Function at 0x180035050
Capabilities:
Create thread
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x700]
sub rsp, 0x800
mov rax, qword [0x180081de0]
xor rax, rsp
mov qword [rbp + 0x6f0], rax
mov r12, r9
mov rsi, r8
mov ebx, edx
mov dword [rsp + 0x40], edx
mov r13, rcx
movdqa xmm0, xmmword [0x18007b1f0]
movdqa xmmword [rbp + 0x1f0], xmm0
mov byte [rbp + 0x1e0], 0
movdqa xmm1, xmm0
movdqa xmmword [rbp + 0x210], xmm0
mov byte [rbp + 0x200], 0
movdqa xmmword [rbp + 0x230], xmm0
mov byte [rbp + 0x220], 0
movdqa xmmword [rbp + 0x1b0], xmm0
mov byte [rbp + 0x1a0], 0
movdqa xmmword [rbp + 0x1d0], xmm0
mov byte [rbp + 0x1c0], 0
xor ecx, ecx
mov qword [rbp + 0x40], rcx
mov word [rbp + 0x48], cx
movdqu xmmword [rbp + 0x5a], xmm0
mov byte [rbp + 0x4a], cl
mov qword [rbp + 0x10], rcx
mov word [rbp + 0x18], cx
movdqu xmmword [rbp + 0x2a], xmm0
mov byte [rbp + 0x1a], cl
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rcx
movdqa xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rcx
mov qword [rbp - 0x68], rcx
mov qword [rbp - 0x60], rcx
mov qword [rbp + 0x70], rcx
mov qword [rbp + 0x78], rcx
mov qword [rbp + 0x80], rcx
mov ecx, 0x30
call fcn.18005f97c
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x78], rax
xor r8d, r8d
mov qword [rbp + 0x88], r8
xorps xmm2, xmm2
movsd qword [rbp + 0x90], xmm2
mov qword [rbp + 0x98], r8
mov dword [rbp + 0xa0], 1
mov qword [rbp + 0xa8], r8
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xb0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xc0], xmm1
movdqa xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r8
mov qword [rbp + 0xe8], 0xffffffffffffffff
mov dword [rbp + 0xf0], r8d
xor eax, eax
movups xmmword [rbp + 0xf8], xmm0
movups xmmword [rbp + 0x108], xmm0
movups xmmword [rbp + reloc.SHLWAPI.dll_SHRegGetIntW], xmm0
movups xmmword [rbp + 0x128], xmm0
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [0x18007b1f0]
movdqa xmmword [rbp + 0x150], xmm0
mov byte [rbp + 0x140], al
mov word [rbp + 0x160], r8w
mov dword [rbp + 0x164], r8d
mov qword [rbp + 0x168], r8
xorps xmm0, xmm0
movaps xmmword [rbp + 0x170], xmm0
movsd qword [rbp + 0x180], xmm2
mov byte [rbp + 0x188], al
mov qword [rbp + 0x18c], r8
mov edi, ebx
lea r15d, [rbx - 0xb]
lea r9, [0x180000000]
cmp ebx, r15d
jbe 0x180035876
mov r14, qword [rbp - 0x38]
mov ebx, dword [rsp + 0x50]
mov edx, 0x4270
lea eax, [rdi - 0x9a]
cmp eax, 0x25
ja case.0x180035274.165
movzx eax, byte [r9 + rax + 0x36cac]
mov ecx, dword [r9 + rax*4 + 0x36c7c]
add rcx, r9
jmp rcx
mov byte [rbp + 0x252], 0
jmp case.0x180035274.165
mov dword [rsp + 0x48], r8d
xor r8d, r8d
mov edx, 0xf3
lea rcx, [rsp + 0x48]
call fcn.18003a460
mov r14, rax
jmp 0x180035861
movzx eax, word [0x180076c90]
mov word [rbp + 0x280], ax
movsd xmm0, qword [str.e8020pri]
movsd qword [rbp + 0x282], xmm0
movzx eax, byte [0x180076ca0]
mov byte [rbp + 0x28a], al
jmp case.0x180035274.165
mov word [rbp + 0x250], dx
jmp case.0x180035274.165
lea rdi, [rsi + 0x218]
nop dword [rax]
nop dword [rax + rax]
cmp dword [rsi + 0x80], 4
jne 0x180035381
mov ecx, 0x71
mov eax, ecx
sub eax, 0x71
je 0x180035340
sub eax, 0x19
je 0x18003532a
sub eax, 0x4059
je 0x180035325
sub eax, 0xe5b
je 0x18003535f
cmp eax, 0x3217
je 0x18003537d
jmp 0x18003534f
mov ebx, r8d
jmp 0x18003534f
test rdi, rdi
jne 0x18003534f
lea ebx, [rdi - 1]
mov edi, reloc.SHLWAPI.dll_StrCmpCA
mov dword [rbp - 0x50], r8d
jmp case.0x180035274.165
mov eax, dword [rdi + 0x28]
cmp eax, 0xffffffff
jle 0x18003534f
mov edx, dword [rdi + 0x24]
cmp eax, edx
jl 0x180035379
add ecx, 0x4072
cmp ecx, 0x1423a
ja 0x18003537d
jmp 0x180035302
mov edx, dword [ParseURLA]
mov r8d, edx
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
mov ebx, eax
xor r8d, r8d
jmp 0x18003537d
mov ebx, edx
sub ebx, eax
test ebx, ebx
jne 0x180035332
mov dword [rbp - 0x40], r8d
mov dword [rbp - 0x48], 1
lea rax, [rbp - 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 0x10b
xor r8d, r8d
lea rdx, [rbp - 0x40]
mov rcx, rsi
call fcn.18001c510
test eax, eax
mov r8d, 0
jns 0x1800352f0
cmp eax, 0xfffffffd
je 0x1800352f0
mov dword [rbp - 0x50], eax
lea rcx, [rbp + 0xe8]
call fcn.1800037a0
mov rbx, qword [rbp + 0xd0]
xor esi, esi
test rbx, rbx
je 0x18003549b
mov rdi, qword [rbp + 0xd8]
cmp rbx, rdi
je 0x18003544e
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x18003542f
mov rcx, qword [rbx]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x18003542a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800359f4
mov rcx, r8
call fcn.18005f9b8
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 7
mov word [rbx], si
add rbx, 0x20
cmp rbx, rdi
jne 0x1800353f0
mov rbx, qword [rbp + 0xd0]
mov rdx, qword [rbp + 0xe0]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x180035481
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800359f4
mov rcx, rbx
call fcn.18005f9b8
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], rsi
mov rcx, qword [rbp + 0xb8]
test rcx, rcx
je 0x1800354f1
mov rdx, qword [rbp + 0xc8]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800354da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800359f4
call fcn.18005f9b8
mov qword [rbp + 0xb8], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xc0], xmm0
mov rcx, qword [rbp + 0x78]
mov rbx, qword [rcx + 8]
cmp byte [rbx + 0x19], 0
jne 0x18003552b
nop
mov r8, qword [rbx + 0x10]
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x78]
call fcn.180001fb0
mov rcx, rbx
mov rbx, qword [rbx]
mov edx, 0x30
call fcn.18005f9b8
cmp byte [rbx + 0x19], 0
je 0x180035500
mov rcx, qword [rbp + 0x78]
mov edx, 0x30
call fcn.18005f9b8
nop
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x18003560b
mov rdi, qword [rbp - 0x80]
cmp rbx, rdi
je 0x1800355a7
nop dword [rax]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x18003558a
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x180035585
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180035d91
mov rcx, r8
call fcn.18005f9b8
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
add rbx, 0x28
cmp rbx, rdi
jne 0x180035550
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x78]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x1800355f6
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180035d91
mov rcx, rbx
call fcn.18005f9b8
mov qword [rsp + 0x78], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x180035661
mov rax, qword [rsp + 0x70]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003564e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180035d91
call fcn.18005f9b8
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rsi
mov rdx, qword [rbp + 0x32]
cmp rdx, 0x10
jb 0x18003569c
inc rdx
mov rcx, qword [rbp + 0x1a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035697
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180036c02
call fcn.18005f9b8
movdqa xmm0, xmmword [0x18007b1f0]
movdqu xmmword [rbp + 0x2a], xmm0
mov byte [rbp + 0x1a], 0
mov rdx, qword [rbp + 0x62]
cmp rdx, 0x10
jb 0x1800356e8
inc rdx
mov rcx, qword [rbp + 0x4a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800356e3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180036c5d
call fcn.18005f9b8
movdqa xmm0, xmmword [0x18007b1f0]
movdqu xmmword [rbp + 0x5a], xmm0
mov byte [rbp + 0x4a], 0
mov rdx, qword [rbp + 0x1d8]
cmp rdx, 0x10
jb 0x180035736
inc rdx
mov rcx, qword [rbp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035731
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180035791
call fcn.18005f9b8
movdqa xmm0, xmmword [0x18007b1f0]
movdqa xmmword [rbp + 0x1d0], xmm0
mov byte [rbp + 0x1c0], 0
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 0x10
jb 0x1800358cc
inc rdx
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800358c7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800358c7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
test r14, r14
je 0x180036c64
mov qword [r14 + 0x18], rsi
mov qword [r14 + 0x20], r12
mov eax, dword [r13]
mov dword [r14 + 0x14], eax
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], r8
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb9
mov rcx, r14
call fcn.180008950
mov qword [rbp - 0x50], r14
jmp 0x180035861
mov r8d, 4
lea rdx, [0x180076cc8]
lea rcx, [rbp + 0x28c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [str.e.com]
mov dword [rbp + 0x28f], eax
movzx eax, word [0x180076cd0]
mov word [rbp + 0x293], ax
jmp 0x180035861
lea rcx, [rbp + 0x280]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x180035817
movzx eax, word [0x180076cd4]
mov word [rcx], ax
movzx eax, byte [0x180076cd6]
mov byte [rcx + 2], al
jmp case.0x180035274.165
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x16]
call fcn.180057280
mov qword [r12 + 8], rax
mov edx, 3
mov rcx, rsi
call fcn.1800571e0
mov dword [r12], eax
xor r8d, r8d
dec edi
lea r9, [0x180000000]
cmp edi, r15d
ja 0x18003524c
mov edi, dword [rsp + 0x40]
lea ebx, [rdi - 0xc]
mov dword [rsp + 0x48], ebx
cmp edi, ebx
jbe 0x180036adc
lea r13d, [rdi - 0xb4]
lea r8, [0x180008ad0]
mov edx, 0x1bb
mov esi, dword [rsp + 0x50]
mov r14d, dword [rsp + 0x50]
mov r15d, dword [rsp + 0x50]
mov r12, qword [rbp - 0x38]
nop
cmp r13d, 0xb
ja case.default.0x1800358c5
add byte [rax], al
mov ecx, dword [r9 + r13*4 + 0x36cd4]
add rcx, r9
jmp rcx
call fcn.18005f9b8
movdqa xmm0, xmmword [0x18007b1f0]
movdqa xmmword [rbp + 0x1b0], xmm0
mov byte [rbp + 0x1a0], 0
jmp 0x180035c26
lea rcx, [rbp + 0xe8]
call fcn.1800037a0
mov rbx, qword [rbp + 0xd0]
xor esi, esi
test rbx, rbx
je 0x1800359b9
mov rdi, qword [rbp + 0xd8]
cmp rbx, rdi
je 0x180035970
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x180035951
mov rcx, qword [rbx]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x18003594c
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800359f4
mov rcx, r8
call fcn.18005f9b8
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 7
mov word [rbx], si
add rbx, 0x20
cmp rbx, rdi
jne 0x180035912
mov rbx, qword [rbp + 0xd0]
mov rdx, qword [rbp + 0xe0]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x18003599f
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800359f4
mov rcx, rbx
call fcn.18005f9b8
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], rsi
mov rcx, qword [rbp + 0xb8]
test rcx, rcx
je 0x180035a12
mov rdx, qword [rbp + 0xc8]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800359fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800359fb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18005f9b8
mov qword [rbp + 0xb8], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xc0], xmm0
mov rcx, qword [rbp + 0x78]
mov rbx, qword [rcx + 8]
cmp byte [rbx + 0x19], 0
jne 0x180035a4b
mov r8, qword [rbx + 0x10]
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x78]
call fcn.180001fb0
mov rcx, rbx
mov rbx, qword [rbx]
mov edx, 0x30
call fcn.18005f9b8
cmp byte [rbx + 0x19], 0
je 0x180035a20
mov rcx, qword [rbp + 0x78]
mov edx, 0x30
call fcn.18005f9b8
nop
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x180035b2b
mov rdi, qword [rbp - 0x80]
cmp rbx, rdi
je 0x180035ac7
nop dword [rax]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x180035aaa
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x180035aa5
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180035d91
mov rcx, r8
call fcn.18005f9b8
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
add rbx, 0x28
cmp rbx, rdi
jne 0x180035a70
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x78]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x180035b16
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180035d91
mov rcx, rbx
call fcn.18005f9b8
mov qword [rsp + 0x78], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x180035b81
mov rax, qword [rsp + 0x70]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035b6e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180035d91
call fcn.18005f9b8
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rsi
mov rdx, qword [rbp + 0x32]
cmp rdx, 0x10
jb 0x180035bbc
inc rdx
mov rcx, qword [rbp + 0x1a]
cmp rdx, 0x1000
mov rax, rcx
jb 0x180035bb7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180036c02
call fcn.18005f9b8
movdqa xmm0, xmmword [0x18007b1f0]
movdqu xmmword [rbp + 0x2a], xmm0
mov byte [rbp + 0x1a], 0
mov rdx, qword [rbp + 0x62]
cmp rdx, 0x10
jb 0x180035c08
inc rdx
mov rcx, qword [rbp + 0x4a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035c03
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180036c5d
call fcn.18005f9b8
movdqa xmm0, xmmword [0x18007b1f0]
movdqu xmmword [rbp + 0x5a], xmm0
mov byte [rbp + 0x4a], 0
lea rcx, [rbp + 0x1a0]
call fcn.180003340
nop
lea rcx, [rbp + 0x1e0]
call fcn.1800033f0
mov rax, qword [rbp - 0x50]
mov rcx, qword [rbp + 0x6f0]
xor rcx, rsp
call fcn.18005fed0
mov rbx, qword [rsp + 0x840]
add rsp, 0x800
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rcx, [rbp + 0xe8]
call fcn.1800037a0
mov rbx, qword [rbp + 0xd0]
test rbx, rbx
je 0x180035ccf
mov rdi, qword [rbp + 0xd8]
cmp rbx, rdi
je 0x180035c9c
mov rcx, rbx
call fcn.18001b3e0
add rbx, 0x20
cmp rbx, rdi
jne 0x180035c84
mov rbx, qword [rbp + 0xd0]
mov r8, qword [rbp + 0xe0]
sub r8, rbx
sar r8, 5
mov rdx, rbx
lea rcx, [rbp + 0xd0]
call fcn.18002ba80
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
xor esi, esi
mov qword [rbp + 0xe0], rsi
jmp 0x180035cd1
xor esi, esi
mov rdx, qword [rbp + 0xb8]
test rdx, rdx
je 0x180035d09
mov r8, qword [rbp + 0xc8]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0xb8]
call fcn.18002b9e0
mov qword [rbp + 0xb8], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xc0], xmm0
lea rcx, [rbp + 0x78]
call fcn.1800036d0
nop
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x180035dad
mov rdi, qword [rbp - 0x80]
cmp rbx, rdi
je 0x180035d46
nop word [rax + rax]
mov rcx, rbx
call fcn.180002fe0
add rbx, 0x28
cmp rbx, rdi
jne 0x180035d30
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x78]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x180035d98
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180035d98
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.18005f9b8
xorps xmm0, xmm0
mov qword [rsp + 0x78], rsi
movdqa xmmword [rbp - 0x80], xmm0
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x180035b81
mov r8, qword [rsp + 0x70]
sub r8, rdx
sar r8, 3
lea rcx, [rsp + 0x60]
call fcn.18002b990
jmp 0x180035b73
mov qword [rsp + 0x40], r8
xor r8d, r8d
mov edx, 0x119
lea rcx, [rsp + 0x40]
call fcn.18003a460
mov ebx, 0x8f
mov eax, ebx
sub eax, 0x8d
je 0x180035e42
sub eax, 1
je 0x180035e32
sub eax, 1
je 0x180035e27
cmp eax, 4
jne 0x180035e64
xor edx, edx
mov r8d, 0x1ec
lea rcx, [rbp + 0x70]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp + 0x70]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x180035e64
lea rax, [rsp + 0x60]
mov qword [rbp + 0x70], rax
jmp 0x180035e64
lea rax, [0x180081890]
mov qword [rbp + 0x170], rax
jmp 0x180035e64
mov dword [rsp + 0x28], GetAcceptLanguagesA
xor eax, eax
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [rbp + 0x178]
xor edx, edx
xor ecx, ecx
call fcn.18000a1d0
dec ebx
cmp ebx, 0x8b
ja 0x180035df2
mov edx, 0x22
lea rcx, [rbp + 0x70]
call fcn.180006880
mov r9d, esi
mov r8, qword [rbp - 0x28]
xor edx, edx
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.SHLWAPI.dll_SHCopyKeyA]
mov ebx, dword [rsp + 0x48]
jmp 0x1800365c1
xor esi, esi
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
lea r9, [rbp]
lea r8, [0x1800128d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rdi, rax
test rax, rax
jne 0x1800360c3
mov ebx, esi
cmp ebx, 0x36
ja case.0x180035eea.1
mov ecx, ebx
lea rdx, [0x180000000]
movzx eax, byte [rdx + rcx + 0x36d30]
mov ecx, dword [rdx + rax*4 + 0x36d04]
add rcx, rdx
jmp rcx
mov dword [rbp + 0x2aa], 0x720066
mov word [rbp + 0x2ae], si
mov r8d, 4
lea rdx, [0x180076cf8]
lea rcx, [rbp + 0x298]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 3
lea rdx, [0x180076d42]
lea rcx, [rbp + 0x298]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov eax, 0x52
mov word [rbp + 0x268], ax
jmp case.0x180035eea.1
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [rbp + 0x268]
mov edx, r14d
mov ecx, r15d
call qword [sym.imp.SHLWAPI.dll_AssocQueryKeyA]
mov dword [rbp - 0x50], 1
jmp case.0x180035eea.1
mov word [rbp + 0x298], si
jmp case.0x180035eea.1
mov r15d, 0x10
mov dword [rbp - 0x48], esi
lea r14d, [r15 - 0xe]
jmp case.0x180035eea.1
mov r8d, 8
lea rdx, str.PC_E_RE
lea rcx, [rbp + 0x269]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0x270], 0x4d
movzx eax, word [0x180076d58]
mov word [rbp + 0x271], ax
movzx eax, byte [0x180076d5a]
mov byte [rbp + 0x273], al
jmp case.0x180035eea.1
mov r8d, 4
lea rdx, str.icudt53l_region_pt_TL.res
lea rcx, [rbp + 0x298]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 5
lea rdx, [0x180076da0]
lea rcx, [rbp + 0x2a0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov word [rbp + 0x2aa], si
jmp case.0x180035eea.1
mov eax, dword [str.E_DI]
mov dword [rbp + 0x273], eax
movzx eax, byte [0x180076dc8]
mov byte [rbp + 0x277], al
jmp case.0x180035eea.1
lea rcx, [rbp + 0x268]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], sil
jne 0x180036034
movzx eax, word [0x180076918]
mov word [rcx], ax
mov r8d, 4
lea rdx, [0x180076dcc]
lea rcx, [rbp + 0x278]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov r8d, 2
lea rdx, [0x180076dd0]
lea rcx, [rbp + 0x268]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp case.0x180035eea.1
mov dword [rbp - 0x40], esi
mov dword [rsp + 0x38], esi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
lea rax, [rbp - 0x40]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [rbp - 0x48]
xor edx, edx
lea rcx, [rbp + 0x298]
call sub.SHLWAPI.dll_SHRegGetUSValueW
add ebx, 6
lea eax, [rbx + 0x8a]
cmp eax, 0xc6
jb 0x180035ec6
mov ebx, dword [rsp + 0x48]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [rsp + 0x40]
jmp 0x1800365c1
movzx eax, word [0x180076de6]
mov word [rbp + 0x25e], ax
movzx eax, byte [0x180076de8]
mov byte [rbp + 0x260], al
mov byte [rbp + 0x261], 0
lea rdx, [0x180081898]
mov ecx, reloc.SHLWAPI.dll_GetAcceptLanguagesA
call fcn.18005c940
test al, al
jne 0x180036381
xor edx, edx
mov ebx, edx
cmp ebx, 0xfc
ja case.0x18003613d.12
mov eax, ebx
lea r8, [0x180000000]
movzx eax, byte [r8 + rax + 0x36d9c]
mov ecx, dword [r8 + rax*4 + 0x36d68]
add rcx, r8
jmp rcx
movabs rax, 0x7300650072002e
mov qword [rbp + 0x504], rax
mov word [rbp + 0x50c], dx
mov r12, 0xffffffff80000001
jmp case.0x18003613d.12
mov eax, 0x74
mov word [rbp + 0x2c0], ax
mov dword [rbp + 0x2c1], 0x754364
add cl, ch
jmp 0x18003617d
add byte [rax], al
mov eax, 0x74
mov word [rbp + 0x2cd], ax
mov dword [rbp + 0x2ce], 0x616c43
mov eax, 0x7373
mov word [rbp + 0x2d1], ax
jmp case.0x18003613d.12
mov dword [rbp + 0x2c9], 0x6d726f
mov eax, 0x61
mov word [rbp + 0x2cc], ax
jmp case.0x18003613d.12
mov eax, 0x73
mov word [rbp + 0x2c4], ax
mov eax, 0x74
mov word [rbp + 0x2c5], ax
mov eax, 0x6f
mov word [rbp + 0x2c6], ax
mov eax, 0x466d
mov word [rbp + 0x2c7], ax
jmp case.0x18003613d.12
mov eax, 0x65
mov word [rbp + 0x3d4], ax
movzx eax, word [0x180076df8]
mov word [rbp + 0x3d5], ax
movzx eax, byte [0x180076dfa]
mov byte [rbp + 0x3d7], al
jmp case.0x18003613d.12
mov dword [rsp + 0x50], edx
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea r9, [rbp - 0x30]
lea r8, [rbp + 0x3d0]
lea rdx, [rbp + 0x2c0]
mov rcx, r12
call qword [sym.imp.SHLWAPI.dll_SHGetValueA]
lea rcx, [rbp + 0x4e0]
call qword [sym.imp.SHLWAPI.dll_PathParseIconLocationW]
mov dword [rbp - 0x50], 1
xor edx, edx
jmp case.0x18003613d.12
mov eax, dword [0x180076e08]
mov dword [rbp + 0x4e8], eax
movzx eax, word [0x180076e0c]
mov word [rbp + 0x4ec], ax
mov word [rbp + 0x4ee], dx
mov r8d, 4
lea rdx, [0x180076e3e]
lea rcx, [rbp + 0x4e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
xor edx, edx
jmp case.0x18003613d.12
mov eax, 0x6e
mov word [rbp + 0x3d7], ax
mov eax, 0x67
mov word [rbp + 0x3d8], ax
lea rcx, [rbp + 0x3d0]
dec rcx
nop
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x1800362d0
movzx eax, word [0x180076c90]
mov word [rcx], ax
movzx eax, byte [0x180076c92]
mov byte [rcx + 2], al
movabs rax, 0x64007500630069
mov qword [rbp + 0x4e0], rax
jmp case.0x18003613d.12
mov eax, dword [0x180076e8c]
mov dword [rbp + 0x4f6], eax
movzx eax, word [0x180076e90]
mov word [rbp + 0x4fa], ax
mov word [rbp + 0x4fc], dx
mov r8d, 2
lea rdx, [0x180076ece]
lea rcx, [rbp + 0x4e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov dword [rbp + 0x500], 0x6c006d
xor edx, edx
jmp case.0x18003613d.12
mov byte [rbp + 0x2d3], 0
mov eax, dword [str.Titl]
mov dword [rbp + 0x3d0], eax
movzx eax, byte [0x180076f00]
mov byte [rbp + 0x3d4], al
add ebx, 0x15
lea eax, [rbx + 0xbb]
cmp eax, 0x1cc
jb 0x180036114
mov ebx, dword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
jmp 0x1800365c1
mov word [rsp + 0x40], dx
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [0x180081918]
xor edx, edx
mov r8d, 0xfb
lea rcx, [rbp + 0x10]
call fcn.180046840
xor eax, eax
mov qword [rbp - 0x28], rax
lea rdx, [rsp + 0x60]
lea ecx, [rax + 0x4f]
call fcn.18005c580
lea rax, [rbp + 0x40]
mov qword [rsp + 0x40], rax
mov rdx, qword [rsp + 0x68]
cmp rdx, qword [rsp + 0x70]
je 0x1800363f5
lea rax, [rbp + 0x40]
mov qword [rdx], rax
add qword [rsp + 0x68], 8
jmp 0x1800365c1
lea r8, [rsp + 0x40]
lea rcx, [rsp + 0x60]
call fcn.180001720
jmp 0x1800365c1
mov word [rsp + 0x40], dx
lea r9, [0x1800818f8]
mov r8d, 0xb2
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x40]
call fcn.180019620
jmp 0x1800365c1
lea rax, [rbp + 0x280]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x180036440
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x1e0]
call fcn.180027020
mov r8d, 1
lea rdx, [0x180076f04]
lea rcx, [rbp + 0x200]
call fcn.180027020
mov eax, 0x1bb
mov word [rbp + 0x240], ax
lea r8, [rbp + 0x220]
mov edx, 0x70
xor ecx, ecx
call fcn.180015810
mov qword [rbp - 0x38], 0xffffffff80000001
jmp 0x1800365c1
mov byte [rbp + 0x25e], 0
jmp case.default.0x1800358c5
lea rcx, [rbp + 0x250]
call qword [sym.imp.SHLWAPI.dll_UrlIsOpaqueA]
jmp 0x1800365c1
lea rax, [rbp + 0x10]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x68]
cmp rax, qword [rsp + 0x70]
je 0x1800364e4
lea rcx, [rbp + 0x10]
mov qword [rax], rcx
add qword [rsp + 0x68], 8
jmp 0x1800364f8
lea r8, [rsp + 0x40]
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x60]
call fcn.180001720
mov eax, dword [0x180081940]
mov dword [rsp + 0x40], eax
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x40]
lea edx, [rsp + 0x40]
mov ecx, 0x10c
call fcn.1800314f0
lea rax, [rsp + 0x60]
mov qword [rbp - 0x20], rax
mov eax, dword [0x180081940]
mov dword [rbp - 0x18], eax
mov eax, dword [0x180081944]
mov dword [rbp - 0x14], eax
movaps xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rbp], xmm0
jmp 0x1800365c1
lea r8, [rbp + 0x1a0]
mov edx, 0x109
lea rcx, [rbp + 0x1e0]
call fcn.18000a6e0
jmp 0x1800365c1
mov r8d, 4
lea rdx, [0x180076f0d]
lea rcx, [rbp + 0x250]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 4
lea rdx, [0x180076f49]
lea rcx, [rbp + 0x250]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 2
lea rdx, [0x180076f72]
lea rcx, [rbp + 0x250]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 2
lea rdx, [0x180077015]
lea rcx, [rbp + 0x25c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov edx, 0x1bb
lea r8, [0x180008ad0]
dec edi
mov dword [rsp + 0x40], edi
dec r13d
cmp edi, ebx
jbe 0x180036adc
lea r9, [0x180000000]
jmp 0x1800358b0
lea rcx, [rbp + 0xe8]
call fcn.1800037a0
mov rbx, qword [rbp + 0xd0]
test rbx, rbx
je 0x180036657
mov rdi, qword [rbp + 0xd8]
cmp rbx, rdi
je 0x180036628
nop
mov rcx, rbx
call fcn.18001b3e0
add rbx, 0x20
cmp rbx, rdi
jne 0x180036610
mov rbx, qword [rbp + 0xd0]
mov r8, qword [rbp + 0xe0]
sub r8, rbx
sar r8, 5
mov rdx, rbx
lea rcx, [rbp + 0xd0]
call fcn.18002ba80
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], rsi
mov rdx, qword [rbp + 0xb8]
test rdx, rdx
je 0x18003668f
mov r8, qword [rbp + 0xc8]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0xb8]
call fcn.18002b9e0
mov qword [rbp + 0xb8], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xc0], xmm0
lea rcx, [rbp + 0x78]
call fcn.1800036d0
nop
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x18003672d
mov rdi, qword [rbp - 0x80]
cmp rbx, rdi
je 0x1800366c6
mov rcx, rbx
call fcn.180002fe0
add rbx, 0x28
cmp rbx, rdi
jne 0x1800366b0
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x78]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x180036718
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180036718
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.18005f9b8
mov qword [rsp + 0x78], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x18003675b
mov r8, qword [rsp + 0x70]
sub r8, rdx
sar r8, 3
lea rcx, [rsp + 0x60]
call fcn.18002b990
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rsi
mov rdx, qword [rbp + 0x32]
cmp rdx, 0x10
jb 0x180036799
inc rdx
mov rcx, qword [rbp + 0x1a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180036794
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180036794
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18005f9b8
movdqa xmm0, xmmword [0x18007b1f0]
movdqu xmmword [rbp + 0x2a], xmm0
mov byte [rbp + 0x1a], 0
sbb al, byte [rax]
mov rdx, qword [rbp + 0x62]
cmp rdx, 0x10
jb 0x180035c08
inc rdx
mov rcx, qword [rbp + 0x4a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035c03
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180035c03
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rcx, [rbp + 0xe8]
call fcn.1800037a0
mov rbx, qword [rbp + 0xd0]
test rbx, rbx
je 0x18003685e
mov rdi, qword [rbp + 0xd8]
cmp rbx, rdi
je 0x18003682b
mov rcx, rbx
call fcn.18001b3e0
add rbx, 0x20
cmp rbx, rdi
jne 0x180036813
mov rbx, qword [rbp + 0xd0]
mov r8, qword [rbp + 0xe0]
sub r8, rbx
sar r8, 5
mov rdx, rbx
lea rcx, [rbp + 0xd0]
call fcn.18002ba80
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
xor esi, esi
mov qword [rbp + 0xe0], rsi
jmp 0x180036860
xor esi, esi
mov rdx, qword [rbp + 0xb8]
test rdx, rdx
je 0x180036898
mov r8, qword [rbp + 0xc8]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0xb8]
call fcn.18002b9e0
mov qword [rbp + 0xb8], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xc0], xmm0
lea rcx, [rbp + 0x78]
call fcn.1800036d0
nop
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x180036907
mov rdi, qword [rbp - 0x80]
cmp rbx, rdi
je 0x1800368cb
mov rcx, rbx
call fcn.180002fe0
add rbx, 0x28
cmp rbx, rdi
jne 0x1800368b5
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x78]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov r8, rdx
shr r8, 0x3f
add r8, rdx
mov rdx, rbx
lea rcx, [rsp + 0x78]
call fcn.18002ba30
mov qword [rsp + 0x78], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x180036935
mov r8, qword [rsp + 0x70]
sub r8, rdx
sar r8, 3
lea rcx, [rsp + 0x60]
call fcn.18002b990
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rsi
mov rdx, qword [rbp + 0x32]
cmp rdx, 0x10
jb 0x180036973
inc rdx
mov rcx, qword [rbp + 0x1a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003696e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003696e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18005f9b8
movdqa xmm0, xmmword [0x18007b1f0]
movdqu xmmword [rbp + 0x2a], xmm0
mov byte [rbp + 0x1a], 0
mov rdx, qword [rbp + 0x62]
cmp rdx, 0x10
jb 0x180035c08
inc rdx
mov rcx, qword [rbp + 0x4a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035c03
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180035c03
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor esi, esi
mov dword [rbp - 0x50], esi
lea rcx, [rbp + 0xe8]
call fcn.1800037a0
mov rbx, qword [rbp + 0xd0]
test rbx, rbx
je 0x180036a39
mov rdi, qword [rbp + 0xd8]
cmp rbx, rdi
je 0x180036a0a
mov rcx, rbx
call fcn.18001b3e0
add rbx, 0x20
cmp rbx, rdi
jne 0x1800369f2
mov rbx, qword [rbp + 0xd0]
mov r8, qword [rbp + 0xe0]
sub r8, rbx
sar r8, 5
mov rdx, rbx
lea rcx, [rbp + 0xd0]
call fcn.18002ba80
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], rsi
mov rdx, qword [rbp + 0xb8]
test rdx, rdx
je 0x180036a71
mov r8, qword [rbp + 0xc8]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0xb8]
call fcn.18002b9e0
mov qword [rbp + 0xb8], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xc0], xmm0
lea rcx, [rbp + 0x78]
call fcn.1800036d0
nop
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x180035dad
mov rdi, qword [rbp - 0x80]
cmp rbx, rdi
je 0x180036aa8
mov rcx, rbx
call fcn.180002fe0
add rbx, 0x28
cmp rbx, rdi
jne 0x180036a92
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x78]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov r8, rdx
shr r8, 0x3f
add r8, rdx
mov rdx, rbx
lea rcx, [rsp + 0x78]
call fcn.18002ba30
jmp 0x180035da0
lea rcx, [rbp + 0xe8]
call fcn.1800037a0
lea rcx, [rbp + 0xd0]
call fcn.1800031e0
mov rdx, qword [rbp + 0xb8]
test rdx, rdx
je 0x180036b30
mov r8, qword [rbp + 0xc8]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0xb8]
call fcn.18002b9e0
xor esi, esi
mov qword [rbp + 0xb8], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xc0], xmm0
jmp 0x180036b32
xor esi, esi
lea rcx, [rbp + 0x78]
call fcn.1800036d0
nop
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x180036ba2
mov rdi, qword [rbp - 0x80]
cmp rbx, rdi
je 0x180036b66
nop
mov rcx, rbx
call fcn.180002fe0
add rbx, 0x28
cmp rbx, rdi
jne 0x180036b50
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x78]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov r8, rdx
shr r8, 0x3f
add r8, rdx
mov rdx, rbx
lea rcx, [rsp + 0x78]
call fcn.18002ba30
mov qword [rsp + 0x78], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x180036bd0
mov r8, qword [rsp + 0x70]
sub r8, rdx
sar r8, 3
lea rcx, [rsp + 0x60]
call fcn.18002b990
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rsi
mov rdx, qword [rbp + 0x32]
cmp rdx, 0x10
jb 0x180036c0e
inc rdx
mov rcx, qword [rbp + 0x1a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180036c09
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180036c09
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18005f9b8
movdqa xmm0, xmmword [0x18007b1f0]
movdqu xmmword [rbp + 0x2a], xmm0
mov byte [rbp + 0x1a], 0
mov rdx, qword [rbp + 0x62]
cmp rdx, 0x10
jb 0x180035c08
inc rdx
mov rcx, qword [rbp + 0x4a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035c03
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180035c03
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor r8d, r8d
lea rdx, [0x180074bc1]
lea rcx, str._Z20convert_int2_sat_rtzDv2_c
call fcn.18002dd00
int3