Function at 0x180057ec0
Capabilities:
Execute command
Hash data with crc32

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xc0
movss xmm1, dword [0x1803f84bc]
xor ecx, ecx
call fcn.180065560
mov rcx, qword [0x1803c27a8]
lea rdx, [rbp + 0x67]
mov dword [rbp + 0x67], 0x43870000
mov dword [rbp + 0x6b], 0x43a00000
mov rax, qword [rcx + 0x3eb0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3eb0]
lea rcx, [0x180261a5b]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x13d], 1
addss xmm1, dword [0x180268218]
addss xmm0, dword [0x180268228]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.18006d1f0
movzx eax, word [0x180265ef8]
lea rdx, [rbp - 0x29]
xorps xmm0, xmm0
mov word [rbp - 1], ax
movzx eax, byte [0x180265efa]
lea rcx, [rbp - 9]
xor r14d, r14d
mov byte [rbp + 1], al
movdqu xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], r14
movsd xmm0, qword [str.C:_Dast.tt_]
movsd qword [rbp - 9], xmm0
mov dword [rbp + 3], r14d
mov qword [rbp + 7], 0xb
mov qword [rbp + 0xf], 0xf
mov byte [rbp + 2], r14b
call fcn.180045f70
mov rdx, qword [rbp + 0xf]
cmp rdx, 0x10
jb 0x180057ffc
mov rcx, qword [rbp - 9]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180057ff7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005820d
call fcn.18010785c
lea rdx, [rbp - 0x49]
call fcn.1800463b0
mov r15, qword [rbp - 0x49]
lea r13, [0x1803c09f0]
mov r12, qword [rbp - 0x41]
mov rsi, r15
cmp r15, r12
je 0x180058188
cmp qword [rsi + 0x18], 0x10
xorps xmm0, xmm0
mov rdi, qword [rsi + 0x10]
mov ecx, 0x16
mov qword [rbp + 7], r14
movabs rax, 0x7fffffffffffffff
mov qword [rbp + 0xf], r14
mov r14, rsi
movups xmmword [rbp - 9], xmm0
jb 0x18005804f
mov r14, qword [rsi]
cmp rdi, rax
ja 0x180058a3a
cmp rdi, 0x10
jae 0x180058075
mov ebx, 0xf
mov qword [rbp + 7], rdi
mov qword [rbp + 0xf], rbx
movups xmm0, xmmword [r14]
movups xmmword [rbp - 9], xmm0
jmp 0x1800580c2
mov rbx, rdi
mov qword [rbp + 0xf], 0xf
or rbx, 0xf
cmp rbx, rax
jbe 0x18005808e
mov rbx, rax
jmp 0x180058096
cmp rbx, 0x16
cmovb rbx, rcx
lea rdx, [rbx + 1]
call fcn.1800070b0
lea r8, [rdi + 1]
mov qword [rbp - 9], rax
mov rdx, r14
mov qword [rbp + 7], rdi
mov rcx, rax
mov qword [rbp + 0xf], rbx
call sub.VCRUNTIME140.dll_memcpy
mov rbx, qword [rbp + 0xf]
mov rdi, qword [rbp + 7]
cmp qword [0x1803c0a08], 0x10
lea rcx, [rbp - 9]
mov r14, qword [rbp - 9]
mov rdx, r13
cmovae rdx, qword [0x1803c09f0]
cmp rbx, 0x10
mov qword [rbp + 0x67], 0
cmovae rcx, r14
cmp rdi, qword [0x1803c0a00]
jne 0x180058106
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x180058106
mov dl, 1
jmp 0x180058108
xor edx, edx
cmp rbx, 0x10
lea rcx, [rbp - 9]
lea r9, [rbp + 0x67]
cmovae rcx, r14
call fcn.180093f50
test al, al
je 0x18005813b
cmp qword [rbp + 0xf], 0x10
lea rdx, [rbp - 9]
mov r8, qword [rbp + 7]
mov rcx, r13
cmovae rdx, qword [rbp - 9]
call fcn.18005c0f0
mov rdx, qword [rbp + 0xf]
cmp rdx, 0x10
jb 0x180058172
mov rcx, qword [rbp - 9]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005816d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180058181
call fcn.18010785c
add rsi, 0x20
xor r14d, r14d
cmp rsi, r12
jmp 0x18005801a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test r15, r15
je 0x1800581cc
mov rdx, r12
mov rcx, r15
call fcn.18005d880
mov rdx, qword [rbp - 0x39]
mov rax, r15
sub rdx, r15
and rdx, 0xffffffffffffffe0
cmp rdx, 0x1000
jb 0x1800581c4
mov r15, qword [r15 - 8]
add rdx, 0x27
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005820d
mov rcx, r15
call fcn.18010785c
mov rbx, qword [rbp - 0x29]
test rbx, rbx
je 0x18005821c
mov rdx, qword [rbp - 0x21]
mov rcx, rbx
call fcn.18005d880
mov rdx, qword [rbp - 0x19]
mov rax, rbx
sub rdx, rbx
and rdx, 0xffffffffffffffe0
cmp rdx, 0x1000
jb 0x180058214
mov rbx, qword [rbx - 8]
add rdx, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180058214
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.18010785c
call fcn.18006d290
mov r10, qword [0x1803c27a8]
mov rcx, qword [r10 + 0x3eb0]
cmp byte [rcx + 0xb3], 0
jne 0x180058283
movss xmm0, dword [rcx + 0x104]
movss xmm1, dword [rcx + 0x100]
addss xmm1, dword [0x180268188]
movss dword [rcx + 0xf8], xmm1
movss dword [rcx + 0xfc], xmm0
movsd xmm0, qword [rcx + 0x128]
mov eax, dword [rcx + 0x138]
movsd qword [rcx + 0x120], xmm0
mov dword [rcx + 0x134], eax
mov byte [rcx + 0x13c], 1
mov rax, qword [r10 + 0x3eb0]
lea r8, [0x180266271]
mov dword [rbp + 0x67], 0x43898000
lea r11, [0x18025d2e0]
mov dword [rbp + 0x6b], 0x43a00000
mov dl, 0x20
mov byte [rax + 0xb0], 1
mov rax, qword [r10 + 0x3eb0]
movsxd rcx, dword [rax + 0xe8]
mov rax, qword [rax + 0xf0]
mov r9d, dword [rax + rcx*4 - 4]
not r9d
mov ebx, r9d
nop
cmp dl, 0x23
jne 0x1800582e2
cmp byte [r8], dl
jne 0x1800582e2
cmp byte [r8 + 1], dl
cmove ebx, r9d
movzx ecx, bl
movzx eax, dl
movzx edx, byte [r8]
xor rcx, rax
shr ebx, 8
inc r8
xor ebx, dword [r11 + rcx*4]
test dl, dl
jne 0x1800582d0
not ebx
cmp dword [r10 + 0x3ef8], ebx
jne 0x18005831b
lea r8, [0x180266270]
mov edx, 0xb
mov ecx, ebx
call fcn.18007a880
lea r8, [rbp + 0x67]
mov dword [rsp + 0x20], r14d
mov edx, ebx
lea rcx, [0x180266270]
call fcn.18006c050
mov rcx, qword [0x1803c27a8]
mov rax, qword [rcx + 0x3eb0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3eb0]
cmp byte [rax + 0xb3], 0
jne 0x180058370
movss xmm1, dword [0x18026831c]
lea rcx, [rbp + 0x67]
mov qword [rbp + 0x67], 0
call fcn.180073540
cmp byte [0x1803c280f], 0
lea rdi, [0x180265f20]
lea rbx, str.Apply
mov qword [rbp + 0x67], 0
lea rdx, [rbp + 0x67]
jne 0x1800583c5
cmp byte [0x1803c2557], 0
lea rax, [0x180265f00]
lea rcx, str.Save
cmovne rcx, rax
call fcn.180087b90
test al, al
je 0x18005847c
mov byte [0x1803c280f], 1
jmp 0x18005847c
cmp byte [0x1803c2557], 0
mov rcx, rbx
cmovne rcx, rdi
call fcn.180087b90
test al, al
je 0x18005847c
mov rdx, r13
lea rcx, [rbp + 0x17]
call fcn.18005bb40
mov rcx, rax
call fcn.180020170
mov eax, dword [str.Saved]
lea r9, [rbp - 0x49]
movdqa xmm1, xmmword [0x180268490]
lea r8, [rbp - 0x29]
movaps xmm3, xmmword [0x1802687f0]
lea rdx, [rbp - 9]
movaps xmm2, xmmword [0x180268790]
lea rcx, [rbp + 0x17]
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x49], xmm3
movups xmmword [rbp - 9], xmm0
mov dword [rbp - 9], eax
movzx eax, byte [0x180265f40]
movups xmmword [rbp + 0x17], xmm0
mov byte [rbp - 5], al
mov eax, dword [str.Config]
mov dword [rbp + 0x17], eax
movzx eax, word [0x1802646ec]
movdqu xmmword [rbp + 7], xmm1
mov word [rbp + 0x1b], ax
movdqa xmm1, xmmword [0x1802684a0]
mov byte [rbp - 4], 0
movdqu xmmword [rbp + 0x27], xmm1
mov byte [rbp + 0x1d], 0
movdqa xmmword [rbp - 0x29], xmm2
call fcn.180025c50
mov byte [0x1803c280f], 0
mov rax, qword [0x1803c27a8]
mov rcx, qword [rax + 0x3eb0]
cmp byte [rcx + 0xb3], 0
jne 0x1800584de
movss xmm1, dword [rax + 0x382c]
movss xmm0, dword [rcx + 0x104]
addss xmm1, dword [rcx + 0x100]
movss dword [rcx + 0xf8], xmm1
movss dword [rcx + 0xfc], xmm0
movsd xmm0, qword [rcx + 0x128]
mov eax, dword [rcx + 0x138]
movsd qword [rcx + 0x120], xmm0
mov dword [rcx + 0x134], eax
mov byte [rcx + 0x13c], 1
cmp byte [0x1803c386c], 0
lea rdx, [rbp + 0x67]
mov qword [rbp + 0x67], 0
jne 0x180058525
cmp byte [0x1803c2557], 0
lea rax, [0x180265f48]
lea rcx, str.Load
cmovne rcx, rax
call fcn.180087b90
test al, al
je 0x1800585d5
mov byte [0x1803c386c], 1
jmp 0x1800585d5
cmp byte [0x1803c2557], 0
mov rcx, rbx
cmovne rcx, rdi
call fcn.180087b90
test al, al
je 0x1800585d5
mov rdx, r13
lea rcx, [rbp + 0x17]
call fcn.18005bb40
mov rcx, rax
call fcn.180022af0
mov eax, dword [str.Loaded]
lea r9, [rbp - 0x29]
movdqa xmm1, xmmword [0x1802684a0]
lea r8, [rbp - 0x49]
movaps xmm3, xmmword [0x1802687f0]
lea rdx, [rbp + 0x17]
movaps xmm2, xmmword [0x180268790]
lea rcx, [rbp - 9]
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x29], xmm3
movups xmmword [rbp + 0x17], xmm0
mov dword [rbp + 0x17], eax
movzx eax, word [0x180265f68]
movups xmmword [rbp - 9], xmm0
mov word [rbp + 0x1b], ax
mov eax, dword [str.Config]
mov dword [rbp - 9], eax
movzx eax, word [0x1802646ec]
mov word [rbp - 5], ax
movdqu xmmword [rbp + 0x27], xmm1
mov byte [rbp + 0x1d], 0
movdqu xmmword [rbp + 7], xmm1
mov byte [rbp - 3], 0
movdqa xmmword [rbp - 0x49], xmm2
call fcn.180025c50
mov byte [0x1803c386c], 0
mov rax, qword [0x1803c27a8]
mov rcx, qword [rax + 0x3eb0]
cmp byte [rcx + 0xb3], 0
jne 0x180058637
movss xmm1, dword [rax + 0x382c]
movss xmm0, dword [rcx + 0x104]
addss xmm1, dword [rcx + 0x100]
movss dword [rcx + 0xf8], xmm1
movss dword [rcx + 0xfc], xmm0
movsd xmm0, qword [rcx + 0x128]
mov eax, dword [rcx + 0x138]
movsd qword [rcx + 0x120], xmm0
mov dword [rcx + 0x134], eax
mov byte [rcx + 0x13c], 1
cmp byte [0x1803c279b], 0
lea rdx, [rbp + 0x67]
mov qword [rbp + 0x67], 0
jne 0x18005867e
cmp byte [0x1803c2557], 0
lea rax, [0x180265f70]
lea rcx, str.Remove
cmovne rcx, rax
call fcn.180087b90
test al, al
je 0x180058749
mov byte [0x1803c279b], 1
jmp 0x180058749
cmp byte [0x1803c2557], 0
cmovne rbx, rdi
mov rcx, rbx
call fcn.180087b90
test al, al
je 0x180058749
cmp qword [0x1803c0a08], 0x10
cmovae r13, qword [0x1803c09f0]
mov rdx, r13
call fcn.180046db0
mov rax, qword [str.Removed]
lea r9, [rbp - 0x29]
movdqa xmm0, xmmword [0x180268440]
lea r8, [rbp - 0x49]
movaps xmm3, xmmword [0x1802687f0]
lea rdx, [rbp - 9]
movaps xmm2, xmmword [0x180268790]
lea rcx, [rbp + 0x17]
movdqa xmm1, xmmword [0x1802684a0]
mov dword [rbp - 9], eax
movzx eax, word [0x180265f8c]
mov word [rbp - 5], ax
movzx eax, byte [0x180265f8e]
mov byte [rbp - 3], al
mov eax, dword [str.Config]
movdqu xmmword [rbp - 1], xmm0
mov qword [rbp + 0xf], 0xf
xorps xmm0, xmm0
mov byte [rbp - 2], 0
movups xmmword [rbp + 0x17], xmm0
mov dword [rbp + 0x17], eax
movzx eax, word [0x1802646ec]
mov word [rbp + 0x1b], ax
movdqu xmmword [rbp + 0x27], xmm1
mov byte [rbp + 0x1d], 0
movdqa xmmword [rbp - 0x29], xmm3
movdqa xmmword [rbp - 0x49], xmm2
call fcn.180025c50
mov byte [0x1803c279b], 0
mov rax, qword [0x1803c27a8]
mov rcx, qword [rax + 0x3eb0]
cmp byte [rcx + 0xb3], 0
jne 0x1800587ab
movss xmm1, dword [rax + 0x382c]
movss xmm0, dword [rcx + 0x104]
addss xmm1, dword [rcx + 0x100]
movss dword [rcx + 0xf8], xmm1
movss dword [rcx + 0xfc], xmm0
movsd xmm0, qword [rcx + 0x128]
mov eax, dword [rcx + 0x138]
movsd qword [rcx + 0x120], xmm0
mov dword [rcx + 0x134], eax
mov byte [rcx + 0x13c], 1
cmp byte [0x1803c2557], 0
lea rax, [0x180265f90]
lea rcx, str.Create
mov qword [rbp + 0x67], 0
cmovne rcx, rax
lea rdx, [rbp + 0x67]
call fcn.180087b90
test al, al
je 0x1800587e2
mov byte [0x1803c2565], 1
jmp 0x1800587ef
cmp byte [0x1803c2565], 0
je 0x18005892c
mov qword [rsp + 0x38], r14
lea rax, [rbp + 0x67]
mov qword [rsp + 0x30], r14
lea rbx, [0x1803be5c0]
mov dword [rsp + 0x28], r14d
lea rcx, [0x180261a5b]
mov r8, rbx
mov qword [rsp + 0x20], rax
mov r9d, pe_nt_image_headers64
mov qword [rbp + 0x67], 0
xor edx, edx
call fcn.18008cfc0
cmp byte [0x1803c2557], 0
lea rax, [0x180265fa8]
lea rcx, str.Accept
mov qword [rbp + 0x67], 0
cmovne rcx, rax
lea rdx, [rbp + 0x67]
call fcn.180087b90
test al, al
je 0x18005892c
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x17], xmm0
mov r8, 0xffffffffffffffff
movdqu xmmword [rbp + 0x27], xmm1
inc r8
cmp byte [rbx + r8], 0
jne 0x180058875
mov rdx, rbx
lea rcx, [rbp + 0x17]
call fcn.180006ff0
lea rcx, [rbp + 0x17]
call fcn.180020170
mov rax, qword [str.Created]
lea r9, [rbp - 0x29]
movdqa xmm0, xmmword [0x180268440]
lea r8, [rbp - 0x49]
movaps xmm3, xmmword [0x1802687f0]
lea rdx, [rbp - 9]
movaps xmm2, xmmword [0x180268790]
lea rcx, [rbp + 0x17]
movdqa xmm1, xmmword [0x1802684a0]
mov dword [rbp - 9], eax
movzx eax, word [0x180265fcc]
mov word [rbp - 5], ax
movzx eax, byte [0x180265fce]
mov byte [rbp - 3], al
mov eax, dword [str.Config]
movdqu xmmword [rbp - 1], xmm0
mov qword [rbp + 0xf], 0xf
xorps xmm0, xmm0
mov byte [rbp - 2], 0
movups xmmword [rbp + 0x17], xmm0
mov dword [rbp + 0x17], eax
movzx eax, word [0x1802646ec]
mov word [rbp + 0x1b], ax
movdqu xmmword [rbp + 0x27], xmm1
mov byte [rbp + 0x1d], 0
movdqa xmmword [rbp - 0x29], xmm3
movdqa xmmword [rbp - 0x49], xmm2
call fcn.180025c50
mov byte [0x1803c2565], 0
cmp byte [0x1803c2557], 0
lea rax, [0x180265fd0]
lea rcx, str.Open_Folder
mov qword [rbp + 0x67], 0
cmovne rcx, rax
lea rdx, [rbp + 0x67]
call fcn.180087b90
test al, al
je 0x180058967
lea rcx, str.start_C:Dast.tt
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp byte [0x1803c2557], 0
lea rax, [0x180266010]
lea rcx, str.Watermark
cmovne rcx, rax
lea rdx, [0x180280066]
call fcn.180051f70
cmp byte [0x1803c2557], 0
lea rax, [0x180266038]
lea rcx, str.Unload_Cheat
mov qword [rbp + 0x67], 0
cmovne rcx, rax
lea rdx, [rbp + 0x67]
call fcn.180087b90
test al, al
je 0x180058a0b
mov ecx, 0xbb8
mov byte [0x1803c2733], 0
mov byte [0x1803c274e], 0
mov byte [0x1803c2749], 0
mov dword [0x1803c2724], 0x3f800000
mov dword [0x1803be6f4], 0
mov dword [0x1803be6e8], 0x3f800000
mov byte [0x1803c2722], 1
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.180006dc0
mov byte [0x1803c269c], 1
call fcn.18006d290
mov ecx, 1
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
jmp fcn.1800655e0
call fcn.180006be0
int3