Function at 0x1800275e0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2d0]
sub rsp, 0x3d0
mov rax, qword [0x1800a9e28]
xor rax, rsp
mov qword [rbp + 0x2c0], rax
mov qword [rbp + 0x38], r9
mov eax, r8d
mov dword [rbp - 0x78], eax
mov rsi, rdx
mov qword [rbp + 0x28], rdx
mov r12, rcx
mov qword [rbp + 0x30], rcx
mov r15, qword [rbp + 0x330]
mov qword [rbp + 0x20], r15
xor r13d, r13d
mov qword [rbp + 0x50], r13
mov qword [rbp + 0x58], 7
mov word [rbp + 0x40], r13w
lea edx, [r8 - 0x13]
mov dword [rsp + 0x54], edx
cmp r8d, edx
jbe case.0x18002769c.32
mov rbx, qword [rbp - 0x70]
movzx edi, byte [rsp + 0x52]
mov dword [rsp + 0x68], edi
movabs r8, 0x7ffffffffffffffe
mov r14d, 0x74
lea r11, [0x180000000]
add eax, 0xffffffe1
cmp eax, 0x4c
ja case.0x18002769c.49
movzx eax, byte [r11 + rax + 0x287fc]
mov ecx, dword [r11 + rax*4 + 0x287b0]
add rcx, r11
jmp rcx
mov rdi, qword [rbp - 0x20]
test rdi, rdi
je 0x1800286e8
mov rax, qword [r9]
mov qword [rbp + 0x60], rax
mov rax, qword [rsi]
mov qword [rbp - 0x70], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, r14d
mov r8, r15
mov rdx, rdi
mov rcx, r12
call fcn.180072230
mov rbx, rax
mov qword [rbp - 0x70], rax
jmp 0x1800286bf
cmp byte [rsp + 0x50], 0
je case.0x18002769c.49
mov edi, 0xbf
mov rbx, qword [rbp - 0x30]
nop dword [rax]
cmp edi, 0xbf
je 0x180027794
cmp edi, 0x17e0
je 0x18002776b
cmp edi, 0x2f01
je 0x180027733
cmp edi, 0x4622
jne 0x1800277a8
mov rcx, rbx
call qword [sym.imp.dbghelp.dll_SymCleanup]
jmp 0x1800277a8
mov ecx, r13d
movzx eax, byte [rsp + 0x53]
cmp dword [rsp + 0x78], 0
cmovne ecx, eax
mov byte [rsp + 0x53], cl
cmp cl, 0
je 0x1800277a8
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.dbghelp.dll_SymEnumerateModules64]
mov dword [rsp + 0x78], eax
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.dbghelp.dll_SymCleanup]
jmp 0x1800277a8
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov dword [rsp + 0x78], eax
mov r8d, dword [rbp - 0x60]
lea rdx, [rbp + 0x1b0]
mov rcx, rbx
call qword [sym.imp.dbghelp.dll_SymGetSearchPath]
jmp 0x1800277a8
mov byte [rsp + 0x53], 1
mov qword [rbp - 0x40], 0xffffffffffffffff
mov dword [rbp - 0x60], 0x104
add edi, 0x1721
cmp edi, 0x5c84
jbe 0x180027700
mov rbx, qword [rbp - 0x70]
jmp 0x1800286bf
mov rax, qword [r12]
lea rcx, [rsi + rax]
mov qword [rbp - 0x68], rcx
mov qword [rbp - 0x18], rax
lea rdx, [r15 + 0x140c]
mov r9, rsi
mov r8d, 0x5a
lea rcx, [rbp - 0x18]
call fcn.180037070
mov rdi, rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x20], r13
mov r9d, 0xcb
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x58]
call fcn.18000cc50
test eax, eax
jne 0x180027db1
lea rax, [rsi + rdi]
mov qword [rsp + 0x58], rax
jmp 0x1800286bf
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x69]
mov r14, qword [rsp + 0x58]
mov rcx, r14
call fcn.18001dd70
mov dword [r15 + 0x5438], eax
test eax, eax
je 0x180027db1
mov ecx, eax
cmp rcx, qword [r12]
jae 0x180027db1
lea rcx, [r14 + 4]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x69]
