Function at 0x18001c8b0
Capabilities:
Compare security identifiers

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf0]
sub rsp, 0x1f0
mov rax, qword [0x1800ad828]
xor rax, rsp
mov qword [rbp + 0xe8], rax
mov r15, r9
mov r11, r8
mov qword [rbp - 0x78], r8
mov qword [rbp - 0x60], rdx
mov dword [rsp + 0x50], ecx
mov rsi, qword [rbp + 0x150]
mov qword [rbp - 0x50], rsi
mov r9, qword [rbp + 0x158]
mov qword [rbp - 0x58], r9
mov r10, qword [rbp + 0x160]
mov qword [rbp - 0x80], r10
xor eax, eax
mov qword [rbp - 0x28], rax
mov r8d, ILClone
mov qword [rsp + 0x60], r8
mov qword [rbp - 0x20], r8
mov byte [rbp - 0x38], al
mov r13d, eax
mov qword [rbp - 8], rax
mov qword [rbp], r8
mov byte [rbp - 0x18], r13b
mov r12d, ecx
mov dword [rbp - 0x68], ecx
lea eax, [rcx + 0x24c]
mov dword [rsp + 0x44], eax
cmp ecx, eax
jae 0x18001d35f
movzx ebx, byte [rsp + 0x40]
mov dword [rsp + 0x68], ebx
mov r9, qword [rbp - 0x50]
mov qword [rsp + 0x70], r9
movzx edi, byte [rsp + 0x40]
mov dword [rsp + 0x6c], edi
movzx eax, byte [rsp + 0x40]
mov dword [rbp - 0x48], eax
movzx r14d, byte [rsp + 0x40]
mov eax, dword [rsp + 0x44]
nop
cmp r12d, 0x162
ja 0x18001cc58
je 0x18001d172
lea eax, [r12 - 0x5a]
cmp eax, 0xf5
ja case.0x18001c9c3.91
lea rcx, [0x180000000]
movzx eax, byte [rcx + rax + 0x1d708]
mov ecx, dword [rcx + rax*4 + 0x1d6d8]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
xor bl, bl
mov dword [rsp + 0x68], ebx
mov eax, dword [rdx]
sub eax, 2
sar eax, 3
mov dword [rbp - 0x64], eax
jmp case.0x18001c9c3.91
test r9, r9
je 0x18001d18b
mov ecx, dword [rdx]
neg ecx
and ecx, 7
mov edi, 0xff
sar edi, cl
mov dword [rsp + 0x6c], edi
jmp case.0x18001c9c3.91
mov rdx, qword [rsi + 0x10]
cmp qword [r15 + 0x10], rdx
cmovae rdx, qword [r15 + 0x10]
mov qword [rbp - 0x70], rdx
xor eax, eax
mov edi, eax
mov ebx, eax
mov esi, 3
mov dword [rsp + 0x48], esi
mov r12, qword [rbp - 0x18]
nop
cmp esi, 0x13
ja case.0x18001ca3d.4
mov eax, esi
lea r9, [0x180000000]
mov ecx, dword [r9 + rax*4 + 0x1d800]
add rcx, r9
jmp rcx
mov rbx, r15
cmp qword [r15 + 0x18], 0x10
jb case.0x18001ca3d.4
mov rbx, qword [r15]
jmp case.0x18001ca3d.4
test rdx, rdx
je case.0x18001ca3d.4
mov qword [rsp + 0x78], rdx
mov esi, 0x5d
mov eax, esi
sub eax, 0x5d
je 0x18001cabd
cmp eax, 1
jne 0x18001caa5
lea rcx, [rbp - 0x38]
mov r8, qword [rbp - 0x38]
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
cmovae rcx, r8
inc rdi
add rcx, qword [rbp - 0x28]
cmp rdi, rcx
jne 0x18001caa0
lea rdi, [rbp - 0x38]
cmp rdx, 0x10
cmovae rdi, r8
mov r8, qword [rsp + 0x60]
inc esi
cmp esi, 0x5f
jb 0x18001ca68
sub qword [rsp + 0x78], 1
jne 0x18001ca63
mov esi, dword [rsp + 0x48]
jmp 0x18001cbc8
add r14b, byte [rbx]
add r14b, byte [rdi]
and r14b, 0xf
cmp r13, r8
jae 0x18001caec
lea rax, [r13 + 1]
mov qword [rbp - 8], rax
lea rax, [rbp - 0x18]
cmp r8, 0x10
cmovae rax, r12
mov byte [rax + r13], r14b
mov byte [rax + r13 + 1], 0
jmp 0x18001cb00
movzx r9d, r14b
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp - 0x18]
call fcn.180001e40
lea rax, [rbp - 0x18]
mov r12, qword [rbp - 0x18]
mov r8, qword [rbp]
mov qword [rsp + 0x60], r8
cmp r8, 0x10
cmovae rax, r12
mov r13, qword [rbp - 8]
movzx r14d, byte [rax + r13 - 1]
mov rcx, r15
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x18001cb33
mov rcx, qword [r15]
inc rbx
add rcx, qword [r15 + 0x10]
cmp rbx, rcx
jne 0x18001caa5
mov rbx, r15
cmp rdx, 0x10
jb 0x18001caa5
mov rbx, qword [r15]
jmp 0x18001caa5
xor r14b, r14b
jmp case.0x18001ca3d.4
mov r8d, 0xa4
lea rdx, [rbp - 0x38]
mov rcx, r15
call fcn.180080ce0
lea rcx, [r15 + 0x20]
mov r8d, 0xa4
lea rdx, [rbp - 8]
call fcn.180080ce0
mov r8, qword [rsp + 0x60]
jmp 0x18001cbc8
lea r8, [rbp - 0x38]
mov edx, 0xc4
xor ecx, ecx
call fcn.18002de70
mov r8, qword [rsp + 0x60]
jmp 0x18001cbc8
lea rcx, [rbp - 0x18]
call fcn.180050cb0
lea rdi, [rbp - 0x38]
cmp qword [rbp - 0x20], 0x10
cmovae rdi, qword [rbp - 0x38]
mov r8, qword [rbp]
mov qword [rsp + 0x60], r8
mov r13, qword [rbp - 8]
mov r12, qword [rbp - 0x18]
mov rdx, qword [rbp - 0x70]
dec esi
mov dword [rsp + 0x48], esi
lea eax, [rsi + 0x47]
cmp eax, 0x42
ja 0x18001ca20
mov rsi, qword [rbp - 0x50]
mov r10, qword [rbp - 0x80]
cmp r10, rsi
je 0x18001cc08
mov rdx, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x18001cbf8
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
mov rcx, r10
call fcn.180018980
mov r10, qword [rbp - 0x80]
mov rax, qword [rbp - 0x58]
mov rax, qword [rax]
mov qword [rsp + 0x78], rax
lea r9, [rbp - 0x18]
mov r8, r10
lea rdx, [rsp + 0x78]
mov ecx, 0x5f
call fcn.18000a250
mov r8, qword [rbp]
mov qword [rsp + 0x60], r8
mov r13, qword [rbp - 8]
mov r12d, dword [rbp - 0x68]
mov r9, qword [rsp + 0x70]
mov r10, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x60]
mov r11, qword [rbp - 0x78]
mov ebx, dword [rsp + 0x68]
mov edi, dword [rsp + 0x6c]
mov eax, dword [rsp + 0x44]
add r12d, 0x31
mov dword [rbp - 0x68], r12d
cmp r12d, eax
jb 0x18001c980
mov r9, qword [rbp - 0x58]
mov ecx, dword [rsp + 0x50]
mov r14d, ecx
mov r13d, dword [rsp + 0x58]
mov edi, dword [rsp + 0x58]
mov rbx, qword [rbp - 0x50]
mov qword [rbp - 0x70], rbx
mov r12d, dword [rsp + 0x58]
movzx r15d, byte [rsp + 0x40]
mov esi, dword [rsp + 0x58]
lea eax, [rcx + 0xb]
cmp r14d, eax
jae 0x18001d651
lea eax, [r14 - 0x5a]
cmp eax, 0xae
ja case.default.0x18001ccc8
lea rdx, [0x180000000]
movzx eax, byte [rdx + rax + 0x1d880]
mov ecx, dword [rdx + rax*4 + 0x1d850]
add rcx, rdx
jmp rcx
mov rax, qword [rbp - 0x58]
mov r11d, dword [rax]
test r11b, 8
je 0x18001cceb
movzx ebx, bl
mov eax, dword [rdx]
sub eax, 2
and eax, 7
bts ebx, eax
mov dword [rsp + 0x68], ebx
jmp 0x18001cd04
test r11b, 4
je 0x18001cd04
movzx edi, dil
mov eax, dword [rdx]
sub eax, 2
and eax, 7
btr edi, eax
mov dword [rsp + 0x6c], edi
and r11b, 1
add r11b, r11b
or r11b, 1
mov dword [rbp - 0x48], r11d
mov r11, qword [rbp - 0x78]
jmp case.0x18001c9c3.91
mov eax, 0x6567
mov word [rbp + 0xb0], ax
mov dword [rbp + 0xb2], 0x535f74
mov eax, 0x74
mov word [rbp + 0xb5], ax
jmp case.0x18001c9c3.91
mov eax, dword [rdx]
test al, 7
mov ecx, 0
setne cl
sar eax, 3
add ecx, eax
mov dword [rsp + 0x58], ecx
movsxd rcx, ecx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r9, rax
mov qword [rsp + 0x70], rax
mov r8, qword [rsp + 0x60]
mov r10, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x60]
mov r11, qword [rbp - 0x78]
jmp case.0x18001c9c3.91
movsxd rbx, dword [rbp - 0x64]
movsxd r12, dword [rsp + 0x58]
nop dword [rax + rax]
mov r8, r11
mov edx, r12d
mov rcx, r9
call r10
cmp eax, r12d
jne 0x18001d209
mov r10, qword [rsp + 0x70]
mov eax, dword [rsp + 0x6c]
and byte [r10], al
movzx ecx, byte [r10]
mov rax, qword [rbp - 0x60]
mov eax, dword [rax]
dec eax
and eax, 7
bts ecx, eax
mov byte [r10], cl
mov eax, dword [rsp + 0x68]
or byte [rbx + r10], al
mov eax, dword [rbp - 0x48]
or byte [r12 + r10 - 1], al
mov dword [rsp + 0x48], r12d
xor eax, eax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
mov r9d, 0x115
lea r8, [rsp + 0x48]
xor edx, edx
mov rcx, r10
call fcn.18004e840
mov eax, dword [r15]
mov dword [rsp + 0x48], eax
mov r8, rsi
mov edx, 0x1d
lea rcx, [rsp + 0x48]
call fcn.18004fc60
test eax, eax
mov r9, qword [rsp + 0x70]
mov r10, qword [rbp - 0x80]
mov r11, qword [rbp - 0x78]
je 0x18001cd90
mov rcx, qword [rbp - 0x58]
test byte [rcx], 2
je 0x18001ce82
mov dword [rsp + 0x48], 1
mov r9, rsi
lea r8, [rsp + 0x48]
mov edx, 0xba
mov rcx, rsi
call fcn.180041cd0
mov r9d, 0x117
xor r8d, r8d
mov rdx, rsi
mov rcx, rsi
call fcn.18002d2e0
mov eax, dword [r15]
mov dword [rsp + 0x48], eax
mov r8, rsi
mov edx, 0x1d
lea rcx, [rsp + 0x48]
call fcn.18004fc60
test eax, eax
mov r9, qword [rsp + 0x70]
mov r10, qword [rbp - 0x80]
mov r11, qword [rbp - 0x78]
je 0x18001cd90
mov r8, qword [rsp + 0x60]
mov r12d, dword [rbp - 0x68]
mov rdx, qword [rbp - 0x60]
jmp 0x18001cc4c
mov eax, dword [rdx]
test eax, eax
je 0x18001d240
cmp qword [rsi + 0x10], 0
je 0x18001d240
cmp qword [r15 + 0x10], 0
je 0x18001d240
mov dword [rsp + 0x48], eax
lea r8, [rsp + 0x48]
mov edx, 0x23
lea rcx, [rbp - 0x38]
call fcn.18004fc60
mov r8, qword [rsp + 0x60]
mov r9, qword [rsp + 0x70]
mov r10, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x60]
mov r11, qword [rbp - 0x78]
jmp case.0x18001c9c3.91
xor edi, edi
nop dword [rax]
mov ebx, SHSetInstanceExplorer
nop word [rax + rax]
cmp ebx, 0x1d8
ja 0x18001d0ba
je 0x18001d0ac
mov eax, ebx
sub eax, 0xaf
je 0x18001d015
sub eax, 0x63
je 0x18001cfa1
cmp eax, 0x63
jne 0x18001d0ea
lea r8, [rsi + 8]
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
mov r9, qword [rsi]
mov edx, 0xa5
lea rcx, [rbp + 0x70]
call fcn.18005d7c0
xor ecx, ecx
test edi, edi
sete cl
cmp eax, ecx
je 0x18001d0ea
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rax, str._treeViewItem_condition_hasChildren_isCollapsedfalse__AccessibleDefaultAction_Collapse____
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [0x180096892]
lea rdx, str._1_1__d__d
call fcn.180092630
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov rax, qword [rsi + 0x90]
mov qword [rsp + 0x78], rax
mov rax, qword [rsi]
lea rdx, [rsi + 0x48]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 0xfd
xor r8d, r8d
lea rcx, [rsp + 0x78]
call fcn.18005d260
cmp eax, 1
je 0x18001d0ea
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rax, str.void_glUniform4f_GLint_location___d__GLfloat_v0___f__GLfloat_v1___f__GLfloat_v2___f__GLfloat_v3___f_
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [0x180096892]
lea rdx, str.LongPolicy
call fcn.180092630
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov rax, qword [rsi + 0x90]
xor byte [rsi + rax + 0x47], dil
mov rcx, qword [rsi + 0x90]
mov eax, edi
shr eax, 8
xor byte [rcx + rsi + 0x46], al
mov rcx, qword [rsi + 0x90]
mov eax, edi
shr eax, 0x10
xor byte [rcx + rsi + 0x45], al
mov rax, qword [rsi + 0xc0]
mov qword [rsp + 0x78], rax
lea rdx, [rsi + 0x98]
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov r9d, 0x55
lea r8, [rbp + 0x70]
mov rcx, qword [rsi]
call fcn.180019460
cmp eax, 1
je 0x18001d0ea
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rax, str.Failed_in_wide_to_multibyte_conversion_of_client_secret__while_performing_fetchAccessTokenForDeviceToken
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [0x180096892]
lea rdx, str.AtlAxWin90
call fcn.180092630
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov rax, qword [rsi + 0x90]
xor byte [rax + rsi + 0x47], dil
jmp 0x18001d0ea
mov eax, ebx
sub eax, 0x23b
je 0x18001d0da
cmp eax, 0x63
jne 0x18001d0ea
mov rcx, qword [rsi + 0x90]
mov eax, edi
shr eax, 0x10
xor byte [rcx + rsi + 0x45], al
jmp 0x18001d0ea
mov rcx, qword [rsi + 0x90]
mov eax, edi
shr eax, 8
xor byte [rcx + rsi + 0x46], al
add ebx, 0x63
cmp ebx, 0x301
jb 0x18001cf10
inc edi
cmp edi, 0x4e20
jl 0x18001cf00
mov r8, qword [rsp + 0x60]
jmp 0x18001cc3b
cmp dword [rdx], 1
jle 0x18001d2e1
test r10, r10
je 0x18001d2e1
mov eax, dword [r15]
dec eax
cmp eax, 0xff
ja 0x18001d2e1
mov rcx, qword [rbp - 0x58]
mov eax, dword [rcx]
test al, 2
je case.0x18001c9c3.91
or eax, 1
mov dword [rcx], eax
jmp case.0x18001c9c3.91
mov eax, 0x69
mov word [rbp + 0xb6], ax
mov eax, 0x6c
mov word [rbp + 0xb7], ax
mov dword [rbp + 0xb8], 0x78456c
jmp case.0x18001c9c3.91
mov dword [rbp + 0xbb], 0x756365
mov dword [rbp + 0xbe], 0x6e6974
jmp 0x18001cc58
cmp r8, 0x10
jb 0x18001d1c4
lea rdx, [r8 + 1]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001d1be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001d685
call fcn.180092818
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x18001d1ff
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001d1fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001d6d0
call fcn.180092818
mov eax, 2
jmp 0x18001d2b7
mov r13d, 1
mov edi, dword [rsp + 0x58]
mov rbx, qword [rbp - 0x50]
mov qword [rbp - 0x70], rbx
mov r12d, dword [rsp + 0x58]
movzx r15d, byte [rsp + 0x40]
mov esi, dword [rsp + 0x58]
mov r14d, 0x5a
mov ecx, dword [rsp + 0x50]
inc r14d
mov r9, qword [rbp - 0x58]
jmp 0x18001cc94
cmp r8, 0x10
jb 0x18001d279
lea rdx, [r8 + 1]
mov rcx, qword [rbp - 0x18]
cmp rdx, 0x1000
mov rax, rcx
jb 0x18001d273
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001d685
call fcn.180092818
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x18001d2b4
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001d2af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001d6d0
call fcn.180092818
mov eax, dword [rbp - 0x64]
mov rcx, qword [rbp + 0xe8]
xor rcx, rsp
call fcn.180092fc0
mov rbx, qword [rsp + 0x230]
add rsp, 0x1f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp r8, 0x10
jb 0x18001d31a
lea rdx, [r8 + 1]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001d314
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001d685
call fcn.180092818
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x18001d355
inc rdx
mov rcx, qword [rbp - 0x38]
mov r8, rcx
cmp rdx, 0x1000
jb 0x18001d350
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub r8, rcx
add r8, 0xfffffffffffffff8
cmp r8, 0x1f
ja 0x18001d6d0
call fcn.180092818
mov eax, 1
jmp 0x18001d2b7
mov rdx, qword [rbp - 0x50]
mov qword [rsp + 0x70], rdx
jmp 0x18001cc71
mov r8d, 4
lea rdx, [0x18009a65c]
lea rcx, [rbp + 0xc8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov dword [rbp + 0xda], 0x6c0064
mov ecx, dword [rsp + 0x50]
inc r14d
mov r9, qword [rbp - 0x58]
jmp 0x18001cc94
lea rax, [rbp + 0xb0]
mov rdi, 0xffffffffffffffff
nop
inc rdi
cmp byte [rax + rdi], 0
jne 0x18001d3b0
xor eax, eax
mov dword [rbp - 0x44], eax
mov qword [rbp + 0x18], rax
mov dword [rbp + 0x20], eax
mov ecx, dword [rsp + 0x50]
inc r14d
mov r9, qword [rbp - 0x58]
jmp 0x18001cc94
xor eax, eax
mov word [rbp + 0xde], ax
mov ecx, dword [rsp + 0x50]
inc r14d
mov r9, qword [rbp - 0x58]
jmp 0x18001cc94
xor eax, eax
mov qword [rbp - 0x40], rax
lea r8, [rbp + 0xc8]
mov edx, 0xb7
lea ecx, [rax + 0x4f]
call fcn.18007c630
mov rbx, rax
mov qword [rbp - 0x70], rax
lea r9, [rbp - 0x40]
lea r8, [rbp - 0x44]
mov edx, edi
lea rcx, [rbp + 0xb0]
call sub.RPCRT4.dll_MesEncodeFixedBufferHandleCreate
mov r12d, eax
xor eax, eax
mov qword [rbp + 8], rax
mov dword [rbp + 0x10], eax
mov ecx, dword [rsp + 0x50]
inc r14d
mov r9, qword [rbp - 0x58]
jmp 0x18001cc94
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x18]
call qword [sym.imp.ADVAPI32.dll_EqualSid]
test r15b, r15b
je 0x18001d4bf
mov ebx, 0x89
mov rcx, qword [rbp - 0x40]
nop dword [rax]
mov eax, ebx
sub eax, 0x89
je 0x18001d4ac
sub eax, 1
je 0x18001d483
cmp eax, 1
jne 0x18001d4b1
test rcx, rcx
je 0x18001d4b1
call sub.RPCRT4.dll_MesHandleFree
mov rcx, qword [rbp - 0x40]
jmp 0x18001d4b1
xor eax, eax
mov qword [rsp + 0x78], rax
lea rax, [rbp - 0x44]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edi
lea r9, [rsp + 0x78]
xor r8d, r8d
mov edx, esi
call sub.RPCRT4.dll_MesBufferHandleReset
mov rcx, qword [rbp - 0x40]
jmp 0x18001d4b1
mov esi, 1
inc ebx
cmp ebx, 0x8c
jb 0x18001d460
mov rbx, qword [rbp - 0x70]
call rbx
cmp eax, 1
sete byte [rbp - 0x64]
mov ecx, dword [rsp + 0x50]
inc r14d
mov r9, qword [rbp - 0x58]
jmp 0x18001cc94
test byte [r9], 2
je 0x18001d50f
mov r14, qword [rbp - 0x50]
mov r8, r14
mov rdx, r14
mov ecx, 0x8a
call fcn.180034e30
mov dword [rsp + 0x58], 1
mov r9, r14
mov r8, r14
lea rdx, [rsp + 0x58]
mov ecx, 0xe9
call fcn.18002d5a0
xor eax, eax
mov r13d, eax
mov r14d, 0x5a
mov ecx, dword [rsp + 0x50]
inc r14d
mov r9, qword [rbp - 0x58]
jmp 0x18001cc94
mov eax, 0x67
mov word [rbp + 0xc1], ax
xor eax, eax
mov word [rbp + 0xc8], ax
lea r8d, [rax + 5]
lea rdx, [0x18009a6de]
lea rcx, [rbp + 0xc8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov ecx, dword [rsp + 0x50]
inc r14d
mov r9, qword [rbp - 0x58]
jmp 0x18001cc94
xor eax, eax
mov ecx, eax
movzx eax, r15b
test r12d, r12d
cmove ecx, eax
movzx r15d, cl
mov ecx, dword [rsp + 0x50]
inc r14d
mov r9, qword [rbp - 0x58]
jmp 0x18001cc94
mov r8d, 1
lea rdx, [0x18009a77c]
lea rcx, [rbp + 0xde]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor eax, eax
mov word [rbp + 0xe0], ax
mov r15b, 1
mov ecx, dword [rsp + 0x50]
inc r14d
mov r9, qword [rbp - 0x58]
jmp 0x18001cc94
mov r8, qword [rsp + 0x60]
jmp 0x18001d240
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x18001d60e
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001d608
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001d685
call fcn.180092818
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x18001d649
inc rdx
mov rcx, qword [rbp - 0x38]
mov r8, rcx
cmp rdx, 0x1000
jb 0x18001d644
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub r8, rcx
add r8, 0xfffffffffffffff8
cmp r8, 0x1f
ja 0x18001d6d0
call fcn.180092818
mov eax, r13d
jmp 0x18001d2b7
mov r8, qword [rsp + 0x60]
cmp r8, 0x10
jb 0x18001d692
lea rdx, [r8 + 1]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001d68c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18001d68c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180092818
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x18001d2b4
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001d2af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18001d2af
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3