Function at 0x18011c800
Capabilities:
Check for software breakpoints
Inspect section memory permissions

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x40
xor ebp, ebp
mov rsi, r8
mov rbx, rcx
cmp edx, 0xd2
jg 0x18011d41c
je 0x18011d406
lea eax, [rdx - 3]
cmp eax, 0xcc
ja case.0x18011e773.20030
lea r8, [0x180000000]
cdqe
movzx eax, byte [r8 + rax + 0x11eb64]
mov ecx, dword [r8 + rax*4 + 0x11ea18]
add rcx, r8
jmp rcx
mov eax, dword [rsi]
cmp eax, 0xffffffff
jl 0x18011d5cf
mov dword [rbx + 0xb5c], eax
jmp case.0x18011c85f.91
movsxd rax, dword [rsi]
test eax, eax
js 0x18011d5cf
mov qword [rbx + 0xe08], rax
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x10000000
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe70]
btr eax, 0x1c
or ecx, eax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x20000000
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe70]
btr eax, 0x1d
or ecx, eax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x4000000
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe70]
btr eax, 0x1a
or ecx, eax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x200000
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe70]
btr eax, 0x15
or ecx, eax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
mov ecx, dword [rbx + 0xedc]
mov edx, ebp
cmp dword [rsi], edx
mov r8d, 0x8000
mov eax, dword [rbx + 0xe70]
cmovne edx, r8d
btr eax, 0xf
or edx, eax
mov eax, ecx
and eax, 0xffffffef
mov dword [rbx + 0xe70], edx
or ecx, 0x10
and edx, r8d
cmove ecx, eax
mov dword [rbx + 0xedc], ecx
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x1000000
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe70]
btr eax, 0x18
or ecx, eax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x10000
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe70]
btr eax, 0x10
or ecx, eax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
mov eax, dword [rbx + 0xe70]
mov ecx, ebp
cmp dword [rsi], ecx
mov edx, 0x2000000
cmovne ecx, edx
btr eax, 0x19
or ecx, eax
mov dword [rbx + 0xe70], ecx
test edx, ecx
je 0x18011c9db
btr ecx, 0x18
mov edi, 5
mov dword [rbx + 0xe70], ecx
mov dword [rbx + 0xa08], edi
jmp case.0x18011c85f.91
mov edi, 1
mov dword [rbx + 0xa08], edi
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x200
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe70]
btr eax, 9
or ecx, eax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
mov ecx, dword [rsi]
test ecx, ecx
je 0x18011ca44
sub ecx, 1
je 0x18011ca34
cmp ecx, 1
jne case.0x18011e773.20030
mov r14d, 2
mov dword [rbx + 0xb94], r14d
jmp case.0x18011c85f.91
mov edi, 1
mov dword [rbx + 0xb94], edi
jmp case.0x18011c85f.91
mov dword [rbx + 0xb94], ebp
jmp case.0x18011c85f.91
mov eax, dword [rsi]
cmp eax, 0x20c49b
ja 0x18011d5cf
imul eax, eax, 0x3e8
mov dword [rbx + 0x7a8], eax
jmp case.0x18011c85f.91
mov eax, dword [rsi]
test eax, eax
js 0x18011d5cf
mov dword [rbx + 0x7ac], eax
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x2000
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe70]
btr eax, 0xd
or ecx, eax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x1000
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe70]
btr eax, 0xc
or ecx, eax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
mov eax, dword [rsi]
cmp eax, 3
ja 0x18011d5cf
mov dword [rbx + 0xb90], eax
jmp case.0x18011c85f.91
mov eax, dword [rsi]
cmp eax, 2
ja 0x18011d5cf
mov dword [rbx + 0xba8], eax
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x800
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe70]
btr eax, 0xb
or ecx, eax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
mov eax, dword [rsi]
cmp eax, 3
ja 0x18011d5cf
mov dword [rbx + 0x9f8], eax
jmp case.0x18011c85f.91
movsxd rax, dword [rsi]
mov qword [rbx + 0xa00], rax
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x800000
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe70]
btr eax, 0x17
or ecx, eax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
mov eax, dword [rbx + 0xe70]
mov ecx, ebp
cmp dword [rsi], ecx
mov edi, 0x80000
cmovne ecx, edi
btr eax, 0x13
or ecx, eax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x40000
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe70]
btr eax, 0x12
or ecx, eax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x100000
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe70]
btr eax, 0x14
or ecx, eax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
mov eax, dword [rsi]
cmp eax, 0xffffffff
jl 0x18011d5cf
mov dword [rbx + 0x6cc], eax
jmp case.0x18011c85f.91
mov eax, dword [rsi]
test eax, eax
js 0x18011d5cf
and eax, 7
mov dword [rbx + 0x6d0], eax
jmp case.0x18011c85f.91
cmp dword [rsi], ebp
je 0x18011cc16
and dword [rbx + 0xe70], 0xfeffffff
mov r14d, 2
mov dword [rbx + 0xa08], r14d
jmp case.0x18011c85f.91
mov r14d, 1
mov dword [rbx + 0xa08], r14d
jmp case.0x18011c85f.91
movsxd rdi, dword [rsi]
cmp rdi, 0xffffffffffffffff
jl 0x18011d5cf
cmp qword [rbx + 0x6e8], rdi
jge 0x18011cc62
mov rcx, qword [rbx + 0xdb0]
cmp qword [rbx + 0x6d8], rcx
jne 0x18011cc62
call qword [0x1801f7018]
mov qword [rbx + 0xdb0], rbp
mov qword [rbx + 0x6d8], rbp
mov qword [rbx + 0x6e8], rdi
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, reloc.WLDAP32.dll_Ordinal_32
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe70]
and eax, 0xffffffdf
or ecx, eax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
cmp dword [rsi], ebp
je case.0x18011c85f.91
and dword [rbx + 0xe70], 0xfcffffff
mov edi, 1
mov dword [rbx + 0xa08], edi
jmp case.0x18011c85f.91
mov eax, dword [rsi]
test eax, eax
js 0x18011d5cf
cmp eax, 3
jl 0x18011cccb
mov eax, 1
jmp 0x18011e9fb
mov dword [rbx + 0xa0c], eax
jmp case.0x18011c85f.91
mov edx, dword [rsi]
test edx, edx
jne 0x18011cce7
mov dword [rbx + 0x6bc], ebp
jmp case.0x18011c85f.91
and dword [rbx + 0x114c], 0xfffffffb
mov eax, edx
shr eax, 4
and eax, 1
shl eax, 2
or dword [rbx + 0x114c], eax
test dl, 0x10
je 0x18011cd0a
and edx, 0xffffffef
or edx, 2
and edx, 0xffffffdf
mov ecx, ebp
nop
mov eax, ecx
inc ecx
bt edx, eax
jb 0x18011cd28
cmp ecx, 0x1f
jl 0x18011cd10
mov eax, 4
jmp 0x18011e9fb
mov dword [rbx + 0x6bc], edx
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x400
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe70]
btr eax, 0xa
or ecx, eax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
mov eax, dword [rsi]
cmp eax, 0xffff
ja 0x18011d5cf
mov dword [rbx + 0x690], eax
jmp case.0x18011c85f.91
mov edx, dword [rsi]
test edx, edx
jne 0x18011cd7f
mov dword [rbx + 0x6c0], ebp
jmp case.0x18011c85f.91
and dword [rbx + 0x115c], 0xfffffffb
mov eax, edx
shr eax, 4
and eax, 1
shl eax, 2
or dword [rbx + 0x115c], eax
test dl, 0x10
je 0x18011cda2
and edx, 0xffffffef
or edx, 2
and edx, 0xffffffdf
mov ecx, ebp
mov eax, ecx
inc ecx
bt edx, eax
jb 0x18011cdbf
cmp ecx, 0x1f
jl 0x18011cda7
mov eax, 4
jmp 0x18011e9fb
mov dword [rbx + 0x6c0], edx
jmp case.0x18011c85f.91
mov eax, dword [rsi]
cmp eax, 7
ja 0x18011d5cf
mov dword [rbx + 0xb58], eax
jmp case.0x18011c85f.91
mov ecx, dword [rsi]
test ecx, ecx
je 0x18011cdff
cmp ecx, 1
jne case.0x18011e773.20030
mov eax, 0x200
or dword [rbx + 0xe74], eax
jmp case.0x18011c85f.91
and dword [rbx + 0xe74], 0xfffffdff
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x400
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe74]
btr eax, 0xa
or ecx, eax
mov dword [rbx + 0xe74], ecx
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x80000000
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe70]
btr eax, 0x1f
or ecx, eax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x40000000
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe70]
btr eax, 0x1e
or ecx, eax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
mov eax, dword [rbx + 0xe74]
mov ecx, ebp
cmp dword [rsi], ecx
setne cl
and eax, 0xfffffffe
or ecx, eax
mov dword [rbx + 0xe74], ecx
jmp case.0x18011c85f.91
mov eax, dword [rsi]
cmp eax, 2
ja 0x18011d5cf
mov dword [rbx + 0xbb4], eax
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, reloc.WLDAP32.dll_Ordinal_32
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe74]
and eax, 0xffffffdf
or ecx, eax
mov dword [rbx + 0xe74], ecx
jmp case.0x18011c85f.91
movsxd rax, dword [rsi]
cmp eax, 0xffffffff
jl 0x18011d5cf
mov qword [rbx + 0x7b0], rax
jmp case.0x18011c85f.91
mov eax, dword [rsi]
test eax, eax
js 0x18011d5cf
mov dword [rbx + 0x7b8], eax
jmp case.0x18011c85f.91
mov eax, dword [rsi]
test eax, eax
js 0x18011d5cf
mov dword [rbx + 0x7bc], eax
jmp case.0x18011c85f.91
mov eax, dword [rsi]
cmp eax, 0xffff
ja 0x18011d5cf
mov dword [rbx + 0x6b8], eax
jmp case.0x18011c85f.91
mov eax, dword [rsi]
cmp eax, 0x20c49b
ja 0x18011d5cf
imul eax, eax, 0x3e8
mov dword [rbx + 0x798], eax
jmp case.0x18011c85f.91
mov eax, dword [rsi]
test eax, eax
js 0x18011d5cf
mov dword [rbx + 0x798], eax
jmp case.0x18011c85f.91
mov eax, dword [rsi]
cmp eax, 0x20c49b
ja 0x18011d5cf
imul eax, eax, 0x3e8
mov dword [rbx + 0x79c], eax
jmp case.0x18011c85f.91
mov eax, dword [rsi]
test eax, eax
js 0x18011d5cf
mov dword [rbx + 0x79c], eax
jmp case.0x18011c85f.91
movsxd rax, dword [rsi]
cmp eax, 0xffffffff
jl 0x18011d5cf
mov qword [rbx + 0x7d0], rax
jmp case.0x18011c85f.91
mov rcx, qword [rbx + 0xd20]
call qword [0x1801f7018]
mov rcx, rbx
mov qword [rbx + 0xd20], rbp
call fcn.180127630
mov ebp, eax
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x40
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe70]
and eax, 0xffffffbf
or ecx, eax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
mov ecx, dword [rsi]
cmp ecx, 0xffff
ja 0x18011d5cf
call fcn.18012bc70
mov word [rbx + 0x6f0], ax
jmp case.0x18011c85f.91
mov ecx, dword [rsi]
cmp ecx, 0xffff
ja 0x18011d5cf
call fcn.18012bc50
mov dword [rbx + 0x6f4], eax
jmp case.0x18011c85f.91
mov eax, dword [rbx + 0xa50]
mov ecx, ebp
cmp dword [rsi], ecx
setne cl
and eax, 0xfffffffe
or ecx, eax
mov rax, qword [rbx + 0x10]
mov dword [rbx + 0xa50], ecx
test rax, rax
je case.0x18011c85f.91
and dword [rax + 0x370], 0xfffffffe
and ecx, 1
or dword [rax + 0x370], ecx
jmp case.0x18011c85f.91
mov eax, dword [rsi]
cmp eax, 1
je 0x18011d5c0
test eax, eax
mov ecx, ebp
mov eax, dword [rbx + 0xa50]
mov r14d, 2
cmovne ecx, r14d
and eax, 0xfffffffd
or ecx, eax
mov rax, qword [rbx + 0x10]
mov dword [rbx + 0xa50], ecx
test rax, rax
je case.0x18011c85f.91
and dword [rax + 0x370], 0xfffffffd
and ecx, r14d
or dword [rax + 0x370], ecx
jmp case.0x18011c85f.91
mov rax, qword [0x1801f7040]
test byte [rax + 0x10], 2
je case.0x18011d45a.244
mov eax, dword [rbx + 0xaa8]
mov ecx, ebp
cmp dword [rsi], ecx
setne cl
and eax, 0xfffffffe
or ecx, eax
mov dword [rbx + 0xaa8], ecx
jmp case.0x18011c85f.91
mov ecx, dword [rsi]
mov edi, 0x80000
cmp ecx, edi
jg 0x18011d0fd
cmp ecx, 1
jge 0x18011d0f1
mov edi, 0x4000
jmp 0x18011d0fd
mov eax, 0x400
mov edi, ecx
cmp ecx, eax
cmovl edi, eax
cmp edi, dword [rbx + 0xb60]
je 0x18011d132
mov rcx, qword [rbx + 0x1060]
lea eax, [rdi + 1]
movsxd rdx, eax
call qword [0x1801f7020]
test rax, rax
jne 0x18011d12b
lea ebp, [rax + 0x1b]
mov dword [rbx + 0xb60], edi
jmp case.0x18011c85f.91
mov qword [rbx + 0x1060], rax
mov dword [rbx + 0xb60], edi
jmp case.0x18011c85f.91
mov eax, dword [rbx + 0xe74]
mov ecx, ebp
cmp dword [rsi], ecx
mov r14d, 2
cmovne ecx, r14d
and eax, 0xfffffffd
or ecx, eax
mov dword [rbx + 0xe74], ecx
jmp case.0x18011c85f.91
movsxd rax, dword [rsi]
test eax, eax
js 0x18011d5cf
mov qword [rbx + 0xb88], rax
jmp case.0x18011c85f.91
mov eax, dword [rsi]
cmp eax, 3
ja 0x18011d5cf
mov dword [rbx + 0xbac], eax
jmp case.0x18011c85f.91
mov eax, dword [rsi]
cmp eax, 2
ja 0x18011d5cf
mov dword [rbx + 0xbb0], eax
jmp case.0x18011c85f.91
mov eax, dword [rsi]
cmp eax, 2
ja 0x18011d5cf
mov dword [rbx + 0xb80], eax
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 8
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe74]
and eax, 0xfffffff7
or ecx, eax
mov dword [rbx + 0xe74], ecx
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, reloc.WS2_32.dll_recv
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe74]
and eax, 0xffffffef
or ecx, eax
mov dword [rbx + 0xe74], ecx
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x40
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe74]
and eax, 0xffffffbf
or ecx, eax
mov dword [rbx + 0xe74], ecx
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 8
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xa50]
and dword [rbx + 0xaf0], 0xfffffff7
and eax, 0xfffffff7
or ecx, eax
mov dword [rbx + 0xa50], ecx
and ecx, 8
or dword [rbx + 0xaf0], ecx
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x80
cmp dword [rsi], ecx
cmove ecx, eax
mov eax, dword [rbx + 0xe74]
btr eax, 7
or ecx, eax
mov dword [rbx + 0xe74], ecx
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x100
cmp dword [rsi], ecx
cmove ecx, eax
mov eax, dword [rbx + 0xe74]
btr eax, 8
or ecx, eax
mov dword [rbx + 0xe74], ecx
jmp case.0x18011c85f.91
mov eax, dword [rsi]
cmp eax, 0x1ff
ja 0x18011d5cf
mov dword [rbx + 0xbb8], eax
jmp case.0x18011c85f.91
mov eax, dword [rsi]
cmp eax, 0x1ff
ja 0x18011d5cf
mov dword [rbx + 0xbbc], eax
jmp case.0x18011c85f.91
mov ecx, dword [rsi]
cmp ecx, 0xf
ja 0x18011d5cf
call fcn.18012bc60
mov dword [rbx + 0xdb8], eax
jmp case.0x18011c85f.91
mov eax, dword [rsi]
mov dword [rbx + 0xdbc], eax
jmp case.0x18011c85f.91
mov eax, dword [rsi]
mov dword [rbx + 0xdc0], eax
jmp case.0x18011c85f.91
mov eax, dword [rsi]
dec eax
cmp eax, 0xa
ja case.default.0x18011d317
cdqe
mov ecx, dword [r8 + rax*4 + 0x11ec34]
add rcx, r8
jmp rcx
mov edi, 1
mov dword [rbx + 0xdd0], edi
jmp case.0x18011c85f.91
mov edi, 2
mov dword [rbx + 0xdd0], edi
jmp case.0x18011c85f.91
mov edi, 3
mov dword [rbx + 0xdd0], edi
jmp case.0x18011c85f.91
mov edi, 4
mov dword [rbx + 0xdd0], edi
jmp case.0x18011c85f.91
mov edi, 5
mov dword [rbx + 0xdd0], edi
jmp case.0x18011c85f.91
mov edi, 6
mov dword [rbx + 0xdd0], edi
jmp case.0x18011c85f.91
mov edi, 7
mov dword [rbx + 0xdd0], edi
jmp case.0x18011c85f.91
mov edi, 8
mov dword [rbx + 0xdd0], edi
jmp case.0x18011c85f.91
mov edi, 9
mov dword [rbx + 0xdd0], edi
jmp case.0x18011c85f.91
mov edi, 0xa
mov dword [rbx + 0xdd0], edi
jmp case.0x18011c85f.91
mov edi, ntohl
mov dword [rbx + 0xdd0], edi
jmp case.0x18011c85f.91
mov edi, ebp
mov dword [rbx + 0xdd0], ebp
jmp case.0x18011c85f.91
mov eax, dword [rsi]
mov dword [rbx + 0x1400], eax
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x1000
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe74]
btr eax, 0xc
or ecx, eax
mov dword [rbx + 0xe74], ecx
jmp case.0x18011c85f.91
mov eax, dword [r8]
test eax, eax
js 0x18011d5cf
mov dword [rcx + 0xdf8], eax
jmp case.0x18011c85f.91
cmp edx, 0x2711
jg 0x18011d8d9
je 0x18011d8ca
lea eax, [rdx - 0xd4]
cmp eax, 0x49
ja case.0x18011e773.20030
lea r8, [0x180000000]
cdqe
movzx eax, byte [r8 + rax + 0x11ece4]
mov ecx, dword [r8 + rax*4 + 0x11ec60]
add rcx, r8
jmp rcx
mov ecx, ebp
mov eax, 0x20000
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe70]
btr eax, 0x11
or ecx, eax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
mov eax, dword [rsi]
neg eax
mov eax, dword [rbx + 0xe70]
sbb ecx, ecx
and eax, 0xfffffff7
and ecx, 8
or ecx, eax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
cmp edx, 0x20
mov ecx, 0xab0
mov eax, 0xa10
cmovne eax, ecx
lea rcx, [rax + rbx]
mov eax, dword [rsi]
movzx edx, ax
and eax, 0xffff0000
cmp edx, 8
jae 0x18011d5cf
cmp eax, 0x7ffff
ja 0x18011d5cf
mov dword [rcx], edx
mov dword [rcx + 4], eax
jmp case.0x18011c85f.91
movzx eax, byte [rsi]
shl eax, 4
xor eax, dword [rbx + 0xe70]
and eax, 0x10
xor dword [rbx + 0xe70], eax
jmp case.0x18011c85f.91
mov eax, dword [rsi]
test eax, eax
js 0x18011d5cf
mov dword [rbx + 0xe10], eax
jmp case.0x18011c85f.91
mov eax, dword [rsi]
cmp eax, 1
jg 0x18011d5cf
and dword [rbx + 0xe74], 0xf7ffffff
neg eax
sbb eax, eax
and eax, 0x8000000
or dword [rbx + 0xe74], eax
jmp case.0x18011c85f.91
mov eax, dword [rsi]
mov dword [rbx + 0x6c4], eax
and eax, 0xfffffffa
neg eax
sbb eax, eax
and eax, 4
mov ebp, eax
jmp case.0x18011c85f.91
mov eax, dword [rsi]
test eax, eax
js 0x18011d5cf
mov dword [rbx + 0x7a0], eax
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x400000
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe74]
btr eax, 0x16
or ecx, eax
mov dword [rbx + 0xe74], ecx
jmp case.0x18011c85f.91
mov eax, dword [rbx + 0xaf0]
mov ecx, ebp
cmp dword [rsi], ecx
setne cl
and eax, 0xfffffffe
or ecx, eax
mov rax, qword [rbx + 0x10]
mov dword [rbx + 0xaf0], ecx
test rax, rax
je case.0x18011c85f.91
and dword [rax + 0x3b8], 0xfffffffe
and ecx, 1
or dword [rax + 0x3b8], ecx
jmp case.0x18011c85f.91
mov eax, dword [rsi]
cmp eax, 1
jne 0x18011d5d9
lea rdx, str.CURLOPT_SSL_VERIFYHOST_no_longer_supports_1_as_value_
mov rcx, rbx
call fcn.180129510
mov eax, Ordinal_46
jmp 0x18011e9fb
test eax, eax
mov ecx, ebp
mov eax, dword [rbx + 0xaf0]
mov r14d, 2
cmovne ecx, r14d
and eax, 0xfffffffd
or ecx, eax
mov rax, qword [rbx + 0x10]
mov dword [rbx + 0xaf0], ecx
test rax, rax
je case.0x18011c85f.91
and dword [rax + 0x3b8], 0xfffffffd
and ecx, r14d
or dword [rax + 0x3b8], ecx
jmp case.0x18011c85f.91
call fcn.180126b20
test al, al
jne 0x18011d62d
mov ebp, 4
jmp case.0x18011c85f.91
mov eax, 4
mov ecx, ebp
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xa50]
and eax, 0xfffffffb
or ecx, eax
mov rax, qword [rbx + 0x10]
mov dword [rbx + 0xa50], ecx
test rax, rax
je case.0x18011c85f.91
and dword [rax + 0x370], 0xfffffffb
and ecx, 4
or dword [rax + 0x370], ecx
jmp case.0x18011c85f.91
call fcn.180126f60
test al, al
je case.0x18011d45a.244
mov eax, dword [rbx + 0xaa8]
mov ecx, ebp
cmp dword [rsi], ecx
mov r14d, 2
cmovne ecx, r14d
and eax, 0xfffffffd
or ecx, eax
mov dword [rbx + 0xaa8], ecx
jmp case.0x18011c85f.91
mov ecx, dword [rsi]
mov eax, 0x200000
cmp ecx, eax
jg 0x18011d6b0
mov edi, 0x4000
mov eax, ecx
cmp ecx, edi
cmovl eax, edi
mov rcx, qword [rbx + 0x1068]
cdqe
mov qword [rbx + 0xb68], rax
call qword [0x1801f7018]
mov qword [rbx + 0x1068], rbp
jmp case.0x18011c85f.91
mov ecx, dword [rsi]
and dword [rbx + 0xaa8], 0xfffffff3
movzx eax, cl
and ecx, 2
and eax, 1
or eax, ecx
shl eax, 2
or dword [rbx + 0xaa8], eax
jmp case.0x18011c85f.91
mov ecx, dword [rsi]
and dword [rbx + 0xb48], 0xfffffff3
movzx eax, cl
and ecx, 2
and eax, 1
or eax, ecx
shl eax, 2
or dword [rbx + 0xb48], eax
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x800
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe74]
btr eax, 0xb
or ecx, eax
mov dword [rbx + 0xe74], ecx
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x2000
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe74]
btr eax, 0xd
or ecx, eax
mov dword [rbx + 0xe74], ecx
jmp case.0x18011c85f.91
mov eax, dword [rsi]
test eax, eax
js 0x18011d5cf
mov dword [rbx + 0xdfc], eax
jmp case.0x18011c85f.91
mov eax, dword [rsi]
test eax, eax
js 0x18011d5cf
mov dword [rbx + 0xe00], eax
jmp case.0x18011c85f.91
mov eax, dword [rbx + 0xe74]
mov ecx, ebp
cmp dword [rsi], ecx
mov r8d, 0x8000
cmovne ecx, r8d
btr eax, 0xf
or ecx, eax
mov dword [rbx + 0xe74], ecx
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x10000
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe74]
btr eax, 0x10
or ecx, eax
mov dword [rbx + 0xe74], ecx
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x20000
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe74]
btr eax, 0x11
or ecx, eax
mov dword [rbx + 0xe74], ecx
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x40000
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe74]
btr eax, 0x12
or ecx, eax
mov dword [rbx + 0xe74], ecx
jmp case.0x18011c85f.91
mov eax, dword [rbx + 0xe74]
mov ecx, ebp
cmp dword [rsi], ecx
mov edi, 0x80000
cmovne ecx, edi
btr eax, 0x13
or ecx, eax
mov dword [rbx + 0xe74], ecx
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x100
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe70]
btr eax, 8
or ecx, eax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
mov eax, dword [rsi]
test eax, eax
js 0x18011d5cf
mov dword [rbx + 0x7a4], eax
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x100000
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe74]
btr eax, 0x14
or ecx, eax
mov dword [rbx + 0xe74], ecx
jmp case.0x18011c85f.91
mov ecx, ebp
mov eax, 0x1000000
cmp dword [rsi], ecx
cmovne ecx, eax
mov eax, dword [rbx + 0xe74]
btr eax, 0x18
or ecx, eax
mov dword [rbx + 0xe74], ecx
jmp case.0x18011c85f.91
mov eax, dword [rsi]
test eax, eax
js 0x18011d5cf
mov dword [rbx + 0xe40], eax
jmp case.0x18011c85f.91
mov rax, qword [r8]
mov qword [rcx + 0x698], rax
jmp case.0x18011c85f.91
cmp edx, 0x27b4
jg 0x18011e189
je 0x18011e17a
add edx, 0xffffd8ee
cmp edx, 0x93
ja case.0x18011e773.20030
lea r8, [0x180000000]
movsxd rax, edx
movzx eax, byte [r8 + rax + 0x11edf8]
mov ecx, dword [r8 + rax*4 + 0x11ed30]
add rcx, r8
jmp rcx
mov rdx, qword [rsi]
lea rcx, [rbx + 0xcc8]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xcf0]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xce8]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xc68]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
test rdx, rdx
je 0x18011d9b6
cmp byte [rdx], bpl
jne 0x18011d9b6
call fcn.18012c670
mov rdi, rax
test rax, rax
jne 0x18011d997
lea ebp, [rax + 0x1b]
jmp case.0x18011c85f.91
lea rcx, [rbx + 0xc10]
mov rdx, rdi
call fcn.18011c6a0
mov rcx, rdi
mov ebp, eax
call qword [0x1801f7018]
jmp case.0x18011c85f.91
lea rcx, [rbx + 0xc10]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x6d8], rax
mov rcx, qword [rbx + 0xdb0]
call qword [0x1801f7018]
mov r14d, 2
mov qword [rbx + 0xdb0], rbp
mov dword [rbx + 0xa08], r14d
jmp case.0x18011c85f.91
mov rax, qword [rsi]
and dword [rbx + 0xe70], 0xfeffffff
mov qword [rbx + 0x7e8], rax
mov dword [rbx + 0xa08], 3
jmp case.0x18011c85f.91
test byte [rbx + 0xe98], 2
je 0x18011da40
mov rcx, qword [rbx + 0xe80]
call qword [0x1801f7018]
and dword [rbx + 0xe98], 0xfffffffd
mov qword [rbx + 0xe80], rbp
mov rdx, qword [rsi]
lea rcx, [rbx + 0xc88]
call fcn.18011c6a0
mov ebp, eax
mov rax, qword [rbx + 0xc88]
mov qword [rbx + 0xe80], rax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xcf8]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x7d8], rax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0xb78], rax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xbe8]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
test rdx, rdx
je case.0x18011c85f.91
mov rcx, qword [rbx + 0xe88]
call fcn.18011f170
test rax, rax
jne 0x18011dae8
mov rcx, qword [rbx + 0xe88]
call fcn.18011f200
mov eax, reloc.WLDAP32.dll_Ordinal_27
mov qword [rbx + 0xe88], rbp
jmp 0x18011e9fb
mov qword [rbx + 0xe88], rax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xbf0]
call fcn.18011c6a0
mov r9d, dword [rbx + 0xe70]
xor edx, edx
mov r8, qword [rbx + 0xea0]
mov rcx, rbx
shr r9d, 5
mov ebp, eax
and r9b, 1
call fcn.180121aa0
test rax, rax
mov qword [rbx + 0xea0], rax
mov ecx, reloc.WLDAP32.dll_Ordinal_27
cmove ebp, ecx
jmp case.0x18011c85f.91
mov rdi, qword [rsi]
test rdi, rdi
je case.0x18011c85f.91
lea rdx, [0x1801761ac]
mov rcx, rdi
call fcn.18012c260
test eax, eax
je 0x18011db8b
mov r14d, 2
mov rcx, rbx
mov r8d, r14d
mov edx, r14d
call fcn.18012c810
mov rcx, qword [rbx + 0xea0]
call fcn.180121450
mov edx, r14d
mov rcx, rbx
call fcn.18012c850
jmp case.0x18011c85f.91
lea rdx, str.SESS
mov rcx, rdi
call fcn.18012c260
test eax, eax
je 0x18011dbce
mov r14d, 2
mov rcx, rbx
mov r8d, r14d
mov edx, r14d
call fcn.18012c810
mov rcx, qword [rbx + 0xea0]
call fcn.180121530
mov edx, r14d
mov rcx, rbx
call fcn.18012c850
jmp case.0x18011c85f.91
lea rdx, str.FLUSH
mov rcx, rdi
call fcn.18012c260
test eax, eax
je 0x18011dbf0
xor edx, edx
mov rcx, rbx
call fcn.180121f90
jmp case.0x18011c85f.91
lea rdx, str.RELOAD
mov rcx, rdi
call fcn.18012c260
test eax, eax
je 0x18011dc10
mov rcx, rbx
call fcn.180121cd0
jmp case.0x18011c85f.91
cmp qword [rbx + 0xea0], rbp
jne 0x18011dc30
mov r9b, 1
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.180121aa0
mov qword [rbx + 0xea0], rax
mov rcx, rdi
call qword [case.0x180122769.0]
mov rdi, rax
test rax, rax
je 0x18011dcc7
cmp qword [rbx + 0xea0], rbp
je 0x18011dcc7
mov r14d, 2
mov rcx, rbx
mov r8d, r14d
mov edx, r14d
call fcn.18012c810
lea r8d, [r14 + 9]
mov rdx, rdi
lea rcx, str.Set_Cookie:
call fcn.18012c3f0
test eax, eax
je 0x18011dc82
mov r8b, 1
lea rax, [rdi + 0xb]
jmp 0x18011dc88
xor r8b, r8b
mov rax, rdi
mov rdx, qword [rbx + 0xea0]
xor r9d, r9d
mov byte [rsp + 0x38], 1
mov rcx, rbx
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x28], rbp
mov qword [rsp + 0x20], rax
call fcn.180120630
mov edx, r14d
mov rcx, rbx
call fcn.18012c850
mov rcx, rdi
call qword [0x1801f7018]
jmp case.0x18011c85f.91
mov rcx, rdi
mov ebp, reloc.WLDAP32.dll_Ordinal_27
call qword [0x1801f7018]
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xbf8]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xc70]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x6a8], rax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x688], rax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xc28]
call fcn.18011c6a0
mov ebp, eax
mov edi, 0x4000
mov rax, qword [rbx + 0xc28]
neg rax
mov eax, dword [rbx + 0xe70]
sbb ecx, ecx
btr eax, 0xe
and ecx, edi
or ecx, eax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x6a0], rax
jmp case.0x18011c85f.91
test byte [rbx + 0xe98], 1
je 0x18011dd92
mov rcx, qword [rbx + 0xe78]
call qword [0x1801f7018]
and dword [rbx + 0xe98], 0xfffffffe
mov qword [rbx + 0xe78], rbp
mov rdx, qword [rsi]
lea rcx, [rbx + 0xc90]
call fcn.18011c6a0
mov ebp, eax
mov rax, qword [rbx + 0xc90]
mov qword [rbx + 0xe78], rax
jmp case.0x18011c85f.91
mov rcx, qword [rsi]
lea r8, [rbx + 0xd30]
lea rdx, [rbx + 0xd28]
call fcn.18011c730
mov ebp, eax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x9b8], rax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x9c0], rax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x9b0], rax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x788], rax
jmp case.0x18011c85f.91
mov rcx, qword [rsi]
lea r8, [rbx + 0xd48]
lea rdx, [rbx + 0xd40]
call fcn.18011c730
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xc80]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x680], rax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x678], rax
test rax, rax
jne case.0x18011c85f.91
lea ecx, [rax + 2]
call sub.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func
mov qword [rbx + 0x678], rax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x790], rax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xbc8]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xbd8]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xc30]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xc50]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xc40]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdi, qword [rsi]
test rdi, rdi
je case.0x18011c85f.91
cmp byte [rdi], bpl
je case.0x18011c85f.91
lea rcx, [rbx + 0xd20]
mov rdx, rdi
call fcn.18011c6a0
mov ebp, eax
test eax, eax
jne case.0x18011c85f.91
mov rdx, rdi
mov rcx, rbx
call fcn.180127620
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xc08]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xc60]
call fcn.18011c6a0
mov ebp, eax
mov rax, qword [rbx + 0xc60]
neg rax
mov eax, dword [rbx + 0xe70]
sbb ecx, ecx
btr eax, 0x1b
and ecx, 0x8000000
or ecx, eax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
mov rax, qword [0x1801f7040]
test byte [rax + 0x10], 8
je case.0x18011d45a.244
mov rax, qword [rsi]
mov qword [rbx + 0xa78], rax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xca8]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rax, qword [0x1801f7040]
test byte [rax + 0x10], 1
je case.0x18011d45a.244
mov rdx, qword [rsi]
lea rcx, [rbx + 0xc98]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x9e0], rax
jmp case.0x18011c85f.91
mov edi, 1
mov rsi, qword [rsi]
lea r14d, [rdi + 1]
cmp qword [rbx + 0xf8], rbp
je 0x18011e077
mov r8d, r14d
mov edx, edi
mov rcx, rbx
call fcn.18012c810
cmp dword [rbx + 0xe0], 3
jne 0x18011e029
mov qword [rbx + 0xd8], rbp
mov dword [rbx + 0xe0], ebp
mov rcx, qword [rbx + 0xf8]
mov rax, qword [rbx + 0xea0]
cmp qword [rcx + 0xa8], rax
jne 0x18011e047
mov qword [rbx + 0xea0], rbp
mov rax, qword [rbx + 0x1088]
cmp qword [rcx + 0xb0], rax
jne 0x18011e05e
mov qword [rbx + 0x1088], rbp
mov ecx, dword [rcx + 4]
mov edx, edi
mov rax, qword [rbx + 0xf8]
dec ecx
mov dword [rax + 4], ecx
mov rcx, rbx
call fcn.18012c850
mov qword [rbx + 0xf8], rsi
test rsi, rsi
je case.0x18011c85f.91
mov r8d, r14d
mov edx, edi
mov rcx, rbx
call fcn.18012c810
mov rax, qword [rbx + 0xf8]
mov ecx, dword [rax + 4]
mov rax, qword [rbx + 0xf8]
inc ecx
mov dword [rax + 4], ecx
mov rcx, qword [rbx + 0xf8]
test byte [rcx], 8
je 0x18011e0cb
lea rax, [rcx + 0x78]
mov dword [rbx + 0xe0], 3
mov qword [rbx + 0xd8], rax
cmp qword [rcx + 0xa8], rbp
je 0x18011e0f5
mov rcx, qword [rbx + 0xea0]
call fcn.180121360
mov rcx, qword [rbx + 0xf8]
mov rax, qword [rcx + 0xa8]
mov qword [rbx + 0xea0], rax
cmp qword [rcx + 0xb0], rbp
je 0x18011e121
mov rax, qword [rcx + 0xb8]
mov qword [rbx + 0xb50], rax
mov rax, qword [rbx + 0xf8]
mov rcx, qword [rax + 0xb0]
mov qword [rbx + 0x1088], rcx
mov edx, edi
mov rcx, rbx
call fcn.18012c850
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0xb70], rax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xc18]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xc20]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x740], rax
jmp case.0x18011c85f.91
mov rax, qword [r8]
mov qword [rcx + 0x750], rax
jmp case.0x18011c85f.91
cmp edx, 0x4e2b
jg 0x18011e731
je 0x18011e6f2
add edx, 0xffffd84b
cmp edx, 0x77
ja case.0x18011e773.20030
lea r8, [0x180000000]
movsxd rax, edx
movzx eax, byte [r8 + rax + 0x11ef60]
mov ecx, dword [r8 + rax*4 + 0x11ee8c]
add rcx, r8
jmp rcx
mov rdx, qword [rsi]
lea rcx, [rbx + 0xcd0]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
call fcn.1801276c0
test al, al
je case.0x18011e1c8.10196
mov rdx, qword [rsi]
lea rcx, [rbx + 0xcd8]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
call fcn.1801276c0
test al, al
je case.0x18011e1c8.10196
mov rdx, qword [rsi]
lea rcx, [rbx + 0xce0]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xd98]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rsi, qword [rsi]
test rsi, rsi
je 0x18011e2b2
mov rax, qword [rbx + 0x6e8]
cmp rax, 0xffffffffffffffff
je 0x18011e2b2
test rax, rax
js 0x18011e28b
mov rcx, qword [rbx + 0xdb0]
call qword [0x1801f7018]
mov qword [rbx + 0xdb0], rbp
mov ecx, 1
mov rax, qword [rbx + 0x6e8]
test rax, rax
cmovne rcx, rax
call qword [sub.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
test rax, rax
jne 0x18011e292
mov ebp, reloc.WLDAP32.dll_Ordinal_27
jmp 0x18011e2c3
mov r8, qword [rbx + 0x6e8]
test r8, r8
je 0x18011e2a9
mov rdx, rsi
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbx + 0xdb0], rdi
jmp 0x18011e2c3
lea rcx, [rbx + 0xdb0]
mov rdx, rsi
call fcn.18011c6a0
mov ebp, eax
mov rax, qword [rbx + 0xdb0]
mov r14d, 2
mov qword [rbx + 0x6d8], rax
mov dword [rbx + 0xa08], r14d
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0x7f0]
xor r8d, r8d
call fcn.180124810
mov ebp, eax
test eax, eax
jne case.0x18011c85f.91
and dword [rbx + 0xe70], 0xfeffffff
mov eax, 4
mov dword [rbx + 0xa08], eax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x7e0], rax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xc78]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xd70]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xd78]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0xe58], rax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xd28]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xd30]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xd38]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xd90]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x9e8], rax
mov qword [rbx + 0xe90], rax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xd40]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xd48]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xd50]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x768], rax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xbd0]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xbe0]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xc38]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xc58]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xc48]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rax, qword [0x1801f7040]
test byte [rax + 0x10], 4
je case.0x18011d45a.244
mov rdx, qword [rsi]
lea rcx, [rbx + 0xcb8]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rax, qword [0x1801f7040]
test byte [rax + 0x10], 4
je case.0x18011d45a.244
mov rdx, qword [rsi]
lea rcx, [rbx + 0xcc0]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xcb0]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rax, qword [0x1801f7040]
test byte [rax + 0x10], 1
je case.0x18011d45a.244
mov rdx, qword [rsi]
lea rcx, [rbx + 0xca0]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xd00]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xd08]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xd10]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0xe38], rax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x760], rax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xc00]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xd80]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xd88]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0xdc8], rax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xd58]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xd60]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xd68]
call fcn.18011c6a0
mov ebp, eax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x6b0], rax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x14e8], rax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0xdf0], rax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
mov rcx, rbx
call fcn.180122d70
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
mov rcx, rbx
call fcn.180122d70
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
mov rcx, rbx
call fcn.180122d70
mov ebp, eax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
mov rcx, rbx
call fcn.180122d70
mov ebp, eax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x9f0], rax
jmp case.0x18011c85f.91
mov rdx, qword [rsi]
lea rcx, [rbx + 0xda0]
call fcn.18011c6a0
mov ebp, eax
mov edx, 0x2000000
mov rax, qword [rbx + 0xda0]
neg rax
mov eax, dword [rbx + 0xe74]
sbb ecx, ecx
btr eax, 0x19
and ecx, edx
or ecx, eax
mov dword [rbx + 0xe74], ecx
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0xe60], rax
jmp case.0x18011c85f.91
mov rax, qword [r8]
mov qword [rcx + 0x6f8], rax
mov ecx, dword [rcx + 0xe70]
test rax, rax
jne 0x18011e723
lea rax, [sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
and ecx, 0xfffffffd
mov qword [rbx + 0x6f8], rax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
or ecx, 2
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
cmp edx, 0x4f30
jg 0x18011e907
je 0x18011e8f8
add edx, 0xffffb1d4
cmp edx, 0xcf
ja case.0x18011e773.20030
lea r8, [0x180000000]
movsxd rax, edx
movzx eax, byte [r8 + rax + 0x11f024]
mov ecx, dword [r8 + rax*4 + 0x11efd8]
add rcx, r8
jmp rcx
mov ecx, dword [rbx + 0x102c]
mov eax, ecx
mov rdx, qword [rsi]
and eax, 0xfffffffe
or ecx, 1
mov qword [rbx + 0x718], rdx
test rdx, rdx
cmove ecx, eax
mov dword [rbx + 0x102c], ecx
jmp case.0x18011c85f.91
mov ecx, dword [rbx + 0x102c]
mov eax, ecx
mov rdx, qword [rsi]
and eax, 0xfffffffe
or ecx, 1
mov qword [rbx + 0x720], rdx
test rdx, rdx
cmove ecx, eax
mov dword [rbx + 0x102c], ecx
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x728], rax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x700], rax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov ecx, dword [rbx + 0xe70]
mov qword [rbx + 0x710], rax
test rax, rax
jne 0x18011e816
lea rax, [sub.api_ms_win_crt_stdio_l1_1_0.dll_fread]
and ecx, 0xfffffffe
mov qword [rbx + 0x710], rax
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
or ecx, 1
mov dword [rbx + 0xe70], ecx
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x6e0], rax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x770], rax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x778], rax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x780], rax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x730], rax
jmp case.0x18011c85f.91
mov rax, qword [0x1801f7040]
test byte [rax + 0x10], 8
je case.0x18011d45a.244
mov rax, qword [rsi]
mov qword [rbx + 0xa70], rax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x738], rax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x748], rax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x758], rax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0x708], rax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0xdd8], rax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0xde0], rax
jmp case.0x18011c85f.91
mov rax, qword [rsi]
mov qword [rbx + 0xde8], rax
jmp case.0x18011c85f.91
mov rax, qword [r8]
mov qword [rcx + 0xe30], rax
jmp case.0x18011c85f.91
cmp edx, 0x75a8
jg 0x18011e9ac
je 0x18011e986
sub edx, 0x4f3b
je 0x18011e97a
sub edx, 0x2668
je 0x18011e964
sub edx, 1
je 0x18011e94b
cmp edx, 1
jne case.0x18011e773.20030
mov rax, qword [r8]
test rax, rax
js 0x18011d5cf
mov qword [rcx + 0xb88], rax
jmp case.0x18011c85f.91
mov rax, qword [r8]
cmp rax, 0xffffffffffffffff
jl 0x18011d5cf
mov qword [rcx + 0x7d0], rax
jmp case.0x18011c85f.91
mov rax, qword [r8]
cmp rax, 0xffffffffffffffff
jl 0x18011d5cf
mov qword [rcx + 0x7b0], rax
jmp case.0x18011c85f.91
mov rax, qword [r8]
mov qword [rcx + 0xe68], rax
jmp case.0x18011c85f.91
mov rdi, qword [r8]
cmp rdi, 0xffffffffffffffff
jl 0x18011d5cf
cmp qword [rcx + 0x6e8], rdi
jge 0x18011cc62
mov rcx, qword [rcx + 0xdb0]
jmp 0x18011cc45
sub edx, 0x75c1
je 0x18011e9e6
sub edx, 1
je 0x18011e9d1
cmp edx, 0x7c
je 0x18011e9c5
mov ebp, Ordinal_50
jmp case.0x18011c85f.91
mov rax, qword [r8]
mov qword [rcx + 0xa00], rax
jmp case.0x18011c85f.91
mov rax, qword [r8]
test rax, rax
js 0x18011d5cf
mov qword [rcx + 0x7c8], rax
jmp case.0x18011c85f.91
mov rax, qword [r8]
test rax, rax
js 0x18011d5cf
mov qword [rcx + 0x7c0], rax
mov eax, ebp
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop r14
ret