Function at 0x1800ba7c0
Capabilities:
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xd8
lea rbp, [rsp + 0x30]
mov rax, qword [0x180357660]
xor rax, rbp
mov qword [rbp + 0x98], rax
mov r13d, dword [rbp + 0x110]
mov edi, 0x69
mov rsi, r8
mov qword [rbp + 8], r9
mov r14, r9
mov qword [rbp], rdx
mov r8, rdx
mov qword [rbp + 0x30], rcx
lea ebx, [r13 + 0xba0]
mov rdx, rcx
mov dword [rbp + 0x28], ebx
lea r10d, [rdi - 0x1d]
cmp r13d, ebx
lea r9d, [rdi - 4]
mov rbx, qword [rbp + 0x18]
mov r15d, r13d
mov qword [rbp + 0x10], rbx
jae 0x1800ba914
mov r12d, dword [rbp + 0x38]
lea ecx, [rdi + 5]
mov r13d, dword [rbp + 0x38]
lea edi, [rcx - 0x38]
mov eax, dword [rbp + 0x28]
lea r9, [0x180000000]
mov r10d, 0x2e35
mov r11d, 0x6957
nop dword [rax + rax]
cmp r15d, 0x1ae
ja 0x1800bac34
je 0x1800bac2a
cmp r15d, 0xb6
ja 0x1800bab08
je 0x1800baafd
lea eax, [r15 - 0x11]
cmp eax, 0x87
ja case.default.0x1800ba8a5
movzx eax, byte [r9 + rax + 0xbbad0]
mov ecx, dword [r9 + rax*4 + 0xbbab4]
add rcx, r9
jmp rcx
mov rcx, qword [rbp + 0x20]
mov eax, dword [rdx]
mov dword [rcx + 0x1c], eax
mov qword [rcx], 0
jmp case.0x1800ba8a5.23
mov r8d, 3
lea rdx, [0x18034ad0b]
lea rcx, [rbp + 0x58]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
lea r9, [0x180000000]
mov rdx, qword [rbp + 0x30]
mov r8, qword [rbp]
mov r10d, 0x2e35
mov r11d, 0x6957
mov ecx, 0x6e
mov eax, dword [rbp + 0x28]
add r15d, 0x7c
cmp r15d, eax
jb 0x1800ba860
mov r13d, dword [rbp + 0x110]
mov edi, 0x69
lea r9d, [rdi - 4]
lea r10d, [rdi - 0x1d]
imul r15d, r13d, 0x7c8
cmp r13d, r15d
ja 0x1800bba8d
mov ebx, 0x33
imul r12d, r13d, 0x53
mov eax, 0x6d6f
mov ecx, 0x302e
mov r8d, 0x3739
lea edx, [rbx + 5]
cmp r13d, 0xe1e2
ja 0x1800bb30b
je 0x1800bb270
cmp r13d, 0x710e
ja 0x1800baf09
je 0x1800baede
cmp r13d, 0x38a4
ja 0x1800baea2
je 0x1800bae99
cmp r13d, 0x3a
je 0x1800bae8d
cmp r13d, 0x1308
je 0x1800bae4d
cmp r13d, 0x25d6
jne 0x1800bba70
mov dword [rbp + 0x30], 0x726843
jmp 0x1800bba70
mov dword [0x180359b78], 0
mov dword [0x180359b7c], 0
jmp case.0x1800ba8a5.23
xor r9d, r9d
mov qword [rbp + 0x38], 0x20
lea rax, [rbp + 0x38]
xor r8d, r8d
xor ecx, ecx
mov qword [rsp + 0x20], rax
lea edx, [r9 + 0x4c]
call fcn.18003ad60
mov rdx, qword [rbp + 0x30]
lea r9, [0x180000000]
mov r8, qword [rbp]
xorps xmm0, xmm0
mov qword [rbp + 0x20], rax
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov ecx, dword [r14]
mov dword [rax + 0x18], ecx
jmp 0x1800ba8df
xor r13d, r13d
mov r12, 0xffffffffffffffff
inc r12
cmp byte [r14 + r12], r13b
jne 0x1800baa16
inc r12d
lea eax, [r12 + 1]
movsxd rcx, eax
lea rax, [rcx + 0xf]
cmp rax, rcx
ja 0x1800baa3d
movabs rax, 0xffffffffffffff0
and rax, 0xfffffffffffffff0
call fcn.1800bf9d0
sub rsp, rax
mov rcx, r14
lea r8, [rsp + 0x30]
mov rdx, r8
mov qword [rbp + 0x18], r8
sub rdx, r14
nop dword [rax + rax]
movzx eax, byte [rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x1800baa60
lea rcx, [r8 - 1]
cmp byte [rcx + 1], r13b
lea rcx, [rcx + 1]
jne 0x1800baa72
movzx eax, word [0x1803420bc]
mov word [rcx], ax
jmp 0x1800ba8d7
mov edi, dword [rsi + 8]
mov r14d, dword [r14]
cmp edi, r14d
jne 0x1800bada3
movsxd rdi, dword [r8]
mov r14, qword [rsi + 0x18]
cmp r14, rdi
jne 0x1800bad77
mov ecx, dword [rdx]
mov r14, qword [rbp + 8]
test ecx, ecx
jne 0x1800baac9
mov dword [0x180359b78], ecx
mov ecx, 0x6e
mov edi, 0x36
jmp case.default.0x1800ba8a5
mov edx, dword [0x180359b78]
mov edi, 0x36
mov eax, dword [0x180359b7c]
inc edx
inc eax
mov dword [0x180359b78], edx
cmp ecx, eax
lea ecx, [rdi + 0x38]
jle 0x1800baaf4
lea eax, [rdx + 1]
mov dword [0x180359b78], eax
mov rdx, qword [rbp + 0x30]
jmp case.default.0x1800ba8a5
mov word [rbp + 0x5b], 0x69
jmp 0x1800ba8f3
mov eax, r15d
sub eax, 0x109
je 0x1800babbd
sub eax, 4
je 0x1800badde
sub eax, 7
je 0x1800bab5e
sub eax, 0x1e
je 0x1800bab40
cmp eax, 0x5e
mov eax, dword [rbp + 0x28]
jne 0x1800ba8f3
xor ebx, ebx
mov qword [rbp + 0x10], rbx
jmp 0x1800ba8f3
movzx eax, word [0x18034ad92]
mov word [rbp + 0x5c], ax
movzx eax, byte [0x18034ad94]
mov byte [rbp + 0x5e], al
mov byte [rbp + 0x5f], reloc.SHELL32.dll_PathMakeUniqueName
jmp case.default.0x1800ba8a5
xor edi, edi
cmp dword [rsi + 0x10], edi
jle 0x1800baabf
mov dword [rbp + 0x38], r12d
xor r14d, r14d
mov rax, qword [rsi]
lea rcx, [rbp + 0x38]
mov r8, qword [rbp + 0x18]
mov edx, 0x6a
mov r9, qword [r14 + rax]
call fcn.1800a9ed0
mov rdx, qword [rbp + 0x30]
test eax, eax
jne 0x1800bab9d
cmp dword [rdx], r13d
je 0x1800badcf
inc r13d
inc edi
add r14, 8
cmp edi, dword [rsi + 0x10]
jl 0x1800bab70
mov r14, qword [rbp + 8]
lea r9, [0x180000000]
mov edi, 0x36
jmp 0x1800ba8db
mov rdi, qword [rsi + 0x20]
movsxd rax, dword [0x180359b78]
mov r8d, dword [rdx]
mov dword [0x180359b7c], r8d
cmp rdi, rax
jne 0x1800bae1d
mov edx, dword [rsi + 8]
xor edi, edi
test edx, edx
jle 0x1800bad65
mov r9, qword [rsi]
mov rcx, r9
nop
lea eax, [r8 + rdi]
movzx r14d, al
movzx eax, byte [rcx]
cmp eax, r14d
jne 0x1800bade7
inc edi
inc rcx
cmp edi, edx
jl 0x1800babf0
mov rdx, qword [rbp + 0x30]
lea r9, [0x180000000]
mov r14, qword [rbp + 8]
mov edi, 0x36
mov r8, qword [rbp]
jmp case.0x1800ba8a5.23
mov word [rbp + 0x60], r10w
jmp 0x1800ba8f3
cmp r15d, 0x41a
ja 0x1800bacd5
je 0x1800baccc
mov eax, r15d
sub eax, 0x20c
je 0x1800bba8d
sub eax, 0x1e
je 0x1800bacc1
sub eax, 0x7c
je 0x1800bacb4
sub eax, 0x7c
je 0x1800bac88
cmp eax, 0x7c
jne case.default.0x1800ba8a5
mov eax, 0x57
mov word [rbp + 0x48], ax
mov eax, 0x69
mov word [rbp + 0x49], ax
mov word [rbp + 0x4a], cx
jmp case.default.0x1800ba8a5
mov eax, 0x64
mov word [rbp + 0x8a], cx
mov word [rbp + 0x8b], ax
mov dword [rbp + 0x8c], 0x73776f
mov dword [rbp + 0x8f], 0x544e20
jmp case.default.0x1800ba8a5
mov word [rbp + 0x88], r11w
jmp case.default.0x1800ba8a5
mov word [rbp + 0x62], 0x30
jmp case.default.0x1800ba8a5
mov word [rbp + 0x4b], di
jmp 0x1800ba8f3
mov eax, r15d
sub eax, 0x496
je 0x1800bad57
sub eax, 0x7c
je 0x1800bad42
sub eax, 0x7c
je 0x1800bad2b
sub eax, 0x7c
je 0x1800bad11
cmp eax, 0x7c
jne case.default.0x1800ba8a5
mov eax, 0x74
mov word [rbp + 0x82], ax
mov eax, reloc.SHELL32.dll_PathYetAnotherMakeUniqueName
mov word [rbp + 0x50], ax
jmp case.default.0x1800ba8a5
mov eax, 0x62
mov word [rbp + 0x7f], ax
mov eax, 0x694b
mov word [rbp + 0x80], ax
jmp case.default.0x1800ba8a5
mov eax, 0x65
mov word [rbp + 0x7c], ax
mov eax, 0x6557
mov word [rbp + 0x7d], ax
jmp case.default.0x1800ba8a5
mov eax, 0x6c
mov dword [rbp + 0x78], 0x707041
mov word [rbp + 0x7b], ax
jmp case.default.0x1800ba8a5
mov eax, 0x34
mov word [rbp + 0x4c], ax
jmp case.default.0x1800ba8a5
mov rdx, qword [rbp + 0x30]
mov edi, 0x36
mov r8, qword [rbp]
jmp case.default.0x1800ba8a5
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9d, edi
lea rdx, str.Real_NvAPI_D3D9_GpuSyncMapSurfaceBuffer
mov rcx, rax
mov r8d, r14d
call fcn.1800bee00
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9d, r14d
lea rdx, str.RegistryConstants._A0xa5195571.BIN_X86
mov rcx, rax
mov r8d, edi
call fcn.1800bee00
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [rsi]
movsxd rax, r12d
add rax, qword [rcx + rdi*8]
jmp 0x1800bba90
mov rax, qword [rbp + 0x20]
jmp 0x1800bba90
movzx ebx, byte [rdi + r9]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9d, ebx
mov dword [rsp + 0x20], r14d
mov rcx, rax
lea rdx, str.ATL.CComObject_CPsLookupFieldMetadata_.ctor
mov r8d, edi
call fcn.1800bee00
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9d, dword [0x180359b78]
lea rdx, str.invalid_bitfield_for_GED_Src0AddrImm
mov rcx, rax
mov r8d, edi
call fcn.1800bee00
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r8d, 1
mov word [rbp + 0x54], r10w
lea rdx, [0x18034ae5d]
lea rcx, [rbp + 0x40]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov r8d, 3
mov byte [rbp + 0x41], 0
lea rdx, [0x18034ae7b]
lea rcx, [rbp + 0x41]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0x44], 0
jmp 0x1800bba5b
mov dword [rbp + 0x51], 0x4d5448
jmp 0x1800bba70
mov word [rbp + 0x33], ax
jmp 0x1800bba70
cmp r13d, 0x4b72
je 0x1800baed0
cmp r13d, 0x5e40
jne 0x1800bba70
mov word [rbp + 0x39], bx
mov word [rbp + 0x3a], cx
mov byte [rbp + 0x3c], 0
mov dword [rbp + 0x28], 0x303134
jmp 0x1800bba70
mov word [rbp + 0x35], r9w
mov word [rbp + 0x38], dx
jmp 0x1800bba70
mov r8d, 2
mov word [rbp + 0x2b], bx
lea rdx, [0x18034ae8c]
mov dword [rbp + 0x70], 0x666153
lea rcx, [rbp + 0x70]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov word [rbp + 0x75], di
jmp 0x1800bba5b
cmp r13d, 0x83dc
je 0x1800bb228
cmp r13d, 0x96aa
je 0x1800bb104
cmp r13d, 0xa978
je 0x1800bb096
cmp r13d, 0xbc46
je 0x1800baf76
cmp r13d, 0xcf14
jne 0x1800bba70
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800bba49
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800baf6b
mov rax, qword [rsi]
mov word [rax + rcx], 0x20
jmp 0x1800bba61
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800baf9f
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800baf97
mov rax, qword [rsi]
mov word [rcx + rax], 0x3b
jmp 0x1800bafb1
xor r8d, r8d
mov r9b, 0x3b
mov rcx, rsi
lea edx, [r8 + 1]
call fcn.180005a10
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800bafda
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800bafd2
mov rax, qword [rsi]
mov word [rax + rcx], 0x20
jmp 0x1800bafec
xor r8d, r8d
mov r9b, 0x20
mov rcx, rsi
lea edx, [r8 + 1]
call fcn.180005a10
lea rax, [rbp + 0x48]
mov r14, 0xffffffffffffffff
nop word [rax + rax]
inc r14
cmp byte [rax + r14], 0
jne 0x1800bb000
mov rcx, qword [rsi + 0x18]
mov rdx, qword [rsi + 0x10]
mov rax, rcx
sub rax, rdx
cmp r14, rax
ja 0x1800bb04b
lea rax, [rdx + r14]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rcx, 0x10
jb 0x1800bb031
mov rax, qword [rsi]
lea rdi, [rax + rdx]
mov r8, r14
mov rcx, rdi
lea rdx, [rbp + 0x48]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + r14], 0
jmp 0x1800bb062
lea r9, [rbp + 0x48]
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, r14
mov rcx, rsi
call fcn.180005b70
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800bb08e
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800bb083
mov rax, qword [rsi]
mov word [rax + rcx], 0x3b
jmp 0x1800bba5b
mov r9b, 0x3b
jmp 0x1800bba4c
mov rcx, qword [rsi + 0x18]
mov rdx, qword [rsi + 0x10]
mov rax, rcx
sub rax, rdx
cmp rax, 3
jb 0x1800bb0e0
lea rax, [rdx + 3]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rcx, 0x10
jb 0x1800bb0be
mov rax, qword [rsi]
lea rdi, [rax + rdx]
mov r8d, 3
mov rcx, rdi
lea rdx, [0x18034ae28]
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + 3], 0
jmp 0x1800bba5b
xor r8d, r8d
mov qword [rsp + 0x20], 3
lea r9, [0x18034ae28]
mov rcx, rsi
lea edx, [r8 + 3]
call fcn.180005b70
jmp 0x1800bba5b
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800bb12d
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800bb125
mov rax, qword [rsi]
mov word [rax + rcx], 0x20
jmp 0x1800bb13f
xor r8d, r8d
mov r9b, 0x20
mov rcx, rsi
lea edx, [r8 + 1]
call fcn.180005a10
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800bb168
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800bb160
mov rax, qword [rsi]
mov word [rax + rcx], 0x28
jmp 0x1800bb17a
xor r8d, r8d
mov r9b, 0x28
mov rcx, rsi
lea edx, [r8 + 1]
call fcn.180005a10
lea rax, [rbp + 0x88]
mov r14, 0xffffffffffffffff
nop dword [rax + rax]
inc r14
cmp byte [rax + r14], 0
jne 0x1800bb190
mov rcx, qword [rsi + 0x18]
mov rdx, qword [rsi + 0x10]
mov rax, rcx
sub rax, rdx
cmp r14, rax
ja 0x1800bb1de
lea rax, [rdx + r14]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rcx, 0x10
jb 0x1800bb1c1
mov rax, qword [rsi]
lea rdi, [rax + rdx]
mov r8, r14
mov rcx, rdi
lea rdx, [rbp + 0x88]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + r14], 0
jmp 0x1800bb1f8
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x88]
mov rdx, r14
xor r8d, r8d
mov rcx, rsi
call fcn.180005b70
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800bba49
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800bb21d
mov rax, qword [rsi]
mov word [rax + rcx], 0x20
jmp 0x1800bba5b
mov r8d, 2
lea rdx, [0x18034ae35]
lea rcx, [rbp + 0x68]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
lea rax, [rbp + 0x58]
mov dword [rbp + 0x6a], 0x36332e37
mov r8, 0xffffffffffffffff
mov byte [rbp + 0x6e], 0
inc r8
cmp byte [rax + r8], 0
jne 0x1800bb255
lea rdx, [rbp + 0x58]
mov rcx, rsi
call fcn.18002f400
jmp 0x1800bba5b
mov rcx, qword [rsi + 0x18]
mov rdx, qword [rsi + 0x10]
mov rax, rcx
sub rax, rdx
cmp rax, 3
jb 0x1800bb2b7
lea rax, [rdx + 3]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rcx, 0x10
jb 0x1800bb298
mov rax, qword [rsi]
lea rdi, [rax + rdx]
mov r8d, 3
mov rcx, rdi
lea rdx, [0x18034ae24]
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + 3], 0
jmp 0x1800bb2d7
mov qword [rsp + 0x20], 3
lea r9, [0x18034ae24]
mov edx, 3
xor r8d, r8d
mov rcx, rsi
call fcn.180005b70
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800bb303
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800bb2f8
mov rax, qword [rsi]
mov word [rax + rcx], 0x29
jmp 0x1800bba5b
mov r9b, 0x29
jmp 0x1800bba4c
cmp r13d, 0x152b6
ja 0x1800bb6d9
je 0x1800bb63a
cmp r13d, 0xf4b0
je 0x1800bb55e
cmp r13d, 0x1077e
je 0x1800bb4fa
cmp r13d, 0x11a4c
je 0x1800bb443
cmp r13d, 0x12d1a
je 0x1800bb40f
cmp r13d, 0x13fe8
jne 0x1800bba70
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800bb388
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800bb380
mov rax, qword [rsi]
mov word [rax + rcx], 0x20
jmp 0x1800bb39a
xor r8d, r8d
mov r9b, 0x20
mov rcx, rsi
lea edx, [r8 + 1]
call fcn.180005a10
lea rax, [rbp + 0x40]
mov r14, 0xffffffffffffffff
inc r14
cmp byte [rax + r14], 0
jne 0x1800bb3a5
mov rcx, qword [rsi + 0x18]
mov rdx, qword [rsi + 0x10]
mov rax, rcx
sub rax, rdx
cmp r14, rax
ja 0x1800bb3f3
lea rax, [rdx + r14]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rcx, 0x10
jb 0x1800bb3d6
mov rax, qword [rsi]
lea rdi, [rax + rdx]
mov r8, r14
mov rcx, rdi
lea rdx, [rbp + 0x40]
call sub.VCRUNTIME140.dll_memmove
mov byte [r14 + rdi], 0
jmp 0x1800bba5b
lea r9, [rbp + 0x40]
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, r14
mov rcx, rsi
call fcn.180005b70
jmp 0x1800bba5b
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800bb43b
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800bb430
mov rax, qword [rsi]
mov word [rax + rcx], PathMakeUniqueName
jmp 0x1800bba61
mov r9b, 0x2c
jmp 0x1800bba4c
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800bb46c
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800bb464
mov rax, qword [rsi]
mov word [rax + rcx], 0x28
jmp 0x1800bb47e
xor r8d, r8d
mov r9b, 0x28
mov rcx, rsi
lea edx, [r8 + 1]
call fcn.180005a10
lea rax, [rbp + 0x50]
mov r14, 0xffffffffffffffff
nop dword [rax]
inc r14
cmp byte [rax + r14], 0
jne 0x1800bb490
mov rcx, qword [rsi + 0x18]
mov rdx, qword [rsi + 0x10]
mov rax, rcx
sub rax, rdx
cmp r14, rax
ja 0x1800bb4de
lea rax, [rdx + r14]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rcx, 0x10
jb 0x1800bb4c1
mov rax, qword [rsi]
lea rdi, [rax + rdx]
mov r8, r14
mov rcx, rdi
lea rdx, [rbp + 0x50]
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rdi], 0
jmp 0x1800bba5b
lea r9, [rbp + 0x50]
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, r14
mov rcx, rsi
call fcn.180005b70
jmp 0x1800bba5b
mov rcx, qword [rsi + 0x18]
mov rdx, qword [rsi + 0x10]
mov rax, rcx
sub rax, rdx
cmp rax, 6
jb 0x1800bb544
lea rax, [rdx + 6]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rcx, 0x10
jb 0x1800bb522
mov rax, qword [rsi]
lea rdi, [rax + rdx]
mov r8d, 6
mov rcx, rdi
lea rdx, str.537.36
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + 6], 0
jmp 0x1800bb1f8
mov qword [rsp + 0x20], 6
lea r9, str.537.36
mov edx, 6
jmp 0x1800bb1ed
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800bb587
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800bb57f
mov rax, qword [rsi]
mov word [rax + rcx], 0x20
jmp 0x1800bb599
xor r8d, r8d
mov r9b, 0x20
mov rcx, rsi
lea edx, [r8 + 1]
call fcn.180005a10
lea rax, [rbp + 0x78]
mov r14, 0xffffffffffffffff
inc r14
cmp byte [rax + r14], 0
jne 0x1800bb5a4
mov rcx, qword [rsi + 0x18]
mov rdx, qword [rsi + 0x10]
mov rax, rcx
sub rax, rdx
cmp r14, rax
ja 0x1800bb5ef
lea rax, [rdx + r14]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rcx, 0x10
jb 0x1800bb5d5
mov rax, qword [rsi]
lea rdi, [rax + rdx]
mov r8, r14
mov rcx, rdi
lea rdx, [rbp + 0x78]
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rdi], 0
jmp 0x1800bb606
lea r9, [rbp + 0x78]
xor r8d, r8d
mov qword [rsp + 0x20], r14
mov rdx, r14
mov rcx, rsi
call fcn.180005b70
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800bb632
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800bb627
mov rax, qword [rsi]
mov word [rax + rcx], reloc.SHELL32.dll_PathMakeUniqueName
jmp 0x1800bba5b
mov r9b, reloc.SHELL32.dll_PathMakeUniqueName
jmp 0x1800bba4c
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800bb663
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800bb65b
mov rax, qword [rsi]
mov word [rax + rcx], 0x20
jmp 0x1800bb675
xor r8d, r8d
mov r9b, 0x20
mov rcx, rsi
lea edx, [r8 + 1]
call fcn.180005a10
mov rcx, qword [rsi + 0x18]
mov rdx, qword [rsi + 0x10]
mov rax, rcx
sub rax, rdx
cmp rax, 5
jb 0x1800bb6bf
lea rax, [rdx + 5]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rcx, 0x10
jb 0x1800bb69d
mov rax, qword [rsi]
lea rdi, [rax + rdx]
mov r8d, 5
mov rcx, rdi
lea rdx, str.Gecko
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + 5], 0
jmp 0x1800bb2d7
mov qword [rsp + 0x20], 5
lea r9, str.Gecko
mov edx, 5
jmp 0x1800bb2cc
cmp r13d, 0x16584
je 0x1800baf46
cmp r13d, 0x17852
je 0x1800bb9e7
cmp r13d, 0x18b20
je 0x1800bb8c7
cmp r13d, 0x19dee
je 0x1800bb78f
cmp r13d, 0x1b0bc
jne 0x1800bba70
lea rax, [rbp + 0x68]
mov r14, 0xffffffffffffffff
inc r14
cmp byte [rax + r14], 0
jne 0x1800bb725
mov rcx, qword [rsi + 0x18]
mov rdx, qword [rsi + 0x10]
mov rax, rcx
sub rax, rdx
cmp r14, rax
ja 0x1800bb773
lea rax, [rdx + r14]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rcx, 0x10
jb 0x1800bb756
mov rax, qword [rsi]
lea rdi, [rax + rdx]
mov r8, r14
mov rcx, rdi
lea rdx, [rbp + 0x68]
call sub.VCRUNTIME140.dll_memmove
mov byte [r14 + rdi], 0
jmp 0x1800bba5b
lea r9, [rbp + 0x68]
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, r14
mov rcx, rsi
call fcn.180005b70
jmp 0x1800bba5b
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800bb7b8
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800bb7b0
mov rax, qword [rsi]
mov word [rax + rcx], PathMakeUniqueName
jmp 0x1800bb7d0
xor r8d, r8d
mov r9b, PathMakeUniqueName
mov rcx, rsi
lea edx, [r8 + 1]
call fcn.180005a10
mov r8d, 0x3739
mov rcx, qword [rsi + 0x18]
mov rdx, qword [rsi + 0x10]
mov rax, rcx
sub rax, rdx
cmp rax, 2
jb 0x1800bb804
lea rax, [rdx + 2]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rcx, 0x10
jb 0x1800bb7f8
mov rax, qword [rsi]
mov word [rax + rdx], r8w
mov byte [rax + rdx + 2], 0
jmp 0x1800bb823
xor r8d, r8d
mov qword [rsp + 0x20], 2
lea r9, [0x18034ae18]
mov rcx, rsi
lea edx, [r8 + 2]
call fcn.180005b70
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800bb84c
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800bb844
mov rax, qword [rsi]
mov word [rax + rcx], 0x20
jmp 0x1800bb85e
xor r8d, r8d
mov r9b, 0x20
mov rcx, rsi
lea edx, [r8 + 1]
call fcn.180005a10
lea rax, [rbp + 0x70]
mov r14, 0xffffffffffffffff
nop dword [rax]
inc r14
cmp byte [rax + r14], 0
jne 0x1800bb870
mov rcx, qword [rsi + 0x18]
mov rdx, qword [rsi + 0x10]
mov rax, rcx
sub rax, rdx
cmp r14, rax
ja 0x1800bb8be
lea rax, [rdx + r14]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rcx, 0x10
jb 0x1800bb8a1
mov rax, qword [rsi]
lea rdi, [rax + rdx]
mov r8, r14
mov rcx, rdi
lea rdx, [rbp + 0x70]
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + r14], 0
jmp 0x1800bb606
lea r9, [rbp + 0x70]
jmp 0x1800bb5f3
lea rax, [rbp + 0x38]
mov r14, 0xffffffffffffffff
inc r14
cmp byte [rax + r14], 0
jne 0x1800bb8d2
mov rcx, qword [rsi + 0x18]
mov rdx, qword [rsi + 0x10]
mov rax, rcx
sub rax, rdx
cmp r14, rax
ja 0x1800bb91d
lea rax, [rdx + r14]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rcx, 0x10
jb 0x1800bb903
mov rax, qword [rsi]
lea rdi, [rax + rdx]
mov r8, r14
mov rcx, rdi
lea rdx, [rbp + 0x38]
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rdi], 0
jmp 0x1800bb934
lea r9, [rbp + 0x38]
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, r14
mov rcx, rsi
call fcn.180005b70
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800bb95d
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800bb955
mov rax, qword [rsi]
mov word [rax + rcx], PathMakeUniqueName
jmp 0x1800bb96f
xor r8d, r8d
mov r9b, PathMakeUniqueName
mov rcx, rsi
lea edx, [r8 + 1]
call fcn.180005a10
lea rax, [rbp + 0x28]
mov r14, 0xffffffffffffffff
nop word [rax + rax]
inc r14
cmp byte [rax + r14], 0
jne 0x1800bb980
mov rcx, qword [rsi + 0x18]
mov rdx, qword [rsi + 0x10]
mov rax, rcx
sub rax, rdx
cmp r14, rax
ja 0x1800bb9ce
lea rax, [rdx + r14]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rcx, 0x10
jb 0x1800bb9b1
mov rax, qword [rsi]
lea rdi, [rdx + rax]
mov r8, r14
mov rcx, rdi
lea rdx, [rbp + 0x28]
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rdi], 0
jmp 0x1800bba5b
lea r9, [rbp + 0x28]
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, r14
mov rcx, rsi
call fcn.180005b70
jmp 0x1800bba5b
lea rax, [rbp + 0x30]
mov r14, 0xffffffffffffffff
inc r14
cmp byte [rax + r14], 0
jne 0x1800bb9f2
mov rcx, qword [rsi + 0x18]
mov rdx, qword [rsi + 0x10]
mov rax, rcx
sub rax, rdx
cmp r14, rax
ja 0x1800bba40
lea rax, [rdx + r14]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rcx, 0x10
jb 0x1800bba23
mov rax, qword [rsi]
lea rdi, [rax + rdx]
mov r8, r14
mov rcx, rdi
lea rdx, [rbp + 0x30]
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rdi], 0
jmp 0x1800bb606
lea r9, [rbp + 0x30]
jmp 0x1800bb5f3
mov r9b, 0x20
xor r8d, r8d
mov rcx, rsi
lea edx, [r8 + 1]
call fcn.180005a10
mov r8d, 0x3739
mov eax, 0x6d6f
mov ecx, 0x302e
mov edx, 0x38
mov edi, 0x69
add r13d, r12d
lea r9d, [rdi - 4]
lea r10d, [rdi - 0x1d]
cmp r13d, r15d
jbe 0x1800ba940
mov rbx, qword [rbp + 0x10]
mov rax, rbx
mov rcx, qword [rbp + 0x98]
xor rcx, rbp
call fcn.1800bfa40
lea rsp, [rbp + 0xa8]
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret