Function at 0x1800685f0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1dd0]
mov eax, 0x1ed0
call fcn.18007e310
sub rsp, rax
movaps xmmword [rsp + 0x1ec0], xmm6
movaps xmmword [rsp + 0x1eb0], xmm7
movaps xmmword [rsp + 0x1ea0], xmm8
mov rax, qword [0x1800a9e28]
xor rax, rsp
mov qword [rbp + 0x1d98], rax
mov r12d, r8d
mov dword [rsp + 0x7c], r8d
mov rsi, rdx
mov rbx, rcx
mov qword [rsp + 0x50], rcx
movdqa xmm0, xmmword [0x1800863c0]
movdqu xmmword [rbp + 0x1c00], xmm0
mov byte [rbp + 0x1bf0], 0
movdqa xmm1, xmm0
movdqu xmmword [rbp + 0x1c20], xmm0
mov byte [rbp + 0x1c10], 0
movdqu xmmword [rbp + 0x1c40], xmm0
mov byte [rbp + 0x1c30], 0
movdqu xmmword [rbp + 0x1c70], xmm0
mov byte [rbp + 0x1c60], 0
movdqu xmmword [rbp + 0x1c90], xmm0
mov byte [rbp + 0x1c80], 0
xor edi, edi
mov qword [rbp + 0x1a88], rdi
mov word [rbp + 0x1a90], di
movdqu xmmword [rbp + 0x1aa2], xmm0
mov byte [rbp + 0x1a92], dil
mov qword [rbp + 0x1a58], rdi
mov word [rbp + 0x1a60], di
movdqu xmmword [rbp + 0x1a72], xmm0
mov byte [rbp + 0x1a62], dil
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
movdqu xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], rdi
mov qword [rbp - 0x30], rdi
mov qword [rbp + 0x1ac0], rdi
mov qword [rbp + 0x1ac8], rdi
mov qword [rbp + 0x1ad0], rdi
lea ecx, [rdi + 0x30]
call fcn.18007de38
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x1ac8], rax
mov qword [rbp + 0x1ad8], rdi
xorps xmm2, xmm2
movsd qword [rbp + 0x1ae0], xmm2
mov qword [rbp + 0x1ae8], rdi
mov r9d, 1
mov dword [rbp + 0x1af0], r9d
mov qword [rbp + 0x1af8], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1b00], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1b10], xmm1
movdqu xmmword [rbp + 0x1b20], xmm0
mov qword [rbp + 0x1b30], rdi
mov qword [rbp + 0x1b38], 0xffffffffffffffff
mov dword [rbp + 0x1b40], edi
xor eax, eax
movups xmmword [rbp + 0x1b48], xmm0
movups xmmword [rbp + 0x1b58], xmm0
movups xmmword [rbp + 0x1b68], xmm0
movups xmmword [rbp + 0x1b78], xmm0
mov qword [rbp + 0x1b88], rax
movdqa xmm0, xmmword [0x1800863c0]
movdqu xmmword [rbp + 0x1ba0], xmm0
mov byte [rbp + 0x1b90], al
mov word [rbp + 0x1bb0], di
mov dword [rbp + 0x1bb4], edi
mov qword [rbp + 0x1bb8], rdi
xorps xmm0, xmm0
movups xmmword [rbp + 0x1bc0], xmm0
movsd qword [rbp + 0x1bd0], xmm2
mov byte [rbp + 0x1bd8], al
mov qword [rbp + 0x1bdc], rdi
lea eax, [r12 + 0x10]
lea r10d, [rdi + 0x6f]
lea r11d, [rdi + 0x5f]
lea r8d, [rdi + 0x65]
mov r14, qword [rsp + 0x70]
movdqa xmm8, xmmword [rbp + 0x1d00]
movdqa xmm6, xmmword [rbp + 0x1d00]
movdqa xmm7, xmmword [rbp + 0x1d00]
mov qword [rsp + 0x38], r14
cmp r12d, eax
jae 0x180068ae2
lea ebx, [r12 - 0xd5]
lea edi, [r9 + 0xf]
lea edx, [rdi + 0x27]
mov r12, qword [rsp + 0x50]
nop dword [rax]
cmp ebx, 0x18
ja case.0x18006887d.7
mov eax, ebx
lea r9, [0x180000000]
mov ecx, dword [r9 + rbx*4 + 0x69eb4]
add rcx, r9
jmp rcx
mov word [rbp + 0x1d6a], r10w
mov dword [rbp + 0x1d6c], 0x76006e
jmp case.0x18006887d.7
mov word [rbp + 0x1d2f], 0x69
jmp case.0x18006887d.7
mov rcx, qword [rsp + 0x38]
add rcx, 0x10
mov qword [rsp + 0x38], rcx
movdqu xmm6, xmmword [rcx]
pand xmm6, xmm8
movdqa xmm0, xmm6
pslld xmm0, 0x12
por xmm0, xmm7
mov rax, qword [rsp + 0x50]
movdqu xmmword [rax], xmm0
add rax, 0x10
mov qword [rsp + 0x50], rax
movdqa xmm7, xmm6
psrld xmm7, 0xe
mov r14, rcx
mov r12, rax
jmp case.0x18006887d.7
mov byte [rbp + 0x1d24], 0x6a
mov eax, dword [0x180083d85]
mov dword [rbp + 0x1d25], eax
movzx eax, byte [0x180083d89]
mov byte [rbp + 0x1d29], al
jmp case.0x18006887d.7
add r12, 0x10
mov qword [rsp + 0x50], r12
movdqa xmm7, xmm6
psrld xmm7, 0xa
jmp case.0x18006887d.7
mov word [rbp + 0x1d20], 0x66
lea rdx, [0x180083dbc]
lea rcx, [rbp + 0x1d21]
mov r8d, 3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov edx, 0x37
lea r11d, [rdx + 0x28]
lea r8d, [rdx + 0x2e]
lea r10d, [rdx + 0x38]
jmp case.0x18006887d.7
movdqu xmm6, xmmword [r14]
pand xmm6, xmm8
movdqa xmm7, xmm6
jmp case.0x18006887d.7
mov rcx, qword [rsp + 0x38]
movdqu xmm1, xmmword [rcx + 0x10]
pand xmm1, xmm8
pslld xmm1, 8
add rcx, 0x20
movdqu xmm6, xmmword [rcx]
pand xmm6, xmm8
movdqa xmm0, xmm6
pslld xmm0, 0x1a
mov qword [rsp + 0x38], rcx
por xmm1, xmm7
movdqa xmm7, xmm1
por xmm7, xmm0
movdqu xmmword [r12], xmm7
mov r14, rcx
jmp case.0x18006887d.7
add r12, 0x10
mov qword [rsp + 0x50], r12
jmp case.0x18006887d.7
movdqa xmm7, xmm6
psrld xmm7, 6
jmp case.0x18006887d.7
mov r14, rsi
mov qword [rsp + 0x38], rsi
movdqa xmm8, xmmword [0x180086500]
jmp case.0x18006887d.7
mov dword [rbp + 0x1d60], 0x5a005f
mov dword [rbp + 0x1d64], 0x370031
mov eax, 0x63
mov word [rbp + 0x1d68], ax
jmp case.0x18006887d.7
mov rcx, qword [rsp + 0x38]
movdqu xmm1, xmmword [rcx + 0x10]
pand xmm1, xmm8
pslld xmm1, 0xc
add rcx, 0x20
mov qword [rsp + 0x38], rcx
movdqu xmm6, xmmword [rcx]
pand xmm6, xmm8
movdqa xmm0, xmm6
pslld xmm0, 0x1e
por xmm1, xmm7
movdqa xmm7, xmm1
por xmm7, xmm0
mov r14, rcx
jmp case.0x18006887d.7
mov rcx, qword [rsp + 0x38]
movdqu xmm1, xmmword [rcx + 0x10]
pand xmm1, xmm8
pslld xmm1, 4
add rcx, 0x20
movdqu xmm6, xmmword [rcx]
pand xmm6, xmm8
movdqa xmm0, xmm6
pslld xmm0, 0x16
jmp 0x1800689a0
mov byte [rbp + 0x1d2a], 0
mov r8d, 2
lea rdx, [0x180083e67]
lea rcx, [rbp + 0x1d20]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
lea rdx, [0x180083e96]
lea rcx, [rbp + 0x1d2c]
jmp 0x180068941
mov dword [rbp + 0x1d70], 0x720065
mov eax, 0x72
inc ebx
sub rdi, 1
jne 0x180068860
mov rbx, qword [rsp + 0x50]
mov r12d, dword [rsp + 0x7c]
lea r9d, [rdi + 1]
mov r15d, r12d
lea edi, [r12 - 0x10]
mov dword [rsp + 0x30], edi
movzx edx, byte [rsp + 0x48]
mov byte [rsp + 0x34], dl
cmp r12d, edi
jbe 0x180069199
lea r14d, [r12 - 0xce]
mov r10d, 0x74
movzx r8d, byte [rsp + 0x48]
mov byte [rsp + 0x40], r8b
movzx r12d, word [rsp + 0x48]
mov dword [rsp + 0x5c], r12d
movzx edi, byte [rsp + 0x48]
mov r13, qword [rbp + 0x1cf0]
mov esi, dword [rsp + 0x68]
mov eax, dword [rsp + 0x30]
nop dword [rax + rax]
cmp r14d, 0x17
ja case.default.0x180068b5c
lea rdx, [0x180000000]
mov ecx, dword [rdx + r14*4 + 0x69f18]
add rcx, rdx
jmp rcx
mov word [rbp + 0x1d74], r10w
mov dword [rbp + 0x1d76], 0x6c005f
mov eax, 0x6f
mov word [rbp + 0x1d7a], ax
mov dword [rbp + 0x1d7c], 0x67006e
mov eax, 0x33
mov word [rbp + 0x1d80], ax
jmp case.0x180068b5c.8
pslld xmm6, 0xa
por xmm6, xmm7
movdqa xmm7, xmm6
mov rcx, qword [rsp + 0x38]
add rcx, 0x10
mov qword [rsp + 0x38], rcx
movdqu xmm6, xmmword [rcx]
pand xmm6, xmm8
jmp case.0x180068b5c.8
movdqu xmmword [rbx], xmm7
add rbx, 0x10
mov qword [rsp + 0x50], rbx
movdqa xmm7, xmm6
psrld xmm7, 8
jmp 0x180068ba4
mov byte [rsp + 0x40], 1
jmp case.0x180068b5c.8
lea r8, [0x18008c138]
mov edx, 0x11c
lea rcx, [rbp + 0xd30]
call fcn.1800572a0
lea rcx, [rbp]
mov rdx, rax
mov r8d, 0xd28
call sub.VCRUNTIME140.dll_memcpy
cmp byte [rbp], 0
jne 0x180068d6f
xor edx, edx
mov ebx, edx
nop word [rax + rax]
cmp ebx, 6
ja case.default.0x180068c3d
mov eax, ebx
lea r8, [0x180000000]
mov ecx, dword [r8 + rax*4 + 0x69f78]
add rcx, r8
jmp rcx
mov eax, 0x61
mov word [rbp + 0x1d4c], ax
mov dword [rbp + 0x1d4e], 0x610074
mov word [rbp + 0x1d52], dx
jmp case.default.0x180068c3d
mov eax, dword [0x180083eba]
mov dword [rbp + 0x1d38], eax
movzx eax, word [0x180083ebe]
mov word [rbp + 0x1d3c], ax
mov word [rbp + 0x1d3e], dx
jmp case.default.0x180068c3d
mov r8d, 2
lea rdx, [0x180083f20]
lea rcx, [rbp + 0x1d38]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 3
lea rdx, [0x180083fbc]
lea rcx, [rbp + 0x1d42]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x180068d36
mov dword [rbp + 0x1d48], 0x440074
mov word [rbp + 0x1d4c], dx
jmp case.default.0x180068c3d
movsx eax, r12w
lea rcx, [rbp + 0x1d38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
xor r9d, r9d
xor edx, edx
lea rcx, [rdx - 1]
lea r8d, [r9 + 4]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov qword [rsp + 0x70], rax
xor edx, edx
movzx ecx, dil
test esi, esi
cmovne edx, ecx
movzx edi, dl
jmp 0x180068d36
mov byte [rsp + 0x48], 1
mov dil, 1
mov r12d, 0x100
mov dword [rsp + 0x5c], r12d
mov r13, 0xffffffffffffffff
xor r8d, r8d
xor edx, edx
mov rcx, r13
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov esi, eax
xor edx, edx
mov r10d, 0x74
inc ebx
lea ecx, [rbx + 0x98]
cmp ecx, 0x9f
jb 0x180068c20
jmp case.0x180068b5c.8
mov byte [rsp + 0x34], 1
mov r8, r9
lea rdx, [0x180081f64]
lea rcx, [rbp + 0x1c10]
call fcn.180054a70
mov r10d, 0x74
mov eax, dword [rsp + 0x30]
dec r15d
dec r14d
cmp r15d, eax
jbe 0x1800691a6
mov rbx, qword [rsp + 0x50]
mov r9d, 1
jmp 0x180068b40
add rbx, 0x10
mov qword [rsp + 0x50], rbx
mov rcx, qword [rsp + 0x38]
movdqu xmm0, xmmword [rcx + 0x10]
pand xmm0, xmm8
pslld xmm0, 2
movdqa xmm7, xmm6
psrld xmm7, 0x10
por xmm7, xmm0
add rcx, 0x20
mov qword [rsp + 0x38], rcx
movdqu xmm6, xmmword [rcx]
pand xmm6, xmm8
jmp case.0x180068b5c.8
xor eax, eax
mov word [rbp + 0x1d94], ax
jmp case.0x180068b5c.8
pslld xmm6, 6
movdqa xmm1, xmm6
mov rcx, qword [rsp + 0x38]
add rcx, 0x10
mov qword [rsp + 0x38], rcx
movdqu xmm6, xmmword [rcx]
pand xmm6, xmm8
movdqa xmm0, xmm6
pslld xmm0, 0x18
por xmm1, xmm7
movdqa xmm7, xmm1
por xmm7, xmm0
jmp case.0x180068b5c.8
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
lea rax, [rbp + 0x1d20]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x180068e40
lea rdx, [rbp + 0x1d20]
lea rcx, [rbp + 0x1bf0]
jmp 0x180068d6a
movdqu xmmword [rbx], xmm7
add rbx, 0x10
mov qword [rsp + 0x50], rbx
jmp case.0x180068b5c.8
movdqa xmm0, xmm6
pslld xmm0, 0x14
por xmm0, xmm7
movdqa xmm7, xmm0
jmp case.0x180068b5c.8
movdqu xmmword [rbx], xmm7
add rbx, 0x10
mov qword [rsp + 0x50], rbx
movdqa xmm7, xmm6
psrld xmm7, 0xc
jmp 0x180068ba4
mov dword [rbp + 0x1d86], 0x7a0074
mov dword [rbp + 0x1d8a], 0x760044
mov dword [rbp + 0x1d8e], 0x5f0033
mov eax, 0x73
mov word [rbp + 0x1d92], ax
jmp case.0x180068b5c.8
psrld xmm6, 2
movdqa xmm0, xmm6
mov rcx, qword [rsp + 0x38]
add rcx, 0x10
mov qword [rsp + 0x38], rcx
movdqu xmm6, xmmword [rcx]
pand xmm6, xmm8
movdqa xmm7, xmm6
pslld xmm7, 0x10
por xmm7, xmm0
movdqu xmmword [rbx], xmm7
jmp case.0x180068b5c.8
mov dword [rbp + 0x1d82], 0x72005f
jmp case.0x180068b5c.8
test dil, dil
je 0x180069139
mov ebx, 0x2b
mov ecx, 0x7464
lea eax, [rbx + 4]
lea esi, [rbx + 0x4f]
mov r8d, 0x3335
lea r9d, [rbx + 0x41]
mov edx, 0x2e55
lea r15d, [rbx + 0x3e]
lea r10d, [rbx + 0x4a]
lea r14d, [rbx + 0x22]
lea r11d, [rbx + 0x42]
mov edi, dword [rsp + 0x68]
lea r12d, [rbx + 0x43]
cmp ebx, 0x1ed
ja 0x180069060
je 0x180069033
cmp ebx, 0x10c
ja 0x180068fd9
je 0x180068fc6
mov eax, ebx
sub eax, 0x2b
je 0x180068fa5
sub eax, 0x4b
je 0x180068f99
cmp eax, 0x4b
mov eax, 0x2f
jne 0x180069123
mov dword [rbp + 0x1d05], 0x6c3335
jmp 0x180069123
mov word [rbp + 0x1d03], cx
jmp 0x18006911e
mov word [rbp + 0x1d00], r15w
mov eax, 0x63
mov word [rbp + 0x1d01], ax
mov word [rbp + 0x1d02], r10w
jmp 0x18006911e
mov word [rbp + 0x1d08], ax
mov word [rbp + 0x1d09], si
jmp 0x180069123
mov eax, ebx
sub eax, 0x157
je 0x180068ffc
cmp eax, 0x4b
mov eax, 0x2f
jne 0x180069123
mov word [rbp + 0x1d12], dx
jmp 0x180069123
mov eax, 0x6f
mov word [rbp + 0x1d0a], ax
mov word [rbp + 0x1d0b], r12w
mov eax, 0x65
mov word [rbp + 0x1d0c], ax
mov dword [rbp + 0x1d0d], 0x5f6e652f
mov word [rbp + 0x1d11], r14w
jmp 0x18006911e
mov dword [rbp + 0x1d14], 0x736572
mov r11d, 0x45
mov word [rbp + 0x1cf0], r11w
mov dword [rbp + 0x1cf1], 0x727078
mov r11d, 0x6d
jmp 0x180069123
mov eax, ebx
sub eax, 0x238
je 0x180069116
sub eax, 0x4b
je 0x180069108
sub eax, 0x4b
je 0x1800690e5
sub eax, 0x4b
je 0x1800690d4
cmp eax, 0x4b
jne 0x18006911e
mov dword [rsp + 0x20], edi
lea r9, [rbp + 0x1ca0]
lea r8, [rbp + 0x1cf0]
lea rdx, [rbp + 0x1d00]
mov rcx, r13
call qword [sym.imp.dbghelp.dll_SymGetFileLineOffsets64]
mov rcx, r13
call qword [sym.imp.dbghelp.dll_SymCleanup]
mov ecx, 0x7464
mov edx, 0x2e55
mov r8d, 0x3335
mov r9d, 0x6c
lea r10d, [r9 + 9]
lea r11d, [r9 + 1]
jmp 0x18006911e
mov eax, 0x65
mov word [rbp + 0x1cfd], ax
lea edi, [rax - 0x5b]
jmp 0x18006911e
mov word [rbp + 0x1cf6], r11w
mov dword [rbp + 0x1cf7], 0x5379723f
mov word [rbp + 0x1cfb], r15w
mov word [rbp + 0x1cfc], si
jmp 0x18006911e
mov eax, 0x65
mov word [rbp + 0x1cf5], ax
jmp 0x18006911e
mov word [rbp + 0x1cf4], r14w
mov eax, 0x2f
add ebx, 0x4b
cmp ebx, 0x3af
jb 0x180068f54
mov r12d, dword [rsp + 0x5c]
xor edx, edx
mov ecx, edx
movzx eax, byte [rsp + 0x48]
mov rdi, qword [rsp + 0x70]
test rdi, rdi
cmovne ecx, eax
test cl, cl
je 0x18006918f
movsx rax, r12w
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf001f
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rbx, rax
test rax, rax
je 0x180069186
mov rcx, rax
call qword [sym.imp.dbghelp.dll_ImageNtHeader]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, 1
jmp 0x180069aec
movzx r10d, byte [rsp + 0x48]
mov byte [rsp + 0x40], r10b
jmp 0x1800691b9
mov r14, qword [rsp + 0x38]
mov r12d, dword [rsp + 0x7c]
mov edi, dword [rsp + 0x30]
movzx edx, byte [rsp + 0x34]
mov r13d, r12d
mov dword [rsp + 0x48], r12d
mov rsi, qword [rbp + 0x1cf0]
cmp r12d, edi
mov rdi, qword [rbp + 0x1cf0]
jbe 0x18006981d
lea ebx, [r12 - 0xce]
mov dword [rsp + 0x60], ebx
mov r10d, 0x1bb
lea r11, [0x18008c1b8]
movzx r9d, word [rsp + 0x48]
mov dword [rsp + 0x5c], r9d
mov r8, qword [rbp + 0x1cf0]
mov qword [rbp - 0x78], r8
movzx edx, byte [rsp + 0x48]
mov dword [rsp + 0x58], edx
mov r12, qword [rbp + 0x1cf0]
movzx r14d, byte [rsp + 0x48]
mov r15, qword [rbp + 0x1cf0]
movzx eax, byte [rsp + 0x48]
mov dword [rsp + 0x78], eax
mov qword [rsp + 0x70], rsi
mov eax, dword [rsp + 0x30]
cmp ebx, 0x17
ja case.default.0x180069251
lea r8, [0x180000000]
mov ecx, dword [r8 + rbx*4 + 0x69f94]
add rcx, r8
jmp rcx
xor eax, eax
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [rbp + 0x1c30]
mov edx, 0xe6
xor ecx, ecx
call fcn.1800113f0
mov dword [rsp + 0x5c], 0x100
mov r8d, 0xfa
