Function at 0x180021ca0
Capabilities:
Encode data using xor
Get file version info

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x68]
sub rsp, 0x128
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
mov r13, rcx
xor esi, esi
mov dword [rbp + 0x78], esi
lea rdx, [rbp - 0x48]
call fcn.18001e980
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x180021ce4
mov rbx, qword [rax]
mov r15, rsi
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x58], rsi
xor dil, dil
mov byte [rbp - 0x50], dil
lea rdx, [rbp + 0x78]
mov rcx, rbx
call qword [sym.imp.VERSION.dll_GetFileVersionInfoSizeA]
mov r14d, eax
mov r12d, 1
test eax, eax
je 0x180021d49
mov ecx, r14d
call fcn.18009d8b4
mov r15, rax
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], rax
xor ecx, ecx
call fcn.18009d1f4
mov r9, r15
mov r8d, r14d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.VERSION.dll_GetFileVersionInfoA]
movzx edi, dil
test eax, eax
cmovne edi, r12d
mov byte [rbp - 0x50], dil
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x180021d84
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180021d7f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180023069
call fcn.18009d1f4
mov qword [rbp - 0x38], rsi
mov r12d, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x30], r12
mov byte [rbp - 0x48], 0
movabs r14, 0x8000000000000027
test dil, dil
je 0x180022295
lea r9, [rbp + 0x78]
lea r8, [rbp + 0x80]
lea rdx, [0x1800ea574]
mov rcx, r15
call qword [sym.imp.VERSION.dll_VerQueryValueA]
test eax, eax
je 0x180021e05
mov rax, qword [rbp + 0x80]
test rax, rax
je 0x180021e05
mov ecx, dword [rax + 0xc]
mov eax, dword [rax + 8]
mov r9d, eax
shr r9d, 0x10
mov word [rbp + 0x80], r9w
mov word [rbp + 0x82], ax
mov eax, ecx
shr eax, 0x10
mov word [rbp + 0x84], ax
mov word [rbp + 0x86], cx
jmp 0x180021e0f
mov qword [rbp + 0x80], rsi
mov r9d, esi
mov dword [r13 + 0xd0], r9d
mov r8d, 0xa
lea rdx, [rbp + 0x78]
mov ecx, r9d
call fcn.1800afb1c
mov r15, rax
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x48], r12
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x180021e40
cmp rbx, r12
ja 0x180021e6d
mov qword [rsp + 0x40], rbx
mov r8, rbx
mov rdx, r15
lea rcx, [rsp + 0x30]
call fcn.18009fc20
mov byte [rsp + rbx + 0x30], 0
jmp 0x180021f0c
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
ja 0x1800230d6
mov rdi, rbx
or rdi, r12
cmp rdi, rax
jbe 0x180021e93
mov rdi, rax
mov rax, r14
jmp 0x180021eb9
mov eax, socket
cmp rdi, rax
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x180021ed8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18002306f
mov rcx, rax
call fcn.18009d1b8
test rax, rax
je 0x180023075
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x180021eea
test rcx, rcx
je 0x180021ee7
call fcn.18009d1b8
mov r14, rax
jmp 0x180021eea
mov r14, rsi
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rdi
mov r8, rbx
mov rdx, r15
mov rcx, r14
call fcn.18009fc20
mov byte [r14 + rbx], 0
mov qword [rsp + 0x30], r14
mov r13d, 1
lea rax, [rbp + 0x82]
mov qword [rbp + 0x88], rax
mov r14, qword [rsp + 0x40]
mov r15, qword [rsp + 0x48]
cmp r14, r15
jae 0x180021f53
lea rax, [r14 + 1]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x30]
cmp r15, 0x10
cmovae rax, qword [rsp + 0x30]
mov word [rax + r14], gethostbyname
jmp 0x180022074
movabs rdx, 0x7fffffffffffffff
mov rax, rdx
sub rax, r14
cmp rax, 1
jb 0x1800230d6
lea r12, [r14 + 1]
mov rbx, r12
or rbx, 0xf
cmp rbx, rdx
jbe 0x180021f8c
mov rbx, rdx
movabs rcx, 0x8000000000000027
jmp 0x180021fd0
mov rcx, r15
shr rcx, 1
mov rax, rdx
sub rax, rcx
cmp r15, rax
jbe 0x180021fac
mov rbx, rdx
movabs rcx, 0x8000000000000027
jmp 0x180021fd0
lea rax, [rcx + r15]
cmp rbx, rax
cmovb rbx, rax
lea rax, [rbx + 1]
cmp rax, 0x1000
jb 0x180021fec
lea rcx, [rax + 0x27]
cmp rcx, rax
jbe 0x18002306f
call fcn.18009d1b8
test rax, rax
je 0x180023075
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x180022001
test rax, rax
je 0x180021ffe
mov rcx, rax
call fcn.18009d1b8
mov rdi, rax
jmp 0x180022001
mov rdi, rsi
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], rbx
mov r8, r14
mov rcx, rdi
cmp r15, 0x10
jb 0x18002205e
mov rbx, qword [rsp + 0x30]
mov rdx, rbx
call fcn.18009fc20
mov word [r14 + rdi], gethostbyname
lea rdx, [r15 + 1]
cmp rdx, 0x1000
jb 0x180022054
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x180023075
mov rbx, rcx
mov rcx, rbx
call fcn.18009d1f4
jmp 0x18002206f
lea rdx, [rsp + 0x30]
call fcn.18009fc20
mov word [r14 + rdi], gethostbyname
mov qword [rsp + 0x30], rdi
mov r14, qword [rbp + 0x88]
movzx ecx, word [r14]
mov r8d, 0xa
lea rdx, [rbp + 0x78]
call fcn.1800afb1c
mov r9, rax
mov rdi, 0xffffffffffffffff
nop dword [rax + rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x1800220a0
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x1800220ed
lea rax, [rdi + rcx]
mov qword [rsp + 0x40], rax
lea rbx, [rsp + 0x30]
cmp rdx, 0x10
cmovae rbx, qword [rsp + 0x30]
add rbx, rcx
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call fcn.18009fc20
mov byte [rdi + rbx], 0
jmp 0x180022102
mov qword [rsp + 0x20], rdi
xor r8d, r8d
mov rdx, rdi
lea rcx, [rsp + 0x30]
call fcn.1800037a0
inc r13d
add r14, 2
mov qword [rbp + 0x88], r14
cmp r13d, 4
jl 0x180021f20
mov r13, qword [rbp + 0x70]
lea rbx, [r13 + 0xd8]
lea rax, [rsp + 0x30]
cmp rbx, rax
je 0x180022194
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x180022169
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x180022164
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18002307b
mov rcx, r8
call fcn.18009d1f4
mov r12d, reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [rbx + 0x10], xmm1
mov qword [rsp + 0x40], rsi
mov eax, r12d
mov qword [rsp + 0x48], rax
mov byte [rsp + 0x30], 0
jmp 0x18002219f
mov rax, qword [rsp + 0x48]
mov r12d, reloc.WS2_32.dll_ntohs
cmp rax, 0x10
jb 0x1800221d8
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800221d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002307b
call fcn.18009d1f4
cmp byte [0x18010a364], 0
je 0x1800226b5
movdqa xmm6, xmmword [0x1800ec2e0]
movdqa xmm7, xmmword [0x1800ec070]
mov dword [rsp + 0x70], 0x19abc60d
mov rcx, qword gs:[0x58]
mov eax, dword [0x18010bb98]
mov edx, 4
mov rcx, qword [rcx + rax*8]
mov eax, dword [rdx + rcx]
cmp dword [0x18010d124], eax
jg 0x180023081
lea rdx, [0x180105940]
cmp byte [0x180105964], 0
je 0x1800226a4
mov r10, rsi
mov r11d, 1
sub r11, rdx
movabs r13, 0xd993efbb19cfe32d
nop
lea r9, [r10 + rdx]
movzx ecx, r10b
and cl, 7
shl cl, 3
mov rax, r13
shr rax, cl
xor byte [r9], al
lea ecx, [r9 + r11]
and cl, 7
shl cl, 3
mov r8, r13
shr r8, cl
xor byte [r9 + 1], r8b
add r10, 2
cmp r10, 0x24
jb 0x180022250
mov byte [0x180105964], 0
mov r13, qword [rbp + 0x70]
jmp 0x1800226a4
lea rdx, [rsp + 0x78]
mov rcx, r13
call fcn.18001e980
mov rdi, rax
cmp qword [rax + 0x18], 0x10
jb 0x1800222af
mov rdi, qword [rax]
mov rcx, qword [rax + 0x10]
cmp rcx, 3
jb 0x180022321
lea r14, [rcx + rdi]
lea r8, [r14 - 2]
sub r8, rdi
mov edx, 0x35
mov rcx, rdi
call fcn.1800a06d0
mov rbx, rax
test rax, rax
je 0x180022321
nop dword [rax]
cmp byte [rbx], 0x35
jne 0x1800222f5
cmp byte [rbx + 1], 0x2e
jne 0x1800222f5
cmp byte [rbx + 2], 0x30
jne 0x1800222f5
mov eax, esi
jmp 0x1800222fa
sbb eax, eax
or eax, 1
test eax, eax
je 0x1800223d5
inc rbx
lea r8, [r14 - 2]
sub r8, rbx
mov edx, 0x35
mov rcx, rbx
call fcn.1800a06d0
mov rbx, rax
test rax, rax
jne 0x1800222e0
mov rbx, 0xffffffffffffffff
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x180022364
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002235f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800230dc
call fcn.18009d1f4
cmp rbx, 0xffffffffffffffff
je 0x180022375
mov dword [r13 + 0xd0], 5
lea rdx, [rsp + 0x78]
mov rcx, r13
call fcn.18001e980
mov rdi, rax
cmp qword [rax + 0x18], 0x10
jb 0x18002238f
mov rdi, qword [rax]
mov rcx, qword [rax + 0x10]
cmp rcx, 3
jb 0x180022409
lea r14, [rdi + rcx]
lea r8, [r14 - 2]
sub r8, rdi
mov edx, 0x36
mov rcx, rdi
call fcn.1800a06d0
mov rbx, rax
test rax, rax
je 0x180022409
nop dword [rax]
cmp byte [rbx], 0x36
jne 0x1800223dd
cmp byte [rbx + 1], 0x2e
jne 0x1800223dd
cmp byte [rbx + 2], 0x30
jne 0x1800223dd
mov eax, esi
jmp 0x1800223e2
sub rbx, rdi
jmp 0x180022328
sbb eax, eax
or eax, 1
test eax, eax
je 0x1800224b6
inc rbx
lea r8, [r14 - 2]
sub r8, rbx
mov edx, 0x36
mov rcx, rbx
call fcn.1800a06d0
mov rbx, rax
test rax, rax
jne 0x1800223c0
mov rbx, 0xffffffffffffffff
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x18002244c
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180022447
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800230e2
call fcn.18009d1f4
cmp rbx, 0xffffffffffffffff
je 0x18002245d
mov dword [r13 + 0xd0], 6
lea rdx, [rsp + 0x78]
mov rcx, r13
call fcn.18001e980
mov rdi, rax
cmp qword [rax + 0x18], 0x10
jb 0x180022477
mov rdi, qword [rax]
mov rcx, qword [rax + 0x10]
cmp rcx, 3
jb 0x1800224ea
lea r14, [rdi + rcx]
lea r8, [r14 - 2]
sub r8, rdi
mov edx, 0x37
mov rcx, rdi
call fcn.1800a06d0
mov rbx, rax
test rax, rax
je 0x1800224ea
cmp byte [rbx], 0x37
jne 0x1800224be
cmp byte [rbx + 1], 0x2e
jne 0x1800224be
cmp byte [rbx + 2], 0x30
jne 0x1800224be
mov eax, esi
jmp 0x1800224c3
sub rbx, rdi
jmp 0x180022410
sbb eax, eax
or eax, 1
test eax, eax
je 0x180022597
inc rbx
lea r8, [r14 - 2]
sub r8, rbx
mov edx, 0x37
mov rcx, rbx
call fcn.1800a06d0
mov rbx, rax
test rax, rax
jne 0x1800224a1
mov rbx, 0xffffffffffffffff
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x18002252d
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180022528
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800230e8
call fcn.18009d1f4
cmp rbx, 0xffffffffffffffff
je 0x18002253e
mov dword [r13 + 0xd0], 7
lea rdx, [rsp + 0x78]
mov rcx, r13
call fcn.18001e980
mov rdi, rax
cmp qword [rax + 0x18], 0x10
jb 0x180022558
mov rdi, qword [rax]
mov rcx, qword [rax + 0x10]
cmp rcx, 3
jb 0x1800225cb
lea r14, [rdi + rcx]
lea r8, [r14 - 2]
sub r8, rdi
mov edx, 0x38
mov rcx, rdi
call fcn.1800a06d0
mov rbx, rax
test rax, rax
je 0x1800225cb
cmp byte [rbx], 0x38
jne 0x18002259f
cmp byte [rbx + 1], 0x2e
jne 0x18002259f
cmp byte [rbx + 2], 0x30
jne 0x18002259f
mov eax, esi
jmp 0x1800225a4
sub rbx, rdi
jmp 0x1800224f1
sbb eax, eax
or eax, 1
test eax, eax
je 0x18002274a
inc rbx
lea r8, [r14 - 2]
sub r8, rbx
mov edx, 0x38
mov rcx, rbx
call fcn.1800a06d0
mov rbx, rax
test rax, rax
jne 0x180022582
mov rbx, 0xffffffffffffffff
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x18002260e
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180022609
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800230ee
call fcn.18009d1f4
cmp rbx, 0xffffffffffffffff
je 0x18002261f
mov dword [r13 + 0xd0], 9
cmp byte [0x18010a364], 0
je 0x1800226b5
movdqa xmm6, xmmword [0x1800ec2e0]
movdqa xmm7, xmmword [0x1800ec670]
mov rcx, qword gs:[0x58]
mov eax, dword [0x18010bb98]
mov edx, 4
mov rcx, qword [rcx + rax*8]
mov eax, dword [rdx + rcx]
cmp dword [0x18010d128], eax
jg 0x1800230f4
lea rdx, [0x180105870]
cmp byte [0x180105891], 0
je 0x1800226a4
mov r8, rsi
movabs r9, 0xd993efbb19cfe32d
movzx ecx, r8b
and cl, 7
shl cl, 3
mov rax, r9
shr rax, cl
xor byte [r8 + rdx], al
inc r8
cmp r8, 0x21
jb 0x180022680
mov byte [0x180105891], 0
mov r8d, dword [r13 + 0xd0]
mov ecx, 5
call fcn.18006a848
lea rdx, [rsp + 0x50]
mov rcx, r13
call fcn.18001e980
nop
mov r14d, 1
mov dword [rbp + 0x78], r14d
mov rdi, rax
cmp qword [rax + 0x18], 0x10
jb 0x1800226da
mov rdi, qword [rax]
mov rcx, qword [rax + 0x10]
cmp rcx, 8
jb 0x18002275f
lea r15, [rdi + rcx]
lea r8, [r15 - 7]
sub r8, rdi
mov edx, 0x61
mov rcx, rdi
call fcn.1800a06d0
mov rbx, rax
test rax, rax
je 0x18002275f
nop dword [rax]
nop dword [rax + rax]
mov r8d, 8
lea rdx, str.acsd.exe
mov rcx, rbx
call fcn.18009fb20
test eax, eax
je 0x180022752
inc rbx
lea r8, [r15 - 7]
sub r8, rbx
mov edx, 0x61
mov rcx, rbx
call fcn.1800a06d0
mov rbx, rax
test rax, rax
jne 0x180022710
jmp 0x18002275f
sub rbx, rdi
jmp 0x1800225d2
sub rbx, rdi
cmp rbx, 0xffffffffffffffff
jne 0x180022bc5
lea rdx, [rsp + 0x78]
mov rcx, r13
call fcn.18001e980
nop
mov r14d, 3
mov dword [rbp + 0x78], r14d
mov rdi, rax
cmp qword [rax + 0x18], 0x10
jb 0x180022784
mov rdi, qword [rax]
mov rcx, qword [rax + 0x10]
cmp rcx, 0xc
jb 0x1800227f7
lea r15, [rdi + rcx]
lea r8, [r15 - 0xb]
sub r8, rdi
mov edx, 0x61
mov rcx, rdi
call fcn.1800a06d0
mov rbx, rax
test rax, rax
je 0x1800227f7
nop
mov r8d, reloc.WS2_32.dll_inet_ntoa
lea rdx, str.aolwbspd.exe
mov rcx, rbx
call fcn.18009fb20
test eax, eax
je 0x1800227ea
inc rbx
lea r8, [r15 - 0xb]
sub r8, rbx
mov edx, 0x61
mov rcx, rbx
call fcn.1800a06d0
mov rbx, rax
test rax, rax
jne 0x1800227b0
jmp 0x1800227f7
sub rbx, rdi
cmp rbx, 0xffffffffffffffff
jne 0x180022bc5
lea rdx, [rbp - 0x28]
mov rcx, r13
call fcn.18001e980
nop
mov r14d, 7
mov dword [rbp + 0x78], r14d
mov rdi, rax
cmp qword [rax + 0x18], 0x10
jb 0x18002281b
mov rdi, qword [rax]
mov rcx, qword [rax + 0x10]
cmp rcx, 0xc
jb 0x180022897
lea r15, [rdi + rcx]
lea r8, [r15 - 0xb]
sub r8, rdi
mov edx, 0x61
mov rcx, rdi
call fcn.1800a06d0
mov rbx, rax
test rax, rax
je 0x180022897
nop word [rax + rax]
mov r8d, reloc.WS2_32.dll_inet_ntoa
lea rdx, str.aoltpsd3.exe
mov rcx, rbx
call fcn.18009fb20
test eax, eax
je 0x18002288a
inc rbx
lea r8, [r15 - 0xb]
sub r8, rbx
mov edx, 0x61
mov rcx, rbx
call fcn.1800a06d0
mov rbx, rax
test rax, rax
jne 0x180022850
jmp 0x180022897
sub rbx, rdi
cmp rbx, 0xffffffffffffffff
jne 0x180022bc5
lea rdx, [rsp + 0x30]
mov rcx, r13
call fcn.18001e980
mov r14d, r12d
mov rdi, rax
cmp qword [rax + 0x18], 0x10
jb 0x1800228b4
mov rdi, qword [rax]
mov rcx, qword [rax + 0x10]
cmp rcx, 0xc
jb 0x18002291c
lea r15, [rdi + rcx]
lea r8, [r15 - 0xb]
sub r8, rdi
mov edx, 0x61
mov rcx, rdi
call fcn.1800a06d0
mov rbx, rax
test rax, rax
je 0x18002291c
nop
mov r8d, reloc.WS2_32.dll_inet_ntoa
lea rdx, str.aoltpspd.exe
mov rcx, rbx
call fcn.18009fb20
test eax, eax
je 0x180022bb8
inc rbx
lea r8, [r15 - 0xb]
sub r8, rbx
mov edx, 0x61
mov rcx, rbx
call fcn.1800a06d0
mov rbx, rax
test rax, rax
jne 0x1800228e0
xor bl, bl
test r14b, 8
je 0x180022974
and r14d, 0xfffffff7
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x180022965
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180022960
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180023141
call fcn.18009d1f4
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], r12
mov byte [rsp + 0x30], 0
test r14b, 4
je 0x1800229c5
and r14d, 0xfffffffb
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x1800229b9
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800229b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180023147
call fcn.18009d1f4
mov qword [rbp - 0x18], rsi
mov qword [rbp - 0x10], r12
mov byte [rbp - 0x28], 0
test r14b, 2
je 0x180022a18
and r14d, 0xfffffffd
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x180022a0b
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180022a06
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002314d
call fcn.18009d1f4
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x70], r12
mov byte [rsp + 0x78], 0
test r14b, 1
je 0x180022a5f
and r14d, 0xfffffffe
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x180022a5f
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180022a5a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180023153
call fcn.18009d1f4
test bl, bl
je 0x180022ce5
cmp byte [0x18010a364], 0
je 0x180022b77
lea rdx, [rsp + 0x50]
mov rcx, r13
call fcn.18001e980
mov rdi, rax
cmp qword [rax + 0x18], 0x10
jb 0x180022a8e
mov rdi, qword [rax]
movdqa xmm6, xmmword [0x1800ec230]
movdqa xmm7, xmmword [0x1800ec9c0]
mov word [rbp - 0x68], 0xe314
mov rcx, qword gs:[0x58]
mov eax, dword [0x18010bb98]
mov edx, 4
mov rcx, qword [rcx + rax*8]
mov eax, dword [rdx + rcx]
cmp dword [0x18010d120], eax
jg 0x180023159
lea rdx, [0x1801058f0]
cmp byte [0x180105912], 0
je 0x180022b2c
mov r11, rsi
mov ebx, 1
sub rbx, rdx
movabs r8, 0xd993efbb19cfe32d
lea r10, [r11 + rdx]
movzx ecx, r11b
and cl, 7
shl cl, 3
mov rax, r8
shr rax, cl
xor byte [r10], al
lea ecx, [r10 + rbx]
and cl, 7
shl cl, 3
mov r9, r8
shr r9, cl
xor byte [r10 + 1], r9b
add r11, 2
cmp r11, 0x22
jb 0x180022af0
mov byte [0x180105912], 0
mov r8, rdi
mov ecx, 5
call fcn.18006a848
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x180022b77
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180022b72
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800231af
call fcn.18009d1f4
lea rdx, [rsp + 0x50]
mov rcx, r13
call fcn.18001e980
mov rbx, rax
mov rcx, qword [rax + 0x18]
cmp rcx, 8
jb 0x180022bcc
mov rdx, rax
cmp rcx, 0x10
jb 0x180022b9d
mov rdx, qword [rax]
mov qword [rax + 0x10], 8
mov rax, qword [str.waol.exe]
mov qword [rdx], rax
mov byte [rdx + 8], 0
jmp 0x180022c9d
sub rbx, rdi
cmp rbx, 0xffffffffffffffff
je 0x18002291c
mov bl, 1
jmp 0x18002291e
mov rdx, rcx
shr rdx, 1
movabs rdi, 0x7fffffffffffffff
mov rax, rdi
sub rax, rdx
cmp rcx, rax
jbe 0x180022c2a
movabs rax, 0x8000000000000027
mov rcx, rax
call fcn.18009d1b8
test rax, rax
je 0x1800231b5
lea rdx, [rax + 0x27]
and rdx, 0xffffffffffffffe0
mov qword [rdx - 8], rax
mov qword [rbx + 0x10], 8
mov qword [rbx + 0x18], rdi
mov rax, qword [str.waol.exe]
mov qword [rdx], rax
mov byte [rdx + 8], 0
jmp 0x180022c9a
lea rax, [rdx + rcx]
mov rdi, r12
cmp rax, 0xf
cmova rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x180022c55
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180023063
jmp 0x180022bf1
test rcx, rcx
je 0x180022c7e
call fcn.18009d1b8
mov rdx, rax
mov qword [rbx + 0x10], 8
mov qword [rbx + 0x18], rdi
mov rcx, qword [str.waol.exe]
mov qword [rax], rcx
mov byte [rax + 8], 0
jmp 0x180022c9a
mov rdx, rsi
mov qword [rbx + 0x10], 8
mov qword [rbx + 0x18], rdi
mov rax, qword [str.waol.exe]
mov qword [rsi], rax
mov byte [rsi + 8], dl
mov qword [rbx], rdx
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x180022cda
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180022cd5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800231bb
call fcn.18009d1f4
mov dword [r13 + 0xd0], 9
lea r15, [r13 + 0x100]
xor edx, edx
mov rcx, r15
call fcn.1800460d0
cmp eax, 0xb7
je 0x180022dc7
cmp byte [0x18010a364], 0
je 0x180022dc0
movdqa xmm6, xmmword [0x1800ec960]
movdqa xmm7, xmmword [0x1800ec3d0]
mov dword [rsp + 0x70], 0x37e1cd4a
mov word [rsp + 0x74], 0xef95
mov rcx, qword gs:[0x58]
mov eax, dword [0x18010bb98]
mov edx, 4
mov rcx, qword [rcx + rax*8]
mov eax, dword [rdx + rcx]
cmp dword [0x18010d12c], eax
jg 0x1800231c1
lea r10, [0x180105840]
cmp byte [0x180105866], 0
je 0x180022db3
mov edx, 1
sub rdx, r10
nop dword [rax]
lea r9, [rsi + r10]
movzx ecx, sil
and cl, 7
shl cl, 3
movabs r8, 0xd993efbb19cfe32d
mov rax, r8
shr rax, cl
xor byte [r9], al
lea ecx, [r9 + rdx]
and cl, 7
shl cl, 3
shr r8, cl
xor byte [r9 + 1], r8b
add rsi, 2
cmp rsi, 0x26
jb 0x180022d70
mov byte [0x180105866], 0
mov rdx, r10
mov ecx, 4
call fcn.18006a848
xor bl, bl
jmp 0x180022fe6
mov ecx, 0x280
call fcn.18009d1b8
mov rbx, rax
mov qword [rbp + 0x80], rax
lea rdx, [rsp + 0x50]
mov rcx, r13
call fcn.18001ea60
mov rdi, rax
or r14d, 0x10
mov dword [rbp + 0x78], r14d
mov rdx, qword [r13 + 0x88]
mov ecx, dword [r13 + 0xd0]
lea rax, vtable.AOLCapture.0
mov qword [rbx], rax
mov dword [rbx + 8], ecx
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x120], r15
mov qword [rbx + 0x260], rsi
mov qword [rbx + 0x270], rsi
mov qword [rbx + 0x278], rsi
mov r15, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 0x10
jb 0x180022e3c
mov rdi, qword [rdi]
cmp r15, 0x10
jae 0x180022e4e
movups xmm0, xmmword [rdi]
movups xmmword [rbx + 0x260], xmm0
jmp 0x180022ec8
mov r12, r15
or r12, 0xf
movabs rax, 0x7fffffffffffffff
cmp r12, rax
cmova r12, rax
lea rcx, [r12 + 1]
cmp rcx, 0x1000
jb 0x180022ea3
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180023222
mov rcx, rax
call fcn.18009d1b8
mov rcx, rax
test rax, rax
je 0x180023228
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180022eb2
test rcx, rcx
je 0x180022eaf
call fcn.18009d1b8
jmp 0x180022eb2
mov rax, rsi
mov qword [rbx + 0x260], rax
lea r8, [r15 + 1]
mov rdx, rdi
mov rcx, rax
call fcn.18009fc20
mov qword [rbx + 0x270], r15
mov qword [rbx + 0x278], r12
mov byte [rbx + 0x18], 0
mov qword [rbx + 0x128], 0x1380002
mov qword [rbx + 0x130], rsi
mov byte [rbx + 0x138], 0
mov byte [rbx + 0x150], 0
mov byte [rbx + 0x1d8], 0
mov rcx, qword [r13 + 0xf8]
mov qword [r13 + 0xf8], rbx
test rcx, rcx
je 0x180022f1f
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
nop
test r14b, 0x10
je 0x180022f62
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x180022f62
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180022f5d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002322e
call fcn.18009d1f4
cmp byte [0x18010a364], 0
je 0x180022fe4
movdqa xmm6, xmmword [0x1800ec1d0]
movdqa xmm7, xmmword [0x1800ebfb0]
mov rcx, qword gs:[0x58]
mov eax, dword [0x18010bb98]
mov edx, 4
mov rcx, qword [rcx + rax*8]
mov eax, dword [rdx + rcx]
cmp dword [0x18010d11c], eax
jg 0x180023016
lea rdx, [0x1801058a0]
cmp byte [0x1801058c1], 0
je 0x180022fda
nop
movzx ecx, sil
and cl, 7
shl cl, 3
movabs rax, 0xd993efbb19cfe32d
shr rax, cl
xor byte [rsi + rdx], al
inc rsi
cmp rsi, 0x21
jb 0x180022fb0
mov byte [0x1801058c1], 0
mov ecx, 5
call fcn.18006a848
mov bl, 1
mov rcx, qword [rbp - 0x60]
call fcn.18009d1f4
movzx eax, bl
movaps xmm6, xmmword [rsp + 0x110]
movaps xmm7, xmmword [rsp + 0x100]
add rsp, 0x128
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rcx, [0x18010d11c]
call fcn.18009d704
cmp dword [0x18010d11c], 0xffffffff
jne 0x180022f9e
mov word [0x1801058c0], 0x12d
movaps xmmword [0x1801058a0], xmm6
movaps xmmword [0x1801058b0], xmm7
lea rcx, [0x1800cd950]
call fcn.18009d564
lea rcx, [0x18010d11c]
call fcn.18009d6a4
jmp 0x180022f9e
call fcn.180001df0
nop
call fcn.1800a45b8
int3
call fcn.180001df0
int3
call fcn.1800a45b8
int3
call fcn.1800a45b8
int3
lea rcx, [0x18010d124]
call fcn.18009d704
cmp dword [0x18010d124], 0xffffffff
jne 0x180022224
mov byte [0x180105964], 1
movaps xmmword [0x180105940], xmm6
movaps xmmword [0x180105950], xmm7
mov eax, dword [rsp + 0x70]
mov dword [0x180105960], eax
lea rcx, [0x1800cd9e0]
call fcn.18009d564
lea rcx, [0x18010d124]
call fcn.18009d6a4
jmp 0x180022224
call fcn.180001e88
int3
call fcn.1800a45b8
int3
call fcn.1800a45b8
int3
call fcn.1800a45b8
int3
call fcn.1800a45b8
int3
lea rcx, [0x18010d128]
call fcn.18009d704
cmp dword [0x18010d128], 0xffffffff
jne 0x180022663
mov word [0x180105890], 0x12d
movaps xmmword [0x180105870], xmm6
movaps xmmword [0x180105880], xmm7
lea rcx, [0x1800cd9c0]
call fcn.18009d564
lea rcx, [0x18010d128]
call fcn.18009d6a4
jmp 0x180022663
call fcn.1800a45b8
nop
call fcn.1800a45b8
nop
call fcn.1800a45b8
nop
call fcn.1800a45b8
nop
lea rcx, [0x18010d120]
call fcn.18009d704
cmp dword [0x18010d120], 0xffffffff
jne 0x180022acb
mov byte [0x180105912], 1
movaps xmmword [0x1801058f0], xmm6
movaps xmmword [0x180105900], xmm7
movzx eax, word [rbp - 0x68]
mov word [0x180105910], ax
lea rcx, [0x1800cd9a0]
call fcn.18009d564
lea rcx, [0x18010d120]
call fcn.18009d6a4
jmp 0x180022acb
call fcn.1800a45b8
nop
call fcn.1800a45b8
nop
call fcn.1800a45b8
int3
lea rcx, [0x18010d12c]
call fcn.18009d704
cmp dword [0x18010d12c], 0xffffffff
jne 0x180022d54
mov byte [0x180105866], 1
movaps xmmword [0x180105840], xmm6
movaps xmmword [0x180105850], xmm7
mov eax, dword [rsp + 0x70]
mov dword [0x180105860], eax
movzx eax, word [rsp + 0x74]
mov word [0x180105864], ax
lea rcx, [0x1800cd970]
call fcn.18009d564
lea rcx, [0x18010d12c]
call fcn.18009d6a4
jmp 0x180022d54
call fcn.180001df0
int3
call fcn.1800a45b8
nop
call fcn.1800a45b8
int3