Function at 0x180041710
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4b0]
sub rsp, 0x5b0
mov rax, qword [0x180071748]
xor rax, rsp
mov qword [rbp + 0x4a0], rax
mov rax, qword [rbp + 0x518]
mov r15, r9
mov r14d, dword [rbp + 0x510]
mov r12, r8
mov qword [rsp + 0x58], rax
mov r10, rdx
mov rax, qword [rbp + 0x520]
mov qword [rbp - 0x78], rax
mov rax, qword [rbp + 0x528]
lea edi, [r14 - 0xc]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x78], r9
mov qword [rbp + 0x30], r8
mov qword [rsp + 0x68], rdx
mov qword [rbp - 0x20], rcx
cmp r14d, edi
jbe 0x1800418db
lea ebx, [r14 - 0x111]
lea rdx, [0x180000000]
nop
cmp ebx, 0x12
ja case.0x1800417b3.7
mov ecx, dword [rdx + rbx*4 + 0x43820]
add rcx, rdx
jmp rcx
mov rcx, qword [rbp - 0x68]
mov rax, qword [rsp + 0x58]
mov qword [rcx], rax
jmp case.0x1800417b3.7
mov rax, qword [r12]
cmp r10, qword [rax + 0x120]
jne 0x1800417ee
lea rcx, [rax + 0x228]
mov qword [rbp - 0x68], rcx
lea rcx, [rax + 0x230]
mov qword [rbp - 0x18], rcx
jmp case.0x1800417b3.7
mov rcx, qword [rax + 0x240]
mov qword [rbp - 0x68], rcx
lea rax, [rcx + 8]
mov qword [rbp - 0x18], rax
jmp case.0x1800417b3.7
movzx eax, word [0x18006b65c]
mov word [rbp + 0x214], ax
movzx eax, byte [0x18006b65e]
mov byte [rbp + 0x216], al
jmp case.0x1800417b3.7
mov byte [rbp + 0x210], 0x57
jmp case.0x1800417b3.7
mov rax, qword [r12]
mov rax, qword [rax + 0x2a8]
mov qword [rbp + 0x38], rax
jmp case.0x1800417b3.7
movzx eax, word [0x18006b660]
mov word [rbp + 0x218], ax
movzx eax, byte [0x18006b662]
mov byte [rbp + 0x21a], al
mov dword [rbp + 0x238], 0x730077
jmp case.0x1800417b3.7
mov dword [rbp + 0x23c], 0x5f0032
jmp case.0x1800417b3.7
mov r8d, 2
lea rdx, [0x18006b664]
lea rcx, [rbp + 0x210]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r10, qword [rsp + 0x68]
lea rdx, [0x180000000]
jmp case.0x1800417b3.7
movzx eax, word [0x18006b668]
mov word [rbp + 0x211], ax
mov word [rbp + 0x213], 0x53
jmp case.0x1800417b3.7
mov byte [rbp + 0x211], 0
jmp case.0x1800417b3.7
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x68], rax
dec ebx
lea eax, [rbx + 0x111]
cmp eax, edi
ja 0x1800417a0
imul eax, r14d, 0x738
mov esi, r14d
mov dword [rbp - 0x70], eax
cmp r14d, eax
ja 0x180043272
mov r12, qword [rbp - 0x58]
xor ebx, ebx
movzx edi, byte [rsp + 0x40]
mov r13, qword [rbp - 0x58]
movzx r15d, byte [rsp + 0x40]
movzx r14d, byte [rsp + 0x40]
lea ecx, [rbx + 0x6c]
nop
cmp esi, 0x3f01b
ja 0x18004323e
je 0x180043232
cmp esi, 0x1f899
ja 0x1800431ea
je 0x1800431d4
cmp esi, 0x117
je 0x1800431b4
cmp esi, 0xa8ed
je 0x1800431a8
cmp esi, 0x150c3
jne 0x180043804
mov word [rbp + 0x24c], bx
jmp 0x180043804
mov edi, dword [rbp - 0x40]
xor r9d, r9d
mov ebx, dword [rsp + 0x74]
mov r13, qword [rbp - 0x58]
mov qword [rbp - 0x48], rdi
nop word [rax + rax]
mov esi, 0x7f
nop word [rax + rax]
lea eax, [rsi - 0x7f]
cmp eax, 6
ja case.0x1800419a6.131
mov ecx, dword [rdx + rax*4 + 0x4386c]
add rcx, rdx
jmp rcx
mov r8, qword [rbp - 0x78]
lea r9, [rsp + 0x60]
mov rdx, qword [rsp + 0x58]
mov rcx, r10
call qword [r10 + 8]
mov r10, qword [rsp + 0x68]
lea rdx, [0x180000000]
mov dword [rbp - 0x3c], eax
xor r9d, r9d
jmp case.0x1800419a6.131
mov rax, qword [rsp + 0x60]
mov rcx, qword [rbp - 0x68]
mov qword [rsp + 0x58], rax
jmp 0x180043093
mov rcx, qword [r12]
mov edx, dword [rcx + 0x380]
sub edx, 2
je 0x1800430e0
cmp edx, 1
je 0x1800430a9
lea rdx, [0x180000000]
jmp case.0x1800419a6.131
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x60], rax
jmp case.0x1800419a6.131
mov eax, dword [rbp - 0x3c]
add eax, 5
cmp eax, 0x12
ja case.default.0x180041a39
cdqe
mov ecx, dword [rdx + rax*4 + 0x43888]
add rcx, rdx
jmp rcx
mov r11, qword [rbp - 0x78]
mov esi, 0x1a
mov r14, qword [rbp - 0x20]
mov rdx, qword [rbp - 0x80]
nop dword [rax]
mov eax, esi
sub eax, 0x16
je 0x180043276
sub eax, 1
je 0x180041b2c
sub eax, 1
je 0x180041abc
sub eax, 1
je 0x180041ab0
cmp eax, 1
jne 0x180041b45
cmp byte [rdx], 0
je 0x180041b45
mov ecx, 0x11e
mov eax, ecx
sub eax, 0x11e
je 0x180041a99
cmp eax, 1
je 0x180043118
jmp 0x180041aa1
mov rax, qword [rsp + 0x58]
mov qword [r15], rax
inc ecx
cmp ecx, 0x120
jb 0x180041a85
jmp 0x180041b45
mov rax, qword [rbp - 0x18]
mov qword [rax], r11
jmp 0x180041b45
mov rax, qword [r12]
mov r9, qword [rax + 0x78]
test r9, r9
je 0x180041ae2
mov byte [rsp + 0x40], 0xa
lea rdx, [rsp + 0x40]
mov rcx, qword [rax + 8]
mov r8d, 1
call r9
jmp 0x180041b10
cmp qword [rax + 0xa0], 0
je 0x180041b1d
mov qword [rsp + 0x50], rax
lea r9, [rsp + 0x50]
mov rax, qword [rsp + 0x58]
mov r8, r10
mov edx, 0x8d
mov qword [rsp + 0x20], rax
mov rcx, r11
call fcn.180007400
mov rdx, qword [rbp - 0x80]
mov r11, qword [rbp - 0x78]
mov r10, qword [rsp + 0x68]
cmp dword [r14], 0
je 0x180043189
xor r9d, r9d
