Function at 0x1800010d0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Parse pe header

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x298]
sub rsp, 0x370
mov rax, qword [0x180029008]
xor rax, rsp
mov qword [rbp + 0x260], rax
xor ebx, ebx
mov dword [rsp + 0x48], 0x10b
mov r8d, 0x774393e8
mov qword [rbp - 0x80], rcx
mov rdi, rcx
mov dword [rsp + 0x50], 0x20b
mov r14d, ebx
lea r9d, [rbx + 0x32]
call fcn.180002400
test rax, rax
je 0x180001149
mov r8d, 0x104
lea rdx, [rbp + 0x150]
mov rcx, rdi
call rax
mov byte [rsp + 0x40], 0x31
mov rdx, rbx
mov byte [rsp + 0x41], 0x7f
mov r13d, 2
mov byte [rsp + 0x42], bl
mov al, byte [rsp + 0x40]
movsx ecx, byte [rsp + rdx + 0x40]
sub ecx, 0xc
mov byte [rsp + rdx + 0x40], cl
inc rdx
cmp rdx, r13
jb 0x180001164
lea rdx, [rbp + 0x150]
lea rcx, [rsp + 0x40]
call fcn.1800010c0
mov r9d, 0x14
mov r8d, 0x8f8f114
call fcn.180002400
test rax, rax
je 0x1800011cd
xor r9d, r9d
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], 0x80
lea rcx, [rbp + 0x150]
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
lea r8d, [r9 + 1]
call rax
mov rdi, rax
jmp 0x1800011d0
mov rdi, rbx
test rdi, rdi
jne 0x180001299
mov byte [rbp + 0xe8], 0x2e
lea eax, [rdi + 0x78]
mov byte [rbp + 0xe9], 0x7c
mov byte [rbp + 0xea], 0x29
mov byte [rbp + 0xeb], 0x4c
mov byte [rbp + 0xec], 0x7b
mov byte [rbp + 0xed], 0x6e
mov byte [rbp + 0xee], 0x6a
mov byte [rbp + 0xef], 0x7d
mov byte [rbp + 0xf0], 0x6e
mov byte [rbp + 0xf1], 0x4f
mov byte [rbp + 0xf2], 0x72
mov byte [rbp + 0xf3], 0x75
mov byte [rbp + 0xf4], 0x6e
mov byte [rbp + 0xf5], 0x4a
mov byte [rbp + 0xf6], 0x29
mov byte [rbp + 0xf7], 0x6e
mov byte [rbp + 0xf8], 0x7b
mov byte [rbp + 0xf9], 0x7b
mov byte [rbp + 0xfa], al
mov byte [rbp + 0xfb], 0x7b
mov byte [rbp + 0xfc], bl
mov al, byte [rbp + 0xe8]
movsx ecx, byte [rbp + rbx + 0xe8]
sub ecx, 9
mov byte [rbp + rbx + 0xe8], cl
inc rbx
cmp rbx, 0x14
jb 0x180001273
mov r14d, 1
jmp 0x180001f7c
mov r15d, 0x25
mov r8d, 0xaef7cbf1
mov r9d, r15d
call fcn.180002400
test rax, rax
je 0x1800012c1
lea rdx, [rsp + 0x78]
mov rcx, rdi
call rax
mov rsi, rax
jmp 0x1800012c4
mov rsi, rbx
test esi, esi
jne 0x180001344
mov byte [rbp + 0x120], 0x2d
mov byte [rbp + 0x121], 0x7b
mov byte [rbp + 0x122], 0x28
mov byte [rbp + 0x123], 0x5b
mov byte [rbp + 0x124], 0x71
mov byte [rbp + 0x125], 0x82
mov byte [rbp + 0x126], 0x6d
mov byte [rbp + 0x127], 0x28
mov byte [rbp + 0x128], 0x45
mov byte [rbp + 0x129], 0x28
mov byte [rbp + 0x12a], 0x38
mov byte [rbp + 0x12b], bl
mov al, byte [rbp + 0x120]
movsx ecx, byte [rbp + rbx + 0x120]
sub ecx, 8
mov byte [rbp + rbx + 0x120], cl
inc rbx
cmp rbx, 0xb
jb 0x180001321
mov r14d, r13d
jmp 0x180001f7c
mov dword [rbp + 0x108], 0x35
xor eax, eax
mov byte [rbp + 0x10c], 0x10
mov r8, rbx
mov byte [rbp + 0x10d], 0x46
mov byte [rbp + 0x10e], 0x15
mov byte [rbp + 0x10f], 0x66
mov byte [rbp + 0x110], 0x5c
mov byte [rbp + 0x111], 0x4f
mov byte [rbp + 0x112], 0x50
mov byte [rbp + 0x113], 0x15
mov byte [rbp + 0x114], 8
mov byte [rbp + reloc.OLEAUT32.dll_VarUI4FromDisp], 0x15
mov byte [rbp + 0x116], 0x10
mov byte [rbp + 0x117], 0x40
mov byte [rbp + 0x118], al
mov al, byte [rbp + 0x10c]
movsx edx, byte [rbp + r8 + 0x10c]
mov eax, dword [rbp + 0x108]
movsx ecx, al
mov eax, edx
xor eax, ecx
mov byte [rbp + r8 + 0x10c], al
inc r8
cmp r8, 0xc
jb 0x1800013b3
mov byte [rbp + 0x118], bl
mov rdx, rbx
mov byte [rbp + 0x90], 0x45
mov byte [rbp + 0x91], 0x74
mov byte [rbp + 0x92], 0x67
mov byte [rbp + 0x93], 0x63
mov byte [rbp + 0x94], 0x76
mov byte [rbp + 0x95], 0x67
mov byte [rbp + 0x96], 0x48
mov byte [rbp + 0x97], 0x6b
mov byte [rbp + 0x98], 0x6e
mov byte [rbp + 0x99], 0x67
mov byte [rbp + 0x9a], 0x4f
mov byte [rbp + 0x9b], 0x63
mov byte [rbp + 0x9c], 0x72
mov byte [rbp + 0x9d], 0x72
mov byte [rbp + 0x9e], 0x6b
mov byte [rbp + 0x9f], 0x70
mov byte [rbp + 0xa0], 0x69
mov byte [rbp + 0xa1], 0x43
mov byte [rbp + 0xa2], bl
mov al, byte [rbp + 0x90]
movsx ecx, byte [rbp + rdx + 0x90]
sub ecx, r13d
mov byte [rbp + rdx + 0x90], cl
inc rdx
cmp rdx, 0x12
jb 0x18000146d
mov dword [rbp + 0x60], 0x5d
xor eax, eax
mov byte [rbp + 0x64], 0x16
mov r8, rbx
mov byte [rbp + 0x65], 0x38
mov byte [rbp + 0x66], 0x2f
mov byte [rbp + 0x67], 0x33
mov byte [rbp + 0x68], 0x38
mov byte [rbp + 0x69], 0x31
mov byte [rbp + 0x6a], 0x6e
mov byte [rbp + 0x6b], 0x6f
mov byte [rbp + 0x6c], 0x73
mov byte [rbp + 0x6d], 0x39
mov byte [rbp + 0x6e], 0x31
mov byte [rbp + 0x6f], 0x31
mov byte [rbp + 0x70], al
mov al, byte [rbp + 0x64]
movsx edx, byte [rbp + r8 + 0x64]
mov eax, dword [rbp + 0x60]
movsx ecx, al
mov eax, edx
xor eax, ecx
mov byte [rbp + r8 + 0x64], al
inc r8
cmp r8, 0xc
jb 0x1800014ca
lea rdx, [rbp + 0x90]
mov byte [rbp + 0x70], bl
lea rcx, [rbp + 0x64]
call fcn.180002a28
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov r8d, r13d
mov dword [rsp + 0x20], ebx
xor edx, edx
mov rcx, rdi
call rax
mov qword [rsp + 0x70], rax
mov rdi, rax
test rax, rax
jne 0x180001613
mov byte [rbp + 0xc8], 0x2e
lea eax, [rdi + 0x78]
mov byte [rbp + 0xc9], 0x7c
mov byte [rbp + 0xca], 0x29
mov byte [rbp + 0xcb], 0x4c
mov byte [rbp + 0xcc], 0x7b
mov byte [rbp + 0xcd], 0x6e
mov byte [rbp + 0xce], 0x6a
mov byte [rbp + 0xcf], 0x7d
mov byte [rbp + 0xd0], 0x6e
mov byte [rbp + 0xd1], 0x4f
mov byte [rbp + 0xd2], 0x72
mov byte [rbp + 0xd3], 0x75
mov byte [rbp + 0xd4], 0x6e
mov byte [rbp + 0xd5], 0x56
mov byte [rbp + 0xd6], 0x6a
mov byte [rbp + 0xd7], 0x79
mov byte [rbp + 0xd8], 0x79
mov byte [rbp + 0xd9], 0x72
mov byte [rbp + 0xda], 0x77
mov byte [rbp + 0xdb], 0x70
mov byte [rbp + 0xdc], 0x4a
mov byte [rbp + 0xdd], 0x29
mov byte [rbp + 0xde], 0x6e
mov byte [rbp + 0xdf], 0x7b
mov byte [rbp + 0xe0], 0x7b
mov byte [rbp + 0xe1], al
mov byte [rbp + 0xe2], 0x7b
mov byte [rbp + 0xe3], bl
mov al, byte [rbp + 0xc8]
movsx ecx, byte [rbp + rbx + 0xc8]
sub ecx, 9
mov byte [rbp + rbx + 0xc8], cl
inc rbx
cmp rbx, 0x1b
jb 0x1800015ed
mov r14d, 3
jmp 0x180001f7c
mov byte [rbp + 0x48], 0x54
mov rdx, rbx
mov byte [rbp + 0x49], 0x68
mov byte [rbp + 0x4a], 0x77
mov byte [rbp + 0x4b], 0x5d
mov byte [rbp + 0x4c], 0x70
mov byte [rbp + 0x4d], 0x6c
mov byte [rbp + 0x4e], 0x7e
mov byte [rbp + 0x4f], 0x56
mov byte [rbp + 0x50], 0x6d
mov byte [rbp + 0x51], 0x4d
mov byte [rbp + 0x52], 0x70
mov byte [rbp + 0x53], 0x73
mov byte [rbp + 0x54], 0x6c
mov byte [rbp + 0x55], bl
mov al, byte [rbp + 0x48]
movsx ecx, byte [rbp + rdx + 0x48]
sub ecx, 7
mov byte [rbp + rdx + 0x48], cl
inc rdx
cmp rdx, 0xd
jb 0x180001650
mov dword [rbp - 0x40], r15d
mov rdx, rbx
mov eax, dword [rbp - 0x40]
xor eax, 0x4b
mov byte [rbp - 0x3c], al
mov eax, dword [rbp - 0x40]
inc al
xor eax, 0x65
mov byte [rbp - 0x3b], al
mov eax, dword [rbp - 0x40]
add al, r13b
xor eax, 0x72
mov byte [rbp - 0x3a], al
mov eax, dword [rbp - 0x40]
add al, 3
xor eax, 0x6e
mov byte [rbp - 0x39], al
mov eax, dword [rbp - 0x40]
add al, 4
xor eax, 0x65
mov byte [rbp - 0x38], al
mov eax, dword [rbp - 0x40]
add al, 5
xor eax, 0x6c
mov byte [rbp - 0x37], al
mov eax, dword [rbp - 0x40]
add al, 6
xor eax, 0x33
mov byte [rbp - 0x36], al
mov eax, dword [rbp - 0x40]
add al, 7
xor eax, 0x32
mov byte [rbp - 0x35], al
mov eax, dword [rbp - 0x40]
add al, 8
xor eax, 0x2e
mov byte [rbp - 0x34], al
mov eax, dword [rbp - 0x40]
add al, 9
xor eax, 0x64
mov byte [rbp - 0x33], al
mov eax, dword [rbp - 0x40]
add al, 0xa
xor eax, 0x6c
mov byte [rbp - 0x32], al
mov eax, dword [rbp - 0x40]
add al, 0xb
xor eax, 0x6c
mov byte [rbp - 0x31], al
xor eax, eax
mov byte [rbp - 0x30], al
mov al, byte [rbp - 0x3c]
movsx eax, byte [rbp + rdx - 0x3c]
mov ecx, dword [rbp - 0x40]
add cl, dl
xor ecx, eax
mov byte [rbp + rdx - 0x3c], cl
inc rdx
cmp rdx, 0xc
jb 0x1800016f7
lea rdx, [rbp + 0x48]
mov byte [rbp - 0x30], bl
lea rcx, [rbp - 0x3c]
call fcn.180002a28
xor r9d, r9d
mov r10, rax
mov eax, esi
xor r8d, r8d
mov rcx, rdi
mov qword [rsp + 0x20], rax
lea edx, [r9 + 4]
call r10
mov rsi, rax
test rax, rax
jne 0x1800017da
mov dword [rbp + 0x28], 0xd
mov r8, rbx
mov byte [rbp + 0x2c], 0x28
mov byte [rbp + 0x2d], 0x7e
mov byte [rbp + 0x2e], 0x2d
mov byte [rbp + 0x2f], 0x40
mov byte [rbp + 0x30], 0x6c
mov byte [rbp + 0x31], 0x7d
mov byte [rbp + 0x32], 0x5b
mov byte [rbp + 0x33], 0x64
mov byte [rbp + 0x34], 0x68
mov byte [rbp + 0x35], 0x7a
mov byte [rbp + 0x36], 0x42
mov byte [rbp + 0x37], 0x6b
mov byte [rbp + 0x38], 0x4b
mov byte [rbp + 0x39], 0x64
mov byte [rbp + 0x3a], 0x61
mov byte [rbp + 0x3b], 0x68
mov byte [rbp + 0x3c], 0x2d
mov byte [rbp + 0x3d], 0x68
mov byte [rbp + 0x3e], 0x7f
mov byte [rbp + 0x3f], 0x7f
mov byte [rbp + 0x40], 0x62
mov byte [rbp + 0x41], 0x7f
mov byte [rbp + 0x42], al
mov al, byte [rbp + 0x2c]
movsx edx, byte [rbp + r8 + 0x2c]
mov eax, dword [rbp + 0x28]
movsx ecx, al
mov eax, edx
xor eax, ecx
mov byte [rbp + r8 + 0x2c], al
inc r8
cmp r8, 0x16
jb 0x1800017ae
mov byte [rbp + 0x42], bl
mov r14d, 4
jmp 0x180001f61
movsxd r10, dword [rax + 0x3c]
mov eax, dword [rsp + 0x48]
add r10, rsi
movzx ecx, word [r10 + 0x18]
cmp ecx, eax
jne 0x18000183b
mov byte [rbp + 0x140], 0x52
mov rdx, rbx
mov byte [rbp + 0x141], 0x47
mov byte [rbp + 0x142], 0x35
mov byte [rbp + 0x143], 0x34
mov byte [rbp + 0x144], bl
mov al, byte [rbp + 0x140]
movsx ecx, byte [rbp + rdx + 0x140]
sub ecx, r13d
mov byte [rbp + rdx + 0x140], cl
inc rdx
cmp rdx, 4
jb 0x180001819
mov eax, 0x78
jmp 0x1800018b6
movzx ecx, word [r10 + 0x18]
mov eax, dword [rsp + 0x50]
cmp ecx, eax
jne 0x180001faf
mov dword [rbp + 0x130], 0x6a
xor eax, eax
mov byte [rbp + 0x134], 0x3a
mov r9, rbx
mov byte [rbp + 0x135], 0x2f
mov byte [rbp + 0x136], 0x5c
mov byte [rbp + 0x137], 0x5e
mov byte [rbp + 0x138], al
mov al, byte [rbp + 0x134]
movsx r8d, byte [rbp + r9 + 0x134]
mov eax, dword [rbp + 0x130]
movsx edx, al
mov eax, r8d
xor eax, edx
mov byte [rbp + r9 + 0x134], al
inc r9
cmp r9, 4
jb 0x180001883
mov byte [rbp + 0x138], bl
mov eax, 0x88
mov ecx, dword [rax + r10]
mov rdx, rsi
call fcn.180002014
mov edi, eax
mov rdx, rsi
add rdi, rsi
mov qword [rsp + 0x48], rdi
mov ecx, dword [rdi + 0x20]
call fcn.180002014
mov ecx, dword [rdi + 0x24]
mov rdx, rsi
mov r15d, eax
add r15, rsi
mov qword [rsp + 0x68], r15
call fcn.180002014
mov r9d, dword [rdi + 0x18]
mov r8, rbx
mov dword [rbp + 0xa8], 0x67
mov byte [rbp + 0xac], 0x42
mov byte [rbp + 0xad], 0x14
mov byte [rbp + 0xae], 0x47
mov byte [rbp + 0xaf], 0x29
mov byte [rbp + 0xb0], 0x12
mov byte [rbp + 0xb1], 0xa
mov byte [rbp + 0xb2], 5
mov byte [rbp + 0xb3], r13b
mov byte [rbp + 0xb4], 0x15
mov byte [rbp + 0xb5], 0x28
mov byte [rbp + 0xb6], 1
mov byte [rbp + 0xb7], 0x29
mov byte [rbp + 0xb8], 6
mov byte [rbp + 0xb9], 0xa
mov byte [rbp + 0xba], r13b
mov byte [rbp + 0xbb], 0x14
mov byte [rbp + 0xbc], 0x47
mov byte [rbp + 0xbd], 0x5a
mov eax, eax
add rax, rsi
mov byte [rbp + 0xbe], 0x47
mov qword [rsp + 0x60], rax
xor eax, eax
mov byte [rbp + 0xbf], 0x42
mov byte [rbp + 0xc0], 0x12
mov byte [rbp + 0xc1], al
mov al, byte [rbp + 0xac]
movsx edx, byte [rbp + r8 + 0xac]
mov eax, dword [rbp + 0xa8]
movsx ecx, al
mov eax, edx
xor eax, ecx
mov byte [rbp + r8 + 0xac], al
inc r8
cmp r8, 0x15
jb 0x1800019a9
mov byte [rbp + 0xc1], bl
jmp 0x180001e51
mov ecx, dword [r15]
dec r9d
mov rdx, rsi
mov dword [rsp + 0x50], r9d
call fcn.180002014
mov ecx, dword [rdi + 0x1c]
mov rdx, rsi
mov r13d, eax
add r13, rsi
call fcn.180002014
mov rcx, qword [rsp + 0x60]
mov rdx, rsi
mov eax, eax
movzx r8d, word [rcx]
lea rcx, [rsi + rax]
mov ecx, dword [rcx + r8*4]
call fcn.180002014
mov r15d, eax
add r15, rsi
cmp byte [r15], bl
je 0x180001e38
mov r12, r15
mov rcx, r15
neg r12
lea rax, [r12 + rcx]
cmp rax, 0x80
jge 0x180001e38
mov al, byte [rcx]
sub al, 0x61
cmp al, 0x19
jbe 0x180001a67
mov al, byte [rcx]
sub al, 0x41
cmp al, 0x19
jbe 0x180001a67
mov al, byte [rcx]
sub al, 0x30
cmp al, 9
jbe 0x180001a67
mov al, byte [rcx]
sub al, 0x2d
cmp al, 1
jbe 0x180001a67
cmp byte [rcx], 0x5f
jne 0x180001a74
inc rcx
cmp byte [rcx], bl
je 0x180001e38
jmp 0x180001a32
mov r9d, 7
mov r8d, 0x1fc0eaee
call fcn.180002400
test rax, rax
je 0x180001a98
mov rcx, qword [rbp - 0x80]
mov rdx, r13
call rax
mov rdi, rax
jmp 0x180001a9b
mov rdi, rbx
test rdi, rdi
je 0x180001e33
cmp byte [rdi], 0xe9
je 0x180001abc
cmp byte [rdi], 0xff
jne 0x180001e33
cmp byte [rdi + 1], 0x25
jne 0x180001e33
test r15, r15
je 0x180001aec
mov r8, rdi
mov edx, ebx
sub r8, r15
mov rcx, r15
mov al, byte [r8 + rcx]
cmp byte [rcx], al
jb 0x180001aec
ja 0x180001ae5
inc rcx
lea rax, [r12 + rcx]
cmp rax, 2
jb 0x180001acc
jmp 0x180001aef
mov edx, 1
jmp 0x180001aef
or edx, 0xffffffff
test edx, edx
je 0x180001e33
mov dword [rsp + 0x54], ebx
mov r12d, 0x18
mov dword [rsp + 0x58], ebx
mov r8, rbx
mov dword [rbp - 0x50], r12d
mov eax, dword [rbp - 0x50]
xor eax, 0x66
mov byte [rbp - 0x4c], al
mov eax, dword [rbp - 0x50]
inc al
xor eax, 0x6e
mov byte [rbp - 0x4b], al
mov eax, dword [rbp - 0x50]
add al, 2
xor eax, 0x20
mov byte [rbp - 0x4a], al
mov eax, dword [rbp - 0x50]
add al, 3
xor eax, 0x3d
mov byte [rbp - 0x49], al
mov eax, dword [rbp - 0x50]
add al, 4
xor eax, 0x20
mov byte [rbp - 0x48], al
mov eax, dword [rbp - 0x50]
add al, 5
xor eax, 0x25
mov byte [rbp - 0x47], al
mov eax, dword [rbp - 0x50]
add al, 6
xor eax, 0x73
mov byte [rbp - 0x46], al
xor eax, eax
mov byte [rbp - 0x45], al
mov al, byte [rbp - 0x4c]
movsx eax, byte [rbp + r8 - 0x4c]
mov ecx, dword [rbp - 0x50]
add cl, r8b
xor ecx, eax
mov byte [rbp + r8 - 0x4c], cl
inc r8
cmp r8, 7
jb 0x180001b5f
mov rdx, r13
mov byte [rbp - 0x45], bl
lea rcx, [rbp - 0x4c]
call fcn.1800010c0
call fcn.180003b98
mov edx, 0x40
lea r9, [rsp + 0x54]
mov r8d, edx
mov rcx, rdi
call rax
test eax, eax
jne 0x180001c69
mov dword [rbp], 0x4e
xor eax, eax
mov byte [rbp + 4], 0x6b
mov r8, rbx
mov byte [rbp + 5], 0x3d
mov byte [rbp + 6], 0x66
mov byte [rbp + 7], 0x67
mov byte [rbp + 8], 0x74
mov byte [rbp + 9], 0x6e
mov byte [rbp + 0xa], 0x2b
mov byte [rbp + 0xb], 0x3c
mov byte [rbp + 0xc], 0x3c
mov byte [rbp + 0xd], 0x21
mov byte [rbp + 0xe], 0x3c
mov byte [rbp + 0xf], 0x6e
mov byte [rbp + 0x10], r12b
mov byte [rbp + 0x11], 0x27
mov byte [rbp + 0x12], 0x3c
mov byte [rbp + 0x13], 0x3a
mov byte [rbp + 0x14], 0x3b
mov byte [rbp + 0x15], 0x2f
mov byte [rbp + 0x16], 0x22
mov byte [rbp + 0x17], 0x1e
mov byte [rbp + 0x18], 0x3c
mov byte [rbp + 0x19], 0x21
mov byte [rbp + 0x1a], 0x3a
mov byte [rbp + 0x1b], 0x2b
mov byte [rbp + 0x1c], 0x2d
mov byte [rbp + 0x1d], 0x3a
mov byte [rbp + 0x1e], 0x7f
mov byte [rbp + 0x1f], 0x74
mov byte [rbp + 0x20], 0x6e
mov byte [rbp + 0x21], 0x6b
mov byte [rbp + 0x22], 0x2a
mov byte [rbp + 0x23], al
mov al, byte [rbp + 4]
movsx edx, byte [rbp + r8 + 4]
mov eax, dword [rbp]
movsx ecx, al
mov eax, edx
xor eax, ecx
mov byte [rbp + r8 + 4], al
inc r8
cmp r8, 0x1f
jb 0x180001c37
mov byte [rbp + 0x23], bl
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, 7
jmp 0x180001e33
mov edx, 0xa
test r15, r15
je 0x180001c87
mov rcx, rdi
sub r15, rdi
mov al, byte [r15 + rcx]
mov byte [rcx], al
inc rcx
sub edx, 1
jne 0x180001c79
call fcn.180003b98
mov r8d, dword [rsp + 0x54]
lea r9, [rsp + 0x58]
mov edx, 0x40
mov rcx, rdi
call rax
test eax, eax
jne 0x180001e33
mov dword [rbp - 0x78], r12d
mov eax, dword [rbp - 0x78]
xor eax, 0x25
mov byte [rbp - 0x74], al
mov eax, dword [rbp - 0x78]
inc al
xor eax, 0x73
mov byte [rbp - 0x73], al
mov eax, dword [rbp - 0x78]
add al, 2
xor eax, 0x28
mov byte [rbp - 0x72], al
mov eax, dword [rbp - 0x78]
add al, 3
xor eax, 0x29
mov byte [rbp - 0x71], al
mov eax, dword [rbp - 0x78]
add al, 4
xor eax, 0x3a
mov byte [rbp - 0x70], al
mov eax, dword [rbp - 0x78]
add al, 5
xor eax, 0x20
mov byte [rbp - 0x6f], al
mov eax, dword [rbp - 0x78]
add al, 6
xor eax, 0x65
mov byte [rbp - 0x6e], al
mov eax, dword [rbp - 0x78]
add al, 7
xor eax, 0x72
mov byte [rbp - 0x6d], al
mov eax, dword [rbp - 0x78]
add al, 8
xor eax, 0x72
mov byte [rbp - 0x6c], al
mov eax, dword [rbp - 0x78]
add al, 9
xor eax, 0x6f
mov byte [rbp - 0x6b], al
mov eax, dword [rbp - 0x78]
add al, 0xa
xor eax, 0x72
mov byte [rbp - 0x6a], al
mov eax, dword [rbp - 0x78]
add al, 0xb
xor eax, 0x20
mov byte [rbp - 0x69], al
mov eax, dword [rbp - 0x78]
add al, 0xc
xor eax, 0x56
mov byte [rbp - 0x68], al
mov eax, dword [rbp - 0x78]
add al, 0xd
xor eax, 0x69
mov byte [rbp - 0x67], al
mov eax, dword [rbp - 0x78]
add al, 0xe
xor eax, 0x72
mov byte [rbp - 0x66], al
mov eax, dword [rbp - 0x78]
add al, 0xf
xor eax, 0x74
mov byte [rbp - 0x65], al
mov eax, dword [rbp - 0x78]
add al, 0x10
xor eax, 0x75
mov byte [rbp - 0x64], al
mov eax, dword [rbp - 0x78]
add al, 0x11
xor eax, 0x61
mov byte [rbp - 0x63], al
mov eax, dword [rbp - 0x78]
add al, 0x12
xor eax, 0x6c
mov byte [rbp - 0x62], al
mov eax, dword [rbp - 0x78]
add al, 0x13
xor eax, 0x50
mov byte [rbp - 0x61], al
mov eax, dword [rbp - 0x78]
add al, 0x14
mov rdx, rbx
xor eax, 0x72
mov byte [rbp - 0x60], al
mov eax, dword [rbp - 0x78]
add al, 0x15
xor eax, 0x6f
mov byte [rbp - 0x5f], al
mov eax, dword [rbp - 0x78]
add al, 0x16
xor eax, 0x74
mov byte [rbp - 0x5e], al
mov eax, dword [rbp - 0x78]
add al, 0x17
xor eax, 0x65
mov byte [rbp - 0x5d], al
mov eax, dword [rbp - 0x78]
add al, r12b
xor eax, 0x63
mov byte [rbp - 0x5c], al
mov eax, dword [rbp - 0x78]
add al, 0x19
xor eax, 0x74
mov byte [rbp - 0x5b], al
mov eax, dword [rbp - 0x78]
add al, 0x1a
xor eax, 0x32
mov byte [rbp - 0x5a], al
mov eax, dword [rbp - 0x78]
add al, 0x1b
xor eax, 0x3a
mov byte [rbp - 0x59], al
mov eax, dword [rbp - 0x78]
add al, 0x1c
xor eax, 0x20
mov byte [rbp - 0x58], al
mov eax, dword [rbp - 0x78]
add al, 0x1d
xor eax, 0x25
mov byte [rbp - 0x57], al
mov eax, dword [rbp - 0x78]
add al, 0x1e
xor eax, 0x64
mov byte [rbp - 0x56], al
xor eax, eax
mov byte [rbp - 0x55], al
mov al, byte [rbp - 0x74]
movsx eax, byte [rbp + rdx - 0x74]
mov ecx, dword [rbp - 0x78]
add cl, dl
xor ecx, eax
mov byte [rbp + rdx - 0x74], cl
inc rdx
cmp rdx, 0x1f
jb 0x180001e0b
mov byte [rbp - 0x55], bl
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, 8
mov rdi, qword [rsp + 0x48]
mov r15, qword [rsp + 0x68]
mov r9d, dword [rsp + 0x50]
add r15, 4
add qword [rsp + 0x60], 2
mov qword [rsp + 0x68], r15
test r9d, r9d
jne 0x1800019db
mov rdi, qword [rsp + 0x70]
mov dword [rbp - 0x28], 0x5d
xor eax, eax
mov byte [rbp - 0x24], 8
mov r8, rbx
mov byte [rbp - 0x23], 0x33
mov byte [rbp - 0x22], 0x30
mov byte [rbp - 0x21], 0x3c
mov byte [rbp - 0x20], 0x2d
mov byte [rbp - 0x1f], 0xb
mov byte [rbp - 0x1e], 0x34
mov byte [rbp - 0x1d], 0x38
mov byte [rbp - 0x1c], 0x2a
mov byte [rbp - 0x1b], 0x12
mov byte [rbp - 0x1a], 0x3b
mov byte [rbp - 0x19], 0x1b
mov byte [rbp - 0x18], 0x34
mov byte [rbp - 0x17], 0x31
mov byte [rbp - 0x16], 0x38
mov byte [rbp - 0x15], al
mov al, byte [rbp - 0x24]
movsx edx, byte [rbp + r8 - 0x24]
mov eax, dword [rbp - 0x28]
movsx ecx, al
mov eax, edx
xor eax, ecx
mov byte [rbp + r8 - 0x24], al
inc r8
cmp r8, 0xf
jb 0x180001ead
mov byte [rbp - 0x15], bl
xor eax, eax
mov dword [rbp + 0x78], 0x3e
mov r8, rbx
mov byte [rbp + 0x7c], 0x75
mov byte [rbp + 0x7d], 0x5b
mov byte [rbp + 0x7e], 0x4c
mov byte [rbp + 0x7f], 0x50
mov byte [rbp + 0x80], 0x5b
mov byte [rbp + 0x81], 0x52
mov byte [rbp + 0x82], 0xd
mov byte [rbp + 0x83], 0xc
mov byte [rbp + 0x84], 0x10
mov byte [rbp + 0x85], 0x5a
mov byte [rbp + 0x86], 0x52
mov byte [rbp + 0x87], 0x52
mov byte [rbp + 0x88], al
mov al, byte [rbp + 0x7c]
movsx edx, byte [rbp + r8 + 0x7c]
mov eax, dword [rbp + 0x78]
movsx ecx, al
mov eax, edx
xor eax, ecx
mov byte [rbp + r8 + 0x7c], al
inc r8
cmp r8, 0xc
jb 0x180001f2b
lea rdx, [rbp - 0x24]
mov byte [rbp + 0x88], bl
lea rcx, [rbp + 0x7c]
call fcn.180002a28
mov rcx, rsi
call rax
mov r9d, 0x11
mov r8d, 0x723eb0d5
call fcn.180002400
test rax, rax
je 0x180001f7c
mov rcx, rdi
call rax
mov eax, r14d
mov rcx, qword [rbp + 0x260]
xor rcx, rsp
call fcn.1800095a0
lea r11, [rsp + 0x370]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov eax, 0x78
mov r8, rbx
mov dword [rbp - 0x10], eax
xor eax, eax
mov byte [rbp - 0xc], 0x28
mov byte [rbp - 0xb], 0x3d
mov byte [rbp - 0xa], bl
mov byte [rbp - 9], bl
mov byte [rbp - 8], 0x58
mov byte [rbp - 7], 0x1d
mov byte [rbp - 6], 0xa
mov byte [rbp - 5], 0xa
mov byte [rbp - 4], 0x17
mov byte [rbp - 3], 0xa
mov byte [rbp - 2], al
mov al, byte [rbp - 0xc]
movsx edx, byte [rbp + r8 - 0xc]
mov eax, dword [rbp - 0x10]
movsx ecx, al
mov eax, edx
xor eax, ecx
mov byte [rbp + r8 - 0xc], al
inc r8
cmp r8, 0xa
jb 0x180001fe8
mov byte [rbp - 2], bl
mov r14d, 5
jmp 0x180001e5f