Function at 0x1800622c0
Capabilities:
Encode data using xor
Read file on windows
Write file on windows

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x7b78]
mov eax, 0x7c78
call fcn.18006ce90
sub rsp, rax
mov esi, dword [rbp + 0x7be8]
mov r13, r9
mov r11, qword [rsp + 0x60]
mov r9, rdx
xor edx, edx
mov qword [rsp + 0x38], r11
mov edi, edx
mov ebx, edx
lea r12d, [rsi + 0x5ca]
mov r15d, esi
cmp esi, r12d
jae 0x180062935
mov rax, qword [rsp + 0x60]
lea rcx, [0x180000000]
mov edx, dword [rbp + 0x7be8]
mov r10d, dword [rbp + 0x7be8]
mov rsi, qword [rbp + 0x7be0]
mov r14, qword [rbp + 0x7bf0]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x40], rdx
mov dword [rsp + 0x30], r10d
nop word [rax + rax]
cmp r15d, 0x37
ja 0x1800623c6
je 0x180062392
cmp r15d, 0x13
jne case.default.0x180062811
mov eax, dword [r9]
mov dword [rbp + 0x189c], eax
mov eax, dword [r8]
mov dword [rbp + 0x18a0], eax
mov eax, dword [r14]
mov dword [rbp + 0x18a4], eax
jmp case.default.0x180062811
cmp dword [r9], 3
jne 0x1800628d9
mov rcx, qword [r13 + 8]
lea rdx, [0x180095278]
call fcn.180074404
mov qword [rsp + 0x38], rax
mov r11, rax
test rax, rax
je 0x1800628bf
mov r9, qword [rbp + 0x7bc8]
jmp 0x18006242f
cmp r15d, 0x16a
ja 0x1800627e6
je 0x1800626bd
lea eax, [r15 - 0x61]
cmp eax, 0xfc
ja case.default.0x180062811
movzx eax, byte [rcx + rax + 0x632a0]
mov ecx, dword [rcx + rax*4 + 0x63274]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov r8d, 3
mov dword [rsp + 0x6e], 0x6e694c64
lea rdx, [0x180099bd8]
mov byte [rsp + 0x72], 0
lea rcx, [rsp + 0x72]
call fcn.180071f50
mov r9, qword [rbp + 0x7bc8]
mov r11, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov r10d, dword [rsp + 0x30]
mov r8, qword [rbp + 0x7bd0]
lea rcx, [0x180000000]
add r15d, 0x4e
cmp r15d, r12d
jb 0x180062360
mov r12, qword [rsp + 0x40]
xor edx, edx
mov r8, qword [rsp + 0x58]
mov esi, dword [rbp + 0x7be8]
mov rcx, qword [rbp + 0x7bc0]
mov ebx, dword [rsp + 0x34]
mov r15d, esi
imul eax, esi, 0x9d8
mov dword [rbp - 0x58], eax
cmp esi, eax
ja 0x1800624ec
mov r14, qword [rsp + 0x48]
mov r10d, 0x33
nop dword [rax]
cmp r15d, 0x19135
ja 0x180062cf7
je 0x180062ce9
cmp r15d, 0x7299
ja 0x180062c44
je 0x180062c38
mov eax, r15d
sub eax, 0x37
je 0x180062976
sub eax, 0xb0
je 0x18006296a
sub eax, 0x28
je 0x18006295a
sub eax, 0x1a3a
je 0x180062bfc
cmp eax, 0x1b12
jne 0x180062d7b
mov eax, ebx
add rsp, 0x7c78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rdx, qword [r14]
mov rcx, rsi
call fcn.180061ba0
mov r9, qword [rbp + 0x7bc8]
mov rdi, r9
cmp qword [r9 + 0x18], 0x10
jb 0x180062521
mov rdi, qword [r9]
cmp qword [r13 + 0x18], 0x10
mov rbx, r13
jb 0x18006242a
mov rbx, qword [r13]
jmp 0x18006242a
mov r9, r11
lea rcx, [rbp + 0x340]
mov edx, 1
mov r8d, 0x1000
call fcn.180074690
mov qword [rsp + 0x40], rax
mov rdx, rax
test eax, eax
je 0x1800628f3
movzx r10d, byte [rbp + 0x340]
mov r9, qword [rbp + 0x7bc8]
mov r11, qword [rsp + 0x38]
mov dword [rsp + 0x30], r10d
jmp 0x180062439
movzx eax, word [0x180099c22]
mov word [rbp - 0x74], ax
movzx eax, byte [0x180099c24]
mov byte [rbp - 0x72], al
mov dword [rbp - 0x71], 0x73736563
jmp case.0x180062811.393
test r10d, r10d
je 0x18006291f
cmp edx, 0x258
jle 0x180062909
movzx eax, byte [rbp + 0x350]
xor eax, r10d
cmp eax, 0x44
jne 0x180062909
movzx eax, byte [rbp + 0x355]
xor eax, r10d
cmp eax, 0x47
jne 0x180062909
movzx eax, byte [rbp + 0x381]
xor eax, r10d
cmp eax, 0x47
jne 0x180062909
movzx eax, byte [rbp + 0x386]
xor eax, r10d
cmp eax, 0x4e
jne 0x180062909
mov rcx, qword [r13 + 0x10]
lea rdx, [0x180097a20]
call fcn.180074404
mov qword [rsp + 0x58], rax
test rax, rax
jne 0x180062423
mov rdx, qword [r13 + 0x10]
lea rcx, str._MapIteratorInitialize
call fcn.18006ac90
mov eax, 1
jmp 0x1800624ee
movzx eax, word [rbp + 0x189a]
mov word [0x1800ce8f8], ax
jmp case.0x180062811.393
mov eax, dword [r13]
mov dword [rbp + 0x18a8], eax
mov qword [rbp + 0x1892], rsi
jmp case.0x180062811.393
mov ecx, 0xffffff99
lea rdx, [rbp + 0x1340]
call qword [0x1800ce8f0]
jmp 0x180062423
mov r8d, 4
mov byte [rbp - 0x78], 0
lea rdx, [0x180099d3a]
lea rcx, [rbp - 0x78]
call fcn.180071b90
jmp 0x180062423
mov eax, dword [0x180099d97]
mov dword [rsp + 0x69], eax
movzx eax, byte [0x180099d9b]
mov byte [rsp + 0x6d], al
mov byte [rsp + 0x68], 0x43
mov byte [rsp + 0x6e], 0
jmp case.0x180062811.393
xor eax, eax
xor r8b, r8b
mov r14d, eax
mov rax, qword [rbp + 0x7bf0]
cmp qword [rax], r14
jbe 0x1800628b0
nop word [rax + rax]
mov esi, 0xaf
mov eax, esi
sub eax, 0xaf
je 0x18006274b
cmp eax, 1
jne 0x1800627b6
mov rdx, qword [r13 + 0x18]
mov rcx, r13
cmp rdx, 0x10
jb 0x180062708
mov rcx, qword [r13]
add rcx, qword [r13 + 0x10]
inc rbx
cmp rbx, rcx
jne 0x180062721
mov rbx, r13
cmp rdx, 0x10
jb 0x180062721
mov rbx, qword [r13]
mov rdx, qword [r9 + 0x18]
mov rcx, r9
cmp rdx, 0x10
jb 0x180062731
mov rcx, qword [r9]
add rcx, qword [r9 + 0x10]
inc rdi
cmp rdi, rcx
jne 0x1800627b6
mov rdi, r9
cmp rdx, 0x10
jb 0x1800627b6
mov rdi, qword [r9]
jmp 0x1800627b6
mov r13, qword [rbp + 0x7be0]
movzx r9d, byte [rbx]
add r9b, r8b
add r9b, byte [rdi]
mov rcx, qword [r13 + 0x10]
and r9b, 0xf
mov rdx, qword [r13 + 0x18]
cmp rcx, rdx
jae 0x18006278d
lea rax, [rcx + 1]
mov qword [r13 + 0x10], rax
mov rax, r13
cmp rdx, 0x10
jb 0x180062782
mov rax, qword [r13]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x18006279c
xor r8d, r8d
mov rcx, r13
lea edx, [r8 + 1]
call fcn.180002020
mov rcx, r13
call fcn.18004e430
mov r13, qword [rbp + 0x7bd8]
mov r9, qword [rbp + 0x7bc8]
movzx r8d, byte [rax]
inc esi
cmp esi, 0xb1
jb 0x1800626e5
mov rax, qword [rbp + 0x7bf0]
inc r14
cmp r14, qword [rax]
jb 0x1800626e0
mov rsi, qword [rbp + 0x7be0]
mov r14, rax
jmp 0x18006242a
lea eax, [r15 - 0x183]
cmp eax, 0xc4
ja case.default.0x180062811
movzx eax, byte [rcx + rax + 0x633bc]
mov ecx, dword [rcx + rax*4 + 0x633a0]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov eax, 0x6c
mov dword [rbp - 0x30], 0x680073
mov word [rbp - 0x28], ax
mov dword [rbp - 0x2c], 0x6c0065
jmp case.0x180062811.393
mov byte [rbp - 0x6d], 0
jmp case.0x180062811.393
mov eax, 0x6c
mov word [rbp - 0x46], ax
jmp case.0x180062811.393
mov r8d, 1
mov byte [rsp + 0x76], 0
lea rdx, [0x180099c65]
lea rcx, [rsp + 0x68]
call fcn.180071b90
mov r8d, 3
lea rdx, [0x180099ca0]
lea rcx, [rsp + 0x77]
call fcn.180071f50
mov byte [rsp + 0x7a], 0
jmp 0x180062423
movzx eax, word [0x180099d04]
movsd xmm0, qword [0x180099cfc]
mov word [rbp - 0x48], ax
xor eax, eax
mov word [rbp - 0x46], ax
movsd qword [rbp - 0x50], xmm0
jmp case.0x180062811.393
mov byte [rsp + 0x75], 0x41
jmp case.0x180062811.393
mov r8, qword [rbp + 0x7bd0]
mov r14, rax
jmp case.default.0x180062811
mov rdx, qword [r13 + 8]
lea rcx, str.Default_is_ON.
call fcn.18006ac90
mov eax, 1
jmp 0x1800624ee
mov rdx, qword [r13]
lea rcx, str.add_SizeToContentChanged
call fcn.18006ac90
mov eax, 1
jmp 0x1800624ee
lea rcx, str.redirection
call fcn.18006ac90
mov eax, 1
jmp 0x1800624ee
lea rcx, str.wdFormattingFromCurrent
call fcn.18006ac90
mov eax, 1
jmp 0x1800624ee
lea rcx, str.Standard_Symbols_L
call fcn.18006ac90
mov eax, 1
jmp 0x1800624ee
mov r8, qword [rsp + 0x60]
mov r12d, dword [rbp + 0x7be8]
mov eax, dword [rbp + 0x7be8]
mov qword [rsp + 0x58], r8
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x30], eax
jmp 0x18006246d
mov dword [rbp - 0x44], 0x320033
mov word [rbp - 0x40], dx
jmp 0x180062d7b
mov dword [rbp - 0x26], 0x320033
jmp 0x180062d7b
mov r13d, dword [rsp + 0x30]
mov rcx, rdx
test r12d, r12d
jle 0x180062a31
cmp r12d, 0x40
jb 0x180062a31
movsx eax, r13b
mov edx, r12d
movd xmm2, eax
punpcklbw xmm2, xmm2
punpcklwd xmm2, xmm2
pshufd xmm2, xmm2, 0
and edx, 0x8000003f
jge 0x1800629b8
dec edx
or edx, 0xffffffc0
inc edx
mov eax, r12d
sub eax, edx
movsxd rdx, eax
movdqu xmm0, xmmword [rbp + rcx + 0x340]
movdqa xmm1, xmm2
pxor xmm1, xmm0
movdqu xmmword [rbp + rcx + 0x340], xmm1
movdqu xmm0, xmmword [rbp + rcx + 0x350]
movdqa xmm1, xmm2
pxor xmm1, xmm0
movdqu xmmword [rbp + rcx + 0x350], xmm1
movdqu xmm0, xmmword [rbp + rcx + 0x360]
movdqa xmm1, xmm2
pxor xmm1, xmm0
movdqu xmmword [rbp + rcx + 0x360], xmm1
movdqu xmm0, xmmword [rbp + rcx + 0x370]
movdqa xmm1, xmm2
pxor xmm1, xmm0
movdqu xmmword [rbp + rcx + 0x370], xmm1
add rcx, 0x40
cmp rcx, rdx
jl 0x1800629c0
movsxd rdi, r12d
cmp rcx, rdi
jge 0x180062a50
nop dword [rax]
xor byte [rbp + rcx + 0x340], r13b
inc rcx
cmp rcx, rdi
jl 0x180062a40
mov r9, r8
lea rcx, [rbp + 0x340]
mov r8, rdi
mov edx, 1
call fcn.180074c14
mov r12, qword [rsp + 0x38]
mov rcx, r12
call fcn.180074198
test eax, eax
jne 0x180062c2a
nop dword [rax]
mov esi, 0x124
cmp esi, 0x124
je 0x180062ab7
cmp esi, 0x1ff0
jne 0x180062bc5
mov r9, qword [rsp + 0x58]
lea rcx, [rbp + 0x340]
mov r8, rdi
mov edx, 1
call fcn.180074c14
jmp 0x180062bc5
mov r9, r12
lea rcx, [rbp + 0x340]
mov edx, 1
mov r8d, 0x1000
call fcn.180074690
movsxd r12, eax
mov qword [rsp + 0x40], r12
test eax, eax
je 0x180062bf7
xor ecx, ecx
mov eax, ecx
test r12d, r12d
jle 0x180062ba1
cmp r12d, 0x40
jb 0x180062ba1
movsx ecx, r13b
mov edx, r12d
movd xmm2, ecx
punpcklbw xmm2, xmm2
punpcklwd xmm2, xmm2
pshufd xmm2, xmm2, 0
and edx, 0x8000003f
jge 0x180062b1f
dec edx
or edx, 0xffffffc0
inc edx
mov ecx, r12d
sub ecx, edx
movsxd rdx, ecx
nop word [rax + rax]
movdqu xmm0, xmmword [rbp + rax + 0x340]
movdqa xmm1, xmm2
pxor xmm1, xmm0
movdqu xmmword [rbp + rax + 0x340], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x350]
movdqa xmm1, xmm2
pxor xmm1, xmm0
movdqu xmmword [rbp + rax + 0x350], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x360]
movdqa xmm1, xmm2
pxor xmm1, xmm0
movdqu xmmword [rbp + rax + 0x360], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x370]
movdqa xmm1, xmm2
pxor xmm1, xmm0
movdqu xmmword [rbp + rax + 0x370], xmm1
add rax, 0x40
cmp rax, rdx
jl 0x180062b30
mov rdi, r12
cmp rax, r12
jge 0x180062bc0
nop dword [rax]
xor byte [rbp + rax + 0x340], r13b
inc rax
cmp rax, r12
jl 0x180062bb0
mov r12, qword [rsp + 0x38]
add esi, 0x1ecc
cmp esi, 0x3d98
jbe 0x180062a85
mov rcx, r12
call fcn.180074198
test eax, eax
je 0x180062a80
mov r11, qword [rsp + 0x38]
xor edx, edx
lea r10d, [rdx + 0x33]
jmp 0x180062d7b
mov r11, qword [rsp + 0x38]
mov rcx, r11
mov r15d, 0x1b49
call fcn.18007412c
mov rcx, qword [rsp + 0x58]
call fcn.18007412c
mov r11, qword [rsp + 0x38]
xor edx, edx
mov ebx, edx
mov dword [rsp + 0x34], edx
lea r10d, [rdx + 0x33]
jmp 0x180062d7b
xor edx, edx
mov r11, r12
lea r10d, [rdx + 0x33]
jmp 0x180062d7b
mov dword [rbp - 0x22], 0x64002e
jmp 0x180062d7b
cmp r15d, 0x8671
je 0x180062cdd
cmp r15d, 0xe44b
je 0x180062c98
cmp r15d, 0x10bd3
je 0x180062c8f
cmp r15d, 0x155fd
jne 0x180062d7b
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x180062c84
cmp dword [rbp - 0x68], 0
jne 0x180062d7b
call qword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x1800624ec
mov word [rbp - 0x3c], dx
jmp 0x180062d7b
mov word [rbp - 0x1a], dx
lea r9, [rsp + 0x68]
mov edx, 0xe5
mov dword [rbp - 0x1e], 0x6c006c
lea r8, [rbp - 0x30]
xor ecx, ecx
call fcn.1800588e0
mov rcx, qword [rbp + 0x7bc8]
lea rdx, [rbp - 0x68]
mov rcx, qword [rcx]
call rax
mov r11, qword [rsp + 0x38]
xor edx, edx
mov qword [rsp + 0x60], rax
lea r10d, [rdx + 0x33]
jmp 0x180062d7b
mov dword [rbp - 0x40], 0x64002e
jmp 0x180062d7b
mov eax, 0x6c
mov word [rbp - 0x3c], ax
jmp 0x180062d7b
cmp r15d, 0x3a6bd
ja 0x180062e5f
je 0x180062db3
cmp r15d, 0x1c7af
je 0x180062d5b
cmp r15d, 0x21697
je 0x180062d52
cmp r15d, 0x29bf9
jne 0x180062d7b
lea r9, [rbp - 0x78]
mov edx, 0xe5
lea r8, [rbp - 0x50]
xor ecx, ecx
call fcn.1800588e0
mov r11, qword [rsp + 0x38]
xor edx, edx
mov qword [rbp - 0x18], rax
mov r14d, edx
mov qword [rsp + 0x48], rdx
lea r10d, [rdx + 0x33]
jmp 0x180062d7b
mov dword [rbp - 0x3a], 0x6c
jmp 0x180062d7b
mov eax, 0x90
cmp eax, 0x90
je 0x180063222
add eax, 0x870
cmp eax, 0x870
jbe 0x180062d60
mov qword [rbp - 0x80], rdx
imul eax, dword [rbp + 0x7be8], 0x7e
add r15d, eax
cmp r15d, dword [rbp - 0x58]
ja 0x1800624ec
mov r13, qword [rbp + 0x7bd8]
mov r9, qword [rbp + 0x7bc8]
mov r12, qword [rsp + 0x40]
mov r8, qword [rsp + 0x58]
mov rcx, qword [rbp + 0x7bc0]
jmp 0x180062490
xor edx, edx
lea rcx, [rbp + 0x1930]
mov r8d, 0x238
call fcn.18006e5e0
lea rcx, [rbp - 0x10]
mov edx, 4
lea rax, [rbp + 0x1930]
nop word [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x180062de0
movups xmm0, xmmword [rax]
mov r11, qword [rsp + 0x38]
lea r10d, [rdx + 0x33]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx], xmm0
movups xmm0, xmmword [rax + 0x20]
mov rax, qword [rax + 0x30]
movups xmmword [rcx + 0x10], xmm1
movups xmmword [rcx + 0x20], xmm0
mov qword [rcx + 0x30], rax
jmp 0x180062d7b
cmp r15d, 0x42c1f
je 0x180062d7b
cmp r15d, 0x4b181
je 0x180062d77
cmp r15d, 0x536e3
je 0x180062e94
cmp r15d, 0x5bc45
je 0x1800624ec
jmp 0x180062d7b
cmp dword [rcx], 0
jne 0x180063011
cmp qword [r9], 0
je 0x180063011
lea r8, [rsp + 0x50]
mov edx, 0x2000
lea rcx, [rbp + 0x1b70]
call qword [r13]
test eax, eax
je 0x180063262
mov eax, dword [rsp + 0x50]
xor r13d, r13d
shr eax, 2
mov rbx, r14
mov dword [rbp - 0x60], eax
mov qword [rsp + 0x48], rbx
test eax, eax
je 0x1800631f9
lea r12, [rbp + 0x1b70]
mov dword [rsp + 0x34], r15d
mov qword [rsp + 0x48], rbx
mov r8d, dword [r12]
xor edx, edx
mov ecx, 0x410
call qword [rbp - 0x18]
mov r15, rax
test rax, rax
je 0x180062fed
mov rcx, rax
lea r9, [rsp + 0x50]
mov rax, qword [rbp + 0x7bf0]
lea rdx, [rbp + 0x3b70]
mov r8d, 0x4000
call qword [rax]
test eax, eax
je 0x180062fed
mov eax, 0xd9
nop word [rax + rax]
cmp eax, 0xd9
jne 0x180062fe0
mov r14d, dword [rsp + 0x50]
xor eax, eax
shr r14d, 3
mov esi, eax
test r14d, r14d
je 0x180062fd2
lea rdi, [rbp + 0x3b70]
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [rbp + 0x7be0]
lea r8, [rbp + 0x230]
mov rdx, qword [rdi]
mov r9d, 0x104
mov rcx, r15
call qword [rax]
test eax, eax
je 0x180062fc7
mov rcx, qword [rbp + 0x7bd0]
call fcn.180071acc
lea rcx, [rbp + 0x230]
mov rbx, rax
call fcn.180071acc
mov rdx, rbx
mov rcx, rax
call fcn.18006dc30
test rax, rax
jne 0x1800628ff
mov rbx, rax
mov qword [rsp + 0x48], rax
inc esi
add rdi, 8
cmp esi, r14d
jb 0x180062f70
mov esi, 0x536e3
mov eax, 0xd9
mov dword [rsp + 0x34], esi
dec eax
cmp eax, 0xd8
ja 0x180062f40
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
inc r13d
add r12, 4
cmp r13d, dword [rbp - 0x60]
jb 0x180062ef2
mov r15d, dword [rsp + 0x34]
jmp 0x1800631f9
mov eax, 0x10b
mov dword [rsp + 0x34], eax
nop word [rax + rax]
sub eax, 0x10a
je 0x1800624ec
cmp eax, 1
jne 0x1800631df
lea rcx, str.originalOnly
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rbp - 0x60], rax
mov rbx, rax
test rax, rax
je 0x18006326a
mov r13d, 0x107
nop word [rax + rax]
mov eax, r13d
sub eax, 0x107
je 0x1800631b5
cmp eax, 0x32
jne 0x1800631c9
lea rdx, str._U_B_U_B_U_B_U
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.STRING_INSERT
mov rcx, rbx
mov r12, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r14, rax
mov rax, qword [rbp - 0x80]
test rax, rax
je 0x18006326a
test r12, r12
je 0x18006326a
test r14, r14
je 0x18006326a
mov esi, 0xa2
cmp esi, 0xa2
jne 0x1800631a0
xor edx, edx
lea ecx, [rdx + 2]
call rax
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x18006326a
lea rdx, [rbp - 0x10]
mov dword [rbp - 0x10], 0x238
mov rcx, rax
call r12
test eax, eax
je 0x18006318c
mov rcx, qword [rbp + 0x7bd0]
call fcn.180071acc
lea rcx, [rbp + 0x1c]
mov rbx, rax
call fcn.180071acc
mov rdx, rbx
mov rcx, rax
call fcn.18006dc30
test rax, rax
je 0x18006312d
mov qword [rsp + 0x48], 1
jmp 0x180063193
lea rdx, [rbp - 0x10]
mov rcx, rdi
call r14
test eax, eax
je 0x18006317f
mov rbx, qword [rbp + 0x7bd0]
lea rcx, [rbp + 0x1c]
call fcn.180071acc
mov rdx, rbx
mov rcx, rax
call fcn.18006dc30
test rax, rax
jne 0x180063176
lea rdx, [rbp - 0x10]
mov rcx, rdi
call r14
test eax, eax
jne 0x180063142
mov esi, 0xa2
mov r15d, 0x536e3
jmp 0x180063193
mov qword [rsp + 0x48], 1
mov esi, 0xa2
mov r15d, 0x536e3
jmp 0x180063193
xor eax, eax
mov qword [rsp + 0x48], rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rbp - 0x80]
add esi, 7
cmp esi, 0xa9
jb 0x1800630c1
mov rbx, qword [rbp - 0x60]
jmp 0x1800631c9
lea rdx, str.TLBX_E_INVALID_NAMESPACE
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp - 0x80], rax
add r13d, 0x32
cmp r13d, 0x16b
jb 0x180063060
mov rbx, qword [rsp + 0x48]
mov eax, dword [rsp + 0x34]
dec eax
mov dword [rsp + 0x34], eax
cmp eax, 0x109
ja 0x180063020
mov rbx, qword [rsp + 0x48]
mov rcx, qword [rbp + 0x7bc8]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r14, qword [rsp + 0x48]
xor edx, edx
mov r11, qword [rsp + 0x38]
mov dword [rsp + 0x34], ebx
lea r10d, [rdx + 0x33]
jmp 0x180062d7b
mov rbx, qword [rsp + 0x60]
mov r9, r13
xor ecx, ecx
mov r8d, 0x90
mov rax, qword [rbx]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
xor edx, edx
call fcn.180005bd0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LocalFree]
cmp qword [r13 + 0x10], 0
setne byte [rsp + 0x34]
mov eax, dword [rsp + 0x34]
jmp 0x1800624ee
mov eax, r14d
jmp 0x1800624ee
xor eax, eax
jmp 0x1800624ee