Function at 0x180011cb0
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
mov dword [rax + 0x18], r8d
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x6d8]
sub rsp, 0x7a0
movaps xmmword [rax - 0x48], xmm6
mov rbx, r9
mov rdi, rdx
mov rsi, rcx
xor r14d, r14d
mov qword [rbp + 0x158], r14
mov word [rbp + 0x160], r14w
movdqa xmm0, xmmword [0x18009efc0]
movdqu xmmword [rbp + 0x172], xmm0
mov byte [rbp + 0x162], r14b
mov qword [rbp + 0xe0], r14
mov word [rbp + 0xe8], r14w
movdqu xmmword [rbp + 0xfa], xmm0
mov byte [rbp + 0xea], r14b
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], r14
movdqa xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], r14
mov qword [rbp], r14
mov qword [rbp + 0x190], r14
mov qword [rbp + 0x198], r14
mov qword [rbp + 0x1a0], r14
lea ecx, [r14 + 0x30]
call fcn.18006da94
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x198], rax
xor r8d, r8d
mov qword [rbp + 0x1a8], r8
xorps xmm2, xmm2
movsd qword [rbp + 0x1b0], xmm2
mov qword [rbp + 0x1b8], r8
mov dword [rbp + 0x1c0], 1
mov qword [rbp + 0x1c8], r8
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1d0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1e0], xmm1
movdqa xmmword [rbp + 0x1f0], xmm0
mov qword [rbp + 0x200], r8
mov qword [rbp + 0x208], 0xffffffffffffffff
mov dword [rbp + 0x210], r8d
xor eax, eax
movups xmmword [rbp + 0x218], xmm0
movups xmmword [rbp + 0x228], xmm0
movups xmmword [rbp + 0x238], xmm0
movups xmmword [rbp + 0x248], xmm0
mov qword [rbp + 0x258], rax
movdqa xmm0, xmmword [0x18009efc0]
movdqa xmmword [rbp + 0x270], xmm0
mov byte [rbp + 0x260], al
mov word [rbp + 0x280], r8w
mov dword [rbp + 0x284], r8d
mov qword [rbp + 0x288], r8
xorps xmm0, xmm0
movaps xmmword [rbp + 0x290], xmm0
movsd qword [rbp + 0x2a0], xmm2
mov byte [rbp + 0x2a8], al
mov qword [rbp + 0x2ac], r8
mov edx, dword [rbp + 0x6f0]
mov r14d, edx
imul r13d, edx, 0xf8e
lea r11d, [r8 + 0x6e]
lea r10d, [r8 + 0x65]
cmp edx, r13d
ja 0x180012341
movabs rcx, 0x680063006e0075
movsd xmm6, qword [rsp + 0x58]
mov r15d, dword [rsp + 0x50]
mov r12, qword [rsp + 0x60]
movabs rax, 0x380078002e
lea r9, [0x1800183b0]
cmp r14d, 0x131b8
ja 0x180012019
je 0x18001200f
cmp r14d, 0x6618
ja 0x180011f92
je 0x180011f84
mov eax, r14d
sub eax, 0x48
je 0x180011f61
sub eax, 0x71
je 0x180011f29
sub eax, 0x26
je 0x180011f21
sub eax, 0x39
je 0x180011f15
cmp eax, 0x3218
jne 0x180012324
movsd xmm0, qword [0x180098708]
movsd qword [rbp + 0x5e], xmm0
movzx eax, word [0x180098710]
mov word [rbp + 0x66], ax
mov word [rbp + 0x68], r8w
jmp 0x180012324
mov dword [rbx + 0x3520], r8d
jmp 0x180012324
mov r12, r8
jmp 0x180012324
mov qword [rsp + 0x58], r9
mov eax, dword [rsi]
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x28], rbx
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov r9, rdi
mov r8, qword [rbp + 0x700]
lea rdx, [rsp + 0x48]
mov ecx, 0x9e
call fcn.180016260
jmp 0x180012311
mov r8d, 3
lea rdx, [0x18009867c]
lea rcx, [rbp + 0x58]
call fcn.180074418
xor r8d, r8d
mov word [rbp + 0x5e], r8w
jmp 0x180012314
mov qword [rbp + 0x68], rcx
mov word [rbp + 0x70], r8w
jmp 0x180012324
cmp r14d, 0x9900
je 0x180011fec
cmp r14d, 0x9e8a
je 0x180011fe0
cmp r14d, 0xc710
je 0x180011fd7
cmp r14d, 0xcbe8
je 0x180011fcd
cmp r14d, 0xfed0
jne 0x180012324
mov word [rbp + 0x74], r11w
jmp 0x180012324
mov word [rbp + 0x72], r10w
jmp 0x180012324
mov byte [rbx + 4], 0
jmp 0x180012324
mov qword [rbx + 0x18], r8
mov r15d, r8d
jmp 0x180012324
mov r8d, 1
lea rdx, [0x1800986ce]
lea rcx, [rbp + 0x70]
call fcn.180074418
xor r8d, r8d
mov word [rbp + 0x72], r8w
jmp 0x180012314
mov word [rbp + 0x76], r8w
jmp 0x180012324
cmp r14d, 0x1fd58
ja 0x18001225c
je 0x180012250
cmp r14d, 0x13c35
je 0x1800120d1
cmp r14d, 0x164a0
je 0x1800120b6
cmp r14d, 0x19788
je 0x180012097
cmp r14d, 0x1ca70
je 0x180012078
cmp r14d, 0x1d9e0
jne 0x180012324
lea r8, [rbp + 0x2d0]
mov edx, r15d
mov rcx, r12
call sub.IMM32.dll_ImmGetCandidateWindow
jmp 0x180012311
mov eax, dword [0x180098664]
mov dword [rbp + 0xb4], eax
movzx eax, word [0x180098668]
mov word [rbp + 0xb8], ax
jmp 0x180012324
mov eax, dword [0x1800986d8]
mov dword [rbp + 0xb0], eax
movzx eax, word [0x1800986dc]
mov word [rbp + 0xb4], ax
jmp 0x180012324
mov r8d, 1
lea rdx, [0x180098620]
lea rcx, [rbp + 0x58]
call fcn.1800743d0
jmp 0x180012311
mov ecx, r8d
mov dword [rsp + 0x48], ecx
cmp dword [rbx + 0x28], 0
jbe 0x18001223a
mov esi, 0xac
nop word [rax + rax]
mov eax, esi
sub eax, 0xab
je 0x1800121fc
cmp eax, 1
jne 0x180012209
mov eax, ecx
lea rdx, [rax + rax*2]
shl rdx, 4
mov rcx, qword [rbx + 0x30]
add rcx, rdx
add rdx, qword [rbx + 0x38]
xor r9d, r9d
mov r8d, 0x94
call fcn.180010120
mov qword [rsp + 0x58], rax
mov rdi, qword [rbx]
mov rax, qword [rdi + 8]
mov qword [rsp + 0x60], rax
xor r8d, r8d
mov dword [rsp + 0x68], r8d
mov rcx, rdi
mov edx, dword [rsp + 0x48]
cmp byte [rax + 0x19], r8b
jne 0x180012179
nop
mov qword [rsp + 0x60], rax
cmp dword [rax + 0x20], edx
jae 0x180012165
mov dword [rsp + 0x68], r8d
mov rax, qword [rax + 0x10]
jmp 0x180012173
mov dword [rsp + 0x68], 1
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], r8b
je 0x180012150
cmp byte [rcx + 0x19], r8b
jne 0x180012184
cmp edx, dword [rcx + 0x20]
jae 0x1800121eb
movabs rax, 0x555555555555555
cmp qword [rbx + 8], rax
je 0x1800130d0
mov qword [rbp + 0x10], rbx
mov qword [rbp + 0x18], r8
mov ecx, 0x30
call fcn.18006da94
nop
mov ecx, dword [rsp + 0x48]
mov dword [rax + 0x20], ecx
xor ecx, ecx
mov qword [rax + 0x28], rcx
mov qword [rax], rdi
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rdi
mov word [rax + 0x18], cx
mov qword [rbp + 0x18], rcx
movups xmm0, xmmword [rsp + 0x60]
movaps xmmword [rsp + 0x60], xmm0
mov r8, rax
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.1800313d0
mov rcx, rax
xor r8d, r8d
movsd xmm6, qword [rsp + 0x58]
movsd qword [rcx + 0x28], xmm6
mov ecx, dword [rsp + 0x48]
jmp 0x180012209
movaps xmm0, xmm6
addsd xmm0, qword [rbx + 0x18]
movsd qword [rbx + 0x18], xmm0
dec esi
cmp esi, 0xaa
ja 0x1800120f0
inc ecx
mov dword [rsp + 0x48], ecx
cmp ecx, dword [rbx + 0x28]
jb 0x1800120e2
mov rdi, qword [rbp + 0x6e8]
mov rsi, qword [rbp + 0x6e0]
mov edx, dword [rbp + 0x6f0]
xorps xmm0, xmm0
movups xmmword [rbp + 0x2d0], xmm0
movups xmmword [rbp + 0x2e0], xmm0
jmp 0x18001231a
mov qword [rbp + 0xb8], rax
jmp 0x180012324
cmp r14d, 0x23040
je 0x1800122fb
cmp r14d, 0x26328
je 0x1800122c2
cmp r14d, 0x2778b
je 0x1800122a7
cmp r14d, 0x29610
jne 0x180012324
mov eax, dword [0x1800985f8]
mov dword [rbp + 0xca], eax
movups xmm0, xmmword [str.pneq.pd]
movups xmmword [rbp + 0xce], xmm0
jmp 0x180012324
mov eax, dword [rbx + 0x28]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
movsd xmm1, qword [rbx + 0x18]
divsd xmm1, xmm0
movsd qword [rbx + 0x18], xmm1
jmp 0x180012324
mov r8d, 2
lea rdx, [0x1800986e0]
lea rcx, [rbp + 0xc0]
call fcn.180074418
movsd xmm0, qword [str.mic.]
movsd qword [rbp + 0xc2], xmm0
movzx eax, word [0x1800986f0]
mov word [rbp + 0xca], ax
jmp 0x180012311
mov r8d, 0xa
lea rdx, [rbp + 0xbe]
lea ecx, [r8 - 4]
call fcn.180075370
xor r8d, r8d
mov edx, dword [rbp + 0x6f0]
movabs rcx, 0x680063006e0075
imul eax, edx, 0xb5
add r14d, eax
cmp r14d, r13d
ja 0x180012341
mov r10d, 0x65
lea r11d, [r10 + 9]
jmp 0x180011e96
lea eax, [rdx + 0x15]
mov dword [rsp + 0x50], eax
mov ebx, dword [rsp + 0x50]
cmp edx, eax
jae case.0x180012c5b.0
lea r10, [0x180000000]
lea r9, [0x18000d500]
mov r11d, 0x1bb
lea rdi, [0x1800b9098]
mov esi, 0x20
lea r14d, [rsi + 0x35]
mov r13d, dword [rsp + 0x6c]
mov r15, qword [rsp + 0x60]
mov r12d, dword [rsp + 0x50]
nop word [rax + rax]
lea eax, [rdx - 0x48]
cmp eax, 0x14
ja case.0x1800123a7.77
mov ecx, dword [r10 + rax*4 + 0x130e8]
add rcx, r10
jmp rcx
mov qword [rsp + 0x48], r9
mov esi, 0x10
lea r14d, [rsi + 0x68]
cmp esi, 0x10
ja case.0x1800123cd.1
mov eax, esi
mov ecx, dword [r10 + rax*4 + 0x1313c]
add rcx, r10
jmp rcx
mov eax, dword [rsp + 0x58]
cmp byte [rax + r9], 0xf
jne case.0x1800123cd.1
mov edx, r8d
cmp edx, 5
ja case.0x1800123f3.0
mov eax, edx
mov ecx, dword [r10 + rax*4 + 0x13180]
add rcx, r10
jmp rcx
lea rax, [r9 + r13]
mov qword [0], rax
jmp case.0x1800123f3.0
mov dword [0], r12d
jmp case.0x1800123f3.0
mov r12d, dword [r13 + r9]
inc edx
lea eax, [rdx + 0x41]
cmp eax, 0x47
jb 0x1800123e1
jmp case.0x1800123cd.1
mov rdx, qword [0x1800ba0e0]
cmp rdx, qword [0x1800ba0e8]
je 0x180012441
mov qword [rdx], r9
add qword [0x1800ba0e0], 8
jmp case.0x1800123cd.1
lea r8, [rsp + 0x48]
lea rcx, [0x1800ba0d8]
call fcn.180002280
jmp 0x18001259f
mov dword [rbp - 0x80], 1
mov qword [rsp + 0x58], r8
jmp case.0x1800123cd.1
mov edx, dword [rbp - 0x80]
mov ecx, dword [rbp - 0x78]
call sub.urlmon.dll_CoInternetIsFeatureEnabled
jmp 0x18001259f
lea r8, [rsp + 0x58]
lea rdx, [rbp + 0x480]
mov ecx, dword [rbp - 0x7c]
call sub.urlmon.dll_CreateFormatEnumerator
mov dword [rbp - 0x74], eax
jmp 0x18001259f
mov dword [rbp - 0x7c], 0xa
mov word [rbp + 0x340], r8w
xor edx, edx
mov r8d, 0x138
lea rcx, [rbp + 0x348]
call fcn.1800701a0
lea rax, [rbp + 0x480]
lea rcx, [rbp + 0x340]
mov edx, 2
nop word [rax + rax]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rdx, 1
jne 0x1800124d0
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
jmp 0x18001259f
mov byte [rsp + 0x40], 1
mov dword [rbp - 0x78], r8d
jmp case.0x1800123cd.1
mov ecx, r8d
movzx eax, byte [rsp + 0x40]
cmp dword [rbp - 0x74], 0
cmove ecx, eax
mov byte [rsp + 0x40], cl
cmp cl, 0
je case.0x1800123cd.1
mov edi, 0x68
nop word [rax + rax]
mov eax, edi
sub eax, 0x67
je 0x18001258d
cmp eax, 1
jne 0x180012598
xor r8d, r8d
mov rdx, qword [rsp + 0x58]
xor ecx, ecx
call sub.urlmon.dll_RegisterFormatEnumerator
jmp 0x180012598
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + 0x10]
dec edi
cmp edi, 0x66
ja 0x180012570
lea r9, [0x18000d500]
lea r10, [0x180000000]
dec r14d
dec esi
xor r8d, r8d
cmp r14d, 0x6c
jbe case.0x1800123cd.0
jmp 0x1800123b7
mov dword [rbp - 0x58], r8d
mov qword [rsp + 0x28], r8
mov dword [rsp + 0x20], r8d
lea r9, [rbp + 0x2c0]
lea r8, [0x180025320]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rbp + 0x120], rax
jmp 0x180012df6
mov dword [rbp - 0x50], r8d
mov word [rsp + 0x48], r11w
mov qword [rsp + 0x30], rdi
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x3b
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x158]
call fcn.180037c50
jmp 0x180012df6
mov edx, 0x124
lea rcx, [rbp - 0x40]
call fcn.1800239e0
jmp 0x180012df6
xor r9d, r9d
lea r8, [rbp + 0x190]
lea edx, [r9 + 0x32]
xor ecx, ecx
call fcn.18000a400
jmp 0x180012df6
mov qword [rbp + 0x130], r8
jmp case.0x1800123a7.77
cmp byte [rsp + 0x42], 0
je 0x180012686
mov rcx, qword [rbp + 0xa8]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov edx, dword [rbp + 0x6f0]
xor r8d, r8d
mov ebx, r8d
jmp case.0x1800123a7.77
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x48], rax
mov rax, qword [rbp - 0x38]
cmp rax, qword [rbp - 0x30]
je 0x1800126bf
lea rcx, [rbp + 0xe0]
mov qword [rax], rcx
add qword [rbp - 0x38], 8
mov qword [rbp + 0xa8], r8
jmp case.0x1800123a7.77
lea r8, [rsp + 0x48]
mov rdx, qword [rbp - 0x38]
lea rcx, [rbp - 0x40]
call fcn.180002280
mov edx, dword [rbp + 0x6f0]
xor r8d, r8d
mov qword [rbp + 0xa8], r8
jmp case.0x1800123a7.77
lea rax, [rbp + 0x158]
mov qword [rsp + 0x48], rax
mov rax, qword [rbp - 0x38]
cmp rax, qword [rbp - 0x30]
je 0x180012710
lea rcx, [rbp + 0x158]
mov qword [rax], rcx
add qword [rbp - 0x38], 8
jmp case.0x1800123a7.77
lea r8, [rsp + 0x48]
mov rdx, qword [rbp - 0x38]
lea rcx, [rbp - 0x40]
call fcn.180002280
jmp 0x180012df6
mov eax, dword [0x1800b90e0]
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x30], r8
lea rax, [rbp - 0x40]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r8
lea r9, [rsp + 0x48]
xor edx, edx
xor ecx, ecx
lea r8d, [rdx + 0x31]
call fcn.180021750
jmp 0x180012df6
mov edx, 0x7a
lea rcx, [0x1800b9038]
call fcn.18001deb0
test al, al
jne 0x180012df6
mov edi, 0x6a
nop dword [rax]
cmp edi, 0x3a40e
ja 0x180012992
je 0x180012986
cmp edi, 0x1d23c
ja 0x1800128d3
je 0x1800128ba
cmp edi, 0xcf72
ja 0x180012847
je 0x180012836
cmp edi, 0x6a
je 0x180012829
cmp edi, 0x342c
je 0x18001280a
xor r8d, r8d
cmp edi, 0x67ee
je 0x1800127fd
cmp edi, 0x9bb0
jne 0x180012bea
movsd xmm0, qword [0x180098762]
movsd qword [rbp + 0x88], xmm0
movzx eax, word [0x18009876a]
mov word [rbp + 0x90], ax
jmp 0x180012bea
mov word [rbp + 0x88], r8w
jmp 0x180012bea
mov eax, dword [0x1800987b2]
mov dword [rbp + 0x82], eax
movzx eax, word [0x1800987b6]
mov word [rbp + 0x86], ax
jmp 0x180012be7
mov word [rbp + 0x80], r14w
jmp 0x180012be7
mov eax, 0x43
mov word [rbp + 0x92], ax
jmp 0x180012be7
cmp edi, 0x10334
je 0x18001289b
cmp edi, 0x136f6
je 0x18001288a
xor r8d, r8d
cmp edi, 0x16ab8
je 0x18001287d
cmp edi, 0x19e7a
jne 0x180012bea
mov dword [rbp + 0x9c], 0x74006e
jmp 0x180012bea
mov word [rbp + 0x9c], r8w
jmp 0x180012bea
mov eax, 0x65
mov word [rbp + 0x9a], ax
jmp 0x180012be7
mov eax, dword [0x180098722]
mov dword [rbp + 0x94], eax
movzx eax, word [0x180098726]
mov word [rbp + 0x98], ax
jmp 0x180012be7
xor r8d, r8d
mov word [rbp + 0xa0], r8w
mov eax, 0x75
mov word [rbp + 0x20], ax
jmp 0x180012bea
cmp edi, 0x2d506
ja 0x180012944
je 0x180012938
cmp edi, 0x205fe
je 0x18001292a
cmp edi, 0x239c0
je 0x18001291e
cmp edi, 0x26d82
je 0x180012912
xor r8d, r8d
cmp edi, 0x2a144
jne 0x180012bea
mov eax, 0x63
mov word [rbp + 0x2c], ax
jmp 0x180012bea
mov dword [rbp + 0x28], 0x650070
jmp 0x180012be7
mov dword [rbp + 0x24], 0x780065
jmp 0x180012be7
mov eax, 0x6e
mov word [rbp + 0x22], ax
jmp 0x180012be7
mov dword [rbp + 0x2e], 0x650074
jmp 0x180012be7
cmp edi, 0x308c8
je 0x180012978
cmp edi, 0x33c8a
je 0x18001296f
xor r8d, r8d
cmp edi, 0x3704c
jne 0x180012bea
mov dword [rbp + 0x36], 0x730075
jmp 0x180012bea
mov word [rbp + 0x34], si
jmp 0x180012be7
mov eax, 0x64
mov word [rbp + 0x32], ax
jmp 0x180012be7
mov dword [rbp + 0x3a], 0x200065
jmp 0x180012be7
cmp edi, 0x5dd64
ja 0x180012a81
je 0x180012a75
cmp edi, 0x4a6d8
ja 0x180012a15
je 0x180012a07
cmp edi, 0x3d7d0
je 0x1800129fb
cmp edi, 0x40b92
je 0x1800129ef
cmp edi, 0x43f54
je 0x1800129e3
xor r8d, r8d
cmp edi, 0x47316
jne 0x180012bea
mov eax, 0x6e
mov word [rbp + 0x4a], ax
jmp 0x180012bea
mov dword [rbp + 0x46], 0x65006c
jmp 0x180012be7
mov dword [rbp + 0x42], 0x2e0020
jmp 0x180012be7
mov dword [rbp + 0x3e], 0x66006f
jmp 0x180012be7
mov eax, 0x67
mov word [rbp + 0x4c], ax
jmp 0x180012be7
xor r8d, r8d
cmp edi, 0x4da9a
je 0x180012a60
cmp edi, 0x50e5c
je 0x180012a52
cmp edi, 0x5421e
je 0x180012a48
cmp edi, 0x5a9a2
jne 0x180012bea
mov qword [rbp + 0x118], r8
jmp 0x180012bea
mov word [rbp + 0x56], r8w
jmp 0x180012bea
mov eax, 0x29
mov word [rbp + 0x54], ax
jmp 0x180012bea
mov dword [rbp + 0x4e], 0x680074
mov eax, 0x28
mov word [rbp + 0x52], ax
jmp 0x180012bea
mov dword [rbp - 0x68], 0x8000000
jmp 0x180012be7
cmp edi, 0x6e02e
ja 0x180012b65
je 0x180012b09
cmp edi, 0x61126
je 0x180012ae4
cmp edi, 0x644e8
je 0x180012ace
cmp edi, 0x678aa
je 0x180012ac2
cmp edi, 0x6ac6c
jne 0x180012be7
mov dword [rbp + 0x138], 0xd
jmp 0x180012be7
xor r8d, r8d
mov dword [rbp - 0x70], r8d
jmp 0x180012bea
mov dword [rbp - 0x6c], 0x104
mov dword [rbp + 0x144], 8
jmp 0x180012be7
xor r8d, r8d
mov dword [rbp - 0x64], r8d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x138], xmm0
mov qword [rbp + 0x148], rax
mov dword [rbp + 0x150], eax
jmp 0x180012bea
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x2f0], xmm0
movups xmmword [rbp + 0x300], xmm0
movups xmmword [rbp + 0x310], xmm0
movups xmmword [rbp + 0x320], xmm0
mov dword [rbp + 0x330], eax
xor r14d, r14d
mov dword [rsp + 0x30], r14d
lea rax, [rbp - 0x70]
mov qword [rsp + 0x28], rax
mov eax, dword [rbp - 0x6c]
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x480]
mov r8d, dword [rbp - 0x68]
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x80]
call sub.urlmon.dll_CoInternetCombineUrl
jmp 0x180012be1
cmp edi, 0x713f0
je 0x180012ba0
cmp edi, 0x747b2
je 0x180012b83
cmp edi, 0x77b74
je case.0x180012c5b.0
jmp 0x180012be7
lea r8, [rbp + 0x2f0]
mov edx, dword [rbp - 0x64]
mov rcx, qword [rbp + 0x118]
call sub.IMM32.dll_ImmGetRegisterWordStyleW
mov ebx, 1
jmp 0x180012be7
xor r14d, r14d
mov qword [rsp + 0x38], r14
lea rax, [rbp + 0x110]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x1c
lea rax, [rbp + 0x138]
mov qword [rsp + 0x20], rax
lea r9d, [r14 + 0x1c]
lea r8, [rbp + 0x138]
lea edx, [r14 + 1]
lea rcx, [r14 - 1]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov r14d, 0x55
xor r8d, r8d
add edi, 0x33c2
cmp edi, 0x7aecc
jbe 0x180012780
jmp case.0x1800123cd.0
mov word [rsp + 0x48], r11w
lea r9, [rsp + 0x48]
lea r8, [rbp + 0xe0]
lea rdx, [0x1800b90b8]
mov ecx, 0x126
call fcn.1800505c0
mov dword [rbp - 0x4c], 1
jmp 0x180012df6
mov r14, qword [rbp + 0x120]
test r14, r14
jne 0x180012d33
mov esi, 6
cmp esi, 6
ja case.default.0x180012c5b
mov eax, esi
mov ecx, dword [r10 + rax*4 + 0x13198]
add rcx, r10
jmp rcx
cmp byte [rsp + 0x41], 0
je case.default.0x180012c5b
mov edi, 0x6c
nop dword [rax]
mov eax, edi
sub eax, 0x6b
je 0x180012c89
cmp eax, 1
jne 0x180012c92
xor edx, edx
mov rcx, r15
call qword [sym.imp.dbghelp.dll_SymGetModuleBase64]
jmp 0x180012c92
mov rcx, r15
call qword [sym.imp.dbghelp.dll_SymCleanup]
dec edi
cmp edi, 0x6a
ja 0x180012c70
xor r8d, r8d
lea r10, [0x180000000]
jmp case.default.0x180012c5b
xor r8d, r8d
xor edx, edx
mov rcx, r15
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov dword [rbp - 0x60], eax
xor r8d, r8d
lea r10, [0x180000000]
jmp case.default.0x180012c5b
mov ebx, 1
jmp case.default.0x180012c5b
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], r8
mov r9d, dword [rbp - 0x5c]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp + 0x128]
call sub.IMM32.dll_ImmEnumRegisterWordW
xor r8d, r8d
mov ecx, r8d
movzx eax, byte [rsp + 0x41]
cmp dword [rbp - 0x60], r8d
cmovne ecx, eax
mov byte [rsp + 0x41], cl
lea r10, [0x180000000]
jmp case.default.0x180012c5b
mov byte [rsp + 0x41], 1
mov qword [rbp + 0x128], r8
jmp case.default.0x180012c5b
mov r15, 0xffffffffffffffff
mov dword [rbp - 0x5c], r8d
dec esi
lea eax, [rsi + 0x119]
cmp eax, 0x118
ja 0x180012c45
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x180012df6
lea r9, [rbp + 0x190]
mov r8d, 6
lea rdx, [rbp - 0x40]
lea rcx, [0x1800b9030]
call fcn.180015c30
jmp 0x180012df6
mov ecx, r8d
movzx eax, byte [rsp + 0x42]
cmp dword [rbp - 0x54], 0
cmove ecx, eax
mov byte [rsp + 0x42], cl
jmp case.0x1800123a7.77
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call fcn.18007548c
mov byte [rsp + 0x42], 1
jmp 0x180012df6
mov r9d, dword [rbp - 0x58]
lea r8, [rbp + 0xa8]
lea rdx, [rbp + 0x58]
mov rcx, qword [rbp + 0x130]
call sub.urlmon.dll_CreateURLMonikerEx
mov dword [rbp - 0x54], eax
xor r8d, r8d
mov qword [rsp + 0x60], r8
jmp case.0x1800123cd.0
lea rax, [rbp - 0x40]
mov qword [rbp + 0x10], rax
mov eax, dword [0x1800b90e0]
mov dword [rbp + 0x18], eax
mov eax, dword [0x1800b90e4]
mov dword [rbp + 0x1c], eax
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x2c0], xmm0
jmp case.0x1800123a7.77
mov r9, qword [rsp + 0x60]
lea r8, [rbp + 0xb0]
mov edx, dword [rbp - 0x4c]
mov ecx, dword [rbp - 0x50]
call sub.urlmon.dll_CoInternetIsFeatureEnabledForUrl
xor r8d, r8d
mov edx, dword [rbp + 0x6f0]
inc edx
mov dword [rbp + 0x6f0], edx
cmp edx, dword [rsp + 0x50]
lea r9, [0x18000d500]
lea r10, [0x180000000]
mov esi, 0x20
lea r14d, [rsi + 0x35]
mov r11d, 0x1bb
lea rdi, [0x1800b9098]
jb 0x180012390
lea rcx, [rbp + 0x208]
call fcn.1800063a0
mov rdi, qword [rbp + 0x1f0]
test rdi, rdi
je 0x180012eca
mov rsi, qword [rbp + 0x1f8]
cmp rdi, rsi
je 0x180012e78
nop dword [rax]
mov rcx, rdi
call fcn.180032840
add rdi, 0x20
cmp rdi, rsi
jne 0x180012e60
mov rdi, qword [rbp + 0x1f0]
mov rdx, qword [rbp + 0x200]
sub rdx, rdi
and rdx, 0xffffffffffffffe0
mov rax, rdi
cmp rdx, 0x1000
jb 0x180012eab
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800130d6
mov rcx, rdi
call fcn.18006dad0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1f0], xmm0
xor r14d, r14d
mov qword [rbp + 0x200], r14
jmp 0x180012ecd
xor r14d, r14d
mov rcx, qword [rbp + 0x1d8]
test rcx, rcx
je 0x180012f23
mov rdx, qword [rbp + 0x1e8]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x180012f0c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800130d6
call fcn.18006dad0
mov qword [rbp + 0x1d8], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1e0], xmm0
lea rcx, [rbp + 0x198]
call fcn.1800062e0
nop
mov rdi, qword [rbp - 0x28]
test rdi, rdi
je 0x180012fbe
mov rsi, qword [rbp - 0x20]
cmp rdi, rsi
je 0x180012f5b
mov rcx, rdi
call fcn.180005a50
add rdi, 0x28
cmp rdi, rsi
jne 0x180012f46
mov rdi, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x18]
sub rcx, rdi
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rdi
cmp rdx, 0x1000
jb 0x180012faa
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800130dc
mov rcx, rdi
call fcn.18006dad0
mov qword [rbp - 0x28], r14
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x180013010
mov rax, qword [rbp - 0x30]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180012fff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800130dc
call fcn.18006dad0
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], r14
mov rdx, qword [rbp + 0x102]
cmp rdx, 0x10
jb 0x180013051
inc rdx
mov rcx, qword [rbp + 0xea]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001304c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800130e2
call fcn.18006dad0
movdqa xmm0, xmmword [0x18009efc0]
movdqu xmmword [rbp + 0xfa], xmm0
mov byte [rbp + 0xea], 0
mov rdx, qword [rbp + 0x17a]
cmp rdx, 0x10
jb 0x1800130a5
inc rdx
mov rcx, qword [rbp + 0x162]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800130a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800130ca
call fcn.18006dad0
mov eax, ebx
mov rbx, qword [rsp + 0x7f8]
movaps xmm6, xmmword [rsp + 0x790]
add rsp, 0x7a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180073fa4
nop
call fcn.180032710
nop
call fcn.180073fa4
nop
call fcn.180073fa4
nop
call fcn.180073fa4
int3