Function at 0x180022810
Capabilities:
Create thread
Get file attributes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x360]
sub rsp, 0x460
mov rax, qword [0x1800312f8]
xor rax, rsp
mov qword [rbp + 0x358], rax
mov qword [rsp + 0x48], rdx
mov edi, ecx
mov dword [rsp + 0x30], ecx
movdqa xmm0, xmmword [0x18002cf00]
movdqa xmmword [rbp + 0x1f0], xmm0
mov byte [rbp + 0x1e0], 0
movdqa xmm1, xmm0
movdqa xmmword [rbp + 0x210], xmm0
mov byte [rbp + 0x200], 0
movdqa xmmword [rbp + 0x230], xmm0
mov byte [rbp + 0x220], 0
movdqa xmmword [rbp + 0x260], xmm0
mov byte [rbp + 0x250], 0
movdqa xmmword [rbp + 0x280], xmm0
mov byte [rbp + 0x270], 0
xor ecx, ecx
mov qword [rbp + 0x78], rcx
mov word [rbp + 0x80], cx
movdqu xmmword [rbp + 0x92], xmm0
mov byte [rbp + 0x82], cl
mov qword [rbp + 0x48], rcx
mov word [rbp + 0x50], cx
movdqu xmmword [rbp + 0x62], xmm0
mov byte [rbp + 0x52], cl
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rcx
movdqa xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rcx
mov qword [rbp - 0x68], rcx
mov qword [rbp - 0x60], rcx
mov qword [rbp + 0xb0], rcx
mov qword [rbp + 0xb8], rcx
mov qword [rbp + 0xc0], rcx
mov ecx, 0x30
call fcn.180023dfc
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0xb8], rax
xor edx, edx
mov qword [rbp + 0xc8], rdx
xorps xmm2, xmm2
movsd qword [rbp + 0xd0], xmm2
mov qword [rbp + 0xd8], rdx
mov dword [rbp + 0xe0], 1
mov qword [rbp + 0xe8], rdx
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xf0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x100], xmm1
movdqa xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x120], rdx
mov qword [rbp + 0x128], 0xffffffffffffffff
mov dword [rbp + 0x130], edx
xor eax, eax
movups xmmword [rbp + 0x138], xmm0
movups xmmword [rbp + 0x148], xmm0
movups xmmword [rbp + 0x158], xmm0
movups xmmword [rbp + 0x168], xmm0
mov qword [rbp + 0x178], rax
movdqa xmm0, xmmword [0x18002cf00]
movdqa xmmword [rbp + 0x190], xmm0
mov byte [rbp + 0x180], al
mov word [rbp + 0x1a0], dx
mov dword [rbp + 0x1a4], edx
mov qword [rbp + 0x1a8], rdx
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1b0], xmm0
movsd qword [rbp + 0x1c0], xmm2
mov byte [rbp + 0x1c8], al
mov qword [rbp + 0x1cc], rdx
mov dword [rsp + 0x34], edi
lea eax, [rdi + 0xc]
mov dword [rsp + 0x38], eax
lea r10, [0x180000000]
mov ebx, dword [rsp + 0x48]
cmp edi, eax
jae 0x180022d9d
add edi, 0xffffffb7
mov dword [rsp + 0x50], edi
lea r8d, [rdx + 0x3f]
movabs r9, 0x404040404040404
mov rsi, qword [rsp + 0x58]
mov r14d, dword [rsp + 0x48]
mov r13, qword [rsp + 0x58]
mov r15, qword [rsp + 0x58]
mov r12, qword [rsp + 0x58]
mov eax, dword [rsp + 0x34]
mov ecx, dword [rsp + 0x38]
cmp edi, 0x1c
ja case.default.0x180022a68
mov ecx, dword [r10 + rdi*4 + 0x23564]
add rcx, r10
jmp rcx
mov word [rbp + 0x306], r8w
movzx eax, word [0x180028e0c]
mov word [rbp + 0x307], ax
movzx eax, byte [0x180028e0e]
mov byte [rbp + 0x309], al
jmp case.0x180022a68.8
mov r8d, 0xa
lea rdx, [rbp + 0x309]
lea ecx, [r8 - 9]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__ltoa]
lea rax, [0x180031208]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0x9d
call fcn.180010490
test al, al
jne 0x180022d64
mov edi, 0xa4
cmp edi, 0x79b8
ja 0x180022b63
je 0x180022b51
cmp edi, 0xa4
je 0x180022b47
cmp edi, 0x2900
je 0x180022b41
cmp edi, 0x515c
jne 0x180022ba5
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x290], xmm0
movups xmmword [rbp + 0x2a0], xmm0
movups xmmword [rbp + 0x2b0], xmm0
movups xmmword [rbp + 0x2c0], xmm0
movups xmmword [rbp + 0x2d0], xmm0
movups xmmword [rbp + 0x2e0], xmm0
mov qword [rbp + 0x2f0], rax
mov dword [rbp + 0x2f8], eax
xor edx, edx
mov r13d, edx
jmp 0x180022ba7
xor edx, edx
mov esi, edx
jmp 0x180022ba7
xor edx, edx
mov r12d, edx
mov r15d, edx
jmp 0x180022ba7
mov dword [rbp + 0x294], 0x6c
mov r14d, 5
jmp 0x180022ba5
cmp edi, 0xa214
je 0x180022b79
cmp edi, 0xca70
je case.0x180022de5.12
jmp 0x180022ba5
mov r9d, r14d
mov r8, r13
mov rdx, rsi
mov rcx, r15
call qword [sym.imp.GDI32.dll_CombineRgn]
lea r8, [rbp + 0x290]
mov edx, 0x6c
mov rcx, r12
call qword [sym.imp.GDI32.dll_GetEnhMetaFileHeader]
mov ebx, 1
xor edx, edx
add edi, 0x285c
cmp edi, 0xf228
jbe 0x180022ad4
mov edi, dword [rsp + 0x50]
jmp 0x180022d66
mov r8d, 4
lea rdx, [0x18002cdf1]
lea rcx, [rbp + 0x310]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 1
lea rdx, [0x18002ce2b]
lea rcx, [rbp + 0x310]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x180022d64
mov r8d, 2
lea rdx, [0x18002ce30]
lea rcx, [rbp + 0x300]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, 0x69
mov word [rbp + 0x301], ax
mov eax, 0x74
mov word [rbp + 0x302], ax
lea r8d, [rax - 0x73]
lea rdx, [0x18002ce34]
lea rcx, [rbp + 0x300]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
lea rcx, [rbp + 0x300]
dec rcx
nop
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x180022c50
movzx eax, word [0x18002ce38]
mov word [rcx], ax
movzx eax, byte [0x18002ce3a]
mov byte [rcx + 2], al
jmp 0x180022d64
mov byte [rbp + 0x310], 0
jmp case.0x180022a68.8
mov byte [rbp + 0x316], 0
jmp case.0x180022a68.8
mov byte [rbp + 0x315], 0x61
jmp case.0x180022a68.8
mov ecx, 1
mov rdx, qword [rsp + 0x48]
add rdx, 0xb
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x30]
mov byte [rdx], al
inc ecx
lea rdx, [rdx + 0xb]
cmp ecx, 0xa
jle 0x180022cb0
xor edx, edx
jmp case.0x180022a68.8
mov eax, 1
mov r8, qword [rsp + 0x48]
xchg dword [r8 + 0x11c], eax
jmp 0x180022d77
mov ecx, 1
mov r8, qword [rsp + 0x48]
lea rdx, [r8 + 1]
nop dword [rax + rax]
lea eax, [rcx + 0x30]
mov byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0xa
jle 0x180022cf0
lea rax, [r8 + 0xc]
mov ecx, 0xa
nop dword [rax]
mov qword [rax], r9
mov word [rax + 8], r9w
lea rax, [rax + 0xb]
sub rcx, 1
jne 0x180022d10
xor edx, edx
jmp 0x180022d77
mov rax, qword [rsp + 0x48]
mov byte [rax], 0x40
jmp case.0x180022a68.8
mov r8d, 3
lea rdx, [0x18002ce47]
lea rcx, [rbp + 0x310]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov byte [rbp + 0x319], 0x63
mov eax, 0x6d6f
mov word [rbp + 0x31a], ax
mov byte [rbp + 0x31c], 0
xor edx, edx
lea r10, [0x180000000]
movabs r9, 0x404040404040404
mov r8d, 0x3f
mov ecx, dword [rsp + 0x38]
mov eax, dword [rsp + 0x34]
inc eax
mov dword [rsp + 0x34], eax
inc edi
mov dword [rsp + 0x50], edi
cmp eax, ecx
jb 0x180022a54
mov edi, dword [rsp + 0x30]
lea r13d, [rdi + 0xd]
cmp edi, r13d
jae case.0x180022de5.12
lea r12d, [rdi - 0x49]
mov r8d, 0x1bb
mov esi, dword [rsp + 0x48]
mov r14d, dword [rsp + 0x48]
mov r15, qword [rsp + 0x58]
mov edi, dword [rsp + 0x48]
mov eax, dword [rsp + 0x30]
nop word [rax + rax]
cmp r12d, 0xc
ja case.default.0x180022de5
mov ecx, dword [r10 + r12*4 + 0x235d8]
add rcx, r10
jmp rcx
lea r9, [rbp - 0x40]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesEncodeIncrementalHandleCreate
mov dword [rsp + 0x34], eax
lea rax, [rsp + 0x60]
mov qword [rbp - 0x30], rax
mov ecx, dword [0x1800312b0]
mov dword [rbp - 0x28], ecx
mov ecx, dword [0x1800312b4]
mov dword [rbp - 0x24], ecx
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x20], xmm0
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], eax
lea r9, [rbp - 0x20]
lea r8, [0x1800159d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rbp - 0x50], rax
cmp rax, 0
jne 0x180022fc6
mov edi, 0x41
cmp edi, 0x41
je 0x180022f5e
cmp edi, 0x31c4
je 0x180022f56
cmp edi, 0x6347
je 0x180022f3d
cmp edi, 0x94ca
jne 0x180022fb4
lea r9, [rsp + 0x58]
mov r8, r15
lea rdx, [rbp + 0x18]
mov ecx, 1
call qword [sym.imp.ADVAPI32.dll_SetEntriesInAclA]
mov ecx, r14d
call qword [sym.imp.GDI32.dll_GetStockObject]
mov ebx, 1
lea rcx, [rbp + 0x128]
call fcn.180008f20
mov rdi, qword [rbp + 0x110]
test rdi, rdi
je 0x18002331d
mov rsi, qword [rbp + 0x118]
cmp rdi, rsi
je 0x180022ee8
nop dword [rax]
mov rcx, rdi
call fcn.180020170
add rdi, 0x20
cmp rdi, rsi
jne 0x180022ed0
mov rdi, qword [rbp + 0x110]
mov rdx, qword [rbp + 0x120]
sub rdx, rdi
and rdx, 0xffffffffffffffe0
mov rax, rdi
cmp rdx, 0x1000
jb 0x180022f1b
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002335b
mov rcx, rdi
call fcn.180023e38
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x110], xmm0
xor r14d, r14d
mov qword [rbp + 0x120], r14
jmp 0x180023320
xor r15d, r15d
mov qword [rsp + 0x58], r15
mov edx, esi
lea rcx, [rbp + 0x320]
call qword [sym.imp.SHLWAPI.dll_PathIsSystemFolderW]
jmp 0x180022fb4
mov r14d, 4
jmp 0x180022fb4
movups xmm0, xmmword [str.91QmwWtyQoO:X5_p2V7mXLA]
movups xmmword [rbp + 0x320], xmm0
movups xmm1, xmmword [0x18002ce70]
movups xmmword [rbp + 0x330], xmm1
movups xmm0, xmmword [0x18002ce80]
movups xmmword [rbp + 0x340], xmm0
movzx eax, word [0x18002ce90]
mov word [rbp + 0x350], ax
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
movups xmmword [rbp + 0x28], xmm0
movups xmmword [rbp + 0x38], xmm0
lea rcx, [rbp + 0x320]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov esi, eax
add edi, 0x3183
cmp edi, 0xc60c
jbe 0x180022e52
lea rax, [rbp - 0x38]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp - 0x10]
mov edx, dword [rsp + 0x48]
lea rcx, [rbp + 0x300]
call qword [sym.imp.ADVAPI32.dll_GetFileSecurityA]
mov edi, eax
xor edx, edx
mov r8d, 0x1bb
mov eax, dword [rsp + 0x30]
inc eax
mov dword [rsp + 0x30], eax
inc r12d
cmp eax, r13d
jae case.0x180022de5.12
lea r10, [0x180000000]
jmp 0x180022dd0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rax
lea rax, [rbp + 0x78]
mov qword [rsp + 0x38], rax
mov rdx, qword [rsp + 0x68]
cmp rdx, qword [rsp + 0x70]
je 0x180023053
lea rax, [rbp + 0x78]
mov qword [rdx], rax
mov rdx, qword [rsp + 0x68]
add rdx, 8
mov qword [rsp + 0x68], rdx
jmp 0x180023067
lea r8, [rsp + 0x38]
lea rcx, [rsp + 0x60]
call fcn.180006fb0
mov rdx, qword [rsp + 0x68]
lea rax, [rbp + 0x48]
mov qword [rsp + 0x38], rax
cmp rdx, qword [rsp + 0x70]
je 0x180023086
lea rax, [rbp + 0x48]
mov qword [rdx], rax
add qword [rsp + 0x68], 8
jmp 0x180023095
lea r8, [rsp + 0x38]
lea rcx, [rsp + 0x60]
call fcn.180006fb0
lea r9, [rbp - 0x48]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesEncodeIncrementalHandleCreate
mov dword [rsp + 0x50], eax
mov ecx, dword [0x1800312b0]
mov dword [rsp + 0x38], ecx
lea r8, [rsp + 0x60]
mov edx, 0x109
lea rcx, [rsp + 0x38]
call fcn.180018ac0
jmp 0x180022fec
xor r9d, r9d
lea r8d, [r9 + 0x42]
lea rdx, [rbp + 0xb0]
xor ecx, ecx
call fcn.18000abb0
cmp byte [rsp + 0x40], 0
je 0x1800230fd
lea r8, [rbp - 0x10]
mov edx, dword [rsp + 0x48]
lea rcx, [rbp + 0x300]
call qword [sym.imp.ADVAPI32.dll_SetFileSecurityA]
xor edx, edx
cmp byte [rsp + 0x41], dl
je 0x180022fee
xor eax, eax
mov qword [rsp + 0x38], rax
lea r8, [rsp + 0x38]
xor ecx, ecx
call sub.RPCRT4.dll_MesDecodeIncrementalHandleCreate
mov dword [rsp + 0x34], eax
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x18002312e
call sub.RPCRT4.dll_MesHandleFree
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x180022fec
call sub.RPCRT4.dll_MesHandleFree
jmp 0x180022fec
cmp byte [rsp + 0x42], 0
je 0x180022ff4
mov qword [rsp + 0x38], rdx
lea r8, [rsp + 0x38]
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesDecodeIncrementalHandleCreate
mov dword [rsp + 0x50], eax
mov rcx, qword [rbp - 0x48]
jmp 0x180023124
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, [0x18000c6a0]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x20], 0x8c
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.18001bd60
xor edx, edx
mov ecx, edx
movzx eax, byte [rsp + 0x42]
cmp dword [rsp + 0x50], edx
cmove ecx, eax
mov byte [rsp + 0x42], cl
mov ecx, edx
movzx eax, byte [rsp + 0x41]
cmp dword [rsp + 0x34], edx
cmove ecx, eax
mov byte [rsp + 0x41], cl
mov ecx, edx
movzx eax, byte [rsp + 0x40]
test edi, edi
cmovne ecx, eax
mov byte [rsp + 0x40], cl
jmp 0x180022fee
lea r9, [0x180031200]
lea r8, [rsp + 0x60]
mov edx, 0xf4
lea rcx, [rbp + 0xb0]
call fcn.18000a530
jmp 0x180022fec
mov word [rsp + 0x38], r8w
lea r9, [0x180031268]
mov r8d, 0x61
lea rdx, [rbp + 0x78]
lea rcx, [rsp + 0x38]
call fcn.18000e810
xor eax, eax
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x40], rax
mov eax, 0x1bb
mov word [rsp + 0x38], ax
lea r9, [0x180031288]
lea r8, [rbp + 0x48]
mov edx, 0xbc
lea rcx, [rsp + 0x38]
call fcn.180021fe0
xor r8d, r8d
lea rdx, [rsp + 0x60]
mov ecx, 0x128
call fcn.180014b20
jmp 0x180022fec
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
jmp 0x180022fec
mov ebx, edx
jmp 0x180022ff4
mov byte [rsp + 0x40], 1
lea rax, [rbp + 0x310]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x180023290
lea rdx, [rbp + 0x310]
lea rcx, [rbp + 0x1e0]
call fcn.1800206c0
mov r8d, 1
lea rdx, [0x18002caec]
lea rcx, [rbp + 0x200]
call fcn.1800206c0
mov r8d, 0x1bb
mov word [rbp + 0x240], r8w
mov byte [rsp + 0x41], 1
xor edx, edx
jmp 0x180022ff4
mov byte [rsp + 0x42], 1
lea rdx, [rbp + 0x220]
mov ecx, 0x48
call fcn.18001aad0
mov r8d, 0x74
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x250]
call fcn.18000ff80
jmp 0x180022fec
mov dword [rsp + 0x48], edx
jmp 0x180022ff4
xor r14d, r14d
mov rcx, qword [rbp + 0xf8]
test rcx, rcx
je 0x180023379
mov rdx, qword [rbp + 0x108]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x180023362
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180023362
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180023e38
mov qword [rbp + 0xf8], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x100], xmm0
lea rcx, [rbp + 0xb8]
call fcn.180008e50
nop
mov rdi, qword [rsp + 0x78]
test rdi, rdi
je 0x180023416
mov rsi, qword [rbp - 0x80]
cmp rdi, rsi
je 0x1800233b6
nop dword [rax]
mov rcx, rdi
call fcn.180008760
add rdi, 0x28
cmp rdi, rsi
jne 0x1800233a0
mov rdi, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x78]
sub rcx, rdi
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rdi
cmp rdx, 0x1000
jb 0x180023401
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180023455
mov rcx, rdi
call fcn.180023e38
mov qword [rsp + 0x78], r14
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x18002346f
mov rax, qword [rsp + 0x70]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002345c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002345c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180023e38
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r14
mov rdx, qword [rbp + 0x6a]
cmp rdx, 0x10
jb 0x1800234ad
inc rdx
mov rcx, qword [rbp + 0x52]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800234a8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800234a8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180023e38
movdqa xmm0, xmmword [0x18002cf00]
movdqu xmmword [rbp + 0x62], xmm0
mov byte [rbp + 0x52], 0
mov rdx, qword [rbp + 0x9a]
cmp rdx, 0x10
jb 0x180023502
inc rdx
mov rcx, qword [rbp + 0x82]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800234fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800234fd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180023e38
movdqa xmm0, xmmword [0x18002cf00]
movdqu xmmword [rbp + 0x92], xmm0
mov byte [rbp + 0x82], 0
lea rcx, [rbp + 0x250]
call fcn.180008ac0
nop
lea rcx, [rbp + 0x1e0]
call fcn.180008b70
mov eax, ebx
mov rcx, qword [rbp + 0x358]
xor rcx, rsp
call fcn.1800245e0
lea r11, [rsp + 0x460]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret