Function at 0x18001d500
Capabilities:
Check for software breakpoints

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x78]
sub rsp, 0x178
mov r13d, dword [rbp + 0xd8]
mov r14d, r9d
mov ebx, dword [rbp + 0xd8]
mov r12d, r9d
imul eax, r9d, 0x84
mov r10, rcx
mov r9d, 6
mov dword [rsp + 0x48], eax
cmp r14d, eax
ja 0x18001d82e
mov r15d, dword [rbp + 0xd8]
lea rax, [0x180050440]
mov rdi, qword [rbp - 0x70]
mov rsi, qword [rbp - 0x70]
mov dword [rsp + 0x58], r15d
cmp r14d, 0x23c
ja 0x18001d73e
je 0x18001d71a
mov eax, r14d
sub eax, 0x2c
je 0x18001d6d1
sub eax, 0x25
je 0x18001d6c4
sub eax, 0x39
je 0x18001d692
sub eax, 0x36
je 0x18001d637
cmp eax, 0x19
jne 0x18001d812
mov ecx, 0x101
nop word [rax + rax]
mov eax, ecx
sub eax, 0x101
je 0x18001d5ea
sub eax, 1
je 0x18001d5e5
cmp eax, 1
jne 0x18001d5f1
test byte [rsi + 5], 2
mov eax, 0x1406
cmovne eax, r9d
mov dword [rdi + 8], eax
jmp 0x18001d5f1
mov qword [rdi], rsi
jmp 0x18001d5f1
lea rdi, [rbp + 0x48]
mov rsi, r10
inc ecx
cmp ecx, 0x104
jb 0x18001d5c0
mov eax, dword [r8]
lea r9, [rbp + 0xd8]
mov dword [rbp + 0xd8], eax
lea r8, [rbp + 0x48]
mov rax, qword [rdx]
xor ecx, ecx
xor edx, edx
mov dword [rsp + 0x28], 0x93
mov qword [rsp + 0x20], rax
call fcn.180034690
neg rax
sbb ecx, ecx
neg ecx
dec ecx
mov dword [rsp + 0x68], ecx
jmp 0x18001d6a4
cmp dword [r8], 1
jne 0x18001d649
cmp dword [rdx + 0x48], 0
je 0x18001d649
mov r15, qword [rdx + 0x30]
jmp 0x18001d656
mov r15, qword [rdx + 0x28]
test r15, r15
je 0x18001d812
add r15, 0x18
je 0x18001d812
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
cmp eax, 0xffffffff
jne 0x18001d680
lea edx, [rax + 0xa]
lea rcx, str.Unlimited
call qword [0x180184ca8]
jmp 0x18001d6a4
mov rdx, r15
lea rcx, [0x180165090]
call qword [0x1801d8f68]
jmp 0x18001d6a4
mov ecx, 0x38
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [0x1801d8c38], rax
mov r10, qword [rbp + 0xc0]
mov r9d, 6
mov r8, qword [rbp + 0xd0]
mov rdx, qword [rbp + 0xc8]
jmp 0x18001d812
mov dword [rsp + 0x58], 0
jmp 0x18001d812
mov rcx, qword [0x1801d4e90]
xor r9d, r9d
mov dword [rsp + 0x28], 0xdd
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], 0
call fcn.180142f90
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x127
lea r13d, [rax - 1]
xor eax, eax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
call fcn.18012b8e0
jmp 0x18001d6a4
mov qword [rsp + 0x28], r10
mov r9d, 0xd8
mov qword [rsp + 0x20], r8
xor edx, edx
xor r8d, r8d
xor ecx, ecx
call fcn.18013c550
mov rbx, rax
jmp 0x18001d6a4
cmp r14d, 0x702
je 0x18001d804
cmp r14d, 0xb05
je case.0x18001d884.9
cmp r14d, 0xd7a
je 0x18001d7f7
cmp r14d, 0x13f2
je 0x18001d7a1
cmp r14d, 0x1a6a
jne 0x18001d812
nop word [rax + rax]
mov dword [rsp + 0x68], 0
mov rax, qword [rsp + 0x68]
add rsp, 0x178
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov r9, qword [0x1801d8c38]
lea r8, [rsp + 0x40]
mov qword [rbp - 0x68], rax
lea rdx, [rbp - 0x68]
lea rax, [rbp + 0xd8]
mov qword [0x1801d5cb0], 0
mov qword [rsp + 0x28], rax
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x20], 0x8f
mov byte [rbp + 0xd8], 0
mov byte [rsp + 0x40], 1
mov dword [rsp + 0x50], 0x80
call fcn.180034b50
jmp 0x18001d6a4
mov qword [0x1801d5ca8], 0
jmp 0x18001d812
mov rax, qword [0x1801d8c38]
mov qword [0x1801d5ca0], rax
lea eax, [r12 + r12*2]
lea r14d, [r14 + rax*4]
lea rax, [0x180050440]
cmp r14d, dword [rsp + 0x48]
jbe 0x18001d572
jmp 0x18001d838
mov eax, dword [rbp + 0xd8]
mov dword [rsp + 0x58], eax
lea r14d, [r12 + 0xa]
cmp r12d, r14d
jae case.0x18001d884.9
mov r15, qword [rbp - 0x70]
lea edi, [r12 - 0x2c]
mov r12d, dword [rbp + 0xd8]
lea r11, [0x180000000]
mov rsi, qword [rbp - 0x70]
mov r9d, 8
cmp edi, 0x75
ja case.0x18001d884.10
movzx eax, byte [r11 + rdi + 0x1e740]
mov ecx, dword [r11 + rax*4 + 0x1e714]
add rcx, r11
jmp rcx
mov qword [rsp + 0x68], r15
jmp case.0x18001d884.10
movzx eax, byte [rsi + 0x28]
lea r8, [rbp + 0xd8]
xor r12d, r12d
mov byte [rbp + 0xd8], al
cmp al, 0x44
mov dword [rsp + 0x20], 0xa2
mov rcx, r10
cmove r12d, r9d
xor r9d, r9d
xor edx, edx
call fcn.18011bdc0
mov rcx, qword [rbp + 0xc8]
lea r9, [rsp + 0x40]
xor r8d, r8d
mov byte [rsp + 0x40], al
mov edx, 0x91
mov qword [rsp + 0x20], 0
call fcn.1800e9650
mov rsi, rax
lea r11, [0x180000000]
mov r9d, 8
jmp case.0x18001d884.10
cmp byte [rsi + 0x28], 0x3d
jne case.0x18001d884.10
xor r9d, r9d
mov dword [rsp + 0x50], ebx
xor r8d, r8d
mov qword [rsp + 0x20], r10
lea rdx, [rsp + 0x50]
lea ecx, [r9 + 0x39]
call fcn.180149240
mov dword [rsi + 8], eax
lea r11, [0x180000000]
mov r9d, 8
jmp case.0x18001d884.10
mov dword [rsi + 0x20], ebx
jmp case.0x18001d884.10
mov dword [rsi + 8], r12d
jmp case.0x18001d884.10
movsxd r15, dword [r8]
add r15, rdx
jmp case.0x18001d884.10
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0xf6
call fcn.1800c19c0
mov r9d, 8
lea r11, [0x180000000]
jmp case.0x18001d884.10
mov eax, r13d
lea rsi, [rax + rax*2]
mov rax, qword [0x1801d4e90]
shl rsi, 4
add rsi, qword [rax + 0x40]
inc edi
lea eax, [rdi + 0x2c]
cmp eax, r14d
jae case.0x18001d884.9
mov r10, qword [rbp + 0xc0]
mov r8, qword [rbp + 0xd0]
mov rdx, qword [rbp + 0xc8]
jmp 0x18001d867
mov edi, dword [rbp + 0xd8]
mov r13, qword [rbp - 0x70]
mov r14, qword [rbp + 0xc0]
mov r12, qword [rbp + 0xd0]
mov qword [rsp + 0x60], rdi
mov r15d, dword [rsp + 0x58]
nop dword [rax]
nop word [rax + rax]
mov r9d, 0x2f
xor r8d, r8d
xor edx, edx
mov rcx, r12
call fcn.1800aa6a0
mov r9d, 0x2f
xor r8d, r8d
xor edx, edx
mov rcx, r14
mov rbx, rax
call fcn.1800aa6a0
movzx ecx, al
movzx eax, bl
shl eax, 4
or ecx, eax
sub ecx, 0x44
je 0x18001da29
sub ecx, 1
je 0x18001db30
sub ecx, 0xf
je 0x18001dbaf
cmp ecx, 1
je 0x18001dc28
jmp 0x18001dc9f
mov r10, qword [rbp + 0xc8]
mov edx, 0x95
nop word [rax + rax]
cmp edx, 0x95
je 0x18001db0f
cmp edx, 0xfb7
je 0x18001da65
cmp edx, 0x1ed9
je 0x18001d780
jmp 0x18001db1c
mov ecx, dword [r12]
mov eax, dword [r14]
and ecx, 0x80000000
mov r8d, dword [rbp + 0xd8]
and eax, 0x80000000
cmp ecx, eax
je 0x18001dad9
mov eax, r8d
and eax, 0x80000000
cmp ecx, eax
je 0x18001dad9
mov ecx, 0xcf
mov eax, ecx
sub eax, 0xce
je 0x18001daa7
cmp eax, 1
jne 0x18001dacd
mov qword [rbp + 0x30], r10
jmp 0x18001dacd
movd xmm1, dword [r12]
movd xmm0, dword [r14]
mov rax, qword [rbp + 0x30]
cvtdq2pd xmm1, xmm1
mov dword [rax + 8], 5
cvtdq2pd xmm0, xmm0
subsd xmm1, xmm0
movsd qword [rax], xmm1
dec ecx
cmp ecx, 0xcd
ja 0x18001da93
jmp 0x18001db1c
mov ecx, 0x115
nop
mov eax, ecx
sub eax, 0x115
je 0x18001dafe
cmp eax, 0x40
jne 0x18001db02
mov rax, qword [rbp + 0x38]
mov dword [rax], r8d
mov dword [rax + 8], 4
jmp 0x18001db02
mov qword [rbp + 0x38], r10
add ecx, 0x40
cmp ecx, 0x195
jb 0x18001dae0
jmp 0x18001db1c
mov eax, dword [r12]
sub eax, dword [r14]
mov dword [rbp + 0xd8], eax
add edx, 0xf22
cmp edx, 0x2d66
jbe 0x18001da40
jmp 0x18001db37
mov r10, qword [rbp + 0xc8]
mov ecx, 0x63
nop dword [rax]
mov eax, ecx
sub eax, 0x62
je case.0x18001d884.9
cmp eax, 1
jne 0x18001dba8
mov eax, 0xd3
cmp eax, 0xd3
je 0x18001db90
cmp eax, 0x1f52
je 0x18001db77
cmp eax, 0x3dd1
jne 0x18001db94
mov rdx, qword [rbp - 0x48]
mov dword [rdx + 8], 5
jmp 0x18001db94
movd xmm0, dword [r12]
mov rdx, qword [rbp - 0x48]
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [r14]
movsd qword [rdx], xmm0
jmp 0x18001db94
mov qword [rbp - 0x48], r10
add eax, 0x1e7f
cmp eax, 0x5b7d
jbe 0x18001db55
mov dword [rsp + 0x68], 0
dec ecx
cmp ecx, 0x61
ja 0x18001db40
mov edx, 0xd6
cmp edx, 0xd6
je 0x18001dbca
cmp edx, 0xd60
je case.0x18001d884.9
jmp 0x18001dc1a
mov ecx, 0x2d
nop
mov eax, ecx
sub eax, 0x2c
je 0x18001dc00
cmp eax, 1
jne 0x18001dc0b
movd xmm0, dword [r14]
movsd xmm1, qword [r12]
mov rax, qword [rbp + 0xc8]
cvtdq2pd xmm0, xmm0
mov qword [rbp + 0x40], rax
subsd xmm1, xmm0
movsd qword [rax], xmm1
jmp 0x18001dc0b
mov rax, qword [rbp + 0x40]
mov dword [rax + 8], 5
dec ecx
cmp ecx, 0x2b
ja 0x18001dbd0
mov dword [rsp + 0x68], 0
add edx, 0xc8a
cmp edx, 0x1914
jbe 0x18001dbb4
mov edx, 0x97
nop dword [rax]
mov eax, edx
sub eax, 0x96
je case.0x18001d884.9
cmp eax, 1
jne 0x18001dc95
mov rdi, qword [rbp + 0xc8]
mov ecx, 0x9d
nop
mov eax, ecx
sub eax, 0x9c
je 0x18001dc73
cmp eax, 1
jne 0x18001dc7e
movsd xmm0, qword [r12]
subsd xmm0, qword [r14]
mov qword [rbp - 0x30], rdi
movsd qword [rdi], xmm0
jmp 0x18001dc7e
mov rax, qword [rbp - 0x30]
mov dword [rax + 8], 5
dec ecx
cmp ecx, 0x9b
ja 0x18001dc50
mov rdi, qword [rsp + 0x60]
mov dword [rsp + 0x68], 0
dec edx
cmp edx, 0x95
ja 0x18001dc30
mov r9d, 0x2f
xor r8d, r8d
xor edx, edx
mov rcx, r12
call fcn.1800aa6a0
cmp al, 0xa
jne 0x18001dcc3
mov r12, qword [r12]
add r12, 8
jmp 0x18001d9d0
mov r9d, 0x2f
xor r8d, r8d
xor edx, edx
mov rcx, r14
call fcn.1800aa6a0
cmp al, 0xa
jne 0x18001dce6
mov r14, qword [r14]
add r14, 8
jmp 0x18001d9d0
test r15d, r15d
jne 0x18001e6d0
mov r15d, 6
cmp r15d, 6
je 0x18001e114
cmp r15d, 0x4a4
jne 0x18001e32d
cmp r14, qword [rbp + 0xc8]
jne 0x18001dd4c
mov r9d, 0x2f
xor r8d, r8d
xor edx, edx
mov rcx, r14
call fcn.1800aa6a0
cmp al, 4
je 0x18001dd71
xor r9d, r9d
xor r8d, r8d
mov rdx, r14
mov ecx, 0x8e
call fcn.18009bf20
mov dword [rsp + 0x58], 1
jmp 0x18001e32d
mov esi, 0x69
mov dword [rsp + 0x48], esi
mov eax, esi
sub eax, 0x69
je 0x18001dd7e
cmp eax, 1
jne case.0x18001ddaf.4
mov esi, 0x6a
inc esi
mov dword [rsp + 0x48], esi
cmp esi, 0x6b
jb 0x18001dd55
mov dword [rsp + 0x58], 1
jmp 0x18001e32d
mov r9d, 0x2f
xor r8d, r8d
xor edx, edx
mov rcx, r14
call fcn.1800aa6a0
movzx ecx, al
dec ecx
cmp ecx, 8
ja case.0x18001ddaf.4
movsxd rax, ecx
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0x1e7b8]
add rcx, rdx
jmp rcx
mov ebx, 0xfe
mov eax, ebx
sub eax, 0xfe
je 0x18001ddc9
cmp eax, 1
je 0x18001dd61
jmp 0x18001de61
mov rcx, qword [r14]
lea r9, [rsp + 0x70]
mov dword [rsp + 0x50], 1
lea r8, [rbp - 0x28]
lea rdx, [rsp + 0x50]
mov rax, qword [rcx + 0x10]
add rcx, 0x18
mov qword [rbp - 0x28], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xd3
call fcn.1800668e0
movzx ecx, al
mov dword [rsp + 0x78], ecx
test al, al
jne 0x18001de5c
mov rdi, qword [rbp - 0x20]
mov ecx, 0x129
nop dword [rax]
mov eax, ecx
sub eax, 0x127
je 0x18001de42
sub eax, 1
je 0x18001de3a
cmp eax, 1
jne 0x18001de49
lea rdi, [rsp + 0x70]
jmp 0x18001de49
mov dword [rdi], 0
jmp 0x18001de49
mov dword [rdi + 8], 4
dec ecx
cmp ecx, 0x126
ja 0x18001de20
mov qword [rbp - 0x20], rdi
mov rdi, qword [rsp + 0x60]
lea r14, [rsp + 0x70]
inc ebx
cmp ebx, 0x100
jb 0x18001ddb6
mov ecx, 0x123
mov eax, ecx
sub eax, 0x123
je 0x18001de88
cmp eax, 0x4a
je 0x18001dd61
jmp 0x18001decd
mov rdi, qword [rbp - 0x18]
mov eax, 0x49
cmp eax, 0x49
je 0x18001dea6
cmp eax, 0xee
jne 0x18001deb3
mov dword [rdi + 8], 4
jmp 0x18001deb3
lea rdi, [rsp + 0x70]
mov dword [rsp + 0x70], 0
add eax, 0xa5
cmp eax, 0x193
jb 0x18001de91
mov qword [rbp - 0x18], rdi
lea r14, [rsp + 0x70]
mov rdi, qword [rsp + 0x60]
add ecx, 0x4a
cmp ecx, 0x1b7
jb 0x18001de74
mov ecx, 0xca
nop dword [rax]
cmp ecx, 0xca
je 0x18001def6
cmp ecx, 0x83c6
je 0x18001dd61
jmp 0x18001df3e
mov rdi, qword [rbp - 0x10]
mov eax, 0xb3
nop
cmp eax, 0xb3
je 0x18001df17
cmp eax, 0x14b
jne 0x18001df24
mov dword [rdi + 8], 4
jmp 0x18001df24
lea rdi, [rsp + 0x70]
mov dword [rsp + 0x70], 1
add eax, 0x98
cmp eax, 0x1e3
jb 0x18001df00
mov qword [rbp - 0x10], rdi
lea r14, [rsp + 0x70]
mov rdi, qword [rsp + 0x60]
add ecx, 0x82fc
cmp ecx, 0x105f8
jbe 0x18001dee0
mov r8d, 2
cmp r8d, 2
je 0x18001df64
cmp r8d, 0x36
je 0x18001dd61
jmp 0x18001dfb4
mov rdi, qword [rbp - 8]
mov edx, 0xb6
nop dword [rax]
cmp edx, 0xb6
je 0x18001df89
cmp edx, 0x89ec
jne 0x18001df98
mov dword [rdi + 8], 4
jmp 0x18001df98
mov rax, qword [r14]
lea rdi, [rsp + 0x70]
mov ecx, dword [rax + 8]
mov dword [rsp + 0x70], ecx
add edx, 0x8936
cmp edx, 0x1126c
jbe 0x18001df70
mov qword [rbp - 8], rdi
lea r14, [rsp + 0x70]
mov rdi, qword [rsp + 0x60]
add r8d, 0x34
cmp r8d, 0x68
jbe 0x18001df52
mov ebx, 0xdc
mov dword [rsp + 0x58], ebx
cmp ebx, 0xdc
je 0x18001e047
cmp ebx, 0x19c
je 0x18001dfe8
cmp ebx, 0x25c
je 0x18001dd61
jmp 0x18001e0f9
xor eax, eax
mov dword [rsp + 0x50], 0xa
mov qword [rsp + 0x38], rax
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x30], 0x47
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
lea rax, [rsp + 0x70]
xor edx, edx
mov qword [rsp + 0x20], rax
call fcn.18006ebd0
mov r9d, 0x2f
lea rcx, [rsp + 0x70]
xor r8d, r8d
xor edx, edx
call fcn.1800aa6a0
cmp al, 4
jne 0x18001e0f9
lea r14, [rsp + 0x70]
jmp 0x18001e0f9
mov rdi, qword [rbp]
mov edx, 0x8f
mov esi, dword [rbp - 0x5c]
mov ebx, dword [rbp - 0x60]
mov eax, edx
sub eax, 0x8f
je 0x18001e0ce
sub eax, 0x1f
je 0x18001e0c2
sub eax, 0x1f
je 0x18001e07c
cmp eax, 0x1f
jne 0x18001e0d6
bt esi, 0xa
jae 0x18001e0d6
mov rax, qword [rbp - 0x40]
inc dword [rax]
jmp 0x18001e0d6
mov ecx, 0xb6
mov eax, ecx
sub eax, 0xb6
je 0x18001e0af
sub eax, 0x76
je 0x18001e0a5
sub eax, 0x76
je 0x18001e09f
cmp eax, 0x76
jne 0x18001e0b2
mov dword [r13 + 8], esi
jmp 0x18001e0b2
mov dword [r13 + 4], ebx
jmp 0x18001e0b2
mov rax, qword [rbp - 0x40]
mov qword [r13], rax
jmp 0x18001e0b2
mov ebx, dword [rdi + 4]
add ecx, 0x76
cmp ecx, 0x28e
jb 0x18001e081
mov dword [rbp - 0x60], ebx
jmp 0x18001e0d6
mov rax, qword [rdi]
mov esi, dword [rdi + 8]
mov qword [rbp - 0x40], rax
jmp 0x18001e0d6
lea r13, [rsp + 0x70]
mov rdi, r14
add edx, 0x1f
cmp edx, 0x10b
jb 0x18001e056
mov ebx, dword [rsp + 0x58]
mov dword [rbp - 0x5c], esi
mov esi, dword [rsp + 0x48]
mov qword [rbp], rdi
mov rdi, qword [rsp + 0x60]
add ebx, 0xc0
mov dword [rsp + 0x58], ebx
cmp ebx, 0x31c
jb 0x18001dfc7
jmp case.0x18001ddaf.4
mov r9d, 0x2f
xor r8d, r8d
xor edx, edx
mov rcx, r12
call fcn.1800aa6a0
mov rsi, qword [rbp + 0xc8]
cmp al, 8
jne 0x18001e229
cmp r12, rsi
jne 0x18001e229
mov rax, qword [r12]
mov rcx, qword [rax + 0x18]
cmp qword [rcx + 0x48], 0
je 0x18001e229
cmp qword [rcx + 0x50], 0
je 0x18001e229
mov ebx, 0x10a
mov eax, ebx
sub eax, 0x10a
je 0x18001e1fe
sub eax, 0x57
je 0x18001e1b8
sub eax, 0x57
je 0x18001e1a3
sub eax, 0x57
je 0x18001e18c
cmp eax, 0x57
je case.0x18001d884.9
jmp 0x18001e215
mov rcx, qword [rbp - 0x50]
xor r8d, r8d
mov edx, 0xa4
call fcn.1800394a0
mov dword [rsp + 0x68], edi
jmp 0x18001e215
mov rax, qword [r12]
mov rcx, r12
mov rdx, qword [rbp - 0x50]
mov r8, qword [rax + 0x18]
call qword [r8 + 0x50]
jmp 0x18001e215
mov rdi, qword [rbp - 0x50]
test byte [rdi + 9], 4
je 0x18001e1e0
xor eax, eax
mov r9, rdi
mov qword [rsp + 0x28], rax
xor r8d, r8d
mov edx, 0xb5
mov qword [rsp + 0x20], rax
xor ecx, ecx
call fcn.180050770
mov r9d, 0x51
mov r8, rdi
mov rdx, rdi
mov rcx, r14
call fcn.18001d500
mov rdi, rax
mov qword [rsp + 0x60], rax
jmp 0x18001e215
mov rax, qword [r12]
lea rdx, [rbp + 0x58]
mov rcx, r12
mov r8, qword [rax + 0x18]
call qword [r8 + 0x48]
mov qword [rbp - 0x50], rax
add ebx, 0x57
cmp ebx, 0x2bd
jb 0x18001e162
jmp 0x18001e2d7
mov r9d, 0x2f
xor r8d, r8d
xor edx, edx
mov rcx, r12
call fcn.1800aa6a0
cmp al, 8
jne 0x18001e26b
mov rax, qword [r12]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0xd0]
test rax, rax
je 0x18001e26b
mov r9, r14
mov r8, r12
mov rdx, rsi
mov cl, 2
call rax
test eax, eax
je 0x18001d780
jmp 0x18001e2d7
mov r9d, 0x2f
xor r8d, r8d
xor edx, edx
mov rcx, r14
call fcn.1800aa6a0
cmp al, 8
jne 0x18001e2d7
mov rax, qword [r14]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0xd0]
test rax, rax
je 0x18001e2d7
mov r9, r14
mov r8, r12
mov rdx, rsi
mov cl, 2
call rax
test eax, eax
jne 0x18001e2d7
mov ecx, 0x129
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x129
je 0x18001e2c4
cmp eax, 0x6f
je case.0x18001d884.9
jmp 0x18001e2cc
mov dword [rsp + 0x68], 0
add ecx, 0x6f
cmp ecx, 0x207
jb 0x18001e2b0
cmp r12, rsi
jne 0x18001e308
mov r9d, 0x2f
xor r8d, r8d
xor edx, edx
mov rcx, r12
call fcn.1800aa6a0
cmp al, 4
je 0x18001e32d
xor r9d, r9d
xor r8d, r8d
mov rdx, r12
mov ecx, 0x8e
call fcn.18009bf20
jmp 0x18001e32d
mov esi, 0x59
mov dword [rsp + 0x50], esi
mov eax, esi
sub eax, 0x59
je 0x18001e346
cmp eax, 1
jne case.0x18001e377.4
mov esi, 0x5a
inc esi
mov dword [rsp + 0x50], esi
cmp esi, 0x5b
jb 0x18001e311
add r15d, 0x49e
cmp r15d, 0x93c
jbe 0x18001dcf5
jmp 0x18001d9be
mov r9d, 0x2f
xor r8d, r8d
xor edx, edx
mov rcx, r12
call fcn.1800aa6a0
movzx ecx, al
dec ecx
cmp ecx, 8
ja case.0x18001e377.4
movsxd rax, ecx
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0x1e7dc]
add rcx, rdx
jmp rcx
mov ebx, 0x112
nop
cmp ebx, 0x112
je 0x18001e3a3
cmp ebx, 0x87ee
je 0x18001e39d
cmp ebx, 0x10eca
je 0x18001e31d
jmp 0x18001e421
lea r12, [rbp - 0x80]
jmp 0x18001e421
mov rcx, qword [r12]
lea r9, [rbp - 0x80]
mov dword [rsp + 0x48], 1
lea r8, [rbp + 8]
lea rdx, [rsp + 0x48]
mov rax, qword [rcx + 0x10]
add rcx, 0x18
mov qword [rbp + 8], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xd3
call fcn.1800668e0
movzx ecx, al
mov dword [rbp - 0x78], ecx
test al, al
jne 0x18001e421
mov rdi, qword [rbp + 0x10]
mov ecx, 5
mov eax, ecx
sub eax, 4
je 0x18001e40a
cmp eax, 1
jne 0x18001e411
lea rdi, [rbp - 0x80]
mov dword [rbp - 0x80], 0
jmp 0x18001e411
mov dword [rdi + 8], 4
dec ecx
cmp ecx, 3
ja 0x18001e3f1
mov qword [rbp + 0x10], rdi
mov rdi, qword [rsp + 0x60]
add ebx, 0x86dc
cmp ebx, 0x19494
jbe 0x18001e380
mov edx, pe_nt_image_headers64
cmp edx, 0x108
je 0x18001e45c
cmp edx, 0xc4f8
je 0x18001e456
cmp edx, 0x188e8
je 0x18001e31d
jmp 0x18001e499
lea r12, [rbp - 0x80]
jmp 0x18001e499
mov rdi, qword [rbp + 0x18]
mov ecx, 0xb7
mov eax, ecx
sub eax, 0xb6
je 0x18001e479
cmp eax, 1
jne 0x18001e486
lea rdi, [rbp - 0x80]
jmp 0x18001e486
mov dword [rdi], 0
mov dword [rdi + 8], 4
dec ecx
cmp ecx, 0xb5
ja 0x18001e465
mov qword [rbp + 0x18], rdi
mov rdi, qword [rsp + 0x60]
add edx, 0xc3f0
cmp edx, 0x24bd0
jbe 0x18001e438
mov edx, 0x9a
nop dword [rax]
mov eax, edx
sub eax, 0x9a
je 0x18001e4c4
cmp eax, 1
je 0x18001e31d
jmp 0x18001e4ff
mov rdi, qword [rbp + 0x20]
mov ecx, 2
nop dword [rax]
mov eax, ecx
sub eax, 2
je 0x18001e4e7
cmp eax, 1
jne 0x18001e4eb
mov dword [rdi], eax
mov dword [rdi + 8], 4
jmp 0x18001e4eb
lea rdi, [rbp - 0x80]
inc ecx
cmp ecx, 4
jb 0x18001e4d0
mov qword [rbp + 0x20], rdi
lea r12, [rbp - 0x80]
mov rdi, qword [rsp + 0x60]
inc edx
cmp edx, 0x9c
jb 0x18001e4b0
mov r8d, 0xc7
nop
mov eax, r8d
sub eax, 0xc7
je 0x18001e530
sub eax, 1
je 0x18001e52a
cmp eax, 1
je 0x18001e31d
jmp 0x18001e578
lea r12, [rbp - 0x80]
jmp 0x18001e578
mov rdi, qword [rbp + 0x28]
mov edx, 0x10b
nop dword [rax]
mov eax, edx
sub eax, 0x10a
je 0x18001e55e
cmp eax, 1
jne 0x18001e565
mov rax, qword [r12]
lea rdi, [rbp - 0x80]
mov ecx, dword [rax + 8]
mov dword [rbp - 0x80], ecx
jmp 0x18001e565
mov dword [rdi + 8], 4
dec edx
cmp edx, 0x109
ja 0x18001e540
mov qword [rbp + 0x28], rdi
mov rdi, qword [rsp + 0x60]
inc r8d
cmp r8d, 0xca
jb 0x18001e510
mov ebx, 0x12c
mov dword [rsp + 0x48], ebx
nop dword [rax]
mov eax, ebx
sub eax, 0x12a
je 0x18001e31d
sub eax, 1
je 0x18001e661
cmp eax, 1
jne 0x18001e6b9
mov rdi, qword [rbp - 0x70]
mov edx, 0x28
mov esi, dword [rbp - 0x54]
mov ebx, dword [rbp - 0x58]
nop
cmp edx, 0x28
je 0x18001e62e
cmp edx, 0xc5
je 0x18001e622
cmp edx, 0x162
je 0x18001e5eb
cmp edx, 0x1ff
jne 0x18001e639
bt esi, 0xa
jae 0x18001e639
mov rax, qword [rbp - 0x38]
inc dword [rax]
jmp 0x18001e639
mov ecx, 0x5a
mov eax, ecx
sub eax, 0x5a
je 0x18001e608
cmp eax, 1
jne 0x18001e616
mov rax, qword [rbp - 0x68]
mov dword [rax + 4], ebx
mov dword [rax + 8], esi
jmp 0x18001e616
mov r8, qword [rbp - 0x68]
mov rax, qword [rbp - 0x38]
mov ebx, dword [rdi + 4]
mov qword [r8], rax
inc ecx
cmp ecx, 0x5c
jb 0x18001e5f0
mov dword [rbp - 0x58], ebx
jmp 0x18001e639
mov rax, qword [rdi]
mov esi, dword [rdi + 8]
mov qword [rbp - 0x38], rax
jmp 0x18001e639
lea rax, [rbp - 0x80]
mov rdi, r12
mov qword [rbp - 0x68], rax
add edx, 0x9d
cmp edx, 0x29c
jb 0x18001e5c0
mov ebx, dword [rsp + 0x48]
mov dword [rbp - 0x54], esi
mov esi, dword [rsp + 0x50]
mov qword [rbp - 0x70], rdi
mov rdi, qword [rsp + 0x60]
jmp 0x18001e6b9
xor eax, eax
mov dword [rsp + 0x48], 0xa
mov qword [rsp + 0x38], rax
lea rcx, [rsp + 0x48]
mov dword [rsp + 0x30], 0x47
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
lea rax, [rbp - 0x80]
xor edx, edx
mov qword [rsp + 0x20], rax
call fcn.18006ebd0
mov r9d, 0x2f
lea rcx, [rbp - 0x80]
xor r8d, r8d
xor edx, edx
call fcn.1800aa6a0
cmp al, 4
lea rcx, [rbp - 0x80]
cmovne rcx, r12
mov r12, rcx
dec ebx
mov dword [rsp + 0x48], ebx
cmp ebx, 0x129
ja 0x18001e590
jmp case.0x18001e377.4
mov ebx, 0x12
cmp ebx, 0x12
je 0x18001e6e8
cmp ebx, 0x882
je case.0x18001d884.9
jmp 0x18001e6fe
lea rdx, str.SPAPI_E_SECTION_NOT_FOUND
xor ecx, ecx
call fcn.18013db30
mov dword [rsp + 0x68], 0xffffffff
add ebx, 0x870
cmp ebx, 0x10e0
jbe 0x18001e6d5
jmp 0x18001d9d0