Function at 0x1800b7180
Capabilities:
Compare security identifiers

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0x100
mov rax, qword [0x180183c70]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov r13, r9
mov qword [rbp - 0x79], r9
xor r9d, r9d
mov dword [rsp + 0x40], r8d
mov r14, rdx
mov qword [rbp - 0x41], rcx
mov rdx, qword [rsp + 0x60]
lea r12d, [r8 + 0xa]
mov qword [rbp - 0x71], rdx
mov r10, rcx
lea ebx, [r9 + 0x41]
mov r15d, r8d
lea r11, [0x180000000]
cmp r8d, r12d
jae 0x1800b73dd
mov r13, qword [rbp + 0x7f]
lea esi, [r8 - 0xa2]
mov ebx, dword [rbp - 0x65]
mov rdi, qword [rbp - 0x79]
nop dword [rax]
cmp esi, 0x24
ja case.0x1800b721d.10
movzx eax, byte [r11 + rsi + 0xb7df4]
mov ecx, dword [r11 + rax*4 + 0xb7dc8]
add rcx, r11
jmp rcx
mov eax, dword [0x1801d4e88]
mov dword [rdx + 4], eax
jmp case.0x1800b721d.10
xor r9d, r9d
mov qword [rbp - 0x51], 0x20
xor r8d, r8d
mov dword [rsp + 0x20], 0xa2
xor edx, edx
lea rcx, [rbp - 0x51]
call fcn.180053a40
mov rdx, rax
mov qword [rbp - 0x71], rax
jmp case.0x1800b721d.10
mov rax, qword [rbp - 0x79]
cmp r13, rax
jne 0x1800b72e8
cmp qword [r10], 0
mov rdi, r9
jbe 0x1800b72e8
jmp 0x1800b7276
mov rax, qword [rbp - 0x79]
mov rax, qword [rax + 0x1c8]
xor r9d, r9d
mov r8, r14
mov edx, 0xa0
mov rcx, qword [rax + rdi*8]
add rcx, 0x78
mov qword [rsp + 0x20], rcx
xor ecx, ecx
call fcn.180090b30
test al, al
je 0x1800b72d8
mov edx, 0xf7
mov eax, edx
sub eax, 0xf7
je 0x1800b72b9
cmp eax, 0x2e
je case.0x1800b7424.162
jmp 0x1800b72cd
mov rax, qword [rbp - 0x79]
mov rax, qword [rax + 0x1c8]
mov rcx, qword [rax + rdi*8]
mov qword [rsp + 0x50], rcx
add edx, 0x2e
cmp edx, 0x153
jb 0x1800b72a5
mov r10, qword [rbp - 0x41]
inc rdi
cmp rdi, qword [r10]
jb 0x1800b7272
mov rdx, qword [rbp - 0x71]
mov rdi, qword [rbp - 0x79]
mov qword [rsp + 0x50], r13
jmp case.0x1800b721d.10
mov word [rdx + 2], r9w
jmp case.0x1800b721d.10
mov eax, 0x41
mov word [rdx], ax
jmp case.0x1800b721d.10
mov eax, ebx
and eax, 7
mov rcx, qword [rdi + rax*8]
test rcx, rcx
je case.0x1800b721d.10
nop
mov edx, 0x2b
mov eax, edx
sub eax, 0x2a
je 0x1800b7367
cmp eax, 1
jne 0x1800b736b
cmp dword [rcx], ebx
jne 0x1800b736b
mov eax, 0x121
nop word [rax + rax]
cmp eax, 0x121
je 0x1800b7354
cmp eax, 0xc46e
je case.0x1800b7424.162
jmp 0x1800b7359
mov qword [rsp + 0x50], rcx
add eax, 0xc34d
cmp eax, 0x1869a
jbe 0x1800b7340
jmp 0x1800b736b
mov rcx, qword [rcx + 0x18]
dec edx
cmp edx, 0x29
ja 0x1800b7325
test rcx, rcx
jne 0x1800b7320
jmp 0x1800b73a6
mov qword [rsp + 0x50], r9
jmp case.0x1800b721d.10
mov qword [rbp - 0x61], r9
jmp case.0x1800b721d.10
mov rax, qword [r14]
lea r8, [rsp + 0x60]
xor r9d, r9d
mov qword [rsp + 0x60], rax
mov edx, 0xfc
mov rcx, r10
call fcn.180032b70
mov rbx, rax
mov rdx, qword [rbp - 0x71]
mov r10, qword [rbp - 0x41]
lea r11, [0x180000000]
inc r15d
inc esi
mov r9d, 0
cmp r15d, r12d
jb 0x1800b7200
mov r13, qword [rbp - 0x79]
lea r11, [0x180000000]
mov r8d, dword [rsp + 0x40]
lea ebx, [r9 + 0x41]
lea eax, [r8 + 0xb]
mov dword [rbp - 0x65], eax
cmp r8d, eax
jae case.0x1800b7424.162
mov r15, qword [rbp - 0x21]
mov r12, qword [rbp - 0x21]
mov rsi, qword [rbp - 0x49]
nop dword [rax]
lea eax, [r8 - 0xa2]
cmp eax, 0x22
ja case.0x1800b7424.172
movzx eax, byte [r11 + rax + 0xb7e48]
mov ecx, dword [r11 + rax*4 + 0xb7e1c]
add rcx, r11
jmp rcx
mov dword [rsp + 0x44], r9d
mov r15, r9
jmp case.0x1800b7424.172
mov r14, qword [rbp - 0x41]
cmp dword [r14], 1
jne 0x1800b7488
mov ebx, 0xb2
mov eax, ebx
sub eax, 0xb2
je 0x1800b7456
cmp eax, 0x22
je case.0x1800b7424.162
jmp 0x1800b746f
lea rdx, [rbp - 0x79]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
neg eax
sbb ecx, ecx
neg ecx
dec ecx
mov dword [rsp + 0x50], ecx
add ebx, 0x22
cmp ebx, 0xf6
jb 0x1800b7442
mov r8d, dword [rsp + 0x40]
mov rdx, qword [rbp - 0x71]
jmp case.0x1800b7424.172
mov edi, 0xf
mov dword [rbp - 0x51], edi
lea eax, [rdi - 0xf]
cmp eax, 0x10
ja case.default.0x1800b74a7
mov ecx, dword [r11 + rax*4 + 0xb7e6c]
add rcx, r11
jmp rcx
cmp dword [rsp + 0x44], 0
jne 0x1800b74ee
mov ebx, 0x3f
mov eax, ebx
sub eax, 0x3f
je 0x1800b74c7
cmp eax, 1
je case.0x1800b7424.162
jmp 0x1800b74df
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0xd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov ecx, dword [rax]
mov dword [rsp + 0x50], ecx
inc ebx
cmp ebx, 0x41
jb 0x1800b74b5
xor r9d, r9d
jmp case.default.0x1800b74a7
mov ecx, 4
mov eax, ecx
sub eax, 4
je 0x1800b7505
cmp eax, 1
je case.0x1800b7424.162
jmp 0x1800b750a
mov dword [rsp + 0x50], r9d
inc ecx
cmp ecx, 6
jb 0x1800b74f3
jmp case.default.0x1800b74a7
mov rcx, qword [0x1801d8138]
mov r14, qword [rsp + 0x60]
test rcx, rcx
je 0x1800b7542
mov rdx, rcx
mov rcx, r14
call qword [sym.imp.ADVAPI32.dll_EqualSid]
test eax, eax
je 0x1800b7542
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r9d, r9d
jmp case.default.0x1800b74a7
mov ebx, 0xbe
cmp ebx, 0xbe
je 0x1800b75b6
cmp ebx, 0x6f54
je 0x1800b75ad
cmp ebx, 0xddea
jne 0x1800b75c8
mov rcx, qword [rbp - 0x61]
lea r8, [0x1801d8130]
mov edx, 2
call qword [sym.imp.ADVAPI32.dll_DuplicateToken]
test eax, eax
jne 0x1800b75c8
xor r9d, r9d
mov edi, 0x1c
mov r8d, dword [rsp + 0x40]
mov r14, qword [rbp - 0x41]
lea r11, [0x180000000]
inc edi
mov ebx, 0x41
mov dword [rbp - 0x51], edi
cmp edi, 0x20
jb 0x1800b7490
mov rdx, qword [rbp - 0x71]
jmp case.0x1800b7424.172
mov qword [0x1801d8138], r14
jmp 0x1800b75c8
mov rcx, qword [0x1801d8138]
test rcx, rcx
je 0x1800b75c8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add ebx, 0x6e96
cmp ebx, 0x14bc2
jbe 0x1800b7547
xor r9d, r9d
jmp case.default.0x1800b74a7
test r12, r12
je case.default.0x1800b74a7
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r9d, r9d
mov r12d, r9d
jmp case.default.0x1800b74a7
cmp dword [r14], 0
jne 0x1800b762f
mov ebx, 0x11d
xor r14d, r14d
mov eax, ebx
sub eax, 0x11d
je 0x1800b7617
cmp eax, 1
je case.0x1800b7424.162
jmp 0x1800b7625
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov dword [rsp + 0x50], r14d
inc ebx
cmp ebx, 0x11f
jb 0x1800b7603
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
lea r9, [rbp - 0x61]
mov edx, 0xf01ff
mov rcx, rax
mov r8d, 1
call qword [sym.imp.ADVAPI32.dll_OpenThreadToken]
test eax, eax
jne 0x1800b74e6
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x3f0
jne 0x1800b74e6
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rbp - 0x61]
mov edx, 0xf01ff
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
jne 0x1800b74e6
xor r9d, r9d
mov qword [0x1801d8130], r9
jmp 0x1800b757c
mov rax, qword [rbp - 0x59]
test rax, rax
je 0x1800b757c
mov r9d, dword [rsp + 0x58]
lea rcx, [rsp + 0x58]
mov edx, dword [rbp - 0x69]
mov r8, rax
mov qword [rsp + 0x20], rcx
mov rcx, r13
call qword [sym.imp.ADVAPI32.dll_GetFileSecurityA]
test eax, eax
jne 0x1800b74e6
jmp 0x1800b7579
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rax + r13], 0
jne 0x1800b76d4
inc rax
cmp rax, 2
jb 0x1800b771b
movsx ecx, byte [r13]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isalpha]
test eax, eax
je 0x1800b7701
cmp byte [r13 + 1], 0x3a
je 0x1800b7787
movzx eax, byte [r13]
cmp al, 0x2f
je 0x1800b770e
cmp al, 0x5c
jne 0x1800b771b
movzx eax, byte [r13 + 1]
cmp al, 0x2f
je 0x1800b7787
cmp al, 0x5c
je 0x1800b7787
mov ebx, 0x123
cmp ebx, 0x123
je 0x1800b776b
cmp ebx, 0x4c29
je 0x1800b773d
cmp ebx, 0x972f
jne 0x1800b7779
mov r13, r12
jmp 0x1800b7779
xor eax, eax
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rax
xor r9d, r9d
mov r8, r12
mov qword [rsp + 0x20], rax
xor edx, edx
mov ecx, 0x89
call fcn.18006de80
test rax, rax
je 0x1800b7579
jmp 0x1800b7779
mov ecx, 0x104
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r12, rax
add ebx, 0x4b06
cmp ebx, 0xe112
jbe 0x1800b7720
mov edx, dword [r14]
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__access]
test eax, eax
je 0x1800b74e6
mov ebx, 0x76
mov eax, ebx
sub eax, 0x76
je 0x1800b77c5
sub eax, 1
je 0x1800b77b7
cmp eax, 1
je case.0x1800b7424.162
jmp 0x1800b77ce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov ecx, dword [rax]
mov dword [rsp + 0x50], ecx
jmp 0x1800b77ce
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
inc ebx
cmp ebx, 0x79
jb 0x1800b77a0
xor r9d, r9d
jmp case.default.0x1800b74a7
mov eax, dword [r14]
test eax, eax
je 0x1800b7905
cmp eax, 6
jg 0x1800b7905
cmp eax, 2
jg 0x1800b7861
mov edx, 0xdb
nop dword [rax + rax]
mov eax, edx
sub eax, 0xdb
je 0x1800b7818
cmp eax, 1
jne 0x1800b7852
mov dword [rsp + 0x48], 0x120116
jmp 0x1800b7852
test r15, r15
je 0x1800b7852
cmp byte [r15 + 0x36], 0
je 0x1800b7852
mov ecx, 0x38
nop dword [rax]
mov eax, ecx
sub eax, 0x38
je 0x1800b7842
cmp eax, 1
je 0x1800b757c
jmp 0x1800b784b
movzx eax, byte [r15 + 0x37]
mov dword [rsp + 0x44], eax
inc ecx
cmp ecx, 0x3a
jb 0x1800b7830
inc edx
cmp edx, 0xdd
jb 0x1800b7800
jmp case.default.0x1800b74a7
cmp eax, 4
jg 0x1800b78a6
test r15, r15
je 0x1800b7899
cmp byte [r15 + 0x34], 0
je 0x1800b7899
mov ecx, 0x30
mov eax, ecx
sub eax, 0x30
je 0x1800b7889
cmp eax, 1
je 0x1800b757c
jmp 0x1800b7892
movzx eax, byte [r15 + 0x35]
mov dword [rsp + 0x44], eax
inc ecx
cmp ecx, 0x32
jb 0x1800b7877
mov dword [rsp + 0x48], 0x2120089
jmp case.default.0x1800b74a7
mov eax, ebx
cmp eax, 0x41
je 0x1800b78be
cmp eax, 0x1cf2
jne 0x1800b78d1
mov dword [rsp + 0x48], 0x12019f
jmp 0x1800b78d1
test r15, r15
je 0x1800b78d1
cmp byte [r15 + 0x34], 0
je 0x1800b78d1
cmp byte [r15 + 0x36], 0
jne 0x1800b78f0
add eax, 0x1cb1
cmp eax, 0x3962
jbe 0x1800b78a8
jmp case.default.0x1800b74a7
movzx ecx, byte [r15 + 0x37]
movzx eax, byte [r15 + 0x35]
and ecx, eax
mov dword [rsp + 0x44], ecx
jmp 0x1800b757c
mov edx, 0xac
nop word [rax + rax]
cmp edx, 0xac
je 0x1800b792a
cmp edx, 0x3dd0
jne 0x1800b7967
mov dword [rsp + 0x48], 0x120089
jmp 0x1800b7967
test r15, r15
je 0x1800b7967
cmp byte [r15 + 0x34], 0
je 0x1800b7967
mov ecx, 0x10d
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x10d
je 0x1800b7954
cmp eax, 1
je 0x1800b757c
jmp 0x1800b795d
movzx eax, byte [r15 + 0x35]
mov dword [rsp + 0x44], eax
inc ecx
cmp ecx, 0x10f
jb 0x1800b7940
add edx, 0x3d24
cmp edx, 0x7a48
jbe 0x1800b7910
jmp case.default.0x1800b74a7
mov rcx, qword [rbp - 0x61]
mov r8d, 0xb4
mov dword [rsp + 0x40], r8d
test rcx, rcx
je 0x1800b7586
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
jmp case.default.0x1800b74a7
mov ecx, dword [rsp + 0x58]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp - 0x59], rax
xor r9d, r9d
jmp case.default.0x1800b74a7
mov r8d, dword [rsp + 0x48]
lea rax, [rsp + 0x44]
mov rdx, qword [0x1801d8130]
lea r9, [rbp - 0x11]
mov rcx, qword [rbp - 0x59]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x25]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x29]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 1]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_AccessCheck]
test eax, eax
je case.0x1800b74a7.27
test r15, r15
je 0x1800b74e6
cmp dword [rsp + 0x48], 0x2120089
jne 0x1800b7a26
mov byte [r15 + 0x34], 1
xor r9d, r9d
movzx eax, byte [rsp + 0x44]
mov byte [r15 + 0x35], al
jmp case.default.0x1800b74a7
cmp dword [rsp + 0x48], 0x120116
jne 0x1800b7a66
mov ecx, 0x80
mov eax, ecx
sub eax, 0x80
je 0x1800b7a4e
cmp eax, 0x53
jne 0x1800b7a53
movzx eax, byte [rsp + 0x44]
mov byte [r15 + 0x37], al
jmp 0x1800b7a53
mov byte [r15 + 0x36], 1
add ecx, 0x53
cmp ecx, 0x126
jb 0x1800b7a35
xor r9d, r9d
jmp case.default.0x1800b74a7
cmp dword [rsp + 0x48], 0x12019f
jne 0x1800b74e6
mov ecx, 0x6b
nop dword [rax]
mov eax, ecx
sub eax, 0x6b
je 0x1800b7aac
sub eax, 1
je 0x1800b7a9c
cmp eax, 1
jne 0x1800b7ab1
movzx eax, byte [rsp + 0x44]
mov byte [r15 + 0x37], al
jmp 0x1800b7ab1
movzx eax, byte [rsp + 0x44]
mov byte [r15 + 0x35], al
mov byte [r15 + 0x36], 1
jmp 0x1800b7ab1
mov byte [r15 + 0x34], 1
inc ecx
cmp ecx, 0x6e
jb 0x1800b7a80
xor r9d, r9d
jmp case.default.0x1800b74a7
mov r8d, 0xb4
mov edi, 0x1b
mov dword [rsp + 0x40], r8d
xor r9d, r9d
jmp 0x1800b7586
lea rdx, [rbp - 0x11]
lea rcx, [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_MapGenericMask]
xor r9d, r9d
jmp case.default.0x1800b74a7
mov rax, qword [rbp - 0x61]
lea r8, [rsp + 0x60]
xor r9d, r9d
mov qword [rsp + 0x60], rax
xor edx, edx
mov ecx, 0x130
call fcn.18013be30
mov qword [rsp + 0x60], rax
xor r9d, r9d
jmp case.default.0x1800b74a7
cmp dword [0x1801d6104], 0
je case.default.0x1800b74a7
mov r14d, 0xea
nop dword [rax]
mov eax, r14d
sub eax, 0xea
je 0x1800b7c1e
cmp eax, 1
jne 0x1800b7c2d
mov qword [rbp - 0x19], rsi
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rax + r13], 0
jne 0x1800b7b52
lea r9, [rbp - 0x19]
mov dword [rbp - 0x39], eax
mov r8, r13
lea rdx, [rbp - 0x39]
mov ecx, 0xe4
call fcn.1800b2560
mov r15, rax
mov rbx, rax
test rax, rax
jne 0x1800b7c2d
test r12, r12
jne 0x1800b7c2d
mov ecx, 0x104
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsp + 0x30], r13
xor r9d, r9d
mov r12, rax
xor edx, edx
xor eax, eax
mov r8, r12
mov qword [rsp + 0x28], rax
mov ecx, 0x89
mov qword [rsp + 0x20], rax
call fcn.18006de80
test rax, rax
je 0x1800b7c2d
mov esi, 0xed
mov eax, esi
sub eax, 0xed
je 0x1800b7c0b
cmp eax, 1
jne 0x1800b7c0e
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x21], rax
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rax + r13], 0
jne 0x1800b7be4
lea r9, [rbp - 0x21]
mov dword [rbp - 0x31], eax
mov r8, r13
lea rdx, [rbp - 0x31]
mov ecx, 0xe4
call fcn.1800b2560
mov r15, rax
jmp 0x1800b7c0e
mov r13, r12
inc esi
cmp esi, 0xef
jb 0x1800b7bc7
mov rsi, qword [rbp - 0x49]
jmp 0x1800b7c2d
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov qword [rbp - 0x49], rax
mov rsi, rax
inc r14d
cmp r14d, 0xec
jb 0x1800b7b30
mov edi, dword [rbp - 0x51]
xor r9d, r9d
jmp case.default.0x1800b74a7
cmp qword [rsp + 0x60], 0
jne case.default.0x1800b74a7
mov ebx, 0x63
nop dword [rax]
cmp ebx, 0x63
je 0x1800b7c84
cmp ebx, 0x11d
je 0x1800b7c7b
cmp ebx, 0x1d7
je 0x1800b757c
jmp 0x1800b7c96
mov qword [0x1801d8138], r9
jmp 0x1800b7c96
mov rcx, qword [0x1801d8138]
test rcx, rcx
je 0x1800b7c96
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add ebx, 0xba
xor r9d, r9d
cmp ebx, 0x291
jb 0x1800b7c60
jmp case.default.0x1800b74a7
mov rax, qword [rbp - 0x59]
test rax, rax
je 0x1800b757c
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r9d, r9d
mov qword [rbp - 0x59], r9
jmp 0x1800b757c
cmp qword [0x1801d8130], 0
je 0x1800b757c
mov edx, dword [rbp - 0x69]
lea rax, [rsp + 0x58]
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rcx, r13
call qword [sym.imp.ADVAPI32.dll_GetFileSecurityA]
test eax, eax
jne 0x1800b7579
xor r9d, r9d
jmp case.default.0x1800b74a7
mov dword [rsp + 0x58], r9d
mov dword [rsp + 0x48], r9d
jmp case.0x1800b7424.172
xorps xmm0, xmm0
mov dword [rbp - 0x29], 0x14
xor eax, eax
movups xmmword [rbp - 1], xmm0
mov dword [rbp + 0xf], eax
jmp case.0x1800b7424.172
mov dword [rbp - 0x11], 0x120089
mov dword [rbp - 0xd], 0x120116
mov dword [rbp - 9], 0x1200a0
mov dword [rbp - 5], 0x1f01ff
jmp case.0x1800b7424.172
mov r12, r9
jmp case.0x1800b7424.172
mov dword [rbp - 0x25], r9d
mov qword [rbp - 0x59], r9
jmp case.0x1800b7424.172
mov dword [rbp - 0x69], 7
jmp case.0x1800b7424.172
movups xmm0, xmmword [r13]
mov qword [rsp + 0x50], rdx
movups xmmword [rdx + 8], xmm0
movsd xmm1, qword [r13 + 0x10]
movsd qword [rdx + 0x18], xmm1
inc r8d
lea r11, [0x180000000]
mov r9d, 0
mov dword [rsp + 0x40], r8d
lea ebx, [r9 + 0x41]
cmp r8d, dword [rbp - 0x65]
jb 0x1800b7400
mov rax, qword [rsp + 0x50]
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.18015c4c0
mov rbx, qword [rsp + 0x150]
add rsp, 0x100
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret