Function at 0x180035b30
Capabilities:
Check for software breakpoints
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x90
mov eax, dword [rbp + 0x6f]
lea r15d, [rdx - 0xa]
xor ebx, ebx
mov r12, r8
mov r8d, edx
mov r14d, edx
cmp edx, r15d
jbe 0x180035ed6
mov rsi, qword [rbp + 0x7f]
lea r8d, [rbx + 0x10]
mov dword [rbp - 0x39], eax
mov eax, dword [rbp + 0x6f]
mov dword [rbp + 0x7f], eax
mov rdi, qword [rbp + 0x7f]
mov eax, dword [rbp + 0x6f]
mov r13, qword [rbp + 0x7f]
mov qword [rbp + 0xf], rdi
mov dword [rbp - 0x2d], eax
lea eax, [r14 - 0x71]
lea rdx, [0x180000000]
cmp eax, 0xc
ja case.0x180035bb1.116
mov ecx, dword [rdx + rax*4 + 0x363ac]
add rcx, rdx
jmp rcx
xor r8d, r8d
lea rcx, [rsi + 0x10]
lea edx, [r8 + 0x15]
call fcn.18003ae20
jmp 0x180035dfd
movzx r9d, byte [rbp - 0x20]
movzx edx, byte [rbp - 0x1f]
mov dword [rbp - 0x39], r9d
mov dword [rbp + 0x7f], edx
jmp 0x180035e0a
movzx eax, byte [rbp - 0x11]
cmp al, 0xf
mov ecx, eax
movzx eax, byte [rbp - 0x21]
cmove ecx, r8d
mov dword [rbp - 0x2d], eax
mov byte [rbp - 0x11], cl
jmp case.0x180035bb1.116
mov rdi, rsi
mov qword [rbp + 0xf], rsi
jmp case.0x180035bb1.116
movzx ecx, byte [rsi]
sub ecx, 8
je 0x180035c1b
sub ecx, 1
je 0x180035c4c
cmp ecx, 9
je 0x180035c84
jmp 0x180035cd0
mov r14d, 0x20
mov eax, r14d
sub eax, 0x1e
je 0x180035d37
cmp eax, 1
jne 0x180035c43
mov edx, 0x106
mov rcx, rsi
call fcn.18005a020
mov qword [rsi + 0x18], rax
dec r14d
cmp r14d, 0x1d
ja 0x180035c21
mov r14d, 6
mov eax, r14d
sub eax, 6
je 0x180035c7b
sub eax, 1
je 0x180035c6a
cmp eax, 1
je 0x180035d37
jmp 0x180035c7b
mov rdx, rsi
mov ecx, 0x23
call fcn.18004d570
mov qword [rsi + 0x18], rax
inc r14d
cmp r14d, 9
jb 0x180035c52
mov r14d, 0x25
nop word [rax + rax]
mov eax, r14d
sub eax, 0x25
je 0x180035ca3
cmp eax, 1
je 0x180035d37
jmp 0x180035cc7
mov ecx, dword [rsi + 4]
call fcn.180081e7c
mov r8d, dword [rsi + 4]
mov edx, 1
mov r9, qword [0x1800bd648]
mov rcx, rax
mov qword [rsi + 0x18], rax
call fcn.18007c8f8
inc r14d
cmp r14d, 0x27
jb 0x180035c90
mov ecx, 0xcf
mov eax, ecx
sub eax, 0xcd
je 0x180035cfc
cmp eax, 2
je 0x1800363a1
dec ecx
cmp ecx, 0xcd
ja 0x180035cd5
mov r14d, 0x78
jmp 0x180035dfd
mov eax, 0x15
cmp eax, 0x14
jbe 0x1800363a1
cmp eax, 0x15
je 0x180035d13
dec eax
jmp 0x180035d01
xor r8d, r8d
mov edx, 0x9c
xor ecx, ecx
call fcn.180004fd0
mov eax, dword [reloc.oledlg.dll_OleUIPasteSpecialA]
add eax, dword [0]
mov dword [4], eax
mov r14d, 0x78
jmp 0x180035dfd
mov edx, 0xc0
lea rcx, [rbp - 0x29]
call fcn.18005bb50
jmp 0x180035dfd
mov rcx, qword [0x1800bd648]
call fcn.180076ec8
test eax, eax
je 0x180035dfd
mov rax, rbx
jmp 0x180036386
mov r8d, 0x70
mov rdx, rsi
xor ecx, ecx
call fcn.180003320
xor r8d, r8d
lea rcx, [rsi + 4]
lea edx, [r8 + 0x15]
call fcn.18003ae20
xor r8d, r8d
lea rcx, [rsi + 8]
lea edx, [r8 + 0x15]
call fcn.18003ae20
xor ecx, ecx
lea rdx, [rsi + 0xc]
lea r8d, [rcx + 0x70]
call fcn.180003320
jmp 0x180035dfd
mov ecx, 0x20
mov dword [rbp - 0x29], ebx
call fcn.180081e7c
mov rsi, rax
jmp 0x180035dfd
mov r13, qword [r12]
lea rcx, [rbp - 0x21]
mov edx, 1
mov r9, qword [r13 + 0x18]
lea r8d, [rdx + 0x11]
call fcn.18007c8f8
cmp rax, 0x12
je 0x180035dfd
mov rdx, qword [rbp + 0x67]
mov rax, qword [rdx]
mov rcx, qword [rax]
mov dword [rcx + 0x28], 0x2b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax]
mov r8d, 0x10
mov r9d, dword [rbp - 0x39]
mov edx, dword [rbp + 0x7f]
dec r14d
cmp r14d, r15d
ja 0x180035b93
mov r8d, dword [rbp + 0x6f]
imul eax, r8d, 0x384
mov r14d, r8d
mov dword [rbp + 7], eax
cmp r8d, eax
ja 0x180036383
mov ecx, dword [rbp + 0x6f]
lea r10, [0x1800556a0]
mov esi, dword [rbp + 0x6f]
lea r11, [0x180024af0]
mov r8d, dword [rbp + 0x6f]
mov eax, dword [rbp + 0x6f]
mov r12d, dword [rbp + 0x6f]
mov r15d, dword [rbp + 0x6f]
mov rdi, qword [rbp + 0x67]
mov dword [rbp - 0x35], ecx
mov dword [rbp - 0x25], esi
mov dword [rbp - 0x31], r8d
mov dword [rbp - 0x29], eax
nop dword [rax]
nop dword [rax + rax]
cmp r14d, 0xa22b
ja 0x180036256
je 0x180035fb9
cmp r14d, 0x73
je 0x180035fa4
cmp r14d, 0x7d
je 0x18003637f
cmp r14d, 0x28e1
je 0x180035f6b
cmp r14d, 0x514f
je 0x180035f18
cmp r14d, 0x79bd
jne 0x180036359
cmp edx, 8
jle 0x180035ef8
sub edx, 8
mov qword [r13 + 0x60], 0
mov dword [rbp + 0x7f], edx
lea rax, [0x18005aa60]
jmp 0x180035eff
mov edx, dword [rbp + 0x6f]
mov r9d, dword [rbp + 0x6f]
mov dword [rbp + 0x7f], edx
mov rdi, qword [rbp + 0x7f]
mov r13, qword [rbp + 0x7f]
mov qword [rbp + 0xf], rdi
mov dword [rbp - 0x39], r9d
mov dword [rbp - 0x2d], eax
jmp 0x180035e1a
lea rax, [0x18004fe80]
mov qword [r13 + 0x50], rax
mov r15d, 3
mov rax, qword [rdi]
mov dword [rax + 0x3c], 2
jmp 0x180036359
mov edx, r8d
shr edx, 5
not edx
and edx, 1
mov dword [rbp - 0x29], edx
cmp r9d, 1
jg 0x180035f4a
mov eax, dword [r13 + 0x5c]
dec eax
cmp eax, 3
ja 0x180035f4a
test byte [rbp - 0x11], 7
jne 0x180035f4a
test r8d, 0xffffffc0
je 0x180036359
mov rax, qword [rdi]
mov rcx, qword [rax]
mov dword [rcx + 0x28], 0x409
mov rcx, qword [rdi]
mov rax, qword [rcx]
call qword [rax]
mov ecx, dword [rbp - 0x35]
mov r8d, dword [rbp - 0x31]
jmp 0x180036359
movzx eax, byte [rbp - 0x15]
movzx r12d, byte [rbp - 0x14]
movzx esi, byte [rbp - 0x12]
shl r12d, 8
add r12d, eax
shl esi, 8
movzx eax, byte [rbp - 0x13]
add esi, eax
movzx eax, byte [rbp - 0x11]
shr eax, 3
mov dword [r13 + 0x5c], eax
movzx r8d, byte [rbp - 0x10]
mov dword [rbp - 0x31], r8d
mov dword [rbp - 0x25], esi
jmp 0x180036359
movzx ecx, byte [rbp - 0x1b]
movzx eax, byte [rbp - 0x1c]
shl ecx, 8
add ecx, eax
mov dword [rbp - 0x35], ecx
jmp 0x180036359
mov ecx, edx
sub ecx, 1
je 0x1800360c4
sub ecx, 1
je 0x180036060
cmp ecx, 1
jne 0x18003601c
mov eax, 7
cmp eax, 7
je 0x18003600a
cmp eax, 0x89
jne 0x180036010
mov rax, qword [rdi]
mov dword [rax + 0x3c], 1
cmp dword [r13 + 0x5c], 1
jne 0x180036036
mov qword [r13 + 0x68], r10
mov rax, qword [rdi]
mov rcx, qword [rax]
mov dword [rcx + 0x28], 0x40c
jmp 0x180036100
mov r15d, 1
add eax, 0x82
cmp eax, 0x10b
jb 0x180035fd7
mov rax, qword [rdi]
mov rcx, qword [rax]
mov dword [rcx + 0x28], 0x409
mov rcx, qword [rdi]
mov rax, qword [rcx]
call qword [rax]
jmp 0x180036121
mov rax, qword [rdi]
mov rcx, qword [rax]
mov dword [rcx + 0x28], 0x409
mov rcx, qword [rdi]
mov rax, qword [rcx]
call qword [rax]
mov rax, qword [rdi]
mov rcx, qword [rax]
mov dword [rcx + 0x28], 0x40c
jmp 0x180036100
mov ecx, dword [r13 + 0x5c]
sub ecx, 2
je 0x1800360aa
sub ecx, 1
je 0x180036097
cmp ecx, 1
je 0x180036097
mov rax, qword [rdi]
mov rcx, qword [rax]
mov dword [rcx + 0x28], 0x409
mov rcx, qword [rdi]
mov rax, qword [rcx]
call qword [rax]
mov rax, qword [rdi]
mov rcx, qword [rax]
mov dword [rcx + 0x28], 0x40b
jmp 0x180036100
mov qword [r13 + 0x68], r11
mov rax, qword [rdi]
mov rcx, qword [rax]
mov dword [rcx + 0x28], 0x40b
jmp 0x180036100
lea rax, [0x180059060]
mov qword [r13 + 0x68], rax
mov rax, qword [rdi]
mov rcx, qword [rax]
mov dword [rcx + 0x28], 0x40b
jmp 0x180036100
cmp dword [r13 + 0x5c], 1
jne 0x1800360de
cmp r9d, 1
jne 0x1800360de
lea rax, [0x180027a20]
mov qword [r13 + 0x68], rax
jmp 0x1800360f3
mov rax, qword [rdi]
mov rcx, qword [rax]
mov dword [rcx + 0x28], 0x409
mov rcx, qword [rdi]
mov rax, qword [rcx]
call qword [rax]
mov rax, qword [rdi]
mov rcx, qword [rax]
mov dword [rcx + 0x28], 0x40d
mov rax, qword [rdi]
mov edx, 1
mov rcx, qword [rax]
mov dword [rcx + 0x2c], r12d
mov rax, qword [rdi]
mov rcx, qword [rax]
mov dword [rcx + 0x30], esi
mov rcx, qword [rdi]
mov rax, qword [rcx]
call qword [rax + OleUIPromptUserA]
cmp dword [rbp - 0x29], 0
mov r14d, 0xa22b
je 0x1800361b8
mov ebx, dword [rbp - 0x25]
mov esi, 0xcc
nop dword [rax]
cmp esi, 0xcc
je 0x18003616f
cmp esi, 0x181
je 0x180036165
cmp esi, 0x236
jne 0x1800361a6
lea rax, [0x180059ff0]
mov qword [r13 + 8], rax
jmp 0x1800361a6
mov dword [r13 + 0x28], 1
jmp 0x1800361a6
mov rcx, qword [rdi]
mov r9d, r15d
xor r8d, r8d
imul r9d, r12d
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], ebx
mov rax, qword [rcx + 8]
lea edx, [r8 + 1]
call qword [rax + 0x20]
mov qword [r13 + 0x40], rax
mov rax, qword [rdi]
mov rcx, qword [rax + 0x10]
test rcx, rcx
je 0x1800361a6
inc dword [rcx + 0x1c]
add esi, 0xb5
cmp esi, 0x2eb
jb 0x180036140
xor ebx, ebx
jmp 0x180036211
mov esi, 0x9f
nop dword [rax]
cmp esi, 0x9f
je 0x1800361e2
cmp esi, 0x3609
jne 0x180036203
mov rax, qword [r13 + 0x68]
mov qword [r13 + 8], rax
mov dword [r13 + 0x28], 1
jmp 0x180036203
mov qword [r13 + 0x40], rbx
mov r8d, r15d
mov rcx, qword [rdi]
mov edx, 1
imul r8d, r12d
mov r9d, edx
mov rax, qword [rcx + 8]
call qword [rax + 0x10]
mov qword [r13 + 0x20], rax
add esi, 0x356a
cmp esi, 0x6ad4
jbe 0x1800361c0
mov esi, dword [rbp - 0x2d]
test esi, esi
je 0x180036242
mov qword [rbp - 1], r13
nop dword [rax]
xor r9d, r9d
mov qword [rsp + 0x28], rbx
xor r8d, r8d
mov qword [rsp + 0x20], rbx
lea rcx, [rbp - 1]
lea edx, [r9 + 0x15]
call fcn.180063100
sub esi, 1
jne 0x180036220
mov ecx, dword [rbp - 0x35]
dec esi
mov r8d, dword [rbp - 0x31]
mov dword [rbp - 0x2d], esi
mov esi, dword [rbp - 0x25]
jmp 0x180036359
cmp r14d, 0xca99
je 0x1800362ab
cmp r14d, 0xf307
je 0x180036295
cmp r14d, 0x11b75
je 0x180036289
cmp r14d, 0x143e3
jne 0x180036359
mov rax, qword [rdi]
mov dword [rax + 0x34], esi
jmp 0x180036359
mov rax, qword [rdi]
mov dword [rax + 0x30], r12d
jmp 0x180036359
mov rax, qword [rdi]
mov dword [rax + 0x38], r15d
mov rax, qword [rdi]
mov dword [rax + 0x48], 8
jmp 0x180036359
test ecx, ecx
je 0x180036334
cmp ecx, 0x100
ja 0x1800362ca
movzx ecx, byte [rbp - 0x1d]
movzx eax, byte [rbp - 0x1e]
shl ecx, 8
add ecx, eax
je 0x1800362df
mov rax, qword [rdi]
mov rcx, qword [rax]
mov dword [rcx + 0x28], 0x408
mov rcx, qword [rdi]
mov rax, qword [rcx]
call qword [rax]
mov rcx, qword [rdi]
mov r9d, 3
mov r8d, dword [rbp - 0x35]
mov rax, qword [rcx + 8]
lea edx, [r9 - 2]
call qword [rax + 0x10]
xor r9d, r9d
mov qword [rbp + 0x17], r13
mov qword [r13 + 0x38], rax
lea rdx, [rbp + 0x17]
movzx eax, byte [rbp - 0x1a]
lea rcx, [rbp - 1]
mov dword [rbp - 1], eax
mov r8d, 0x123
mov eax, dword [rbp - 0x35]
mov dword [rbp - 9], eax
lea rax, [rbp - 9]
mov qword [rsp + 0x20], rax
call fcn.1800156d0
mov ecx, dword [rbp - 0x35]
mov r8d, dword [rbp - 0x31]
jmp 0x180036359
test r9d, r9d
je 0x180036355
mov rax, qword [rdi]
mov rcx, qword [rax]
mov dword [rcx + 0x28], 0x409
mov rcx, qword [rdi]
mov rax, qword [rcx]
call qword [rax]
mov ecx, dword [rbp - 0x35]
mov r8d, dword [rbp - 0x31]
mov qword [r13 + 0x38], rbx
imul eax, dword [rbp + 0x6f], 0x5a
lea r10, [0x1800556a0]
mov edx, dword [rbp + 0x7f]
lea r11, [0x180024af0]
mov r9d, dword [rbp - 0x39]
add r14d, eax
cmp r14d, dword [rbp + 7]
jbe 0x180035e70
mov rdi, qword [rbp + 0xf]
mov rax, rdi
mov rbx, qword [rsp + 0xe0]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0xffffffff
call fcn.180076a04
int3