jmp 0x180041b45
mov rcx, qword [r12]
mov eax, dword [r14]
cmp dword [rcx + 0x254], eax
jne 0x180043171
mov qword [r15], r11
mov ebx, r9d
dec esi
cmp esi, 0x15
ja 0x180041a50
jmp 0x180041b56
mov rdx, qword [rbp - 0x80]
mov r11, qword [rbp - 0x20]
mov r8d, 0xc2
mov eax, r8d
sub eax, 0xc1
je 0x180043189
cmp eax, 1
jne 0x180041c16
cmp byte [rdx], 0
je 0x180041bb1
mov ecx, 0xfc
mov eax, ecx
sub eax, 0xfc
je 0x180041b9f
sub eax, 1
je 0x180041b9a
cmp eax, 1
je 0x180043276
jmp 0x180041ba7
mov ebx, r9d
jmp 0x180041ba7
mov rax, qword [rsp + 0x58]
mov qword [r15], rax
inc ecx
cmp ecx, 0xff
jb 0x180041b81
cmp dword [r11], 0
jle 0x180041c16
mov edx, 0xb6
nop dword [rax]
cmp edx, 0xb6
je 0x180041bf5
cmp edx, 0x444
je 0x180041beb
cmp edx, 0x7d2
je 0x180041be6
cmp edx, 0xb60
je 0x180043276
jmp 0x180041c08
mov ebx, r9d
jmp 0x180041c08
mov rax, qword [rsp + 0x58]
mov qword [r15], rax
jmp 0x180041c08
mov rcx, qword [r12]
mov eax, dword [r11]
cmp dword [rcx + 0x254], eax
jne 0x180043171
add edx, 0x38e
cmp edx, 0xe38
jbe 0x180041bc0
mov rdx, qword [rbp - 0x80]
dec r8d
cmp r8d, 0xc0
ja 0x180041b60
mov eax, 0xbe
nop
cmp eax, 0xbe
je 0x1800430ea
add eax, 0x58
cmp eax, 0x116
jb 0x180041c30
mov rdx, qword [rbp - 0x80]
mov ecx, 0x126
nop
mov eax, ecx
sub eax, 0x126
je 0x180041c64
cmp eax, 1
je 0x180043276
jmp 0x180041c72
cmp byte [rdx], 0
jne 0x180043110
mov ebx, 5
inc ecx
cmp ecx, 0x128
jb 0x180041c50
jmp 0x180041c82
mov rdx, qword [rbp - 0x80]
mov eax, 0x12b
nop word [rax + rax]
cmp eax, 0x12b
je 0x180043100
add eax, 0x1d
cmp eax, 0x148
jb 0x180041c90
lea rdx, [0x180000000]
mov r15d, 0x10b
mov r14d, 5
nop dword [rax + rax]
cmp r14d, 5
ja case.default.0x180041cd7
mov eax, r14d
mov ecx, dword [rdx + rax*4 + 0x438d4]
add rcx, rdx
jmp rcx
mov rcx, qword [rbp + 0x38]
cmp byte [rcx + 0x101], 0
mov rax, qword [rcx + 0xc0]
mov qword [rcx + 0xb8], rax
je 0x180041d46
cmp byte [rcx + 0x102], 0
jne 0x180041d46
mov rcx, qword [rbp - 0x60]
test rcx, rcx
jne 0x180041d5d
mov rax, qword [r12]
mov r9, qword [rax + 0xf0]
test r9, r9
je 0x180041fdb
mov rdx, qword [rbp - 0x28]
xor r8d, r8d
mov rcx, qword [rax + 8]
call r9
mov r15, qword [rsp + 0x78]
mov r10, qword [rsp + 0x68]
lea rdx, [0x180000000]
mov esi, 0x82
xor r9d, r9d
jmp case.0x1800419a6.131
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x180043134
cmp byte [rcx + 0x3a], 0
je 0x18004312a
cmp byte [rcx + 0x38], 0
je case.default.0x180041cd7
mov eax, ILFindLastID
jmp 0x180043278
cmp byte [rsp + 0x70], 0
jne 0x180042014
movsxd rcx, dword [r10 + 0x88]
mov r8d, 0xa2
mov r9, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x58]
sub r9, rcx
add rdx, rcx
mov rcx, qword [rbp + 0x38]
mov qword [rsp + 0x20], rdx
add rcx, 0xa0
mov rdx, r10
call fcn.18005bd00
mov qword [rbp - 0x28], rax
jmp case.default.0x180041cd7
movsxd rcx, dword [r10 + 0x88]
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x58]
sub r8, rcx
mov rax, qword [rbp - 0x58]
add rdx, rcx
mov rcx, r10
mov qword [rbp - 0x28], rax
call qword [r10 + 0x60]
mov byte [rsp + 0x70], al
jmp case.default.0x180041cd7
mov rcx, qword [rbp - 0x60]
cmp qword [rcx + 0x30], 0
jne 0x180043148
cmp qword [rcx + 8], 0
je 0x180041e75
mov esi, 0x80
mov eax, esi
sub eax, 0x80
je 0x180041e4f
cmp eax, 1
jne 0x180041e60
mov rax, qword [r12]
mov r8, rcx
mov qword [rsp + 0x28], r9
lea rcx, [rsp + 0x50]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x50], rax
xor edx, edx
mov byte [rsp + 0x40], 0
mov dword [rsp + 0x20], 0xee
call fcn.18004d7f0
test eax, eax
jne 0x180043278
mov rcx, qword [rbp - 0x60]
jmp 0x180041e60
mov rax, qword [r12]
cmp byte [rax + 0x250], 0
je 0x180042031
inc esi
mov r9d, 0
cmp esi, 0x82
jb 0x180041e04
jmp case.default.0x180041cd7
mov rax, qword [r12]
cmp qword [rax + 0xe0], 0
je 0x180041f49
mov esi, 0x22
nop dword [rax]
mov eax, esi
sub eax, 0x22
je 0x180041f34
sub eax, 1
je 0x180041f2e
sub eax, 1
je 0x180041ef9
cmp eax, 1
jne 0x180041f3c
mov rax, qword [rcx + 0x28]
mov r10, qword [r12]
mov r9, qword [rcx + 0x18]
mov r8, qword [rcx + 0x20]
mov rdx, qword [rbp]
mov rcx, qword [r10 + 0xe8]
mov qword [rsp + 0x20], rax
call qword [r10 + 0xe0]
test eax, eax
je 0x18004313e
mov rcx, qword [r12]
mov rax, qword [rcx + 0x328]
mov qword [rcx + 0x320], rax
mov rcx, qword [rbp - 0x60]
jmp 0x180041f3c
mov rax, qword [r12]
lea rdx, [rbp + 0x40]
mov r8d, 0x124
mov qword [rbp + 0x40], rax
xor ecx, ecx
call fcn.1800187d0
mov rcx, qword [rbp - 0x60]
mov qword [rbp], rax
mov byte [rcx + 0x38], 0
cmp rax, 0
jne 0x180041f3c
mov eax, 1
jmp 0x180043278
mov byte [rcx + 0x38], 1
jmp 0x180041f3c
mov rax, qword [rbp - 0x58]
mov qword [rbp], rax
inc esi
cmp esi, 0x26
jb 0x180041e90
jmp case.default.0x180041cd7
cmp qword [rax + 0xa0], 0
je case.default.0x180041cd7
mov rcx, qword [rsp + 0x60]
lea r9, [rsp + 0x50]
mov qword [rsp + 0x50], rax
mov r8, r10
mov rax, qword [rsp + 0x58]
mov edx, 0x8d
mov qword [rsp + 0x20], rax
call fcn.180007400
jmp case.default.0x180041cd7
mov rsi, qword [rbp - 0x28]
test rsi, rsi
je 0x180041f24
mov qword [rsp + 0x28], r9
lea rax, [rbp - 0x60]
mov qword [rsp + 0x50], r9
lea r8, [rsp + 0x50]
mov r9, qword [rbp + 0x38]
xor edx, edx
mov ecx, 0x11d
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x60], rsi
call fcn.180014ee0
mov qword [rbp - 0x60], rax
mov r10, qword [rsp + 0x68]
dec r15d
dec r14d
xor r9d, r9d
cmp r15d, 0x105
jbe case.0x180041a39.1
lea rdx, [0x180000000]
jmp 0x180041cc0
cmp qword [rax + 0xa0], 0
je case.0x180041cd7.0
mov rcx, qword [rsp + 0x60]
lea r9, [rsp + 0x50]
mov qword [rsp + 0x50], rax
mov r8, r10
mov rax, qword [rsp + 0x58]
mov edx, 0x8d
mov qword [rsp + 0x20], rax
call fcn.180007400
jmp case.0x180041cd7.0
mov rax, qword [r12]
mov r9, qword [rax + 0x78]
test r9, r9
je 0x180041fdb
mov r8d, 1
lea rdx, [rsp + 0x70]
jmp 0x180041d21
mov r9, qword [rax + 0xf0]
test r9, r9
je 0x180042048
mov rdx, qword [rcx]
xor r8d, r8d
jmp 0x180041d21
cmp qword [rax + 0xa0], 0
je case.0x180041cd7.0
mov r8, qword [rsp + 0x68]
lea r9, [rsp + 0x50]
mov rcx, qword [rsp + 0x60]
mov edx, 0x8d
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x20], rax
call fcn.180007400
jmp case.0x180041cd7.0
mov r15d, 0xc0
nop dword [rax]
cmp r15d, 0x260
ja 0x1800421e2
je 0x1800421d3
mov eax, r15d
sub eax, 0xc0
je 0x1800420fd
sub eax, 0x68
je 0x1800420ed
sub eax, 0x68
je 0x1800420e4
cmp eax, 0x68
jne 0x180042422
mov qword [r13 + 0x28], r9
mov rcx, r10
movsxd rdx, dword [r10 + 0x88]
add rdx, qword [rsp + 0x58]
mov qword [r13 + 8], rdx
call qword [r10 + 0x40]
mov dword [r13 + 0x10], eax
jmp 0x18004241f
mov qword [r13 + 0x20], r9
jmp 0x180042422
mov rax, qword [r12]
mov qword [rax + 0x2b8], r13
jmp 0x180042422
mov rcx, qword [r12]
mov rax, qword [rcx + 0x2c0]
test rax, rax
je 0x18004211f
mov r13, rax
mov rax, qword [rax]
mov qword [rcx + 0x2c0], rax
jmp 0x1800421bb
mov r14d, 0x5d
cmp r14d, 0x5d
je 0x18004218c
cmp r14d, 0x10f
jne 0x1800421a4
mov rax, qword [r12]
mov ecx, 0x20
call qword [rax + 0x18]
mov qword [r13 + 0x40], rax
test rax, rax
jne 0x18004217e
mov esi, 0xc5
nop
mov eax, esi
sub eax, 0xc5
je 0x180042164
cmp eax, 9
je 0x180043276
jmp 0x180042173
mov rax, qword [r12]
mov rcx, r13
call qword [rax + 0x28]
mov ebx, 1
add esi, 9
cmp esi, 0xd7
jb 0x180042150
mov rax, qword [r13 + 0x40]
add rax, 0x20
mov qword [r13 + 0x48], rax
jmp 0x1800421a4
mov rax, qword [r12]
mov ecx, 0x58
call qword [rax + 0x18]
mov r13, rax
test rax, rax
je 0x180041f24
add r14d, 0xb2
cmp r14d, 0x1c1
jb 0x180042125
xor r9d, r9d
mov qword [r13 + 0x50], r9
mov rax, qword [r12]
mov rcx, qword [rax + 0x2b8]
mov qword [r13], rcx
jmp 0x180042422
mov rax, qword [r12]
inc dword [rax + 0x254]
jmp 0x180042422
mov eax, r15d
sub eax, 0x2c8
je 0x1800422d9
sub eax, 0x68
je 0x180042293
sub eax, 0x68
je 0x18004220c
cmp eax, 0x68
je case.0x180041cd7.0
jmp 0x180042422
mov esi, dword [rbp - 0x70]
test esi, esi
jne 0x180043152
mov rax, qword [r12]
mov r9, qword [rax + 0x68]
test r9, r9
je 0x180042238
mov r8, qword [rax + 0x2e8]
mov rdx, qword [r13 + 0x18]
mov rcx, qword [rax + 8]
call r9
jmp 0x180042268
cmp qword [rax + 0xa0], 0
je 0x180042268
mov rcx, qword [rsp + 0x60]
lea r9, [rsp + 0x50]
mov qword [rsp + 0x50], rax
mov r8, r10
mov rax, qword [rsp + 0x58]
mov edx, 0x8d
mov qword [rsp + 0x20], rax
call fcn.180007400
mov r9, qword [r12]
xor eax, eax
mov qword [rsp + 0x28], rax
add r9, 0x308
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor edx, edx
mov ecx, 0xcb
call fcn.18005b3f0
jmp 0x18004241f
mov rax, qword [r13 + 0x40]
lea rcx, [r13 + 0x18]
mov qword [rcx], rax
lea rdx, [r13 + 0x50]
mov rax, qword [rbp + 8]
lea r8, [rsp + 0x50]
mov dword [rsp + 0x28], 0x75
mov r9, r10
mov qword [rsp + 0x20], rcx
mov byte [rax], 0
mov rax, qword [r12]
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x50], rax
call fcn.18005e330
mov dword [rbp - 0x70], eax
jmp 0x18004241f
mov ecx, 0xf2
nop
cmp ecx, 0xf2
je 0x1800423f5
cmp ecx, 0xa298
jne 0x180042408
mov rax, qword [r13 + 0x40]
mov qword [rbp + 8], rax
mov r14d, 0x95
mov eax, r14d
sub eax, 0x93
je 0x180042372
sub eax, 1
je 0x180042362
cmp eax, 1
jne 0x1800423db
mov rax, qword [r13 + 0x48]
lea r9, [rbp + 8]
mov rsi, qword [rbp - 0x10]
lea rdx, [rbp + 0x28]
dec rax
mov r8, rsi
mov rcx, r10
mov qword [rsp + 0x20], rax
call qword [r10 + 0x78]
mov eax, dword [rbp + 8]
sub eax, dword [r13 + 0x40]
mov dword [rbp - 0x6c], eax
cmp qword [rbp + 0x28], rsi
jne 0x1800423db
mov dword [r13 + 0x30], eax
mov ecx, 0xa298
jmp 0x180042408
mov eax, dword [r13 + 0x48]
sub eax, dword [r13 + 0x40]
add eax, eax
mov dword [rsp + 0x74], eax
jmp 0x1800423db
mov esi, 0x111
cmp esi, 0x111
je 0x1800423ac
cmp esi, 0x2553
je 0x18004239d
cmp esi, 0x4995
jne 0x1800423cd
movsxd rax, dword [rbp - 0x6c]
add rax, qword [rbp + 0x20]
mov qword [rbp + 8], rax
jmp 0x1800423cd
movsxd rax, dword [rsp + 0x74]
add rax, qword [rbp + 0x20]
mov qword [r13 + 0x48], rax
jmp 0x1800423cd
mov rax, qword [r12]
movsxd rdx, dword [rsp + 0x74]
mov rcx, qword [r13 + 0x40]
call qword [rax + 0x20]
mov qword [rbp + 0x20], rax
test rax, rax
je 0x180041f24
mov qword [r13 + 0x40], rax
add esi, 0x2442
cmp esi, 0x6cc6
jbe 0x180042377
mov r10, qword [rsp + 0x68]
dec r14d
cmp r14d, 0x92
ja 0x180042306
jmp 0x180042300
mov rax, qword [r13 + 8]
movsxd rdx, dword [r13 + 0x10]
add rdx, rax
mov qword [rbp + 0x28], rax
mov qword [rbp - 0x10], rdx
mov r10, qword [rsp + 0x68]
add ecx, 0xa1a6
cmp ecx, 0x1434c
jbe 0x1800422e0
xor r9d, r9d
mov r10, qword [rsp + 0x68]
add r15d, 0x68
cmp r15d, 0x468
jb 0x180042090
nop dword [rax + rax]
mov r15, qword [rbp + 0x250]
mov r14d, 0x22
nop dword [rax]
cmp r14d, 0x12ba
ja 0x180042554
je 0x180042512
cmp r14d, 0x22
je 0x1800424f9
cmp r14d, 0x4c8
je 0x1800424b1
cmp r14d, 0x96e
je 0x1800424a3
cmp r14d, 0xe14
jne 0x180042707
mov rcx, qword [r12]
mov rax, qword [rcx + 0x320]
mov qword [rcx + 0x328], rax
jmp 0x180042707
test r15, r15
je 0x180041f24
jmp 0x180042707
mov rsi, qword [rbp + 0x48]
mov rcx, r10
mov rdx, rsi
mov byte [rsp + 0x48], 1
call qword [r10 + 0x40]
mov rcx, qword [r12]
mov r8d, 0xa2
mov rdx, qword [rsp + 0x68]
add rcx, 0x308
movsxd r9, eax
add r9, rsi
mov qword [rsp + 0x20], rsi
call fcn.18005bd00
mov r15, rax
mov qword [rbp + 0x250], rax
jmp 0x180042707
movsxd rax, dword [r10 + 0x88]
add rax, qword [rsp + 0x58]
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x10], r9
jmp 0x180042707
mov rax, qword [r12]
lea r8, [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
lea rdx, [rbp + 0x10]
mov qword [rsp + 0x50], rax
mov r9, r10
lea rax, [rbp + 0x250]
mov dword [rsp + 0x28], 0x75
mov qword [rsp + 0x20], rax
call fcn.18005e330
mov r15, qword [rbp + 0x250]
mov dword [rbp - 0x38], eax
jmp 0x180042707
cmp r14d, 0x1760
je 0x1800426c8
cmp r14d, 0x1c06
je 0x180042625
cmp r14d, 0x20ac
jne 0x180042707
cmp qword [rbp + 0x10], 0
je 0x180042707
mov rdi, qword [rbp + 0x10]
mov r15, qword [rbp + 0x50]
nop
mov esi, 0x78
cmp esi, 0x78
je 0x1800425db
cmp esi, 0x1680
je 0x1800425b7
cmp esi, 0x2c88
jne 0x1800425fa
mov rcx, qword [r15]
mov rax, qword [r15 + 0x10]
mov qword [rcx + 8], rax
jmp 0x1800425fa
mov rax, qword [r12]
mov rdi, qword [rdi + 8]
mov qword [rbp + 0x10], rdi
mov rcx, qword [rax + 0x2d0]
mov qword [r15 + 8], rcx
mov rax, qword [r12]
mov qword [rax + 0x2d0], r15
jmp 0x1800425fa
mov rcx, qword [r12]
mov r15, rdi
mov rax, qword [rcx + 0xd0]
test rax, rax
je 0x1800425fa
mov rdx, qword [rdi]
mov rcx, qword [rcx + 8]
mov rdx, qword [rdx]
call rax
add esi, 0x1608
cmp esi, 0x4218
jbe 0x180042595
mov qword [rbp + 0x50], r15
test rdi, rdi
jne 0x180042590
mov rdi, qword [rbp - 0x48]
mov r15, qword [rbp + 0x250]
jmp 0x180042707
mov rax, qword [r12]
cmp qword [rax + 0x70], 0
je 0x180042661
cmp qword [rax + 0x68], 0
je 0x180042649
mov rax, qword [rbp - 0x18]
mov rcx, qword [rbp - 0x68]
mov rax, qword [rax]
mov qword [rcx], rax
mov rax, qword [r12]
mov rcx, qword [rax + 8]
mov rdx, r15
call qword [rax + 0x70]
mov rax, qword [r12]
xor sil, sil
mov byte [rsp + 0x48], sil
jmp 0x180042666
movzx esi, byte [rsp + 0x48]
mov r9, rax
test sil, sil
je 0x1800426a4
cmp qword [rax + 0xa0], 0
je 0x1800426a4
mov r8, qword [rsp + 0x68]
lea r9, [rsp + 0x50]
mov rcx, qword [rsp + 0x60]
mov edx, 0x8d
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x20], rax
call fcn.180007400
mov r9, qword [r12]
xor eax, eax
add r9, 0x308
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rax
mov ecx, 0xcb
call fcn.18005b3f0
jmp 0x180042707
mov edx, dword [rbp - 0x38]
test edx, edx
jne 0x180043159
mov rcx, qword [r12]
mov rax, qword [rcx + 0x320]
mov qword [rcx + 0x328], rax
mov rcx, qword [r12]
mov rax, qword [rcx + 0x68]
test rax, rax
je 0x180042707
mov r8, qword [rcx + 0x2e8]
mov rdx, r15
mov rcx, qword [rcx + 8]
call rax
mov byte [rsp + 0x48], 0
mov r10, qword [rsp + 0x68]
add r14d, 0x4a6
mov r9d, 0
cmp r14d, 0x2530
jbe 0x180042450
mov rcx, qword [r12]
cmp dword [rcx + 0x254], r9d
jne case.0x180041cd7.0
mov r9, qword [rsp + 0x78]
mov r8, qword [rbp - 0x78]
mov rdx, qword [rsp + 0x60]
call qword [0x180071fb0]
jmp 0x180043278
mov r11, qword [rbp - 0x20]
mov rcx, qword [r12]
mov eax, dword [r11]
cmp dword [rcx + 0x254], eax
je 0x180043171
mov r14d, 0x107
nop dword [rax]
cmp r14d, 0x20cf9
ja 0x18004285c
je 0x180042811
cmp r14d, 0x107
je 0x1800427eb
cmp r14d, 0xafad
je 0x1800427c9
cmp r14d, 0x15e53
jne 0x180042ab5
mov eax, dword [r10 + 0x88]
mov rcx, r10
add eax, eax
movsxd rsi, eax
add rsi, qword [rsp + 0x58]
mov rdx, rsi
mov qword [rbp + 0x58], rsi
call qword [r10 + 0x40]
mov dword [rbp - 0x34], eax
jmp 0x180042ab5
mov rax, qword [r12]
mov rdx, qword [rbp - 0x30]
mov rcx, qword [rax + 0x2c0]
mov qword [rdx], rcx
mov rax, qword [r12]
mov qword [rax + 0x2c0], rdx
jmp 0x180042ab5
mov rcx, qword [r12]
mov rax, qword [rbp - 0x58]
mov qword [rbp + 0x58], rax
mov rax, qword [rcx + 0x2b8]
mov qword [rbp - 0x30], rax
mov rax, qword [rax]
mov qword [rcx + 0x2b8], rax
jmp 0x180042ab5
mov r9, qword [rbp - 0x30]
movsxd rcx, dword [rbp - 0x34]
mov rsi, qword [rbp + 0x58]
cmp ecx, dword [r9 + 0x10]
jne 0x18004283a
mov r8, rcx
mov rdx, rsi
mov rcx, qword [r9 + 8]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x180042ab5
mov eax, pe_nt_image_headers64
nop
cmp eax, 0xf8
je 0x180043160
add eax, 0x5d00
cmp eax, 0x5d00
jbe 0x180042840
jmp 0x180042ab5
cmp r14d, 0x2bb9f
je 0x180042aab
cmp r14d, 0x36a45
je 0x180042957
cmp r14d, 0x418eb
jne 0x180042ab5
mov r9, qword [rbp - 0x30]
cmp qword [r9 + 0x50], 0
je 0x18004292f
mov rdi, qword [rbp - 0x58]
mov esi, 0x2c
nop dword [rax + rax]
cmp esi, 0x2c
je 0x1800428ea
cmp esi, 0xd7
je 0x1800428dc
cmp esi, 0x182
jne 0x18004290e
mov rax, qword [r12]
mov rcx, qword [rax + 0x2d0]
mov qword [rdi + 8], rcx
mov rax, qword [r12]
mov qword [rax + 0x2d0], rdi
mov rcx, qword [rdi]
mov rax, qword [rdi + 0x10]
mov qword [rcx + 8], rax
jmp 0x18004290e
mov rax, qword [r9 + 0x50]
mov rcx, qword [rax + 8]
mov qword [r9 + 0x50], rcx
jmp 0x18004290e
mov rcx, qword [r12]
mov rdi, qword [r9 + 0x50]
mov rax, qword [rcx + 0xd0]
test rax, rax
je 0x18004290e
mov rdx, qword [rdi]
mov rcx, qword [rcx + 8]
mov rdx, qword [rdx]
call rax
mov r9, qword [rbp - 0x30]
add esi, 0xab
cmp esi, 0x22d
jb 0x1800428a0
cmp qword [r9 + 0x50], 0
mov qword [rbp - 0x58], rdi
jne 0x180042896
mov rdi, qword [rbp - 0x48]
mov rcx, qword [r12]
cmp dword [rcx + 0x254], 0
jne 0x180042ab5
mov r8, qword [rbp - 0x78]
mov r9, r15
mov rdx, qword [rsp + 0x60]
call qword [0x180071fb0]
jmp 0x180043278
mov rax, qword [r12]
cmp qword [rax + 0x70], 0
je 0x180042a79
mov rdi, qword [rbp + 0x18]
mov esi, 0x8a
nop
mov eax, esi
sub eax, 0x88
je 0x180042a52
cmp eax, 1
jne 0x180042a65
mov rax, qword [r12]
mov r9, qword [rbp - 0x30]
cmp byte [rax + 0x1d0], 0
mov r8, qword [r9 + 0x20]
je 0x180042a65
test r8, r8
je 0x180042a65
mov edx, 0xa7
nop dword [rax]
cmp edx, 0xa7
je 0x180042a32
cmp edx, 0x2293
je 0x1800429cd
cmp edx, 0x447f
jne 0x180042a3a
mov byte [rdi], 0
jmp 0x180042a3a
movzx eax, byte [r8]
test al, al
je 0x1800429f0
nop word [rax + rax]
inc r8
mov byte [rdi], al
inc rdi
movzx eax, byte [r8]
test al, al
jne 0x1800429e0
mov rax, qword [r12]
mov rcx, qword [r9 + 0x28]
cmp byte [rax + 0x1d1], 0
je 0x180042a3a
test rcx, rcx
je 0x180042a3a
movzx eax, byte [rax + 0x374]
mov byte [rdi], al
inc rdi
movzx eax, byte [rcx]
test al, al
je 0x180042a3a
nop dword [rax]
mov byte [rdi], al
lea rcx, [rcx + 1]
movzx eax, byte [rcx]
inc rdi
test al, al
jne 0x180042a20
jmp 0x180042a3a
movsxd rdi, dword [r9 + 0x34]
add rdi, qword [r9 + 0x18]
add edx, 0x21ec
cmp edx, 0x65c4
jbe 0x1800429b0
mov qword [rbp + 0x18], rdi
jmp 0x180042a65
mov rcx, qword [rbp - 0x30]
mov rax, qword [r12]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rax + 8]
call qword [rax + 0x70]
dec esi
cmp esi, 0x87
ja 0x180042970
mov rdi, qword [rbp - 0x48]
jmp 0x180042ab5
cmp qword [rax + 0xa0], 0
je 0x180042ab5
mov rcx, qword [rsp + 0x60]
lea r9, [rsp + 0x50]
mov qword [rsp + 0x50], rax
mov r8, r10
mov rax, qword [rsp + 0x58]
mov edx, 0x8d
mov qword [rsp + 0x20], rax
call fcn.180007400
jmp 0x180042ab5
mov rax, qword [r12]
dec dword [rax + 0x254]
mov r10, qword [rsp + 0x68]
add r14d, 0xaea6
cmp r14d, 0x4c68a
jbe 0x180042770
mov rax, qword [rbp - 0x28]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x60], rax
mov rax, qword [rbp]
mov qword [rbp], rax
mov eax, dword [rbp - 0x70]
mov dword [rbp - 0x70], eax
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x10], rax
mov eax, dword [rbp - 0x6c]
mov dword [rbp - 0x6c], eax
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0x74], eax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x20], rax
jmp 0x180041d2d
mov esi, 0x86
mov eax, esi
sub eax, 0x85
je 0x180042b44
cmp eax, 1
jne 0x180042bbe
mov rdx, qword [rsp + 0x58]
mov rcx, r10
call qword [r10 + 0x58]
mov dword [rbp - 0x50], eax
cmp eax, 0
jge 0x180042bb6
mov eax, ILRemoveLastID
jmp 0x180043278
mov rax, qword [r12]
cmp qword [rax + 0x78], 0
je 0x180042b86
mov eax, dword [rbp - 0x50]
lea rcx, [rbp - 0x40]
mov qword [rsp + 0x20], r9
xor edx, edx
lea r9, [rsp + 0x50]
mov dword [rsp + 0x50], eax
mov r8d, 0x99
call fcn.180007710
mov r9, qword [r12]
lea rdx, [rbp - 0x40]
mov r8d, eax
mov rcx, qword [r9 + 8]
call qword [r9 + 0x78]
jmp 0x180042bb6
cmp qword [rax + 0xa0], 0
je 0x180042bbe
mov rcx, qword [rsp + 0x60]
lea r9, [rsp + 0x50]
mov qword [rsp + 0x50], rax
mov r8, r10
mov rax, qword [rsp + 0x58]
mov edx, 0x8d
mov qword [rsp + 0x20], rax
call fcn.180007400
mov r10, qword [rsp + 0x68]
xor r9d, r9d
dec esi
cmp esi, 0x84
ja 0x180042b14
jmp 0x180041d2d
mov rax, qword [r12]
mov r9, qword [rax + 0x78]
test r9, r9
je 0x180043051
mov byte [rsp + 0x40], 0xa
lea rdx, [rsp + 0x40]
mov rcx, qword [rax + 8]
mov r8d, 1
call r9
jmp 0x180041d2d
mov esi, 0x15
cmp esi, 0x15
je 0x180042c78
cmp esi, 0xad4
jne 0x180042d17
test edi, edi
jne 0x18004317b
cmp qword [rsp + 0x60], 0
jne 0x180042d17
mov edx, 0x129
nop dword [rax]
cmp edx, 0x129
je 0x180042c53
cmp edx, 0x6618
je 0x180042c4e
cmp edx, 0xcb07
je 0x180043276
jmp 0x180042c65
mov ebx, r9d
jmp 0x180042c65
mov rcx, qword [r12]
mov rax, qword [0x180071f80]
mov qword [rcx + 0x218], rax
add edx, 0x64ef
cmp edx, 0x12ecd
jbe 0x180042c30
jmp 0x180042d17
mov rax, qword [r12]
mov rdx, qword [rax + 0x90]
test rdx, rdx
je 0x180042c90
mov rcx, qword [rax + 8]
call rdx
jmp 0x180042cbe
cmp qword [rax + 0xa0], 0
je 0x180042cc3
mov rcx, qword [rsp + 0x60]
lea r9, [rbp - 0x48]
mov qword [rbp - 0x48], rax
mov r8, r10
mov rax, qword [rsp + 0x58]
mov edx, 0x8d
mov qword [rsp + 0x20], rax
call fcn.180007400
mov r10, qword [rsp + 0x68]
mov rax, qword [rbp - 0x80]
mov r9d, 0xc1
mov rdx, qword [rbp - 0x78]
mov r8, r10
mov rcx, r15
movzx eax, byte [rax]
mov byte [rsp + 0x40], al
mov rax, qword [r12]
mov qword [rbp - 0x48], rax
lea rax, [rbp - 0x48]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
call fcn.18003ea50
mov r10, qword [rsp + 0x68]
mov rdi, rax
mov qword [rbp - 0x48], rax
xor r9d, r9d
add esi, 0xabf
cmp esi, 0x157e
jbe 0x180042c03
jmp 0x180041d2d
mov r11, qword [rbp - 0x78]
mov r14d, 0x33
mov rdx, qword [rbp - 0x80]
nop dword [rax]
mov eax, r14d
sub eax, 0x30
je 0x180043193
sub eax, 1
je 0x180042e9e
sub eax, 1
je 0x180042daf
cmp eax, 1
jne 0x180042ed8
cmp byte [rdx], 0
je 0x180042ed8
mov ecx, 0x8b
cmp ecx, 0x8b
je 0x180042d94
cmp ecx, 0x330a
je 0x180042d8f
cmp ecx, 0x6589
je 0x180043276
jmp 0x180042d9c
mov ebx, r9d
jmp 0x180042d9c
mov rax, qword [rsp + 0x58]
mov qword [r15], rax
add ecx, 0x327f
cmp ecx, 0x977d
jbe 0x180042d71
jmp 0x180042ed8
mov rax, qword [r12]
mov r9, qword [rax + 0x78]
test r9, r9
je 0x180042e51
cmp byte [r10 + 0x8c], 0
jne 0x180042e3d
mov rdi, qword [rbp - 0x78]
mov esi, 0xe1
cmp esi, 0xe1
je 0x180042dfc
cmp esi, 0x26ac
jne 0x180042e29
mov rax, qword [r12]
mov r8d, dword [rbp + 0x30]
sub r8d, dword [rax + 0x58]
mov rdx, qword [rax + 0x58]
mov rcx, qword [rax + 8]
call qword [rax + 0x78]
jmp 0x180042e24
mov rcx, qword [r12]
lea r9, [rbp + 0x30]
mov r8, rdi
lea rdx, [rsp + 0x58]
mov rax, qword [rcx + 0x58]
mov qword [rbp + 0x30], rax
mov rax, qword [rcx + 0x60]
mov rcx, r10
mov qword [rsp + 0x20], rax
call qword [r10 + 0x78]
mov r10, qword [rsp + 0x68]
add esi, 0x25cb
cmp esi, 0x4b96
jbe 0x180042dd3
mov rdi, qword [rbp - 0x48]
jmp 0x180042e7f
mov rdx, qword [rsp + 0x58]
mov r8d, r11d
mov rcx, qword [rax + 8]
sub r8d, edx
call r9
jmp 0x180042e7f
cmp qword [rax + 0xa0], 0
je 0x180042e87
mov qword [rsp + 0x50], rax
lea r9, [rsp + 0x50]
mov rax, qword [rsp + 0x58]
mov r8, r10
mov edx, 0x8d
mov qword [rsp + 0x20], rax
mov rcx, r11
call fcn.180007400
mov r11, qword [rbp - 0x78]
mov rdx, qword [rbp - 0x80]
mov rax, qword [rbp - 0x20]
cmp dword [rax], 0
je 0x180043182
mov r10, qword [rsp + 0x68]
xor r9d, r9d
jmp 0x180042ed8
mov rax, qword [rbp - 0x20]
mov rcx, qword [r12]
mov eax, dword [rax]
cmp dword [rcx + 0x254], eax
je 0x180042ed8
mov ecx, 0x37
mov eax, ecx
sub eax, 0x36
je 0x180043276
cmp eax, 1
jne 0x180042ed1
mov rax, qword [rbp - 0x68]
mov ebx, ILRemoveLastID
mov qword [rax], r11
dec ecx
cmp ecx, 0x35
ja 0x180042eb5
dec r14d
cmp r14d, 0x2f
ja 0x180042d40
mov rax, qword [r12]
mov r14, qword [rax + 0x78]
test r14, r14
je 0x180043051
cmp byte [r10 + 0x8c], 0
jne 0x180042fb6
nop dword [rax]
nop dword [rax + rax]
mov esi, 0x80
cmp esi, 0x80
je 0x180042f70
cmp esi, 0x1300
je 0x180042f3b
cmp esi, 0x2580
jne 0x180042f9f
mov rcx, qword [rbp - 0x68]
mov rax, qword [rsp + 0x58]
mov qword [rcx], rax
jmp 0x180042f9f
mov rcx, qword [rbp - 0x18]
mov rax, qword [rsp + 0x58]
mov r8d, dword [rbp - 8]
mov qword [rcx], rax
mov rcx, qword [r12]
sub r8d, dword [rcx + 0x58]
mov rdx, qword [rcx + 0x58]
mov rcx, qword [rcx + 8]
call r14
mov rax, qword [rsp + 0x60]
cmp qword [rsp + 0x58], rax
je 0x180041d2d
jmp 0x180042f9a
mov rcx, qword [r12]
lea r9, [rbp - 8]
mov r8, qword [rsp + 0x60]
lea rdx, [rsp + 0x58]
mov rax, qword [rcx + 0x58]
mov qword [rbp - 8], rax
mov rax, qword [rcx + 0x60]
mov rcx, r10
mov qword [rsp + 0x20], rax
call qword [r10 + 0x78]
mov r10, qword [rsp + 0x68]
add esi, 0x1280
cmp esi, 0x3780
jbe 0x180042f15
jmp 0x180042f10
mov r8d, dword [rsp + 0x60]
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rax + 8]
sub r8d, edx
call r14
jmp 0x180041d2d
mov rax, qword [r12]
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x50], rax
xor r9d, r9d
mov rax, qword [rsp + 0x58]
mov r8, r10
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x60]
lea edx, [r9 + 0x58]
mov qword [rsp + 0x20], rax
call fcn.18005c580
test eax, eax
je 0x180041f24
jmp 0x180041d2d
mov rax, qword [r12]
mov edx, 0xdf
mov r8, qword [rsp + 0x58]
xor ecx, ecx
mov qword [rsp + 0x30], r10
mov qword [rsp + 0x28], r9
lea r9, [rsp + 0x50]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x20], rax
call fcn.18001b390
test eax, eax
je 0x180041f24
jmp 0x180041d2d
mov rax, qword [r12]
cmp qword [rax + 0xa0], 0
je 0x180041d2d
mov rcx, qword [rsp + 0x60]
lea r9, [rsp + 0x50]
mov qword [rsp + 0x50], rax
mov r8, r10
mov rax, qword [rsp + 0x58]
mov edx, 0x8d
mov qword [rsp + 0x20], rax
call fcn.180007400
jmp 0x180041d2d
mov rax, qword [rsp + 0x60]
mov rcx, qword [rbp - 0x18]
mov qword [rcx], rax
inc esi
cmp esi, 0x86
jb 0x180041990
jmp 0x180041980
mov ecx, 0xd1
nop
mov eax, ecx
sub eax, 0xd1
je 0x1800430ce
sub eax, 1
je 0x1800430c9
cmp eax, 1
je 0x180043276
jmp 0x1800430d6
mov ebx, r9d
jmp 0x1800430d6
mov rax, qword [rsp + 0x60]
mov qword [r15], rax
inc ecx
cmp ecx, 0xd4
jb 0x1800430b0
mov eax, 0x23
jmp 0x180043278
mov rax, qword [rsp + 0x60]
mov rcx, qword [rbp - 0x68]
mov qword [rcx], rax
mov eax, 4
jmp 0x180043278
cmp byte [rdx], 0
je 0x180043120
nop word [rax + rax]
mov rax, qword [rsp + 0x58]
mov qword [r15], rax
mov eax, r9d
jmp 0x180043278
mov eax, 6
jmp 0x180043278
mov eax, 0x18
jmp 0x180043278
mov eax, 0xb
jmp 0x180043278
mov eax, 0x15
jmp 0x180043278
mov eax, ILRemoveLastID
jmp 0x180043278
mov eax, esi
jmp 0x180043278
mov eax, edx
jmp 0x180043278
mov rax, qword [rbp - 0x68]
mov qword [rax], rsi
mov eax, 7
jmp 0x180043278
mov eax, ILRemoveLastID
jmp 0x180043278
mov eax, edi
jmp 0x180043278
mov rax, qword [rbp - 0x68]
mov qword [rax], r11
mov eax, 3
jmp 0x180043278
mov qword [r15], r11
mov eax, r9d
jmp 0x180043278
mov eax, reloc.SHELL32.dll_ILRemoveLastID
jmp 0x180043278
mov word [rbp + 0x24a], cx
jmp 0x180043804
mov dword [rbp + 0x240], 0x320033
mov dword [rbp + 0x244], 0x64002e
mov word [rbp + 0x248], cx
jmp 0x180043804
mov byte [rsp + 0x48], 1
mov qword [rbp + 0x50], rbx
mov dword [rsp + 0x50], 0x36
jmp 0x180043804
cmp esi, 0x2a06f
je 0x180043207
cmp esi, 0x34845
jne 0x180043804
mov qword [rbp - 0x58], rbx
jmp 0x180043804
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, [rbp + 0x210]
lea rcx, [rbp + 0x238]
lea edx, [r9 + 0x25]
call fcn.18002be80
mov qword [rbp + 0x28], rax
mov dword [rbp - 0x34], ebx
jmp 0x1800437ff
mov qword [rbp + 0x48], rbx
mov dword [rbp - 0x40], ebx
jmp 0x180043804
cmp esi, 0x497f1
je 0x180043634
cmp esi, 0x53fc7
je 0x180043307
cmp esi, 0x5e79d
je 0x1800432b7
cmp esi, 0x68f73
je 0x1800432a2
cmp esi, 0x73749
jne 0x180043804
mov ebx, dword [rsp + 0x74]
mov eax, ebx
mov rcx, qword [rbp + 0x4a0]
xor rcx, rsp
call fcn.180064e10
mov rbx, qword [rsp + 0x5f0]
add rsp, 0x5b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
xor edx, edx
mov ecx, 0xc3
call fcn.18000cc40
mov byte [rsp + 0x74], al
jmp 0x1800437ff
movzx eax, byte [rsp + 0x48]
mov ecx, ebx
mov rbx, qword [rbp + 0x40]
mov r9d, dword [rbp - 0x40]
test rbx, rbx
mov r8, qword [rbp - 0x58]
mov edx, dword [rsp + 0x50]
cmovne ecx, eax
mov byte [rsp + 0x48], cl
lea rax, [rbp + 0x390]
mov rcx, qword [rbp + 0x50]
mov qword [rsp + 0x20], rax
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
cmp byte [rsp + 0x48], 0
je 0x1800437fd
mov rcx, rbx
call qword [sym.imp.GDI32.dll_RemoveFontMemResourceEx]
jmp 0x1800437fd
mov r9, qword [rbp + 0x48]
xor r8d, r8d
mov edx, dword [rbp - 0x34]
xor ecx, ecx
call qword [sym.imp.GDI32.dll_AddFontMemResourceEx]
mov rcx, qword [rbp + 0x30]
xor edx, edx
mov r8d, 0x136
mov qword [rbp + 0x40], rax
call fcn.18000de20
test al, al
jne 0x1800437ff
mov ebx, 0x11e
nop dword [rax + rax]
cmp ebx, 0x32e6e
ja 0x1800434ea
je 0x18004348d
cmp ebx, 0x197c6
ja 0x180043435
je 0x180043416
cmp ebx, 0x11e
je 0x1800433d7
cmp ebx, 0x66c8
je 0x1800433a5
cmp ebx, 0xcc72
je 0x180043394
cmp ebx, 0x1321c
jne 0x18004361d
mov byte [rbp + 0x22e], 0
jmp 0x18004361d
mov eax, 0x7420
mov word [rbp + 0x22c], ax
jmp 0x18004361d
mov eax, 0x7520
mov byte [rbp + 0x229], 0
mov r8d, 3
mov word [rbp + 0x227], ax
lea rdx, [0x18006b680]
lea rcx, [rbp + 0x220]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x18004361d
mov eax, dword [0x18006b721]
lea rdx, [0x18006b75f]
mov dword [rbp + 0x220], eax
lea rcx, [rbp + 0x220]
movzx eax, byte [0x18006b725]
mov r8d, 2
mov byte [rbp + 0x224], al
mov byte [rbp + 0x225], 0
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x18004361d
mov r8d, 4
lea rdx, [0x18006b6e4]
lea rcx, [rbp + 0x22e]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp 0x18004361d
cmp ebx, 0x1fd70
je 0x180043475
cmp ebx, 0x2631a
je 0x180043464
cmp ebx, 0x2c8c4
jne 0x18004361d
mov dil, 1
mov byte [rbp + 0x236], 0
movzx r15d, dil
jmp 0x18004361d
mov eax, 0x3436
mov word [rbp + 0x234], ax
jmp 0x18004361d
mov eax, 0x746e
mov byte [rbp + 0x234], 0
mov word [rbp + 0x232], ax
jmp 0x18004361d
xorps xmm0, xmm0
mov dword [rbp - 0x3c], 0x10000
xor eax, eax
movups xmmword [rbp + 0x280], xmm0
mov qword [rbp + 0x310], rax
movups xmmword [rbp + 0x290], xmm0
mov dword [rbp + 0x318], eax
movups xmmword [rbp + 0x2a0], xmm0
movups xmmword [rbp + 0x2b0], xmm0
movups xmmword [rbp + 0x2c0], xmm0
movups xmmword [rbp + 0x2d0], xmm0
movups xmmword [rbp + 0x2e0], xmm0
movups xmmword [rbp + 0x2f0], xmm0
movups xmmword [rbp + 0x300], xmm0
jmp 0x18004361d
cmp ebx, 0x52ac0
ja 0x1800435cd
je 0x180043583
cmp ebx, 0x39418
je 0x180043577
cmp ebx, 0x3f9c2
je 0x180043566
cmp ebx, 0x45f6c
je 0x18004355a
cmp ebx, 0x4c516
jne 0x18004361d
mov eax, dword [0x18006b700]
movups xmm0, xmmword [str.nyGwk4FjQkCCYIrTJM_tkw]
mov dword [rbp + 0x260], eax
movzx eax, word [0x18006b704]
mov word [rbp + 0x264], ax
movzx eax, byte [0x18006b706]
mov byte [rbp + 0x266], al
movups xmmword [rbp + 0x250], xmm0
jmp 0x18004361d
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
jmp 0x18004361d
mov eax, 0x9c
mov word [rbp + 0x2a4], ax
jmp 0x18004361d
mov dword [rbp - 0x38], 0xa
jmp 0x18004361d
mov edx, dword [rbp - 0x38]
lea r8, [rbp + 0x58]
mov ecx, dword [rbp - 0x3c]
xor r9d, r9d
mov qword [rsp + 0x20], 0
call qword [sym.imp.GDI32.dll_ExtCreatePen]
lea r9, [rbp + 0x280]
xor r8d, r8d
lea rdx, [rbp + 0x250]
mov r13, rax
lea rcx, [rbp + 0x220]
call qword [sym.imp.GDI32.dll_CreateDCA]
mov r12, rax
test r13, r13
jne 0x18004361d
xor r15b, r15b
jmp 0x18004361d
cmp ebx, 0x5906a
je 0x18004360e
cmp ebx, 0x5f614
je 0x1800435eb
cmp ebx, 0x65bbe
je 0x180043272
jmp 0x18004361d
test r15b, r15b
je 0x1800435f9
mov rcx, r13
call qword [sym.imp.GDI32.dll_DeleteObject]
test dil, dil
je 0x180043607
mov rcx, r12
call qword [sym.imp.GDI32.dll_DeleteDC]
mov byte [rsp + 0x74], 0
jmp 0x18004361d
test r12, r12
movzx edi, dil
mov eax, 0
cmove edi, eax
add ebx, 0x65aa
cmp ebx, 0x6c04a
jbe 0x180043340
jmp 0x1800437fd
mov ecx, 0x202
lea rdx, [rbp + 0x70]
call qword [rbp + 0x28]
test eax, eax
je 0x1800437ff
mov ebx, 0x90
nop dword [rax]
cmp ebx, 0x498
ja 0x18004373e
cmp ebx, 0x294
ja 0x1800437eb
je 0x18004372d
cmp ebx, 0x90
je 0x180043721
cmp ebx, 0x13c
je 0x1800436e5
cmp ebx, 0x1e8
jne 0x1800437eb
mov r8d, 2
lea rdx, [0x18006b77c]
lea rcx, [rbp + 0x280]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
lea rcx, [rbp + 0x280]
mov dword [rbp + 0x28c], 0x574955
dec rcx
nop dword [rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x1800436c0
movsd xmm0, qword [str.indowInf]
movzx eax, byte [0x18006b788]
movsd qword [rcx], xmm0
mov byte [rcx + 8], al
jmp 0x1800437eb
mov r8d, 2
lea rdx, [0x18006b78c]
lea rcx, [rbp + 0x280]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
movsd xmm0, qword [str.Persiste]
movzx eax, byte [0x18006b798]
movsd qword [rbp + 0x282], xmm0
mov byte [rbp + 0x28a], al
jmp 0x1800437eb
mov byte [rbp + 0x280], 0
jmp 0x1800437eb
mov eax, 0x6f
mov word [rbp + 0x297], ax
jmp 0x1800437eb
cmp ebx, 0x748
ja 0x18004379d
je 0x18004377f
cmp ebx, 0x544
je 0x18004377a
cmp ebx, 0x5f0
je 0x18004376d
cmp ebx, 0x69c
jne 0x1800437eb
mov dword [rbp - 0x50], 0
jmp 0x1800437eb
lea rax, str.PropertyMetadata
mov qword [rbp - 0x10], rax
jmp 0x1800437eb
mov r14b, 1
jmp 0x1800437eb
lea r8, [rbp - 8]
mov qword [rbp - 8], 0
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x10]
call sub.RPCRT4.dll_MesEncodeDynBufferHandleCreate
mov dword [rbp - 0x6c], eax
jmp 0x1800437eb
cmp ebx, 0x7f4
je 0x1800437ce
cmp ebx, 0x8a0
jne 0x1800437eb
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x4000000
call qword [sym.imp.SHELL32.dll_SHChangeNotify]
mov byte [rsp + 0x74], 0
mov eax, dword [rsp + 0x74]
jmp 0x180043278
xor ecx, ecx
movzx eax, r14b
cmp dword [rbp - 0x6c], ecx
cmove ecx, eax
movzx r14d, cl
test cl, cl
je 0x1800437eb
mov rcx, qword [rbp - 8]
call sub.RPCRT4.dll_MesHandleFree
add ebx, 0xac
cmp ebx, 0x94c
jb 0x180043650
xor ebx, ebx
mov ecx, 0x6c
imul eax, dword [rbp + 0x510], 0x9a
add esi, eax
cmp esi, dword [rbp - 0x70]
jbe 0x180041910
jmp 0x180043272