Function at 0x18002bf90
Capabilities:
Create thread
Get common file path

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x9f0]
sub rsp, 0xaf0
mov rax, qword [0x18006af78]
xor rax, rsp
mov qword [rbp + 0x9e0], rax
mov r15d, edx
mov dword [rsp + 0x34], edx
mov rsi, rcx
movdqa xmm0, xmmword [0x180064710]
movdqa xmmword [rbp + 0x1d0], xmm0
mov byte [rbp + 0x1c0], 0
movdqa xmm1, xmm0
movdqa xmmword [rbp + 0x1f0], xmm0
mov byte [rbp + 0x1e0], 0
movdqa xmmword [rbp + 0x210], xmm0
mov byte [rbp + 0x200], 0
movdqa xmmword [rbp + 0x240], xmm0
mov byte [rbp + 0x230], 0
movdqa xmmword [rbp + 0x260], xmm0
mov byte [rbp + 0x250], 0
xor r14d, r14d
mov qword [rbp + 0x60], r14
mov word [rbp + 0x68], r14w
movdqu xmmword [rbp + 0x7a], xmm0
mov byte [rbp + 0x6a], r14b
mov qword [rbp + 0x30], r14
mov word [rbp + 0x38], r14w
movdqu xmmword [rbp + 0x4a], xmm0
mov byte [rbp + 0x3a], r14b
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], r14
movdqa xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], r14
mov qword [rbp + 0x90], r14
mov qword [rbp + 0x98], r14
mov qword [rbp + 0xa0], r14
lea ecx, [r14 + 0x30]
call fcn.18005cb78
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x98], rax
xor r8d, r8d
mov qword [rbp + 0xa8], r8
xorps xmm2, xmm2
movsd qword [rbp + 0xb0], xmm2
mov qword [rbp + 0xb8], r8
mov dword [rbp + 0xc0], 1
mov qword [rbp + 0xc8], r8
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xe0], xmm1
movdqa xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r8
mov qword [rbp + 0x108], 0xffffffffffffffff
mov dword [rbp + 0x110], r8d
xor eax, eax
movups xmmword [rbp + 0x118], xmm0
movups xmmword [rbp + 0x128], xmm0
movups xmmword [rbp + 0x138], xmm0
movups xmmword [rbp + 0x148], xmm0
mov qword [rbp + 0x158], rax
movdqa xmm0, xmmword [0x180064710]
movdqa xmmword [rbp + 0x170], xmm0
mov byte [rbp + 0x160], al
mov word [rbp + 0x180], r8w
mov dword [rbp + 0x184], r8d
mov qword [rbp + 0x188], r8
xorps xmm0, xmm0
movaps xmmword [rbp + 0x190], xmm0
movsd qword [rbp + 0x1a0], xmm2
mov byte [rbp + 0x1a8], al
mov qword [rbp + 0x1ac], r8
mov r14d, r15d
lea ebx, [r15 + 0x18]
mov dword [rsp + 0x30], ebx
lea rcx, [0x180000000]
cmp r15d, ebx
jae 0x18002c2d7
lea edi, [r15 - 0x86]
lea r12d, [r8 + 0x6c]
lea r13d, [r8 + 0x72]
mov r11d, 0x74
lea r10d, [r11 + 1]
lea r9d, [r11 - 0x45]
mov r8d, 0x6966
mov edx, 0x7365
cmp edi, 0x2e
ja case.default.0x18002c1e0
movzx eax, byte [rcx + rdi + 0x2ce74]
mov ecx, dword [rcx + rax*4 + 0x2ce10]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
lea rcx, [rbp + 0x680]
sub rcx, 2
nop dword [rax]
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x18002c1f0
mov eax, dword [0x180060b64]
mov dword [rcx], eax
movzx eax, word [0x180060b68]
mov word [rcx + 4], ax
mov dword [rbp + 0x6ae], 0x78
jmp case.0x18002c1e0.24
mov byte [rbp + 0x649], 0
mov r8d, 2
lea rdx, str.dao_Otfc_B
lea rcx, [rbp + 0x649]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp case.0x18002c1e0.24
mov dword [rbp + 0x668], 0x2f006c
jmp case.0x18002c1e0.24
mov dword [rbp + 0x656], 0x740064
jmp case.0x18002c1e0.24
mov dword [rbp + 0x6b0], PathMakeUniqueName
mov eax, dword [0x180060b7c]
mov dword [rbp + 0x6b2], eax
movzx eax, word [0x180060b80]
mov word [rbp + 0x6b6], ax
jmp case.0x18002c1e0.24
mov word [rbp + 0x666], r12w
jmp case.0x18002c1e0.24
mov dword [rbp + 0x674], 0x2e0054
mov word [rbp + 0x678], r13w
jmp case.0x18002c1e0.24
mov dword [rbp + 0x65a], 0x310035
jmp case.0x18002c1e0.24
mov ebx, 0xf0
mov eax, ebx
sub eax, 0xf0
je 0x18002c370
cmp eax, 0x35
jne 0x18002c383
mov ebx, dword [rsp + 0x48]
lea rcx, [rbp + 0x108]
call fcn.180003670
mov rdi, qword [rbp + 0xf0]
test rdi, rdi
je 0x18002cbdd
mov rsi, qword [rbp + 0xf8]
cmp rdi, rsi
je 0x18002c31b
mov rcx, rdi
call fcn.180025330
add rdi, 0x20
cmp rdi, rsi
jne 0x18002c303
mov rdi, qword [rbp + 0xf0]
mov rdx, qword [rbp + 0x100]
sub rdx, rdi
and rdx, 0xffffffffffffffe0
mov rax, rdi
cmp rdx, 0x1000
jb 0x18002c34e
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002cc1b
mov rcx, rdi
call fcn.18005cbb4
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xf0], xmm0
xor r14d, r14d
mov qword [rbp + 0x100], r14
jmp 0x18002cbe0
mov r8, rsi
mov edx, 0x27
xor ecx, ecx
call fcn.180010700
mov byte [rsp + 0x48], al
add ebx, 0x35
cmp ebx, 0x15a
jb 0x18002c2c1
mov ebx, dword [rsp + 0x30]
mov eax, 0x70
mov word [rbp + 0x66c], ax
jmp case.0x18002c1e0.24
mov eax, dword [0x180060bfc]
mov dword [rbp + 0x642], eax
movzx eax, byte [0x180060c00]
mov byte [rbp + 0x646], al
mov byte [rbp + 0x647], 0
jmp case.0x18002c1e0.24
mov word [rbp + 0x65e], r12w
jmp case.0x18002c1e0.24
mov word [rbp + 0x647], dx
jmp case.0x18002c1e0.24
mov word [rbp + 0x640], r8w
mov byte [rbp + 0x642], 0
jmp case.0x18002c1e0.24
mov word [rbp + 0x660], r9w
jmp case.0x18002c1e0.24
mov byte [rbp + 0x64f], 0
movsd xmm0, qword [str._icu]
movsd qword [rbp + 0x680], xmm0
movzx eax, word [0x180060c98]
mov word [rbp + 0x688], ax
jmp case.0x18002c1e0.24
mov byte [rbp + 0x64b], 0
mov r8d, 4
lea rdx, [0x180060cb7]
lea rcx, [rbp + 0x64b]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp case.0x18002c1e0.24
mov dword [rbp + 0x650], 0x630069
mov word [rbp + 0x654], r10w
jmp case.0x18002c1e0.24
movups xmm0, xmmword [str.dt58l_un]
movups xmmword [rbp + 0x688], xmm0
movabs rax, 0x2f00740069
mov qword [rbp + 0x698], rax
jmp case.0x18002c1e0.24
mov word [rbp + 0x66e], r11w
mov dword [rbp + 0x670], 0x50005f
jmp case.0x18002c1e0.24
mov dword [rbp + 0x662], 0x6f0063
jmp case.0x18002c1e0.24
movsd xmm0, qword [str.s_in]
movsd qword [rbp + 0x6a2], xmm0
movzx eax, word [0x180060ce8]
mov word [rbp + 0x6aa], ax
jmp case.0x18002c1e0.24
mov eax, dword [0x180060b7c]
mov dword [rbp + 0x69e], eax
movzx eax, word [0x180060b80]
mov word [rbp + 0x6a2], ax
jmp case.0x18002c1e0.24
mov eax, dword [0x180060cec]
mov dword [rbp + 0x6b6], eax
movzx eax, word [0x180060cf0]
mov word [rbp + 0x6ba], ax
lea rcx, [0x180000000]
inc r14d
inc edi
cmp r14d, ebx
jb 0x18002c1a5
xor r8d, r8d
cmp r15d, ebx
jae 0x18002c2d7
lea ebx, [r15 - 0x9e]
mov dword [rsp + 0x38], ebx
lea r11d, [r8 + 0x65]
mov r10d, 0x1bb
mov ebx, dword [rsp + 0x48]
mov r13d, dword [rsp + 0x50]
movzx esi, byte [rsp + 0x40]
movzx r15d, byte [rsp + 0x40]
mov edi, dword [rsp + 0x50]
mov qword [rsp + 0x78], rdi
mov r12, qword [rbp - 0x80]
movzx r14d, byte [rsp + 0x40]
mov edx, dword [rsp + 0x38]
mov eax, dword [rsp + 0x34]
mov ecx, dword [rsp + 0x30]
nop dword [rax]
cmp edx, 0x17
ja case.default.0x18002c58d
mov eax, edx
lea r9, [0x180000000]
mov ecx, dword [r9 + rax*4 + 0x2cea4]
add rcx, r9
jmp rcx
mov word [rbp + 0x67a], r11w
jmp case.0x18002c58d.17
mov qword [rsp + 0x28], r8
mov dword [rsp + 0x20], r8d
lea r9, [rbp + 0x20]
lea r8, [0x180019d10]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rbp - 0x18], rax
jmp 0x18002cba9
mov ecx, 0x3a
nop dword [rax]
mov eax, ecx
sub eax, 0x3a
je 0x18002c5e2
cmp eax, 1
je case.0x18002caab.6
jmp 0x18002c5e5
mov ebx, r8d
inc ecx
cmp ecx, 0x3c
jb 0x18002c5d0
lea rdx, [rbp + 0x90]
mov ecx, 0x4f
call fcn.180023dc0
jmp 0x18002cba9
mov dword [rsp + 0x50], 0x104
lea r9, [rbp - 0x70]
xor r8d, r8d
xor edx, edx
mov ecx, 0xc0
call fcn.1800462e0
jmp 0x18002cba9
lea rax, [rbp + 0x30]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp - 0x68]
cmp rax, qword [rbp - 0x60]
je 0x18002c643
lea rcx, [rbp + 0x30]
mov qword [rax], rcx
add qword [rbp - 0x68], 8
jmp 0x18002c655
lea r8, [rsp + 0x40]
mov rdx, qword [rbp - 0x68]
lea rcx, [rbp - 0x70]
call fcn.1800015f0
mov eax, dword [0x180069730]
mov dword [rsp + 0x40], eax
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x70]
mov ecx, 0xd1
call fcn.1800429d0
jmp 0x18002cba9
cmp qword [rbp - 0x18], 0
jne case.0x18002c58d.17
mov edi, 0x11d
nop word [rax + rax]
cmp edi, 0x1d808
ja 0x18002c787
je 0x18002c778
cmp edi, 0xd269
ja 0x18002c718
je 0x18002c703
cmp edi, 0x11d
je 0x18002c6f7
cmp edi, 0x3570
je 0x18002c6ea
cmp edi, 0x69c3
je 0x18002c6e1
cmp edi, 0x9e16
jne 0x18002c8ba
mov qword [rbp - 0x80], r8
mov dword [rsp + 0x54], 0x36
jmp 0x18002c8ba
mov qword [rbp + 0x10], r8
jmp 0x18002c8ba
mov dword [rsp + 0x6c], 1
jmp 0x18002c8ba
mov r15b, 1
movzx esi, r15b
jmp 0x18002c8ba
mov dword [rsp + 0x68], 1
mov dword [rsp + 0x64], 0x2381f
jmp 0x18002c8ba
cmp edi, 0x106bc
je 0x18002c76f
cmp edi, 0x13b0f
je 0x18002c751
cmp edi, 0x16f62
je 0x18002c749
cmp edi, 0x1a3b5
jne 0x18002c8ba
mov dword [rsp + 0x5c], 1
jmp 0x18002c8ba
mov r13d, r8d
jmp 0x18002c8ba
mov dword [rsp + 0x60], r8d
xor edx, edx
mov r8d, 0x3d0
lea rcx, [rbp + 0x270]
call sub.VCRUNTIME140.dll_memset
jmp 0x18002c8ba
mov qword [rbp - 0x20], r8
jmp 0x18002c8ba
mov dword [rbp + 0x270], 0x3d0
jmp 0x18002c8ba
cmp edi, 0x2dda7
ja 0x18002c853
je 0x18002c83e
cmp edi, 0x20c5b
je 0x18002c833
cmp edi, 0x240ae
je 0x18002c809
cmp edi, 0x27501
je 0x18002c7f3
cmp edi, 0x2a954
jne 0x18002c8ba
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x5c]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x60]
mov r8d, dword [rsp + 0x64]
mov edx, dword [rsp + 0x68]
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.SHELL32.dll_SHChangeNotifyRegister]
mov dword [rsp + 0x58], eax
jmp 0x18002c8ba
lea rdx, [rbp + 0x270]
mov ecx, dword [rsp + 0x6c]
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
jmp 0x18002c8ba
lea rax, [rbp + 0x6c0]
mov qword [rsp + 0x20], rax
mov r9d, r13d
mov r8, qword [rbp - 0x20]
mov edx, dword [rsp + 0x54]
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
mov dword [rsp + 0x70], eax
jmp 0x18002c8ba
xor eax, eax
mov qword [rbp - 0x10], rax
mov dword [rbp - 8], eax
jmp 0x18002c8ba
mov ecx, r8d
movzx eax, r15b
cmp dword [rsp + 0x70], 0
cmove ecx, eax
movzx r15d, cl
jmp 0x18002c8ba
cmp edi, 0x311fa
je 0x18002c8ad
cmp edi, 0x3464d
je 0x18002c88e
cmp edi, 0x37aa0
je 0x18002c87d
cmp edi, 0x3aef3
jne 0x18002c8ba
mov ebx, 1
jmp case.0x18002caab.6
test sil, sil
je 0x18002c8ba
mov ecx, dword [rsp + 0x58]
call qword [sym.imp.SHELL32.dll_SHChangeNotifyDeregister]
jmp 0x18002c8ba
test r15b, r15b
je 0x18002c8ba
lea r9, [rbp + 0x6c0]
mov r8d, r13d
mov rdx, qword [rbp - 0x20]
mov ecx, dword [rsp + 0x54]
call qword [sym.imp.SHELL32.dll_SHSetFolderPathA]
jmp 0x18002c8ba
movzx esi, sil
cmp dword [rsp + 0x58], 0
cmove esi, r8d
add edi, 0x3453
cmp edi, 0x3e229
mov r8d, 0
jbe 0x18002c690
mov rdi, qword [rsp + 0x78]
jmp 0x18002cba9
lea rax, [rbp + 0x680]
mov rdi, 0xffffffffffffffff
nop word [rax + rax]
inc rdi
cmp word [rax + rdi*2], 0
jne 0x18002c8f0
mov qword [rsp + 0x78], rdi
jmp case.0x18002c58d.17
lea rax, [0x180008990]
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x40]
mov ecx, 0x5c
call fcn.180023dc0
jmp 0x18002cba9
mov qword [rsp + 0x20], r8
xor r9d, r9d
lea r8, [rbp + 0x650]
mov edx, dword [rsp + 0x50]
lea rcx, [rbp + 0x7d0]
call qword [sym.imp.SHELL32.dll_PathMakeUniqueName]
mov edx, edi
lea rcx, [rbp + 0x680]
call qword [sym.imp.SHELL32.dll_DoEnvironmentSubstW]
jmp 0x18002cba9
mov word [rbp + 0x67e], r8w
jmp case.0x18002c58d.17
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x18002cba9
mov word [rsp + 0x40], r10w
lea r9, [rbp + 0x30]
mov r8d, 0x126
lea rdx, [0x180069708]
lea rcx, [rsp + 0x40]
call fcn.180048230
jmp 0x18002cba9
mov word [rbp + 0x220], r10w
mov dword [rsp + 0x28], 0xbb
mov qword [rsp + 0x20], r8
xor r9d, r9d
lea r8, [rbp + 0x200]
xor edx, edx
xor ecx, ecx
call fcn.180015f30
jmp 0x18002cba9
mov eax, 0x73
mov word [rbp + 0x67c], ax
jmp case.0x18002c58d.17
mov r8d, 1
lea rdx, [0x180060cf4]
lea rcx, [rbp + 0x1e0]
call fcn.180025880
jmp 0x18002cba9
lea r8, [rbp + 0x1c0]
mov edx, 0xce
lea rcx, [rbp + 0x230]
call fcn.180010700
jmp 0x18002cba9
lea r9, [0x180069680]
lea r8, [rbp - 0x70]
mov edx, 0xcb
lea rcx, [rbp + 0x90]
call fcn.1800516b0
jmp 0x18002cba9
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
lea rax, [rbp + 0x640]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x18002ca50
lea rdx, [rbp + 0x640]
lea rcx, [rbp + 0x1c0]
call fcn.180025880
jmp 0x18002cba9
xor r8d, r8d
mov edx, 0x12a
lea rcx, [0x180069688]
call fcn.180049ac0
test al, al
jne 0x18002cba9
xor edx, edx
mov edi, edx
cmp edi, 6
ja case.default.0x18002caab
mov eax, edi
lea r8, [0x180000000]
mov ecx, dword [r8 + rax*4 + 0x2cf04]
add rcx, r8
jmp rcx
mov ecx, edx
movzx eax, r14b
test r12, r12
cmovne ecx, eax
movzx r14d, cl
jmp case.default.0x18002caab
lea rcx, [rsp + 0x4c]
call qword [sym.imp.SHELL32.dll_ILFindLastID]
lea rcx, [rsp + 0x48]
call qword [sym.imp.SHELL32.dll_ILClone]
mov r12, rax
jmp case.default.0x18002caab
mov r14b, 1
jmp case.default.0x18002caab
lea rcx, [rbp + 0x18]
call qword [sym.imp.SHELL32.dll_SHGetInstanceExplorer]
jmp case.default.0x18002caab
test r14b, r14b
je 0x18002caf9
mov rcx, r12
call qword [sym.imp.SHELL32.dll_ILFree]
mov ebx, 1
jmp case.default.0x18002caab
xor eax, eax
mov word [rsp + 0x4c], ax
mov byte [rsp + 0x4e], al
mov word [rsp + 0x48], ax
mov byte [rsp + 0x4a], al
inc edi
lea eax, [rdi + 0x4b]
cmp eax, 0x52
mov edx, 0
jb 0x18002ca92
mov rdi, qword [rsp + 0x78]
jmp 0x18002cba9
mov word [rsp + 0x40], r10w
lea r9, [0x1800696e8]
mov r8d, 0x101
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x60]
call fcn.180024410
jmp 0x18002cba9
lea rax, [rbp - 0x70]
mov qword [rbp], rax
mov eax, dword [0x180069730]
mov dword [rbp + 8], eax
mov eax, dword [0x180069734]
mov dword [rbp + 0xc], eax
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp + 0x20], xmm0
jmp case.0x18002c58d.17
lea rax, [rbp + 0x60]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp - 0x68]
cmp rax, qword [rbp - 0x60]
je 0x18002cb97
lea rcx, [rbp + 0x60]
mov qword [rax], rcx
add qword [rbp - 0x68], 8
jmp case.0x18002c58d.17
lea r8, [rsp + 0x40]
mov rdx, qword [rbp - 0x68]
lea rcx, [rbp - 0x70]
call fcn.1800015f0
mov edx, dword [rsp + 0x38]
mov r10d, 0x1bb
mov r11d, 0x65
mov ecx, dword [rsp + 0x30]
mov eax, dword [rsp + 0x34]
inc eax
mov dword [rsp + 0x34], eax
inc edx
mov dword [rsp + 0x38], edx
cmp eax, ecx
jae case.0x18002caab.6
xor r8d, r8d
jmp 0x18002c570
xor r14d, r14d
mov rcx, qword [rbp + 0xd8]
test rcx, rcx
je 0x18002cc39
mov rdx, qword [rbp + 0xe8]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002cc22
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002cc22
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18005cbb4
mov qword [rbp + 0xd8], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
lea rcx, [rbp + 0x98]
call fcn.1800035a0
nop
mov rdi, qword [rbp - 0x58]
test rdi, rdi
je 0x18002cccc
mov rsi, qword [rbp - 0x50]
cmp rdi, rsi
je 0x18002cc6d
mov rcx, rdi
call fcn.180002eb0
add rdi, 0x28
cmp rdi, rsi
jne 0x18002cc58
mov rdi, qword [rbp - 0x58]
mov rcx, qword [rbp - 0x48]
sub rcx, rdi
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rdi
cmp rdx, 0x1000
jb 0x18002ccb8
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002cd09
mov rcx, rdi
call fcn.18005cbb4
mov qword [rbp - 0x58], r14
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x50], xmm0
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x18002cd21
mov rax, qword [rbp - 0x60]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002cd10
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002cd10
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18005cbb4
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r14
mov rdx, qword [rbp + 0x52]
cmp rdx, 0x10
jb 0x18002cd5f
inc rdx
mov rcx, qword [rbp + 0x3a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002cd5a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002cd5a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18005cbb4
movdqa xmm0, xmmword [0x180064710]
movdqu xmmword [rbp + 0x4a], xmm0
mov byte [rbp + 0x3a], 0
mov rdx, qword [rbp + 0x82]
cmp rdx, 0x10
jb 0x18002cdb1
inc rdx
mov rcx, qword [rbp + 0x6a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002cdac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002cdac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18005cbb4
movdqa xmm0, xmmword [0x180064710]
movdqu xmmword [rbp + 0x7a], xmm0
mov byte [rbp + 0x6a], 0
lea rcx, [rbp + 0x230]
call fcn.180003210
nop
lea rcx, [rbp + 0x1c0]
call fcn.1800032c0
mov eax, ebx
mov rcx, qword [rbp + 0x9e0]
xor rcx, rsp
call fcn.18005d0c0
lea r11, [rsp + 0xaf0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret