Function at 0x18015b220
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1420]
mov eax, 0x1520
call fcn.1801c1a40
sub rsp, rax
movaps xmmword [rsp + 0x1510], xmm6
movaps xmmword [rsp + 0x1500], xmm7
movaps xmmword [rsp + 0x14f0], xmm8
movaps xmmword [rsp + 0x14e0], xmm9
movaps xmmword [rsp + 0x14d0], xmm10
movaps xmmword [rsp + 0x14c0], xmm11
movaps xmmword [rsp + 0x14b0], xmm12
movaps xmmword [rsp + 0x14a0], xmm13
movaps xmmword [rsp + 0x1490], xmm14
movaps xmmword [rsp + 0x1480], xmm15
mov rax, qword [0x18026d300]
xor rax, rsp
mov qword [rbp + 0x1370], rax
mov r13, rdx
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], rcx
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
xor esi, esi
mov qword [rbp - 0x60], rsi
movsd xmm0, qword [0x18023d4d0]
comisd xmm0, xmmword [0x1802793d8]
jbe 0x18015bc7f
mov rax, qword [0x180279798]
mov rbx, qword [rcx + rax]
add rbx, 0x50
call fcn.18015aaa0
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x70], esi
mov dword [rsp + 0x74], 1
lea rdi, [rbx + 0x10]
mov qword [rsp + 0x78], rdi
mov dword [rbp - 0x80], 0xffffffff
mov qword [rbp - 0x7c], rsi
cmp dword [rdi + 0x18], esi
je 0x18015b327
lea rcx, [rsp + 0x70]
call fcn.1800d5f20
mov qword [rsp + 0x48], rbx
movups xmm0, xmmword [rsp + 0x70]
movups xmmword [rsp + 0x50], xmm0
movups xmm2, xmmword [rbp - 0x80]
movups xmmword [rsp + 0x60], xmm2
mov qword [rbp - 0x58], rbx
movups xmm0, xmmword [rsp + 0x48]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rsp + 0x58]
movups xmmword [rbp - 0x40], xmm1
movaps xmm0, xmm2
unpckhpd xmm0, xmm2
movsd qword [rbp - 0x30], xmm0
mov edx, dword [rdi + 0x18]
mov eax, edx
sar eax, 5
mov dword [rsp + 0x70], eax
mov ecx, edx
and ecx, 0x1f
mov eax, 1
shl eax, cl
mov dword [rsp + 0x74], eax
mov qword [rsp + 0x78], rdi
mov dword [rbp - 0x80], esi
mov dword [rbp - 0x7c], edx
mov dword [rbp - 0x78], edx
movups xmm1, xmmword [rbp - 0x80]
movups xmmword [rsp + 0x60], xmm1
movq rcx, xmm1
shr rcx, 0x20
psrldq xmm2, 4
movd eax, xmm2
cmp eax, ecx
jge 0x18015bfbc
mov edi, dword [0x180278690]
mov r12d, 8
xorps xmm11, xmm11
movss xmm9, dword [0x18023d1fc]
movss xmm13, dword [0x18023d260]
xorps xmm10, xmm10
movsd xmm14, qword [0x18023d230]
movsd xmm12, qword [0x18023d538]
movss xmm15, dword [0x18023d15c]
mov eax, dword [rbp - 0x34]
cdqe
lea r14, [rax + rax*2]
mov rax, qword [rbp - 0x50]
mov r15, qword [rax]
mov rbx, qword [r15 + r14*8]
test byte [rbx + 0x28], 1
jne 0x18015b42c
call fcn.18015aaa0
mov rcx, rax
call fcn.180156510
xorps xmm2, xmm2
cvtss2sd xmm2, xmm0
movsd xmm1, qword [rbx + 0x10]
comisd xmm1, xmm2
jae 0x18015b53a
mov rax, qword [r15 + r14*8]
mov rsi, qword [rax]
mov qword [rsp + 0x20], rsi
test rsi, rsi
je 0x18015b53a
mov rcx, rsi
call fcn.1800814f0
test al, al
je 0x18015b477
mov rdx, qword [rbp - 0x68]
cmp rdx, qword [rbp - 0x60]
je 0x18015b464
mov qword [rdx], rsi
add qword [rbp - 0x68], 8
jmp 0x18015b53a
lea r8, [rsp + 0x20]
lea rcx, [rbp - 0x70]
call fcn.18009ccb0
jmp 0x18015b53a
mov rax, qword gs:[0x58]
mov rdi, qword [rax + rdi*8]
mov eax, dword [r12 + rdi]
cmp dword [0x18027cdd0], eax
jle 0x18015b515
lea rcx, [0x18027cdd0]
call fcn.1801c0db0
cmp dword [0x18027cdd0], 0xffffffff
jne 0x18015b515
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xor eax, eax
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], rax
lea r8d, [rax + 0xa]
lea rdx, str.RemoteRole
lea rcx, [rsp + 0x70]
call fcn.18005b090
nop
mov r8b, 1
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.18015de40
mov rcx, rax
test rax, rax
jne 0x18015b4ee
lea eax, [rcx - 1]
jmp 0x18015b4f8
mov rax, qword [0x1802793c8]
mov eax, dword [rcx + rax]
mov dword [0x18027cdb4], eax
lea rcx, [rsp + 0x70]
call fcn.18005eec0
nop
lea rcx, [0x18027cdd0]
call fcn.1801c0d44
movsxd rax, dword [0x18027cdb4]
cmp byte [rax + rsi], 0
jne 0x18015b56d
mov rdx, qword [rbp - 0x68]
cmp rdx, qword [rbp - 0x60]
je 0x18015b55d
mov qword [rdx], rsi
add qword [rbp - 0x68], 8
mov edi, dword [0x180278690]
mov eax, dword [rbp - 0x44]
not eax
and dword [rbp - 0x38], eax
lea rcx, [rbp - 0x48]
call fcn.1800d5f20
mov eax, dword [rbp - 0x34]
cmp eax, dword [rsp + 0x64]
jl 0x18015b3f2
jmp 0x18015bfbc
lea r8, [rsp + 0x20]
lea rcx, [rbp - 0x70]
call fcn.18009ccb0
jmp 0x18015b534
mov eax, dword [r12 + rdi]
cmp dword [0x18027ce28], eax
jle 0x18015b5fe
lea rcx, [0x18027ce28]
call fcn.1801c0db0
cmp dword [0x18027ce28], 0xffffffff
jne 0x18015b5fe
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xor eax, eax
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], rax
lea r8d, [rax + 0xb]
lea rdx, str.NetDormancy
lea rcx, [rsp + 0x70]
call fcn.18005b090
nop
mov r8b, 1
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.18015de40
mov rcx, rax
test rax, rax
jne 0x18015b5d7
lea eax, [rcx - 1]
jmp 0x18015b5e1
mov rax, qword [0x1802793c8]
mov eax, dword [rcx + rax]
mov dword [0x18027ce18], eax
lea rcx, [rsp + 0x70]
call fcn.18005eec0
nop
lea rcx, [0x18027ce28]
call fcn.1801c0d44
movsxd rax, dword [0x18027ce18]
cmp byte [rax + rsi], 4
jne 0x18015b61b
mov rcx, rsi
call fcn.180081690
test al, al
jne 0x18015b534
mov rax, qword [r15 + r14*8]
movsd xmm0, qword [rax + 0x18]
ucomisd xmm0, xmm11
jp 0x18015b660
jne 0x18015b660
mov rcx, qword [rsp + 0x28]
call fcn.180156510
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
mov rax, qword [r15 + r14*8]
movsd qword [rax + 0x18], xmm1
mov rcx, rsi
call fcn.180081a50
movaps xmm0, xmm9
divss xmm0, dword [rax]
mov rax, qword [r15 + r14*8]
movss dword [rax + 0x20], xmm0
mov rbx, qword [r15 + r14*8]
mov rcx, qword [rsp + 0x28]
call fcn.180156510
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
subsd xmm1, qword [rbx + 0x18]
cvtpd2ps xmm7, xmm1
mov edi, dword [0x180278690]
mov rbx, qword gs:[0x58]
comiss xmm7, xmm13
jbe 0x18015b90e
mov rax, qword [rbx + rdi*8]
mov ecx, dword [r12 + rax]
cmp dword [0x18027cd78], ecx
jle 0x18015b72c
lea rcx, [0x18027cd78]
call fcn.1801c0db0
cmp dword [0x18027cd78], 0xffffffff
jne 0x18015b72c
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xor eax, eax
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], rax
lea r8d, [rax + 0x15]
lea rdx, str.MinNetUpdateFrequency
lea rcx, [rsp + 0x70]
call fcn.18005b090
nop
mov r8b, 1
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.18015de40
mov rcx, rax
test rax, rax
jne 0x18015b705
lea eax, [rcx - 1]
jmp 0x18015b70f
mov rax, qword [0x1802793c8]
mov eax, dword [rcx + rax]
mov dword [0x18027cde8], eax
lea rcx, [rsp + 0x70]
call fcn.18005eec0
nop
lea rcx, [0x18027cd78]
call fcn.1801c0d44
movsxd rax, dword [0x18027cde8]
movss xmm0, dword [rax + rsi]
ucomiss xmm0, xmm10
jp 0x18015b747
jne 0x18015b747
mov dword [rax + rsi], 0x40000000
mov rcx, rsi
call fcn.180081a50
movaps xmm8, xmm9
divss xmm8, dword [rax]
mov rcx, rsi
call fcn.180081b20
movaps xmm0, xmm9
divss xmm0, dword [rax]
comiss xmm0, xmm8
jbe 0x18015b780
mov rcx, rsi
call fcn.180081b20
movaps xmm6, xmm9
divss xmm6, dword [rax]
jmp 0x18015b784
movaps xmm6, xmm8
mov dword [rsp + 0x40], 0x3f800000
mov dword [rsp + 0x38], 0
subss xmm7, xmm13
divss xmm7, dword [0x18023d508]
movss dword [rsp + 0x3c], xmm7
comiss xmm10, xmm7
lea rcx, [rsp + 0x38]
lea rax, [rsp + 0x3c]
cmovbe rcx, rax
comiss xmm7, xmm9
lea rax, [rsp + 0x40]
cmovbe rax, rcx
movss xmm7, dword [rax]
movd ecx, xmm7
btr ecx, 0x1f
cmp ecx, 0x7f800000
jae 0x18015b88c
movd eax, xmm8
btr eax, 0x1f
cmp eax, 0x7f800000
jae 0x18015b88c
movd eax, xmm6
btr eax, 0x1f
cmp eax, 0x7f800000
jae 0x18015b88c
comiss xmm10, xmm8
jb 0x18015b811
comiss xmm6, xmm10
jae 0x18015b81d
comiss xmm8, xmm10
jb 0x18015b833
comiss xmm10, xmm6
jb 0x18015b833
movaps xmm0, xmm9
subss xmm0, xmm7
mulss xmm0, xmm8
mulss xmm7, xmm6
jmp 0x18015b901
ucomiss xmm7, xmm9
jp 0x18015b843
jne 0x18015b843
movaps xmm0, xmm6
jmp 0x18015b905
movaps xmm1, xmm6
subss xmm1, xmm8
movaps xmm2, xmm8
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_fmaf
xor ecx, ecx
comiss xmm6, xmm8
seta cl
xor eax, eax
comiss xmm7, xmm9
seta al
cmp eax, ecx
jne 0x18015b87e
comiss xmm6, xmm0
jbe 0x18015b905
movaps xmm0, xmm6
jmp 0x18015b905
comiss xmm0, xmm6
jbe 0x18015b905
movaps xmm0, xmm6
jmp 0x18015b905
movd eax, xmm8
btr eax, 0x1f
cmp eax, 0x7f800000
ja 0x18015b8f9
movd eax, xmm6
btr eax, 0x1f
cmp eax, 0x7f800000
ja 0x18015b8f9
movd eax, xmm7
btr eax, 0x1f
cmp eax, 0x7f800000
jbe 0x18015b8bf
movaps xmm0, xmm7
jmp 0x18015b901
cmp ecx, 0x7f800000
jae 0x18015b8eb
comiss xmm10, xmm7
jbe 0x18015b8d7
movaps xmm0, xmm8
subss xmm0, xmm6
jmp 0x18015b905
comiss xmm9, xmm7
jae 0x18015b81d
movaps xmm0, xmm6
subss xmm0, xmm8
jmp 0x18015b905
movaps xmm0, xmm6
subss xmm0, xmm8
mulss xmm0, xmm7
jmp 0x18015b905
movaps xmm0, xmm6
addss xmm0, xmm8
addss xmm0, xmm7
mov rax, qword [r15 + r14*8]
movss dword [rax + 0x20], xmm0
mov rax, qword [r15 + r14*8]
test byte [rax + 0x28], 1
jne 0x18015bbfb
mov rcx, rsi
call fcn.180081a50
movaps xmm7, xmm9
divss xmm7, dword [rax]
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x1364], 0xffffffff
mov dword [rbp - 0x1c], eax
mov edx, 1
nop dword [rax]
nop dword [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 - 0x1c], eax
inc rdx
cmp rdx, 0x270
jb 0x18015b950
mov edx, 0x270
mov dword [rbp - 0x20], edx
movaps xmm1, xmm11
movaps xmm2, xmm14
mov r10d, 2
cmp edx, 0x270
jne 0x18015b9e1
lea r8, [rbp - 0x18]
mov r9d, edx
nop dword [rax]
nop dword [rax + rax]
mov edx, dword [r8 - 4]
xor edx, dword [r8]
btr edx, 0x1f
xor edx, dword [r8 - 4]
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
and ecx, 0x9908b0df
xor ecx, dword [r8 + 0x630]
shr edx, 1
xor ecx, edx
mov dword [r8 + 0x9bc], ecx
lea r8, [r8 + 4]
sub r9, 1
jne 0x18015b9a0
mov edx, dword [rbp - 0x20]
jmp 0x18015babb
cmp edx, 0x4e0
jb 0x18015babb
xor r8d, r8d
mov eax, dword [rbp + r8*4 + 0x9a4]
mov edx, eax
xor edx, dword [rbp + r8*4 + 0x9a8]
btr edx, 0x1f
xor edx, eax
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
and ecx, 0x9908b0df
xor ecx, dword [rbp + r8*4 + 0xfd8]
shr edx, 1
xor ecx, edx
mov dword [rbp + r8*4 - 0x1c], ecx
inc r8
cmp r8, 0xe3
jb 0x18015b9f0
mov r8d, 0xe3
nop dword [rax]
mov eax, dword [rbp + r8*4 + 0x9a4]
mov edx, eax
xor edx, dword [rbp + r8*4 + 0x9a8]
btr edx, 0x1f
xor edx, eax
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
and ecx, 0x9908b0df
shr edx, 1
xor ecx, edx
xor ecx, dword [rbp + r8*4 - 0x3a8]
mov dword [rbp + r8*4 - 0x1c], ecx
inc r8
cmp r8, 0x26f
jb 0x18015ba40
mov edx, dword [rbp + 0x1360]
and edx, 0x80000000
mov eax, dword [rbp - 0x1c]
btr eax, 0x1f
or edx, eax
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
and ecx, 0x9908b0df
shr edx, 1
xor ecx, edx
xor ecx, dword [rbp + 0x614]
mov dword [rbp + 0x9a0], ecx
xor edx, edx
mov dword [rbp - 0x20], edx
mov eax, edx
mov ecx, dword [rbp + rax*4 - 0x1c]
inc edx
mov dword [rbp - 0x20], edx
mov eax, ecx
shr eax, 0xb
and eax, dword [rbp + 0x1364]
xor ecx, eax
mov eax, ecx
and eax, 0xff3a58ad
shl eax, 7
xor ecx, eax
mov eax, ecx
and eax, 0xffffdf8c
shl eax, 0xf
xor ecx, eax
mov eax, ecx
shr eax, 0x12
xor eax, ecx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
subsd xmm0, xmm11
mulsd xmm0, xmm2
addsd xmm1, xmm0
mulsd xmm2, xmm12
sub r10, 1
jne 0x18015b985
divsd xmm1, xmm2
addsd xmm1, xmm11
xorps xmm6, xmm6
cvtsd2ss xmm6, xmm1
mov rcx, qword [rsp + 0x28]
call fcn.180156510
mulss xmm6, xmm15
addss xmm0, xmm6
addss xmm0, xmm7
cvtss2sd xmm0, xmm0
mov rax, qword [r15 + r14*8]
movsd qword [rax + 0x10], xmm0
mov rax, qword [rbx + rdi*8]
mov ecx, dword [r12 + rax]
cmp dword [0x18027cdf4], ecx
jle 0x18015bbe1
lea rcx, [0x18027cdf4]
call fcn.1801c0db0
cmp dword [0x18027cdf4], 0xffffffff
jne 0x18015bbe1
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xor eax, eax
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], rax
lea r8d, [rax + 4]
lea rdx, str.Time
lea rcx, [rsp + 0x70]
call fcn.18005b090
nop
mov r8b, 1
lea rdx, [rsp + 0x70]
mov rcx, qword [rsp + 0x30]
call fcn.18015de40
mov rcx, rax
test rax, rax
jne 0x18015bbba
lea eax, [rcx - 1]
jmp 0x18015bbc4
mov rax, qword [0x1802793c8]
mov eax, dword [rcx + rax]
mov dword [0x18027cd88], eax
lea rcx, [rsp + 0x70]
call fcn.18005eec0
nop
lea rcx, [0x18027cdf4]
call fcn.1801c0d44
movsxd rax, dword [0x18027cd88]
mov rcx, qword [rsp + 0x30]
movss xmm0, dword [rax + rcx]
mov rax, qword [r15 + r14*8]
movss dword [rax + 0x24], xmm0
mov rax, qword [r15 + r14*8]
and dword [rax + 0x28], 0xfffffffe
mov rax, qword [r15 + r14*8]
mov qword [rsp + 0x20], rax
mov rdx, qword [r13 + 8]
cmp rdx, qword [r13 + 0x10]
je 0x18015bc20
mov qword [rdx], rax
add qword [r13 + 8], 8
jmp 0x18015bc2d
lea r8, [rsp + 0x20]
mov rcx, r13
call fcn.18009ccb0
mov rax, qword [rbx + rdi*8]
mov ecx, dword [r12 + rax]
cmp dword [0x18027cdbc], ecx
jle 0x18015bc6c
lea rcx, [0x18027cdbc]
call fcn.1801c0db0
cmp dword [0x18027cdbc], 0xffffffff
jne 0x18015bc6c
mov rax, qword [0x180279878]
mov qword [0x18027ce78], rax
lea rcx, [0x18027cdbc]
call fcn.1801c0d44
mov rdx, qword [rsp + 0x30]
mov rcx, rsi
call qword [0x18027ce78]
jmp 0x18015b53a
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov r13d, dword [0x180278690]
mov rdi, qword gs:[0x58]
mov esi, 8
mov r12, qword [rdi + r13*8]
mov eax, dword [r12 + rsi]
cmp dword [0x18027aa24], eax
jle 0x18015bceb
lea rcx, [0x18027aa24]
call fcn.1801c0db0
cmp dword [0x18027aa24], 0xffffffff
jne 0x18015bceb
mov rax, qword [0x1802796f0]
xor r9d, r9d
lea r8, str._Script_Engine.Actor
xor edx, edx
xor ecx, ecx
call rax
mov qword [0x18027a9d8], rax
lea rcx, [0x18027aa24]
call fcn.1801c0d44
mov rbx, qword [0x18027a9d8]
call fcn.18015aaa0
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1801563f0
mov rcx, qword [rsp + 0x70]
mov eax, dword [rsp + 0x78]
test eax, eax
jle 0x18015bf9f
mov r14, rcx
mov r15d, eax
nop
mov rbx, qword [r14]
mov qword [rsp + 0x20], rbx
mov rcx, rbx
call fcn.1800814f0
test al, al
je 0x18015bd5e
mov rdx, qword [rbp - 0x68]
cmp rdx, qword [rbp - 0x60]
je 0x18015bd4b
mov qword [rdx], rbx
add qword [rbp - 0x68], 8
jmp 0x18015bf88
lea r8, [rsp + 0x20]
lea rcx, [rbp - 0x70]
call fcn.18009ccb0
jmp 0x18015bf88
mov rdi, qword [rdi + r13*8]
mov eax, dword [rsi + rdi]
cmp dword [0x18027cda0], eax
jle 0x18015bdf4
lea rcx, [0x18027cda0]
call fcn.1801c0db0
cmp dword [0x18027cda0], 0xffffffff
jne 0x18015bdf4
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xor eax, eax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rax
lea r8d, [rax + 0xa]
lea rdx, str.RemoteRole
lea rcx, [rsp + 0x48]
call fcn.18005b090
nop
mov r8b, 1
lea rdx, [rsp + 0x48]
mov rcx, rbx
call fcn.18015de40
mov rcx, rax
test rax, rax
jne 0x18015bdcd
lea eax, [rcx - 1]
jmp 0x18015bdd7
mov rax, qword [0x1802793c8]
mov eax, dword [rcx + rax]
mov dword [0x18027ce60], eax
lea rcx, [rsp + 0x48]
call fcn.18005eec0
nop
lea rcx, [0x18027cda0]
call fcn.1801c0d44
movsxd rax, dword [0x18027ce60]
cmp byte [rax + rbx], 0
jne 0x18015be2b
mov rdx, qword [rbp - 0x68]
cmp rdx, qword [rbp - 0x60]
je 0x18015be18
mov qword [rdx], rbx
add qword [rbp - 0x68], 8
jmp 0x18015bf7f
lea r8, [rsp + 0x20]
lea rcx, [rbp - 0x70]
call fcn.18009ccb0
jmp 0x18015bf7f
mov eax, dword [rsi + rdi]
cmp dword [0x18027cdf0], eax
jle 0x18015bebf
lea rcx, [0x18027cdf0]
call fcn.1801c0db0
cmp dword [0x18027cdf0], 0xffffffff
jne 0x18015bebf
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xor edi, edi
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], rdi
lea r8d, [rdi + 0xb]
lea rdx, str.NetDormancy
lea rcx, [rsp + 0x48]
call fcn.18005b090
nop
mov r8b, 1
lea rdx, [rsp + 0x48]
mov rcx, rbx
call fcn.18015de40
mov rcx, rax
test rax, rax
jne 0x18015be96
lea eax, [rdi - 1]
jmp 0x18015bea0
mov rax, qword [0x1802793c8]
mov eax, dword [rcx + rax]
mov dword [0x18027ce74], eax
lea rcx, [rsp + 0x48]
call fcn.18005eec0
nop
lea rcx, [0x18027cdf0]
call fcn.1801c0d44
jmp 0x18015bec1
xor edi, edi
movsxd rax, dword [0x18027ce74]
cmp byte [rax + rbx], 4
jne 0x18015bede
mov rcx, rbx
call fcn.180081690
test al, al
jne 0x18015bf7f
mov ecx, 0xd0
call fcn.1801c1434
mov qword [rsp + 0x20], rax
mov qword [rax + 0x30], rdi
mov qword [rax + 0x38], 0
mov qword [rax + 0x80], rdi
mov qword [rax + 0x88], 0
mov qword [rsp + 0x20], rax
mov qword [rax], rbx
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x18015bf2c
mov qword [rdx], rax
add qword [rcx + 8], 8
jmp 0x18015bf36
lea r8, [rsp + 0x20]
call fcn.18009ccb0
mov eax, dword [r12 + rsi]
cmp dword [0x18027ce70], eax
jle 0x18015bf71
lea rcx, [0x18027ce70]
call fcn.1801c0db0
cmp dword [0x18027ce70], 0xffffffff
jne 0x18015bf71
mov rax, qword [0x180279878]
mov qword [0x18027ce00], rax
lea rcx, [0x18027ce70]
call fcn.1801c0d44
mov rdx, qword [rsp + 0x30]
mov rcx, rbx
call qword [0x18027ce00]
mov rdi, qword gs:[0x58]
add r14, 8
sub r15, 1
jne 0x18015bd20
mov eax, dword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x18015bfbc
test eax, eax
jle 0x18015bfbc
movsxd rdx, eax
shl rdx, 3
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
nop
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x18015bffd
mov rdx, qword [rbp - 0x60]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x18015bff8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18015bff8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1801c0c90
mov rcx, qword [rbp + 0x1370]
xor rcx, rsp
call fcn.1801c0ba0
lea r11, [rsp + 0x1520]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret