Function at 0x18002e1a0
Capabilities:
Read file on windows
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x158]
sub rsp, 0x258
mov rax, qword [0x18005a098]
xor rax, rsp
mov qword [rbp + 0x140], rax
mov r10, r9
mov qword [rsp + 0x58], r9
mov r11, r8
mov qword [rsp + 0x60], r8
mov r8, rdx
mov qword [rsp + 0x48], rdx
mov rdx, rcx
mov qword [rsp + 0x50], rcx
xor esi, esi
mov qword [rbp + 8], rsi
mov qword [rbp + 0x10], 0xf
mov byte [rbp - 8], sil
mov eax, dword [rbp + 0x1c0]
mov r12d, eax
lea ebx, [rax + 0x41e]
mov dword [rsp + 0x68], ebx
lea r14, [0x180000000]
lea edi, [rsi + 2]
mov r15, qword [rbp - 0x80]
mov qword [rsp + 0x70], r15
cmp eax, ebx
jae 0x18002e866
lea r9d, [rsi + 0x7b]
movzx eax, byte [rsp + 0x30]
mov dword [rsp + 0x38], eax
mov rcx, qword [rbp - 0x80]
mov qword [rbp - 0x68], rcx
cmp r12d, 0x152
ja 0x18002e5a6
je 0x18002e58c
lea eax, [r12 - 0x37]
cmp eax, 0xf8
ja case.0x18002e279.69
movzx eax, byte [r14 + rax + 0x2ee68]
mov ecx, dword [r14 + rax*4 + 0x2ee2c]
add rcx, r14
jmp rcx
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xf6
call fcn.18000e210
mov r15, rax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], rsi
mov qword [rbp - 0x60], 1
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, r15
mov edx, 0xf0
mov r8d, 1
lea rcx, [rbp - 0x60]
call fcn.18002ccc0
jmp 0x18002e77b
mov rax, qword [r10 + 0x18]
test rax, rax
je case.0x18002e279.69
mov qword [rax + 0x20], r11
jmp case.0x18002e279.69
mov qword [rbp - 0x70], 8
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, r15
mov edx, 0xf0
mov r8d, 8
lea rcx, [rbp - 0x70]
call fcn.18002ccc0
mov qword [rsp + 0x78], 9
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, r15
mov edx, 0xf0
mov r8d, 9
lea rcx, [rsp + 0x78]
call fcn.18002ccc0
jmp 0x18002e77b
cmp qword [r10 + 0x18], r11
je case.0x18002e8c8.56
mov rcx, qword [r11 + 0x20]
test rcx, rcx
je 0x18002e357
mov rax, qword [r11 + 0x18]
mov qword [rcx + 0x18], rax
mov rcx, qword [r11 + 0x18]
test rcx, rcx
je case.0x18002e279.69
mov rax, qword [r11 + 0x20]
mov qword [rcx + 0x20], rax
jmp case.0x18002e279.69
mov qword [rbp - 0x78], rdi
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, r15
mov r8, rdi
mov edx, 0xf0
lea rcx, [rbp - 0x78]
call fcn.18002ccc0
mov qword [rbp - 0x48], 3
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, r15
mov edx, 0xf0
mov r8d, 3
lea rcx, [rbp - 0x48]
call fcn.18002ccc0
mov qword [rbp - 0x40], 4
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, r15
mov edx, 0xf0
mov r8d, 4
lea rcx, [rbp - 0x40]
call fcn.18002ccc0
jmp 0x18002e77b
mov qword [rbp - 0x38], 5
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, r15
mov edx, 0xf0
mov r8d, 5
lea rcx, [rbp - 0x38]
call fcn.18002ccc0
mov qword [rbp - 0x30], 6
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, r15
mov edx, 0xf0
mov r8d, 6
lea rcx, [rbp - 0x30]
call fcn.18002ccc0
mov qword [rbp - 0x28], 7
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, r15
mov edx, 0xf0
mov r8d, 7
lea rcx, [rbp - 0x28]
call fcn.18002ccc0
jmp 0x18002e77b
mov word [rbp + 0x58], r9w
movzx eax, word [0x18004e7b0]
mov word [rbp + 0x59], ax
movzx eax, byte [0x18004e7b2]
mov byte [rbp + 0x5b], al
jmp case.0x18002e279.69
test r10, r10
je 0x18002e7cd
mov qword [r10], r11
jmp case.0x18002e279.69
mov r9, r8
mov r8, qword [rdx]
mov rdx, qword [r11]
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov qword [rbp - 0x58], rax
jmp 0x18002e77b
xor eax, eax
lock cmpxchg qword [0x18005a180], rsi
mov qword [rbp - 0x68], rax
jne case.0x18002e279.69
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x18002e505
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002e500
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002ee1e
call fcn.1800431e4
mov rax, qword [rbp - 0x58]
mov rcx, qword [rbp + 0x140]
xor rcx, rsp
call fcn.1800436f0
add rsp, 0x258
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov eax, dword [str.etho]
mov dword [rbp + 0x5b], eax
movzx eax, word [0x18004e7c4]
mov word [rbp + 0x5f], ax
movzx eax, byte [0x18004e7c6]
mov byte [rbp + 0x61], al
jmp case.0x18002e279.69
mov rax, rsi
xchg qword [0x18005a180], rax
jmp case.0x18002e279.69
mov qword [rbp - 0x20], 0xa
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, r15
mov edx, 0xf0
mov r8d, 0xa
lea rcx, [rbp - 0x20]
call fcn.18002ccc0
jmp 0x18002e77b
movzx eax, word [0x18004e7ac]
mov word [rbp + 0x61], ax
movzx eax, byte [0x18004e7ae]
mov byte [rbp + 0x63], al
jmp case.0x18002e279.69
mov eax, r12d
sub eax, 0x16d
je 0x18002e75c
cmp eax, 0x23
jne case.0x18002e279.69
mov eax, dword [str.init_]
mov dword [rbp + 0x63], eax
movzx eax, word [0x18004e7b8]
mov word [rbp + 0x67], ax
mov al, 1
mov dword [rsp + 0x38], eax
mov qword [rbp + 0x28], rsi
mov qword [rbp + 0x30], 0xf
mov byte [rbp + 0x18], 0
lea rax, [rbp + 0x58]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x18002e5f2
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x18]
call fcn.180015250
nop
lea r14, [rbp + 0x18]
mov r15, qword [rbp + 0x18]
mov r13, qword [rbp + 0x30]
cmp r13, 0x10
cmovae r14, r15
mov rdi, qword [rbp + 0x28]
cmp rdi, 0x10
jae 0x18002e63d
movups xmm0, xmmword [r14]
movups xmmword [rbp + 0x38], xmm0
mov qword [rbp + 0x50], 0xf
jmp 0x18002e6bf
mov rbx, rdi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18002e691
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18002ee25
mov rcx, rax
call fcn.1800431a8
mov rcx, rax
test rax, rax
je 0x18002e858
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x18002e6a0
test rcx, rcx
je 0x18002e69d
call fcn.1800431a8
jmp 0x18002e6a0
mov rax, rsi
mov qword [rbp + 0x38], rax
lea r8, [rdi + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x50], rbx
movups xmm0, xmmword [rbp + 0x38]
mov ebx, dword [rsp + 0x68]
movups xmmword [rbp - 0x18], xmm0
mov qword [rbp + 0x48], rdi
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x18002e702
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002e6fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002e858
call fcn.1800431e4
movups xmm0, xmmword [rbp - 0x18]
movups xmmword [rbp - 8], xmm0
movups xmm0, xmmword [rbp + 0x48]
movups xmmword [rbp + 8], xmm0
cmp r13, 0x10
jb 0x18002e749
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x18002e741
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002e85f
mov rcx, r15
call fcn.1800431e4
mov r15, qword [rsp + 0x70]
mov edi, 2
lea r14, [0x180000000]
jmp 0x18002e77b
mov qword [rbp - 0x80], 4
mov r9d, 0x112
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x40]
mov rcx, r15
call fcn.18003d920
mov rdx, qword [rsp + 0x50]
mov r8, qword [rsp + 0x48]
mov r10, qword [rsp + 0x58]
mov r11, qword [rsp + 0x60]
mov r9d, 0x7b
add r12d, 0x3e
cmp r12d, ebx
jb 0x18002e242
mov eax, dword [rbp + 0x1c0]
mov r9d, dword [rsp + 0x38]
mov rdx, qword [rbp - 0x68]
jmp 0x18002e879
mov rcx, qword [rbp + 0x10]
cmp rcx, 0x10
jb 0x18002e505
lea rdx, [rcx + 1]
jmp 0x18002e4d7
mov rcx, qword [rbp + 0x10]
cmp rcx, 0x10
jb 0x18002e809
lea rdx, [rcx + 1]
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002e804
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002ee1e
call fcn.1800431e4
mov rax, rsi
jmp 0x18002e509
mov rbx, qword [r10]
mov rcx, qword [rbp + 0x10]
cmp rcx, 0x10
jb 0x18002e850
lea rdx, [rcx + 1]
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002e84b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002ee1e
call fcn.1800431e4
mov rax, rbx
jmp 0x18002e509
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movzx r9d, byte [rsp + 0x30]
mov dword [rsp + 0x38], r9d
mov rdx, qword [rbp - 0x80]
mov qword [rbp - 0x68], rdx
lea ebx, [rax - 0x11]
mov dword [rsp + 0x48], ebx
cmp eax, ebx
jbe 0x18002eddf
lea r13d, [rax - 0x33]
mov dword [rsp + 0x68], r13d
mov r14, qword [rbp - 0x80]
mov rdi, qword [rsp + 0x78]
mov r12, qword [rbp - 0x70]
nop
cmp r13d, 0xa3
ja case.0x18002e8c8.5
lea r8, [0x180000000]
movzx eax, byte [r8 + r13 + 0x2efa8]
mov ecx, dword [r8 + rax*4 + 0x2ef64]
add rcx, r8
jmp rcx
mov rax, qword [r14 + 0x10]
mov rcx, qword [rax + 0x10]
cmp qword [rcx + 8], 1
jne 0x18002ed21
mov rax, qword [r14 + 0x18]
cmp qword [rax + 8], 8
jne 0x18002ecfb
mov rax, qword [rax + 0x10]
cmp qword [rax + 8], 6
je case.0x18002e8c8.5
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.VNCDecodeH264CoreAVCNewNALPacket
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r14, qword [rsp + 0x40]
mov edx, 0xb9
nop dword [rax + rax]
mov eax, edx
sub eax, 0xb9
je 0x18002e9c8
sub eax, 0x23
je 0x18002e9bc
sub eax, 0x5d
je 0x18002e957
sub eax, 0x23
je 0x18002e98b
cmp eax, 0x80
jne 0x18002e9f0
mov r14, rdi
cmp qword [r14 + 8], 3
je case.0x18002e8c8.5
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.resolve_useLocal_int_QByteArray_
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [r14]
test rcx, rcx
je 0x18002e9b2
mov rax, qword [r15]
test cl, 1
je 0x18002e99f
imul r12, rax
imul rax, rax
mov qword [r15], rax
shr qword [r14], 1
mov rcx, qword [r14]
jne 0x18002e993
mov qword [rbp - 0x70], r12
mov rdi, r12
mov qword [rsp + 0x78], r12
jmp 0x18002e9f0
mov r12d, 1
mov qword [rbp - 0x70], r12
jmp 0x18002e9f0
test r14, r14
je 0x18002e9e8
nop dword [rax]
cmp qword [r14 + 8], 3
je 0x18002ea04
jbe 0x18002e9df
mov r14, qword [r14 + 0x10]
jmp 0x18002e9e3
mov r14, qword [r14 + 0x18]
test r14, r14
jne 0x18002e9d0
mov rdi, rsi
mov qword [rsp + 0x78], rsi
sub edx, 0xffffff80
cmp edx, 0x339
jae 0x18002e957
jmp 0x18002e930
mov rdi, r14
mov qword [rsp + 0x78], r14
jmp 0x18002e95a
mov dword [rbp - 0x78], esi
jmp case.0x18002e8c8.5
mov rcx, qword [r14 + 0x18]
mov rax, qword [rcx + 0x18]
cmp qword [rax + 8], 9
jne 0x18002ed6d
mov rdx, qword [rcx + 0x10]
mov rax, qword [rdx + 0x10]
cmp qword [rax + 8], 5
jne 0x18002ed47
mov rax, qword [rdx + 0x18]
cmp qword [rax + 8], 7
je case.0x18002e8c8.5
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._error_AnotherCFURunning__error_
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp qword [r14 + 0x20], 0
jne 0x18002ed93
mov rax, qword [r14 + 0x10]
cmp qword [rax + 8], 2
je case.0x18002e8c8.5
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._Z22convert_char16_sat_rtzDv16_i
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp - 0x60], rax
mov r9d, dword [rsp + 0x38]
jmp case.0x18002e8c8.5
mov rcx, rdx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r9d, dword [rsp + 0x38]
jmp case.0x18002e8c8.5
mov rax, qword [r14 + 0x18]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x18]
cmp qword [rax + 8], 0xa
jne 0x18002edb9
mov byte [rsp + 0x30], 1
lea r8, [rsp + 0x30]
mov rdx, r15
mov ecx, 0xec
call fcn.180030880
mov r15, rax
mov qword [rsp + 0x70], rax
mov r9d, dword [rsp + 0x38]
jmp case.0x18002e8c8.5
lea r9, [r10 + 0x48]
xor edx, edx
lea r8d, [rdx + 4]
lea rcx, [rbp - 8]
call fcn.180003920
mov r9d, dword [rsp + 0x38]
jmp case.0x18002e8c8.5
lea r9, [r10 + 0xa8]
mov qword [rsp + 0x20], rsi
xor edx, edx
mov r8d, 0xd9
lea rcx, [rbp - 8]
call fcn.1800121f0
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 8]
lea ecx, [r9 + 0x47]
call fcn.18000ccd0
mov r9d, dword [rsp + 0x38]
jmp case.0x18002e8c8.5
test r9b, r9b
je 0x18002ec1a
mov r15d, 0xa1
mov rsi, qword [rbp - 0x60]
mov r13d, dword [rsp + 0x50]
lea edi, [r15 - 0x51]
lea r12d, [rdi - 0x4e]
nop word [rax + rax]
mov eax, r15d
sub eax, 0xa1
je 0x18002ebef
cmp eax, 0x2c
jne 0x18002ebf4
mov word [rbp - 0x78], di
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp - 0x78]
mov r8d, r13d
lea rdx, [rbp + 0x70]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadConsoleOutputAttribute]
lea rax, [rbp - 0x4c]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp - 0x78]
mov r8d, r13d
lea rdx, [rbp + 0x70]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteConsoleOutputAttribute]
jmp 0x18002ebf4
mov word [rbp - 0x76], r12w
add r15d, 0x2c
cmp r15d, 0xf9
jb 0x18002eba0
mov rdi, qword [rsp + 0x78]
xor esi, esi
mov r12, qword [rbp - 0x70]
mov r15, qword [rsp + 0x70]
mov r13d, dword [rsp + 0x68]
mov ebx, dword [rsp + 0x48]
mov dword [rsp + 0x20], 0x6b
mov r9, qword [0x18005a170]
xor r8d, r8d
lea rdx, [rbp - 8]
xor ecx, ecx
call fcn.180017bc0
mov byte [rbp - 0x58], al
mov r9d, dword [rsp + 0x38]
jmp case.0x18002e8c8.5
mov rax, qword [r10 + 0x18]
mov qword [r11 + 0x18], rax
mov qword [r11 + 0x20], r10
mov qword [r10 + 0x18], r11
jmp case.0x18002e8c8.5
mov dword [rsp + 0x50], 0x64
jmp case.0x18002e8c8.5
mov qword [rsp + 0x68], rdx
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x68]
lea ecx, [r9 + 0x4d]
call fcn.180015b90
mov r9d, dword [rsp + 0x38]
jmp case.0x18002e8c8.5
mov rdx, qword [rbp + 8]
mov rcx, qword [rbp + 0x10]
cmp rdx, rcx
jae 0x18002ecaa
lea rax, [rdx + 1]
mov qword [rbp + 8], rax
lea rax, [rbp - 8]
cmp rcx, 0x10
cmovae rax, qword [rbp - 8]
mov word [rax + rdx], 0x7d
jmp 0x18002ecc2
mov r9b, 0x7d
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp - 8]
call fcn.180001dd0
mov r9d, dword [rsp + 0x38]
movzx r9d, r9b
cmp qword [rbp - 0x60], 0xffffffffffffffff
cmove r9d, esi
mov dword [rsp + 0x38], r9d
dec r13d
mov dword [rsp + 0x68], r13d
lea eax, [r13 + 0x33]
cmp eax, ebx
jbe 0x18002eddf
mov r10, qword [rsp + 0x58]
mov r11, qword [rsp + 0x60]
mov rdx, qword [rbp - 0x68]
jmp 0x18002e8a0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Show_cache_use_for_stack_access.
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.implizite_Konvertierung_aus_Aufz
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.if__realCurr_STREQUAL__realOrig_
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.get_FunctionUnitNumberToBeDotted
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.pkix_pl_Cert_CheckExtendKeyUsage
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.CConnThread__reverse_connection_
call fcn.180042f40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rcx, qword [rbp + 0x10]
cmp rcx, 0x10
jb 0x18002e505
lea rdx, [rcx + 1]
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002e500
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002e500
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.180014c30
int3