Function at 0x180033a80
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x158]
sub rsp, 0x258
mov rax, qword [0x180080a28]
xor rax, rsp
mov qword [rbp + 0x140], rax
mov qword [rbp - 0x38], r9
mov qword [rbp - 0x28], r8
mov r10, rdx
mov qword [rbp - 0x48], rdx
mov r8, rcx
mov qword [rbp - 8], rcx
mov rax, qword [rbp + 0x1c8]
mov qword [rbp - 0x58], rax
mov rsi, qword [rbp + 0x1d0]
mov rax, qword [rbp + 0x1d8]
mov qword [rbp - 0x60], rax
mov r9, qword [rbp + 0x1e0]
mov qword [rbp - 0x40], r9
mov rax, qword [rbp + 0x1e8]
mov qword [rbp], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], 0
mov eax, dword [rbp + 0x1c0]
mov r15d, eax
lea r12d, [rax + 0x27]
mov ebx, dword [rsp + 0x78]
mov rdx, qword [rbp - 0x60]
mov ecx, dword [rsp + 0x78]
mov edi, dword [rsp + 0x78]
mov r11, qword [rbp - 0x60]
mov r13, qword [rbp - 0x60]
mov dword [rsp + 0x60], ecx
mov dword [rbp - 0x70], edi
mov qword [rsp + 0x68], r11
cmp eax, r12d
jae 0x180034336
mov qword [rbp - 0x30], rdx
mov r14, qword [rbp - 0x60]
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x50], rax
mov rax, qword [rbp - 0x60]
mov qword [rsp + 0x70], rax
mov eax, dword [rsp + 0x78]
mov dword [rbp - 0x6c], eax
lea eax, [r15 - 0x125]
cmp eax, 0xc4
ja case.default.0x180033b92
lea rcx, [0x180000000]
movzx eax, byte [rcx + rax + 0x34bf0]
mov ecx, dword [rcx + rax*4 + 0x34b7c]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov rax, qword [rbp - 0x38]
movsxd rax, dword [rax]
shl rax, 7
mov r8d, 8
lea rcx, [rbp + 0x20]
lea r9, [0x180000000]
call qword [rax + r9 + 0x821f0]
mov ebx, eax
test eax, eax
jne 0x18003429e
mov rax, qword [rbp - 0x38]
movsxd rax, dword [rax]
shl rax, 7
mov r8d, dword [rsi]
mov rdx, qword [rbp - 0x40]
lea rcx, [rbp + 0x20]
lea r9, [0x180000000]
call qword [rax + r9 + 0x821f0]
mov ebx, eax
test eax, eax
jne 0x18003429e
mov r11, qword [rsp + 0x68]
jmp case.0x180033b92.306
cmp qword [rbp], 0
jne 0x180033c4f
xor ecx, ecx
mov dword [rbp - 0x78], ecx
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rcx
lea rax, str.Called_abort__
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov r9d, SHSetInstanceExplorer
xor r8d, r8d
lea rdx, [0x180077149]
call fcn.18002b8a0
mov rax, qword [rbp - 0x38]
mov eax, dword [rax]
mov dword [rbp - 0x78], eax
xor r9d, r9d
lea r8, [rbp - 0x78]
lea edx, [r9 + 0x3a]
xor ecx, ecx
call fcn.180022220
mov rbx, rax
test eax, eax
jne 0x180034296
mov r11, qword [rsp + 0x68]
jmp case.0x180033b92.306
mov eax, dword [r8]
mov dword [rbp - 0x78], eax
xor eax, eax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x78]
xor r8d, r8d
xor edx, edx
mov ecx, 0x119
call fcn.18002d490
mov ebx, eax
test eax, eax
jne 0x180034296
mov rax, qword [rbp - 0x38]
movsxd rax, dword [rax]
shl rax, 7
lea rcx, [0x180000000]
mov ecx, dword [rax + rcx + 0x8219c]
mov dword [rsp + 0x60], ecx
mov r11, qword [rsp + 0x68]
jmp case.default.0x180033b92
test r9, r9
jne 0x180033d31
xor ecx, ecx
mov dword [rbp - 0x78], ecx
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rcx
lea rax, str.out___0
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov r9d, SHSetInstanceExplorer
xor r8d, r8d
lea rdx, [0x180077149]
call fcn.18002b8a0
mov r11, qword [rsp + 0x68]
mov rax, qword [rsi]
test rax, rax
je 0x180033d52
nop dword [rax]
dec qword [rsi]
mov byte [r14], 0
inc r14
mov rax, qword [rsi]
test rax, rax
jne 0x180033d40
dec rax
mov qword [rsi], rax
jmp case.0x180033b92.306
mov eax, dword [r9 + 0xc]
cmp dword [rsi], eax
jl case.0x180033b92.306
mov eax, 0xa1
nop
cmp eax, 0xa1
je 0x180033d84
cmp eax, 0x8ce
je case.0x180033b92.336
jmp 0x180033d8c
mov qword [rbp - 0x68], 0
add eax, 0x82d
cmp eax, 0x105a
jbe 0x180033d70
jmp case.0x180033b92.306
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp - 0x30], rax
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r11, rax
mov qword [rsp + 0x68], rax
mov edi, dword [rbp - 0x70]
jmp case.0x180033b92.306
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp - 0x50], rax
mov r11, qword [rsp + 0x68]
jmp case.0x180033b92.306
movzx eax, word [0x18007b56c]
mov word [rbp + 0x31], ax
movzx eax, byte [0x18007b56e]
mov byte [rbp + 0x33], al
lea rcx, [rbp + 0x30]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x180033df5
mov eax, dword [str.rren]
mov dword [rcx], eax
movzx eax, byte [0x18007b574]
mov byte [rcx + 4], al
jmp case.0x180033b92.306
mov rcx, qword [rsp + 0x70]
mov rax, qword [rbp - 0x50]
test rdx, rdx
je 0x180033e36
test r11, r11
je 0x180033e36
test rcx, rcx
je 0x180033e36
test rax, rax
jne 0x180033ec9
mov edi, 0xd5
nop dword [rax + rax]
cmp edi, 0xd5
je 0x180033e7d
cmp edi, 0x879f
je 0x180033e76
cmp edi, 0x10e69
je 0x180033e6c
cmp edi, 0x19533
jne 0x180033ea3
mov dword [rbp - 0x68], ILFindLastID
jmp case.0x180033b92.336
test rax, rax
je 0x180033ea3
mov rcx, rax
jmp 0x180033e98
test rcx, rcx
je 0x180033ea3
jmp 0x180033e98
test rdx, rdx
je 0x180033e90
mov rcx, rdx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r11, qword [rsp + 0x68]
test r11, r11
je 0x180033ea3
mov rcx, r11
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r11, qword [rsp + 0x68]
add edi, 0x86ca
cmp edi, 0x21b28
mov rdx, qword [rbp - 0x30]
mov rax, qword [rbp - 0x50]
mov rcx, qword [rsp + 0x70]
jbe 0x180033e40
mov r8, qword [rbp - 8]
mov r10, qword [rbp - 0x48]
mov edi, dword [rbp - 0x70]
mov rax, qword [rbp - 0x58]
mov edx, dword [rax]
test edx, edx
je case.0x180033b92.306
movsxd rax, dword [r8]
lea r9, [rax + rax*4]
add r9, r9
mov r8, r10
lea rax, [0x180000000]
call qword [rax + r9*8 + 0x83358]
mov rcx, qword [rbp - 0x58]
cmp eax, dword [rcx]
je 0x180033bf1
mov ecx, ILAppendID
nop dword [rax]
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x98
je 0x18003429e
cmp eax, 1
jne 0x180033f25
lea ebx, [rax + 8]
dec ecx
cmp ecx, 0x97
ja 0x180033f10
mov r11, qword [rsp + 0x68]
jmp case.0x180033b92.306
mov eax, 0x5f
mov word [rbp + 0x30], ax
jmp case.0x180033b92.306
movsxd rcx, dword [rsi]
mov rax, qword [r9]
mov rcx, qword [rax + rcx*8]
mov qword [rbp - 0x68], rcx
jmp case.0x180033b92.306
movss xmm0, dword [rsp + 0x78]
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movss dword [rbp - 0x78], xmm0
mov r9, qword [rbp - 0x40]
xor r8d, r8d
mov edx, 0xbc
lea rcx, [rbp - 0x78]
call fcn.180022da0
mov r11, qword [rsp + 0x68]
jmp case.0x180033b92.306
mov rax, qword [r9]
mov r8, qword [rax + 0x28]
test r8, r8
je case.0x180033b92.306
mov rdx, qword [rbp + 0x10]
mov rcx, qword [r9 + 8]
call r8
mov r11, qword [rsp + 0x68]
jmp case.0x180033b92.306
mov rax, qword [rbp - 0x38]
movsxd rax, dword [rax]
shl rax, 7
mov rcx, qword [rbp - 0x58]
mov r8d, dword [rcx]
mov rdx, qword [rsp + 0x70]
lea rcx, [rbp + 0x20]
lea r9, [0x180000000]
call qword [rax + r9 + 0x821f0]
mov ebx, eax
test eax, eax
jne 0x18003429e
mov rax, qword [rbp - 0x38]
movsxd rax, dword [rax]
shl rax, 7
mov rdx, qword [rbp - 0x50]
lea rcx, [rbp + 0x20]
lea r8, [0x180000000]
call qword [rax + r8 + 0x821f8]
jmp 0x180033be7
mov dword [rbp - 0x68], 0
jmp case.0x180033b92.306
mov r9, rsi
mov r8, qword [rbp - 0x58]
mov r13, qword [rbp - 0x40]
mov rdx, r13
mov ecx, 0xd4
call fcn.180005470
test eax, eax
je 0x180034316
mov r9, rsi
mov r8d, 0x4b
mov rdx, r13
xor ecx, ecx
call fcn.18004a0b0
mov r13, rax
mov r11, qword [rsp + 0x68]
jmp case.0x180033b92.306
test r9, r9
jne 0x1800340ac
xor ecx, ecx
mov dword [rbp - 0x78], ecx
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rcx
lea rax, str.GUISyncTaskName
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov r9d, SHSetInstanceExplorer
xor r8d, r8d
lea rdx, [0x180077149]
call fcn.18002b8a0
mov r11, qword [rsp + 0x68]
cmp qword [rbp - 0x28], 0
jne case.0x180033b92.306
xor ecx, ecx
mov dword [rbp - 0x78], ecx
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rcx
lea rax, str.IMAPKeyword
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov r9d, SHSetInstanceExplorer
xor r8d, r8d
lea rdx, [0x180077149]
call fcn.18002b8a0
mov r11, qword [rsp + 0x68]
jmp case.0x180033b92.306
movups xmm0, xmmword [r13]
movups xmmword [rbp + 8], xmm0
movsd xmm1, qword [r13 + 0x10]
movsd qword [rbp + 0x18], xmm1
mov rax, qword [r9]
mov r8, qword [rax + 0x10]
test r8, r8
je 0x180034147
mov rdx, qword [rbp - 0x58]
mov rcx, qword [r9 + 8]
call r8
mov r11, qword [rsp + 0x68]
mov qword [r13 + 8], rax
jmp case.0x180033b92.306
mov rax, qword [rbp - 0x58]
mov qword [r13 + 8], rax
jmp case.0x180033b92.306
mov qword [rbp - 0x78], 8
xor ecx, ecx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], rcx
lea rax, [rbp - 0x78]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0x1e8
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call fcn.180033a80
mov r11, qword [rsp + 0x68]
jmp case.0x180033b92.306
mov rax, qword [rbp - 0x38]
movsxd rax, dword [rax]
shl rax, 7
lea rcx, [rbp + 0x20]
lea rdx, [0x180000000]
call qword [rax + rdx + 0x821e8]
jmp 0x180033be7
mov r14, r9
jmp case.0x180033b92.306
mov dword [rbp - 0x78], 0
mov r9d, reloc.SHELL32.dll_SHSetInstanceExplorer
mov r8, qword [rbp - 0x40]
xor edx, edx
lea rcx, [rbp - 0x78]
call fcn.180028c40
mov dword [rsp + 0x78], eax
mov r11, qword [rsp + 0x68]
jmp case.0x180033b92.306
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdx, rax
mov qword [rsp + 0x70], rax
mov r11, qword [rsp + 0x68]
mov ecx, dword [rsp + 0x60]
jmp 0x180034275
mov rax, qword [rbp - 0x60]
mov eax, dword [rax]
test al, 7
mov edi, 0
setne dil
shr eax, 3
add edi, eax
mov dword [rbp - 0x70], edi
mov rax, qword [rbp - 0x58]
mov eax, dword [rax]
cmp eax, edi
ja 0x180034239
mov ecx, dword [rsp + 0x60]
add eax, 2
add eax, ecx
cmp edi, eax
jae case.default.0x180033b92
mov ecx, 0xf0
nop
mov eax, ecx
sub eax, 0xf0
je 0x180034254
cmp eax, 1
je case.0x180033b92.336
jmp 0x18003425b
mov dword [rbp - 0x68], 0x16
inc ecx
cmp ecx, 0xf2
jb 0x180034240
jmp case.0x180033b92.306
xor eax, eax
mov dword [rbp - 0x6c], eax
mov ecx, dword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
inc r15d
mov r9, qword [rbp - 0x40]
cmp r15d, r12d
jae 0x180034322
mov r8, qword [rbp - 8]
mov r10, qword [rbp - 0x48]
mov rdx, qword [rbp - 0x30]
jmp 0x180033b60
mov dword [rbp - 0x68], eax
jmp case.0x180033b92.336
movzx r15d, byte [rbp - 0x80]
mov r14d, dword [rsp + 0x78]
mov esi, 0x7c3
mov eax, edi
mov qword [rbp - 0x48], rax
xor r12d, r12d
mov qword [rsp + 0x48], r12
mov rax, qword [rbp - 0x30]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
lea rax, [rbp - 0x48]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 0x1e8
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180033a80
mov r11, qword [rsp + 0x68]
jmp 0x180034889
mov eax, 0x12b
nop dword [rax]
cmp eax, 0x12b
je 0x180034316
add eax, 0xf
cmp eax, 0x13a
jb 0x180034300
jmp case.0x180033b92.336
mov dword [rbp - 0x68], 1
jmp case.0x180033b92.336
mov r10, qword [rbp - 0x30]
mov r12d, dword [rbp - 0x6c]
mov r13, qword [rbp - 0x50]
mov eax, dword [rbp + 0x1c0]
jmp 0x180034350
mov r10, qword [rbp - 0x60]
mov qword [rbp - 0x30], r10
mov qword [rbp - 0x50], r13
mov qword [rsp + 0x70], rdx
mov r12d, dword [rsp + 0x78]
mov dword [rbp - 0x6c], r12d
mov esi, eax
movzx r15d, byte [rbp - 0x80]
mov r14d, dword [rsp + 0x78]
add eax, 0x126f
cmp esi, eax
jae case.0x180033b92.336
cmp esi, 0x5b4
ja 0x180034801
je 0x1800347bb
cmp esi, 0x357
ja 0x18003454e
je 0x180034534
cmp esi, 0x217
ja 0x180034472
je 0x18003445e
mov eax, esi
sub eax, 0x125
je 0x180034436
sub eax, 0x4e
je 0x180034417
sub eax, 0x2b
je 0x1800343fd
cmp eax, 0x4e
jne 0x180034889
lea r8d, [rax - 0x4b]
lea rdx, [0x18007b598]
lea rcx, [rbp + 0x3a]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
lea rcx, [rbp + 0x30]
dec rcx
nop dword [rax + rax]
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x1800343e0
movzx eax, word [0x180079684]
mov word [rcx], ax
mov r11, qword [rsp + 0x68]
jmp 0x180034889
mov eax, edi
mov rdx, qword [rbp - 0x58]
sub eax, dword [rdx]
sub eax, ecx
add r12d, 0xfffffffe
add r12d, eax
mov dword [rbp - 0x6c], r12d
jmp 0x180034889
lea rcx, [rbp + 0x30]
dec rcx
nop
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x180034420
mov eax, dword [0x18007b594]
mov dword [rcx], eax
jmp 0x180034889
mov r8d, edi
mov rdx, qword [rbp - 0x58]
sub r8d, dword [rdx]
sub r8d, ecx
sub r8d, 2
mov ecx, r12d
add rcx, r10
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov r11, qword [rsp + 0x68]
jmp 0x180034889
mov eax, r12d
mov byte [rax + r10], 1
inc r12d
mov dword [rbp - 0x6c], r12d
jmp 0x180034889
mov eax, esi
sub eax, 0x265
je 0x180034526
sub eax, 0x2b
je 0x180034501
sub eax, 0x4e
je 0x1800344e0
cmp eax, 0x2b
jne 0x180034889
mov eax, edi
sub eax, ecx
dec eax
mov dword [rbp - 8], eax
mov dword [rbp - 0x78], ecx
mov rax, qword [rbp - 0x38]
mov eax, dword [rax]
mov dword [rsp + 0x78], eax
mov qword [rsp + 0x28], r11
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov r9, r13
lea r8, [rbp - 0x78]
lea rdx, [rbp - 8]
mov ecx, 0xe8
call fcn.180060610
mov ebx, eax
test eax, eax
jne 0x1800342a8
mov r11, qword [rsp + 0x68]
jmp 0x180034889
mov r8d, 2
lea rdx, [0x18007719c]
lea rcx, [rbp + 0x3e]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov r11, qword [rsp + 0x68]
jmp 0x180034889
mov r13, qword [rbp - 0x58]
mov r8d, dword [r13]
mov ecx, r12d
add rcx, r10
call sub.VCRUNTIME140.dll_memcpy
add r12d, dword [r13]
mov dword [rbp - 0x6c], r12d
mov r11, qword [rsp + 0x68]
jmp 0x180034889
mov eax, 0x66
mov word [rbp + 0x3d], ax
jmp 0x180034889
movzx eax, word [0x18007b59c]
mov word [rbp + 0x3f], ax
movzx eax, byte [0x18007b59e]
mov byte [rbp + 0x41], al
jmp 0x180034889
cmp esi, 0x474
ja 0x18003470e
je 0x180034706
mov eax, esi
sub eax, 0x382
je 0x180034610
sub eax, 0x4e
je 0x1800345e9
sub eax, 0x2b
je 0x1800345ae
cmp eax, 0x4e
jne 0x180034889
mov edx, 0xffffffff
mov rcx, qword [r9 + 0x40]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp - 0x40]
add rcx, 0x18
lea rdx, [rbp - 0x20]
call fcn.1800043c0
movzx r15d, al
mov r11, qword [rsp + 0x68]
jmp 0x180034889
mov rdx, qword [rbp]
cmp dword [rdx], edi
jae 0x180034889
mov ecx, 0xd6
nop
mov eax, ecx
sub eax, 0xd5
je 0x1800345df
cmp eax, 1
jne 0x1800345d0
mov dword [rdx], edi
dec ecx
cmp ecx, 0xd4
ja 0x1800345c0
jmp 0x180034889
mov ebx, 6
jmp 0x1800342a8
mov r9d, reloc.SHELL32.dll_SHSetInstanceExplorer
lea r8, [rbp - 0x20]
mov rdx, qword [rbp - 0x40]
xor ecx, ecx
call fcn.18005e500
test al, al
je 0x180034ad0
mov r11, qword [rsp + 0x68]
jmp 0x180034889
xor r12d, r12d
mov r14d, r12d
mov r9d, edi
sub r9d, ecx
sub r9d, 1
je 0x180034889
cmp r9d, 0x40
jb 0x1800346cf
lea eax, [r9 - 1]
lea rdx, [rax + r10]
add rax, r11
cmp r10, rax
ja 0x180034649
cmp rdx, r11
jae 0x1800346cf
mov r8d, r9d
and r8d, 0xffffffc0
mov edx, 0x20
nop word [rax + rax]
mov eax, r14d
movdqu xmm1, xmmword [rax + r11]
movdqu xmm0, xmmword [rax + r10]
pxor xmm1, xmm0
movdqu xmmword [rax + r10], xmm1
lea eax, [rdx - 0x10]
movdqu xmm1, xmmword [rax + r11]
movdqu xmm0, xmmword [rax + r10]
pxor xmm1, xmm0
movdqu xmmword [rax + r10], xmm1
mov eax, edx
movdqu xmm1, xmmword [rax + r11]
movdqu xmm0, xmmword [rax + r10]
pxor xmm1, xmm0
movdqu xmmword [rax + r10], xmm1
lea eax, [rdx + 0x10]
movdqu xmm1, xmmword [rax + r11]
movdqu xmm0, xmmword [rax + r10]
pxor xmm1, xmm0
movdqu xmmword [rax + r10], xmm1
add r14d, 0x40
add edx, 0x40
cmp r14d, r8d
jb 0x180034660
cmp r14d, r9d
jae 0x180034889
mov ecx, r14d
add rcx, r10
mov r8, r11
sub r8, r10
mov edx, r9d
sub edx, r14d
mov r14d, r9d
nop dword [rax]
movzx eax, byte [r8 + rcx]
xor byte [rcx], al
lea rcx, [rcx + 1]
sub rdx, 1
jne 0x1800346f0
jmp 0x180034889
xor r14d, r14d
jmp 0x180034889
mov eax, esi
sub eax, 0x4c2
je 0x180034889
sub eax, 0x2b
je 0x180034799
sub eax, 0x4e
je 0x180034756
cmp eax, 0x2b
jne 0x180034889
mov eax, edi
sub eax, ecx
dec eax
add r14d, eax
mov eax, r14d
mov r8d, ecx
mov rcx, qword [rbp - 0x28]
add rcx, rax
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
mov r11, qword [rsp + 0x68]
jmp 0x180034889
mov rcx, qword [r9 + 0x40]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
test r15b, r15b
je 0x1800345a4
mov ecx, 0x8a
nop
mov eax, ecx
sub eax, 0x89
je case.0x180033b92.336
cmp eax, 1
jne 0x180034785
mov byte [rbp - 0x68], al
dec ecx
cmp ecx, 0x88
ja 0x180034770
mov r11, qword [rsp + 0x68]
jmp 0x180034889
mov r8d, edi
sub r8d, ecx
dec r8d
mov ecx, r14d
add rcx, qword [rbp - 0x28]
mov rdx, r10
call sub.VCRUNTIME140.dll_memcpy
mov r11, qword [rsp + 0x68]
jmp 0x180034889
lea rax, [rbp - 0x80]
mov qword [rbp + 8], rax
mov ecx, 0x40
mov rax, 0xffffffffffffffff
nop
dec rcx
shr rax, 1
cmp rax, 0x7fff
ja 0x1800347d0
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x10], rcx
lea r8, [rbp + 8]
mov rdx, qword [rbp - 0x18]
mov rcx, qword [rbp - 0x20]
call fcn.180002b30
mov r11, qword [rsp + 0x68]
jmp 0x180034889
cmp esi, 0x83c
ja 0x180034998
je 0x180034954
cmp esi, 0x6d1
ja 0x1800348fc
je 0x1800348d8
mov eax, esi
sub eax, 0x5df
je 0x1800348d3
sub eax, 0x4e
je 0x1800348bd
sub eax, 0x2b
je 0x1800348b0
cmp eax, 0x4e
jne 0x180034889
lea rdi, [r9 + 0x18]
lea rax, [rbp - 0x20]
cmp rdi, rax
je 0x180034886
mov rcx, rdi
call fcn.1800253c0
mov rax, qword [rbp - 0x20]
mov qword [rdi], rax
mov rax, qword [rbp - 0x18]
mov qword [rdi + 8], rax
mov rax, qword [rbp - 0x10]
mov qword [rdi + 0x10], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], 0
mov r11, qword [rsp + 0x68]
mov edi, dword [rbp - 0x70]
add esi, 0x79
mov r10, qword [rbp - 0x30]
mov r9, qword [rbp - 0x40]
mov ecx, dword [rsp + 0x60]
mov r12d, dword [rbp - 0x6c]
mov r13, qword [rbp - 0x50]
mov rdx, qword [rsp + 0x70]
mov eax, dword [rbp + 0x1c0]
jmp 0x18003435c
mov eax, r14d
mov rcx, qword [rbp - 0x28]
mov byte [rax + rcx], 0xbc
jmp 0x180034889
mov edx, 0xffffffff
mov rcx, qword [r9 + 0x40]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov r11, qword [rsp + 0x68]
jmp 0x180034889
add r14d, ecx
jmp 0x180034889
lea ecx, [rdi*8]
mov rax, qword [rbp - 0x60]
sub ecx, dword [rax]
inc ecx
mov eax, 0xff
sar eax, cl
mov rcx, qword [rbp - 0x28]
and byte [rcx], al
mov rax, qword [rbp]
mov dword [rax], edi
jmp 0x180034889
mov eax, esi
sub eax, 0x74a
je 0x18003494d
sub eax, 0x4e
je 0x180034939
sub eax, 0x2b
je 0x1800342a8
cmp eax, 0x4e
jne 0x180034889
mov rax, qword [r9 + 0x30]
test rax, rax
je 0x180034889
mov rcx, qword [r9 + 0x38]
call rax
mov r11, qword [rsp + 0x68]
jmp 0x180034889
mov rcx, qword [r9 + 0x40]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov r11, qword [rsp + 0x68]
jmp 0x180034889
xor ebx, ebx
jmp 0x180034889
mov eax, edi
mov qword [rbp - 0x48], rax
xor ecx, ecx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x38], rcx
lea rax, [rbp - 0x48]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0x1e8
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call fcn.180033a80
mov r11, qword [rsp + 0x68]
jmp 0x180034889
cmp esi, 0x97c
ja 0x180034a86
je case.0x180033b92.336
mov eax, esi
sub eax, 0x88a
je 0x180034a69
sub eax, 0x2b
je 0x1800349f1
sub eax, 0x4e
je 0x1800349e8
cmp eax, 0x2b
jne 0x180034889
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r11, qword [rsp + 0x68]
jmp 0x180034889
mov byte [rbp - 0x68], 1
jmp 0x180034889
mov qword [rbp - 0x48], rdi
xor r12d, r12d
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], r12
lea rax, [rbp - 0x48]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 0x1e8
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180033a80
mov qword [rbp - 0x48], rdi
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x38], r12
lea rax, [rbp - 0x48]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 0x1e8
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180033a80
jmp 0x180034881
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x4000000
call qword [sym.imp.SHELL32.dll_SHChangeNotify]
mov r11, qword [rsp + 0x68]
jmp 0x180034889
mov eax, esi
sub eax, 0x9a7
je 0x180034ab4
sub eax, 0x79
je 0x180034a9e
cmp eax, 0x79
je case.0x180033b92.336
jmp 0x180034889
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov dword [rbp - 0x68], ebx
mov r11, qword [rsp + 0x68]
jmp 0x180034889
mov rcx, r11
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r11, qword [rsp + 0x68]
jmp 0x180034889
mov byte [rbp - 0x68], 0
mov rbx, qword [rbp - 0x20]
test rbx, rbx
je 0x180034b55
mov rdi, qword [rbp - 0x18]
cmp rbx, rdi
je 0x180034afb
mov rcx, rbx
call fcn.180003ae0
add rbx, 0x28
cmp rbx, rdi
jne 0x180034ae6
mov rbx, qword [rbp - 0x20]
mov rcx, qword [rbp - 0x10]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x180034b4d
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180034b4d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.180071f98
mov rax, qword [rbp - 0x68]
mov rcx, qword [rbp + 0x140]
xor rcx, rsp
call fcn.180072740
add rsp, 0x258
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret