Function at 0x1800c0ef8
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1080]
mov eax, 0x1180
call fcn.1801585f0
sub rsp, rax
mov qword [rbp + 0x268], 0xfffffffffffffffe
mov qword [rsp + 0x11c8], rbx
mov r15, r8
mov r14d, edx
mov rsi, rcx
mov byte [rcx + 0x409], 1
mov byte [rcx + 0x488], 1
mov dword [rcx + 0x40c], edx
mov byte [rcx + 0x3f8], 1
mov byte [rcx + 3], r9b
mov dword [rcx + 8], 2
xor edi, edi
mov byte [rcx + 0x48c], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x88], xmm0
mov qword [rbp + 0x98], rdi
mov qword [rbp + 0xa0], 7
mov word [rbp + 0x88], di
neg r9b
sbb ebx, ebx
and ebx, 0xffffffd8
or r12, 0xffffffffffffffff
mov r13d, dword [0x180195f94]
test edx, edx
je 0x1800c11fd
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp r14d, eax
je 0x1800c11fd
mov edx, 4
mov qword [rbp - 0x70], rdx
mov rax, qword gs:[0x58]
mov rax, qword [rax + r13*8]
mov eax, dword [rdx + rax]
cmp dword [0x18019dae0], eax
jle 0x1800c11db
lea rcx, [0x18019dae0]
call fcn.180157af0
cmp dword [0x18019dae0], r12d
jne 0x1800c11db
lea rax, [rbp + 0x1a8]
mov qword [rbp + 0x10c0], rax
mov dword [rbp - 0x10], 0x64
mov byte [rbp - 0xc], 0x2b
mov byte [rbp - 0xb], 0x14
mov byte [rbp - 0xa], 1
mov byte [rbp - 9], 0xa
mov byte [rbp - 8], 0x34
mov byte [rbp - 7], 0x16
mov byte [rbp - 6], 0xb
mov byte [rbp - 5], 7
mov byte [rbp - 4], 1
mov byte [rbp - 3], 0x17
mov byte [rbp - 2], 0x17
xor eax, eax
mov byte [rbp - 1], al
mov al, byte [rbp - 0xc]
mov edx, edi
mov al, byte [rbp + rdx - 0xc]
mov ecx, dword [rbp - 0x10]
xor cl, al
mov byte [rbp + rdx - 0xc], cl
inc rdx
cmp rdx, 0xb
jb 0x1800c103e
mov byte [rbp - 1], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a8], xmm0
mov qword [rbp + 0x1b8], rdi
mov qword [rbp + 0x1c0], rdi
lea rax, [rbp - 0xc]
mov r8, r12
inc r8
cmp byte [rax + r8], dil
jne 0x1800c1077
lea rdx, [rbp - 0xc]
lea rcx, [rbp + 0x1a8]
call fcn.18000c7ac
nop
mov dword [rbp + 0xc], 0xb
mov byte [rbp + 0x10], 0x60
mov byte [rbp + 0x11], 0x6e
mov byte [rbp + 0x12], 0x79
mov byte [rbp + 0x13], 0x65
mov byte [rbp + 0x14], 0x6e
mov byte [rbp + 0x15], 0x67
mov byte [rbp + 0x16], 0x38
mov byte [rbp + 0x17], 0x39
xor eax, eax
mov byte [rbp + 0x18], al
mov al, byte [rbp + 0x10]
mov rdx, rdi
mov al, byte [rbp + rdx + 0x10]
mov ecx, dword [rbp + 0xc]
xor cl, al
mov byte [rbp + rdx + 0x10], cl
inc rdx
cmp rdx, 8
jb 0x1800c10c3
mov byte [rbp + 0x18], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf8], xmm1
lea rax, [rbp + 0x10]
mov r8, r12
inc r8
cmp byte [rax + r8], dil
jne 0x1800c10f9
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0xe8]
call fcn.18000c7ac
nop
lea rdx, [rbp + 0xe8]
lea rcx, [rbp + 0x2a0]
call fcn.1800ceb58
nop
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp + 0x1a8]
mov rdx, rax
lea rcx, [0x18019d0e0]
call fcn.18006b8b0
nop
mov rdx, qword [rbp + 0x100]
cmp rdx, 0x10
jb 0x1800c118a
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c1185
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800c1185
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165930]
movdqu xmmword [rbp + 0xf8], xmm0
mov byte [rbp + 0xe8], dil
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rbp + 0x10]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xc]
lea rcx, [rbp - 0xc]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x180163698]
call fcn.1801579fc
nop
lea rcx, [0x18019dae0]
call fcn.180157a84
mov r9d, r14d
lea edx, [rbx + 0x438]
lea rcx, [0x18019d0e0]
call fcn.180032ac4
mov qword [rsi + 0x400], rax
mov rbx, qword [rbp - 0x70]
jmp 0x1800c1230
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsi + 0x400], rax
mov byte [rsi + 0x48a], 1
cmp qword [r15 + 0x10], rdi
je 0x1800c1220
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r14d, eax
mov byte [rsi + 0x489], dil
mov ebx, 4
mov qword [rbp - 0x70], rbx
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rsi + 0x400], rdi
jne 0x1800c1250
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, 0xb30
jmp 0x1800c2b9b
mov rcx, rdi
mov qword [rbp + 0x10c0], rcx
test r14d, r14d
je 0x1800c15f1
mov rax, qword gs:[0x58]
mov rax, qword [rax + r13*8]
mov eax, dword [rbx + rax]
cmp dword [0x18019d054], eax
jle 0x1800c15c9
lea rcx, [0x18019d054]
call fcn.180157af0
cmp dword [0x18019d054], r12d
jne 0x1800c15c9
lea rax, [rbp + 0x1c8]
mov qword [rbp + 0x10c0], rax
mov dword [rsp + 0x50], 0x54
mov eax, dword [rsp + 0x50]
xor al, 0x43
mov byte [rsp + 0x54], al
mov eax, dword [rsp + 0x50]
inc al
xor al, 0x72
mov byte [rsp + 0x55], al
mov eax, dword [rsp + 0x50]
add al, 2
mov bl, 0x65
xor al, bl
mov byte [rsp + 0x56], al
mov eax, dword [rsp + 0x50]
add al, 3
xor al, 0x61
mov byte [rsp + 0x57], al
mov eax, dword [rsp + 0x50]
add al, 4
xor al, 0x74
mov byte [rsp + 0x58], al
mov eax, dword [rsp + 0x50]
add al, 5
xor al, bl
mov byte [rsp + 0x59], al
mov eax, dword [rsp + 0x50]
add al, 6
xor al, 0x54
mov byte [rsp + 0x5a], al
mov eax, dword [rsp + 0x50]
add al, 7
mov cl, 0x6f
xor al, cl
mov byte [rsp + 0x5b], al
mov eax, dword [rsp + 0x50]
add al, 8
xor al, cl
mov byte [rsp + 0x5c], al
mov eax, dword [rsp + 0x50]
add al, 9
xor al, 0x6c
mov byte [rsp + 0x5d], al
mov eax, dword [rsp + 0x50]
add al, 0xa
xor al, 0x68
mov byte [rsp + 0x5e], al
mov eax, dword [rsp + 0x50]
add al, 0xb
xor al, bl
mov byte [rsp + 0x5f], al
mov eax, dword [rsp + 0x50]
add al, 0xc
xor al, 0x6c
mov byte [rsp + 0x60], al
mov eax, dword [rsp + 0x50]
add al, 0xd
xor al, 0x70
mov byte [rsp + 0x61], al
mov eax, dword [rsp + 0x50]
add al, 0xe
xor al, 0x33
mov byte [rsp + 0x62], al
mov eax, dword [rsp + 0x50]
add al, 0xf
xor al, 0x32
mov byte [rsp + 0x63], al
mov eax, dword [rsp + 0x50]
add al, 0x10
xor al, 0x53
mov byte [rsp + 0x64], al
mov eax, dword [rsp + 0x50]
add al, 0x11
xor al, 0x6e
mov byte [rsp + 0x65], al
mov eax, dword [rsp + 0x50]
add al, 0x12
xor al, 0x61
mov byte [rsp + 0x66], al
mov eax, dword [rsp + 0x50]
add al, 0x13
xor al, 0x70
mov byte [rsp + 0x67], al
mov eax, dword [rsp + 0x50]
add al, 0x14
xor al, 0x73
mov byte [rsp + 0x68], al
mov eax, dword [rsp + 0x50]
add al, 0x15
xor al, 0x68
mov byte [rsp + 0x69], al
mov eax, dword [rsp + 0x50]
add al, 0x16
xor al, cl
mov byte [rsp + 0x6a], al
mov eax, dword [rsp + 0x50]
add al, 0x17
xor al, 0x74
mov byte [rsp + 0x6b], al
xor eax, eax
mov byte [rsp + 0x6c], al
mov al, byte [rsp + 0x54]
mov rdx, rdi
mov al, byte [rsp + rdx + 0x54]
mov ecx, dword [rsp + 0x50]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x54], cl
inc rdx
cmp rdx, 0x18
jb 0x1800c13dd
mov byte [rsp + 0x6c], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c8], xmm0
mov qword [rbp + 0x1d8], rdi
mov qword [rbp + 0x1e0], rdi
lea rax, [rsp + 0x54]
mov r8, r12
inc r8
cmp byte [rax + r8], dil
jne 0x1800c141b
lea rdx, [rsp + 0x54]
lea rcx, [rbp + 0x1c8]
call fcn.18000c7ac
nop
mov dword [rsp + 0x70], 0x61
mov eax, dword [rsp + 0x70]
xor al, 0x6b
mov byte [rsp + 0x74], al
mov eax, dword [rsp + 0x70]
inc al
xor al, bl
mov byte [rsp + 0x75], al
mov eax, dword [rsp + 0x70]
add al, 2
xor al, 0x72
mov byte [rsp + 0x76], al
mov eax, dword [rsp + 0x70]
add al, 3
xor al, 0x6e
mov byte [rsp + 0x77], al
mov eax, dword [rsp + 0x70]
add al, 4
xor al, bl
mov byte [rsp + 0x78], al
mov eax, dword [rsp + 0x70]
add al, 5
xor al, 0x6c
mov byte [rsp + 0x79], al
mov eax, dword [rsp + 0x70]
add al, 6
xor al, 0x33
mov byte [rsp + 0x7a], al
mov eax, dword [rsp + 0x70]
add al, 7
xor al, 0x32
mov byte [rsp + 0x7b], al
xor eax, eax
mov byte [rsp + 0x7c], al
mov al, byte [rsp + 0x74]
mov rdx, rdi
mov al, byte [rsp + rdx + 0x74]
mov ecx, dword [rsp + 0x70]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x74], cl
inc rdx
cmp rdx, 8
jb 0x1800c14a9
mov byte [rsp + 0x7c], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x118], xmm1
lea rax, [rsp + 0x74]
mov r8, r12
inc r8
cmp byte [rax + r8], dil
jne 0x1800c14e4
lea rdx, [rsp + 0x74]
lea rcx, [rbp + 0x108]
call fcn.18000c7ac
nop
lea rdx, [rbp + 0x108]
lea rcx, [rbp + 0x2c0]
call fcn.1800ceb58
nop
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp + 0x1c8]
mov rdx, rax
lea rcx, [0x18019d160]
call fcn.180013534
nop
mov rdx, qword [rbp + 0x120]
cmp rdx, 0x10
jb 0x1800c1576
inc rdx
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c1571
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800c1571
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165930]
movdqu xmmword [rbp + 0x118], xmm0
mov byte [rbp + 0x108], dil
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rsp + 0x74]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x19]
lea rcx, [rsp + 0x54]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18016368c]
call fcn.1801579fc
nop
lea rcx, [0x18019d054]
call fcn.180157a84
mov r8d, r14d
mov edx, 8
lea rcx, [0x18019d160]
call fcn.1800103e0
mov qword [rbp + 0x10c0], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rbp + 0x10c0]
cmp eax, 0x12b
je 0x1800c1601
test r14d, r14d
jne 0x1800c1cee
cmp qword [r15 + 0x10], rdi
jne 0x1800c1cee
xorps xmm0, xmm0
movups xmmword [rbp + 0x270], xmm0
movups xmmword [rbp + 0x280], xmm0
movups xmmword [rbp + 0x290], xmm0
mov r14d, 0x400
mov r8d, r14d
xor edx, edx
lea rcx, [rbp + 0xc80]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x7a0]
call sub.VCRUNTIME140.dll_memset
mov r9d, 0x104
lea r8, [rbp + 0x7a0]
xor edx, edx
mov rcx, qword [rsi + 0x400]
call qword [sym.imp.KERNEL32.dll_K32GetModuleFileNameExW]
xorps xmm0, xmm0
movups xmmword [rbp + 0x188], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x198], xmm1
lea rax, [rbp + 0x7a0]
mov r8, r12
inc r8
cmp word [rax + r8*2], di
jne 0x1800c1689
lea rdx, [rbp + 0x7a0]
lea rcx, [rbp + 0x188]
call fcn.18000c67c
mov rdx, qword [rbp + 0xa0]
mov r15d, 0x1000
cmp rdx, 8
jb 0x1800c16f1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, r15
jb 0x1800c16ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800c16ec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
mov qword [rbp + 0x98], rdi
mov qword [rbp + 0xa0], 7
mov word [rbp + 0x88], di
mov r8d, 0x20
lea rdx, [rbp + 0x188]
lea rcx, [rbp + 0x88]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
movdqa xmm0, xmmword [0x180165920]
movdqu xmmword [rbp + 0x198], xmm0
mov word [rbp + 0x188], di
lea rcx, [rbp + 0x188]
call fcn.18000bd8c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
cmp qword [rsi + 0x400], rax
jne 0x1800c1784
mov rbx, qword gs:[0x60]
test rbx, rbx
je 0x1800c2ba6
mov rbx, qword [rbx + 0x10]
mov r8, r14
mov rdx, rbx
lea rcx, [rbp + 0xc80]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
jmp 0x1800c1cc6
xor edx, edx
mov r8d, 0x2c8
lea rcx, [rbp + 0x9b0]
call sub.VCRUNTIME140.dll_memset
mov rax, qword gs:[0x58]
mov rbx, qword [rax + r13*8]
mov r14, qword [rbp - 0x70]
mov eax, dword [rbx + r14]
cmp dword [0x18019d050], eax
jle 0x1800c19e0
lea rcx, [0x18019d050]
call fcn.180157af0
cmp dword [0x18019d050], r12d
jne 0x1800c19e0
lea rax, [rbp + 0x1e8]
mov qword [rbp - 0x68], rax
mov dword [rbp + 0x60], 0x26
mov byte [rbp + 0x64], 0x68
mov byte [rbp + 0x65], 0x52
mov byte [rbp + 0x66], 0x77
mov byte [rbp + 0x67], 0x53
mov byte [rbp + 0x68], 0x43
mov byte [rbp + 0x69], 0x54
mov byte [rbp + 0x6a], 0x5f
mov byte [rbp + 0x6b], 0x6f
mov byte [rbp + 0x6c], 0x48
mov byte [rbp + 0x6d], 0x40
mov byte [rbp + 0x6e], 0x49
mov byte [rbp + 0x6f], 0x54
mov byte [rbp + 0x70], 0x4b
mov byte [rbp + 0x71], 0x47
mov byte [rbp + 0x72], 0x52
mov byte [rbp + 0x73], 0x4f
mov byte [rbp + 0x74], 0x49
mov byte [rbp + 0x75], 0x48
mov byte [rbp + 0x76], 0x76
mov byte [rbp + 0x77], 0x54
mov byte [rbp + 0x78], 0x49
mov byte [rbp + 0x79], 0x45
mov byte [rbp + 0x7a], 0x43
mov byte [rbp + 0x7b], 0x55
mov byte [rbp + 0x7c], 0x55
xor eax, eax
mov byte [rbp + 0x7d], al
mov al, byte [rbp + 0x64]
mov rdx, rdi
mov al, byte [rbp + rdx + 0x64]
mov ecx, dword [rbp + 0x60]
xor cl, al
mov byte [rbp + rdx + 0x64], cl
inc rdx
cmp rdx, 0x19
jb 0x1800c1853
mov byte [rbp + 0x7d], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e8], xmm0
mov qword [rbp + 0x1f8], rdi
mov qword [rbp + 0x200], rdi
lea rax, [rbp + 0x64]
mov r8, r12
inc r8
cmp byte [rax + r8], dil
jne 0x1800c188c
lea rdx, [rbp + 0x64]
lea rcx, [rbp + 0x1e8]
call fcn.18000c7ac
nop
mov dword [rbp], 1
mov byte [rbp + 4], 0x6f
mov byte [rbp + 5], 0x75
mov byte [rbp + 6], 0x65
mov byte [rbp + 7], 0x6d
mov byte [rbp + 8], 0x6d
xor eax, eax
mov byte [rbp + 9], al
mov al, byte [rbp + 4]
mov rdx, rdi
mov al, byte [rbp + rdx + 4]
mov ecx, dword [rbp]
xor cl, al
mov byte [rbp + rdx + 4], cl
inc rdx
cmp rdx, 5
jb 0x1800c18cc
mov byte [rbp + 9], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x128], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x138], xmm1
lea rax, [rbp + 4]
mov r8, r12
inc r8
cmp byte [rax + r8], dil
jne 0x1800c1902
lea rdx, [rbp + 4]
lea rcx, [rbp + 0x128]
call fcn.18000c7ac
nop
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0x2e0]
call fcn.1800ceb58
nop
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp + 0x1e8]
mov rdx, rax
lea rcx, [0x18019d480]
call fcn.1800c47ac
nop
mov rdx, qword [rbp + 0x140]
cmp rdx, 0x10
jb 0x1800c198f
inc rdx
mov rcx, qword [rbp + 0x128]
mov rax, rcx
cmp rdx, r15
jb 0x1800c198a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800c198a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165930]
movdqu xmmword [rbp + 0x138], xmm0
mov byte [rbp + 0x128], dil
xor edx, edx
lea r8d, [rdx + 6]
lea rcx, [rbp + 4]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x1a]
lea rcx, [rbp + 0x64]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x180163680]
call fcn.1801579fc
nop
lea rcx, [0x18019d050]
call fcn.180157a84
lea r13, [0x18019d630]
mov eax, dword [rbx + r14]
cmp dword [0x18019d580], eax
jle 0x1800c1c27
lea rcx, [0x18019d580]
call fcn.180157af0
cmp dword [0x18019d580], r12d
jne 0x1800c1c27
lea rax, [rbp + 0x208]
mov qword [rbp - 0x68], rax
mov byte [rbp - 0x43], 0x5e
mov byte [rbp - 0x42], 0x71
mov byte [rbp - 0x41], 0x6d
mov byte [rbp - 0x40], 0x70
mov byte [rbp - 0x3f], 0x5c
mov byte [rbp - 0x3e], 0x7e
mov byte [rbp - 0x3d], 0x7b
mov byte [rbp - 0x3c], 0x6f
mov byte [rbp - 0x3b], 0x71
mov byte [rbp - 0x3a], 0x7f
mov byte [rbp - 0x39], 0x7f
mov byte [rbp - 0x38], 0x59
mov byte [rbp - 0x37], 0x71
mov byte [rbp - 0x36], 0x79
mov byte [rbp - 0x35], 0x7b
mov byte [rbp - 0x34], 0x7e
mov byte [rbp - 0x33], 0x85
mov byte [rbp - 0x32], dil
mov al, byte [rbp - 0x43]
mov rcx, rdi
mov al, byte [rbp + rcx - 0x43]
sub al, 0xc
mov byte [rbp + rcx - 0x43], al
inc rcx
cmp rcx, 0x11
jb 0x1800c1a69
xorps xmm0, xmm0
movups xmmword [rbp + 0x208], xmm0
mov qword [rbp + 0x218], rdi
mov qword [rbp + 0x220], rdi
lea rax, [rbp - 0x43]
mov r8, r12
inc r8
cmp byte [rax + r8], dil
jne 0x1800c1a9b
lea rdx, [rbp - 0x43]
lea rcx, [rbp + 0x208]
call fcn.18000c7ac
nop
mov dword [rbp - 0x80], 0x33
mov eax, dword [rbp - 0x80]
xor al, 0x6b
mov byte [rbp - 0x7c], al
mov eax, dword [rbp - 0x80]
inc al
xor al, 0x65
mov byte [rbp - 0x7b], al
mov eax, dword [rbp - 0x80]
add al, 2
xor al, 0x72
mov byte [rbp - 0x7a], al
mov eax, dword [rbp - 0x80]
add al, 3
xor al, 0x6e
mov byte [rbp - 0x79], al
mov eax, dword [rbp - 0x80]
add al, 4
xor al, 0x65
mov byte [rbp - 0x78], al
mov eax, dword [rbp - 0x80]
add al, 5
xor al, 0x6c
mov byte [rbp - 0x77], al
mov eax, dword [rbp - 0x80]
add al, 6
xor al, 0x33
mov byte [rbp - 0x76], al
mov eax, dword [rbp - 0x80]
add al, 7
xor al, 0x32
mov byte [rbp - 0x75], al
xor eax, eax
mov byte [rbp - 0x74], al
mov al, byte [rbp - 0x7c]
mov rdx, rdi
mov al, byte [rbp + rdx - 0x7c]
mov ecx, dword [rbp - 0x80]
add cl, dl
xor cl, al
mov byte [rbp + rdx - 0x7c], cl
inc rdx
cmp rdx, 8
jb 0x1800c1b15
mov byte [rbp - 0x74], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x158], xmm1
lea rax, [rbp - 0x7c]
inc r12
cmp byte [rax + r12], dil
jne 0x1800c1b4a
mov r8, r12
lea rdx, [rbp - 0x7c]
lea rcx, [rbp + 0x148]
call fcn.18000c7ac
nop
lea rdx, [rbp + 0x148]
lea rcx, [rbp + 0x300]
call fcn.1800ceb58
nop
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp + 0x208]
mov rdx, rax
mov rcx, r13
call fcn.1800c63e0
nop
mov rdx, qword [rbp + 0x160]
cmp rdx, 0x10
jb 0x1800c1bd6
inc rdx
mov rcx, qword [rbp + 0x148]
mov rax, rcx
cmp rdx, r15
jb 0x1800c1bd1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800c1bd1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165930]
movdqu xmmword [rbp + 0x158], xmm0
mov byte [rbp + 0x148], dil
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rbp - 0x7c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x12]
lea rcx, [rbp - 0x43]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x180163674]
call fcn.1801579fc
nop
lea rcx, [0x18019d580]
call fcn.180157a84
lea rax, [rbp + 0x10d8]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x270]
mov rdx, qword [rsi + 0x400]
lea rcx, [0x18019d480]
call fcn.1800c2c10
lea rax, [rbp + 0x80]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x2c8
lea r9, [rbp + 0x9b0]
mov r8, qword [rbp + 0x278]
mov rdx, qword [rsi + 0x400]
mov rcx, r13
call fcn.1800beb24
test eax, eax
je 0x1800c2ba6
mov rbx, qword [rbp + 0x9c0]
lea rax, [rbp + 0x80]
mov qword [rsp + 0x28], rax
mov r14d, 0x400
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0xc80]
mov r8, rbx
mov rdx, qword [rsi + 0x400]
mov rcx, r13
call fcn.1800beb24
test eax, eax
je 0x1800c2ba6
movsxd rcx, dword [rbp + 0xcbc]
lea rax, [rcx + 0x108]
cmp rax, r14
ja 0x1800c2ba6
mov r14d, dword [rbp + rcx + 0xcd0]
mov byte [rsi + 4], 1
jmp 0x1800c294b
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1800c2b8f
mov rax, qword gs:[0x58]
mov rbx, qword [rax + r13*8]
mov r14, qword [rbp - 0x70]
mov eax, dword [rbx + r14]
cmp dword [0x18019d5a0], eax
jle 0x1800c1f19
lea rcx, [0x18019d5a0]
call fcn.180157af0
cmp dword [0x18019d5a0], r12d
jne 0x1800c1f19
lea rax, [rbp + 0x228]
mov qword [rbp - 0x68], rax
mov byte [rbp - 0x52], 0x53
mov byte [rbp - 0x51], 0x75
mov byte [rbp - 0x50], 0x6a
mov byte [rbp - 0x4f], 0x7b
mov byte [rbp - 0x4e], 0x72
mov byte [rbp - 0x4d], 0x6b
mov byte [rbp - 0x4c], 0x39
mov byte [rbp - 0x4b], 0x38
mov byte [rbp - 0x4a], 0x4c
mov byte [rbp - 0x49], 0x6f
mov byte [rbp - 0x48], 0x78
mov byte [rbp - 0x47], 0x79
mov byte [rbp - 0x46], 0x7a
mov byte [rbp - 0x45], 0x5d
mov byte [rbp - 0x44], dil
mov al, byte [rbp - 0x52]
mov rcx, rdi
mov al, byte [rbp + rcx - 0x52]
sub al, 6
mov byte [rbp + rcx - 0x52], al
inc rcx
cmp rcx, 0xe
jb 0x1800c1d83
xorps xmm0, xmm0
movups xmmword [rbp + 0x228], xmm0
mov qword [rbp + 0x238], rdi
mov qword [rbp + 0x240], rdi
lea rax, [rbp - 0x52]
mov r8, r12
inc r8
cmp byte [rax + r8], dil
jne 0x1800c1db5
lea rdx, [rbp - 0x52]
lea rcx, [rbp + 0x228]
call fcn.18000c7ac
nop
mov dword [rbp + 0x1c], 0x67
mov byte [rbp + 0x20], 0xc
mov byte [rbp + 0x21], 2
mov byte [rbp + 0x22], 0x15
mov byte [rbp + 0x23], 9
mov byte [rbp + 0x24], 2
mov byte [rbp + 0x25], 0xb
mov byte [rbp + 0x26], 0x54
mov byte [rbp + 0x27], 0x55
xor eax, eax
mov byte [rbp + 0x28], al
mov al, byte [rbp + 0x20]
mov rdx, rdi
mov al, byte [rbp + rdx + 0x20]
mov ecx, dword [rbp + 0x1c]
xor cl, al
mov byte [rbp + rdx + 0x20], cl
inc rdx
cmp rdx, 8
jb 0x1800c1e01
mov byte [rbp + 0x28], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x168], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x178], xmm1
lea rax, [rbp + 0x20]
mov r8, r12
inc r8
cmp byte [rax + r8], dil
jne 0x1800c1e37
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x168]
call fcn.18000c7ac
nop
lea rdx, [rbp + 0x168]
lea rcx, [rbp + 0x320]
call fcn.1800ceb58
nop
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp + 0x228]
mov rdx, rax
lea rcx, [0x18019d1e0]
call fcn.1800c4d50
nop
mov rdx, qword [rbp + 0x180]
cmp rdx, 0x10
jb 0x1800c1ec8
inc rdx
mov rcx, qword [rbp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c1ec3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800c1ec3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165930]
movdqu xmmword [rbp + 0x178], xmm0
mov byte [rbp + 0x168], dil
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rbp + 0x20]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xf]
lea rcx, [rbp - 0x52]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x180163668]
call fcn.1801579fc
nop
lea rcx, [0x18019d5a0]
call fcn.180157a84
mov eax, dword [rbx + r14]
cmp dword [0x18019d59c], eax
jle 0x1800c2121
lea rcx, [0x18019d59c]
call fcn.180157af0
cmp dword [0x18019d59c], r12d
jne 0x1800c2121
lea rax, [rbp + 0x248]
mov qword [rbp - 0x68], rax
mov byte [rbp - 0x60], 0x53
mov byte [rbp - 0x5f], 0x75
mov byte [rbp - 0x5e], 0x6a
mov byte [rbp - 0x5d], 0x7b
mov byte [rbp - 0x5c], 0x72
mov byte [rbp - 0x5b], 0x6b
mov byte [rbp - 0x5a], 0x39
mov byte [rbp - 0x59], 0x38
mov byte [rbp - 0x58], 0x54
mov byte [rbp - 0x57], 0x6b
mov byte [rbp - 0x56], 0x7e
mov byte [rbp - 0x55], 0x7a
mov byte [rbp - 0x54], 0x5d
mov byte [rbp - 0x53], dil
mov al, byte [rbp - 0x60]
mov rcx, rdi
mov al, byte [rbp + rcx - 0x60]
sub al, 6
mov byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0xd
jb 0x1800c1f8b
xorps xmm0, xmm0
movups xmmword [rbp + 0x248], xmm0
mov qword [rbp + 0x258], rdi
mov qword [rbp + 0x260], rdi
lea rax, [rbp - 0x60]
mov r8, r12
inc r8
cmp byte [rax + r8], dil
jne 0x1800c1fbd
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x248]
call fcn.18000c7ac
nop
mov dword [rbp + 0x2c], 0x66
mov byte [rbp + 0x30], 0xd
mov byte [rbp + 0x31], 3
mov byte [rbp + 0x32], 0x14
mov byte [rbp + 0x33], 8
mov byte [rbp + 0x34], 3
mov byte [rbp + 0x35], 0xa
mov byte [rbp + 0x36], 0x55
mov byte [rbp + 0x37], 0x54
xor eax, eax
mov byte [rbp + 0x38], al
mov al, byte [rbp + 0x30]
mov rdx, rdi
mov al, byte [rbp + rdx + 0x30]
mov ecx, dword [rbp + 0x2c]
xor cl, al
mov byte [rbp + rdx + 0x30], cl
inc rdx
cmp rdx, 8
jb 0x1800c2009
mov byte [rbp + 0x38], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0xc8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd8], xmm1
lea rax, [rbp + 0x30]
mov r8, r12
inc r8
cmp byte [rax + r8], dil
jne 0x1800c203f
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0xc8]
call fcn.18000c7ac
nop
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x340]
call fcn.1800ceb58
nop
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp + 0x248]
mov rdx, rax
lea rcx, [0x18019da60]
call fcn.1800c4d50
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x1800c20d0
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c20cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800c20cb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165930]
movdqu xmmword [rbp + 0xd8], xmm0
mov byte [rbp + 0xc8], dil
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rbp + 0x30]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xe]
lea rcx, [rbp - 0x60]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18016365c]
call fcn.1801579fc
nop
lea rcx, [0x18019d59c]
call fcn.180157a84
mov ebx, 0x438
mov r8d, ebx
xor edx, edx
lea rcx, [rbp + 0x360]
call sub.VCRUNTIME140.dll_memset
mov r8d, ebx
xor edx, edx
lea rcx, [rbp + 0x360]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov dword [rbp + 0x360], ebx
lea r8, [rbp + 0x360]
mov rbx, qword [rbp + 0x10c0]
mov rdx, rbx
lea rcx, [0x18019d1e0]
call fcn.180010458
test eax, eax
jne 0x1800c2194
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov dword [rsi + 0x440], ebx
jmp 0x1800c2ba6
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], rdi
mov qword [rbp + 0x58], rdi
lea rax, [rbp + 0x390]
mov r8, r12
inc r8
cmp word [rax + r8*2], di
jne 0x1800c21ad
lea rdx, [rbp + 0x390]
lea rcx, [rbp + 0x40]
call fcn.18000c67c
nop
lea rcx, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rcx, qword [rbp + 0x40]
mov rax, qword [rbp + 0x50]
lea r8, [rcx + rax*2]
lea rdx, [rbp + 0x40]
cmovae rdx, qword [rbp + 0x40]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rdi
cmp rdx, r8
jne 0x1800c2218
mov rbx, rdi
mov qword [rsp + 0x40], rbx
mov r14d, 0xf
mov qword [rsp + 0x48], r14
mov byte [rsp + 0x30], dil
jmp 0x1800c2235
mov r9, r8
sub r9, rdx
sar r9, 1
lea rcx, [rsp + 0x30]
call fcn.1800a85dc
mov r14, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x40]
mov r13, qword [r15 + 0x10]
mov r9, r15
cmp qword [r15 + 0x18], 0x10
jb 0x1800c2246
mov r9, qword [r15]
lea rcx, [rsp + 0x30]
mov r15, qword [rsp + 0x30]
cmp r14, 0x10
cmovae rcx, r15
mov qword [rsp + 0x20], r13
xor r8d, r8d
mov rdx, rbx
call fcn.18001deec
cmp rax, r12
jne 0x1800c276e
lea rdx, [rsp + 0x30]
cmp r14, 0x10
cmovae rdx, r15
mov qword [rbp + 0x80], rdx
mov rcx, qword [rbp + 0x10d0]
mov rax, rcx
mov qword [rbp - 0x70], rcx
cmp qword [rcx + 0x18], 0x10
jb 0x1800c22a1
mov rax, qword [rcx]
mov qword [rbp - 0x70], rax
cmp rbx, r13
ja 0x1800c2316
sub r13, rbx
test rbx, rbx
je 0x1800c276e
lea rcx, [r13 + 1]
add rcx, rax
mov qword [rbp - 0x68], rcx
movsx edx, byte [rdx]
mov dword [rbp + 0x10d8], edx
mov r8, rcx
sub r8, rax
mov rcx, rax
jmp 0x1800c22fa
mov r8, rbx
mov rdx, qword [rbp + 0x80]
mov rcx, r13
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1800c2309
inc r13
mov r8, qword [rbp - 0x68]
sub r8, r13
mov edx, dword [rbp + 0x10d8]
mov rcx, r13
call sub.VCRUNTIME140.dll_memchr
test rax, rax
mov r13, rax
jne 0x1800c22d1
jmp 0x1800c2316
sub r13, qword [rbp - 0x70]
cmp r13, r12
jne 0x1800c276e
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm1
lea rax, [rbp + 0x390]
mov r8, r12
inc r8
cmp word [rax + r8*2], di
jne 0x1800c232f
lea rdx, [rbp + 0x390]
lea rcx, [rbp - 0x30]
call fcn.18000c67c
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x1800c238c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c2387
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800c2387
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
mov qword [rbp + 0x50], rdi
mov qword [rbp + 0x58], 7
mov word [rbp + 0x40], di
mov ebx, 0x20
mov r8d, ebx
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x40]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
lea rcx, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rcx, qword [rbp + 0x40]
mov rax, qword [rbp + 0x50]
lea r8, [rcx + rax*2]
lea rdx, [rbp + 0x40]
cmovae rdx, qword [rbp + 0x40]
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm1
cmp rdx, r8
jne 0x1800c23f3
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], dil
jmp 0x1800c2405
mov r9, r8
sub r9, rdx
sar r9, 1
lea rcx, [rbp - 0x30]
call fcn.1800a85dc
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x1800c2445
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c2440
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800c2440
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], dil
mov r8, rbx
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x30]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
lea rcx, [rsp + 0x30]
mov r15, qword [rsp + 0x30]
mov r14, qword [rsp + 0x48]
cmp r14, 0x10
cmovae rcx, r15
lea rax, [rsp + 0x30]
cmovae rax, r15
mov rbx, qword [rsp + 0x40]
add rax, rbx
lea r13, [rsp + 0x30]
cmp r14, 0x10
cmovae r13, r15
cmp r13, rax
je 0x1800c24d3
sub rcx, r13
mov rbx, rcx
mov r14, rax
movzx ecx, byte [r13]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [rbx + r13], al
inc r13
cmp r13, r14
jne 0x1800c24ad
mov r15, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x40]
mov r14, qword [rsp + 0x48]
mov r13, qword [rbp + 0x10d0]
mov rax, qword [r13 + 0x10]
mov r9, r13
cmp qword [r13 + 0x18], 0x10
jb 0x1800c24ec
mov r9, qword [r13]
lea rcx, [rsp + 0x30]
cmp r14, 0x10
setae byte [rbp + 0x10d8]
cmovae rcx, r15
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, rbx
call fcn.18001deec
cmp rax, r12
jne 0x1800c27cc
lea r9, [rsp + 0x30]
cmp byte [rbp + 0x10d8], dil
cmovne r9, r15
mov rcx, r13
cmp qword [r13 + 0x18], 0x10
jb 0x1800c2537
mov rcx, qword [r13]
mov qword [rsp + 0x20], rbx
xor r8d, r8d
mov rdx, qword [r13 + 0x10]
call fcn.18001deec
cmp rax, r12
jne 0x1800c27cc
lea r8, [rbp + 0x360]
mov rdx, qword [rbp + 0x10c0]
lea rcx, [0x18019da60]
call fcn.180010458
test eax, eax
je 0x1800c26be
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], rdi
lea rax, [rbp + 0x390]
mov r8, r12
inc r8
cmp word [rax + r8*2], di
jne 0x1800c258c
lea rdx, [rbp + 0x390]
lea rcx, [rbp - 0x30]
call fcn.18000c67c
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x40]
call fcn.180015424
lea rcx, [rbp - 0x30]
call fcn.18000bd8c
lea rcx, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rcx, qword [rbp + 0x40]
mov rax, qword [rbp + 0x50]
lea r8, [rcx + rax*2]
lea rdx, [rbp + 0x40]
cmovae rdx, qword [rbp + 0x40]
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], rdi
cmp rdx, r8
jne 0x1800c25fd
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], dil
jmp 0x1800c260f
mov r9, r8
sub r9, rdx
sar r9, 1
lea rcx, [rbp - 0x30]
call fcn.1800a85dc
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x30]
call fcn.180015540
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1800c2654
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c264f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c26b7
call fcn.180157a14
lea rcx, [rsp + 0x30]
mov r15, qword [rsp + 0x30]
mov r14, qword [rsp + 0x48]
cmp r14, 0x10
cmovae rcx, r15
lea rax, [rsp + 0x30]
cmovae rax, r15
mov rbx, qword [rsp + 0x40]
add rax, rbx
lea r13, [rsp + 0x30]
cmp r14, 0x10
cmovae r13, r15
cmp r13, rax
je 0x1800c24d3
sub rcx, r13
mov rbx, rcx
mov r14, rax
movzx ecx, byte [r13]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [rbx + r13], al
inc r13
cmp r13, r14
jne 0x1800c269b
jmp 0x1800c24c4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov r8d, 0xbd2
mov rcx, rsi
call fcn.1800bb4fc
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x1800c2712
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c270d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c28ed
call fcn.180157a14
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], dil
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x1800c2ba6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c2764
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c293f
call fcn.180157a14
jmp 0x1800c2ba6
lea rcx, [rsi + 0x10]
lea rax, [rsp + 0x30]
cmp rcx, rax
je 0x1800c27cc
lea r9, [rsp + 0x30]
cmp r14, 0x10
cmovae r9, r15
cmp rbx, qword [rcx + 0x18]
ja 0x1800c27b5
mov r14, rcx
cmp qword [rcx + 0x18], 0x10
jb 0x1800c279c
mov r14, qword [rcx]
mov qword [rcx + 0x10], rbx
mov r8, rbx
mov rdx, r9
mov rcx, r14
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov byte [rbx + r14], dil
jmp 0x1800c27bd
mov rdx, rbx
call fcn.18001db14
mov r15, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x40]
mov r14, qword [rsp + 0x48]
lea r8, [rsp + 0x30]
cmp r14, 0x10
cmovae r8, r15
add r8, rbx
lea rdx, [rsp + 0x30]
cmp r14, 0x10
cmovae rdx, r15
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm1
cmp rdx, r8
jne 0x1800c280b
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], di
jmp 0x1800c281a
mov r9, r8
sub r9, rdx
lea rcx, [rbp - 0x30]
call fcn.18001e568
mov rdx, qword [rbp + 0xa0]
mov r15d, 0x1000
cmp rdx, 8
jb 0x1800c2865
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, r15
jb 0x1800c2860
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800c2860
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
mov qword [rbp + 0x98], rdi
mov qword [rbp + 0xa0], 7
mov word [rbp + 0x88], di
mov r8d, 0x20
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x88]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
movdqa xmm0, xmmword [0x180165920]
movdqu xmmword [rbp - 0x20], xmm0
mov word [rbp - 0x30], di
lea rcx, [rbp - 0x30]
call fcn.18000bd8c
mov rbx, qword [rbp + 0x378]
mov r14d, dword [rbp + 0x380]
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x1800c28f9
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, r15
jb 0x1800c28f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800c28f4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], dil
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x1800c294b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, r15
jb 0x1800c2946
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800c2946
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
cmp qword [rbp + 0x98], rdi
je 0x1800c2b56
test rbx, rbx
je 0x1800c2b56
test r14, r14
je 0x1800c2b56
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0xa8]
call fcn.18000be28
nop
lea rcx, [rsi + 0x410]
lea rax, [rbp + 0x88]
cmp rcx, rax
je 0x1800c29e5
mov r15, qword [rbp + 0x98]
lea r9, [rbp + 0x88]
cmp qword [rbp + 0xa0], 8
cmovae r9, qword [rbp + 0x88]
cmp r15, qword [rcx + 0x18]
ja 0x1800c29dd
mov r12, rcx
cmp qword [rcx + 0x18], 8
jb 0x1800c29c2
mov r12, qword [rcx]
mov qword [rcx + 0x10], r15
lea r8, [r15 + r15]
mov rdx, r9
mov rcx, r12
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov word [r12 + r15*2], di
jmp 0x1800c29e5
mov rdx, r15
call fcn.18000c8bc
lea rcx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 8
cmovae rcx, qword [rbp + 0xa8]
mov rax, qword [rbp + 0xb8]
lea r8, [rcx + rax*2]
lea rdx, [rbp + 0xa8]
cmovae rdx, qword [rbp + 0xa8]
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm1
cmp rdx, r8
jne 0x1800c2a38
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], dil
jmp 0x1800c2a4a
mov r9, r8
sub r9, rdx
sar r9, 1
lea rcx, [rbp - 0x30]
call fcn.1800a85dc
lea rcx, [rsi + 0x10]
lea rdx, [rbp - 0x30]
call fcn.180015540
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1800c2a95
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c2a90
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800c2a90
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
mov byte [rsi + 4], 1
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
cmp qword [rsi + 0x400], rax
je 0x1800c2b38
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rdx, [r14 + 1]
xor ecx, ecx
lea r9d, [rcx + 4]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsi + 0x3f0], rax
test rax, rax
jne 0x1800c2ae6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov r8d, 0xbf1
jmp 0x1800c2b11
mov qword [rsi + 0x68], r14
mov qword [rsi + 0x478], rbx
mov r9, rbx
mov r8, r14
mov rdx, rax
mov rcx, rsi
call fcn.1800c2ca0
test al, al
jne 0x1800c2b28
mov edx, 0x80006
mov r8d, 0xbf9
mov rcx, rsi
call fcn.1800bb4fc
nop
lea rcx, [rbp + 0xa8]
call fcn.18000bd8c
jmp 0x1800c2ba6
mov byte [rsi + 0x48c], dil
mov qword [rsi + 0x470], rdi
jmp 0x1800c2b4a
mov qword [rsi + 0x3f0], rbx
mov qword [rsi + 0x68], r14
mov qword [rsi + 0x478], rbx
lea rcx, [rbp + 0xa8]
call fcn.18000bd8c
mov rax, qword [rbp + 0x10c0]
test rax, rax
je 0x1800c2b6b
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, rsi
cmp qword [rsi + 0x3f0], rdi
jne 0x1800c2b85
mov r8d, 0xc0c
jmp 0x1800c2b9e
call fcn.1800bb870
mov dil, al
jmp 0x1800c2ba6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, 0xbae
mov rcx, rsi
mov edx, eax
call fcn.1800bb4fc
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 8
jb 0x1800c2bef
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c2bea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800c2bea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
mov al, dil
mov rbx, qword [rsp + 0x11c8]
add rsp, 0x1180
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret