Function at 0x180082fc0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x350]
sub rsp, 0x450
mov rax, qword [0x1800e72b8]
xor rax, rsp
mov qword [rbp + 0x340], rax
mov r15d, r9d
mov dword [rsp + 0x44], r9d
mov r14, r8
mov qword [rbp - 0x18], rdx
mov rdi, rcx
mov qword [rbp - 0x50], rcx
mov r12, qword [rbp + 0x3b0]
movdqa xmm0, xmmword [0x1800dee40]
movdqa xmmword [rbp + 0x200], xmm0
mov byte [rbp + 0x1f0], 0
movdqa xmm1, xmm0
movdqa xmmword [rbp + 0x220], xmm0
mov byte [rbp + 0x210], 0
movdqa xmmword [rbp + 0x240], xmm0
mov byte [rbp + 0x230], 0
movdqa xmmword [rbp + 0x1c0], xmm0
mov byte [rbp + 0x1b0], 0
movdqa xmmword [rbp + 0x1e0], xmm0
mov byte [rbp + 0x1d0], 0
xor ecx, ecx
mov qword [rbp + 0x30], rcx
mov word [rbp + 0x38], cx
movdqu xmmword [rbp + 0x4a], xmm0
mov byte [rbp + 0x3a], cl
mov qword [rbp], rcx
mov word [rbp + 8], cx
movdqu xmmword [rbp + 0x1a], xmm0
mov byte [rbp + 0xa], cl
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rcx
movdqa xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rcx
mov qword [rbp - 0x68], rcx
mov qword [rbp - 0x60], rcx
mov qword [rbp + 0x80], rcx
mov qword [rbp + 0x88], rcx
mov qword [rbp + 0x90], rcx
mov ecx, 0x30
call fcn.1800bc584
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x88], rax
xor r8d, r8d
mov qword [rbp + 0x98], r8
xorps xmm2, xmm2
movsd qword [rbp + 0xa0], xmm2
mov qword [rbp + 0xa8], r8
mov dword [rbp + 0xb0], 1
mov qword [rbp + 0xb8], r8
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xc0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xd0], xmm1
movdqa xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], r8
mov qword [rbp + 0xf8], 0xffffffffffffffff
mov dword [rbp + 0x100], r8d
xor eax, eax
movups xmmword [rbp + 0x108], xmm0
movups xmmword [rbp + 0x118], xmm0
movups xmmword [rbp + 0x128], xmm0
movups xmmword [rbp + 0x138], xmm0
mov qword [rbp + 0x148], rax
movdqa xmm0, xmmword [0x1800dee40]
movdqa xmmword [rbp + 0x160], xmm0
mov byte [rbp + 0x150], al
mov word [rbp + 0x170], r8w
mov dword [rbp + 0x174], r8d
mov qword [rbp + 0x178], r8
xorps xmm0, xmm0
movaps xmmword [rbp + 0x180], xmm0
movsd qword [rbp + 0x190], xmm2
mov byte [rbp + 0x198], al
mov qword [rbp + 0x19c], r8
mov esi, r15d
imul eax, r15d, 0xc49
mov dword [rsp + 0x50], eax
lea r10, [0x180000000]
mov r11d, 0x1bb
mov ebx, dword [rsp + 0x50]
movzx edx, byte [rsp + 0x40]
cmp r15d, eax
ja 0x18008445f
mov r13, qword [rbp - 0x50]
movzx r15d, byte [rsp + 0x40]
mov byte [rsp + 0x40], dl
cmp esi, 0x11640
ja 0x1800837d5
je 0x1800837b1
cmp esi, 0x8b80
ja 0x180083318
je 0x18008330c
mov eax, esi
sub eax, 0x6c
je 0x180083304
sub eax, 0x54
je 0x1800832f8
sub eax, 0x30
je 0x18008327b
cmp eax, 0x4d88
jne 0x180083d11
cmp dword [r12 + 0x2c], 0
jne 0x180083d11
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rax, str.SetVNCAddressString_not_implemented.
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [0x1800c867b]
lea rdx, str._jumptable
call fcn.1800bc2a0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov rax, qword [rbp - 0x18]
mov rax, qword [rax]
mov qword [rbp + 0x60], rax
mov r9, rdi
lea r8, [rbp + 0x60]
mov edx, 0xc1
lea rcx, [rbp + 0x260]
call fcn.1800ad1e0
test eax, eax
jne 0x180083750
mov ecx, 0x116
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x116
je 0x1800832c7
cmp eax, 0x16
je 0x180083d77
xor r8d, r8d
jmp 0x1800832e3
xorps xmm0, xmm0
movups xmmword [r14], xmm0
movups xmmword [r14 + 0x10], xmm0
movups xmmword [r14 + 0x20], xmm0
movups xmmword [r14 + 0x30], xmm0
xor r8d, r8d
mov ebx, r8d
add ecx, 0x16
cmp ecx, 0x142
jb 0x1800832b0
movzx edx, byte [rsp + 0x40]
jmp 0x180083d04
mov byte [rbp + 0x2d0], 0x70
jmp 0x180083d11
mov r13, r12
jmp 0x180083d11
mov byte [rbp + 0x2d1], 0
jmp 0x180083d11
cmp esi, 0x9c84
je 0x18008375a
cmp esi, 0xae60
je 0x180083728
cmp esi, 0xea90
jne 0x180083d11
lea rcx, [rbp + 0xf8]
call fcn.1800034c0
mov rdi, qword [rbp + 0xe0]
xor r14d, r14d
test rdi, rdi
je 0x18008341c
mov rsi, qword [rbp + 0xe8]
cmp rdi, rsi
je 0x1800833cf
nop word [rax + rax]
mov rdx, qword [rdi + 0x18]
cmp rdx, 8
jb 0x1800833af
mov rcx, qword [rdi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x1800833aa
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18008390f
mov rcx, r8
call fcn.1800bc5c0
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], 7
mov word [rdi], r14w
add rdi, 0x20
cmp rdi, rsi
jne 0x180083370
mov rdi, qword [rbp + 0xe0]
mov rdx, qword [rbp + 0xf0]
sub rdx, rdi
and rdx, 0xffffffffffffffe0
mov rax, rdi
cmp rdx, 0x1000
jb 0x180083402
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008390f
mov rcx, rdi
call fcn.1800bc5c0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], r14
mov rcx, qword [rbp + 0xc8]
test rcx, rcx
je 0x180083472
mov rdx, qword [rbp + 0xd8]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008345b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008390f
call fcn.1800bc5c0
mov qword [rbp + 0xc8], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
mov rcx, qword [rbp + 0x88]
mov rdi, qword [rcx + 8]
cmp byte [rdi + 0x19], 0
jne 0x1800834b7
mov r8, qword [rdi + 0x10]
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x88]
call fcn.180001cd0
mov rcx, rdi
mov rdi, qword [rdi]
mov edx, 0x30
call fcn.1800bc5c0
cmp byte [rdi + 0x19], 0
je 0x180083483
mov rcx, qword [rbp + 0x88]
mov edx, 0x30
call fcn.1800bc5c0
nop
mov rdi, qword [rsp + 0x78]
test rdi, rdi
je 0x18008359b
mov rsi, qword [rbp - 0x80]
cmp rdi, rsi
je 0x180083537
nop dword [rax]
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x18008351a
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x180083515
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180084201
mov rcx, r8
call fcn.1800bc5c0
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
add rdi, 0x28
cmp rdi, rsi
jne 0x1800834e0
mov rdi, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x78]
sub rcx, rdi
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rdi
cmp rdx, 0x1000
jb 0x180083586
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180084201
mov rcx, rdi
call fcn.1800bc5c0
mov qword [rsp + 0x78], r14
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x1800835f1
mov rax, qword [rsp + 0x70]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800835de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180084201
call fcn.1800bc5c0
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r14
mov rdx, qword [rbp + 0x22]
cmp rdx, 0x10
jb 0x18008362c
inc rdx
mov rcx, qword [rbp + 0xa]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180083627
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180084c44
call fcn.1800bc5c0
movdqa xmm0, xmmword [0x1800dee40]
movdqu xmmword [rbp + 0x1a], xmm0
mov byte [rbp + 0xa], 0
mov rdx, qword [rbp + 0x52]
cmp rdx, 0x10
jb 0x180083678
inc rdx
mov rcx, qword [rbp + 0x3a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180083673
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180084c9f
call fcn.1800bc5c0
movdqa xmm0, xmmword [0x1800dee40]
movdqu xmmword [rbp + 0x4a], xmm0
mov byte [rbp + 0x3a], 0
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 0x10
jb 0x1800836c6
inc rdx
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800836c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180083721
call fcn.1800bc5c0
movdqa xmm0, xmmword [0x1800dee40]
movdqa xmmword [rbp + 0x1e0], xmm0
mov byte [rbp + 0x1d0], 0
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0x10
jb 0x180084104
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800840fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800840fe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov r8d, 0x63
lea rdx, [rbp + 0x260]
mov rcx, r14
call fcn.180094470
lea r8, [rbp + 0x260]
mov edx, 0x2b
xor ecx, ecx
call fcn.18008d220
movzx edx, byte [rsp + 0x40]
jmp 0x180083d01
mov qword [rsp + 0x20], r8
mov r9d, 0x98
mov r8, r12
xor edx, edx
lea rcx, [rbp + 0x60]
call fcn.18003cbb0
mov eax, dword [r13 + 0x24]
or eax, dword [r13 + 0x20]
or eax, dword [r13 + 0x1c]
or eax, dword [r13 + 0x18]
or eax, dword [r13 + 0x14]
or eax, dword [r13 + 0x10]
or eax, dword [r13 + 0xc]
or eax, dword [r13 + 8]
or eax, dword [r13 + 4]
or eax, dword [r13]
mov r8d, 0
mov ebx, r8d
sete bl
movzx edx, byte [rsp + 0x40]
jmp 0x180083d04
mov r8d, 2
lea rdx, [0x1800db7d0]
lea rcx, [rbp + 0x2d0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
movzx edx, byte [rsp + 0x40]
jmp 0x180083d01
cmp esi, 0x34140
ja 0x180083c4a
je 0x180083930
cmp esi, 0x15bd0
je 0x180083872
cmp esi, 0x1a100
je 0x180083842
cmp esi, 0x22bc0
je 0x180083833
cmp esi, 0x2b680
jne 0x180083d11
mov r8d, 3
lea rdx, [0x1800db7d4]
lea rcx, [rbp + 0x2d8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
movzx edx, byte [rsp + 0x40]
jmp 0x180083d01
mov dword [rbp + 0x2d5], 0x632e61
jmp 0x180083d11
lea rcx, [rbp + 0x2d0]
dec rcx
nop dword [rax]
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x180083850
movzx eax, word [0x1800db85c]
mov word [rcx], ax
movzx eax, byte [0x1800db85e]
mov byte [rcx + 2], al
jmp 0x180083d11
mov eax, 0x90
nop word [rax + rax]
cmp eax, 0x90
je 0x180083916
cmp eax, 0x6270
jne 0x18008391b
lea rcx, [rbp + 0xf8]
call fcn.1800034c0
mov rdi, qword [rbp + 0xe0]
test rdi, rdi
je 0x18008413c
mov rsi, qword [rbp + 0xe8]
cmp rdi, rsi
je 0x1800838d8
nop
mov rcx, rdi
call fcn.1800262a0
add rdi, 0x20
cmp rdi, rsi
jne 0x1800838c0
mov rdi, qword [rbp + 0xe0]
mov rdx, qword [rbp + 0xf0]
sub rdx, rdi
and rdx, 0xffffffffffffffe0
mov rax, rdi
cmp rdx, 0x1000
jb 0x18008411d
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18008411d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ebx, 1
add eax, 0x61e0
cmp eax, 0xc3c0
jbe 0x180083880
jmp 0x180083c6a
xor r9d, r9d
lea r8, [0x1800e57c8]
xor edx, edx
mov ecx, 0xe7
call fcn.180013c10
test al, al
jne 0x180083750
mov edi, 0x17
nop dword [rax]
nop word [rax + rax]
lea r10, [0x180000000]
cmp edi, 0x17
ja case.0x18008397d.7
mov eax, edi
mov ecx, dword [r10 + rax*4 + 0x84ca8]
add rcx, r10
jmp rcx
xor r8d, r8d
mov ecx, r8d
movzx eax, r15b
cmp dword [rbp - 0x40], r8d
cmovne ecx, eax
movzx r15d, cl
jmp 0x180083c29
xor r8d, r8d
mov qword [rbp - 0x30], r8
mov dword [rbp - 0x48], r8d
jmp 0x180083c29
lea rcx, [rbp + 0x2e0]
sub rcx, 2
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x1800839b4
mov eax, dword [0x1800db7d8]
mov dword [rcx], eax
mov r8d, 3
lea rdx, [0x1800db7e0]
lea rcx, [rbp + 0x2e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
lea r10, [0x180000000]
jmp case.0x18008397d.7
mov dword [rbp - 0x28], 0x1c
test r15b, r15b
je case.0x18008397d.7
lea r9, [rbp + 0x2e0]
mov r8d, dword [rsp + 0x48]
lea rdx, [rbp + 0x308]
mov rcx, qword [rbp - 0x30]
call sub.IMM32.dll_ImmUnregisterWordW
lea r10, [0x180000000]
jmp case.0x18008397d.7
mov r8d, 2
lea rdx, [0x1800db7e8]
lea rcx, [rbp + 0x308]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
movsd xmm0, qword [str._STEN]
movsd qword [rbp + 0x30c], xmm0
mov eax, dword [0x1800db7f8]
mov dword [rbp + 0x314], eax
lea r10, [0x180000000]
jmp case.0x18008397d.7
mov dword [rbp + 0x2e4], 0x4f
jmp case.0x18008397d.7
movsd xmm0, qword [str.penS]
movsd qword [rbp + 0x2e6], xmm0
movzx eax, word [0x1800db808]
mov word [rbp + 0x2ee], ax
mov r8d, 3
lea rdx, [0x1800db80c]
lea rcx, [rbp + 0x2ee]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
lea r10, [0x180000000]
jmp case.0x18008397d.7
mov r15b, 1
jmp case.0x18008397d.7
mov eax, dword [0x1800db814]
mov dword [rbp + 0x2e0], eax
movzx eax, word [0x1800db818]
mov word [rbp + 0x2e4], ax
jmp case.0x18008397d.7
mov dword [rbp + 0x330], 0x5f
jmp case.0x18008397d.7
xor r8d, r8d
mov qword [rbp - 0x20], r8
jmp 0x180083c29
movabs rax, 0x790078006f
mov qword [rbp + 0x2fe], rax
jmp case.0x18008397d.7
mov r9d, dword [rbp - 0x28]
lea r8, [rbp + 0x60]
mov edx, dword [rbp - 0x48]
mov rcx, qword [rbp - 0x20]
call sub.IMM32.dll_ImmGetCandidateListW
mov ebx, 1
lea r10, [0x180000000]
jmp case.0x18008397d.7
mov eax, dword [0x1800db81c]
mov dword [rbp + 0x332], eax
mov eax, dword [0x1800db824]
mov dword [rbp + 0x336], eax
movzx eax, word [0x1800db828]
mov word [rbp + 0x33a], ax
jmp case.0x18008397d.7
mov r8d, 6
lea rdx, str.CIL_F
lea rcx, [rbp + 0x316]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
lea r10, [0x180000000]
jmp case.0x18008397d.7
mov r8d, 2
lea rdx, [0x1800db83c]
jmp 0x1800839d3
mov dword [rbp + 0x32e], 0x44
jmp case.0x18008397d.7
lea r9, [rbp + 0x2e0]
mov r8d, dword [rsp + 0x48]
lea rdx, [rbp + 0x308]
mov rcx, qword [rbp - 0x30]
call sub.IMM32.dll_ImmRegisterWordW
mov dword [rbp - 0x40], eax
mov dword [rbp + 0x60], 0x1c
lea r10, [0x180000000]
jmp case.0x18008397d.7
mov dword [rsp + 0x48], 1
jmp case.0x18008397d.7
xor r8d, r8d
mov word [rbp + 0x308], r8w
jmp 0x180083c29
movsd xmm0, qword [str.RONT_A]
movsd qword [rbp + 0x320], xmm0
mov eax, dword [0x1800db850]
mov dword [rbp + 0x328], eax
mov dword [rbp + 0x32c], 0x4e
jmp case.0x18008397d.7
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], rax
mov dword [rbp + 0x78], eax
xor r8d, r8d
dec edi
lea eax, [rdi + 0x111]
cmp eax, 0x110
ja 0x180083960
mov rdi, qword [rbp - 0x50]
movzx edx, byte [rsp + 0x40]
jmp 0x180083d0b
cmp esi, 0x3cc00
je 0x180083ced
cmp esi, 0x456c0
je 0x180083c9e
cmp esi, 0x4e180
jne 0x180083d11
mov word [rbp + 0x250], r11w
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], r8
lea r9, [rbp + 0x230]
xor r8d, r8d
mov edx, 0x98
lea rcx, [rbp + 0x2e0]
call fcn.1800863a0
movzx edx, byte [rsp + 0x40]
jmp 0x180083d01
lea rax, [rbp + 0x2d0]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x180083cb0
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp + 0x1f0]
call fcn.18002e300
mov r8d, 1
lea rdx, [0x1800db858]
lea rcx, [rbp + 0x210]
call fcn.18002e300
movzx edx, byte [rsp + 0x40]
jmp 0x180083d01
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
mov dl, 1
mov byte [rsp + 0x40], dl
xor r8d, r8d
lea r10, [0x180000000]
mov r11d, 0x1bb
imul eax, dword [rsp + 0x44], 0xb9
add esi, eax
cmp esi, dword [rsp + 0x50]
jbe 0x1800831f0
mov r15d, dword [rsp + 0x44]
lea edi, [r15 + 0x11]
mov dword [rsp + 0x50], edi
cmp r15d, edi
jae 0x180084b1a
lea r13d, [r15 - 0xc0]
lea r9, [0x1800e5848]
movzx esi, byte [rsp + 0x40]
mov r14, qword [rbp - 0x50]
mov r15, qword [rbp - 0x50]
mov r12d, dword [rsp + 0x50]
mov eax, dword [rsp + 0x44]
nop
cmp r13d, 0x10
ja case.default.0x180083d75
mov ecx, dword [r10 + r13*4 + 0x84d08]
add rcx, r10
jmp rcx
lea rcx, [rbp + 0xf8]
call fcn.1800034c0
mov rdi, qword [rbp + 0xe0]
xor r14d, r14d
test rdi, rdi
je 0x180083e4e
mov rsi, qword [rbp + 0xe8]
cmp rdi, rsi
je 0x180083e01
mov rdx, qword [rdi + 0x18]
cmp rdx, 8
jb 0x180083de1
mov rcx, qword [rdi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x180083ddc
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18008390f
mov rcx, r8
call fcn.1800bc5c0
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], 7
mov word [rdi], r14w
add rdi, 0x20
cmp rdi, rsi
jne 0x180083da2
mov rdi, qword [rbp + 0xe0]
mov rdx, qword [rbp + 0xf0]
sub rdx, rdi
and rdx, 0xffffffffffffffe0
mov rax, rdi
cmp rdx, 0x1000
jb 0x180083e34
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008390f
mov rcx, rdi
call fcn.1800bc5c0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], r14
mov rcx, qword [rbp + 0xc8]
test rcx, rcx
je 0x180083ea4
mov rdx, qword [rbp + 0xd8]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x180083e8d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008390f
call fcn.1800bc5c0
mov qword [rbp + 0xc8], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
mov rcx, qword [rbp + 0x88]
mov rdi, qword [rcx + 8]
cmp byte [rdi + 0x19], 0
jne 0x180083ee9
mov r8, qword [rdi + 0x10]
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x88]
call fcn.180001cd0
mov rcx, rdi
mov rdi, qword [rdi]
mov edx, 0x30
call fcn.1800bc5c0
cmp byte [rdi + 0x19], 0
je 0x180083eb5
mov rcx, qword [rbp + 0x88]
mov edx, 0x30
call fcn.1800bc5c0
nop
mov rdi, qword [rsp + 0x78]
test rdi, rdi
je 0x180083fcb
mov rsi, qword [rbp - 0x80]
cmp rdi, rsi
je 0x180083f67
nop dword [rax + rax]
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x180083f4a
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x180083f45
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180084201
mov rcx, r8
call fcn.1800bc5c0
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
add rdi, 0x28
cmp rdi, rsi
jne 0x180083f10
mov rdi, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x78]
sub rcx, rdi
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rdi
cmp rdx, 0x1000
jb 0x180083fb6
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180084201
mov rcx, rdi
call fcn.1800bc5c0
mov qword [rsp + 0x78], r14
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x180084021
mov rax, qword [rsp + 0x70]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008400e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180084201
call fcn.1800bc5c0
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r14
mov rdx, qword [rbp + 0x22]
cmp rdx, 0x10
jb 0x18008405c
inc rdx
mov rcx, qword [rbp + 0xa]
cmp rdx, 0x1000
mov rax, rcx
jb 0x180084057
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180084c44
call fcn.1800bc5c0
movdqa xmm0, xmmword [0x1800dee40]
movdqu xmmword [rbp + 0x1a], xmm0
mov byte [rbp + 0xa], 0
mov rdx, qword [rbp + 0x52]
cmp rdx, 0x10
jb 0x1800840a8
inc rdx
mov rcx, qword [rbp + 0x3a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800840a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180084c9f
call fcn.1800bc5c0
movdqa xmm0, xmmword [0x1800dee40]
movdqu xmmword [rbp + 0x4a], xmm0
mov byte [rbp + 0x3a], 0
lea rcx, [rbp + 0x1b0]
call fcn.180003060
nop
lea rcx, [rbp + 0x1f0]
call fcn.180003110
mov eax, ebx
mov rcx, qword [rbp + 0x340]
xor rcx, rsp
call fcn.1800bcd70
mov rbx, qword [rsp + 0x4a8]
add rsp, 0x450
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1800bc5c0
nop
movdqa xmm0, xmmword [0x1800dee40]
movdqa xmmword [rbp + 0x1c0], xmm0
mov byte [rbp + 0x1b0], 0
jmp 0x1800840c6
mov rcx, rdi
call fcn.1800bc5c0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
xor r14d, r14d
mov qword [rbp + 0xf0], r14
jmp 0x18008413f
xor r14d, r14d
mov rdx, qword [rbp + 0xc8]
test rdx, rdx
je 0x180084177
mov r8, qword [rbp + 0xd8]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0xc8]
call fcn.18004ed90
mov qword [rbp + 0xc8], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
lea rcx, [rbp + 0x88]
call fcn.1800033f0
nop
mov rdi, qword [rsp + 0x78]
test rdi, rdi
je 0x18008421d
mov rsi, qword [rbp - 0x80]
cmp rdi, rsi
je 0x1800841b6
nop dword [rax + rax]
mov rcx, rdi
call fcn.180002d00
add rdi, 0x28
cmp rdi, rsi
jne 0x1800841a0
mov rdi, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x78]
sub rcx, rdi
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rdi
cmp rdx, 0x1000
jb 0x180084208
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180084208
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1800bc5c0
xorps xmm0, xmm0
mov qword [rsp + 0x78], r14
movdqa xmmword [rbp - 0x80], xmm0
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x180084021
mov r8, qword [rsp + 0x70]
sub r8, rdx
sar r8, 3
lea rcx, [rsp + 0x60]
call fcn.18004ed40
jmp 0x180084013
lea rcx, [rbp + 0xf8]
call fcn.1800034c0
mov rdi, qword [rbp + 0xe0]
test rdi, rdi
je 0x1800842bc
mov rsi, qword [rbp + 0xe8]
cmp rdi, rsi
je 0x180084288
nop word [rax + rax]
mov rcx, rdi
call fcn.1800262a0
add rdi, 0x20
cmp rdi, rsi
jne 0x180084270
mov rdi, qword [rbp + 0xe0]
mov r8, qword [rbp + 0xf0]
sub r8, rdi
sar r8, 5
mov rdx, rdi
lea rcx, [rbp + 0xe0]
call fcn.18004ee30
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
xor r14d, r14d
mov qword [rbp + 0xf0], r14
jmp 0x1800842bf
xor r14d, r14d
mov rdx, qword [rbp + 0xc8]
test rdx, rdx
je 0x1800842f7
mov r8, qword [rbp + 0xd8]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0xc8]
call fcn.18004ed90
mov qword [rbp + 0xc8], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
lea rcx, [rbp + 0x88]
call fcn.1800033f0
nop
mov rdi, qword [rsp + 0x78]
test rdi, rdi
je 0x18008439d
mov rsi, qword [rbp - 0x80]
cmp rdi, rsi
je 0x180084336
nop dword [rax + rax]
mov rcx, rdi
call fcn.180002d00
add rdi, 0x28
cmp rdi, rsi
jne 0x180084320
mov rdi, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x78]
sub rcx, rdi
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rdi
cmp rdx, 0x1000
jb 0x180084388
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180084388
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1800bc5c0
mov qword [rsp + 0x78], r14
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x1800843cb
mov r8, qword [rsp + 0x70]
sub r8, rdx
sar r8, 3
lea rcx, [rsp + 0x60]
call fcn.18004ed40
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r14
mov rdx, qword [rbp + 0x22]
cmp rdx, 0x10
jb 0x180084409
inc rdx
mov rcx, qword [rbp + 0xa]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180084404
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180084404
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800bc5c0
movdqa xmm0, xmmword [0x1800dee40]
movdqu xmmword [rbp + 0x1a], xmm0
mov byte [rbp + 0xa], 0
mov rdx, qword [rbp + 0x52]
cmp rdx, 0x10
jb 0x1800840a8
inc rdx
mov rcx, qword [rbp + 0x3a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800840a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800840a3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov byte [rsp + 0x40], dl
jmp 0x180083d2a
test dl, dl
je 0x1800847c9
mov r8d, dword [rbp - 0x38]
mov edx, dword [rbp - 0x3c]
mov rcx, qword [rbp - 0x28]
call sub.IMM32.dll_ImmSetConversionStatus
jmp 0x1800847ba
mov rcx, qword [rbp - 0x20]
call sub.IMM32.dll_ImmGetOpenStatus
xor r8d, r8d
mov ebx, r8d
jmp 0x1800847bd
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, [0x18000d9b0]
mov qword [rbp - 0x50], rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x30], rax
xor eax, eax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor edx, edx
xor ecx, ecx
lea r8d, [rax + 0x18]
call fcn.180059500
jmp 0x1800847ba
mov qword [rsp + 0x28], r8
mov dword [rsp + 0x20], r8d
lea r9, [rbp - 0x10]
lea r8, [0x18001dec0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rbp - 0x30], rax
cmp rax, 0
jne 0x1800847ba
mov edi, 0x9d
nop word [rax + rax]
cmp edi, 0x9d
je 0x1800845b0
cmp edi, 0x154
je 0x18008458f
cmp edi, 0x20b
je 0x180084570
cmp edi, 0x2c2
je 0x180084545
cmp edi, 0x379
je 0x1800847f0
xor r8d, r8d
jmp 0x1800845b9
xor r8d, r8d
mov ecx, r8d
movzx eax, sil
test r12d, r12d
cmovne ecx, eax
movzx esi, cl
test cl, cl
je 0x1800845b9
lea rdx, [rbp + 0x2e0]
mov rcx, r14
call sub.IMM32.dll_ImmSetCompositionWindow
xor r8d, r8d
jmp 0x1800845b9
mov rcx, r15
call sub.IMM32.dll_ImmIsIME
lea rdx, [rbp + 0x2e0]
mov rcx, r14
call sub.IMM32.dll_ImmGetCompositionWindow
mov r12d, eax
xor r8d, r8d
jmp 0x1800845b9
xor r8d, r8d
mov r15d, r8d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x2e0], xmm0
mov qword [rbp + 0x2f0], rax
mov dword [rbp + 0x2f8], eax
jmp 0x1800845b9
mov sil, 1
xor r8d, r8d
mov r14d, r8d
add edi, 0xb7
cmp edi, 0x430
jb 0x180084510
mov edi, dword [rsp + 0x50]
jmp 0x1800847bd
lea r8, [rbp - 0x38]
lea rdx, [rbp - 0x3c]
mov rcx, qword [rbp - 0x28]
call sub.IMM32.dll_ImmGetConversionStatus
mov dword [rbp - 0x40], eax
jmp 0x1800847ba
lea rax, [rbp + 0x30]
mov qword [rbp - 0x50], rax
mov rax, qword [rsp + 0x68]
cmp rax, qword [rsp + 0x70]
je 0x180084613
lea rcx, [rbp + 0x30]
mov qword [rax], rcx
add qword [rsp + 0x68], 8
jmp 0x1800847c9
lea r8, [rbp - 0x50]
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x60]
call fcn.180001440
jmp 0x1800847ba
mov qword [rbp - 0x20], r8
jmp 0x1800847c9
mov word [rsp + 0x48], r11w
mov qword [rsp + 0x20], r9
lea r9, [rbp]
xor edx, edx
mov r8d, 0xe9
lea rcx, [rsp + 0x48]
call fcn.1800b00d0
jmp 0x1800847ba
mov ecx, r8d
movzx eax, dl
cmp dword [rbp - 0x40], 0
cmovne ecx, eax
movzx edx, cl
mov byte [rsp + 0x40], cl
jmp 0x1800847c9
lea rax, [rbp]
mov qword [rbp - 0x50], rax
mov rax, qword [rsp + 0x68]
cmp rax, qword [rsp + 0x70]
je 0x180084696
lea rcx, [rbp]
mov qword [rax], rcx
add qword [rsp + 0x68], 8
jmp 0x1800846a9
lea r8, [rbp - 0x50]
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x60]
call fcn.180001440
mov eax, dword [0x1800e5870]
mov dword [rbp - 0x48], eax
mov r8d, 0x94
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x48]
call fcn.180030130
jmp 0x1800847ba
mov r9d, 0x101
xor r8d, r8d
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x1b0]
call fcn.180055170
jmp 0x1800847ba
mov qword [rbp - 0x28], r8
jmp 0x1800847c9
mov word [rsp + 0x48], r11w
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 0x34
xor r8d, r8d
lea rdx, [rsp + 0x48]
lea rcx, [0x1800e5828]
call fcn.1800250d0
xor r8d, r8d
mov dword [rbp - 0x3c], r8d
jmp 0x1800847bd
xor r9d, r9d
lea r8, [rsp + 0x60]
xor edx, edx
mov ecx, 0x127
call fcn.18001a9f0
xor r8d, r8d
mov dword [rbp - 0x38], r8d
jmp 0x1800847bd
lea rax, [rsp + 0x60]
mov qword [rbp + 0x60], rax
mov eax, dword [0x1800e5870]
mov dword [rbp + 0x68], eax
mov eax, dword [0x1800e5874]
mov dword [rbp + 0x6c], eax
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x10], xmm0
jmp 0x1800847c9
lea rax, [rbp + 0x80]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
mov r8d, 0x58
lea rdx, [0x1800e57c0]
xor ecx, ecx
call fcn.180044360
xor eax, eax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x80]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor edx, edx
xor ecx, ecx
lea r8d, [r9 + 0x17]
call fcn.18003e270
xor r8d, r8d
lea r9, [0x1800e5848]
movzx edx, byte [rsp + 0x40]
mov eax, dword [rsp + 0x44]
inc eax
mov dword [rsp + 0x44], eax
inc r13d
cmp eax, edi
jae 0x180084b1a
lea r10, [0x180000000]
mov r11d, 0x1bb
jmp 0x180083d60
lea rcx, [rbp + 0xf8]
call fcn.1800034c0
mov rbx, qword [rbp + 0xe0]
test rbx, rbx
je 0x18008485f
mov rdi, qword [rbp + 0xe8]
cmp rbx, rdi
je 0x18008482c
mov rcx, rbx
call fcn.1800262a0
add rbx, 0x20
cmp rbx, rdi
jne 0x180084814
mov rbx, qword [rbp + 0xe0]
mov r8, qword [rbp + 0xf0]
sub r8, rbx
sar r8, 5
mov rdx, rbx
lea rcx, [rbp + 0xe0]
call fcn.18004ee30
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
xor esi, esi
mov qword [rbp + 0xf0], rsi
jmp 0x180084861
xor esi, esi
mov rdx, qword [rbp + 0xc8]
test rdx, rdx
je 0x180084899
mov r8, qword [rbp + 0xd8]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0xc8]
call fcn.18004ed90
mov qword [rbp + 0xc8], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
lea rcx, [rbp + 0x88]
call fcn.1800033f0
nop
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x180084912
mov rdi, qword [rbp - 0x80]
cmp rbx, rdi
je 0x1800848d6
nop dword [rax]
mov rcx, rbx
call fcn.180002d00
add rbx, 0x28
cmp rbx, rdi
jne 0x1800848c0
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x78]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov r8, rdx
shr r8, 0x3f
add r8, rdx
mov rdx, rbx
lea rcx, [rsp + 0x78]
call fcn.18004ede0
mov qword [rsp + 0x78], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x180084940
mov r8, qword [rsp + 0x70]
sub r8, rdx
sar r8, 3
lea rcx, [rsp + 0x60]
call fcn.18004ed40
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rsi
mov rdx, qword [rbp + 0x22]
cmp rdx, 0x10
jb 0x18008497e
inc rdx
mov rcx, qword [rbp + 0xa]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180084979
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180084979
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800bc5c0
movdqa xmm0, xmmword [0x1800dee40]
movdqu xmmword [rbp + 0x1a], xmm0
mov byte [rbp + 0xa], 0
mov rdx, qword [rbp + 0x52]
cmp rdx, 0x10
jb 0x1800849cd
inc rdx
mov rcx, qword [rbp + 0x3a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800849c8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800849c8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800bc5c0
movdqa xmm0, xmmword [0x1800dee40]
movdqu xmmword [rbp + 0x4a], xmm0
mov byte [rbp + 0x3a], 0
lea rcx, [rbp + 0x1b0]
call fcn.180003060
nop
lea rcx, [rbp + 0x1f0]
call fcn.180003110
mov eax, 1
jmp 0x1800840d4
lea rcx, [rbp + 0xf8]
call fcn.1800034c0
mov rdi, qword [rbp + 0xe0]
test rdi, rdi
je 0x180084a71
mov rsi, qword [rbp + 0xe8]
cmp rdi, rsi
je 0x180084a3d
mov rcx, rdi
call fcn.1800262a0
add rdi, 0x20
cmp rdi, rsi
jne 0x180084a25
mov rdi, qword [rbp + 0xe0]
mov r8, qword [rbp + 0xf0]
sub r8, rdi
sar r8, 5
mov rdx, rdi
lea rcx, [rbp + 0xe0]
call fcn.18004ee30
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
xor r14d, r14d
mov qword [rbp + 0xf0], r14
jmp 0x180084a74
xor r14d, r14d
mov rdx, qword [rbp + 0xc8]
test rdx, rdx
je 0x180084aac
mov r8, qword [rbp + 0xd8]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0xc8]
call fcn.18004ed90
mov qword [rbp + 0xc8], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
lea rcx, [rbp + 0x88]
call fcn.1800033f0
nop
mov rdi, qword [rsp + 0x78]
test rdi, rdi
je 0x18008421d
mov rsi, qword [rbp - 0x80]
cmp rdi, rsi
je 0x180084ae6
mov rcx, rdi
call fcn.180002d00
add rdi, 0x28
cmp rdi, rsi
jne 0x180084ad0
mov rdi, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x78]
sub rcx, rdi
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov r8, rdx
shr r8, 0x3f
add r8, rdx
mov rdx, rdi
lea rcx, [rsp + 0x78]
call fcn.18004ede0
jmp 0x180084210
lea rcx, [rbp + 0xf8]
call fcn.1800034c0
lea rcx, [rbp + 0xe0]
call fcn.180002f00
mov rdx, qword [rbp + 0xc8]
test rdx, rdx
je 0x180084b6f
mov r8, qword [rbp + 0xd8]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0xc8]
call fcn.18004ed90
xor r14d, r14d
mov qword [rbp + 0xc8], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
jmp 0x180084b72
xor r14d, r14d
lea rcx, [rbp + 0x88]
call fcn.1800033f0
nop
mov rdi, qword [rsp + 0x78]
test rdi, rdi
je 0x180084be4
mov rsi, qword [rbp - 0x80]
cmp rdi, rsi
je 0x180084ba8
mov rcx, rdi
call fcn.180002d00
add rdi, 0x28
cmp rdi, rsi
jne 0x180084b92
mov rdi, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x78]
sub rcx, rdi
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov r8, rdx
shr r8, 0x3f
add r8, rdx
mov rdx, rdi
lea rcx, [rsp + 0x78]
call fcn.18004ede0
mov qword [rsp + 0x78], r14
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x180084c12
mov r8, qword [rsp + 0x70]
sub r8, rdx
sar r8, 3
lea rcx, [rsp + 0x60]
call fcn.18004ed40
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r14
mov rdx, qword [rbp + 0x22]
cmp rdx, 0x10
jb 0x180084c50
inc rdx
mov rcx, qword [rbp + 0xa]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180084c4b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180084c4b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800bc5c0
movdqa xmm0, xmmword [0x1800dee40]
movdqu xmmword [rbp + 0x1a], xmm0
mov byte [rbp + 0xa], 0
mov rdx, qword [rbp + 0x52]
cmp rdx, 0x10
jb 0x1800840a8
inc rdx
mov rcx, qword [rbp + 0x3a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800840a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800840a3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3