call fcn.18001dd70
mov dword [r15 + 0x543c], eax
jmp 0x1800286bf
mov r14, qword [rbp + 0x50]
mov rcx, qword [rbp + 0x58]
cmp r14, rcx
jae 0x1800278a8
lea rax, [r14 + 1]
mov qword [rbp + 0x50], rax
lea rax, [rbp + 0x40]
cmp rcx, 8
cmovae rax, qword [rbp + 0x40]
mov dword [rax + r14*2], 0x2e
mov rsi, qword [rbp + 0x40]
jmp 0x180027983
mov rax, r8
sub rax, r14
cmp rax, 1
jb 0x1800287a7
lea r12, [r14 + 1]
mov r15, qword [rbp + 0x58]
mov rdi, r12
or rdi, 7
cmp rdi, r8
jbe 0x1800278d1
mov rdi, r8
jmp 0x1800278f2
mov rcx, r15
shr rcx, 1
mov rax, r8
sub rax, rcx
cmp r15, rax
jbe 0x1800278e7
mov rdi, r8
jmp 0x1800278f2
lea rax, [r15 + rcx]
cmp rdi, rax
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp + 0x40]
call fcn.180054670
mov rsi, rax
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], rdi
add r14, r14
mov r8, r14
mov rcx, rax
cmp r15, 8
jb 0x180027964
mov rdi, qword [rbp + 0x40]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov dword [r14 + rsi], 0x2e
lea rdx, [r15*2 + 2]
cmp rdx, 0x1000
jb 0x18002795a
add rdx, 0x27
mov rcx, qword [rdi - 8]
sub rdi, rcx
lea rax, [rdi - 8]
cmp rax, 0x1f
ja 0x1800286f8
mov rdi, rcx
mov rcx, rdi
call fcn.18007de74
jmp 0x180027975
lea rdx, [rbp + 0x40]
call sub.VCRUNTIME140.dll_memcpy
mov dword [r14 + rsi], 0x2e
movabs r8, 0x7ffffffffffffffe
mov qword [rbp + 0x40], rsi
mov r15, qword [rbp + 0x50]
mov r14, qword [rbp + 0x58]
cmp r15, r14
jae 0x1800279b1
lea rax, [r15 + 1]
mov qword [rbp + 0x50], rax
lea rax, [rbp + 0x40]
cmp r14, 8
cmovae rax, rsi
mov dword [rax + r15*2], 0x64
jmp 0x180027a85
mov rax, r8
sub rax, r15
cmp rax, 1
jb 0x1800287a7
lea r12, [r15 + 1]
mov rdi, r12
or rdi, 7
cmp rdi, r8
jbe 0x1800279d6
mov rdi, r8
jmp 0x1800279f7
mov rcx, r14
shr rcx, 1
mov rax, r8
sub rax, rcx
cmp r14, rax
jbe 0x1800279ec
mov rdi, r8
jmp 0x1800279f7
lea rax, [r14 + rcx]
cmp rdi, rax
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp + 0x40]
call fcn.180054670
mov rsi, rax
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], rdi
add r15, r15
mov r8, r15
mov rcx, rax
cmp r14, 8
jb 0x180027a70
mov rdi, qword [rbp + 0x40]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov dword [r15 + rsi], 0x64
xor r13d, r13d
lea rdx, [r14*2 + 2]
cmp rdx, 0x1000
jb 0x180027a62
add rdx, 0x27
mov rcx, qword [rdi - 8]
sub rdi, rcx
lea rax, [rdi - 8]
cmp rax, 0x1f
ja 0x1800286f8
mov rdi, rcx
mov rcx, rdi
call fcn.18007de74
mov qword [rbp + 0x40], rsi
jmp 0x180027a88
lea rdx, [rbp + 0x40]
call sub.VCRUNTIME140.dll_memcpy
mov dword [r15 + rsi], 0x64
mov qword [rbp + 0x40], rsi
xor r13d, r13d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp - 0x28]
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov dword [rbp - 0x54], eax
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov dword [rbp - 0x48], eax
jmp 0x1800286bf
xor r8d, r8d
mov edx, 0x12b
xor ecx, ecx
call fcn.18002a6d0
mov qword [rbp - 0x20], rax
jmp 0x1800286bf
mov eax, dword [r15 + 0x543c]
test eax, eax
je 0x180027db1
cmp rax, qword [r12]
jae 0x180027db1
mov rcx, qword [rsp + 0x58]
add rcx, 8
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x69]
call fcn.18001dd70
mov dword [r15 + 0x5440], eax
jmp 0x1800286bf
lea r8, [rbp + 0x40]
mov rdx, r15
mov ecx, 0xbe
call fcn.18001bdc0
mov byte [rsp + 0x70], al
jmp 0x1800286bf
xor r12d, r12d
mov ecx, r12d
mov qword [rbp + 0x60], rcx
cmp qword [0x18008c168], r12
jbe 0x180027d86
nop word [rax + rax]
mov eax, 0xa1
mov dword [rsp + 0x60], eax
nop dword [rax]
sub eax, 0x9e
je 0x180027c1c
sub eax, 1
je 0x180027bf8
sub eax, 1
je 0x180027ba4
cmp eax, 1
jne 0x180027d59
mov byte [rsp + 0x52], al
movzx edi, al
mov dword [rsp + 0x68], edi
mov qword [rbp - 0x10], 0xffffffffffffffff
mov qword [rbp - 0x38], 0xffffffffffffffff
xor r8d, r8d
xor edx, edx
lea rcx, [rdx - 1]
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov dword [rbp - 0x5c], eax
jmp 0x180027d4b
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov edx, r12d
movzx ecx, byte [rsp + 0x52]
cmp dword [rbp - 0x5c], 0
cmovne edx, ecx
mov byte [rsp + 0x52], dl
movzx edi, dil
test eax, eax
cmove edi, r12d
mov dword [rsp + 0x68], edi
cmp dl, 0
je 0x180027d4b
xor edx, edx
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.dbghelp.dll_SymFunctionTableAccess64]
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.dbghelp.dll_SymCleanup]
jmp 0x180027d4b
test dil, dil
je 0x180027d59
xor edx, edx
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.dbghelp.dll_SymUnloadModule64]
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.dbghelp.dll_SymCleanup]
jmp 0x180027d4b
lea rax, [0x18008c158]
cmp qword [0x18008c170], 0x10
cmovae rax, qword [0x18008c158]
movsx r13d, byte [rax + rcx]
mov r15, qword [rbp + 0x50]
mov rcx, qword [rbp + 0x58]
cmp r15, rcx
jae 0x180027c6a
lea rax, [r15 + 1]
mov qword [rbp + 0x50], rax
lea rax, [rbp + 0x40]
cmp rcx, 8
cmovae rax, qword [rbp + 0x40]
mov word [rax + r15*2], r13w
mov word [rax + r15*2 + 2], r12w
jmp 0x180027d55
mov rax, r8
sub rax, r15
cmp rax, 1
jb 0x1800287a7
lea r12, [r15 + 1]
mov r14, qword [rbp + 0x58]
mov rdi, r12
or rdi, 7
cmp rdi, r8
jbe 0x180027c93
mov rdi, r8
jmp 0x180027cb4
mov rcx, r14
shr rcx, 1
mov rax, r8
sub rax, rcx
cmp r14, rax
jbe 0x180027ca9
mov rdi, r8
jmp 0x180027cb4
lea rax, [r14 + rcx]
cmp rdi, rax
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp + 0x40]
call fcn.180054670
mov rsi, rax
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], rdi
add r15, r15
mov r8, r15
mov rcx, rax
cmp r14, 8
jb 0x180027d2c
mov rdi, qword [rbp + 0x40]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov word [rsi + r15], r13w
xor r12d, r12d
mov word [rsi + r15 + 2], r12w
lea rdx, [r14*2 + 2]
cmp rdx, 0x1000
jb 0x180027d22
add rdx, 0x27
mov rcx, qword [rdi - 8]
sub rdi, rcx
lea rax, [rdi - 8]
cmp rax, 0x1f
ja 0x1800286f8
mov rdi, rcx
mov rcx, rdi
call fcn.18007de74
jmp 0x180027d43
lea rdx, [rbp + 0x40]
call sub.VCRUNTIME140.dll_memcpy
mov word [rsi + r15], r13w
xor r12d, r12d
mov word [rsi + r15 + 2], r12w
mov edi, dword [rsp + 0x68]
mov qword [rbp + 0x40], rsi
movabs r8, 0x7ffffffffffffffe
mov rcx, qword [rbp + 0x60]
mov eax, dword [rsp + 0x60]
dec eax
mov dword [rsp + 0x60], eax
cmp eax, 0x9d
ja 0x180027b50
inc rcx
mov qword [rbp + 0x60], rcx
cmp rcx, qword [0x18008c168]
jb 0x180027b40
mov edx, dword [rsp + 0x54]
mov qword [rbp - 0x28], 0xffffffffffffffff
mov qword [rbp - 0x30], 0xffffffffffffffff
xor r13d, r13d
jmp case.0x18002769c.49
mov rax, qword [rsp + 0x58]
add rax, 0xc
cmp rax, qword [rbp - 0x68]
jbe case.0x18002769c.49
mov rbx, 0xffffffffffffffec
jmp 0x180028721
mov rsi, qword [0x18008c148]
lea rdi, [0x18008c138]
cmp qword [0x18008c150], 8
cmovae rdi, qword [0x18008c138]
cmp rsi, 8
jae 0x180027df4
movups xmm0, xmmword [rdi]
movups xmmword [rbp + 0x60], xmm0
mov r15d, 7
mov r13, qword [rbp + 0x60]
jmp 0x180027e33
mov r15, rsi
or r15, 7
cmp r15, r8
cmova r15, r8
lea rdx, [r15 + 1]
lea rcx, [rbp + 0x60]
call fcn.180054670
mov r13, rax
mov qword [rbp + 0x60], rax
lea r8, [rsi*2 + 2]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
movabs r8, 0x7ffffffffffffffe
mov qword [rbp + 0x78], r15
mov qword [rbp + 0x70], rsi
lea r14, [rbp + 0x60]
cmp r15, 8
cmovae r14, r13
cmp rsi, 8
jae 0x180027e5e
movups xmm0, xmmword [r14]
mov qword [rbp + 0x98], 7
jmp 0x180027ea4
mov rdi, rsi
or rdi, 7
cmp rdi, r8
cmova rdi, r8
lea rdx, [rdi + 1]
lea rcx, [rbp + 0x80]
call fcn.180054670
mov qword [rbp + 0x80], rax
lea r8, [rsi*2 + 2]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x98], rdi
movups xmm0, xmmword [rbp + 0x80]
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x90], rsi
mov rcx, qword [rbp + 0x58]
cmp rcx, 8
jb 0x180027eef
lea rdx, [rcx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180027eea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800286f1
call fcn.18007de74
movups xmm0, xmmword [rbp + 0x60]
movups xmmword [rbp + 0x40], xmm0
movups xmm0, xmmword [rbp + 0x90]
movups xmmword [rbp + 0x50], xmm0
cmp r15, 8
jb 0x180027f3d
lea rdx, [r15*2 + 2]
mov rax, r13
cmp rdx, 0x1000
jb 0x180027f35
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800286f8
mov rcx, r13
call fcn.18007de74
mov byte [rsp + 0x51], 1
mov byte [rsp + 0x50], 1
jmp 0x1800286bc
mov rcx, qword [r15 + 0x10]
call fcn.18007de74
jmp 0x1800286bf
mov edi, 0xe0
nop
mov r14, qword [rsp + 0x58]
mov r12, qword [rbp - 0x68]
cmp edi, 0xe0
je 0x180028055
cmp edi, 0x9bc0
je 0x180027f97
cmp edi, 0x136a0
jne 0x18002805d
add r14, qword [rbp]
mov qword [rsp + 0x58], r14
jmp 0x18002805d
mov rax, r12
sub rax, r14
mov qword [rbp - 8], rax
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 0x116
lea r9, [rbp + 0xb0]
lea r8, [rbp - 8]
lea rdx, [rsp + 0x7c]
lea rcx, [rbp - 0x58]
call fcn.180039520
mov qword [rbp], rax
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x20], r13
mov r9d, 0xcb
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x60]
call fcn.18000cc50
test eax, eax
jne 0x180027db1
mov ecx, dword [rbp - 0x58]
cmp ecx, 8
ja 0x180027db1
mov dword [rsp + 0x60], ecx
mov eax, dword [rsp + 0x7c]
mov dword [rbp + 0x60], eax
lea r8, [r15 + 0x804]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 0x13d
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x60]
call fcn.1800464c0
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x20], r13
mov r9d, 0xcb
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x60]
call fcn.18000cc50
test eax, eax
jne 0x180027db1
jmp 0x18002805d
mov dword [rsp + 0x7c], 0x1c
add edi, 0x9ae0
cmp edi, 0x1d0a0
jbe 0x180027f60
mov edi, 0xb0
mov eax, edi
sub eax, 0xb0
je 0x1800280f5
cmp eax, 1
jne 0x180028154
mov eax, dword [rbp - 0x50]
cmp eax, 9
ja 0x180027db1
mov dword [rbp + 0x60], eax
mov eax, dword [rbp - 0x80]
mov dword [rsp + 0x60], eax
lea r8, [r15 + 0xc08]
lea rax, [rbp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 0x13d
lea rdx, [rbp + 0x140]
lea rcx, [rsp + 0x60]
call fcn.1800464c0
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x20], r13
mov r9d, 0xcb
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x58]
call fcn.18000cc50
test eax, eax
jne 0x180027db1
add r14, qword [rbp + 0x10]
mov qword [rsp + 0x58], r14
jmp 0x180028154
mov dword [rbp - 0x80], 0x34
mov rax, r12
sub rax, r14
mov qword [rbp + 8], rax
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 0x116
lea r9, [rbp + 0x140]
lea r8, [rbp + 8]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x50]
call fcn.180039520
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x20], r13
mov r9d, 0xcb
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x60]
call fcn.18000cc50
test eax, eax
jne 0x180027db1
inc edi
cmp edi, 0xb2
jb 0x180028074
mov esi, 0xcb
nop word [rax + rax]
mov eax, esi
sub eax, 0xcb
je 0x180028249
cmp eax, 0x2d
jne 0x180028250
mov rax, r12
sub rax, r14
mov qword [rbp + 0x18], rax
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 0x116
lea r9, [rbp + 0xf0]
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x7c]
lea rcx, [rbp - 0x4c]
call fcn.180039520
mov rdi, rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x20], r13
mov r9d, 0xcb
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x58]
call fcn.18000cc50
test eax, eax
jne 0x180027db1
mov ecx, dword [rbp - 0x4c]
cmp ecx, 9
ja 0x180027db1
mov dword [rbp + 0x60], ecx
mov eax, dword [rbp - 0x7c]
mov dword [rsp + 0x60], eax
lea rax, [rbp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 0x13d
mov r8, r15
lea rdx, [rbp + 0xf0]
lea rcx, [rsp + 0x60]
call fcn.1800464c0
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x20], r13
mov r9d, 0xcb
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x58]
call fcn.18000cc50
test eax, eax
jne 0x180027db1
add r14, rdi
mov qword [rsp + 0x58], r14
jmp 0x180028250
mov dword [rbp - 0x7c], 0x23
add esi, 0x2d
cmp esi, 0x125
jb 0x180028170
jmp 0x1800286bf
mov eax, dword [r15 + 0x5440]
test eax, eax
je 0x180027db1
cmp rax, qword [r12]
jae 0x180027db1
mov rcx, qword [rsp + 0x58]
add rcx, 0xc
mov qword [rsp + 0x58], rcx
mov dword [r15 + 0x546c], 1
mov dword [r15 + 0x5468], 1
mov rax, rcx
sub rax, rsi
mov qword [rsp + 0x70], rax
jmp case.0x18002769c.49
mov r14, qword [rbp + 0x50]
mov rcx, qword [rbp + 0x58]
cmp r14, rcx
jae 0x1800282e4
lea rax, [r14 + 1]
mov qword [rbp + 0x50], rax
lea rax, [rbp + 0x40]
cmp rcx, 8
cmovae rax, qword [rbp + 0x40]
mov dword [rax + r14*2], 0x61
mov rsi, qword [rbp + 0x40]
jmp 0x1800283bf
mov rax, r8
sub rax, r14
cmp rax, 1
jb 0x1800287a7
lea r12, [r14 + 1]
mov r15, qword [rbp + 0x58]
mov rdi, r12
or rdi, 7
cmp rdi, r8
jbe 0x18002830d
mov rdi, r8
jmp 0x18002832e
mov rcx, r15
shr rcx, 1
mov rax, r8
sub rax, rcx
cmp r15, rax
jbe 0x180028323
mov rdi, r8
jmp 0x18002832e
lea rax, [r15 + rcx]
cmp rdi, rax
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp + 0x40]
call fcn.180054670
mov rsi, rax
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], rdi
add r14, r14
mov r8, r14
mov rcx, rax
cmp r15, 8
jb 0x1800283a0
mov rdi, qword [rbp + 0x40]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov dword [r14 + rsi], 0x61
lea rdx, [r15*2 + 2]
cmp rdx, 0x1000
jb 0x180028396
add rdx, 0x27
mov rcx, qword [rdi - 8]
sub rdi, rcx
lea rax, [rdi - 8]
cmp rax, 0x1f
ja 0x1800286f8
mov rdi, rcx
mov rcx, rdi
call fcn.18007de74
jmp 0x1800283b1
lea rdx, [rbp + 0x40]
call sub.VCRUNTIME140.dll_memcpy
mov dword [r14 + rsi], 0x61
movabs r8, 0x7ffffffffffffffe
mov qword [rbp + 0x40], rsi
movzx eax, byte [rsp + 0x51]
cmp dword [rbp - 0x54], 0
cmovne r13d, eax
mov byte [rsp + 0x51], r13b
xor edx, edx
mov ecx, edx
movzx eax, byte [rsp + 0x50]
cmp dword [rbp - 0x48], edx
cmovne ecx, eax
mov byte [rsp + 0x50], cl
mov r12, qword [rbp + 0x50]
mov r15, qword [rbp + 0x58]
cmp r12, r15
jae 0x180028413
lea rax, [r12 + 1]
mov qword [rbp + 0x50], rax
lea rax, [rbp + 0x40]
cmp r15, 8
cmovae rax, rsi
mov dword [rax + r12*2], 0x74
jmp 0x1800284e9
mov rax, r8
sub rax, r12
cmp rax, 1
jb 0x1800287a7
lea rsi, [r12 + 1]
mov rdi, rsi
or rdi, 7
cmp rdi, r8
jbe 0x180028439
mov rdi, r8
jmp 0x18002845a
mov rcx, r15
shr rcx, 1
mov rax, r8
sub rax, rcx
cmp r15, rax
jbe 0x18002844f
mov rdi, r8
jmp 0x18002845a
lea rax, [rcx + r15]
cmp rdi, rax
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp + 0x40]
call fcn.180054670
mov r14, rax
mov qword [rbp + 0x50], rsi
mov qword [rbp + 0x58], rdi
lea rsi, [r12 + r12]
mov r8, rsi
mov rcx, rax
cmp r15, 8
jb 0x1800284d4
mov rdi, qword [rbp + 0x40]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov dword [rsi + r14], 0x74
xor r12d, r12d
lea rdx, [r15*2 + 2]
cmp rdx, 0x1000
jb 0x1800284c6
add rdx, 0x27
mov rcx, qword [rdi - 8]
sub rdi, rcx
lea rax, [rdi - 8]
cmp rax, 0x1f
ja 0x1800286f8
mov rdi, rcx
mov rcx, rdi
call fcn.18007de74
mov qword [rbp + 0x40], r14
jmp 0x1800284ec
lea rdx, [rbp + 0x40]
call sub.VCRUNTIME140.dll_memcpy
mov dword [rsi + r14], 0x74
mov qword [rbp + 0x40], r14
xor r12d, r12d
test r13b, r13b
je 0x1800286bc
mov edi, 0x47
mov rbx, qword [rbp - 0x28]
lea r14d, [rdi + 0x1e]
mov r13d, 0x2928
nop dword [rax + rax]
cmp edi, 0x2ae
ja 0x1800285eb
je 0x1800285d8
mov eax, edi
sub eax, 0x47
je 0x1800285a8
sub eax, 0x7b
je 0x18002859c
sub eax, 0x7b
je 0x180028575
sub eax, 0x7b
je 0x18002854e
cmp eax, 0x7b
jne 0x180028693
mov word [rbp + 0xab], r13w
jmp 0x180028693
movzx eax, word [0x180086105]
mov word [rbp + 0xa8], ax
movzx eax, byte [0x180086107]
mov byte [rbp + 0xaa], al
mov byte [rbp + 0xab], 0
jmp 0x180028693
movzx eax, word [0x1800861a4]
mov word [rbp + 0xa5], ax
movzx eax, byte [0x1800861a6]
mov byte [rbp + 0xa7], al
mov byte [rbp + 0xa8], 0
jmp 0x180028693
mov byte [rbp + 0xa5], 0
jmp 0x180028693
mov byte [rbp + 0xa0], 0
mov r8d, 1
lea rdx, [0x18008611b]
lea rcx, [rbp + 0xa0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov dword [rbp + 0xa1], 0x74736554
jmp 0x180028693
mov byte [rbp + 0xad], 0
mov dword [rbp + 0x60], 0x657243
jmp 0x180028693
mov eax, edi
sub eax, 0x329
je 0x180028685
sub eax, 0x7b
je 0x18002866e
sub eax, 0x7b
je 0x18002865c
sub eax, 0x7b
je 0x18002861b
cmp eax, 0x7b
jne 0x180028693
mov rcx, rbx
call qword [sym.imp.dbghelp.dll_SymCleanup]
jmp 0x180028693
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
lea rax, [rbp + 0x1b0]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 2
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp + 0x60]
lea rdx, [rbp + 0xa0]
mov rcx, rbx
call qword [sym.imp.dbghelp.dll_SymFindFileInPath]
jmp 0x180028693
mov eax, 0x6143
mov word [rbp + 0x6e], ax
mov dword [rbp + 0x70], 0x656863
jmp 0x180028693
mov word [rbp + 0x69], r14w
mov ecx, 0x6c
mov word [rbp + 0x6a], cx
mov dword [rbp + 0x6b], 0x656e69
jmp 0x180028693
mov dword [rbp + 0x63], 0x3f7461
mov dword [rbp + 0x66], 0x706950
add edi, 0x7b
cmp edi, 0x590
jb 0x180028510
mov rbx, qword [rbp - 0x70]
movzx r14d, byte [rsp + 0x50]
movzx r13d, byte [rsp + 0x51]
mov byte [rsp + 0x51], r13b
mov byte [rsp + 0x50], r14b
xor r13d, r13d
mov edx, dword [rsp + 0x54]
mov eax, dword [rbp - 0x78]
dec eax
mov dword [rbp - 0x78], eax
cmp eax, edx
jbe case.0x18002769c.32
mov edi, dword [rsp + 0x68]
mov r15, qword [rbp + 0x20]
mov rsi, qword [rbp + 0x28]
mov r12, qword [rbp + 0x30]
mov r9, qword [rbp + 0x38]
jmp 0x180027665
mov rbx, 0xfffffffffffffff5
jmp 0x180028721
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r9, rsi
mov edx, 1
mov r8d, edx
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 1
sete byte [rsp + 0x70]
mov rbx, qword [rsp + 0x70]
mov rcx, qword [rbp + 0x58]
cmp rcx, 8
jb 0x18002877a
lea rdx, [rcx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180028775
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180028775
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor r9d, r9d
mov r8d, 0xd3
mov rdx, qword [rbp - 0x20]
xor ecx, ecx
call fcn.18003f350
jmp 0x180028721
call fcn.18007de74
mov rax, rbx
mov rcx, qword [rbp + 0x2c0]
xor rcx, rsp
call fcn.18007e380
mov rbx, qword [rsp + 0x420]
add rsp, 0x3d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180041110
nop
nop dword [rax]
inc dword [rsi - 0x78e3fffe]
add al, byte [rax]
invalid