Function at 0x180054cc0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4e0]
sub rsp, 0x5e0
mov rax, qword [0x18007cd08]
xor rax, rsp
mov qword [rbp + 0x4d0], rax
mov r14, r9
mov qword [rsp + 0x60], r9
mov rdi, r8
mov qword [rsp + 0x50], r8
mov esi, edx
mov dword [rsp + 0x48], edx
mov r15, rcx
mov qword [rbp + 0x20], rcx
movdqa xmm0, xmmword [0x180077500]
movdqa xmmword [rbp + 0x1e0], xmm0
mov byte [rbp + 0x1d0], 0
movdqa xmm1, xmm0
movdqa xmmword [rbp + 0x200], xmm0
mov byte [rbp + 0x1f0], 0
movdqa xmmword [rbp + 0x220], xmm0
mov byte [rbp + 0x210], 0
movdqa xmmword [rbp + 0x250], xmm0
mov byte [rbp + 0x240], 0
movdqa xmmword [rbp + 0x270], xmm0
mov byte [rbp + 0x260], 0
xor ebx, ebx
mov qword [rbp + 0x70], rbx
mov word [rbp + 0x78], bx
movdqu xmmword [rbp + 0x8a], xmm0
mov byte [rbp + 0x7a], bl
mov qword [rbp + 0x40], rbx
mov word [rbp + 0x48], bx
movdqu xmmword [rbp + 0x5a], xmm0
mov byte [rbp + 0x4a], bl
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], rbx
movdqa xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x30], rbx
mov qword [rbp + 0xa0], rbx
mov qword [rbp + 0xa8], rbx
mov qword [rbp + 0xb0], rbx
lea ecx, [rbx + 0x30]
call fcn.18006e874
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0xa8], rax
mov qword [rbp + 0xb8], rbx
xorps xmm2, xmm2
movsd qword [rbp + 0xc0], xmm2
mov qword [rbp + 0xc8], rbx
mov dword [rbp + 0xd0], 1
mov qword [rbp + 0xd8], rbx
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xf0], xmm1
movdqa xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], rbx
mov qword [rbp + 0x118], 0xffffffffffffffff
mov dword [rbp + 0x120], ebx
xor eax, eax
movups xmmword [rbp + 0x128], xmm0
movups xmmword [rbp + 0x138], xmm0
movups xmmword [rbp + 0x148], xmm0
movups xmmword [rbp + 0x158], xmm0
mov qword [rbp + 0x168], rax
movdqa xmm0, xmmword [0x180077500]
movdqa xmmword [rbp + 0x180], xmm0
mov byte [rbp + 0x170], al
mov word [rbp + 0x190], bx
mov dword [rbp + 0x194], ebx
mov qword [rbp + 0x198], rbx
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1a0], xmm0
movsd qword [rbp + 0x1b0], xmm2
mov byte [rbp + 0x1b8], al
mov qword [rbp + 0x1bc], rbx
mov r13d, esi
imul eax, esi, 0x69c
mov dword [rsp + 0x4c], eax
mov rbx, qword [rsp + 0x38]
cmp esi, eax
ja 0x1800552a3
mov edx, 0x65
lea ecx, [rdx + 8]
lea r8d, [rdx + 0x10]
lea r9d, [rdx - 0xf]
lea r10d, [rdx - 0x18]
lea r12d, [rdx - 0x21]
lea r11d, [rdx - 0x19]
mov eax, 0x632e
cmp r13d, 0x6a20
ja 0x1800554ec
je 0x1800554a1
cmp r13d, 0x1054
ja 0x180055411
je 0x1800553e9
mov eax, r13d
sub eax, 0x2c
je 0x1800553ae
sub eax, 0x34
je 0x180055333
sub eax, 0x5e
je 0x18005530e
cmp eax, 0x6c
jne 0x180055292
mov rdi, qword [r15]
mov r14, qword [r15 + 0x18]
test r14, r14
je 0x180055288
mov rcx, qword [rsp + 0x50]
nop word [rax + rax]
lea rax, [r14 + r14*4]
lea rsi, [rdi + rax*8]
mov rax, qword [rsi + 8]
cmp qword [rcx], rax
ja 0x18005525c
mov r12d, 0xc0
nop dword [rax + rax]
mov eax, r12d
sub eax, 0xbd
je 0x180055cac
sub eax, 1
je 0x1800551f2
sub eax, 1
je 0x180054fcf
cmp eax, 1
jne 0x180055245
mov rdx, qword [rcx]
mov rcx, qword [rsi + 0x18]
lea rax, [rcx + rcx*4]
cmp qword [rdi + rax*8 + 8], rdx
jne 0x180055245
nop dword [rax + rax]
mov r14, rcx
lea rax, [rcx + rcx*4]
lea rsi, [rdi + rax*8]
mov rcx, qword [rsi + 0x18]
lea rax, [rcx + rcx*4]
cmp qword [rdi + rax*8 + 8], rdx
je 0x180054fb0
jmp 0x180055245
mov r8, qword [rsi + 0x20]
test r8, r8
je 0x180055151
lea r11, [r8 + r8*4]
cmp qword [rdi + r11*8 + 0x10], r14
jne 0x1800550a1
mov rax, qword [rsi + 0x18]
test rax, rax
je 0x18005507a
mov r9, qword [rsi + 0x10]
test r9, r9
je 0x180055053
lea r10, [rax + rax*4]
mov rdx, qword [rdi + r10*8 + 0x10]
lea rax, [rdx + rdx*4]
mov rcx, qword [rdi + rax*8 + 0x10]
test rcx, rcx
je 0x180055031
nop dword [rax + rax]
mov rdx, rcx
lea rax, [rcx + rcx*4]
mov rcx, qword [rdi + rax*8 + 0x10]
test rcx, rcx
jne 0x180055020
test rdx, rdx
je 0x18005504e
lea rax, [rdx + rdx*4]
mov qword [rdi + rax*8 + 0x10], r9
mov rax, qword [rsi + 0x10]
lea rcx, [rax + rax*4]
mov qword [rdi + rcx*8 + 0x20], rdx
jmp 0x180055053
mov qword [rdi + r10*8 + 0x10], r9
mov rax, qword [rsi + 0x18]
mov qword [rdi + r11*8 + 0x10], rax
mov rax, qword [rsi + 0x18]
lea rcx, [rax + rax*4]
mov qword [rdi + rcx*8 + 0x20], r8
mov rcx, qword [r15 + 0x30]
mov rax, qword [r15 + 0x28]
mov qword [rax + rcx*8], r14
jmp 0x180055245
mov rax, qword [rsi + 0x10]
mov qword [rdi + r11*8 + 0x10], rax
mov rax, qword [rsi + 0x10]
lea rcx, [rax + rax*4]
mov qword [rdi + rcx*8 + 0x20], r8
mov rcx, qword [r15 + 0x30]
mov rax, qword [r15 + 0x28]
mov qword [rax + rcx*8], r14
jmp 0x180055245
mov rax, qword [rsi + 0x10]
test rax, rax
je 0x18005512a
mov r9, qword [rsi + 0x18]
test r9, r9
je 0x180055103
lea r10, [rax + rax*4]
mov rdx, qword [rdi + r10*8 + 0x18]
lea rax, [rdx + rdx*4]
mov rcx, qword [rdi + rax*8 + 0x18]
test rcx, rcx
je 0x1800550e1
nop
mov rdx, rcx
lea rax, [rcx + rcx*4]
mov rcx, qword [rdi + rax*8 + 0x18]
test rcx, rcx
jne 0x1800550d0
test rdx, rdx
je 0x1800550fe
lea rax, [rdx + rdx*4]
mov qword [rdi + rax*8 + 0x18], r9
mov rax, qword [rsi + 0x18]
lea rcx, [rax + rax*4]
mov qword [rdi + rcx*8 + 0x20], rdx
jmp 0x180055103
mov qword [rdi + r10*8 + 0x18], r9
mov rax, qword [rsi + 0x10]
mov qword [rdi + r11*8 + 0x18], rax
mov rax, qword [rsi + 0x10]
lea rcx, [rax + rax*4]
mov qword [rdi + rcx*8 + 0x20], r8
mov rcx, qword [r15 + 0x30]
mov rax, qword [r15 + 0x28]
mov qword [rax + rcx*8], r14
jmp 0x180055245
mov rax, qword [rsi + 0x18]
mov qword [rdi + r11*8 + 0x18], rax
mov rax, qword [rsi + 0x18]
lea rcx, [rax + rax*4]
mov qword [rdi + rcx*8 + 0x20], r8
mov rcx, qword [r15 + 0x30]
mov rax, qword [r15 + 0x28]
mov qword [rax + rcx*8], r14
jmp 0x180055245
mov rax, qword [rsi + 0x10]
test rax, rax
je 0x1800551cd
mov r8, qword [rsi + 0x18]
test r8, r8
je 0x1800551bf
lea r9, [rax + rax*4]
mov rdx, qword [rdi + r9*8 + 0x18]
lea rax, [rdx + rdx*4]
mov rcx, qword [rdi + rax*8 + 0x18]
test rcx, rcx
je 0x180055191
nop word [rax + rax]
mov rdx, rcx
lea rax, [rcx + rcx*4]
mov rcx, qword [rdi + rax*8 + 0x18]
test rcx, rcx
jne 0x180055180
test rdx, rdx
je 0x1800551ba
lea rax, [rdx + rdx*4]
mov qword [rdi + rax*8 + 0x18], r8
mov rax, qword [rsi + 0x18]
lea rcx, [rax + rax*4]
mov qword [rdi + rcx*8 + 0x20], rdx
mov rax, qword [rsi + 0x10]
mov qword [r15 + 0x18], rax
mov rax, qword [rsi + 0x10]
jmp 0x1800551d9
mov qword [rdi + r9*8 + 0x18], r8
mov rax, qword [rsi + 0x10]
mov qword [r15 + 0x18], rax
mov rax, qword [rsi + 0x10]
jmp 0x1800551d9
mov rax, qword [rsi + 0x18]
mov qword [r15 + 0x18], rax
mov rax, qword [rsi + 0x18]
lea rcx, [rax + rax*4]
xor eax, eax
mov qword [rdi + rcx*8 + 0x20], rax
mov rcx, qword [r15 + 0x30]
mov rax, qword [r15 + 0x28]
mov qword [rax + rcx*8], r14
jmp 0x180055245
inc qword [r15 + 0x30]
mov rax, qword [r15 + 0x38]
cmp qword [r15 + 0x30], rax
jb 0x180055239
lea rbx, [rax + rax]
lea rax, [rbx*8]
mov qword [rsp + 0x58], rax
mov r9d, 0xa0
xor r8d, r8d
lea rdx, [rsp + 0x58]
mov rcx, qword [r15 + 0x28]
call fcn.18005b920
test rax, rax
je 0x180055609
mov qword [r15 + 0x28], rax
mov qword [r15 + 0x38], rbx
dec qword [r15 + 0x20]
mov rbx, r14
mov qword [rsp + 0x38], rbx
dec r12d
cmp r12d, 0xbc
mov rcx, qword [rsp + 0x50]
ja 0x180054f70
jmp 0x180055260
mov r14, qword [rsi + 0x18]
test r14, r14
jne 0x180054f50
mov esi, dword [rsp + 0x48]
lea ecx, [r14 + 0x6d]
lea edx, [rcx - 8]
lea r8d, [r14 + 0x75]
lea r9d, [r14 + 0x56]
lea r10d, [r14 + 0x4d]
lea r11d, [r14 + 0x4c]
lea r12d, [r14 + 0x44]
mov r14, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x50]
imul eax, esi, 0x5e
add r13d, eax
cmp r13d, dword [rsp + 0x4c]
jbe 0x180054ee3
lea eax, [rsi - 0x13]
mov dword [rsp + 0x68], eax
cmp esi, eax
jbe 0x180055cac
lea rdx, [0x180000000]
mov r9d, 0x63
lea r11d, [r9 + 8]
lea r8d, [r9 + 9]
lea r10d, [r9 - 0x43]
mov esi, dword [rsp + 0x68]
movzx r15d, byte [rsp + 0x30]
mov r12d, dword [rsp + 0x4c]
mov r13, qword [rsp + 0x58]
movzx r14d, byte [rsp + 0x31]
mov eax, dword [rsp + 0x48]
mov ebx, 0x1bb
add eax, 0xffffffa6
cmp eax, 0x64
ja case.0x18005530c.109
movzx eax, byte [rdx + rax + 0x56164]
mov ecx, dword [rdx + rax*4 + 0x56114]
add rcx, rdx
jmp rcx
mov eax, 0x6e
mov word [rbp + 0x280], ax
mov dword [rbp + 0x281], 0x697275
mov dword [rbp + 0x284], 0x656863
jmp 0x180055292
mov dword [rbp + 0x358], 0x736e44
mov r8d, 4
lea rdx, str.Free
lea rcx, [rbp + 0x358]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 2
lea rdx, [0x1800766e4]
lea rcx, [rbp + 0x390]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
movsd xmm0, qword [0x1800766e8]
movsd qword [rbp + 0x392], xmm0
movzx eax, word [0x1800766f0]
mov word [rbp + 0x39a], ax
mov r8d, 6
lea rdx, str.i.dll
lea rcx, [rbp + 0x39a]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x180055484
mov r8, qword [r15 + 0xa0]
mov edx, 0x7a
xor ecx, ecx
call fcn.18005c0a0
mov rax, qword [r14]
mov qword [rsp + 0x58], rax
mov r9d, 0xc7
mov r8, r15
lea rdx, [rsp + 0x58]
mov rcx, rdi
call fcn.1800420e0
mov qword [rsp + 0x68], rax
jmp 0x180055484
xor eax, eax
mov qword [rsp + 0x20], rax
lea r9d, [rax + 0x1a]
xor r8d, r8d
mov rdx, qword [r15 + 0xa0]
xor ecx, ecx
call fcn.18005cbe0
mov rbx, qword [rsp + 0x68]
mov qword [rsp + 0x38], rbx
jmp 0x180055484
mov eax, r13d
sub eax, 0x207c
je 0x180055cac
sub eax, 0x324
je 0x18005546a
sub eax, 0x22e2
je 0x18005545e
cmp eax, 0x5e
jne 0x180055292
mov word [rbp + 0x294], r8w
movzx eax, word [0x180076704]
mov word [rbp + 0x295], ax
movzx eax, byte [0x180076706]
mov byte [rbp + 0x297], al
jmp 0x180055292
mov word [rbp + 0x287], cx
jmp 0x180055292
mov r8d, 5
lea rdx, str.DnsQ
lea rcx, [rbp + 0x290]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov ecx, 0x6d
lea edx, [rcx - 8]
lea r8d, [rcx + 8]
lea r9d, [rcx - 0x17]
lea r10d, [rcx - 0x20]
lea r11d, [rcx - 0x21]
jmp 0x180055292
movzx eax, word [0x1800766d4]
mov word [rbp + 0x297], ax
movzx eax, byte [0x1800766d6]
mov byte [rbp + 0x299], al
mov r8d, 2
lea rdx, [0x1800766d8]
lea rcx, [rbp + 0x299]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov dword [rbp + 0x308], 0x6e0064
mov dword [rbp + 0x30c], 0x610073
jmp 0x180055484
cmp r13d, 0x117ce
ja 0x18005558f
je 0x180055578
cmp r13d, 0x6e96
je 0x18005556a
cmp r13d, 0x8c46
je 0x18005555e
cmp r13d, 0xd20a
je 0x180055528
cmp r13d, 0xdc02
je 0x180055cac
jmp 0x180055292
mov eax, 0x6f
mov word [rbp + 0x28a], ax
mov word [rbp + 0x28b], cx
mov dword [rbp + 0x2e0], 0x6f0043
mov dword [rbp + 0x2e4], 0x76006e
mov dword [rbp + 0x2e8], 0x720065
jmp 0x180055292
mov word [rbp + 0x288], ax
jmp 0x180055292
xor eax, eax
mov ebx, eax
mov qword [rsp + 0x38], rax
jmp 0x180055292
mov dword [rbp + 0x2ec], 0x560074
mov word [rbp + 0x2f0], r10w
jmp 0x180055292
cmp r13d, 0x15d92
je 0x1800555e4
cmp r13d, 0x1a356
je 0x1800555c4
cmp r13d, 0x1e91a
jne 0x180055292
mov word [rbp + 0x322], dx
mov dword [rbp + 0x324], 0x750062
jmp 0x180055292
mov dword [rbp + 0x2fc], 0x740073
xor eax, eax
mov word [rbp + 0x300], ax
mov word [rbp + 0x320], r12w
jmp 0x180055292
mov dword [rbp + 0x2f2], 0x65004e
mov dword [rbp + 0x2f6], 0x4c0074
mov eax, 0x69
mov word [rbp + 0x2fa], ax
jmp 0x180055292
mov rbx, rax
jmp 0x180055cac
mov dword [rbp + 0x33a], 0x6b0063
jmp case.0x18005530c.109
mov dword [rbp + 0x310], 0x690070
mov dword [rbp + 0x314], 0x64002e
mov dword [rbp + 0x318], 0x6c006c
jmp case.0x18005530c.109
mov dword [rbp + 0x33e], 0x610020
mov dword [rbp + 0x342], 0x61006e
mov word [rbp + 0x346], r8w
mov dword [rbp + 0x348], 0x730079
jmp case.0x18005530c.109
mov edi, 0xc9
mov dword [rsp + 0x40], edi
nop word [rax + rax]
mov eax, edi
sub eax, 0xc8
je case.0x18005530c.90
cmp eax, 1
jne 0x1800557c2
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x20], rax
mov r9d, 0xc9
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180042520
cmp byte [rsp + 0x30], 0
je 0x1800557a2
mov ebx, 0xa5
mov rcx, qword [rsp + 0x70]
lea r13d, [rbx - 0x53]
mov r14d, 0x7472
mov eax, ebx
sub eax, 0xa3
je 0x180055735
sub eax, 1
je 0x180055708
cmp eax, 1
jne 0x180055780
mov word [rbp + 0x2a0], r13w
mov dword [rbp + 0x2a1], 0x65676e3f
mov dword [rbp + 0x2a5], 0x617453
jmp 0x180055780
mov word [rbp + 0x2a8], r14w
mov byte [rbp + 0x2aa], 0
movups xmm0, xmmword [str.DDERR_SURFACELOST]
movups xmmword [rbp + 0x3a8], xmm0
movzx eax, word [0x180076718]
mov word [rbp + 0x3b8], ax
jmp 0x180055780
xor eax, eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call sub.RPCRT4.dll_MesIncrementalHandleReset
mov esi, eax
lea r8, [rbp + 0x3c0]
lea rdx, [rbp + 0x3a8]
lea rcx, [rbp + 0x2a0]
call qword [sym.imp.dbghelp.dll_FindExecutableImage]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x180055780
call sub.RPCRT4.dll_MesHandleFree
mov esi, eax
mov rcx, qword [rsp + 0x70]
dec ebx
cmp ebx, 0xa2
ja 0x1800556d3
mov edi, dword [rsp + 0x40]
movzx r14d, byte [rsp + 0x31]
mov r12d, dword [rsp + 0x4c]
mov r13, qword [rsp + 0x58]
mov r8d, 8
lea rdx, [rbp + 0x320]
lea rcx, [rbp + 0x2e0]
call qword [sym.imp.SHLWAPI.dll_StrCmpNCW]
xor eax, eax
mov dword [rsp + 0x38], eax
dec edi
mov dword [rsp + 0x40], edi
cmp edi, 0xc7
ja 0x180055680
mov ebx, 0x1bb
mov r10d, 0x20
mov word [rbp + 0x230], bx
mov r8d, r10d
xor edx, edx
lea rcx, [rbp + 0x210]
call fcn.18004e090
xor eax, eax
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x1d0]
mov qword [rsp + 0x20], rax
mov r9d, reloc.SHELL32.dll_SHSetInstanceExplorer
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x240]
call fcn.18004db20
mov word [rsp + 0x40], bx
mov r9d, 0xb1
lea r8, [0x18007c878]
lea rdx, [rbp + 0x70]
lea rcx, [rsp + 0x40]
call fcn.18006b980
lea rdx, [0x180000000]
mov r8d, 0x6c
lea r9d, [r8 - 9]
lea r10d, [r8 - 0x4c]
lea r11d, [r8 - 1]
jmp case.0x18005530c.109
mov rax, qword [rsp + 0x60]
mov dword [rax], 0xffffffff
mov edx, 1
xor eax, eax
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
mov r9, rdi
lea r8d, [rdx + 0x67]
mov rcx, qword [rbp + 0x20]
call qword [rbp - 8]
mov dword [rbp - 0x74], eax
jmp 0x180055841
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x1e]
lea rcx, [0x18007c818]
call fcn.180063530
test al, al
jne 0x180055841
mov ebx, ILFindLastID
nop dword [rax]
nop word [rax + rax]
lea rdx, [0x180000000]
cmp ebx, 0xd
ja case.default.0x1800558dc
mov eax, ebx
mov ecx, dword [rdx + rax*4 + 0x561cc]
add rcx, rdx
jmp rcx
mov dword [rbp + 0x2d4], 0x6f0069
mov dword [rbp + 0x2d8], 0x6e
xor edi, edi
mov dword [rbp + 0x360], 0x5a005f
mov word [rbp + 0x364], di
jmp case.default.0x1800558dc
mov r8d, 1
lea rdx, [0x180076730]
lea rcx, [rbp + 0x360]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 1
lea rdx, [0x180076822]
lea rcx, [rbp + 0x360]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r15b, 1
jmp 0x180055ad8
mov r12d, 1
mov dword [rsp + 0x4c], r12d
mov dword [rsp + 0x78], 0x1b5
jmp case.default.0x1800558dc
mov dword [rbp + 0x2c8], 0x6e006f
mov eax, 0x67
mov word [rbp + 0x2cc], ax
mov dword [rbp + 0x2ce], 0x70004f
mov eax, 0x74
mov word [rbp + 0x2d2], ax
jmp case.default.0x1800558dc
mov dword [rsp + 0x38], 1
jmp case.default.0x1800558dc
mov dword [rbp + 0x2b2], 0x6d0069
mov eax, 0x2e
mov word [rbp + 0x2b6], ax
jmp case.default.0x1800558dc
mov dword [rbp + 0x2bc], 0x690074
mov dword [rbp + 0x2c0], 0x6e006f
mov dword [rbp + 0x2c4], 0x4c002e
jmp case.default.0x1800558dc
mov r8d, 5
lea rdx, [0x18007687c]
lea rcx, [rbp + 0x364]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
movsd xmm0, qword [0x1800768e8]
movsd qword [rbp + 0x36e], xmm0
movzx eax, word [0x1800768f0]
mov word [rbp + 0x376], ax
jmp 0x180055ad8
xor eax, eax
mov r13d, eax
mov qword [rsp + 0x58], rax
jmp case.default.0x1800558dc
mov dword [rbp + 0x2b8], 0x70006f
jmp case.default.0x1800558dc
mov eax, 0x76
mov word [rbp + 0x2b0], ax
jmp case.default.0x1800558dc
xor edi, edi
mov word [rbp + 0x378], di
lea r8d, [rdi + 2]
lea rdx, [0x18007691a]
lea rcx, [rbp + 0x378]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
movsd xmm0, qword [0x180076984]
movsd qword [rbp + 0x37c], xmm0
movzx eax, word [0x18007698c]
mov word [rbp + 0x384], ax
mov word [rbp + 0x386], di
jmp 0x180055ad8
lea r9, [rbp + 0x360]
mov r8d, r12d
lea rdx, [rbp + 0x2b0]
mov rcx, r13
call sub.IMM32.dll_ImmRegisterWordW
test eax, eax
jne 0x180055ab0
xor r15b, r15b
jmp 0x180055ace
test r15b, r15b
je 0x180055ace
lea r9, [rbp + 0x360]
mov r8d, r12d
lea rdx, [rbp + 0x2b0]
mov rcx, r13
call sub.IMM32.dll_ImmUnregisterWordW
mov ecx, dword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_IsValidCodePage]
lea rdx, [0x180000000]
dec ebx
lea eax, [rbx + 0x53]
cmp eax, 0x52
ja 0x1800558c0
jmp 0x180055848
xor eax, eax
mov qword [rsp + 0x70], rax
mov word [rsp + 0x40], bx
lea r9, [rbp + 0x40]
lea r8, [rsp + 0x40]
lea rdx, [0x18007c898]
mov ecx, 0x108
call fcn.1800692a0
lea r9, [rbp - 0x70]
xor r8d, r8d
xor edx, edx
mov ecx, 0xba
call fcn.1800486a0
jmp 0x180055841
lea rax, [rbp - 0x70]
mov qword [rbp + 0x10], rax
mov eax, dword [0x18007c8c0]
mov dword [rbp + 0x18], eax
mov eax, dword [0x18007c8c4]
mov dword [rbp + 0x1c], eax
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x30], xmm0
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x30]
lea r8, [0x18004a300]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rdi, rax
test rax, rax
jne 0x180055c42
mov ebx, 0xd4
cmp ebx, 0xd4
je 0x180055c1b
cmp ebx, 0x17c
je 0x180055bfe
cmp ebx, 0x224
je 0x180055bc0
cmp ebx, 0x2cc
je 0x180055bb6
cmp ebx, 0x374
je case.0x18005530c.90
jmp 0x180055c30
mov dword [rsp + 0x38], 1
jmp 0x180055c30
lea rax, [rbp]
mov qword [rsp + 0x28], rax
mov eax, dword [rbp - 0x7c]
mov dword [rsp + 0x20], eax
mov r9d, dword [rbp - 0x80]
mov r8d, dword [rsp + 0x7c]
mov edx, dword [rbp - 0x78]
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.SHELL32.dll_SHChangeNotifyRegister]
test eax, eax
jne 0x180055bef
xor r14b, r14b
jmp 0x180055c2b
test r14b, r14b
je 0x180055c30
mov ecx, eax
call qword [sym.imp.SHELL32.dll_SHChangeNotifyDeregister]
jmp 0x180055c30
mov dword [rsp + 0x7c], 0x2381f
xor eax, eax
mov dword [rbp - 0x80], eax
mov dword [rbp - 0x7c], 1
mov qword [rbp], rax
mov dword [rbp + 8], eax
jmp 0x180055c30
mov r14b, 1
xor eax, eax
mov qword [rbp - 0x10], rax
mov dword [rbp - 0x78], 1
mov byte [rsp + 0x31], r14b
add ebx, 0xa8
cmp ebx, 0x41c
jb 0x180055b84
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x180055841
xor eax, eax
mov word [rbp + 0x31c], ax
mov r8d, 0x8b
lea rdx, [rbp + 0x358]
lea rcx, [rbp + 0x390]
call fcn.1800417d0
mov qword [rbp - 0x20], rax
mov r8d, 0x8b
lea rdx, [rbp + 0x290]
lea rcx, [rbp + 0x308]
call fcn.1800417d0
mov qword [rbp - 8], rax
jmp 0x180055841
cmp dword [rbp - 0x74], 0
je case.0x18005530c.109
mov byte [rsp + 0x38], 0
mov rbx, qword [rsp + 0x38]
lea rcx, [rbp + 0x118]
call fcn.18003fe20
mov rdi, qword [rbp + 0x100]
test rdi, rdi
je 0x180055f25
mov rsi, qword [rbp + 0x108]
cmp rdi, rsi
je 0x180055cec
mov rcx, rdi
call fcn.18004f840
add rdi, 0x20
cmp rdi, rsi
jne 0x180055cd4
mov rdi, qword [rbp + 0x100]
mov r8, qword [rbp + 0x110]
sub r8, rdi
sar r8, 5
mov rdx, rdi
lea rcx, [rbp + 0x100]
call fcn.1800548d0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x100], xmm0
xor r14d, r14d
mov qword [rbp + 0x110], r14
jmp 0x180055f28
lea rax, [rbp + 0x70]
mov qword [rsp + 0x40], rax
mov rdx, qword [rbp - 0x68]
cmp rdx, qword [rbp - 0x60]
je 0x180055d44
lea rax, [rbp + 0x70]
mov qword [rdx], rax
add qword [rbp - 0x68], 8
jmp 0x180055d52
lea r8, [rsp + 0x40]
lea rcx, [rbp - 0x70]
call fcn.18003dda0
lea r9, [rsp + 0x70]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesEncodeIncrementalHandleCreate
mov esi, eax
lea rax, [rbp + 0x40]
mov qword [rsp + 0x40], rax
mov rdx, qword [rbp - 0x68]
cmp rdx, qword [rbp - 0x60]
je 0x180055d86
lea rax, [rbp + 0x40]
mov qword [rdx], rax
add qword [rbp - 0x68], 8
jmp 0x180055d94
lea r8, [rsp + 0x40]
lea rcx, [rbp - 0x70]
call fcn.18003dda0
mov eax, dword [0x18007c8c0]
mov dword [rsp + 0x40], eax
xor eax, eax
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x70]
xor r8d, r8d
lea edx, [rax + 0x6f]
lea rcx, [rsp + 0x40]
call fcn.180060e30
jmp 0x180055841
mov dword [rbp + 0x328], 0x200067
mov dword [rbp + 0x32c], 0x690077
mov dword [rbp + 0x330], 0x2d0061
mov word [rbp + 0x334], r9w
mov dword [rbp + 0x336], 0x650068
jmp case.0x18005530c.109
mov rax, qword [rbp - 0x18]
test rax, rax
je case.0x18005530c.109
cmp word [rax + 0x10], 1
je 0x180055e14
mov rax, qword [rax]
test rax, rax
jne 0x180055e00
jmp case.0x18005530c.109
mov eax, dword [rax + 0x20]
mov rcx, qword [rsp + 0x60]
mov dword [rcx], eax
mov dword [rsp + 0x48], 0x5b
mov edx, 1
mov rcx, qword [rbp - 0x18]
call qword [rbp - 0x20]
mov rax, qword [rsp + 0x60]
cmp dword [rax], 0xffffffff
setne byte [rsp + 0x38]
jmp 0x180055841
lea rax, [0x180043330]
mov qword [rsp + 0x40], rax
lea r9, [rsp + 0x40]
xor r8d, r8d
xor edx, edx
mov ecx, 0xe9
call fcn.180040900
mov r9d, 0xd7
lea r8, [0x18007c810]
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0xa0]
call fcn.180064210
xor eax, eax
mov ecx, eax
movzx eax, byte [rsp + 0x30]
test esi, esi
cmove ecx, eax
mov byte [rsp + 0x30], cl
jmp 0x180055841
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
lea rax, [rbp + 0x280]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x180055eb4
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x1d0]
call fcn.18004fd90
mov r8d, 1
lea rdx, [0x180076994]
lea rcx, [rbp + 0x1f0]
call fcn.18004fd90
mov byte [rsp + 0x30], 1
jmp 0x180055841
mov dword [rbp + 0x34c], 0x730069
xor eax, eax
mov word [rbp + 0x350], ax
mov eax, dword [rsp + 0x48]
dec eax
mov dword [rsp + 0x48], eax
cmp eax, dword [rsp + 0x68]
jbe case.0x18005530c.90
mov rdi, qword [rsp + 0x50]
jmp 0x1800552e9
xor r14d, r14d
mov rdx, qword [rbp + 0xe8]
test rdx, rdx
je 0x180055f60
mov r8, qword [rbp + 0xf8]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0xe8]
call fcn.180054830
mov qword [rbp + 0xe8], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xf0], xmm0
lea rcx, [rbp + 0xa8]
call fcn.18003fd50
nop
mov rdi, qword [rbp - 0x58]
test rdi, rdi
je 0x180055ffe
mov rsi, qword [rbp - 0x50]
cmp rdi, rsi
je 0x180055f98
mov rcx, rdi
call fcn.18003f660
add rdi, 0x28
cmp rdi, rsi
jne 0x180055f83
mov rdi, qword [rbp - 0x58]
mov rcx, qword [rbp - 0x48]
sub rcx, rdi
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rdi
cmp rdx, 0x1000
jb 0x180055fea
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180055fea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.18006e8b0
mov qword [rbp - 0x58], r14
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x50], xmm0
mov rdx, qword [rbp - 0x70]
test rdx, rdx
je 0x180056027
mov r8, qword [rbp - 0x60]
sub r8, rdx
sar r8, 3
lea rcx, [rbp - 0x70]
call fcn.1800547e0
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r14
mov rdx, qword [rbp + 0x62]
cmp rdx, 0x10
jb 0x180056065
inc rdx
mov rcx, qword [rbp + 0x4a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180056060
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180056060
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18006e8b0
movdqa xmm0, xmmword [0x180077500]
movdqu xmmword [rbp + 0x5a], xmm0
mov byte [rbp + 0x4a], 0
mov rdx, qword [rbp + 0x92]
cmp rdx, 0x10
jb 0x1800560b7
inc rdx
mov rcx, qword [rbp + 0x7a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800560b2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800560b2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18006e8b0
movdqa xmm0, xmmword [0x180077500]
movdqu xmmword [rbp + 0x8a], xmm0
mov byte [rbp + 0x7a], 0
lea rcx, [rbp + 0x240]
call fcn.18003f9c0
nop
lea rcx, [rbp + 0x1d0]
call fcn.18003fa70
mov rax, rbx
mov rcx, qword [rbp + 0x4d0]
xor rcx, rsp
call fcn.18006edc0
mov rbx, qword [rsp + 0x628]
add rsp, 0x5e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret