Function at 0x180091970
Capabilities:
Create thread
Query or enumerate registry value
Set registry value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x678]
sub rsp, 0x750
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x1800b88d0]
xor rax, rsp
mov qword [rbp + 0x630], rax
mov rdi, r8
mov qword [rsp + 0x60], r8
mov r14d, edx
mov dword [rsp + 0x44], edx
mov r15, rcx
movdqa xmm0, xmmword [0x1800b2770]
movdqa xmmword [rbp + 0x1a0], xmm0
mov byte [rbp + 0x190], 0
movdqa xmm1, xmm0
movdqa xmmword [rbp + 0x1c0], xmm0
mov byte [rbp + 0x1b0], 0
movdqa xmmword [rbp + 0x1e0], xmm0
mov byte [rbp + 0x1d0], 0
movdqa xmmword [rbp + 0x210], xmm0
mov byte [rbp + 0x200], 0
movdqa xmmword [rbp + 0x230], xmm0
mov byte [rbp + 0x220], 0
xor ebx, ebx
mov qword [rbp + 0x30], rbx
mov word [rbp + 0x38], bx
movdqu xmmword [rbp + 0x4a], xmm0
mov byte [rbp + 0x3a], bl
mov qword [rbp], rbx
mov word [rbp + 8], bx
movdqu xmmword [rbp + 0x1a], xmm0
mov byte [rbp + 0xa], bl
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], rbx
movdqa xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rbx
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x40], rbx
mov qword [rbp + 0x60], rbx
mov qword [rbp + 0x68], rbx
mov qword [rbp + 0x70], rbx
lea ecx, [rbx + 0x30]
call fcn.1800a55bc
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x78], rbx
xorps xmm2, xmm2
movsd qword [rbp + 0x80], xmm2
mov qword [rbp + 0x88], rbx
mov dword [rbp + 0x90], 1
mov qword [rbp + 0x98], rbx
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xa0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xb0], xmm1
movdqa xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], rbx
mov qword [rbp + 0xd8], 0xffffffffffffffff
mov dword [rbp + 0xe0], ebx
xor eax, eax
movups xmmword [rbp + 0xe8], xmm0
movups xmmword [rbp + 0xf8], xmm0
movups xmmword [rbp + 0x108], xmm0
movups xmmword [rbp + 0x118], xmm0
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [0x1800b2770]
movdqa xmmword [rbp + 0x140], xmm0
mov byte [rbp + 0x130], al
mov word [rbp + 0x150], bx
mov dword [rbp + 0x154], ebx
mov qword [rbp + 0x158], rbx
xorps xmm0, xmm0
movaps xmmword [rbp + 0x160], xmm0
movsd qword [rbp + 0x170], xmm2
mov byte [rbp + 0x178], al
mov qword [rbp + 0x17c], rbx
mov esi, r14d
lea r13d, [r14 + 0x30]
mov ebx, dword [rsp + 0x58]
mov dword [rsp + 0x5c], ebx
cmp r14d, r13d
jae 0x180092051
lea r10d, [rax + 0x53]
lea r11d, [rax + 0x43]
mov r12d, dword [rsp + 0x60]
mov r14d, dword [rsp + 0x60]
movzx ecx, byte [rsp + 0x40]
mov byte [rsp + 0x40], cl
mov r8d, 0x74
mov r9d, 0x6e61
lea edx, [r8 - 0x13]
lea eax, [rsi - 0x56]
cmp eax, 0x42
ja case.0x180091bba.87
lea rcx, [0x180000000]
movzx eax, byte [rcx + rax + 0x928fc]
mov ecx, dword [rcx + rax*4 + 0x928c8]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov dword [rbp + 0x29b], 0x656c6f6f
mov word [rbp + 0x29f], r9w
jmp case.0x180091bba.87
mov word [rbp + 0x294], r10w
mov word [rbp + 0x295], r8w
mov word [rbp + 0x296], dx
jmp case.0x180091bba.87
mov eax, 0x654d
mov word [rbp + 0x2a1], ax
mov dword [rbp + 0x2a3], 0x646f6874
mov eax, 0x41
mov word [rbp + 0x2a7], ax
xor eax, eax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor edx, edx
lea r8d, [rax + 0x44]
lea rcx, [0x1800b85c8]
call fcn.1800929f0
test al, al
jne 0x180091e5a
mov edi, GetAcceptLanguagesA
nop
cmp edi, 0xc
ja case.0x180091c5c.2
mov eax, edi
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0x92940]
add rcx, rdx
jmp rcx
mov eax, dword [0x1800ae804]
mov dword [rbp + 0x2b6], eax
mov eax, dword [0x1800ae80c]
mov dword [rbp + 0x2ba], eax
movzx eax, word [0x1800ae810]
mov word [rbp + 0x2be], ax
lea rcx, [rbp + 0x2b0]
sub rcx, 2
nop
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x180091c90
mov eax, dword [0x1800adea0]
mov dword [rcx], eax
mov eax, dword [0x1800ae814]
mov dword [rbp + 0x2c0], eax
movzx eax, word [0x1800ae818]
mov word [rbp + 0x2c4], ax
jmp case.0x180091c5c.2
movsd xmm0, qword [str.ngTa]
movsd qword [rbp + 0x26c], xmm0
mov eax, 0x62
mov word [rbp + 0x274], ax
mov eax, dword [0x1800ade98]
mov dword [rbp + 0x276], eax
movzx eax, word [0x1800ade9c]
mov word [rbp + 0x27a], ax
jmp case.0x180091c5c.2
mov dword [rbp + 0x2da], 0x61006c
mov dword [rbp + 0x2de], 0x6c0062
jmp case.0x180091c5c.2
mov eax, 0x65
mov word [rbp + 0x2e2], ax
jmp case.0x180091c5c.2
mov eax, 0x5f
mov dword [rbp + 0x27a], eax
mov eax, dword [0x1800ae82c]
mov dword [rbp + 0x27c], eax
movzx eax, word [0x1800ae830]
mov word [rbp + 0x280], ax
mov r8d, 3
lea rdx, [0x1800ae834]
lea rcx, [rbp + 0x280]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
movabs rax, 0x6c00620061
mov qword [rbp + 0x284], rax
jmp case.0x180091c5c.2
movabs rax, 0x3000370056
mov qword [rbp + 0x260], rax
mov r8d, 0xa
lea rdx, [rbp + 0x266]
lea ecx, [r8 - 4]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__ltow]
mov eax, 0x5f
mov dword [rbp + 0x268], eax
mov dword [rbp + 0x26a], 0x61
jmp case.0x180091c5c.2
mov dword [rbp + 0x2d0], 0x5f005f
jmp case.0x180091c5c.2
xor eax, eax
mov word [rbp + 0x2e4], ax
mov r12d, 0x104
jmp case.0x180091c5c.2
mov r8d, r12d
lea rdx, [rbp + 0x310]
lea rcx, [rbp + 0x260]
call qword [sym.imp.SHLWAPI.dll_SHUnicodeToAnsi]
lea r8, [rbp + 0x2d0]
lea rdx, [rbp + 0x2b0]
lea rcx, [rbp + 0x420]
call qword [sym.imp.SHLWAPI.dll_PathCombineW]
jmp case.0x180091c5c.2
mov eax, 0x65
mov dword [rbp + 0x28a], eax
movabs rax, 0x69006e0069
mov qword [rbp + 0x2b0], rax
jmp case.0x180091c5c.2
mov dword [rbp + 0x2d4], 0x75006e
mov eax, 0x6c
mov word [rbp + 0x2d8], ax
dec edi
lea eax, [rdi + 0xbb]
cmp eax, 0xba
ja 0x180091c40
mov rdi, qword [rsp + 0x60]
mov r10d, 0x53
lea r11d, [r10 - 0x10]
add esi, 4
cmp esi, r13d
jb 0x180091b7e
mov r14d, dword [rsp + 0x44]
movzx esi, byte [rsp + 0x40]
lea edi, [r14 + 0xb]
mov dword [rsp + 0x48], edi
cmp r14d, edi
jae case.0x180091bba.98
lea edi, [r14 - 0x7c]
mov dword [rsp + 0x50], edi
mov edx, 0x4d
mov r8d, 0x7542
mov r10d, 0x4e20
lea r11d, [rdx + 0x1a]
lea r9d, [rdx - 0x2d]
mov r12, qword [rbp - 0x28]
mov r14d, dword [rsp + 0x58]
mov r13d, dword [rsp + 0x60]
movzx r15d, byte [rsp + 0x4c]
movaps xmm6, xmmword [rbp + 0x2d0]
mov eax, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x44]
nop
cmp edi, 0xa
ja case.default.0x180091ef1
lea rcx, [0x180000000]
mov ecx, dword [rcx + rdi*4 + 0x92974]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov word [rbp + 0x297], r8w
jmp case.0x180091bba.87
mov edi, dword [rdi]
xor esi, esi
mov r11d, esi
nop word [rax + rax]
mov r10d, dword [r11 + rax + 0xad148]
cmp r10d, edi
jne 0x180091f82
mov ecx, 0x129
mov eax, ecx
sub eax, 0x129
je 0x180091f32
cmp eax, 0x2b
je 0x180091f8c
jmp 0x180091f70
mov ecx, 0xa
mov r9d, dword [r15]
mov eax, 0x10624dd3
imul r10d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
lea r8d, [rdx + rdx*4]
add r8d, r8d
mov eax, r8d
cmp r9d, eax
je 0x180091f68
add ecx, 0xa
add eax, r8d
cmp ecx, 0x1e
jle 0x180091f56
jmp 0x180091f6b
mov r14d, esi
mov ecx, 0x129
add ecx, 0x2b
cmp ecx, 0x17f
jb 0x180091f22
lea rax, [0x180000000]
add r11, 4
cmp r11, 0x10
jb 0x180091f10
mov esi, 0x5a
jmp 0x180091e55
mov r14d, 0xffffffff
jmp case.0x180091bba.87
mov word [rbp + 0x290], r11w
mov word [rbp + 0x291], dx
mov eax, 0x6c6c
mov word [rbp + 0x292], ax
jmp case.0x180091bba.87
mov byte [rsp + 0x40], 1
mov r8d, 0xa
lea rdx, str.ssmaker.ru
lea rcx, [rbp + 0x190]
call fcn.18009a260
mov r8d, 1
lea rdx, [0x1800ae84c]
lea rcx, [rbp + 0x1b0]
call fcn.18009a260
mov eax, 0x1bb
mov word [rbp + 0x1f0], ax
jmp 0x180091e5a
mov eax, 0x69
mov word [rbp + 0x298], ax
mov eax, 0x63
mov word [rbp + 0x299], ax
mov eax, 0x42
mov word [rbp + 0x29a], ax
jmp case.0x180091bba.87
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
jmp 0x180091e5a
mov ebx, r14d
mov dword [rsp + 0x5c], ebx
jmp case.0x180091bba.87
movzx esi, byte [rsp + 0x40]
mov byte [rsp + 0x40], sil
jmp 0x180091e7a
mov eax, dword [0x1800b8670]
mov dword [rsp + 0x50], eax
xor esi, esi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
mov r9d, 0x126
lea r8, [rsp + 0x50]
xor edx, edx
lea rcx, [rbp - 0x80]
call fcn.1800854c0
mov dword [rsp + 0x70], esi
jmp 0x18009220b
mov esi, 0x1bb
mov word [rsp + 0x50], si
mov r9d, 0xa2
lea r8, [rsp + 0x50]
lea rdx, [rbp + 0x30]
lea rcx, [0x1800b8628]
call fcn.1800572b0
xor eax, eax
mov dword [rsp + 0x68], eax
mov word [rsp + 0x50], si
lea r9, [rbp]
mov r8d, 0xfa
lea rdx, [0x1800b8648]
lea rcx, [rsp + 0x50]
call fcn.18006b150
jmp 0x18009220b
lea rax, [0x1800b85c0]
mov qword [rsp + 0x30], rax
xor eax, eax
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 0x5a
xor r8d, r8d
lea rdx, [rbp - 0x80]
xor ecx, ecx
call fcn.180066980
lea r8, [rbp + 0x60]
xor edx, edx
mov ecx, 0x9f
call fcn.180099710
test sil, sil
je 0x180092151
mov dword [rsp + 0x28], 1
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, dword [rsp + 0x6c]
xor edx, edx
lea rcx, [rbp + 0x2f0]
call qword [sym.imp.SHLWAPI.dll_SHRegSetUSValueW]
movsx r8d, byte [rsp + 0x4c]
xor edx, edx
lea rcx, [rbp + 0x290]
call qword [sym.imp.SHLWAPI.dll_StrRChrIA]
jmp 0x18009220b
mov byte [rsp + 0x4c], 0x47
lea rax, [rbp - 0x80]
mov qword [rbp + 0x2b0], rax
mov eax, dword [0x1800b8670]
mov dword [rbp + 0x2b8], eax
mov eax, dword [0x1800b8674]
mov dword [rbp + 0x2bc], eax
movaps xmm0, xmmword [rbp + 0x2b0]
movdqa xmmword [rbp - 0x10], xmm0
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], eax
lea r9, [rbp - 0x10]
lea r8, [0x18006f1f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rbp - 0x18], rax
jmp 0x18009220b
mov r8d, 0x86
lea rdx, [rbp - 0x80]
xor ecx, ecx
call fcn.18006c2a0
xor eax, eax
mov dword [rsp + 0x74], eax
lea rax, [rbp + 0x30]
mov qword [rsp + 0x50], rax
mov rdx, qword [rbp - 0x78]
cmp rdx, qword [rbp - 0x70]
je 0x1800921fd
lea rax, [rbp + 0x30]
mov qword [rdx], rax
add qword [rbp - 0x78], 8
jmp 0x18009220b
lea r8, [rsp + 0x50]
lea rcx, [rbp - 0x80]
call fcn.1800535b0
mov edx, 0x4d
mov r11d, 0x67
mov r10d, 0x4e20
lea r9d, [r11 - 0x47]
mov r8d, 0x7542
mov ecx, dword [rsp + 0x44]
mov eax, dword [rsp + 0x48]
inc ecx
mov dword [rsp + 0x44], ecx
inc edi
mov dword [rsp + 0x50], edi
cmp ecx, eax
jae case.0x180091bba.98
movzx esi, byte [rsp + 0x40]
jmp 0x180091ed0
mov rsi, qword [rbp - 0x18]
test rsi, rsi
jne 0x18009236a
mov edi, 8
nop
cmp edi, 8
ja case.default.0x18009227d
mov eax, edi
lea r14, [0x180000000]
mov ecx, dword [r14 + rax*4 + 0x929a0]
add rcx, r14
jmp rcx
mov word [rbp + 0x251], dx
jmp case.default.0x18009227d
mov word [rbp + 0x247], r8w
mov dword [rbp + 0x249], 0x6e696e72
jmp case.default.0x18009227d
mov eax, 0x6e
mov word [rbp + 0x240], ax
mov word [rbp + 0x241], r10w
jmp case.default.0x18009227d
mov word [rbp + 0x24d], r11w
mov dword [rbp + 0x24e], 0x4f5220
jmp case.default.0x18009227d
mov word [rbp + 0x252], r9w
jmp case.default.0x18009227d
lea rcx, [rbp + 0x240]
call qword [sym.imp.SHLWAPI.dll_PathIsUNCServerShareA]
lea r8, [rbp + 0x260]
xor edx, edx
mov rcx, r12
call qword [sym.imp.SHLWAPI.dll_PathSetDlgItemPathW]
mov edx, 0x4d
mov r8d, 0x7542
lea r9d, [rdx - 0x2d]
mov r10d, 0x4e20
lea r11d, [rdx + 0x1a]
jmp case.default.0x18009227d
mov dword [rbp + 0x243], 0x2d6f7265
jmp case.default.0x18009227d
xor eax, eax
mov r12d, eax
mov qword [rbp - 0x28], rax
movups xmm0, xmmword [0x1800ae850]
movups xmmword [rbp + 0x260], xmm0
mov eax, dword [0x1800ae860]
mov dword [rbp + 0x270], eax
movzx eax, word [0x1800ae864]
mov word [rbp + 0x274], ax
dec edi
lea eax, [rdi + 0x93]
cmp eax, 0x92
ja 0x180092260
mov edi, dword [rsp + 0x50]
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x38], eax
xor eax, eax
mov qword [rsp + 0x30], rax
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [rsp + 0x6c]
xor edx, edx
lea rcx, [rbp + 0x2f0]
call sub.SHLWAPI.dll_SHRegGetUSValueW
mov r14d, eax
mov dword [rsp + 0x58], eax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x18009220b
lea r8, [rbp + 0x200]
mov edx, 0x5f
lea rcx, [rbp + 0x190]
call fcn.180069090
xor eax, eax
mov dword [rsp + 0x6c], eax
jmp 0x18009220b
lea rax, [rbp]
mov qword [rsp + 0x50], rax
mov rax, qword [rbp - 0x78]
cmp rax, qword [rbp - 0x70]
je 0x1800923fd
lea rcx, [rbp]
mov qword [rax], rcx
add qword [rbp - 0x78], 8
jmp 0x180092226
lea r8, [rsp + 0x50]
mov rdx, qword [rbp - 0x78]
jmp 0x180092202
movups xmm0, xmmword [str.IDS_W1N_NUMBER]
movups xmmword [rbp + 0x2f0], xmm0
movsd xmm1, qword [0x1800ae878]
movsd qword [rbp + 0x300], xmm1
mov eax, dword [0x1800ae880]
mov dword [rbp + 0x308], eax
movzx eax, word [0x1800ae884]
mov word [rbp + 0x30c], ax
xor r9d, r9d
lea r8d, [r9 + 0x10]
lea rdx, [rbp + 0x1d0]
xor ecx, ecx
call fcn.180073120
jmp 0x18009220b
lea rax, [0x18005bd80]
mov qword [rbp + 0x240], rax
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 0x23]
lea rcx, [rbp + 0x240]
call fcn.18009acd0
test r14d, r14d
je 0x18009220b
mov edi, 9
lea esi, [rdi + 1]
mov r14d, dword [rsp + 0x60]
lea ebx, [rdi + 0x6d]
lea r12d, [rdi + 0x25]
nop dword [rax]
cmp edi, 9
ja case.default.0x1800924bc
mov eax, edi
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0x929c4]
add rcx, rdx
jmp rcx
mov word [rbp + 0x260], bx
mov dword [rbp + 0x262], 0x6d0069
jmp case.default.0x1800924bc
mov byte [rsp + 0x40], 0
jmp case.default.0x1800924bc
mov r13d, 0xf003f
jmp case.default.0x1800924bc
xor eax, eax
mov qword [rbp - 0x30], rax
jmp case.default.0x1800924bc
mov dword [rbp + 0x272], 0x420073
mov dword [rbp + 0x276], 0x560079
mov edx, 0x4d
mov dword [rbp + 0x27a], edx
jmp 0x1800925d9
xor eax, eax
mov dword [rsp + 0x20], eax
lea r9, [rbp - 0x20]
xor r8d, r8d
mov edx, r13d
lea rcx, [rbp + 0x260]
call qword [sym.imp.SHLWAPI.dll_SHRegCreateUSKeyW]
mov r14d, eax
jmp case.default.0x1800924bc
movups xmm0, xmmword [0x1800b2810]
movups xmmword [rbp + 0x2d0], xmm0
jmp case.default.0x1800924bc
xor eax, eax
mov ecx, eax
movzx eax, r15b
test r14d, r14d
cmove ecx, eax
movzx r15d, cl
test cl, cl
je 0x180092570
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.SHLWAPI.dll_SHRegCloseUSKey]
movdqa xmmword [rbp + 0x240], xmm6
lea r8, [rbp - 0x30]
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp + 0x240]
call qword [sym.imp.SHLWAPI.dll_AssocCreate]
test eax, eax
jne case.default.0x1800924bc
mov rcx, qword [rbp - 0x30]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp case.default.0x1800924bc
mov word [rbp + 0x266], r12w
mov dword [rbp + 0x268], 0x610046
mov eax, 0x75
mov word [rbp + 0x26c], ax
mov dword [rbp + 0x26e], 0x74006c
jmp case.default.0x1800924bc
mov r15b, 1
movups xmm6, xmmword [0x1800b2820]
mov edx, 0x4d
dec edi
sub rsi, 1
jne 0x1800924a0
mov dword [rsp + 0x60], r14d
mov ebx, dword [rsp + 0x5c]
mov r14d, dword [rsp + 0x58]
mov r12, qword [rbp - 0x28]
