Function at 0x18007f578
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov byte [rax + 0x20], r9b
mov dword [rax + 0x18], r8d
mov qword [rax + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xaa8]
sub rsp, 0xb70
mov qword [rbp + 0x268], 0xfffffffffffffffe
mov qword [rax + 8], rbx
movaps xmmword [rax - 0x48], xmm6
mov r12, rdx
mov rsi, rcx
xor r13d, r13d
mov r15d, r13d
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d8], xmm0
mov ebx, 0x200
mov r8d, ebx
xor edx, edx
lea rcx, [rbp + 0x360]
call sub.VCRUNTIME140.dll_memset
mov r8d, ebx
xor edx, edx
lea rcx, [rbp + 0x660]
call sub.VCRUNTIME140.dll_memset
mov r8d, ebx
xor edx, edx
lea rcx, [rbp + 0x860]
call sub.VCRUNTIME140.dll_memset
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x114], xmm0
mov qword [rbp + 0x124], r13
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x560]
call sub.VCRUNTIME140.dll_memset
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
lea ecx, [r13 + 0x30]
call fcn.1802690a8
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x70], rax
mov ecx, dword [0x1802bccdc]
mov rax, qword gs:[0x58]
mov r14, qword [rax + rcx*8]
or rbx, 0xffffffffffffffff
lea edi, [rbx + 0xa]
mov eax, 4
mov eax, dword [r14 + rax]
cmp dword [0x1802c21d0], eax
jle 0x18007f985
lea rcx, [0x1802c21d0]
call fcn.1802696f0
cmp dword [0x1802c21d0], ebx
jne 0x18007f985
lea rax, [rbp + 0x1e8]
mov qword [rbp], rax
mov dword [rsp + 0x40], edi
mov eax, dword [rsp + 0x40]
xor al, 0x43
mov byte [rsp + 0x44], al
mov eax, dword [rsp + 0x40]
inc al
xor al, 0x72
mov byte [rsp + 0x45], al
mov eax, dword [rsp + 0x40]
add al, 2
mov cl, 0x65
xor al, cl
mov byte [rsp + 0x46], al
mov eax, dword [rsp + 0x40]
add al, 3
xor al, 0x61
mov byte [rsp + 0x47], al
mov eax, dword [rsp + 0x40]
add al, 4
xor al, 0x74
mov byte [rsp + 0x48], al
mov eax, dword [rsp + 0x40]
add al, 5
xor al, cl
mov byte [rsp + 0x49], al
mov eax, dword [rsp + 0x40]
add al, 6
xor al, 0x54
mov byte [rsp + 0x4a], al
mov eax, dword [rsp + 0x40]
add al, 7
lea edx, [rbx + 0x70]
xor al, dl
mov byte [rsp + 0x4b], al
mov eax, dword [rsp + 0x40]
add al, 8
xor al, dl
mov byte [rsp + 0x4c], al
mov eax, dword [rsp + 0x40]
add al, dil
lea r8d, [r13 + 0x6c]
xor al, r8b
mov byte [rsp + 0x4d], al
mov eax, dword [rsp + 0x40]
add al, 0xa
xor al, 0x68
mov byte [rsp + 0x4e], al
mov eax, dword [rsp + 0x40]
add al, 0xb
xor al, cl
mov byte [rsp + 0x4f], al
mov eax, dword [rsp + 0x40]
add al, 0xc
xor al, r8b
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x40]
add al, 0xd
lea ecx, [rbx + 0x71]
xor al, cl
mov byte [rsp + 0x51], al
mov eax, dword [rsp + 0x40]
add al, 0xe
xor al, 0x33
mov byte [rsp + 0x52], al
mov eax, dword [rsp + 0x40]
add al, 0xf
xor al, 0x32
mov byte [rsp + 0x53], al
mov eax, dword [rsp + 0x40]
add al, 0x10
xor al, 0x53
mov byte [rsp + 0x54], al
mov eax, dword [rsp + 0x40]
add al, 0x11
xor al, 0x6e
mov byte [rsp + 0x55], al
mov eax, dword [rsp + 0x40]
add al, 0x12
xor al, 0x61
mov byte [rsp + 0x56], al
mov eax, dword [rsp + 0x40]
add al, 0x13
xor al, cl
mov byte [rsp + 0x57], al
mov eax, dword [rsp + 0x40]
add al, 0x14
xor al, 0x73
mov byte [rsp + 0x58], al
mov eax, dword [rsp + 0x40]
add al, 0x15
xor al, 0x68
mov byte [rsp + 0x59], al
mov eax, dword [rsp + 0x40]
add al, 0x16
xor al, dl
mov byte [rsp + 0x5a], al
mov eax, dword [rsp + 0x40]
add al, 0x17
xor al, 0x74
mov byte [rsp + 0x5b], al
xor eax, eax
mov byte [rsp + 0x5c], al
mov al, byte [rsp + 0x44]
mov edx, r13d
mov al, byte [rsp + rdx + 0x44]
mov ecx, dword [rsp + 0x40]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x44], cl
inc rdx
cmp rdx, 0x18
jb 0x18007f7dd
mov byte [rsp + 0x5c], r13b
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e8], xmm0
mov qword [rbp + 0x1f8], r13
mov qword [rbp + 0x200], r13
lea rax, [rsp + 0x44]
mov r8, rbx
inc r8
cmp byte [rax + r8], r13b
jne 0x18007f81b
lea rdx, [rsp + 0x44]
lea rcx, [rbp + 0x1e8]
call fcn.18007b70c
nop
mov byte [rsp + 0x74], 0x74
mov byte [rsp + 0x75], 0x6e
mov eax, 0x7b
mov byte [rsp + 0x76], al
lea edx, [rax - 4]
mov byte [rsp + 0x77], dl
mov byte [rsp + 0x78], 0x6e
mov byte [rsp + 0x79], 0x75
mov byte [rsp + 0x7a], 0x3c
mov byte [rsp + 0x7b], 0x3b
mov byte [rsp + 0x7c], r13b
mov al, byte [rsp + 0x74]
mov rcx, r13
mov al, byte [rsp + rcx + 0x74]
sub al, dil
mov byte [rsp + rcx + 0x74], al
inc rcx
cmp rcx, 8
jb 0x18007f870
xorps xmm0, xmm0
movups xmmword [rbp + 0x138], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x148], xmm1
lea rax, [rsp + 0x74]
mov r8, rbx
inc r8
cmp byte [rax + r8], r13b
jne 0x18007f8a1
lea rdx, [rsp + 0x74]
lea rcx, [rbp + 0x138]
call fcn.18007b70c
nop
lea rdx, [rbp + 0x138]
lea rcx, [rbp + 0x2c8]
call fcn.180188b20
nop
mov qword [rsp + 0x20], r13
mov r9b, 1
lea r8, [rbp + 0x1e8]
mov rdx, rax
lea rcx, [0x1802c1c20]
call fcn.18008908c
nop
mov rdx, qword [rbp + 0x150]
cmp rdx, 0x10
jb 0x18007f933
inc rdx
mov rcx, qword [rbp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007f92e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18007f92e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rbp + 0x148], xmm0
mov byte [rbp + 0x138], r13b
mov r8, rdi
xor edx, edx
lea rcx, [rsp + 0x74]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x19]
lea rcx, [rsp + 0x44]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027d4f8]
call fcn.18026951c
nop
lea rcx, [0x1802c21d0]
call fcn.180269690
mov eax, 4
mov eax, dword [r14 + rax]
cmp dword [0x1802c19d0], eax
jle 0x18007fba7
lea rcx, [0x1802c19d0]
call fcn.1802696f0
cmp dword [0x1802c19d0], ebx
jne 0x18007fba7
lea rax, [rbp + 0x208]
mov qword [rbp + 0xe8], rax
mov eax, 0x6b
mov dword [rbp - 0x60], eax
mov byte [rbp - 0x5c], 0x3f
mov byte [rbp - 0x5b], 3
mov byte [rbp - 0x5a], 0x19
mov byte [rbp - 0x59], 0xe
mov byte [rbp - 0x58], 0xa
mov byte [rbp - 0x57], 0xf
mov byte [rbp - 0x56], 0x58
mov eax, 0x59
mov byte [rbp - 0x55], al
mov byte [rbp - 0x54], 0x2d
mov byte [rbp - 0x53], 2
mov byte [rbp - 0x52], 0x19
mov byte [rbp - 0x51], 0x18
mov byte [rbp - 0x50], 0x1f
xor eax, eax
mov byte [rbp - 0x4f], al
mov al, byte [rbp - 0x5c]
mov rdx, r13
mov al, byte [rbp + rdx - 0x5c]
mov ecx, dword [rbp - 0x60]
xor cl, al
mov byte [rbp + rdx - 0x5c], cl
inc rdx
cmp rdx, 0xd
jb 0x18007fa0b
mov byte [rbp - 0x4f], r13b
xorps xmm0, xmm0
movups xmmword [rbp + 0x208], xmm0
mov qword [rbp + 0x218], r13
mov qword [rbp + 0x220], r13
lea rax, [rbp - 0x5c]
mov r8, rbx
inc r8
cmp byte [rax + r8], r13b
jne 0x18007fa44
lea rdx, [rbp - 0x5c]
lea rcx, [rbp + 0x208]
call fcn.18007b70c
nop
mov byte [rsp + 0x7d], 0x70
mov byte [rsp + 0x7e], 0x6a
mov eax, 0x77
mov byte [rsp + 0x7f], al
mov byte [rbp - 0x80], 0x73
mov byte [rbp - 0x7f], 0x6a
mov byte [rbp - 0x7e], 0x71
mov byte [rbp - 0x7d], 0x38
mov eax, 0x37
mov byte [rbp - 0x7c], al
mov byte [rbp - 0x7b], r13b
mov al, byte [rsp + 0x7d]
mov rcx, r13
mov al, byte [rsp + rcx + 0x7d]
sub al, 5
mov byte [rsp + rcx + 0x7d], al
inc rcx
cmp rcx, 8
jb 0x18007fa94
xorps xmm0, xmm0
movups xmmword [rbp + 0x158], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x168], xmm1
lea rax, [rsp + 0x7d]
mov r8, rbx
inc r8
cmp byte [rax + r8], r13b
jne 0x18007fac4
lea rdx, [rsp + 0x7d]
lea rcx, [rbp + 0x158]
call fcn.18007b70c
nop
lea rdx, [rbp + 0x158]
lea rcx, [rbp + 0x2e8]
call fcn.180188b20
nop
mov qword [rsp + 0x20], r13
mov r9b, 1
lea r8, [rbp + 0x208]
mov rdx, rax
lea rcx, [0x1802c1f00]
call fcn.180088540
nop
mov rdx, qword [rbp + 0x170]
cmp rdx, 0x10
jb 0x18007fb56
inc rdx
mov rcx, qword [rbp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007fb51
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18007fb51
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rbp + 0x168], xmm0
mov byte [rbp + 0x158], r13b
mov r8, rdi
xor edx, edx
lea rcx, [rsp + 0x7d]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xe]
lea rcx, [rbp - 0x5c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027d4ec]
call fcn.18026951c
nop
lea rcx, [0x1802c19d0]
call fcn.180269690
mov eax, 4
mov eax, dword [r14 + rax]
cmp dword [0x1802c21cc], eax
jle 0x18007fdc0
lea rcx, [0x1802c21cc]
call fcn.1802696f0
cmp dword [0x1802c21cc], ebx
jne 0x18007fdc0
lea rax, [rbp + 0x228]
mov qword [rbp + 0xe8], rax
mov dword [rbp - 0x3c], 0x60
mov byte [rbp - 0x38], 0x34
mov byte [rbp - 0x37], 8
mov byte [rbp - 0x36], 0x12
mov byte [rbp - 0x35], 5
mov byte [rbp - 0x34], 1
mov byte [rbp - 0x33], 4
mov byte [rbp - 0x32], 0x53
mov byte [rbp - 0x31], 0x52
mov byte [rbp - 0x30], 0x2e
mov byte [rbp - 0x2f], 5
mov byte [rbp - 0x2e], 0x18
mov byte [rbp - 0x2d], 0x14
xor eax, eax
mov byte [rbp - 0x2c], al
mov al, byte [rbp - 0x38]
mov rdx, r13
mov al, byte [rbp + rdx - 0x38]
mov ecx, dword [rbp - 0x3c]
xor cl, al
mov byte [rbp + rdx - 0x38], cl
inc rdx
cmp rdx, 0xc
jb 0x18007fc24
mov byte [rbp - 0x2c], r13b
xorps xmm0, xmm0
movups xmmword [rbp + 0x228], xmm0
mov qword [rbp + 0x238], r13
mov qword [rbp + 0x240], r13
lea rax, [rbp - 0x38]
mov r8, rbx
inc r8
cmp byte [rax + r8], r13b
jne 0x18007fc5d
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0x228]
call fcn.18007b70c
nop
mov dword [rbp - 0x4c], 0x27
mov byte [rbp - 0x48], 0x4c
mov byte [rbp - 0x47], 0x42
mov byte [rbp - 0x46], 0x55
mov byte [rbp - 0x45], 0x49
mov byte [rbp - 0x44], 0x42
mov byte [rbp - 0x43], 0x4b
mov byte [rbp - 0x42], 0x14
mov byte [rbp - 0x41], 0x15
xor eax, eax
mov byte [rbp - 0x40], al
mov al, byte [rbp - 0x48]
mov rdx, r13
mov al, byte [rbp + rdx - 0x48]
mov ecx, dword [rbp - 0x4c]
xor cl, al
mov byte [rbp + rdx - 0x48], cl
inc rdx
cmp rdx, 8
jb 0x18007fca9
mov byte [rbp - 0x40], r13b
xorps xmm0, xmm0
movups xmmword [rbp + 0x178], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x188], xmm1
lea rax, [rbp - 0x48]
mov r8, rbx
inc r8
cmp byte [rax + r8], r13b
jne 0x18007fcdf
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x178]
call fcn.18007b70c
nop
lea rdx, [rbp + 0x178]
lea rcx, [rbp + 0x308]
call fcn.180188b20
nop
mov qword [rsp + 0x20], r13
mov r9b, 1
lea r8, [rbp + 0x228]
mov rdx, rax
lea rcx, [0x1802c1f90]
call fcn.180088540
nop
mov rdx, qword [rbp + 0x190]
cmp rdx, 0x10
jb 0x18007fd70
inc rdx
mov rcx, qword [rbp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007fd6b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18007fd6b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rbp + 0x188], xmm0
mov byte [rbp + 0x178], r13b
mov r8, rdi
xor edx, edx
lea rcx, [rbp - 0x48]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xd]
lea rcx, [rbp - 0x38]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027d4e0]
call fcn.18026951c
nop
lea rcx, [0x1802c21cc]
call fcn.180269690
xor r8d, r8d
lea edx, [r8 + 4]
lea rcx, [0x1802c1c20]
call fcn.180089bc8
mov rdi, rax
mov qword [rbp], rax
cmp rax, rbx
jne 0x18007fe42
mov qword [rsi], r13
mov qword [rsi + 8], r13
mov edi, 0x30
mov ecx, edi
call fcn.1802690a8
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsi], rax
mov rcx, qword [rbp - 0x70]
mov rbx, qword [rcx + 8]
cmp byte [rbx + 0x19], r13b
jne 0x180080c4f
mov r8, qword [rbx + 0x10]
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x70]
call fcn.180097168
mov rcx, rbx
mov rbx, qword [rbx]
mov rdx, rdi
call fcn.180269534
cmp byte [rbx + 0x19], r13b
je 0x18007fe18
jmp 0x180080c4b
mov dword [rbp + 0x110], 0x1c
lea rcx, [0x1802c1f00]
jmp 0x18007fea3
mov eax, dword [rbp + 0xac0]
cmp dword [rbp + 0x11c], eax
jne 0x18007fe9c
mov r8d, dword [rbp + 0x118]
xor edx, edx
mov ecx, 0x1fffff
call fcn.18019bff8
test rax, rax
je 0x18007fe9c
mov edx, r15d
mov ecx, dword [rbp + 0x118]
mov dword [rbp + rdx*4 + 0x560], ecx
mov qword [rbp + rdx*8 + 0x360], rax
inc r15d
cmp r15d, 0x40
je 0x18007feb6
lea rcx, [0x1802c1f90]
lea r8, [rbp + 0x110]
mov rdx, rdi
call fcn.180087840
test eax, eax
jne 0x18007fe55
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], r13
mov ecx, 0x30
call fcn.1802690a8
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x18], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
cmp r12, rax
setne r12b
mov byte [rbp + 0xac8], r12b
mov eax, 4
mov eax, dword [r14 + rax]
cmp dword [0x1802c1ee8], eax
jle 0x180080176
lea rcx, [0x1802c1ee8]
call fcn.1802696f0
cmp dword [0x1802c1ee8], ebx
jne 0x180080176
lea rax, [rbp + 0x248]
mov qword [rbp + 0xe8], rax
mov dword [rsp + 0x60], 0x4d
mov eax, dword [rsp + 0x60]
xor al, 0x43
mov byte [rsp + 0x64], al
mov eax, dword [rsp + 0x60]
inc al
xor al, 0x72
mov byte [rsp + 0x65], al
mov eax, dword [rsp + 0x60]
add al, 2
mov cl, 0x65
xor al, cl
mov byte [rsp + 0x66], al
mov eax, dword [rsp + 0x60]
add al, 3
xor al, 0x61
mov byte [rsp + 0x67], al
mov eax, dword [rsp + 0x60]
add al, 4
xor al, 0x74
mov byte [rsp + 0x68], al
mov eax, dword [rsp + 0x60]
add al, 5
xor al, cl
mov byte [rsp + 0x69], al
mov eax, dword [rsp + 0x60]
add al, 6
xor al, 0x45
mov byte [rsp + 0x6a], al
mov eax, dword [rsp + 0x60]
add al, 7
xor al, 0x76
mov byte [rsp + 0x6b], al
mov eax, dword [rsp + 0x60]
add al, 8
xor al, cl
mov byte [rsp + 0x6c], al
mov eax, dword [rsp + 0x60]
mov edi, 9
add al, dil
xor al, 0x6e
mov byte [rsp + 0x6d], al
mov eax, dword [rsp + 0x60]
add al, 0xa
xor al, 0x74
mov byte [rsp + 0x6e], al
mov eax, dword [rsp + 0x60]
add al, 0xb
xor al, 0x57
mov byte [rsp + 0x6f], al
xor eax, eax
mov byte [rsp + 0x70], al
mov al, byte [rsp + 0x64]
mov rdx, r13
mov al, byte [rsp + rdx + 0x64]
mov ecx, dword [rsp + 0x60]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x64], cl
inc rdx
cmp rdx, 0xc
jb 0x18007ffd7
mov byte [rsp + 0x70], r13b
xorps xmm0, xmm0
movups xmmword [rbp + 0x248], xmm0
mov qword [rbp + 0x258], r13
mov qword [rbp + 0x260], r13
lea rax, [rsp + 0x64]
mov r8, rbx
inc r8
cmp byte [rax + r8], r13b
jne 0x180080015
lea rdx, [rsp + 0x64]
lea rcx, [rbp + 0x248]
call fcn.18007b70c
nop
mov byte [rbp - 0x7a], 0x74
mov byte [rbp - 0x79], 0x6e
mov eax, 0x7b
mov byte [rbp - 0x78], al
mov eax, 0x77
mov byte [rbp - 0x77], al
mov byte [rbp - 0x76], 0x6e
mov byte [rbp - 0x75], 0x75
mov byte [rbp - 0x74], 0x3c
mov byte [rbp - 0x73], 0x3b
mov byte [rbp - 0x72], r13b
mov al, byte [rbp - 0x7a]
mov rcx, r13
mov al, byte [rbp + rcx - 0x7a]
sub al, dil
mov byte [rbp + rcx - 0x7a], al
inc rcx
cmp rcx, 8
jb 0x180080062
xorps xmm0, xmm0
movups xmmword [rbp + 0x198], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1a8], xmm1
lea rax, [rbp - 0x7a]
inc rbx
cmp byte [rax + rbx], r13b
jne 0x18008008f
mov r8, rbx
lea rdx, [rbp - 0x7a]
lea rcx, [rbp + 0x198]
call fcn.18007b70c
nop
lea rdx, [rbp + 0x198]
lea rcx, [rbp + 0x328]
call fcn.180188b20
nop
mov qword [rsp + 0x20], r13
mov r9b, 1
lea r8, [rbp + 0x248]
mov rdx, rax
lea rcx, [0x1802c1b90]
call fcn.1800879fc
nop
mov rdx, qword [rbp + 0x1b0]
cmp rdx, 0x10
jb 0x180080123
inc rdx
mov rcx, qword [rbp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008011e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18008011e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rbp + 0x1a8], xmm0
mov byte [rbp + 0x198], r13b
mov r8, rdi
xor edx, edx
lea rcx, [rbp - 0x7a]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xd]
lea rcx, [rsp + 0x64]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027d4d4]
call fcn.18026951c
nop
lea rcx, [0x1802c1ee8]
call fcn.180269690
jmp 0x18008017b
mov edi, 9
mov dword [rbp - 0x28], 0x20
mov byte [rbp - 0x24], 0x73
mov byte [rbp - 0x23], 0x45
mov byte [rbp - 0x22], 0x54
mov byte [rbp - 0x21], 0x65
mov byte [rbp - 0x20], 0x56
mov byte [rbp - 0x1f], 0x45
mov byte [rbp - 0x1e], 0x4e
mov byte [rbp - 0x1d], 0x54
xor eax, eax
mov byte [rbp - 0x1c], al
mov al, byte [rbp - 0x24]
mov rdx, r13
mov al, byte [rbp + rdx - 0x24]
mov ecx, dword [rbp - 0x28]
xor cl, al
mov byte [rbp + rdx - 0x24], cl
inc rdx
cmp rdx, 8
jb 0x1800801ad
mov byte [rbp - 0x1c], r13b
lea rcx, [0x18027fdd8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, [rbp - 0x24]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r13, rax
mov r8, rdi
xor edx, edx
lea rcx, [rbp - 0x24]
call qword [sym.imp.VCRUNTIME140.dll_memset]
xor r14d, r14d
test r15d, r15d
je 0x1800803d8
xor edi, edi
lea rcx, [0x1802c1ba8]
cmp qword [0x1802c1bc0], 0x10
cmovae rcx, qword [0x1802c1ba8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
jne 0x180080256
lea rcx, [0x1802c1ba8]
cmp qword [0x1802c1bc0], 0x10
cmovae rcx, qword [0x1802c1ba8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x1802c1ba0], rax
mov r8, rax
lea rdx, [0x1802c1ba8]
call fcn.18008c99c
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [0x1802c1b98]
mov rbx, rax
mov qword [rbp + rdi + 0x660], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r9, [rbp + 0x860]
lea r9, [r9 + r14*8]
mov dword [rsp + 0x30], 2
and dword [rsp + 0x28], 0
and dword [rsp + 0x20], 0
mov r8, qword [rbp + 0xab8]
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
mov bl, byte [0x1802bd272]
mov byte [0x1802bd272], 1
mov byte [rsp + 0x20], 1
mov r9b, r12b
mov r8, qword [rbp + rdi + 0x860]
mov rdx, qword [rbp + rdi + 0x360]
mov rcx, r13
call fcn.18007e670
mov byte [0x1802bd272], bl
mov r12, qword [rbp + rdi + 0x860]
mov rbx, qword [rbp - 0x18]
mov rax, qword [rbx + 8]
mov qword [rbp + 8], rax
xor r8d, r8d
mov dword [rbp + 0x10], r8d
mov rcx, rbx
cmp byte [rax + 0x19], r8b
jne 0x18008032d
mov rdx, qword [rbp + rdi + 0x360]
mov qword [rbp + 8], rax
cmp qword [rax + 0x20], rdx
jae 0x18008031a
mov dword [rbp + 0x10], r8d
mov rax, qword [rax + 0x10]
jmp 0x180080327
mov dword [rbp + 0x10], 1
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], r8b
je 0x180080306
cmp byte [rcx + 0x19], r8b
jne 0x180080341
mov rax, qword [rcx + 0x20]
cmp qword [rbp + rdi + 0x360], rax
jae 0x1800803bd
movabs rax, 0x555555555555555
cmp qword [rbp - 0x10], rax
je 0x180080c80
lea rax, [rbp - 0x18]
mov qword [rbp + 0x1b8], rax
mov qword [rbp + 0x1c0], r8
mov ecx, 0x30
call fcn.1802690a8
nop
mov rcx, qword [rbp + rdi + 0x360]
mov qword [rax + 0x20], rcx
and qword [rax + 0x28], 0
mov qword [rax], rbx
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbx
and word [rax + 0x18], 0
and qword [rbp + 0x1c0], 0
movups xmm0, xmmword [rbp + 8]
movdqu xmmword [rbp + 0x270], xmm0
mov r8, rax
lea rdx, [rbp + 0x270]
lea rcx, [rbp - 0x18]
call fcn.18007d648
mov rcx, rax
mov qword [rcx + 0x28], r12
inc r14d
add rdi, 8
cmp r14d, r15d
mov r12b, byte [rbp + 0xac8]
jb 0x180080201
xor r12d, r12d
mov ebx, r12d
inc rbx
mov r9d, 0x7d0
xor r8d, r8d
lea rdx, [rbp + 0x660]
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
cmp eax, r15d
jb 0x18008040d
cmp rbx, 3
jb 0x1800803de
mov r14d, r15d
jmp 0x18008062f
mov eax, eax
mov rbx, qword [rbp + rax*8 + 0x360]
lea r13, [rbp + 0x560]
lea r13, [r13 + rax*4]
mov rdx, r13
lea rcx, [rbp - 0x70]
call fcn.18008c004
mov qword [rax], rbx
lea rcx, [rbp + 0x280]
call fcn.18008c304
mov rdx, rax
lea rcx, [rbp + 8]
call fcn.180094e70
nop
mov rbx, qword [rbp + 0x10]
mov r8d, dword [rbp + 0xac0]
mov rdx, rbx
mov rcx, qword [rbp + 8]
call fcn.180268ef0
cmp rbx, rax
jne 0x180080570
mov eax, dword [r13]
mov dword [rbp - 8], eax
lea rdx, [rbp + 0xac0]
call fcn.18008c1cc
mov rdi, rax
mov rbx, qword [rax]
mov r14, qword [rbx + 8]
jmp 0x1800804a9
mov r8, qword [r14 + 0x10]
mov rdx, rdi
mov rcx, rdi
call fcn.1800959d8
mov rcx, r14
mov r14, qword [r14]
mov edx, 0x20
call fcn.180269534
cmp byte [r14 + 0x19], r12b
je 0x18008048a
mov qword [rbx + 8], rbx
mov qword [rbx], rbx
mov qword [rbx + 0x10], rbx
mov qword [rdi + 8], r12
lea r14, [rbp - 8]
mov r12, qword [rdi]
mov r9, r14
mov r8, r12
lea rdx, [rbp + 0x348]
mov rcx, rdi
call fcn.180097b94
movups xmm6, xmmword [rax]
movsd xmm0, qword [rax + 0x10]
movsd qword [rbp + 0x2b0], xmm0
cmp byte [rbp + 0x2b0], 0
jne 0x18008055c
movabs rax, 0x7ffffffffffffff
cmp qword [rdi + 8], rax
je 0x180080c7a
mov rbx, qword [rdi]
mov qword [rbp + 0x1c8], rdi
and qword [rbp + 0x1d0], 0
mov ecx, 0x20
call fcn.1802690a8
nop
mov ecx, dword [r14]
mov dword [rax + 0x1c], ecx
mov qword [rax], rbx
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbx
xor ecx, ecx
mov word [rax + 0x18], cx
mov qword [rbp + 0x1d0], rcx
movdqu xmmword [rbp + 0x290], xmm6
mov r8, rax
lea rdx, [rbp + 0x290]
mov rcx, rdi
call fcn.18007d648
add r14, 4
lea rax, [rbp - 4]
cmp r14, rax
jne 0x1800804c5
xor r12d, r12d
mov r14d, r15d
mov rdi, r12
test r15d, r15d
je 0x1800805da
lea r12, [rbp + 0x560]
xor edx, edx
mov rcx, qword [rbp + rdi*8 + 0x660]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x1800805cb
mov rbx, qword [rbp + rdi*8 + 0x360]
mov rdx, r12
lea rcx, [rbp - 0x70]
call fcn.18008c004
mov qword [rax], rbx
lea rdx, [rbp + 0xac0]
call fcn.18008c1cc
mov r8, r13
lea rdx, [rbp + 0x2b8]
mov rcx, rax
call fcn.180094f7c
inc rdi
add r12, 4
cmp rdi, r14
jb 0x180080582
xor r12d, r12d
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x18008062f
mov rax, qword [rbp + 0x18]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008061e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18008061e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
xorps xmm0, xmm0
movdqu xmmword [rbp + 8], xmm0
mov qword [rbp + 0x18], r12
cmp qword [rbp - 0x68], r12
jne 0x180080a16
mov eax, 0x64
mov word [rbp + 0x20], ax
mov eax, 0x36
mov word [rbp + 0x22], ax
mov eax, 0x66
mov word [rbp + 0x24], ax
lea r11d, [rax - 0x3d]
mov word [rbp + 0x26], r11w
lea eax, [r11 + 0x37]
mov word [rbp + 0x28], ax
lea r13d, [r11 + 0x41]
mov word [rbp + 0x2a], r13w
lea edx, [rax + 0x12]
mov word [rbp + 0x2c], dx
lea ebx, [rax + 0x1d]
mov word [rbp + 0x2e], bx
mov word [rbp + 0x30], dx
lea ecx, [rax + 0x17]
mov word [rbp + 0x32], cx
lea eax, [rdx - 2]
mov word [rbp + 0x34], ax
mov word [rbp + 0x36], r11w
lea eax, [rdx - 3]
mov word [rbp + 0x38], ax
lea r8d, [r11 + 0x4f]
mov word [rbp + 0x3a], r8w
lea eax, [rdx + 9]
mov word [rbp + 0x3c], ax
mov word [rbp + 0x3e], r11w
lea edi, [rdx + 4]
mov word [rbp + 0x40], di
lea r10d, [r11 + 0x55]
mov word [rbp + 0x42], r10w
lea r10d, [r11 + 0x4c]
mov word [rbp + 0x44], r10w
mov word [rbp + 0x46], bx
mov word [rbp + 0x48], dx
lea r9d, [r11 + 0x50]
mov word [rbp + 0x4a], r9w
mov word [rbp + 0x4c], r10w
lea r14d, [r11 + 0x45]
mov word [rbp + 0x4e], r14w
mov word [rbp + 0x50], r11w
mov word [rbp + 0x52], r14w
lea eax, [rdx + 0xd]
mov word [rbp + 0x54], ax
mov word [rbp + 0x56], r14w
mov word [rbp + 0x58], cx
mov word [rbp + 0x5a], bx
lea edx, [rbx - 1]
mov word [rbp + 0x5c], dx
mov word [rbp + 0x5e], r11w
lea eax, [rbx - 0xb]
mov word [rbp + 0x60], ax
mov word [rbp + 0x62], cx
mov word [rbp + 0x64], r11w
lea eax, [rbx - 2]
mov word [rbp + 0x66], ax
mov word [rbp + 0x68], r14w
mov word [rbp + 0x6a], di
mov word [rbp + 0x6c], r8w
mov word [rbp + 0x6e], bx
mov word [rbp + 0x70], r14w
mov word [rbp + 0x72], r11w
mov word [rbp + 0x74], r9w
mov word [rbp + 0x76], ax
mov word [rbp + 0x78], r8w
lea eax, [rbx - 0x11]
mov word [rbp + 0x7a], ax
mov word [rbp + 0x7c], r14w
mov word [rbp + 0x7e], dx
mov word [rbp + 0x80], dx
mov word [rbp + 0x82], r11w
lea eax, [rbx - 0xe]
mov word [rbp + 0x84], ax
mov word [rbp + 0x86], r13w
lea eax, [rbx - 0xb]
mov word [rbp + 0x88], ax
mov word [rbp + 0x8a], r10w
mov word [rbp + 0x8c], r14w
lea eax, [rbx - 0x10]
mov word [rbp + 0x8e], ax
lea ecx, [rbx - 0x46]
mov word [rbp + 0x90], cx
mov word [rbp + 0x92], r11w
lea ecx, [rbx - 0x24]
mov word [rbp + 0x94], cx
mov word [rbp + 0x96], r8w
mov word [rbp + 0x98], dx
mov word [rbp + 0x9a], dx
lea ecx, [rbx - 0xb]
mov word [rbp + 0x9c], cx
lea ecx, [rbx - 0x12]
mov word [rbp + 0x9e], cx
mov word [rbp + 0xa0], r10w
lea ecx, [rbx + 5]
mov word [rbp + 0xa2], cx
mov word [rbp + 0xa4], r11w
mov word [rbp + 0xa6], r9w
lea r10d, [r11 + 0x52]
mov word [rbp + 0xa8], r10w
mov word [rbp + 0xaa], r8w
lea r8d, [r11 + 0x43]
mov word [rbp + 0xac], r8w
mov word [rbp + 0xae], r14w
mov word [rbp + 0xb0], dx
mov word [rbp + 0xb2], dx
mov word [rbp + 0xb4], r11w
mov word [rbp + 0xb6], bx
mov word [rbp + 0xb8], r14w
mov r8d, r10d
mov word [rbp + 0xba], r8w
mov word [rbp + 0xbc], di
lea edx, [rbx - 0xb]
mov word [rbp + 0xbe], dx
lea edx, [rbx - 6]
mov word [rbp + 0xc0], dx
mov word [rbp + 0xc2], r13w
mov word [rbp + 0xc4], bx
mov word [rbp + 0xc6], r14w
mov word [rbp + 0xc8], ax
mov word [rbp + 0xca], r11w
mov word [rbp + 0xcc], r9w
mov word [rbp + 0xce], r8w
mov word [rbp + 0xd0], r14w
mov word [rbp + 0xd2], di
mov word [rbp + 0xd4], r13w
mov word [rbp + 0xd6], bx
lea r10d, [r11 + 0x55]
mov word [rbp + 0xd8], r10w
mov word [rbp + 0xda], r8w
mov word [rbp + 0xdc], r14w
lea eax, [rbx - 8]
mov word [rbp + 0xde], ax
mov word [rbp + 0xe0], cx
lea eax, [rbx - 0x46]
mov word [rbp + 0xe2], ax
mov word [rbp + 0xe4], r12w
movzx eax, word [rbp + 0x20]
mov rcx, r12
lea edx, [rbx - 0x74]
movzx eax, word [rbp + rcx*2 + 0x20]
sub ax, dx
mov word [rbp + rcx*2 + 0x20], ax
inc rcx
cmp rcx, 0x62
jb 0x18008091f
lea rcx, [rbp + 0x20]
call fcn.18007aae4
nop
xor edx, edx
mov r8d, 0xc6
lea rcx, [rbp + 0x20]
call qword [sym.imp.VCRUNTIME140.dll_memset]
test r15d, r15d
je 0x180080973
lea rbx, [rbp + 0x660]
mov edi, r15d
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rbx, [rbx + 8]
sub rdi, 1
jne 0x180080960
mov qword [rsi], r12
mov qword [rsi + 8], r12
mov edi, 0x30
mov ecx, edi
call fcn.1802690a8
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsi], rax
mov rcx, qword [rbp - 0x18]
mov rbx, qword [rcx + 8]
cmp byte [rbx + 0x19], r12b
jne 0x1800809d1
mov r8, qword [rbx + 0x10]
lea rdx, [rbp - 0x18]
lea rcx, [rbp - 0x18]
call fcn.180097168
mov rcx, rbx
mov rbx, qword [rbx]
mov rdx, rdi
call fcn.180269534
cmp byte [rbx + 0x19], r12b
je 0x1800809a8
mov rcx, qword [rbp - 0x18]
mov rdx, rdi
call fcn.180269534
nop
mov rcx, qword [rbp - 0x70]
mov rbx, qword [rcx + 8]
cmp byte [rbx + 0x19], r12b
jne 0x180080c4f
mov r8, qword [rbx + 0x10]
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x70]
call fcn.180097168
mov rcx, rbx
mov rbx, qword [rbx]
mov rdx, rdi
call fcn.180269534
cmp byte [rbx + 0x19], r12b
je 0x1800809ec
jmp 0x180080c4b
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x1d8]
call fcn.18008c0f0
mov rdx, rax
lea rcx, [rbp + 0xf8]
call fcn.180095080
nop
test r15d, r15d
je 0x180080b2e
mov rdi, r12
mov r15b, byte [rbp + 0xac8]
mov rcx, qword [rbp + rdi + 0x660]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r10, qword [rbp + rdi + 0x860]
mov r8, qword [rbp - 0x18]
mov rax, qword [r8]
jmp 0x180080ab1
cmp qword [rax + 0x28], r10
je 0x180080ab6
mov rcx, qword [rax + 0x10]
cmp byte [rcx + 0x19], r12b
je 0x180080a96
mov rcx, qword [rax + 8]
jmp 0x180080a8b
cmp rax, qword [rcx + 0x10]
jne 0x180080a91
mov rax, rcx
mov rcx, qword [rcx + 8]
cmp byte [rcx + 0x19], r12b
je 0x180080a7e
mov rax, rcx
jmp 0x180080ab1
mov rax, rcx
mov rdx, qword [rcx]
cmp byte [rdx + 0x19], r12b
jne 0x180080ab1
mov rax, rdx
mov rcx, qword [rdx]
mov rdx, rcx
cmp byte [rcx + 0x19], r12b
je 0x180080aa2
cmp rax, r8
jne 0x180080a68
cmp rax, r8
je 0x180080ae9
mov bl, byte [0x1802bd272]
mov byte [0x1802bd272], 1
mov byte [rsp + 0x20], 1
mov r9b, r15b
mov r8, r10
mov rdx, qword [rax + 0x20]
mov rcx, qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.18007e670
mov byte [0x1802bd272], bl
mov rcx, qword [rbp + 0xf8]
mov rdx, qword [rbp + 0x100]
cmp rcx, rdx
je 0x180080b20
mov r8, qword [rbp + rdi + 0x360]
call fcn.180268fa0
cmp rax, qword [rbp + 0x100]
jne 0x180080b20
mov rcx, qword [rbp + rdi + 0x360]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rdi, 8
sub r14, 1
jne 0x180080a49
mov rcx, qword [rbp]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsi], r12
mov qword [rsi + 8], r12
mov edi, 0x30
mov ecx, edi
call fcn.1802690a8
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov rcx, qword [rbp - 0x70]
mov qword [rsi], rcx
mov qword [rbp - 0x70], rax
mov rcx, qword [rsi + 8]
mov rax, qword [rbp - 0x68]
mov qword [rsi + 8], rax
mov qword [rbp - 0x68], rcx
mov rcx, qword [rbp + 0xf8]
test rcx, rcx
je 0x180080bd8
mov rax, qword [rbp + 0x108]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180080bc1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180080bc1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xf8], xmm0
mov qword [rbp + 0x108], r12
mov rcx, qword [rbp - 0x18]
mov rbx, qword [rcx + 8]
cmp byte [rbx + 0x19], r12b
jne 0x180080c0f
mov r8, qword [rbx + 0x10]
lea rdx, [rbp - 0x18]
lea rcx, [rbp - 0x18]
call fcn.180097168
mov rcx, rbx
mov rbx, qword [rbx]
mov rdx, rdi
call fcn.180269534
cmp byte [rbx + 0x19], r12b
je 0x180080be6
mov rcx, qword [rbp - 0x18]
mov rdx, rdi
call fcn.180269534
nop
mov rcx, qword [rbp - 0x70]
mov rbx, qword [rcx + 8]
cmp byte [rbx + 0x19], r12b
jne 0x180080c4f
mov r8, qword [rbx + 0x10]
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x70]
call fcn.180097168
mov rcx, rbx
mov rbx, qword [rbx]
mov rdx, rdi
call fcn.180269534
cmp byte [rbx + 0x19], r12b
je 0x180080c26
mov rcx, qword [rbp - 0x70]
mov rdx, rdi
call fcn.180269534
mov rax, rsi
lea r11, [rsp + 0xb70]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18006d864
nop
call fcn.18006d864
int3