Function at 0x1800456a0
Capabilities:
Read file on windows
Terminate process
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x11a0]
mov eax, 0x12a0
call fcn.180086430
sub rsp, rax
mov rax, qword [0x1800a74e0]
xor rax, rsp
mov qword [rbp + 0x1190], rax
imul eax, r8d, 0x46
mov ebx, r8d
mov r10, rcx
mov qword [rsp + 0x70], rcx
mov rcx, qword [rbp + 0x1200]
mov r14, r9
mov qword [rbp - 0x40], r9
mov esi, r8d
mov dword [rbp - 0x70], ebx
mov qword [rbp + 0x180], rdx
mov qword [rbp - 0x68], rcx
mov dword [rsp + 0x48], ebx
mov dword [rsp + 0x68], eax
cmp r8d, eax
ja 0x1800461d8
mov r13d, dword [rsp + 0x78]
nop word [rax + rax]
cmp esi, 0x298
ja 0x180045802
je 0x1800457a8
mov eax, esi
sub eax, 0x2d
je 0x180045795
sub eax, 0x26
je 0x180045782
sub eax, 0x10
je 0x180045760
sub eax, 0xa3
je 0x180045754
cmp eax, 0x19
je 0x18004611c
jmp 0x180045cd9
mov dword [rbp - 0x60], 0
jmp 0x180045cd9
mov r8d, dword [r14 + 0x10]
mov rcx, r10
mov rdx, qword [r14 + 8]
add r8d, 7
shr r8, 3
call sub.VCRUNTIME140.dll_memcpy
mov r10, qword [rsp + 0x70]
jmp 0x180045cd5
mov dword [rbp - 0x58], 0
mov dword [rbp - 0x54], 9
jmp 0x180045cd9
mov rax, qword [r10]
mov qword [r14 + 0x20], rax
mov rax, qword [rcx]
mov qword [r14 + 0x28], rax
jmp 0x180045cd9
xor ecx, ecx
xor r9d, r9d
mov qword [rsp + 0x28], rcx
xor r8d, r8d
mov qword [rbp - 0x48], rcx
mov qword [rbp - 0x50], rcx
lea edx, [rcx + 0x47]
mov qword [rsp + 0x20], rcx
call fcn.18003ef20
test eax, eax
js 0x180045cf8
xor edx, edx
xor r9d, r9d
xor r8d, r8d
lea ecx, [rdx + 0x42]
call fcn.18001bef0
mov r8, rax
lea rdx, str.815FD4ACE2EB9CBA
lea rcx, str.SelectionItemPatternOnElementRemovedFromSelection
call fcn.180085a60
mov r10, qword [rsp + 0x70]
jmp 0x180045cd5
cmp esi, 0x4dd
je 0x180045c37
cmp esi, 0x722
je 0x180045c13
cmp esi, 0x830
je 0x18004587a
cmp esi, 0x967
jne 0x180045cd9
mov ebx, dword [rsp + 0x78]
mov r12d, 0xf3
mov rdi, qword [rbp - 0x40]
mov r14, qword [rbp - 0x40]
mov r15, qword [rbp - 0x40]
mov dword [rsp + 0x60], r12d
nop dword [rax]
mov eax, r12d
mov r13, rdi
sub eax, 0xf3
je 0x180045d38
sub eax, 1
je 0x180045d25
cmp eax, 1
jne 0x1800460fa
mov eax, ebx
jmp 0x1800461dc
mov eax, dword [rcx]
mov edi, 1
mov dword [rbp - 0x10], eax
mov ebx, edi
mov eax, dword [rdx]
mov dword [rbp + 0x190], eax
nop
mov qword [rbp - 0x30], rbx
mov dword [rbp - 0x78], edi
cmp rbx, 0x63
jb 0x1800458c2
mov ecx, SHSetInstanceExplorer
mov eax, ecx
sub eax, 0x57
je 0x1800458b7
sub eax, 0x57
je 0x180046178
cmp eax, 0x1b
je 0x1800458c2
add ecx, 0x72
cmp ecx, 0x204
jb 0x1800458a2
dec rbx
lea rax, [rbp - 0x10]
movsxd r8, dword [rax + rbx*4]
lea rax, [rax + rbx*4]
mov qword [rbp - 0x20], rax
dec edi
lea rax, [rbp + 0x190]
mov dword [rsp + 0x58], r8d
movsxd r9, dword [rax + rbx*4]
lea rax, [rax + rbx*4]
mov qword [rbp - 0x28], rax
mov eax, r9d
sub eax, r8d
mov dword [rbp - 0x38], r9d
cmp eax, 0xa
jge 0x18004592c
mov dword [rsp + 0x58], r9d
lea rax, [rsp + 0x58]
mov dword [rsp + 0x50], r8d
lea rcx, [rsp + 0x50]
mov r9, r10
mov qword [rsp + 0x20], rax
mov r8, r14
mov edx, ILFree
call fcn.180018c40
jmp 0x180045bf9
imul ecx, dword [rbp - 0x60], 0x1dc5
mov eax, 0xaaaaaaab
inc ecx
and ecx, 0x7fff
mul ecx
mov dword [rbp - 0x60], ecx
shr edx, 1
lea eax, [rdx + rdx*2]
sub ecx, eax
jne 0x180045954
mov ecx, dword [r14 + r8*4]
jmp 0x180045971
cmp ecx, 1
jne 0x18004596d
lea eax, [r9 + r8]
movsxd rcx, eax
sar rcx, 1
mov eax, dword [r14 + rcx*4]
mov r10d, dword [r10 + rax*4]
jmp 0x180045975
mov ecx, dword [r14 + r9*4]
mov r10d, dword [r10 + rcx*4]
mov r15d, r8d
mov dword [rsp + 0x50], r9d
mov esi, r8d
mov eax, r9d
mov r12, r8
mov r11, r8
mov rdx, r9
mov dword [rsp + 0x40], eax
cmp r11, rdx
jg 0x1800459d1
nop word [rax + rax]
mov ecx, dword [r14 + r11*4]
mov rax, qword [rsp + 0x70]
mov eax, dword [rax + rcx*4]
sub eax, r10d
jne 0x1800459f5
mov eax, dword [r14 + r8*4]
inc r15d
mov dword [r14 + r11*4], eax
inc esi
mov dword [r14 + r8*4], ecx
inc r11
inc r8
cmp r11, rdx
jle 0x1800459a0
mov eax, dword [rsp + 0x40]
cmp esi, eax
jg 0x180045a4c
mov eax, dword [r14 + rdx*4]
inc esi
mov ecx, dword [r14 + r11*4]
mov dword [r14 + r11*4], eax
inc r11
mov eax, dword [rsp + 0x40]
dec eax
mov dword [r14 + rdx*4], ecx
dec rdx
jmp 0x18004598c
test eax, eax
jle 0x180045a3e
nop dword [rax]
mov ecx, dword [r14 + rdx*4]
mov rax, qword [rsp + 0x70]
mov eax, dword [rax + rcx*4]
sub eax, r10d
jne 0x180045a26
mov eax, dword [r14 + r9*4]
dec dword [rsp + 0x50]
mov dword [r14 + rdx*4], eax
mov dword [r14 + r9*4], ecx
dec r9
jmp 0x180045a2a
test eax, eax
js 0x1800459cd
mov eax, dword [rsp + 0x40]
dec rdx
dec eax
mov dword [rsp + 0x40], eax
cmp r11, rdx
jle 0x180045a00
jmp 0x1800459d1
mov eax, dword [rsp + 0x40]
inc esi
inc r11
jmp 0x180045990
mov qword [rbp - 0x80], r11
mov dword [rsp + 0x48], 0x830
cmp dword [rsp + 0x50], r15d
jl 0x180045bf9
movsxd rdi, dword [rbp - 0x5c]
mov eax, esi
movsxd rbx, dword [rsp + 0x60]
sub eax, r15d
mov ecx, r12d
mov dword [rbp - 0x34], eax
sub r15d, ecx
mov r10d, 0x41
cmp r15d, eax
mov r9, rdi
mov r8, rbx
cmovge r15d, eax
movsxd r11, r15d
jmp 0x180045a95
mov ecx, r12d
mov eax, r10d
sub eax, 0x40
je 0x180045abb
cmp eax, 1
jne 0x180045afc
mov edi, ecx
mov ebx, esi
mov rcx, qword [rbp - 0x80]
sub ebx, r15d
mov r8, rcx
mov r9, r12
sub r8, r11
mov r13d, r15d
jmp 0x180045b00
test r13d, r13d
jle 0x180045afc
mov edx, 0x6c
mov eax, edx
sub eax, 0x6b
je 0x180045aed
cmp eax, 1
jne 0x180045af0
mov ecx, dword [r14 + r9*4]
inc edi
mov eax, dword [r14 + r8*4]
inc ebx
mov dword [r14 + r9*4], eax
inc r9
mov dword [r14 + r8*4], ecx
inc r8
jmp 0x180045af0
dec r13d
dec edx
cmp edx, 0x6a
ja 0x180045ac5
test r13d, r13d
jg 0x180045ac0
mov rcx, qword [rbp - 0x80]
dec r10d
cmp r10d, 0x3f
ja 0x180045a92
mov r15d, dword [rsp + 0x50]
mov r11d, 0x5d
movsxd r12, dword [rbp - 0x38]
mov eax, r15d
mov esi, dword [rsp + 0x40]
sub eax, esi
mov dword [rsp + 0x60], ebx
mov ebx, r12d
sub ebx, r15d
mov dword [rbp - 0x5c], edi
cmp ebx, eax
cmovge ebx, eax
movsxd rdi, ebx
cmp r11d, 0x5d
jne 0x180045b88
mov r9, r12
mov r8, rcx
sub r9, rdi
mov r10d, ebx
inc r9
test ebx, ebx
jle 0x180045b88
nop
mov edx, 0x7a
mov eax, edx
sub eax, 0x7a
je 0x180045b6c
cmp eax, 1
jne 0x180045b7c
inc r8
inc r9
dec r10d
jmp 0x180045b7c
mov ecx, dword [r14 + r8*4]
mov eax, dword [r14 + r9*4]
mov dword [r14 + r8*4], eax
mov dword [r14 + r9*4], ecx
inc edx
cmp edx, 0x7c
jb 0x180045b55
test r10d, r10d
jg 0x180045b50
mov rcx, qword [rbp - 0x80]
add r11d, 0xe88
cmp r11d, 0xe88
jbe 0x180045b36
mov r9d, dword [rsp + 0x58]
lea r8d, [r12 + 1]
mov edx, dword [rbp - 0x34]
sub esi, r15d
mov edi, dword [rbp - 0x78]
dec edx
mov r10, qword [rbp - 0x30]
add edx, r9d
add r8d, esi
mov eax, edx
mov ecx, r12d
sub eax, r9d
inc edi
sub ecx, r8d
lea rbx, [r10 + 1]
cmp eax, ecx
jle 0x180045be5
mov rax, qword [rbp - 0x28]
mov dword [rbp + r10*4 - 0x10], r8d
mov dword [rax], edx
mov dword [rbp + r10*4 + 0x190], r12d
jmp 0x180045bf9
mov rax, qword [rbp - 0x20]
mov dword [rbp + r10*4 + 0x190], edx
mov dword [rax], r8d
mov dword [rbp + r10*4 - 0x10], r9d
mov r10, qword [rsp + 0x70]
test rbx, rbx
jg 0x180045890
mov esi, dword [rsp + 0x48]
mov ebx, dword [rbp - 0x70]
jmp 0x180045cd5
mov eax, dword [r14]
mov esi, 0x722
cmp eax, 1
jl 0x180045cb1
mov rcx, qword [r10]
dec eax
add r10, 8
mov dword [r14], eax
mov qword [rsp + 0x70], r10
jmp 0x180045cb3
mov eax, dword [r14]
add r10, 8
sub eax, 1
mov qword [rsp + 0x70], r10
mov dword [r14], eax
je 0x180045cd9
nop
mov rdx, qword [r10]
movzx ecx, byte [rdx]
cmp cl, 0x2d
je 0x180045c60
cmp cl, 0x2f
jne 0x180045c16
movzx ecx, byte [rdx + 1]
inc rdx
test cl, cl
je 0x180045c9d
nop dword [rax + rax]
cmp cl, 0x64
jne 0x180045c7e
mov dword [rbp - 0x58], 1
jmp 0x180045c92
lea eax, [rcx - 0x31]
cmp al, 8
ja 0x1800461ba
movsx eax, cl
sub eax, 0x30
mov dword [rbp - 0x54], eax
movzx ecx, byte [rdx + 1]
inc rdx
test cl, cl
jne 0x180045c70
add r10, 8
sub dword [r14], 1
mov eax, dword [r14]
mov qword [rsp + 0x70], r10
jne 0x180045c50
jmp 0x180045cd5
xor ecx, ecx
mov qword [rbp - 0x48], rcx
cmp eax, 1
jl 0x180045ccf
mov rcx, qword [r10]
dec eax
add r10, 8
mov dword [r14], eax
mov qword [rsp + 0x70], r10
jmp 0x180045cd1
xor ecx, ecx
mov qword [rbp - 0x50], rcx
mov rcx, qword [rbp - 0x68]
imul eax, ebx, 7
add esi, eax
mov dword [rsp + 0x48], esi
cmp esi, dword [rsp + 0x68]
ja 0x1800461d8
mov rdx, qword [rbp + 0x180]
jmp 0x180045720
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea r8, str.Reset_to_default
lea rdx, str.hint_pref_based_hint_controller.js
call fcn.180085950
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor edx, edx
mov ecx, 0xee
call fcn.18006c6e0
xor ebx, ebx
jmp 0x1800460fa
cmp dword [rbp - 0x58], 0
je 0x180045f01
mov r12d, 0xb8
nop dword [rax + rax]
mov eax, r12d
sub eax, 0xb7
je 0x180045dc1
cmp eax, 1
jne 0x180045ee7
mov rsi, qword [rbp - 0x50]
test rsi, rsi
je 0x180045dae
lea rdx, [0x180098ecc]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rdi, rax
test rax, rax
jne 0x180045ee7
mov rdx, rsi
lea rcx, str.PointParameteriv
call fcn.180085a60
lea rcx, str.reason:
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
lea ecx, [rdi + 1]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rdi, rax
jmp 0x180045ee7
mov rax, qword [rbp - 0x48]
test rax, rax
jne 0x180045df9
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__fileno]
lea r9, [0x180098e6c]
xor edx, edx
lea r8, [rsp + 0x68]
mov dword [rsp + 0x68], eax
mov ecx, 0x9e
call fcn.18004d3f0
jmp 0x180045e21
xor r8d, r8d
mov qword [rsp + 0x28], 0
lea r9, [0x180098e6c]
mov qword [rsp + 0x20], 0
mov rdx, rax
lea ecx, [r8 + 0x74]
call fcn.180044e00
mov rsi, rax
test rax, rax
je 0x18004612d
lea rax, [rsp + 0x48]
mov dword [rsp + 0x48], 0x1000
mov r9, rsi
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [rbp + 0x190]
mov r8d, 0x11f
call fcn.1800456a0
test eax, eax
jle 0x180045ea5
nop word [rax + rax]
mov r8d, eax
lea rcx, [rbp + 0x190]
mov r9, rdi
mov edx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
lea rax, [rsp + 0x48]
mov dword [rsp + 0x48], 0x1000
mov r9, rsi
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [rbp + 0x190]
mov r8d, 0x11f
call fcn.1800456a0
test eax, eax
jg 0x180045e60
xor eax, eax
mov dword [rsp + 0x38], 0x3a
mov qword [rsp + 0x30], rax
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rax
mov rcx, rsi
call fcn.18001c270
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
cmp rdi, rax
je 0x180045ee7
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
dec r12d
cmp r12d, 0xb6
ja 0x180045d50
mov r12d, dword [rsp + 0x60]
jmp 0x1800460fa
mov esi, 0xd5
nop word [rax + rax]
mov eax, esi
sub eax, 0xd5
je 0x1800460e2
sub eax, 0x43
je 0x180046073
sub eax, 0x43
je 0x180045fe8
sub eax, 0x43
je 0x180045f5c
cmp eax, 0x43
jne 0x1800460e8
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
cmp r14, rax
je 0x1800460e8
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
jmp 0x1800460e8
mov r9, r14
lea rcx, [rbp + 0x190]
mov edx, 1
mov r8d, 0x1000
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
test eax, eax
jle 0x180045fba
nop dword [rax + rax]
lea r9, [rbp + 0x190]
mov dword [rbp - 0x70], eax
mov r8, r15
lea rdx, [rbp - 0x70]
mov ecx, 0x89
call fcn.18006f280
mov r9, r14
lea rcx, [rbp + 0x190]
mov edx, 1
mov r8d, 0x1000
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
test eax, eax
jg 0x180045f80
xor eax, eax
mov dword [rsp + 0x38], 0x3a
mov qword [rsp + 0x30], rax
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rax
mov rcx, r15
call fcn.18001c270
jmp 0x1800460e8
mov rax, qword [rbp - 0x50]
test rax, rax
jne 0x180046041
lea ecx, [rax + 1]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__fileno]
lea r9, [rbp + 0x180]
xor edx, edx
lea r8, [rbp - 0x78]
mov dword [rbp - 0x78], eax
mov ecx, 0x9e
call fcn.18004d3f0
mov r15, rax
test rax, rax
jne 0x1800460e8
lea rcx, str.i_panoul_de_control
call fcn.180085a60
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor r8d, r8d
mov qword [rsp + 0x28], 0
lea r9, [rbp + 0x180]
mov qword [rsp + 0x20], 0
mov rdx, rax
lea ecx, [r8 + 0x74]
call fcn.180044e00
mov r15, rax
test rax, rax
je 0x180046029
jmp 0x1800460e8
mov rdi, qword [rbp - 0x48]
test rdi, rdi
je 0x1800460bb
lea rdx, [0x180098e6c]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov r14, rax
test rax, rax
jne 0x1800460c6
mov rdx, rdi
lea rcx, str.CoGetCallContext
call fcn.180085a60
lea rcx, str.reason:
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
lea ecx, [r14 + 1]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r14, rax
movzx eax, byte [rbp - 0x54]
add al, 0x30
mov byte [rbp + 0x180], 0x77
mov byte [rbp + 0x181], al
mov byte [rbp + 0x182], 0
jmp 0x1800460e8
xor r15d, r15d
xor r14d, r14d
add esi, 0x43
mov rdi, r13
cmp esi, 0x224
jb 0x180045f10
inc r12d
mov dword [rsp + 0x60], r12d
cmp r12d, 0xf6
jb 0x180045850
mov r14, qword [rbp - 0x40]
mov r10, qword [rsp + 0x70]
mov rcx, qword [rbp - 0x68]
cmp dword [r14 + 0x13e8], 4
jne 0x180046145
xor eax, eax
jmp 0x1800461dc
lea rcx, str.UpdateNamespaceData:
call fcn.180085a60
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov eax, dword [rcx]
lea r8, [rsp + 0x78]
mov ecx, 0x126
mov dword [rsp + 0x68], eax
mov r9, r10
mov qword [rsp + 0x20], r14
lea rdx, [rsp + 0x68]
call fcn.18001ae10
test dword [rsp + 0x78], 0xfffffffb
je 0x1800461dc
mov eax, 0xffffffff
jmp 0x1800461dc
xor edx, edx
xor r9d, r9d
xor r8d, r8d
lea ecx, [rdx + 0x42]
call fcn.18001bef0
mov ecx, 2
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rbx
lea rdx, str._n_nbzip2_libbzip2:_internal_error_number__d._nThis_is_a_bug_in_bzip2_libbzip2___s._nPlease_report_it_to_me_at:_jseward_bzip.org.__If_this_happened_nwhen_you_were_using_some_program_which_uses_libbzip2_as_a_ncomponent__you_should_also_report_this_bug_to_the_author_s__nof_that_program.__Please_make_an_effort_to_report_this_bug__ntimely_and_accurate_bug_reports_eventually_lead_to_higher_nquality_software.__Thanks.__Julian_Seward__10_December_2007._n_n
mov rcx, rax
mov r8d, 0x3ec
call fcn.180085950
mov ecx, 3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r9d, 0x17
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800358f0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov eax, dword [rsp + 0x78]
mov rcx, qword [rbp + 0x1190]
xor rcx, rsp
call fcn.1800864a0
mov rbx, qword [rsp + 0x12e8]
add rsp, 0x12a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret