Function at 0x1802303c8
Capabilities:
Authenticate hmac
Parse pe header
Resolve function by parsing pe exports
Write file on windows

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1af0
call fcn.18026a280
sub rsp, rax
mov qword [rsp + 0x830], 0xfffffffffffffffe
movaps xmmword [rsp + 0x1ae0], xmm6
movaps xmmword [rsp + 0x1ad0], xmm7
mov rbx, rdx
mov r13, rcx
xor edi, edi
mov eax, dword [0x1802b61c4]
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x7c], eax
mov dword [rsp + 0x7c0], edi
xor edx, edx
lea r8d, [rdi + 0x68]
lea rcx, [rsp + 0x7c8]
call sub.VCRUNTIME140.dll_memset
or r15, 0xffffffffffffffff
mov qword [rsp + 0x5f0], r15
mov qword [rsp + 0x260], r15
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x638], xmm0
mov qword [rsp + 0x648], rax
lea esi, [rdi + 0x70]
mov r8d, esi
xor edx, edx
lea rcx, [rsp + 0x7c0]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov dword [rsp + 0x7c0], esi
lea esi, [rdi + 1]
mov dword [rsp + 0x7fc], esi
mov word [rsp + 0x800], di
mov qword [rsp + 0x88], rdi
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x708], xmm0
mov qword [rsp + 0x718], rax
movups xmmword [rsp + 0x220], xmm0
mov qword [rsp + 0x230], rdi
mov qword [rsp + 0x238], 7
mov word [rsp + 0x220], di
lea r12, [rbx + 0x10]
mov qword [rsp + 0x80], r12
cmp qword [r12], rdi
sete byte [rsp + 0x1b48]
je 0x180230668
xor edx, edx
mov r8d, 0x800
lea rcx, [rsp + 0x12d0]
call sub.VCRUNTIME140.dll_memset
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov r9d, 0x800
lea r8, [rsp + 0x12d0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_K32GetModuleFileNameExW]
xorps xmm0, xmm0
movups xmmword [rsp + 0x650], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x660], xmm1
lea rax, [rsp + 0x12d0]
mov r8, r15
inc r8
cmp word [rax + r8*2], di
jne 0x180230548
lea rdx, [rsp + 0x12d0]
lea rcx, [rsp + 0x650]
call fcn.18007b5dc
mov r9, qword [rsp + 0x660]
lea rax, [rsp + 0x650]
mov r8, qword [rsp + 0x650]
mov r10, qword [rsp + 0x668]
mov r14d, 8
cmp r10, r14
cmovae rax, r8
mov rdx, rbx
cmp qword [rbx + 0x18], r14
jb 0x1802305a0
mov rdx, qword [rbx]
mov rcx, qword [r12]
cmp r9, rcx
cmovb rcx, r9
test rcx, rcx
je 0x1802305dc
sub rdx, rax
movzx r11d, word [rdx + rax]
movzx r13d, word [rax]
mov word [rsp + 0x1b48], r13w
cmp r11w, r13w
mov r13, qword [rsp + 0x1b30]
jne 0x1802305e7
add rax, 2
sub rcx, rsi
jne 0x1802305b3
cmp qword [r12], r9
jae 0x1802305f9
mov eax, r15d
jmp 0x1802305fe
cmp r11w, word [rsp + 0x1b48]
sbb eax, eax
and eax, 0xfffffffe
add eax, esi
jmp 0x1802305fe
mov eax, edi
seta al
test eax, eax
sete byte [rsp + 0x1b48]
mov r15d, 0x27
lea r12d, [r15 - 8]
cmp r10, r14
jb 0x18023064d
lea rdx, [r10*2 + 2]
mov rax, r8
cmp rdx, 0x1000
jb 0x180230645
add rdx, r15
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, r12
jbe 0x180230645
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r8
call fcn.180269534
movdqa xmm0, xmmword [0x180280dd0]
movdqu xmmword [rsp + 0x660], xmm0
mov word [rsp + 0x650], di
jmp 0x180230676
mov r14d, 8
lea r15d, [r14 + 0x1f]
lea r12d, [r14 + 0x17]
cmp dword [rsp + 0x50], 0x12345
jne 0x180230ab1
mov byte [rsp + 0x54], dil
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180199bbc
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x7c], eax
cmp eax, 0xffffffff
je 0x1802306ac
cmp eax, 0x12345
mov al, sil
jne 0x1802306af
mov al, dil
mov byte [rsp + 0x54], al
jmp 0x1802306e2
test al, al
jne 0x180230ab1
mov dword [rsp + 0x550], 0x78
mov r8d, 0x23
mov word [rsp + 0x554], r8w
lea eax, [r8 + 0x36]
mov word [rsp + 0x556], ax
lea r10d, [r8 + 2]
mov word [rsp + 0x558], r10w
lea ebx, [rax - 1]
mov word [rsp + 0x55a], bx
lea r8d, [rax - 0x1e]
mov word [rsp + 0x55c], r8w
lea edx, [rax - 0x42]
mov word [rsp + 0x55e], dx
lea r10d, [rax - 0x4c]
mov word [rsp + 0x560], r10w
lea r11d, [rax - 0x45]
mov word [rsp + 0x562], r11w
lea r9d, [rax - 0x3d]
mov word [rsp + 0x564], r9w
mov word [rsp + 0x566], bx
lea eax, [rbx - 0x42]
mov word [rsp + 0x568], ax
mov word [rsp + 0x56a], dx
lea ecx, [rbx - 0x4c]
mov word [rsp + 0x56c], cx
mov word [rsp + 0x56e], bx
lea r8d, [rbx - 0x3a]
mov word [rsp + 0x570], r8w
lea ebx, [rdx - 6]
mov word [rsp + 0x572], bx
mov word [rsp + 0x574], ax
mov word [rsp + 0x576], r9w
lea r9d, [rdx + 0x41]
mov word [rsp + 0x578], r9w
lea r8d, [rdx + 2]
mov word [rsp + 0x57a], r8w
mov word [rsp + 0x57c], r9w
lea r9d, [rdx - 0xc]
mov word [rsp + 0x57e], r9w
mov word [rsp + 0x580], r10w
mov word [rsp + 0x582], bx
mov word [rsp + 0x584], cx
mov word [rsp + 0x586], r8w
lea r9d, [rdx + 3]
mov word [rsp + 0x588], r9w
mov word [rsp + 0x58a], r11w
lea r9d, [rdx + 6]
mov word [rsp + 0x58c], r9w
lea r11d, [rdx + 0x41]
mov word [rsp + 0x58e], r11w
lea r11d, [rdx + 4]
mov word [rsp + 0x590], r11w
mov word [rsp + 0x592], r8w
mov word [rsp + 0x594], ax
lea r11d, [rdx + 5]
mov word [rsp + 0x596], r11w
mov word [rsp + 0x598], bx
mov word [rsp + 0x59a], r11w
mov word [rsp + 0x59c], r8w
mov word [rsp + 0x59e], cx
mov word [rsp + 0x5a0], r9w
lea r11d, [rdx + 0x41]
mov word [rsp + 0x5a2], r11w
lea r9d, [rdx + 7]
mov word [rsp + 0x5a4], r9w
mov word [rsp + 0x5a6], dx
lea r9d, [rdx - 0xd]
mov word [rsp + 0x5a8], r9w
mov word [rsp + 0x5aa], r11w
lea r11d, [rdx + 0x48]
mov word [rsp + 0x5ac], r11w
mov word [rsp + 0x5ae], r8w
mov word [rsp + 0x5b0], r10w
mov word [rsp + 0x5b2], cx
mov word [rsp + 0x5b4], dx
mov word [rsp + 0x5b6], r11w
lea r10d, [rdx + 0x41]
mov word [rsp + 0x5b8], r10w
mov word [rsp + 0x5ba], r14w
mov word [rsp + 0x5bc], r8w
mov word [rsp + 0x5be], r9w
lea r11d, [rdx + 6]
mov word [rsp + 0x5c0], r11w
mov word [rsp + 0x5c2], ax
mov word [rsp + 0x5c4], cx
mov word [rsp + 0x5c6], r10w
lea ecx, [rdx + 0x11]
mov word [rsp + 0x5c8], cx
lea ecx, [rdx + 0x1a]
mov word [rsp + 0x5ca], cx
lea r8d, [rdx + 0x25]
mov word [rsp + 0x5cc], r8w
mov word [rsp + 0x5ce], r10w
lea ecx, [rdx - 0xc]
mov word [rsp + 0x5d0], cx
mov word [rsp + 0x5d2], r14w
mov word [rsp + 0x5d4], dx
mov word [rsp + 0x5d6], dx
lea ecx, [rdx + 7]
mov word [rsp + 0x5d8], cx
mov word [rsp + 0x5da], bx
mov word [rsp + 0x5dc], ax
mov word [rsp + 0x5de], r12w
lea ecx, [rdx + 0x42]
mov word [rsp + 0x5e0], cx
lea eax, [rdx + 0x3f]
mov word [rsp + 0x5e2], ax
xor eax, eax
mov word [rsp + 0x5e4], ax
movzx eax, word [rsp + 0x554]
mov r8, rdi
lea edx, [rbx + 0x37]
movzx eax, word [rsp + r8*2 + 0x554]
mov ecx, dword [rsp + 0x550]
xor cx, ax
mov word [rsp + r8*2 + 0x554], cx
add r8, rsi
cmp r8, rdx
jb 0x1802309f6
mov word [rsp + 0x5e4], di
lea rcx, [rsp + 0x554]
call fcn.18009557c
nop
mov r8d, 0x92
lea rcx, [rsp + 0x554]
xor edx, edx
call qword [sym.imp.VCRUNTIME140.dll_memset]
xor eax, eax
mov qword [rsp + 0x608], rax
xorps xmm6, xmm6
mov rdx, qword [rsp + 0x238]
cmp rdx, r14
jb 0x180230a98
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x220]
cmp rdx, 0x1000
mov rax, rcx
jb 0x180230a93
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r12
ja 0x180234157
call fcn.180269534
movups xmmword [r13], xmm6
movsd xmm0, qword [rsp + 0x608]
movsd qword [r13 + 0x10], xmm0
jmp 0x18023416e
mov al, byte [rsp + 0x1b48]
test al, al
je 0x18023169d
mov qword [rsp + 0x6f0], 0x18
mov qword [rsp + 0x700], 1
mov qword [rsp + 0x6f8], rdi
mov edx, dword [0x1802bccdc]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov ecx, dword [rcx + rax]
cmp dword [0x1802c8cfc], ecx
jle 0x180230e26
lea rcx, [0x1802c8cfc]
call fcn.1802696f0
cmp dword [0x1802c8cfc], 0xffffffff
jne 0x180230e26
lea rax, [rsp + 0x720]
mov qword [rsp + 0x1b38], rax
mov dword [rsp + 0x6c], 0x68
mov eax, dword [rsp + 0x6c]
xor al, 0x43
mov byte [rsp + 0x70], al
mov eax, dword [rsp + 0x6c]
add al, sil
xor al, 0x72
mov byte [rsp + 0x71], al
mov eax, dword [rsp + 0x6c]
add al, 2
mov ecx, 0x65
xor al, cl
mov byte [rsp + 0x72], al
mov eax, dword [rsp + 0x6c]
add al, 3
xor al, 0x61
mov byte [rsp + 0x73], al
mov eax, dword [rsp + 0x6c]
add al, 4
xor al, 0x74
mov byte [rsp + 0x74], al
mov eax, dword [rsp + 0x6c]
add al, 5
xor al, cl
mov byte [rsp + 0x75], al
mov eax, dword [rsp + 0x6c]
add al, 6
xor al, 0x50
mov byte [rsp + 0x76], al
mov eax, dword [rsp + 0x6c]
add al, 7
xor al, 0x69
mov byte [rsp + 0x77], al
mov eax, dword [rsp + 0x6c]
add al, r14b
xor al, 0x70
mov byte [rsp + 0x78], al
mov eax, dword [rsp + 0x6c]
add al, 9
xor al, cl
mov byte [rsp + 0x79], al
xor eax, eax
mov byte [rsp + 0x7a], al
mov al, byte [rsp + 0x70]
mov rdx, rdi
mov al, byte [rsp + rdx + 0x70]
mov ecx, dword [rsp + 0x6c]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x70], cl
add rdx, rsi
cmp rdx, 0xa
jb 0x180230bc2
mov byte [rsp + 0x7a], dil
xorps xmm0, xmm0
movups xmmword [rsp + 0x720], xmm0
mov qword [rsp + 0x730], rdi
mov qword [rsp + 0x738], rdi
lea rax, [rsp + 0x70]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], dil
jne 0x180230c04
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x720]
call fcn.18007b70c
nop
mov dword [rsp + 0x90], 0x7d
mov eax, dword [rsp + 0x90]
xor al, 0x6b
mov byte [rsp + 0x94], al
mov eax, dword [rsp + 0x90]
add al, sil
mov ecx, 0x65
xor al, cl
mov byte [rsp + 0x95], al
mov eax, dword [rsp + 0x90]
add al, 2
xor al, 0x72
mov byte [rsp + 0x96], al
mov eax, dword [rsp + 0x90]
add al, 3
xor al, 0x6e
mov byte [rsp + 0x97], al
mov eax, dword [rsp + 0x90]
add al, 4
xor al, cl
mov byte [rsp + 0x98], al
mov eax, dword [rsp + 0x90]
add al, 5
xor al, 0x6c
mov byte [rsp + 0x99], al
mov eax, dword [rsp + 0x90]
add al, 6
mov ecx, 0x33
mov dword [rsp + 0x7c], ecx
xor al, cl
mov byte [rsp + 0x9a], al
mov eax, dword [rsp + 0x90]
add al, 7
mov ecx, 0x32
mov dword [rsp + 0x208], ecx
xor al, cl
mov byte [rsp + 0x9b], al
xor eax, eax
mov byte [rsp + 0x9c], al
mov al, byte [rsp + 0x94]
mov rdx, rdi
mov al, byte [rsp + rdx + 0x94]
mov ecx, dword [rsp + 0x90]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x94], cl
add rdx, rsi
cmp rdx, r14
jb 0x180230ce7
mov byte [rsp + 0x9c], dil
xorps xmm0, xmm0
movups xmmword [rsp + 0x670], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x680], xmm1
lea rax, [rsp + 0x94]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], dil
jne 0x180230d33
lea rdx, [rsp + 0x94]
lea rcx, [rsp + 0x670]
call fcn.18007b70c
nop
lea rdx, [rsp + 0x670]
lea rcx, [rsp + 0x978]
call fcn.180188b20
nop
mov qword [rsp + 0x20], rdi
mov r9b, sil
lea r8, [rsp + 0x720]
mov rdx, rax
lea rcx, [0x1802c9e10]
call fcn.18024a640
nop
mov rdx, qword [rsp + 0x688]
cmp rdx, 0x10
jb 0x180230dcc
inc rdx
mov rcx, qword [rsp + 0x670]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180230dc7
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r12
jbe 0x180230dc7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rsp + 0x680], xmm0
mov byte [rsp + 0x670], dil
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rsp + 0x94]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xb]
lea rcx, [rsp + 0x70]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027e69c]
call fcn.18026951c
nop
lea rcx, [0x1802c8cfc]
call fcn.180269690
jmp 0x180230e39
mov dword [rsp + 0x7c], 0x33
mov dword [rsp + 0x208], 0x32
mov eax, 0x10
lea rcx, [0x1802c9e28]
cmp qword [0x1802c9e40], rax
cmovae rcx, qword [0x1802c9e28]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
jne 0x180230e92
lea rcx, [0x1802c9e28]
cmp qword [0x1802c9e40], 0x10
cmovae rcx, qword [0x1802c9e28]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x1802c9e20], rax
mov r8, rax
lea rdx, [0x1802c9e28]
call fcn.18008c99c
xor r9d, r9d
lea r8, [rsp + 0x6f0]
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0x5f0]
call qword [0x1802c9e18]
test eax, eax
jne 0x18023117f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x1b30], eax
mov dword [rsp + 0x4e8], 0x7e
mov r10d, 0x25
mov word [rsp + 0x4ec], r10w
lea r8d, [r10 + 0x3a]
mov word [rsp + 0x4ee], r8w
lea r8d, [r10 - 2]
mov word [rsp + 0x4f0], r8w
lea r9d, [r10 + 0x39]
mov word [rsp + 0x4f2], r9w
lea edx, [r10 + 0x18]
mov word [rsp + 0x4f4], dx
lea r11d, [r10 - 0x14]
mov word [rsp + 0x4f6], r11w
lea eax, [rdx - 0x32]
mov word [rsp + 0x4f8], ax
lea eax, [rdx - 0x2b]
mov word [rsp + 0x4fa], ax
lea ebx, [rdx - 0x23]
mov word [rsp + 0x4fc], bx
mov word [rsp + 0x4fe], r9w
lea ecx, [rdx - 0x2d]
mov word [rsp + 0x500], cx
mov word [rsp + 0x502], r11w
lea r8d, [r10 - 0x1b]
mov word [rsp + 0x504], r8w
mov word [rsp + 0x506], r9w
lea eax, [rdx - 0x30]
mov word [rsp + 0x508], ax
lea r10d, [r9 - 0x43]
mov word [rsp + 0x50a], r10w
mov word [rsp + 0x50c], r8w
mov word [rsp + 0x50e], r9w
mov word [rsp + 0x510], ax
mov word [rsp + 0x512], r8w
mov word [rsp + 0x514], bx
lea edx, [rbx - 3]
mov word [rsp + 0x516], dx
mov word [rsp + 0x518], cx
mov word [rsp + 0x51a], r9w
lea eax, [rbx - 4]
mov word [rsp + 0x51c], ax
mov word [rsp + 0x51e], r12w
mov word [rsp + 0x520], cx
mov word [rsp + 0x522], bx
lea ebx, [rcx + 2]
mov word [rsp + 0x524], bx
mov word [rsp + 0x526], r10w
mov word [rsp + 0x528], r9w
mov word [rsp + 0x52a], cx
mov word [rsp + 0x52c], r11w
mov word [rsp + 0x52e], r9w
mov word [rsp + 0x530], dx
mov word [rsp + 0x532], cx
mov word [rsp + 0x534], ax
mov word [rsp + 0x536], r10w
lea eax, [rcx - 4]
mov word [rsp + 0x538], ax
mov word [rsp + 0x53a], dx
mov word [rsp + 0x53c], r8w
mov word [rsp + 0x53e], r9w
lea edx, [rcx + 8]
mov word [rsp + 0x540], dx
mov word [rsp + 0x542], bx
mov word [rsp + 0x544], r12w
lea r8d, [r9 - 0x45]
mov word [rsp + 0x546], r8w
lea r8d, [r9 - 0x1a]
mov word [rsp + 0x548], r8w
mov word [rsp + 0x54a], r9w
xor eax, eax
mov word [rsp + 0x54c], ax
movzx eax, word [rsp + 0x4ec]
mov rdx, rdi
lea r8d, [r9 - 0x2e]
movzx eax, word [rsp + rdx*2 + 0x4ec]
mov ecx, dword [rsp + 0x4e8]
xor cx, ax
mov word [rsp + rdx*2 + 0x4ec], cx
add rdx, rsi
cmp rdx, r8
jb 0x1802310ce
mov word [rsp + 0x54c], di
mov edx, dword [rsp + 0x1b30]
lea rcx, [rsp + 0x4ec]
call fcn.18009550c
nop
lea rcx, [rsp + 0x4ec]
mov r8d, 0x62
xor edx, edx
call qword [sym.imp.VCRUNTIME140.dll_memset]
xor eax, eax
mov qword [rsp + 0x608], rax
xorps xmm6, xmm6
mov rdx, qword [rsp + 0x238]
cmp rdx, r14
jb 0x180230a98
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x220]
cmp rdx, 0x1000
mov rax, rcx
jb 0x180230a93
mov rcx, qword [rcx - 8]
add rdx, r15
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r12
jbe 0x180230a93
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor r8d, r8d
mov edx, esi
mov rcx, qword [rsp + 0x260]
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
test eax, eax
jne 0x180231670
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x1b30], eax
mov dword [rsp + 0x19c], 0x26
mov ecx, dword [rsp + 0x19c]
xor cx, 0x5b
mov word [rsp + 0x1a0], cx
mov ecx, dword [rsp + 0x19c]
add cx, si
xor cx, 0x21
mov word [rsp + 0x1a2], cx
mov ecx, dword [rsp + 0x19c]
add cx, 2
xor cx, 0x5d
mov word [rsp + 0x1a4], cx
mov eax, dword [rsp + 0x19c]
add ax, 3
mov ecx, 0x20
xor ax, cx
mov word [rsp + 0x1a6], ax
mov eax, dword [rsp + 0x19c]
add ax, 4
xor ax, 0x43
mov word [rsp + 0x1a8], ax
mov eax, dword [rsp + 0x19c]
add ax, 5
lea r10d, [rcx + 0x4f]
xor ax, r10w
mov word [rsp + 0x1aa], ax
mov eax, dword [rsp + 0x19c]
add ax, 6
xor ax, 0x75
mov word [rsp + 0x1ac], ax
mov eax, dword [rsp + 0x19c]
add ax, 7
xor ax, 0x6c
mov word [rsp + 0x1ae], ax
mov eax, dword [rsp + 0x19c]
add ax, r14w
xor ax, 0x64
mov word [rsp + 0x1b0], ax
mov eax, dword [rsp + 0x19c]
add ax, 9
xor ax, cx
mov word [rsp + 0x1b2], ax
mov eax, dword [rsp + 0x19c]
add ax, 0xa
xor ax, 0x6e
mov word [rsp + 0x1b4], ax
mov eax, dword [rsp + 0x19c]
add ax, 0xb
xor ax, r10w
mov word [rsp + 0x1b6], ax
mov eax, dword [rsp + 0x19c]
add ax, 0xc
lea r11d, [rcx + 0x54]
xor ax, r11w
mov word [rsp + 0x1b8], ax
mov eax, dword [rsp + 0x19c]
add ax, 0xd
xor ax, cx
mov word [rsp + 0x1ba], ax
mov eax, dword [rsp + 0x19c]
add ax, 0xe
lea ebx, [rcx + 0x53]
xor ax, bx
mov word [rsp + 0x1bc], ax
mov eax, dword [rsp + 0x19c]
add ax, 0xf
lea r9d, [rcx + 0x45]
xor ax, r9w
mov word [rsp + 0x1be], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x10
xor ax, r11w
mov word [rsp + 0x1c0], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x11
xor ax, cx
mov word [rsp + 0x1c2], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x12
xor ax, bx
mov word [rsp + 0x1c4], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x13
xor ax, r11w
mov word [rsp + 0x1c6], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x14
xor ax, 0x64
mov word [rsp + 0x1c8], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x15
xor ax, 0x69
mov word [rsp + 0x1ca], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x16
lea ebx, [rcx + 0x4e]
xor ax, bx
mov word [rsp + 0x1cc], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x17
xor ax, cx
mov word [rsp + 0x1ce], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x18
xor ax, 0x68
mov word [rsp + 0x1d0], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x19
xor ax, 0x61
mov word [rsp + 0x1d2], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x1a
xor ax, bx
mov word [rsp + 0x1d4], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x1b
xor ax, 0x64
mov word [rsp + 0x1d6], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x1c
xor ax, 0x6c
mov word [rsp + 0x1d8], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x1d
xor ax, r9w
mov word [rsp + 0x1da], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x1e
xor ax, cx
mov word [rsp + 0x1dc], ax
mov eax, dword [rsp + 0x19c]
add ax, r12w
xor ax, bx
mov word [rsp + 0x1de], ax
mov eax, dword [rsp + 0x19c]
add ax, cx
xor ax, r10w
mov word [rsp + 0x1e0], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x21
xor ax, cx
mov word [rsp + 0x1e2], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x22
lea r11d, [rcx + 0x49]
xor ax, r11w
mov word [rsp + 0x1e4], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x23
xor ax, bx
mov word [rsp + 0x1e6], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x24
xor ax, 0x68
mov word [rsp + 0x1e8], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x25
xor ax, r9w
mov word [rsp + 0x1ea], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x26
xor ax, 0x72
mov word [rsp + 0x1ec], ax
mov eax, dword [rsp + 0x19c]
add ax, r15w
xor ax, r11w
mov word [rsp + 0x1ee], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x28
xor ax, 0x74
mov word [rsp + 0x1f0], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x29
xor ax, cx
mov word [rsp + 0x1f2], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x2a
xor ax, 0x66
mov word [rsp + 0x1f4], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x2b
xor ax, 0x6c
mov word [rsp + 0x1f6], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x2c
xor ax, 0x61
mov word [rsp + 0x1f8], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x2d
xor ax, 0x67
mov word [rsp + 0x1fa], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x2e
xor ax, 0x3a
mov word [rsp + 0x1fc], ax
mov eax, dword [rsp + 0x19c]
add ax, 0x2f
xor ax, cx
mov word [rsp + 0x1fe], ax
xor eax, eax
mov word [rsp + 0x200], ax
movzx eax, word [rsp + 0x1a0]
mov rdx, rdi
lea r8d, [rcx + 0x10]
movzx eax, word [rsp + rdx*2 + 0x1a0]
mov ecx, dword [rsp + 0x19c]
add cx, dx
xor cx, ax
mov word [rsp + rdx*2 + 0x1a0], cx
add rdx, rsi
cmp rdx, r8
jb 0x180231621
mov word [rsp + 0x200], di
mov edx, dword [rsp + 0x1b30]
lea rcx, [rsp + 0x1a0]
call fcn.18009550c
nop
lea rcx, [rsp + 0x1a0]
jmp 0x180231115
mov rax, qword [rsp + 0x5f0]
mov qword [rsp + 0x810], rax
bts dword [rsp + 0x7fc], 8
mov qword [rsp + 0x708], rax
mov rcx, rsi
mov al, byte [rsp + 0x1b48]
jmp 0x1802316b8
mov dword [rsp + 0x7c], 0x33
mov dword [rsp + 0x208], 0x32
mov rcx, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x1b40]
cmp rdx, 0xffffffffffffffff
je 0x1802316ea
mov qword [rsp + 0x818], rdx
mov qword [rsp + 0x820], rdx
bts dword [rsp + 0x7fc], 8
mov qword [rsp + rcx*8 + 0x708], rdx
add rcx, rsi
mov qword [rsp + 0x610], rdi
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x708]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x610]
mov r8b, al
lea rdx, [rsp + 0x7c0]
mov ecx, dword [rsp + 0x50]
call fcn.18022a354
test al, al
jne 0x180231cc2
cmp dword [rsp + 0x50], edi
je 0x180231cc2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x1b30], eax
mov eax, 0x2e
mov word [rsp + 0x268], ax
mov eax, 0x33
mov word [rsp + 0x26a], ax
lea r10d, [rax - 0xe]
mov word [rsp + 0x26c], r10w
lea eax, [r10 + 0x25]
mov word [rsp + 0x26e], ax
lea ecx, [rax + 0x2d]
mov word [rsp + 0x270], cx
mov word [rsp + 0x272], cx
lea eax, [rcx - 3]
mov word [rsp + 0x274], ax
mov word [rsp + 0x276], cx
lea r8d, [r10 + 0x1a]
mov word [rsp + 0x278], r8w
mov word [rsp + 0x27a], r10w
mov word [rsp + 0x27c], di
movzx eax, word [rsp + 0x268]
mov rcx, rdi
lea ebx, [r10 - 0x1b]
lea edx, [rbx - 5]
movzx eax, word [rsp + rcx*2 + 0x268]
sub ax, dx
mov word [rsp + rcx*2 + 0x268], ax
add rcx, rsi
cmp rcx, rbx
jb 0x1802317c8
mov edx, dword [rsp + 0x50]
lea rcx, [rsp + 0x998]
call fcn.18018f934
mov qword [rsp + 0x1b38], rax
mov eax, 0x24
mov word [rsp + 0xa8], ax
mov eax, 0x2c
mov word [rsp + 0xaa], ax
mov word [rsp + 0xac], di
movzx ecx, word [rsp + 0xa8]
mov rcx, rdi
lea edx, [rax - 0x28]
lea r8d, [rax - 0x2a]
movzx eax, word [rsp + rcx*2 + 0xa8]
sub ax, dx
mov word [rsp + rcx*2 + 0xa8], ax
add rcx, rsi
cmp rcx, r8
jb 0x180231830
mov r9d, 0x6f
mov dword [rsp + 0xcc], r9d
mov eax, dword [rsp + 0xcc]
xor ax, 0x5b
mov word [rsp + 0xd0], ax
mov eax, dword [rsp + 0xcc]
add ax, si
xor ax, 0x21
mov word [rsp + 0xd2], ax
mov eax, dword [rsp + 0xcc]
add ax, r8w
xor ax, 0x5d
mov word [rsp + 0xd4], ax
mov eax, dword [rsp + 0xcc]
add ax, 3
lea ecx, [r9 - 0x4f]
xor ax, cx
mov word [rsp + 0xd6], ax
mov eax, dword [rsp + 0xcc]
add ax, dx
xor ax, 0x43
mov word [rsp + 0xd8], ax
mov eax, dword [rsp + 0xcc]
add ax, 5
xor ax, r9w
mov word [rsp + 0xda], ax
mov eax, dword [rsp + 0xcc]
add ax, 6
xor ax, 0x75
mov word [rsp + 0xdc], ax
mov eax, dword [rsp + 0xcc]
add ax, 7
xor ax, 0x6c
mov word [rsp + 0xde], ax
mov eax, dword [rsp + 0xcc]
add ax, r14w
xor ax, 0x64
mov word [rsp + 0xe0], ax
mov eax, dword [rsp + 0xcc]
add ax, 9
xor ax, cx
mov word [rsp + 0xe2], ax
mov eax, dword [rsp + 0xcc]
add ax, bx
lea r11d, [r9 - 1]
xor ax, r11w
mov word [rsp + 0xe4], ax
mov eax, dword [rsp + 0xcc]
add ax, 0xb
xor ax, r9w
mov word [rsp + 0xe6], ax
mov eax, dword [rsp + 0xcc]
add ax, 0xc
lea r10d, [r9 + 5]
xor ax, r10w
mov word [rsp + 0xe8], ax
mov eax, dword [rsp + 0xcc]
add ax, 0xd
xor ax, cx
mov word [rsp + 0xea], ax
mov eax, dword [rsp + 0xcc]
add ax, 0xe
xor ax, 0x73
mov word [rsp + 0xec], ax
mov eax, dword [rsp + 0xcc]
add ax, 0xf
lea ebx, [rcx + 0x50]
xor ax, bx
mov word [rsp + 0xee], ax
mov eax, dword [rsp + 0xcc]
add ax, 0x10
xor ax, r9w
mov word [rsp + 0xf0], ax
mov eax, dword [rsp + 0xcc]
add ax, 0x11
xor ax, r9w
mov word [rsp + 0xf2], ax
mov eax, dword [rsp + 0xcc]
add ax, 0x12
xor ax, 0x66
mov word [rsp + 0xf4], ax
mov eax, dword [rsp + 0xcc]
add ax, 0x13
xor ax, cx
mov word [rsp + 0xf6], ax
mov eax, dword [rsp + 0xcc]
add ax, 0x14
xor ax, bx
mov word [rsp + 0xf8], ax
mov eax, dword [rsp + 0xcc]
add ax, 0x15
xor ax, 0x61
mov word [rsp + 0xfa], ax
mov eax, dword [rsp + 0xcc]
lea ebx, [rcx - 0xa]
add ax, bx
xor ax, 0x72
mov word [rsp + 0xfc], ax
mov eax, dword [rsp + 0xcc]
add ax, 0x17
xor ax, 0x65
mov word [rsp + 0xfe], ax
mov eax, dword [rsp + 0xcc]
add ax, 0x18
xor ax, r11w
mov word [rsp + 0x100], ax
mov eax, dword [rsp + 0xcc]
add ax, 0x19
xor ax, r10w
mov word [rsp + 0x102], ax
mov eax, dword [rsp + 0xcc]
add ax, 0x1a
xor ax, cx
mov word [rsp + 0x104], ax
mov eax, dword [rsp + 0xcc]
add ax, 0x1b
xor ax, r10w
mov word [rsp + 0x106], ax
mov eax, dword [rsp + 0xcc]
add ax, 0x1c
xor ax, r9w
mov word [rsp + 0x108], ax
mov eax, dword [rsp + 0xcc]
add ax, 0x1d
xor ax, cx
mov word [rsp + 0x10a], ax
mov eax, dword [rsp + 0xcc]
add ax, 0x1e
xor ax, 0x50
mov word [rsp + 0x10c], ax
mov eax, dword [rsp + 0xcc]
add ax, r12w
xor ax, 0x49
mov word [rsp + 0x10e], ax
mov eax, dword [rsp + 0xcc]
add ax, cx
xor ax, 0x44
mov word [rsp + 0x110], ax
mov eax, dword [rsp + 0xcc]
add ax, 0x21
xor ax, 0x3a
mov word [rsp + 0x112], ax
mov eax, dword [rsp + 0xcc]
add ax, 0x22
xor ax, cx
mov word [rsp + 0x114], ax
xor eax, eax
mov word [rsp + 0x116], ax
movzx eax, word [rsp + 0xd0]
mov rdx, rdi
lea r8d, [r9 - 0x4c]
movzx eax, word [rsp + rdx*2 + 0xd0]
mov ecx, dword [rsp + 0xcc]
add cx, dx
xor cx, ax
mov word [rsp + rdx*2 + 0xd0], cx
add rdx, rsi
cmp rdx, r8
jb 0x180231b97
mov word [rsp + 0x116], di
cmp byte [0x1802bd270], dil
mov rdi, qword [rsp + 0x1b38]
je 0x180231c7f
mov rdx, rdi
lea rcx, [rsp + 0x9b8]
call fcn.18007a534
mov ecx, dword [rsp + 0x1b30]
mov dword [rsp + 0x30], ecx
lea rcx, [rsp + 0x268]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xa8]
mov r8d, dword [rsp + 0x50]
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x838]
call fcn.180267cc8
nop
lea rdx, [rsp + 0x838]
mov cl, sil
call fcn.18014e37c
nop
mov rdx, qword [rsp + 0x850]
cmp rdx, 0x10
jb 0x180231c7f
inc rdx
mov rcx, qword [rsp + 0x838]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180231c79
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r12
jbe 0x180231c79
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
nop
mov rcx, rdi
call fcn.18007a444
nop
xor edx, edx
lea r8d, [rdx + 0x48]
lea rcx, [rsp + 0xd0]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 6]
lea rcx, [rsp + 0xa8]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
mov r8, rbx
lea rcx, [rsp + 0x268]
jmp 0x180230a3e
xor edx, edx
mov r8d, 0x800
lea rcx, [rsp + 0xad0]
call sub.VCRUNTIME140.dll_memset
mov al, byte [rsp + 0x1b48]
mov byte [0x1802b61a7], al
test al, al
je 0x180232509
mov dword [rsp + 0x320], esi
mov eax, 0x5a
mov word [rsp + 0x324], ax
lea r10d, [rax - 0x2b]
mov dword [rsp + 0x254], r10d
mov word [rsp + 0x326], r10w
lea eax, [r10 + 0x2d]
mov word [rsp + 0x328], ax
lea ecx, [rax - 0x3b]
mov word [rsp + 0x32a], cx
lea eax, [rcx + 0x31]
mov word [rsp + 0x32c], ax
lea r11d, [r10 + 0x42]
mov word [rsp + 0x32e], r11w
lea r9d, [r10 + 0x31]
mov word [rsp + 0x330], r9w
lea edx, [rcx + 0x55]
mov word [rsp + 0x332], dx
lea eax, [rcx + 0x4e]
mov word [rsp + 0x334], ax
lea r8d, [r10 + 0x39]
mov word [rsp + 0x336], r8w
mov word [rsp + 0x338], ax
lea r8d, [r10 + 0x37]
mov dword [rsp + 0x250], r8d
mov word [rsp + 0x33a], r8w
mov word [rsp + 0x33c], cx
mov word [rsp + 0x33e], r9w
mov word [rsp + 0x340], cx
mov word [rsp + 0x342], ax
lea r8d, [r10 + 0x35]
mov word [rsp + 0x344], r8w
mov word [rsp + 0x346], dx
mov word [rsp + 0x348], cx
lea r9d, [r10 + 0x43]
mov word [rsp + 0x34a], r9w
lea edx, [rcx + 0x53]
mov word [rsp + 0x34c], dx
mov word [rsp + 0x34e], r9w
mov word [rsp + 0x350], r11w
mov word [rsp + 0x352], r8w
mov word [rsp + 0x354], ax
lea ebx, [rcx + 0x44]
mov word [rsp + 0x356], bx
mov word [rsp + 0x358], r8w
mov word [rsp + 0x35a], bx
mov word [rsp + 0x35c], cx
mov word [rsp + 0x35e], r9w
mov word [rsp + 0x360], r8w
lea eax, [rcx + 0x4c]
mov word [rsp + 0x362], ax
lea eax, [rcx + 0x46]
mov word [rsp + 0x364], ax
mov word [rsp + 0x366], r10w
mov word [rsp + 0x368], r10w
mov word [rsp + 0x36a], r10w
xor eax, eax
mov word [rsp + 0x36c], ax
movzx eax, word [rsp + 0x324]
mov rdx, rdi
movzx eax, word [rsp + rdx*2 + 0x324]
mov ecx, dword [rsp + 0x320]
xor cx, ax
mov word [rsp + rdx*2 + 0x324], cx
add rdx, rsi
cmp rdx, 0x24
jb 0x180231e86
mov word [rsp + 0x36c], di
lea rcx, [rsp + 0x324]
call fcn.18007aae4
nop
xor edx, edx
lea r8d, [rdx + 0x4a]
lea rcx, [rsp + 0x324]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rdx, [rsp + 0x898]
lea rcx, [0x1802b61a0]
call fcn.18007816c
mov qword [rsp + 0x1b38], rax
lea rcx, [rsp + 0x220]
cmp rcx, rax
je 0x180231f9a
mov rdx, qword [rsp + 0x238]
cmp rdx, r14
jb 0x180231f50
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180231f43
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r12
jbe 0x180231f43
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
mov rax, qword [rsp + 0x1b38]
mov qword [rsp + 0x230], rdi
mov qword [rsp + 0x238], 7
mov word [rsp + 0x220], di
mov r8d, 0x20
mov rdx, rax
lea rcx, [rsp + 0x220]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
mov rax, qword [rsp + 0x1b38]
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 7
mov word [rax], di
lea rcx, [rsp + 0x898]
call fcn.18007a444
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x8b8]
call fcn.18007a534
mov r10, rax
mov eax, 0x11
mov word [rsp + 0x41a], ax
mov eax, 0x63
mov word [rsp + 0x41c], ax
mov eax, 0x36
mov word [rsp + 0x41e], ax
mov word [rsp + 0x420], bx
mov eax, 0x28
mov word [rsp + 0x422], ax
lea ecx, [rax + 0x23]
mov word [rsp + 0x424], cx
lea edx, [rax + 0x4f]
mov word [rsp + 0x426], dx
lea ecx, [rax + 0x4d]
mov word [rsp + 0x428], cx
mov word [rsp + 0x42a], cx
lea r8d, [rax + 0x41]
mov word [rsp + 0x42c], r8w
lea r11d, [rax + 0x4e]
mov word [rsp + 0x42e], r11w
lea r9d, [rax + 0x44]
mov word [rsp + 0x430], r9w
mov word [rsp + 0x432], ax
lea ecx, [rax + 0x4c]
mov word [rsp + 0x434], cx
lea ebx, [rax + 0x49]
mov word [rsp + 0x436], bx
mov word [rsp + 0x438], r11w
lea r11d, [rax + 0x45]
mov word [rsp + 0x43a], r11w
mov word [rsp + 0x43c], ax
lea ecx, [rax + 0x54]
mov word [rsp + 0x43e], cx
mov word [rsp + 0x440], dx
mov word [rsp + 0x442], ax
lea ecx, [rax + 0x42]
mov word [rsp + 0x444], cx
mov word [rsp + 0x446], r11w
mov word [rsp + 0x448], ax
lea ecx, [rax + 0x50]
mov word [rsp + 0x44a], cx
mov word [rsp + 0x44c], r8w
lea ecx, [rax + 0x53]
mov word [rsp + 0x44e], cx
mov word [rsp + 0x450], cx
mov word [rsp + 0x452], r11w
mov word [rsp + 0x454], r9w
mov word [rsp + 0x456], ax
lea ecx, [rax + 0x56]
mov word [rsp + 0x458], cx
mov word [rsp + 0x45a], bx
mov word [rsp + 0x45c], r8w
mov word [rsp + 0x45e], ax
lea ecx, [rax + 0x33]
mov word [rsp + 0x460], cx
lea ecx, [rax + 0x34]
mov word [rsp + 0x462], cx
lea ecx, [rax + 0x24]
mov word [rsp + 0x464], cx
lea ecx, [rax + 0x29]
mov word [rsp + 0x466], cx
lea ebx, [rax + 0x2e]
mov word [rsp + 0x468], bx
lea ecx, [rax + 0x1a]
mov word [rsp + 0x46a], cx
mov word [rsp + 0x46c], ax
mov word [rsp + 0x46e], di
movzx eax, word [rsp + 0x41a]
mov rcx, rdi
movzx eax, word [rsp + rcx*2 + 0x41a]
sub ax, r14w
mov word [rsp + rcx*2 + 0x41a], ax
add rcx, rsi
cmp rcx, 0x2a
jb 0x180232180
mov rdx, r10
lea rcx, [rsp + 0x41a]
call fcn.180136a78
nop
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x41a]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [rsp + 0x9e0]
call fcn.1800796e8
nop
mov dword [rsp + 0x210], 4
mov eax, 0x26
mov word [rsp + 0x214], ax
mov eax, 0x24
mov word [rsp + 0x216], ax
mov eax, 0x29
mov word [rsp + 0x218], ax
xor eax, eax
mov word [rsp + 0x21a], ax
movzx eax, word [rsp + 0x214]
mov rdx, rdi
movzx eax, word [rsp + rdx*2 + 0x214]
mov ecx, dword [rsp + 0x210]
xor cx, ax
mov word [rsp + rdx*2 + 0x214], cx
add rdx, rsi
cmp rdx, 3
jb 0x180232216
mov word [rsp + 0x21a], di
lea rdx, [0x1802b7210]
lea rcx, [rsp + 0x8d8]
call fcn.18018fbfc
mov rdx, rax
mov dword [rsp + 0x80], 0x3e
mov eax, 0x1c
mov word [rsp + 0x84], ax
xor eax, eax
mov word [rsp + 0x86], ax
movzx ecx, word [rsp + 0x84]
movzx ecx, word [rsp + 0x84]
mov eax, dword [rsp + 0x80]
xor ax, cx
mov word [rsp + 0x84], ax
mov word [rsp + 0x86], di
lea rax, [rsp + 0x84]
or rcx, 0xffffffffffffffff
mov r13, qword [rsp + 0x1b30]
inc rcx
cmp word [rax + rcx*2], di
jne 0x1802322b8
mov r8, qword [rdx + 0x10]
movabs rax, 0x7ffffffffffffffe
sub rax, r8
cmp rax, rcx
jb 0x180234192
cmp qword [rdx + 0x18], r14
jb 0x1802322e4
mov rdx, qword [rdx]
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x84]
lea rcx, [rsp + 0x858]
call fcn.18014c904
nop
lea rdx, [rsp + 0x214]
lea rcx, [rsp + 0x858]
call fcn.18014c874
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x618], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x628], xmm1
mov r8d, 0x20
mov rdx, rax
lea rcx, [rsp + 0x618]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
lea rdx, [rsp + 0x618]
cmp qword [rsp + 0x630], r14
cmovae rdx, qword [rsp + 0x618]
mov r8, qword [rsp + 0x628]
lea rcx, [rsp + 0x9e0]
call fcn.18007d3d4
nop
mov rdx, qword [rsp + 0x630]
cmp rdx, r14
jb 0x1802323d5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x618]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1802323d0
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r12
jbe 0x1802323d0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280dd0]
movdqu xmmword [rsp + 0x628], xmm0
mov word [rsp + 0x618], di
lea rcx, [rsp + 0x858]
call fcn.18007a444
nop
xor edx, edx
lea r8d, [rdx + 4]
lea rcx, [rsp + 0x84]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
lea rcx, [rsp + 0x8d8]
call fcn.18007a444
nop
mov r8, r14
xor edx, edx
lea rcx, [rsp + 0x214]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rdx, [rsp + 0x7a0]
lea rcx, [rsp + 0x9e8]
call fcn.18007a85c
lea r8, [rsp + 0x7a0]
cmp qword [rsp + 0x7b8], r14
cmovae r8, qword [rsp + 0x7a0]
mov edx, 0x400
lea rcx, [rsp + 0xad0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea rcx, [rsp + 0x7a0]
call fcn.18007a444
nop
mov rax, qword [rsp + 0x9e0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostringstream_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__.0
mov qword [rsp + rcx + 0x9e0], rax
mov rax, qword [rsp + 0x9e0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rsp + rcx + 0x9dc], edx
lea rcx, [rsp + 0x9e8]
call fcn.1800795ac
lea rcx, [rsp + 0x9f0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_unsigned_short_int__struct_std::char_traits_unsigned_short_int__::destructor_void____ptr64]
lea rcx, [rsp + 0xa68]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_unsigned_short_int__struct_std::char_traits_unsigned_short_int__::destructor_void____ptr64]
mov dword [rsp + 0x204], 0x2c
mov dword [rsp + 0x258], 0x2d
mov dword [rsp + 0x24c], 0x2e
mov ebx, 0x20
jmp 0x180232973
mov rdx, rbx
lea rcx, [rsp + 0x740]
call fcn.18007a534
nop
mov rax, qword [rsp + 0x80]
mov rcx, rbx
cmp qword [rbx + 0x18], r14
jb 0x18023252e
mov rcx, qword [rbx]
mov qword [rsp + 0x20], rsi
lea r9, [0x18027fc10]
xor r8d, r8d
mov rdx, qword [rax]
call fcn.18007b50c
cmp rax, 0xffffffffffffffff
je 0x180232759
mov dword [rsp + 0x88], 0x6b
mov eax, 0x49
mov word [rsp + 0x8c], ax
xor eax, eax
mov word [rsp + 0x8e], ax
movzx eax, word [rsp + 0x8c]
movzx eax, word [rsp + 0x8c]
mov ecx, dword [rsp + 0x88]
xor cx, ax
mov word [rsp + 0x8c], cx
mov word [rsp + 0x8e], di
mov dword [rsp + 0xa0], 0xe
mov eax, 0x2c
mov dword [rsp + 0x204], eax
mov word [rsp + 0xa4], ax
xor eax, eax
mov word [rsp + 0xa6], ax
movzx eax, word [rsp + 0xa4]
movzx eax, word [rsp + 0xa4]
mov ecx, dword [rsp + 0xa0]
xor cx, ax
mov word [rsp + 0xa4], cx
mov word [rsp + 0xa6], di
lea rax, [rsp + 0xa4]
or rcx, 0xffffffffffffffff
inc rcx
cmp word [rax + rcx*2], di
jne 0x1802325fa
mov rax, qword [rsp + 0x80]
mov rdx, qword [rax]
movabs rax, 0x7ffffffffffffffe
sub rax, rdx
cmp rax, rcx
jb 0x180234198
cmp qword [rbx + 0x18], r14
jb 0x18023262d
mov rbx, qword [rbx]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0xa4]
lea rcx, [rsp + 0x878]
call fcn.18014c904
nop
lea rdx, [rsp + 0x8c]
lea rcx, [rsp + 0x878]
call fcn.18014c874
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x690], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x6a0], xmm1
mov r8d, 0x20
mov rdx, rax
lea rcx, [rsp + 0x690]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
lea rdx, [rsp + 0x690]
lea rcx, [rsp + 0x740]
call fcn.18008c67c
mov rdx, qword [rsp + 0x6a8]
cmp rdx, r14
jb 0x180232704
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x690]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1802326ff
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r12
jbe 0x1802326ff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280dd0]
movdqu xmmword [rsp + 0x6a0], xmm0
mov word [rsp + 0x690], di
lea rcx, [rsp + 0x878]
call fcn.18007a444
nop
mov ebx, 4
mov r8d, ebx
xor edx, edx
lea rcx, [rsp + 0xa4]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
mov r8d, ebx
xor edx, edx
lea rcx, [rsp + 0x8c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
jmp 0x180232764
mov dword [rsp + 0x204], 0x2c
mov ebx, 0x20
lea r8, [rsp + 0x740]
cmp qword [rsp + 0x758], r14
cmovae r8, qword [rsp + 0x740]
mov edx, 0x400
lea rcx, [rsp + 0xad0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea eax, [rbx + 0xd]
mov dword [rsp + 0x258], eax
mov word [rsp + 0x240], ax
lea eax, [rbx + 0x12]
mov word [rsp + 0x242], ax
mov word [rsp + 0x244], ax
mov word [rsp + 0x246], ax
lea eax, [rbx - 0x12]
mov word [rsp + 0x248], ax
mov word [rsp + 0x24a], di
movzx eax, word [rsp + 0x240]
mov rdx, rdi
lea ecx, [rbx - 0x1c]
movzx eax, word [rsp + rdx*2 + 0x240]
sub ax, cx
mov word [rsp + rdx*2 + 0x240], ax
add rdx, rsi
cmp rdx, 5
jb 0x1802327e3
mov dword [rsp + 0x280], 0x49
mov eax, 0x43
mov word [rsp + 0x284], ax
mov eax, 0x12
mov word [rsp + 0x286], ax
mov eax, 0x67
mov word [rsp + 0x288], ax
mov eax, 0x14
mov word [rsp + 0x28a], ax
lea ecx, [rax + 0x55]
mov word [rsp + 0x28c], cx
lea eax, [rcx - 0x4f]
mov word [rsp + 0x28e], ax
lea eax, [rcx - 0x30]
mov word [rsp + 0x290], ax
lea eax, [rcx - 0x41]
mov word [rsp + 0x292], ax
lea eax, [rcx - 0x2b]
mov word [rsp + 0x294], ax
mov word [rsp + 0x296], r15w
mov word [rsp + 0x298], bx
mov word [rsp + 0x29a], r15w
lea eax, [rcx - 0x3b]
mov dword [rsp + 0x24c], eax
mov word [rsp + 0x29c], ax
lea eax, [rcx + 0xa]
mov word [rsp + 0x29e], ax
mov word [rsp + 0x2a0], cx
lea eax, [rcx - 8]
mov word [rsp + 0x2a2], ax
xor eax, eax
mov word [rsp + 0x2a4], ax
movzx eax, word [rsp + 0x284]
xor edi, edi
mov edx, edi
movzx eax, word [rsp + rdx*2 + 0x284]
mov ecx, dword [rsp + 0x280]
xor cx, ax
mov word [rsp + rdx*2 + 0x284], cx
add rdx, rsi
cmp rdx, 0x10
jb 0x1802328d5
mov word [rsp + 0x2a4], di
lea r8, [rsp + 0x240]
lea rdx, [rsp + 0xad0]
lea rcx, [rsp + 0x284]
call fcn.180265a10
nop
xor edx, edx
lea r8d, [rdx + 0x22]
lea rcx, [rsp + 0x284]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xc]
lea rcx, [rsp + 0x240]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
lea rcx, [rsp + 0x740]
call fcn.18007a444
mov dword [rsp + 0x250], 0x66
mov dword [rsp + 0x254], 0x2f
mov r13, qword [rsp + 0x1b30]
mov edx, dword [0x1802bccdc]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov ecx, dword [rcx + rax]
cmp dword [0x1802c9068], ecx
jle 0x180232c9a
lea rcx, [0x1802c9068]
call fcn.1802696f0
cmp dword [0x1802c9068], 0xffffffff
jne 0x180232c9a
lea rax, [rsp + 0x760]
mov qword [rsp + 0x1b38], rax
mov dword [rsp + 0x58], 0x60
mov eax, dword [rsp + 0x58]
xor al, 0x43
mov byte [rsp + 0x5c], al
mov eax, dword [rsp + 0x58]
add al, sil
mov r8d, 0x72
xor al, r8b
mov byte [rsp + 0x5d], al
mov eax, dword [rsp + 0x58]
add al, 2
lea ecx, [r8 - 0xd]
xor al, cl
mov byte [rsp + 0x5e], al
mov eax, dword [rsp + 0x58]
add al, 3
xor al, 0x61
mov byte [rsp + 0x5f], al
mov eax, dword [rsp + 0x58]
add al, 4
xor al, 0x74
mov byte [rsp + 0x60], al
mov eax, dword [rsp + 0x58]
add al, 5
xor al, cl
mov byte [rsp + 0x61], al
mov eax, dword [rsp + 0x58]
add al, 6
xor al, 0x50
mov byte [rsp + 0x62], al
mov eax, dword [rsp + 0x58]
add al, 7
xor al, r8b
mov byte [rsp + 0x63], al
mov eax, dword [rsp + 0x58]
add al, r14b
xor al, 0x6f
mov byte [rsp + 0x64], al
mov eax, dword [rsp + 0x58]
add al, 9
xor al, 0x63
mov byte [rsp + 0x65], al
mov eax, dword [rsp + 0x58]
add al, 0xa
xor al, cl
mov byte [rsp + 0x66], al
mov eax, dword [rsp + 0x58]
add al, 0xb
lea ecx, [r8 + 1]
xor al, cl
mov byte [rsp + 0x67], al
mov eax, dword [rsp + 0x58]
add al, 0xc
xor al, cl
mov byte [rsp + 0x68], al
mov eax, dword [rsp + 0x58]
add al, 0xd
xor al, 0x57
mov byte [rsp + 0x69], al
xor eax, eax
mov byte [rsp + 0x6a], al
mov al, byte [rsp + 0x5c]
mov rdx, rdi
mov al, byte [rsp + rdx + 0x5c]
mov ecx, dword [rsp + 0x58]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x5c], cl
add rdx, rsi
cmp rdx, 0xe
jb 0x180232a90
mov byte [rsp + 0x6a], dil
xorps xmm0, xmm0
movups xmmword [rsp + 0x760], xmm0
mov qword [rsp + 0x770], rdi
mov qword [rsp + 0x778], rdi
lea rax, [rsp + 0x5c]
or r8, 0xffffffffffffffff
mov r13, qword [rsp + 0x1b30]
inc r8
cmp byte [rax + r8], dil
jne 0x180232ada
lea rdx, [rsp + 0x5c]
lea rcx, [rsp + 0x760]
call fcn.18007b70c
nop
mov eax, 0x30
mov qword [rsp + 0x2d0], rax
mov dword [rsp + 0xb0], eax
mov byte [rsp + 0xb4], 0x5b
mov byte [rsp + 0xb5], 0x55
mov byte [rsp + 0xb6], 0x42
mov byte [rsp + 0xb7], 0x5e
mov byte [rsp + 0xb8], 0x55
mov byte [rsp + 0xb9], 0x5c
mov byte [rsp + 0xba], 3
mov byte [rsp + 0xbb], 2
xor eax, eax
mov byte [rsp + 0xbc], al
mov al, byte [rsp + 0xb4]
mov rdx, rdi
mov al, byte [rsp + rdx + 0xb4]
mov ecx, dword [rsp + 0xb0]
xor cl, al
mov byte [rsp + rdx + 0xb4], cl
add rdx, rsi
cmp rdx, r14
jb 0x180232b5d
mov byte [rsp + 0xbc], dil
xorps xmm0, xmm0
movups xmmword [rsp + 0x6b0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x6c0], xmm1
lea rax, [rsp + 0xb4]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], dil
jne 0x180232ba7
lea rdx, [rsp + 0xb4]
lea rcx, [rsp + 0x6b0]
call fcn.18007b70c
nop
lea rdx, [rsp + 0x6b0]
lea rcx, [rsp + 0x8f8]
call fcn.180188b20
nop
mov qword [rsp + 0x20], rdi
mov r9b, sil
lea r8, [rsp + 0x760]
mov rdx, rax
lea rcx, [0x1802c85b0]
call fcn.18024a024
nop
mov rdx, qword [rsp + 0x6c8]
cmp rdx, 0x10
jb 0x180232c40
inc rdx
mov rcx, qword [rsp + 0x6b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180232c3b
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r12
jbe 0x180232c3b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rsp + 0x6c0], xmm0
mov byte [rsp + 0x6b0], dil
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rsp + 0xb4]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xf]
lea rcx, [rsp + 0x5c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027e690]
call fcn.18026951c
nop
lea rcx, [0x1802c9068]
call fcn.180269690
jmp 0x180232ca6
mov qword [rsp + 0x2d0], 0x30
lea rcx, [0x1802c85c8]
cmp qword [0x1802c85e0], 0x10
cmovae rcx, qword [0x1802c85c8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
jne 0x180232cfb
lea rcx, [0x1802c85c8]
cmp qword [0x1802c85e0], 0x10
cmovae rcx, qword [0x1802c85c8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x1802c85c0], rax
mov r8, rax
lea rdx, [0x1802c85c8]
call fcn.18008c99c
lea rax, [rsp + 0x638]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x7c0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x8080004
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0xad0]
xor ecx, ecx
call qword [0x1802c85b8]
test eax, eax
setne byte [rsp + 0x1b38]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20c], eax
cmp qword [rsp + 0x230], rdi
je 0x180232e7d
cmp qword [rsp + 0x260], 0xffffffffffffffff
je 0x180232e7d
xorps xmm0, xmm0
movups xmmword [rsp + 0x6d0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x6e0], xmm1
mov r8d, 6
lea rdx, str._t_n_v_f_r
lea rcx, [rsp + 0x6d0]
call fcn.18007b5dc
nop
lea r8, [rsp + 0x6d0]
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x918]
call fcn.18014fa98
lea rcx, [rsp + 0x918]
call fcn.18007a444
nop
mov rdx, qword [rsp + 0x6e8]
cmp rdx, r14
jb 0x180232e1a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x6d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180232e15
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r12
jbe 0x180232e15
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280dd0]
movdqu xmmword [rsp + 0x6e0], xmm0
mov word [rsp + 0x6d0], di
mov dword [rsp + 0x5e8], edi
mov eax, dword [rsp + 0x230]
lea r8d, [rax*2 + 2]
lea rdx, [rsp + 0x220]
cmp qword [rsp + 0x238], r14
cmovae rdx, qword [rsp + 0x220]
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x5e8]
mov rcx, qword [rsp + 0x260]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0x610]
test rcx, rcx
je 0x180232e9b
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rsp + 0x828], rdi
je 0x180232ec5
cmp dword [rsp + 0x50], 0xffffffff
je 0x180232ec5
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, qword [rsp + 0x828]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rsp + 0x5f0]
cmp rcx, 0xffffffffffffffff
je 0x180232ed9
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x260]
cmp rcx, 0xffffffffffffffff
je 0x180232eed
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [rsp + 0x1b38], dil
jne 0x18023310e
mov r9d, 0x62
mov word [rsp + 0x3c4], r9w
lea r8d, [r9 - 0x3a]
mov word [rsp + 0x3c6], r8w
lea eax, [r9 + 2]
mov word [rsp + 0x3c8], ax
mov word [rsp + 0x3ca], r15w
lea eax, [r9 - 8]
mov word [rsp + 0x3cc], ax
lea r8d, [r9 + 0x15]
mov word [rsp + 0x3ce], r8w
lea eax, [r9 + 6]
mov word [rsp + 0x3d0], ax
lea eax, [r9 + 0x1c]
mov word [rsp + 0x3d2], ax
lea eax, [r9 + 0x13]
mov word [rsp + 0x3d4], ax
lea ecx, [rax - 5]
mov word [rsp + 0x3d6], cx
mov word [rsp + 0x3d8], ax
lea eax, [rcx - 2]
mov word [rsp + 0x3da], ax
mov word [rsp + 0x3dc], r15w
lea edx, [rcx - 6]
mov word [rsp + 0x3de], dx
lea eax, [rcx - 1]
mov word [rsp + 0x3e0], ax
mov word [rsp + 0x3e2], cx
lea eax, [rcx + 3]
mov word [rsp + 0x3e4], ax
lea eax, [rcx - 5]
mov word [rsp + 0x3e6], ax
mov word [rsp + 0x3e8], r15w
mov word [rsp + 0x3ea], r8w
lea eax, [rcx + 9]
mov word [rsp + 0x3ec], ax
lea r9d, [r8 - 1]
mov word [rsp + 0x3ee], r9w
mov word [rsp + 0x3f0], dx
lea ecx, [rdx + 2]
mov word [rsp + 0x3f2], cx
lea ecx, [rdx + 0x10]
mov word [rsp + 0x3f4], cx
mov word [rsp + 0x3f6], cx
mov word [rsp + 0x3f8], r15w
lea edx, [rax - 0x2c]
mov word [rsp + 0x3fa], dx
lea edx, [rax - 0x31]
mov word [rsp + 0x3fc], dx
lea ecx, [rax - 0x29]
mov word [rsp + 0x3fe], cx
lea r8d, [rax - 0x26]
mov word [rsp + 0x400], r8w
lea ecx, [rax - 0x2d]
mov word [rsp + 0x402], cx
lea edx, [rax - 0x2e]
mov word [rsp + 0x404], dx
lea r10d, [rax - 0x44]
mov word [rsp + 0x406], r10w
mov word [rsp + 0x408], r15w
mov word [rsp + 0x40a], cx
mov word [rsp + 0x40c], ax
mov word [rsp + 0x40e], ax
mov word [rsp + 0x410], r9w
mov word [rsp + 0x412], ax
lea eax, [rcx - 0xb]
mov word [rsp + 0x414], ax
mov word [rsp + 0x416], r15w
mov word [rsp + 0x418], di
movzx eax, word [rsp + 0x3c4]
lea ecx, [rdx - 0x44]
lea r8d, [r9 - 0x4c]
movzx eax, word [rsp + rdi*2 + 0x3c4]
sub ax, cx
mov word [rsp + rdi*2 + 0x3c4], ax
add rdi, rsi
cmp rdi, r8
jb 0x1802330cb
mov edx, dword [rsp + 0x20c]
lea rcx, [rsp + 0x3c4]
call fcn.18009550c
nop
mov r8d, 0x56
lea rcx, [rsp + 0x3c4]
jmp 0x180230a3e
cmp dword [rsp + 0x50], edi
je 0x180233e13
mov edx, dword [rsp + 0x648]
lea rcx, [rsp + 0x958]
call fcn.18018f934
nop
mov r8b, sil
xor edx, edx
mov rcx, rax
call fcn.180195afc
mov dword [rsp + 0x1b38], eax
lea rcx, [rsp + 0x958]
call fcn.18007a444
mov ecx, dword [rsp + 0x1b38]
mov r11d, dword [rsp + 0x50]
cmp ecx, 0xffffffff
je 0x1802334e4
cmp ecx, r11d
jne 0x1802334eb
mov eax, 0x2c
mov word [rsp + 0x1b48], ax
mov word [rsp + 0x1b4a], di
movzx ecx, word [rsp + 0x1b48]
movzx eax, word [rsp + 0x1b48]
sub ax, 3
mov word [rsp + 0x1b48], ax
mov dword [rsp + 0x470], 0x64
mov r8d, 0x3f
mov word [rsp + 0x474], r8w
lea eax, [r8 + 0x10]
mov word [rsp + 0x476], ax
lea r13d, [r8 - 6]
mov word [rsp + 0x478], r13w
lea r8d, [rax - 0xb]
mov word [rsp + 0x47a], r8w
lea r10d, [rax - 0x18]
mov word [rsp + 0x47c], r10w
lea r9d, [rax - 0x3b]
mov word [rsp + 0x47e], r9w
lea r10d, [rax - 0x4a]
mov word [rsp + 0x480], r10w
lea eax, [r13 - 0x26]
mov word [rsp + 0x482], ax
lea ecx, [rax - 9]
mov word [rsp + 0x484], cx
mov word [rsp + 0x486], si
mov word [rsp + 0x488], di
mov word [rsp + 0x48a], r8w
lea eax, [rcx - 3]
mov word [rsp + 0x48c], ax
lea eax, [rcx + 2]
mov word [rsp + 0x48e], ax
lea edx, [rcx + 3]
mov word [rsp + 0x490], dx
mov word [rsp + 0x492], r14w
mov word [rsp + 0x494], di
mov word [rsp + 0x496], r8w
mov word [rsp + 0x498], ax
mov word [rsp + 0x49a], r10w
lea eax, [rcx + 8]
mov word [rsp + 0x49c], ax
mov word [rsp + 0x49e], si
mov word [rsp + 0x4a0], r8w
mov word [rsp + 0x4a2], r10w
mov word [rsp + 0x4a4], r8w
mov word [rsp + 0x4a6], r9w
lea eax, [rcx + 0xc]
mov word [rsp + 0x4a8], ax
lea edx, [rcx + 1]
mov word [rsp + 0x4aa], dx
mov word [rsp + 0x4ac], r9w
mov word [rsp + 0x4ae], si
mov word [rsp + 0x4b0], ax
mov word [rsp + 0x4b2], r14w
lea r11d, [r13 - 0x1c]
mov word [rsp + 0x4b4], r11w
mov word [rsp + 0x4b6], r8w
lea edx, [rcx + 0xd]
mov word [rsp + 0x4b8], dx
mov word [rsp + 0x4ba], r9w
lea r9d, [r13 - 0x2e]
mov word [rsp + 0x4bc], r9w
mov word [rsp + 0x4be], r9w
lea edx, [rcx - 8]
mov word [rsp + 0x4c0], dx
mov word [rsp + 0x4c2], si
mov word [rsp + 0x4c4], di
mov word [rsp + 0x4c6], r8w
lea edx, [rcx + 0x2a]
mov word [rsp + 0x4c8], dx
mov word [rsp + 0x4ca], r10w
mov word [rsp + 0x4cc], ax
mov word [rsp + 0x4ce], si
mov word [rsp + 0x4d0], cx
lea eax, [rcx + 6]
mov word [rsp + 0x4d2], ax
mov word [rsp + 0x4d4], r8w
mov word [rsp + 0x4d6], dx
lea ecx, [rdx - 7]
mov word [rsp + 0x4d8], cx
mov word [rsp + 0x4da], bx
mov word [rsp + 0x4dc], r8w
mov word [rsp + 0x4de], ax
mov word [rsp + 0x4e0], r9w
mov word [rsp + 0x4e2], r8w
lea ecx, [rdx + 0x18]
mov word [rsp + 0x4e4], cx
xor eax, eax
mov word [rsp + 0x4e6], ax
movzx eax, word [rsp + 0x474]
mov rdx, rdi
movzx eax, word [rsp + rdx*2 + 0x474]
mov ecx, dword [rsp + 0x470]
xor cx, ax
mov word [rsp + rdx*2 + 0x474], cx
add rdx, rsi
cmp rdx, r13
jb 0x1802333f1
mov word [rsp + 0x4e6], di
cmp byte [0x1802bd270], dil
je 0x1802334bc
lea r9, [rsp + 0x1b48]
mov r8d, dword [rsp + 0x1b38]
lea rdx, [rsp + 0x474]
lea rcx, [rsp + 0x780]
call fcn.180267030
nop
lea rdx, [rsp + 0x780]
mov cl, sil
call fcn.18014e37c
nop
mov rdx, qword [rsp + 0x798]
cmp rdx, 0x10
jb 0x1802334a3
inc rdx
mov rcx, qword [rsp + 0x780]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18023349e
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r12
jbe 0x18023349e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rsp + 0x790], xmm0
mov byte [rsp + 0x780], dil
xor edx, edx
lea r8d, [rdx + 0x74]
lea rcx, [rsp + 0x474]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
mov r8d, 4
lea rcx, [rsp + 0x1b48]
jmp 0x180233e0b
mov dword [rsp + 0x1b38], edi
mov dword [rsp + 0x2d8], 0x42
mov eax, 0x6b
mov word [rsp + 0x2dc], ax
mov eax, 0x6c
mov word [rsp + 0x2de], ax
lea r9d, [rax - 0xa]
mov word [rsp + 0x2e0], r9w
lea edx, [rax - 0x56]
mov word [rsp + 0x2e2], dx
lea eax, [rdx + 0x14]
mov word [rsp + 0x2e4], ax
lea eax, [rdx + 0x15]
mov word [rsp + 0x2e6], ax
lea r8d, [r9 - 0x31]
mov dword [rsp + 0x20c], r8d
mov word [rsp + 0x2e8], r8w
mov word [rsp + 0x2ea], r9w
lea eax, [rdx + 0xb]
mov word [rsp + 0x2ec], ax
lea eax, [rdx + 0xd]
mov word [rsp + 0x2ee], ax
lea ecx, [rdx + 0x16]
mov word [rsp + 0x2f0], cx
mov word [rsp + 0x2f2], r9w
mov word [rsp + 0x2f4], bx
mov word [rsp + 0x2f6], r15w
mov word [rsp + 0x2f8], r9w
mov word [rsp + 0x2fa], ax
mov word [rsp + 0x2fc], r9w
lea ecx, [rdx + 0xe]
mov word [rsp + 0x2fe], cx
mov word [rsp + 0x300], ax
lea r10d, [r9 - 0x34]
mov word [rsp + 0x302], r10w
mov word [rsp + 0x304], r8w
mov word [rsp + 0x306], r15w
mov word [rsp + 0x308], r9w
lea eax, [rdx + 0x1c]
mov word [rsp + 0x30a], ax
lea eax, [rdx + 0x17]
mov word [rsp + 0x30c], ax
mov word [rsp + 0x30e], r8w
lea eax, [rdx + 0x15]
mov word [rsp + 0x310], ax
lea ecx, [rdx + 0x20]
mov word [rsp + 0x312], cx
mov word [rsp + 0x314], ax
lea eax, [rdx + 0x1e]
mov word [rsp + 0x316], ax
mov word [rsp + 0x318], r15w
lea eax, [rdx + 0x56]
mov word [rsp + 0x31a], ax
xor eax, eax
mov word [rsp + 0x31c], ax
movzx eax, word [rsp + 0x2dc]
mov r8, rdi
movzx eax, word [rsp + r8*2 + 0x2dc]
mov ecx, dword [rsp + 0x2d8]
xor cx, ax
mov word [rsp + r8*2 + 0x2dc], cx
add r8, rsi
cmp r8, rbx
jb 0x18023365d
mov word [rsp + 0x31c], di
mov word [rsp + 0x2a8], r10w
mov r10d, 0x25
mov word [rsp + 0x2aa], r10w
lea eax, [r10 + 0x42]
mov word [rsp + 0x2ac], ax
lea ecx, [rax + 0x13]
mov word [rsp + 0x2ae], cx
lea ecx, [rax + 0x12]
mov word [rsp + 0x2b0], cx
mov word [rsp + 0x2b2], r10w
lea eax, [rcx - 0xb]
mov word [rsp + 0x2b4], ax
lea r8d, [r10 + 0x53]
mov word [rsp + 0x2b6], r8w
mov word [rsp + 0x2b8], r10w
mov word [rsp + 0x2ba], ax
lea eax, [rcx - 6]
mov word [rsp + 0x2bc], ax
mov word [rsp + 0x2be], r8w
mov word [rsp + 0x2c0], cx
lea eax, [rcx - 0xf]
mov word [rsp + 0x2c2], ax
lea eax, [rcx - 0x13]
mov word [rsp + 0x2c4], ax
lea eax, [rcx - 0x10]
mov word [rsp + 0x2c6], ax
lea eax, [rcx - 0x3a]
mov word [rsp + 0x2c8], ax
mov word [rsp + 0x2ca], r10w
lea eax, [rcx - 0x4c]
mov word [rsp + 0x2cc], ax
mov word [rsp + 0x2ce], di
movzx eax, word [rsp + 0x2a8]
mov r13, rdi
lea r8d, [r10 - 0x20]
movzx eax, word [rsp + r13*2 + 0x2a8]
sub ax, r8w
mov word [rsp + r13*2 + 0x2a8], ax
add r13, rsi
cmp r13, 0x13
jb 0x180233768
mov r8d, 0x5f
mov dword [rsp + 0x118], r8d
mov eax, dword [rsp + 0x118]
xor ax, 0x5b
mov word [rsp + 0x11c], ax
mov eax, dword [rsp + 0x118]
add ax, si
xor ax, 0x2d
mov word [rsp + 0x11e], ax
mov eax, dword [rsp + 0x118]
add ax, 2
xor ax, 0x5d
mov word [rsp + 0x120], ax
mov eax, dword [rsp + 0x118]
add ax, 3
xor ax, bx
mov word [rsp + 0x122], ax
mov eax, dword [rsp + 0x118]
add ax, 4
xor ax, 0x53
mov word [rsp + 0x124], ax
mov eax, dword [rsp + 0x118]
add ax, 5
xor ax, 0x70
mov word [rsp + 0x126], ax
mov eax, dword [rsp + 0x118]
add ax, 6
xor ax, 0x61
mov word [rsp + 0x128], ax
mov eax, dword [rsp + 0x118]
add ax, 7
xor ax, 0x77
mov word [rsp + 0x12a], ax
mov eax, dword [rsp + 0x118]
add ax, r14w
xor ax, 0x6e
mov word [rsp + 0x12c], ax
mov eax, dword [rsp + 0x118]
add ax, 9
xor ax, 0x65
mov word [rsp + 0x12e], ax
mov eax, dword [rsp + 0x118]
add ax, 0xa
lea r13d, [r8 + 5]
xor ax, r13w
mov word [rsp + 0x130], ax
mov eax, dword [rsp + 0x118]
add ax, 0xb
xor ax, bx
mov word [rsp + 0x132], ax
mov eax, dword [rsp + 0x118]
add ax, 0xc
xor ax, 0x63
mov word [rsp + 0x134], ax
mov eax, dword [rsp + 0x118]
add ax, 0xd
xor ax, 0x68
mov word [rsp + 0x136], ax
mov eax, dword [rsp + 0x118]
add ax, 0xe
xor ax, 0x69
mov word [rsp + 0x138], ax
mov eax, dword [rsp + 0x118]
add ax, 0xf
xor ax, 0x6c
mov word [rsp + 0x13a], ax
mov eax, dword [rsp + 0x118]
add ax, 0x10
xor ax, r13w
mov word [rsp + 0x13c], ax
mov eax, dword [rsp + 0x118]
add ax, 0x11
xor ax, bx
mov word [rsp + 0x13e], ax
mov eax, dword [rsp + 0x118]
add ax, 0x12
xor ax, 0x6d
mov word [rsp + 0x140], ax
mov eax, dword [rsp + 0x118]
add ax, 0x13
xor ax, 0x61
mov word [rsp + 0x142], ax
mov eax, dword [rsp + 0x118]
add ax, 0x14
xor ax, cx
mov word [rsp + 0x144], ax
mov eax, dword [rsp + 0x118]
add ax, 0x15
xor ax, bx
mov word [rsp + 0x146], ax
mov eax, dword [rsp + 0x118]
add ax, dx
xor ax, 0x6e
mov word [rsp + 0x148], ax
mov eax, dword [rsp + 0x118]
add ax, 0x17
xor ax, 0x6f
mov word [rsp + 0x14a], ax
mov eax, dword [rsp + 0x118]
add ax, 0x18
xor ax, 0x74
mov word [rsp + 0x14c], ax
mov eax, dword [rsp + 0x118]
add ax, 0x19
xor ax, bx
mov word [rsp + 0x14e], ax
mov eax, dword [rsp + 0x118]
add ax, 0x1a
xor ax, 0x68
mov word [rsp + 0x150], ax
mov eax, dword [rsp + 0x118]
add ax, 0x1b
lea r8d, [r13 - 3]
xor ax, r8w
mov word [rsp + 0x152], ax
mov eax, dword [rsp + 0x118]
add ax, 0x1c
xor ax, 0x76
mov word [rsp + 0x154], ax
mov eax, dword [rsp + 0x118]
add ax, 0x1d
lea edx, [r13 + 1]
xor ax, dx
mov word [rsp + 0x156], ax
mov eax, dword [rsp + 0x118]
add ax, 0x1e
xor ax, bx
mov word [rsp + 0x158], ax
mov eax, dword [rsp + 0x118]
add ax, r12w
xor ax, 0x50
mov word [rsp + 0x15a], ax
mov eax, dword [rsp + 0x118]
add ax, bx
xor ax, r8w
mov word [rsp + 0x15c], ax
mov eax, dword [rsp + 0x118]
add ax, 0x21
xor ax, 0x72
mov word [rsp + 0x15e], ax
mov eax, dword [rsp + 0x118]
add ax, 0x22
xor ax, dx
mov word [rsp + 0x160], ax
mov eax, dword [rsp + 0x118]
add ax, 0x23
xor ax, 0x6e
mov word [rsp + 0x162], ax
mov eax, dword [rsp + 0x118]
add ax, 0x24
xor ax, 0x74
mov word [rsp + 0x164], ax
mov eax, dword [rsp + 0x118]
add ax, r10w
xor ax, bx
mov word [rsp + 0x166], ax
mov eax, dword [rsp + 0x118]
add ax, 0x26
xor ax, 0x50
mov word [rsp + 0x168], ax
mov eax, dword [rsp + 0x118]
add ax, r15w
xor ax, 0x49
mov word [rsp + 0x16a], ax
mov eax, dword [rsp + 0x118]
lea ecx, [rdx - 0x3d]
add ax, cx
xor ax, 0x44
mov word [rsp + 0x16c], ax
mov eax, dword [rsp + 0x118]
add ax, 0x29
xor ax, bx
mov word [rsp + 0x16e], ax
mov eax, dword [rsp + 0x118]
add ax, 0x2a
lea r10d, [r13 + 0xf]
xor ax, r10w
mov word [rsp + 0x170], ax
mov eax, dword [rsp + 0x118]
add ax, 0x2b
xor ax, 0x70
mov word [rsp + 0x172], ax
mov eax, dword [rsp + 0x118]
add ax, 0x2c
lea r8d, [r13 + 0xb]
xor ax, r8w
mov word [rsp + 0x174], ax
mov eax, dword [rsp + 0x118]
add ax, word [rsp + 0x258]
xor ax, r8w
mov word [rsp + 0x176], ax
mov eax, dword [rsp + 0x118]
add ax, word [rsp + 0x24c]
xor ax, word [rsp + 0x250]
mov word [rsp + 0x178], ax
mov eax, dword [rsp + 0x118]
add ax, word [rsp + 0x254]
xor ax, dx
mov word [rsp + 0x17a], ax
mov eax, dword [rsp + 0x118]
add ax, word [rsp + 0x2d0]
xor ax, r13w
mov word [rsp + 0x17c], ax
mov eax, dword [rsp + 0x118]
add ax, word [rsp + 0x20c]
xor ax, word [rsp + 0x204]
mov word [rsp + 0x17e], ax
mov eax, dword [rsp + 0x118]
add ax, word [rsp + 0x208]
xor ax, bx
mov word [rsp + 0x180], ax
mov eax, dword [rsp + 0x118]
add ax, word [rsp + 0x7c]
xor ax, r10w
mov word [rsp + 0x182], ax
mov eax, dword [rsp + 0x118]
add ax, 0x34
xor ax, 0x68
mov word [rsp + 0x184], ax
mov eax, dword [rsp + 0x118]
add ax, 0x35
xor ax, r8w
mov word [rsp + 0x186], ax
mov eax, dword [rsp + 0x118]
add ax, 0x36
xor ax, 0x75
mov word [rsp + 0x188], ax
mov eax, dword [rsp + 0x118]
add ax, 0x37
xor ax, 0x6c
mov word [rsp + 0x18a], ax
mov eax, dword [rsp + 0x118]
add ax, 0x38
xor ax, r13w
mov word [rsp + 0x18c], ax
mov eax, dword [rsp + 0x118]
add ax, 0x39
xor ax, bx
mov word [rsp + 0x18e], ax
mov eax, dword [rsp + 0x118]
add ax, 0x3a
xor ax, r9w
mov word [rsp + 0x190], ax
mov eax, dword [rsp + 0x118]
add ax, 0x3b
xor ax, dx
mov word [rsp + 0x192], ax
mov eax, dword [rsp + 0x118]
add ax, 0x3c
xor ax, 0x3a
mov word [rsp + 0x194], ax
mov eax, dword [rsp + 0x118]
add ax, 0x3d
xor ax, bx
mov word [rsp + 0x196], ax
mov eax, dword [rsp + 0x118]
add ax, 0x3e
xor ax, cx
mov word [rsp + 0x198], ax
xor eax, eax
mov word [rsp + 0x19a], ax
movzx eax, word [rsp + 0x11c]
mov rdx, rdi
lea r8d, [r13 - 0x25]
movzx eax, word [rsp + rdx*2 + 0x11c]
mov ecx, dword [rsp + 0x118]
add cx, dx
xor cx, ax
mov word [rsp + rdx*2 + 0x11c], cx
add rdx, rsi
cmp rdx, r8
jb 0x180233d76
mov word [rsp + 0x19a], di
lea rax, [rsp + 0x2dc]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x1b38]
lea r8, [rsp + 0x2a8]
mov edx, r11d
lea rcx, [rsp + 0x11c]
call fcn.180265bc4
nop
xor edx, edx
mov r8d, 0x80
lea rcx, [rsp + 0x11c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x28]
lea rcx, [rsp + 0x2a8]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
mov r8d, 0x42
lea rcx, [rsp + 0x2dc]
xor edx, edx
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov eax, 0x33
mov word [rsp + 0x50], ax
mov word [rsp + 0x52], di
movzx eax, word [rsp + 0x50]
movzx eax, word [rsp + 0x50]
sub ax, 0xa
mov word [rsp + 0x50], ax
mov edx, dword [rsp + 0x648]
lea rcx, [rsp + 0x938]
call fcn.18018f934
mov qword [rsp + 0x1b38], rax
mov dword [rsp + 0xc0], 0x2f
mov ecx, dword [rsp + 0xc0]
xor cx, bx
mov word [rsp + 0xc4], cx
mov ecx, dword [rsp + 0xc0]
add cx, si
xor cx, 0x28
mov word [rsp + 0xc6], cx
xor eax, eax
mov word [rsp + 0xc8], ax
movzx ecx, word [rsp + 0xc4]
mov rdx, rdi
lea r13d, [rax + 2]
movzx eax, word [rsp + rdx*2 + 0xc4]
mov ecx, dword [rsp + 0xc0]
add cx, dx
xor cx, ax
mov word [rsp + rdx*2 + 0xc4], cx
add rdx, rsi
cmp rdx, r13
jb 0x180233e9d
mov word [rsp + 0xc8], di
mov dword [rsp + 0x370], 0x29
mov eax, 0x72
mov word [rsp + 0x374], ax
mov word [rsp + 0x376], r13w
mov eax, 0x74
mov word [rsp + 0x378], ax
lea r8d, [rax - 0x6b]
mov word [rsp + 0x37a], r8w
lea eax, [r8 + 0x70]
mov word [rsp + 0x37c], ax
lea ecx, [rax - 0x1e]
mov word [rsp + 0x37e], cx
lea ecx, [rax - 0x33]
mov word [rsp + 0x380], cx
lea r11d, [r8 + 0x41]
mov word [rsp + 0x382], r11w
lea r9d, [r8 + 0x43]
mov word [rsp + 0x384], r9w
lea ebx, [rax - 0x1f]
mov word [rsp + 0x386], bx
mov word [rsp + 0x388], bx
mov word [rsp + 0x38a], r8w
mov word [rsp + 0x38c], bx
lea ecx, [rax - 0x20]
mov word [rsp + 0x38e], cx
lea edx, [rax - 0x31]
mov word [rsp + 0x390], dx
lea ecx, [rax - 0x1b]
mov word [rsp + 0x392], cx
lea edx, [rax - 0x32]
mov word [rsp + 0x394], dx
mov word [rsp + 0x396], r8w
mov word [rsp + 0x398], bx
lea edx, [rax - 0x1d]
mov word [rsp + 0x39a], dx
mov word [rsp + 0x39c], r11w
mov word [rsp + 0x39e], r11w
mov word [rsp + 0x3a0], r9w
mov word [rsp + 0x3a2], r9w
lea edx, [rax - 0x2c]
mov word [rsp + 0x3a4], dx
mov word [rsp + 0x3a6], r9w
mov word [rsp + 0x3a8], dx
lea edx, [rax - 0x72]
mov word [rsp + 0x3aa], dx
mov word [rsp + 0x3ac], r8w
lea edx, [rax - 0x12]
mov word [rsp + 0x3ae], dx
mov word [rsp + 0x3b0], r9w
mov word [rsp + 0x3b2], cx
mov word [rsp + 0x3b4], r8w
mov word [rsp + 0x3b6], ax
lea eax, [rbx + 6]
mov word [rsp + 0x3b8], ax
lea eax, [rbx + 0x13]
mov word [rsp + 0x3ba], ax
lea eax, [rbx - 0x47]
mov word [rsp + 0x3bc], ax
mov word [rsp + 0x3be], r8w
xor eax, eax
mov word [rsp + 0x3c0], ax
movzx eax, word [rsp + 0x374]
mov rdx, rdi
mov r13, qword [rsp + 0x1b30]
movzx eax, word [rsp + rdx*2 + 0x374]
mov ecx, dword [rsp + 0x370]
xor cx, ax
mov word [rsp + rdx*2 + 0x374], cx
add rdx, rsi
cmp rdx, 0x26
jb 0x180234075
mov word [rsp + 0x3c0], di
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x1b38]
lea r8, [rsp + 0xc4]
mov edx, dword [rsp + 0x648]
lea rcx, [rsp + 0x374]
call fcn.1800952f4
nop
xor edx, edx
lea r8d, [rdx + 0x4e]
lea rcx, [rsp + 0x374]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 6]
lea rcx, [rsp + 0xc4]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 4]
lea rcx, [rsp + 0x50]
call qword [sym.imp.VCRUNTIME140.dll_memset]
movups xmm6, xmmword [rsp + 0x638]
movsd xmm7, qword [rsp + 0x648]
mov rdx, qword [rsp + 0x238]
cmp rdx, r14
jb 0x180234163
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18023415e
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r12
jbe 0x18023415e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movups xmmword [r13], xmm6
movsd qword [r13 + 0x10], xmm7
mov rax, r13
lea r11, [rsp + 0x1af0]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.18006d878
nop
call fcn.18006d878
int3