Function at 0x18001d620
Capabilities:
Write file on windows

Disassembly:
mov r11, rsp
push rbp
push rsi
push rdi
lea rbp, [r11 - 0x118]
sub rsp, 0x200
mov rax, qword [0x1800624d0]
xor rax, rsp
mov qword [rbp + 0x38], rax
imul eax, r8d, 0x2f4
mov rsi, rdx
mov qword [rsp + 0x60], r9
mov edi, r8d
mov dword [rsp + 0x78], r8d
mov rdx, rcx
mov qword [rsp + 0x68], rcx
mov dword [rsp + 0x40], eax
cmp r8d, eax
ja 0x18001dc55
movsxd rax, dword [rsp + 0x74]
lea r10, [0x18001e560]
movsxd rcx, dword [rsp + 0x38]
mov qword [r11 + 8], rbx
mov qword [r11 - 0x20], r12
mov r12d, dword [rsp + 0x34]
mov qword [r11 - 0x28], r13
mov qword [r11 - 0x30], r14
mov r14d, dword [rsp + 0x34]
mov qword [r11 - 0x38], r15
mov r15d, dword [rsp + 0x34]
movaps xmmword [r11 - 0x48], xmm6
movss xmm6, dword [rsp + 0x34]
movaps xmmword [r11 - 0x58], xmm7
movss xmm7, dword [rsp + 0x34]
movaps xmmword [r11 - 0x68], xmm8
movss xmm8, dword [rsp + 0x34]
movaps xmmword [r11 - 0x78], xmm9
movss xmm9, dword [rsp + 0x34]
movaps xmmword [r11 - 0x88], xmm10
movss xmm10, dword [rsp + 0x34]
movaps xmmword [r11 - 0x98], xmm11
movss xmm11, dword [rsp + 0x34]
movaps xmmword [r11 - 0xa8], xmm12
movss xmm12, dword [rsp + 0x34]
movaps xmmword [r11 - 0xb8], xmm13
movss xmm13, dword [rsp + 0x34]
movaps xmmword [r11 - 0xc8], xmm14
movss xmm14, dword [rsp + 0x34]
movaps xmmword [r11 - 0xd8], xmm15
mov r11, rax
movss xmm15, dword [rsp + 0x34]
mov qword [rsp + 0x48], rax
imul eax, edi, 0x3f
xor r13d, r13d
mov qword [rbp - 0x48], rcx
mov dword [rsp + 0x44], eax
lea ebx, [r13 + 0x77]
mov r8d, dword [rsp + 0x44]
mov eax, dword [rsp + 0x40]
nop dword [rax]
cmp edi, 0x2166
ja 0x18001e3d3
je 0x18001e3c2
cmp edi, 0x3f8
ja 0x18001e30a
je 0x18001dc8d
cmp edi, 8
je 0x18001dc6c
cmp edi, 0x2d
je 0x18001db48
cmp edi, 0x200
jne 0x18001dbc6
movsxd r13, dword [rsp + 0x70]
test r13d, r13d
jle 0x18001d91d
lea rdi, [r13 - 1]
movsxd rdx, r12d
shr rdi, 1
lea rcx, [rsi + 4]
mov ebx, 0x10
movsxd r8, r15d
inc rdi
movsxd r10, r14d
mov r11d, ebx
nop
mov r9d, 0x99
nop word [rax + rax]
mov eax, r9d
sub eax, 0x99
je 0x18001d8c7
sub eax, 1
je 0x18001d886
sub eax, 1
je 0x18001d85d
sub eax, 1
je 0x18001d80e
cmp eax, 1
jne 0x18001d8f0
movaps xmm0, xmm9
subss xmm0, xmm8
movss dword [rsi + rdx*4 + 4], xmm0
jmp 0x18001d8f0
movaps xmm0, xmm7
movaps xmm1, xmm6
subss xmm0, xmm13
subss xmm1, xmm11
movss dword [rsi + r8*4], xmm0
movaps xmm0, xmm10
movss dword [rsi + r8*4 + 4], xmm1
subss xmm0, xmm12
movaps xmm1, xmm8
addss xmm1, xmm9
movss dword [rsi + r10*4], xmm0
movaps xmm0, xmm12
addss xmm0, xmm10
movss dword [rsi + r10*4 + 4], xmm1
movss dword [rsi + rdx*4], xmm0
jmp 0x18001d8f0
movss xmm12, dword [rsi + r8*4 + 4]
movaps xmm0, xmm13
subss xmm12, dword [rsi + rdx*4 + 4]
movaps xmm1, xmm11
addss xmm0, xmm7
addss xmm1, xmm6
movss dword [rcx - 4], xmm0
movss dword [rcx], xmm1
jmp 0x18001d8f0
movss xmm0, dword [rsi + rdx*4]
movss xmm8, dword [rsi + r8*4]
movaps xmm13, xmm0
movss xmm10, dword [rcx - 4]
addss xmm13, xmm8
movss xmm9, dword [rcx]
subss xmm8, xmm0
movss xmm11, dword [rsi + r8*4 + 4]
subss xmm10, dword [rsi + r10*4]
subss xmm9, dword [rsi + r10*4 + 4]
addss xmm11, dword [rsi + rdx*4 + 4]
jmp 0x18001d8f0
movss xmm7, dword [rcx - 4]
lea r14d, [rbx - 8]
movss xmm6, dword [rcx + 0x20]
lea r10, [r11 - 8]
addss xmm7, dword [rcx + 0x1c]
addss xmm6, dword [rcx]
mov r15d, ebx
lea r12d, [rbx + 8]
mov r8, r11
lea rdx, [r11 + 8]
inc r9d
cmp r9d, 0x9e
jb 0x18001d7d0
add ebx, 2
add r11, 2
add rcx, 8
sub rdi, 1
jne 0x18001d7c0
mov edi, dword [rsp + 0x78]
mov ecx, dword [rsp + 0x38]
movss xmm1, dword [0x180057138]
lea eax, [rcx + r13]
mov r13, qword [rbp - 0x48]
movsxd rbx, eax
movss dword [rsp + 0x58], xmm1
cmp r13, rbx
jge 0x18001db20
sub rbx, r13
movsxd r8, r15d
dec rbx
movsxd rdx, r12d
lea r11d, [rcx + 0x10]
shr rbx, 1
lea rcx, [r13 + 1]
movsxd r9, r14d
inc rbx
lea r10, [r13 + 0x18]
lea rcx, [rsi + rcx*4]
nop dword [rax]
nop dword [rax + rax]
mov eax, 0xb5
cmp eax, 0x777d
ja 0x18001da78
je 0x18001da61
cmp eax, 0xb5
je 0x18001da33
cmp eax, 0x1e67
je 0x18001da0a
cmp eax, 0x3c19
je 0x18001d9de
cmp eax, 0x59cb
jne 0x18001daf6
movaps xmm0, xmm13
movaps xmm1, xmm11
addss xmm0, xmm7
addss xmm1, xmm6
movss dword [rcx - 4], xmm0
movaps xmm0, xmm11
movss dword [rcx], xmm1
subss xmm0, xmm6
movss xmm1, dword [0x180057138]
movss dword [rsi + r8*4], xmm0
jmp 0x18001daf6
movss xmm0, dword [rsi + rdx*4 + 4]
movss xmm12, dword [rsi + r8*4 + 4]
movaps xmm11, xmm0
movss xmm8, dword [rsi + r8*4]
addss xmm11, xmm12
subss xmm8, dword [rsi + rdx*4]
subss xmm12, xmm0
jmp 0x18001daf6
movss xmm10, dword [rcx - 4]
movss xmm9, dword [rcx]
movss xmm13, dword [rsi + r8*4]
subss xmm10, dword [rsi + r9*4]
subss xmm9, dword [rsi + r9*4 + 4]
addss xmm13, dword [rsi + rdx*4]
jmp 0x18001daf6
movss xmm7, dword [rcx + 0x1c]
lea r14d, [r11 - 8]
movss xmm6, dword [rcx + 0x20]
lea r9, [r10 - 0x10]
addss xmm7, dword [rcx - 4]
addss xmm6, dword [rcx]
mov r15d, r11d
lea r8, [r10 - 8]
lea r12d, [r11 + 8]
mov rdx, r10
jmp 0x18001daf6
subss xmm7, xmm13
movss dword [rsi + r8*4 + 4], xmm7
movaps xmm7, xmm10
subss xmm7, xmm12
jmp 0x18001daf6
cmp eax, 0x952f
je 0x18001dadc
cmp eax, 0xb2e1
je 0x18001dab9
cmp eax, 0xd093
je 0x18001daa7
cmp eax, 0xee45
jne 0x18001daf6
movaps xmm0, xmm7
addss xmm0, xmm6
mulss xmm0, xmm1
movss dword [rsi + rdx*4 + 4], xmm0
jmp 0x18001daf6
movaps xmm0, xmm6
subss xmm0, xmm7
mulss xmm0, xmm1
movss dword [rsi + rdx*4], xmm0
jmp 0x18001daf6
addss xmm7, xmm6
movaps xmm6, xmm8
subss xmm6, xmm9
mulss xmm7, xmm1
movss dword [rsi + r9*4 + 4], xmm7
movaps xmm7, xmm12
addss xmm7, xmm10
jmp 0x18001daf6
movaps xmm6, xmm8
movaps xmm0, xmm7
addss xmm6, xmm9
subss xmm0, xmm6
mulss xmm0, xmm1
movss dword [rsi + r9*4], xmm0
add eax, 0x1db2
cmp eax, 0x10b42
jbe 0x18001d975
add r11d, 2
add r10, 2
add rcx, 8
sub rbx, 1
jne 0x18001d970
mov ecx, dword [rsp + 0x38]
mov r8d, dword [rsp + 0x44]
lea eax, [rcx + rcx]
xor r13d, r13d
mov dword [rbp - 0x78], eax
mov dword [rsp + 0x74], r13d
lea r10, [0x18001e560]
mov r11d, r13d
mov qword [rsp + 0x48], r13
lea ebx, [r13 + 0x77]
jmp 0x18001dbb8
movabs rax, 0x5f00530053
mov dword [rbp - 8], 0x4f
mov r8d, 1
mov qword [rbp - 6], rax
lea rdx, [0x180056ee0]
lea rcx, [rbp - 8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
movabs rax, 0x4100540041
lea rcx, [rbp - 8]
mov qword [rbp + 2], rax
sub rcx, 2
nop word [rax + rax]
cmp word [rcx + 2], 0
lea rcx, [rcx + 2]
jne 0x18001db90
mov eax, dword [0x180056ee4]
mov dword [rcx], eax
mov r11, qword [rsp + 0x48]
mov r8d, dword [rsp + 0x44]
lea r10, [0x18001e560]
mov ecx, dword [rsp + 0x38]
mov r9, qword [rsp + 0x60]
mov eax, dword [rsp + 0x40]
mov rdx, qword [rsp + 0x68]
add edi, r8d
mov dword [rsp + 0x78], edi
cmp edi, eax
jbe 0x18001d750
movaps xmm15, xmmword [rsp + 0x140]
movaps xmm14, xmmword [rsp + 0x150]
movaps xmm13, xmmword [rsp + 0x160]
movaps xmm12, xmmword [rsp + 0x170]
movaps xmm11, xmmword [rsp + 0x180]
movaps xmm10, xmmword [rsp + 0x190]
movaps xmm9, xmmword [rsp + 0x1a0]
movaps xmm8, xmmword [rsp + 0x1b0]
movaps xmm7, xmmword [rsp + 0x1c0]
movaps xmm6, xmmword [rsp + 0x1d0]
mov r15, qword [rsp + 0x1e0]
mov r14, qword [rsp + 0x1e8]
mov r13, qword [rsp + 0x1f0]
mov r12, qword [rsp + 0x1f8]
mov rbx, qword [rsp + 0x220]
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.18004c9e0
add rsp, 0x200
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x20
mov dword [rsp + 0x70], 8
mov dword [rsp + 0x38], ecx
mov qword [rbp - 0x48], rcx
mov dword [rbp - 0x74], 0x80
jmp 0x18001dbc6
movsxd rcx, dword [rbp - 0x78]
movsxd rax, dword [rbp - 0x74]
mov r9d, ecx
mov dword [rsp + 0x50], ecx
mov rdx, rcx
mov qword [rbp - 0x68], rcx
mov qword [rbp - 0x30], rcx
cmp rcx, rax
jge 0x18001dbb4
movsxd r10, dword [rsp + 0x34]
mov qword [rbp - 0x50], r10
nop dword [rax]
mov eax, 0x49
lea rcx, [r10*4]
lea r8, [r11*8]
mov dword [rbp - 0x7c], eax
mov qword [rbp - 0x58], rcx
lea r13, [r11*4]
mov qword [rbp - 0x60], r8
nop dword [rax + rax]
movsxd rbx, r15d
movsxd r11, r12d
movsxd rdi, r14d
sub eax, 0x49
je 0x18001e2a4
sub eax, 1
je 0x18001e266
sub eax, 1
je 0x18001e007
sub eax, 1
je 0x18001dfea
cmp eax, 1
jne 0x18001df99
mov edx, dword [rsp + 0x38]
mov eax, dword [rsp + 0x70]
add edx, r9d
mov rcx, qword [rbp - 0x48]
add eax, edx
add rcx, qword [rbp - 0x68]
movsxd r10, eax
cmp rcx, r10
jge 0x18001df91
sub r10, rcx
lea r9d, [rdx + 0x10]
dec r10
lea rdx, [rcx + 1]
shr r10, 1
lea r8, [rcx + 0x18]
inc r10
lea rdx, [rsi + rdx*4]
nop dword [rax]
nop word [rax + rax]
mov eax, 0xc3
cmp eax, 0x4a1
ja 0x18001dec2
je 0x18001deb4
cmp eax, 0xc3
je 0x18001de86
cmp eax, 0x189
je 0x18001de75
cmp eax, 0x24f
je 0x18001de4a
cmp eax, 0x315
je 0x18001de12
cmp eax, 0x3db
jne 0x18001df6b
movss xmm2, dword [rbp - 0x80]
subss xmm7, xmm13
movss xmm3, dword [rsp + 0x7c]
subss xmm6, xmm11
movaps xmm1, xmm2
movaps xmm0, xmm3
mulss xmm1, xmm7
mulss xmm0, xmm6
xorps xmm1, xmmword [0x180057330]
subss xmm1, xmm0
movaps xmm0, xmm2
mulss xmm0, xmm6
movss dword [rsi + rbx*4], xmm1
movaps xmm1, xmm3
mulss xmm1, xmm7
movaps xmm7, xmm10
subss xmm7, xmm12
subss xmm1, xmm0
movss dword [rsi + rbx*4 + 4], xmm1
jmp 0x18001df6b
movss xmm8, dword [rsi + rbx*4]
movaps xmm0, xmm13
movss xmm12, dword [rsi + rbx*4 + 4]
addss xmm0, xmm7
subss xmm8, dword [rsi + r11*4]
subss xmm12, dword [rsi + r11*4 + 4]
movaps xmm1, xmm11
addss xmm1, xmm6
movss dword [rdx - 4], xmm0
movss dword [rdx], xmm1
jmp 0x18001df6b
movss xmm9, dword [rdx]
movss xmm13, dword [rsi + rbx*4]
movss xmm11, dword [rsi + rbx*4 + 4]
subss xmm9, dword [rsi + rdi*4 + 4]
addss xmm13, dword [rsi + r11*4]
addss xmm11, dword [rsi + r11*4 + 4]
jmp 0x18001df6b
movss xmm10, dword [rdx - 4]
subss xmm10, dword [rsi + rdi*4]
jmp 0x18001df6b
movss xmm7, dword [rdx + 0x1c]
lea r14d, [r9 - 8]
movss xmm6, dword [rdx + 0x20]
lea rdi, [r8 - 0x10]
addss xmm7, dword [rdx - 4]
addss xmm6, dword [rdx]
mov r15d, r9d
lea rbx, [r8 - 8]
lea r12d, [r9 + 8]
mov r11, r8
jmp 0x18001df6b
movaps xmm6, xmm8
addss xmm6, xmm9
jmp 0x18001df6b
cmp eax, 0x567
je 0x18001df4f
cmp eax, 0x62d
je 0x18001df31
cmp eax, 0x6f3
je 0x18001df03
cmp eax, 0x7b9
jne 0x18001df6b
movaps xmm1, xmm15
movaps xmm0, xmm14
mulss xmm1, xmm7
mulss xmm0, xmm6
addss xmm1, xmm0
movss dword [rsi + r11*4 + 4], xmm1
jmp 0x18001df6b
movaps xmm7, xmm12
movaps xmm6, xmm9
addss xmm7, xmm10
movaps xmm1, xmm14
subss xmm6, xmm8
movaps xmm0, xmm15
mulss xmm1, xmm7
mulss xmm0, xmm6
subss xmm1, xmm0
movss dword [rsi + r11*4], xmm1
jmp 0x18001df6b
movaps xmm1, xmm7
movaps xmm0, xmm6
mulss xmm1, dword [rsp + 0x5c]
mulss xmm0, dword [rsp + 0x58]
addss xmm1, xmm0
movss dword [rsi + rdi*4 + 4], xmm1
jmp 0x18001df6b
movss xmm0, dword [rsp + 0x5c]
movaps xmm1, xmm7
mulss xmm1, dword [rsp + 0x58]
mulss xmm0, xmm6
subss xmm1, xmm0
movss dword [rsi + rdi*4], xmm1
add eax, 0xc6
cmp eax, 0x87f
jb 0x18001dd75
add r9d, 2
add r8, 2
add rdx, 8
sub r10, 1
jne 0x18001dd70
mov rcx, qword [rbp - 0x58]
mov r10, qword [rbp - 0x50]
mov r11, qword [rsp + 0x48]
mov eax, dword [rbp - 0x7c]
mov rdx, qword [rbp - 0x68]
inc eax
mov r9d, dword [rsp + 0x50]
mov r8, qword [rbp - 0x60]
mov dword [rbp - 0x7c], eax
cmp eax, 0x4e
jb 0x18001dcf0
add r9d, dword [rbp - 0x78]
add rdx, qword [rbp - 0x30]
movsxd rcx, dword [rbp - 0x74]
mov dword [rsp + 0x50], r9d
mov qword [rbp - 0x68], rdx
cmp rdx, rcx
jl 0x18001dcc0
mov edi, dword [rsp + 0x78]
xor r13d, r13d
lea ebx, [r13 + 0x77]
jmp 0x18001dba8
lea rbx, [0x180000000]
movss xmm14, dword [rbx + r13 + 0x4ebb0]
movss xmm15, dword [rbx + r13 + 0x4ebb4]
jmp 0x18001df99
mov eax, dword [rsp + 0x70]
add eax, r9d
movsxd r10, eax
cmp rdx, r10
jge 0x18001e23c
sub r10, qword [rbp - 0x68]
lea r8, [rdx + 8]
dec r10
lea rdx, [rsi + rdx*4]
shr r10, 1
add r9d, 8
inc r10
mov ecx, 0x28
nop dword [rax + rax]
cmp ecx, 0xc8
ja 0x18001e119
je 0x18001e0e8
mov eax, ecx
sub eax, 0x28
je 0x18001e0d5
sub eax, 0x28
je 0x18001e0b4
sub eax, 0x28
je 0x18001e07d
cmp eax, 0x28
jne 0x18001e213
movss xmm8, dword [rsi + rbx*4]
subss xmm8, dword [rsi + r11*4]
jmp 0x18001e213
movss xmm10, dword [rdx]
movss xmm9, dword [rdx + 4]
movss xmm13, dword [rsi + rbx*4]
movss xmm11, dword [rsi + rbx*4 + 4]
subss xmm10, dword [rsi + rdi*4]
subss xmm9, dword [rsi + rdi*4 + 4]
addss xmm13, dword [rsi + r11*4]
addss xmm11, dword [rsi + r11*4 + 4]
jmp 0x18001e213
movss xmm7, dword [rsi + rdi*4]
lea r12d, [r9 + 0x10]
movss xmm6, dword [rsi + rdi*4 + 4]
lea r11, [r8 + 0x10]
addss xmm7, dword [rdx]
addss xmm6, dword [rdx + 4]
jmp 0x18001e213
mov r14d, r9d
lea r15d, [r9 + 8]
mov rdi, r8
lea rbx, [r8 + 8]
jmp 0x18001e213
movss xmm12, dword [rsi + rbx*4 + 4]
movaps xmm0, xmm13
subss xmm12, dword [rsi + r11*4 + 4]
addss xmm0, xmm7
movaps xmm1, xmm11
addss xmm1, xmm6
subss xmm7, xmm13
movss dword [rdx], xmm0
movss dword [rdx + 4], xmm1
jmp 0x18001e213
mov eax, ecx
sub eax, 0xf0
je 0x18001e1ce
sub eax, 0x28
je 0x18001e18a
sub eax, 0x28
je 0x18001e159
cmp eax, 0x28
jne 0x18001e213
movaps xmm1, xmm15
movaps xmm0, xmm14
mulss xmm1, xmm7
mulss xmm0, xmm6
addss xmm1, xmm0
movss dword [rsi + r11*4 + 4], xmm1
jmp 0x18001e213
movaps xmm7, xmm12
movaps xmm6, xmm9
addss xmm7, xmm10
movaps xmm1, xmm14
subss xmm6, xmm8
movaps xmm0, xmm15
mulss xmm1, xmm7
mulss xmm0, xmm6
subss xmm1, xmm0
movss dword [rsi + r11*4], xmm1
jmp 0x18001e213
movss xmm4, dword [rsp + 0x5c]
movaps xmm6, xmm8
addss xmm6, xmm9
movaps xmm0, xmm4
movaps xmm1, xmm7
movaps xmm2, xmm7
mulss xmm1, dword [rsp + 0x58]
mulss xmm2, xmm4
mulss xmm0, xmm6
subss xmm1, xmm0
movaps xmm0, xmm6
mulss xmm0, dword [rsp + 0x58]
addss xmm2, xmm0
movss dword [rsi + rdi*4], xmm1
movss dword [rsi + rdi*4 + 4], xmm2
jmp 0x18001e213
movss xmm3, dword [rsp + 0x7c]
subss xmm6, xmm11
movss xmm2, dword [rbp - 0x80]
movaps xmm1, xmm3
movaps xmm0, xmm2
mulss xmm1, xmm7
mulss xmm2, xmm7
movaps xmm7, xmm10
mulss xmm0, xmm6
subss xmm7, xmm12
subss xmm1, xmm0
movaps xmm0, xmm3
mulss xmm0, xmm6
addss xmm2, xmm0
movss dword [rsi + rbx*4], xmm1
movss dword [rsi + rbx*4 + 4], xmm2
add ecx, 0x28
cmp ecx, 0x190
jb 0x18001e040
add r9d, 2
add r8, 2
add rdx, 8
sub r10, 1
jne 0x18001e033
mov rcx, qword [rbp - 0x58]
lea rbx, [0x180000000]
movss xmm2, dword [rcx + rbx + 0x4ea78]
movss xmm0, dword [rcx + rbx + 0x4ea7c]
movss dword [rsp + 0x58], xmm2
movss dword [rsp + 0x5c], xmm0
jmp 0x18001df95
lea rbx, [0x180000000]
movss xmm2, dword [rcx + rbx + 0x4ea70]
movss xmm0, dword [rcx + rbx + 0x4ea74]
movss xmm14, dword [rbx + r13 + 0x4eb70]
movss xmm15, dword [rbx + r13 + 0x4eb74]
movss dword [rsp + 0x58], xmm2
movss dword [rsp + 0x5c], xmm0
jmp 0x18001df99
mov ebx, dword [rsp + 0x74]
add r8, 0x10
mov r11, qword [rsp + 0x48]
add ebx, 2
add r11, 2
mov dword [rsp + 0x74], ebx
add r13, 8
mov qword [rsp + 0x48], r11
mov rcx, r8
mov qword [rbp - 0x60], r8
lea eax, [rbx + rbx]
mov qword [rbp - 0x58], rcx
lea rbx, [0x180000000]
mov dword [rsp + 0x34], eax
movss xmm0, dword [rbx + r13 + 0x4ea70]
lea r10, [r11 + r11]
movss dword [rsp + 0x7c], xmm0
movss xmm0, dword [rbx + r13 + 0x4ea74]
movss dword [rbp - 0x80], xmm0
mov qword [rbp - 0x50], r10
jmp 0x18001df9e
cmp edi, 0xb40
je 0x18001e37b
cmp edi, 0x1653
jne 0x18001dbc6
mov r8d, 3
lea rdx, [0x180056de4]
lea rcx, [rbp + 0x18]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 2
lea rdx, [0x180056e5c]
lea rcx, [rbp + 0x18]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
movabs rax, 0x71006900720069
mov word [rbp + 0x2a], r13w
mov r8d, 5
mov qword [rbp + 0x22], rax
lea rdx, [0x180056ed0]
lea rcx, [rbp + 0x2a]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x18001dba3
mov r8d, 3
lea rdx, [0x180056dc8]
lea rcx, [rbp + 0xa]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
lea rax, [rbp - 8]
mov dword [rbp + 0xe], 0x52
sub rax, 2
cmp word [rax + 2], 0
lea rax, [rax + 2]
jne 0x18001e3a1
movsd xmm0, qword [0x180056dd0]
movsd qword [rax], xmm0
mov word [rbp + 0x18], r13w
jmp 0x18001dba3
mov dword [rbp + 0x34], 0x77
mov byte [rsp + 0x3c], 1
jmp 0x18001dbc6
cmp edi, 0x2c79
je 0x18001e54b
cmp edi, 0x378c
je 0x18001e509
cmp edi, 0x429f
je 0x18001e501
cmp edi, 0x4db2
je 0x18001e433
cmp edi, 0x58c5
jne 0x18001dbc6
lea rcx, [rsi + 0xa]
cmp rcx, r9
je 0x18001e555
cmp qword [r9 + 0x18], 0x10
mov rdx, r9
jb 0x18001e425
mov rdx, qword [r9]
mov r8, qword [r9 + 0x10]
call fcn.1800423a0
jmp 0x18001dba3
movzx eax, byte [rsp + 0x30]
mov ecx, r13d
cmp dword [rbp - 0x70], 0
cmove ecx, eax
xor r9d, r9d
xor edx, edx
mov byte [rsp + 0x30], cl
lea rax, [rbp - 8]
mov qword [rsp + 0x28], rax
lea r8d, [r9 + 4]
mov dword [rsp + 0x20], 0x100
lea rcx, [rdx - 1]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
cmp byte [rsp + 0x30], 0
mov rbx, rax
je 0x18001e4a4
lea r8, [rbp - 0x60]
mov qword [rbp - 0x60], r13
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesDecodeIncrementalHandleCreate
mov rcx, qword [rbp - 0x40]
mov dword [rbp - 0x70], eax
test rcx, rcx
je 0x18001e496
call sub.RPCRT4.dll_MesHandleFree
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x18001e4a4
call sub.RPCRT4.dll_MesHandleFree
test rbx, rbx
jne 0x18001e4b7
mov byte [rsp + 0x3c], bl
mov ebx, 0x77
jmp 0x18001dba3
cmp byte [rsp + 0x3c], 0
je 0x18001e4f7
xor r9d, r9d
lea r8, [rbp - 0x38]
lea rdx, [rbp - 0x28]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetOverlappedResult]
lea r9, [rbp - 0x28]
mov qword [rsp + 0x20], r13
mov r8d, 0x20
lea rdx, [rbp + 0x18]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteFileEx]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, 0x77
jmp 0x18001dba3
mov qword [rsi], r10
jmp 0x18001dbc6
movzx eax, word [rdx]
mov r8d, 0x7a
lea rdx, [rsp + 0x50]
mov word [rsp + 0x50], ax
mov rcx, rsi
call fcn.18001d2b0
xorps xmm0, xmm0
mov qword [rbp - 0x40], r13
lea r9, [rbp - 0x40]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
movups xmmword [rbp - 0x28], xmm0
movups xmmword [rbp - 0x18], xmm0
call sub.RPCRT4.dll_MesEncodeIncrementalHandleCreate
mov dword [rbp - 0x70], eax
jmp 0x18001dba3
mov byte [rsp + 0x30], 1
jmp 0x18001dbc6
mov ecx, dword [rsp + 0x38]
jmp 0x18001dbc6