Function at 0x18004a6b0
Capabilities:
Check if file exists
Check mutex on windows
Copy file
Create process on windows
Delete file
Get common file path
Get disk information
Get session user name
Move file
Query environment variable
Set console window title
Set current directory
Set file attributes
Set registry value

Disassembly:
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rsi
push rdi
mov eax, 0x53f8
call fcn.1800182f0
sub rsp, rax
mov rax, qword [0x180082080]
xor rax, rsp
mov qword [rsp + 0x53e0], rax
xor ecx, ecx
call fcn.18005bac0
mov ecx, eax
call fcn.18001da18
nop
call fcn.180003b30
movzx eax, al
test eax, eax
je 0x18004a705
call fcn.180003b30
movzx eax, al
test eax, eax
je 0x18004a7c6
call fcn.1800039b0
movzx eax, al
test eax, eax
je 0x18004a771
call fcn.1800039d0
movzx eax, al
test eax, eax
je 0x18004a771
call fcn.1800039f0
movzx eax, al
test eax, eax
je 0x18004a771
call fcn.180003a10
movzx eax, al
test eax, eax
je 0x18004a771
call fcn.180003a30
movzx eax, al
test eax, eax
jne 0x18004a771
call fcn.180003a50
movzx eax, al
test eax, eax
jne 0x18004a771
call fcn.180003a70
movzx eax, al
test eax, eax
jne 0x18004a771
call fcn.180003a90
movzx eax, al
test eax, eax
jne 0x18004a771
call fcn.180003ab0
movzx eax, al
test eax, eax
je 0x18004a7c6
call qword [sym.imp.USER32.dll_IsProcessDPIAware]
test eax, eax
jne 0x18004a7c6
call qword [sym.imp.USER32.dll_SetProcessDPIAware]
test eax, eax
jne 0x18004a7c6
call fcn.180003ad0
movzx eax, al
test eax, eax
je 0x18004a79d
call fcn.180003af0
movzx eax, al
test eax, eax
je 0x18004a7c6
mov ecx, 1
call qword [sym.imp.api_ms_win_shcore_scaling_l1_1_1.dll_SetProcessDpiAwareness]
test eax, eax
je 0x18004a7c6
call fcn.180003b10
movzx eax, al
test eax, eax
je 0x18004a7c6
mov rcx, 0xfffffffffffffffe
call qword [sym.imp.USER32.dll_SetProcessDpiAwarenessContext]
nop
mov dword [rsp + 0x1f8], 0x101
lea rdx, [rsp + 0x1f8]
lea rcx, [rsp + 0x4d80]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea rdx, [rsp + 0x4b60]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea rcx, [rsp + 0x4b60]
call qword [sym.imp.SHLWAPI.dll_PathRemoveBackslashA]
lea rcx, [rsp + 0x4b60]
call qword [sym.imp.SHLWAPI.dll_PathMakePrettyA]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r8d, 0x104
lea rdx, [rsp + 0x4e90]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rdx, [rsp + 0x4e90]
lea rcx, [rsp + 0x4c70]
call fcn.18001daf0
lea rdx, [rsp + 0x4e90]
lea rcx, [rsp + 0x4940]
call fcn.18001daf0
lea rcx, [rsp + 0x4c70]
call qword [sym.imp.SHLWAPI.dll_PathStripPathA]
lea rcx, [rsp + 0x4940]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
lea rcx, [rsp + 0x4940]
call qword [sym.imp.SHLWAPI.dll_PathRemoveBackslashA]
lea rcx, [rsp + 0x4940]
call qword [sym.imp.SHLWAPI.dll_PathMakePrettyA]
lea rdx, [rsp + 0x43f0]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
lea rcx, [rsp + 0x43f0]
call qword [sym.imp.SHLWAPI.dll_PathRemoveBackslashA]
lea rcx, [rsp + 0x43f0]
call qword [sym.imp.SHLWAPI.dll_PathMakePrettyA]
mov edx, 0x104
lea rcx, [rsp + 0x4fa0]
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
lea rcx, [rsp + 0x4fa0]
call qword [sym.imp.SHLWAPI.dll_PathRemoveBackslashA]
lea rcx, [rsp + 0x4fa0]
call qword [sym.imp.SHLWAPI.dll_PathMakePrettyA]
mov edx, 0x104
lea rcx, [rsp + 0x4610]
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea rcx, [rsp + 0x4610]
call qword [sym.imp.SHLWAPI.dll_PathRemoveBackslashA]
lea rcx, [rsp + 0x4610]
call qword [sym.imp.SHLWAPI.dll_PathMakePrettyA]
lea rax, [rsp + 0x4720]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x10
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea rcx, [rsp + 0x4720]
call qword [sym.imp.SHLWAPI.dll_PathRemoveBackslashA]
lea rcx, [rsp + 0x4720]
call qword [sym.imp.SHLWAPI.dll_PathMakePrettyA]
lea rax, [rsp + 0x4500]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1c
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea rcx, [rsp + 0x4500]
call qword [sym.imp.SHLWAPI.dll_PathRemoveBackslashA]
lea rcx, [rsp + 0x4500]
call qword [sym.imp.SHLWAPI.dll_PathMakePrettyA]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop
cmp dword [rsp + 0x5410], 2
jle 0x180050da8
lea rax, [rsp + 0x50]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x50]
call fcn.18004a5c0
mov rcx, rax
call fcn.180007b20
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180050da8
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x5418]
mov rdx, qword [rcx + rax]
lea rcx, [rsp + 0x2170]
call fcn.18000a330
nop
mov r8d, 0xa
xor edx, edx
lea rcx, [rsp + 0x2170]
call fcn.180003290
nop
lea rcx, [rsp + 0x2170]
call fcn.18000a1c0
nop
mov edx, 1
lea rcx, [0x18005b3d0]
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
nop
cmp dword [rsp + 0x5410], 4
jle 0x18004aaf9
lea rax, [rsp + 0x51]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x51]
call fcn.18004a4b0
mov rcx, rax
call fcn.180007b00
mov ecx, 8
imul rcx, rcx, 4
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x18004aaf9
lea rax, [rsp + 0x52]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x52]
call fcn.18004a380
mov rcx, rax
call fcn.180007ae0
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
xor edx, edx
lea rcx, [0x18005b3d0]
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
nop
cmp dword [rsp + 0x5410], 3
jle 0x18004ac67
lea rax, [rsp + 0x53]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x53]
call fcn.18004a290
mov rcx, rax
call fcn.180007ac0
mov ecx, 8
imul rcx, rcx, 3
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x18004ac67
lea rax, [rsp + 0x54]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x54]
call fcn.18004a180
mov rcx, rax
call fcn.180007aa0
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
lea rdx, [rsp + 0x4500]
lea rcx, [rsp + 0x4940]
call fcn.180021480
test eax, eax
jne 0x18004ac62
cmp dword [rsp + 0x5410], 4
jle 0x18004ac4b
lea rax, [rsp + 0x55]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x55]
call fcn.18004a070
mov rcx, rax
call fcn.180007a80
mov ecx, 8
imul rcx, rcx, 4
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x18004ac4b
lea rax, [rsp + 0x56]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x56]
call fcn.180049f50
mov rcx, rax
call fcn.180007a60
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
call qword [sym.imp.KERNEL32.dll_AllocConsole]
nop
jmp 0x18004ac52
call qword [sym.imp.KERNEL32.dll_FreeConsole]
nop
mov edx, 1
mov ecx, 0xea60
call fcn.180058c20
nop
jmp 0x18004b095
call fcn.18005b200
test eax, eax
je 0x18004ae83
lea rax, [rsp + 0x57]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x58]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x57]
call fcn.180049d20
mov rcx, rax
call fcn.180007a20
mov rdx, rax
lea rcx, [rsp + 0x40d0]
call fcn.18000a330
mov qword [rsp + 0x240], rax
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x290], rax
lea rdx, [rsp + 0x4c70]
lea rcx, [rsp + 0x40b0]
call fcn.18000a330
mov qword [rsp + 0x248], rax
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x278], rax
lea rcx, [rsp + 0x58]
call fcn.180049e40
mov rcx, rax
call fcn.180007a40
mov rdx, rax
lea rcx, [rsp + 0x4090]
call fcn.18000a330
mov qword [rsp + 0x250], rax
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x260], rax
lea rdx, [rsp + 0x4c70]
lea rcx, [rsp + 0x4070]
call fcn.18000a330
mov qword [rsp + 0x258], rax
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0x268], rax
mov r8, qword [rsp + 0x260]
mov rdx, qword [rsp + 0x268]
lea rcx, [rsp + 0x4050]
call fcn.1800135d0
mov qword [rsp + 0x270], rax
mov rax, qword [rsp + 0x270]
mov qword [rsp + 0x280], rax
mov r8, qword [rsp + 0x278]
mov rdx, qword [rsp + 0x280]
lea rcx, [rsp + 0x4030]
call fcn.1800135d0
mov qword [rsp + 0x288], rax
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x298], rax
mov r8, qword [rsp + 0x290]
mov rdx, qword [rsp + 0x298]
lea rcx, [rsp + 0x4010]
call fcn.1800135d0
mov qword [rsp + 0x2a0], rax
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x2a8], rax
mov rcx, qword [rsp + 0x2a8]
call fcn.18000a0c0
xor r8d, r8d
mov edx, 0x8000000
mov rcx, rax
call fcn.18005ae60
nop
lea rcx, [rsp + 0x4010]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x4030]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x4050]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x4070]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x4090]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x40b0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x40d0]
call fcn.18000a1c0
nop
xor edx, edx
mov ecx, 0x7d0
call fcn.180058c20
nop
lea rax, [rsp + 0x59]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x5a]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x59]
call fcn.180049ac0
mov rcx, rax
call fcn.1800079e0
mov rdx, rax
lea rcx, [rsp + 0x4170]
call fcn.18000a330
mov qword [rsp + 0x2b0], rax
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0x2e0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, eax
lea rcx, [rsp + 0x4150]
call fcn.180003430
mov qword [rsp + 0x2b8], rax
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x2c8], rax
lea rcx, [rsp + 0x5a]
call fcn.180049be0
mov rcx, rax
call fcn.180007a00
mov rdx, rax
lea rcx, [rsp + 0x4130]
call fcn.18000a330
mov qword [rsp + 0x2c0], rax
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0x2d0], rax
mov r8, qword [rsp + 0x2c8]
mov rdx, qword [rsp + 0x2d0]
lea rcx, [rsp + 0x4110]
call fcn.1800135d0
mov qword [rsp + 0x2d8], rax
mov rax, qword [rsp + 0x2d8]
mov qword [rsp + 0x2e8], rax
mov r8, qword [rsp + 0x2e0]
mov rdx, qword [rsp + 0x2e8]
lea rcx, [rsp + 0x40f0]
call fcn.1800135d0
mov qword [rsp + 0x2f0], rax
mov rcx, qword [rsp + 0x2f0]
call fcn.18000a0c0
mov rcx, rax
call fcn.180021328
test eax, eax
je 0x18004afd3
mov dword [rsp + 0x1c8], 1
jmp 0x18004afde
mov dword [rsp + 0x1c8], 0
movzx eax, byte [rsp + 0x1c8]
mov byte [rsp + 0x5b], al
lea rcx, [rsp + 0x40f0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x4110]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x4130]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x4150]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x4170]
call fcn.18000a1c0
movzx eax, byte [rsp + 0x5b]
test eax, eax
je 0x18004b082
lea rax, [rsp + 0x5c]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x5c]
call fcn.180049950
mov rcx, rax
call fcn.1800079c0
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
call fcn.18001d6b8
nop
jmp 0x18004b095
xor edx, edx
mov ecx, 0x6ddd00
call fcn.180058c20
xor eax, eax
jmp 0x180054746
lea rax, [rsp + 0x5d]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
mov edx, dword [rsp + 0x5410]
lea rcx, [rsp + 0x4190]
call fcn.1800033f0
mov qword [rsp + 0x2f8], rax
mov rax, qword [rsp + 0x2f8]
mov qword [rsp + 0x300], rax
lea rcx, [rsp + 0x5d]
call fcn.180049840
mov rcx, rax
call fcn.1800079a0
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
mov rdx, qword [rsp + 0x300]
mov rcx, rax
call fcn.180013620
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
lea rcx, [rsp + 0x4190]
call fcn.18000a1c0
nop
mov dword [rsp + 0x128], 0
jmp 0x18004b13e
mov eax, dword [rsp + 0x128]
inc eax
mov dword [rsp + 0x128], eax
mov eax, dword [rsp + 0x5410]
cmp dword [rsp + 0x128], eax
jge 0x18004b24d
lea rax, [rsp + 0x5e]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x5f]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
mov edx, dword [rsp + 0x128]
lea rcx, [rsp + 0x41b0]
call fcn.1800033f0
mov qword [rsp + 0x308], rax
mov rax, qword [rsp + 0x308]
mov qword [rsp + 0x310], rax
movsxd rax, dword [rsp + 0x128]
mov qword [rsp + 0x320], rax
lea rcx, [rsp + 0x5e]
call fcn.180049650
mov rcx, rax
call fcn.180007960
mov qword [rsp + 0x318], rax
lea rcx, [rsp + 0x5f]
call fcn.180049730
mov rcx, rax
call fcn.180007980
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
mov rdx, qword [rsp + 0x310]
mov rcx, rax
call fcn.180013620
mov rcx, qword [rsp + 0x318]
mov rdx, rcx
mov rcx, rax
call fcn.180013230
mov rcx, qword [rsp + 0x5418]
mov rdx, qword [rsp + 0x320]
mov rdx, qword [rcx + rdx*8]
mov rcx, rax
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
lea rcx, [rsp + 0x41b0]
call fcn.18000a1c0
nop
jmp 0x18004b12e
lea rax, [rsp + 0x60]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x60]
call fcn.180049520
mov rcx, rax
call fcn.180007940
mov r8, rax
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0x238], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x18004b2d7
lea rax, [rsp + 0x61]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x61]
call fcn.1800493c0
mov rcx, rax
call fcn.180007920
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
lea rax, [rsp + 0x62]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x62]
call fcn.180049290
mov rcx, rax
call fcn.180007900
mov r8d, 0x104
lea rdx, [rsp + 0x4830]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
nop
lea rax, [rsp + 0x63]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x63]
call fcn.180049160
mov rcx, rax
call fcn.1800078e0
mov rdx, rax
lea rcx, [rsp + 0x4830]
call fcn.180021480
test eax, eax
jne 0x18004b3b6
lea rax, [rsp + 0x64]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x64]
call fcn.180049030
mov rcx, rax
call fcn.1800078c0
mov rdx, rax
lea rcx, [rsp + 0x4a50]
call fcn.18001daf0
nop
lea rax, [rsp + 0x65]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x65]
call fcn.180048f40
mov rcx, rax
call fcn.1800078a0
mov rdx, rax
lea rcx, [rsp + 0x4830]
call fcn.18001daf0
nop
jmp 0x18004b462
lea rdx, [rsp + 0x4830]
lea rcx, [rsp + 0x50b0]
call fcn.18001daf0
lea rcx, [rsp + 0x50b0]
call qword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
mov dword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 0x104
lea rdx, [rsp + 0x4a50]
lea rcx, [rsp + 0x50b0]
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
nop
lea rcx, [rsp + 0x4a50]
call fcn.180021b30
test rax, rax
jne 0x18004b462
lea rax, [rsp + 0x66]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x66]
call fcn.180048e10
mov rcx, rax
call fcn.180007880
mov rdx, rax
lea rcx, [rsp + 0x4a50]
call fcn.18001daf0
nop
lea rcx, [rsp + 0x4830]
call qword [sym.imp.SHLWAPI.dll_PathRemoveBackslashA]
lea rcx, [rsp + 0x43f0]
call qword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
nop
lea rax, [rsp + 0x1b00]
mov qword [rsp + 0x328], rax
lea rax, [rsp + 0x67]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x1b20]
mov qword [rsp + 0x338], rax
lea rcx, [rsp + 0x67]
call fcn.180048d00
mov rcx, rax
call fcn.180007860
mov rdx, rax
mov rcx, qword [rsp + 0x328]
call fcn.18000a330
mov qword [rsp + 0x330], rax
mov rax, qword [rsp + 0x330]
mov qword [rsp + 0x340], rax
lea rdx, [rsp + 0x43f0]
mov rcx, qword [rsp + 0x338]
call fcn.18000a330
mov qword [rsp + 0x348], rax
mov rdx, qword [rsp + 0x340]
mov rcx, qword [rsp + 0x348]
call fcn.180054df0
nop
lea rax, [rsp + 0x68]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x69]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x68]
call fcn.180048b00
mov rcx, rax
call fcn.180007820
mov rdx, rax
lea rcx, [rsp + 0x4270]
call fcn.18000a330
mov qword [rsp + 0x350], rax
mov rax, qword [rsp + 0x350]
mov qword [rsp + 0x3a0], rax
call fcn.18001d9ec
mov edx, eax
lea rcx, [rsp + 0x4250]
call fcn.1800033f0
mov qword [rsp + 0x358], rax
mov rax, qword [rsp + 0x358]
mov qword [rsp + 0x388], rax
lea rcx, [rsp + 0x69]
call fcn.180048c10
mov rcx, rax
call fcn.180007840
mov rdx, rax
lea rcx, [rsp + 0x4230]
call fcn.18000a330
mov qword [rsp + 0x360], rax
mov rax, qword [rsp + 0x360]
mov qword [rsp + 0x370], rax
lea rdx, [rsp + 0x43f0]
lea rcx, [rsp + 0x4210]
call fcn.18000a330
mov qword [rsp + 0x368], rax
mov rax, qword [rsp + 0x368]
mov qword [rsp + 0x378], rax
mov r8, qword [rsp + 0x370]
mov rdx, qword [rsp + 0x378]
lea rcx, [rsp + 0x41f0]
call fcn.1800135d0
mov qword [rsp + 0x380], rax
mov rax, qword [rsp + 0x380]
mov qword [rsp + 0x390], rax
mov r8, qword [rsp + 0x388]
mov rdx, qword [rsp + 0x390]
lea rcx, [rsp + 0x41d0]
call fcn.1800135d0
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0x398]
mov qword [rsp + 0x3a8], rax
mov r8, qword [rsp + 0x3a0]
mov rdx, qword [rsp + 0x3a8]
lea rcx, [rsp + 0x1f50]
call fcn.1800135d0
nop
lea rcx, [rsp + 0x41d0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x41f0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x4210]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x4230]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x4250]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x4270]
call fcn.18000a1c0
nop
lea rax, [rsp + 0x6a]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x6b]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x6a]
call fcn.180048900
mov rcx, rax
call fcn.1800077e0
mov rdx, rax
lea rcx, [rsp + 0x4330]
call fcn.18000a330
mov qword [rsp + 0x3b0], rax
mov rax, qword [rsp + 0x3b0]
mov qword [rsp + 0x400], rax
call fcn.18001d9ec
mov edx, eax
lea rcx, [rsp + 0x4310]
call fcn.1800033f0
mov qword [rsp + 0x3b8], rax
mov rax, qword [rsp + 0x3b8]
mov qword [rsp + 0x3e8], rax
lea rcx, [rsp + 0x6b]
call fcn.180048a10
mov rcx, rax
call fcn.180007800
mov rdx, rax
lea rcx, [rsp + 0x42f0]
call fcn.18000a330
mov qword [rsp + 0x3c0], rax
mov rax, qword [rsp + 0x3c0]
mov qword [rsp + 0x3d0], rax
lea rdx, [rsp + 0x43f0]
lea rcx, [rsp + 0x42d0]
call fcn.18000a330
mov qword [rsp + 0x3c8], rax
mov rax, qword [rsp + 0x3c8]
mov qword [rsp + 0x3d8], rax
mov r8, qword [rsp + 0x3d0]
mov rdx, qword [rsp + 0x3d8]
lea rcx, [rsp + 0x42b0]
call fcn.1800135d0
mov qword [rsp + 0x3e0], rax
mov rax, qword [rsp + 0x3e0]
mov qword [rsp + 0x3f0], rax
mov r8, qword [rsp + 0x3e8]
mov rdx, qword [rsp + 0x3f0]
lea rcx, [rsp + 0x4290]
call fcn.1800135d0
mov qword [rsp + 0x3f8], rax
mov rax, qword [rsp + 0x3f8]
mov qword [rsp + 0x408], rax
mov r8, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x408]
lea rcx, [rsp + 0x2030]
call fcn.1800135d0
nop
lea rcx, [rsp + 0x4290]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x42b0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x42d0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x42f0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x4310]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x4330]
call fcn.18000a1c0
nop
lea rax, [rsp + 0x6c]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x2030]
call fcn.18000a0c0
mov qword [rsp + 0x410], rax
lea rcx, [rsp + 0x6c]
call fcn.1800487e0
mov rcx, rax
call fcn.1800077c0
xor r8d, r8d
mov rcx, qword [rsp + 0x410]
mov rdx, rcx
mov rcx, rax
call fcn.180059be0
test eax, eax
jne 0x18004b922
lea rcx, [rsp + 0x2030]
call fcn.18000a0c0
mov rcx, rax
call fcn.18005af50
mov qword [rsp + 0x760], rax
lea rax, [rsp + 0x6d]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x6e]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x6d]
call fcn.1800485e0
mov rcx, rax
call fcn.180007780
mov rdx, rax
lea rcx, [rsp + 0x22b0]
call fcn.18000a330
mov qword [rsp + 0x418], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x468], rax
call fcn.18001d9ec
mov edx, eax
lea rcx, [rsp + 0x43d0]
call fcn.1800033f0
mov qword [rsp + 0x420], rax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0x450], rax
lea rcx, [rsp + 0x6e]
call fcn.1800486f0
mov rcx, rax
call fcn.1800077a0
mov rdx, rax
lea rcx, [rsp + 0x43b0]
call fcn.18000a330
mov qword [rsp + 0x428], rax
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0x438], rax
lea rdx, [rsp + 0x43f0]
lea rcx, [rsp + 0x4390]
call fcn.18000a330
mov qword [rsp + 0x430], rax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x440], rax
mov r8, qword [rsp + 0x438]
mov rdx, qword [rsp + 0x440]
lea rcx, [rsp + 0x4370]
call fcn.1800135d0
mov qword [rsp + 0x448], rax
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0x458], rax
mov r8, qword [rsp + 0x450]
mov rdx, qword [rsp + 0x458]
lea rcx, [rsp + 0x4350]
call fcn.1800135d0
mov qword [rsp + 0x460], rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x470], rax
mov r8, qword [rsp + 0x468]
mov rdx, qword [rsp + 0x470]
lea rcx, [rsp + 0x2010]
call fcn.1800135d0
nop
lea rcx, [rsp + 0x4350]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x4370]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x4390]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x43b0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x43d0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x22b0]
call fcn.18000a1c0
nop
lea rax, [rsp + 0x6f]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x2010]
call fcn.18000a0c0
mov qword [rsp + 0x478], rax
lea rcx, [rsp + 0x6f]
call fcn.1800484c0
mov rcx, rax
call fcn.180007760
xor r8d, r8d
mov rcx, qword [rsp + 0x478]
mov rdx, rcx
mov rcx, rax
call fcn.180059be0
test eax, eax
jne 0x18004bb5c
lea rcx, [rsp + 0x2010]
call fcn.18000a0c0
mov rcx, rax
call fcn.18005af50
mov qword [rsp + 0x7c0], rax
lea rax, [rsp + 0x70]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x71]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x70]
call fcn.1800482c0
mov rcx, rax
call fcn.180007720
mov rdx, rax
lea rcx, [rsp + 0x2370]
call fcn.18000a330
mov qword [rsp + 0x480], rax
mov rax, qword [rsp + 0x480]
mov qword [rsp + 0x4d0], rax
call fcn.18001d9ec
mov edx, eax
lea rcx, [rsp + 0x2350]
call fcn.1800033f0
mov qword [rsp + 0x488], rax
mov rax, qword [rsp + 0x488]
mov qword [rsp + 0x4b8], rax
lea rcx, [rsp + 0x71]
call fcn.1800483d0
mov rcx, rax
call fcn.180007740
mov rdx, rax
lea rcx, [rsp + 0x2330]
call fcn.18000a330
mov qword [rsp + 0x490], rax
mov rax, qword [rsp + 0x490]
mov qword [rsp + 0x4a0], rax
lea rdx, [rsp + 0x43f0]
lea rcx, [rsp + 0x2310]
call fcn.18000a330
mov qword [rsp + 0x498], rax
mov rax, qword [rsp + 0x498]
mov qword [rsp + 0x4a8], rax
mov r8, qword [rsp + 0x4a0]
mov rdx, qword [rsp + 0x4a8]
lea rcx, [rsp + 0x22f0]
call fcn.1800135d0
mov qword [rsp + 0x4b0], rax
mov rax, qword [rsp + 0x4b0]
mov qword [rsp + 0x4c0], rax
mov r8, qword [rsp + 0x4b8]
mov rdx, qword [rsp + 0x4c0]
lea rcx, [rsp + 0x22d0]
call fcn.1800135d0
mov qword [rsp + 0x4c8], rax
mov rax, qword [rsp + 0x4c8]
mov qword [rsp + 0x4d8], rax
mov r8, qword [rsp + 0x4d0]
mov rdx, qword [rsp + 0x4d8]
lea rcx, [rsp + 0x1ff0]
call fcn.1800135d0
nop
lea rcx, [rsp + 0x22d0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x22f0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2310]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2330]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2350]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2370]
call fcn.18000a1c0
nop
lea rax, [rsp + 0x72]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x1ff0]
call fcn.18000a0c0
mov qword [rsp + 0x4e0], rax
lea rcx, [rsp + 0x72]
call fcn.1800481a0
mov rcx, rax
call fcn.180007700
xor r8d, r8d
mov rcx, qword [rsp + 0x4e0]
mov rdx, rcx
mov rcx, rax
call fcn.180059be0
test eax, eax
jne 0x18004bd96
lea rcx, [rsp + 0x1ff0]
call fcn.18000a0c0
mov rcx, rax
call fcn.18005af50
mov qword [rsp + 0xc90], rax
lea rax, [rsp + 0x73]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x74]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x73]
call fcn.180047fa0
mov rcx, rax
call fcn.1800076c0
mov rdx, rax
lea rcx, [rsp + 0x2430]
call fcn.18000a330
mov qword [rsp + 0x4e8], rax
mov rax, qword [rsp + 0x4e8]
mov qword [rsp + 0x538], rax
call fcn.18001d9ec
mov edx, eax
lea rcx, [rsp + 0x2410]
call fcn.1800033f0
mov qword [rsp + 0x4f0], rax
mov rax, qword [rsp + 0x4f0]
mov qword [rsp + 0x520], rax
lea rcx, [rsp + 0x74]
call fcn.1800480b0
mov rcx, rax
call fcn.1800076e0
mov rdx, rax
lea rcx, [rsp + 0x23f0]
call fcn.18000a330
mov qword [rsp + 0x4f8], rax
mov rax, qword [rsp + 0x4f8]
mov qword [rsp + 0x508], rax
lea rdx, [rsp + 0x43f0]
lea rcx, [rsp + 0x23d0]
call fcn.18000a330
mov qword [rsp + 0x500], rax
mov rax, qword [rsp + 0x500]
mov qword [rsp + 0x510], rax
mov r8, qword [rsp + 0x508]
mov rdx, qword [rsp + 0x510]
lea rcx, [rsp + 0x23b0]
call fcn.1800135d0
mov qword [rsp + 0x518], rax
mov rax, qword [rsp + 0x518]
mov qword [rsp + 0x528], rax
mov r8, qword [rsp + 0x520]
mov rdx, qword [rsp + 0x528]
lea rcx, [rsp + 0x2390]
call fcn.1800135d0
mov qword [rsp + 0x530], rax
mov rax, qword [rsp + 0x530]
mov qword [rsp + 0x540], rax
mov r8, qword [rsp + 0x538]
mov rdx, qword [rsp + 0x540]
lea rcx, [rsp + 0x1fd0]
call fcn.1800135d0
nop
lea rcx, [rsp + 0x2390]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x23b0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x23d0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x23f0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2410]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2430]
call fcn.18000a1c0
nop
lea rax, [rsp + 0x75]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x1fd0]
call fcn.18000a0c0
mov qword [rsp + 0x548], rax
lea rcx, [rsp + 0x75]
call fcn.180047e70
mov rcx, rax
call fcn.1800076a0
xor r8d, r8d
mov rcx, qword [rsp + 0x548]
mov rdx, rcx
mov rcx, rax
call fcn.180059be0
test eax, eax
jne 0x18004bfd0
lea rcx, [rsp + 0x1fd0]
call fcn.18000a0c0
mov rcx, rax
call fcn.18005af50
mov qword [rsp + 0x6d8], rax
lea rax, [rsp + 0x76]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x77]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x76]
call fcn.180047c70
mov rcx, rax
call fcn.180007660
mov rdx, rax
lea rcx, [rsp + 0x24f0]
call fcn.18000a330
mov qword [rsp + 0x550], rax
mov rax, qword [rsp + 0x550]
mov qword [rsp + 0x5a0], rax
call fcn.18001d9ec
mov edx, eax
lea rcx, [rsp + 0x24d0]
call fcn.1800033f0
mov qword [rsp + 0x558], rax
mov rax, qword [rsp + 0x558]
mov qword [rsp + 0x588], rax
lea rcx, [rsp + 0x77]
call fcn.180047d80
mov rcx, rax
call fcn.180007680
mov rdx, rax
lea rcx, [rsp + 0x24b0]
call fcn.18000a330
mov qword [rsp + 0x560], rax
mov rax, qword [rsp + 0x560]
mov qword [rsp + 0x570], rax
lea rdx, [rsp + 0x43f0]
lea rcx, [rsp + 0x2490]
call fcn.18000a330
mov qword [rsp + 0x568], rax
mov rax, qword [rsp + 0x568]
mov qword [rsp + 0x578], rax
mov r8, qword [rsp + 0x570]
mov rdx, qword [rsp + 0x578]
lea rcx, [rsp + 0x2470]
call fcn.1800135d0
mov qword [rsp + 0x580], rax
mov rax, qword [rsp + 0x580]
mov qword [rsp + 0x590], rax
mov r8, qword [rsp + 0x588]
mov rdx, qword [rsp + 0x590]
lea rcx, [rsp + 0x2450]
call fcn.1800135d0
mov qword [rsp + 0x598], rax
mov rax, qword [rsp + 0x598]
mov qword [rsp + 0x5a8], rax
mov r8, qword [rsp + 0x5a0]
mov rdx, qword [rsp + 0x5a8]
lea rcx, [rsp + 0x1fb0]
call fcn.1800135d0
nop
lea rcx, [rsp + 0x2450]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2470]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2490]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x24b0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x24d0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x24f0]
call fcn.18000a1c0
nop
lea rax, [rsp + 0x78]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x1fb0]
call fcn.18000a0c0
mov qword [rsp + 0x5b0], rax
lea rcx, [rsp + 0x78]
call fcn.180047b40
mov rcx, rax
call fcn.180007640
xor r8d, r8d
mov rcx, qword [rsp + 0x5b0]
mov rdx, rcx
mov rcx, rax
call fcn.180059be0
test eax, eax
jne 0x18004c20a
lea rcx, [rsp + 0x1fb0]
call fcn.18000a0c0
mov rcx, rax
call fcn.18005af50
mov qword [rsp + 0xfa0], rax
xor edx, edx
mov ecx, 0x7d0
call fcn.180058c20
nop
lea rax, [rsp + 0x1b40]
mov qword [rsp + 0x5b8], rax
lea rax, [rsp + 0x79]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x79]
call fcn.180047a60
mov rcx, rax
call fcn.180007620
mov rdx, rax
mov rcx, qword [rsp + 0x5b8]
call fcn.18000a330
mov qword [rsp + 0x5c0], rax
mov rdx, qword [rsp + 0x5c0]
lea rcx, [rsp + 0x1600]
call fcn.180054bd0
lea rcx, [rsp + 0x2110]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1f40]
lea rcx, [rsp + 0x2110]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
movzx eax, word [rsp + 0x1f4e]
mov edx, eax
lea rcx, [rsp + 0x2670]
call fcn.1800033f0
mov qword [rsp + 0x5c8], rax
mov rax, qword [rsp + 0x5c8]
mov qword [rsp + 0x678], rax
movzx eax, word [rsp + 0x1f4c]
mov edx, eax
lea rcx, [rsp + 0x2650]
call fcn.1800033f0
mov qword [rsp + 0x5d0], rax
mov rax, qword [rsp + 0x5d0]
mov qword [rsp + 0x660], rax
movzx eax, word [rsp + 0x1f4a]
mov edx, eax
lea rcx, [rsp + 0x2630]
call fcn.1800033f0
mov qword [rsp + 0x5d8], rax
mov rax, qword [rsp + 0x5d8]
mov qword [rsp + 0x648], rax
movzx eax, word [rsp + 0x1f48]
mov edx, eax
lea rcx, [rsp + 0x2610]
call fcn.1800033f0
mov qword [rsp + 0x5e0], rax
mov rax, qword [rsp + 0x5e0]
mov qword [rsp + 0x630], rax
movzx eax, word [rsp + 0x1f46]
mov edx, eax
lea rcx, [rsp + 0x25f0]
call fcn.1800033f0
mov qword [rsp + 0x5e8], rax
mov rax, qword [rsp + 0x5e8]
mov qword [rsp + 0x618], rax
movzx eax, word [rsp + 0x1f42]
mov edx, eax
lea rcx, [rsp + 0x25d0]
call fcn.1800033f0
mov qword [rsp + 0x5f0], rax
mov rax, qword [rsp + 0x5f0]
mov qword [rsp + 0x600], rax
movzx eax, word [rsp + 0x1f40]
mov edx, eax
lea rcx, [rsp + 0x25b0]
call fcn.1800033f0
mov qword [rsp + 0x5f8], rax
mov rax, qword [rsp + 0x5f8]
mov qword [rsp + 0x608], rax
mov r8, qword [rsp + 0x600]
mov rdx, qword [rsp + 0x608]
lea rcx, [rsp + 0x2590]
call fcn.1800135d0
mov qword [rsp + 0x610], rax
mov rax, qword [rsp + 0x610]
mov qword [rsp + 0x620], rax
mov r8, qword [rsp + 0x618]
mov rdx, qword [rsp + 0x620]
lea rcx, [rsp + 0x2570]
call fcn.1800135d0
mov qword [rsp + 0x628], rax
mov rax, qword [rsp + 0x628]
mov qword [rsp + 0x638], rax
mov r8, qword [rsp + 0x630]
mov rdx, qword [rsp + 0x638]
lea rcx, [rsp + 0x2550]
call fcn.1800135d0
mov qword [rsp + 0x640], rax
mov rax, qword [rsp + 0x640]
mov qword [rsp + 0x650], rax
mov r8, qword [rsp + 0x648]
mov rdx, qword [rsp + 0x650]
lea rcx, [rsp + 0x2530]
call fcn.1800135d0
mov qword [rsp + 0x658], rax
mov rax, qword [rsp + 0x658]
mov qword [rsp + 0x668], rax
mov r8, qword [rsp + 0x660]
mov rdx, qword [rsp + 0x668]
lea rcx, [rsp + 0x2510]
call fcn.1800135d0
mov qword [rsp + 0x670], rax
mov rax, qword [rsp + 0x670]
mov qword [rsp + 0x680], rax
mov r8, qword [rsp + 0x678]
mov rdx, qword [rsp + 0x680]
lea rcx, [rsp + 0x2150]
call fcn.1800135d0
nop
lea rcx, [rsp + 0x2510]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2530]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2550]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2570]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2590]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x25b0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x25d0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x25f0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2610]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2630]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2650]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2670]
call fcn.18000a1c0
nop
lea rax, [rsp + 0x7a]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x7a]
call fcn.180047810
mov rcx, rax
call fcn.180007600
lea r8, [rsp + 0x1d8]
mov rdx, rax
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
test eax, eax
jne 0x18004c66c
lea rax, [rsp + 0x7b]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x2150]
call fcn.18000a0c0
mov qword [rsp + 0x688], rax
lea rcx, [rsp + 0x7b]
call fcn.1800476d0
mov rcx, rax
call fcn.1800075e0
mov dword [rsp + 0x28], 0x14
mov rcx, qword [rsp + 0x688]
mov qword [rsp + 0x20], rcx
mov r9d, 1
mov r8, rax
xor edx, edx
mov rcx, qword [rsp + 0x1d8]
call qword [sym.imp.ADVAPI32.dll_RegSetKeyValueA]
nop
jmp 0x18004c73f
lea rax, [rsp + 0x7c]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x7c]
call fcn.180047480
mov rcx, rax
call fcn.180007510
mov qword [rsp + 0x40], 0
lea rcx, [rsp + 0x1d8]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x18004c73f
lea rax, [rsp + 0x7d]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x2150]
call fcn.18000a0c0
mov qword [rsp + 0x690], rax
lea rcx, [rsp + 0x7d]
call fcn.180047340
mov rcx, rax
call fcn.1800074f0
mov dword [rsp + 0x28], 0x14
mov rcx, qword [rsp + 0x690]
mov qword [rsp + 0x20], rcx
mov r9d, 1
mov r8, rax
xor edx, edx
mov rcx, qword [rsp + 0x1d8]
call qword [sym.imp.ADVAPI32.dll_RegSetKeyValueA]
nop
mov rcx, qword [rsp + 0x1d8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rax, [rsp + 0x7e]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x7e]
call fcn.180047230
mov rcx, rax
call fcn.1800074d0
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
mov edx, 1
xor ecx, ecx
call fcn.180058c20
nop
lea rax, [rsp + 0x1b60]
mov qword [rsp + 0x698], rax
lea rax, [rsp + 0x7f]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x7f]
call fcn.180047140
mov rcx, rax
call fcn.1800074b0
mov rdx, rax
mov rcx, qword [rsp + 0x698]
call fcn.18000a330
mov qword [rsp + 0x6a0], rax
mov rdx, qword [rsp + 0x6a0]
lea rcx, [rsp + 0x1610]
call fcn.180054bd0
lea rcx, [rsp + 0x3ab0]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x80]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x80]
call fcn.180046fc0
mov rcx, rax
call fcn.1800073e0
mov rdx, rax
lea rcx, [rsp + 0x2690]
call fcn.18000a330
mov qword [rsp + 0x6a8], rax
mov rax, qword [rsp + 0x6a8]
mov qword [rsp + 0x6b0], rax
mov rcx, qword [rsp + 0x6b0]
call fcn.18000a0c0
mov r8d, 1
mov edx, 0x8000000
mov rcx, rax
call fcn.18005ae60
nop
lea rcx, [rsp + 0x2690]
call fcn.18000a1c0
nop
lea rax, [rsp + 0x81]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x81]
call fcn.180046e90
mov rcx, rax
call fcn.1800073c0
mov rdx, rax
lea rcx, [rsp + 0x26d0]
call fcn.18000a330
mov qword [rsp + 0x6b8], rax
mov rax, qword [rsp + 0x6b8]
mov qword [rsp + 0x6c8], rax
lea rdx, [rsp + 0x43f0]
lea rcx, [rsp + 0x26b0]
call fcn.18000a330
mov qword [rsp + 0x6c0], rax
mov rax, qword [rsp + 0x6c0]
mov qword [rsp + 0x6d0], rax
mov r8, qword [rsp + 0x6c8]
mov rdx, qword [rsp + 0x6d0]
lea rcx, [rsp + 0x1f90]
call fcn.1800135d0
nop
lea rcx, [rsp + 0x26b0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x26d0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x1f90]
call fcn.18000a0c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov rcx, qword [rsp + 0x6d8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rax, [rsp + 0x1b80]
mov qword [rsp + 0x6e0], rax
lea rax, [rsp + 0x1ba0]
mov qword [rsp + 0x6f0], rax
lea rdx, [rsp + 0x1f90]
mov rcx, qword [rsp + 0x6e0]
call fcn.18000a3d0
mov qword [rsp + 0x6e8], rax
mov rax, qword [rsp + 0x6e8]
mov qword [rsp + 0x6f8], rax
lea rdx, [rsp + 0x1fd0]
mov rcx, qword [rsp + 0x6f0]
call fcn.18000a3d0
mov qword [rsp + 0x700], rax
xor r8d, r8d
mov rdx, qword [rsp + 0x6f8]
mov rcx, qword [rsp + 0x700]
call fcn.18005a7e0
nop
mov edx, 1
mov ecx, 0x7d0
call fcn.180058c20
nop
lea rax, [rsp + 0x82]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x1f90]
lea rcx, [rsp + 0x2730]
call fcn.18000a3d0
mov qword [rsp + 0x708], rax
mov rax, qword [rsp + 0x708]
mov qword [rsp + 0x718], rax
lea rcx, [rsp + 0x82]
call fcn.180046d60
mov rcx, rax
call fcn.1800073a0
mov rdx, rax
lea rcx, [rsp + 0x2710]
call fcn.18000a330
mov qword [rsp + 0x710], rax
mov rax, qword [rsp + 0x710]
mov qword [rsp + 0x720], rax
mov r8, qword [rsp + 0x718]
mov rdx, qword [rsp + 0x720]
lea rcx, [rsp + 0x26f0]
call fcn.1800135d0
mov qword [rsp + 0x728], rax
mov rcx, qword [rsp + 0x728]
call fcn.18000a0c0
mov edx, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WinExec]
lea rcx, [rsp + 0x26f0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2710]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2730]
call fcn.18000a1c0
nop
lea rax, [rsp + 0x83]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x83]
call fcn.180046bf0
mov rcx, rax
call fcn.180007380
mov rdx, rax
lea rcx, [rsp + 0x2750]
call fcn.18000a330
mov qword [rsp + 0x730], rax
mov rax, qword [rsp + 0x730]
mov qword [rsp + 0x738], rax
mov rcx, qword [rsp + 0x738]
call fcn.18000a0c0
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.18005ae60
nop
lea rcx, [rsp + 0x2750]
call fcn.18000a1c0
nop
lea rax, [rsp + 0x84]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x84]
call fcn.180046a80
mov rcx, rax
call fcn.1800072b0
mov rdx, rax
lea rcx, [rsp + 0x2770]
call fcn.18000a330
mov qword [rsp + 0x740], rax
mov rax, qword [rsp + 0x740]
mov qword [rsp + 0x748], rax
mov rcx, qword [rsp + 0x748]
call fcn.18000a0c0
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.18005ae60
nop
lea rcx, [rsp + 0x2770]
call fcn.18000a1c0
nop
mov edx, 1
mov ecx, 0x7d0
call fcn.180058c20
lea rcx, [rsp + 0x1f90]
call fcn.18000a0c0
mov r8d, 4
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MoveFileExA]
lea rcx, [rsp + 0x1fd0]
call fcn.18000a0c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edx, 1
xor ecx, ecx
call fcn.180058c20
nop
lea rax, [rsp + 0x1bc0]
mov qword [rsp + 0x750], rax
lea rax, [rsp + 0x85]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x85]
call fcn.180046990
mov rcx, rax
call fcn.180007290
mov rdx, rax
mov rcx, qword [rsp + 0x750]
call fcn.18000a330
mov qword [rsp + 0x758], rax
mov rdx, qword [rsp + 0x758]
lea rcx, [rsp + 0x1630]
call fcn.180054bd0
lea rcx, [rsp + 0x3c60]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rsp + 0x760]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rax, [rsp + 0x1a00]
mov qword [rsp + 0x768], rax
lea rax, [rsp + 0x1be0]
mov qword [rsp + 0x778], rax
lea rdx, [rsp + 0x1f50]
mov rcx, qword [rsp + 0x768]
call fcn.18000a3d0
mov qword [rsp + 0x770], rax
mov rax, qword [rsp + 0x770]
mov qword [rsp + 0x780], rax
lea rdx, [rsp + 0x2030]
mov rcx, qword [rsp + 0x778]
call fcn.18000a3d0
mov qword [rsp + 0x788], rax
xor r8d, r8d
mov rdx, qword [rsp + 0x780]
mov rcx, qword [rsp + 0x788]
call fcn.18005a7e0
nop
mov edx, 1
mov ecx, 0x7d0
call fcn.180058c20
nop
cmp dword [rsp + 0x5410], 7
jle 0x18004cded
lea rax, [rsp + 0x86]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x86]
call fcn.180046880
mov rcx, rax
call fcn.180007270
mov ecx, 8
imul rcx, rcx, 7
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x18004cded
lea rax, [rsp + 0x87]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x87]
call fcn.180046750
mov rcx, rax
call fcn.180007250
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
jmp 0x18004ce28
lea rax, [rsp + 0x1c00]
mov qword [rsp + 0x790], rax
lea rdx, [rsp + 0x1f50]
mov rcx, qword [rsp + 0x790]
call fcn.18000a3d0
mov qword [rsp + 0x798], rax
mov rcx, qword [rsp + 0x798]
call fcn.180058080
nop
mov edx, 1
mov ecx, 0x7d0
call fcn.180058c20
lea rcx, [rsp + 0x1f50]
call fcn.18000a0c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rcx, [rsp + 0x2030]
call fcn.18000a0c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edx, 1
xor ecx, ecx
call fcn.180058c20
nop
lea rax, [rsp + 0x1c20]
mov qword [rsp + 0x7a0], rax
lea rax, [rsp + 0x88]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x88]
call fcn.180046660
mov rcx, rax
call fcn.180007230
mov rdx, rax
mov rcx, qword [rsp + 0x7a0]
call fcn.18000a330
mov qword [rsp + 0x7a8], rax
mov rdx, qword [rsp + 0x7a8]
lea rcx, [rsp + 0x1660]
call fcn.180054bd0
lea rcx, [rsp + 0x3c90]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
cmp dword [rsp + 0x5410], 0xc
jle 0x18004cf90
lea rax, [rsp + 0x89]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x89]
call fcn.180046550
mov rcx, rax
call fcn.180007210
mov ecx, 8
imul rcx, rcx, 0xc
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x18004cf90
lea rax, [rsp + 0x8a]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x8a]
call fcn.180046430
mov rcx, rax
call fcn.1800071f0
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
jmp 0x18004d072
mov edx, 0x12c
mov ecx, 0x19f
call fcn.180057670
mov edx, 0x12c
mov ecx, 0x19f
call fcn.180057670
mov edx, 0x12c
mov ecx, 0x26e
call fcn.180057670
mov edx, 0x12c
mov ecx, 0x26e
call fcn.180057670
mov edx, 0x12c
mov ecx, 0x2ba
call fcn.180057670
mov edx, 0x12c
mov ecx, 0x2ba
call fcn.180057670
mov edx, 0x12c
mov ecx, 0x26e
call fcn.180057670
mov edx, 1
mov ecx, 0x12c
call fcn.180058c20
mov edx, 0x12c
mov ecx, 0x22a
call fcn.180057670
mov edx, 0x12c
mov ecx, 0x22a
call fcn.180057670
mov edx, 0x12c
mov ecx, 0x20b
call fcn.180057670
mov edx, 0x12c
mov ecx, 0x20b
call fcn.180057670
mov edx, 0x12c
mov ecx, 0x1d2
call fcn.180057670
mov edx, 0x12c
mov ecx, 0x1d2
call fcn.180057670
mov edx, 0x12c
mov ecx, 0x19f
call fcn.180057670
nop
mov edx, 1
mov ecx, 0x7d0
call fcn.180058c20
mov edx, 1
xor ecx, ecx
call fcn.180058c20
nop
lea rax, [rsp + 0x1c40]
mov qword [rsp + 0x7b0], rax
lea rax, [rsp + 0x8b]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x8b]
call fcn.180046340
mov rcx, rax
call fcn.1800071d0
mov rdx, rax
mov rcx, qword [rsp + 0x7b0]
call fcn.18000a330
mov qword [rsp + 0x7b8], rax
mov rdx, qword [rsp + 0x7b8]
lea rcx, [rsp + 0x1680]
call fcn.180054bd0
lea rcx, [rsp + 0x3ca0]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rsp + 0x7c0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rax, [rsp + 0x1c60]
mov qword [rsp + 0x7c8], rax
lea rax, [rsp + 0x1ae0]
mov qword [rsp + 0x7d8], rax
lea rdx, [rsp + 0x1f50]
mov rcx, qword [rsp + 0x7c8]
call fcn.18000a3d0
mov qword [rsp + 0x7d0], rax
mov rax, qword [rsp + 0x7d0]
mov qword [rsp + 0x7e0], rax
lea rdx, [rsp + 0x2010]
mov rcx, qword [rsp + 0x7d8]
call fcn.18000a3d0
mov qword [rsp + 0x7e8], rax
xor r8d, r8d
mov rdx, qword [rsp + 0x7e0]
mov rcx, qword [rsp + 0x7e8]
call fcn.18005a7e0
nop
mov edx, 1
mov ecx, 0x7d0
call fcn.180058c20
nop
cmp dword [rsp + 0x5410], 7
jle 0x18004d24d
lea rax, [rsp + 0x8c]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x8c]
call fcn.180046230
mov rcx, rax
call fcn.1800071b0
mov ecx, 8
imul rcx, rcx, 7
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x18004d24d
lea rax, [rsp + 0x8d]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x8d]
call fcn.180046100
mov rcx, rax
call fcn.180007190
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
jmp 0x18004d288
lea rax, [rsp + 0x1c80]
mov qword [rsp + 0x7f0], rax
lea rdx, [rsp + 0x1f50]
mov rcx, qword [rsp + 0x7f0]
call fcn.18000a3d0
mov qword [rsp + 0x7f8], rax
mov rcx, qword [rsp + 0x7f8]
call fcn.180058080
nop
mov edx, 1
mov ecx, 0x7d0
call fcn.180058c20
lea rcx, [rsp + 0x1f50]
call fcn.18000a0c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rcx, [rsp + 0x2010]
call fcn.18000a0c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edx, 1
xor ecx, ecx
call fcn.180058c20
nop
lea rax, [rsp + 0x1ca0]
mov qword [rsp + 0x800], rax
lea rax, [rsp + 0x8e]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x8e]
call fcn.180046010
mov rcx, rax
call fcn.180007170
mov rdx, rax
mov rcx, qword [rsp + 0x800]
call fcn.18000a330
mov qword [rsp + 0x808], rax
mov rdx, qword [rsp + 0x808]
lea rcx, [rsp + 0x15d0]
call fcn.180054bd0
lea rcx, [rsp + 0x3ef0]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x8f]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x90]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x91]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x8f]
call fcn.180045b30
mov rcx, rax
call fcn.180007060
mov rdx, rax
lea rcx, [rsp + 0x2890]
call fcn.18000a330
mov qword [rsp + 0x810], rax
mov rax, qword [rsp + 0x810]
mov qword [rsp + 0x880], rax
lea rdx, [rsp + 0x4830]
lea rcx, [rsp + 0x2870]
call fcn.18000a330
mov qword [rsp + 0x818], rax
mov rax, qword [rsp + 0x818]
mov qword [rsp + 0x868], rax
lea rcx, [rsp + 0x90]
call fcn.180045c10
mov rcx, rax
call fcn.180007080
mov rdx, rax
lea rcx, [rsp + 0x2850]
call fcn.18000a330
mov qword [rsp + 0x820], rax
mov rax, qword [rsp + 0x820]
mov qword [rsp + 0x850], rax
lea rdx, [rsp + 0x4a50]
lea rcx, [rsp + 0x2830]
call fcn.18000a330
mov qword [rsp + 0x828], rax
mov rax, qword [rsp + 0x828]
mov qword [rsp + 0x838], rax
lea rcx, [rsp + 0x91]
call fcn.180045d00
mov rcx, rax
call fcn.1800070a0
mov rdx, rax
lea rcx, [rsp + 0x2810]
call fcn.18000a330
mov qword [rsp + 0x830], rax
mov rax, qword [rsp + 0x830]
mov qword [rsp + 0x840], rax
mov r8, qword [rsp + 0x838]
mov rdx, qword [rsp + 0x840]
lea rcx, [rsp + 0x27f0]
call fcn.1800135d0
mov qword [rsp + 0x848], rax
mov rax, qword [rsp + 0x848]
mov qword [rsp + 0x858], rax
mov r8, qword [rsp + 0x850]
mov rdx, qword [rsp + 0x858]
lea rcx, [rsp + 0x27d0]
call fcn.1800135d0
mov qword [rsp + 0x860], rax
mov rax, qword [rsp + 0x860]
mov qword [rsp + 0x870], rax
mov r8, qword [rsp + 0x868]
mov rdx, qword [rsp + 0x870]
lea rcx, [rsp + 0x27b0]
call fcn.1800135d0
mov qword [rsp + 0x878], rax
mov rax, qword [rsp + 0x878]
mov qword [rsp + 0x888], rax
mov r8, qword [rsp + 0x880]
mov rdx, qword [rsp + 0x888]
lea rcx, [rsp + 0x2790]
call fcn.1800135d0
mov qword [rsp + 0x890], rax
mov rax, qword [rsp + 0x890]
mov qword [rsp + 0x898], rax
mov rcx, qword [rsp + 0x898]
call fcn.18000a0c0
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.18005ae60
nop
lea rcx, [rsp + 0x2790]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x27b0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x27d0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x27f0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2810]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2830]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2850]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2870]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2890]
call fcn.18000a1c0
nop
mov edx, 1
xor ecx, ecx
call fcn.180058c20
nop
lea rax, [rsp + 0x1cc0]
mov qword [rsp + 0x8a0], rax
lea rax, [rsp + 0x92]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x92]
call fcn.180045a40
mov rcx, rax
call fcn.180007040
mov rdx, rax
mov rcx, qword [rsp + 0x8a0]
call fcn.18000a330
mov qword [rsp + 0x8a8], rax
mov rdx, qword [rsp + 0x8a8]
lea rcx, [rsp + 0x16c0]
call fcn.180054bd0
lea rcx, [rsp + 0x3f00]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x93]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x94]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x93]
call fcn.180045880
mov rcx, rax
call fcn.180007020
mov qword [rsp + 0x8b0], rax
lea rcx, [rsp + 0x94]
call fcn.180045960
mov rcx, rax
call fcn.180007020
mov r9d, 1
mov r8d, 1
mov rcx, qword [rsp + 0x8b0]
mov rdx, rcx
mov rcx, rax
call fcn.1800554f0
mov dword [rsp + 0x1d0], eax
mov edx, 1
xor ecx, ecx
call fcn.180058c20
nop
lea rax, [rsp + 0x1ce0]
mov qword [rsp + 0x8b8], rax
lea rax, [rsp + 0x95]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x95]
call fcn.180045790
mov rcx, rax
call fcn.180007000
mov rdx, rax
mov rcx, qword [rsp + 0x8b8]
call fcn.18000a330
mov qword [rsp + 0x8c0], rax
mov rdx, qword [rsp + 0x8c0]
lea rcx, [rsp + 0x16e0]
call fcn.180054bd0
lea rcx, [rsp + 0x3f10]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x96]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x97]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x96]
call fcn.180045590
mov rcx, rax
call fcn.180006fc0
mov rdx, rax
lea rcx, [rsp + 0x2950]
call fcn.18000a330
mov qword [rsp + 0x8c8], rax
mov rax, qword [rsp + 0x8c8]
mov qword [rsp + 0x918], rax
call fcn.18001d9ec
mov edx, eax
lea rcx, [rsp + 0x2930]
call fcn.1800033f0
mov qword [rsp + 0x8d0], rax
mov rax, qword [rsp + 0x8d0]
mov qword [rsp + 0x900], rax
lea rcx, [rsp + 0x97]
call fcn.1800456a0
mov rcx, rax
call fcn.180006fe0
mov rdx, rax
lea rcx, [rsp + 0x2910]
call fcn.18000a330
mov qword [rsp + 0x8d8], rax
mov rax, qword [rsp + 0x8d8]
mov qword [rsp + 0x8e8], rax
lea rdx, [rsp + 0x43f0]
lea rcx, [rsp + 0x28f0]
call fcn.18000a330
mov qword [rsp + 0x8e0], rax
mov rax, qword [rsp + 0x8e0]
mov qword [rsp + 0x8f0], rax
mov r8, qword [rsp + 0x8e8]
mov rdx, qword [rsp + 0x8f0]
lea rcx, [rsp + 0x28d0]
call fcn.1800135d0
mov qword [rsp + 0x8f8], rax
mov rax, qword [rsp + 0x8f8]
mov qword [rsp + 0x908], rax
mov r8, qword [rsp + 0x900]
mov rdx, qword [rsp + 0x908]
lea rcx, [rsp + 0x28b0]
call fcn.1800135d0
mov qword [rsp + 0x910], rax
mov rax, qword [rsp + 0x910]
mov qword [rsp + 0x920], rax
mov r8, qword [rsp + 0x918]
mov rdx, qword [rsp + 0x920]
lea rcx, [rsp + 0x20d0]
call fcn.1800135d0
nop
lea rcx, [rsp + 0x28b0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x28d0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x28f0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2910]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2930]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2950]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x4720]
call qword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
nop
cmp dword [rsp + 0x5410], 9
jle 0x18004da20
lea rax, [rsp + 0x98]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x98]
call fcn.180045480
mov rcx, rax
call fcn.180006fa0
mov ecx, 8
imul rcx, rcx, 9
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x18004da20
lea rax, [rsp + 0x99]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x99]
call fcn.180045350
mov rcx, rax
call fcn.180006f80
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
jmp 0x18004df67
lea rcx, [rsp + 0x20d0]
call fcn.18000a0c0
mov edx, 1
mov rcx, rax
call fcn.1800571e0
test eax, eax
jne 0x18004df67
mov edx, 1
mov ecx, 0x7d0
call fcn.180058c20
lea rcx, [rsp + 0x2090]
call fcn.18000a440
nop
cmp dword [rsp + 0x5410], 0xb
jle 0x18004dd09
lea rax, [rsp + 0x9a]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x9a]
call fcn.180045240
mov rcx, rax
call fcn.180006f60
mov ecx, 8
imul rcx, rcx, 0xb
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x18004dd09
lea rax, [rsp + 0x9b]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x9b]
call fcn.180045120
mov rcx, rax
call fcn.180006f40
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
lea rax, [rsp + 0x9c]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x9d]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x9c]
call fcn.180044ee0
mov rcx, rax
call fcn.180006f00
mov rdx, rax
lea rcx, [rsp + 0x2a30]
call fcn.18000a330
mov qword [rsp + 0x928], rax
mov rax, qword [rsp + 0x928]
mov qword [rsp + 0x978], rax
call fcn.18001d9ec
mov edx, eax
lea rcx, [rsp + 0x2a10]
call fcn.1800033f0
mov qword [rsp + 0x930], rax
mov rax, qword [rsp + 0x930]
mov qword [rsp + 0x960], rax
lea rcx, [rsp + 0x9d]
call fcn.180044ff0
mov rcx, rax
call fcn.180006f20
mov rdx, rax
lea rcx, [rsp + 0x29f0]
call fcn.18000a330
mov qword [rsp + 0x938], rax
mov rax, qword [rsp + 0x938]
mov qword [rsp + 0x948], rax
lea rdx, [rsp + 0x43f0]
lea rcx, [rsp + 0x29d0]
call fcn.18000a330
mov qword [rsp + 0x940], rax
mov rax, qword [rsp + 0x940]
mov qword [rsp + 0x950], rax
mov r8, qword [rsp + 0x948]
mov rdx, qword [rsp + 0x950]
lea rcx, [rsp + 0x29b0]
call fcn.1800135d0
mov qword [rsp + 0x958], rax
mov rax, qword [rsp + 0x958]
mov qword [rsp + 0x968], rax
mov r8, qword [rsp + 0x960]
mov rdx, qword [rsp + 0x968]
lea rcx, [rsp + 0x2990]
call fcn.1800135d0
mov qword [rsp + 0x970], rax
mov rax, qword [rsp + 0x970]
mov qword [rsp + 0x980], rax
mov r8, qword [rsp + 0x978]
mov rdx, qword [rsp + 0x980]
lea rcx, [rsp + 0x2970]
call fcn.1800135d0
mov qword [rsp + 0x988], rax
mov rdx, qword [rsp + 0x988]
lea rcx, [rsp + 0x2090]
call fcn.18000a1f0
lea rcx, [rsp + 0x2970]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2990]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x29b0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x29d0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x29f0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2a10]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2a30]
call fcn.18000a1c0
nop
jmp 0x18004df0a
lea rax, [rsp + 0x9e]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x9f]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x9e]
call fcn.180044ca0
mov rcx, rax
call fcn.180006ec0
mov rdx, rax
lea rcx, [rsp + 0x2b10]
call fcn.18000a330
mov qword [rsp + 0x990], rax
mov rax, qword [rsp + 0x990]
mov qword [rsp + 0x9e0], rax
call fcn.18001d9ec
mov edx, eax
lea rcx, [rsp + 0x2af0]
call fcn.1800033f0
mov qword [rsp + 0x998], rax
mov rax, qword [rsp + 0x998]
mov qword [rsp + 0x9c8], rax
lea rcx, [rsp + 0x9f]
call fcn.180044db0
mov rcx, rax
call fcn.180006ee0
mov rdx, rax
lea rcx, [rsp + 0x2ad0]
call fcn.18000a330
mov qword [rsp + 0x9a0], rax
mov rax, qword [rsp + 0x9a0]
mov qword [rsp + 0x9b0], rax
lea rdx, [rsp + 0x4720]
lea rcx, [rsp + 0x2ab0]
call fcn.18000a330
mov qword [rsp + 0x9a8], rax
mov rax, qword [rsp + 0x9a8]
mov qword [rsp + 0x9b8], rax
mov r8, qword [rsp + 0x9b0]
mov rdx, qword [rsp + 0x9b8]
lea rcx, [rsp + 0x2a90]
call fcn.1800135d0
mov qword [rsp + 0x9c0], rax
mov rax, qword [rsp + 0x9c0]
mov qword [rsp + 0x9d0], rax
mov r8, qword [rsp + 0x9c8]
mov rdx, qword [rsp + 0x9d0]
lea rcx, [rsp + 0x2a70]
call fcn.1800135d0
mov qword [rsp + 0x9d8], rax
mov rax, qword [rsp + 0x9d8]
mov qword [rsp + 0x9e8], rax
mov r8, qword [rsp + 0x9e0]
mov rdx, qword [rsp + 0x9e8]
lea rcx, [rsp + 0x2a50]
call fcn.1800135d0
mov qword [rsp + 0x9f0], rax
mov rdx, qword [rsp + 0x9f0]
lea rcx, [rsp + 0x2090]
call fcn.18000a1f0
lea rcx, [rsp + 0x2a50]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2a70]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2a90]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2ab0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2ad0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2af0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2b10]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2090]
call fcn.18000a0c0
mov qword [rsp + 0x9f8], rax
lea rcx, [rsp + 0x20d0]
call fcn.18000a0c0
xor r8d, r8d
mov rcx, qword [rsp + 0x9f8]
mov rdx, rcx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CopyFileA]
lea rcx, [rsp + 0x2090]
call fcn.18000a0c0
mov rcx, rax
call fcn.180056100
nop
lea rcx, [rsp + 0x2090]
call fcn.18000a1c0
nop
mov edx, 1
mov ecx, 0x7d0
call fcn.180058c20
lea rcx, [rsp + 0x20d0]
call fcn.18000a0c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edx, 1
xor ecx, ecx
call fcn.180058c20
nop
lea rax, [rsp + 0x1d00]
mov qword [rsp + 0xa00], rax
lea rax, [rsp + 0xa0]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xa0]
call fcn.180044bb0
mov rcx, rax
call fcn.180006ea0
mov rdx, rax
mov rcx, qword [rsp + 0xa00]
call fcn.18000a330
mov qword [rsp + 0xa08], rax
mov rdx, qword [rsp + 0xa08]
lea rcx, [rsp + 0x1700]
call fcn.180054bd0
lea rcx, [rsp + 0x3f20]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xa1]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0xa2]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xa1]
call fcn.1800449b0
mov rcx, rax
call fcn.180006e60
mov rdx, rax
lea rcx, [rsp + 0x2bd0]
call fcn.18000a330
mov qword [rsp + 0xa10], rax
mov rax, qword [rsp + 0xa10]
mov qword [rsp + 0xa60], rax
call fcn.18001d9ec
mov edx, eax
lea rcx, [rsp + 0x2bb0]
call fcn.1800033f0
mov qword [rsp + 0xa18], rax
mov rax, qword [rsp + 0xa18]
mov qword [rsp + 0xa48], rax
lea rcx, [rsp + 0xa2]
call fcn.180044ac0
mov rcx, rax
call fcn.180006e80
mov rdx, rax
lea rcx, [rsp + 0x2b90]
call fcn.18000a330
mov qword [rsp + 0xa20], rax
mov rax, qword [rsp + 0xa20]
mov qword [rsp + 0xa30], rax
lea rdx, [rsp + 0x43f0]
lea rcx, [rsp + 0x2b70]
call fcn.18000a330
mov qword [rsp + 0xa28], rax
mov rax, qword [rsp + 0xa28]
mov qword [rsp + 0xa38], rax
mov r8, qword [rsp + 0xa30]
mov rdx, qword [rsp + 0xa38]
lea rcx, [rsp + 0x2b50]
call fcn.1800135d0
mov qword [rsp + 0xa40], rax
mov rax, qword [rsp + 0xa40]
mov qword [rsp + 0xa50], rax
mov r8, qword [rsp + 0xa48]
mov rdx, qword [rsp + 0xa50]
lea rcx, [rsp + 0x2b30]
call fcn.1800135d0
mov qword [rsp + 0xa58], rax
mov rax, qword [rsp + 0xa58]
mov qword [rsp + 0xa68], rax
mov r8, qword [rsp + 0xa60]
mov rdx, qword [rsp + 0xa68]
lea rcx, [rsp + 0x1f70]
call fcn.1800135d0
nop
lea rcx, [rsp + 0x2b30]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2b50]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2b70]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2b90]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2bb0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2bd0]
call fcn.18000a1c0
nop
cmp dword [rsp + 0x5410], 0xa
jle 0x18004e290
lea rax, [rsp + 0xa3]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xa3]
call fcn.1800448a0
mov rcx, rax
call fcn.180006e40
mov ecx, 8
imul rcx, rcx, 0xa
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x18004e290
lea rax, [rsp + 0xa4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xa4]
call fcn.180044780
mov rcx, rax
call fcn.180006e20
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
jmp 0x18004ef09
lea rcx, [rsp + 0x1f70]
call fcn.18000a0c0
xor edx, edx
mov rcx, rax
call fcn.180056c00
test eax, eax
jne 0x18004ef09
lea rcx, [rsp + 0x1f70]
call fcn.18000a0c0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadImageA]
mov qword [rsp + 0x228], rax
mov edx, 1
mov ecx, 0x7d0
call fcn.180058c20
nop
cmp qword [rsp + 0x228], 0
je 0x18004e910
mov rcx, qword [rsp + 0x228]
call qword [sym.imp.GDI32.dll_DeleteObject]
lea rcx, [rsp + 0x2070]
call fcn.18000a440
nop
cmp dword [rsp + 0x5410], 0xb
jle 0x18004e5ca
lea rax, [rsp + 0xa5]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xa5]
call fcn.180044670
mov rcx, rax
call fcn.180006e00
mov ecx, 8
imul rcx, rcx, 0xb
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x18004e5ca
lea rax, [rsp + 0xa6]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xa6]
call fcn.180044550
mov rcx, rax
call fcn.180006de0
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
lea rax, [rsp + 0xa7]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0xa8]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xa7]
call fcn.180044310
mov rcx, rax
call fcn.180006da0
mov rdx, rax
lea rcx, [rsp + 0x2cb0]
call fcn.18000a330
mov qword [rsp + 0xa70], rax
mov rax, qword [rsp + 0xa70]
mov qword [rsp + 0xac0], rax
call fcn.18001d9ec
mov edx, eax
lea rcx, [rsp + 0x2c90]
call fcn.1800033f0
mov qword [rsp + 0xa78], rax
mov rax, qword [rsp + 0xa78]
mov qword [rsp + 0xaa8], rax
lea rcx, [rsp + 0xa8]
call fcn.180044420
mov rcx, rax
call fcn.180006dc0
mov rdx, rax
lea rcx, [rsp + 0x2c70]
call fcn.18000a330
mov qword [rsp + 0xa80], rax
mov rax, qword [rsp + 0xa80]
mov qword [rsp + 0xa90], rax
lea rdx, [rsp + 0x43f0]
lea rcx, [rsp + 0x2c50]
call fcn.18000a330
mov qword [rsp + 0xa88], rax
mov rax, qword [rsp + 0xa88]
mov qword [rsp + 0xa98], rax
mov r8, qword [rsp + 0xa90]
mov rdx, qword [rsp + 0xa98]
lea rcx, [rsp + 0x2c30]
call fcn.1800135d0
mov qword [rsp + 0xaa0], rax
mov rax, qword [rsp + 0xaa0]
mov qword [rsp + 0xab0], rax
mov r8, qword [rsp + 0xaa8]
mov rdx, qword [rsp + 0xab0]
lea rcx, [rsp + 0x2c10]
call fcn.1800135d0
mov qword [rsp + 0xab8], rax
mov rax, qword [rsp + 0xab8]
mov qword [rsp + 0xac8], rax
mov r8, qword [rsp + 0xac0]
mov rdx, qword [rsp + 0xac8]
lea rcx, [rsp + 0x2bf0]
call fcn.1800135d0
mov qword [rsp + 0xad0], rax
mov rdx, qword [rsp + 0xad0]
lea rcx, [rsp + 0x2070]
call fcn.18000a1f0
lea rcx, [rsp + 0x2bf0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2c10]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2c30]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2c50]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2c70]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2c90]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2cb0]
call fcn.18000a1c0
nop
jmp 0x18004e7cb
lea rax, [rsp + 0xa9]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0xaa]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xa9]
call fcn.1800440d0
mov rcx, rax
call fcn.180006d60
mov rdx, rax
lea rcx, [rsp + 0x2d90]
call fcn.18000a330
mov qword [rsp + 0xad8], rax
mov rax, qword [rsp + 0xad8]
mov qword [rsp + 0xb28], rax
call fcn.18001d9ec
mov edx, eax
lea rcx, [rsp + 0x2d70]
call fcn.1800033f0
mov qword [rsp + 0xae0], rax
mov rax, qword [rsp + 0xae0]
mov qword [rsp + 0xb10], rax
lea rcx, [rsp + 0xaa]
call fcn.1800441e0
mov rcx, rax
call fcn.180006d80
mov rdx, rax
lea rcx, [rsp + 0x2d50]
call fcn.18000a330
mov qword [rsp + 0xae8], rax
mov rax, qword [rsp + 0xae8]
mov qword [rsp + 0xaf8], rax
lea rdx, [rsp + 0x4720]
lea rcx, [rsp + 0x2d30]
call fcn.18000a330
mov qword [rsp + 0xaf0], rax
mov rax, qword [rsp + 0xaf0]
mov qword [rsp + 0xb00], rax
mov r8, qword [rsp + 0xaf8]
mov rdx, qword [rsp + 0xb00]
lea rcx, [rsp + 0x2d10]
call fcn.1800135d0
mov qword [rsp + 0xb08], rax
mov rax, qword [rsp + 0xb08]
mov qword [rsp + 0xb18], rax
mov r8, qword [rsp + 0xb10]
mov rdx, qword [rsp + 0xb18]
lea rcx, [rsp + 0x2cf0]
call fcn.1800135d0
mov qword [rsp + 0xb20], rax
mov rax, qword [rsp + 0xb20]
mov qword [rsp + 0xb30], rax
mov r8, qword [rsp + 0xb28]
mov rdx, qword [rsp + 0xb30]
lea rcx, [rsp + 0x2cd0]
call fcn.1800135d0
mov qword [rsp + 0xb38], rax
mov rdx, qword [rsp + 0xb38]
lea rcx, [rsp + 0x2070]
call fcn.18000a1f0
lea rcx, [rsp + 0x2cd0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2cf0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2d10]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2d30]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2d50]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2d70]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2d90]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2070]
call fcn.18000a0c0
mov qword [rsp + 0xb40], rax
lea rcx, [rsp + 0x1f70]
call fcn.18000a0c0
xor r8d, r8d
mov rcx, qword [rsp + 0xb40]
mov rdx, rcx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CopyFileA]
nop
lea rax, [rsp + 0xab]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x2070]
lea rcx, [rsp + 0x2df0]
call fcn.18000a3d0
mov qword [rsp + 0xb48], rax
mov rax, qword [rsp + 0xb48]
mov qword [rsp + 0xb58], rax
lea rcx, [rsp + 0xab]
call fcn.180043e30
mov rcx, rax
call fcn.180006c90
mov rdx, rax
lea rcx, [rsp + 0x2dd0]
call fcn.18000a330
mov qword [rsp + 0xb50], rax
mov rax, qword [rsp + 0xb50]
mov qword [rsp + 0xb60], rax
mov r8, qword [rsp + 0xb58]
mov rdx, qword [rsp + 0xb60]
lea rcx, [rsp + 0x2db0]
call fcn.1800135d0
mov qword [rsp + 0xb68], rax
mov rax, qword [rsp + 0xb68]
mov qword [rsp + 0xb70], rax
mov rcx, qword [rsp + 0xb70]
call fcn.18000a0c0
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.18005ae60
nop
lea rcx, [rsp + 0x2db0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2dd0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2df0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2070]
call fcn.18000a1c0
nop
jmp 0x18004ef09
lea rcx, [rsp + 0x2050]
call fcn.18000a440
nop
cmp dword [rsp + 0x5410], 0xb
jle 0x18004ebc8
lea rax, [rsp + 0xac]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xac]
call fcn.180043d20
mov rcx, rax
call fcn.180006c70
mov ecx, 8
imul rcx, rcx, 0xb
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x18004ebc8
lea rax, [rsp + 0xad]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xad]
call fcn.180043c00
mov rcx, rax
call fcn.180006c50
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
lea rax, [rsp + 0xae]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0xaf]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xae]
call fcn.1800439c0
mov rcx, rax
call fcn.180006c10
mov rdx, rax
lea rcx, [rsp + 0x2ed0]
call fcn.18000a330
mov qword [rsp + 0xb78], rax
mov rax, qword [rsp + 0xb78]
mov qword [rsp + 0xbc8], rax
call fcn.18001d9ec
mov edx, eax
lea rcx, [rsp + 0x2eb0]
call fcn.1800033f0
mov qword [rsp + 0xb80], rax
mov rax, qword [rsp + 0xb80]
mov qword [rsp + 0xbb0], rax
lea rcx, [rsp + 0xaf]
call fcn.180043ad0
mov rcx, rax
call fcn.180006c30
mov rdx, rax
lea rcx, [rsp + 0x2e90]
call fcn.18000a330
mov qword [rsp + 0xb88], rax
mov rax, qword [rsp + 0xb88]
mov qword [rsp + 0xb98], rax
lea rdx, [rsp + 0x43f0]
lea rcx, [rsp + 0x2e70]
call fcn.18000a330
mov qword [rsp + 0xb90], rax
mov rax, qword [rsp + 0xb90]
mov qword [rsp + 0xba0], rax
mov r8, qword [rsp + 0xb98]
mov rdx, qword [rsp + 0xba0]
lea rcx, [rsp + 0x2e50]
call fcn.1800135d0
mov qword [rsp + 0xba8], rax
mov rax, qword [rsp + 0xba8]
mov qword [rsp + 0xbb8], rax
mov r8, qword [rsp + 0xbb0]
mov rdx, qword [rsp + 0xbb8]
lea rcx, [rsp + 0x2e30]
call fcn.1800135d0
mov qword [rsp + 0xbc0], rax
mov rax, qword [rsp + 0xbc0]
mov qword [rsp + 0xbd0], rax
mov r8, qword [rsp + 0xbc8]
mov rdx, qword [rsp + 0xbd0]
lea rcx, [rsp + 0x2e10]
call fcn.1800135d0
mov qword [rsp + 0xbd8], rax
mov rdx, qword [rsp + 0xbd8]
lea rcx, [rsp + 0x2050]
call fcn.18000a1f0
lea rcx, [rsp + 0x2e10]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2e30]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2e50]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2e70]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2e90]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2eb0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2ed0]
call fcn.18000a1c0
nop
jmp 0x18004edc9
lea rax, [rsp + 0xb0]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0xb1]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xb0]
call fcn.180043780
mov rcx, rax
call fcn.180006bd0
mov rdx, rax
lea rcx, [rsp + 0x2fb0]
call fcn.18000a330
mov qword [rsp + 0xbe0], rax
mov rax, qword [rsp + 0xbe0]
mov qword [rsp + 0xc30], rax
call fcn.18001d9ec
mov edx, eax
lea rcx, [rsp + 0x2f90]
call fcn.1800033f0
mov qword [rsp + 0xbe8], rax
mov rax, qword [rsp + 0xbe8]
mov qword [rsp + 0xc18], rax
lea rcx, [rsp + 0xb1]
call fcn.180043890
mov rcx, rax
call fcn.180006bf0
mov rdx, rax
lea rcx, [rsp + 0x2f70]
call fcn.18000a330
mov qword [rsp + 0xbf0], rax
mov rax, qword [rsp + 0xbf0]
mov qword [rsp + 0xc00], rax
lea rdx, [rsp + 0x4720]
lea rcx, [rsp + 0x2f50]
call fcn.18000a330
mov qword [rsp + 0xbf8], rax
mov rax, qword [rsp + 0xbf8]
mov qword [rsp + 0xc08], rax
mov r8, qword [rsp + 0xc00]
mov rdx, qword [rsp + 0xc08]
lea rcx, [rsp + 0x2f30]
call fcn.1800135d0
mov qword [rsp + 0xc10], rax
mov rax, qword [rsp + 0xc10]
mov qword [rsp + 0xc20], rax
mov r8, qword [rsp + 0xc18]
mov rdx, qword [rsp + 0xc20]
lea rcx, [rsp + 0x2f10]
call fcn.1800135d0
mov qword [rsp + 0xc28], rax
mov rax, qword [rsp + 0xc28]
mov qword [rsp + 0xc38], rax
mov r8, qword [rsp + 0xc30]
mov rdx, qword [rsp + 0xc38]
lea rcx, [rsp + 0x2ef0]
call fcn.1800135d0
mov qword [rsp + 0xc40], rax
mov rdx, qword [rsp + 0xc40]
lea rcx, [rsp + 0x2050]
call fcn.18000a1f0
lea rcx, [rsp + 0x2ef0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2f10]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2f30]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2f50]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2f70]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2f90]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2fb0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2050]
call fcn.18000a0c0
mov qword [rsp + 0xc48], rax
lea rcx, [rsp + 0x1f70]
call fcn.18000a0c0
xor r8d, r8d
mov rcx, qword [rsp + 0xc48]
mov rdx, rcx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CopyFileA]
nop
lea rax, [rsp + 0xb2]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x2050]
lea rcx, [rsp + 0x3010]
call fcn.18000a3d0
mov qword [rsp + 0xc50], rax
mov rax, qword [rsp + 0xc50]
mov qword [rsp + 0xc60], rax
lea rcx, [rsp + 0xb2]
call fcn.1800435a0
mov rcx, rax
call fcn.180006b00
mov rdx, rax
lea rcx, [rsp + 0x2ff0]
call fcn.18000a330
mov qword [rsp + 0xc58], rax
mov rax, qword [rsp + 0xc58]
mov qword [rsp + 0xc68], rax
mov r8, qword [rsp + 0xc60]
mov rdx, qword [rsp + 0xc68]
lea rcx, [rsp + 0x2fd0]
call fcn.1800135d0
mov qword [rsp + 0xc70], rax
mov rax, qword [rsp + 0xc70]
mov qword [rsp + 0xc78], rax
mov rcx, qword [rsp + 0xc78]
call fcn.18000a0c0
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.18005ae60
nop
lea rcx, [rsp + 0x2fd0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2ff0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3010]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2050]
call fcn.18000a1c0
nop
mov edx, 1
mov ecx, 0x7d0
call fcn.180058c20
lea rcx, [rsp + 0x1f70]
call fcn.18000a0c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edx, 1
xor ecx, ecx
call fcn.180058c20
nop
lea rax, [rsp + 0x1d20]
mov qword [rsp + 0xc80], rax
lea rax, [rsp + 0xb3]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xb3]
call fcn.1800434b0
mov rcx, rax
call fcn.180006ae0
mov rdx, rax
mov rcx, qword [rsp + 0xc80]
call fcn.18000a330
mov qword [rsp + 0xc88], rax
mov rdx, qword [rsp + 0xc88]
lea rcx, [rsp + 0x1730]
call fcn.180054bd0
lea rcx, [rsp + 0x3f30]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rsp + 0xc90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rax, [rsp + 0x1d40]
mov qword [rsp + 0xc98], rax
lea rax, [rsp + 0x17a0]
mov qword [rsp + 0xca8], rax
lea rdx, [rsp + 0x1f50]
mov rcx, qword [rsp + 0xc98]
call fcn.18000a3d0
mov qword [rsp + 0xca0], rax
mov rax, qword [rsp + 0xca0]
mov qword [rsp + 0xcb0], rax
lea rdx, [rsp + 0x1ff0]
mov rcx, qword [rsp + 0xca8]
call fcn.18000a3d0
mov qword [rsp + 0xcb8], rax
xor r8d, r8d
mov rdx, qword [rsp + 0xcb0]
mov rcx, qword [rsp + 0xcb8]
call fcn.18005a7e0
nop
mov edx, 1
mov ecx, 0x7d0
call fcn.180058c20
nop
cmp dword [rsp + 0x5410], 7
jle 0x18004f0fa
lea rax, [rsp + 0xb4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xb4]
call fcn.1800433a0
mov rcx, rax
call fcn.180006ac0
mov ecx, 8
imul rcx, rcx, 7
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x18004f0fa
lea rax, [rsp + 0xb5]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xb5]
call fcn.180043270
mov rcx, rax
call fcn.180006aa0
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
jmp 0x18004f135
lea rax, [rsp + 0x17c0]
mov qword [rsp + 0xcc0], rax
lea rdx, [rsp + 0x1f50]
mov rcx, qword [rsp + 0xcc0]
call fcn.18000a3d0
mov qword [rsp + 0xcc8], rax
mov rcx, qword [rsp + 0xcc8]
call fcn.180058080
nop
mov edx, 1
mov ecx, 0x7d0
call fcn.180058c20
lea rcx, [rsp + 0x1f50]
call fcn.18000a0c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rcx, [rsp + 0x1ff0]
call fcn.18000a0c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edx, 1
xor ecx, ecx
call fcn.180058c20
nop
lea rax, [rsp + 0x17e0]
mov qword [rsp + 0xcd0], rax
lea rax, [rsp + 0xb6]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xb6]
call fcn.180043160
mov rcx, rax
call fcn.180006a80
mov rdx, rax
mov rcx, qword [rsp + 0xcd0]
call fcn.18000a330
mov qword [rsp + 0xcd8], rax
mov rdx, qword [rsp + 0xcd8]
lea rcx, [rsp + 0x1750]
call fcn.180054bd0
lea rcx, [rsp + 0x3f40]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x1d0]
mov dword [rsp + 0x1cc], eax
cmp dword [rsp + 0x1cc], 1
je 0x18004f223
cmp dword [rsp + 0x1cc], 2
je 0x18004f2dd
jmp 0x18004f327
cmp dword [rsp + 0x5410], 6
jle 0x18004f2c5
lea rax, [rsp + 0xb7]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xb7]
call fcn.180043050
mov rcx, rax
call fcn.180006a60
mov ecx, 8
imul rcx, rcx, 6
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x18004f2c5
lea rax, [rsp + 0xb8]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xb8]
call fcn.180042f30
mov rcx, rax
call fcn.180006a40
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
jmp 0x18004f2d8
xor r9d, r9d
mov r8d, 1
xor edx, edx
xor ecx, ecx
call fcn.180056740
nop
jmp 0x18004f36f
lea rax, [rsp + 0xb9]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xb9]
call fcn.180042e00
mov rcx, rax
call fcn.180006a20
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
jmp 0x18004f36f
lea rax, [rsp + 0xba]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xba]
call fcn.180042ce0
mov rcx, rax
call fcn.180006a00
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
mov edx, 1
xor ecx, ecx
call fcn.180058c20
nop
lea rax, [rsp + 0x1800]
mov qword [rsp + 0xce0], rax
lea rax, [rsp + 0xbb]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xbb]
call fcn.180042bd0
mov rcx, rax
call fcn.1800069e0
mov rdx, rax
mov rcx, qword [rsp + 0xce0]
call fcn.18000a330
mov qword [rsp + 0xce8], rax
mov rdx, qword [rsp + 0xce8]
lea rcx, [rsp + 0x16a0]
call fcn.180054bd0
lea rcx, [rsp + 0x3f50]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
cmp dword [rsp + 0x5410], 0xd
jle 0x18004f499
lea rax, [rsp + 0xbc]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xbc]
call fcn.180042ac0
mov rcx, rax
call fcn.1800069c0
mov ecx, 8
imul rcx, rcx, 0xd
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x18004f499
lea rax, [rsp + 0xbd]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xbd]
call fcn.180042990
mov rcx, rax
call fcn.1800069a0
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
jmp 0x18004f513
lea rax, [rsp + 0xbe]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xbe]
call fcn.1800427d0
mov rcx, rax
call fcn.1800068d0
mov rdx, rax
lea rcx, [rsp + 0x3030]
call fcn.18000a330
mov qword [rsp + 0xcf0], rax
mov rax, qword [rsp + 0xcf0]
mov qword [rsp + 0xcf8], rax
mov rcx, qword [rsp + 0xcf8]
call fcn.18000a0c0
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.18005ae60
nop
lea rcx, [rsp + 0x3030]
call fcn.18000a1c0
nop
mov edx, 1
xor ecx, ecx
call fcn.180058c20
nop
lea rax, [rsp + 0x1820]
mov qword [rsp + 0xd00], rax
lea rax, [rsp + 0xbf]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xbf]
call fcn.1800426c0
mov rcx, rax
call fcn.1800068b0
mov rdx, rax
mov rcx, qword [rsp + 0xd00]
call fcn.18000a330
mov qword [rsp + 0xd08], rax
mov rdx, qword [rsp + 0xd08]
lea rcx, [rsp + 0x15e0]
call fcn.180054bd0
lea rcx, [rsp + 0x3f60]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
cmp dword [rsp + 0x5410], 6
jle 0x18004f63d
lea rax, [rsp + 0xc0]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xc0]
call fcn.1800425b0
mov rcx, rax
call fcn.180006890
mov ecx, 8
imul rcx, rcx, 6
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x18004f63d
lea rax, [rsp + 0xc1]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xc1]
call fcn.180042490
mov rcx, rax
call fcn.180006870
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
jmp 0x18004f650
mov r9d, 1
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180056740
nop
mov edx, 1
xor ecx, ecx
call fcn.180058c20
nop
lea rax, [rsp + 0x1840]
mov qword [rsp + 0xd10], rax
lea rax, [rsp + 0xc2]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xc2]
call fcn.180042380
mov rcx, rax
call fcn.180006850
mov rdx, rax
mov rcx, qword [rsp + 0xd10]
call fcn.18000a330
mov qword [rsp + 0xd18], rax
mov rdx, qword [rsp + 0xd18]
lea rcx, [rsp + 0x1620]
call fcn.180054bd0
lea rcx, [rsp + 0x3f70]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1860]
mov qword [rsp + 0xd20], rax
lea rax, [rsp + 0xc3]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xc3]
call fcn.1800422a0
mov rcx, rax
call fcn.180006830
mov rdx, rax
mov rcx, qword [rsp + 0xd20]
call fcn.18000a330
mov qword [rsp + 0xd28], rax
mov rdx, qword [rsp + 0xd28]
lea rcx, [rsp + 0x1670]
call fcn.180054bd0
lea rcx, [rsp + 0x2120]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1f40]
lea rcx, [rsp + 0x2120]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xc4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xc4]
call fcn.1800421b0
mov rcx, rax
call fcn.180006810
mov rdx, rax
lea rcx, [rsp + 0x2130]
call fcn.18000a330
nop
mov edx, 1
lea rcx, [rsp + 0x1e50]
call fcn.180006730
nop
movzx eax, word [rsp + 0x1f48]
cmp eax, 0xc
jle 0x18004f841
movzx eax, word [rsp + 0x1f48]
sub eax, 0xc
mov word [rsp + 0x1f48], ax
lea rax, [rsp + 0xc5]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xc5]
call fcn.1800420c0
mov rcx, rax
call fcn.180005b60
mov rdx, rax
lea rcx, [rsp + 0x3050]
call fcn.18000a330
mov qword [rsp + 0xd30], rax
mov rdx, qword [rsp + 0xd30]
lea rcx, [rsp + 0x2130]
call fcn.18000a1f0
lea rcx, [rsp + 0x3050]
call fcn.18000a1c0
nop
movzx edx, word [rsp + 0x1f48]
lea rcx, [rsp + 0x1e50]
call fcn.180009ca0
mov edx, 1
lea rcx, [rsp + 0x1d60]
call fcn.180006730
nop
movzx eax, word [rsp + 0x1f4a]
cmp eax, 0xa
jge 0x18004f8d5
mov edx, 2
lea rcx, [rsp + 0x1690]
call fcn.180017148
mov qword [rsp + 0xd38], rax
mov dl, 0x30
lea rcx, [rsp + 0x134]
call fcn.180013670
mov rdx, rax
lea rcx, [rsp + 0x1d60]
call fcn.1800136a0
mov rcx, qword [rsp + 0xd38]
mov rdx, rcx
mov rcx, rax
call fcn.1800136e0
movzx edx, word [rsp + 0x1f4a]
mov rcx, rax
call fcn.180009ca0
nop
jmp 0x18004f8eb
movzx edx, word [rsp + 0x1f4a]
lea rcx, [rsp + 0x1d60]
call fcn.180009ca0
nop
lea rax, [rsp + 0xc6]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0xc7]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0xc8]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0xc9]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0xca]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0xcb]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0xcc]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0xcd]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x2130]
lea rcx, [rsp + 0x33b0]
call fcn.18000a3d0
mov qword [rsp + 0xd40], rax
mov rax, qword [rsp + 0xd40]
mov qword [rsp + 0xed0], rax
lea rcx, [rsp + 0xc6]
call fcn.180041900
mov rcx, rax
call fcn.180005a50
mov rdx, rax
lea rcx, [rsp + 0x3390]
call fcn.18000a330
mov qword [rsp + 0xd48], rax
mov rax, qword [rsp + 0xd48]
mov qword [rsp + 0xeb8], rax
lea rdx, [rsp + 0x3370]
lea rcx, [rsp + 0x1d60]
call fcn.180006650
mov qword [rsp + 0xd50], rax
mov rax, qword [rsp + 0xd50]
mov qword [rsp + 0xea0], rax
lea rcx, [rsp + 0xc7]
call fcn.1800419e0
mov rcx, rax
call fcn.180005a50
mov rdx, rax
lea rcx, [rsp + 0x3350]
call fcn.18000a330
mov qword [rsp + 0xd58], rax
mov rax, qword [rsp + 0xd58]
mov qword [rsp + 0xe88], rax
lea rdx, [rsp + 0x3330]
lea rcx, [rsp + 0x1e50]
call fcn.180006650
mov qword [rsp + 0xd60], rax
mov rax, qword [rsp + 0xd60]
mov qword [rsp + 0xe70], rax
lea rcx, [rsp + 0xc8]
call fcn.180041ac0
mov rcx, rax
call fcn.180005a50
mov rdx, rax
lea rcx, [rsp + 0x3310]
call fcn.18000a330
mov qword [rsp + 0xd68], rax
mov rax, qword [rsp + 0xd68]
mov qword [rsp + 0xe58], rax
movzx eax, word [rsp + 0x1f40]
mov edx, eax
lea rcx, [rsp + 0x32f0]
call fcn.1800033f0
mov qword [rsp + 0xd70], rax
mov rax, qword [rsp + 0xd70]
mov qword [rsp + 0xe40], rax
lea rcx, [rsp + 0xc9]
call fcn.180041ba0
mov rcx, rax
call fcn.180005a50
mov rdx, rax
lea rcx, [rsp + 0x32d0]
call fcn.18000a330
mov qword [rsp + 0xd78], rax
mov rax, qword [rsp + 0xd78]
mov qword [rsp + 0xe28], rax
movzx eax, word [rsp + 0x1f46]
mov edx, eax
lea rcx, [rsp + 0x32b0]
call fcn.1800033f0
mov qword [rsp + 0xd80], rax
mov rax, qword [rsp + 0xd80]
mov qword [rsp + 0xe10], rax
lea rcx, [rsp + 0xca]
call fcn.180041c80
mov rcx, rax
call fcn.180005a50
mov rdx, rax
lea rcx, [rsp + 0x3290]
call fcn.18000a330
mov qword [rsp + 0xd88], rax
mov rax, qword [rsp + 0xd88]
mov qword [rsp + 0xdf8], rax
movzx eax, word [rsp + 0x1f42]
mov edx, eax
lea rcx, [rsp + 0x3270]
call fcn.1800033f0
mov qword [rsp + 0xd90], rax
mov rax, qword [rsp + 0xd90]
mov qword [rsp + 0xde0], rax
lea rcx, [rsp + 0xcb]
call fcn.180041d60
mov rcx, rax
call fcn.180005a50
mov rdx, rax
lea rcx, [rsp + 0x3250]
call fcn.18000a330
mov qword [rsp + 0xd98], rax
mov rax, qword [rsp + 0xd98]
mov qword [rsp + 0xdc8], rax
lea rdx, [rsp + 0x4d80]
lea rcx, [rsp + 0x3230]
call fcn.18000a330
mov qword [rsp + 0xda0], rax
mov rax, qword [rsp + 0xda0]
mov qword [rsp + 0xdb0], rax
lea rcx, [rsp + 0xcc]
call fcn.180041e40
mov rcx, rax
call fcn.180005a70
mov rdx, rax
lea rcx, [rsp + 0x3210]
call fcn.18000a330
mov qword [rsp + 0xda8], rax
mov rax, qword [rsp + 0xda8]
mov qword [rsp + 0xdb8], rax
mov r8, qword [rsp + 0xdb0]
mov rdx, qword [rsp + 0xdb8]
lea rcx, [rsp + 0x31f0]
call fcn.1800135d0
mov qword [rsp + 0xdc0], rax
mov rax, qword [rsp + 0xdc0]
mov qword [rsp + 0xdd0], rax
mov r8, qword [rsp + 0xdc8]
mov rdx, qword [rsp + 0xdd0]
lea rcx, [rsp + 0x31d0]
call fcn.1800135d0
mov qword [rsp + 0xdd8], rax
mov rax, qword [rsp + 0xdd8]
mov qword [rsp + 0xde8], rax
mov r8, qword [rsp + 0xde0]
mov rdx, qword [rsp + 0xde8]
lea rcx, [rsp + 0x31b0]
call fcn.1800135d0
mov qword [rsp + 0xdf0], rax
mov rax, qword [rsp + 0xdf0]
mov qword [rsp + 0xe00], rax
mov r8, qword [rsp + 0xdf8]
mov rdx, qword [rsp + 0xe00]
lea rcx, [rsp + 0x3190]
call fcn.1800135d0
mov qword [rsp + 0xe08], rax
mov rax, qword [rsp + 0xe08]
mov qword [rsp + 0xe18], rax
mov r8, qword [rsp + 0xe10]
mov rdx, qword [rsp + 0xe18]
lea rcx, [rsp + 0x3170]
call fcn.1800135d0
mov qword [rsp + 0xe20], rax
mov rax, qword [rsp + 0xe20]
mov qword [rsp + 0xe30], rax
mov r8, qword [rsp + 0xe28]
mov rdx, qword [rsp + 0xe30]
lea rcx, [rsp + 0x3150]
call fcn.1800135d0
mov qword [rsp + 0xe38], rax
mov rax, qword [rsp + 0xe38]
mov qword [rsp + 0xe48], rax
mov r8, qword [rsp + 0xe40]
mov rdx, qword [rsp + 0xe48]
lea rcx, [rsp + 0x3130]
call fcn.1800135d0
mov qword [rsp + 0xe50], rax
mov rax, qword [rsp + 0xe50]
mov qword [rsp + 0xe60], rax
mov r8, qword [rsp + 0xe58]
mov rdx, qword [rsp + 0xe60]
lea rcx, [rsp + 0x3110]
call fcn.1800135d0
mov qword [rsp + 0xe68], rax
mov rax, qword [rsp + 0xe68]
mov qword [rsp + 0xe78], rax
mov r8, qword [rsp + 0xe70]
mov rdx, qword [rsp + 0xe78]
lea rcx, [rsp + 0x30f0]
call fcn.1800135d0
mov qword [rsp + 0xe80], rax
mov rax, qword [rsp + 0xe80]
mov qword [rsp + 0xe90], rax
mov r8, qword [rsp + 0xe88]
mov rdx, qword [rsp + 0xe90]
lea rcx, [rsp + 0x30d0]
call fcn.1800135d0
mov qword [rsp + 0xe98], rax
mov rax, qword [rsp + 0xe98]
mov qword [rsp + 0xea8], rax
mov r8, qword [rsp + 0xea0]
mov rdx, qword [rsp + 0xea8]
lea rcx, [rsp + 0x30b0]
call fcn.1800135d0
mov qword [rsp + 0xeb0], rax
mov rax, qword [rsp + 0xeb0]
mov qword [rsp + 0xec0], rax
mov r8, qword [rsp + 0xeb8]
mov rdx, qword [rsp + 0xec0]
lea rcx, [rsp + 0x3090]
call fcn.1800135d0
mov qword [rsp + 0xec8], rax
mov rax, qword [rsp + 0xec8]
mov qword [rsp + 0xed8], rax
mov r8, qword [rsp + 0xed0]
mov rdx, qword [rsp + 0xed8]
lea rcx, [rsp + 0x3070]
call fcn.1800135d0
mov qword [rsp + 0xee0], rax
mov rax, qword [rsp + 0xee0]
mov qword [rsp + 0xee8], rax
mov rcx, qword [rsp + 0xee8]
call fcn.18000a0c0
mov qword [rsp + 0xef0], rax
lea rcx, [rsp + 0xcd]
call fcn.180041f80
mov rcx, rax
call fcn.180005b40
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rsp + 0xef0]
mov rdx, rcx
mov rcx, rax
call fcn.1800554f0
nop
lea rcx, [rsp + 0x3070]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3090]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x30b0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x30d0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x30f0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3110]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3130]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3150]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3170]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3190]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x31b0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x31d0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x31f0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3210]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3230]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3250]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3270]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3290]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x32b0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x32d0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x32f0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3310]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3330]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3350]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3370]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3390]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x33b0]
call fcn.18000a1c0
nop
mov edx, 1
xor ecx, ecx
call fcn.180058c20
nop
lea rax, [rsp + 0x1880]
mov qword [rsp + 0xef8], rax
lea rax, [rsp + 0xce]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xce]
call fcn.1800417f0
mov rcx, rax
call fcn.180005a30
mov rdx, rax
mov rcx, qword [rsp + 0xef8]
call fcn.18000a330
mov qword [rsp + 0xf00], rax
mov rdx, qword [rsp + 0xf00]
lea rcx, [rsp + 0x16b0]
call fcn.180054bd0
lea rcx, [rsp + 0x3f80]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xcf]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xcf]
call fcn.1800415d0
mov rcx, rax
call fcn.180005960
mov rdx, rax
lea rcx, [rsp + 0x33d0]
call fcn.18000a330
mov qword [rsp + 0xf08], rax
mov rax, qword [rsp + 0xf08]
mov qword [rsp + 0xf10], rax
mov rcx, qword [rsp + 0xf10]
call fcn.18000a0c0
mov r8d, 1
mov edx, 0x8000000
mov rcx, rax
call fcn.18005ae60
nop
lea rcx, [rsp + 0x33d0]
call fcn.18000a1c0
nop
mov edx, 1
mov ecx, 0x2710
call fcn.180058c20
nop
lea rax, [rsp + 0xd0]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xd0]
call fcn.1800414a0
mov rcx, rax
call fcn.180005940
mov rdx, rax
lea rcx, [rsp + 0x33f0]
call fcn.18000a330
mov qword [rsp + 0xf18], rax
mov rax, qword [rsp + 0xf18]
mov qword [rsp + 0xf20], rax
mov rcx, qword [rsp + 0xf20]
call fcn.18000a0c0
mov r8d, 1
mov edx, 0x8000000
mov rcx, rax
call fcn.18005ae60
nop
lea rcx, [rsp + 0x33f0]
call fcn.18000a1c0
nop
lea rax, [rsp + 0xd1]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xd1]
call fcn.180041370
mov rcx, rax
call fcn.180005920
mov rdx, rax
lea rcx, [rsp + 0x3410]
call fcn.18000a330
mov qword [rsp + 0xf28], rax
mov rax, qword [rsp + 0xf28]
mov qword [rsp + 0xf30], rax
mov rcx, qword [rsp + 0xf30]
call fcn.18000a0c0
mov r8d, 1
mov edx, 0x8000000
mov rcx, rax
call fcn.18005ae60
nop
lea rcx, [rsp + 0x3410]
call fcn.18000a1c0
nop
lea rax, [rsp + 0xd2]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0xd3]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xd2]
call fcn.180041150
mov rcx, rax
call fcn.180005780
mov qword [rsp + 0xf38], rax
lea rcx, [rsp + 0xd3]
call fcn.180041230
mov rcx, rax
call fcn.180005850
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rsp + 0xf38]
mov rdx, rcx
mov rcx, rax
call fcn.1800554f0
nop
mov edx, 1
xor ecx, ecx
call fcn.180058c20
nop
lea rax, [rsp + 0x18a0]
mov qword [rsp + 0xf40], rax
lea rax, [rsp + 0xd4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xd4]
call fcn.180041040
mov rcx, rax
call fcn.180005760
mov rdx, rax
mov rcx, qword [rsp + 0xf40]
call fcn.18000a330
mov qword [rsp + 0xf48], rax
mov rdx, qword [rsp + 0xf48]
lea rcx, [rsp + 0x16f0]
call fcn.180054bd0
lea rcx, [rsp + 0x3f90]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x1d0]
mov dword [rsp + 0x198], eax
cmp dword [rsp + 0x198], 1
je 0x180050425
cmp dword [rsp + 0x198], 2
je 0x1800504df
jmp 0x180050529
cmp dword [rsp + 0x5410], 6
jle 0x1800504c7
lea rax, [rsp + 0xd5]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xd5]
call fcn.180040f30
mov rcx, rax
call fcn.180005740
mov ecx, 8
imul rcx, rcx, 6
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x1800504c7
lea rax, [rsp + 0xd6]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xd6]
call fcn.180040e10
mov rcx, rax
call fcn.180005720
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
jmp 0x1800504da
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 1
call fcn.180056740
nop
jmp 0x180050571
lea rax, [rsp + 0xd7]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xd7]
call fcn.180040ce0
mov rcx, rax
call fcn.180005700
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
jmp 0x180050571
lea rax, [rsp + 0xd8]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xd8]
call fcn.180040bc0
mov rcx, rax
call fcn.1800056e0
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
lea rax, [rsp + 0xd9]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xd9]
call fcn.180040a00
mov rcx, rax
call fcn.180005610
mov rdx, rax
lea rcx, [rsp + 0x3430]
call fcn.18000a330
mov qword [rsp + 0xf50], rax
mov rax, qword [rsp + 0xf50]
mov qword [rsp + 0xf58], rax
mov rcx, qword [rsp + 0xf58]
call fcn.18000a0c0
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.18005ae60
nop
lea rcx, [rsp + 0x3430]
call fcn.18000a1c0
nop
mov edx, 1
xor ecx, ecx
call fcn.180058c20
nop
lea rax, [rsp + 0x18c0]
mov qword [rsp + 0xf60], rax
lea rax, [rsp + 0xda]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xda]
call fcn.1800408f0
mov rcx, rax
call fcn.1800055f0
mov rdx, rax
mov rcx, qword [rsp + 0xf60]
call fcn.18000a330
mov qword [rsp + 0xf68], rax
mov rdx, qword [rsp + 0xf68]
lea rcx, [rsp + 0x1740]
call fcn.180054bd0
lea rcx, [rsp + 0x3fa0]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
cmp dword [rsp + 0x5410], 8
jle 0x180050715
lea rax, [rsp + 0xdb]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xdb]
call fcn.1800407e0
mov rcx, rax
call fcn.1800055d0
mov ecx, 8
imul rcx, rcx, 8
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180050715
lea rax, [rsp + 0xdc]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xdc]
call fcn.1800406b0
mov rcx, rax
call fcn.1800055b0
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
jmp 0x180050720
mov ecx, 1
call fcn.180055f20
nop
mov edx, 1
xor ecx, ecx
call fcn.180058c20
nop
lea rax, [rsp + 0x18e0]
mov qword [rsp + 0xf70], rax
lea rax, [rsp + 0xdd]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xdd]
call fcn.1800405a0
mov rcx, rax
call fcn.180005590
mov rdx, rax
mov rcx, qword [rsp + 0xf70]
call fcn.18000a330
mov qword [rsp + 0xf78], rax
mov rdx, qword [rsp + 0xf78]
lea rcx, [rsp + 0x1770]
call fcn.180054bd0
lea rcx, [rsp + 0x3fb0]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xde]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xde]
call fcn.180040470
mov rcx, rax
call fcn.180005570
mov rdx, rax
lea rcx, [rsp + 0x3470]
call fcn.18000a330
mov qword [rsp + 0xf80], rax
mov rax, qword [rsp + 0xf80]
mov qword [rsp + 0xf90], rax
lea rdx, [rsp + 0x43f0]
lea rcx, [rsp + 0x3450]
call fcn.18000a330
mov qword [rsp + 0xf88], rax
mov rax, qword [rsp + 0xf88]
mov qword [rsp + 0xf98], rax
mov r8, qword [rsp + 0xf90]
mov rdx, qword [rsp + 0xf98]
lea rcx, [rsp + 0x20b0]
call fcn.1800135d0
nop
lea rcx, [rsp + 0x3450]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3470]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x20b0]
call fcn.18000a0c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov rcx, qword [rsp + 0xfa0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rax, [rsp + 0x1900]
mov qword [rsp + 0xfa8], rax
lea rax, [rsp + 0x1920]
mov qword [rsp + 0xfb8], rax
lea rdx, [rsp + 0x20b0]
mov rcx, qword [rsp + 0xfa8]
call fcn.18000a3d0
mov qword [rsp + 0xfb0], rax
mov rax, qword [rsp + 0xfb0]
mov qword [rsp + 0xfc0], rax
lea rdx, [rsp + 0x1fb0]
mov rcx, qword [rsp + 0xfb8]
call fcn.18000a3d0
mov qword [rsp + 0xfc8], rax
xor r8d, r8d
mov rdx, qword [rsp + 0xfc0]
mov rcx, qword [rsp + 0xfc8]
call fcn.18005a7e0
nop
mov edx, 1
mov ecx, 0x7d0
call fcn.180058c20
lea rcx, [rsp + 0x20b0]
call fcn.18000a0c0
mov r8d, 1
xor edx, edx
mov rcx, rax
call fcn.18005ae60
mov edx, 1
mov ecx, 0x7d0
call fcn.180058c20
lea rcx, [rsp + 0x20b0]
call fcn.18000a0c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rcx, [rsp + 0x1fb0]
call fcn.18000a0c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edx, 1
xor ecx, ecx
call fcn.180058c20
nop
lea rax, [rsp + 0x1940]
mov qword [rsp + 0xfd0], rax
lea rax, [rsp + 0xdf]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xdf]
call fcn.180040360
mov rcx, rax
call fcn.180005550
mov rdx, rax
mov rcx, qword [rsp + 0xfd0]
call fcn.18000a330
mov qword [rsp + 0xfd8], rax
mov rdx, qword [rsp + 0xfd8]
lea rcx, [rsp + 0x15f0]
call fcn.180054bd0
lea rcx, [rsp + 0x3fe0]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDC]
mov qword [rsp + 0x1e0], rax
mov ecx, 0xff
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [rsp + 0x230], rax
mov rdx, qword [rsp + 0x230]
mov rcx, qword [rsp + 0x1e0]
call qword [sym.imp.GDI32.dll_SelectObject]
nop
mov dword [rsp + 0x130], 0
jmp 0x180050a4f
mov eax, dword [rsp + 0x130]
add eax, 0xa
mov dword [rsp + 0x130], eax
cmp dword [rsp + 0x130], 0x3e8
jge 0x180050a9b
mov eax, dword [rsp + 0x130]
add eax, 0x1f4
mov dword [rsp + 0x20], 0x320
mov r9d, eax
mov r8d, 0x32
mov edx, 0x32
mov rcx, qword [rsp + 0x1e0]
call qword [sym.imp.GDI32.dll_Rectangle]
xor edx, edx
mov ecx, 0x32
call fcn.180058c20
nop
jmp 0x180050a3e
mov dword [rsp + 0x138], 0
jmp 0x180050ab8
mov eax, dword [rsp + 0x138]
inc eax
mov dword [rsp + 0x138], eax
cmp dword [rsp + 0x138], 0x1e
jge 0x180050b0c
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [rsp + 0x210], eax
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, dword [rsp + 0x210]
mov dword [rsp + 0x20], ecx
mov r9d, eax
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x1e0]
call qword [sym.imp.GDI32.dll_Rectangle]
xor edx, edx
mov ecx, 0x32
call fcn.180058c20
nop
jmp 0x180050aa8
mov rcx, qword [rsp + 0x230]
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rdx, qword [rsp + 0x1e0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
mov edx, 1
xor ecx, ecx
call fcn.180058c20
nop
lea rax, [rsp + 0x1ac0]
mov qword [rsp + 0xfe0], rax
lea rax, [rsp + 0xe0]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xe0]
call fcn.180040250
mov rcx, rax
call fcn.180005530
mov rdx, rax
mov rcx, qword [rsp + 0xfe0]
call fcn.18000a330
mov qword [rsp + 0xfe8], rax
mov rdx, qword [rsp + 0xfe8]
lea rcx, [rsp + 0x16d0]
call fcn.180054bd0
lea rcx, [rsp + 0x3ff0]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov edx, 1
xor ecx, ecx
call fcn.180058c20
nop
lea rax, [rsp + 0x1960]
mov qword [rsp + 0xff0], rax
lea rax, [rsp + 0xe1]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xe1]
call fcn.180040140
mov rcx, rax
call fcn.180005510
mov rdx, rax
mov rcx, qword [rsp + 0xff0]
call fcn.18000a330
mov qword [rsp + 0xff8], rax
mov rdx, qword [rsp + 0xff8]
lea rcx, [rsp + 0x1760]
call fcn.180054bd0
lea rcx, [rsp + 0x4000]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rsp + 0x238]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rcx, qword [rsp + 0x238]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rax, [rsp + 0xe2]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xe2]
call fcn.180040030
mov rcx, rax
call fcn.1800054f0
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
lea rax, [rsp + 0xe3]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xe3]
call fcn.18003ff20
mov rcx, rax
call fcn.1800054d0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
nop
xor edx, edx
mov ecx, 0x2710
call fcn.180058c20
nop
lea rcx, [rsp + 0x20b0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x1d60]
call fcn.180003cf0
nop
lea rcx, [rsp + 0x1e50]
call fcn.180003cf0
nop
lea rcx, [rsp + 0x2130]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x1f70]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x20d0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x1f90]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2150]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x1fb0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x1fd0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x1ff0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2010]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2030]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x1f50]
call fcn.18000a1c0
nop
jmp 0x180054744
cmp dword [rsp + 0x5410], 1
jle 0x180051004
lea rax, [rsp + 0xe4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xe4]
call fcn.18003fe30
mov rcx, rax
call fcn.1800054b0
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180051004
lea rax, [rsp + 0xe5]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xe5]
call fcn.18003fc80
mov rcx, rax
call fcn.180005490
mov rdx, rax
lea rcx, [rsp + 0x2190]
call fcn.18000a330
nop
lea rax, [rsp + 0xe6]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0xe7]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xe6]
call fcn.18003fa40
mov rcx, rax
call fcn.180005450
mov rdx, rax
lea rcx, [rsp + 0x3510]
call fcn.18000a330
mov qword [rsp + 0x1000], rax
mov rax, qword [rsp + 0x1000]
mov qword [rsp + 0x1030], rax
lea rdx, [rsp + 0x2190]
lea rcx, [rsp + 0x34f0]
call fcn.18000a3d0
mov qword [rsp + 0x1008], rax
mov rax, qword [rsp + 0x1008]
mov qword [rsp + 0x1018], rax
lea rcx, [rsp + 0xe7]
call fcn.18003fb20
mov rcx, rax
call fcn.180005470
mov rdx, rax
lea rcx, [rsp + 0x34d0]
call fcn.18000a330
mov qword [rsp + 0x1010], rax
mov rax, qword [rsp + 0x1010]
mov qword [rsp + 0x1020], rax
mov r8, qword [rsp + 0x1018]
mov rdx, qword [rsp + 0x1020]
lea rcx, [rsp + 0x34b0]
call fcn.1800135d0
mov qword [rsp + 0x1028], rax
mov rax, qword [rsp + 0x1028]
mov qword [rsp + 0x1038], rax
mov r8, qword [rsp + 0x1030]
mov rdx, qword [rsp + 0x1038]
lea rcx, [rsp + 0x3490]
call fcn.1800135d0
mov qword [rsp + 0x1040], rax
mov rax, qword [rsp + 0x1040]
mov qword [rsp + 0x1048], rax
mov rcx, qword [rsp + 0x1048]
call fcn.18000a0c0
mov r8d, 1
xor edx, edx
mov rcx, rax
call fcn.18005ae60
nop
lea rcx, [rsp + 0x3490]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x34b0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x34d0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x34f0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3510]
call fcn.18000a1c0
nop
mov dword [rsp + 0x218], 0
lea rcx, [rsp + 0x2190]
call fcn.18000a1c0
mov eax, dword [rsp + 0x218]
jmp 0x180054746
cmp dword [rsp + 0x5410], 1
jle 0x18005241a
lea rax, [rsp + 0xe8]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xe8]
call fcn.18003f950
mov rcx, rax
call fcn.180005430
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x18005241a
lea rcx, [rsp + 0x4940]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, [rsp + 0x4500]
call qword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
lea rcx, [rsp + 0x4610]
call qword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
nop
lea rax, [rsp + 0xe9]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xe9]
call fcn.18003f820
mov rcx, rax
call fcn.180005410
mov qword [rsp + 0x188], rax
lea rax, [rsp + 0xea]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xea]
call fcn.18003f6f0
mov rcx, rax
call fcn.1800053f0
mov qword [rsp + 0x220], rax
lea rax, [rsp + 0xeb]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xeb]
call fcn.18003f5c0
mov rcx, rax
call fcn.180005320
mov qword [rsp + 0x180], rax
lea rax, [rsp + 0xec]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xec]
call fcn.18003f410
mov rcx, rax
call fcn.180005250
mov rdx, rax
lea rcx, [rsp + 0x20f0]
call fcn.18000a330
nop
mov rcx, qword [rsp + 0x220]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x1800522f8
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x1800522f8
call fcn.18005b200
test eax, eax
je 0x1800522f8
lea rax, [rsp + 0xed]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
mov rdx, qword [rsp + 0x188]
lea rcx, [rsp + 0x3570]
call fcn.18000a330
mov qword [rsp + 0x1050], rax
mov rax, qword [rsp + 0x1050]
mov qword [rsp + 0x1060], rax
lea rcx, [rsp + 0xed]
call fcn.18003f2c0
mov rcx, rax
call fcn.180005180
mov rdx, rax
lea rcx, [rsp + 0x3550]
call fcn.18000a330
mov qword [rsp + 0x1058], rax
mov rax, qword [rsp + 0x1058]
mov qword [rsp + 0x1068], rax
mov r8, qword [rsp + 0x1060]
mov rdx, qword [rsp + 0x1068]
lea rcx, [rsp + 0x3530]
call fcn.1800135d0
mov qword [rsp + 0x1070], rax
mov rax, qword [rsp + 0x1070]
mov qword [rsp + 0x1078], rax
mov rcx, qword [rsp + 0x1078]
call fcn.18000a0c0
mov r8d, 1
mov edx, 0x8000000
mov rcx, rax
call fcn.18005ae60
nop
lea rcx, [rsp + 0x3530]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3550]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3570]
call fcn.18000a1c0
nop
mov rdx, qword [rsp + 0x188]
lea rcx, [rsp + 0x35d0]
call fcn.18000a330
mov qword [rsp + 0x1080], rax
mov rax, qword [rsp + 0x1080]
mov qword [rsp + 0x1090], rax
lea rdx, [rsp + 0x4500]
lea rcx, [rsp + 0x35b0]
call fcn.18000a330
mov qword [rsp + 0x1088], rax
mov rax, qword [rsp + 0x1088]
mov qword [rsp + 0x1098], rax
mov r8, qword [rsp + 0x1090]
mov rdx, qword [rsp + 0x1098]
lea rcx, [rsp + 0x3590]
call fcn.1800135d0
mov qword [rsp + 0x10a0], rax
mov rcx, qword [rsp + 0x10a0]
call fcn.18000a0c0
mov edx, 0x80
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea rcx, [rsp + 0x3590]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x35b0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x35d0]
call fcn.18000a1c0
nop
mov rdx, qword [rsp + 0x180]
lea rcx, [rsp + 0x3630]
call fcn.18000a330
mov qword [rsp + 0x10a8], rax
mov rax, qword [rsp + 0x10a8]
mov qword [rsp + 0x10b8], rax
lea rdx, [rsp + 0x4610]
lea rcx, [rsp + 0x3610]
call fcn.18000a330
mov qword [rsp + 0x10b0], rax
mov rax, qword [rsp + 0x10b0]
mov qword [rsp + 0x10c0], rax
mov r8, qword [rsp + 0x10b8]
mov rdx, qword [rsp + 0x10c0]
lea rcx, [rsp + 0x35f0]
call fcn.1800135d0
mov qword [rsp + 0x10c8], rax
mov rcx, qword [rsp + 0x10c8]
call fcn.18000a0c0
mov edx, 0x80
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea rcx, [rsp + 0x35f0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3610]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3630]
call fcn.18000a1c0
nop
mov rdx, qword [rsp + 0x188]
lea rcx, [rsp + 0x3690]
call fcn.18000a330
mov qword [rsp + 0x10d0], rax
mov rax, qword [rsp + 0x10d0]
mov qword [rsp + 0x10e0], rax
lea rdx, [rsp + 0x4500]
lea rcx, [rsp + 0x3670]
call fcn.18000a330
mov qword [rsp + 0x10d8], rax
mov rax, qword [rsp + 0x10d8]
mov qword [rsp + 0x10e8], rax
mov r8, qword [rsp + 0x10e0]
mov rdx, qword [rsp + 0x10e8]
lea rcx, [rsp + 0x3650]
call fcn.1800135d0
mov qword [rsp + 0x10f0], rax
mov rcx, qword [rsp + 0x10f0]
call fcn.18000a0c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rcx, [rsp + 0x3650]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3670]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3690]
call fcn.18000a1c0
nop
mov rdx, qword [rsp + 0x180]
lea rcx, [rsp + 0x36f0]
call fcn.18000a330
mov qword [rsp + 0x10f8], rax
mov rax, qword [rsp + 0x10f8]
mov qword [rsp + 0x1108], rax
lea rdx, [rsp + 0x4610]
lea rcx, [rsp + 0x36d0]
call fcn.18000a330
mov qword [rsp + 0x1100], rax
mov rax, qword [rsp + 0x1100]
mov qword [rsp + 0x1110], rax
mov r8, qword [rsp + 0x1108]
mov rdx, qword [rsp + 0x1110]
lea rcx, [rsp + 0x36b0]
call fcn.1800135d0
mov qword [rsp + 0x1118], rax
mov rcx, qword [rsp + 0x1118]
call fcn.18000a0c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rcx, [rsp + 0x36b0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x36d0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x36f0]
call fcn.18000a1c0
nop
mov rdx, qword [rsp + 0x188]
lea rcx, [rsp + 0x3750]
call fcn.18000a330
mov qword [rsp + 0x1120], rax
mov rax, qword [rsp + 0x1120]
mov qword [rsp + 0x1130], rax
lea rdx, [rsp + 0x4500]
lea rcx, [rsp + 0x3730]
call fcn.18000a330
mov qword [rsp + 0x1128], rax
mov rax, qword [rsp + 0x1128]
mov qword [rsp + 0x1138], rax
mov r8, qword [rsp + 0x1130]
mov rdx, qword [rsp + 0x1138]
lea rcx, [rsp + 0x3710]
call fcn.1800135d0
mov qword [rsp + 0x1140], rax
mov rcx, qword [rsp + 0x1140]
call fcn.18000a0c0
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rsp + 0x220]
call qword [sym.imp.KERNEL32.dll_CopyFileA]
lea rcx, [rsp + 0x3710]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3730]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3750]
call fcn.18000a1c0
nop
mov rdx, qword [rsp + 0x180]
lea rcx, [rsp + 0x37b0]
call fcn.18000a330
mov qword [rsp + 0x1148], rax
mov rax, qword [rsp + 0x1148]
mov qword [rsp + 0x1158], rax
lea rdx, [rsp + 0x4610]
lea rcx, [rsp + 0x3790]
call fcn.18000a330
mov qword [rsp + 0x1150], rax
mov rax, qword [rsp + 0x1150]
mov qword [rsp + 0x1160], rax
mov r8, qword [rsp + 0x1158]
mov rdx, qword [rsp + 0x1160]
lea rcx, [rsp + 0x3770]
call fcn.1800135d0
mov qword [rsp + 0x1168], rax
mov rcx, qword [rsp + 0x1168]
call fcn.18000a0c0
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.KERNEL32.dll_CopyFileA]
lea rcx, [rsp + 0x3770]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3790]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x37b0]
call fcn.18000a1c0
nop
mov rdx, qword [rsp + 0x188]
lea rcx, [rsp + 0x3810]
call fcn.18000a330
mov qword [rsp + 0x1170], rax
mov rax, qword [rsp + 0x1170]
mov qword [rsp + 0x1180], rax
lea rdx, [rsp + 0x4500]
lea rcx, [rsp + 0x37f0]
call fcn.18000a330
mov qword [rsp + 0x1178], rax
mov rax, qword [rsp + 0x1178]
mov qword [rsp + 0x1188], rax
mov r8, qword [rsp + 0x1180]
mov rdx, qword [rsp + 0x1188]
lea rcx, [rsp + 0x37d0]
call fcn.1800135d0
mov qword [rsp + 0x1190], rax
mov rcx, qword [rsp + 0x1190]
call fcn.18000a0c0
mov edx, 6
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea rcx, [rsp + 0x37d0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x37f0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3810]
call fcn.18000a1c0
nop
mov rdx, qword [rsp + 0x180]
lea rcx, [rsp + 0x3870]
call fcn.18000a330
mov qword [rsp + 0x1198], rax
mov rax, qword [rsp + 0x1198]
mov qword [rsp + 0x11a8], rax
lea rdx, [rsp + 0x4610]
lea rcx, [rsp + 0x3850]
call fcn.18000a330
mov qword [rsp + 0x11a0], rax
mov rax, qword [rsp + 0x11a0]
mov qword [rsp + 0x11b0], rax
mov r8, qword [rsp + 0x11a8]
mov rdx, qword [rsp + 0x11b0]
lea rcx, [rsp + 0x3830]
call fcn.1800135d0
mov qword [rsp + 0x11b8], rax
mov rcx, qword [rsp + 0x11b8]
call fcn.18000a0c0
mov edx, 4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea rcx, [rsp + 0x3830]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3850]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3870]
call fcn.18000a1c0
nop
lea rax, [rsp + 0xee]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0xef]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xee]
call fcn.18003f040
mov rcx, rax
call fcn.180005140
mov rdx, rax
lea rcx, [rsp + 0x3910]
call fcn.18000a330
mov qword [rsp + 0x11c0], rax
mov rax, qword [rsp + 0x11c0]
mov qword [rsp + 0x11f0], rax
lea rdx, [rsp + 0x20f0]
lea rcx, [rsp + 0x38f0]
call fcn.18000a3d0
mov qword [rsp + 0x11c8], rax
mov rax, qword [rsp + 0x11c8]
mov qword [rsp + 0x11d8], rax
lea rcx, [rsp + 0xef]
call fcn.18003f150
mov rcx, rax
call fcn.180005160
mov rdx, rax
lea rcx, [rsp + 0x38d0]
call fcn.18000a330
mov qword [rsp + 0x11d0], rax
mov rax, qword [rsp + 0x11d0]
mov qword [rsp + 0x11e0], rax
mov r8, qword [rsp + 0x11d8]
mov rdx, qword [rsp + 0x11e0]
lea rcx, [rsp + 0x38b0]
call fcn.1800135d0
mov qword [rsp + 0x11e8], rax
mov rax, qword [rsp + 0x11e8]
mov qword [rsp + 0x11f8], rax
mov r8, qword [rsp + 0x11f0]
mov rdx, qword [rsp + 0x11f8]
lea rcx, [rsp + 0x3890]
call fcn.1800135d0
mov qword [rsp + 0x1200], rax
mov rax, qword [rsp + 0x1200]
mov qword [rsp + 0x1208], rax
mov rcx, qword [rsp + 0x1208]
call fcn.18000a0c0
mov r8d, 1
mov edx, 0x8000000
mov rcx, rax
call fcn.18005ae60
nop
lea rcx, [rsp + 0x3890]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x38b0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x38d0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x38f0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3910]
call fcn.18000a1c0
nop
lea rax, [rsp + 0xf0]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0xf1]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0xf2]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0xf3]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xf0]
call fcn.18003eab0
mov rcx, rax
call fcn.180004eb0
mov rdx, rax
lea rcx, [rsp + 0x3ae0]
call fcn.18000a330
mov qword [rsp + 0x1210], rax
mov rax, qword [rsp + 0x1210]
mov qword [rsp + 0x12e0], rax
call fcn.18001d9ec
mov edx, eax
lea rcx, [rsp + 0x3ac0]
call fcn.1800033f0
mov qword [rsp + 0x1218], rax
mov rax, qword [rsp + 0x1218]
mov qword [rsp + 0x12c8], rax
lea rcx, [rsp + 0xf1]
call fcn.18003ec10
mov rcx, rax
call fcn.180004f80
mov rdx, rax
lea rcx, [rsp + 0x3fc0]
call fcn.18000a330
mov qword [rsp + 0x1220], rax
mov rax, qword [rsp + 0x1220]
mov qword [rsp + 0x12b0], rax
mov rdx, qword [rsp + 0x188]
lea rcx, [rsp + 0x3a90]
call fcn.18000a330
mov qword [rsp + 0x1228], rax
mov rax, qword [rsp + 0x1228]
mov qword [rsp + 0x1298], rax
lea rdx, [rsp + 0x4500]
lea rcx, [rsp + 0x3a70]
call fcn.18000a330
mov qword [rsp + 0x1230], rax
mov rax, qword [rsp + 0x1230]
mov qword [rsp + 0x1280], rax
lea rcx, [rsp + 0xf2]
call fcn.18003ed30
mov rcx, rax
call fcn.180004fa0
mov rdx, rax
lea rcx, [rsp + 0x3a50]
call fcn.18000a330
mov qword [rsp + 0x1238], rax
mov rax, qword [rsp + 0x1238]
mov qword [rsp + 0x1268], rax
lea rdx, [rsp + 0x20f0]
lea rcx, [rsp + 0x3a30]
call fcn.18000a3d0
mov qword [rsp + 0x1240], rax
mov rax, qword [rsp + 0x1240]
mov qword [rsp + 0x1250], rax
lea rcx, [rsp + 0xf3]
call fcn.18003eed0
mov rcx, rax
call fcn.180005070
mov rdx, rax
lea rcx, [rsp + 0x3a10]
call fcn.18000a330
mov qword [rsp + 0x1248], rax
mov rax, qword [rsp + 0x1248]
mov qword [rsp + 0x1258], rax
mov r8, qword [rsp + 0x1250]
mov rdx, qword [rsp + 0x1258]
lea rcx, [rsp + 0x39f0]
call fcn.1800135d0
mov qword [rsp + 0x1260], rax
mov rax, qword [rsp + 0x1260]
mov qword [rsp + 0x1270], rax
mov r8, qword [rsp + 0x1268]
mov rdx, qword [rsp + 0x1270]
lea rcx, [rsp + 0x39d0]
call fcn.1800135d0
mov qword [rsp + 0x1278], rax
mov rax, qword [rsp + 0x1278]
mov qword [rsp + 0x1288], rax
mov r8, qword [rsp + 0x1280]
mov rdx, qword [rsp + 0x1288]
lea rcx, [rsp + 0x39b0]
call fcn.1800135d0
mov qword [rsp + 0x1290], rax
mov rax, qword [rsp + 0x1290]
mov qword [rsp + 0x12a0], rax
mov r8, qword [rsp + 0x1298]
mov rdx, qword [rsp + 0x12a0]
lea rcx, [rsp + 0x3990]
call fcn.1800135d0
mov qword [rsp + 0x12a8], rax
mov rax, qword [rsp + 0x12a8]
mov qword [rsp + 0x12b8], rax
mov r8, qword [rsp + 0x12b0]
mov rdx, qword [rsp + 0x12b8]
lea rcx, [rsp + 0x3970]
call fcn.1800135d0
mov qword [rsp + 0x12c0], rax
mov rax, qword [rsp + 0x12c0]
mov qword [rsp + 0x12d0], rax
mov r8, qword [rsp + 0x12c8]
mov rdx, qword [rsp + 0x12d0]
lea rcx, [rsp + 0x3950]
call fcn.1800135d0
mov qword [rsp + 0x12d8], rax
mov rax, qword [rsp + 0x12d8]
mov qword [rsp + 0x12e8], rax
mov r8, qword [rsp + 0x12e0]
mov rdx, qword [rsp + 0x12e8]
lea rcx, [rsp + 0x3930]
call fcn.1800135d0
mov qword [rsp + 0x12f0], rax
mov rax, qword [rsp + 0x12f0]
mov qword [rsp + 0x12f8], rax
mov rcx, qword [rsp + 0x12f8]
call fcn.18000a0c0
mov r8d, 1
mov edx, 0x8000000
mov rcx, rax
call fcn.18005ae60
nop
lea rcx, [rsp + 0x3930]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3950]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3970]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3990]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x39b0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x39d0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x39f0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3a10]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3a30]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3a50]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3a70]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3a90]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3fc0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3ac0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3ae0]
call fcn.18000a1c0
nop
lea rax, [rsp + 0xf4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0xf5]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0xf6]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xf4]
call fcn.18003e200
mov rcx, rax
call fcn.180004c30
mov rdx, rax
lea rcx, [rsp + 0x3c00]
call fcn.18000a330
mov qword [rsp + 0x1300], rax
mov rax, qword [rsp + 0x1300]
mov qword [rsp + 0x1370], rax
lea rdx, [rsp + 0x4d80]
lea rcx, [rsp + 0x3be0]
call fcn.18000a330
mov qword [rsp + 0x1308], rax
mov rax, qword [rsp + 0x1308]
mov qword [rsp + 0x1358], rax
lea rcx, [rsp + 0xf5]
call fcn.18003e360
mov rcx, rax
call fcn.180004d00
mov rdx, rax
lea rcx, [rsp + 0x3bc0]
call fcn.18000a330
mov qword [rsp + 0x1310], rax
mov rax, qword [rsp + 0x1310]
mov qword [rsp + 0x1340], rax
lea rdx, [rsp + 0x20f0]
lea rcx, [rsp + 0x3ba0]
call fcn.18000a3d0
mov qword [rsp + 0x1318], rax
mov rax, qword [rsp + 0x1318]
mov qword [rsp + 0x1328], rax
lea rcx, [rsp + 0xf6]
call fcn.18003e8b0
mov rcx, rax
call fcn.180004de0
mov rdx, rax
lea rcx, [rsp + 0x3b80]
call fcn.18000a330
mov qword [rsp + 0x1320], rax
mov rax, qword [rsp + 0x1320]
mov qword [rsp + 0x1330], rax
mov r8, qword [rsp + 0x1328]
mov rdx, qword [rsp + 0x1330]
lea rcx, [rsp + 0x3b60]
call fcn.1800135d0
mov qword [rsp + 0x1338], rax
mov rax, qword [rsp + 0x1338]
mov qword [rsp + 0x1348], rax
mov r8, qword [rsp + 0x1340]
mov rdx, qword [rsp + 0x1348]
lea rcx, [rsp + 0x3b40]
call fcn.1800135d0
mov qword [rsp + 0x1350], rax
mov rax, qword [rsp + 0x1350]
mov qword [rsp + 0x1360], rax
mov r8, qword [rsp + 0x1358]
mov rdx, qword [rsp + 0x1360]
lea rcx, [rsp + 0x3b20]
call fcn.1800135d0
mov qword [rsp + 0x1368], rax
mov rax, qword [rsp + 0x1368]
mov qword [rsp + 0x1378], rax
mov r8, qword [rsp + 0x1370]
mov rdx, qword [rsp + 0x1378]
lea rcx, [rsp + 0x3b00]
call fcn.1800135d0
mov qword [rsp + 0x1380], rax
mov rax, qword [rsp + 0x1380]
mov qword [rsp + 0x1388], rax
mov rcx, qword [rsp + 0x1388]
call fcn.18000a0c0
mov r8d, 1
mov edx, 0x8000000
mov rcx, rax
call fcn.18005ae60
nop
lea rcx, [rsp + 0x3b00]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3b20]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3b40]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3b60]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3b80]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3ba0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3bc0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3be0]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3c00]
call fcn.18000a1c0
nop
lea rax, [rsp + 0xf7]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xf7]
call fcn.18003ddd0
mov rcx, rax
call fcn.180004b50
mov rdx, rax
lea rcx, [rsp + 0x3c20]
call fcn.18000a330
mov qword [rsp + 0x1390], rax
mov rax, qword [rsp + 0x1390]
mov qword [rsp + 0x1398], rax
mov rcx, qword [rsp + 0x1398]
call fcn.18000a0c0
mov r8d, 1
mov edx, 0x8000000
mov rcx, rax
call fcn.18005ae60
nop
lea rcx, [rsp + 0x3c20]
call fcn.18000a1c0
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x180052245
lea rax, [rsp + 0xf8]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xf8]
call fcn.18003dca0
mov rcx, rax
call fcn.180004b30
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
jmp 0x1800522f3
lea rax, [rsp + 0xf9]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xf9]
call fcn.18003db80
mov rcx, rax
call fcn.180004b10
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
lea rax, [rsp + 0xfa]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x1e8], eax
lea rcx, [rsp + 0xfa]
call fcn.18003da60
mov rcx, rax
call fcn.180004af0
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
mov ecx, dword [rsp + 0x1e8]
mov edx, ecx
mov rcx, rax
call fcn.1800098b0
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
jmp 0x1800523f1
lea rax, [rsp + 0xfb]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xfb]
call fcn.18003d940
mov rcx, rax
call fcn.180004ad0
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
lea rax, [rsp + 0xfc]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
call fcn.18005b200
mov dword [rsp + 0x1f4], eax
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
mov dword [rsp + 0x1f0], eax
mov rcx, qword [rsp + 0x220]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
mov dword [rsp + 0x1ec], eax
lea rcx, [rsp + 0xfc]
call fcn.18003d820
mov rcx, rax
call fcn.180004a00
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
mov ecx, dword [rsp + 0x1ec]
mov edx, ecx
mov rcx, rax
call fcn.180009a80
mov ecx, dword [rsp + 0x1f0]
mov edx, ecx
mov rcx, rax
call fcn.180009a80
mov ecx, dword [rsp + 0x1f4]
mov edx, ecx
mov rcx, rax
call fcn.180009a80
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
mov dword [rsp + 0x214], 0
lea rcx, [rsp + 0x20f0]
call fcn.18000a1c0
mov eax, dword [rsp + 0x214]
jmp 0x180054746
cmp dword [rsp + 0x5410], 2
jle 0x180052543
lea rax, [rsp + 0xfd]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xfd]
call fcn.18003d700
mov rcx, rax
call fcn.180004930
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180052543
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x5418]
mov rdx, qword [rcx + rax]
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x5418]
mov rdx, qword [rcx + rax]
lea rcx, [rsp + 0x21b0]
call fcn.18000a330
nop
mov r8d, 0xa
xor edx, edx
lea rcx, [rsp + 0x21b0]
call fcn.180003340
mov edx, eax
lea rcx, [rsp + 0x3c40]
call fcn.18005b120
mov qword [rsp + 0x13a0], rax
mov rax, qword [rsp + 0x13a0]
mov qword [rsp + 0x13a8], rax
mov rdx, qword [rsp + 0x13a8]
lea rcx, [0x180510450]
call fcn.180013620
nop
lea rcx, [rsp + 0x3c40]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x21b0]
call fcn.18000a1c0
nop
xor eax, eax
jmp 0x180054746
cmp dword [rsp + 0x5410], 2
jle 0x180052689
lea rax, [rsp + 0xfe]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xfe]
call fcn.18003d5c0
mov rcx, rax
call fcn.180004860
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180052689
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x5418]
mov rdx, qword [rcx + rax]
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x5418]
mov rdx, qword [rcx + rax]
lea rcx, [rsp + 0x21d0]
call fcn.18000a330
nop
mov r8d, 0xa
xor edx, edx
lea rcx, [rsp + 0x21d0]
call fcn.180003340
xor r9d, r9d
xor r8d, r8d
mov edx, eax
lea rcx, [rsp + 0x1710]
call fcn.180003570
mov qword [rsp + 0x13b0], rax
mov rax, qword [rsp + 0x13b0]
mov qword [rsp + 0x13b8], rax
mov rcx, qword [rsp + 0x13b8]
call fcn.1800036c0
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
lea rcx, [rsp + 0x1710]
call fcn.180003640
nop
lea rcx, [rsp + 0x21d0]
call fcn.18000a1c0
nop
xor eax, eax
jmp 0x180054746
cmp dword [rsp + 0x5410], 2
jle 0x1800527a1
lea rax, [rsp + 0xff]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0xff]
call fcn.18003d490
mov rcx, rax
call fcn.180004790
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x1800527a1
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x5418]
mov rdx, qword [rcx + rax]
lea rcx, [rsp + 0x21f0]
call fcn.18000a330
nop
mov r8d, 0xa
xor edx, edx
lea rcx, [rsp + 0x21f0]
call fcn.180003340
mov r8d, 0x104
lea rdx, [rsp + 0x51c0]
mov ecx, eax
call qword [sym.imp.WINMM.dll_mciGetErrorStringA]
nop
lea rcx, [rsp + 0x21f0]
call fcn.18000a1c0
nop
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x5418]
mov rdx, qword [rcx + rax]
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
lea rdx, [rsp + 0x51c0]
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
xor eax, eax
jmp 0x180054746
cmp dword [rsp + 0x5410], 2
jle 0x1800528d6
lea rax, [rsp + 0x100]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x100]
call fcn.18003d3a0
mov rcx, rax
call fcn.180004770
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x1800528d6
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x5418]
mov rdx, qword [rcx + rax]
lea rcx, [rsp + 0x2210]
call fcn.18000a330
nop
mov r8d, 0xa
xor edx, edx
lea rcx, [rsp + 0x2210]
call fcn.180003340
xor edx, edx
mov ecx, eax
call fcn.180058c20
mov dword [rsp + 0x13c], eax
lea rcx, [rsp + 0x2210]
call fcn.18000a1c0
nop
mov edx, dword [rsp + 0x13c]
lea rcx, [0x180510450]
call fcn.180009a80
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
mov edx, dword [rsp + 0x13c]
lea rcx, [rsp + 0x3c70]
call fcn.18005b120
mov qword [rsp + 0x13c0], rax
mov rax, qword [rsp + 0x13c0]
mov qword [rsp + 0x13c8], rax
mov rdx, qword [rsp + 0x13c8]
lea rcx, [0x180510450]
call fcn.180013620
nop
lea rcx, [rsp + 0x3c70]
call fcn.18000a1c0
nop
mov eax, dword [rsp + 0x13c]
jmp 0x180054746
cmp dword [rsp + 0x5410], 3
jle 0x180052a08
lea rax, [rsp + 0x101]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x101]
call fcn.18003d2b0
mov rcx, rax
call fcn.180004750
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180052a08
mov eax, 8
imul rax, rax, 3
mov ecx, 8
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x5418]
mov rdx, qword [rdx + rax]
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180058570
mov dword [rsp + 0x140], eax
mov edx, dword [rsp + 0x140]
lea rcx, [0x180510450]
call fcn.180009a80
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
xor r9d, r9d
xor r8d, r8d
mov edx, dword [rsp + 0x140]
lea rcx, [rsp + 0x1640]
call fcn.180003570
mov qword [rsp + 0x13d0], rax
mov rax, qword [rsp + 0x13d0]
mov qword [rsp + 0x13d8], rax
mov rcx, qword [rsp + 0x13d8]
call fcn.1800036c0
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
lea rcx, [rsp + 0x1640]
call fcn.180003640
nop
mov eax, dword [rsp + 0x140]
jmp 0x180054746
cmp dword [rsp + 0x5410], 2
jle 0x180052b23
lea rax, [rsp + 0x102]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x102]
call fcn.18003d1c0
mov rcx, rax
call fcn.180004730
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180052b23
lea rax, [rsp + 0x1980]
mov qword [rsp + 0x13e0], rax
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x5418]
mov rdx, qword [rcx + rax]
mov rcx, qword [rsp + 0x13e0]
call fcn.18000a330
mov qword [rsp + 0x13e8], rax
mov rcx, qword [rsp + 0x13e8]
call fcn.180058080
mov dword [rsp + 0x144], eax
mov r8d, 0x104
lea rdx, [rsp + 0x52d0]
mov ecx, dword [rsp + 0x144]
call qword [sym.imp.WINMM.dll_mciGetErrorStringA]
mov edx, dword [rsp + 0x144]
lea rcx, [0x180510450]
call fcn.180009a80
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
lea rdx, [rsp + 0x52d0]
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
mov eax, dword [rsp + 0x144]
jmp 0x180054746
cmp dword [rsp + 0x5410], 1
jle 0x180052c40
lea rax, [rsp + 0x103]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x103]
call fcn.18003d0b0
mov rcx, rax
call fcn.180004710
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180052c40
call fcn.1800576a0
mov dword [rsp + 0x12c], eax
cmp dword [rsp + 0x12c], 1
jne 0x180052ba0
mov dword [rsp + 0x12c], 0
mov edx, dword [rsp + 0x12c]
lea rcx, [0x180510450]
call fcn.180009a80
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
xor r9d, r9d
xor r8d, r8d
mov edx, dword [rsp + 0x12c]
lea rcx, [rsp + 0x1780]
call fcn.180003570
mov qword [rsp + 0x13f0], rax
mov rax, qword [rsp + 0x13f0]
mov qword [rsp + 0x13f8], rax
mov rcx, qword [rsp + 0x13f8]
call fcn.1800036c0
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
lea rcx, [rsp + 0x1780]
call fcn.180003640
nop
mov eax, dword [rsp + 0x12c]
jmp 0x180054746
cmp dword [rsp + 0x5410], 3
jle 0x180052dc9
lea rax, [rsp + 0x104]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x104]
call fcn.18003cfc0
mov rcx, rax
call fcn.1800046f0
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180052dc9
mov eax, 8
imul rax, rax, 3
mov rcx, qword [rsp + 0x5418]
mov rdx, qword [rcx + rax]
lea rcx, [rsp + 0x2230]
call fcn.18000a330
nop
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x5418]
mov rdx, qword [rcx + rax]
lea rcx, [rsp + 0x2290]
call fcn.18000a330
nop
mov r8d, 0xa
xor edx, edx
lea rcx, [rsp + 0x2230]
call fcn.180003340
mov dword [rsp + 0x1fc], eax
mov r8d, 0xa
xor edx, edx
lea rcx, [rsp + 0x2290]
call fcn.180003340
mov ecx, dword [rsp + 0x1fc]
mov edx, ecx
mov ecx, eax
call fcn.180057670
mov dword [rsp + 0x148], eax
lea rcx, [rsp + 0x2290]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x2230]
call fcn.18000a1c0
nop
mov edx, dword [rsp + 0x148]
lea rcx, [0x180510450]
call fcn.180009a80
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
mov edx, dword [rsp + 0x148]
lea rcx, [rsp + 0x3cb0]
call fcn.18005b120
mov qword [rsp + 0x1400], rax
mov rax, qword [rsp + 0x1400]
mov qword [rsp + 0x1408], rax
mov rdx, qword [rsp + 0x1408]
lea rcx, [0x180510450]
call fcn.180013620
nop
lea rcx, [rsp + 0x3cb0]
call fcn.18000a1c0
nop
mov eax, dword [rsp + 0x148]
jmp 0x180054746
cmp dword [rsp + 0x5410], 2
jle 0x180052f3a
lea rax, [rsp + 0x105]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x105]
call fcn.18003ced0
mov rcx, rax
call fcn.1800046d0
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180052f3a
mov dword [rsp + 0x19c], 0
cmp dword [rsp + 0x5410], 3
jle 0x180052e8f
lea rax, [rsp + 0x106]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x106]
call fcn.18003cdc0
mov rcx, rax
call fcn.1800046b0
mov ecx, 8
imul rcx, rcx, 3
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180052e8f
mov dword [rsp + 0x19c], 1
mov eax, 8
imul rax, rax, 2
mov edx, dword [rsp + 0x19c]
mov rcx, qword [rsp + 0x5418]
mov rcx, qword [rcx + rax]
call fcn.180056c00
mov dword [rsp + 0x14c], eax
mov edx, dword [rsp + 0x14c]
lea rcx, [0x180510450]
call fcn.180009a80
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
mov edx, dword [rsp + 0x14c]
lea rcx, [rsp + 0x3cd0]
call fcn.18005b120
mov qword [rsp + 0x1410], rax
mov rax, qword [rsp + 0x1410]
mov qword [rsp + 0x1418], rax
mov rdx, qword [rsp + 0x1418]
lea rcx, [0x180510450]
call fcn.180013620
nop
lea rcx, [rsp + 0x3cd0]
call fcn.18000a1c0
nop
mov eax, dword [rsp + 0x14c]
jmp 0x180054746
cmp dword [rsp + 0x5410], 1
jle 0x180053025
lea rax, [rsp + 0x107]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x107]
call fcn.18003ccd0
mov rcx, rax
call fcn.180004690
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180053025
call fcn.180056bd0
mov dword [rsp + 0x150], eax
mov edx, dword [rsp + 0x150]
lea rcx, [0x180510450]
call fcn.180009a80
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
mov edx, dword [rsp + 0x150]
lea rcx, [rsp + 0x3cf0]
call fcn.18005b120
mov qword [rsp + 0x1420], rax
mov rax, qword [rsp + 0x1420]
mov qword [rsp + 0x1428], rax
mov rdx, qword [rsp + 0x1428]
lea rcx, [0x180510450]
call fcn.180013620
nop
lea rcx, [rsp + 0x3cf0]
call fcn.18000a1c0
nop
mov eax, dword [rsp + 0x150]
jmp 0x180054746
cmp dword [rsp + 0x5410], 1
jle 0x180053199
lea rax, [rsp + 0x108]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x108]
call fcn.18003cbe0
mov rcx, rax
call fcn.180004670
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180053199
mov dword [rsp + 0x1a0], 0
cmp dword [rsp + 0x5410], 3
jle 0x1800530eb
lea rax, [rsp + 0x109]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x109]
call fcn.18003caf0
mov rcx, rax
call fcn.180004650
mov ecx, 8
imul rcx, rcx, 3
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x1800530eb
mov dword [rsp + 0x1a0], 1
mov eax, 8
imul rax, rax, 2
mov r8d, dword [rsp + 0x1a0]
xor edx, edx
mov rcx, qword [rsp + 0x5418]
mov rcx, qword [rcx + rax]
call fcn.18005ae60
mov dword [rsp + 0x154], eax
mov edx, dword [rsp + 0x154]
lea rcx, [0x180510450]
call fcn.180009a80
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
mov edx, dword [rsp + 0x154]
lea rcx, [rsp + 0x3d10]
call fcn.18005b120
mov qword [rsp + 0x1430], rax
mov rax, qword [rsp + 0x1430]
mov qword [rsp + 0x1438], rax
mov rdx, qword [rsp + 0x1438]
lea rcx, [0x180510450]
call fcn.180013620
nop
lea rcx, [rsp + 0x3d10]
call fcn.18000a1c0
nop
mov eax, dword [rsp + 0x154]
jmp 0x180054746
cmp dword [rsp + 0x5410], 3
jle 0x18005332a
lea rax, [rsp + 0x10a]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x10a]
call fcn.18003ca00
mov rcx, rax
call fcn.180004630
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x18005332a
lea rax, [rsp + 0x19a0]
mov qword [rsp + 0x1440], rax
lea rax, [rsp + 0x19c0]
mov qword [rsp + 0x1450], rax
mov eax, 8
imul rax, rax, 3
mov rcx, qword [rsp + 0x5418]
mov rdx, qword [rcx + rax]
mov rcx, qword [rsp + 0x1440]
call fcn.18000a330
mov qword [rsp + 0x1448], rax
mov rax, qword [rsp + 0x1448]
mov qword [rsp + 0x1458], rax
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x5418]
mov rdx, qword [rcx + rax]
mov rcx, qword [rsp + 0x1450]
call fcn.18000a330
mov qword [rsp + 0x1460], rax
xor r8d, r8d
mov rdx, qword [rsp + 0x1458]
mov rcx, qword [rsp + 0x1460]
call fcn.18005ac20
mov dword [rsp + 0x158], eax
lea rdx, [0x180013580]
lea rcx, [0x180510450]
call fcn.180009e70
mov edx, dword [rsp + 0x158]
mov rcx, rax
call fcn.180009a80
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
mov edx, dword [rsp + 0x158]
lea rcx, [rsp + 0x3d30]
call fcn.18005b120
mov qword [rsp + 0x1468], rax
mov rax, qword [rsp + 0x1468]
mov qword [rsp + 0x1470], rax
mov rdx, qword [rsp + 0x1470]
lea rcx, [0x180510450]
call fcn.180013620
nop
lea rcx, [rsp + 0x3d30]
call fcn.18000a1c0
nop
mov eax, dword [rsp + 0x158]
jmp 0x180054746
cmp dword [rsp + 0x5410], 3
jle 0x1800534ac
lea rax, [rsp + 0x10b]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x10b]
call fcn.18003c910
mov rcx, rax
call fcn.180004610
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x1800534ac
lea rax, [rsp + 0x19e0]
mov qword [rsp + 0x1478], rax
lea rax, [rsp + 0x1a20]
mov qword [rsp + 0x1488], rax
mov eax, 8
imul rax, rax, 3
mov rcx, qword [rsp + 0x5418]
mov rdx, qword [rcx + rax]
mov rcx, qword [rsp + 0x1478]
call fcn.18000a330
mov qword [rsp + 0x1480], rax
mov rax, qword [rsp + 0x1480]
mov qword [rsp + 0x1490], rax
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x5418]
mov rdx, qword [rcx + rax]
mov rcx, qword [rsp + 0x1488]
call fcn.18000a330
mov qword [rsp + 0x1498], rax
xor r8d, r8d
mov rdx, qword [rsp + 0x1490]
mov rcx, qword [rsp + 0x1498]
call fcn.18005a7e0
mov dword [rsp + 0x15c], eax
mov edx, dword [rsp + 0x15c]
lea rcx, [0x180510450]
call fcn.180009a80
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
mov edx, dword [rsp + 0x15c]
lea rcx, [rsp + 0x3d50]
call fcn.18005b120
mov qword [rsp + 0x14a0], rax
mov rax, qword [rsp + 0x14a0]
mov qword [rsp + 0x14a8], rax
mov rdx, qword [rsp + 0x14a8]
lea rcx, [0x180510450]
call fcn.180013620
nop
lea rcx, [rsp + 0x3d50]
call fcn.18000a1c0
nop
mov eax, dword [rsp + 0x15c]
jmp 0x180054746
cmp dword [rsp + 0x5410], 3
jle 0x18005362e
lea rax, [rsp + 0x10c]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x10c]
call fcn.18003c800
mov rcx, rax
call fcn.1800045f0
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x18005362e
lea rax, [rsp + 0x1a40]
mov qword [rsp + 0x14b0], rax
lea rax, [rsp + 0x1a60]
mov qword [rsp + 0x14c0], rax
mov eax, 8
imul rax, rax, 3
mov rcx, qword [rsp + 0x5418]
mov rdx, qword [rcx + rax]
mov rcx, qword [rsp + 0x14b0]
call fcn.18000a330
mov qword [rsp + 0x14b8], rax
mov rax, qword [rsp + 0x14b8]
mov qword [rsp + 0x14c8], rax
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x5418]
mov rdx, qword [rcx + rax]
mov rcx, qword [rsp + 0x14c0]
call fcn.18000a330
mov qword [rsp + 0x14d0], rax
xor r8d, r8d
mov rdx, qword [rsp + 0x14c8]
mov rcx, qword [rsp + 0x14d0]
call fcn.18005a380
mov dword [rsp + 0x160], eax
mov edx, dword [rsp + 0x160]
lea rcx, [0x180510450]
call fcn.180009a80
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
mov edx, dword [rsp + 0x160]
lea rcx, [rsp + 0x3d70]
call fcn.18005b120
mov qword [rsp + 0x14d8], rax
mov rax, qword [rsp + 0x14d8]
mov qword [rsp + 0x14e0], rax
mov rdx, qword [rsp + 0x14e0]
lea rcx, [0x180510450]
call fcn.180013620
nop
lea rcx, [rsp + 0x3d70]
call fcn.18000a1c0
nop
mov eax, dword [rsp + 0x160]
jmp 0x180054746
cmp dword [rsp + 0x5410], 5
jle 0x180053843
lea rax, [rsp + 0x10d]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x10d]
call fcn.18003c710
mov rcx, rax
call fcn.1800045d0
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180053843
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x5418]
mov rax, qword [rcx + rax]
movsx eax, byte [rax]
cmp eax, 0x30
je 0x1800536b4
mov dword [rsp + 0x1a4], 1
jmp 0x1800536bf
mov dword [rsp + 0x1a4], 0
mov eax, dword [rsp + 0x1a4]
mov dword [rsp + 0x20c], eax
mov eax, 8
imul rax, rax, 3
mov rcx, qword [rsp + 0x5418]
mov rax, qword [rcx + rax]
movsx eax, byte [rax]
cmp eax, 0x30
je 0x1800536f7
mov dword [rsp + 0x1a8], 1
jmp 0x180053702
mov dword [rsp + 0x1a8], 0
mov eax, dword [rsp + 0x1a8]
mov dword [rsp + 0x208], eax
mov eax, 8
imul rax, rax, 4
mov rcx, qword [rsp + 0x5418]
mov rax, qword [rcx + rax]
movsx eax, byte [rax]
cmp eax, 0x30
je 0x18005373a
mov dword [rsp + 0x1ac], 1
jmp 0x180053745
mov dword [rsp + 0x1ac], 0
mov eax, dword [rsp + 0x1ac]
mov dword [rsp + 0x204], eax
mov eax, 8
imul rax, rax, 5
mov rcx, qword [rsp + 0x5418]
mov rax, qword [rcx + rax]
movsx eax, byte [rax]
cmp eax, 0x30
je 0x18005377d
mov dword [rsp + 0x1b0], 1
jmp 0x180053788
mov dword [rsp + 0x1b0], 0
mov eax, dword [rsp + 0x1b0]
mov dword [rsp + 0x200], eax
mov r9d, dword [rsp + 0x200]
mov r8d, dword [rsp + 0x204]
mov edx, dword [rsp + 0x208]
mov ecx, dword [rsp + 0x20c]
call fcn.180056740
mov dword [rsp + 0x164], eax
mov edx, dword [rsp + 0x164]
lea rcx, [0x180510450]
call fcn.180009a80
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
mov edx, dword [rsp + 0x164]
lea rcx, [rsp + 0x3d90]
call fcn.18005b120
mov qword [rsp + 0x14e8], rax
mov rax, qword [rsp + 0x14e8]
mov qword [rsp + 0x14f0], rax
mov rdx, qword [rsp + 0x14f0]
lea rcx, [0x180510450]
call fcn.180013620
nop
lea rcx, [rsp + 0x3d90]
call fcn.18000a1c0
nop
mov eax, dword [rsp + 0x164]
jmp 0x180054746
cmp dword [rsp + 0x5410], 1
jle 0x18005399b
lea rax, [rsp + 0x10e]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x10e]
call fcn.18003c620
mov rcx, rax
call fcn.1800045b0
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x18005399b
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x5418]
mov rdx, qword [rcx + rax]
lea rcx, [rsp + 0x3db0]
call fcn.18005afa0
mov qword [rsp + 0x14f8], rax
mov rax, qword [rsp + 0x14f8]
mov qword [rsp + 0x1500], rax
mov rdx, qword [rsp + 0x1500]
lea rcx, [0x180510450]
call fcn.180013620
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
lea rcx, [rsp + 0x3db0]
call fcn.18000a1c0
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x168], eax
mov edx, dword [rsp + 0x168]
lea rcx, [0x180510450]
call fcn.180009a80
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
mov edx, dword [rsp + 0x168]
lea rcx, [rsp + 0x3dd0]
call fcn.18005b120
mov qword [rsp + 0x1508], rax
mov rax, qword [rsp + 0x1508]
mov qword [rsp + 0x1510], rax
mov rdx, qword [rsp + 0x1510]
lea rcx, [0x180510450]
call fcn.180013620
nop
lea rcx, [rsp + 0x3dd0]
call fcn.18000a1c0
nop
mov eax, dword [rsp + 0x168]
jmp 0x180054746
cmp dword [rsp + 0x5410], 2
jle 0x180053dbe
lea rax, [rsp + 0x10f]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x10f]
call fcn.18003c510
mov rcx, rax
call fcn.180004590
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180053dbe
lea rax, [rsp + 0x110]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x110]
call fcn.18003c400
mov rcx, rax
call fcn.180004570
mov qword [rsp + 0x190], rax
lea rax, [rsp + 0x111]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x111]
call fcn.18003c2e0
mov rcx, rax
call fcn.180004550
mov ecx, 8
imul rcx, rcx, 2
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180053aa8
lea rax, [rsp + 0x112]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x112]
call fcn.18003c1c0
mov rcx, rax
call fcn.180004530
mov qword [rsp + 0x190], rax
jmp 0x180053ca0
lea rax, [rsp + 0x113]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x113]
call fcn.18003c0a0
mov rcx, rax
call fcn.180004510
mov ecx, 8
imul rcx, rcx, 2
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180053b28
lea rax, [rsp + 0x114]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x114]
call fcn.18003bf80
mov rcx, rax
call fcn.1800044f0
mov qword [rsp + 0x190], rax
jmp 0x180053ca0
lea rax, [rsp + 0x115]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x115]
call fcn.18003be60
mov rcx, rax
call fcn.1800044d0
mov ecx, 8
imul rcx, rcx, 2
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180053ba8
lea rax, [rsp + 0x116]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x116]
call fcn.18003bd40
mov rcx, rax
call fcn.180004400
mov qword [rsp + 0x190], rax
jmp 0x180053ca0
lea rax, [rsp + 0x117]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x117]
call fcn.18003bc10
mov rcx, rax
call fcn.1800043e0
mov ecx, 8
imul rcx, rcx, 2
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180053c25
lea rax, [rsp + 0x118]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x118]
call fcn.18003bae0
mov rcx, rax
call fcn.1800043c0
mov qword [rsp + 0x190], rax
jmp 0x180053ca0
lea rax, [rsp + 0x119]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x119]
call fcn.18003b9b0
mov rcx, rax
call fcn.1800043a0
mov ecx, 8
imul rcx, rcx, 2
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180053ca0
lea rax, [rsp + 0x11a]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x11a]
call fcn.18003b880
mov rcx, rax
call fcn.1800042d0
mov qword [rsp + 0x190], rax
mov dword [rsp + 0x1b4], 0
cmp dword [rsp + 0x5410], 3
jle 0x180053d0a
lea rax, [rsp + 0x11b]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x11b]
call fcn.18003b790
mov rcx, rax
call fcn.1800042b0
mov ecx, 8
imul rcx, rcx, 3
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180053d0a
mov dword [rsp + 0x1b4], 1
mov eax, 8
imul rax, rax, 2
mov r8d, dword [rsp + 0x1b4]
mov rdx, qword [rsp + 0x190]
mov rcx, qword [rsp + 0x5418]
mov rcx, qword [rcx + rax]
call fcn.180059be0
mov dword [rsp + 0x16c], eax
mov edx, dword [rsp + 0x16c]
lea rcx, [0x180510450]
call fcn.180009a80
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
mov edx, dword [rsp + 0x16c]
lea rcx, [rsp + 0x3df0]
call fcn.18005b120
mov qword [rsp + 0x1518], rax
mov rax, qword [rsp + 0x1518]
mov qword [rsp + 0x1520], rax
mov rdx, qword [rsp + 0x1520]
lea rcx, [0x180510450]
call fcn.180013620
nop
lea rcx, [rsp + 0x3df0]
call fcn.18000a1c0
nop
mov eax, dword [rsp + 0x16c]
jmp 0x180054746
cmp dword [rsp + 0x5410], 2
jle 0x180053f8e
lea rax, [rsp + 0x11c]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x11c]
call fcn.18003b680
mov rcx, rax
call fcn.180004290
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180053f8e
lea rcx, [rsp + 0x4b60]
call qword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
nop
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x5418]
mov rdx, qword [rcx + rax]
lea rcx, [rsp + 0x3e50]
call fcn.18000a330
mov qword [rsp + 0x1528], rax
mov rax, qword [rsp + 0x1528]
mov qword [rsp + 0x1538], rax
lea rdx, [rsp + 0x4b60]
lea rcx, [rsp + 0x3e30]
call fcn.18000a330
mov qword [rsp + 0x1530], rax
mov rax, qword [rsp + 0x1530]
mov qword [rsp + 0x1540], rax
mov r8, qword [rsp + 0x1538]
mov rdx, qword [rsp + 0x1540]
lea rcx, [rsp + 0x3e10]
call fcn.1800135d0
mov qword [rsp + 0x1548], rax
mov rax, qword [rsp + 0x1548]
mov qword [rsp + 0x1550], rax
mov rcx, qword [rsp + 0x1550]
call fcn.18000a0c0
mov rcx, rax
call fcn.180056100
mov dword [rsp + 0x170], eax
lea rcx, [rsp + 0x3e10]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3e30]
call fcn.18000a1c0
nop
lea rcx, [rsp + 0x3e50]
call fcn.18000a1c0
nop
mov edx, dword [rsp + 0x170]
lea rcx, [0x180510450]
call fcn.180009a80
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
mov edx, dword [rsp + 0x170]
lea rcx, [rsp + 0x3e70]
call fcn.18005b120
mov qword [rsp + 0x1558], rax
mov rax, qword [rsp + 0x1558]
mov qword [rsp + 0x1560], rax
mov rdx, qword [rsp + 0x1560]
lea rcx, [0x180510450]
call fcn.180013620
nop
lea rcx, [rsp + 0x3e70]
call fcn.18000a1c0
nop
mov eax, dword [rsp + 0x170]
jmp 0x180054746
cmp dword [rsp + 0x5410], 2
jle 0x1800540ff
lea rax, [rsp + 0x11d]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x11d]
call fcn.18003b570
mov rcx, rax
call fcn.180004270
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x1800540ff
mov dword [rsp + 0x1b8], 0
cmp dword [rsp + 0x5410], 3
jle 0x180054054
lea rax, [rsp + 0x11e]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x11e]
call fcn.18003b460
mov rcx, rax
call fcn.1800041a0
mov ecx, 8
imul rcx, rcx, 3
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180054054
mov dword [rsp + 0x1b8], 1
mov eax, 8
imul rax, rax, 2
mov edx, dword [rsp + 0x1b8]
mov rcx, qword [rsp + 0x5418]
mov rcx, qword [rcx + rax]
call fcn.1800571e0
mov dword [rsp + 0x174], eax
mov edx, dword [rsp + 0x174]
lea rcx, [0x180510450]
call fcn.180009a80
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
mov edx, dword [rsp + 0x174]
lea rcx, [rsp + 0x3e90]
call fcn.18005b120
mov qword [rsp + 0x1568], rax
mov rax, qword [rsp + 0x1568]
mov qword [rsp + 0x1570], rax
mov rdx, qword [rsp + 0x1570]
lea rcx, [0x180510450]
call fcn.180013620
nop
lea rcx, [rsp + 0x3e90]
call fcn.18000a1c0
nop
mov eax, dword [rsp + 0x174]
jmp 0x180054746
cmp dword [rsp + 0x5410], 1
jle 0x1800541ec
lea rax, [rsp + 0x11f]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x11f]
call fcn.18003b350
mov rcx, rax
call fcn.180004180
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x1800541ec
xor ecx, ecx
call fcn.180055f20
mov dword [rsp + 0x178], eax
mov edx, dword [rsp + 0x178]
lea rcx, [0x180510450]
call fcn.180009a80
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
mov edx, dword [rsp + 0x178]
lea rcx, [rsp + 0x3eb0]
call fcn.18005b120
mov qword [rsp + 0x1578], rax
mov rax, qword [rsp + 0x1578]
mov qword [rsp + 0x1580], rax
mov rdx, qword [rsp + 0x1580]
lea rcx, [0x180510450]
call fcn.180013620
nop
lea rcx, [rsp + 0x3eb0]
call fcn.18000a1c0
nop
mov eax, dword [rsp + 0x178]
jmp 0x180054746
cmp dword [rsp + 0x5410], 4
jle 0x18005430a
lea rax, [rsp + 0x120]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x120]
call fcn.18003b260
mov rcx, rax
call fcn.180004160
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x18005430a
mov eax, 8
imul rax, rax, 4
mov rcx, qword [rsp + 0x5418]
mov rdx, qword [rcx + rax]
lea rcx, [rsp + 0x2250]
call fcn.18000a330
nop
mov r8d, 0xa
xor edx, edx
lea rcx, [rsp + 0x2250]
call fcn.180003340
mov ecx, 8
imul rcx, rcx, 3
mov edx, 8
imul rdx, rdx, 2
mov qword [rsp + 0x1588], rdx
mov r8d, eax
mov rax, qword [rsp + 0x5418]
mov rdx, qword [rax + rcx]
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rsp + 0x1588]
mov rcx, qword [rax + rcx]
call fcn.1800556a0
mov dword [rsp + 0x1bc], eax
lea rcx, [rsp + 0x2250]
call fcn.18000a1c0
nop
mov edx, dword [rsp + 0x1bc]
lea rcx, [0x180510450]
call fcn.180009a80
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
mov eax, dword [rsp + 0x1bc]
jmp 0x180054746
cmp dword [rsp + 0x5410], 4
jle 0x18005449a
lea rax, [rsp + 0x121]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x121]
call fcn.18003b150
mov rcx, rax
call fcn.180004090
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x18005449a
mov dword [rsp + 0x1c0], 0
cmp dword [rsp + 0x5410], 5
jle 0x1800543d0
lea rax, [rsp + 0x122]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x122]
call fcn.18003b060
mov rcx, rax
call fcn.180004070
mov ecx, 8
imul rcx, rcx, 5
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x1800543d0
mov dword [rsp + 0x1c0], 1
mov eax, 8
imul rax, rax, 4
mov rcx, qword [rsp + 0x5418]
mov rdx, qword [rcx + rax]
lea rcx, [rsp + 0x2270]
call fcn.18000a330
nop
mov r8d, 0xa
xor edx, edx
lea rcx, [rsp + 0x2270]
call fcn.180003340
mov ecx, 8
imul rcx, rcx, 3
mov edx, 8
imul rdx, rdx, 2
mov qword [rsp + 0x1590], rdx
mov r9d, dword [rsp + 0x1c0]
mov r8d, eax
mov rax, qword [rsp + 0x5418]
mov rdx, qword [rax + rcx]
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rsp + 0x1590]
mov rcx, qword [rax + rcx]
call fcn.1800554f0
mov dword [rsp + 0x1c4], eax
lea rcx, [rsp + 0x2270]
call fcn.18000a1c0
nop
mov edx, dword [rsp + 0x1c4]
lea rcx, [0x180510450]
call fcn.180009a80
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
mov eax, dword [rsp + 0x1c4]
jmp 0x180054746
cmp dword [rsp + 0x5410], 3
jle 0x180054619
lea rax, [rsp + 0x123]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x123]
call fcn.18003af70
mov rcx, rax
call fcn.180003fa0
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180054619
lea rax, [rsp + 0x1a80]
mov qword [rsp + 0x1598], rax
lea rax, [rsp + 0x1aa0]
mov qword [rsp + 0x15a8], rax
mov eax, 8
imul rax, rax, 3
mov rcx, qword [rsp + 0x5418]
mov rdx, qword [rcx + rax]
mov rcx, qword [rsp + 0x1598]
call fcn.18000a330
mov qword [rsp + 0x15a0], rax
mov rax, qword [rsp + 0x15a0]
mov qword [rsp + 0x15b0], rax
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x5418]
mov rdx, qword [rcx + rax]
mov rcx, qword [rsp + 0x15a8]
call fcn.18000a330
mov qword [rsp + 0x15b8], rax
mov rdx, qword [rsp + 0x15b0]
mov rcx, qword [rsp + 0x15b8]
call fcn.180054df0
mov dword [rsp + 0x17c], eax
mov edx, dword [rsp + 0x17c]
lea rcx, [0x180510450]
call fcn.180009a80
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
mov edx, dword [rsp + 0x17c]
lea rcx, [rsp + 0x3ed0]
call fcn.18005b120
mov qword [rsp + 0x15c0], rax
mov rax, qword [rsp + 0x15c0]
mov qword [rsp + 0x15c8], rax
mov rdx, qword [rsp + 0x15c8]
lea rcx, [0x180510450]
call fcn.180013620
nop
lea rcx, [rsp + 0x3ed0]
call fcn.18000a1c0
nop
mov eax, dword [rsp + 0x17c]
jmp 0x180054746
cmp dword [rsp + 0x5410], 1
jle 0x180054679
lea rax, [rsp + 0x124]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x124]
call fcn.18003ae80
mov rcx, rax
call fcn.180003ed0
mov ecx, 8
imul rcx, rcx, 1
mov rdx, rax
mov rax, qword [rsp + 0x5418]
mov rcx, qword [rax + rcx]
call fcn.180021480
test eax, eax
jne 0x180054679
xor eax, eax
jmp 0x180054746
cmp dword [rsp + 0x5410], 1
jle 0x1800546f6
mov eax, 8
imul rax, rax, 1
lea rdx, str._egg
mov rcx, qword [rsp + 0x5418]
mov rcx, qword [rcx + rax]
call fcn.180021480
test eax, eax
jne 0x1800546f6
lea rax, [rsp + 0x125]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x125]
call fcn.18003acf0
mov rcx, rax
call fcn.180003e00
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
xor eax, eax
jmp 0x180054746
lea rax, [rsp + 0x126]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x126]
call fcn.18003ac10
mov rcx, rax
call fcn.180003d30
mov rdx, rax
lea rcx, [0x180510450]
call fcn.180013230
lea rdx, [0x180013580]
mov rcx, rax
call fcn.180009e70
nop
call fcn.18001d6b8
nop
xor eax, eax
mov rcx, qword [rsp + 0x53e0]
xor rcx, rsp
call fcn.180017940
add rsp, 0x53f8
pop rdi
pop rsi
ret