Function at 0x18002a9b0
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x528]
sub rsp, 0x5e8
movaps xmmword [rax - 0x58], xmm6
xor ecx, ecx
mov qword [rbp + 0xb8], rcx
mov word [rbp + 0xc0], cx
movdqa xmm0, xmmword [0x180085c60]
movdqu xmmword [rbp + 0xd2], xmm0
mov byte [rbp + 0xc2], cl
mov qword [rbp + 0x78], rcx
mov word [rbp + 0x80], cx
movdqu xmmword [rbp + 0x92], xmm0
mov byte [rbp + 0x82], cl
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], rcx
mov qword [rbp + 0x28], rcx
movdqa xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], rcx
mov qword [rbp + 0x48], rcx
mov qword [rbp + 0x50], rcx
mov qword [rbp + 0x100], rcx
mov qword [rbp + 0x108], rcx
mov qword [rbp + 0x110], rcx
mov ecx, 0x30
call fcn.180062018
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x108], rax
xor r11d, r11d
mov qword [rbp + 0x118], r11
xorps xmm2, xmm2
movsd qword [rbp + 0x120], xmm2
mov qword [rbp + 0x128], r11
mov edi, 1
mov dword [rbp + 0x130], edi
mov qword [rbp + 0x138], r11
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x140], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x150], xmm1
movdqa xmmword [rbp + 0x160], xmm0
mov qword [rbp + 0x170], r11
mov qword [rbp + 0x178], 0xffffffffffffffff
mov dword [rbp + 0x180], r11d
xor eax, eax
movups xmmword [rbp + 0x188], xmm0
movups xmmword [rbp + 0x198], xmm0
movups xmmword [rbp + 0x1a8], xmm0
movups xmmword [rbp + 0x1b8], xmm0
mov qword [rbp + 0x1c8], rax
movdqa xmm0, xmmword [0x180085c60]
movdqa xmmword [rbp + 0x1e0], xmm0
mov byte [rbp + 0x1d0], al
mov word [rbp + 0x1f0], r11w
mov dword [rbp + 0x1f4], r11d
mov qword [rbp + 0x1f8], r11
xorps xmm0, xmm0
movaps xmmword [rbp + 0x200], xmm0
movsd qword [rbp + 0x210], xmm2
mov byte [rbp + 0x218], al
mov qword [rbp + 0x21c], r11
mov r8d, dword [rbp + 0x550]
mov edx, r8d
mov dword [rsp + 0x68], edx
lea ebx, [r8 + 0x12]
mov dword [rsp + 0x54], ebx
movzx r9d, word [rsp + 0x60]
movzx r10d, byte [rsp + 0x50]
mov dword [rsp + 0x5c], r9d
mov byte [rsp + 0x50], r10b
cmp r8d, ebx
jae 0x18002af76
lea ebx, [r8 - 0xd7]
mov dword [rbp - 0x7c], ebx
mov r11d, 0xff0c
movzx r8d, word [rsp + 0x70]
mov dword [rsp + 0x6c], r8d
mov esi, dword [rsp + 0x58]
mov r14d, dword [rsp + 0x58]
mov r15, qword [rbp - 0x68]
mov r12d, dword [rsp + 0x58]
mov r13d, dword [rsp + 0x58]
mov rcx, qword [rbp]
mov qword [rbp - 0x10], rcx
mov eax, dword [rsp + 0x54]
cmp ebx, 0x27
ja case.default.0x18002abe4
lea r10, [0x180000000]
movzx eax, byte [r10 + rbx + 0x2b804]
mov ecx, dword [r10 + rax*4 + 0x2b7bc]
add rcx, r10
jmp rcx
mov rax, qword [rbp + 0x540]
mov word [rax + 0x18], r8w
jmp case.0x18002abe4.8
xor ecx, ecx
mov dword [0x40018024], ecx
mov dword [0x40018028], ecx
jmp case.0x18002abe4.8
lea r8, [0x180094338]
xor edx, edx
mov ecx, 0x107
call fcn.18001cdb0
test al, al
jne 0x18002ad61
xor r11d, r11d
mov ebx, r11d
nop dword [rax]
cmp ebx, 0x10
ja case.0x18002ac4c.1
mov eax, ebx
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0x2b82c]
add rcx, rdx
jmp rcx
mov esi, 0x36
lea r14d, [rsi + 0x2e]
jmp case.0x18002ac4c.1
mov r15, r11
mov r12d, r11d
jmp case.0x18002ac4c.1
mov r13d, r11d
jmp case.0x18002ac4c.1
movups xmm2, xmmword [str.retrieveDynamicTypeManager]
movups xmmword [rbp + 0x288], xmm2
movups xmm1, xmmword [0x180084b18]
movups xmmword [rbp + 0x298], xmm1
movups xmm0, xmmword [0x180084b28]
movups xmmword [rbp + 0x2a8], xmm0
mov ecx, dword [0x180084b38]
mov dword [rbp + 0x2b8], ecx
movzx eax, word [0x180084b3c]
mov word [rbp + 0x2bc], ax
movups xmmword [rbp + 0x250], xmm2
movups xmmword [rbp + 0x260], xmm1
movups xmmword [rbp + 0x270], xmm0
mov dword [rbp + 0x280], ecx
mov word [rbp + reloc.SHELL32.dll_SHChangeNotification_Lock], ax
jmp case.0x18002ac4c.1
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], r13d
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x28], r15
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x20], eax
mov r9d, r14d
mov r8d, esi
mov edx, dword [rbp - 0x80]
mov rcx, qword [rbp]
call qword [sym.imp.GDI32.dll_BitBlt]
xor r9d, r9d
lea r8, [rbp - 0x20]
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x250]
call qword [sym.imp.SHLWAPI.dll_UrlCreateFromPathW]
xor r11d, r11d
jmp case.0x18002ac4c.1
mov dword [rsp + 0x78], 0x64
jmp case.0x18002ac4c.1
mov dword [rbp - 0x20], 0x104
mov dword [rsp + 0x7c], 0x40000000
jmp case.0x18002ac4c.1
mov qword [rbp], r11
mov dword [rbp - 0x80], 0x2d
add ebx, 2
lea eax, [rbx + 0x42]
cmp eax, 0x54
jb 0x18002ac30
mov ebx, dword [rbp - 0x7c]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call fcn.180067d00
jmp 0x18002aed9
xor r8d, r8d
mov dword [rsp + 0x6c], r8d
xor r9d, r9d
mov dword [rsp + 0x5c], r9d
jmp case.0x18002abe4.8
xor eax, eax
mov dword [0x40018004], eax
mov dword [0x40018008], eax
jmp case.0x18002abe4.8
mov rax, qword [rbp + 0x540]
movzx r9d, word [rax + 0x20]
mov dword [rsp + 0x5c], r9d
and r8w, r11w
mov dword [rsp + 0x6c], r8d
jmp case.0x18002abe4.8
mov eax, dword [str.STTFa]
mov dword [rbp - 0x78], eax
movzx eax, word [0x180084b44]
mov word [rbp - 0x74], ax
mov eax, dword [str.ilure]
mov dword [rbp - 0x73], eax
movzx eax, word [0x180084b4c]
mov word [rbp - 0x6f], ax
jmp case.0x18002abe4.8
mov dword [0x4001800c], 0
jmp case.0x18002abe4.8
mov rax, qword [rbp + 0x538]
movzx eax, word [rax]
or ax, 1
or r9w, ax
mov dword [rsp + 0x5c], r9d
jmp case.0x18002abe4.8
mov rax, qword [rbp + 0x540]
movzx r8d, word [rax + 0x18]
mov dword [rsp + 0x6c], r8d
jmp case.0x18002abe4.8
mov dword [0x40018000], 0
jmp case.0x18002abe4.8
mov rcx, qword [rbp + 0x540]
movzx eax, word [rcx + 0x20]
mov r10d, 0xfffe
and ax, r10w
mov word [rcx + 0x20], ax
jmp case.0x18002abe4.8
mov r10b, 1
mov byte [rsp + 0x50], r10b
mov qword [rbp - 0x10], 0
mov eax, dword [rsp + 0x54]
jmp 0x18002aef7
mov eax, 0xfffd
and r9w, ax
mov dword [rsp + 0x5c], r9d
jmp case.0x18002abe4.8
mov rax, qword [rbp + 0x548]
movzx eax, word [rax]
shl ax, 4
mov rcx, qword [rbp + 0x530]
or ax, word [rcx]
or r8w, ax
mov dword [rsp + 0x6c], r8d
jmp case.0x18002abe4.8
mov dword [0x4001802c], 0
jmp case.0x18002abe4.8
mov eax, 0x1bb
mov word [rsp + 0x60], ax
lea r9, [0x180094398]
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0xb8]
mov ecx, 0x38
call fcn.18002bd40
mov r11d, 0xff0c
mov r9d, dword [rsp + 0x5c]
mov r8d, dword [rsp + 0x6c]
mov edx, dword [rsp + 0x68]
mov eax, dword [rsp + 0x54]
movzx r10d, byte [rsp + 0x50]
inc edx
mov dword [rsp + 0x68], edx
inc ebx
mov dword [rbp - 0x7c], ebx
cmp edx, eax
jb 0x18002abc0
mov r8d, dword [rbp + 0x550]
mov ebx, dword [rsp + 0x54]
xor r11d, r11d
cmp r8d, ebx
mov ebx, dword [rsp + 0x58]
jae case.0x18002af74.50
lea r12d, [r8 - 0xd7]
mov r15d, dword [rsp + 0x58]
mov r14d, dword [rsp + 0x58]
mov r13, qword [rbp - 0x68]
movaps xmm6, xmmword [rbp + 0xf0]
mov esi, dword [rsp + 0x68]
mov eax, dword [rsp + 0x54]
nop dword [rax]
cmp r12d, 0x32
ja case.default.0x18002af74
lea rdx, [0x180000000]
movzx eax, byte [rdx + r12 + 0x2b8bc]
mov ecx, dword [rdx + rax*4 + 0x2b870]
add rcx, rdx
jmp rcx
mov rax, qword [rbp]
mov qword [rbp - 0x10], rax
jmp 0x18002af18
lea r8, [rbp + 0x10]
xor edx, edx
mov ecx, 0xbf
call fcn.180016c00
lea rax, [rbp + 0xb8]
mov qword [rbp + 0xa8], rax
mov rdx, qword [rbp + 0x18]
cmp rdx, qword [rbp + 0x20]
je 0x18002afcc
lea rax, [rbp + 0xb8]
mov qword [rdx], rax
add qword [rbp + 0x18], 8
mov r8d, dword [rbp + 0x550]
movzx r10d, byte [rsp + 0x50]
xor r11d, r11d
jmp case.0x18002af74.1
lea r8, [rbp + 0xa8]
lea rcx, [rbp + 0x10]
call fcn.180001170
mov r8d, dword [rbp + 0x550]
movzx r10d, byte [rsp + 0x50]
xor r11d, r11d
jmp case.0x18002af74.1
mov dword [0x4001803c], r11d
jmp case.0x18002af74.1
mov rax, qword [rbp + 0x540]
mov word [rax + 0x20], r9w
jmp case.0x18002af74.1
test r10b, r10b
je 0x18002b08d
mov ebx, 0x31
nop dword [rax]
cmp ebx, 0x31
je 0x18002b055
cmp ebx, 0xb4b
je 0x18002b045
cmp ebx, 0x1665
jne 0x18002b06c
mov rcx, qword [rbp + 0x60]
test rcx, rcx
je 0x18002b06c
call sub.RPCRT4.dll_MesHandleFree
jmp 0x18002b06c
mov rcx, qword [rbp + 0x70]
test rcx, rcx
je 0x18002b06c
call sub.RPCRT4.dll_MesHandleFree
jmp 0x18002b06c
mov qword [rbp + 0x60], r11
lea r8, [rbp + 0x60]
mov edx, r14d
lea rcx, [rbp - 0x78]
call sub.RPCRT4.dll_MesDecodeBufferHandleCreate
mov r15d, eax
add ebx, 0xb1a
cmp ebx, 0x214e
mov r11d, 0
jbe 0x18002b020
mov r8d, dword [rbp + 0x550]
movzx r10d, byte [rsp + 0x50]
mov ebx, r11d
jmp case.0x18002af74.1
mov ecx, r11d
movzx eax, r10b
test r15d, r15d
cmove ecx, eax
movzx r10d, cl
mov byte [rsp + 0x50], cl
jmp case.0x18002af74.1
mov dword [rsp + 0x7c], r11d
lea rax, [rbp + 0x78]
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0x18]
cmp rax, qword [rbp + 0x20]
je 0x18002b0da
lea rcx, [rbp + 0x78]
mov qword [rax], rcx
add qword [rbp + 0x18], 8
jmp case.0x18002af74.1
lea r8, [rbp + 0xb0]
mov rdx, qword [rbp + 0x18]
lea rcx, [rbp + 0x10]
call fcn.180001170
mov r8d, dword [rbp + 0x550]
movzx r10d, byte [rsp + 0x50]
xor r11d, r11d
jmp case.0x18002af74.1
mov dword [0x40018038], 0xc007ff
jmp case.0x18002af74.1
mov qword [rbp + 0x70], r11
jmp case.0x18002af74.1
mov eax, 0x1bb
mov word [rsp + 0x70], ax
lea r9, [rsp + 0x70]
mov r8d, 0x75
lea rdx, [rbp + 0x78]
lea rcx, [0x1800943b8]
call fcn.180029e10
mov r8d, dword [rbp + 0x550]
movzx r10d, byte [rsp + 0x50]
xor r11d, r11d
jmp case.0x18002af74.1
lea r9, [rbp + 0x10]
lea r8, [rbp + 0x100]
mov edx, 0x88
lea rcx, [0x180094330]
call fcn.180011210
mov r8d, dword [rbp + 0x550]
movzx r10d, byte [rsp + 0x50]
xor r11d, r11d
jmp case.0x18002af74.1
lea rax, [rbp + 0x10]
mov qword [rbp], rax
mov eax, dword [0x1800943e0]
mov dword [rbp + 8], eax
mov eax, dword [0x1800943e4]
mov dword [rbp + 0xc], eax
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp + 0x240], xmm0
mov qword [rsp + 0x28], r11
mov dword [rsp + 0x20], r11d
lea r9, [rbp + 0x240]
lea r8, [0x1800274b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r13, rax
mov r8d, dword [rbp + 0x550]
movzx r10d, byte [rsp + 0x50]
xor r11d, r11d
jmp case.0x18002af74.1
mov dword [rsp + 0x68], 0xa
test r13, r13
jne 0x18002b3d3
mov esi, r11d
nop dword [rax + rax]
cmp esi, 0x18
ja case.default.0x18002b215
mov eax, esi
mov ecx, dword [rdx + rax*4 + 0x2b8f0]
add rcx, rdx
jmp rcx
mov dword [rbp - 0x37], 0x6e6f6e
jmp case.default.0x18002b215
mov eax, 0x206c
mov word [rbp - 0x3a], ax
jmp case.default.0x18002b215
mov eax, 0x6b
mov word [rbp - 0x49], ax
mov eax, 0x7a
mov word [rbp - 0x48], ax
jmp case.default.0x18002b215
mov eax, 0x6c49
mov word [rbp - 0x40], ax
jmp case.default.0x18002b215
mov eax, 0x4e
mov word [rbp - 0x5a], ax
mov eax, 0x54
mov word [rbp - 0x59], ax
jmp case.default.0x18002b215
movups xmm0, xmmword [0x180085c70]
movups xmmword [rbp + 0x230], xmm0
jmp case.default.0x18002b215
mov dword [rbp - 0x5f], 0x544547
jmp case.default.0x18002b215
mov dword [rbp - 0x55], 0x383231
mov dword [rbp - 0x52], 0x696d72
jmp case.default.0x18002b215
mov eax, 0x3a
mov word [rbp - 0x4f], ax
jmp case.default.0x18002b215
mov dword [rbp - 0x58], 0x5a5353
jmp case.default.0x18002b215
mov eax, 0x4d
mov word [rbp - 0x5c], ax
mov eax, 0x41
mov word [rbp - 0x5b], ax
jmp case.default.0x18002b215
mov eax, 0x5c3a
mov word [rbp - 0x2c], ax
mov dword [rbp - 0x2a], 0x646c65
jmp case.default.0x18002b215
mov eax, 0x6d
mov word [rbp - 0x33], ax
jmp case.default.0x18002b215
mov eax, 0x61
mov word [rbp - 0x38], ax
jmp case.default.0x18002b215
mov dword [rbp - 0x32], 0x73756f
jmp case.default.0x18002b215
mov dword [rbp - 0x2f], 0x696620
jmp case.default.0x18002b215
mov dword [rbp - 0x3e], 0x67656c
mov eax, 0x61
mov word [rbp - 0x3b], ax
jmp case.default.0x18002b215
mov eax, 0x5c
mov word [rbp - 0x4e], ax
mov eax, 0x5f
mov word [rbp - 0x4d], ax
jmp case.default.0x18002b215
mov eax, 0x79
mov word [rbp - 0x34], ax
jmp case.default.0x18002b215
movdqa xmmword [rbp + 0xf0], xmm6
lea r8, [rbp + 0x68]
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0xf0]
call qword [sym.imp.SHLWAPI.dll_AssocCreate]
test eax, eax
jne 0x18002b37b
mov rcx, qword [rbp + 0x68]
mov rax, qword [rcx]
call qword [rax + ILRemoveLastID]
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x60]
call qword [sym.imp.SHLWAPI.dll_PathIsPrefixA]
xor r11d, r11d
lea rdx, [0x180000000]
jmp case.default.0x18002b215
movups xmm6, xmmword [0x180085c80]
jmp case.default.0x18002b215
mov eax, 0x56
mov word [rbp - 0x60], ax
jmp case.default.0x18002b215
mov qword [rbp + 0x68], r11
jmp case.default.0x18002b215
mov dword [rbp - 0x4c], 0x746c61
inc esi
lea eax, [rsi + 0x6d]
cmp eax, 0x86
jb 0x18002b200
mov r8d, dword [rbp + 0x550]
movzx r10d, byte [rsp + 0x50]
mov esi, dword [rsp + 0x68]
mov eax, dword [rsp + 0x54]
inc r8d
mov dword [rbp + 0x550], r8d
inc r12d
cmp r8d, eax
jae case.0x18002af74.50
mov r9d, dword [rsp + 0x5c]
jmp 0x18002af50
mov dword [rsp + 0x78], r11d
lea rax, [rbp - 0x78]
mov r14, 0xffffffffffffffff
nop dword [rax + rax]
inc r14
cmp byte [rax + r14], 0
jne 0x18002b410
jmp case.0x18002af74.1
mov dword [rsp + 0x58], r11d
mov eax, dword [0x1800943e0]
mov dword [rbp - 0x18], eax
mov qword [rsp + 0x38], r11
mov qword [rsp + 0x30], r11
mov qword [rsp + 0x28], r11
mov qword [rsp + 0x20], r11
lea r9, [rbp - 0x18]
xor r8d, r8d
lea rdx, [rbp + 0x10]
mov ecx, 0xdb
call fcn.1800231d0
mov r8d, dword [rbp + 0x550]
movzx r10d, byte [rsp + 0x50]
xor r11d, r11d
jmp case.0x18002af74.1
lea rax, [0x180012a30]
mov qword [rbp - 0x68], rax
lea rdx, [rbp - 0x68]
mov ecx, 0xd8
call fcn.18000f950
mov dword [rbp - 0x80], 0xa
mov r8d, dword [rbp + 0x550]
movzx r10d, byte [rsp + 0x50]
xor r11d, r11d
jmp case.0x18002af74.1
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r9, [rbp + 0x70]
lea r8, [rsp + 0x58]
mov edx, r14d
lea rcx, [rbp - 0x78]
call sub.RPCRT4.dll_MesEncodeFixedBufferHandleCreate
mov r15d, eax
mov r8d, dword [rbp + 0x550]
movzx r10d, byte [rsp + 0x50]
xor r11d, r11d
jmp case.0x18002af74.1
lea rdx, [rbp + 0x100]
mov ecx, 0xc5
call fcn.1800278d0
mov eax, dword [rbp - 0x80]
mov dword [rsp + 0x20], eax
mov r9d, esi
mov r8d, dword [rsp + 0x7c]
mov edx, dword [rsp + 0x78]
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.GDI32.dll_SetRectRgn]
mov r8d, dword [rbp + 0x550]
movzx r10d, byte [rsp + 0x50]
xor r11d, r11d
jmp case.0x18002af74.1
mov edi, ebx
lea rcx, [rbp + 0x178]
call fcn.1800031b0
mov rbx, qword [rbp + 0x160]
test rbx, rbx
je 0x18002b5aa
mov rsi, qword [rbp + 0x168]
cmp rbx, rsi
je 0x18002b558
nop dword [rax]
mov rcx, rbx
call fcn.180039dd0
add rbx, 0x20
cmp rbx, rsi
jne 0x18002b540
mov rbx, qword [rbp + 0x160]
mov rdx, qword [rbp + 0x170]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x18002b58b
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002b7a9
mov rcx, rbx
call fcn.180062054
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x160], xmm0
xor r14d, r14d
mov qword [rbp + 0x170], r14
jmp 0x18002b5ad
xor r14d, r14d
mov rcx, qword [rbp + 0x148]
test rcx, rcx
je 0x18002b603
mov rdx, qword [rbp + 0x158]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002b5ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002b7a9
call fcn.180062054
mov qword [rbp + 0x148], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x150], xmm0
lea rcx, [rbp + 0x108]
call fcn.1800030f0
nop
mov rbx, qword [rbp + 0x28]
test rbx, rbx
je 0x18002b69e
mov rsi, qword [rbp + 0x30]
cmp rbx, rsi
je 0x18002b63b
mov rcx, rbx
call fcn.180002a00
add rbx, 0x28
cmp rbx, rsi
jne 0x18002b626
mov rbx, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x38]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x18002b68a
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002b7af
mov rcx, rbx
call fcn.180062054
mov qword [rbp + 0x28], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x30], xmm0
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x18002b6f0
mov rax, qword [rbp + 0x20]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002b6df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002b7af
call fcn.180062054
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r14
mov rdx, qword [rbp + 0x9a]
cmp rdx, 0x10
jb 0x18002b731
inc rdx
mov rcx, qword [rbp + 0x82]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002b72c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002b7b5
call fcn.180062054
movdqa xmm0, xmmword [0x180085c60]
movdqu xmmword [rbp + 0x92], xmm0
mov byte [rbp + 0x82], 0
mov rdx, qword [rbp + 0xda]
cmp rdx, 0x10
jb 0x18002b785
inc rdx
mov rcx, qword [rbp + 0xc2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002b780
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002b7a3
call fcn.180062054
mov eax, edi
movaps xmm6, xmmword [rsp + 0x5d0]
add rsp, 0x5e8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1800668e4
nop
call fcn.1800668e4
nop
call fcn.1800668e4
nop
call fcn.1800668e4
int3