Function at 0x180016ba0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x100]
sub rsp, 0x200
mov rax, qword [0x1800b2020]
xor rax, rsp
mov qword [rbp + 0xf0], rax
mov r15d, r8d
mov dword [rbp - 0x40], r8d
mov r14d, edx
mov dword [rsp + 0x70], edx
mov r12, rcx
xor eax, eax
mov edi, eax
mov dword [rsp + 0x30], eax
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov r13, rax
mov qword [rbp - 0x28], rax
mov ecx, dword [r12 + 0x48]
cmp ecx, r14d
jae 0x180017bdf
mov rsi, 0xffffffffffffffff
nop dword [rax + rax]
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rbx, rax
sub rbx, r13
mov eax, r15d
cmp rbx, rax
ja 0x1800179fb
mov r13d, r15d
sub r13d, ebx
mov eax, dword [r12]
add eax, dword [r12 + 0x48]
mov ebx, eax
mov r14, qword [r12 + 0x38]
mov rdx, qword [r12 + 0x30]
mov rcx, r14
sub rcx, rdx
cmp rbx, rcx
jae 0x180016c53
add rax, rdx
jmp 0x180016c85
jbe 0x180016c8a
mov rax, qword [r12 + 0x40]
sub rax, rdx
cmp rbx, rax
jbe 0x180016c71
mov rdx, rbx
lea rcx, [r12 + 0x30]
call fcn.180024810
jmp 0x180016c8a
sub rbx, rcx
mov r8, rbx
xor edx, edx
mov rcx, r14
call fcn.1800633e0
lea rax, [r14 + rbx]
mov qword [r12 + 0x38], rax
xor ebx, ebx
mov qword [rbp + 0x30], rbx
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x38], xmm0
mov dword [rbp + 0x50], ebx
mov rcx, qword [r12 + 0x50]
mov qword [rbp + 0x48], rcx
call qword [sym.imp.KERNEL32.dll_ResetEvent]
call fcn.18002f970
mov rcx, qword [rax]
cmp dword [rcx], ebx
je 0x180016eff
movdqa xmm0, xmmword [0x1800a5da0]
movdqu xmmword [rbp + 0x60], xmm0
mov dword [rbp + 0x70], 0xfba0fdfb
mov word [rbp + 0x74], 0x80fd
mov byte [rbp + 0x76], bl
mov qword [rbp + 0x80], rbx
mov qword [rbp + 0x90], rbx
mov qword [rbp + 0x98], 0xf
mov byte [rbp + 0x80], bl
lea rax, [rbp + 0x60]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], bl
jne 0x180016d00
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x80]
call fcn.180002c00
bts edi, 0x15
lea rdx, [rbp + 0x80]
mov r9, qword [rbp + 0x80]
mov r10, qword [rbp + 0x98]
cmp r10, 0x10
cmovae rdx, r9
lea rcx, [rbp + 0x80]
cmovae rcx, r9
mov r8, qword [rbp + 0x90]
add r8, rcx
mov rcx, rbx
mov rax, r8
sub rax, rdx
cmp rdx, r8
cmova rax, rbx
test rax, rax
je 0x180016de1
cmp rax, 0x40
jb 0x180016de1
and rax, 0xffffffffffffffc0
movdqa xmm2, xmmword [0x1800a5d70]
nop word [rax + rax]
movdqu xmm0, xmmword [rdx]
movdqa xmm1, xmm2
paddb xmm1, xmm0
movdqu xmmword [rdx], xmm1
movdqu xmm0, xmmword [rdx + 0x10]
movdqa xmm1, xmm2
paddb xmm1, xmm0
movdqu xmmword [rdx + 0x10], xmm1
movdqu xmm0, xmmword [rdx + 0x20]
movdqa xmm1, xmm2
paddb xmm1, xmm0
movdqu xmmword [rdx + 0x20], xmm1
movdqu xmm0, xmmword [rdx + 0x30]
movdqa xmm1, xmm2
paddb xmm1, xmm0
movdqu xmmword [rdx + 0x30], xmm1
add rdx, 0x40
add rcx, 0x40
cmp rcx, rax
jne 0x180016d80
mov r10, qword [rbp + 0x98]
mov r9, qword [rbp + 0x80]
cmp rdx, r8
je 0x180016e09
nop word [rax + rax]
add byte [rdx], 0x80
inc rdx
cmp rdx, r8
jne 0x180016df0
mov r10, qword [rbp + 0x98]
mov r9, qword [rbp + 0x80]
bts edi, 0x14
or edi, 8
mov dword [rsp + 0x30], edi
lea rcx, [rbp + 0x80]
cmp r10, 0x10
cmovae rcx, r9
mov r14d, dword [rsp + 0x70]
mov dword [rbp + 0x10], r14d
mov eax, dword [r12 + 0x48]
mov dword [rbp + 0x20], eax
mov dword [rbp - 0x38], r13d
movups xmm0, xmmword [rbp + 0x10]
movups xmmword [rbp + 0xc0], xmm0
movups xmm1, xmmword [rbp + 0x20]
movups xmmword [rbp + 0xd0], xmm1
movups xmm0, xmmword [rbp - 0x38]
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp - 0x20], 0x222
lea rax, [rbp + 0xc0]
mov qword [rbp - 0x18], rax
movaps xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rbp + 0x60], xmm0
mov qword [rbp - 0x10], rcx
mov rax, rsi
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x180016e80
mov qword [rbp - 8], rax
lea r8, [rbp + 0x60]
lea rdx, [rbp - 0x10]
lea rcx, [rsp + 0x50]
call fcn.1800023e0
bts edi, 0x16
or edi, 0x10
mov dword [rsp + 0x30], edi
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae rdx, qword [rsp + 0x50]
lea rcx, [rbp - 0x70]
call fcn.18002bd50
bts edi, 0x17
or edi, 0x20
mov dword [rsp + 0x30], edi
lea rbx, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae rbx, qword [rbp - 0x70]
call fcn.18002f970
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, str._antimalware_provider__::_bd::PipeClient::ReadBytesUntil____
xor edx, edx
mov rcx, rax
call fcn.18002caa0
xor ebx, ebx
jmp 0x180016f04
mov r14d, dword [rsp + 0x70]
test dil, 0x20
je 0x180016f5d
and edi, 0xffffffdf
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x180016f4d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180016f48
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180017c71
call fcn.18006080c
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], bx
test dil, 0x10
je 0x180016fb6
and edi, 0xffffffef
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x180016fa3
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180016f9e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180017c77
call fcn.18006080c
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
test dil, 8
je 0x180017000
and edi, 0xfffffff7
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x180017000
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180016ffb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180017c7d
call fcn.18006080c
mov edx, dword [r12 + 0x48]
add rdx, qword [r12 + 0x30]
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, dword [r12]
mov rcx, qword [r12 + 8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x180017055
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
cmp eax, 0x3e5
jne 0x1800175e1
mov edx, r13d
mov rcx, qword [r12 + 0x50]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov r14d, eax
test eax, eax
jne 0x1800173c2
xor r9d, r9d
lea r8, [rbp + 0x50]
lea rdx, [rbp + 0x30]
mov rcx, qword [r12 + 8]
call qword [sym.imp.KERNEL32.dll_GetOverlappedResult]
test eax, eax
je 0x1800177de
call fcn.18002f970
mov rcx, qword [rax]
xor r14d, r14d
cmp dword [rcx], r14d
je 0x18001729a
movdqa xmm0, xmmword [0x1800a5d80]
movdqu xmmword [rbp + 0x60], xmm0
mov byte [rbp + 0x70], r14b
mov qword [rbp + 0x80], r14
mov qword [rbp + 0x90], r14
mov qword [rbp + 0x98], 0xf
mov byte [rbp + 0x80], r14b
lea rax, [rbp + 0x60]
mov r8, rsi
nop
inc r8
cmp byte [rax + r8], r14b
jne 0x1800170c0
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x80]
call fcn.180002c00
or edi, 0x80000000
lea rax, [rbp + 0x80]
mov r9, qword [rbp + 0x80]
mov r10, qword [rbp + 0x98]
cmp r10, 0x10
cmovae rax, r9
lea rdx, [rbp + 0x80]
cmovae rdx, r9
mov r8, qword [rbp + 0x90]
add r8, rdx
mov rdx, r14
mov rcx, r8
sub rcx, rax
cmp rax, r8
cmova rcx, r14
test rcx, rcx
je 0x180017191
cmp rcx, 0x40
jb 0x180017191
and rcx, 0xffffffffffffffc0
movdqa xmm1, xmmword [0x1800a5d70]
nop dword [rax + rax]
movdqu xmm0, xmmword [rax]
paddb xmm0, xmm1
movdqu xmmword [rax], xmm0
movdqu xmm0, xmmword [rax + 0x10]
paddb xmm0, xmm1
movdqu xmmword [rax + 0x10], xmm0
movdqu xmm0, xmmword [rax + 0x20]
paddb xmm0, xmm1
movdqu xmmword [rax + 0x20], xmm0
movdqu xmm0, xmmword [rax + 0x30]
paddb xmm0, xmm1
movdqu xmmword [rax + 0x30], xmm0
add rax, 0x40
add rdx, 0x40
cmp rdx, rcx
jne 0x180017140
mov r10, qword [rbp + 0x98]
mov r9, qword [rbp + 0x80]
cmp rax, r8
je 0x1800171b9
nop word [rax + rax]
add byte [rax], 0x80
inc rax
cmp rax, r8
jne 0x1800171a0
mov r10, qword [rbp + 0x98]
mov r9, qword [rbp + 0x80]
bts edi, 0x1e
bts edi, 0xf
mov dword [rsp + 0x30], edi
lea rcx, [rbp + 0x80]
cmp r10, 0x10
cmovae rcx, r9
mov eax, dword [rbp + 0x50]
mov dword [rbp - 0x50], eax
mov dword [rbp - 0x80], r13d
movups xmm0, xmmword [rbp - 0x50]
movups xmmword [rbp + 0xc0], xmm0
movups xmm1, xmmword [rbp - 0x80]
movups xmmword [rbp + 0xd0], xmm1
mov qword [rbp], 0x22
lea rax, [rbp + 0xc0]
mov qword [rbp + 8], rax
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp + 0x60], xmm0
mov qword [rsp + 0x40], rcx
mov rax, rsi
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x180017220
mov qword [rsp + 0x48], rax
lea r8, [rbp + 0x60]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x70]
call fcn.1800023e0
nop
bts edi, 0x10
mov dword [rsp + 0x30], edi
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0x10
cmovae rdx, qword [rbp - 0x70]
lea rcx, [rsp + 0x50]
call fcn.18002bd50
nop
bts edi, 0x11
mov dword [rsp + 0x30], edi
lea rbx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rbx, qword [rsp + 0x50]
call fcn.18002f970
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, str._antimalware_provider__::_bd::PipeClient::ReadBytesUntil____
xor edx, edx
mov rcx, rax
call fcn.18002caa0
nop
bt edi, 0x11
jae 0x1800172fa
btr edi, 0x11
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x1800172e6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800172e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180017ca1
call fcn.18006080c
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r14w
bt edi, 0x10
jae 0x18001734f
btr edi, 0x10
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x18001733f
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001733a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180017ca7
call fcn.18006080c
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
bt edi, 0xf
jae 0x18001739a
btr edi, 0xf
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x18001739a
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180017395
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180017cad
call fcn.18006080c
mov ecx, dword [r12 + 0x48]
add ecx, dword [rbp + 0x50]
mov dword [r12 + 0x48], ecx
mov r14d, dword [rsp + 0x70]
cmp ecx, r14d
jae 0x180017bdf
mov r15d, dword [rbp - 0x40]
mov r13, qword [rbp - 0x28]
jmp 0x180016c10
call fcn.18002f970
mov rcx, qword [rax]
cmp dword [rcx], 0
je 0x1800174d7
lea rdx, [rbp + 0xc0]
call fcn.180018020
mov rbx, rax
bts edi, 9
mov dword [rsp + 0x30], edi
cmp qword [rax + 0x18], 8
jb 0x1800173f4
mov rbx, qword [rax]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x80], r14d
mov dword [rbp - 0x50], eax
mov eax, dword [r12 + 0x48]
mov dword [rbp + 0x60], eax
mov eax, dword [rsp + 0x70]
mov dword [rbp - 0x38], eax
movups xmm0, xmmword [rbp - 0x80]
movups xmmword [rbp + 0x80], xmm0
movups xmm1, xmmword [rbp - 0x50]
movups xmmword [rbp + 0x90], xmm1
movups xmm0, xmmword [rbp + 0x60]
movups xmmword [rbp + 0xa0], xmm0
movups xmm1, xmmword [rbp - 0x38]
movups xmmword [rbp + 0xb0], xmm1
mov qword [rsp + 0x40], 0x2222
lea rax, [rbp + 0x80]
mov qword [rsp + 0x48], rax
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x40], rbx
inc rsi
cmp word [rbx + rsi*2], 0
jne 0x180017460
mov qword [rsp + 0x48], rsi
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x70]
call fcn.180024380
bts edi, 0x1a
bts edi, 0xa
mov dword [rsp + 0x30], edi
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x50]
call fcn.18002e720
bts edi, 0x1b
bts edi, 0xb
mov dword [rsp + 0x30], edi
lea rbx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rbx, qword [rsp + 0x50]
call fcn.18002f970
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, str._antimalware_provider__::_bd::PipeClient::ReadBytesUntil____
xor edx, edx
mov rcx, rax
call fcn.18002caa0
nop
bt edi, 0xb
jae 0x180017538
btr edi, 0xb
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x180017523
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001751e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180017c83
call fcn.18006080c
xor eax, eax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], ax
bt edi, 0xa
jae 0x180017583
btr edi, 0xa
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x180017583
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001757d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180017c89
call fcn.18006080c
nop
bt edi, 9
jae 0x1800175cf
mov rdx, qword [rbp + 0xd8]
cmp rdx, 8
jb 0x1800175cf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800175ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180017c8f
call fcn.18006080c
mov rcx, qword [r12 + 8]
call qword [sym.imp.KERNEL32.dll_CancelIo]
xor al, al
jmp 0x180017c35
call fcn.18002f970
mov rcx, qword [rax]
cmp dword [rcx], 0
je 0x1800176db
lea rdx, [rbp + 0xc0]
call fcn.180017e50
nop
or edi, 0x40
mov dword [rsp + 0x30], edi
cmp qword [rax + 0x18], 8
jb 0x180017610
mov rax, qword [rax]
mov dword [rbp - 0x80], ebx
mov ecx, dword [r12 + 0x48]
mov dword [rbp - 0x50], ecx
mov dword [rbp + 0x60], r14d
movups xmm0, xmmword [rbp - 0x80]
movups xmmword [rbp + 0x80], xmm0
movups xmm1, xmmword [rbp - 0x50]
movups xmmword [rbp + 0x90], xmm1
movups xmm0, xmmword [rbp + 0x60]
movups xmmword [rbp + 0xa0], xmm0
mov qword [rsp + 0x40], 0x222
lea rcx, [rbp + 0x80]
mov qword [rsp + 0x48], rcx
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x40], rax
inc rsi
cmp word [rax + rsi*2], 0
jne 0x180017664
mov qword [rsp + 0x48], rsi
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x70]
call fcn.180024380
bts edi, 0x18
bts edi, 7
mov dword [rsp + 0x30], edi
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x50]
call fcn.18002e720
bts edi, 0x19
bts edi, 8
mov dword [rsp + 0x30], edi
lea rbx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rbx, qword [rsp + 0x50]
call fcn.18002f970
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, str._antimalware_provider__::_bd::PipeClient::ReadBytesUntil____
xor edx, edx
mov rcx, rax
call fcn.18002caa0
nop
bt edi, 8
jae 0x18001773c
btr edi, 8
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x180017727
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180017722
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180017c95
call fcn.18006080c
xor eax, eax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], ax
test dil, dil
jns 0x180017786
btr edi, 7
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x180017786
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180017780
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180017c9b
call fcn.18006080c
nop
test dil, 0x40
je 0x180017bdb
mov rdx, qword [rbp + 0xd8]
cmp rdx, 8
jb 0x180017bdb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180017bd6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180017c65
jmp 0x180017bd6
call fcn.18002f970
mov rcx, qword [rax]
cmp dword [rcx], 0
je 0x1800178f7
lea rdx, [rbp + 0xc0]
call fcn.180018210
mov rbx, rax
bts edi, 0xc
mov dword [rsp + 0x30], edi
cmp qword [rax + 0x18], 8
jb 0x180017810
mov rbx, qword [rax]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x80], eax
mov ecx, dword [rbp + 0x50]
mov dword [rbp - 0x50], ecx
mov eax, dword [r12 + 0x48]
mov dword [rbp + 0x60], eax
mov eax, dword [rsp + 0x70]
mov dword [rbp - 0x38], eax
movups xmm0, xmmword [rbp - 0x80]
movups xmmword [rbp + 0x80], xmm0
movups xmm1, xmmword [rbp - 0x50]
movups xmmword [rbp + 0x90], xmm1
movups xmm0, xmmword [rbp + 0x60]
movups xmmword [rbp + 0xa0], xmm0
movups xmm1, xmmword [rbp - 0x38]
movups xmmword [rbp + 0xb0], xmm1
mov qword [rsp + 0x40], 0x2222
lea rax, [rbp + 0x80]
mov qword [rsp + 0x48], rax
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x40], rbx
nop
inc rsi
cmp word [rbx + rsi*2], 0
jne 0x180017880
mov qword [rsp + 0x48], rsi
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x70]
call fcn.180024380
bts edi, 0x1c
bts edi, 0xd
mov dword [rsp + 0x30], edi
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x50]
call fcn.18002e720
bts edi, 0x1d
bts edi, 0xe
mov dword [rsp + 0x30], edi
lea rbx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rbx, qword [rsp + 0x50]
call fcn.18002f970
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, str._antimalware_provider__::_bd::PipeClient::ReadBytesUntil____
xor edx, edx
mov rcx, rax
call fcn.18002caa0
nop
bt edi, 0xe
jae 0x180017958
btr edi, 0xe
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x180017943
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001793e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180017cb3
call fcn.18006080c
xor eax, eax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], ax
bt edi, 0xd
jae 0x1800179a3
btr edi, 0xd
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x1800179a3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001799d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180017cb9
call fcn.18006080c
nop
bt edi, 0xc
jae 0x180017bdb
mov rdx, qword [rbp + 0xd8]
cmp rdx, 8
jb 0x180017bdb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180017bd6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180017c6b
jmp 0x180017bd6
call fcn.18002f970
mov rcx, qword [rax]
cmp dword [rcx], 0
je 0x180017ae5
lea rdx, [rbp + 0x80]
call fcn.180017cd0
nop
or edi, 1
mov dword [rsp + 0x30], edi
cmp qword [rax + 0x18], 8
jb 0x180017a2a
mov rax, qword [rax]
mov dword [rbp - 0x80], r14d
mov qword [rbp - 0x50], rbx
movups xmm0, xmmword [rbp - 0x80]
movups xmmword [rbp + 0xc0], xmm0
movups xmm1, xmmword [rbp - 0x50]
movups xmmword [rbp + 0xd0], xmm1
mov qword [rsp + 0x40], 0x42
lea rcx, [rbp + 0xc0]
mov qword [rsp + 0x48], rcx
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rbp - 0x80], xmm0
mov qword [rsp + 0x40], rax
nop dword [rax]
inc rsi
cmp word [rax + rsi*2], 0
jne 0x180017a70
mov qword [rsp + 0x48], rsi
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x70]
call fcn.180024380
bts edi, 0x12
or edi, 2
mov dword [rsp + 0x30], edi
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x50]
call fcn.18002e720
bts edi, 0x13
or edi, 4
mov dword [rsp + 0x30], edi
lea rbx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rbx, qword [rsp + 0x50]
call fcn.18002f970
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, str._antimalware_provider__::_bd::PipeClient::ReadBytesUntil____
xor edx, edx
mov rcx, rax
call fcn.18002caa0
nop
test dil, 4
je 0x180017b45
and edi, 0xfffffffb
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x180017b30
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180017b2b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180017cbf
call fcn.18006080c
xor eax, eax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], ax
test dil, 2
je 0x180017b8f
and edi, 0xfffffffd
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x180017b8f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180017b89
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180017cc5
call fcn.18006080c
nop
test dil, 1
je 0x180017bdb
mov rdx, qword [rbp + 0x98]
cmp rdx, 8
jb 0x180017bdb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180017bd6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180017c5f
call fcn.18006080c
xor al, al
jmp 0x180017c35
mov ebx, ecx
mov rsi, qword [r12 + 0x38]
mov rdx, qword [r12 + 0x30]
mov rcx, rsi
sub rcx, rdx
cmp rbx, rcx
jae 0x180017bfc
lea rax, [rbx + rdx]
jmp 0x180017c2e
jbe 0x180017c33
mov rax, qword [r12 + 0x40]
sub rax, rdx
cmp rbx, rax
jbe 0x180017c1a
mov rdx, rbx
lea rcx, [r12 + 0x30]
call fcn.180024810
jmp 0x180017c33
sub rbx, rcx
mov r8, rbx
xor edx, edx
mov rcx, rsi
call fcn.1800633e0
lea rax, [rbx + rsi]
mov qword [r12 + 0x38], rax
mov al, 1
mov rcx, qword [rbp + 0xf0]
xor rcx, rsp
call fcn.1800607b0
mov rbx, qword [rsp + 0x248]
add rsp, 0x200
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18006e72c
int3
call fcn.18006e72c
int3
call fcn.18006e72c
nop
call fcn.18006e72c
nop
call fcn.18006e72c
nop
call fcn.18006e72c
nop
call fcn.18006e72c
nop
call fcn.18006e72c
nop
call fcn.18006e72c
nop
call fcn.18006e72c
nop
call fcn.18006e72c
nop
call fcn.18006e72c
nop
call fcn.18006e72c
nop
call fcn.18006e72c
nop
call fcn.18006e72c
nop
call fcn.18006e72c
nop
call fcn.18006e72c
nop
call fcn.18006e72c
int3