Function at 0x180017470
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4d0]
sub rsp, 0x5d0
mov rax, qword [0x1800cd230]
xor rax, rsp
mov qword [rbp + 0x4c0], rax
mov r13d, edx
mov dword [rbp - 0x70], edx
mov rdi, rcx
movdqa xmm0, xmmword [0x1800c4e00]
movdqa xmmword [rbp + 0x1e0], xmm0
mov byte [rbp + 0x1d0], 0
movdqa xmm1, xmm0
movdqa xmmword [rbp + 0x200], xmm0
mov byte [rbp + 0x1f0], 0
movdqa xmmword [rbp + 0x220], xmm0
mov byte [rbp + 0x210], 0
movdqa xmmword [rbp + 0x2b0], xmm0
mov byte [rbp + 0x2a0], 0
movdqa xmmword [rbp + 0x2d0], xmm0
mov byte [rbp + 0x2c0], 0
xor ecx, ecx
mov qword [rbp + 0x68], rcx
mov word [rbp + 0x70], cx
movdqu xmmword [rbp + 0x82], xmm0
mov byte [rbp + 0x72], cl
mov qword [rbp + 0x38], rcx
mov word [rbp + 0x40], cx
movdqu xmmword [rbp + 0x52], xmm0
mov byte [rbp + 0x42], cl
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rcx
mov qword [rbp - 0x48], rcx
movdqa xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], rcx
mov qword [rbp + 0xa0], rcx
mov qword [rbp + 0xa8], rcx
mov qword [rbp + 0xb0], rcx
mov ecx, 0x30
call fcn.1800a7324
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0xa8], rax
xor edx, edx
mov qword [rbp + 0xb8], rdx
xorps xmm2, xmm2
movsd qword [rbp + 0xc0], xmm2
mov qword [rbp + 0xc8], rdx
mov r15d, 1
mov dword [rbp + 0xd0], r15d
mov qword [rbp + 0xd8], rdx
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xf0], xmm1
movdqa xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], rdx
mov qword [rbp + 0x118], 0xffffffffffffffff
mov dword [rbp + 0x120], edx
xor eax, eax
movups xmmword [rbp + 0x128], xmm0
movups xmmword [rbp + 0x138], xmm0
movups xmmword [rbp + 0x148], xmm0
movups xmmword [rbp + 0x158], xmm0
mov qword [rbp + 0x168], rax
movdqa xmm0, xmmword [0x1800c4e00]
movdqa xmmword [rbp + 0x180], xmm0
mov byte [rbp + 0x170], al
mov word [rbp + 0x190], dx
mov dword [rbp + 0x194], edx
mov qword [rbp + 0x198], rdx
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1a0], xmm0
movsd qword [rbp + 0x1b0], xmm2
mov byte [rbp + 0x1b8], al
mov qword [rbp + 0x1bc], rdx
mov ebx, r13d
lea esi, [r13 + 0x1d4]
lea r9, [0x180000000]
lea r8d, [rdx + 0x6e]
cmp r13d, esi
jae 0x1800178df
mov ecx, 0x6177
lea r12d, [rdx + 0x70]
mov r14, qword [rsp + 0x78]
cmp ebx, 0x115
ja 0x1800177d2
je 0x1800177b3
lea eax, [rbx - 0xa]
cmp eax, 0xba
ja case.default.0x1800176b8
movzx eax, byte [r9 + rax + 0x18630]
mov ecx, dword [r9 + rax*4 + 0x18614]
add rcx, r9
jmp rcx
mov qword [rsp + 0x70], r14
lea r8, [rsp + 0x70]
xor edx, edx
mov ecx, 0x83
call fcn.18004e3b0
jmp 0x1800178c0
xor eax, eax
lock cmpxchg qword [0x1800cd300], rdx
mov r14, rax
je 0x180017719
mov rcx, rdx
xchg qword [0x1800cd300], rcx
jmp case.0x1800176b8.16
mov dword [rdi], edx
jmp case.0x1800176b8.16
cmp qword [rdi + 0x28], 0
je 0x180017714
cmp qword [rdi + 0x30], 0
je 0x180017714
cmp qword [rdi + 0x38], 0
jne case.0x1800176b8.16
mov byte [rsp + 0x54], 0
mov ebx, dword [rsp + 0x54]
mov esi, ebx
lea rcx, [rbp + 0x118]
call fcn.180006ba0
mov rbx, qword [rbp + 0x100]
test rbx, rbx
je 0x180018421
mov rdi, qword [rbp + 0x108]
cmp rbx, rdi
je 0x18001775f
mov rcx, rbx
call fcn.18001d600
add rbx, 0x20
cmp rbx, rdi
jne 0x180017747
mov rbx, qword [rbp + 0x100]
mov r8, qword [rbp + 0x110]
sub r8, rbx
sar r8, 5
mov rdx, rbx
lea rcx, [rbp + 0x100]
call fcn.18003d380
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x100], xmm0
xor r14d, r14d
mov qword [rbp + 0x110], r14
jmp 0x180018424
cmp qword [rdi + 0x20], 0
setne byte [rsp + 0x54]
jmp case.0x1800176b8.16
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1800178c0
mov r8d, 5
lea rdx, [0x1800bd9fa]
lea rcx, [rbp + 0x2e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp 0x1800178c0
mov eax, ebx
sub eax, 0x13c
je 0x18001789b
sub eax, 0x27
je 0x180017868
sub eax, 0x27
je 0x180017847
sub eax, 0x27
je 0x18001782e
cmp eax, 0x27
jne case.default.0x1800176b8
mov word [rbp + 0x392], r8w
mov dword [rbp + 0x394], 0x550067
mov word [rbp + 0x398], r8w
mov dword [rbp + 0x39a], 0x6e0069
mov dword [rbp + 0x39e], 0x740073
jmp case.default.0x1800176b8
mov dword [rbp + 0x38a], 0x6e0065
mov dword [rbp + 0x38e], 0x690064
jmp case.default.0x1800176b8
mov r8, r15
lea rdx, [0x1800bd979]
lea rcx, [rbp + 0x2e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov word [rbp + 0x388], r12w
jmp 0x1800178c0
mov word [rbp + 0x2e8], 0x6c
mov r8d, 2
lea rdx, [0x1800bdaf8]
lea rcx, [rbp + 0x2e9]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0x2eb], 0
lea rdx, [0x1800bdb18]
jmp 0x1800178b0
mov word [rbp + 0x2e5], cx
mov byte [rbp + 0x2e7], 0
lea rdx, [0x1800bd9c0]
mov r8, r15
lea rcx, [rbp + 0x2e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
lea r9, [0x180000000]
mov r8d, 0x6e
xor edx, edx
mov ecx, 0x6177
add ebx, 0x27
cmp ebx, esi
jb 0x180017684
mov r14d, r13d
mov dword [rsp + 0x60], r13d
imul eax, r13d, 0x34d
mov dword [rbp - 0x6c], eax
mov ebx, dword [rsp + 0x54]
cmp r13d, eax
ja case.0x180017a52.10
mov ecx, 0x61
mov dword [rsp + 0x68], ebx
movzx edi, byte [rsp + 0x51]
mov dword [rsp + 0x54], edi
mov r15, qword [rsp + 0x78]
mov r12d, dword [rsp + 0x6c]
mov r13d, dword [rsp + 0x6c]
movzx esi, byte [rsp + 0x51]
lea rax, [0x18000ba50]
cmp r14d, 0x160be
ja 0x180018224
je 0x180017ff5
cmp r14d, 0x8dbf
ja 0x180017f26
je 0x180017e76
cmp r14d, 0x62
je case.0x180017a52.10
cmp r14d, 0x115
je 0x1800179f9
cmp r14d, 0x476a
jne 0x1800179de
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
lea rax, [rbp + 0x2e0]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x180017990
lea rdx, [rbp + 0x2e0]
lea rcx, [rbp + 0x1d0]
call fcn.1800293c0
mov r8d, 1
lea rdx, [0x1800badc8]
lea rcx, [rbp + 0x1f0]
call fcn.1800293c0
mov eax, 0x1bb
mov word [rbp + 0x230], ax
mov byte [rsp + 0x50], 1
xor edx, edx
mov ecx, 0x61
imul eax, dword [rbp - 0x70], 0x41
add r14d, eax
mov dword [rsp + 0x60], r14d
cmp r14d, dword [rbp - 0x6c]
ja case.0x180017a52.10
jmp 0x180017924
mov word [rbp + 0x3a2], cx
mov dword [rbp + 0x3a4], 0x6c006c
mov word [rbp + 0x3a8], dx
lea r9, [0x1800ccee8]
xor edx, edx
xor ecx, ecx
mov r8d, 0x127
call fcn.180031d50
test al, al
jne 0x1800179d7
xor eax, eax
mov r14d, eax
mov dword [rsp + 0x58], eax
cmp r14d, 0xa
ja case.default.0x180017a52
mov eax, r14d
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0x186ec]
add rcx, rdx
jmp rcx
mov eax, 0x4e
mov word [rbp + 0x367], ax
mov eax, 0x3f
mov word [rbp + 0x368], ax
jmp case.default.0x180017a52
movzx eax, word [0x1800bdb30]
mov word [rbp + 0x342], ax
mov eax, dword [str.Prop]
mov dword [rbp + 0x344], eax
mov eax, 0x74
mov word [rbp + 0x348], ax
lea rcx, [rbp + 0x338]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x180017aa1
mov eax, dword [str.yPage1]
mov dword [rcx], eax
movzx eax, word [0x1800bdb40]
mov word [rcx + 4], ax
movzx eax, byte [0x1800bdb42]
mov byte [rcx + 6], al
mov dil, 1
mov dword [rsp + 0x54], edi
jmp case.default.0x180017a52
mov r8d, 2
lea rdx, [0x1800bab90]
lea rcx, [rbp + 0x338]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov dword [rbp + 0x339], 0x49534c
mov r8d, 3
lea rdx, [0x1800bdb44]
lea rcx, [rbp + 0x33c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp case.default.0x180017a52
mov dword [rbp + 0x350], 0x706d6f43
mov eax, 0x72
mov word [rbp + 0x354], ax
mov eax, 0x7365
mov word [rbp + 0x355], ax
mov dword [rbp + 0x357], 0x54646573
mov eax, 0x7865
mov word [rbp + 0x35b], ax
jmp case.default.0x180017a52
mov ebx, 1
mov dword [rsp + 0x68], ebx
jmp case.default.0x180017a52
xor r8d, r8d
xor edx, edx
mov rcx, r15
call qword [sym.imp.dbghelp.dll_SymInitialize]
movzx edi, dil
test eax, eax
mov ecx, 0
cmove edi, ecx
mov dword [rsp + 0x54], edi
test dil, dil
je 0x180017de7
mov edi, 0x18
mov ebx, dword [rbp - 0x80]
lea r14d, [rcx + 0x6e]
nop word [rax + rax]
cmp edi, 0xba
ja 0x180017d31
je 0x180017d23
mov eax, edi
sub eax, 0x18
je 0x180017d08
sub eax, 0x1b
je 0x180017ce1
sub eax, 0x1b
je 0x180017ca0
sub eax, 0x1b
je 0x180017c3d
cmp eax, 0x1b
jne 0x180017dc8
lea r8d, [rax - 0x19]
lea rdx, [0x1800bcc2c]
lea rcx, [rbp + 0x323]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov dword [rbp + 0x324], 0x203d20
mov r8d, 3
lea rdx, [0x1800bdb54]
lea rcx, [rbp + 0x327]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
movsd xmm0, qword [str._nullptr]
movsd qword [rbp + 0x329], xmm0
movzx eax, byte [0x1800bdb60]
mov byte [rbp + 0x331], al
xor ecx, ecx
jmp 0x180017dc8
lea rcx, [rbp + 0x318]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x180017c47
movzx eax, word [0x1800bdb64]
mov word [rcx], ax
movzx eax, byte [0x1800bdb66]
mov byte [rcx + 2], al
movzx eax, word [0x1800bdb68]
mov word [rbp + 0x320], ax
movzx eax, byte [0x1800bdb6a]
mov byte [rbp + 0x322], al
mov r8d, 2
lea rdx, [0x1800bada4]
lea rcx, [rbp + 0x322]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
xor ecx, ecx
jmp 0x180017dc8
mov dword [rbp + 0x313], 0x657461
movzx eax, word [0x1800bdb48]
mov word [rbp + 0x318], ax
mov word [rbp + 0x31a], r14w
mov r8d, 3
lea rdx, [0x1800bdb50]
lea rcx, [rbp + 0x318]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
xor ecx, ecx
jmp 0x180017dc8
mov eax, 0x72
mov word [rbp + 0x30d], ax
mov dword [rbp + 0x30e], 0x5f746375
mov eax, 0x6c
mov word [rbp + 0x312], ax
jmp 0x180017dc8
mov dword [rbp + 0x308], 0x736e6f63
mov eax, 0x74
mov word [rbp + 0x30c], ax
jmp 0x180017dc8
mov sil, 1
mov r13d, ecx
mov r12d, ecx
jmp 0x180017dc8
mov eax, edi
sub eax, 0xd5
je 0x180017dab
sub eax, 0x1b
je 0x180017d69
sub eax, 0x1b
je 0x180017d56
cmp eax, 0x1b
jne 0x180017dc8
mov rcx, r15
call qword [sym.imp.dbghelp.dll_SymCleanup]
xor ecx, ecx
jmp 0x180017dc8
test sil, sil
je 0x180017dc8
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
xor ecx, ecx
jmp 0x180017dc8
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rcx
lea rax, [rbp + 0x3b0]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [rbp + 0x318]
lea rdx, [rbp + 0x308]
mov rcx, r15
call qword [sym.imp.dbghelp.dll_SymFindFileInPath]
xor ecx, ecx
jmp 0x180017dc8
lea rcx, [rbp - 0x10]
call qword [sym.imp.SHELL32.dll_SHGetInstanceExplorer]
mov ebx, 2
movzx esi, sil
test eax, eax
mov ecx, 0
cmovne esi, ecx
add edi, 0x1b
cmp edi, 0x141
jb 0x180017ba0
mov dword [rbp - 0x80], ebx
mov ebx, dword [rsp + 0x68]
mov r14d, dword [rsp + 0x58]
mov edi, dword [rsp + 0x54]
lea r9, [rbp + 0x10]
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0x338]
lea rcx, [rbp + 0x350]
call qword [sym.imp.dbghelp.dll_SymMatchFileName]
jmp case.default.0x180017a52
mov dword [rbp + 0x35d], 0x49627553
jmp case.default.0x180017a52
mov dword [rbp + 0x361], 0x67616d
mov eax, 0x65
mov word [rbp + 0x364], ax
mov eax, 0x4433
mov word [rbp + 0x365], ax
jmp case.default.0x180017a52
mov r15, 0xffffffffffffffff
jmp case.default.0x180017a52
mov eax, dword [str.AviM]
mov dword [rbp + 0x33e], eax
movzx eax, byte [0x1800bdb70]
mov byte [rbp + 0x342], al
inc r14d
mov dword [rsp + 0x58], r14d
lea eax, [r14 + 0x51]
cmp eax, 0x5c
jb 0x180017a34
mov r14d, dword [rsp + 0x60]
jmp 0x1800179d7
xor edx, edx
lea r8d, [rdx + 0x1d]
lea rcx, [rbp + 0x210]
call fcn.18001ac90
xor eax, eax
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x2a0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xda
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x1d0]
call fcn.18001db10
mov eax, 0x1bb
mov word [rsp + 0x58], ax
mov r9d, 0xc5
lea r8, [rsp + 0x58]
lea rdx, [rbp + 0x68]
lea rcx, [0x1800ccf48]
call fcn.18000fc70
mov eax, 0x1bb
mov word [rsp + 0x58], ax
lea rax, [0x1800ccf68]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x38]
mov qword [rsp + 0x30], rax
xor eax, eax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
lea r9d, [rax + 0x5b]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180034340
jmp 0x1800179d7
cmp r14d, 0xd414
je 0x180017f74
cmp r14d, 0x11a69
jne 0x1800179de
lea rcx, [rbp - 8]
call qword [sym.imp.SHELL32.dll_SHGetInstanceExplorer]
mov dword [rbp - 0x78], eax
mov ecx, dword [0x1800ccf90]
mov dword [rsp + 0x60], ecx
mov r9d, 0x55
xor r8d, r8d
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x60]
call fcn.18000d3a0
xor edx, edx
mov dword [rbp - 0x74], edx
jmp 0x1800179d9
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb3
lea rcx, [rbp - 0x60]
call fcn.180042280
lea rax, [rbp + 0x68]
mov qword [rsp + 0x60], rax
mov rdx, qword [rbp - 0x58]
cmp rdx, qword [rbp - 0x50]
je 0x180017fb0
lea rax, [rbp + 0x68]
mov qword [rdx], rax
mov rdx, qword [rbp - 0x58]
add rdx, 8
mov qword [rbp - 0x58], rdx
jmp 0x180017fc2
lea r8, [rsp + 0x60]
lea rcx, [rbp - 0x60]
call fcn.180004b20
mov rdx, qword [rbp - 0x58]
lea rax, [rbp + 0x38]
mov qword [rsp + 0x60], rax
cmp rdx, qword [rbp - 0x50]
je 0x180017fe2
lea rax, [rbp + 0x38]
mov qword [rdx], rax
add qword [rbp - 0x58], 8
jmp 0x1800179d7
lea r8, [rsp + 0x60]
lea rcx, [rbp - 0x60]
call fcn.180004b20
jmp 0x1800179d7
lea rax, [rbp - 0x60]
mov qword [rbp], rax
mov eax, dword [0x1800ccf90]
mov dword [rbp + 8], eax
mov eax, dword [0x1800ccf94]
mov dword [rbp + 0xc], eax
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp + 0x20], xmm0
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], edx
lea r9, [rbp + 0x20]
lea r8, [0x180013650]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x70], rax
cmp rax, 0
jne 0x1800179d7
mov edi, 0xdd
nop word [rax + rax]
cmp edi, 0x18a85
ja 0x180018148
je 0x18001811d
cmp edi, 0xdd
je 0x1800180d4
cmp edi, 0x8415
je 0x1800180b9
cmp edi, 0x1074d
jne 0x180018209
movsd xmm0, qword [str.URATI]
movsd qword [rbp + 0x374], xmm0
mov eax, dword [0x1800bdb80]
mov dword [rbp + 0x37c], eax
mov eax, dword [0x1800bdb84]
mov dword [rbp + 0x37e], eax
movzx eax, word [0x1800bdb88]
mov word [rbp + 0x382], ax
jmp 0x180018209
mov dword [rbp + 0x370], 0x5f
mov eax, 0x44
mov word [rbp + 0x372], ax
jmp 0x180018209
movabs rax, 0x4500540043
mov qword [rbp + 0x350], rax
mov dword [rbp + 0x356], 0x53
movabs rax, 0x43005f0054
mov qword [rbp + 0x358], rax
movups xmm0, xmmword [str.ONTINUOU]
movups xmmword [rbp + 0x35e], xmm0
mov dword [rbp + 0x36e], 0x53
jmp 0x180018209
mov byte [rsp + 0x51], 1
mov qword [rsp + 0x78], 0xffffffffffffffff
xor eax, eax
mov dword [rbp - 0x7c], eax
xor r8d, r8d
xor edx, edx
lea rcx, [rax - 1]
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov dword [rsp + 0x6c], eax
jmp 0x180018209
cmp edi, 0x20dbd
je 0x1800181f4
cmp edi, 0x290f5
jne 0x180018209
xor eax, eax
mov ecx, eax
movzx eax, byte [rsp + 0x51]
cmp dword [rsp + 0x6c], ecx
cmovne ecx, eax
test cl, cl
je 0x180018417
mov ebx, pe_nt_image_headers64
mov esi, 0x76
mov rdi, qword [rsp + 0x78]
nop word [rax + rax]
mov eax, ebx
sub eax, 0x10c
je 0x180018400
sub eax, 1
je 0x1800183d3
sub eax, 1
je 0x180018370
sub eax, 1
je 0x180018319
cmp eax, 1
jne 0x180018409
mov byte [rbp + 0x2f0], 0x41
mov eax, 0x6c
mov word [rbp + 0x2f1], ax
movzx eax, word [0x1800bdbb4]
mov word [rbp + 0x2f2], ax
movzx eax, byte [0x1800bdbb6]
mov byte [rbp + 0x2f4], al
jmp 0x180018409
mov r9d, dword [rbp - 0x7c]
lea r8, [rbp + 0x350]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHPathPrepareForWriteW]
add edi, 0x8338
cmp edi, 0x31350
jbe 0x180018050
mov edi, dword [rsp + 0x54]
jmp 0x1800179d7
cmp r14d, 0x27a12
ja 0x1800182ba
je 0x180018298
cmp r14d, 0x1a713
je 0x180018288
cmp r14d, 0x1ed68
je 0x180018271
cmp r14d, 0x233bd
jne 0x1800179de
mov qword [rsp + 0x60], rax
xor r9d, r9d
xor edx, edx
mov r8d, 0xb2
lea rcx, [rsp + 0x60]
call fcn.180035fd0
jmp 0x1800179d7
mov ecx, edx
movzx eax, byte [rsp + 0x50]
cmp dword [rbp - 0x78], 0
cmove ecx, eax
mov byte [rsp + 0x50], cl
jmp 0x1800179d9
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1800179d7
lea r9, [rbp - 0x60]
mov r8d, 0xcf
lea rdx, [0x1800ccee0]
lea rcx, [rbp + 0xa0]
call fcn.18000a1d0
jmp 0x1800179d7
cmp r14d, 0x2c067
je 0x1800182d5
cmp r14d, 0x306bc
je case.0x180017a52.10
jmp 0x1800179de
mov edx, reloc.SHELL32.dll_ILFree
lea rcx, [rbp + 0xa0]
call fcn.180092750
mov r9d, dword [rbp - 0x74]
lea r8, [rbp + 0x388]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHPathPrepareForWriteW]
cmp byte [rsp + 0x50], 0
je 0x18001830c
mov rcx, qword [rbp - 8]
call qword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
xor edx, edx
mov ebx, edx
mov dword [rsp + 0x68], edx
jmp 0x1800179d9
mov eax, dword [str.defi]
mov dword [rbp + 0x2f4], eax
mov eax, 0x6e
mov word [rbp + 0x2f8], ax
mov eax, 0x65
mov word [rbp + 0x2f9], ax
lea rcx, [rbp + 0x2f0]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x180018347
movzx eax, word [0x1800bdbc0]
mov word [rcx], ax
movzx eax, byte [0x1800bdbc2]
mov byte [rcx + 2], al
mov word [rbp + 0x2fc], si
jmp 0x180018409
mov word [rbp + 0x2fd], 0x3f
lea rcx, [rbp + 0x2f0]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x180018383
movsd xmm0, qword [str.riables:]
movsd qword [rcx], xmm0
movzx eax, byte [0x1800bdbb0]
mov byte [rcx + 8], al
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x240], xmm0
movups xmmword [rbp + 0x250], xmm0
movups xmmword [rbp + 0x260], xmm0
movups xmmword [rbp + 0x270], xmm0
movups xmmword [rbp + 0x280], xmm0
mov qword [rbp + 0x290], rax
jmp 0x180018409
mov dword [rbp + 0x240], 0x58
mov dword [rbp + 0x290], 0x7d0
lea r8, [rbp + 0x240]
lea rdx, [rbp + 0x2f0]
mov rcx, rdi
call qword [sym.imp.dbghelp.dll_SymFromName]
jmp 0x180018409
mov rcx, rdi
call qword [sym.imp.dbghelp.dll_SymCleanup]
dec ebx
cmp ebx, 0x10b
ja 0x180018190
mov esi, 1
jmp 0x18001771f
xor r14d, r14d
mov rdx, qword [rbp + 0xe8]
test rdx, rdx
je 0x18001845c
mov r8, qword [rbp + 0xf8]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0xe8]
call fcn.18003d2e0
mov qword [rbp + 0xe8], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xf0], xmm0
lea rcx, [rbp + 0xa8]
call fcn.180006ad0
nop
mov rbx, qword [rbp - 0x48]
test rbx, rbx
je 0x1800184fb
mov rdi, qword [rbp - 0x40]
cmp rbx, rdi
je 0x180018495
nop
mov rcx, rbx
call fcn.1800063e0
add rbx, 0x28
cmp rbx, rdi
jne 0x180018480
mov rbx, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x38]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x1800184e7
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800184e7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1800a7360
mov qword [rbp - 0x48], r14
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x40], xmm0
mov rdx, qword [rbp - 0x60]
test rdx, rdx
je 0x180018524
mov r8, qword [rbp - 0x50]
sub r8, rdx
sar r8, 3
lea rcx, [rbp - 0x60]
call fcn.18003d290
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r14
mov rdx, qword [rbp + 0x5a]
cmp rdx, 0x10
jb 0x180018562
inc rdx
mov rcx, qword [rbp + 0x42]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001855d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18001855d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a7360
movdqa xmm0, xmmword [0x1800c4e00]
movdqu xmmword [rbp + 0x52], xmm0
mov byte [rbp + 0x42], 0
mov rdx, qword [rbp + 0x8a]
cmp rdx, 0x10
jb 0x1800185b4
inc rdx
mov rcx, qword [rbp + 0x72]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800185af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800185af
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a7360
movdqa xmm0, xmmword [0x1800c4e00]
movdqu xmmword [rbp + 0x82], xmm0
mov byte [rbp + 0x72], 0
lea rcx, [rbp + 0x2a0]
call fcn.180006740
nop
lea rcx, [rbp + 0x1d0]
call fcn.1800067f0
mov eax, esi
mov rcx, qword [rbp + 0x4c0]
xor rcx, rsp
call fcn.1800a7b10
lea r11, [rsp + 0x5d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret