Function at 0x18000ef20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x328
mov rsi, rcx
mov rdx, qword [0x18004bcb8]
lea rax, [rdx + 0x6dc667]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
movabs rdi, 0xaaaaaaaaaaaaaaab
imul rax, rdi
movabs rbx, 0x2aaaaaaaaaaaaaaa
add rax, rbx
movabs r14, 0x5555555555555555
cmp rax, r14
jb 0x18000efa4
mov rax, qword [rsp + 0x28]
add rax, rdx
add rax, 2
mov qword [rsp + 0x28], rax
nop dword [rax]
mov rax, qword [rsp + 0x28]
test al, 3
jne 0x18000f0fe
inc qword [rsp + 0x28]
jmp 0x18000ef90
mov rax, qword [rsp + 0x28]
mov ecx, eax
mov rax, qword [rsp + 0x28]
test cl, 1
jne 0x18000f045
mov ecx, eax
mov rax, qword [rsp + 0x28]
test cl, 3
je 0x18000f088
add rax, 2
add rdx, 3
imul rdx, rax
mov qword [rsp + 0x28], rdx
mov rax, qword [rsp + 0x28]
test al, 1
jne 0x18000f0fe
movabs rax, 0xcccccccccccccccd
movabs rcx, 0x1999999999999999
movabs rdx, 0x3333333333333333
jmp 0x18000f027
inc r8
mov qword [rsp + 0x28], r8
mov r8, qword [rsp + 0x28]
test r8b, 1
jne 0x18000f0fe
mov r8, qword [rsp + 0x28]
imul r8, rax
mov r9, r8
add r9, rcx
mov r8, qword [rsp + 0x28]
cmp r9, rdx
jb 0x18000f010
dec r8
jmp 0x18000f013
sub rax, rdx
add rax, 2
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
imul rax, rdi
add rax, rbx
movabs rcx, 0x5555555555555554
cmp rax, rcx
ja 0x18000f0fe
inc qword [rsp + 0x28]
mov rax, qword [rsp + 0x28]
imul rax, rdi
add rax, rbx
cmp rax, r14
jb 0x18000f070
jmp 0x18000f0fe
movabs rcx, 0xcccccccccccccccd
imul rax, rcx
movabs r8, 0x1999999999999999
add rax, r8
movabs r9, 0x3333333333333333
cmp rax, r9
jb 0x18000f0fe
mov rax, qword [rsp + 0x28]
add rax, 0xb
mov r10, rdx
add r10, 0x17
mov rdx, rax
or rdx, r10
shr rdx, 0x20
je 0x18000f0d5
cqo
idiv r10
jmp 0x18000f0da
xor edx, edx
div r10d
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
imul rax, rdi
add rax, rbx
movabs rdx, 0x5555555555555554
cmp rax, rdx
jbe 0x18000f212
mov rcx, qword [0x18004bcb8]
call qword [sym.imp.KERNEL32.dll_DecodePointer]
mov rbp, rax
lea rcx, [rax + 0x6dc667]
mov qword [rsp + 0x20], rcx
mov rcx, qword [rsp + 0x20]
imul rcx, rdi
add rcx, rbx
cmp rcx, r14
jb 0x18000f154
mov rcx, qword [rsp + 0x20]
add rax, rcx
add rax, 2
mov qword [rsp + 0x20], rax
nop dword [rax]
mov rax, qword [rsp + 0x20]
test al, 3
jne 0x18000f2f3
inc qword [rsp + 0x20]
jmp 0x18000f140
mov rcx, qword [rsp + 0x20]
mov edx, ecx
mov rcx, qword [rsp + 0x20]
test dl, 1
jne 0x18000f230
mov edx, ecx
mov rcx, qword [rsp + 0x20]
test dl, 3
je 0x18000f278
add rcx, 2
add rax, 3
imul rax, rcx
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
test al, 1
jne 0x18000f2f3
movabs rax, 0xcccccccccccccccd
movabs rcx, 0x1999999999999999
movabs rdx, 0x3333333333333333
jmp 0x18000f1d7
inc r8
mov qword [rsp + 0x20], r8
mov r8, qword [rsp + 0x20]
test r8b, 1
jne 0x18000f2f3
mov r8, qword [rsp + 0x20]
imul r8, rax
mov r9, r8
add r9, rcx
mov r8, qword [rsp + 0x20]
cmp r9, rdx
jb 0x18000f1c0
dec r8
jmp 0x18000f1c3
dec rax
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
imul rax, rdi
add rax, rbx
cmp rax, r14
jae 0x18000f0fe
mov rax, qword [rsp + 0x28]
imul rax, rcx
mov rdx, rax
add rdx, r8
mov rax, qword [rsp + 0x28]
cmp rdx, r9
jb 0x18000f1f5
inc rax
jmp 0x18000f1f8
sub rcx, rax
add rcx, 2
mov qword [rsp + 0x20], rcx
mov rax, qword [rsp + 0x20]
imul rax, rdi
add rax, rbx
movabs rcx, 0x5555555555555554
cmp rax, rcx
ja 0x18000f2f3
nop dword [rax + rax]
inc qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
imul rax, rdi
add rax, rbx
cmp rax, r14
jb 0x18000f260
jmp 0x18000f2f3
movabs r8, 0xcccccccccccccccd
imul rcx, r8
movabs r9, 0x1999999999999999
add rcx, r9
movabs r10, 0x3333333333333333
cmp rcx, r10
jb 0x18000f2f3
mov rcx, qword [rsp + 0x20]
add rcx, 0xb
mov r11, rax
add r11, 0x17
mov rax, rcx
or rax, r11
shr rax, 0x20
je 0x18000f2c8
mov rax, rcx
cqo
idiv r11
jmp 0x18000f2cf
mov eax, ecx
xor edx, edx
div r11d
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
imul rax, rdi
add rax, rbx
movabs rcx, 0x5555555555555554
cmp rax, rcx
jbe 0x18001023f
mov rcx, rsi
call rbp
mov rcx, rax
test rax, rax
jne 0x18001020b
mov qword [rsp + 0x2b8], 0
mov qword [rsp + 0x1a8], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x2d0], xmm0
movups xmmword [rsp + 0x2e0], xmm0
movups xmmword [rsp + 0x2f0], xmm0
movups xmmword [rsp + 0x300], xmm0
mov qword [rsp + 0x310], 0
mov qword [rsp + 0x1a0], 0
lea rax, [fcn.18000eb00]
mov qword [rsp + 0x318], rax
mov qword [rsp + 0x320], rsi
mov dword [rsp + 0x2d0], 3
mov qword [rsp + 0x2d8], 0
mov qword [rsp + 0x2e0], 0
mov qword [rsp + 0x2e8], 0
mov qword [rsp + 0x2f0], 0
mov qword [rsp + 0x2f8], 0
mov qword [rsp + 0x300], 0
mov dword [rsp + 0x308], 0
mov dword [rsp + 0x30c], 1
mov dword [rsp + 0x310], 0x48
mov byte [rsp + 0xf0], 0xe4
mov byte [rsp + 0xf1], 0x81
mov byte [rsp + 0xf2], 0xf3
mov byte [rsp + 0xf3], SysAllocStringByteLen
mov byte [rsp + 0xf4], 0x88
mov byte [rsp + 0xf5], 0x8a
mov byte [rsp + 0xf6], reloc.OLEAUT32.dll_SysAllocStringByteLen
mov byte [rsp + 0xf7], 0xe7
mov byte [rsp + 0xf8], 0xb7
mov byte [rsp + 0xf9], 0xb6
mov byte [rsp + 0xfa], 0xb6
mov byte [rsp + 0xfb], VariantTimeToDosDateTime
mov dword [rsp + 0x104], 0
mov qword [rsp + 0xfc], 0
mov qword [rsp + 0x38], 0
mov rax, qword [rsp + 0x38]
cmp rax, 0x17
ja 0x18000f4b5
nop dword [rax]
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x38]
movzx ecx, byte [rsp + rcx + 0xf0]
mov edx, eax
add edx, 0x26b2d8d8
and edx, ecx
add eax, ecx
add eax, 0x26b2d8d8
add edx, edx
sub eax, edx
add al, 0x18
mov rcx, qword [rsp + 0x38]
mov byte [rsp + rcx + 0xf0], al
inc qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
cmp rax, 0x18
jb 0x18000f470
mov byte [rsp + 0x270], 0x74
mov byte [rsp + 0x271], 0x79
mov byte [rsp + 0x272], 0x68
mov byte [rsp + 0x273], 0x77
mov byte [rsp + 0x274], 0x76
mov byte [rsp + 0x275], 0x33
mov byte [rsp + 0x276], 0x6c
mov byte [rsp + 0x277], 0x7b
mov byte [rsp + 0x278], 0x7a
mov byte [rsp + 0x279], 0xd
movups xmmword [rsp + 0x27a], xmm0
mov qword [rsp + 0x288], 0
mov qword [rsp + 0x30], 0
mov rax, qword [rsp + 0x30]
cmp rax, 0x1f
ja 0x18000f575
nop dword [rax]
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x30]
movzx ecx, byte [rsp + rcx + 0x270]
mov edx, eax
add edx, 0x16f9d01
and edx, ecx
add eax, ecx
add eax, 0x16f9d01
add edx, edx
sub eax, edx
add al, 0xf9
mov rcx, qword [rsp + 0x30]
mov byte [rsp + rcx + 0x270], al
inc qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
cmp rax, 0x20
jb 0x18000f530
lea rcx, [rsp + 0x270]
call rbp
lea rdx, [rsp + 0xf0]
mov rcx, rax
call fcn.18000e6e0
mov rdi, rax
mov byte [rsp + 0x170], 0x24
mov byte [rsp + 0x171], 0xc9
mov byte [rsp + 0x172], 0x29
mov byte [rsp + 0x173], 0x36
mov byte [rsp + 0x174], 0xd8
mov byte [rsp + 0x175], 0x35
mov byte [rsp + 0x176], 0xd1
mov byte [rsp + 0x177], 0xd0
mov byte [rsp + 0x178], 0xd4
mov byte [rsp + 0x179], 0x34
mov byte [rsp + 0x17a], 0x23
mov byte [rsp + 0x17b], 0xdb
mov byte [rsp + 0x17c], 0x30
mov byte [rsp + 0x17d], 0x25
mov byte [rsp + 0x17e], 0xdc
mov byte [rsp + 0x17f], 0x22
mov byte [rsp + 0x180], 0x29
mov byte [rsp + 0x181], 0x25
mov byte [rsp + 0x182], 0xd9
mov byte [rsp + 0x183], 0x4b
xorps xmm0, xmm0
movups xmmword [rsp + 0x184], xmm0
mov qword [rsp + 0x193], 0
mov qword [rsp + 0x48], 0
mov rax, qword [rsp + 0x48]
cmp rax, 0x2a
ja 0x18000f6a5
nop dword [rax]
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movzx ecx, byte [rsp + rcx + 0x170]
mov edx, eax
add edx, 0x6f1f24cc
and edx, ecx
add eax, ecx
add eax, 0x6f1f24cc
add edx, edx
sub eax, edx
add al, 0x6c
mov rcx, qword [rsp + 0x48]
mov byte [rsp + rcx + 0x170], al
inc qword [rsp + 0x48]
mov rax, qword [rsp + 0x48]
cmp rax, 0x2b
jb 0x18000f660
mov byte [rsp + 0x250], 0x18
mov byte [rsp + 0x251], 0xd
mov byte [rsp + 0x252], 0x1c
mov byte [rsp + 0x253], 0x17
mov byte [rsp + 0x254], 0x16
mov byte [rsp + 0x255], 0xd3
mov byte [rsp + 0x256], 0x18
mov byte [rsp + 0x257], 0x13
mov byte [rsp + 0x258], 0x12
mov byte [rsp + 0x259], 0x81
movups xmmword [rsp + 0x25a], xmm0
mov qword [rsp + 0x268], 0
mov qword [rsp + 0x40], 0
mov rax, qword [rsp + 0x40]
cmp rax, 0x1f
ja 0x18000f765
nop dword [rax]
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x40]
movzx ecx, byte [rsp + rcx + 0x250]
mov edx, eax
add edx, 0x4108a897
and edx, ecx
add eax, ecx
add eax, 0x4108a897
add edx, edx
sub eax, edx
add al, 0xdf
mov rcx, qword [rsp + 0x40]
mov byte [rsp + rcx + 0x250], al
inc qword [rsp + 0x40]
mov rax, qword [rsp + 0x40]
cmp rax, 0x20
jb 0x18000f720
lea rcx, [rsp + 0x250]
call rbp
lea rdx, [rsp + 0x170]
mov rcx, rax
call fcn.18000e6e0
mov qword [rsp + 0x2c0], rax
mov byte [rsp + 0x140], 0x2a
mov byte [rsp + 0x141], 0x31
mov byte [rsp + 0x142], 0x2d
mov byte [rsp + 0x143], 0x3c
mov byte [rsp + 0x144], 0xce
mov byte [rsp + 0x145], 0xd
mov byte [rsp + 0x146], 0x2d
mov byte [rsp + 0x147], 0x2e
mov byte [rsp + 0x148], 0x2a
mov byte [rsp + 0x149], 0xe
mov byte [rsp + 0x14a], 0x23
mov byte [rsp + 0x14b], 0x2d
mov byte [rsp + 0x14c], 0x36
mov byte [rsp + 0x14d], 0x2d
mov byte [rsp + 0x14e], 0x26
mov byte [rsp + 0x14f], 0x28
mov byte [rsp + 0x150], 0x35
mov byte [rsp + 0x151], 0x2d
mov byte [rsp + 0x152], 0xdd
mov byte [rsp + 0x153], 0x53
xorps xmm0, xmm0
movups xmmword [rsp + 0x15d], xmm0
movups xmmword [rsp + 0x154], xmm0
mov qword [rsp + 0x58], 0
mov rax, qword [rsp + 0x58]
cmp rax, 0x2c
ja 0x18000f895
nop
mov rax, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x58]
movzx ecx, byte [rsp + rcx + 0x140]
mov edx, eax
add edx, 0x3de27f4b
and edx, ecx
add eax, ecx
add eax, 0x3de27f4b
add edx, edx
sub eax, edx
add al, 0xf3
mov rcx, qword [rsp + 0x58]
mov byte [rsp + rcx + 0x140], al
inc qword [rsp + 0x58]
mov rax, qword [rsp + 0x58]
cmp rax, 0x2d
jb 0x18000f850
mov byte [rsp + 0x230], 0x84
mov byte [rsp + 0x231], 0xb9
mov byte [rsp + 0x232], 0x88
mov byte [rsp + 0x233], 0x87
mov byte [rsp + 0x234], 0x86
mov byte [rsp + 0x235], 0xc3
mov byte [rsp + 0x236], 0x8c
mov byte [rsp + 0x237], 0xbb
mov byte [rsp + 0x238], 0xba
mov byte [rsp + 0x239], 0xd
mov qword [rsp + 0x23a], 0
mov dword [rsp + 0x242], 0
mov qword [rsp + 0x50], 0
mov rax, qword [rsp + 0x50]
cmp rax, 0x15
ja 0x18000f955
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movzx ecx, byte [rsp + rcx + 0x230]
mov edx, eax
add edx, 0x8d76e9d9
and edx, ecx
add eax, ecx
add eax, 0x8d76e9d9
add edx, edx
sub eax, edx
add al, 0x11
mov rcx, qword [rsp + 0x50]
mov byte [rsp + rcx + 0x230], al
inc qword [rsp + 0x50]
mov rax, qword [rsp + 0x50]
cmp rax, 0x16
jb 0x18000f910
lea rcx, [rsp + 0x230]
call rbp
lea rdx, [rsp + 0x140]
mov rcx, rax
call fcn.18000e6e0
mov r14, rax
mov byte [rsp + 0x110], 0xd0
mov byte [rsp + 0x111], 0x3d
mov byte [rsp + 0x112], 0xeb
mov byte [rsp + 0x113], 0x3f
mov byte [rsp + 0x114], 0x3c
mov byte [rsp + 0x115], 0x3a
mov byte [rsp + 0x116], 0xb9
mov byte [rsp + 0x117], 0x98
mov byte [rsp + 0x118], 0x40
mov byte [rsp + 0x119], 0xb8
mov byte [rsp + 0x11a], 0xb3
mov byte [rsp + 0x11b], 0x41
mov byte [rsp + 0x11c], 0x4d
mov byte [rsp + 0x11d], 0x41
mov byte [rsp + 0x11e], reloc.OLEAUT32.dll_SysAllocStringByteLen
mov byte [rsp + 0x11f], 0x41
mov byte [rsp + 0x120], 0x4f
mov byte [rsp + 0x121], 0x40
mov byte [rsp + 0x122], 0x4a
mov byte [rsp + 0x123], 0xdb
xorps xmm0, xmm0
movups xmmword [rsp + 0x124], xmm0
mov qword [rsp + 0x131], 0
mov qword [rsp + 0x68], 0
mov rax, qword [rsp + 0x68]
cmp rax, 0x28
ja 0x18000fa85
nop dword [rax]
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x68]
movzx ecx, byte [rsp + rcx + 0x110]
mov edx, eax
add edx, 0x461a8f3a
and edx, ecx
add eax, ecx
add eax, 0x461a8f3a
add edx, edx
sub eax, edx
add al, 0x6a
mov rcx, qword [rsp + 0x68]
mov byte [rsp + rcx + 0x110], al
inc qword [rsp + 0x68]
mov rax, qword [rsp + 0x68]
cmp rax, 0x29
jb 0x18000fa40
mov byte [rsp + 0x210], 0xd8
mov byte [rsp + 0x211], 0xcd
mov byte [rsp + 0x212], 0xdc
mov byte [rsp + 0x213], 0xd7
mov byte [rsp + 0x214], 0xd6
mov byte [rsp + 0x215], 0x13
mov byte [rsp + 0x216], 0xd8
mov byte [rsp + 0x217], 0xd3
mov byte [rsp + 0x218], 0xd2
mov byte [rsp + 0x219], 0xc1
movups xmmword [rsp + 0x21a], xmm0
mov dword [rsp + 0x22a], 0
mov qword [rsp + 0x60], 0
mov rax, qword [rsp + 0x60]
cmp rax, 0x1d
ja 0x18000fb45
nop dword [rax]
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x60]
movzx ecx, byte [rsp + rcx + 0x210]
mov edx, eax
add edx, 0xb93febf7
and edx, ecx
add eax, ecx
add eax, 0xb93febf7
add edx, edx
sub eax, edx
add al, 0x3f
mov rcx, qword [rsp + 0x60]
mov byte [rsp + rcx + 0x210], al
inc qword [rsp + 0x60]
mov rax, qword [rsp + 0x60]
cmp rax, 0x1e
jb 0x18000fb00
lea rcx, [rsp + 0x210]
call rbp
lea rdx, [rsp + 0x110]
mov rcx, rax
call fcn.18000e6e0
mov r15, rax
mov byte [rsp + 0xd0], 0xf8
mov byte [rsp + 0xd1], 0xdd
mov byte [rsp + 0xd2], 0x83
mov byte [rsp + 0xd3], 0xdf
mov byte [rsp + 0xd4], 0xdc
mov byte [rsp + 0xd5], 0xd2
mov byte [rsp + 0xd6], 0xe1
mov byte [rsp + 0xd7], 0xf3
mov byte [rsp + 0xd8], 0xdd
mov byte [rsp + 0xd9], 0xd8
mov byte [rsp + 0xda], 0x9f
mov byte [rsp + 0xdb], 0xad
mov byte [rsp + 0xdc], 0x38
mov dword [rsp + 0xdd], 0
mov word [rsp + 0xe1], 0
mov qword [rsp + 0x78], 0
mov rax, qword [rsp + 0x78]
cmp rax, 0x12
ja 0x18000fc45
nop word cs:[rax + rax]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x78]
movzx ecx, byte [rsp + rcx + 0xd0]
mov edx, eax
add edx, 0xb0a13336
and edx, ecx
add eax, ecx
add eax, 0xb0a13336
add edx, edx
sub eax, edx
add al, 0x86
mov rcx, qword [rsp + 0x78]
mov byte [rsp + rcx + 0xd0], al
inc qword [rsp + 0x78]
mov rax, qword [rsp + 0x78]
cmp rax, 0x13
jb 0x18000fc00
mov byte [rsp + 0x1f0], 0xd8
mov byte [rsp + 0x1f1], 0xcd
mov byte [rsp + 0x1f2], 0xdc
mov byte [rsp + 0x1f3], 0xd7
mov byte [rsp + 0x1f4], 0xd6
mov byte [rsp + 0x1f5], SysAllocStringByteLen
mov byte [rsp + 0x1f6], 0xd8
mov byte [rsp + 0x1f7], 0xd3
mov byte [rsp + 0x1f8], 0xd2
mov byte [rsp + 0x1f9], 0xc1
mov qword [rsp + 0x1fa], 0
mov dword [rsp + 0x201], 0
mov qword [rsp + 0x70], 0
mov rax, qword [rsp + 0x70]
cmp rax, 0x14
ja 0x18000fd05
mov rax, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x70]
movzx ecx, byte [rsp + rcx + 0x1f0]
mov edx, eax
add edx, 0x44c87237
and edx, ecx
add eax, ecx
add eax, 0x44c87237
add edx, edx
sub eax, edx
add al, 0x7f
mov rcx, qword [rsp + 0x70]
mov byte [rsp + rcx + 0x1f0], al
inc qword [rsp + 0x70]
mov rax, qword [rsp + 0x70]
cmp rax, 0x15
jb 0x18000fcc0
lea rcx, [rsp + 0x1f0]
call rbp
lea rdx, [rsp + 0xd0]
mov rcx, rax
call fcn.18000e6e0
mov r12, rax
mov byte [rsp + 0x1d0], 0x72
mov byte [rsp + 0x1d1], reloc.OLEAUT32.dll_SysAllocStringByteLen
mov byte [rsp + 0x1d2], 0x71
mov byte [rsp + 0x1d3], 0x80
mov byte [rsp + 0x1d4], 0x9e
mov byte [rsp + 0x1d5], 0x7d
mov byte [rsp + 0x1d6], 0x87
mov byte [rsp + 0x1d7], 0x9c
mov byte [rsp + 0x1d8], 0x85
mov byte [rsp + 0x1d9], 0x9b
mov byte [rsp + 0x1da], 0x2c
xorps xmm0, xmm0
movups xmmword [rsp + 0x1db], xmm0
mov qword [rsp + 0x88], 0
mov rax, qword [rsp + 0x88]
cmp rax, 0x1a
ja 0x18000fdf4
nop
mov rax, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x88]
movzx ecx, byte [rsp + rcx + 0x1d0]
mov edx, eax
add edx, 0xa0c27805
and edx, ecx
add eax, ecx
add eax, 0xa0c27805
add edx, edx
sub eax, edx
add al, 0xdd
mov rcx, qword [rsp + 0x88]
mov byte [rsp + rcx + 0x1d0], al
inc qword [rsp + 0x88]
mov rax, qword [rsp + 0x88]
cmp rax, 0x1b
jb 0x18000fda0
mov byte [rsp + 0x1b0], 0xf4
mov byte [rsp + 0x1b1], 0xf9
mov byte [rsp + 0x1b2], 0xc8
mov byte [rsp + 0x1b3], 0xf7
mov byte [rsp + 0x1b4], 0xf6
mov byte [rsp + 0x1b5], 0x33
mov byte [rsp + 0x1b6], 0xcc
mov byte [rsp + 0x1b7], 0xfb
mov byte [rsp + 0x1b8], 0xfa
mov byte [rsp + 0x1b9], 0x6d
movups xmmword [rsp + 0x1ba], xmm0
mov byte [rsp + 0x1ca], 0
mov qword [rsp + 0x80], 0
mov rax, qword [rsp + 0x80]
cmp rax, 0x1a
ja 0x18000fec4
nop
mov rax, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x80]
movzx ecx, byte [rsp + rcx + 0x1b0]
mov edx, eax
add edx, 0x98e0dd51
and edx, ecx
add eax, ecx
add eax, 0x98e0dd51
add edx, edx
sub eax, edx
add al, 0xc9
mov rcx, qword [rsp + 0x80]
mov byte [rsp + rcx + 0x1b0], al
inc qword [rsp + 0x80]
mov rax, qword [rsp + 0x80]
cmp rax, 0x1b
jb 0x18000fe70
lea rcx, [rsp + 0x1b0]
call rbp
lea rdx, [rsp + 0x1d0]
mov rcx, rax
call fcn.18000e6e0
mov r13, rax
mov byte [rsp + 0xa0], 0x9a
mov byte [rsp + 0xa1], 0xf5
mov byte [rsp + 0xa2], 0x9a
mov byte [rsp + 0xa3], 0x88
mov byte [rsp + 0xa4], 0xf6
mov byte [rsp + 0xa5], 0x8a
mov byte [rsp + 0xa6], SysAllocStringByteLen
mov byte [rsp + 0xa7], 0xf2
mov byte [rsp + 0xa8], 0x85
mov byte [rsp + 0xa9], 0xa0
mov byte [rsp + 0xaa], 0xf8
mov byte [rsp + 0xab], 0x80
mov byte [rsp + 0xac], 0x85
mov byte [rsp + 0xad], 0xfb
mov byte [rsp + 0xae], 0xf3
mov byte [rsp + 0xaf], 0x87
mov byte [rsp + 0xb0], 0xdf
mov byte [rsp + 0xb1], 0x8b
mov byte [rsp + 0xb2], 0x85
mov byte [rsp + 0xb3], 0x88
mov byte [rsp + 0xb4], 0x82
mov byte [rsp + 0xb5], 0xe2
mov byte [rsp + 0xb6], 0xfb
mov byte [rsp + 0xb7], 0x8c
mov byte [rsp + 0xb8], 0xf0
mov byte [rsp + 0xb9], 0xf6
mov byte [rsp + 0xba], 0x82
mov byte [rsp + 0xbb], 0x86
mov byte [rsp + 0xbc], 0x1a
mov qword [rsp + 0xc4], 0
mov qword [rsp + 0xbd], 0
mov qword [rsp + 0x98], 0
mov rax, qword [rsp + 0x98]
cmp rax, 0x2b
ja 0x180010054
nop dword [rax + rax]
mov rax, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x98]
movzx ecx, byte [rsp + rcx + 0xa0]
mov edx, eax
add edx, 0xffc157b1
and edx, ecx
add eax, ecx
add eax, 0xffc157b1
add edx, edx
sub eax, edx
add al, 0x29
mov rcx, qword [rsp + 0x98]
mov byte [rsp + rcx + 0xa0], al
inc qword [rsp + 0x98]
mov rax, qword [rsp + 0x98]
cmp rax, 0x2c
jb 0x180010000
mov byte [rsp + 0x290], 0x24
mov byte [rsp + 0x291], 0x39
mov byte [rsp + 0x292], 0x28
mov byte [rsp + 0x293], 0x27
mov byte [rsp + 0x294], 0x26
mov byte [rsp + 0x295], 0x63
mov byte [rsp + 0x296], 0x2c
mov byte [rsp + 0x297], 0x3b
mov byte [rsp + 0x298], 0x3a
mov byte [rsp + 0x299], 0xad
mov qword [rsp + 0x29a], 0
mov qword [rsp + 0x90], 0
mov rax, qword [rsp + 0x90]
cmp rax, 0x11
ja 0x180010124
nop word [rax + rax]
mov rax, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x90]
movzx ecx, byte [rsp + rcx + 0x290]
mov edx, eax
add edx, 0x25b284e9
and edx, ecx
add eax, ecx
add eax, 0x25b284e9
add edx, edx
sub eax, edx
add al, 0xa1
mov rcx, qword [rsp + 0x90]
mov byte [rsp + rcx + 0x290], al
inc qword [rsp + 0x90]
mov rax, qword [rsp + 0x90]
cmp rax, 0x12
jb 0x1800100d0
lea rcx, [rsp + 0x290]
call rbp
lea rdx, [rsp + 0xa0]
mov rcx, rax
call fcn.18000e6e0
mov rbx, rax
lea rcx, [rsp + 0x1a8]
xor edx, edx
call rdi
mov rcx, qword [rsp + 0x1a8]
test rcx, rcx
je 0x180010200
mov rax, qword [rsp + 0x2c0]
mov edx, 1
call rax
mov rcx, qword [rsp + 0x1a8]
mov edx, 1
call r14
lea rcx, [rsp + 0x1a0]
call r15
cmp qword [rsp + 0x1a0], 0
je 0x180010200
lea rdx, [0x1800132c6]
lea rcx, [rsp + 0x2b8]
lea r8, [rsp + 0x318]
lea r9, [rsp + 0x2d0]
call r12
mov rcx, qword [rsp + 0x2b8]
test rcx, rcx
je 0x180010200
mov qword [rsp + 0x2c8], 0xffffffffff676980
lea rdx, [rsp + 0x2c8]
xor r8d, r8d
xor r9d, r9d
call r13
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0x1a0]
xor edx, edx
xor r8d, r8d
call rbx
mov rcx, rsi
call rbp
jmp 0x180010208
mov rcx, rsi
call fcn.18000eb00
mov rcx, rax
mov rax, rcx
add rsp, 0x328
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
dec rax
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
imul rax, rdi
add rax, rbx
cmp rax, r14
jae 0x18000f2f3
mov rax, qword [rsp + 0x20]
imul rax, r8
mov rcx, rax
add rcx, r9
mov rax, qword [rsp + 0x20]
cmp rcx, r10
jb 0x180010222
inc rax
jmp 0x180010225