Function at 0x1800343c0
Capabilities:
Check for software breakpoints

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xd0
mov rax, qword [0x1800f6ae8]
xor rax, rsp
mov qword [rsp + 0xc8], rax
imul ebx, r8d, 0xd6e
mov eax, r8d
mov qword [rsp + 0x70], r9
mov r14, rcx
mov dword [rsp + 0x94], eax
mov esi, r8d
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0xb0], rcx
mov dword [rsp + 0x54], ebx
cmp r8d, ebx
mov ebx, dword [rsp + 0x54]
mov dword [rsp + 0x84], eax
ja 0x180034ecd
mov r13d, dword [rsp + 0x54]
xor r15d, r15d
mov r12d, dword [rsp + 0x54]
lea rcx, [0x1800fba20]
cmp esi, 0x7a85
ja 0x180034d28
je 0x180034ecd
cmp esi, 0x1ec0
ja 0x180034cd2
je 0x180034c93
mov eax, esi
sub eax, 0x29
je 0x180034c45
sub eax, 0x3a
je 0x180034c14
sub eax, 0xa
je 0x1800344a3
cmp eax, 0x67
jne 0x180034b67
lea ecx, [rax - 0x57]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsp + 0x98], rax
test rax, rax
je 0x180034ecd
jmp 0x180034b5d
mov ebp, 0x7b
mov dword [rsp + 0x80], ebp
nop
cmp ebp, 0x9f09
ja 0x180034a2a
je 0x180034520
cmp ebp, 0x7b
je 0x18003450d
cmp ebp, 0x3555
je 0x180034503
cmp ebp, 0x6a2f
jne 0x180034b3d
mov ecx, dword [0x1800fba30]
mov eax, 0xaaaaaaab
mul dword [0x1800fba28]
add ecx, 0xfffffffc
shr edx, 1
imul ecx, edx
imul ecx, dword [0x1800fba58]
mov dword [rsp + 0x90], ecx
jmp 0x180034b36
mov dword [rsp + 0x40], r15d
jmp 0x180034b3d
imul eax, dword [0x1800fba28], 0x64
sub eax, 0x64
mov dword [rsp + 0x50], eax
jmp 0x180034b3d
mov edi, dword [rsp + 0x40]
mov esi, dword [rsp + 0x50]
cmp edi, esi
jge 0x180034a16
mov eax, 0xec
mov dword [rsp + 0x7c], eax
nop dword [rax]
sub eax, 0xec
je 0x1800349ac
sub eax, 0x7c
je 0x18003497c
sub eax, 0x7c
je 0x18003494a
sub eax, 0x7c
je 0x180034820
cmp eax, 0x7c
jne 0x1800349e3
test r12d, r12d
jne 0x1800345e0
inc edi
mov eax, 0x51eb851f
imul esi
mov dword [rsp + 0x40], edi
mov ecx, edx
sar ecx, 4
mov eax, ecx
shr eax, 0x1f
add ecx, eax
mov eax, edi
cdq
idiv ecx
test edx, edx
jne 0x1800349e3
mov edi, 0xe0
nop
mov eax, edi
sub eax, 0xe0
je 0x1800345c1
cmp eax, 1
jne 0x1800345cd
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
jmp 0x1800345cd
lea rcx, [0x1800d9450]
call fcn.1800d0700
inc edi
cmp edi, 0xe2
jb 0x1800345a0
mov edi, dword [rsp + 0x40]
jmp 0x1800349e3
cmp r12d, 0xffffd4f6
jne 0x1800347da
mov r15d, 0x57
mov eax, r15d
sub eax, 0x55
je 0x1800346bb
sub eax, 1
je 0x18003463d
cmp eax, 1
jne 0x1800347c1
lea r9, [rsp + 0xb8]
mov dword [rsp + 0x20], 0x103
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800c35a0
xor r8d, r8d
mov edx, 0xa7
xor ecx, ecx
call fcn.180097ca0
jmp 0x1800347c1
xor esi, esi
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rsi
xor ecx, ecx
lea edx, [rsi + 0x54]
call fcn.180073ca0
mov rdi, rax
test rax, rax
je 0x180034629
lea r14, [0x1800fba20]
nop dword [rax]
nop word [rax + rax]
mov qword [rsp + 0x30], rsi
xor r9d, r9d
mov qword [rsp + 0x28], rdi
mov r8, r14
mov edx, 0xb0
mov qword [rsp + 0x20], rsi
xor ecx, ecx
call fcn.1800149d0
xor r9d, r9d
xor ecx, ecx
test eax, eax
jne 0x180034ba0
xor r8d, r8d
mov qword [rsp + 0x20], rsi
lea edx, [rcx + 0x54]
call fcn.180073ca0
mov rdi, rax
test rax, rax
jne 0x180034670
jmp 0x180034629
xor esi, esi
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rsi
xor ecx, ecx
mov r14d, esi
lea edx, [rsi + 0x54]
call fcn.180073ca0
mov rbp, rax
test rax, rax
je 0x1800347c1
lea eax, [r14 + 1]
add eax, edi
lea r14d, [r14 + 1]
test al, 1
jne 0x18003479f
mov esi, 0xcc
cmp esi, 0xcc
je 0x180034725
cmp esi, 0x2a3c
jne 0x180034787
mov r9, rbp
mov dword [rsp + 0x20], 0x103
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800c35a0
jmp 0x180034787
mov r8, rbp
lea rcx, [0x1800fba20]
mov edx, 0x37
call fcn.180014770
mov r12d, eax
test eax, eax
je 0x180034787
mov edi, 0x61
mov eax, edi
sub eax, 0x61
je 0x18003475e
cmp eax, 1
jne 0x180034780
xor r15d, r15d
mov esi, 0x51c0
jmp 0x180034b5d
mov r9d, r12d
mov qword [rsp + 0x20], 0
xor r8d, r8d
lea rdx, [0x1800d9468]
lea rcx, str.disable_zero_copy_dxgi_video
call fcn.1800d0700
inc edi
cmp edi, 0x63
jb 0x180034745
add esi, 0x2970
cmp esi, 0x52e0
jbe 0x1800346f8
mov edi, dword [rsp + 0x40]
xor esi, esi
xor r9d, r9d
mov qword [rsp + 0x20], rsi
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 0x54]
call fcn.180073ca0
mov rbp, rax
test rax, rax
jne 0x1800346e1
mov edi, dword [rsp + 0x40]
dec r15d
cmp r15d, 0x54
ja 0x1800345f3
xor r15d, r15d
jmp 0x1800349df
mov edi, 0x11
nop
mov eax, edi
sub eax, 0x11
je 0x1800347f2
cmp eax, 1
je 0x180034bdd
jmp 0x180034810
mov r9d, r12d
mov qword [rsp + 0x20], r15
xor r8d, r8d
lea rdx, [0x1800d9468]
lea rcx, str.Samsung_Easy_Printer_Manager
call fcn.1800d0700
inc edi
cmp edi, 0x13
jb 0x1800347e0
mov edi, dword [rsp + 0x40]
jmp 0x1800349e3
test r13d, r13d
js 0x180034942
mov esi, dword [rsp + 0x78]
lea rax, [rsp + 0x60]
mov rdx, qword [rsp + 0xa8]
lea r14, [0x1800fba20]
mov r8, r14
mov dword [rsp + 0x60], esi
mov r9d, 0xf9
mov dword [rsp + 0x68], r13d
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x20], rax
call fcn.180082e80
mov r12d, eax
cmp eax, 0xffffd4f6
jne 0x1800348e4
mov qword [rsp + 0x28], r15
lea r9, [rsp + 0x68]
mov r8, r14
mov dword [rsp + 0x20], 0xc4
xor edx, edx
mov dword [rsp + 0x68], r13d
xor ecx, ecx
call fcn.180012b40
mov esi, eax
test eax, eax
je 0x1800349df
mov edi, 0x7f
nop
mov eax, edi
sub eax, 0x7f
je 0x1800348b2
cmp eax, 0x19
je 0x180034bdd
jmp 0x1800348d0
mov r9d, esi
mov qword [rsp + 0x20], r15
xor r8d, r8d
lea rdx, [0x1800d9468]
lea rcx, str.get_ExclusiveApplicationTime
call fcn.1800d0700
add edi, 0x19
cmp edi, 0xb1
jb 0x1800348a0
mov edi, dword [rsp + 0x40]
jmp 0x1800349df
mov edi, 0x23
nop dword [rax]
mov eax, edi
sub eax, 0x23
je 0x180034901
cmp eax, 1
jne 0x180034932
mov r12d, r15d
jmp 0x180034932
xor r8d, r8d
cmp r12d, esi
jne 0x180034bf0
mov qword [rsp + 0x30], r14
lea r9, [rsp + 0x68]
mov qword [rsp + 0x28], r15
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0x82
mov dword [rsp + 0x68], r13d
call fcn.180011e40
inc edi
cmp edi, 0x25
jb 0x1800348f0
mov edi, dword [rsp + 0x40]
jmp 0x1800349df
mov r12d, r13d
jmp 0x1800349e3
lea rax, [rsp + 0xb8]
mov word [rsp + 0x60], r15w
mov r9d, 0xa7
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x60]
mov byte [rsp + 0x48], 0x5c
lea rdx, [rsp + 0x48]
call fcn.1800be270
mov r13d, eax
jmp 0x1800349e3
mov eax, dword [rsp + 0x78]
lea rdx, [rsp + 0x88]
mov r8d, 3
mov dword [rsp + 0x88], eax
lea rcx, [rsp + 0xb8]
call fcn.18000fac0
mov qword [rsp + 0xa8], rax
jmp 0x1800349e3
mov r8d, edi
lea rdx, str.file_i
lea rcx, [rsp + 0xb8]
call fcn.1800d0760
mov ecx, dword [rsp + 0x90]
xor edx, edx
mov esi, dword [rsp + 0x90]
mov eax, edi
shr ecx, 1
div ecx
sub esi, edx
mov dword [rsp + 0x78], esi
mov esi, dword [rsp + 0x50]
mov eax, dword [rsp + 0x7c]
lea rcx, [0x1800fba20]
add eax, 0x7c
mov dword [rsp + 0x7c], eax
cmp eax, 0x358
jb 0x180034540
lea rcx, [0x1800fba20]
cmp edi, esi
jl 0x180034530
mov ebp, dword [rsp + 0x80]
xor r8d, r8d
mov edx, 0xa7
xor ecx, ecx
call fcn.180097ca0
jmp 0x180034b36
cmp ebp, 0xd3e3
je 0x180034a53
cmp ebp, 0x108bd
je 0x180034a4b
cmp ebp, 0x13d97
je 0x180034ecd
jmp 0x180034b3d
mov ebx, r15d
jmp 0x180034b3d
xor r9d, r9d
mov qword [rsp + 0x20], r15
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 0x54]
call fcn.180073ca0
mov rsi, rax
test rax, rax
je 0x180034b2a
lea r14, [0x1800fba20]
nop dword [rax]
mov qword [rsp + 0x30], r15
xor r9d, r9d
mov qword [rsp + 0x28], rsi
mov r8, r14
mov edx, 0xb0
mov qword [rsp + 0x20], r15
xor ecx, ecx
call fcn.1800149d0
test eax, eax
je 0x180034b08
mov edi, 0x3f
nop word [rax + rax]
mov eax, edi
sub eax, 0x3f
je 0x180034ac2
cmp eax, 1
je 0x180034bdd
jmp 0x180034b01
mov qword [rsp + 0x30], r15
xor r9d, r9d
mov qword [rsp + 0x28], rsi
mov r8, r14
mov edx, 0xb0
mov qword [rsp + 0x20], r15
xor ecx, ecx
call fcn.1800149d0
mov r9d, eax
mov qword [rsp + 0x20], r15
xor r8d, r8d
lea rdx, [0x1800d9468]
lea rcx, str.failurecriteria_check_beacon
call fcn.1800d0700
inc edi
cmp edi, 0x41
jb 0x180034ab0
xor r9d, r9d
mov qword [rsp + 0x20], r15
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 0x54]
call fcn.180073ca0
mov rsi, rax
test rax, rax
jne 0x180034a80
lea rcx, [0x1800e0ce8]
call fcn.1800d0700
lea rcx, [0x1800fba20]
add ebp, 0x34da
mov dword [rsp + 0x80], ebp
cmp ebp, 0x171f6
jbe 0x1800344b0
mov esi, dword [rsp + 0x84]
mov r9, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x58]
imul eax, dword [rsp + 0x94], 0xbf
add esi, eax
mov dword [rsp + 0x84], esi
cmp esi, dword [rsp + 0x54]
ja 0x180034ecd
mov r14, qword [rsp + 0xb0]
jmp 0x180034437
xor r15d, r15d
mov r8, r14
mov qword [rsp + 0x30], r15
mov edx, 0xb0
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r15
call fcn.1800149d0
mov r9d, eax
mov qword [rsp + 0x20], r15
xor r8d, r8d
lea rdx, [0x1800d9468]
lea rcx, str.vim.fault.ReplicationVmFault
call fcn.1800d0700
mov esi, 0x51c0
jmp 0x180034b5d
mov r9d, r12d
mov dword [rsp + 0x20], esi
lea rdx, [0x1800d9468]
lea rcx, str.ATL.CComPtr_IDSProxy_.dtor
call fcn.1800d0700
mov esi, 0x51c0
jmp 0x180034b5d
mov rax, qword [r14]
xor r9d, r9d
mov qword [rsp + 0x68], rax
xor edx, edx
lea rax, [rsp + 0x68]
xor ecx, ecx
mov r8d, 0x83
mov qword [rsp + 0x20], rax
call fcn.1800c7a40
test eax, eax
jne 0x180034ecd
jmp 0x180034b5d
mov rax, qword [r14]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0xa0], rax
mov eax, dword [rax + 4]
cmp dword [rdx], eax
ja 0x180034c64
cmp dword [r9], eax
jbe 0x180034b67
mov ecx, 0x3f
nop dword [rax]
mov eax, ecx
sub eax, 0x3f
je 0x180034c82
cmp eax, 1
je 0x180034ecd
jmp 0x180034c87
mov ebx, 0x7f2bb747
inc ecx
cmp ecx, 0x41
jb 0x180034c70
jmp 0x180034b67
mov rax, qword [rsp + 0xa0]
mov r8, qword [rax + 8]
mov eax, dword [rdx]
lea rcx, [rax + rax*2]
cmp dword [r8 + rcx*4], 0
lea rdx, [r8 + rcx*4]
je 0x180034eb6
mov eax, dword [r9]
movsd xmm0, qword [rdx]
lea rcx, [rax + rax*2]
movsd qword [r8 + rcx*4], xmm0
mov eax, dword [rdx + 8]
mov dword [r8 + rcx*4 + 8], eax
jmp 0x180034b62
cmp esi, 0x3d57
je 0x180034d0d
cmp esi, 0x4a40
je 0x180034d02
cmp esi, 0x51c0
je 0x180034bdd
cmp esi, 0x5bee
jne 0x180034b67
mov ebx, r15d
jmp 0x180034b67
mov rax, qword [r14]
mov dword [rax], r15d
jmp 0x180034b67
mov eax, dword [rdx]
lea rcx, [rax + rax*2]
mov rax, qword [rsp + 0xa0]
mov rax, qword [rax + 8]
mov dword [rax + rcx*4], r15d
jmp 0x180034b67
cmp esi, 0xf466
ja 0x180034e50
je 0x180034e41
cmp esi, 0x941d
je 0x180034e13
cmp esi, 0x9f00
je 0x180034de0
cmp esi, 0xa313
je 0x180034dbf
cmp esi, 0xddfa
jne 0x180034b67
mov rax, qword [r14]
cmp qword [rax + 0x40], 0
je 0x180034da7
mov edi, 0x12
cmp edi, 0x12
je 0x180034d88
cmp edi, 0x29
jne 0x180034d9f
mov rax, qword [r14]
mov qword [rax + 0x40], r15
jmp 0x180034d9f
mov rdx, qword [r14]
mov r9d, 0xe6
add rdx, 0x40
xor r8d, r8d
xor ecx, ecx
call fcn.18008d780
add edi, 0x17
cmp edi, 0x40
jb 0x180034d75
mov r9d, 0xe6
xor r8d, r8d
mov rdx, r14
xor ecx, ecx
call fcn.18008d780
jmp 0x180034b5d
mov eax, 0x116
cmp eax, 0x116
je 0x180034ebd
add eax, 0xaed6
cmp eax, 0xaed6
jbe 0x180034dc4
jmp 0x180034b67
mov rcx, 0xffffffffffffffff
nop word [rax + rax]
inc rcx
cmp byte [r14 + rcx], 0
jne 0x180034df0
inc rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, qword [rsp + 0x98]
mov qword [rcx], rax
jmp 0x180034b5d
mov rax, qword [r14]
cmp qword [rax + 0x48], 0
je 0x180034b67
lea rdx, [rax + 0x48]
mov r9d, 0xe6
xor r8d, r8d
xor ecx, ecx
call fcn.18008d780
mov rax, qword [r14]
mov qword [rax + 0x48], r15
jmp 0x180034b5d
mov esi, 0xf466
mov ebx, 0xfffffffe
jmp 0x180034b67
cmp esi, 0x13d2c
je 0x180034e83
cmp esi, 0x145b9
je 0x180034ecd
cmp esi, 0x1db58
jne 0x180034b67
mov rcx, qword [rsp + 0x98]
mov rax, qword [rdx]
mov qword [rcx + 8], rax
mov qword [rdx], rcx
jmp 0x180034b67
mov r8, qword [rsp + 0x98]
mov rcx, qword [r8]
test rcx, rcx
je 0x180034ec4
mov rdx, r14
nop word [rax + rax]
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
mov byte [rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x180034ea0
jmp 0x180034b62
mov eax, 2
jmp 0x180034ecf
mov eax, 0xffffffff
jmp 0x180034ecf
mov rcx, r8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, ebx
mov rcx, qword [rsp + 0xc8]
xor rcx, rsp
call fcn.1800d1090
mov rbx, qword [rsp + 0x120]
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret