Function at 0x1800a3350
Capabilities:
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x808
movaps xmmword [rsp + 0x7f0], xmm13
movaps xmmword [rsp + 0x7e0], xmm12
movaps xmmword [rsp + 0x7d0], xmm11
movaps xmmword [rsp + 0x7c0], xmm10
movaps xmmword [rsp + 0x7b0], xmm9
movaps xmmword [rsp + 0x7a0], xmm8
movaps xmmword [rsp + 0x790], xmm7
movaps xmmword [rsp + 0x780], xmm6
mov qword [rsp + 0x270], r9
mov qword [rsp + 0x1a8], r8
mov qword [rsp + 0x268], rdx
mov word [rsp + 0xe6], cx
lea rax, [rsp + 0x170]
mov qword [rsp + 0x1b0], rax
mov rax, qword [rsp + 0x1b0]
movaps xmm0, xmmword [str.__HyohvCD_]
movaps xmmword [rsp + 0x170], xmm0
mov byte [rsp + 0x180], 0x4c
lea rax, [rsp + 0x181]
lea rcx, [rsp + 0x182]
mov qword [rsp + 0x90], rcx
mov edx, 0xf8f0fd36
mov ecx, 0xe08ecee7
nop word [rax + rax]
cmp edx, 0xe08ecee7
je 0x1800a3449
cmp edx, 0xf8f0fd36
jne 0x1800a3420
mov byte [rax], 0
add rax, 1
cmp rax, qword [rsp + 0x90]
mov edx, 0xf8f0fd36
cmove edx, ecx
jmp 0x1800a3420
xor ecx, ecx
mov eax, 0x92b8b8e7
mov edx, 0xa4395da1
nop word cs:[rax + rax]
nop
cmp edx, 0x92b8b8e7
je 0x1800a34a0
cmp edx, 0xe60281ab
je 0x1800a34bf
cmp edx, 0xa4395da1
jne 0x1800a3460
mov dword [rsp + 0x60], ecx
movsxd rdx, dword [rsp + 0x60]
mov qword [rsp + 0x90], rdx
mov rdx, qword [rsp + 0x90]
cmp rdx, 0x11
mov edx, 0xe60281ab
cmovb edx, eax
jmp 0x1800a3460
mov rcx, qword [rsp + 0x90]
mov edx, dword [rsp + 0x60]
add dl, 0x19
xor byte [rsp + rcx + 0x170], dl
mov ecx, dword [rsp + 0x60]
add ecx, 1
jmp 0x1800a3450
mov byte [rsp + 0x181], 0
lea rcx, [rsp + 0x170]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
setne byte [rsp + 0x7f]
lea rax, [rsp + 0x140]
mov qword [rsp + 0x1b8], rax
mov rax, qword [rsp + 0x1b8]
lea rax, [rsp + 0x190]
mov qword [rsp + 0x1c0], rax
mov rax, qword [rsp + 0x1c0]
lea rax, [rsp + 0x130]
mov qword [rsp + 0x1c8], rax
mov rax, qword [rsp + 0x1c8]
lea rax, [rsp + 0x240]
mov qword [rsp + 0x1d0], rax
mov rax, qword [rsp + 0x1d0]
lea rax, [rsp + 0x120]
mov qword [rsp + 0x1d8], rax
mov rax, qword [rsp + 0x1d8]
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x1e0], rax
mov rax, qword [rsp + 0x1e0]
lea rax, [rsp + 0x110]
mov qword [rsp + 0x1e8], rax
mov rax, qword [rsp + 0x1e8]
lea rax, [rsp + 0x100]
mov qword [rsp + 0x1f0], rax
movaps xmm8, xmmword [0x1800d8780]
movaps xmm9, xmmword [0x1800d8770]
movaps xmm13, xmmword [0x1800d8740]
movaps xmm7, xmmword [0x1800d8750]
movaps xmm10, xmmword [str.CmXnx]
movaps xmm11, xmmword [0x1800d8710]
movaps xmm12, xmmword [0x1800d8720]
xorps xmm6, xmm6
mov rax, qword [rsp + 0x1a8]
lea rax, [rax + 0x28]
mov qword [rsp + 0x260], rax
mov eax, 0xb62acf9f
mov r12, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r15, [rsp + 0x90]
mov esi, 0x7d452c6
jmp 0x1800a3626
mov byte [rsp + 0x14e], 0
lea rcx, [rsp + 0x140]
call r12
test rax, rax
mov eax, 0x3bc1c7bf
mov ecx, 0xba420c0c
nop
cmove eax, ecx
mov r14b, 1
cmp eax, 0x7776372
jg 0x1800a36f0
cmp eax, 0xbd543b06
jle 0x1800a3750
cmp eax, 0xdea127b3
jg 0x1800a3897
cmp eax, 0xd26e6b9b
jg 0x1800a3975
cmp eax, 0xbd543b07
je 0x1800a3be2
cmp eax, 0xbdd88c5d
jne 0x1800a3626
movaps xmmword [rsp + 0x240], xmm9
movabs rax, 0x5501424a73584e47
mov qword [rsp + 0x250], rax
mov word [rsp + 0x258], 0x5749
lea rax, [rsp + 0x25b]
mov qword [rsp + 0x90], rax
mov ecx, 0x102f10c9
lea rax, [rsp + 0x25a]
nop word cs:[rax + rax]
cmp ecx, 0xbb43f8c
je 0x1800a3c4f
cmp ecx, 0x102f10c9
jne 0x1800a36b0
mov byte [rax], 0
add rax, 1
cmp rax, qword [rsp + 0x90]
mov ecx, 0x102f10c9
mov edx, 0xbb43f8c
cmove ecx, edx
jmp 0x1800a36b0
cmp eax, 0x4f30ff56
jg 0x1800a37a0
cmp eax, 0x11df3cf5
jle 0x1800a38bd
cmp eax, 0x3bc1c7be
jg 0x1800a39a0
cmp eax, 0x11df3cf6
je 0x1800a3cfd
cmp eax, 0x350f91f7
jne 0x1800a3626
mov rdx, qword [rsp + 0x218]
mov rcx, qword [rsp + 0x150]
mov r8d, 0x274
call fcn.1800cf7d0
mov eax, 0xac963975
jmp 0x1800a3626
cmp eax, 0xace4d14e
jle 0x1800a38e3
cmp eax, 0xb8161550
jg 0x1800a3a32
cmp eax, 0xace4d14f
je 0x1800a3d74
cmp eax, 0xb62acf9f
jne 0x1800a3626
mov rax, qword [rsp + 0x1f0]
cmp byte [rsp + 0x7f], 0
mov eax, 0x45c5e24a
mov ecx, 0x3bc1c7bf
cmovne eax, ecx
mov r14b, 1
jmp 0x1800a3626
cmp eax, 0x5bca4fba
jle 0x1800a3924
cmp eax, 0x7110c18c
jg 0x1800a3ab2
cmp eax, 0x5bca4fbb
je 0x1800a3d9c
cmp eax, 0x611f35e0
jne 0x1800a3626
mov rax, qword [rsp + 0x270]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x200]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movups xmm2, xmmword [rax + 0x20]
movups xmm3, xmmword [rax + 0x30]
movups xmmword [0x1800f6bf0], xmm0
movups xmmword [0x1800f6c00], xmm1
movups xmmword [0x1800f6c10], xmm2
movups xmmword [0x1800f6c20], xmm3
movups xmm0, xmmword [rax + 0x40]
movups xmmword [0x1800f6c30], xmm0
movups xmm0, xmmword [rax + 0x50]
movups xmmword [0x1800f6c40], xmm0
movups xmm0, xmmword [rax + 0x60]
movups xmmword [0x1800f6c50], xmm0
mov rax, qword [rax + 0x70]
mov qword [0x1800f6c60], rax
lea rax, [rsp + 0x2f8]
mov qword [rsp + 0x150], rax
mov rax, qword [rsp + 0x150]
lea rcx, [rsp + 0xfc]
mov qword [rsp + 0x208], rcx
mov rax, qword [rsp + 0x208]
call fcn.1800a0d40
mov qword [rsp + 0x210], rax
mov rax, qword [rsp + 0x1f8]
mov eax, dword [rax + 8]
mov dword [rsp + 0x16c], eax
mov eax, 0xace4d14f
xor r13d, r13d
jmp 0x1800a3626
cmp eax, 0xed4f68b4
jg 0x1800a3b0b
cmp eax, 0xdea127b4
je 0x1800a3e12
cmp eax, 0xe56c3078
je 0x1800a3b4e
jmp 0x1800a3626
cmp eax, 0xf2fbbb4
jg 0x1800a3b63
cmp eax, 0x7776373
je 0x1800a3b4e
cmp eax, 0xcb07270
je 0x1800a398b
jmp 0x1800a3626
cmp eax, 0x9f8c402d
je 0x1800a3e92
cmp eax, 0xa72074ce
je 0x1800a3ea7
cmp eax, 0xac963975
jne 0x1800a3626
mov eax, dword [rsp + 0xdc]
cmp eax, dword [rsp + 0xfc]
mov eax, 0xb8161551
mov ecx, 0x4f30ff57
cmovl eax, ecx
jmp 0x1800a3626
cmp eax, 0x4f30ff57
je 0x1800a3f22
cmp eax, 0x50350d0b
je 0x1800a3fa7
cmp eax, 0x524b452a
jne 0x1800a3626
mov rax, qword [rsp + 0x230]
mov rax, qword [rsp + 0x228]
mov rax, qword [rsp + 0x220]
mov eax, 0xed4f68b5
mov ecx, dword [rsp + 0xe0]
mov dword [rsp + 0xf8], ecx
jmp 0x1800a3626
cmp eax, 0xd26e6b9c
je 0x1800a3fd2
cmp eax, 0xd32f1e24
jne 0x1800a3626
mov eax, 0xff763ea
mov dword [rsp + 0xd8], 0
jmp 0x1800a3626
cmp eax, 0x3bc1c7bf
je 0x1800a3fe8
cmp eax, 0x45c5e24a
jne 0x1800a3626
movabs rax, 0x7f7a737c5b77694d
mov qword [rsp + 0x140], rax
mov dword [rsp + 0x148], 0x410d6174
mov word [rsp + 0x14c], 0x435d
lea rax, [rsp + 0x14f]
mov qword [rsp + 0x90], rax
mov ecx, 0xd0a5bf61
lea rax, [rsp + 0x14e]
nop word [rax + rax]
cmp ecx, 0x43ff06f1
je 0x1800a4046
cmp ecx, 0xd0a5bf61
jne 0x1800a3a00
mov byte [rax], 0
add rax, 1
cmp rax, qword [rsp + 0x90]
mov ecx, 0xd0a5bf61
mov edx, 0x43ff06f1
cmove ecx, edx
jmp 0x1800a3a00
cmp eax, 0xb8161551
je 0x1800a40d9
cmp eax, 0xba420c0c
jne 0x1800a3626
movaps xmmword [rsp + 0x190], xmm8
mov dword [rsp + 0x1a0], 0x49534f07
lea rax, [rsp + 0x1a5]
mov qword [rsp + 0x90], rax
mov ecx, 0xebaa9a8a
lea rax, [rsp + 0x1a4]
nop dword [rax]
cmp ecx, 0x4e2fd89c
je 0x1800a40ee
cmp ecx, 0xebaa9a8a
jne 0x1800a3a80
mov byte [rax], 0
add rax, 1
cmp rax, qword [rsp + 0x90]
mov ecx, 0xebaa9a8a
mov edx, 0x4e2fd89c
cmove ecx, edx
jmp 0x1800a3a80
cmp eax, 0x7110c18d
je 0x1800a416f
cmp eax, 0x7857e837
jne 0x1800a3626
movsxd rax, dword [rsp + 0xdc]
imul rax, rax, 0x274
add rax, qword [rsp + 0x210]
mov qword [rsp + 0x218], rax
mov rax, qword [rsp + 0x218]
mov eax, dword [rax + 0x24]
cmp eax, dword [rsp + 0x16c]
mov eax, 0xd26e6b9c
mov ecx, 0x350f91f7
cmove eax, ecx
jmp 0x1800a3626
cmp eax, 0xed4f68b5
je 0x1800a41f2
cmp eax, 0xfa81f417
jne 0x1800a3626
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0x1f8], rax
mov rax, qword [rsp + 0x1f8]
cmp dword [rax], 2
mov eax, 0x611f35e0
mov ecx, 0x9f8c402d
cmovl eax, ecx
jmp 0x1800a3626
mov eax, 0x524b452a
mov dword [rsp + 0xe0], 0x277a
jmp 0x1800a3626
cmp eax, 0xf2fbbb5
jne 0x1800a54c0
movabs rax, 0x587a307e6a687163
mov qword [rsp + 0xe8], rax
mov byte [rsp + 0xf0], 0x44
lea rax, [rsp + 0xf2]
mov qword [rsp + 0x90], rax
mov ecx, 0x77c1fdaf
lea rax, [rsp + 0xf1]
nop word cs:[rax + rax]
nop
cmp ecx, 0x13f41bac
je 0x1800a421a
cmp ecx, 0x77c1fdaf
jne 0x1800a3bb0
mov byte [rax], 0
add rax, 1
cmp rax, qword [rsp + 0x90]
mov ecx, 0x77c1fdaf
mov edx, 0x13f41bac
cmove ecx, edx
jmp 0x1800a3bb0
movabs rax, 0xe7a737c5b77694d
mov qword [rsp + 0x90], rax
mov word [rsp + 0x98], 0x5a44
mov byte [rsp + 0x9a], 0x46
lea rax, [rsp + 0x9c]
mov qword [rsp + 0x60], rax
mov ecx, 0x9b0efa0b
lea rax, [rsp + 0x9b]
cmp ecx, 0x5dd3b1c0
je 0x1800a42ca
cmp ecx, 0x9b0efa0b
jne 0x1800a3c20
mov byte [rax], 0
add rax, 1
cmp rax, qword [rsp + 0x60]
mov ecx, 0x9b0efa0b
mov edx, 0x5dd3b1c0
cmove ecx, edx
jmp 0x1800a3c20
xor eax, eax
mov ecx, 0xd2ff93d7
nop word cs:[rax + rax]
cmp ecx, 0x3aa1cfd0
je 0x1800a43a5
cmp ecx, 0x7d452c6
je 0x1800a3cb0
cmp ecx, 0xd2ff93d7
jne 0x1800a3c60
mov dword [rsp + 0x60], eax
movsxd rcx, dword [rsp + 0x60]
mov qword [rsp + 0x90], rcx
mov rcx, qword [rsp + 0x90]
cmp rcx, 0x1a
mov ecx, 0x3aa1cfd0
cmovb ecx, esi
jmp 0x1800a3c60
mov rax, qword [rsp + 0x90]
movzx ebx, byte [rsp + rax + 0x240]
mov edx, dword [rsp + 0x60]
lea ebp, [rdx + 0x19]
mov ecx, ebx
not ecx
and ecx, ebp
mov edi, 0x26
sub edi, edx
and edi, 0x2e
and ebp, 0xd1
or ebp, edi
xor ebp, 0xd1
and ebp, ebx
or ebp, ecx
mov byte [rsp + rax + 0x240], bpl
mov eax, dword [rsp + 0x60]
add eax, 1
jmp 0x1800a3c51
mov rdx, qword [rsp + 0x158]
mov rcx, r15
call fcn.1800a3220
mov qword [rsp + 0x70], r15
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0xa8], 0xf
mov eax, 0x83f52cff
mov ecx, 0x89a1d4dd
cmova eax, ecx
mov edx, 0x723e1c9a
nop word [rax + rax]
cmp edx, 0x83f52cff
je 0x1800a43ca
cmp edx, 0x89a1d4dd
je 0x1800a3d65
cmp edx, 0x723e1c9a
jne 0x1800a3d40
mov rcx, qword [rsp + 0x60]
mov edx, eax
jmp 0x1800a3d40
mov rcx, qword [rsp + 0x70]
mov rcx, qword [rcx]
mov edx, 0x83f52cff
jmp 0x1800a3d40
mov dword [rsp + 0xdc], r13d
mov eax, dword [rsp + 0xdc]
cmp eax, dword [rsp + 0xfc]
mov eax, 0xac963975
mov ecx, 0x7857e837
cmovl eax, ecx
jmp 0x1800a3626
movabs rax, 0x4376686f79485f5b
mov qword [rsp + 0x100], rax
mov dword [rsp + 0x108], 0x5c460c44
mov byte [rsp + 0x10c], 0x40
lea rax, [rsp + 0x10e]
mov qword [rsp + 0x90], rax
mov ecx, 0x749f486a
lea rax, [rsp + 0x10d]
nop
cmp ecx, 0x50e607a
je 0x1800a444f
cmp ecx, 0x749f486a
jne 0x1800a3de0
mov byte [rax], 0
add rax, 1
cmp rax, qword [rsp + 0x90]
mov ecx, 0x749f486a
mov edx, 0x50e607a
cmove ecx, edx
jmp 0x1800a3de0
movabs rax, 0x7f7a737c5b77694d
mov qword [rsp + 0x120], rax
mov dword [rsp + 0x128], 0x410d6763
mov word [rsp + 0x12c], 0x435d
lea rax, [rsp + 0x12f]
mov qword [rsp + 0x90], rax
mov ecx, 0xd0a5bf61
lea rax, [rsp + 0x12e]
nop word cs:[rax + rax]
cmp ecx, 0x43ff06f1
je 0x1800a44fb
cmp ecx, 0xd0a5bf61
jne 0x1800a3e60
mov byte [rax], 0
add rax, 1
cmp rax, qword [rsp + 0x90]
mov ecx, 0xd0a5bf61
mov edx, 0x43ff06f1
cmove ecx, edx
jmp 0x1800a3e60
mov eax, 0xff763ea
mov dword [rsp + 0xd8], 0x277a
jmp 0x1800a3626
movabs rax, 0x477d6b4d7f7e625c
mov qword [rsp + 0x110], rax
mov dword [rsp + 0x118], 0x415b470f
lea rax, [rsp + 0x11d]
mov qword [rsp + 0x90], rax
mov ecx, 0xc111902d
lea rax, [rsp + 0x11c]
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp ecx, 0x8bb6e2d9
je 0x1800a4599
cmp ecx, 0xc111902d
jne 0x1800a3ef0
mov byte [rax], 0
add rax, 1
cmp rax, qword [rsp + 0x90]
mov ecx, 0xc111902d
mov edx, 0x8bb6e2d9
cmove ecx, edx
jmp 0x1800a3ef0
lea r9, [rsp + 0x27c]
mov qword [rsp + 0x220], r9
mov rax, qword [rsp + 0x220]
lea rcx, [rsp + 0x570]
mov qword [rsp + 0x228], rcx
mov rax, qword [rsp + 0x228]
lea r8, [rsp + 0x168]
mov qword [rsp + 0x230], r8
mov rax, qword [rsp + 0x230]
mov dword [rsp + 0x168], 0x104
mov qword [rsp + 0x158], rcx
mov rdx, qword [rsp + 0x158]
lea rcx, [rsp + 0x30c]
call sub.WS2_32.dll_WSCGetProviderPath
cmp eax, 0xffffffff
mov eax, 0x50350d0b
mov ecx, 0xe56c3078
cmove eax, ecx
jmp 0x1800a3626
mov rcx, qword [rsp + 0x158]
mov rdx, rcx
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
test eax, eax
mov eax, 0x11df3cf6
mov ecx, 0x7776373
cmove eax, ecx
jmp 0x1800a3626
mov r13d, dword [rsp + 0xdc]
add r13d, 1
mov eax, 0xace4d14f
jmp 0x1800a3626
mov rax, qword [rsp + 0x1f0]
mov rax, qword [rsp + 0x1e8]
mov rax, qword [rsp + 0x1e0]
mov rax, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x1d0]
mov rax, qword [rsp + 0x1c8]
mov rax, qword [rsp + 0x1c0]
mov rax, qword [rsp + 0x1b8]
mov rax, qword [rsp + 0x1b0]
test r14b, 1
mov eax, 0xbd543b07
mov ecx, 0xd32f1e24
cmovne eax, ecx
jmp 0x1800a3626
xor eax, eax
mov ecx, 0xb1ee7bc2
nop dword [rax]
cmp ecx, 0x5438e56f
je 0x1800a40a0
cmp ecx, 0xf454d1d4
je 0x1800a35fe
cmp ecx, 0xb1ee7bc2
jne 0x1800a4050
mov dword [rsp + 0x60], eax
movsxd rcx, dword [rsp + 0x60]
mov qword [rsp + 0x90], rcx
mov rcx, qword [rsp + 0x90]
cmp rcx, 0xe
mov ecx, 0xf454d1d4
mov edx, 0x5438e56f
cmovb ecx, edx
jmp 0x1800a4050
mov rax, qword [rsp + 0x90]
movzx ecx, byte [rsp + rax + 0x140]
mov edx, dword [rsp + 0x60]
lea ebp, [rdx + 0x19]
mov ebx, 0xe6
sub ebx, edx
and ebx, ecx
not ecx
and ecx, ebp
or ebx, ecx
mov byte [rsp + rax + 0x140], bl
mov eax, dword [rsp + 0x60]
add eax, 1
jmp 0x1800a4048
mov eax, 0xed4f68b5
mov dword [rsp + 0xf8], 0x277a
jmp 0x1800a3626
xor eax, eax
mov ecx, 0x30e49051
nop word cs:[rax + rax]
nop
cmp ecx, 0xc0902285
je 0x1800a4150
cmp ecx, 0x2e2df963
je 0x1800a4640
cmp ecx, 0x30e49051
jne 0x1800a4100
mov dword [rsp + 0x60], eax
movsxd rcx, dword [rsp + 0x60]
mov qword [rsp + 0x90], rcx
mov rcx, qword [rsp + 0x90]
cmp rcx, 0x14
mov ecx, 0x2e2df963
mov edx, 0xc0902285
cmovb ecx, edx
jmp 0x1800a4100
mov rax, qword [rsp + 0x90]
mov ecx, dword [rsp + 0x60]
add cl, 0x19
xor byte [rsp + rax + 0x190], cl
mov eax, dword [rsp + 0x60]
add eax, 1
jmp 0x1800a40f0
movabs rax, 0x7f7a737c5b77694d
mov qword [rsp + 0x130], rax
mov dword [rsp + 0x138], 0x410d697b
mov word [rsp + 0x13c], 0x435d
lea rax, [rsp + 0x13f]
mov qword [rsp + 0x90], rax
mov ecx, 0xd0a5bf61
lea rax, [rsp + 0x13e]
nop word cs:[rax + rax]
nop dword [rax]
cmp ecx, 0x43ff06f1
je 0x1800a4665
cmp ecx, 0xd0a5bf61
jne 0x1800a41c0
mov byte [rax], 0
add rax, 1
cmp rax, qword [rsp + 0x90]
mov ecx, 0xd0a5bf61
mov edx, 0x43ff06f1
cmove ecx, edx
jmp 0x1800a41c0
mov rax, qword [rsp + 0x208]
mov rax, qword [rsp + 0x150]
mov eax, 0xff763ea
mov ecx, dword [rsp + 0xf8]
mov dword [rsp + 0xd8], ecx
jmp 0x1800a3626
xor eax, eax
mov ecx, 0x530d3c50
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp ecx, 0x85a51abc
je 0x1800a4280
cmp ecx, 0x76761836
je 0x1800a46f9
cmp ecx, 0x530d3c50
jne 0x1800a4230
mov dword [rsp + 0x60], eax
movsxd rcx, dword [rsp + 0x60]
mov qword [rsp + 0x90], rcx
mov rcx, qword [rsp + 0x90]
cmp rcx, 9
mov ecx, 0x76761836
mov edx, 0x85a51abc
cmovb ecx, edx
jmp 0x1800a4230
mov rax, qword [rsp + 0x90]
movzx ebx, byte [rsp + rax + 0xe8]
mov edx, dword [rsp + 0x60]
lea ebp, [rdx + 0x19]
mov ecx, ebx
not ecx
and ecx, ebp
mov edi, 0xe6
sub edi, edx
and edi, 0x95
and ebp, 0x6a
or ebp, edi
xor ebp, 0x6a
and ebp, ebx
or ebp, ecx
mov byte [rsp + rax + 0xe8], bpl
mov eax, dword [rsp + 0x60]
add eax, 1
jmp 0x1800a421c
xor eax, eax
mov ecx, 0xf8dd9220
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp ecx, 0xa627fff1
je 0x1800a471e
cmp ecx, 0x231f8378
je 0x1800a4330
cmp ecx, 0xf8dd9220
jne 0x1800a42e0
mov dword [rsp + 0x70], eax
movsxd rcx, dword [rsp + 0x70]
mov qword [rsp + 0x60], rcx
mov rcx, qword [rsp + 0x60]
cmp rcx, 0xb
mov ecx, 0xa627fff1
mov edx, 0x231f8378
cmovb ecx, edx
jmp 0x1800a42e0
mov rax, qword [rsp + 0x60]
movzx ecx, byte [rsp + rax + 0x90]
mov edx, dword [rsp + 0x70]
mov ebp, ecx
and ebp, 0xffffffa0
or ebp, 0xe390340
and ecx, 0x5f
xor ecx, ebp
mov ebp, ecx
xor ebp, 0xe0
mov ebx, 0x7ffffe6
sub ebx, edx
add edx, 0x19
mov edi, edx
and edi, 0x91c290a0
and ebx, 0x62d025e
and edx, 0x8104901
or edi, 0x62d025e
add edx, ebx
add edx, 0x91c290a0
xor edx, edi
xor ecx, 0x1f
and ecx, edx
not edx
and edx, ebp
or edx, ecx
mov byte [rsp + rax + 0x90], dl
mov eax, dword [rsp + 0x70]
add eax, 1
jmp 0x1800a42cc
mov byte [rsp + 0x25a], 0
lea rcx, [rsp + 0x240]
call r12
test rax, rax
mov eax, 0x3bc1c7bf
mov ecx, 0xdea127b4
jmp 0x1800a3620
xor edx, edx
mov r8d, 8
call fcn.180001ec0
mov rsi, rax
mov rcx, r15
call section..text
movabs rax, 0x546d7f694f4b494e
mov qword [rsp + 0x90], rax
mov word [rsp + 0x98], 0x5254
lea rax, [rsp + 0x9b]
mov qword [rsp + 0x60], rax
mov ecx, 0xf73ec10d
lea rax, [rsp + 0x9a]
nop dword [rax + rax]
cmp ecx, 0xfb9640ae
je 0x1800a4741
cmp ecx, 0xf73ec10d
jne 0x1800a4420
mov byte [rax], 0
add rax, 1
cmp rax, qword [rsp + 0x60]
mov ecx, 0xf73ec10d
mov edx, 0xfb9640ae
cmove ecx, edx
jmp 0x1800a4420
xor eax, eax
mov ecx, 0xf21f798a
nop word cs:[rax + rax]
cmp ecx, 0xa58f519a
je 0x1800a47bc
cmp ecx, 0x7d19670e
je 0x1800a44b0
cmp ecx, 0xf21f798a
jne 0x1800a4460
mov dword [rsp + 0x60], eax
movsxd rcx, dword [rsp + 0x60]
mov qword [rsp + 0x90], rcx
mov rcx, qword [rsp + 0x90]
cmp rcx, 0xd
mov ecx, 0xa58f519a
mov edx, 0x7d19670e
cmovb ecx, edx
jmp 0x1800a4460
mov rax, qword [rsp + 0x90]
movzx ecx, byte [rsp + rax + 0x100]
mov edx, dword [rsp + 0x60]
mov ebp, 0xe6
sub ebp, edx
mov ebx, ebp
and ebx, ecx
or ebp, ecx
not ecx
add edx, 0x19
and edx, ecx
and ebp, 0xc1
and edx, 0x3e
or edx, ebp
xor edx, ebx
xor dl, 0xc1
mov byte [rsp + rax + 0x100], dl
mov eax, dword [rsp + 0x60]
add eax, 1
jmp 0x1800a4451
xor eax, eax
mov ecx, 0xb1ee7bc2
nop word cs:[rax + rax]
nop dword [rax]
cmp ecx, 0x5438e56f
je 0x1800a4560
cmp ecx, 0xf454d1d4
je 0x1800a47e0
cmp ecx, 0xb1ee7bc2
jne 0x1800a4510
mov dword [rsp + 0x60], eax
movsxd rcx, dword [rsp + 0x60]
mov qword [rsp + 0x90], rcx
mov rcx, qword [rsp + 0x90]
cmp rcx, 0xe
mov ecx, 0xf454d1d4
mov edx, 0x5438e56f
cmovb ecx, edx
jmp 0x1800a4510
mov rax, qword [rsp + 0x90]
movzx ecx, byte [rsp + rax + 0x120]
mov edx, dword [rsp + 0x60]
lea ebp, [rdx + 0x19]
mov ebx, 0xe6
sub ebx, edx
and ebx, ecx
not ecx
and ecx, ebp
or ebx, ecx
mov byte [rsp + rax + 0x120], bl
mov eax, dword [rsp + 0x60]
add eax, 1
jmp 0x1800a44fd
xor eax, eax
mov ecx, 0x69b092a3
cmp ecx, 0x82ead95
je 0x1800a45f0
cmp ecx, 0x66f4d726
je 0x1800a4805
cmp ecx, 0x69b092a3
jne 0x1800a45a0
mov dword [rsp + 0x60], eax
movsxd rcx, dword [rsp + 0x60]
mov qword [rsp + 0x90], rcx
mov rcx, qword [rsp + 0x90]
cmp rcx, 0xc
mov ecx, 0x66f4d726
mov edx, 0x82ead95
cmovb ecx, edx
jmp 0x1800a45a0
mov rax, qword [rsp + 0x90]
movzx ecx, byte [rsp + rax + 0x110]
mov edx, dword [rsp + 0x60]
mov ebp, 0xe6
sub ebp, edx
and ebp, ecx
mov ebx, 0x26
sub ebx, edx
or ebx, ecx
not ecx
add edx, 0x19
and edx, ecx
and ebx, 0x39
and edx, 0xc6
or edx, ebx
xor edx, ebp
xor dl, 0x39
mov byte [rsp + rax + 0x110], dl
mov eax, dword [rsp + 0x60]
add eax, 1
jmp 0x1800a459b
mov byte [rsp + 0x1a4], 0
lea rcx, [rsp + 0x190]
call r12
test rax, rax
mov eax, 0x3bc1c7bf
mov ecx, 0x7110c18d
jmp 0x1800a3620
xor eax, eax
mov ecx, 0xb1ee7bc2
nop dword [rax]
cmp ecx, 0x5438e56f
je 0x1800a46c0
cmp ecx, 0xf454d1d4
je 0x1800a482a
cmp ecx, 0xb1ee7bc2
jne 0x1800a4670
mov dword [rsp + 0x60], eax
movsxd rcx, dword [rsp + 0x60]
mov qword [rsp + 0x90], rcx
mov rcx, qword [rsp + 0x90]
cmp rcx, 0xe
mov ecx, 0xf454d1d4
mov edx, 0x5438e56f
cmovb ecx, edx
jmp 0x1800a4670
mov rax, qword [rsp + 0x90]
movzx ecx, byte [rsp + rax + 0x130]
mov edx, dword [rsp + 0x60]
lea ebp, [rdx + 0x19]
mov ebx, 0xe6
sub ebx, edx
and ebx, ecx
not ecx
and ecx, ebp
or ebx, ecx
mov byte [rsp + rax + 0x130], bl
mov eax, dword [rsp + 0x60]
add eax, 1
jmp 0x1800a4667
mov byte [rsp + 0xf1], 0
lea rcx, [rsp + 0xe8]
call r12
test rax, rax
mov eax, 0x3bc1c7bf
mov ecx, 0xa72074ce
jmp 0x1800a3620
mov byte [rsp + 0x9b], 0
mov rcx, r15
call r12
test rax, rax
mov eax, 0xfa81f417
mov ecx, 0xcb07270
cmove eax, ecx
jmp 0x1800a3626
xor eax, eax
mov ecx, 0xf40f30e9
nop dword [rax + rax]
cmp ecx, 0x684cc560
je 0x1800a484f
cmp ecx, 0x2c9a5d3d
je 0x1800a47a0
cmp ecx, 0xf40f30e9
jne 0x1800a4750
mov dword [rsp + 0x70], eax
movsxd rcx, dword [rsp + 0x70]
mov qword [rsp + 0x60], rcx
mov rcx, qword [rsp + 0x60]
cmp rcx, 0xa
mov ecx, 0x684cc560
mov edx, 0x2c9a5d3d
cmovb ecx, edx
jmp 0x1800a4750
mov rax, qword [rsp + 0x60]
mov ecx, dword [rsp + 0x70]
add cl, 0x19
xor byte [rsp + rax + 0x90], cl
mov eax, dword [rsp + 0x70]
add eax, 1
jmp 0x1800a4743
mov byte [rsp + 0x10d], 0
lea rcx, [rsp + 0x100]
call r12
test rax, rax
setne r14b
mov eax, 0x3bc1c7bf
jmp 0x1800a3626
mov byte [rsp + 0x12e], 0
lea rcx, [rsp + 0x120]
call r12
test rax, rax
mov eax, 0x3bc1c7bf
mov ecx, 0xf2fbbb5
jmp 0x1800a3620
mov byte [rsp + 0x11c], 0
lea rcx, [rsp + 0x110]
call r12
test rax, rax
mov eax, 0x3bc1c7bf
mov ecx, 0x5bca4fbb
jmp 0x1800a3620
mov byte [rsp + 0x13e], 0
lea rcx, [rsp + 0x130]
call r12
test rax, rax
mov eax, 0x3bc1c7bf
mov ecx, 0xbdd88c5d
jmp 0x1800a3620
mov byte [rsp + 0x9a], 0
mov rcx, rsi
mov rdx, r15
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp dword [rsp + 0x320], 1
mov r8, qword [rsp + 0x1a8]
lea rcx, [rsp + 0x2f8]
cmove r8, rcx
mov rcx, qword [rsp + 0x200]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmm2, xmmword [rcx + 0x20]
movups xmm3, xmmword [rcx + 0x30]
movaps xmmword [rsp + 0x280], xmm0
movaps xmmword [rsp + 0x290], xmm1
movaps xmmword [rsp + 0x2a0], xmm2
movaps xmmword [rsp + 0x2b0], xmm3
movups xmm0, xmmword [rcx + 0x40]
movaps xmmword [rsp + 0x2c0], xmm0
movups xmm0, xmmword [rcx + 0x50]
movaps xmmword [rsp + 0x2d0], xmm0
movups xmm0, xmmword [rcx + 0x60]
movaps xmmword [rsp + 0x2e0], xmm0
mov rcx, qword [rcx + 0x70]
mov qword [rsp + 0x2f0], rcx
mov rsi, qword [rsp + 0x870]
mov qword [rsp + 0x20], rsi
movzx ecx, word [rsp + 0xe6]
mov rdx, qword [rsp + 0x268]
lea r9, [rsp + 0x280]
call rax
mov dword [rsp + 0xe0], eax
mov r8d, 0xf0
lea rcx, [0x1800f6c68]
mov rdx, rsi
call fcn.1800cf7d0
mov r8d, 0xf0
lea rcx, [0x1800f6e68]
mov rdx, rsi
call fcn.1800cf7d0
movaps xmmword [rsp + 0x90], xmm13
movaps xmmword [rsp + 0xa0], xmm7
mov word [rsp + 0xb0], 0x565d
mov byte [rsp + 0xb2], 0x57
lea rax, [rsp + 0xb4]
mov qword [rsp + 0x60], rax
mov ecx, 0xfb4e1827
lea rax, [rsp + 0xb3]
nop dword [rax + rax]
cmp ecx, 0x281ddab5
je 0x1800a49ab
cmp ecx, 0xfb4e1827
jne 0x1800a4980
mov byte [rax], 0
add rax, 1
cmp rax, qword [rsp + 0x60]
mov ecx, 0xfb4e1827
mov edx, 0x281ddab5
cmove ecx, edx
jmp 0x1800a4980
xor eax, eax
mov ecx, 0x14ebd2bd
nop word cs:[rax + rax]
nop dword [rax]
cmp ecx, 0x92e06dcf
je 0x1800a4a36
cmp ecx, 0xfc17c755
je 0x1800a4a00
cmp ecx, 0x14ebd2bd
jne 0x1800a49c0
mov dword [rsp + 0x70], eax
movsxd rcx, dword [rsp + 0x70]
mov qword [rsp + 0x60], rcx
mov rcx, qword [rsp + 0x60]
cmp rcx, 0x23
mov ecx, 0x92e06dcf
mov edx, 0xfc17c755
cmovb ecx, edx
jmp 0x1800a49c0
mov rax, qword [rsp + 0x60]
movzx ecx, byte [rsp + rax + 0x90]
mov edx, dword [rsp + 0x70]
lea ebp, [rdx + 0x19]
mov ebx, 0xe6
sub ebx, edx
and ebx, ecx
not ecx
and ecx, ebp
or ebx, ecx
mov byte [rsp + rax + 0x90], bl
mov eax, dword [rsp + 0x70]
add eax, 1
jmp 0x1800a49ad
mov byte [rsp + 0xb3], 0
mov rcx, r15
call fcn.1800bb560
mov rsi, rax
lea rax, [0x1800f6fb0]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x88]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x80], rax
mov eax, 0x93c3f964
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp eax, 0x13e800ce
jle 0x1800a4aa0
cmp eax, 0x13e800cf
je 0x1800a4ac8
cmp eax, 0x761d6313
jne 0x1800a4a80
jmp 0x1800a4b68
cmp eax, 0x8e2a208c
je 0x1800a4ae1
cmp eax, 0x93c3f964
jne 0x1800a4a80
mov rax, qword [rsp + 0x80]
cmp rax, rsi
mov eax, 0x8e2a208c
mov ecx, 0x13e800cf
cmovb eax, ecx
jmp 0x1800a4a80
lea rcx, [0x1800f6fb0]
mov rdx, rsi
mov r9, r15
call fcn.18003ace0
mov eax, 0x761d6313
jmp 0x1800a4a80
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x70], rax
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x60], rcx
mov ecx, 0x3f352d1
nop dword [rax]
cmp ecx, 0x6a6a9154
je 0x1800a4b31
cmp ecx, 0xd71aa07
je 0x1800a4b40
cmp ecx, 0x3f352d1
jne 0x1800a4b00
cmp qword [rax + 0x18], 0xf
mov ecx, 0xd71aa07
mov edx, 0x6a6a9154
cmova ecx, edx
mov rdi, qword [rsp + 0x60]
jmp 0x1800a4b00
mov rcx, qword [rsp + 0x70]
mov rdi, qword [rcx]
mov ecx, 0xd71aa07
jmp 0x1800a4b00
mov rax, qword [rsp + 0x88]
mov qword [rax + 0x10], rsi
mov rcx, rdi
mov rdx, r15
mov r8, rsi
call fcn.1800cf7d0
mov byte [rdi + rsi], 0
mov eax, 0x761d6313
jmp 0x1800a4a80
mov rcx, r15
mov edx, 6
call fcn.1800a23d0
mov rdi, qword [rsp + 0xa0]
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x70], r15
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x60], rcx
cmp rax, 0xf
mov eax, 0x83f52cff
mov ecx, 0x89a1d4dd
cmova eax, ecx
mov ecx, 0x723e1c9a
nop word [rax + rax]
cmp ecx, 0x83f52cff
je 0x1800a4be0
cmp ecx, 0x89a1d4dd
je 0x1800a4bd1
cmp ecx, 0x723e1c9a
jne 0x1800a4bb0
mov rsi, qword [rsp + 0x60]
mov ecx, eax
jmp 0x1800a4bb0
mov rcx, qword [rsp + 0x70]
mov rsi, qword [rcx]
mov ecx, 0x83f52cff
jmp 0x1800a4bb0
lea rax, [0x1800f6fb0]
mov qword [rsp + 0x160], rax
mov rax, qword [rsp + 0x160]
add rax, 0x10
mov qword [rsp + 0x238], rax
mov rax, qword [rsp + 0x238]
mov rax, qword [rax]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x160]
mov rax, qword [rax + 0x18]
sub rax, qword [rsp + 0x88]
mov qword [rsp + 0x80], rax
mov eax, 0x81215842
nop word [rax + rax]
cmp eax, 0xc3c53d8b
jg 0x1800a4c80
cmp eax, 0x81215842
je 0x1800a4d10
cmp eax, 0xbf5061f1
jne 0x1800a4c40
mov qword [rsp + 0x20], rdi
lea rcx, [0x1800f6fb0]
mov rdx, rdi
mov r9, rsi
call fcn.1800a6bf0
mov eax, 0xc3c53d8c
jmp 0x1800a4c40
cmp eax, 0xc3c53d8c
je 0x1800a4d52
cmp eax, 0xfb1030d3
jne 0x1800a4c40
mov rbx, qword [rsp + 0x88]
add rbx, rdi
mov rax, qword [rsp + 0x238]
mov qword [rax], rbx
mov rax, qword [rsp + 0x160]
mov qword [rsp + 0x70], rax
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x60], rcx
mov ecx, 0x3f352d1
nop word cs:[rax + rax]
nop
cmp ecx, 0x6a6a9154
je 0x1800a4d01
cmp ecx, 0xd71aa07
je 0x1800a4d2d
cmp ecx, 0x3f352d1
jne 0x1800a4cd0
cmp qword [rax + 0x18], 0xf
mov ecx, 0xd71aa07
mov edx, 0x6a6a9154
cmova ecx, edx
mov rbp, qword [rsp + 0x60]
jmp 0x1800a4cd0
mov rcx, qword [rsp + 0x70]
mov rbp, qword [rcx]
mov ecx, 0xd71aa07
jmp 0x1800a4cd0
mov rax, qword [rsp + 0x80]
cmp rax, rdi
mov eax, 0xfb1030d3
mov ecx, 0xbf5061f1
cmovb eax, ecx
jmp 0x1800a4c40
mov rcx, qword [rsp + 0x88]
add rcx, rbp
mov rdx, rsi
mov r8, rdi
call fcn.1800cf7d0
mov byte [rbp + rbx], 0
mov eax, 0xc3c53d8c
jmp 0x1800a4c40
mov rcx, r15
call section..text
mov dword [rsp + 0x60], 0x70777e37
lea rax, [rsp + 0x65]
mov qword [rsp + 0x90], rax
mov ecx, 0x97264fb5
lea rax, [rsp + 0x64]
nop dword [rax]
cmp ecx, 0x4cf3374b
je 0x1800a4dae
cmp ecx, 0x97264fb5
jne 0x1800a4d80
mov byte [rax], 0
add rax, 1
cmp rax, qword [rsp + 0x90]
mov ecx, 0x97264fb5
mov edx, 0x4cf3374b
cmove ecx, edx
jmp 0x1800a4d80
xor eax, eax
mov ecx, 0xf0c22058
nop word cs:[rax + rax]
nop
cmp ecx, 0x99dbd47c
je 0x1800a4e10
cmp ecx, 0x23f4b616
je 0x1800a4e57
cmp ecx, 0xf0c22058
jne 0x1800a4dc0
mov dword [rsp + 0x70], eax
movsxd rcx, dword [rsp + 0x70]
mov qword [rsp + 0x90], rcx
mov rcx, qword [rsp + 0x90]
cmp rcx, 4
mov ecx, 0x23f4b616
mov edx, 0x99dbd47c
cmovb ecx, edx
jmp 0x1800a4dc0
mov rax, qword [rsp + 0x90]
movzx ebx, byte [rsp + rax + 0x60]
mov edx, dword [rsp + 0x70]
lea ebp, [rdx + 0x19]
mov ecx, ebx
not ecx
and ecx, ebp
mov edi, 0x66
sub edi, edx
and edi, 0x4b
and ebp, 0xb4
or ebp, edi
xor ebp, 0xb4
and ebp, ebx
or ebp, ecx
mov byte [rsp + rax + 0x60], bpl
mov eax, dword [rsp + 0x70]
add eax, 1
jmp 0x1800a4db0
mov byte [rsp + 0x64], 0
lea rsi, [0x1800f6fb0]
mov rcx, rsi
lea rdx, [rsp + 0x60]
call fcn.1800a6a70
mov qword [rsp + 0x60], rsi
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x90], rax
cmp qword [0x1800f6fc8], 0xf
mov eax, 0x83f52cff
mov ecx, 0x89a1d4dd
cmova eax, ecx
mov edx, 0x723e1c9a
nop dword [rax]
cmp edx, 0x83f52cff
je 0x1800a4ed3
cmp edx, 0x89a1d4dd
je 0x1800a4ec4
cmp edx, 0x723e1c9a
jne 0x1800a4ea0
mov rcx, qword [rsp + 0x90]
mov edx, eax
jmp 0x1800a4ea0
mov rcx, qword [rsp + 0x60]
mov rcx, qword [rcx]
mov edx, 0x83f52cff
jmp 0x1800a4ea0
mov qword [0x1800ec970], rcx
movaps xmmword [rsp + 0x90], xmm13
movaps xmmword [rsp + 0xa0], xmm7
mov word [rsp + 0xb0], 0x565d
mov byte [rsp + 0xb2], 0x57
lea rax, [rsp + 0xb4]
mov qword [rsp + 0x60], rax
mov ecx, 0xfb4e1827
lea rax, [rsp + 0xb3]
nop word [rax + rax]
cmp ecx, 0x281ddab5
je 0x1800a4f4b
cmp ecx, 0xfb4e1827
jne 0x1800a4f20
mov byte [rax], 0
add rax, 1
cmp rax, qword [rsp + 0x60]
mov ecx, 0xfb4e1827
mov edx, 0x281ddab5
cmove ecx, edx
jmp 0x1800a4f20
xor eax, eax
mov ecx, 0x14ebd2bd
nop word cs:[rax + rax]
nop dword [rax]
cmp ecx, 0x92e06dcf
je 0x1800a4fd6
cmp ecx, 0xfc17c755
je 0x1800a4fa0
cmp ecx, 0x14ebd2bd
jne 0x1800a4f60
mov dword [rsp + 0x70], eax
movsxd rcx, dword [rsp + 0x70]
mov qword [rsp + 0x60], rcx
mov rcx, qword [rsp + 0x60]
cmp rcx, 0x23
mov ecx, 0x92e06dcf
mov edx, 0xfc17c755
cmovb ecx, edx
jmp 0x1800a4f60
mov rax, qword [rsp + 0x60]
movzx ecx, byte [rsp + rax + 0x90]
mov edx, dword [rsp + 0x70]
lea ebp, [rdx + 0x19]
mov ebx, 0xe6
sub ebx, edx
and ebx, ecx
not ecx
and ecx, ebp
or ebx, ecx
mov byte [rsp + rax + 0x90], bl
mov eax, dword [rsp + 0x70]
add eax, 1
jmp 0x1800a4f4d
mov byte [rsp + 0xb3], 0
mov rcx, r15
call fcn.1800bb560
mov rsi, rax
lea rax, [0x1800f6fd8]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x88]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x80], rax
mov eax, 0x93c3f964
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp eax, 0x13e800ce
jle 0x1800a5040
cmp eax, 0x13e800cf
je 0x1800a5068
cmp eax, 0x761d6313
jne 0x1800a5020
jmp 0x1800a5108
cmp eax, 0x8e2a208c
je 0x1800a5081
cmp eax, 0x93c3f964
jne 0x1800a5020
mov rax, qword [rsp + 0x80]
cmp rax, rsi
mov eax, 0x8e2a208c
mov ecx, 0x13e800cf
cmovb eax, ecx
jmp 0x1800a5020
lea rcx, [0x1800f6fd8]
mov rdx, rsi
mov r9, r15
call fcn.18003ace0
mov eax, 0x761d6313
jmp 0x1800a5020
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x70], rax
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x60], rcx
mov ecx, 0x3f352d1
nop dword [rax]
cmp ecx, 0x6a6a9154
je 0x1800a50d1
cmp ecx, 0xd71aa07
je 0x1800a50e0
cmp ecx, 0x3f352d1
jne 0x1800a50a0
cmp qword [rax + 0x18], 0xf
mov ecx, 0xd71aa07
mov edx, 0x6a6a9154
cmova ecx, edx
mov rdi, qword [rsp + 0x60]
jmp 0x1800a50a0
mov rcx, qword [rsp + 0x70]
mov rdi, qword [rcx]
mov ecx, 0xd71aa07
jmp 0x1800a50a0
mov rax, qword [rsp + 0x88]
mov qword [rax + 0x10], rsi
mov rcx, rdi
mov rdx, r15
mov r8, rsi
call fcn.1800cf7d0
mov byte [rdi + rsi], 0
mov eax, 0x761d6313
jmp 0x1800a5020
lea rax, [0x1800f6fd8]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x90], rax
cmp qword [0x1800f6ff0], 0xf
mov eax, 0x83f52cff
mov ecx, 0x89a1d4dd
cmova eax, ecx
mov edx, 0x723e1c9a
mov esi, 0x7d452c6
cmp edx, 0x83f52cff
je 0x1800a5173
cmp edx, 0x89a1d4dd
je 0x1800a5164
cmp edx, 0x723e1c9a
jne 0x1800a5140
mov rcx, qword [rsp + 0x90]
mov edx, eax
jmp 0x1800a5140
mov rcx, qword [rsp + 0x60]
mov rcx, qword [rcx]
mov edx, 0x83f52cff
jmp 0x1800a5140
mov qword [0x1800ec978], rcx
mov rdx, qword [0x1800ec970]
call fcn.1800ba4fc
mov rcx, qword [0x1800ec970]
call fcn.1800a2b00
movaps xmmword [rsp + 0x90], xmm10
movabs rax, 0x55454c6247454365
mov qword [rsp + 0xa0], rax
mov word [rsp + 0xa8], 0x4652
lea rax, [rsp + 0xab]
mov qword [rsp + 0x60], rax
mov ecx, 0x102f10c9
lea rax, [rsp + 0xaa]
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp ecx, 0xbb43f8c
je 0x1800a520b
cmp ecx, 0x102f10c9
jne 0x1800a51e0
mov byte [rax], 0
add rax, 1
cmp rax, qword [rsp + 0x60]
mov ecx, 0x102f10c9
mov edx, 0xbb43f8c
cmove ecx, edx
jmp 0x1800a51e0
xor eax, eax
mov ecx, 0xd2ff93d7
nop word cs:[rax + rax]
nop dword [rax]
cmp ecx, 0x3aa1cfd0
je 0x1800a52aa
cmp ecx, 0x7d452c6
je 0x1800a5260
cmp ecx, 0xd2ff93d7
jne 0x1800a5220
mov dword [rsp + 0x70], eax
movsxd rcx, dword [rsp + 0x70]
mov qword [rsp + 0x60], rcx
mov rcx, qword [rsp + 0x60]
cmp rcx, 0x1a
mov ecx, 0x3aa1cfd0
cmovb ecx, esi
jmp 0x1800a5220
mov rax, qword [rsp + 0x60]
movzx ebx, byte [rsp + rax + 0x90]
mov edx, dword [rsp + 0x70]
lea ebp, [rdx + 0x19]
mov ecx, ebx
not ecx
and ecx, ebp
mov edi, 0x26
sub edi, edx
and edi, 0x2e
and ebp, 0xd1
or ebp, edi
xor ebp, 0xd1
and ebp, ebx
or ebp, ecx
mov byte [rsp + rax + 0x90], bpl
mov eax, dword [rsp + 0x70]
add eax, 1
jmp 0x1800a520d
mov byte [rsp + 0xaa], 0
movabs rax, 0x4c7b3071707f6e57
mov qword [rsp + 0x60], rax
mov byte [rsp + 0x68], 0x4d
lea rax, [rsp + 0x6a]
mov qword [rsp + 0x70], rax
mov ecx, 0x77c1fdaf
lea rax, [rsp + 0x69]
nop word [rax + rax]
cmp ecx, 0x13f41bac
je 0x1800a530b
cmp ecx, 0x77c1fdaf
jne 0x1800a52e0
mov byte [rax], 0
add rax, 1
cmp rax, qword [rsp + 0x70]
mov ecx, 0x77c1fdaf
mov edx, 0x13f41bac
cmove ecx, edx
jmp 0x1800a52e0
xor eax, eax
mov ecx, 0x530d3c50
nop word cs:[rax + rax]
nop dword [rax]
cmp ecx, 0x85a51abc
je 0x1800a5370
cmp ecx, 0x76761836
je 0x1800a53b7
cmp ecx, 0x530d3c50
jne 0x1800a5320
mov dword [rsp + 0x80], eax
movsxd rcx, dword [rsp + 0x80]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rsp + 0x70]
cmp rcx, 9
mov ecx, 0x76761836
mov edx, 0x85a51abc
cmovb ecx, edx
jmp 0x1800a5320
mov rax, qword [rsp + 0x70]
movzx ebx, byte [rsp + rax + 0x60]
mov edx, dword [rsp + 0x80]
lea ebp, [rdx + 0x19]
mov ecx, ebx
not ecx
and ecx, ebp
mov edi, 0xe6
sub edi, edx
and edi, 0x95
and ebp, 0x6a
or ebp, edi
xor ebp, 0x6a
and ebp, ebx
or ebp, ecx
mov byte [rsp + rax + 0x60], bpl
mov eax, dword [rsp + 0x80]
add eax, 1
jmp 0x1800a530d
mov byte [rsp + 0x69], 0
lea rdi, [rsp + 0x60]
mov rcx, rdi
call r12
mov rcx, rax
mov rdx, r15
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov eax, dword [rax + 4]
add eax, 1
mov qword [0x1800f6f60], rax
mov qword [rsp + 0x60], 0
mov qword [rsp + 0x70], 0
movaps xmmword [rsp + 0x90], xmm11
mov qword [rsp + 0xa0], 0x10
mov qword [rsp + 0xa8], rdi
movaps xmmword [rsp + 0xb0], xmm12
mov qword [rsp + 0xc0], 8
lea rcx, [rsp + 0x70]
mov qword [rsp + 0xc8], rcx
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0x80], 0
mov dword [0x1800edd38], eax
mov qword [rsp + 0x50], r15
movups xmmword [rsp + 0x38], xmm6
movups xmmword [rsp + 0x28], xmm6
lea rax, [0x1800a5530]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x48], 0
lea rcx, [rsp + 0x80]
mov edx, 0x1fffff
xor r8d, r8d
mov r9, 0xffffffffffffffff
call fcn.1800a720c
mov eax, dword [0x1800f6f58]
mov dword [0x1800edd38], eax
mov rcx, qword [rsp + 0x80]
call fcn.1800a720c
mov rcx, qword [rsp + 0x210]
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, 0x524b452a
jmp 0x1800a3626
cmp eax, 0xff763ea
jne 0x1800a3626
mov eax, dword [rsp + 0xd8]
movaps xmm6, xmmword [rsp + 0x780]
movaps xmm7, xmmword [rsp + 0x790]
movaps xmm8, xmmword [rsp + 0x7a0]
movaps xmm9, xmmword [rsp + 0x7b0]
movaps xmm10, xmmword [rsp + 0x7c0]
movaps xmm11, xmmword [rsp + 0x7d0]
movaps xmm12, xmmword [rsp + 0x7e0]
movaps xmm13, xmmword [rsp + 0x7f0]
add rsp, 0x808
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret