Function at 0x180002660
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1b0]
sub rsp, 0x2b0
mov rax, qword [0x180022008]
xor rax, rsp
mov qword [rbp + 0x1a0], rax
xor r14d, r14d
lea rcx, [rbp + 0x80]
call fcn.180002510
nop
mov r11, rax
cmp qword [rax + 0x18], 8
jb 0x1800026b5
mov r11, qword [rax]
mov rax, qword [rax + 0x10]
lea rdx, [r11 + rax*2]
mov rcx, r11
call fcn.180001990
mov r10, rax
cmp rax, rdx
je 0x18000271b
nop dword [rax]
lea rcx, [rdx - 2]
movzx r8d, word [rcx]
cmp r8w, 0x5c
je 0x1800026f0
cmp r8w, 0x2f
je 0x1800026f0
mov rdx, rcx
cmp r10, rcx
jne 0x1800026d0
jmp 0x18000271b
cmp r10, rdx
je 0x18000271b
nop word [rax + rax]
lea rax, [rdx - 2]
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x180002713
cmp cx, 0x2f
jne 0x18000271b
mov rdx, rax
cmp r10, rax
jne 0x180002700
mov qword [rsp + 0x30], r11
sub rdx, r11
sar rdx, 1
mov qword [rsp + 0x38], rdx
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x60]
call fcn.1800046f0
nop
lea r11, [rbp + 0x60]
cmp qword [rbp + 0x78], 8
cmovae r11, qword [rbp + 0x60]
mov rax, qword [rbp + 0x70]
lea rdx, [r11 + rax*2]
mov rcx, r11
call fcn.180001990
mov r10, rax
cmp rax, rdx
je 0x1800027ab
lea rcx, [rdx - 2]
movzx r8d, word [rcx]
cmp r8w, 0x5c
je 0x180002780
cmp r8w, 0x2f
je 0x180002780
mov rdx, rcx
cmp r10, rcx
jne 0x180002760
jmp 0x1800027ab
cmp r10, rdx
je 0x1800027ab
nop word [rax + rax]
lea rax, [rdx - 2]
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x1800027a3
cmp cx, 0x2f
jne 0x1800027ab
mov rdx, rax
cmp r10, rax
jne 0x180002790
mov qword [rsp + 0x30], r11
sub rdx, r11
sar rdx, 1
mov qword [rsp + 0x38], rdx
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x40]
call fcn.1800046f0
nop
lea r11, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae r11, qword [rbp + 0x40]
mov rax, qword [rbp + 0x50]
lea rdx, [r11 + rax*2]
mov rcx, r11
call fcn.180001990
mov r10, rax
cmp rax, rdx
je 0x18000283b
lea rcx, [rdx - 2]
movzx r8d, word [rcx]
cmp r8w, 0x5c
je 0x180002810
cmp r8w, 0x2f
je 0x180002810
mov rdx, rcx
cmp r10, rcx
jne 0x1800027f0
jmp 0x18000283b
cmp r10, rdx
je 0x18000283b
nop word [rax + rax]
lea rax, [rdx - 2]
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x180002833
cmp cx, 0x2f
jne 0x18000283b
mov rdx, rax
cmp r10, rax
jne 0x180002820
mov qword [rsp + 0x30], r11
sub rdx, r11
sar rdx, 1
mov qword [rsp + 0x38], rdx
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x20]
call fcn.1800046f0
nop
lea rax, [rbp + 0x20]
cmp qword [rbp + 0x38], 8
cmovae rax, qword [rbp + 0x20]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp + 0x30]
mov qword [rsp + 0x38], rax
call fcn.180004c00
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rbp + 0x10], xmm0
lea r8, [rbp + 0x10]
mov edx, eax
lea rcx, [rbp + 0xe0]
call fcn.1800049d0
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x1800028d8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800028d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800035f9
call fcn.180005524
movdqa xmm0, xmmword [0x18001ea70]
movdqu xmmword [rbp + 0x30], xmm0
mov word [rbp + 0x20], r14w
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x18000292a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002925
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800035ff
call fcn.180005524
movdqa xmm0, xmmword [0x18001ea70]
movdqu xmmword [rbp + 0x50], xmm0
mov word [rbp + 0x40], r14w
mov rdx, qword [rbp + 0x78]
cmp rdx, 8
jb 0x18000297c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002977
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003605
call fcn.180005524
movdqa xmm0, xmmword [0x18001ea70]
movdqu xmmword [rbp + 0x70], xmm0
mov word [rbp + 0x60], r14w
mov rdx, qword [rbp + 0x98]
cmp rdx, 8
jb 0x1800029d4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800029cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000360b
call fcn.180005524
movdqa xmm0, xmmword [0x18001ea70]
movdqu xmmword [rbp + 0x90], xmm0
mov word [rbp + 0x80], r14w
mov rdi, qword [rbp + 0xf0]
lea rbx, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 0x10
cmovae rbx, qword [rbp + 0xe0]
call fcn.180004c00
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rdi
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rbp + 0xc0]
call fcn.180001840
nop
lea rcx, [rbp + 0xc0]
call fcn.180002400
movzx ebx, al
mov rdx, qword [rbp + 0xd8]
cmp rdx, 8
jb 0x180002a82
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002a7d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003611
call fcn.180005524
test bl, bl
je 0x180002ef5
mov al, 0x1f
mov byte [rsp + 0x70], al
mov dword [rsp + 0x74], 0xf
mov dword [rsp + 0x78], 0x7c705343
mov dword [rsp + 0x7c], 0x5b43737e
mov dword [rbp - 0x80], 0x707c6c76
mov word [rbp - 0x7c], 0x7b6d
mov byte [rbp - 0x7a], al
mov rcx, r14
nop dword [rax + rax]
xor byte [rsp + rcx + 0x78], al
inc rcx
mov eax, dword [rsp + 0x74]
cmp rcx, rax
jae 0x180002ad7
movzx eax, byte [rsp + 0x70]
jmp 0x180002ac0
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x170], xmm1
lea rax, [rsp + 0x78]
mov r13, 0xffffffffffffffff
mov r8, r13
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x180002b00
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x160]
call fcn.180004290
nop
mov al, 0x3d
mov byte [rbp + 0xa0], al
mov dword [rbp + 0xa4], 0x15
movdqa xmm0, xmmword [0x18001eaa0]
movdqu xmmword [rbp + 0xa8], xmm0
mov dword [rbp + 0xb8], 0x444f5c53
mov byte [rbp + 0xbc], al
mov rcx, r14
nop dword [rax]
nop word [rax + rax]
xor byte [rbp + rcx + 0xa8], al
inc rcx
mov eax, dword [rbp + 0xa4]
cmp rcx, rax
jae 0x180002b7e
movzx eax, byte [rbp + 0xa0]
jmp 0x180002b60
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x190], xmm1
lea rax, [rbp + 0xa8]
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x180002ba0
lea rdx, [rbp + 0xa8]
lea rcx, [rbp + 0x180]
call fcn.180004290
nop
mov byte [rbp - 0x40], 0x5b
mov dword [rbp - 0x3c], 0x29
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x40]
call fcn.1800039a0
mov rcx, r14
cmp dword [rbp - 0x3c], r14d
jbe 0x180002bf3
nop
movzx eax, byte [rbp - 0x40]
xor byte [rbp + rcx - 0x38], al
inc rcx
mov eax, dword [rbp - 0x3c]
cmp rcx, rax
jb 0x180002be0
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x130], xmm1
lea rax, [rbp - 0x38]
mov r8, r13
nop
inc r8
cmp byte [rax + r8], 0
jne 0x180002c10
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0x120]
call fcn.180004290
nop
mov byte [rbp - 0x40], 0x79
mov dword [rbp - 0x3c], 0x2b
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x40]
call fcn.180003850
mov rcx, r14
cmp dword [rbp - 0x3c], r14d
jbe 0x180002c63
nop dword [rax]
movzx eax, byte [rbp - 0x40]
xor byte [rbp + rcx - 0x38], al
inc rcx
mov eax, dword [rbp - 0x3c]
cmp rcx, rax
jb 0x180002c50
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x150], xmm1
lea rax, [rbp - 0x38]
mov r8, r13
nop
inc r8
cmp byte [rax + r8], 0
jne 0x180002c80
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0x140]
call fcn.180004290
nop
mov rax, r14
mov qword [rbp - 8], rax
mov edx, 0x16
movabs rcx, 0x7fffffffffffffff
shl rax, 5
mov qword [rbp], rax
lea rsi, [rbp + 0x160]
add rsi, rax
mov r15, qword [rbp + 0xf0]
mov r12, qword [rsi + 0x10]
mov rax, rcx
sub rax, r15
cmp rax, r12
jb 0x1800035f3
lea r13, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 0x10
cmovae r13, qword [rbp + 0xe0]
cmp qword [rsi + 0x18], 0x10
jb 0x180002cfe
mov rsi, qword [rsi]
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], r14
mov qword [rbp + 0xb8], r14
lea r14, [r15 + r12]
mov ebx, 0xf
lea rdi, [rbp + 0xa0]
cmp r14, rbx
jbe 0x180002da3
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x180002d3c
mov rbx, rcx
jmp 0x180002d44
cmp rbx, 0x16
cmovb rbx, rdx
mov rcx, rbx
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x180002d8b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000361d
mov rcx, rax
call fcn.180005410
test rax, rax
je 0x180003647
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x180002d9c
test rcx, rcx
je 0x180002d9a
call fcn.180005410
mov rdi, rax
jmp 0x180002d9c
xor edi, edi
mov qword [rbp + 0xa0], rdi
mov qword [rbp + 0xb0], r14
mov qword [rbp + 0xb8], rbx
mov r8, r15
mov rdx, r13
mov rcx, rdi
call fcn.18000b170
lea rcx, [rdi + r15]
mov r8, r12
mov rdx, rsi
call fcn.18000b170
mov byte [rdi + r14], 0
mov rdi, qword [rbp + 0xb0]
lea rbx, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0x10
cmovae rbx, qword [rbp + 0xa0]
call fcn.180004c00
mov qword [rbp + 0x10], rbx
mov qword [rbp + 0x18], rdi
lea r8, [rbp + 0x10]
mov edx, eax
lea rcx, [rbp - 0x60]
call fcn.180001840
nop
lea rcx, [rbp - 0x60]
call fcn.180002400
movzx ebx, al
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x180002e5a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002e55
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003623
call fcn.180005524
test bl, bl
jne 0x180002f68
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0x10
jb 0x180002ea3
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002e9e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003647
call fcn.180005524
xor r14d, r14d
mov rax, qword [rbp - 8]
inc rax
mov qword [rbp - 8], rax
cmp rax, 2
jl 0x180002ca2
lea r9, [fcn.180003ae0]
mov edx, 0x20
lea r8d, [rdx - 0x1e]
lea rcx, [rbp + 0x120]
call fcn.18000544c
nop
lea r9, [fcn.180003ae0]
mov edx, 0x20
lea r8d, [rdx - 0x1e]
lea rcx, [rbp + 0x160]
call fcn.18000544c
nop
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0x10
jb 0x180002f36
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002f31
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003617
call fcn.180005524
xor eax, eax
mov rcx, qword [rbp + 0x1a0]
xor rcx, rsp
call fcn.1800053f0
lea r11, [rsp + 0x2b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov al, 0x97
mov byte [rsp + 0x70], al
mov dword [rsp + 0x74], 9
mov dword [rsp + 0x78], 0xfbf6ffcb
mov dword [rsp + 0x7c], 0xfbfbf3b9
mov byte [rbp - 0x80], al
xor r14d, r14d
mov ecx, r14d
nop
xor byte [rsp + rcx + 0x78], al
inc rcx
mov eax, dword [rsp + 0x74]
cmp rcx, rax
jae 0x180002fa7
movzx eax, byte [rsp + 0x70]
jmp 0x180002f90
lea r8, [rsp + 0x78]
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0xc0]
call fcn.180003d20
nop
mov al, 0xb5
mov byte [rsp + 0x30], al
mov dword [rsp + 0x34], 0xc
mov dword [rsp + 0x38], 0xd1c5e0e9
mov dword [rsp + 0x3c], 0x9bd0c1d4
mov dword [rsp + 0x40], 0xb5d0cdd0
mov rcx, r14
nop dword [rax]
xor byte [rsp + rcx + 0x38], al
inc rcx
mov eax, dword [rsp + 0x34]
cmp rcx, rax
jae 0x180003007
movzx eax, byte [rsp + 0x30]
jmp 0x180002ff0
lea r8, [rsp + 0x38]
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x100]
call fcn.180003d20
nop
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx + 0x18]
mov rcx, qword [rax + 0x20]
mov rax, qword [rcx]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
mov al, 0xd3
mov byte [rsp + 0x50], al
mov dword [rsp + 0x54], 0xd
mov dword [rsp + 0x58], 0xb7b2bc9f
mov dword [rsp + 0x5c], 0xa1b1ba9f
mov dword [rsp + 0x60], 0x92aaa1b2
mov byte [rsp + 0x64], al
mov rcx, r14
nop dword [rax]
xor byte [rsp + rcx + 0x58], al
inc rcx
mov eax, dword [rsp + 0x54]
cmp rcx, rax
jae 0x180003087
movzx eax, byte [rsp + 0x50]
jmp 0x180003070
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], r14
lea rax, [rsp + 0x58]
mov r13, 0xffffffffffffffff
mov r8, r13
inc r8
cmp byte [rax + r8], 0
jne 0x1800030a5
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x60]
call fcn.180004290
lea rax, [rbp - 0x60]
mov qword [rsp + 0x30], rax
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], rbx
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x30]
call fcn.180003b80
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x180003117
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003112
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003629
call fcn.180005524
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
mov al, 0xf1
mov byte [rsp + 0x70], al
mov dword [rsp + 0x74], 0xb
mov dword [rsp + 0x78], 0x9c9d8384
mov dword [rsp + 0x7c], 0x95df9f9e
mov word [rbp - 0x80], 0x9d9d
mov byte [rbp - 0x7e], al
mov rcx, r14
nop dword [rax]
nop word [rax + rax]
xor byte [rsp + rcx + 0x78], al
inc rcx
mov eax, dword [rsp + 0x74]
cmp rcx, rax
jae 0x180003177
movzx eax, byte [rsp + 0x70]
jmp 0x180003160
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 0x10
cmovae rdx, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp - 0x40], rax
lea rcx, [rsp + 0x78]
call rax
mov rdi, rax
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1800031d8
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800031d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003629
call fcn.180005524
mov al, 0x10
mov byte [rsp + 0x50], al
mov dword [rsp + 0x54], 0x13
movdqa xmm0, xmmword [0x18001eab0]
movdqu xmmword [rsp + 0x58], xmm0
mov word [rsp + 0x68], 0x5175
mov byte [rsp + 0x6a], al
mov rcx, r14
nop dword [rax]
nop word [rax + rax]
xor byte [rsp + rcx + 0x58], al
inc rcx
mov eax, dword [rsp + 0x54]
cmp rcx, rax
jae 0x180003227
movzx eax, byte [rsp + 0x50]
jmp 0x180003210
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], r14
lea rax, [rsp + 0x58]
mov r8, r13
nop
inc r8
cmp byte [rax + r8], 0
jne 0x180003240
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x60]
call fcn.180004290
lea rax, [rbp - 0x60]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], rdi
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x80]
call fcn.180003b80
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x1800032b4
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800032af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000362f
call fcn.180005524
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
lea rbx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0x10
cmovae rbx, qword [rbp + 0xc0]
mov byte [rbp - 0x40], 0x2e
mov dword [rbp - 0x3c], 0x28
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x40]
call fcn.180003710
mov rcx, r14
cmp dword [rbp - 0x3c], r14d
jbe 0x180003313
nop dword [rax]
movzx eax, byte [rbp - 0x40]
xor byte [rbp + rcx - 0x38], al
inc rcx
mov eax, dword [rbp - 0x3c]
cmp rcx, rax
jb 0x180003300
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae rdx, qword [rbp - 0x80]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x20], r14d
xor r9d, r9d
mov r8, rbx
lea rdx, [rbp - 0x38]
xor ecx, ecx
call rax
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x180003380
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000337b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000362f
call fcn.180005524
mov al, 0x4c
mov byte [rsp + 0x50], al
mov dword [rsp + 0x54], 0x13
movdqa xmm0, xmmword [0x18001ea90]
movdqu xmmword [rsp + 0x58], xmm0
mov word [rsp + 0x68], 0xd29
mov byte [rsp + 0x6a], al
mov rcx, r14
nop word [rax + rax]
xor byte [rsp + rcx + 0x58], al
inc rcx
mov eax, dword [rsp + 0x54]
cmp rcx, rax
jae 0x1800033c7
movzx eax, byte [rsp + 0x50]
jmp 0x1800033b0
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], r14
lea rax, [rsp + 0x58]
mov r8, r13
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1800033e0
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x60]
call fcn.180004290
lea rax, [rbp - 0x60]
mov qword [rsp + 0x30], rax
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], rdi
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x30]
call fcn.180003b80
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x180003452
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000344d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003635
call fcn.180005524
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
lea rdi, [rbp + 0x100]
cmp qword [rbp + 0x118], 0x10
cmovae rdi, qword [rbp + 0x100]
lea rbx, [rbp + 0x120]
add rbx, qword [rbp]
cmp qword [rbx + 0x18], 0x10
jb 0x18000348e
mov rbx, qword [rbx]
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 0x10
cmovae rdx, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp - 0x40], rax
mov dword [rsp + 0x20], r14d
xor r9d, r9d
mov r8, rdi
mov rdx, rbx
xor ecx, ecx
call rax
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1800034f9
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800034f3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003635
call fcn.180005524
nop
mov rdx, qword [rbp + 0x118]
cmp rdx, 0x10
jb 0x18000353a
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003535
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000363b
call fcn.180005524
mov qword [rbp + 0x110], r14
mov qword [rbp + 0x118], 0xf
mov byte [rbp + 0x100], 0
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0x10
jb 0x180003594
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000358f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003641
call fcn.180005524
mov qword [rbp + 0xd0], r14
mov qword [rbp + 0xd8], 0xf
mov byte [rbp + 0xc0], 0
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0x10
jb 0x180002ea6
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800035e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003647
call fcn.180005524
jmp 0x180002ea6
call fcn.1800011a0
nop
call fcn.18000bbec
nop
call fcn.18000bbec
nop
call fcn.18000bbec
nop
call fcn.18000bbec
int3
call fcn.18000bbec
nop
call fcn.18000bbec
nop
call fcn.180001100
nop
call fcn.18000bbec
nop
call fcn.18000bbec
int3
call fcn.18000bbec
int3
call fcn.18000bbec
nop
call fcn.18000bbec
nop
call fcn.18000bbec
nop
call fcn.18000bbec
int3