Function at 0x1800180a0
Capabilities:
Contain obfuscated stackstrings
Create directory
Get file version info

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x780
mov rax, qword [0x18014a010]
xor rax, rsp
mov qword [rsp + 0x770], rax
lea r12, [rcx + 0x18]
mov qword [rsp + 0x80], r12
mov rcx, r12
call fcn.180018dd0
mov rdi, rax
call fcn.18004a9e0
lea rcx, [rax + 8]
call qword [sym.imp.pthreadVC2.dll_pthread_mutex_lock]
mov esi, eax
mov rbx, qword [rdi]
test rbx, rbx
jne 0x180018118
mov r8d, 0x99
lea rdx, str.D:gitlab_runner_builds_a09b78ae0mobilesecproduct_SecSDK_mlcommon_matrixopen_sourceSmartPointerSmartPointer.cpp
lea rcx, str._address
call fcn.1800d09b4
mov rbx, qword [rdi]
test esi, esi
jne 0x18001812c
call fcn.18004a9e0
lea rcx, [rax + 8]
call qword [sym.imp.pthreadVC2.dll_pthread_mutex_unlock]
nop
mov rcx, qword [rbx + 0x10]
mov rbx, 0xffffffffffffffff
mov rax, rbx
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x180018140
test rax, rax
je 0x180018b1e
mov rcx, r12
call fcn.180018dd0
mov rsi, rax
call fcn.18004a9e0
lea rcx, [rax + 8]
call qword [sym.imp.pthreadVC2.dll_pthread_mutex_lock]
mov r14d, eax
mov rdi, qword [rsi + 0x20]
test rdi, rdi
jne 0x180018195
mov r8d, 0x99
lea rdx, str.D:gitlab_runner_builds_a09b78ae0mobilesecproduct_SecSDK_mlcommon_matrixopen_sourceSmartPointerSmartPointer.cpp
lea rcx, str._address
call fcn.1800d09b4
mov rdi, qword [rsi + 0x20]
test r14d, r14d
jne 0x1800181aa
call fcn.18004a9e0
lea rcx, [rax + 8]
call qword [sym.imp.pthreadVC2.dll_pthread_mutex_unlock]
nop
mov rcx, qword [rdi + 0x10]
mov rax, rbx
inc rax
cmp byte [rcx + rax], 0
jne 0x1800181b1
test rax, rax
je 0x180018b1e
xor r15d, r15d
mov qword [rsp + 0xa0], r15
mov rcx, r12
call fcn.180018dd0
mov rsi, rax
call fcn.18004a9e0
lea rcx, [rax + 8]
call qword [sym.imp.pthreadVC2.dll_pthread_mutex_lock]
mov r14d, eax
mov rdi, qword [rsi]
test rdi, rdi
jne 0x18001820f
mov r8d, 0x99
lea rdx, str.D:gitlab_runner_builds_a09b78ae0mobilesecproduct_SecSDK_mlcommon_matrixopen_sourceSmartPointerSmartPointer.cpp
lea rcx, str._address
call fcn.1800d09b4
mov rdi, qword [rsi]
test r14d, r14d
jne 0x180018224
call fcn.18004a9e0
lea rcx, [rax + 8]
call qword [sym.imp.pthreadVC2.dll_pthread_mutex_unlock]
nop
mov r8d, 0xa
lea rdx, [rsp + 0xa0]
mov rcx, qword [rdi + 0x10]
call fcn.1800d483c
mov rsi, rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0xc0], r15
mov qword [rsp + 0xc8], select
mov byte [rsp + 0xb0], 0
mov r8d, 4
lea rdx, str.9999
lea rcx, [rsp + 0xb0]
call fcn.180006090
nop
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdi, rax
test rax, rax
je 0x1800183cd
xor edx, edx
mov r8d, 0x104
lea rcx, [rsp + 0x130]
call fcn.1800c1ae0
mov r8d, 0x104
lea rdx, [rsp + 0x130]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x1800183cd
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], select
mov byte [rsp + 0x60], 0
lea rax, [rsp + 0x130]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1800182e0
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x60]
call fcn.180006090
nop
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], select
mov byte [rsp + 0x30], 0
mov r8d, 0xb
lea rdx, str.FileVersion
lea rcx, [rsp + 0x30]
call fcn.180006090
nop
lea r8, [rsp + 0xb0]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1800888a0
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x18001837d
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180018378
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180018b51
call fcn.180096034
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], select
mov byte [rsp + 0x30], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x1800183cd
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800183c8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180018b57
call fcn.180096034
xor edx, edx
mov r8d, 0x104
lea rcx, [rsp + 0x450]
call fcn.1800c1ae0
mov r14d, r15d
mov r13d, r15d
mov dword [rsp + 0x50], r15d
mov dword [rsp + 0x110], 0x6e72656b
mov dword [rsp + 0x114], 0x32336c65
mov dword [rsp + 0x118], 0x6c6c642e
mov byte [rsp + 0x11c], r13b
lea rcx, [rsp + 0x110]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdi, rax
test rax, rax
je 0x180018530
xor edx, edx
mov r8d, 0x104
lea rcx, [rsp + 0x130]
call fcn.1800c1ae0
mov r8d, 0x104
lea rdx, [rsp + 0x130]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x180018530
xor edx, edx
lea rcx, [rsp + 0x130]
call qword [sym.imp.VERSION.dll_GetFileVersionInfoSizeA]
mov esi, eax
test eax, eax
je 0x18001852b
lea rdx, [0x180100ce1]
mov ecx, esi
call fcn.180096a30
mov rdi, rax
test rax, rax
je 0x180018523
mov r8d, esi
xor edx, edx
mov rcx, rax
call fcn.1800c1ae0
mov r9, rdi
mov r8d, esi
xor edx, edx
lea rcx, [rsp + 0x130]
call qword [sym.imp.VERSION.dll_GetFileVersionInfoA]
test eax, eax
je 0x18001851b
xor eax, eax
mov qword [rsp + 0x90], rax
mov dword [rsp + 0xa8], eax
lea r9, [rsp + 0xa8]
lea r8, [rsp + 0x90]
lea rdx, [0x1801265c0]
mov rcx, rdi
call qword [sym.imp.VERSION.dll_VerQueryValueA]
test eax, eax
je 0x18001851b
mov rcx, qword [rsp + 0x90]
mov eax, dword [rcx + 0x10]
mov r14d, eax
shr r14d, 0x10
movzx r13d, ax
mov eax, dword [rcx + 0xc]
mov r15d, eax
shr r15d, 0x10
movzx eax, ax
mov dword [rsp + 0x50], eax
mov rcx, rdi
call fcn.180096034
mov r12, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x58]
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], r15d
mov r9d, r13d
mov r8d, r14d
lea rdx, str._d._d._d._d
lea rcx, [rsp + 0x450]
call fcn.1800029c0
mov r8d, 0x104
lea rdx, [rsp + 0x560]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x180018586
lea rdx, [0x1801221e8]
lea rcx, [rsp + 0x560]
call qword [sym.imp.SHLWAPI.dll_StrCpyW]
xor r15d, r15d
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r15w
lea rax, [rsp + 0x560]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], r15w
jne 0x1800185b0
lea rdx, [rsp + 0x560]
lea rcx, [rsp + 0x30]
call fcn.180018c50
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0xf0]
call fcn.180017d40
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x180018622
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001861d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180018b5d
call fcn.180096034
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r15w
mov ecx, 8
call fcn.18009603c
mov r14, rax
lea rax, vtable.metasec::MSUploader.0
mov qword [r14], rax
mov rcx, rsi
call qword [sym.imp.parfait.dll_CreateParfaitGlobalEnvBuilder]
mov qword [rsp + 0x88], rax
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x240]
call fcn.1800c1ae0
mov r8d, 0x104
lea rdx, [rsp + 0x240]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x1800186fa
lea rcx, [rsp + 0x240]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
je 0x1800186fa
lea rdx, [0x18014b1a8]
cmp qword [0x18014b1c0], 8
cmovae rdx, qword [0x18014b1a8]
lea rcx, [rsp + 0x240]
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
je 0x1800186fa
xor edx, edx
lea rcx, [rsp + 0x240]
call fcn.1800d3a88
test eax, eax
je 0x1800186ec
lea rcx, [rsp + 0x240]
call fcn.1800d3b48
test eax, eax
jne 0x1800186fa
lea rcx, [rsp + 0x240]
call qword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], r15w
lea rax, [rsp + 0x240]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x180018716
mov r8, rbx
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0x60]
call fcn.180018c50
nop
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0xd0]
call fcn.180017d40
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x18001878b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180018786
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180018b63
call fcn.180096034
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], r15w
lea rdx, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 0x10
cmovae rdx, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.parfait.dll_public:_class_parfait::ParfaitGlobalEnvBuilderBase____ptr64___cdecl_parfait::ParfaitGlobalEnvBuilderBase::SetRootPathName_char_const____ptr64____ptr64]
mov rcx, r12
call fcn.180018dd0
mov rdi, rax
call fcn.18004a9e0
lea rcx, [rax + 8]
call qword [sym.imp.pthreadVC2.dll_pthread_mutex_lock]
mov esi, eax
mov rbx, qword [rdi + 0x20]
test rbx, rbx
jne 0x180018809
mov r8d, 0x99
lea rdx, str.D:gitlab_runner_builds_a09b78ae0mobilesecproduct_SecSDK_mlcommon_matrixopen_sourceSmartPointerSmartPointer.cpp
lea rcx, str._address
call fcn.1800d09b4
mov rbx, qword [rdi + 0x20]
test esi, esi
jne 0x18001881d
call fcn.18004a9e0
lea rcx, [rax + 8]
call qword [sym.imp.pthreadVC2.dll_pthread_mutex_unlock]
nop
mov rdx, qword [rbx + 0x10]
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.parfait.dll_public:_class_parfait::ParfaitGlobalEnvBuilderBase____ptr64___cdecl_parfait::ParfaitGlobalEnvBuilderBase::SetDid_char_const____ptr64____ptr64]
lea rdx, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 0x10
cmovae rdx, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.parfait.dll_public:_class_parfait::ParfaitGlobalEnvBuilderBase____ptr64___cdecl_parfait::ParfaitGlobalEnvBuilderBase::SetAppVersion_char_const____ptr64____ptr64]
lea rdx, [rsp + 0x450]
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.parfait.dll_public:_class_parfait::ParfaitGlobalEnvBuilderBase____ptr64___cdecl_parfait::ParfaitGlobalEnvBuilderBase::SetOsVersion_char_const____ptr64____ptr64]
mov edx, 0x1388
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.parfait.dll_public:_class_parfait::ParfaitGlobalEnvBuilderBase____ptr64___cdecl_parfait::ParfaitGlobalEnvBuilderBase::SetReportInterval_int____ptr64]
call qword [sym.imp.parfait.dll_CreateParfaitWrapper]
mov qword [0x1801526f8], rax
mov rdx, qword [rsp + 0x88]
mov rcx, rax
call qword [sym.imp.parfait.dll_public:_void___cdecl_parfait::ParfaitWrapperBase::InitGlobalEnv_class_parfait::ParfaitGlobalEnvBuilderBase____ptr64____ptr64]
lea rcx, [rsp + 0x88]
call qword [sym.imp.parfait.dll_DestroyParfaitGlobalEnvBuilder]
lea rdx, str.mssdk
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.parfait.dll_CreateParfaitEnvBuilder]
mov qword [rsp + 0x98], rax
lea rdx, [rsp + 0xf0]
cmp qword [rsp + 0x108], 0x10
cmovae rdx, qword [rsp + 0xf0]
mov rcx, rax
call qword [sym.imp.parfait.dll_public:_class_parfait::ParfaitEnvBuilderBase____ptr64___cdecl_parfait::ParfaitEnvBuilderBase::SetProcessName_char_const____ptr64____ptr64]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r9d, eax
lea r10, [rsp + 0x125]
nop dword [rax]
dec r10
mov eax, 0xcccccccd
mul r9d
shr edx, 3
movzx ecx, dl
shl cl, 2
lea r8d, [rcx + rdx]
add r8b, r8b
sub r9b, r8b
add r9b, 0x30
mov byte [r10], r9b
mov r9d, edx
test edx, edx
jne 0x180018900
mov qword [rsp + 0x40], r15
mov eax, select
mov qword [rsp + 0x48], rax
mov byte [rsp + 0x30], dl
lea rcx, [rsp + 0x125]
cmp r10, rcx
je 0x180018969
lea r8, [rsp + 0x125]
sub r8, r10
mov rdx, r10
lea rcx, [rsp + 0x30]
call fcn.180006090
mov rax, qword [rsp + 0x48]
lea rdx, [rsp + 0x30]
cmp rax, 0x10
cmovae rdx, qword [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.parfait.dll_public:_class_parfait::ParfaitEnvBuilderBase____ptr64___cdecl_parfait::ParfaitEnvBuilderBase::SetPid_char_const____ptr64____ptr64]
mov rdx, r14
mov rcx, rax
call qword [sym.imp.parfait.dll_public:_class_parfait::ParfaitEnvBuilderBase____ptr64___cdecl_parfait::ParfaitEnvBuilderBase::SetUploader_struct_parfait::ParfaitEnvBuilderBase::IUploader____ptr64____ptr64]
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x1800189cb
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800189c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180018b69
call fcn.180096034
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], select
mov byte [rsp + 0x30], 0
mov rdx, qword [rsp + 0x98]
mov rcx, qword [0x1801526f8]
call qword [sym.imp.parfait.dll_public:_void___cdecl_parfait::ParfaitWrapperBase::InitInstanceEnv_class_parfait::ParfaitEnvBuilderBase____ptr64____ptr64]
lea rcx, [rsp + 0x98]
call qword [sym.imp.parfait.dll_DestroyParfaitEnvBuilder]
mov rcx, qword [0x1801526f8]
call qword [sym.imp.parfait.dll_public:_void___cdecl_parfait::ParfaitWrapperBase::LaunchReport_void____ptr64]
mov rcx, qword [0x1801526f8]
call qword [sym.imp.parfait.dll_public:_void___cdecl_parfait::ParfaitWrapperBase::Upload_void____ptr64]
nop
mov rdx, qword [rsp + 0xe8]
cmp rdx, 0x10
jb 0x180018a5f
inc rdx
mov rcx, qword [rsp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180018a5a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180018b6f
call fcn.180096034
mov qword [rsp + 0xe0], r15
mov qword [rsp + 0xe8], select
mov byte [rsp + 0xd0], 0
mov rdx, qword [rsp + 0x108]
cmp rdx, 0x10
jb 0x180018abe
inc rdx
mov rcx, qword [rsp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180018ab9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180018b75
call fcn.180096034
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x108], select
mov byte [rsp + 0xf0], 0
mov rdx, qword [rsp + 0xc8]
cmp rdx, 0x10
jb 0x180018b1a
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180018b14
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180018b7b
call fcn.180096034
nop
mov al, 1
jmp 0x180018b24
xor al, al
jmp 0x180018b24
mov rcx, qword [rsp + 0x770]
xor rcx, rsp
call fcn.180096010
lea r11, [rsp + 0x780]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.1800d0cf4
nop
call fcn.1800d0cf4
nop
call fcn.1800d0cf4
nop
call fcn.1800d0cf4
int3
call fcn.1800d0cf4
nop
call fcn.1800d0cf4
nop
call fcn.1800d0cf4
nop
call fcn.1800d0cf4
int3