Function at 0x180012490
Capabilities:
Contain obfuscated stackstrings
Terminate process

Disassembly:
push rbp
push rdi
lea rbp, [rsp - 0x548]
sub rsp, 0x648
mov rax, qword [0x18014f1c0]
xor rax, rsp
mov qword [rbp + 0x520], rax
call fcn.180004df0
test al, al
je 0x18001255e
xor eax, eax
mov dword [rbp + 0x30], 0x53272e19
mov dword [rbp + 0x4c], eax
xor edi, edi
mov word [rbp + 0x50], ax
movabs r9, 0xcb3818898e9e0fc8
mov dword [rbp + 0x34], 0x57132715
mov dword [rbp + 0x38], 0x3534080a
mov dword [rbp + 0x3c], 0x94e0909
mov dword [rbp + 0x40], 0x433f3e32
mov dword [rbp + 0x44], 0x63a3a17
mov dword [rbp + 0x48], 0x9b44380a
mov qword [rsp + 0x38], rdi
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
add rcx, r9
movzx edx, byte [rbp + rax + 0x30]
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
mov rax, qword [rsp + 0x38]
add r8, rcx
add r8, rdx
sub r8b, 0x78
mov byte [rbp + rax + 0x30], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x22
jae 0x180013c46
jmp 0x180012510
call fcn.180005eb0
test al, al
je 0x180013c29
call qword [sym.imp.kernel32.dll_GetCurrentThread]
xor edi, edi
lea r8, [rbp + 0x338]
lea rdx, [sym.Solara.dll_inject]
mov qword [rbp + 0x338], rdi
lea ecx, [rdi + 6]
call qword [sym.imp.kernel32.dll_GetModuleHandleExA]
mov rcx, qword [rbp + 0x338]
lea rdx, [rbp + 0x410]
mov r8d, 0x104
call qword [sym.imp.kernel32.dll_GetModuleFileNameA]
xor eax, eax
mov dword [rbp + 0x90], 0xa0f7d7b
mov word [rbp + 0xc5], ax
xorps xmm0, xmm0
movups xmmword [rbp + 0xb5], xmm0
mov dword [rbp + 0x94], 0xc71017d
movabs r9, 0x392ed8a4b4c48123
mov dword [rbp + 0x98], 0x5740a07
mov dword [rbp + 0x9c], 0x186a1d75
mov dword [rbp + 0xa0], 0x61186269
mov dword [rbp + 0xa4], 0x1d14631a
mov dword [rbp + 0xa8], 0x68166a12
mov dword [rbp + 0xac], 0x69676813
mov dword [rbp + 0xb0], 0x1c281e60
mov byte [rbp + 0xb4], 0xb2
mov qword [rsp + 0x38], rdi
mov rax, qword [rsp + 0x38]
mov r8, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
add r8, r9
movzx edx, byte [rbp + rax + 0x90]
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
mov rax, qword [rsp + 0x38]
add rcx, rdx
add rcx, r8
add cl, 0xb
mov byte [rbp + rax + 0x90], cl
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x37
jb 0x180012633
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x410]
call fcn.1800d4114
test rax, rax
je 0x180012761
xor eax, eax
mov dword [rbp], 0x3a3fc9cb
mov qword [rbp + 0x25], rax
movabs r9, 0xfab5604a17e7b051
mov word [rbp + 0x2d], ax
mov byte [rbp + 0x2f], al
mov dword [rbp + 4], 0x30cd3dc9
mov dword [rbp + 8], 0x31c03237
mov dword [rbp + 0xc], 0xcc231c1
mov dword [rbp + 0x10], 0xfd0cfafd
mov dword [rbp + 0x14], 0x108fb0a
mov dword [rbp + 0x18], 0xf406f202
mov dword [rbp + 0x1c], 0x1d070403
mov dword [rbp + 0x20], 0xd7d0e914
mov byte [rbp + 0x24], 0x42
mov qword [rsp + 0x38], rdi
mov rax, qword [rsp + 0x38]
nop
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
add rcx, r9
movzx edx, byte [rbp + rax]
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
mov rax, qword [rsp + 0x38]
add r8, rcx
add r8, rdx
sub r8b, 0x37
mov byte [rbp + rax], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x30
jb 0x180012700
lea rdx, [rbp]
lea rcx, [rbp + 0x410]
call fcn.1800d4114
test rax, rax
jne 0x180013c29
cmp dword [0x1801537c8], edi
je 0x18001279a
mov rcx, qword [0x1801537e0]
lea rdx, [rbp + 0x370]
call qword [sym.imp.kernel32.dll_GetExitCodeProcess]
cmp dword [rbp + 0x370], 0x103
je 0x180012ae6
mov byte [0x1801537c5], dil
mov dword [0x1801537c8], edi
xor eax, eax
mov qword [rsp + 0x660], rbx
mov qword [rbp + 0xe5], rax
movabs r9, 0x61c27af86c84a7f6
mov dword [rbp + 0xed], eax
mov word [rbp + 0xf1], ax
mov dword [rbp + 0xd0], 0xdfe4defa
mov dword [rbp + 0xd4], 0xdbf6c9d3
mov dword [rbp + 0xd8], 0x2d1fcce5
mov dword [rbp + 0xdc], 0x1e2a1cfe
mov dword [rbp + 0xe0], 0x163a18ee
mov byte [rbp + 0xe4], 0xb0
mov qword [rsp + 0x38], rdi
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x668], rsi
mov qword [rsp + 0x670], r12
nop word [rax + rax]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
add rcx, r9
movzx edx, byte [rbp + rax + 0xd0]
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
mov rax, qword [rsp + 0x38]
add r8, rcx
add r8, rdx
add r8b, 0x46
mov byte [rbp + rax + 0xd0], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x23
jb 0x180012820
xorps xmm0, xmm0
mov qword [rbp + 0x390], rdi
mov rsi, 0xffffffffffffffff
mov qword [rbp + 0x398], rdi
movups xmmword [rbp + 0x380], xmm0
mov r8, rsi
lea rax, [rbp + 0xd0]
inc r8
cmp byte [rax + r8], dil
jne 0x180012897
mov qword [rsp + 0x640], r13
lea rdx, [rbp + 0xd0]
mov qword [rsp + 0x638], r14
lea rcx, [rbp + 0x380]
mov qword [rsp + 0x630], r15
call fcn.18000f5d0
lea rcx, [rbp + 0x380]
call fcn.180008d90
mov r8d, eax
mov dword [rsp + 0x38], eax
xor edx, edx
mov ecx, 0x1fffff
mov ebx, eax
call qword [sym.imp.kernel32.dll_OpenProcess]
mov r12, rax
test rax, rax
jne 0x180012b94
call qword [sym.imp.kernel32.dll_GetLastError]
xor eax, eax
mov dword [rbp + 0x280], 0x2c282bd5
mov qword [rbp + 0x286], rax
movabs r9, 0x93be7641fff7553c
mov dword [rbp + 0x28e], eax
mov word [rbp + 0x284], 0xe556
mov qword [rsp + 0x38], rdi
mov rax, qword [rsp + 0x38]
nop word [rax + rax]
mov r8, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
add r8, r9
movzx edx, byte [rbp + rax + 0x280]
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
mov rax, qword [rsp + 0x38]
add rcx, rdx
add rcx, r8
add cl, 0x5c
mov byte [rbp + rax + 0x280], cl
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x12
jb 0x180012940
xor eax, eax
mov dword [rbp + 0x200], 0x9297ad80
mov byte [rbp + 0x223], al
xorps xmm0, xmm0
movups xmmword [rbp + 0x213], xmm0
mov dword [rbp + 0x204], 0xa85690a7
movabs r9, 0x29cbc470abab2288
mov dword [rbp + 0x208], 0x4bb48cb8
mov dword [rbp + 0x20c], 0x936c929e
mov word [rbp + 0x210], 0x899f
mov byte [rbp + 0x212], 0x22
mov qword [rsp + 0x38], rdi
mov rax, qword [rsp + 0x38]
nop dword [rax]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
add rcx, r9
movzx edx, byte [rbp + rax + 0x200]
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
mov rax, qword [rsp + 0x38]
add r8, rcx
add r8, rdx
add r8b, 0x48
mov byte [rbp + rax + 0x200], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x24
jb 0x1800129f0
mov r9d, 0x10
lea r8, [rbp + 0x280]
lea rdx, [rbp + 0x200]
xor ecx, ecx
call qword [sym.imp.user32.dll_MessageBoxA]
mov rdx, qword [rbp + 0x398]
cmp rdx, 0xf
jbe 0x180012a9b
mov rcx, qword [rbp + 0x380]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180012a96
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c7b
call fcn.1800d21b0
xor al, al
mov r14, qword [rsp + 0x638]
mov r13, qword [rsp + 0x640]
mov r15, qword [rsp + 0x630]
mov rsi, qword [rsp + 0x668]
mov rbx, qword [rsp + 0x660]
mov r12, qword [rsp + 0x670]
mov rcx, qword [rbp + 0x520]
xor rcx, rsp
call fcn.1800d2190
add rsp, 0x648
pop rdi
pop rbp
ret
mov dword [rsp + 0x40], 0xa0b4b0ab
movabs r9, 0xc3ac50ad3b1d7cab
mov dword [rsp + 0x44], 0xa47cbeb0
mov dword [rsp + 0x48], 0xafbb7993
mov dword [rsp + 0x4c], 0xabb7aaa8
mov dword [rsp + 0x50], 0xa5ab719d
mov dword [rsp + 0x54], 0xe3d1d2a8
mov qword [rsp + 0x58], 0x6b1ed5d1
mov qword [rsp + 0x38], rdi
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
add rcx, r9
movzx edx, byte [rsp + rax + 0x40]
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
mov rax, qword [rsp + 0x38]
add r8, rcx
add r8, rdx
add r8b, 0x53
mov byte [rsp + rax + 0x40], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x20
jb 0x180012b33
xor r9d, r9d
lea r8, [rsp + 0x40]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.user32.dll_MessageBoxA]
mov al, 1
jmp 0x180012acd
mov edx, ebx
lea rcx, [rbp + 0x2f8]
call fcn.18000f6e0
mov rdx, rax
lea rcx, [rbp + 0x3d0]
call fcn.18000fb80
mov rdx, qword [rbp + 0x310]
cmp rdx, 0xf
jbe 0x180012bf2
mov rcx, qword [rbp + 0x2f8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180012bed
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c81
call fcn.1800d21b0
xor eax, eax
mov qword [rbp + 0x308], rdi
mov qword [rbp + 0x79], rax
movabs r9, 0x857b3fa8c002cc3
mov dword [rbp + 0x81], eax
mov word [rbp + 0x85], ax
mov qword [rbp + 0x310], 0xf
mov byte [rbp + 0x2f8], dil
mov dword [rbp + 0x60], 0xe027e08
mov dword [rbp + 0x64], 0x480a0c79
mov dword [rbp + 0x68], 0x4043774c
mov dword [rbp + 0x6c], 0x55545878
mov dword [rbp + 0x70], 0x6e5c5e55
mov dword [rbp + 0x74], 0x5755515e
mov byte [rbp + 0x78], 0x8e
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
add rcx, r9
movzx edx, byte [rbp + rax + 0x60]
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
mov rax, qword [rsp + 0x30]
add r8, rcx
add r8, rdx
sub r8b, 0x55
mov byte [rbp + rax + 0x60], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x27
jb 0x180012c60
xorps xmm0, xmm0
mov qword [rbp + 0x2b0], rdi
movups xmmword [rbp + 0x2a0], xmm0
mov qword [rbp + 0x2b8], rdi
lea rax, [rbp + 0x60]
mov r8, rsi
inc r8
cmp byte [rax + r8], dil
jne 0x180012cc7
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x2a0]
call fcn.18000f5d0
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x3b0]
call fcn.18000fb80
mov rdx, qword [rbp + 0x2b8]
cmp rdx, 0xf
jbe 0x180012d34
mov rcx, qword [rbp + 0x2a0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180012d2f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c87
call fcn.1800d21b0
mov r15, qword [rbp + 0x3c8]
lea r8, [rbp + 0x3b0]
mov r14, qword [rbp + 0x3b0]
lea rax, [rbp + 0x3d0]
mov r13, qword [rbp + 0x3e8]
cmp r15, 0xf
mov rbx, qword [rbp + 0x3d0]
cmova r8, r14
mov qword [rbp + 0x2b0], rdi
cmp r13, 0xf
mov qword [rbp + 0x2b8], 0xf
mov byte [rbp + 0x2a0], dil
cmova rax, rbx
sub r8, rax
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x180012da3
inc rax
test ecx, ecx
jne 0x180012d90
mov rcx, r12
test edx, edx
je 0x180012f30
call qword [sym.imp.kernel32.dll_CloseHandle]
xor eax, eax
mov dword [rsp + 0x60], 0x3f243e52
mov qword [rbp - 0x12], rax
movabs r9, 0x670a2587cf85ad6a
mov word [rbp - 0xa], ax
mov byte [rbp - 8], al
mov dword [rsp + 0x64], 0x2d76313b
mov dword [rsp + 0x68], 0x3a2d2b39
mov dword [rsp + 0x6c], 0x2a7e2323
mov dword [rsp + 0x70], 0x3a2f2235
mov dword [rsp + 0x74], 0x86ce3624
mov dword [rsp + 0x78], 0xdfcba884
mov dword [rsp + 0x7c], 0x8fd0ccc8
mov dword [rbp - 0x80], 0xcadedeb3
mov dword [rbp - 0x7c], 0xde96c8d6
mov dword [rbp - 0x78], 0xd2c295cb
mov dword [rbp - 0x74], 0xd2d6decc
mov dword [rbp - 0x70], 0xc89a89d0
mov dword [rbp - 0x6c], 0xf4ff99c6
mov dword [rbp - 0x68], 0xeef0a5f9
mov dword [rbp - 0x64], 0xf3aeeded
mov dword [rbp - 0x60], 0xf4f7adff
mov dword [rbp - 0x5c], 0xe398a9e5
mov dword [rbp - 0x58], 0xefedede7
mov dword [rbp - 0x54], 0xbfeef0ee
mov dword [rbp - 0x50], 0xf1baeee0
mov dword [rbp - 0x4c], 0x8a89e7eb
mov dword [rbp - 0x48], 0x9e919cc4
mov dword [rbp - 0x44], 0x9b839e9e
mov dword [rbp - 0x40], 0x9999cd86
mov dword [rbp - 0x3c], 0x8bd69a94
mov dword [rbp - 0x38], 0xe7d2989c
mov dword [rbp - 0x34], 0xdff3ebf9
mov dword [rbp - 0x30], 0x899b9593
mov dword [rbp - 0x2c], 0xe7b2948a
mov dword [rbp - 0x28], 0xe3aeb7a5
mov dword [rbp - 0x24], 0xbda7acbe
mov dword [rbp - 0x20], 0xbfabb1b3
mov dword [rbp - 0x1c], 0xc4c8e9bc
mov dword [rbp - 0x18], 0xcbc1c1da
mov word [rbp - 0x14], 0x11e2
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
add rcx, r9
movzx edx, byte [rsp + rax + 0x60]
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
mov rax, qword [rsp + 0x30]
add r8, rcx
add r8, rdx
add r8b, 0x1a
mov byte [rsp + rax + 0x60], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x99
jae 0x180013c60
jmp 0x180012ee0
mov rdx, qword [0x1801537d0]
lea r8, [rbp + 0x408]
add rdx, 0x5913080
mov qword [0x1801537e0], r12
mov r9d, 8
mov qword [rsp + 0x20], rdi
call qword [sym.imp.kernel32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x408]
lea r8, [rbp + 0x374]
mov rcx, qword [0x1801537e0]
add rdx, 0x2f0
mov r9d, 4
mov qword [rsp + 0x20], rdi
call qword [sym.imp.kernel32.dll_ReadProcessMemory]
cmp dword [rbp + 0x374], 4
je 0x18001300e
cmp byte [0x1801537c5], dil
je 0x18001300e
cmp r15, 0xf
jbe 0x180012fd3
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x180012fcb
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c7b
mov rcx, r14
call fcn.1800d21b0
cmp r13, 0xf
jbe 0x180013451
lea rdx, [r13 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x180013006
mov rbx, qword [rbx - 8]
add rdx, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c7b
mov rcx, rbx
jmp 0x18001344c
xor eax, eax
mov dword [rbp + 0x230], 0xd38f92b3
mov byte [rbp + 0x253], al
xorps xmm0, xmm0
movups xmmword [rbp + 0x243], xmm0
mov dword [rbp + 0x234], 0x9964b8d6
movabs r9, 0xcafd27b8dd2bbc5e
mov dword [rbp + 0x238], 0x926e9291
mov dword [rbp + 0x23c], 0xadd8926a
mov word [rbp + 0x240], 0xafae
mov byte [rbp + 0x242], 0xe2
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
nop dword [rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
add rcx, r9
movzx edx, byte [rbp + rax + 0x230]
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
mov rax, qword [rsp + 0x30]
add r8, rcx
add r8, rdx
add r8b, 0x6e
mov byte [rbp + rax + 0x230], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x24
jb 0x180013070
lea rdx, [rbp + 0x230]
lea rcx, [0x180151dc0]
call fcn.1800196d0
mov rcx, rax
call fcn.180019980
mov r14, rdi
mov rbx, rdi
movabs r15, 0x7fffffff0000
nop dword [rax]
xorps xmm0, xmm0
lea r8, [rbp + 0x340]
mov r9d, 0x30
mov rdx, rbx
mov rcx, r12
movups xmmword [rbp + 0x340], xmm0
movups xmmword [rbp + 0x350], xmm0
movups xmmword [rbp + 0x360], xmm0
call qword [sym.imp.kernel32.dll_VirtualQueryEx]
mov rcx, qword [rbp + 0x358]
test rax, rax
je 0x18001314e
cmp dword [rbp + 0x350], 0x80
jne 0x18001314e
cmp dword [rbp + 0x368], 0x40000
jne 0x18001314e
cmp rcx, 0x1000
je 0x180013164
test rcx, rcx
mov eax, 0x1000
cmovne rax, rcx
add rbx, rax
cmp rbx, r15
jb 0x1800130f0
jmp 0x18001316b
mov r14, qword [rbp + 0x348]
xor eax, eax
mov qword [0x1801537d0], r14
mov dword [rbp + 0x18b], eax
movabs r9, 0xc7934300ef96597e
mov word [rbp + 0x18f], ax
mov dword [rbp + 0x180], 0x134fd2b3
mov dword [rbp + 0x184], 0x25102016
mov word [rbp + 0x188], 0x2726
mov byte [rbp + 0x18a], 0xfa
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
nop dword [rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
add rcx, r9
movzx edx, byte [rbp + rax + 0x180]
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
mov rax, qword [rsp + 0x30]
add r8, rcx
add r8, rdx
sub r8b, 0x72
mov byte [rbp + rax + 0x180], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x11
jb 0x1800131c0
lea rdx, [rbp + 0x180]
lea rcx, [0x180151dc0]
call fcn.1800196d0
mov rcx, rax
call fcn.180019980
mov rdx, r12
lea rcx, [rbp + 0x2e0]
call fcn.180005640
mov rdx, rax
call fcn.180014cf0
mov rcx, qword [rbp + 0x2e0]
test rcx, rcx
je 0x18001329e
mov rax, qword [rbp + 0x2f0]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180013287
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c8d
call fcn.1800d21b0
xorps xmm0, xmm0
mov qword [rbp + 0x2f0], rdi
movdqu xmmword [rbp + 0x2e0], xmm0
xor eax, eax
mov dword [rbp + 0x150], 0x439fba9b
mov qword [rbp + 0x15b], rax
movabs r9, 0x483b62cdf3367330
mov dword [rbp + 0x163], eax
mov word [rbp + 0x167], ax
mov dword [rbp + 0x154], 0x4944b746
mov word [rbp + 0x158], 0x4746
mov byte [rbp + 0x15a], 0x6a
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
nop dword [rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
add rcx, r9
movzx edx, byte [rbp + rax + 0x150]
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
mov rax, qword [rsp + 0x30]
add r8, rcx
add r8, rdx
sub r8b, 0x50
mov byte [rbp + rax + 0x150], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x19
jb 0x1800132f0
lea rdx, [rbp + 0x150]
lea rcx, [0x180151dc0]
call fcn.1800196d0
mov rcx, rax
call fcn.180019980
mov rdx, qword [0x1801537d0]
lea r8, [rbp + 0x400]
mov eax, dword [rsp + 0x38]
add rdx, 0x5913080
mov rcx, qword [0x1801537e0]
mov r9d, 8
mov dword [0x1801537cc], eax
mov qword [rsp + 0x20], rdi
call qword [sym.imp.kernel32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x400]
lea r8, [rbp + 0x378]
mov rcx, qword [0x1801537e0]
add rdx, 0x2f0
mov r9d, 4
mov qword [rsp + 0x20], rdi
call qword [sym.imp.kernel32.dll_ReadProcessMemory]
cmp dword [rbp + 0x378], 4
jne 0x18001348c
call fcn.18000af60
mov rdx, qword [rbp + 0x3c8]
cmp rdx, 0xf
jbe 0x180013410
mov rcx, qword [rbp + 0x3b0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001340b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c7b
call fcn.1800d21b0
mov rdx, qword [rbp + 0x3e8]
cmp rdx, 0xf
jbe 0x180013451
mov rcx, qword [rbp + 0x3d0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001344c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c7b
call fcn.1800d21b0
mov rdx, qword [rbp + 0x398]
cmp rdx, 0xf
jbe 0x180013ab6
mov rcx, qword [rbp + 0x380]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180013ab1
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
jmp 0x180013aa3
xor eax, eax
mov dword [rbp + 0x1a0], 0x53977093
mov dword [rbp + 0x1ab], eax
movabs r9, 0xbdc60ce911d57b09
mov word [rbp + 0x1af], ax
mov dword [rbp + 0x1a4], 0x7d6e7c6c
mov word [rbp + 0x1a8], 0x7f7c
mov byte [rbp + 0x1aa], 0x2c
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
add rcx, r9
movzx edx, byte [rbp + rax + 0x1a0]
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
mov rax, qword [rsp + 0x30]
add r8, rcx
add r8, rdx
sub r8b, 0x3f
mov byte [rbp + rax + 0x1a0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x11
jb 0x1800134d3
lea rdx, [rbp + 0x1a0]
lea rcx, [0x180151dc0]
call fcn.1800196d0
mov rcx, rax
call fcn.180019980
mov eax, dword [0x1801537cc]
xorps xmm0, xmm0
mov dword [0x1801537d8], eax
movabs r9, 0x928b327938c69b2
xor eax, eax
mov dword [rbp + 0x120], 0xe78be7ad
mov dword [rbp + 0x144], eax
mov word [rbp + 0x148], ax
mov dword [rbp + 0x124], 0xfb9be789
mov dword [rbp + 0x128], 0xedf1e9fd
mov dword [rbp + 0x12c], 0x8a8def90
mov dword [rbp + 0x130], 0x1b95918c
movups xmmword [rbp + 0x134], xmm0
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
add rcx, r9
movzx edx, byte [rbp + rax + 0x120]
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
mov rax, qword [rsp + 0x30]
add r8, rcx
add r8, rdx
add r8b, 0x22
mov byte [rbp + rax + 0x120], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x2a
jb 0x1800135b0
xorps xmm0, xmm0
mov qword [rbp + 0x328], rdi
movups xmmword [rbp + 0x318], xmm0
mov qword [rbp + 0x330], rdi
lea rax, [rbp + 0x120]
nop dword [rax]
inc rsi
cmp byte [rax + rsi], dil
jne 0x180013620
mov r8, rsi
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x318]
call fcn.18000f5d0
lea rdx, [rbp + 0x318]
lea rcx, [rbp + 0x170]
call fcn.180005ae0
xor eax, eax
mov dword [rbp + 0x1c0], 0xa35fba5b
mov byte [rbp + 0x1db], al
xorps xmm0, xmm0
movups xmmword [rbp + 0x1cb], xmm0
mov dword [rbp + 0x1c4], 0xa9a4b1a6
movabs r9, 0xa7441f0b7aced4c0
mov word [rbp + 0x1c8], 0xa7a6
mov byte [rbp + 0x1ca], 0x8a
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
nop dword [rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
add rcx, r9
movzx edx, byte [rbp + rax + 0x1c0]
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
mov rax, qword [rsp + 0x30]
add r8, rcx
add r8, rdx
sub r8b, 0x40
mov byte [rbp + rax + 0x1c0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1c
jb 0x1800136a0
lea rdx, [rbp + 0x1c0]
lea rcx, [0x180151dc0]
call fcn.1800196d0
mov rcx, rax
call fcn.180019980
mov rbx, qword [rbp + 0x170]
mov rcx, rbx
call fcn.1800055d0
test al, al
je 0x180013725
test rbx, rbx
je 0x180013abd
mov rcx, rbx
call fcn.1800055d0
test al, al
je 0x180013abd
cmp rbx, 0xffffffffffffffff
je 0x180013abd
xor eax, eax
mov dword [rbp + 0x100], 0x8bcfeacb
mov qword [rbp + 0x10b], rax
movabs r9, 0xb0c3a8afc3c7223a
mov dword [rbp + 0x113], eax
mov word [rbp + 0x117], ax
mov byte [rbp + 0x119], al
mov dword [rbp + 0x104], 0x85f8f486
mov word [rbp + 0x108], 0x8786
mov byte [rbp + 0x10a], 0xd2
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
add rcx, r9
movzx edx, byte [rbp + rax + 0x100]
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
mov rax, qword [rsp + 0x30]
add r8, rcx
add r8, rdx
add r8b, 0x6a
mov byte [rbp + rax + 0x100], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1a
jb 0x180013793
lea rdx, [rbp + 0x100]
lea rcx, [0x180151dc0]
call fcn.1800196d0
mov rcx, rax
call fcn.180019980
mov rcx, qword [rbp + 0x170]
call fcn.1800074a0
xor eax, eax
mov dword [rbp + 0x1e0], 0x53af52b3
mov qword [rbp + 0x1eb], rax
movabs r9, 0x20819d4b4f9237ae
mov word [rbp + 0x1f3], ax
mov dword [rbp + 0x1e4], 0x45504b56
mov word [rbp + 0x1e8], 0x4746
mov byte [rbp + 0x1ea], 0x7a
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
add rcx, r9
movzx edx, byte [rbp + rax + 0x1e0]
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
mov rax, qword [rsp + 0x30]
add r8, rcx
add r8, rdx
add r8b, 0x3e
mov byte [rbp + rax + 0x1e0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x15
jb 0x180013850
lea rdx, [rbp + 0x1e0]
lea rcx, [0x180151dc0]
call fcn.1800196d0
mov rcx, rax
call fcn.180019980
lea rcx, [rbp + 0x170]
call fcn.18003dbc0
mov rcx, qword [0x1801537e0]
lea r8, [rbp + 0x3f0]
mov r9d, 8
mov qword [rsp + 0x20], rdi
lea rdx, [rax + 0x48]
call qword [sym.imp.kernel32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x3f0]
lea rcx, [rbp + 0x2c0]
call fcn.18003d5a0
cmp qword [rbp + 0x2d8], 0xf
lea rdx, [rbp + 0x2c0]
mov r8, qword [rbp + 0x2d0]
lea rcx, [0x180151dc0]
cmova rdx, qword [rbp + 0x2c0]
call fcn.18001dde0
mov rcx, rax
call fcn.180019980
mov rdx, qword [rbp + 0x2d8]
cmp rdx, 0xf
jbe 0x18001396e
mov rcx, qword [rbp + 0x2c0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180013969
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c93
call fcn.1800d21b0
mov ecx, 0x10
call fcn.1800d21e4
lea rcx, [0x18000a130]
mov r9, rax
lea r8, [0x180021940]
xor edx, edx
mov qword [rax + 8], rcx
lea rcx, [rbp + 0x3a8]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov qword [rax], r12
mov dword [rsp + 0x20], edi
call fcn.1800e1d68
mov qword [rbp + 0x3a0], rax
test rax, rax
je 0x180013c35
cmp dword [rbp + 0x3a8], edi
je 0x180013c99
movaps xmm0, xmmword [rbp + 0x3a0]
lea rcx, [rbp + 0x3f0]
movdqa xmmword [rbp + 0x3f0], xmm0
call fcn.1800d1144
test eax, eax
jne 0x180013c99
mov rdx, qword [rbp + 0x3c8]
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x3a0], xmm0
cmp rdx, 0xf
jbe 0x180013a34
mov rcx, qword [rbp + 0x3b0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180013a2f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c7b
call fcn.1800d21b0
mov rdx, qword [rbp + 0x3e8]
cmp rdx, 0xf
jbe 0x180013a75
mov rcx, qword [rbp + 0x3d0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180013a70
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c7b
call fcn.1800d21b0
mov rdx, qword [rbp + 0x398]
cmp rdx, 0xf
jbe 0x180013ab6
mov rcx, qword [rbp + 0x380]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180013ab1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c7b
call fcn.1800d21b0
mov al, 1
jmp 0x180012a9d
xor eax, eax
mov dword [rbp + 0x260], 0xf2c2c3d9
mov qword [rbp + 0x266], rax
movabs r9, 0x7588541d52831653
mov dword [rbp + 0x26e], eax
mov word [rbp + 0x272], ax
mov byte [rbp + 0x274], al
mov word [rbp + 0x264], 0x1d21
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
add rcx, r9
movzx edx, byte [rbp + rax + 0x260]
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
mov rax, qword [rsp + 0x30]
add r8, rcx
add r8, rdx
sub r8b, 0x45
mov byte [rbp + rax + 0x260], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x15
jb 0x180013b00
xor r9d, r9d
lea r8, [rbp + 0x260]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.user32.dll_MessageBoxA]
mov rdx, qword [rbp + 0x3c8]
cmp rdx, 0xf
jbe 0x180013ba3
mov rcx, qword [rbp + 0x3b0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180013b9e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c7b
call fcn.1800d21b0
mov rdx, qword [rbp + 0x3e8]
cmp rdx, 0xf
jbe 0x180013be4
mov rcx, qword [rbp + 0x3d0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180013bdf
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c7b
call fcn.1800d21b0
mov rdx, qword [rbp + 0x398]
cmp rdx, 0xf
jbe 0x180012a9b
mov rcx, qword [rbp + 0x380]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180012a96
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c7b
jmp 0x180012a96
mov ecx, 1
call qword [sym.imp.kernel32.dll_ExitProcess]
mov ecx, 6
mov dword [rbp + 0x3a8], edi
call fcn.1800d10fc
int3
xor r9d, r9d
lea rdx, [rbp + 0x30]
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.user32.dll_MessageBoxA]
xor ecx, ecx
call fcn.1800dfe38
int3
xor r9d, r9d
lea rdx, [rsp + 0x60]
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.user32.dll_MessageBoxA]
xor ecx, ecx
call fcn.1800dfe38
int3
call fcn.1800dbbc0
int3
call fcn.1800dbbc0
int3
call fcn.1800dbbc0
int3
call fcn.1800dbbc0
int3
call fcn.1800dbbc0
int3
mov ecx, 1
call fcn.1800d10fc
int3