lea rdx, [rbp + 0x1bf0]
lea rcx, [rbp + 0x1c60]
call fcn.180017440
mov eax, 0x1bb
mov word [rsp + 0x48], ax
lea r9, [rsp + 0x48]
lea r8, [0x18008c198]
lea rdx, [rbp + 0x1a88]
mov ecx, 0x4b
call fcn.18003a000
mov qword [rbp - 0x78], 0xffffffffffffffff
mov edx, dword [rsp + 0x58]
mov r10d, 0x1bb
lea r11, [0x18008c1b8]
jmp case.0x180069251.8
mov rax, qword [rsp + 0x50]
movdqu xmmword [rax], xmm7
add rax, 0x10
mov qword [rsp + 0x50], rax
movdqa xmm7, xmm6
psrld xmm7, 0xe
mov rcx, qword [rsp + 0x38]
add rcx, 0x10
movdqu xmm6, xmmword [rcx]
pand xmm6, xmm8
jmp 0x1800697a8
mov rax, qword [rbp - 0x20]
test rax, rax
jne 0x180069527
mov r13d, 0x98
nop dword [rax + rax]
mov eax, r13d
sub eax, 0x98
je 0x1800694e5
sub eax, 6
je 0x180069475
sub eax, 6
je 0x18006934a
cmp eax, 6
je 0x18006918f
jmp 0x180069504
test dl, dl
je 0x180069504
mov esi, 0xa6
nop word [rax + rax]
mov eax, esi
sub eax, 0xa2
je 0x1800693f9
sub eax, 1
je 0x1800693e0
sub eax, 1
je 0x1800693bb
sub eax, 1
je 0x180069395
cmp eax, 1
jne 0x18006945e
xor eax, eax
mov r12d, eax
mov r14b, 1
mov dword [rbp - 0x80], eax
jmp 0x18006945e
mov rdi, 0xffffffffffffffff
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1d38], xmm0
movups xmmword [rbp + 0x1d48], xmm0
mov qword [rbp + 0x1d58], rax
jmp 0x18006945e
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov dword [rbp + 0x1d38], 0x28
test eax, eax
jne 0x18006945e
xor r14b, r14b
jmp 0x18006945e
lea r9, [rbp + 0x1d38]
lea r8, [rbp - 0x80]
mov rdx, r12
mov rcx, r15
call qword [sym.imp.dbghelp.dll_SymGetLineFromAddr64]
jmp 0x18006945e
test r14b, r14b
je 0x180069455
mov ebx, 0x48
mov eax, ebx
sub eax, 0x48
je 0x18006941a
cmp eax, 1
jne 0x18006944e
mov rcx, rdi
call qword [sym.imp.dbghelp.dll_SymCleanup]
jmp 0x18006944e
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1ca0], xmm0
movups xmmword [rbp + 0x1cb0], xmm0
mov qword [rbp + 0x1cc0], rax
mov dword [rbp + 0x1ca0], 0x28
lea rdx, [rbp + 0x1ca0]
mov rcx, rdi
call qword [sym.imp.dbghelp.dll_SymGetLineNext64]
inc ebx
cmp ebx, 0x4a
jb 0x180069403
mov rcx, r15
call qword [sym.imp.dbghelp.dll_SymCleanup]
dec esi
cmp esi, 0xa1
ja 0x180069360
mov edx, dword [rsp + 0x58]
jmp 0x180069504
xor r8d, r8d
xor edx, edx
mov rsi, qword [rbp + 0x1cf0]
mov rcx, rsi
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov ebx, eax
xor r8d, r8d
xor edx, edx
mov rcx, r15
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov r8d, dword [rsp + 0x78]
movzx r8d, r8b
test ebx, ebx
mov ecx, 0
cmove r8d, ecx
mov dword [rsp + 0x78], r8d
mov edx, dword [rsp + 0x58]
movzx edx, dl
test eax, eax
cmove edx, ecx
mov dword [rsp + 0x58], edx
test r8b, r8b
je 0x180069504
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [sym.imp.dbghelp.dll_SymEnumerateModules64]
mov rcx, rsi
call qword [sym.imp.dbghelp.dll_SymCleanup]
mov edx, dword [rsp + 0x58]
jmp 0x180069504
mov al, 1
mov dword [rsp + 0x78], eax
movzx edx, al
mov dword [rsp + 0x58], edx
mov qword [rbp + 0x1cf0], 0xffffffffffffffff
mov r15, 0xffffffffffffffff
add r13d, 6
cmp r13d, 0xb0
jb 0x180069320
mov ebx, dword [rsp + 0x60]
mov rsi, qword [rsp + 0x70]
mov r13d, dword [rsp + 0x48]
mov rax, qword [rbp - 0x20]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1800692c0
lea rax, [rbp - 0x70]
mov qword [rbp + 0x1d00], rax
mov eax, dword [0x18008c1e0]
mov dword [rbp + 0x1d08], eax
mov eax, dword [0x18008c1e4]
mov dword [rbp + 0x1d0c], eax
movaps xmm0, xmmword [rbp + 0x1d00]
movdqa xmmword [rbp - 0x10], xmm0
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], eax
lea r9, [rbp - 0x10]
lea r8, [0x180026c70]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rbp - 0x20], rax
movsx ecx, word [rsp + 0x5c]
lea rax, [rbp + 0x1d60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
xor r9d, r9d
xor edx, edx
lea rcx, [rdx - 1]
lea r8d, [r9 + 4]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rsi, rax
mov qword [rsp + 0x70], rax
jmp 0x1800692c0
mov rax, qword [rsp + 0x50]
movdqu xmmword [rax], xmm7
add rax, 0x10
mov qword [rsp + 0x50], rax
jmp case.0x180069251.8
movdqa xmm0, xmm6
pslld xmm0, 0x16
por xmm0, xmm7
movdqa xmm7, xmm0
mov rax, qword [rsp + 0x50]
movdqu xmmword [rax], xmm0
add rax, 0x10
mov qword [rsp + 0x50], rax
jmp case.0x180069251.8
mov word [rsp + 0x48], r10w
mov qword [rsp + 0x20], r11
mov r9d, 0x33
lea r8, [rbp + 0x1a58]
lea rdx, [rsp + 0x48]
xor ecx, ecx
call fcn.18006d210
jmp 0x1800692c0
lea rax, [rbp + 0x1a58]
mov qword [rsp + 0x60], rax
mov rdx, qword [rbp - 0x68]
cmp rdx, qword [rbp - 0x60]
je 0x18006964c
lea rax, [rbp + 0x1a58]
mov qword [rdx], rax
add qword [rbp - 0x68], 8
jmp 0x18006965a
lea r8, [rsp + 0x60]
lea rcx, [rbp - 0x70]
call fcn.1800011f0
mov eax, dword [0x18008c1e0]
mov dword [rsp + 0x60], eax
mov r8d, 0x102
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x60]
call fcn.180043220
jmp 0x1800692c0
mov word [rbp + 0x1c50], r10w
jmp case.0x180069251.8
xor r9d, r9d
xor edx, edx
mov r8d, 0xff
lea rcx, [rbp - 0x70]
call fcn.180015150
lea rax, [rbp + 0x1a88]
mov qword [rsp + 0x68], rax
mov rdx, qword [rbp - 0x68]
cmp rdx, qword [rbp - 0x60]
je 0x1800696c5
lea rax, [rbp + 0x1a88]
mov qword [rdx], rax
add qword [rbp - 0x68], 8
jmp 0x1800696d3
lea r8, [rsp + 0x68]
lea rcx, [rbp - 0x70]
call fcn.1800011f0
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov dword [rsp + 0x68], eax
jmp 0x1800692c0
pslld xmm6, 4
por xmm6, xmm7
movdqa xmm7, xmm6
jmp case.0x180069251.20
lea rax, [0x180008470]
mov qword [rsp + 0x60], rax
lea r9, [rsp + 0x60]
xor r8d, r8d
xor edx, edx
mov ecx, 0xb5
call fcn.180017e20
xor eax, eax
mov ecx, eax
movzx eax, byte [rsp + 0x40]
cmp dword [rsp + 0x68], ecx
cmovne ecx, eax
mov byte [rsp + 0x40], cl
jmp 0x1800692c0
movdqa xmm0, xmm6
pslld xmm0, 0x1c
por xmm0, xmm7
mov rax, qword [rsp + 0x50]
movdqu xmmword [rax], xmm0
add rax, 0x10
mov qword [rsp + 0x50], rax
movdqa xmm7, xmm6
psrld xmm7, 4
jmp case.0x180069251.8
movdqa xmm0, xmm6
mov rcx, qword [rsp + 0x38]
add rcx, 0x10
movdqu xmm6, xmmword [rcx]
pand xmm6, xmm8
movdqa xmm7, xmm6
pslld xmm7, 0x12
por xmm7, xmm0
jmp 0x1800697a8
mov rcx, qword [rsp + 0x38]
add rcx, 0x10
movdqu xmm6, xmmword [rcx]
pand xmm6, xmm8
movdqa xmm0, xmm6
pslld xmm0, 0xe
por xmm0, xmm7
movdqa xmm7, xmm0
mov qword [rsp + 0x38], rcx
mov eax, dword [rsp + 0x30]
dec r13d
mov dword [rsp + 0x48], r13d
dec ebx
mov dword [rsp + 0x60], ebx
cmp r13d, eax
ja 0x180069236
mov r14, qword [rsp + 0x38]
mov rdi, qword [rbp - 0x78]
mov r15d, dword [rsp + 0x5c]
mov r12d, dword [rsp + 0x7c]
movzx edx, byte [rsp + 0x34]
lea r13d, [r12 + 0x10]
cmp r12d, r13d
jae 0x180069ae8
lea ebx, [r12 - 0xd5]
mov r12, qword [rsp + 0x50]
nop dword [rax + rax]
cmp ebx, 0x1c
ja case.0x18006981b.3
lea r8, [0x180000000]
mov ecx, dword [r8 + rbx*4 + 0x69ff4]
add rcx, r8
jmp rcx
movzx r15d, word [rsp + 0x48]
jmp 0x1800697e0
pslld xmm6, 2
movdqa xmm1, xmm6
add r14, 0x10
movdqu xmm6, xmmword [r14]
pand xmm6, xmm8
movdqa xmm0, xmm6
pslld xmm0, 0x14
por xmm1, xmm7
movdqa xmm7, xmm1
por xmm7, xmm0
jmp 0x180069ad2
psrld xmm6, 8
movdqa xmm0, xmm6
add r14, 0x10
movdqu xmm6, xmmword [r14]
pand xmm6, xmm8
movdqa xmm7, xmm6
pslld xmm7, 0xa
por xmm7, xmm0
jmp 0x180069ad2
movdqu xmmword [r12], xmm7
jmp case.0x18006981b.3
mov rcx, qword [rsp + 0x38]
movdqu xmm0, xmmword [rcx + 0x10]
pand xmm0, xmm8
pslld xmm0, 0xc
por xmm0, xmm7
movdqa xmm7, xmm0
add rcx, 0x20
mov qword [rsp + 0x38], rcx
movdqu xmm6, xmmword [rcx]
pand xmm6, xmm8
mov r14, rcx
jmp case.0x18006981b.3
lea rax, [rbp - 0x70]
mov qword [rsp + 0x28], rax
xor eax, eax
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [0x18008c130]
mov edx, 0xba
lea rcx, [rbp + 0x1ac0]
call fcn.180005ea0
mov dword [rsp + 0x20], 0x5c
lea r9, [rbp + 0x1ac0]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800770e0
movzx edx, byte [rsp + 0x34]
jmp case.0x18006981b.3
add r14, 0x10
movdqu xmm6, xmmword [r14]
pand xmm6, xmm8
movdqa xmm0, xmm6
pslld xmm0, 0x1a
por xmm0, xmm7
mov rcx, qword [rsp + 0x50]
movdqu xmmword [rcx], xmm0
add rcx, 0x10
mov qword [rsp + 0x50], rcx
movdqa xmm7, xmm6
psrld xmm7, 6
mov r12, rcx
jmp 0x180069ad2
movdqa xmm7, xmm6
psrld xmm7, 4
jmp case.0x18006981b.3
add r14, 0x10
movdqu xmm6, xmmword [r14]
pand xmm6, xmm8
movdqa xmm0, xmm6
pslld xmm0, 0x1c
por xmm0, xmm7
movdqa xmm7, xmm0
mov rcx, qword [rsp + 0x50]
movdqu xmmword [rcx], xmm0
add rcx, 0x10
mov qword [rsp + 0x50], rcx
mov r12, rcx
jmp 0x180069ad2
mov rcx, qword [rsp + 0x50]
movdqu xmmword [rcx], xmm7
add rcx, 0x10
mov qword [rsp + 0x50], rcx
psrld xmm6, 0xc
movdqa xmm0, xmm6
add r14, 0x10
movdqu xmm6, xmmword [r14]
pand xmm6, xmm8
movdqa xmm7, xmm6
pslld xmm7, 6
por xmm7, xmm0
mov r12, rcx
jmp 0x180069ad2
xor eax, eax
mov ecx, eax
movzx eax, dl
test rsi, rsi
cmovne ecx, eax
movzx edx, cl
mov byte [rsp + 0x34], cl
jmp case.0x18006981b.3
add r14, 0x10
movdqu xmm6, xmmword [r14]
pand xmm6, xmm8
movdqa xmm0, xmm6
pslld xmm0, 0x18
por xmm0, xmm7
movdqa xmm7, xmm0
mov rcx, qword [rsp + 0x50]
movdqu xmmword [rcx], xmm0
add rcx, 0x10
mov qword [rsp + 0x50], rcx
mov r12, rcx
jmp 0x180069ad2
movdqa xmm0, xmm6
pslld xmm0, 0x1e
por xmm0, xmm7
mov rcx, qword [rsp + 0x50]
movdqu xmmword [rcx], xmm0
add rcx, 0x10
mov qword [rsp + 0x50], rcx
movdqa xmm7, xmm6
psrld xmm7, 2
mov r12, rcx
jmp 0x180069ac4
psrld xmm6, 0xa
movdqa xmm0, xmm6
add r14, 0x10
movdqu xmm6, xmmword [r14]
pand xmm6, xmm8
movdqa xmm7, xmm6
pslld xmm7, 8
por xmm7, xmm0
jmp 0x180069ad2
add r14, 0x10
movdqu xmm6, xmmword [r14]
pand xmm6, xmm8
movdqa xmm0, xmm6
pslld xmm0, 0xe
por xmm0, xmm7
movdqa xmm7, xmm0
jmp 0x180069ad2
movdqa xmm0, xmm6
pslld xmm0, 0x10
por xmm0, xmm7
mov rax, qword [rsp + 0x50]
movdqu xmmword [rax], xmm0
add rax, 0x10
mov qword [rsp + 0x50], rax
movdqa xmm7, xmm6
psrld xmm7, 0x10
mov r12, rax
add r14, 0x10
movdqu xmm6, xmmword [r14]
pand xmm6, xmm8
mov qword [rsp + 0x38], r14
inc ebx
lea eax, [rbx + 0xd5]
cmp eax, r13d
jb 0x180069800
mov esi, dword [rsp + 0x68]
lea rcx, [rbp + 0x1b38]
call fcn.180003160
mov rbx, qword [rbp + 0x1b20]
test rbx, rbx
je 0x180069c5f
mov rdi, qword [rbp + 0x1b28]
cmp rbx, rdi
je 0x180069b2c
mov rcx, rbx
call fcn.1800410a0
add rbx, 0x20
cmp rbx, rdi
jne 0x180069b14
mov rbx, qword [rbp + 0x1b20]
mov rdx, qword [rbp + 0x1b30]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x180069b5f
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180069c9d
mov rcx, rbx
call fcn.18007de74
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1b20], xmm0
xor r14d, r14d
mov qword [rbp + 0x1b30], r14
jmp 0x180069c62
cmp byte [rsp + 0x40], 0
je 0x180069b9c
xor edx, edx
mov rcx, rdi
call qword [sym.imp.dbghelp.dll_SymGetModuleBase64]
mov rcx, rdi
call qword [sym.imp.dbghelp.dll_SymCleanup]
cmp byte [rsp + 0x34], 0
je 0x180069c56
movsx rax, r15w
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf001f
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rdi, rax
test rax, rax
jne 0x180069bde
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov esi, eax
jmp 0x180069aec
mov ebx, 0x8a
cmp ebx, 0x8a
je 0x180069c3a
cmp ebx, 0x13f
je 0x180069c06
cmp ebx, 0x1f4
jne 0x180069c48
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x180069c48
xor eax, eax
mov dword [rsp + 0x68], eax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x70]
lea r8, [rbp + 0x1cf0]
mov edx, 4
mov rcx, rdi
call sub.dbghelp.dll_MiniDumpReadDumpStream
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
jmp 0x180069c48
xor eax, eax
mov qword [rbp + 0x1cf0], rax
mov qword [rsp + 0x70], rax
add ebx, 0xb5
cmp ebx, 0x2a9
jb 0x180069be3
xor eax, eax
mov esi, eax
jmp 0x180069aec
xor r14d, r14d
mov rcx, qword [rbp + 0x1b08]
test rcx, rcx
je 0x180069cbb
mov rdx, qword [rbp + 0x1b18]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x180069ca4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180069ca4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18007de74
mov qword [rbp + 0x1b08], r14
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1b10], xmm0
lea rcx, [rbp + 0x1ac8]
call fcn.180003090
nop
mov rbx, qword [rbp - 0x58]
test rbx, rbx
je 0x180069d54
mov rdi, qword [rbp - 0x50]
cmp rbx, rdi
je 0x180069cf5
nop
mov rcx, rbx
call fcn.1800029a0
add rbx, 0x28
cmp rbx, rdi
jne 0x180069ce0
mov rbx, qword [rbp - 0x58]
mov rcx, qword [rbp - 0x48]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x180069d40
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180069d91
mov rcx, rbx
call fcn.18007de74
mov qword [rbp - 0x58], r14
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x50], xmm0
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x180069da9
mov rax, qword [rbp - 0x60]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180069d98
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180069d98
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18007de74
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r14
mov rdx, qword [rbp + 0x1a7a]
cmp rdx, 0x10
jb 0x180069ded
inc rdx
mov rcx, qword [rbp + 0x1a62]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180069de8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180069de8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18007de74
movdqa xmm0, xmmword [0x1800863c0]
movdqu xmmword [rbp + 0x1a72], xmm0
mov byte [rbp + 0x1a62], 0
mov rdx, qword [rbp + 0x1aaa]
cmp rdx, 0x10
jb 0x180069e48
inc rdx
mov rcx, qword [rbp + 0x1a92]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180069e43
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180069e43
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18007de74
movdqa xmm0, xmmword [0x1800863c0]
movdqu xmmword [rbp + 0x1aa2], xmm0
mov byte [rbp + 0x1a92], 0
lea rcx, [rbp + 0x1c60]
call fcn.180002d00
nop
lea rcx, [rbp + 0x1bf0]
call fcn.180002db0
mov eax, esi
mov rcx, qword [rbp + 0x1d98]
xor rcx, rsp
call fcn.18007e380
lea r11, [rsp + 0x1ed0]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret