Function at 0x180132254
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xc18]
sub rsp, 0xcf0
mov qword [rbp + 0x1a8], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov r15b, r9b
mov rbx, r8
mov esi, edx
mov r14, rcx
call fcn.180130460
xor r12d, r12d
test al, al
je 0x180132fa7
mov r10d, dword [0x180195f94]
mov rax, qword gs:[0x58]
mov rdi, qword [rax + r10*8]
or r13, 0xffffffffffffffff
mov eax, 4
mov eax, dword [rdi + rax]
cmp dword [0x1801a1970], eax
jle 0x1801324c3
lea rcx, [0x1801a1970]
call fcn.180157af0
cmp dword [0x1801a1970], r13d
jne 0x1801324c3
lea rax, [rbp + 0x188]
mov qword [rbp + 0x10], rax
mov dword [rbp - 0x38], 0x5a
mov byte [rbp - 0x34], 0x14
mov byte [rbp - 0x33], 0x2e
mov byte [rbp - 0x32], 9
mov byte [rbp - 0x31], 0x3f
mov byte [rbp - 0x30], 0x2e
mov byte [rbp - 0x2f], 0x19
mov byte [rbp - 0x2e], 0x35
mov byte [rbp - 0x2d], 0x34
mov byte [rbp - 0x2c], 0x2e
mov byte [rbp - 0x2b], 0x3f
mov byte [rbp - 0x2a], 0x22
mov byte [rbp - 0x29], 0x2e
mov byte [rbp - 0x28], 0xe
mov byte [rbp - 0x27], 0x32
mov byte [rbp - 0x26], 0x28
mov byte [rbp - 0x25], 0x3f
mov byte [rbp - 0x24], 0x3b
mov byte [rbp - 0x23], 0x3e
xor eax, eax
mov byte [rbp - 0x22], al
mov al, byte [rbp - 0x34]
mov edx, r12d
mov al, byte [rbp + rdx - 0x34]
mov ecx, dword [rbp - 0x38]
xor cl, al
mov byte [rbp + rdx - 0x34], cl
inc rdx
cmp rdx, 0x12
jb 0x18013234a
mov byte [rbp - 0x22], r12b
xorps xmm0, xmm0
movups xmmword [rbp + 0x188], xmm0
mov qword [rbp + 0x198], r12
mov qword [rbp + 0x1a0], r12
lea rax, [rbp - 0x34]
mov r8, r13
inc r8
cmp byte [rax + r8], r12b
jne 0x180132383
lea rdx, [rbp - 0x34]
lea rcx, [rbp + 0x188]
call fcn.18000c7ac
nop
mov dword [rbp - 0x64], 0x53
mov byte [rbp - 0x60], 0x3d
mov byte [rbp - 0x5f], 0x27
mov byte [rbp - 0x5e], 0x37
mov byte [rbp - 0x5d], 0x3f
mov byte [rbp - 0x5c], 0x3f
xor eax, eax
mov byte [rbp - 0x5b], al
mov al, byte [rbp - 0x60]
mov rdx, r12
mov al, byte [rbp + rdx - 0x60]
mov ecx, dword [rbp - 0x64]
xor cl, al
mov byte [rbp + rdx - 0x60], cl
inc rdx
cmp rdx, 5
jb 0x1801323c3
mov byte [rbp - 0x5b], r12b
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
lea rax, [rbp - 0x60]
mov r8, r13
inc r8
cmp byte [rax + r8], r12b
jne 0x1801323f3
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x20]
call fcn.18000c7ac
nop
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x1b0]
call fcn.1800ceb58
nop
mov qword [rsp + 0x20], r12
mov r9b, 1
lea r8, [rbp + 0x188]
mov rdx, rax
lea rcx, [0x1801a1870]
call fcn.1800f3c28
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x180132478
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180132473
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180132473
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165930]
movdqu xmmword [rbp + 0x30], xmm0
mov byte [rbp + 0x20], r12b
xor edx, edx
lea r8d, [rdx + 6]
lea rcx, [rbp - 0x60]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x13]
lea rcx, [rbp - 0x34]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x180163df8]
call fcn.1801579fc
nop
lea rcx, [0x1801a1970]
call fcn.180157a84
mov eax, 4
mov eax, dword [rdi + rax]
cmp dword [0x1801a1cb8], eax
jle 0x1801326ef
lea rcx, [0x1801a1cb8]
call fcn.180157af0
cmp dword [0x1801a1cb8], r13d
jne 0x1801326ef
lea rax, [rbp + 0x108]
mov qword [rbp + 0x18], rax
mov eax, 0xd
mov dword [rbp - 0x20], eax
mov byte [rbp - 0x1c], 0x43
mov eax, 0x79
mov byte [rbp - 0x1b], al
mov byte [rbp - 0x1a], 0x4a
mov byte [rbp - 0x19], 0x68
mov byte [rbp - 0x18], al
mov byte [rbp - 0x17], 0x4e
mov byte [rbp - 0x16], 0x62
mov byte [rbp - 0x15], 0x63
mov byte [rbp - 0x14], al
mov byte [rbp - 0x13], 0x68
mov byte [rbp - 0x12], 0x75
mov byte [rbp - 0x11], al
mov byte [rbp - 0x10], 0x59
mov byte [rbp - 0xf], 0x65
mov byte [rbp - 0xe], 0x7f
mov byte [rbp - 0xd], 0x68
mov byte [rbp - 0xc], 0x6c
mov byte [rbp - 0xb], 0x69
xor eax, eax
mov byte [rbp - 0xa], al
mov al, byte [rbp - 0x1c]
mov rdx, r12
mov al, byte [rbp + rdx - 0x1c]
mov ecx, dword [rbp - 0x20]
xor cl, al
mov byte [rbp + rdx - 0x1c], cl
inc rdx
cmp rdx, 0x12
jb 0x180132557
mov byte [rbp - 0xa], r12b
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], r12
mov qword [rbp + 0x120], r12
lea rax, [rbp - 0x1c]
mov r8, r13
inc r8
cmp byte [rax + r8], r12b
jne 0x180132590
lea rdx, [rbp - 0x1c]
lea rcx, [rbp + 0x108]
call fcn.18000c7ac
nop
mov eax, 0x79
mov dword [rbp - 0x80], eax
mov eax, dword [rbp - 0x80]
xor al, 0x6e
mov byte [rbp - 0x7c], al
mov eax, dword [rbp - 0x80]
inc al
xor al, 0x74
mov byte [rbp - 0x7b], al
mov eax, dword [rbp - 0x80]
add al, 2
xor al, 0x64
mov byte [rbp - 0x7a], al
mov eax, dword [rbp - 0x80]
add al, 3
xor al, 0x6c
mov byte [rbp - 0x79], al
mov eax, dword [rbp - 0x80]
add al, 4
xor al, 0x6c
mov byte [rbp - 0x78], al
xor eax, eax
mov byte [rbp - 0x77], al
mov al, byte [rbp - 0x7c]
mov rdx, r12
mov al, byte [rbp + rdx - 0x7c]
mov ecx, dword [rbp - 0x80]
add cl, dl
xor cl, al
mov byte [rbp + rdx - 0x7c], cl
inc rdx
cmp rdx, 5
jb 0x1801325ed
mov byte [rbp - 0x77], r12b
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x50], xmm1
lea rax, [rbp - 0x7c]
mov r8, r13
inc r8
cmp byte [rax + r8], r12b
jne 0x18013261f
lea rdx, [rbp - 0x7c]
lea rcx, [rbp + 0x40]
call fcn.18000c7ac
nop
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x1d0]
call fcn.1800ceb58
nop
mov qword [rsp + 0x20], r12
mov r9b, 1
lea r8, [rbp + 0x108]
mov rdx, rax
lea rcx, [0x1801a2160]
call fcn.1800f3c28
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x1801326a4
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18013269f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18013269f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165930]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], r12b
xor edx, edx
lea r8d, [rdx + 6]
lea rcx, [rbp - 0x7c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x13]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x180163dec]
call fcn.1801579fc
nop
lea rcx, [0x1801a1cb8]
call fcn.180157a84
mov eax, 4
mov eax, dword [rdi + rax]
cmp dword [0x1801a1634], eax
jle 0x1801328ea
lea rcx, [0x1801a1634]
call fcn.180157af0
cmp dword [0x1801a1634], r13d
jne 0x1801328ea
lea rax, [rbp + 0x128]
mov qword [rbp + 0x18], rax
mov dword [rbp - 0x4c], 0x56
mov byte [rbp - 0x48], 0x18
mov byte [rbp - 0x47], 0x22
mov byte [rbp - 0x46], 4
mov byte [rbp - 0x45], 0x33
mov byte [rbp - 0x44], 0x25
mov byte [rbp - 0x43], 0x23
mov byte [rbp - 0x42], 0x3b
mov byte [rbp - 0x41], 0x33
mov byte [rbp - 0x40], 2
mov byte [rbp - 0x3f], 0x3e
mov byte [rbp - 0x3e], 0x24
mov byte [rbp - 0x3d], 0x33
mov byte [rbp - 0x3c], 0x37
mov byte [rbp - 0x3b], 0x32
xor eax, eax
mov byte [rbp - 0x3a], al
mov al, byte [rbp - 0x48]
mov rdx, r12
mov al, byte [rbp + rdx - 0x48]
mov ecx, dword [rbp - 0x4c]
xor cl, al
mov byte [rbp + rdx - 0x48], cl
inc rdx
cmp rdx, 0xe
jb 0x180132771
mov byte [rbp - 0x3a], r12b
xorps xmm0, xmm0
movups xmmword [rbp + 0x128], xmm0
mov qword [rbp + 0x138], r12
mov qword [rbp + 0x140], r12
lea rax, [rbp - 0x48]
mov r8, r13
inc r8
cmp byte [rax + r8], r12b
jne 0x1801327aa
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x128]
call fcn.18000c7ac
nop
mov dword [rbp - 0x58], 0x6c
mov byte [rbp - 0x54], 2
mov byte [rbp - 0x53], 0x18
mov byte [rbp - 0x52], 8
mov byte [rbp - 0x51], r12b
mov byte [rbp - 0x50], r12b
xor eax, eax
mov byte [rbp - 0x4f], al
mov al, byte [rbp - 0x54]
mov rdx, r12
mov al, byte [rbp + rdx - 0x54]
mov ecx, dword [rbp - 0x58]
xor cl, al
mov byte [rbp + rdx - 0x54], cl
inc rdx
cmp rdx, 5
jb 0x1801327ea
mov byte [rbp - 0x4f], r12b
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x70], xmm1
lea rax, [rbp - 0x54]
mov r8, r13
inc r8
cmp byte [rax + r8], r12b
jne 0x18013281a
lea rdx, [rbp - 0x54]
lea rcx, [rbp + 0x60]
call fcn.18000c7ac
nop
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x1f0]
call fcn.1800ceb58
nop
mov qword [rsp + 0x20], r12
mov r9b, 1
lea r8, [rbp + 0x128]
mov rdx, rax
lea rcx, [0x1801a1050]
call fcn.180014104
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x18013289f
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18013289a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18013289a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165930]
movdqu xmmword [rbp + 0x70], xmm0
mov byte [rbp + 0x60], r12b
xor edx, edx
lea r8d, [rdx + 6]
lea rcx, [rbp - 0x54]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xf]
lea rcx, [rbp - 0x48]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x180163de0]
call fcn.1801579fc
nop
lea rcx, [0x1801a1634]
call fcn.180157a84
mov eax, 4
mov eax, dword [rdi + rax]
cmp dword [0x1801a0d94], eax
jle 0x180132afe
lea rcx, [0x1801a0d94]
call fcn.180157af0
cmp dword [0x1801a0d94], r13d
jne 0x180132afe
lea rax, [rbp + 0x148]
mov qword [rbp + 0x18], rax
mov byte [rbp - 0x74], 0x54
mov byte [rbp - 0x73], 0x7a
mov byte [rbp - 0x72], 0x59
mov byte [rbp - 0x71], 0x7b
mov eax, 0x79
mov byte [rbp - 0x70], al
mov byte [rbp - 0x6f], 0x76
mov eax, 0x6b
mov byte [rbp - 0x6e], al
mov byte [rbp - 0x6d], 0x74
mov byte [rbp - 0x6c], 0x6a
mov byte [rbp - 0x6b], 0x5a
mov byte [rbp - 0x6a], 0x6e
lea ecx, [rax + 0xd]
mov byte [rbp - 0x69], cl
mov byte [rbp - 0x68], al
mov byte [rbp - 0x67], 0x67
mov byte [rbp - 0x66], 0x6a
mov byte [rbp - 0x65], r12b
mov al, byte [rbp - 0x74]
mov rcx, r12
mov al, byte [rbp + rcx - 0x74]
sub al, 6
mov byte [rbp + rcx - 0x74], al
inc rcx
cmp rcx, 0xf
jb 0x180132971
xorps xmm0, xmm0
movups xmmword [rbp + 0x148], xmm0
mov qword [rbp + 0x158], r12
mov qword [rbp + 0x160], r12
lea rax, [rbp - 0x74]
mov r8, r13
inc r8
cmp byte [rax + r8], r12b
jne 0x1801329a3
lea rdx, [rbp - 0x74]
lea rcx, [rbp + 0x148]
call fcn.18000c7ac
nop
mov eax, 0x72
mov byte [rsp + 0x40], al
mov eax, 0x78
mov byte [rsp + 0x41], al
mov byte [rsp + 0x42], 0x68
mov byte [rsp + 0x43], 0x70
mov byte [rsp + 0x44], 0x70
mov byte [rsp + 0x45], r12b
mov al, byte [rsp + 0x40]
mov rcx, r12
mov al, byte [rsp + rcx + 0x40]
sub al, 4
mov byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 5
jb 0x1801329ea
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x90], xmm1
lea rax, [rsp + 0x40]
mov r8, r13
inc r8
cmp byte [rax + r8], r12b
jne 0x180132a1a
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x80]
call fcn.18000c7ac
nop
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x210]
call fcn.1800ceb58
nop
mov qword [rsp + 0x20], r12
mov r9b, 1
lea r8, [rbp + 0x148]
mov rdx, rax
lea rcx, [0x1801a0d10]
call fcn.180014104
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x180132aac
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180132aa7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180132aa7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165930]
movdqu xmmword [rbp + 0x90], xmm0
mov byte [rbp + 0x80], r12b
xor edx, edx
lea r8d, [rdx + 6]
lea rcx, [rsp + 0x40]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x10]
lea rcx, [rbp - 0x74]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x180163dd4]
call fcn.1801579fc
nop
lea rcx, [0x1801a0d94]
call fcn.180157a84
test esi, esi
jne 0x180132b07
test rbx, rbx
je 0x180132b26
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp esi, eax
jne 0x180132e1f
test esi, esi
jne 0x180132b26
test rbx, rbx
je 0x180132b26
mov rbx, qword [rbx]
jmp 0x180132d78
mov eax, 4
mov eax, dword [rdi + rax]
cmp dword [0x1801a1b94], eax
jle 0x180132d49
lea rcx, [0x1801a1b94]
call fcn.180157af0
cmp dword [0x1801a1b94], r13d
jne 0x180132d49
lea rax, [rbp + 0x168]
mov qword [rbp + 0x18], rax
mov ecx, 0x7c
mov dword [rbp - 8], ecx
mov byte [rbp - 4], 0x3f
mov ecx, 0xe
mov byte [rbp - 3], cl
mov byte [rbp - 2], 0x19
lea eax, [rcx + 0xf]
mov byte [rbp - 1], al
mov byte [rbp], 8
mov byte [rbp + 1], 0x19
mov byte [rbp + 2], 0x28
mov byte [rbp + 3], 0x14
mov byte [rbp + 4], cl
mov byte [rbp + 5], 0x19
mov byte [rbp + 6], al
mov byte [rbp + 7], 0x18
xor eax, eax
mov byte [rbp + 8], al
mov al, byte [rbp - 4]
mov rdx, r12
mov al, byte [rbp + rdx - 4]
mov ecx, dword [rbp - 8]
xor cl, al
mov byte [rbp + rdx - 4], cl
inc rdx
cmp rdx, 0xc
jb 0x180132ba5
mov byte [rbp + 8], r12b
xorps xmm0, xmm0
movups xmmword [rbp + 0x168], xmm0
mov qword [rbp + 0x178], r12
mov qword [rbp + 0x180], r12
lea rax, [rbp - 4]
mov r8, r13
inc r8
cmp byte [rax + r8], r12b
jne 0x180132bde
lea rdx, [rbp - 4]
lea rcx, [rbp + 0x168]
call fcn.18000c7ac
nop
mov byte [rsp + 0x74], 0x76
mov byte [rsp + 0x75], 0x70
mov byte [rsp + 0x76], 0x7d
mov eax, 0x79
mov byte [rsp + 0x77], al
mov byte [rsp + 0x78], 0x70
mov byte [rsp + 0x79], 0x77
mov byte [rsp + 0x7a], 0x3e
mov byte [rsp + 0x7b], 0x3d
mov byte [rsp + 0x7c], r12b
mov al, byte [rsp + 0x74]
mov rcx, r12
mov edx, 0xb
mov al, byte [rsp + rcx + 0x74]
sub al, dl
mov byte [rsp + rcx + 0x74], al
inc rcx
cmp rcx, 8
jb 0x180132c35
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb0], xmm1
lea rax, [rsp + 0x74]
mov r8, r13
inc r8
cmp byte [rax + r8], r12b
jne 0x180132c65
lea rdx, [rsp + 0x74]
lea rcx, [rbp + 0xa0]
call fcn.18000c7ac
nop
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x230]
call fcn.1800ceb58
nop
mov qword [rsp + 0x20], r12
mov r9b, 1
lea r8, [rbp + 0x168]
mov rdx, rax
lea rcx, [0x1801a1380]
call fcn.1800f1b88
nop
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0x10
jb 0x180132cf7
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180132cf2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180132cf2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165930]
movdqu xmmword [rbp + 0xb0], xmm0
mov byte [rbp + 0xa0], r12b
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rsp + 0x74]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xd]
lea rcx, [rbp - 4]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x180163dc8]
call fcn.1801579fc
nop
lea rcx, [0x1801a1b94]
call fcn.180157a84
lea rax, [rbp + 0xc40]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], r14
lea r9, [0x180131a48]
lea rcx, [0x1801a1380]
call fcn.1801319c0
mov rbx, rax
xor edx, edx
mov r8d, 0x4d0
lea rcx, [rbp + 0x250]
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 0x280], 0x100001
lea r8, [rbp + 0x250]
mov rdx, rbx
lea rcx, [0x1801a2160]
call fcn.180010458
test eax, eax
jne 0x180132fa7
mov qword [rbp + 0x348], r14
lea r8, [rbp + 0x250]
mov rdx, rbx
lea rcx, [0x1801a1870]
call fcn.180010458
test eax, eax
je 0x180132de0
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x180132fa7
mov rdx, rbx
lea rcx, [0x1801a1050]
call fcn.18000e52c
cmp rbx, r13
je 0x180132fa7
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
call fcn.180131160
test al, al
je 0x180132fa7
or edx, 0xffffffff
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x180132f9e
xor edx, edx
mov r8d, 0x4d0
lea rcx, [rbp + 0x720]
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 0x750], 0x100001
mov dil, r12b
test rbx, rbx
je 0x180132e4a
mov rbx, qword [rbx]
jmp 0x180132e5a
mov r8d, esi
mov ecx, 0x7a
call fcn.1800dc5f0
mov rbx, rax
test rbx, rbx
je 0x180132dd5
test r15b, r15b
jne 0x180132ea7
xor edx, edx
mov rcx, rbx
call fcn.1800da6b4
mov rdx, rbx
lea rcx, [0x1801a0d10]
call fcn.18000e52c
test eax, eax
je 0x180132ea4
cmp byte [0x180190184], r12b
jne 0x180132fc8
cmp byte [0x18019018a], r12b
jne 0x180132fc8
jmp 0x180132fa7
mov dil, 1
lea r8, [rbp + 0x720]
mov rdx, rbx
lea rcx, [0x1801a2160]
call fcn.180010458
test eax, eax
je 0x180132efd
test dil, dil
je 0x180132ed5
mov rdx, rbx
lea rcx, [0x1801a1050]
call fcn.18000e52c
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [0x180190184], r12b
jne 0x180133093
cmp byte [0x18019018a], r12b
jne 0x180133093
jmp 0x180132fa7
mov qword [rbp + 0x818], r14
lea r8, [rbp + 0x720]
mov rdx, rbx
lea rcx, [0x1801a1870]
call fcn.180010458
test eax, eax
je 0x180132f57
test dil, dil
je 0x180132f32
mov rdx, rbx
lea rcx, [0x1801a1050]
call fcn.18000e52c
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [0x180190184], r12b
jne 0x180133162
cmp byte [0x18019018a], r12b
jne 0x180133162
jmp 0x180132fa7
mov rdx, rbx
lea rcx, [0x1801a1050]
call fcn.18000e52c
test eax, eax
je 0x180132f8f
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [0x180190184], r12b
jne 0x180133238
cmp byte [0x18019018a], r12b
jne 0x180133238
jmp 0x180132fa7
test dil, dil
jne 0x180132f9e
xor edx, edx
mov rcx, rbx
call fcn.1800da6b4
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r11, [rsp + 0xcf0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov dword [rsp + 0x48], 0x59
mov eax, 0x17
mov word [rsp + 0x4c], ax
mov eax, 0x2d
mov word [rsp + 0x4e], ax
lea ecx, [rax - 0x23]
mov word [rsp + 0x50], cx
lea eax, [rcx + 0x22]
mov word [rsp + 0x52], ax
lea eax, [rcx + 0x20]
mov word [rsp + 0x54], ax
lea eax, [rcx + 0x1f]
mov word [rsp + 0x56], ax
lea ecx, [rax + 0x13]
mov word [rsp + 0x58], cx
lea eax, [rcx - 5]
mov word [rsp + 0x5a], ax
lea edx, [rcx + 1]
mov word [rsp + 0x5c], dx
lea eax, [rcx - 0x2f]
mov word [rsp + 0x5e], ax
lea eax, [rcx - 0xb]
mov word [rsp + 0x60], ax
lea eax, [rcx - 0x11]
mov word [rsp + 0x62], ax
mov word [rsp + 0x64], cx
lea eax, [rcx - 4]
mov word [rsp + 0x66], ax
mov word [rsp + 0x68], dx
xor eax, eax
mov word [rsp + 0x6a], ax
movzx eax, word [rsp + 0x4c]
lea rcx, [rsp + 0x48]
call fcn.18005d214
mov rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.18000bdf0
nop
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0xe0]
call fcn.18012e674
lea rdx, [0x18018c308]
lea rcx, [rbp + 0xe0]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov eax, 0x58
mov word [rsp + 0x48], ax
lea edx, [rax + 0x26]
mov word [rsp + 0x4a], dx
lea eax, [rdx - 0x2d]
mov word [rsp + 0x4c], ax
lea eax, [rdx - 0xf]
mov word [rsp + 0x4e], ax
mov word [rsp + 0x50], dx
lea ecx, [rdx - 0x31]
mov word [rsp + 0x52], cx
lea ecx, [rdx - 5]
mov word [rsp + 0x54], cx
lea ecx, [rdx - 6]
mov word [rsp + 0x56], cx
mov word [rsp + 0x58], dx
mov word [rsp + 0x5a], ax
lea ecx, [rdx + 4]
mov word [rsp + 0x5c], cx
mov word [rsp + 0x5e], dx
lea ecx, [rdx - 0x20]
mov word [rsp + 0x60], cx
lea ecx, [rdx - 0xc]
mov word [rsp + 0x62], cx
lea ecx, [rdx - 2]
mov word [rsp + 0x64], cx
mov word [rsp + 0x66], ax
lea eax, [rdx - 0x13]
mov word [rsp + 0x68], ax
lea eax, [rdx - 0x10]
mov word [rsp + 0x6a], ax
mov word [rsp + 0x6c], r12w
movzx eax, word [rsp + 0x48]
lea rcx, [rsp + 0x48]
call fcn.180144d30
mov rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.18000bdf0
nop
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0xe0]
call fcn.18012e674
lea rdx, [0x18018c308]
lea rcx, [rbp + 0xe0]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov dword [rsp + 0x48], 0x4e
mov word [rsp + 0x4c], r12w
mov edx, 0x3a
mov word [rsp + 0x4e], dx
lea eax, [rdx - 0x1d]
mov word [rsp + 0x50], ax
lea eax, [rdx - 0xf]
mov word [rsp + 0x52], ax
mov word [rsp + 0x54], dx
lea ecx, [rdx - 0x2d]
mov word [rsp + 0x56], cx
lea ecx, [rdx - 0x19]
mov word [rsp + 0x58], cx
lea ecx, [rdx - 0x1a]
mov word [rsp + 0x5a], cx
mov word [rsp + 0x5c], dx
mov word [rsp + 0x5e], ax
lea ecx, [rdx - 4]
mov word [rsp + 0x60], cx
mov word [rsp + 0x62], dx
lea edx, [rax - 0x11]
mov word [rsp + 0x64], dx
lea ecx, [rax - 5]
mov word [rsp + 0x66], cx
lea ecx, [rax + 0x11]
mov word [rsp + 0x68], cx
mov word [rsp + 0x6a], ax
lea eax, [rdx + 0x15]
mov word [rsp + 0x6c], ax
lea eax, [rdx + 0x10]
mov word [rsp + 0x6e], ax
xor eax, eax
mov word [rsp + 0x70], ax
movzx eax, word [rsp + 0x4c]
lea rcx, [rsp + 0x48]
call fcn.18005d1e4
mov rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.18000bdf0
nop
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0xe0]
call fcn.18012e674
lea rdx, [0x18018c308]
lea rcx, [rbp + 0xe0]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov eax, 0x6f
mov dword [rsp + 0x48], eax
lea ecx, [rax - 0x4e]
mov word [rsp + 0x4c], cx
lea eax, [rcx - 6]
mov word [rsp + 0x4e], ax
lea eax, [rcx + 0x1c]
mov word [rsp + 0x50], ax
lea ecx, [rax - 0x33]
mov word [rsp + 0x52], cx
lea eax, [rcx + 0x12]
mov word [rsp + 0x54], ax
lea edx, [rcx + 0x10]
mov word [rsp + 0x56], dx
lea eax, [rcx - 8]
mov word [rsp + 0x58], ax
mov word [rsp + 0x5a], cx
lea eax, [rcx + 0x31]
mov word [rsp + 0x5c], ax
lea eax, [rcx - 3]
mov word [rsp + 0x5e], ax
lea eax, [rcx + 0x13]
mov word [rsp + 0x60], ax
mov word [rsp + 0x62], cx
lea eax, [rcx + 4]
mov word [rsp + 0x64], ax
lea edx, [rcx + 1]
mov word [rsp + 0x66], dx
xor eax, eax
mov word [rsp + 0x68], ax
movzx eax, word [rsp + 0x4c]
lea rcx, [rsp + 0x48]
call fcn.18005d3d4
mov rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.18000bdf0
nop
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0xe0]
call fcn.18012e674
lea rdx, [0x18018c308]
lea rcx, [rbp + 0xe0]
call sub.VCRUNTIME140.dll__CxxThrowException
int3