Function at 0x180066670
Capabilities:
Allocate or change rwx memory
Resolve function by parsing pe exports

Disassembly:
push rbp
sub rsp, 0x430
lea rbp, [rsp + 0x80]
mov qword [rbp - 0x30], r8
mov qword [rbp - 0x28], rdx
mov qword [rbp - 0x20], rcx
mov rax, qword [0x1800eb0a8]
xor rax, rbp
mov qword [rbp + 0x3a8], rax
mov dword [rbp - 0x14], 0xc1175bf5
mov eax, dword [rbp - 0x14]
mov dword [rbp - 0x34], eax
sub eax, 0x803e3695
je 0x1800681bf
jmp 0x1800666ba
mov eax, dword [rbp - 0x34]
sub eax, 0x80786142
je 0x180069fd4
jmp 0x1800666cd
mov eax, dword [rbp - 0x34]
sub eax, 0x81ccb809
je 0x180069583
jmp 0x1800666e0
mov eax, dword [rbp - 0x34]
sub eax, 0x85a4286c
je 0x180068055
jmp 0x1800666f3
mov eax, dword [rbp - 0x34]
sub eax, 0x85ae6a37
je 0x180069130
jmp 0x180066706
mov eax, dword [rbp - 0x34]
sub eax, 0x8601474f
je 0x180069281
jmp 0x180066719
mov eax, dword [rbp - 0x34]
sub eax, 0x8ade3398
je 0x180068306
jmp 0x18006672c
mov eax, dword [rbp - 0x34]
sub eax, 0x8d70665a
je 0x18006917c
jmp 0x18006673f
mov eax, dword [rbp - 0x34]
sub eax, 0x8dff6124
je 0x18006a65f
jmp 0x180066752
mov eax, dword [rbp - 0x34]
sub eax, 0x8e84ed14
je 0x180069b20
jmp 0x180066765
mov eax, dword [rbp - 0x34]
sub eax, 0x8f2998d4
je 0x180067d48
jmp 0x180066778
mov eax, dword [rbp - 0x34]
sub eax, 0x8f323b7d
je 0x18006880c
jmp 0x18006678b
mov eax, dword [rbp - 0x34]
sub eax, 0x9109a9f9
je 0x180069a24
jmp 0x18006679e
mov eax, dword [rbp - 0x34]
sub eax, 0x9109cc01
je 0x18006a034
jmp 0x1800667b1
mov eax, dword [rbp - 0x34]
sub eax, 0x9208861b
je 0x1800699e0
jmp 0x1800667c4
mov eax, dword [rbp - 0x34]
sub eax, 0x92f2bf20
je 0x180069108
jmp 0x1800667d7
mov eax, dword [rbp - 0x34]
sub eax, 0x93fd6dd6
je 0x18006aaa0
jmp 0x1800667ea
mov eax, dword [rbp - 0x34]
sub eax, 0x948d8c7c
je 0x18006a0d5
jmp 0x1800667fd
mov eax, dword [rbp - 0x34]
sub eax, 0x98260f39
je 0x18006a495
jmp 0x180066810
mov eax, dword [rbp - 0x34]
sub eax, 0x99304651
je 0x180069026
jmp 0x180066823
mov eax, dword [rbp - 0x34]
sub eax, 0x99c607a9
je 0x18006a261
jmp 0x180066836
mov eax, dword [rbp - 0x34]
sub eax, 0x9a98bcd9
je 0x18006aa2e
jmp 0x180066849
mov eax, dword [rbp - 0x34]
sub eax, 0x9b37c3b0
je 0x180069b85
jmp 0x18006685c
mov eax, dword [rbp - 0x34]
sub eax, 0x9b5b013a
je 0x18006a909
jmp 0x18006686f
mov eax, dword [rbp - 0x34]
sub eax, 0x9b8037c5
je 0x180068131
jmp 0x180066882
mov eax, dword [rbp - 0x34]
sub eax, 0x9c67f53a
je 0x180069b38
jmp 0x180066895
mov eax, dword [rbp - 0x34]
sub eax, 0x9db91c76
je 0x180067bc0
jmp 0x1800668a8
mov eax, dword [rbp - 0x34]
sub eax, 0x9f2960b7
je 0x1800699d4
jmp 0x1800668bb
mov eax, dword [rbp - 0x34]
sub eax, 0xa033c1cf
je 0x180068b33
jmp 0x1800668ce
mov eax, dword [rbp - 0x34]
sub eax, 0xa09d341a
je 0x1800690d0
jmp 0x1800668e1
mov eax, dword [rbp - 0x34]
sub eax, 0xa15e8393
je 0x180069ee4
jmp 0x1800668f4
mov eax, dword [rbp - 0x34]
sub eax, 0xa2f48166
je 0x180068af8
jmp 0x180066907
mov eax, dword [rbp - 0x34]
sub eax, 0xa370107c
je 0x180067b3f
jmp 0x18006691a
mov eax, dword [rbp - 0x34]
sub eax, 0xa407c89b
je 0x180069226
jmp 0x18006692d
mov eax, dword [rbp - 0x34]
sub eax, 0xa4178cb9
je 0x18006a163
jmp 0x180066940
mov eax, dword [rbp - 0x34]
sub eax, 0xa7579f99
je 0x180069a50
jmp 0x180066953
mov eax, dword [rbp - 0x34]
sub eax, 0xa7d6d95a
je 0x18006891f
jmp 0x180066966
mov eax, dword [rbp - 0x34]
sub eax, 0xac221d1a
je 0x180068dd3
jmp 0x180066979
mov eax, dword [rbp - 0x34]
sub eax, 0xb0fce08e
je 0x1800698c1
jmp 0x18006698c
mov eax, dword [rbp - 0x34]
sub eax, 0xb184f962
je 0x1800678ec
jmp 0x18006699f
mov eax, dword [rbp - 0x34]
sub eax, 0xb4198c07
je 0x180067f6f
jmp 0x1800669b2
mov eax, dword [rbp - 0x34]
sub eax, 0xb556f3e9
je 0x1800688d3
jmp 0x1800669c5
mov eax, dword [rbp - 0x34]
sub eax, 0xb69daac1
je 0x18006aab3
jmp 0x1800669d8
mov eax, dword [rbp - 0x34]
sub eax, 0xb86936e7
je 0x18006a408
jmp 0x1800669eb
mov eax, dword [rbp - 0x34]
sub eax, 0xba3b2f92
je 0x180069b14
jmp 0x1800669fe
mov eax, dword [rbp - 0x34]
sub eax, 0xba848864
je 0x180069d10
jmp 0x180066a11
mov eax, dword [rbp - 0x34]
sub eax, 0xbab7fa6c
je 0x18006829b
jmp 0x180066a24
mov eax, dword [rbp - 0x34]
sub eax, 0xbea3e649
je 0x18006a3af
jmp 0x180066a37
mov eax, dword [rbp - 0x34]
sub eax, 0xbeae6a07
je 0x180068db5
jmp 0x180066a4a
mov eax, dword [rbp - 0x34]
sub eax, 0xbee3842b
je 0x1800680d3
jmp 0x180066a5d
mov eax, dword [rbp - 0x34]
sub eax, 0xbf2691fc
je 0x1800698de
jmp 0x180066a70
mov eax, dword [rbp - 0x34]
sub eax, 0xc05f84a8
je 0x180068f36
jmp 0x180066a83
mov eax, dword [rbp - 0x34]
sub eax, 0xc0e70021
je 0x18006aa08
jmp 0x180066a96
mov eax, dword [rbp - 0x34]
sub eax, 0xc1175bf5
je 0x1800675bd
jmp 0x180066aa9
mov eax, dword [rbp - 0x34]
sub eax, 0xc2c4969d
je 0x180069794
jmp 0x180066abc
mov eax, dword [rbp - 0x34]
sub eax, 0xc3c06cfa
je 0x1800691dd
jmp 0x180066acf
mov eax, dword [rbp - 0x34]
sub eax, 0xc440fd5b
je 0x180068955
jmp 0x180066ae2
mov eax, dword [rbp - 0x34]
sub eax, 0xc46ee405
je 0x180067779
jmp 0x180066af5
mov eax, dword [rbp - 0x34]
sub eax, 0xc4b4b434
je 0x180068ca0
jmp 0x180066b08
mov eax, dword [rbp - 0x34]
sub eax, 0xc7c19eac
je 0x180068a3b
jmp 0x180066b1b
mov eax, dword [rbp - 0x34]
sub eax, 0xcb07fb63
je 0x1800676fd
jmp 0x180066b2e
mov eax, dword [rbp - 0x34]
sub eax, 0xcc9d80f5
je 0x180069539
jmp 0x180066b41
mov eax, dword [rbp - 0x34]
sub eax, 0xcdd539f9
je 0x180069165
jmp 0x180066b54
mov eax, dword [rbp - 0x34]
sub eax, 0xceeab2e8
je 0x180068729
jmp 0x180066b67
mov eax, dword [rbp - 0x34]
sub eax, 0xcf3032c6
je 0x180069275
mov eax, 0x10
mov qword [rbp - 0x40], rax
call fcn.1800e0a50
sub rsp, rax
mov rax, qword [rbp - 0x40]
mov rcx, rsp
mov qword [rbp + 0xc0], rcx
call fcn.1800e0a50
sub rsp, rax
mov rax, qword [rbp - 0x40]
mov rcx, rsp
mov qword [rbp + 0xc8], rcx
call fcn.1800e0a50
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0xd0], rax
mov dword [rbp - 0x14], 0x53c4b65b
jmp 0x18006ab5a
mov ecx, dword [0x18184c92c]
mov eax, dword [0x18184c928]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7db4a426
mov ecx, 0xc46ee405
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x14], eax
jmp 0x18006ab5a
mov rcx, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x30]
mov eax, 0x10
mov qword [rbp - 0x50], rax
call fcn.1800e0a50
sub rsp, rax
mov rax, qword [rbp - 0x50]
mov r8, rsp
mov qword [rbp + 0x128], r8
call fcn.1800e0a50
sub rsp, rax
mov rax, qword [rbp - 0x50]
mov r8, rsp
mov qword [rbp + 0x130], r8
call fcn.1800e0a50
sub rsp, rax
mov rax, qword [rbp - 0x50]
mov r8, rsp
mov qword [rbp + 0x138], r8
call fcn.1800e0a50
sub rsp, rax
mov rax, qword [rbp - 0x50]
mov r8, rsp
mov qword [rbp + 0x140], r8
call fcn.1800e0a50
sub rsp, rax
mov rax, qword [rbp - 0x50]
mov r8, rsp
mov qword [rbp + 0x148], r8
call fcn.1800e0a50
sub rsp, rax
mov rax, qword [rbp - 0x50]
mov r8, rsp
mov qword [rbp + 0x150], r8
call fcn.1800e0a50
sub rsp, rax
mov rax, qword [rbp - 0x50]
mov r8, rsp
mov qword [rbp + 0x158], r8
call fcn.1800e0a50
sub rsp, rax
mov rax, qword [rbp - 0x20]
mov r8, rsp
mov qword [rbp + 0x160], r8
mov qword [rbp + 0xb0], rdx
mov qword [rbp + 0xa8], rcx
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x168], rax
cmp qword [rbp + 0xb0], 0
sete al
and al, 1
mov byte [rbp + 0x177], al
mov ecx, dword [0x18184c92c]
mov eax, dword [0x18184c928]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7db4a426
mov ecx, 0xb184f962
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x14], eax
jmp 0x18006ab5a
mov dl, byte [rbp + 0x177]
mov eax, 0x110c59a3
mov ecx, 0x4bc1bdd8
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x14], eax
jmp 0x18006ab5a
mov ecx, dword [0x18184c92c]
mov eax, dword [0x18184c928]
mov edx, ecx
add edx, 0x9ca8acd0
sub edx, 1
sub edx, 0x9ca8acd0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd6009205
mov ecx, 0x9db91c76
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x14], eax
jmp 0x18006ab5a
mov ecx, dword [0x18184c92c]
mov eax, dword [0x18184c928]
mov edx, ecx
sub edx, 0xc324bec7
sub edx, 1
add edx, 0xc324bec7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd6009205
mov ecx, 0xaf1aca1
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x14], eax
jmp 0x18006ab5a
mov dword [rbp - 0x14], 0x62d8ed00
jmp 0x18006ab5a
mov rax, qword [rbp + 0x70]
mov ecx, dword [rbp + 0x6c]
imul rcx, rcx, 0x28
add rax, rcx
mov qword [rbp + 0x1b0], rax
mov ecx, dword [0x18184c92c]
mov eax, dword [0x18184c928]
mov edx, ecx
sub edx, 0xa11a1433
sub edx, 1
add edx, 0xa11a1433
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x30dc3bc4
mov ecx, 0x6317bc0d
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x14], eax
jmp 0x18006ab5a
mov edx, dword [rbp + 0x1b8]
mov eax, 0x4ede4627
mov ecx, 0x1711d532
cmp edx, 0
cmovge eax, ecx
mov dword [rbp - 0x14], eax
jmp 0x18006ab5a
mov cl, byte [rbp + 0x1bf]
mov rax, qword [rbp + 0x1c0]
mov byte [rax], cl
mov dword [rbp - 0x14], 0xfb5d9db6
jmp 0x18006ab5a
mov rcx, qword [rbp + 0x80]
mov rax, qword [rbp + 0x90]
mov eax, dword [rax + 0x28]
mov edx, eax
xor eax, eax
sub rax, rcx
xor ecx, ecx
sub rcx, rdx
add rax, rcx
xor ecx, ecx
sub rcx, rax
mov rax, qword [rbp + 0x168]
mov qword [rax + 8], rcx
mov rcx, qword [rbp + 0x80]
mov rax, qword [rbp + 0x168]
mov qword [rax + 0x10], rcx
mov rax, qword [rbp + 0x80]
mov rcx, qword [rbp + 0x90]
mov ecx, dword [rcx + 0x88]
movabs rdx, 0xe997666d1c932c56
add rax, rdx
add rax, rcx
movabs rcx, 0xe997666d1c932c56
sub rax, rcx
mov qword [rbp + 0x50], rax
mov rax, qword [rbp + 0x50]
mov qword [rbp + 0x1c8], rax
mov dword [rbp - 0x14], 0x803e3695
jmp 0x18006ab5a
mov rax, qword [rbp + 0x1c8]
mov eax, dword [rax + 0x18]
mov dword [rbp + 0x4c], eax
mov eax, 0xe9973817
mov ecx, 0xf7be1ad5
cmp dword [rbp + 0x4c], 0
cmova eax, ecx
mov dword [rbp - 0x14], eax
jmp 0x18006ab5a
mov rax, qword [rbp + 0x1d8]
mov eax, dword [rax]
mov ecx, eax
mov rax, qword [rbp + 0x1d0]
movabs rdx, 0x757840f51064e9f4
add rax, rdx
add rax, rcx
movabs rcx, 0x757840f51064e9f4
sub rax, rcx
mov qword [rbp + 0x28], rax
mov dword [rbp + 0x24], 0
mov dword [rbp + 0x24], 0
mov dword [rbp - 0x14], 0xc800928
jmp 0x18006ab5a
mov ecx, dword [0x18184c92c]
mov eax, dword [0x18184c928]
mov edx, ecx
add edx, 0x2d695dac
sub edx, 1
sub edx, 0x2d695dac
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x24b0e858
mov ecx, 0x5edc7501
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x14], eax
jmp 0x18006ab5a
mov eax, dword [rbp + 0x204]
mov dword [rbp + 0x24], eax
mov dword [rbp - 0x14], 0xc800928
jmp 0x18006ab5a
mov rax, qword [rbp + 0x80]
mov rcx, qword [rbp + 0x90]
mov ecx, dword [rcx + 0xe8]
mov edx, ecx
xor ecx, ecx
sub rcx, rdx
sub rax, rcx
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x80]
mov qword [rbp + 0x210], rax
mov rax, qword [rbp + 0x90]
add rax, 0x18
add rax, 0x70
mov qword [rbp + 0x218], rax
mov ecx, dword [0x18184c92c]
mov eax, dword [0x18184c928]
mov edx, ecx
add edx, 0x2b93cd3a
sub edx, 1
sub edx, 0x2b93cd3a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd9168334
mov ecx, 0xb556f3e9
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x14], eax
jmp 0x18006ab5a
mov dword [rbp - 0x14], 0x7bc7aded
jmp 0x18006ab5a
mov rax, qword [rbp + 0x10]
mov eax, dword [rax]
mov dword [rbp + 0x224], eax
mov dword [rbp - 0x14], 0x62a6c9f6
jmp 0x18006ab5a
mov rax, qword [rbp + 0x80]
mov rcx, qword [rbp + 0x10]
mov ecx, dword [rcx + 0xc]
movabs rdx, 0x84322e3cadd0f790
sub rax, rdx
add rax, rcx
movabs rcx, 0x84322e3cadd0f790
add rax, rcx
mov qword [rbp + 8], rax
mov rcx, qword [rbp + 8]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
add rsp, 0x20
mov qword [rbp], rax
mov dword [rbp - 0x14], 0xcd58555
jmp 0x18006ab5a
mov rax, qword [rbp + 0x230]
mov eax, dword [rax]
mov edx, eax
mov rax, qword [rbp + 0x228]
xor ecx, ecx
sub rcx, rdx
sub rax, rcx
mov qword [rbp - 8], rax
mov rax, qword [rbp + 0x80]
mov rcx, qword [rbp + 0x10]
mov ecx, dword [rcx + 0x10]
movabs rdx, 0x3879fb998231b36e
sub rax, rdx
add rax, rcx
movabs rcx, 0x3879fb998231b36e
add rax, rcx
mov qword [rbp - 0x10], rax
mov eax, dword [0x18184c92c]
mov ecx, dword [0x18184c928]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd48c3af4
mov ecx, 0x23995975
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x14], eax
jmp 0x18006ab5a
mov rdx, qword [rbp + 0x238]
mov eax, 0x187434b
mov ecx, 0x20c66cc3
cmp rdx, 0
cmovne eax, ecx
mov dword [rbp - 0x14], eax
mov byte [rbp - 0x15], 0
jmp 0x18006ab5a
mov ecx, dword [0x18184c92c]
mov eax, dword [0x18184c928]
mov edx, ecx
sub edx, 0x487b3881
sub edx, 1
add edx, 0x487b3881
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3b81ce0
mov ecx, 0xe39564cf
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x14], eax
jmp 0x18006ab5a
mov eax, dword [0x18184c92c]
mov ecx, dword [0x18184c928]
mov edx, eax
sub edx, 0xf8b726f2
sub edx, 1
add edx, 0xf8b726f2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9b5b013a
mov ecx, 0xe19e4511
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x14], eax
jmp 0x18006ab5a
mov dl, byte [rbp + 0x25f]
mov eax, 0xdd50cb13
mov ecx, 0xac221d1a
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x14], eax
jmp 0x18006ab5a
mov ecx, dword [0x18184c92c]
mov eax, dword [0x18184c928]
mov edx, ecx
sub edx, 0xa6139685
sub edx, 1
add edx, 0xa6139685
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe03cfa66
mov ecx, 0xe61fb0a7
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x14], eax
jmp 0x18006ab5a
mov dword [rbp - 0x14], 0x5160a881
jmp 0x18006ab5a
mov eax, dword [0x18184c92c]
mov ecx, dword [0x18184c928]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfa702f50
mov ecx, 0x2731a87c
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x14], eax
jmp 0x18006ab5a
mov dword [rbp - 0x14], 0x3f532b1d
jmp 0x18006ab5a
mov rax, qword [rbp + 0xc0]
mov rax, qword [rax]
mov qword [rbp + 0x278], rax
mov rax, qword [rbp - 0x10]
mov qword [rbp + 0x280], rax
mov dword [rbp - 0x14], 0x85ae6a37
jmp 0x18006ab5a
mov rax, qword [rbp + 0x280]
mov rcx, qword [rbp + 0x278]
mov qword [rax], rcx
mov rax, qword [rbp - 0x10]
add rax, 8
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 8]
add rax, 8
mov qword [rbp - 8], rax
mov dword [rbp - 0x14], 0x7434e7ff
jmp 0x18006ab5a
mov rax, qword [rbp + 8]
mov qword [rbp + 0x288], rax
mov dword [rbp - 0x14], 0x8d70665a
jmp 0x18006ab5a
mov rcx, qword [rbp + 8]
sub rsp, 0x20
call sub.msvcrt.dll_strlen
add rsp, 0x20
mov r8, rax
mov rcx, qword [rbp + 0x288]
xor edx, edx
sub rsp, 0x20
call sub.msvcrt.dll_memset
add rsp, 0x20
mov rax, qword [rbp + 0x10]
add rax, 0x14
mov qword [rbp + 0x10], rax
mov dword [rbp - 0x14], 0xa7d6d95a
jmp 0x18006ab5a
mov rax, qword [rbp + 0xe8]
mov ecx, dword [rbp + 0x290]
mov dword [rax], ecx
mov rcx, qword [rbp + 0x80]
mov rax, qword [rbp + 0xe8]
mov eax, dword [rax]
mov edx, eax
xor eax, eax
sub rax, rcx
xor ecx, ecx
sub rcx, rdx
add rax, rcx
xor ecx, ecx
sub rcx, rax
mov rax, qword [rbp + 0xf0]
mov qword [rax], rcx
mov dword [rbp - 0x14], 0xa407c89b
jmp 0x18006ab5a
mov rax, qword [rbp + 0xf0]
mov rax, qword [rax]
mov ecx, dword [rax + 4]
mov rax, qword [rbp + 0xf8]
mov dword [rax], ecx
mov rax, qword [rbp + 0xf8]
mov eax, dword [rax]
mov dword [rbp + 0x294], eax
mov dword [rbp - 0x14], 0x321f409b
jmp 0x18006ab5a
mov rax, qword [rbp + 0xf8]
mov eax, dword [rax]
xor ecx, ecx
sub rcx, 8
add rax, rcx
shr rax, 1
mov qword [rbp + 0x298], rax
mov dword [rbp - 0x14], 0x800d875
jmp 0x18006ab5a
mov eax, dword [0x18184c92c]
mov ecx, dword [0x18184c928]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x411d2c81
mov ecx, 0x81ccb809
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x14], eax
jmp 0x18006ab5a
mov rax, qword [rbp + 0x2a8]
mov ax, word [rax]
shr ax, 0xc
movzx eax, ax
cmp eax, 0xa
sete al
and al, 1
mov byte [rbp + 0x2b7], al
mov ecx, dword [0x18184c92c]
mov eax, dword [0x18184c928]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x411d2c81
mov ecx, 0x536189d
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x14], eax
jmp 0x18006ab5a
mov rax, qword [rbp + 0x2b8]
mov rcx, qword [rbp + 0x2c0]
mov qword [rax], rcx
mov dword [rbp - 0x14], 0x9c67f53a
jmp 0x18006ab5a
mov rax, qword [rbp + 0x108]
mov rax, qword [rax]
mov qword [rbp + 0x2e8], rax
mov dword [rbp - 0x14], 0xbf2691fc
jmp 0x18006ab5a
mov rax, qword [rbp + 0x2e8]
mov ax, word [rax]
shr ax, 0xc
movzx edx, ax
mov eax, 0x9208861b
mov ecx, 0x64a7ed7d
cmp edx, 1
cmove eax, ecx
mov dword [rbp - 0x14], eax
jmp 0x18006ab5a
mov dword [rbp - 0x14], 0x8e84ed14
jmp 0x18006ab5a
mov rax, qword [rbp + 0x108]
mov rax, qword [rax]
mov ax, word [rax]
shr ax, 0xc
movzx eax, ax
mov dword [rbp + 0x2f4], eax
mov dword [rbp - 0x14], 0xf000bd01
jmp 0x18006ab5a
mov rax, qword [rbp + 0x80]
mov qword [rbp + 0x2f8], rax
mov rax, qword [rbp + 0x90]
mov rax, qword [rax + 0x30]
mov qword [rbp + 0x300], rax
mov dword [rbp - 0x14], 0xa7579f99
jmp 0x18006ab5a
mov rax, qword [rbp + 0x2f8]
mov rdx, qword [rbp + 0x300]
xor ecx, ecx
sub rcx, rdx
add rax, rcx
xor rax, 0xffffffffffffffff
mov rdx, 0xffffffffffffffff
xor rdx, 0xffff
mov rcx, 0xffffffffffffffff
movabs r8, 0x46d7546eb0579e14
xor rcx, r8
or rax, rdx
movabs rdx, 0x46d7546eb0579e14
or rcx, rdx
xor rax, 0xffffffffffffffff
and rax, rcx
movzx r8d, ax
mov rax, qword [rbp + 0x110]
mov rax, qword [rax]
mov rcx, qword [rbp + 0x108]
mov rcx, qword [rcx]
mov dx, word [rcx]
mov r9w, 0xffff
xor r9w, 0xfff
mov cx, dx
xor cx, r9w
and cx, dx
movzx ecx, cx
movabs rdx, 0x30f74ae79f596c12
sub rax, rdx
add rax, rcx
movabs rcx, 0x30f74ae79f596c12
add rax, rcx
movzx ecx, word [rax]
xor edx, edx
sub edx, ecx
xor ecx, ecx
sub ecx, r8d
add edx, ecx
xor ecx, ecx
sub ecx, edx
mov word [rax], cx
mov dword [rbp - 0x14], 0xba3b2f92
jmp 0x18006ab5a
mov dword [rbp - 0x14], 0x8e84ed14
jmp 0x18006ab5a
mov dword [rbp - 0x14], 0xdd0d0c71
jmp 0x18006ab5a
mov rax, qword [rbp + 0x108]
mov rax, qword [rax]
xor ecx, ecx
sub rcx, rax
xor eax, eax
sub rax, 2
add rcx, rax
xor eax, eax
sub rax, rcx
mov qword [rbp + 0x308], rax
mov dword [rbp - 0x14], 0xea9b87f9
jmp 0x18006ab5a
mov rax, qword [rbp + 0xf8]
mov eax, dword [rax]
mov qword [rbp + 0x310], rax
mov dword [rbp - 0x14], 0x22cfc2ab
jmp 0x18006ab5a
mov rcx, qword [rbp + 0x318]
mov r9, qword [rbp + 0x128]
mov edx, 0x400
mov r8d, 0x40
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
add rsp, 0x20
mov rax, qword [rbp + 0x130]
mov dword [rax], 0
mov dword [rbp - 0x14], 0x7baba200
jmp 0x18006ab5a
mov rcx, qword [rbp + 0x80]
mov rax, qword [rbp + 0x120]
mov rax, qword [rax]
mov rdx, qword [rbp + 0x130]
mov edx, dword [rdx]
imul rdx, rdx, 0x28
add rax, rdx
mov eax, dword [rax + 0xc]
mov edx, eax
xor eax, eax
sub rax, rcx
xor ecx, ecx
sub rcx, rdx
add rax, rcx
xor ecx, ecx
sub rcx, rax
mov rax, qword [rbp + 0x138]
mov qword [rax], rcx
mov rax, qword [rbp + 0x120]
mov rax, qword [rax]
mov qword [rbp + 0x328], rax
mov rax, qword [rbp + 0x130]
mov eax, dword [rax]
mov qword [rbp + 0x330], rax
mov ecx, dword [0x18184c92c]
mov eax, dword [0x18184c928]
mov edx, ecx
sub edx, 0xab2f2400
sub edx, 1
add edx, 0xab2f2400
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb69daac1
mov ecx, 0xfc9357ae
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x14], eax
jmp 0x18006ab5a
mov rax, qword [rbp + 0x328]
mov rcx, qword [rbp + 0x330]
imul rcx, rcx, 0x28
add rax, rcx
mov ecx, dword [rax + 0x24]
mov rax, qword [rbp + 0x140]
mov dword [rax], ecx
mov rax, qword [rbp + 0x148]
mov dword [rax], 0
mov rax, qword [rbp + 0x140]
mov eax, dword [rax]
mov ecx, 0xffffffff
xor ecx, 0x20000000
mov edx, eax
xor edx, ecx
and edx, eax
mov eax, 0x69ddd70d
mov ecx, 0x9109cc01
cmp edx, 0
cmovne eax, ecx
mov dword [rbp - 0x14], eax
jmp 0x18006ab5a
mov rax, qword [rbp + 0x148]
mov dword [rax], 0x40
mov dword [rbp - 0x14], 0x399dbdc3
jmp 0x18006ab5a
mov rax, qword [rbp + 0x148]
mov dword [rax], 4
mov ecx, dword [0x18184c92c]
mov eax, dword [0x18184c928]
mov edx, ecx
sub edx, 0xe91fecca
sub edx, 1
add edx, 0xe91fecca
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x72b6c501
mov ecx, 0xa4178cb9
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x14], eax
jmp 0x18006ab5a
mov dword [rbp - 0x14], 0x3222c134
jmp 0x18006ab5a
mov rax, qword [rbp + 0x158]
mov eax, dword [rax]
mov dword [rbp + 0x34c], eax
mov dword [rbp - 0x14], 0x5ae5559f
jmp 0x18006ab5a
mov dword [rbp + 0xbc], 0
mov eax, dword [0x18184c92c]
mov ecx, dword [0x18184c928]
mov edx, eax
sub edx, 0x73ed65fe
sub edx, 1
add edx, 0x73ed65fe
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb56901e
mov ecx, 0xb86936e7
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x14], eax
jmp 0x18006ab5a
mov dword [rbp - 0x14], 0x7e55eb83
jmp 0x18006ab5a
mov eax, dword [0x18184c92c]
mov ecx, dword [0x18184c928]
mov edx, eax
sub edx, 0x9dfd196e
sub edx, 1
add edx, 0x9dfd196e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xee17aa0b
mov ecx, 0xe0c07486
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x14], eax
jmp 0x18006ab5a
mov dword [rbp - 0x14], 0xe95f1a2e
jmp 0x18006ab5a
mov rax, qword [rbp + 0x250]
mov rcx, qword [rax]
mov rax, qword [rbp + 0xc8]
mov qword [rax], rcx
mov rax, qword [rbp + 0xc8]
mov dword [rbp - 0x14], 0xe19e4511
jmp 0x18006ab5a
mov rax, qword [rbp + 0x100]
mov dword [rbp - 0x14], 0x720de875
jmp 0x18006ab5a
mov rax, qword [rbp + 0x110]
mov rax, qword [rbp + 0x108]
mov dword [rbp - 0x14], 0xd7efb3ba
jmp 0x18006ab5a
mov rax, qword [rbp + 0x130]
mov dword [rbp - 0x14], 0x25c023fd
jmp 0x18006ab5a
mov rcx, qword [rbp + 0x80]
mov rax, qword [rbp + 0x120]
mov rax, qword [rax]
mov rdx, qword [rbp + 0x130]
mov edx, dword [rdx]
imul rdx, rdx, 0x28
add rax, rdx
mov eax, dword [rax + 0xc]
movabs rdx, 0xbb77d79c02af9c30
add rcx, rdx
add rcx, rax
movabs rax, 0xbb77d79c02af9c30
sub rcx, rax
mov rax, qword [rbp + 0x138]
mov qword [rax], rcx
mov rax, qword [rbp + 0x120]
mov rax, qword [rbp + 0x130]
mov dword [rbp - 0x14], 0xa15e8393
jmp 0x18006ab5a
jmp 0x1800666a4