Function at 0x1800a2400
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov dword [rax + 0x10], edx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x3e8]
sub rsp, 0x4a8
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
mov rax, qword [0x180357660]
xor rax, rsp
mov qword [rbp + 0x340], rax
mov ebx, dword [rsp + 0x54]
mov r13, r8
mov r10d, dword [rbp - 0x70]
xor r11d, r11d
movsd xmm10, qword [0x18034d340]
mov r12d, edx
mov r15d, dword [rsp + 0x4c]
mov r14d, edx
mov esi, dword [rsp + 0x50]
imul eax, edx, 0x5a5
mov dword [rsp + 0x44], edx
mov dword [rbp - 0x58], edx
mov qword [rbp - 0x10], r8
mov r8, rcx
mov qword [rsp + 0x68], r9
cmp edx, eax
mov qword [rsp + 0x78], rcx
mov edx, dword [rbp - 0x74]
mov eax, dword [rbp - 0x6c]
mov dword [rsp + 0x48], edx
mov dword [rsp + 0x70], eax
mov qword [rbp + 0x38], rcx
mov qword [rbp + 0x48], r13
mov qword [rbp + 0x40], r9
mov dword [rsp + 0x58], ebx
mov dword [rsp + 0x40], r10d
ja 0x1800a2b0a
mov rdi, qword [rbp - 0x20]
mov r11d, 0x57
mov r12, qword [rbp - 8]
mov ecx, r14d
mov r13, qword [rbp]
cmp r14d, 0x5028
ja 0x1800a2987
je 0x1800a26f5
cmp r14d, 0x1932
ja 0x1800a2605
je 0x1800a25be
mov eax, r14d
sub eax, 0x4b
je 0x1800a259d
sub eax, 0x2d
je 0x1800a257b
sub eax, 0x23
je 0x1800a2534
cmp eax, 0x54
jne 0x1800a2ae1
mov eax, PathYetAnotherMakeUniqueName
mov word [rbp + 0x2e8], ax
mov eax, 0x7465
mov word [rbp + 0x2e9], ax
jmp 0x1800a2ae1
xor eax, eax
mov qword [0x180357730], r9
mov qword [r9 + 0x80], r8
xor edx, edx
mov qword [rsp + 0x28], rax
lea r8, [0x18001bad0]
xor ecx, ecx
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rbp - 8], rax
mov r12, rax
test rax, rax
jne 0x1800a2ac4
mov byte [rsp + 0x54], al
mov eax, dword [rsp + 0x54]
jmp 0x1800a348a
xor eax, eax
mov qword [rbp - 0x20], r9
mov qword [rbp + 0x30], rax
mov rdi, r9
test r9, r9
je 0x1800a2b89
mov qword [r9 + 0x2a0], r8
jmp 0x1800a2ae1
mov r13, qword [r9 + 0x50]
mov rax, qword [r9 + 0x88]
mov qword [rsp + 0x60], rax
mov qword [rbp], r13
mov rax, qword [r13 + 0x78]
mov qword [rbp + 0x20], rax
jmp 0x1800a2ae1
mov rax, qword [r13 + 8]
mov rcx, qword [rbp + 0x20]
add rcx, 0x90
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x60], rcx
mov rax, qword [rax + 0x20]
mov qword [rbp + 0x28], rax
add rax, 0x1538
movsd xmm0, qword [rcx + 0x20]
addsd xmm0, xmm10
mov qword [rbp - 0x80], rax
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
cvttsd2si r15d, xmm0
mov dword [rsp + 0x4c], r15d
jmp 0x1800a2ac4
cmp r14d, 0x2850
je 0x1800a26de
cmp r14d, 0x3219
je 0x1800a263d
cmp r14d, 0x3412
jne 0x1800a2ae1
xchg qword [0x180357738], r12
mov byte [rsp + 0x54], 1
mov eax, dword [rsp + 0x54]
jmp 0x1800a348a
mov rcx, qword [rsp + 0x60]
xor r9d, r9d
movsxd rax, r15d
xor r8d, r8d
mov edx, SHSetInstanceExplorer
mov rcx, qword [rcx + rax*8 + 0x10]
mov qword [rbp + 0x68], rcx
call fcn.18008a7e0
mov r9, qword [rsp + 0x68]
mov rcx, qword [rbp - 0x60]
mov dword [rbp + 8], eax
lea esi, [rax*8]
movsxd rax, dword [r9 + 0x2c]
mov dword [rsp + 0x50], esi
test eax, eax
je 0x1800a2686
mov edx, dword [rcx + 0x18]
imul edx, dword [rcx + 0x10]
jmp 0x1800a2689
mov edx, dword [rcx + 0x10]
mov dword [rsp + 0x48], edx
mov dword [rbp - 0x74], edx
test eax, eax
je 0x1800a269f
mov r10d, dword [rcx + 0x18]
imul r10d, dword [rcx + 0x14]
jmp 0x1800a26a3
mov r10d, dword [rcx + 0x14]
mov rcx, rax
mov dword [rsp + 0x40], r10d
mov rax, qword [rbp + 0x28]
mov dword [rbp - 0x70], r10d
mov eax, dword [rax + rcx*4]
sar eax, 1
mov dword [rsp + 0x70], eax
mov dword [rbp - 0x6c], eax
mov rax, qword [rbp - 0x80]
movd xmm0, dword [rax + 0xc]
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [rax + 0x10]
cvttsd2si eax, xmm0
mov dword [rsp + 0x74], eax
jmp 0x1800a2ad2
xor eax, eax
mov dword [rdi + 0x280], eax
mov dword [rdi + reloc.SHELL32.dll_SHChangeNotification_Lock], 1
jmp 0x1800a2ae1
lea rax, [rdi + 0x288]
mov qword [rsp + 0x28], rdi
lea r9, [rdi + 0x290]
mov qword [rsp + 0x20], rax
lea r8, [0x180341909]
mov ecx, 0x116
lea rdx, [0x180341909]
call fcn.1800afb20
mov dword [rbp + 0x18], eax
test eax, eax
jne 0x1800a2be5
mov rax, qword [0x180358ac8]
mov ebx, 0xd3
mov dword [rbp - 0x78], ebx
mov ecx, ebx
cmp ecx, 0xd3
je 0x1800a2875
cmp ecx, 0x3247
je 0x1800a2779
cmp ecx, 0x63bb
jne 0x1800a2917
lea rcx, [rbp + 0x1c0]
cmp rax, rcx
jne 0x1800a2917
mov rax, qword [rax]
jmp 0x1800a2910
lea rcx, [rax + 0x10]
mov rdx, rsp
call sub.VCRUNTIME140.dll___intrinsic_setjmp
mov dword [rbp + 0x14], eax
test eax, eax
jne 0x1800a2859
mov rdi, qword [rbp - 0x20]
cmp qword [rdi + 0x1d8], 0
jne 0x1800a2810
cmp qword [rdi + 0x1e0], 0
je 0x1800a2b93
mov rcx, qword [rdi]
mov r9, rdi
add rcx, 0x10
mov dword [rsp + 0x20], 0x77
xor r8d, r8d
mov qword [rbp + 0x70], rcx
xor edx, edx
call fcn.180071760
mov dword [rbp + 0x10], eax
test eax, eax
jne 0x1800a2806
lea rax, [0x180074480]
mov dword [rsp + 0x28], 0x32
xor ebx, ebx
mov qword [rdi + 0x1d8], rax
mov r9, rdi
mov qword [rsp + 0x20], rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800686e0
mov dword [rbp + 0xc], eax
test eax, eax
je 0x1800a2812
mov eax, 0xb
jmp 0x1800a348a
xor ebx, ebx
cmp dword [rdi + 0x280], 0
jg 0x1800a2ba7
mov r8, qword [rdi + 0x298]
lea r9, [rbp + 0x30]
mov rdx, rdi
mov qword [rbp + 0x78], r8
mov ecx, 0x9c
call fcn.18005b520
mov qword [rbp + 0x80], rax
test eax, eax
js 0x1800a2b9d
mov ebx, dword [rbp - 0x78]
mov rax, qword [0x180358ac8]
jmp 0x1800a2917
cmp eax, 6
mov rax, qword [0x180358ac8]
je 0x1800a2bd1
mov rdi, qword [rbp - 0x20]
mov ebx, dword [rbp - 0x78]
jmp 0x1800a2917
xor edx, edx
mov qword [rbp + 0x90], rax
mov r8d, 0x108
lea rcx, [rbp + 0x98]
call sub.VCRUNTIME140.dll_memset
lea rax, [rbp + 0x1c0]
mov edx, 2
lea rcx, [rbp + 0x90]
nop dword [rax]
nop word [rax + rax]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x1800a28b0
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
lea rax, [rbp + 0x1c0]
mov qword [0x180358ac8], rax
add ebx, 0x3174
mov dword [rbp - 0x78], ebx
mov ecx, ebx
cmp ebx, 0x945c
jbe 0x1800a2741
mov esi, dword [rbp + 0x3f8]
xor eax, eax
mov r8, qword [rbp + 0x38]
mov ebx, eax
mov r9, qword [rbp + 0x40]
mov edx, dword [rbp - 0x74]
mov r10d, dword [rbp - 0x70]
mov r14d, dword [rbp - 0x58]
mov r12, qword [rbp - 8]
mov r13, qword [rbp]
mov r15d, dword [rsp + 0x4c]
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x54], eax
mov eax, dword [rbp - 0x6c]
mov dword [rsp + 0x44], esi
mov esi, dword [rsp + 0x50]
mov dword [rsp + 0x70], eax
mov dword [rsp + 0x48], edx
mov dword [rsp + 0x40], r10d
mov qword [rsp + 0x78], r8
mov qword [rsp + 0x68], r9
jmp 0x1800a2ad7
cmp r14d, 0x13e5b
ja 0x1800a2a1d
je 0x1800a2a0f
cmp r14d, 0x504a
je 0x1800a2a02
cmp r14d, 0x7800
je case.0x1800a2b87.71
cmp r14d, 0x9fa5
je 0x1800a29f3
cmp r14d, 0xef00
jne 0x1800a2ae1
mov eax, 0x63
mov dword [rbp + 0x2f0], 0x655277
mov word [rbp + 0x2f3], ax
mov eax, 0x74
mov word [rbp + 0x2f4], ax
mov dword [rbp + 0x2f8], 0x730075
jmp 0x1800a2ae1
mov dword [rbp + 0x2ec], 0x6f646e69
jmp 0x1800a2ae1
mov word [rbp + 0x2eb], r11w
jmp 0x1800a2ae1
xor eax, eax
mov word [rbp + 0x2fc], ax
jmp 0x1800a2ae1
cmp r14d, 0x18db6
je 0x1800a2a90
cmp r14d, 0x1dd11
je 0x1800a2a85
cmp r14d, 0x22c6c
jne 0x1800a2ae1
mov eax, dword [0x18034a296]
lea rdx, [0x18034a2f8]
mov dword [rbp + 0x304], eax
lea rcx, [rbp + 0x2f8]
movzx eax, word [0x18034a29a]
mov word [rbp + 0x308], ax
xor eax, eax
mov word [rbp + 0x30a], ax
lea r8d, [rax + 1]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov eax, 0x41
mov word [rbp + 0x2d0], ax
jmp 0x1800a2ac4
xor eax, eax
mov word [rbp + 0x304], ax
jmp 0x1800a2ae1
mov r8d, 2
lea rdx, str.err_friend_invalid_in_context
lea rcx, [rbp + 0x2f8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 2
lea rdx, [0x18034a212]
lea rcx, [rbp + 0x300]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov r10d, dword [rsp + 0x40]
mov edx, dword [rsp + 0x48]
mov r9, qword [rsp + 0x68]
mov r8, qword [rsp + 0x78]
mov ecx, dword [rsp + 0x44]
mov r11d, 0x57
imul eax, ecx, 0x55
add r14d, eax
imul eax, ecx, 0x5a5
mov dword [rbp - 0x58], r14d
cmp r14d, eax
jbe 0x1800a24d2
mov r13, qword [rbp + 0x48]
xor r11d, r11d
mov r12d, dword [rsp + 0x44]
mov qword [rbp - 0x10], r13
lea eax, [r12 - 0x11]
mov dword [rbp - 0x28], eax
cmp r12d, eax
jbe case.0x1800a2b87.71
mov eax, dword [rbp - 0x64]
lea rcx, [0x180000000]
movsd xmm8, qword [0x18034e1b0]
mov r8d, 0x64
movsd xmm9, qword [0x18034d448]
movsd xmm6, qword [rbp - 0x50]
mov r12d, dword [rbp - 0x48]
movsd xmm7, qword [rbp + 0x50]
mov edi, dword [rsp + 0x44]
mov r14, qword [rbp - 0x80]
mov dword [rbp - 0x68], eax
nop word [rax + rax]
lea eax, [rdi - 0x47]
cmp eax, 0xa8
ja case.default.0x1800a2b87
movzx eax, byte [rcx + rax + 0xa3514]
mov ecx, dword [rcx + rax*4 + 0xa34cc]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov eax, 9
jmp 0x1800a348a
mov eax, 3
jmp 0x1800a348a
mov eax, 5
jmp 0x1800a348a
mov r9, qword [rdi + 0x298]
test r9, r9
je 0x1800a2bc0
xor edx, edx
xor ecx, ecx
lea r8d, [rdx + 0x5c]
call fcn.180072760
mov qword [rdi + 0x298], rbx
mov eax, 4
jmp 0x1800a348a
mov rcx, qword [rax]
mov eax, 6
mov qword [0x180358ac8], rcx
jmp 0x1800a348a
mov eax, 0xc
jmp 0x1800a348a
movsd xmm0, qword [str.user3]
mov eax, dword [0x18034a380]
movsd qword [rbp + 0x328], xmm0
mov dword [rbp + 0x330], eax
jmp case.0x1800a2b87.88
mov r13, qword [rbp - 0x60]
cmp dword [r13], 0
je 0x1800a3471
mov qword [r13 + 0x28], r9
cmp dword [r13 + 0xc], 0
jle 0x1800a2e5e
mov ebx, dword [rsp + 0x70]
mov edi, 0xbf
nop word [rax + rax]
mov eax, edi
sub eax, 0xbf
je 0x1800a2e25
sub eax, 0x29
je 0x1800a2e14
sub eax, 0x29
je 0x1800a2d0a
sub eax, 0x29
je 0x1800a2c9d
cmp eax, 0x29
jne 0x1800a2e47
mov rcx, qword [rsp + 0x60]
xor r9d, r9d
movsxd rax, r15d
xor r8d, r8d
mov edx, SHSetInstanceExplorer
mov rcx, qword [rcx + rax*8 + 0x10]
call fcn.18008a7e0
mov r9, qword [rsp + 0x68]
mov esi, eax
shl esi, 3
mov dword [rsp + 0x50], esi
jmp 0x1800a2e47
movaps xmm0, xmm7
xorps xmm0, xmm8
comisd xmm0, xmm6
jbe 0x1800a2cb2
movsd qword [rbp - 0x50], xmm0
movaps xmm6, xmm0
comisd xmm6, xmm7
jbe 0x1800a2cc0
movsd qword [rbp - 0x50], xmm7
movaps xmm6, xmm7
mov rax, qword [rbp - 0x18]
movaps xmm0, xmm6
movd xmm2, ebx
cvtdq2pd xmm2, xmm2
movd xmm1, dword [rax + 8]
cvtdq2pd xmm1, xmm1
divsd xmm0, xmm1
mulsd xmm0, xmm2
addsd xmm0, qword [r13 + 0x20]
movsd qword [r13 + 0x20], xmm0
addsd xmm0, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
mov r9, qword [rsp + 0x68]
cvttsd2si r15d, xmm0
mov dword [rsp + 0x4c], r15d
jmp 0x1800a2e47
mov ecx, dword [r13 + 4]
mov edx, dword [rsp + 0x74]
sub ecx, r12d
add ecx, esi
cmp ecx, edx
jle 0x1800a2d77
test r15d, r15d
jle 0x1800a2dcf
cmp esi, r12d
jle 0x1800a2dcf
mov eax, dword [r13 + 4]
sub eax, r12d
add eax, esi
cmp eax, edx
jle 0x1800a2dcf
mov rcx, qword [rsp + 0x60]
dec r15d
movsxd rax, r15d
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x4c], r15d
mov edx, SHSetInstanceExplorer
mov rcx, qword [rcx + rax*8 + 0x10]
call fcn.18008a7e0
mov edx, dword [rsp + 0x74]
mov esi, eax
shl esi, 3
mov dword [rsp + 0x50], esi
test r15d, r15d
jg 0x1800a2d24
jmp 0x1800a2dcf
jge 0x1800a2dcf
lea eax, [r15 + 1]
cmp eax, 0xf
jge 0x1800a2dcf
cmp esi, r12d
jge 0x1800a2dcf
mov eax, dword [r13 + 4]
sub eax, r12d
add eax, esi
cmp eax, edx
jge 0x1800a2dcf
mov rcx, qword [rsp + 0x60]
inc r15d
movsxd rax, r15d
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x4c], r15d
mov edx, SHSetInstanceExplorer
mov rcx, qword [rcx + rax*8 + 0x10]
call fcn.18008a7e0
mov edx, dword [rsp + 0x74]
mov esi, eax
shl esi, 3
lea eax, [r15 + 1]
mov dword [rsp + 0x50], esi
cmp eax, 0xf
jl 0x1800a2d82
movd xmm0, r15d
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [r13 + 0x20]
addsd xmm0, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
mov rax, qword [rbp - 0x18]
movaps xmm6, xmm0
mov r9, qword [rsp + 0x68]
movd xmm1, ebx
cvtdq2pd xmm1, xmm1
movd xmm2, dword [rax + 8]
divsd xmm6, xmm1
cvtdq2pd xmm2, xmm2
mulsd xmm6, xmm2
movsd qword [rbp - 0x50], xmm6
jmp 0x1800a2e47
movaps xmm7, xmm9
divsd xmm7, qword [r14 + 0x18]
movsd qword [rbp + 0x50], xmm7
jmp 0x1800a2e47
cmp dword [r9 + 0x2c], 0
xorps xmm6, xmm6
movsd qword [rbp - 0x50], xmm6
je 0x1800a2e3f
mov r12d, dword [r13 + 0x18]
imul r12d, dword [r13 + 0xc]
jmp 0x1800a2e43
mov r12d, dword [r13 + 0xc]
mov dword [rbp - 0x48], r12d
add edi, 0x29
cmp edi, 0x18c
jb 0x1800a2c40
mov ebx, dword [rsp + 0x58]
mov edx, dword [rsp + 0x48]
cmp dword [r13 + 0x10], 0
jle 0x1800a32b9
cmp esi, edx
jge 0x1800a32b9
mov eax, dword [r13 + 8]
sub eax, edx
add eax, esi
jns 0x1800a2ebe
mov edi, dword [rsp + 0x48]
nop
inc r15d
mov dword [rsp + 0x4c], r15d
cmp r15d, 0xf
jge 0x1800a2ebe
mov rcx, qword [rsp + 0x60]
xor r9d, r9d
movsxd rax, r15d
xor r8d, r8d
mov edx, SHSetInstanceExplorer
mov rcx, qword [rcx + rax*8 + 0x10]
call fcn.18008a7e0
mov esi, eax
shl esi, 3
mov eax, esi
mov dword [rsp + 0x50], esi
sub eax, edi
add eax, dword [r13 + 8]
js 0x1800a2e80
mov edi, reloc.SHELL32.dll_PathYetAnotherMakeUniqueName
jmp 0x1800a343f
mov dword [rbp + 0x320], 0x6c006c
mov word [rbp + 0x324], r11w
jmp case.0x1800a2b87.88
mov r13, qword [rbp - 0x60]
mov eax, dword [r13 + 0xc]
test eax, eax
jle 0x1800a2f17
cmp dword [r9 + 0x2c], 0
je 0x1800a2f0d
mov ecx, dword [r13 + 0x18]
mov ebx, r11d
imul ecx, eax
mov eax, esi
mov dword [rsp + 0x58], ebx
sub eax, ecx
add dword [r13 + 4], eax
jmp case.0x1800a2b87.88
mov ecx, eax
mov eax, esi
sub eax, ecx
add dword [r13 + 4], eax
mov ebx, r11d
mov dword [rsp + 0x58], ebx
jmp case.0x1800a2b87.88
mov r13, qword [rbp - 0x60]
mov rdi, qword [rbp - 0x80]
cmp dword [r13 + 0x14], 0
jle 0x1800a2f95
cmp esi, r10d
jle 0x1800a2f95
mov eax, dword [r13 + 8]
sub eax, r10d
add eax, esi
cmp eax, dword [rdi + 0xc]
jle 0x1800a2f8d
sub r15d, 1
mov dword [rsp + 0x4c], r15d
js 0x1800a2f89
mov rcx, qword [rsp + 0x60]
xor r9d, r9d
movsxd rax, r15d
xor r8d, r8d
mov edx, SHSetInstanceExplorer
mov rcx, qword [rcx + rax*8 + 0x10]
call fcn.18008a7e0
mov r10d, dword [rsp + 0x40]
mov esi, eax
shl esi, 3
mov eax, esi
mov dword [rsp + 0x50], esi
sub eax, r10d
add eax, dword [r13 + 8]
cmp eax, dword [rdi + 0xc]
jg 0x1800a2f45
mov edx, dword [rsp + 0x48]
mov dword [rsp + 0x44], PathYetAnotherMakeUniqueName
test r15d, r15d
jns 0x1800a302f
mov eax, dword [rdi + 0xc]
xor r9d, r9d
sub eax, dword [r13 + 8]
xor r8d, r8d
mov r14, qword [rsp + 0x60]
add eax, r10d
cdq
and edx, 7
lea edi, [rdx + rax]
xor eax, eax
mov dword [r13 + 0x30], eax
mov edx, SHSetInstanceExplorer
mov rcx, qword [r14 + 0x10]
mov r15d, eax
sar edi, 3
mov dword [rsp + 0x4c], eax
call fcn.18008a7e0
cmp eax, edi
jle 0x1800a32b5
lea eax, [rdi*8]
xor edx, edx
mov dword [rbp - 0x40], eax
lea r9, [rbp - 0x40]
mov r8, qword [r14 + 0x10]
xor eax, eax
mov ecx, 0xef
mov qword [rsp + 0x20], rax
call fcn.18003dea0
mov rcx, qword [r14 + 0x10]
xor r9d, r9d
xor r8d, r8d
mov edx, SHSetInstanceExplorer
call fcn.18008a7e0
mov edi, dword [rsp + 0x44]
mov esi, eax
mov r14, qword [rbp - 0x80]
shl esi, 3
mov dword [rsp + 0x50], esi
jmp 0x1800a343f
mov ebx, ILClone
mov r14d, 0x5b
nop word [rax + rax]
mov eax, r14d
sub eax, 0x5b
je 0x1800a310d
cmp eax, 1
jne 0x1800a3125
mov rax, qword [rsp + 0x60]
cmp r15d, 0xf
mov edx, SHSetInstanceExplorer
cmovge r15d, ebx
xor r9d, r9d
mov dword [r13 + 0x30], r15d
xor r8d, r8d
movsxd rdi, r15d
mov dword [rsp + 0x4c], r15d
mov rcx, qword [rax + rdi*8 + 0x10]
call fcn.18008a7e0
mov esi, dword [rbp - 0x68]
sub esi, eax
test esi, esi
jle 0x1800a30e0
mov r13, qword [rsp + 0x60]
nop dword [rax]
nop word [rax + rax]
xor ecx, ecx
mov dword [rbp - 0x38], 8
lea rax, [rbp - 0x38]
mov dword [rbp - 0x30], ecx
mov qword [rsp + 0x30], rax
lea r8, [rbp - 0x30]
mov qword [rsp + 0x28], rcx
dec esi
lea r9d, [rcx + 0x1a]
mov qword [rsp + 0x20], rcx
mov rcx, qword [r13 + rdi*8 + 0x10]
xor edx, edx
mov dword [rbp - 0x64], esi
call fcn.180057120
test esi, esi
jg 0x1800a30a0
mov r13, qword [rbp - 0x60]
mov rax, qword [rsp + 0x60]
dec esi
xor r9d, r9d
mov dword [rbp - 0x68], esi
xor r8d, r8d
mov dword [rbp - 0x64], esi
mov edx, SHSetInstanceExplorer
mov rcx, qword [rax + rdi*8 + 0x10]
call fcn.18008a7e0
mov esi, eax
shl esi, 3
mov dword [rsp + 0x50], esi
jmp 0x1800a3125
mov eax, edx
sub eax, dword [r13 + 8]
add eax, 7
cdq
and edx, 7
add eax, edx
sar eax, 3
mov dword [rbp - 0x68], eax
mov dword [rbp - 0x64], eax
mov edx, dword [rsp + 0x48]
inc r14d
cmp r14d, 0x5d
jb 0x1800a3040
mov ebx, dword [rsp + 0x58]
mov edi, dword [rsp + 0x44]
mov r14, qword [rbp - 0x80]
jmp 0x1800a343f
mov word [rbp + 0x2d1], r8w
jmp case.0x1800a2b87.88
mov eax, 0x63
mov word [rbp + 0x2de], ax
mov eax, 0x74
mov word [rbp + 0x2df], ax
jmp case.0x1800a2b87.88
mov r8d, 3
lea rdx, [0x1803422f0]
lea rcx, [rbp + 0x332]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
movabs rax, 0x6c006c0064
lea r8, [rbp + 0x2e8]
mov r9d, 0xe0
mov qword [rbp + 0x336], rax
xor edx, edx
lea rcx, [rbp + 0x2f8]
call fcn.180012510
mov r9d, 0xe0
mov qword [rbp + 0x58], rax
lea r8, [rbp + 0x2d0]
xor edx, edx
lea rcx, [rbp + 0x310]
call fcn.180012510
mov qword [rbp + 0x60], rax
jmp 0x1800a343f
mov eax, 0x756a
mov dword [rbp + 0x2d4], 0x577473
mov word [rbp + 0x2d2], ax
mov eax, 0x69
mov word [rbp + 0x2d7], ax
mov eax, 0x6e
mov word [rbp + 0x2d8], ax
jmp case.0x1800a2b87.88
mov byte [rbp + 0x2e2], 0
mov dword [rbp + 0x310], 0x730075
mov dword [rbp + 0x314], 0x720065
jmp case.0x1800a2b87.88
mov r13, qword [rbp - 0x60]
cmp dword [r13 + 0x10], 0
jg 0x1800a3248
cmp dword [r13 + 0x14], 0
jle case.0x1800a2b87.88
test r10d, r10d
jle 0x1800a3260
cmp esi, r10d
jle 0x1800a3260
mov eax, esi
sub eax, r10d
add dword [r13 + 8], eax
jmp case.0x1800a2b87.88
test edx, edx
jle 0x1800a3275
cmp esi, edx
jge 0x1800a3275
mov eax, esi
sub eax, edx
add dword [r13 + 8], eax
jmp case.0x1800a2b87.88
mov eax, dword [r13 + 8]
mov ecx, dword [rsp + 0x74]
cmp eax, ecx
jle 0x1800a329c
test r10d, r10d
jle 0x1800a3293
sub eax, r10d
add eax, esi
mov dword [r13 + 8], eax
cmp eax, ecx
jge 0x1800a32b9
mov dword [r13 + 8], ecx
jmp case.0x1800a2b87.88
test edx, edx
jle 0x1800a3293
sub eax, edx
add eax, esi
mov dword [r13 + 8], eax
cmp eax, ecx
jle 0x1800a32b9
mov dword [r13 + 8], ecx
jmp case.0x1800a2b87.88
mov r14, qword [rbp - 0x80]
mov edi, dword [rsp + 0x44]
jmp 0x1800a343f
mov eax, 0x33
mov dword [rbp + 0x31a], 0x2e0032
mov word [rbp + 0x318], ax
mov word [rbp + 0x31e], r8w
jmp case.0x1800a2b87.88
mov word [rbp + 0x2d9], r8w
mov eax, 0x65
mov dword [rbp + 0x2da], 0x52776f
mov word [rbp + 0x2dd], ax
jmp case.0x1800a2b87.88
mov rcx, qword [r9 + 0x18]
test rcx, rcx
je case.0x1800a2b87.88
lea rdx, [rbp + 0x1b0]
call qword [rbp + 0x58]
mov eax, dword [rbp + 0x1b4]
sub eax, dword [rbp + 0x1bc]
add dword [r13], eax
jmp 0x1800a343f
mov eax, 0x7845
mov word [rbp + 0x2e0], ax
jmp case.0x1800a2b87.88
mov r9d, 0xe0
lea r8, str.SystemParametersInfoA
xor edx, edx
lea rcx, [rbp + 0x328]
call fcn.180012510
xor edx, edx
lea r8, [rbp + 0x1b0]
xor r9d, r9d
lea ecx, [rdx + 0x30]
call rax
test eax, eax
je 0x1800a342c
mov edi, 0xa8
lea ebx, [rdi - 0x44]
mov eax, edi
sub eax, 0xa8
je 0x1800a33e1
cmp eax, 1
jne 0x1800a3414
xor r9d, r9d
mov dword [rbp + 0x1a4], ebx
mov edx, 0xce0000
mov dword [rbp + 0x1ac], 0xc8
mov r8d, eax
lea rcx, [rbp + 0x1a0]
call qword [rbp + 0x60]
mov eax, dword [rbp + 0x1a0]
sub eax, dword [rbp + 0x1a8]
mov rcx, qword [rsp + 0x78]
add eax, ebx
add dword [rcx], eax
mov eax, dword [rbp + 0x1a4]
sub eax, dword [rbp + 0x1ac]
add eax, ebx
add dword [r13], eax
jmp 0x1800a3414
mov eax, dword [rbp + 0x1b8]
sub eax, dword [rbp + 0x1b0]
mov rcx, qword [rsp + 0x78]
mov dword [rcx], eax
mov eax, dword [rbp + 0x1bc]
sub eax, dword [rbp + 0x1b4]
mov dword [r13], eax
mov dword [rbp + 0x1a0], ebx
mov dword [rbp + 0x1a8], 0xc8
inc edi
cmp edi, 0xaa
jb 0x1800a3381
mov ebx, dword [rsp + 0x58]
mov edi, dword [rsp + 0x44]
jmp 0x1800a343f
mov rax, qword [rsp + 0x78]
mov dword [r13], 0x7fffffff
mov dword [rax], 0x7fffffff
mov r10d, dword [rsp + 0x40]
mov r8d, 0x64
lea rcx, [0x180000000]
dec edi
mov dword [rsp + 0x44], edi
cmp edi, dword [rbp - 0x28]
jbe case.0x1800a2b87.71
mov r13, qword [rbp - 0x10]
xor r11d, r11d
mov r9, qword [rsp + 0x68]
mov edx, dword [rsp + 0x48]
jmp 0x1800a2b60
cmp qword [r13 + 0x28], 0
je 0x1800a347f
mov eax, 0xffffffff
jmp 0x1800a348a
mov qword [r13 + 0x28], r9
mov eax, r11d
jmp 0x1800a348a
mov eax, ebx
mov rcx, qword [rbp + 0x340]
xor rcx, rsp
call fcn.1800bfa40
lea r11, [rsp + 0x4a8]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret