Function at 0x18000b990
Capabilities:
Encode data using xor
Hash data with crc32
Link many functions at runtime

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
lea rbp, [rsp - 0x1e8]
sub rsp, 0x2e8
call fcn.1800042e0
mov rcx, rax
mov qword [rbp + 0x108], rax
mov rbx, rax
call fcn.180004210
mov rcx, qword [0x1800a9e20]
lea rdx, [rbp - 0x50]
mov rsi, rax
mov qword [rbp + 0x100], rax
xor r12d, r12d
movabs rax, 0xd4420f86ec75329a
mov qword [rbp - 0x50], rax
movabs r13, 0x50d9da637245ed60
movabs rax, 0x35be850d1b24800f
mov qword [rsp + 0x38], r13
mov qword [rbp - 0x48], rax
mov edi, r12d
movdqa xmm0, xmmword [rbp - 0x50]
movabs rax, 0x9559b927e7aeca91
mov qword [rbp - 0x40], rax
movabs rax, 0x5e20c1f9d5b07bb6
mov qword [rbp - 0x38], rax
movabs rax, 0xb01d7ff68f475ef3
movdqa xmm1, xmmword [rbp - 0x40]
mov qword [rsp + 0x30], rax
movabs rax, 0xf734dc5494cf95e5
pxor xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x40], rax
movabs rax, 0x5e20c1f9a6d512da
mov qword [rsp + 0x48], rax
pxor xmm1, xmmword [rsp + 0x40]
movdqa xmmword [rbp - 0x40], xmm1
mov dword [rbp + 0x228], r12d
mov qword [rbp + 0x230], r12
movdqa xmmword [rbp - 0x50], xmm0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp + 0x230]
mov rcx, rbx
call rax
cmp qword [rbp + 0x230], rdi
jbe 0x18000cc53
mov qword [rsp + 0x2e0], r14
mov ebx, r12d
mov qword [rsp + 0x2d8], r15
movaps xmmword [rsp + 0x2c0], xmm6
movaps xmmword [rsp + 0x2b0], xmm7
movaps xmmword [rsp + 0x2a0], xmm8
mov qword [rbp + 0x70], rbx
mov rax, qword [rsi + rbx*8]
movabs rcx, 0xd9420f86ec75329a
mov qword [rsp + 0x70], rcx
movabs r9, 0x5e20c1f9d2bb67b5
mov qword [rbp - 0x78], r9
movabs r8, 0x946baf27f5a3f6ba
mov qword [rbp - 0x80], r8
movabs rcx, 0xb01d7ff68f475ef3
mov r15, qword [rax]
movabs rdx, 0x24bcbd3c17228c0d
movdqa xmm1, xmmword [rbp - 0x80]
movabs rax, 0xf734dc5494cf95e5
mov qword [rsp + 0x78], rdx
mov r14d, r12d
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x70]
mov qword [rsp + 0x30], rcx
movabs rax, 0x5e20c1f9a6d512da
mov rcx, qword [0x1800a9e20]
mov qword [rsp + 0x48], rax
pxor xmm1, xmmword [rsp + 0x40]
mov qword [rsp + 0x38], r13
movdqa xmm0, xmmword [rsp + 0x30]
pxor xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp - 0x80], xmm1
mov qword [rbp + 0x238], r15
mov dword [rbp + 0x220], r12d
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, r15
call rax
test rax, rax
je 0x18000cb59
movabs rax, 0xb01d7ff68f475ef3
mov qword [rbp + 0x138], r13
mov qword [rbp + 0x130], rax
movdqa xmm8, xmmword [rbp + 0x130]
nop dword [rax]
nop word [rax + rax]
mov rdx, qword [r15]
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 0xf
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x18000bbe0
lea rcx, [rsp + 0x50]
call fcn.180043180
movabs rax, 0xb01d7ff6e32b3add
mov qword [rbp + 0x18], r13
mov qword [rbp + 0x10], rax
mov rdi, 0xffffffffffffffff
movdqa xmm0, xmmword [rbp + 0x10]
lea rax, [rbp + 0x10]
pxor xmm0, xmm8
movdqa xmmword [rbp + 0x10], xmm0
inc rdi
cmp byte [rax + rdi], 0
jne 0x18000bc20
mov rcx, qword [rsp + 0x68]
lea rsi, [rsp + 0x50]
mov r13, qword [rsp + 0x50]
cmp rcx, 0x10
mov r12, qword [rsp + 0x60]
cmovae rsi, r13
cmp rdi, r12
ja 0x18000bcdb
test rdi, rdi
jne 0x18000bc5b
mov rbx, rdi
jmp 0x18000bced
movsx r15d, byte [rbp + 0x10]
lea r8, [r12 + 1]
mov r14, rsi
mov edx, r15d
sub r14, rdi
mov rcx, rsi
add r8, r14
sub r8, rsi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x18000bcc8
nop dword [rax]
nop dword [rax + rax]
mov r8, rdi
lea rdx, [rbp + 0x10]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x18000bf37
inc rbx
lea r8, [r12 + 1]
add r8, r14
mov edx, r15d
sub r8, rbx
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x18000bc90
mov rcx, qword [rsp + 0x68]
mov r14d, dword [rbp + 0x220]
mov r15, qword [rbp + 0x238]
mov rbx, 0xffffffffffffffff
cmp r12, rbx
jb 0x18000cc85
xor edi, edi
mov rax, r12
mov edx, 4
sub rax, rbx
cmp rax, rdx
cmovb rdx, rax
cmp rcx, 0x10
lea rax, [rsp + 0x50]
cmovae rax, r13
sub r12, rdx
mov qword [rsp + 0x60], r12
sub r12, rbx
lea rcx, [rax + rbx]
lea r8, [r12 + 1]
add rdx, rcx
call sub.VCRUNTIME140.dll_memmove
movabs rax, 0xd9420f86ec75329a
lea rdx, [rbp + 0xe0]
mov qword [rbp + 0xe0], rax
movabs rcx, 0xf734dc5494cf95e5
mov qword [rsp + 0x40], rcx
movabs rax, 0x24bcbd3c17228c0d
mov rcx, qword [0x1800a9e20]
movabs r12, 0xb01d7ff68f475ef3
mov qword [rbp + 0xe8], rax
movabs rsi, 0x50d9da637245ed60
movdqa xmm0, xmmword [rbp + 0xe0]
movabs rax, 0xf734af27f5a3f6ba
mov qword [rbp + 0xf0], rax
movabs rax, 0x5e20c1f9a6d512da
mov qword [rbp + 0xf8], rax
movdqa xmm1, xmmword [rbp + 0xf0]
mov qword [rsp + 0x48], rax
pxor xmm1, xmmword [rsp + 0x40]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], rsi
pxor xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rbp + 0xf0], xmm1
movdqa xmmword [rbp + 0xe0], xmm0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
movsxd rdx, r14d
mov rcx, r15
call rax
mov qword [rbp + 0x68], rax
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x40], rdi
mov r13, qword [rax + 0x10]
mov r14, qword [rax + 0x18]
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x48], 0xf
inc r8
cmp byte [r14 + r8], 0
jne 0x18000be11
mov rdx, r14
lea rcx, [rsp + 0x30]
call fcn.180043180
cmp qword [rsp + 0x40], 0
mov rdx, qword [rsp + 0x48]
sete bl
cmp rdx, 0x10
jb 0x18000be6e
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000be69
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000cc78
call fcn.18007e36c
test bl, bl
movabs rax, 0xb01d7ff68f4764c9
mov rbx, 0xffffffffffffffff
je 0x18000c0a8
mov qword [rbp + 0x80], rax
lea rax, [rbp + 0x80]
mov qword [rbp + 0x88], rsi
movdqa xmm0, xmmword [rbp + 0x80]
mov qword [rbp + 0x140], r12
mov r12, qword [rsp + 0x60]
mov qword [rbp + 0x148], rsi
pxor xmm0, xmmword [rbp + 0x140]
movdqa xmmword [rbp + 0x80], xmm0
inc rbx
cmp byte [rax + rbx], 0
jne 0x18000bec7
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r12
cmp rax, rbx
jb 0x18000cc91
cmp qword [rsp + 0x68], 0x10
lea r15, [rsp + 0x50]
mov qword [rbp + 0x20], rdi
lea r14, [rbx + r12]
cmovae r15, qword [rsp + 0x50]
lea rsi, [rbp + 0x20]
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x38], rdi
mov edi, 0xf
cmp r14, rdi
jbe 0x18000bfad
mov rdi, r14
or rdi, 0xf
cmp rdi, rcx
jbe 0x18000bf52
mov rdi, rcx
movabs rax, 0x8000000000000027
jmp 0x18000bf79
mov rcx, qword [rsp + 0x68]
sub rbx, rsi
mov r14d, dword [rbp + 0x220]
mov r15, qword [rbp + 0x238]
jmp 0x18000bce2
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x18000bf98
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000cc8b
mov rcx, rax
call fcn.18007e5dc
test rax, rax
je 0x18000cc63
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x18000bfa9
test rcx, rcx
je 0x18000bfa7
call fcn.18007e5dc
mov rsi, rax
jmp 0x18000bfa9
xor esi, esi
mov qword [rbp + 0x20], rsi
mov r8, r12
mov qword [rbp + 0x30], r14
mov rdx, r15
mov qword [rbp + 0x38], rdi
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rsi + r12]
mov r8, rbx
lea rdx, [rbp + 0x80]
call sub.VCRUNTIME140.dll_memcpy
mov r8, 0xffffffffffffffff
mov byte [rsi + r14], 0
inc r8
cmp byte [r8 + r13], 0
jne 0x18000bfe2
mov rdx, r13
lea rcx, [rbp + 0x20]
call fcn.1800432e0
xor r12d, r12d
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18000c04e
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000c049
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000cc63
call fcn.18007e36c
mov rdx, qword [rbp + 0x38]
movups xmmword [rsp + 0x50], xmm6
movups xmmword [rsp + 0x60], xmm7
cmp rdx, 0x10
jb 0x18000c093
mov rcx, qword [rbp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000c08e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000cc63
call fcn.18007e36c
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], r12b
jmp 0x18000c466
mov r13, qword [rsp + 0x60]
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0x90], rax
lea rax, [rbp + 0x90]
mov qword [rbp + 0xa8], rsi
movdqa xmm0, xmmword [rbp + 0xa0]
mov qword [rbp + 0x98], rsi
mov qword [rbp + 0x150], r12
mov qword [rbp + 0x158], rsi
pxor xmm0, xmmword [rbp + 0x150]
movdqa xmmword [rbp + 0xa0], xmm0
movdqa xmm0, xmmword [rbp + 0x90]
mov qword [rbp + 0x160], r12
mov qword [rbp + 0x168], rsi
pxor xmm0, xmmword [rbp + 0x160]
movdqa xmmword [rbp + 0x90], xmm0
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x18000c120
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r13
cmp rax, rbx
jb 0x18000cc7f
cmp qword [rsp + 0x68], 0x10
lea r12, [rsp + 0x50]
mov qword [rbp + 0x40], rdi
lea r15, [rbx + r13]
cmovae r12, qword [rsp + 0x50]
lea rsi, [rbp + 0x40]
mov qword [rbp + 0x50], rdi
mov qword [rbp + 0x58], rdi
mov edi, 0xf
cmp r15, rdi
jbe 0x18000c1e7
mov rdi, r15
or rdi, 0xf
cmp rdi, rcx
jbe 0x18000c18c
mov rdi, rcx
movabs rax, 0x8000000000000027
jmp 0x18000c1b3
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x18000c1d2
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000cc97
mov rcx, rax
call fcn.18007e5dc
test rax, rax
je 0x18000cc6a
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x18000c1e3
test rcx, rcx
je 0x18000c1e1
call fcn.18007e5dc
mov rsi, rax
jmp 0x18000c1e3
xor esi, esi
mov qword [rbp + 0x40], rsi
mov r8, r13
mov qword [rbp + 0x50], r15
mov rdx, r12
mov qword [rbp + 0x58], rdi
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rsi + r13]
mov r8, rbx
lea rdx, [rbp + 0x90]
call sub.VCRUNTIME140.dll_memcpy
mov r8, 0xffffffffffffffff
mov byte [rsi + r15], 0
nop dword [rax]
inc r8
cmp byte [r14 + r8], 0
jne 0x18000c220
mov rdx, r14
lea rcx, [rbp + 0x40]
call fcn.1800432e0
xor r12d, r12d
mov r8, 0xffffffffffffffff
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x110], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x120], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
lea rax, [rbp + 0xa0]
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r12b
jne 0x18000c270
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x110]
call fcn.1800432e0
mov r9, qword [rsp + 0x70]
mov rdx, 0xffffffffffffffff
mov qword [rbp - 0x10], r12
mov qword [rbp], r12
mov qword [rbp + 8], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
inc rdx
cmp byte [r9 + rdx], r12b
jne 0x18000c2c2
mov r8, qword [rbp + 8]
mov rcx, qword [rbp]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x18000c30b
lea rdi, [rdx + rcx]
cmp r8, 0x10
mov r8, rdx
mov qword [rbp], rdi
lea rbx, [rbp - 0x10]
mov rdx, r9
cmovae rbx, qword [rbp - 0x10]
add rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbp - 0x10]
mov byte [rdi + rbx], r12b
jmp 0x18000c319
lea rcx, [rbp - 0x10]
mov qword [rsp + 0x20], rdx
call fcn.1800460a0
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18000c36c
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000c367
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000cc6a
call fcn.18007e36c
mov rdx, qword [rbp + 8]
movups xmmword [rsp + 0x50], xmm6
movups xmmword [rsp + 0x60], xmm7
cmp rdx, 0x10
jb 0x18000c3b1
mov rcx, qword [rbp - 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000c3ac
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000cc6a
call fcn.18007e36c
mov rdx, qword [rbp + 0x128]
mov qword [rbp], r12
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], r12b
cmp rdx, 0x10
jb 0x18000c402
mov rcx, qword [rbp + 0x110]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000c3fd
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000cc6a
call fcn.18007e36c
mov rdx, qword [rbp + 0x58]
mov qword [rbp + 0x120], r12
mov qword [rbp + 0x128], 0xf
mov byte [rbp + 0x110], r12b
cmp rdx, 0x10
jb 0x18000c456
mov rcx, qword [rbp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000c451
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000cc6a
call fcn.18007e36c
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], r12b
mov rcx, qword [0x1800a9e20]
lea rdx, [rbp - 0x70]
movabs rax, 0xd3420f86ec75329a
mov qword [rbp + 0x60], r12
mov qword [rbp - 0x70], rax
movabs rdi, 0x5e20c1f9a6d512da
mov qword [rbp - 0x58], rdi
movabs rax, 0x24bcbd3c01368c0c
mov qword [rbp - 0x68], rax
movabs rsi, 0xb01d7ff68f475ef3
movdqa xmm0, xmmword [rbp - 0x70]
movabs rax, 0xf747b838f1a6f3ba
mov qword [rbp - 0x60], rax
movabs r13, 0x50d9da637245ed60
movdqa xmm1, xmmword [rbp - 0x60]
movabs r15, 0xf734dc5494cf95e5
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], r13
pxor xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], rdi
pxor xmm1, xmmword [rsp + 0x40]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmmword [rbp - 0x70], xmm0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbp + 0x68]
lea rdx, [rbp + 0x60]
call rax
mov qword [rsp + 0x70], rax
mov rbx, rax
test rax, rax
je 0x18000ca4d
mov rcx, qword [0x1800a9e20]
lea rdx, [rbp - 0x30]
mov qword [rbp - 0x18], rdi
movabs rax, 0xd6420f86ec75329a
mov qword [rbp - 0x30], rax
movabs rax, 0x24bcbd3c16298809
mov qword [rbp - 0x28], rax
movabs rax, 0xf734dc31f9aefbba
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x20], rax
movdqa xmm1, xmmword [rbp - 0x20]
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xc8], r13
pxor xmm0, xmmword [rbp + 0xc0]
mov qword [rbp + 0xd0], r15
mov qword [rbp + 0xd8], rdi
pxor xmm1, xmmword [rbp + 0xd0]
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmmword [rbp - 0x30], xmm0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
call rax
mov qword [rbp + 0xb8], r13
mov r15, rax
movabs rax, 0xb01d7ff68f4764c9
mov qword [rbp + 0x178], r13
mov r13, qword [rsp + 0x60]
mov rbx, 0xffffffffffffffff
mov qword [rbp + 0xb0], rax
lea rax, [rbp + 0xb0]
movdqa xmm0, xmmword [rbp + 0xb0]
mov qword [rbp + 0x170], rsi
pxor xmm0, xmmword [rbp + 0x170]
movdqa xmmword [rbp + 0xb0], xmm0
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x18000c600
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r13
cmp rax, rbx
jb 0x18000cca9
cmp qword [rsp + 0x68], 0x10
lea r12, [rsp + 0x50]
lea r14, [rbx + r13]
mov edi, 0xf
cmovae r12, qword [rsp + 0x50]
lea rsi, [rsp + 0x30]
xor eax, eax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
cmp r14, rdi
jbe 0x18000c6ca
mov rdi, r14
or rdi, 0xf
cmp rdi, rcx
jbe 0x18000c672
mov rdi, rcx
movabs rax, 0x8000000000000027
jmp 0x18000c699
cmp rdi, 0x16
mov ecx, 0x16
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x18000c6b8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000cc9d
mov rcx, rax
call fcn.18007e5dc
test rax, rax
je 0x18000cc71
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x18000c6c5
test rcx, rcx
je 0x18000c6c2
call fcn.18007e5dc
mov rsi, rax
mov qword [rsp + 0x30], rsi
mov r8, r13
mov qword [rsp + 0x40], r14
mov rdx, r12
mov qword [rsp + 0x48], rdi
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rsi + r13]
mov r8, rbx
lea rdx, [rbp + 0xb0]
call sub.VCRUNTIME140.dll_memcpy
mov r8, 0xffffffffffffffff
mov byte [rsi + r14], 0
inc r8
cmp byte [r15 + r8], 0
jne 0x18000c701
mov rdx, r15
lea rcx, [rsp + 0x30]
call fcn.1800432e0
xor r12d, r12d
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov rdx, qword [rsp + 0x48]
movups xmmword [rbp + 0x180], xmm0
movups xmmword [rbp + 0x190], xmm1
cmp rdx, 0x10
jb 0x18000c77c
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000c777
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000cc71
call fcn.18007e36c
movabs rax, 0xd6420f86ec75329a
mov qword [rsp + 0x40], r12
mov qword [rbp - 0x30], rax
lea rdx, [rbp - 0x30]
movabs rax, 0x24bcbd3c16298809
mov qword [rsp + 0x48], 0xf
mov qword [rbp - 0x28], rax
movabs rcx, 0xb01d7ff68f475ef3
movdqa xmm0, xmmword [rbp - 0x30]
movabs rax, 0xf740b927f2a9faba
mov qword [rbp - 0x20], rax
movabs r13, 0x50d9da637245ed60
mov qword [rbp + 0xc0], rcx
movabs rax, 0x5e20c1f9a6d512da
mov qword [rbp - 0x18], rax
movabs rcx, 0xf734dc5494cf95e5
movdqa xmm1, xmmword [rbp - 0x20]
mov qword [rbp + 0xd0], rcx
mov rcx, qword [0x1800a9e20]
mov qword [rbp + 0xd8], rax
pxor xmm1, xmmword [rbp + 0xd0]
mov qword [rbp + 0xc8], r13
pxor xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp - 0x20], xmm1
mov byte [rsp + 0x30], r12b
movdqa xmmword [rbp - 0x30], xmm0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rsp + 0x70]
call rax
mov r14, qword [rbp + 0x198]
lea rdx, [rbp + 0x180]
mov rsi, qword [rbp + 0x180]
cmp r14, 0x10
mov r15d, eax
mov rcx, 0xffffffffffffffff
cmovae rdx, rsi
inc rcx
cmp byte [rdx + rcx], r12b
jne 0x18000c864
cmp r14, 0x10
lea rdx, [rbp + 0x180]
mov ebx, 0xffffffff
cmovae rdx, rsi
test ecx, ecx
je 0x18000c8b7
mov r8d, ecx
lea r13, [0x180082db0]
nop
movsx ecx, byte [rdx]
lea rdx, [rdx + 1]
mov eax, ebx
shr ebx, 8
xor rcx, rax
movzx eax, cl
xor ebx, dword [r13 + rax*4]
sub r8, 1
jne 0x18000c890
movabs r13, 0x50d9da637245ed60
mov rdi, qword [0x1800a9e40]
not ebx
mov dword [rsp + 0x78], r12d
mov rcx, rdi
mov rax, qword [rdi + 8]
mov qword [rsp + 0x70], rax
cmp byte [rax + 0x19], r12b
jne 0x18000c909
nop word [rax + rax]
mov qword [rsp + 0x70], rax
cmp dword [rax + 0x20], ebx
jae 0x18000c8f5
mov rax, qword [rax + 0x10]
mov dword [rsp + 0x78], r12d
jmp 0x18000c903
mov rcx, rax
mov dword [rsp + 0x78], 1
mov rax, qword [rax]
cmp byte [rax + 0x19], r12b
je 0x18000c8e0
cmp byte [rcx + 0x19], r12b
jne 0x18000c914
cmp ebx, dword [rcx + 0x20]
jae 0x18000c96a
movabs rax, 0x555555555555555
cmp qword [0x1800a9e48], rax
je 0x18000cca3
mov ecx, 0x30
call fcn.18007e5dc
movups xmm0, xmmword [rsp + 0x70]
mov r8, rax
lea rdx, [rsp + 0x70]
lea rcx, [0x1800a9e40]
mov dword [rax + 0x20], ebx
mov qword [rax + 0x28], r15
mov qword [rax], rdi
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rdi
mov word [rax + 0x18], r12w
movaps xmmword [rsp + 0x70], xmm0
call fcn.180046370
cmp r14, 0x10
jb 0x18000c9a1
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x18000c999
mov rsi, qword [rsi - 8]
add rdx, 0x27
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000cc78
mov rcx, rsi
call fcn.18007e36c
mov rcx, qword [0x1800a9e20]
lea rdx, [rbp - 0x70]
movabs rax, 0xd3420f86ec75329a
mov qword [rsp + 0x38], r13
mov qword [rbp - 0x70], rax
movabs rdi, 0x5e20c1f9a6d512da
mov qword [rbp - 0x58], rdi
movabs rax, 0x24bcbd3c01368c0c
mov qword [rbp - 0x68], rax
movabs rsi, 0xb01d7ff68f475ef3
movdqa xmm0, xmmword [rbp - 0x70]
movabs rax, 0xf747b838f1a6f3ba
mov qword [rbp - 0x60], rax
movabs r15, 0xf734dc5494cf95e5
movdqa xmm1, xmmword [rbp - 0x60]
mov qword [rsp + 0x30], rsi
pxor xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], rdi
pxor xmm1, xmmword [rsp + 0x40]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmmword [rbp - 0x70], xmm0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbp + 0x68]
lea rdx, [rbp + 0x60]
call rax
mov qword [rsp + 0x70], rax
mov rbx, rax
test rax, rax
jne 0x18000c520
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18000ca8a
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ca85
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000cc78
call fcn.18007e36c
mov r14d, dword [rbp + 0x220]
lea rdx, [rsp + 0x70]
mov rcx, qword [0x1800a9e20]
movabs rax, 0xd9420f86ec75329a
mov qword [rsp + 0x70], rax
inc r14d
movabs rax, 0x24bcbd3c17228c0d
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x78], rax
movabs rax, 0x946baf27f5a3f6ba
mov qword [rbp - 0x80], rax
movabs rax, 0x5e20c1f9d2bb67b5
mov qword [rbp - 0x78], rax
movdqa xmm1, xmmword [rbp - 0x80]
mov qword [rsp + 0x38], r13
movdqa xmm0, xmmword [rsp + 0x30]
pxor xmm0, xmmword [rsp + 0x70]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], rdi
pxor xmm1, xmmword [rsp + 0x40]
movdqa xmmword [rbp - 0x80], xmm1
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov dword [rbp + 0x220], r14d
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r15, qword [rbp + 0x238]
mov rcx, r15
call rax
movsxd rcx, r14d
cmp rcx, rax
jb 0x18000bbc0
mov rbx, qword [rbp + 0x70]
mov edi, dword [rbp + 0x228]
mov rsi, qword [rbp + 0x100]
mov rcx, qword [0x1800a9e20]
lea rdx, [rbp - 0x50]
movabs rax, 0xd4420f86ec75329a
mov qword [rsp + 0x38], r13
mov qword [rbp - 0x50], rax
inc edi
movabs rax, 0x35be850d1b24800f
mov dword [rbp + 0x228], edi
mov qword [rbp - 0x48], rax
inc rbx
movdqa xmm0, xmmword [rbp - 0x50]
movabs rax, 0x9559b927e7aeca91
mov qword [rbp - 0x40], rax
movabs rax, 0x5e20c1f9d5b07bb6
mov qword [rbp - 0x38], rax
movabs rax, 0xb01d7ff68f475ef3
movdqa xmm1, xmmword [rbp - 0x40]
mov qword [rsp + 0x30], rax
movabs rax, 0xf734dc5494cf95e5
pxor xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x40], rax
movabs rax, 0x5e20c1f9a6d512da
mov qword [rsp + 0x48], rax
pxor xmm1, xmmword [rsp + 0x40]
movdqa xmmword [rbp - 0x40], xmm1
mov qword [rbp + 0x70], rbx
mov qword [rbp + 0x230], r12
movdqa xmmword [rbp - 0x50], xmm0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbp + 0x108]
lea rdx, [rbp + 0x230]
call rax
movsxd rax, edi
cmp rax, qword [rbp + 0x230]
jb 0x18000bacb
movaps xmm7, xmmword [rsp + 0x2b0]
movaps xmm6, xmmword [rsp + 0x2c0]
mov r15, qword [rsp + 0x2d8]
mov r14, qword [rsp + 0x2e0]
movaps xmm8, xmmword [rsp + 0x2a0]
add rsp, 0x2e8
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180003090
int3
call fcn.180043530
int3
call fcn.180002ff0
int3
call fcn.180003090
int3
call fcn.180002ff0
int3
call fcn.180002ff0
int3
call fcn.180004070
int3
call fcn.180003090
int3