Function at 0x180064a80
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x710]
sub rsp, 0x810
movaps xmmword [rsp + 0x800], xmm6
mov rax, qword [0x1800ab9c8]
xor rax, rsp
mov qword [rbp + 0x6f0], rax
mov esi, r8d
mov dword [rsp + 0x74], r8d
mov rdi, rdx
mov qword [rsp + 0x60], rdx
mov r14, rcx
mov qword [rbp - 0x80], rcx
xor ebx, ebx
mov r12d, ebx
mov dword [rsp + 0x40], ebx
mov qword [rbp + 0x50], rbx
mov qword [rbp + 0x58], 7
mov word [rbp + 0x40], bx
mov r15d, ebx
mov qword [rbp + 0x90], rbx
mov r13d, 7
mov qword [rbp + 0x98], r13
mov word [rbp + 0x80], bx
movdqa xmm0, xmmword [0x1800a4c90]
movdqa xmmword [rbp + 0x240], xmm0
mov byte [rbp + 0x230], bl
movdqa xmm1, xmm0
movdqa xmmword [rbp + 0x260], xmm0
mov byte [rbp + 0x250], bl
movdqa xmmword [rbp + 0x280], xmm0
mov byte [rbp + 0x270], bl
movdqa xmmword [rbp + 0x2b0], xmm0
mov byte [rbp + 0x2a0], bl
movdqa xmmword [rbp + 0x2d0], xmm0
mov byte [rbp + 0x2c0], bl
mov qword [rbp + 0xd0], rbx
mov word [rbp + 0xd8], bx
movdqu xmmword [rbp + 0xea], xmm0
mov byte [rbp + 0xda], bl
mov qword [rbp + 0xa0], rbx
mov word [rbp + 0xa8], bx
movdqu xmmword [rbp + 0xba], xmm0
mov byte [rbp + 0xaa], bl
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
movdqa xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x10], rbx
mov qword [rbp + 0x100], rbx
mov qword [rbp + 0x108], rbx
mov qword [rbp + 0x110], rbx
lea ecx, [rbx + 0x30]
call fcn.1800890b8
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x108], rax
mov qword [rbp + reloc.SHLWAPI.dll_SHRegGetIntW], rbx
xorps xmm2, xmm2
movsd qword [rbp + 0x120], xmm2
mov qword [rbp + 0x128], rbx
mov edx, 1
mov dword [rbp + 0x130], edx
mov qword [rbp + 0x138], rbx
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x140], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x150], xmm1
movdqa xmmword [rbp + 0x160], xmm0
mov qword [rbp + 0x170], rbx
mov qword [rbp + 0x178], 0xffffffffffffffff
mov dword [rbp + 0x180], ebx
xor eax, eax
movups xmmword [rbp + 0x188], xmm0
movups xmmword [rbp + 0x198], xmm0
movups xmmword [rbp + 0x1a8], xmm0
movups xmmword [rbp + 0x1b8], xmm0
mov qword [rbp + 0x1c8], rax
movdqa xmm0, xmmword [0x1800a4c90]
movdqa xmmword [rbp + 0x1e0], xmm0
mov byte [rbp + 0x1d0], al
mov word [rbp + 0x1f0], bx
mov dword [rbp + 0x1f4], ebx
mov qword [rbp + 0x1f8], rbx
xorps xmm0, xmm0
movaps xmmword [rbp + 0x200], xmm0
movsd qword [rbp + 0x210], xmm2
mov byte [rbp + 0x218], al
mov qword [rbp + 0x21c], rbx
mov ecx, esi
mov dword [rsp + 0x34], ecx
imul eax, esi, 0x7a3
mov dword [rsp + 0x68], eax
mov ebx, dword [rsp + 0x68]
mov dword [rsp + 0x70], ebx
cmp esi, eax
ja 0x1800656b8
mov r8, qword [rbp + 0x80]
mov qword [rsp + 0x48], r8
mov rsi, qword [rsp + 0x78]
mov r9d, 0x63
lea r10d, [r9 + 0xc]
lea r11d, [r9 + 1]
lea eax, [r9 + 6]
cmp ecx, 0x6c0
ja 0x180064e99
je 0x180064e88
cmp ecx, 0x2b5
ja 0x180064e2d
je 0x180064e10
cmp ecx, 3
je 0x180064dea
cmp ecx, 0xb
je 0x180064d9d
cmp ecx, 0xa3
je 0x180064d90
cmp ecx, 0x15c
jne 0x18006568a
mov word [rbp + 0x39e], r11w
mov eax, dword [str.emok]
mov dword [rbp + 0x39f], eax
movsd xmm0, qword [str.rathaber.com]
movsd qword [rbp + 0x3a3], xmm0
mov eax, dword [0x1800a4a70]
mov dword [rbp + 0x3ab], eax
movzx eax, byte [0x1800a4a74]
mov byte [rbp + 0x3af], al
mov word [rbp + 0x2e0], r11w
mov word [rbp + 0x2e1], r10w
jmp 0x18006568a
mov dword [rsp + 0x58], 0x104
jmp 0x18006568a
movzx eax, byte [rdi]
test al, al
je 0x180064ddf
mov ecx, dword [r14]
test ecx, ecx
je 0x180064dd1
movsx ecx, al
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isdigit]
test eax, eax
je 0x180065e61
inc rdi
mov qword [rsp + 0x60], rdi
dec dword [r14]
mov ecx, dword [r14]
movzx eax, byte [rdi]
test al, al
jne 0x180064da7
mov edx, 1
mov r8, qword [rsp + 0x48]
mov ecx, dword [rsp + 0x34]
mov ebx, edx
mov dword [rsp + 0x70], edx
jmp 0x18006568a
movzx eax, word [0x1800a46f8]
mov word [rbp + 0x398], ax
mov dword [rbp + 0x39a], 0x616d74
mov word [rbp + 0x39d], 0x6e
jmp 0x18006568a
mov eax, 0x49
mov word [rbp + 0x2e2], ax
mov eax, 0x6e
mov word [rbp + 0x2e3], ax
jmp 0x18006568a
mov eax, ecx
sub eax, 0x40e
je 0x180064e7b
sub eax, 0xee
je case.0x180065074.13
cmp eax, 0x6b
jne 0x18006568a
mov eax, 0x3f
mov word [rbp + 0x2e5], ax
mov eax, 0x65
mov word [rbp + 0x2e6], ax
mov dword [rbp + 0x2e7], 0x6e656d
mov dword [rbp + 0x2ea], 0x6c6174
jmp 0x18006568a
mov word [rbp + 0x2e4], r9w
jmp 0x18006568a
mov eax, 0x55
mov word [rbp + 0x2ed], ax
jmp 0x18006568a
cmp ecx, 0x9315
ja 0x18006546e
je 0x180065353
cmp ecx, 0x819
je 0x180065338
cmp ecx, 0x972
je 0x180065303
cmp ecx, 0xacb
je 0x1800652c6
cmp ecx, 0x49dc
jne 0x18006568a
mov r14d, dword [rsp + 0x58]
xor r13d, r13d
mov edx, r14d
cmp rdx, qword [rbp + 0x50]
ja 0x180064f05
mov qword [rbp + 0x50], rdx
lea rax, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rax, qword [rbp + 0x40]
mov word [rax + rdx*2], r13w
jmp 0x180064f15
xor r8d, r8d
sub rdx, qword [rbp + 0x50]
lea rcx, [rbp + 0x40]
call fcn.1800476c0
lea rdx, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rdx, qword [rbp + 0x40]
mov r8d, dword [rbp + 0x50]
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x180064f44
add r14d, 0x104
jmp 0x180064ee3
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x34], 0x49dc
lea rdi, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rdi, qword [rbp + 0x40]
cmp qword [rbp + 0x50], r13
mov r13, qword [rbp + 0x98]
je 0x180065042
mov r14d, 0x100
mov r8d, r14d
xor edx, edx
lea rcx, [rbp + 0x3d0]
call sub.VCRUNTIME140.dll_memset
lea rcx, [0x1800a470c]
nop
movzx eax, word [rcx]
cmp ax, r14w
jae 0x180064fee
movzx eax, al
mov byte [rbp + rax + 0x3d0], 1
add rcx, 2
lea rax, [0x1800a4710]
cmp rcx, rax
jne 0x180064f90
mov rcx, qword [rbp + 0x50]
dec rcx
mov rax, 0xffffffffffffffff
cmp rcx, rax
cmovb rax, rcx
lea rsi, [rdi + rax*2]
nop dword [rax]
movzx eax, word [rsi]
cmp ax, r14w
jae 0x180064fe3
cmp byte [rbp + rax + 0x3d0], 0
jne 0x18006503a
cmp rsi, rdi
je 0x180065042
sub rsi, 2
jmp 0x180064fd0
mov rcx, qword [rbp + 0x50]
dec rcx
mov rax, 0xffffffffffffffff
cmp rcx, rax
cmovb rax, rcx
lea rsi, [rdi + rax*2]
nop word [rax + rax]
mov ecx, 2
lea rax, [0x1800a470c]
movzx edx, word [rsi]
nop
cmp word [rax], dx
je 0x18006503a
add rax, 2
sub rcx, 1
jne 0x180065020
cmp rsi, rdi
je 0x180065042
sub rsi, 2
jmp 0x180065010
sub rsi, rdi
sar rsi, 1
jmp 0x180065049
mov rsi, 0xffffffffffffffff
cmp rsi, 0xffffffffffffffff
jne 0x1800652af
xor edx, edx
mov edi, edx
cmp edi, 0xd
ja case.default.0x180065074
mov eax, edi
lea r8, [0x180000000]
mov ecx, dword [r8 + rax*4 + 0x6640c]
add rcx, r8
jmp rcx
mov word [rbp + 0x374], dx
lea rdx, [rbp + 0x338]
lea rcx, [rbp + 0x2f8]
call qword [sym.imp.SHLWAPI.dll_PathIsSameRootW]
xor edx, edx
jmp case.default.0x180065074
mov dword [rbp + 0x308], 0x6f
mov r8d, 1
lea rdx, [0x1800a4714]
lea rcx, [rbp + 0x2f8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
xor edx, edx
jmp case.default.0x180065074
mov word [rbp + 0x368], dx
jmp case.default.0x180065074
mov dword [rbp + 0x30c], 0x5c
lea rcx, [rbp + 0x2f8]
sub rcx, 2
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x1800650e4
mov eax, dword [0x1800a4718]
mov dword [rcx], eax
movzx eax, word [0x1800a471c]
mov word [rcx + 4], ax
movups xmm0, xmmword [str.ClassTa]
movups xmmword [rbp + 0x312], xmm0
jmp case.default.0x180065074
mov r8d, 3
lea rdx, [0x1800a4760]
lea rcx, [rbp + 0x338]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
movabs rax, 0x65007200750074
mov qword [rbp + 0x360], rax
xor edx, edx
jmp case.default.0x180065074
mov word [rbp + 0x342], dx
mov r8d, 2
lea rdx, [0x1800a47f2]
lea rcx, [rbp + 0x342]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor edx, edx
jmp case.default.0x180065074
mov eax, dword [0x1800a4834]
mov dword [rbp + 0x346], eax
movzx eax, word [0x1800a4838]
mov word [rbp + 0x34a], ax
movabs rax, 0x70006f00430074
mov qword [rbp + 0x34c], rax
mov word [rbp + 0x354], dx
jmp case.default.0x180065074
mov word [rbp + 0x2f8], dx
jmp case.default.0x180065074
lea rcx, [rbp + 0x2f8]
sub rcx, 2
nop dword [rax]
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x1800651c0
mov eax, dword [0x1800a4878]
mov dword [rcx], eax
movzx eax, word [0x1800a487c]
mov word [rcx + 4], ax
mov eax, dword [0x1800a4880]
mov dword [rbp + 0x2fc], eax
mov eax, 0x55
mov dword [rbp + 0x300], eax
jmp case.default.0x180065074
movabs rax, 0x65006c0062
mov qword [rbp + 0x320], rax
mov eax, 0x56
mov word [rbp + 0x338], ax
movabs rax, 0x72006f00670069
mov qword [rbp + 0x33a], rax
jmp case.default.0x180065074
mov eax, 0x6e
mov dword [rbp + 0x302], eax
mov dword [rbp + 0x304], 0x69
mov dword [rbp + 0x306], 0x63
jmp case.default.0x180065074
mov eax, dword [0x1800a4892]
mov dword [rbp + 0x354], eax
movzx eax, word [0x1800a4896]
mov word [rbp + 0x358], ax
mov word [rbp + 0x35a], dx
jmp case.default.0x180065074
mov eax, dword [0x1800a49a6]
mov dword [rbp + 0x368], eax
movzx eax, word [0x1800a49aa]
mov word [rbp + 0x36c], ax
mov eax, dword [0x1800a4a4a]
mov dword [rbp + 0x36e], eax
movzx eax, word [0x1800a4a4e]
mov word [rbp + 0x372], ax
inc edi
lea eax, [rdi + 0x40]
cmp eax, 0x4e
jb 0x180065057
mov qword [rbp - 0x78], 0xffffffffffffffff
mov rdi, qword [rsp + 0x60]
mov r8, qword [rsp + 0x48]
jmp 0x180065681
mov r8d, 4
lea rdx, str.func
lea rcx, [rbp + 0x3b0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov eax, dword [str.tion]
mov dword [rbp + 0x3bc], eax
movzx eax, byte [0x1800a4708]
mov byte [rbp + 0x3c0], al
mov r8, qword [rsp + 0x48]
jmp 0x180065681
mov ecx, 0x65
mov word [rbp + 0x2f2], cx
mov word [rbp + 0x3b0], ax
lea r8d, [rcx - 0x5d]
lea rdx, str.nt8x16_
lea rcx, [rbp + 0x3b1]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov r8, qword [rsp + 0x48]
jmp 0x180065681
mov eax, 0x70
mov word [rbp + 0x2ee], ax
mov dword [rbp + 0x2ef], 0x746164
jmp 0x18006568a
lea rdx, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rdx, qword [rbp + 0x40]
mov rax, qword [rbp + 0x50]
test rax, rax
je 0x1800653ae
lea rcx, [rax - 1]
mov rax, 0xffffffffffffffff
cmp rcx, rax
cmovb rax, rcx
lea rcx, [rdx + rax*2]
cmp word [rcx], 0x2e
je 0x180065395
cmp rcx, rdx
je 0x1800653ae
sub rcx, 2
cmp word [rcx], 0x2e
jne 0x180065386
sub rcx, rdx
sar rcx, 1
cmp rcx, 0xffffffffffffffff
je 0x1800653ae
mov r14, rcx
sub r14, rsi
dec r14
mov qword [rbp - 0x78], r14
xor eax, eax
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x78], 7
mov word [rbp + 0x60], ax
lea r8, [rsi + 1]
cmp qword [rbp + 0x50], r8
cmovb r8, qword [rbp + 0x50]
lea rdx, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x60]
call fcn.1800479a0
or r12d, 1
add rdi, 8
lea rax, [rbp + 0x60]
cmp rdi, rax
je 0x18006541b
mov rcx, rdi
call fcn.1800472f0
movups xmm0, xmmword [rbp + 0x60]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x70]
movups xmmword [rdi + 0x10], xmm1
mov rdi, qword [rsp + 0x60]
mov r8, qword [rsp + 0x48]
jmp 0x180065681
mov rdx, qword [rbp + 0x78]
cmp rdx, 8
jb 0x1800652b7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006545a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800656ab
call fcn.1800890f4
mov rdi, qword [rsp + 0x60]
mov r8, qword [rsp + 0x48]
jmp 0x180065681
cmp ecx, 0xdc4e
je 0x1800654f1
cmp ecx, 0x12587
je 0x1800654d8
cmp ecx, 0x16ec0
jne 0x18006568a
xor eax, eax
mov ecx, eax
test r15, r15
je 0x180065686
nop word [rax + rax]
lea rax, [rbp + 0x80]
cmp r13, 8
cmovae rax, r8
lea r8, [rdi + 0x28]
cmp qword [rdi + 0x40], 0x10
jb 0x1800654be
mov r8, qword [rdi + 0x28]
movzx eax, byte [rax + rcx*2]
mov byte [r8 + rcx], al
inc rcx
cmp rcx, r15
mov r8, qword [rsp + 0x48]
jb 0x1800654a0
jmp 0x180065681
lea rcx, [rdi + 0x28]
xor r8d, r8d
mov rdx, r15
call fcn.18007f720
mov r8, qword [rsp + 0x48]
jmp 0x180065681
lea rcx, [rsi + 1]
xor eax, eax
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x78], 7
mov word [rbp + 0x60], ax
mov rax, qword [rbp + 0x50]
cmp rax, rcx
jb 0x180066406
sub rax, rcx
mov r8, qword [rbp - 0x78]
cmp rax, r8
cmovb r8, rax
lea rax, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rax, qword [rbp + 0x40]
lea rdx, [rax + rcx*2]
lea rcx, [rbp + 0x60]
call fcn.1800479a0
or r12d, 2
mov dword [rsp + 0x40], r12d
lea r12, [rbp + 0x60]
mov r14, qword [rbp + 0x60]
mov r13, qword [rbp + 0x78]
cmp r13, 8
cmovae r12, r14
mov r15, qword [rbp + 0x70]
cmp r15, 8
jae 0x180065576
movups xmm6, xmmword [r12]
mov qword [rbp + 0x310], 7
jmp 0x1800655c6
mov rdi, r15
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
cmova rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp + 0x2f8]
call fcn.180047440
mov qword [rbp + 0x2f8], rax
lea r8, [r15*2 + 2]
mov rdx, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x310], rdi
movups xmm6, xmmword [rbp + 0x2f8]
mov qword [rbp + 0x308], r15
mov rdx, qword [rbp + 0x98]
cmp rdx, 8
jb 0x180065611
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006560c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800656a4
call fcn.1800890f4
movups xmmword [rbp + 0x80], xmm6
movups xmm0, xmmword [rbp + 0x308]
movups xmmword [rbp + 0x90], xmm0
cmp r13, 8
jb 0x18006565d
lea rdx, [r13*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x180065655
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800656ab
mov rcx, r14
call fcn.1800890f4
mov r8, qword [rbp + 0x80]
mov r13, qword [rbp + 0x98]
mov r12d, dword [rsp + 0x40]
mov rdi, qword [rsp + 0x60]
mov qword [rsp + 0x48], r8
mov r15, qword [rbp + 0x90]
mov edx, 1
mov ecx, dword [rsp + 0x34]
imul eax, dword [rsp + 0x74], 0x73
add ecx, eax
mov dword [rsp + 0x34], ecx
cmp ecx, dword [rsp + 0x68]
ja 0x1800656b2
mov r14, qword [rbp - 0x80]
jmp 0x180064ce6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov esi, dword [rsp + 0x74]
jmp 0x1800656c4
mov rax, qword [rbp + 0x80]
mov qword [rsp + 0x48], rax
mov r14d, esi
mov dword [rsp + 0x50], esi
imul ecx, esi, 0x9f0
mov dword [rsp + 0x3c], ecx
cmp esi, ecx
ja case.0x180065074.13
mov r10d, 0x2d
lea r9d, [r10 + 0x4a]
lea r11d, [r10 + 0x45]
mov r8d, 0x1bb
movzx edi, word [rsp + 0x50]
mov dword [rsp + 0x40], edi
mov r12, qword [rsp + 0x78]
mov r15, qword [rsp + 0x78]
mov r13d, dword [rsp + 0x58]
mov esi, dword [rsp + 0x60]
mov qword [rbp + 8], rsi
mov eax, ecx
mov ecx, 0x73
cmp r14d, 0xeeb
ja 0x180065bd6
je 0x180065b8e
cmp r14d, 0x59a
ja 0x1800657ee
je 0x1800657b2
cmp r14d, 3
je 0x180065799
cmp r14d, 0x1e0
je 0x18006576d
cmp r14d, 0x3bd
jne 0x180066133
mov word [rbp + 0x380], r10w
mov dword [rbp + 0x381], 0x2d78616d
jmp 0x180066133
mov r11d, 0x65
mov word [rbp + 0x37a], r11w
mov dword [rbp + 0x37b], 0x656976
mov word [rbp + 0x37e], r9w
mov word [rbp + 0x37f], cx
jmp 0x18006612d
mov ecx, 0x70
mov word [rbp + 0x378], cx
mov word [rbp + 0x379], r11w
jmp 0x180066133
mov r8d, 0x706f
mov word [rbp + 0x385], r8w
mov dword [rbp + 0x387], 0x756f2d74
mov dword [rbp + 0x38b], 0x6f722d74
mov word [rbp + 0x38f], r9w
mov word [rbp + 0x390], cx
mov r8d, 0x1bb
jmp 0x180066133
cmp r14d, 0x777
je 0x18006589d
cmp r14d, 0x954
je 0x18006583c
cmp r14d, 0xb31
jne 0x180066133
xor eax, eax
mov qword [rbp + 0x10], rax
mov r9d, 0x82
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x270]
call fcn.18003ab40
mov edi, 0x100
mov dword [rsp + 0x40], edi
jmp 0x180066114
mov byte [rsp + 0x39], 1
mov byte [rsp + 0x30], 1
lea rax, [rbp + 0x398]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x180065854
lea rdx, [rbp + 0x398]
lea rcx, [rbp + 0x230]
call fcn.180047840
mov r8d, 1
lea rdx, [0x1800a0ea4]
lea rcx, [rbp + 0x250]
call fcn.180047840
mov r8d, 0x1bb
mov word [rbp + 0x290], r8w
jmp 0x18006611a
xor eax, eax
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0xb8
lea rdx, [0x1800ab8d8]
xor ecx, ecx
call fcn.180036be0
test al, al
jne 0x180065b7b
xor edx, edx
mov edi, edx
cmp edi, 0xa
ja case.default.0x1800658e4
mov eax, edi
lea r8, [0x180000000]
mov ecx, dword [r8 + rax*4 + 0x66444]
add rcx, r8
jmp rcx
mov r8d, 4
lea rdx, [0x1800a4a80]
lea rcx, [rbp + 0x2f8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
movabs rax, 0x46005f0050
mov qword [rbp + 0x2fe], rax
xor edx, edx
jmp case.default.0x1800658e4
mov eax, dword [0x1800a4a88]
mov dword [rbp + 0x33e], eax
movzx eax, word [0x1800a4a8c]
mov word [rbp + 0x342], ax
mov r8d, 1
lea rdx, [0x1800a222c]
lea rcx, [rbp + 0x338]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 2
lea rdx, [0x18009dfdc]
lea rcx, [rbp + 0x344]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov r8d, 4
lea rdx, str.teCo
lea rcx, [rbp + 0x338]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov dword [rbp + 0x34e], 0x6c
xor edx, edx
jmp case.default.0x1800658e4
movabs rax, 0x540072006f
mov qword [rbp + 0x350], rax
mov r8d, 3
lea rdx, [0x1800a4aa0]
lea rcx, [rbp + 0x338]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
xor edx, edx
jmp case.default.0x1800658e4
mov dword [rbp + 0x35c], 0x73
lea rcx, [rbp + 0x338]
sub rcx, 2
nop dword [rax + rax]
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x1800659e0
movsd xmm0, qword [str.form]
movsd qword [rcx], xmm0
movzx eax, word [0x1800a4ab0]
mov word [rcx + 8], ax
mov r8d, 1
lea rdx, [0x18009ed28]
lea rcx, [rbp + 0x338]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
movabs rax, 0x6f00720050
mov qword [rbp + 0x368], rax
mov eax, dword [0x1800a4ab4]
mov dword [rbp + 0x36e], eax
movzx eax, word [0x1800a4ab8]
mov word [rbp + 0x372], ax
xor edx, edx
jmp case.default.0x1800658e4
mov eax, dword [0x1800a4abc]
mov dword [rbp + 0x31a], eax
mov dword [rbp + 0x31e], 0x4f
mov dword [rbp + 0x320], 0x4c
movabs rax, 0x4200240024
mov qword [rbp + 0x322], rax
mov eax, 0x59
mov word [rbp + 0x328], ax
jmp case.default.0x1800658e4
mov dword [rbp + 0x304], 0x4f
mov eax, dword [0x1800a4ac4]
mov dword [rbp + 0x306], eax
movups xmm0, xmmword [str.AT12_CO]
movups xmmword [rbp + 0x30a], xmm0
mov eax, 0x4e
mov dword [rbp + 0x318], eax
jmp case.default.0x1800658e4
mov dword [rsp + 0x60], 0xffffffff
lea rax, [rbp + 0x2f8]
mov rsi, 0xffffffffffffffff
nop dword [rax]
inc rsi
cmp word [rax + rsi*2], 0
jne 0x180065ae0
mov qword [rbp + 8], rsi
jmp case.default.0x1800658e4
mov dword [rbp - 0x78], 0x104
mov r9d, esi
lea r8, [rbp + 0x338]
lea rdx, [rbp + 0x2f8]
mov ecx, dword [rbp - 0x70]
call qword [sym.imp.SHLWAPI.dll_StrIsIntlEqualW]
xor edx, edx
jmp case.default.0x1800658e4
mov dword [rbp + 0x32a], 0x30
mov dword [rbp + 0x32c], 0x41
mov r8d, 3
lea rdx, [0x1800a4ae0]
lea rcx, [rbp + 0x32e]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov r8d, 4
lea rdx, [0x1800a4ae8]
lea rcx, [rbp + 0x338]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor edx, edx
jmp case.default.0x1800658e4
mov dword [rbp - 0x70], edx
mov qword [rsp + 0x78], rdx
inc edi
lea eax, [rdi + 0x29]
cmp eax, 0x34
jb 0x1800658c7
mov edi, dword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
jmp 0x180066114
mov dword [rbp - 0x60], edx
mov r8d, 0xcd
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x2a0]
call fcn.180067810
mov eax, 0x1bb
mov word [rsp + 0x50], ax
lea r9, [0x1800ab938]
lea r8, [rsp + 0x50]
mov edx, 0x136
lea rcx, [rbp + 0xd0]
call fcn.180046310
jmp 0x180066114
cmp r14d, 0x165f
ja 0x180065e29
je 0x180065d4c
cmp r14d, 0x10c8
je 0x180065d17
cmp r14d, 0x12a5
je 0x180065cf1
cmp r14d, 0x1482
jne 0x180066133
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x50], rax
mov rdx, qword [rbp - 0x48]
cmp rdx, qword [rbp - 0x40]
je 0x180065c3e
lea rax, [rbp + 0xd0]
mov qword [rdx], rax
mov rdx, qword [rbp - 0x48]
add rdx, 8
mov qword [rbp - 0x48], rdx
jmp 0x180065c50
lea r8, [rsp + 0x50]
lea rcx, [rbp - 0x50]
call fcn.18002c0f0
mov rdx, qword [rbp - 0x48]
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x50], rax
cmp rdx, qword [rbp - 0x40]
je 0x180065c73
lea rax, [rbp + 0xa0]
mov qword [rdx], rax
add qword [rbp - 0x48], 8
jmp 0x180065c81
lea r8, [rsp + 0x50]
lea rcx, [rbp - 0x50]
call fcn.18002c0f0
mov eax, dword [0x1800ab980]
mov dword [rsp + 0x50], eax
lea r9, [rsp + 0x50]
xor r8d, r8d
lea rdx, [rbp - 0x50]
lea ecx, [r8 + 0x38]
call fcn.1800392a0
lea rax, [rbp - 0x50]
mov qword [rbp + 0x60], rax
mov eax, dword [0x1800ab980]
mov dword [rbp + 0x68], eax
mov eax, dword [0x1800ab984]
mov dword [rbp + 0x6c], eax
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x30], xmm0
movsx eax, di
lea rcx, [rbp + 0x378]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
xor r9d, r9d
xor edx, edx
lea rcx, [rdx - 1]
lea r8d, [r9 + 4]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov r15, rax
jmp 0x180066114
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x78]
lea rcx, [rbp - 0x50]
call fcn.18003cb80
mov edx, 1
mov dword [rbp - 0x6c], edx
mov r8d, 0x1bb
jmp 0x18006611f
mov dword [rbp - 0x64], 0x2381f
mov word [rsp + 0x50], r8w
mov r9d, 0x15
lea r8, [rbp + 0xa0]
lea rdx, [rsp + 0x50]
lea rcx, [0x1800ab958]
call fcn.18003f3e0
xor eax, eax
mov dword [rbp - 0x68], eax
jmp 0x180066114
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x30]
lea r8, [0x18003d570]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rbp - 0x80], rax
cmp rax, 0
jne 0x180065e1b
mov edi, 0x55
nop
mov ecx, edi
sub ecx, 0x55
je 0x180065dde
sub ecx, 1
je 0x180065d97
cmp ecx, 1
je 0x18006616b
jmp 0x180065e0c
xor eax, eax
mov ecx, eax
movzx eax, byte [rsp + 0x38]
test r13d, r13d
cmovne ecx, eax
mov byte [rsp + 0x38], cl
lea rcx, [rsp + 0x34]
call qword [sym.imp.SHELL32.dll_ILFindLastID]
cmp byte [rsp + 0x38], 0
je 0x180065e0c
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp]
call qword [sym.imp.dbghelp.dll_SymEnumerateModules64]
mov r13d, eax
mov dword [rsp + 0x58], eax
mov rcx, qword [rbp]
call qword [sym.imp.dbghelp.dll_SymCleanup]
jmp 0x180065e0c
mov byte [rsp + 0x38], 1
mov qword [rbp], 0xffffffffffffffff
xor r8d, r8d
xor edx, edx
lea rcx, [rdx - 1]
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov r13d, eax
mov dword [rsp + 0x58], eax
xor eax, eax
mov word [rsp + 0x34], ax
mov byte [rsp + 0x36], al
inc edi
cmp edi, 0x58
jb 0x180065d80
mov edi, dword [rsp + 0x40]
xor eax, eax
mov qword [rbp + 0x18], rax
mov dword [rbp + 0x20], eax
jmp 0x180066114
cmp r14d, 0x183c
je 0x1800660b1
cmp r14d, 0x1a19
je 0x180065edf
cmp r14d, 0x1bf6
jne 0x180066133
cmp byte [rsp + 0x39], 0
je 0x180065e61
mov ecx, dword [rsp + 0x68]
call qword [sym.imp.SHELL32.dll_SHChangeNotifyDeregister]
xor eax, eax
mov ebx, eax
mov esi, ebx
lea rcx, [rbp + 0x178]
call fcn.18002e170
mov rbx, qword [rbp + 0x160]
test rbx, rbx
je 0x180066175
mov rdi, qword [rbp + 0x168]
cmp rbx, rdi
je 0x180065ea8
nop
mov rcx, rbx
call fcn.1800472f0
add rbx, 0x20
cmp rbx, rdi
jne 0x180065e90
mov rbx, qword [rbp + 0x160]
mov r8, qword [rbp + 0x170]
sub r8, rbx
sar r8, 5
mov rdx, rbx
lea rcx, [rbp + 0x160]
call fcn.180049c40
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x160], xmm0
xor r14d, r14d
mov qword [rbp + 0x170], r14
jmp 0x180066178
mov r9d, 0x2e
lea r8, [rbp + 0x100]
lea rdx, [rbp - 0x50]
lea rcx, [0x1800ab8d0]
call fcn.18003a9e0
lea r9, [rbp + 0x100]
xor r8d, r8d
mov edx, 0x8d
xor ecx, ecx
call fcn.18003e8c0
xor eax, eax
mov ecx, eax
movzx eax, byte [rsp + 0x39]
cmp dword [rsp + 0x68], ecx
cmovne ecx, eax
mov byte [rsp + 0x39], cl
cmp byte [rsp + 0x30], 0
je 0x18006608a
mov edi, ILRemoveLastID
movzx r14d, byte [rsp + 0x30]
movsxd rbx, dword [rsp + 0x40]
mov esi, 0x6874
lea r13d, [rdi + 0x5a]
nop word [rax + rax]
mov eax, edi
sub eax, 0xd
je 0x18006603e
sub eax, 0x41
je 0x180066014
sub eax, 0x41
je 0x180065fe4
sub eax, 0x41
je 0x180065fad
cmp eax, 0x41
jne 0x180066060
lea rcx, [rbp + 0x3d0]
call qword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
test r14b, r14b
je 0x180066060
mov rcx, r12
call qword [sym.imp.dbghelp.dll_ImageNtHeader]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x180066060
movsx rax, bx
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf001f
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov r12, rax
test rax, rax
jne 0x180066060
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r14b, r14b
jmp 0x180066060
mov eax, 0x3a
mov word [rbp + 0x3e0], ax
mov eax, 0x5c
mov word [rbp + 0x3e1], ax
mov word [rbp + 0x3e2], r13w
mov word [rbp + 0x3e3], si
mov byte [rbp + 0x3e5], 0
jmp 0x180066060
mov eax, 0x6e
mov word [rbp + 0x3d7], ax
mov word [rbp + 0x3d8], r13w
mov dword [rbp + 0x3d9], 0x68746957
mov dword [rbp + 0x3dd], 0x6e654c
jmp 0x180066060
mov eax, 0x4e
mov word [rbp + 0x3d0], ax
mov eax, 0x7765
mov word [rbp + 0x3d1], ax
mov dword [rbp + 0x3d3], 0x69727453
add edi, 0x41
cmp edi, 0x145
jbe 0x180065f50
mov byte [rsp + 0x30], r14b
mov ebx, dword [rsp + 0x70]
mov rsi, qword [rbp + 8]
mov r14d, dword [rsp + 0x50]
mov r13d, dword [rsp + 0x58]
mov edi, dword [rsp + 0x40]
xor eax, eax
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [rbp + 0x5e0]
lea rdx, [rbp + 0x3b0]
lea rcx, [rbp + 0x2e0]
call qword [sym.imp.dbghelp.dll_FindDebugInfoFileEx]
jmp 0x180066114
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, [0x1800340b0]
mov qword [rsp + 0x68], rax
xor r8d, r8d
lea rdx, [rsp + 0x68]
lea ecx, [r8 + 0x41]
call fcn.180040eb0
lea rax, [rbp + 0x18]
mov qword [rsp + 0x28], rax
mov eax, dword [rbp - 0x6c]
mov dword [rsp + 0x20], eax
mov r9d, dword [rbp - 0x68]
mov r8d, dword [rbp - 0x64]
mov edx, dword [rbp - 0x60]
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.SHELL32.dll_SHChangeNotifyRegister]
mov dword [rsp + 0x68], eax
xor eax, eax
mov edx, eax
movzx ecx, byte [rsp + 0x30]
test r15, r15
cmovne edx, ecx
mov byte [rsp + 0x30], dl
mov r8d, 0x1bb
mov edx, 1
mov r10d, 0x2d
lea r9d, [r10 + 0x4a]
mov eax, dword [rsp + 0x3c]
mov r11d, 0x72
imul ecx, dword [rsp + 0x74], 0x9f
add r14d, ecx
mov dword [rsp + 0x50], r14d
cmp r14d, eax
ja case.0x180065074.13
jmp 0x180065713
mov r9d, dword [rbp - 0x78]
lea r8, [rbp + 0x3d0]
mov edx, dword [rsp + 0x60]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.SHELL32.dll_DragQueryFileW]
mov esi, 1
jmp 0x180065e67
xor r14d, r14d
mov rdx, qword [rbp + 0x148]
test rdx, rdx
je 0x1800661b0
mov r8, qword [rbp + 0x158]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0x148]
call fcn.180049ba0
mov qword [rbp + 0x148], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x150], xmm0
lea rcx, [rbp + 0x108]
call fcn.18002e0a0
nop
mov rbx, qword [rbp - 0x38]
test rbx, rbx
je 0x18006624e
mov rdi, qword [rbp - 0x30]
cmp rbx, rdi
je 0x1800661e8
mov rcx, rbx
call fcn.18002d9b0
add rbx, 0x28
cmp rbx, rdi
jne 0x1800661d3
mov rbx, qword [rbp - 0x38]
mov rcx, qword [rbp - 0x28]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x18006623a
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18006623a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1800890f4
mov qword [rbp - 0x38], r14
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x30], xmm0
mov rdx, qword [rbp - 0x50]
test rdx, rdx
je 0x180066277
mov r8, qword [rbp - 0x40]
sub r8, rdx
sar r8, 3
lea rcx, [rbp - 0x50]
call fcn.180049b50
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r14
mov rdx, qword [rbp + 0xc2]
cmp rdx, 0x10
jb 0x1800662bb
inc rdx
mov rcx, qword [rbp + 0xaa]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800662b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800662b6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800890f4
movdqa xmm0, xmmword [0x1800a4c90]
movdqu xmmword [rbp + 0xba], xmm0
mov byte [rbp + 0xaa], 0
mov rdx, qword [rbp + 0xf2]
cmp rdx, 0x10
jb 0x180066316
inc rdx
mov rcx, qword [rbp + 0xda]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180066311
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180066311
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800890f4
movdqa xmm0, xmmword [0x1800a4c90]
movdqu xmmword [rbp + 0xea], xmm0
mov byte [rbp + 0xda], 0
lea rcx, [rbp + 0x2a0]
call fcn.18002dd10
nop
lea rcx, [rbp + 0x230]
call fcn.18002ddc0
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 8
jb 0x18006638f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180066389
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180066389
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800890f4
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x1800663d2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800663cd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800663cd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800890f4
mov eax, esi
mov rcx, qword [rbp + 0x6f0]
xor rcx, rsp
call fcn.180089600
mov rbx, qword [rsp + 0x860]
movaps xmm6, xmmword [rsp + 0x800]
add rsp, 0x810
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1800473a0
nop
movsd dword [rdi], dword [rsi]
push rcx
invalid