Function at 0x180002cc0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x248
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x1c0], 0xfffffffffffffffe
mov r13, rcx
cmp byte [0x180047868], 0
jne 0x180002fce
mov rax, qword [0x180046460]
movabs rcx, 0x4a18e1ed83a3ee03
movzx ecx, byte [rax + rcx]
mov r9d, ecx
not r9b
movabs rdx, 0x4a18e1ed83a3edeb
movzx edx, byte [rax + rdx]
mov r8d, edx
not r8b
mov r10d, r9d
and r10b, 0xdf
mov r11d, ecx
and r11b, 0x20
mov ebx, ecx
xor bl, 2
and bl, r10b
or bl, r11b
mov r11d, r9d
and r11b, 0x99
mov esi, ecx
and sil, 0x44
or sil, r11b
xor sil, bl
xor sil, 0x44
and r9b, 0x1a
and cl, 0xc5
or cl, r9b
xor cl, 0x1a
and cl, r10b
or cl, sil
mov r9d, edx
xor r9b, 0xdf
mov r10d, r8d
and r10b, 0xd2
and dl, 0xd
or dl, r10b
xor dl, 0xd2
and dl, r8b
or dl, r9b
xor dl, cl
mov byte [0x180047863], dl
movabs rcx, 0x4a18e1ed83a3ee04
movzx ecx, byte [rax + rcx]
mov r9d, ecx
not r9b
movabs rdx, 0x4a18e1ed83a3edec
movzx edx, byte [rax + rdx]
mov r8d, edx
not r8b
mov r10d, r9d
and r10b, 0xdf
mov r11d, ecx
and r11b, 0x20
mov ebx, ecx
xor bl, 2
and bl, r10b
or bl, r11b
mov r11d, r9d
and r11b, 0x99
mov esi, ecx
and sil, 0x44
or sil, r11b
xor sil, bl
xor sil, 0x44
and r9b, 0x1a
and cl, 0xc5
or cl, r9b
xor cl, 0x1a
and cl, r10b
or cl, sil
mov r9d, edx
xor r9b, 0xdf
mov r10d, r8d
and r10b, 0xd2
and dl, 0xd
or dl, r10b
xor dl, 0xd2
and dl, r8b
or dl, r9b
xor dl, cl
mov byte [0x180047864], dl
movabs rcx, 0x4a18e1ed83a3ee05
movzx ecx, byte [rax + rcx]
mov r9d, ecx
not r9b
movabs rdx, 0x4a18e1ed83a3eded
movzx edx, byte [rax + rdx]
mov r8d, edx
not r8b
mov r10d, r9d
and r10b, 0xdf
mov r11d, ecx
and r11b, 0x20
mov ebx, ecx
xor bl, 2
and bl, r10b
or bl, r11b
mov r11d, r9d
and r11b, 0x99
mov esi, ecx
and sil, 0x44
or sil, r11b
xor sil, bl
xor sil, 0x44
and r9b, 0x1a
and cl, 0xc5
or cl, r9b
xor cl, 0x1a
and cl, r10b
or cl, sil
mov r9d, edx
xor r9b, 0xdf
mov r10d, r8d
and r10b, 0xd2
and dl, 0xd
or dl, r10b
xor dl, 0xd2
and dl, r8b
or dl, r9b
xor dl, cl
mov byte [0x180047865], dl
movabs rcx, 0x4a18e1ed83a3ee06
movzx ecx, byte [rax + rcx]
mov r9d, ecx
not r9b
movabs rdx, 0x4a18e1ed83a3edee
movzx edx, byte [rax + rdx]
mov r8d, edx
not r8b
mov r10d, r9d
and r10b, 0xdf
mov r11d, ecx
and r11b, 0x20
mov ebx, ecx
xor bl, 2
and bl, r10b
or bl, r11b
mov r11d, r9d
and r11b, 0x99
mov esi, ecx
and sil, 0x44
or sil, r11b
xor sil, bl
xor sil, 0x44
and r9b, 0x1a
and cl, 0xc5
or cl, r9b
xor cl, 0x1a
and cl, r10b
or cl, sil
mov r9d, edx
xor r9b, 0xdf
mov r10d, r8d
and r10b, 0xd2
and dl, 0xd
or dl, r10b
xor dl, 0xd2
and dl, r8b
or dl, r9b
xor dl, cl
mov byte [0x180047866], dl
movabs rcx, 0x4a18e1ed83a3ee07
movzx ecx, byte [rax + rcx]
mov r8d, ecx
not r8b
movabs rdx, 0x4a18e1ed83a3edef
movzx eax, byte [rax + rdx]
mov edx, eax
not dl
mov r9d, r8d
and r9b, 0xdf
mov r10d, ecx
and r10b, 0x20
mov r11d, ecx
xor r11b, 2
and r11b, r9b
or r11b, r10b
mov r10d, r8d
and r10b, 0x99
mov ebx, ecx
and bl, 0x44
or bl, r10b
xor bl, r11b
xor bl, 0x44
and r8b, 0x1a
and cl, 0xc5
or cl, r8b
xor cl, 0x1a
and cl, r9b
or cl, bl
mov r8d, eax
xor r8b, 0xdf
mov r9d, edx
and r9b, 0xd2
and al, 0xd
or al, r9b
xor al, 0xd2
and al, dl
or al, r8b
xor al, cl
mov byte [0x180047867], al
mov byte [0x180047868], 1
movabs r12, 0x4a18e1ed83a3eb5f
mov rbx, qword [0x180046468]
add rbx, r12
xorps xmm0, xmm0
movaps xmmword [rbp + 0x100], xmm0
movaps xmmword [rbp + 0x110], xmm0
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x18000488f
mov rdi, rax
cmp rax, 0xf
ja 0x180003040
mov qword [rbp + 0x110], rdi
mov qword [rbp + 0x118], 0xf
lea rcx, [rbp + 0x100]
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rdi, rbp
add rdi, 0x100
jmp 0x180003157
mov ecx, edi
and ecx, 0xf
mov rdx, rcx
not rdx
mov r8, rdi
xor r8, 0xf
mov rax, rdi
xor rax, 0xfffffffffffffff0
mov r9d, edi
and r9d, 1
movabs r10, 0x7e4780d6dd9c0121
xor r10, rdi
or r8, rax
and r8, r10
movabs r10, 0x420200d2d800000e
and r10, rdx
or r10, r9
movabs r9, 0x3c458004059c0120
or r9, r10
xor r9, r8
xor rcx, rax
xor rax, rdx
or rax, rcx
not rax
or rax, r9
cmp rax, 0x17
mov esi, 0x16
cmovae rsi, rax
lea rax, [rbp - 0x60]
cmp rsi, 0xfff
jb 0x180003117
lea rcx, [rsi + 0x28]
mov byte [rbp + 0x1be], 1
mov qword [rbp + 0x180], rax
call fcn.180035cbc
mov rcx, 0xffffffffffffffd8
sub rcx, rax
mov rdx, rax
add rdx, 0x27
movabs r8, 0x200806a620eb8002
and r8, rdx
movabs r9, 0xdff7f959df147ffd
and r9, rcx
or r9, r8
movabs r14, 0xdff7f959df147fe2
xor r14, r9
and r14, rdx
mov qword [r14 - 8], rax
jmp 0x180003131
lea rcx, [rsi + 1]
mov byte [rbp + 0x1be], 1
mov qword [rbp + 0x180], rax
call fcn.180035cbc
mov r14, rax
mov qword [rbp + 0x100], r14
mov qword [rbp + 0x110], rdi
mov qword [rbp + 0x118], rsi
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rdi, r14
mov byte [rdi], 0
cmp byte [0x180047850], 0
jne 0x18000326e
mov rdx, qword [0x180046460]
movabs rax, 0x4a18e1ed83a3ed13
add rax, rdx
movabs rcx, 0x4a18e1ed83a3ed2b
add rcx, rdx
xor edx, edx
lea r8, [0x18004784a]
nop word cs:[rax + rax]
movzx r9d, byte [rcx + rdx]
movzx r10d, byte [rax + rdx]
mov esi, r9d
xor sil, 1
and sil, r9b
mov r11d, r10d
xor r11b, 0x89
and r11b, r10b
mov ebx, r9d
and bl, 0x16
and sil, 0xa9
mov edi, r9d
and dil, 0x40
or bl, 0x41
xor bl, dil
mov edi, r9d
and dil, 1
or dil, 0xe2
xor dil, sil
mov esi, edi
xor sil, 0xf4
and dil, bl
not bl
and bl, sil
and dil, 0x41
mov esi, r9d
xor sil, 0xa9
xor r9b, 0x56
or r9b, sil
not r9b
or r9b, dil
or r9b, bl
and r11b, 0xa9
mov ebx, r10d
and bl, 0x52
mov esi, r10d
and sil, 0x56
xor bl, 0xdb
lea edi, [r11 + 4]
xor sil, 0x24
and sil, dil
or r10b, 0x52
xor r10b, r11b
and r10b, bl
or r10b, sil
mov r11d, r9d
xor r11b, 0xd5
mov ebx, r10d
xor bl, 0xd5
xor r9b, 0x2a
and r9b, bl
xor r10b, 0x2a
and r10b, r11b
or r10b, r9b
mov byte [rdx + r8], r10b
inc rdx
cmp rdx, 6
jne 0x1800031a0
mov byte [0x180047850], 1
mov rbx, qword [0x180046470]
add rbx, r12
xorps xmm0, xmm0
movaps xmmword [rbp + 0x140], xmm0
movaps xmmword [rbp + 0x150], xmm0
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1800048a6
mov rdi, rax
cmp rax, 0xf
ja 0x1800032d6
mov qword [rbp + 0x150], rdi
mov qword [rbp + 0x158], 0xf
lea rcx, [rbp + 0x140]
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rdi, rbp
add rdi, 0x140
jmp 0x1800033f3
mov ecx, edi
and ecx, 0xf
mov rdx, rcx
not rdx
mov r8, rdi
xor r8, 0xf
mov rax, rdi
xor rax, 0xfffffffffffffff0
mov r9d, edi
and r9d, 1
movabs r10, 0x7e4780d6dd9c0121
xor r10, rdi
or r8, rax
and r8, r10
movabs r10, 0x420200d2d800000e
and r10, rdx
or r10, r9
movabs r9, 0x3c458004059c0120
or r9, r10
xor r9, r8
xor rcx, rax
xor rax, rdx
or rax, rcx
not rax
or rax, r9
cmp rax, 0x17
mov esi, 0x16
cmovae rsi, rax
cmp rsi, 0xfff
jb 0x1800033a9
lea rcx, [rsi + 0x28]
lea rax, [rbp + 0x140]
mov qword [rbp + 0x1a0], rax
call fcn.180035cbc
mov rcx, 0xffffffffffffffd8
sub rcx, rax
mov rdx, rax
add rdx, 0x27
movabs r8, 0x200806a620eb8002
and r8, rdx
movabs r9, 0xdff7f959df147ffd
and r9, rcx
or r9, r8
movabs r14, 0xdff7f959df147fe2
xor r14, r9
and r14, rdx
mov qword [r14 - 8], rax
jmp 0x1800033c3
lea rcx, [rsi + 1]
lea rax, [rbp + 0x140]
mov qword [rbp + 0x1a0], rax
call fcn.180035cbc
mov r14, rax
mov qword [rbp + 0x140], r14
mov qword [rbp + 0x150], rdi
mov qword [rbp + 0x158], rsi
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rdi, r14
movabs r12, 0x4a18e1ed83a3eb5f
mov byte [rdi], 0
lea rdi, [rbp + 0x160]
cmp byte [0x180047857], 0
jne 0x1800034c2
mov rdx, qword [0x180046460]
movabs rax, 0x4a18e1ed83a3ed47
add rax, rdx
movabs rcx, 0x4a18e1ed83a3ed60
add rcx, rdx
xor edx, edx
lea r8, [0x180047851]
nop word cs:[rax + rax]
movzx r9d, byte [rcx + rdx]
movzx r10d, byte [rax + rdx]
mov ebx, r10d
not bl
mov esi, r10d
and sil, 4
mov r14d, r10d
and r14b, 0xfb
mov r11d, r9d
xor r11b, 4
and bl, 0x80
add r14b, 0x80
and r14b, r10b
mov r15d, esi
xor r15b, 0x84
or bl, r14b
or sil, 0x7b
and sil, r14b
not bl
and bl, r15b
mov r14d, r10d
xor r14b, 0xfb
xor r10b, 4
or r10b, r14b
not r10b
or r10b, sil
or r10b, bl
mov ebx, r9d
and bl, 0x68
xor r9b, 0x6c
and r9b, r11b
xor r9b, bl
xor r9b, r10b
mov byte [rdx + r8], r9b
inc rdx
cmp rdx, 6
jne 0x180003440
mov byte [0x180047857], 1
mov r14, qword [0x180046478]
add r14, r12
xorps xmm0, xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi], xmm0
mov rcx, r14
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1800048b9
mov rbx, rax
cmp rax, 0xf
ja 0x180003507
mov qword [rbp + 0x170], rbx
mov qword [rbp + 0x178], 0xf
jmp 0x1800035fb
mov ecx, ebx
and ecx, 0xf
mov rdx, rcx
not rdx
mov r8, rbx
xor r8, 0xf
mov rax, rbx
xor rax, 0xfffffffffffffff0
mov r9d, ebx
and r9d, 1
movabs r10, 0x7e4780d6dd9c0121
xor r10, rbx
or r8, rax
and r8, r10
movabs r10, 0x420200d2d800000e
and r10, rdx
or r10, r9
movabs r9, 0x3c458004059c0120
or r9, r10
xor r9, r8
xor rcx, rax
xor rax, rdx
or rax, rcx
not rax
or rax, r9
cmp rax, 0x17
mov esi, 0x16
cmovae rsi, rax
cmp rsi, 0xfff
jb 0x1800035d3
lea rcx, [rsi + 0x28]
mov qword [rbp + 0x1a0], rdi
call fcn.180035cbc
mov rcx, 0xffffffffffffffd8
sub rcx, rax
mov rdx, rax
add rdx, 0x27
movabs r8, 0x200806a620eb8002
and r8, rdx
movabs r9, 0xdff7f959df147ffd
and r9, rcx
or r9, r8
movabs rdi, 0xdff7f959df147fe2
xor rdi, r9
and rdi, rdx
mov qword [rdi - 8], rax
jmp 0x1800035e6
lea rcx, [rsi + 1]
mov qword [rbp + 0x1a0], rdi
call fcn.180035cbc
mov rdi, rax
mov qword [rbp + 0x160], rdi
mov qword [rbp + 0x170], rbx
mov qword [rbp + 0x178], rsi
mov rcx, rdi
mov rdx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add rbx, rdi
mov byte [rbx], 0
lea rax, [rbp + 0x140]
mov qword [rbp + 0x10], rax
lea rax, [rbp + 0x180]
mov qword [rbp + 0x18], rax
mov byte [rbp + 0x1ba], 1
lea rdi, [rbp - 0x60]
mov qword [rbp + 0x48], rdi
lea rcx, [rbp + 0x60]
lea rdx, [rbp + 0x10]
lea r8, [rbp + 0x1ae]
call fcn.180002960
mov byte [rbp + 0x1bf], 1
mov qword [rbp + 0x188], rdi
lea rdx, [rbp + 0x100]
lea r8, [rbp + 0x60]
mov rcx, rdi
call fcn.180005060
cmp byte [0x18004786e], 0
jne 0x180003878
mov rax, qword [0x180046460]
movabs rcx, 0x4a18e1ed83a3ee36
movzx ecx, byte [rax + rcx]
movabs rdx, 0x4a18e1ed83a3ee19
mov r8d, ecx
and r8b, 0x24
xor r8b, 0xa5
mov r9d, ecx
and r9b, 0xc1
lea r10d, [r9 + 0x1a]
mov r11d, ecx
and r11b, 0x1a
xor r11b, 0x7e
and r11b, r10b
xor r9b, 0x64
and r9b, r8b
or r9b, r11b
mov r8d, ecx
xor r8b, 0xc1
xor cl, 0x3e
or cl, r8b
not cl
or cl, r9b
xor cl, byte [rax + rdx]
xor cl, 0x3e
mov byte [0x180047869], cl
movabs rcx, 0x4a18e1ed83a3ee37
movzx ecx, byte [rax + rcx]
movabs rdx, 0x4a18e1ed83a3ee1a
mov r8d, ecx
and r8b, 0x24
xor r8b, 0xa5
mov r9d, ecx
and r9b, 0xc1
lea r10d, [r9 + 0x1a]
mov r11d, ecx
and r11b, 0x1a
xor r11b, 0x7e
and r11b, r10b
xor r9b, 0x64
and r9b, r8b
or r9b, r11b
mov r8d, ecx
xor r8b, 0xc1
xor cl, 0x3e
or cl, r8b
not cl
or cl, r9b
xor cl, byte [rax + rdx]
xor cl, 0x3e
mov byte [0x18004786a], cl
movabs rcx, 0x4a18e1ed83a3ee38
movzx ecx, byte [rax + rcx]
movabs rdx, 0x4a18e1ed83a3ee1b
mov r8d, ecx
and r8b, 0x24
xor r8b, 0xa5
mov r9d, ecx
and r9b, 0xc1
lea r10d, [r9 + 0x1a]
mov r11d, ecx
and r11b, 0x1a
xor r11b, 0x7e
and r11b, r10b
xor r9b, 0x64
and r9b, r8b
or r9b, r11b
mov r8d, ecx
xor r8b, 0xc1
xor cl, 0x3e
or cl, r8b
not cl
or cl, r9b
xor cl, byte [rax + rdx]
xor cl, 0x3e
mov byte [0x18004786b], cl
movabs rcx, 0x4a18e1ed83a3ee39
movzx ecx, byte [rax + rcx]
movabs rdx, 0x4a18e1ed83a3ee1c
mov r8d, ecx
and r8b, 0x24
xor r8b, 0xa5
mov r9d, ecx
and r9b, 0xc1
lea r10d, [r9 + 0x1a]
mov r11d, ecx
and r11b, 0x1a
xor r11b, 0x7e
and r11b, r10b
xor r9b, 0x64
and r9b, r8b
or r9b, r11b
mov r8d, ecx
xor r8b, 0xc1
xor cl, 0x3e
or cl, r8b
not cl
or cl, r9b
xor cl, byte [rax + rdx]
xor cl, 0x3e
mov byte [0x18004786c], cl
movabs rcx, 0x4a18e1ed83a3ee3a
movzx ecx, byte [rax + rcx]
movabs rdx, 0x4a18e1ed83a3ee1d
mov r8d, ecx
and r8b, 0x24
xor r8b, 0xa5
mov r9d, ecx
and r9b, 0xc1
lea r10d, [r9 + 0x1a]
mov r11d, ecx
and r11b, 0x1a
xor r11b, 0x7e
and r11b, r10b
xor r9b, 0x64
and r9b, r8b
or r9b, r11b
mov r8d, ecx
xor r8b, 0xc1
xor cl, 0x3e
or cl, r8b
not cl
or cl, r9b
xor cl, byte [rax + rdx]
xor cl, 0x3e
mov byte [0x18004786d], cl
mov byte [0x18004786e], 1
mov rbx, qword [0x180046480]
movabs rsi, 0x4a18e1ed83a3eb5f
add rbx, rsi
xorps xmm0, xmm0
movaps xmmword [rbp + 0x120], xmm0
movaps xmmword [rbp + 0x130], xmm0
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1800048c5
mov rdi, rax
cmp rax, 0xf
ja 0x1800038ea
mov qword [rbp + 0x130], rdi
mov qword [rbp + 0x138], 0xf
lea rcx, [rbp + 0x120]
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rdi, rbp
add rdi, 0x120
jmp 0x180003a0f
mov ecx, edi
and ecx, 0xf
mov rdx, rcx
not rdx
mov r8, rdi
xor r8, 0xf
mov rax, rdi
xor rax, 0xfffffffffffffff0
mov r9d, edi
and r9d, 1
movabs r10, 0x7e4780d6dd9c0121
xor r10, rdi
or r8, rax
and r8, r10
movabs r10, 0x420200d2d800000e
and r10, rdx
or r10, r9
movabs r9, 0x3c458004059c0120
or r9, r10
xor r9, r8
xor rcx, rax
xor rax, rdx
or rax, rcx
not rax
or rax, r9
cmp rax, 0x17
mov esi, 0x16
cmovae rsi, rax
cmp rsi, 0xfff
jb 0x1800039c1
lea rcx, [rsi + 0x28]
mov byte [rbp + 0x1bf], 1
lea rax, [rbp - 0x28]
mov qword [rbp + 0x188], rax
call fcn.180035cbc
mov rcx, 0xffffffffffffffd8
sub rcx, rax
mov rdx, rax
add rdx, 0x27
movabs r8, 0x200806a620eb8002
and r8, rdx
movabs r9, 0xdff7f959df147ffd
and r9, rcx
or r9, r8
movabs r14, 0xdff7f959df147fe2
xor r14, r9
and r14, rdx
mov qword [r14 - 8], rax
jmp 0x1800039df
lea rcx, [rsi + 1]
mov byte [rbp + 0x1bf], 1
lea rax, [rbp - 0x28]
mov qword [rbp + 0x188], rax
call fcn.180035cbc
mov r14, rax
mov qword [rbp + 0x120], r14
mov qword [rbp + 0x130], rdi
mov qword [rbp + 0x138], rsi
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rdi, r14
movabs rsi, 0x4a18e1ed83a3eb5f
mov byte [rdi], 0
movabs rcx, 0x4a18e1ed83a3ed7f
add rcx, qword [0x180046460]
call fcn.180031610
mov rbx, qword [0x180046488]
add rbx, rsi
xorps xmm0, xmm0
movaps xmmword [rbp + 0xa0], xmm0
movaps xmmword [rbp + 0xb0], xmm0
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1800048dc
mov rdi, rax
cmp rax, 0xf
ja 0x180003a90
mov qword [rbp + 0xb0], rdi
mov qword [rbp + 0xb8], 0xf
lea rcx, [rbp + 0xa0]
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rdi, rbp
add rdi, 0xa0
jmp 0x180003bad
mov ecx, edi
and ecx, 0xf
mov rdx, rcx
not rdx
mov r8, rdi
xor r8, 0xf
mov rax, rdi
xor rax, 0xfffffffffffffff0
mov r9d, edi
and r9d, 1
movabs r10, 0x7e4780d6dd9c0121
xor r10, rdi
or r8, rax
and r8, r10
movabs r10, 0x420200d2d800000e
and r10, rdx
or r10, r9
movabs r9, 0x3c458004059c0120
or r9, r10
xor r9, r8
xor rcx, rax
xor rax, rdx
or rax, rcx
not rax
or rax, r9
cmp rax, 0x17
mov esi, 0x16
cmovae rsi, rax
cmp rsi, 0xfff
jb 0x180003b63
lea rcx, [rsi + 0x28]
lea rax, [rbp + 0xa0]
mov qword [rbp + 0x1b0], rax
call fcn.180035cbc
mov rcx, 0xffffffffffffffd8
sub rcx, rax
mov rdx, rax
add rdx, 0x27
movabs r8, 0x200806a620eb8002
and r8, rdx
movabs r9, 0xdff7f959df147ffd
and r9, rcx
or r9, r8
movabs r14, 0xdff7f959df147fe2
xor r14, r9
and r14, rdx
mov qword [r14 - 8], rax
jmp 0x180003b7d
lea rcx, [rsi + 1]
lea rax, [rbp + 0xa0]
mov qword [rbp + 0x1b0], rax
call fcn.180035cbc
mov r14, rax
mov qword [rbp + 0xa0], r14
mov qword [rbp + 0xb0], rdi
mov qword [rbp + 0xb8], rsi
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rdi, r14
movabs rsi, 0x4a18e1ed83a3eb5f
mov byte [rdi], 0
lea r14, [rbp + 0xc0]
cmp byte [0x180047862], 0
jne 0x180003c56
mov rax, qword [0x180046460]
movabs rcx, 0x4a18e1ed83a3edbc
movzx ecx, byte [rax + rcx]
movabs rdx, 0x4a18e1ed83a3edd4
xor cl, byte [rax + rdx]
mov byte [0x18004785e], cl
movabs rcx, 0x4a18e1ed83a3edbd
movzx ecx, byte [rax + rcx]
movabs rdx, 0x4a18e1ed83a3edd5
xor cl, byte [rax + rdx]
mov byte [0x18004785f], cl
movabs rcx, 0x4a18e1ed83a3edbe
movzx ecx, byte [rax + rcx]
movabs rdx, 0x4a18e1ed83a3edd6
xor cl, byte [rax + rdx]
mov byte [0x180047860], cl
movabs rcx, 0x4a18e1ed83a3edbf
movzx ecx, byte [rax + rcx]
movabs rdx, 0x4a18e1ed83a3edd7
xor cl, byte [rax + rdx]
mov byte [0x180047861], cl
mov byte [0x180047862], 1
mov rbx, qword [0x180046490]
add rbx, rsi
xorps xmm0, xmm0
movups xmmword [r14 + 0x10], xmm0
movups xmmword [r14], xmm0
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1800048ef
mov rdi, rax
cmp rax, 0xf
ja 0x180003cae
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], 0xf
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rdi, r14
jmp 0x180003dbd
mov ecx, edi
and ecx, 0xf
mov rdx, rcx
not rdx
mov r8, rdi
xor r8, 0xf
mov rax, rdi
xor rax, 0xfffffffffffffff0
mov r9d, edi
and r9d, 1
movabs r10, 0x7e4780d6dd9c0121
xor r10, rdi
or r8, rax
and r8, r10
movabs r10, 0x420200d2d800000e
and r10, rdx
or r10, r9
movabs r9, 0x3c458004059c0120
or r9, r10
xor r9, r8
xor rcx, rax
xor rax, rdx
or rax, rcx
not rax
or rax, r9
cmp rax, 0x17
mov esi, 0x16
cmovae rsi, rax
cmp rsi, 0xfff
jb 0x180003d7a
lea rcx, [rsi + 0x28]
mov qword [rbp + 0x1b0], r14
call fcn.180035cbc
mov rcx, 0xffffffffffffffd8
sub rcx, rax
mov rdx, rax
add rdx, 0x27
movabs r8, 0x200806a620eb8002
and r8, rdx
movabs r9, 0xdff7f959df147ffd
and r9, rcx
or r9, r8
movabs r14, 0xdff7f959df147fe2
xor r14, r9
and r14, rdx
mov qword [r14 - 8], rax
jmp 0x180003d8d
lea rcx, [rsi + 1]
mov qword [rbp + 0x1b0], r14
call fcn.180035cbc
mov r14, rax
mov qword [rbp + 0xc0], r14
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], rsi
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rdi, r14
movabs rsi, 0x4a18e1ed83a3eb5f
mov byte [rdi], 0
lea rdi, [rbp + 0xe0]
cmp byte [0x180047873], 0
jne 0x18000404c
mov rax, qword [0x180046460]
movabs rcx, 0x4a18e1ed83a3ee67
movzx ecx, byte [rax + rcx]
movabs rdx, 0x4a18e1ed83a3ee4d
movzx r8d, byte [rax + rdx]
mov r11d, r8d
and r11b, 8
mov r10d, r8d
and r10b, 0xf5
mov edx, r8d
or dl, 0xf5
mov r9d, edx
and r9b, 0x23
or r9b, r11b
xor r9b, 0x2b
mov ebx, edx
and dl, 7
or dl, r11b
or r9b, r10b
xor dl, r10b
xor r10b, 0x15
and r10b, r8b
not r8b
mov r11d, ecx
xor r11b, 0xa
xor bl, 0xea
and r8b, 0x15
or r8b, r10b
and r10b, 0xe0
not r8b
and r8b, bl
or r8b, r10b
xor dl, 0xf0
and dl, r9b
or dl, r8b
mov r8d, ecx
xor r8b, 0xa8
and r8b, r11b
and r11b, 0x82
and cl, 0x20
or cl, r11b
xor cl, r8b
xor cl, dl
mov byte [0x18004786f], cl
movabs rcx, 0x4a18e1ed83a3ee68
movzx ecx, byte [rax + rcx]
movabs rdx, 0x4a18e1ed83a3ee4e
movzx r8d, byte [rax + rdx]
mov r11d, r8d
and r11b, 8
mov r10d, r8d
and r10b, 0xf5
mov edx, r8d
or dl, 0xf5
mov r9d, edx
and r9b, 0x23
or r9b, r11b
xor r9b, 0x2b
mov ebx, edx
and dl, 7
or dl, r11b
or r9b, r10b
xor dl, r10b
xor r10b, 0x15
and r10b, r8b
not r8b
mov r11d, ecx
xor r11b, 0xa
xor bl, 0xea
and r8b, 0x15
or r8b, r10b
and r10b, 0xe0
not r8b
and r8b, bl
or r8b, r10b
xor dl, 0xf0
and dl, r9b
or dl, r8b
mov r8d, ecx
xor r8b, 0xa8
and r8b, r11b
and r11b, 0x82
and cl, 0x20
or cl, r11b
xor cl, r8b
xor cl, dl
mov byte [0x180047870], cl
movabs rcx, 0x4a18e1ed83a3ee69
movzx ecx, byte [rax + rcx]
movabs rdx, 0x4a18e1ed83a3ee4f
movzx r8d, byte [rax + rdx]
mov r11d, r8d
and r11b, 8
mov r10d, r8d
and r10b, 0xf5
mov edx, r8d
or dl, 0xf5
mov r9d, edx
and r9b, 0x23
or r9b, r11b
xor r9b, 0x2b
mov ebx, edx
and dl, 7
or dl, r11b
or r9b, r10b
xor dl, r10b
xor r10b, 0x15
and r10b, r8b
not r8b
mov r11d, ecx
xor r11b, 0xa
xor bl, 0xea
and r8b, 0x15
or r8b, r10b
and r10b, 0xe0
not r8b
and r8b, bl
or r8b, r10b
xor dl, 0xf0
and dl, r9b
or dl, r8b
mov r8d, ecx
xor r8b, 0xa8
and r8b, r11b
and r11b, 0x82
and cl, 0x20
or cl, r11b
xor cl, r8b
xor cl, dl
mov byte [0x180047871], cl
movabs rcx, 0x4a18e1ed83a3ee6a
movzx ecx, byte [rax + rcx]
movabs rdx, 0x4a18e1ed83a3ee50
movzx edx, byte [rax + rdx]
mov r10d, edx
and r10b, 8
mov r9d, edx
and r9b, 0xf5
mov eax, edx
or al, 0xf5
mov r8d, eax
and r8b, 0x23
or r8b, r10b
xor r8b, 0x2b
mov r11d, eax
and al, 7
or al, r10b
or r8b, r9b
xor al, r9b
xor r9b, 0x15
and r9b, dl
not dl
mov r10d, ecx
xor r10b, 0xa
xor r11b, 0xea
and dl, 0x15
or dl, r9b
and r9b, 0xe0
not dl
and dl, r11b
or dl, r9b
xor al, 0xf0
and al, r8b
or al, dl
mov edx, ecx
xor dl, 0xa8
and dl, r10b
and r10b, 0x82
and cl, 0x20
or cl, r10b
xor cl, dl
xor cl, al
mov byte [0x180047872], cl
mov byte [0x180047873], 1
mov r14, qword [0x180046498]
add r14, rsi
xorps xmm0, xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi], xmm0
mov rcx, r14
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1800048fb
mov rbx, rax
cmp rax, 0xf
ja 0x180004091
mov qword [rbp + 0xf0], rbx
mov qword [rbp + 0xf8], 0xf
jmp 0x180004185
mov ecx, ebx
and ecx, 0xf
mov rdx, rcx
not rdx
mov r8, rbx
xor r8, 0xf
mov rax, rbx
xor rax, 0xfffffffffffffff0
mov r9d, ebx
and r9d, 1
movabs r10, 0x7e4780d6dd9c0121
xor r10, rbx
or r8, rax
and r8, r10
movabs r10, 0x420200d2d800000e
and r10, rdx
or r10, r9
movabs r9, 0x3c458004059c0120
or r9, r10
xor r9, r8
xor rcx, rax
xor rax, rdx
or rax, rcx
not rax
or rax, r9
cmp rax, 0x17
mov esi, 0x16
cmovae rsi, rax
cmp rsi, 0xfff
jb 0x18000415d
lea rcx, [rsi + 0x28]
mov qword [rbp + 0x1b0], rdi
call fcn.180035cbc
mov rcx, 0xffffffffffffffd8
sub rcx, rax
mov rdx, rax
add rdx, 0x27
movabs r8, 0x200806a620eb8002
and r8, rdx
movabs r9, 0xdff7f959df147ffd
and r9, rcx
or r9, r8
movabs rdi, 0xdff7f959df147fe2
xor rdi, r9
and rdi, rdx
mov qword [rdi - 8], rax
jmp 0x180004170
lea rcx, [rsi + 1]
mov qword [rbp + 0x1b0], rdi
call fcn.180035cbc
mov rdi, rax
mov qword [rbp + 0xe0], rdi
mov qword [rbp + 0xf0], rbx
mov qword [rbp + 0xf8], rsi
mov rcx, rdi
mov rdx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add rbx, rdi
mov byte [rbx], 0
lea rax, [rbp + 0xa0]
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0x100]
mov qword [rbp + 0x28], rax
mov byte [rbp + 0x1bc], 1
lea rcx, [rbp + 0x80]
lea rdx, [rbp + 0x20]
lea r8, [rbp + 0x1af]
call fcn.180002960
mov byte [rbp + 0x1bd], 1
lea rdx, [rbp + 0x120]
lea r8, [rbp + 0x80]
lea rcx, [rbp - 0x28]
call fcn.180005060
xorps xmm0, xmm0
movaps xmmword [rbp + 0x190], xmm0
mov ecx, 0x58
call fcn.180035cbc
mov rdi, rax
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x190], rax
lea rcx, [rbp + 0x190]
lea r8, [rbp - 0x60]
mov rdx, rax
call fcn.18000edf0
lea rcx, [rbp + 0x190]
mov rdx, rdi
lea r8, [rbp - 0x28]
call fcn.18000edf0
mov esi, 0x38
mov edi, 0x50
movabs rbx, 0x4a18e1ed83a3eb5f
nop word cs:[rax + rax]
lea rcx, [rsi + rbp]
add rcx, 0xffffffffffffffa0
call fcn.180005200
test rsi, rsi
mov eax, 0xc0
cmove rax, rdi
add rax, qword [0x1800464a0]
mov rax, qword [rbx + rax]
movabs rcx, 0x943bfcbf452b55b2
add rax, rcx
jmp rax
mov byte [rbp + 0x1be], 1
lea rax, [rbp - 0x60]
mov qword [rbp + 0x180], rax
call fcn.18000d970
lea rax, [rbp + 0x140]
mov qword [rbp + 0x1a0], rax
call fcn.18000d970
mov qword [rbp + 0x1a0], rdi
call fcn.18000d970
mov byte [rbp + 0x1bf], 1
lea rax, [rbp - 0x28]
mov qword [rbp + 0x188], rax
call fcn.18000d970
lea rax, [rbp + 0xa0]
mov qword [rbp + 0x1b0], rax
call fcn.18000d970
mov qword [rbp + 0x1b0], r14
call fcn.18000d970
mov qword [rbp + 0x1b0], rdi
call fcn.18000d970
int3