Function at 0x1800843f0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4a0]
sub rsp, 0x5a0
mov rax, qword [0x180357660]
xor rax, rsp
mov qword [rbp + 0x490], rax
mov r15, r9
mov ebx, r8d
mov dword [rsp + 0x58], ebx
mov r13, rdx
mov qword [rsp + 0x60], rdx
mov r12, rcx
movdqa xmm0, xmmword [0x18034da50]
movdqa xmmword [rbp + 0x190], xmm0
mov byte [rbp + 0x180], 0
movdqa xmm1, xmm0
movdqa xmmword [rbp + 0x1b0], xmm0
mov byte [rbp + 0x1a0], 0
movdqa xmmword [rbp + 0x1d0], xmm0
mov byte [rbp + 0x1c0], 0
movdqa xmmword [rbp + 0x200], xmm0
mov byte [rbp + 0x1f0], 0
movdqa xmmword [rbp + 0x220], xmm0
mov byte [rbp + 0x210], 0
xor ecx, ecx
mov qword [rbp + 0x20], rcx
mov word [rbp + 0x28], cx
movdqu xmmword [rbp + 0x3a], xmm0
mov byte [rbp + 0x2a], cl
mov qword [rbp - 0x10], rcx
mov word [rbp - 8], cx
movdqu xmmword [rbp + 0xa], xmm0
mov byte [rbp - 6], cl
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rcx
mov qword [rbp - 0x68], rcx
movdqa xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rcx
mov qword [rbp - 0x48], rcx
mov qword [rbp - 0x40], rcx
mov qword [rbp + 0x50], rcx
mov qword [rbp + 0x58], rcx
mov qword [rbp + 0x60], rcx
mov ecx, 0x30
call fcn.1800bf258
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x58], rax
xor ecx, ecx
mov qword [rbp + 0x68], rcx
xorps xmm2, xmm2
movsd qword [rbp + 0x70], xmm2
mov qword [rbp + 0x78], rcx
mov dword [rbp + 0x80], 1
mov qword [rbp + 0x88], rcx
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x90], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xa0], xmm1
movdqa xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0xc0], rcx
mov qword [rbp + 0xc8], 0xffffffffffffffff
mov dword [rbp + 0xd0], ecx
xor eax, eax
movups xmmword [rbp + 0xd8], xmm0
movups xmmword [rbp + 0xe8], xmm0
movups xmmword [rbp + 0xf8], xmm0
movups xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [0x18034da50]
movdqa xmmword [rbp + 0x130], xmm0
mov byte [rbp + 0x120], al
mov word [rbp + 0x140], cx
mov dword [rbp + 0x144], ecx
mov qword [rbp + 0x148], rcx
xorps xmm0, xmm0
movaps xmmword [rbp + 0x150], xmm0
movsd qword [rbp + 0x160], xmm2
mov byte [rbp + 0x168], al
mov qword [rbp + 0x16c], rcx
lea esi, [rbx + 0xf]
lea rcx, [0x180000000]
mov r8, qword [rsp + 0x60]
mov r10, qword [rsp + 0x60]
mov r11, qword [rsp + 0x60]
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x50], r10
mov qword [rsp + 0x40], r11
cmp ebx, esi
jae 0x180084a14
lea edi, [rbx - 0x125]
mov r14, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x38], rcx
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x48], rax
mov r9d, 0x70
lea edx, [r9 - 7]
cmp edi, 0x33
ja case.0x180084643.8
lea r8, [0x180000000]
movzx eax, byte [r8 + rdi + 0x85198]
mov ecx, dword [r8 + rax*4 + 0x85158]
add rcx, r8
jmp rcx
mov dword [rbp + 0x248], 0x74786554
mov byte [rbp + 0x24c], 0
mov r8d, 4
lea rdx, [0x180344afa]
lea rcx, [rbp + 0x24c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp case.0x180084643.8
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__strdup]
mov r8, rax
mov qword [rsp + 0x30], rax
jmp 0x18008488e
mov byte [rbp + 0x250], 0
mov r8d, 4
lea rdx, [0x180344b10]
lea rcx, [rbp + 0x250]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
movzx eax, word [0x180344b33]
mov word [rbp + 0x254], ax
movzx eax, byte [0x180344b35]
mov byte [rbp + 0x256], al
jmp case.0x180084643.8
mov byte [rbp + 0x25c], 0x72
jmp case.0x180084643.8
xor eax, eax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x50], rax
lea r8d, [rax + 0x1e]
mov rdx, r13
lea rcx, str.address
call fcn.1800a3d60
mov r14, rax
jmp case.0x180084643.8
mov word [rbp + 0x230], dx
jmp case.0x180084643.8
mov r14, qword [rsp + 0x70]
xor eax, eax
mov r11d, eax
mov qword [rsp + 0x40], rax
mov edx, eax
mov qword [rsp + 0x38], rax
mov r8, qword [rsp + 0x30]
jmp 0x180084898
mov r9, r15
mov qword [rsp + 0x48], r15
mov rdx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x30]
mov r11, qword [rsp + 0x40]
jmp 0x18008489d
mov eax, dword [str.ransto]
mov dword [rbp + 0x231], eax
movzx eax, word [0x180344b40]
mov word [rbp + 0x235], ax
movzx eax, byte [0x180344b42]
mov byte [rbp + 0x237], al
lea rcx, [rbp + 0x230]
dec rcx
nop dword [rax + rax]
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x180084780
mov eax, dword [str.neex]
mov dword [rcx], eax
movzx eax, byte [0x180344b48]
mov byte [rcx + 4], al
mov word [rbp + 0x23b], r9w
jmp case.0x180084643.8
mov byte [rbp + 0x257], 0
mov r8d, 2
lea rdx, [0x180344b5c]
lea rcx, [rbp + 0x248]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 3
lea rdx, [0x180344b7a]
jmp 0x18008487c
mov r8d, 2
lea rdx, [0x180344b9c]
lea rcx, [rbp + 0x230]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
movzx eax, word [0x180344ba0]
mov word [rbp + 0x23e], ax
mov eax, 0x6d
mov word [rbp + 0x240], ax
jmp case.0x180084643.8
mov rbx, r13
xor dl, dl
movzx eax, byte [r13]
cmp al, 0x2f
jne 0x18008482a
nop
inc rbx
movzx eax, byte [rbx]
cmp al, 0x2f
je 0x180084820
mov rcx, rbx
test al, al
je case.0x180084643.8
cmp al, 0x2f
jne 0x180084839
mov dl, 1
jmp 0x180084842
test dl, dl
je 0x180084842
mov rbx, rcx
xor dl, dl
inc rcx
movzx eax, byte [rcx]
test al, al
jne 0x180084831
jmp case.0x180084643.8
mov byte [rbp + 0x25d], 0
mov r8d, 5
lea rdx, [0x180344bc0]
lea rcx, [rbp + 0x248]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 1
lea rdx, [0x180344bdf]
lea rcx, [rbp + 0x248]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8, qword [rsp + 0x30]
mov r11, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x38]
mov r9, qword [rsp + 0x48]
inc edi
lea eax, [rdi + 0x125]
cmp eax, esi
jb 0x180084615
mov ebx, dword [rsp + 0x58]
mov r10, qword [rsp + 0x50]
lea rcx, [0x180000000]
lea r15d, [rbx - 0x10]
cmp ebx, r15d
jbe case.0x180084c61.0
lea r14d, [rbx - 0x11c]
mov rsi, qword [rsp + 0x70]
mov r13, qword [rsp + 0x70]
mov r12, qword [rsp + 0x70]
mov edi, dword [rsp + 0x78]
cmp r14d, 0x39
ja case.0x180084904.15
movzx eax, byte [rcx + r14 + 0x8520c]
mov ecx, dword [rcx + rax*4 + 0x851cc]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov dword [rsp + 0x58], 3
mov qword [rsp + 0x28], 0
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 0x1a
mov r8, r12
mov rdx, r15
mov rcx, r13
call fcn.18009b500
mov dword [rsp + 0x68], eax
mov rbx, qword [rsp + 0x68]
xor r14d, r14d
lea rcx, [rbp + 0xc8]
call fcn.180006e80
mov rdi, qword [rbp + 0xb0]
test rdi, rdi
je 0x1800849c6
mov rsi, qword [rbp + 0xb8]
cmp rdi, rsi
je 0x18008497d
mov rcx, rdi
call fcn.18001eb50
add rdi, 0x20
cmp rdi, rsi
jne 0x180084965
mov rdi, qword [rbp + 0xb0]
mov rdx, qword [rbp + 0xc0]
sub rdx, rdi
and rdx, 0xffffffffffffffe0
mov rax, rdi
cmp rdx, 0x1000
jb 0x1800849ac
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180084a0d
mov rcx, rdi
call fcn.1800bf294
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0xc0], r14
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x180084fae
mov rdx, qword [rbp + 0xa8]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x180084f97
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180084f97
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x38], rdx
mov r9, qword [rsp + 0x60]
mov qword [rsp + 0x48], r9
jmp 0x1800848bd
xor eax, eax
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x103
lea rdx, [0x180357518]
xor ecx, ecx
call fcn.180095ce0
test al, al
jne 0x180084aae
mov ecx, 0x1d
mov eax, ecx
sub eax, 0x1d
je 0x180084aa3
sub eax, 1
je 0x180084a9a
cmp eax, 1
jne 0x180084aa7
mov dword [rsp + 0x28], 0x104
lea rax, [rbp + 0x280]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x78]
xor edx, edx
mov rcx, rsi
call sub.SHELL32.dll_SHGetUnreadMailCountW
mov dword [rsp + 0x68], 1
jmp case.0x180084c61.0
xor eax, eax
mov qword [rsp + 0x70], rax
jmp 0x180084aa7
xor eax, eax
mov esi, eax
inc ecx
cmp ecx, 0x20
jb 0x180084a54
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
lea rax, [rbp + 0x230]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x180084ad0
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x180]
call fcn.18002f400
mov r8d, 1
lea rdx, [0x180344bf8]
lea rcx, [rbp + 0x1a0]
call fcn.18002f400
jmp 0x180084f4e
mov eax, 0x1bb
mov word [rsp + 0x58], ax
lea rax, [0x180357578]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor edx, edx
mov r8d, 0xcf
lea rcx, [rbp + 0x20]
call fcn.18001cb90
mov eax, 0x1bb
mov word [rsp + 0x58], ax
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea rax, [0x180357598]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x58]
mov ecx, 0xc3
call fcn.180016b20
jmp 0x180084f4e
lea rax, [rbp - 0x10]
mov qword [rsp + 0x78], rax
mov rax, qword [rbp - 0x78]
cmp rax, qword [rbp - 0x70]
je 0x180084b99
lea rcx, [rbp - 0x10]
mov qword [rax], rcx
add qword [rbp - 0x78], 8
jmp 0x180084bab
lea r8, [rsp + 0x78]
mov rdx, qword [rbp - 0x78]
lea rcx, [rbp - 0x80]
call fcn.180004e00
mov eax, dword [0x1803575c0]
mov dword [rsp + 0x58], eax
mov r9d, PathYetAnotherMakeUniqueName
xor r8d, r8d
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x58]
call fcn.1800b6160
xor eax, eax
mov dword [rsp + 0x78], eax
jmp 0x180084f4e
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x180084f4e
mov qword [r9 + 0x30], r12
jmp case.0x180084904.15
lea rax, str.domain
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x60]
xor edx, edx
mov r8d, 0x9c
mov rcx, r10
call fcn.18007ccf0
mov ecx, ILClone
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r12, rax
mov r9, qword [rsp + 0x48]
mov rcx, qword [r9 + 0x30]
mov qword [rax + 8], rcx
mov r11, qword [rsp + 0x40]
mov qword [rax], r11
jmp 0x180084f58
test r13, r13
jne case.0x180084904.15
mov ebx, 7
cmp ebx, 7
ja case.default.0x180084c61
mov eax, ebx
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0x85248]
add rcx, rdx
jmp rcx
mov eax, dword [0x180344c30]
mov dword [rbp + 0x26a], eax
movzx eax, word [0x180344c34]
mov word [rbp + 0x26e], ax
jmp case.default.0x180084c61
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ILRemoveLastID]
mov dword [rsp + 0x68], 1
jmp case.default.0x180084c61
xor eax, eax
mov word [rbp + 0x27c], ax
mov edi, eax
jmp case.default.0x180084c61
mov eax, PathYetAnotherMakeUniqueName
mov word [rbp + 0x268], ax
jmp case.default.0x180084c61
mov r9d, edi
lea r8, [rbp + 0x268]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHPathPrepareForWriteW]
jmp case.default.0x180084c61
mov eax, 0x68
mov word [rbp + 0x27a], ax
jmp case.default.0x180084c61
movabs rax, 0x650074006d0072
mov qword [rbp + 0x270], rax
mov eax, 0x63
mov word [rbp + 0x278], ax
dec ebx
lea eax, [rbx + 0xa9]
cmp eax, 0xa8
ja 0x180084c45
mov ebx, dword [rsp + 0x58]
jmp 0x180084f4e
lea rax, [0x18000ee50]
mov qword [rsp + 0x58], rax
mov edx, 0xcf
lea rcx, [rsp + 0x58]
call fcn.18007c220
lea r9, [rbp - 0x80]
lea r8, [rbp + 0x50]
mov edx, 0xcd
lea rcx, [0x180357510]
call fcn.18005d7d0
lea r9, [rbp + 0x50]
xor edx, edx
xor ecx, ecx
mov r8d, 0x89
call fcn.180067f30
mov r9d, dword [rsp + 0x78]
lea r8, [rbp + 0x248]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHPathPrepareForWriteA]
jmp 0x180084f4e
mov eax, 0x1bb
mov word [rbp + 0x1e0], ax
mov dword [rsp + 0x20], 0x3a
xor r9d, r9d
lea r8, [rbp + 0x1c0]
xor edx, edx
xor ecx, ecx
call fcn.1800ba7c0
lea r8, [rbp + 0x1f0]
lea rdx, [rbp + 0x180]
mov ecx, 0x45
call fcn.180011ff0
jmp 0x180084f4e
mov ecx, ILClone
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r12, rax
mov r9, qword [rsp + 0x48]
mov rax, qword [r9 + 0x30]
mov qword [r12 + 8], rax
mov r8, qword [rsp + 0x30]
mov qword [r12], r8
mov qword [r9 + 0x30], r12
mov r11, qword [rsp + 0x40]
jmp 0x180084f5d
xor eax, eax
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor edx, edx
mov r8d, 0xbb
lea rcx, [rbp - 0x80]
call fcn.1800703b0
lea rax, [rbp + 0x20]
mov qword [rsp + 0x58], rax
mov rdx, qword [rbp - 0x78]
cmp rdx, qword [rbp - 0x70]
je 0x180084e21
lea rax, [rbp + 0x20]
mov qword [rdx], rax
add qword [rbp - 0x78], 8
jmp 0x180084f4e
lea r8, [rsp + 0x58]
lea rcx, [rbp - 0x80]
call fcn.180004e00
jmp 0x180084f4e
mov edx, 0x40
mov rcx, r8
call sub.VCRUNTIME140.dll_strchr
mov qword [rsp + 0x50], rax
test rax, rax
je 0x180084e56
mov byte [rax], 0
inc rax
mov qword [rsp + 0x50], rax
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__strdup]
mov qword [rsp + 0x40], rax
mov edx, PathMakeUniqueName
mov rcx, rax
call sub.VCRUNTIME140.dll_strchr
mov rdx, rax
mov qword [rsp + 0x38], rax
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x48]
mov r11, qword [rsp + 0x40]
jmp 0x180084f62
lea rax, [rbp - 0x80]
mov qword [rbp - 0x30], rax
mov eax, dword [0x1803575c0]
mov dword [rbp - 0x28], eax
mov eax, dword [0x1803575c4]
mov dword [rbp - 0x24], eax
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x20], xmm0
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], eax
lea r9, [rbp - 0x20]
lea r8, [0x180014b90]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r13, rax
jmp 0x180084f4e
test rdx, rdx
je 0x180084ee7
mov byte [rdx], 0
inc rdx
mov qword [rsp + 0x38], rdx
lea rax, str.user
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x60]
xor edx, edx
mov r8d, 0x9c
mov rcx, r11
call fcn.18007ccf0
lea rax, str.detail
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x60]
xor edx, edx
mov r8d, 0x9c
mov rcx, qword [rsp + 0x38]
call fcn.18007ccf0
lea rax, str.localpart
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x60]
xor edx, edx
mov r8d, 0x9c
mov rcx, qword [rsp + 0x30]
call fcn.18007ccf0
mov r9, qword [rsp + 0x48]
mov r11, qword [rsp + 0x40]
mov r8, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x38]
mov r10, qword [rsp + 0x50]
dec ebx
mov dword [rsp + 0x58], ebx
dec r14d
cmp ebx, r15d
jbe case.0x180084c61.0
lea rcx, [0x180000000]
jmp 0x1800848e0
xor r14d, r14d
mov dword [rsp + 0x68], r14d
mov rbx, qword [rsp + 0x68]
jmp 0x180084941
call fcn.1800bf294
mov qword [rbp + 0x98], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xa0], xmm0
lea rcx, [rbp + 0x58]
call fcn.180006db0
nop
mov rdi, qword [rbp - 0x68]
test rdi, rdi
je 0x18008504b
mov rsi, qword [rbp - 0x60]
cmp rdi, rsi
je 0x180084fe5
nop
mov rcx, rdi
call fcn.1800066c0
add rdi, 0x28
cmp rdi, rsi
jne 0x180084fd0
mov rdi, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x58]
sub rcx, rdi
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rdi
cmp rdx, 0x1000
jb 0x180085037
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180085037
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1800bf294
mov qword [rbp - 0x68], r14
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x60], xmm0
mov rdx, qword [rbp - 0x80]
test rdx, rdx
je 0x180085074
mov r8, qword [rbp - 0x70]
sub r8, rdx
sar r8, 3
lea rcx, [rbp - 0x80]
call fcn.1800490d0
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r14
mov rdx, qword [rbp + 0x12]
cmp rdx, 0x10
jb 0x1800850b2
inc rdx
mov rcx, qword [rbp - 6]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800850ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800850ad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800bf294
movdqa xmm0, xmmword [0x18034da50]
movdqu xmmword [rbp + 0xa], xmm0
mov byte [rbp - 6], 0
mov rdx, qword [rbp + 0x42]
cmp rdx, 0x10
jb 0x180085101
inc rdx
mov rcx, qword [rbp + 0x2a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800850fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800850fc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800bf294
movdqa xmm0, xmmword [0x18034da50]
movdqu xmmword [rbp + 0x3a], xmm0
mov byte [rbp + 0x2a], 0
lea rcx, [rbp + 0x1f0]
call fcn.180006a20
nop
lea rcx, [rbp + 0x180]
call fcn.180006ad0
mov rax, rbx
mov rcx, qword [rbp + 0x490]
xor rcx, rsp
call fcn.1800bfa40
mov rbx, qword [rsp + 0x5f0]
add rsp, 0x5a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret