Function at 0x180010b00
Capabilities:
Allocate or change rwx memory
Authenticate hmac
Execute shellcode via windows callback function

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x150]
sub rsp, 0x250
mov rax, qword [0x1800792c0]
xor rax, rsp
mov qword [rbp + 0x140], rax
xor r13d, r13d
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x24], r13d
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x28], r13d
call fcn.180037750
mov ecx, eax
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x1a
sub ecx, eax
imul eax, ecx, 0x2ee0
movsxd rcx, eax
call fcn.18000c580
call fcn.18000c670
movzx ebx, byte [rsp + 0x20]
xorps xmm0, xmm0
xor eax, eax
mov dword [rbp + 0x20], 0xbbb8b952
movups xmmword [rbp + 0x24], xmm0
mov qword [rbp + 0x34], rax
movabs rsi, 0xb026bfd62abcf1f3
movabs r15, 0xb30e0922945223e7
movabs r12, 0xe5623ff20e3efb51
movabs r14, 0x192a1b67bcf66bb5
mov r8, qword [0x1800804c0]
mov r9, qword [0x1800804b8]
nop
mov r11, r13
cmp r11, 0x1c
jae 0x1800112f3
movzx r10d, byte [rbp + r11 + 0x20]
mov ecx, r10d
cmp r8, r11
ja 0x1800112eb
lea rax, [r9 + 1]
cmp r8, rax
jae 0x180010c0d
lea rbx, [r11 + r15]
movzx eax, cl
and al, bl
add al, al
sub bl, al
sub bl, 0x51
add bl, r10b
jmp 0x180010c39
je 0x180011286
inc rax
cmp r8, rax
je 0x18001120e
lea rax, [r9 + 3]
cmp r8, rax
je 0x1800111de
lea rax, [r9 + 7]
cmp r8, rax
je 0x18001119c
nop dword [rax]
cmp r9, r11
ja 0x1800112e3
lea rax, [r9 + 9]
cmp r8, rax
jae 0x180010c64
lea rbx, [r11 + rsi]
and cl, bl
add cl, cl
sub bl, cl
add bl, 0x5b
add bl, r10b
jmp 0x180010ca0
lea rax, [r9 + 1]
cmp r8, rax
je 0x180011182
inc rax
cmp r8, rax
je 0x18001115f
lea rax, [r9 + 4]
cmp r8, rax
je 0x180011145
lea rax, [r9 + 3]
cmp r8, rax
je 0x18001112b
nop word [rax + rax]
lea rax, [r8 + r9]
cmp rax, r11
jbe 0x180010edd
nop dword [rax]
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x180010ebc
lea rax, [r9 + 1]
cmp r8, rax
je 0x180010e99
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x180010e7f
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x180010cb0
lea r8, [r9 + 0x40]
lea r9, [r8 + 0xa]
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x1800112c7
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x1800112ab
lea rax, [r9 + 4]
cmp r8, rax
jb 0x180010dda
lea r8, [r9 + 0x2a]
lea r9, [r8 + 0x28]
lea rax, [r9 + 9]
cmp r8, rax
ja 0x180010db0
lea rax, [r9 + 0x2a]
cmp r8, rax
ja 0x180010d92
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x180010d75
lea rax, [r9 + 0x5a]
cmp r8, rax
ja 0x180010d55
lea r8, [r9 + 3]
lea r9, [r8 + 0x5a]
jmp 0x180010cb0
lea ecx, [r11 - 0x68]
movzx eax, r10b
and al, cl
movzx ebx, r10b
add al, al
movzx edi, r11b
sub bl, al
sub bl, 0x28
add bl, cl
jmp 0x1800111b4
lea ecx, [r11 - 0x6e]
movzx eax, r10b
and al, cl
mov ebx, 1
sub bl, al
add bl, bl
add bl, r10b
add bl, cl
jmp 0x1800111f6
lea edx, [r11 - 0xa]
mov ecx, 0x23
movzx eax, r10b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, dl
jmp 0x180011247
lea ecx, [r11 + 0x28]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
movzx eax, byte [rbp + r11 + 0x20]
add rax, r9
add r11, rax
lea ebx, [rcx + r10]
sub bl, 0x18
inc r11
jmp 0x180010bd3
lea ecx, [r11 + 0x3b]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea ebx, [r10 + rcx]
add bl, 0x63
lea rax, [r8 + r9]
cmp rax, 3
je 0x180011110
lea rax, [r9 + 0x64]
cmp r8, rax
jbe 0x180010fa6
lea ecx, [r11 + 0xb]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea ebx, [r10 + rcx]
sub bl, 0x4d
cmp r8, 6
jae 0x1800110d3
lea rcx, [r9 + 2]
cmp r8, rcx
jbe 0x18001101c
lea edx, [r11 - 2]
mov ecx, 7
movzx eax, dl
and al, r10b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r10b
cmp r9, 0x3e8
jb 0x1800110c6
mov ecx, 0x1d
movzx edi, r11b
movzx eax, r10b
lea edx, [rdi + 0xa]
and al, dl
sub cl, al
add cl, cl
add cl, r10b
add cl, dl
lea ebx, [rcx + rcx]
jmp 0x1800111b4
lea ecx, [r11 + 0x7a]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea ebx, [r10 + rcx]
sub bl, 0x56
jmp 0x1800111f3
lea ecx, [r11 + 0x10]
inc r9
movzx eax, cl
dec r11
and al, r10b
add al, al
sub cl, al
lea ebx, [r10 + rcx]
sub bl, 0x70
inc r11
jmp 0x180010bd3
mov ecx, 0x19
movzx edi, r11b
lea edx, [rdi + 0x42]
movzx eax, dl
and al, r10b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r10b
jmp 0x1800111b4
lea rax, [r9 + 0x5a]
cmp r8, rax
jae 0x180010f00
lea ecx, [r11 - 0x19]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea ebx, [r10 + rcx]
sub bl, 0x51
jmp 0x180010def
lea rax, [r9 + 1]
cmp r8, rax
jne 0x180010f32
lea ecx, [r11 - 0x1a]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
movzx eax, byte [rbp + r11 + 0x20]
add rax, r9
add r11, rax
lea ebx, [r10 + rcx]
sub bl, 0x4a
inc r11
jmp 0x180010bd3
lea rax, [r9 + 2]
cmp r8, rax
jne 0x180010f59
lea edx, [r11 - 0x7e]
mov ecx, 0x39
movzx eax, dl
and al, r10b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r10b
jmp 0x18001121f
lea rax, [r9 + 4]
cmp r8, rax
jne 0x180010f7c
lea ecx, [r11 + 0x50]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea ebx, [r10 + rcx]
sub bl, 0x30
jmp 0x1800111f6
lea rax, [r9 + 6]
cmp r8, rax
jne 0x180010def
movzx edi, r11b
lea ecx, [rdi + 0x56]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea ebx, [r10 + rcx]
sub bl, 0x5a
jmp 0x1800111b4
lea rax, [r9 + 1]
cmp r8, rax
jne 0x180010fcc
movzx edi, r11b
lea ecx, [rdi - 0x27]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea ebx, [r10 + rcx]
add bl, 0x11
jmp 0x1800111b4
lea rax, [r9 + 3]
cmp r8, rax
jne 0x180010ff5
lea ecx, [r11 + 0x75]
dec r11
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea ebx, [r10 + rcx]
sub bl, 0x33
inc r11
jmp 0x180010bd3
lea rax, [r9 + 5]
cmp r8, rax
jne 0x180010e1f
lea ecx, [r11 - 0x21]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea ebx, [r10 + rcx]
sub bl, 0x19
jmp 0x1800111f6
lea rax, [r9 + 1]
cmp r8, rax
jne 0x180011052
lea edx, [r11 - 0x34]
mov ecx, 0x36
movzx eax, dl
and al, r10b
sub cl, al
movzx eax, byte [rbp + r11 + 0x20]
add rax, r9
add r11, rax
lea ebx, [rcx + rcx]
add bl, dl
add bl, r10b
inc r11
jmp 0x180010bd3
cmp r8, rcx
jne 0x180011075
lea edx, [r11 + 0x68]
mov ecx, 0x14
movzx eax, dl
and al, r10b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r10b
jmp 0x18001121f
lea rax, [r9 + 3]
cmp r8, rax
jne 0x180011098
lea ecx, [r11 + 0x36]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea ebx, [r10 + rcx]
sub bl, 0x7a
jmp 0x1800111f6
lea rax, [r9 + 8]
cmp r8, rax
jne 0x180010e4f
mov ecx, 0x2e
movzx edi, r11b
movzx eax, r10b
lea edx, [rdi + 0x3c]
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, dl
jmp 0x1800111b4
mov byte [rbp + r11 + 0x20], bl
inc r11
jmp 0x180010bd3
lea ecx, [r11 - 0x28]
movzx eax, r10b
and al, cl
movzx edx, r10b
sub dl, al
add dl, 0xc
add dl, dl
add dl, cl
movzx eax, r10b
lea ecx, [r11 - 0x41]
and al, cl
movzx ebx, dl
add al, al
sub r10b, al
sub r10b, 0x39
add r10b, dl
add r10b, cl
mov byte [rbp + r11 + 0x20], r10b
jmp 0x1800111f3
lea edx, [r11 - 0x5a]
mov ecx, 0x3b
movzx eax, dl
and al, r10b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
jmp 0x18001121f
lea ecx, [r11 - 0x6b]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea ebx, [r10 + rcx]
sub bl, 0x13
jmp 0x18001121f
lea ecx, [r11 - 7]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea ebx, [r10 + rcx]
add bl, 0x31
jmp 0x1800111f3
lea ecx, [r11 - 0x71]
inc r9
movzx eax, cl
dec r11
and al, r10b
add al, al
sub cl, al
lea ebx, [r10 + rcx]
add bl, 0x17
inc r11
jmp 0x180010bd3
movzx edi, r11b
lea ecx, [rdi - 0x3f]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea ebx, [r10 + rcx]
sub bl, 0x47
jmp 0x1800111b4
movzx edi, r11b
lea ecx, [rdi + 0x25]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea ebx, [r10 + rcx]
sub bl, 3
sub dil, 0xf
movzx eax, dil
and al, r10b
add al, al
sub dil, al
add dil, 0x69
add dil, r10b
mov byte [rbp + r11 + 0x20], dil
inc r9
dec r11
inc r11
jmp 0x180010bd3
lea ecx, [r11 - 0x13]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea ebx, [r10 + rcx]
sub bl, 0x7b
add r8, r9
movzx eax, bl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r11, rcx
inc r11
jmp 0x180010bd3
lea rax, [r11 + r12]
and cl, al
add cl, cl
sub al, cl
lea ebx, [r10 + rax]
sub bl, 0x37
lea edx, [r11 - 0x73]
movzx eax, r10b
and al, dl
inc r9
add al, al
movzx ecx, r10b
sub cl, al
add cl, 0x25
add cl, dl
movzx eax, cl
mov byte [rbp + r11 + 0x20], al
add rax, r9
sub r11, rax
lea ecx, [r11 + 0x74]
movzx eax, r10b
and al, cl
inc r8
add al, al
sub r10b, al
mov rax, 0xffffffffffffffff
sub rax, r8
sub r10b, 0x2c
add r10b, cl
mov byte [rbp + r11 + 0x20], r10b
add r11, rax
movzx eax, byte [rbp + r11 + 0x20]
add rax, r9
add r11, rax
inc r11
jmp 0x180010bd3
lea rax, [r11 + r14]
and cl, al
add cl, cl
sub al, cl
lea ebx, [r10 + rax]
add bl, 0xd
movzx eax, byte [rbp + r11 + 0x20]
add rax, r9
add r11, rax
inc r11
jmp 0x180010bd3
add r11b, 3
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x15
jmp 0x180010bd0
add r11b, 0x35
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x73
jmp 0x180010bc0
mov ebx, dword [rbp + 0x1701f54]
jmp 0x1800112f6
mov ebx, dword [rbp + 0x82433b]
jmp 0x1800112f6
mov ebx, dword [rbp + 0x20]
mov r8d, 0x30
lea rdx, [rsp + 0x48]
lea rcx, [0x180010a10]
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
mov rcx, r13
lea r9, [rsp + 0x24]
test rax, rax
lea r8, [rsp + 0x30]
movzx edx, bx
cmovne rcx, qword [rsp + 0x50]
call fcn.180010a40
mov edx, dword [rsp + 0x24]
mov rcx, qword [rsp + 0x30]
call fcn.18000fa50
movzx edx, byte [rsp + 0x20]
xor eax, eax
xorps xmm0, xmm0
mov dword [rbp + 0x14], eax
movups xmmword [rbp + 4], xmm0
mov byte [rbp + 0x18], al
movabs rsi, 0x7827ad05981fabaa
mov dword [rbp], 0xb0a0da1
movabs r14, 0x68770710c85f02fe
nop dword [rax]
mov r8, qword [0x1800804c0]
mov r9, qword [0x1800804b8]
nop
mov r11, r13
cmp r11, 0x19
jae 0x180011ecd
movzx r10d, byte [rbp + r11]
mov rbx, r10
cmp r8, r11
ja 0x180011ec5
lea rax, [r9 + 1]
cmp r8, rax
jae 0x1800113c0
lea rcx, [r11 + rsi]
movzx eax, bl
and al, cl
mov edx, 0x2d
sub dl, al
add dl, dl
add dl, bl
add dl, cl
jmp 0x1800113f0
je 0x180011e57
lea rax, [r9 + 3]
cmp r8, rax
je 0x180011e27
lea rax, [r9 + 4]
cmp r8, rax
je 0x180011df3
lea rax, [r9 + 6]
cmp r8, rax
je 0x180011dd0
nop dword [rax]
cmp r9, r11
ja 0x180011ebd
lea rcx, [r9 + 2]
cmp r8, rcx
jae 0x18001141c
lea edx, [r11 - 0xe]
mov ecx, 0x31
movzx eax, dl
and al, r10b
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
jmp 0x180011470
lea rax, [r9 + 1]
cmp r8, rax
je 0x180011d8b
cmp r8, rcx
je 0x180011d68
lea rax, [r9 + 4]
cmp r8, rax
je 0x180011d4e
lea rax, [r9 + 5]
cmp r8, rax
je 0x180011d34
lea rax, [r9 + 7]
cmp r8, rax
je 0x180011cdf
lea rax, [r9 + 9]
cmp r8, rax
je 0x180011cb6
nop word [rax + rax]
lea rax, [r8 + r9]
cmp rax, r11
jbe 0x18001199a
nop dword [rax]
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x18001197d
lea rax, [r9 + 5]
cmp r8, rax
je 0x180011957
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x180011934
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x180011917
lea rax, [r9 + 4]
cmp r8, rax
je 0x1800118fa
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x1800118dd
lea rax, [r9 + 1]
cmp r8, rax
je 0x1800118c0
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x1800118a6
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x18001187a
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x180011480
lea r8, [r9 + 0x400]
lea r9, [r8 + 0x1000]
lea rax, [r9 + 5]
cmp r8, rax
jb 0x180011e9d
lea rax, [r9 + 8]
cmp r8, rax
jb 0x180011e81
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x180011674
lea rax, [r9 + 4]
cmp r8, rax
jb 0x180011657
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x18001163d
lea rax, [r9 + 1]
cmp r8, rax
jb 0x180011839
lea rax, [r9 + 0x28]
cmp r8, rax
jb 0x1800117f3
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x1800117b8
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x180011796
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x180011480
lea r8, [r9 + 0x61]
lea r9, [r8 + 6]
lea rax, [r9 + 8]
cmp r8, rax
ja 0x18001176a
lea rax, [r9 + 0x3e8]
cmp r8, rax
ja 0x18001175c
lea rax, [r9 + 4]
cmp r8, rax
ja 0x18001173e
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x180011724
lea rax, [r9 + 1]
cmp r8, rax
ja 0x180011707
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x1800116e9
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x1800116c9
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x1800116a3
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x180011691
lea rax, [r9 + 6]
cmp r8, rax
ja 0x180011480
lea r8, [r9 + 8]
lea r9, [r8 + 0x200]
jmp 0x180011480
lea ecx, [r11 + 0x4e]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x22
jmp 0x180011470
lea edx, [r11 - 6]
mov ecx, 0x15
movzx eax, dl
and al, r10b
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
jmp 0x1800113f0
lea edx, [r11 - 0x5a]
mov ecx, 0x3b
movzx eax, dl
and al, r10b
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
jmp 0x180011393
lea edx, [r11 - 0x70]
mov ecx, 8
movzx ebx, r11b
jmp 0x180011d97
lea edx, [r11 + 0x3c]
mov ecx, 0x2e
movzx eax, dl
inc r9
and al, r10b
dec r11
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
inc r11
jmp 0x180011383
lea ecx, [r11 - 0x18]
dec r11
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x58
inc r11
jmp 0x180011383
lea ecx, [r11 - 0x6c]
movzx ebx, r11b
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0xc
jmp 0x180011e0b
lea edx, [r11 + 0x40]
mov ecx, 0x20
movzx eax, dl
and al, r10b
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
jmp 0x180011e3c
lea ecx, [r11 - 0x14]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x74
jmp 0x180011e3f
lea ecx, [r11 - 0x68]
movzx ebx, r11b
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x28
jmp 0x180011c90
lea edx, [r11 + 0x44]
mov ecx, 0x12
jmp 0x180011ce8
lea edx, [r11 - 0x10]
mov ecx, 0x38
movzx eax, dl
and al, r10b
sub cl, al
movzx eax, byte [rbp + r11]
add cl, cl
add rax, r9
add dl, cl
add r11, rax
add dl, r10b
inc r11
jmp 0x180011383
lea ecx, [r11 - 0x62]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x52
mov byte [rbp + r11], dl
inc r11
jmp 0x180011383
lea ecx, [r11 + 0x4a]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 6
cmp r9, 0x2a
jb 0x1800117ab
movzx ebx, r11b
lea ecx, [rbx - 0x44]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
add cl, r10b
lea edx, [rcx*2 - 0x48]
jmp 0x180011da6
lea edx, [r11 - 0xa]
mov ecx, 0x23
movzx eax, dl
and al, r10b
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
cmp r8, 0x42
jae 0x180011c54
lea rax, [r9 + 0x5a]
cmp r8, rax
jbe 0x180011b7a
lea ecx, [r11 + 0x74]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x2c
jmp 0x1800117cd
lea ecx, [r11 - 0x5e]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x6e
lea rax, [r8 + r9]
cmp rax, 3
je 0x180011c78
lea rax, [r9 + 0x40]
cmp r8, rax
jbe 0x180011ab6
lea edx, [r11 - 0x7e]
mov ecx, 0x39
movzx eax, dl
and al, r10b
jmp 0x180011802
lea edx, [r11 - 0x54]
mov ecx, 0x26
movzx eax, dl
and al, r10b
sub cl, al
movzx eax, byte [rbp + r11]
add cl, cl
add rax, r9
add dl, cl
add r11, rax
add dl, r10b
inc r11
jmp 0x180011383
lea ecx, [r11 + 0x58]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x68
jmp 0x180011cf7
movzx ebx, r11b
lea ecx, [rbx + 4]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x1c
jmp 0x180011c90
lea edx, [r11 - 0x50]
mov ecx, 0x18
movzx eax, dl
and al, r10b
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
jmp 0x180011e3f
lea edx, [r11 + 0x5c]
mov ecx, 0x3e
movzx eax, dl
and al, r10b
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
jmp 0x180011e3c
movzx ebx, r11b
lea ecx, [rbx + 8]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x38
jmp 0x180011e0b
lea edx, [r11 - 0x4c]
mov ecx, 0xa
movzx eax, dl
dec r11
and al, r10b
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
inc r11
jmp 0x180011383
lea edx, [r11 + 0x60]
mov ecx, 0x30
movzx eax, dl
inc r9
and al, r10b
dec r11
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
inc r11
jmp 0x180011383
movzx ebx, r11b
lea ecx, [rbx + 0xc]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x54
jmp 0x180011da6
lea rax, [r9 + 3]
cmp r8, rax
jae 0x1800119c0
lea edx, [r11 - 0x56]
mov ecx, 0x2d
movzx eax, dl
and al, r10b
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
jmp 0x18001184e
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1800119f2
lea ecx, [r11 - 0x1c]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
movzx eax, byte [rbp + r11]
add rax, r9
add r11, rax
lea edx, [r10 + rcx]
sub dl, 0x3c
inc r11
jmp 0x180011383
inc rax
cmp r8, rax
jne 0x180011a1a
movzx ebx, r11b
mov ecx, 0x16
lea edx, [rbx - 0x74]
movzx eax, dl
and al, r10b
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
jmp 0x180011c90
lea rax, [r9 + 5]
cmp r8, rax
jne 0x180011a43
movzx ebx, r11b
mov ecx, 0x24
lea edx, [rbx - 0x78]
movzx eax, dl
and al, r10b
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
jmp 0x180011e0b
lea rax, [r9 + 2]
cmp r8, rax
jne 0x180011a6c
lea ecx, [r11 - 0x24]
dec r11
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 4
inc r11
jmp 0x180011383
lea rax, [r9 + 7]
cmp r8, rax
jne 0x180011a98
lea ecx, [r11 + 0x30]
inc r9
movzx eax, cl
dec r11
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x50
inc r11
jmp 0x180011383
lea rax, [r9 + 9]
cmp r8, rax
jne 0x18001184e
movzx ebx, r11b
mov ecx, 0x32
lea edx, [rbx - 0x7c]
jmp 0x180011d97
lea rax, [r9 + 1]
cmp r8, rax
jne 0x180011ad0
movzx ebx, r11b
mov ecx, 0x13
lea edx, [rbx - 0x2a]
jmp 0x180011d97
inc rax
cmp r8, rax
jne 0x180011af8
lea ecx, [r11 + 0x7e]
dec r11
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x72
inc r11
jmp 0x180011383
lea rax, [r9 + 5]
cmp r8, rax
jne 0x180011b1b
lea ecx, [r11 + 0x7a]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x56
jmp 0x180011e3f
lea rax, [r9 + 7]
cmp r8, rax
jne 0x180011b44
movzx ebx, r11b
mov ecx, 0x2f
lea edx, [rbx - 0x32]
movzx eax, dl
and al, r10b
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
jmp 0x180011c90
lea rax, [r9 + 4]
cmp r8, rax
jne 0x18001180b
lea ecx, [r11 + 0x76]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
movzx eax, byte [rbp + r11]
add rax, r9
add r11, rax
lea edx, [r10 + rcx]
sub dl, 0x3a
inc r11
jmp 0x180011383
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x180011bac
lea ecx, [r11 - 0x38]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
movzx eax, byte [rbp + r11]
add rax, r9
add r11, rax
lea edx, [r10 + rcx]
sub dl, 0x78
inc r11
jmp 0x180011383
lea rax, [r9 + 3]
cmp r8, rax
jne 0x180011bd2
movzx ebx, r11b
lea ecx, [rbx + 0x70]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x10
jmp 0x180011c90
lea rax, [rcx + 1]
cmp r8, rax
jne 0x180011bf8
lea edx, [r11 + 0x18]
mov ecx, 0x2c
movzx eax, dl
and al, r10b
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
jmp 0x180011e3c
lea rax, [r9 + 2]
cmp r8, rax
jne 0x180011c21
lea ecx, [r11 - 0x40]
dec r11
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x40
inc r11
jmp 0x180011383
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1800117cd
lea edx, [r11 + 0x14]
mov ecx, 0x3a
movzx eax, dl
inc r9
and al, r10b
dec r11
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
inc r11
jmp 0x180011383
movzx ecx, byte [rbp + r11]
movzx ebx, r11b
lea edx, [rbx + 0x10]
movzx eax, dl
sub dl, 0x70
and al, r10b
add al, al
sub cl, al
add dl, cl
add dl, r10b
jmp 0x180011e0b
movzx ebx, r11b
mov ecx, 0x22
lea edx, [rbx + 0x64]
movzx eax, dl
and al, r10b
sub cl, al
add cl, cl
add dl, cl
add bl, 0xe
inc r9
movzx eax, bl
and al, r10b
add al, al
sub bl, al
sub bl, 0x62
add bl, r10b
movzx eax, bl
mov byte [rbp + r11], al
add rax, r9
sub r11, rax
jmp 0x180011cf7
lea ecx, [r11 - 0x1a]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
movzx eax, byte [rbp + r11]
add rax, r9
add r11, rax
lea edx, [r10 + rcx]
sub dl, 0x4a
inc r11
jmp 0x180011383
lea edx, [r11 - 0x6e]
mov ecx, 1
movzx eax, dl
and al, r10b
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
lea ecx, [r11 - 0x48]
inc r8
movzx eax, cl
and al, r10b
add al, al
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
sub cl, 8
add cl, r10b
mov byte [rbp + r11], cl
add r11, rax
movzx eax, byte [rbp + r11]
add rax, r9
add r11, rax
inc r11
jmp 0x180011383
lea ecx, [r11 - 0x16]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x66
jmp 0x180011e3f
lea ecx, [r11 - 0x6a]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x1a
jmp 0x180011e3c
lea edx, [r11 - 0x12]
mov ecx, 0x3f
movzx eax, dl
dec r11
and al, r10b
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
inc r11
jmp 0x180011383
movzx ebx, r11b
mov ecx, 0xb
lea edx, [rbx + 0x46]
movzx eax, dl
and al, r10b
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
add bl, 0x66
mov ecx, 0x1b
movzx eax, bl
inc r9
and al, r10b
sub cl, al
add cl, cl
add cl, bl
add cl, r10b
mov byte [rbp + r11], cl
dec r11
inc r11
jmp 0x180011383
lea ecx, [r11 + 0x4a]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 6
inc r9
dec r11
inc r11
jmp 0x180011383
movzx ebx, r11b
lea ecx, [rbx - 0x5e]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x6e
sub bl, 0x46
movzx eax, bl
and al, r10b
add al, al
sub bl, al
sub bl, 0x16
add bl, r10b
add bl, dl
mov byte [rbp + r11], bl
jmp 0x180011e3c
lea ecx, [r11 + 0x4e]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x22
add r8, r9
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r11, rcx
inc r11
jmp 0x180011383
lea rdx, [r11 + r14]
movzx eax, bl
and al, dl
mov ecx, 7
sub cl, al
add cl, cl
add cl, bl
add dl, cl
movzx eax, byte [rbp + r11]
add rax, r9
add r11, rax
inc r11
jmp 0x180011383
add r11b, 0x52
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x3e
jmp 0x180011380
sub r11b, 2
mov ecx, 7
movzx eax, r11b
and al, r10b
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x180011370
mov ebx, dword [rbp + 0x1475638]
jmp 0x180011ed0
mov ebx, dword [rbp + 0x16701e2]
jmp 0x180011ed0
mov ebx, dword [rbp]
mov r8d, 0x30
lea rdx, [rsp + 0x78]
lea rcx, [0x180010a10]
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
mov rcx, r13
lea r9, [rsp + 0x28]
test rax, rax
lea r8, [rsp + 0x38]
movzx edx, bx
cmovne rcx, qword [rbp - 0x80]
call fcn.180010a40
xor edx, edx
lea rcx, [rbp + 0x40]
mov r8d, 0x100
call fcn.18004dfe0
mov r8d, dword [rsp + 0x28]
lea rcx, [rbp + 0x40]
mov rdx, qword [rsp + 0x38]
call fcn.180010890
mov r8d, dword [rsp + 0x24]
lea rcx, [rbp + 0x40]
mov rdx, qword [rsp + 0x30]
call fcn.180010980
mov rax, qword [rsp + 0x30]
movups xmm1, xmmword [rax]
movzx edx, word [rax + 0x10]
movzx r8d, byte [rax + 0x12]
movd eax, xmm1
test al, al
je 0x1800128ad
movq rcx, xmm1
movdqa xmm0, xmm1
mov rax, rcx
psrldq xmm0, 8
shr rax, 8
sub al, 0x11
psrldq xmm1, 8
xor al, 0xd9
mov byte [rbp - 0x50], al
mov rax, rcx
shr rax, 0x10
sub al, 0x11
xor al, 0xda
mov byte [rbp - 0x4f], al
mov rax, rcx
shr rax, 0x18
sub al, 0x11
xor al, 0xdb
mov byte [rbp - 0x4e], al
mov rax, rcx
shr rax, 0x20
sub al, 0x11
xor al, 0xdc
mov byte [rbp - 0x4d], al
mov rax, rcx
shr rax, 0x28
sub al, 0x11
xor al, 0xdd
mov byte [rbp - 0x4c], al
mov rax, rcx
shr rax, 0x30
sub al, 0x11
shr rcx, 0x38
xor al, 0xde
sub cl, 0x11
mov byte [rbp - 0x4b], al
xor cl, 0xdf
mov byte [rbp - 0x4a], cl
movq rcx, xmm1
movd eax, xmm0
sub al, 0x11
xor al, 0xe0
mov byte [rbp - 0x49], al
mov rax, rcx
shr rax, 8
sub al, 0x11
xor al, 0xe1
mov byte [rbp - 0x48], al
mov rax, rcx
shr rax, 0x10
sub al, 0x11
xor al, 0xe2
mov byte [rbp - 0x47], al
mov rax, rcx
shr rax, 0x18
sub al, 0x11
xor al, 0xe3
mov byte [rbp - 0x46], al
mov rax, rcx
shr rax, 0x20
sub al, 0x11
xor al, 0xe4
mov byte [rbp - 0x45], al
mov rax, rcx
shr rax, 0x28
sub al, 0x11
xor al, 0xe5
mov byte [rbp - 0x44], al
mov rax, rcx
shr rax, 0x30
sub al, 0x11
shr rcx, 0x38
xor al, 0xe6
sub cl, 0x11
mov byte [rbp - 0x43], al
xor cl, 0xe7
lea eax, [rdx - 0x11]
mov byte [rbp - 0x42], cl
xor al, 0xe8
mov byte [rbp - 0x41], al
shr dx, 8
movzx r11d, byte [rsp + 0x20]
sub dl, 0x11
sub r8b, 0x11
xor dl, 0xe9
xor r8b, 0xea
mov byte [rbp - 0x40], dl
xor eax, eax
mov byte [rbp - 0x3f], r8b
xorps xmm0, xmm0
mov qword [rbp - 0x2e], rax
mov word [rbp - 0x26], ax
movabs rsi, 0x7342751963fe0e8b
mov byte [rbp - 0x24], al
movabs r14, 0xd116270876aa04d9
movups xmmword [rbp - 0x3e], xmm0
movabs r15, 0xb79b113b3ea621ef
movabs r12, 0x156ec32a5152183d
mov r8, qword [0x1800804c0]
mov r9, qword [0x1800804b8]
nop
mov rbx, r13
nop dword [rax]
nop word [rax + rax]
movzx ecx, r11b
cmp rbx, 0x2d
jae 0x1800128a4
movzx r10d, byte [rbp + rbx - 0x50]
mov r11d, r10d
cmp r8, rbx
ja 0x18001289b
lea rax, [r9 + 1]
cmp r8, rax
jae 0x180012101
movzx eax, r11b
lea rcx, [rbx + r14]
and al, cl
add al, al
sub r11b, al
add r11b, 0x11
add r11b, cl
jmp 0x180012131
je 0x180012833
inc rax
cmp r8, rax
je 0x1800127dc
lea rax, [r9 + 2]
cmp r8, rax
je 0x18001279e
lea rax, [r9 + 7]
cmp r8, rax
je 0x18001277e
movzx r11d, cl
cmp r9, rbx
ja 0x180012892
lea rax, [r9 + 0x10]
cmp r8, rax
jae 0x18001215a
lea ecx, [rbx - 0x33]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x65
jmp 0x180012190
lea rax, [r9 + 1]
cmp r8, rax
je 0x180012738
lea rax, [r9 + 3]
cmp r8, rax
je 0x180012717
lea rax, [r9 + 5]
cmp r8, rax
je 0x1800126e8
lea rax, [r9 + 6]
cmp r8, rax
je 0x1800126bf
nop
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x1800123c2
nop dword [rax]
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x1800123a3
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x18001237b
lea rax, [r9 + 2]
cmp r8, rax
je 0x180012360
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x180012333
lea r8, [r9 + 0x41]
lea r9, [r8 + 0x400]
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x180012877
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x18001285c
lea rax, [r9 + 8]
cmp r8, rax
jb 0x180012266
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x180012310
lea r8, [r9 + 3]
lea r9, [r8 + 0x5a]
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x1800122e3
lea rax, [r9 + 3]
cmp r8, rax
ja 0x1800122c4
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x1800122a5
lea rax, [r9 + 4]
cmp r8, rax
ja 0x180012284
lea rax, [r9 + 0x61]
cmp r8, rax
ja 0x1800121a0
lea r8, [r9 + 9]
lea r9, [r8 + 4]
jmp 0x1800121a0
lea edx, [rbx + 0x21]
movzx eax, r10b
and al, dl
movzx r11d, r10b
add al, al
sub r11b, al
add r11b, 0x19
add r11b, dl
jmp 0x180012131
lea ecx, [rbx + 4]
movzx eax, r10b
and al, cl
dec rbx
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x1c
inc rbx
jmp 0x1800120c0
lea edx, [rbx - 0x12]
mov ecx, 0x3f
movzx eax, r10b
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x1800126fe
lea edx, [rbx - 0x76]
mov ecx, 0x1d
movzx eax, r10b
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x1800127f5
lea edx, [rbx - 0x28]
movzx eax, r10b
and al, dl
mov ecx, 0xc
sub cl, al
movzx eax, byte [rbp + rbx - 0x50]
add rax, r9
add rbx, rax
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
inc rbx
jmp 0x1800120c0
lea ecx, [rbx - 0x65]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x3d
mov byte [rbp + rbx - 0x50], r11b
inc rbx
jmp 0x1800120c0
lea edx, [rbx - 0x32]
movzx eax, r10b
and al, dl
mov ecx, 0x2f
sub cl, al
movzx eax, byte [rbp + rbx - 0x50]
add rax, r9
add rbx, rax
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
inc rbx
jmp 0x1800120c0
lea ecx, [rbx - 0x48]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 8
jmp 0x1800126fe
lea edx, [rbx - 0x10]
mov ecx, 0x38
movzx eax, r10b
inc r9
and al, dl
dec rbx
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
inc rbx
jmp 0x1800120c0
mov ecx, 0x27
lea edx, [rbx + 0x3e]
movzx eax, r10b
movzx edi, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
jmp 0x180012751
lea rax, [r9 + 0x400]
cmp r8, rax
jae 0x180012482
lea edx, [rbx - 0x27]
movzx eax, r10b
and al, dl
movzx r11d, r10b
add al, al
sub r11b, al
add r11b, 0x11
add r11b, dl
lea rax, [r9 + r8]
cmp rax, 0x80
je 0x1800126a3
lea rax, [r9 + 0x28]
cmp r8, rax
jbe 0x180012534
lea edx, [rbx - 0x4b]
movzx eax, r10b
and al, dl
movzx r11d, r10b
add al, al
sub r11b, al
add r11b, 0xd
add r11b, dl
cmp r8, 0x61
jae 0x180012661
lea rax, [r9 + 0x200]
cmp r8, rax
jbe 0x1800125af
lea edx, [rbx - 0x7e]
mov ecx, 0x39
movzx eax, r10b
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
cmp r9, 1
jb 0x180012326
movzx ecx, r10b
movzx edi, bl
movzx eax, r10b
lea edx, [rdi + 0x76]
and al, dl
add al, al
sub cl, al
add cl, dl
lea r11d, [rcx*2 - 0x74]
jmp 0x180012754
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1800124b4
lea ecx, [rbx - 0x66]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
movzx eax, byte [rbp + rbx - 0x50]
add rax, r9
add rbx, rax
lea r11d, [rcx + r10]
sub r11b, 0x36
inc rbx
jmp 0x1800120c0
inc rax
cmp r8, rax
jne 0x1800124db
lea edx, [rbx - 2]
mov ecx, 7
movzx eax, r10b
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x1800127b7
lea rax, [r9 + 3]
cmp r8, rax
jne 0x180012506
lea edx, [rbx + 0x14]
mov ecx, 0x3a
movzx eax, r10b
movzx edi, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x180012680
lea rax, [r9 + 7]
cmp r8, rax
jne 0x1800123eb
lea ecx, [rbx - 0x3a]
movzx eax, r10b
and al, cl
dec rbx
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x6a
inc rbx
jmp 0x1800120c0
lea rax, [r9 + 1]
cmp r8, rax
jne 0x18001255b
movzx edi, bl
movzx eax, r10b
movzx r11d, r10b
lea edx, [rdi + 0x67]
and al, dl
add al, al
sub r11b, al
add r11b, 0x2f
jmp 0x180012751
inc rax
cmp r8, rax
jne 0x180012584
lea ecx, [rbx - 0x35]
movzx eax, r10b
and al, cl
dec rbx
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 0x73
inc rbx
jmp 0x1800120c0
lea rax, [r9 + 5]
cmp r8, rax
jne 0x180012421
lea ecx, [rbx + 0x2f]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x49
add r8, r9
jmp 0x1800126fe
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1800125e1
lea ecx, [rbx + 0x34]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
movzx eax, byte [rbp + rbx - 0x50]
add rax, r9
add rbx, rax
lea r11d, [rcx + r10]
sub r11b, 0x6c
inc rbx
jmp 0x1800120c0
inc rax
cmp r8, rax
jne 0x180012607
lea edx, [rbx - 0x68]
movzx eax, r10b
and al, dl
movzx r11d, r10b
add al, al
sub r11b, al
sub r11b, 0x28
add r11b, dl
jmp 0x1800127b7
lea rax, [r9 + 3]
cmp r8, rax
jne 0x18001262f
mov ecx, 0x1f
movzx edi, bl
movzx eax, r10b
lea edx, [rdi - 0x52]
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x180012680
lea rax, [r9 + 4]
cmp r8, rax
jne 0x180012455
lea edx, [rbx + 0x60]
mov ecx, 0x30
movzx eax, r10b
dec rbx
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
inc rbx
jmp 0x1800120c0
movzx edi, bl
movzx eax, r10b
movzx r11d, r10b
lea edx, [rdi + 0x28]
and al, dl
add al, al
sub r11b, al
sub r11b, 0x18
add r11b, dl
add r11b, r10b
inc dil
movzx eax, dil
and al, r10b
add al, al
sub dil, al
sub dil, 7
add dil, r11b
add dil, r10b
mov byte [rbp + rbx - 0x50], dil
add r8, r9
jmp 0x1800126fe
lea edx, [rbx - 0x26]
mov ecx, 5
movzx eax, r10b
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
jmp 0x1800127b7
lea ecx, [rbx + 0xf]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
movzx eax, byte [rbp + rbx - 0x50]
add rax, r9
add rbx, rax
lea r11d, [rcx + r10]
sub r11b, 0x69
inc rbx
jmp 0x1800120c0
lea ecx, [rbx - 7]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 0x31
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x1800120c0
lea ecx, [rbx - 0x1d]
movzx eax, r10b
and al, cl
dec rbx
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x35
inc rbx
jmp 0x1800120c0
movzx edi, bl
movzx eax, r10b
movzx r11d, r10b
lea edx, [rdi + 0x7f]
and al, dl
add al, al
sub r11b, al
sub r11b, 0x79
add r11b, dl
add dil, 0x4f
movzx eax, dil
and al, r10b
add al, al
sub dil, al
sub dil, 0x29
add dil, r10b
mov byte [rbp + rbx - 0x50], dil
inc r9
dec rbx
inc rbx
jmp 0x1800120c0
lea ecx, [rbx - 0x49]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
dec r11b
dec rbx
inc rbx
jmp 0x1800120c0
lea rcx, [rbx + r15]
movzx eax, r10b
and r11b, cl
add r11b, r11b
sub al, r11b
lea r11d, [rcx + rax]
add r11b, 0x77
lea ecx, [rbx - 0x4d]
inc r9
movzx eax, cl
and al, r10b
add al, al
sub cl, al
add cl, 0x1b
add cl, r10b
movzx eax, cl
mov byte [rbp + rbx - 0x50], al
add rax, r9
sub rbx, rax
jmp 0x1800127f5
lea rcx, [rbx + r12]
movzx eax, r10b
and r11b, cl
add r11b, r11b
sub al, r11b
lea r11d, [rcx + rax]
add r11b, 0x55
lea edx, [rbx - 0x74]
inc r8
movzx eax, dl
mov ecx, 0x16
and al, r10b
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
add cl, cl
add cl, dl
add cl, r10b
mov byte [rbp + rbx - 0x50], cl
add rbx, rax
movzx eax, byte [rbp + rbx - 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1800120c0
movzx eax, r11b
lea rcx, [rbx + rsi]
and al, cl
add al, al
sub r11b, al
add r11b, 0x33
add r11b, cl
movzx eax, byte [rbp + rbx - 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1800120c0
sub bl, 0x43
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
sub r11b, 0x2b
jmp 0x1800120b0
add bl, 0xb
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
sub r11b, 0x4d
jmp 0x1800120a1
lea rcx, [rbp + 0x17b417c]
jmp 0x1800128a8
lea rcx, [rbp + 0xe54655]
jmp 0x1800128a8
lea rcx, [rbp - 0x50]
call fcn.18000d330
call fcn.180037750
mov r8d, eax
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x1a
sub r8d, ecx
imul eax, r8d, 0x2ee0
movsxd rcx, eax
call fcn.18000c580
mov edx, dword [rsp + 0x24]
xor ecx, ecx
shr rdx, 1
mov r8d, 0x3000
sub rdx, 0x13
lea r9d, [rcx + 4]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8d, dword [rsp + 0x24]
mov rcx, rax
mov rdx, qword [rsp + 0x30]
mov rsi, rax
shr r8, 1
add rdx, 0x13
sub r8, 0x13
call fcn.18004e3a0
movzx r10d, byte [rsp + 0x20]
xor eax, eax
xorps xmm0, xmm0
mov dword [rbp - 0xc], eax
movups xmmword [rbp - 0x1c], xmm0
mov byte [rbp - 8], al
movabs r14, 0x46d9caa8d9845de8
mov dword [rbp - 0x20], 0xb3b2b170
movabs r15, 0x7da81fefa5a74d28
movabs r12, 0xd48d5ffa8c8d19b8
nop dword [rax]
nop word [rax + rax]
mov rax, qword [0x1800804c0]
mov r9, qword [0x1800804b8]
nop
mov rbx, r13
cmp rbx, 0x19
jae 0x180013418
movzx r11d, byte [rbp + rbx - 0x20]
mov r8, r11
cmp rax, rbx
ja 0x18001340f
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x1800129b4
lea rdx, [rbx + r14]
movzx ecx, r8b
and cl, dl
movzx r10d, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x58
add r10b, dl
jmp 0x1800129e1
je 0x1800133a4
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x180013375
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x180013354
lea rcx, [r9 + 7]
cmp rax, rcx
je 0x18001330b
cmp r9, rbx
ja 0x180013406
lea rcx, [r9 + 0x80]
cmp rax, rcx
jae 0x180012a0f
lea r10d, [rbx + 8]
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x38
add r10b, r11b
jmp 0x180012a50
lea rdx, [r9 + 1]
cmp rax, rdx
je 0x1800132fd
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x1800132dd
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x1800132cf
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x1800132b5
lea rcx, [rdx + 1]
cmp rax, rcx
je 0x180013239
lea rcx, [rax + r9]
cmp rcx, rbx
jbe 0x180012f8d
nop dword [rax]
lea rcx, [r9 + 0x64]
cmp rax, rcx
je 0x180012f7c
lea rcx, [r9 + 0x7a]
cmp rax, rcx
je 0x180012f56
lea rcx, [r9 + 0x40]
cmp rax, rcx
je 0x180012f36
lea rcx, [r9 + 0x1000]
cmp rax, rcx
je 0x18001303d
lea rcx, [r9 + 0x20]
cmp rax, rcx
je 0x180012f12
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
je 0x180012ef7
lea rcx, [r9 + 0xa]
cmp rax, rcx
je 0x180012ed6
lea rcx, [r9 + 0x2a]
cmp rax, rcx
je 0x180012eb5
lea rcx, [r9 + 8]
cmp rax, rcx
je 0x180012e8c
lea rcx, [r9 + 0x41]
cmp rax, rcx
je 0x180012a60
lea rax, [r9 + 0x42]
lea r9, [rax + 5]
lea rcx, [r9 + 0x61]
cmp rax, rcx
jb 0x1800133ec
lea rcx, [r9 + 0x28]
cmp rax, rcx
jb 0x1800133cd
lea rcx, [r9 + 3]
cmp rax, rcx
jb 0x180012c46
lea rcx, [r9 + 0x10]
cmp rax, rcx
jb 0x180012c2c
lea rcx, [r9 + 1]
cmp rax, rcx
jb 0x180012c0c
lea rcx, [r9 + 9]
cmp rax, rcx
jb 0x180012e3e
lea rcx, [r9 + 0x5a]
cmp rax, rcx
jb 0x180012df8
lea rcx, [r9 + 6]
cmp rax, rcx
jb 0x180012db0
lea rcx, [r9 + 0x7a]
cmp rax, rcx
jb 0x180012d87
lea rcx, [r9 + 4]
cmp rax, rcx
jb 0x180012a60
mov rax, rcx
lea r9, [rcx + 0x1000]
lea rcx, [r9 + 0x20]
cmp rax, rcx
ja 0x180012d5e
lea rcx, [r9 + 2]
cmp rax, rcx
ja 0x180012d3d
lea rcx, [r9 + 0xa]
cmp rax, rcx
ja 0x180012d1c
lea rcx, [r9 + 0x2a]
cmp rax, rcx
ja 0x180012d01
lea rcx, [r9 + 0x80]
cmp rax, rcx
ja 0x180012cea
lea rcx, [r9 + 0x41]
cmp rax, rcx
ja 0x180012cc9
lea rcx, [r9 + 0x42]
cmp rax, rcx
ja 0x180012ca8
lea rcx, [r9 + 0x61]
cmp rax, rcx
ja 0x180012c84
lea rcx, [r9 + 0x28]
cmp rax, rcx
ja 0x180012c60
lea rcx, [r9 + 0x400]
cmp rax, rcx
ja 0x180012a60
mov rax, rcx
lea r9, [rcx + 0x10]
jmp 0x180012a60
lea edx, [rbx - 8]
mov r10d, 0x1c
movzx ecx, dl
and cl, r11b
sub r10b, cl
add r10b, r10b
add r10b, dl
add r10b, r11b
jmp 0x180012a50
lea edx, [rbx + 0x28]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x18
jmp 0x1800129e1
lea edx, [rbx + 0x58]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x68
jmp 0x180012983
lea r8d, [rbx + 0x40]
mov edx, 0x20
movzx ecx, r11b
movzx edi, bl
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
jmp 0x18001332a
lea edx, [rbx + 0x70]
movzx ecx, r11b
and cl, dl
inc r9
add cl, cl
dec rbx
sub r11b, cl
lea r10d, [rdx + r11]
sub r10b, 0x10
inc rbx
jmp 0x180012973
lea edx, [rbx - 0x60]
movzx ecx, r11b
and cl, dl
dec rbx
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
sub r10b, 0x60
inc rbx
jmp 0x180012973
mov edx, 0x28
lea r8d, [rbx - 0x30]
movzx ecx, r11b
movzx edi, bl
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
jmp 0x1800131f4
movzx ecx, r11b
and cl, bl
add cl, cl
sub r11b, cl
add rax, r9
lea r10d, [rbx + r11]
jmp 0x18001338b
lea edx, [rbx + 0x30]
movzx ecx, r11b
and cl, dl
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
sub r10b, 0x50
jmp 0x18001338b
lea r8d, [rbx + 0x60]
mov edx, 0x30
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
jmp 0x18001324e
lea r8d, [rbx - 0x70]
mov edx, 8
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
jmp 0x180013278
lea edx, [rbx - 0x40]
movzx ecx, r11b
and cl, dl
add cl, cl
sub r11b, cl
movzx ecx, byte [rbp + rbx - 0x20]
add rcx, r9
add rbx, rcx
lea r10d, [rdx + r11]
sub r10b, 0x40
inc rbx
jmp 0x180012973
lea r8d, [rbx + 0x38]
mov edx, 0x3c
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
mov byte [rbp + rbx - 0x20], r10b
inc rbx
jmp 0x180012973
lea r8d, [rbx + 0x68]
mov edx, 0x14
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
cmp r9, 0x10
jb 0x180012da3
movzx edx, r11b
movzx edi, bl
movzx ecx, r11b
lea r8d, [rdi + 0x70]
and cl, r8b
add cl, cl
sub dl, cl
add dl, r8b
lea r10d, [rdx*2 - 0x20]
jmp 0x18001332a
lea edx, [rbx - 0x68]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x28
cmp rax, 4
jae 0x1800131d8
lea rcx, [r9 + 0x1000]
cmp rax, rcx
jbe 0x180013124
lea edx, [rbx + 0x50]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x30
jmp 0x180012dcc
lea edx, [rbx - 0x38]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x78
lea rcx, [rax + r9]
cmp rcx, 0x42
je 0x18001321e
lea rcx, [r9 + 5]
cmp rax, rcx
jbe 0x180013061
lea r8d, [rbx + 0x48]
mov edx, 4
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x180012e0d
lea edx, [rbx + 0x30]
movzx ecx, r11b
and cl, dl
add cl, cl
sub r11b, cl
movzx ecx, byte [rbp + rbx - 0x20]
add rcx, r9
add rbx, rcx
lea r10d, [rdx + r11]
sub r10b, 0x50
inc rbx
jmp 0x180012973
lea r8d, [rbx + 0x60]
mov edx, 0x30
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
jmp 0x180013278
lea r8d, [rbx - 0x70]
mov edx, 8
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
jmp 0x18001324e
lea edx, [rbx - 0x40]
movzx ecx, r11b
and cl, dl
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
sub r10b, 0x40
jmp 0x18001338b
lea r8d, [rbx - 0x10]
mov edx, 0x38
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
add rax, r9
jmp 0x18001338b
lea edx, [rbx + 0x50]
dec rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x30
inc rbx
jmp 0x180012973
lea edx, [rbx + 0x80]
inc r9
movzx ecx, dl
dec rbx
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0x80
inc rbx
jmp 0x180012973
movzx edi, bl
mov edx, 0x18
lea r8d, [rdi - 0x50]
jmp 0x180013317
lea rcx, [r9 + 0x64]
cmp rax, rcx
jae 0x180012fb0
lea edx, [rbx - 0x18]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x58
jmp 0x180012e53
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x180012fe1
lea edx, [rbx + 0x10]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
movzx ecx, byte [rbp + rbx - 0x20]
add rcx, r9
add rbx, rcx
lea r10d, [r11 + rdx]
sub r10b, 0x70
inc rbx
jmp 0x180012973
inc rcx
cmp rax, rcx
jne 0x18001300a
lea r8d, [rbx - 0x50]
mov edx, 0x18
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x18001324e
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x180013030
lea edx, [rbx + 0x50]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x30
add rax, r9
jmp 0x18001338b
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x180012e53
mov edx, 0x10
movzx edi, bl
lea r8d, [rdi + 0x20]
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x1800131f7
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x18001307b
movzx edi, bl
mov edx, 0x2c
lea r8d, [rdi + 0x18]
jmp 0x180013317
inc rcx
cmp rax, rcx
jne 0x1800130a6
lea edx, [rbx - 0x18]
inc r9
movzx ecx, dl
dec rbx
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x58
inc rbx
jmp 0x180012973
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1800130cc
lea edx, [rbx + 0x58]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x68
add rax, r9
jmp 0x18001338b
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x1800130ef
lea edx, [rbx - 0x38]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x78
jmp 0x180013278
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x180012e0d
lea edx, [rbx - 0x68]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
movzx ecx, byte [rbp + rbx - 0x20]
add rcx, r9
add rbx, rcx
lea r10d, [r11 + rdx]
sub r10b, 0x28
inc rbx
jmp 0x180012973
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x18001315c
lea r8d, [rbx + 0x20]
mov edx, 0x10
movzx ecx, r8b
and cl, r11b
sub dl, cl
movzx ecx, byte [rbp + rbx - 0x20]
add rcx, r9
add rbx, rcx
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
inc rbx
jmp 0x180012973
inc rcx
cmp rax, rcx
jne 0x180013184
lea r8d, [rbx - 0x40]
movzx ecx, r11b
and cl, r8b
movzx r10d, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x40
add r10b, r8b
jmp 0x18001324e
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x1800131b1
lea r8d, [rbx + 0x60]
mov edx, 0x30
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
add rax, r9
jmp 0x18001338b
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x180012dcc
movzx ecx, r11b
and cl, bl
add cl, cl
sub r11b, cl
lea r10d, [rbx + r11]
dec rbx
inc rbx
jmp 0x180012973
movzx edx, byte [rbp + rbx - 0x20]
movzx edi, bl
movzx ecx, r11b
lea r8d, [rdi + 0x40]
and cl, r8b
sub dl, cl
add dl, 0x20
lea r10d, [rdx + rdx]
add r10b, r8b
add dil, 0x28
movzx ecx, dil
and cl, r11b
add cl, cl
sub dil, cl
sub dil, 0x18
add dil, r11b
add dil, r10b
mov byte [rbp + rbx - 0x20], dil
add rax, r9
jmp 0x18001338b
lea edx, [rbx + 0x10]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
sub dl, byte [rbp + rbx - 0x20]
lea r10d, [r11 + rdx]
sub r10b, 0x70
jmp 0x18001324e
lea edx, [rbx - 0x48]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 8
lea r8d, [rbx - 8]
inc r9
movzx ecx, r8b
mov edx, 0x1c
and cl, r11b
sub dl, cl
add dl, dl
add dl, r8b
add dl, r11b
movzx ecx, dl
mov byte [rbp + rbx - 0x20], cl
add rcx, r9
sub rbx, rcx
lea edx, [rbx - 0x20]
movzx ecx, r11b
and cl, dl
inc rax
add cl, cl
sub r11b, cl
mov rcx, 0xffffffffffffffff
sub rcx, rax
sub r11b, 0x20
add r11b, dl
mov byte [rbp + rbx - 0x20], r11b
add rbx, rcx
movzx ecx, byte [rbp + rbx - 0x20]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x180012973
lea edx, [rbx - 0x18]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x58
jmp 0x18001338b
lea r8d, [rbx + 0x18]
mov edx, 0x2c
jmp 0x18001335d
lea edx, [rbx + 0x78]
dec rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x48
inc rbx
jmp 0x180012973
movzx edi, bl
mov edx, 0xc
lea r8d, [rdi - 0x28]
jmp 0x180013317
movzx edi, bl
mov edx, 0x3c
lea r8d, [rdi + 0x38]
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
add dil, 0x58
movzx ecx, dil
and cl, r11b
add cl, cl
sub dil, cl
sub dil, 0x68
add dil, r11b
mov byte [rbp + rbx - 0x20], dil
inc r9
dec rbx
inc rbx
jmp 0x180012973
lea r8d, [rbx - 8]
mov edx, 0x1c
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
add rax, r9
jmp 0x18001338b
lea rdx, [rbx + r15]
movzx ecx, dl
and cl, r8b
add cl, cl
sub dl, cl
lea r10d, [r8 + rdx]
sub r10b, 0x18
movzx ecx, r10b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x180012973
lea rdx, [rbx + r12]
movzx ecx, dl
and cl, r8b
add cl, cl
sub dl, cl
lea r10d, [r8 + rdx]
sub r10b, 8
movzx ecx, byte [rbp + rbx - 0x20]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x180012973
sub bl, 0x78
mov edx, 0x24
movzx ecx, r11b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, bl
jmp 0x180012970
sub bl, 0x48
movzx eax, bl
and al, r11b
add al, al
sub bl, al
lea r10d, [r11 + rbx]
sub r10b, 8
jmp 0x180012960
mov r8d, dword [rbp + 0x16f17c0]
jmp 0x18001341c
mov r8d, dword [rbp + 0xf375a8]
jmp 0x18001341c
mov r8d, dword [rbp - 0x20]
mov edx, dword [rsp + 0x24]
lea r9, [rsp + 0x40]
shr rdx, 1
mov rcx, rsi
sub rdx, 0x13
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
lea edx, [r9 + 0xd]
call qword [sym.imp.KERNEL32.dll_EnumLanguageGroupLocalesW]
mov rcx, qword [rbp + 0x140]
xor rcx, rsp
call fcn.180029e30
lea r11, [rsp + 0x250]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret