Function at 0x18004e2e0
Capabilities:
Enumerate pe sections
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xd30]
sub rsp, 0xe30
mov rax, qword [0x1800a74e0]
xor rax, rsp
mov qword [rbp + 0xd20], rax
mov eax, dword [rbp + 0xda0]
mov r15, r9
mov r12, qword [rbp + 0xda8]
mov rdi, r8
mov rbx, qword [rbp + 0xd98]
mov r13, rdx
mov qword [rbp - 0x60], r9
imul r9d, eax, 0x5f8
mov qword [rsp + 0x78], r8
mov r8, qword [rbp + 0xd90]
mov qword [rbp], rdx
mov rdx, rcx
mov qword [rbp - 0x50], rcx
mov ecx, eax
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x80], r8
mov qword [rbp - 0x58], rbx
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x70], r9d
cmp eax, r9d
ja 0x18004ebca
movzx r11d, word [rsp + 0x54]
mov esi, dword [rsp + 0x70]
mov r14d, dword [rsp + 0x64]
mov r10d, dword [rsp + 0x50]
mov dword [rsp + 0x6c], r11d
xor eax, eax
movsxd r9, r10d
cmp ecx, 0xaca6
ja 0x18004e8c1
je 0x18004e872
cmp ecx, 0xb
je 0x18004f334
cmp ecx, 0x4d
je 0x18004e81d
cmp ecx, 0x39c0
je 0x18004e727
cmp ecx, 0x7333
jne 0x18004f2fb
test r10d, r10d
js 0x18004e400
xor edx, edx
mov eax, esi
mov word [r12 + r9*2], dx
movzx ecx, byte [r9 + r8]
sar eax, 8
shl ecx, 8
mov esi, ecx
or esi, eax
movsxd rax, esi
inc dword [r13 + rax*4]
sub r9, 1
jns 0x18004e3d0
mov rdx, qword [rbp - 0x50]
nop dword [rax + rax]
movsxd rcx, dword [r15]
xor r9d, r9d
movzx eax, byte [r8]
mov byte [rcx + r8], al
movsxd rax, dword [r15]
mov word [r12 + rax*2], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 1]
mov byte [rcx + r8 + 1], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 2], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 2]
mov byte [rcx + r8 + 2], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 4], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 3]
mov byte [rcx + r8 + 3], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 6], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 4]
mov byte [rcx + r8 + 4], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 8], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 5]
mov byte [rcx + r8 + 5], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0xa], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 6]
mov byte [rcx + r8 + 6], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0xc], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 7]
mov byte [rcx + r8 + 7], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0xe], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 8]
mov byte [rcx + r8 + 8], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x10], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 9]
mov byte [rcx + r8 + 9], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x12], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 0xa]
mov byte [rcx + r8 + 0xa], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x14], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 0xb]
mov byte [rcx + r8 + 0xb], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x16], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 0xc]
mov byte [rcx + r8 + 0xc], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x18], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 0xd]
mov byte [rcx + r8 + 0xd], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x1a], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 0xe]
mov byte [rcx + r8 + 0xe], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x1c], r9w
movzx eax, byte [r8 + 0xf]
movsxd rcx, dword [r15]
mov byte [rcx + r8 + 0xf], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x1e], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 0x10]
mov byte [rcx + r8 + 0x10], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x20], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 0x11]
mov byte [rcx + r8 + 0x11], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x22], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 0x12]
mov byte [rcx + r8 + 0x12], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x24], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 0x13]
mov byte [rcx + r8 + 0x13], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x26], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 0x14]
mov byte [rcx + r8 + 0x14], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x28], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 0x15]
mov byte [rcx + r8 + 0x15], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x2a], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 0x16]
mov byte [rcx + r8 + 0x16], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x2c], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 0x17]
mov byte [rcx + r8 + 0x17], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x2e], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 0x18]
mov byte [rcx + r8 + 0x18], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x30], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 0x19]
mov byte [rcx + r8 + 0x19], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x32], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 0x1a]
mov byte [rcx + r8 + 0x1a], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x34], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 0x1b]
mov byte [rcx + r8 + 0x1b], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x36], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 0x1c]
mov byte [rcx + r8 + 0x1c], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x38], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 0x1d]
mov byte [rcx + r8 + 0x1d], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x3a], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 0x1e]
mov byte [rcx + r8 + 0x1e], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x3c], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 0x1f]
mov byte [rcx + r8 + 0x1f], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x3e], r9w
movsxd rcx, dword [r15]
movzx eax, byte [r8 + 0x20]
mov r10d, 0x22
mov byte [rcx + r8 + 0x20], al
movsxd rax, dword [r15]
mov dword [rsp + 0x50], r10d
mov word [r12 + rax*2 + 0x40], r9w
movzx eax, byte [r8 + 0x21]
movsxd rcx, dword [r15]
mov byte [rcx + r8 + 0x21], al
movsxd rax, dword [r15]
mov word [r12 + rax*2 + 0x42], r9w
cmp dword [rdx], 4
jl 0x18004e814
lea ecx, [r9 + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Form_Request_Timeout_Dialog
call fcn.180085950
mov r10d, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x58]
jmp 0x18004f2fb
cmp r9, 3
jl 0x18004f2fb
lea r10, [r9 + 1]
lea rdx, [r8 - 2]
shr r10, 2
add rdx, r9
lea r8, [r9 - 2]
mov r9d, dword [rsp + 0x50]
lea r8, [r12 + r8*2]
mov eax, r10d
neg eax
xor edi, edi
lea r9d, [r9 + rax*4]
mov dword [rsp + 0x50], r9d
nop dword [rax]
mov r9d, 4
mov eax, r9d
sub eax, 4
je 0x18004e7db
sub eax, 1
je 0x18004e7b4
sub eax, 1
je 0x18004e797
sub eax, 1
je 0x18004e78c
cmp eax, 1
jne 0x18004e7f0
movsxd rax, esi
inc dword [r13 + rax*4]
jmp 0x18004e7f0
mov word [r8 - 2], di
movzx ecx, byte [rdx - 1]
jmp 0x18004e7e4
mov eax, esi
mov word [r8], di
movzx ecx, byte [rdx]
sar eax, 8
shl ecx, 8
mov esi, ecx
or esi, eax
movsxd rax, esi
inc dword [r13 + rax*4]
jmp 0x18004e7f0
movsxd rax, esi
inc dword [r13 + rax*4]
mov eax, esi
sar eax, 8
mov word [r8 + 2], di
movzx ecx, byte [rdx + 1]
shl ecx, 8
mov esi, ecx
or esi, eax
movsxd rax, esi
inc dword [r13 + rax*4]
jmp 0x18004e7f0
mov word [r8 + 4], di
movzx ecx, byte [rdx + 2]
mov eax, esi
shl ecx, 8
sar eax, 8
mov esi, ecx
or esi, eax
inc r9d
cmp r9d, 9
jb 0x18004e766
sub r8, 8
sub rdx, 4
sub r10, 1
jne 0x18004e760
mov r10d, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x58]
jmp 0x18004f2fb
cmp dword [rdx], 4
jl 0x18004e844
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.FileReader.FileStream.StreamBytes
call fcn.180085950
mov r8, qword [rbp - 0x80]
mov ecx, dword [rsp + 0x58]
mov eax, 0x10000
xor r9d, r9d
nop dword [rax]
mov dword [r13 + rax*4], r9d
sub rax, 1
jns 0x18004e850
movzx esi, byte [r8]
mov r10d, dword [r15]
shl esi, 8
dec r10d
mov dword [rsp + 0x50], r10d
jmp 0x18004f2fb
lea rcx, [r13 + 8]
mov edx, 0x4000
nop dword [rax + rax]
mov eax, dword [rcx - 8]
add dword [rcx - 4], eax
mov eax, dword [rcx - 4]
add dword [rcx], eax
mov eax, dword [rcx]
add dword [rcx + 4], eax
mov eax, dword [rcx + 4]
add dword [rcx + 8], eax
lea rcx, [rcx + 0x10]
sub rdx, 1
jne 0x18004e880
movzx eax, byte [r8]
mov r10d, dword [r15]
mov ecx, dword [rsp + 0x58]
shl ax, 8
dec r10d
mov word [rsp + 0x54], ax
mov dword [rsp + 0x50], r10d
jmp 0x18004f2fb
cmp ecx, 0xe619
je 0x18004f129
mov r8d, dword [rsp + 0x58]
cmp r8d, 0x11f8c
je 0x18004ef4f
cmp r8d, 0x158ff
jne 0x18004f2f8
xor r9d, r9d
mov dword [rsp + 0x50], eax
mov r8d, r9d
mov qword [rbp - 0x68], r9
jmp 0x18004e903
xor r9d, r9d
lea rcx, [rbp + 0x20]
mov eax, 0x72
lea rcx, [rcx + r8*4]
mov dword [rbp - 0x78], eax
mov qword [rbp - 0x10], rcx
jmp 0x18004e923
xor r9d, r9d
sub eax, 0x72
je 0x18004eb40
sub eax, 1
je 0x18004eae3
cmp eax, 1
jne 0x18004eece
movsxd rdx, dword [rsp + 0x60]
mov ecx, 0x80
mov rdi, rdx
mov esi, 0x100
lea rax, [rdx*4]
add rax, r13
nop dword [rax + rax]
or dword [rax], 0x200000
or dword [rax + 0x400], 0x200000
lea rax, [rax + 0x800]
sub rcx, 1
jne 0x18004e960
mov byte [rbp + rdx + 0xc20], 1
cmp r8, 0xff
jae 0x18004eec1
mov ebx, 0x11e
nop word [rax + rax]
mov eax, ebx
sub eax, 0x11e
je 0x18004eab9
cmp eax, 0x6f
jne 0x18004ea94
mov edx, dword [rbp - 0x40]
mov r8d, r9d
cmp edx, 0xfffe
jle 0x18004e9e1
nop dword [rax]
nop dword [rax + rax]
inc r8d
mov eax, edx
mov ecx, r8d
sar eax, cl
cmp eax, 0xfffe
jg 0x18004e9d0
lea r10d, [rdx - 1]
movsxd rsi, r10d
test r10d, r10d
js 0x18004ea57
movsxd rcx, dword [rbp - 0x44]
mov rax, qword [rbp - 0x58]
add rcx, rsi
mov r13d, dword [rbp - 0x48]
lea r9, [rax + rcx*4]
mov edx, 0x5b
mov eax, edx
sub eax, 0x5a
je 0x18004ea24
cmp eax, 1
jne 0x18004ea37
movsxd r13, dword [r9]
mov r11d, esi
mov ecx, r8d
sar r11d, cl
mov word [r12 + r13*2], r11w
jmp 0x18004ea37
cmp r13d, 0x22
jge 0x18004ea37
mov eax, dword [r15]
add eax, r13d
cdqe
mov word [r12 + rax*2], r11w
dec edx
cmp edx, 0x59
ja 0x18004ea05
sub r9, 4
mov dword [rbp - 0x48], r13d
sub esi, 1
mov dword [rsp + 0x6c], r11d
jns 0x18004ea00
mov r13, qword [rbp]
xor r9d, r9d
mov ecx, r8d
sar r10d, cl
cmp r10d, 0xffff
jle 0x18004ea90
mov ecx, SHSetInstanceExplorer
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x57
je 0x18004ea85
sub eax, 0x57
je 0x18004f348
cmp eax, 0x1b
je 0x18004ea90
add ecx, 0x72
cmp ecx, 0x204
jb 0x18004ea70
mov edx, dword [rsp + 0x60]
add ebx, 0x6f
cmp ebx, 0x1fc
jb 0x18004e9a0
mov rbx, qword [rbp - 0x58]
mov rdi, qword [rsp + 0x78]
mov r8, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x10]
jmp 0x18004eece
mov eax, edx
shl eax, 8
cdqe
mov ecx, dword [r13 + rax*4]
lea rax, [rdi + 1]
shl rax, 0xa
btr ecx, 0x15
mov dword [rbp - 0x44], ecx
mov eax, dword [rax + r13]
btr eax, 0x15
sub eax, ecx
mov dword [rbp - 0x40], eax
jmp 0x18004ea94
movsxd rax, dword [rsp + 0x60]
mov edx, dword [rbp + rax*4 + 0x820]
mov ecx, dword [rbp + rax*4 + 0x420]
lea eax, [rcx - 1]
cmp eax, edx
je 0x18004eec6
test ecx, ecx
jne 0x18004eb12
mov eax, dword [r15]
dec eax
cmp edx, eax
je 0x18004eec6
mov ecx, SHSetInstanceExplorer
mov eax, ecx
sub eax, 0x57
je 0x18004eb30
sub eax, 0x57
je 0x18004f38a
cmp eax, 0x1b
je 0x18004eec6
add ecx, 0x72
cmp ecx, 0x204
jb 0x18004eb17
jmp 0x18004eec6
movsxd r11, dword [rcx]
mov rdx, r9
mov ecx, r9d
mov dword [rsp + 0x60], r11d
mov dword [rsp + 0x74], ecx
mov r10, r11
mov qword [rbp + 0x10], r11
mov qword [rbp - 8], rdx
nop dword [rax]
cmp ecx, r11d
je 0x18004ecd0
mov rax, r10
shl rax, 8
add rax, rdx
lea rax, [rax*4]
add rax, r13
mov qword [rbp + 8], rax
mov r12d, dword [rax]
bt r12d, 0x15
jb 0x18004ecca
mov r15d, dword [rax + 4]
btr r12d, 0x15
btr r15d, 0x15
dec r15d
cmp r15d, r12d
jle 0x18004ecca
mov esi, 0x21
nop
cmp esi, 0x21
je 0x18004ebf8
cmp esi, 0x147f
jne 0x18004eca5
cmp dword [rdi], 0
jge 0x18004eca5
mov eax, dword [rsp + 0x70]
mov rcx, qword [rbp + 0xd20]
xor rcx, rsp
call fcn.1800864a0
mov rbx, qword [rsp + 0xe70]
add rsp, 0xe30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rax, qword [rbp - 0x50]
mov edi, r15d
sub edi, r12d
cmp dword [rax], 4
jl 0x18004ec3e
mov ecx, 2
lea ebx, [rdi + 1]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9d, dword [rsp + 0x74]
lea rdx, str.Max._number_of_buffers_in_the_queue__0disable_
mov r8d, dword [rsp + 0x60]
mov rcx, rax
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call fcn.180085950
mov rbx, qword [rbp - 0x58]
mov rax, qword [rbp - 0x60]
lea r9, [rbp - 0x28]
mov r8, qword [rbp - 0x70]
lea rcx, [rbp - 0x20]
mov rdx, qword [rbp - 0x80]
mov dword [rbp - 0x30], 2
mov eax, dword [rax]
mov dword [rbp - 0x28], eax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x38]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x30]
mov dword [rsp + 0x30], 0xa5
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov dword [rbp - 0x20], r15d
mov dword [rbp - 0x38], r12d
call fcn.1800807d0
mov eax, dword [rsp + 0x68]
inc eax
add eax, edi
mov rdi, qword [rsp + 0x78]
mov dword [rsp + 0x68], eax
add esi, 0x145e
cmp esi, 0x28bc
jbe 0x18004ebb0
mov r10, qword [rbp + 0x10]
mov ecx, dword [rsp + 0x74]
mov r11d, r10d
mov rax, qword [rbp + 8]
mov rdx, qword [rbp - 8]
or dword [rax], 0x200000
inc ecx
inc rdx
mov dword [rsp + 0x74], ecx
mov qword [rbp - 8], rdx
cmp ecx, 0xff
jle 0x18004eb60
cmp byte [rbp + r10 + 0xc20], 0
je 0x18004ed20
mov ecx, SHSetInstanceExplorer
nop dword [rax]
mov eax, ecx
sub eax, 0x57
je 0x18004ed15
sub eax, 0x57
je 0x18004f3e6
cmp eax, 0x1b
je 0x18004ed20
add ecx, 0x72
cmp ecx, 0x204
jb 0x18004ed00
lea rdx, [r10*4]
add rdx, r13
xor edi, edi
mov ecx, edi
nop
mov eax, dword [rdx]
lea rdx, [rdx + 0x400]
btr eax, 0x15
mov dword [rbp + rcx + 0x420], eax
mov eax, dword [rdx - 0x3fc]
btr eax, 0x15
dec eax
mov dword [rbp + rcx + 0x820], eax
add rcx, 4
cmp rcx, 0x3fc
jle 0x18004ed30
mov r15, qword [rbp - 0x60]
mov eax, r11d
mov r12, qword [rbp - 0x80]
shl eax, 8
cdqe
mov edx, dword [r13 + rax*4]
btr edx, 0x15
cmp edx, dword [rbp + r10*4 + 0x420]
jge 0x18004edf2
movsxd rax, edx
lea r8, [rbx + rax*4]
nop
mov r14d, dword [r8]
sub r14d, 1
mov dword [rsp + 0x64], r14d
jns 0x18004eda6
add r14d, dword [r15]
mov dword [rsp + 0x64], r14d
movsxd rax, r14d
movzx edi, byte [rax + r12]
mov byte [rsp + 0x5c], dil
cmp byte [rbp + rdi + 0xc20], 0
jne 0x18004ede0
movsxd rcx, dword [rbp + rdi*4 + 0x420]
lea eax, [rcx + 1]
mov dword [rbx + rcx*4], r14d
mov dword [rbp + rdi*4 + 0x420], eax
nop dword [rax]
nop word [rax + rax]
inc edx
add r8, 4
cmp edx, dword [rbp + r10*4 + 0x420]
jl 0x18004ed90
jmp 0x18004edf7
movzx edi, byte [rsp + 0x5c]
mov eax, r11d
shl eax, 8
cdqe
mov esi, dword [r13 + rax*4 + 0x400]
btr esi, 0x15
dec esi
cmp esi, dword [rbp + r10*4 + 0x820]
jle 0x18004eeae
movsxd rax, esi
lea r11, [rbp + 0x820]
lea r11, [r11 + r10*4]
lea r9, [rbx + rax*4]
nop dword [rax]
mov edx, 0xe5
mov eax, edx
sub eax, 0xe5
je 0x18004ee89
sub eax, 1
je 0x18004ee7f
sub eax, 1
je 0x18004ee75
cmp eax, 1
jne 0x18004ee8f
movzx r8d, dil
cmp byte [rbp + r8 + 0xc20], 0
jne 0x18004ee8f
movsxd rcx, dword [rbp + r8*4 + 0x820]
lea eax, [rcx - 1]
mov dword [rbx + rcx*4], r14d
mov dword [rbp + r8*4 + 0x820], eax
jmp 0x18004ee8f
movsxd rax, r14d
movzx edi, byte [rax + r12]
jmp 0x18004ee8f
test r14d, r14d
jns 0x18004ee8f
add r14d, dword [r15]
jmp 0x18004ee8f
mov r14d, dword [r9]
dec r14d
inc edx
cmp edx, 0xe9
jb 0x18004ee35
dec esi
mov byte [rsp + 0x5c], dil
sub r9, 4
mov dword [rsp + 0x64], r14d
cmp esi, dword [r11]
jg 0x18004ee30
mov r12, qword [rbp - 0x70]
mov rdi, qword [rsp + 0x78]
mov r8, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x10]
jmp 0x18004eece
mov rdi, qword [rsp + 0x78]
lea rcx, [rbp + 0x20]
lea rcx, [rcx + r8*4]
mov eax, dword [rbp - 0x78]
mov r11d, dword [rsp + 0x6c]
inc eax
mov dword [rbp - 0x78], eax
cmp eax, 0x75
jb 0x18004e920
mov r10d, dword [rsp + 0x50]
inc r8
inc r10d
mov qword [rbp - 0x68], r8
mov dword [rsp + 0x50], r10d
cmp r8, 0xff
jle 0x18004e900
mov rax, qword [rbp - 0x50]
cmp dword [rax], 4
jl 0x18004e814
mov edi, dword [r15]
mov ecx, 2
mov ebx, edi
sub ebx, dword [rsp + 0x68]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9d, dword [rsp + 0x68]
lea rdx, str.Trace_fragment_ending_with_an_IBL__ind_jump
mov rcx, rax
mov dword [rsp + 0x20], ebx
mov r8d, edi
call fcn.180085950
mov r10d, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x58]
jmp 0x18004f2fb
mov r10d, eax
cmp rax, 0x100
jae 0x18004f428
mov dword [rbp + rax*4 + 0x20], r10d
inc r10d
mov byte [rbp + rax + 0xc20], 0
inc rax
mov dword [rsp + 0x50], r10d
cmp r10d, 0xff
jle 0x18004ef52
mov r14d, dword [rbp - 0x18]
mov r15d, 0x5f
mov r12d, dword [rbp - 0x74]
nop dword [rax]
mov eax, r15d
sub eax, 0x5f
je 0x18004f0fa
cmp eax, 1
jne 0x18004f100
nop word [rax + rax]
lea r12d, [r12 + r12*2]
inc r12d
cmp r12d, 0x100
jle 0x18004efb0
mov eax, 0x55555556
imul r12d
mov r12d, edx
shr r12d, 0x1f
add r12d, edx
mov dword [rsp + 0x50], r12d
mov r10d, r12d
cmp r12d, 0xff
jg 0x18004f0ee
movsxd rbx, r12d
mov rdi, rbx
movsxd r9, esi
mov ecx, 0x7a
mov eax, ecx
sub eax, 0x78
je 0x18004f0c2
sub eax, 1
je 0x18004f01e
cmp eax, 1
jne 0x18004f0c7
mov r14d, dword [rbp + rbx*4 + 0x20]
mov esi, r10d
mov r9, rbx
jmp 0x18004f0c7
mov eax, r14d
mov rdx, r9
shl eax, 8
sub rdx, rdi
movsxd rcx, eax
mov eax, r14d
shl eax, 8
cdqe
mov r8d, dword [rbp + rdx*4 + 0x20]
mov r10d, dword [r13 + rcx*4 + 0x400]
sub r10d, dword [r13 + rax*4]
mov eax, r8d
shl eax, 8
movsxd rcx, eax
mov eax, r8d
shl eax, 8
cdqe
mov ecx, dword [r13 + rcx*4 + 0x400]
sub ecx, dword [r13 + rax*4]
cmp ecx, r10d
jbe 0x18004f0ab
lea r11d, [r12 - 1]
nop
sub esi, r12d
mov dword [rbp + r9*4 + 0x20], r8d
mov r9, rdx
cmp esi, r11d
jle 0x18004f0ab
sub rdx, rdi
mov r8d, dword [rbp + rdx*4 + 0x20]
mov eax, r8d
shl eax, 8
movsxd rcx, eax
mov eax, r8d
shl eax, 8
cdqe
mov ecx, dword [r13 + rcx*4 + 0x400]
sub ecx, dword [r13 + rax*4]
cmp ecx, r10d
ja 0x18004f070
mov r10d, dword [rsp + 0x50]
mov r8d, 0x11f8c
mov dword [rsp + 0x58], r8d
mov ecx, 0x79
jmp 0x18004f0c7
mov dword [rbp + r9*4 + 0x20], r14d
dec ecx
cmp ecx, 0x77
ja 0x18004eff5
inc r10d
mov dword [rbp - 0x18], r14d
inc rbx
mov dword [rsp + 0x50], r10d
cmp r10d, 0xff
jle 0x18004eff0
cmp r12d, 1
jne 0x18004efc0
jmp 0x18004f100
mov r12d, 1
inc r15d
cmp r15d, 0x61
jb 0x18004ef90
mov r14d, dword [rsp + 0x64]
xor edi, edi
mov ecx, dword [rsp + 0x58]
mov dword [rbp - 0x74], r12d
mov r12, qword [rbp - 0x70]
mov dword [rsp + 0x68], edi
jmp 0x18004f2fb
cmp r10d, 3
jl 0x18004f27d
movzx r12d, word [rsp + 0x54]
lea r11d, [r10 - 2]
lea r10, [r8 - 1]
add r10, r9
mov r9d, dword [rsp + 0x50]
nop dword [rax]
mov edx, 6
lea r8d, [rdx + 1]
nop dword [rax]
cmp edx, 6
ja case.default.0x18004f17c
lea rdi, [0x180000000]
mov eax, edx
mov ecx, dword [rdi + rax*4 + 0x4f430]
add rcx, rdi
jmp rcx
movsxd rcx, esi
lea eax, [r11 - 1]
mov dword [rbx + rcx*4], eax
jmp case.default.0x18004f17c
movzx ecx, byte [r10 + 1]
jmp 0x18004f222
movzx eax, r12w
mov dword [r13 + rax*4], esi
movsxd rax, esi
mov dword [rbx + rax*4], r9d
jmp case.default.0x18004f17c
movsxd rax, esi
mov dword [rbx + rax*4], r11d
movzx eax, r12w
movzx ecx, byte [r10 - 2]
shr ax, 8
shl cx, 8
movzx r12d, cx
or r12w, ax
movzx eax, r12w
mov esi, dword [r13 + rax*4]
dec esi
mov dword [r13 + rax*4], esi
jmp case.default.0x18004f17c
movzx eax, r12w
mov dword [r13 + rax*4], esi
jmp case.default.0x18004f17c
movzx ecx, byte [r10]
movzx eax, r12w
shr ax, 8
shl cx, 8
movzx r12d, cx
or r12w, ax
movzx eax, r12w
mov esi, dword [r13 + rax*4]
dec esi
mov dword [r13 + rax*4], esi
lea eax, [r11 + 1]
movsxd rcx, esi
mov dword [rbx + rcx*4], eax
jmp case.default.0x18004f17c
movzx ecx, byte [r10 - 1]
movzx eax, r12w
shl cx, 8
shr ax, 8
movzx r12d, cx
or r12w, ax
movzx eax, r12w
mov esi, dword [r13 + rax*4]
dec esi
dec edx
sub r8, 1
jne 0x18004f160
sub r9d, 4
mov word [rsp + 0x54], r12w
sub r11d, 4
sub r10, 4
cmp r9d, 3
jge 0x18004f150
mov r12, qword [rbp - 0x70]
mov r10d, r9d
mov r8, qword [rbp - 0x80]
mov ecx, dword [rsp + 0x58]
mov dword [rsp + 0x50], r9d
test r10d, r10d
js 0x18004f2fb
movzx r14d, word [rsp + 0x54]
movsxd rax, r10d
add r8, rax
nop
mov edx, 0x42
mov eax, edx
sub eax, 0x42
je 0x18004f2ba
cmp eax, 1
jne 0x18004f2d2
movzx eax, r14w
mov esi, dword [r13 + rax*4]
dec esi
mov dword [r13 + rax*4], esi
movsxd rax, esi
mov dword [rbx + rax*4], r10d
jmp 0x18004f2d2
movzx ecx, byte [r8]
movzx eax, r14w
shl cx, 8
movzx r14d, cx
shr ax, 8
or r14w, ax
inc edx
cmp edx, 0x44
jb 0x18004f295
dec r8
mov word [rsp + 0x54], r14w
sub r10d, 1
jns 0x18004f290
mov r14d, dword [rsp + 0x64]
mov ecx, dword [rsp + 0x58]
mov dword [rsp + 0x50], r10d
jmp 0x18004f2fb
mov ecx, r8d
imul eax, dword [rbp + 0xda0], 0xbf
add ecx, eax
mov dword [rsp + 0x58], ecx
cmp ecx, dword [rsp + 0x70]
ja 0x18004ebca
mov r11d, dword [rsp + 0x6c]
mov r15, qword [rbp - 0x60]
mov rbx, qword [rbp - 0x58]
mov r8, qword [rbp - 0x80]
mov rdi, qword [rsp + 0x78]
mov rdx, qword [rbp - 0x50]
jmp 0x18004e388
mov rcx, qword [rbx]
test rcx, rcx
je 0x18004ebce
mov eax, dword [rcx + 8]
jmp 0x18004ebce
xor edx, edx
xor r9d, r9d
xor r8d, r8d
lea ecx, [rdx + 0x42]
call fcn.18001bef0
mov ecx, 2
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rbx
lea rdx, str._n_nbzip2_libbzip2:_internal_error_number__d._nThis_is_a_bug_in_bzip2_libbzip2___s._nPlease_report_it_to_me_at:_jseward_bzip.org.__If_this_happened_nwhen_you_were_using_some_program_which_uses_libbzip2_as_a_ncomponent__you_should_also_report_this_bug_to_the_author_s__nof_that_program.__Please_make_an_effort_to_report_this_bug__ntimely_and_accurate_bug_reports_eventually_lead_to_higher_nquality_software.__Thanks.__Julian_Seward__10_December_2007._n_n
mov rcx, rax
mov r8d, 0x3ea
call fcn.180085950
mov ecx, 3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor edx, edx
xor r9d, r9d
xor r8d, r8d
lea ecx, [rdx + 0x42]
call fcn.18001bef0
mov ecx, 2
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rbx
lea rdx, str._n_nbzip2_libbzip2:_internal_error_number__d._nThis_is_a_bug_in_bzip2_libbzip2___s._nPlease_report_it_to_me_at:_jseward_bzip.org.__If_this_happened_nwhen_you_were_using_some_program_which_uses_libbzip2_as_a_ncomponent__you_should_also_report_this_bug_to_the_author_s__nof_that_program.__Please_make_an_effort_to_report_this_bug__ntimely_and_accurate_bug_reports_eventually_lead_to_higher_nquality_software.__Thanks.__Julian_Seward__10_December_2007._n_n
mov rcx, rax
mov r8d, 0x3ef
call fcn.180085950
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._n_A_special_note_about_internal_error_number_1007__n_nExperience_suggests_that_a_common_cause_of_i.e._1007_nis_unreliable_memory_or_other_hardware.__The_1007_assertion_njust_happens_to_cross_check_the_results_of_huge_numbers_of_nmemory_reads_writes__and_so_acts__unintendedly__as_a_stress_ntest_of_your_memory_system._n_nI_suggest_the_following:_try_compressing_the_file_again__npossibly_monitoring_progress_in_detail_with_the__vv_flag._n_n_If_the_error_cannot_be_reproduced__and_or_happens_at_different_n__points_in_compression__you_may_have_a_flaky_memory_system._n__Try_a_memory_test_program.__I_have_used_Memtest86_n___www.memtest86.com_.__At_the_time_of_writing_it_is_free__GPLd_._n__Memtest86_tests_memory_much_more_thorougly_than_your_BIOSs_n__power_on_test__and_may_find_failures_that_the_BIOS_doesnt._n_n_If_the_error_can_be_repeatably_reproduced__this_is_a_bug_in_n__bzip2__and_I_would_very_much_like_to_hear_about_it.__Please_n__let_me_know__and__ideally__save_a_copy_of_the_file_causing_the_n__problem____without_which_I_will_be_unable_to_investigate_it._n_n
call fcn.180085950
mov ecx, 3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor edx, edx
xor r9d, r9d
xor r8d, r8d
lea ecx, [rdx + 0x42]
call fcn.18001bef0
mov ecx, 2
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rbx
lea rdx, str._n_nbzip2_libbzip2:_internal_error_number__d._nThis_is_a_bug_in_bzip2_libbzip2___s._nPlease_report_it_to_me_at:_jseward_bzip.org.__If_this_happened_nwhen_you_were_using_some_program_which_uses_libbzip2_as_a_ncomponent__you_should_also_report_this_bug_to_the_author_s__nof_that_program.__Please_make_an_effort_to_report_this_bug__ntimely_and_accurate_bug_reports_eventually_lead_to_higher_nquality_software.__Thanks.__Julian_Seward__10_December_2007._n_n
mov rcx, rax
mov r8d, 0x3ee
call fcn.180085950
mov ecx, 3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.180086188
int3