Function at 0x1402e08a0
Capabilities:
Access peb ldr_data
Check os version
Create thread
Encode data using xor
Hash data using fnv
Read file on windows
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4900]
mov eax, 0x4a00
call fcn.1403611f0
sub rsp, rax
movaps xmmword [rsp + 0x49f0], xmm6
movaps xmmword [rsp + 0x49e0], xmm7
mov rax, qword [0x1403e7140]
xor rax, rsp
mov qword [rbp + 0x48d0], rax
mov r13, rcx
xor r12d, r12d
xor eax, eax
mov byte [rbp - 0x5c], al
mov byte [rbp - 0x4c], al
lea rdx, [rbp + 0x4e0]
lea rcx, [rbp - 0x4c]
call fcn.1402bfe80
mov r9, rax
mov byte [rax + 0x10], r12b
mov r10d, r12d
lea r8, [rax + 0xc]
nop word [rax + rax]
lea esi, [r10 + r10*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, r10b
add al, al
lea ebx, [rax + r10]
movzx r11d, bl
add r11b, byte [r9 + 0x13]
xor r11b, dl
mov byte [r8], r11b
xor dl, dl
lea eax, [rsi + 1]
movzx edi, byte [rax + r9]
nop
movzx eax, dil
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e0966
inc dl
cmp dl, 4
jne 0x1402e0950
jmp 0x1402e0975
movsx ecx, r11b
movzx eax, byte [r9 + 0x16]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r11d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1402e0994
inc cl
cmp cl, 8
jne 0x1402e0982
jmp 0x1402e09a3
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x15]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r11 + r9]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1402e09c2
inc cl
cmp cl, 5
jne 0x1402e09b0
jmp 0x1402e09d1
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x14]
btc ecx, eax
mov byte [r8], cl
add bl, byte [r9 + 0x12]
xor byte [r8], bl
inc r10d
inc r8
cmp r10d, 4
jne 0x1402e0920
lea rdx, [r9 + 0xc]
lea rcx, [rbp + 0x6c0]
call fcn.14008fd10
mov r15, rax
lea rdx, [rbp + 0x408]
lea rcx, [rbp - 0x5c]
call fcn.1402bfe50
mov r9, rax
lea r14, [rax + 9]
mov byte [r14 + 3], 0
mov r10d, r12d
mov r8, r14
nop dword [rax]
lea esi, [r10 + r10*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, r10b
add al, al
lea ebx, [rax + r10]
movzx r11d, bl
add r11b, byte [r9 + 0xf]
xor r11b, dl
mov byte [r8], r11b
xor dl, dl
lea eax, [rsi + 1]
movzx edi, byte [rax + r9]
nop
movzx eax, dil
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e0a66
inc dl
cmp dl, 4
jne 0x1402e0a50
jmp 0x1402e0a75
movsx ecx, r11b
movzx eax, byte [r9 + 0x12]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r11d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1402e0a94
inc cl
cmp cl, 8
jne 0x1402e0a82
jmp 0x1402e0aa3
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x11]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r11 + r9]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1402e0ac2
inc cl
cmp cl, 5
jne 0x1402e0ab0
jmp 0x1402e0ad1
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x10]
btc ecx, eax
mov byte [r8], cl
add bl, byte [r9 + 0xe]
xor byte [r8], bl
inc r10d
inc r8
cmp r10d, 3
jne 0x1402e0a20
lea edx, [r10 - 2]
mov rcx, r15
call fcn.14008a490
movzx edi, byte [rax]
movzx ebx, byte [r14]
lea rcx, [rbp + 0x6c0]
call fcn.140090020
cmp bl, dil
jne 0x1402e1634
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x1402e0bb9
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x1402e0bb9
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rsi + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
mov r10d, 0x88770b7d
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e0bb4
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e0b80
cmp r10d, 0xb34fbf61
je 0x1402e0bc1
test r11d, r11d
jne 0x1402e0b60
mov rax, qword [rax]
jmp 0x1402e0b30
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov ecx, dword [rcx + rax*4]
add rcx, rbx
call rcx
mov r12d, eax
xor eax, eax
mov byte [rbp - 0x49], al
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x49]
call fcn.1402bfeb0
mov r11, rax
mov byte [rax + 8], 0
xor r10d, r10d
lea r9, [rax + 6]
nop dword [rax]
nop word [rax + rax]
lea r8d, [r10 + r10*2]
movzx edx, byte [r8 + r11]
mov byte [r9], dl
movzx eax, r10b
add al, al
lea edi, [rax + r10]
movzx ebx, dil
add bl, byte [r11 + 0xb]
xor bl, dl
mov byte [r9], bl
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + r11]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e0c56
inc dl
cmp dl, 4
jne 0x1402e0c40
jmp 0x1402e0c64
movsx ecx, bl
movzx eax, byte [r11 + 0xe]
btc ecx, eax
mov byte [r9], cl
mov dl, 5
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, byte [rax + r11]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e0c89
inc dl
cmp dl, 8
jne 0x1402e0c73
jmp 0x1402e0c98
movsx ecx, byte [r9]
movzx eax, byte [r11 + 0xd]
btc ecx, eax
mov byte [r9], cl
xor dl, dl
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, byte [rax + r11]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e0cc6
inc dl
cmp dl, 5
jne 0x1402e0cb0
jmp 0x1402e0cd5
movsx ecx, byte [r9]
movzx eax, byte [r11 + 0xc]
btc ecx, eax
mov byte [r9], cl
add dil, byte [r11 + 0xa]
xor byte [r9], dil
inc r10d
inc r9
cmp r10d, 2
jne 0x1402e0c10
mov eax, 0xaaaaaaab
mul r12d
shr edx, 1
lea eax, [rdx + rdx*2]
mov ecx, r12d
sub ecx, eax
mov r14d, ecx
cmp byte [rcx + r11 + 6], 0x5d
je 0x1402e1631
xor eax, eax
mov byte [rbp - 0x48], al
lea rdx, [rbp + 0x98]
lea rcx, [rbp - 0x48]
call fcn.1402bfed0
mov rdx, rax
mov byte [rax + 4], 0
movzx r9d, byte [rax + 7]
xor r9b, byte [rax]
mov byte [rax + 3], r9b
xor cl, cl
movzx r8d, byte [rax + 1]
nop dword [rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x1402e0d53
inc cl
cmp cl, 4
jne 0x1402e0d40
jmp 0x1402e0d61
movsx ecx, r9b
movzx eax, byte [rdx + 0xa]
btc ecx, eax
mov byte [rdx + 3], cl
mov cl, 5
movzx r8d, byte [rdx + 2]
nop dword [rax + rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x1402e0d83
inc cl
cmp cl, 8
jne 0x1402e0d70
jmp 0x1402e0d91
movsx ecx, byte [rdx + 3]
movzx eax, byte [rdx + 9]
btc ecx, eax
mov byte [rdx + 3], cl
xor cl, cl
movzx eax, r8b
sar al, cl
test al, 1
jne 0x1402e0da6
inc cl
cmp cl, 5
jne 0x1402e0d93
jmp 0x1402e0db4
movsx ecx, byte [rdx + 3]
movzx eax, byte [rdx + 8]
btc ecx, eax
mov byte [rdx + 3], cl
movzx eax, byte [rdx + 6]
xor byte [rdx + 3], al
mov r15, r12
mov rax, r12
and eax, 1
cmp byte [rax + rdx + 3], 0x20
je 0x1402e1631
xor eax, eax
mov byte [rsp + 0x44], al
lea rdx, [rbp + 0x170]
lea rcx, [rsp + 0x44]
call fcn.1402bfef0
mov r11, rax
mov byte [rax + 8], 0
xor r10d, r10d
lea r9, [rax + 6]
nop dword [rax]
nop dword [rax + rax]
lea r8d, [r10 + r10*2]
movzx edx, byte [r8 + r11]
mov byte [r9], dl
movzx eax, r10b
add al, al
lea edi, [rax + r10]
movzx ebx, dil
add bl, byte [r11 + 0xb]
xor bl, dl
mov byte [r9], bl
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + r11]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e0e46
inc dl
cmp dl, 4
jne 0x1402e0e30
jmp 0x1402e0e54
movsx ecx, bl
movzx eax, byte [r11 + 0xe]
btc ecx, eax
mov byte [r9], cl
mov dl, 5
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, byte [rax + r11]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e0e79
inc dl
cmp dl, 8
jne 0x1402e0e63
jmp 0x1402e0e88
movsx ecx, byte [r9]
movzx eax, byte [r11 + 0xd]
btc ecx, eax
mov byte [r9], cl
xor dl, dl
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, byte [rax + r11]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e0eb6
inc dl
cmp dl, 5
jne 0x1402e0ea0
jmp 0x1402e0ec5
movsx ecx, byte [r9]
movzx eax, byte [r11 + 0xc]
btc ecx, eax
mov byte [r9], cl
add dil, byte [r11 + 0xa]
xor byte [r9], dil
inc r10d
inc r9
cmp r10d, 2
jne 0x1402e0e00
cmp byte [r14 + r11 + 6], 0xa
je 0x1402e1631
xor eax, eax
mov byte [rsp + 0x45], al
lea rdx, [rbp + 0x390]
lea rcx, [rsp + 0x45]
call fcn.1402bff10
mov r11, rax
mov byte [rax + 0xc], 0
xor r10d, r10d
lea r9, [rax + 9]
nop dword [rax]
lea r8d, [r10 + r10*2]
movzx edx, byte [r8 + r11]
mov byte [r9], dl
movzx eax, r10b
add al, al
lea edi, [rax + r10]
movzx ebx, dil
add bl, byte [r11 + 0xf]
xor bl, dl
mov byte [r9], bl
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + r11]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e0f56
inc dl
cmp dl, 4
jne 0x1402e0f40
jmp 0x1402e0f64
movsx ecx, bl
movzx eax, byte [r11 + 0x12]
btc ecx, eax
mov byte [r9], cl
mov dl, 5
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, byte [rax + r11]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e0f89
inc dl
cmp dl, 8
jne 0x1402e0f73
jmp 0x1402e0f98
movsx ecx, byte [r9]
movzx eax, byte [r11 + 0x11]
btc ecx, eax
mov byte [r9], cl
xor dl, dl
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, byte [rax + r11]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e0fc6
inc dl
cmp dl, 5
jne 0x1402e0fb0
jmp 0x1402e0fd5
movsx ecx, byte [r9]
movzx eax, byte [r11 + 0x10]
btc ecx, eax
mov byte [r9], cl
add dil, byte [r11 + 0xe]
xor byte [r9], dil
inc r10d
inc r9
cmp r10d, 3
jne 0x1402e0f10
and r15d, r10d
cmp byte [r15 + r11 + 9], 0x2e
je 0x1402e1631
cmp r12d, 0x704a8667
ja 0x1402e1631
inc r12d
xor r12d, 0x704a8667
cmp r12d, 0x43606d29
jne 0x1402e1631
xor eax, eax
mov byte [rsp + 0x46], al
lea rdx, [rbp + 0x438]
lea rcx, [rsp + 0x46]
call fcn.1402bff30
mov r11, rax
mov byte [rax + 0xc], 0
xor r12d, r12d
mov r10d, r12d
lea r9, [rax + 9]
nop word [rax + rax]
lea r8d, [r10 + r10*2]
movzx edx, byte [r8 + r11]
mov byte [r9], dl
movzx eax, r10b
add al, al
lea edi, [rax + r10]
movzx ebx, dil
add bl, byte [r11 + 0xf]
xor bl, dl
mov byte [r9], bl
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + r11]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e1096
inc dl
cmp dl, 4
jne 0x1402e1080
jmp 0x1402e10a4
movsx ecx, bl
movzx eax, byte [r11 + 0x12]
btc ecx, eax
mov byte [r9], cl
mov dl, 5
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, byte [rax + r11]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e10c9
inc dl
cmp dl, 8
jne 0x1402e10b3
jmp 0x1402e10d8
movsx ecx, byte [r9]
movzx eax, byte [r11 + 0x11]
btc ecx, eax
mov byte [r9], cl
xor dl, dl
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, byte [rax + r11]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e1106
inc dl
cmp dl, 5
jne 0x1402e10f0
jmp 0x1402e1115
movsx ecx, byte [r9]
movzx eax, byte [r11 + 0x10]
btc ecx, eax
mov byte [r9], cl
add dil, byte [r11 + 0xe]
xor byte [r9], dil
inc r10d
inc r9
cmp r10d, 3
jne 0x1402e1050
cmp byte [r11 + 9], r10b
jne 0x1402e120d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x1402e11d9
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x1402e11d9
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + rsi]
add r9, rbx
mov r10d, 0x6f8fc840
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e11d4
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e11a0
cmp r10d, 0x91a106c8
je 0x1402e11e1
test r11d, r11d
jne 0x1402e1180
mov rax, qword [rax]
jmp 0x1402e1150
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r8d, dword [rcx + rax*4]
add r8, rbx
mov edx, 0xb59c2874
mov ecx, 0x9ac61bbd
call r8
jmp 0x1402e1634
xor eax, eax
mov byte [rsp + 0x47], al
lea rdx, [rbp + 0x450]
lea rcx, [rsp + 0x47]
call fcn.1402bff60
mov r11, rax
mov byte [rax + 0xc], r12b
mov r10d, r12d
lea r9, [rax + 9]
nop dword [rax]
nop word [rax + rax]
lea r8d, [r10 + r10*2]
movzx edx, byte [r8 + r11]
mov byte [r9], dl
movzx eax, r10b
add al, al
lea edi, [rax + r10]
movzx ebx, dil
add bl, byte [r11 + 0xf]
xor bl, dl
mov byte [r9], bl
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + r11]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e1286
inc dl
cmp dl, 4
jne 0x1402e1270
jmp 0x1402e1294
movsx ecx, bl
movzx eax, byte [r11 + 0x12]
btc ecx, eax
mov byte [r9], cl
mov dl, 5
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, byte [rax + r11]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e12b9
inc dl
cmp dl, 8
jne 0x1402e12a3
jmp 0x1402e12c8
movsx ecx, byte [r9]
movzx eax, byte [r11 + 0x11]
btc ecx, eax
mov byte [r9], cl
xor dl, dl
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, byte [rax + r11]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e12f6
inc dl
cmp dl, 5
jne 0x1402e12e0
jmp 0x1402e1305
movsx ecx, byte [r9]
movzx eax, byte [r11 + 0x10]
btc ecx, eax
mov byte [r9], cl
add dil, byte [r11 + 0xe]
xor byte [r9], dil
inc r10d
inc r9
cmp r10d, 3
jne 0x1402e1240
cmp byte [r11 + 0xb], 4
jne 0x1402e1634
movss xmm1, dword [0x1403e7cf4]
movaps xmm0, xmm1
divss xmm0, dword [0x1403e7cf0]
mulss xmm0, xmm1
addss xmm1, xmm0
movss dword [0x1403e7cf4], xmm1
xor eax, eax
mov byte [rsp + 0x48], al
lea rdx, [rbp + 0xa8]
lea rcx, [rsp + 0x48]
call fcn.1402bff90
mov r9, rax
mov r8d, dword [rax + 4]
movzx ecx, byte [rax + 0xa]
mov edx, r8d
shr edx, cl
test dl, 1
je 0x1402e1385
movzx ecx, byte [rax]
inc cl
mov edx, r8d
shr edx, cl
test dl, 1
jne 0x1402e13d1
movzx ecx, byte [rax]
lea eax, [rcx + 2]
movzx edx, al
bt r8d, ecx
setae cl
bt r8d, edx
setae al
test al, cl
je 0x1402e13d1
movzx ecx, byte [r9 + 8]
mov eax, r8d
shr eax, cl
test al, 1
jne 0x1402e13d1
movzx ecx, byte [r9 + 9]
shr r8d, cl
test r8b, 1
jne 0x1402e13d1
movss xmm0, dword [0x1403e7cf0]
comiss xmm0, dword [0x1403e7cf4]
jbe 0x1402e1634
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e1479
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e1479
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rbx + r11*4]
mov r9d, dword [rdx + rdi]
add r9, rbx
mov r10d, 0x4fb20bdd
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e1474
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e1440
cmp r10d, 0x8acd7d8d
je 0x1402e1481
test r11d, r11d
jne 0x1402e1420
mov rax, qword [rax]
jmp 0x1402e13f0
mov edx, dword [rsi + 0x1c]
add rdx, rbx
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
call rax
mov r14, rax
test rax, rax
je 0x1402e1634
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop word [rax + rax]
mov rbx, qword [rcx + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov esi, dword [rdx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e1549
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e1549
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rbx + r11*4]
mov r9d, dword [rdx + rdi]
add r9, rbx
mov r10d, 0xb6188dfb
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e1544
movsx eax, r8b
sub r8b, 0x41
mov edx, eax
or edx, 0x20
cmp r8b, 0x19
cmova edx, eax
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e1510
cmp r10d, 0xbb17966f
je 0x1402e1551
test r11d, r11d
jne 0x1402e14f0
mov rcx, qword [rcx]
jmp 0x1402e14c0
mov edx, dword [rsi + 0x1c]
add rdx, rbx
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
mov rcx, r14
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e1609
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e1609
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rdi + r11*4]
mov r9d, dword [rdx + rbx]
add r9, rbx
mov r10d, 0x517460f0
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e1604
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e15d0
cmp r10d, 0x74ddde16
je 0x1402e1611
test r11d, r11d
jne 0x1402e15b0
mov rax, qword [rax]
jmp 0x1402e1580
mov edx, dword [rsi + 0x1c]
add rdx, rbx
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
mov ecx, 0x46b06fd3
call rax
jmp 0x1402e1634
xor r12d, r12d
test r13, r13
je 0x1402e1689
lea rdx, [r13 + 0x340]
movzx eax, byte [r13 + 0x9a]
mov byte [rsp + 0x30], al
mov eax, dword [r13 + 0x6c]
mov dword [rsp + 0x28], eax
movzx eax, byte [r13 + 0x84]
mov byte [rsp + 0x20], al
movzx r9d, byte [r13 + 0x72]
movss xmm2, dword [r13 + 0x38]
movss xmm1, dword [r13 + 0x34]
mov rcx, r13
call rdx
test al, al
je 0x1402e1680
mov rbx, qword [r13 + 0x40]
jmp 0x1402e168c
mov rbx, qword [r13 + 0x118]
jmp 0x1402e168c
mov rbx, r12
movss xmm0, dword [rbx]
call fcn.1403738f8
movaps xmm6, xmm0
xor eax, eax
mov byte [rsp + 0x49], al
lea rdx, [rbp + 0xb4]
lea rcx, [rsp + 0x49]
call fcn.1402b9a20
mov r9, rax
mov r8d, dword [rax + 4]
movzx ecx, byte [rax + 0xa]
mov edx, r8d
shr edx, cl
xorps xmm7, xmm7
test dl, 1
je 0x1402e16d5
movzx ecx, byte [rax]
inc cl
mov eax, r8d
shr eax, cl
test al, 1
jne 0x1402e170d
movzx ecx, byte [r9]
lea eax, [rcx + 2]
movzx edx, al
bt r8d, ecx
setae cl
bt r8d, edx
setae al
test al, cl
je 0x1402e170d
movzx ecx, byte [r9 + 8]
mov eax, r8d
shr eax, cl
test al, 1
jne 0x1402e170d
movzx ecx, byte [r9 + 9]
shr r8d, cl
test r8b, 1
je 0x1402e1736
comiss xmm7, xmm6
jbe 0x1402e1736
xorps xmm2, xmm2
cvtss2sd xmm2, xmm6
lea rdx, [rbx + 0x48]
movq r8, xmm2
lea rcx, [0x1403c3e80]
call fcn.1402fa720
mov rbx, r12
jmp 0x1402e1893
call qword [sym.imp.KERNEL32.dll_GetACP]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x1402e1761
mov edx, edi
lea rcx, [0x1403c3e88]
call fcn.1402fa720
jmp 0x1402e1793
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x1402e1788
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
jmp 0x1402e1793
mov ecx, 4
call qword [sym.imp.USER32.dll_SetDebugErrorLevel]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_DebugActiveProcessStop]
mov rcx, qword [rbx + 0x2a8]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [rbx + 0xe0c]
mov dword [rsp + 0x30], eax
mov eax, dword [rbx + 0xe18]
mov dword [rsp + 0x28], eax
mov eax, dword [rbx + 0xe14]
mov dword [rsp + 0x20], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_SetWindowPos]
test eax, eax
je 0x1402e17f8
mov edx, 1
xor ecx, ecx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], r12d
mov r9, rbx
lea r8, [0x1402b99b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rdi, rax
test rax, rax
je 0x1402e1876
mov edx, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov edx, dword [rbx + 0xd0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [rbx + 0x160]
call qword [sym.imp.USER32.dll_ShowCursor]
call qword [sym.imp.USER32.dll_GetShellWindow]
mov qword [rbx + 0x780], rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbx + 0x818]
test rcx, rcx
je 0x1402e186f
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbx + 0x818], r12
test rbx, rbx
je 0x1402e1893
mov edx, dword [rbx + 0x18]
imul edx, dword [rbx + 0x10]
mov eax, dword [rbx + 0x38]
lea ecx, [rax + rax*4]
add ecx, ecx
sub edx, ecx
movsxd rax, edx
movsxd rbx, dword [rbx + rax*4]
mov r14, r12
cmp byte [rbx], 0
je 0x1402e18d1
nop dword [rax + rax]
inc rbx
inc r14
movzx ecx, byte [rbx]
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [rdx + rdx*2]
sub ecx, eax
cmp ecx, 1
jne 0x1402e18c2
add rbx, 3
jmp 0x1402e18ca
test r14, r14
jne 0x1402e18ca
inc rbx
cmp byte [rbx + r14], 0
jne 0x1402e18a0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov rdi, qword [rax + 0x30]
movsxd rcx, dword [rdi + 0x3c]
mov r15d, dword [rcx + rdi + 0x88]
add r15, rdi
cmp r15, rdi
je 0x1402e1979
mov r11d, dword [r15 + 0x18]
test r11d, r11d
je 0x1402e1979
mov esi, dword [r15 + 0x20]
nop word [rax + rax]
dec r11d
lea rdx, [rsi + r11*4]
mov r9d, dword [rdx + rdi]
add r9, rdi
mov r10d, 0x57059c47
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e1974
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e1940
cmp r10d, 0x2939f5b1
je 0x1402e1981
test r11d, r11d
jne 0x1402e1920
mov rax, qword [rax]
jmp 0x1402e18f0
mov edx, dword [r15 + 0x1c]
add rdx, rdi
mov ecx, dword [r15 + 0x24]
add rcx, rdi
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rdi
call rax
mov r15d, eax
add r15, r14
add r15, rbx
je 0x1402e19aa
hlt
vmxoff
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e1a49
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e1a49
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rdi + r11*4]
mov r9d, dword [rdx + rbx]
add r9, rbx
mov r10d, 0x7251bc0d
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e1a44
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e1a10
cmp r10d, 0x41f1d91
je 0x1402e1a51
test r11d, r11d
jne 0x1402e19f0
mov rax, qword [rax]
jmp 0x1402e19c0
mov edx, dword [rsi + 0x1c]
add rdx, rbx
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
call rax
mov rbx, rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov r13, 0xffffffffffffffff
cmp rbx, rax
jne 0x1402e1be7
mov rcx, qword [r15 + 0xa8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rdx, qword [r15 + 0xc8]
mov rcx, qword [r15 + 0xc0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
xor ecx, ecx
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov r14, rax
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
mov rbx, qword [rcx + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov esi, dword [rdx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e1b49
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e1b49
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rdi + r11*4]
mov r9d, dword [rdx + rbx]
add r9, rbx
mov r10d, 0x6f6b4d28
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e1b44
movsx eax, r8b
sub r8b, 0x41
mov edx, eax
or edx, 0x20
cmp r8b, 0x19
cmova edx, eax
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e1b10
cmp r10d, 0xc373489a
je 0x1402e1b51
test r11d, r11d
jne 0x1402e1af0
mov rcx, qword [rcx]
jmp 0x1402e1ac0
mov edx, dword [rsi + 0x1c]
add rdx, rbx
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
mov edx, 1
mov rcx, r14
call rax
mov ebx, eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [r15 + 0x19d8]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
test rax, rax
je 0x1402e1bd3
mov qword [rsp + 0x20], r12
mov r9, qword [r15 + 0x1124]
mov r8d, reloc.WS2_32.dll_sendto
mov rdx, qword [r15 + 0x1100]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp ebx, eax
jne 0x1402ec6b6
add r15, 0x28
jmp 0x1402e1bea
mov r15, r12
mov esi, dword [r15]
mov r14d, dword [r15 + 4]
xor eax, eax
mov byte [rsp + 0x4a], al
lea rdx, [rbp + 0xbf0]
lea rcx, [rsp + 0x4a]
call fcn.1402b98e0
mov rbx, rax
mov byte [rax + 0x38], 0
mov r9d, r12d
lea r10, [rax + 0x2a]
nop word [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x3b]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e1c66
inc dl
cmp dl, 4
jne 0x1402e1c50
jmp 0x1402e1c74
movsx ecx, r11b
movzx eax, byte [rbx + 0x3e]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e1c99
inc dl
cmp dl, 8
jne 0x1402e1c83
jmp 0x1402e1ca7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x3d]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e1cd6
inc dl
cmp dl, 5
jne 0x1402e1cc0
jmp 0x1402e1ce4
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x3c]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea edx, [rax + r9]
add dl, byte [rbx + 0x3a]
xor byte [r10], dl
inc r9d
inc r10
cmp r9d, 0xe
jne 0x1402e1c20
mov r8d, r14d
mov edx, esi
lea rcx, [rbx + 0x2a]
call fcn.1402fa720
lea eax, [rsi*4 + 8]
movsxd rbx, eax
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x4490]
call fcn.140393bf0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x20]
mov rdx, qword [r15 + rbx*4 + 0x14]
lea rcx, [rbp + 0x4490]
call fcn.1402f8ba0
nop
xor eax, eax
cmp qword [rbp + 0x4520], rax
je 0x1402e1ded
movdqa xmm0, xmmword [reloc.d2d1.dll_Ordinal_1]
movdqu xmmword [rbp + 0x4f8], xmm0
mov qword [rbp + 0x508], rax
movaps xmmword [rbp + 0x510], xmm0
movsd xmm0, qword [rbp + 0x508]
movsd qword [rbp + 0x520], xmm0
lea rdx, [rbp + 0x510]
lea rcx, [rbp + 0x4490]
call fcn.1402f8dc0
xor eax, eax
mov word [rbp + 0x4324], ax
lea r8d, [rax + 1]
lea rdx, [rbp + 0x4324]
lea rcx, [rbp + 0x4490]
call fcn.1400f4770
lea rcx, [rbp + 0x4490]
call fcn.140076b90
cmp byte [rbp + 0x4324], 0x30
jne 0x1402e2088
lea rdi, [rbx + 0x30b]
lea rdi, [r15 + rdi*4]
jmp 0x1402e208b
mov byte [rsp + 0x4b], al
lea rdx, [rbp + 0x888]
lea rcx, [rsp + 0x4b]
call fcn.1402bf080
mov r11, rax
lea rsi, [rax + 0x1e]
mov word [rsi + 0xa], r12w
mov r10d, r12d
mov rbx, rsi
nop dword [rax]
nop dword [rax + rax]
lea r8d, [r10 + r10*2]
movzx edx, word [r11 + r8*2]
mov word [rbx], dx
movzx eax, r10w
add ax, ax
lea r9d, [rax + r10]
movzx eax, byte [r11 + 0x2c]
add r9w, ax
xor r9w, dx
mov word [rbx], r9w
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, word [r11 + rax*2]
nop dword [rax]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e1e77
inc dl
cmp dl, 4
jne 0x1402e1e60
jmp 0x1402e1e88
movzx r9d, r9w
movzx eax, byte [r11 + 0x2f]
btc r9d, eax
mov word [rbx], r9w
mov dl, 5
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, word [r11 + rax*2]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e1eb7
inc dl
cmp dl, 8
jne 0x1402e1ea0
jmp 0x1402e1eca
movzx ecx, r9w
movzx eax, byte [r11 + 0x2e]
btc ecx, eax
movzx r9d, cx
mov word [rbx], cx
xor dl, dl
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, word [r11 + rax*2]
nop dword [rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e1ef7
inc dl
cmp dl, 5
jne 0x1402e1ee0
jmp 0x1402e1f0a
movzx ecx, r9w
movzx eax, byte [r11 + 0x2d]
btc ecx, eax
movzx r9d, cx
mov word [rbx], cx
movzx eax, r10w
add ax, ax
lea ecx, [rax + r10]
movzx eax, byte [r11 + 0x2b]
add cx, ax
xor cx, r9w
mov word [rbx], cx
inc r10d
add rbx, 2
cmp r10d, 5
jne 0x1402e1e20
xor eax, eax
mov byte [rsp + 0x4c], al
lea rdx, [rbp + 0xa60]
lea rcx, [rsp + 0x4c]
call fcn.1402bf010
mov r11, rax
mov word [rax + 0x38], r12w
mov r10d, r12d
lea rbx, [rax + 0x2a]
nop dword [rax + rax]
lea r8d, [r10 + r10*2]
movzx edx, word [r11 + r8*2]
mov word [rbx], dx
movzx eax, r10w
add ax, ax
lea r9d, [rax + r10]
movzx eax, byte [r11 + 0x3c]
add r9w, ax
xor r9w, dx
mov word [rbx], r9w
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, word [r11 + rax*2]
nop dword [rax]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e1fb7
inc dl
cmp dl, 4
jne 0x1402e1fa0
jmp 0x1402e1fc8
movzx r9d, r9w
movzx eax, byte [r11 + 0x3f]
btc r9d, eax
mov word [rbx], r9w
mov dl, 5
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, word [r11 + rax*2]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e1ff7
inc dl
cmp dl, 8
jne 0x1402e1fe0
jmp 0x1402e200a
movzx ecx, r9w
movzx eax, byte [r11 + 0x3e]
btc ecx, eax
movzx r9d, cx
mov word [rbx], cx
xor dl, dl
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, word [r11 + rax*2]
nop dword [rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e2037
inc dl
cmp dl, 5
jne 0x1402e2020
jmp 0x1402e204a
movzx ecx, r9w
movzx eax, byte [r11 + 0x3d]
btc ecx, eax
movzx r9d, cx
mov word [rbx], cx
movzx eax, r10w
add ax, ax
lea ecx, [rax + r10]
movzx eax, byte [r11 + 0x3b]
add cx, ax
xor cx, r9w
mov word [rbx], cx
inc r10d
add rbx, 2
cmp r10d, 7
jne 0x1402e1f60
xor r9d, r9d
mov r8, rsi
lea rdx, [r11 + 0x2a]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
mov rdi, r13
lea rcx, [rbp + 0x4540]
call fcn.140074e90
lea rcx, [rbp + 0x4540]
call fcn.14007c7c0
call fcn.1402f7db0
mov r14d, dword [rdi]
mov r15d, dword [rdi + 4]
xor eax, eax
mov byte [rsp + 0x4d], al
lea rdx, [rbp + 0xc30]
lea rcx, [rsp + 0x4d]
call fcn.1402b98e0
mov rbx, rax
mov byte [rax + 0x38], 0
mov r9d, r12d
lea r10, [rax + 0x2a]
nop dword [rax]
nop dword [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x3b]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2126
inc dl
cmp dl, 4
jne 0x1402e2110
jmp 0x1402e2134
movsx ecx, r11b
movzx eax, byte [rbx + 0x3e]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2159
inc dl
cmp dl, 8
jne 0x1402e2143
jmp 0x1402e2167
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x3d]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2196
inc dl
cmp dl, 5
jne 0x1402e2180
jmp 0x1402e21a4
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x3c]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea edx, [rax + r9]
add dl, byte [rbx + 0x3a]
xor byte [r10], dl
inc r9d
inc r10
cmp r9d, 0xe
jne 0x1402e20e0
mov r8d, r15d
mov edx, r14d
lea rcx, [rbx + 0x2a]
call fcn.1402fa720
lea eax, [r14*4 + 8]
movsxd rbx, eax
call fcn.1402bffb0
mov r10d, r12d
movsxd rsi, dword [rdi + rbx*4 + 4]
add rbx, 3
lea rbx, [rdi + rbx*4]
test esi, esi
jle 0x1402e2246
mov r11, r12
nop word [rax + rax]
mov eax, 1
test r11, r11
cmovne rax, r11
mov r8d, dword [rbx + rax*4 - 4]
mov r9d, 1
cmp dword [rbx + rax*4], r8d
cmovl r9, r13
add r9, rax
lea ecx, [r10 + 1]
test r11, r11
cmovne ecx, r10d
mov r10d, 1
cmp dword [rbx + rax*4], r8d
cmovl r10d, r13d
add r10d, ecx
mov r11, r9
cmp r9, rsi
jl 0x1402e2200
imul esi, r10d
movsxd rax, esi
lea rsi, [rbx + rax*4]
movsxd rax, dword [rsi]
lea rsi, [rsi + 4]
mov r13d, 2
mov r14, rax
lea r12d, [r13 + 1]
lea rax, [rsi + 8]
mov qword [rbp - 0x38], rax
nop dword [rax]
xor eax, eax
mov byte [rsp + 0x4e], al
lea rdx, [rbp + 0x530]
lea rcx, [rsp + 0x4e]
call fcn.1402b9950
mov rbx, rax
lea r15, [rax + 0xc]
mov byte [r15 + 4], 0
xor r9d, r9d
mov r10, r15
nop dword [rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x13]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e22e6
inc dl
cmp dl, 4
jne 0x1402e22d0
jmp 0x1402e22f4
movsx ecx, r11b
movzx eax, byte [rbx + 0x16]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2319
inc dl
cmp dl, 8
jne 0x1402e2303
jmp 0x1402e2327
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x15]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2356
inc dl
cmp dl, 5
jne 0x1402e2340
jmp 0x1402e2364
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x14]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x12]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 4
jne 0x1402e22a0
xor eax, eax
mov byte [rsp + 0x4f], al
lea rdx, [rbp + 0x660]
lea rcx, [rsp + 0x4f]
call fcn.1402b9980
mov rbx, rax
mov byte [rax + 0x14], 0
xor r9d, r9d
lea r10, [rax + 0xf]
nop dword [rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x17]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e23f6
inc dl
cmp dl, 4
jne 0x1402e23e0
jmp 0x1402e2404
movsx ecx, r11b
movzx eax, byte [rbx + 0x1a]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2429
inc dl
cmp dl, 8
jne 0x1402e2413
jmp 0x1402e2437
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x19]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2466
inc dl
cmp dl, 5
jne 0x1402e2450
jmp 0x1402e2474
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x18]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x16]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 5
jne 0x1402e23b0
movsx eax, byte [rbx + 0x11]
lea eax, [rax + rax*4]
cdqe
movsx ecx, byte [r15 + rax]
sub ecx, dword [rsi + 4]
cmp r13d, ecx
jge 0x1402e24f1
mov eax, r13d
imul eax, dword [rsi]
mov rdi, qword [rbp - 0x38]
add dword [rdi], eax
lea r8d, [r13 + 1]
mov rdx, r12
cmp r12, r14
jge 0x1402e24de
movsxd rax, dword [rsi + r14*4 - 4]
mov ecx, dword [rsi + rax*4]
cmp dword [rsi + rdx*4], ecx
jge 0x1402e24d3
mov dword [rsi + 4], r8d
inc r8d
inc rdx
cmp rdx, r14
jl 0x1402e24c2
inc r13d
add rdi, 4
mov qword [rbp - 0x38], rdi
inc r12
jmp 0x1402e2270
mov eax, r14d
lea eax, [rax*4]
movsxd rcx, eax
lea r8, [rsi + rcx*4]
nop
nop
int 0x2c
nop
test r8, r8
je 0x1402e2577
mov edx, dword [r8 + 0x18]
imul edx, dword [r8 + 0x10]
mov eax, dword [r8 + 0x38]
lea ecx, [rax + rax*4]
add ecx, ecx
sub edx, ecx
movsxd rax, edx
movsxd rbx, dword [r8 + rax*4]
test rbx, rbx
je 0x1402e2577
lea rdx, [rbx + 0x340]
movzx eax, byte [rbx + 0x9a]
mov byte [rsp + 0x30], al
mov eax, dword [rbx + 0x6c]
mov dword [rsp + 0x28], eax
movzx eax, byte [rbx + 0x84]
mov byte [rsp + 0x20], al
movzx r9d, byte [rbx + 0x72]
movss xmm2, dword [rbx + 0x38]
movss xmm1, dword [rbx + 0x34]
mov rcx, rbx
call rdx
test al, al
je 0x1402e256e
mov rsi, qword [rbx + 0x40]
jmp 0x1402e2579
mov rsi, qword [rbx + 0x118]
jmp 0x1402e2579
xor esi, esi
movsxd rax, dword [rsi]
mov r13d, 2
mov r14, rax
lea r12d, [r13 + 1]
lea rax, [rsi + 0xc]
mov qword [rbp - 0x38], rax
xor eax, eax
mov byte [rsp + 0x50], al
lea rdx, [rbp + 0x4c8]
lea rcx, [rsp + 0x50]
call fcn.1402b9950
mov rbx, rax
lea r15, [rax + 0xc]
mov byte [r15 + 4], 0
xor r9d, r9d
mov r10, r15
nop word [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x13]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2606
inc dl
cmp dl, 4
jne 0x1402e25f0
jmp 0x1402e2614
movsx ecx, r11b
movzx eax, byte [rbx + 0x16]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2639
inc dl
cmp dl, 8
jne 0x1402e2623
jmp 0x1402e2647
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x15]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2676
inc dl
cmp dl, 5
jne 0x1402e2660
jmp 0x1402e2684
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x14]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x12]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 4
jne 0x1402e25c0
xor eax, eax
mov byte [rsp + 0x51], al
lea rdx, [rbp + 0x680]
lea rcx, [rsp + 0x51]
call fcn.1402b9980
mov rbx, rax
mov byte [rax + 0x14], 0
xor r9d, r9d
lea r10, [rax + 0xf]
nop dword [rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x17]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2716
inc dl
cmp dl, 4
jne 0x1402e2700
jmp 0x1402e2724
movsx ecx, r11b
movzx eax, byte [rbx + 0x1a]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2749
inc dl
cmp dl, 8
jne 0x1402e2733
jmp 0x1402e2757
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x19]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2786
inc dl
cmp dl, 5
jne 0x1402e2770
jmp 0x1402e2794
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x18]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x16]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 5
jne 0x1402e26d0
movsx eax, byte [rbx + 0x11]
lea eax, [rax + rax*4]
cdqe
movsx ecx, byte [rax + r15]
sub ecx, dword [rsi + 8]
cmp r13d, ecx
jge 0x1402e2820
mov eax, r13d
imul eax, dword [rsi + 4]
mov rdi, qword [rbp - 0x38]
add dword [rdi], eax
lea r8d, [r13 + 1]
mov rdx, r12
cmp r12, r14
jge 0x1402e280d
nop dword [rax]
nop word [rax + rax]
movsxd rax, dword [rsi + r14*4]
mov ecx, dword [rsi + rax*4 + 4]
cmp dword [rsi + rdx*4 + 4], ecx
jge 0x1402e2802
mov dword [rsi + 8], r8d
inc r8d
inc rdx
cmp rdx, r14
jl 0x1402e27f0
inc r13d
add rdi, 4
mov qword [rbp - 0x38], rdi
inc r12
jmp 0x1402e2591
mov eax, r14d
lea eax, [rax*4]
movsxd rcx, eax
inc rcx
lea r15, [rsi + rcx*4]
xor eax, eax
mov byte [rsp + 0x52], al
mov byte [rsp + 0x53], al
lea rdx, [rbp + 0x560]
lea rcx, [rsp + 0x53]
call fcn.1402bfe80
mov rbx, rax
mov byte [rax + 0x10], 0
xor r12d, r12d
mov r9d, r12d
lea r10, [rax + 0xc]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x13]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e28a6
inc dl
cmp dl, 4
jne 0x1402e2890
jmp 0x1402e28b4
movsx ecx, r11b
movzx eax, byte [rbx + 0x16]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e28d9
inc dl
cmp dl, 8
jne 0x1402e28c3
jmp 0x1402e28e7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x15]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2916
inc dl
cmp dl, 5
jne 0x1402e2900
jmp 0x1402e2924
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x14]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x12]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 4
jne 0x1402e2860
lea rdx, [rbx + 0xc]
lea rcx, [rbp + 0x6e0]
call fcn.14008fd10
mov rdi, rax
cmp qword [rax + 0x18], 0xf
jbe 0x1402e2961
mov rdi, qword [rax]
lea rdx, [rbp + 0x3a8]
lea rcx, [rsp + 0x52]
call fcn.1402bfe50
mov rbx, rax
mov byte [rax + 0xc], 0
mov r9d, r12d
lea r10, [rax + 9]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0xf]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e29c6
inc dl
cmp dl, 4
jne 0x1402e29b0
jmp 0x1402e29d4
movsx ecx, r11b
movzx eax, byte [rbx + 0x12]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e29f9
inc dl
cmp dl, 8
jne 0x1402e29e3
jmp 0x1402e2a07
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x11]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2a36
inc dl
cmp dl, 5
jne 0x1402e2a20
jmp 0x1402e2a44
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x10]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0xe]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 3
jne 0x1402e2980
movzx edi, byte [rdi + 1]
movzx ebx, byte [rbx + 9]
lea rcx, [rbp + 0x6e0]
call fcn.140090020
cmp bl, dil
jne 0x1402e35b1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e2b29
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e2b29
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rdi + r11*4]
mov r9d, dword [rdx + rbx]
add r9, rbx
mov r10d, 0x88770b7d
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e2b24
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e2af0
cmp r10d, 0xb34fbf61
je 0x1402e2b31
test r11d, r11d
jne 0x1402e2ad0
mov rax, qword [rax]
jmp 0x1402e2aa0
mov edx, dword [rsi + 0x1c]
add rdx, rbx
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
call rax
mov esi, eax
xor eax, eax
mov byte [rsp + 0x54], al
lea rdx, [rbp + 0x180]
lea rcx, [rsp + 0x54]
call fcn.1402bfeb0
mov rbx, rax
mov byte [rax + 8], 0
mov r9d, r12d
lea r10, [rax + 6]
nop dword [rax]
nop word [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0xb]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2bc6
inc dl
cmp dl, 4
jne 0x1402e2bb0
jmp 0x1402e2bd4
movsx ecx, r11b
movzx eax, byte [rbx + 0xe]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2bf9
inc dl
cmp dl, 8
jne 0x1402e2be3
jmp 0x1402e2c07
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0xd]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2c36
inc dl
cmp dl, 5
jne 0x1402e2c20
jmp 0x1402e2c44
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0xc]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0xa]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 2
jne 0x1402e2b80
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea eax, [rdx + rdx*2]
mov ecx, esi
sub ecx, eax
cmp byte [rcx + rbx + 6], 0x5d
je 0x1402e35b1
xor eax, eax
mov byte [rsp + 0x55], al
lea rdx, [rbp + 0xc0]
lea rcx, [rsp + 0x55]
call fcn.1402bfed0
mov rdx, rax
mov byte [rax + 4], 0
movzx r9d, byte [rax + 7]
xor r9b, byte [rax]
mov byte [rax + 3], r9b
xor cl, cl
movzx r8d, byte [rax + 1]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x1402e2cc3
inc cl
cmp cl, 4
jne 0x1402e2cb0
jmp 0x1402e2cd1
movsx ecx, r9b
movzx eax, byte [rdx + 0xa]
btc ecx, eax
mov byte [rdx + 3], cl
mov cl, 5
movzx r8d, byte [rdx + 2]
nop dword [rax + rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x1402e2cf3
inc cl
cmp cl, 8
jne 0x1402e2ce0
jmp 0x1402e2d01
movsx ecx, byte [rdx + 3]
movzx eax, byte [rdx + 9]
btc ecx, eax
mov byte [rdx + 3], cl
xor cl, cl
movzx eax, r8b
sar al, cl
test al, 1
jne 0x1402e2d16
inc cl
cmp cl, 5
jne 0x1402e2d03
jmp 0x1402e2d24
movsx ecx, byte [rdx + 3]
movzx eax, byte [rdx + 8]
btc ecx, eax
mov byte [rdx + 3], cl
movzx eax, byte [rdx + 6]
xor byte [rdx + 3], al
mov eax, esi
and eax, 1
cmp byte [rax + rdx + 3], 0x20
je 0x1402e35b1
xor eax, eax
mov byte [rsp + 0x56], al
lea rdx, [rbp + 0x190]
lea rcx, [rsp + 0x56]
call fcn.1402bfef0
mov rbx, rax
mov byte [rax + 8], 0
mov r9d, r12d
lea r10, [rax + 6]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0xb]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2da6
inc dl
cmp dl, 4
jne 0x1402e2d90
jmp 0x1402e2db4
movsx ecx, r11b
movzx eax, byte [rbx + 0xe]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2dd9
inc dl
cmp dl, 8
jne 0x1402e2dc3
jmp 0x1402e2de7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0xd]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2e16
inc dl
cmp dl, 5
jne 0x1402e2e00
jmp 0x1402e2e24
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0xc]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0xa]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 2
jne 0x1402e2d60
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea eax, [rdx + rdx*2]
mov ecx, esi
sub ecx, eax
cmp byte [rcx + rbx + 6], 0xa
je 0x1402e35b1
xor eax, eax
mov byte [rsp + 0x57], al
lea rdx, [rbp + 0x3c0]
lea rcx, [rsp + 0x57]
call fcn.1402bff10
mov rbx, rax
mov byte [rax + 0xc], 0
mov r9d, r12d
lea r10, [rax + 9]
nop dword [rax]
nop dword [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0xf]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2ed6
inc dl
cmp dl, 4
jne 0x1402e2ec0
jmp 0x1402e2ee4
movsx ecx, r11b
movzx eax, byte [rbx + 0x12]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2f09
inc dl
cmp dl, 8
jne 0x1402e2ef3
jmp 0x1402e2f17
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x11]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2f46
inc dl
cmp dl, 5
jne 0x1402e2f30
jmp 0x1402e2f54
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x10]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0xe]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 3
jne 0x1402e2e90
mov eax, esi
and eax, r9d
cmp byte [rax + rbx + 9], 0x2e
je 0x1402e35b1
cmp esi, 0x704a8667
ja 0x1402e35b1
inc esi
xor esi, 0x704a8667
cmp esi, 0x43606d29
jne 0x1402e35b1
xor eax, eax
mov byte [rsp + 0x58], al
lea rdx, [rbp + 0x3d8]
lea rcx, [rsp + 0x58]
call fcn.1402bff30
mov rbx, rax
mov byte [rax + 0xc], 0
mov r9d, r12d
lea r10, [rax + 9]
nop dword [rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0xf]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3016
inc dl
cmp dl, 4
jne 0x1402e3000
jmp 0x1402e3024
movsx ecx, r11b
movzx eax, byte [rbx + 0x12]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3049
inc dl
cmp dl, 8
jne 0x1402e3033
jmp 0x1402e3057
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x11]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3086
inc dl
cmp dl, 5
jne 0x1402e3070
jmp 0x1402e3094
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x10]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0xe]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 3
jne 0x1402e2fd0
cmp byte [rbx + 9], r9b
jne 0x1402e318c
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e3159
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e3159
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rdi + r11*4]
mov r9d, dword [rdx + rbx]
add r9, rbx
mov r10d, 0x6f8fc840
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e3154
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e3120
cmp r10d, 0x91a106c8
je 0x1402e3161
test r11d, r11d
jne 0x1402e3100
mov rax, qword [rax]
jmp 0x1402e30d0
mov r9d, dword [rsi + 0x1c]
add r9, rbx
mov r8d, dword [rsi + 0x24]
add r8, rbx
movzx r8d, word [r8 + r11*2]
mov eax, dword [r9 + r8*4]
add rax, rbx
mov edx, 0xb59c2874
mov ecx, 0x9ac61bbd
call rax
jmp 0x1402e35b1
xor eax, eax
mov byte [rsp + 0x59], al
lea rdx, [rbp + 0x420]
lea rcx, [rsp + 0x59]
call fcn.1402bff60
mov rbx, rax
mov byte [rax + 0xc], 0
mov r9d, r12d
lea r10, [rax + 9]
nop dword [rax]
nop word [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0xf]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3206
inc dl
cmp dl, 4
jne 0x1402e31f0
jmp 0x1402e3214
movsx ecx, r11b
movzx eax, byte [rbx + 0x12]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3239
inc dl
cmp dl, 8
jne 0x1402e3223
jmp 0x1402e3247
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x11]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3276
inc dl
cmp dl, 5
jne 0x1402e3260
jmp 0x1402e3284
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x10]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0xe]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 3
jne 0x1402e31c0
cmp byte [rbx + 0xb], 4
jne 0x1402e35b1
movss xmm1, dword [0x1403e7cf4]
movaps xmm0, xmm1
divss xmm0, dword [0x1403e7cf0]
mulss xmm0, xmm1
addss xmm1, xmm0
movss dword [0x1403e7cf4], xmm1
xor eax, eax
mov byte [rsp + 0x5a], al
lea rdx, [rbp + 0xd0]
lea rcx, [rsp + 0x5a]
call fcn.1402bff90
mov r9, rax
mov r8d, dword [rax + 4]
movzx ecx, byte [rax + 0xa]
mov edx, r8d
shr edx, cl
test dl, 1
je 0x1402e330c
movzx ecx, byte [rax]
inc cl
mov edx, r8d
shr edx, cl
test dl, 1
jne 0x1402e3358
movzx ecx, byte [rax]
lea eax, [rcx + 2]
movzx edx, al
bt r8d, ecx
setae cl
bt r8d, edx
setae al
test al, cl
je 0x1402e3358
movzx ecx, byte [r9 + 8]
mov eax, r8d
shr eax, cl
test al, 1
jne 0x1402e3358
movzx ecx, byte [r9 + 9]
shr r8d, cl
test r8b, 1
jne 0x1402e3358
movss xmm0, dword [0x1403e7cf0]
comiss xmm0, dword [0x1403e7cf4]
jbe 0x1402e35b1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e33f9
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e33f9
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rbx + r11*4]
mov r9d, dword [rdx + rdi]
add r9, rbx
mov r10d, 0x4fb20bdd
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e33f4
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e33c0
cmp r10d, 0x8acd7d8d
je 0x1402e3401
test r11d, r11d
jne 0x1402e33a0
mov rax, qword [rax]
jmp 0x1402e3370
mov edx, dword [rsi + 0x1c]
add rdx, rbx
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
call rax
mov r14, rax
test rax, rax
je 0x1402e35b1
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop word [rax + rax]
mov rbx, qword [rcx + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov esi, dword [rdx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e34c9
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e34c9
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rbx + r11*4]
mov r9d, dword [rdx + rdi]
add r9, rbx
mov r10d, 0xb6188dfb
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e34c4
movsx eax, r8b
sub r8b, 0x41
mov edx, eax
or edx, 0x20
cmp r8b, 0x19
cmova edx, eax
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e3490
cmp r10d, 0xbb17966f
je 0x1402e34d1
test r11d, r11d
jne 0x1402e3470
mov rcx, qword [rcx]
jmp 0x1402e3440
mov edx, dword [rsi + 0x1c]
add rdx, rbx
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
mov rcx, r14
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e3589
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e3589
mov rax, qword [rax]
jmp 0x1402e3500
movss xmm0, dword [r15]
call fcn.1403738f8
movaps xmm6, xmm0
xor eax, eax
mov byte [rsp + 0x5b], al
lea rdx, [rbp + 0xdc]
lea rcx, [rsp + 0x5b]
call fcn.1402b9a20
mov r9, rax
mov r8d, dword [rax + 4]
movzx ecx, byte [rax + 0xa]
mov edx, r8d
shr edx, cl
test dl, 1
je 0x1402e35f9
movzx ecx, byte [rax]
inc cl
mov edx, r8d
shr edx, cl
test dl, 1
jne 0x1402e3630
movzx ecx, byte [rax]
lea eax, [rcx + 2]
movzx edx, al
bt r8d, ecx
setae cl
bt r8d, edx
setae al
test al, cl
je 0x1402e3630
movzx ecx, byte [r9 + 8]
mov eax, r8d
shr eax, cl
test al, 1
jne 0x1402e3630
movzx ecx, byte [r9 + 9]
shr r8d, cl
test r8b, 1
je 0x1402e3659
comiss xmm7, xmm6
jbe 0x1402e3659
xorps xmm2, xmm2
cvtss2sd xmm2, xmm6
lea rdx, [r15 + 0x48]
movq r8, xmm2
lea rcx, [0x1403c3e80]
call fcn.1402fa720
mov r15, r12
jmp 0x1402e379e
call qword [sym.imp.KERNEL32.dll_GetACP]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x1402e3684
mov edx, ebx
lea rcx, [0x1403c3e88]
call fcn.1402fa720
jmp 0x1402e36b6
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x1402e36ab
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
jmp 0x1402e36b6
mov ecx, 4
call qword [sym.imp.USER32.dll_SetDebugErrorLevel]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_DebugActiveProcessStop]
mov rcx, qword [r15 + 0x2a8]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [r15 + 0xe0c]
mov dword [rsp + 0x30], eax
mov eax, dword [r15 + 0xe18]
mov dword [rsp + 0x28], eax
mov eax, dword [r15 + 0xe14]
mov dword [rsp + 0x20], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_SetWindowPos]
test eax, eax
je 0x1402e371e
mov edx, 1
xor ecx, ecx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], r12d
mov r9, r15
lea r8, [0x1402b99b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rbx, rax
test rax, rax
je 0x1402e379e
mov edx, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov edx, dword [r15 + 0xd0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [r15 + 0x160]
call qword [sym.imp.USER32.dll_ShowCursor]
call qword [sym.imp.USER32.dll_GetShellWindow]
mov qword [r15 + 0x780], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [r15 + 0x818]
test rcx, rcx
je 0x1402e3797
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [r15 + 0x818], r12
mov ecx, 4
mov rax, qword gs:[0x58]
mov rax, qword [rax]
mov eax, dword [rcx + rax]
cmp dword [0x140421d88], eax
jle 0x1402e5287
lea rcx, [0x140421d88]
call fcn.1403609a8
cmp dword [0x140421d88], 0xffffffff
jne 0x1402e5287
xorps xmm0, xmm0
xor eax, eax
movups xmmword [0x140421d90], xmm0
mov qword [0x140421da0], rax
mov byte [rsp + 0x5c], al
lea rdx, [rbp + 0x2290]
lea rcx, [rsp + 0x5c]
call fcn.1402bc690
mov rbx, rax
mov byte [rax + 0xb0], 0
mov r9d, r12d
lea r10, [rax + 0x84]
nop dword [rax]
nop word [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0xb3]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3866
inc dl
cmp dl, 4
jne 0x1402e3850
jmp 0x1402e3877
movsx ecx, r11b
movzx eax, byte [rbx + 0xb6]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e38a6
inc dl
cmp dl, 8
jne 0x1402e3890
jmp 0x1402e38b7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0xb5]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e38e6
inc dl
cmp dl, 5
jne 0x1402e38d0
jmp 0x1402e38f7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0xb4]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0xb2]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0x2c
jne 0x1402e3820
lea rdx, [rbx + 0x84]
lea rcx, [rbp + 0x700]
call fcn.14008fd10
nop
lea rax, [rbp + 0x700]
mov qword [rbp + 0x30], rax
lea rax, [rbp + 0x720]
mov qword [rbp + 0x38], rax
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x1a0]
call fcn.1402f87d0
nop
movzx eax, byte [r15 + 0x35]
mov byte [rbp + 0x2410], al
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x2418]
call fcn.1402fa150
nop
xor eax, eax
mov byte [rsp + 0x5d], al
lea rdx, [rbp + 0xfd0]
lea rcx, [rsp + 0x5d]
call fcn.1402bc7e0
mov rbx, rax
mov byte [rax + 0x40], 0
mov r9d, r12d
lea r10, [rax + 0x30]
nop dword [rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x43]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e39e6
inc dl
cmp dl, 4
jne 0x1402e39d0
jmp 0x1402e39f4
movsx ecx, r11b
movzx eax, byte [rbx + 0x46]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3a19
inc dl
cmp dl, 8
jne 0x1402e3a03
jmp 0x1402e3a27
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x45]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3a56
inc dl
cmp dl, 5
jne 0x1402e3a40
jmp 0x1402e3a64
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x44]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x42]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0x10
jne 0x1402e39a0
lea rdx, [rbx + 0x30]
lea rcx, [rbp + 0xc70]
call fcn.14008fd10
nop
xor eax, eax
mov byte [rsp + 0x5e], al
lea rdx, [rbp + 0x1530]
lea rcx, [rsp + 0x5e]
call fcn.1402bc860
mov rbx, rax
mov byte [rax + 0x58], 0
mov r9d, r12d
lea r10, [rax + 0x42]
nop word [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x5b]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3b06
inc dl
cmp dl, 4
jne 0x1402e3af0
jmp 0x1402e3b14
movsx ecx, r11b
movzx eax, byte [rbx + 0x5e]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3b39
inc dl
cmp dl, 8
jne 0x1402e3b23
jmp 0x1402e3b47
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x5d]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3b76
inc dl
cmp dl, 5
jne 0x1402e3b60
jmp 0x1402e3b84
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x5c]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x5a]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0x16
jne 0x1402e3ac0
lea rdx, [rbx + 0x42]
lea rcx, [rbp + 0xc90]
call fcn.14008fd10
nop
lea rax, [rbp + 0xc70]
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0xcb0]
mov qword [rbp + 0x28], rax
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x1b0]
call fcn.1402f87d0
nop
movzx eax, byte [r15 + 0x36]
mov byte [rbp + 0x2428], al
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x2430]
call fcn.1402fa150
nop
xor eax, eax
mov byte [rsp + 0x5f], al
lea rdx, [rbp + 0x1f30]
lea rcx, [rsp + 0x5f]
call fcn.1402bc900
mov rbx, rax
mov byte [rax + 0x8c], 0
mov r9d, r12d
lea r10, [rax + 0x69]
nop dword [rax]
nop word [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x8f]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3c76
inc dl
cmp dl, 4
jne 0x1402e3c60
jmp 0x1402e3c87
movsx ecx, r11b
movzx eax, byte [rbx + 0x92]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3cb6
inc dl
cmp dl, 8
jne 0x1402e3ca0
jmp 0x1402e3cc7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x91]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3cf6
inc dl
cmp dl, 5
jne 0x1402e3ce0
jmp 0x1402e3d07
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x90]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x8e]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0x23
jne 0x1402e3c30
lea rdx, [rbx + 0x69]
lea rcx, [rbp + 0x1b00]
call fcn.14008fd10
nop
xor eax, eax
mov byte [rsp + 0x60], al
lea rdx, [rbp + 0xcb0]
lea rcx, [rsp + 0x60]
call fcn.1402bca00
mov rbx, rax
mov byte [rax + 0x38], 0
mov r9d, r12d
lea r10, [rax + 0x2a]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x3b]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3da6
inc dl
cmp dl, 4
jne 0x1402e3d90
jmp 0x1402e3db4
movsx ecx, r11b
movzx eax, byte [rbx + 0x3e]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3dd9
inc dl
cmp dl, 8
jne 0x1402e3dc3
jmp 0x1402e3de7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x3d]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3e16
inc dl
cmp dl, 5
jne 0x1402e3e00
jmp 0x1402e3e24
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x3c]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x3a]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0xe
jne 0x1402e3d60
lea rdx, [rbx + 0x2a]
lea rcx, [rbp + 0x1b20]
call fcn.14008fd10
nop
xor eax, eax
mov byte [rsp + 0x61], al
lea rdx, [rbp + 0x1590]
lea rcx, [rsp + 0x61]
call fcn.1402bca70
mov rbx, rax
mov byte [rax + 0x58], 0
mov r9d, r12d
lea r10, [rax + 0x42]
nop word [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x5b]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3ec6
inc dl
cmp dl, 4
jne 0x1402e3eb0
jmp 0x1402e3ed4
movsx ecx, r11b
movzx eax, byte [rbx + 0x5e]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3ef9
inc dl
cmp dl, 8
jne 0x1402e3ee3
jmp 0x1402e3f07
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x5d]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3f36
inc dl
cmp dl, 5
jne 0x1402e3f20
jmp 0x1402e3f44
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x5c]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x5a]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0x16
jne 0x1402e3e80
lea rdx, [rbx + 0x42]
lea rcx, [rbp + 0x1b40]
call fcn.14008fd10
nop
xor eax, eax
mov byte [rsp + 0x62], al
lea rdx, [rbp + 0x2a50]
lea rcx, [rsp + 0x62]
call fcn.1402bcb10
mov rbx, rax
mov byte [rax + 0xc4], 0
mov r9d, r12d
lea r10, [rax + 0x93]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0xc7]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3fe6
inc dl
cmp dl, 4
jne 0x1402e3fd0
jmp 0x1402e3ff7
movsx ecx, r11b
movzx eax, byte [rbx + 0xca]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e4026
inc dl
cmp dl, 8
jne 0x1402e4010
jmp 0x1402e4037
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0xc9]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e4066
inc dl
cmp dl, 5
jne 0x1402e4050
jmp 0x1402e4077
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0xc8]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0xc6]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0x31
jne 0x1402e3fa0
lea rdx, [rbx + 0x93]
lea rcx, [rbp + 0x1b60]
call fcn.14008fd10
nop
lea rax, [rbp + 0x1b00]
mov qword [rbp + 0x10], rax
lea rax, [rbp + 0x1b80]
mov qword [rbp + 0x18], rax
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x1c0]
call fcn.1402f87d0
nop
movzx eax, byte [r15 + 0x37]
mov byte [rbp + 0x2440], al
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x2448]
call fcn.1402fa150
nop
xor eax, eax
mov byte [rsp + 0x63], al
lea rdx, [rbp + 0x3700]
lea rcx, [rsp + 0x63]
call fcn.1402bcc80
mov rbx, rax
mov byte [rax + 0x180], 0
mov r9d, r12d
lea r10, [rax + 0x120]
nop
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x183]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e4166
inc dl
cmp dl, 4
jne 0x1402e4150
jmp 0x1402e4177
movsx ecx, r11b
movzx eax, byte [rbx + 0x186]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e41a6
inc dl
cmp dl, 8
jne 0x1402e4190
jmp 0x1402e41b7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x185]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e41e6
inc dl
cmp dl, 5
jne 0x1402e41d0
jmp 0x1402e41f7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x184]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x182]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0x60
jne 0x1402e4120
lea rdx, [rbx + 0x120]
lea rcx, [rbp + 0xcf0]
call fcn.14008fd10
nop
xor eax, eax
mov byte [rsp + 0x64], al
lea rdx, [rbp + 0x3460]
lea rcx, [rsp + 0x64]
call fcn.1402bcf90
mov rbx, rax
mov byte [rax + 0x144], 0
mov r9d, r12d
lea r10, [rax + 0xf3]
nop dword [rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x147]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e42a6
inc dl
cmp dl, 4
jne 0x1402e4290
jmp 0x1402e42b7
movsx ecx, r11b
movzx eax, byte [rbx + 0x14a]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e42e6
inc dl
cmp dl, 8
jne 0x1402e42d0
jmp 0x1402e42f7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x149]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e4326
inc dl
cmp dl, 5
jne 0x1402e4310
jmp 0x1402e4337
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x148]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x146]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0x51
jne 0x1402e4260
lea rdx, [rbx + 0xf3]
lea rcx, [rbp + 0xd10]
call fcn.14008fd10
nop
lea rax, [rbp + 0xcf0]
mov qword [rbp], rax
lea rax, [rbp + 0xd30]
mov qword [rbp + 8], rax
lea rdx, [rbp]
lea rcx, [rbp + 0x1d0]
call fcn.1402f87d0
nop
movzx eax, byte [r15 + 0x38]
mov byte [rbp + 0x2458], al
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x2460]
call fcn.1402fa150
nop
xor eax, eax
mov byte [rsp + 0x65], al
lea rdx, [rbp + 0x2690]
lea rcx, [rsp + 0x65]
call fcn.1402bd220
mov rbx, rax
mov byte [rax + 0xf0], 0
mov r9d, r12d
lea r10, [rax + 0xb4]
nop
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0xf3]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e4426
inc dl
cmp dl, 4
jne 0x1402e4410
jmp 0x1402e4437
movsx ecx, r11b
movzx eax, byte [rbx + 0xf6]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e4466
inc dl
cmp dl, 8
jne 0x1402e4450
jmp 0x1402e4477
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0xf5]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e44a6
inc dl
cmp dl, 5
jne 0x1402e4490
jmp 0x1402e44b7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0xf4]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0xf2]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0x3c
jne 0x1402e43e0
lea rdx, [rbx + 0xb4]
lea rcx, [rbp + 0x1b80]
call fcn.14008fd10
nop
xor eax, eax
mov byte [rsp + 0x66], al
lea rdx, [rbp + 0x2bf0]
lea rcx, [rsp + 0x66]
call fcn.1402bd3f0
mov rbx, rax
mov byte [rax + 0xcc], 0
mov r9d, r12d
lea r10, [rax + 0x99]
nop dword [rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0xcf]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e4566
inc dl
cmp dl, 4
jne 0x1402e4550
movsx ecx, r11b
movzx eax, byte [rbx + 0xd2]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e45a6
cmp dword [r15 + 0x44], 1
jle 0x1402e5944
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
mov byte [rsp + 0x70], al
lea rdx, [rbp + 0x2db0]
lea rcx, [rsp + 0x70]
call fcn.1402be580
mov r11, rax
mov word [rax + 0xd0], r12w
mov r10d, r12d
lea rbx, [rax + 0x9c]
nop dword [rax]
lea r8d, [r10 + r10*2]
movzx edx, word [r11 + r8*2]
mov word [rbx], dx
movzx eax, r10w
add ax, ax
lea r9d, [rax + r10]
movzx eax, byte [r11 + 0xd4]
add r9w, ax
xor r9w, dx
mov word [rbx], r9w
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, word [r11 + rax*2]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e5327
inc dl
cmp dl, 4
jne 0x1402e5310
jmp 0x1402e533b
movzx r9d, r9w
movzx eax, byte [r11 + 0xd7]
btc r9d, eax
mov word [rbx], r9w
mov dl, 5
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, word [r11 + rax*2]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e5367
inc dl
cmp dl, 8
jne 0x1402e5350
jmp 0x1402e537d
movzx ecx, r9w
movzx eax, byte [r11 + 0xd6]
btc ecx, eax
movzx r9d, cx
mov word [rbx], cx
xor dl, dl
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, word [r11 + rax*2]
nop dword [rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e53a7
inc dl
cmp dl, 5
jne 0x1402e5390
jmp 0x1402e53bd
movzx ecx, r9w
movzx eax, byte [r11 + 0xd5]
btc ecx, eax
movzx r9d, cx
mov word [rbx], cx
movzx eax, r10w
add ax, ax
lea ecx, [rax + r10]
movzx eax, byte [r11 + 0xd3]
add cx, ax
xor cx, r9w
mov word [rbx], cx
inc r10d
add rbx, 2
cmp r10d, 0x1a
jne 0x1402e52d0
lea rdx, [r11 + 0x9c]
lea rcx, [rbp + 0x4338]
call fcn.14008e6c0
nop
cmp qword [rbp + 0x4348], 0
je 0x1402e5622
xor eax, eax
mov byte [rsp + 0x71], al
lea rdx, [rbp + 0x2fa0]
lea rcx, [rsp + 0x71]
call fcn.1402be700
mov rbx, rax
mov byte [rax + 0x104], 0
mov r9d, r12d
lea r10, [rax + 0xc3]
nop dword [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x107]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5486
inc dl
cmp dl, 4
jne 0x1402e5470
jmp 0x1402e5497
movsx ecx, r11b
movzx eax, byte [rbx + 0x10a]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e54c6
inc dl
cmp dl, 8
jne 0x1402e54b0
jmp 0x1402e54d7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x109]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5506
inc dl
cmp dl, 5
jne 0x1402e54f0
jmp 0x1402e5517
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x108]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x106]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0x41
jne 0x1402e5440
lea rdx, [rbx + 0xc3]
lea rcx, [rbp + 0xd70]
call fcn.14008fd10
nop
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x4338]
call fcn.14007e930
mov rbx, qword [rax]
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x4338]
call fcn.14007e950
lea r9, [rsp + 0x72]
mov r8, rbx
mov rdx, qword [rax]
lea rcx, [rbp + 0xd90]
call fcn.14006c6e0
nop
lea rax, [rbp + 0xd70]
mov qword [rbp + 0x250], rax
lea rax, [rbp + 0xdb0]
mov qword [rbp + 0x258], rax
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x260]
call fcn.1402f87d0
nop
movzx eax, byte [r15 + 0x3d]
mov byte [rbp + 0x578], al
lea rdx, [rbp + 0x260]
lea rcx, [rbp + 0x580]
call fcn.1402fa150
nop
lea rdx, [rbp + 0x578]
lea rcx, [0x140421d90]
call fcn.1402fa010
nop
lea rcx, [rbp + 0x580]
call fcn.1402f8760
nop
lea rcx, [rbp + 0x260]
call fcn.1402f8760
nop
lea r9, [fcn.140090020]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea r8d, [rdx - 0x1e]
lea rcx, [rbp + 0xd70]
call fcn.140360830
xor eax, eax
mov byte [rsp + 0x73], al
lea rdx, [rbp + 0x18c0]
lea rcx, [rsp + 0x73]
call fcn.1402be900
mov rbx, rax
mov byte [rax + 0x80], 0
mov r9d, r12d
lea r10, [rax + 0x60]
nop word [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x83]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5696
inc dl
cmp dl, 4
jne 0x1402e5680
jmp 0x1402e56a7
movsx ecx, r11b
movzx eax, byte [rbx + 0x86]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e56d6
inc dl
cmp dl, 8
jne 0x1402e56c0
jmp 0x1402e56e7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x85]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5716
inc dl
cmp dl, 5
jne 0x1402e5700
jmp 0x1402e5727
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x84]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x82]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0x20
jne 0x1402e5650
lea rdx, [rbx + 0x60]
lea rcx, [rbp + 0xdb0]
call fcn.14008fd10
nop
xor eax, eax
mov byte [rsp + 0x74], al
lea rdx, [rbp + 0x2110]
lea rcx, [rsp + 0x74]
call fcn.1402be9e0
mov rbx, rax
mov byte [rax + 0xac], 0
mov r9d, r12d
lea r10, [rax + 0x81]
nop word [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0xaf]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e57d6
inc dl
cmp dl, 4
jne 0x1402e57c0
jmp 0x1402e57e7
movsx ecx, r11b
movzx eax, byte [rbx + 0xb2]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5816
inc dl
cmp dl, 8
jne 0x1402e5800
jmp 0x1402e5827
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0xb1]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5856
inc dl
cmp dl, 5
jne 0x1402e5840
jmp 0x1402e5867
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0xb0]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0xae]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0x2b
jne 0x1402e5790
lea rdx, [rbx + 0x81]
lea rcx, [rbp + 0xdd0]
call fcn.14008fd10
nop
lea rax, [rbp + 0xdb0]
mov qword [rbp + 0x270], rax
lea rax, [rbp + 0xdf0]
mov qword [rbp + 0x278], rax
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x280]
call fcn.1402f87d0
nop
movzx eax, byte [r15 + 0x3e]
mov byte [rbp + 0x590], al
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x598]
call fcn.1402fa150
nop
lea rdx, [rbp + 0x590]
lea rcx, [0x140421d90]
call fcn.1402fa010
nop
lea rcx, [rbp + 0x598]
call fcn.1402f8760
nop
lea rcx, [rbp + 0x280]
call fcn.1402f8760
nop
lea r9, [fcn.140090020]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea r8d, [rdx - 0x1e]
lea rcx, [rbp + 0xdb0]
call fcn.140360830
nop
lea rcx, [rbp + 0x4338]
call fcn.1400808f0
mov rcx, qword [0x140421d98]
sub rcx, qword [0x140421d90]
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov dword [r15 + 0x50], edx
xor edx, edx
lea rcx, [0x140421d90]
call fcn.1402f8920
mov rbx, rax
test rax, rax
je 0x1402e59d2
lea rdx, [rax + 0x340]
movzx ecx, byte [rax + 0x9a]
mov byte [rsp + 0x30], cl
mov ecx, dword [rax + 0x6c]
mov dword [rsp + 0x28], ecx
movzx ecx, byte [rax + 0x84]
mov byte [rsp + 0x20], cl
movzx r9d, byte [rax + 0x72]
movss xmm2, dword [rax + 0x38]
movss xmm1, dword [rax + 0x34]
mov rcx, rax
call rdx
test al, al
je 0x1402e59c9
mov r15, qword [rbx + 0x40]
jmp 0x1402e59d5
mov r15, qword [rbx + 0x118]
jmp 0x1402e59d5
mov r15, r12
call fcn.1402bffb0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e5a79
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e5a79
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rdi + r11*4]
mov r9d, dword [rdx + rbx]
add r9, rbx
mov r10d, 0x7251bc0d
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e5a74
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e5a40
cmp r10d, 0x41f1d91
je 0x1402e5a81
test r11d, r11d
jne 0x1402e5a20
mov rax, qword [rax]
jmp 0x1402e59f0
mov edx, dword [rsi + 0x1c]
add rdx, rbx
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
call rax
mov rbx, rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rbx, rax
jne 0x1402e5c17
mov rcx, qword [r15 + 0xa8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rdx, qword [r15 + 0xc8]
mov rcx, qword [r15 + 0xc0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
xor ecx, ecx
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov r14, rax
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax]
mov rbx, qword [rcx + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov esi, dword [rdx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e5b79
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e5b79
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rdi + r11*4]
mov r9d, dword [rdx + rbx]
add r9, rbx
mov r10d, 0x6f6b4d28
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e5b74
movsx eax, r8b
sub r8b, 0x41
mov edx, eax
or edx, 0x20
cmp r8b, 0x19
cmova edx, eax
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e5b40
cmp r10d, 0xc373489a
je 0x1402e5b81
test r11d, r11d
jne 0x1402e5b20
mov rcx, qword [rcx]
jmp 0x1402e5af0
mov edx, dword [rsi + 0x1c]
add rdx, rbx
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
mov edx, 1
mov rcx, r14
call rax
mov ebx, eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [r15 + 0x19d8]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
test rax, rax
je 0x1402e5c03
mov qword [rsp + 0x20], r12
mov r9, qword [r15 + 0x1124]
mov r8d, reloc.WS2_32.dll_sendto
mov rdx, qword [r15 + 0x1100]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp ebx, eax
jne 0x1402ec6af
add r15, 0x28
jmp 0x1402e5c1a
mov r15, r12
mov rsi, r12
cmp byte [r15], sil
je 0x1402e5c62
nop dword [rax]
nop word [rax + rax]
inc r15
inc rsi
movzx ecx, byte [r15]
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [rdx + rdx*2]
sub ecx, eax
cmp ecx, 1
jne 0x1402e5c53
add r15, 3
jmp 0x1402e5c5b
test rsi, rsi
jne 0x1402e5c5b
inc r15
cmp byte [r15 + rsi], 0
jne 0x1402e5c30
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x1402e5d09
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x1402e5d09
mov edi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rdx, [rbx + r11*4]
mov r9d, dword [rdx + rdi]
add r9, rbx
mov r10d, 0x57059c47
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e5d04
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e5cd0
cmp r10d, 0x2939f5b1
je 0x1402e5d11
test r11d, r11d
jne 0x1402e5cb0
mov rax, qword [rax]
jmp 0x1402e5c80
mov edx, dword [r14 + 0x1c]
add rdx, rbx
mov ecx, dword [r14 + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
call rax
mov eax, eax
add rsi, rax
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x45a0]
call fcn.140393bf0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x20]
mov rdx, qword [r15 + rsi + 0x10]
lea rcx, [rbp + 0x45a0]
call fcn.1402f8ba0
nop
lea r14, vtable.std::ios_base.0
xor eax, eax
cmp qword [rbp + 0x4630], rax
je 0x1402e5e27
movdqa xmm0, xmmword [reloc.d2d1.dll_Ordinal_1]
movdqu xmmword [rbp + 0x5a8], xmm0
mov qword [rbp + 0x5b8], rax
movaps xmmword [rbp + 0x5c0], xmm0
movsd xmm0, qword [rbp + 0x5b8]
movsd qword [rbp + 0x5d0], xmm0
lea rdx, [rbp + 0x5c0]
lea rcx, [rbp + 0x45a0]
call fcn.1402f8dc0
xor eax, eax
mov word [rbp + 0x4320], ax
lea r8d, [rax + 1]
lea rdx, [rbp + 0x4320]
lea rcx, [rbp + 0x45a0]
call fcn.1400f4770
lea rcx, [rbp + 0x45a0]
call fcn.140076b90
cmp byte [rbp + 0x4320], 0x30
jne 0x1402e60b8
lea rbx, [rsi + 0xc28]
add rbx, r15
lea rcx, [rbp + 0x4650]
call fcn.140074e90
lea rcx, [rbp + 0x4650]
call fcn.14007c7c0
mov r13, 0xffffffffffffffff
jmp 0x1402e60e3
mov byte [rsp + 0x75], al
lea rdx, [rbp + 0x8c0]
lea rcx, [rsp + 0x75]
call fcn.1402bf080
mov r11, rax
lea rsi, [rax + 0x1e]
mov word [rsi + 0xa], r12w
mov r10d, r12d
mov rbx, rsi
nop
lea r8d, [r10 + r10*2]
movzx edx, word [r11 + r8*2]
mov word [rbx], dx
movzx eax, r10w
add ax, ax
lea r9d, [rax + r10]
movzx eax, byte [r11 + 0x2c]
add r9w, ax
xor r9w, dx
mov word [rbx], r9w
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, word [r11 + rax*2]
nop dword [rax]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e5ea7
inc dl
cmp dl, 4
jne 0x1402e5e90
jmp 0x1402e5eb8
movzx r9d, r9w
movzx eax, byte [r11 + 0x2f]
btc r9d, eax
mov word [rbx], r9w
mov dl, 5
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, word [r11 + rax*2]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e5ee7
inc dl
cmp dl, 8
jne 0x1402e5ed0
jmp 0x1402e5efa
movzx ecx, r9w
movzx eax, byte [r11 + 0x2e]
btc ecx, eax
movzx r9d, cx
mov word [rbx], cx
xor dl, dl
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, word [r11 + rax*2]
nop dword [rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e5f27
inc dl
cmp dl, 5
jne 0x1402e5f10
jmp 0x1402e5f3a
movzx ecx, r9w
movzx eax, byte [r11 + 0x2d]
btc ecx, eax
movzx r9d, cx
mov word [rbx], cx
movzx eax, r10w
add ax, ax
lea ecx, [rax + r10]
movzx eax, byte [r11 + 0x2b]
add cx, ax
xor cx, r9w
mov word [rbx], cx
inc r10d
add rbx, 2
cmp r10d, 5
jne 0x1402e5e50
xor eax, eax
mov byte [rsp + 0x76], al
lea rdx, [rbp + 0xab0]
lea rcx, [rsp + 0x76]
call fcn.1402bf010
mov r11, rax
mov word [rax + 0x38], r12w
mov r10d, r12d
lea rbx, [rax + 0x2a]
nop dword [rax + rax]
lea r8d, [r10 + r10*2]
movzx edx, word [r11 + r8*2]
mov word [rbx], dx
movzx eax, r10w
add ax, ax
lea r9d, [rax + r10]
movzx eax, byte [r11 + 0x3c]
add r9w, ax
xor r9w, dx
mov word [rbx], r9w
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, word [r11 + rax*2]
nop dword [rax]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e5fe7
inc dl
cmp dl, 4
jne 0x1402e5fd0
jmp 0x1402e5ff8
movzx r9d, r9w
movzx eax, byte [r11 + 0x3f]
btc r9d, eax
mov word [rbx], r9w
mov dl, 5
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, word [r11 + rax*2]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e6027
inc dl
cmp dl, 8
jne 0x1402e6010
jmp 0x1402e603a
movzx ecx, r9w
movzx eax, byte [r11 + 0x3e]
btc ecx, eax
movzx r9d, cx
mov word [rbx], cx
xor dl, dl
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, word [r11 + rax*2]
nop dword [rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e6067
inc dl
cmp dl, 5
jne 0x1402e6050
jmp 0x1402e607a
movzx ecx, r9w
movzx eax, byte [r11 + 0x3d]
btc ecx, eax
movzx r9d, cx
mov word [rbx], cx
movzx eax, r10w
add ax, ax
lea ecx, [rax + r10]
movzx eax, byte [r11 + 0x3b]
add cx, ax
xor cx, r9w
mov word [rbx], cx
inc r10d
add rbx, 2
cmp r10d, 7
jne 0x1402e5f90
xor r9d, r9d
mov r8, rsi
lea rdx, [r11 + 0x2a]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
lea rcx, [rbp + 0x4650]
call fcn.140074e90
nop
mov qword [rbp + 0x4650], r14
lea rcx, [rbp + 0x4650]
call fcn.14030a500
nop
mov r13, 0xffffffffffffffff
mov rbx, r13
mov r10d, r12d
movsxd rsi, dword [rbx]
test esi, esi
jle 0x1402e6138
mov r11, r12
mov eax, 1
test r11, r11
cmovne rax, r11
mov r8d, dword [rbx + rax*4 + 4]
mov r9d, 1
cmp dword [rbx + rax*4 + 8], r8d
cmovl r9, r13
add r9, rax
lea ecx, [r10 + 1]
test r11, r11
cmovne ecx, r10d
mov r10d, 1
cmp dword [rbx + rax*4 + 8], r8d
cmovl r10d, r13d
add r10d, ecx
mov r11, r9
cmp r9, rsi
jl 0x1402e60f0
imul esi, r10d
movsxd rax, esi
lea rbx, [rbx + rax*4]
add rbx, 8
movss xmm0, dword [rbx]
call fcn.1403738f8
movaps xmm6, xmm0
xor eax, eax
mov byte [rsp + 0x77], al
lea rdx, [rbp + 0xe8]
lea rcx, [rsp + 0x77]
call fcn.1402b9a20
mov r9, rax
mov r8d, dword [rax + 4]
movzx ecx, byte [rax + 0xa]
mov edx, r8d
shr edx, cl
test dl, 1
je 0x1402e618e
movzx ecx, byte [rax]
inc cl
mov edx, r8d
shr edx, cl
test dl, 1
jne 0x1402e61c5
movzx ecx, byte [rax]
lea eax, [rcx + 2]
movzx edx, al
bt r8d, ecx
setae cl
bt r8d, edx
setae al
test al, cl
je 0x1402e61c5
movzx ecx, byte [r9 + 8]
mov eax, r8d
shr eax, cl
test al, 1
jne 0x1402e61c5
movzx ecx, byte [r9 + 9]
shr r8d, cl
test r8b, 1
je 0x1402e61ee
comiss xmm7, xmm6
jbe 0x1402e61ee
xorps xmm2, xmm2
cvtss2sd xmm2, xmm6
lea rdx, [rbx + 0x48]
movq r8, xmm2
lea rcx, [0x1403c3e80]
call fcn.1402fa720
mov rbx, r12
jmp 0x1402e632e
call qword [sym.imp.KERNEL32.dll_GetACP]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x1402e6219
mov edx, edi
lea rcx, [0x1403c3e88]
call fcn.1402fa720
jmp 0x1402e624b
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x1402e6240
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
jmp 0x1402e624b
mov ecx, 4
call qword [sym.imp.USER32.dll_SetDebugErrorLevel]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_DebugActiveProcessStop]
mov rcx, qword [rbx + 0x2a8]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [rbx + 0xe0c]
mov dword [rsp + 0x30], eax
mov eax, dword [rbx + 0xe18]
mov dword [rsp + 0x28], eax
mov eax, dword [rbx + 0xe14]
mov dword [rsp + 0x20], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_SetWindowPos]
test eax, eax
je 0x1402e62b0
mov edx, 1
xor ecx, ecx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], r12d
mov r9, rbx
lea r8, [0x1402b99b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rdi, rax
test rax, rax
je 0x1402e632e
mov edx, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov edx, dword [rbx + 0xd0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [rbx + 0x160]
call qword [sym.imp.USER32.dll_ShowCursor]
call qword [sym.imp.USER32.dll_GetShellWindow]
mov qword [rbx + 0x780], rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbx + 0x818]
test rcx, rcx
je 0x1402e6327
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbx + 0x818], r12
mov r10d, r12d
movsxd rsi, dword [rbx]
test esi, esi
jle 0x1402e6388
mov r11, r12
nop dword [rax + rax]
mov eax, 1
test r11, r11
cmovne rax, r11
mov r8d, dword [rbx + rax*4 + 4]
mov r9d, 1
cmp dword [rbx + rax*4 + 8], r8d
cmovl r9, r13
add r9, rax
lea ecx, [r10 + 1]
test r11, r11
cmovne ecx, r10d
mov r10d, 1
cmp dword [rbx + rax*4 + 8], r8d
cmovl r10d, r13d
add r10d, ecx
mov r11, r9
cmp r9, rsi
jl 0x1402e6340
imul esi, r10d
movsxd rdi, esi
add rdi, 2
lea rdi, [rbx + rdi*4]
test rdi, rdi
je 0x1402e639f
hlt
vmxoff
mov r14d, dword [rdi]
mov r15d, dword [rdi + 4]
xor eax, eax
mov byte [rsp + 0x78], al
lea rdx, [rbp + 0xdf0]
lea rcx, [rsp + 0x78]
call fcn.1402b98e0
mov rbx, rax
mov byte [rax + 0x38], 0
mov r9d, r12d
lea r10, [rax + 0x2a]
nop
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x3b]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e6416
inc dl
cmp dl, 4
jne 0x1402e6400
jmp 0x1402e6424
movsx ecx, r11b
movzx eax, byte [rbx + 0x3e]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e6449
inc dl
cmp dl, 8
jne 0x1402e6433
jmp 0x1402e6457
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x3d]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e6486
inc dl
cmp dl, 5
jne 0x1402e6470
jmp 0x1402e6494
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x3c]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea edx, [rax + r9]
add dl, byte [rbx + 0x3a]
xor byte [r10], dl
inc r9d
inc r10
cmp r9d, 0xe
jne 0x1402e63d0
mov r8d, r15d
mov edx, r14d
lea rcx, [rbx + 0x2a]
call fcn.1402fa720
lea eax, [r14*4 + 8]
movsxd rbx, eax
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x46b0]
call fcn.140393bf0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x20]
mov rdx, qword [rdi + rbx*4 + 0x14]
lea rcx, [rbp + 0x46b0]
call fcn.1402f8ba0
nop
xor eax, eax
cmp qword [rbp + 0x4740], rax
je 0x1402e65c3
movdqa xmm0, xmmword [reloc.d2d1.dll_Ordinal_1]
movdqu xmmword [rbp + 0x548], xmm0
mov qword [rbp + 0x558], rax
movaps xmmword [rbp + 0x600], xmm0
movsd xmm0, qword [rbp + 0x558]
movsd qword [rbp + 0x610], xmm0
lea rdx, [rbp + 0x600]
lea rcx, [rbp + 0x46b0]
call fcn.1402f8dc0
xor eax, eax
mov word [rbp + 0x4330], ax
lea r8d, [rax + 1]
lea rdx, [rbp + 0x4330]
lea rcx, [rbp + 0x46b0]
call fcn.1400f4770
lea rcx, [rbp + 0x46b0]
call fcn.140076b90
cmp byte [rbp + 0x4330], 0x30
jne 0x1402e6858
add rbx, 0x30b
lea rbx, [rdi + rbx*4]
lea rcx, [rbp + 0x4760]
call fcn.140074e90
lea rcx, [rbp + 0x4760]
call fcn.14007c7c0
test rbx, rbx
jne 0x1402e6883
mov r15, r12
jmp 0x1402e68cc
mov byte [rsp + 0x79], al
lea rdx, [rbp + 0x780]
lea rcx, [rsp + 0x79]
call fcn.1402bf080
mov r11, rax
lea rsi, [rax + 0x1e]
mov word [rsi + 0xa], r12w
mov r10d, r12d
mov rbx, rsi
nop word [rax + rax]
lea r8d, [r10 + r10*2]
movzx edx, word [r11 + r8*2]
mov word [rbx], dx
movzx eax, r10w
add ax, ax
lea r9d, [rax + r10]
movzx eax, byte [r11 + 0x2c]
add r9w, ax
xor r9w, dx
mov word [rbx], r9w
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, word [r11 + rax*2]
nop dword [rax]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e6647
inc dl
cmp dl, 4
jne 0x1402e6630
jmp 0x1402e6658
movzx r9d, r9w
movzx eax, byte [r11 + 0x2f]
btc r9d, eax
mov word [rbx], r9w
mov dl, 5
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, word [r11 + rax*2]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e6687
inc dl
cmp dl, 8
jne 0x1402e6670
jmp 0x1402e669a
movzx ecx, r9w
movzx eax, byte [r11 + 0x2e]
btc ecx, eax
movzx r9d, cx
mov word [rbx], cx
xor dl, dl
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, word [r11 + rax*2]
nop dword [rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e66c7
inc dl
cmp dl, 5
jne 0x1402e66b0
jmp 0x1402e66da
movzx ecx, r9w
movzx eax, byte [r11 + 0x2d]
btc ecx, eax
movzx r9d, cx
mov word [rbx], cx
movzx eax, r10w
add ax, ax
lea ecx, [rax + r10]
movzx eax, byte [r11 + 0x2b]
add cx, ax
xor cx, r9w
mov word [rbx], cx
inc r10d
add rbx, 2
cmp r10d, 5
jne 0x1402e65f0
xor eax, eax
mov byte [rsp + 0x7a], al
lea rdx, [rbp + 0xb00]
lea rcx, [rsp + 0x7a]
call fcn.1402bf010
mov r11, rax
mov word [rax + 0x38], r12w
mov r10d, r12d
lea rbx, [rax + 0x2a]
nop dword [rax + rax]
lea r8d, [r10 + r10*2]
movzx edx, word [r11 + r8*2]
mov word [rbx], dx
movzx eax, r10w
add ax, ax
lea r9d, [rax + r10]
movzx eax, byte [r11 + 0x3c]
add r9w, ax
xor r9w, dx
mov word [rbx], r9w
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, word [r11 + rax*2]
nop dword [rax]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e6787
lea rcx, [rbp + 0x4760]
call fcn.140074e90
nop
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x4760], rax
lea rcx, [rbp + 0x4760]
call fcn.14030a500
nop
mov rbx, r13
lea rdx, [rbx + 0x340]
movzx eax, byte [rbx + 0x9a]
mov byte [rsp + 0x30], al
mov eax, dword [rbx + 0x6c]
mov dword [rsp + 0x28], eax
movzx eax, byte [rbx + 0x84]
mov byte [rsp + 0x20], al
movzx r9d, byte [rbx + 0x72]
movss xmm2, dword [rbx + 0x38]
movss xmm1, dword [rbx + 0x34]
mov rcx, rbx
call rdx
test al, al
je 0x1402e68c5
mov r15, qword [rbx + 0x40]
jmp 0x1402e68cc
mov r15, qword [rbx + 0x118]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e6969
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e6969
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rbx + r11*4]
mov r9d, dword [rdx + rdi]
add r9, rbx
mov r10d, 0x7251bc0d
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e6964
mov rax, qword [rax]
jmp 0x1402e68e0
mov r13, 0xffffffffffffffff
mov ecx, r13d
call fcn.140373c94
int3