Function at 0x180006020
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x310]
sub rsp, 0x410
mov rax, qword [0x1800ec0f8]
xor rax, rsp
mov qword [rbp + 0x300], rax
mov qword [rbp + 0xe0], rcx
cmp dword [0x1800ee3c4], 0
jne 0x18000611f
mov dword [rbp - 0x80], 0xaca0a49b
mov dword [rbp - 0x7c], 0xb850aebc
mov dword [rbp - 0x78], 0xbabe4da3
mov dword [rbp - 0x74], 0xb5bf49a6
mov dword [rbp - 0x70], 0xafb9beb0
mov dword [rbp - 0x6c], 0x1f7fbdb9
xor eax, eax
mov qword [rbp - 0x68], rax
mov dword [rbp - 0x60], eax
xor edi, edi
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
movabs r9, 0x89084b790e68309
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax - 0x80]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x3f
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax - 0x80], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x24
jb 0x1800060c0
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x80]
xor ecx, ecx
call qword [sym.imp.user32.dll_MessageBoxA]
jmp 0x180006f01
xor edi, edi
mov qword [rbp + 0x1c0], rdi
mov qword [rbp + 0x1d0], rdi
mov qword [rbp + 0x1d8], 0xf
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rcx + r8], 0
jne 0x180006141
mov rdx, rcx
lea rcx, [rbp + 0x1c0]
call fcn.180010660
mov qword [rbp + 0x180], rdi
lea r15, [rbp + 0x1c0]
mov rbx, qword [rbp + 0x1c0]
mov r14, qword [rbp + 0x1d8]
cmp r14, 0x10
cmovae r15, rbx
movabs rax, 0x7fffffffffffffff
mov rsi, qword [rbp + 0x1d0]
cmp rsi, 0x10
jae 0x1800061a8
movups xmm0, xmmword [r15]
movups xmmword [rbp + 0x180], xmm0
mov r13d, 0xf
jmp 0x180006217
mov r13, rsi
or r13, 0xf
cmp r13, rax
cmova r13, rax
lea rcx, [r13 + 1]
cmp rcx, 0x1000
jb 0x1800061f2
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180006f37
mov rcx, rax
call fcn.1800b15a4
mov rcx, rax
test rax, rax
je 0x180006ef2
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180006201
test rcx, rcx
je 0x1800061fe
call fcn.1800b15a4
jmp 0x180006201
mov rax, rdi
mov qword [rbp + 0x180], rax
lea r8, [rsi + 1]
mov rdx, r15
mov rcx, rax
call sub.vcruntime140.dll_memcpy_1
mov qword [rbp + 0x198], r13
mov qword [rbp + 0x190], rsi
lea rdx, [rbp + 0x230]
lea rcx, [0x1800ee3f0]
call fcn.18002e750
mov rcx, qword [rbp + 0x230]
mov qword [rbp - 0x10], rcx
mov rax, qword [rbp + 0x238]
mov qword [rbp + 0xe8], rax
cmp rcx, rax
je 0x180006e26
movabs r13, 0x6195bf121cc1d1e2
mov rbx, qword [rcx]
mov dword [rbp + 0x40], 0x23969a98
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x44], xmm0
mov word [rbp + 0x54], ax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
cmp rax, 0x16
jae 0x1800062ea
movabs rdi, 0xf6edf10b3e34775b
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x40]
add rcx, rdi
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x7d
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x40], r8b
mov rax, qword [rsp + 0x30]
inc rax
ror byte [rax - 0x77], 0x44
and al, 0x30
mov rax, qword [rsp + 0x30]
cmp rax, 0x16
jb 0x1800062a0
xor edi, edi
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], 0xf
lea rax, [rbp + 0x40]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x180006305
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x30]
call fcn.180010660
lea r12, [rbx + 0x48]
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x1e0]
mov rdx, r12
mov rcx, qword [0x1800ee3d8]
call qword [sym.imp.kernel32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1e0]
lea rcx, [rbp + 0xf0]
call fcn.18002dde0
mov r15, qword [rbp - 0x18]
mov rsi, qword [rbp - 0x30]
mov r11, qword [rbp + 0x108]
mov r8, qword [rbp + 0xf0]
cmp qword [rbp + 0x100], 3
jb 0x1800063c0
cmp qword [rbp - 0x20], 3
jne 0x1800063c0
mov rdx, rdi
cmp r11, 0x10
setae r9b
cmp r15, 0x10
setae r10b
nop
lea rcx, [rbp + 0xf0]
test r9b, r9b
cmovne rcx, r8
lea rax, [rbp - 0x30]
test r10b, r10b
cmovne rax, rsi
movzx eax, byte [rax + rdx]
cmp byte [rcx + rdx], al
jne 0x1800063c0
inc rdx
cmp rdx, 3
jl 0x180006390
xor r14b, r14b
jmp 0x1800063c3
mov r14b, 1
cmp r11, 0x10
jb 0x1800063fa
lea rdx, [r11 + 1]
mov rax, r8
cmp rdx, 0x1000
jb 0x1800063f2
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180006e5a
mov rcx, r8
call fcn.1800b1570
mov qword [rbp + 0x100], rdi
mov qword [rbp + 0x108], 0xf
mov byte [rbp + 0xf0], 0
cmp r15, 0x10
jb 0x18000644a
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x180006442
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180006e5a
mov rcx, rsi
call fcn.1800b1570
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
test r14b, r14b
je 0x180006df1
mov eax, 1
mov word [rbp + 0x178], ax
lea rdx, [rbx + 0x1b8]
mov qword [rsp + 0x20], rdi
lea r9d, [rax + 1]
lea r8, [rbp + 0x178]
mov rcx, qword [0x1800ee3d8]
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
mov dword [rbp - 0x50], 0x777870ac
mov word [rbp - 0x4c], 0x4ca8
mov byte [rbp - 0x4a], 0xc6
xor eax, eax
mov qword [rbp - 0x49], rax
mov word [rbp - 0x41], ax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
cmp rax, 0x11
jae 0x180006508
nop
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax - 0x50]
add rcx, r13
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x2e
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax - 0x50], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x11
jb 0x1800064c0
lea rcx, [rbp + 0x130]
call fcn.1800052a0
mov r9, rax
mov dword [rsp + 0x50], 0x76766472
mov dword [rsp + 0x54], 0x7ca66b76
mov dword [rsp + 0x58], 0x686f716d
mov dword [rsp + 0x5c], 0xaf6b7979
mov dword [rsp + 0x60], 0x6674b1ad
mov dword [rsp + 0x64], 0x7e62767a
mov dword [rsp + 0x68], 0xb2b27777
mov word [rsp + 0x6c], 0xddbc
xor eax, eax
mov dword [rsp + 0x6e], eax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
cmp rax, 0x22
jae 0x1800065cc
movabs r12, 0x4eb2f699b1a921e0
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x50]
add rcx, r12
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x20
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x50], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x22
jb 0x180006580
lea r12, [rbx + 0x48]
mov r8, r9
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x110]
call fcn.180010eb0
mov r8d, 3
lea rdx, [0x1800d34f4]
mov rcx, rax
call fcn.1800107c0
mov qword [rbp + 0x18], rdi
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x30], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x18], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x28], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x180]
cmp qword [rbp + 0x198], 0x10
cmovae rdx, qword [rbp + 0x180]
mov r8, qword [rbp + 0x190]
lea rcx, [rbp + 0x18]
call fcn.1800107c0
mov qword [rbp - 8], rdi
mov qword [rbp + 8], rdi
mov qword [rbp + 0x10], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 8], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rbp - 0x50]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x180006680
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 8]
call fcn.1800107c0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x30], xmm0
movups xmmword [rbp + 0x150], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
movups xmmword [rbp + 0x160], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x18000670e
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006700
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180006e61
call fcn.1800b1570
movups xmm0, xmmword [rsp + 0x30]
movups xmm1, xmmword [rbp - 0x30]
movups xmmword [rbp + 0x180], xmm0
movups xmmword [rbp + 0x190], xmm1
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x180006757
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006752
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180006e61
call fcn.1800b1570
mov qword [rbp + 8], rdi
mov qword [rbp + 0x10], 0xf
mov byte [rbp - 8], 0
mov rdx, qword [rbp + 0x30]
cmp rdx, 0x10
jb 0x1800067a2
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000679d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180006e61
call fcn.1800b1570
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x30], 0xf
mov byte [rbp + 0x18], 0
mov rdx, qword [rbp + 0x128]
cmp rdx, 0x10
jb 0x1800067f3
inc rdx
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800067ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180006e61
call fcn.1800b1570
mov qword [rbp + 0x120], rdi
mov qword [rbp + 0x128], 0xf
mov byte [rbp + 0x110], 0
mov rdx, qword [rbp + 0x148]
cmp rdx, 0x10
jb 0x18000684d
inc rdx
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006848
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180006e61
call fcn.1800b1570
mov qword [rbp + 0x140], rdi
mov qword [rbp + 0x148], 0xf
mov byte [rbp + 0x130], 0
mov qword [rbp + 0x60], rdi
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], rdi
lea r15, [rbp + 0x180]
mov r13, qword [rbp + 0x198]
cmp r13, 0x10
cmovae r15, qword [rbp + 0x180]
mov r14, qword [rbp + 0x190]
cmp r14, 0x10
jae 0x1800068ab
movups xmm0, xmmword [r15]
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x78], 0xf
jmp 0x180006925
mov rsi, r14
or rsi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
cmova rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x1800068ff
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180006f3d
mov rcx, rax
call fcn.1800b15a4
mov rcx, rax
test rax, rax
je 0x180006e68
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x18000690e
test rcx, rcx
je 0x18000690b
call fcn.1800b15a4
jmp 0x18000690e
mov rax, rdi
mov qword [rbp + 0x60], rax
lea r8, [r14 + 1]
mov rdx, r15
mov rcx, rax
call sub.vcruntime140.dll_memcpy_1
mov qword [rbp + 0x78], rsi
mov qword [rbp + 0x70], r14
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x210]
call fcn.1800157b0
mov rdx, qword [rbp + 0xe0]
mov rcx, qword [sym.imp.msvcp140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.180010fc0
lea rdx, [0x180011190]
mov rcx, rax
call qword [sym.imp.msvcp140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___class_std::basic_istream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_istream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rsi, qword [sym.imp.msvcp140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbx + 0x60]
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x1e8]
mov rcx, qword [0x1800ee3d8]
call qword [sym.imp.kernel32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1e8]
add rdx, 0x48
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x1f0]
mov rcx, qword [0x1800ee3d8]
call qword [sym.imp.kernel32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1f0]
lea rcx, [rbp + 0x80]
call fcn.18002dde0
lea rdx, [rbp + 0x80]
cmp qword [rbp + 0x98], 0x10
cmovae rdx, qword [rbp + 0x80]
mov r8, qword [rbp + 0x90]
mov rcx, rsi
call fcn.180013700
lea rdx, [0x180011190]
mov rcx, rax
call qword [sym.imp.msvcp140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___class_std::basic_istream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_istream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x180006a3a
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006a35
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180006e6f
call fcn.1800b1570
mov qword [rbp + 0x90], rdi
mov qword [rbp + 0x98], 0xf
mov byte [rbp + 0x80], 0
mov rsi, qword [sym.imp.msvcp140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x1f8]
mov rdx, r12
mov rcx, qword [0x1800ee3d8]
call qword [sym.imp.kernel32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1f8]
lea rcx, [rbp + 0xa0]
call fcn.18002dde0
lea rdx, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0x10
cmovae rdx, qword [rbp + 0xa0]
mov r8, qword [rbp + 0xb0]
mov rcx, rsi
call fcn.180013700
lea rdx, [0x180011190]
mov rcx, rax
call qword [sym.imp.msvcp140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___class_std::basic_istream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_istream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0x10
jb 0x180006b06
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006b01
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180006e76
call fcn.1800b1570
mov qword [rbp + 0xb0], rdi
mov qword [rbp + 0xb8], 0xf
mov byte [rbp + 0xa0], 0
mov qword [rbp + 0x1a0], rdi
mov qword [rbp + 0x1b0], rdi
mov qword [rbp + 0x1b8], 0xf
mov r8d, 1
lea rdx, [0x1800d34f8]
lea rcx, [rbp + 0x1a0]
call fcn.180010660
lea rsi, [rbx + 0x168]
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x170]
mov rdx, rsi
mov rcx, qword [0x1800ee3d8]
call qword [sym.imp.kernel32.dll_ReadProcessMemory]
mov dword [rsp + 0x20], 4
xor edx, edx
mov r9d, 0x3000
mov r8d, 0xa8
mov rcx, qword [0x1800ee3d8]
call qword [sym.imp.kernel32.dll_VirtualAllocEx]
mov rbx, rax
mov qword [rsp + 0x20], rdi
mov r9d, 0xa8
lea r8, [rbp + 0x250]
mov rdx, qword [rbp + 0x170]
mov rcx, qword [0x1800ee3d8]
call qword [sym.imp.kernel32.dll_ReadProcessMemory]
mov qword [rsp + 0x20], rdi
mov r9d, 0xa8
lea r8, [rbp + 0x250]
mov rdx, rbx
mov rcx, qword [0x1800ee3d8]
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
mov qword [rbp + 0x200], rbx
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x200]
mov rdx, rsi
mov rcx, qword [0x1800ee3d8]
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x208]
mov rdx, rsi
mov rcx, qword [0x1800ee3d8]
call qword [sym.imp.kernel32.dll_ReadProcessMemory]
mov rcx, qword [rbp + 0x208]
add rcx, 0x10
lea rdx, [rbp + 0x210]
call fcn.18002e070
mov qword [rbp + 0xc0], rdi
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], rdi
lea r15, [rbp + 0x1a0]
mov r12, qword [rbp + 0x1b8]
cmp r12, 0x10
setae byte [rsp + 0x40]
mov rsi, qword [rbp + 0x1a0]
cmovae r15, rsi
mov r14, qword [rbp + 0x1b0]
cmp r14, 0x10
jae 0x180006ca9
movups xmm0, xmmword [r15]
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd8], 0xf
jmp 0x180006d29
mov rbx, r14
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x180006cfd
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180006f31
mov rcx, rax
call fcn.1800b15a4
mov rcx, rax
test rax, rax
je 0x180006e7d
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180006d0c
test rcx, rcx
je 0x180006d09
call fcn.1800b15a4
jmp 0x180006d0c
mov rax, rdi
mov qword [rbp + 0xc0], rax
lea r8, [r14 + 1]
mov rdx, r15
mov rcx, rax
call sub.vcruntime140.dll_memcpy_1
mov qword [rbp + 0xd8], rbx
mov qword [rbp + 0xd0], r14
lea rdx, [rbp + 0xc0]
lea rcx, [0x1800ee3f0]
call fcn.18002e530
cmp byte [rsp + 0x40], 0
je 0x180006d7c
lea rdx, [r12 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x180006d74
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180006e84
mov rcx, rsi
call fcn.1800b1570
mov qword [rbp + 0x1b0], rdi
mov qword [rbp + 0x1b8], 0xf
mov byte [rbp + 0x1a0], 0
mov rdx, qword [rbp + 0x228]
cmp rdx, 0x10
jb 0x180006dd6
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006dd1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180006e84
call fcn.1800b1570
mov qword [rbp + 0x220], rdi
mov qword [rbp + 0x228], 0xf
mov byte [rbp + 0x210], 0
jmp 0x180006df8
mov r13, qword [rbp + 0x198]
mov rcx, qword [rbp - 0x10]
add rcx, 8
mov qword [rbp - 0x10], rcx
cmp rcx, qword [rbp + 0xe8]
jne 0x18000625a
mov r14, qword [rbp + 0x1d8]
mov rbx, qword [rbp + 0x1c0]
mov rcx, qword [rbp + 0x230]
test rcx, rcx
je 0x180006e90
mov rdx, qword [rbp + 0x240]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006e8b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180006e8b
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800b1570
cmp r13, 0x10
jb 0x180006ec7
lea rdx, [r13 + 1]
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006ec2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180006ef2
call fcn.1800b1570
cmp r14, 0x10
jb 0x180006f01
lea rdx, [r14 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x180006ef9
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180006ef9
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1800b1570
mov rcx, qword [rbp + 0x300]
xor rcx, rsp
call fcn.1800b1550
lea r11, [rsp + 0x410]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1800026a0
int3
call fcn.1800026a0
int3
call fcn.1800026a0
int3