Function at 0x180011290
Capabilities:
Execute command
Set console window title

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1d0]
sub rsp, 0x2d0
mov rax, qword [0x18006f730]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
mov r14d, edx
mov dword [rsp + 0x44], edx
mov rdx, rcx
mov qword [rsp + 0x68], rcx
mov esi, r14d
imul r13d, r14d, 0xb16
xor r9d, r9d
lea r10, [0x180000000]
lea r15d, [r9 + 0x30]
cmp r14d, r13d
ja 0x1800113c6
movsxd r15, dword [rsp + 0x50]
mov r14, r15
mov rdi, qword [rbp - 0x60]
mov r12d, dword [rsp + 0x50]
mov r8d, 0x32
lea ecx, [r8 + 0x31]
lea eax, [rcx + 0x13]
cmp esi, 0x4db2
ja 0x1800115f2
je 0x1800115e0
cmp esi, 0x1b51
ja 0x180011485
je 0x18001147b
mov eax, esi
sub eax, 0x1b
je 0x18001143b
sub eax, 0x22
je 0x18001142d
sub eax, 0x5c
je 0x180011370
sub eax, r8d
je 0x180011364
cmp eax, 0xceb
jne 0x18001139c
mov rdi, qword [rdx]
jmp 0x18001139c
mov dword [rbp + 0x168], 0x73006d
jmp 0x18001139c
mov r9d, 0xb7
xor r8d, r8d
lea rdx, [0x18006f8c0]
xor ecx, ecx
call fcn.18000c550
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [0x18006f8a8], rax
xor r9d, r9d
imul eax, dword [rsp + 0x44], 0x81
add esi, eax
mov rdx, qword [rsp + 0x68]
lea r10, [0x180000000]
cmp esi, r13d
jbe 0x180011309
mov r14d, dword [rsp + 0x44]
mov r15d, 0x30
lea eax, [r14 - 0x17]
mov dword [rsp + 0x50], eax
cmp r14d, eax
jbe case.0x18001142b.181
movabs rbx, 0x32003300790061
movabs rsi, 0x65006c00730073
mov r11d, 0x2e
movabs r8, 0x7ffffffffffffffe
mov rdi, qword [rbp - 0x60]
movzx r12d, byte [rsp + 0x41]
mov r13d, dword [rsp + 0x58]
nop word [rax + rax]
lea eax, [r14 - 0xb5]
cmp eax, 0x16
ja case.default.0x18001142b
mov ecx, dword [r10 + rax*4 + 0x122d0]
add rcx, r10
jmp rcx
mov r15d, r9d
mov r14, r9
mov r12d, r9d
jmp 0x18001139c
mov rdi, r9
test rdx, rdx
jne 0x18001139c
mov eax, dword [rsp + 0x4c]
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.18003c900
lea r11, [rsp + 0x2d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
test rdi, rdi
je case.0x18001142b.181
jmp 0x18001139c
cmp esi, 0x1efa
je 0x1800115ad
cmp esi, 0x28ec
je 0x180011597
cmp esi, 0x3687
je 0x18001157c
cmp esi, 0x3db7
je 0x1800114f3
cmp esi, 0x4422
jne 0x18001139c
lea r8, [rdi + 0x1fc0]
mov edx, 0x4e
xor ecx, ecx
call fcn.180016120
lea rcx, [rdi + 0x1fb8]
xor eax, eax
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xee
call fcn.18003bca0
jmp 0x180011399
cmp r12d, 1
jne 0x180011556
mov ebx, 0x11d
nop
mov eax, ebx
sub eax, 0x11d
je 0x180011518
cmp eax, 0x1d
jne 0x180011546
mov eax, 1
jmp 0x18001144b
mov dword [0x18006f840], 1
mov dword [rsp + 0x30], 0xc8
mov qword [rsp + 0x28], r9
mov qword [rsp + 0x20], r9
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180009e30
xor r9d, r9d
add ebx, 0x1d
cmp ebx, 0x157
jb 0x180011500
jmp 0x18001139c
mov eax, 0x10b
nop dword [rax + rax]
cmp eax, 0x10b
je 0x1800117b1
add eax, 0xae
cmp eax, 0x1b9
jb 0x180011560
jmp 0x18001139c
lea rdx, [rdi + 0x1fc8]
xor r9d, r9d
xor r8d, r8d
lea ecx, [r9 + 0x67]
call fcn.18002b000
jmp 0x180011399
lea rdx, [rdi + 0x1fd0]
mov ecx, 0xa5
call fcn.18002e3e0
jmp 0x180011399
cmp r14, 0xc
jge 0x1800115d6
cmp dword [r10 + r14*4 + 0x6f990], 2
jg 0x1800115d0
inc r15d
inc r14
jmp 0x1800115ad
mov r12d, 1
mov esi, 0x1efa
jmp 0x18001139c
lea rcx, str._s:_Failed_to_unset__s.__Retrying.
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
jmp 0x180011399
cmp esi, 0xcd61
ja 0x180011748
je 0x18001173c
cmp esi, 0x51bd
je 0x1800116f6
cmp esi, 0x5f58
je 0x18001168f
cmp esi, 0x6716
je 0x180011683
cmp esi, 0x6cf3
je 0x180011646
cmp esi, 0x9acb
jne 0x18001139c
lea rcx, [0x1800535e8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x180011399
test rdi, rdi
je 0x18001139c
mov ebx, 0xc1
mov eax, ebx
sub eax, 0xc1
je 0x180011667
cmp eax, 0x77
jne 0x180011673
mov rdi, r9
jmp 0x180011673
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r9d, r9d
add ebx, 0x77
cmp ebx, 0x1af
jb 0x180011654
jmp 0x18001139c
mov word [rbp + 0x16c], ax
jmp 0x18001139c
cmp qword [rdi + 0x1f88], 0
je 0x1800116cc
mov ebx, 0x17
nop
mov eax, ebx
sub eax, 0x16
je 0x1800116be
cmp eax, 1
jne 0x1800116c5
mov rcx, qword [rdi + 0x1f88]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r9d, r9d
jmp 0x1800116c5
mov qword [rdi + 0x1f88], r9
dec ebx
cmp ebx, 0x15
ja 0x1800116a0
cmp qword [rdi + 0x1f90], 0
je 0x18001139c
mov rcx, qword [rdi + 0x1f90]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r9d, r9d
mov qword [rdi + 0x1f90], r9
jmp 0x18001139c
lea rcx, [rdi + 0x1fb0]
mov qword [rsp + 0x20], r9
mov r9d, 0x124
xor r8d, r8d
xor edx, edx
call fcn.180031910
cmp qword [rdi + 0x1f80], 0
je 0x180011399
mov rcx, qword [rdi + 0x1f80]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r9d, r9d
mov qword [rdi + 0x1f80], r9
jmp 0x18001139c
mov word [rbp + 0x16e], cx
jmp 0x18001139c
cmp esi, 0xe7e4
je 0x180011798
cmp esi, 0x133ac
je 0x180011781
cmp esi, 0x134fd
je case.0x18001142b.181
cmp esi, 0x199f7
jne 0x18001139c
mov eax, 0x30
mov word [rbp + 0x176], ax
jmp 0x18001139c
mov dword [rbp + 0x170], 0x310072
mov word [rbp + 0x174], r8w
jmp 0x18001139c
mov edx, 0x107
xor ecx, ecx
call fcn.18001d230
xor r9d, r9d
mov dword [rsp + 0x4c], r9d
jmp 0x18001139c
mov eax, r9d
jmp 0x18001144b
mov qword [rbp + 0x198], rbx
jmp case.default.0x18001142b
mov qword [rbp + 0x190], rsi
jmp case.default.0x18001142b
movabs rax, 0x620069006c
mov qword [rbp + 0x1a8], rax
jmp case.default.0x18001142b
movsd xmm0, qword [str.CS_Stall_Time]
movsd qword [rbp + 0x180], xmm0
mov eax, dword [0x1800543b0]
mov dword [rbp + 0x188], eax
movzx eax, word [0x1800543b4]
mov word [rbp + 0x18c], ax
jmp case.default.0x18001142b
lea rax, [rbp + 0x168]
mov qword [rbp + 0x150], rax
jmp case.default.0x18001142b
mov byte [rsp + 0x42], 1
mov byte [rsp + 0x40], 1
jmp case.default.0x18001142b
cmp byte [rsp + 0x42], 0
je case.default.0x18001142b
mov r8d, dword [rsp + 0x54]
lea rdx, [rbp - 0x30]
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.WINMM.dll_mixerSetControlDetails]
jmp 0x180012227
mov dword [rbp - 0x30], 0x20
jmp case.default.0x18001142b
mov qword [rbp - 0x58], r9
mov dword [rsp + 0x54], r9d
jmp case.default.0x18001142b
movups xmm0, xmmword [rbp + 0xe0]
movups xmmword [rbp + 0x150], xmm0
movsd xmm1, qword [rbp + 0xf0]
movsd qword [rbp + 0x160], xmm1
mov qword [rbp - 0x48], r9
jmp case.default.0x18001142b
mov word [rbp + 0x198], r9w
jmp case.default.0x18001142b
mov byte [rsp + 0x4c], 1
jmp case.default.0x18001142b
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
mov r8d, dword [rsp + 0x54]
lea rdx, [rbp - 0x30]
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.WINMM.dll_mixerGetControlDetailsW]
mov dword [rbp - 0x80], eax
jmp 0x180012227
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
lea rax, [rbp + 0x1a8]
mov qword [rbp + 0x158], rax
jmp case.default.0x18001142b
mov ecx, r9d
movzx eax, byte [rsp + 0x42]
cmp dword [rbp - 0x80], 0
cmove ecx, eax
mov byte [rsp + 0x42], cl
mov ecx, r9d
movzx eax, byte [rsp + 0x40]
test rdi, rdi
cmovne ecx, eax
mov byte [rsp + 0x40], cl
jmp case.default.0x18001142b
mov r8d, 2
lea rdx, [0x1800543b8]
lea rcx, [rbp + 0x1ae]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x180012227
movzx ecx, byte [rsp + 0x40]
test cl, cl
je case.default.0x18001142b
mov esi, 0x93
mov dword [rsp + 0x44], esi
mov r13d, dword [rsp + 0x48]
nop word [rax + rax]
mov eax, esi
sub eax, 0x92
je 0x180011990
cmp eax, 1
jne 0x180011a2a
lea r9, [rbp - 0x58]
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetFileTime]
mov r13d, eax
mov dword [rsp + 0x48], eax
jmp 0x180011a2a
test r13d, r13d
jne 0x1800119d4
mov ebx, 0x110
nop word [rax + rax]
cmp ebx, 0x110
je 0x1800119b8
cmp ebx, 0xaf50
jne 0x1800119c1
xor cl, cl
mov byte [rsp + 0x40], cl
jmp 0x1800119c6
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movzx ecx, byte [rsp + 0x40]
add ebx, 0xae40
cmp ebx, 0x15c80
jbe 0x1800119a0
test cl, cl
je 0x180011a2a
mov ebx, 0x9b
nop dword [rax]
mov eax, ebx
sub eax, 0x9b
je 0x180011a4b
cmp eax, 0x3a
jne 0x180011a16
test cl, cl
je 0x180011a16
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x130]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movzx ecx, byte [rsp + 0x40]
add ebx, 0x3a
cmp ebx, 0x10f
jb 0x1800119e0
mov esi, dword [rsp + 0x44]
mov r13d, dword [rsp + 0x48]
dec esi
mov dword [rsp + 0x44], esi
cmp esi, 0x91
movzx ecx, byte [rsp + 0x40]
ja 0x180011960
mov r13d, dword [rsp + 0x58]
jmp 0x180012213
lea rdx, [rbp + 0x130]
lea rcx, [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov dword [rsp + 0x48], eax
cmp eax, 0
jne 0x180011a11
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor cl, cl
mov byte [rsp + 0x40], cl
jmp 0x180011a16
mov word [rbp + 0x178], r9w
jmp case.default.0x18001142b
mov word [rbp + 0x1a0], r9w
jmp case.default.0x18001142b
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
lea rax, [rbp + 0x190]
mov qword [rbp + 0x160], rax
jmp case.default.0x18001142b
mov dword [rbp + 0x1b0], 0x61
movabs rax, 0x3200330079
mov qword [rbp + 0x1b2], rax
jmp case.default.0x18001142b
mov dword [rsp + 0x60], r9d
mov rbx, r9
mov qword [rsp + 0x78], rbx
nop word [rax + rax]
mov qword [rbp + 0xd0], r9
mov qword [rbp + 0xd8], 7
mov word [rbp + 0xc0], r9w
mov eax, 0x38
mov dword [rsp + 0x5c], eax
add eax, 0xffffffc8
cmp eax, 9
ja case.default.0x180011b1a
mov ecx, dword [r10 + rax*4 + 0x1232c]
add rcx, r10
jmp rcx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], rax
mov rdi, qword [rbp + 0xd0]
mov rcx, qword [rbp + 0xd8]
cmp rdi, rcx
jae 0x180011b75
lea rax, [rdi + 1]
mov qword [rbp + 0xd0], rax
lea rax, [rbp + 0xc0]
cmp rcx, 8
cmovae rax, qword [rbp + 0xc0]
mov dword [rax + rdi*2], 0x2e
jmp case.default.0x180011b1a
mov rax, r8
sub rax, rdi
cmp rax, 1
jb 0x1800122c9
lea r15, [rdi + 1]
mov rsi, qword [rbp + 0xd8]
mov rbx, r15
or rbx, 7
cmp rbx, r8
jbe 0x180011ba1
mov rbx, r8
jmp 0x180011bc2
mov rcx, rsi
shr rcx, 1
mov rax, r8
sub rax, rcx
cmp rsi, rax
jbe 0x180011bb7
mov rbx, r8
jmp 0x180011bc2
lea rax, [rsi + rcx]
cmp rbx, rax
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rbp + 0xc0]
call fcn.180022510
mov r14, rax
mov qword [rbp + 0xd0], r15
mov qword [rbp + 0xd8], rbx
add rdi, rdi
mov r8, rdi
mov rcx, rax
cmp rsi, 8
jb 0x180011c4d
mov rbx, qword [rbp + 0xc0]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov dword [rdi + r14], 0x2e
lea rdx, [rsi*2 + 2]
cmp rdx, 0x1000
jb 0x180011c36
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x1800122bb
mov rbx, rcx
mov rcx, rbx
call fcn.18003c3f4
mov qword [rbp + 0xc0], r14
xor r9d, r9d
jmp 0x180011e8c
lea rdx, [rbp + 0xc0]
call sub.VCRUNTIME140.dll_memcpy
mov r11d, 0x2e
mov dword [rdi + r14], r11d
xor r9d, r9d
mov qword [rbp + 0xc0], r14
mov rbx, qword [rsp + 0x78]
lea r10, [0x180000000]
movabs r8, 0x7ffffffffffffffe
jmp case.default.0x180011b1a
cmp qword [rbp - 0x38], 0
jne case.default.0x180011b1a
mov esi, 0xc
nop dword [rax + rax]
cmp esi, 0xc
ja case.default.0x180011cb6
mov eax, esi
mov ecx, dword [r10 + rax*4 + 0x12354]
add rcx, r10
jmp rcx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], rax
mov dword [rbp + 0xf8], eax
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rax
jmp case.default.0x180011cb6
cmp qword [rsp + 0x70], 0
jne 0x180011cf6
xor r12b, r12b
jmp case.default.0x180011cb6
test r12b, r12b
je case.default.0x180011cb6
mov edi, 0xbb
cmp edi, 0xbb
je 0x180011d61
cmp edi, 0x2772
je 0x180011d4b
cmp edi, 0x4e29
jne 0x180011d82
test r12b, r12b
je 0x180011d82
mov ebx, 0x1f
mov eax, ebx
sub eax, 0x1f
je 0x180011d39
cmp eax, 1
jne 0x180011d42
mov rcx, qword [rsp + 0x70]
jmp 0x180011d3d
mov rcx, qword [rbp - 0x68]
call sub.ADVAPI32.dll_LsaClose
inc ebx
cmp ebx, 0x21
jb 0x180011d26
jmp 0x180011d82
cmp qword [rbp - 0x68], 0
jne 0x180011d82
mov rcx, qword [rsp + 0x70]
call sub.ADVAPI32.dll_LsaClose
xor r12b, r12b
jmp 0x180011d82
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
mov r9d, r13d
lea r8, [rbp + 0x90]
lea rdx, [rbp]
mov rcx, qword [rsp + 0x70]
call sub.ADVAPI32.dll_LsaCreateTrustedDomainEx
add edi, 0x26b7
cmp edi, 0x7425
jbe 0x180011d04
jmp case.default.0x180011cb6
mov dword [rbp + 0x100], r15d
mov r13d, r9d
mov dword [rsp + 0x58], r9d
jmp case.default.0x180011cb6
mov qword [rsp + 0x70], r9
jmp case.default.0x180011cb6
mov qword [rbp - 0x50], r9
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
movups xmmword [rbp + 0x110], xmm0
movups xmmword [rbp + 0x120], xmm0
jmp case.default.0x180011cb6
mov r12b, 1
jmp case.default.0x180011cb6
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
lea rdx, [rbp + 0xe0]
mov rcx, qword [rbp - 0x50]
call sub.IMM32.dll_ImmGetCompositionWindow
mov dword [rbp - 0x7c], eax
jmp case.default.0x180011cb6
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
jmp case.default.0x180011cb6
mov ecx, r9d
movzx eax, byte [rsp + 0x43]
cmp dword [rbp - 0x7c], 0
cmovne ecx, eax
mov byte [rsp + 0x43], cl
jmp case.default.0x180011cb6
mov byte [rsp + 0x43], 1
jmp case.default.0x180011cb6
cmp byte [rsp + 0x43], 0
je 0x180011e49
lea rdx, [rbp + 0xe0]
mov rcx, qword [rbp - 0x50]
call sub.IMM32.dll_ImmSetCompositionWindow
mov byte [rsp + 0x4c], 0
jmp case.default.0x180011cb6
mov qword [rbp - 0x68], r9
lea r9, [rsp + 0x70]
mov r8d, r13d
lea rdx, [rbp + 0x100]
lea rcx, [rbp - 0x10]
call sub.ADVAPI32.dll_LsaOpenPolicy
dec esi
lea eax, [rsi + 0xf8]
cmp eax, 0xf7
mov r9d, 0
lea r10, [0x180000000]
ja 0x180011ca0
mov rbx, qword [rsp + 0x78]
lea r10, [0x180000000]
movabs r8, 0x7ffffffffffffffe
mov r11d, 0x2e
jmp case.default.0x180011b1a
mov r8d, 3
lea rdx, [0x1800543c0]
lea rcx, [rbp + 0xc0]
call fcn.180022610
xor r9d, r9d
jmp 0x180011e91
cmp byte [rsp + 0x41], 0
je case.default.0x180011b1a
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.ADVAPI32.dll_CredFree]
xor r9d, r9d
jmp 0x180011e91
mov dword [rbp - 0x74], r9d
jmp case.default.0x180011b1a
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.GDI32.dll_GetObjectA]
xor r9d, r9d
mov ecx, r9d
movzx eax, byte [rsp + 0x41]
cmp dword [rbp - 0x70], r9d
cmovne ecx, eax
mov byte [rsp + 0x41], cl
jmp 0x180011e91
mov qword [rbp - 0x40], r9
mov dword [rbp - 0x78], r9d
jmp case.default.0x180011b1a
lea rcx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 8
cmovae rcx, qword [rbp + 0xc0]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov qword [rbp - 0x38], rax
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x78]
mov edx, dword [rbp - 0x74]
lea rcx, [rbp + 0x40]
call qword [sym.imp.ADVAPI32.dll_CredReadDomainCredentialsW]
mov dword [rbp - 0x70], eax
xor r9d, r9d
jmp 0x180011e91
mov rdi, qword [rdx + 0x10]
mov rbx, rdx
cmp qword [rdx + 0x18], 8
jb 0x180011f7c
mov rbx, qword [rdx]
cmp rdi, 8
jae 0x180011f9b
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0xe0], xmm0
mov r14d, 7
mov r15, qword [rbp + 0xe0]
jmp 0x180011fe0
mov r14, rdi
or r14, 7
cmp r14, r8
cmova r14, r8
lea rdx, [r14 + 1]
lea rcx, [rbp + 0xe0]
call fcn.180022510
mov r15, rax
mov qword [rbp + 0xe0], rax
lea r8, [rdi*2 + 2]
mov rdx, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
movabs r8, 0x7ffffffffffffffe
mov qword [rbp + 0xf8], r14
mov qword [rbp + 0xf0], rdi
lea rsi, [rbp + 0xe0]
cmp r14, 8
cmovae rsi, r15
cmp rdi, 8
jae 0x180012013
movups xmm0, xmmword [rsi]
mov qword [rbp + 0x118], 7
jmp 0x180012059
mov rbx, rdi
or rbx, 7
cmp rbx, r8
cmova rbx, r8
lea rdx, [rbx + 1]
lea rcx, [rbp + 0x100]
call fcn.180022510
mov qword [rbp + 0x100], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x118], rbx
movups xmm0, xmmword [rbp + 0x100]
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0x110], rdi
mov rcx, qword [rbp + 0xd8]
cmp rcx, 8
jb 0x1800120ad
lea rdx, [rcx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800120a8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800122b4
call fcn.18003c3f4
movups xmm0, xmmword [rbp + 0xe0]
movups xmmword [rbp + 0xc0], xmm0
movups xmm0, xmmword [rbp + 0x110]
movups xmmword [rbp + 0xd0], xmm0
cmp r14, 8
jb 0x180012104
lea rdx, [r14*2 + 2]
mov rax, r15
cmp rdx, 0x1000
jb 0x1800120fc
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800122bb
mov rcx, r15
call fcn.18003c3f4
mov rbx, qword [rsp + 0x78]
mov rdx, qword [rbp + rbx*8 + 0x150]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x180012120
lea rcx, [rbp + 0xc0]
call fcn.180022610
xor r9d, r9d
jmp 0x180011e91
mov byte [rsp + 0x41], 1
mov eax, dword [rsp + 0x5c]
inc eax
mov dword [rsp + 0x5c], eax
cmp eax, 0x42
mov rdx, qword [rsp + 0x68]
mov r15d, 0x30
jb 0x180011b03
mov rcx, qword [rbp + 0xd8]
cmp rcx, 8
jb 0x1800121a8
lea rdx, [rcx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800121a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800122c2
call fcn.18003c3f4
mov ecx, dword [rsp + 0x60]
inc ecx
mov dword [rsp + 0x60], ecx
inc rbx
mov qword [rsp + 0x78], rbx
cmp ecx, 3
mov rdx, qword [rsp + 0x68]
mov r9d, 0
lea r10, [0x180000000]
movabs r8, 0x7ffffffffffffffe
lea r11d, [r9 + 0x2e]
lea r15d, [r9 + 0x30]
jb 0x180011ae0
lea rax, [rbp + 0x180]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x100
xor edx, edx
lea rcx, [rdx - 1]
lea r8d, [r9 + 4]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rdi, rax
mov r14d, dword [rsp + 0x44]
movabs rsi, 0x65006c00730073
movabs rbx, 0x32003300790061
movabs r8, 0x7ffffffffffffffe
mov r11d, 0x2e
dec r14d
mov dword [rsp + 0x44], r14d
cmp r14d, dword [rsp + 0x50]
jbe case.0x18001142b.181
mov rdx, qword [rsp + 0x68]
xor r9d, r9d
lea r10, [0x180000000]
lea r15d, [r9 + 0x30]
jmp 0x180011410
mov rdx, qword [rbp + 0xd8]
cmp rdx, 8
jb case.0x18001142b.181
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800122aa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800122aa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18003c3f4
jmp case.0x18001142b.181
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.180021440
int3