Function at 0x18015ba90
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encode data using xor
Parse pe header

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x5a8]
sub rsp, 0x6a8
mov qword [rbp + 0x518], 0xfffffffffffffffe
mov rbx, rdx
mov rsi, rcx
mov edi, 8
lea edx, [rdi + 0x59]
lea ecx, [rdi + 0x5a]
lea r14d, [rdi - 7]
cmp qword [rbx + 0x10], r14
jne 0x18015bf00
mov rax, rbx
cmp qword [rbx + 0x18], rdi
jb 0x18015baeb
mov rax, qword [rbx]
cmp word [rax], dx
jne 0x18015bcd1
mov eax, 0x7e
mov dword [rbp + 0x70], eax
lea ecx, [rax - 0x59]
mov word [rbp + 0x74], cx
lea r10d, [rax - 0x2e]
mov word [rbp + 0x76], r10w
lea ecx, [rax - 0x5b]
mov word [rbp + 0x78], cx
lea eax, [rcx + 0x3b]
mov word [rbp + 0x7a], ax
lea ecx, [rax - 0x2d]
mov word [rbp + 0x7c], cx
lea edx, [rax - 0x50]
mov word [rbp + 0x7e], dx
lea r9d, [r10 - 0x35]
mov word [rbp + 0x80], r9w
lea edx, [rax - 0x4e]
mov word [rbp + 0x82], dx
lea r10d, [rax - 0x47]
mov word [rbp + 0x84], r10w
mov word [rbp + 0x86], dx
lea r10d, [rax - 0x45]
mov word [rbp + 0x88], r10w
mov word [rbp + 0x8a], ax
lea edx, [rax - 0x51]
mov word [rbp + 0x8c], dx
lea r10d, [rax - 0x48]
mov word [rbp + 0x8e], r10w
mov word [rbp + 0x90], r9w
lea edx, [rax - 0x4c]
mov word [rbp + 0x92], dx
mov word [rbp + 0x94], dx
lea r10d, [rax - 0x41]
mov word [rbp + 0x96], r10w
lea r8d, [rax - 0x4d]
mov word [rbp + 0x98], r8w
lea r10d, [rax - 0x44]
mov word [rbp + 0x9a], r10w
mov word [rbp + 0x9c], r9w
mov word [rbp + 0x9e], ax
lea r10d, [rax - 0x42]
mov word [rbp + 0xa0], r10w
lea r10d, [rax - 0x53]
mov word [rbp + 0xa2], r10w
lea r10d, [rax - 0x46]
mov word [rbp + 0xa4], r10w
mov word [rbp + 0xa6], r10w
mov word [rbp + 0xa8], r9w
lea r11d, [rax - 0x52]
mov word [rbp + 0xaa], r11w
mov word [rbp + 0xac], ax
mov word [rbp + 0xae], r10w
mov word [rbp + 0xb0], r11w
mov word [rbp + 0xb2], r8w
lea r8d, [rax - 0x4b]
mov word [rbp + 0xb4], r8w
mov word [rbp + 0xb6], ax
mov word [rbp + 0xb8], cx
mov word [rbp + 0xba], di
mov word [rbp + 0xbc], r9w
mov word [rbp + 0xbe], r11w
mov word [rbp + 0xc0], dx
lea eax, [rcx - 0x12]
mov word [rbp + 0xc2], ax
lea eax, [rcx - 0x2a]
mov word [rbp + 0xc4], ax
xor eax, eax
mov word [rbp + 0xc6], ax
movzx eax, word [rbp + 0x74]
xor edi, edi
mov edx, edi
lea r8d, [rcx - 8]
movzx eax, word [rbp + rdx*2 + 0x74]
mov ecx, dword [rbp + 0x70]
xor cx, ax
mov word [rbp + rdx*2 + 0x74], cx
add rdx, r14
cmp rdx, r8
jb 0x18015bc86
mov word [rbp + 0xc6], di
lea rcx, [rbp + 0x74]
call fcn.18007aae4
nop
xor edx, edx
lea r8d, [rdx + 0x54]
lea rcx, [rbp + 0x74]
call qword [sym.imp.VCRUNTIME140.dll_memset]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.1801578c0
jmp 0x18015dd92
mov rax, rbx
cmp qword [rbx + 0x18], rdi
jb 0x18015bcdd
mov rax, qword [rbx]
cmp word [rax], cx
jne 0x18015bf00
mov dword [rbp + 0x1dc], 2
mov eax, 0x59
mov word [rbp + 0x1e0], ax
lea r8d, [rax - 0x2d]
mov word [rbp + 0x1e2], r8w
lea eax, [r8 + 0x33]
mov word [rbp + 0x1e4], ax
lea ecx, [rax - 0x3d]
mov word [rbp + 0x1e6], cx
lea eax, [rcx + 0x2b]
mov word [rbp + 0x1e8], ax
lea r15d, [r8 + 0x46]
mov word [rbp + 0x1ea], r15w
lea r9d, [r8 + 0x3b]
mov word [rbp + 0x1ec], r9w
lea r12d, [r8 + 0x40]
mov word [rbp + 0x1ee], r12w
lea r10d, [r8 + 0x3f]
mov word [rbp + 0x1f0], r10w
mov word [rbp + 0x1f2], r12w
lea r11d, [r8 + 0x39]
mov word [rbp + 0x1f4], r11w
mov word [rbp + 0x1f6], cx
lea eax, [rcx + 0x4f]
mov word [rbp + 0x1f8], ax
lea eax, [rcx + 0x48]
mov word [rbp + 0x1fa], ax
mov word [rbp + 0x1fc], r9w
lea eax, [rcx + 0x4c]
mov word [rbp + 0x1fe], ax
mov word [rbp + 0x200], ax
mov word [rbp + 0x202], dx
lea eax, [rcx + 0x4b]
mov word [rbp + 0x204], ax
lea edx, [rcx + 0x44]
mov word [rbp + 0x206], dx
mov word [rbp + 0x208], r9w
mov word [rbp + 0x20a], cx
lea edx, [rcx + 0x3e]
mov word [rbp + 0x20c], dx
lea edx, [rcx + 0x55]
mov word [rbp + 0x20e], dx
lea edx, [rcx + 0x42]
mov word [rbp + 0x210], dx
mov word [rbp + 0x212], dx
mov word [rbp + 0x214], r9w
lea r13d, [r8 + 0x44]
mov word [rbp + 0x216], r13w
mov word [rbp + 0x218], cx
mov word [rbp + 0x21a], dx
mov word [rbp + 0x21c], r13w
mov word [rbp + 0x21e], ax
lea edx, [rcx + 0x4d]
mov word [rbp + 0x220], dx
mov word [rbp + 0x222], cx
lea edx, [rcx + 0x30]
mov word [rbp + 0x224], dx
lea edx, [rcx + 0x25]
mov word [rbp + 0x226], dx
mov word [rbp + 0x228], cx
lea r11d, [r8 + 0x25]
mov word [rbp + 0x22a], r11w
mov word [rbp + 0x22c], r9w
lea r11d, [r8 + 0x35]
mov word [rbp + 0x22e], r11w
lea r14d, [r8 + 0x4a]
mov word [rbp + 0x230], r14w
mov word [rbp + 0x232], r10w
mov word [rbp + 0x234], ax
mov word [rbp + 0x236], r12w
xor eax, eax
mov word [rbp + 0x238], ax
movzx eax, word [rbp + 0x1e0]
xor edi, edi
mov edx, edi
lea r14d, [r8 - 0x2b]
movzx eax, word [rbp + rdx*2 + 0x1e0]
mov ecx, dword [rbp + 0x1dc]
xor cx, ax
mov word [rbp + rdx*2 + 0x1e0], cx
add rdx, r14
cmp rdx, r8
jb 0x18015bea6
mov word [rbp + 0x238], di
lea rcx, [rbp + 0x1e0]
call fcn.18007aae4
nop
xor edx, edx
lea r8d, [rdx + 0x5a]
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.VCRUNTIME140.dll_memset]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.18015868c
jmp 0x18015dd92
mov rdx, rbx
lea rcx, [rbp + 0x520]
call fcn.18007a534
mov rdx, rax
mov eax, 0x65
mov word [rbp + 0x34], ax
mov eax, 0x38
mov word [rbp + 0x36], ax
mov eax, 0x67
mov word [rbp + 0x38], ax
lea r9d, [rax - 0x3d]
mov word [rbp + 0x3a], r9w
lea eax, [r9 + 0x2f]
mov word [rbp + 0x3c], ax
lea eax, [r9 + 0x50]
mov word [rbp + 0x3e], ax
lea eax, [r9 + 0x45]
mov word [rbp + 0x40], ax
lea ecx, [rax + 9]
mov word [rbp + 0x42], cx
lea r8d, [r9 + 0x49]
mov word [rbp + 0x44], r8w
mov word [rbp + 0x46], cx
lea ecx, [rax + 2]
mov word [rbp + 0x48], cx
mov word [rbp + 0x4a], r9w
lea ecx, [rax + 0xe]
mov word [rbp + 0x4c], cx
lea r15d, [r9 + 0x48]
mov word [rbp + 0x4e], r15w
mov word [rbp + 0x50], ax
lea r14d, [r9 + 0x4c]
mov word [rbp + 0x52], r14w
mov word [rbp + 0x54], r14w
lea r12d, [r9 + 0x43]
mov word [rbp + 0x56], r12w
lea ecx, [rax + 0xa]
mov word [rbp + 0x58], cx
lea ecx, [rax - 1]
mov word [rbp + 0x5a], cx
mov word [rbp + 0x5c], ax
mov word [rbp + 0x5e], r9w
lea r13d, [r9 + 0x46]
mov word [rbp + 0x60], r13w
mov word [rbp + 0x62], r8w
mov word [rbp + 0x64], r14w
mov word [rbp + 0x66], ax
lea eax, [rcx - 0x2a]
mov word [rbp + 0x68], ax
mov word [rbp + 0x6a], r9w
xor edi, edi
mov word [rbp + 0x6c], di
movzx eax, word [rbp + 0x34]
mov ecx, edi
lea r8d, [r9 - 0x29]
movzx eax, word [rbp + rcx*2 + 0x34]
sub ax, 0xa
mov word [rbp + rcx*2 + 0x34], ax
add rcx, r8
cmp rcx, 0x1c
jb 0x18015bfe3
lea rcx, [rbp + 0x34]
call fcn.180136a78
nop
xor edx, edx
lea r8d, [rdx + 0x3a]
lea rcx, [rbp + 0x34]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov ecx, dword [0x1802bccdc]
mov rax, qword gs:[0x58]
mov edx, 4
mov rax, qword [rax + rcx*8]
mov qword [rbp + 0x438], rax
or rsi, 0xffffffffffffffff
mov eax, dword [rax + rdx]
cmp dword [0x1802c4448], eax
jle 0x18015c279
lea rcx, [0x1802c4448]
call fcn.1802696f0
cmp dword [0x1802c4448], esi
jne 0x18015c279
lea rax, [rbp + 0x4f8]
mov qword [rbp + 0x18], rax
mov dword [rsp + 0x5c], 0x20
lea eax, [rsi + 0x64]
mov byte [rsp + 0x60], al
mov byte [rsp + 0x61], 0x52
mov byte [rsp + 0x62], 0x45
mov byte [rsp + 0x63], 0x41
mov byte [rsp + 0x64], 0x54
mov byte [rsp + 0x65], 0x45
mov byte [rsp + 0x66], 0x66
mov byte [rsp + 0x67], 0x49
mov byte [rsp + 0x68], 0x4c
mov byte [rsp + 0x69], 0x45
mov byte [rsp + 0x6a], 0x77
xor eax, eax
mov byte [rsp + 0x6b], al
mov al, byte [rsp + 0x60]
mov rdx, rdi
lea r15d, [rsi + 2]
mov al, byte [rsp + rdx + 0x60]
mov ecx, dword [rsp + 0x5c]
xor cl, al
mov byte [rsp + rdx + 0x60], cl
add rdx, r15
cmp rdx, 0xb
jb 0x18015c0bb
mov byte [rsp + 0x6b], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x4f8], xmm0
mov qword [rbp + 0x508], rdi
mov qword [rbp + 0x510], rdi
lea rax, [rsp + 0x60]
mov r8, rsi
mov r15d, 0x72
inc r8
cmp byte [rax + r8], dil
jne 0x18015c0fd
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x4f8]
call fcn.18007b70c
nop
mov eax, 0x21
mov dword [rbp - 0x80], eax
mov byte [rbp - 0x7c], 0x4a
lea ecx, [rax + 0x23]
mov byte [rbp - 0x7b], cl
lea eax, [rcx + 0xf]
mov byte [rbp - 0x7a], al
mov byte [rbp - 0x79], 0x4f
mov byte [rbp - 0x78], cl
lea eax, [rcx + 9]
mov byte [rbp - 0x77], al
mov byte [rbp - 0x76], 0x12
mov byte [rbp - 0x75], 0x13
xor eax, eax
mov byte [rbp - 0x74], al
mov al, byte [rbp - 0x7c]
mov rdx, rdi
lea ebx, [rcx - 0x43]
lea r8d, [rcx - 0x3c]
mov al, byte [rbp + rdx - 0x7c]
mov ecx, dword [rbp - 0x80]
xor cl, al
mov byte [rbp + rdx - 0x7c], cl
add rdx, rbx
cmp rdx, r8
jb 0x18015c157
mov byte [rbp - 0x74], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x498], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4a8], xmm1
lea rax, [rbp - 0x7c]
mov r8, rsi
mov rbx, qword [rbp + 0x5f8]
inc r8
cmp byte [rax + r8], dil
jne 0x18015c193
lea rdx, [rbp - 0x7c]
lea rcx, [rbp + 0x498]
call fcn.18007b70c
nop
lea rdx, [rbp + 0x498]
lea rcx, [rbp + 0x540]
call fcn.180188b20
nop
mov qword [rsp + 0x20], rdi
mov r9d, 1
lea r8, [rbp + 0x4f8]
mov rdx, rax
lea rcx, [0x1802c44e0]
call fcn.1800f4d50
nop
mov rdx, qword [rbp + 0x4b0]
cmp rdx, 0x10
jb 0x18015c227
inc rdx
mov rcx, qword [rbp + 0x498]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18015c222
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18015c222
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rbp + 0x4a8], xmm0
mov byte [rbp + 0x498], dil
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rbp - 0x7c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xc]
lea rcx, [rsp + 0x60]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027dd14]
call fcn.18026951c
nop
lea rcx, [0x1802c4448]
call fcn.180269690
mov eax, 8
cmp qword [rbx + 0x18], rax
jb 0x18015c287
mov rbx, qword [rbx]
mov dword [rsp + 0x30], 0x80
mov r9d, 1
mov r8d, 0x80000000
mov rdx, rbx
lea rcx, [0x1802c44e0]
call fcn.1800f5880
mov qword [rbp + 0x18], rax
cmp rax, rsi
jne 0x18015c4d0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x5f8], eax
mov eax, 0x5f
mov word [rbp + 0x23c], ax
lea ecx, [rax - 0x3a]
mov word [rbp + 0x23e], cx
lea r11d, [rax + 2]
mov word [rbp + 0x240], r11w
lea ebx, [rax - 0x3b]
mov word [rbp + 0x242], bx
lea eax, [rcx + 0x22]
mov word [rbp + 0x244], ax
lea edx, [rcx + 0x4e]
mov word [rbp + 0x246], dx
lea r8d, [rcx + 0x54]
mov word [rbp + 0x248], r8w
mov word [rbp + 0x24a], r13w
lea esi, [rcx + 0x43]
mov word [rbp + 0x24c], si
mov word [rbp + 0x24e], bx
mov word [rbp + 0x250], r15w
mov word [rbp + 0x252], dx
lea r8d, [rcx + 0x53]
mov word [rbp + 0x254], r8w
mov word [rbp + 0x256], bx
mov word [rbp + 0x258], dx
lea eax, [rcx + 0x4f]
mov word [rbp + 0x25a], ax
lea ecx, [rbx + 0x45]
mov word [rbp + 0x25c], cx
mov word [rbp + 0x25e], r15w
mov word [rbp + 0x260], bx
lea r11d, [rbx + 0x41]
mov word [rbp + 0x262], r11w
mov word [rbp + 0x264], bx
lea eax, [rbx + 0x46]
mov word [rbp + 0x266], ax
mov word [rbp + 0x268], r12w
mov word [rbp + 0x26a], r13w
mov word [rbp + 0x26c], cx
mov word [rbp + 0x26e], bx
lea eax, [rbx + 0x57]
mov word [rbp + 0x270], ax
mov word [rbp + 0x272], r12w
mov word [rbp + 0x274], r8w
lea r12d, [rbx + 0x48]
mov word [rbp + 0x276], r12w
mov word [rbp + 0x278], bx
lea eax, [rbx + 0x53]
mov word [rbp + 0x27a], ax
mov word [rbp + 0x27c], r12w
mov word [rbp + 0x27e], cx
mov word [rbp + 0x280], r13w
mov word [rbp + 0x282], r13w
lea eax, [rbx + 0x43]
mov word [rbp + 0x284], ax
mov word [rbp + 0x286], dx
mov word [rbp + 0x288], si
mov word [rbp + 0x28a], cx
lea eax, [rbx + 0xe]
mov word [rbp + 0x28c], ax
mov word [rbp + 0x28e], bx
lea eax, [rbx + 0x25]
mov word [rbp + 0x290], ax
mov word [rbp + 0x292], r14w
mov word [rbp + 0x294], r14w
mov word [rbp + 0x296], dx
mov word [rbp + 0x298], r14w
lea eax, [rbx + 0x1a]
mov word [rbp + 0x29a], ax
mov word [rbp + 0x29c], bx
mov word [rbp + 0x29e], di
movzx eax, word [rbp + 0x23c]
lea ecx, [rbx + 0xd]
lea edx, [rbx - 0x23]
lea r8d, [rbx - 0x20]
movzx eax, word [rbp + rdi*2 + 0x23c]
sub ax, r8w
mov word [rbp + rdi*2 + 0x23c], ax
add rdi, rdx
cmp rdi, rcx
jb 0x18015c487
mov edx, dword [rbp + 0x5f8]
lea rcx, [rbp + 0x23c]
call fcn.18009550c
nop
xor edx, edx
lea r8d, [rdx + 0x64]
lea rcx, [rbp + 0x23c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
xor al, al
jmp 0x18015dd95
xor eax, eax
mov qword [rbp + 0x10], rax
lea ebx, [rax + 0x5f]
lea r12d, [rax + 0x6c]
mov rax, qword [rbp + 0x438]
mov ecx, 4
mov eax, dword [rax + rcx]
cmp dword [0x1802c43ac], eax
jle 0x18015c785
lea rcx, [0x1802c43ac]
call fcn.1802696f0
cmp dword [0x1802c43ac], esi
jne 0x18015c785
lea rax, [rbp + 0x4d8]
mov qword [rbp + 0x5f8], rax
lea eax, [rbx - 0x2c]
mov dword [rsp + 0x6c], eax
mov byte [rsp + 0x70], 0x74
lea ecx, [rbx - 9]
mov byte [rsp + 0x71], cl
mov byte [rsp + 0x72], 0x47
lea eax, [rbx + 0x16]
mov byte [rsp + 0x73], al
lea eax, [rbx - 5]
mov byte [rsp + 0x74], al
mov byte [rsp + 0x75], bl
mov byte [rsp + 0x76], cl
lea edx, [rbx + 1]
mov byte [rsp + 0x77], dl
mov byte [rsp + 0x78], al
lea eax, [rbx - 0x16]
mov byte [rsp + 0x79], al
mov byte [rsp + 0x7a], cl
mov byte [rsp + 0x7b], r14b
mov byte [rsp + 0x7c], 0x4b
xor eax, eax
mov byte [rsp + 0x7d], al
mov al, byte [rsp + 0x70]
mov rdx, rdi
lea r14d, [rbx - 0x5e]
mov al, byte [rsp + rdx + 0x70]
mov ecx, dword [rsp + 0x6c]
xor cl, al
mov byte [rsp + rdx + 0x70], cl
add rdx, r14
cmp rdx, 0xd
jb 0x18015c57d
mov byte [rsp + 0x7d], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x4d8], xmm0
mov qword [rbp + 0x4e8], rdi
mov qword [rbp + 0x4f0], rdi
lea rax, [rsp + 0x70]
mov r8, rsi
mov r14d, 0x76
inc r8
cmp byte [rax + r8], dil
jne 0x18015c5bf
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x4d8]
call fcn.18007b70c
nop
mov dword [rsp + 0x4c], ebx
mov eax, dword [rsp + 0x4c]
xor al, 0x6b
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x4c]
mov ebx, 1
add al, bl
lea r11d, [rbx + 0x64]
xor al, r11b
mov byte [rsp + 0x51], al
mov eax, dword [rsp + 0x4c]
add al, 2
xor al, r15b
mov byte [rsp + 0x52], al
mov eax, dword [rsp + 0x4c]
add al, 3
xor al, 0x6e
mov byte [rsp + 0x53], al
mov eax, dword [rsp + 0x4c]
add al, 4
xor al, r11b
mov byte [rsp + 0x54], al
mov eax, dword [rsp + 0x4c]
add al, 5
xor al, r12b
mov byte [rsp + 0x55], al
mov eax, dword [rsp + 0x4c]
add al, 6
xor al, 0x33
mov byte [rsp + 0x56], al
mov eax, dword [rsp + 0x4c]
add al, 7
xor al, 0x32
mov byte [rsp + 0x57], al
xor eax, eax
mov byte [rsp + 0x58], al
mov al, byte [rsp + 0x50]
mov rdx, rdi
lea r13d, [rbx + 7]
mov al, byte [rsp + rdx + 0x50]
mov ecx, dword [rsp + 0x4c]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x50], cl
add rdx, rbx
cmp rdx, r13
jb 0x18015c65a
mov byte [rsp + 0x58], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x478], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x488], xmm1
lea rax, [rsp + 0x50]
mov r8, rsi
mov r13d, 0x70
inc r8
cmp byte [rax + r8], dil
jne 0x18015c69a
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x478]
call fcn.18007b70c
nop
lea rdx, [rbp + 0x478]
lea rcx, [rbp + 0x560]
call fcn.180188b20
nop
mov qword [rsp + 0x20], rdi
mov r9b, bl
lea r8, [rbp + 0x4d8]
mov rdx, rax
lea rcx, [0x1802c4600]
call fcn.180169f8c
nop
mov rdx, qword [rbp + 0x490]
mov ebx, 0x10
cmp rdx, rbx
jb 0x18015c730
inc rdx
mov rcx, qword [rbp + 0x478]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18015c72b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18015c72b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rbp + 0x488], xmm0
mov byte [rbp + 0x478], dil
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rsp + 0x50]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xe]
lea rcx, [rsp + 0x70]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027dd08]
call fcn.18026951c
nop
lea rcx, [0x1802c43ac]
call fcn.180269690
jmp 0x18015c78a
mov ebx, 0x10
lea rcx, [0x1802c4618]
cmp qword [0x1802c4630], rbx
cmovae rcx, qword [0x1802c4618]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
jne 0x18015c7dd
lea rcx, [0x1802c4618]
cmp qword [0x1802c4630], rbx
cmovae rcx, qword [0x1802c4618]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x1802c4610], rax
mov r8, rax
lea rdx, [0x1802c4618]
call fcn.18008c99c
lea rdx, [rbp + 0x10]
mov rcx, qword [rbp + 0x18]
call qword [0x1802c4608]
test eax, eax
jne 0x18015cb82
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x5f8], eax
mov eax, 0x2b
mov dword [rbp - 0x60], eax
mov eax, dword [rbp - 0x60]
xor ax, 0x5b
mov word [rbp - 0x5c], ax
mov eax, dword [rbp - 0x60]
mov r13d, 1
add ax, r13w
xor ax, 0x21
mov word [rbp - 0x5a], ax
mov eax, dword [rbp - 0x60]
add ax, 2
xor ax, 0x5d
mov word [rbp - 0x58], ax
mov eax, dword [rbp - 0x60]
add ax, 3
lea r10d, [r13 + 0x1f]
xor ax, r10w
mov word [rbp - 0x56], ax
mov eax, dword [rbp - 0x60]
add ax, 4
xor ax, 0x43
mov word [rbp - 0x54], ax
mov eax, dword [rbp - 0x60]
add ax, 5
lea r14d, [r13 + 0x6e]
xor ax, r14w
mov word [rbp - 0x52], ax
mov eax, dword [rbp - 0x60]
add ax, 6
xor ax, 0x75
mov word [rbp - 0x50], ax
mov eax, dword [rbp - 0x60]
add ax, 7
xor ax, r12w
mov word [rbp - 0x4e], ax
mov eax, dword [rbp - 0x60]
add ax, 8
lea edx, [r13 + 0x63]
xor ax, dx
mov word [rbp - 0x4c], ax
mov eax, dword [rbp - 0x60]
add ax, 9
xor ax, r10w
mov word [rbp - 0x4a], ax
mov eax, dword [rbp - 0x60]
add ax, 0xa
lea r9d, [r13 + 0x6d]
xor ax, r9w
mov word [rbp - 0x48], ax
mov eax, dword [rbp - 0x60]
add ax, 0xb
xor ax, r14w
mov word [rbp - 0x46], ax
mov eax, dword [rbp - 0x60]
add ax, 0xc
lea r8d, [r13 + 0x73]
xor ax, r8w
mov word [rbp - 0x44], ax
mov eax, dword [rbp - 0x60]
add ax, 0xd
xor ax, r10w
mov word [rbp - 0x42], ax
mov eax, dword [rbp - 0x60]
add ax, 0xe
xor ax, r14w
mov word [rbp - 0x40], ax
mov eax, dword [rbp - 0x60]
add ax, 0xf
xor ax, 0x62
mov word [rbp - 0x3e], ax
mov eax, dword [rbp - 0x60]
add ax, bx
xor ax, r8w
mov word [rbp - 0x3c], ax
mov eax, dword [rbp - 0x60]
add ax, 0x11
xor ax, 0x61
mov word [rbp - 0x3a], ax
mov eax, dword [rbp - 0x60]
add ax, 0x12
lea r8d, [r13 + 0x68]
xor ax, r8w
mov word [rbp - 0x38], ax
mov eax, dword [rbp - 0x60]
add ax, 0x13
xor ax, r9w
mov word [rbp - 0x36], ax
mov eax, dword [rbp - 0x60]
add ax, 0x14
xor ax, r10w
mov word [rbp - 0x34], ax
mov eax, dword [rbp - 0x60]
add ax, 0x15
xor ax, 0x73
mov word [rbp - 0x32], ax
mov eax, dword [rbp - 0x60]
add ax, 0x16
xor ax, 0x68
mov word [rbp - 0x30], ax
mov eax, dword [rbp - 0x60]
add ax, 0x17
lea r11d, [r13 + 0x64]
xor ax, r11w
mov word [rbp - 0x2e], ax
mov eax, dword [rbp - 0x60]
add ax, 0x18
xor ax, r12w
mov word [rbp - 0x2c], ax
mov eax, dword [rbp - 0x60]
add ax, 0x19
xor ax, r12w
mov word [rbp - 0x2a], ax
mov eax, dword [rbp - 0x60]
add ax, 0x1a
xor ax, 0x63
mov word [rbp - 0x28], ax
mov eax, dword [rbp - 0x60]
add ax, 0x1b
xor ax, r14w
mov word [rbp - 0x26], ax
mov eax, dword [rbp - 0x60]
add ax, 0x1c
xor ax, dx
mov word [rbp - 0x24], ax
mov eax, dword [rbp - 0x60]
add ax, 0x1d
xor ax, r11w
mov word [rbp - 0x22], ax
mov eax, dword [rbp - 0x60]
add ax, 0x1e
lea esi, [rdx - 0x3d]
xor ax, si
mov word [rbp - 0x20], ax
mov eax, dword [rbp - 0x60]
add ax, 0x1f
lea r10d, [r13 + 0x72]
xor ax, r10w
mov word [rbp - 0x1e], ax
mov eax, dword [rbp - 0x60]
lea ecx, [rdx - 0x44]
add ax, cx
xor ax, cx
mov word [rbp - 0x1c], ax
mov eax, dword [rbp - 0x60]
add ax, 0x21
xor ax, 0x66
mov word [rbp - 0x1a], ax
mov eax, dword [rbp - 0x60]
add ax, 0x22
xor ax, r8w
mov word [rbp - 0x18], ax
mov eax, dword [rbp - 0x60]
add ax, 0x23
xor ax, r12w
mov word [rbp - 0x16], ax
mov eax, dword [rbp - 0x60]
add ax, 0x24
xor ax, r11w
mov word [rbp - 0x14], ax
mov eax, dword [rbp - 0x60]
add ax, 0x25
mov edx, ecx
xor ax, dx
mov word [rbp - 0x12], ax
mov eax, dword [rbp - 0x60]
add ax, 0x26
xor ax, r10w
mov word [rbp - 0x10], ax
mov eax, dword [rbp - 0x60]
add ax, si
xor ax, r8w
mov word [rbp - 0xe], ax
mov eax, dword [rbp - 0x60]
add ax, 0x28
xor ax, 0x7a
mov word [rbp - 0xc], ax
mov eax, dword [rbp - 0x60]
add ax, 0x29
xor ax, r11w
mov word [rbp - 0xa], ax
mov eax, dword [rbp - 0x60]
add ax, 0x2a
xor ax, 0x2e
mov word [rbp - 8], ax
mov eax, dword [rbp - 0x60]
add ax, 0x2b
xor ax, dx
mov word [rbp - 6], ax
mov eax, dword [rbp - 0x60]
add ax, 0x2c
xor ax, 0x45
mov word [rbp - 4], ax
mov eax, dword [rbp - 0x60]
add ax, 0x2d
xor ax, r15w
mov word [rbp - 2], ax
mov eax, dword [rbp - 0x60]
add ax, 0x2e
xor ax, r15w
mov word [rbp], ax
mov eax, dword [rbp - 0x60]
add ax, 0x2f
xor ax, r14w
mov word [rbp + 2], ax
mov eax, dword [rbp - 0x60]
add ax, 0x30
xor ax, r15w
mov word [rbp + 4], ax
mov eax, dword [rbp - 0x60]
add ax, 0x31
xor ax, 0x3a
mov word [rbp + 6], ax
mov eax, dword [rbp - 0x60]
add ax, 0x32
xor ax, dx
mov word [rbp + 8], ax
xor eax, eax
mov word [rbp + 0xa], ax
movzx eax, word [rbp - 0x5c]
mov rdx, rdi
lea esi, [rcx + 0x13]
movzx eax, word [rbp + rdx*2 - 0x5c]
mov ecx, dword [rbp - 0x60]
add cx, dx
xor cx, ax
mov word [rbp + rdx*2 - 0x5c], cx
add rdx, r13
cmp rdx, rsi
jb 0x18015cb34
mov word [rbp + 0xa], di
mov edx, dword [rbp + 0x5f8]
lea rcx, [rbp - 0x5c]
call fcn.18009550c
nop
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp - 0x5c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x18015c4c9
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x418], xmm0
mov qword [rbp + 0x428], rdi
mov edx, dword [rbp + 0x10]
add rdx, 0x1000
lea rcx, [rbp + 0x418]
call fcn.1800aef18
mov ebx, 0x69
mov rax, qword [rbp + 0x438]
mov ecx, 4
mov eax, dword [rax + rcx]
cmp dword [0x1802c456c], eax
jle 0x18015cde8
lea rcx, [0x1802c456c]
call fcn.1802696f0
cmp dword [0x1802c456c], esi
jne 0x18015cde8
lea rax, [rbp + 0x4b8]
mov qword [rbp + 0x5f8], rax
mov dword [rbp - 0x70], 0x5a
lea r8d, [rbx - 0x61]
mov byte [rbp - 0x6c], r8b
mov byte [rbp - 0x6b], 0x3f
lea eax, [rbx - 0x2e]
mov byte [rbp - 0x6a], al
mov byte [rbp - 0x69], 0x3e
lea ecx, [rbx - 0x4d]
mov byte [rbp - 0x68], cl
lea eax, [rbx - 0x36]
mov byte [rbp - 0x67], al
mov byte [rbp - 0x66], 0x36
mov byte [rbp - 0x65], 0x3f
xor eax, eax
mov byte [rbp - 0x64], al
mov al, byte [rbp - 0x6c]
mov rdx, rdi
lea r13d, [rbx - 0x68]
mov al, byte [rbp + rdx - 0x6c]
mov ecx, dword [rbp - 0x70]
xor cl, al
mov byte [rbp + rdx - 0x6c], cl
add rdx, r13
cmp rdx, r8
jb 0x18015cc30
mov byte [rbp - 0x64], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x4b8], xmm0
mov qword [rbp + 0x4c8], rdi
mov qword [rbp + 0x4d0], rdi
lea rax, [rbp - 0x6c]
mov r8, rsi
mov r13d, 0x70
inc r8
cmp byte [rax + r8], dil
jne 0x18015cc6e
lea rdx, [rbp - 0x6c]
lea rcx, [rbp + 0x4b8]
call fcn.18007b70c
nop
mov byte [rsp + 0x40], 0x6f
mov byte [rsp + 0x41], bl
mov byte [rsp + 0x42], r14b
mov byte [rsp + 0x43], r15b
mov byte [rsp + 0x44], bl
mov byte [rsp + 0x45], r13b
mov byte [rsp + 0x46], 0x37
mov byte [rsp + 0x47], 0x36
mov byte [rsp + 0x48], dil
mov al, byte [rsp + 0x40]
mov rcx, rdi
mov r12d, 1
lea r14d, [r12 + 7]
mov al, byte [rsp + rcx + 0x40]
sub al, 4
mov byte [rsp + rcx + 0x40], al
add rcx, r12
cmp rcx, r14
jb 0x18015ccc5
xorps xmm0, xmm0
movups xmmword [rbp + 0x458], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x468], xmm1
lea rax, [rsp + 0x40]
mov r14d, 0x76
lea r12d, [r14 - 0xa]
inc rsi
cmp byte [rax + rsi], dil
jne 0x18015ccfb
mov r8, rsi
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x458]
call fcn.18007b70c
nop
lea rdx, [rbp + 0x458]
lea rcx, [rbp + 0x580]
call fcn.180188b20
nop
mov qword [rsp + 0x20], rdi
mov r9d, 1
lea r8, [rbp + 0x4b8]
mov rdx, rax
lea rcx, [0x1802c4450]
call fcn.180169970
nop
mov rdx, qword [rbp + 0x470]
cmp rdx, 0x10
jb 0x18015cd93
inc rdx
mov rcx, qword [rbp + 0x458]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18015cd8e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18015cd8e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rbp + 0x468], xmm0
mov byte [rbp + 0x458], dil
mov esi, 9
mov r8d, esi
xor edx, edx
lea rcx, [rsp + 0x40]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
mov r8d, esi
xor edx, edx
lea rcx, [rbp - 0x6c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027dcfc]
call fcn.18026951c
nop
lea rcx, [0x1802c456c]
call fcn.180269690
mov esi, dword [rbp + 0x10]
lea rcx, [0x1802c4468]
cmp qword [0x1802c4480], 0x10
cmovae rcx, qword [0x1802c4468]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
jne 0x18015ce40
lea rcx, [0x1802c4468]
cmp qword [0x1802c4480], 0x10
cmovae rcx, qword [0x1802c4468]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x1802c4460], rax
mov r8, rax
lea rdx, [0x1802c4468]
call fcn.18008c99c
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x608]
mov r8d, esi
mov rdx, qword [rbp + 0x418]
mov rsi, qword [rbp + 0x18]
mov rcx, rsi
call qword [0x1802c4458]
test eax, eax
jne 0x18015d12f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r11d, eax
mov dword [rbp + 0x16c], 0x52
mov eax, 9
mov word [rbp + 0x170], ax
lea ecx, [rax + 0x6a]
mov word [rbp + 0x172], cx
lea ecx, [rax + 6]
mov word [rbp + 0x174], cx
mov word [rbp + 0x176], r15w
lea r8d, [rax + 8]
mov word [rbp + 0x178], r8w
lea ebx, [rax + 0x34]
mov word [rbp + 0x17a], bx
lea r14d, [rax + 0x1e]
mov word [rbp + 0x17c], r14w
lea eax, [rcx + 0x2f]
mov word [rbp + 0x17e], ax
lea edx, [rcx + 0x27]
mov word [rbp + 0x180], dx
mov word [rbp + 0x182], r15w
lea r8d, [rcx + 0x2d]
mov word [rbp + 0x184], r8w
mov word [rbp + 0x186], bx
lea r9d, [rcx + 0x17]
mov word [rbp + 0x188], r9w
mov word [rbp + 0x18a], r15w
lea r12d, [rcx + 0x11]
mov word [rbp + 0x18c], r12w
lea r10d, [rcx + 0x28]
mov word [rbp + 0x18e], r10w
lea ecx, [rbx - 0xa]
mov word [rbp + 0x190], cx
mov word [rbp + 0x192], dx
mov word [rbp + 0x194], r15w
lea esi, [rbx - 0x1c]
mov word [rbp + 0x196], si
lea ecx, [rbx - 3]
mov word [rbp + 0x198], cx
mov word [rbp + 0x19a], r10w
mov word [rbp + 0x19c], ax
mov word [rbp + 0x19e], ax
lea ecx, [rbx - 0xc]
mov word [rbp + 0x1a0], cx
mov word [rbp + 0x1a2], bx
mov word [rbp + 0x1a4], dx
mov word [rbp + 0x1a6], r10w
lea edx, [rbx + 0x38]
mov word [rbp + 0x1a8], dx
mov word [rbp + 0x1aa], si
mov word [rbp + 0x1ac], r15w
lea edx, [rbx - 9]
mov word [rbp + 0x1ae], dx
lea edx, [rbx - 2]
mov word [rbp + 0x1b0], dx
mov word [rbp + 0x1b2], ax
mov word [rbp + 0x1b4], r10w
mov word [rbp + 0x1b6], r15w
mov word [rbp + 0x1b8], cx
mov word [rbp + 0x1ba], bx
mov word [rbp + 0x1bc], r8w
mov word [rbp + 0x1be], r9w
mov word [rbp + 0x1c0], r10w
mov word [rbp + 0x1c2], r8w
mov word [rbp + 0x1c4], r9w
mov word [rbp + 0x1c6], si
lea r8d, [rbx + 0x3f]
mov word [rbp + 0x1c8], r8w
mov word [rbp + 0x1ca], r15w
lea r10d, [rbx - 0x26]
mov word [rbp + 0x1cc], r10w
mov word [rbp + 0x1ce], r12w
mov word [rbp + 0x1d0], r12w
mov word [rbp + 0x1d2], bx
mov word [rbp + 0x1d4], r12w
lea esi, [rbx + 0x2b]
mov word [rbp + 0x1d6], si
mov word [rbp + 0x1d8], r15w
xor eax, eax
mov word [rbp + 0x1da], ax
movzx eax, word [rbp + 0x170]
mov rdx, rdi
lea r12d, [rbx - 0x3c]
movzx eax, word [rbp + rdx*2 + 0x170]
mov ecx, dword [rbp + 0x16c]
xor cx, ax
mov word [rbp + rdx*2 + 0x170], cx
add rdx, r12
cmp rdx, 0x35
jb 0x18015d06f
mov word [rbp + 0x1da], di
mov edx, r11d
lea rcx, [rbp + 0x170]
call fcn.18009550c
nop
xor edx, edx
lea r8d, [rdx + 0x6c]
lea rcx, [rbp + 0x170]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov rcx, qword [rbp + 0x5f0]
mov rax, qword [rcx]
mov rcx, qword [rax + 0x1138]
cmp rcx, qword [rax + 0x1140]
je 0x18015d0dc
mov qword [rax + 0x1140], rcx
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rcx, qword [rbp + 0x418]
test rcx, rcx
je 0x18015c4c9
mov rdx, qword [rbp + 0x428]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18015d125
add rdx, r14
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18015dd86
call fcn.180269534
jmp 0x18015c4c9
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0x118], 0x1f
mov eax, 0x44
mov word [rbp + 0x11c], ax
lea ecx, [rax - 0x13]
mov word [rbp + 0x11e], cx
lea eax, [rcx + 0x11]
mov word [rbp + 0x120], ax
lea r11d, [rcx + 0xe]
mov word [rbp + 0x122], r11w
lea eax, [rcx + 0x18]
mov word [rbp + 0x124], ax
lea eax, [rcx + 0x4d]
mov word [rbp + 0x126], ax
lea r10d, [rcx + 0x42]
mov word [rbp + 0x128], r10w
mov word [rbp + 0x12a], r14w
lea edx, [rcx + 0x4a]
mov word [rbp + 0x12c], dx
mov word [rbp + 0x12e], ax
lea eax, [rcx + 0x3a]
mov word [rbp + 0x130], ax
mov word [rbp + 0x132], r14w
lea r8d, [rcx + 0x40]
mov word [rbp + 0x134], r8w
lea r8d, [rcx + 0x47]
mov word [rbp + 0x136], r8w
mov word [rbp + 0x138], r11w
mov word [rbp + 0x13a], r12w
lea r9d, [rcx + 0x46]
mov word [rbp + 0x13c], r9w
lea r9d, [rcx + 0x49]
mov word [rbp + 0x13e], r9w
mov word [rbp + 0x140], r10w
mov word [rbp + 0x142], r10w
lea r8d, [rcx + 0x4b]
mov word [rbp + 0x144], r8w
mov word [rbp + 0x146], r13w
mov word [rbp + 0x148], dx
mov word [rbp + 0x14a], r9w
mov word [rbp + 0x14c], r11w
lea r8d, [rcx + 0x48]
mov word [rbp + 0x14e], r8w
mov word [rbp + 0x150], r14w
mov word [rbp + 0x152], r10w
mov word [rbp + 0x154], r9w
mov word [rbp + 0x156], r11w
lea edx, [rcx + 0x4c]
mov word [rbp + 0x158], dx
lea edx, [rcx + 0x35]
mov word [rbp + 0x15a], dx
mov word [rbp + 0x15c], ax
mov word [rbp + 0x15e], r9w
mov word [rbp + 0x160], r12w
mov word [rbp + 0x162], cx
mov word [rbp + 0x164], cx
mov word [rbp + 0x166], cx
xor eax, eax
mov word [rbp + 0x168], ax
movzx eax, word [rbp + 0x11c]
mov rdx, rdi
lea r9d, [rcx - 0xb]
lea r14d, [rcx - 0x30]
movzx eax, word [rbp + rdx*2 + 0x11c]
mov ecx, dword [rbp + 0x118]
xor cx, ax
mov word [rbp + rdx*2 + 0x11c], cx
add rdx, r14
cmp rdx, r9
jb 0x18015d2bb
mov word [rbp + 0x168], di
lea rcx, [rbp + 0x11c]
call fcn.18007aae4
nop
xor edx, edx
lea r8d, [rdx + 0x4e]
lea rcx, [rbp + 0x11c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x440], xmm0
mov qword [rbp + 0x450], rdi
mov rsi, qword [rbp + 0x420]
sub rsi, qword [rbp + 0x418]
mov r14d, 0x76
je 0x18015d363
mov rdx, rsi
lea rcx, [rbp + 0x440]
call fcn.1800aea1c
mov rbx, qword [rbp + 0x440]
mov r8, rsi
mov rdx, qword [rbp + 0x418]
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_memmove]
lea rax, [rsi + rbx]
mov qword [rbp + 0x448], rax
lea ebx, [r14 - 0xd]
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x440]
mov rcx, qword [rbp + 0x5f0]
call fcn.180151428
test al, al
jne 0x18015d9b0
mov dword [rbp + 0x2a0], 4
mov eax, 0x5f
mov word [rbp + 0x2a4], ax
lea ecx, [rax - 0x35]
mov word [rbp + 0x2a6], cx
lea eax, [rcx + 0x2f]
mov word [rbp + 0x2a8], ax
lea ebx, [rcx - 6]
mov word [rbp + 0x2aa], bx
lea edx, [rcx + 0x2d]
mov word [rbp + 0x2ac], dx
mov word [rbp + 0x2ae], r12w
lea r12d, [rcx + 0x37]
mov word [rbp + 0x2b0], r12w
lea esi, [rcx + 0x3e]
mov word [rbp + 0x2b2], si
mov word [rbp + 0x2b4], si
lea r8d, [rcx + 0x3d]
mov word [rbp + 0x2b6], r8w
lea ecx, [rax + 0x12]
mov word [rbp + 0x2b8], cx
lea r11d, [rax + 7]
mov word [rbp + 0x2ba], r11w
mov word [rbp + 0x2bc], r12w
mov word [rbp + 0x2be], bx
lea eax, [rbx + 0x3e]
mov word [rbp + 0x2c0], ax
lea r9d, [rbx + 0x49]
mov word [rbp + 0x2c2], r9w
mov word [rbp + 0x2c4], si
mov word [rbp + 0x2c6], r12w
mov word [rbp + 0x2c8], bx
mov word [rbp + 0x2ca], r11w
mov word [rbp + 0x2cc], cx
mov word [rbp + 0x2ce], r12w
lea eax, [rbx + 0x53]
mov word [rbp + 0x2d0], ax
mov word [rbp + 0x2d2], bx
lea eax, [rbx + 0x46]
mov word [rbp + 0x2d4], ax
mov word [rbp + 0x2d6], cx
mov word [rbp + 0x2d8], r13w
mov word [rbp + 0x2da], bx
mov word [rbp + 0x2dc], r8w
mov word [rbp + 0x2de], cx
mov word [rbp + 0x2e0], ax
mov word [rbp + 0x2e2], r13w
lea r10d, [rbx + 0x41]
mov word [rbp + 0x2e4], r10w
mov word [rbp + 0x2e6], r9w
mov word [rbp + 0x2e8], ax
mov word [rbp + 0x2ea], bx
lea r15d, [rbx + 0x50]
mov word [rbp + 0x2ec], r15w
mov word [rbp + 0x2ee], cx
mov word [rbp + 0x2f0], si
mov word [rbp + 0x2f2], cx
mov word [rbp + 0x2f4], ax
mov word [rbp + 0x2f6], r9w
lea ecx, [rbx + 0x4d]
mov word [rbp + 0x2f8], cx
lea ecx, [rbx + 0x45]
mov word [rbp + 0x2fa], cx
mov word [rbp + 0x2fc], bx
mov word [rbp + 0x2fe], r15w
mov word [rbp + 0x300], r10w
mov word [rbp + 0x302], r14w
mov word [rbp + 0x304], r10w
mov word [rbp + 0x306], cx
mov word [rbp + 0x308], r12w
mov word [rbp + 0x30a], r13w
mov word [rbp + 0x30c], r12w
mov word [rbp + 0x30e], r14w
lea ecx, [rbx + 0x53]
mov word [rbp + 0x310], cx
mov word [rbp + 0x312], bx
mov word [rbp + 0x314], cx
mov word [rbp + 0x316], r13w
mov word [rbp + 0x318], r14w
lea ecx, [rbx + 0x4d]
mov word [rbp + 0x31a], cx
mov word [rbp + 0x31c], r8w
mov word [rbp + 0x31e], r13w
mov word [rbp + 0x320], cx
mov word [rbp + 0x322], r14w
mov word [rbp + 0x324], r12w
lea r15d, [rbx + 6]
mov word [rbp + 0x326], r15w
mov word [rbp + 0x328], bx
lea ecx, [rbx + 0x32]
mov word [rbp + 0x32a], cx
mov word [rbp + 0x32c], r12w
mov word [rbp + 0x32e], r10w
mov word [rbp + 0x330], r11w
mov word [rbp + 0x332], r9w
mov word [rbp + 0x334], ax
lea eax, [rbx + 0x3f]
mov word [rbp + 0x336], ax
mov word [rbp + 0x338], bx
mov word [rbp + 0x33a], r9w
mov word [rbp + 0x33c], r13w
mov word [rbp + 0x33e], bx
mov word [rbp + 0x340], r11w
mov word [rbp + 0x342], r9w
mov word [rbp + 0x344], r14w
mov word [rbp + 0x346], r12w
mov word [rbp + 0x348], r8w
mov word [rbp + 0x34a], r13w
mov word [rbp + 0x34c], si
lea eax, [rbx + 0x59]
mov word [rbp + 0x34e], ax
mov word [rbp + 0x350], r15w
xor eax, eax
mov word [rbp + 0x352], ax
movzx eax, word [rbp + 0x2a4]
mov r8, rdi
lea r15d, [rbx + 0x4e]
lea r12d, [rbx - 0x23]
movzx eax, word [rbp + r8*2 + 0x2a4]
mov ecx, dword [rbp + 0x2a0]
xor cx, ax
mov word [rbp + r8*2 + 0x2a4], cx
add r8, r12
cmp r8, rdx
jb 0x18015d687
mov word [rbp + 0x352], di
lea rcx, [rbp + 0x2a4]
call fcn.18007aae4
nop
xor edx, edx
mov r8d, 0xb0
lea rcx, [rbp + 0x2a4]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov dword [rbp + 0x600], 0xdeadbeef
mov ecx, dword [rbp + 0x10]
add rcx, 4
mov rsi, qword [rbp + 0x5f0]
mov rax, qword [rsi]
mov qword [rax + 0x1150], rcx
mov rcx, qword [rsi]
mov rax, qword [rcx + 0x1150]
mov qword [rcx + 0x1158], rax
mov rcx, qword [rsi]
mov rax, qword [rcx + 0x1150]
mov qword [rcx + 0x1160], rax
mov rdx, qword [rsi]
lea rcx, [rdx + 0x1138]
mov rdx, qword [rdx + 0x1150]
call fcn.18009ea50
mov rax, qword [rsi]
mov r8, qword [rax + 0x1150]
mov rdx, qword [rbp + 0x418]
mov rcx, qword [rax + 0x1138]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
mov rax, qword [rsi]
mov ecx, dword [rbp + 0x10]
add rcx, qword [rax + 0x1138]
mov r8d, 4
lea rdx, [rbp + 0x600]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
mov rax, qword [rsi]
mov ecx, 3
mov dword [rax + 0x10d8], ecx
mov dword [rbp + 0xc8], 2
mov ecx, 0x22
mov word [rbp + 0xcc], cx
lea edx, [rcx + 0x3e]
mov word [rbp + 0xce], dx
lea eax, [rcx + 0x59]
mov word [rbp + 0xd0], ax
mov word [rbp + 0xd2], r14w
lea r8d, [rcx + 0x45]
mov word [rbp + 0xd4], r8w
lea eax, [rcx + 0x4f]
mov word [rbp + 0xd6], ax
mov word [rbp + 0xd8], cx
lea r9d, [rcx + 0x4b]
mov word [rbp + 0xda], r9w
lea edx, [rcx + 0x42]
mov word [rbp + 0xdc], dx
mov word [rbp + 0xde], cx
mov word [rbp + 0xe0], ax
lea eax, [rcx + 0x48]
mov word [rbp + 0xe2], ax
mov word [rbp + 0xe4], r8w
lea r10d, [rcx + 0x4c]
mov word [rbp + 0xe6], r10w
mov word [rbp + 0xe8], r10w
lea r11d, [rcx + 0x3f]
mov word [rbp + 0xea], r11w
mov word [rbp + 0xec], r9w
lea r11d, [rcx + 0x44]
mov word [rbp + 0xee], r11w
mov word [rbp + 0xf0], r8w
mov word [rbp + 0xf2], cx
mov word [rbp + 0xf4], dx
mov word [rbp + 0xf6], r13w
mov word [rbp + 0xf8], r9w
lea eax, [rcx + 0x4d]
mov word [rbp + 0xfa], ax
mov word [rbp + 0xfc], cx
lea eax, [rcx + 0x49]
mov word [rbp + 0xfe], ax
lea r12d, [rcx + 0x4a]
mov word [rbp + 0x100], r12w
mov word [rbp + 0x102], r15w
lea r9d, [rcx + 0x55]
mov word [rbp + 0x104], r9w
mov word [rbp + 0x106], r14w
mov word [rbp + 0x108], cx
mov word [rbp + 0x10a], dx
mov word [rbp + 0x10c], ax
mov word [rbp + 0x10e], r10w
mov word [rbp + 0x110], r8w
lea r8d, [rcx + 0xa]
mov word [rbp + 0x112], r8w
xor eax, eax
mov word [rbp + 0x114], ax
movzx eax, word [rbp + 0xcc]
mov rdx, rdi
lea r14d, [rcx - 0x21]
movzx eax, word [rbp + rdx*2 + 0xcc]
mov ecx, dword [rbp + 0xc8]
xor cx, ax
mov word [rbp + rdx*2 + 0xcc], cx
add rdx, r14
cmp rdx, rbx
jb 0x18015d8e3
mov word [rbp + 0x114], di
mov rax, qword [rsi]
mov rdx, qword [rax + 0x1150]
mov r9d, 0x5c
mov word [rbp + 0x20], r9w
mov word [rbp + 0x22], r8w
lea eax, [r9 + 2]
mov word [rbp + 0x24], ax
lea eax, [r9 - 0x3b]
mov word [rbp + 0x26], ax
lea r9d, [rax + 0x32]
mov word [rbp + 0x28], r9w
mov word [rbp + 0x2a], r11w
lea ecx, [rax + 0x41]
mov word [rbp + 0x2c], cx
lea r11d, [rax + 0x44]
mov word [rbp + 0x2e], r11w
mov word [rbp + 0x30], ax
mov word [rbp + 0x32], di
movzx eax, word [rbp + 0x20]
mov rcx, rdi
lea edi, [r9 - 0x4a]
movzx eax, word [rbp + rcx*2 + 0x20]
sub ax, r14w
mov word [rbp + rcx*2 + 0x20], ax
add rcx, r14
cmp rcx, rdi
jb 0x18015d966
lea r8, [rbp + 0xcc]
lea rcx, [rbp + 0x20]
call fcn.180135dc8
nop
xor edx, edx
lea r8d, [rdx + 0x14]
lea rcx, [rbp + 0x20]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
mov r8d, 0x4a
lea rcx, [rbp + 0xcc]
jmp 0x18015dd46
mov dword [rbp + 0x354], 0x32
mov word [rbp + 0x358], bx
mov r10d, 0x19
mov word [rbp + 0x35a], r10w
lea eax, [r10 + 0x56]
mov word [rbp + 0x35c], ax
lea ecx, [rax - 0x5d]
mov word [rbp + 0x35e], cx
lea eax, [rcx + 0x50]
mov word [rbp + 0x360], ax
lea edx, [rcx + 0x41]
mov word [rbp + 0x362], dx
lea eax, [rcx + 0x39]
mov word [rbp + 0x364], ax
lea eax, [rcx + 0x4c]
mov word [rbp + 0x366], ax
lea esi, [rcx + 0x4b]
mov word [rbp + 0x368], si
mov word [rbp + 0x36a], dx
lea r13d, [r10 + 0x3d]
mov word [rbp + 0x36c], r13w
mov word [rbp + 0x36e], cx
lea ebx, [rcx + 0x42]
mov word [rbp + 0x370], bx
lea edx, [rcx + 0x45]
mov word [rbp + 0x372], dx
lea r12d, [r10 + 0x2d]
mov word [rbp + 0x374], r12w
lea r11d, [r10 + 0x38]
mov word [rbp + 0x376], r11w
lea r8d, [r10 + 0x41]
mov word [rbp + 0x378], r8w
mov word [rbp + 0x37a], dx
mov word [rbp + 0x37c], r13w
mov word [rbp + 0x37e], cx
mov word [rbp + 0x380], bx
lea r15d, [r10 + 0x27]
mov word [rbp + 0x382], r15w
mov word [rbp + 0x384], si
lea r8d, [r10 + 0x46]
mov word [rbp + 0x386], r8w
mov word [rbp + 0x388], cx
mov word [rbp + 0x38a], bx
lea r14d, [r10 + 0x42]
mov word [rbp + 0x38c], r14w
mov word [rbp + 0x38e], ax
mov word [rbp + 0x390], dx
mov word [rbp + 0x392], cx
lea r9d, [r10 + 0x28]
mov word [rbp + 0x394], r9w
mov word [rbp + 0x396], dx
mov word [rbp + 0x398], dx
mov word [rbp + 0x39a], r8w
mov word [rbp + 0x39c], r9w
mov word [rbp + 0x39e], cx
mov word [rbp + 0x3a0], r12w
mov word [rbp + 0x3a2], si
mov word [rbp + 0x3a4], cx
lea r10d, [rcx + 0x3e]
mov word [rbp + 0x3a6], r10w
mov word [rbp + 0x3a8], dx
mov word [rbp + 0x3aa], cx
mov word [rbp + 0x3ac], r14w
lea r9d, [rcx + 0x4a]
mov word [rbp + 0x3ae], r9w
mov word [rbp + 0x3b0], cx
mov word [rbp + 0x3b2], dx
mov word [rbp + 0x3b4], r8w
mov word [rbp + 0x3b6], r10w
mov word [rbp + 0x3b8], dx
mov word [rbp + 0x3ba], r13w
mov word [rbp + 0x3bc], r13w
mov word [rbp + 0x3be], dx
mov word [rbp + 0x3c0], r13w
mov word [rbp + 0x3c2], cx
mov word [rbp + 0x3c4], r13w
lea r9d, [rcx + 0x41]
mov word [rbp + 0x3c6], r9w
mov word [rbp + 0x3c8], r12w
mov word [rbp + 0x3ca], r9w
lea r9d, [rcx + 3]
mov word [rbp + 0x3cc], r9w
lea r10d, [rcx + 0x2f]
mov word [rbp + 0x3ce], r10w
mov word [rbp + 0x3d0], cx
mov word [rbp + 0x3d2], bx
mov word [rbp + 0x3d4], si
mov word [rbp + 0x3d6], r15w
mov word [rbp + 0x3d8], r8w
lea r9d, [rcx + 0x41]
mov word [rbp + 0x3da], r9w
mov word [rbp + 0x3dc], r12w
lea r9d, [rcx + 0xa]
mov word [rbp + 0x3de], r9w
mov word [rbp + 0x3e0], cx
lea r13d, [rcx + 0x50]
mov word [rbp + 0x3e2], r13w
mov word [rbp + 0x3e4], r15w
mov word [rbp + 0x3e6], si
mov word [rbp + 0x3e8], r11w
mov word [rbp + 0x3ea], dx
mov word [rbp + 0x3ec], r10w
mov word [rbp + 0x3ee], r10w
mov word [rbp + 0x3f0], dx
lea r13d, [rcx + 0x44]
mov word [rbp + 0x3f2], r13w
mov word [rbp + 0x3f4], cx
mov word [rbp + 0x3f6], r14w
mov word [rbp + 0x3f8], r12w
mov word [rbp + 0x3fa], cx
mov word [rbp + 0x3fc], r10w
lea ecx, [rax - 0x17]
mov word [rbp + 0x3fe], cx
mov word [rbp + 0x400], r11w
mov word [rbp + 0x402], r11w
mov word [rbp + 0x404], dx
mov word [rbp + 0x406], r10w
mov word [rbp + 0x408], r10w
mov word [rbp + 0x40a], bx
mov word [rbp + 0x40c], cx
mov word [rbp + 0x40e], ax
mov word [rbp + 0x410], ax
lea eax, [rsi - 0x12]
mov word [rbp + 0x412], ax
mov word [rbp + 0x414], r9w
xor eax, eax
mov word [rbp + 0x416], ax
movzx eax, word [rbp + 0x358]
mov rdx, rdi
lea r14d, [rsi - 0x5c]
movzx eax, word [rbp + rdx*2 + 0x358]
mov ecx, dword [rbp + 0x354]
xor cx, ax
mov word [rbp + rdx*2 + 0x358], cx
add rdx, r14
cmp rdx, r8
jb 0x18015dd04
mov word [rbp + 0x416], di
lea rcx, [rbp + 0x358]
call fcn.18007aae4
nop
mov r8d, 0xc0
lea rcx, [rbp + 0x358]
xor edx, edx
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
mov rcx, qword [rbp + 0x418]
test rcx, rcx
je 0x18015dd92
mov rdx, qword [rbp + 0x428]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18015dd8d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18015dd8d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
mov al, r14b
add rsp, 0x6a8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret