Function at 0x1800354c0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb0]
sub rsp, 0x1b0
mov rax, qword [0x180357660]
xor rax, rsp
mov qword [rbp + 0xa0], rax
mov r11, r9
mov qword [rsp + 0x50], r9
mov rsi, r8
mov qword [rbp - 0x58], r8
mov r10, rdx
mov qword [rsp + 0x58], rdx
mov r15d, ecx
mov dword [rsp + 0x48], ecx
mov rcx, qword [rbp + 0x110]
mov qword [rsp + 0x68], rcx
mov r8, qword [rbp + 0x118]
mov qword [rsp + 0x78], r8
xor edi, edi
mov qword [rbp + 0x40], rdi
mov qword [rbp + 0x48], ILClone
mov byte [rbp + 0x30], dil
mov r9d, r15d
mov dword [rsp + 0x60], r15d
lea eax, [r15 - 0xa]
mov r14d, dword [rsp + 0x40]
cmp r15d, eax
jbe 0x180035cd3
lea rdx, [0x180000000]
mov r15d, dword [rsp + 0x40]
mov qword [rbp - 0x28], r15
mov r13, qword [rbp - 0x30]
mov rax, qword [rbp - 0x30]
mov qword [rbp - 0x70], rax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x74], eax
mov r12, qword [rbp - 0x30]
mov rbx, qword [rbp - 0x30]
mov ecx, r9d
lea eax, [r9 - 0x4d]
cmp eax, 0x2b
ja case.default.0x1800355a0
movzx eax, byte [rdx + rax + 0x36404]
mov ecx, dword [rdx + rax*4 + 0x363d8]
add rcx, rdx
jmp rcx
mov dword [rbp - 0x80], 1
jmp case.0x1800355a0.87
cmp dword [rbp - 0x80], 1
jne 0x1800355c4
mov eax, 2
cmp dword [rsp + 0x70], 0
cmovne eax, edi
mov dword [rbp - 0x80], eax
mov rax, qword [rbp - 0x50]
test rax, rax
je 0x180035622
mov r15, 0xffffffffffffffff
inc r15
cmp byte [rax + r15], 0
jne 0x1800355d4
shr r15, 1
mov qword [rbp - 0x28], r15
mov dword [rbp - 8], r15d
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 8]
mov r8, rax
mov edx, 0x45
lea rcx, [rbp + 0x78]
call fcn.180066750
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp + 0x60], xmm0
movsd xmm1, qword [rax + 0x20]
movsd qword [rbp + 0x70], xmm1
mov r13, qword [rax]
jmp 0x1800357c6
mov esi, 0x10a
nop word [rax + rax]
cmp esi, 0x10a
je 0x180035781
cmp esi, 0x5216
je 0x180035669
cmp esi, 0xa322
je 0x18003577a
cmp esi, 0xf42e
jne 0x1800357b4
mov dword [rsp + 0x60], 0x4e
jmp 0x1800357b4
mov esi, dword [rbp - 0x60]
nop dword [rax]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rax
mov eax, esi
sub eax, r15d
movsxd r8, eax
movsxd rcx, r15d
add rcx, r13
mov edx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
test eax, eax
js 0x180035b00
je 0x18003577a
add r15d, eax
mov qword [rbp - 0x28], r15
mov eax, esi
sub eax, r15d
cmp eax, 0x1000
jge 0x180035670
lea eax, [r15 + r15*4]
cdq
and edx, 3
add eax, edx
sar eax, 2
add eax, 0x1000
mov dword [rbp - 0x60], eax
movsxd r15, eax
mov esi, 0x42
cmp esi, 0x42
je 0x180035734
cmp esi, 0xf6
je 0x1800356fd
cmp esi, 0x13da
je 0x18003576e
cmp esi, 0x49fe
jne 0x18003575c
mov dword [r12 + 0x24], edi
mov rbx, r12
jmp 0x18003575c
mov qword [rbp], PathMakeUniqueName
lea rax, [rbp]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x4c]
xor ecx, ecx
call fcn.18003ad60
mov r12, rax
mov dword [rax], edi
mov dword [rax + 0x20], 1
mov dword [rax + 0x1c], 1
jmp 0x18003575c
test r13, r13
je 0x180035747
mov rdx, r15
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
jmp 0x180035750
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x1800363cb
add esi, 0x1398
cmp esi, 0x61f8
jbe 0x1800356d2
mov r13, rbx
mov r15, qword [rbp - 0x28]
jmp 0x180035669
mov esi, 0xa322
jmp 0x1800357b4
mov dword [rbp - 0x60], 0x1000
mov r15d, edi
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x40], 0x1000
lea rax, [rbp - 0x40]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x4c]
xor ecx, ecx
call fcn.18003ad60
mov r13, rax
add esi, 0x510c
cmp esi, 0x14430
jbe 0x180035630
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x40], eax
lea ecx, [r15*8]
mov dword [rbp - 0x78], ecx
mov r9d, 0x8a
mov r8, r13
lea rdx, [rbp - 0x78]
lea rcx, [rsp + 0x40]
call fcn.180087160
movsxd r15, r15d
cmp dword [rbp - 0x80], 0
jne 0x180035844
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rax
mov r8, r15
mov edx, 1
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
test eax, eax
js 0x180035b9e
mov r15, qword [rbp - 0x28]
mov r9d, dword [rsp + 0x60]
mov r10, qword [rsp + 0x58]
mov r11, qword [rsp + 0x50]
mov r8, qword [rsp + 0x78]
lea rdx, [0x180000000]
jmp case.0x1800355a0.87
mov rsi, rdi
test r15, r15
jle 0x180035869
nop dword [rax]
movzx edx, byte [rsi + r13]
lea rcx, str._02x
call fcn.1800befd0
inc rsi
cmp rsi, r15
jl 0x180035850
lea rcx, [0x1803427fc]
call fcn.1800befd0
mov r15, qword [rbp - 0x28]
mov r9d, dword [rsp + 0x60]
mov r10, qword [rsp + 0x58]
mov r11, qword [rsp + 0x50]
mov r8, qword [rsp + 0x78]
lea rdx, [0x180000000]
jmp case.0x1800355a0.87
mov rax, rdi
mov qword [rbp - 0x50], rax
mov ecx, 0xffffffff
mov dword [rsp + 0x70], ecx
lea r8d, [rcx + 2]
dec dword [r10]
cmp dword [r10], eax
jle 0x180035c08
nop dword [rax]
add rsi, 8
mov qword [rbp - 0x58], rsi
mov rdx, qword [rsi]
test r8d, r8d
je 0x18003597e
cmp byte [rdx], 0x2d
jne 0x18003597e
cmp byte [rdx + 1], 0x2d
jne 0x1800358ee
cmp byte [rdx + 2], 0
jne 0x1800358ee
mov r8d, edi
jmp 0x180035958
inc rdx
movzx eax, byte [rdx]
test al, al
je 0x180035954
nop dword [rax + rax]
movsx esi, al
mov ecx, esi
sub ecx, 0x62
je 0x180035939
sub ecx, 2
je 0x18003592e
sub ecx, 1
je 0x180035926
cmp ecx, 3
jne 0x180035bc7
mov dword [rbp - 0x80], 2
jmp 0x18003593c
mov ecx, edi
mov dword [rsp + 0x70], ecx
jmp 0x180035940
mov ecx, 1
mov dword [rsp + 0x70], ecx
jmp 0x180035940
mov dword [rbp - 0x80], edi
mov ecx, dword [rsp + 0x70]
mov r9d, 0x4f
inc rdx
movzx eax, byte [rdx]
test al, al
jne 0x180035900
mov rsi, qword [rbp - 0x58]
mov rax, qword [rbp - 0x50]
dec dword [r10]
cmp dword [r10], 0
jg 0x1800358c0
test ecx, ecx
js 0x180035c08
mov r8, qword [rsp + 0x78]
lea rdx, [0x180000000]
jmp case.0x1800355a0.87
test rax, rax
jne 0x180035be9
mov rax, rdx
mov qword [rbp - 0x50], rdx
jmp 0x180035958
mov edx, 8
lea ecx, [rdx - 4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rbp - 0x70], rax
test rax, rax
je 0x180035c2a
mov rax, qword [rsp + 0x78]
mov ecx, dword [rax]
mov dword [rsp + 0x40], ecx
mov qword [rsp + 0x20], rdi
mov r9, qword [rsp + 0x58]
mov r8d, SHTestTokenMembership
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x40]
call fcn.180071ad0
mov r14, rax
jmp 0x180035824
mov ecx, 0x20
call fcn.1800bf258
mov rsi, rax
mov qword [rbp - 0x18], rax
test rax, rax
je 0x180035a18
mov rax, qword [rsp + 0x58]
mov r8, qword [rax + 8]
mov rdx, qword [rax]
mov qword [rsi + 0x10], rdi
mov qword [rsi + 0x18], ILClone
mov byte [rsi], 0
mov rcx, rsi
call fcn.18002f400
jmp 0x180035a1b
mov rsi, rdi
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rbp + 0x40], xmm1
xor edx, edx
mov r8d, 0xde
lea rcx, [rbp + 0x30]
call fcn.180088050
jmp 0x180035824
mov rax, qword [rsi]
mov qword [rbp + 0x10], rax
mov rcx, qword [r10]
mov rax, qword [rcx]
lea r9, [rbp + 0x10]
mov r8d, 1
lea rdx, [rbp - 0x30]
call qword [rax + reloc.SHELL32.dll_SHSetFolderPathW]
test rax, rax
jne 0x180035824
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x180035aa5
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035aa0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180035caa
call fcn.1800bf294
mov rax, 0xffffffffffffffff
jmp 0x180035b74
mov rax, qword [r10]
mov rcx, qword [rax]
mov rax, qword [rsi]
cmp rcx, qword [rax]
jne 0x180035acf
mov rax, qword [r11]
cmp rcx, qword [rax]
jne 0x180035acf
mov rax, qword [r8]
cmp rcx, qword [rax]
je case.0x1800355a0.87
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov dword [rsp + 0x74], edi
jmp case.0x1800355a0.87
mov dword [rbp - 0x68], edi
mov ecx, dword [rsp + 0x48]
dec r9d
mov dword [rsp + 0x60], r9d
lea eax, [rcx - 0xa]
cmp r9d, eax
jbe 0x180035cbe
mov rsi, qword [rbp - 0x58]
jmp 0x180035581
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov ecx, dword [rax]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_strerror]
mov rbx, rax
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str.IDENTITY_TOO_LONG
mov r8, rbx
mov rcx, rax
call fcn.1800bee00
mov dword [rbp - 0x68], 1
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x180035b70
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035b6b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180035caa
call fcn.1800bf294
mov rax, qword [rbp - 0x68]
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.1800bfa40
mov rbx, qword [rsp + 0x1f0]
add rsp, 0x1b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
nop
mov ecx, dword [rax]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_strerror]
mov rbx, rax
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str.428_429_431_CHU
jmp 0x180035b23
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r8d, esi
lea rdx, str.SymbolEngineShaderDebugInfo.ctor
call fcn.1800bee00
jmp 0x180035b2e
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.DriveAppProvider::OnExtensionInstalled
call fcn.1800bee00
jmp 0x180035b2e
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.DBK_call_of_stub_unexpected:_EvalAsm::getFileName
call fcn.1800bee00
mov dword [rbp - 0x68], edi
jmp 0x180035b35
mov rax, qword [rsp + 0x68]
mov dword [rax], ILRemoveLastID
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x180035c6c
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035c67
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180035caa
call fcn.1800bf294
mov rax, rdi
jmp 0x180035b74
mov rbx, qword [rbp - 0x30]
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x180035cb6
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035cb1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180035cb1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800bf294
mov rax, rbx
jmp 0x180035b74
mov rdx, qword [rbp - 0x70]
mov rcx, qword [rsp + 0x68]
mov r9d, dword [rsp + 0x74]
mov r15d, dword [rsp + 0x48]
jmp 0x180035ce5
mov rdx, qword [rbp - 0x30]
mov qword [rbp - 0x70], rdx
mov r9d, dword [rsp + 0x40]
mov dword [rsp + 0x74], r9d
mov r12d, r15d
mov esi, dword [rsp + 0x40]
mov ebx, dword [rsp + 0x40]
mov r13d, dword [rsp + 0x40]
nop word [rax + rax]
lea eax, [r15 + 0x244]
cmp r12d, eax
jae 0x180036385
cmp r12d, 0xe2
ja 0x1800361c0
je 0x18003625a
mov eax, r12d
sub eax, 0x50
je 0x180035d4b
sub eax, 0x1e
je 0x1800361ad
sub eax, 0xa
je 0x18003617c
sub eax, 0x30
je 0x180035d8f
cmp eax, 0xa
jne 0x18003631e
mov rax, qword [rbp + 0x48]
cmp rax, 0x10
jb 0x180035b70
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035b6b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800363c4
jmp 0x180035b6b
mov eax, dword [r11 + 8]
cmp eax, 6
jne 0x180035e27
mov r15d, 0x73
mov eax, r15d
sub eax, 0x73
je 0x180035de6
cmp eax, 1
jne 0x180035dfe
mov eax, dword [r8]
mov dword [rsp + 0x40], eax
mov qword [rsp + 0x20], rdi
mov r9, r10
mov r8d, SHTestTokenMembership
mov rdx, r11
lea rcx, [rsp + 0x40]
call fcn.180071ad0
mov r14d, eax
mov r11, qword [rsp + 0x50]
cmp dword [r11 + 8], 0x18
je 0x180035e13
mov rdx, qword [rbp - 0x70]
jmp 0x180035dfe
mov dword [rsp + 0x74], 1
test dword [r8], 0x100
je 0x180035dfa
or dword [rdx], 1
add dword [r10 + 0x24], r14d
inc r15d
cmp r15d, 0x75
jae 0x180035e23
mov r10, qword [rsp + 0x58]
mov r8, qword [rsp + 0x78]
jmp 0x180035da2
mov rax, qword [rsp + 0x68]
mov dword [rax], 2
jmp 0x180036230
mov eax, dword [r11 + 8]
cmp eax, 2
jne 0x180035e40
mov dword [r11 + 8], 0x17
nop dword [rax]
nop dword [rax + rax]
mov r12d, 0x121
nop word [rax + rax]
mov eax, r12d
sub eax, 0x121
je 0x180036152
sub eax, 1
je 0x1800360dc
sub eax, 1
je 0x1800360cf
sub eax, 1
je 0x18003605f
cmp eax, 1
jne 0x180036157
cmp r13d, eax
jne 0x180035f75
mov r15d, 0x30
mov eax, r15d
sub eax, 0x30
je 0x180035edd
cmp eax, 1
jne 0x180035f5f
mov qword [rbp - 0x40], rdx
lea rax, [rbp - 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rbp]
xor r8d, r8d
lea rdx, [rbp - 0x18]
mov ecx, 0xec
call fcn.180037d70
mov rcx, qword [rsp + 0x68]
mov dword [rcx], eax
test eax, eax
jne 0x180036230
mov r11, qword [rsp + 0x50]
jmp 0x180035f5f
lea rax, [rbp + 0x78]
mov qword [rbp + 8], rax
mov dword [rsp + 0x40], ebx
lea rax, [rbp]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x7b
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp - 0x58]
mov r8, qword [rsp + 0x58]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x28]
call fcn.1800a96d0
test eax, eax
jne 0x180036170
mov rax, qword [rsp + 0x78]
mov eax, dword [rax]
mov dword [rsp + 0x40], eax
mov qword [rsp + 0x20], rdi
mov r9, qword [rsp + 0x58]
mov r8d, SHTestTokenMembership
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x40]
call fcn.180071ad0
mov r14d, eax
mov r11, qword [rsp + 0x50]
cmp dword [r11 + 8], 0x18
je 0x180035e13
inc r15d
cmp r15d, 0x32
mov rdx, qword [rbp - 0x70]
jb 0x180035e91
jmp 0x180036040
mov ecx, dword [rbp - 0x18]
test ecx, ecx
je 0x18003601f
sub ecx, 2
je 0x180035fe9
sub ecx, 1
je 0x180035fc8
cmp ecx, 1
jne 0x18003603a
mov rax, qword [rsp + 0x78]
mov eax, dword [rax]
mov dword [rsp + 0x40], eax
mov qword [rbp - 0x40], rdx
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xd9
mov r9, qword [rbp - 0x10]
xor r8d, r8d
lea rdx, [rbp - 0x40]
xor ecx, ecx
call fcn.180039120
jmp 0x180036009
mov qword [rbp - 0x40], rdx
mov qword [rsp + 0x20], rdi
mov r9d, 0xc8
xor r8d, r8d
lea rdx, [rbp - 0x40]
mov rcx, qword [rbp - 0x10]
call fcn.1800b5c50
jmp 0x180036009
mov qword [rbp - 0x40], rdx
mov rax, qword [rbp - 0x10]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x40]
lea rcx, [rbp - 0x40]
call fcn.18005f6c0
mov rcx, qword [rsp + 0x68]
mov dword [rcx], eax
test eax, eax
jne 0x180036230
mov r11, qword [rsp + 0x50]
jmp 0x18003603a
movzx ecx, byte [rbp - 0x10]
mov eax, ecx
shr rax, 5
lea r8, [rdx + rax*4]
and cl, 0x1f
mov edx, 1
shl edx, cl
or dword [r8], edx
mov r12d, 0x125
cmp dword [r11 + 8], 2
jne 0x180036157
mov r12d, 0xa8
mov r10, qword [rsp + 0x58]
add dword [r10 + 0x24], r14d
jmp 0x18003631e
cmp dword [r11 + 8], 3
jne 0x180036157
mov r15, qword [rsp + 0x58]
add dword [r15 + 0x24], r14d
mov rax, qword [rsp + 0x78]
mov eax, dword [rax]
mov dword [rsp + 0x40], eax
mov qword [rsp + 0x20], rdi
mov r9, r15
mov r8d, SHTestTokenMembership
lea rdx, [rbp - 0x28]
lea rcx, [rsp + 0x40]
call fcn.180071ad0
mov rbx, rax
mov r11, qword [rsp + 0x50]
cmp dword [r11 + 8], 0x18
je 0x180035e13
cmp dword [rbp - 0x20], 2
jne 0x1800360c4
sub dword [r15 + 0x24], r14d
mov dword [r11 + 8], 0x17
jmp 0x180036157
mov r13d, 1
jmp 0x180036157
cmp dword [r11 + 8], 0x18
je 0x180035e13
jmp 0x180036157
lea rax, [rbp + 0x50]
mov qword [rbp - 0x10], rax
mov dword [rsp + 0x40], r14d
lea rax, [rbp - 0x18]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x7b
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp - 0x58]
mov r15, qword [rsp + 0x58]
mov r8, r15
lea rdx, [rsp + 0x40]
mov rcx, r11
call fcn.1800a96d0
test eax, eax
jne 0x180036170
mov rax, qword [rsp + 0x78]
mov eax, dword [rax]
mov dword [rsp + 0x40], eax
mov qword [rsp + 0x20], rdi
mov r9, r15
mov r8d, SHTestTokenMembership
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x40]
call fcn.180071ad0
mov r14d, eax
mov r11, qword [rsp + 0x50]
jmp 0x180036157
mov ebx, edi
mov r13d, edi
inc r12d
cmp r12d, 0x126
mov rdx, qword [rbp - 0x70]
jb 0x180035e50
jmp 0x180035e40
mov rcx, qword [rsp + 0x68]
mov dword [rcx], eax
jmp 0x180036230
mov rax, qword [rbp - 0x58]
mov rax, qword [rax]
mov rdx, qword [rax + 0x28]
mov rax, qword [rdx]
mov r9, qword [r8]
mov r8, qword [r11]
mov rcx, qword [r10]
mov r9, qword [r9 + 0x28]
mov r8, qword [r8 + 0x28]
mov rcx, qword [rcx + 0x28]
call qword [rax + 0xc0]
mov byte [rbp - 0x68], al
jmp 0x180036319
cmp dword [r11 + 8], 0x18
jne 0x18003631e
mov dword [rcx], 2
jmp 0x180036230
mov eax, r12d
sub eax, 0x11c
je 0x1800362a5
sub eax, 0x3a
je 0x18003628d
sub eax, 0x3a
je 0x180036344
cmp eax, 0x3a
jne 0x18003631e
mov r15d, 0xd8
cmp r15d, 0x192
jae 0x180036251
mov eax, r15d
sub eax, 0xd8
je 0x18003622a
sub eax, 0x3e
je 0x18003621b
cmp eax, 0x3e
je 0x180035d4b
add r15d, 0x3e
mov rcx, qword [rsp + 0x68]
jmp 0x1800361ef
mov qword [rbp - 0x68], rdi
add r15d, 0x3e
mov rcx, qword [rsp + 0x68]
jmp 0x1800361ef
mov dword [rcx], ILRemoveLastID
mov r15d, 0xd8
mov r12d, 0x1ca
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add r15d, 0x3e
mov rcx, qword [rsp + 0x68]
jmp 0x1800361ef
mov rdx, qword [rbp - 0x70]
mov r9d, dword [rsp + 0x74]
test r9d, r9d
je 0x180036281
mov qword [rbp - 0x40], rdx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 0x81
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.180033fd0
mov dword [rbp + 0x28], 0x13
jmp 0x180036319
cmp esi, 0xffffffff
je 0x18003629d
cmp qword [rbp - 0x50], 0
jne 0x18003631e
mov r12d, 0x190
jmp 0x18003631e
mov qword [rbp + 0x20], rdx
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp - 0x40], xmm0
mov dword [rsp + 0x40], edi
mov rax, qword [rbp - 0x58]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0xb1
lea r9, [rbp - 0x40]
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.18003c6c0
mov rsi, rax
mov dword [rbp - 0x78], eax
mov dword [rsp + 0x40], edi
mov dword [rsp + 0x38], 0x57
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x78]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800479f0
mov qword [rbp - 0x50], rax
mov r10, qword [rsp + 0x58]
add r12d, 0x3a
mov r11, qword [rsp + 0x50]
mov rdx, qword [rbp - 0x70]
mov rcx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x78]
mov r9d, dword [rsp + 0x74]
mov r15d, dword [rsp + 0x48]
jmp 0x180035d00
mov rax, qword [rbp + 0x48]
cmp rax, 0x10
jb 0x18003637c
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180036377
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800363c4
call fcn.1800bf294
mov rax, qword [rbp - 0x50]
jmp 0x180035b74
mov rax, qword [rbp + 0x48]
cmp rax, 0x10
jb 0x180035b70
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035b6b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180035b6b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rcx, str.set_ReadyList
call fcn.18005dc00
int3