Function at 0x180001a8c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x40
mov byte [rbp - 0x20], 0x52
xor edx, edx
mov byte [rbp - 0x1f], 7
mov byte [rbp - 0x1e], 0x6c
mov byte [rbp - 0x1d], 7
mov byte [rbp - 0x1c], 0x79
lea r14d, [rdx + 1]
mov byte [rbp - 0x1b], 7
mov byte [rbp - 0x1a], 0x75
mov byte [rbp - 0x19], 7
mov byte [rbp - 0x18], 0x6c
mov byte [rbp - 0x17], 7
mov byte [rbp - 0x16], 0x73
mov byte [rbp - 0x15], 7
mov byte [rbp - 0x14], 0x3a
mov byte [rbp - 0x13], 7
mov byte [rbp - 0x12], 0x39
mov byte [rbp - 0x11], 7
mov byte [rbp - 0x10], 0x35
mov byte [rbp - 0xf], 7
mov byte [rbp - 0xe], 0x6b
mov byte [rbp - 0xd], 7
mov byte [rbp - 0xc], 0x73
mov byte [rbp - 0xb], 7
mov byte [rbp - 0xa], 0x73
mov byte [rbp - 9], 7
mov byte [rbp - 8], 7
mov byte [rbp - 7], 0
mov al, byte [rbp - 0x20]
movsx ecx, byte [rbp + rdx - 0x20]
sub ecx, 7
mov byte [rbp + rdx - 0x20], cl
add rdx, r14
cmp rdx, 0x19
jb 0x180001b1c
mov rax, qword gs:[0x60]
mov edi, 2
mov ebx, 0xd5786
mov r15d, 0x55555556
mov r9d, 0x80000003
mov r11d, 0x66666667
mov r8, qword [rax + 0x18]
lea r12d, [rdi - 6]
mov dword [rbp + 0x30], ebx
lea r13d, [rdi - 4]
mov ecx, dword [rbp + 0x30]
lea r10d, [r9 - 2]
mov eax, r15d
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180001bac
mov ecx, dword [rbp + 0x30]
add ecx, edi
add ecx, r8d
mov dword [rbp + 0x30], ecx
jmp 0x180001b95
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r9d
jge 0x180001ba6
sub eax, r14d
or eax, r12d
add eax, r14d
test eax, eax
je 0x180001b8c
jmp 0x180001bfe
mov eax, dword [rbp + 0x30]
mov eax, dword [rbp + 0x30]
mov ecx, dword [rbp + 0x30]
lea eax, [r8 + 3]
add ecx, edi
imul ecx, eax
mov dword [rbp + 0x30], ecx
jmp 0x180001be9
mov ecx, dword [rbp + 0x30]
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x30]
je 0x180001be3
sub eax, r14d
jmp 0x180001be6
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r10d
jge 0x180001bfa
sub eax, r14d
or eax, r13d
add eax, r14d
test eax, eax
je 0x180001bc3
mov rsi, qword [r8 + 0x18]
mov eax, r15d
mov dword [rbp + 0x30], ebx
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180001c47
mov ecx, dword [rbp + 0x30]
add ecx, edi
add ecx, esi
mov dword [rbp + 0x30], ecx
jmp 0x180001c30
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r9d
jge 0x180001c41
sub eax, r14d
or eax, r12d
add eax, r14d
test eax, eax
je 0x180001c27
jmp 0x180001c98
mov eax, dword [rbp + 0x30]
mov eax, dword [rbp + 0x30]
mov ecx, dword [rbp + 0x30]
lea eax, [rsi + 3]
add ecx, edi
imul ecx, eax
mov dword [rbp + 0x30], ecx
jmp 0x180001c83
mov ecx, dword [rbp + 0x30]
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x30]
je 0x180001c7d
sub eax, r14d
jmp 0x180001c80
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r10d
jge 0x180001c94
sub eax, r14d
or eax, r13d
add eax, r14d
test eax, eax
je 0x180001c5d
mov r8, qword [rsi + 0x10]
mov eax, r15d
mov dword [rbp + 0x30], ebx
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180001ce2
mov ecx, dword [rbp + 0x30]
add ecx, edi
add ecx, r8d
mov dword [rbp + 0x30], ecx
jmp 0x180001ccb
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r9d
jge 0x180001cdc
sub eax, r14d
or eax, r12d
add eax, r14d
test eax, eax
je 0x180001cc2
jmp 0x180001d34
mov eax, dword [rbp + 0x30]
mov eax, dword [rbp + 0x30]
mov ecx, dword [rbp + 0x30]
lea eax, [r8 + 3]
add ecx, edi
imul ecx, eax
mov dword [rbp + 0x30], ecx
jmp 0x180001d1f
mov ecx, dword [rbp + 0x30]
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x30]
je 0x180001d19
sub eax, r14d
jmp 0x180001d1c
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r10d
jge 0x180001d30
sub eax, r14d
or eax, r13d
add eax, r14d
test eax, eax
je 0x180001cf9
mov rbx, rsi
mov rbx, qword [rbx]
mov eax, r15d
mov dword [rbp + 0x30], 0xd5786
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180001d86
mov ecx, dword [rbp + 0x30]
add ecx, edi
add ecx, ebx
mov dword [rbp + 0x30], ecx
jmp 0x180001d6c
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r9d
jge 0x180001d7d
sub eax, r14d
or eax, r12d
add eax, r14d
test eax, eax
je 0x180001d63
jmp 0x180001e8b
mov eax, dword [rbp + 0x30]
and eax, r10d
jge 0x180001d97
sub eax, r14d
or eax, r13d
add eax, r14d
test eax, eax
mov eax, dword [rbp + 0x30]
je 0x180001dcd
mov ecx, edi
sub ecx, ebx
add ecx, eax
mov dword [rbp + 0x30], ecx
jmp 0x180001db2
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov ecx, dword [rbp + 0x30]
mov eax, r15d
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180001da9
jmp 0x180001e8b
and eax, r9d
jge 0x180001ddb
sub eax, r14d
or eax, r12d
add eax, r14d
mov ecx, dword [rbp + 0x30]
test eax, eax
je 0x180001e2c
add ecx, edi
lea eax, [rbx + 3]
imul ecx, eax
mov dword [rbp + 0x30], ecx
jmp 0x180001e15
mov ecx, dword [rbp + 0x30]
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x30]
je 0x180001e0f
sub eax, r14d
jmp 0x180001e12
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r10d
jge 0x180001e26
sub eax, r14d
or eax, r13d
add eax, r14d
test eax, eax
je 0x180001def
jmp 0x180001e8b
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x180001e8b
mov eax, dword [rbp + 0x30]
lea ecx, [rbx + 0x17]
add eax, 0xb
cdq
idiv ecx
jmp 0x180001e72
mov ecx, dword [rbp + 0x30]
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x30]
je 0x180001e6f
add eax, r14d
jmp 0x180001e72
sub eax, r14d
mov dword [rbp + 0x30], eax
mov eax, r15d
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180001e4f
mov r8, qword [rbx + 0x30]
test r8, r8
je 0x18000200c
mov dword [rbp + 0x30], 0xd5786
mov eax, r15d
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180001ee5
mov ecx, dword [rbp + 0x30]
add ecx, edi
add ecx, r8d
mov dword [rbp + 0x30], ecx
jmp 0x180001ecb
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r9d
jge 0x180001edc
sub eax, r14d
or eax, r12d
add eax, r14d
test eax, eax
je 0x180001ec2
jmp 0x180001fed
mov eax, dword [rbp + 0x30]
and eax, r10d
jge 0x180001ef6
sub eax, r14d
or eax, r13d
add eax, r14d
test eax, eax
mov eax, dword [rbp + 0x30]
je 0x180001f2d
mov ecx, edi
sub ecx, r8d
add ecx, eax
mov dword [rbp + 0x30], ecx
jmp 0x180001f12
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov ecx, dword [rbp + 0x30]
mov eax, r15d
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180001f09
jmp 0x180001fed
and eax, r9d
jge 0x180001f3b
sub eax, r14d
or eax, r12d
add eax, r14d
mov ecx, dword [rbp + 0x30]
test eax, eax
je 0x180001f8d
add ecx, edi
lea eax, [r8 + 3]
imul ecx, eax
mov dword [rbp + 0x30], ecx
jmp 0x180001f76
mov ecx, dword [rbp + 0x30]
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x30]
je 0x180001f70
sub eax, r14d
jmp 0x180001f73
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r10d
jge 0x180001f87
sub eax, r14d
or eax, r13d
add eax, r14d
test eax, eax
je 0x180001f50
jmp 0x180001fed
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x180001fed
mov eax, dword [rbp + 0x30]
lea ecx, [r8 + 0x17]
add eax, 0xb
cdq
idiv ecx
jmp 0x180001fd4
mov ecx, dword [rbp + 0x30]
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x30]
je 0x180001fd1
add eax, r14d
jmp 0x180001fd4
sub eax, r14d
mov dword [rbp + 0x30], eax
mov eax, r15d
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180001fb1
mov rcx, rbx
call fcn.180001868
cmp eax, 0xd4a34b99
je 0x180002015
mov r9d, 0x80000003
mov r11d, 0x66666667
lea r10d, [r9 - 2]
cmp rsi, rbx
jne 0x180001d37
mov r9, qword [rbx + 0x30]
mov eax, r15d
mov dword [rbp + 0x30], 0xd5786
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180002067
mov ecx, dword [rbp + 0x30]
add ecx, edi
add ecx, r9d
mov dword [rbp + 0x30], ecx
mov ecx, 0x80000003
jmp 0x180002051
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, ecx
jge 0x180002061
sub eax, r14d
or eax, r12d
add eax, r14d
test eax, eax
je 0x180002048
jmp 0x1800020c1
mov eax, dword [rbp + 0x30]
mov r8d, 0x80000001
mov eax, dword [rbp + 0x30]
mov ecx, dword [rbp + 0x30]
lea eax, [r9 + 3]
add ecx, edi
imul ecx, eax
mov dword [rbp + 0x30], ecx
jmp 0x1800020ac
mov ecx, dword [rbp + 0x30]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x30]
je 0x1800020a6
sub eax, r14d
jmp 0x1800020a9
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r8d
jge 0x1800020bd
sub eax, r14d
or eax, r13d
add eax, r14d
test eax, eax
je 0x180002084
lea r11, [rsp + 0x40]
mov rax, r9
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret