Function at 0x18001c5c0
Capabilities:
Contain obfuscated stackstrings
Open clipboard
Write clipboard data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x10], rdx
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1320]
mov eax, 0x1420
call fcn.1800c6240
sub rsp, rax
mov rax, qword [0x1800ee0f8]
xor rax, rsp
mov qword [rbp + 0x1310], rax
xor r15d, r15d
mov r13d, r15d
mov dword [rsp + 0x3c], r15d
mov r12d, r15d
mov dword [rsp + 0x3c], r15d
mov dword [rbp - 0x30], 0xcfc3bbe8
mov dword [rbp - 0x2c], 0x34ddcacb
mov dword [rbp - 0x28], 0x363b4740
mov word [rbp - 0x24], 0xc931
xor eax, eax
mov dword [rbp - 0x22], eax
mov word [rbp - 0x1e], ax
mov byte [rbp - 0x1c], al
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r9, 0x2f124a8d84aff3f9
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax - 0x30]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x31
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax - 0x30], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x15
jb 0x18001c651
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0xcb0]
call fcn.180010bb0
mov r8, rax
lea rdx, [rbp + 0x1038]
lea rcx, [rbp + 0x1358]
call fcn.180030220
mov byte [0x1800f03c2], 1
mov r9, qword [sym.imp.msvcp140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [rbp - 0x10], 0x3e7b7823
mov dword [rbp - 0xc], 0xd5040664
mov dword [rbp - 8], 0x2e2d2d29
mov dword [rbp - 4], 0x2ed2de6c
mov dword [rbp], 0x2727d5da
mov word [rbp + 4], 0x7522
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 6], xmm0
mov dword [rbp + 0x16], eax
mov word [rbp + 0x1a], ax
mov byte [rbp + 0x1c], al
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r10, 0xf9ef252711a2e5cc
nop dword [rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax - 0x10]
add rcx, r10
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x6c
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax - 0x10], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x2d
jb 0x18001c720
lea rdx, [rbp - 0x10]
mov rcx, r9
call fcn.180011c00
lea rdx, [0x180011dd0]
mov rcx, rax
call qword [sym.imp.msvcp140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___class_std::basic_istream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_istream_char__struct_std::char_traits_char______ptr64_____ptr64]
movzx ebx, byte [rsp + 0x38]
movzx edi, byte [rsp + 0x38]
movzx esi, byte [rsp + 0x38]
movzx r14d, byte [rsp + 0x38]
nop dword [rax]
cmp byte [0x1800f03c2], 1
jne 0x18001c848
mov rdx, qword [rbp + 0x1358]
add rdx, 0x60
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x1028]
mov rcx, qword [0x1800f03d8]
call qword [sym.imp.kernel32.dll_ReadProcessMemory]
cmp qword [rbp + 0x1028], 0
je 0x18001c848
mov rdx, qword [rbp + 0x1358]
add rdx, 0x60
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x1030]
mov rcx, qword [0x1800f03d8]
call qword [sym.imp.kernel32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x1030]
mov qword [rbp + 0x500], rax
lea rdx, [rbp + 0xcd0]
lea rcx, [rbp + 0x500]
call fcn.18002fe00
or r13d, 1
lea rdx, [0x1800d5928]
mov rcx, rax
call fcn.1800118c0
test al, al
je 0x18001c848
mov r15b, 1
jmp 0x18001c84b
xor r15b, r15b
test r13b, 1
je 0x18001c861
and r13d, 0xfffffffe
lea rcx, [rbp + 0xcd0]
call fcn.180010a90
test r15b, r15b
je 0x18001f71e
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1010], xmm0
mov qword [rbp + 0x1020], rax
lea rdx, [rbp + 0x1010]
lea rcx, [rbp + 0x1038]
call fcn.180030090
nop
mov rdx, qword [rbp + 0x1018]
mov qword [rbp + 0x430], rdx
mov rax, rdx
mov rcx, qword [rbp + 0x1010]
mov qword [rbp + 0x3a0], rcx
sub rax, rcx
cmp rax, 8
jae 0x18001c8cd
lea rcx, [rbp + 0x1010]
call fcn.18000f5f0
xor r15d, r15d
jmp 0x18001c7a0
cmp rcx, rdx
je 0x18001f70a
mov rax, qword [rcx]
mov qword [rbp + 0xf58], rax
lea rdx, [rbp + 0xf80]
lea rcx, [rbp + 0xf58]
call fcn.18002fe00
nop
xor r8d, r8d
lea rdx, [0x1800d5930]
lea rcx, [rbp + 0xf80]
call fcn.180020380
cmp rax, 0xffffffffffffffff
je 0x18001c956
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x20], rcx
mov r9, rax
xor r8d, r8d
lea rdx, [rbp + 0xf80]
lea rcx, [rbp + 0x520]
call fcn.180011390
or r13d, 0x40
lea rdx, [rbp + 0x520]
lea rcx, [rbp + 0xf80]
call fcn.180010af0
lea rcx, [rbp + 0x520]
call fcn.180010a90
lea rdx, [rbp + 0xcf0]
lea rcx, [rbp + 0xf58]
call fcn.18002ffa0
lea rdx, [0x1800d5934]
mov rcx, rax
call fcn.1800118c0
movzx r15d, al
lea rcx, [rbp + 0xcf0]
call fcn.180010a90
test r15b, r15b
jne 0x18001c99e
lea rcx, [rbp + 0xf80]
call fcn.180010a90
jmp 0x18001f6eb
mov dword [rbp + 0x120], 0xcfcbf4f2
mov dword [rbp + 0x124], 0xf8fefdff
mov word [rbp + 0x128], 0xc4fc
mov byte [rbp + 0x12a], 0x6c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x12b], xmm0
mov dword [rbp + 0x13b], eax
mov byte [rbp + 0x13f], al
xor r15d, r15d
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0xef68bc8d09e43c51
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x120]
add r8, r15
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
sub cl, 0x37
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x120], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x20
jb 0x18001c9f1
xor r15d, r15d
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0xf80]
call fcn.1800118c0
test al, al
je 0x18001cc1d
mov eax, 1
mov word [rbp + 0xf60], ax
mov rdx, qword [rbp + 0xf58]
add rdx, 0x1b8
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 2]
lea r8, [rbp + 0xf60]
mov rcx, qword [0x1800f03d8]
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
lea rdx, [0x1800d5938]
lea rcx, [rbp + 0xd10]
call fcn.180010bb0
mov rdx, rax
lea rcx, [rbp + 0xf58]
call fcn.18002fe70
lea rdx, [rbp + 0x840]
lea rcx, [rbp + 0xf58]
call fcn.180030090
nop
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
sub rdx, rcx
sar rdx, 3
test rdx, rdx
je 0x18001f75b
lea rdx, [rbp + 0x1040]
call fcn.18002ffa0
nop
lea rcx, [rbp + 0x840]
call fcn.18000f5f0
lea rdx, [0x1800d5433]
lea rcx, [rbp + 0x1040]
call fcn.1800118c0
test al, al
je 0x18001cb4f
lea rdx, [0x1800d593c]
lea rcx, [rbp + 0xd30]
call fcn.180010bb0
mov rdx, rax
lea rcx, [rbp + 0xf58]
call fcn.18002fe70
nop
lea rcx, [rbp + 0x1040]
call fcn.180010a90
nop
lea rcx, [rbp + 0xf80]
call fcn.180010a90
jmp 0x18001f6eb
lea rdx, [rbp + 0x1040]
lea rcx, [rbp + 0xd50]
call fcn.180010c10
mov rdx, rax
lea rcx, [rbp + 0x1060]
call fcn.180015a00
nop
xor edx, edx
lea rcx, [rbp + 0x1060]
call fcn.1800105f0
cmp byte [rax], 0
jne 0x18001cbb9
lea rdx, [0x1800d593c]
lea rcx, [rbp + 0xd70]
call fcn.180010bb0
mov rdx, rax
lea rcx, [rbp + 0xf58]
call fcn.18002fe70
nop
lea rcx, [rbp + 0x1060]
call fcn.180010a90
jmp 0x18001cb31
mov rcx, qword [rbp + 0xf58]
add rcx, 0x158
call fcn.180008660
lea rcx, [rax + 0x10]
lea rdx, [rbp + 0x1060]
call fcn.18002f9b0
lea rdx, [0x1800d5940]
lea rcx, [rbp + 0xd90]
call fcn.180010bb0
mov rdx, rax
lea rcx, [rbp + 0xf58]
call fcn.18002fe70
nop
lea rcx, [rbp + 0x1060]
call fcn.180010a90
nop
lea rcx, [rbp + 0x1040]
call fcn.180010a90
jmp 0x18001f6df
mov dword [rsp + 0x70], 0x8886b4b7
mov dword [rsp + 0x74], 0x97af97a7
mov dword [rsp + 0x78], 0x9f9ba39c
mov dword [rsp + 0x7c], 0xa399aea1
mov word [rbp - 0x80], 0x9a5
xor eax, eax
mov qword [rbp - 0x7e], rax
mov dword [rbp - 0x76], eax
mov word [rbp - 0x72], ax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0x5267384d40c10d2c
nop dword [rax]
nop dword [rax + rax]
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x70]
add r8, r15
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
sub cl, 0x34
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x70], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x20
jb 0x18001cc70
xor r15d, r15d
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0xf80]
call fcn.1800118c0
test al, al
je 0x18001d14c
mov eax, 1
mov word [rbp + 0xf64], ax
mov rdx, qword [rbp + 0xf58]
add rdx, 0x1b8
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 2]
lea r8, [rbp + 0xf64]
mov rcx, qword [0x1800f03d8]
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
lea rdx, [0x1800d5938]
lea rcx, [rbp + 0xdb0]
call fcn.180010bb0
mov rdx, rax
lea rcx, [rbp + 0xf58]
call fcn.18002fe70
nop word [rax + rax]
lea rdx, [rbp + 0x508]
lea rcx, [rbp + 0xf58]
call fcn.180030090
mov rcx, rax
or r13d, 2
mov rax, qword [rax + 8]
sub rax, qword [rcx]
cmp rax, 8
jb 0x18001cd60
cmp qword [rbp + 0xf58], r15
jne 0x18001cd72
lea rcx, [rbp + 0x508]
call fcn.18000f5f0
and r13d, 0xfffffffd
jmp 0x18001cd30
lea rcx, [rbp + 0x508]
call fcn.18000f5f0
and r13d, 0xfffffffd
cmp qword [rbp + 0xf58], r15
je 0x18001cb3e
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0xf58]
call fcn.180030090
nop
mov rdx, qword [rax]
mov rcx, qword [rax + 8]
sub rcx, rdx
sar rcx, 3
test rcx, rcx
je 0x18001f761
mov rax, qword [rdx]
mov qword [rbp + 0xf78], rax
lea rcx, [rbp + 0x858]
call fcn.18000f5f0
mov dword [rbp + 0x100], 0x203d3052
mov dword [rbp + 0x104], 0x2d213036
mov dword [rbp + 0x108], 0x9b142925
xor eax, eax
mov qword [rbp + 0x10c], rax
mov byte [rbp + 0x114], al
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r14, 0x4de8e56d0204a6b
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x100]
add r8, r14
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x13
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x100], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x15
jb 0x18001ce11
movzx r14d, byte [rsp + 0x38]
lea rdx, [rbp + 0xc70]
lea rcx, [rbp + 0xf78]
call fcn.18002fd60
lea rdx, [rbp + 0x100]
mov rcx, rax
call fcn.1800118c0
movzx r15d, al
lea rcx, [rbp + 0xc70]
call fcn.180010a90
mov rdx, qword [rbp + 0xf78]
test r15b, r15b
je 0x18001cea9
add rdx, 0x1b8
jmp 0x18001ceb0
add rdx, 0x158
add rdx, 0x10
xor r15d, r15d
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 8]
lea r8, [rbp + 0xf50]
mov rcx, qword [0x1800f03d8]
call qword [sym.imp.kernel32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0xf50]
add rdx, 0x10
lea rcx, [rbp + 0x10a0]
call fcn.18002f720
nop
lea rdx, [rbp + 0x10a0]
lea rcx, [rbp + 0xdf0]
call fcn.180018170
mov rdx, rax
lea rcx, [rbp + 0x10a0]
call fcn.180010af0
lea rcx, [rbp + 0xdf0]
call fcn.180010a90
lea rdx, [rbp + 0x10a0]
lea rcx, [rbp + 0x1080]
call fcn.18001bd50
nop
mov dword [rbp + 0x2e0], 0xdefffcdd
mov byte [rbp + 0x2e4], 0x34
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x2e5], xmm0
mov dword [rbp + 0x2f5], eax
mov word [rbp + 0x2f9], ax
mov byte [rbp + 0x2fb], al
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0x3261fc5574e21af8
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x2e0]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x38
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x2e0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1c
jb 0x18001cf72
xor r15d, r15d
mov dword [rbp + 0xe0], 0xccccdec4
mov dword [rbp + 0xe4], 0xe21cd3c8
mov dword [rbp + 0xe8], 0xc31dfe01
xor eax, eax
mov qword [rbp + 0xec], rax
mov byte [rbp + 0xf4], al
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs rsi, 0xfa34cd6626430777
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0xe0]
add r8, rsi
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
sub cl, 0x41
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0xe0], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x15
jb 0x18001d004
movzx esi, byte [rsp + 0x38]
lea r8, [rbp + 0x1080]
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0xe30]
call fcn.180011910
nop
lea rcx, [rbp + 0x2e0]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rcx + r8], 0
jne 0x18001d080
lea rdx, [rbp + 0x2e0]
mov rcx, rax
call fcn.180011310
mov rdx, rax
lea rcx, [rbp + 0x540]
call fcn.180010b80
bts r13d, 0x17
lea rdx, [rbp + 0x540]
lea rcx, [rbp + 0xe10]
call fcn.1800163e0
mov rdx, rax
lea rcx, [rbp + 0x1080]
call fcn.180010af0
lea rcx, [rbp + 0xe10]
call fcn.180010a90
nop
lea rcx, [rbp + 0xe30]
call fcn.180010a90
mov rcx, qword [rbp + 0xf58]
add rcx, 0x158
call fcn.180008660
lea rcx, [rax + 0x10]
lea rdx, [rbp + 0x1080]
call fcn.18002f9b0
lea rdx, [0x1800d5940]
lea rcx, [rbp + 0xe50]
call fcn.180010bb0
mov rdx, rax
lea rcx, [rbp + 0xf58]
call fcn.18002fe70
nop
lea rcx, [rbp + 0x1080]
call fcn.180010a90
nop
lea rcx, [rbp + 0x10a0]
call fcn.180010a90
jmp 0x18001f6df
mov dword [rbp + 0xa0], 0x10061403
mov dword [rbp + 0xa4], 0x15060c08
mov dword [rbp + 0xa8], 0x2f382837
mov byte [rbp + 0xac], 0x8c
xor eax, eax
mov dword [rbp + 0xad], eax
mov byte [rbp + 0xb1], al
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0xdfb67fca90470f98
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0xa0]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x28
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0xa0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x12
jb 0x18001d193
xor r15d, r15d
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0xf80]
call fcn.1800118c0
test al, al
je 0x18001d32d
lea rdx, [0x1800d5938]
lea rcx, [rbp + 0xe70]
call fcn.180010bb0
mov rdx, rax
lea rcx, [rbp + 0xf58]
call fcn.18002fe70
lea rdx, [rbp + 0x870]
lea rcx, [rbp + 0xf58]
call fcn.180030090
nop
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
sub rdx, rcx
sar rdx, 3
test rdx, rdx
je 0x18001f767
lea rdx, [rbp + 0x10c0]
call fcn.18002ffa0
nop
lea rcx, [rbp + 0x870]
call fcn.18000f5f0
xor ecx, ecx
call qword [sym.imp.user32.dll_OpenClipboard]
call qword [sym.imp.user32.dll_EmptyClipboard]
mov rdx, qword [rbp + 0x10d0]
inc rdx
lea ecx, [r15 + 2]
call qword [sym.imp.kernel32.dll_GlobalAlloc]
mov r15, rax
test rax, rax
jne 0x18001d295
call qword [sym.imp.user32.dll_CloseClipboard]
mov rcx, r15
call qword [sym.imp.kernel32.dll_GlobalLock]
mov r12, rax
test rax, rax
jne 0x18001d2b5
mov rcx, r15
call qword [sym.imp.kernel32.dll_GlobalFree]
call qword [sym.imp.user32.dll_CloseClipboard]
lea rcx, [rbp + 0x10c0]
call fcn.1800113f0
mov rdx, qword [rbp + 0x10d0]
inc rdx
mov r8, rax
mov rcx, r12
call qword [sym.imp.ucrtbase.dll_strcpy_s]
mov rcx, r15
call qword [sym.imp.kernel32.dll_GlobalUnlock]
mov rdx, r15
mov ecx, 1
call qword [sym.imp.user32.dll_SetClipboardData]
call qword [sym.imp.user32.dll_CloseClipboard]
lea rdx, [0x1800d5528]
lea rcx, [rbp + 0xe90]
call fcn.180010bb0
mov rdx, rax
lea rcx, [rbp + 0xf58]
call fcn.18002fe70
nop
lea rcx, [rbp + 0x10c0]
call fcn.180010a90
mov r12d, dword [rsp + 0x3c]
jmp 0x18001f6df
mov dword [rbp + 0x280], 0x95a694a3
mov dword [rbp + 0x284], 0x9695a6a4
mov word [rbp + 0x288], 0x29b8
xorps xmm0, xmm0
movups xmmword [rbp + 0x28a], xmm0
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0xc5171b94a5d80688
nop dword [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x280]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x48
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x280], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1a
jb 0x18001d370
xor r15d, r15d
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0xf80]
call fcn.1800118c0
test al, al
je 0x18001d4b9
lea rdx, [0x1800d5938]
lea rcx, [rbp + 0xeb0]
call fcn.180010bb0
mov rdx, rax
lea rcx, [rbp + 0xf58]
call fcn.18002fe70
lea rdx, [rbp + 0x888]
lea rcx, [rbp + 0xf58]
call fcn.180030090
nop
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
sub rdx, rcx
sar rdx, 3
test rdx, rdx
je 0x18001f76d
lea rdx, [rbp + 0x1220]
call fcn.18002ffa0
nop
lea rcx, [rbp + 0x888]
call fcn.18000f5f0
xor edx, edx
lea r8d, [r15 + 0xa]
lea rcx, [rbp + 0x1220]
call fcn.180016a30
mov dword [rbp + 0xf70], eax
mov rdx, qword [0x1800f03d0]
add rdx, 0x4e80c80
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 8]
lea r8, [rbp + 0xf70]
mov rcx, qword [0x1800f03d8]
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
lea rdx, [0x1800d5940]
lea rcx, [rbp + 0xed0]
call fcn.180010bb0
mov rdx, rax
lea rcx, [rbp + 0xf58]
call fcn.18002fe70
nop
lea rcx, [rbp + 0x1220]
call fcn.180010a90
jmp 0x18001f6df
mov dword [rbp + 0x180], 0x666e6866
mov dword [rbp + 0x184], 0x73757c77
mov word [rbp + 0x188], 0x646d
mov byte [rbp + 0x18a], 0xca
xor eax, eax
mov qword [rbp + 0x18b], rax
mov byte [rbp + 0x193], al
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0x64a2d2b8ac026aa0
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x180]
add r8, r15
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
sub cl, 0x60
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x180], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x14
jb 0x18001d500
xor r15d, r15d
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0xf80]
call fcn.1800118c0
test al, al
je 0x18001f24e
mov eax, 1
mov word [rbp + 0xf68], ax
mov rdx, qword [rbp + 0xf58]
add rdx, 0x1b8
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 2]
lea r8, [rbp + 0xf68]
mov rcx, qword [0x1800f03d8]
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
lea rdx, [0x1800d5938]
lea rcx, [rbp + 0xef0]
call fcn.180010bb0
mov rdx, rax
lea rcx, [rbp + 0xf58]
call fcn.18002fe70
lea rdx, [rbp + 0x8a0]
lea rcx, [rbp + 0xf58]
call fcn.180030090
nop
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
sub rdx, rcx
sar rdx, 3
test rdx, rdx
je 0x18001f755
lea rdx, [rbp + 0x1200]
call fcn.18002ffa0
nop
lea rcx, [rbp + 0x8a0]
call fcn.18000f5f0
mov qword [rbp + 0xf48], r15
mov byte [rsp + 0x20], r15b
mov r9b, 1
lea r8, [rbp + 0xf10]
lea rdx, [rbp + 0x1200]
lea rcx, [rbp + 0xfa0]
call fcn.180022590
nop
lea rcx, [rbp + 0xfb0]
call fcn.180010bf0
lea rcx, [rbp + 0xfd0]
call fcn.180010bf0
lea rcx, [rbp + 0xff0]
call fcn.180010bf0
nop
mov dword [rbp + 0x300], 0xf2e6f2cd
mov word [rbp + 0x304], 0xfbfb
mov byte [rbp + 0x306], 0x66
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x307], xmm0
mov dword [rbp + 0x317], eax
mov word [rbp + 0x31b], ax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0x7719f36db1679fd2
nop dword [rax]
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x300]
add r8, r15
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x42
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x300], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1d
jb 0x18001d6a0
xor r15d, r15d
lea rdx, [rbp + 0x300]
lea rcx, [rbp + 0x8d0]
call fcn.180010bb0
mov rdx, rax
lea rcx, [rbp + 0xfa0]
call fcn.1800240e0
movzx r8d, dil
lea rdx, [rbp + 0x560]
mov rcx, rax
call fcn.180026a70
or r12d, 2
lea rdx, [rbp + 0x560]
lea rcx, [rbp + 0xfd0]
call fcn.180010af0
lea rcx, [rbp + 0x560]
call fcn.180010a90
mov dword [rbp + 0x1e0], 0xe0e8eaec
mov dword [rbp + 0x1e4], 0xe4dbeef8
mov byte [rbp + 0x1e8], 0x4e
xor eax, eax
mov qword [rbp + 0x1e9], rax
mov dword [rbp + 0x1f1], eax
mov byte [rbp + 0x1f5], al
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0x65eac5ce075b6375
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x1e0]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x33
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x1e0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x16
jb 0x18001d790
xor r15d, r15d
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0xa30]
call fcn.180010bb0
mov rdx, rax
lea rcx, [rbp + 0xfa0]
call fcn.1800240e0
movzx r8d, bl
lea rdx, [rbp + 0x580]
mov rcx, rax
call fcn.180026a70
or r12d, 4
mov dword [rsp + 0x3c], r12d
lea rdx, [rbp + 0x580]
lea rcx, [rbp + 0xff0]
call fcn.180010af0
lea rcx, [rbp + 0x580]
call fcn.180010a90
mov dword [rbp + 0x480], 0x272b2032
mov byte [rbp + 0x484], 0x88
xor eax, eax
mov qword [rbp + 0x485], rax
mov dword [rbp + 0x48d], eax
mov word [rbp + 0x491], ax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0x1dd0c873a538b36a
nop dword [rax]
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x480]
add r8, r15
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x1a
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x480], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x13
jb 0x18001d880
xor r15d, r15d
lea rdx, [rbp + 0x480]
lea rcx, [rbp + 0xfd0]
call fcn.1800118c0
test al, al
je 0x18001dbe3
lea rdx, [0x1800d5433]
lea rcx, [rbp + 0x5c0]
call fcn.180010bb0
nop
mov dword [rbp + 0x3d0], 0x5f5b5e14
mov byte [rbp + 0x3d4], 0xfa
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x3d5], xmm0
mov qword [rbp + 0x3e5], rax
mov word [rbp + 0x3ed], ax
mov byte [rbp + 0x3ef], al
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0x9f342a4953ecc8bf
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x3d0]
add r8, r15
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
sub cl, 0x39
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x3d0], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x20
jb 0x18001d942
xor r15d, r15d
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp + 0x5a0]
call fcn.180010bb0
nop
lea r9, [rbp + 0x5c0]
lea r8, [rbp + 0xff0]
lea rdx, [rbp + 0x5a0]
lea rcx, [rbp + 0x8f0]
call fcn.180019650
nop
mov rdx, rax
lea rcx, [rbp + 0x11e0]
call fcn.18001bd50
nop
lea rcx, [rbp + 0x8f0]
call fcn.180010a90
nop
lea rcx, [rbp + 0x5a0]
call fcn.180010a90
nop
lea rcx, [rbp + 0x5c0]
call fcn.180010a90
mov dword [rbp + 0x460], 0xeecfc0e1
mov byte [rbp + 0x464], 0x80
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x465], xmm0
mov byte [rbp + 0x475], al
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0x2c560e2eeb374d96
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x460]
add r8, r15
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
sub cl, 0x1a
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x460], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x16
jb 0x18001da33
xor r15d, r15d
mov dword [rbp + 0x80], 0xb6b6a0b2
mov dword [rbp + 0x84], 0xb076bbb6
mov dword [rbp + 0x88], 0x53b59091
xor eax, eax
mov qword [rbp + 0x8c], rax
mov dword [rbp + 0x94], eax
mov byte [rbp + 0x98], al
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs rdi, 0xcf093192dfdc580a
nop dword [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x80]
add rcx, rdi
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x46
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x80], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x19
jb 0x18001dad0
movzx edi, byte [rsp + 0x38]
lea r8, [rbp + 0x11e0]
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x910]
call fcn.180011910
nop
lea rcx, [rbp + 0x460]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rcx + r8], 0
jne 0x18001db50
lea rdx, [rbp + 0x460]
mov rcx, rax
call fcn.180011310
mov rdx, rax
lea rcx, [rbp + 0x5e0]
call fcn.180010b80
or r12d, 0x40
mov dword [rsp + 0x3c], r12d
lea rdx, [rbp + 0x5e0]
lea rcx, [rbp + 0x10e0]
call fcn.1800163e0
nop
lea rcx, [rbp + 0x910]
call fcn.180010a90
mov rcx, qword [rbp + 0xf58]
add rcx, 0x158
call fcn.180008660
lea rcx, [rax + 0x10]
lea rdx, [rbp + 0x10e0]
call fcn.18002f9b0
nop
lea rcx, [rbp + 0x10e0]
call fcn.180010a90
nop
lea rcx, [rbp + 0x11e0]
call fcn.180010a90
jmp 0x18001f205
mov dword [rbp + 0x3b0], 0x776b7377
mov word [rbp + 0x3b4], 0xc561
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x3b6], xmm0
mov qword [rbp + 0x3c6], rax
mov word [rbp + 0x3ce], ax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0x5851aebb6eb21360
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x3b0]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x60
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x3b0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x20
jb 0x18001dc24
xor r15d, r15d
lea rdx, [rbp + 0x3b0]
lea rcx, [rbp + 0xfd0]
call fcn.1800118c0
test al, al
je 0x18001dea2
mov dword [rsp + 0x50], 0xdfc6c4b3
mov dword [rsp + 0x54], 0xdadcdbd1
mov byte [rsp + 0x58], 0x4e
xor eax, eax
mov dword [rsp + 0x59], eax
mov word [rsp + 0x5d], ax
mov byte [rsp + 0x5f], al
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0xecadf2f6e668e00d
nop dword [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x50]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x5b
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x50], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x10
jb 0x18001dcd0
xor r15d, r15d
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x930]
call fcn.180010bb0
mov rdx, rax
lea rcx, [rbp + 0xfa0]
call fcn.1800240e0
movzx r8d, sil
lea rdx, [rbp + 0x1100]
mov rcx, rax
call fcn.180026a70
bts r12d, 9
mov dword [rsp + 0x3c], r12d
lea rcx, [rbp + 0x1100]
call fcn.1800113f0
mov rdx, rax
lea rcx, [rbp + 0x620]
call fcn.180010bb0
nop
lea rdx, [rbp + 0x620]
lea rcx, [rbp + 0x950]
call fcn.18001c010
mov rdx, rax
lea rcx, [rbp + 0xfb0]
call fcn.180010af0
lea rcx, [rbp + 0x950]
call fcn.180010a90
nop
lea rcx, [rbp + 0x620]
call fcn.180010a90
mov dword [rbp + 0x2c0], 0xf7b030f
mov word [rbp + 0x2c4], 0x9d7d
xor eax, eax
mov qword [rbp + 0x2c6], rax
mov dword [rbp + 0x2ce], eax
mov word [rbp + 0x2d2], ax
mov byte [rbp + 0x2d4], al
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs rbx, 0xe69822fbeb5109c3
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x2c0]
add r8, rbx
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
sub cl, 0x55
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x2c0], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x15
jb 0x18001ddf2
movzx ebx, byte [rsp + 0x38]
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x640]
call fcn.180010bb0
nop
lea r9, [rbp + 0xfb0]
lea r8, [rbp + 0xff0]
lea rdx, [rbp + 0x640]
lea rcx, [rbp + 0x970]
call fcn.180019650
lea rcx, [rbp + 0x970]
call fcn.180010a90
nop
lea rcx, [rbp + 0x640]
call fcn.180010a90
nop
lea rcx, [rbp + 0x1100]
call fcn.180010a90
jmp 0x18001f205
mov dword [rbp + 0x380], 0xb6cac9b9
mov word [rbp + 0x384], 0xa9d2
mov byte [rbp + 0x386], 0x46
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x387], xmm0
mov word [rbp + 0x397], ax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0xe096dd1c7868f18c
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x380]
add r8, r15
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x2c
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x380], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x19
jb 0x18001dee3
xor r15d, r15d
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xfd0]
call fcn.1800118c0
test al, al
je 0x18001e174
mov dword [rbp + 0x1a0], 0x5f262433
mov dword [rbp + 0x1a4], 0x5a5c5b51
mov byte [rbp + 0x1a8], 0xee
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1a9], xmm0
mov dword [rbp + 0x1b9], eax
mov word [rbp + 0x1bd], ax
mov byte [rbp + 0x1bf], al
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0xc44df8ddec21d93d
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x1a0]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x55
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x1a0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x20
jb 0x18001dfa0
xor r15d, r15d
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x990]
call fcn.180010bb0
mov rdx, rax
lea rcx, [rbp + 0xfa0]
call fcn.1800240e0
movzx r8d, r14b
lea rdx, [rbp + 0x1120]
mov rcx, rax
call fcn.180026a70
bts r12d, 0xc
mov dword [rsp + 0x3c], r12d
lea rcx, [rbp + 0x1120]
call fcn.1800113f0
mov rdx, rax
lea rcx, [rbp + 0x660]
call fcn.180010bb0
nop
lea rdx, [rbp + 0x660]
lea rcx, [rbp + 0x9b0]
call fcn.18001c010
mov rdx, rax
lea rcx, [rbp + 0xfb0]
call fcn.180010af0
lea rcx, [rbp + 0x9b0]
call fcn.180010a90
nop
lea rcx, [rbp + 0x660]
call fcn.180010a90
mov dword [rbp + 0x360], 0xc6f2f1c1
mov word [rbp + 0x364], 0xc1ca
mov byte [rbp + 0x366], 0x66
xor eax, eax
mov qword [rbp + 0x367], rax
mov dword [rbp + 0x36f], eax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs rdi, 0xd7ec239e10bbc210
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x360]
add r8, rdi
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
sub cl, 0x70
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x360], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x13
jb 0x18001e0c4
movzx edi, byte [rsp + 0x38]
lea rdx, [rbp + 0x360]
lea rcx, [rbp + 0x680]
call fcn.180010bb0
nop
lea r9, [rbp + 0xfb0]
lea r8, [rbp + 0xff0]
lea rdx, [rbp + 0x680]
lea rcx, [rbp + 0x9d0]
call fcn.180019650
lea rcx, [rbp + 0x9d0]
call fcn.180010a90
nop
lea rcx, [rbp + 0x680]
call fcn.180010a90
nop
lea rcx, [rbp + 0x1120]
call fcn.180010a90
jmp 0x18001f205
mov dword [rbp + 0x340], 0x562e5454
mov word [rbp + 0x344], 0x5020
mov byte [rbp + 0x346], 0xb6
xor eax, eax
mov qword [rbp + 0x347], rax
mov word [rbp + 0x34f], ax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0x144dec65ea58fce8
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x340]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x58
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x340], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x11
jb 0x18001e1b2
xor r15d, r15d
lea rdx, [rbp + 0x340]
lea rcx, [rbp + 0xfd0]
call fcn.1800118c0
test al, al
je 0x18001e320
lea rdx, [0x1800d5433]
lea rcx, [rbp + 0x6c0]
call fcn.180010bb0
nop
mov dword [rbp + 0x320], 0x50a8aeb2
mov word [rbp + 0x324], 0x525e
mov byte [rbp + 0x326], 0xe8
xor eax, eax
mov qword [rbp + 0x327], rax
mov word [rbp + 0x32f], ax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs rsi, 0x400e35849e4f597d
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x320]
add r8, rsi
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
sub cl, 0x6b
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x320], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x11
jb 0x18001e270
movzx esi, byte [rsp + 0x38]
lea rdx, [rbp + 0x320]
lea rcx, [rbp + 0x6a0]
call fcn.180010bb0
nop
lea r9, [rbp + 0x6c0]
lea r8, [rbp + 0xff0]
lea rdx, [rbp + 0x6a0]
lea rcx, [rbp + 0x9f0]
call fcn.180019650
lea rcx, [rbp + 0x9f0]
call fcn.180010a90
nop
lea rcx, [rbp + 0x6a0]
call fcn.180010a90
nop
lea rcx, [rbp + 0x6c0]
call fcn.180010a90
jmp 0x18001f205
mov dword [rbp + 0x3f0], 0x242e3821
mov word [rbp + 0x3f4], 0x2a26
mov byte [rbp + 0x3f6], 0xb0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x3f7], xmm0
mov word [rbp + 0x407], ax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0xbed08de56f924b69
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x3f0]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x21
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x3f0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x19
jb 0x18001e361
xor r15d, r15d
lea rdx, [rbp + 0x3f0]
lea rcx, [rbp + 0xfd0]
call fcn.1800118c0
test al, al
je 0x18001e673
lea rdx, [0x1800d5433]
lea rcx, [rbp + 0x700]
call fcn.180010bb0
nop
mov dword [rbp + 0x2a0], 0x1a181a15
mov word [rbp + 0x2a4], 0x41c
mov byte [rbp + 0x2a6], 0xa6
xor eax, eax
mov qword [rbp + 0x2a7], rax
mov dword [rbp + 0x2af], eax
mov word [rbp + 0x2b3], ax
mov byte [rbp + 0x2b5], al
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0x41d6055f1ab09846
nop dword [rax + rax]
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x2a0]
add r8, r15
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x16
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x2a0], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x16
jb 0x18001e430
xor r15d, r15d
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x6e0]
call fcn.180010bb0
nop
lea r9, [rbp + 0x700]
lea r8, [rbp + 0xff0]
lea rdx, [rbp + 0x6e0]
lea rcx, [rbp + 0x1260]
call fcn.180019650
nop
lea rcx, [rbp + 0x6e0]
call fcn.180010a90
nop
lea rcx, [rbp + 0x700]
call fcn.180010a90
mov dword [rbp + 0x4e0], 0xe8c7c6e5
mov byte [rbp + 0x4e4], 0x8a
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x4e5], xmm0
mov qword [rbp + 0x4f5], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0x4e9f071f86c26495
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x4e0]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x13
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x4e0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1d
jb 0x18001e505
xor r15d, r15d
mov dword [rbp + 0x1c0], 0xb6b6a0b2
mov dword [rbp + 0x1c4], 0xb076bbb6
mov dword [rbp + 0x1c8], 0x13b55051
xor eax, eax
mov qword [rbp + 0x1cc], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs rbx, 0xcd35513f39ecf42a
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x1c0]
add rcx, rbx
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x26
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x1c0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x14
jb 0x18001e591
movzx ebx, byte [rsp + 0x38]
lea r8, [rbp + 0x1260]
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0xa50]
call fcn.180011910
nop
lea r8, [rbp + 0x4e0]
mov rdx, rax
lea rcx, [rbp + 0xa10]
call fcn.180011590
mov rdx, rax
lea rcx, [rbp + 0x1240]
call fcn.1800163e0
nop
lea rcx, [rbp + 0xa50]
call fcn.180010a90
lea rcx, [rbp + 0xf58]
call fcn.18002fd50
lea rcx, [rax + 0x158]
call fcn.180008660
lea rcx, [rax + 0x10]
lea rdx, [rbp + 0x1240]
call fcn.18002f9b0
nop
lea rcx, [rbp + 0x1240]
call fcn.180010a90
nop
lea rcx, [rbp + 0x1260]
jmp 0x18001f200
mov dword [rbp + 0x200], 0x50585a55
mov dword [rbp + 0x204], 0x5143455c
mov byte [rbp + 0x208], 0xa4
xor eax, eax
mov qword [rbp + 0x209], rax
mov dword [rbp + 0x211], eax
mov word [rbp + 0x215], ax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0xc357023d8743a1e6
nop dword [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x200]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x4a
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x200], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x17
jb 0x18001e6c0
xor r15d, r15d
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0xfd0]
call fcn.1800118c0
test al, al
je 0x18001e9bb
lea rdx, [0x1800d5433]
lea rcx, [rbp + 0x740]
call fcn.180010bb0
nop
mov dword [rbp + 0x220], 0xc0d8dac5
mov dword [rbp + 0x224], 0xc1d3d5dc
mov byte [rbp + 0x228], 0x74
xor eax, eax
mov qword [rbp + 0x229], rax
mov dword [rbp + 0x231], eax
mov byte [rbp + 0x235], al
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0xbebd33f3c3793b8e
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x220]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x1e
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x220], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x16
jb 0x18001e784
xor r15d, r15d
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 0x720]
call fcn.180010bb0
nop
lea r9, [rbp + 0x740]
lea r8, [rbp + 0xff0]
lea rdx, [rbp + 0x720]
lea rcx, [rbp + 0x11a0]
call fcn.180019650
nop
lea rcx, [rbp + 0x720]
call fcn.180010a90
nop
lea rcx, [rbp + 0x740]
call fcn.180010a90
mov dword [rbp + 0x4a0], 0x5e3f3c5d
mov byte [rbp + 0x4a4], 4
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x4a5], xmm0
mov dword [rbp + 0x4b5], eax
mov byte [rbp + 0x4b9], al
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0x5904d64ff8300e80
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x4a0]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x80
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x4a0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1a
jb 0x18001e861
xor r15d, r15d
mov dword [rsp + 0x40], 0xc6c6c8da
mov dword [rsp + 0x44], 0xa896c3c6
mov qword [rsp + 0x48], 0x7ba58889
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r14, 0x2c0c9d9cb65c898e
nop
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x40]
add rcx, r14
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x1e
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x40], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x10
jb 0x18001e8e0
movzx r14d, byte [rsp + 0x38]
lea r8, [rbp + 0x11a0]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0xa90]
call fcn.180011910
nop
lea r8, [rbp + 0x4a0]
mov rdx, rax
lea rcx, [rbp + 0xa70]
call fcn.180011590
mov rdx, rax
lea rcx, [rbp + 0x1180]
call fcn.1800163e0
nop
lea rcx, [rbp + 0xa90]
call fcn.180010a90
lea rcx, [rbp + 0xf58]
call fcn.18002fd50
lea rcx, [rax + 0x158]
call fcn.180008660
lea rcx, [rax + 0x10]
lea rdx, [rbp + 0x1180]
call fcn.18002f9b0
nop
lea rcx, [rbp + 0x1180]
call fcn.180010a90
nop
lea rcx, [rbp + 0x11a0]
jmp 0x18001f200
mov dword [rbp + 0x240], 0x40494255
mov dword [rbp + 0x244], 0x4b445840
mov word [rbp + 0x248], 0x5b45
mov byte [rbp + 0x24a], 0x2c
xor eax, eax
mov qword [rbp + 0x24b], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0xb06e0ddaa76dad25
nop dword [rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x240]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 3
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x240], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x13
jb 0x18001ea00
xor r15d, r15d
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0xfd0]
call fcn.1800118c0
test al, al
je 0x18001eb7e
lea rdx, [0x1800d5433]
lea rcx, [rbp + 0x780]
call fcn.180010bb0
nop
mov dword [rbp + 0x160], 0x4641784d
mov dword [rbp + 0x164], 0x4b42424a
mov word [rbp + 0x168], 0x434d
mov byte [rbp + 0x16a], 0xd2
xor eax, eax
mov dword [rbp + 0x16b], eax
mov word [rbp + 0x16f], ax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r12, 0xf394976637c48fa4
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x160]
add rcx, r12
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x7c
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x160], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x11
jb 0x18001ead0
mov r12d, dword [rsp + 0x3c]
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x760]
call fcn.180010bb0
nop
lea r9, [rbp + 0x780]
lea r8, [rbp + 0xff0]
lea rdx, [rbp + 0x760]
lea rcx, [rbp + 0xab0]
call fcn.180019650
lea rcx, [rbp + 0xab0]
call fcn.180010a90
nop
lea rcx, [rbp + 0x760]
call fcn.180010a90
nop
lea rcx, [rbp + 0x780]
jmp 0x18001f200
mov dword [rbp + 0x40], 0x263e2020
mov dword [rbp + 0x44], 0x243c2434
mov dword [rbp + 0x48], 0x2d3f3920
mov byte [rbp + 0x4c], 0x50
xor eax, eax
mov qword [rbp + 0x4d], rax
mov dword [rbp + 0x55], eax
mov word [rbp + 0x59], ax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0x8220564e183ecc4a
nop dword [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x40]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 6
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x40], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1b
jb 0x18001ebc0
xor r15d, r15d
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0xfd0]
call fcn.1800118c0
test al, al
je 0x18001ed15
lea rdx, [0x1800d5433]
lea rcx, [rbp + 0x600]
call fcn.180010bb0
nop
mov dword [rbp + 0x60], 0xa6bea0a0
mov dword [rbp + 0x64], 0xa4bca4b4
mov dword [rbp + 0x68], 0xadbfb9a0
mov byte [rbp + 0x6c], 0x50
xor eax, eax
mov qword [rbp + 0x6d], rax
mov word [rbp + 0x75], ax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs rdi, 0x204113af4e9b550a
nop
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x60]
add rcx, rdi
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x46
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x60], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x17
jb 0x18001ec70
movzx edi, byte [rsp + 0x38]
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x7a0]
call fcn.180010bb0
nop
lea r9, [rbp + 0x600]
lea r8, [rbp + 0xff0]
lea rdx, [rbp + 0x7a0]
lea rcx, [rbp + 0xad0]
call fcn.180019650
lea rcx, [rbp + 0xad0]
call fcn.180010a90
nop
lea rcx, [rbp + 0x7a0]
call fcn.180010a90
nop
lea rcx, [rbp + 0x600]
jmp 0x18001f200
mov dword [rbp + 0x260], 0xafad525a
mov dword [rbp + 0x264], 0x5850565c
mov word [rbp + 0x268], 0x21ab
xor eax, eax
mov qword [rbp + 0x26a], rax
mov word [rbp + 0x272], ax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0x29137565d11818a7
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x260]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x6f
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x260], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x14
jb 0x18001ed56
xor r15d, r15d
lea rdx, [rbp + 0x260]
lea rcx, [rbp + 0xfd0]
call fcn.1800118c0
test al, al
je 0x18001f062
lea rdx, [0x1800d5433]
lea rcx, [rbp + 0x7e0]
call fcn.180010bb0
nop
mov dword [rsp + 0x60], 0x2f2d121a
mov dword [rsp + 0x64], 0x1810161c
mov word [rsp + 0x68], 0xa12b
xor eax, eax
mov dword [rsp + 0x6a], eax
mov word [rsp + 0x6e], ax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0x7b6589cd272e8ac7
nop dword [rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x60]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x71
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x60], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x10
jb 0x18001ee10
xor r15d, r15d
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x7c0]
call fcn.180010bb0
nop
lea r9, [rbp + 0x7e0]
lea r8, [rbp + 0xff0]
lea rdx, [rbp + 0x7c0]
lea rcx, [rbp + 0x1160]
call fcn.180019650
nop
lea rcx, [rbp + 0x7c0]
call fcn.180010a90
nop
lea rcx, [rbp + 0x7e0]
call fcn.180010a90
mov dword [rbp + 0x440], 0x8eefe889
mov byte [rbp + 0x444], 0x28
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x445], xmm0
mov word [rbp + 0x455], ax
mov byte [rbp + 0x457], al
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0x7e0a074b2dec7d5a
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x440]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x76
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x440], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x18
jb 0x18001eee6
xor r15d, r15d
mov dword [rbp + 0xc0], 0x8686889a
mov dword [rbp + 0xc4], 0xa8568386
mov dword [rbp + 0xc8], 0x7ba54849
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xcc], xmm0
mov dword [rbp + 0xdc], eax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs rsi, 0x7bdffb4069fc0b2e
nop dword [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0xc0]
add rcx, rsi
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x42
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0xc0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x20
jb 0x18001ef80
movzx esi, byte [rsp + 0x38]
lea r8, [rbp + 0x1160]
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0xb10]
call fcn.180011910
nop
lea r8, [rbp + 0x440]
mov rdx, rax
lea rcx, [rbp + 0xaf0]
call fcn.180011590
mov rdx, rax
lea rcx, [rbp + 0x1140]
call fcn.1800163e0
nop
lea rcx, [rbp + 0xb10]
call fcn.180010a90
lea rcx, [rbp + 0xf58]
call fcn.18002fd50
lea rcx, [rax + 0x158]
call fcn.180008660
lea rcx, [rax + 0x10]
lea rdx, [rbp + 0x1140]
call fcn.18002f9b0
nop
lea rcx, [rbp + 0x1140]
call fcn.180010a90
nop
lea rcx, [rbp + 0x1160]
jmp 0x18001f200
mov dword [rbp + 0x20], 0x9466a8a7
mov dword [rbp + 0x24], 0x64626665
mov dword [rbp + 0x28], 0x6c6d9499
mov word [rbp + 0x2c], 0x6d9d
mov byte [rbp + 0x2e], 0xfe
xor eax, eax
mov dword [rbp + 0x2f], eax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0x4152a50adf2584de
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x20]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x12
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x20], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x13
jb 0x18001f0a0
xor r15d, r15d
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0xfd0]
call fcn.1800118c0
test al, al
je 0x18001f205
lea rdx, [0x1800d5433]
lea rcx, [rbp + 0x820]
call fcn.180010bb0
nop
mov dword [rbp - 0x50], 0x5e2c5e5f
mov dword [rbp - 0x4c], 0x2e28282d
mov dword [rbp - 0x48], 0x36354251
mov word [rbp - 0x44], 0x3145
mov byte [rbp - 0x42], 0xa4
xor eax, eax
mov qword [rbp - 0x41], rax
mov word [rbp - 0x39], ax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs rbx, 0x7a82ea6c6328d167
nop dword [rax]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax - 0x50]
add rcx, rbx
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x2f
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax - 0x50], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x19
jb 0x18001f160
movzx ebx, byte [rsp + 0x38]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x800]
call fcn.180010bb0
nop
lea r9, [rbp + 0x820]
lea r8, [rbp + 0xff0]
lea rdx, [rbp + 0x800]
lea rcx, [rbp + 0xb30]
call fcn.180019650
lea rcx, [rbp + 0xb30]
call fcn.180010a90
nop
lea rcx, [rbp + 0x800]
call fcn.180010a90
nop
lea rcx, [rbp + 0x820]
call fcn.180010a90
lea rdx, [0x1800d5528]
lea rcx, [rbp + 0xb50]
call fcn.180010bb0
mov rdx, rax
lea rcx, [rbp + 0xf58]
call fcn.18002fe70
nop
lea rcx, [rbp + 0xfb0]
call fcn.18001f780
nop
lea rcx, [rbp + 0xfa0]
call fcn.18001fce0
nop
lea rcx, [rbp + 0x1200]
jmp 0x18001f6d9
mov dword [rbp - 0x70], 0x4677407d
mov dword [rbp - 0x6c], 0x4b747a75
mov dword [rbp - 0x68], 0x737f7179
mov dword [rbp - 0x64], 0xdf524f73
xor eax, eax
mov dword [rbp - 0x60], eax
mov byte [rbp - 0x5c], al
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0x7d7687f1be8bbd22
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax - 0x70]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x12
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax - 0x70], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x15
jb 0x18001f290
xor r15d, r15d
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0xf80]
call fcn.1800118c0
test al, al
je 0x18001f393
lea rdx, [0x1800d5938]
lea rcx, [rbp + 0xb70]
call fcn.180010bb0
mov rdx, rax
lea rcx, [rbp + 0xf58]
call fcn.18002fe70
lea rdx, [rbp + 0x8b8]
lea rcx, [rbp + 0xf58]
call fcn.180030090
nop
xor edx, edx
mov rcx, rax
call fcn.18001f880
lea rdx, [rbp + 0xb90]
mov rcx, rax
call fcn.18002ffa0
nop
mov rdx, rax
lea rcx, [0x1800f0478]
call fcn.18001f8f0
nop
lea rcx, [rbp + 0xb90]
call fcn.180010a90
nop
lea rcx, [rbp + 0x8b8]
call fcn.18000f5f0
lea rdx, [0x1800d5528]
lea rcx, [rbp + 0xbb0]
call fcn.180010bb0
mov rdx, rax
lea rcx, [rbp + 0xf58]
call fcn.18002fe70
jmp 0x18001f6df
mov dword [rbp + 0x410], 0x3100e0f
mov dword [rbp + 0x414], 0xaf0c0613
xorps xmm0, xmm0
movups xmmword [rbp + 0x418], xmm0
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0x929c0425b8cd45
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x410]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x1d
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x410], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x18
jb 0x18001f3c5
xor r15d, r15d
lea rdx, [rbp + 0x410]
lea rcx, [rbp + 0xf80]
call fcn.1800118c0
test al, al
je 0x18001f6df
lea rdx, [0x1800d5938]
lea rcx, [rbp + 0xdd0]
call fcn.180010bb0
mov rdx, rax
lea rcx, [rbp + 0xf58]
call fcn.18002fe70
lea rcx, [rbp + 0x12a0]
call fcn.1800304b0
lea rcx, [rbp + 0xbd0]
call fcn.18001c2d0
nop
mov rdx, rax
lea rcx, [rbp + 0x12a0]
call fcn.180030500
nop
lea rcx, [rbp + 0xbd0]
call fcn.180010a90
lea rdx, [rbp + 0x1280]
lea rcx, [rbp + 0x12a0]
call fcn.180030590
mov eax, 1
mov word [rbp + 0xf6c], ax
lea rcx, [rbp + 0xf58]
call fcn.18002fd50
lea rdx, [rax + 0x1b8]
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 2]
lea r8, [rbp + 0xf6c]
mov rcx, qword [0x1800f03d8]
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
mov dword [rbp + 0x4c0], 0xa48786a1
mov byte [rbp + 0x4c4], 0x42
xor eax, eax
mov qword [rbp + 0x4c5], rax
mov dword [rbp + 0x4cd], eax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r15, 0x55f8c9b03540a18b
nop dword [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x4c0]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x33
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x4c0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x11
jb 0x18001f510
xor r15d, r15d
lea rdx, [rbp + 0x1280]
lea rcx, [rbp + 0xc50]
call fcn.1800308f0
nop
mov rdx, rax
lea rcx, [rbp + 0xc30]
call fcn.18001bd50
mov r9, rax
mov dword [rbp + 0x140], 0x1616e81a
mov dword [rbp + 0x144], 0xe8a61316
mov dword [rbp + 0x148], 0xbbd5c8c9
xor eax, eax
mov dword [rbp + 0x14c], eax
mov word [rbp + 0x150], ax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movabs r14, 0xd760f7258dbb6d96
nop dword [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x140]
add rcx, r14
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x1a
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x140], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x12
jb 0x18001f5d0
movzx r14d, byte [rsp + 0x38]
mov r8, r9
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0xc10]
call fcn.180011a70
nop
lea r8, [rbp + 0x4c0]
mov rdx, rax
lea rcx, [rbp + 0xbf0]
call fcn.180011590
mov rdx, rax
lea rcx, [rbp + 0x11c0]
call fcn.1800163e0
nop
lea rcx, [rbp + 0xc10]
call fcn.180010a90
nop
lea rcx, [rbp + 0xc30]
call fcn.180010a90
nop
lea rcx, [rbp + 0xc50]
call fcn.180010a90
lea rcx, [rbp + 0xf58]
call fcn.18002fd50
lea rcx, [rax + 0x158]
call fcn.180008660
lea rcx, [rax + 0x10]
lea rdx, [rbp + 0x11c0]
call fcn.18002f9b0
lea rdx, [0x1800d5528]
lea rcx, [rbp + 0xc90]
call fcn.180010bb0
mov rdx, rax
lea rcx, [rbp + 0xf58]
call fcn.18002fe70
nop
lea rcx, [rbp + 0x11c0]
call fcn.180010a90
nop
lea rcx, [rbp + 0xf80]
call fcn.180010a90
mov rcx, qword [rbp + 0x3a0]
add rcx, 8
mov qword [rbp + 0x3a0], rcx
cmp rcx, qword [rbp + 0x430]
jne 0x18001c8d6
lea rcx, [rbp + 0x1010]
call fcn.18000f5f0
xor r15d, r15d
jmp 0x18001c7a0
mov byte [0x1800f03c2], 0
mov rcx, qword [rbp + 0x1310]
xor rcx, rsp
call fcn.1800b2e20
lea r11, [rsp + 0x1420]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.180021160
nop
call fcn.180021160
nop
call fcn.180021160
nop
call fcn.180021160
nop
call fcn.180021160
int3