Function at 0x1800daaa0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x128]
sub rsp, 0x1f0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
movaps xmmword [rax - 0xb8], xmm13
mov rax, qword [0x18017d2b8]
xor rax, rsp
mov qword [rbp + 0x60], rax
mov edi, dword [rbp - 0x68]
lea ebx, [rcx + 0x532]
mov qword [rbp - 0x58], r8
mov rsi, r8
mov qword [rbp - 0x60], rdx
mov r12, rdx
mov dword [rsp + 0x48], ecx
mov r13d, ecx
mov dword [rsp + 0x60], ebx
cmp ecx, ebx
jae case.0x1800dabc4.106
mov ebx, dword [rbp - 0x68]
lea rdx, [0x180000000]
movsd xmm10, qword [0x18015da28]
movsd xmm11, qword [0x18015d488]
movsd xmm12, qword [0x18015aed8]
movsd xmm13, qword [0x18015ac70]
movsd xmm6, qword [0x180159948]
movsd xmm7, qword [0x18015dcd0]
movsd xmm8, qword [0x18015dc58]
movsd xmm9, qword [0x18015da30]
mov r15, qword [rbp - 0x60]
mov r14d, dword [rsp + 0x68]
mov eax, dword [rsp + 0x60]
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x78], edi
cmp r13d, 0x184
ja 0x1800dacc0
je 0x1800dac72
lea eax, [r13 - 0x67]
cmp eax, 0xee
ja case.0x1800dabc4.110
movzx eax, byte [rdx + rax + 0xdc0c0]
mov ecx, dword [rdx + rax*4 + 0xdc0a0]
add rcx, rdx
jmp rcx
test r12, r12
jne case.0x1800dabc4.110
mov eax, 0xfffffff6
jmp 0x1800dbd90
movaps xmm0, xmmword [0x180171540]
movups xmmword [rbp + 0x30], xmm0
movsd qword [rbp + 0x58], xmm10
jmp case.0x1800dabc4.110
mov r15, qword [r12]
jmp case.0x1800dabc4.110
lea rax, [rbp + 0x30]
movsd qword [rbp + 0x40], xmm11
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x50]
lea rax, [rsp + 0x58]
movsd qword [rsp + 0x58], xmm12
lea r8, [rbp + 0x18]
mov qword [rsp + 0x20], rax
mov edx, 0x5d
movsd qword [rsp + 0x50], xmm13
lea rcx, [rbp + 0x48]
call fcn.18001e1a0
jmp 0x1800db0be
movaps xmm0, xmmword [0x180171730]
movups xmmword [rbp + 0x48], xmm0
jmp case.0x1800dabc4.110
mov r8d, 0xd2
mov rdx, r12
mov rcx, rsi
call fcn.1800213f0
lea rdx, [rsi + 0x18]
xor r8d, r8d
mov ecx, 0xbd
call fcn.1800c5720
jmp 0x1800db0be
movsd xmm0, qword [rbp + 0x18]
lea r8, [0x180113a9c]
movsd qword [rsp + 0x58], xmm7
lea rax, [rsp + 0x58]
movsd qword [rsp + 0x50], xmm0
mov qword [rsp + 0x30], rax
lea r9, [rsp + 0x50]
mov dword [rsp + 0x28], reloc.SHELL32.dll_SHTestTokenMembership
lea rdx, str.eraAb
lea rcx, [rbp - 0x78]
mov qword [rsp + 0x20], r12
movsd qword [rbp - 0x78], xmm6
call fcn.1800fe9c0
jmp 0x1800db0be
cmp r13d, 0x272
ja 0x1800dc049
je 0x1800dc03e
mov eax, r13d
sub eax, 0x1b4
je 0x1800dbfc0
sub eax, 0x2f
je 0x1800dbf5e
cmp eax, 0x30
jne case.0x1800dabc4.110
mov r12d, dword [rbp - 0x48]
lea rax, [rsp + 0x50]
mov r13d, dword [rbp - 0x50]
xor r9d, r9d
mov qword [rsp + 0x38], 0
sub r12d, r13d
mov qword [rsp + 0x30], r15
xor r8d, r8d
mov qword [rsp + 0x28], rax
xor ecx, ecx
lea edx, [r9 + 0x33]
mov dword [rbp - 0x78], r12d
mov dword [rsp + 0x50], 2
mov qword [rsp + 0x20], 0
call fcn.1800d6370
test eax, eax
jne 0x1800dad69
lea r8, [rsp + 0x50]
mov dword [rsp + 0x50], 2
mov edx, 0x11d
mov rcx, r15
call fcn.180025210
mov ebx, eax
mov qword [rsp + 0x40], rbx
test eax, eax
js 0x1800dbffd
mov rsi, qword [rbp - 0x80]
lea rdx, [0x18014ffd4]
mov rcx, rsi
mov r8d, 1
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x1800dba0a
mov r8d, 4
lea rdx, str.read
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x1800dba0a
mov r8d, 2
lea rdx, [0x18015411c]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x1800db6e9
mov r8d, 9
lea rdx, str.masserase
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x1800db6e9
mov r8d, 1
lea rdx, [0x180152764]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x1800dae1d
mov r8d, 5
lea rdx, str.write
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
jne 0x1800db0b9
mov esi, 0x95
mov dword [rsp + 0x50], esi
nop word [rax + rax]
lea eax, [rsi - 0x95]
cmp eax, 0x17
ja case.default.0x1800dae50
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0xdc1b0]
add rcx, rdx
jmp rcx
cmp qword [rbp - 0x58], 0
je 0x1800db6bf
mov rax, qword [rbp - 0x80]
lea rdx, [0x18014ffd4]
xor ebx, ebx
mov qword [rbp - 0x70], rax
mov rcx, rax
mov qword [rsp + 0x40], rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov qword [rbp - 0x80], rax
cmp rax, rbx
jne case.default.0x1800dae50
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov ecx, dword [rax]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_strerror]
mov r9, qword [rbp - 0x80]
lea r8, str.HookD3D9:_no_matching_module_definition_found_
mov edx, 2
mov qword [rsp + 0x20], rax
mov rcx, r15
call fcn.1800d7fb0
mov ebx, 0xffffffd3
mov qword [rsp + 0x40], rbx
lea rdx, [0x180000000]
mov r13d, 0x2d1
jmp case.0x1800dabc4.110
xor r14d, r14d
xor r12d, r12d
cmp dword [r15 + 0x28], r12d
jle 0x1800db0a3
xor r13d, r13d
mov ebx, r12d
nop word [rax + rax]
mov edi, 0xf6
nop word [rax + rax]
mov eax, edi
sub eax, 0xf6
je 0x1800db007
sub eax, 0x5b
je 0x1800daf5f
cmp eax, 0x5b
jne 0x1800db065
mov ecx, dword [rsp + 0x64]
cmp ecx, 0x10
jge 0x1800db065
mov eax, reloc.SHELL32.dll_ILFindLastID
sub eax, ecx
add ecx, eax
mov esi, eax
mov dword [rsp + 0x64], ecx
nop word [rax + rax]
lea r8, [0x1801502ac]
mov edx, 1
mov rcx, r15
call fcn.1800d7fb0
sub rsi, 1
jne 0x1800daf40
jmp 0x1800db065
mov ecx, dword [rsp + 0x64]
cmp ecx, 0x10
jge 0x1800daf8a
mov esi, reloc.SHELL32.dll_ILFindLastID
sub esi, ecx
nop
lea r8, [0x1801527f0]
mov edx, 1
mov rcx, r15
call fcn.1800d7fb0
sub rsi, 1
jne 0x1800daf70
lea r8, [0x180113a94]
mov edx, 1
mov rcx, r15
call fcn.1800d7fb0
xor ecx, ecx
mov rsi, r12
mov dword [rsp + 0x64], ecx
mov r14d, ebx
nop word [rax + rax]
cmp r14d, dword [r15 + 0x28]
jge 0x1800db065
mov rax, qword [r15 + 0x20]
movzx ecx, byte [rsi + rax]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isprint]
test eax, eax
je 0x1800dafd7
mov rax, qword [r15 + 0x20]
movzx r9d, byte [rsi + rax]
jmp 0x1800dafdd
mov r9d, 0x2e
lea r8, [0x18014dc10]
mov edx, 1
mov rcx, r15
call fcn.1800d7fb0
inc dword [rsp + 0x64]
inc rsi
inc r14d
lea rax, [rsi + r13]
cmp rax, 0x10
jl 0x1800dafb0
jmp 0x1800db065
mov r9d, dword [rbp - 0x50]
lea r8, str._n_08X:
add r9d, ebx
mov edx, 1
mov rcx, r15
call fcn.1800d7fb0
xor ecx, ecx
mov esi, ebx
mov dword [rsp + 0x64], ecx
xor r14d, r14d
nop dword [rax]
cmp esi, dword [r15 + 0x28]
jge 0x1800db065
mov rax, qword [r15 + 0x20]
lea r8, str._02X
add rax, r12
mov edx, 1
mov rcx, r15
movzx r9d, byte [rax + r14]
call fcn.1800d7fb0
inc dword [rsp + 0x64]
inc esi
inc r14
cmp r14, 0x10
jl 0x1800db030
add edi, 0x5b
cmp edi, 0x207
jb 0x1800daf00
add ebx, 0x10
add r12, 0x10
sub r13, 0x10
cmp ebx, dword [r15 + 0x28]
jl 0x1800daef0
mov edi, dword [rsp + 0x78]
mov esi, dword [rsp + 0x50]
mov r13d, dword [rbp - 0x50]
mov dword [rsp + 0x68], ebx
mov rbx, qword [rsp + 0x40]
mov r14d, dword [rsp + 0x68]
mov r12d, dword [rbp - 0x78]
inc esi
mov dword [rsp + 0x50], esi
cmp esi, 0xad
jb 0x1800dae30
mov r13d, dword [rsp + 0x48]
lea rdx, [0x180000000]
mov eax, dword [rsp + 0x60]
add r13d, 0x5f
mov dword [rsp + 0x48], r13d
cmp r13d, eax
jae case.0x1800dabc4.106
mov rsi, qword [rbp - 0x58]
mov r12, qword [rbp - 0x60]
jmp 0x1800dab90
test r14d, r14d
je 0x1800db6d4
lea r8, str.personalNewsCatalogLanguageHeader
mov edx, 1
mov rcx, r15
call fcn.1800d7fb0
jmp case.default.0x1800dae50
mov dword [rsp + 0x70], 0xcdef89ab
jmp case.default.0x1800dae50
test ebx, ebx
js 0x1800dc004
mov eax, dword [rbp - 0x24]
lea r9, [rsp + 0x50]
or dword [rsp + 0x70], 4
lea r8, [rsp + 0x68]
mov dword [rsp + 0x28], SHSetFolderPathA
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x50], eax
mov qword [rsp + 0x20], r15
mov dword [rsp + 0x68], 1
mov dword [rsp + 0x58], 2
call fcn.180072c10
mov rbx, rax
mov qword [rsp + 0x40], rax
jmp case.default.0x1800dae50
mov r14d, 0xa
nop
mov eax, dword [rbp - 0x28]
lea r9, [rsp + 0x50]
mov dword [rsp + 0x58], eax
lea r8, [rsp + 0x68]
lea rax, [rsp + 0x58]
mov dword [rsp + 0x50], 1
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x70]
mov rcx, r15
mov dword [rsp + 0x20], 0x50
mov dword [rsp + 0x68], 2
call fcn.1800d8c70
test byte [rsp + 0x70], 1
mov ebx, eax
mov qword [rsp + 0x40], rbx
je case.0x1800dae50.160
sub r14d, 1
jne 0x1800db170
jmp case.default.0x1800dae50
mov eax, dword [rbp - 0x68]
lea r9, [rsp + 0x40]
mov rcx, qword [r15 + 0x20]
xor r8d, r8d
mov dword [rsp + 0x50], eax
mov rdx, r15
lea rax, [rsp + 0x58]
mov dword [rsp + 0x58], 0x21
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x50]
mov dword [rsp + 0x30], 0xeb
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x68], r12d
mov dword [rsp + 0x40], 2
call fcn.1800da520
mov ebx, eax
mov qword [rsp + 0x40], rbx
test eax, eax
js 0x1800dbffd
jmp case.default.0x1800dae50
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
mov dword [r15 + 0x28], eax
jmp case.default.0x1800dae50
cmp dword [r15 + 0x28], 0
je 0x1800db25b
mov rcx, qword [r15 + 0x20]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rbp - 0x80]
xor edx, edx
lea r8d, [rdx + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
cmp eax, r12d
jle case.default.0x1800dae50
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
lea r8, str.wcscpy_s__assertbuf___64__9___L_Assertion_failed____
mov dword [rsp + 0x20], r12d
mov r9d, eax
mov edx, 2
mov rcx, r15
call fcn.1800d7fb0
mov ebx, 0xfffffffa
lea rdx, [0x180000000]
mov qword [rsp + 0x40], rbx
mov r13d, 0x2d1
jmp case.0x1800dabc4.110
lea r8, str.__builtin_arm_qsax
mov edx, 1
mov rcx, r15
call fcn.1800d7fb0
jmp case.default.0x1800dae50
mov esi, 0xa0
jmp case.default.0x1800dae50
mov eax, 0x213
mov dword [rsp + 0x48], eax
test r14d, r14d
je 0x1800db6d4
mov eax, dword [rbp - 0x24]
lea r9, [rsp + 0x58]
mov dword [rsp + 0x40], eax
lea r8, [rsp + 0x50]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x58], 1
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x70]
mov rcx, r15
mov dword [rsp + 0x20], 0x50
mov dword [rsp + 0x50], 2
call fcn.1800d8c70
mov ebx, eax
mov qword [rsp + 0x40], rbx
jmp case.default.0x1800dae50
mov dword [rsp + 0x70], 1
jmp case.default.0x1800dae50
test ebx, ebx
js 0x1800dc004
or dword [rsp + 0x70], 0x40
jmp case.default.0x1800dae50
mov eax, dword [rbp - 0x24]
lea r9, [rsp + 0x40]
mov dword [rsp + 0x28], SHSetFolderPathA
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x70]
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x20], r15
mov dword [rsp + 0x58], 1
mov dword [rsp + 0x50], 2
call fcn.180072c10
mov ebx, eax
mov qword [rsp + 0x40], rbx
jmp case.default.0x1800dae50
test ebx, ebx
js 0x1800dc004
mov edi, dword [rbp - 0x28]
mov r14d, 0xa
nop word [rax + rax]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x58], 1
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x58]
lea r8, [rsp + 0x50]
mov dword [rsp + 0x20], 0x50
lea rdx, [rsp + 0x70]
mov dword [rsp + 0x40], edi
mov rcx, r15
mov dword [rsp + 0x50], 2
call fcn.1800d8c70
test byte [rsp + 0x70], 1
mov ebx, eax
mov qword [rsp + 0x40], rbx
je 0x1800db411
sub r14d, 1
jne 0x1800db3c0
mov edi, dword [rsp + 0x78]
mov eax, 0x213
mov dword [rsp + 0x48], eax
mov esi, 0xa5
jmp case.default.0x1800dae50
mov r9d, dword [r15 + 0x28]
lea r8, str.HRESULT_IDXGIDevice3::SetPrivateDataInterface__
mov eax, 0x213
mov edx, 1
mov dword [rsp + 0x48], eax
mov rcx, r15
mov rax, qword [rbp - 0x70]
mov qword [rsp + 0x20], rax
call fcn.1800d7fb0
mov r12d, dword [r15 + 0x28]
lea r8, str.Egoitza_Santua__Vatikano_Hiria_
mov edx, 4
mov dword [rbp - 0x78], r12d
mov rcx, r15
call fcn.1800d7fb0
jmp case.default.0x1800dae50
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov ebx, eax
mov qword [rsp + 0x40], rbx
test eax, eax
je 0x1800db4a2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov ecx, dword [rax]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_strerror]
lea r8, str.NVS5_Nvidia_Texture_4CC_V___Nvidia_Texture_Compression_Format
jmp 0x1800db5da
mov esi, 0x9a
jmp case.default.0x1800dae50
movsxd rcx, dword [r15 + 0x28]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, qword [rbp - 0x80]
xor r8d, r8d
xor edx, edx
mov qword [r15 + 0x20], rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
cmp qword [r15 + 0x20], 0
jne case.default.0x1800dae50
mov r9, qword [rbp - 0x70]
lea r8, str.VMODL_CONVERTER_AGENT_INTERNAL_DISK_ATTACH_POINT_CHANGED_BUS_TYPE
mov edx, 2
mov rcx, r15
call fcn.1800d7fb0
mov ebx, 0xfffffffa
jmp 0x1800db5f5
mov eax, dword [rbp - 0x24]
lea r9, [rsp + 0x58]
mov dword [rsp + 0x40], eax
lea r8, [rsp + 0x50]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x58], 1
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x70]
mov rcx, r15
mov dword [rsp + 0x20], 0x50
mov dword [rsp + 0x50], 2
call fcn.1800d8c70
mov ebx, eax
mov qword [rsp + 0x40], rbx
test eax, eax
js 0x1800dbffd
jmp case.default.0x1800dae50
mov eax, dword [rbp - 0x30]
lea r9, [rsp + 0x40]
mov dword [rsp + 0x28], SHSetFolderPathA
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x70]
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x20], r15
mov dword [rsp + 0x70], 0x45670123
mov dword [rsp + 0x58], 1
mov dword [rsp + 0x50], 1
call fcn.180072c10
mov ebx, eax
mov qword [rsp + 0x40], rbx
test eax, eax
js 0x1800dbffd
jmp case.default.0x1800dae50
movsxd r8, dword [r15 + 0x28]
mov edx, 1
mov r9, qword [rbp - 0x80]
mov rcx, qword [r15 + 0x20]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov ebx, eax
mov qword [rsp + 0x40], rbx
test eax, eax
jne 0x1800db5fa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov ecx, dword [rax]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_strerror]
lea r8, str._NOINIT__Memory_allocated_without_being_initialized
mov r9, qword [rbp - 0x70]
mov edx, 2
mov rcx, r15
mov qword [rsp + 0x20], rax
call fcn.1800d7fb0
mov ebx, 0xffffffd3
mov qword [rsp + 0x40], rbx
mov eax, 0x213
mov esi, 0x99
mov dword [rsp + 0x48], eax
jmp case.default.0x1800dae50
mov eax, dword [rbp - 0x30]
lea r9, [rsp + 0x40]
mov dword [rsp + 0x28], SHSetFolderPathA
lea r8, [rbp - 0x10]
lea rdx, [rsp + 0x70]
mov dword [rsp + 0x40], eax
lea rcx, [rbp - 8]
mov qword [rsp + 0x20], r15
mov dword [rbp - 0x10], 1
mov dword [rbp - 8], 1
call fcn.180072c10
mov ebx, eax
mov qword [rsp + 0x40], rbx
test eax, eax
js 0x1800dbffd
lea r8, str.invalid_GS_OP:_NOP_is_for_GS_DONE_only
mov edx, 1
mov rcx, r15
call fcn.1800d7fb0
jmp case.default.0x1800dae50
mov eax, dword [rbp - 0x24]
lea r9, [rsp + 0x40]
mov dword [rsp + 0x28], SHSetFolderPathA
lea r8, [rbp]
lea rdx, [rsp + 0x70]
mov dword [rsp + 0x40], eax
lea rcx, [rbp + 8]
mov qword [rsp + 0x20], r15
mov dword [rbp], 1
mov dword [rbp + 8], 2
call fcn.180072c10
mov ebx, eax
mov qword [rsp + 0x40], rbx
test eax, eax
js 0x1800dbffd
mov dword [rbp - 0x68], r13d
jmp case.default.0x1800dae50
mov ebx, 0xffffffd4
mov r13d, 0x2d1
mov qword [rsp + 0x40], rbx
jmp case.0x1800dabc4.110
mov ebx, 0xffffffd5
mov r13d, 0x2d1
mov qword [rsp + 0x40], rbx
jmp case.0x1800dabc4.110
mov esi, 0x32
nop
cmp esi, 0x3aca
ja 0x1800db903
je 0x1800db8fb
cmp esi, 0x1d7e
ja 0x1800db88a
je 0x1800db7f6
cmp esi, 0x32
je 0x1800db7dd
cmp esi, 0x9f6
je 0x1800db78c
cmp esi, 0x13ba
jne 0x1800db9ee
test ebx, ebx
js 0x1800dbffd
mov eax, dword [rbp - 0x30]
mov dword [rsp + 0x70], 0xcdef89ab
mov dword [rsp + 0x28], SHSetFolderPathA
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x58]
mov qword [rsp + 0x20], r15
lea rdx, [rsp + 0x70]
mov dword [rsp + 0x58], 1
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x50], 2
call fcn.180072c10
mov ebx, eax
test eax, eax
mov qword [rsp + 0x40], rbx
jmp 0x1800db9e8
mov eax, dword [rbp - 0x30]
mov dword [rsp + 0x70], 0x45670123
mov dword [rsp + 0x28], SHSetFolderPathA
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x58]
mov qword [rsp + 0x20], r15
lea rdx, [rsp + 0x70]
mov dword [rsp + 0x58], 1
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x50], 2
call fcn.180072c10
mov ebx, eax
mov qword [rsp + 0x40], rbx
jmp 0x1800db9ee
lea r8, str.get_RecalculateInstructionCount
mov edx, 4
mov rcx, r15
call fcn.1800d7fb0
jmp 0x1800db9ee
mov edi, dword [rbp - 0x28]
mov r14d, 0xa
nop
lea rax, [rsp + 0x40]
mov dword [rsp + 0x58], 1
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x58]
lea r8, [rsp + 0x50]
mov dword [rsp + 0x20], 0x50
lea rdx, [rsp + 0x70]
mov dword [rsp + 0x40], edi
mov rcx, r15
mov dword [rsp + 0x50], 2
call fcn.1800d8c70
test byte [rsp + 0x70], 1
mov ebx, eax
mov qword [rsp + 0x40], rbx
je 0x1800db851
sub r14d, 1
jne 0x1800db800
mov edi, dword [rsp + 0x78]
mov r13d, 0x213
mov dword [rsp + 0x48], r13d
mov esi, 0x1d7e
test r14d, r14d
jne 0x1800db9f3
mov ebx, 0xffffffd5
lea rdx, [0x180000000]
mov qword [rsp + 0x40], rbx
mov r13d, 0x2d1
jmp case.0x1800dabc4.110
cmp esi, 0x2742
je 0x1800db8ad
mov r13d, dword [rsp + 0x48]
cmp esi, 0x3106
jne 0x1800db9f3
or dword [rsp + 0x70], 4
jmp 0x1800db9f3
mov eax, dword [rbp - 0x24]
lea r9, [rsp + 0x58]
mov dword [rsp + 0x40], eax
lea r8, [rsp + 0x50]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x58], 1
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x70]
mov rcx, r15
mov dword [rsp + 0x20], 0x50
mov dword [rsp + 0x50], 2
call fcn.1800d8c70
mov ebx, eax
test eax, eax
mov qword [rsp + 0x40], rbx
jmp 0x1800db9e8
mov eax, dword [rbp - 0x24]
jmp 0x1800db797
cmp esi, 0x448e
je 0x1800db9e6
cmp esi, 0x4e52
je 0x1800db9df
cmp esi, 0x5816
je 0x1800db9d7
cmp esi, 0x61da
je 0x1800db95d
cmp esi, 0x6b9e
jne 0x1800db9ee
test r14d, r14d
je 0x1800db86e
lea r8, str.QHP_CUST_FILTER_ATTRS
mov edx, 1
mov rcx, r15
call fcn.1800d7fb0
jmp 0x1800db9ee
mov edi, dword [rbp - 0x28]
mov r14d, 0xa
nop word [rax + rax]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x58], 1
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x58]
lea r8, [rsp + 0x50]
mov dword [rsp + 0x20], 0x50
lea rdx, [rsp + 0x70]
mov dword [rsp + 0x40], edi
mov rcx, r15
mov dword [rsp + 0x50], 2
call fcn.1800d8c70
test byte [rsp + 0x70], 1
mov ebx, eax
mov qword [rsp + 0x40], rbx
je 0x1800db9c1
sub r14d, 1
jne 0x1800db970
mov edi, dword [rsp + 0x78]
mov r13d, 0x213
mov dword [rsp + 0x48], r13d
mov esi, 0x61da
jmp 0x1800db9f3
mov eax, dword [rbp - 0x24]
jmp 0x1800db744
or dword [rsp + 0x70], 0x40
jmp 0x1800db9ee
test ebx, ebx
js 0x1800dbffd
mov r13d, dword [rsp + 0x48]
add esi, 0x9c4
cmp esi, 0x7530
jbe 0x1800db6f0
jmp 0x1800db0be
mov eax, 0x6c
mov dword [rsp + 0x50], eax
sub eax, 0x6c
je 0x1800dbe71
sub eax, 0x67
je 0x1800dbd5f
sub eax, 0x67
je 0x1800dbd55
sub eax, 0x67
je 0x1800dba55
cmp eax, 0x67
jne 0x1800dbd36
lea r8, str.VFMADDSUB231PDZm
mov rcx, r15
lea edx, [rax - 0x66]
call fcn.1800d7fb0
xor eax, eax
jmp 0x1800dbd90
mov r13, qword [rbp - 0x70]
test r13, r13
je 0x1800dbb35
mov esi, 0x123
nop word [rax + rax]
mov eax, esi
sub eax, 0x123
je 0x1800dbb06
sub eax, 1
je 0x1800dbad0
cmp eax, 1
jne 0x1800dbb27
test r14d, r14d
je 0x1800dbb27
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov ecx, dword [rax]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_strerror]
mov r9, r13
lea r8, str.Entered_NaClSysImcSocketPair_0x_08lx_0x_08I32x_
mov edx, 2
mov qword [rsp + 0x20], rax
mov rcx, r15
call fcn.1800d7fb0
lea rdx, [0x180000000]
mov r13d, 0x2d1
jmp case.0x1800dabc4.110
mov r13, qword [rbp + 0x10]
mov edx, 1
mov rcx, qword [r15 + 0x20]
mov r9, r13
movsxd r8, r12d
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov ebx, eax
mov qword [rsp + 0x40], rbx
test eax, eax
je 0x1800dbef9
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov r14d, eax
jmp 0x1800dbb23
lea rdx, [0x180152764]
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov qword [rbp + 0x10], rax
test rax, rax
je 0x1800dbf36
mov r13, qword [rbp - 0x70]
inc esi
cmp esi, 0x126
jb 0x1800dba70
xor r14d, r14d
xor r13d, r13d
cmp dword [r15 + 0x28], r13d
jle 0x1800dbd32
mov ebx, dword [rbp - 0x50]
xor eax, eax
mov qword [rsp + 0x58], rax
mov edi, eax
nop dword [rax]
nop word [rax + rax]
mov r12d, 0x18
cmp r12d, 0x18
je 0x1800dbc9c
cmp r12d, 0xd98
je 0x1800dbc58
cmp r12d, 0x1b18
je 0x1800dbc3f
cmp r12d, 0x2898
jne 0x1800dbcf5
xor edx, edx
mov rsi, r13
mov dword [rsp + 0x64], edx
mov r14d, edi
cmp r14d, dword [r15 + 0x28]
jge 0x1800dbbfe
mov rax, qword [r15 + 0x20]
movzx ecx, byte [rsi + rax]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isprint]
test eax, eax
je 0x1800dbbc6
mov rax, qword [r15 + 0x20]
movzx r9d, byte [rsi + rax]
jmp 0x1800dbbcc
mov r9d, 0x2e
lea r8, [0x18014dc10]
mov edx, 1
mov rcx, r15
call fcn.1800d7fb0
mov edx, dword [rsp + 0x64]
inc rsi
mov rax, qword [rsp + 0x58]
inc edx
add rax, rsi
mov dword [rsp + 0x64], edx
inc r14d
cmp rax, 0x10
jl 0x1800dbba3
cmp edx, 0x10
jge 0x1800dbcf5
mov eax, reloc.SHELL32.dll_ILFindLastID
sub eax, edx
add edx, eax
mov esi, eax
mov dword [rsp + 0x64], edx
nop word [rax + rax]
lea r8, [0x1801502ac]
mov edx, 1
mov rcx, r15
call fcn.1800d7fb0
sub rsi, 1
jne 0x1800dbc20
jmp 0x1800dbcf5
lea r8, [0x180113a94]
mov edx, 1
mov rcx, r15
call fcn.1800d7fb0
jmp 0x1800dbcf5
mov edx, dword [rsp + 0x64]
cmp edx, 0x10
jge 0x1800dbcf5
mov eax, reloc.SHELL32.dll_ILFindLastID
sub eax, edx
add edx, eax
mov esi, eax
mov dword [rsp + 0x64], edx
nop dword [rax]
nop dword [rax + rax]
lea r8, [0x1801527f0]
mov edx, 1
mov rcx, r15
call fcn.1800d7fb0
sub rsi, 1
jne 0x1800dbc80
jmp 0x1800dbcf5
lea r9d, [rdi + rbx]
mov edx, 1
lea r8, str._n_08X:
mov rcx, r15
call fcn.1800d7fb0
xor ecx, ecx
mov esi, edi
mov dword [rsp + 0x64], ecx
xor r14d, r14d
nop
cmp esi, dword [r15 + 0x28]
jge 0x1800dbcf5
mov rax, qword [r15 + 0x20]
lea r8, str._02X
add rax, r13
mov edx, 1
mov rcx, r15
movzx r9d, byte [rax + r14]
call fcn.1800d7fb0
inc dword [rsp + 0x64]
inc esi
inc r14
cmp r14, 0x10
jl 0x1800dbcc0
add r12d, 0xd80
cmp r12d, 0x3600
jbe 0x1800dbb66
sub qword [rsp + 0x58], 0x10
add edi, 0x10
add r13, 0x10
cmp edi, dword [r15 + 0x28]
jl 0x1800dbb60
mov rbx, qword [rsp + 0x40]
mov dword [rsp + 0x68], edi
mov edi, dword [rsp + 0x78]
mov r14d, dword [rsp + 0x68]
mov r13d, dword [rbp - 0x50]
mov eax, dword [rsp + 0x50]
add eax, 0x67
mov dword [rsp + 0x50], eax
cmp eax, 0x26f
jae 0x1800db0b9
mov r12d, dword [rbp - 0x78]
jmp 0x1800dba13
test ebx, ebx
js 0x1800dbffd
jmp 0x1800dbd36
movsxd rbx, r12d
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [r15 + 0x20], rax
test rax, rax
jne 0x1800dbe14
mov ebx, 0xc5
nop dword [rax]
mov eax, ebx
sub eax, 0xc5
je 0x1800dbddf
cmp eax, 1
jne 0x1800dbe04
mov eax, edi
mov rcx, qword [rbp + 0x60]
xor rcx, rsp
call fcn.180110960
lea r11, [rsp + 0x1f0]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea r8, str.nsHttpPipeline::WriteSegments__this_p_count_u_
mov dword [r15 + 0x28], 0
mov edx, 0xfffffffa
mov rcx, r15
call fcn.1800d7fb0
mov edi, 0xfffffffa
mov dword [rsp + 0x78], edi
inc ebx
cmp ebx, 0xc7
jb 0x1800dbd80
jmp 0x1800dbe24
mov r8, rbx
mov edx, 0xff
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov rdx, qword [r15 + 0x20]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea rcx, [rsp + 0x68]
lea rax, [rsp + 0x58]
mov dword [r15 + 0x28], r12d
mov r9d, 0x75
mov qword [rsp + 0x20], rax
mov r8, r15
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x68], 2
call fcn.18000df60
mov ebx, eax
mov qword [rsp + 0x40], rbx
jmp 0x1800dbd36
xor esi, esi
mov qword [rbp - 0x70], rsi
cmp qword [rbp - 0x58], rsi
je 0x1800dbee1
mov r14, qword [rbp - 0x80]
test r14, r14
je 0x1800dbe9a
movsx ecx, byte [r14]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isspace]
test eax, eax
cmove rsi, r14
mov qword [rbp - 0x70], rsi
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
xor r8d, r8d
xor edx, edx
mov rcx, r14
mov dword [rax], 0
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov r14d, eax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
cmp dword [rax], 0
jne 0x1800dbf54
mov eax, r14d
and eax, 0x80000003
jge 0x1800dbed7
dec eax
or eax, 0xfffffffc
inc eax
mov r12d, r14d
sub r12d, eax
mov dword [rbp - 0x78], r12d
mov rcx, qword [r15 + 0x20]
test rcx, rcx
je 0x1800dbd36
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x1800dbd36
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov ecx, dword [rax]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_strerror]
mov r9, qword [rbp - 0x70]
lea r8, str.yandex_elements_custo_smartbox_custo_smartbox.html
mov edx, 2
mov qword [rsp + 0x20], rax
mov rcx, r15
call fcn.1800d7fb0
lea rdx, [0x180000000]
mov r13d, 0x2d1
jmp case.0x1800dabc4.110
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov ecx, dword [rax]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_strerror]
mov r9, qword [rbp - 0x70]
lea r8, str.failed_in_getting_NativeString_for_domain
jmp 0x1800daea2
mov ebx, 0xffffffd4
jmp 0x1800daeb9
movsd xmm0, qword [rbp + 0x20]
lea rax, [rsp + 0x58]
mov qword [rsp + 0x30], rax
lea r9, [rsp + 0x50]
mov dword [rsp + 0x28], reloc.SHELL32.dll_SHTestTokenMembership
lea r8, [0x18014da40]
lea rdx, str.eraAb
mov qword [rsp + 0x20], r12
lea rcx, [rbp - 0x78]
movsd qword [rbp - 0x78], xmm6
movsd qword [rsp + 0x58], xmm8
movsd qword [rsp + 0x50], xmm0
call fcn.1800fe9c0
movsd xmm0, qword [rbp + 0x28]
lea r8, [0x180113a98]
movsd qword [rsp + 0x58], xmm9
jmp 0x1800dac84
cmp byte [r15 + 0x55], 0
jne 0x1800dc00f
mov qword [rsp + 0x28], 0
lea r8, [rsp + 0x40]
xor r9d, r9d
mov dword [rsp + 0x20], 0x109
xor edx, edx
mov dword [rsp + 0x40], 2
mov rcx, r15
call fcn.1800d8c70
mov ebx, eax
mov qword [rsp + 0x40], rbx
test eax, eax
jns 0x1800dc00f
lea rdx, [0x180000000]
mov r13d, 0x2d1
jmp case.0x1800dabc4.110
lea r8, str.RequestAutocomplete.UiDuration.
mov edx, 4
mov rcx, r15
call fcn.1800d7fb0
movups xmm0, xmmword [0x180113860]
movups xmmword [rbp - 0x50], xmm0
movups xmm0, xmmword [0x180113880]
movups xmmword [rbp - 0x30], xmm0
jmp 0x1800db0be
xor edi, edi
mov dword [rsp + 0x78], edi
jmp 0x1800db0c9
mov eax, r13d
sub eax, 0x2d1
je case.0x1800dabc4.106
cmp eax, 0x5f
jne case.0x1800dabc4.110
xor r9d, r9d
mov dword [rbp - 0x60], ebx
lea r8, [rbp - 0x60]
mov qword [rsp + 0x20], 0
mov edx, 0x11c
xor ecx, ecx
call fcn.1800c2d70
mov r9, rax
lea r8, str.managedEntityInfo
mov edx, 2
mov rcx, r15
call fcn.1800d7fb0
mov eax, ebx
jmp 0x1800dbd90