Function at 0x18000cbe0
Capabilities:
Connect pipe
Create pipe
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x6e0]
sub rsp, 0x7e0
movaps xmmword [rsp + 0x7d0], xmm6
mov rax, qword [0x18009da48]
xor rax, rsp
mov qword [rbp + 0x6c0], rax
mov rdi, r8
mov r13d, edx
mov dword [rsp + 0x5c], edx
mov r15, rcx
mov qword [rsp + 0x78], rcx
mov ebx, edx
lea esi, [rdx + 0x473]
cmp edx, esi
jae 0x18000cf51
lea r12, [0x180000000]
movabs rdx, 0x760073006d
mov r14d, dword [rsp + 0x74]
mov eax, dword [rsp + 0x5c]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x50], rax
mov r13d, 0x69
nop dword [rax]
movabs rcx, 0x5c002e005c
cmp ebx, 0x189
ja 0x18000ce23
je 0x18000ce07
lea eax, [rbx - 0x7b]
cmp eax, 0xd5
ja case.0x18000ccae.133
movzx eax, byte [r12 + rax + 0xdc54]
mov ecx, dword [r12 + rax*4 + 0xdc28]
add rcx, r12
jmp rcx
mov r8d, 0xa
lea rdx, [rbp + 0x5a]
lea ecx, [r8 - 9]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itow]
mov r8d, 0xa
lea rdx, [rbp + 0x5c]
lea ecx, [r8 + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__ultow]
movabs rdx, 0x760073006d
jmp case.0x18000ccae.133
movsd xmm0, qword [r15]
cvttsd2si r14, xmm0
mulsd xmm0, qword [0x1800961a0]
cvttsd2si rcx, xmm0
mov eax, 0x51eb851f
mul ecx
shr edx, 5
imul eax, edx, 0x64
sub ecx, eax
mov qword [rsp + 0x48], rcx
movabs rdx, 0x760073006d
jmp 0x18000cf3a
lea rdx, str._s_SetVirtualDiskManager_ServiceInstanceContent_Vim__QAEXPAVMoRef_Vmomi___Z
mov rcx, r15
call fcn.180082350
movabs rdx, 0x760073006d
jmp case.0x18000ccae.133
mov r8, rdi
lea rdx, str._well_known_klasses_SystemDictionary::Object_klass_knum_
mov rcx, r15
call fcn.180082350
movabs rdx, 0x760073006d
jmp case.0x18000ccae.133
mov r8d, 1
lea rdx, [0x180094344]
lea rcx, [rbp + 0x50]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
movabs rdx, 0x760073006d
jmp case.0x18000ccae.133
lea rdx, [0x180093af4]
mov rcx, r15
call fcn.180082350
lea rdx, str._s___d_:_Error__profile__s_has_been_seen_before_with_different_flags.
jmp 0x18000cd28
lea rcx, [rbp + 0x50]
sub rcx, 2
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x18000cda6
mov eax, dword [0x18009396c]
mov dword [rcx], eax
jmp case.0x18000ccae.133
lea rdx, str.The_element_type___1__must_be_terminated_by_the_matching_end_tag_____2__.
mov rcx, r15
call fcn.180082350
lea rdx, str.null_field_field_in_FormFieldDataPredictions
mov rcx, r15
call fcn.180082350
lea rdx, str.PLT.BeginToFinish_NormalLoad_ExtensionWebRequest
jmp 0x18000cd28
mov qword [rbp + 0x50], rdx
jmp case.0x18000ccae.133
movsd xmm0, qword [r15]
addsd xmm0, qword [0x180096188]
movsd qword [r15], xmm0
jmp case.0x18000ccae.133
mov dword [rbp + 0x68], 0x5c
mov qword [rbp + 0x6a], rcx
mov dword [rbp + 0x70], 0x70
mov rcx, qword [rsp + 0x48]
jmp 0x18000cf3f
cmp ebx, 0x252
ja 0x18000cefc
je 0x18000ced9
mov eax, ebx
sub eax, 0x193
je 0x18000ce9e
sub eax, 0x39
je 0x18000ce74
mov rcx, qword [rsp + 0x48]
cmp eax, 0x43
jne 0x18000cf3a
mov dword [rbp + 0x7c], 0x65
mov eax, dword [0x180094464]
mov dword [rbp + 0x7e], eax
movzx eax, word [0x180094468]
mov word [rbp + 0x82], ax
jmp 0x18000cf3a
mov dword [rbp + 0x72], r13d
mov r8d, 4
lea rdx, str.pe_t
lea rcx, [rbp + 0x68]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
movabs rdx, 0x760073006d
jmp case.0x18000ccae.133
mov r8d, 0xa
mov rdx, rdi
mov ecx, r14d
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itoa]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdi + rax], 0
jne 0x18000ceb7
add rax, rdi
mov qword [rsp + 0x50], rax
mov rcx, qword [rsp + 0x48]
movabs rdx, 0x760073006d
jmp 0x18000cf3f
mov r8d, 3
lea rdx, [0x1800942a8]
lea rcx, [rbp + 0x68]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
movabs rdx, 0x760073006d
jmp case.0x18000ccae.133
mov eax, ebx
sub eax, 0x295
je 0x18000cf2b
mov rcx, qword [rsp + 0x48]
cmp eax, 0x43
jne 0x18000cf3a
mov eax, dword [0x18009433c]
mov dword [rbp + 0x8a], eax
movzx eax, word [0x180094340]
mov word [rbp + 0x8e], ax
jmp 0x18000cf3a
mov dword [rbp + 0x88], PathMakeUniqueName
mov rcx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x50]
add ebx, 0x43
cmp ebx, esi
jb 0x18000cc70
mov r13d, dword [rsp + 0x5c]
jmp 0x18000cf64
mov ecx, dword [rsp + 0x5c]
mov qword [rsp + 0x48], rcx
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x50], rax
mov edi, r13d
mov dword [rsp + 0x64], r13d
imul ebx, r13d, 0x6ae
mov dword [rsp + 0x74], ebx
cmp r13d, ebx
movzx ebx, byte [rsp + 0x42]
ja 0x18000d237
xor edx, edx
lea r12d, [rdx + 0x61]
lea rsi, str.ssleay32
lea r14d, [rdx + 0x45]
movabs r9, 0x7ffffffffffffffe
mov r10d, 0x5f72
lea r11d, [rdx + 0x6f]
lea r8d, [rdx + 0x53]
mov byte [rsp + 0x42], bl
mov r13, qword [rbp - 0x58]
nop word [rax + rax]
cmp edi, 0x116cf
ja 0x18000d159
je 0x18000d142
cmp edi, 0x64e0
ja 0x18000d0e5
je 0x18000d0cc
cmp edi, 0x7d
je 0x18000d069
cmp edi, 0x10d
je 0x18000d059
cmp edi, 0x2ee0
je 0x18000d01a
cmp edi, 0x5d43
jne 0x18000dbdf
mov dword [rbp + 0x3c], 0x650062
mov word [rbp + 0x40], r12w
jmp 0x18000dbdf
mov dword [rbp + 0x9c], 0x66
lea rcx, [rbp + 0x68]
sub rcx, 2
nop dword [rax]
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x18000d030
mov eax, dword [0x18009446c]
mov dword [rcx], eax
movzx eax, word [0x180094470]
mov word [rcx + 4], ax
mov dword [rbp + 0x38], 0x69006c
jmp 0x18000dbda
mov byte [rax], PathMakeUniqueName
inc rax
mov qword [rsp + 0x50], rax
jmp 0x18000dbdf
mov r8d, 2
lea rdx, [0x18009448c]
lea rcx, [rbp + 0x8e]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
movsd xmm0, qword [0x180094490]
movsd qword [rbp + 0x90], xmm0
mov eax, dword [0x180094498]
mov dword [rbp + 0x98], eax
movzx eax, word [0x18009449c]
mov word [rbp + 0x9c], ax
xor edx, edx
lea r8d, [rdx + 0x53]
movabs r9, 0x7ffffffffffffffe
mov r10d, 0x5f72
lea r11d, [rdx + 0x6f]
jmp 0x18000dbda
cmp ecx, 0xa
jae 0x18000dbdf
mov byte [rax], 0x30
inc rax
mov qword [rsp + 0x50], rax
jmp 0x18000dbdf
cmp edi, 0x8ba6
je 0x18000d136
cmp edi, 0xba09
je 0x18000d128
cmp edi, 0xc8b3
je 0x18000d117
cmp edi, 0xe86c
jne 0x18000dbdf
mov word [rbp + 0x48], dx
mov byte [rsp + 0x41], 1
jmp 0x18000dbdf
mov r8d, 0xa
mov rdx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itoa]
jmp 0x18000d0ad
mov eax, 0x32
mov word [rbp + 0x46], ax
jmp 0x18000dbdf
mov dword [rbp + 0x42], 0x330079
jmp 0x18000dbdf
movups xmm0, xmmword [rbp]
movups xmmword [rbp + 0x20], xmm0
movsd xmm1, qword [rbp + 0x10]
movsd qword [rbp + 0x30], xmm1
jmp 0x18000dbdf
cmp edi, 0x1febe
ja 0x18000d217
je 0x18000d1ff
cmp edi, 0x14532
je 0x18000d1ea
cmp edi, 0x17395
je 0x18000d1d3
cmp edi, 0x1a1f8
je 0x18000d198
cmp edi, 0x1d05b
jne 0x18000dbdf
mov qword [rbp + 0x30], rsi
jmp 0x18000dbdf
mov qword [rsp + 0x38], rdx
mov dword [rsp + 0x30], edx
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 0x200
mov edx, 3
mov r9d, 0xff
lea r8d, [rdx + 3]
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov qword [rbp - 0x60], rax
jmp 0x18000d0ad
lea rax, [rbp + 0x68]
mov qword [rbp - 0x50], rax
lea rdx, [rbp + 0x38]
mov qword [rbp + 0x28], rdx
xor edx, edx
jmp 0x18000dbdf
mov qword [rbp - 0x60], 0xffffffffffffffff
lea rax, [rbp + 0x50]
mov qword [rbp + 0x20], rax
jmp 0x18000dbdf
mov ecx, edx
movzx eax, byte [rsp + 0x41]
cmp qword [rbp - 0x60], 0xffffffffffffffff
cmovne ecx, eax
mov byte [rsp + 0x41], cl
jmp 0x18000dbda
cmp edi, 0x22d21
je 0x18000d373
cmp edi, 0x25b84
je 0x18000d26c
cmp edi, 0x289e7
jne 0x18000dbdf
movzx eax, bl
mov rcx, qword [rbp + 0x6c0]
xor rcx, rsp
call fcn.180083f10
mov rbx, qword [rsp + 0x828]
movaps xmm6, xmmword [rsp + 0x7d0]
add rsp, 0x7e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
movzx esi, byte [rsp + 0x41]
test sil, sil
je 0x18000d341
mov edi, r14d
mov r15, qword [rbp - 0x60]
cmp edi, 0x45
je 0x18000d31e
cmp edi, 0x1cd7
je 0x18000d319
cmp edi, 0x3969
jne 0x18000d321
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
cmp r15, 0xffffffffffffffff
je 0x18000d2c3
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor sil, sil
xor edx, edx
jmp 0x18000d321
test sil, sil
je 0x18000d321
mov ebx, 0x82
nop dword [rax]
mov eax, ebx
sub eax, 0x81
je 0x18000d2fe
cmp eax, 1
jne 0x18000d30b
lea rdx, [rbp - 0x40]
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
jmp 0x18000d30b
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_CloseHandle]
dec ebx
cmp ebx, 0x80
ja 0x18000d2d0
xor edx, edx
jmp 0x18000d321
mov dword [rbp - 0x2c], edx
jmp 0x18000d321
mov dword [rbp - 0x30], edx
add edi, 0x1c92
cmp edi, 0x55b6
jbe 0x18000d281
mov byte [rsp + 0x41], sil
mov r15, qword [rsp + 0x78]
mov edi, dword [rsp + 0x64]
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EnumSystemCodePagesA]
mov bl, 1
mov byte [rsp + 0x42], bl
xor edx, edx
lea r8d, [rdx + 0x53]
movabs r9, 0x7ffffffffffffffe
mov r10d, 0x5f72
lea r11d, [rdx + 0x6f]
jmp 0x18000dbd3
mov dword [rsp + 0x70], edx
mov rsi, rdx
mov qword [rbp - 0x80], rdx
nop
mov qword [rbp - 0x30], rdx
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], dx
mov r12d, 0x22
mov dword [rsp + 0x58], r12d
nop dword [rax + rax]
cmp r12d, 0xae4
ja 0x18000d6c3
je 0x18000d684
cmp r12d, 0x22
je 0x18000d520
cmp r12d, 0x3b8
je 0x18000d4f2
cmp r12d, 0x74e
jne 0x18000db13
mov rsi, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x28]
cmp rsi, rcx
jae 0x18000d40d
lea rax, [rsi + 1]
mov qword [rbp - 0x30], rax
lea rax, [rbp - 0x40]
cmp rcx, 8
cmovae rax, qword [rbp - 0x40]
mov dword [rax + rsi*2], PathMakeUniqueName
mov qword [rbp - 0x58], rdx
mov rsi, qword [rbp - 0x80]
jmp 0x18000db13
mov rax, r9
sub rax, rsi
cmp rax, 1
jb 0x18000dc1f
lea r12, [rsi + 1]
mov r15, qword [rbp - 0x28]
mov rdi, r12
or rdi, 7
cmp rdi, r9
jbe 0x18000d436
mov rdi, r9
jmp 0x18000d457
mov rcx, r15
shr rcx, 1
mov rax, r9
sub rax, rcx
cmp r15, rax
jbe 0x18000d44c
mov rdi, r9
jmp 0x18000d457
lea rax, [r15 + rcx]
cmp rdi, rax
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp - 0x40]
call fcn.1800213c0
mov r14, rax
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], rdi
add rsi, rsi
mov r8, rsi
mov rcx, rax
cmp r15, 8
jb 0x18000d4c9
mov rdi, qword [rbp - 0x40]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov dword [rsi + r14], PathMakeUniqueName
lea rdx, [r15*2 + 2]
cmp rdx, 0x1000
jb 0x18000d4bf
add rdx, 0x27
mov rcx, qword [rdi - 8]
sub rdi, rcx
lea rax, [rdi - 8]
cmp rax, 0x1f
ja 0x18000dc05
mov rdi, rcx
mov rcx, rdi
call fcn.180083768
jmp 0x18000d4da
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcpy
mov dword [rsi + r14], PathMakeUniqueName
mov r12d, dword [rsp + 0x58]
mov qword [rbp - 0x40], r14
xor edx, edx
mov qword [rbp - 0x58], rdx
mov rsi, qword [rbp - 0x80]
jmp 0x18000db13
mov rdx, qword [rbp + rsi*8 + 0x20]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x18000d500
lea rcx, [rbp - 0x40]
call fcn.1800214c0
mov dword [rbp - 0x68], 0xffffffff
jmp 0x18000db11
mov rsi, qword [r15 + 0x10]
mov rdi, r15
cmp qword [r15 + 0x18], 8
jb 0x18000d531
mov rdi, qword [r15]
cmp rsi, 8
jae 0x18000d54a
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x20], xmm0
mov r15d, 7
mov r13, qword [rbp - 0x20]
jmp 0x18000d589
mov r15, rsi
or r15, 7
cmp r15, r9
cmova r15, r9
lea rdx, [r15 + 1]
lea rcx, [rbp - 0x20]
call fcn.1800213c0
mov r13, rax
mov qword [rbp - 0x20], rax
lea r8, [rsi*2 + 2]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
movabs r9, 0x7ffffffffffffffe
mov qword [rbp - 8], r15
mov qword [rbp - 0x10], rsi
lea r14, [rbp - 0x20]
cmp r15, 8
cmovae r14, r13
cmp rsi, 8
jae 0x18000d5b1
movups xmm6, xmmword [r14]
mov qword [rbp + 0x18], 7
jmp 0x18000d5eb
mov rdi, rsi
or rdi, 7
cmp rdi, r9
cmova rdi, r9
lea rdx, [rdi + 1]
lea rcx, [rbp]
call fcn.1800213c0
mov qword [rbp], rax
lea r8, [rsi*2 + 2]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x18], rdi
movups xmm6, xmmword [rbp]
mov qword [rbp + 0x10], rsi
mov rcx, qword [rbp - 0x28]
cmp rcx, 8
jb 0x18000d62f
lea rdx, [rcx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000d62a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000dbfe
call fcn.180083768
movups xmmword [rbp - 0x40], xmm6
movups xmm0, xmmword [rbp + 0x10]
movups xmmword [rbp - 0x30], xmm0
cmp r15, 8
jb 0x18000d676
lea rdx, [r15*2 + 2]
mov rax, r13
cmp rdx, 0x1000
jb 0x18000d66e
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000dc05
mov rcx, r13
call fcn.180083768
xor edx, edx
mov r13d, edx
mov rsi, qword [rbp - 0x80]
jmp 0x18000db13
mov r8d, 3
lea rdx, [0x180094180]
lea rcx, [rbp - 0x40]
call fcn.1800214c0
mov dword [rbp - 0x6c], 0x104
lea rcx, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rcx, qword [rbp - 0x40]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov qword [rbp - 0x48], rax
jmp 0x18000db11
cmp r12d, 0xe7a
je 0x18000daf0
cmp r12d, 0x1210
jne 0x18000db13
cmp qword [rbp - 0x48], 0
jne 0x18000db13
mov r14d, 0x43
mov dword [rsp + 0x58], r14d
cmp r14d, 0x1fbff
ja 0x18000d813
je 0x18000d802
cmp r14d, 0xfe21
ja 0x18000d794
je 0x18000d786
cmp r14d, 0x43
je 0x18000d771
cmp r14d, 0x3309
je 0x18000d763
cmp r14d, 0x65cf
je 0x18000d757
cmp r14d, 0x9895
je 0x18000d74d
cmp r14d, 0xcb5b
jne 0x18000dad1
mov word [rbp - 0x15], r10w
jmp 0x18000dad1
mov word [rbp - 0x16], r11w
jmp 0x18000dad1
mov dword [rbp - 0x1a], 0x74617475
jmp 0x18000dad1
mov eax, 0x6d5f
mov word [rbp - 0x1c], ax
jmp 0x18000dad1
mov dword [rbp - 0x20], 0x7a7566
mov eax, 0x7a
mov word [rbp - 0x1d], ax
jmp 0x18000dad1
mov eax, 0x73
mov word [rbp - 0x13], ax
jmp 0x18000dad1
cmp r14d, 0x130e7
je 0x18000d7f4
cmp r14d, 0x163ad
je 0x18000d7df
cmp r14d, 0x19673
je 0x18000d7d1
cmp r14d, 0x1c939
jne 0x18000dad1
mov eax, 0x69
mov word [rbp - 9], ax
mov dword [rbp - 8], 0x3e746e
jmp 0x18000dad1
mov eax, 0x3c20
mov word [rbp - 0xb], ax
jmp 0x18000dad1
mov dword [rbp - 0x10], 0x697372
mov eax, 0x7974
mov word [rbp - 0xd], ax
jmp 0x18000dad1
mov eax, 0x6170
mov word [rbp - 0x12], ax
jmp 0x18000dad1
mov word [rbp], r8w
mov dword [rbp + 1], 0x52554345
jmp 0x18000dad1
cmp r14d, 0x2f9dd
ja 0x18000d8b5
je 0x18000d89e
cmp r14d, 0x22ec5
je 0x18000d887
cmp r14d, 0x2618b
je 0x18000d86f
cmp r14d, 0x29451
je 0x18000d858
cmp r14d, 0x2c717
jne 0x18000dad1
mov eax, 0x52
mov word [rbp + 0x12], ax
jmp 0x18000dad1
mov eax, 0x45
mov word [rbp + 0x10], ax
mov eax, 0x5f
mov word [rbp + 0x11], ax
jmp 0x18000dad1
mov dword [rbp + 7], 0x494d5f59
mov dword [rbp + 0xb], 0x41425f4e
mov word [rbp + 0xf], r8w
jmp 0x18000dad1
mov eax, PathYetAnotherMakeUniqueName
mov word [rbp + 5], ax
mov eax, 0x54
mov word [rbp + 6], ax
jmp 0x18000dad1
mov eax, 0x4449
mov word [rbp + 0x13], ax
mov byte [rbp + 0x15], 0
mov byte [rsp + 0x40], 1
jmp 0x18000dad1
cmp r14d, 0x32ca3
je 0x18000da96
cmp r14d, 0x35f69
je 0x18000da7d
cmp r14d, 0x3922f
je 0x18000d92f
cmp r14d, 0x3c4f5
jne 0x18000dad1
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x18000dc11
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000dc0c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000dc0c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
movzx edi, byte [rsp + 0x40]
test dil, dil
je 0x18000da69
mov esi, 0x37
mov ebx, dword [rbp - 0x78]
mov r14d, dword [rbp - 0x74]
nop dword [rax]
cmp esi, 0x37
je 0x18000da25
cmp esi, 0x39
je 0x18000da04
cmp esi, 0x3b
jne 0x18000da4a
test dil, dil
je 0x18000da4a
mov edi, 0xb6
nop dword [rax]
mov eax, edi
sub eax, 0xb6
je 0x18000d9d6
sub eax, 1
je 0x18000d9a0
cmp eax, 1
jne 0x18000d9f0
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x18000d9ee
mov dword [rsp + 0x20], edx
mov r9d, dword [rsp + 0x60]
xor r8d, r8d
mov edx, ebx
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_LockFile]
xor eax, eax
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x60]
xor r8d, r8d
mov edx, ebx
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
jmp 0x18000d9ee
mov r9d, 2
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ebx, eax
xor edx, edx
inc edi
cmp edi, 0xb9
jb 0x18000d980
mov dword [rbp - 0x78], ebx
movzx edi, byte [rsp + 0x40]
jmp 0x18000da4a
test r14d, r14d
jne 0x18000da4a
cmp dword [rsp + 0x60], r14d
ja 0x18000da4a
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor dil, dil
mov byte [rsp + 0x40], dil
jmp 0x18000da4a
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0x60]
mov r8d, 0x400
lea rdx, [rbp + 0x2c0]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov r14d, eax
add esi, 2
cmp esi, 0x3d
mov edx, 0
jb 0x18000d950
mov dword [rbp - 0x74], r14d
movzx ebx, byte [rsp + 0x42]
mov r14d, dword [rsp + 0x58]
mov r9d, dword [rbp - 0x70]
lea r8, [rbp - 0x20]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHPathPrepareForWriteA]
jmp 0x18000dabf
mov dword [rbp - 0x70], edx
mov ecx, edx
movzx eax, byte [rsp + 0x40]
cmp qword [rsp + 0x68], 0
cmovne ecx, eax
mov byte [rsp + 0x40], cl
jmp 0x18000dad1
lea rax, [rbp]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x100
xor r9d, r9d
xor edx, edx
lea rcx, [rdx - 1]
lea r8d, [r9 + 4]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov qword [rsp + 0x68], rax
mov r11d, 0x6f
mov r10d, 0x5f72
lea r8d, [r11 - 0x1c]
xor edx, edx
add r14d, 0x32c6
mov dword [rsp + 0x58], r14d
cmp r14d, 0x3f778
jbe 0x18000d6f3
mov rsi, qword [rbp - 0x80]
jmp 0x18000db13
mov r9d, dword [rbp - 0x6c]
lea r8, [rbp + 0xb0]
mov edx, dword [rbp - 0x68]
mov rcx, r13
call qword [sym.imp.SHELL32.dll_DragQueryFileW]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.SHELL32.dll_DragFinish]
xor edx, edx
add r12d, 0x396
mov dword [rsp + 0x58], r12d
cmp r12d, 0x1584
mov r15, qword [rsp + 0x78]
mov r8d, 0x53
movabs r9, 0x7ffffffffffffffe
mov r10d, 0x5f72
lea r11d, [r8 + 0x1c]
jbe 0x18000d3a0
mov rcx, qword [rbp - 0x28]
cmp rcx, 8
jb 0x18000db8b
lea rdx, [rcx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000db86
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000dc18
call fcn.180083768
mov eax, dword [rsp + 0x70]
inc eax
mov dword [rsp + 0x70], eax
inc rsi
mov qword [rbp - 0x80], rsi
cmp eax, 3
mov r15, qword [rsp + 0x78]
mov edx, 0
lea r8d, [rdx + 0x53]
movabs r9, 0x7ffffffffffffffe
mov r10d, 0x5f72
lea r11d, [rdx + 0x6f]
jb 0x18000d380
mov edi, dword [rsp + 0x64]
lea r14d, [rdx + 0x45]
lea r12d, [rdx + 0x61]
lea rsi, str.ssleay32
mov rcx, qword [rsp + 0x48]
imul eax, dword [rsp + 0x5c], 0x5f
add edi, eax
mov dword [rsp + 0x64], edi
cmp edi, dword [rsp + 0x74]
ja 0x18000d237
mov rax, qword [rsp + 0x50]
jmp 0x18000cfc0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.180083768
xor al, al
jmp 0x18000d23a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.18001fa20
int3