Function at 0x180008900
Capabilities:
Get common file path
Move file

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1b8]
sub rsp, 0x290
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov r12, rcx
xor r14d, r14d
mov qword [rbp + 0x90], r14
mov qword [rbp + 0xa0], r14
mov qword [rbp + 0xa8], 7
mov word [rbp + 0x90], r14w
lea r8d, [r14 + 0x19]
lea rdx, str.common2_ShellFolder64.exe
lea rcx, [rbp + 0x90]
call fcn.1800037f0
nop
mov qword [rbp + 0xb0], r14
mov qword [rbp + 0xc0], r14
mov qword [rbp + 0xc8], 7
mov word [rbp + 0xb0], r14w
lea r8d, [r14 + 0x1f]
lea rdx, str.common2_ShellFolderDepend64.dll
lea rcx, [rbp + 0xb0]
call fcn.1800037f0
nop
mov qword [rbp + 0xd0], r14
mov qword [rbp + 0xe0], r14
mov qword [rbp + 0xe8], 7
mov word [rbp + 0xd0], r14w
lea r8d, [r14 + 0x14]
lea rdx, str.common2_msvcp140.dll
lea rcx, [rbp + 0xd0]
call fcn.1800037f0
nop
mov qword [rbp + 0xf0], r14
mov qword [rbp + 0x100], r14
mov qword [rbp + 0x108], 7
mov word [rbp + 0xf0], r14w
lea r8d, [r14 + 0x18]
lea rdx, str.common2_vcruntime140.dll
lea rcx, [rbp + 0xf0]
call fcn.1800037f0
nop
mov qword [rbp + 0x110], r14
mov qword [rbp + 0x120], r14
mov qword [rbp + 0x128], 7
mov word [rbp + 0x110], r14w
lea r8d, [r14 + 0x1a]
lea rdx, str.common2_vcruntime140_1.dll
lea rcx, [rbp + 0x110]
call fcn.1800037f0
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r14
mov ecx, 0xa0
call fcn.180014918
mov rbx, rax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rax
lea rcx, [rax + 0xa0]
mov qword [rbp - 0x40], rcx
lea rax, [rbp - 0x50]
mov qword [rbp + 0x1c8], rax
lea rdi, [rbp + 0x90]
mov qword [rbp + 0x68], rbx
mov qword [rbp + 0x70], rbx
lea rax, [rbp - 0x50]
mov qword [rbp + 0x78], rax
nop
mov rdx, rdi
mov rcx, rbx
call fcn.180009e80
add rbx, 0x20
mov qword [rbp + 0x70], rbx
add rdi, 0x20
lea rax, [rbp + 0x130]
cmp rdi, rax
jne 0x180008aa0
mov rdx, rbx
mov rcx, rbx
call fcn.18000a4d0
mov qword [rbp - 0x48], rbx
lea r9, [fcn.180002930]
mov edx, 0x20
lea r8d, [rdx - 0x1b]
lea rcx, [rbp + 0x90]
call fcn.180014988
mov qword [rbp + 0x1c8], r14
lea r9, [rbp + 0x1c8]
xor r8d, r8d
xor edx, edx
lea rcx, [0x180043500]
call qword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
mov ebx, eax
mov rax, 0xffffffffffffffff
test ebx, ebx
js 0x180008b68
mov qword [rbp + 0x28], r14
mov qword [rbp + 0x38], r14
mov qword [rbp + 0x40], 7
mov rdx, qword [rbp + 0x1c8]
mov r8, rax
inc r8
cmp word [rdx + r8*2], 0
jne 0x180008b35
lea rcx, [rbp + 0x28]
call fcn.1800037f0
mov rcx, qword [rbp + 0x1c8]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
movups xmm0, xmmword [rbp + 0x28]
movups xmmword [rbp + 0x48], xmm0
movups xmm1, xmmword [rbp + 0x38]
movups xmmword [rbp + 0x58], xmm1
jmp 0x180008bb6
lea rdx, str.Failed_to_get_Program_Files__x86__path._Error:
lea rcx, [0x18005b8f0]
call fcn.180004ea0
mov rcx, rax
mov edx, ebx
call fcn.180009c30
mov rcx, rax
call fcn.180005120
mov qword [rbp + 0x48], r14
mov qword [rbp + 0x58], r14
mov qword [rbp + 0x60], 7
mov word [rbp + 0x48], r14w
xor r8d, r8d
lea rdx, [0x180051a78]
lea rcx, [rbp + 0x48]
call fcn.1800037f0
nop
lea rcx, [rsp + 0x50]
call fcn.180007920
nop
mov r8, rax
lea rdx, str.Huorong_
lea rcx, [rbp + 0x28]
call fcn.18000a0f0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x180008c17
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008c12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009a3d
call fcn.180014910
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r14w
lea r8, [0x180052fc0]
lea rdx, [rbp + 0x48]
lea rcx, [rsp + 0x30]
call fcn.180009f80
mov rbx, rax
lea r9, [rbp + 0x28]
mov r13, qword [rbp + 0x28]
cmp qword [rbp + 0x40], 8
cmovae r9, r13
mov rcx, qword [rax + 0x10]
mov r8, qword [rax + 0x18]
mov rax, r8
sub rax, rcx
mov rdx, qword [rbp + 0x38]
cmp rdx, rax
ja 0x180008c96
lea rsi, [rcx + rdx]
mov qword [rbx + 0x10], rsi
mov rdi, rbx
cmp r8, 8
jb 0x180008c7f
mov rdi, qword [rbx]
lea rcx, [rdi + rcx*2]
lea r8, [rdx + rdx]
mov rdx, r9
call fcn.180019900
mov word [rdi + rsi*2], r14w
jmp 0x180008caa
mov qword [rsp + 0x20], rdx
mov rcx, rbx
call fcn.18000aca0
mov rbx, rax
mov r13, qword [rbp + 0x28]
mov qword [rbp - 0x18], r14
mov qword [rbp - 8], r14
mov qword [rbp], r14
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x18], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 8], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x180008d17
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008d12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009a43
call fcn.180014910
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r14w
lea rcx, [r12 + 0x60]
lea r8, [rbp - 0x18]
lea rdx, [rbp - 0x50]
call fcn.180011f30
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r14w
mov r8d, 0x17
lea rdx, str.ShellFolderDepend64.dll
lea rcx, [rsp + 0x50]
call fcn.1800037f0
nop
lea r8, [rsp + 0x50]
lea rdx, [rbp - 0x18]
lea rcx, [rbp - 0x70]
call fcn.180007e60
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x180008dc3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008dbe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009a91
call fcn.180014910
lea r8, [0x180052fc0]
lea rdx, [rbp - 0x18]
lea rcx, [rsp + 0x30]
call fcn.180009f80
mov rbx, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x11
jb 0x180008e20
lea rsi, [rcx + 0x11]
mov qword [rbx + 0x10], rsi
mov rdi, rbx
cmp rdx, 8
jb 0x180008e03
mov rdi, qword [rbx]
lea rcx, [rdi + rcx*2]
mov r8d, 0x22
lea rdx, str.ShellFolder64.exe
call fcn.180019900
mov word [rdi + rsi*2], r14w
jmp 0x180008e40
mov qword [rsp + 0x20], 0x11
lea r9, str.ShellFolder64.exe
mov edx, 0x11
mov rcx, rbx
call fcn.18000aca0
mov rbx, rax
mov qword [rbp + 8], r14
mov qword [rbp + 0x18], r14
mov qword [rbp + 0x20], r14
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 8], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x18], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x180008ead
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008ea8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009a49
call fcn.180014910
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r14w
lea rcx, [rbp + 0x150]
call fcn.180007920
mov rbx, rax
lea r8, [0x180052fc0]
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x130]
call fcn.180009f80
nop
mov r9, rbx
mov r8, rax
lea rcx, [rsp + 0x50]
call fcn.18000a790
nop
mov r8, qword [rsp + 0x60]
mov r9, qword [rsp + 0x68]
mov rax, r9
sub rax, r8
lea rcx, [rsp + 0x50]
cmp rax, 4
jb 0x180008f3e
lea rdx, [r8 + 4]
mov qword [rsp + 0x60], rdx
cmp r9, 8
cmovae rcx, qword [rsp + 0x50]
mov rax, qword [str..exe]
mov qword [rcx + r8*2], rax
mov word [rcx + rdx*2], r14w
lea rax, [rsp + 0x50]
jmp 0x180008f58
mov qword [rsp + 0x20], 4
lea r9, str..exe
mov edx, 4
call fcn.18000aca0
mov qword [rsp + 0x70], r14
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x180008fc7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008fc2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009a4f
call fcn.180014910
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r14w
mov rdx, qword [rbp + 0x148]
cmp rdx, 8
jb 0x180009021
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000901c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009a55
call fcn.180014910
mov qword [rbp + 0x140], r14
mov qword [rbp + 0x148], 7
mov word [rbp + 0x130], r14w
mov rdx, qword [rbp + 0x168]
cmp rdx, 8
jb 0x180009081
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000907c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009a5b
call fcn.180014910
mov qword [rbp + 0x160], r14
mov qword [rbp + 0x168], 7
mov word [rbp + 0x150], r14w
lea rdx, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae rdx, qword [rsp + 0x70]
lea rcx, [rbp + 8]
cmp qword [rbp + 0x20], 8
cmovae rcx, qword [rbp + 8]
mov r8d, 1
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
mov r15, qword [rbp - 0x60]
movabs rcx, 0x7ffffffffffffffe
mov rax, rcx
sub rax, r15
cmp rax, 1
jb 0x180009a61
lea r14, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae r14, qword [rbp - 0x70]
xor edx, edx
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x48], rdx
lea rsi, [r15 + 1]
mov ebx, 7
lea rdi, [rsp + 0x30]
lea eax, [rdx + 0xa]
cmp rsi, rbx
jbe 0x1800091aa
mov rbx, rsi
cmp rsi, 8
cmovb rbx, qword [0x1800532a8]
or rbx, 7
cmp rbx, rcx
jbe 0x18000913d
mov rbx, rcx
lea rcx, [rdx - 2]
jmp 0x180009167
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x180009a67
add rcx, rcx
cmp rcx, 0x1000
jb 0x180009193
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180009a67
mov rcx, rax
call fcn.180014918
test rax, rax
je 0x180009a73
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1800091a5
test rcx, rcx
je 0x1800091a2
call fcn.180014918
mov rdi, rax
jmp 0x1800091a5
mov rdi, rdx
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rbx
lea rbx, [r15 + r15]
mov r8, rbx
mov rdx, r14
mov rcx, rdi
call fcn.180019900
movzx eax, word [0x180052fc0]
mov word [rbx + rdi], ax
xor r14d, r14d
mov word [rdi + rsi*2], r14w
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
mov rax, rdx
sub rax, rcx
cmp rax, 5
jb 0x180009227
lea rdi, [rcx + 5]
mov qword [rsp + 0x40], rdi
lea rbx, [rsp + 0x30]
cmp rdx, 8
cmovae rbx, qword [rsp + 0x30]
lea rcx, [rbx + rcx*2]
lea r8d, [r14 + 0xa]
lea rdx, str.1.gif
call fcn.180019900
mov word [rbx + rdi*2], r14w
lea rax, [rsp + 0x30]
jmp 0x180009246
mov qword [rsp + 0x20], 5
lea r9, str.1.gif
mov edx, 5
lea rcx, [rsp + 0x30]
call fcn.18000aca0
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0x68], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0x78], xmm6
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
movq rcx, xmm6
inc rcx
mov eax, 2
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.180014954
mov r8, rax
lea rcx, [rbp + 0x68]
psrldq xmm6, 8
movq rdi, xmm6
cmp rdi, 8
setae sil
movq rbx, xmm7
cmovae rcx, rbx
mov rdx, rax
sub rdx, rcx
movzx eax, word [rcx]
mov word [rdx + rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x1800092b0
lea rcx, [r12 + 0x78]
mov rdx, r8
call fcn.180006e20
test eax, eax
jns 0x1800092e0
mov edx, eax
lea rcx, str.DownloadFile_failed_with_HRESULT:_0x_X_n
call fcn.180006dc0
nop
test sil, sil
je 0x18000931b
lea rdx, [rdi*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x180009312
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009a6d
mov rcx, rbx
call fcn.180014910
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x18000935d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009358
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009a73
call fcn.180014910
lea rax, [r12 + 0x18]
lea rbx, [r12 + 0x48]
cmp rbx, rax
je 0x1800093ac
mov rdi, qword [rax + 8]
mov r14, qword [rax]
sub rdi, r14
mov rsi, qword [rbx]
mov rax, qword [rbx + 0x10]
sub rax, rsi
cmp rdi, rax
jbe 0x180009393
mov rdx, rdi
mov rcx, rbx
call fcn.18000ae70
mov rsi, qword [rbx]
mov r8, rdi
mov rdx, r14
mov rcx, rsi
call fcn.180019900
lea rax, [rdi + rsi]
mov qword [rbx + 8], rax
xor r14d, r14d
mov rcx, r12
call fcn.180009ab0
mov r12, rax
lea rcx, [rbp + 0x68]
call qword [sym.imp.ole32.dll_CoCreateGuid]
test eax, eax
jns 0x180009419
lea rdx, str.Failed_to_create_GUID
lea rcx, [0x18005b8f0]
call fcn.180004ea0
mov rcx, rax
call fcn.180005120
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r14w
xor r8d, r8d
lea rdx, [0x180051a78]
lea rcx, [rsp + 0x30]
call fcn.1800037f0
mov rsi, 0xffffffffffffffff
jmp 0x18000950d
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 0xc0], xmm0
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
mov r8d, 0x40
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x68]
call qword [sym.imp.ole32.dll_StringFromGUID2]
test eax, eax
jne 0x1800094c0
lea rdx, str.Failed_to_convert_GUID_to_string
lea rcx, [0x18005b8f0]
call fcn.180004ea0
mov rcx, rax
call fcn.180005120
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r14w
xor r8d, r8d
lea rdx, [0x180051a78]
lea rcx, [rsp + 0x30]
call fcn.1800037f0
mov rsi, 0xffffffffffffffff
jmp 0x18000950d
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r14w
lea rax, [rbp + 0x90]
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1800094f0
lea rdx, [rbp + 0x90]
lea rcx, [rsp + 0x30]
call fcn.1800037f0
nop
lea r8, [rsp + 0x30]
lea rdx, str.NvProfileUpdaterDaily_
lea rcx, [rbp - 0x38]
call fcn.18000a0f0
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x180009565
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009560
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009a79
call fcn.180014910
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r14w
lea rdx, [rbp - 0x38]
cmp qword [rbp - 0x20], 8
cmovae rdx, qword [rbp - 0x38]
mov r8, qword [rbp - 0x28]
lea rcx, [0x18005b6a0]
call fcn.180006670
mov rcx, rax
call fcn.180005120
lea rdx, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae rdx, qword [rsp + 0x70]
mov r8, qword [rbp - 0x80]
lea rcx, [0x18005b6a0]
call fcn.180006670
mov rcx, rax
call fcn.180005120
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae rdx, qword [rbp - 0x70]
mov r8, qword [rbp - 0x60]
lea rcx, [0x18005b6a0]
call fcn.180006670
mov rcx, rax
call fcn.180005120
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r14w
xor r8d, r8d
lea rdx, [0x180051a78]
lea rcx, [rsp + 0x50]
call fcn.1800037f0
nop
mov rcx, qword [rbp - 0x60]
inc rcx
mov eax, 2
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.180014954
mov qword [rbp + 0x1c8], rax
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae rdx, qword [rbp - 0x70]
mov r8, rax
sub r8, rdx
movzx ecx, word [rdx]
mov word [r8 + rdx], cx
lea rdx, [rdx + 2]
test cx, cx
jne 0x180009651
mov rcx, qword [rsp + 0x60]
inc rcx
mov eax, 2
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.180014954
mov r14, rax
lea rcx, [rsp + 0x50]
mov rdi, qword [rsp + 0x68]
cmp rdi, 8
setae r15b
mov rbx, qword [rsp + 0x50]
cmovae rcx, rbx
mov rdx, rax
sub rdx, rcx
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rcx]
mov word [rdx + rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x1800096b0
mov rcx, qword [rbp - 0x80]
inc rcx
mov eax, 2
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.180014954
mov rsi, rax
lea rdx, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae rdx, qword [rsp + 0x70]
mov r8, rax
sub r8, rdx
nop dword [rax]
nop dword [rax + rax]
movzx ecx, word [rdx]
mov word [r8 + rdx], cx
lea rdx, [rdx + 2]
test cx, cx
jne 0x180009700
mov rcx, qword [rbp - 0x28]
inc rcx
mov eax, 2
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.180014954
lea rdx, [rbp - 0x38]
cmp qword [rbp - 0x20], 8
cmovae rdx, qword [rbp - 0x38]
mov r8, rax
sub r8, rdx
nop word [rax + rax]
movzx ecx, word [rdx]
mov word [r8 + rdx], cx
lea rdx, [rdx + 2]
test cx, cx
jne 0x180009750
mov r9, qword [rbp + 0x1c8]
mov r8, r14
mov rdx, rsi
mov rcx, rax
call r12
nop
test r15b, r15b
je 0x1800097b0
lea rdx, [rdi*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x1800097a7
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009a7f
mov rcx, rbx
call fcn.180014910
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 8
jb 0x1800097f0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800097eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009a85
call fcn.180014910
xor ebx, ebx
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x20], 7
mov word [rbp - 0x38], bx
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x180009843
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000983e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009a8b
call fcn.180014910
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], bx
mov rdx, qword [rbp + 0x20]
cmp rdx, 8
jb 0x180009894
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000988f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009a91
call fcn.180014910
mov qword [rbp + 0x18], rbx
mov qword [rbp + 0x20], 7
mov word [rbp + 8], bx
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x1800098e4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800098df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009a97
call fcn.180014910
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], bx
mov rdx, qword [rbp]
cmp rdx, 8
jb 0x180009934
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000992f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009a9d
call fcn.180014910
mov qword [rbp - 8], rbx
mov qword [rbp], 7
mov word [rbp - 0x18], bx
mov rax, qword [rbp + 0x40]
cmp rax, 8
jb 0x180009984
lea rdx, [rax*2 + 2]
mov rax, r13
cmp rdx, 0x1000
jb 0x18000997b
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009aa3
mov rcx, r13
call fcn.180014910
nop
mov rdx, qword [rbp + 0x60]
cmp rdx, 8
jb 0x1800099c5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800099bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009aa9
call fcn.180014910
nop
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x180009a0c
mov rdx, qword [rbp - 0x48]
call fcn.18000a4d0
mov rdx, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x50]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009a07
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009a37
call fcn.180014910
lea r11, [rsp + 0x290]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1800233b4
nop
call fcn.1800233b4
nop
call fcn.1800233b4
nop
call fcn.1800233b4
nop
call fcn.1800233b4
nop
call fcn.1800233b4
nop
call fcn.1800233b4
int3
call fcn.180001570
int3
call fcn.1800014d0
nop
call fcn.1800233b4
nop
call fcn.1800233b4
nop
call fcn.1800233b4
int3
call fcn.1800233b4
nop
call fcn.1800233b4
nop
call fcn.1800233b4
nop
call fcn.1800233b4
nop
call fcn.1800233b4
nop
call fcn.1800233b4
nop
call fcn.1800233b4
nop
call fcn.1800233b4
int3