Function at 0x18006bdc0
Capabilities:
Create thread

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x748]
sub rsp, 0x848
mov rax, qword [0x1801eef68]
xor rax, rsp
mov qword [rbp + 0x730], rax
mov qword [rsp + 0x78], r9
mov qword [rbp - 0x10], r8
mov qword [rbp - 0x20], rdx
mov qword [rbp - 0x18], rcx
movdqa xmm0, xmmword [0x1801e4850]
movdqa xmmword [rbp + 0x1d0], xmm0
mov byte [rbp + 0x1c0], 0
movdqa xmm1, xmm0
movdqa xmmword [rbp + 0x1f0], xmm0
mov byte [rbp + 0x1e0], 0
movdqa xmmword [rbp + 0x210], xmm0
mov byte [rbp + 0x200], 0
movdqa xmmword [rbp + 0x240], xmm0
mov byte [rbp + 0x230], 0
movdqa xmmword [rbp + 0x260], xmm0
mov byte [rbp + 0x250], 0
xor r13d, r13d
mov qword [rbp + 0x50], r13
mov word [rbp + 0x58], r13w
movdqu xmmword [rbp + 0x6a], xmm0
mov byte [rbp + 0x5a], r13b
mov qword [rbp + 0x20], r13
mov word [rbp + 0x28], r13w
movdqu xmmword [rbp + 0x3a], xmm0
mov byte [rbp + 0x2a], r13b
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], r13
movdqa xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], r13
mov qword [rbp - 0x30], r13
mov qword [rbp + 0x80], r13
mov qword [rbp + 0x88], r13
mov qword [rbp + 0x90], r13
lea ecx, [r13 + 0x30]
call fcn.1800d6a60
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x88], rax
xor r9d, r9d
mov qword [rbp + 0x98], r9
xorps xmm2, xmm2
movsd qword [rbp + 0xa0], xmm2
mov qword [rbp + 0xa8], r9
mov esi, 1
mov dword [rbp + 0xb0], esi
mov qword [rbp + 0xb8], r9
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xc0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xd0], xmm1
movdqa xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], r9
mov qword [rbp + 0xf8], 0xffffffffffffffff
mov dword [rbp + 0x100], r9d
xor eax, eax
movups xmmword [rbp + 0x108], xmm0
movups xmmword [rbp + 0x118], xmm0
movups xmmword [rbp + 0x128], xmm0
movups xmmword [rbp + 0x138], xmm0
mov qword [rbp + 0x148], rax
movdqa xmm0, xmmword [0x1801e4850]
movdqa xmmword [rbp + 0x160], xmm0
mov byte [rbp + 0x150], al
mov word [rbp + 0x170], r9w
mov dword [rbp + 0x174], r9d
mov qword [rbp + 0x178], r9
xorps xmm0, xmm0
movaps xmmword [rbp + 0x180], xmm0
movsd qword [rbp + 0x190], xmm2
mov byte [rbp + 0x198], al
mov qword [rbp + 0x19c], r9
mov r14d, dword [rbp + 0x7b0]
mov ebx, r14d
mov dword [rsp + 0x48], ebx
lea edi, [r14 - 0xb]
mov dword [rsp + 0x40], edi
lea rdx, [0x180000000]
cmp r14d, edi
jbe 0x18006c637
lea r12d, [r14 - 0x104]
mov dword [rsp + 0x58], r12d
movabs r8, 0x4d0053005f0045
mov r13, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x50]
movzx r14d, byte [rsp + 0x48]
mov r15, qword [rsp + 0x50]
mov eax, dword [rsp + 0x40]
nop dword [rax]
cmp r12d, 0xc
ja case.default.0x18006c015
mov ecx, dword [rdx + r12*4 + 0x6cd74]
add rcx, rdx
jmp rcx
mov qword [rbp + 0x2ea], r8
mov word [rbp + 0x2f2], r9w
mov r8, rsi
lea rdx, [0x1801e429c]
lea rcx, [rbp + 0x2d8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov dword [rbp + 0x2f4], 0x49004c
xor r9d, r9d
lea rdx, [0x180000000]
movabs r8, 0x4d0053005f0045
jmp case.0x18006c015.2
mov word [rbp + 0x2f8], r9w
mov r8d, 5
lea rdx, [0x1801e4306]
lea rcx, [rbp + 0x2f8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov dword [rbp + 0x302], 0x47004e
xor r9d, r9d
mov word [rbp + 0x306], r9w
jmp 0x18006c04a
movzx eax, word [0x1801e432c]
mov word [rbp + 0x27a], ax
movzx eax, word [0x1801e4330]
mov word [rbp + 0x27c], ax
movzx eax, byte [0x1801e4332]
mov byte [rbp + 0x27e], al
mov r8, rsi
lea rdx, [0x1801e4344]
lea rcx, [rbp + 0x2d8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x18006c047
movzx eax, word [0x1801e4358]
mov word [rbp + 0x276], ax
movzx eax, byte [0x1801e435a]
mov byte [rbp + 0x278], al
jmp case.0x18006c015.2
mov r8d, 2
lea rdx, [0x1801e16e8]
lea rcx, [rbp + 0x270]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [str.inna]
mov dword [rbp + 0x271], eax
mov eax, 0x6b
mov word [rbp + 0x275], ax
jmp 0x18006c047
mov rax, qword [rbp - 0x20]
mov r13, qword [rax]
mov qword [rsp + 0x60], r13
test r13, r13
je 0x18006c67e
cmp dword [r13], 0x52530a0a
jne 0x18006c67e
mov rax, qword [rbp - 0x18]
movzx eax, byte [rax]
mov byte [rsp + 0x48], al
mov rax, qword [rbp - 0x10]
mov rax, qword [rax]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x78]
mov rax, qword [rax]
mov qword [rsp + 0x50], rax
mov qword [rbp - 0x80], r13
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
mov ecx, 0x79
call fcn.180046eb0
test eax, eax
jne 0x18006c6b6
jmp 0x18006c047
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
lea rax, [rbp + 0x270]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x18006c1d5
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x1c0]
call fcn.180022dc0
mov r8, rsi
lea rdx, [0x1801e0038]
lea rcx, [rbp + 0x1e0]
call fcn.180022dc0
jmp 0x18006c047
mov word [rbp + 0x2da], r9w
mov r8, rsi
lea rdx, [0x1801e4378]
lea rcx, [rbp + 0x2d8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 2
lea rdx, [0x1801e447c]
lea rcx, [rbp + 0x2d8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8, rsi
lea rdx, [0x1801e4494]
lea rcx, [rbp + 0x2d8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
movabs rax, 0x54004100540053
mov qword [rbp + 0x2e2], rax
jmp 0x18006c047
lea r8, [0x1801eee78]
xor edx, edx
mov ecx, 0xdc
call fcn.18000cfd0
xor r9d, r9d
test al, al
jne 0x18006c04a
mov esi, r9d
cmp esi, 8
ja case.default.0x18006c2b0
mov eax, esi
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0x6cda8]
add rcx, rdx
jmp rcx
mov dword [rbp + reloc.SHELL32.dll_SHChangeNotification_Lock], 0x45544152
mov eax, 0x5f
mov word [rbp + 0x288], ax
jmp case.default.0x18006c2b0
test rdi, rdi
jne 0x18006c48d
mov ebx, 0xfb
movabs r13, 0x65006c0075
lea r12d, [rdi + 0x43]
nop dword [rax]
cmp ebx, 0x1dd7d
ja 0x18006c3d9
je 0x18006c3b7
cmp ebx, 0xfb
je 0x18006c382
cmp ebx, 0x9fd1
je 0x18006c33d
cmp ebx, 0x13ea7
jne 0x18006c471
mov eax, dword [0x1801e4534]
mov dword [rbp + 0x2b2], eax
movzx eax, word [0x1801e4538]
mov word [rbp + 0x2b6], ax
jmp 0x18006c471
mov r8d, 2
lea rdx, [0x1801e453c]
lea rcx, [rbp + 0x2a0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov word [rbp + 0x2a8], r12w
movsd xmm0, qword [str.ompa]
movsd qword [rbp + 0x2aa], xmm0
movzx eax, word [0x1801e4550]
mov word [rbp + 0x2b2], ax
jmp 0x18006c46e
mov word [rbp + 0x2a0], r9w
lea rcx, [rbp + 0x2a0]
sub rcx, 2
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x18006c395
mov eax, dword [0x1801dec6c]
mov dword [rcx], eax
movzx eax, word [0x1801dec70]
mov word [rcx + 4], ax
jmp 0x18006c471
lea rcx, [rbp + 0x2a0]
sub rcx, 2
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x18006c3c2
mov eax, dword [0x1801e4530]
mov dword [rcx], eax
jmp 0x18006c471
cmp ebx, 0x27c53
je 0x18006c430
cmp ebx, 0x31b29
jne 0x18006c471
mov r8d, 2
lea rdx, [0x1801e0bc4]
lea rcx, [rbp + 0x2c2]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov dword [rbp + 0x2c4], 0x74
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x310]
call qword [sym.imp.SHELL32.dll_PathYetAnotherMakeUniqueName]
xor r14b, r14b
jmp 0x18006c46e
mov qword [rbp + 0x2b8], r13
lea rcx, [rbp + 0x2a0]
sub rcx, 2
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x18006c442
mov eax, dword [0x1801e4554]
mov dword [rcx], eax
mov r8d, 2
lea rdx, [0x1801de3c8]
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor r9d, r9d
add ebx, 0x9ed6
cmp ebx, 0x3b904
jbe 0x18006c2f0
mov r12d, dword [rsp + 0x58]
mov r13, qword [rsp + 0x60]
test r14b, r14b
je case.default.0x18006c2b0
mov ebx, 0xcb
mov r13d, 1
cmp ebx, 0xcb
je 0x18006c4fd
cmp ebx, 0x2083
je 0x18006c4c4
cmp ebx, 0x403b
jne 0x18006c507
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x18006c507
mov rdx, r13
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x28], 0x104
lea rax, [rbp + 0x310]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [rbp + 0x1b0]
lea edx, [r9 + 2]
lea ecx, [rdx + 0x7d]
call qword [sym.imp.KERNEL32.dll_GetDateFormatA]
jmp 0x18006c507
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
add ebx, 0x1fb8
cmp ebx, 0x5f28
jbe 0x18006c4a1
mov r13, qword [rsp + 0x60]
jmp case.default.0x18006c2b0
mov dword [rbp + 0x294], 0x41425f
mov eax, 0x44
mov word [rbp + 0x297], ax
jmp case.default.0x18006c2b0
mov eax, 0x4f
mov word [rbp + 0x289], ax
mov eax, 0x50
mov word [rbp + 0x28a], ax
mov dword [rbp + 0x28b], 0x5f415245
mov eax, 0x4c
mov word [rbp + 0x28f], ax
jmp case.default.0x18006c2b0
mov dword [rbp + 0x290], 0x454241
mov eax, 0x4c
mov word [rbp + 0x293], ax
jmp case.default.0x18006c2b0
mov eax, PathYetAnotherMakeUniqueName
mov word [rbp + 0x280], ax
mov dword [rbp + 0x281], 0x5f5344
jmp case.default.0x18006c2b0
mov r14b, 1
mov r15, r9
lea rax, [rbp + 0x280]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x100
xor r9d, r9d
xor edx, edx
lea rcx, [rdx - 1]
lea r8d, [r9 + 4]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rdi, rax
jmp case.default.0x18006c2b0
mov rcx, r15
call qword [sym.imp.SHELL32.dll_DragFinish]
inc esi
lea eax, [rsi + 0xc5]
cmp eax, 0xce
mov r9d, 0
jb 0x18006c294
mov ebx, dword [rsp + 0x48]
lea esi, [r9 + 1]
jmp 0x18006c04a
movzx eax, word [0x1801e4358]
mov word [rbp + 0x278], ax
movzx eax, byte [0x1801e435a]
mov byte [rbp + 0x27a], al
mov eax, dword [rsp + 0x40]
dec ebx
mov dword [rsp + 0x48], ebx
dec r12d
mov dword [rsp + 0x58], r12d
cmp ebx, eax
ja 0x18006c000
mov r14d, dword [rbp + 0x7b0]
lea r12d, [r14 + 0xb]
mov ebx, dword [rsp + 0x58]
cmp r14d, r12d
jae case.0x18006c67c.10
lea r15d, [r14 - 0x110]
mov edx, 0x1bb
lea r8, [0x1800088a0]
mov r13, qword [rsp + 0x50]
cmp r15d, 0xa
ja case.default.0x18006c67c
lea rdi, [0x180000000]
mov ecx, dword [rdi + r15*4 + 0x6cdcc]
add rcx, rdi
jmp rcx
mov eax, 2
mov esi, eax
jmp 0x18006c84f
mov rcx, qword [r13 + 0x238]
mov rax, qword [rsp + 0x70]
test rcx, rcx
je 0x18006c6a0
mov qword [rcx], rax
jmp 0x18006c6a7
mov qword [r13 + 0x230], rax
mov rax, qword [rsp + 0x70]
mov qword [r13 + 0x238], rax
mov eax, r9d
mov esi, eax
jmp 0x18006c84f
mov qword [rbp - 0x80], r9
mov word [rbp + 0x220], dx
mov qword [rsp + 0x30], r9
mov qword [rsp + 0x28], r9
mov qword [rsp + 0x20], r9
lea r9, [rbp + 0x200]
xor r8d, r8d
xor edx, edx
mov ecx, 0x8b
call fcn.180055390
jmp 0x18006c828
lea r8, [rbp + 0x1c0]
mov edx, 0x58
lea rcx, [rbp + 0x230]
call fcn.18000cd80
jmp 0x18006c828
mov dword [rsp + 0x58], 0x104
mov qword [rsp + 0x50], r8
lea r8, [rsp + 0x50]
xor edx, edx
mov ecx, reloc.SHELL32.dll_ILAppendID
call fcn.1800117a0
mov r9d, 0x6e
lea r8, [rbp - 0x70]
lea rdx, [0x1801eee70]
lea rcx, [rbp + 0x80]
call fcn.180006190
jmp 0x18006c828
mov word [rsp + 0x48], dx
mov qword [rsp + 0x20], r9
mov r9d, 0x36
lea r8, [0x1801eeed8]
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.1800d4f20
mov dword [rsp + 0x40], 0xffffffff
jmp 0x18006c828
mov word [rsp + 0x48], dx
mov r9d, 0x94
lea r8, [rbp + 0x20]
lea rdx, [0x1801eeef8]
lea rcx, [rsp + 0x48]
call fcn.1800497a0
jmp 0x18006c828
xor r8d, r8d
lea rdx, [rbp + 0x80]
mov ecx, 0xa5
call fcn.1800247a0
lea r9, [rbp - 8]
lea r8, [rbp]
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x2d8]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExW]
mov r9d, dword [rsp + 0x58]
lea r8, [rbp + 0x520]
mov edx, dword [rsp + 0x40]
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.SHELL32.dll_DragQueryFileW]
xor r9d, r9d
mov ebx, r9d
jmp 0x18006c82b
lea rax, [rbp + 0x20]
mov qword [rsp + 0x50], rax
mov rax, qword [rbp - 0x68]
cmp rax, qword [rbp - 0x60]
je 0x18006c816
lea rcx, [rbp + 0x20]
mov qword [rax], rcx
add qword [rbp - 0x68], 8
jmp case.default.0x18006c67c
mov rdx, qword [rbp - 0x68]
lea r8, [rsp + 0x50]
lea rcx, [rbp - 0x70]
call fcn.180002910
xor r9d, r9d
lea r8, [0x1800088a0]
mov edx, 0x1bb
inc r14d
mov dword [rbp + 0x7b0], r14d
inc r15d
cmp r14d, r12d
jb 0x18006c660
mov esi, ebx
lea rcx, [rbp + 0xf8]
call fcn.180004990
mov rbx, qword [rbp + 0xe0]
test rbx, rbx
je 0x18006cb73
mov rdi, qword [rbp + 0xe8]
cmp rbx, rdi
je 0x18006c88f
mov rcx, rbx
call fcn.180017320
add rbx, 0x20
cmp rbx, rdi
jne 0x18006c877
mov rbx, qword [rbp + 0xe0]
mov rdx, qword [rbp + 0xf0]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x18006c8c2
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18006cbb1
mov rcx, rbx
call fcn.1800d6a9c
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
xor r13d, r13d
mov qword [rbp + 0xf0], r13
jmp 0x18006cb76
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x18006c828
mov eax, dword [0x1801eef20]
mov dword [rsp + 0x48], eax
mov r8d, SHTestTokenMembership
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x48]
call fcn.18002ec70
lea rax, [rbp - 0x70]
mov qword [rsp + 0x60], rax
mov eax, dword [0x1801eef20]
mov dword [rsp + 0x68], eax
mov eax, dword [0x1801eef24]
mov dword [rsp + 0x6c], eax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x10], xmm0
xor r13d, r13d
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r13d
lea r9, [rbp + 0x10]
lea r8, [0x180011790]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r13, rax
test rax, rax
jne 0x18006c828
mov r14d, 7
nop dword [rax + rax]
cmp r14d, 7
ja case.default.0x18006c987
mov ecx, r14d
mov edx, dword [rdi + rcx*4 + 0x6cdf8]
add rdx, rdi
jmp rdx
mov dword [rbp + 0x2ac], 0x6f
jmp case.default.0x18006c987
mov eax, dword [0x1801e4558]
mov dword [rbp + 0x2ae], eax
mov eax, dword [0x1801e4560]
mov dword [rbp + 0x2b2], eax
movzx eax, word [0x1801e4564]
mov word [rbp + 0x2b6], ax
mov r8d, 5
lea rdx, str._sock
lea rcx, [rbp + 0x2a0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp case.default.0x18006c987
mov dword [rbp + 0x2a0], 0x74
movsd xmm0, qword [str.ransp]
movsd qword [rbp + 0x2a2], xmm0
mov eax, dword [0x1801e4580]
mov dword [rbp + 0x2aa], eax
jmp case.default.0x18006c987
lea r9, [rbp - 0x10]
lea r8, [rbp - 0x18]
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x2a0]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExW]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp case.default.0x18006c987
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov dword [rsp + 0x30], 2
xor eax, eax
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x78]
mov r8, rdi
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdi, [0x180000000]
jmp case.default.0x18006c987
mov eax, dword [0x1801e4584]
mov dword [rbp + 0x2c0], eax
movzx eax, word [0x1801e4588]
mov word [rbp + 0x2c4], ax
lea rcx, [rbp + 0x2a0]
sub rcx, 2
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x18006cab0
mov eax, dword [0x1801e458c]
mov dword [rcx], eax
movzx eax, word [0x1801e4590]
mov word [rcx + 4], ax
jmp case.default.0x18006c987
mov r8d, 2
lea rdx, [0x1801e4594]
lea rcx, [rbp + 0x2c8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov r8d, 2
lea rdx, [0x1801e4584]
lea rcx, [rbp + 0x2a0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov dword [rbp + 0x2ce], PathMakeUniqueName
mov dword [rbp + 0x2d0], PathMakeUniqueName
dec r14d
lea eax, [r14 + 0x57]
cmp eax, 0x56
ja 0x18006c970
mov r14d, dword [rbp + 0x7b0]
jmp 0x18006c828
mov edx, 0xea
lea rcx, [rbp - 0x70]
call fcn.1800687d0
lea rax, [rbp + 0x50]
mov qword [rsp + 0x50], rax
mov rdx, qword [rbp - 0x68]
cmp rdx, qword [rbp - 0x60]
je 0x18006c81a
lea rax, [rbp + 0x50]
mov qword [rdx], rax
add qword [rbp - 0x68], 8
jmp 0x18006c828
mov esi, 1
jmp 0x18006c84f
xor r13d, r13d
mov rcx, qword [rbp + 0xc8]
test rcx, rcx
je 0x18006cbcf
mov rdx, qword [rbp + 0xd8]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006cbb8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18006cbb8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800d6a9c
mov qword [rbp + 0xc8], r13
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
lea rcx, [rbp + 0x88]
call fcn.1800048c0
nop
mov rbx, qword [rbp - 0x58]
test rbx, rbx
je 0x18006cc6d
mov rdi, qword [rbp - 0x50]
cmp rbx, rdi
je 0x18006cc07
mov rcx, rbx
call fcn.1800041d0
add rbx, 0x28
cmp rbx, rdi
jne 0x18006cbf2
mov rbx, qword [rbp - 0x58]
mov rcx, qword [rbp - 0x48]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x18006cc59
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18006cc59
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1800d6a9c
mov qword [rbp - 0x58], r13
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x50], xmm0
mov rdx, qword [rbp - 0x70]
test rdx, rdx
je 0x18006cc96
mov r8, qword [rbp - 0x60]
sub r8, rdx
sar r8, 3
lea rcx, [rbp - 0x70]
call fcn.18002a310
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r13
mov rdx, qword [rbp + 0x42]
cmp rdx, 0x10
jb 0x18006ccd4
inc rdx
mov rcx, qword [rbp + 0x2a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006cccf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18006cccf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800d6a9c
movdqa xmm0, xmmword [0x1801e4850]
movdqu xmmword [rbp + 0x3a], xmm0
mov byte [rbp + 0x2a], 0
mov rdx, qword [rbp + 0x72]
cmp rdx, 0x10
jb 0x18006cd23
inc rdx
mov rcx, qword [rbp + 0x5a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006cd1e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18006cd1e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800d6a9c
movdqa xmm0, xmmword [0x1801e4850]
movdqu xmmword [rbp + 0x6a], xmm0
mov byte [rbp + 0x5a], 0
lea rcx, [rbp + 0x230]
call fcn.180004530
nop
lea rcx, [rbp + 0x1c0]
call fcn.1800045e0
mov eax, esi
mov rcx, qword [rbp + 0x730]
xor rcx, rsp
call fcn.1800d7250
add rsp, 0x848
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret