Function at 0x18001cfb0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x15f8]
mov eax, 0x16f8
call fcn.18006ce90
sub rsp, rax
imul eax, r8d, 0xa5f
xor r10d, r10d
xorps xmm0, xmm0
movaps xmmword [rsp + 0x16e0], xmm6
movaps xmmword [rsp + 0x16d0], xmm7
mov rbx, r9
mov r14, rdx
mov qword [rsp + 0x50], r10
mov rsi, rcx
mov dword [rsp + 0x58], r8d
mov dword [rbp - 0x64], eax
mov r12d, r8d
movdqu xmmword [rsp + 0x40], xmm0
cmp r8d, eax
ja 0x18001de1f
mov edi, dword [rbp + 0x1650]
cmp r12d, 0xba58
ja 0x18001d5c5
je 0x18001d4d8
cmp r12d, 0xc8
ja 0x18001d169
je 0x18001d13b
mov eax, r12d
sub eax, 0x14
je 0x18001d124
sub eax, 0x3b
je 0x18001d0bb
cmp eax, 0x40
jne 0x18001dd1e
lea r9d, [rax + 0xf]
mov r8, rsi
lea rdx, [rsp + 0x40]
xor ecx, ecx
call fcn.180011cf0
test al, al
je 0x18001dd4a
mov rcx, qword [rsi + 0x40]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rcx, [rsi + 0x18]
lea rdx, [rsp + 0x40]
call fcn.180004ea0
mov rcx, qword [rsi + 0x40]
mov byte [rsp + 0x38], al
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x18001dd14
cmp byte [rsi], 0x22
jne 0x18001dd1e
mov rdx, qword [rsi + 6]
test rdx, rdx
je 0x18001dd1e
movsxd rax, dword [rbx]
test eax, eax
js 0x18001dd1e
cmp eax, dword [rsi + 2]
jg 0x18001dd1e
test r14, r14
je 0x18001dd1e
lea rcx, [rax + rax*4]
mov qword [rsp + 0x20], r10
mov rax, qword [rdx]
xor r9d, r9d
xor edx, edx
mov r8d, 0x88
lea rbx, [rax + rcx*4]
mov rcx, rbx
call fcn.180008760
movups xmm0, xmmword [r14]
movups xmmword [rbx], xmm0
mov eax, dword [r14 + 0x10]
mov dword [rbx + 0x10], eax
jmp 0x18001dd14
xor r9d, r9d
xor r8d, r8d
mov rdx, rsi
lea ecx, [r9 + 0x38]
call fcn.18001ec70
jmp 0x18001dd14
mov eax, dword [rsi]
lea rdx, [rbp - 0x20]
mov ecx, 0xffffff29
mov dword [rbp + 0x53c], eax
mov dword [rbp + 0x540], r10d
call qword [0x1800ce8f0]
xor r10d, r10d
mov word [0x1800ce8f8], r10w
jmp 0x18001dd17
cmp r12d, 0x10c
je 0x18001d4ac
cmp r12d, 0x636e
je 0x18001d26a
cmp r12d, 0x8b10
jne 0x18001dd1e
mov rdi, qword [rsp + 0x40]
movsxd rbx, dword [rbp + 0x540]
test rdi, rdi
je 0x18001d262
mov rsi, qword [rsp + 0x48]
cmp rdi, rsi
je 0x18001d20a
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x18001d1ed
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x18001d1e5
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18001e0a7
mov rcx, r8
call fcn.18006cae4
xor r10d, r10d
mov qword [rdi + 0x10], r10
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
add rdi, 0x28
cmp rdi, rsi
jne 0x18001d1b0
mov rdi, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x6666666666666667
sub rcx, rdi
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rax, rdi
lea rdx, [rdx + rdx*4]
shl rdx, 3
cmp rdx, 0x1000
jb 0x18001d25a
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001e0a7
mov rcx, rdi
call fcn.18006cae4
mov rax, rbx
jmp 0x18001de23
cmp byte [rsp + 0x38], 0
jne 0x18001de47
mov eax, 0x40
mov rsi, 0xffffffffffffffff
dec rax
shr rsi, 1
cmp rsi, 0x7fff
ja 0x18001d281
mov rcx, qword [rsp + 0x40]
mov qword [rbp - 0x50], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x78], rcx
mov qword [rsp + 0x30], rax
cmp rcx, rax
je 0x18001d491
lea r12, [rcx + 0x28]
mov r13d, 1
mov qword [rbp - 0x58], r12
cmp r12, rax
je 0x18001d48c
nop word [rax + rax]
mov r12, qword [rbp - 0x50]
lea r9, [r13 + 1]
mov qword [rsp + 0x70], r9
nop dword [rax]
mov rbx, r10
mov r14, r10
test r13, r13
je 0x18001d32a
nop dword [rax + rax]
lea rcx, [r12 - 1]
shl rbx, cl
add rbx, rbx
nop dword [rax + rax]
call fcn.1800727a0
mov eax, eax
cmp rax, rsi
ja 0x18001d300
lea rcx, [r12 - 1]
or rbx, rax
shl r14, cl
add r14, r14
or r14, rsi
cmp r14, r13
jb 0x18001d2f0
mov r9, qword [rsp + 0x70]
xor r10d, r10d
xor edx, edx
mov rax, r14
div r9
mov rcx, rax
mov r8, rdx
xor edx, edx
mov rax, rbx
div r9
cmp rax, rcx
jb 0x18001d34a
cmp r8, r13
jne 0x18001d2e0
mov r12, qword [rbp - 0x58]
xor edx, edx
mov rax, rbx
div r9
cmp rdx, r13
je 0x18001d46e
movups xmm6, xmmword [r12]
mov rcx, qword [rbp - 0x78]
lea rax, [rdx + rdx*4]
movups xmm7, xmmword [r12 + 0x10]
mov qword [r12 + 0x10], r10
mov qword [r12 + 0x18], 0xf
mov byte [r12], 0
lea rbx, [rcx + rax*8]
movzx r14d, word [r12 + 0x20]
mov r15d, dword [r12 + 0x24]
movups xmmword [rbp - 0x48], xmm6
movups xmmword [rbp - 0x38], xmm7
cmp r12, rbx
je 0x18001d3c2
movups xmm0, xmmword [rbx]
movups xmmword [r12], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [r12 + 0x10], xmm1
mov qword [rbx + 0x10], r10
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
movzx eax, word [rbx + 0x20]
mov word [r12 + 0x20], ax
mov eax, dword [rbx + 0x24]
mov dword [r12 + 0x24], eax
lea rax, [rbp - 0x48]
cmp rbx, rax
je 0x18001d42a
mov rax, qword [rbx + 0x18]
cmp rax, 0x10
jb 0x18001d418
mov rcx, qword [rbx]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x18001d413
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18001e0a7
mov rcx, r8
call fcn.18006cae4
movups xmmword [rbx], xmm6
mov edx, 0xf
mov byte [rbp - 0x48], 0
movups xmmword [rbx + 0x10], xmm7
jmp 0x18001d42e
mov rdx, qword [rbp - 0x30]
mov word [rbx + 0x20], r14w
mov dword [rbx + 0x24], r15d
cmp rdx, 0x10
jb 0x18001d46e
mov rcx, qword [rbp - 0x48]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001d469
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001e0a7
call fcn.18006cae4
mov r13, qword [rsp + 0x70]
add r12, 0x28
mov r10d, 0
mov qword [rbp - 0x58], r12
cmp r12, qword [rsp + 0x30]
jne 0x18001d2d0
mov r12d, dword [rsp + 0x58]
mov rsi, qword [rbp + 0x1640]
mov edx, 0xffffffff
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x18001dd14
cmp dword [rsi], 2
jne 0x18001debd
mov rcx, qword [rbx + 8]
lea rdx, [0x180095278]
call fcn.180074404
mov qword [rbp - 0x80], rax
cmp rax, 0
je 0x18001e05e
jmp 0x18001dd14
mov r15, qword [rbp - 0x80]
lea rdx, [rsp + 0x30]
mov rcx, r15
mov dword [rsp + 0x28], 0xff
xor r9d, r9d
mov qword [rsp + 0x30], r10
xor r8d, r8d
mov qword [rsp + 0x20], r10
call fcn.1800279f0
xor r14d, r14d
mov dword [rsp + 0x28], 0xff
xor r9d, r9d
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov qword [rbp - 0x78], 0x10
lea rdx, [rbp - 0x78]
mov rcx, r15
mov rbx, rax
call fcn.1800279f0
xor eax, ebx
cmp eax, 0x44
jne 0x18001e0ad
mov dword [rsp + 0x28], 0xff
lea rdx, [rsp + 0x30]
xor r9d, r9d
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov qword [rsp + 0x30], r14
mov rcx, r15
call fcn.1800279f0
xor r9d, r9d
mov dword [rsp + 0x28], 0xff
xor r8d, r8d
mov qword [rbp - 0x78], 0x15
lea rdx, [rbp - 0x78]
mov qword [rsp + 0x20], r14
mov rcx, r15
mov rbx, rax
call fcn.1800279f0
xor eax, ebx
cmp eax, 0x47
jne 0x18001e0ad
mov dword [rsp + 0x28], 0xff
lea rdx, [rsp + 0x30]
xor r9d, r9d
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov qword [rsp + 0x30], r14
mov rcx, r15
call fcn.1800279f0
test eax, eax
jne 0x18001e079
jmp 0x18001dd14
cmp r12d, 0x18c0b
ja 0x18001d915
je 0x18001df49
cmp r12d, 0xc64d
je 0x18001d8c5
cmp r12d, 0x1292c
je 0x18001d8a3
cmp r12d, 0x173a4
jne 0x18001dd1e
mov r15, qword [rbp - 0x80]
lea rdx, [rsp + 0x30]
mov rcx, r15
mov dword [rsp + 0x28], 0xff
xor r9d, r9d
mov qword [rsp + 0x30], 0x61
xor r8d, r8d
mov qword [rsp + 0x20], r10
call fcn.1800279f0
xor r14d, r14d
mov dword [rsp + 0x28], 0xff
xor r9d, r9d
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov qword [rbp - 0x78], 0x62
lea rdx, [rbp - 0x78]
mov rcx, r15
mov rbx, rax
call fcn.1800279f0
mov edx, 1
mov dword [rsp + 0x28], 0xff
xor r9d, r9d
mov qword [rsp + 0x30], 0x40
xor r8d, r8d
lea ecx, [rbx + rax]
xor ebx, ebx
shl edx, cl
mov rcx, r15
mov dword [rbp - 0x68], edx
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x20], rbx
call fcn.1800279f0
test eax, eax
jne 0x18001d69a
lea edi, [rbx + 3]
jmp 0x18001d6c6
mov dword [rsp + 0x28], 0xff
lea rdx, [rsp + 0x30]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
mov qword [rsp + 0x30], 0x40
mov rcx, r15
call fcn.1800279f0
mov rdi, rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x30], 0x40c
mov r9d, 0xef
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
xor ecx, ecx
call fcn.1800276e0
test eax, eax
jne 0x18001d871
mov esi, edi
mov r14d, 0x123
shl esi, 9
nop
mov eax, r14d
sub eax, 0x121
je 0x18001d7cb
sub eax, 1
je 0x18001d7be
cmp eax, 1
jne 0x18001d855
movsxd r13, esi
lea rdx, [rsp + 0x30]
mov dword [rsp + 0x28], 0xff
xor r9d, r9d
xor r8d, r8d
mov qword [rbp - 0x60], r13
mov rcx, r15
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x20], rbx
call fcn.1800279f0
cmp eax, 1
jne 0x18001e090
lea rax, [r13 + 1]
mov dword [rsp + 0x28], 0xff
xor r9d, r9d
mov qword [rsp + 0x30], rax
xor r8d, r8d
mov qword [rsp + 0x20], rbx
lea rdx, [rsp + 0x30]
mov rcx, r15
call fcn.1800279f0
cmp eax, 0x20
jne 0x18001e090
lea rax, [r13 + 9]
mov dword [rsp + 0x28], 0xff
xor r9d, r9d
mov qword [rsp + 0x30], rax
xor r8d, r8d
mov qword [rsp + 0x20], rbx
lea rdx, [rsp + 0x30]
mov rcx, r15
call fcn.1800279f0
cmp eax, 0x20
jne 0x18001e090
jmp 0x18001d855
inc edi
add esi, 0x200
jmp 0x18001d855
mov r13, qword [rbp - 0x60]
lea rax, [rsp + 0x30]
mov r9d, 0xef
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
xor ecx, ecx
lea rbx, [r13 + 0xc]
mov qword [rsp + 0x30], rbx
call fcn.1800276e0
test eax, 0x1ff
jne 0x18001e0c4
lea rax, [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov r9d, 0xef
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
xor ecx, ecx
call fcn.1800276e0
cmp eax, esi
jbe 0x18001e0c4
lea rax, [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov r9d, 0xef
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
xor ecx, ecx
call fcn.1800276e0
shr eax, 9
mov dword [rsp + 0x7c], eax
xor ebx, ebx
dec r14d
cmp r14d, 0x120
ja 0x18001d700
mov rsi, qword [rbp + 0x1640]
jmp 0x18001dd14
lea rax, [rsp + 0x30]
mov qword [rsp + 0x30], 0x40c
mov r9d, 0xef
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
xor ecx, ecx
call fcn.1800276e0
shr eax, 9
mov dword [rsp + 0x7c], eax
jmp 0x18001dd14
mov rax, qword [rsi + 0x30]
test rax, rax
je 0x18001d8bc
mov rcx, qword [rsi + 0x38]
call rax
mov r8d, dword [rbp + 0x1650]
xor r10d, r10d
mov byte [rbp - 0x70], 1
jmp 0x18001dd1e
lea rbx, [rsi + 0x18]
lea rax, [rsp + 0x40]
cmp rbx, rax
je 0x18001d906
mov rcx, rbx
call fcn.18004d040
mov rax, qword [rsp + 0x40]
xorps xmm0, xmm0
mov qword [rbx], rax
xor r14d, r14d
mov rax, qword [rsp + 0x48]
mov qword [rbx + 8], rax
mov rax, qword [rsp + 0x50]
mov qword [rbx + 0x10], rax
movdqu xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r14
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x18001dd14
cmp r12d, 0x22cf0
je 0x18001d9c3
cmp r12d, 0x2e63c
je 0x18001d9ba
cmp r12d, 0x39f88
jne 0x18001dd1e
mov rbx, qword [rsp + 0x40]
test rbx, rbx
je 0x18001de1f
mov rdi, qword [rsp + 0x48]
cmp rbx, rdi
je 0x18001ddc7
nop dword [rax + rax]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x18001d99d
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x18001d995
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18001e0a7
mov rcx, r8
call fcn.18006cae4
xor r10d, r10d
mov qword [rbx + 0x10], r10
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
add rbx, 0x28
cmp rbx, rdi
jne 0x18001d960
jmp 0x18001ddc2
mov dword [rbp - 0x70], r10d
jmp 0x18001dd1e
mov r13d, edi
cmp edi, dword [rsp + 0x7c]
jge 0x18001dd0b
mov r15, qword [rbp - 0x80]
mov r12d, edi
shl r12d, 9
nop dword [rax + rax]
movsxd rsi, r12d
lea rdx, [rsp + 0x30]
mov dword [rsp + 0x28], 0xff
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x30], rsi
mov rcx, r15
mov qword [rsp + 0x20], r10
call fcn.1800279f0
cmp eax, 1
jne 0x18001dce4
lea rbx, [rsi + 1]
mov dword [rsp + 0x28], 0xff
xor r14d, r14d
mov qword [rsp + 0x30], rbx
xor r9d, r9d
mov qword [rsp + 0x20], r14
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, r15
call fcn.1800279f0
cmp eax, 0x20
je 0x18001dce4
lea rax, [rsi + 0x10]
mov qword [rsp + 0x20], r14
mov r9, r15
mov qword [rsp + 0x30], rax
xor r8d, r8d
lea rcx, [rsp + 0x30]
mov edx, 0xf4
call fcn.18005fbb0
test eax, eax
jne 0x18001dce4
xorps xmm0, xmm0
mov dword [rsp + 0x70], 8
lea rax, [rsp + 0x30]
mov qword [rsp + 0x30], rbx
lea r9, [rsp + 0x70]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x60]
mov rcx, r15
lea edx, [r14 + 0x35]
movups xmmword [rsp + 0x60], xmm0
call fcn.180060110
lea edx, [r14 + 0x20]
lea rcx, [rsp + 0x60]
call fcn.18006db00
test rax, rax
je 0x18001dae6
nop dword [rax]
mov edx, 0x20
lea rcx, [rsp + 0x60]
call fcn.18006db00
mov edx, 0x20
lea rcx, [rsp + 0x60]
mov byte [rax], r14b
call fcn.18006db00
test rax, rax
jne 0x18001dac0
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
cmp byte [rcx + rax + 1], r14b
lea rax, [rax + 1]
jne 0x18001daf2
mov byte [rsp + rax + 0x60], 0x2e
lea rcx, [rsp + 0x60]
lea rax, [rsi + 9]
mov dword [rsp + 0x70], 3
mov qword [rsp + 0x30], rax
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], r14b
jne 0x18001db20
lea r8, [rsp + 0x60]
mov edx, 0x35
add r8, rax
lea r9, [rsp + 0x70]
lea rax, [rsp + 0x30]
mov rcx, r15
mov qword [rsp + 0x20], rax
call fcn.180060110
mov edx, 0x20
lea rcx, [rsp + 0x60]
call fcn.18006db00
test rax, rax
je 0x18001db87
mov edx, 0x20
lea rcx, [rsp + 0x60]
call fcn.18006db00
mov edx, 0x20
lea rcx, [rsp + 0x60]
mov byte [rax], r14b
call fcn.18006db00
test rax, rax
jne 0x18001db61
mov edx, 0x2f
lea rcx, [rsp + 0x60]
call fcn.18006da80
test rax, rax
jne 0x18001e042
lea edx, [rax + 0x5c]
lea rcx, [rsp + 0x60]
call fcn.18006da80
test rax, rax
jne 0x18001e042
lea rax, [rsi + 0x20]
mov qword [rsp + 0x20], r14
mov r9, r15
mov qword [rsp + 0x30], rax
xor r8d, r8d
lea rcx, [rsp + 0x30]
mov edx, 0xf4
call fcn.18005fbb0
imul eax, dword [rbp - 0x68]
mov r9d, 0xef
xor r8d, r8d
mov rdx, r15
xor ecx, ecx
mov r14d, eax
lea rax, [rsi + 0xc]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
call fcn.1800276e0
mov esi, eax
test r14, r14
je 0x18001e139
test eax, eax
je 0x18001e139
lea rdx, [0x180097a20]
lea rcx, [rsp + 0x60]
call fcn.180074404
mov r15, rax
test rax, rax
je 0x18001e11d
nop word [rax + rax]
mov ebx, 0x79
mov ecx, ebx
sub ecx, 0x79
je 0x18001dc66
sub ecx, 1
je 0x18001dc5c
cmp ecx, 1
jne 0x18001dcc5
sub esi, dword [rsp + 0x78]
jmp 0x18001dcc5
movsxd rax, dword [rsp + 0x78]
add r14, rax
jmp 0x18001dcc5
mov rcx, qword [rbp - 0x80]
lea r9, [rsp + 0x70]
mov eax, 0x1000
mov qword [rsp + 0x30], r14
cmp esi, eax
lea r8, [rbp + 0x5d0]
mov edx, 0x35
cmovb eax, esi
mov dword [rsp + 0x78], eax
mov dword [rsp + 0x70], eax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
call fcn.180060110
movsxd rdx, dword [rsp + 0x78]
lea rcx, [rbp + 0x5d0]
mov r9, r15
mov r8d, 1
call fcn.180074c14
cmp rax, 1
jne 0x18001e101
inc ebx
cmp ebx, 0x7c
jb 0x18001dc45
test esi, esi
jne 0x18001dc40
mov rcx, r15
call fcn.18007412c
mov r15, qword [rbp - 0x80]
inc r13d
add r12d, 0x200
mov r10d, 0
cmp r13d, dword [rsp + 0x7c]
jl 0x18001d9e0
mov r12d, dword [rsp + 0x58]
mov rsi, qword [rbp + 0x1640]
mov rcx, qword [rbp - 0x80]
call fcn.18007412c
xor r10d, r10d
mov r8d, dword [rbp + 0x1650]
imul eax, r8d, 0xb1
add r12d, eax
mov dword [rsp + 0x58], r12d
cmp r12d, dword [rbp - 0x64]
ja 0x18001dfbf
mov rbx, qword [rbp + 0x1658]
mov r14, qword [rbp + 0x1648]
jmp 0x18001d030
mov rbx, qword [rsp + 0x40]
mov byte [rbp - 0x70], 0
test rbx, rbx
je 0x18001de1f
mov rdi, qword [rsp + 0x48]
cmp rbx, rdi
je 0x18001ddc7
xor r14d, r14d
nop dword [rax]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x18001ddaa
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x18001dda5
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18001e0a7
mov rcx, r8
call fcn.18006cae4
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r14b
add rbx, 0x28
cmp rbx, rdi
jne 0x18001dd70
mov rbx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x6666666666666667
sub rcx, rbx
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rax, rbx
lea rdx, [rdx + rdx*4]
shl rdx, 3
cmp rdx, 0x1000
jb 0x18001de17
mov rbx, qword [rbx - 8]
add rdx, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001e0a7
mov rcx, rbx
call fcn.18006cae4
mov rax, qword [rbp - 0x70]
movaps xmm6, xmmword [rsp + 0x16e0]
movaps xmm7, xmmword [rsp + 0x16d0]
add rsp, 0x16f8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rbx, qword [rsp + 0x40]
mov byte [rbp - 0x70], 1
test rbx, rbx
je 0x18001de1f
mov rdi, qword [rsp + 0x48]
cmp rbx, rdi
je 0x18001ddc7
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x18001dea0
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x18001de98
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18001e0a7
mov rcx, r8
call fcn.18006cae4
xor r10d, r10d
mov qword [rbx + 0x10], r10
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
add rbx, 0x28
cmp rbx, rdi
jne 0x18001de63
jmp 0x18001ddc2
mov rdx, qword [rbx]
lea rcx, str.usage:__s_file.img_n
call fcn.18006ac90
mov rbx, qword [rsp + 0x40]
mov dword [rbp - 0x70], 1
test rbx, rbx
je 0x18001de1f
mov rdi, qword [rsp + 0x48]
cmp rbx, rdi
je 0x18001ddc7
xor r14d, r14d
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x18001df2c
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x18001df27
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18001e0a7
mov rcx, r8
call fcn.18006cae4
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r14b
add rbx, 0x28
cmp rbx, rdi
jne 0x18001def2
jmp 0x18001ddc2
mov rbx, qword [rsp + 0x40]
test rbx, rbx
je 0x18001de1f
mov rdi, qword [rsp + 0x48]
cmp rbx, rdi
je 0x18001ddc7
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x18001dfa2
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x18001df9a
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18001e0a7
mov rcx, r8
call fcn.18006cae4
xor r10d, r10d
mov qword [rbx + 0x10], r10
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
add rbx, 0x28
cmp rbx, rdi
jne 0x18001df65
jmp 0x18001ddc2
mov rbx, qword [rsp + 0x40]
test rbx, rbx
je 0x18001de1f
mov rdi, qword [rsp + 0x48]
cmp rbx, rdi
je 0x18001dfed
mov rcx, rbx
call fcn.180004a80
add rbx, 0x28
cmp rbx, rdi
jne 0x18001dfd7
mov rbx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x6666666666666667
sub rcx, rbx
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rax, rbx
lea rdx, [rdx + rdx*4]
shl rdx, 3
cmp rdx, 0x1000
jb 0x18001de17
mov rbx, qword [rbx - 8]
add rdx, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001e0a7
jmp 0x18001de17
lea rdx, [rsp + 0x60]
lea rcx, str.stats_remote_process_cpu
call fcn.18006ac90
mov ecx, 1
call fcn.18007267c
int3
mov rdx, qword [rbx + 8]
lea rcx, str.fault_continue
call fcn.18006ac90
mov ecx, 1
call fcn.18007267c
int3
lea rcx, str.syscall_0x_x__s:_addr_0x_08x
call fcn.18006ac90
mov ecx, 1
call fcn.18007267c
int3
lea rcx, str.W32ET::W32EL:_got_unmanaged_event__d_on_thread_0x_x__proc_0x_x
call fcn.18006ac90
mov ecx, 1
call fcn.18007267c
int3
call fcn.180070f14
int3
lea rcx, str.1970_01_01_00:00:00.000
call fcn.18006ac90
mov ecx, 1
call fcn.18007267c
int3
lea rax, [r13 + 0xc]
mov r9d, 0xef
mov qword [rbp - 0x60], rax
xor r8d, r8d
lea rax, [rbp - 0x60]
mov rdx, r15
xor ecx, ecx
mov qword [rsp + 0x20], rax
call fcn.1800276e0
mov edx, eax
lea rcx, str.__builtin_HEXAGON_V6_vavgw_128B
call fcn.18006ac90
mov ecx, 1
call fcn.18007267c
int3
lea rdx, [rsp + 0x60]
lea rcx, str._remediationResult
call fcn.18006ac90
mov ecx, 1
call fcn.18007267c
int3
lea rdx, [rsp + 0x60]
lea rcx, str.TTV_EC_CHAT_NOT_IN_CHANNEL
call fcn.18006ac90
mov ecx, 1
call fcn.18007267c
int3
mov r9d, eax
lea rdx, [rsp + 0x60]
mov r8d, r14d
lea rcx, str.Deleting_existing_engine_properties_registry
call fcn.18006ac90
mov ecx, 1
call fcn.18007267c
int3