mov edi, dword [rsp + 0x50]
jmp 0x180092210
mov esi, 1
jmp 0x18009260f
xor eax, eax
mov esi, eax
jmp 0x18009260f
mov esi, ebx
lea rcx, [rbp + 0xd8]
call fcn.180055630
mov rbx, qword [rbp + 0xc0]
test rbx, rbx
je 0x180092699
mov rdi, qword [rbp + 0xc8]
cmp rbx, rdi
je 0x18009264b
mov rcx, rbx
call fcn.1800994c0
add rbx, 0x20
cmp rbx, rdi
jne 0x180092633
mov rbx, qword [rbp + 0xc0]
mov rdx, qword [rbp + 0xd0]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x18009267a
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800926d7
mov rcx, rbx
call fcn.1800a55f8
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xc0], xmm0
xor r14d, r14d
mov qword [rbp + 0xd0], r14
jmp 0x18009269c
xor r14d, r14d
mov rcx, qword [rbp + 0xa8]
test rcx, rcx
je 0x1800926f5
mov rdx, qword [rbp + 0xb8]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800926de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800926de
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a55f8
mov qword [rbp + 0xa8], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xb0], xmm0
lea rcx, [rbp + 0x68]
call fcn.180055560
nop
mov rbx, qword [rbp - 0x68]
test rbx, rbx
je 0x180092785
mov rdi, qword [rbp - 0x60]
cmp rbx, rdi
je 0x180092726
mov rcx, rbx
call fcn.180054e70
add rbx, 0x28
cmp rbx, rdi
jne 0x180092711
mov rbx, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x58]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x180092771
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800927c2
mov rcx, rbx
call fcn.1800a55f8
mov qword [rbp - 0x68], r14
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x60], xmm0
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x1800927da
mov rax, qword [rbp - 0x70]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800927c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800927c9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a55f8
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r14
mov rdx, qword [rbp + 0x22]
cmp rdx, 0x10
jb 0x180092818
inc rdx
mov rcx, qword [rbp + 0xa]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180092813
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180092813
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a55f8
movdqa xmm0, xmmword [0x1800b2770]
movdqu xmmword [rbp + 0x1a], xmm0
mov byte [rbp + 0xa], 0
mov rdx, qword [rbp + 0x52]
cmp rdx, 0x10
jb 0x180092867
inc rdx
mov rcx, qword [rbp + 0x3a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180092862
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180092862
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a55f8
movdqa xmm0, xmmword [0x1800b2770]
movdqu xmmword [rbp + 0x4a], xmm0
mov byte [rbp + 0x3a], 0
lea rcx, [rbp + 0x200]
call fcn.1800551d0
nop
lea rcx, [rbp + 0x190]
call fcn.180055280
mov eax, esi
mov rcx, qword [rbp + 0x630]
xor rcx, rsp
call fcn.1800a5da0
lea r11, [rsp + 0x750]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret