Function at 0x18001cb70
Capabilities:
Print debug messages

Disassembly:
mov dword [rsp + 0x18], r8d
mov dword [rsp + 0x10], edx
mov dword [rsp + 8], ecx
push rsi
push rdi
sub rsp, 0x288
mov rax, qword [0x180063010]
xor rax, rsp
mov qword [rsp + 0x270], rax
mov qword [rsp + 0x68], 0xffffffffffffffff
cmp qword [0x1801b21a8], 0xffffffffffffffff
je 0x18001ce1e
cmp dword [rsp + 0x2a0], 0
je 0x18001ce1e
cmp dword [rsp + 0x2b0], 0
je 0x18001ce1e
lea rax, [rsp + 0x4c]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x70]
lea rcx, [0x18005ad90]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x7c
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x3d
movzx eax, word [rsp + rax + 0x70]
test eax, eax
je 0x18001cc11
mov dword [rsp + 0x50], 1
jmp 0x18001cc19
mov dword [rsp + 0x50], 0
movzx eax, byte [rsp + 0x50]
test eax, eax
je 0x18001cc70
mov dword [rsp + 0x40], 0
jmp 0x18001cc36
mov eax, dword [rsp + 0x40]
inc eax
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0x3e
jge 0x18001cc70
movsxd rax, dword [rsp + 0x40]
movzx eax, word [rsp + rax*2 + 0x70]
mov dword [rsp + 0x5c], eax
mov eax, dword [rsp + 0x40]
cdq
mov ecx, 0x3a
idiv ecx
mov eax, edx
add eax, 0x34
mov ecx, dword [rsp + 0x5c]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x40]
mov word [rsp + rcx*2 + 0x70], ax
jmp 0x18001cc2c
lea rax, [rsp + 0x70]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rax, [rsp + 0x250]
mov rdi, rax
xor eax, eax
mov ecx, 0x18
rep stosb byte [rdi], al
lea rax, [rsp + 0x250]
mov rdi, rax
xor eax, eax
mov ecx, 0x18
rep stosb byte [rdi], al
mov eax, dword [rsp + 0x2a0]
mov dword [rsp + 0x250], eax
mov eax, dword [rsp + 0x2b0]
mov qword [rsp + 0x258], rax
mov qword [rsp + 0x260], 0
mov dword [rsp + 0x268], 0
mov qword [rsp + 0x38], 0
lea rax, [rsp + 0x268]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x18
lea rax, [rsp + 0x250]
mov qword [rsp + 0x20], rax
mov r9d, 0x18
lea r8, [rsp + 0x250]
mov edx, 0x22c00c
mov rcx, qword [0x1801b21a8]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
cmp qword [rsp + 0x260], 0
je 0x18001cd4d
cmp qword [rsp + 0x260], 0xffffffffffffffff
je 0x18001cd4d
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0x68], rax
jmp 0x18001ce19
lea rax, [rsp + 0x4d]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0xf0]
lea rcx, [0x18005bf70]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xa4
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x51
movzx eax, word [rsp + rax + 0xf0]
test eax, eax
je 0x18001cd99
mov dword [rsp + 0x54], 1
jmp 0x18001cda1
mov dword [rsp + 0x54], 0
movzx eax, byte [rsp + 0x54]
test eax, eax
je 0x18001cdfe
mov dword [rsp + 0x44], 0
jmp 0x18001cdbe
mov eax, dword [rsp + 0x44]
inc eax
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0x52
jge 0x18001cdfe
movsxd rax, dword [rsp + 0x44]
movzx eax, word [rsp + rax*2 + 0xf0]
mov dword [rsp + 0x60], eax
mov eax, dword [rsp + 0x44]
cdq
mov ecx, 0x3a
idiv ecx
mov eax, edx
add eax, 0x34
mov ecx, dword [rsp + 0x60]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x44]
mov word [rsp + rcx*2 + 0xf0], ax
jmp 0x18001cdb4
lea rax, [rsp + 0xf0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x18001cee0
jmp 0x18001cf01
lea rax, [rsp + 0x4e]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x1a0]
lea rcx, str.qtuhkLIKYSZm_27._
mov rdi, rax
mov rsi, rcx
mov ecx, 0xa4
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x51
movzx eax, word [rsp + rax + 0x1a0]
test eax, eax
je 0x18001ce6a
mov dword [rsp + 0x58], 1
jmp 0x18001ce72
mov dword [rsp + 0x58], 0
movzx eax, byte [rsp + 0x58]
test eax, eax
je 0x18001cecf
mov dword [rsp + 0x48], 0
jmp 0x18001ce8f
mov eax, dword [rsp + 0x48]
inc eax
mov dword [rsp + 0x48], eax
cmp dword [rsp + 0x48], 0x52
jge 0x18001cecf
movsxd rax, dword [rsp + 0x48]
movzx eax, word [rsp + rax*2 + 0x1a0]
mov dword [rsp + 0x64], eax
mov eax, dword [rsp + 0x48]
cdq
mov ecx, 0x3a
idiv ecx
mov eax, edx
add eax, 0x34
mov ecx, dword [rsp + 0x64]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x48]
mov word [rsp + rcx*2 + 0x1a0], ax
jmp 0x18001ce85
lea rax, [rsp + 0x1a0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov r8d, dword [rsp + 0x2b0]
mov edx, dword [rsp + 0x2a8]
mov ecx, dword [rsp + 0x2a0]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x270]
xor rcx, rsp
call fcn.180028050
add rsp, 0x288
pop rdi
pop rsi
ret