Function at 0x1802f78d0
Capabilities:
Create thread

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x48
lea rbp, [rsp + 0x40]
mov rax, qword [0x18030e600]
xor rax, rbp
mov qword [rbp], rax
mov eax, dword [0x180314ef0]
mov ecx, dword [0x180314ef4]
lea ebx, [rax - 1]
imul ebx, eax
test bl, 1
sete byte [rbp - 1]
cmp ecx, 0xa
setl byte [rbp - 2]
mov dword [rbp - 0x34], edx
mov eax, 0x634bd529
mov r15d, 0xc4434d47
movabs r14, 0x80c8c1caedc5dbf3
mov r12d, 0x1638486b
mov r13d, 0x503830f0
jmp 0x1802f796d
mov eax, dword [0x180314ef0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x80015b21
mov ecx, 0x90d39cde
nop word cs:[rax + rax]
nop dword [rax]
cmove eax, ecx
cmp dword [0x180314ef4], 0xa
cmovl eax, ecx
cmp eax, 0xba81849
jg 0x1802f79b0
cmp eax, 0xcd8e5718
jg 0x1802f7a10
cmp eax, 0xb4d0d03b
jg 0x1802f7a9a
cmp eax, 0x80015b21
je 0x1802f7ee5
cmp eax, 0x84870a83
je 0x1802f7eef
cmp eax, 0x90d39cde
jne 0x1802f796d
mov eax, 0x2432b7d5
jmp 0x1802f796d
cmp eax, 0x3fbf2c67
jg 0x1802f7a50
cmp eax, 0x2432b7d4
jg 0x1802f7ad9
cmp eax, 0xba8184a
je 0x1802f7ef9
cmp eax, 0x1f5de25c
je 0x1802f7f3d
cmp eax, 0x209c71f7
jne 0x1802f796d
mov eax, dword [0x180314ef0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x41b8e3ae
mov ecx, 0xfe9a5fce
jmp 0x1802f7960
cmp eax, 0xe183ab35
jg 0x1802f7b04
cmp eax, 0xcd8e5719
je 0x1802f7f47
cmp eax, 0xd5c124bb
je 0x1802f7f5d
cmp eax, 0xdc3ece9c
jne 0x1802f796d
mov eax, 0x72eae877
jmp 0x1802f796d
cmp eax, 0x634bd528
jg 0x1802f7b65
cmp eax, 0x3fbf2c68
je 0x1802f7f7b
cmp eax, 0x41b8e3ae
je 0x1802f7f99
cmp eax, 0x5e7e01df
jne 0x1802f796d
mov eax, dword [0x180314ef0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe183ab36
mov ecx, 0x1f5de25c
jmp 0x1802f7960
cmp eax, 0xb4d0d03c
je 0x1802f7939
cmp eax, 0xb97dcdbc
je 0x1802f7fa3
cmp eax, 0xc4434d47
jne 0x1802f796d
mov eax, dword [0x180314ef0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb97dcdbc
mov ecx, 0xe5e07498
jmp 0x1802f7960
cmp eax, 0x2432b7d5
je 0x1802f7fad
cmp eax, 0x333394ce
je 0x1802f7fcb
cmp eax, 0x35a233a6
jne 0x1802f796d
mov eax, 0x333394ce
jmp 0x1802f796d
cmp eax, 0xe183ab36
je 0x1802f7fe9
cmp eax, 0xe5e07498
je 0x1802f8007
cmp eax, 0xfe9a5fce
jne 0x1802f796d
mov eax, dword [0x180314ef0]
mov ecx, dword [0x180314ef4]
lea edx, [rax - 1]
imul edx, eax
and dl, 1
cmp ecx, 9
setg al
cmp ecx, 0xa
setl cl
xor cl, dl
mov ebx, ecx
xor bl, 1
and al, dl
or al, bl
xor al, cl
mov eax, 0x41b8e3ae
mov ecx, 0xdc3ece9c
cmovne eax, ecx
jmp 0x1802f796d
cmp eax, 0x634bd529
je 0x1802f8041
cmp eax, 0x78d1cfb7
jne 0x1802f8083
mov rax, qword [rbp - 0x28]
mov rax, qword [rbp - 0x28]
mov ecx, dword [0x180314e68]
mov edx, dword [0x180314e6c]
lea ebx, [rcx - 1]
imul ebx, ecx
test bl, 1
sete byte [rbp - 4]
cmp edx, 0xa
setl byte [rbp - 5]
lea r8, [rax + 0xb]
lea r9, [rax + 0xc]
mov edi, 0xc1c5a957
jmp 0x1802f7bbd
mov edi, 0x51965904
cmp esi, 0xa
cmovl edi, ecx
cmp edi, 0xe4de7437
jle 0x1802f7c00
cmp edi, 0x51965903
jle 0x1802f7c70
cmp edi, 0x51965904
je 0x1802f7ce6
cmp edi, 0x6e8f733c
jne 0x1802f7d7f
mov qword [rax], r14
mov word [rax + 8], 0xc8ca
mov byte [rax + 0xa], 0xd4
mov edi, 0xe4de7438
jmp 0x1802f7bbd
cmp edi, 0xc1c5a956
jg 0x1802f7cc0
cmp edi, 0x9863e554
je 0x1802f7cff
cmp edi, 0xa7c8e0f9
jne 0x1802f7bbd
mov rcx, qword [rbp - 0x10]
mov byte [rcx], 0
mov rcx, qword [rbp - 0x10]
add rcx, 1
mov qword [rbp - 0x18], rcx
mov rcx, qword [rbp - 0x20]
mov rdx, qword [rbp - 0x18]
cmp rdx, rcx
sete byte [rbp - 6]
mov ecx, dword [0x180314e68]
mov esi, dword [0x180314e6c]
lea edx, [rcx - 1]
imul edx, ecx
mov ecx, 0x9863e554
mov edi, 0x9863e554
test dl, 1
je 0x1802f7bb7
jmp 0x1802f7bb2
cmp edi, 0xe4de7438
je 0x1802f7d18
cmp edi, 0xcbaabee
jne 0x1802f7bbd
mov qword [rbp - 0x10], rbx
mov ecx, dword [0x180314e68]
mov esi, dword [0x180314e6c]
lea edx, [rcx - 1]
imul edx, ecx
mov ecx, 0xa7c8e0f9
mov edi, 0xa7c8e0f9
test dl, 1
je 0x1802f7bb7
jmp 0x1802f7bb2
cmp edi, 0xc1c5a957
je 0x1802f7d5c
cmp edi, 0xc9f6f805
jne 0x1802f7bbd
mov edi, 0xcbaabee
mov rbx, qword [rbp - 0x30]
jmp 0x1802f7bbd
mov rcx, qword [rbp - 0x10]
mov byte [rcx], 0
mov rcx, qword [rbp - 0x10]
mov rcx, qword [rbp - 0x20]
mov edi, 0xa7c8e0f9
jmp 0x1802f7bbd
cmp byte [rbp - 6], 0
mov edi, 0x7bd61bb1
jne 0x1802f7d0f
mov edi, 0xcbaabee
mov rbx, qword [rbp - 0x18]
jmp 0x1802f7bbd
mov qword [rax], r14
mov word [rax + 8], 0xc8ca
mov byte [rax + 0xa], 0xd4
mov qword [rbp - 0x30], r8
mov qword [rbp - 0x20], r9
mov ecx, dword [0x180314e68]
mov esi, dword [0x180314e6c]
lea edx, [rcx - 1]
imul edx, ecx
mov ecx, 0xc9f6f805
mov edi, 0xc9f6f805
test dl, 1
je 0x1802f7bb7
mov edi, 0x6e8f733c
jmp 0x1802f7bb7
movzx ecx, byte [rbp - 4]
cmp byte [rbp - 5], 0
mov esi, 0xe4de7438
mov edi, 0xe4de7438
jne 0x1802f7d75
mov edi, 0x6e8f733c
test cl, cl
cmovne edi, esi
jmp 0x1802f7bbd
cmp edi, 0x7bd61bb1
jne 0x1802f7bbd
mov rcx, qword [rbp - 0x28]
mov eax, dword [0x180314e70]
mov edx, dword [0x180314e74]
lea ebx, [rax - 1]
imul ebx, eax
test bl, 1
sete byte [rbp - 0x30]
cmp edx, 0xa
setl byte [rbp - 0x20]
mov edx, 0x9b9d5d81
mov ebx, dword [0x180314e70]
lea edi, [rbx - 1]
imul edi, ebx
test dil, 1
mov ebx, 0xfdb830a2
cmove ebx, r12d
cmp dword [0x180314e74], 0xa
cmovl ebx, r12d
nop dword [rax + rax]
cmp edx, 0xfdb830a1
jle 0x1802f7e10
cmp edx, 0x4571968d
jg 0x1802f7e30
cmp edx, 0xfdb830a2
je 0x1802f7e44
cmp edx, 0x1638486b
jne 0x1802f7de0
jmp 0x1802f7e90
cmp edx, 0x9b9d5d81
je 0x1802f7e4b
cmp edx, 0xa47bf35a
je 0x1802f7e67
cmp edx, 0xd6507547
jne 0x1802f7de0
jmp 0x1802f805c
cmp edx, 0x4571968e
je 0x1802f7ea0
cmp edx, 0x503830f0
jne 0x1802f7de0
mov edx, ebx
jmp 0x1802f7de0
mov edx, 0x503830f0
jmp 0x1802f7de0
movzx eax, byte [rbp - 0x30]
cmp byte [rbp - 0x20], 0
mov edx, 0xfdb830a2
cmovne edx, r13d
test al, al
cmovne edx, r13d
jmp 0x1802f7de0
mov dword [rbp - 0x18], esi
movsxd rax, dword [rbp - 0x18]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x10]
cmp rax, 0xb
mov edx, 0xd6507547
mov eax, 0x4571968e
cmovb edx, eax
jmp 0x1802f7de0
mov edx, 0xa47bf35a
xor esi, esi
jmp 0x1802f7db4
mov rax, qword [rbp - 0x10]
movzx edx, byte [rcx + rax]
mov ebx, dword [rbp - 0x18]
mov edi, 0x58
sub edi, ebx
add ebx, 0xa7
mov esi, edi
or esi, edx
and edi, 0x3c
and ebx, 0xc3
or ebx, edi
xor ebx, edx
xor ebx, 0x3c
and ebx, edx
xor ebx, esi
not bl
mov byte [rcx + rax], bl
mov esi, dword [rbp - 0x18]
add esi, 1
mov edx, 0xa47bf35a
jmp 0x1802f7db4
mov eax, 0xb4d0d03c
jmp 0x1802f796d
mov eax, 0xc4434d47
jmp 0x1802f796d
sub rsp, 0x30
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor ecx, ecx
xor edx, edx
lea r8, [0x1802f0b90]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateThread]
add rsp, 0x10
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov eax, 0x72eae877
jmp 0x1802f796d
mov eax, 0x72eae877
jmp 0x1802f796d
cmp byte [rbp - 3], 0
mov eax, 0x209c71f7
mov ecx, 0x78d1cfb7
cmovne eax, ecx
jmp 0x1802f796d
mov eax, dword [0x180314ef0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x84870a83
mov ecx, 0xcd8e5719
jmp 0x1802f7960
mov eax, dword [0x180314ef0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe183ab36
mov ecx, 0x2432b7d5
jmp 0x1802f7960
mov eax, 0xfe9a5fce
jmp 0x1802f796d
mov eax, 0xe5e07498
jmp 0x1802f796d
mov eax, dword [0x180314ef0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x35a233a6
mov ecx, 0x333394ce
jmp 0x1802f7960
mov eax, dword [0x180314ef0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x35a233a6
mov ecx, 0x5e7e01df
jmp 0x1802f7960
mov eax, dword [0x180314ef0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x80015b21
mov ecx, 0xb4d0d03c
jmp 0x1802f7960
mov eax, 0x10
call fcn.1802fdbb0
sub rsp, rax
mov rax, rsp
cmp dword [rbp - 0x34], 1
sete byte [rbp - 3]
mov qword [rbp - 0x28], rax
mov eax, dword [0x180314ef0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb97dcdbc
mov ecx, 0xd5c124bb
jmp 0x1802f7960
mov cl, byte [rbp - 1]
cmp byte [rbp - 2], 0
mov eax, 0x84870a83
cmovne eax, r15d
test cl, cl
cmovne eax, r15d
jmp 0x1802f796d
mov byte [rcx + 0xb], 0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rsp, 0x20
test rax, rax
mov eax, 0xba8184a
mov ecx, 0x3fbf2c68
cmove eax, ecx
jmp 0x1802f796d
cmp eax, 0x72eae877
jne 0x1802f796d
mov rcx, qword [rbp]
xor rcx, rbp
sub rsp, 0x20
call fcn.1802fdc10
add rsp, 0x20
mov eax, 1
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret