Function at 0x18001dc10
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Resolve function by parsing pe exports
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push r13
push r14
push r15
sub rsp, 0xc90
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm8
mov rax, qword [0x180037020]
xor rax, rsp
mov qword [rsp + 0xc60], rax
mov rsi, qword [0x180037f28]
mov qword [rsp + 0xf8], rsi
mov rbx, qword [0x180038028]
mov r13, qword [0x180038008]
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x198], r13
mov r15, qword [0x180038018]
mov qword [rsp + 0xf0], r15
mov eax, dword [0x180037eb4]
shl eax, 0x18
or eax, 0x363636
mov dword [rsp + 0x20], eax
movss xmm3, dword [0x18002e928]
movss xmm6, dword [0x18002e930]
movaps xmm2, xmm6
xorps xmm8, xmm8
xorps xmm1, xmm1
xorps xmm0, xmm0
call fcn.18000b4f0
mov eax, dword [0x180037eb4]
shl eax, 0x18
or eax, 0x363636
mov dword [rsp + 0x20], eax
movss xmm3, dword [0x18002e928]
movaps xmm2, xmm6
xorps xmm1, xmm1
xorps xmm0, xmm0
call fcn.18000b4f0
mov eax, dword [0x180037eb4]
cmp eax, 0xff
jge 0x18001dcf6
add eax, 5
mov dword [0x180037eb4], eax
mov rdx, qword [0x180037ef0]
xor eax, eax
cmp byte [rdx + 0x212], al
jne 0x18001fcf1
xorps xmm0, xmm0
movups xmmword [rsp + 0xbf0], xmm0
mov qword [rsp + 0xc00], rax
add rdx, 0x230
lea rcx, [rsp + 0xbf0]
call fcn.180020fa0
nop
mov rbx, qword [0x180037ef0]
cmp byte [rbx + 0x210], 0
je 0x18001dfc3
cmp byte [rbx + 0x211], 0
je 0x18001dfc3
cmp byte [0x180038152], 0
jne 0x18001de15
mov rbx, qword [rbx + 0x1f0]
mov dword [rsp + 0x60], 0x28792511
mov word [rsp + 0x64], 0x3d37
xor eax, eax
mov byte [rsp + 0x66], al
lea rcx, [rsp + 0x60]
call fcn.1800209e0
mov rdx, rax
lea rcx, [rsp + 0xb80]
call fcn.180005c70
mov rdx, rax
mov rcx, rbx
call fcn.180007dd0
mov rax, qword [0x180037ef0]
mov rbx, qword [rax + 0x1f0]
mov dword [rsp + 0x60], 0x28792511
mov word [rsp + 0x64], 0x3d37
xor eax, eax
mov byte [rsp + 0x66], al
lea rcx, [rsp + 0x60]
call fcn.1800209e0
mov rdx, rax
lea rcx, [rsp + 0xb80]
call fcn.180005c70
mov rdx, rax
mov rcx, rbx
call fcn.180008150
mov qword [0x180037f08], rax
test rax, rax
je 0x18001de0e
cmp byte [rax + 9], 0
je 0x18001de0e
mov rdx, rax
mov rcx, r15
call fcn.18001cd20
mov byte [0x180038152], 1
mov rbx, qword [0x180037ef0]
cmp byte [0x180038151], 0
jne 0x18001dedb
mov rbx, qword [rbx + 0x1f0]
mov dword [rsp + 0x50], 0x21361b6c
mov dword [rsp + 0x54], 0x3b352a77
xor eax, eax
mov byte [rsp + 0x58], al
lea rcx, [rsp + 0x50]
call fcn.1800209b0
mov rdx, rax
lea rcx, [rsp + 0xbb8]
call fcn.180005c70
mov rdx, rax
mov rcx, rbx
call fcn.180008150
mov qword [0x180037ee8], rax
test rax, rax
je 0x18001ded4
cmp byte [rax + 9], 0
je 0x18001ded4
mov ecx, 0x1f8
call fcn.180029c40
mov rbx, rax
lea rcx, [rax + 0x1d8]
call fcn.180020df0
mov word [rbx + 0x1f4], 0
mov qword [0x180037f00], rbx
lea r9, [rbx + 0x1c8]
mov rdx, qword [0x180037ee8]
mov r8d, dword [rdx]
mov rdx, qword [rdx + 0x30]
mov rcx, r15
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory]
lea rdx, [rbx + 0x1d0]
mov rcx, r15
call qword [sym.imp.d3dx9_43.dll_D3DXCreateSprite]
mov byte [0x180038151], 1
mov rbx, qword [0x180037ef0]
cmp dword [rbx + 0x228], 0
jne 0x18001df82
mov dword [rsp + 0x310], 0x1303b
lea rax, [rsp + 0x710]
lea rdx, [rsp + 0x310]
mov ecx, 8
nop dword [rax + rax]
movups xmm0, xmmword [rdx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rdx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rdx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rdx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rdx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rdx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rdx, [rdx + 0x80]
sub rcx, 1
jne 0x18001df10
lea rdx, [rsp + 0x710]
mov rcx, rbx
call fcn.180008740
mov rbx, qword [0x180037ef0]
cmp dword [rbx + 0x228], 0
je 0x18001dfc3
mov rcx, rbx
call fcn.180008d90
mov rax, qword [rsp + 0xbf8]
cmp rax, qword [rsp + 0xbf0]
je 0x18001dfbc
lea rdx, [rsp + 0xbf0]
lea rcx, [rsp + 0xd0]
call fcn.180020fa0
mov rdx, rax
mov rcx, r15
call fcn.18001ce40
mov rbx, qword [0x180037ef0]
mov rbx, qword [rbx + 0x1f0]
mov dword [rsp + 0x110], 0x2a132f18
mov dword [rsp + 0x114], 0x2e3e2c30
mov dword [rsp + 0x118], 0x13262d73
xor eax, eax
mov byte [rsp + 0x11c], al
lea rcx, [rsp + 0x110]
call fcn.180015660
mov rdx, rax
lea rcx, [rsp + 0x2c8]
call fcn.180005c70
mov rdx, rax
mov rcx, rbx
call fcn.180008150
mov r14, rax
mov qword [rsp + 0x188], rax
mov rcx, qword [0x180037ef0]
mov rbx, qword [rcx + 0x1f0]
mov dword [rsp + 0x88], 0x1c23381c
mov dword [rsp + 0x8c], 0x392d332b
mov dword [rsp + 0x90], 0x192c702f
mov word [rsp + 0x94], sendto
lea rcx, [rsp + 0x88]
call fcn.18000df70
mov rdx, rax
lea rcx, [rsp + 0x2e8]
call fcn.180005c70
mov rdx, rax
mov rcx, rbx
call fcn.180008150
mov rdi, rax
mov qword [rsp + 0x178], rax
mov rcx, qword [0x180037ef0]
mov rbx, qword [rcx + 0x1f0]
mov dword [rsp + 0x120], 0x3a34393c
mov dword [rsp + 0x124], 0x6e283530
mov dword [rsp + 0x128], 0x13262d73
xor eax, eax
mov byte [rsp + 0x12c], al
lea rcx, [rsp + 0x120]
call fcn.180015660
mov rdx, rax
lea rcx, [rsp + 0x1e8]
call fcn.180005c70
mov rdx, rax
mov rcx, rbx
call fcn.180008150
mov rsi, rax
mov qword [rsp + 0x170], rax
mov rcx, qword [0x180037ef0]
mov rbx, qword [rcx + 0x1f0]
mov dword [rsp + 0x100], 0x76303327
mov dword [rsp + 0x104], 0x303b29
lea rcx, [rsp + 0x100]
call fcn.180020980
mov rdx, rax
lea rcx, [rsp + 0x1c8]
call fcn.180005c70
mov rdx, rax
mov rcx, rbx
call fcn.180008150
mov r12, rax
mov qword [rsp + 0x180], rax
cmp byte [0x180037070], 0
jne 0x18001e268
mov rcx, qword [0x180037ef0]
mov rbx, qword [rcx + 0x1f0]
mov dword [rsp + 0x50], 0x3c383b33
mov dword [rsp + 0x54], 0x30373e77
xor eax, eax
mov byte [rsp + 0x58], al
lea rcx, [rsp + 0x50]
call fcn.1800209b0
mov rdx, rax
lea rcx, [rsp + 0xb80]
call fcn.180005c70
mov rdx, rax
mov rcx, rbx
call fcn.180008150
mov rbx, rax
test rax, rax
je 0x18001e268
lea rcx, [rsp + 0xbb8]
call fcn.180025240
nop
mov dword [rsp + 0xb10], 0xf330f309
mov dword [rsp + 0xb14], 0xf337f33a
mov dword [rsp + 0xb18], 0xf374f33d
mov dword [rsp + 0xb1c], 0xf330f33f
mov dword [rsp + 0xb20], 0xf331
lea rcx, [rsp + 0xb10]
call fcn.180001360
mov r15, 0xffffffffffffffff
mov r8, r15
inc r8
cmp word [rax + r8*2], 0
jne 0x18001e213
mov rdx, rax
lea rcx, [rsp + 0xbb8]
call fcn.180005960
movsxd r8, dword [rbx]
mov rdx, qword [rbx + 0x30]
lea rcx, [rsp + 0xbb8]
call fcn.18001abf0
mov byte [0x180037070], 1
lea rcx, [rsp + 0xbb8]
call fcn.1800020a0
mov rdi, qword [rsp + 0x178]
mov rsi, qword [rsp + 0x170]
jmp 0x18001e26f
mov r15, 0xffffffffffffffff
mov al, 1
mov dword [rsp + 0xb8], eax
mov byte [rsp + 0xa0], al
test r14, r14
je 0x18001e2ab
test rdi, rdi
je 0x18001e2ab
test rsi, rsi
je 0x18001e2ab
movzx eax, al
xor r14d, r14d
test r12, r12
cmovne eax, r14d
mov dword [rsp + 0xb8], eax
mov byte [rsp + 0xa0], al
jmp 0x18001e2ae
xor r14d, r14d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xbd8], xmm0
mov qword [rsp + 0xbe8], rax
mov rdx, qword [0x180037ef0]
add rdx, 0x260
lea rcx, [rsp + 0xbd8]
call fcn.180020e90
nop
mov ecx, r14d
mov dword [rsp + 0xc8], ecx
mov rax, qword [0x180038070]
mov r8, qword [0x180038068]
sub rax, r8
sar rax, 3
movabs r12, 0xefbefbefbefbefbf
imul rax, r12
test rax, rax
je 0x18001e472
xor r13d, r13d
mov r12d, r13d
mov r14d, r13d
movabs r11, 0x8e38e38e38e38e39
mov r9, qword [rsp + 0xbe0]
mov rdx, qword [rsp + 0xbd8]
movabs r10, 0xefbefbefbefbefbf
mov esi, r13d
mov rax, r9
sub rax, rdx
sar rax, 3
imul rax, r11
test rax, rax
je 0x18001e432
mov rdi, r13
nop
mov eax, dword [r14 + r8 + 0x1c]
cmp dword [rdi + rdx], eax
jne 0x18001e401
mov rax, qword [0x180037ef0]
mov rbx, qword [rax + 0x1f0]
imul rdx, r12, 0x1f8
add r8, 0x1b0
add rdx, r8
lea rcx, [rsp + 0x228]
call fcn.180005c70
mov rdx, rax
lea rcx, [rsp + 0x248]
call fcn.1800272f0
mov rdx, rax
mov rcx, rbx
call fcn.180007dd0
mov rax, qword [rsp + 0xbd8]
mov ecx, dword [rdi + rax + 8]
mov rax, qword [0x180038068]
mov dword [r14 + rax + 0x1f0], ecx
mov rax, qword [0x180038068]
mov byte [r14 + rax + 0x1f4], 1
mov r8, qword [0x180038068]
mov r9, qword [rsp + 0xbe0]
mov rdx, qword [rsp + 0xbd8]
movabs r11, 0x8e38e38e38e38e39
inc esi
add rdi, 0x48
mov rcx, r9
sub rcx, rdx
sar rcx, 3
imul rcx, r11
movsxd rax, esi
cmp rax, rcx
jb 0x18001e360
mov ecx, dword [rsp + 0xc8]
movabs r10, 0xefbefbefbefbefbf
inc ecx
mov dword [rsp + 0xc8], ecx
add r14, 0x1f8
mov rax, qword [0x180038070]
sub rax, r8
sar rax, 3
imul rax, r10
movsxd r12, ecx
cmp r12, rax
jb 0x18001e342
mov r13, qword [rsp + 0x70]
xor r14d, r14d
movabs r12, 0xefbefbefbefbefbf
mov esi, r14d
mov rax, qword [0x180038070]
sub rax, r8
sar rax, 3
imul rax, r12
test rax, rax
je 0x18001e65e
mov rcx, r14
mov rdi, r14
movabs r13, 0xefbefbefbefbefbf
imul r12, rcx, 0x1f8
lea rdx, [r8 + 4]
add rdx, r12
lea rcx, [rsp + 0x268]
call fcn.180005c70
mov rdx, rax
lea rcx, [rsp + 0x288]
call fcn.1800272f0
mov rbx, rax
mov dword [rsp + 0x108], 0x37382606
mov dword [rsp + 0x10c], 0x293f3f
lea rcx, [rsp + 0x108]
call fcn.180020980
xor r8d, r8d
mov rdx, rax
mov rcx, rbx
call fcn.180021040
mov rbx, rax
lea rcx, [rsp + 0x288]
call fcn.180005c10
test rbx, rbx
jne 0x18001e621
mov ecx, 0x1f8
call fcn.180029c40
mov rbx, rax
lea rcx, [rax + 0x1d8]
call fcn.180020df0
mov word [rbx + 0x1f4], 0
mov rax, qword [0x180038068]
add rax, rdi
mov rcx, rbx
mov edx, 3
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x18001e550
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov rax, qword [rax + 0x70]
mov qword [rcx + 0x70], rax
mov qword [0x180037ef8], rbx
lea r8, [0x180038068]
mov rdx, qword [0x180038068]
lea rcx, [rsp + 0x190]
call fcn.180021140
mov r8, qword [rsp + 0x190]
add r8, r12
lea rdx, [rsp + 0x1c0]
lea rcx, [0x180038068]
call fcn.180020c10
inc esi
add rdi, 0x1f8
mov rax, qword [0x180038070]
mov r8, qword [0x180038068]
sub rax, r8
sar rax, 3
imul rax, r13
movsxd rcx, esi
cmp rcx, rax
jb 0x18001e4a0
mov r13, qword [rsp + 0x70]
movabs r12, 0xefbefbefbefbefbf
cmp byte [0x180037e42], 0
jne 0x18001e8f6
mov edi, r14d
mov rax, qword [0x180038070]
sub rax, r8
sar rax, 3
imul rax, r12
test rax, rax
je 0x18001e7b1
mov rbx, r14
mov esi, 0x32
mov r13, qword [rsp + 0xf8]
nop dword [rax]
lea rcx, [rsp + 0xc18]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rdx, [rsp + 0xb10]
mov rcx, r13
call qword [sym.imp.USER32.dll_GetWindowRect]
mov edx, dword [0x180037eb4]
mov rax, qword [0x180038068]
mov rcx, qword [rbx + rax + 0x1d0]
movss xmm0, dword [0x18002e8f4]
movss dword [rsp + 0x38], xmm0
mov dword [rsp + 0x30], 0x82
mov dword [rsp + 0x28], edx
mov qword [rsp + 0x20], rcx
mov r9, r13
mov r8, qword [rbx + rax + 0x1c8]
mov edx, esi
mov ecx, reloc.WS2_32.dll_sendto
call fcn.18000bc80
test al, al
je 0x18001e724
mov rax, qword [0x180038068]
mov byte [rbx + rax + 0x1f5], 1
mov byte [0x180037e42], 1
mov r8, qword [0x180038068]
cmp byte [rbx + r8 + 0x1f4], 0
je 0x18001e76c
mov rcx, qword [0x180037ef8]
test rcx, rcx
je 0x18001e750
mov byte [rcx + 0x1f4], 1
mov r8, qword [0x180038068]
mov rdx, qword [0x180037ee0]
test rdx, rdx
je 0x18001e773
mov byte [rdx + 0x1f4], 1
mov r8, qword [0x180038068]
jmp 0x18001e773
mov rdx, qword [0x180037ee0]
add esi, 0x3c
inc edi
add rbx, 0x1f8
mov rcx, qword [0x180038070]
sub rcx, r8
sar rcx, 3
imul rcx, r12
movsxd rax, edi
cmp rax, rcx
jb 0x18001e6a0
cmp byte [0x180037e42], 0
mov r13, qword [rsp + 0x70]
jne 0x18001e8f6
jmp 0x18001e7b8
mov rdx, qword [0x180037ee0]
test rdx, rdx
je 0x18001e8f6
cmp byte [rdx + 0x1f4], 0
je 0x18001e8f6
movss xmm0, dword [0x18002e8f0]
movss dword [rsp + 0x38], xmm0
mov dword [rsp + 0x30], 0x64
mov eax, dword [0x180037eb4]
mov dword [rsp + 0x28], eax
mov rax, qword [rdx + 0x1d0]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xf8]
mov r8, qword [rdx + 0x1c8]
mov edx, 0x212
mov ecx, 0x23
call fcn.18000bc80
test al, al
je 0x18001e8ef
mov dword [rsp + 0x130], 0xf322f33d
mov dword [rsp + 0x134], 0xf328f323
mov dword [rsp + 0x138], 0xf360f32a
mov dword [rsp + 0x13c], 0xf373f374
mov dword [rsp + 0x140], 0xf337f339
mov dword [rsp + 0x144], 0xf303f32c
mov dword [rsp + 0x148], 0xf310f30e
mov dword [rsp + 0x14c], 0xf34af307
mov dword [rsp + 0x150], 0xf301f302
mov dword [rsp + 0x154], 0xf303f348
mov dword [rsp + 0x158], 0xf35df30a
mov dword [rsp + 0x15c], 0xf32df32d
mov dword [rsp + 0x160], 0xf314f32a
mov dword [rsp + 0x164], 0xf344f33e
mov dword [rsp + 0x168], 0xf304
lea rcx, [rsp + 0x130]
call fcn.180015520
mov r8, rax
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov r8, qword [0x180038068]
mov esi, r14d
mov dword [rsp + 0x98], r14d
movss xmm6, dword [0x18002e8f8]
nop dword [rax]
mov rax, qword [0x180038070]
sub rax, r8
sar rax, 3
imul rax, r12
movsxd r12, esi
mov qword [rsp + 0xc0], r12
cmp r12, rax
jae 0x18001f002
imul rsi, r12, 0x1f8
cmp byte [rsi + r8 + 0x1f5], 0
je 0x18001efe3
mov eax, dword [0x180037eb4]
shl eax, 0x18
or eax, 0xffffff
mov dword [rsp + 0x38], eax
movss dword [rsp + 0x30], xmm8
movss dword [rsp + 0x28], xmm6
movss dword [rsp + 0x20], xmm6
mov r9, qword [rsi + r8 + 0x1d0]
mov r8, qword [rsi + r8 + 0x1c8]
movss xmm1, dword [0x18002e914]
movss xmm0, dword [0x18002e920]
call fcn.18000b730
cmp byte [0x180037e41], 0
jne 0x18001ea7c
cmp byte [0x180037e40], 0
jne 0x18001ea7c
mov rax, qword [0x180038068]
cmp byte [rsi + rax + 0x1f4], 0
jne 0x18001ea7c
mov edi, dword [0x180037eb4]
mov ebx, edi
shl ebx, 0x18
or ebx, 0x969696
mov dword [rsp + 0xa8], 0x31233514
mov dword [rsp + 0xac], 0x392f3b2f
mov dword [rsp + 0xb0], 0x193a157d
xor eax, eax
mov byte [rsp + 0xb4], al
lea rcx, [rsp + 0xa8]
call fcn.180015660
mov rdx, rax
lea rcx, [rsp + 0xd0]
call fcn.180005c70
mov rcx, qword [rsp + 0xf8]
mov qword [rsp + 0x48], rcx
mov rcx, qword [rsp + 0xf0]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 0x19
mov edx, 0x163
mov r9d, 0x55
mov r8d, 0x226
mov rcx, rax
call fcn.18000b9b0
movzx ecx, byte [0x180037e41]
test al, al
mov eax, 1
cmovne ecx, eax
mov byte [0x180037e41], cl
mov edi, dword [0x180037eb4]
mov ebx, edi
shl ebx, 0x18
or ebx, 0x969696
mov word [rsp + 0xc8], 0x6a69
xor eax, eax
mov byte [rsp + 0xca], al
lea rcx, [rsp + 0xc8]
call fcn.180020950
mov rdx, rax
lea rcx, [rsp + 0x208]
call fcn.180005c70
mov rcx, qword [rsp + 0xf8]
mov qword [rsp + 0x48], rcx
mov rcx, qword [rsp + 0xf0]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 0x19
mov edx, 0xa
lea r9d, [rdx + 0x1e]
lea r8d, [rdx - 5]
mov rcx, rax
call fcn.18000b9b0
test al, al
je 0x18001eb1b
mov rax, qword [0x180038068]
mov byte [rsi + rax + 0x1f5], 0
mov byte [0x180037e42], 0
cmp byte [0x180037e41], 0
je 0x18001edd4
cmp byte [0x180037e40], 0
jne 0x18001edd4
movdqa xmm0, xmmword [0x18002e950]
movdqu xmmword [rsp + 0xd0], xmm0
mov dword [rsp + 0xe0], 0x48130510
mov dword [rsp + 0xe4], 0x120f22
lea rcx, [rsp + 0xd0]
call fcn.180020920
mov dword [rsp + 0xc08], 0x140
mov dword [rsp + 0xc0c], 0x226
mov rcx, qword [r13]
mov r10, qword [rcx + 0x70]
mov r9, r15
nop word [rax + rax]
inc r9
cmp byte [rax + r9], 0
jne 0x18001eb90
mov dword [rsp + 0x30], 0xffffffff
mov dword [rsp + 0x28], 0x100
lea rcx, [rsp + 0xc08]
mov qword [rsp + 0x20], rcx
mov r8, rax
xor edx, edx
mov rcx, r13
call r10
movzx edx, byte [rsp + 0x68]
lea rcx, [rsp + 0xbb8]
call fcn.1800070e0
lea rcx, [rsp + 0xbb8]
call fcn.1800060f0
nop
xor bl, bl
mov byte [rsp + 0x68], bl
lea rcx, [rsp + 0xbb8]
call fcn.180025390
mov dword [rsp + 0x60], 0xf309f319
xor eax, eax
mov word [rsp + 0x64], ax
lea rcx, [rsp + 0x60]
call fcn.180001320
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xbb8]
call fcn.180005620
test rax, rax
jne 0x18001ec38
mov bl, 1
mov byte [rsp + 0x68], bl
mov byte [0x180037e41], al
mov byte [0x180037e40], bl
jmp 0x18001ec74
test bl, bl
je 0x18001edc7
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xb30], xmm0
movups xmmword [rsp + 0xb40], xmm0
movups xmmword [rsp + 0xb50], xmm0
mov qword [rsp + 0xb60], rax
mov dword [rsp + 0xb68], eax
mov rbx, qword [rsp + 0xbc8]
lea rcx, [rsp + 0xbb8]
call fcn.180006230
lea r8, [rbx + rbx]
mov rdx, rax
lea rcx, [rsp + 0xb30]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [0x180037e44]
inc eax
mov dword [0x180037e44], eax
mov dword [rsp + 0x310], 0x1303d
mov dword [rsp + 0x314], eax
movups xmm0, xmmword [rsp + 0xb30]
movups xmmword [rsp + 0x348], xmm0
movups xmm1, xmmword [rsp + 0xb40]
movups xmmword [rsp + 0x358], xmm1
movups xmm0, xmmword [rsp + 0xb50]
movups xmmword [rsp + 0x368], xmm0
movsd xmm1, qword [rsp + 0xb60]
movsd qword [rsp + 0x378], xmm1
mov eax, dword [rsp + 0xb68]
mov dword [rsp + 0x380], eax
lea rax, [rsp + 0x710]
lea rcx, [rsp + 0x310]
mov edx, 8
nop word [rax + rax]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rdx, 1
jne 0x18001ed60
lea rdx, [rsp + 0x710]
mov rcx, qword [0x180037ef0]
call fcn.180008740
nop
lea rcx, [rsp + 0xbb8]
call fcn.1800020a0
imul rdi, r12, 0x1f8
mov r8, qword [0x180038068]
cmp byte [rdi + r8 + 0x1f4], 0
je 0x18001efe3
mov rax, qword [0x180037ef0]
mov rbx, qword [rax + 0x1f0]
lea rdx, [r8 + 0x1b0]
add rdx, rdi
lea rcx, [rsp + 0x2a8]
call fcn.180005c70
mov rdx, rax
lea rcx, [rsp + 0x1a0]
call fcn.1800272f0
mov rdx, rax
mov rcx, rbx
call fcn.180008150
mov rsi, rax
cmp byte [rsp + 0xb8], 0
jne 0x18001efdc
test rax, rax
je 0x18001efdc
mov rcx, qword [0x180038068]
mov edx, dword [rdi + rcx + 0x1f0]
lea rcx, [rsp + 0xb80]
call fcn.1800213b0
nop
mov dword [rsp + 0x78], 0x21361275
mov dword [rsp + 0x7c], 0x3a3e1679
mov word [rsp + 0x80], 0x29
lea rcx, [rsp + 0x78]
call fcn.18001ab50
mov r8, r15
nop
inc r8
cmp byte [rax + r8], 0
jne 0x18001ee90
mov rdx, rax
lea rcx, [rsp + 0xb80]
call fcn.1800063a0
lea rcx, [rsp + 0xb80]
call fcn.180006420
mov dword [rsp + 0xba0], 0x172
mov dword [rsp + 0xba4], 0x10e
mov rcx, qword [r13]
mov r10, qword [rcx + 0x70]
mov r9, r15
nop dword [rax + rax]
inc r9
cmp byte [rax + r9], 0
jne 0x18001eee0
mov dword [rsp + 0x30], 0xffffffff
mov dword [rsp + 0x28], 0x100
lea rcx, [rsp + 0xba0]
mov qword [rsp + 0x20], rcx
mov r8, rax
xor edx, edx
mov rcx, r13
call r10
mov edi, dword [0x180037eb4]
mov ebx, edi
shl ebx, 0x18
or ebx, 0x11e41f
mov dword [rsp + 0x70], 0x2a362206
mov word [rsp + 0x74], 0x2d
lea rcx, [rsp + 0x70]
call fcn.1800208f0
mov rdx, rax
lea rcx, [rsp + 0xd0]
call fcn.180005c70
mov rcx, qword [rsp + 0xf8]
mov qword [rsp + 0x48], rcx
mov rcx, qword [rsp + 0xf0]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 0x19
mov edx, 0x177
mov r9d, 0x32
lea r8d, [rdx - 0x41]
mov rcx, rax
call fcn.18000b9b0
test al, al
je 0x18001efcf
mov rcx, qword [rsp + 0x180]
mov qword [rsp + 0x20], rcx
mov r9, qword [rsp + 0x170]
mov r8, qword [rsp + 0x178]
mov rdx, qword [rsp + 0x188]
mov rcx, rsi
call fcn.180028af0
mov ecx, 0x3e7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
lea rcx, [rsp + 0xb80]
call fcn.180005c10
mov r8, qword [0x180038068]
mov esi, dword [rsp + 0x98]
inc esi
mov dword [rsp + 0x98], esi
movabs r12, 0xefbefbefbefbefbf
jmp 0x18001e910
mov rcx, qword [0x180037ef8]
test rcx, rcx
je 0x18001f8ee
cmp byte [rcx + 0x1f4], 0
je 0x18001f8ee
mov r12, qword [rsp + 0xf8]
cmp byte [0x180037e42], 0
jne 0x18001f08e
movss xmm0, dword [0x18002e8f4]
movss dword [rsp + 0x38], xmm0
mov dword [rsp + 0x30], 0x104
mov eax, dword [0x180037eb4]
mov dword [rsp + 0x28], eax
mov rax, qword [rcx + 0x1d0]
mov qword [rsp + 0x20], rax
mov r9, r12
mov r8, qword [rcx + 0x1c8]
mov edx, 0x226
mov ecx, pe_nt_image_headers64
call fcn.18000bc80
test al, al
je 0x18001f08e
mov rax, qword [0x180037ef8]
mov byte [rax + 0x1f5], 1
mov byte [0x180037e42], 1
mov rcx, qword [0x180037ef8]
cmp byte [rcx + 0x1f5], 0
je 0x18001f8ee
cmp byte [0x180037e42], 0
je 0x18001f8ee
mov eax, dword [0x180037eb4]
shl eax, 0x18
or eax, 0xffffff
mov dword [rsp + 0x38], eax
movss dword [rsp + 0x30], xmm8
movss dword [rsp + 0x28], xmm6
movss dword [rsp + 0x20], xmm6
mov r9, qword [rcx + 0x1d0]
mov r8, qword [rcx + 0x1c8]
movss xmm1, dword [0x18002e910]
movss xmm0, dword [0x18002e91c]
call fcn.18000b730
mov edi, dword [0x180037eb4]
mov ebx, edi
shl ebx, 0x18
or ebx, 0x969696
mov word [rsp + 0xb8], 0x6a69
xor eax, eax
mov byte [rsp + 0xba], al
lea rcx, [rsp + 0xb8]
call fcn.180020950
mov rdx, rax
lea rcx, [rsp + 0xd0]
call fcn.180005c70
mov qword [rsp + 0x48], r12
mov rsi, qword [rsp + 0xf0]
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 0x19
mov edx, 0xa
lea r9d, [rdx + 0x1e]
lea r8d, [rdx - 5]
mov rcx, rax
call fcn.18000b9b0
test al, al
je 0x18001f18d
mov rax, qword [0x180037ef8]
mov byte [rax + 0x1f5], 0
mov byte [0x180037e42], 0
movdqa xmm0, xmmword [0x18002ed60]
movdqa xmmword [rsp + 0xb30], xmm0
movdqa xmm1, xmmword [0x18002ee00]
movdqa xmmword [rsp + 0xb40], xmm1
movdqa xmm0, xmmword [0x18002ee80]
movdqa xmmword [rsp + 0xb50], xmm0
movdqa xmm1, xmmword [0x18002ee90]
movdqa xmmword [rsp + 0xb60], xmm1
mov dword [rsp + 0xb70], 0xf7fed4b5
mov word [rsp + 0xb74], 0xbbea
xor eax, eax
mov byte [rsp + 0xb76], al
lea rcx, [rsp + 0xb30]
call fcn.1800208c0
mov rcx, rax
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], 0xff
mov dword [rsp + 0x28], 0xff
mov dword [rsp + 0x20], 0xff
mov edx, 0xd8
lea r9d, [rdx + 0x27]
mov r8d, 0x32
call fcn.18000b910
call fcn.18001d9c0
mov r8d, dword [0x180037eb4]
mov r9d, r8d
shl r9d, 0x18
or r9d, 0x969696
lea rax, [0x180037069]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rsi
mov edx, 0x13a
lea ecx, [rdx - 0x66]
call fcn.18000be20
mov dword [rsp + 0x50], 0x33243f11
mov dword [rsp + 0x54], 0x2f3f1306
xor eax, eax
mov byte [rsp + 0x58], al
lea rcx, [rsp + 0x50]
call fcn.1800209b0
mov rcx, rax
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], 0xff
mov dword [rsp + 0x28], 0xff
mov dword [rsp + 0x20], 0xff
mov edx, 0xeb
lea r9d, [rdx + 0x14]
lea r8d, [rdx + 0x4f]
call fcn.18000b910
mov r8d, dword [0x180037eb4]
mov r9d, r8d
shl r9d, 0x18
or r9d, 0x969696
lea rax, [0x180038154]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rsi
mov edx, 0x14f
lea ecx, [rdx - 0x7b]
call fcn.18000be20
mov dword [rsp + 0xa8], 0x78343718
mov dword [rsp + 0xac], 0x2e3f3e18
mov dword [rsp + 0xb0], 0x133a2d38
xor eax, eax
mov byte [rsp + 0xb4], al
lea rcx, [rsp + 0xa8]
call fcn.180015660
mov rcx, rax
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], 0xff
mov dword [rsp + 0x28], 0xff
mov dword [rsp + 0x20], 0xff
mov edx, 0xeb
lea r9d, [rdx + 0x14]
lea r8d, [rdx + 0x64]
call fcn.18000b910
mov r8d, dword [0x180037eb4]
mov r9d, r8d
shl r9d, 0x18
or r9d, 0x969696
lea rax, [0x180037068]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rsi
mov edx, 0x164
mov ecx, 0xd4
call fcn.18000be20
movdqa xmm0, xmmword [0x18002ea80]
movdqu xmmword [rsp + 0xd0], xmm0
mov dword [rsp + 0xe0], 0x48040f11
mov dword [rsp + 0xe4], 0x3041a3a
mov dword [rsp + 0xe8], 0x1701070b
xor eax, eax
mov byte [rsp + 0xec], al
lea rcx, [rsp + 0xd0]
call fcn.18000db80
mov rcx, rax
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], 0xff
mov dword [rsp + 0x28], 0xff
mov dword [rsp + 0x20], 0xff
mov edx, 0xeb
lea r9d, [rdx + 0x14]
lea r8d, [rdx + 0x79]
call fcn.18000b910
mov edi, dword [0x180037eb4]
mov ebx, edi
shl ebx, 0x18
or ebx, 0x969696
mov dword [rsp + 0x70], 0x37382606
mov word [rsp + 0x74], 0x3f
lea rcx, [rsp + 0x70]
call fcn.1800208f0
mov rdx, rax
lea rcx, [rsp + 0xd0]
call fcn.180005c70
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 0x19
mov edx, 0xeb
mov r9d, 0x32
mov r8d, 0x190
mov rcx, rax
call fcn.18000b9b0
test al, al
je 0x18001f53b
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x50], rax
lea rdx, [0x1800380e0]
lea rcx, [rsp + 0xd0]
call fcn.180020ae0
mov rbx, rax
lea rdx, [0x180038098]
lea rcx, [rsp + 0xba0]
call fcn.180020ae0
nop
mov rcx, qword [rsp + 0x180]
mov qword [rsp + 0x38], rcx
mov rcx, qword [rsp + 0x170]
mov qword [rsp + 0x30], rcx
mov rcx, qword [rsp + 0x178]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rsp + 0x188]
mov qword [rsp + 0x20], rcx
mov r9, rbx
mov r8, rax
movzx edx, byte [0x180038154]
movzx ecx, byte [0x180038153]
call fcn.180029270
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x180037069], 0
je 0x18001f52d
call fcn.18001d790
cmp byte [0x180038154], 0
je 0x18001f53b
call fcn.18001d9c0
mov dword [rsp + 0x88], 0x78343718
mov dword [rsp + 0x8c], 0x2e3f3e18
mov dword [rsp + 0x90], 0x133a2d38
mov word [rsp + 0x94], 0x5b
lea rcx, [rsp + 0x88]
call fcn.18000df70
mov rcx, rax
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], 0xff
mov dword [rsp + 0x28], 0xff
mov dword [rsp + 0x20], 0xff
mov edx, 0x1c2
mov r9d, 0xff
lea r8d, [r9 - 0x37]
call fcn.18000b910
mov ebx, 0xe6
mov edi, r14d
mov rax, qword [0x1800380d0]
mov rdx, qword [0x1800380c8]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x18001f631
mov rcx, r14
nop dword [rax]
shl rcx, 5
add rcx, rdx
call fcn.180006420
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], 0xce
mov dword [rsp + 0x28], 0x84
mov dword [rsp + 0x20], 0xd2
mov r9d, 0xff
mov r8d, ebx
mov edx, 0x1c2
mov rcx, rax
call fcn.18000b910
add ebx, 0x14
inc edi
mov rax, qword [0x1800380d0]
mov rdx, qword [0x1800380c8]
sub rax, rdx
sar rax, 5
movsxd rcx, edi
cmp rcx, rax
jb 0x18001f5d0
movdqa xmm0, xmmword [0x18002e970]
movdqu xmmword [rsp + 0xba0], xmm0
mov word [rsp + 0xbb0], 0x5c16
xor eax, eax
mov byte [rsp + 0xbb2], al
lea rcx, [rsp + 0xba0]
call fcn.18000daa0
mov rcx, rax
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], 0xff
mov dword [rsp + 0x28], 0xff
mov dword [rsp + 0x20], 0xff
mov edx, 0x1c2
mov r9d, 0xff
lea r8d, [r9 + 0x2d]
call fcn.18000b910
mov esi, 0x14a
mov ebx, r14d
mov rax, qword [0x1800380e8]
mov rdx, qword [0x1800380e0]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x18001f721
mov rcx, r14
nop dword [rax + rax]
shl rcx, 5
add rcx, rdx
call fcn.180006420
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], 0xce
mov dword [rsp + 0x28], 0x84
mov dword [rsp + 0x20], 0xd2
mov r9d, 0xff
mov r8d, esi
mov edx, 0x1c2
mov rcx, rax
call fcn.18000b910
add esi, 0x14
inc ebx
mov rax, qword [0x1800380e8]
mov rdx, qword [0x1800380e0]
sub rax, rdx
sar rax, 5
movsxd rcx, ebx
cmp rcx, rax
jb 0x18001f6c0
movdqa xmm0, xmmword [0x18002ecd0]
movdqu xmmword [rsp + 0xd0], xmm0
mov dword [rsp + 0xe0], 0xc021204
mov dword [rsp + 0xe4], 0x1f0f2349
mov word [rsp + 0xe8], 0x57
lea rcx, [rsp + 0xd0]
call fcn.1800012f0
mov rcx, rax
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], 0xff
mov dword [rsp + 0x28], 0xff
mov dword [rsp + 0x20], 0xff
mov r9d, 0xff
lea r8d, [rsi + 0x64]
mov edx, 0x1c2
call fcn.18000b910
lea ebx, [rsi + 0x82]
mov rax, qword [0x1800380a0]
mov rdx, qword [0x180038098]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x18001f822
mov rcx, r14
nop word [rax + rax]
shl rcx, 5
add rcx, rdx
call fcn.180006420
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], 0x82
mov dword [rsp + 0x28], 0xe7
mov dword [rsp + 0x20], WSAGetLastError
mov r9d, 0xff
mov r8d, ebx
mov edx, 0x1c2
mov rcx, rax
call fcn.18000b910
add ebx, 0x14
inc r14d
mov rax, qword [0x1800380a0]
mov rdx, qword [0x180038098]
sub rax, rdx
sar rax, 5
movsxd rcx, r14d
cmp rcx, rax
jb 0x18001f7c0
mov edi, dword [0x180037eb4]
mov ebx, edi
shl ebx, 0x18
or ebx, 0x969696
mov dword [rsp + 0x88], 0x3d393312
mov dword [rsp + 0x8c], 0x392f3b2b
mov dword [rsp + 0x90], 0x928167d
mov word [rsp + 0x94], 0x1105
xor eax, eax
mov byte [rsp + 0x96], al
lea rcx, [rsp + 0x88]
call fcn.18001ab20
mov rdx, rax
lea rcx, [rsp + 0x1c8]
call fcn.180005c70
lea r8d, [rsi + 0x32]
mov qword [rsp + 0x48], r12
mov rsi, qword [rsp + 0xf0]
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 0x19
mov edx, 0x1c2
mov r9d, WSAGetLastError
mov rcx, rax
call fcn.18000b9b0
test al, al
je 0x18001f8f6
movzx ebx, byte [0x180037068]
lea rdx, [0x1800380e0]
lea rcx, [rsp + 0xd0]
call fcn.180020ae0
movzx edx, bl
mov rcx, rax
call fcn.18001d2d0
jmp 0x18001f8f6
mov rsi, qword [rsp + 0xf0]
mov r8, qword [0x180037f00]
test r8, r8
je 0x18001f940
mov dword [rsp + 0x38], 0xffffffff
movss dword [rsp + 0x30], xmm8
movss dword [rsp + 0x28], xmm6
movss dword [rsp + 0x20], xmm6
mov r9, qword [r8 + 0x1d0]
mov r8, qword [r8 + 0x1c8]
movss xmm1, dword [0x18002e924]
movss xmm0, dword [0x18002e92c]
call fcn.18000b730
mov dword [rsp + 0x60], 0x3f393f05
mov word [rsp + 0x64], 0x7a63
xor eax, eax
mov byte [rsp + 0x66], al
lea rcx, [rsp + 0x60]
call fcn.1800209e0
mov rdx, rax
lea rcx, [rsp + 0xc40]
call fcn.180005c70
nop
mov rax, qword [0x180037ef0]
mov ecx, dword [rax + 0x21c]
call fcn.180027020
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x18001f985
mov rdx, rax
lea rcx, [rsp + 0xc40]
call fcn.1800063a0
mov ebx, dword [0x180037eb4]
lea rcx, [rsp + 0xc40]
call fcn.180006420
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], 0xff
mov dword [rsp + 0x28], 0xff
mov dword [rsp + 0x20], 0xff
mov r9d, ebx
mov edx, 0x2e4
mov r8d, 0x23a
mov rcx, rax
call fcn.18000b910
mov dword [rsp + 0x70], 0x2b78341e
mov word [rsp + 0x74], 0x7a63
xor eax, eax
mov byte [rsp + 0x76], al
lea rcx, [rsp + 0x70]
call fcn.1800209e0
mov rdx, rax
lea rcx, [rsp + 0xc20]
call fcn.180005c70
nop
mov rax, qword [0x180037ef0]
mov ecx, dword [rax + 0x224]
call fcn.180027020
mov r8, r15
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18001fa30
mov rdx, rax
lea rcx, [rsp + 0xc20]
call fcn.1800063a0
mov ebx, dword [0x180037eb4]
lea rcx, [rsp + 0xc20]
call fcn.180006420
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], 0xff
mov dword [rsp + 0x28], 0xff
mov dword [rsp + 0x20], 0xff
mov r9d, ebx
mov edx, 0x29e
lea r8d, [rdx - 0x64]
mov rcx, rax
call fcn.18000b910
mov rax, qword [0x180037ef0]
mov dword [rsp + 0x78], 0x2b243919
mov dword [rsp + 0x7c], 0x37383b09
mov dword [rsp + 0x80], 0x7f642e
lea rcx, [rsp + 0x78]
cmp dword [rax + 0x220], 0
je 0x18001fb56
call fcn.180020890
mov rdx, rax
lea rcx, [rsp + 0xb80]
call fcn.180005c70
nop
mov rax, qword [0x180037ef0]
mov ecx, dword [rax + 0x220]
call fcn.180027020
nop word [rax + rax]
inc r15
cmp byte [rax + r15], 0
jne 0x18001faf0
mov r8, r15
mov rdx, rax
lea rcx, [rsp + 0xb80]
call fcn.1800063a0
mov ebx, dword [0x180037eb4]
lea rcx, [rsp + 0xb80]
call fcn.180006420
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], 0x43
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 0xf2
mov r9d, ebx
mov edx, 0x23a
mov r8d, edx
mov rcx, rax
call fcn.18000b910
nop
jmp 0x18001fbe1
call fcn.180020890
mov rdx, rax
lea rcx, [rsp + 0xb80]
call fcn.180005c70
nop
mov rax, qword [0x180037ef0]
mov ecx, dword [rax + 0x220]
call fcn.180027020
nop
inc r15
cmp byte [rax + r15], 0
jne 0x18001fb80
mov r8, r15
mov rdx, rax
lea rcx, [rsp + 0xb80]
call fcn.1800063a0
mov ebx, dword [0x180037eb4]
lea rcx, [rsp + 0xb80]
call fcn.180006420
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], 0xff
mov dword [rsp + 0x28], 0xff
mov dword [rsp + 0x20], 0xff
mov r9d, ebx
mov edx, 0x23a
mov r8d, edx
mov rcx, rax
call fcn.18000b910
nop
lea rcx, [rsp + 0xb80]
call fcn.180005c10
mov edi, dword [0x180037eb4]
mov ebx, edi
shl ebx, 0x18
or ebx, 0x646464
mov dword [rsp + 0x98], 0x2c3e2e10
xor eax, eax
mov byte [rsp + 0x9c], al
lea rcx, [rsp + 0x98]
call fcn.180020860
mov rdx, rax
lea rcx, [rsp + 0x1a0]
call fcn.180005c70
mov rcx, qword [rsp + 0xf8]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 0x19
mov edx, 0x2ee
mov r9d, 0x28
lea r8d, [r9 - 0x23]
mov rcx, rax
call fcn.18000b9b0
test al, al
je 0x18001fc7e
mov ecx, 0xb1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
lea rcx, [rsp + 0xc20]
call fcn.180005c10
nop
lea rcx, [rsp + 0xc40]
call fcn.180005c10
nop
lea rcx, [rsp + 0xbd8]
call fcn.180021210
nop
lea rcx, [rsp + 0xbf0]
call fcn.180021290
mov rcx, qword [rsp + 0xc60]
xor rcx, rsp
call fcn.180029c20
lea r11, [rsp + 0xc90]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm8, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
ret
movdqa xmm0, xmmword [str._f9_x8__]
movdqu xmmword [rsp + 0xb30], xmm0
movdqa xmm1, xmmword [0x18002ead0]
movdqu xmmword [rsp + 0xb40], xmm1
movdqa xmm0, xmmword [str.TXYZ___]
movdqu xmmword [rsp + 0xb50], xmm0
mov dword [rsp + 0xb60], 0xe6e8f5e4
mov dword [rsp + 0xb64], 0xedcdaab3
mov dword [rsp + 0xb68], 0xdbafebe6
mov word [rsp + 0xb6c], 0xebf4
mov byte [rsp + 0xb6e], al
lea rcx, [rsp + 0xb30]
call fcn.180020830
mov rcx, rax
mov qword [rsp + 0x38], rbx
xor r14d, r14d
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], 0xff
mov edx, 0xfa
lea r9d, [rdx + 5]
lea r8d, [rdx + 0x32]
call fcn.18000b910
mov edi, dword [0x180037eb4]
mov ebx, edi
shl ebx, 0x18
or ebx, 0x646464
mov dword [rsp + 0x98], 0x2c3e2e10
xor eax, eax
mov byte [rsp + 0x9c], al
lea rcx, [rsp + 0x98]
call fcn.180020860
mov rdx, rax
lea rcx, [rsp + 0x1a0]
call fcn.180005c70
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 0x19
mov edx, 0x2ee
lea r9d, [r14 + 0x28]
lea r8d, [r14 + 5]
mov rcx, rax
call fcn.18000b9b0
test al, al
je 0x18001fcb5
mov ecx, 0xb1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3