Function at 0x18f88b3238
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xa0]
sub rsp, 0x1a0
mov rdi, rdx
lea rcx, [0x18f88dd850]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor r13d, r13d
test rax, rax
jne 0x18f88b3599
mov r13, qword [rdi + 0x20]
xorps xmm0, xmm0
movdqu xmmword [rbp - 8], xmm0
xor r8d, r8d
mov qword [rbp + 8], r8
mov dword [rsp + 0x20], 0x7b0058
mov dword [rsp + 0x24], 0x70006d
mov dword [rsp + 0x28], 0x3a002c
mov dword [rsp + 0x2c], 0x51005a
mov dword [rsp + 0x30], 0x2c0060
mov dword [rsp + 0x34], 0x460040
mov dword [rsp + 0x38], 0x79002c
mov dword [rsp + 0x3c], 0x6f007f
mov dword [rsp + 0x40], 0x7e007b
mov dword [rsp + 0x44], 0x710071
mov dword [rsp + 0x48], 0x70003a
mov dword [rsp + 0x4c], 0x780078
mov dword [rsp + 0x50], 0x7a002c
mov dword [rsp + 0x54], 0x80007b
mov dword [rsp + 0x58], 0x72002c
mov dword [rsp + 0x5c], 0x81007b
mov dword [rsp + 0x60], 0x70007a
mov dword [rsp + 0x64], 0xc0016
lea ebx, [rax + 0xc]
movzx eax, word [str.CLRCreateInstance]
add ax, bx
mov word [rsp + 0x68], ax
movzx eax, word [0x18f88dda1a]
add ax, bx
mov word [rsp + 0x6a], ax
movzx eax, word [0x18f88dda1c]
add ax, bx
mov word [rsp + 0x6c], ax
movzx eax, word [0x18f88dda1e]
add ax, bx
mov word [rsp + 0x6e], ax
movzx eax, word [0x18f88dda20]
add ax, bx
mov word [rsp + 0x70], ax
movzx eax, word [0x18f88dda22]
add ax, bx
mov word [rsp + 0x72], ax
movzx eax, word [0x18f88dda24]
add ax, bx
mov word [rsp + 0x74], ax
movzx eax, word [0x18f88dda26]
add ax, bx
mov word [rsp + 0x76], ax
movzx eax, word [0x18f88dda28]
add ax, bx
mov word [rsp + 0x78], ax
movzx eax, word [0x18f88dda2a]
add ax, bx
mov word [rsp + 0x7a], ax
movzx eax, word [0x18f88dda2c]
add ax, bx
mov word [rsp + 0x7c], ax
movzx eax, word [0x18f88dda2e]
add ax, bx
mov word [rsp + 0x7e], ax
movzx eax, word [str.Load_.NET_4:_mscoree.dll_CLRCreateInstance_not_found_n]
add ax, bx
mov word [rbp - 0x80], ax
movzx eax, word [0x18f88dda32]
add ax, bx
mov word [rbp - 0x7e], ax
movzx eax, word [0x18f88dda34]
add ax, bx
mov word [rbp - 0x7c], ax
movzx eax, word [0x18f88dda36]
add ax, bx
mov word [rbp - 0x7a], ax
movzx eax, word [0x18f88dda38]
add ax, bx
mov word [rbp - 0x78], ax
movzx eax, word [0x18f88dda3a]
add ax, bx
mov word [rbp - 0x76], ax
movzx eax, word [0x18f88dda3c]
add ax, bx
mov word [rbp - 0x74], ax
movzx eax, word [0x18f88dda3e]
add ax, bx
mov word [rbp - 0x72], ax
movzx eax, word [0x18f88dda40]
add ax, bx
mov word [rbp - 0x70], ax
movzx eax, word [0x18f88dda42]
add ax, bx
mov word [rbp - 0x6e], ax
movzx eax, word [0x18f88dda44]
add ax, bx
mov word [rbp - 0x6c], ax
movzx eax, word [0x18f88dda46]
add ax, bx
mov word [rbp - 0x6a], ax
movzx eax, word [0x18f88dda48]
add ax, bx
mov word [rbp - 0x68], ax
movzx eax, word [0x18f88dda4a]
add ax, bx
mov word [rbp - 0x66], ax
movzx eax, word [0x18f88dda4c]
add ax, bx
mov word [rbp - 0x64], ax
movzx eax, word [0x18f88dda4e]
add ax, bx
mov word [rbp - 0x62], ax
movzx eax, word [0x18f88dda50]
add ax, bx
mov word [rbp - 0x60], ax
movzx eax, word [0x18f88dda52]
add ax, bx
mov word [rbp - 0x5e], ax
movzx eax, word [0x18f88dda54]
add ax, bx
mov word [rbp - 0x5c], ax
movzx eax, word [0x18f88dda56]
add ax, bx
mov word [rbp - 0x5a], ax
movzx eax, word [0x18f88dda58]
add ax, bx
mov word [rbp - 0x58], ax
movzx eax, word [0x18f88dda5a]
add ax, bx
mov word [rbp - 0x56], ax
movzx eax, word [0x18f88dda5c]
add ax, bx
mov word [rbp - 0x54], ax
mov word [rbp - 0x52], r8w
mov eax, r8d
mov ecx, 0xfff4
lea edx, [rbx + 0x3b]
add word [rsp + rax*2 + 0x20], cx
inc rax
cmp rax, rdx
jb 0x18f88b3524
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x78]
call fcn.18f88bba18
nop
lea r8, [rbp - 8]
mov rdx, rax
mov ecx, dword [rdi]
call r13
nop
lea rcx, [rbp + 0x78]
call fcn.18f88baf4c
nop
mov rcx, qword [rbp - 8]
test rcx, rcx
je 0x18f88b4af8
mov rdx, qword [rbp + 8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18f88b4af3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18f88b4b1b
jmp 0x18f88b4af3
lea rdx, str.CLRCreateInstance
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x18f88b3a05
mov rsi, qword [rdi + 0x20]
xorps xmm0, xmm0
movdqu xmmword [rbp - 8], xmm0
mov qword [rbp + 8], r13
mov dword [rsp + 0x20], 0x71004e
mov dword [rsp + 0x24], 0x660063
mov dword [rsp + 0x28], 0x300022
mov dword [rsp + 0x2c], 0x470050
mov dword [rsp + 0x30], 0x220056
mov dword [rsp + 0x34], 0x3c0036
mov dword [rsp + 0x38], 0x6f0022
mov dword [rsp + 0x3c], 0x650075
mov dword [rsp + 0x40], 0x740071
mov dword [rsp + 0x44], 0x670067
mov dword [rsp + 0x48], 0x660030
mov dword [rsp + 0x4c], 0x6e006e
mov dword [rsp + 0x50], 0x450023
mov dword [rsp + 0x54], 0x54004e
mov dword [rsp + 0x58], 0x740045
mov dword [rsp + 0x5c], 0x630067
mov dword [rsp + 0x60], 0x670076
mov dword [rsp + 0x64], 0x70004b
mov dword [rsp + 0x68], 0x760075
mov dword [rsp + 0x6c], 0x700063
mov dword [rsp + 0x70], 0x670065
mov dword [rsp + 0x74], 0x700022
mov dword [rsp + 0x78], 0x760071
mov dword [rsp + 0x7c], 0x680022
mov dword [rbp - 0x80], 0x770071
mov dword [rbp - 0x7c], 0x660070
mov dword [rbp - 0x78], 0x2000c
lea ecx, [rax + 2]
movzx eax, word [0x18f88dda9c]
add ax, cx
mov word [rbp - 0x74], ax
movzx eax, word [0x18f88dda9e]
add ax, cx
mov word [rbp - 0x72], ax
movzx eax, word [str.Load_.NET_4:_CLRCreateInstance_____08X_n]
add ax, cx
mov word [rbp - 0x70], ax
movzx eax, word [0x18f88ddaa2]
add ax, cx
mov word [rbp - 0x6e], ax
movzx eax, word [0x18f88ddaa4]
add ax, cx
mov word [rbp - 0x6c], ax
movzx eax, word [0x18f88ddaa6]
add ax, cx
mov word [rbp - 0x6a], ax
movzx eax, word [0x18f88ddaa8]
add ax, cx
mov word [rbp - 0x68], ax
movzx eax, word [0x18f88ddaaa]
add ax, cx
mov word [rbp - 0x66], ax
movzx eax, word [0x18f88ddaac]
add ax, cx
mov word [rbp - 0x64], ax
movzx eax, word [0x18f88ddaae]
add ax, cx
mov word [rbp - 0x62], ax
movzx eax, word [0x18f88ddab0]
add ax, cx
mov word [rbp - 0x60], ax
movzx eax, word [0x18f88ddab2]
add ax, cx
mov word [rbp - 0x5e], ax
movzx eax, word [0x18f88ddab4]
add ax, cx
mov word [rbp - 0x5c], ax
movzx eax, word [0x18f88ddab6]
add ax, cx
mov word [rbp - 0x5a], ax
movzx eax, word [0x18f88ddab8]
add ax, cx
mov word [rbp - 0x58], ax
movzx eax, word [0x18f88ddaba]
add ax, cx
mov word [rbp - 0x56], ax
movzx eax, word [0x18f88ddabc]
add ax, cx
mov word [rbp - 0x54], ax
movzx eax, word [0x18f88ddabe]
add ax, cx
mov word [rbp - 0x52], ax
movzx eax, word [0x18f88ddac0]
add ax, cx
mov word [rbp - 0x50], ax
movzx eax, word [0x18f88ddac2]
add ax, cx
mov word [rbp - 0x4e], ax
movzx eax, word [0x18f88ddac4]
add ax, cx
mov word [rbp - 0x4c], ax
movzx eax, word [0x18f88ddac6]
add ax, cx
mov word [rbp - 0x4a], ax
movzx eax, word [0x18f88ddac8]
add ax, cx
mov word [rbp - 0x48], ax
movzx eax, word [0x18f88ddaca]
add ax, cx
mov word [rbp - 0x46], ax
movzx eax, word [0x18f88ddacc]
add ax, cx
mov word [rbp - 0x44], ax
movzx eax, word [0x18f88ddace]
add ax, cx
mov word [rbp - 0x42], ax
movzx eax, word [0x18f88ddad0]
add ax, cx
mov word [rbp - 0x40], ax
movzx eax, word [0x18f88ddad2]
add ax, cx
mov word [rbp - 0x3e], ax
movzx eax, word [0x18f88ddad4]
add ax, cx
mov word [rbp - 0x3c], ax
movzx eax, word [0x18f88ddad6]
add ax, cx
mov word [rbp - 0x3a], ax
movzx eax, word [0x18f88ddad8]
add ax, cx
mov word [rbp - 0x38], ax
movzx eax, word [0x18f88ddada]
add ax, cx
mov word [rbp - 0x36], ax
movzx eax, word [0x18f88ddadc]
add ax, cx
mov word [rbp - 0x34], ax
movzx eax, word [0x18f88ddade]
add ax, cx
mov word [rbp - 0x32], ax
movzx eax, word [0x18f88ddae0]
add ax, cx
mov word [rbp - 0x30], ax
movzx eax, word [0x18f88ddae2]
add ax, cx
mov word [rbp - 0x2e], ax
movzx eax, word [0x18f88ddae4]
add ax, cx
mov word [rbp - 0x2c], ax
movzx eax, word [0x18f88ddae6]
add ax, cx
mov word [rbp - 0x2a], ax
movzx eax, word [0x18f88ddae8]
add ax, cx
mov word [rbp - 0x28], ax
movzx eax, word [0x18f88ddaea]
add ax, cx
mov word [rbp - 0x26], ax
movzx eax, word [0x18f88ddaec]
add ax, cx
mov word [rbp - 0x24], ax
movzx eax, word [0x18f88ddaee]
add ax, cx
mov word [rbp - 0x22], ax
movzx eax, word [str.v4.0.30319]
add ax, cx
mov word [rbp - 0x20], ax
movzx eax, word [0x18f88ddaf2]
add ax, cx
mov word [rbp - 0x1e], ax
movzx eax, word [0x18f88ddaf4]
add ax, cx
mov word [rbp - 0x1c], ax
movzx eax, word [0x18f88ddaf6]
add ax, cx
mov word [rbp - 0x1a], ax
movzx eax, word [0x18f88ddaf8]
add ax, cx
mov word [rbp - 0x18], ax
movzx eax, word [0x18f88ddafa]
add ax, cx
mov word [rbp - 0x16], ax
movzx eax, word [0x18f88ddafc]
add ax, cx
mov word [rbp - 0x14], ax
movzx eax, word [0x18f88ddafe]
add ax, cx
mov word [rbp - 0x12], ax
movzx eax, word [0x18f88ddb00]
add ax, cx
mov word [rbp - 0x10], ax
movzx eax, word [0x18f88ddb02]
add ax, cx
mov word [rbp - 0xe], ax
movzx eax, word [0x18f88ddb04]
add ax, cx
mov word [rbp - 0xc], ax
xor r15d, r15d
mov word [rbp - 0xa], r15w
mov eax, r15d
mov ecx, 0xfffe
add word [rsp + rax*2 + 0x20], cx
inc rax
cmp rax, 0x6b
jb 0x18f88b3990
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x78]
call fcn.18f88bba18
nop
lea r8, [rbp - 8]
mov rdx, rax
mov ecx, dword [rdi]
call rsi
nop
lea rcx, [rbp + 0x78]
call fcn.18f88baf4c
nop
mov rcx, qword [rbp - 8]
test rcx, rcx
je 0x18f88b4af8
mov rdx, qword [rbp + 8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18f88b4af3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18f88b4b21
jmp 0x18f88b4af3
mov qword [rbp + 0xf0], r13
mov dword [rbp + 0x38], 0x9280188d
mov dword [rbp + 0x3c], 0x48670e8e
mov dword [rbp + 0x40], 0xa87f0cb3
mov ebx, 0xc
mov dword [rbp + 0x44], 0xdee88438
mov dword [rbp + 0x28], 0xd332db9e
mov dword [rbp + 0x2c], 0x4125b9b3
mov dword [rbp + 0x30], 0x48a10782
mov dword [rbp + 0x34], 0x1632f584
lea r8, [rbp + 0xf0]
lea rdx, [rbp + 0x28]
lea rcx, [rbp + 0x38]
call rax
mov r8d, eax
test eax, eax
jns 0x18f88b3dab
mov rbx, qword [rdi + 0x20]
xorps xmm0, xmm0
movdqu xmmword [rbp - 8], xmm0
mov qword [rbp + 8], r13
mov ecx, 0xdd21
mov dword [rsp + 0x20], 0xdd6ddd21
mov dword [rsp + 0x24], 0xdd40dd4e
mov dword [rsp + 0x28], 0xdd01dd45
mov dword [rsp + 0x2c], 0xdd6fdd0f
mov dword [rsp + 0x30], 0xdd75dd64
mov dword [rsp + 0x34], 0xdd15dd01
mov dword [rsp + 0x38], 0xdd01dd1b
mov dword [rsp + 0x3c], 0xdd6ddd62
mov dword [rsp + 0x40], 0xdd62dd73
mov dword [rsp + 0x44], 0xdd44dd53
mov dword [rsp + 0x48], 0xdd55dd40
mov dword [rsp + 0x4c], 0xdd68dd44
mov dword [rsp + 0x50], 0xdd52dd4f
mov dword [rsp + 0x54], 0xdd40dd55
mov dword [rsp + 0x58], 0xdd42dd4f
mov dword [rsp + 0x5c], 0xdd01dd44
mov dword [rsp + 0x60], 0xdd1fdd0c
mov dword [rsp + 0x64], 0xdd04dd01
mov dword [rsp + 0x68], 0xdd19dd11
mov dword [rsp + 0x6c], 0xdd2bdd79
mov word [rsp + 0x70], cx
mov eax, ecx
xor ax, word [str.v4.0.30319]
mov word [rsp + 0x72], ax
mov eax, ecx
xor ax, word [0x18f88ddaf2]
mov word [rsp + 0x74], ax
mov eax, ecx
xor ax, word [0x18f88ddaf4]
mov word [rsp + 0x76], ax
mov eax, ecx
xor ax, word [0x18f88ddaf6]
mov word [rsp + 0x78], ax
mov eax, ecx
xor ax, word [0x18f88ddaf8]
mov word [rsp + 0x7a], ax
mov eax, ecx
xor ax, word [0x18f88ddafa]
mov word [rsp + 0x7c], ax
mov eax, ecx
xor ax, word [0x18f88ddafc]
mov word [rsp + 0x7e], ax
mov eax, ecx
xor ax, word [0x18f88ddafe]
mov word [rbp - 0x80], ax
mov eax, ecx
xor ax, word [0x18f88ddb00]
mov word [rbp - 0x7e], ax
mov eax, ecx
xor ax, word [0x18f88ddb02]
mov word [rbp - 0x7c], ax
mov eax, ecx
xor ax, word [0x18f88ddb04]
mov word [rbp - 0x7a], ax
mov eax, ecx
xor ax, word [0x18f88ddb06]
mov word [rbp - 0x78], ax
mov eax, ecx
xor ax, word [0x18f88ddb08]
mov word [rbp - 0x76], ax
mov eax, ecx
xor ax, word [0x18f88ddb0a]
mov word [rbp - 0x74], ax
mov eax, ecx
xor ax, word [0x18f88ddb0c]
mov word [rbp - 0x72], ax
mov eax, ecx
xor ax, word [0x18f88ddb0e]
mov word [rbp - 0x70], ax
mov eax, ecx
xor ax, word [str.Load_.NET_4:_GetRuntime_____08X_n]
mov word [rbp - 0x6e], ax
mov eax, ecx
xor ax, word [0x18f88ddb12]
mov word [rbp - 0x6c], ax
mov eax, ecx
xor ax, word [0x18f88ddb14]
mov word [rbp - 0x6a], ax
mov eax, ecx
xor ax, word [0x18f88ddb16]
mov word [rbp - 0x68], ax
mov eax, ecx
xor ax, word [0x18f88ddb18]
mov word [rbp - 0x66], ax
mov eax, ecx
xor ax, word [0x18f88ddb1a]
mov word [rbp - 0x64], ax
mov eax, ecx
xor ax, word [0x18f88ddb1c]
mov word [rbp - 0x62], ax
mov eax, ecx
xor ax, word [0x18f88ddb1e]
mov word [rbp - 0x60], ax
mov eax, ecx
xor ax, word [0x18f88ddb20]
mov word [rbp - 0x5e], ax
mov eax, ecx
xor ax, word [0x18f88ddb22]
mov word [rbp - 0x5c], ax
mov eax, ecx
xor ax, word [0x18f88ddb24]
mov word [rbp - 0x5a], ax
mov eax, ecx
xor ax, word [0x18f88ddb26]
mov word [rbp - 0x58], ax
mov eax, ecx
xor ax, word [0x18f88ddb28]
mov word [rbp - 0x56], ax
mov eax, ecx
xor ax, word [0x18f88ddb2a]
mov word [rbp - 0x54], ax
mov eax, ecx
xor ax, word [0x18f88ddb2c]
mov word [rbp - 0x52], ax
mov eax, ecx
xor ax, word [0x18f88ddb2e]
mov word [rbp - 0x50], ax
mov eax, ecx
xor ax, word [0x18f88ddb30]
mov word [rbp - 0x4e], ax
mov eax, ecx
xor ax, word [0x18f88ddb32]
mov word [rbp - 0x4c], ax
mov eax, ecx
xor ax, word [0x18f88ddb34]
mov word [rbp - 0x4a], ax
mov eax, ecx
xor ax, word [0x18f88ddb36]
mov word [rbp - 0x48], ax
mov eax, ecx
xor ax, word [0x18f88ddb38]
mov word [rbp - 0x46], ax
mov eax, ecx
xor ax, word [0x18f88ddb3a]
mov word [rbp - 0x44], ax
mov eax, ecx
xor ax, word [0x18f88ddb3c]
mov word [rbp - 0x42], ax
xor eax, eax
mov word [rbp - 0x40], ax
mov rax, r13
xor word [rsp + rax*2 + 0x22], cx
inc rax
cmp rax, 0x4f
jae 0x18f88b3d3f
movzx ecx, word [rsp + 0x20]
jmp 0x18f88b3d2a
mov word [rbp - 0x40], r13w
lea rdx, [rsp + 0x22]
lea rcx, [rbp + 0x78]
call fcn.18f88bba18
nop
lea r8, [rbp - 8]
mov rdx, rax
mov ecx, dword [rdi]
call rbx
nop
lea rcx, [rbp + 0x78]
call fcn.18f88baf4c
nop
mov rcx, qword [rbp - 8]
test rcx, rcx
je 0x18f88b4af8
mov rdx, qword [rbp + 8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18f88b4af3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18f88b4b27
jmp 0x18f88b4af3
mov qword [rbp + 0xf8], r13
mov dword [rbp + 0x48], 0xbd39d1d2
mov dword [rbp + 0x4c], 0x486aba2f
mov dword [rbp + 0x50], 0xb0b4b089
mov dword [rbp + 0x54], 0x916846cb
mov rax, qword [rbp + 0xf0]
mov rcx, qword [rax]
mov rsi, qword [rcx + 0x18]
mov dword [rbp - 8], 0x360078
mov dword [rbp - 4], 0x320030
mov dword [rbp], 0x350030
mov dword [rbp + 4], 0x350032
mov dword [rbp + 8], 0x3b0033
mov ecx, 2
mov word [rbp + 0xc], cx
movzx eax, word [0x18f88ddb06]
add ax, cx
mov word [rbp + 0xe], ax
movzx eax, word [0x18f88ddb08]
add ax, cx
mov word [rbp + 0x10], ax
movzx eax, word [0x18f88ddb0a]
add ax, cx
mov word [rbp + 0x12], ax
movzx eax, word [0x18f88ddb0c]
add ax, cx
mov word [rbp + 0x14], ax
movzx eax, word [0x18f88ddb0e]
add ax, cx
mov word [rbp + 0x16], ax
movzx eax, word [str.Load_.NET_4:_GetRuntime_____08X_n]
add ax, cx
mov word [rbp + 0x18], ax
movzx eax, word [0x18f88ddb12]
add ax, cx
mov word [rbp + 0x1a], ax
movzx eax, word [0x18f88ddb14]
add ax, cx
mov word [rbp + 0x1c], ax
movzx eax, word [0x18f88ddb16]
add ax, cx
mov word [rbp + 0x1e], ax
movzx eax, word [0x18f88ddb18]
add ax, cx
mov word [rbp + 0x20], ax
mov word [rbp + 0x22], r13w
mov rax, r13
mov ecx, 0xfffe
mov edx, 0x15
add word [rbp + rax*2 - 8], cx
inc rax
cmp rax, rdx
jb 0x18f88b3ea6
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x78]
call fcn.18f88bba18
nop
cmp qword [rax + 0x18], 8
jb 0x18f88b3ecb
mov rax, qword [rax]
lea r9, [rbp + 0xf8]
lea r8, [rbp + 0x48]
mov rdx, rax
mov rcx, qword [rbp + 0xf0]
call rsi
mov esi, eax
lea rcx, [rbp + 0x78]
call fcn.18f88baf4c
test esi, esi
jns 0x18f88b41cd
mov rbx, qword [rdi + 0x20]
xorps xmm0, xmm0
movdqu xmmword [rbp - 8], xmm0
mov qword [rbp + 8], r13
mov ecx, 0xdd77
mov dword [rsp + 0x20], 0xdd3bdd77
mov dword [rsp + 0x24], 0xdd16dd18
mov dword [rsp + 0x28], 0xdd57dd13
mov dword [rsp + 0x2c], 0xdd39dd59
mov dword [rsp + 0x30], 0xdd23dd32
mov dword [rsp + 0x34], 0xdd43dd57
mov dword [rsp + 0x38], 0xdd57dd4d
mov dword [rsp + 0x3c], 0xdd12dd30
mov dword [rsp + 0x40], 0xdd25dd03
mov dword [rsp + 0x44], 0xdd19dd02
mov dword [rsp + 0x48], 0xdd1edd03
mov dword [rsp + 0x4c], 0xdd12dd1a
mov dword [rsp + 0x50], 0xdd5add57
mov dword [rsp + 0x54], 0xdd57dd49
mov dword [rsp + 0x58], 0xdd47dd52
mov dword [rsp + 0x5c], 0xdd2fdd4f
mov dword [rsp + 0x60], 0xdd77dd7d
mov eax, ecx
xor ax, word [0x18f88ddb52]
mov word [rsp + 0x64], ax
mov eax, ecx
xor ax, word [0x18f88ddb54]
mov word [rsp + 0x66], ax
mov eax, ecx
xor ax, word [0x18f88ddb56]
mov word [rsp + 0x68], ax
mov eax, ecx
xor ax, word [0x18f88ddb58]
mov word [rsp + 0x6a], ax
mov eax, ecx
xor ax, word [0x18f88ddb5a]
mov word [rsp + 0x6c], ax
mov eax, ecx
xor ax, word [0x18f88ddb5c]
mov word [rsp + 0x6e], ax
mov eax, ecx
xor ax, word [0x18f88ddb5e]
mov word [rsp + 0x70], ax
mov eax, ecx
xor ax, word [str.Load_.NET_4:_IsLoadable_____08X_n]
mov word [rsp + 0x72], ax
mov eax, ecx
xor ax, word [0x18f88ddb62]
mov word [rsp + 0x74], ax
mov eax, ecx
xor ax, word [0x18f88ddb64]
mov word [rsp + 0x76], ax
mov eax, ecx
xor ax, word [0x18f88ddb66]
mov word [rsp + 0x78], ax
mov eax, ecx
xor ax, word [0x18f88ddb68]
mov word [rsp + 0x7a], ax
mov eax, ecx
xor ax, word [0x18f88ddb6a]
mov word [rsp + 0x7c], ax
mov eax, ecx
xor ax, word [0x18f88ddb6c]
mov word [rsp + 0x7e], ax
mov eax, ecx
xor ax, word [0x18f88ddb6e]
mov word [rbp - 0x80], ax
mov eax, ecx
xor ax, word [0x18f88ddb70]
mov word [rbp - 0x7e], ax
mov eax, ecx
xor ax, word [0x18f88ddb72]
mov word [rbp - 0x7c], ax
mov eax, ecx
xor ax, word [0x18f88ddb74]
mov word [rbp - 0x7a], ax
mov eax, ecx
xor ax, word [0x18f88ddb76]
mov word [rbp - 0x78], ax
mov eax, ecx
xor ax, word [0x18f88ddb78]
mov word [rbp - 0x76], ax
mov eax, ecx
xor ax, word [0x18f88ddb7a]
mov word [rbp - 0x74], ax
mov eax, ecx
xor ax, word [0x18f88ddb7c]
mov word [rbp - 0x72], ax
mov eax, ecx
xor ax, word [0x18f88ddb7e]
mov word [rbp - 0x70], ax
mov eax, ecx
xor ax, word [0x18f88ddb80]
mov word [rbp - 0x6e], ax
mov eax, ecx
xor ax, word [0x18f88ddb82]
mov word [rbp - 0x6c], ax
mov eax, ecx
xor ax, word [0x18f88ddb84]
mov word [rbp - 0x6a], ax
mov eax, ecx
xor ax, word [0x18f88ddb86]
mov word [rbp - 0x68], ax
mov eax, ecx
xor ax, word [0x18f88ddb88]
mov word [rbp - 0x66], ax
mov eax, ecx
xor ax, word [0x18f88ddb8a]
mov word [rbp - 0x64], ax
mov eax, ecx
xor ax, word [0x18f88ddb8c]
mov word [rbp - 0x62], ax
mov eax, ecx
xor ax, word [0x18f88ddb8e]
mov word [rbp - 0x60], ax
mov eax, ecx
xor ax, word [0x18f88ddb90]
mov word [rbp - 0x5e], ax
xor eax, eax
mov word [rbp - 0x5c], ax
mov rax, r13
xor word [rsp + rax*2 + 0x22], cx
inc rax
cmp rax, 0x41
jae 0x18f88b415e
movzx ecx, word [rsp + 0x20]
jmp 0x18f88b4149
mov word [rbp - 0x5c], r13w
mov r8d, esi
lea rdx, [rsp + 0x22]
lea rcx, [rbp + 0x78]
call fcn.18f88bba18
nop
lea r8, [rbp - 8]
mov rdx, rax
mov ecx, dword [rdi]
call rbx
nop
lea rcx, [rbp + 0x78]
call fcn.18f88baf4c
nop
mov rcx, qword [rbp - 8]
test rcx, rcx
je 0x18f88b4af8
mov rdx, qword [rbp + 8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18f88b4af3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18f88b4b2d
jmp 0x18f88b4af3
mov dword [rbp + 0xe0], 1
mov rcx, qword [rbp + 0xf8]
mov rax, qword [rcx]
lea rdx, [rbp + 0xe0]
call qword [rax + 0x50]
mov r8d, eax
test eax, eax
js 0x18f88b4819
cmp dword [rbp + 0xe0], r13d
je 0x18f88b4819
mov dword [rbp + 0x68], 0xcb2f6723
mov dword [rbp + 0x6c], 0x11d2ab3a
mov dword [rbp + 0x70], 0xc000409c
mov dword [rbp + 0x74], 0x3e0aa34f
mov dword [rbp + 0x58], 0xcb2f6722
mov dword [rbp + 0x5c], 0x11d2ab3a
mov dword [rbp + 0x60], 0xc000409c
mov dword [rbp + 0x64], 0x3e0aa34f
mov rcx, qword [rbp + 0xf8]
mov rax, qword [rcx]
lea r9, [0x18f88e5410]
lea r8, [rbp + 0x58]
lea rdx, [rbp + 0x68]
call qword [rax + 0x48]
mov r8d, eax
test eax, eax
jns 0x18f88b4571
mov r13, qword [rdi + 0x20]
xorps xmm0, xmm0
movdqu xmmword [rbp - 8], xmm0
xor r15d, r15d
mov qword [rbp + 8], r15
mov dword [rsp + 0x20], 0x7b0058
mov dword [rsp + 0x24], 0x70006d
mov dword [rsp + 0x28], 0x3a002c
mov dword [rsp + 0x2c], 0x51005a
mov dword [rsp + 0x30], 0x2c0060
mov dword [rsp + 0x34], 0x460040
mov dword [rsp + 0x38], 0x53002c
mov dword [rsp + 0x3c], 0x800071
mov dword [rsp + 0x40], 0x7a0055
mov dword [rsp + 0x44], 0x710080
mov dword [rsp + 0x48], 0x72007e
mov dword [rsp + 0x4c], 0x6f006d
mov dword [rsp + 0x50], 0x2c0071
mov dword [rsp + 0x54], 0x4a0039
mov dword [rsp + 0x58], 0x31002c
mov dword [rsp + 0x5c], 0x44003c
mov dword [rsp + 0x60], 0x160064
mov word [rsp + 0x64], bx
movzx eax, word [0x18f88ddbf6]
add ax, bx
mov word [rsp + 0x66], ax
movzx eax, word [str.Load_.NET_4:_Start_____08X_n]
add ax, bx
mov word [rsp + 0x68], ax
movzx eax, word [0x18f88ddbfa]
add ax, bx
mov word [rsp + 0x6a], ax
movzx eax, word [0x18f88ddbfc]
add ax, bx
mov word [rsp + 0x6c], ax
movzx eax, word [0x18f88ddbfe]
add ax, bx
mov word [rsp + 0x6e], ax
movzx eax, word [0x18f88ddc00]
add ax, bx
mov word [rsp + 0x70], ax
movzx eax, word [0x18f88ddc02]
add ax, bx
mov word [rsp + 0x72], ax
movzx eax, word [0x18f88ddc04]
add ax, bx
mov word [rsp + 0x74], ax
movzx eax, word [0x18f88ddc06]
add ax, bx
mov word [rsp + 0x76], ax
movzx eax, word [0x18f88ddc08]
add ax, bx
mov word [rsp + 0x78], ax
movzx eax, word [0x18f88ddc0a]
add ax, bx
mov word [rsp + 0x7a], ax
movzx eax, word [0x18f88ddc0c]
add ax, bx
mov word [rsp + 0x7c], ax
movzx eax, word [0x18f88ddc0e]
add ax, bx
mov word [rsp + 0x7e], ax
movzx eax, word [0x18f88ddc10]
add ax, bx
mov word [rbp - 0x80], ax
movzx eax, word [0x18f88ddc12]
add ax, bx
mov word [rbp - 0x7e], ax
movzx eax, word [0x18f88ddc14]
add ax, bx
mov word [rbp - 0x7c], ax
movzx eax, word [0x18f88ddc16]
add ax, bx
mov word [rbp - 0x7a], ax
movzx eax, word [0x18f88ddc18]
add ax, bx
mov word [rbp - 0x78], ax
movzx eax, word [0x18f88ddc1a]
add ax, bx
mov word [rbp - 0x76], ax
movzx eax, word [0x18f88ddc1c]
add ax, bx
mov word [rbp - 0x74], ax
movzx eax, word [0x18f88ddc1e]
add ax, bx
mov word [rbp - 0x72], ax
movzx eax, word [0x18f88ddc20]
add ax, bx
mov word [rbp - 0x70], ax
movzx eax, word [0x18f88ddc22]
add ax, bx
mov word [rbp - 0x6e], ax
movzx eax, word [0x18f88ddc24]
add ax, bx
mov word [rbp - 0x6c], ax
movzx eax, word [0x18f88ddc26]
add ax, bx
mov word [rbp - 0x6a], ax
movzx eax, word [0x18f88ddc28]
add ax, bx
mov word [rbp - 0x68], ax
movzx eax, word [0x18f88ddc2a]
add ax, bx
mov word [rbp - 0x66], ax
movzx eax, word [0x18f88ddc2c]
add ax, bx
mov word [rbp - 0x64], ax
movzx eax, word [0x18f88ddc2e]
add ax, bx
mov word [rbp - 0x62], ax
movzx eax, word [str.Loaded_.NET_4_n]
add ax, bx
mov word [rbp - 0x60], ax
movzx eax, word [0x18f88ddc32]
add ax, bx
mov word [rbp - 0x5e], ax
movzx eax, word [0x18f88ddc34]
add ax, bx
mov word [rbp - 0x5c], ax
movzx eax, word [0x18f88ddc36]
add ax, bx
mov word [rbp - 0x5a], ax
movzx eax, word [0x18f88ddc38]
add ax, bx
mov word [rbp - 0x58], ax
xor ebx, ebx
mov word [rbp - 0x56], bx
mov eax, ebx
mov ecx, 0xfff4
lea r11d, [r15 + 0x45]
add word [rsp + rax*2 + 0x20], cx
inc rax
cmp rax, r11
jb 0x18f88b44fc
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x78]
call fcn.18f88bba18
nop
lea r8, [rbp - 8]
mov rdx, rax
mov ecx, dword [rdi]
call r13
nop
lea rcx, [rbp + 0x78]
call fcn.18f88baf4c
nop
mov rcx, qword [rbp - 8]
test rcx, rcx
je 0x18f88b4af8
mov rdx, qword [rbp + 8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18f88b4af3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18f88b4b33
jmp 0x18f88b4af3
mov rcx, qword [0x18f88e5410]
mov rax, qword [rcx]
call qword [rax + 0x50]
mov r8d, eax
test eax, eax
jns 0x18f88b480f
mov rbx, qword [rdi + 0x20]
xorps xmm0, xmm0
movdqu xmmword [rbp - 8], xmm0
mov qword [rbp + 8], r13
mov ecx, 0x9b82
mov dword [rsp + 0x20], 0x9bce9b82
mov dword [rsp + 0x24], 0x9be39bed
mov dword [rsp + 0x28], 0x9ba29be6
mov dword [rsp + 0x2c], 0x9bcc9bac
mov dword [rsp + 0x30], 0x9bd69bc7
mov dword [rsp + 0x34], 0x9bb69ba2
mov dword [rsp + 0x38], 0x9ba29bb8
mov dword [rsp + 0x3c], 0x9bf69bd1
mov dword [rsp + 0x40], 0x9bf09be3
mov dword [rsp + 0x44], 0x9ba29bf6
mov dword [rsp + 0x48], 0x9bbc9baf
mov dword [rsp + 0x4c], 0x9ba79ba2
mov dword [rsp + 0x50], 0x9bba9bb2
mov dword [rsp + 0x54], 0x9b889bda
mov word [rsp + 0x58], cx
mov eax, ecx
xor ax, word [str.Loaded_.NET_4_n]
mov word [rsp + 0x5a], ax
mov eax, ecx
xor ax, word [0x18f88ddc32]
mov word [rsp + 0x5c], ax
mov eax, ecx
xor ax, word [0x18f88ddc34]
mov word [rsp + 0x5e], ax
mov eax, ecx
xor ax, word [0x18f88ddc36]
mov word [rsp + 0x60], ax
mov eax, ecx
xor ax, word [0x18f88ddc38]
mov word [rsp + 0x62], ax
mov eax, ecx
xor ax, word [0x18f88ddc3a]
mov word [rsp + 0x64], ax
mov eax, ecx
xor ax, word [0x18f88ddc3c]
mov word [rsp + 0x66], ax
mov eax, ecx
xor ax, word [0x18f88ddc3e]
mov word [rsp + 0x68], ax
mov eax, ecx
xor ax, word [0x18f88ddc40]
mov word [rsp + 0x6a], ax
mov eax, ecx
xor ax, word [0x18f88ddc42]
mov word [rsp + 0x6c], ax
mov eax, ecx
xor ax, word [0x18f88ddc44]
mov word [rsp + 0x6e], ax
mov eax, ecx
xor ax, word [0x18f88ddc46]
mov word [rsp + 0x70], ax
mov eax, ecx
xor ax, word [0x18f88ddc48]
mov word [rsp + 0x72], ax
mov eax, ecx
xor ax, word [0x18f88ddc4a]
mov word [rsp + 0x74], ax
mov eax, ecx
xor ax, word [0x18f88ddc4c]
mov word [rsp + 0x76], ax
mov eax, ecx
xor ax, word [0x18f88ddc4e]
mov word [rsp + 0x78], ax
mov eax, ecx
xor ax, word [str.Loaded_.NET_2_n]
mov word [rsp + 0x7a], ax
mov eax, ecx
xor ax, word [0x18f88ddc52]
mov word [rsp + 0x7c], ax
mov eax, ecx
xor ax, word [0x18f88ddc54]
mov word [rsp + 0x7e], ax
mov eax, ecx
xor ax, word [0x18f88ddc56]
mov word [rbp - 0x80], ax
mov eax, ecx
xor ax, word [0x18f88ddc58]
mov word [rbp - 0x7e], ax
mov eax, ecx
xor ax, word [0x18f88ddc5a]
mov word [rbp - 0x7c], ax
mov eax, ecx
xor ax, word [0x18f88ddc5c]
mov word [rbp - 0x7a], ax
mov eax, ecx
xor ax, word [0x18f88ddc5e]
mov word [rbp - 0x78], ax
mov eax, ecx
xor ax, word [0x18f88ddc60]
mov word [rbp - 0x76], ax
mov eax, ecx
xor ax, word [0x18f88ddc62]
mov word [rbp - 0x74], ax
mov eax, ecx
xor ax, word [0x18f88ddc64]
mov word [rbp - 0x72], ax
xor eax, eax
mov word [rbp - 0x70], ax
mov rax, r13
xor word [rsp + rax*2 + 0x22], cx
inc rax
cmp rax, 0x37
jae 0x18f88b47a3
movzx ecx, word [rsp + 0x20]
jmp 0x18f88b478e
mov word [rbp - 0x70], r13w
lea rdx, [rsp + 0x22]
lea rcx, [rbp + 0x78]
call fcn.18f88bba18
nop
lea r8, [rbp - 8]
mov rdx, rax
mov ecx, dword [rdi]
call rbx
nop
lea rcx, [rbp + 0x78]
call fcn.18f88baf4c
nop
mov rcx, qword [rbp - 8]
test rcx, rcx
je 0x18f88b4af8
mov rdx, qword [rbp + 8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18f88b4af3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18f88b4b39
jmp 0x18f88b4af3
mov eax, 1
jmp 0x18f88b4afa
mov rbx, qword [rdi + 0x20]
xorps xmm0, xmm0
movdqu xmmword [rbp - 8], xmm0
mov qword [rbp + 8], r13
mov dword [rsp + 0x20], 0x7a0057
mov dword [rsp + 0x24], 0x6f006c
mov dword [rsp + 0x28], 0x39002b
mov dword [rsp + 0x2c], 0x500059
mov dword [rsp + 0x30], 0x2b005f
mov dword [rsp + 0x34], 0x45003f
mov dword [rsp + 0x38], 0x54002b
mov dword [rsp + 0x3c], 0x57007e
mov dword [rsp + 0x40], 0x6c007a
mov dword [rsp + 0x44], 0x6c006f
mov dword [rsp + 0x48], 0x77006d
mov dword [rsp + 0x4c], 0x2b0070
mov dword [rsp + 0x50], 0x490038
mov dword [rsp + 0x54], 0x30002b
mov dword [rsp + 0x58], 0x43003b
mov dword [rsp + 0x5c], 0x150063
mov ecx, 0xb
mov word [rsp + 0x60], cx
movzx eax, word [0x18f88ddba2]
add ax, cx
mov word [rsp + 0x62], ax
movzx eax, word [0x18f88ddba4]
add ax, cx
mov word [rsp + 0x64], ax
movzx eax, word [0x18f88ddba6]
add ax, cx
mov word [rsp + 0x66], ax
movzx eax, word [0x18f88ddba8]
add ax, cx
mov word [rsp + 0x68], ax
movzx eax, word [0x18f88ddbaa]
add ax, cx
mov word [rsp + 0x6a], ax
movzx eax, word [0x18f88ddbac]
add ax, cx
mov word [rsp + 0x6c], ax
movzx eax, word [0x18f88ddbae]
add ax, cx
mov word [rsp + 0x6e], ax
movzx eax, word [str.Load_.NET_4:_GetInterface_____08X_n]
add ax, cx
mov word [rsp + 0x70], ax
movzx eax, word [0x18f88ddbb2]
add ax, cx
mov word [rsp + 0x72], ax
movzx eax, word [0x18f88ddbb4]
add ax, cx
mov word [rsp + 0x74], ax
movzx eax, word [0x18f88ddbb6]
add ax, cx
mov word [rsp + 0x76], ax
movzx eax, word [0x18f88ddbb8]
add ax, cx
mov word [rsp + 0x78], ax
movzx eax, word [0x18f88ddbba]
add ax, cx
mov word [rsp + 0x7a], ax
movzx eax, word [0x18f88ddbbc]
add ax, cx
mov word [rsp + 0x7c], ax
movzx eax, word [0x18f88ddbbe]
add ax, cx
mov word [rsp + 0x7e], ax
movzx eax, word [0x18f88ddbc0]
add ax, cx
mov word [rbp - 0x80], ax
movzx eax, word [0x18f88ddbc2]
add ax, cx
mov word [rbp - 0x7e], ax
movzx eax, word [0x18f88ddbc4]
add ax, cx
mov word [rbp - 0x7c], ax
movzx eax, word [0x18f88ddbc6]
add ax, cx
mov word [rbp - 0x7a], ax
movzx eax, word [0x18f88ddbc8]
add ax, cx
mov word [rbp - 0x78], ax
movzx eax, word [0x18f88ddbca]
add ax, cx
mov word [rbp - 0x76], ax
movzx eax, word [0x18f88ddbcc]
add ax, cx
mov word [rbp - 0x74], ax
movzx eax, word [0x18f88ddbce]
add ax, cx
mov word [rbp - 0x72], ax
movzx eax, word [0x18f88ddbd0]
add ax, cx
mov word [rbp - 0x70], ax
movzx eax, word [0x18f88ddbd2]
add ax, cx
mov word [rbp - 0x6e], ax
movzx eax, word [0x18f88ddbd4]
add ax, cx
mov word [rbp - 0x6c], ax
movzx eax, word [0x18f88ddbd6]
add ax, cx
mov word [rbp - 0x6a], ax
movzx eax, word [0x18f88ddbd8]
add ax, cx
mov word [rbp - 0x68], ax
movzx eax, word [0x18f88ddbda]
add ax, cx
mov word [rbp - 0x66], ax
movzx eax, word [0x18f88ddbdc]
add ax, cx
mov word [rbp - 0x64], ax
movzx eax, word [0x18f88ddbde]
add ax, cx
mov word [rbp - 0x62], ax
movzx eax, word [0x18f88ddbe0]
add ax, cx
mov word [rbp - 0x60], ax
mov word [rbp - 0x5e], r13w
mov rax, r13
mov ecx, 0xfff5
add word [rsp + rax*2 + 0x20], cx
inc rax
cmp rax, 0x41
jb 0x18f88b4a8a
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x78]
call fcn.18f88bba18
nop
lea r8, [rbp - 8]
mov rdx, rax
mov ecx, dword [rdi]
call rbx
nop
lea rcx, [rbp + 0x78]
call fcn.18f88baf4c
nop
mov rcx, qword [rbp - 8]
test rcx, rcx
je 0x18f88b4af8
mov rdx, qword [rbp + 8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18f88b4af3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18f88b4b15
call fcn.18f88bd1e0
xor eax, eax
mov rbx, qword [rsp + 0x1e8]
add rsp, 0x1a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18f88c3388
int3
call fcn.18f88c3388
int3
call fcn.18f88c3388
int3
call fcn.18f88c3388
int3
call fcn.18f88c3388
int3
call fcn.18f88c3388
int3
call fcn.18f88c3388
int3