Function at 0x18002c7b0
Capabilities:
Check for software breakpoints
Check if file exists
Create thread
Delete file
Get common file path
Get file attributes

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10a0]
mov eax, 0x11a0
call fcn.18006ece0
sub rsp, rax
mov rax, qword [rsp + 0x40]
mov r12, r9
mov edi, dword [rbp + 0x10e0]
mov r13, r8
mov esi, dword [rbp + 0x10e0]
mov r14d, ecx
imul r15d, ecx, 0x3cf
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x78], rdi
cmp ecx, r15d
ja 0x18002ce48
imul ebx, ecx, 0x4b
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x40]
mov dword [rsp + 0x30], ebx
mov ebx, dword [rbp + 0x10e0]
mov qword [rsp + 0x50], rax
mov eax, dword [rsp + 0x30]
mov qword [rsp + 0x38], rcx
nop word [rax + rax]
cmp r14d, 0x4218
ja 0x18002cc35
je 0x18002cc28
cmp r14d, 0x1a8b
ja 0x18002ca7f
je 0x18002ca69
cmp r14d, 0x2d
je 0x18002ca42
cmp r14d, 0x106
je 0x18002ca26
cmp r14d, 0xd5c
jne 0x18002ce22
xor edx, edx
lea rcx, [rbp + 0x290]
mov r8d, 0xff
call fcn.180070440
lea rcx, [rbp + 0x290]
mov r8d, 0xff
movups xmm0, xmmword [rcx]
lea rdx, [rbp + 0x3a0]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
mov rax, qword [rcx + 0x70]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmmword [rdx + 0x60], xmm0
mov qword [rdx + 0x70], rax
mov eax, dword [rcx + 0x78]
mov dword [rdx + 0x78], eax
movzx eax, word [rcx + 0x7c]
mov word [rdx + 0x7c], ax
movzx eax, byte [rcx + 0x7e]
lea rcx, [rbp + 0x290]
mov byte [rdx + 0x7e], al
xor eax, eax
xor edx, edx
mov qword [rsp + 0x50], rax
call fcn.180070440
lea rdx, [rbp]
lea rdx, [rdx + 0x80]
lea rcx, [rbp + 0x290]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
mov rax, qword [rcx + 0x70]
movups xmmword [rdx - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rdx - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx - 0x20], xmm0
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmmword [rdx + 0x60], xmm0
mov qword [rdx + 0x70], rax
mov eax, dword [rcx + 0x78]
mov dword [rdx + 0x78], eax
movzx eax, word [rcx + 0x7c]
mov word [rdx + 0x7c], ax
movzx eax, byte [rcx + 0x7e]
mov byte [rdx + 0x7e], al
jmp 0x18002ce17
mov rax, qword [rbp + 0x1108]
mov eax, dword [rax]
mov dword [rbp + 0x100c], eax
mov eax, dword [rdx]
mov dword [rbp + 0x1010], eax
jmp 0x18002ce1e
xor eax, eax
lea rcx, [rbp + 0x290]
xor edx, edx
mov qword [rsp + 0x70], rax
mov r8d, 0xff
call fcn.180070440
lea rdx, [rbp + 0x190]
jmp 0x18002c97a
xor r8d, r8d
mov qword [rsp + 0x78], 0
mov qword [rsp + 0x38], r8
jmp 0x18002ce27
cmp r14d, 0x27ba
je 0x18002cb9c
cmp r14d, 0x34e9
jne 0x18002ce22
xor edx, edx
lea rcx, [rbp + 0x290]
mov r8d, 0x100
call fcn.180070440
lea rax, [rbp + 0x4a0]
mov edx, 2
lea rcx, [rbp + 0x290]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x18002cac0
mov r8d, 0x104
lea rcx, [rbp + 0x290]
call fcn.180070440
lea rcx, [rbp + 0x9a0]
mov edx, 2
lea rax, [rbp + 0x290]
nop dword [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x18002cb40
mov eax, dword [rax]
mov dword [rcx], eax
jmp 0x18002ce17
xor edx, edx
lea rcx, [rbp + 0x290]
mov r8d, 0x100
call fcn.180070440
lea rax, [rbp + 0x6a0]
mov edx, 2
lea rcx, [rbp + 0x290]
nop dword [rax]
nop word [rax + rax]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x18002cbd0
jmp 0x18002ce17
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x40], xmm0
jmp 0x18002ce22
cmp r14d, 0x9a8a
ja 0x18002cde3
je 0x18002cdd3
cmp r14d, 0x4dc8
je 0x18002cdbd
cmp r14d, 0x4f47
je 0x18002cdb5
cmp r14d, 0x5c76
jne 0x18002ce22
xor edx, edx
lea rcx, [rbp + 0x290]
mov r8d, 0xff
call fcn.180070440
lea rcx, [rbp + 0x290]
mov r8d, 0x100
movups xmm0, xmmword [rcx]
lea rdx, [rbp + 0x7a0]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
mov rax, qword [rcx + 0x70]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmmword [rdx + 0x60], xmm0
mov qword [rdx + 0x70], rax
mov eax, dword [rcx + 0x78]
mov dword [rdx + 0x78], eax
movzx eax, word [rcx + 0x7c]
mov word [rdx + 0x7c], ax
movzx eax, byte [rcx + 0x7e]
lea rcx, [rbp + 0x290]
mov byte [rdx + 0x7e], al
xor edx, edx
call fcn.180070440
lea rax, [rbp + 0x8a0]
mov edx, 2
lea rcx, [rbp + 0x290]
nop word [rax + rax]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x18002cd60
jmp 0x18002ce17
xor edi, edi
xor esi, esi
xor ebx, ebx
jmp 0x18002ce22
mov eax, dword [r13]
mov dword [rbp + 0x1014], eax
mov eax, dword [r12]
mov dword [rbp + 0x1018], eax
jmp 0x18002ce1e
mov rcx, qword [rbp + 0x1100]
mov qword [rbp + 0x1002], rcx
jmp 0x18002ce22
cmp r14d, 0xe74c
je 0x18002ce05
cmp r14d, 0x1340e
jne 0x18002ce22
movzx eax, word [rbp + 0x100a]
mov word [0x1800d5918], ax
jmp 0x18002ce1e
mov ecx, 0xffffff99
lea rdx, [rbp + 0xab0]
call qword [0x1800d5910]
mov rdx, qword [rbp + 0x10e8]
mov eax, dword [rsp + 0x30]
mov r8, qword [rsp + 0x38]
add r14d, eax
cmp r14d, r15d
jbe 0x18002c850
mov r15, qword [rsp + 0x50]
mov r14, qword [rsp + 0x70]
mov qword [rsp + 0x40], rsi
mov qword [rbp - 0x78], rdi
jmp 0x18002ce71
mov r8, qword [rsp + 0x40]
mov ebx, dword [rbp + 0x10e0]
mov qword [rsp + 0x40], rsi
mov r14, qword [rsp + 0x40]
mov r15, qword [rsp + 0x40]
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x38], r8
mov eax, dword [rbp + 0x10e0]
lea ecx, [rax + 0x34d]
mov dword [rbp - 0x70], ecx
cmp eax, ecx
jae 0x18002e14c
mov edx, 3
lea r13d, [rdx + 1]
lea r12d, [rdx - 2]
cmp eax, 0x1b3
ja 0x18002d1a1
je 0x18002d17f
cmp eax, 0xf0
ja 0x18002d125
je 0x18002d0d0
sub eax, 0x2d
je 0x18002cfde
sub eax, 0x41
je 0x18002cf79
cmp eax, 0x41
jne 0x18002e12f
mov r12, qword [rbp + 0x1108]
lea r9, [rsp + 0x30]
mov word [rsp + 0x30], dx
lea rcx, [rsp + 0x40]
xor edx, edx
mov qword [rsp + 0x20], 0
mov rax, qword [r12]
mov qword [rsp + 0x40], rax
lea r8d, [rdx + 0x28]
call fcn.180068730
xor esi, esi
mov qword [rbp - 0x78], rax
mov rdi, rax
mov word [rsp + 0x30], r13w
mov rax, qword [r12]
lea r9, [rsp + 0x30]
xor edx, edx
mov qword [rsp + 0x40], rax
lea r8d, [rsi + 0x28]
mov qword [rsp + 0x20], rsi
lea rcx, [rsp + 0x40]
call fcn.180068730
mov rbx, rax
mov qword [rsp + 0x20], rsi
mov eax, 5
lea r9, [rsp + 0x30]
mov word [rsp + 0x30], ax
lea r8d, [rsi + 0x28]
mov rax, qword [r12]
lea rcx, [rsp + 0x40]
xor edx, edx
mov qword [rsp + 0x40], rax
call fcn.180068730
mov r8, qword [rsp + 0x38]
mov rsi, rax
mov qword [rsp + 0x40], rax
jmp 0x18002e124
test r8, r8
jle 0x18002e12f
lea rcx, [r8 + 1]
call fcn.180073cfc
mov r14, rax
mov qword [rsp + 0x78], rax
mov rax, qword [rbp + 0x1108]
lea r9, [rsp + 0x38]
mov r13d, 2
lea rdx, [rsp + 0x30]
mov r8d, 0x10c
mov word [rsp + 0x30], r13w
mov rcx, qword [rax]
mov qword [rsp + 0x38], rcx
mov rcx, r14
call fcn.180059270
mov r14, qword [rsp + 0x70]
mov r8, rax
mov qword [rsp + 0x38], rax
mov r13d, 4
jmp 0x18002e12a
xor edx, edx
lea rcx, [rbp + 0x290]
mov r8d, 0x100
call fcn.180070440
mov r13d, 2
lea rax, [rbp + 0x5a0]
mov edx, r13d
lea rcx, [rbp + 0x290]
nop dword [rax]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x18002d010
mov r15, qword [rbp + 0x1108]
lea r9, [rsp + 0x30]
mov word [rsp + 0x30], r12w
lea r8d, [rdx + 0x28]
xor r12d, r12d
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x20], r12
mov rax, qword [r15]
mov qword [rsp + 0x78], rax
call fcn.180068730
cdqe
lea r9, [rsp + 0x38]
mov qword [rbp - 0x30], rax
lea rdx, [rsp + 0x30]
mov rax, qword [r15]
mov r8d, 0x10c
xor ecx, ecx
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x78], r12
mov word [rsp + 0x30], r13w
call fcn.180059270
mov r8, rax
mov qword [rsp + 0x38], rax
jmp 0x18002e11e
lea rdx, [rbp + 0x9a0]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
mov edx, 0x5c
lea rcx, [rbp + 0x9a0]
call fcn.18006f960
lea rcx, [rbp + 0x9a0]
mov qword [rsp + 0x48], rax
mov r8, rax
lea rdx, [rbp + 0x9a0]
sub r8, rcx
lea rcx, [rbp + 0x190]
inc r8
call fcn.180073af0
mov r8, qword [rsp + 0x38]
jmp 0x18002e12a
sub eax, 0x131
je 0x18002d144
cmp eax, 0x41
jne 0x18002e12f
mov dword [rbp - 0x64], 0
mov dword [rbp - 0x54], edi
jmp 0x18002e12f
mov r9d, 0xa
lea r8, str.VsEuActive
mov edx, 0xff
lea rcx, [rbp + 0x190]
call fcn.180073368
mov r8, qword [rsp + 0x38]
xor eax, eax
cmp qword [rbp - 0x30], rax
mov dword [rbp - 0x68], 0
setne al
mov dword [rbp - 0x58], eax
jmp 0x18002e12a
mov ecx, 0x184
mov dword [rbp - 0x4c], ebx
mov dword [rbp - 0x50], esi
mov dword [rbp - 0x48], r12d
call fcn.180073cfc
mov r8, qword [rsp + 0x38]
mov qword [rbp - 0x60], rax
jmp 0x18002e12a
cmp eax, 0x2b7
ja 0x18002d2de
je 0x18002d289
sub eax, 0x1f4
je 0x18002d218
sub eax, 0x41
je 0x18002d1f0
cmp eax, 0x41
jne 0x18002e12f
cmp dword [rbp - 0x64], 0
jne 0x18002e12f
xor edx, edx
xor ecx, ecx
mov r8d, 0x106
call fcn.180035080
cmp dword [rbp - 0x64], 0
je 0x18002d1d1
mov r8, qword [rsp + 0x38]
jmp 0x18002e12a
xor edx, edx
xor ecx, ecx
mov r8d, 0x106
call fcn.180035080
xor edx, edx
xor ecx, ecx
mov r8d, 0x106
call fcn.180035080
mov r8, qword [rsp + 0x38]
jmp 0x18002e12a
mov rcx, qword [rbp - 0x60]
lea r8, [0x18009f130]
mov edx, 0x184
call fcn.180073290
lea rax, [rbp + 0x190]
mov r9, 0xffffffffffffffff
nop dword [rax + rax]
inc r9
cmp byte [rax + r9], 0
jne 0x18002d240
mov rcx, qword [rbp - 0x60]
lea r8, [rbp + 0x190]
mov edx, 0x184
call fcn.180073458
lea rax, [rbp - 0x10]
xor edx, edx
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x68]
lea r8, [0x18003b740]
mov dword [rsp + 0x20], 0
xor ecx, ecx
call fcn.180078d04
jmp 0x18002d1ff
movsxd r14, dword [rbp - 0x68]
lea r8, [rbp + 0x190]
mov edx, 0xff
mov qword [rsp + 0x70], r14
lea rcx, [rbp + 0x7a0]
call fcn.180073290
mov edx, 0x2e
lea rcx, [rbp + 0x7a0]
call fcn.18006f960
lea r8, [0x1800a3284]
mov qword [rsp + 0x48], rax
mov edx, 0xff
mov rcx, rax
call fcn.180073290
mov r8, qword [rsp + 0x38]
jmp 0x18002e12a
sub eax, 0x2f8
je 0x18002d31f
cmp eax, 0x41
jne 0x18002e12f
mov rax, qword [rbp + 0x1108]
lea rdx, [rsp + 0x30]
mov r8d, 0x92
mov dword [rsp + 0x30], r14d
lea rcx, [rbp - 0x80]
mov rax, qword [rax]
mov qword [rbp - 0x80], rax
call fcn.18004ff10
mov r8, qword [rsp + 0x38]
jmp 0x18002e12a
lea r8, str..bmp
mov edx, 0xff
lea rcx, [rbp + 0x7a0]
call fcn.1800732f0
lea rcx, [rbp + 0x7a0]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x18002e0e5
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
je 0x18002e0e5
test r14, r14
jne 0x18002e0e5
lea r8, [rbp + 0x190]
mov qword [rsp + 0x70], r12
mov edx, 0xff
lea rcx, [rbp + 0x7a0]
call fcn.180073290
mov rdi, qword [rsp + 0x48]
cmp qword [rsp + 0x38], r14
jne 0x18002da65
mov rsi, qword [rsp + 0x50]
mov r12d, 0x5c
nop dword [rax]
cmp r12d, 0x5c
je 0x18002d9c2
cmp r12d, 0x26d0
jne 0x18002da43
xor r9d, r9d
mov r13d, r9d
cmp dword [rbp - 0x48], r9d
jle 0x18002da43
nop word [rax + rax]
mov r15d, 0xa4
nop word [rax + rax]
mov eax, r15d
sub eax, 0xa4
je 0x18002d98f
sub eax, 1
je 0x18002d94b
sub eax, 1
je 0x18002d91d
sub eax, 1
je 0x18002d8ec
cmp eax, 1
jne 0x18002d996
test rdi, rdi
je 0x18002d4e8
nop dword [rax + rax]
mov r14d, 0x2a
mov eax, r14d
sub eax, 0x28
je 0x18002d469
sub eax, 1
je 0x18002d456
cmp eax, 1
jne 0x18002d4cf
mov r8, rdi
lea rcx, [rbp + 0x3a0]
sub r8, rsi
mov rdx, rsi
call fcn.1800738b0
mov rsi, rdi
jmp 0x18002d4cf
lea rcx, [rdi + 1]
mov edx, 0x5c
call fcn.18006f8e0
mov rdi, rax
jmp 0x18002d4cf
lea rcx, [rbp + 0x3a0]
dec rcx
test rdi, rdi
je 0x18002d496
nop dword [rax + rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18002d480
movzx eax, word [0x18009fa88]
mov word [rcx], ax
jmp 0x18002d4cf
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18002d496
movzx eax, word [0x18009fa88]
mov word [rcx], ax
lea rcx, [rbp + 0x3a0]
dec rcx
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18002d4b4
xor edx, edx
movzx eax, byte [rsi + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x18002d4c0
dec r14d
cmp r14d, 0x27
ja 0x18002d426
test rdi, rdi
jne 0x18002d420
xor r9d, r9d
test ebx, ebx
je 0x18002d772
mov r14d, 0x121
nop word [rax + rax]
cmp r14d, 0x289
ja 0x18002d6aa
je 0x18002d635
mov eax, r14d
sub eax, 0x121
je 0x18002d5b5
sub eax, 0x78
je 0x18002d58a
cmp eax, 0x78
jne 0x18002d746
mov qword [rsp + 0x28], r9
lea r8, [rbp]
mov qword [rsp + 0x20], r9
lea rcx, [rbp - 0x28]
lea r9d, [rax + 0x29]
xor edx, edx
call fcn.180007740
xor edx, edx
xor r9d, r9d
xor r8d, r8d
movsd xmm0, qword [rax + 0x10]
movups xmm1, xmmword [rax]
lea ecx, [rdx + 0x40]
movsd qword [rbp + 0x158], xmm0
mov eax, dword [rbp + 0x158]
mov dword [rsp + 0x68], eax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
movups xmmword [rsp + 0x58], xmm1
call fcn.18006bdd0
jmp 0x18002d6bd
lea rcx, [rbp]
dec rcx
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18002d591
movups xmm0, xmmword [str.V6_vS32b_npred_ai]
movzx eax, word [0x1800a3228]
movups xmmword [rcx], xmm0
mov word [rcx + 0x10], ax
jmp 0x18002d746
mov r8d, 0xff
lea rdx, [rbp + 0x4a0]
lea rcx, [rbp]
call fcn.180073af0
lea rcx, [rbp]
dec rcx
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18002d5d2
movzx eax, word [0x1800a31f4]
mov word [rcx], ax
movzx eax, byte [0x1800a31f6]
mov byte [rcx + 2], al
lea rcx, [rbp]
dec rcx
nop word [rax + rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18002d600
lea r8, [rbp + 0x3a0]
xor edx, edx
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r8 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x18002d620
jmp 0x18002d746
lea rax, [rsp + 0x30]
mov dword [rsp + 0x30], 0x214
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x6a0]
mov qword [rsp + 0x20], r9
xor r8d, r8d
mov r9d, 0x9a
xor edx, edx
call fcn.18001b820
xor edx, edx
lea r8, [rbp + 0x8a0]
lea rcx, [rbp + 0x6a0]
movzx eax, byte [rcx]
test al, al
je 0x18002d680
mov byte [r8], al
inc r8
inc edx
inc rcx
cmp edx, 0x100
jb 0x18002d673
lea r8, [rbp + 0x8a0]
mov edx, 0xff
lea rcx, [rbp + 0x5a0]
call fcn.180073290
jmp 0x18002d746
mov eax, r14d
sub eax, 0x301
je 0x18002d6d1
cmp eax, 0x78
jne 0x18002d746
xor r8d, r8d
lea rcx, [rsp + 0x58]
mov edx, 0x106
call fcn.18002b720
jmp 0x18002d746
lea r8, str.ClusterEnterMaintenanceResult
mov edx, 0xff
lea rcx, [rbp + 0x5a0]
call fcn.1800732f0
xor eax, eax
lea r8, [rbp + 0x5a0]
mov qword [rsp + 0x28], rax
lea rcx, [rbp - 0x28]
mov r9d, 0xa1
mov qword [rsp + 0x20], rax
xor edx, edx
call fcn.180007740
xor edx, edx
xor r9d, r9d
xor r8d, r8d
movsd xmm0, qword [rax + 0x10]
movups xmm1, xmmword [rax]
lea ecx, [rdx + 0x40]
movsd qword [rbp + 0x170], xmm0
mov eax, dword [rbp + 0x170]
mov dword [rsp + 0x68], eax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
movups xmmword [rsp + 0x58], xmm1
call fcn.18006bdd0
add r14d, 0x78
mov r9d, 0
cmp r14d, 0x3f1
jb 0x18002d500
lea rcx, [rbp + 0x190]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
xor r9d, r9d
jmp 0x18002d996
mov r14d, 0x19
nop dword [rax + rax]
mov eax, r14d
sub eax, 0x19
je 0x18002d8aa
sub eax, 0x54
je 0x18002d7cb
cmp eax, 0x54
jne 0x18002d8c0
xor edx, edx
lea rax, [rsp + 0x58]
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea ecx, [rdx + 0x40]
call fcn.18006bdd0
xor r8d, r8d
lea rcx, [rsp + 0x58]
mov edx, 0x106
call fcn.18002b720
jmp 0x18002d8c0
lea rcx, [rbp]
dec rcx
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18002d7d2
movzx eax, word [0x1800a31f4]
mov word [rcx], ax
movzx eax, byte [0x1800a31f6]
mov byte [rcx + 2], al
lea rcx, [rbp]
dec rcx
nop word [rax + rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18002d800
lea r8, [rbp + 0x3a0]
xor edx, edx
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r8 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x18002d820
lea rcx, [rbp]
dec rcx
nop word [rax + rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18002d840
mov eax, dword [0x1800a3238]
lea r8, [rbp]
movsd xmm0, qword [str.VPSRADZ128rrk]
xor edx, edx
movsd qword [rcx], xmm0
mov dword [rcx + 8], eax
movzx eax, word [0x1800a323c]
mov qword [rsp + 0x28], r9
mov word [rcx + 0xc], ax
lea rcx, [rbp - 0x28]
mov qword [rsp + 0x20], r9
mov r9d, 0xa1
call fcn.180007740
movsd xmm0, qword [rax + 0x10]
movups xmm1, xmmword [rax]
movsd qword [rbp + 0x188], xmm0
mov eax, dword [rbp + 0x188]
movups xmmword [rsp + 0x58], xmm1
mov dword [rsp + 0x68], eax
jmp 0x18002d8c0
mov r8d, 0xff
lea rdx, [rbp + 0x4a0]
lea rcx, [rbp]
call fcn.180073af0
add r14d, 0x54
mov r9d, 0
cmp r14d, 0x115
jb 0x18002d780
lea rcx, [rbp + 0x190]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
xor r9d, r9d
jmp 0x18002d996
lea r8, [0x18009f130]
mov edx, 0xff
lea rcx, [rbp + 0x3a0]
call fcn.180073290
mov edx, 0x5c
lea rcx, [rbp + 0x190]
call fcn.18006f8e0
mov rdi, rax
xor r9d, r9d
jmp 0x18002d996
lea r8, [rbp - 0x40]
mov edx, 0xff
mov rcx, rdi
call fcn.180073290
lea r8, str..bmp
mov edx, 0xff
lea rcx, [rbp + 0x190]
call fcn.1800732f0
xor r9d, r9d
jmp 0x18002d996
lea r8, [rbp + 0x7a0]
mov edx, 0xff
lea rcx, [rbp + 0x190]
call fcn.180073290
mov edx, 0x2e
lea rcx, [rbp + 0x190]
call fcn.18006f960
lea ecx, [r13 + 1]
mov r8d, 0xa
lea rdx, [rbp - 0x40]
mov rdi, rax
call fcn.1800743d0
xor r9d, r9d
jmp 0x18002d996
lea rsi, [rbp + 0x190]
inc r15d
cmp r15d, 0xa9
jb 0x18002d3e0
inc r13d
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x48], rdi
cmp r13d, dword [rbp - 0x48]
jl 0x18002d3d0
jmp 0x18002da43
lea rax, [rsp + 0x30]
mov dword [rsp + 0x30], 0x20d
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x6a0]
mov r9d, 0x9a
mov qword [rsp + 0x20], 0
xor r8d, r8d
xor edx, edx
call fcn.18001b820
xor edx, edx
lea r8, [rbp + 0x4a0]
lea rcx, [rbp + 0x6a0]
movzx eax, byte [rcx]
test al, al
je 0x18002da11
mov byte [r8], al
inc r8
inc edx
inc rcx
cmp edx, 0x100
jb 0x18002da04
lea rcx, [rbp + 0x4a0]
mov rax, 0xffffffffffffffff
nop dword [rax]
cmp byte [rcx + rax + 1], 0
lea rax, [rax + 1]
jne 0x18002da30
mov byte [rbp + rax + 0x4a0], 0
add r12d, 0x2674
cmp r12d, 0x4ce8
jbe 0x18002d3a0
mov rdi, qword [rbp - 0x78]
mov rsi, qword [rsp + 0x40]
jmp 0x18002e0f9
mov rsi, qword [rsp + 0x78]
mov r14d, 0x10d
mov dword [rsp + 0x30], r14d
nop word [rax + rax]
cmp r14d, 0x10d
je 0x18002e03f
cmp r14d, 0x63d3
jne 0x18002e0c3
xor r13d, r13d
cmp dword [rbp - 0x48], r13d
jle 0x18002e0c3
nop word [rax + rax]
mov r12d, 0x1c
nop word [rax + rax]
mov eax, r12d
sub eax, 0x1c
je 0x18002dfde
sub eax, 1
je 0x18002df88
sub eax, 1
je 0x18002ded0
cmp eax, 1
jne 0x18002e01b
test ebx, ebx
je 0x18002dd9a
xor r14d, r14d
lea r15d, [rax + 7]
lea rdi, [0x180000000]
nop dword [rax]
cmp r14d, 7
ja case.default.0x18002db15
mov ecx, dword [rdi + r14*4 + 0x2e168]
add rcx, rdi
jmp rcx
mov r8d, 0xff
lea rdx, [rbp + 0x4a0]
lea rcx, [rbp]
call fcn.180073af0
lea rcx, [rbp]
dec rcx
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18002db34
movzx eax, word [0x1800a31f4]
mov word [rcx], ax
movzx eax, byte [0x1800a31f6]
mov byte [rcx + 2], al
jmp case.default.0x18002db15
lea r8, str._CreateMutexW_12
mov edx, 0xff
lea rcx, [rbp + 0x5a0]
call fcn.1800732f0
jmp case.default.0x18002db15
lea r8, [rbp + 0x8a0]
mov edx, 0xff
lea rcx, [rbp + 0x5a0]
call fcn.180073290
jmp case.default.0x18002db15
xor edx, edx
lea rax, [rsp + 0x58]
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea ecx, [rdx + 0x40]
call fcn.18006bdd0
xor r8d, r8d
lea rcx, [rsp + 0x58]
mov edx, 0x106
call fcn.18002b720
jmp case.default.0x18002db15
mov r8, rsi
lea rcx, [rbp + 0x5a0]
mov edx, 0xff
call fcn.1800732f0
lea r8, [0x1800a3254]
mov edx, 0xff
lea rcx, [rbp + 0x5a0]
call fcn.1800732f0
xor eax, eax
lea r8, [rbp + 0x5a0]
mov qword [rsp + 0x28], rax
lea rcx, [rbp - 0x28]
mov r9d, 0xa1
mov qword [rsp + 0x20], rax
xor edx, edx
call fcn.180007740
movsd xmm0, qword [rax + 0x10]
movups xmm1, xmmword [rax]
movsd qword [rbp + 0x110], xmm0
mov eax, dword [rbp + 0x110]
movups xmmword [rsp + 0x58], xmm1
mov dword [rsp + 0x68], eax
jmp case.default.0x18002db15
xor r8d, r8d
lea rcx, [rsp + 0x58]
mov edx, 0x106
call fcn.18002b720
lea rax, [rbp - 0x80]
mov dword [rbp - 0x80], 0x214
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x6a0]
mov r9d, 0x9a
mov qword [rsp + 0x20], 0
xor r8d, r8d
xor edx, edx
call fcn.18001b820
xor edx, edx
lea r8, [rbp + 0x8a0]
lea rcx, [rbp + 0x6a0]
movzx eax, byte [rcx]
test al, al
je 0x18002dc95
mov byte [r8], al
inc r8
inc edx
inc rcx
cmp edx, 0x100
jb 0x18002dc88
jmp case.default.0x18002db15
lea rcx, [rbp]
dec rcx
nop
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18002dcb0
lea r8, [rbp + 0x3a0]
xor edx, edx
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r8 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x18002dcd0
lea rcx, [rbp]
dec rcx
nop word [rax + rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18002dcf0
movups xmm0, xmmword [str.a_module_library]
movzx eax, word [0x1800a3268]
lea r8, [rbp]
mov qword [rsp + 0x28], 0
mov r9d, 0xa1
movups xmmword [rcx], xmm0
mov word [rcx + 0x10], ax
xor edx, edx
lea rcx, [rbp - 0x28]
mov qword [rsp + 0x20], 0
call fcn.180007740
movsd xmm0, qword [rax + 0x10]
movups xmm1, xmmword [rax]
movsd qword [rbp + 0x128], xmm0
mov eax, dword [rbp + 0x128]
movups xmmword [rsp + 0x58], xmm1
mov dword [rsp + 0x68], eax
jmp case.default.0x18002db15
xor edx, edx
lea rax, [rsp + 0x58]
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea ecx, [rdx + 0x40]
call fcn.18006bdd0
inc r14d
sub r15, 1
jne 0x18002db00
mov rdi, qword [rsp + 0x48]
lea rcx, [rbp + 0x190]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov r15, qword [rsp + 0x50]
jmp 0x18002e01b
mov r14d, 0xc7
mov eax, r14d
sub eax, 0xc7
je 0x18002de55
sub eax, 1
je 0x18002de50
sub eax, 1
je 0x18002de47
sub eax, 1
je 0x18002ddff
cmp eax, 1
jne 0x18002dea9
xor edx, edx
lea rax, [rsp + 0x58]
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea ecx, [rdx + 0x40]
call fcn.18006bdd0
xor r8d, r8d
lea rcx, [rsp + 0x58]
mov edx, 0x106
call fcn.18002b720
jmp 0x18002dea9
mov qword [rsp + 0x28], 0
lea r8, [rbp]
mov r9d, 0xa1
mov qword [rsp + 0x20], 0
xor edx, edx
lea rcx, [rbp - 0x28]
call fcn.180007740
movsd xmm0, qword [rax + 0x10]
movups xmm1, xmmword [rax]
movsd qword [rbp + 0x140], xmm0
mov eax, dword [rbp + 0x140]
movups xmmword [rsp + 0x58], xmm1
mov dword [rsp + 0x68], eax
jmp 0x18002dea9
lea r8, [0x1800a3270]
jmp 0x18002de9b
mov r8, rsi
jmp 0x18002de9b
lea r8, [rbp + 0x4a0]
mov edx, 0xff
lea rcx, [rbp]
call fcn.180073290
lea r8, [0x1800a31f4]
mov edx, 0xff
lea rcx, [rbp]
call fcn.1800732f0
lea r8, [rbp + 0x3a0]
mov edx, 0xff
lea rcx, [rbp]
call fcn.1800732f0
lea r8, [0x1800a326c]
mov edx, 0xff
lea rcx, [rbp]
call fcn.1800732f0
inc r14d
cmp r14d, 0xcc
jb 0x18002dda0
lea rcx, [rbp + 0x190]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov r15, qword [rsp + 0x50]
jmp 0x18002e01b
mov edx, 0x5c
lea rcx, [rbp + 0x190]
call fcn.18006f8e0
mov qword [rsp + 0x48], rax
mov r14, rax
test rax, rax
je 0x18002e018
nop dword [rax]
nop word [rax + rax]
mov r8, r14
lea rcx, [rbp + 0x3a0]
sub r8, r15
mov rdx, r15
call fcn.1800738b0
lea rcx, [r14 + 1]
mov edx, 0x5c
mov r15, r14
call fcn.18006f8e0
lea rcx, [rbp + 0x3a0]
mov r14, rax
dec rcx
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18002df33
movzx eax, word [0x18009fa88]
mov word [rcx], ax
test r14, r14
jne 0x18002df00
lea rcx, [rbp + 0x3a0]
mov qword [rsp + 0x50], r15
dec rcx
mov qword [rsp + 0x48], r14
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18002df60
xor edx, edx
nop dword [rax]
movzx eax, byte [r15 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x18002df70
mov rdi, r14
jmp 0x18002e01b
lea ecx, [r13 + 1]
mov r8d, 0xa
lea rdx, [rbp - 0x40]
call fcn.1800743d0
lea r8, [rbp - 0x40]
mov edx, 0xff
mov rcx, rdi
call fcn.180073290
lea r8, str..bmp
mov edx, 0xff
lea rcx, [rbp + 0x190]
call fcn.1800732f0
lea r8, [0x18009f130]
mov edx, 0xff
lea rcx, [rbp + 0x3a0]
call fcn.180073290
jmp 0x18002e01b
lea r15, [rbp + 0x190]
mov edx, 0xff
lea r8, [rbp + 0x7a0]
mov qword [rsp + 0x50], r15
lea rcx, [rbp + 0x190]
call fcn.180073290
mov edx, 0x2e
lea rcx, [rbp + 0x190]
call fcn.18006f960
mov qword [rsp + 0x48], rax
mov rdi, rax
inc r12d
cmp r12d, 0x20
jb 0x18002dac0
inc r13d
cmp r13d, dword [rbp - 0x48]
jl 0x18002dab0
mov r14d, dword [rsp + 0x30]
jmp 0x18002e0c3
lea rax, [rbp - 0x80]
mov dword [rbp - 0x80], 0x20d
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x6a0]
mov r9d, 0x9a
mov qword [rsp + 0x20], 0
xor r8d, r8d
xor edx, edx
call fcn.18001b820
xor edx, edx
lea r8, [rbp + 0x4a0]
lea rcx, [rbp + 0x6a0]
nop
movzx eax, byte [rcx]
test al, al
je 0x18002e08d
mov byte [r8], al
inc r8
inc edx
inc rcx
cmp edx, 0x100
jb 0x18002e080
lea rcx, [rbp + 0x4a0]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
cmp byte [rcx + rax + 1], 0
lea rax, [rax + 1]
jne 0x18002e0b0
mov byte [rbp + rax + 0x4a0], 0
add r14d, 0x62c6
mov dword [rsp + 0x30], r14d
cmp r14d, 0xc58c
jbe 0x18002da80
mov rdi, qword [rbp - 0x78]
mov rsi, qword [rsp + 0x40]
mov r8, qword [rsp + 0x38]
test r8, r8
jle 0x18002e0fe
mov rcx, qword [rsp + 0x78]
call fcn.180073cf4
mov r8, qword [rsp + 0x38]
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x18002e119
call fcn.180073cf4
mov r8, qword [rsp + 0x38]
mov qword [rbp - 0x60], 0
mov r14, qword [rsp + 0x70]
mov r13d, 4
mov r12d, 1
mov edx, 3
mov eax, dword [rbp + 0x10e0]
mov r15, qword [rsp + 0x50]
add eax, 0x41
mov dword [rbp + 0x10e0], eax
cmp eax, dword [rbp - 0x70]
jb 0x18002ce95
mov rbx, qword [rsp + 0x11f0]
add rsp, 0x11a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret