Function at 0x18001e710
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x30]
sub rsp, 0x130
mov rax, qword [0x180059178]
xor rax, rsp
mov qword [rbp + 0x20], rax
mov r14, qword [rbp + 0x90]
mov eax, r9d
xor r9d, r9d
mov dword [rsp + 0x60], eax
mov r12, rdx
mov qword [rsp + 0x68], r8
mov rdx, qword [rbp + 0x98]
mov r15, rcx
lea edi, [rax - 0xb]
mov qword [rbp - 0x80], r14
mov qword [rsp + 0x70], rdx
mov esi, r9d
cmp eax, edi
jbe 0x18001e9ab
lea ebx, [rax - 0xbc]
movabs r11, 0x7400690073
lea r13, [0x180000000]
lea r9d, [rsi + 0x68]
lea r10d, [rsi + 0x6e]
cmp ebx, 0x1e
ja case.0x18001e7b0.11
movzx eax, byte [rbx + r13 + 0x1f274]
mov ecx, dword [r13 + rax*4 + 0x1f244]
add rcx, r13
jmp rcx
mov dword [rbp - 8], r9d
jmp case.0x18001e7b0.11
lea rcx, [rbp - 8]
mov qword [rbp - 2], r11
sub rcx, 2
nop word [rax + rax]
cmp word [rcx + 2], si
lea rcx, [rcx + 2]
jne 0x18001e7d0
mov eax, dword [0x180050d80]
mov dword [rcx], eax
movzx eax, word [0x180050d84]
mov word [rcx + 4], ax
mov dword [rbp + 8], r10d
jmp case.0x18001e7b0.11
mov r9d, 0x2e
mov qword [rsp + 0x20], rsi
lea r8, [rsp + 0x58]
xor edx, edx
xor ecx, ecx
call fcn.18002b910
mov word [r14 + 8], ax
lea r8, [rsp + 0x58]
xor eax, eax
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rax
lea r9d, [rax + 0x2e]
call fcn.18002b910
mov rdx, qword [rsp + 0x70]
mov r9d, 0x68
mov r8, qword [rsp + 0x68]
movabs r11, 0x7400690073
mov word [r14 + 0xa], ax
lea r10d, [r9 + 6]
jmp case.0x18001e7b0.11
mov dword [rbp - 0x22], 0x740065
jmp case.0x18001e7b0.11
xor eax, eax
lea r8, [rsp + 0x58]
xor edx, edx
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea r9d, [rax + 0x2e]
call fcn.18002b910
mov word [r14], ax
lea r8, [rsp + 0x58]
xor eax, eax
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rax
lea r9d, [rax + 0x2e]
call fcn.18002b910
mov word [r14 + 2], ax
lea r8, [rsp + 0x58]
xor eax, eax
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rax
lea r9d, [rax + 0x2e]
call fcn.18002b910
mov word [r14 + 4], ax
lea r8, [rsp + 0x58]
xor eax, eax
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rax
lea r9d, [rax + 0x2e]
call fcn.18002b910
mov rdx, qword [rsp + 0x70]
mov r9d, 0x68
mov r8, qword [rsp + 0x68]
movabs r11, 0x7400690073
mov word [r14 + 6], ax
lea r10d, [r9 + 6]
jmp case.0x18001e7b0.11
mov r8d, 2
lea rdx, [0x180050d88]
lea rcx, [rbp - 8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov rdx, qword [rsp + 0x70]
mov r9d, 0x68
mov r8, qword [rsp + 0x68]
movabs r11, 0x7400690073
lea r10d, [r9 + 6]
jmp case.0x18001e7b0.11
mov dword [rbp - 6], 0x70
mov dword [rbp - 4], 0x6f
jmp case.0x18001e7b0.11
cmp qword [r8], 0xc
jb 0x18001efa7
mov qword [rsp + 0x58], rdx
jmp case.0x18001e7b0.11
mov eax, dword [0x180050d90]
movsd xmm0, qword [str.arse]
mov dword [rbp + 0xe], eax
movzx eax, word [0x180050da0]
mov word [rbp + 0x1a], ax
mov eax, 0x53
mov word [rbp - 0x30], ax
movsd qword [rbp + 0x12], xmm0
mov dword [rbp - 0x2e], 0x740065
jmp case.0x18001e7b0.11
mov dword [rbp - 0x2a], 0x6e0045
mov dword [rbp - 0x26], 0x4d0068
dec ebx
lea eax, [rbx + 0xbc]
cmp eax, edi
ja 0x18001e793
mov eax, dword [rsp + 0x60]
xor r9d, r9d
imul ecx, eax, 0x4bc
mov r13d, eax
mov dword [rsp + 0x50], ecx
cmp eax, ecx
ja 0x18001f216
mov ebx, dword [rsp + 0x78]
mov edi, dword [rsp + 0x78]
mov r10d, 0x61
cmp r13d, 0xe660
ja 0x18001f039
je 0x18001efc9
mov eax, r13d
sub eax, 0xc2
je 0x18001efb1
sub eax, 0xc
je 0x18001ef91
sub eax, 0x4c7e
je 0x18001ef6a
sub eax, 0x4c8
je 0x18001eb70
cmp eax, 0x5146
jne 0x18001f1bb
mov r12, qword [rsp + 0x68]
lea rdx, [rsp + 0x48]
mov r15, qword [rsp + 0x70]
mov r9d, 0x114
mov r8, r14
mov rcx, r15
mov rax, qword [r12]
mov qword [rsp + 0x48], rax
call fcn.180030d60
test eax, eax
jne 0x18001f1ef
mov rax, qword [r12]
lea r9, [rsp + 0x48]
mov r8, r15
mov qword [rsp + 0x48], rax
mov edx, 0x91
mov rcx, r14
call fcn.18002e740
test eax, eax
jne 0x18001f1e8
mov rax, qword [r12]
lea rdx, [rsp + 0x48]
mov qword [rsp + 0x48], rax
mov r9, r15
xor eax, eax
xor ecx, ecx
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rax
lea r8d, [rax + 0x48]
call fcn.18003fd70
test eax, eax
jne 0x18001f1e1
mov rax, qword [r12]
lea r9, [rsp + 0x48]
mov qword [rsp + 0x48], rax
mov r8, r14
xor eax, eax
xor edx, edx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
lea ecx, [rax + 0x75]
call fcn.180030560
test eax, eax
jne 0x18001f1da
mov rax, qword [r12]
lea r8, [rsp + 0x48]
mov qword [rsp + 0x48], rax
mov rdx, r15
xor eax, eax
mov rcx, r14
mov qword [rsp + 0x20], rax
lea r9d, [rax + 8]
call fcn.18002c170
test eax, eax
je 0x18001f1b7
mov eax, 0x7004b
jmp 0x18001f21a
mov eax, dword [r15]
lea r9, [rsp + 0x68]
mov dword [rsp + 0x50], eax
lea rcx, [rbp - 0x50]
mov rax, qword [r12]
mov qword [rsp + 0x68], rax
mov eax, dword [rdx]
mov edx, 0xc5
mov dword [rsp + 0x60], eax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
call fcn.180020dd0
movups xmm0, xmmword [rbp - 0x50]
lea r9, [rbp - 0x70]
xor r8d, r8d
movups xmm1, xmmword [rbp - 0x40]
mov rdx, r14
mov ecx, 0x11a
movaps xmmword [rbp - 0x70], xmm0
movaps xmmword [rbp - 0x60], xmm1
call fcn.180029e50
jmp 0x18001f21a
movzx r12d, r9w
cmp r9w, word [r14 + 4]
jae 0x18001eecb
nop
mov r15d, 0xda
mov eax, r15d
sub eax, 0xd8
je 0x18001ebf3
sub eax, 1
je 0x18001ebdc
cmp eax, 1
jne 0x18001eeac
mov edx, 0xb2
lea rcx, [rsp + 0x58]
call fcn.180032670
xor edx, edx
lea r8, [rsp + 0x58]
xor r9d, r9d
mov rdi, rax
lea ecx, [rdx + 0x44]
call fcn.180027b80
xor edx, edx
lea r8, [rsp + 0x58]
xor r9d, r9d
lea ecx, [rdx + 0x44]
call fcn.180027b80
mov rbx, rax
jmp 0x18001eeac
xor edx, edx
lea r8, [rsp + 0x58]
xor r9d, r9d
lea ecx, [rdx + 0x44]
call fcn.180027b80
jmp 0x18001eeac
cmp edi, 0x544c4350
ja 0x18001ed73
je 0x18001ed67
cmp edi, 0x47495344
ja 0x18001ecbf
je 0x18001ecb6
cmp edi, 0x43534245
ja 0x18001ec6e
je 0x18001ec65
mov eax, edi
sub eax, 0x322f534f
je 0x18001ec5c
sub eax, 0x1025fff8
je 0x18001ec53
sub eax, 0xf6eefc
je 0x18001ec4a
cmp eax, 2
jne 0x18001eea0
mov dword [r14 + 0x54], ebx
jmp 0x18001eea0
mov dword [r14 + 0x60], ebx
jmp 0x18001eea0
mov dword [r14 + 0x70], ebx
jmp 0x18001eea0
mov dword [r14 + 0x24], ebx
jmp 0x18001eea0
mov dword [r14 + 0x58], ebx
jmp 0x18001eea0
cmp edi, 0x45534142
je 0x18001ecad
cmp edi, 0x46454447
je 0x18001eca4
cmp edi, 0x46464300
je 0x18001ec9b
cmp edi, 0x4654534a
jne 0x18001eea0
mov dword [r14 + 0x74], ebx
jmp 0x18001eea0
mov dword [r14 + 0x44], ebx
jmp 0x18001eea0
mov dword [r14 + 0x68], ebx
jmp 0x18001eea0
mov dword [r14 + 0x64], ebx
jmp 0x18001eea0
mov dword [r14 + 0x7c], ebx
jmp 0x18001eea0
cmp edi, 0x4c415043
ja 0x18001ed20
je 0x18001ed14
cmp edi, 0x47524f56
je 0x18001ed0b
cmp edi, 0x47565300
je 0x18001ed02
cmp edi, 0x4853544c
je 0x18001ecf6
cmp edi, 0x4854414d
jne 0x18001eea0
mov dword [r14 + 0x78], ebx
jmp 0x18001eea0
mov dword [r14 + 0x88], ebx
jmp 0x18001eea0
mov dword [r14 + 0x4c], ebx
jmp 0x18001eea0
mov dword [r14 + 0x48], ebx
jmp 0x18001eea0
mov dword [r14 + 0xa0], ebx
jmp 0x18001eea0
mov eax, edi
sub eax, 0x524c4f43
je 0x18001ed5b
sub eax, 0x1030104
je 0x18001ed52
sub eax, 0xf4f1fc
je 0x18001ed49
cmp eax, 2
jne 0x18001eea0
mov dword [r14 + 0x50], ebx
jmp 0x18001eea0
mov dword [r14 + 0x5c], ebx
jmp 0x18001eea0
mov dword [r14 + 0x6c], ebx
jmp 0x18001eea0
mov dword [r14 + 0x9c], ebx
jmp 0x18001eea0
mov dword [r14 + 0x8c], ebx
jmp 0x18001eea0
cmp edi, 0x70616d63
ja 0x18001ee2d
je 0x18001ee27
cmp edi, 0x64616568
ja 0x18001ede2
je 0x18001edd9
mov eax, edi
sub eax, 0x584d4456
je 0x18001edcd
sub eax, 0x9162b16
je 0x18001edc4
sub eax, 0x1f8fc
je 0x18001edbb
cmp eax, 0xe
jne 0x18001eea0
mov dword [r14 + 0x94], ebx
jmp 0x18001eea0
mov dword [r14 + 0x14], ebx
jmp 0x18001eea0
mov dword [r14 + 0x38], ebx
jmp 0x18001eea0
mov dword [r14 + 0x90], ebx
jmp 0x18001eea0
mov dword [r14 + 0x10], ebx
jmp 0x18001eea0
cmp edi, 0x656d616e
je 0x18001ee21
cmp edi, 0x66796c67
je 0x18001ee1b
cmp edi, 0x6d677066
je 0x18001ee12
cmp edi, 0x6e72656b
jne 0x18001eea0
mov dword [r14 + 0x84], ebx
jmp 0x18001eea0
mov dword [r14 + 0x30], ebx
jmp 0x18001eea0
mov dword [r14 + 0x34], ebx
jmp 0x18001eea0
mov dword [r14 + 0x20], ebx
jmp 0x18001eea0
mov dword [r14 + 0xc], ebx
jmp 0x18001eea0
cmp edi, 0x74766300
ja 0x18001ee75
je 0x18001ee6f
cmp edi, 0x70657270
je 0x18001ee69
cmp edi, 0x70736167
je 0x18001ee63
cmp edi, 0x7078616d
je 0x18001ee5d
cmp edi, 0x74736f70
jne 0x18001eea0
mov dword [r14 + 0x28], ebx
jmp 0x18001eea0
mov dword [r14 + 0x1c], ebx
jmp 0x18001eea0
mov dword [r14 + 0x40], ebx
jmp 0x18001eea0
mov dword [r14 + 0x3c], ebx
jmp 0x18001eea0
mov dword [r14 + 0x2c], ebx
jmp 0x18001eea0
mov eax, edi
sub eax, 0x786d6468
je 0x18001ee99
sub eax, 0x70900
je 0x18001ee93
cmp eax, 0xe
jne 0x18001eea0
mov dword [r14 + 0x98], ebx
jmp 0x18001eea0
mov dword [r14 + 0x18], ebx
jmp 0x18001eea0
mov dword [r14 + 0x80], ebx
mov r15d, 0xd8
mov r13d, 0x5214
dec r15d
cmp r15d, 0xd7
ja 0x18001eb86
inc r12w
cmp r12w, word [r14 + 4]
jb 0x18001eb80
xor r8d, r8d
mov edx, 0xb4
mov rcx, r14
call fcn.18001cca0
test eax, eax
jne 0x18001efa7
mov r12, qword [rsp + 0x68]
lea rcx, [rsp + 0x48]
mov r15, qword [rsp + 0x70]
mov r9, r14
mov r8d, 0xc1
mov rdx, r15
mov rax, qword [r12]
mov qword [rsp + 0x48], rax
call fcn.18002fcd0
test eax, eax
jne 0x18001f1fd
mov rax, qword [r12]
lea rcx, [rsp + 0x48]
mov r9, r15
mov qword [rsp + 0x48], rax
mov r8, r14
mov edx, 0x8a
call fcn.180030190
test eax, eax
jne 0x18001f1f6
mov rax, qword [r12]
lea rdx, [rsp + 0x48]
mov r9, r14
mov qword [rsp + 0x48], rax
mov r8, r15
mov ecx, 0x54
call fcn.1800307e0
test eax, eax
je 0x18001f1b7
mov eax, 0x70045
jmp 0x18001f21a
mov rcx, qword [r14 + 0x40]
mov edx, 0xffffffff
mov dword [rbp - 0x14], 0x690042
mov dword [rbp - 0x10], 0x730074
mov word [rbp - 0xc], r9w
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x18001f1b7
movzx eax, word [r14 + 4]
shl rax, 4
add rax, 0xc
cmp qword [r8], rax
jae 0x18001f1bb
mov eax, 0x70004
jmp 0x18001f21a
mov word [rbp - 0x1e], r10w
mov dword [rbp - 0x1c], 0x690046
mov dword [rbp - 0x18], 0x65006c
jmp 0x18001f1bb
mov r12, qword [r14 + 0x20]
mov rsi, qword [r14 + 0x18]
cmp rsi, r12
je 0x18001f02c
lea r15, [rsi + 0x28]
cmp r15, r12
je 0x18001f02c
xor r14d, r14d
nop dword [rax]
nop word [rax + rax]
xor edx, edx
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r14
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rsi
lea ecx, [rdx + 0x76]
call fcn.1800125e0
test al, al
mov rcx, r15
cmove rcx, rsi
add r15, 0x28
mov rsi, rcx
cmp r15, r12
jne 0x18001eff0
mov r14, qword [rbp - 0x80]
mov ecx, dword [rsp + 0x50]
xor r12b, r12b
mov byte [rsp + 0x40], r12b
jmp 0x18001f1bb
cmp r13d, 0xf4a0
je 0x18001f148
cmp r13d, 0x132ea
je 0x18001f0e0
cmp r13d, 0x145e6
je 0x18001f0a3
cmp r13d, 0x17f74
je 0x18001f216
cmp r13d, 0x1972c
jne 0x18001f1bb
mov rax, qword [r8]
lea rcx, [rbp - 0x80]
mov r9, rdx
mov qword [rbp - 0x80], rax
mov r8, r14
mov edx, 0xb3
call fcn.18000cd80
test eax, eax
je 0x18001f204
mov eax, 0x70060
jmp 0x18001f21a
mov rax, qword [r8]
xor ecx, ecx
mov qword [rsp + 0x30], r14
lea r8, [rsp + 0x48]
mov qword [rsp + 0x28], rdx
mov edx, SHSetFolderPathA
mov qword [rsp + 0x20], r9
xor r9d, r9d
mov qword [rsp + 0x48], rax
call fcn.180022b90
test eax, eax
je 0x18001f1b7
mov eax, 0x70063
jmp 0x18001f21a
cmp rsi, qword [r14 + 0x20]
je 0x18001f123
mov r15, qword [rsp + 0x70]
mov r12b, 1
mov byte [rsp + 0x40], r12b
cmp r15, rsi
je 0x18001f111
cmp qword [rsi + 0x18], 0x10
mov rdx, rsi
jb 0x18001f105
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
mov rcx, r15
call fcn.18001f720
movzx eax, word [rsi + 0x20]
mov word [r15 + 0x20], ax
mov eax, dword [rsi + 0x24]
mov dword [r15 + 0x24], eax
jmp 0x18001f129
movzx r12d, byte [rsp + 0x40]
mov rcx, qword [r14 + 0x40]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 8]
call qword [sym.imp.SHLWAPI.dll_StrPBrkW]
mov byte [rsp + 0x78], r12b
jmp 0x18001f1b7
mov r12, qword [rsp + 0x68]
lea rdx, [rsp + 0x48]
mov r15, qword [rsp + 0x70]
mov r9d, 0xed
mov r8, r15
mov rcx, r14
mov rax, qword [r12]
mov qword [rsp + 0x48], rax
call fcn.18001a7c0
test eax, eax
jne 0x18001f20f
mov rax, qword [r12]
lea r9, [rsp + 0x48]
mov qword [rsp + 0x48], rax
lea rcx, [rbp - 0x70]
xor eax, eax
mov qword [rsp + 0x28], r14
mov r8, r15
mov qword [rsp + 0x20], rax
mov edx, 0xdc
call fcn.180020dd0
movups xmm1, xmmword [rax]
movups xmm0, xmmword [rax + 0x10]
movd eax, xmm1
movups xmmword [rbp - 0x60], xmm0
test eax, eax
jne 0x18001f208
mov ecx, dword [rsp + 0x50]
imul eax, dword [rsp + 0x60], 0x65
add r13d, eax
cmp r13d, ecx
ja 0x18001f216
mov rdx, qword [rsp + 0x70]
xor r9d, r9d
mov r8, qword [rsp + 0x68]
jmp 0x18001e9c8
mov eax, 0x70043
jmp 0x18001f21a
mov eax, 0x70042
jmp 0x18001f21a
mov eax, 0x70044
jmp 0x18001f21a
mov eax, 0x70046
jmp 0x18001f21a
mov eax, 0x70041
jmp 0x18001f21a
mov eax, 0x70040
jmp 0x18001f21a
xor eax, eax
jmp 0x18001f21a
mov eax, 0x70062
jmp 0x18001f21a
mov eax, 0x7004a
jmp 0x18001f21a
mov eax, dword [rsp + 0x78]
mov rcx, qword [rbp + 0x20]
xor rcx, rsp
call fcn.1800461b0
mov rbx, qword [rsp + 0x188]
add rsp, 0x130
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret