0x7e
mov dword [rsp + 0x1ec], eax
mov eax, dword [rsp + 0x1f8]
dec eax
mov dword [rsp + 0x1f8], eax
jmp 0x180001fd8
mov dword [rsp + 0x1fc], 2
mov dword [rsp + 0x1e0], 0x13
cmp dword [rsp + 0x1e0], 0
jle 0x1800020bd
mov eax, dword [rsp + 0x1e0]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000209f
mov dword [rsp + 0x1fc], 4
mov eax, dword [rsp + 0x1e0]
sub eax, 2
mov dword [rsp + 0x1e0], eax
jmp 0x18000205c
mov dword [rsp + 0x1fc], 4
mov eax, dword [rsp + 0x1e0]
sub eax, 2
mov dword [rsp + 0x1e0], eax
jmp 0x18000205c
mov dword [rsp + 0x1d0], 4
mov dword [rsp + 0x1f4], 0x11
cmp dword [rsp + 0x1f4], 0
jle 0x180002132
mov eax, dword [rsp + 0x1f4]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180002115
mov dword [rsp + 0x1d0], 0
mov eax, dword [rsp + 0x1f4]
dec eax
mov dword [rsp + 0x1f4], eax
jmp 0x1800020d3
mov dword [rsp + 0x1d0], 4
mov eax, dword [rsp + 0x1f4]
dec eax
mov dword [rsp + 0x1f4], eax
jmp 0x1800020d3
mov dword [rsp + 0x1dc], 8
mov dword [rsp + 0x1e8], 0x11
cmp dword [rsp + 0x1e8], 0
jle 0x1800021a8
mov eax, dword [rsp + 0x1e8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000218a
mov dword [rsp + 0x1dc], 4
mov eax, dword [rsp + 0x1e8]
dec eax
mov dword [rsp + 0x1e8], eax
jmp 0x180002148
mov dword [rsp + 0x1dc], 4
mov eax, dword [rsp + 0x1e8]
sub eax, 2
mov dword [rsp + 0x1e8], eax
jmp 0x180002148
mov dword [rsp + 0x1f0], 1
mov dword [rsp + 0x1e4], 0x10
cmp dword [rsp + 0x1e4], 0
jle 0x18000221e
mov eax, dword [rsp + 0x1e4]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180002200
mov dword [rsp + 0x1f0], 4
mov eax, dword [rsp + 0x1e4]
dec eax
mov dword [rsp + 0x1e4], eax
jmp 0x1800021be
mov dword [rsp + 0x1f0], 0
mov eax, dword [rsp + 0x1e4]
sub eax, 2
mov dword [rsp + 0x1e4], eax
jmp 0x1800021be
mov rdx, qword [0x180063f78]
mov rcx, qword [0x180063f70]
call fcn.180047380
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x30], 0
jne 0x180002248
jmp 0x1800031af
mov dword [rsp + 0x224], 2
mov dword [rsp + 0x210], 0x13
cmp dword [rsp + 0x210], 0
jle 0x1800022bf
mov eax, dword [rsp + 0x210]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800022a1
mov dword [rsp + 0x224], 4
mov eax, dword [rsp + 0x210]
sub eax, 2
mov dword [rsp + 0x210], eax
jmp 0x18000225e
mov dword [rsp + 0x224], 4
mov eax, dword [rsp + 0x210]
sub eax, 2
mov dword [rsp + 0x210], eax
jmp 0x18000225e
mov dword [rsp + 0x220], 7
mov dword [rsp + 0x21c], 0xa
mov eax, dword [rsp + 0x21c]
test eax, eax
jle 0x180002345
mov eax, dword [rsp + 0x21c]
cmp eax, 1
jle 0x180002312
mov eax, dword [rsp + 0x220]
and eax, 0x23c7
mov dword [rsp + 0x220], eax
mov eax, dword [rsp + 0x21c]
sub eax, 2
mov dword [rsp + 0x21c], eax
jmp 0x1800022d5
mov eax, dword [rsp + 0x220]
cmp eax, 0x80c
jle 0x180002333
mov eax, dword [rsp + 0x220]
and eax, 0x85
mov dword [rsp + 0x220], eax
mov eax, dword [rsp + 0x21c]
dec eax
mov dword [rsp + 0x21c], eax
jmp 0x1800022d5
mov dword [rsp + 0x208], 3
mov dword [rsp + 0x214], 8
mov eax, dword [rsp + 0x214]
test eax, eax
jle 0x1800023cb
mov eax, dword [rsp + 0x214]
cmp eax, 1
jle 0x180002398
mov eax, dword [rsp + 0x208]
and eax, 0x11d0
mov dword [rsp + 0x208], eax
mov eax, dword [rsp + 0x214]
sub eax, 2
mov dword [rsp + 0x214], eax
jmp 0x18000235b
mov eax, dword [rsp + 0x208]
cmp eax, 0x80a
jle 0x1800023b9
mov eax, dword [rsp + 0x208]
and eax, 0x83
mov dword [rsp + 0x208], eax
mov eax, dword [rsp + 0x214]
dec eax
mov dword [rsp + 0x214], eax
jmp 0x18000235b
mov dword [rsp + 0x218], 0
mov dword [rsp + 0x204], 0x15
cmp dword [rsp + 0x204], 0
jle 0x180002441
mov eax, dword [rsp + 0x204]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180002423
mov dword [rsp + 0x218], 4
mov eax, dword [rsp + 0x204]
dec eax
mov dword [rsp + 0x204], eax
jmp 0x1800023e1
mov dword [rsp + 0x218], 0
mov eax, dword [rsp + 0x204]
sub eax, 2
mov dword [rsp + 0x204], eax
jmp 0x1800023e1
mov dword [rsp + 0x20c], 2
mov dword [rsp + 0x200], 5
mov eax, dword [rsp + 0x200]
test eax, eax
jle 0x1800024c7
mov eax, dword [rsp + 0x200]
cmp eax, 1
jle 0x180002494
mov eax, dword [rsp + 0x20c]
and eax, 0x204d
mov dword [rsp + 0x20c], eax
mov eax, dword [rsp + 0x200]
sub eax, 2
mov dword [rsp + 0x200], eax
jmp 0x180002457
mov eax, dword [rsp + 0x20c]
cmp eax, 0x807
jle 0x1800024b5
mov eax, dword [rsp + 0x20c]
and eax, 0x80
mov dword [rsp + 0x20c], eax
mov eax, dword [rsp + 0x200]
dec eax
mov dword [rsp + 0x200], eax
jmp 0x180002457
mov rcx, qword [rsp + 0x30]
call fcn.180047720
mov r8, rax
mov edx, 0x104
lea rcx, [0x180063a60]
call fcn.180004810
lea rax, [rsp + 0xc8]
lea rcx, [0x18005b588]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov dword [rsp + 0x20], 0xb
lea r9, [rsp + 0xd8]
lea r8, [rsp + 0xe0]
mov edx, 0xf
lea rcx, [rsp + 0xc8]
call fcn.18003bca0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, 1
lea rcx, [rsp + 0xe0]
call sub.ADVAPI32.dll_ConvertStringSecurityDescriptorToSecurityDescriptorA
test eax, eax
jne 0x1800029a9
mov dword [rsp + 0x22c], 8
mov dword [rsp + 0x240], 0x11
cmp dword [rsp + 0x240], 0
jle 0x1800025c3
mov eax, dword [rsp + 0x240]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800025a5
mov dword [rsp + 0x22c], 4
mov eax, dword [rsp + 0x240]
dec eax
mov dword [rsp + 0x240], eax
jmp 0x180002563
mov dword [rsp + 0x22c], 4
mov eax, dword [rsp + 0x240]
sub eax, 2
mov dword [rsp + 0x240], eax
jmp 0x180002563
mov dword [rsp + 0x23c], 7
mov dword [rsp + 0x24c], 0xb
mov eax, dword [rsp + 0x24c]
test eax, eax
jle 0x180002649
mov eax, dword [rsp + 0x24c]
cmp eax, 1
jle 0x180002616
mov eax, dword [rsp + 0x23c]
and eax, 0x66b
mov dword [rsp + 0x23c], eax
mov eax, dword [rsp + 0x24c]
sub eax, 2
mov dword [rsp + 0x24c], eax
jmp 0x1800025d9
mov eax, dword [rsp + 0x23c]
cmp eax, 0x80d
jle 0x180002637
mov eax, dword [rsp + 0x23c]
and eax, 0x86
mov dword [rsp + 0x23c], eax
mov eax, dword [rsp + 0x24c]
dec eax
mov dword [rsp + 0x24c], eax
jmp 0x1800025d9
mov dword [rsp + 0x230], 7
mov dword [rsp + 0x238], 0xd
cmp dword [rsp + 0x238], 0
jle 0x1800026bf
mov eax, dword [rsp + 0x238]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800026a2
mov dword [rsp + 0x230], 0
mov eax, dword [rsp + 0x238]
sub eax, 2
mov dword [rsp + 0x238], eax
jmp 0x18000265f
mov dword [rsp + 0x230], 4
mov eax, dword [rsp + 0x238]
dec eax
mov dword [rsp + 0x238], eax
jmp 0x18000265f
mov dword [rsp + 0x234], 7
mov dword [rsp + 0x244], 9
mov eax, dword [rsp + 0x244]
test eax, eax
jle 0x180002745
mov eax, dword [rsp + 0x244]
cmp eax, 1
jle 0x180002712
mov eax, dword [rsp + 0x234]
and eax, 0x19b6
mov dword [rsp + 0x234], eax
mov eax, dword [rsp + 0x244]
sub eax, 2
mov dword [rsp + 0x244], eax
jmp 0x1800026d5
mov eax, dword [rsp + 0x234]
cmp eax, 0x80b
jle 0x180002733
mov eax, dword [rsp + 0x234]
and eax, 0x84
mov dword [rsp + 0x234], eax
mov eax, dword [rsp + 0x244]
dec eax
mov dword [rsp + 0x244], eax
jmp 0x1800026d5
mov dword [rsp + 0x228], 4
mov dword [rsp + 0x248], 0x11
cmp dword [rsp + 0x248], 0
jle 0x1800027bb
mov eax, dword [rsp + 0x248]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18000279d
mov dword [rsp + 0x228], 4
mov eax, dword [rsp + 0x248]
dec eax
mov dword [rsp + 0x248], eax
jmp 0x18000275b
mov dword [rsp + 0x228], 4
mov eax, dword [rsp + 0x248]
sub eax, 2
mov dword [rsp + 0x248], eax
jmp 0x18000275b
mov dword [rsp + 0x25c], 7
mov dword [rsp + 0x258], 0x14
cmp dword [rsp + 0x258], 0
jle 0x180002831
mov eax, dword [rsp + 0x258]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180002814
mov dword [rsp + 0x25c], 0
mov eax, dword [rsp + 0x258]
sub eax, 2
mov dword [rsp + 0x258], eax
jmp 0x1800027d1
mov dword [rsp + 0x25c], 0
mov eax, dword [rsp + 0x258]
dec eax
mov dword [rsp + 0x258], eax
jmp 0x1800027d1
mov dword [rsp + 0x250], 3
mov dword [rsp + 0x254], 0xa
mov eax, dword [rsp + 0x254]
test eax, eax
jle 0x1800028b7
mov eax, dword [rsp + 0x254]
cmp eax, 1
jle 0x180002884
mov eax, dword [rsp + 0x250]
and eax, 0x107d
mov dword [rsp + 0x250], eax
mov eax, dword [rsp + 0x254]
sub eax, 2
mov dword [rsp + 0x254], eax
jmp 0x180002847
mov eax, dword [rsp + 0x250]
cmp eax, 0x80c
jle 0x1800028a5
mov eax, dword [rsp + 0x250]
and eax, 0x85
mov dword [rsp + 0x250], eax
mov eax, dword [rsp + 0x254]
dec eax
mov dword [rsp + 0x254], eax
jmp 0x180002847
mov dword [rsp + 0x26c], 0
mov dword [rsp + 0x264], 0xe
cmp dword [rsp + 0x264], 0
jle 0x18000292d
mov eax, dword [rsp + 0x264]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180002910
mov dword [rsp + 0x26c], 4
mov eax, dword [rsp + 0x264]
sub eax, 2
mov dword [rsp + 0x264], eax
jmp 0x1800028cd
mov dword [rsp + 0x26c], 4
mov eax, dword [rsp + 0x264]
dec eax
mov dword [rsp + 0x264], eax
jmp 0x1800028cd
mov dword [rsp + 0x268], 5
mov dword [rsp + 0x260], 0xf
cmp dword [rsp + 0x260], 0
jle 0x1800029a2
mov eax, dword [rsp + 0x260]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180002985
mov dword [rsp + 0x268], 0
mov eax, dword [rsp + 0x260]
dec eax
mov dword [rsp + 0x260], eax
jmp 0x180002943
mov dword [rsp + 0x268], 4
mov eax, dword [rsp + 0x260]
dec eax
mov dword [rsp + 0x260], eax
jmp 0x180002943
xor eax, eax
jmp 0x180003440
mov dword [rsp + 0x288], 4
mov dword [rsp + 0x294], 3
mov eax, dword [rsp + 0x294]
test eax, eax
jle 0x180002a2d
mov eax, dword [rsp + 0x294]
cmp eax, 1
jle 0x1800029fc
mov eax, dword [rsp + 0x288]
and eax, 0xdd8
mov dword [rsp + 0x288], eax
mov eax, dword [rsp + 0x294]
sub eax, 2
mov dword [rsp + 0x294], eax
jmp 0x1800029bf
mov eax, dword [rsp + 0x288]
cmp eax, 0x805
jle 0x180002a1b
mov eax, dword [rsp + 0x288]
and eax, 0x7e
mov dword [rsp + 0x288], eax
mov eax, dword [rsp + 0x294]
dec eax
mov dword [rsp + 0x294], eax
jmp 0x1800029bf
mov dword [rsp + 0x284], 9
mov dword [rsp + 0x29c], 4
mov eax, dword [rsp + 0x29c]
test eax, eax
jle 0x180002ab1
mov eax, dword [rsp + 0x29c]
cmp eax, 1
jle 0x180002a80
mov eax, dword [rsp + 0x284]
and eax, 0x197d
mov dword [rsp + 0x284], eax
mov eax, dword [rsp + 0x29c]
sub eax, 2
mov dword [rsp + 0x29c], eax
jmp 0x180002a43
mov eax, dword [rsp + 0x284]
cmp eax, 0x806
jle 0x180002a9f
mov eax, dword [rsp + 0x284]
and eax, 0x7f
mov dword [rsp + 0x284], eax
mov eax, dword [rsp + 0x29c]
dec eax
mov dword [rsp + 0x29c], eax
jmp 0x180002a43
mov dword [rsp + 0x2a4], 5
mov dword [rsp + 0x290], 0xf
cmp dword [rsp + 0x290], 0
jle 0x180002b26
mov eax, dword [rsp + 0x290]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180002b09
mov dword [rsp + 0x2a4], 0
mov eax, dword [rsp + 0x290]
dec eax
mov dword [rsp + 0x290], eax
jmp 0x180002ac7
mov dword [rsp + 0x2a4], 4
mov eax, dword [rsp + 0x290]
dec eax
mov dword [rsp + 0x290], eax
jmp 0x180002ac7
mov dword [rsp + 0x298], 5
mov dword [rsp + 0x280], 8
mov eax, dword [rsp + 0x280]
test eax, eax
jle 0x180002bac
mov eax, dword [rsp + 0x280]
cmp eax, 1
jle 0x180002b79
mov eax, dword [rsp + 0x298]
and eax, 0xc22
mov dword [rsp + 0x298], eax
mov eax, dword [rsp + 0x280]
sub eax, 2
mov dword [rsp + 0x280], eax
jmp 0x180002b3c
mov eax, dword [rsp + 0x298]
cmp eax, 0x80a
jle 0x180002b9a
mov eax, dword [rsp + 0x298]
and eax, 0x83
mov dword [rsp + 0x298], eax
mov eax, dword [rsp + 0x280]
dec eax
mov dword [rsp + 0x280], eax
jmp 0x180002b3c
mov dword [rsp + 0x278], 4
mov dword [rsp + 0x270], 0x15
cmp dword [rsp + 0x270], 0
jle 0x180002c23
mov eax, dword [rsp + 0x270]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180002c05
mov dword [rsp + 0x278], 0
mov eax, dword [rsp + 0x270]
sub eax, 2
mov dword [rsp + 0x270], eax
jmp 0x180002bc2
mov dword [rsp + 0x278], 0
mov eax, dword [rsp + 0x270]
sub eax, 2
mov dword [rsp + 0x270], eax
jmp 0x180002bc2
mov dword [rsp + 0x274], 8
mov dword [rsp + 0x28c], 0x11
cmp dword [rsp + 0x28c], 0
jle 0x180002c99
mov eax, dword [rsp + 0x28c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180002c7b
mov dword [rsp + 0x274], 4
mov eax, dword [rsp + 0x28c]
dec eax
mov dword [rsp + 0x28c], eax
jmp 0x180002c39
mov dword [rsp + 0x274], 4
mov eax, dword [rsp + 0x28c]
sub eax, 2
mov dword [rsp + 0x28c], eax
jmp 0x180002c39
mov dword [rsp + 0x27c], 6
mov dword [rsp + 0x2a0], 0xa
mov eax, dword [rsp + 0x2a0]
test eax, eax
jle 0x180002d1f
mov eax, dword [rsp + 0x2a0]
cmp eax, 1
jle 0x180002cec
mov eax, dword [rsp + 0x27c]
and eax, 0x1f29
mov dword [rsp + 0x27c], eax
mov eax, dword [rsp + 0x2a0]
sub eax, 2
mov dword [rsp + 0x2a0], eax
jmp 0x180002caf
mov eax, dword [rsp + 0x27c]
cmp eax, 0x80c
jle 0x180002d0d
mov eax, dword [rsp + 0x27c]
and eax, 0x85
mov dword [rsp + 0x27c], eax
mov eax, dword [rsp + 0x2a0]
dec eax
mov dword [rsp + 0x2a0], eax
jmp 0x180002caf
mov dword [rsp + 0x60], 0x18
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x70], 0
mov rax, qword [rsp + 0x330]
mov rax, qword [rax]
add rax, 0x10
mov r8, rax
xor edx, edx
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov rcx, qword [rsp + 0x330]
mov rcx, qword [rcx]
mov qword [rcx + 8], rax
mov dword [rsp + 0x2b4], 7
mov dword [rsp + 0x2b0], 0xa
mov eax, dword [rsp + 0x2b0]
test eax, eax
jle 0x180002ded
mov eax, dword [rsp + 0x2b0]
cmp eax, 1
jle 0x180002dba
mov eax, dword [rsp + 0x2b4]
and eax, 0x23c7
mov dword [rsp + 0x2b4], eax
mov eax, dword [rsp + 0x2b0]
sub eax, 2
mov dword [rsp + 0x2b0], eax
jmp 0x180002d7d
mov eax, dword [rsp + 0x2b4]
cmp eax, 0x80c
jle 0x180002ddb
mov eax, dword [rsp + 0x2b4]
and eax, 0x85
mov dword [rsp + 0x2b4], eax
mov eax, dword [rsp + 0x2b0]
dec eax
mov dword [rsp + 0x2b0], eax
jmp 0x180002d7d
mov dword [rsp + 0x2a8], 4
mov dword [rsp + 0x2b8], 3
mov eax, dword [rsp + 0x2b8]
test eax, eax
jle 0x180002e71
mov eax, dword [rsp + 0x2b8]
cmp eax, 1
jle 0x180002e40
mov eax, dword [rsp + 0x2a8]
and eax, 0x1494
mov dword [rsp + 0x2a8], eax
mov eax, dword [rsp + 0x2b8]
sub eax, 2
mov dword [rsp + 0x2b8], eax
jmp 0x180002e03
mov eax, dword [rsp + 0x2a8]
cmp eax, 0x805
jle 0x180002e5f
mov eax, dword [rsp + 0x2a8]
and eax, 0x7e
mov dword [rsp + 0x2a8], eax
mov eax, dword [rsp + 0x2b8]
dec eax
mov dword [rsp + 0x2b8], eax
jmp 0x180002e03
mov dword [rsp + 0x2ac], 1
mov dword [rsp + 0x2bc], 3
mov eax, dword [rsp + 0x2bc]
test eax, eax
jle 0x180002ef5
mov eax, dword [rsp + 0x2bc]
cmp eax, 1
jle 0x180002ec4
mov eax, dword [rsp + 0x2ac]
and eax, 0x1907
mov dword [rsp + 0x2ac], eax
mov eax, dword [rsp + 0x2bc]
sub eax, 2
mov dword [rsp + 0x2bc], eax
jmp 0x180002e87
mov eax, dword [rsp + 0x2ac]
cmp eax, 0x805
jle 0x180002ee3
mov eax, dword [rsp + 0x2ac]
and eax, 0x7e
mov dword [rsp + 0x2ac], eax
mov eax, dword [rsp + 0x2bc]
dec eax
mov dword [rsp + 0x2bc], eax
jmp 0x180002e87
mov rax, qword [rsp + 0x330]
mov rax, qword [rax]
cmp qword [rax + 8], 0
je 0x180002f18
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x180003193
mov dword [rsp + 0x2c8], 4
mov dword [rsp + 0x2d8], 3
mov eax, dword [rsp + 0x2d8]
test eax, eax
jle 0x180002f9c
mov eax, dword [rsp + 0x2d8]
cmp eax, 1
jle 0x180002f6b
mov eax, dword [rsp + 0x2c8]
and eax, 0x1891
mov dword [rsp + 0x2c8], eax
mov eax, dword [rsp + 0x2d8]
sub eax, 2
mov dword [rsp + 0x2d8], eax
jmp 0x180002f2e
mov eax, dword [rsp + 0x2c8]
cmp eax, 0x805
jle 0x180002f8a
mov eax, dword [rsp + 0x2c8]
and eax, 0x7e
mov dword [rsp + 0x2c8], eax
mov eax, dword [rsp + 0x2d8]
dec eax
mov dword [rsp + 0x2d8], eax
jmp 0x180002f2e
mov dword [rsp + 0x2cc], 4
mov dword [rsp + 0x2dc], 3
mov eax, dword [rsp + 0x2dc]
test eax, eax
jle 0x180003020
mov eax, dword [rsp + 0x2dc]
cmp eax, 1
jle 0x180002fef
mov eax, dword [rsp + 0x2cc]
and eax, 0xdd8
mov dword [rsp + 0x2cc], eax
mov eax, dword [rsp + 0x2dc]
sub eax, 2
mov dword [rsp + 0x2dc], eax
jmp 0x180002fb2
mov eax, dword [rsp + 0x2cc]
cmp eax, 0x805
jle 0x18000300e
mov eax, dword [rsp + 0x2cc]
and eax, 0x7e
mov dword [rsp + 0x2cc], eax
mov eax, dword [rsp + 0x2dc]
dec eax
mov dword [rsp + 0x2dc], eax
jmp 0x180002fb2
mov dword [rsp + 0x2c4], 4
mov dword [rsp + 0x2e0], 0x11
cmp dword [rsp + 0x2e0], 0
jle 0x180003096
mov eax, dword [rsp + 0x2e0]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180003078
mov dword [rsp + 0x2c4], 4
mov eax, dword [rsp + 0x2e0]
dec eax
mov dword [rsp + 0x2e0], eax
jmp 0x180003036
mov dword [rsp + 0x2c4], 4
mov eax, dword [rsp + 0x2e0]
sub eax, 2
mov dword [rsp + 0x2e0], eax
jmp 0x180003036
mov dword [rsp + 0x2e4], 5
mov dword [rsp + 0x2d4], 0xf
cmp dword [rsp + 0x2d4], 0
jle 0x18000310b
mov eax, dword [rsp + 0x2d4]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800030ee
mov dword [rsp + 0x2e4], 0
mov eax, dword [rsp + 0x2d4]
dec eax
mov dword [rsp + 0x2d4], eax
jmp 0x1800030ac
mov dword [rsp + 0x2e4], 4
mov eax, dword [rsp + 0x2d4]
dec eax
mov dword [rsp + 0x2d4], eax
jmp 0x1800030ac
mov dword [rsp + 0x2c0], 5
mov dword [rsp + 0x2d0], 4
mov eax, dword [rsp + 0x2d0]
test eax, eax
jle 0x18000318f
mov eax, dword [rsp + 0x2d0]
cmp eax, 1
jle 0x18000315e
mov eax, dword [rsp + 0x2c0]
and eax, 0x1952
mov dword [rsp + 0x2c0], eax
mov eax, dword [rsp + 0x2d0]
sub eax, 2
mov dword [rsp + 0x2d0], eax
jmp 0x180003121
mov eax, dword [rsp + 0x2c0]
cmp eax, 0x806
jle 0x18000317d
mov eax, dword [rsp + 0x2c0]
and eax, 0x7f
mov dword [rsp + 0x2c0], eax
mov eax, dword [rsp + 0x2d0]
dec eax
mov dword [rsp + 0x2d0], eax
jmp 0x180003121
jmp 0x1800031af
mov rax, qword [rsp + 0x330]
mov rax, qword [rax]
mov dword [rax], 1
mov dword [rsp + 0xa8], 1
cmp dword [rsp + 0xa8], 0
jne 0x1800031f3
mov rax, qword [rsp + 0x330]
mov rax, qword [rax]
cmp qword [rax + 8], 0
je 0x1800031f3
mov rax, qword [rsp + 0x330]
mov rax, qword [rax]
mov rcx, qword [rax + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rsp + 0x330]
mov rax, qword [rax]
mov qword [rax + 8], 0
cmp dword [rsp + 0xa8], 0
jne 0x180003233
mov rax, qword [rsp + 0x330]
cmp qword [rax], 0
je 0x180003233
mov r8d, 0x8000
xor edx, edx
mov rax, qword [rsp + 0x330]
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rax, qword [rsp + 0x330]
mov qword [rax], 0
call fcn.180047240
mov dword [rsp + 0x2e8], 1
mov dword [rsp + 0x300], 3
mov eax, dword [rsp + 0x300]
test eax, eax
jle 0x1800032bc
mov eax, dword [rsp + 0x300]
cmp eax, 1
jle 0x18000328b
mov eax, dword [rsp + 0x2e8]
and eax, 0x1907
mov dword [rsp + 0x2e8], eax
mov eax, dword [rsp + 0x300]
sub eax, 2
mov dword [rsp + 0x300], eax
jmp 0x18000324e
mov eax, dword [rsp + 0x2e8]
cmp eax, 0x805
jle 0x1800032aa
mov eax, dword [rsp + 0x2e8]
and eax, 0x7e
mov dword [rsp + 0x2e8], eax
mov eax, dword [rsp + 0x300]
dec eax
mov dword [rsp + 0x300], eax
jmp 0x18000324e
mov dword [rsp + 0x2f4], 2
mov dword [rsp + 0x2fc], 4
mov eax, dword [rsp + 0x2fc]
test eax, eax
jle 0x180003340
mov eax, dword [rsp + 0x2fc]
cmp eax, 1
jle 0x18000330f
mov eax, dword [rsp + 0x2f4]
and eax, 0x1176
mov dword [rsp + 0x2f4], eax
mov eax, dword [rsp + 0x2fc]
sub eax, 2
mov dword [rsp + 0x2fc], eax
jmp 0x1800032d2
mov eax, dword [rsp + 0x2f4]
cmp eax, 0x806
jle 0x18000332e
mov eax, dword [rsp + 0x2f4]
and eax, 0x7f
mov dword [rsp + 0x2f4], eax
mov eax, dword [rsp + 0x2fc]
dec eax
mov dword [rsp + 0x2fc], eax
jmp 0x1800032d2
mov dword [rsp + 0x304], 5
mov dword [rsp + 0x2f0], 0xf
cmp dword [rsp + 0x2f0], 0
jle 0x1800033b5
mov eax, dword [rsp + 0x2f0]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180003398
mov dword [rsp + 0x304], 0
mov eax, dword [rsp + 0x2f0]
dec eax
mov dword [rsp + 0x2f0], eax
jmp 0x180003356
mov dword [rsp + 0x304], 4
mov eax, dword [rsp + 0x2f0]
dec eax
mov dword [rsp + 0x2f0], eax
jmp 0x180003356
mov dword [rsp + 0x2ec], 8
mov dword [rsp + 0x2f8], 3
mov eax, dword [rsp + 0x2f8]
test eax, eax
jle 0x180003439
mov eax, dword [rsp + 0x2f8]
cmp eax, 1
jle 0x180003408
mov eax, dword [rsp + 0x2ec]
and eax, 0x1fed
mov dword [rsp + 0x2ec], eax
mov eax, dword [rsp + 0x2f8]
sub eax, 2
mov dword [rsp + 0x2f8], eax
jmp 0x1800033cb
mov eax, dword [rsp + 0x2ec]
cmp eax, 0x805
jle 0x180003427
mov eax, dword [rsp + 0x2ec]
and eax, 0x7e
mov dword [rsp + 0x2ec], eax
mov eax, dword [rsp + 0x2f8]
dec eax
mov dword [rsp + 0x2f8], eax
jmp 0x1800033cb
mov eax, dword [rsp + 0xa8]
mov rcx, qword [rsp + 0x308]
xor rcx, rsp
call fcn.180049ea0
add rsp, 0x318
pop rdi
pop rsi
ret