Function at 0x180127820
Capabilities:
Acquire credentials from windows credential manager
Encode data using base64

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x5b0]
sub rsp, 0x6b0
mov rax, qword [0x180183c70]
xor rax, rsp
mov qword [rbp + 0x5a0], rax
mov dword [rsp + 0x3c], r9d
mov r10, r8
mov qword [rsp + 0x48], r8
mov qword [rsp + 0x50], rdx
mov r13, rcx
mov r15, qword [rbp + 0x610]
mov qword [rsp + 0x60], r15
mov r12, qword [rbp + 0x618]
mov qword [rbp - 0x80], r12
xor r11d, r11d
mov edi, r11d
mov ebx, r11d
mov esi, r9d
mov dword [rsp + 0x58], r9d
lea r14d, [r9 + 0xd0c]
mov dword [rsp + 0x34], r14d
cmp r9d, r14d
jae 0x180127bfd
lea ecx, [r11 + 0x30]
lea r8d, [r11 + 0x6d]
lea r9d, [r11 + 0x73]
mov r14, qword [rbp - 0x48]
mov eax, dword [rsp + 0x34]
nop word [rax + rax]
cmp esi, 0x1a6
ja 0x180127a5f
je 0x180127a55
cmp esi, 0xff
ja 0x1801279ed
je 0x1801279d6
mov eax, esi
sub eax, 0x58
je 0x1801279b0
sub eax, 0x32
je 0x180127968
sub eax, 0x21
je 0x180127946
sub eax, 0x1b
je 0x18012791a
cmp eax, 0x20
mov eax, dword [rsp + 0x34]
jne 0x180127be6
mov dword [rbp + 0x150], 0x73006d
jmp 0x180127be6
mov dword [r10 + 0x28], r11d
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r10, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x50]
mov ecx, 0x30
lea r8d, [rcx + 0x3d]
lea r9d, [rcx + 0x43]
xor r11d, r11d
jmp 0x180127be2
mov dword [rsp + 0x28], 0xc6
mov qword [rsp + 0x20], r11
lea r9, [0x1801d8110]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800819b0
jmp 0x180127927
mov ecx, 0x8f
mov r12, qword [rbp - 0x70]
mov eax, ecx
sub eax, 0x8e
je 0x180127985
cmp eax, 1
jne 0x180127994
lea r12, [rbp - 0x20]
jmp 0x180127994
mov eax, dword [rdx]
mov dword [r12], eax
mov dword [r12 + 8], 4
dec ecx
cmp ecx, 0x8d
ja 0x180127971
mov qword [rbp - 0x70], r12
mov r12, qword [rbp - 0x80]
mov ecx, 0x30
jmp 0x180127be2
mov rdx, qword [rdx]
mov rcx, r12
call fcn.18008ae90
mov r10, qword [rsp + 0x48]
mov rdi, r10
cmp qword [r10 + 0x18], 0x10
jb 0x18012792c
mov rdi, qword [r10]
jmp 0x18012792c
mov rbx, r13
cmp qword [r13 + 0x18], 0x10
jb 0x180127be6
mov rbx, qword [r13]
jmp 0x180127be6
mov eax, esi
sub eax, 0x11e
je 0x180127a2c
sub eax, 0x13
je 0x180127a20
sub eax, 0x3c
je 0x180127ed2
cmp eax, 0x20
mov eax, dword [rsp + 0x34]
jne 0x180127be6
mov dword [rbp + 0x154], 0x630076
jmp 0x180127be6
mov eax, dword [r12]
mov dword [rbp - 8], eax
jmp 0x180127be2
mov eax, dword [rdx]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x40], r11d
lea r9, [rsp + 0x40]
lea r8, [0x1801625c5]
mov rdx, r10
mov ecx, 0x81
call fcn.18009bf20
jmp 0x180127927
mov byte [rsp + 0x30], 0
jmp 0x180127be6
cmp esi, 0x27f
ja 0x180127e18
je 0x180127e05
mov eax, esi
sub eax, 0x1c5
je 0x180127cb6
sub eax, 0x13
je 0x180127c77
sub eax, 0x5c
je 0x180127c5c
cmp eax, 0x19
jne 0x180127be2
mov qword [rsp + 0x78], r11
cmp qword [rdx], 0
jbe 0x180127bdd
nop dword [rax + rax]
mov esi, 0x14
movzx r15d, byte [rsp + 0x30]
nop dword [rax + rax]
mov eax, esi
sub eax, 0x12
je 0x180127b76
sub eax, 1
je 0x180127b30
cmp eax, 1
jne 0x180127b9e
movzx r9d, byte [rbx]
add r9b, r15b
add r9b, byte [rdi]
and r9b, 0xf
mov rcx, qword [r12 + 0x10]
mov rdx, qword [r12 + 0x18]
cmp rcx, rdx
jae 0x180127b1a
lea rax, [rcx + 1]
mov qword [r12 + 0x10], rax
mov rax, r12
cmp rdx, 0x10
jb 0x180127b0c
mov rax, qword [r12]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x180127b9e
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, r12
call fcn.180003680
mov r10, qword [rsp + 0x48]
jmp 0x180127b9e
mov rcx, r12
cmp qword [r12 + 0x18], 0x10
jb 0x180127b3f
mov rcx, qword [r12]
mov rax, qword [r12 + 0x10]
movzx r15d, byte [rax + rcx - 1]
mov rcx, r13
mov rdx, qword [r13 + 0x18]
cmp rdx, 0x10
jb 0x180127b5b
mov rcx, qword [r13]
inc rbx
add rcx, qword [r13 + 0x10]
cmp rbx, rcx
jne 0x180127b9e
mov rbx, r13
cmp rdx, 0x10
jb 0x180127b9e
mov rbx, qword [r13]
jmp 0x180127b9e
mov rcx, r10
mov rdx, qword [r10 + 0x18]
cmp rdx, 0x10
jb 0x180127b86
mov rcx, qword [r10]
inc rdi
add rcx, qword [r10 + 0x10]
cmp rdi, rcx
jne 0x180127b9e
mov rdi, r10
cmp rdx, 0x10
jb 0x180127b9e
mov rdi, qword [r10]
dec esi
cmp esi, 0x11
ja 0x180127ac0
mov byte [rsp + 0x30], r15b
mov r15, qword [rsp + 0x78]
inc r15
mov qword [rsp + 0x78], r15
mov rdx, qword [rsp + 0x50]
cmp r15, qword [rdx]
jb 0x180127ab0
mov esi, dword [rsp + 0x58]
mov ecx, 0x30
lea r8d, [rcx + 0x3d]
lea r9d, [rcx + 0x43]
xor r11d, r11d
mov r15, qword [rsp + 0x60]
mov eax, dword [rsp + 0x34]
add esi, 0xa7
mov dword [rsp + 0x58], esi
cmp esi, eax
jb 0x1801278c0
mov r9d, dword [rsp + 0x3c]
lea eax, [r9 - 0x13]
mov dword [rsp + 0x50], eax
cmp r9d, eax
jbe case.0x180127c5a.212
lea rbx, [0x180000000]
movabs rsi, 0x7ffffffffffffffe
mov edi, 0x6c
lea r14d, [rdi + 0xd]
lea r15d, [rdi - 0xd]
movzx r13d, byte [rsp + 0x30]
mov r12, qword [rbp - 0x70]
mov r8d, 0x74
lea edx, [r8 - 0xf]
lea eax, [r9 - 0xd4]
cmp eax, 0x12
ja case.default.0x180127c5a
mov ecx, dword [rbx + rax*4 + 0x128a04]
add rcx, rbx
jmp rcx
mov eax, 0x72
mov word [rbp + 0x158], ax
mov dword [rbp + 0x15a], 0x320031
jmp 0x180127be2
mov eax, dword [r12]
and eax, 2
mov dword [rsp + 0x40], eax
mov rax, qword [r13]
mov qword [rbp - 0x78], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x78]
mov r8, r10
xor edx, edx
mov ecx, 0xfb
call fcn.180138cc0
mov qword [rbp - 0x10], rax
mov eax, dword [r15]
mov dword [rbp - 4], eax
jmp 0x180127927
mov r15d, dword [rsp + 0x68]
cmp r15d, 0xffffffff
jne 0x180127cce
mov dword [r13 + 8], 1
jmp 0x180127bdd
mov r8d, 0xa9
mov r12, qword [rbp - 0x68]
nop dword [rax + rax]
mov eax, r8d
sub eax, 0xa9
je 0x180127dcb
cmp eax, 1
jne 0x180127dda
mov r9, qword [rbp - 0x58]
cmp qword [r9 + 0x18], 0
je 0x180127d80
mov edx, 0x124
cmp edx, 0x124
je 0x180127d69
cmp edx, 0xcc2c
je 0x180127d5f
cmp edx, 0x19734
jne 0x180127d6c
test byte [r14 + 5], 2
je 0x180127d31
mov dword [r12 + 8], 6
jmp 0x180127d6c
mov ecx, 0x115
mov eax, ecx
sub eax, 0x115
je 0x180127d4f
cmp eax, 0x51
jne 0x180127d52
mov dword [r12 + 8], 0x1406
jmp 0x180127d52
inc dword [r14]
add ecx, 0x51
cmp ecx, 0x1b7
jb 0x180127d36
jmp 0x180127d6c
mov r14, qword [r9 + 0x18]
mov qword [r12], r14
jmp 0x180127d6c
mov r12, r13
add edx, 0xcb08
cmp edx, 0x26118
jbe 0x180127d07
mov qword [rbp - 0x68], r12
jmp 0x180127dda
mov ecx, 0x1b
mov r12, qword [rbp - 0x50]
nop dword [rax]
cmp ecx, 0x1b
je 0x180127da8
cmp ecx, 0x9c
jne 0x180127db3
mov dword [r12 + 8], 4
jmp 0x180127db3
mov r12, r13
mov eax, dword [r9 + 0x10]
mov dword [r13], eax
add ecx, 0x81
cmp ecx, 0x11d
jb 0x180127d90
mov qword [rbp - 0x50], r12
mov r12, qword [rbp - 0x68]
jmp 0x180127dda
mov r9, r15
shl r9, 5
add r9, qword [r10 + 0x10]
mov qword [rbp - 0x58], r9
inc r8d
cmp r8d, 0xab
jb 0x180127ce0
mov r12, qword [rbp - 0x80]
mov rdx, qword [rsp + 0x50]
mov ecx, 0x30
lea r8d, [rcx + 0x3d]
lea r9d, [rcx + 0x43]
jmp 0x180127bdd
lea rdx, [rbp - 0x20]
mov ecx, 0x117
call fcn.1800463c0
jmp 0x180127927
cmp esi, 0x2db
je 0x180127ec3
cmp esi, 0x382
je 0x180127ea7
cmp esi, 0x429
je 0x180127e73
cmp esi, 0x4d0
jne 0x180127be6
mov r8d, 0xa
lea rdx, [rbp + 0x127]
lea ecx, [r8 + 0x1e]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__ultoa]
mov r8d, 0xa
lea rdx, [rbp + 0x129]
lea ecx, [r8 - 1]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__ultoa]
jmp 0x180127927
mov r8d, 0xa
lea rdx, [rbp + 0x121]
mov ecx, 0x142e
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__ultoa]
mov r8d, 0xa
lea rdx, [rbp + 0x125]
lea ecx, [r8 + 0x26]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itoa]
jmp 0x180127927
mov r8d, 0xa
lea rdx, [rbp + 0x120]
lea ecx, [r8 - 4]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itoa]
jmp 0x180127927
mov dword [rbp + 0x15e], 0x30
jmp 0x180127be6
mov eax, 1
jmp 0x1801289c5
mov dword [rbp + 0x13a], 0x620069
jmp case.default.0x180127c5a
cmp byte [rsp + 0x38], 0
je 0x180127f03
xor edx, edx
mov ecx, dword [rsp + 0x68]
call qword [sym.imp.WINMM.dll_mciGetYieldProc]
mov r9d, dword [rsp + 0x3c]
mov byte [rsp + 0x40], 1
xor r11d, r11d
jmp case.default.0x180127c5a
xor edx, edx
lea rcx, [rbp]
call qword [sym.imp.ADVAPI32.dll_BuildTrusteeWithNameA]
xor r11d, r11d
mov ecx, r11d
movzx eax, byte [rsp + 0x38]
cmp dword [rsp + 0x68], r11d
cmovne ecx, eax
mov byte [rsp + 0x38], cl
mov r9d, dword [rsp + 0x3c]
jmp case.default.0x180127c5a
mov dword [rbp + 0x174], 0x320033
jmp case.default.0x180127c5a
mov word [rbp + 0x178], r11w
jmp case.default.0x180127c5a
mov dword [rbp + 0x142], 0x330079
jmp case.default.0x180127c5a
mov eax, 0x32
mov word [rbp + 0x146], ax
jmp case.default.0x180127c5a
mov word [rbp + 0x172], r11w
mov r8d, 1
lea rdx, [0x18016d50a]
lea rcx, [rbp + 0x168]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r9d, dword [rsp + 0x3c]
xor r11d, r11d
jmp case.default.0x180127c5a
mov byte [rsp + 0x38], 1
jmp case.default.0x180127c5a
lea rax, [rbp + 0x168]
mov qword [rbp + 0xe0], rax
xor r14d, r14d
mov dword [rsp + 0x74], r14d
mov ebx, r14d
mov qword [rsp + 0x60], rbx
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r14w
mov eax, 0x86
mov dword [rsp + 0x70], eax
nop word [rax + rax]
add eax, 0xffffff7a
cmp eax, 0x10
ja case.default.0x180128010
lea r9, [0x180000000]
mov ecx, dword [r9 + rax*4 + 0x128a50]
add rcx, r9
jmp rcx
lea r9, [rbp - 0x48]
lea r8, [rbp - 0x5c]
mov edx, dword [rbp - 0x60]
lea rcx, [rbp + 0x110]
call qword [sym.imp.ADVAPI32.dll_CredEnumerateA]
mov dword [rbp - 0x58], eax
jmp case.default.0x180128010
mov ecx, r14d
movzx eax, byte [rsp + 0x3a]
cmp dword [rsp + 0x6c], 0
cmovne ecx, eax
mov byte [rsp + 0x3a], cl
jmp case.default.0x180128010
mov dword [rbp + 0x113], 0x64654d5f
jmp case.default.0x180128010
movzx eax, word [str.getPnaclResourceInfo__GetLength_failed_for:]
mov word [rbp + 0x110], ax
movzx eax, byte [0x18016d58a]
mov byte [rbp + 0x112], al
jmp case.default.0x180128010
mov byte [rsp + 0x3a], 1
mov byte [rsp + 0x30], 1
jmp case.default.0x180128010
mov rdx, qword [rbp + rbx*8 + 0xd0]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x1801280a0
lea rcx, [rbp + 0x20]
call fcn.180040d80
mov dword [rbp - 0x60], r14d
jmp case.default.0x180128010
mov rdi, qword [r10 + 0x10]
mov rbx, r10
cmp qword [r10 + 0x18], 8
jb 0x1801280ce
mov rbx, qword [r10]
cmp rdi, 8
jae 0x1801280e7
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x40], xmm0
mov r14d, 7
mov r15, qword [rbp + 0x40]
jmp 0x18012811c
mov r14, rdi
or r14, 7
cmp r14, rsi
cmova r14, rsi
lea rdx, [r14 + 1]
lea rcx, [rbp + 0x40]
call fcn.180040c80
mov r15, rax
mov qword [rbp + 0x40], rax
lea r8, [rdi*2 + 2]
mov rdx, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x58], r14
mov qword [rbp + 0x50], rdi
lea rsi, [rbp + 0x40]
cmp r14, 8
cmovae rsi, r15
cmp rdi, 8
jae 0x180128146
movups xmm0, xmmword [rsi]
mov qword [rbp + 0x100], 7
jmp 0x180128196
mov rbx, rdi
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rbp + 0xe8]
call fcn.180040c80
mov qword [rbp + 0xe8], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x100], rbx
movups xmm0, xmmword [rbp + 0xe8]
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp + 0xf8], rdi
mov rcx, qword [rbp + 0x38]
cmp rcx, 8
jb 0x1801281e1
lea rdx, [rcx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801281dc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180128977
call fcn.18015bd10
movups xmm0, xmmword [rbp - 0x40]
movups xmmword [rbp + 0x20], xmm0
movups xmm0, xmmword [rbp + 0xf8]
movups xmmword [rbp + 0x30], xmm0
cmp r14, 8
jb 0x18012822f
lea rdx, [r14*2 + 2]
mov rax, r15
cmp rdx, 0x1000
jb 0x180128227
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801289ef
mov rcx, r15
call fcn.18015bd10
xor r14d, r14d
mov qword [rbp - 0x40], r14
mov rbx, qword [rsp + 0x60]
movabs rsi, 0x7ffffffffffffffe
mov r15d, 0x5f
jmp case.default.0x180128010
mov dword [rbp - 0x5c], r14d
jmp case.default.0x180128010
lea rcx, [rbp + 0x20]
cmp qword [rbp + 0x38], 8
cmovae rcx, qword [rbp + 0x20]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov qword [rbp - 0x30], rax
mov edx, r14d
movzx ecx, byte [rsp + 0x30]
cmp dword [rbp - 0x58], 0
cmovne edx, ecx
mov byte [rsp + 0x30], dl
jmp case.default.0x180128010
cmp qword [rbp - 0x30], 0
jne case.default.0x180128010
mov esi, r14d
mov dword [rsp + 0x34], r14d
cmp esi, 0x19
ja case.default.0x1801282b7
mov eax, esi
mov ecx, dword [r9 + rax*4 + 0x128a94]
add rcx, r9
jmp rcx
test r13b, r13b
je 0x1801283a6
mov edi, 0x8d
nop word [rax + rax]
cmp edi, 0x8d
je 0x18012838b
cmp edi, 0x66ff
je 0x180128340
cmp edi, 0xcd71
jne 0x18012838f
test r13b, r13b
je 0x18012838f
mov ebx, 3
nop
cmp ebx, 3
je 0x180128318
cmp ebx, 0x17
jne 0x180128336
lea edx, [rbx - 7]
mov rcx, r12
call qword [sym.imp.WINMM.dll_mmioClose]
jmp 0x180128336
xor r8d, r8d
mov rdx, qword [rbp - 0x78]
mov rcx, r12
call qword [sym.imp.WINMM.dll_mmioWrite]
mov edx, 0x10
mov rcx, r12
call qword [sym.imp.WINMM.dll_mmioFlush]
add ebx, 0x14
cmp ebx, 0x2b
jb 0x180128300
jmp 0x18012838f
xor r8d, r8d
mov rdx, qword [rbp - 0x78]
mov rcx, r12
call qword [sym.imp.WINMM.dll_mmioRead]
cmp eax, 0xffffffff
jne 0x18012838f
mov ebx, 0x8c
nop word [rax + rax]
mov eax, ebx
sub eax, 0x8b
je 0x18012837c
cmp eax, 1
jne 0x18012837f
lea edx, [rax + 0xf]
mov rcx, r12
call qword [sym.imp.WINMM.dll_mmioClose]
jmp 0x18012837f
xor r13b, r13b
dec ebx
cmp ebx, 0x8a
ja 0x180128360
jmp 0x18012838f
mov qword [rbp - 0x78], r14
add edi, 0x6672
cmp edi, 0x13356
jbe 0x1801282d0
mov edi, 0x6c
mov byte [rsp + 0x40], 0
jmp case.default.0x1801282b7
mov dword [rbp + 0x42], 0x61006c
mov eax, 0x79
mov word [rbp + 0x46], ax
jmp case.default.0x1801282b7
mov dword [rbp + 0xfa], 0x6c005f
jmp case.default.0x1801282b7
mov eax, 0x3f
mov word [rbp + 0x54], ax
jmp case.default.0x1801282b7
mov dword [rbp + 0xf4], 0x6c0069
jmp case.default.0x1801282b7
mov eax, 0x53
mov word [rbp + 0x48], ax
jmp case.default.0x1801282b7
mov ecx, r14d
movzx eax, r13b
test r12, r12
cmovne ecx, eax
movzx r13d, cl
cmp byte [rsp + 0x39], 0
je case.default.0x1801282b7
mov ebx, 0x12
mov r12d, dword [rbp - 0x50]
mov esi, dword [rsp + 0x58]
mov eax, ebx
sub eax, 0x11
je 0x18012843c
cmp eax, 1
jne 0x18012844e
mov r12d, 0x104
jmp 0x18012844e
mov r8d, r12d
lea rdx, [rbp + 0x180]
mov ecx, esi
call qword [sym.imp.WINMM.dll_mciGetErrorStringW]
dec ebx
cmp ebx, 0x10
ja 0x180128428
mov dword [rbp - 0x50], r12d
mov r12, qword [rbp - 0x70]
mov esi, dword [rsp + 0x34]
jmp case.default.0x1801282b7
mov dword [rbp + 0x104], 0x640020
jmp case.default.0x1801282b7
mov word [rbp + 0x5c], r14w
jmp case.default.0x1801282b7
mov dword [rbp + 0x50], 0x410064
jmp case.default.0x1801282b7
mov r8d, dword [rbp - 0x80]
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x40]
call qword [sym.imp.WINMM.dll_mmioOpenW]
mov r12, rax
mov qword [rbp - 0x70], rax
mov edx, r14d
movzx ecx, byte [rsp + 0x39]
cmp dword [rsp + 0x58], 0
cmovne edx, ecx
mov byte [rsp + 0x39], dl
jmp case.default.0x1801282b7
mov word [rbp + 0x56], dx
jmp case.default.0x1801282b7
mov dword [rbp + 0xfe], 0x730069
mov word [rbp + 0x102], r8w
jmp case.default.0x1801282b7
mov byte [rsp + 0x39], 1
jmp case.default.0x1801282b7
mov word [rbp + 0xf8], dx
jmp case.default.0x1801282b7
mov r13b, 1
mov dword [rbp - 0x68], 0x104
jmp case.default.0x1801282b7
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
mov dword [rbp + 0xc0], eax
mov qword [rbp - 0x28], r14
jmp case.default.0x1801282b7
mov word [rbp + 0x10e], r14w
jmp case.default.0x1801282b7
mov dword [rbp + 0x58], 0x740072
jmp case.default.0x1801282b7
mov dword [rbp + 0xf0], 0x66005f
jmp case.default.0x1801282b7
mov dword [rbp + 0x4a], 0x75006f
mov eax, 0x6e
mov word [rbp + 0x4e], ax
jmp case.default.0x1801282b7
mov eax, 0x70
mov word [rbp + 0x40], ax
jmp case.default.0x1801282b7
mov dword [rbp + 0xe8], 0x650073
mov dword [rbp + 0xec], 0x64006e
jmp case.default.0x1801282b7
mov dword [rbp - 0x80], r14d
mov r9, qword [rbp - 0x28]
mov r8d, dword [rbp - 0x68]
lea rdx, [rbp + 0x390]
lea rcx, [rbp + 0xe8]
call qword [sym.imp.WINMM.dll_mciSendStringW]
mov dword [rsp + 0x58], eax
jmp case.default.0x1801282b7
mov dword [rbp + 0x108], 0x6e006f
mov word [rbp + 0x10c], dx
inc esi
mov dword [rsp + 0x34], esi
lea eax, [rsi + 0x10f]
cmp eax, 0x129
mov edx, 0x65
lea r8d, [rdx + 0xf]
lea r9, [0x180000000]
jb 0x1801282a1
mov rbx, qword [rsp + 0x60]
movabs rsi, 0x7ffffffffffffffe
jmp case.default.0x180128010
lea rdx, [rsp + 0x78]
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.WINMM.dll_midiInGetID]
mov dword [rsp + 0x6c], eax
jmp case.default.0x180128010
mov byte [rbp + 0x117], 0
mov r8d, 5
lea rdx, [0x18016d5bb]
lea rcx, [rbp + 0x117]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp case.default.0x180128010
cmp byte [rsp + 0x3a], 0
je 0x18012865a
mov r8d, 0x104
lea rdx, [rbp + 0x180]
mov ecx, dword [rsp + 0x6c]
call qword [sym.imp.WINMM.dll_midiInGetErrorTextA]
cmp byte [rsp + 0x30], 0
je case.default.0x180128010
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.ADVAPI32.dll_CredFree]
jmp case.default.0x180128010
mov rdi, qword [rbp + 0x30]
mov rcx, qword [rbp + 0x38]
cmp rdi, rcx
jae 0x1801286a2
lea rax, [rdi + 1]
mov qword [rbp + 0x30], rax
lea rax, [rbp + 0x20]
cmp rcx, 8
cmovae rax, qword [rbp + 0x20]
mov dword [rax + rdi*2], 0x2e
jmp case.default.0x180128010
movabs rdx, 0x7ffffffffffffffe
mov rax, rdx
sub rax, rdi
cmp rax, 1
jb 0x1801289fd
lea r15, [rdi + 1]
mov rsi, qword [rbp + 0x38]
mov rbx, r15
or rbx, 7
cmp rbx, rdx
jbe 0x1801286d5
mov rbx, rdx
jmp 0x1801286f6
mov rcx, rsi
shr rcx, 1
mov rax, rdx
sub rax, rcx
cmp rsi, rax
jbe 0x1801286eb
mov rbx, rdx
jmp 0x1801286f6
lea rax, [rsi + rcx]
cmp rbx, rax
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rbp + 0x20]
call fcn.180040c80
mov r14, rax
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], rbx
add rdi, rdi
mov r8, rdi
mov rcx, rax
cmp rsi, 8
jb 0x180128772
mov rbx, qword [rbp + 0x20]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov dword [r14 + rdi], 0x2e
lea rdx, [rsi*2 + 2]
cmp rdx, 0x1000
jb 0x18012875e
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x1801289ef
mov rbx, rcx
mov rcx, rbx
call fcn.18015bd10
mov qword [rbp + 0x20], r14
xor r14d, r14d
jmp 0x180128236
lea rdx, [rbp + 0x20]
call sub.VCRUNTIME140.dll_memcpy
mov dword [r14 + rdi], 0x2e
mov qword [rbp + 0x20], r14
xor r14d, r14d
jmp 0x180128236
mov byte [rbp + 0x11c], 0
mov r8d, 2
lea rdx, [0x18016d5e8]
lea rcx, [rbp + 0x110]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp case.default.0x180128010
mov r8d, 3
lea rdx, [0x1801650b0]
lea rcx, [rbp + 0x20]
call fcn.180040d80
jmp case.default.0x180128010
mov dword [rsp + 0x78], r14d
mov eax, dword [rsp + 0x70]
inc eax
mov dword [rsp + 0x70], eax
cmp eax, 0x97
mov r10, qword [rsp + 0x48]
mov edx, 0x65
lea edi, [rdx + 7]
lea r8d, [rdx + 0xf]
jb 0x180127ff0
mov rcx, qword [rbp + 0x38]
cmp rcx, 8
jb 0x180128835
lea rdx, [rcx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180128830
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801289f6
call fcn.18015bd10
mov ecx, dword [rsp + 0x74]
inc ecx
mov dword [rsp + 0x74], ecx
inc rbx
mov qword [rsp + 0x60], rbx
cmp ecx, 3
mov r10, qword [rsp + 0x48]
mov edx, 0x65
lea edi, [rdx + 7]
lea r8d, [rdx + 0xf]
jb 0x180127fd0
mov r9d, dword [rsp + 0x3c]
xor r11d, r11d
lea rbx, [0x180000000]
lea r14d, [rdx + 0x14]
jmp case.default.0x180127c5a
lea rcx, [rbp + 0x120]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x180128883
movzx eax, word [0x180166614]
mov word [rcx], ax
jmp case.default.0x180127c5a
mov dword [rbp + 0x13e], 0x610065
jmp case.default.0x180127c5a
lea rax, [rbp + 0x138]
mov qword [rbp + 0xd8], rax
jmp case.default.0x180127c5a
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
lea rcx, [rbp + 0x120]
call qword [sym.imp.WINMM.dll_mciGetDeviceIDA]
mov dword [rsp + 0x68], eax
mov r9d, dword [rsp + 0x3c]
xor r11d, r11d
jmp case.default.0x180127c5a
mov r8d, 5
lea rdx, str.DE5C9
lea rcx, [rbp + 0x120]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov word [rbp + 0x138], di
mov r9d, dword [rsp + 0x3c]
xor r11d, r11d
jmp case.default.0x180127c5a
movups xmm0, xmmword [rbp + 0x40]
movups xmmword [rbp + 0xd0], xmm0
movsd xmm1, qword [rbp + 0x50]
movsd qword [rbp + 0xe0], xmm1
jmp case.default.0x180127c5a
mov word [rbp + 0x148], r11w
movsd xmm0, qword [0x18016d67c]
movsd qword [rbp + 0x168], xmm0
movzx eax, word [0x18016d684]
mov word [rbp + 0x170], ax
jmp case.default.0x180127c5a
lea rax, [rbp + 0x150]
mov qword [rbp + 0xd0], rax
dec r9d
mov dword [rsp + 0x3c], r9d
cmp r9d, dword [rsp + 0x50]
jbe case.0x180127c5a.212
mov r10, qword [rsp + 0x48]
jmp 0x180127c36
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb case.0x180127c5a.212
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801289bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1801289bc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18015bd10
mov eax, dword [rsp + 0x40]
mov rcx, qword [rbp + 0x5a0]
xor rcx, rsp
call fcn.18015c4c0
mov rbx, qword [rsp + 0x708]
add rsp, 0x6b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.18001bbe0
int3