Function at 0x18000e3f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x328
movaps xmmword [rsp + 0x310], xmm6
mov rsi, rcx
lea rax, [rsp + 0x98]
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x98], 0
lea rax, [rsp + 0x94]
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0xc0]
mov dword [rsp + 0x94], 0x104
lea rax, [rsp + 0x84]
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0xc8]
mov dword [rsp + 0x84], 0
lea rax, [rsp + 0xa8]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0xd0]
lea rax, [rsp + 0x200]
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0xd8]
lea rax, [rsp + 0xf0]
mov qword [rsp + 0xe0], rax
mov rax, qword [rsp + 0xe0]
mov byte [rsp + 0x60], 0
lea rdx, [rsp + 0x61]
mov byte [rsp + 0x61], 0xf
mov byte [rsp + 0x62], 0xe2
mov byte [rsp + 0x63], 0x92
mov byte [rsp + 0x64], 0x9c
mov byte [rsp + 0x65], 0x4d
mov byte [rsp + 0x66], 0x79
mov byte [rsp + 0x67], 0x32
mov byte [rsp + 0x68], 0xbf
mov byte [rsp + 0x69], 0x19
mov byte [rsp + 0x6a], 0x2a
mov byte [rsp + 0x6b], 0x4d
mov byte [rsp + 0x6c], 0x5f
mov byte [rsp + 0x6d], 0x5f
mov byte [rsp + 0x6e], 0x78
mov byte [rsp + 0x6f], 0x19
mov byte [rsp + 0x70], 0xb6
mov byte [rsp + 0x71], 0x4d
mov byte [rsp + 0x72], 0x79
mov byte [rsp + 0x73], 0xc
mov ebx, 0xfb4fc08c
mov r8d, 0x6d6d6862
mov r9d, 0xc121c008
nop word [rax + rax]
cmp ebx, 0xc121c007
jg 0x18000e570
cmp ebx, 0x96736036
je 0x18000e59f
cmp ebx, 0xae7997e8
je 0x18000e64a
cmp ebx, 0xb3a09524
jne 0x18000e540
mov ebx, 0xae7997e8
jmp 0x18000e540
cmp ebx, 0xc121c008
je 0x18000e5b8
cmp ebx, 0x6d6d6862
je 0x18000e5c4
cmp ebx, 0xfb4fc08c
jne 0x18000e540
movzx eax, byte [rsp + 0x60]
mov ebx, eax
xor bl, 0xfe
test bl, al
mov ebx, 0xae7997e8
cmove ebx, r9d
jmp 0x18000e540
mov qword [rsp + 0x40], rbp
mov rax, qword [rsp + 0x40]
cmp rax, 0x13
mov ebx, 0xb3a09524
cmovb ebx, r8d
jmp 0x18000e540
mov ebx, 0x96736036
xor ebp, ebp
jmp 0x18000e540
mov rbp, qword [rsp + 0x40]
movzx eax, byte [rsp + rbp + 0x61]
movzx eax, al
lea ebx, [rax + rax*4]
lea edi, [rbx + rbx*4]
lea ecx, [rax + rdi]
add ecx, 0xfffffec8
add eax, edi
movsx edi, cx
imul edi, edi, 0xffff905b
shr edi, 0x10
add eax, edi
add eax, 0xfffffec8
movzx eax, ax
movsx edi, ax
shr eax, 0xf
sar edi, 7
add edi, eax
imul eax, edi, 0xe3
sub ecx, eax
add ecx, 0xe3
movzx eax, cx
imul eax, eax, 0x20b5
shr eax, 0x10
mov ebx, ecx
sub ebx, eax
movzx ebx, bx
shr ebx, 1
add ebx, eax
shr ebx, 7
imul eax, ebx, 0xe3
sub ecx, eax
mov byte [rsp + rbp + 0x61], cl
mov rbp, qword [rsp + 0x40]
add rbp, 1
mov ebx, 0x96736036
jmp 0x18000e540
mov byte [rsp + 0x40], 0
lea rcx, [rsp + 0x41]
mov byte [rsp + 0x41], 0x35
mov byte [rsp + 0x42], 0x59
mov byte [rsp + 0x43], 0x9b
mov byte [rsp + 0x44], 0x59
mov byte [rsp + 0x45], 0x6e
mov byte [rsp + 0x46], 0x59
mov byte [rsp + 0x47], 0x13
mov byte [rsp + 0x48], 0x59
mov byte [rsp + 0x49], 0x13
mov byte [rsp + 0x4a], 0x59
mov byte [rsp + 0x4b], 0xbe
mov byte [rsp + 0x4c], 0x59
mov byte [rsp + 0x4d], 0xc8
mov byte [rsp + 0x4e], 0x59
mov byte [rsp + 0x4f], 0x6d
mov byte [rsp + 0x50], 0x59
mov byte [rsp + 0x51], 0x6d
mov byte [rsp + 0x52], 0x59
mov byte [rsp + 0x53], 0x59
mov byte [rsp + 0x54], 0x59
mov edi, 0xf61c3f74
mov r8d, 0x8fb6b3e9
mov r9d, 0xaeb039f4
nop dword [rax]
cmp edi, 0x43185bc9
jg 0x18000e710
cmp edi, 0x8fb6b3e9
je 0x18000e737
cmp edi, 0xaeb039f4
je 0x18000e740
cmp edi, 0xf61c3f74
jne 0x18000e6d0
movzx ebx, byte [rsp + 0x40]
mov eax, ebx
xor al, 0xfe
test al, bl
mov edi, 0x43185bca
cmove edi, r8d
jmp 0x18000e6d0
cmp edi, 0x43185bca
je 0x18000e7e3
cmp edi, 0x4bae3f59
je 0x18000e7c7
cmp edi, 0x7e52d970
jne 0x18000e6d0
mov edi, 0x43185bca
jmp 0x18000e6d0
mov edi, 0x4bae3f59
xor ebp, ebp
jmp 0x18000e6d0
mov rbx, qword [rsp + 0x78]
movzx eax, byte [rsp + rbx + 0x41]
movzx eax, al
shl eax, 3
lea eax, [rax + rax*4]
mov ebp, 0xde8
sub ebp, eax
movsx edi, bp
imul edi, edi, 0xffff905b
shr edi, 0x10
sub edi, eax
add edi, 0xde8
movzx eax, di
movsx edi, ax
shr eax, 0xf
sar edi, 7
add edi, eax
imul eax, edi, 0xe3
neg eax
lea edi, [rax + rbp]
add edi, 0xe3
movzx ebp, di
imul ebp, ebp, 0x20b5
shr ebp, 0x10
mov eax, edi
sub eax, ebp
movzx eax, ax
shr eax, 1
add eax, ebp
shr eax, 7
imul eax, eax, 0xe3
sub edi, eax
mov byte [rsp + rbx + 0x41], dil
mov rbp, qword [rsp + 0x78]
add rbp, 1
mov edi, 0x4bae3f59
jmp 0x18000e6d0
mov qword [rsp + 0x78], rbp
mov rax, qword [rsp + 0x78]
cmp rax, 0x14
mov edi, 0x7e52d970
cmovb edi, r9d
jmp 0x18000e6d0
call fcn.180006160
lea r8, [rsp + 0x98]
mov rcx, 0xffffffffffffffff
mov edx, 8
call rax
mov dword [rsp + 0xac], eax
mov eax, 0xa22e95cc
movaps xmm6, xmmword [0x180039560]
lea r14, [0x180039573]
mov r13, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x18000e847
cmp eax, 0xd5b6eed4
jne 0x18000e847
nop
movups xmmword [rsi + 0x10], xmm6
mov byte [rsi], 0
mov rcx, rsi
mov rdx, r14
call fcn.180003350
mov eax, 0xc8a84e7c
cmp eax, 0xe42b4d7a
jg 0x18000e8a0
cmp eax, 0xc6f5f9fc
jg 0x18000e8f0
cmp eax, 0xa22e95cb
jle 0x18000ecb5
cmp eax, 0xa22e95cc
je 0x18000ed62
cmp eax, 0xbc3946d8
je 0x18000e830
cmp eax, 0xc456c57f
jne 0x18000e847
call r13
mov r8, qword [rsp + 0xa0]
mov rcx, rax
xor edx, edx
call r15
mov eax, 0xd5b6eed4
jmp 0x18000e847
cmp eax, 0x33a533e6
jle 0x18000eac0
cmp eax, 0x448a8224
jle 0x18000ecd0
cmp eax, 0x448a8225
je 0x18000ed7c
cmp eax, 0x4dd4429a
je 0x18000ed97
cmp eax, 0x7c63ed90
jne 0x18000e847
mov rdx, qword [rsp + 0xe8]
movups xmmword [rsi + 0x10], xmm6
mov byte [rsi], 0
mov rcx, rsi
jmp 0x18000e83d
cmp eax, 0xca439367
jg 0x18000ed01
cmp eax, 0xc6f5f9fd
je 0x18000edb2
cmp eax, 0xca20e52b
jne 0x18000f585
mov rbx, qword [rsp + 0x98]
mov byte [rsp + 0x60], 0
mov byte [rsp + 0x61], 0x96
mov byte [rsp + 0x62], 0x2e
mov byte [rsp + 0x63], 0xdd
mov byte [rsp + 0x64], 0xe2
mov byte [rsp + 0x65], 0x57
mov byte [rsp + 0x66], 0x74
mov byte [rsp + 0x67], 0x2e
mov byte [rsp + 0x68], 0x97
mov byte [rsp + 0x69], 0x16
mov byte [rsp + 0x6a], 0x97
mov byte [rsp + 0x6b], 0xd1
mov byte [rsp + 0x6c], 0x57
mov byte [rsp + 0x6d], 0x7a
mov byte [rsp + 0x6e], 0xd7
mov byte [rsp + 0x6f], 0x4b
mov byte [rsp + 0x70], 0xdd
mov byte [rsp + 0x71], 0x11
mov byte [rsp + 0x72], 0x57
mov byte [rsp + 0x73], 0x97
mov byte [rsp + 0x74], 0x9a
mov ecx, 0xacc0da08
nop word [rax + rax]
cmp ecx, 0x3db888b7
jg 0x18000e9e0
cmp ecx, 0xa174c0a9
je 0x18000ea82
cmp ecx, 0xacc0da08
je 0x18000ea8c
cmp ecx, 0xe8b8e846
jne 0x18000e990
mov qword [rsp + 0x40], rax
mov rcx, qword [rsp + 0x40]
cmp rcx, 0x14
mov ecx, 0xa174c0a9
mov edx, 0x4a634531
cmovb ecx, edx
jmp 0x18000e990
cmp ecx, 0x3db888b8
je 0x18000edcf
cmp ecx, 0x40dd4726
je 0x18000eaaa
cmp ecx, 0x4a634531
jne 0x18000e990
mov rax, qword [rsp + 0x40]
movzx ecx, byte [rsp + rax + 0x61]
movzx ecx, cl
imul edx, ecx, 0x27
mov edi, edx
add edi, 0xffffe88a
movsx ebp, di
imul ebp, ebp, 0xffff905b
shr ebp, 0x10
add edx, ebp
add edx, 0xffffe88a
movzx edx, dx
movsx ebp, dx
shr edx, 0xf
sar ebp, 7
add ebp, edx
imul edx, ebp, 0xe3
sub edi, edx
add edi, 0xe3
movzx edx, di
imul edx, edx, 0x20b5
shr edx, 0x10
mov ecx, edi
sub ecx, edx
movzx ecx, cx
shr ecx, 1
add ecx, edx
shr ecx, 7
imul ecx, ecx, 0xe3
sub edi, ecx
mov byte [rsp + rax + 0x61], dil
mov rax, qword [rsp + 0x40]
add rax, 1
mov ecx, 0xe8b8e846
jmp 0x18000e990
mov ecx, 0x3db888b8
jmp 0x18000e990
movzx ecx, byte [rsp + 0x60]
mov edx, ecx
xor dl, 0xfe
test dl, cl
mov ecx, 0x3db888b8
mov edx, 0x40dd4726
cmove ecx, edx
jmp 0x18000e990
mov ecx, 0xe8b8e846
xor eax, eax
jmp 0x18000e990
cmp eax, 0x2b708b58
jg 0x18000ed47
cmp eax, 0xe42b4d7b
je 0x18000ef77
cmp eax, 0x2034d86e
jne 0x18000e847
mov r15, r14
mov r14, r13
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x88], rax
mov r12d, dword [rsp + 0x84]
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0xa0], rax
mov rbp, qword [rsp + 0x98]
mov r13, qword [rsp + 0xa0]
mov byte [rsp + 0x60], 0
mov byte [rsp + 0x61], 0x96
mov byte [rsp + 0x62], 0x2e
mov byte [rsp + 0x63], 0xdd
mov byte [rsp + 0x64], 0xe2
mov byte [rsp + 0x65], 0x57
mov byte [rsp + 0x66], 0x74
mov byte [rsp + 0x67], 0x2e
mov byte [rsp + 0x68], 0x97
mov byte [rsp + 0x69], 0x16
mov byte [rsp + 0x6a], 0x97
mov byte [rsp + 0x6b], 0xd1
mov byte [rsp + 0x6c], 0x57
mov byte [rsp + 0x6d], 0x7a
mov byte [rsp + 0x6e], 0xd7
mov byte [rsp + 0x6f], 0x4b
mov byte [rsp + 0x70], 0xdd
mov byte [rsp + 0x71], 0x11
mov byte [rsp + 0x72], 0x57
mov byte [rsp + 0x73], 0x97
mov byte [rsp + 0x74], 0x9a
mov ecx, 0xacc0da08
nop dword [rax]
cmp ecx, 0x3db888b7
jg 0x18000ebe0
cmp ecx, 0xa174c0a9
je 0x18000ec81
cmp ecx, 0xacc0da08
je 0x18000ec8b
cmp ecx, 0xe8b8e846
jne 0x18000eb90
mov qword [rsp + 0x40], rax
mov rcx, qword [rsp + 0x40]
cmp rcx, 0x14
mov ecx, 0xa174c0a9
mov edx, 0x4a634531
cmovb ecx, edx
jmp 0x18000eb90
cmp ecx, 0x3db888b8
je 0x18000ef92
cmp ecx, 0x40dd4726
je 0x18000eca9
cmp ecx, 0x4a634531
jne 0x18000eb90
mov rax, qword [rsp + 0x40]
movzx ecx, byte [rsp + rax + 0x61]
movzx ecx, cl
imul edx, ecx, 0x27
mov ebx, edx
add ebx, 0xffffe88a
movsx edi, bx
imul edi, edi, 0xffff905b
shr edi, 0x10
add edx, edi
add edx, 0xffffe88a
movzx edx, dx
movsx edi, dx
shr edx, 0xf
sar edi, 7
add edi, edx
imul edx, edi, 0xe3
sub ebx, edx
add ebx, 0xe3
movzx edx, bx
imul edx, edx, 0x20b5
shr edx, 0x10
mov ecx, ebx
sub ecx, edx
movzx ecx, cx
shr ecx, 1
add ecx, edx
shr ecx, 7
imul ecx, ecx, 0xe3
sub ebx, ecx
mov byte [rsp + rax + 0x61], bl
mov rax, qword [rsp + 0x40]
add rax, 1
mov ecx, 0xe8b8e846
jmp 0x18000eb90
mov ecx, 0x3db888b8
jmp 0x18000eb90
movzx ecx, byte [rsp + 0x60]
mov edx, ecx
xor dl, 0xfe
test dl, cl
mov ecx, 0x3db888b8
mov edx, 0x40dd4726
cmove ecx, edx
jmp 0x18000eb90
mov ecx, 0xe8b8e846
xor eax, eax
jmp 0x18000eb90
cmp eax, 0x8b7cab67
je 0x18000f139
cmp eax, 0x9ab37ebe
je 0x18000e830
jmp 0x18000e847
cmp eax, 0x33a533e7
je 0x18000f2d0
cmp eax, 0x3a3ddc81
jne 0x18000e847
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
mov eax, 0x323d01fc
mov ecx, 0xca439368
cmove eax, ecx
jmp 0x18000e847
cmp eax, 0xca439368
jne 0x18000e828
mov ebx, dword [rsp + 0x84]
call r13
mov rcx, rax
mov edx, 8
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rcx, rax
mov qword [rsp + 0xb0], rax
test rax, rax
mov eax, 0x2034d86e
mov ecx, 0x2b708b59
cmove eax, ecx
jmp 0x18000e847
cmp eax, 0x2b708b59
je 0x18000e830
cmp eax, 0x323d01fc
je 0x18000e830
jmp 0x18000e847
cmp dword [rsp + 0xac], 0
mov eax, 0xbc3946d8
mov ecx, 0xca20e52b
cmovns eax, ecx
jmp 0x18000e847
cmp qword [rsp + 0x88], 0
mov eax, 0xc6f5f9fd
mov ecx, 0x9ab37ebe
cmove eax, ecx
jmp 0x18000e847
cmp qword [rsp + 0x88], 0
mov eax, 0x33a533e7
mov ecx, 0x7c63ed90
cmove eax, ecx
jmp 0x18000e847
call r13
mov r8, qword [rsp + 0xa0]
mov rcx, rax
xor edx, edx
call r15
mov eax, 0x9ab37ebe
jmp 0x18000e847
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x41], 0xb9
mov byte [rsp + 0x42], 0x11
mov byte [rsp + 0x43], 0x51
mov byte [rsp + 0x44], 0x11
mov byte [rsp + 0x45], 0x8a
mov byte [rsp + 0x46], 0x11
mov byte [rsp + 0x47], 0xb9
mov byte [rsp + 0x48], 0x11
mov byte [rsp + 0x49], 0x77
mov byte [rsp + 0x4a], 0x11
mov byte [rsp + 0x4b], 0x3b
mov byte [rsp + 0x4c], 0x11
mov byte [rsp + 0x4d], 0x41
mov byte [rsp + 0x4e], 0x11
mov byte [rsp + 0x4f], 0x18
mov byte [rsp + 0x50], 0x11
mov byte [rsp + 0x51], 0x57
mov byte [rsp + 0x52], 0x11
mov byte [rsp + 0x53], 0x1f
mov byte [rsp + 0x54], 0x11
mov byte [rsp + 0x55], 0x84
mov byte [rsp + 0x56], 0x11
mov byte [rsp + 0x57], 0x84
mov byte [rsp + 0x58], 0x11
mov byte [rsp + 0x59], 0x11
mov byte [rsp + 0x5a], 0x11
mov ecx, 0x90e482c7
nop dword [rax + rax]
cmp ecx, 0x439d0d96
jg 0x18000ee90
cmp ecx, 0x845fb395
je 0x18000eec5
cmp ecx, 0x90e482c7
je 0x18000eecc
cmp ecx, 0x9226e8cb
jne 0x18000ee60
jmp 0x18000f2ed
cmp ecx, 0x439d0d97
je 0x18000eeeb
cmp ecx, 0x49dbac3f
je 0x18000eef7
cmp ecx, 0x5155dcdc
jne 0x18000ee60
mov qword [rsp + 0x78], rax
mov rcx, qword [rsp + 0x78]
cmp rcx, 0x1a
mov ecx, 0x845fb395
mov edx, 0x49dbac3f
cmovb ecx, edx
jmp 0x18000ee60
mov ecx, 0x9226e8cb
jmp 0x18000ee60
movzx ecx, byte [rsp + 0x40]
not cl
or cl, 0xfe
cmp cl, 0xff
mov ecx, 0x9226e8cb
mov edx, 0x439d0d97
cmove ecx, edx
jmp 0x18000ee60
mov ecx, 0x5155dcdc
xor eax, eax
jmp 0x18000ee60
mov rax, qword [rsp + 0x78]
movzx ecx, byte [rsp + rax + 0x41]
movzx ecx, cl
lea edx, [rcx + rcx*8]
lea edi, [rdx*8 - 0x4c8]
movsx ebp, di
imul ebp, ebp, 0xffff905b
shr ebp, 0x10
lea edx, [rbp + rdx*8 - 0x4c8]
movzx edx, dx
movsx ebp, dx
shr edx, 0xf
sar ebp, 7
add ebp, edx
imul edx, ebp, 0xe3
sub edi, edx
add edi, 0xe3
movzx edx, di
imul edx, edx, 0x20b5
shr edx, 0x10
mov ecx, edi
sub ecx, edx
movzx ecx, cx
shr ecx, 1
add ecx, edx
shr ecx, 7
imul ecx, ecx, 0xe3
sub edi, ecx
mov byte [rsp + rax + 0x41], dil
mov rax, qword [rsp + 0x78]
add rax, 1
mov ecx, 0x5155dcdc
jmp 0x18000ee60
cmp qword [rsp + 0x88], 0
mov eax, 0xc456c57f
mov ecx, 0xd5b6eed4
cmove eax, ecx
jmp 0x18000e847
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x41], 0xb9
mov byte [rsp + 0x42], 0x11
mov byte [rsp + 0x43], 0x51
mov byte [rsp + 0x44], 0x11
mov byte [rsp + 0x45], 0x8a
mov byte [rsp + 0x46], 0x11
mov byte [rsp + 0x47], 0xb9
mov byte [rsp + 0x48], 0x11
mov byte [rsp + 0x49], 0x77
mov byte [rsp + 0x4a], 0x11
mov byte [rsp + 0x4b], 0x3b
mov byte [rsp + 0x4c], 0x11
mov byte [rsp + 0x4d], 0x41
mov byte [rsp + 0x4e], 0x11
mov byte [rsp + 0x4f], 0x18
mov byte [rsp + 0x50], 0x11
mov byte [rsp + 0x51], 0x57
mov byte [rsp + 0x52], 0x11
mov byte [rsp + 0x53], 0x1f
mov byte [rsp + 0x54], 0x11
mov byte [rsp + 0x55], 0x84
mov byte [rsp + 0x56], 0x11
mov byte [rsp + 0x57], 0x84
mov byte [rsp + 0x58], 0x11
mov byte [rsp + 0x59], 0x11
mov byte [rsp + 0x5a], 0x11
mov ecx, 0x90e482c7
nop
cmp ecx, 0x439d0d96
jg 0x18000f050
cmp ecx, 0x845fb395
je 0x18000f085
cmp ecx, 0x90e482c7
je 0x18000f08c
cmp ecx, 0x9226e8cb
jne 0x18000f020
jmp 0x18000f337
cmp ecx, 0x439d0d97
je 0x18000f0ab
cmp ecx, 0x49dbac3f
je 0x18000f0b7
cmp ecx, 0x5155dcdc
jne 0x18000f020
mov qword [rsp + 0x78], rax
mov rcx, qword [rsp + 0x78]
cmp rcx, 0x1a
mov ecx, 0x845fb395
mov edx, 0x49dbac3f
cmovb ecx, edx
jmp 0x18000f020
mov ecx, 0x9226e8cb
jmp 0x18000f020
movzx ecx, byte [rsp + 0x40]
not cl
or cl, 0xfe
cmp cl, 0xff
mov ecx, 0x9226e8cb
mov edx, 0x439d0d97
cmove ecx, edx
jmp 0x18000f020
mov ecx, 0x5155dcdc
xor eax, eax
jmp 0x18000f020
mov rax, qword [rsp + 0x78]
movzx ecx, byte [rsp + rax + 0x41]
movzx ecx, cl
lea edx, [rcx + rcx*8]
lea edi, [rdx*8 - 0x4c8]
movsx ebx, di
imul ebx, ebx, 0xffff905b
shr ebx, 0x10
lea edx, [rbx + rdx*8]
add edx, 0xfffffb38
movzx edx, dx
movsx ebx, dx
shr edx, 0xf
sar ebx, 7
add ebx, edx
imul edx, ebx, 0xe3
sub edi, edx
add edi, 0xe3
movzx edx, di
imul edx, edx, 0x20b5
shr edx, 0x10
mov ecx, edi
sub ecx, edx
movzx ecx, cx
shr ecx, 1
add ecx, edx
shr ecx, 7
imul ecx, ecx, 0xe3
sub edi, ecx
mov byte [rsp + rax + 0x41], dil
mov rax, qword [rsp + 0x78]
add rax, 1
mov ecx, 0x5155dcdc
jmp 0x18000f020
lea rax, [rsp + 0x200]
mov qword [rsp + 0xe8], rax
mov rax, qword [rsp + 0x88]
mov r12, qword [rax]
mov rbp, qword [rsp + 0xe8]
mov byte [rsp + 0x60], 0
mov byte [rsp + 0x61], 0x3c
mov byte [rsp + 0x62], 0xe0
mov byte [rsp + 0x63], 0xe0
mov byte [rsp + 0x64], 0x5f
mov byte [rsp + 0x65], 0x4d
mov byte [rsp + 0x66], 0x56
mov byte [rsp + 0x67], 0xd8
mov byte [rsp + 0x68], 0x40
mov byte [rsp + 0x69], 0x40
mov byte [rsp + 0x6a], 0xe0
mov byte [rsp + 0x6b], 0x4d
mov byte [rsp + 0x6c], 0x87
mov byte [rsp + 0x6d], 0xd7
mov byte [rsp + 0x6e], 2
mov byte [rsp + 0x6f], 0x90
mov byte [rsp + 0x70], 0x99
mov byte [rsp + 0x71], 0xd8
mov byte [rsp + 0x72], 0x6a
mov ecx, 0xa55664ca
cmp ecx, 0xd422e9d
jg 0x18000f200
cmp ecx, 0x9340763e
je 0x18000f223
cmp ecx, 0xa55664ca
je 0x18000f22c
cmp ecx, 0x518c021
jne 0x18000f1c0
mov qword [rsp + 0x40], rax
mov rcx, qword [rsp + 0x40]
cmp rcx, 0x12
mov ecx, 0x27cafc30
mov edx, 0x156b5945
cmovb ecx, edx
jmp 0x18000f1c0
cmp ecx, 0xd422e9e
je 0x18000f384
cmp ecx, 0x156b5945
je 0x18000f24b
cmp ecx, 0x27cafc30
jne 0x18000f1c0
mov ecx, 0xd422e9e
jmp 0x18000f1c0
mov ecx, 0x518c021
xor eax, eax
jmp 0x18000f1c0
movzx ecx, byte [rsp + 0x60]
not cl
or cl, 0xfe
cmp cl, 0xff
mov ecx, 0xd422e9e
mov edx, 0x9340763e
cmove ecx, edx
jmp 0x18000f1c0
mov rax, qword [rsp + 0x40]
movzx ecx, byte [rsp + rax + 0x61]
movzx ecx, cl
imul ecx, ecx, 0xffffffcd
mov edx, ecx
add edx, 0x151e
movsx edx, dx
imul edx, edx, 0xffff905b
shr edx, 0x10
add edx, ecx
add edx, 0x151e
movzx edx, dx
movsx edi, dx
shr edx, 0xf
sar edi, 7
add edi, edx
imul edx, edi, 0xe3
neg edx
lea edi, [rcx + rdx]
add edi, 0x1601
movzx edx, di
imul edx, edx, 0x20b5
shr edx, 0x10
mov ecx, edi
sub ecx, edx
movzx ecx, cx
shr ecx, 1
add ecx, edx
shr ecx, 7
imul ecx, ecx, 0xe3
sub edi, ecx
mov byte [rsp + rax + 0x61], dil
mov rax, qword [rsp + 0x40]
add rax, 1
mov ecx, 0x518c021
jmp 0x18000f1c0
call r13
mov r8, qword [rsp + 0xa0]
mov rcx, rax
xor edx, edx
call r15
mov eax, 0x7c63ed90
jmp 0x18000e847
lea rcx, [rsp + 0x41]
lea rdx, [rsp + 0x61]
call fcn.180006160
lea rcx, [rsp + 0x84]
mov qword [rsp + 0x20], rcx
mov rcx, rbx
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call rax
test eax, eax
mov eax, 0x2034d86e
mov ecx, 0x3a3ddc81
cmove eax, ecx
xor ecx, ecx
mov qword [rsp + 0xb0], rcx
jmp 0x18000e847
lea rcx, [rsp + 0x41]
lea rdx, [rsp + 0x61]
call fcn.180006160
lea rcx, [rsp + 0x84]
mov qword [rsp + 0x20], rcx
mov rcx, rbp
mov edx, 1
mov r8, r13
mov r9d, r12d
call rax
test eax, eax
mov eax, 0x8b7cab67
mov ecx, 0xe42b4d7b
cmove eax, ecx
mov r13, r14
mov r14, r15
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x18000e847
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x41], 0x48
mov byte [rsp + 0x42], 0x71
mov byte [rsp + 0x43], 0x77
mov byte [rsp + 0x44], 0x71
mov byte [rsp + 0x45], 0xae
mov byte [rsp + 0x46], 0x71
mov byte [rsp + 0x47], 0x48
mov byte [rsp + 0x48], 0x71
mov byte [rsp + 0x49], 0x50
mov byte [rsp + 0x4a], 0x71
mov byte [rsp + 0x4b], 0x2e
mov byte [rsp + 0x4c], 0x71
mov byte [rsp + 0x4d], 4
mov byte [rsp + 0x4e], 0x71
mov byte [rsp + 0x4f], 0x40
mov byte [rsp + 0x50], 0x71
mov byte [rsp + 0x51], 0x4d
mov byte [rsp + 0x52], 0x71
mov byte [rsp + 0x53], 0xf
mov byte [rsp + 0x54], 0x71
mov byte [rsp + 0x55], 0xd8
mov byte [rsp + 0x56], 0x71
mov byte [rsp + 0x57], 0xd8
mov byte [rsp + 0x58], 0x71
mov byte [rsp + 0x59], 0x71
mov byte [rsp + 0x5a], 0x71
mov ecx, 0xd41ac07f
cmp ecx, 0x31f0e03c
jle 0x18000f4c0
cmp ecx, 0x31f0e03d
je 0x18000f4e8
cmp ecx, 0x3d49a1a4
je 0x18000f531
cmp ecx, 0x672b2d25
jne 0x18000f410
mov rax, qword [rsp + 0x78]
movzx ecx, byte [rsp + rax + 0x41]
movzx ecx, cl
imul edx, ecx, 0x57
mov ebx, edx
add ebx, 0xffffd999
movsx edi, bx
imul edi, edi, 0xffff905b
shr edi, 0x10
add edx, edi
add edx, 0xffffd999
movzx edx, dx
movsx edi, dx
shr edx, 0xf
sar edi, 7
add edi, edx
imul edx, edi, 0xe3
sub ebx, edx
add ebx, 0xe3
movzx edx, bx
imul edx, edx, 0x20b5
shr edx, 0x10
mov ecx, ebx
sub ecx, edx
movzx ecx, cx
shr ecx, 1
add ecx, edx
shr ecx, 7
imul ecx, ecx, 0xe3
sub ebx, ecx
mov byte [rsp + rax + 0x41], bl
mov rax, qword [rsp + 0x78]
add rax, 1
mov ecx, 0x4067323
jmp 0x18000f410
cmp ecx, 0xd41ac07f
je 0x18000f4f2
cmp ecx, 0x4067323
je 0x18000f511
cmp ecx, 0x28d28cec
jne 0x18000f410
mov ecx, 0x4067323
xor eax, eax
jmp 0x18000f410
mov ecx, 0x3d49a1a4
jmp 0x18000f410
movzx ecx, byte [rsp + 0x40]
not cl
or cl, 0xfe
cmp cl, 0xff
mov ecx, 0x3d49a1a4
mov edx, 0x28d28cec
cmove ecx, edx
jmp 0x18000f410
mov qword [rsp + 0x78], rax
mov rcx, qword [rsp + 0x78]
cmp rcx, 0x1a
mov ecx, 0x31f0e03d
mov edx, 0x672b2d25
cmovb ecx, edx
jmp 0x18000f410
lea rcx, [rsp + 0x41]
lea rdx, [rsp + 0x61]
call fcn.180006160
lea rcx, [rsp + 0xa8]
mov qword [rsp + 0x30], rcx
lea r9, [rsp + 0x94]
mov qword [rsp + 0x28], r9
lea rcx, [rsp + 0xf0]
mov qword [rsp + 0x20], rcx
xor ecx, ecx
mov rdx, r12
mov r8, rbp
call rax
test eax, eax
mov eax, 0x4dd4429a
mov ecx, 0x448a8225
cmove eax, ecx
jmp 0x18000e847
cmp eax, 0xc8a84e7c
jne 0x18000e847
mov rax, qword [rsp + 0xe0]
mov rax, qword [rsp + 0xd8]
mov rax, qword [rsp + 0xd0]
mov rax, qword [rsp + 0xc8]
mov rax, qword [rsp + 0xc0]
mov rax, qword [rsp + 0xb8]
mov rax, rsi
movaps xmm6, xmmword [rsp + 0x310]
add rsp, 0x328
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret