Function at 0x1800274f0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x98
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x10], 0xfffffffffffffffe
mov r14, r9
mov r13d, r8d
mov rsi, rdx
mov rbx, rcx
cmp byte [0x180052efc], 0
jne 0x180027708
mov rax, qword [0x180050c20]
movabs rcx, 0x924c8b4e276efd0
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276efe1
xor cl, byte [rax + rdx]
mov byte [0x180052eee], cl
movabs rcx, 0x924c8b4e276efd1
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276efe2
xor cl, byte [rax + rdx]
mov byte [0x180052eef], cl
movabs rcx, 0x924c8b4e276efd2
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276efe3
xor cl, byte [rax + rdx]
mov byte [0x180052ef0], cl
movabs rcx, 0x924c8b4e276efd3
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276efe4
xor cl, byte [rax + rdx]
mov byte [0x180052ef1], cl
movabs rcx, 0x924c8b4e276efd4
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276efe5
xor cl, byte [rax + rdx]
mov byte [0x180052ef2], cl
movabs rcx, 0x924c8b4e276efd5
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276efe6
xor cl, byte [rax + rdx]
mov byte [0x180052ef3], cl
movabs rcx, 0x924c8b4e276efd6
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276efe7
xor cl, byte [rax + rdx]
mov byte [0x180052ef4], cl
movabs rcx, 0x924c8b4e276efd7
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276efe8
xor cl, byte [rax + rdx]
mov byte [0x180052ef5], cl
movabs rcx, 0x924c8b4e276efd8
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276efe9
xor cl, byte [rax + rdx]
mov byte [0x180052ef6], cl
movabs rcx, 0x924c8b4e276efd9
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276efea
xor cl, byte [rax + rdx]
mov byte [0x180052ef7], cl
movabs rcx, 0x924c8b4e276efda
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276efeb
xor cl, byte [rax + rdx]
mov byte [0x180052ef8], cl
movabs rcx, 0x924c8b4e276efdb
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276efec
xor cl, byte [rax + rdx]
mov byte [0x180052ef9], cl
movabs rcx, 0x924c8b4e276efdc
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276efed
xor cl, byte [rax + rdx]
mov byte [0x180052efa], cl
movabs rcx, 0x924c8b4e276efdd
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276efee
xor cl, byte [rax + rdx]
mov byte [0x180052efb], cl
mov byte [0x180052efc], 1
xorps xmm0, xmm0
movups xmmword [rsi + 0x10], xmm0
movups xmmword [rsi], xmm0
lea rcx, [0x180052eee]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x180028347
mov rdi, rax
cmp rax, 0xf
ja 0x180027756
mov qword [rsi + 0x10], rdi
mov qword [rsi + 0x18], 0xf
lea rdx, [0x180052eee]
mov rcx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rdi, rsi
jmp 0x180027807
mov rax, rdi
or rax, 0xf
cmp rax, 0x17
mov r12d, 0x16
cmovae r12, rax
cmp r12, 0xfff
jb 0x1800277da
lea rcx, [r12 + 0x28]
call fcn.18003c980
lea rcx, [rax + 0x27]
mov rdx, 0xffffffffffffffd8
sub rdx, rax
mov r8d, edx
and r8d, 5
movabs r9, 0x5867f20cf71b6f6b
and r9, rcx
and rcx, 0xfffffffffffffffa
or rcx, r8
movabs r8, 0xa7980df308e49094
and rdx, r8
or r9, rdx
xor r8, r9
xor r9, rcx
xor rcx, 0x1a
or r8, rcx
movabs r15, 0x5867f20cf71b6f71
xor r15, r9
and r15, r8
mov qword [r15 - 8], rax
jmp 0x1800277e7
lea rcx, [r12 + 1]
call fcn.18003c980
mov r15, rax
mov qword [rsi], r15
mov qword [rsi + 0x10], rdi
mov qword [rsi + 0x18], r12
lea rdx, [0x180052eee]
mov rcx, r15
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rdi, r15
mov byte [rdi], 0
mov r15, qword [r14 + 0x10]
movabs rdi, 0x924c8b4e276c12a
test r15, r15
mov qword [rbp], rsi
je 0x180027b48
mov byte [rbp - 0x48], 0x20
cmp byte [0x180052f0c], 0
jne 0x180027a33
mov rax, qword [0x180050c20]
movabs rcx, 0x924c8b4e276f00a
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276f01c
xor cl, byte [rax + rdx]
mov byte [0x180052efd], cl
movabs rcx, 0x924c8b4e276f00b
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276f01d
xor cl, byte [rax + rdx]
mov byte [0x180052efe], cl
movabs rcx, 0x924c8b4e276f00c
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276f01e
xor cl, byte [rax + rdx]
mov byte [0x180052eff], cl
movabs rcx, 0x924c8b4e276f00d
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276f01f
xor cl, byte [rax + rdx]
mov byte [0x180052f00], cl
movabs rcx, 0x924c8b4e276f00e
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276f020
xor cl, byte [rax + rdx]
mov byte [0x180052f01], cl
movabs rcx, 0x924c8b4e276f00f
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276f021
xor cl, byte [rax + rdx]
mov byte [0x180052f02], cl
movabs rcx, 0x924c8b4e276f010
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276f022
xor cl, byte [rax + rdx]
mov byte [0x180052f03], cl
movabs rcx, 0x924c8b4e276f011
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276f023
xor cl, byte [rax + rdx]
mov byte [0x180052f04], cl
movabs rcx, 0x924c8b4e276f012
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276f024
xor cl, byte [rax + rdx]
mov byte [0x180052f05], cl
movabs rcx, 0x924c8b4e276f013
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276f025
xor cl, byte [rax + rdx]
mov byte [0x180052f06], cl
movabs rcx, 0x924c8b4e276f014
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276f026
xor cl, byte [rax + rdx]
mov byte [0x180052f07], cl
movabs rcx, 0x924c8b4e276f015
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276f027
xor cl, byte [rax + rdx]
mov byte [0x180052f08], cl
movabs rcx, 0x924c8b4e276f016
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276f028
xor cl, byte [rax + rdx]
mov byte [0x180052f09], cl
movabs rcx, 0x924c8b4e276f017
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276f029
xor cl, byte [rax + rdx]
mov byte [0x180052f0a], cl
movabs rcx, 0x924c8b4e276f018
movzx ecx, byte [rax + rcx]
movabs rdx, 0x924c8b4e276f02a
xor cl, byte [rax + rdx]
mov byte [0x180052f0b], cl
mov byte [0x180052f0c], 1
mov r12, qword [0x180050c30]
add r12, rdi
xorps xmm0, xmm0
movaps xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], 0
mov qword [rbp - 8], 0xf
mov rcx, r12
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
lea rdx, [r15 + rax]
inc rdx
cmp rdx, 0x10
jb 0x180027a7a
lea rcx, [rbp - 0x20]
call fcn.180012f10
mov qword [rbp - 0x10], 0
lea r15, [rbp - 0x20]
lea r9, [rbp - 0x48]
mov rcx, r15
mov rdx, r12
mov r8, r14
call fcn.180030570
mov r8, qword [rbp - 0x10]
cmp qword [rbp - 8], 0x10
jb 0x180027a9f
mov r15, qword [rbp - 0x20]
mov r9, qword [rbp]
mov rcx, qword [r9 + 0x10]
mov rax, qword [r9 + 0x18]
mov rdx, rax
sub rdx, rcx
cmp rdx, r8
jae 0x180027acb
mov qword [rsp + 0x20], r8
mov rcx, r9
mov rdx, r8
mov r9, r15
call fcn.1800127a0
jmp 0x180027aef
lea r14, [rcx + r8]
mov qword [r9 + 0x10], r14
mov r12, r9
cmp rax, 0x10
jb 0x180027adf
mov r12, qword [r9]
add rcx, r12
mov rdx, r15
call sub.VCRUNTIME140.dll_memmove
mov byte [r12 + r14], 0
mov rax, qword [rbp - 8]
cmp rax, 0x10
jb 0x180027b44
mov rcx, qword [rbp - 0x20]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180027b3f
mov r8, qword [rcx - 8]
sub rcx, r8
movabs rdx, 0x5537c683897700f8
add rdx, rcx
shr rdx, 5
movabs rcx, 0x2a9be341c4bb808
cmp rdx, rcx
jne 0x18002834c
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.18003c9c4
mov rsi, qword [rbp]
cmp byte [0x180052f10], 0
jne 0x180027c98
mov rax, qword [0x180050c20]
movabs rcx, 0x924c8b4e276f040
movzx ecx, byte [rax + rcx]
mov r9d, ecx
not r9b
mov r8d, r9d
and r8b, 0xad
mov edx, ecx
and dl, 0x52
mov r10d, ecx
and r10b, 0x29
xor r10b, 0x39
lea r11d, [rdx - 0x7c]
lea r14d, [r8 + 0x42]
and r14b, r11b
xor dl, 0x6b
and dl, r10b
or dl, r14b
and r9b, 0xa5
and cl, 8
or cl, r9b
xor cl, 0xa5
and cl, r8b
or cl, dl
movabs rdx, 0x924c8b4e276f054
xor cl, byte [rax + rdx]
xor cl, 0xad
mov byte [0x180052f0d], cl
movabs rcx, 0x924c8b4e276f041
movzx ecx, byte [rax + rcx]
mov r9d, ecx
not r9b
mov r8d, r9d
and r8b, 0xad
mov edx, ecx
and dl, 0x52
mov r10d, ecx
and r10b, 0x29
xor r10b, 0x39
lea r11d, [rdx - 0x7c]
lea r14d, [r8 + 0x42]
and r14b, r11b
xor dl, 0x6b
and dl, r10b
or dl, r14b
and r9b, 0xa5
and cl, 8
or cl, r9b
xor cl, 0xa5
and cl, r8b
or cl, dl
movabs rdx, 0x924c8b4e276f055
xor cl, byte [rax + rdx]
xor cl, 0xad
mov byte [0x180052f0e], cl
movabs rcx, 0x924c8b4e276f042
movzx ecx, byte [rax + rcx]
mov r9d, ecx
not r9b
mov r8d, r9d
and r8b, 0xad
mov edx, ecx
and dl, 0x52
mov r10d, ecx
and r10b, 0x29
xor r10b, 0x39
lea r11d, [rdx - 0x7c]
lea r14d, [r8 + 0x42]
and r14b, r11b
xor dl, 0x6b
and dl, r10b
or dl, r14b
and r9b, 0xa5
and cl, 8
or cl, r9b
xor cl, 0xa5
and cl, r8b
or cl, dl
movabs rdx, 0x924c8b4e276f056
xor cl, byte [rax + rdx]
xor cl, 0xad
mov byte [0x180052f0f], cl
mov byte [0x180052f10], 1
mov r14, qword [0x180050c38]
add r14, rdi
mov rcx, r14
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
mov r8, rdx
sub r8, rcx
cmp r8, rax
jae 0x180027cd2
mov qword [rsp + 0x20], rax
mov rcx, rsi
mov rdx, rax
mov r9, r14
call fcn.1800127a0
jmp 0x180027cfb
mov r15, rax
add r15, rcx
mov qword [rsi + 0x10], r15
mov r12, rsi
cmp rdx, 0x10
jb 0x180027ce8
mov r12, qword [rsi]
add rcx, r12
mov rdx, r14
mov r8, rax
call sub.VCRUNTIME140.dll_memmove
mov byte [r12 + r15], 0
mov ecx, dword [rbx + 0x40]
cmp ecx, 0xe
jne 0x180027ebd
mov byte [rbp + 0xf], 0x27
lea rcx, [rbx + 0x48]
lea rdx, [rbp - 0x48]
call fcn.180028520
mov rax, qword [rbx + 0xb8]
mov qword [rbp - 0x50], rax
cmp byte [0x180052f20], 0
jne 0x180027e54
mov dword [rbp - 0x24], r13d
mov rdx, qword [0x180050c20]
movabs rax, 0x924c8b4e276f071
add rax, rdx
movabs rcx, 0x924c8b4e276f089
add rcx, rdx
xor edx, edx
lea r8, [0x180052f11]
nop
movzx ebx, byte [rcx + rdx]
mov r13d, ebx
not r13b
movzx r9d, byte [rax + rdx]
mov r12d, r13d
and r12b, 0xc7
mov r14d, ebx
and r14b, 0x38
mov r10d, r9d
and r10b, 0x22
or r10b, 5
mov r11d, r9d
and r11b, 0xdd
xor r11b, r10b
mov r10d, r11d
xor r10b, 5
xor r11b, 0x3d
or r11b, r10b
mov r15d, r11d
not r15b
and r9b, 0x38
mov esi, ebx
and sil, 0x81
mov edi, ebx
and dil, 0x46
lea r10d, [r14 - 0x7f]
xor r10b, sil
or r10b, dil
and r13b, 0x41
and bl, 0x86
or bl, r13b
or bl, 0x10
xor bl, r14b
xor bl, 0x96
or r14b, r12b
not r14b
or r14b, bl
xor r10b, 0xb9
mov ebx, r10d
xor bl, r14b
or r10b, r14b
not r10b
or r10b, bl
xor r11b, r15b
and r11b, r9b
and r9b, r15b
xor r9b, r15b
xor r9b, r11b
mov r11d, r10d
and r11b, 0x4a
or r11b, 0x30
and r10b, 0xb5
xor r10b, r11b
mov r11d, r10d
xor r11b, 0x7a
mov ebx, r9d
xor bl, 0x4a
xor r10b, 0x85
and r10b, bl
xor r9b, 0xb5
and r9b, r11b
or r9b, r10b
mov byte [rdx + r8], r9b
inc rdx
cmp rdx, 0xf
jne 0x180027d60
mov byte [0x180052f20], 1
mov r13d, dword [rbp - 0x24]
movabs rdi, 0x924c8b4e276c12a
mov r8, qword [0x180050c40]
add r8, rdi
lea rax, [rbp + 0xf]
mov qword [rsp + 0x20], rax
lea rbx, [rbp - 0x20]
lea rdx, [rbp - 0x50]
lea r9, [rbp - 0x48]
mov rcx, rbx
call fcn.180032310
mov r8, qword [rbp - 0x10]
cmp qword [rbp - 8], 0x10
jb 0x180027e8a
mov rbx, qword [rbp - 0x20]
mov r9, qword [rbp]
mov rcx, qword [r9 + 0x10]
mov rax, qword [r9 + 0x18]
mov rdx, rax
sub rdx, rcx
cmp rdx, r8
jae 0x18002804b
mov qword [rsp + 0x20], r8
mov rcx, r9
mov rdx, r8
mov r9, rbx
call fcn.1800127a0
jmp 0x18002806f
call fcn.180032450
mov qword [rbp - 0x48], rax
cmp byte [0x180052f2d], 0
jne 0x180027fbb
mov r14, rdi
mov rdx, qword [0x180050c20]
movabs rax, 0x924c8b4e276f0ad
add rax, rdx
movabs rcx, 0x924c8b4e276f0be
add rcx, rdx
xor edx, edx
lea r8, [0x180052f21]
movzx r9d, byte [rcx + rdx]
movzx r10d, byte [rax + rdx]
mov r11d, r9d
xor r11b, 0xa
and r11b, r9b
mov ebx, r9d
and bl, 0xa
mov esi, r11d
and sil, 0x1e
xor sil, bl
mov ebx, r9d
and bl, 0xe1
mov edi, ebx
xor dil, 0x6b
and r11b, 0xa
xor sil, 0x8a
or r11b, sil
xor bl, 0x94
and bl, sil
not r11b
and r11b, dil
or r11b, bl
mov ebx, r9d
xor bl, 0x1e
xor r9b, 0xe1
or r9b, bl
not r9b
or r9b, r11b
mov r11d, r10d
or r11b, 0x10
and r11b, 0xf1
mov ebx, r10d
and bl, 0x1e
xor r11b, bl
mov esi, r10d
or sil, 2
and sil, 0xe3
xor sil, bl
xor sil, 0xe3
xor r10b, 0x1e
or r10b, sil
xor r11b, 0xe
mov ebx, r11d
xor bl, r10b
or r11b, r10b
not r11b
or r11b, bl
xor r11b, r9b
mov byte [rdx + r8], r11b
inc rdx
cmp rdx, 0xc
jne 0x180027f00
mov byte [0x180052f2d], 1
mov rdi, r14
mov rdx, qword [0x180050c48]
add rdx, rdi
lea rbx, [rbp - 0x20]
lea r8, [rbp - 0x48]
mov rcx, rbx
call fcn.18002ede0
mov r8, qword [rbp - 0x10]
cmp qword [rbp - 8], 0x10
jb 0x180027fe4
mov rbx, qword [rbp - 0x20]
mov r9, qword [rbp]
mov rcx, qword [r9 + 0x10]
mov rax, qword [r9 + 0x18]
mov rdx, rax
sub rdx, rcx
cmp rdx, r8
jae 0x180028010
mov qword [rsp + 0x20], r8
mov rcx, r9
mov rdx, r8
mov r9, rbx
call fcn.1800127a0
jmp 0x180028034
lea r14, [rcx + r8]
mov qword [r9 + 0x10], r14
mov r15, r9
cmp rax, 0x10
jb 0x180028024
mov r15, qword [r9]
add rcx, r15
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [r15 + r14], 0
mov rax, qword [rbp - 8]
cmp rax, 0x10
jb 0x18002812d
mov rcx, qword [rbp - 0x20]
jmp 0x1800280e6
lea r14, [rcx + r8]
mov qword [r9 + 0x10], r14
mov r15, r9
cmp rax, 0x10
jb 0x18002805f
mov r15, qword [r9]
add rcx, r15
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [r15 + r14], 0
mov rax, qword [rbp - 8]
cmp rax, 0x10
jb 0x1800280c4
mov rcx, qword [rbp - 0x20]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x1800280bf
mov r8, qword [rcx - 8]
sub rcx, r8
movabs rdx, 0x5537c683897700f8
add rdx, rcx
shr rdx, 5
movabs rcx, 0x2a9be341c4bb808
cmp rdx, rcx
jne 0x18002834c
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.18003c9c4
mov qword [rbp - 0x10], 0
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
mov rax, qword [rbp - 0x30]
cmp rax, 0x10
jb 0x18002812d
mov rcx, qword [rbp - 0x48]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180028128
mov r8, qword [rcx - 8]
sub rcx, r8
movabs rdx, 0x5537c683897700f8
add rdx, rcx
shr rdx, 5
movabs rcx, 0x2a9be341c4bb808
cmp rdx, rcx
jne 0x18002834c
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.18003c9c4
mov rax, qword [rbp]
test r13d, r13d
je 0x180028333
mov ecx, r13d
call fcn.180032450
mov qword [rbp - 0x48], rax
cmp byte [0x180052f3a], 0
jne 0x180028266
mov rdx, qword [0x180050c20]
movabs rax, 0x924c8b4e276f0dc
add rax, rdx
movabs rcx, 0x924c8b4e276f0f2
add rcx, rdx
xor edx, edx
nop word cs:[rax + rax]
movzx r14d, byte [rcx + rdx]
mov r13d, r14d
not r13b
movzx r11d, byte [rax + rdx]
mov r9d, r11d
not r9b
mov r10d, r13d
and r10b, 0x58
mov r12d, r14d
xor r12b, 0xa7
or r12b, r10b
mov r10d, r11d
or r10b, 0xa7
and r9b, 0x58
xor r11b, 0xa7
mov r15d, r9d
or r15b, r11b
mov esi, r15d
not sil
mov ebx, r14d
and bl, 0x48
and r13b, 0x10
or bl, r13b
mov edi, ebx
xor dil, 0x48
mov r8d, edi
and r8b, 0x40
and r14b, 8
or r14b, r8b
or r14b, r13b
xor r14b, r12b
xor r14b, 0xf7
or dil, 0x27
xor dil, r12b
xor dil, 0xd8
xor bl, 0xb7
and bl, r12b
or bl, dil
not bl
or bl, r14b
mov r8d, esi
and r8b, 0x16
and r15b, 0x28
or r15b, r8b
and r11b, 0x80
and sil, 0x41
or sil, r11b
or r15b, 0x80
or sil, 0x16
xor sil, r15b
xor sil, r10b
xor sil, 0xc1
or r9b, r10b
not r9b
or r9b, sil
xor r9b, bl
lea r8, [0x180052f2e]
mov byte [rdx + r8], r9b
inc rdx
cmp rdx, 0xc
jne 0x180028180
mov byte [0x180052f3a], 1
movabs rdi, 0x924c8b4e276c12a
add rdi, qword [0x180050c50]
lea rsi, [rbp - 0x20]
lea r8, [rbp - 0x48]
mov rcx, rsi
mov rdx, rdi
call fcn.18002ede0
mov r8, qword [rbp - 0x10]
cmp qword [rbp - 8], 0x10
jb 0x18002828f
mov rsi, qword [rbp - 0x20]
mov r9, qword [rbp]
mov rcx, qword [r9 + 0x10]
mov rax, qword [r9 + 0x18]
mov rdx, rax
sub rdx, rcx
cmp rdx, r8
jae 0x1800282bb
mov qword [rsp + 0x20], r8
mov rcx, r9
mov rdx, r8
mov r9, rsi
call fcn.1800127a0
jmp 0x1800282de
lea rdi, [rcx + r8]
mov qword [r9 + 0x10], rdi
mov rbx, r9
cmp rax, 0x10
jb 0x1800282cf
mov rbx, qword [r9]
add rcx, rbx
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
mov rax, qword [rbp - 8]
cmp rax, 0x10
jb 0x18002832f
mov rcx, qword [rbp - 0x20]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x18002832a
mov r8, qword [rcx - 8]
sub rcx, r8
movabs rdx, 0x5537c683897700f8
add rdx, rcx
shr rdx, 5
movabs rcx, 0x2a9be341c4bb808
cmp rdx, rcx
jne 0x18002834c
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.18003c9c4
mov rax, qword [rbp]
add rsp, 0x98
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.18000f240
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3