Function at 0x18006bdb0
Capabilities:
Contain obfuscated stackstrings
Delete directory
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x340]
sub rsp, 0x440
mov rax, qword [0x18050b500]
xor rax, rsp
mov qword [rbp + 0x330], rax
mov dword [rsp + 0x40], 0x645b1a6b
mov dword [rsp + 0x44], 0x10570e50
mov dword [rsp + 0x48], 0x1c011d58
mov dword [rsp + 0x4c], 0x13486507
mov dword [rsp + 0x50], 0xa01067f
mov dword [rsp + 0x54], 0x7b760342
mov dword [rsp + 0x58], 0x35121875
mov dword [rsp + 0x5c], 0x414d2d37
mov dword [rsp + 0x60], 0x733a4a7e
mov dword [rsp + 0x64], 0x763c4e41
mov dword [rsp + 0x68], 0x50353555
mov byte [rsp + 0x6c], 0x92
xor eax, eax
mov dword [rsp + 0x6d], eax
mov word [rsp + 0x71], ax
mov byte [rsp + 0x73], al
movabs rsi, 0x947f110655896ca9
movabs r12, 0x80f9dc3d41068b45
movabs r14, 0x7aa95424e8d9e77
movabs r15, 0x5b6dcc7cc8087ed
lea r13, [rax - 1]
movzx r11d, byte [rsp + 0x30]
nop word [rax + rax]
mov rax, qword [0x1805190f8]
mov r9, qword [0x1805190f0]
nop
xor edi, edi
cmp rdi, 0x34
jae 0x18006cabe
movzx ebx, byte [rsp + rdi + 0x40]
movzx r10d, bl
cmp rax, rdi
ja 0x18006cab5
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x18006bee1
lea rdx, [rdi + r12]
mov rcx, rbx
and rcx, rdx
imul r11, rcx, 0xfffffffffffffffe
add r11, rbx
add r11, rdx
add r11b, 0x1d
jmp 0x18006bf1a
je 0x18006ca47
inc rcx
cmp rax, rcx
je 0x18006ca16
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x18006c9e2
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x18006c9b8
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x18006c972
movzx r10d, bl
nop
cmp r9, rdi
ja 0x18006caac
lea rdx, [r9 + 6]
cmp rax, rdx
jae 0x18006bf4e
lea r8, [rdi + rsi]
movzx ecx, bl
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
add r11b, 0x61
add r11b, r8b
jmp 0x18006bf90
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x18006c954
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x18006c92d
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x18006c8fc
cmp rax, rdx
je 0x18006c877
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x18006c848
nop dword [rax + rax]
lea rcx, [rax + r9]
cmp rcx, rdi
jbe 0x18006c53b
nop dword [rax]
lea rcx, [r9 + 0x1000]
cmp rax, rcx
je 0x18006c51b
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x18006c4f9
lea rcx, [r9 + 0x20]
cmp rax, rcx
je 0x18006c4da
lea rcx, [r9 + 0x400]
cmp rax, rcx
je 0x18006c4b6
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x18006c483
lea rcx, [r9 + 0x10]
cmp rax, rcx
je 0x18006c45a
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
je 0x18006c441
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x18006c421
lea rcx, [r9 + 0xa]
cmp rax, rcx
je 0x18006c3f3
lea rcx, [r9 + 0x200]
cmp rax, rcx
je 0x18006bfa0
lea rax, [r9 + 0x40]
lea r9, [rax + 0x2a]
lea rcx, [r9 + 0x61]
cmp rax, rcx
jb 0x18006ca91
lea rcx, [r9 + 4]
cmp rax, rcx
jb 0x18006ca76
lea rcx, [r9 + 0x28]
cmp rax, rcx
jb 0x18006c19c
lea rcx, [r9 + 0x1000]
cmp rax, rcx
jb 0x18006c17d
lea rcx, [r9 + 3]
cmp rax, rcx
jb 0x18006c15e
lea rcx, [r9 + 0x20]
cmp rax, rcx
jb 0x18006c395
lea rcx, [r9 + 0x400]
cmp rax, rcx
jb 0x18006c372
lea rcx, [r9 + 2]
cmp rax, rcx
jb 0x18006c32d
lea rcx, [r9 + 0x10]
cmp rax, rcx
jb 0x18006c30c
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jb 0x18006bfa0
lea rax, [r9 + 0x42]
lea r9, [rax + 1]
lea rcx, [r9 + 0x7a]
cmp rax, rcx
ja 0x18006c2de
lea rcx, [r9 + 5]
cmp rax, rcx
ja 0x18006c2be
lea rcx, [r9 + 0x40]
cmp rax, rcx
ja 0x18006c29f
lea rcx, [r9 + 0x61]
cmp rax, rcx
ja 0x18006c276
lea rcx, [r9 + 4]
cmp rax, rcx
ja 0x18006c243
lea rcx, [r9 + 0x28]
cmp rax, rcx
ja 0x18006c225
lea rcx, [r9 + 0x1000]
cmp rax, rcx
ja 0x18006c206
lea rcx, [r9 + 3]
cmp rax, rcx
ja 0x18006c1e4
lea rcx, [r9 + 0x20]
cmp rax, rcx
ja 0x18006c1c4
lea rcx, [r9 + 0x400]
cmp rax, rcx
ja 0x18006bfa0
lea rax, [r9 + 6]
lea r9, [rax + 2]
jmp 0x18006bfa0
lea r8, [rdi + r14]
movzx ecx, bl
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 0x41
add r11b, r8b
jmp 0x18006bf90
lea r8, [rdi + r15]
movzx ecx, bl
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 0x7b
add r11b, r8b
jmp 0x18006bf20
movabs r8, 0x3c3244d4a737163
add r8, rdi
movzx ecx, bl
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
add r11b, 0x4b
add r11b, r8b
jmp 0x18006beb5
lea r8d, [rdi + 0x48]
movzx ecx, bl
and cl, r8b
mov edx, 4
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x18006c995
lea edx, [rdi - 0x42]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x32
inc r9
dec rdi
inc rdi
jmp 0x18006bea2
lea edx, [rdi + 0x34]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x6c
dec rdi
inc rdi
jmp 0x18006bea2
lea r8d, [rdi - 0x56]
movzx ecx, bl
and cl, r8b
mov edx, 0x2d
sub dl, cl
lea r11d, [rdx + rdx]
movzx r10d, dil
jmp 0x18006c7f5
lea r8d, [rdi + 0x20]
movzx ecx, bl
and cl, r8b
mov edx, 0x10
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
add rax, r9
movzx ecx, r11b
mov rdx, r13
sub rdx, rcx
add rdi, rdx
inc rdi
jmp 0x18006bea2
lea edx, [rdi - 0x6a]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x1a
movzx ecx, r11b
mov rdx, r13
sub rdx, rcx
add rdi, rdx
inc rdi
jmp 0x18006bea2
lea r8d, [rdi + 0xc]
movzx ecx, bl
and cl, r8b
add cl, cl
movzx r11d, bl
sub r11b, cl
sub r11b, 0x54
add r11b, r8b
jmp 0x18006c89a
lea r8d, [rdi - 0x7e]
movzx ecx, bl
and cl, r8b
mov edx, 0x39
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x18006c8c1
lea r8d, [rdi - 8]
movzx ecx, bl
and cl, r8b
mov edx, 0x1c
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
movzx ecx, byte [rsp + rdi + 0x40]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x18006bea2
lea edx, [rdi - 0x61]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x59
mov byte [rsp + rdi + 0x40], r11b
inc rdi
jmp 0x18006bea2
lea r8d, [rdi + 0x15]
movzx ecx, bl
and cl, r8b
add cl, cl
movzx r11d, bl
sub r11b, cl
add r11b, 0x6d
add r11b, r8b
movzx r10d, dil
cmp r9, 0x40
jb 0x18006c320
add r10b, 0x7e
movzx ecx, bl
and cl, r10b
mov edx, 7
sub dl, cl
add dl, dl
add dl, bl
add dl, r10b
lea r11d, [rdx + rdx]
jmp 0x18006c995
movzx r10d, dil
lea r8d, [r10 - 0x75]
movzx ecx, bl
and cl, r8b
add cl, cl
movzx r11d, bl
sub r11b, cl
add r11b, 0x33
add r11b, r8b
jmp 0x18006c6fa
lea r8d, [rdi + 1]
movzx ecx, bl
and cl, r8b
add cl, cl
movzx r11d, bl
sub r11b, cl
sub r11b, 7
add r11b, r8b
lea rcx, [rax + r9]
cmp rcx, 0x1000
je 0x18006c82e
lea rcx, [r9 + 0x80]
cmp rax, rcx
jbe 0x18006c622
movzx r10d, dil
lea r8d, [r10 + 0x71]
movzx ecx, bl
and cl, r8b
add cl, cl
movzx r11d, bl
sub r11b, cl
sub r11b, 0x17
add r11b, r8b
jmp 0x18006c6fa
lea r8d, [rdi - 0xa]
movzx ecx, bl
and cl, r8b
mov edx, 0x23
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
movzx ecx, byte [rsp + rdi + 0x40]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x18006bea2
lea r8d, [rdi + 0x6c]
movzx ecx, r8b
and cl, bl
mov edx, 6
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x18006c8c1
lea edx, [rdi - 0x1e]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x2e
jmp 0x18006c89a
lea edx, [rdi + 0x58]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x68
movzx ecx, r11b
mov rdx, r13
sub rdx, rcx
add rdi, rdx
inc rdi
jmp 0x18006bea2
lea r8d, [rdi - 0x32]
movzx ecx, r8b
and cl, bl
mov edx, 0x2f
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
add rax, r9
movzx ecx, r11b
mov rdx, r13
sub rdx, rcx
add rdi, rdx
inc rdi
jmp 0x18006bea2
movzx r10d, dil
lea r8d, [r10 + 0x44]
movzx ecx, r8b
and cl, bl
mov edx, 0x12
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x18006c7fb
lea edx, [rdi - 0x46]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x16
dec rdi
inc rdi
jmp 0x18006bea2
lea edx, [rdi + 0x30]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x50
inc r9
dec rdi
inc rdi
jmp 0x18006bea2
lea r8d, [rdi - 0x5a]
movzx ecx, r8b
and cl, bl
mov edx, 0x3b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x18006c995
lea rcx, [r9 + 0x20]
cmp rax, rcx
jae 0x18006c55f
lea rdx, [rdi + r12]
movzx ecx, bl
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
add r11b, 0x1d
jmp 0x18006c3af
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x18006c58f
lea edx, [rdi + 0x52]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x3e
movzx ecx, byte [rsp + rdi + 0x40]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x18006bea2
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x18006c5c8
lea r8d, [rdi - 0x10]
movzx ecx, r8b
and cl, bl
mov edx, 0x38
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
movzx ecx, r11b
mov rdx, r13
sub rdx, rcx
add rdi, rdx
inc rdi
jmp 0x18006bea2
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x18006c5ef
movzx r10d, dil
lea edx, [r10 + 4]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x1c
jmp 0x18006c7fb
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x18006c3af
lea r8d, [rdi - 0x72]
movzx ecx, r8b
and cl, bl
mov edx, 0xf
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
dec rdi
inc rdi
jmp 0x18006bea2
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x18006c64a
lea r8d, [rdi - 5]
movzx ecx, bl
and cl, r8b
add cl, cl
movzx r11d, bl
sub r11b, cl
add r11b, 0x23
add r11b, r8b
jmp 0x18006c995
inc rcx
cmp rax, rcx
jne 0x18006c671
lea edx, [rdi + 0xf]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x69
dec rdi
inc rdi
jmp 0x18006bea2
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x18006c6a6
lea edx, [rdi + 0x23]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
add r11b, 0xb
add rax, r9
movzx ecx, r11b
mov rdx, r13
sub rdx, rcx
add rdi, rdx
inc rdi
jmp 0x18006bea2
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x18006c6ce
lea r8d, [rdi + 0x37]
movzx ecx, bl
and cl, r8b
add cl, cl
movzx r11d, bl
sub r11b, cl
add r11b, 0x7f
add r11b, r8b
jmp 0x18006c89a
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x18006c6f6
lea r8d, [rdi - 0x3f]
movzx ecx, bl
and cl, r8b
add cl, cl
movzx r11d, bl
sub r11b, cl
sub r11b, 0x47
add r11b, r8b
jmp 0x18006c8c1
movzx r10d, dil
cmp rax, 0x61
jae 0x18006c7de
lea rcx, [r9 + 9]
cmp rax, rcx
jbe 0x18006c72d
lea r8d, [r10 + 0x1a]
movzx ecx, bl
and cl, r8b
mov edx, 0x25
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x18006c34b
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x18006c75f
sub r10b, 0x5c
movzx ecx, bl
and cl, r10b
add cl, cl
sub bl, cl
lea r11d, [r10 + rbx]
sub r11b, 0x7c
movzx ecx, byte [rsp + rdi + 0x40]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x18006bea2
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x18006c787
sub r10b, 0x48
movzx ecx, bl
and cl, r10b
add cl, cl
movzx r11d, bl
sub r11b, cl
sub r11b, 8
add r11b, r10b
jmp 0x18006c89a
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x18006c7b1
sub r10b, 0x20
movzx ecx, bl
and cl, r10b
add cl, cl
sub bl, cl
lea r11d, [r10 + rbx]
sub r11b, 0x20
dec rdi
inc rdi
jmp 0x18006bea2
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x18006c34b
sub r10b, 0xc
movzx ecx, bl
and cl, r10b
mov edx, 0x2a
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r10b
jmp 0x18006c995
lea r8d, [r10 + 8]
movzx ecx, bl
and cl, r8b
add cl, cl
movzx r11d, bl
sub r11b, cl
sub r11b, 0x38
add r11b, bl
add r11b, r8b
add r10b, 0x4d
movzx ecx, bl
and cl, r10b
add cl, cl
sub bl, cl
sub bl, 0x1b
add bl, r10b
add bl, r11b
mov byte [rsp + rdi + 0x40], bl
add rax, r9
movzx ecx, r11b
mov rdx, r13
sub rdx, rcx
add rdi, rdx
inc rdi
jmp 0x18006bea2
lea r8d, [rdi - 0x6e]
movzx ecx, bl
and cl, r8b
mov edx, 1
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
jmp 0x18006c89a
movabs rcx, 0xa6108d54e7ff3783
add rcx, rdi
and bl, cl
add bl, bl
sub r10b, bl
lea r11d, [rcx + r10]
add r11b, 0x6b
movzx ecx, byte [rsp + rdi + 0x40]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x18006bea2
movabs rdx, 0xa2291c5fe3e50a6f
add rdx, rdi
and bl, dl
add bl, bl
movzx r11d, r10b
sub r11b, bl
sub r11b, 9
add r11b, dl
movzx ebx, r10b
lea r8d, [rdi - 0x29]
movzx ecx, bl
and cl, r8b
add cl, cl
movzx edx, bl
sub dl, cl
add dl, 0x1f
add dl, r8b
movzx ecx, dl
mov byte [rsp + rdi + 0x40], cl
inc r9
add rcx, r9
sub rdi, rcx
lea r8d, [rdi + 0x1c]
movzx ecx, bl
and cl, r8b
mov edx, 0x1e
sub dl, cl
add dl, dl
add dl, bl
add dl, r8b
mov byte [rsp + rdi + 0x40], dl
inc rax
mov rcx, r13
sub rcx, rax
add rdi, rcx
movzx ecx, byte [rsp + rdi + 0x40]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x18006bea2
movabs rcx, 0xa03563e561d7f3e5
add rcx, rdi
and bl, cl
add bl, bl
sub r10b, bl
lea r11d, [rcx + r10]
sub r11b, 0x43
movzx ecx, r11b
mov rdx, r13
sub rdx, rcx
add rdi, rdx
inc rdi
jmp 0x18006bea2
movabs rcx, 0x9a5a3a75dbb0b047
add rcx, rdi
and bl, cl
add bl, bl
sub r10b, bl
lea r11d, [rcx + r10]
add r11b, 0xf
dec rdi
inc rdi
jmp 0x18006bea2
movabs rdx, 0x9672c980d7968333
add rdx, rdi
and bl, dl
add bl, bl
movzx r11d, r10b
sub r11b, bl
sub r11b, 0x65
jmp 0x18006c98e
movabs rdx, 0x928b588bd37c561f
add rdx, rdi
and bl, dl
add bl, bl
movzx r11d, r10b
sub r11b, bl
add r11b, 0x27
movzx ebx, r10b
add r11b, dl
lea edx, [rdi - 0x3d]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
sub bl, 0x55
add bl, dl
mov byte [rsp + rdi + 0x40], bl
inc r9
dec rdi
inc rdi
jmp 0x18006bea2
movabs rcx, 0x9097a011516f3f95
add rcx, rdi
and bl, cl
add bl, bl
sub r10b, bl
lea r11d, [rcx + r10]
sub r11b, 0x13
inc r9
dec rdi
inc rdi
jmp 0x18006bea2
movabs rcx, 0x8abc76a1cb47fbf7
add rcx, rdi
and bl, cl
add bl, bl
sub r10b, bl
lea r11d, [rcx + r10]
add r11b, 0x3f
add rax, r9
movzx ecx, r11b
mov rdx, r13
sub rdx, rcx
add rdi, rdx
inc rdi
jmp 0x18006bea2
movabs rcx, 0x88c8be27493ae56d
add rcx, rdi
and bl, cl
add bl, bl
sub r10b, bl
lea r11d, [rcx + r10]
add r11b, 5
movzx ecx, r11b
mov rdx, r13
sub rdx, rcx
add rdi, rdx
inc rdi
jmp 0x18006bea2
movabs rcx, 0x82ed94b7c313a1cf
add rcx, rdi
and bl, cl
add bl, bl
sub r10b, bl
lea r11d, [rcx + r10]
add r11b, 0x57
movzx ecx, byte [rsp + rdi + 0x40]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x18006bea2
sub dil, 0x27
movzx ecx, bl
and cl, dil
add cl, cl
sub bl, cl
lea r11d, [rdi + rbx]
add r11b, 0x11
jmp 0x18006bea0
add dil, 0x4f
movzx eax, bl
and al, dil
add al, al
sub bl, al
lea r11d, [rdi + rbx]
sub r11b, 0x29
jmp 0x18006be90
lea rbx, [rbp + 0x165919c]
jmp 0x18006cac3
lea rbx, [rbp + 0x6c1ce1]
jmp 0x18006cac3
lea rbx, [rsp + 0x40]
movzx edx, byte [rsp + 0x30]
lea rcx, [rbp + 0x1c0]
call fcn.180015cf0
nop
mov r8, r13
nop dword [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x18006cae0
mov rdx, rbx
lea rcx, [rbp + 0x1c0]
call fcn.180015d20
nop
mov dword [rbp - 0x80], 0x70a3bdb7
mov dword [rbp - 0x7c], 0xb89a72a4
mov dword [rbp - 0x78], 0x69b989bb
mov dword [rbp - 0x74], 0xd961aa9e
mov dword [rbp - 0x70], 0x87959090
mov dword [rbp - 0x6c], 0xaa5ba663
mov dword [rbp - 0x68], 0xb99a8cad
mov dword [rbp - 0x64], 0xb054bdb0
mov dword [rbp - 0x60], 0xeda39e81
mov dword [rbp - 0x5c], 0xa84c91b2
mov dword [rbp - 0x58], 0xb6894c9e
mov byte [rbp - 0x54], 0x70
xor eax, eax
mov qword [rbp - 0x53], rax
mov dword [rbp - 0x4b], eax
movabs r14, 0x4e0dc25ca780690a
movabs r12, 0x226050889482df46
movabs r15, 0xea294715f6813b1e
movzx r10d, byte [rsp + 0x30]
nop dword [rax + rax]
mov r8, qword [0x1805190f8]
mov r9, qword [0x1805190f0]
nop
xor edi, edi
cmp rdi, 0x39
jae 0x18006d6bd
movzx ebx, byte [rbp + rdi - 0x80]
mov esi, ebx
cmp r8, rdi
ja 0x18006d6b4
lea rax, [r9 + 1]
cmp r8, rax
jae 0x18006cbcf
lea rcx, [rdi + r14]
mov rax, rsi
and rax, rcx
imul r10, rax, 0xfffffffffffffffe
add r10, rsi
add r10, rcx
sub r10b, 0x46
jmp 0x18006cbfc
je 0x18006d644
lea rax, [r9 + 3]
cmp r8, rax
je 0x18006d5c8
lea rax, [r9 + 5]
cmp r8, rax
je 0x18006d573
lea rax, [r9 + 6]
cmp r8, rax
je 0x18006d534
movzx r11d, dil
cmp r9, rdi
ja 0x18006d6ab
lea rax, [r9 + 0x1000]
cmp r8, rax
jae 0x18006cc31
lea edx, [r11 - 0x2e]
movzx eax, dl
and al, bl
mov ecx, 0x21
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, bl
jmp 0x18006cc70
lea rax, [r9 + 1]
cmp r8, rax
je 0x18006d51d
lea rax, [r9 + 2]
cmp r8, rax
je 0x18006d4fb
lea rax, [r9 + 3]
cmp r8, rax
je 0x18006d4df
lea rax, [r9 + 5]
cmp r8, rax
je 0x18006d4c3
nop word [rax + rax]
lea rax, [r9 + r8]
cmp rax, rdi
jbe 0x18006d1d2
nop dword [rax]
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x18006d1b8
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x18006d18f
lea rcx, [r9 + 0x41]
cmp r8, rcx
je 0x18006d16d
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x18006d15f
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x18006d143
lea rax, [r9 + 9]
cmp r8, rax
je 0x18006d113
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x18006d0f9
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x18006d0d9
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x18006d0af
lea rax, [r9 + 8]
cmp r8, rax
je 0x18006cc80
mov r8, rcx
lea r9, [rcx + 5]
lea rax, [r9 + 0x28]
cmp rcx, rax
jb 0x18006d68b
lea rax, [r9 + 0x10]
cmp rcx, rax
jb 0x18006d670
lea rcx, [r9 + 0x5a]
cmp r8, rcx
jb 0x18006ce6c
lea rax, [r9 + 0x7a]
cmp r8, rax
jb 0x18006ce52
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x18006ce38
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x18006d059
lea rax, [r9 + 8]
cmp r8, rax
jb 0x18006d016
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x18006cfd7
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x18006cfb3
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x18006cc80
mov r8, rcx
lea r9, [rcx + 6]
lea rax, [r9 + 0x7a]
cmp rcx, rax
ja 0x18006cf96
lea rax, [r9 + 0x20]
cmp rcx, rax
ja 0x18006cf7a
lea rax, [r9 + 0xa]
cmp rcx, rax
ja 0x18006cf5e
lea rax, [r9 + 0x41]
cmp rcx, rax
ja 0x18006cf33
lea rax, [r9 + 0x61]
cmp rcx, rax
ja 0x18006cf13
lea rax, [r9 + 0x400]
cmp rcx, rax
ja 0x18006cef5
lea rax, [r9 + 9]
cmp rcx, rax
ja 0x18006cecf
lea rax, [r9 + 6]
cmp rcx, rax
ja 0x18006ceab
lea rax, [r9 + 0x1000]
cmp rcx, rax
ja 0x18006ce8c
lea rax, [r9 + 0x3e8]
cmp rcx, rax
ja 0x18006cc80
lea r8, [r9 + 0x2a]
lea r9, [r8 + 0x80]
jmp 0x18006cc80
lea ecx, [r11 + 0x6e]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 2
jmp 0x18006cc70
lea ecx, [r11 + 0x5a]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x76
jmp 0x18006cc00
add r11b, 0x46
movzx eax, r11b
and al, bl
mov ecx, 0xb
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, bl
jmp 0x18006cba3
lea edx, [r11 - 0x70]
movzx eax, bl
and al, dl
mov ecx, 8
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
jmp 0x18006d54d
add r11b, 0x7c
movzx eax, bl
and al, r11b
add al, al
sub bl, al
lea r10d, [r11 + rbx]
sub r10b, 0x64
inc r9
dec rdi
inc rdi
jmp 0x18006cb92
add r11b, 0x68
movzx eax, bl
and al, r11b
mov ecx, 0x14
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, r11b
dec rdi
inc rdi
jmp 0x18006cb92
lea edx, [r11 + 0x54]
movzx eax, bl
and al, dl
add al, al
movzx r10d, bl
sub r10b, al
sub r10b, 0x4c
add r10b, dl
jmp 0x18006d591
add r11b, 0x40
movzx eax, bl
and al, r11b
mov ecx, 0x20
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, r11b
jmp 0x18006d5b0
add r11b, 0x2c
movzx eax, bl
and al, r11b
add al, al
sub bl, al
lea r10d, [r11 + rbx]
sub r10b, 0x34
movzx eax, r10b
mov rcx, r13
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x18006cb92
lea edx, [r11 + 0x18]
movzx eax, dl
and al, bl
mov ecx, 0x2c
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
jmp 0x18006d5e2
add r11b, 4
movzx eax, r11b
and al, bl
add al, al
sub r11b, al
lea r10d, [rbx + r11]
sub r10b, 0x1c
jmp 0x18006d60c
sub r11b, 0x10
movzx eax, r11b
and al, bl
mov ecx, 0x38
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
jmp 0x18006d65a
sub r11b, 0x42
movzx eax, r11b
and al, bl
add al, al
sub r11b, al
lea r10d, [rbx + r11]
sub r10b, 0x32
mov byte [rbp + rdi - 0x80], r10b
inc rdi
jmp 0x18006cb92
lea edx, [r11 - 0x56]
movzx eax, dl
and al, bl
mov ecx, 0x2d
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, bl
cmp r9, 3
jb 0x18006cfca
lea ecx, [r11 - 4]
movzx eax, cl
and al, bl
mov edx, 0xe
sub dl, al
add dl, dl
add dl, cl
add dl, bl
lea r10d, [rdx + rdx]
jmp 0x18006d54d
lea ecx, [r11 - 0x6a]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x1a
cmp r8, 2
jae 0x18006d48d
lea rax, [r9 + 0xa]
cmp r8, rax
jbe 0x18006d3b3
lea ecx, [r11 + 0x34]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x6c
jmp 0x18006cff1
lea edx, [r11 - 0x7e]
movzx eax, dl
and al, bl
mov ecx, 0x39
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, bl
lea rax, [r9 + r8]
cmp rax, 0x200
je 0x18006d4a7
lea rax, [r9 + 9]
cmp r8, rax
jbe 0x18006d303
lea edx, [r11 + 0x62]
movzx eax, dl
and al, bl
mov ecx, 0x29
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, bl
jmp 0x18006d02b
sub r11b, 0x14
movzx eax, r11b
and al, bl
add al, al
sub r11b, al
lea r10d, [rbx + r11]
sub r10b, 0x74
movzx eax, byte [rbp + rdi - 0x80]
add rax, r9
add rdi, rax
inc rdi
jmp 0x18006cb92
sub r11b, 0x28
movzx eax, r11b
and al, bl
mov ecx, 0xc
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, bl
jmp 0x18006d60c
lea ecx, [r11 - 0x3c]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x5c
jmp 0x18006d5e5
sub r11b, 0x50
movzx eax, r11b
and al, bl
mov ecx, 0x18
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, bl
movzx eax, r10b
mov rcx, r13
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x18006cb92
sub r11b, 0x64
movzx eax, r11b
and al, bl
add al, al
sub r11b, al
lea r10d, [rbx + r11]
sub r10b, 0x44
jmp 0x18006d5b0
lea edx, [r11 - 0x78]
mov ecx, 0x24
jmp 0x18006d580
add r11b, 0x74
movzx eax, r11b
and al, bl
add al, al
sub r11b, al
lea r10d, [rbx + r11]
sub r10b, 0x2c
dec rdi
inc rdi
jmp 0x18006cb92
add r11b, 0x60
movzx eax, r11b
and al, bl
mov ecx, 0x30
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, bl
inc r9
dec rdi
inc rdi
jmp 0x18006cb92
lea ecx, [r11 + 0x4c]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x14
jmp 0x18006d54d
lea rax, [r9 + 0x42]
cmp r8, rax
jae 0x18006d1f5
lea ecx, [r11 + 0xa]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x46
jmp 0x18006d073
lea rax, [r9 + 1]
cmp r8, rax
jne 0x18006d228
sub r11b, 0x5c
movzx eax, r11b
and al, bl
add al, al
sub r11b, al
lea r10d, [rbx + r11]
sub r10b, 0x7c
movzx eax, byte [rbp + rdi - 0x80]
add rax, r9
add rdi, rax
inc rdi
jmp 0x18006cb92
lea rax, [r9 + 3]
cmp r8, rax
jne 0x18006d25d
sub r11b, 0x20
movzx eax, r11b
and al, bl
add al, al
sub r11b, al
lea r10d, [rbx + r11]
sub r10b, 0x20
movzx eax, r10b
mov rcx, r13
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x18006cb92
lea rax, [r9 + 2]
cmp r8, rax
jne 0x18006d286
sub r11b, 0xc
movzx eax, r11b
and al, bl
mov ecx, 0x2a
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, bl
jmp 0x18006d5b0
lea rax, [r9 + 5]
cmp r8, rax
jne 0x18006d2a9
lea ecx, [r11 + 8]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x38
jmp 0x18006d591
lea rax, [r9 + 6]
cmp r8, rax
jne 0x18006d2d7
add r11b, 0x30
movzx eax, r11b
and al, bl
add al, al
sub r11b, al
lea r10d, [rbx + r11]
sub r10b, 0x50
inc r9
dec rdi
inc rdi
jmp 0x18006cb92
lea rax, [r9 + 4]
cmp r8, rax
jne 0x18006d073
lea edx, [r11 + 0x44]
movzx eax, dl
and al, bl
mov ecx, 0x12
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, bl
jmp 0x18006d54d
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x18006d326
lea ecx, [r11 + 0x76]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x3a
jmp 0x18006d54d
lea rax, [r9 + 2]
cmp r8, rax
jne 0x18006d351
sub r11b, 0x62
movzx eax, r11b
and al, bl
add al, al
sub r11b, al
lea r10d, [rbx + r11]
sub r10b, 0x52
dec rdi
inc rdi
jmp 0x18006cb92
lea rax, [r9 + 5]
cmp r8, rax
jne 0x18006d38a
sub r11b, 0x26
movzx eax, r11b
and al, bl
mov ecx, 5
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, bl
movzx eax, r10b
mov rcx, r13
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x18006cb92
lea rax, [rcx + 1]
cmp r8, rax
jne 0x18006d02b
lea edx, [r11 - 0x12]
movzx eax, dl
and al, bl
mov ecx, 0x3f
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
jmp 0x18006d5e2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x18006d3d9
add r11b, 0x48
movzx eax, r11b
and al, bl
mov ecx, 4
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
jmp 0x18006d65a
inc rax
cmp r8, rax
jne 0x18006d401
add r11b, 0x5c
movzx eax, r11b
and al, bl
mov ecx, 0x3e
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, bl
jmp 0x18006d60c
lea rax, [r9 + 2]
cmp r8, rax
jne 0x18006d424
lea ecx, [r11 + 0x70]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x10
jmp 0x18006d5e5
lea rax, [r9 + 5]
cmp r8, rax
jne 0x18006d43b
lea edx, [r11 - 0x54]
mov ecx, 0x26
jmp 0x18006d580
lea rax, [r9 + 7]
cmp r8, rax
jne 0x18006d466
sub r11b, 0x40
movzx eax, r11b
and al, bl
add al, al
sub r11b, al
lea r10d, [rbx + r11]
sub r10b, 0x40
dec rdi
inc rdi
jmp 0x18006cb92
lea rax, [r9 + 4]
cmp r8, rax
jne 0x18006cff1
lea ecx, [r11 - 0x18]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x58
jmp 0x18006d54d
lea ecx, [r11 + 0x10]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x70
jmp 0x18006d58e
lea edx, [r11 + 0x24]
movzx eax, dl
and al, bl
mov ecx, 2
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
jmp 0x18006d5e5
lea edx, [r11 + 0x5e]
movzx eax, dl
and al, bl
mov ecx, 0x37
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
jmp 0x18006d5e2
add r11b, 0x36
movzx eax, r11b
and al, bl
add al, al
sub r11b, al
lea r10d, [rbx + r11]
sub r10b, 0x7a
jmp 0x18006d5b0
add r11b, 0xe
movzx eax, r11b
and al, bl
add al, al
sub r11b, al
lea r10d, [rbx + r11]
sub r10b, 0x62
dec rdi
inc rdi
jmp 0x18006cb92
lea ecx, [r11 - 0x1a]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x4a
jmp 0x18006d54d
movzx r11d, dil
lea ecx, [r11 - 0x42]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x32
add r11b, 6
movzx eax, bl
and al, r11b
add al, al
sub bl, al
sub bl, 0x2a
add bl, r11b
mov byte [rbp + rdi - 0x80], bl
inc r9
dec rdi
inc rdi
jmp 0x18006cb92
movzx r11d, dil
lea edx, [r11 - 0x7e]
mov ecx, 0x39
movzx eax, dl
and al, bl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, bl
add r11b, 0x1a
movzx eax, bl
and al, r11b
mov ecx, 0x25
sub cl, al
add cl, cl
add cl, r10b
add cl, bl
add cl, r11b
mov byte [rbp + rdi - 0x80], cl
add r8, r9
movzx eax, r10b
mov rcx, r13
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x18006cb92
lea rax, [rdi + r12]
and sil, al
mov ecx, 0xb
sub cl, sil
lea r10d, [rcx + rcx]
add r10b, al
movzx r11d, dil
add r10b, bl
add r11b, 0x2e
movzx eax, r11b
and al, bl
add al, al
sub r11b, al
sub r11b, 0x42
add r11b, bl
movzx eax, r11b
mov byte [rbp + rdi - 0x80], al
inc r9
add rax, r9
sub rdi, rax
lea edx, [rdi + 0x38]
movzx eax, dl
and al, bl
mov ecx, 0x3c
sub cl, al
add cl, cl
add cl, dl
add cl, bl
mov byte [rbp + rdi - 0x80], cl
inc r8
mov rax, r13
sub rax, r8
add rdi, rax
movzx eax, byte [rbp + rdi - 0x80]
add rax, r9
add rdi, rax
inc rdi
jmp 0x18006cb92
lea rax, [rdi + r15]
and sil, al
mov ecx, 0x17
sub cl, sil
lea r10d, [rcx + rcx]
add r10b, al
add r10b, bl
movzx eax, byte [rbp + rdi - 0x80]
add rax, r9
add rdi, rax
inc rdi
jmp 0x18006cb92
add r11b, 0x32
movzx eax, bl
and al, r11b
add al, al
sub bl, al
lea r10d, [r11 + rbx]
sub r10b, 0x5e
jmp 0x18006cb90
add r11b, 0x1e
movzx eax, bl
and al, r11b
mov ecx, 0x17
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, r11b
jmp 0x18006cb80
lea rbx, [rbp + 0x1469238]
jmp 0x18006d6c1
lea rbx, [rbp + 0xc6fb42]
jmp 0x18006d6c1
lea rbx, [rbp - 0x80]
movzx edx, byte [rsp + 0x30]
lea rcx, [rbp + 0x1a0]
call fcn.180015cf0
nop
mov r8, r13
inc r8
cmp byte [rbx + r8], 0
jne 0x18006d6d6
mov rdx, rbx
lea rcx, [rbp + 0x1a0]
call fcn.180015d20
nop
lea rax, [rbp + 0xb8]
mov qword [rbp], rax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xb8]
call fcn.18002ff50
mov r15, rax
lea rax, [rbp + 0xd8]
mov qword [rbp + 0x70], rax
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0xd8]
call fcn.18002ff50
mov r12, rax
lea rax, [rbp + 0x78]
mov qword [rbp + 8], rax
mov dword [rbp - 0x40], 0xfbe6e1f4
mov dword [rbp - 0x3c], 0xb4b5afe7
mov dword [rbp - 0x38], 0xeceef8ff
mov dword [rbp - 0x34], 0xd1fff5f3
mov dword [rbp - 0x30], 0xc6c68ffd
mov dword [rbp - 0x2c], 0xd8f78ad2
mov dword [rbp - 0x28], 0x80dec8db
mov dword [rbp - 0x24], 0xd2d3c9ef
mov word [rbp - 0x20], 0xc2c2
mov byte [rbp - 0x1e], 0x4a
xorps xmm0, xmm0
movups xmmword [rbp - 0x1d], xmm0
movzx edx, byte [rsp + 0x30]
nop dword [rax + rax]
mov r8, qword [0x1805190f8]
mov r9, qword [0x1805190f0]
nop
xor esi, esi
movabs rcx, 0x238fb5b37f22f992
cmp rsi, 0x33
jae 0x18006e081
movzx edi, byte [rbp + rsi - 0x40]
mov r14d, edi
nop
cmp r8, rsi
ja 0x18006e078
lea rax, [r9 + 1]
cmp r8, rax
jae 0x18006d7ea
add rcx, rsi
mov rax, rcx
and rax, r14
imul rdx, rax, 0xfffffffffffffffe
add rdx, rcx
add rdx, r14
add dl, 2
jmp 0x18006d817
je 0x18006dffc
lea rax, [r9 + 3]
cmp r8, rax
je 0x18006dfce
lea rax, [r9 + 4]
cmp r8, rax
je 0x18006df7c
lea rax, [r9 + 2]
cmp r8, rax
je 0x18006df57
movzx r10d, sil
nop dword [rax + rax]
mov rbx, r8
cmp r9, rsi
ja 0x18006e06f
lea rax, [r9 + 0x5a]
cmp r8, rax
jae 0x18006d84f
lea edx, [r10 - 6]
movzx eax, dl
and al, dil
mov ecx, 0x15
sub cl, al
add cl, cl
add dl, cl
add dl, dil
jmp 0x18006d883
lea rax, [r9 + 1]
cmp r8, rax
je 0x18006df15
lea rax, [r9 + 3]
cmp r8, rax
je 0x18006deef
lea rax, [r9 + 4]
cmp r8, rax
je 0x18006ded2
lea rax, [r9 + 5]
cmp r8, rax
je 0x18006dea3
lea rax, [r9 + r8]
cmp rax, rsi
jbe 0x18006db8e
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x18006db75
lea rax, [r9 + 5]
cmp r8, rax
je 0x18006db50
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x18006db2e
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x18006db15
lea rax, [r9 + 4]
cmp r8, rax
je 0x18006dafc
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x18006d890
lea r8, [r9 + 0x80]
lea r9, [r8 + 0x1000]
lea rax, [r9 + 9]
cmp r8, rax
jb 0x18006e04f
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x18006e02f
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x18006d9aa
lea rax, [r9 + 8]
cmp r8, rax
jb 0x18006d98d
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x18006da8f
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x18006d890
lea r8, [r9 + 2]
lea r9, [r8 + 6]
lea rax, [r9 + 0x10]
cmp r8, rax
ja 0x18006da72
lea rax, [r9 + 2]
cmp r8, rax
ja 0x18006da52
lea rax, [r9 + 0x3e8]
cmp r8, rax
ja 0x18006da23
lea rax, [r9 + 1]
cmp r8, rax
ja 0x18006d9fd
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x18006d9d4
lea r8, [r9 + 0x40]
lea r9, [r8 + 0x200]
jmp 0x18006d890
lea edx, [r10 + 0x22]
movzx eax, dl
and al, dil
mov ecx, 9
sub cl, al
add cl, cl
add dl, cl
add dl, dil
jmp 0x18006d820
sub r10b, 2
movzx eax, r10b
and al, dil
mov ecx, 7
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, dil
movabs rcx, 0x238fb5b37f22f992
jmp 0x18006d7c0
sub r10b, 0x54
movzx eax, r10b
and al, dil
mov ecx, 0x26
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, dil
inc r9
dec rsi
inc rsi
jmp 0x18006d7a2
sub r10b, 0x78
movzx eax, r10b
and al, dil
mov ecx, 0x24
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, dil
dec rsi
inc rsi
jmp 0x18006d7a2
add r10b, 0x1c
movzx eax, r10b
and al, dil
mov ecx, 0x1e
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, dil
movzx eax, dl
mov rcx, r13
sub rcx, rax
add rsi, rcx
inc rsi
jmp 0x18006d7a2
sub r10b, 0x2c
movzx eax, r10b
and al, dil
mov ecx, 0x1a
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, dil
jmp 0x18006de6a
sub r10b, 0x50
movzx eax, r10b
and al, dil
mov ecx, 0x18
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
jmp 0x18006e019
lea ecx, [r10 - 0x72]
movzx eax, cl
and al, dil
mov edx, 0xf
sub dl, al
add dl, dl
add dl, cl
add dl, dil
cmp r8, 0x1000
jae 0x18006de16
lea rax, [r9 + 0x5a]
cmp r8, rax
jbe 0x18006dd61
lea ecx, [r10 - 0x3c]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea edx, [rdi + rcx]
sub dl, 0x5c
cmp r9, 6
jb 0x18006de0a
lea ecx, [r10 + 0x2c]
movzx eax, cl
and al, dil
add al, al
sub cl, al
add cl, dil
lea edx, [rcx*2 - 0x68]
jmp 0x18006df2d
lea ecx, [r10 - 0x6c]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea edx, [rdi + rcx]
sub dl, 0xc
jmp 0x18006de41
lea ecx, [r10 + 0x28]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea edx, [rdi + rcx]
sub dl, 0x18
jmp 0x18006df98
add r10b, 4
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea edx, [rdi + r10]
sub dl, 0x1c
dec rsi
inc rsi
jmp 0x18006d7a2
sub r10b, 0x20
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea edx, [rdi + r10]
sub dl, 0x20
inc r9
dec rsi
inc rsi
jmp 0x18006d7a2
lea ecx, [r10 - 0x44]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea edx, [rdi + rcx]
sub dl, 0x24
jmp 0x18006df2d
lea rax, [r9 + 6]
cmp rbx, rax
jae 0x18006dbe2
lea edx, [r10 - 0x6e]
movzx eax, dl
and al, dil
mov ecx, 1
sub cl, al
add cl, cl
add dl, cl
add dl, dil
lea rax, [r9 + r8]
cmp rax, 0xa
je 0x18006de30
lea rax, [r9 + 0x40]
cmp r8, rax
jbe 0x18006dc92
lea edx, [r10 - 0x36]
movzx eax, dl
and al, dil
mov ecx, 0x3d
sub cl, al
add cl, cl
jmp 0x18006daa2
lea rax, [r9 + 1]
cmp rbx, rax
jne 0x18006dc08
sub r10b, 0xc
movzx eax, r10b
and al, dil
mov ecx, 0x2a
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
jmp 0x18006e019
lea rax, [r9 + 2]
cmp rbx, rax
jne 0x18006dc2e
lea edx, [r10 + 0x3c]
movzx eax, dl
and al, dil
mov ecx, 0x2e
sub cl, al
add cl, cl
add dl, cl
add dl, dil
jmp 0x18006de41
lea rax, [r9 + 5]
cmp rbx, rax
jne 0x18006dc45
lea edx, [r10 - 0x58]
mov ecx, 0x34
jmp 0x18006df89
lea rax, [r9 + 3]
cmp rbx, rax
jne 0x18006dc77
sub r10b, 0x10
movzx eax, r10b
and al, dil
mov ecx, 0x38
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, dil
inc r9
dec rsi
inc rsi
jmp 0x18006d7a2
lea rax, [r9 + 9]
cmp rbx, rax
jne 0x18006dbaf
lea edx, [r10 + 0x14]
mov ecx, 0x3a
jmp 0x18006df1e
lea rax, [r9 + 1]
cmp r8, rax
jne 0x18006dca9
lea edx, [r10 - 0x12]
mov ecx, 0x3f
jmp 0x18006df1e
lea rax, [r9 + 2]
cmp r8, rax
jne 0x18006dcd4
add r10b, 0x36
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea edx, [rdi + r10]
sub dl, 0x7a
dec rsi
inc rsi
jmp 0x18006d7a2
lea rax, [r9 + 5]
cmp r8, rax
jne 0x18006dd08
sub r10b, 0x5e
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea edx, [rdi + r10]
sub dl, 0x6e
movzx eax, dl
mov rcx, r13
sub rcx, rax
add rsi, rcx
inc rsi
jmp 0x18006d7a2
lea rax, [r9 + 6]
cmp r8, rax
jne 0x18006dd2a
lea ecx, [r10 - 0x3a]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea edx, [rdi + rcx]
sub dl, 0x6a
jmp 0x18006de41
lea rax, [r9 + 4]
cmp r8, rax
jne 0x18006daa7
add r10b, 0xe
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea edx, [rdi + r10]
sub dl, 0x62
movzx eax, byte [rbp + rsi - 0x40]
add rax, r9
add rsi, rax
inc rsi
jmp 0x18006d7a2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x18006dd94
sub r10b, 0x18
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea edx, [rdi + r10]
sub dl, 0x58
movzx eax, byte [rbp + rsi - 0x40]
add rax, r9
add rsi, rax
inc rsi
jmp 0x18006d7a2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x18006ddb6
lea ecx, [r10 + 0x30]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea edx, [rdi + rcx]
sub dl, 0x50
jmp 0x18006de41
lea rax, [r9 + 7]
cmp r8, rax
jne 0x18006dde4
sub r10b, 0x1c
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea edx, [rdi + r10]
sub dl, 0x3c
inc r9
dec rsi
inc rsi
jmp 0x18006d7a2
lea rax, [r9 + 4]
cmp r8, rax
jne 0x18006dad5
lea ecx, [r10 + 8]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea edx, [rdi + rcx]
sub dl, 0x38
jmp 0x18006df2d
mov byte [rbp + rsi - 0x40], dl
inc rsi
jmp 0x18006d7a2
lea edx, [r10 + 0x50]
movzx eax, dl
and al, dil
add al, al
movzx ecx, dil
sub cl, al
sub dl, 0x30
jmp 0x18006df93
lea ecx, [r10 + 0x74]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea edx, [rcx - 0x2c]
add r10b, 6
movzx eax, dil
and al, r10b
add al, al
movzx ecx, dil
sub cl, al
sub cl, 0x2a
add cl, r10b
movzx eax, cl
mov byte [rbp + rsi - 0x40], al
inc r9
add rax, r9
sub rsi, rax
lea ecx, [rsi - 0x68]
movzx eax, dil
and al, cl
add al, al
sub dil, al
sub dil, 0x28
add dil, cl
mov byte [rbp + rsi - 0x40], dil
inc r8
mov rax, r13
sub rax, r8
add rsi, rax
movzx eax, byte [rbp + rsi - 0x40]
add rax, r9
add rsi, rax
inc rsi
jmp 0x18006d7a2
sub r10b, 0x2e
movzx eax, r10b
and al, dil
mov ecx, 0x21
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, dil
movzx eax, dl
mov rcx, r13
sub rcx, rax
add rsi, rcx
inc rsi
jmp 0x18006d7a2
sub r10b, 0x52
movzx eax, r10b
and al, dil
mov ecx, 0x1f
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
jmp 0x18006dfe2
add r10b, 0x66
movzx eax, r10b
and al, dil
mov ecx, 0x1b
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, dil
dec rsi
inc rsi
jmp 0x18006d7a2
lea edx, [r10 + 0x1e]
mov ecx, 0x17
movzx eax, dl
and al, dil
sub cl, al
add cl, cl
add dl, cl
add dl, dil
sub r10b, 0x42
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
sub r10b, 0x32
add r10b, dil
mov byte [rbp + rsi - 0x40], r10b
inc r9
dec rsi
inc rsi
jmp 0x18006d7a2
lea edx, [rsi - 0x4e]
movzx eax, dl
and al, dil
mov ecx, 0x11
sub cl, al
add cl, cl
add dl, cl
add dl, dil
inc r9
dec rsi
inc rsi
jmp 0x18006d7a2
movzx r10d, sil
lea edx, [r10 + 0x6a]
mov ecx, 0xd
movzx eax, dl
and al, dil
sub cl, al
add cl, cl
add dl, cl
add dl, dil
sub r10b, 0x1e
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
sub r10b, 0x2e
add r10b, dl
add r10b, dil
mov byte [rbp + rsi - 0x40], r10b
add r8, r9
movzx eax, dl
mov rcx, r13
sub rcx, rax
add rsi, rcx
inc rsi
jmp 0x18006d7a2
lea edx, [rsi + 0x46]
movzx eax, dl
and al, dil
mov ecx, 0xb
sub cl, al
add cl, cl
add dl, cl
add dl, dil
add r8, r9
movzx eax, dl
mov rcx, r13
sub rcx, rax
add rsi, rcx
inc rsi
jmp 0x18006d7a2
movabs rax, 0x6aaf211a7d68ecb6
add rax, rsi
and r14b, al
mov ecx, 3
sub cl, r14b
lea edx, [rcx + rcx]
add dl, al
add dl, dil
movzx eax, byte [rbp + rsi - 0x40]
add rax, r9
add rsi, rax
inc rsi
jmp 0x18006d7a2
sub r10b, 0x26
movzx eax, r10b
and al, dil
mov ecx, 5
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, dil
jmp 0x18006d79e
sub r10b, 0x4a
movzx eax, r10b
and al, dil
mov ecx, 3
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, dil
jmp 0x18006d788
lea rbx, [rbp + 0x17fadd8]
jmp 0x18006e085
lea rbx, [rbp + 0x122a76a]
jmp 0x18006e085
lea rbx, [rbp - 0x40]
movzx edx, byte [rsp + 0x30]
lea rcx, [rbp + 0x78]
call fcn.180015cf0
nop
inc r13
cmp byte [rbx + r13], 0
jne 0x18006e094
mov r8, r13
mov rdx, rbx
lea rcx, [rbp + 0x78]
call fcn.180015d20
nop
mov r9, r15
mov r8, r12
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x200]
call fcn.18006e370
nop
mov qword [rbp + 0x130], 0
mov byte [rsp + 0x20], 0
mov r9b, 1
lea r8, [rbp + 0xf8]
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x158]
call fcn.18003ea60
nop
lea rax, [rbp + 0x220]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x1a]
xor ecx, ecx
call qword [sym.imp.shell32.dll_SHGetFolderPathA]
test eax, eax
je 0x18006e11c
xor bl, bl
jmp 0x18006e2e0
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 0x1e0]
call fcn.180015cb0
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x168], xmm0
mov qword [rbp + 0x178], rax
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x168]
call fcn.18006ba30
nop
mov rsi, qword [rbp + 0x168]
mov r14, qword [rbp + 0x170]
cmp rsi, r14
je 0x18006e2c4
movzx ebx, byte [rsp + 0x30]
nop dword [rax]
nop word [rax + rax]
movzx edx, bl
lea rcx, [rbp + 0x98]
call fcn.180015cf0
nop
mov r8d, 3
lea rdx, [0x1804c6598]
lea rcx, [rbp + 0x98]
call fcn.180015d20
nop
lea rax, [rbp + 0x98]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1a0]
lea r8, [rbp + 0x1c0]
mov rdx, rsi
lea rcx, [rbp + 0x180]
call fcn.180060f10
nop
lea rcx, [rbp + 0x98]
call fcn.180034e00
lea rdx, [0x1804c6638]
lea rcx, [rbp + 0x180]
call fcn.18003e8a0
test al, al
jne 0x18006e2ab
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
lea rdx, [rbp + 0x158]
lea rcx, [rbp + 0x10]
call fcn.180033db0
lea rcx, [rbp + 0x10]
call fcn.180033cc0
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
lea rdx, [rbp + 0x158]
lea rcx, [rbp + 0x30]
call fcn.180033db0
lea rcx, [rbp + 0x30]
call fcn.180033d30
lea r9, [rbp + 0x180]
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x138]
call fcn.18003eb80
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
lea rdx, [rbp + 0x158]
lea rcx, [rbp + 0x50]
call fcn.180033db0
lea rcx, [rbp + 0x50]
call fcn.180033cc0
lea rdx, [rbp + 0x50]
mov rcx, rdi
call fcn.180049ee0
test al, al
je 0x18006e34d
mov rcx, rsi
call fcn.18002fbd0
mov rcx, rax
call qword [sym.imp.kernel32.dll_RemoveDirectoryA]
nop
lea rcx, [rbp + 0x180]
call fcn.180034e00
add rsi, 0x20
cmp rsi, r14
jne 0x18006e180
xor bl, bl
lea rcx, [rbp + 0x168]
call fcn.180034870
nop
lea rcx, [rbp + 0x1e0]
call fcn.180034e00
nop
movzx edx, byte [rbp + 0x158]
lea rcx, [rbp + 0x160]
call fcn.180036860
nop
lea rcx, [rbp + 0x200]
call fcn.180034e00
nop
lea rcx, [rbp + 0x1a0]
call fcn.180034e00
nop
lea rcx, [rbp + 0x1c0]
call fcn.180034e00
movzx eax, bl
mov rcx, qword [rbp + 0x330]
xor rcx, rsp
call fcn.180313c00
lea r11, [rsp + 0x440]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [rbp + 0x180]
call fcn.180034e00
mov bl, 1
jmp 0x18006e2c6