Function at 0x180046210
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x8b0
mov rax, qword [0x1800a74e0]
xor rax, rsp
mov qword [rsp + 0x8a0], rax
mov rdi, qword [rsp + 0x910]
lea eax, [rcx + 0xb22]
mov rsi, qword [rsp + 0x918]
mov r10, r9
mov qword [rsp + 0x58], r9
mov r9, rdx
mov qword [rsp + 0x48], r8
mov r13d, ecx
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x80], rdi
mov dword [rsp + 0x30], eax
cmp ecx, eax
jae 0x180046427
mov r12d, dword [rsp + 0x38]
mov ebx, dword [rsp + 0x38]
mov ebp, dword [rsp + 0x38]
mov r14d, dword [rsp + 0x40]
lea rdx, [0x180000000]
cmp r13d, 0x2df
ja 0x18004658d
je 0x18004656a
cmp r13d, 0x104
ja 0x180046456
je 0x180046417
mov eax, r13d
sub eax, 0xa5
je 0x1800463df
sub eax, 1
je 0x180046fbe
cmp eax, 2
jne 0x180046413
movdqa xmm0, xmmword [0x18009fcf0]
movdqa xmm1, xmmword [0x18009fde0]
movups xmmword [0x18072f118], xmm0
mov dword [0x18072f138], 0xff
movups xmmword [0x18072f128], xmm1
mov r11d, dword [rsi]
add dword [r9 + 0xc], r11d
test r11d, r11d
jle 0x180046413
nop dword [rax]
nop word [rax + rax]
mov r15d, 0x8a
mov eax, r15d
sub eax, 0x8a
je 0x18004639c
sub eax, 1
je 0x180046345
cmp eax, 1
jne 0x1800463c4
sub r11d, dword [rsp + 0x60]
jmp 0x1800463c4
movsxd rcx, dword [rsp + 0x60]
mov eax, dword [r9 + 0x14]
movsxd r8, dword [r9 + 0x10]
sub eax, ecx
add r8, qword [r9]
movzx edx, byte [rdx + rcx*4 + 0x72f118]
movzx ecx, al
and dl, byte [rsp + 0x64]
mov eax, dword [rsp + 0x60]
shl dl, cl
or byte [r8], dl
sub dword [r9 + 0x14], eax
jne 0x1800463bd
movsxd rcx, dword [r9 + 0x10]
mov dword [r9 + 0x14], 8
lea eax, [rcx + 1]
mov dword [r9 + 0x10], eax
cmp eax, dword [r9 + 8]
jge 0x180046f9f
mov rax, qword [r9]
mov byte [rcx + rax + 1], 0
jmp 0x1800463bd
cmp r11d, dword [r9 + 0x14]
mov ecx, r11d
mov edx, dword [r10]
mov eax, r11d
cmovge ecx, dword [r9 + 0x14]
sub eax, ecx
mov dword [rsp + 0x60], ecx
movzx ecx, al
shr edx, cl
mov dword [rsp + 0x64], edx
lea rdx, [0x180000000]
inc r15d
cmp r15d, 0x8d
jb 0x180046326
test r11d, r11d
jg 0x180046320
jmp 0x18004640e
cmp dword [r8], 4
mov qword [rsp + 0x78], r10
jl 0x180046413
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str.Encrypted_Generic_Container
mov rcx, rax
call fcn.180085950
mov r10, qword [rsp + 0x58]
mov r9, qword [rsp + 0x50]
mov r8, qword [rsp + 0x48]
mov eax, dword [rsp + 0x30]
add r13d, 0xbe
cmp r13d, eax
jb 0x18004628d
mov eax, dword [rsp + 0x38]
mov rcx, qword [rsp + 0x8a0]
xor rcx, rsp
call fcn.1800864a0
mov rbx, qword [rsp + 0x8f0]
add rsp, 0x8b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov eax, r13d
sub eax, 0x163
je 0x1800464be
sub eax, 0x5f
je 0x180046413
cmp eax, 0x5f
jne 0x180046413
mov eax, dword [rdi]
xor ecx, ecx
test eax, eax
jle 0x1800464a9
mov rdx, qword [rsp + 0x78]
nop word [rax + rax]
movzx r12d, byte [rdx]
lea rdx, [rdx + 1]
mov ebx, dword [rsp + r12*4 + 0x90]
dec ebx
movsxd rax, ebx
mov dword [rsp + r12*4 + 0x90], ebx
mov dword [r9 + rax*4], ecx
inc ecx
mov eax, dword [rdi]
cmp ecx, eax
jl 0x180046480
cdq
and edx, 0x1f
add eax, edx
sar eax, 5
add eax, 2
mov dword [rsp + 0x68], eax
jmp 0x180046413
xor edx, edx
lea rcx, [rsp + 0x90]
mov r8d, 0x404
call sub.VCRUNTIME140.dll_memset
movsxd rdx, dword [rdi]
xor ecx, ecx
test rdx, rdx
jle 0x1800464f8
nop dword [rax]
mov rax, qword [rsp + 0x78]
movzx eax, byte [rcx + rax]
inc rcx
inc dword [rsp + rax*4 + 0x90]
cmp rcx, rdx
jl 0x1800464e0
mov r8d, 0x400
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x4a0]
call sub.VCRUNTIME140.dll_memcpy
mov ecx, 1
nop dword [rax + rax]
mov eax, dword [rsp + rcx*4 + 0x8c]
add dword [rsp + rcx*4 + 0x90], eax
mov eax, dword [rsp + rcx*4 + 0x90]
add dword [rsp + rcx*4 + 0x94], eax
mov eax, dword [rsp + rcx*4 + 0x94]
add dword [rsp + rcx*4 + 0x98], eax
mov eax, dword [rsp + rcx*4 + 0x98]
add dword [rsp + rcx*4 + 0x9c], eax
add rcx, 4
cmp rcx, 0x101
jl 0x180046520
jmp 0x180046404
movsxd rax, dword [rsp + 0x68]
test eax, eax
jle 0x180046413
mov r8, rax
xor edx, edx
shl r8, 2
mov rcx, rsi
call sub.VCRUNTIME140.dll_memset
jmp 0x180046404
cmp r13d, 0x5d7
ja 0x180046ed0
je 0x1800466de
cmp r13d, 0x39d
je 0x1800469ab
cmp r13d, 0x45b
je 0x18004699e
cmp r13d, 0x519
jne 0x180046417
nop word [rax + rax]
mov r15d, 0x13
nop word [rax + rax]
lea eax, [r15 - 0xe]
cmp eax, 5
ja case.default.0x1800465f7
mov ecx, dword [rdx + rax*4 + 0x47018]
add rcx, rdx
jmp rcx
mov eax, dword [rsp + 0x44]
add eax, eax
mov dword [rsp + 0x44], eax
jmp case.default.0x1800465f7
cmp dword [r8], 4
jl 0x18004663c
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r13d, dword [rsp + 0x44]
lea rdx, str.set_SiblingDescription
mov rcx, rax
mov r8d, r13d
call fcn.180085950
mov r10, qword [rsp + 0x58]
mov r9, qword [rsp + 0x50]
jmp 0x180046641
mov r13d, dword [rsp + 0x44]
xor r12d, r12d
xor ecx, ecx
cmp dword [rdi], ecx
jle 0x1800466ab
nop word [rax + rax]
mov r8d, 1
mov edx, PathMakeUniqueName
rol r8d, cl
nop
cmp edx, 0x2b
je 0x180046676
cmp edx, 0x1805
jne 0x180046693
movsxd rax, ebx
mov dword [r10 + rax*4], r12d
jmp 0x180046693
mov ebx, dword [r9]
mov eax, ecx
shr rax, 5
test dword [rsi + rax*4], r8d
mov eax, ecx
cmove eax, r12d
sub ebx, r13d
mov r12d, eax
jns 0x180046693
add ebx, dword [rdi]
add edx, 0x17da
cmp edx, 0x2fb4
jbe 0x180046660
inc ecx
add r9, 4
cmp ecx, dword [rdi]
jl 0x180046650
mov r9, qword [rsp + 0x50]
lea rdx, [0x180000000]
mov r8, qword [rsp + 0x48]
xor r14d, r14d
mov dword [rsp + 0x40], r14d
jmp case.default.0x1800465f7
mov eax, dword [rsp + 0x44]
cmp eax, dword [rdi]
jg 0x1800466da
test r14d, r14d
jne case.default.0x1800465f7
mov eax, dword [rsp + 0x30]
cmp dword [r8], 4
mov r13d, 0x5d7
jl 0x180046417
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str.c:helena_bccindepcompile.c
jmp 0x1800463fc
mov r14d, 0xffffffff
nop dword [rax + rax]
mov r13d, 5
cmp r13d, 5
ja case.default.0x18004672d
mov eax, r13d
mov ecx, dword [rdx + rax*4 + 0x47030]
add rcx, rdx
jmp rcx
cmp r14d, ebp
jle case.default.0x18004672d
mov eax, dword [rsp + 0x40]
lea rdx, [rsp + 0x38]
inc eax
movsxd r15, ebp
mov edi, r14d
mov dword [rsp + 0x38], r14d
sub edi, ebp
mov dword [rsp + 0x70], ebp
add eax, edi
mov r8d, 0x106
mov dword [rsp + 0x40], eax
mov rcx, r10
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
call fcn.1800456a0
mov rax, qword [rsp + 0x50]
lea r10d, [rdi + 1]
mov r11, qword [rsp + 0x58]
mov ecx, ebp
mov edx, 1
mov r9d, 0xffffffff
rol edx, cl
lea rcx, [rax + r15*4]
mov eax, dword [rcx]
mov r8d, dword [r11 + rax*4]
cmp r9d, r8d
je 0x1800467ab
mov rax, r15
mov r9d, r8d
sar rax, 5
or dword [rsi + rax*4], edx
inc r15
rol edx, 1
add rcx, 4
sub r10, 1
jne 0x180046793
mov rdi, qword [rsp + 0x80]
mov r10, r11
mov r9, qword [rsp + 0x50]
jmp 0x180046940
movsxd rax, ebx
mov ecx, ebx
sar rax, 5
and ecx, 0x1f
mov eax, dword [rsi + rax*4]
bt eax, ecx
jb 0x1800467fd
test ecx, ecx
je 0x1800467fd
inc ebx
movsxd rax, ebx
mov ecx, ebx
sar rax, 5
and ecx, 0x1f
mov eax, dword [rsi + rax*4]
bt eax, ecx
jae 0x1800467e3
movsxd rax, ebx
sar rax, 5
mov edx, dword [rsi + rax*4]
mov eax, ebx
and eax, 0x1f
bt edx, eax
jb 0x180046860
test edx, edx
jne 0x180046830
nop word [rax + rax]
add ebx, 0x20
movsxd rax, ebx
sar rax, 5
cmp dword [rsi + rax*4], 0
je 0x180046820
movsxd rax, ebx
mov ecx, ebx
sar rax, 5
and ecx, 0x1f
mov eax, dword [rsi + rax*4]
bt eax, ecx
jb 0x180046860
mov ecx, ebx
mov edx, 1
rol edx, cl
nop dword [rax]
inc ebx
rol edx, 1
movsxd rax, ebx
sar rax, 5
test dword [rsi + rax*4], edx
je 0x180046850
lea r14d, [rbx - 1]
jmp 0x180046940
lea ebx, [r14 + 1]
jmp case.default.0x18004672d
cmp r14d, dword [rdi]
jl case.default.0x18004672d
mov r8, qword [rsp + 0x48]
mov r14d, dword [rsp + 0x40]
mov r15d, reloc.SHELL32.dll_ILRemoveLastID
mov r10, qword [rsp + 0x58]
dec r15d
cmp r15d, 0xd
ja 0x1800465e0
jmp 0x1800465d0
lea ebp, [rbx - 1]
cmp ebp, dword [rdi]
jge 0x18004687b
jmp case.default.0x18004672d
movsxd rax, ebx
mov ecx, ebx
sar rax, 5
and ecx, 0x1f
mov eax, dword [rsi + rax*4]
bt eax, ecx
jae 0x1800468dc
test ecx, ecx
je 0x1800468dc
inc ebx
movsxd rax, ebx
mov ecx, ebx
sar rax, 5
and ecx, 0x1f
mov eax, dword [rsi + rax*4]
bt eax, ecx
jb 0x1800468c2
movsxd rax, ebx
sar rax, 5
mov edx, dword [rsi + rax*4]
mov eax, ebx
and eax, 0x1f
bt edx, eax
jae 0x180046940
cmp edx, 0xffffffff
jne 0x180046910
nop word [rax + rax]
add ebx, 0x20
movsxd rax, ebx
sar rax, 5
cmp dword [rsi + rax*4], 0xffffffff
je 0x180046900
movsxd rax, ebx
mov ecx, ebx
sar rax, 5
and ecx, 0x1f
mov eax, dword [rsi + rax*4]
bt eax, ecx
jae 0x180046940
mov ecx, ebx
mov edx, 1
rol edx, cl
nop dword [rax]
inc ebx
rol edx, 1
movsxd rax, ebx
sar rax, 5
test dword [rsi + rax*4], edx
jne 0x180046930
lea rdx, [0x180000000]
dec r13d
lea eax, [r13 + 0x112]
cmp eax, 0x111
ja 0x180046716
jmp 0x180046710
cmp dword [r8], 4
jl case.default.0x1800465f7
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, r14d
lea rdx, str._ILjava_lang_Process__V
mov rcx, rax
call fcn.180085950
mov r9, qword [rsp + 0x50]
lea rdx, [0x180000000]
mov r8, qword [rsp + 0x48]
jmp case.default.0x1800465f7
mov dword [rsp + 0x44], 1
jmp 0x180046417
lea r8, [rsp + 0x90]
mov r9d, 0x100
nop dword [rax]
movsxd rcx, dword [r8]
lea r8, [r8 + 4]
mov rax, rcx
and ecx, 0x1f
sar rax, 5
lea rdx, [rsi + rax*4]
mov eax, 1
shl eax, cl
or dword [rdx], eax
sub r9, 1
jne 0x1800469c0
xor r11d, r11d
nop word [rax + rax]
mov ecx, dword [rdi]
lea r9d, [r11 + 6]
add ecx, r11d
movsxd rax, ecx
and ecx, 0x1f
sar rax, 5
lea rdx, [rsi + rax*4]
mov eax, 1
shl eax, cl
or dword [rdx], eax
mov edx, 1
mov ecx, dword [rdi]
add ecx, r11d
movsxd rax, ecx
inc ecx
and ecx, 0x1f
inc rax
shl edx, cl
not edx
sar rax, 5
and dword [rsi + rax*4], edx
lea r8, [rsi + rax*4]
mov ecx, dword [rdi]
mov edx, 1
add ecx, r11d
movsxd rax, ecx
add ecx, 2
and ecx, 0x1f
add rax, 2
shl edx, cl
sar rax, 5
or dword [rsi + rax*4], edx
lea r8, [rsi + rax*4]
mov ecx, dword [rdi]
mov edx, 1
add ecx, r11d
movsxd rax, ecx
add ecx, 3
and ecx, 0x1f
add rax, 3
shl edx, cl
not edx
sar rax, 5
and dword [rsi + rax*4], edx
lea r8, [rsi + rax*4]
mov edx, dword [rdi]
lea eax, [rdx + r9]
movsxd rcx, eax
sub rcx, 2
sar rcx, 5
lea r8, [rsi + rcx*4]
lea ecx, [rdx + 4]
mov edx, 1
add ecx, r11d
and ecx, 0x1f
shl edx, cl
or dword [r8], edx
mov edx, 1
mov ecx, dword [rdi]
add ecx, r11d
movsxd rax, ecx
add ecx, 5
and ecx, 0x1f
add rax, 5
shl edx, cl
not edx
sar rax, 5
and dword [rsi + rax*4], edx
lea r8, [rsi + rax*4]
mov edx, dword [rdi]
lea eax, [rdx + r9]
movsxd rcx, eax
sar rcx, 5
lea r8, [rsi + rcx*4]
lea ecx, [rdx + 6]
mov edx, 1
add ecx, r11d
and ecx, 0x1f
shl edx, cl
or dword [r8], edx
mov ecx, dword [rdi]
add ecx, r11d
mov edx, 1
movsxd rax, ecx
add ecx, 7
and ecx, 0x1f
add rax, 7
shl edx, cl
not edx
sar rax, 5
and dword [rsi + rax*4], edx
lea r8, [rsi + rax*4]
mov edx, dword [rdi]
lea eax, [rdx + r9]
movsxd rcx, eax
add rcx, 2
sar rcx, 5
lea r8, [rsi + rcx*4]
lea ecx, [rdx + 8]
mov edx, 1
add ecx, r11d
and ecx, 0x1f
shl edx, cl
or dword [r8], edx
mov edx, 1
mov ecx, dword [rdi]
add ecx, r11d
movsxd rax, ecx
add ecx, 9
and ecx, 0x1f
add rax, 9
shl edx, cl
not edx
sar rax, 5
and dword [rsi + rax*4], edx
lea r8, [rsi + rax*4]
mov edx, dword [rdi]
lea eax, [rdx + r9]
movsxd rcx, eax
add rcx, 4
sar rcx, 5
lea r8, [rsi + rcx*4]
lea ecx, [rdx + 0xa]
mov edx, 1
add ecx, r11d
and ecx, 0x1f
shl edx, cl
or dword [r8], edx
mov edx, 1
mov ecx, dword [rdi]
add ecx, r11d
movsxd rax, ecx
add ecx, 0xb
and ecx, 0x1f
add rax, 0xb
shl edx, cl
sar rax, 5
not edx
and dword [rsi + rax*4], edx
lea r8, [rsi + rax*4]
mov edx, dword [rdi]
lea eax, [rdx + r9]
movsxd rcx, eax
add rcx, 6
sar rcx, 5
lea r8, [rsi + rcx*4]
lea ecx, [rdx + 0xc]
mov edx, 1
add ecx, r11d
and ecx, 0x1f
shl edx, cl
or dword [r8], edx
mov edx, 1
mov ecx, dword [rdi]
add ecx, r11d
movsxd rax, ecx
add ecx, 0xd
add rax, 0xd
and ecx, 0x1f
sar rax, 5
shl edx, cl
lea r8, [rsi + rax*4]
not edx
and dword [r8], edx
mov edx, dword [rdi]
lea eax, [rdx + r9]
movsxd rcx, eax
add rcx, 8
sar rcx, 5
lea r8, [rsi + rcx*4]
lea ecx, [rdx + 0xe]
mov edx, 1
add ecx, r11d
and ecx, 0x1f
shl edx, cl
or dword [r8], edx
mov edx, 1
mov ecx, dword [rdi]
add ecx, r11d
movsxd rax, ecx
add ecx, 0xf
and ecx, 0x1f
add rax, 0xf
shl edx, cl
not edx
sar rax, 5
and dword [rsi + rax*4], edx
lea r8, [rsi + rax*4]
mov edx, dword [rdi]
lea eax, [rdx + r9]
movsxd rcx, eax
add rcx, 0xa
sar rcx, 5
lea r8, [rsi + rcx*4]
lea ecx, [rdx - 0x10]
mov edx, 1
add ecx, r11d
and ecx, 0x1f
shl edx, cl
or dword [r8], edx
mov edx, 1
mov ecx, dword [rdi]
add ecx, r11d
movsxd rax, ecx
add ecx, 0xfffffff1
and ecx, 0x1f
add rax, 0x11
shl edx, cl
not edx
sar rax, 5
and dword [rsi + rax*4], edx
lea r8, [rsi + rax*4]
mov edx, dword [rdi]
lea eax, [rdx + r9]
movsxd rcx, eax
add rcx, 0xc
sar rcx, 5
lea r8, [rsi + rcx*4]
lea ecx, [rdx - 0xe]
mov edx, 1
add ecx, r11d
and ecx, 0x1f
shl edx, cl
or dword [r8], edx
mov edx, 1
mov ecx, dword [rdi]
add ecx, r11d
movsxd rax, ecx
add ecx, 0xfffffff3
and ecx, 0x1f
add rax, 0x13
shl edx, cl
sar rax, 5
not edx
and dword [rsi + rax*4], edx
lea r8, [rsi + rax*4]
mov edx, dword [rdi]
lea eax, [rdx + r9]
movsxd rcx, eax
add rcx, 0xe
sar rcx, 5
lea r8, [rsi + rcx*4]
lea ecx, [rdx - 0xc]
add ecx, r11d
mov edx, 1
and ecx, 0x1f
shl edx, cl
or dword [r8], edx
mov edx, 1
mov ecx, dword [rdi]
add ecx, r11d
movsxd rax, ecx
add ecx, 0xfffffff5
and ecx, 0x1f
add rax, 0x15
shl edx, cl
not edx
sar rax, 5
and dword [rsi + rax*4], edx
lea r8, [rsi + rax*4]
mov edx, dword [rdi]
lea eax, [rdx + r9]
movsxd rcx, eax
add rcx, 0x10
sar rcx, 5
lea r8, [rsi + rcx*4]
lea ecx, [rdx - 0xa]
mov edx, 1
add ecx, r11d
and ecx, 0x1f
shl edx, cl
or dword [r8], edx
mov edx, 1
mov ecx, dword [rdi]
add ecx, r11d
movsxd rax, ecx
add ecx, 0xfffffff7
and ecx, 0x1f
add rax, 0x17
shl edx, cl
not edx
sar rax, 5
and dword [rsi + rax*4], edx
lea r8, [rsi + rax*4]
mov edx, dword [rdi]
lea eax, [rdx + r9]
movsxd rcx, eax
add rcx, 0x12
sar rcx, 5
lea r8, [rsi + rcx*4]
lea ecx, [rdx - 8]
mov edx, 1
add ecx, r11d
and ecx, 0x1f
shl edx, cl
or dword [r8], edx
mov edx, 1
mov ecx, dword [rdi]
add ecx, r11d
movsxd rax, ecx
add ecx, 0xfffffff9
and ecx, 0x1f
add rax, 0x19
shl edx, cl
sar rax, 5
not edx
and dword [rsi + rax*4], edx
lea r8, [rsi + rax*4]
mov edx, dword [rdi]
lea eax, [rdx + r9]
movsxd rcx, eax
add rcx, 0x14
sar rcx, 5
lea r8, [rsi + rcx*4]
lea ecx, [rdx - 6]
mov edx, 1
add ecx, r11d
and ecx, 0x1f
shl edx, cl
or dword [r8], edx
mov ecx, dword [rdi]
add ecx, r11d
movsxd rax, ecx
add rax, 0x1b
add ecx, 0xfffffffb
sar rax, 5
and ecx, 0x1f
lea r8, [rsi + rax*4]
mov edx, 1
shl edx, cl
not edx
and dword [r8], edx
mov edx, dword [rdi]
lea eax, [rdx + r9]
movsxd rcx, eax
add rcx, 0x16
sar rcx, 5
lea r8, [rsi + rcx*4]
lea ecx, [rdx - 4]
mov edx, 1
add ecx, r11d
and ecx, 0x1f
shl edx, cl
or dword [r8], edx
mov edx, 1
mov ecx, dword [rdi]
add ecx, r11d
movsxd rax, ecx
add ecx, 0xfffffffd
and ecx, 0x1f
add rax, 0x1d
shl edx, cl
not edx
sar rax, 5
and dword [rsi + rax*4], edx
lea r8, [rsi + rax*4]
mov edx, dword [rdi]
lea eax, [rdx + r9]
movsxd rcx, eax
add rcx, 0x18
sar rcx, 5
lea r8, [rsi + rcx*4]
lea ecx, [rdx - 2]
mov edx, 1
add ecx, r11d
and ecx, 0x1f
shl edx, cl
or dword [r8], edx
mov edx, 1
mov ecx, dword [rdi]
add ecx, r11d
add r11d, 0x20
movsxd rax, ecx
dec ecx
add rax, 0x1f
and ecx, 0x1f
sar rax, 5
shl edx, cl
lea r8, [rsi + rax*4]
not edx
and dword [r8], edx
cmp r11d, 0x40
jl 0x1800469f0
jmp 0x180046409
cmp r13d, 0x695
je 0x180046f97
cmp r13d, 0x753
je 0x180046f2e
cmp r13d, 0x811
jne 0x180046417
cmp r12d, 0x100
jl 0x180046417
mov ecx, SHSetInstanceExplorer
mov eax, ecx
sub eax, 0x57
je 0x180046f1e
sub eax, 0x57
je 0x180046fd6
cmp eax, 0x1b
je 0x180046413
add ecx, 0x72
cmp ecx, 0x204
jb 0x180046f05
jmp 0x180046413
xor edx, edx
cmp dword [rdi], edx
jle 0x180046417
mov r11, qword [rsp + 0x78]
mov rcx, r9
movsxd rax, r12d
mov r8d, dword [rsp + rax*4 + 0x4a0]
nop dword [rax + rax]
test r8d, r8d
jne 0x180046f70
nop word [rax + rax]
inc r12d
movsxd rax, r12d
cmp dword [rsp + rax*4 + 0x4a0], 0
je 0x180046f60
movsxd rax, r12d
inc edx
dec dword [rsp + rax*4 + 0x4a0]
mov r8d, dword [rsp + rax*4 + 0x4a0]
mov eax, dword [rcx]
add rcx, 4
mov byte [rax + r11], r12b
cmp edx, dword [rdi]
jl 0x180046f50
jmp 0x18004640e
xor r12d, r12d
jmp 0x180046417
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.failed_to_find_C_AMTConfigurationServiceAMTConfigInstallPath
call fcn.180085950
jmp 0x180046427
lea rdx, [0x1800a6ee0]
mov ecx, 0x120
call fcn.180031450
xor eax, eax
jmp 0x18004642b
xor edx, edx
xor r9d, r9d
xor r8d, r8d
lea ecx, [rdx + 0x42]
call fcn.18001bef0
mov ecx, 2
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rbx
lea rdx, str._n_nbzip2_libbzip2:_internal_error_number__d._nThis_is_a_bug_in_bzip2_libbzip2___s._nPlease_report_it_to_me_at:_jseward_bzip.org.__If_this_happened_nwhen_you_were_using_some_program_which_uses_libbzip2_as_a_ncomponent__you_should_also_report_this_bug_to_the_author_s__nof_that_program.__Please_make_an_effort_to_report_this_bug__ntimely_and_accurate_bug_reports_eventually_lead_to_higher_nquality_software.__Thanks.__Julian_Seward__10_December_2007._n_n
mov rcx, rax
mov r8d, 0x3ed
call fcn.180085950
mov ecx, 3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3