Function at 0x180001090
Capabilities:
Link many functions at runtime

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x8b0]
sub rsp, 0x9b0
mov rax, qword [0x1800d4008]
xor rax, rsp
mov qword [rbp + 0x8a0], rax
mov qword [rsp + 0x68], rcx
mov dword [rbp - 0x70], 0x68
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
movups xmmword [rbp - 0x58], xmm0
movups xmmword [rbp - 0x48], xmm0
movups xmmword [rbp - 0x38], xmm0
movups xmmword [rbp - 0x28], xmm0
movups xmmword [rbp - 0x18], xmm0
mov dword [rbp - 0x34], 1
xor r15d, r15d
mov word [rbp - 0x30], r15w
mov ecx, dword [0x1800d4ac8]
mov rax, qword gs:[0x58]
mov rdi, qword [rax + rcx*8]
mov ecx, 0x130
mov eax, dword [rcx + rdi]
mov ebx, 0x138
add rbx, rdi
test al, 1
jne 0x18000114f
or eax, 1
mov dword [rcx + rdi], eax
mov word [rbx + 9], 0x10b
mov dword [rbx], 0xd5277f77
mov dword [rbx + 4], 0xa3955d23
mov byte [rbx + 8], 0x75
lea rcx, [0x180012a30]
call fcn.1800023c8
nop
cmp byte [rbx + 0xa], 0
je 0x180001180
xor byte [rbx], 0x19
xor byte [rbx + 1], 0xb
xor byte [rbx + 2], 0x43
xor byte [rbx + 3], 0xb9
xor byte [rbx + 4], 0x4f
xor byte [rbx + 5], 0x73
xor byte [rbx + 6], 0xf1
xor byte [rbx + 7], 0xcf
xor byte [rbx + 8], 0x19
xor byte [rbx + 9], 0xb
mov byte [rbx + 0xa], 0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r14, rax
mov eax, 0x144
mov ecx, dword [rax + rdi]
mov edx, 0x148
test cl, 1
jne 0x1800011d1
or ecx, 1
mov dword [rax + rdi], ecx
lea rbx, [rdi + rdx]
mov dword [rbx + 0xa], 0x1175151
mov dword [rbx], 0x534fa610
mov dword [rbx + 4], 0x2b006972
mov word [rbx + 8], 0xa755
lea rcx, [0x180012a00]
call fcn.1800023c8
nop
jmp 0x1800011d5
lea rbx, [rdx + rdi]
cmp byte [rbx + 0xd], 0
je 0x180001212
xor byte [rbx], 0x7b
xor byte [rbx + 1], 0xc3
xor byte [rbx + 2], 0x3d
xor byte [rbx + 3], 0x3d
xor byte [rbx + 4], 0x17
xor byte [rbx + 5], 5
xor byte [rbx + 6], 0x33
xor byte [rbx + 7], 0x19
xor byte [rbx + 8], 0x7b
xor byte [rbx + 9], 0xc3
xor byte [rbx + 0xa], 0x3d
xor byte [rbx + 0xb], 0x3d
xor byte [rbx + 0xc], 0x17
mov byte [rbx + 0xd], 0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r12, rax
mov eax, 0x158
mov ecx, dword [rax + rdi]
mov edx, 0x160
test cl, 1
jne 0x18000125d
or ecx, 1
mov dword [rax + rdi], ecx
lea rbx, [rdi + rdx]
mov dword [rbx + 8], 0x135791f
mov dword [rbx], 0x4b506606
mov dword [rbx + 4], 0x6d195d06
lea rcx, [0x1800129d0]
call fcn.1800023c8
nop
jmp 0x180001261
lea rbx, [rdx + rdi]
cmp byte [rbx + 0xb], 0
je 0x180001296
xor byte [rbx], 0x73
xor byte [rbx + 1], 0x15
xor byte [rbx + 2], 0x35
xor byte [rbx + 3], 0x39
xor byte [rbx + 4], 0x35
xor byte [rbx + 5], 0x6f
xor byte [rbx + 6], 0x37
xor byte [rbx + 7], 9
xor byte [rbx + 8], 0x73
xor byte [rbx + 9], 0x15
xor byte [rbx + 0xa], 0x35
mov byte [rbx + 0xb], 0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r13, rax
mov eax, 0x16c
mov ecx, dword [rax + rdi]
mov edx, 0x170
test cl, 1
jne 0x1800012e8
or ecx, 1
mov dword [rax + rdi], ecx
lea rbx, [rdi + rdx]
mov dword [rbx + 0xc], 0x1bb8080
mov dword [rbx], 0xecfefb78
mov dword [rbx + 4], 0xa7eba487
mov dword [rbx + 8], 0xfefeea54
lea rcx, [0x1800129a0]
call fcn.1800023c8
nop
jmp 0x1800012ec
lea rbx, [rdx + rdi]
cmp byte [rbx + 0xf], 0
je 0x180001331
xor byte [rbx], 0x3b
xor byte [rbx + 1], 0x89
xor byte [rbx + 2], 0x9b
xor byte [rbx + 3], 0x8d
xor byte [rbx + 4], 0xf3
xor byte [rbx + 5], 0xc1
xor byte [rbx + 6], 0xbb
xor byte [rbx + 7], 0xd5
xor byte [rbx + 8], 0x3b
xor byte [rbx + 9], 0x89
xor byte [rbx + 0xa], 0x9b
xor byte [rbx + 0xb], 0x8d
xor byte [rbx + 0xc], 0xf3
xor byte [rbx + 0xd], 0xc1
xor byte [rbx + 0xe], 0xbb
mov byte [rbx + 0xf], 0
mov rdx, rbx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
movdqa xmm0, xmmword [0x1800d09a0]
mov dword [rbp + 0x470], 0x93ff645a
mov dword [rbp + 0x474], 0xdac8fc62
mov dword [rbp + 0x478], 0xaab53219
mov ecx, 0x180
mov eax, dword [rcx + rdi]
mov edx, 0x188
test al, 1
jne 0x1800013ec
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdi + rdx]
mov byte [rbx + 0x1d], 1
lea rax, [rbx + 0x1c]
lea rcx, [rbp + 0x47c]
cmp rbx, rcx
ja 0x1800013c0
lea rcx, [rbp + 0x460]
cmp rax, rcx
jb 0x1800013c0
movups xmmword [rbx], xmm0
movsd xmm0, qword [rbp + 0x470]
movsd qword [rbx + 0x10], xmm0
mov eax, dword [rbp + 0x478]
mov dword [rbx + 0x18], eax
mov byte [rbx + 0x1c], 0x15
jmp 0x1800013dd
movups xmmword [rbx], xmm0
movsd xmm0, qword [rbp + 0x470]
movsd qword [rbx + 0x10], xmm0
mov eax, dword [rbp + 0x478]
mov dword [rbx + 0x18], eax
mov byte [rbx + 0x1c], 0x15
lea rcx, [0x180012970]
call fcn.1800023c8
nop
jmp 0x1800013f0
lea rbx, [rdx + rdi]
cmp byte [rbx + 0x1d], 0
je 0x18000146d
xor byte [rbx], 0x37
xor byte [rbx + 1], 0x57
xor byte [rbx + 2], 0xcd
xor byte [rbx + 3], 0xcf
xor byte [rbx + 4], 0x15
xor byte [rbx + 5], 0x89
xor byte [rbx + 6], 0xbb
xor byte [rbx + 7], 0xbb
xor byte [rbx + 8], 0x37
xor byte [rbx + 9], 0x57
xor byte [rbx + 0xa], 0xcd
xor byte [rbx + 0xb], 0xcf
xor byte [rbx + 0xc], 0x15
xor byte [rbx + 0xd], 0x89
xor byte [rbx + 0xe], 0xbb
xor byte [rbx + 0xf], 0xbb
xor byte [rbx + 0x10], 0x37
xor byte [rbx + 0x11], 0x57
xor byte [rbx + 0x12], 0xcd
xor byte [rbx + 0x13], 0xcf
xor byte [rbx + 0x14], 0x15
xor byte [rbx + 0x15], 0x89
xor byte [rbx + 0x16], 0xbb
xor byte [rbx + 0x17], 0xbb
xor byte [rbx + 0x18], 0x37
xor byte [rbx + 0x19], 0x57
xor byte [rbx + 0x1a], 0xcd
xor byte [rbx + 0x1b], 0xcf
xor byte [rbx + 0x1c], 0x15
mov byte [rbx + 0x1d], 0
lea rax, [rsp + 0x50]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
xor ecx, ecx
call rsi
mov edx, 0x2710
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.USER32.dll_WaitForInputIdle]
mov edx, 0x1388
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, 0x1a8
mov eax, dword [rcx + rdi]
mov edx, 0x1b0
test al, 1
jne 0x18000150b
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov word [rbx + 0xb], 0x1b5
mov dword [rbx], 0xd1bfe0fb
mov dword [rbx + 4], 0x35ff060c
mov word [rbx + 8], 0xfed2
mov byte [rbx + 0xa], 0x90
lea rcx, [0x180012940]
call fcn.1800023c8
nop
jmp 0x18000150f
lea rbx, [rdx + rdi]
cmp byte [rbx + 0xc], 0
je 0x180001548
xor byte [rbx], 0xbd
xor byte [rbx + 1], 0x89
xor byte [rbx + 2], 0xd1
xor byte [rbx + 3], 0xb5
xor byte [rbx + 4], 0x5b
xor byte [rbx + 5], 0x6f
xor byte [rbx + 6], 0x91
xor byte [rbx + 7], 0x51
xor byte [rbx + 8], 0xbd
xor byte [rbx + 9], 0x89
xor byte [rbx + 0xa], 0xd1
xor byte [rbx + 0xb], 0xb5
mov byte [rbx + 0xc], 0
mov rdx, rbx
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
movdqa xmm0, xmmword [0x1800d0980]
movdqa xmm1, xmmword [0x1800d0990]
mov dword [rbp + 0x480], 0xe5811895
mov eax, 0x1c0
mov ecx, dword [rax + rdi]
mov edx, 0x1c8
test cl, 1
jne 0x1800015de
or ecx, 1
mov dword [rax + rdi], ecx
lea rbx, [rdx + rdi]
mov byte [rbx + 0x24], 1
lea rax, [rbx + 0x23]
lea rcx, [rbp + 0x483]
cmp rbx, rcx
ja 0x1800015bf
lea rcx, [rbp + 0x460]
cmp rax, rcx
jb 0x1800015bf
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
mov eax, dword [rbp + 0x480]
mov dword [rbx + 0x20], eax
jmp 0x1800015cf
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
mov eax, dword [rbp + 0x480]
mov dword [rbx + 0x20], eax
lea rcx, [0x180012910]
call fcn.1800023c8
nop
jmp 0x1800015e2
lea rbx, [rdx + rdi]
cmp byte [rbx + 0x24], 0
je 0x18000167f
xor byte [rbx], 0xf9
xor byte [rbx + 1], 0x7d
xor byte [rbx + 2], 0xf3
xor byte [rbx + 3], 0xe5
xor byte [rbx + 4], 0xc7
xor byte [rbx + 5], 0xf1
xor byte [rbx + 6], 0x2f
xor byte [rbx + 7], 0xcd
xor byte [rbx + 8], 0xf9
xor byte [rbx + 9], 0x7d
xor byte [rbx + 0xa], 0xf3
xor byte [rbx + 0xb], 0xe5
xor byte [rbx + 0xc], 0xc7
xor byte [rbx + 0xd], 0xf1
xor byte [rbx + 0xe], 0x2f
xor byte [rbx + 0xf], 0xcd
xor byte [rbx + 0x10], 0xf9
xor byte [rbx + 0x11], 0x7d
xor byte [rbx + 0x12], 0xf3
xor byte [rbx + 0x13], 0xe5
xor byte [rbx + 0x14], 0xc7
xor byte [rbx + 0x15], 0xf1
xor byte [rbx + 0x16], 0x2f
xor byte [rbx + 0x17], 0xcd
xor byte [rbx + 0x18], 0xf9
xor byte [rbx + 0x19], 0x7d
xor byte [rbx + 0x1a], 0xf3
xor byte [rbx + 0x1b], 0xe5
xor byte [rbx + 0x1c], 0xc7
xor byte [rbx + 0x1d], 0xf1
xor byte [rbx + 0x1e], 0x2f
xor byte [rbx + 0x1f], 0xcd
xor byte [rbx + 0x20], 0xf9
xor byte [rbx + 0x21], 0x7d
xor byte [rbx + 0x22], 0xf3
xor byte [rbx + 0x23], 0xe5
mov byte [rbx + 0x24], 0
mov rdx, rbx
xor ecx, ecx
call rsi
mov rsi, rax
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
movdqa xmm0, xmmword [0x1800d0970]
mov dword [rbp + 0x470], 0x23973d8c
mov dword [rbp + 0x474], 0x74a4c676
mov word [rbp + 0x478], 0x5390
mov ecx, 0x1f0
mov eax, dword [rcx + rdi]
mov edx, 0x1f8
test al, 1
jne 0x18000173b
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov byte [rbx + 0x1a], 1
lea rax, [rbx + 0x19]
lea rcx, [rbp + 0x479]
cmp rbx, rcx
ja 0x180001711
lea rcx, [rbp + 0x460]
cmp rax, rcx
jb 0x180001711
movups xmmword [rbx], xmm0
movsd xmm0, qword [rbp + 0x470]
movsd qword [rbx + 0x10], xmm0
movzx eax, word [rbp + 0x478]
mov word [rbx + 0x18], ax
jmp 0x18000172c
movups xmmword [rbx], xmm0
movsd xmm0, qword [rbp + 0x470]
movsd qword [rbx + 0x10], xmm0
movzx eax, word [rbp + 0x478]
mov word [rbx + 0x18], ax
lea rcx, [0x1800128e0]
call fcn.1800023c8
nop
jmp 0x18000173f
lea rbx, [rdx + rdi]
cmp byte [rbx + 0x1a], 0
je 0x1800017b0
xor byte [rbx], 0xe3
xor byte [rbx + 1], 0x53
xor byte [rbx + 2], 0xc7
xor byte [rbx + 3], 0x51
xor byte [rbx + 4], 0x19
xor byte [rbx + 5], 0xa5
xor byte [rbx + 6], 0xc1
xor byte [rbx + 7], 7
xor byte [rbx + 8], 0xe3
xor byte [rbx + 9], 0x53
xor byte [rbx + 0xa], 0xc7
xor byte [rbx + 0xb], 0x51
xor byte [rbx + 0xc], 0x19
xor byte [rbx + 0xd], 0xa5
xor byte [rbx + 0xe], 0xc1
xor byte [rbx + 0xf], 7
xor byte [rbx + 0x10], 0xe3
xor byte [rbx + 0x11], 0x53
xor byte [rbx + 0x12], 0xc7
xor byte [rbx + 0x13], 0x51
xor byte [rbx + 0x14], 0x19
xor byte [rbx + 0x15], 0xa5
xor byte [rbx + 0x16], 0xc1
xor byte [rbx + 0x17], 7
xor byte [rbx + 0x18], 0xe3
xor byte [rbx + 0x19], 0x53
mov byte [rbx + 0x1a], 0
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x20], r15
mov r9d, 0x30
lea r8, [rbp]
xor edx, edx
mov rcx, qword [rsp + 0x50]
call rax
movdqa xmm0, xmmword [0x1800d0950]
mov word [rbp + 0x470], 0x7730
mov ecx, 0x214
mov eax, dword [rcx + rdi]
mov edx, 0x218
test al, 1
jne 0x18000184d
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov byte [rbx + 0x12], 1
lea rax, [rbx + 0x11]
lea rcx, [rbp + 0x471]
cmp rbx, rcx
ja 0x180001830
lea rcx, [rbp + 0x460]
cmp rax, rcx
jb 0x180001830
movups xmmword [rbx], xmm0
movzx eax, word [rbp + 0x470]
mov word [rbx + 0x10], ax
jmp 0x18000183e
movups xmmword [rbx], xmm0
movzx eax, word [rbp + 0x470]
mov word [rbx + 0x10], ax
lea rcx, [0x1800128b0]
call fcn.1800023c8
nop
jmp 0x180001851
lea rbx, [rdx + rdi]
cmp byte [rbx + 0x12], 0
je 0x1800018a2
xor byte [rbx], 0x49
xor byte [rbx + 1], 0x77
xor byte [rbx + 2], 0x6d
xor byte [rbx + 3], 0xeb
xor byte [rbx + 4], 0xb5
xor byte [rbx + 5], 9
xor byte [rbx + 6], 0x85
xor byte [rbx + 7], 0x5d
xor byte [rbx + 8], 0x49
xor byte [rbx + 9], 0x77
xor byte [rbx + 0xa], 0x6d
xor byte [rbx + 0xb], 0xeb
xor byte [rbx + 0xc], 0xb5
xor byte [rbx + 0xd], 9
xor byte [rbx + 0xe], 0x85
xor byte [rbx + 0xf], 0x5d
xor byte [rbx + 0x10], 0x49
xor byte [rbx + 0x11], 0x77
mov byte [rbx + 0x12], 0
mov rdx, rbx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [rsp + 0x20], r15
mov r9d, 0x430
lea r8, [rbp + 0x30]
mov rdx, qword [rbp + 8]
mov rcx, qword [rsp + 0x50]
call rbx
mov qword [rsp + 0x20], r15
mov r9d, 0x400
lea r8, [rbp + 0x490]
mov rdx, qword [rbp + 0x88]
mov rcx, qword [rsp + 0x50]
call rbx
mov ecx, 0x22c
mov eax, dword [rcx + rdi]
mov edx, 0x230
test al, 1
jne 0x180001930
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov dword [rbx + 0xc], 0x1b7153e
mov dword [rbx], 0x8f43f6fd
mov dword [rbx + 4], 0xacdb0c0e
mov dword [rbx + 8], 0x985ef3c7
lea rcx, [0x180012880]
call fcn.1800023c8
nop
jmp 0x180001934
lea rbx, [rdx + rdi]
cmp byte [rbx + 0xf], 0
je 0x180001979
xor byte [rbx], 0xab
xor byte [rbx + 1], 0x9f
xor byte [rbx + 2], 0x31
xor byte [rbx + 3], 0xfb
xor byte [rbx + 4], 0x7b
xor byte [rbx + 5], 0x6d
xor byte [rbx + 6], 0xb7
xor byte [rbx + 7], 0xed
xor byte [rbx + 8], 0xab
xor byte [rbx + 9], 0x9f
xor byte [rbx + 0xa], 0x31
xor byte [rbx + 0xb], 0xfb
xor byte [rbx + 0xc], 0x7b
xor byte [rbx + 0xd], 0x6d
xor byte [rbx + 0xe], 0xb7
mov byte [rbx + 0xf], 0
mov rdx, rbx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r14, rax
mov dword [rsp + 0x20], 0x40
xor edx, edx
mov r9d, 0x3000
mov r8d, 0x2d72c
mov rcx, qword [rsp + 0x50]
call r14
mov r15, rax
movdqa xmm0, xmmword [0x1800d0960]
mov word [rbp + 0x470], 0xfacd
mov eax, 0x240
mov ecx, dword [rax + rdi]
mov edx, 0x248
test cl, 1
jne 0x180001a2b
or ecx, 1
mov dword [rax + rdi], ecx
lea rbx, [rdx + rdi]
mov byte [rbx + 0x13], 1
lea rax, [rbx + 0x12]
lea rcx, [rbp + 0x472]
cmp rbx, rcx
ja 0x180001a0a
lea rcx, [rbp + 0x460]
cmp rax, rcx
jb 0x180001a0a
movups xmmword [rbx], xmm0
movzx eax, word [rbp + 0x470]
mov word [rbx + 0x10], ax
mov byte [rbx + 0x12], 0xbf
jmp 0x180001a1c
movups xmmword [rbx], xmm0
movzx eax, word [rbp + 0x470]
mov word [rbx + 0x10], ax
mov byte [rbx + 0x12], 0xbf
lea rcx, [0x180012850]
call fcn.1800023c8
nop
jmp 0x180001a2f
lea rbx, [rdx + rdi]
cmp byte [rbx + 0x13], 0
je 0x180001a84
xor byte [rbx], 0xbf
xor byte [rbx + 1], 0x83
xor byte [rbx + 2], 0xbf
xor byte [rbx + 3], 0x8d
xor byte [rbx + 4], 0xeb
xor byte [rbx + 5], 0xa7
xor byte [rbx + 6], 0xfb
xor byte [rbx + 7], 0xb
xor byte [rbx + 8], 0xbf
xor byte [rbx + 9], 0x83
xor byte [rbx + 0xa], 0xbf
xor byte [rbx + 0xb], 0x8d
xor byte [rbx + 0xc], 0xeb
xor byte [rbx + 0xd], 0xa7
xor byte [rbx + 0xe], 0xfb
xor byte [rbx + 0xf], 0xb
xor byte [rbx + 0x10], 0xbf
xor byte [rbx + 0x11], 0x83
xor byte [rbx + 0x12], 0xbf
mov byte [rbx + 0x13], 0
mov rdx, rbx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
xor r12d, r12d
mov qword [rsp + 0x20], r12
mov r9d, 0x2d72c
mov r8, qword [rsp + 0x68]
mov rdx, r15
mov rcx, qword [rsp + 0x50]
call rbx
mov dword [rsp + 0x20], 4
xor edx, edx
mov r9d, 0x3000
mov r8d, 0x400
mov rcx, qword [rsp + 0x50]
call r14
mov qword [rsp + 0x70], rax
mov qword [rbp + 0x490], r15
mov qword [rsp + 0x20], r12
mov r9d, 0x400
lea r8, [rbp + 0x490]
mov rdx, rax
mov rcx, qword [rsp + 0x50]
call rbx
mov rdx, qword [rbp + 8]
add rdx, 0x58
mov qword [rsp + 0x20], r12
lea r9d, [r12 + 8]
lea r8, [rsp + 0x70]
mov rcx, qword [rsp + 0x50]
call rbx
movsd xmm0, qword [str.error]
movsd qword [rbp + 0x890], xmm0
mov eax, dword [0x18001ab78]
mov dword [rbp + 0x898], eax
mov qword [rsp + 0x78], 1
lea rcx, [rbp + 0x890]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, eax
mov dword [rbp - 0x80], eax
lea rax, [rbp + 0x890]
mov qword [rbp - 0x78], rax
movdqa xmm0, xmmword [0x1800d0940]
mov dword [rbp + 0x470], 0x47c63196
mov ecx, 0x25c
mov eax, dword [rcx + rdi]
mov edx, 0x260
test al, 1
jne 0x180001bcc
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov byte [rbx + 0x14], 1
lea rax, [rbx + 0x13]
lea rcx, [rbp + 0x473]
cmp rbx, rcx
ja 0x180001bb1
lea rcx, [rbp + 0x460]
cmp rax, rcx
jb 0x180001bb1
movups xmmword [rbx], xmm0
mov eax, dword [rbp + 0x470]
mov dword [rbx + 0x10], eax
jmp 0x180001bbd
movups xmmword [rbx], xmm0
mov eax, dword [rbp + 0x470]
mov dword [rbx + 0x10], eax
lea rcx, [0x180012820]
call fcn.1800023c8
nop
jmp 0x180001bd0
lea rbx, [rdx + rdi]
cmp byte [rbx + 0x14], 0
je 0x180001c29
xor byte [rbx], 0xe3
xor byte [rbx + 1], 0x45
xor byte [rbx + 2], 0x87
xor byte [rbx + 3], 0x47
xor byte [rbx + 4], 0x15
xor byte [rbx + 5], 0xb1
xor byte [rbx + 6], 0x11
xor byte [rbx + 7], 0x7b
xor byte [rbx + 8], 0xe3
xor byte [rbx + 9], 0x45
xor byte [rbx + 0xa], 0x87
xor byte [rbx + 0xb], 0x47
xor byte [rbx + 0xc], 0x15
xor byte [rbx + 0xd], 0xb1
xor byte [rbx + 0xe], 0x11
xor byte [rbx + 0xf], 0x7b
xor byte [rbx + 0x10], 0xe3
xor byte [rbx + 0x11], 0x45
xor byte [rbx + 0x12], 0x87
xor byte [rbx + 0x13], 0x47
mov byte [rbx + 0x14], 0
mov rdx, rbx
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 8
lea r9, [rsp + 0x78]
mov r8, rsi
mov edx, 0x4a
mov rcx, rsi
call rax
mov rcx, qword [rbp + 0x8a0]
xor rcx, rsp
call fcn.180002300
lea r11, [rsp + 0x9b0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret