Function at 0x180058e50
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2e0]
sub rsp, 0x3e0
mov rax, qword [0x1800ad828]
xor rax, rsp
mov qword [rbp + 0x2d0], rax
mov r14d, r9d
mov dword [rsp + 0x40], r9d
mov rdi, r8
mov rsi, rdx
mov qword [rbp - 0x38], rcx
mov r13, qword [rbp + 0x340]
mov rax, qword [rbp + 0x348]
mov qword [rbp - 0x30], rax
movdqa xmm0, xmmword [0x1800a7750]
movdqa xmmword [rbp + 0x200], xmm0
mov byte [rbp + 0x1f0], 0
movdqa xmm1, xmm0
movdqa xmmword [rbp + 0x220], xmm0
mov byte [rbp + 0x210], 0
movdqa xmmword [rbp + 0x240], xmm0
mov byte [rbp + 0x230], 0
movdqa xmmword [rbp + 0x1c0], xmm0
mov byte [rbp + 0x1b0], 0
movdqa xmmword [rbp + 0x1e0], xmm0
mov byte [rbp + 0x1d0], 0
xor ecx, ecx
mov qword [rbp + 0x50], rcx
mov word [rbp + 0x58], cx
movdqu xmmword [rbp + 0x6a], xmm0
mov byte [rbp + 0x5a], cl
mov qword [rbp + 0x20], rcx
mov word [rbp + 0x28], cx
movdqu xmmword [rbp + 0x3a], xmm0
mov byte [rbp + 0x2a], cl
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rcx
movdqa xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rcx
mov qword [rbp - 0x68], rcx
mov qword [rbp - 0x60], rcx
mov qword [rbp + 0x80], rcx
mov qword [rbp + 0x88], rcx
mov qword [rbp + 0x90], rcx
mov ecx, 0x30
call fcn.1800927dc
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x88], rax
xor r10d, r10d
mov qword [rbp + 0x98], r10
xorps xmm2, xmm2
movsd qword [rbp + 0xa0], xmm2
mov qword [rbp + 0xa8], r10
mov dword [rbp + 0xb0], 1
mov qword [rbp + 0xb8], r10
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xc0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xd0], xmm1
movdqa xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], r10
mov qword [rbp + 0xf8], 0xffffffffffffffff
mov dword [rbp + 0x100], r10d
xor eax, eax
movups xmmword [rbp + 0x108], xmm0
movups xmmword [rbp + 0x118], xmm0
movups xmmword [rbp + 0x128], xmm0
movups xmmword [rbp + 0x138], xmm0
mov qword [rbp + 0x148], rax
movdqa xmm0, xmmword [0x1800a7750]
movdqa xmmword [rbp + 0x160], xmm0
mov byte [rbp + 0x150], al
mov word [rbp + 0x170], r10w
mov dword [rbp + 0x174], r10d
mov qword [rbp + 0x178], r10
xorps xmm0, xmm0
movaps xmmword [rbp + 0x180], xmm0
movsd qword [rbp + 0x190], xmm2
mov byte [rbp + 0x198], al
mov qword [rbp + 0x19c], r10
mov ebx, r14d
imul eax, r14d, 0xa9d
mov dword [rbp - 0x40], eax
lea r8d, [r10 + 0x6f]
cmp r14d, eax
ja 0x18005995f
mov r15d, dword [rsp + 0x58]
mov r14d, dword [rsp + 0x58]
mov r12d, dword [rsp + 0x58]
mov r8d, 0x6564
mov r11d, 0x6c
lea r9d, [r11 + 7]
lea edx, [r11 - 7]
lea eax, [rdx + 9]
lea ecx, [rdx + 4]
cmp ebx, 0x5988
ja 0x180059789
je 0x18005977d
cmp ebx, 0x1680
ja 0x1800593aa
je 0x180059263
mov eax, ebx
sub eax, 0x28
je 0x1800591aa
sub eax, 0x3b
je 0x18005917b
sub eax, 0x24
je 0x18005915d
cmp eax, 0x30
jne 0x180059943
cmp r13, rsi
je 0x180059943
mov rcx, rsi
mov rax, r13
lea edx, [r11 - 0x68]
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1800590f0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
mov rax, qword [rax + 0x20]
mov qword [rcx + 0x20], rax
jmp 0x180059943
mov rcx, qword [r13 + 8]
test rcx, rcx
je 0x180059a0f
mov rax, qword [r13]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rcx
jmp 0x180059943
mov r8d, 0x6f
mov word [rbp + 0x2a8], r8w
mov dword [rbp + 0x2a9], 0x696c6e
mov dword [rbp + 0x2ac], 0x7562656e
mov word [rbp + 0x2b0], r9w
jmp 0x180059949
mov dword [rsp + 0x48], r10d
test r13, r13
je 0x18005a079
cmp qword [rbp - 0x38], 0
je 0x180059cf3
test rdi, rdi
jne 0x180059943
lea rcx, [r13 + 0xc8]
mov qword [rsp + 0x20], r10
lea r9, str.DefRawInputProc
xor edx, edx
mov r8d, 0xc2
call fcn.18008e2c0
nop
lea rcx, [rbp + 0xf8]
call fcn.1800032b0
mov rbx, qword [rbp + 0xe0]
test rbx, rbx
je 0x180059bee
mov rdi, qword [rbp + 0xe8]
cmp rbx, rdi
je 0x18005922d
mov rcx, rbx
call fcn.180017da0
add rbx, 0x20
cmp rbx, rdi
jne 0x180059215
mov rbx, qword [rbp + 0xe0]
mov r8, qword [rbp + 0xf0]
sub r8, rbx
sar r8, 5
mov rdx, rbx
lea rcx, [rbp + 0xe0]
call fcn.18002a4a0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
xor esi, esi
mov qword [rbp + 0xf0], rsi
jmp 0x180059bf0
test rsi, rsi
jne 0x180059943
lea rcx, [r13 + 0xc8]
mov qword [rsp + 0x20], r10
lea r9, str.IV_LOCKXCHGADD_ACQ
xor edx, edx
mov r8d, 0xc2
call fcn.18008e2c0
nop
lea rcx, [rbp + 0xf8]
call fcn.1800032b0
mov rbx, qword [rbp + 0xe0]
test rbx, rbx
je 0x18005935c
mov rdi, qword [rbp + 0xe8]
cmp rbx, rdi
je 0x180059313
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x1800592f4
mov rcx, qword [rbx]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x1800592ef
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800593a3
mov rcx, r8
call fcn.180092818
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 7
mov word [rbx], si
add rbx, 0x20
cmp rbx, rdi
jne 0x1800592b5
mov rbx, qword [rbp + 0xe0]
mov rdx, qword [rbp + 0xf0]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x180059342
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800593a3
mov rcx, rbx
call fcn.180092818
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], rsi
mov rcx, qword [rbp + 0xc8]
test rcx, rcx
je 0x18005a0c7
mov rdx, qword [rbp + 0xd8]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005a0b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18005a0b0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
cmp ebx, 0x2cd8
je 0x18005962d
cmp ebx, 0x37b0
je 0x180059607
cmp ebx, 0x4330
je 0x180059593
cmp ebx, 0x4bf0
jne 0x180059943
mov ecx, reloc.SHELL32.dll_ILFree
nop
mov eax, ecx
sub eax, 0x9a
je 0x18005a3a1
cmp eax, 1
jne 0x18005951c
cmp qword [rbp - 0x20], 0
jbe 0x18005950e
mov qword [rbp - 0x50], 1
lea r9, [rbp - 0x50]
mov r8d, ILFree
lea rdx, [rsp + 0x31]
lea rcx, [rbp - 0x28]
call fcn.18002a5d0
test al, al
je 0x18005950e
movzx eax, byte [rsp + 0x31]
cmp al, 0xab
je 0x180059503
cmp al, 0x4c
jne 0x180059469
mov qword [rbp - 0x50], 1
lea r9, [rbp - 0x50]
mov r8d, ILFree
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x28]
call fcn.18002a5d0
test al, al
je 0x18005950e
movzx eax, byte [rsp + 0x30]
jmp 0x1800594ac
cmp al, 0x4d
jne 0x18005948f
lea r8, [rbp - 0x28]
lea rdx, [rsp + 0x38]
mov ecx, 0x125
call fcn.18000a5b0
test al, al
je 0x18005950e
movzx eax, word [rsp + 0x38]
jmp 0x1800594ac
cmp al, 0x4e
jne 0x1800594e4
lea r8, [rbp - 0x44]
mov edx, 0xca
lea rcx, [rbp - 0x28]
call fcn.18002de70
test al, al
je 0x18005950e
mov eax, dword [rbp - 0x44]
mov ebx, eax
mov qword [rbp - 0x50], rbx
mov r9d, 0xd3
mov r8, rdi
mov rdx, qword [rbp - 0x28]
lea rcx, [rbp - 0x50]
call fcn.180023f90
mov qword [rbp - 0x50], rbx
lea r8, [rbp - 0x50]
mov edx, 0xa0
lea rcx, [rbp - 0x28]
call fcn.18002add0
test al, al
je 0x18005950e
jmp 0x180059503
mov qword [rbp - 0x50], 1
mov r9d, 0xd3
mov r8, rdi
lea rdx, [rsp + 0x31]
lea rcx, [rbp - 0x50]
call fcn.180023f90
cmp qword [rbp - 0x20], 0
ja 0x180059401
mov ecx, reloc.SHELL32.dll_ILFree
mov ebx, 0x4bf0
mov byte [rbp - 0x48], 0
dec ecx
cmp ecx, 0x99
ja 0x1800593e0
xor r10d, r10d
cmp dword [rdi], 0
je 0x180059899
mov r9d, 0xd7
nop dword [rax]
cmp r9d, 0xd7
je 0x180059879
cmp r9d, 0x176
je 0x180059839
cmp r9d, 0x215
jne 0x180059885
test r15d, r15d
je 0x180059885
cmp r14d, 0x88
jge 0x180059885
movsxd rax, dword [rsi + 0x220]
mov dword [rsi + rax*4], r15d
inc dword [rsi + 0x220]
jmp 0x180059885
mov r9, qword [rbp - 0x38]
xor edx, edx
lea r8d, [rdx + 0x57]
lea rcx, [rbp + 0x260]
call fcn.18004f950
mov rcx, qword [rbp - 0x30]
mov eax, dword [rcx]
mov dword [rsp + 0x48], eax
lea rcx, [r13 + 8]
lea rax, [rbp + 0x260]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x127
mov r9, rsi
lea r8, [rsp + 0x48]
mov rdx, rdi
call fcn.1800520d0
mov dword [rsp + 0x48], eax
xor eax, eax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0xb2
lea rdx, [rbp + 0x260]
xor ecx, ecx
call fcn.180075a70
jmp 0x180059943
mov word [rbp + 0x2b1], cx
mov word [rbp + 0x2b2], ax
mov word [rbp + 0x2b3], dx
mov eax, 0x7373
mov word [rbp + 0x2b4], ax
jmp 0x180059943
lea rdx, [r13 + 8]
xor ecx, ecx
mov r8d, 0xa2
call fcn.18005e1d0
test eax, eax
jne 0x180059943
lea rcx, [r13 + 0xc8]
xor esi, esi
mov qword [rsp + 0x20], rsi
lea r9, str.Put_file___1_.500s___as_url___2_.500s___in_web___3_.500s__.
xor edx, edx
mov r8d, 0xc2
call fcn.18008e2c0
nop
lea rcx, [rbp + 0xf8]
call fcn.1800032b0
mov rbx, qword [rbp + 0xe0]
test rbx, rbx
je 0x1800596d7
mov rdi, qword [rbp + 0xe8]
cmp rbx, rdi
je 0x1800596a8
nop dword [rax]
mov rcx, rbx
call fcn.180017da0
add rbx, 0x20
cmp rbx, rdi
jne 0x180059690
mov rbx, qword [rbp + 0xe0]
mov r8, qword [rbp + 0xf0]
sub r8, rbx
sar r8, 5
mov rdx, rbx
lea rcx, [rbp + 0xe0]
call fcn.18002a4a0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], rsi
mov rdx, qword [rbp + 0xc8]
test rdx, rdx
je 0x18005970f
mov r8, qword [rbp + 0xd8]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0xc8]
call fcn.18002a400
mov qword [rbp + 0xc8], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
lea rcx, [rbp + 0x88]
call fcn.1800031e0
nop
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x180059cca
mov rdi, qword [rbp - 0x80]
cmp rbx, rdi
je 0x180059749
mov rcx, rbx
call fcn.180002af0
add rbx, 0x28
cmp rbx, rdi
jne 0x180059733
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x78]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov r8, rdx
shr r8, 0x3f
add r8, rdx
mov rdx, rbx
lea rcx, [rsp + 0x78]
call fcn.18002a450
jmp 0x180059cbd
mov eax, dword [rsp + 0x48]
mov dword [rbp - 0x48], eax
jmp 0x180059943
cmp ebx, 0xcd29
ja 0x1800598db
je 0x18005952d
cmp ebx, 0x66f0
je 0x1800597fa
cmp ebx, 0x6efd
je 0x1800597dd
cmp ebx, 0x6fe0
je 0x18005a488
mov r8d, 0x6f
cmp ebx, 0xa64a
jne 0x180059949
mov word [rbp + 0x2b8], cx
mov word [rbp + 0x2b9], r11w
jmp 0x180059949
mov eax, 0x62
mov word [rbp + 0x2b6], ax
mov eax, 0x75
mov word [rbp + 0x2b7], ax
jmp 0x180059943
mov eax, dword [rdi]
cmp eax, 0x20
jl 0x180059824
cdq
and edx, 0x1f
add eax, edx
sar eax, 5
mov dword [rsp + 0x50], eax
lea r9, [rsp + 0x50]
mov r8, rsi
xor edx, edx
mov ecx, 0xb5
call fcn.18000a250
mov eax, dword [rdi]
and eax, 0x8000001f
jge 0x180059832
dec eax
or eax, 0xffffffe0
inc eax
mov dword [rdi], eax
jmp 0x180059943
mov r14d, r10d
cmp dword [rsi + 0x220], 0
jle 0x180059885
mov r8, rsi
nop dword [rax + rax]
mov edx, dword [r8]
mov eax, edx
mov ecx, r12d
shr eax, cl
mov ecx, dword [rdi]
shl edx, cl
add edx, r15d
mov dword [r8], edx
mov r15d, eax
inc r14d
lea r8, [r8 + 4]
cmp r14d, dword [rsi + 0x220]
jl 0x180059850
jmp 0x180059885
mov r15d, r10d
mov r12d, 0x20
sub r12d, dword [rdi]
add r9d, 0x9f
cmp r9d, 0x2b4
jb 0x180059540
mov ecx, dword [rsi + 0x220]
test ecx, ecx
je 0x1800598d0
mov edx, ecx
movsxd rax, edx
cmp dword [rsi + rax*4 - 4], 0
jne 0x1800598be
lea ecx, [rdx - 1]
mov dword [rsi + 0x220], ecx
mov edx, ecx
test ecx, ecx
jne 0x1800598a5
test ecx, ecx
je 0x1800598d0
mov eax, dword [rsi + 0x224]
mov dword [rsi + 0x224], eax
jmp 0x180059943
mov eax, r10d
mov dword [rsi + 0x224], eax
jmp 0x180059943
cmp ebx, 0xdd97
je 0x18005993b
cmp ebx, 0x114e4
je 0x18005992f
cmp ebx, 0x14c31
je 0x18005991c
cmp ebx, 0x1837e
jne 0x180059943
mov ecx, 0x67
mov word [rbp + 0x2c4], cx
mov word [rbp + 0x2c5], dx
mov eax, 0x632e
mov word [rbp + 0x2c6], ax
jmp 0x180059943
mov dword [rbp + 0x2c0], 0x656c6c
mov word [rbp + 0x2c3], ax
jmp 0x180059943
mov dword [rbp + 0x2bc], 0x61686372
jmp 0x180059943
mov word [rbp + 0x2ba], r8w
mov r8d, 0x6f
imul eax, dword [rsp + 0x40], 0x8f
add ebx, eax
xor r10d, r10d
cmp ebx, dword [rbp - 0x40]
jbe 0x180059075
mov ebx, dword [rsp + 0x40]
lea eax, [rbx + 0x428]
mov dword [rbp - 0x44], eax
cmp ebx, eax
jae 0x18005b0e1
mov ecx, 0x6d
lea rdx, [0x180005690]
movzx edi, byte [rsp + 0x30]
mov r13d, dword [rsp + 0x58]
movzx r12d, byte [rsp + 0x30]
mov esi, dword [rsp + 0x58]
movzx r14d, byte [rsp + 0x30]
mov r15d, dword [rsp + 0x58]
nop
cmp ebx, 0x25b
ja 0x18005aa04
je 0x18005a9eb
cmp ebx, 0x143
ja 0x18005a660
je 0x18005a641
mov eax, ebx
sub eax, 0x63
je 0x18005a634
sub eax, 0x38
je 0x18005a602
sub eax, 0x38
je 0x18005a5d5
cmp eax, 0x38
jne 0x18005ad96
mov eax, dword [0x1800a3ec9]
mov dword [rbp + 0x287], eax
movzx eax, byte [0x1800a3ecd]
mov byte [rbp + 0x28b], al
mov byte [rbp + 0x28c], 0
jmp 0x18005ad96
mov byte [rbp - 0x48], 0
lea rcx, [rbp + 0xf8]
call fcn.1800032b0
lea rcx, [rbp + 0xe0]
call fcn.180002cf0
mov rdx, qword [rbp + 0xc8]
test rdx, rdx
je 0x180059a67
mov r8, qword [rbp + 0xd8]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0xc8]
call fcn.18002a400
xor esi, esi
mov qword [rbp + 0xc8], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
jmp 0x180059a69
xor esi, esi
lea rcx, [rbp + 0x88]
call fcn.1800031e0
nop
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x180059ae2
mov rdi, qword [rbp - 0x80]
cmp rbx, rdi
je 0x180059aa6
nop dword [rax]
mov rcx, rbx
call fcn.180002af0
add rbx, 0x28
cmp rbx, rdi
jne 0x180059a90
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x78]
movabs rax, 0x6666666666666667
sub rcx, rbx
imul rcx
sar rdx, 4
mov r8, rdx
shr r8, 0x3f
add r8, rdx
mov rdx, rbx
lea rcx, [rsp + 0x78]
call fcn.18002a450
xorps xmm0, xmm0
mov qword [rsp + 0x78], rsi
movdqa xmmword [rbp - 0x80], xmm0
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x180059b10
mov r8, qword [rsp + 0x70]
sub r8, rdx
sar r8, 3
lea rcx, [rsp + 0x60]
call fcn.18002a3b0
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rsi
mov rdx, qword [rbp + 0x42]
cmp rdx, 0x10
jb 0x180059b4b
inc rdx
mov rcx, qword [rbp + 0x2a]
cmp rdx, 0x1000
mov rax, rcx
jb 0x180059b46
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005b1ae
call fcn.180092818
movdqa xmm0, xmmword [0x1800a7750]
movdqu xmmword [rbp + 0x3a], xmm0
mov byte [rbp + 0x2a], 0
mov rdx, qword [rbp + 0x72]
cmp rdx, 0x10
jb 0x180059b97
inc rdx
mov rcx, qword [rbp + 0x5a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180059b92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005b209
call fcn.180092818
movdqa xmm0, xmmword [0x1800a7750]
mov byte [rbp + 0x5a], 0
movdqu xmmword [rbp + 0x6a], xmm0
lea rcx, [rbp + 0x1b0]
call fcn.180002e50
nop
lea rcx, [rbp + 0x1f0]
call fcn.180002f00
mov eax, dword [rbp - 0x48]
mov rcx, qword [rbp + 0x2d0]
xor rcx, rsp
call fcn.180092fc0
mov rbx, qword [rsp + 0x438]
add rsp, 0x3e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
xor esi, esi
mov rdx, qword [rbp + 0xc8]
test rdx, rdx
je 0x180059c28
mov r8, qword [rbp + 0xd8]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0xc8]
call fcn.18002a400
mov qword [rbp + 0xc8], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
lea rcx, [rbp + 0x88]
call fcn.1800031e0
nop
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x180059cca
mov rdi, qword [rbp - 0x80]
cmp rbx, rdi
je 0x180059c66
nop dword [rax]
mov rcx, rbx
call fcn.180002af0
add rbx, 0x28
cmp rbx, rdi
jne 0x180059c50
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x78]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x180059cb5
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005a5c1
mov rcx, rbx
call fcn.180092818
mov qword [rsp + 0x78], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x180059fc1
mov r8, qword [rsp + 0x70]
sub r8, rdx
sar r8, 3
lea rcx, [rsp + 0x60]
call fcn.18002a3b0
jmp 0x180059fb3
lea rcx, [r13 + 0xc8]
mov qword [rsp + 0x20], r10
lea r9, str.IID_IKsControl
xor edx, edx
mov r8d, 0xc2
call fcn.18008e2c0
nop
lea rcx, [rbp + 0xf8]
call fcn.1800032b0
mov rbx, qword [rbp + 0xe0]
xor esi, esi
test rbx, rbx
je 0x180059deb
mov rdi, qword [rbp + 0xe8]
cmp rbx, rdi
je 0x180059d9e
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x180059d7f
mov rcx, qword [rbx]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x180059d7a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800593a3
mov rcx, r8
call fcn.180092818
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 7
mov word [rbx], si
add rbx, 0x20
cmp rbx, rdi
jne 0x180059d40
mov rbx, qword [rbp + 0xe0]
mov rdx, qword [rbp + 0xf0]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x180059dd1
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800593a3
mov rcx, rbx
call fcn.180092818
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], rsi
mov rcx, qword [rbp + 0xc8]
test rcx, rcx
je 0x180059e41
mov rdx, qword [rbp + 0xd8]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x180059e2a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800593a3
call fcn.180092818
mov qword [rbp + 0xc8], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
mov rcx, qword [rbp + 0x88]
mov rbx, qword [rcx + 8]
cmp byte [rbx + 0x19], 0
jne 0x180059e86
mov r8, qword [rbx + 0x10]
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x88]
call fcn.180001ac0
mov rcx, rbx
mov rbx, qword [rbx]
mov edx, 0x30
call fcn.180092818
cmp byte [rbx + 0x19], 0
je 0x180059e52
mov rcx, qword [rbp + 0x88]
mov edx, 0x30
call fcn.180092818
nop
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x180059f6b
mov rdi, qword [rbp - 0x80]
cmp rbx, rdi
je 0x180059f07
nop dword [rax + rax]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x180059eea
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x180059ee5
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18005a5c1
mov rcx, r8
call fcn.180092818
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], ILClone
mov byte [rbx], 0
add rbx, 0x28
cmp rbx, rdi
jne 0x180059eb0
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x78]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x180059f56
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005a5c1
mov rcx, rbx
call fcn.180092818
mov qword [rsp + 0x78], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x180059fc1
mov rax, qword [rsp + 0x70]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180059fae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005a5c1
call fcn.180092818
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rsi
mov rdx, qword [rbp + 0x42]
cmp rdx, 0x10
jb 0x180059ffc
mov rcx, qword [rbp + 0x2a]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180059ff7
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005b1ae
call fcn.180092818
movdqa xmm0, xmmword [0x1800a7750]
movdqu xmmword [rbp + 0x3a], xmm0
mov byte [rbp + 0x2a], 0
mov rdx, qword [rbp + 0x72]
cmp rdx, 0x10
jb 0x18005a048
mov rcx, qword [rbp + 0x5a]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005a043
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005b209
call fcn.180092818
movdqa xmm0, xmmword [0x1800a7750]
movdqu xmmword [rbp + 0x6a], xmm0
mov byte [rbp + 0x5a], 0
lea rcx, [rbp + 0x1b0]
call fcn.180002e50
nop
lea rcx, [rbp + 0x1f0]
call fcn.180002f00
mov eax, esi
jmp 0x180059bc4
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rax, str._com_yourkit_probes_TableLongBytes
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [0x180096892]
lea rdx, str.:X_YrO8__G
call fcn.180092630
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
nop
call fcn.180092818
mov qword [rbp + 0xc8], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
mov rcx, qword [rbp + 0x88]
mov rbx, qword [rcx + 8]
cmp byte [rbx + 0x19], 0
jne 0x18005a114
nop dword [rax + rax]
mov r8, qword [rbx + 0x10]
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x88]
call fcn.180001ac0
mov rcx, rbx
mov rbx, qword [rbx]
mov edx, 0x30
call fcn.180092818
cmp byte [rbx + 0x19], 0
je 0x18005a0e0
mov rcx, qword [rbp + 0x88]
mov edx, 0x30
call fcn.180092818
nop
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x18005a1f1
mov rdi, qword [rbp - 0x80]
cmp rbx, rdi
je 0x18005a18d
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x18005a170
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x18005a16b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18005a5c1
mov rcx, r8
call fcn.180092818
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], ILClone
mov byte [rbx], 0
add rbx, 0x28
cmp rbx, rdi
jne 0x18005a136
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x78]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x18005a1dc
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005a5c1
mov rcx, rbx
call fcn.180092818
mov qword [rsp + 0x78], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x18005a247
mov rax, qword [rsp + 0x70]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005a234
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005a5c1
call fcn.180092818
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rsi
mov rdx, qword [rbp + 0x42]
cmp rdx, 0x10
jb 0x18005a282
inc rdx
mov rcx, qword [rbp + 0x2a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005a27d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005b1ae
call fcn.180092818
movdqa xmm0, xmmword [0x1800a7750]
movdqu xmmword [rbp + 0x3a], xmm0
mov byte [rbp + 0x2a], 0
mov rdx, qword [rbp + 0x72]
cmp rdx, 0x10
jb 0x18005a2ce
inc rdx
mov rcx, qword [rbp + 0x5a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005a2c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005b209
call fcn.180092818
movdqa xmm0, xmmword [0x1800a7750]
movdqu xmmword [rbp + 0x6a], xmm0
mov byte [rbp + 0x5a], 0
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 0x10
jb 0x18005a31c
inc rdx
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005a317
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005a36b
call fcn.180092818
movdqa xmm0, xmmword [0x1800a7750]
movdqa xmmword [rbp + 0x1e0], xmm0
mov byte [rbp + 0x1d0], 0
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0x10
jb 0x18005a377
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005a372
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18005a372
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180092818
movdqa xmm0, xmmword [0x1800a7750]
movdqa xmmword [rbp + 0x1c0], xmm0
mov byte [rbp + 0x1b0], 0
lea rcx, [rbp + 0x1f0]
call fcn.180002f00
mov eax, esi
jmp 0x180059bc4
lea rcx, [rbp + 0xf8]
call fcn.1800032b0
mov rbx, qword [rbp + 0xe0]
test rbx, rbx
je 0x18005a410
mov rdi, qword [rbp + 0xe8]
cmp rbx, rdi
je 0x18005a3dd
mov rcx, rbx
call fcn.180017da0
add rbx, 0x20
cmp rbx, rdi
jne 0x18005a3c5
mov rbx, qword [rbp + 0xe0]
mov r8, qword [rbp + 0xf0]
sub r8, rbx
sar r8, 5
mov rdx, rbx
lea rcx, [rbp + 0xe0]
call fcn.18002a4a0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
xor esi, esi
mov qword [rbp + 0xf0], rsi
jmp 0x18005a412
xor esi, esi
mov rdx, qword [rbp + 0xc8]
test rdx, rdx
je 0x18005a44a
mov r8, qword [rbp + 0xd8]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0xc8]
call fcn.18002a400
mov qword [rbp + 0xc8], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
lea rcx, [rbp + 0x88]
call fcn.1800031e0
nop
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x180059ae2
mov rdi, qword [rbp - 0x80]
cmp rbx, rdi
je 0x180059aa6
mov rcx, rbx
call fcn.180002af0
add rbx, 0x28
cmp rbx, rdi
jne 0x18005a472
jmp 0x180059aa1
lea rcx, [rbp + 0xf8]
call fcn.1800032b0
mov rbx, qword [rbp + 0xe0]
test rbx, rbx
je 0x18005a4fb
mov rdi, qword [rbp + 0xe8]
cmp rbx, rdi
je 0x18005a4c8
nop dword [rax]
mov rcx, rbx
call fcn.180017da0
add rbx, 0x20
cmp rbx, rdi
jne 0x18005a4b0
mov rbx, qword [rbp + 0xe0]
mov r8, qword [rbp + 0xf0]
sub r8, rbx
sar r8, 5
mov rdx, rbx
lea rcx, [rbp + 0xe0]
call fcn.18002a4a0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
xor esi, esi
mov qword [rbp + 0xf0], rsi
jmp 0x18005a4fd
xor esi, esi
mov rdx, qword [rbp + 0xc8]
test rdx, rdx
je 0x18005a535
mov r8, qword [rbp + 0xd8]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0xc8]
call fcn.18002a400
mov qword [rbp + 0xc8], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
lea rcx, [rbp + 0x88]
call fcn.1800031e0
nop
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x180059ae2
mov rdi, qword [rbp - 0x80]
cmp rbx, rdi
je 0x18005a576
nop dword [rax]
mov rcx, rbx
call fcn.180002af0
add rbx, 0x28
cmp rbx, rdi
jne 0x18005a560
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x78]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x18005a5c8
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18005a5c8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.180092818
jmp 0x180059ad5
mov byte [rbp + 0x284], 0
mov r8d, 2
lea rdx, [0x1800a3df2]
lea rcx, [rbp + 0x280]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov byte [rbp + 0x286], 0x45
jmp 0x18005ad87
mov word [rbp + 0x2c9], cx
mov r8d, 2
lea rdx, [0x1800a3dc3]
lea rcx, [rbp + 0x280]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, 0x4c43
mov word [rbp + 0x282], ax
jmp 0x18005ad87
mov word [rbp + 0x2c8], r8w
jmp 0x18005ad96
mov r8d, 1
lea rdx, [0x1800a3f28]
lea rcx, [rbp + 0x28c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp 0x18005ad87
mov eax, ebx
sub eax, 0x17b
je 0x18005a9df
sub eax, 0x38
je 0x18005a6d8
sub eax, 0x38
je 0x18005a6a8
cmp eax, 0x38
jne 0x18005ad96
lea r8d, [rax - 0x37]
lea rdx, [0x1800978b0]
lea rcx, [rbp + 0x210]
call fcn.180018980
mov eax, 0x1bb
mov word [rbp + 0x250], ax
jmp 0x18005ad87
lea rax, [rbp + 0x2a8]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x18005a6b6
lea rdx, [rbp + 0x2a8]
lea rcx, [rbp + 0x1f0]
call fcn.180018980
jmp 0x18005ad87
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 0x7e]
lea rcx, [0x1800ad338]
call fcn.18001f860
test al, al
jne 0x18005a9c9
mov edi, 0x9e
xor ebx, ebx
nop dword [rax]
cmp edi, 0x26a
ja 0x18005a7e8
je 0x18005a7c3
mov eax, edi
sub eax, 0x9e
je 0x18005a783
sub eax, 0x73
je 0x18005a777
sub eax, 0x73
je 0x18005a74e
cmp eax, 0x73
jne 0x18005a9b6
mov eax, 0x6c70
mov word [rbp + 0x29e], ax
mov byte [rbp + 0x2a0], 0
mov r12b, 1
mov byte [rsp + 0x30], r12b
jmp 0x18005a9b6
movzx eax, word [0x1800a3e19]
mov word [rbp + 0x29a], ax
movzx eax, byte [0x1800a3e1b]
mov byte [rbp + 0x29c], al
mov word [rbp + 0x29d], 0x6d
jmp 0x18005a9b6
mov byte [rbp + 0x29a], 0
jmp 0x18005a9b6
mov r8d, 5
lea rdx, [0x1800a3e42]
lea rcx, [rbp + 0x290]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0x295], 0
mov r8d, 5
lea rdx, [0x1800a3e7d]
lea rcx, [rbp + 0x295]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp 0x18005a9b6
lea rax, [rbp + 0x290]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], 0
jne 0x18005a7d1
xor eax, eax
mov qword [rbp - 0x38], rax
mov dword [rbp - 0x40], eax
jmp 0x18005a9b4
mov eax, edi
sub eax, 0x2dd
je 0x18005a9ae
sub eax, 0x73
je 0x18005a96d
sub eax, 0x73
je 0x18005a867
cmp eax, 0x73
jne 0x18005a9b6
lea rcx, [rbp + 0xf8]
call fcn.1800032b0
lea rcx, [rbp + 0xe0]
call fcn.180002cf0
mov rdx, qword [rbp + 0xc8]
test rdx, rdx
je 0x18005adb1
mov r8, qword [rbp + 0xd8]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0xc8]
call fcn.18002a400
xor ebx, ebx
mov qword [rbp + 0xc8], rbx
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
jmp 0x18005adb3
test r12b, r12b
je 0x18005a8a1
mov qword [rsp + 0x50], rbx
lea r8, [rsp + 0x50]
mov edx, esi
lea rcx, [rbp + 0x290]
call sub.RPCRT4.dll_MesDecodeBufferHandleCreate
mov rcx, qword [rbp - 0x30]
test rcx, rcx
je 0x18005a892
call sub.RPCRT4.dll_MesHandleFree
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x18005a8a1
call sub.RPCRT4.dll_MesHandleFree
cmp byte [rsp + 0x30], 0
je 0x18005a964
mov ebx, 0xea
mov eax, ebx
sub eax, 0xe8
je 0x18005a946
sub eax, 1
je 0x18005a8eb
cmp eax, 1
jne 0x18005a954
movzx r14d, al
xor eax, eax
mov qword [rbp - 0x18], rax
lea r9, [rbp - 0x18]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesEncodeIncrementalHandleCreate
mov r15d, eax
jmp 0x18005a954
xor eax, eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp - 0x38]
call sub.RPCRT4.dll_MesIncrementalHandleReset
xor edx, edx
mov ecx, edx
movzx eax, r14b
test r15d, r15d
cmove ecx, eax
movzx r14d, cl
test cl, cl
je 0x18005a954
mov qword [rsp + 0x50], rdx
lea r8, [rsp + 0x50]
xor ecx, ecx
call sub.RPCRT4.dll_MesDecodeIncrementalHandleCreate
mov r15d, eax
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x18005a93f
call sub.RPCRT4.dll_MesHandleFree
mov rcx, qword [rsp + 0x50]
jmp 0x18005a94a
mov rcx, qword [rbp - 0x38]
test rcx, rcx
je 0x18005a954
call sub.RPCRT4.dll_MesHandleFree
dec ebx
cmp ebx, 0xe7
ja 0x18005a8b1
xor ebx, ebx
mov dword [rbp - 0x48], 1
jmp 0x18005a9b6
lea r9, [rbp - 0x38]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesEncodeIncrementalHandleCreate
mov ebx, eax
lea r9, [rbp - 0x30]
lea r8, [rbp - 0x40]
mov edx, esi
lea rcx, [rbp + 0x290]
call sub.RPCRT4.dll_MesEncodeFixedBufferHandleCreate
movzx r12d, r12b
test eax, eax
mov eax, 0
cmovne r12d, eax
test ebx, ebx
je 0x18005a9b4
mov byte [rsp + 0x30], al
jmp 0x18005a9b4
xor eax, eax
mov qword [rbp - 0x30], rax
xor ebx, ebx
add edi, 0x73
cmp edi, 0x4a9
jb 0x18005a700
mov ebx, dword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
mov dil, 1
jmp 0x18005ad87
mov byte [rbp + 0x28d], 0
jmp 0x18005ad96
mov r8d, 0xb3
lea rdx, [rbp + 0x230]
xor ecx, ecx
call fcn.180080ce0
jmp 0x18005ad87
cmp ebx, 0x373
ja 0x18005abf7
je 0x18005ab8f
mov eax, ebx
sub eax, 0x293
je 0x18005ab10
sub eax, 0x38
je 0x18005ab06
sub eax, 0x38
je 0x18005aae0
cmp eax, 0x38
jne 0x18005ad96
lea rax, [rbp + 0x50]
mov qword [rsp + 0x50], rax
mov rdx, qword [rsp + 0x68]
cmp rdx, qword [rsp + 0x70]
je 0x18005aa6a
lea rax, [rbp + 0x50]
mov qword [rdx], rax
mov rdx, qword [rsp + 0x68]
add rdx, 8
mov qword [rsp + 0x68], rdx
jmp 0x18005aa7e
lea r8, [rsp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.180001230
mov rdx, qword [rsp + 0x68]
lea rax, [rbp + 0x20]
mov qword [rsp + 0x50], rax
cmp rdx, qword [rsp + 0x70]
je 0x18005aa9d
lea rax, [rbp + 0x20]
mov qword [rdx], rax
add qword [rsp + 0x68], 8
jmp 0x18005aaac
lea r8, [rsp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.180001230
xor ecx, ecx
mov qword [rbp - 0x10], rcx
mov eax, dword [0x1800ad3e0]
mov dword [rsp + 0x50], eax
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0xf9
xor r9d, r9d
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x50]
call fcn.18002d810
jmp 0x18005ad87
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r10
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, reloc.SHELL32.dll_SHSetInstanceExplorer
call fcn.1800333e0
jmp 0x18005ad87
mov dword [rsp + 0x58], r10d
jmp 0x18005ad96
lea r8, [rbp + 0x1b0]
lea rdx, [rbp + 0x1f0]
mov ecx, 0x4a
call fcn.18000a6b0
lea rax, [rbp + 0x280]
mov r13, 0xffffffffffffffff
inc r13
cmp byte [rax + r13], 0
jne 0x18005ab36
mov eax, 0x1bb
mov word [rsp + 0x38], ax
mov r9d, SHTestTokenMembership
lea r8, [0x1800ad398]
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x38]
call fcn.18004ffc0
mov eax, 0x1bb
mov word [rsp + 0x38], ax
mov r9d, 0x51
lea r8, [rsp + 0x38]
lea rdx, [rbp + 0x20]
lea rcx, [0x1800ad3b8]
call fcn.1800430a0
jmp 0x18005ad87
lea rax, [rsp + 0x60]
mov qword [rbp], rax
mov eax, dword [0x1800ad3e0]
mov dword [rbp + 8], eax
mov eax, dword [0x1800ad3e4]
mov dword [rbp + 0xc], eax
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp + 0x10], xmm0
mov qword [rsp + 0x28], r10
mov dword [rsp + 0x20], r10d
lea r9, [rbp + 0x10]
lea r8, [0x180010570]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rbp - 8], rax
lea r9, [rbp - 0x10]
lea r8, [rsp + 0x58]
mov edx, r13d
lea rcx, [rbp + 0x280]
call sub.RPCRT4.dll_MesEncodeFixedBufferHandleCreate
mov dword [rsp + 0x48], eax
jmp 0x18005ad83
mov eax, ebx
sub eax, 0x3ab
je 0x18005ad3d
sub eax, 0x38
je 0x18005acf2
sub eax, 0x38
je 0x18005ac76
cmp eax, 0x38
jne 0x18005ad96
lea rcx, [rbp + 0xf8]
call fcn.1800032b0
lea rcx, [rbp + 0xe0]
call fcn.180002cf0
mov rdx, qword [rbp + 0xc8]
test rdx, rdx
je 0x18005ae8c
mov r8, qword [rbp + 0xd8]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0xc8]
call fcn.18002a400
xor ebx, ebx
mov qword [rbp + 0xc8], rbx
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
jmp 0x18005ae8e
mov r8d, 0xbd
lea rdx, [rbp + 0x80]
xor ecx, ecx
call fcn.18006fc00
test dil, dil
je 0x18005ad87
mov ebx, 0x54
mov eax, ebx
sub eax, 0x54
je 0x18005acc9
sub eax, 1
je 0x18005acb9
cmp eax, 1
jne 0x18005ace6
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x18005ace6
call sub.RPCRT4.dll_MesHandleFree
jmp 0x18005ace6
mov rcx, qword [rbp - 0x10]
test rcx, rcx
je 0x18005ace6
call sub.RPCRT4.dll_MesHandleFree
jmp 0x18005ace6
xor eax, eax
mov qword [rbp - 0x50], rax
lea r8, [rbp - 0x50]
mov edx, r13d
lea rcx, [rbp + 0x280]
call sub.RPCRT4.dll_MesDecodeBufferHandleCreate
mov dword [rsp + 0x48], eax
inc ebx
cmp ebx, 0x57
jb 0x18005ac98
jmp 0x18005ad83
mov qword [rsp + 0x50], rdx
xor r9d, r9d
mov r8d, ecx
lea rdx, [rsp + 0x50]
xor ecx, ecx
call fcn.180043fe0
lea r9, [rsp + 0x60]
lea r8, [0x1800ad330]
mov edx, 0x67
lea rcx, [rbp + 0x80]
call fcn.180004070
xor r10d, r10d
mov ecx, r10d
movzx eax, dil
cmp dword [rsp + 0x48], r10d
cmove ecx, eax
movzx edi, cl
jmp 0x18005ad8a
mov rbx, qword [rbp - 8]
test rbx, rbx
jne 0x18005ad7a
mov ecx, 0x5a
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x5a
je 0x18005ad6f
sub eax, 0x40
je 0x18005ad6f
sub eax, 0x40
je 0x18005ad6f
sub eax, 0x40
je 0x18005ad6f
cmp eax, 0x40
je 0x18005af8b
add ecx, 0x40
cmp ecx, 0x19a
jb 0x18005ad50
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [rsp + 0x40]
xor r10d, r10d
mov ecx, 0x6d
lea rdx, [0x180005690]
add ebx, 0x38
mov dword [rsp + 0x40], ebx
cmp ebx, dword [rbp - 0x44]
jae 0x18005b0e1
mov r8d, 0x6f
jmp 0x1800599a0
xor ebx, ebx
lea rcx, [rbp + 0x88]
call fcn.1800031e0
nop
lea rcx, [rsp + 0x78]
call fcn.180017d10
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x18005adf8
mov r8, qword [rsp + 0x70]
sub r8, rdx
sar r8, 3
lea rcx, [rsp + 0x60]
call fcn.18002a3b0
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rbx
mov rdx, qword [rbp + 0x42]
cmp rdx, 0x10
jb 0x18005ae36
inc rdx
mov rcx, qword [rbp + 0x2a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005ae31
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18005ae31
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180092818
movdqa xmm0, xmmword [0x1800a7750]
movdqu xmmword [rbp + 0x3a], xmm0
mov byte [rbp + 0x2a], 0
mov rdx, qword [rbp + 0x72]
cmp rdx, 0x10
jb 0x180059b97
inc rdx
mov rcx, qword [rbp + 0x5a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180059b92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180059b92
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor ebx, ebx
lea rcx, [rbp + 0x88]
call fcn.1800031e0
nop
lea rcx, [rsp + 0x78]
call fcn.180017d10
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x18005aed3
mov r8, qword [rsp + 0x70]
sub r8, rdx
sar r8, 3
lea rcx, [rsp + 0x60]
call fcn.18002a3b0
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rbx
mov rdx, qword [rbp + 0x42]
cmp rdx, 0x10
jb 0x18005af0e
inc rdx
mov rcx, qword [rbp + 0x2a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005af09
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005b1ae
call fcn.180092818
movdqa xmm0, xmmword [0x1800a7750]
movdqu xmmword [rbp + 0x3a], xmm0
mov byte [rbp + 0x2a], 0
mov rdx, qword [rbp + 0x72]
cmp rdx, 0x10
jb 0x18005af5a
inc rdx
mov rcx, qword [rbp + 0x5a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005af55
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005b209
call fcn.180092818
movdqa xmm0, xmmword [0x1800a7750]
movdqu xmmword [rbp + 0x6a], xmm0
mov byte [rbp + 0x5a], 0
lea rcx, [rbp + 0x1b0]
call fcn.180002e50
nop
lea rcx, [rbp + 0x1f0]
call fcn.180002f00
mov eax, ebx
jmp 0x180059bc4
lea rcx, [rbp + 0xf8]
call fcn.1800032b0
lea rcx, [rbp + 0xe0]
call fcn.180002cf0
mov rdx, qword [rbp + 0xc8]
test rdx, rdx
je 0x18005afdf
mov r8, qword [rbp + 0xd8]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0xc8]
call fcn.18002a400
xor ebx, ebx
mov qword [rbp + 0xc8], rbx
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
jmp 0x18005afe1
xor ebx, ebx
lea rcx, [rbp + 0x88]
call fcn.1800031e0
nop
lea rcx, [rsp + 0x78]
call fcn.180017d10
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x18005b026
mov r8, qword [rsp + 0x70]
sub r8, rdx
sar r8, 3
lea rcx, [rsp + 0x60]
call fcn.18002a3b0
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rbx
mov rdx, qword [rbp + 0x42]
cmp rdx, 0x10
jb 0x18005b061
inc rdx
mov rcx, qword [rbp + 0x2a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005b05c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005b1ae
call fcn.180092818
movdqa xmm0, xmmword [0x1800a7750]
movdqu xmmword [rbp + 0x3a], xmm0
mov byte [rbp + 0x2a], 0
mov rdx, qword [rbp + 0x72]
cmp rdx, 0x10
jb 0x18005b0ad
inc rdx
mov rcx, qword [rbp + 0x5a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005b0a8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005b209
call fcn.180092818
movdqa xmm0, xmmword [0x1800a7750]
movdqu xmmword [rbp + 0x6a], xmm0
mov byte [rbp + 0x5a], 0
lea rcx, [rbp + 0x1b0]
call fcn.180002e50
nop
lea rcx, [rbp + 0x1f0]
call fcn.180002f00
mov eax, 1
jmp 0x180059bc4
lea rcx, [rbp + 0xf8]
call fcn.1800032b0
lea rcx, [rbp + 0xe0]
call fcn.180002cf0
mov rdx, qword [rbp + 0xc8]
test rdx, rdx
je 0x18005b135
mov r8, qword [rbp + 0xd8]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0xc8]
call fcn.18002a400
xor ebx, ebx
mov qword [rbp + 0xc8], rbx
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
jmp 0x18005b137
xor ebx, ebx
lea rcx, [rbp + 0x88]
call fcn.1800031e0
nop
lea rcx, [rsp + 0x78]
call fcn.180017d10
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x18005b17c
mov r8, qword [rsp + 0x70]
sub r8, rdx
sar r8, 3
lea rcx, [rsp + 0x60]
call fcn.18002a3b0
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rbx
mov rdx, qword [rbp + 0x42]
cmp rdx, 0x10
jb 0x18005b1ba
inc rdx
mov rcx, qword [rbp + 0x2a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005b1b5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18005b1b5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180092818
movdqa xmm0, xmmword [0x1800a7750]
movdqu xmmword [rbp + 0x3a], xmm0
mov byte [rbp + 0x2a], 0
mov rdx, qword [rbp + 0x72]
cmp rdx, 0x10
jb 0x180059b97
inc rdx
mov rcx, qword [rbp + 0x5a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180059b92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180059b92
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3