Function at 0x180007780
Capabilities:
Access peb ldr_data
Encode data using xor
Get ntdll base address
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x328]
sub rsp, 0x400
mov rax, qword [0x18000e010]
xor rax, rsp
mov qword [rbp + 0x2f8], rax
mov dword [rbp - 0x80], 0x70c1412
mov dword [rbp - 0x7c], 0x55550908
mov dword [rbp - 0x78], 0xe120c46
xor r14d, r14d
mov word [rbp - 0x74], pe_nt_image_headers64
lea r15d, [r14 + 1]
lea rcx, [rbp - 0x80]
call fcn.1800079d0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
or r12d, 0xffffffff
mov r13d, 0x811c9dc5
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x180005528
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x180005528
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x180005523
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x180005504
cmp r11d, 0xe463da3c
je 0x18000552d
test r9d, r9d
jne 0x1800054ea
mov rax, qword [rax]
jmp 0x1800054c5
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r8
lea rcx, [rbp - 0x80]
call rdx
test rax, rax
jne 0x180005b12
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x1800055c9
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x1800055c9
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x1800055c4
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x1800055a5
cmp r11d, 0xcded1a85
je 0x1800055ce
test r9d, r9d
jne 0x18000558b
mov rax, qword [rax]
jmp 0x180005566
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r8
xor ecx, ecx
call rdx
movdqa xmm0, xmmword [0x18000b4b0]
movdqa xmmword [rbp + 0x30], xmm0
movdqa xmm1, xmmword [0x18000b4c0]
movdqa xmmword [rbp + 0x40], xmm1
movdqa xmm0, xmmword [0x18000b530]
movdqa xmmword [rbp + 0x50], xmm0
mov dword [rbp + 0x60], 0xd5d4d7d6
mov dword [rbp + 0x64], 0xd1d0d3d2
mov dword [rbp + 0x68], 0xdddcdfde
mov dword [rbp + 0x6c], 0x100dbda
lea rcx, [rbp + 0x30]
call fcn.1800078a0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x1800056ab
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x1800056ab
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x1800056a6
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x180005687
cmp r11d, 0xa19b8cd6
je 0x1800056b0
test r9d, r9d
jne 0x18000566d
mov rax, qword [rax]
jmp 0x180005648
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r8
call rcx
mov esi, eax
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
mov r8, qword [rcx + 0x30]
movsxd rdx, dword [r8 + 0x3c]
mov r10d, dword [rdx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x180005740
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x180005740
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rax, [r8 + r9*4]
mov edx, dword [rax + rdi]
add rdx, r8
mov r11d, r13d
mov al, byte [rdx]
add rdx, r15
test al, al
je 0x18000573b
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, r15
test al, al
jne 0x18000571c
cmp r11d, 0xc1d5565c
je 0x180005745
test r9d, r9d
jne 0x180005703
mov rcx, qword [rcx]
jmp 0x1800056de
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r8
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, esi
call r10
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x1800057df
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x1800057df
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [r8 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x1800057da
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x1800057bb
cmp r11d, 0xa19b8cd6
je 0x1800057e4
test r9d, r9d
jne 0x1800057a2
mov rax, qword [rax]
jmp 0x18000577d
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r8
call rcx
mov esi, eax
mov eax, 0x80010003
imul esi
add edx, esi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7fff
sub esi, eax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x18000588f
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x18000588f
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [r8 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x18000588a
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x18000586b
cmp r11d, 0xe80fd3a
je 0x180005894
test r9d, r9d
jne 0x180005852
mov rax, qword [rax]
jmp 0x18000582d
mov edx, dword [r10 + 0x1c]
add rdx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov edx, dword [rdx + rax*4]
add rdx, r8
mov ecx, esi
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x180005924
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x180005924
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [r8 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x18000591f
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x180005900
cmp r11d, 0xcded1a85
je 0x180005929
test r9d, r9d
jne 0x1800058e7
mov rax, qword [rax]
jmp 0x1800058c2
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r8
xor ecx, ecx
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x1800059ba
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x1800059ba
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x1800059b5
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x180005996
cmp r11d, 0xb8246c
je 0x1800059bf
test r9d, r9d
jne 0x18000597c
mov rax, qword [rax]
jmp 0x180005957
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r8
lea rcx, [0x1800076dc]
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x180005a55
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x180005a55
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x180005a50
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x180005a31
cmp r11d, 0x345116d3
je 0x180005a5a
test r9d, r9d
jne 0x180005a17
mov rax, qword [rax]
jmp 0x1800059f2
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r8
lea rcx, [0x1800076dc]
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rdx, qword [rax + 0x30]
movsxd rcx, dword [rdx + 0x3c]
mov r10d, dword [rcx + rdx + 0x88]
add r10, rdx
cmp r10, rdx
je 0x180005af2
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x180005af2
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [rdx + r9*4]
mov r8d, dword [rcx + rdi]
add r8, rdx
mov r11d, r13d
mov cl, byte [r8]
add r8, r15
test cl, cl
je 0x180005aed
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [r8]
add r8, r15
test cl, cl
jne 0x180005acd
cmp r11d, 0xa52bcaf9
je 0x180005af7
test r9d, r9d
jne 0x180005ab2
mov rax, qword [rax]
jmp 0x180005a8d
mov ecx, dword [r10 + 0x1c]
add rcx, rdx
mov eax, dword [r10 + 0x24]
add rax, rdx
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, rdx
call rcx
mov dword [rsp + 0x30], 0x11071215
mov dword [rsp + 0x34], 0x3485757
mov dword [rsp + 0x38], 0x1000504
lea rcx, [rsp + 0x30]
call fcn.180007884
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov esi, 0x53b2070f
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x180005ba8
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x180005ba8
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [r8 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x180005ba3
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x180005b88
cmp r11d, esi
je 0x180005bad
test r9d, r9d
jne 0x180005b6f
mov rax, qword [rax]
jmp 0x180005b4a
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r8
lea rcx, [rsp + 0x30]
call rdx
mov dword [rsp + 0x70], 0xd10040b
mov dword [rsp + 0x74], 0x55550901
mov dword [rsp + 0x78], 0x7060d46
mov word [rsp + 0x7c], pe_nt_image_headers64
lea rcx, [rsp + 0x70]
call fcn.1800079d0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x180005c65
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x180005c65
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [r8 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x180005c60
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x180005c45
cmp r11d, esi
je 0x180005c6a
test r9d, r9d
jne 0x180005c2c
mov rax, qword [rax]
jmp 0x180005c07
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r8
lea rcx, [rsp + 0x70]
call rdx
mov dword [rsp + 0x40], 0x500c0817
mov dword [rsp + 0x44], 0x3481056
mov dword [rsp + 0x48], 0x1000504
lea rcx, [rsp + 0x40]
call fcn.180007884
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x180005d1b
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x180005d1b
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [r8 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x180005d16
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x180005cfb
cmp r11d, esi
je 0x180005d20
test r9d, r9d
jne 0x180005ce2
mov rax, qword [rax]
jmp 0x180005cbd
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r8
lea rcx, [rsp + 0x40]
call rdx
mov dword [rsp + 0x50], 0x3c501217
mov dword [rsp + 0x54], 0x3485757
mov dword [rsp + 0x58], 0x1000504
lea rcx, [rsp + 0x50]
call fcn.180007884
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x180005dd1
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x180005dd1
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [r8 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x180005dcc
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x180005db1
cmp r11d, esi
je 0x180005dd6
test r9d, r9d
jne 0x180005d98
mov rax, qword [rax]
jmp 0x180005d73
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r8
lea rcx, [rsp + 0x50]
call rdx
mov dword [rbp - 0x70], 0x2140501
mov dword [rbp - 0x6c], 0x55550c14
mov dword [rbp - 0x68], 0x7060d46
mov word [rbp - 0x64], pe_nt_image_headers64
lea rcx, [rbp - 0x70]
call fcn.1800079d0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x180005e89
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x180005e89
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [r8 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x180005e84
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x180005e69
cmp r11d, esi
je 0x180005e8e
test r9d, r9d
jne 0x180005e50
mov rax, qword [rax]
jmp 0x180005e2b
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r8
lea rcx, [rbp - 0x70]
call rdx
mov dword [rsp + 0x60], 0xa0c0817
mov dword [rsp + 0x64], 0x4912000a
mov dword [rsp + 0x68], 0x6050c
mov byte [rsp + 0x6c], r15b
lea rcx, [rsp + 0x60]
call fcn.180007868
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x180005f43
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x180005f43
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [r8 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x180005f3e
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x180005f23
cmp r11d, esi
je 0x180005f48
test r9d, r9d
jne 0x180005f0a
mov rax, qword [rax]
jmp 0x180005ee5
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r8
lea rcx, [rsp + 0x60]
call rdx
mov dword [rbp - 0x58], 0xa92ca926
mov word [rbp - 0x54], r14w
mov byte [rbp - 0x52], r15b
lea rcx, [rbp - 0x58]
call fcn.180007840
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov esi, 0xe05299f3
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov r10d, dword [rcx + r9 + 0x88]
add r10, r9
cmp r10, r9
je 0x180005ff5
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x180005ff5
mov edi, dword [r10 + 0x20]
add r8d, r12d
lea rcx, [r9 + r8*4]
mov edx, dword [rcx + rdi]
add rdx, r9
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x180005ff0
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x180005fd5
cmp r11d, esi
je 0x180005ffa
test r8d, r8d
jne 0x180005fbc
mov rax, qword [rax]
jmp 0x180005f97
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov eax, dword [r10 + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov r8d, dword [rcx + rax*4]
add r8, r9
xor edx, edx
lea rcx, [rbp - 0x58]
call r8
mov qword [0x18000e938], rax
test rax, rax
jne 0x180006cff
mov dword [rbp + 0x70], 0xa908a937
mov dword [rbp + 0x74], 0xa931a90c
mov dword [rbp + 0x78], 0xa917a905
mov dword [rbp + 0x7c], 0xa90ea931
mov dword [rbp + 0x80], 0xa90da906
mov dword [rbp + 0x84], 0xa91ca905
mov word [rbp + 0x88], r14w
mov byte [rbp + 0x8a], r15b
lea rcx, [rbp + 0x70]
call fcn.180007818
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov r10d, dword [rcx + r9 + 0x88]
add r10, r9
cmp r10, r9
je 0x1800060e4
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x1800060e4
mov edi, dword [r10 + 0x20]
add r8d, r12d
lea rcx, [r9 + r8*4]
mov edx, dword [rcx + rdi]
add rdx, r9
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x1800060df
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x1800060c4
cmp r11d, esi
je 0x1800060e9
test r8d, r8d
jne 0x1800060ab
mov rax, qword [rax]
jmp 0x180006086
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov eax, dword [r10 + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov r8d, dword [rcx + rax*4]
add r8, r9
xor edx, edx
lea rcx, [rbp + 0x70]
call r8
mov qword [0x18000e938], rax
test rax, rax
jne 0x180006cff
mov dword [rbp + 0x20], 0xa915a933
mov dword [rbp + 0x24], 0xa902a907
mov dword [rbp + 0x28], 0xa909
mov byte [rbp + 0x2c], r15b
lea rcx, [rbp + 0x20]
call fcn.1800077f0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov r10d, dword [rcx + r9 + 0x88]
add r10, r9
cmp r10, r9
je 0x1800061ae
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x1800061ae
mov edi, dword [r10 + 0x20]
add r8d, r12d
lea rcx, [rdi + r8*4]
mov edx, dword [rcx + r9]
add rdx, r9
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x1800061a9
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x18000618e
cmp r11d, esi
je 0x1800061b3
test r8d, r8d
jne 0x180006174
mov rax, qword [rax]
jmp 0x18000614f
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov eax, dword [r10 + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov r8d, dword [rcx + rax*4]
add r8, r9
lea rdx, [rbp + 0x20]
xor ecx, ecx
call r8
mov qword [0x18000e938], rax
test rax, rax
jne 0x180006cff
movdqa xmm0, xmmword [0x18000b4a0]
movdqa xmmword [rbp + 0x130], xmm0
movdqa xmm1, xmmword [0x18000b4e0]
movdqa xmmword [rbp + 0x140], xmm1
movdqa xmm0, xmmword [0x18000b560]
movdqa xmmword [rbp + 0x150], xmm0
movdqa xmm1, xmmword [0x18000b570]
movdqa xmmword [rbp + 0x160], xmm1
movdqa xmm0, xmmword [0x18000b540]
movdqa xmmword [rbp + 0x170], xmm0
movdqa xmm1, xmmword [0x18000b4f0]
movdqa xmmword [rbp + 0x180], xmm1
movdqa xmm0, xmmword [0x18000b500]
movdqa xmmword [rbp + 0x190], xmm0
movdqa xmm1, xmmword [0x18000b510]
movdqa xmmword [rbp + 0x1a0], xmm1
mov word [rbp + 0x1b0], pe_nt_image_headers64
lea rcx, [rbp + 0x130]
call fcn.1800077c8
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x208]
call fcn.1800083c8
mov rdx, rax
lea rcx, [rbp + 0x2d8]
call fcn.180004ab0
nop
cmp qword [rbp + 0x2e8], 5
jae 0x180006cf3
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x180006320
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x180006320
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x18000631b
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x1800062fc
cmp r11d, 0xcded1a85
je 0x180006325
test r9d, r9d
jne 0x1800062e2
mov rax, qword [rax]
jmp 0x1800062bd
mov ecx, dword [r10 + 0x24]
add rcx, r8
movzx edx, word [rcx + r9*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
xor ecx, ecx
call rax
movdqa xmm0, xmmword [0x18000b4b0]
movdqa xmmword [rbp + 0x90], xmm0
movdqa xmm1, xmmword [0x18000b4c0]
movdqa xmmword [rbp + 0xa0], xmm1
movdqa xmm0, xmmword [0x18000b530]
movdqa xmmword [rbp + 0xb0], xmm0
mov dword [rbp + 0xc0], 0xd5d4d7d6
mov dword [rbp + 0xc4], 0xd1d0d3d2
mov dword [rbp + 0xc8], 0xdddcdfde
mov dword [rbp + 0xcc], 0x100dbda
lea rcx, [rbp + 0x90]
call fcn.1800078a0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x18000641a
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x18000641a
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x180006415
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x1800063f6
cmp r11d, 0xa19b8cd6
je 0x18000641f
test r9d, r9d
jne 0x1800063dc
mov rax, qword [rax]
jmp 0x1800063b7
mov ecx, dword [r10 + 0x24]
add rcx, r8
movzx edx, word [rcx + r9*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
call rax
mov esi, eax
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
mov r9, qword [rcx + 0x30]
movsxd rdx, dword [r9 + 0x3c]
mov r10d, dword [rdx + r9 + 0x88]
add r10, r9
cmp r10, r9
je 0x1800064b0
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x1800064b0
mov edi, dword [r10 + 0x20]
add r8d, r12d
lea rax, [rdi + r8*4]
mov edx, dword [rax + r9]
add rdx, r9
mov r11d, r13d
mov al, byte [rdx]
add rdx, r15
test al, al
je 0x1800064ab
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, r15
test al, al
jne 0x18000648c
cmp r11d, 0xc1d5565c
je 0x1800064b5
test r8d, r8d
jne 0x180006472
mov rcx, qword [rcx]
jmp 0x18000644d
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, esi
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x18000654e
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x18000654e
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x180006549
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x18000652a
cmp r11d, 0xa19b8cd6
je 0x180006553
test r9d, r9d
jne 0x180006510
mov rax, qword [rax]
jmp 0x1800064eb
mov ecx, dword [r10 + 0x24]
add rcx, r8
movzx edx, word [rcx + r9*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
call rax
mov edi, eax
mov eax, 0x80010003
imul edi
add edx, edi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7fff
sub edi, eax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov r10d, dword [rcx + r9 + 0x88]
add r10, r9
cmp r10, r9
je 0x1800065ff
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x1800065ff
mov esi, dword [r10 + 0x20]
add r8d, r12d
lea rcx, [rsi + r8*4]
mov edx, dword [rcx + r9]
add rdx, r9
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x1800065fa
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x1800065db
cmp r11d, 0xe80fd3a
je 0x180006604
test r8d, r8d
jne 0x1800065c1
mov rax, qword [rax]
jmp 0x18000659c
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx r8d, word [rdx + r8*2]
mov edx, dword [r10 + 0x1c]
add rdx, r9
mov eax, dword [rdx + r8*4]
add rax, r9
mov ecx, edi
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x180006695
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x180006695
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [r8 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x180006690
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x180006671
cmp r11d, 0xb8246c
je 0x18000669a
test r9d, r9d
jne 0x180006658
mov rax, qword [rax]
jmp 0x180006633
mov ecx, dword [r10 + 0x24]
add rcx, r8
movzx edx, word [rcx + r9*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
lea rcx, [0x1800076dc]
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x18000672f
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x18000672f
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [r8 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x18000672a
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x18000670b
cmp r11d, 0x345116d3
je 0x180006734
test r9d, r9d
jne 0x1800066f2
mov rax, qword [rax]
jmp 0x1800066cd
mov ecx, dword [r10 + 0x24]
add rcx, r8
movzx edx, word [rcx + r9*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
lea rcx, [0x1800076dc]
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r9d, dword [rcx + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x1800067c9
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x1800067c9
mov edi, dword [r9 + 0x20]
add r10d, r12d
lea rcx, [r8 + r10*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x1800067c4
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x1800067a5
cmp r11d, 0xa52bcaf9
je 0x1800067ce
test r10d, r10d
jne 0x18000678c
mov rax, qword [rax]
jmp 0x180006767
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + r10*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
call rax
movdqa xmm0, xmmword [0x18000b4b0]
movdqa xmmword [rbp + 0x30], xmm0
movdqa xmm1, xmmword [0x18000b4c0]
movdqa xmmword [rbp + 0x40], xmm1
movdqa xmm0, xmmword [0x18000b530]
movdqa xmmword [rbp + 0x50], xmm0
mov dword [rbp + 0x60], 0xd5d4d7d6
mov dword [rbp + 0x64], 0xd1d0d3d2
mov dword [rbp + 0x68], 0xdddcdfde
mov dword [rbp + 0x6c], 0x100dbda
lea rcx, [rbp + 0x30]
call fcn.1800078a0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x1800068a8
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x1800068a8
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [r8 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x1800068a3
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x180006884
cmp r11d, 0xa19b8cd6
je 0x1800068ad
test r9d, r9d
jne 0x18000686b
mov rax, qword [rax]
jmp 0x180006846
mov ecx, dword [r10 + 0x24]
add rcx, r8
movzx edx, word [rcx + r9*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
call rax
mov esi, eax
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
mov r9, qword [rcx + 0x30]
movsxd rdx, dword [r9 + 0x3c]
mov r10d, dword [rdx + r9 + 0x88]
add r10, r9
cmp r10, r9
je 0x18000693d
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x18000693d
mov edi, dword [r10 + 0x20]
add r8d, r12d
lea rax, [r9 + r8*4]
mov edx, dword [rax + rdi]
add rdx, r9
mov r11d, r13d
mov al, byte [rdx]
add rdx, r15
test al, al
je 0x180006938
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, r15
test al, al
jne 0x180006919
cmp r11d, 0xc1d5565c
je 0x180006942
test r8d, r8d
jne 0x180006900
mov rcx, qword [rcx]
jmp 0x1800068db
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, esi
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x1800069da
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x1800069da
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [r8 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x1800069d5
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x1800069b6
cmp r11d, 0xa19b8cd6
je 0x1800069df
test r9d, r9d
jne 0x18000699d
mov rax, qword [rax]
jmp 0x180006978
mov ecx, dword [r10 + 0x24]
add rcx, r8
movzx edx, word [rcx + r9*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
call rax
mov edi, eax
mov eax, 0x80010003
imul edi
add edx, edi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7fff
sub edi, eax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov r10d, dword [rcx + r9 + 0x88]
add r10, r9
cmp r10, r9
je 0x180006a8a
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x180006a8a
mov esi, dword [r10 + 0x20]
add r8d, r12d
lea rcx, [r9 + r8*4]
mov edx, dword [rcx + rsi]
add rdx, r9
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x180006a85
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x180006a66
cmp r11d, 0xe80fd3a
je 0x180006a8f
test r8d, r8d
jne 0x180006a4d
mov rax, qword [rax]
jmp 0x180006a28
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx r8d, word [rdx + r8*2]
mov edx, dword [r10 + 0x1c]
add rdx, r9
mov eax, dword [rdx + r8*4]
add rax, r9
mov ecx, edi
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x180006b20
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x180006b20
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [r8 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x180006b1b
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x180006afc
cmp r11d, 0xcded1a85
je 0x180006b25
test r9d, r9d
jne 0x180006ae3
mov rax, qword [rax]
jmp 0x180006abe
mov ecx, dword [r10 + 0x24]
add rcx, r8
movzx edx, word [rcx + r9*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
xor ecx, ecx
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x180006bb5
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x180006bb5
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [r8 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x180006bb0
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x180006b91
cmp r11d, 0xb8246c
je 0x180006bba
test r9d, r9d
jne 0x180006b78
mov rax, qword [rax]
jmp 0x180006b53
mov ecx, dword [r10 + 0x24]
add rcx, r8
movzx edx, word [rcx + r9*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
lea rcx, [0x1800076dc]
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x180006c4f
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x180006c4f
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [r8 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov r11d, r13d
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x180006c4a
mov rax, qword [rax]
jmp 0x180006bed
lea rcx, [rbp + 0x2d8]
call fcn.18000836c
mov rax, qword [0x18000e910]
test rax, rax
jne 0x180006daa
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rdx, qword [rax + 0x30]
movsxd rcx, dword [rdx + 0x3c]
mov r10d, dword [rcx + rdx + 0x88]
add r10, rdx
cmp r10, rdx
je 0x180006d85
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x180006d85
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [rdi + r9*4]
mov r8d, dword [rcx + rdx]
add r8, rdx
mov r11d, r13d
mov cl, byte [r8]
add r8, r15
test cl, cl
je 0x180006d80
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [r8]
add r8, r15
test cl, cl
jne 0x180006d60
cmp r11d, 0x2fa62ca8
je 0x180006d8a
test r9d, r9d
jne 0x180006d45
mov rax, qword [rax]
jmp 0x180006d20
mov ecx, dword [r10 + 0x1c]
add rcx, rdx
mov eax, dword [r10 + 0x24]
add rax, rdx
movzx eax, word [rax + r9*2]
mov eax, dword [rcx + rax*4]
add rax, rdx
mov qword [0x18000e910], rax
mov ecx, 0x1f4
call rax
movdqa xmm0, xmmword [0x18000b470]
movdqu xmmword [rbp + 0x90], xmm0
movdqa xmm1, xmmword [0x18000b480]
movdqu xmmword [rbp + 0xa0], xmm1
mov dword [rbp + 0xb0], 0xeae4aef4
mov dword [rbp + 0xb4], 0xe0a9e0e8
mov dword [rbp + 0xb8], 0x100fded
lea rcx, [rbp + 0x90]
call fcn.1800077ac
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x2b8]
call fcn.1800083c8
nop
lea rcx, [rbp + 0x2b8]
call fcn.180008124
mov rdx, rax
lea rcx, [rbp + 0x258]
call fcn.1800037bc
nop
mov rbx, qword [0x18000e908]
test rbx, rbx
jne 0x180006ed6
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rdx, qword [rax + 0x30]
movsxd rcx, dword [rdx + 0x3c]
mov r10d, dword [rcx + rdx + 0x88]
add r10, rdx
cmp r10, rdx
je 0x180006eb1
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x180006eb1
mov edi, dword [r10 + 0x20]
add r9d, r12d
lea rcx, [rdi + r9*4]
mov r8d, dword [rcx + rdx]
add r8, rdx
mov r11d, r13d
mov cl, byte [r8]
add r8, r15
test cl, cl
je 0x180006eac
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [r8]
add r8, r15
test cl, cl
jne 0x180006e8c
cmp r11d, 0x6216241
je 0x180006eb6
test r9d, r9d
jne 0x180006e71
mov rax, qword [rax]
jmp 0x180006e4c
mov ecx, dword [r10 + 0x1c]
add rcx, rdx
mov eax, dword [r10 + 0x24]
add rax, rdx
movzx eax, word [rax + r9*2]
mov ebx, dword [rcx + rax*4]
add rbx, rdx
mov qword [0x18000e908], rbx
lea rcx, [rbp + 0x2b8]
call fcn.180008124
mov rcx, rax
call rbx
nop
xor edx, edx
lea rcx, [rbp + 0x2b8]
call fcn.180008610
nop
mov byte [rsp + 0x20], 0xa
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x258]
call fcn.180008134
mov rbx, qword [rax]
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x258]
call fcn.180008134
mov rdi, rax
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x258]
call fcn.180008150
lea r9, [rsp + 0x20]
mov r8, qword [rdi]
mov rdx, qword [rax]
lea rcx, [rbp + 0xe8]
call fcn.1800087d0
mov r9, rbx
mov r8, qword [rax]
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0x258]
call fcn.180008164
lea rdx, [rbp + 0x258]
lea rcx, [rbp + 0x278]
call fcn.180003330
nop
xor edx, edx
lea rcx, [rbp + 0x258]
call fcn.180008610
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x228], xmm0
mov qword [rbp + 0x238], rax
mov rbx, qword [rbp + 0x288]
lea rcx, [rbp + 0x228]
call fcn.180008924
lea r8, [rbp - 0x60]
mov rdx, rbx
lea rcx, [rbp + 0x228]
call fcn.18000887c
nop
mov rbx, qword [rbp + 0x228]
lea rdx, [rbp + 0xf8]
lea rcx, [rbp + 0x278]
call fcn.180008134
mov rdi, rax
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x278]
call fcn.180008150
mov r9, rbx
mov r8, qword [rdi]
mov rdx, qword [rax]
lea rcx, [rbp + 0x108]
call fcn.18000883c
nop
xor edx, edx
lea rcx, [rbp + 0x278]
call fcn.180008610
nop
cmp qword [rbp + 0x228], r14
je 0x180007676
mov dword [rbp - 0x50], 0xa958a951
mov dword [rbp - 0x4c], 0xa969a955
mov word [rbp - 0x48], r14w
mov byte [rbp - 0x46], r15b
lea rcx, [rbp - 0x50]
call fcn.1800080fc
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r12d, 0x9c5bbf15
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x1800070c3
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x1800070c3
mov edi, dword [r10 + 0x20]
dec r9d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov r11d, 0x811c9dc5
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x1800070be
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x1800070a3
cmp r11d, r12d
je 0x1800070c8
test r9d, r9d
jne 0x180007086
mov rax, qword [rax]
jmp 0x180007061
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r8
lea rcx, [rbp - 0x50]
call rdx
mov dword [rsp + 0x24], 0x8011404
mov word [rsp + 0x28], pe_nt_image_headers64
lea rcx, [rsp + 0x24]
call fcn.180007790
lea rdx, [rsp + 0x24]
lea rcx, [rbp + 0x298]
call fcn.1800083c8
nop
mov dword [rbp - 0x40], 0xa958a951
mov dword [rbp - 0x3c], 0xa969a955
mov word [rbp - 0x38], r14w
mov byte [rbp - 0x36], r15b
lea rcx, [rbp - 0x40]
call fcn.1800080fc
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x1800071a4
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x1800071a4
mov edi, dword [r10 + 0x20]
dec r9d
lea rcx, [r8 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov r11d, 0x811c9dc5
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x18000719f
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x180007184
cmp r11d, r12d
je 0x1800071a9
test r9d, r9d
jne 0x180007168
mov rax, qword [rax]
jmp 0x180007143
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r8
lea rcx, [rbp - 0x40]
call rdx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x250], rax
mov rbx, qword [rbp + 0x2a8]
lea rcx, [rbp + 0x240]
call fcn.180008924
lea r8, [rbp - 0x5f]
mov rdx, rbx
lea rcx, [rbp + 0x240]
call fcn.18000887c
nop
mov dword [rbp - 0x30], 0xa958a951
mov dword [rbp - 0x2c], 0xa969a955
mov word [rbp - 0x28], r14w
mov byte [rbp - 0x26], r15b
lea rcx, [rbp - 0x30]
call fcn.1800080fc
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x180007294
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x180007294
mov edi, dword [r10 + 0x20]
dec r9d
lea rcx, [r8 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov r11d, 0x811c9dc5
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x18000728f
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x180007274
cmp r11d, r12d
je 0x180007299
test r9d, r9d
jne 0x180007258
mov rax, qword [rax]
jmp 0x180007233
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r8
lea rcx, [rbp - 0x30]
call rdx
mov rbx, qword [rbp + 0x240]
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x298]
call fcn.180008134
mov rdi, rax
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x298]
call fcn.180008150
mov r9, rbx
mov r8, qword [rdi]
mov rdx, qword [rax]
lea rcx, [rbp + 0xd0]
call fcn.18000883c
mov dword [rbp - 0x20], 0xa958a951
mov dword [rbp - 0x1c], 0xa969a955
mov word [rbp - 0x18], r14w
mov byte [rbp - 0x16], r15b
lea rcx, [rbp - 0x20]
call fcn.1800080fc
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x18000738f
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x18000738f
mov edi, dword [r10 + 0x20]
dec r9d
lea rcx, [r8 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov r11d, 0x811c9dc5
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x18000738a
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x18000736f
cmp r11d, r12d
je 0x180007394
test r9d, r9d
jne 0x180007353
mov rax, qword [rax]
jmp 0x18000732e
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r8
lea rcx, [rbp - 0x20]
call rdx
lea rax, [rbp + 0x1f0]
mov qword [rbp + 0xd0], rax
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0x1f0]
call fcn.180007918
mov rbx, rax
lea rdx, [rbp + 0x228]
lea rcx, [rbp + 0x1c0]
call fcn.180007918
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1d8]
call fcn.180004358
lea rcx, [rbp + 0x228]
cmp rcx, rax
je 0x18000741b
mov r8b, r14b
mov rdx, rax
lea rcx, [rbp + 0x228]
call fcn.180008584
lea rcx, [rbp + 0x1d8]
call fcn.1800078bc
mov dword [rbp + 0x10], 0xa958a951
mov dword [rbp + 0x14], 0xa969a955
mov word [rbp + 0x18], r14w
mov byte [rbp + 0x1a], r15b
lea rcx, [rbp + 0x10]
call fcn.1800080fc
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x1800074ba
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x1800074ba
mov edi, dword [r10 + 0x20]
dec r9d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov r11d, 0x811c9dc5
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x1800074b5
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x18000749a
cmp r11d, r12d
je 0x1800074bf
test r9d, r9d
jne 0x18000747d
mov rax, qword [rax]
jmp 0x180007458
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r8
lea rcx, [rbp + 0x10]
call rdx
mov rsi, qword [rbp + 0x228]
mov dword [rbp - 0x10], 0xa958a951
mov dword [rbp - 0xc], 0xa969a955
mov word [rbp - 8], r14w
mov byte [rbp - 6], r15b
lea rcx, [rbp - 0x10]
call fcn.1800080fc
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x180007578
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x180007578
mov edi, dword [r10 + 0x20]
dec r9d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov r11d, 0x811c9dc5
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x180007573
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x180007558
cmp r11d, r12d
je 0x18000757d
test r9d, r9d
jne 0x18000753b
mov rax, qword [rax]
jmp 0x180007516
mov edx, dword [r10 + 0x1c]
add rdx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov edx, dword [rdx + rax*4]
add rdx, r8
lea rcx, [rbp - 0x10]
call rdx
mov rcx, rsi
call fcn.180001208
mov dword [rbp], 0xa958a951
mov dword [rbp + 4], 0xa969a955
mov word [rbp + 8], r14w
mov byte [rbp + 0xa], r15b
lea rcx, [rbp]
call fcn.1800080fc
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r9d, dword [rcx + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x180007637
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x180007637
mov edi, dword [r9 + 0x20]
dec r10d
lea rcx, [rdi + r10*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov r11d, 0x811c9dc5
mov cl, byte [rdx]
add rdx, r15
test cl, cl
je 0x180007632
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r15
test cl, cl
jne 0x180007617
cmp r11d, r12d
je 0x18000763c
test r10d, r10d
jne 0x1800075fa
mov rax, qword [rax]
jmp 0x1800075d5
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [r9 + 0x24]
add rax, r8
movzx eax, word [rax + r10*2]
mov edx, dword [rcx + rax*4]
add rdx, r8
lea rcx, [rbp]
call rdx
nop
lea rcx, [rbp + 0x240]
call fcn.1800078bc
nop
lea rcx, [rbp + 0x298]
call fcn.18000836c
nop
lea rcx, [rbp + 0x228]
call fcn.1800078bc
nop
lea rcx, [rbp + 0x278]
call fcn.18000836c
nop
lea rcx, [rbp + 0x258]
call fcn.18000836c
nop
lea rcx, [rbp + 0x2b8]
call fcn.18000836c
xor eax, eax
mov rcx, qword [rbp + 0x2f8]
xor rcx, rsp
call fcn.180008c80
lea r11, [rsp + 0x400]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
jmp 0x180005448