Function at 0x180177dcc
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10e0]
mov eax, 0x11e0
call fcn.18026a280
sub rsp, rax
mov qword [rbp + 0x2a8], 0xfffffffffffffffe
mov qword [rsp + 0x1228], rbx
mov r13, r8
mov r14d, edx
mov rsi, rcx
mov byte [rcx + 0x409], 1
mov byte [rcx + 0x488], 1
mov dword [rcx + 0x40c], edx
mov byte [rcx + 0x3f8], 1
mov byte [rcx + 3], r9b
mov dword [rcx + 8], 2
xor edi, edi
mov byte [rcx + 0x48c], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
mov qword [rbp + 0x68], rdi
mov qword [rbp + 0x70], 7
mov word [rbp + 0x58], di
neg r9b
sbb ebx, ebx
and ebx, 0xffffffd8
or r12, 0xffffffffffffffff
test edx, edx
je 0x1801780ac
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp r14d, eax
je 0x1801780ac
mov r15d, 4
mov ecx, dword [0x1802bccdc]
mov rax, qword gs:[0x58]
mov rdx, qword [rax + rcx*8]
mov eax, dword [r15 + rdx]
cmp dword [0x1802c51f8], eax
jle 0x18017808e
lea rcx, [0x1802c51f8]
call fcn.1802696f0
cmp dword [0x1802c51f8], r12d
jne 0x18017808e
lea rax, [rbp + 0x1e8]
mov qword [rbp - 0x60], rax
mov byte [rbp - 0x58], 0x59
mov byte [rbp - 0x57], 0x7a
mov byte [rbp - 0x56], 0x6f
mov byte [rbp - 0x55], 0x78
mov byte [rbp - 0x54], 0x5a
mov byte [rbp - 0x53], 0x7c
mov byte [rbp - 0x52], 0x79
mov byte [rbp - 0x51], 0x6d
mov byte [rbp - 0x50], 0x6f
mov byte [rbp - 0x4f], 0x7d
mov byte [rbp - 0x4e], 0x7d
mov byte [rbp - 0x4d], dil
mov al, byte [rbp - 0x58]
mov ecx, edi
mov al, byte [rbp + rcx - 0x58]
sub al, 0xa
mov byte [rbp + rcx - 0x58], al
inc rcx
cmp rcx, 0xb
jb 0x180177ef8
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e8], xmm0
mov qword [rbp + 0x1f8], rdi
mov qword [rbp + 0x200], rdi
lea rax, [rbp - 0x58]
mov r8, r12
inc r8
cmp byte [rax + r8], dil
jne 0x180177f2a
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x1e8]
call fcn.18007b70c
nop
mov dword [rbp - 0x3c], 0x36
mov byte [rbp - 0x38], 0x5d
mov byte [rbp - 0x37], 0x53
mov byte [rbp - 0x36], 0x44
mov byte [rbp - 0x35], 0x58
mov byte [rbp - 0x34], 0x53
mov byte [rbp - 0x33], 0x5a
mov byte [rbp - 0x32], 5
mov byte [rbp - 0x31], 4
xor eax, eax
mov byte [rbp - 0x30], al
mov al, byte [rbp - 0x38]
mov rdx, rdi
mov al, byte [rbp + rdx - 0x38]
mov ecx, dword [rbp - 0x3c]
xor cl, al
mov byte [rbp + rdx - 0x38], cl
inc rdx
cmp rdx, 8
jb 0x180177f76
mov byte [rbp - 0x30], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x118], xmm1
lea rax, [rbp - 0x38]
mov r8, r12
inc r8
cmp byte [rax + r8], dil
jne 0x180177fac
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0x108]
call fcn.18007b70c
nop
lea rdx, [rbp + 0x108]
lea rcx, [rbp + 0x300]
call fcn.180188b20
nop
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp + 0x1e8]
mov rdx, rax
lea rcx, [0x1802c4720]
call fcn.180104be8
nop
mov rdx, qword [rbp + 0x120]
cmp rdx, 0x10
jb 0x18017803d
inc rdx
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180178038
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180178038
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rbp + 0x118], xmm0
mov byte [rbp + 0x108], dil
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rbp - 0x38]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xc]
lea rcx, [rbp - 0x58]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027ddf8]
call fcn.18026951c
nop
lea rcx, [0x1802c51f8]
call fcn.180269690
mov r9d, r14d
lea edx, [rbx + 0x438]
lea rcx, [0x1802c4720]
call fcn.180105724
mov qword [rsi + 0x400], rax
jmp 0x1801780dc
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsi + 0x400], rax
mov byte [rsi + 0x48a], 1
cmp qword [r13 + 0x10], rdi
je 0x1801780cf
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r14d, eax
mov byte [rsi + 0x489], dil
mov r15d, 4
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rsi + 0x400], rdi
jne 0x1801780fc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, 0xb35
jmp 0x180179a7a
mov rbx, rdi
mov qword [rbp + 0x50], rbx
test r14d, r14d
je 0x18017843a
mov ecx, dword [0x1802bccdc]
mov rax, qword gs:[0x58]
mov rdx, qword [rax + rcx*8]
mov eax, dword [r15 + rdx]
cmp dword [0x1802c468c], eax
jle 0x180178419
lea rcx, [0x1802c468c]
call fcn.1802696f0
cmp dword [0x1802c468c], r12d
jne 0x180178419
lea rax, [rbp + 0x208]
mov qword [rbp - 0x60], rax
mov ebx, 9
mov dword [rsp + 0x68], ebx
mov eax, dword [rsp + 0x68]
xor al, 0x43
mov byte [rsp + 0x6c], al
mov eax, dword [rsp + 0x68]
inc al
xor al, 0x72
mov byte [rsp + 0x6d], al
mov eax, dword [rsp + 0x68]
add al, 2
mov dl, 0x65
xor al, dl
mov byte [rsp + 0x6e], al
mov eax, dword [rsp + 0x68]
add al, 3
xor al, 0x61
mov byte [rsp + 0x6f], al
mov eax, dword [rsp + 0x68]
add al, 4
xor al, 0x74
mov byte [rsp + 0x70], al
mov eax, dword [rsp + 0x68]
add al, 5
xor al, dl
mov byte [rsp + 0x71], al
mov eax, dword [rsp + 0x68]
add al, 6
xor al, 0x54
mov byte [rsp + 0x72], al
mov eax, dword [rsp + 0x68]
add al, 7
mov cl, 0x6f
xor al, cl
mov byte [rsp + 0x73], al
mov eax, dword [rsp + 0x68]
add al, 8
xor al, cl
mov byte [rsp + 0x74], al
mov eax, dword [rsp + 0x68]
add al, bl
xor al, 0x6c
mov byte [rsp + 0x75], al
mov eax, dword [rsp + 0x68]
add al, 0xa
xor al, 0x68
mov byte [rsp + 0x76], al
mov eax, dword [rsp + 0x68]
add al, 0xb
xor al, dl
mov byte [rsp + 0x77], al
mov eax, dword [rsp + 0x68]
add al, 0xc
xor al, 0x6c
mov byte [rsp + 0x78], al
mov eax, dword [rsp + 0x68]
add al, 0xd
xor al, 0x70
mov byte [rsp + 0x79], al
mov eax, dword [rsp + 0x68]
add al, 0xe
xor al, 0x33
mov byte [rsp + 0x7a], al
mov eax, dword [rsp + 0x68]
add al, 0xf
xor al, 0x32
mov byte [rsp + 0x7b], al
mov eax, dword [rsp + 0x68]
add al, 0x10
xor al, 0x53
mov byte [rsp + 0x7c], al
mov eax, dword [rsp + 0x68]
add al, 0x11
xor al, 0x6e
mov byte [rsp + 0x7d], al
mov eax, dword [rsp + 0x68]
add al, 0x12
xor al, 0x61
mov byte [rsp + 0x7e], al
mov eax, dword [rsp + 0x68]
add al, 0x13
xor al, 0x70
mov byte [rsp + 0x7f], al
mov eax, dword [rsp + 0x68]
add al, 0x14
xor al, 0x73
mov byte [rbp - 0x80], al
mov eax, dword [rsp + 0x68]
add al, 0x15
xor al, 0x68
mov byte [rbp - 0x7f], al
mov eax, dword [rsp + 0x68]
add al, 0x16
xor al, cl
mov byte [rbp - 0x7e], al
mov eax, dword [rsp + 0x68]
add al, 0x17
xor al, 0x74
mov byte [rbp - 0x7d], al
xor eax, eax
mov byte [rbp - 0x7c], al
mov al, byte [rsp + 0x6c]
mov rdx, rdi
mov al, byte [rsp + rdx + 0x6c]
mov ecx, dword [rsp + 0x68]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x6c], cl
inc rdx
cmp rdx, 0x18
jb 0x180178286
mov byte [rbp - 0x7c], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x208], xmm0
mov qword [rbp + 0x218], rdi
mov qword [rbp + 0x220], rdi
lea rax, [rsp + 0x6c]
mov r8, r12
inc r8
cmp byte [rax + r8], dil
jne 0x1801782c3
lea rdx, [rsp + 0x6c]
lea rcx, [rbp + 0x208]
call fcn.18007b70c
nop
mov byte [rbp - 0x78], 0x74
mov byte [rbp - 0x77], 0x6e
mov byte [rbp - 0x76], 0x7b
mov byte [rbp - 0x75], 0x77
mov byte [rbp - 0x74], 0x6e
mov byte [rbp - 0x73], 0x75
mov byte [rbp - 0x72], 0x3c
mov byte [rbp - 0x71], 0x3b
mov byte [rbp - 0x70], dil
mov al, byte [rbp - 0x78]
mov rcx, rdi
mov al, byte [rbp + rcx - 0x78]
sub al, bl
mov byte [rbp + rcx - 0x78], al
inc rcx
cmp rcx, 8
jb 0x180178308
xorps xmm0, xmm0
movups xmmword [rbp + 0x128], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x138], xmm1
lea rax, [rbp - 0x78]
mov r8, r12
inc r8
cmp byte [rax + r8], dil
jne 0x180178337
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x128]
call fcn.18007b70c
nop
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0x320]
call fcn.180188b20
nop
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp + 0x208]
mov rdx, rax
lea rcx, [0x1802c47b0]
call fcn.18008908c
nop
mov rdx, qword [rbp + 0x140]
cmp rdx, 0x10
jb 0x1801783c8
inc rdx
mov rcx, qword [rbp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801783c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1801783c3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rbp + 0x138], xmm0
mov byte [rbp + 0x128], dil
mov r8, rbx
xor edx, edx
lea rcx, [rbp - 0x78]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x19]
lea rcx, [rsp + 0x6c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027ddec]
call fcn.18026951c
nop
lea rcx, [0x1802c468c]
call fcn.180269690
mov r8d, r14d
mov edx, 8
lea rcx, [0x1802c47b0]
call fcn.180089bc8
mov rbx, rax
mov qword [rbp + 0x50], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12b
je 0x18017844a
test r14d, r14d
jne 0x180178b22
cmp qword [r13 + 0x10], rdi
jne 0x180178b22
xorps xmm0, xmm0
movups xmmword [rbp + 0x2d0], xmm0
movups xmmword [rbp + 0x2e0], xmm0
movups xmmword [rbp + 0x2f0], xmm0
mov r13d, 0x400
mov r8d, r13d
xor edx, edx
lea rcx, [rbp + 0xce0]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x800]
call sub.VCRUNTIME140.dll_memset
mov r9d, 0x104
lea r8, [rbp + 0x800]
xor edx, edx
mov rcx, qword [rsi + 0x400]
call qword [sym.imp.KERNEL32.dll_K32GetModuleFileNameExW]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1d8], xmm1
lea rax, [rbp + 0x800]
mov r8, r12
inc r8
cmp word [rax + r8*2], di
jne 0x1801784d2
lea rdx, [rbp + 0x800]
lea rcx, [rbp + 0x1c8]
call fcn.18007b5dc
mov rdx, qword [rbp + 0x70]
mov r14d, 0x1000
cmp rdx, 8
jb 0x180178534
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, r14
jb 0x18017852f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18017852f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
mov qword [rbp + 0x68], rdi
mov qword [rbp + 0x70], 7
mov word [rbp + 0x58], di
mov r8d, 0x20
lea rdx, [rbp + 0x1c8]
lea rcx, [rbp + 0x58]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
movdqa xmm0, xmmword [0x180280dd0]
movdqu xmmword [rbp + 0x1d8], xmm0
mov word [rbp + 0x1c8], di
lea rcx, [rbp + 0x1c8]
call fcn.18007a444
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
cmp qword [rsi + 0x400], rax
jne 0x1801785bb
mov rbx, qword gs:[0x60]
test rbx, rbx
je 0x180179a85
mov rbx, qword [rbx + 0x10]
mov r8, r13
mov rdx, rbx
lea rcx, [rbp + 0xce0]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
jmp 0x180178afa
xor edx, edx
mov r8d, 0x2c8
lea rcx, [rbp + 0xa10]
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [0x1802bccdc]
mov rax, qword gs:[0x58]
mov rbx, qword [rax + rcx*8]
mov eax, dword [rbx + r15]
cmp dword [0x1802c4688], eax
jle 0x18017882e
lea rcx, [0x1802c4688]
call fcn.1802696f0
cmp dword [0x1802c4688], r12d
jne 0x18017882e
lea rax, [rbp + 0x228]
mov qword [rbp - 0x60], rax
mov dword [rbp + 0x30], 0x6b
mov byte [rbp + 0x34], 0x25
mov byte [rbp + 0x35], 0x1f
mov byte [rbp + 0x36], 0x3a
mov byte [rbp + 0x37], 0x1e
mov byte [rbp + 0x38], 0xe
mov byte [rbp + 0x39], 0x19
mov byte [rbp + 0x3a], 0x12
mov byte [rbp + 0x3b], 0x22
mov byte [rbp + 0x3c], 5
mov byte [rbp + 0x3d], 0xd
mov byte [rbp + 0x3e], 4
mov byte [rbp + 0x3f], 0x19
mov byte [rbp + 0x40], 6
mov byte [rbp + 0x41], 0xa
mov byte [rbp + 0x42], 0x1f
mov byte [rbp + 0x43], 2
mov byte [rbp + 0x44], 4
mov byte [rbp + 0x45], 5
mov byte [rbp + 0x46], 0x3b
mov byte [rbp + 0x47], 0x19
mov byte [rbp + 0x48], 4
mov byte [rbp + 0x49], 8
mov byte [rbp + 0x4a], 0xe
mov byte [rbp + 0x4b], 0x18
mov byte [rbp + 0x4c], 0x18
xor eax, eax
mov byte [rbp + 0x4d], al
mov al, byte [rbp + 0x34]
mov rdx, rdi
mov al, byte [rbp + rdx + 0x34]
mov ecx, dword [rbp + 0x30]
xor cl, al
mov byte [rbp + rdx + 0x34], cl
inc rdx
cmp rdx, 0x19
jb 0x18017868c
mov byte [rbp + 0x4d], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x228], xmm0
mov qword [rbp + 0x238], rdi
mov qword [rbp + 0x240], rdi
lea rax, [rbp + 0x34]
mov r8, r12
inc r8
cmp byte [rax + r8], dil
jne 0x1801786c5
lea rdx, [rbp + 0x34]
lea rcx, [rbp + 0x228]
call fcn.18007b70c
nop
mov byte [rbp + 0x1120], 0x73
mov byte [rbp + 0x1121], 0x79
mov byte [rbp + 0x1122], 0x69
mov byte [rbp + 0x1123], 0x71
mov byte [rbp + 0x1124], 0x71
mov byte [rbp + 0x1125], dil
mov al, byte [rbp + 0x1120]
mov rcx, rdi
mov al, byte [rbp + rcx + 0x1120]
sub al, 5
mov byte [rbp + rcx + 0x1120], al
inc rcx
cmp rcx, 5
jb 0x180178712
xorps xmm0, xmm0
movups xmmword [rbp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x158], xmm1
lea rax, [rbp + 0x1120]
mov r8, r12
inc r8
cmp byte [rax + r8], dil
jne 0x18017874a
lea rdx, [rbp + 0x1120]
lea rcx, [rbp + 0x148]
call fcn.18007b70c
nop
lea rdx, [rbp + 0x148]
lea rcx, [rbp + 0x340]
call fcn.180188b20
nop
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp + 0x228]
mov rdx, rax
lea rcx, [0x1802c4b10]
call fcn.18017cc00
nop
mov rdx, qword [rbp + 0x160]
cmp rdx, 0x10
jb 0x1801787da
inc rdx
mov rcx, qword [rbp + 0x148]
mov rax, rcx
cmp rdx, r14
jb 0x1801787d5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1801787d5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rbp + 0x158], xmm0
mov byte [rbp + 0x148], dil
xor edx, edx
lea r8d, [rdx + 6]
lea rcx, [rbp + 0x1120]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x1a]
lea rcx, [rbp + 0x34]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027dde0]
call fcn.18026951c
nop
lea rcx, [0x1802c4688]
call fcn.180269690
lea r13, [0x1802c4ce0]
mov eax, dword [rbx + r15]
cmp dword [0x1802c4c28], eax
jle 0x180178a57
lea rcx, [0x1802c4c28]
call fcn.1802696f0
cmp dword [0x1802c4c28], r12d
jne 0x180178a57
lea rax, [rbp + 0x248]
mov qword [rbp + 0xa0], rax
mov dword [rbp - 0xc], 0x60
mov byte [rbp - 8], 0x32
mov byte [rbp - 7], 5
mov byte [rbp - 6], 1
mov byte [rbp - 5], 4
mov byte [rbp - 4], 0x30
mov byte [rbp - 3], 0x12
mov byte [rbp - 2], 0xf
mov byte [rbp - 1], 3
mov byte [rbp], 5
mov byte [rbp + 1], 0x13
mov byte [rbp + 2], 0x13
mov byte [rbp + 3], 0x2d
mov byte [rbp + 4], 5
mov byte [rbp + 5], 0xd
mov byte [rbp + 6], 0xf
mov byte [rbp + 7], 0x12
mov byte [rbp + 8], 0x19
xor eax, eax
mov byte [rbp + 9], al
mov al, byte [rbp - 8]
mov rdx, rdi
mov al, byte [rbp + rdx - 8]
mov ecx, dword [rbp - 0xc]
xor cl, al
mov byte [rbp + rdx - 8], cl
inc rdx
cmp rdx, 0x11
jb 0x1801788c2
mov byte [rbp + 9], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x248], xmm0
mov qword [rbp + 0x258], rdi
mov qword [rbp + 0x260], rdi
lea rax, [rbp - 8]
mov r8, r12
inc r8
cmp byte [rax + r8], dil
jne 0x1801788fb
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x248]
call fcn.18007b70c
nop
mov dword [rbp - 0x2c], 0x27
mov byte [rbp - 0x28], 0x4c
mov byte [rbp - 0x27], 0x42
mov byte [rbp - 0x26], 0x55
mov byte [rbp - 0x25], 0x49
mov byte [rbp - 0x24], 0x42
mov byte [rbp - 0x23], 0x4b
mov byte [rbp - 0x22], 0x14
mov byte [rbp - 0x21], 0x15
xor eax, eax
mov byte [rbp - 0x20], al
mov al, byte [rbp - 0x28]
mov rdx, rdi
mov al, byte [rbp + rdx - 0x28]
mov ecx, dword [rbp - 0x2c]
xor cl, al
mov byte [rbp + rdx - 0x28], cl
inc rdx
cmp rdx, 8
jb 0x180178947
mov byte [rbp - 0x20], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x168], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x178], xmm1
lea rax, [rbp - 0x28]
inc r12
cmp byte [rax + r12], dil
jne 0x18017897a
mov r8, r12
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x168]
call fcn.18007b70c
nop
lea rdx, [rbp + 0x168]
lea rcx, [rbp + 0x360]
call fcn.180188b20
nop
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp + 0x248]
mov rdx, rax
mov rcx, r13
call fcn.180180580
nop
mov rdx, qword [rbp + 0x180]
cmp rdx, 0x10
jb 0x180178a06
inc rdx
mov rcx, qword [rbp + 0x168]
mov rax, rcx
cmp rdx, r14
jb 0x180178a01
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180178a01
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rbp + 0x178], xmm0
mov byte [rbp + 0x168], dil
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rbp - 0x28]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x12]
lea rcx, [rbp - 8]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027ddd4]
call fcn.18026951c
nop
lea rcx, [0x1802c4c28]
call fcn.180269690
lea rax, [rbp + 0x1138]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x2d0]
mov rdx, qword [rsi + 0x400]
lea rcx, [0x1802c4b10]
call fcn.18017d73c
lea rax, [rbp + 0x98]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x2c8
lea r9, [rbp + 0xa10]
mov r8, qword [rbp + 0x2d8]
mov rdx, qword [rsi + 0x400]
mov rcx, r13
call fcn.1801810bc
test eax, eax
je 0x180179a85
mov rbx, qword [rbp + 0xa20]
lea rax, [rbp + 0x98]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x400
lea r9, [rbp + 0xce0]
mov r8, rbx
mov rdx, qword [rsi + 0x400]
mov rcx, r13
call fcn.1801810bc
test eax, eax
je 0x180179a85
mov r13d, 0x400
movsxd rcx, dword [rbp + 0xd1c]
lea rax, [rcx + 0x108]
cmp rax, r13
ja 0x180179a85
mov r14d, dword [rbp + rcx + 0xd30]
mov byte [rsi + 4], 1
jmp 0x18017982a
lea rax, [rbx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x180179a6e
mov ecx, dword [0x1802bccdc]
mov rax, qword gs:[0x58]
mov rbx, qword [rax + rcx*8]
mov eax, dword [rbx + r15]
cmp dword [0x1802c4c48], eax
jle 0x180178dca
lea rcx, [0x1802c4c48]
call fcn.1802696f0
cmp dword [0x1802c4c48], r12d
jne 0x180178dca
lea rax, [rbp + 0x268]
mov qword [rbp + 0xa0], rax
mov dword [rsp + 0x30], 0x4d
mov eax, dword [rsp + 0x30]
xor al, 0x4d
mov byte [rsp + 0x34], al
mov eax, dword [rsp + 0x30]
inc al
xor al, 0x6f
mov byte [rsp + 0x35], al
mov eax, dword [rsp + 0x30]
add al, 2
xor al, 0x64
mov byte [rsp + 0x36], al
mov eax, dword [rsp + 0x30]
add al, 3
xor al, 0x75
mov byte [rsp + 0x37], al
mov eax, dword [rsp + 0x30]
add al, 4
xor al, 0x6c
mov byte [rsp + 0x38], al
mov eax, dword [rsp + 0x30]
add al, 5
xor al, 0x65
mov byte [rsp + 0x39], al
mov eax, dword [rsp + 0x30]
add al, 6
xor al, 0x33
mov byte [rsp + 0x3a], al
mov eax, dword [rsp + 0x30]
add al, 7
xor al, 0x32
mov byte [rsp + 0x3b], al
mov eax, dword [rsp + 0x30]
add al, 8
xor al, 0x46
mov byte [rsp + 0x3c], al
mov eax, dword [rsp + 0x30]
add al, 9
xor al, 0x69
mov byte [rsp + 0x3d], al
mov eax, dword [rsp + 0x30]
add al, 0xa
xor al, 0x72
mov byte [rsp + 0x3e], al
mov eax, dword [rsp + 0x30]
add al, 0xb
xor al, 0x73
mov byte [rsp + 0x3f], al
mov eax, dword [rsp + 0x30]
add al, 0xc
xor al, 0x74
mov byte [rsp + 0x40], al
mov eax, dword [rsp + 0x30]
add al, 0xd
xor al, 0x57
mov byte [rsp + 0x41], al
xor eax, eax
mov byte [rsp + 0x42], al
mov al, byte [rsp + 0x34]
mov rdx, rdi
mov al, byte [rsp + rdx + 0x34]
mov ecx, dword [rsp + 0x30]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x34], cl
inc rdx
cmp rdx, 0xe
jb 0x180178c35
mov byte [rsp + 0x42], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x268], xmm0
mov qword [rbp + 0x278], rdi
mov qword [rbp + 0x280], rdi
lea rax, [rsp + 0x34]
mov r8, r12
inc r8
cmp byte [rax + r8], dil
jne 0x180178c73
lea rdx, [rsp + 0x34]
lea rcx, [rbp + 0x268]
call fcn.18007b70c
nop
mov byte [rbp - 0x6f], 0x74
mov byte [rbp - 0x6e], 0x6e
mov byte [rbp - 0x6d], 0x7b
mov byte [rbp - 0x6c], 0x77
mov byte [rbp - 0x6b], 0x6e
mov byte [rbp - 0x6a], 0x75
mov byte [rbp - 0x69], 0x3c
mov byte [rbp - 0x68], 0x3b
mov byte [rbp - 0x67], dil
mov al, byte [rbp - 0x6f]
mov rcx, rdi
mov al, byte [rbp + rcx - 0x6f]
sub al, 9
mov byte [rbp + rcx - 0x6f], al
inc rcx
cmp rcx, 8
jb 0x180178cb8
xorps xmm0, xmm0
movups xmmword [rbp + 0x188], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x198], xmm1
lea rax, [rbp - 0x6f]
mov r8, r12
inc r8
cmp byte [rax + r8], dil
jne 0x180178ce7
lea rdx, [rbp - 0x6f]
lea rcx, [rbp + 0x188]
call fcn.18007b70c
nop
lea rdx, [rbp + 0x188]
lea rcx, [rbp + 0x380]
call fcn.180188b20
nop
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp + 0x268]
mov rdx, rax
lea rcx, [0x1802c4840]
call fcn.18017d7cc
nop
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 0x10
jb 0x180178d78
inc rdx
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180178d73
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180178d73
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rbp + 0x198], xmm0
mov byte [rbp + 0x188], dil
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rbp - 0x6f]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xf]
lea rcx, [rsp + 0x34]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027ddc8]
call fcn.18026951c
nop
lea rcx, [0x1802c4c48]
call fcn.180269690
mov eax, dword [rbx + r15]
cmp dword [0x1802c4c44], eax
jle 0x180178fd5
lea rcx, [0x1802c4c44]
call fcn.1802696f0
cmp dword [0x1802c4c44], r12d
jne 0x180178fd5
lea rax, [rbp + 0x288]
mov qword [rbp + 0xa0], rax
mov byte [rbp - 0x4c], 0x56
mov byte [rbp - 0x4b], 0x78
mov byte [rbp - 0x4a], 0x6d
mov byte [rbp - 0x49], 0x7e
mov byte [rbp - 0x48], 0x75
mov byte [rbp - 0x47], 0x6e
mov byte [rbp - 0x46], 0x3c
mov byte [rbp - 0x45], 0x3b
mov byte [rbp - 0x44], 0x57
mov byte [rbp - 0x43], 0x6e
mov byte [rbp - 0x42], 0x81
mov byte [rbp - 0x41], 0x7d
mov byte [rbp - 0x40], 0x60
mov byte [rbp - 0x3f], dil
mov al, byte [rbp - 0x4c]
mov rcx, rdi
mov al, byte [rbp + rcx - 0x4c]
sub al, 9
mov byte [rbp + rcx - 0x4c], al
inc rcx
cmp rcx, 0xd
jb 0x180178e3f
xorps xmm0, xmm0
movups xmmword [rbp + 0x288], xmm0
mov qword [rbp + 0x298], rdi
mov qword [rbp + 0x2a0], rdi
lea rax, [rbp - 0x4c]
mov r8, r12
inc r8
cmp byte [rax + r8], dil
jne 0x180178e71
lea rdx, [rbp - 0x4c]
lea rcx, [rbp + 0x288]
call fcn.18007b70c
nop
mov dword [rbp - 0x1c], 0x20
mov byte [rbp - 0x18], 0x4b
mov byte [rbp - 0x17], 0x45
mov byte [rbp - 0x16], 0x52
mov byte [rbp - 0x15], 0x4e
mov byte [rbp - 0x14], 0x45
mov byte [rbp - 0x13], 0x4c
mov byte [rbp - 0x12], 0x13
mov byte [rbp - 0x11], 0x12
xor eax, eax
mov byte [rbp - 0x10], al
mov al, byte [rbp - 0x18]
mov rdx, rdi
mov al, byte [rbp + rdx - 0x18]
mov ecx, dword [rbp - 0x1c]
xor cl, al
mov byte [rbp + rdx - 0x18], cl
inc rdx
cmp rdx, 8
jb 0x180178ebd
mov byte [rbp - 0x10], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1b8], xmm1
lea rax, [rbp - 0x18]
mov r8, r12
inc r8
cmp byte [rax + r8], dil
jne 0x180178ef3
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x1a8]
call fcn.18007b70c
nop
lea rdx, [rbp + 0x1a8]
lea rcx, [rbp + 0x3a0]
call fcn.180188b20
nop
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp + 0x288]
mov rdx, rax
lea rcx, [0x1802c5170]
call fcn.18017d7cc
nop
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0x10
jb 0x180178f84
inc rdx
mov rcx, qword [rbp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180178f7f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180178f7f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rbp + 0x1b8], xmm0
mov byte [rbp + 0x1a8], dil
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rbp - 0x18]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xe]
lea rcx, [rbp - 0x4c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027ddbc]
call fcn.18026951c
nop
lea rcx, [0x1802c4c44]
call fcn.180269690
mov ebx, 0x438
mov r8d, ebx
xor edx, edx
lea rcx, [rbp + 0x3c0]
call sub.VCRUNTIME140.dll_memset
mov r8d, ebx
xor edx, edx
lea rcx, [rbp + 0x3c0]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov dword [rbp + 0x3c0], ebx
lea r8, [rbp + 0x3c0]
mov rbx, qword [rbp + 0x50]
mov rdx, rbx
lea rcx, [0x1802c4840]
call fcn.180087840
test eax, eax
jne 0x180179045
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov dword [rsi + 0x440], ebx
jmp 0x180179a85
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], rdi
mov qword [rbp + 0x28], rdi
lea rax, [rbp + 0x3f0]
mov r8, r12
inc r8
cmp word [rax + r8*2], di
jne 0x18017905e
lea rdx, [rbp + 0x3f0]
lea rcx, [rbp + 0x10]
call fcn.18007b5dc
nop
lea rcx, [rbp + 0x10]
cmp qword [rbp + 0x28], 8
cmovae rcx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x20]
lea r8, [rcx + rax*2]
lea rdx, [rbp + 0x10]
cmovae rdx, qword [rbp + 0x10]
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], rdi
cmp rdx, r8
jne 0x1801790c9
mov rbx, rdi
mov qword [rsp + 0x58], rbx
mov r14d, 0xf
mov qword [rsp + 0x60], r14
mov byte [rsp + 0x48], dil
jmp 0x1801790e6
mov r9, r8
sub r9, rdx
sar r9, 1
lea rcx, [rsp + 0x48]
call fcn.18007dc1c
mov r14, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x58]
mov rax, qword [r13 + 0x10]
mov r9, r13
cmp qword [r13 + 0x18], 0x10
jb 0x1801790f8
mov r9, qword [r13]
lea rcx, [rsp + 0x48]
mov r15, qword [rsp + 0x48]
cmp r14, 0x10
cmovae rcx, r15
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, rbx
call fcn.180095ce4
cmp rax, r12
jne 0x180179644
lea rdx, [rsp + 0x48]
cmp r14, 0x10
cmovae rdx, r15
mov qword [rbp + 0x98], rdx
mov rcx, r13
mov qword [rbp + 0x1120], rcx
cmp qword [r13 + 0x18], 0x10
jb 0x180179153
mov rcx, qword [r13]
mov qword [rbp + 0x1120], rcx
mov rax, qword [r13 + 0x10]
cmp rbx, rax
ja 0x1801791cb
sub rax, rbx
test rbx, rbx
je 0x180179644
inc rax
add rax, rcx
mov qword [rbp - 0x60], rax
movsx edx, byte [rdx]
mov dword [rbp + 0x1138], edx
mov r8, rax
sub r8, rcx
jmp 0x1801791ac
mov r8, rbx
mov rdx, qword [rbp + 0x98]
mov rcx, r13
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1801791bb
inc r13
mov r8, qword [rbp - 0x60]
sub r8, r13
mov edx, dword [rbp + 0x1138]
mov rcx, r13
call sub.VCRUNTIME140.dll_memchr
test rax, rax
mov r13, rax
jne 0x180179183
jmp 0x1801791cb
sub r13, qword [rbp + 0x1120]
cmp r13, r12
jne 0x180179644
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x2c0], xmm1
lea rax, [rbp + 0x3f0]
mov r8, r12
inc r8
cmp word [rax + r8*2], di
jne 0x1801791ea
lea rdx, [rbp + 0x3f0]
lea rcx, [rbp + 0x2b0]
call fcn.18007b5dc
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x18017924a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180179245
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180179245
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
mov qword [rbp + 0x20], rdi
mov qword [rbp + 0x28], 7
mov word [rbp + 0x10], di
mov ebx, 0x20
mov r8d, ebx
lea rdx, [rbp + 0x2b0]
lea rcx, [rbp + 0x10]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
lea rcx, [rbp + 0x10]
cmp qword [rbp + 0x28], 8
cmovae rcx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x20]
lea r8, [rcx + rax*2]
lea rdx, [rbp + 0x10]
cmovae rdx, qword [rbp + 0x10]
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x88], xmm1
cmp rdx, r8
jne 0x1801792ba
mov qword [rbp + 0x90], 0xf
mov byte [rbp + 0x78], dil
jmp 0x1801792cc
mov r9, r8
sub r9, rdx
sar r9, 1
lea rcx, [rbp + 0x78]
call fcn.18007dc1c
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x18017930c
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180179307
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180179307
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], 0xf
mov byte [rsp + 0x48], dil
mov r8, rbx
lea rdx, [rbp + 0x78]
lea rcx, [rsp + 0x48]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
lea rcx, [rsp + 0x48]
mov r15, qword [rsp + 0x48]
mov r14, qword [rsp + 0x60]
cmp r14, 0x10
cmovae rcx, r15
lea rax, [rsp + 0x48]
cmovae rax, r15
mov rbx, qword [rsp + 0x58]
add rax, rbx
lea r13, [rsp + 0x48]
cmp r14, 0x10
cmovae r13, r15
cmp r13, rax
je 0x18017939a
sub rcx, r13
mov rbx, rcx
mov r14, rax
movzx ecx, byte [r13]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [rbx + r13], al
inc r13
cmp r13, r14
jne 0x180179374
mov r15, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x58]
mov r14, qword [rsp + 0x60]
mov r13, qword [rbp + 0x1130]
mov rax, qword [r13 + 0x10]
mov r9, r13
cmp qword [r13 + 0x18], 0x10
jb 0x1801793b3
mov r9, qword [r13]
lea rcx, [rsp + 0x48]
cmp r14, 0x10
setae byte [rbp + 0x1138]
cmovae rcx, r15
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, rbx
call fcn.180095ce4
cmp rax, r12
jne 0x1801796a2
lea r9, [rsp + 0x48]
cmp byte [rbp + 0x1138], dil
cmovne r9, r15
mov rcx, r13
cmp qword [r13 + 0x18], 0x10
jb 0x1801793fe
mov rcx, qword [r13]
mov qword [rsp + 0x20], rbx
xor r8d, r8d
mov rdx, qword [r13 + 0x10]
call fcn.180095ce4
cmp rax, r12
jne 0x1801796a2
lea r8, [rbp + 0x3c0]
mov rdx, qword [rbp + 0x50]
lea rcx, [0x1802c5170]
call fcn.180087840
test eax, eax
je 0x180179594
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
mov qword [rbp + 0x88], rdi
mov qword [rbp + 0x90], rdi
lea rax, [rbp + 0x3f0]
mov r8, r12
inc r8
cmp word [rax + r8*2], di
jne 0x180179456
lea rdx, [rbp + 0x3f0]
lea rcx, [rbp + 0x78]
call fcn.18007b5dc
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x10]
call fcn.18008c67c
lea rcx, [rbp + 0x78]
call fcn.18007a444
lea rcx, [rbp + 0x10]
cmp qword [rbp + 0x28], 8
cmovae rcx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x20]
lea r8, [rcx + rax*2]
lea rdx, [rbp + 0x10]
cmovae rdx, qword [rbp + 0x10]
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
mov qword [rbp + 0x88], rdi
mov qword [rbp + 0x90], rdi
cmp rdx, r8
jne 0x1801794d0
mov qword [rbp + 0x90], 0xf
mov byte [rbp + 0x78], dil
jmp 0x1801794e2
mov r9, r8
sub r9, rdx
sar r9, 1
lea rcx, [rbp + 0x78]
call fcn.18007dc1c
lea rdx, [rbp + 0x78]
lea rcx, [rsp + 0x48]
call fcn.18008c7b4
mov rdx, qword [rbp + 0x90]
cmp rdx, 0x10
jb 0x18017952a
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180179525
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18017958d
call fcn.180269534
lea rcx, [rsp + 0x48]
mov r15, qword [rsp + 0x48]
mov r14, qword [rsp + 0x60]
cmp r14, 0x10
cmovae rcx, r15
lea rax, [rsp + 0x48]
cmovae rax, r15
mov rbx, qword [rsp + 0x58]
add rax, rbx
lea r13, [rsp + 0x48]
cmp r14, 0x10
cmovae r13, r15
cmp r13, rax
je 0x18017939a
sub rcx, r13
mov rbx, rcx
mov r14, rax
movzx ecx, byte [r13]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [rbx + r13], al
inc r13
cmp r13, r14
jne 0x180179571
jmp 0x18017938b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov r8d, 0xbd7
mov rcx, rsi
call fcn.1801728a8
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x1801795e8
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801795e3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801797cc
call fcn.180269534
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], 0xf
mov byte [rsp + 0x48], dil
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x180179a85
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18017963a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18017981e
call fcn.180269534
jmp 0x180179a85
lea rcx, [rsi + 0x10]
lea rax, [rsp + 0x48]
cmp rcx, rax
je 0x1801796a2
lea r9, [rsp + 0x48]
cmp r14, 0x10
cmovae r9, r15
cmp rbx, qword [rcx + 0x18]
ja 0x18017968b
mov r14, rcx
cmp qword [rcx + 0x18], 0x10
jb 0x180179672
mov r14, qword [rcx]
mov qword [rcx + 0x10], rbx
mov r8, rbx
mov rdx, r9
mov rcx, r14
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov byte [rbx + r14], dil
jmp 0x180179693
mov rdx, rbx
call fcn.180095a98
mov r15, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x58]
mov r14, qword [rsp + 0x60]
lea r8, [rsp + 0x48]
cmp r14, 0x10
cmovae r8, r15
add r8, rbx
lea rdx, [rsp + 0x48]
cmp r14, 0x10
cmovae rdx, r15
xorps xmm0, xmm0
movups xmmword [rbp + 0xc8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd8], xmm1
cmp rdx, r8
jne 0x1801796ed
mov qword [rbp + 0xe0], 7
mov word [rbp + 0xc8], di
jmp 0x1801796ff
mov r9, r8
sub r9, rdx
lea rcx, [rbp + 0xc8]
call fcn.1800963e0
mov rdx, qword [rbp + 0x70]
mov r15d, 0x1000
cmp rdx, 8
jb 0x180179744
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, r15
jb 0x18017973f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18017973f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
mov qword [rbp + 0x68], rdi
mov qword [rbp + 0x70], 7
mov word [rbp + 0x58], di
mov r8d, 0x20
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x58]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
movdqa xmm0, xmmword [0x180280dd0]
movdqu xmmword [rbp + 0xd8], xmm0
mov word [rbp + 0xc8], di
lea rcx, [rbp + 0xc8]
call fcn.18007a444
mov rbx, qword [rbp + 0x3d8]
mov r14d, dword [rbp + 0x3e0]
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x1801797d8
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, r15
jb 0x1801797d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1801797d3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], 0xf
mov byte [rsp + 0x48], dil
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x18017982a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, r15
jb 0x180179825
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180179825
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
cmp qword [rbp + 0x68], rdi
je 0x180179a38
test rbx, rbx
je 0x180179a38
test r14, r14
je 0x180179a38
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0xa8]
call fcn.18007a534
nop
lea rcx, [rsi + 0x410]
lea rax, [rbp + 0x58]
cmp rcx, rax
je 0x1801798af
mov r15, qword [rbp + 0x68]
lea r9, [rbp + 0x58]
cmp qword [rbp + 0x70], 8
cmovae r9, qword [rbp + 0x58]
cmp r15, qword [rcx + 0x18]
ja 0x1801798a7
mov r12, rcx
cmp qword [rcx + 0x18], 8
jb 0x18017988c
mov r12, qword [rcx]
mov qword [rcx + 0x10], r15
lea r8, [r15 + r15]
mov rdx, r9
mov rcx, r12
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov word [r12 + r15*2], di
jmp 0x1801798af
mov rdx, r15
call fcn.18007b81c
lea rcx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 8
cmovae rcx, qword [rbp + 0xa8]
mov rax, qword [rbp + 0xb8]
lea r8, [rcx + rax*2]
lea rdx, [rbp + 0xa8]
cmovae rdx, qword [rbp + 0xa8]
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf8], xmm1
cmp rdx, r8
jne 0x18017990e
mov qword [rbp + 0x100], 0xf
mov byte [rbp + 0xe8], dil
jmp 0x180179923
mov r9, r8
sub r9, rdx
sar r9, 1
lea rcx, [rbp + 0xe8]
call fcn.18007dc1c
lea rcx, [rsi + 0x10]
lea rdx, [rbp + 0xe8]
call fcn.18008c7b4
mov rdx, qword [rbp + 0x100]
cmp rdx, 0x10
jb 0x180179977
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180179972
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180179972
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
mov byte [rsi + 4], 1
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
cmp qword [rsi + 0x400], rax
je 0x180179a1a
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rdx, [r14 + 1]
xor ecx, ecx
lea r9d, [rcx + 4]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsi + 0x3f0], rax
test rax, rax
jne 0x1801799c8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov r8d, 0xbf6
jmp 0x1801799f3
mov qword [rsi + 0x68], r14
mov qword [rsi + 0x478], rbx
mov r9, rbx
mov r8, r14
mov rdx, rax
mov rcx, rsi
call fcn.180179ae8
test al, al
jne 0x180179a0a
mov edx, 0x80006
mov r8d, 0xbfe
mov rcx, rsi
call fcn.1801728a8
nop
lea rcx, [rbp + 0xa8]
call fcn.18007a444
jmp 0x180179a85
mov byte [rsi + 0x48c], dil
mov qword [rsi + 0x470], rdi
jmp 0x180179a2c
mov qword [rsi + 0x3f0], rbx
mov qword [rsi + 0x68], r14
mov qword [rsi + 0x478], rbx
lea rcx, [rbp + 0xa8]
call fcn.18007a444
mov rax, qword [rbp + 0x50]
test rax, rax
je 0x180179a4a
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, rsi
cmp qword [rsi + 0x3f0], rdi
jne 0x180179a64
mov r8d, 0xc11
jmp 0x180179a7d
call fcn.180172c1c
mov dil, al
jmp 0x180179a85
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, 0xbb3
mov rcx, rsi
mov edx, eax
call fcn.1801728a8
nop
mov rdx, qword [rbp + 0x70]
cmp rdx, 8
jb 0x180179ac8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180179ac3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180179ac3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
mov al, dil
mov rbx, qword [rsp + 0x1228]
add rsp, 0x11e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret