Function at 0x180036300
Capabilities:
Encode data using xor
Get disk size
Read file on windows
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3c00]
mov eax, 0x3d00
call fcn.180086430
sub rsp, rax
movaps xmmword [rsp + 0x3cf0], xmm6
movaps xmmword [rsp + 0x3ce0], xmm7
movaps xmmword [rsp + 0x3cd0], xmm8
movaps xmmword [rsp + 0x3cc0], xmm9
movaps xmmword [rsp + 0x3cb0], xmm10
movaps xmmword [rsp + 0x3ca0], xmm11
movaps xmmword [rsp + 0x3c90], xmm12
mov rax, qword [0x1800a74e0]
xor rax, rsp
mov qword [rbp + 0x3b80], rax
mov rdi, qword [rbp + 0x3c60]
mov r13, rcx
mov r11, qword [rbp - 0x78]
mov r12, rdx
mov rsi, qword [rbp - 0x78]
mov rbx, r9
imul eax, r8d, 0x1c7
mov r14d, r8d
mov qword [rbp - 0x20], rcx
mov r15d, r8d
mov rcx, qword [rbp + 0x3c68]
mov qword [rbp - 0x58], rdx
mov rdx, qword [rbp - 0x78]
mov dword [rbp - 0x4c], eax
cmp r8d, eax
mov rax, qword [rbp - 0x78]
mov dword [rsp + 0x68], r8d
mov qword [rbp - 0x38], rdi
mov qword [rbp - 0x70], rcx
mov qword [rsp + 0x60], r11
ja 0x180036bfc
movsd xmm10, qword [0x18009f160]
movsd xmm9, qword [0x18009f1f8]
movsd xmm11, qword [0x18009f298]
movsd xmm12, qword [0x18009f218]
movsd xmm8, qword [0x18009f1d8]
movdqa xmm7, xmmword [rbp + 0x1430]
mov r12, qword [rbp + 0x1430]
mov qword [rbp], rax
mov rax, qword [rbp - 0x78]
mov qword [rsp + 0x78], rax
mov rax, qword [rbp - 0x78]
mov qword [rbp - 8], rax
mov rax, qword [rbp - 0x78]
mov qword [rbp - 0x80], rax
mov rax, qword [rbp - 0x78]
mov qword [rsp + 0x58], rax
mov qword [rbp - 0x68], rsi
mov qword [rbp - 0x60], rdx
nop word [rax + rax]
cmp r15d, 0x1984
ja 0x18003693f
je 0x1800367f3
cmp r15d, 0x117
ja 0x18003669f
je 0x180036690
mov eax, r15d
sub eax, 0x5c
je 0x18003661a
sub eax, 0x11
je 0x180036491
mov rsi, qword [rsp + 0x58]
cmp eax, 0x6c
jne 0x180036be6
mov dword [rbp - 0x24], 1
jmp 0x180036be6
mov edi, 0x61
nop word [rax + rax]
mov eax, edi
sub eax, 0x61
je 0x1800365a2
sub eax, 0x22
je 0x18003650d
sub eax, 0x22
je 0x1800364ca
cmp eax, 0x22
jne 0x1800365fe
mov dword [rsi + 8], 0
jmp 0x1800365fe
lea r9, [rbp - 0x68]
mov dword [rsp + 0x50], 0
lea r8, [rsp + 0x50]
mov qword [rbp - 0x68], 0x4020
mov edx, 0x11f
lea rcx, [0x180096770]
call fcn.1800236a0
mov qword [rsi + 0xeb68], rax
mov dword [rsi], 0
mov dword [rsi + 4], 1
jmp 0x1800365fe
lea r9, [rbp - 0x68]
mov dword [rsp + 0x50], 0
lea r8, [rsp + 0x50]
mov qword [rbp - 0x68], 0x8000
mov edx, 0x11f
lea rcx, [0x180096770]
call fcn.1800236a0
lea r9, [rbp - 0x68]
mov qword [rsi + 0xeb50], rax
lea r8, [rsp + 0x50]
mov dword [rsp + 0x50], 0
mov edx, 0x11f
mov qword [rbp - 0x68], 0x2010
lea rcx, [0x180096770]
call fcn.1800236a0
lea r9, [rbp - 0x68]
mov qword [rsi + 0xeb58], rax
lea r8, [rsp + 0x50]
mov dword [rsp + 0x50], 0
mov edx, 0x11f
mov qword [rbp - 0x68], 0x4020
lea rcx, [0x180096770]
call fcn.1800236a0
mov qword [rsi + 0xeb60], rax
jmp 0x1800365fe
lea r9, [rbp - 0x78]
mov dword [rbp - 0x10], 0
lea r8, [rbp - 0x10]
mov qword [rbp - 0x78], 0x1b1d0
mov edx, 0x11f
lea rcx, [0x180096770]
call fcn.1800236a0
lea r9, [rbp - 0x68]
mov dword [rsp + 0x50], 0
lea r8, [rsp + 0x50]
mov qword [rbp - 0x68], 0x200
mov edx, 0x11f
lea rcx, [0x180096770]
mov rsi, rax
call fcn.1800236a0
mov qword [rsi + 0xeb48], rax
add edi, 0x22
cmp edi, 0xe9
jb 0x1800364a0
mov rdi, qword [rbp - 0x38]
mov qword [rbp - 0x68], rsi
jmp 0x180036bd8
mov ecx, dword [rcx]
test ecx, ecx
jne 0x180036630
xorps xmm7, xmm7
movdqa xmmword [rbp + 0x1430], xmm7
jmp 0x180036bdd
mov eax, dword [rdi + 8]
xor r9d, r9d
movsd xmm0, qword [rdi]
xor r8d, r8d
mov dword [rbp + 0x1438], eax
mov edx, 0xc5
lea rax, [rbp + 0x143c]
mov dword [rsp + 0x50], ecx
mov qword [rsp + 0x38], rax
xor ecx, ecx
mov qword [rsp + 0x30], 0
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x1430], xmm0
call fcn.180069790
movdqa xmm7, xmmword [rbp + 0x1430]
jmp 0x180036bd8
xor esi, esi
mov qword [rsp + 0x58], rsi
mov dword [rbp - 0x28], esi
jmp 0x180036be6
cmp r15d, 0xcf0
je 0x18003674d
cmp r15d, 0xf54
jne 0x180036be1
mov ecx, 0x22
nop
mov eax, ecx
sub eax, 0x22
je 0x180036710
sub eax, 1
je 0x1800366f0
sub eax, 1
je 0x1800366e3
cmp eax, 1
jne 0x180036732
mov rax, qword [rsi + 0xeb48]
mov qword [rbp - 0x80], rax
jmp 0x180036732
mov r8, qword [rsi + 0xeb50]
mov qword [rbp], r8
jmp 0x180036732
lea rax, [rsi + 0xe240]
mov qword [rsp + 0x60], rax
lea r12, [rsi + 0x9218]
lea rax, [rsi + 0xe340]
mov qword [rbp - 8], rax
jmp 0x180036732
lea rax, [rsi + 0xe18]
mov qword [rsp + 0x78], rax
lea r10, [rsi + 0x1018]
lea rax, [rsi + 0x7218]
mov qword [rbp - 0x60], r10
mov qword [rbp - 0x40], rax
inc ecx
cmp ecx, 0x26
jb 0x1800366c0
mov r8, rsi
mov edx, 0x117
xor ecx, ecx
call fcn.180063f70
jmp 0x180036bd8
mov eax, dword [rcx]
xor r9d, r9d
movups xmm0, xmmword [rdi]
mov dword [rsp + 0x50], eax
xor r8d, r8d
lea rax, [rbp + 0x144c]
mov edx, 0xc5
mov qword [rsp + 0x38], rax
xor ecx, ecx
mov qword [rsp + 0x30], 0
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], rax
movaps xmmword [rbp + 0x1440], xmm0
call fcn.180069790
xor r9d, r9d
mov qword [rsp + 0x20], 0
xor r8d, r8d
xor edx, edx
mov ecx, 0xe9
call fcn.180037bc0
test eax, eax
je 0x180036bd8
mov eax, dword [r13]
lea r9, [rbp + 0x1440]
mov r8, qword [rbp - 0x58]
mov edx, 0x28
mov dword [rbp - 0x10], eax
mov rcx, rbx
lea rax, [rbp + 0x1430]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
call fcn.180075010
jmp case.0x180036cb8.110
xor esi, esi
cmp dword [r13], esi
jbe 0x180036be1
nop
mov edi, 0xe9
mov eax, edi
sub eax, 0xe9
je 0x18003682b
cmp eax, 1
jne 0x18003691b
movaps xmm7, xmmword [rbp + 0x1440]
movdqa xmmword [rbp + 0x1430], xmm7
jmp 0x18003691b
mov r9d, 0x129
lea rcx, [rbp + 0x144c]
xor r8d, r8d
xor edx, edx
call fcn.1800702b0
inc eax
xor r9d, r9d
mov dword [rsp + 0x50], eax
xor r8d, r8d
lea rax, [rbp + 0x144c]
mov edx, 0xc5
mov qword [rsp + 0x38], rax
xor ecx, ecx
xor eax, eax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
call fcn.180069790
mov r9, qword [rbp - 0x58]
lea rax, [rbp + 0x1450]
mov dword [rsp + 0x28], 0xbb
lea rdx, [rbp + 0x1440]
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x38]
call fcn.18006f600
xor ecx, ecx
lea rdx, [rbp + 0x143f]
lea rax, [rbx + 0xf]
cmp rbx, rdx
ja 0x1800368c5
lea rdx, [rbp + 0x1430]
cmp rax, rdx
jae 0x1800368e0
lea rdx, [rbp + 0x145f]
cmp rbx, rdx
ja 0x1800368ff
lea rdx, [rbp + 0x1450]
cmp rax, rdx
jb 0x1800368ff
nop dword [rax]
movzx eax, byte [rbp + rcx + 0x1450]
xor al, byte [rbp + rcx + 0x1430]
inc rcx
xor byte [rbx], al
inc rbx
cmp rcx, 0x10
jb 0x1800368e0
jmp 0x18003691b
movdqu xmm0, xmmword [rbx]
movdqu xmm1, xmmword [rbp + 0x1450]
pxor xmm1, xmm7
pxor xmm1, xmm0
movdqu xmmword [rbx], xmm1
add rbx, 0x10
inc edi
cmp edi, 0xeb
jb 0x180036805
add esi, 0x10
cmp esi, dword [r13]
jb 0x180036800
mov rdi, qword [rbp - 0x38]
jmp 0x180036bd8
cmp r15d, 0x3c09
ja 0x180036b6f
je 0x180036aa4
mov eax, r15d
sub eax, 0x1e3b
je 0x180036a53
sub eax, 0x49
je 0x180036a36
cmp eax, 0xe9e
jne 0x180036be1
mov r13, qword [rbp - 0x38]
lea r14, [rbp + 0x420]
xor edi, edi
mov rsi, r12
sub r14, r12
nop word [rax + rax]
movd xmm6, dword [r13]
lea r9, [rbp - 0x30]
movd xmm0, edi
xor edx, edx
cvtdq2pd xmm6, xmm6
xor ecx, ecx
mov r8d, 0xa2
cvtdq2pd xmm0, xmm0
mulsd xmm6, xmm0
mulsd xmm6, xmm10
movsd qword [rbp - 0x30], xmm6
call fcn.180035cc0
mov qword [r14 + rsi], rax
xor r9d, r9d
mov rax, qword [rbp - 0x58]
xor r8d, r8d
xor edx, edx
movsd qword [rbp - 0x30], xmm6
mov ecx, 0x104
movsd xmm0, qword [rax + 0x30]
lea rax, [rbp - 0x30]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x48]
mov qword [rsp + 0x38], rax
xor eax, eax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
movsd qword [rbp - 0x48], xmm0
call fcn.180052a40
inc edi
mov qword [rsi], rax
lea rsi, [rsi + 8]
cmp edi, 0x201
jl 0x180036990
mov r13, qword [rbp - 0x20]
mov r14d, dword [rsp + 0x68]
mov rdi, qword [rbp - 0x38]
jmp 0x180036bd8
xor edx, edx
lea rcx, [rbp + 0x54]
mov r8d, 0x3cc
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 0x50], 0x3d0
jmp 0x180036bd8
mov rsi, qword [rbp - 0x40]
xor edi, edi
nop dword [rax]
movd xmm0, edi
cvtdq2pd xmm0, xmm0
subsd xmm0, xmm9
mulsd xmm0, xmm11
mulsd xmm0, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
movaps xmm1, xmm12
inc edi
subsd xmm1, xmm0
mulsd xmm1, xmm9
movsd qword [rsi], xmm1
add rsi, 8
cmp edi, 0x400
jl 0x180036a60
mov rdi, qword [rbp - 0x38]
jmp 0x180036bd8
mov r13, qword [rbp - 8]
xor r8d, r8d
xor ecx, ecx
xor r9d, r9d
xor edx, edx
mov r10d, SHSetInstanceExplorer
nop dword [rax + rax]
movsd xmm0, qword [rbp + rdx*8 + 0x420]
mov rax, rdx
subsd xmm0, qword [rbp + r9*8 + 0x420]
comisd xmm0, xmm8
movsd xmm0, qword [rbp + rdx*8 + 0x428]
cmovbe rax, r9
mov r9, rax
lea rax, [rcx + 1]
cmovbe rax, rcx
mov rcx, rax
lea eax, [r8 + 1]
cmovbe eax, r8d
subsd xmm0, qword [rbp + r9*8 + 0x420]
mov dword [r13 + rdx*4], eax
mov r8d, eax
inc dword [r11 + rcx*4]
comisd xmm0, xmm8
jbe 0x180036b25
inc r8d
lea r9, [rdx + 1]
inc rcx
movsd xmm0, qword [rbp + rdx*8 + 0x430]
subsd xmm0, qword [rbp + r9*8 + 0x420]
mov dword [r13 + rdx*4 + 4], r8d
inc dword [r11 + rcx*4]
comisd xmm0, xmm8
jbe 0x180036b52
inc r8d
lea r9, [rdx + 2]
inc rcx
mov dword [r13 + rdx*4 + 8], r8d
add rdx, 3
inc dword [r11 + rcx*4]
sub r10, 1
jne 0x180036ac0
mov r13, qword [rbp - 0x20]
jmp 0x180036bdd
cmp r15d, 0x3c2f
je 0x180036bb7
cmp r15d, 0x59da
jne 0x180036be1
mov rdx, qword [0x18072f0e0]
cmp rdx, qword [0x18072f0e8]
je 0x180036ba5
mov rax, qword [rbp - 0x58]
mov rax, qword [rax]
mov qword [rdx], rax
add qword [0x18072f0e0], 8
jmp 0x180036be1
mov r8, qword [rbp - 0x58]
lea rcx, [0x18072f0d8]
call fcn.180014dc0
jmp 0x180036bd8
lea r9, [rbp + 0x20]
xor ecx, ecx
lea r8, [rbp + 0x28]
lea rdx, [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExA]
mov ecx, dword [rbp - 0x24]
lea rdx, [rbp + 0x50]
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov r11, qword [rsp + 0x60]
mov rcx, qword [rbp - 0x70]
mov rsi, qword [rsp + 0x58]
imul eax, r14d, 0x23
add r15d, eax
cmp r15d, dword [rbp - 0x4c]
ja 0x180036c2c
mov rsi, qword [rbp - 0x68]
jmp 0x180036440
mov r13, qword [rbp - 0x78]
mov r9, qword [rbp - 0x78]
mov r10, qword [rbp - 0x78]
mov r8, qword [rbp - 0x78]
mov qword [rbp], r13
mov qword [rsp + 0x78], r9
mov qword [rbp - 0x60], r10
mov qword [rbp - 8], r8
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x80], rdx
mov qword [rsp + 0x58], rsi
jmp 0x180036c45
mov r12, qword [rbp - 0x58]
mov r9, qword [rsp + 0x78]
mov rdx, qword [rbp - 0x80]
mov r8, qword [rbp - 8]
mov r10, qword [rbp - 0x60]
mov r13, qword [rbp]
lea eax, [r14 - 0xd]
mov dword [rbp - 0x70], eax
cmp r14d, eax
jbe case.0x180036cb8.110
mov r15d, dword [rbp - 0x70]
lea rcx, [0x180000000]
movsd xmm9, qword [0x18009f220]
movsd xmm7, qword [0x18009f2e0]
movsd xmm8, qword [0x18009f310]
mov rbx, qword [rbp - 0x30]
mov qword [rbp - 0x20], r15
nop dword [rax]
nop word [rax + rax]
lea eax, [r14 - 0x6c]
cmp eax, 0xab
ja case.default.0x180036cb8
movzx eax, byte [rcx + rax + 0x37ac4]
mov ecx, dword [rcx + rax*4 + 0x37a8c]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
xor r9d, r9d
lea rcx, [rbp + 0x18]
mov r8, rsi
lea edx, [r9 + 0x53]
call fcn.1800398a0
mov eax, dword [rsp + 0x6c]
add eax, 9
cmp eax, 6
ja case.0x180036cec.8
lea rdx, [0x180000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x37b70]
add rcx, rdx
jmp rcx
xor r9d, r9d
mov qword [rsp + 0x20], 0
xor r8d, r8d
xor edx, edx
mov ecx, 0xcb
call fcn.180037bc0
mov r14d, 0x10f
jmp 0x180037939
xor r9d, r9d
lea r8, str._Z18convert_uchar4_rtnDv4_l
mov edx, 0x11a
xor ecx, ecx
call fcn.18005a890
mov r14d, 0x10f
jmp 0x180037939
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__fileno]
mov ecx, eax
mov edx, 0x8000
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__setmode]
cmp eax, 0xffffffff
jne 0x180036d5d
xor r8d, r8d
lea ecx, [rax + 0x1c]
xor edx, edx
call fcn.180054e70
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ferror]
test eax, eax
jne case.0x180036cec.6
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ferror]
test eax, eax
jne case.0x180036cec.6
nop
mov eax, 0xd9
mov dword [rsp + 0x68], eax
nop dword [rax]
sub eax, 0xd9
je 0x180036ea8
sub eax, 1
je 0x180036e55
sub eax, 1
je 0x180036e2f
sub eax, 1
je 0x180036e16
cmp eax, 1
jne 0x1800371f8
cmp dword [rsp + 0x6c], 0
je 0x180036dd8
xor r9d, r9d
lea r8, str.IDS_LINK_WORK_ITEMS_KEYTIP
mov edx, 0x11a
xor ecx, ecx
call fcn.18005a890
cmp dword [rbp - 0x28], 0
jne 0x1800371f8
xor r8d, r8d
mov edx, 0xbe
mov rcx, r12
call fcn.18007b7b0
test al, al
je 0x1800371f8
mov rcx, r12
mov r14d, 0x115
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ferror]
test eax, eax
jne case.0x180036cec.6
jmp 0x180037939
xor r9d, r9d
lea rcx, [rsp + 0x6c]
mov r8, rsi
lea edx, [r9 + 0x53]
call fcn.1800398a0
jmp 0x1800371f8
mov eax, dword [rbp - 0x28]
test eax, eax
jle 0x1800371f8
mov rdx, qword [rbp + 0x1430]
lea rcx, [rbp + 0x27f0]
mov r8d, eax
call sub.VCRUNTIME140.dll_memcpy
jmp 0x1800371f8
cmp dword [rsp + 0x6c], 4
jne 0x180037847
lea rax, [rbp + 0x1430]
mov r9, rsi
lea r8, [rbp - 0x28]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x6c]
mov ecx, 0xf8
call fcn.180037bc0
cmp dword [rsp + 0x6c], 0
je 0x1800371f8
xor r9d, r9d
lea r8, str.NV_GPU_THERMAL_SETTINGS_V2
mov edx, 0x11a
xor ecx, ecx
call fcn.18005a890
jmp 0x1800371f8
mov r8d, dword [0x1800a75bc]
lea r14, [rbp + 0x27f0]
mov esi, dword [rbp - 0x28]
xor r9d, r9d
movzx r12d, byte [0x1800a75ba]
mov r15d, r9d
mov dword [rsp + 0x50], r8d
mov r13d, 0x5c
cmp r15d, 0xb
ja case.0x180036ef0.8
lea rdx, [0x180000000]
mov eax, r15d
mov ecx, dword [rdx + rax*4 + 0x37b8c]
add rcx, rdx
jmp rcx
mov rdi, qword [rbp - 0x40]
mov qword [rdi + 0x13d8], r9
mov qword [rdi + 0x13e0], r9
test esi, esi
jle 0x180036f5b
nop dword [rax + rax]
mov edx, 0xbb
mov eax, edx
sub eax, 0xbb
je 0x180036f3e
sub eax, 1
je 0x180036f36
sub eax, 1
je 0x180036f31
cmp eax, 1
jne 0x180036f4d
dec esi
jmp 0x180036f4d
inc r14
jmp 0x180036f4d
inc dword [rdi + 0x1390]
jmp 0x180036f4d
movsxd rcx, dword [rdi + 0x1390]
movzx eax, byte [r14]
mov byte [rcx + rdi + 8], al
inc edx
cmp edx, 0xbf
jb 0x180036f15
test esi, esi
jg 0x180036f10
mov qword [rsp + 0x28], r9
lea rcx, [rdi + 0x1398]
mov qword [rsp + 0x20], r9
lea rdx, [rbp + 8]
mov dword [rbp + 8], r8d
lea r9, [rbp + 0x10]
mov r8d, 0xeb
mov dword [rbp + 0x10], r12d
call fcn.18001a970
mov dword [rbp - 0x24], eax
xor r9d, r9d
jmp case.0x180036ef0.8
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ferror]
test eax, eax
jne 0x180037232
mov ecx, 0x13f0
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp - 0x40], rax
test rax, rax
je 0x180037212
xor r9d, r9d
mov dword [rsp + 0x6c], r9d
mov dword [rax + 0x13e8], r9d
jmp case.0x180036ef0.8
mov rcx, qword [rsp + 0x6c]
test rcx, rcx
je case.0x180036ef0.8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r9d, r9d
mov qword [rsp + 0x6c], r9
jmp case.0x180036ef0.8
cmp qword [rbp - 0x58], 0
mov qword [rbp - 0x40], r9
mov dword [rsp + 0x6c], r9d
je 0x18003701f
test r12d, r12d
je 0x18003700c
cmp r12d, 1
jne 0x18003701f
cmp r8d, 4
ja 0x18003701f
test r14, r14
jne 0x18003703e
test esi, esi
je case.0x180036ef0.8
mov rbx, r9
mov dword [rsp + 0x6c], 0xfffffffe
mov qword [rbp - 0x30], rbx
mov r14d, pe_nt_image_headers64
mov qword [rsp + 0x58], r9
jmp 0x180037939
cmp esi, 0x1388
ja 0x18003701f
jmp case.0x180036ef0.8
mov rax, qword [rbp - 0x40]
mov dword [rax + 0x1390], r9d
mov byte [rax + 0x1394], 0
mov qword [rax + 0x13d0], r9
jmp case.0x180036ef0.8
cmp qword [rsp + 0x6c], 0
je case.0x180036ef0.7
jmp case.0x180036ef0.8
mov rbx, qword [rbp - 0x40]
mov qword [rbp - 0x30], rbx
jmp case.0x180036ef0.8
mov rax, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x58]
mov byte [rax + 0x13ec], 0
mov qword [rax], rcx
jmp case.0x180036ef0.8
mov ecx, dword [rbp - 0x24]
test ecx, ecx
je 0x1800370f3
mov edi, 0x128
mov eax, edi
sub eax, 0x128
je 0x1800370d5
sub eax, 0x1f
je 0x1800370bc
cmp eax, 0x1f
je case.0x180036ef0.7
jmp 0x1800370e8
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ecx, dword [rbp - 0x24]
xor r9d, r9d
mov ebx, r9d
mov qword [rbp - 0x30], rbx
jmp 0x1800370e8
mov rax, qword [rbp - 0x40]
mov dword [rsp + 0x6c], ecx
test rax, rax
je 0x1800370e8
mov dword [rax + 0x13e8], ecx
add edi, 0x1f
cmp edi, 0x185
jb 0x1800370a7
mov rdi, qword [rbp - 0x40]
mov eax, dword [rdi + 0x1390]
mov dword [rdi + 0x13a0], eax
lea rax, [rdi + 8]
mov qword [rdi + 0x1398], rax
mov byte [rdi + 0x13ec], 1
mov r8d, dword [rsp + 0x50]
inc r13d
inc r15d
cmp r13d, 0x66
jb 0x180036ed2
mov qword [rsp + 0x58], rbx
mov rsi, rbx
test rbx, rbx
je 0x180037847
cmp dword [rsp + 0x6c], 0
jne 0x180037847
inc dword [rbp - 0x4c]
nop dword [rax]
mov edi, 0x37
mov eax, edi
sub eax, 0x37
je 0x1800371a8
sub eax, 1
je 0x18003717a
cmp eax, 1
jne 0x1800371de
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ferror]
test eax, eax
jne case.0x180036cec.6
jmp 0x1800371de
test dword [rsp + 0x6c], 0xfffffffb
jne 0x1800371de
mov r15, qword [rbp - 0x20]
test r15d, r15d
jle 0x1800371de
mov r9, qword [rbp - 0x38]
lea rcx, [rbp + 0x1460]
movsxd r8, r15d
mov edx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
jmp 0x1800371de
lea r9, [rbp + 0x1460]
mov dword [rsp + 0x50], 0x1388
lea r8, [rsp + 0x6c]
mov qword [rsp + 0x20], rbx
lea rdx, [rsp + 0x50]
mov ecx, 0x126
call fcn.18001ae10
cmp dword [rsp + 0x6c], 0xfffffffb
mov dword [rbp - 0x20], eax
je 0x180037265
inc edi
cmp edi, 0x3a
jb 0x180037155
cmp dword [rsp + 0x6c], 0
je 0x180037150
mov r12, qword [rbp - 0x58]
mov eax, dword [rsp + 0x68]
inc eax
mov dword [rsp + 0x68], eax
cmp eax, 0xde
jb 0x180036d90
jmp 0x180036d80
xor ebx, ebx
mov dword [rsp + 0x6c], 0xfffffffd
xor eax, eax
mov qword [rbp - 0x30], rbx
mov qword [rsp + 0x58], rax
mov r14d, pe_nt_image_headers64
jmp 0x180037939
mov rdi, qword [rbp - 0x40]
mov dword [rsp + 0x6c], 0xfffffffa
test rdi, rdi
je 0x18003724d
mov dword [rdi + 0x13e8], 0xfffffffa
xor ebx, ebx
mov r14d, pe_nt_image_headers64
xor eax, eax
mov qword [rbp - 0x30], rbx
mov qword [rsp + 0x58], rax
jmp 0x180037939
mov r14d, 0x111
jmp 0x180037939
lea rdx, [r8 + 8]
mov r8d, 0x39
lea rcx, [rbp + 0x428]
movsxd rax, dword [rdx - 8]
movsd xmm0, qword [rcx - 8]
addsd xmm0, qword [r9 + rax*8]
movsd qword [r9 + rax*8], xmm0
movsxd rax, dword [rdx - 4]
movsd xmm0, qword [r9 + rax*8]
addsd xmm0, qword [rcx]
movsd qword [r9 + rax*8], xmm0
movsxd rax, dword [rdx]
movsd xmm0, qword [rcx + 8]
addsd xmm0, qword [r9 + rax*8]
movsd qword [r9 + rax*8], xmm0
movsxd rax, dword [rdx + 4]
movsd xmm0, qword [rcx + 0x10]
addsd xmm0, qword [r9 + rax*8]
movsd qword [r9 + rax*8], xmm0
movsxd rax, dword [rdx + 8]
movsd xmm0, qword [rcx + 0x18]
addsd xmm0, qword [r9 + rax*8]
movsd qword [r9 + rax*8], xmm0
movsxd rax, dword [rdx + 0xc]
movsd xmm0, qword [rcx + 0x20]
addsd xmm0, qword [r9 + rax*8]
movsd qword [r9 + rax*8], xmm0
movsxd rax, dword [rdx + 0x10]
movsd xmm0, qword [rcx + 0x28]
addsd xmm0, qword [r9 + rax*8]
movsd qword [r9 + rax*8], xmm0
movsxd rax, dword [rdx + 0x14]
movsd xmm0, qword [rcx + 0x30]
addsd xmm0, qword [r9 + rax*8]
movsd qword [r9 + rax*8], xmm0
movsxd rax, dword [rdx + 0x18]
add rdx, 0x24
movsd xmm0, qword [rcx + 0x38]
add rcx, 0x48
addsd xmm0, qword [r9 + rax*8]
movsd qword [r9 + rax*8], xmm0
sub r8, 1
jne 0x180037281
xor eax, eax
mov ecx, dword [r11 + rax*4]
test ecx, ecx
je 0x180037372
movsd xmm1, qword [r9 + rax*8]
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movsd qword [r9 + rax*8], xmm1
jmp 0x18003737a
mov qword [r9 + rax*8], 0
inc rax
cmp rax, 0x40
jl 0x180037350
mov r15, r13
mov r12, r9
sub r15, r9
mov rsi, r10
sub r12, r10
mov r13d, 0x40
nop dword [rax + rax]
mov rdi, r9
mov r14d, 0x40
nop dword [rax]
movsd xmm0, qword [r12 + rsi]
lea rax, [rsp + 0x50]
subsd xmm0, qword [rdi]
xor r9d, r9d
mov qword [rsp + 0x28], 0
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor ecx, ecx
mulsd xmm0, xmm9
lea edx, [r9 + 0x71]
movsd qword [rsp + 0x50], xmm0
call fcn.18003ef20
mov qword [rsp + 0x50], rax
movsd xmm0, qword [rsp + 0x50]
movsd qword [r15 + rdi], xmm0
add rdi, 8
addsd xmm0, qword [rsi]
movsd qword [rsi], xmm0
sub r14, 1
jne 0x1800373b0
mov r9, qword [rsp + 0x78]
add rsi, 8
add r15, 0x200
sub r13, 1
jne 0x1800373a0
mov r14d, dword [rsp + 0x68]
jmp 0x18003793e
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
cmp rdi, rax
je 0x18003746a
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__fileno]
test eax, eax
js case.0x180036cec.6
xor r9d, r9d
mov dword [rsp + 0x50], eax
xor r8d, r8d
lea rcx, [rsp + 0x50]
mov edx, 0x107
call fcn.18005ec10
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov dword [rbp - 0x50], eax
jmp 0x180037939
mov r8d, 0xda
mov dword [rsp + 0x50], r8d
nop word [rax + rax]
mov eax, r8d
sub eax, 0xd8
je case.0x180036cb8.110
sub eax, 1
je 0x1800375b1
cmp eax, 1
jne 0x180037739
lea rax, [r9 + 0x1f8]
lea rcx, [rdx + 0x1f8]
cmp rdx, rax
ja 0x18003753d
cmp rcx, r9
jb 0x18003753d
mov rcx, r9
lea rax, [rdx + 8]
sub rcx, rdx
mov edx, ILClone
nop word [rax + rax]
movsd xmm0, qword [rcx + rax - 8]
addsd xmm0, xmm7
maxsd xmm0, xmm8
movsd qword [rax - 8], xmm0
movsd xmm1, qword [rax + rcx]
addsd xmm1, xmm7
maxsd xmm1, xmm8
movsd qword [rax], xmm1
movsd xmm0, qword [rcx + rax + 8]
addsd xmm0, xmm7
maxsd xmm0, xmm8
movsd qword [rax + 8], xmm0
movsd xmm1, qword [rax + rcx + 0x10]
addsd xmm1, xmm7
maxsd xmm1, xmm8
movsd qword [rax + 0x10], xmm1
add rax, 0x20
sub rdx, 1
jne 0x1800374e0
jmp 0x180037739
movaps xmm2, xmmword [0x18009ff20]
lea rax, [rdx + 0x10]
movaps xmm3, xmmword [0x18009ff30]
mov rcx, r9
sub rcx, rdx
mov edx, 8
nop word [rax + rax]
movups xmm0, xmmword [rcx + rax - 0x10]
movups xmm1, xmmword [rcx + rax]
addpd xmm0, xmm2
addpd xmm1, xmm2
maxpd xmm0, xmm3
maxpd xmm1, xmm3
movups xmmword [rax - 0x10], xmm0
movups xmm0, xmmword [rcx + rax + 0x10]
movups xmmword [rax], xmm1
movups xmm1, xmmword [rcx + rax + 0x20]
addpd xmm0, xmm2
addpd xmm1, xmm2
maxpd xmm0, xmm3
maxpd xmm1, xmm3
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm1
add rax, 0x40
sub rdx, 1
jne 0x180037560
jmp 0x180037739
cmp dword [r12 + 0x88], 6
jle 0x180037731
mov ebx, 0x10b
mov dword [rsp + 0x68], ebx
nop dword [rax]
cmp ebx, 0x10b
je 0x1800376c6
cmp ebx, 0xa2b4
je 0x180037613
cmp ebx, 0x1445d
jne 0x18003770e
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, dword [rbp - 0x14]
lea rdx, str.GITUpdateCustom
mov rcx, rax
call fcn.180085950
jmp 0x180037700
xor r13d, r13d
mov rax, r9
sub rax, rdx
mov r15, r11
mov qword [rbp - 0x48], rax
mov rbx, rdx
mov r12d, dword [r15]
test r12d, r12d
je 0x1800376ab
mov r14d, dword [rbp - 0x18]
movsd xmm6, qword [rbx + rax]
inc r14d
cvttsd2si eax, xmm6
lea ecx, [r14 - 1]
add ecx, r12d
mov dword [rbp - 0x18], ecx
mov ecx, 2
movsxd rdi, eax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
movsd xmm0, qword [rbx]
lea r8d, [r13 + 1]
movsd qword [rsp + 0x40], xmm0
lea rdx, str.NvAPI_D3D_GetObjectHandleForResource
mov rcx, rax
mov r9d, r12d
lea rax, [0x180000000]
movsd xmm1, qword [rax + rdi*8 + 0x94560]
mov eax, dword [rbp - 0x18]
movsd qword [rsp + 0x38], xmm1
movsd qword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], r14d
call fcn.180085950
mov edi, dword [rbp - 0x14]
add edi, dword [r15]
mov rax, qword [rbp - 0x48]
mov dword [rbp - 0x14], edi
inc r13d
add rbx, 8
add r15, 4
cmp r13d, 0x40
jl 0x180037626
mov ebx, dword [rsp + 0x68]
jmp 0x180037700
xor eax, eax
mov dword [rbp - 0x18], eax
mov dword [rbp - 0x14], eax
lea ecx, [rax + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.output:_volume_u
call fcn.180085950
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._user_sep__n_PE__and__epid__s___Capabilities
call fcn.180085950
mov r9, qword [rsp + 0x78]
mov r11, qword [rsp + 0x60]
mov rdx, qword [rbp - 0x80]
add ebx, 0xa1a9
mov dword [rsp + 0x68], ebx
cmp ebx, 0x1e4fb
jbe 0x1800375d0
mov rbx, qword [rbp - 0x30]
mov r8d, dword [rsp + 0x50]
mov r12, qword [rbp - 0x58]
mov rax, qword [rbp - 0x68]
mov qword [rbp - 0x48], rax
mov rdx, qword [rbp - 0x80]
dec r8d
mov dword [rsp + 0x50], r8d
cmp r8d, 0xd7
ja 0x180037490
mov r15, qword [rbp - 0x20]
cmp byte [0x1800a75f0], 0
je 0x180037847
mov ecx, 0xd1
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xd1
je 0x180037790
sub eax, 1
je 0x180037834
cmp eax, 1
je case.0x180036cb8.118
jmp 0x180037839
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_rewind]
nop dword [rax]
mov edi, 0x26
cmp edi, 0x26
je 0x1800377d6
cmp edi, 0x662
jne 0x18003781d
test r15d, r15d
jle 0x1800377d0
mov r9, qword [rbp - 0x38]
lea rcx, [rbp + 0x1460]
movsxd r8, r15d
mov edx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov rcx, qword [rbp - 0x38]
jmp 0x18003780f
xor r8d, r8d
mov edx, 0xbe
mov rcx, r12
call fcn.18007b7b0
test al, al
jne 0x180037834
mov r9, r12
lea rcx, [rbp + 0x1460]
mov edx, 1
mov r8d, 0x1388
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov r15, rax
mov qword [rbp - 0x20], rax
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ferror]
test eax, eax
jne case.0x180036cec.6
add edi, 0x63c
cmp edi, 0xc78
jbe 0x1800377a5
jmp 0x1800377a0
mov ecx, 0xd2
inc ecx
cmp ecx, 0xd4
jb 0x180037770
mov r14d, pe_nt_image_headers64
jmp 0x180037939
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
cmp rdi, rax
je 0x18003787e
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov dword [rbp - 0x50], eax
mov qword [0x1800a8248], 0
cmp eax, 0xffffffff
je case.0x180036cec.6
cmp dword [0x1800a75bc], 2
mov qword [0x1800a8248], 0
jl 0x180037939
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._n
call fcn.180085950
jmp 0x180037939
cmp dword [rbp - 0x50], 0xffffffff
je case.0x180036cec.6
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ferror]
test eax, eax
jne case.0x180036cec.6
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov dword [rbp - 0x50], eax
cmp eax, 0
je 0x180037939
xor edx, edx
xor r8d, r8d
lea ecx, [rdx + 0x1b]
call fcn.180054e70
mov r14d, 0x10f
jmp 0x180037939
mov rcx, rdi
mov dword [rbp - 0x4c], 0
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__fileno]
mov ecx, eax
mov edx, 0x8000
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__setmode]
cmp eax, 0xffffffff
jne 0x180037939
xor r8d, r8d
lea ecx, [rax + 0x1c]
xor edx, edx
call fcn.180054e70
jmp 0x180037939
xor r9d, r9d
lea r8, str.valleyview_soc
mov edx, 0x11a
xor ecx, ecx
call fcn.18005a890
mov byte [rbp - 0x48], 1
mov r9, qword [rsp + 0x78]
mov r11, qword [rsp + 0x60]
mov rdx, qword [rbp - 0x80]
mov r10, qword [rbp - 0x60]
lea rcx, [0x180000000]
dec r14d
mov dword [rsp + 0x68], r14d
cmp r14d, dword [rbp - 0x70]
jbe case.0x180036cb8.110
mov rsi, qword [rsp + 0x58]
mov r15, qword [rbp - 0x20]
mov rdi, qword [rbp - 0x38]
mov r12, qword [rbp - 0x58]
mov r8, qword [rbp - 8]
mov r13, qword [rbp]
jmp 0x180036c90
mov r9d, 0x12b
mov qword [rsp + 0x20], 0
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800405a0
xor eax, eax
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
mov edx, 0x10c
mov qword [rsp + 0x20], rax
xor ecx, ecx
call fcn.180081f10
xor edx, edx
xor r9d, r9d
xor r8d, r8d
lea ecx, [rdx + 0xf]
call fcn.180021fb0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
cmp r12, rax
je 0x1800379e1
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
cmp rdi, rax
je 0x1800379fa
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
cmp dword [rbp - 0x4c], 1
jne 0x180037a06
mov byte [rbp - 0x48], 0
jmp case.0x180036cb8.110
cmp byte [0x1800a75f3], 0
je case.0x180036cb8.114
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, qword [0x1800a8240]
lea r9, [0x1800a7610]
mov rcx, rax
lea rdx, str.uint16___OVERLOADABLE___min_uint16__uint16__
call fcn.180085950
mov byte [rbp - 0x48], 1
mov rax, qword [rbp - 0x48]
mov rcx, qword [rbp + 0x3b80]
xor rcx, rsp
call fcn.1800864a0
lea r11, [rsp + 0x3d00]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret