Function at 0x180023ea0
Capabilities:
Authenticate hmac
Check http status code
Encrypt data using speck
Get disk information
Parse credit card information
Parse pe header
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x290]
sub rsp, 0x390
mov rax, qword [0x1800a74e0]
xor rax, rsp
mov qword [rbp + 0x280], rax
mov r10d, dword [rsp + 0x5c]
lea edi, [rdx + 0x13]
mov r12d, dword [rsp + 0x5c]
xor r13d, r13d
mov eax, dword [rsp + 0x5c]
mov rsi, r8
mov r8d, dword [rsp + 0x5c]
mov r14d, edx
mov dword [rsp + 0x60], r10d
mov r15, rcx
mov dword [rsp + 0x54], r8d
mov dword [rsp + 0x48], r12d
cmp edx, edi
jae 0x1800243cc
mov r9d, dword [rsp + 0x5c]
lea ebx, [rdx - 0x98]
mov r11d, dword [rsp + 0x5c]
mov edx, dword [rsp + 0x5c]
mov ecx, dword [rsp + 0x5c]
mov dword [rsp + 0x68], r9d
mov r9d, dword [rsp + 0x5c]
mov dword [rsp + 0x70], r9d
mov r9d, dword [rsp + 0x5c]
mov dword [rbp - 0x48], r9d
mov r9d, dword [rsp + 0x5c]
mov dword [rsp + 0x40], eax
mov rax, qword [rbp - 0x10]
mov dword [rbp - 0x58], r9d
mov r9d, dword [rsp + 0x5c]
mov dword [rbp - 0x60], r11d
mov r11d, dword [rsp + 0x5c]
mov dword [rbp - 0x80], edx
mov edx, dword [rsp + 0x5c]
mov dword [rsp + 0x78], ecx
mov ecx, dword [rsp + 0x5c]
mov dword [rbp - 0x64], r9d
mov qword [rbp + 0x40], rax
mov dword [rbp - 0x40], r11d
mov dword [rbp - 0x68], edx
mov dword [rsp + 0x74], ecx
nop word [rax + rax]
cmp ebx, 0x40
ja case.0x180023fa4.2
lea r9, [0x180000000]
movzx eax, byte [r9 + rbx + 0x28e48]
mov ecx, dword [r9 + rax*4 + 0x28e00]
add rcx, r9
jmp rcx
mov ecx, dword [r15 + 0xfa48]
mov dword [rsp + 0x68], ecx
mov ecx, dword [r15 + 0xfa4c]
mov dword [rbp - 0x60], ecx
jmp case.0x180023fa4.2
xor r8d, r8d
mov rcx, r15
lea edx, [r8 + 0x35]
call fcn.180074260
mov byte [rbp - 0x18], al
jmp case.0x180023fa4.2
mov ecx, dword [r15 + 0xfa54]
mov r10d, dword [r15 + 0xfa5c]
mov dword [rsp + 0x70], ecx
mov ecx, dword [r15 + 0xfa58]
mov dword [rbp - 0x48], ecx
mov dword [rsp + 0x60], r10d
jmp 0x180024200
mov r8d, dword [r15 + 0xfa44]
mov r10d, dword [rsp + 0x60]
mov dword [rsp + 0x54], r8d
jmp 0x180024205
lea rdx, [0x1800a7220]
mov ecx, 0x120
call fcn.180031450
mov dword [rbp - 0x18], r13d
jmp case.0x180023fa4.2
mov r8d, 3
lea rdx, [0x18009a944]
lea rcx, [rbp + 0x58]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 0x104
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x58]
call qword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
jmp case.0x180023fa4.2
cmp dword [r15 + 8], 0xa
jne 0x180024121
mov edx, 9
lea r8d, [rdx + 1]
cmp edx, 9
ja case.default.0x180024087
mov eax, edx
mov ecx, dword [r9 + rax*4 + 0x28e8c]
add rcx, r9
jmp rcx
mov qword [r15 + 0xfa24], r13
jmp case.default.0x180024087
mov qword [r15 + 0xfa60], r13
mov dword [r15 + 0xfa68], r13d
jmp case.default.0x180024087
mov qword [r15 + 0xfa34], r13
mov dword [r15 + 0xfa3c], r13d
jmp case.default.0x180024087
mov qword [r15 + 0xfa40], r13
mov qword [r15 + 0xfa48], r13
jmp case.default.0x180024087
mov qword [r15 + 0xfa80], r13
mov qword [r15 + 0xfa88], r13
jmp case.default.0x180024087
mov qword [r15 + 0xfa54], r13
mov dword [r15 + 0xfa5c], r13d
jmp case.default.0x180024087
mov dword [r15 + 0xfa2c], r13d
jmp case.default.0x180024087
mov dword [r15 + 0xfa30], r13d
jmp case.default.0x180024087
mov dword [r15 + 0xfa50], r13d
jmp case.default.0x180024087
mov qword [r15 + 0xfa6c], r13
mov dword [r15 + 0xfa74], r13d
mov qword [r15 + 0xfa78], r13
dec edx
sub r8, 1
jne 0x180024071
mov eax, dword [r15 + 0xfa24]
mov r12d, dword [r15 + 0xfa28]
mov ecx, dword [r15 + 0xfa2c]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x48], r12d
mov dword [rbp - 0x80], ecx
jmp case.0x180023fa4.2
mov rax, qword [r15]
mov qword [rbp + 0x40], rax
jmp case.0x180023fa4.2
mov r9d, dword [r15 + 0xfa38]
mov edx, dword [r15 + 0xfa3c]
mov ecx, dword [r15 + 0xfa40]
mov dword [rbp - 0x40], r9d
mov dword [rbp - 0x58], edx
mov dword [rsp + 0x78], ecx
jmp case.0x180023fa4.2
mov r8d, 3
lea rdx, [0x18009aa1c]
lea rcx, [rbp + 0x58]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp case.0x180023fa4.2
mov r8d, 3
lea rdx, [0x18009aa88]
lea rcx, [rbp + 0x58]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov eax, dword [0x18009aad6]
mov dword [rbp + 0x5e], eax
movzx eax, word [0x18009aada]
mov word [rbp + 0x62], ax
jmp case.0x180023fa4.2
mov edx, dword [r15 + 0xfa30]
mov ecx, dword [r15 + 0xfa34]
mov dword [rbp - 0x64], edx
mov dword [rbp - 0x68], ecx
jmp case.0x180023fa4.2
mov r8d, 3
lea rdx, str.rar:_hdrcharset_option_needs_a_character_set_name
lea rcx, [rbp + 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp case.0x180023fa4.2
mov ecx, dword [r15 + 0xfa50]
mov dword [rsp + 0x74], ecx
mov r10d, dword [rsp + 0x60]
mov r8d, dword [rsp + 0x54]
inc ebx
lea eax, [rbx + 0x98]
cmp eax, edi
jb 0x180023f80
mov ebx, dword [rsp + 0x40]
lea eax, [r14 - 0x13]
mov dword [rsp + 0x58], eax
cmp r14d, eax
jbe case.0x180024368.191
mov eax, dword [rsp + 0x58]
mov ecx, dword [rsp + 0x58]
mov r9d, dword [rsp + 0x58]
movzx r13d, byte [rsp + 0x64]
mov r11d, dword [rsp + 0x58]
mov edx, dword [rsp + 0x58]
mov esi, dword [rsp + 0x58]
mov edi, dword [rsp + 0x58]
mov dword [rsp + 0x6c], eax
mov eax, dword [rsp + 0x58]
mov dword [rbp + 0x1c], eax
mov eax, dword [rsp + 0x58]
mov dword [rbp + 0x30], eax
mov eax, dword [rsp + 0x58]
mov dword [rbp + 0x38], eax
mov eax, dword [rsp + 0x58]
mov dword [rbp + 0x48], eax
mov eax, dword [rsp + 0x58]
mov dword [rbp - 4], eax
mov eax, dword [rsp + 0x58]
mov dword [rbp], eax
mov eax, dword [rsp + 0x58]
mov dword [rbp + 4], eax
mov eax, dword [rsp + 0x58]
mov dword [rbp + 8], eax
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x58]
mov dword [rbp + 0x10], eax
mov eax, dword [rsp + 0x58]
mov dword [rbp + 0xc], eax
mov eax, dword [rsp + 0x58]
mov dword [rbp - 0x30], eax
mov rax, qword [rbp + 0x50]
mov dword [rsp + 0x5c], ecx
mov ecx, dword [rsp + 0x58]
mov qword [rbp - 0x50], rax
mov eax, dword [rsp + 0x58]
mov dword [rbp + 0x2c], ecx
mov ecx, dword [rsp + 0x58]
mov dword [rbp - 0x6c], eax
mov rax, qword [rbp + 0x50]
mov dword [rbp + 0x3c], ecx
movzx ecx, byte [rsp + 0x64]
mov qword [rbp - 0x20], rax
mov eax, dword [rsp + 0x58]
mov byte [rsp + 0x64], cl
mov ecx, dword [rsp + 0x58]
mov dword [rbp + 0x14], eax
mov eax, dword [rsp + 0x58]
mov dword [rbp - 0x38], ecx
mov rcx, qword [rbp + 0x50]
mov dword [rbp - 0x2c], eax
mov eax, dword [rsp + 0x58]
mov dword [rbp + 0x20], eax
mov eax, dword [rsp + 0x58]
mov qword [rbp - 0x28], rcx
mov ecx, dword [rsp + 0x58]
mov dword [rbp - 0x44], eax
mov eax, dword [rsp + 0x58]
mov dword [rbp + 0x18], ecx
mov ecx, dword [rsp + 0x58]
mov dword [rbp - 0x3c], eax
mov eax, dword [rsp + 0x58]
mov dword [rbp - 8], r9d
mov r9d, dword [rsp + 0x58]
mov dword [rbp + 0x34], ecx
mov ecx, dword [rsp + 0x58]
mov dword [rbp + 0x24], eax
mov dword [rbp - 0x34], r9d
mov dword [rsp + 0x50], r11d
mov dword [rsp + 0x44], edx
mov dword [rbp - 0x70], esi
mov dword [rbp + 0x28], ecx
lea eax, [r14 - 0xbf]
cmp eax, 0x12
ja case.default.0x180024368
lea rcx, [0x180000000]
mov ecx, dword [rcx + rax*4 + 0x28eb4]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
xor r8d, r8d
mov rcx, r15
lea edx, [r8 + 0x6f]
call fcn.1800649e0
test al, al
jne case.0x180024368.191
nop dword [rax]
imul ecx, dword [rsi], 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r8d, r8d
mov rcx, r15
lea edx, [r8 + 0x6f]
call fcn.1800649e0
test al, al
je 0x180024380
mov eax, dword [rbp - 0x18]
mov rcx, qword [rbp + 0x280]
xor rcx, rsp
call fcn.1800864a0
mov rbx, qword [rsp + 0x3d8]
add rsp, 0x390
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ebx, dword [rsp + 0x5c]
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x5c]
mov dword [rbp - 0x60], eax
mov eax, dword [rsp + 0x5c]
mov dword [rsp + 0x70], eax
mov eax, dword [rsp + 0x5c]
mov dword [rbp - 0x48], eax
mov eax, dword [rsp + 0x5c]
mov dword [rbp - 0x80], eax
mov rax, qword [rbp - 0x10]
mov qword [rbp + 0x40], rax
mov eax, dword [rsp + 0x5c]
mov dword [rbp - 0x40], eax
mov eax, dword [rsp + 0x5c]
mov dword [rbp - 0x58], eax
mov eax, dword [rsp + 0x5c]
mov dword [rsp + 0x78], eax
mov eax, dword [rsp + 0x5c]
mov dword [rbp - 0x64], eax
mov eax, dword [rsp + 0x5c]
mov dword [rbp - 0x68], eax
mov eax, dword [rsp + 0x5c]
mov dword [rsp + 0x74], eax
mov dword [rsp + 0x40], ebx
jmp 0x180024219
mov eax, dword [r15 + 0xfa74]
mov dword [rsp + 0x6c], eax
jmp case.default.0x180024368
mov eax, dword [rbp - 0x80]
mov dword [r15 + 0xfa2c], eax
mov eax, dword [rbp - 0x64]
mov dword [r15 + 0xfa30], eax
jmp case.default.0x180024368
mov eax, dword [rsp + 0x5c]
mov dword [r15 + 0xfa60], eax
mov dword [r15 + 0xfa5c], r10d
jmp case.default.0x180024368
mov eax, dword [r15 + 8]
add eax, 0xfffffff6
cmp eax, 0x28
ja case.0x180024492.28
lea r10, [0x180000000]
cdqe
mov ecx, dword [r10 + rax*4 + 0x28f00]
add rcx, r10
jmp rcx
mov ecx, 0x93
nop dword [rax]
mov eax, ecx
sub eax, 0x91
je 0x1800245b1
sub eax, 1
je 0x180024579
cmp eax, 1
jne 0x1800245b7
mov dword [r15 + 8], 0xa
nop word [rax + rax]
mov r9d, 9
cmp r9d, 9
je 0x18002454b
cmp r9d, 0x14
je 0x180024520
cmp r9d, 0x1f
je 0x180024518
cmp r9d, 0x2a
je 0x18002450d
cmp r9d, 0x35
jne 0x18002459e
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x18002459e
inc dword [rax + 0x10]
jmp 0x18002459e
mov rax, qword [r15]
inc dword [rax + 0xc]
jmp 0x18002459e
mov rax, qword [r15]
dec dword [rax + 8]
jmp 0x18002459e
mov r8, qword [r15]
cmp dword [r8 + 8], 0
je 0x1800245ed
mov rax, qword [r8]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
add dword [r15 + 0x24], 8
or edx, ecx
mov dword [r15 + 0x20], edx
inc qword [r8]
jmp 0x18002459e
mov r8d, dword [r15 + 0x24]
cmp r8d, 8
jl 0x18002459e
mov edx, 0x41
nop word [rax + rax]
cmp edx, 0x41
je 0x180024580
cmp edx, 0xf3
jne 0x180024590
mov r13d, dword [rbp + 0x1c]
lea eax, [r8 - 8]
mov dword [r15 + 0x24], eax
mov ecx, 0x92
jmp 0x1800245b7
mov eax, dword [r15 + 0x20]
lea ecx, [r8 - 8]
shr eax, cl
movzx eax, al
mov dword [rbp + 0x1c], eax
add edx, 0xb2
cmp edx, 0x1a5
jb 0x180024560
add r9d, 0xb
cmp r9d, 0x40
jb 0x1800244d6
jmp 0x1800244d0
cmp r13b, 0x42
jne 0x1800245f4
dec ecx
cmp ecx, 0x90
ja 0x1800244a0
mov ecx, 0x3a
nop word [rax + rax]
mov eax, ecx
sub eax, 0x39
je 0x180024600
cmp eax, 1
jne 0x18002467a
mov dword [r15 + 8], ILClone
jmp 0x18002467a
xor edi, edi
jmp 0x180024877
mov edi, 0xfffffffb
jmp 0x180024877
mov r9d, 0x65
nop word [rax + rax]
mov eax, r9d
sub eax, 0x63
je 0x18002473e
sub eax, 1
je 0x180024713
cmp eax, 1
jne 0x180024756
cmp dword [r15 + 0x24], 8
jl 0x180024756
mov r8d, 0xb8
nop
cmp r8d, 0xb8
je 0x1800246ea
cmp r8d, 0x54d0
je 0x1800246e3
cmp r8d, 0xa8e8
jne 0x1800246fd
mov r13d, dword [rbp + 0x2c]
mov ecx, 0x39
cmp r13b, 0x5a
jne 0x1800245f4
dec ecx
cmp ecx, 0x38
ja 0x1800245d0
mov eax, 0xdd
nop word [rax + rax]
cmp eax, 0xdd
jne 0x1800247dd
mov dword [r15 + 8], ILClone
mov r8d, ILClone
nop dword [rax]
mov eax, r8d
sub eax, 0x10
je 0x180024781
sub eax, 1
je 0x180024768
cmp eax, 1
jne 0x1800247aa
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x1800247aa
inc dword [rax + 0x10]
jmp 0x1800247aa
add dword [r15 + 0x24], 0xfffffff8
jmp 0x1800246fd
mov ecx, dword [r15 + 0x24]
mov edx, dword [r15 + 0x20]
sub ecx, 8
shr edx, cl
movzx eax, dl
mov dword [rbp + 0x2c], eax
add r8d, 0x5418
cmp r8d, 0xfc48
jbe 0x180024640
jmp 0x180024756
mov r8, qword [r15]
cmp dword [r8 + 8], 0
je 0x1800245ed
mov rax, qword [r8]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
add dword [r15 + 0x24], 8
or edx, ecx
mov dword [r15 + 0x20], edx
inc qword [r8]
jmp 0x180024756
mov rax, qword [r15]
dec dword [rax + 8]
mov rax, qword [r15]
inc dword [rax + 0xc]
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x180024756
inc dword [rax + 0x10]
dec r9d
cmp r9d, 0x62
ja 0x180024610
jmp 0x180024600
mov rax, qword [r15]
add dword [r15 + 0x24], 8
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
mov rax, qword [r15]
inc dword [rax + 0xc]
jmp 0x1800247aa
mov ecx, dword [r15 + 0x24]
cmp ecx, 8
jge 0x1800247c0
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x1800245ed
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
mov dword [r15 + 0x20], edx
inc r8d
cmp r8d, 0x13
jb 0x1800246b0
jmp 0x1800246a3
mov r13d, dword [r15 + 0x20]
add ecx, 0xfffffff8
mov dword [r15 + 0x24], ecx
shr r13d, cl
mov eax, 0xdd
cmp r13b, 0x68
jne 0x1800245f4
dec eax
cmp eax, 0xdc
ja 0x180024690
mov ebx, SHSetInstanceExplorer
nop
mov eax, ebx
sub eax, 0xaf
je 0x1800248cb
sub eax, 0x72
je 0x1800248b3
cmp eax, 0x72
jne 0x180024979
cmp byte [r15 + 0x2c], 0
lea r8d, [rax - 0x71]
mov rax, qword [rbp + 0x40]
mov rcx, qword [rax + 0x48]
je 0x180024897
imul edx, dword [r15 + 0x28], 0x30d40
call qword [rax + 0x38]
imul edx, dword [r15 + 0x28], 0x186a0
mov r8d, 1
mov qword [r15 + 0xc58], rax
mov rax, qword [rbp + 0x40]
sar edx, 1
mov rcx, qword [rax + 0x48]
call qword [rax + 0x38]
cmp qword [r15 + 0xc58], 0
mov qword [r15 + 0xc60], rax
je 0x180024869
test rax, rax
jne 0x180024979
mov edi, 0xfffffffd
mov r11d, dword [rsp + 0x50]
mov ebx, dword [rsp + 0x40]
mov edx, dword [rsp + 0x44]
mov esi, dword [rbp - 0x70]
mov r14d, 0xcc
mov dword [r15 + 0xfa24], ebx
mov dword [r15 + 0xfa28], r12d
jmp case.default.0x180024368
imul edx, dword [r15 + 0x28], 0x61a80
call qword [rax + 0x38]
mov qword [r15 + 0xc50], rax
test rax, rax
je 0x180024869
jmp 0x180024979
mov ecx, dword [r15 + 0x28]
lea eax, [rcx - 0x31]
cmp eax, 8
ja 0x1800249c8
lea eax, [rcx - 0x30]
jmp 0x180024975
mov dword [r15 + 8], ILClone
nop dword [rax]
nop word [rax + rax]
mov r8d, 0x5f
mov eax, r8d
sub eax, 0x5f
je 0x180024946
sub eax, 0x56
je 0x180024924
sub eax, 0x56
je 0x180024911
cmp eax, 0x56
jne 0x18002494f
mov rax, qword [r15]
inc dword [rax + 0xc]
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x18002494f
inc dword [rax + 0x10]
jmp 0x18002494f
mov rax, qword [r15]
add dword [r15 + 0x24], 8
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
jmp 0x18002494f
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x1800249d2
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
mov dword [r15 + 0x20], edx
jmp 0x18002494f
mov ecx, dword [r15 + 0x24]
cmp ecx, 8
jge 0x180024960
add r8d, 0x56
cmp r8d, 0x1b7
jb 0x1800248e6
jmp 0x1800248e0
mov eax, dword [r15 + 0x20]
add ecx, 0xfffffff8
shr eax, cl
movzx eax, al
mov dword [r15 + 0x24], ecx
mov ebx, SHSetInstanceExplorer
mov dword [r15 + 0x28], eax
add ebx, 0x72
cmp ebx, 0x205
jb 0x1800247f0
mov r11d, dword [rsp + 0x50]
lea r10, [0x180000000]
mov ecx, 0x18
nop dword [rax]
mov eax, ecx
sub eax, 0x18
je 0x1800249d9
sub eax, 1
je 0x180024a65
cmp eax, 1
jne 0x180024a74
cmp r13b, 0x31
jne 0x180025efb
jmp 0x180024a74
mov edi, 0xfffffffb
jmp 0x18002486e
xor edi, edi
jmp 0x18002486e
mov dword [r15 + 8], ILClone
mov r8d, 4
mov eax, r8d
sub eax, 4
je 0x180024a3d
sub eax, 1
je 0x180024a32
sub eax, 1
je 0x180024a27
sub eax, 1
je 0x180024a1c
cmp eax, 1
jne 0x180024b40
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x180024b40
inc dword [rax + 0x10]
jmp 0x180024b40
mov rax, qword [r15]
inc dword [rax + 0xc]
jmp 0x180024b40
mov rax, qword [r15]
dec dword [rax + 8]
jmp 0x180024b40
mov rax, qword [r15]
inc qword [rax]
jmp 0x180024b40
cmp dword [r15 + 0x24], 8
jl 0x180024b1f
mov edx, 0x3b
nop dword [rax]
cmp edx, 0x3b
je 0x180024afb
cmp edx, 0x2044
jne 0x180024b0d
mov ecx, 0x19
cmp r13b, 0x17
je case.0x180024492.42
inc ecx
cmp ecx, 0x1b
jb 0x1800249a0
mov ecx, 0x7e
mov eax, ecx
sub eax, 0x7d
je 0x180024ba6
cmp eax, 1
jne 0x180024bb0
mov dword [r15 + 8], ILClone
mov r9d, 0xf0
nop word [rax + rax]
mov eax, r9d
sub eax, 0xef
je 0x180024b59
cmp eax, 1
jne 0x180024b77
mov r8d, dword [r15 + 0x24]
cmp r8d, 8
jge 0x180024b90
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180024b52
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
lea eax, [r8 + 8]
or edx, ecx
mov dword [r15 + 0x24], eax
mov dword [r15 + 0x20], edx
jmp 0x180024b77
mov ecx, dword [r15 + 0x24]
mov r13d, dword [r15 + 0x20]
sub ecx, 8
mov dword [r15 + 0x24], ecx
shr r13d, cl
add edx, 0x2009
cmp edx, 0x4012
jbe 0x180024a50
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180024b52
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
add dword [r15 + 0x24], 8
mov dword [r15 + 0x20], edx
inc r8d
cmp r8d, 9
jb 0x1800249e7
jmp 0x1800249e1
xor edi, edi
jmp 0x180024873
mov rax, qword [r15]
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
mov rax, qword [r15]
inc dword [rax + 0xc]
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x180024b77
inc dword [rax + 0x10]
dec r9d
cmp r9d, 0xee
ja 0x180024ab0
jmp 0x180024aa0
mov r13d, dword [r15 + 0x20]
lea ecx, [r8 - 8]
mov dword [r15 + 0x24], ecx
shr r13d, cl
mov ecx, 0x7e
jmp 0x180024bb0
cmp r13b, 0x41
jne 0x180025efb
dec ecx
cmp ecx, 0x7c
ja 0x180024a84
mov eax, SHSetInstanceExplorer
cmp eax, 0xaf
je 0x180024be1
cmp eax, 0x13d
jne 0x180024c7f
cmp r13b, 0x59
jne 0x180025efb
jmp 0x180024c7f
mov dword [r15 + 8], ILClone
nop dword [rax]
mov r8d, 0x80
mov eax, r8d
sub eax, 0x80
je 0x180024c44
sub eax, 1
je 0x180024c39
sub eax, 1
je 0x180024c2e
cmp eax, 1
jne 0x180024d47
mov rax, qword [r15]
inc dword [rax + 0xc]
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x180024d47
inc dword [rax + 0x10]
jmp 0x180024d47
mov rax, qword [r15]
dec dword [rax + 8]
jmp 0x180024d47
mov rax, qword [r15]
inc qword [rax]
jmp 0x180024d47
cmp dword [r15 + 0x24], 8
jl 0x180024d22
mov edx, 0xf8
nop dword [rax]
nop dword [rax + rax]
mov eax, edx
sub eax, 0xf8
je 0x180024cfd
cmp eax, 1
jne 0x180024d14
mov r13d, dword [rbp + 0x30]
mov eax, SHSetInstanceExplorer
add eax, 0x8e
cmp eax, 0x1cb
jb 0x180024bc0
mov ecx, 0x9c
nop dword [rax]
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x9c
je 0x180024d5c
cmp eax, 0x77
jne 0x180024cc1
mov ecx, 0x113
cmp r13b, 0x26
jne 0x180025efb
add ecx, 0x77
cmp ecx, 0x18a
jb 0x180024ca0
mov ecx, 0xbc
mov eax, ecx
sub eax, 0xba
je 0x180024ebe
sub eax, 1
je 0x180024e51
cmp eax, 1
jne 0x180024ecd
mov dword [r15 + 8], reloc.SHELL32.dll_ILClone
jmp 0x180024ecd
mov ecx, dword [r15 + 0x24]
mov eax, dword [r15 + 0x20]
sub ecx, 8
shr eax, cl
movzx eax, al
mov dword [rbp + 0x30], eax
mov dword [r15 + 0x24], ecx
inc edx
cmp edx, 0xfa
jb 0x180024c60
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180024b52
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
add dword [r15 + 0x24], 8
mov dword [r15 + 0x20], edx
inc r8d
cmp r8d, 0x84
jb 0x180024bf6
jmp 0x180024bf0
mov dword [r15 + 8], reloc.SHELL32.dll_ILRemoveLastID
nop dword [rax]
nop dword [rax + rax]
mov r8d, 0x118
nop word [rax + rax]
mov eax, r8d
sub eax, 0x114
je 0x180024e30
sub eax, 1
je 0x180024e28
sub eax, 1
je 0x180024e15
sub eax, 1
je 0x180024dfd
cmp eax, 1
jne 0x180024e3c
cmp dword [r15 + 0x24], 8
jl 0x180024dee
mov edx, 0xef
nop word [rax + rax]
mov eax, edx
sub eax, 0xee
je 0x180024cb2
cmp eax, 1
jne 0x180024de4
mov ecx, dword [r15 + 0x24]
mov r13d, dword [r15 + 0x20]
sub ecx, 8
mov dword [r15 + 0x24], ecx
shr r13d, cl
dec edx
cmp edx, 0xed
ja 0x180024dc0
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180024b52
jmp 0x180024e3c
mov rax, qword [r15]
mov edx, dword [r15 + 0x20]
shl edx, 8
mov rcx, qword [rax]
movzx eax, byte [rcx]
or edx, eax
mov dword [r15 + 0x20], edx
jmp 0x180024e3c
mov rax, qword [r15]
add dword [r15 + 0x24], 8
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
jmp 0x180024e3c
mov rax, qword [r15]
inc dword [rax + 0xc]
jmp 0x180024e3c
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x180024e3c
inc dword [rax + 0x10]
dec r8d
cmp r8d, 0x113
ja 0x180024d80
jmp 0x180024d70
mov r8d, 0x59
mov eax, r8d
sub eax, 0x59
je 0x180024e99
sub eax, 0x6a
je 0x180024e82
cmp eax, 0x6a
jne 0x180024f6a
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x180024f6a
inc dword [rax + 0x10]
jmp 0x180024f6a
mov rax, qword [r15]
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
mov rax, qword [r15]
inc dword [rax + 0xc]
jmp 0x180024f6a
cmp dword [r15 + 0x24], 8
jl 0x180024f45
mov edx, 0xdf
nop dword [rax]
mov eax, edx
sub eax, 0xdf
je 0x180024f25
cmp eax, 1
jne 0x180024f37
mov ecx, 0xba
cmp r13b, 0x53
jne 0x180025efb
dec ecx
cmp ecx, 0xb9
ja 0x180024cd1
mov ebx, 0x3f
cmp ebx, 0x3f
je 0x1800250bd
cmp ebx, 0x30ba
je 0x180024fc0
cmp ebx, 0x6135
je 0x180024fae
cmp ebx, 0x91b0
je 0x180024f80
cmp ebx, 0xc22b
jne 0x1800250c5
mov dword [r15 + 0xc68], 0
jmp 0x1800250c5
mov ecx, dword [r15 + 0x24]
mov r13d, dword [r15 + 0x20]
sub ecx, 8
mov dword [r15 + 0x24], ecx
shr r13d, cl
inc edx
cmp edx, 0xe1
jb 0x180024eb0
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180024b52
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
add dword [r15 + 0x24], 8
mov dword [r15 + 0x20], edx
add r8d, 0x6a
cmp r8d, 0x197
jb 0x180024e57
jmp 0x180024e51
cmp dword [r15 + 0x34], 2
jl 0x1800250c5
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, dword [r15 + 0x30]
lea rdx, str.LayerElementTangent
mov rcx, rax
call fcn.180085950
jmp 0x1800250c5
inc dword [r15 + 0x30]
jmp 0x1800250c5
mov r8d, 0xc3
nop word [rax + rax]
cmp r8d, 0x186
ja 0x18002506f
je 0x18002505c
mov eax, r8d
sub eax, 0xc3
je 0x180025021
sub eax, 0x41
je 0x180025012
cmp eax, 0x41
jne 0x180025092
mov rax, qword [r15]
mov edx, dword [r15 + 0x20]
shl edx, 8
mov rcx, qword [rax]
movzx eax, byte [rcx]
or edx, eax
mov dword [r15 + 0x20], edx
jmp 0x180025092
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x1800249d2
jmp 0x180025092
cmp dword [r15 + 0x24], 8
jl 0x180025092
mov edx, 0xd3
nop dword [rax]
mov eax, edx
sub eax, 0xd2
je 0x1800250a8
cmp eax, 1
jne 0x180025050
mov ecx, dword [r15 + 0x24]
mov r13d, dword [r15 + 0x20]
sub ecx, 8
mov dword [r15 + 0x24], ecx
shr r13d, cl
dec edx
cmp edx, 0xd1
ja 0x180025030
jmp 0x180025092
mov rax, qword [r15]
add dword [r15 + 0x24], 8
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
jmp 0x180025092
mov eax, r8d
sub eax, 0x1c7
je 0x18002508c
cmp eax, 0x41
jne 0x180025092
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x180025092
inc dword [rax + 0x10]
jmp 0x180025092
mov rax, qword [r15]
inc dword [rax + 0xc]
add r8d, 0x41
cmp r8d, 0x249
jb 0x180024fd0
jmp 0x180024fc0
mov ebx, 0x30ba
cmp r13b, 0x59
je 0x1800250c5
mov edi, 0xfffffffc
jmp 0x18002486e
mov dword [r15 + 8], 0x13
add ebx, 0x307b
cmp ebx, 0xf267
jbe 0x180024ee0
mov r11d, dword [rsp + 0x50]
mov edx, 0xf0
mov eax, edx
sub eax, 0xee
je 0x1800251e3
sub eax, 1
je 0x180025110
cmp eax, 1
jne 0x1800251fa
mov dword [r15 + 8], 0x14
jmp 0x1800251fa
mov r9d, 0xe6
mov eax, r9d
sub eax, 0xe6
je 0x18002516f
sub eax, 1
je 0x180025149
cmp eax, 1
jne 0x1800251ce
mov rax, qword [r15]
inc dword [rax + 0xc]
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x1800251ce
inc dword [rax + 0x10]
jmp 0x1800251ce
mov edx, dword [r15 + 0x20]
mov r8, qword [r15]
shl edx, 8
mov rax, qword [r8]
movzx ecx, byte [rax]
add dword [r15 + 0x24], 8
or edx, ecx
mov dword [r15 + 0x20], edx
inc qword [r8]
mov rax, qword [r15]
dec dword [rax + 8]
jmp 0x1800251ce
cmp dword [r15 + 0x24], 8
jl 0x1800251c1
mov edx, 0xc3
nop dword [rax + rax]
mov eax, edx
sub eax, 0xc3
je 0x18002519f
sub eax, 0x72
je 0x180025198
cmp eax, 0x72
jne 0x1800251b6
lea edx, [rax + 0x7d]
jmp 0x1800251fa
movzx r13d, byte [rbp + 0x38]
jmp 0x1800251b6
mov ecx, dword [r15 + 0x24]
mov eax, dword [r15 + 0x20]
sub ecx, 8
shr eax, cl
movzx eax, al
mov dword [rbp + 0x38], eax
mov dword [r15 + 0x24], ecx
add edx, 0x72
cmp edx, 0x219
jb 0x180025180
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180024b52
inc r9d
cmp r9d, 0xe9
jb 0x180025116
jmp 0x180025110
mov ecx, dword [r15 + 0xc68]
shl ecx, 8
movzx eax, r13b
or ecx, eax
mov dword [r15 + 0xc68], ecx
dec edx
cmp edx, 0xed
ja 0x1800250e1
mov edx, 0x58
nop dword [rax]
mov eax, edx
sub eax, 0x58
je 0x1800252c4
cmp eax, 1
jne 0x18002523c
mov ecx, dword [r15 + 0xc68]
mov edx, 0x59
shl ecx, 8
movzx eax, r13b
or ecx, eax
mov dword [r15 + 0xc68], ecx
inc edx
cmp edx, 0x5a
jb 0x180025210
mov edx, 0xa
nop dword [rax + rax]
mov eax, edx
sub eax, 9
je 0x180025462
cmp eax, 1
jne 0x180025479
mov dword [r15 + 8], 0x16
nop dword [rax]
mov r8d, 0x91
nop word [rax + rax]
cmp r8d, 0xeb0f
ja 0x180025423
je 0x180025415
cmp r8d, 0x91
je 0x1800253c7
cmp r8d, 0x4ebb
je 0x1800253a2
cmp r8d, 0x9ce5
jne 0x180025449
add dword [r15 + 0x24], 8
jmp 0x180025449
mov dword [r15 + 8], 0x15
nop dword [rax]
mov r8d, 0x5e
nop word [rax + rax]
mov eax, r8d
sub eax, 0x5a
je 0x180025384
sub eax, 1
je 0x18002537c
sub eax, 1
je 0x18002536e
sub eax, 1
je 0x180025367
cmp eax, 1
jne 0x180025390
cmp dword [r15 + 0x24], 8
jl 0x180025345
mov edx, 0x8a
mov eax, edx
sub eax, 0x8a
je 0x180025328
cmp eax, 0x2c
je 0x180025220
jmp 0x18002533a
mov ecx, dword [r15 + 0x24]
mov r13d, dword [r15 + 0x20]
sub ecx, 8
mov dword [r15 + 0x24], ecx
shr r13d, cl
add edx, 0x2c
cmp edx, 0xe2
jb 0x180025314
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180024b52
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
mov dword [r15 + 0x20], edx
jmp 0x180025390
add dword [r15 + 0x24], 8
jmp 0x180025390
mov rax, qword [r15]
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
jmp 0x180025390
mov rax, qword [r15]
inc dword [rax + 0xc]
jmp 0x180025390
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x180025390
inc dword [rax + 0x10]
dec r8d
cmp r8d, 0x59
ja 0x1800252e0
jmp 0x1800252d0
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180024b52
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
mov dword [r15 + 0x20], edx
jmp 0x180025449
cmp dword [r15 + 0x24], 8
jl 0x180025449
mov edx, 0x43
cmp edx, 0x43
je 0x1800253ee
cmp edx, 0xc5
jne 0x180025405
mov r13d, dword [rbp + 0x3c]
mov edx, 0xa
jmp 0x180025479
mov ecx, dword [r15 + 0x24]
mov eax, dword [r15 + 0x20]
sub ecx, 8
shr eax, cl
movzx eax, al
mov dword [rbp + 0x3c], eax
mov dword [r15 + 0x24], ecx
add edx, 0x82
cmp edx, 0x147
jb 0x1800253d3
jmp 0x180025449
mov rax, qword [r15]
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
jmp 0x180025449
cmp r8d, 0x13939
je 0x180025443
cmp r8d, 0x18763
jne 0x180025449
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x180025449
inc dword [rax + 0x10]
jmp 0x180025449
mov rax, qword [r15]
inc dword [rax + 0xc]
add r8d, 0x4e2a
cmp r8d, 0x1d4fc
jbe 0x180025280
jmp 0x180025270
mov ecx, dword [r15 + 0xc68]
shl ecx, 8
movzx eax, r13b
or ecx, eax
mov dword [r15 + 0xc68], ecx
dec edx
cmp edx, 8
ja 0x180025250
mov edx, 0x124
nop dword [rax]
mov eax, edx
sub eax, 0x123
je 0x180025551
cmp eax, 1
jne 0x18002556d
mov dword [r15 + 8], 0x17
nop
mov r8d, 0x37
mov eax, r8d
sub eax, 0x37
je 0x180025531
sub eax, 1
je 0x18002550c
sub eax, 1
je 0x1800254fc
sub eax, 1
je 0x1800254eb
cmp eax, 1
jne 0x1800255be
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x1800255be
inc dword [rax + 0x10]
jmp 0x1800255be
mov rax, qword [r15]
dec dword [rax + 8]
mov rax, qword [r15]
inc dword [rax + 0xc]
jmp 0x1800255be
mov rax, qword [r15]
add dword [r15 + 0x24], 8
inc qword [rax]
jmp 0x1800255be
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180024b52
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
mov dword [r15 + 0x20], edx
jmp 0x1800255be
cmp dword [r15 + 0x24], 8
jl 0x1800255be
mov edx, 0xab
cmp edx, 0xab
je 0x18002559e
cmp edx, 0x137
jne 0x1800255b0
mov ecx, dword [r15 + 0xc68]
mov edx, 0x123
shl ecx, 8
movzx eax, r13b
or ecx, eax
mov dword [r15 + 0xc68], ecx
dec edx
cmp edx, 0x122
ja 0x180025490
mov eax, 0xc6
xor r10d, r10d
cmp eax, 0xc6
je 0x1800255d0
cmp eax, 0x882
jne 0x180025666
mov dword [r15 + 0x38], r10d
jmp 0x180025666
mov ecx, dword [r15 + 0x24]
mov r13d, dword [r15 + 0x20]
sub ecx, 8
mov dword [r15 + 0x24], ecx
shr r13d, cl
add edx, 0x8c
cmp edx, 0x1c3
jb 0x180025541
inc r8d
cmp r8d, 0x3c
jb 0x1800254b6
jmp 0x1800254b0
mov dword [r15 + 8], 0x18
nop dword [rax + rax]
mov r9d, 0xc3
cmp r9d, 0xc3
je 0x180025631
cmp r9d, 0x2b6b
je 0x18002561a
cmp r9d, 0x5613
jne 0x1800256f7
mov rax, qword [r15]
cmp dword [rax + 0xc], r10d
jne 0x1800256f7
inc dword [rax + 0x10]
jmp 0x1800256f7
mov rax, qword [r15]
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
mov rax, qword [r15]
inc dword [rax + 0xc]
jmp 0x1800256f7
mov r8d, dword [r15 + 0x24]
cmp r8d, 1
jl 0x1800256cf
mov edx, 0x88
mov eax, edx
sub eax, 0x88
je 0x1800256b1
cmp eax, 1
jne 0x1800256c1
lea eax, [r8 - 1]
mov dword [r15 + 0x24], eax
mov eax, dword [rbp + 0x48]
mov byte [r15 + 0x14], al
mov eax, 0xc6
add eax, 0x7bc
cmp eax, 0xf78
jbe 0x180025583
lea r10, [0x180000000]
mov edx, PathMakeUniqueName
mov eax, edx
sub eax, 0x2b
je 0x1800257e6
sub eax, 0x5f
je 0x180025710
cmp eax, 0x5f
jne 0x1800257ee
mov ecx, dword [r15 + 0x38]
shl ecx, 8
movzx eax, r13b
or ecx, eax
mov dword [r15 + 0x38], ecx
jmp 0x1800257ee
mov eax, dword [r15 + 0x20]
lea ecx, [r8 - 1]
shr eax, cl
and eax, 1
mov dword [rbp + 0x48], eax
inc edx
cmp edx, 0x8a
jb 0x180025644
mov rax, qword [r15]
cmp dword [rax + 8], r10d
je 0x180024b52
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
lea eax, [r8 + 8]
or edx, ecx
mov dword [r15 + 0x24], eax
mov dword [r15 + 0x20], edx
add r9d, 0x2aa8
cmp r9d, 0x7ff8
jbe 0x1800255e6
jmp 0x1800255e0
mov r8d, 0xb6
mov eax, r8d
sub eax, 0xb6
je 0x180025766
sub eax, 1
je 0x180025753
sub eax, 1
je 0x180025748
cmp eax, 1
jne 0x1800257d1
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x1800257d1
inc dword [rax + 0x10]
jmp 0x1800257d1
mov rax, qword [r15]
inc dword [rax + 0xc]
jmp 0x1800257d1
mov rax, qword [r15]
add dword [r15 + 0x24], 8
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
jmp 0x1800257d1
cmp dword [r15 + 0x24], 8
jl 0x1800257b1
mov edx, 8
mov eax, edx
sub eax, 8
je 0x180025791
sub eax, 1
je 0x18002578a
cmp eax, 1
jne 0x1800257aa
mov edx, 0x8a
jmp 0x1800257ee
movzx r13d, byte [rbp - 8]
jmp 0x1800257aa
mov ecx, dword [r15 + 0x24]
mov eax, dword [r15 + 0x20]
sub ecx, 8
shr eax, cl
movzx r9d, al
mov dword [rbp - 8], r9d
mov dword [r15 + 0x24], ecx
inc edx
cmp edx, 0xb
jb 0x180025772
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180024b52
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
mov dword [r15 + 0x20], edx
inc r8d
cmp r8d, 0xba
jb 0x180025716
jmp 0x180025710
mov dword [r15 + 8], 0x19
add edx, 0x5f
cmp edx, 0x148
jb 0x180025682
mov edx, 0x9d
mov eax, edx
sub eax, 0x9b
je 0x1800258c6
sub eax, 1
je 0x180025830
cmp eax, 1
jne 0x1800258d7
mov dword [r15 + 8], 0x1a
jmp 0x1800258d7
mov r9d, 0xe0
mov eax, r9d
sub eax, 0xde
je 0x18002588c
sub eax, 1
je 0x18002587e
cmp eax, 1
jne 0x18002589e
mov r8d, dword [r15 + 0x24]
cmp r8d, 8
jge 0x1800258b0
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180024b52
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
lea eax, [r8 + 8]
or edx, ecx
mov dword [r15 + 0x24], eax
mov dword [r15 + 0x20], edx
jmp 0x18002589e
mov rax, qword [r15]
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
jmp 0x18002589e
mov rax, qword [r15]
inc dword [rax + 0xc]
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x18002589e
inc dword [rax + 0x10]
dec r9d
cmp r9d, 0xdd
ja 0x180025836
jmp 0x180025830
mov r13d, dword [r15 + 0x20]
lea ecx, [r8 - 8]
mov dword [r15 + 0x24], ecx
shr r13d, cl
mov edx, 0x9c
jmp 0x1800258d7
mov ecx, dword [r15 + 0x38]
shl ecx, 8
movzx eax, r13b
or ecx, eax
mov dword [r15 + 0x38], ecx
dec edx
cmp edx, 0x9a
ja 0x180025802
mov r9d, dword [rbp - 0x34]
mov ebx, 0xf6
nop
lea eax, [rbx - 0xf1]
cmp eax, 5
ja case.default.0x18002590a
mov ecx, dword [r10 + rax*4 + 0x28fa4]
add rcx, r10
jmp rcx
mov eax, dword [r15 + 0xc78]
add eax, 2
mov dword [rbp - 0x64], eax
jmp case.default.0x18002590a
xor r10d, r10d
mov dword [rsp + 0x40], r10d
xor r9d, r9d
nop dword [rax]
movsxd rax, r10d
cmp byte [rax + r15 + 0xd7c], 0
je 0x180025a33
xor r12d, r12d
mov dword [rsp + 0x48], r12d
nop word [rax + rax]
mov edx, 0xbd
nop word [rax + rax]
cmp edx, 0xbd
jne 0x180025a13
mov dword [r15 + 8], 0x1d
nop dword [rax]
nop dword [rax + rax]
mov r8d, 0xc1
mov eax, r8d
sub eax, 0xc1
je 0x1800259ca
sub eax, 1
je 0x1800259b9
cmp eax, 1
jne 0x180025ac3
mov rax, qword [r15]
inc dword [rax + 0xc]
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x180025ac3
inc dword [rax + 0x10]
jmp 0x180025ac3
mov rax, qword [r15]
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
jmp 0x180025ac3
cmp dword [r15 + 0x24], 1
jl 0x180025a9e
mov edx, 0xc3
nop word [rax + rax]
mov eax, edx
sub eax, 0xc3
je 0x180025a7a
sub eax, 0x59
je 0x180025a6f
cmp eax, 0x59
jne 0x180025a8f
lea edx, [rax + 0x64]
cmp r13b, 1
jne 0x180025a13
lea eax, [r9 + r12]
movsxd rcx, eax
mov byte [rcx + r15 + 0xc7c], r13b
dec edx
cmp edx, 0xbc
ja 0x180025960
inc r12d
mov dword [rsp + 0x48], r12d
cmp r12d, 0x10
jl 0x180025950
inc r10d
add r9d, 0x10
mov dword [rsp + 0x40], r10d
cmp r9d, 0x100
jl 0x180025930
xor r8d, r8d
mov rdx, r15
mov ecx, 0xd2
call fcn.1800684c0
cmp dword [r15 + 0xc78], 0
je 0x1800250b3
jmp case.default.0x18002590a
dec dword [r15 + 0x24]
movzx r13d, byte [rbp - 4]
jmp 0x180025a8f
mov ecx, dword [r15 + 0x24]
mov r11d, dword [r15 + 0x20]
dec ecx
shr r11d, cl
and r11d, 1
mov dword [rbp - 4], r11d
add edx, 0x59
cmp edx, 0x1ce
jb 0x1800259e0
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x1800249d2
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
add dword [r15 + 0x24], 8
mov dword [r15 + 0x20], edx
inc r8d
cmp r8d, 0xc4
jb 0x180025986
jmp 0x180025980
lea rcx, [r15 + 0xc7c]
xor edx, edx
mov r8d, 0x100
call sub.VCRUNTIME140.dll_memset
mov eax, 0x100
mov dword [rsp + 0x40], eax
jmp case.default.0x18002590a
mov ecx, dword [r15 + 0x38]
shl ecx, 8
movzx eax, r13b
or ecx, eax
mov dword [r15 + 0x38], ecx
jl 0x1800250b3
imul eax, dword [r15 + 0x28], 0x186a0
add eax, 0xa
cmp ecx, eax
jg 0x1800250b3
xor edx, edx
mov dword [rsp + 0x40], edx
nop word [rax + rax]
mov ecx, 0x73
mov eax, ecx
sub eax, 0x1c
je 0x180025c68
sub eax, 0x57
je 0x180025c68
sub eax, 0x14
je 0x180025b60
cmp eax, 0x14
je 0x180025c07
jmp 0x180025c70
mov r8d, 0x113
mov eax, r8d
sub eax, 0x113
je 0x180025be0
sub eax, 1
je 0x180025bb9
sub eax, 1
je 0x180025ba8
sub eax, 1
je 0x180025b9d
cmp eax, 1
jne 0x180025c48
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x180025c48
inc dword [rax + 0x10]
jmp 0x180025c48
mov rax, qword [r15]
inc dword [rax + 0xc]
jmp 0x180025c48
mov rax, qword [r15]
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
jmp 0x180025c48
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x1800249d2
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
add dword [r15 + 0x24], 8
mov dword [r15 + 0x20], edx
jmp 0x180025c48
cmp dword [r15 + 0x24], 1
jl 0x180025c48
mov edx, 0xd1
nop dword [rax]
mov eax, edx
sub eax, 0xd1
je 0x180025c29
sub eax, 1
je 0x180025c1f
cmp eax, 1
jne 0x180025c3e
mov edx, dword [rsp + 0x40]
movsxd rax, edx
mov ecx, reloc.SHELL32.dll_ILFree
cmp r13b, 1
jne 0x180025c5d
mov byte [rax + r15 + 0xd7c], r13b
jmp 0x180025c70
dec dword [r15 + 0x24]
movzx r13d, r9b
jmp 0x180025c3e
mov ecx, dword [r15 + 0x24]
mov r9d, dword [r15 + 0x20]
dec ecx
shr r9d, cl
and r9d, 1
mov dword [rbp - 0x34], r9d
inc edx
cmp edx, 0xd4
jb 0x180025bf0
inc r8d
cmp r8d, 0x118
jb 0x180025b66
jmp 0x180025b60
mov byte [rax + r15 + 0xd7c], 0
jmp 0x180025c70
mov dword [r15 + 8], 0x1c
add ecx, 0x14
cmp ecx, 0xaf
jb 0x180025b35
inc edx
mov dword [rsp + 0x40], edx
cmp edx, 0x10
jl 0x180025b30
jmp case.default.0x18002590a
mov dword [r15 + 8], 0x1b
nop dword [rax + rax]
mov r9d, 0x54
cmp r9d, 0x54
je 0x180025d1b
cmp r9d, 0xccc
je 0x180025d0c
cmp r9d, 0x1944
je 0x180025ce6
cmp r9d, 0x25bc
jne 0x180025d74
mov rax, qword [r15]
inc dword [rax + 0xc]
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x180025d74
inc dword [rax + 0x10]
jmp 0x180025d74
mov edx, dword [r15 + 0x20]
mov r8, qword [r15]
shl edx, 8
mov rax, qword [r8]
movzx ecx, byte [rax]
add dword [r15 + 0x24], 8
or edx, ecx
mov dword [r15 + 0x20], edx
inc qword [r8]
mov rax, qword [r15]
dec dword [rax + 8]
jmp 0x180025d74
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x1800249d2
jmp 0x180025d74
cmp dword [r15 + 0x24], 8
jl 0x180025d74
mov edx, 0x52
mov eax, edx
sub eax, 0x52
je 0x180025d56
cmp eax, 1
jne 0x180025d6d
mov r13d, dword [rbp]
mov ebx, 0xf5
dec ebx
cmp ebx, 0xf0
jbe 0x180025d8d
mov r9d, dword [rbp - 0x34]
lea r10, [0x180000000]
jmp 0x1800258f0
mov ecx, dword [r15 + 0x24]
mov eax, dword [r15 + 0x20]
sub ecx, 8
shr eax, cl
movzx eax, al
mov dword [rbp], eax
mov dword [r15 + 0x24], ecx
inc edx
cmp edx, 0x54
jb 0x180025d27
add r9d, 0xc78
cmp r9d, 0x31e0
jbe 0x180025ca6
jmp 0x180025ca0
mov r11d, dword [rsp + 0x50]
mov ecx, 0x16
mov eax, ecx
sub eax, 0x16
je 0x180025dbb
cmp eax, 1
jne 0x180025e7f
mov eax, dword [rbp - 0x68]
add eax, 0xfffffffe
cmp eax, 4
ja 0x180025efb
jmp 0x180025e7f
mov dword [r15 + 8], 0x1e
nop dword [rax]
nop word [rax + rax]
mov r8d, 0x17
mov eax, r8d
sub eax, 0x17
je 0x180025e47
sub eax, 0x71
je 0x180025e22
sub eax, 0x71
je 0x180025e12
cmp eax, 0x71
jne 0x180025f2b
mov rax, qword [r15]
dec dword [rax + 8]
mov rax, qword [r15]
inc dword [rax + 0xc]
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x180025f2b
inc dword [rax + 0x10]
jmp 0x180025f2b
mov rax, qword [r15]
add dword [r15 + 0x24], 8
inc qword [rax]
jmp 0x180025f2b
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180024b52
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
mov dword [r15 + 0x20], edx
jmp 0x180025f2b
cmp dword [r15 + 0x24], 3
jl 0x180025f2b
mov edx, 0x55
nop word [rax + rax]
mov eax, edx
sub eax, 0x55
je 0x180025f05
cmp eax, 0x30
jne 0x180025f1c
mov eax, dword [rbp + 4]
mov dword [rbp - 0x68], eax
mov ecx, 0x16
inc ecx
cmp ecx, 0x18
jb 0x180025d97
mov dword [r15 + 8], 0x1f
mov r8d, 0x25
nop dword [rax + rax]
mov eax, r8d
sub eax, 0x22
je 0x180025fb6
sub eax, 1
je 0x180025fa8
sub eax, 1
je 0x180025f9b
cmp eax, 1
jne 0x180025fc2
cmp dword [r15 + 0x24], 0xf
jl 0x180025f79
mov edx, 0x103
cmp edx, 0x103
je 0x180025f4e
cmp edx, 0xb21
je 0x180025f41
cmp edx, 0x153f
jne 0x180025f67
mov edi, dword [rbp - 0x40]
cmp edi, 1
jge 0x180025fd4
mov edi, 0xfffffffc
jmp 0x180024873
mov ecx, dword [r15 + 0x24]
mov eax, dword [r15 + 0x20]
sub ecx, 3
shr eax, cl
and eax, 7
mov dword [r15 + 0x24], ecx
mov dword [rbp + 4], eax
add edx, 0x30
cmp edx, 0xb5
jb 0x180025e60
add r8d, 0x71
cmp r8d, 0x1db
jb 0x180025dd6
jmp 0x180025dd0
mov eax, dword [rbp + 8]
add dword [r15 + 0x24], 0xfffffff1
mov dword [rbp - 0x40], eax
jmp 0x180025f67
mov ecx, dword [r15 + 0x24]
mov r9d, dword [r15 + 0x20]
sub ecx, 0xf
shr r9d, cl
and r9d, 0x7fff
mov dword [rbp + 8], r9d
add edx, 0xa1e
cmp edx, 0x1e5a
jbe 0x180025ed7
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180024b52
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
mov dword [r15 + 0x20], edx
jmp 0x180025fc2
mov rax, qword [r15]
add dword [r15 + 0x24], 8
inc qword [rax]
jmp 0x180025fc2
mov rax, qword [r15]
dec dword [rax + 8]
mov rax, qword [r15]
inc dword [rax + 0xc]
jmp 0x180025fc2
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x180025fc2
inc dword [rax + 0x10]
dec r8d
cmp r8d, 0x21
ja 0x180025ea0
jmp 0x180025e92
xor r9d, r9d
mov r10d, r9d
mov dword [rsp + 0x40], r9d
nop
mov ecx, 0x33
cmp ecx, 0x33
jne 0x180026136
mov r12d, r9d
mov dword [rsp + 0x48], r9d
nop word [rax + rax]
mov ecx, 0x50
mov eax, ecx
sub eax, 0x20
je 0x180026031
sub eax, 0x30
je 0x180026031
cmp eax, 1
jne 0x1800260c5
inc r12d
mov dword [rsp + 0x48], r12d
cmp r12d, dword [rbp - 0x68]
jge 0x180025efb
jmp 0x1800260c5
mov dword [r15 + 8], 0x20
nop dword [rax]
mov r9d, 0xc6
mov eax, r9d
sub eax, 0xc6
je 0x18002608f
sub eax, 0x5b
je 0x180026073
cmp eax, 0x5b
jne 0x18002610d
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x18002610d
inc dword [rax + 0x10]
jmp 0x18002610d
mov rax, qword [r15]
add dword [r15 + 0x24], 8
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
mov rax, qword [r15]
inc dword [rax + 0xc]
jmp 0x18002610d
mov r8d, dword [r15 + 0x24]
cmp r8d, 1
jl 0x1800260ed
mov edx, 0x1a
nop
mov eax, edx
sub eax, 0x1a
je 0x1800260d5
cmp eax, 1
jne 0x1800260e6
lea eax, [r8 - 1]
mov dword [r15 + 0x24], eax
mov eax, dword [rsp + 0x4c]
movzx r13d, al
mov ecx, 0x50
test al, al
je 0x180026123
inc ecx
cmp ecx, 0x52
jb 0x180026005
jmp 0x180026000
mov eax, dword [r15 + 0x20]
lea ecx, [r8 - 1]
shr eax, cl
and eax, 1
mov dword [rsp + 0x4c], eax
inc edx
cmp edx, 0x1c
jb 0x1800260a0
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180024b52
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
mov dword [r15 + 0x20], edx
add r9d, 0x5b
cmp r9d, 0x1d7
jb 0x180026046
jmp 0x180026040
movsxd rax, r10d
mov ecx, 0x33
xor r9d, r9d
mov byte [rax + r15 + 0x651e], r12b
add ecx, 0xbd
movzx ebx, r13b
cmp ecx, 0xf0
jb 0x180025fe5
inc r10d
mov dword [rsp + 0x40], r10d
cmp r10d, edi
jl 0x180025fe0
mov r11d, 0xf2
mov dword [rsp + 0x40], r10d
nop dword [rax + rax]
mov r14d, dword [rbp - 0x68]
cmp r11d, 0xf2
jne 0x180026237
xor dl, dl
test r14d, r14d
jle 0x1800261a1
nop dword [rax + rax]
movzx eax, dl
mov byte [rbp + rax + 0x64], dl
inc dl
movzx eax, dl
cmp eax, r14d
jl 0x180026190
movzx r14d, byte [rsp + 0x64]
lea r9, [r15 + 0x651e]
mov r10, rdi
mov dword [rsp + 0x40], edi
nop word [rax + rax]
mov r8d, 0x45
cmp r8d, 0x45
je 0x180026211
cmp r8d, 0x1773
je 0x1800261eb
cmp r8d, 0x2ea1
jne 0x180026215
mov byte [rbp + 0x64], r14b
mov byte [r9 - 0x4652], r14b
jmp 0x180026215
movzx eax, dl
lea rcx, [rbp + 0x64]
add rcx, rax
movzx r14d, byte [rcx]
test dl, dl
je 0x180026215
nop dword [rax]
movzx eax, byte [rcx - 1]
mov byte [rcx], al
lea rcx, [rcx - 1]
add dl, 0xff
jne 0x180026200
jmp 0x180026215
movzx edx, byte [r9]
add r8d, 0x172e
cmp r8d, 0x458a
jbe 0x1800261c6
inc r9
mov byte [rsp + 0x64], r14b
sub r10, 1
jne 0x1800261c0
mov r14d, dword [rbp - 0x68]
add r11d, 0x67
cmp r11d, 0x159
jb 0x180026170
xor r9d, r9d
movsxd r14, r14d
mov dword [rbp - 0x80], r9d
mov edi, r9d
mov qword [rbp - 0x10], r14
mov dword [rbp - 0x78], r13d
test r14, r14
jle 0x180026618
movzx r13d, bl
mov r11d, r9d
mov dword [rbp - 0x78], r13d
mov r10d, 0x88
nop word [rax + rax]
mov eax, r10d
sub eax, 0x21
je 0x1800265ea
sub eax, 0x67
je 0x1800265ea
cmp eax, 1
jne 0x1800265f2
nop
mov r8d, 0x83
nop word [rax + rax]
mov eax, r8d
sub eax, 0x80
je 0x18002638d
sub eax, 1
je 0x180026379
sub eax, 1
je 0x180026352
cmp eax, 1
jne 0x180026399
mov ecx, dword [r15 + 0x24]
cmp ecx, 5
jl 0x180026399
mov edx, dword [r15 + 0x20]
add ecx, 0xfffffffb
shr edx, cl
and edx, 0x1f
mov dword [r15 + 0x24], ecx
mov dword [rsp + 0x60], edx
cmp dword [rbp - 0x64], 0
mov ebx, r9d
mov dword [rsp + 0x40], ebx
mov r10d, 0x89
jle 0x1800265f2
mov ecx, 0xd5
lea r9d, [rdx - 1]
nop word [rax + rax]
mov eax, ecx
sub eax, 0x22
je 0x1800263b5
sub eax, 1
je 0x18002646a
sub eax, 0xb2
je 0x1800263ab
sub eax, 0x5a
je 0x180026461
cmp eax, 0x5a
je 0x180026534
jmp 0x1800265b4
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x1800266ba
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
add dword [r15 + 0x24], 8
mov dword [r15 + 0x20], edx
jmp 0x180026399
mov rax, qword [r15]
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
mov rax, qword [r15]
inc dword [rax + 0xc]
jmp 0x180026399
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x180026399
inc dword [rax + 0x10]
dec r8d
cmp r8d, 0x7f
ja 0x1800262b0
jmp 0x1800262a0
cmp r9d, 0x13
ja 0x180026685
mov dword [r15 + 8], 0x22
nop dword [rax]
mov r8d, 0x114
cmp r8d, 0x114
je 0x18002642c
cmp r8d, 0xc774
je 0x18002640c
cmp r8d, 0x18dd4
jne 0x1800264fc
mov rax, qword [r15]
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
mov rax, qword [r15]
inc dword [rax + 0xc]
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x1800264fc
inc dword [rax + 0x10]
jmp 0x1800264fc
mov rax, qword [r15]
mov edx, dword [r15 + 0x20]
shl edx, 8
mov rcx, qword [rax]
movzx eax, byte [rcx]
or edx, eax
add dword [r15 + 0x24], 8
mov dword [r15 + 0x20], edx
jmp 0x1800264fc
cmp dword [r15 + 0x24], 1
jl 0x1800264ef
mov eax, 0xeb
nop dword [rax]
cmp eax, 0xeb
je 0x1800264c9
cmp eax, 0x2ed1
je 0x1800264be
cmp eax, 0x5cb7
jne 0x1800264df
mov edx, dword [rsp + 0x60]
test r13b, r13b
je 0x1800265c8
mov dword [r15 + 8], 0x23
mov r8d, 0x95
nop dword [rax + rax]
mov eax, r8d
sub eax, 0x95
je 0x180026515
cmp eax, 0x79
jne 0x180026595
mov rax, qword [r15]
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
mov rax, qword [r15]
inc dword [rax + 0xc]
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x180026595
inc dword [rax + 0x10]
jmp 0x180026595
movzx r13d, byte [rbp + 0xc]
mov dword [rbp - 0x78], r13d
jmp 0x1800264df
mov ecx, dword [r15 + 0x24]
mov edx, dword [r15 + 0x20]
dec ecx
shr edx, cl
and edx, 1
mov dword [r15 + 0x24], ecx
mov dword [rbp + 0xc], edx
add eax, 0x2de6
cmp eax, 0x89b2
jbe 0x180026440
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x1800266a1
add r8d, 0xc660
cmp r8d, 0x25320
jbe 0x1800263c6
jmp 0x1800263c0
cmp dword [r15 + 0x24], 1
jl 0x180026570
mov eax, 0x30
cmp eax, 0x30
je 0x180026550
cmp eax, 0x4e
je 0x180026545
cmp eax, 0x6c
jne 0x180026566
mov ecx, 0x189
test r13b, r13b
jne 0x1800265ab
inc edx
inc r9d
jmp 0x1800265b0
movzx r13d, byte [rbp + 0x10]
mov dword [rbp - 0x78], r13d
jmp 0x180026566
mov ecx, dword [r15 + 0x24]
mov edx, dword [r15 + 0x20]
dec ecx
shr edx, cl
and edx, 1
mov dword [r15 + 0x24], ecx
mov dword [rbp + 0x10], edx
add eax, 0x1e
cmp eax, 0x8a
jb 0x180026521
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x1800266a1
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
add dword [r15 + 0x24], 8
mov dword [r15 + 0x20], edx
add r8d, 0x79
cmp r8d, 0x187
jb 0x180026480
jmp 0x180026472
dec edx
dec r9d
mov dword [rsp + 0x60], edx
add ecx, 0x5a
cmp ecx, 0x1e3
jb 0x180026320
jmp 0x180026311
movsxd rax, ebx
inc ebx
add rax, r11
mov dword [rsp + 0x40], ebx
mov byte [rax + r15 + 0xab70], dl
cmp ebx, dword [rbp - 0x64]
jl 0x180026311
xor r9d, r9d
jmp 0x1800265f2
mov dword [r15 + 8], 0x21
inc r10d
cmp r10d, 0x8a
jb 0x180026280
inc dword [rbp - 0x80]
inc rdi
add r11, 0x102
cmp rdi, r14
jl 0x180026271
mov dword [rbp - 0x80], r9d
test r14, r14
jle 0x1800267ca
mov r13d, dword [rbp - 0x38]
lea rdi, [r15 + 0xfa0c]
lea rsi, [r15 + 0xab70]
nop word [rax + rax]
movsxd r14, dword [rbp - 0x80]
mov ebx, 0x51
nop dword [rax]
mov eax, ebx
sub eax, 0x4e
je 0x180026798
sub eax, 1
je 0x180026725
sub eax, 1
je 0x1800266cf
cmp eax, 1
jne 0x18002679b
mov r13d, 0x20
mov dword [rbp - 0x30], r9d
mov dword [rbp - 0x38], r13d
jmp 0x18002679b
mov ecx, dword [rsp + 0x4c]
mov edi, 0xfffffffc
mov r11d, dword [rsp + 0x50]
mov dword [rsp + 0x4c], ecx
mov dword [rsp + 0x48], r12d
jmp 0x180024877
mov ecx, dword [rsp + 0x4c]
xor edi, edi
mov r11d, dword [rsp + 0x50]
mov dword [rsp + 0x4c], ecx
mov dword [rsp + 0x48], r12d
jmp 0x180024877
mov ecx, dword [rsp + 0x4c]
mov edi, r9d
mov dword [rsp + 0x4c], ecx
mov dword [rsp + 0x48], r12d
jmp 0x18002486e
mov eax, dword [rbp - 0x64]
test eax, eax
jle 0x18002679b
mov r9d, dword [rbp - 0x38]
mov rdx, rsi
mov r10d, dword [rbp - 0x30]
mov r8d, eax
nop dword [rax + rax]
mov ecx, r9d
movzx r9d, byte [rdx]
mov eax, r10d
lea rdx, [rdx + 1]
cmp r9d, eax
mov r10d, r9d
cmovle r10d, eax
cmp r9d, ecx
cmovge r9d, ecx
sub r8, 1
jne 0x1800266f0
mov dword [rbp - 0x38], r9d
mov r13d, r9d
xor r9d, r9d
mov dword [rbp - 0x30], r10d
jmp 0x18002679b
mov eax, dword [rbp - 0x64]
lea r9, [r15 + 0xe1dc]
imul r8, r14, 0x408
imul r10, r14, 0x102
mov dword [rbp - 0x80], eax
lea rdx, [r15 + 0xc9ac]
mov eax, dword [rbp - 0x30]
lea rcx, [r8 + 0xb17c]
mov dword [rbp - 0x60], eax
add r9, r8
mov dword [rsp + 0x38], 0x33
lea rax, [rbp - 0x58]
mov qword [rsp + 0x30], rax
add rdx, r8
add r10, 0xab70
mov dword [rbp - 0x58], r13d
lea rax, [rbp - 0x60]
add r10, r15
mov qword [rsp + 0x28], rax
lea r8, [rbp - 0x80]
add rcx, r15
mov qword [rsp + 0x20], r10
call fcn.18001c270
xor r9d, r9d
jmp 0x18002679b
mov dword [rdi], r13d
dec ebx
cmp ebx, 0x4d
ja 0x180026650
inc r14d
add rsi, 0x102
add rdi, 4
mov dword [rbp - 0x80], r14d
sub qword [rbp - 0x10], 1
jne 0x180026640
mov r13d, dword [rbp - 0x78]
mov esi, dword [rbp - 0x70]
mov eax, dword [r15 + 0xc78]
lea r12, [r15 + 0x44]
inc eax
mov dword [rsp + 0x78], 0xffffffff
mov dword [rbp - 0x58], eax
xor edx, edx
imul eax, dword [r15 + 0x28], 0x186a0
mov r8d, 0x400
mov rcx, r12
mov dword [rsp + 0x54], r9d
mov rdi, 0xffffffffffffffff
mov qword [rbp + 0x50], r12
mov dword [rbp - 0x60], eax
call sub.VCRUNTIME140.dll_memset
mov eax, 0x100
lea r9d, [rdi + 0x10]
mov dword [rsp + 0x40], eax
lea rbx, [r15 + 0x1e8b]
mov r10d, 0x1000
lea r11, [r15 + 0x1ec8]
nop
movzx r8d, r9b
sub r10d, 0x10
shl r8b, 4
mov rdx, rbx
sub rbx, 0x10
mov ecx, ILClone
nop dword [rax + rax]
lea eax, [rcx + r8]
sub ecx, 1
mov byte [rdx], al
lea rdx, [rdx - 1]
jns 0x180026850
mov dword [r11], r10d
sub r11, 4
sub r9d, 1
jns 0x180026830
movsxd r14, dword [rbp - 0x40]
mov r8d, 0x12b
mov qword [rbp - 0x10], r14
mov dword [rsp + 0x74], 0
mov eax, r8d
sub eax, 0x24
je 0x180026bea
sub eax, 0x107
je 0x180026b20
sub eax, 0x1b
je 0x180026bea
sub eax, 0x1b
je 0x1800268f0
mov ebx, dword [rsp + 0x44]
mov rdx, qword [rbp - 0x50]
cmp eax, 0x1b
jne 0x180026bfa
movsxd r11, dword [rsp + 0x50]
mov ecx, ebx
sub ecx, dword [rdx + r11*4]
cmp ecx, 0x101
ja 0x180026cce
movsxd rax, ecx
mov rcx, qword [rbp - 0x20]
mov eax, dword [rcx + rax*4]
mov dword [rsp + 0x68], eax
jmp 0x180026bff
mov r9d, 0x11b
mov eax, r9d
sub eax, 0x11b
je 0x18002693f
sub eax, 1
je 0x18002692f
cmp eax, 1
jne 0x180026a06
mov rax, qword [r15]
dec dword [rax + 8]
mov rax, qword [r15]
inc dword [rax + 0xc]
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x180026a06
inc dword [rax + 0x10]
jmp 0x180026a06
mov rax, qword [r15]
add dword [r15 + 0x24], 8
inc qword [rax]
jmp 0x180026a06
movsxd r11, dword [rsp + 0x50]
cmp dword [r15 + 0x24], r11d
jl 0x1800269e6
mov r8d, 0xa3
mov eax, r8d
sub eax, 0xa3
je 0x1800269ad
cmp eax, 1
jne 0x1800269d6
mov eax, dword [rbp + 0x14]
mov ebx, eax
mov dword [rsp + 0x44], eax
mov r10, r11
nop
mov eax, 0x5a
cmp eax, 0x25
je 0x180026af4
cmp eax, 0x5a
je 0x180026ad3
cmp eax, 0xfd
je 0x180026af4
cmp eax, 0x1a0
je 0x180026a20
cmp eax, 0x243
je 0x180026ac4
jmp 0x180026afc
mov edx, dword [r15 + 0x24]
mov ecx, r11d
mov eax, dword [r15 + 0x20]
sub edx, r11d
mov r10d, 1
mov dword [r15 + 0x24], edx
shl r10d, cl
mov ecx, edx
shr eax, cl
dec r10d
and r10d, eax
mov dword [rbp + 0x14], r10d
inc r8d
cmp r8d, 0xa5
jb 0x180026954
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180026d0c
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
mov dword [r15 + 0x20], edx
inc r9d
cmp r9d, 0x11e
jb 0x1800268f6
jmp 0x1800268f0
mov r9d, 0x10c
mov eax, r9d
sub eax, 0x10c
je 0x180026a63
sub eax, 0x1c
je 0x180026a55
sub eax, 0x1c
je 0x180026a4d
cmp eax, 0x1c
jne 0x180026a95
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x180026a95
inc dword [rax + 0x10]
jmp 0x180026a95
mov rax, qword [r15]
inc dword [rax + 0xc]
jmp 0x180026a95
mov rax, qword [r15]
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
jmp 0x180026a95
mov r8d, dword [r15 + 0x24]
cmp r8d, 1
jge 0x180026ab0
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180026d0c
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
lea eax, [r8 + 8]
or edx, ecx
mov dword [r15 + 0x24], eax
mov dword [r15 + 0x20], edx
add r9d, 0x1c
cmp r9d, 0x17c
jb 0x180026a26
jmp 0x180026a20
mov esi, dword [r15 + 0x20]
lea ecx, [r8 - 1]
shr esi, cl
and esi, 1
mov dword [r15 + 0x24], ecx
mov dword [rbp - 0x70], esi
add ebx, ebx
mov eax, 0x243
or ebx, esi
mov dword [rsp + 0x44], ebx
jmp 0x180026afc
cmp r10, 0x14
jg 0x180026cf0
mov rcx, qword [rbp - 0x28]
cmp ebx, dword [rcx + r10*4]
jle 0x180026b11
inc r11d
mov dword [rsp + 0x50], r11d
inc r10
jmp 0x180026afc
mov dword [r15 + 8], 0x25
add eax, 0xa3
cmp eax, 0x2e6
jb 0x180026975
jmp 0x180026970
mov rdx, qword [rbp - 0x50]
mov r8d, 0x161
jmp 0x180026bff
mov r9d, dword [rsp + 0x54]
test r9d, r9d
jne 0x180026bcd
mov edx, PathMakeUniqueName
mov eax, edx
sub eax, 0x28
je 0x180026ba9
sub eax, 1
je 0x180026b80
sub eax, 1
je 0x180026b52
cmp eax, 1
jne 0x180026bc2
inc dword [rsp + 0x78]
inc rdi
jmp 0x180026bc2
cmp rdi, r14
jge 0x180026d25
movzx eax, byte [r15 + rdi + 0x1ecc]
mov r9d, 0x32
mov dword [rbp - 0x6c], eax
mov dword [rsp + 0x54], r9d
mov eax, dword [r15 + rax*4 + 0xfa0c]
mov dword [rsp + 0x6c], eax
jmp 0x180026bc2
movsxd rax, dword [rbp - 0x6c]
imul rcx, rax, 0x408
lea rax, [r15 + 0xb17c]
add rax, rcx
mov qword [rbp - 0x28], rax
lea rax, [r15 + 0xe1dc]
add rax, rcx
mov qword [rbp - 0x20], rax
jmp 0x180026bc2
movsxd rax, dword [rbp - 0x6c]
imul rcx, rax, 0x408
lea rax, [r15 + 0xc9ac]
add rax, rcx
mov qword [rbp - 0x50], rax
dec edx
cmp edx, 0x27
ja 0x180026b33
mov ecx, dword [rsp + 0x6c]
dec r9d
mov ebx, dword [rsp + 0x44]
mov r11d, ecx
mov rdx, qword [rbp - 0x50]
mov dword [rsp + 0x54], r9d
mov dword [rsp + 0x50], ecx
jmp 0x180026c08
mov ebx, dword [rsp + 0x44]
mov rdx, qword [rbp - 0x50]
mov dword [r15 + 8], 0x24
mov r11d, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x6c]
mov r9d, dword [rsp + 0x54]
add r8d, 0x1b
cmp r8d, 0x197
jb 0x180026882
mov r8d, dword [rsp + 0x68]
cmp r8d, dword [rbp - 0x58]
je 0x180027b22
mov edi, dword [rbp - 0x70]
nop dword [rax + rax]
movsxd rsi, dword [rsp + 0x78]
cmp r8d, 1
jbe 0x180027542
mov eax, dword [rbp - 0x60]
cmp dword [rsp + 0x74], eax
jge 0x180026cf0
mov r14d, dword [rbp - 0x44]
mov edi, 0x1a
mov r12d, dword [rbp - 0x3c]
mov dword [rbp - 0x78], edi
nop dword [rax]
cmp edi, 0x1a
jne 0x180027116
lea ebx, [r8 - 1]
cmp ebx, 0x10
jae 0x180026e0f
mov edi, dword [rbp + 0x18]
mov r9d, PathMakeUniqueName
nop
mov eax, r9d
sub eax, 0x2b
je 0x180026d41
cmp eax, 1
jne 0x180026df6
test ebx, ebx
je 0x180026cbe
lea r8d, [r14 + rbx]
nop dword [rax]
lea eax, [r8 - 1]
movzx eax, byte [rax + r15 + 0xe8c]
mov byte [r8 + r15 + 0xe8c], al
lea r8d, [r8 - 1]
add ebx, 0xffffffff
jne 0x180026ca0
movsxd rax, r14d
mov byte [r15 + rax + 0xe8c], r13b
jmp 0x180026df6
mov r12d, dword [rsp + 0x48]
mov edx, ebx
mov ecx, dword [rsp + 0x4c]
mov edi, 0xfffffffc
mov ebx, dword [rsp + 0x40]
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x4c], ecx
jmp case.0x180024368.204
mov r12d, dword [rsp + 0x48]
mov edi, 0xfffffffc
mov ecx, dword [rsp + 0x4c]
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x4c], ecx
jmp 0x180024873
mov r12d, dword [rsp + 0x48]
xor edi, edi
mov ecx, dword [rsp + 0x4c]
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x4c], ecx
jmp 0x180024873
mov r12d, dword [rsp + 0x48]
mov edi, 0xfffffffc
mov ecx, dword [rsp + 0x4c]
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x4c], ecx
jmp 0x18002486e
mov r14d, dword [r15 + 0x1e8c]
lea eax, [r14 + rbx]
movzx r13d, byte [rax + r15 + 0xe8c]
cmp ebx, 3
jbe 0x180026df6
nop
mov edx, 0x26
lea r8d, [r14 + rbx]
nop dword [rax]
mov eax, edx
sub eax, 0x26
je 0x180026dbb
sub eax, 1
je 0x180026da5
sub eax, 1
je 0x180026d8f
cmp eax, 1
jne 0x180026de3
add ebx, 0xfffffffc
add r8d, 0xfffffffc
jmp 0x180026de3
movsxd rcx, edi
movzx eax, byte [rcx + r15 + 0xe88]
mov byte [rcx + r15 + 0xe89], al
jmp 0x180026de3
movsxd rcx, edi
movzx eax, byte [rcx + r15 + 0xe89]
mov byte [rcx + r15 + 0xe8a], al
jmp 0x180026de3
movsxd rcx, r8d
mov edi, r8d
movzx eax, byte [rcx + r15 + 0xe8b]
mov byte [rcx + r15 + 0xe8c], al
movzx eax, byte [rcx + r15 + 0xe8a]
mov byte [rcx + r15 + 0xe8b], al
inc edx
cmp edx, 0x2a
jb 0x180026d70
mov dword [rbp + 0x18], edi
cmp ebx, 3
ja 0x180026d60
inc r9d
cmp r9d, 0x2d
jb 0x180026c80
mov edi, dword [rbp - 0x78]
mov dword [rbp - 0x44], r14d
jmp 0x180027111
mov r11d, reloc.SHELL32.dll_PathMakeUniqueName
cmp r11d, 0x2f
je 0x1800270f2
cmp r11d, 0x37d
je 0x1800270ce
cmp r11d, 0x6cb
je 0x18002702f
cmp r11d, 0xa19
jne 0x1800270fd
movsxd rax, dword [r15 + 0x1e8c]
mov byte [rax + r15 + 0xe8c], r13b
cmp dword [r15 + 0x1e8c], 0
jne 0x1800270fd
mov r8d, 0xfff
lea r9, [r15 + 0x1ec8]
mov r10d, ILClone
movsxd rax, dword [r9]
movsxd rcx, r8d
dec r8d
movzx eax, byte [rax + r15 + 0xe9b]
mov byte [rcx + r15 + 0xe8c], al
movsxd rax, dword [r9]
movsxd rcx, r8d
dec r8d
movzx eax, byte [rax + r15 + 0xe9a]
mov byte [rcx + r15 + 0xe8c], al
movsxd rax, dword [r9]
movsxd rcx, r8d
dec r8d
movzx eax, byte [rax + r15 + 0xe99]
mov byte [rcx + r15 + 0xe8c], al
movsxd rax, dword [r9]
movsxd rcx, r8d
dec r8d
movzx eax, byte [rax + r15 + 0xe98]
mov byte [rcx + r15 + 0xe8c], al
movsxd rax, dword [r9]
movsxd rcx, r8d
dec r8d
movzx eax, byte [rax + r15 + 0xe97]
mov byte [rcx + r15 + 0xe8c], al
movsxd rax, dword [r9]
movsxd rcx, r8d
dec r8d
movzx eax, byte [rax + r15 + 0xe96]
mov byte [rcx + r15 + 0xe8c], al
movsxd rax, dword [r9]
movsxd rcx, r8d
dec r8d
movzx eax, byte [rax + r15 + 0xe95]
mov byte [rcx + r15 + 0xe8c], al
movsxd rax, dword [r9]
movsxd rcx, r8d
dec r8d
movzx eax, byte [rax + r15 + 0xe94]
mov byte [rcx + r15 + 0xe8c], al
movsxd rax, dword [r9]
movsxd rcx, r8d
dec r8d
movzx eax, byte [rax + r15 + 0xe93]
mov byte [rcx + r15 + 0xe8c], al
movsxd rax, dword [r9]
movsxd rcx, r8d
dec r8d
movzx eax, byte [rax + r15 + 0xe92]
mov byte [rcx + r15 + 0xe8c], al
movsxd rax, dword [r9]
movsxd rcx, r8d
dec r8d
movzx eax, byte [rax + r15 + 0xe91]
mov byte [rcx + r15 + 0xe8c], al
movsxd rax, dword [r9]
movsxd rcx, r8d
dec r8d
movzx eax, byte [rax + r15 + 0xe90]
mov byte [rcx + r15 + 0xe8c], al
movsxd rax, dword [r9]
movsxd rcx, r8d
dec r8d
movzx eax, byte [rax + r15 + 0xe8f]
mov byte [rcx + r15 + 0xe8c], al
movsxd rax, dword [r9]
movsxd rcx, r8d
dec r8d
movzx eax, byte [rax + r15 + 0xe8e]
mov byte [rcx + r15 + 0xe8c], al
movsxd rax, dword [r9]
movsxd rcx, r8d
dec r8d
mov edx, r8d
movzx eax, byte [rax + r15 + 0xe8d]
mov byte [rcx + r15 + 0xe8c], al
movsxd rax, dword [r9]
movsxd rcx, r8d
dec r8d
movzx eax, byte [rax + r15 + 0xe8c]
mov byte [rcx + r15 + 0xe8c], al
sub r10, 1
mov dword [r9], edx
lea r9, [r9 - 4]
jns 0x180026e76
jmp 0x1800270fd
movsxd r8, dword [rbp - 0x3c]
movsxd r10, dword [rbp - 0x44]
mov r9, r8
lea rdx, [r8 + 0x7a3]
mov eax, dword [r15 + rdx*4]
lea rdx, [r15 + rdx*4]
cmp r10d, eax
jle 0x180027084
lea r8, [r10 + 0xe8c]
add r8, r15
nop dword [rax + rax]
movzx eax, byte [r8 - 1]
dec r10d
mov byte [r8], al
lea r8, [r8 - 1]
mov eax, dword [r15 + r9*4 + 0x1e8c]
cmp r10d, eax
jg 0x180027060
mov r8d, dword [rbp - 0x3c]
mov dword [rbp - 0x44], r10d
inc eax
mov dword [rdx], eax
test r8d, r8d
jle 0x1800270bd
nop dword [rax]
movsxd rcx, dword [rdx]
lea rdx, [rdx - 4]
dec r8d
lea eax, [rcx - 1]
mov dword [rdx + 4], eax
movsxd rax, dword [rdx]
movzx eax, byte [rax + r15 + 0xe9b]
mov byte [rcx + r15 + 0xe8b], al
test r8d, r8d
jg 0x180027090
mov dword [rbp - 0x3c], r8d
dec dword [r15 + 0x1e8c]
mov r14d, dword [rbp - 0x44]
mov r12d, dword [rbp - 0x3c]
jmp 0x1800270fd
movsxd rax, r12d
mov r14d, ebx
and r14d, 0xf
add r14d, dword [r15 + rax*4 + 0x1e8c]
movsxd rax, r14d
mov dword [rbp - 0x44], r14d
movzx r13d, byte [r15 + rax + 0xe8c]
jmp 0x1800270fd
mov r12d, ebx
shr r12d, 4
mov dword [rbp - 0x3c], r12d
add r11d, 0x34e
cmp r11d, 0xd38
jbe 0x180026e15
mov r8d, dword [rsp + 0x68]
add edi, 0x95
mov dword [rbp - 0x78], edi
cmp edi, 0xaf
jb 0x180026c60
mov r14, qword [rbp - 0x10]
mov r12, qword [rbp + 0x50]
movsxd r8, dword [rsp + 0x74]
movzx ecx, r13b
movzx eax, byte [r15 + rcx + 0xd8c]
inc dword [r15 + rax*4 + 0x44]
cmp byte [r15 + 0x2c], 0
movzx eax, byte [r15 + rcx + 0xd8c]
je 0x18002716b
movzx ecx, ax
mov rax, qword [r15 + 0xc58]
mov word [rax + r8*2], cx
jmp 0x180027178
mov ecx, eax
mov rax, qword [r15 + 0xc50]
mov dword [rax + r8*4], ecx
mov edx, dword [rsp + 0x50]
inc r8d
mov r10d, dword [rsp + 0x44]
mov r9d, 0xc5
mov rbx, qword [rbp - 0x50]
mov edi, dword [rsp + 0x6c]
mov dword [rsp + 0x74], r8d
nop word [rax + rax]
mov eax, r9d
sub eax, 0x28
je 0x18002751d
sub eax, 0x9d
je 0x18002744f
sub eax, 1
je 0x1800271f0
sub eax, 1
je 0x18002741e
cmp eax, 1
jne 0x180027525
movsxd rax, edx
mov ecx, r10d
sub ecx, dword [rbx + rax*4]
movsxd rax, ecx
mov rcx, qword [rbp - 0x20]
mov r8d, dword [rcx + rax*4]
mov dword [rsp + 0x68], r8d
jmp 0x18002752a
mov r9d, 0x87
nop word [rax + rax]
mov eax, r9d
sub eax, 0x84
je 0x180027329
sub eax, 1
je 0x180027322
sub eax, 1
je 0x18002730a
cmp eax, 1
jne 0x180027347
movsxd r11, dword [rsp + 0x50]
mov r8d, dword [r15 + 0x24]
cmp r8d, r11d
jl 0x1800272fb
mov edx, 0x5c
mov eax, edx
sub eax, 0x5c
je 0x1800272cc
cmp eax, 0x66
jne 0x1800272ec
mov r10d, dword [r15 + 0x20]
mov ecx, r8d
sub ecx, r11d
mov eax, 1
shr r10d, cl
mov ecx, r11d
shl eax, cl
dec eax
and r10d, eax
mov dword [rbp + 0x34], r10d
add edx, 0x66
cmp edx, 0x128
jb 0x180027240
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180026d0c
jmp 0x180027347
mov rax, qword [r15]
mov edx, dword [r15 + 0x20]
shl edx, 8
mov rcx, qword [rax]
movzx eax, byte [rcx]
or edx, eax
mov dword [r15 + 0x20], edx
jmp 0x180027347
add dword [r15 + 0x24], 8
jmp 0x180027347
mov rax, qword [r15]
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
mov rax, qword [r15]
inc dword [rax + 0xc]
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x180027347
inc dword [rax + 0x10]
dec r9d
cmp r9d, 0x83
ja 0x180027200
jmp 0x1800271f0
mov r11d, dword [rsp + 0x50]
mov edx, dword [rsp + 0x44]
movsxd rax, r11d
mov ecx, edx
mov r9d, 0xc7
sub ecx, dword [rbx + rax*4]
cmp ecx, 0x101
ja 0x180027b02
mov edx, dword [rsp + 0x50]
mov r10d, dword [rsp + 0x44]
jmp 0x180027525
mov ecx, dword [rsp + 0x54]
test ecx, ecx
jne 0x180027511
lea r8, [r15 + 0x1ecc]
mov edx, 0xe4
add r8, rsi
nop word [rax + rax]
mov eax, edx
sub eax, 0xe4
je 0x1800274d7
sub eax, 0x50
je 0x1800274a2
cmp eax, 0x50
jne 0x1800274fa
movsxd rax, dword [rbp - 0x6c]
imul rcx, rax, 0x408
lea rax, [r15 + 0xc9ac]
add rax, rcx
mov ecx, dword [rsp + 0x54]
mov qword [rbp - 0x50], rax
jmp 0x1800274fa
movsxd rax, dword [rbp - 0x6c]
mov r11d, dword [r15 + rax*4 + 0xfa0c]
imul rax, rax, 0x408
mov dword [rsp + 0x6c], r11d
lea r11, [r15 + 0xb17c]
add r11, rax
add rax, 0xe1dc
add rax, r15
mov qword [rbp - 0x28], r11
mov qword [rbp - 0x20], rax
jmp 0x1800274fa
inc dword [rsp + 0x78]
inc rsi
inc r8
cmp rsi, r14
jge 0x180026d25
movzx eax, byte [r8]
mov ecx, 0x32
mov dword [rsp + 0x54], ecx
mov dword [rbp - 0x6c], eax
add edx, 0x50
cmp edx, 0x1d4
jb 0x180027470
mov rbx, qword [rbp - 0x50]
mov edi, dword [rsp + 0x6c]
dec ecx
mov edx, edi
mov dword [rsp + 0x54], ecx
mov dword [rsp + 0x50], edx
mov dword [r15 + 8], PathMakeUniqueName
mov r8d, dword [rsp + 0x68]
inc r9d
cmp r9d, 0xc9
jb 0x1800271a0
mov edi, dword [rbp - 0x70]
jmp 0x180027ae1
mov dword [rsp + 0x70], 0xffffffff
mov r10d, 0xe7
mov dword [rbp - 0x48], 1
jmp 0x180027574
mov ecx, dword [rsp + 0x6c]
mov r10d, 0xe7
jmp 0x180027574
mov ecx, dword [rsp + 0x6c]
mov eax, r10d
sub eax, 0xe7
je 0x18002799c
cmp eax, 1
jne 0x1800279cc
mov r8d, 0x91
jmp 0x180027597
mov ecx, dword [rsp + 0x6c]
cmp r8d, 0x60db
ja 0x18002793c
je 0x180027690
cmp r8d, 0x9100
je 0x180027972
cmp r8d, 0xc125
jne 0x180027978
movsxd rax, r11d
mov ecx, ebx
sub ecx, dword [rdx + rax*4]
cmp ecx, 0x101
ja 0x180026cf0
movsxd rax, ecx
mov rcx, qword [rbp - 0x20]
mov eax, dword [rcx + rax*4]
mov dword [rsp + 0x68], eax
jmp 0x180027978
mov r8d, 0x9100
mov r9d, dword [rsp + 0x54]
add r8d, 0x3025
mov rdx, qword [rbp - 0x50]
cmp r8d, 0xf0b9
jbe 0x180027593
mov r8d, dword [rsp + 0x68]
jmp 0x1800279cc
mov ecx, dword [rbp - 0x48]
cmp ecx, 0x200000
jge 0x180026cf0
test r8d, r8d
jne 0x1800279b6
add dword [rsp + 0x70], ecx
jmp 0x1800279c7
cmp r8d, 1
jne 0x1800279c7
mov eax, dword [rsp + 0x70]
lea eax, [rax + rcx*2]
mov dword [rsp + 0x70], eax
add ecx, ecx
mov dword [rbp - 0x48], ecx
mov r9d, dword [rsp + 0x54]
inc r10d
mov rdx, qword [rbp - 0x50]
cmp r10d, 0xe9
jb 0x180027570
test r8d, r8d
je 0x180027559
cmp r8d, 1
je 0x180027559
movsxd rax, dword [r15 + 0x1e8c]
mov r10d, dword [rsp + 0x70]
movsxd rsi, dword [rsp + 0x74]
inc r10d
movsxd r9, dword [rbp - 0x60]
mov r8, rsi
movzx ecx, byte [rax + r15 + 0xe8c]
mov dword [rsp + 0x70], r10d
movzx r13d, byte [rcx + r15 + 0xd8c]
add dword [r15 + r13*4 + 0x44], r10d
cmp byte [r15 + 0x2c], 0
je 0x180027a8a
test r10d, r10d
jle 0x180027adc
nop
mov edx, 0x65
cmp edx, 0x65
je 0x180027a62
cmp edx, 0x70
jne 0x180027a7b
inc esi
inc r8
dec r10d
mov dword [rsp + 0x74], esi
mov dword [rsp + 0x70], r10d
jmp 0x180027a7b
cmp r8, r9
jge 0x180026cf0
mov rax, qword [r15 + 0xc58]
movzx ecx, r13b
mov word [rax + r8*2], cx
add edx, 0xb
cmp edx, 0x7b
jb 0x180027a45
test r10d, r10d
jg 0x180027a40
test r10d, r10d
jle 0x180027adc
nop
mov edx, 0x32
mov eax, edx
sub eax, 0x32
je 0x180027aab
cmp eax, 0x7a
jne 0x180027acc
dec r10d
mov dword [rsp + 0x70], r10d
jmp 0x180027acc
cmp r8, r9
jge 0x180026cf0
mov rax, qword [r15 + 0xc50]
inc esi
movzx ecx, r13b
mov dword [rsp + 0x74], esi
mov dword [rax + r8*4], ecx
inc r8
add edx, 0x7a
cmp edx, 0x126
jb 0x180027a95
test r10d, r10d
jg 0x180027a90
mov r8d, dword [rsp + 0x68]
cmp r8d, dword [rbp - 0x58]
je 0x180027b22
mov r11d, dword [rsp + 0x50]
mov ebx, dword [rsp + 0x44]
mov r9d, dword [rsp + 0x54]
mov rdx, qword [rbp - 0x50]
mov ecx, dword [rsp + 0x6c]
jmp 0x180026c30
mov r12d, dword [rsp + 0x48]
mov edi, 0xfffffffc
mov ecx, dword [rsp + 0x4c]
mov ebx, dword [rsp + 0x40]
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x4c], ecx
jmp case.0x180024368.204
mov eax, dword [r15 + 0x38]
test eax, eax
js 0x180026d25
mov esi, dword [rsp + 0x74]
cmp eax, esi
jge 0x180026d25
xor r9d, r9d
mov ebx, r9d
mov dword [rsp + 0x40], ebx
nop dword [rax]
nop dword [rax + rax]
movsxd rax, ebx
mov ecx, dword [r15 + rax*4 + 0x44]
test ecx, ecx
js 0x180028272
cmp ecx, esi
jg 0x180028272
inc ebx
mov dword [rsp + 0x40], ebx
cmp ebx, 0xff
jle 0x180027b50
lea rdi, [r15 + 0x448]
mov r8d, 0x40
lea rdx, [r15 + 0x44c]
mov dword [rdi], r9d
mov rcx, rdx
mov eax, dword [r12]
lea r12, [r12 + 0x10]
mov dword [rcx], eax
lea rcx, [rcx + 0x10]
mov eax, dword [r12 - 0xc]
mov dword [rcx - 0xc], eax
mov eax, dword [r12 - 8]
mov dword [rcx - 8], eax
mov eax, dword [r12 - 4]
mov dword [rcx - 4], eax
sub r8, 1
jne 0x180027b90
mov ecx, 0x100
nop dword [rax]
nop word [rax + rax]
mov eax, dword [rdx - 4]
add dword [rdx], eax
lea rdx, [rdx + 4]
sub rcx, 1
jne 0x180027bd0
mov ebx, r9d
mov dword [rsp + 0x40], ebx
nop word [rax + rax]
movsxd rax, ebx
mov ecx, dword [r15 + rax*4 + 0x448]
test ecx, ecx
js 0x180028272
cmp ecx, esi
jg 0x180028272
inc ebx
mov dword [rsp + 0x40], ebx
cmp ebx, 0x100
jle 0x180027bf0
mov ebx, 1
mov dword [rsp + 0x40], ebx
movsxd rcx, ebx
mov eax, dword [r15 + rcx*4 + 0x448]
cmp dword [r15 + rcx*4 + 0x444], eax
jg 0x180028272
inc ebx
mov dword [rsp + 0x40], ebx
cmp ebx, 0x100
jle 0x180027c22
cmp dword [r15 + 0x34], 2
mov dword [r15 + 0x10], r9d
mov byte [r15 + 0xc], r9b
mov dword [r15 + 0xc70], 0xffffffff
mov dword [r15 + 8], 2
jl 0x180027c88
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.rtrld
call fcn.180085950
xor r9d, r9d
cmp byte [r15 + 0x2c], 0
je 0x1800280b0
mov r12d, dword [rsp + 0x48]
mov esi, 0xe7
mov dword [rsp + 0x48], r12d
mov eax, esi
sub eax, 0xe3
je 0x180027eb2
mov ebx, r9d
mov dword [rsp + 0x40], ebx
test esi, esi
jle 0x1800280f7
mov r12d, dword [rsp + 0x48]
mov edi, 0xfffffffc
mov ecx, dword [rsp + 0x4c]
mov r11d, dword [rsp + 0x50]
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x4c], ecx
jmp 0x180024877
mov dword [r15 + 8], PathMakeUniqueName
nop dword [rax + rax]
mov r8d, 0x111
mov eax, r8d
sub eax, 0x111
je 0x1800282d5
cmp eax, 0x68
jne 0x18002832b
mov rax, qword [r15]
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
mov rax, qword [r15]
inc dword [rax + 0xc]
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x18002832b
inc dword [rax + 0x10]
jmp 0x18002832b
cmp dword [r15 + 0x24], 8
jl 0x180028306
mov edx, PathYetAnotherMakeUniqueName
mov eax, edx
sub eax, 0x48
je 0x180028341
cmp eax, 1
jne 0x1800282ff
mov ecx, dword [r15 + 0x24]
mov r13d, dword [r15 + 0x20]
sub ecx, 8
mov dword [r15 + 0x24], ecx
shr r13d, cl
dec edx
cmp edx, 0x47
ja 0x1800282e1
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180024b52
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
add dword [r15 + 0x24], 8
mov dword [r15 + 0x20], edx
add r8d, 0x68
cmp r8d, 0x1e1
jb 0x1800282a6
jmp 0x1800282a0
cmp r13b, 0x72
je case.0x180024492.43
mov edi, 0xfffffffc
jmp 0x180024873
mov ecx, 0x127
mov eax, ecx
sub eax, 0x127
je 0x180028377
cmp eax, 0xb
jne 0x180028433
cmp r13b, 0x45
jne 0x180025efb
jmp 0x180028433
mov dword [r15 + 8], PathMakeUniqueName
nop
mov r8d, 0xc0
cmp r8d, 0xc0
je 0x1800283d3
cmp r8d, 0x30c0
je 0x1800283c0
cmp r8d, 0x60c0
je 0x1800283b8
cmp r8d, 0x90c0
jne 0x1800283fc
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x1800283fc
inc dword [rax + 0x10]
jmp 0x1800283fc
mov rax, qword [r15]
inc dword [rax + 0xc]
jmp 0x1800283fc
mov rax, qword [r15]
add dword [r15 + 0x24], 8
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
jmp 0x1800283fc
mov ecx, dword [r15 + 0x24]
cmp ecx, 8
jge 0x180028420
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180024b52
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
mov dword [r15 + 0x20], edx
add r8d, 0x3000
cmp r8d, 0xc000
jbe 0x180028386
jmp 0x180028380
mov r13d, dword [r15 + 0x20]
add ecx, 0xfffffff8
mov dword [r15 + 0x24], ecx
shr r13d, cl
mov ecx, 0x127
add ecx, 0xb
cmp ecx, 0x13d
jb 0x180028356
mov eax, 6
cmp eax, 6
jne 0x1800284fd
mov dword [r15 + 8], PathMakeUniqueName
nop dword [rax + rax]
mov r9d, 0x52
cmp r9d, 0x52
je 0x1800284b8
cmp r9d, 0x19a0
je 0x180028492
cmp r9d, 0x32ee
jne 0x1800284ce
mov rax, qword [r15]
inc dword [rax + 0xc]
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x1800284ce
inc dword [rax + 0x10]
jmp 0x1800284ce
mov edx, dword [r15 + 0x20]
mov r8, qword [r15]
shl edx, 8
mov rax, qword [r8]
movzx ecx, byte [rax]
add dword [r15 + 0x24], 8
or edx, ecx
mov dword [r15 + 0x20], edx
inc qword [r8]
mov rax, qword [r15]
dec dword [rax + 8]
jmp 0x1800284ce
mov ecx, dword [r15 + 0x24]
cmp ecx, 8
jge 0x1800284e0
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180024b52
add r9d, 0x194e
cmp r9d, 0x4bea
jbe 0x180028466
jmp 0x180028460
mov r13d, dword [r15 + 0x20]
add ecx, 0xfffffff8
mov dword [r15 + 0x24], ecx
shr r13d, cl
mov eax, 6
cmp r13b, 0x38
jne 0x180025efb
dec eax
cmp eax, 5
ja 0x180028447
mov eax, 0x119
nop dword [rax]
cmp eax, 0x119
je 0x180028564
cmp eax, 0x2439
jne 0x18002852d
mov eax, 0x2439
cmp r13b, 0x50
jne 0x180025efb
add eax, 0x2320
cmp eax, 0x4640
jbe 0x180028510
mov eax, PathYetAnotherMakeUniqueName
nop
cmp eax, 0x47
je 0x18002861e
cmp eax, 0x27a9
jne 0x1800286c5
mov dword [r15 + 0xc6c], 0
jmp 0x1800286c5
mov dword [r15 + 8], PathMakeUniqueName
nop dword [rax]
mov r8d, 0xdb
mov eax, r8d
sub eax, 0xdb
je 0x1800285b1
sub eax, 1
je 0x180028598
cmp eax, 1
jne 0x180028609
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x180028609
inc dword [rax + 0x10]
jmp 0x180028609
mov rax, qword [r15]
add dword [r15 + 0x24], 8
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
mov rax, qword [r15]
inc dword [rax + 0xc]
jmp 0x180028609
cmp dword [r15 + 0x24], 8
jl 0x1800285e9
mov edx, 0x5f
nop dword [rax]
mov eax, edx
sub eax, 0x5e
je 0x18002851e
cmp eax, 1
jne 0x1800285e2
mov ecx, dword [r15 + 0x24]
mov r13d, dword [r15 + 0x20]
sub ecx, 8
mov dword [r15 + 0x24], ecx
shr r13d, cl
dec edx
cmp edx, 0x5d
ja 0x1800285c0
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180024b52
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
mov dword [r15 + 0x20], edx
inc r8d
cmp r8d, 0xde
jb 0x180028576
jmp 0x180028570
mov dword [r15 + 8], PathMakeUniqueName
nop word [rax + rax]
mov r8d, 0x116
mov eax, r8d
sub eax, 0x116
je 0x180028689
sub eax, 0x4a
je 0x18002867f
sub eax, 0x4a
je 0x180028668
cmp eax, 0x4a
jne 0x1800287aa
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x1800287aa
inc dword [rax + 0x10]
jmp 0x1800287aa
mov rax, qword [r15]
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
mov rax, qword [r15]
inc dword [rax + 0xc]
jmp 0x1800287aa
add dword [r15 + 0x24], 8
jmp 0x1800287aa
cmp dword [r15 + 0x24], 8
jl 0x18002878a
mov edx, 0x8d
nop dword [rax]
mov eax, edx
sub eax, 0x8d
je 0x18002876a
cmp eax, 1
jne 0x18002877c
mov eax, PathYetAnotherMakeUniqueName
cmp r13b, 0x90
jne 0x180025efb
add eax, 0x2762
cmp eax, 0x4ec4
jbe 0x180028540
mov edx, 0x102
nop word [rax + rax]
mov eax, edx
sub eax, 0x102
je 0x1800287c0
cmp eax, 1
jne 0x18002870e
mov ecx, dword [r15 + 0xc6c]
mov edx, 0x103
shl ecx, 8
movzx eax, r13b
or ecx, eax
mov dword [r15 + 0xc6c], ecx
inc edx
cmp edx, 0x104
jb 0x1800286e0
mov edx, 0x31
nop dword [rax]
cmp edx, 0x31
jne 0x1800288b0
mov dword [r15 + 8], 0x30
nop dword [rax]
nop word [rax + rax]
mov r9d, 0x112
mov r8d, 6
nop dword [rax]
cmp r8d, 6
ja case.default.0x180028768
mov eax, r8d
mov ecx, dword [r10 + rax*4 + 0x28fd4]
add rcx, r10
jmp rcx
mov ecx, dword [r15 + 0x24]
mov r13d, dword [r15 + 0x20]
sub ecx, 8
mov dword [r15 + 0x24], ecx
shr r13d, cl
inc edx
cmp edx, 0x8f
jb 0x1800286a0
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180024b52
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
mov dword [r15 + 0x20], edx
add r8d, 0x4a
cmp r8d, 0x23e
jb 0x180028636
jmp 0x180028630
mov dword [r15 + 8], reloc.SHELL32.dll_PathMakeUniqueName
nop dword [rax + rax]
mov r8d, 0xeb
mov eax, r8d
sub eax, 0xeb
je 0x180028805
cmp eax, 0x35
jne 0x180028861
mov rax, qword [r15]
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
mov rax, qword [r15]
inc dword [rax + 0xc]
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x180028861
inc dword [rax + 0x10]
jmp 0x180028861
cmp dword [r15 + 0x24], 8
jl 0x18002883c
mov edx, 0x31
mov eax, edx
sub eax, 0x31
je 0x180028823
cmp eax, 1
je 0x1800286f2
jmp 0x180028835
mov ecx, dword [r15 + 0x24]
mov r13d, dword [r15 + 0x20]
sub ecx, 8
mov dword [r15 + 0x24], ecx
shr r13d, cl
inc edx
cmp edx, 0x33
jb 0x180028811
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180024b52
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
add dword [r15 + 0x24], 8
mov dword [r15 + 0x20], edx
add r8d, 0x35
cmp r8d, 0x155
jb 0x1800287d6
jmp 0x1800287d0
cmp dword [r15 + 0x24], 8
jl case.default.0x180028768
mov edx, 0x1b
cmp edx, 0x1b
je 0x1800288f9
cmp edx, 0x489
jne 0x18002890b
mov ecx, dword [r15 + 0xc6c]
mov edx, 0x31
shl ecx, 8
movzx eax, r13b
or ecx, eax
mov dword [r15 + 0xc6c], ecx
inc edx
cmp edx, 0x32
jb 0x180028720
mov edx, 0x35
mov eax, edx
sub eax, 0x35
je 0x180028984
sub eax, 1
je 0x180028a89
cmp eax, 1
jne 0x180028a8e
mov ecx, dword [r15 + 0xc6c]
shl ecx, 8
movzx eax, r13b
or ecx, eax
mov dword [r15 + 0xc6c], ecx
jmp 0x180028a8e
mov ecx, dword [r15 + 0x24]
mov r13d, dword [r15 + 0x20]
sub ecx, 8
mov dword [r15 + 0x24], ecx
shr r13d, cl
add edx, 0x46e
cmp edx, 0x8dc
jbe 0x180028887
jmp case.default.0x180028768
mov rax, qword [r15]
dec dword [rax + 8]
jmp case.default.0x180028768
add dword [r15 + 0x24], 8
jmp case.default.0x180028768
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180024b52
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
mov dword [r15 + 0x20], edx
jmp case.default.0x180028768
mov rax, qword [r15]
inc qword [rax]
jmp case.default.0x180028768
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne case.default.0x180028768
inc dword [rax + 0x10]
jmp case.default.0x180028768
mov rax, qword [r15]
inc dword [rax + 0xc]
dec r9d
dec r8d
cmp r9d, 0x10b
ja 0x180028750
jmp 0x180028740
mov dword [r15 + 8], 0x31
nop dword [rax]
mov r8d, 0x8d
nop word [rax + rax]
cmp r8d, 0x213
ja 0x180028a4a
je 0x180028a3c
cmp r8d, 0x8d
je 0x1800289fe
cmp r8d, 0x10f
je 0x1800289dc
cmp r8d, 0x191
jne 0x180028a70
add dword [r15 + 0x24], 8
jmp 0x180028a70
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180024b52
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
mov dword [r15 + 0x20], edx
jmp 0x180028a70
cmp dword [r15 + 0x24], 8
jl 0x180028a70
mov edx, 0xc3
nop word [rax + rax]
mov eax, edx
sub eax, 0xc2
je 0x180028a89
cmp eax, 1
jne 0x180028a30
mov ecx, dword [r15 + 0x24]
mov r13d, dword [r15 + 0x20]
sub ecx, 8
mov dword [r15 + 0x24], ecx
shr r13d, cl
dec edx
cmp edx, 0xc1
ja 0x180028a10
jmp 0x180028a70
mov rax, qword [r15]
inc qword [rax]
mov rax, qword [r15]
dec dword [rax + 8]
jmp 0x180028a70
cmp r8d, 0x295
je 0x180028a6a
cmp r8d, 0x317
jne 0x180028a70
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x180028a70
inc dword [rax + 0x10]
jmp 0x180028a70
mov rax, qword [r15]
inc dword [rax + 0xc]
add r8d, 0x82
cmp r8d, 0x399
jb 0x1800289a0
jmp 0x180028990
mov edx, 0x36
inc edx
cmp edx, 0x38
jb 0x1800288c0
mov edx, 0x101
nop
mov eax, edx
sub eax, 0x101
je 0x180028ac3
sub eax, 1
je 0x180028b8f
cmp eax, 1
jne 0x180028bb3
lea edi, [rax + 3]
jmp 0x180024873
mov dword [r15 + 8], 0x32
nop dword [rax + rax]
mov r8d, 0x75
mov eax, r8d
sub eax, 0x75
je 0x180028b15
sub eax, 0x39
je 0x180028b0d
sub eax, 0x39
je 0x180028aff
cmp eax, 0x39
jne 0x180028b75
mov rax, qword [r15]
cmp dword [rax + 0xc], 0
jne 0x180028b75
inc dword [rax + 0x10]
jmp 0x180028b75
mov rax, qword [r15]
dec dword [rax + 8]
mov rax, qword [r15]
inc dword [rax + 0xc]
jmp 0x180028b75
mov rax, qword [r15]
inc qword [rax]
jmp 0x180028b75
cmp dword [r15 + 0x24], 8
jl 0x180028b50
mov edx, 0x112
mov eax, edx
sub eax, 0x111
je 0x180028b8b
cmp eax, 1
jne 0x180028b46
mov ecx, dword [r15 + 0x24]
mov eax, dword [r15 + 0x20]
sub ecx, 8
shr eax, cl
movzx eax, al
mov dword [rbp + 0x28], eax
mov dword [r15 + 0x24], ecx
dec edx
cmp edx, 0x110
ja 0x180028b21
mov rax, qword [r15]
cmp dword [rax + 8], 0
je 0x180024b52
mov rax, qword [rax]
mov edx, dword [r15 + 0x20]
shl edx, 8
movzx ecx, byte [rax]
or edx, ecx
add dword [r15 + 0x24], 8
mov dword [r15 + 0x20], edx
add r8d, 0x39
cmp r8d, 0x159
jb 0x180028ad6
jmp 0x180028ad0
mov r13d, dword [rbp + 0x28]
mov ecx, dword [r15 + 0xc6c]
mov edx, 0x102
shl ecx, 8
movzx eax, r13b
or ecx, eax
mov dword [r15 + 8], 1
mov dword [r15 + 0xc6c], ecx
inc edx
cmp edx, 0x104
jb 0x180028aa0
mov edx, dword [rsp + 0x44]
mov ecx, SHSetInstanceExplorer
nop word [rax + rax]
mov eax, ecx
sub eax, 0x57
je 0x180028be5
sub eax, 0x57
je 0x180028d7b
cmp eax, 0x1b
je 0x180028bf0
add ecx, 0x72
cmp ecx, 0x204
jb 0x180028bd0
mov ecx, SHSetInstanceExplorer
mov eax, ecx
sub eax, 0x57
je 0x180028c0a
sub eax, 0x57
je 0x180028dbd
cmp eax, 0x1b
je 0x180028c15
add ecx, 0x72
cmp ecx, 0x204
jb 0x180028bf5
mov ebx, dword [rsp + 0x40]
dec r14d
cmp r14d, dword [rsp + 0x58]
jbe case.0x180024368.191
mov r8d, dword [rsp + 0x54]
mov r9d, dword [rbp - 0x34]
mov r10d, dword [rsp + 0x60]
jmp 0x180024340
mov eax, dword [rsp + 0x70]
mov dword [r15 + 0xfa54], eax
mov eax, dword [rbp - 0x48]
mov dword [r15 + 0xfa58], eax
jmp case.default.0x180024368
mov eax, dword [rsp + 0x68]
mov dword [r15 + 0xfa48], eax
mov eax, dword [rbp - 0x60]
mov dword [r15 + 0xfa4c], eax
mov eax, dword [rsp + 0x74]
mov dword [r15 + 0xfa50], eax
mov dword [r15 + 0xfa44], r8d
jmp case.default.0x180024368
mov eax, dword [rbp - 0x68]
mov dword [r15 + 0xfa34], eax
jmp case.default.0x180024368
mov dword [r15 + 0xfa68], edx
mov dword [r15 + 0xfa6c], esi
jmp case.default.0x180024368
mov rax, qword [r15 + 0xfa78]
xor edi, edi
mov qword [rbp - 0x28], rax
mov rax, qword [r15 + 0xfa80]
mov qword [rbp - 0x50], rax
mov rax, qword [r15 + 0xfa88]
mov qword [rbp - 0x20], rax
jmp case.default.0x180024368
mov eax, dword [rbp - 0x40]
mov dword [r15 + 0xfa38], eax
mov eax, dword [rbp - 0x58]
mov dword [r15 + 0xfa3c], eax
jmp case.default.0x180024368
mov edx, dword [r15 + 0xfa68]
mov esi, dword [r15 + 0xfa6c]
mov eax, dword [r15 + 0xfa70]
mov dword [rsp + 0x44], edx
mov dword [rbp - 0x70], esi
mov dword [rbp - 0x6c], eax
jmp case.default.0x180024368
mov dword [r15 + 0xfa64], r11d
jmp case.default.0x180024368
mov eax, dword [rbp - 0x6c]
mov dword [r15 + 0xfa70], eax
mov eax, dword [rsp + 0x6c]
mov dword [r15 + 0xfa74], eax
mov rax, qword [rbp - 0x28]
mov qword [r15 + 0xfa78], rax
mov rax, qword [rbp - 0x50]
mov qword [r15 + 0xfa80], rax
jmp case.default.0x180024368
mov eax, dword [rsp + 0x78]
mov dword [r15 + 0xfa40], eax
jmp case.default.0x180024368
mov dword [rbp - 0x18], edi
jmp case.default.0x180024368
mov ecx, dword [r15 + 0xfa60]
mov r11d, dword [r15 + 0xfa64]
mov dword [rsp + 0x5c], ecx
mov dword [rsp + 0x50], r11d
jmp case.default.0x180024368
mov rax, qword [rbp - 0x20]
mov qword [r15 + 0xfa88], rax
jmp case.default.0x180024368
xor edx, edx
xor r9d, r9d
xor r8d, r8d
lea ecx, [rdx + 0x42]
call fcn.18001bef0
mov ecx, 2
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rbx
lea rdx, str._n_nbzip2_libbzip2:_internal_error_number__d._nThis_is_a_bug_in_bzip2_libbzip2___s._nPlease_report_it_to_me_at:_jseward_bzip.org.__If_this_happened_nwhen_you_were_using_some_program_which_uses_libbzip2_as_a_ncomponent__you_should_also_report_this_bug_to_the_author_s__nof_that_program.__Please_make_an_effort_to_report_this_bug__ntimely_and_accurate_bug_reports_eventually_lead_to_higher_nquality_software.__Thanks.__Julian_Seward__10_December_2007._n_n
mov rcx, rax
mov r8d, 0xfa1
call fcn.180085950
mov ecx, 3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor edx, edx
xor r9d, r9d
xor r8d, r8d
lea ecx, [rdx + 0x42]
call fcn.18001bef0
mov ecx, 2
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rbx
lea rdx, str._n_nbzip2_libbzip2:_internal_error_number__d._nThis_is_a_bug_in_bzip2_libbzip2___s._nPlease_report_it_to_me_at:_jseward_bzip.org.__If_this_happened_nwhen_you_were_using_some_program_which_uses_libbzip2_as_a_ncomponent__you_should_also_report_this_bug_to_the_author_s__nof_that_program.__Please_make_an_effort_to_report_this_bug__ntimely_and_accurate_bug_reports_eventually_lead_to_higher_nquality_software.__Thanks.__Julian_Seward__10_December_2007._n_n
mov rcx, rax
mov r8d, 0xfa2
call fcn.180085950
mov ecx, 3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3