Function at 0x180166c50
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1420]
mov eax, 0x1520
call fcn.1801cde20
sub rsp, rax
movaps xmmword [rsp + 0x1510], xmm6
movaps xmmword [rsp + 0x1500], xmm7
movaps xmmword [rsp + 0x14f0], xmm8
movaps xmmword [rsp + 0x14e0], xmm9
movaps xmmword [rsp + 0x14d0], xmm10
movaps xmmword [rsp + 0x14c0], xmm11
movaps xmmword [rsp + 0x14b0], xmm12
movaps xmmword [rsp + 0x14a0], xmm13
movaps xmmword [rsp + 0x1490], xmm14
movaps xmmword [rsp + 0x1480], xmm15
mov rax, qword [0x18027f300]
xor rax, rsp
mov qword [rbp + 0x1370], rax
mov r13, rdx
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], rcx
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
xor esi, esi
mov qword [rbp - 0x60], rsi
movsd xmm0, qword [0x18024e018]
comisd xmm0, xmmword [0x18028d070]
jbe 0x1801676af
mov rax, qword [0x18028d438]
mov rbx, qword [rcx + rax]
add rbx, 0x50
call fcn.1801664d0
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x70], esi
mov dword [rsp + 0x74], 1
lea rdi, [rbx + 0x10]
mov qword [rsp + 0x78], rdi
mov dword [rbp - 0x80], 0xffffffff
mov qword [rbp - 0x7c], rsi
cmp dword [rdi + 0x18], esi
je 0x180166d57
lea rcx, [rsp + 0x70]
call fcn.1800dc420
mov qword [rsp + 0x48], rbx
movups xmm0, xmmword [rsp + 0x70]
movups xmmword [rsp + 0x50], xmm0
movups xmm2, xmmword [rbp - 0x80]
movups xmmword [rsp + 0x60], xmm2
mov qword [rbp - 0x58], rbx
movups xmm0, xmmword [rsp + 0x48]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rsp + 0x58]
movups xmmword [rbp - 0x40], xmm1
movaps xmm0, xmm2
unpckhpd xmm0, xmm2
movsd qword [rbp - 0x30], xmm0
mov edx, dword [rdi + 0x18]
mov eax, edx
sar eax, 5
mov dword [rsp + 0x70], eax
mov ecx, edx
and ecx, 0x1f
mov eax, 1
shl eax, cl
mov dword [rsp + 0x74], eax
mov qword [rsp + 0x78], rdi
mov dword [rbp - 0x80], esi
mov dword [rbp - 0x7c], edx
mov dword [rbp - 0x78], edx
movups xmm1, xmmword [rbp - 0x80]
movups xmmword [rsp + 0x60], xmm1
movq rcx, xmm1
shr rcx, 0x20
psrldq xmm2, 4
movd eax, xmm2
cmp eax, ecx
jge 0x1801679ec
mov edi, dword [0x18028b950]
mov r12d, 8
xorps xmm11, xmm11
movss xmm9, dword [0x18024dd3c]
movss xmm13, dword [0x18024dda0]
xorps xmm10, xmm10
movsd xmm14, qword [0x18024dd70]
movsd xmm12, qword [0x18024e080]
movss xmm15, dword [0x18024dc9c]
mov eax, dword [rbp - 0x34]
cdqe
lea r14, [rax + rax*2]
mov rax, qword [rbp - 0x50]
mov r15, qword [rax]
mov rbx, qword [r15 + r14*8]
test byte [rbx + 0x28], 1
jne 0x180166e5c
call fcn.1801664d0
mov rcx, rax
call fcn.180161f40
xorps xmm2, xmm2
cvtss2sd xmm2, xmm0
movsd xmm1, qword [rbx + 0x10]
comisd xmm1, xmm2
jae 0x180166f6a
mov rax, qword [r15 + r14*8]
mov rsi, qword [rax]
mov qword [rsp + 0x20], rsi
test rsi, rsi
je 0x180166f6a
mov rcx, rsi
call fcn.180087920
test al, al
je 0x180166ea7
mov rdx, qword [rbp - 0x68]
cmp rdx, qword [rbp - 0x60]
je 0x180166e94
mov qword [rdx], rsi
add qword [rbp - 0x68], 8
jmp 0x180166f6a
lea r8, [rsp + 0x20]
lea rcx, [rbp - 0x70]
call fcn.1800a3160
jmp 0x180166f6a
mov rax, qword gs:[0x58]
mov rdi, qword [rax + rdi*8]
mov eax, dword [r12 + rdi]
cmp dword [0x180290ae8], eax
jle 0x180166f45
lea rcx, [0x180290ae8]
call fcn.1801cd190
cmp dword [0x180290ae8], 0xffffffff
jne 0x180166f45
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xor eax, eax
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], rax
lea r8d, [rax + 0xa]
lea rdx, str.RemoteRole
lea rcx, [rsp + 0x70]
call fcn.1800614c0
nop
mov r8b, 1
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.180169870
mov rcx, rax
test rax, rax
jne 0x180166f1e
lea eax, [rcx - 1]
jmp 0x180166f28
mov rax, qword [0x18028d060]
mov eax, dword [rcx + rax]
mov dword [0x180290acc], eax
lea rcx, [rsp + 0x70]
call fcn.1800652f0
nop
lea rcx, [0x180290ae8]
call fcn.1801cd124
movsxd rax, dword [0x180290acc]
cmp byte [rax + rsi], 0
jne 0x180166f9d
mov rdx, qword [rbp - 0x68]
cmp rdx, qword [rbp - 0x60]
je 0x180166f8d
mov qword [rdx], rsi
add qword [rbp - 0x68], 8
mov edi, dword [0x18028b950]
mov eax, dword [rbp - 0x44]
not eax
and dword [rbp - 0x38], eax
lea rcx, [rbp - 0x48]
call fcn.1800dc420
mov eax, dword [rbp - 0x34]
cmp eax, dword [rsp + 0x64]
jl 0x180166e22
jmp 0x1801679ec
lea r8, [rsp + 0x20]
lea rcx, [rbp - 0x70]
call fcn.1800a3160
jmp 0x180166f64
mov eax, dword [r12 + rdi]
cmp dword [0x180290b40], eax
jle 0x18016702e
lea rcx, [0x180290b40]
call fcn.1801cd190
cmp dword [0x180290b40], 0xffffffff
jne 0x18016702e
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xor eax, eax
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], rax
lea r8d, [rax + 0xb]
lea rdx, str.NetDormancy
lea rcx, [rsp + 0x70]
call fcn.1800614c0
nop
mov r8b, 1
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.180169870
mov rcx, rax
test rax, rax
jne 0x180167007
lea eax, [rcx - 1]
jmp 0x180167011
mov rax, qword [0x18028d060]
mov eax, dword [rcx + rax]
mov dword [0x180290b30], eax
lea rcx, [rsp + 0x70]
call fcn.1800652f0
nop
lea rcx, [0x180290b40]
call fcn.1801cd124
movsxd rax, dword [0x180290b30]
cmp byte [rax + rsi], 4
jne 0x18016704b
mov rcx, rsi
call fcn.180087ac0
test al, al
jne 0x180166f64
mov rax, qword [r15 + r14*8]
movsd xmm0, qword [rax + 0x18]
ucomisd xmm0, xmm11
jp 0x180167090
jne 0x180167090
mov rcx, qword [rsp + 0x28]
call fcn.180161f40
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
mov rax, qword [r15 + r14*8]
movsd qword [rax + 0x18], xmm1
mov rcx, rsi
call fcn.180087e80
movaps xmm0, xmm9
divss xmm0, dword [rax]
mov rax, qword [r15 + r14*8]
movss dword [rax + 0x20], xmm0
mov rbx, qword [r15 + r14*8]
mov rcx, qword [rsp + 0x28]
call fcn.180161f40
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
subsd xmm1, qword [rbx + 0x18]
cvtpd2ps xmm7, xmm1
mov edi, dword [0x18028b950]
mov rbx, qword gs:[0x58]
comiss xmm7, xmm13
jbe 0x18016733e
mov rax, qword [rbx + rdi*8]
mov ecx, dword [r12 + rax]
cmp dword [0x180290a90], ecx
jle 0x18016715c
lea rcx, [0x180290a90]
call fcn.1801cd190
cmp dword [0x180290a90], 0xffffffff
jne 0x18016715c
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xor eax, eax
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], rax
lea r8d, [rax + 0x15]
lea rdx, str.MinNetUpdateFrequency
lea rcx, [rsp + 0x70]
call fcn.1800614c0
nop
mov r8b, 1
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.180169870
mov rcx, rax
test rax, rax
jne 0x180167135
lea eax, [rcx - 1]
jmp 0x18016713f
mov rax, qword [0x18028d060]
mov eax, dword [rcx + rax]
mov dword [0x180290b00], eax
lea rcx, [rsp + 0x70]
call fcn.1800652f0
nop
lea rcx, [0x180290a90]
call fcn.1801cd124
movsxd rax, dword [0x180290b00]
movss xmm0, dword [rax + rsi]
ucomiss xmm0, xmm10
jp 0x180167177
jne 0x180167177
mov dword [rax + rsi], 0x40000000
mov rcx, rsi
call fcn.180087e80
movaps xmm8, xmm9
divss xmm8, dword [rax]
mov rcx, rsi
call fcn.180087f50
movaps xmm0, xmm9
divss xmm0, dword [rax]
comiss xmm0, xmm8
jbe 0x1801671b0
mov rcx, rsi
call fcn.180087f50
movaps xmm6, xmm9
divss xmm6, dword [rax]
jmp 0x1801671b4
movaps xmm6, xmm8
mov dword [rsp + 0x40], 0x3f800000
mov dword [rsp + 0x38], 0
subss xmm7, xmm13
divss xmm7, dword [0x18024e050]
movss dword [rsp + 0x3c], xmm7
comiss xmm10, xmm7
lea rcx, [rsp + 0x38]
lea rax, [rsp + 0x3c]
cmovbe rcx, rax
comiss xmm7, xmm9
lea rax, [rsp + 0x40]
cmovbe rax, rcx
movss xmm7, dword [rax]
movd ecx, xmm7
btr ecx, 0x1f
cmp ecx, 0x7f800000
jae 0x1801672bc
movd eax, xmm8
btr eax, 0x1f
cmp eax, 0x7f800000
jae 0x1801672bc
movd eax, xmm6
btr eax, 0x1f
cmp eax, 0x7f800000
jae 0x1801672bc
comiss xmm10, xmm8
jb 0x180167241
comiss xmm6, xmm10
jae 0x18016724d
comiss xmm8, xmm10
jb 0x180167263
comiss xmm10, xmm6
jb 0x180167263
movaps xmm0, xmm9
subss xmm0, xmm7
mulss xmm0, xmm8
mulss xmm7, xmm6
jmp 0x180167331
ucomiss xmm7, xmm9
jp 0x180167273
jne 0x180167273
movaps xmm0, xmm6
jmp 0x180167335
movaps xmm1, xmm6
subss xmm1, xmm8
movaps xmm2, xmm8
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_fmaf
xor ecx, ecx
comiss xmm6, xmm8
seta cl
xor eax, eax
comiss xmm7, xmm9
seta al
cmp eax, ecx
jne 0x1801672ae
comiss xmm6, xmm0
jbe 0x180167335
movaps xmm0, xmm6
jmp 0x180167335
comiss xmm0, xmm6
jbe 0x180167335
movaps xmm0, xmm6
jmp 0x180167335
movd eax, xmm8
btr eax, 0x1f
cmp eax, 0x7f800000
ja 0x180167329
movd eax, xmm6
btr eax, 0x1f
cmp eax, 0x7f800000
ja 0x180167329
movd eax, xmm7
btr eax, 0x1f
cmp eax, 0x7f800000
jbe 0x1801672ef
movaps xmm0, xmm7
jmp 0x180167331
cmp ecx, 0x7f800000
jae 0x18016731b
comiss xmm10, xmm7
jbe 0x180167307
movaps xmm0, xmm8
subss xmm0, xmm6
jmp 0x180167335
comiss xmm9, xmm7
jae 0x18016724d
movaps xmm0, xmm6
subss xmm0, xmm8
jmp 0x180167335
movaps xmm0, xmm6
subss xmm0, xmm8
mulss xmm0, xmm7
jmp 0x180167335
movaps xmm0, xmm6
addss xmm0, xmm8
addss xmm0, xmm7
mov rax, qword [r15 + r14*8]
movss dword [rax + 0x20], xmm0
mov rax, qword [r15 + r14*8]
test byte [rax + 0x28], 1
jne 0x18016762b
mov rcx, rsi
call fcn.180087e80
movaps xmm7, xmm9
divss xmm7, dword [rax]
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x1364], 0xffffffff
mov dword [rbp - 0x1c], eax
mov edx, 1
nop dword [rax]
nop dword [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 - 0x1c], eax
inc rdx
cmp rdx, 0x270
jb 0x180167380
mov edx, 0x270
mov dword [rbp - 0x20], edx
movaps xmm1, xmm11
movaps xmm2, xmm14
mov r10d, 2
cmp edx, 0x270
jne 0x180167411
lea r8, [rbp - 0x18]
mov r9d, edx
nop dword [rax]
nop dword [rax + rax]
mov edx, dword [r8 - 4]
xor edx, dword [r8]
btr edx, 0x1f
xor edx, dword [r8 - 4]
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
and ecx, 0x9908b0df
xor ecx, dword [r8 + 0x630]
shr edx, 1
xor ecx, edx
mov dword [r8 + 0x9bc], ecx
lea r8, [r8 + 4]
sub r9, 1
jne 0x1801673d0
mov edx, dword [rbp - 0x20]
jmp 0x1801674eb
cmp edx, 0x4e0
jb 0x1801674eb
xor r8d, r8d
mov eax, dword [rbp + r8*4 + 0x9a4]
mov edx, eax
xor edx, dword [rbp + r8*4 + 0x9a8]
btr edx, 0x1f
xor edx, eax
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
and ecx, 0x9908b0df
xor ecx, dword [rbp + r8*4 + 0xfd8]
shr edx, 1
xor ecx, edx
mov dword [rbp + r8*4 - 0x1c], ecx
inc r8
cmp r8, 0xe3
jb 0x180167420
mov r8d, 0xe3
nop dword [rax]
mov eax, dword [rbp + r8*4 + 0x9a4]
mov edx, eax
xor edx, dword [rbp + r8*4 + 0x9a8]
btr edx, 0x1f
xor edx, eax
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
and ecx, 0x9908b0df
shr edx, 1
xor ecx, edx
xor ecx, dword [rbp + r8*4 - 0x3a8]
mov dword [rbp + r8*4 - 0x1c], ecx
inc r8
cmp r8, 0x26f
jb 0x180167470
mov edx, dword [rbp + 0x1360]
and edx, 0x80000000
mov eax, dword [rbp - 0x1c]
btr eax, 0x1f
or edx, eax
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
and ecx, 0x9908b0df
shr edx, 1
xor ecx, edx
xor ecx, dword [rbp + 0x614]
mov dword [rbp + 0x9a0], ecx
xor edx, edx
mov dword [rbp - 0x20], edx
mov eax, edx
mov ecx, dword [rbp + rax*4 - 0x1c]
inc edx
mov dword [rbp - 0x20], edx
mov eax, ecx
shr eax, 0xb
and eax, dword [rbp + 0x1364]
xor ecx, eax
mov eax, ecx
and eax, 0xff3a58ad
shl eax, 7
xor ecx, eax
mov eax, ecx
and eax, 0xffffdf8c
shl eax, 0xf
xor ecx, eax
mov eax, ecx
shr eax, 0x12
xor eax, ecx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
subsd xmm0, xmm11
mulsd xmm0, xmm2
addsd xmm1, xmm0
mulsd xmm2, xmm12
sub r10, 1
jne 0x1801673b5
divsd xmm1, xmm2
addsd xmm1, xmm11
xorps xmm6, xmm6
cvtsd2ss xmm6, xmm1
mov rcx, qword [rsp + 0x28]
call fcn.180161f40
mulss xmm6, xmm15
addss xmm0, xmm6
addss xmm0, xmm7
cvtss2sd xmm0, xmm0
mov rax, qword [r15 + r14*8]
movsd qword [rax + 0x10], xmm0
mov rax, qword [rbx + rdi*8]
mov ecx, dword [r12 + rax]
cmp dword [0x180290b0c], ecx
jle 0x180167611
lea rcx, [0x180290b0c]
call fcn.1801cd190
cmp dword [0x180290b0c], 0xffffffff
jne 0x180167611
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xor eax, eax
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], rax
lea r8d, [rax + 4]
lea rdx, str.Time
lea rcx, [rsp + 0x70]
call fcn.1800614c0
nop
mov r8b, 1
lea rdx, [rsp + 0x70]
mov rcx, qword [rsp + 0x30]
call fcn.180169870
mov rcx, rax
test rax, rax
jne 0x1801675ea
lea eax, [rcx - 1]
jmp 0x1801675f4
mov rax, qword [0x18028d060]
mov eax, dword [rcx + rax]
mov dword [0x180290aa0], eax
lea rcx, [rsp + 0x70]
call fcn.1800652f0
nop
lea rcx, [0x180290b0c]
call fcn.1801cd124
movsxd rax, dword [0x180290aa0]
mov rcx, qword [rsp + 0x30]
movss xmm0, dword [rax + rcx]
mov rax, qword [r15 + r14*8]
movss dword [rax + 0x24], xmm0
mov rax, qword [r15 + r14*8]
and dword [rax + 0x28], 0xfffffffe
mov rax, qword [r15 + r14*8]
mov qword [rsp + 0x20], rax
mov rdx, qword [r13 + 8]
cmp rdx, qword [r13 + 0x10]
je 0x180167650
mov qword [rdx], rax
add qword [r13 + 8], 8
jmp 0x18016765d
lea r8, [rsp + 0x20]
mov rcx, r13
call fcn.1800a3160
mov rax, qword [rbx + rdi*8]
mov ecx, dword [r12 + rax]
cmp dword [0x180290ad4], ecx
jle 0x18016769c
lea rcx, [0x180290ad4]
call fcn.1801cd190
cmp dword [0x180290ad4], 0xffffffff
jne 0x18016769c
mov rax, qword [0x18028d518]
mov qword [0x180290b90], rax
lea rcx, [0x180290ad4]
call fcn.1801cd124
mov rdx, qword [rsp + 0x30]
mov rcx, rsi
call qword [0x180290b90]
jmp 0x180166f6a
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov r13d, dword [0x18028b950]
mov rdi, qword gs:[0x58]
mov esi, 8
mov r12, qword [rdi + r13*8]
mov eax, dword [r12 + rsi]
cmp dword [0x18028e724], eax
jle 0x18016771b
lea rcx, [0x18028e724]
call fcn.1801cd190
cmp dword [0x18028e724], 0xffffffff
jne 0x18016771b
mov rax, qword [0x18028d380]
xor r9d, r9d
lea r8, str._Script_Engine.Actor
xor edx, edx
xor ecx, ecx
call rax
mov qword [0x18028e6d8], rax
lea rcx, [0x18028e724]
call fcn.1801cd124
mov rbx, qword [0x18028e6d8]
call fcn.1801664d0
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.180161e20
mov rcx, qword [rsp + 0x70]
mov eax, dword [rsp + 0x78]
test eax, eax
jle 0x1801679cf
mov r14, rcx
mov r15d, eax
nop
mov rbx, qword [r14]
mov qword [rsp + 0x20], rbx
mov rcx, rbx
call fcn.180087920
test al, al
je 0x18016778e
mov rdx, qword [rbp - 0x68]
cmp rdx, qword [rbp - 0x60]
je 0x18016777b
mov qword [rdx], rbx
add qword [rbp - 0x68], 8
jmp 0x1801679b8
lea r8, [rsp + 0x20]
lea rcx, [rbp - 0x70]
call fcn.1800a3160
jmp 0x1801679b8
mov rdi, qword [rdi + r13*8]
mov eax, dword [rsi + rdi]
cmp dword [0x180290ab8], eax
jle 0x180167824
lea rcx, [0x180290ab8]
call fcn.1801cd190
cmp dword [0x180290ab8], 0xffffffff
jne 0x180167824
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xor eax, eax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rax
lea r8d, [rax + 0xa]
lea rdx, str.RemoteRole
lea rcx, [rsp + 0x48]
call fcn.1800614c0
nop
mov r8b, 1
lea rdx, [rsp + 0x48]
mov rcx, rbx
call fcn.180169870
mov rcx, rax
test rax, rax
jne 0x1801677fd
lea eax, [rcx - 1]
jmp 0x180167807
mov rax, qword [0x18028d060]
mov eax, dword [rcx + rax]
mov dword [0x180290b78], eax
lea rcx, [rsp + 0x48]
call fcn.1800652f0
nop
lea rcx, [0x180290ab8]
call fcn.1801cd124
movsxd rax, dword [0x180290b78]
cmp byte [rax + rbx], 0
jne 0x18016785b
mov rdx, qword [rbp - 0x68]
cmp rdx, qword [rbp - 0x60]
je 0x180167848
mov qword [rdx], rbx
add qword [rbp - 0x68], 8
jmp 0x1801679af
lea r8, [rsp + 0x20]
lea rcx, [rbp - 0x70]
call fcn.1800a3160
jmp 0x1801679af
mov eax, dword [rsi + rdi]
cmp dword [0x180290b08], eax
jle 0x1801678ef
lea rcx, [0x180290b08]
call fcn.1801cd190
cmp dword [0x180290b08], 0xffffffff
jne 0x1801678ef
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xor edi, edi
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], rdi
lea r8d, [rdi + 0xb]
lea rdx, str.NetDormancy
lea rcx, [rsp + 0x48]
call fcn.1800614c0
nop
mov r8b, 1
lea rdx, [rsp + 0x48]
mov rcx, rbx
call fcn.180169870
mov rcx, rax
test rax, rax
jne 0x1801678c6
lea eax, [rdi - 1]
jmp 0x1801678d0
mov rax, qword [0x18028d060]
mov eax, dword [rcx + rax]
mov dword [0x180290b8c], eax
lea rcx, [rsp + 0x48]
call fcn.1800652f0
nop
lea rcx, [0x180290b08]
call fcn.1801cd124
jmp 0x1801678f1
xor edi, edi
movsxd rax, dword [0x180290b8c]
cmp byte [rax + rbx], 4
jne 0x18016790e
mov rcx, rbx
call fcn.180087ac0
test al, al
jne 0x1801679af
mov ecx, 0xd0
call fcn.1801cd814
mov qword [rsp + 0x20], rax
mov qword [rax + 0x30], rdi
mov qword [rax + 0x38], 0
mov qword [rax + 0x80], rdi
mov qword [rax + 0x88], 0
mov qword [rsp + 0x20], rax
mov qword [rax], rbx
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x18016795c
mov qword [rdx], rax
add qword [rcx + 8], 8
jmp 0x180167966
lea r8, [rsp + 0x20]
call fcn.1800a3160
mov eax, dword [r12 + rsi]
cmp dword [0x180290b88], eax
jle 0x1801679a1
lea rcx, [0x180290b88]
call fcn.1801cd190
cmp dword [0x180290b88], 0xffffffff
jne 0x1801679a1
mov rax, qword [0x18028d518]
mov qword [0x180290b18], rax
lea rcx, [0x180290b88]
call fcn.1801cd124
mov rdx, qword [rsp + 0x30]
mov rcx, rbx
call qword [0x180290b18]
mov rdi, qword gs:[0x58]
add r14, 8
sub r15, 1
jne 0x180167750
mov eax, dword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1801679ec
test eax, eax
jle 0x1801679ec
movsxd rdx, eax
shl rdx, 3
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
nop
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x180167a2d
mov rdx, qword [rbp - 0x60]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x180167a28
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180167a28
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1801cd070
mov rcx, qword [rbp + 0x1370]
xor rcx, rsp
call fcn.1801ccf80
lea r11, [rsp + 0x1520]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret