Function at 0x180022ac0
Capabilities:
Read file on windows
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1340]
mov eax, 0x1440
call fcn.18006d450
sub rsp, rax
mov rax, qword [0x18008b088]
xor rax, rsp
mov qword [rbp + 0x1338], rax
imul eax, ecx, 0x990
xor r11d, r11d
mov rbx, rdx
mov qword [rbp - 0x48], rdx
mov qword [rsp + 0x70], r8
lea rdx, [0x180000000]
mov r13d, ecx
mov dword [rsp + 0x44], ecx
mov edi, ecx
mov dword [rsp + 0x68], eax
cmp ecx, eax
ja 0x1800236bf
movzx r15d, byte [rsp + 0x40]
lea esi, [r11 + 0x2e]
mov r12, qword [rbp - 0x30]
lea r10d, [r11 + 0x6f]
mov r13d, dword [rsp + 0x68]
lea r9d, [r11 + 0x74]
mov dword [rbp - 0x7c], r15d
lea r14, str._stdout_
mov eax, ecx
mov ecx, 0x6e
cmp edi, 0xfb82
ja 0x180022d2c
je 0x180022d0f
cmp edi, 0x32b2
ja 0x180022c6c
je 0x180022c4f
cmp edi, 0xf0
ja 0x180022c21
je 0x180022bda
cmp edi, 5
je 0x18002358a
cmp edi, 0x30
je 0x180022bc6
cmp edi, 0x7e
jne 0x18002308a
mov ecx, 0x57
mov word [rbp + 0x1290], cx
mov ecx, 0x72
mov word [rbp + 0x1291], cx
mov ecx, 0x65
mov word [rbp + 0x1292], cx
jmp 0x18002308a
movzx eax, byte [rbx + 3]
mov byte [r8], al
movzx eax, byte [rbx + 2]
mov byte [r8 + 1], al
jmp 0x180023086
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 1
mov qword [rbp - 0x30], rax
mov r12, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
xor r11d, r11d
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x60], r11
mov qword [rbp - 0x50], r11
mov r8, qword [rsp + 0x70]
lea rdx, [0x180000000]
mov esi, 0x2e
lea r9d, [rsi + 0x46]
lea r10d, [rsi + 0x41]
jmp 0x180023086
cmp edi, 0x1350
je 0x180022c41
cmp edi, 0x2670
jne 0x18002308a
movzx eax, byte [rbx]
mov byte [r8 + 3], al
jmp 0x180023086
mov eax, dword [rbx]
shr eax, 8
mov byte [r8 + 2], al
jmp 0x180023086
mov word [rbp + 0x1293], cx
mov dword [rbp + 0x1294], 0x654d6863
mov word [rbp + 0x1298], cx
jmp 0x18002308a
cmp edi, 0x6090
je 0x180022cf1
cmp edi, 0x64e6
je 0x180022ce0
cmp edi, 0x971a
je 0x180022cbe
cmp edi, 0xc030
je 0x180022cb1
cmp edi, 0xc94e
jne 0x18002308a
mov ecx, 0x41
mov word [rbp + 0x12a0], r10w
mov word [rbp + 0x12a1], cx
jmp 0x18002308a
mov dword [rbp - 0x6c], r11d
mov dword [rbp - 0x80], r11d
jmp 0x18002308a
mov word [rbp + 0x129a], si
mov ecx, 0x5465
mov dword [rbp + 0x129b], 0x6d6954
mov word [rbp + 0x129e], cx
jmp 0x18002308a
mov ecx, 0x75
mov word [rbp + 0x1299], cx
jmp 0x18002308a
mov dword [rsp + 0x48], r11d
mov dword [rsp + 0x58], r11d
mov qword [rbp - 0x40], r11
mov qword [rbp - 0x10], r11
mov dword [rbp - 0x70], 0xffffffff
jmp 0x18002308a
mov ecx, 0x63
mov word [rbp + 0x12a2], cx
mov ecx, 0x6974
mov word [rbp + 0x12a3], cx
jmp 0x18002308a
cmp edi, 0x1c452
ja 0x180023103
je 0x1800230f9
cmp edi, 0x11fd0
je 0x1800230e8
cmp edi, 0x12db6
je 0x1800230be
cmp edi, 0x15fea
je 0x1800230a2
cmp edi, 0x17f70
je 0x180022dc0
cmp edi, 0x1921e
jne 0x18002308a
mov r8d, 2
mov word [rbp + 0x12b6], r11w
lea rdx, [0x18007c72e]
lea rcx, [rbp + 0x12b6]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov r8, qword [rsp + 0x70]
lea rdx, [0x180000000]
mov eax, 0x6c
xor r11d, r11d
mov word [rbp + 0x12ba], ax
lea r9d, [rax + 8]
lea r10d, [rax + 3]
jmp 0x180023086
mov rax, qword [rbx]
mov r15d, 1
mov qword [0x18008b1e0], rax
cmp dword [r8], r15d
jle 0x180023082
mov r12d, dword [rsp + 0x58]
mov r14d, dword [rsp + 0x48]
test r14d, r14d
jne 0x180022ff3
movsxd rax, r15d
mov rcx, qword [rbx + rax*8]
cmp byte [rcx], 0x2d
jne 0x180022ff3
cmp byte [rcx + 1], r14b
jne 0x180022e32
mov edx, dword [rsp + 0x58]
mov eax, edx
inc edx
mov dword [rsp + 0x58], edx
test eax, eax
je 0x180023044
xor edx, edx
xor r8d, r8d
lea ecx, [rdx + 0x3e]
call fcn.18006c110
mov r8, qword [rsp + 0x70]
mov r12d, dword [rsp + 0x58]
jmp 0x18002304e
mov esi, 1
nop word [rax + rax]
movsxd r14, r15d
mov rax, qword [rbx + r14*8]
movsx rcx, byte [rsi + rax]
test cl, cl
je 0x180023049
cmp ecx, 0x73
ja case.0x180022e6b.7
movzx eax, byte [rdx + rcx + 0x23b64]
mov ecx, dword [rdx + rax*4 + 0x23b44]
add rcx, rdx
jmp rcx
mov r14d, 1
mov dword [rsp + 0x48], r14d
jmp 0x180022fd4
mov eax, r12d
inc r12d
mov dword [rsp + 0x58], r12d
test eax, eax
je 0x180022fcf
xor edx, edx
xor r8d, r8d
lea ecx, [rdx + 0x3e]
call fcn.18006c110
jmp 0x180022fcf
mov ebx, 0x7e
lea edi, [r15 + 2]
nop dword [rax + rax]
mov eax, ebx
sub eax, 0x7d
je 0x180022fcb
cmp eax, 1
jne 0x180022f09
cmp edi, dword [r8]
jl 0x180022ed2
xor r8d, r8d
lea ecx, [rax + 0x3d]
xor edx, edx
call fcn.18006c110
mov r13, qword [rbp - 0x48]
mov rsi, 0xffffffffffffffff
mov rcx, qword [r13 + r14*8 + 8]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atol]
mov rcx, qword [r13 + r14*8 + 0x10]
add r15d, 2
mov dword [rbp - 0x80], eax
add edi, 2
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atol]
mov r8, qword [rsp + 0x70]
add r14, 2
mov r13d, eax
dec ebx
cmp ebx, 0x7c
ja 0x180022eb0
mov rbx, qword [rbp - 0x48]
inc r15d
cmp r15d, dword [r8]
jl 0x180022f29
xor edx, edx
xor r8d, r8d
lea ecx, [rdx + 0x3e]
call fcn.18006c110
movsxd rcx, r15d
mov rsi, 0xffffffffffffffff
mov rcx, qword [rbx + rcx*8]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov dword [rsp + 0x78], eax
jmp 0x180022fcf
inc r15d
cmp r15d, dword [r8]
jl 0x180022f5b
xor edx, edx
xor r8d, r8d
lea ecx, [rdx + 0x3e]
call fcn.18006c110
movsxd rcx, r15d
mov rsi, 0xffffffffffffffff
mov rcx, qword [rbx + rcx*8]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atol]
mov dword [rbp - 0x6c], eax
jmp 0x180022fcf
inc r15d
cmp r15d, dword [r8]
jl 0x180022f89
xor edx, edx
xor r8d, r8d
lea ecx, [rdx + 0x3e]
call fcn.18006c110
movsxd rcx, r15d
mov rsi, 0xffffffffffffffff
mov rcx, qword [rbx + rcx*8]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov dword [rbp - 0x70], eax
jmp 0x180022fcf
inc r15d
cmp r15d, dword [r8]
jl 0x180022fb7
xor edx, edx
xor r8d, r8d
lea ecx, [rdx + 0x3e]
call fcn.18006c110
movsxd rax, r15d
mov rsi, 0xffffffffffffffff
mov rcx, qword [rbx + rax*8]
mov qword [rbp - 0x58], rcx
jmp 0x180022fcf
mov rbx, qword [rbp - 0x48]
mov r14d, dword [rsp + 0x48]
mov r8, qword [rsp + 0x70]
lea rdx, [0x180000000]
inc rsi
mov edi, 0x17f70
test rsi, rsi
jg 0x180022e40
jmp 0x18002304e
mov ecx, r12d
inc r12d
mov dword [rsp + 0x58], r12d
test ecx, ecx
je 0x180023032
cmp ecx, 1
je 0x180023020
xor edx, edx
xor r8d, r8d
lea ecx, [rdx + 0x3e]
call fcn.18006c110
mov r8, qword [rsp + 0x70]
mov edi, 0x17f70
jmp 0x18002304e
movsxd rax, r15d
mov edi, 0x17f70
mov rax, qword [rbx + rax*8]
mov qword [rbp - 0x50], rax
jmp 0x18002304e
movsxd rax, r15d
mov rax, qword [rbx + rax*8]
mov qword [rbp - 0x60], rax
mov edi, 0x17f70
jmp 0x18002304e
mov r12d, edx
jmp 0x18002304e
mov r14d, dword [rsp + 0x48]
inc r15d
lea rdx, [0x180000000]
cmp r15d, dword [r8]
jl 0x180022de3
mov r12, qword [rbp - 0x30]
lea rdx, [0x180000000]
xor r11d, r11d
lea r14, str._stdout_
lea esi, [r11 + 0x2e]
lea r9d, [r11 + 0x74]
lea r10d, [r11 + 0x6f]
mov r15d, dword [rbp - 0x7c]
mov eax, dword [rsp + 0x44]
imul ecx, eax, 0x66
add edi, ecx
cmp edi, dword [rsp + 0x68]
ja 0x1800236ba
mov rbx, qword [rbp - 0x48]
jmp 0x180022b4f
mov eax, dword [str.__builtin_igil_roundf]
mov dword [rbp + 0x12b0], eax
movzx eax, word [0x18007c694]
mov word [rbp + 0x12b4], ax
jmp 0x180023086
mov word [rbp + 0x12a5], r10w
mov word [rbp + 0x12a6], cx
mov word [rbp + 0x12a7], si
mov dword [rbp + 0x12a8], 0x736143
mov word [rbp + 0x12ab], r9w
jmp 0x18002308a
mov r13d, r11d
mov qword [rbp - 0x58], r11
mov dword [rsp + 0x78], 8
jmp 0x18002308a
mov word [rbp + 0x12bc], r9w
jmp 0x18002308a
cmp edi, 0x1df10
je 0x180023492
cmp edi, 0x23eb0
je 0x180023455
cmp edi, 0x29e50
je 0x180023403
cmp edi, 0x2fdf0
je 0x18002333e
cmp edi, 0x35d90
jne 0x18002308a
mov eax, dword [rbp - 0x70]
lea r9, [rbp - 0x78]
mov dword [rbp - 0x78], eax
lea r8, [rsp + 0x60]
mov eax, dword [rbp - 0x6c]
lea rcx, [rbp + 0x10]
mov dword [rsp + 0x60], eax
mov edx, 0xcf
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x50], eax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
call fcn.180056dd0
mov esi, dword [rsp + 0x6c]
xor r8d, r8d
mov dword [rsp + 0x50], r8d
mov r14d, r8d
test esi, esi
je 0x1800232eb
nop dword [rax]
mov ebx, 0xd
mov eax, ebx
sub eax, 0xd
je 0x180023217
cmp eax, 1
jne 0x1800232cf
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_feof]
test eax, eax
jne 0x180023599
mov rsi, qword [rbp - 8]
lea rdx, [rbp + 0x10]
mov r9, qword [rbp - 0x40]
mov r8, rsi
mov rcx, qword [rbp - 0x10]
mov dword [rsp + 0x20], 0xb6
call fcn.180029bf0
mov rax, qword [rbp - 0x40]
xor r8d, r8d
mov qword [rbp - 0x40], rsi
mov esi, dword [rsp + 0x6c]
mov qword [rbp - 0x10], rax
cmp dword [rbp - 0x80], r8d
je 0x1800232cf
cmp r14d, r13d
jne 0x1800232cf
lea r9d, [r8 + 0x7e]
mov dword [rsp + 0x60], esi
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x60]
call fcn.18005c7d0
jmp 0x1800232cc
mov eax, 0xaaaaaaab
mov esi, r14d
mul r14d
shr edx, 1
lea eax, [rdx + rdx*2]
sub esi, eax
mov rax, qword [rbp]
imul rsi, rax
add rsi, qword [rbp - 0x18]
mov qword [rbp - 8], rsi
cmp r15b, 0x31
je 0x180023260
cmp r15b, 0x34
jne 0x1800235c3
mov r9, r12
mov r8d, 1
mov rdx, rax
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
jmp 0x1800232ad
mov r14d, dword [rsp + 0x7c]
mov rbx, rsi
mov edi, r8d
lea esi, [r14 - 1]
or esi, 7
shl byte [rbx], 1
cmp edi, r14d
jae 0x18002328f
xor r9d, r9d
xor r8d, r8d
mov rdx, r12
lea ecx, [r9 + 0x35]
call fcn.18004cc00
and al, 1
or byte [rbx], al
mov ecx, edi
lea rax, [rbx + 1]
and ecx, 7
inc edi
cmp ecx, 7
cmovne rax, rbx
mov rbx, rax
cmp edi, esi
jbe 0x180023272
mov r14d, dword [rsp + 0x50]
mov rcx, r12
mov ebx, 0xd
mov edi, 0x35d90
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ferror]
test eax, eax
jne 0x1800235f0
mov esi, dword [rsp + 0x6c]
xor r8d, r8d
inc ebx
cmp ebx, 0xf
jb 0x180023195
inc r14d
mov dword [rsp + 0x50], r14d
cmp r14d, esi
jb 0x180023190
mov r14, qword [rbp - 0x38]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ferror]
test eax, eax
jne 0x180023627
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
test eax, eax
jne 0x180023627
xor r11d, r11d
mov dword [rsp + 0x50], r11d
mov r8, qword [rsp + 0x70]
lea rdx, [0x180000000]
mov esi, 0x2e
lea r14, str._stdout_
lea r9d, [rsi + 0x46]
lea r10d, [rsi + 0x41]
jmp 0x180023086
mov rsi, qword [rbp - 0x50]
test rsi, rsi
je 0x18002336c
lea rdx, [0x1800719f4]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov qword [rbp - 0x38], rax
mov r14, rax
test rax, rax
je 0x18002365e
xor r11d, r11d
jmp 0x180023374
mov qword [rbp - 0x50], r14
mov r14, qword [rbp - 0x38]
mov ebx, dword [rbp - 0x80]
lea r9, [0x180029bc0]
mov eax, dword [rsp + 0x6c]
lea r8, [rbp + 0x10]
mov qword [rsp + 0x30], r11
lea rdx, [rbp - 0x78]
test ebx, ebx
mov ecx, 0x3d
cmovne eax, ebx
mov dword [rsp + 0x60], eax
mov eax, dword [rsp + 0x7c]
mov dword [rbp - 0x78], eax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
call fcn.180021140
mov r9d, dword [rsp + 0x78]
mov rdx, qword [rbp - 0x58]
or r9d, 0x20
test ebx, ebx
cmove r9d, dword [rsp + 0x78]
mov dword [rsp + 0x78], r9d
test rdx, rdx
je 0x1800233fb
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rdx + rax], 0
jne 0x1800233e0
mov dword [rbp + 0x1280], eax
mov qword [rbp + 0x1278], rdx
mov dword [rsp + 0x78], r9d
xor r11d, r11d
jmp 0x180023319
mov ebx, dword [rsp + 0x7c]
mov ecx, r11d
mov eax, ebx
test bl, 7
setne cl
shr eax, 3
add ecx, eax
xor r8d, r8d
mov eax, ecx
mov qword [rbp], rax
lea rax, [rcx + rcx*2]
lea rcx, [rbp - 0x20]
mov qword [rbp - 0x20], rax
lea edx, [r8 + 0x30]
call fcn.180030220
mov r8, qword [rsp + 0x70]
lea rdx, [0x180000000]
xor r11d, r11d
mov qword [rbp - 0x18], rax
lea r9d, [r11 + 0x74]
lea r10d, [r11 + 0x6f]
jmp 0x180023086
xor r9d, r9d
xor r8d, r8d
mov rdx, r12
lea ecx, [r9 + 0x35]
call fcn.18004cc00
mov rcx, r12
mov dword [rsp + 0x6c], eax
mov esi, eax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgetc]
cmp dword [rsp + 0x7c], 1
jb 0x180023694
cmp esi, 1
jb 0x180023694
xor r11d, r11d
jmp 0x180022c03
mov rsi, qword [rbp - 0x60]
test rsi, rsi
je 0x1800234eb
lea rdx, [0x180073414]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov qword [rbp - 0x30], rax
mov r12, rax
test rax, rax
jne 0x1800234f6
lea ecx, [rax + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rsi
lea rdx, str.VMXITeamLoadStateFromFile
mov rcx, rax
call fcn.18006ca50
lea rcx, [0x180073434]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
lea ecx, [r12 + 1]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rsi, str._stdin_
mov qword [rbp - 0x60], rsi
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_getc]
mov ebx, eax
cmp eax, 0xffffffff
je 0x180023548
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isspace]
test eax, eax
jne 0x180023519
cmp ebx, 0x23
jne 0x180023548
jmp 0x180023520
cmp ebx, 0x23
jne 0x180023538
nop
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_getc]
cmp eax, 0xffffffff
je 0x180023538
cmp eax, 0xd
je 0x180023538
cmp eax, 0xa
jne 0x180023520
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_getc]
mov ebx, eax
cmp eax, 0xffffffff
jne 0x180023506
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_getc]
mov dword [rbp - 0x7c], eax
mov r15d, eax
cmp ebx, 0x50
jne 0x180023721
cmp al, 0x31
je 0x18002356c
cmp al, 0x34
jne 0x180023721
xor r9d, r9d
xor r8d, r8d
mov rdx, r12
lea ecx, [r9 + 0x35]
call fcn.18004cc00
mov dword [rsp + 0x7c], eax
xor r11d, r11d
jmp 0x180022c03
mov eax, dword [rbx]
cmp dword [r8], eax
sete byte [rsp + 0x50]
jmp case.0x18002371f.22
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, qword [rbp - 0x60]
lea rdx, str.observer_notify_no_history___called
mov rcx, rax
call fcn.18006ca50
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
movsx ebx, r15b
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, ebx
lea rdx, str._s._Snapshot_Take_returned
mov rcx, rax
call fcn.18006ca50
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, qword [rbp - 0x60]
lea rdx, str.Failed_to_re_create_SemaphoreLock:_d
mov rcx, rax
call fcn.18006ca50
lea rcx, [0x180073434]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, qword [rbp - 0x50]
lea rdx, str.else_if_a.commandsetbreakpoint_
mov rcx, rax
call fcn.18006ca50
lea rcx, [0x180073434]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rsi
lea rdx, str.MILCMD_IMPLICITINPUTBRUSH
mov rcx, rax
call fcn.18006ca50
lea rcx, [0x180073434]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.H_setPos_QCursor__SAXHH_Z
call fcn.18006ca50
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r13d, dword [rsp + 0x44]
lea r15d, [r13 + 0x18]
cmp r13d, r15d
jae case.0x18002371f.22
mov edi, dword [rsp + 0x68]
lea r14d, [r13 - 0x7e]
movzx r13d, byte [rsp + 0x40]
mov ebx, 0x61
mov r12d, dword [rsp + 0x68]
mov esi, dword [rsp + 0x68]
lea r8d, [rbx + 0x12]
lea r9d, [rbx + 5]
lea r10d, [rbx - 0x2f]
cmp r14d, 0x72
ja case.0x18002371f.23
lea rcx, [0x180000000]
movzx eax, byte [rcx + r14 + 0x23c38]
mov ecx, dword [rcx + rax*4 + 0x23bd8]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rsi
lea rdx, str.Failed_to_get_the_package_provider_information.
mov rcx, rax
call fcn.18006ca50
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp dword [rsp + 0x60], 0
mov ecx, r11d
movzx eax, r13b
cmovne ecx, eax
movzx eax, byte [rsp + 0x40]
cmp dword [rsp + 0x68], 0
movzx r13d, cl
mov ecx, r11d
cmove ecx, eax
mov byte [rsp + 0x40], cl
jmp case.0x18002371f.23
mov word [rbp + 0x12be], r11w
jmp case.0x18002371f.23
mov eax, dword [0x18007c82e]
mov dword [rbp + 0x130c], eax
movzx eax, word [0x18007c832]
mov word [rbp + 0x1310], ax
mov dword [rbp + 0x1308], 0x61006e
mov word [rbp + 0x1312], r11w
jmp case.0x18002371f.23
mov dword [rbp + 0x12fc], 0x69
jmp case.0x18002371f.23
mov eax, 0x65
mov dword [rbp + 0x1312], 0x69
mov word [rbp + 0x131e], ax
mov word [rbp + 0x1318], r8w
mov dword [rbp + 0x131a], 0x6c0073
jmp case.0x18002371f.23
movsd xmm0, qword [0x18007c876]
movzx eax, word [0x18007c87e]
movsd qword [rbp + 0x12fe], xmm0
mov word [rbp + 0x1306], ax
mov word [rbp + 0x1308], r11w
jmp case.0x18002371f.23
mov r8d, 1
mov word [rbp + 0x12d6], r11w
lea rdx, [0x18007c8d4]
lea rcx, [rbp + 0x12b0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp case.0x18002371f.23
lea r9, [rbp - 0x28]
mov edx, edi
lea r8, [rbp - 0x68]
lea rcx, [rbp + 0x1290]
call sub.RPCRT4.dll_MesEncodeFixedBufferHandleCreate
mov dword [rsp + 0x68], eax
jmp case.0x18002371f.23
mov rcx, qword [rbp - 0x58]
lea r9, [rbp + 0x12e0]
mov r8d, r12d
mov qword [rbp - 0x28], r11
lea rdx, [rbp + 0x12b0]
call sub.IMM32.dll_ImmRegisterWordW
mov r9d, 0xac
mov dword [rsp + 0x60], eax
lea r8, [rbp + 0x1318]
xor ecx, ecx
lea edx, [r9 + 0xb]
call fcn.180003df0
mov qword [rbp - 0x20], rax
jmp case.0x18002371f.23
mov word [rbp + 0x12d8], r9w
jmp case.0x18002371f.23
mov eax, dword [0x18007c8fe]
mov dword [rbp + 0x12f2], eax
movzx eax, word [0x18007c902]
mov word [rbp + 0x12f6], ax
mov dword [rbp + 0x12ee], 0x730066
mov word [rbp + 0x12f8], r11w
jmp case.0x18002371f.23
mov dword [rbp + 0x132c], 0x6c006c
mov word [rbp + 0x1330], r11w
jmp case.0x18002371f.23
test r13b, r13b
je 0x180023918
mov rcx, qword [rbp - 0x58]
lea r9, [rbp + 0x12e0]
mov r8d, r12d
lea rdx, [rbp + 0x12b0]
call sub.IMM32.dll_ImmUnregisterWordW
cmp byte [rsp + 0x40], 0
je case.0x18002371f.23
mov ebx, 0xfb
cmp ebx, 0xfb
je 0x180023979
cmp ebx, 0x2833
je 0x180023950
cmp ebx, 0x4f6b
jne 0x18002397e
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x18002397e
call sub.RPCRT4.dll_MesHandleFree
jmp 0x18002397e
mov rcx, qword [rbp - 0x28]
lea rax, [rbp - 0x68]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x18]
xor r8d, r8d
mov dword [rsp + 0x20], edi
mov edx, esi
mov qword [rbp - 0x18], 0
call sub.RPCRT4.dll_MesBufferHandleReset
jmp 0x18002397e
mov esi, 1
add ebx, 0x2738
cmp ebx, 0x75a8
jbe 0x180023928
mov ebx, 0x61
jmp case.0x18002371f.23
mov dword [rbp + 0x12d0], 0x73
jmp case.0x18002371f.23
mov r13b, 1
mov qword [rbp - 0x58], r11
mov byte [rsp + 0x40], r13b
jmp case.0x18002371f.23
mov r8d, 2
lea rdx, [0x18007c932]
lea rcx, [rbp + 0x12e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp case.0x18002371f.23
lea rax, [rbp + 0x1290]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x1800239e3
mov r12d, 1
mov dword [rbp - 0x68], r11d
jmp case.0x18002371f.23
mov r8d, 2
lea rdx, [0x18007c960]
lea rcx, [rbp + 0x12be]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor eax, eax
lea rdx, [0x18007ca30]
lea rcx, [rbp + 0x12b0]
mov word [rbp + 0x12c2], ax
lea r8d, [rax + 2]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
movsd xmm0, qword [0x18007caf6]
movzx eax, word [0x18007cafe]
movsd qword [rbp + 0x12c6], xmm0
mov word [rbp + 0x12ce], ax
jmp case.0x18002371f.23
mov word [rbp + 0x1320], bx
mov dword [rbp + 0x1322], 0x330079
mov word [rbp + 0x1326], r10w
mov dword [rbp + 0x1328], 0x64002e
jmp case.0x18002371f.23
mov eax, dword [0x18007cb3c]
lea rdx, [0x18007cb62]
mov dword [rbp + 0x12e0], eax
lea rcx, [rbp + 0x12e0]
movzx eax, word [0x18007cb40]
mov r8d, 3
mov word [rbp + 0x12e4], ax
mov word [rbp + 0x12da], r11w
mov word [rbp + 0x12e6], r11w
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov word [rbp + 0x12ec], bx
jmp case.0x18002371f.23
call qword [rbp - 0x20]
cmp eax, 1
sete byte [rsp + 0x50]
jmp case.0x18002371f.23
mov r8d, 2
lea rdx, [0x18007cc36]
lea rcx, [rbp + 0x12d2]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov r8d, 0x73
inc r14d
lea eax, [r14 + 0x7e]
lea r9d, [r8 - 0xd]
lea r10d, [r8 - 0x41]
lea r11d, [r8 - 0x73]
cmp eax, r15d
jb 0x1800236f4
mov eax, dword [rsp + 0x50]
mov rcx, qword [rbp + 0x1338]
xor rcx, rsp
call fcn.18006d4c0
mov rbx, qword [rsp + 0x1480]
add rsp, 0x1440
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret