Function at 0x18005e260
Capabilities:
Encode data using xor

Disassembly:
mov word [rsp + 0x18], r8w
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x458]
sub rsp, 0x558
xor r13d, r13d
mov r14, rdx
cmp byte [rcx + 0x7d], 4
mov r15, rcx
jne 0x18005f276
mov rax, qword gs:[0x58]
lea r14, [0x180286970]
mov r10d, dword [0x1802848b4]
movabs rsi, 0xaaaaaaaaaaaaaaab
mov r9d, 4
mov rdi, qword [rax + r10*8]
add rdi, r9
mov eax, dword [rdi]
cmp dword [0x18028aed0], eax
jle 0x18005e548
lea rcx, [0x18028aed0]
call fcn.180249e18
cmp dword [0x18028aed0], 0xffffffff
jne 0x18005e548
xorps xmm0, xmm0
mov qword [0x180286978], r13
xorps xmm1, xmm1
movdqa xmmword [0x180286980], xmm0
mov ecx, 0x118
movdqa xmmword [0x180286990], xmm1
movdqa xmmword [0x1802869b0], xmm0
movdqa xmmword [0x1802869c0], xmm1
movdqa xmmword [0x1802869d0], xmm0
movdqa xmmword [0x1802869e0], xmm1
mov qword [0x1802869a0], r13
mov qword [0x180286970], r14
mov qword [0x1802869a8], r14
mov qword [0x1802869f0], r13
mov word [0x18028873c], r13w
mov word [0x18028a484], r13w
mov qword [0x18028a498], r13
mov qword [0x18028a4a0], r13
call fcn.180249f28
mov dword [rsp + 0x7b], 0xf6540ee6
mov dword [rsp + 0x7f], 0x14d710a8
mov dword [rbp - 0x7d], 0xfd6e6259
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [0x18028a498], rax
mov dword [0x18028a488], r13d
mov qword [0x18028a490], r13
mov word [rbp - 0x79], 0x83
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx r8d, byte [rsp + rax + 0x7c]
mov rax, rsi
mul rcx
shr rdx, 4
movzx eax, dl
add al, al
add dl, al
mov rax, qword [rsp + 0x30]
shl dl, 3
sub cl, dl
mov edx, 0x736e164d
sar edx, cl
xor dl, r8b
mov byte [rsp + rax + 0x7c], dl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0xc
jb 0x18005e3c0
mov byte [rbp - 0x78], r13b
call fcn.1800015c0
mov ecx, dword [rdi]
mov rbx, rax
cmp dword [0x180286968], ecx
jle 0x18005e456
lea rcx, [0x180286968]
call fcn.180249e18
cmp dword [0x180286968], 0xffffffff
jne 0x18005e456
mov rcx, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x18028a9f8], rcx
lea rcx, [0x180286968]
call fcn.180249db8
mov eax, dword [rdi]
cmp dword [0x18028a99c], eax
jle 0x18005e48f
lea rcx, [0x18028a99c]
call fcn.180249e18
cmp dword [0x18028a99c], 0xffffffff
jne 0x18005e48f
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x18028a99c]
mov qword [0x18028a9a0], rax
call fcn.180249db8
mov rax, qword [0x18028a9f8]
mov rcx, rbx
call rax
mov r8, qword [0x18028a9a0]
lea rdx, [rsp + 0x7c]
mov rcx, rax
call r8
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rax
mov ecx, 0x28
mov qword [0x18028a4b8], rax
mov qword [0x18028a4c8], r13
mov qword [0x18028a4d0], r13
call fcn.180249f28
xorps xmm0, xmm0
lea rcx, [0x180269f20]
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [0x18028a4c8], rax
movdqa xmmword [0x18028a4e0], xmm0
mov qword [0x18028a4f0], r13
mov qword [0x18028a4a8], r13
mov qword [0x18028a4b0], r13
mov byte [0x18028a4c0], r13b
mov dword [0x18028a4d8], 0x10000
mov dword [0x18028a4f8], r13d
mov qword [0x18028a910], r13
mov qword [0x18028a918], r13
mov byte [0x18028a920], r13b
call fcn.18024a2cc
lea rcx, [0x18028aed0]
call fcn.180249db8
lea rcx, [0x18028a4b8]
call fcn.180001a60
mov eax, dword [rdi]
cmp dword [0x18028aed0], eax
jle 0x18005e7c7
lea rcx, [0x18028aed0]
call fcn.180249e18
cmp dword [0x18028aed0], 0xffffffff
jne 0x18005e7c7
xorps xmm0, xmm0
mov qword [0x180286978], r13
xorps xmm1, xmm1
movdqa xmmword [0x180286980], xmm0
mov ecx, 0x118
movdqa xmmword [0x180286990], xmm1
movdqa xmmword [0x1802869b0], xmm0
movdqa xmmword [0x1802869c0], xmm1
movdqa xmmword [0x1802869d0], xmm0
movdqa xmmword [0x1802869e0], xmm1
mov qword [0x1802869a0], r13
mov qword [0x180286970], r14
mov qword [0x1802869a8], r14
mov qword [0x1802869f0], r13
mov word [0x18028873c], r13w
mov word [0x18028a484], r13w
mov qword [0x18028a498], r13
mov qword [0x18028a4a0], r13
call fcn.180249f28
mov dword [rbp - 0x77], 0xf6540ee6
mov dword [rbp - 0x73], 0x14d710a8
mov dword [rbp - 0x6f], 0xfd6e6259
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [0x18028a498], rax
mov dword [0x18028a488], r13d
mov qword [0x18028a490], r13
mov word [rbp - 0x6b], 0x83
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
nop dword [rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx r8d, byte [rbp + rax - 0x76]
mov rax, rsi
mul rcx
shr rdx, 4
movzx eax, dl
add al, al
add dl, al
mov rax, qword [rsp + 0x30]
shl dl, 3
sub cl, dl
mov edx, 0x736e164d
sar edx, cl
xor dl, r8b
mov byte [rbp + rax - 0x76], dl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0xc
jb 0x18005e640
mov byte [rbp - 0x6a], r13b
call fcn.1800015c0
mov ecx, dword [rdi]
mov rbx, rax
cmp dword [0x180286968], ecx
jle 0x18005e6d6
lea rcx, [0x180286968]
call fcn.180249e18
cmp dword [0x180286968], 0xffffffff
jne 0x18005e6d6
mov rcx, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x18028a9f8], rcx
lea rcx, [0x180286968]
call fcn.180249db8
mov eax, dword [rdi]
cmp dword [0x18028a99c], eax
jle 0x18005e70f
lea rcx, [0x18028a99c]
call fcn.180249e18
cmp dword [0x18028a99c], 0xffffffff
jne 0x18005e70f
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x18028a99c]
mov qword [0x18028a9a0], rax
call fcn.180249db8
mov rax, qword [0x18028a9f8]
mov rcx, rbx
call rax
mov r8, qword [0x18028a9a0]
lea rdx, [rbp - 0x76]
mov rcx, rax
call r8
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rax
mov ecx, 0x28
mov qword [0x18028a4b8], rax
mov qword [0x18028a4c8], r13
mov qword [0x18028a4d0], r13
call fcn.180249f28
xorps xmm0, xmm0
lea rcx, [0x180269f20]
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [0x18028a4c8], rax
movdqa xmmword [0x18028a4e0], xmm0
mov qword [0x18028a4f0], r13
mov qword [0x18028a4a8], r13
mov qword [0x18028a4b0], r13
mov byte [0x18028a4c0], r13b
mov dword [0x18028a4d8], 0x10000
mov dword [0x18028a4f8], r13d
mov qword [0x18028a910], r13
mov qword [0x18028a918], r13
mov byte [0x18028a920], r13b
call fcn.18024a2cc
lea rcx, [0x18028aed0]
call fcn.180249db8
mov edx, dword [r15 + 0x84]
mov rcx, r14
call fcn.180059470
mov r12, rax
test rax, rax
je 0x18005efd9
mov ecx, dword [r15 + 0x1b4]
mov esi, 4
movzx eax, word [rbp + 0x4b0]
mov r15d, 2
mov rbx, qword [rbp + 0x4a8]
bswap ecx
mov dword [rbp - 0x2c], ecx
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x30], r13
mov rcx, qword [rsp + 0x30]
rol ax, 8
mov word [rbp + 0x4b0], ax
mov word [rbp + 0x4b8], ax
mov rax, qword [rsp + 0x40]
add rcx, rax
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x40], r15
mov rcx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x30]
add rcx, rax
mov qword [rsp + 0x40], rcx
mov ecx, r13d
cmp byte [rbx], al
je 0x18005e85f
inc ecx
cmp byte [rcx + rbx], al
jne 0x18005e858
mov rax, qword [rsp + 0x40]
xorps xmm0, xmm0
mov r14d, ecx
add r14, rax
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rbp], r13
movdqu xmmword [rbp - 0x10], xmm0
add r14, rax
je 0x18005e8c2
movabs rax, 0x7fffffffffffffff
cmp r14, rax
ja 0x18005ff93
mov rdx, r14
lea rcx, [rbp - 0x10]
call fcn.18023c020
mov rbx, qword [rbp - 0x10]
mov r8, r14
mov rcx, rbx
xor edx, edx
call fcn.18024b360
lea rax, [rbx + r14]
mov rbx, qword [rbp + 0x4a8]
mov qword [rbp - 8], rax
mov qword [rsp + 0x38], rsi
lea rdx, [rbp - 0x2c]
mov qword [rsp + 0x40], r13
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x40]
add rcx, rax
mov qword [rsp + 0x38], rcx
mov r8, qword [rsp + 0x38]
mov rcx, qword [rbp - 0x10]
call fcn.18024af30
movzx r8d, word [rbp + 0x4b0]
mov qword [rsp + 0x40], 1
mov qword [rsp + 0x38], 3
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x40]
add rcx, rax
movzx eax, byte [rbp + 0x4b9]
mov qword [rsp + 0x38], rcx
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rbp - 0x10]
mov byte [rdx + rcx], r8b
mov byte [rdx + rcx + 1], al
mov rdx, rbx
mov qword [rsp + 0x40], 1
mov qword [rsp + 0x38], 3
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x40]
add rcx, rax
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x40], r13
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x40]
add rcx, rax
mov qword [rsp + 0x38], rcx
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x38]
mov r8, qword [rbp - 0x10]
add rcx, rax
add r8, rcx
nop dword [rax + rax]
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
mov byte [r8], al
lea r8, [r8 + 1]
test al, al
jne 0x18005e990
mov qword [rsp + 0x40], 1
mov edx, r13d
mov qword [rsp + 0x38], 3
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x40]
add rcx, rax
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], r13
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x40]
add rcx, rax
mov qword [rsp + 0x38], rcx
cmp byte [rbx], r13b
je 0x18005e9f8
nop word [rax + rax]
inc edx
cmp byte [rdx + rbx], r13b
jne 0x18005e9f0
mov r8, qword [rsp + 0x38]
mov rcx, r12
mov rax, qword [rsp + 0x30]
mov rbx, qword [rbp - 0x10]
add r8w, ax
add r8w, dx
mov r9, rbx
mov dl, 9
call fcn.180050c60
mov eax, dword [rdi]
cmp dword [0x18028aed0], eax
jle 0x18005ecad
lea rcx, [0x18028aed0]
call fcn.180249e18
cmp dword [0x18028aed0], 0xffffffff
lea r15, [0x180286970]
jne 0x18005ecb4
xorps xmm0, xmm0
mov qword [0x180286978], r13
xorps xmm1, xmm1
movdqa xmmword [0x180286980], xmm0
mov ecx, 0x118
movdqa xmmword [0x180286990], xmm1
movdqa xmmword [0x1802869b0], xmm0
movdqa xmmword [0x1802869c0], xmm1
movdqa xmmword [0x1802869d0], xmm0
movdqa xmmword [0x1802869e0], xmm1
mov qword [0x1802869a0], r13
mov qword [0x180286970], r15
mov qword [0x1802869a8], r15
mov qword [0x1802869f0], r13
mov word [0x18028873c], r13w
mov word [0x18028a484], r13w
mov qword [0x18028a498], r13
mov qword [0x18028a4a0], r13
call fcn.180249f28
mov dword [rbp - 0x69], 0xf6540ee6
movabs rsi, 0xaaaaaaaaaaaaaaab
mov dword [rbp - 0x65], 0x14d710a8
mov dword [rbp - 0x61], 0xfd6e6259
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [0x18028a498], rax
mov dword [0x18028a488], r13d
mov qword [0x18028a490], r13
mov word [rbp - 0x5d], 0x83
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx r8d, byte [rbp + rax - 0x68]
mov rax, rsi
mul rcx
shr rdx, 4
movzx eax, dl
add al, al
add dl, al
mov rax, qword [rsp + 0x30]
shl dl, 3
sub cl, dl
mov edx, 0x736e164d
sar edx, cl
xor dl, r8b
mov byte [rbp + rax - 0x68], dl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0xc
jb 0x18005eb20
mov byte [rbp - 0x5c], r13b
call fcn.1800015c0
mov ecx, dword [rdi]
mov rbx, rax
cmp dword [0x180286968], ecx
jle 0x18005ebb6
lea rcx, [0x180286968]
call fcn.180249e18
cmp dword [0x180286968], 0xffffffff
jne 0x18005ebb6
mov rcx, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x18028a9f8], rcx
lea rcx, [0x180286968]
call fcn.180249db8
mov eax, dword [rdi]
cmp dword [0x18028a99c], eax
jle 0x18005ebef
lea rcx, [0x18028a99c]
call fcn.180249e18
cmp dword [0x18028a99c], 0xffffffff
jne 0x18005ebef
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x18028a99c]
mov qword [0x18028a9a0], rax
call fcn.180249db8
mov rax, qword [0x18028a9f8]
mov rcx, rbx
call rax
mov r8, qword [0x18028a9a0]
lea rdx, [rbp - 0x68]
mov rcx, rax
call r8
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rax
mov ecx, 0x28
mov qword [0x18028a4b8], rax
mov qword [0x18028a4c8], r13
mov qword [0x18028a4d0], r13
call fcn.180249f28
xorps xmm0, xmm0
lea rcx, [0x180269f20]
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [0x18028a4c8], rax
movdqa xmmword [0x18028a4e0], xmm0
mov qword [0x18028a4f0], r13
mov qword [0x18028a4a8], r13
mov qword [0x18028a4b0], r13
mov byte [0x18028a4c0], r13b
mov dword [0x18028a4d8], 0x10000
mov dword [0x18028a4f8], r13d
mov qword [0x18028a910], r13
mov qword [0x18028a918], r13
mov byte [0x18028a920], r13b
call fcn.18024a2cc
lea rcx, [0x18028aed0]
call fcn.180249db8
mov rbx, qword [rbp - 0x10]
jmp 0x18005ecbe
lea r15, [0x180286970]
movabs rsi, 0xaaaaaaaaaaaaaaab
mov r14, qword [rbp + 0x4a0]
lea rdx, [rbp + 0x4a0]
lea rcx, [0x180286978]
mov qword [rbp + 0x20], r14
mov eax, dword [r14 + 0x1b4]
mov dword [rbp + 0x4a0], eax
call fcn.1802393f0
mov rdx, qword [0x180286998]
cmp rdx, qword [0x1802869a0]
je 0x18005ed06
mov qword [rdx], r14
add qword [0x180286998], 8
jmp 0x18005ed16
lea r8, [rbp + 0x20]
lea rcx, [0x180286990]
call fcn.18023ee70
mov eax, dword [rdi]
cmp dword [0x18028aed0], eax
jle 0x18005ef8b
lea rcx, [0x18028aed0]
call fcn.180249e18
cmp dword [0x18028aed0], 0xffffffff
jne 0x18005ef8b
xorps xmm0, xmm0
mov qword [0x180286978], r13
xorps xmm1, xmm1
movdqa xmmword [0x180286980], xmm0
mov ecx, 0x118
movdqa xmmword [0x180286990], xmm1
movdqa xmmword [0x1802869b0], xmm0
movdqa xmmword [0x1802869c0], xmm1
movdqa xmmword [0x1802869d0], xmm0
movdqa xmmword [0x1802869e0], xmm1
mov qword [0x1802869a0], r13
mov qword [0x180286970], r15
mov qword [0x1802869a8], r15
mov qword [0x1802869f0], r13
mov word [0x18028873c], r13w
mov word [0x18028a484], r13w
mov qword [0x18028a498], r13
mov qword [0x18028a4a0], r13
call fcn.180249f28
mov dword [rbp - 0x5b], 0xf6540ee6
mov dword [rbp - 0x57], 0x14d710a8
mov dword [rbp - 0x53], 0xfd6e6259
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [0x18028a498], rax
mov dword [0x18028a488], r13d
mov qword [0x18028a490], r13
mov word [rbp - 0x4f], 0x83
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
nop
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx r8d, byte [rbp + rax - 0x5a]
mov rax, rsi
mul rcx
shr rdx, 4
movzx eax, dl
add al, al
add dl, al
mov rax, qword [rsp + 0x30]
shl dl, 3
sub cl, dl
mov edx, 0x736e164d
sar edx, cl
xor dl, r8b
mov byte [rbp + rax - 0x5a], dl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0xc
jb 0x18005ee00
mov byte [rbp - 0x4e], r13b
call fcn.1800015c0
mov edx, dword [rdi]
mov rbx, rax
cmp dword [0x180286968], edx
jle 0x18005ee96
lea rcx, [0x180286968]
call fcn.180249e18
cmp dword [0x180286968], 0xffffffff
jne 0x18005ee96
mov rdx, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, [0x180286968]
mov qword [0x18028a9f8], rdx
call fcn.180249db8
mov eax, dword [rdi]
cmp dword [0x18028a99c], eax
jle 0x18005eecf
lea rcx, [0x18028a99c]
call fcn.180249e18
cmp dword [0x18028a99c], 0xffffffff
jne 0x18005eecf
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x18028a99c]
mov qword [0x18028a9a0], rax
call fcn.180249db8
mov rax, qword [0x18028a9f8]
mov rcx, rbx
call rax
mov r8, qword [0x18028a9a0]
lea rdx, [rbp - 0x5a]
mov rcx, rax
call r8
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rax
mov ecx, 0x28
mov qword [0x18028a4b8], rax
mov qword [0x18028a4c8], r13
mov qword [0x18028a4d0], r13
call fcn.180249f28
xorps xmm0, xmm0
lea rcx, [0x180269f20]
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [0x18028a4c8], rax
movdqa xmmword [0x18028a4e0], xmm0
mov qword [0x18028a4f0], r13
mov qword [0x18028a4a8], r13
mov qword [0x18028a4b0], r13
mov byte [0x18028a4c0], r13b
mov dword [0x18028a4d8], 0x10000
mov dword [0x18028a4f8], r13d
mov qword [0x18028a910], r13
mov qword [0x18028a918], r13
mov byte [0x18028a920], r13b
call fcn.18024a2cc
lea rcx, [0x18028aed0]
call fcn.180249db8
mov rbx, qword [rbp - 0x10]
lea rcx, [0x18028a4b8]
call fcn.180001bf0
test rbx, rbx
je 0x18005ff79
mov rdx, qword [rbp]
mov rax, rbx
sub rdx, rbx
cmp rdx, 0x1000
jb 0x18005efcc
mov rbx, qword [rbx - 8]
add rdx, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005ff8d
mov rcx, rbx
call fcn.180249cb8
jmp 0x18005ff79
mov eax, dword [rdi]
cmp dword [0x18028aed0], eax
jle 0x18005f257
lea rcx, [0x18028aed0]
call fcn.180249e18
cmp dword [0x18028aed0], 0xffffffff
jne 0x18005f257
xorps xmm0, xmm0
mov qword [0x180286978], r13
xorps xmm1, xmm1
movdqa xmmword [0x180286980], xmm0
mov ecx, 0x118
movdqa xmmword [0x180286990], xmm1
movdqa xmmword [0x1802869b0], xmm0
movdqa xmmword [0x1802869c0], xmm1
movdqa xmmword [0x1802869d0], xmm0
movdqa xmmword [0x1802869e0], xmm1
mov qword [0x1802869a0], r13
mov qword [0x180286970], r14
mov qword [0x1802869a8], r14
mov qword [0x1802869f0], r13
mov word [0x18028873c], r13w
mov word [0x18028a484], r13w
mov qword [0x18028a498], r13
mov qword [0x18028a4a0], r13
call fcn.180249f28
mov dword [rbp - 0x4d], 0xf6540ee6
mov dword [rbp - 0x49], 0x14d710a8
mov dword [rbp - 0x45], 0xfd6e6259
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [0x18028a498], rax
mov dword [0x18028a488], r13d
mov qword [0x18028a490], r13
mov word [rbp - 0x41], 0x83
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx r8d, byte [rbp + rax - 0x4c]
mov rax, rsi
mul rcx
shr rdx, 4
movzx eax, dl
add al, al
add dl, al
mov rax, qword [rsp + 0x30]
shl dl, 3
sub cl, dl
mov edx, 0x736e164d
sar edx, cl
xor dl, r8b
mov byte [rbp + rax - 0x4c], dl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0xc
jb 0x18005f0d0
mov byte [rbp - 0x40], r13b
call fcn.1800015c0
mov ecx, dword [rdi]
mov rbx, rax
cmp dword [0x180286968], ecx
jle 0x18005f166
lea rcx, [0x180286968]
call fcn.180249e18
cmp dword [0x180286968], 0xffffffff
jne 0x18005f166
mov rcx, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x18028a9f8], rcx
lea rcx, [0x180286968]
call fcn.180249db8
mov eax, dword [rdi]
cmp dword [0x18028a99c], eax
jle 0x18005f19f
lea rcx, [0x18028a99c]
call fcn.180249e18
cmp dword [0x18028a99c], 0xffffffff
jne 0x18005f19f
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x18028a99c]
mov qword [0x18028a9a0], rax
call fcn.180249db8
mov rax, qword [0x18028a9f8]
mov rcx, rbx
call rax
mov r8, qword [0x18028a9a0]
lea rdx, [rbp - 0x4c]
mov rcx, rax
call r8
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rax
mov ecx, 0x28
mov qword [0x18028a4b8], rax
mov qword [0x18028a4c8], r13
mov qword [0x18028a4d0], r13
call fcn.180249f28
xorps xmm0, xmm0
lea rcx, [0x180269f20]
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [0x18028a4c8], rax
movdqa xmmword [0x18028a4e0], xmm0
mov qword [0x18028a4f0], r13
mov qword [0x18028a4a8], r13
mov qword [0x18028a4b0], r13
mov byte [0x18028a4c0], r13b
mov dword [0x18028a4d8], 0x10000
mov dword [0x18028a4f8], r13d
mov qword [0x18028a910], r13
mov qword [0x18028a918], r13
mov byte [0x18028a920], r13b
call fcn.18024a2cc
lea rcx, [0x18028aed0]
call fcn.180249db8
lea rcx, [0x18028a4b8]
call fcn.180001bf0
mov dl, 0x5c
mov rcx, r15
call fcn.18005ffa0
mov rcx, qword [r15 + 0x20]
jmp 0x18005ff74
movzx eax, byte [rcx + 0x182]
movabs r12, 0xaaaaaaaaaaaaaaab
mov byte [rbp + 0x4b8], al
mov rax, qword [0x180286930]
mov byte [rcx + 0x182], 0
mov dword [rbp - 0x28], 1
mov r10d, 4
test rax, rax
jne 0x18005f3ef
mov byte [rsp + 0x6d], al
mov dword [rsp + 0x61], 0x138eabf4
mov dword [rsp + 0x65], 0xe87d704c
mov dword [rsp + 0x69], 0x8c958aa0
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx r8d, byte [rsp + rax + 0x62]
mov rax, r12
mul rcx
shr rdx, 4
movzx eax, dl
add al, al
add dl, al
mov rax, qword [rsp + 0x30]
shl dl, 3
sub cl, dl
mov edx, 0x203e1c2
sar edx, cl
xor dl, r8b
mov byte [rsp + rax + 0x62], dl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0xb
jb 0x18005f2e0
mov byte [rsp + 0x6d], r13b
call fcn.1800017a0
mov rcx, qword gs:[0x58]
mov rdi, rax
mov r8d, dword [0x1802848b4]
mov edx, r10d
mov rbx, qword [rcx + r8*8]
add rbx, rdx
mov ecx, dword [rbx]
cmp dword [0x180286968], ecx
jle 0x18005f391
lea rcx, [0x180286968]
call fcn.180249e18
cmp dword [0x180286968], 0xffffffff
jne 0x18005f391
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, [0x180286968]
mov qword [0x18028a9f8], rax
call fcn.180249db8
mov eax, dword [rbx]
cmp dword [0x18028a99c], eax
jle 0x18005f3ca
lea rcx, [0x18028a99c]
call fcn.180249e18
cmp dword [0x18028a99c], 0xffffffff
jne 0x18005f3ca
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x18028a99c]
mov qword [0x18028a9a0], rax
call fcn.180249db8
mov rax, qword [0x18028a9f8]
mov rcx, rdi
call rax
mov r8, qword [0x18028a9a0]
lea rdx, [rsp + 0x62]
mov rcx, rax
call r8
mov qword [0x180286930], rax
mov rcx, qword [r15 + 0x90]
lea r8, [rbp - 0x28]
mov edx, 0x8004667e
call rax
movzx edx, byte [r14]
lea r10, [rsp + 0x48]
mov r8, r14
mov qword [rbp + 8], 0x14
mov r15d, 0x61
nop dword [rax + rax]
lea eax, [rdx - 0x30]
movabs r11, 0x100003e01
cmp al, 9
ja 0x18005f5b1
mov ebx, r13d
mov r9d, 0xa
mov ecx, r13d
cmp dl, 0x30
jne 0x18005f470
movzx edx, byte [r8 + 1]
inc r8
lea eax, [rdx - 0x58]
test al, 0xdf
je 0x18005f45f
lea ecx, [r9 - 9]
lea r9d, [rcx + 7]
jmp 0x18005f470
mov r9d, 0x10
inc r8
movzx edx, byte [r8]
nop dword [rax]
lea eax, [rdx - 0x30]
cmp al, 9
ja 0x18005f4a0
cmp r9d, 8
jne 0x18005f488
lea eax, [rdx - 0x38]
cmp al, 1
jbe 0x18005f5b1
mov ecx, r9d
imul ecx, ebx
movsx ebx, dl
add ebx, 0xffffffd0
add ebx, ecx
mov ecx, 1
inc r8
jmp 0x18005f468
cmp r9d, 0x10
jne 0x18005f4e2
lea eax, [rdx - 0x30]
cmp al, 9
jbe 0x18005f4bb
lea eax, [rdx - 0x61]
cmp al, 5
jbe 0x18005f4bb
lea eax, [rdx - 0x41]
cmp al, 5
ja 0x18005f4e2
lea eax, [rdx - 0x61]
mov ecx, 0x41
cmp al, 0x19
movsx edx, dl
mov eax, ebx
cmovbe ecx, r15d
shl eax, 4
sub edx, ecx
mov ecx, 1
lea ebx, [rdx + 0xa]
or ebx, eax
inc r8
jmp 0x18005f468
cmp dl, 0x2e
jne 0x18005f514
lea rax, [rsp + 0x4b]
cmp r10, rax
jae 0x18005f5b1
cmp ebx, 0xff
ja 0x18005f5b1
movzx edx, byte [r8 + 1]
mov byte [r10], bl
inc r10
inc r8
jmp 0x18005f420
cmp dl, 0x20
ja 0x18005f5b1
bt r11, rdx
jae 0x18005f5b1
test ecx, ecx
je 0x18005f5b1
lea rax, [rsp + 0x48]
sub r10d, eax
inc r10d
sub r10d, 2
je 0x18005f592
sub r10d, 1
je 0x18005f574
cmp r10d, 1
jne 0x18005f5a4
cmp ebx, 0xff
ja 0x18005f5b1
movzx eax, byte [rsp + 0x49]
movzx ecx, byte [rsp + 0x48]
shl ecx, 8
or ecx, eax
movzx eax, byte [rsp + 0x4a]
shl ecx, 8
or ecx, eax
shl ecx, 8
or ebx, ecx
jmp 0x18005f5a4
cmp ebx, 0xffff
ja 0x18005f5b1
movzx ecx, byte [rsp + 0x48]
movzx eax, byte [rsp + 0x49]
shl ecx, 8
or ecx, eax
shl ecx, 0x10
or ebx, ecx
jmp 0x18005f5a4
cmp ebx, 0xffffff
ja 0x18005f5b1
movzx eax, byte [rsp + 0x48]
shl eax, 0x18
or ebx, eax
bswap ebx
cmp ebx, 0xffffffff
jne 0x18005f9da
jmp 0x18005f5b6
mov ebx, 0xffffffff
mov rax, qword [0x180285ba0]
test rax, rax
jne 0x18005f6ff
mov byte [rbp - 0x31], al
mov dword [rbp - 0x3f], 0xa1cf332e
mov dword [rbp - 0x3b], 0xe9491a82
mov dword [rbp - 0x37], 0x581d9eac
mov word [rbp - 0x33], 0xabf1
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
nop
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx r8d, byte [rbp + rax - 0x3e]
mov rax, r12
mul rcx
shr rdx, 4
movzx eax, dl
add al, al
add dl, al
mov rax, qword [rsp + 0x30]
shl dl, 3
sub cl, dl
mov edx, 0x5f1ce754
sar edx, cl
xor dl, r8b
mov byte [rbp + rax - 0x3e], dl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0xd
jb 0x18005f5f0
mov byte [rbp - 0x31], r13b
call fcn.1800017a0
mov rcx, qword gs:[0x58]
mov rsi, rax
mov r8d, dword [0x1802848b4]
mov edx, 4
mov rdi, qword [rcx + r8*8]
add rdi, rdx
mov ecx, dword [rdi]
cmp dword [0x180286968], ecx
jle 0x18005f6a2
lea rcx, [0x180286968]
call fcn.180249e18
cmp dword [0x180286968], 0xffffffff
jne 0x18005f6a2
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, [0x180286968]
mov qword [0x18028a9f8], rax
call fcn.180249db8
mov eax, dword [rdi]
cmp dword [0x18028a99c], eax
jle 0x18005f6db
lea rcx, [0x18028a99c]
call fcn.180249e18
cmp dword [0x18028a99c], 0xffffffff
jne 0x18005f6db
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x18028a99c]
mov qword [0x18028a9a0], rax
call fcn.180249db8
mov rax, qword [0x18028a9f8]
mov rcx, rsi
call rax
mov r8, qword [0x18028a9a0]
lea rdx, [rbp - 0x3e]
mov rcx, rax
call r8
mov qword [0x180285ba0], rax
mov rcx, r14
call rax
test rax, rax
je 0x18005f9da
mov rax, qword [rax + 0x18]
lea r8, [0x18028a9a8]
xor dil, dil
mov rsi, r13
mov r14d, 0x57
mov rcx, qword [rax]
mov eax, dword [rcx]
mov dword [rbp - 0x20], eax
mov byte [0x18028a9a8], dil
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rbp + rsi - 0x20]
lea r10, [rbp - 0x30]
nop dword [rax]
mov eax, 0xcccccccd
mul ecx
shr edx, 3
lea eax, [rdx + rdx*4]
add eax, eax
sub ecx, eax
mov eax, 0x30
cmp ecx, 0xa
cmovge eax, r14d
add al, cl
mov ecx, edx
mov byte [r10], al
inc r10
test edx, edx
jg 0x18005f750
lea rax, [rbp - 0x30]
mov byte [r10], r13b
sub r10d, eax
mov r11d, r13d
mov ebx, r10d
shr ebx, 1
je 0x18005f7c8
lea r9, [rbp - 0x30]
nop dword [rax]
nop word [rax + rax]
movzx edx, byte [r9]
lea rcx, [rbp - 0x30]
mov eax, r10d
lea r9, [r9 + 1]
sub eax, r11d
inc r11d
dec eax
add rcx, rax
movzx eax, byte [rcx]
mov byte [r9 - 1], al
mov byte [rcx], dl
cmp r11d, ebx
jb 0x18005f7a0
mov ecx, r13d
test dil, dil
je 0x18005f7d8
inc ecx
cmp byte [rcx + r8], r13b
jne 0x18005f7d0
lea rdx, [rbp - 0x30]
add rcx, r8
nop
movzx eax, byte [rdx]
inc rdx
mov byte [rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x18005f7e0
cmp rsi, 3
jae 0x18005f830
cmp byte [0x18028a9a8], r13b
mov ecx, r13d
je 0x18005f80a
inc ecx
cmp byte [rcx + r8], r13b
jne 0x18005f802
lea rdx, [0x18027a378]
add rcx, r8
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rdx]
inc rdx
mov byte [rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x18005f820
inc rsi
cmp rsi, 4
jge 0x18005f845
movzx edi, byte [0x18028a9a8]
jmp 0x18005f740
movzx edx, byte [0x18028a9a8]
lea r10, [rsp + 0x4c]
lea eax, [rdx - 0x30]
cmp al, 9
ja 0x18005f9d5
mov ebx, r13d
mov r9d, 0xa
mov ecx, r13d
cmp dl, 0x30
jne 0x18005f893
movzx edx, byte [r8 + 1]
inc r8
lea eax, [rdx - 0x58]
test al, 0xdf
je 0x18005f886
lea ecx, [r9 - 9]
lea r9d, [rcx + 7]
jmp 0x18005f893
mov r9d, 0x10
inc r8
movzx edx, byte [r8]
lea eax, [rdx - 0x30]
cmp al, 9
ja 0x18005f8c3
cmp r9d, 8
jne 0x18005f8ab
lea eax, [rdx - 0x38]
cmp al, 1
jbe 0x18005f9d5
mov ecx, r9d
imul ecx, ebx
movsx ebx, dl
add ebx, 0xffffffd0
add ebx, ecx
mov ecx, 1
inc r8
jmp 0x18005f88f
cmp r9d, 0x10
jne 0x18005f905
lea eax, [rdx - 0x30]
cmp al, 9
jbe 0x18005f8de
lea eax, [rdx - 0x61]
cmp al, 5
jbe 0x18005f8de
lea eax, [rdx - 0x41]
cmp al, 5
ja 0x18005f905
lea eax, [rdx - 0x61]
mov ecx, 0x41
cmp al, 0x19
movsx edx, dl
mov eax, ebx
cmovbe ecx, r15d
shl eax, 4
sub edx, ecx
mov ecx, 1
lea ebx, [rdx + 0xa]
or ebx, eax
inc r8
jmp 0x18005f88f
cmp dl, 0x2e
jne 0x18005f937
lea rax, [rsp + 0x4f]
cmp r10, rax
jae 0x18005f9d5
cmp ebx, 0xff
ja 0x18005f9d5
movzx edx, byte [r8 + 1]
mov byte [r10], bl
inc r10
inc r8
jmp 0x18005f851
cmp dl, 0x20
ja 0x18005f9d5
movabs rax, 0x100003e01
bt rax, rdx
jae 0x18005f9d5
test ecx, ecx
je 0x18005f9d5
lea rax, [rsp + 0x4c]
sub r10d, eax
inc r10d
sub r10d, 2
je 0x18005f9bf
sub r10d, 1
je 0x18005f99f
cmp r10d, 1
jne 0x18005f9d1
cmp ebx, 0xff
ja 0x18005f9d5
movzx eax, byte [rsp + 0x4d]
movzx ecx, byte [rsp + 0x4c]
shl ecx, 8
or ecx, eax
movzx eax, byte [rsp + 0x4e]
shl ecx, 8
or ecx, eax
shl ecx, 8
or ebx, ecx
bswap ebx
jmp 0x18005f9da
cmp ebx, 0xffff
ja 0x18005f9d5
movzx ecx, byte [rsp + 0x4c]
movzx eax, byte [rsp + 0x4d]
shl ecx, 8
or ecx, eax
shl ecx, 0x10
or ebx, ecx
bswap ebx
jmp 0x18005f9da
cmp ebx, 0xffffff
ja 0x18005f9d5
movzx eax, byte [rsp + 0x4c]
shl eax, 0x18
or ebx, eax
bswap ebx
jmp 0x18005f9da
mov ebx, 0xffffffff
movzx eax, word [rbp + 0x4b0]
mov r15d, 2
mov word [rbp + 0x10], r15w
xor edx, edx
mov dword [rbp + 0x14], ebx
rol ax, 8
mov word [rbp + 0x12], ax
mov qword [rsp + 0x40], 3
mov qword [rsp + 0x38], 5
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x40]
add rcx, rax
mov qword [rsp + 0x38], rcx
lea rcx, [rbp + 0x18]
mov r8, qword [rsp + 0x38]
call fcn.18024b360
mov rax, qword [0x180285bc8]
test rax, rax
jne 0x18005fb77
mov byte [rsp + 0x60], al
mov dword [rsp + 0x58], 0xcf2de62e
mov dword [rsp + 0x5c], 0x7e774d3e
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
nop dword [rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx r8d, byte [rsp + rax + 0x59]
mov rax, r12
mul rcx
shr rdx, 4
movzx eax, dl
add al, al
add dl, al
mov rax, qword [rsp + 0x30]
shl dl, 3
sub cl, dl
mov edx, 0x3053c285
sar edx, cl
xor dl, r8b
mov byte [rsp + rax + 0x59], dl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 7
jb 0x18005fa60
mov byte [rsp + 0x60], r13b
call fcn.1800017a0
mov rcx, qword gs:[0x58]
mov rdi, rax
mov r8d, dword [0x1802848b4]
mov r15d, 4
mov edx, r15d
mov rbx, qword [rcx + r8*8]
add rbx, rdx
mov ecx, dword [rbx]
cmp dword [0x180286968], ecx
jle 0x18005fb17
lea rcx, [0x180286968]
call fcn.180249e18
cmp dword [0x180286968], 0xffffffff
jne 0x18005fb17
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, [0x180286968]
mov qword [0x18028a9f8], rax
call fcn.180249db8
mov eax, dword [rbx]
cmp dword [0x18028a99c], eax
jle 0x18005fb50
lea rcx, [0x18028a99c]
call fcn.180249e18
cmp dword [0x18028a99c], 0xffffffff
jne 0x18005fb50
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x18028a99c]
mov qword [0x18028a9a0], rax
call fcn.180249db8
mov rax, qword [0x18028a9f8]
mov rcx, rdi
call rax
mov r8, qword [0x18028a9a0]
lea rdx, [rsp + 0x59]
mov rcx, rax
call r8
mov qword [0x180285bc8], rax
jmp 0x18005fb7d
mov r15d, 4
mov qword [rsp + 0x40], 0x10
mov qword [rsp + 0x38], r13
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
add rdx, rcx
mov qword [rsp + 0x38], rdx
lea rdx, [rbp + 0x10]
mov r8, qword [rsp + 0x38]
mov r14, qword [rbp + 0x4a0]
mov rcx, qword [r14 + 0x90]
call rax
mov rdx, qword [r14 + 0x90]
lea rcx, [rbp + 0x240]
mov qword [rbp + 0x38], rdx
lea rax, [rbp + 0x30]
mov dword [rbp + 0x30], 1
mov esi, 4
nop dword [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rsi, 1
jne 0x18005fbe0
mov rax, qword [rax]
lea esi, [rdx + 1]
mov qword [rcx], rax
mov rax, qword [0x180285d40]
test rax, rax
jne 0x18005fd7f
mov dword [rsp + 0x50], 0x96909943
mov dword [rsp + 0x54], 0x2bdd18
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx r8d, byte [rsp + rax + 0x51]
mov rax, r12
mul rcx
shr rdx, 4
movzx eax, dl
add al, al
add dl, al
mov rax, qword [rsp + 0x30]
shl dl, 3
sub cl, dl
mov edx, 0x5d028bea
sar edx, cl
xor dl, r8b
mov byte [rsp + rax + 0x51], dl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 6
jb 0x18005fc70
mov byte [rsp + 0x57], r13b
call fcn.1800017a0
mov rcx, qword gs:[0x58]
mov rdi, rax
mov r8d, dword [0x1802848b4]
mov edx, r15d
mov rbx, qword [rcx + r8*8]
add rbx, rdx
mov ecx, dword [rbx]
cmp dword [0x180286968], ecx
jle 0x18005fd21
lea rcx, [0x180286968]
call fcn.180249e18
cmp dword [0x180286968], 0xffffffff
jne 0x18005fd21
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, [0x180286968]
mov qword [0x18028a9f8], rax
call fcn.180249db8
mov eax, dword [rbx]
cmp dword [0x18028a99c], eax
jle 0x18005fd5a
lea rcx, [0x18028a99c]
call fcn.180249e18
cmp dword [0x18028a99c], 0xffffffff
jne 0x18005fd5a
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x18028a99c]
mov qword [0x18028a9a0], rax
call fcn.180249db8
mov rax, qword [0x18028a9f8]
mov rcx, rdi
call rax
mov r8, qword [0x18028a9a0]
lea rdx, [rsp + 0x51]
mov rcx, rax
call r8
mov qword [0x180285d40], rax
lea rcx, [rbp + 8]
xor edx, edx
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x240]
mov ecx, esi
lea r8, [rbp + 0x30]
call rax
cmp eax, 1
jne 0x18005fdd7
mov rcx, qword [r14 + 0x90]
lea rdx, [rbp + 0x30]
call fcn.180008970
mov rcx, qword [r14 + 0x90]
lea rdx, [rbp + 0x240]
test eax, eax
mov esi, 0xffffffff
mov ebx, esi
cmovne ebx, r13d
call fcn.180008970
test eax, eax
cmovne ebx, esi
mov esi, ebx
jmp 0x18005fddc
mov esi, 0xffffffff
movzx ecx, byte [rbp + 0x4b8]
mov eax, r13d
test cl, cl
mov byte [r14 + 0x182], cl
sete al
mov dword [rbp - 0x18], eax
mov rax, qword [0x180286930]
test rax, rax
jne 0x18005ff3f
mov byte [rsp + 0x7a], al
mov dword [rsp + 0x6e], 0x138eabf4
mov dword [rsp + 0x72], 0xe87d704c
mov dword [rsp + 0x76], 0x8c958aa0
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx r8d, byte [rsp + rax + 0x6f]
mov rax, r12
mul rcx
shr rdx, 4
movzx eax, dl
add al, al
add dl, al
mov rax, qword [rsp + 0x30]
shl dl, 3
sub cl, dl
mov edx, 0x203e1c2
sar edx, cl
xor dl, r8b
mov byte [rsp + rax + 0x6f], dl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0xb
jb 0x18005fe30
mov byte [rsp + 0x7a], r13b
call fcn.1800017a0
mov rcx, qword gs:[0x58]
mov rdi, rax
mov r8d, dword [0x1802848b4]
mov edx, r15d
mov rbx, qword [rcx + r8*8]
add rbx, rdx
mov ecx, dword [rbx]
cmp dword [0x180286968], ecx
jle 0x18005fee1
lea rcx, [0x180286968]
call fcn.180249e18
cmp dword [0x180286968], 0xffffffff
jne 0x18005fee1
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, [0x180286968]
mov qword [0x18028a9f8], rax
call fcn.180249db8
mov eax, dword [rbx]
cmp dword [0x18028a99c], eax
jle 0x18005ff1a
lea rcx, [0x18028a99c]
call fcn.180249e18
cmp dword [0x18028a99c], 0xffffffff
jne 0x18005ff1a
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x18028a99c]
mov qword [0x18028a9a0], rax
call fcn.180249db8
mov rax, qword [0x18028a9f8]
mov rcx, rdi
call rax
mov r8, qword [0x18028a9a0]
lea rdx, [rsp + 0x6f]
mov rcx, rax
call r8
mov qword [0x180286930], rax
mov rcx, qword [r14 + 0x90]
lea r8, [rbp - 0x18]
mov edx, 0x8004667e
call rax
mov rcx, r14
test esi, esi
jne 0x18005ff69
mov dl, 0x5a
call fcn.18005ffa0
mov dword [r14 + 0x78], 8
jmp 0x18005ff79
mov dl, 0x5b
call fcn.18005ffa0
mov rcx, qword [r14 + 0x20]
call fcn.180009b60
add rsp, 0x558
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1802514a4
int3
call fcn.18023c000
int3