Function at 0x140247fb4
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1d20
call fcn.14027bf80
sub rsp, rax
mov qword [rsp + 0x880], 0xfffffffffffffffe
movaps xmmword [rsp + 0x1d10], xmm6
movaps xmmword [rsp + 0x1d00], xmm7
mov rbx, rdx
mov r14, rcx
xor edi, edi
mov dword [rsp + 0x54], edi
mov r15d, dword [0x1402c61c4]
mov dword [rsp + 0x58], r15d
mov dword [rsp + 0x94], r15d
mov dword [rsp + 0x810], edi
xor edx, edx
lea r8d, [rdi + 0x68]
lea rcx, [rsp + 0x818]
call sub.VCRUNTIME140.dll_memset
or r13, 0xffffffffffffffff
mov qword [rsp + 0x5e0], r13
mov qword [rsp + 0x290], r13
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x648], xmm0
mov qword [rsp + 0x658], rax
lea r12d, [rdi + 0x70]
mov r8d, r12d
xor edx, edx
lea rcx, [rsp + 0x810]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov dword [rsp + 0x810], r12d
lea esi, [rdi + 1]
mov dword [rsp + 0x84c], esi
mov word [rsp + 0x850], di
mov qword [rsp + 0x70], rdi
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x778], xmm0
mov qword [rsp + 0x788], rax
mov qword [rsp + 0x370], rdi
mov qword [rsp + 0x380], rdi
mov qword [rsp + 0x388], 7
mov word [rsp + 0x370], di
cmp qword [rbx + 0x10], rdi
sete byte [rsp + 0x1d78]
je 0x140248142
xor edx, edx
mov r8d, 0x800
lea rcx, [rsp + 0x1500]
call sub.VCRUNTIME140.dll_memset
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov r9d, 0x800
lea r8, [rsp + 0x1500]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_K32GetModuleFileNameExW]
lea rdx, [rsp + 0x1500]
lea rcx, [rsp + 0x7b0]
call fcn.1400ac71c
mov rdx, rax
mov rcx, rbx
call fcn.1400afa7c
test eax, eax
sete byte [rsp + 0x1d78]
lea rcx, [rsp + 0x7b0]
call fcn.1400ac668
cmp r15d, 0x12345
jne 0x140248529
mov byte [rsp + 0x50], dil
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1401b89b8
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x94], eax
cmp eax, 0xffffffff
je 0x140248178
cmp eax, r15d
mov al, sil
jne 0x14024817b
mov al, dil
mov byte [rsp + 0x50], al
jmp 0x1402481ad
test al, al
jne 0x140248529
mov dword [rsp + 0x538], 0x5b
mov word [rsp + 0x53c], di
mov r13d, 0x7a
mov word [rsp + 0x53e], r13w
lea eax, [r13 - 0x74]
mov word [rsp + 0x540], ax
lea r10d, [r13 + 1]
mov word [rsp + 0x542], r10w
lea eax, [r13 - 0x62]
mov word [rsp + 0x544], ax
lea r15d, [r13 - 0x46]
mov word [rsp + 0x546], r15w
lea eax, [r13 - 0x4c]
mov word [rsp + 0x548], ax
lea eax, [r13 - 0x43]
mov word [rsp + 0x54a], ax
lea edx, [rax + 8]
mov word [rsp + 0x54c], dx
mov word [rsp + 0x54e], r10w
lea ebx, [rax - 2]
mov word [rsp + 0x550], bx
mov word [rsp + 0x552], r15w
lea r11d, [r13 - 0x4b]
mov word [rsp + 0x554], r11w
mov word [rsp + 0x556], r10w
lea r9d, [r13 - 0x3d]
mov word [rsp + 0x558], r9w
lea r12d, [r13 - 0x48]
mov word [rsp + 0x55a], r12w
mov word [rsp + 0x55c], bx
mov word [rsp + 0x55e], dx
mov word [rsp + 0x560], r10w
lea r8d, [r13 - 0x40]
mov word [rsp + 0x562], r8w
mov word [rsp + 0x564], r10w
lea ecx, [rax - 0xf]
mov word [rsp + 0x566], cx
lea ecx, [rax - 9]
mov word [rsp + 0x568], cx
mov word [rsp + 0x56a], r12w
mov word [rsp + 0x56c], r11w
mov word [rsp + 0x56e], r8w
lea r8d, [r13 - 0x41]
mov word [rsp + 0x570], r8w
mov word [rsp + 0x572], ax
lea eax, [rdx - 1]
mov word [rsp + 0x574], ax
mov word [rsp + 0x576], r10w
lea r8d, [r13 - 0x42]
mov word [rsp + 0x578], r8w
lea r8d, [r13 - 0x40]
mov word [rsp + 0x57a], r8w
mov word [rsp + 0x57c], bx
mov word [rsp + 0x57e], dx
mov word [rsp + 0x580], r12w
mov word [rsp + 0x582], dx
mov word [rsp + 0x584], r8w
mov word [rsp + 0x586], r11w
mov word [rsp + 0x588], ax
mov word [rsp + 0x58a], r10w
mov word [rsp + 0x58c], r9w
mov word [rsp + 0x58e], r15w
lea ecx, [rdx - 0x16]
mov word [rsp + 0x590], cx
mov word [rsp + 0x592], r10w
lea edx, [rbx + 0x47]
mov word [rsp + 0x594], dx
mov word [rsp + 0x596], r8w
lea edx, [rbx - 7]
mov word [rsp + 0x598], dx
mov word [rsp + 0x59a], r11w
mov word [rsp + 0x59c], r15w
lea edx, [rbx + 0x47]
mov word [rsp + 0x59e], dx
mov word [rsp + 0x5a0], r10w
lea edx, [rbx - 0xa]
mov word [rsp + 0x5a2], dx
mov word [rsp + 0x5a4], r8w
mov word [rsp + 0x5a6], cx
mov word [rsp + 0x5a8], ax
mov word [rsp + 0x5aa], bx
mov word [rsp + 0x5ac], r11w
mov word [rsp + 0x5ae], r10w
lea eax, [rbx - 0x2a]
mov word [rsp + 0x5b0], ax
lea eax, [rbx - 0x23]
mov word [rsp + 0x5b2], ax
lea eax, [rbx - 0x16]
mov word [rsp + 0x5b4], ax
mov word [rsp + 0x5b6], r10w
lea r10d, [r13 - 0x52]
mov word [rsp + 0x5b8], r10w
mov word [rsp + 0x5ba], dx
mov word [rsp + 0x5bc], r15w
mov word [rsp + 0x5be], r15w
mov word [rsp + 0x5c0], r9w
mov word [rsp + 0x5c2], r12w
mov word [rsp + 0x5c4], bx
lea eax, [rbx + 7]
mov word [rsp + 0x5c6], ax
mov word [rsp + 0x5c8], r13w
lea eax, [rbx + 0x40]
mov word [rsp + 0x5ca], ax
xor eax, eax
mov word [rsp + 0x5cc], ax
movzx eax, word [rsp + 0x53c]
mov rdx, rdi
movzx eax, word [rsp + rdx*2 + 0x53c]
mov ecx, dword [rsp + 0x538]
xor cx, ax
mov word [rsp + rdx*2 + 0x53c], cx
add rdx, rsi
cmp rdx, 0x48
jb 0x1402484a8
mov word [rsp + 0x5cc], di
lea rcx, [rsp + 0x53c]
call fcn.1400c49c8
nop
mov r8d, 0x92
lea rcx, [rsp + 0x53c]
xor edx, edx
call qword [sym.imp.VCRUNTIME140.dll_memset]
xorps xmm6, xmm6
xor eax, eax
mov qword [rsp + 0x638], rax
lea rcx, [rsp + 0x370]
call fcn.1400ac668
movups xmmword [r14], xmm6
movsd xmm0, qword [rsp + 0x638]
movsd qword [r14 + 0x10], xmm0
jmp 0x14024bdf4
mov al, byte [rsp + 0x1d78]
test al, al
je 0x140248da1
mov qword [rsp + 0x700], 0x18
mov qword [rsp + 0x710], 1
mov qword [rsp + 0x708], rdi
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1402d872c], eax
jle 0x140248821
lea rcx, [0x1402d872c]
call fcn.14027b540
cmp dword [0x1402d872c], r13d
jne 0x140248821
lea rax, [rsp + 0x660]
mov qword [rsp + 0x1d68], rax
mov byte [rsp + 0x88], 0x4e
mov byte [rsp + 0x89], 0x7d
mov byte [rsp + 0x8a], r12b
mov byte [rsp + 0x8b], 0x6c
mov byte [rsp + 0x8c], 0x7f
mov byte [rsp + 0x8d], r12b
mov byte [rsp + 0x8e], 0x5b
mov byte [rsp + 0x8f], 0x74
mov byte [rsp + 0x90], 0x7b
mov byte [rsp + 0x91], r12b
mov byte [rsp + 0x92], dil
mov al, byte [rsp + 0x88]
mov rcx, rdi
mov al, byte [rsp + rcx + 0x88]
sub al, 0xb
mov byte [rsp + rcx + 0x88], al
add rcx, rsi
cmp rcx, 0xa
jb 0x140248603
mov qword [rsp + 0x660], rdi
mov qword [rsp + 0x670], rdi
mov r12d, 0xf
mov qword [rsp + 0x678], r12
lea rax, [rsp + 0x88]
mov r15, r13
inc r15
cmp byte [rax + r15], dil
jne 0x140248645
lea rcx, [rsp + 0x660]
cmp r15, r12
ja 0x14024867e
mov qword [rsp + 0x670], r15
mov r8, r15
lea rdx, [rsp + 0x88]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov byte [rsp + r15 + 0x660], dil
jmp 0x14024868f
lea r9, [rsp + 0x88]
mov rdx, r15
call fcn.1400ada10
nop
mov byte [rsp + 0x60], 0x75
mov eax, 0x6f
mov byte [rsp + 0x61], al
mov byte [rsp + 0x62], 0x7c
mov byte [rsp + 0x63], 0x78
mov byte [rsp + 0x64], al
mov byte [rsp + 0x65], 0x76
mov byte [rsp + 0x66], 0x3d
mov byte [rsp + 0x67], 0x3c
mov byte [rsp + 0x68], dil
mov al, byte [rsp + 0x60]
mov rcx, rdi
mov r9d, 0xa
mov al, byte [rsp + rcx + 0x60]
sub al, r9b
mov byte [rsp + rcx + 0x60], al
add rcx, rsi
cmp rcx, 8
jb 0x1402486cc
mov qword [rsp + 0x5e8], rdi
mov qword [rsp + 0x5f8], rdi
mov qword [rsp + 0x600], r12
mov byte [rsp + 0x5e8], dil
lea rax, [rsp + 0x60]
mov r15, r13
inc r15
cmp byte [rax + r15], dil
jne 0x140248708
lea rcx, [rsp + 0x5e8]
cmp r15, r12
ja 0x14024873e
mov qword [rsp + 0x5f8], r15
mov r8, r15
lea rdx, [rsp + 0x60]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov byte [rsp + r15 + 0x5e8], dil
jmp 0x14024874c
lea r9, [rsp + 0x60]
mov rdx, r15
call fcn.1400ada10
nop
lea rdx, [rsp + 0x5e8]
lea rcx, [rsp + 0x9e8]
call fcn.1401a82ac
nop
mov qword [rsp + 0x20], rdi
mov r9b, sil
lea r8, [rsp + 0x660]
mov rdx, rax
lea rcx, [0x1402d9840]
call fcn.140260714
nop
mov rdx, qword [rsp + 0x600]
cmp rdx, 0x10
jb 0x1402487c8
inc rdx
mov rcx, qword [rsp + 0x5e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1402487c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1402487c3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14027b384
mov qword [rsp + 0x5f8], rdi
mov qword [rsp + 0x600], r12
mov byte [rsp + 0x5e8], dil
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rsp + 0x60]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xb]
lea rcx, [rsp + 0x88]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x14028f6f0]
call fcn.14027b36c
nop
lea rcx, [0x1402d872c]
call fcn.14027b4e0
jmp 0x140248827
mov r12d, 0xf
mov r15d, 8
lea eax, [r15 + 8]
lea rcx, [0x1402d9858]
cmp qword [0x1402d9870], rax
cmovae rcx, qword [0x1402d9858]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
jne 0x140248885
lea rcx, [0x1402d9858]
cmp qword [0x1402d9870], 0x10
cmovae rcx, qword [0x1402d9858]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x1402d9850], rax
mov r8, rax
lea rdx, [0x1402d9858]
call fcn.1400bc1a0
xor r9d, r9d
lea r8, [rsp + 0x700]
lea rdx, [rsp + 0x290]
lea rcx, [rsp + 0x5e0]
call qword [0x1402d9848]
test eax, eax
jne 0x140248b05
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov r13d, 0x7a
mov dword [rsp + 0x3e8], r13d
lea eax, [r13 - 0x59]
mov word [rsp + 0x3ec], ax
lea eax, [r13 - 0x1f]
mov word [rsp + 0x3ee], ax
lea ecx, [rax - 0x34]
mov word [rsp + 0x3f0], cx
lea r13d, [rax - 1]
mov word [rsp + 0x3f2], r13w
lea r8d, [rax - 0x22]
mov word [rsp + 0x3f4], r8w
lea r11d, [rax - 0x46]
mov word [rsp + 0x3f6], r11w
mov word [rsp + 0x3f8], r12w
lea edx, [rax - 0x45]
mov word [rsp + 0x3fa], dx
lea ebx, [rax - 0x3d]
mov word [rsp + 0x3fc], bx
mov word [rsp + 0x3fe], r13w
lea r8d, [rax - 0x47]
mov word [rsp + 0x400], r8w
mov word [rsp + 0x402], r11w
lea ecx, [rax - 0x4d]
mov word [rsp + 0x404], cx
mov word [rsp + 0x406], r13w
lea r10d, [rax - 0x52]
mov word [rsp + 0x408], r10w
lea eax, [rdx + 9]
mov word [rsp + 0x40a], ax
mov word [rsp + 0x40c], cx
mov word [rsp + 0x40e], r13w
mov word [rsp + 0x410], r10w
mov word [rsp + 0x412], cx
mov word [rsp + 0x414], bx
lea r10d, [r13 - 0x47]
mov word [rsp + 0x416], r10w
mov word [rsp + 0x418], r8w
mov word [rsp + 0x41a], r13w
lea r12d, [r13 - 0x48]
mov word [rsp + 0x41c], r12w
lea r13d, [r11 + 6]
mov word [rsp + 0x41e], r13w
mov word [rsp + 0x420], r8w
mov word [rsp + 0x422], bx
mov word [rsp + 0x424], dx
mov word [rsp + 0x426], ax
lea ebx, [rdx + 0x44]
mov word [rsp + 0x428], bx
mov word [rsp + 0x42a], r8w
mov word [rsp + 0x42c], r11w
mov word [rsp + 0x42e], bx
mov word [rsp + 0x430], r10w
mov word [rsp + 0x432], r8w
mov word [rsp + 0x434], r12w
mov word [rsp + 0x436], ax
mov word [rsp + 0x438], r15w
mov word [rsp + 0x43a], r10w
mov word [rsp + 0x43c], cx
mov word [rsp + 0x43e], bx
lea eax, [rdx + 6]
mov word [rsp + 0x440], ax
mov word [rsp + 0x442], dx
mov word [rsp + 0x444], r13w
lea eax, [rdx + 7]
mov word [rsp + 0x446], ax
lea eax, [rdx + 0x2a]
mov word [rsp + 0x448], ax
mov word [rsp + 0x44a], bx
xor eax, eax
mov word [rsp + 0x44c], ax
movzx eax, word [rsp + 0x3ec]
mov rdx, rdi
movzx eax, word [rsp + rdx*2 + 0x3ec]
mov ecx, dword [rsp + 0x3e8]
xor cx, ax
mov word [rsp + rdx*2 + 0x3ec], cx
add rdx, rsi
cmp rdx, 0x30
jb 0x140248ab6
mov word [rsp + 0x44c], di
mov edx, r9d
lea rcx, [rsp + 0x3ec]
call fcn.1400c4958
nop
mov r8d, 0x62
lea rcx, [rsp + 0x3ec]
jmp 0x1402484ef
xor r8d, r8d
mov edx, esi
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
test eax, eax
jne 0x140248d74
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r12d, eax
mov dword [rsp + 0x450], 0x4d
mov eax, 0x16
mov word [rsp + 0x454], ax
mov eax, 0x6c
mov word [rsp + 0x456], ax
mov eax, 0x10
mov word [rsp + 0x458], ax
lea ecx, [rax + 0x5d]
mov word [rsp + 0x45a], cx
lea eax, [rcx - 0x5f]
mov word [rsp + 0x45c], ax
lea r9d, [rcx - 0x4b]
mov word [rsp + 0x45e], r9w
lea r8d, [rcx - 0x35]
mov word [rsp + 0x460], r8w
lea r10d, [rcx - 0x4c]
mov word [rsp + 0x462], r10w
lea edx, [rcx - 0x44]
mov word [rsp + 0x464], dx
mov word [rsp + 0x466], cx
lea ebx, [rcx - 0x4a]
mov word [rsp + 0x468], bx
mov word [rsp + 0x46a], r9w
lea r8d, [rcx - 0x34]
mov word [rsp + 0x46c], r8w
mov word [rsp + 0x46e], cx
lea eax, [rcx - 0x2f]
mov word [rsp + 0x470], ax
lea r15d, [rcx - 0x45]
mov word [rsp + 0x472], r15w
mov word [rsp + 0x474], r8w
mov word [rsp + 0x476], cx
mov word [rsp + 0x478], ax
mov word [rsp + 0x47a], r8w
mov word [rsp + 0x47c], dx
lea r13d, [rcx - 0x49]
mov word [rsp + 0x47e], r13w
mov word [rsp + 0x480], bx
mov word [rsp + 0x482], cx
lea eax, [rcx - 0x48]
mov word [rsp + 0x484], ax
lea r11d, [rcx - 0x41]
mov word [rsp + 0x486], r11w
mov word [rsp + 0x488], bx
mov word [rsp + 0x48a], dx
mov word [rsp + 0x48c], r10w
mov word [rsp + 0x48e], r15w
mov word [rsp + 0x490], cx
mov word [rsp + 0x492], bx
mov word [rsp + 0x494], r9w
mov word [rsp + 0x496], cx
mov word [rsp + 0x498], r13w
mov word [rsp + 0x49a], bx
mov word [rsp + 0x49c], ax
mov word [rsp + 0x49e], r15w
lea edx, [rcx - 0x2e]
mov word [rsp + 0x4a0], dx
mov word [rsp + 0x4a2], r13w
mov word [rsp + 0x4a4], r8w
mov word [rsp + 0x4a6], cx
lea eax, [rcx - 0x42]
mov word [rsp + 0x4a8], ax
mov word [rsp + 0x4aa], r10w
mov word [rsp + 0x4ac], r11w
lea eax, [rcx - 0x43]
mov word [rsp + 0x4ae], ax
lea eax, [rcx + 0xa]
mov word [rsp + 0x4b0], ax
mov word [rsp + 0x4b2], cx
xor eax, eax
mov word [rsp + 0x4b4], ax
movzx eax, word [rsp + 0x454]
mov rdx, rdi
movzx eax, word [rsp + rdx*2 + 0x454]
mov ecx, dword [rsp + 0x450]
xor cx, ax
mov word [rsp + rdx*2 + 0x454], cx
add rdx, rsi
cmp rdx, 0x30
jb 0x140248d25
mov word [rsp + 0x4b4], di
mov edx, r12d
lea rcx, [rsp + 0x454]
call fcn.1400c4958
nop
mov r8d, 0x62
lea rcx, [rsp + 0x454]
jmp 0x1402484ef
mov rax, qword [rsp + 0x5e0]
mov qword [rsp + 0x860], rax
bts dword [rsp + 0x84c], 8
mov qword [rsp + 0x778], rax
mov rcx, rsi
mov al, byte [rsp + 0x1d78]
jmp 0x140248db1
mov r12d, 0xf
lea r15d, [r12 - 7]
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x1d70]
cmp rdx, r13
je 0x140248de2
mov qword [rsp + 0x868], rdx
mov qword [rsp + 0x870], rdx
bts dword [rsp + 0x84c], 8
mov qword [rsp + rcx*8 + 0x778], rdx
add rcx, rsi
mov qword [rsp + 0x640], rdi
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x778]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x640]
mov r8b, al
lea rdx, [rsp + 0x810]
mov ecx, dword [rsp + 0x58]
call fcn.14024150c
test al, al
jne 0x1402491fb
cmp dword [rsp + 0x58], edi
je 0x1402491fb
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x1d68], eax
mov eax, 0x2a
mov word [rsp + 0x298], ax
lea r11d, [rax + 5]
mov word [rsp + 0x29a], r11w
lea eax, [r11 - 0xe]
mov word [rsp + 0x29c], ax
lea ecx, [rax + 0x25]
mov word [rsp + 0x29e], cx
lea ebx, [rax + 0x52]
mov word [rsp + 0x2a0], bx
mov word [rsp + 0x2a2], bx
lea edx, [rax + 0x4f]
mov word [rsp + 0x2a4], dx
mov word [rsp + 0x2a6], bx
lea ecx, [rax + 0x1a]
mov word [rsp + 0x2a8], cx
mov word [rsp + 0x2aa], ax
mov word [rsp + 0x2ac], di
movzx eax, word [rsp + 0x298]
mov rcx, rdi
movzx eax, word [rsp + rcx*2 + 0x298]
sub ax, si
mov word [rsp + rcx*2 + 0x298], ax
add rcx, rsi
cmp rcx, 0xa
jb 0x140248eb4
mov r12d, dword [rsp + 0x58]
mov edx, r12d
lea rcx, [rsp + 0x9c8]
call fcn.1401aedc0
mov qword [rsp + 0x1d78], rax
mov eax, 0x24
mov word [rsp + 0xa8], ax
lea r11d, [rax + 8]
mov word [rsp + 0xaa], r11w
mov word [rsp + 0xac], di
movzx ecx, word [rsp + 0xa8]
mov rcx, rdi
lea edx, [rax - 0x20]
mov r14, qword [rsp + 0x1d60]
movzx eax, word [rsp + rcx*2 + 0xa8]
sub ax, dx
mov word [rsp + rcx*2 + 0xa8], ax
add rcx, rsi
cmp rcx, 2
jb 0x140248f25
mov dword [rsp + 0x2dc], 0x53
mov word [rsp + 0x2e0], r15w
mov eax, 0x72
mov word [rsp + 0x2e2], ax
mov eax, 0xe
mov word [rsp + 0x2e4], ax
mov word [rsp + 0x2e6], bx
mov eax, 0x10
mov word [rsp + 0x2e8], ax
mov eax, 0x3c
mov word [rsp + 0x2ea], ax
lea ecx, [rax - 0x16]
mov word [rsp + 0x2ec], cx
lea edx, [rax + 3]
mov word [rsp + 0x2ee], dx
lea r8d, [rax - 5]
mov word [rsp + 0x2f0], r8w
mov word [rsp + 0x2f2], bx
lea ecx, [rax + 1]
mov word [rsp + 0x2f4], cx
mov word [rsp + 0x2f6], ax
lea r13d, [rax - 0x15]
mov word [rsp + 0x2f8], r13w
mov word [rsp + 0x2fa], bx
lea r15d, [rax - 0x1c]
mov word [rsp + 0x2fc], r15w
lea r9d, [rax - 0x19]
mov word [rsp + 0x2fe], r9w
mov word [rsp + 0x300], ax
mov word [rsp + 0x302], ax
lea edx, [rax - 7]
mov word [rsp + 0x304], dx
mov word [rsp + 0x306], bx
mov word [rsp + 0x308], r9w
lea edx, [rax - 0xa]
mov word [rsp + 0x30a], dx
lea r8d, [rax - 0x1b]
mov word [rsp + 0x30c], r8w
lea r8d, [rax - 6]
mov word [rsp + 0x30e], r8w
mov word [rsp + 0x310], cx
mov word [rsp + 0x312], r13w
mov word [rsp + 0x314], bx
mov word [rsp + 0x316], r13w
mov word [rsp + 0x318], ax
mov word [rsp + 0x31a], bx
lea eax, [rcx - 0x3a]
mov word [rsp + 0x31c], ax
lea eax, [rcx - 0x23]
mov word [rsp + 0x31e], ax
lea eax, [rcx - 0x26]
mov word [rsp + 0x320], ax
lea eax, [rcx + 0x2c]
mov word [rsp + 0x322], ax
mov word [rsp + 0x324], bx
xor eax, eax
mov word [rsp + 0x326], ax
movzx eax, word [rsp + 0x2e0]
mov rdx, rdi
movzx eax, word [rsp + rdx*2 + 0x2e0]
mov ecx, dword [rsp + 0x2dc]
xor cx, ax
mov word [rsp + rdx*2 + 0x2e0], cx
add rdx, rsi
cmp rdx, r9
jb 0x1402490ca
mov word [rsp + 0x326], di
mov rbx, qword [rsp + 0x1d78]
cmp byte [0x1402cccc1], dil
je 0x1402491b5
mov rdx, rbx
lea rcx, [rsp + 0xa08]
call fcn.1400ac788
mov ecx, dword [rsp + 0x1d68]
mov dword [rsp + 0x30], ecx
lea rcx, [rsp + 0x298]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xa8]
mov r8d, r12d
lea rdx, [rsp + 0x2e0]
lea rcx, [rsp + 0x7b0]
call fcn.14027a498
nop
lea rdx, [rsp + 0x7b0]
mov cl, sil
call fcn.140173fb4
nop
mov r8, qword [rsp + 0x7c8]
cmp r8, 0x10
jb 0x1402491b5
inc r8
mov rcx, qword [rsp + 0x7b0]
mov rax, rcx
cmp r8, 0x1000
jb 0x1402491ac
add r8, r13
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
mov edx, 0x1f
cmp rax, rdx
jbe 0x1402491ac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, r8
call fcn.14027b384
nop
mov rcx, rbx
call fcn.1400ac668
nop
xor edx, edx
lea r8d, [rdx + 0x48]
lea rcx, [rsp + 0x2e0]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 6]
lea rcx, [rsp + 0xa8]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
mov r8d, 0x16
lea rcx, [rsp + 0x298]
jmp 0x1402484ef
xor edx, edx
mov r8d, 0x800
lea rcx, [rsp + 0xd00]
call sub.VCRUNTIME140.dll_memset
mov al, byte [rsp + 0x1d78]
mov byte [0x1402c61a7], al
test al, al
je 0x140249aef
mov ecx, 0x76
mov dword [rsp + 0x170], ecx
mov eax, dword [rsp + 0x170]
xor ax, 0x5b
mov word [rsp + 0x174], ax
mov eax, dword [rsp + 0x170]
add ax, si
lea r10d, [rcx - 0x48]
xor ax, r10w
mov word [rsp + 0x176], ax
mov eax, dword [rsp + 0x170]
add ax, 2
xor ax, 0x5d
mov word [rsp + 0x178], ax
mov eax, dword [rsp + 0x170]
add ax, 3
lea r15d, [rcx - 0x56]
xor ax, r15w
mov word [rsp + 0x17a], ax
mov eax, dword [rsp + 0x170]
add ax, 4
xor ax, 0x53
mov word [rsp + 0x17c], ax
mov eax, dword [rsp + 0x170]
add ax, 5
lea edx, [rcx - 6]
xor ax, dx
mov word [rsp + 0x17e], ax
mov eax, dword [rsp + 0x170]
add ax, 6
xor ax, 0x61
mov word [rsp + 0x180], ax
mov eax, dword [rsp + 0x170]
add ax, 7
lea r11d, [rcx + 1]
xor ax, r11w
mov word [rsp + 0x182], ax
mov eax, dword [rsp + 0x170]
lea ebx, [rcx - 0x6e]
add ax, bx
lea r9d, [rcx - 8]
xor ax, r9w
mov word [rsp + 0x184], ax
mov eax, dword [rsp + 0x170]
add ax, 9
xor ax, 0x69
mov word [rsp + 0x186], ax
mov eax, dword [rsp + 0x170]
add ax, 0xa
xor ax, r9w
mov word [rsp + 0x188], ax
mov eax, dword [rsp + 0x170]
add ax, 0xb
xor ax, 0x67
mov word [rsp + 0x18a], ax
mov eax, dword [rsp + 0x170]
add ax, 0xc
xor ax, r15w
mov word [rsp + 0x18c], ax
mov eax, dword [rsp + 0x170]
add ax, 0xd
xor ax, 0x61
mov word [rsp + 0x18e], ax
mov eax, dword [rsp + 0x170]
add ax, 0xe
xor ax, r15w
mov word [rsp + 0x190], ax
mov eax, dword [rsp + 0x170]
add ax, r12w
xor ax, r9w
mov word [rsp + 0x192], ax
mov eax, dword [rsp + 0x170]
add ax, 0x10
xor ax, 0x65
mov word [rsp + 0x194], ax
mov eax, dword [rsp + 0x170]
add ax, 0x11
xor ax, r11w
mov word [rsp + 0x196], ax
mov eax, dword [rsp + 0x170]
add ax, 0x12
xor ax, r15w
mov word [rsp + 0x198], ax
mov eax, dword [rsp + 0x170]
add ax, 0x13
lea ecx, [rdx + 3]
xor ax, cx
mov word [rsp + 0x19a], ax
mov eax, dword [rsp + 0x170]
add ax, 0x14
xor ax, 0x75
mov word [rsp + 0x19c], ax
mov eax, dword [rsp + 0x170]
add ax, 0x15
xor ax, cx
mov word [rsp + 0x19e], ax
mov eax, dword [rsp + 0x170]
add ax, 0x16
xor ax, dx
mov word [rsp + 0x1a0], ax
mov eax, dword [rsp + 0x170]
add ax, 0x17
xor ax, 0x65
mov word [rsp + 0x1a2], ax
mov eax, dword [rsp + 0x170]
add ax, 0x18
xor ax, r9w
mov word [rsp + 0x1a4], ax
mov eax, dword [rsp + 0x170]
add ax, 0x19
lea r8d, [r10 + 0x36]
xor ax, r8w
mov word [rsp + 0x1a6], ax
mov eax, dword [rsp + 0x170]
add ax, 0x1a
xor ax, 0x65
mov word [rsp + 0x1a8], ax
mov eax, dword [rsp + 0x170]
add ax, 0x1b
xor ax, r8w
mov word [rsp + 0x1aa], ax
mov eax, dword [rsp + 0x170]
lea edx, [rbx + 0x14]
mov dword [rsp + 0x1d78], edx
add ax, dx
xor ax, r15w
mov word [rsp + 0x1ac], ax
mov eax, dword [rsp + 0x170]
lea edx, [rbx + 0x15]
mov dword [rsp + 0x94], edx
add ax, dx
xor ax, cx
mov word [rsp + 0x1ae], ax
mov eax, dword [rsp + 0x170]
add ax, 0x1e
xor ax, 0x65
mov word [rsp + 0x1b0], ax
mov eax, dword [rsp + 0x170]
add ax, 0x1f
xor ax, 0x6c
mov word [rsp + 0x1b2], ax
mov eax, dword [rsp + 0x170]
add ax, r15w
xor ax, 0x66
mov word [rsp + 0x1b4], ax
mov eax, dword [rsp + 0x170]
add ax, 0x21
xor ax, r10w
mov word [rsp + 0x1b6], ax
mov eax, dword [rsp + 0x170]
add ax, 0x22
xor ax, r10w
mov word [rsp + 0x1b8], ax
mov eax, dword [rsp + 0x170]
add ax, 0x23
xor ax, r10w
mov word [rsp + 0x1ba], ax
xor eax, eax
mov word [rsp + 0x1bc], ax
movzx eax, word [rsp + 0x174]
mov rdx, rdi
movzx eax, word [rsp + rdx*2 + 0x174]
mov ecx, dword [rsp + 0x170]
add cx, dx
xor cx, ax
mov word [rsp + rdx*2 + 0x174], cx
add rdx, rsi
cmp rdx, 0x24
jb 0x1402495a6
mov word [rsp + 0x1bc], di
lea rcx, [rsp + 0x174]
call fcn.1400acf00
nop
xor edx, edx
lea r8d, [rdx + 0x4a]
lea rcx, [rsp + 0x174]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rdx, [rsp + 0x9a8]
lea rcx, [0x1402c61a0]
call fcn.1400aa35c
mov rdx, rax
lea rcx, [rsp + 0x370]
call fcn.1400bbecc
lea rcx, [rsp + 0x9a8]
call fcn.1400ac668
lea rdx, [rsp + 0x370]
lea rcx, [rsp + 0x988]
call fcn.1400ac788
mov r8, rax
mov eax, 0xb
mov word [rsp + 0x390], ax
mov eax, 0x5d
mov word [rsp + 0x392], ax
mov eax, 0x30
mov word [rsp + 0x394], ax
mov eax, 0x5f
mov word [rsp + 0x396], ax
lea ecx, [rax - 0x3d]
mov word [rsp + 0x398], cx
lea eax, [rcx + 0x23]
mov word [rsp + 0x39a], ax
lea r10d, [rcx + 0x4f]
mov word [rsp + 0x39c], r10w
lea eax, [rcx + 0x4d]
mov word [rsp + 0x39e], ax
mov word [rsp + 0x3a0], ax
lea r11d, [rcx + 0x41]
mov word [rsp + 0x3a2], r11w
lea eax, [rcx + 0x4e]
mov word [rsp + 0x3a4], ax
lea edx, [rcx + 0x44]
mov word [rsp + 0x3a6], dx
mov word [rsp + 0x3a8], cx
lea edx, [rcx + 0x4c]
mov word [rsp + 0x3aa], dx
lea edx, [rcx + 0x49]
mov word [rsp + 0x3ac], dx
mov word [rsp + 0x3ae], ax
lea r9d, [rcx + 0x45]
mov word [rsp + 0x3b0], r9w
mov word [rsp + 0x3b2], cx
lea eax, [rcx + 0x54]
mov word [rsp + 0x3b4], ax
mov word [rsp + 0x3b6], r10w
mov word [rsp + 0x3b8], cx
lea eax, [rcx + 0x42]
mov word [rsp + 0x3ba], ax
mov word [rsp + 0x3bc], r9w
mov word [rsp + 0x3be], cx
lea eax, [rcx + 0x50]
mov word [rsp + 0x3c0], ax
mov word [rsp + 0x3c2], r11w
lea eax, [rcx + 0x53]
mov word [rsp + 0x3c4], ax
mov word [rsp + 0x3c6], ax
mov word [rsp + 0x3c8], r9w
lea eax, [rcx + 0x44]
mov word [rsp + 0x3ca], ax
mov word [rsp + 0x3cc], cx
lea eax, [rcx + 0x56]
mov word [rsp + 0x3ce], ax
mov word [rsp + 0x3d0], dx
mov word [rsp + 0x3d2], r11w
mov word [rsp + 0x3d4], cx
lea eax, [rcx + 0x33]
mov word [rsp + 0x3d6], ax
lea eax, [rcx + 0x34]
mov word [rsp + 0x3d8], ax
lea eax, [rcx + 0x24]
mov word [rsp + 0x3da], ax
lea eax, [rcx + 0x29]
mov word [rsp + 0x3dc], ax
lea eax, [rcx + 0x2e]
mov word [rsp + 0x3de], ax
lea eax, [rcx + 0x1a]
mov word [rsp + 0x3e0], ax
mov word [rsp + 0x3e2], cx
mov word [rsp + 0x3e4], di
movzx eax, word [rsp + 0x390]
mov rcx, rdi
lea edx, [r10 - 0x6f]
movzx eax, word [rsp + rcx*2 + 0x390]
sub ax, dx
mov word [rsp + rcx*2 + 0x390], ax
add rcx, rsi
cmp rcx, 0x2a
jb 0x140249807
mov rdx, r8
lea rcx, [rsp + 0x390]
call fcn.14015d2b8
nop
xor edx, edx
lea r8d, [rdx + 0x56]
lea rcx, [rsp + 0x390]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [rsp + 0xa30]
call fcn.1400ab8b4
nop
mov dword [rsp + 0xb0], 0x15
mov eax, dword [rsp + 0xb0]
xor ax, 0x22
mov word [rsp + 0xb4], ax
mov eax, dword [rsp + 0xb0]
add ax, si
xor ax, r15w
mov word [rsp + 0xb6], ax
mov eax, dword [rsp + 0xb0]
add ax, 2
xor ax, 0x2d
mov word [rsp + 0xb8], ax
xor eax, eax
mov word [rsp + 0xba], ax
movzx eax, word [rsp + 0xb4]
mov rdx, rdi
movzx eax, word [rsp + rdx*2 + 0xb4]
mov ecx, dword [rsp + 0xb0]
add cx, dx
xor cx, ax
mov word [rsp + rdx*2 + 0xb4], cx
add rdx, rsi
cmp rdx, 3
jb 0x1402498b6
mov word [rsp + 0xba], di
lea rdx, [0x1402c7210]
lea rcx, [rsp + 0x948]
call fcn.1401af024
mov rdx, rax
mov dword [rsp + 0x98], 0x51
mov ecx, dword [rsp + 0x98]
xor cx, 0x22
mov word [rsp + 0x9c], cx
xor eax, eax
mov word [rsp + 0x9e], ax
movzx ecx, word [rsp + 0x9c]
movzx ecx, word [rsp + 0x9c]
mov eax, dword [rsp + 0x98]
xor ax, cx
mov word [rsp + 0x9c], ax
mov word [rsp + 0x9e], di
lea rax, [rsp + 0x9c]
mov rcx, r13
mov r14, qword [rsp + 0x1d60]
inc rcx
cmp word [rax + rcx*2], di
jne 0x140249960
mov r8, qword [rdx + 0x10]
movabs rax, 0x7ffffffffffffffe
sub rax, r8
cmp rax, rcx
jb 0x14024be18
cmp qword [rdx + 0x18], rbx
jb 0x14024998c
mov rdx, qword [rdx]
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x9c]
lea rcx, [rsp + 0x8c8]
call fcn.140172528
nop
lea rdx, [rsp + 0xb4]
lea rcx, [rsp + 0x8c8]
call fcn.140172498
mov rbx, rax
mov qword [rsp + 0x738], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x748], xmm0
mov r8, r15
mov rdx, rax
lea rcx, [rsp + 0x738]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
lea rdx, [rsp + 0x738]
mov ebx, 8
cmp qword [rsp + 0x750], rbx
cmovae rdx, qword [rsp + 0x738]
mov r8, qword [rsp + 0x748]
lea rcx, [rsp + 0xa30]
call fcn.1400aefa4
nop
lea rcx, [rsp + 0x738]
call fcn.1400ac668
nop
lea rcx, [rsp + 0x8c8]
call fcn.1400ac668
nop
xor edx, edx
lea r8d, [rbx - 4]
lea rcx, [rsp + 0x9c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
lea rcx, [rsp + 0x948]
call fcn.1400ac668
nop
mov r8d, ebx
xor edx, edx
lea rcx, [rsp + 0xb4]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rdx, [rsp + 0x7f0]
lea rcx, [rsp + 0xa38]
call fcn.1400aca50
mov dword [rsp + 0x54], 7
lea r8, [rsp + 0x7f0]
cmp qword [rsp + 0x808], rbx
cmovae r8, qword [rsp + 0x7f0]
mov edx, 0x400
lea rcx, [rsp + 0xd00]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea rcx, [rsp + 0x7f0]
call fcn.1400ac668
nop
lea rcx, [rsp + 0xa30]
call fcn.1400aa2f8
jmp 0x14024a0f6
mov rdx, rbx
lea rcx, [rsp + 0x790]
call fcn.1400ac788
nop
mov rcx, rbx
cmp qword [rbx + 0x18], r15
jb 0x140249b0c
mov rcx, qword [rbx]
mov qword [rsp + 0x20], rsi
lea r9, [0x140290c48]
xor r8d, r8d
mov rdx, qword [rbx + 0x10]
call fcn.1400ad7d0
cmp rax, r13
je 0x140249cca
mov dword [rsp + 0x70], 0x5e
mov eax, dword [rsp + 0x70]
mov edx, 0x22
xor ax, dx
mov word [rsp + 0x74], ax
xor eax, eax
mov word [rsp + 0x76], ax
movzx eax, word [rsp + 0x74]
movzx eax, word [rsp + 0x74]
mov ecx, dword [rsp + 0x70]
xor cx, ax
mov word [rsp + 0x74], cx
mov word [rsp + 0x76], di
mov dword [rsp + 0xa0], 0x48
mov eax, dword [rsp + 0xa0]
xor ax, dx
mov word [rsp + 0xa4], ax
xor eax, eax
mov word [rsp + 0xa6], ax
movzx eax, word [rsp + 0xa4]
movzx eax, word [rsp + 0xa4]
mov ecx, dword [rsp + 0xa0]
xor cx, ax
mov word [rsp + 0xa4], cx
mov word [rsp + 0xa6], di
lea rax, [rsp + 0xa4]
mov rcx, r13
inc rcx
cmp word [rax + rcx*2], di
jne 0x140249bc4
mov rdx, qword [rbx + 0x10]
movabs rax, 0x7ffffffffffffffe
sub rax, rdx
cmp rax, rcx
jb 0x14024be1e
cmp qword [rbx + 0x18], r15
jb 0x140249bf0
mov rbx, qword [rbx]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0xa4]
lea rcx, [rsp + 0x8a8]
call fcn.140172528
nop
lea rdx, [rsp + 0x74]
lea rcx, [rsp + 0x8a8]
call fcn.140172498
mov rbx, rax
mov qword [rsp + 0x7d0], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x7e0], xmm0
mov r15d, 0x20
mov r8d, r15d
mov rdx, rax
lea rcx, [rsp + 0x7d0]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
mov dword [rsp + 0x54], 0x18
lea rdx, [rsp + 0x7d0]
lea rcx, [rsp + 0x790]
call fcn.1400bbecc
lea rcx, [rsp + 0x7d0]
call fcn.1400ac668
nop
lea rcx, [rsp + 0x8a8]
call fcn.1400ac668
nop
lea ebx, [r15 - 0x1c]
mov r8d, ebx
xor edx, edx
lea rcx, [rsp + 0xa4]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
mov r8d, ebx
xor edx, edx
lea rcx, [rsp + 0x74]
call qword [sym.imp.VCRUNTIME140.dll_memset]
jmp 0x140249cd0
mov r15d, 0x20
lea r8, [rsp + 0x790]
mov ebx, 8
cmp qword [rsp + 0x7a8], rbx
cmovae r8, qword [rsp + 0x790]
mov edx, 0x400
lea rcx, [rsp + 0xd00]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov dword [rsp + 0x27c], 0x42
lea eax, [rbx + 0x63]
mov word [rsp + 0x280], ax
lea eax, [rbx + 0x64]
mov word [rsp + 0x282], ax
mov word [rsp + 0x284], ax
mov word [rsp + 0x286], ax
lea eax, [rbx + 0x40]
mov word [rsp + 0x288], ax
xor eax, eax
mov word [rsp + 0x28a], ax
movzx eax, word [rsp + 0x280]
mov rdx, rdi
lea r8d, [rbx - 3]
movzx eax, word [rsp + rdx*2 + 0x280]
mov ecx, dword [rsp + 0x27c]
xor cx, ax
mov word [rsp + rdx*2 + 0x280], cx
add rdx, rsi
cmp rdx, r8
jb 0x140249d56
mov word [rsp + 0x28a], di
mov r9d, 0x61
mov dword [rsp + 0x148], r9d
mov eax, dword [rsp + 0x148]
lea edx, [r9 - 0x57]
xor ax, dx
mov word [rsp + 0x14c], ax
mov eax, dword [rsp + 0x148]
add ax, si
xor ax, 0x5b
mov word [rsp + 0x14e], ax
mov eax, dword [rsp + 0x148]
add ax, 2
xor ax, 0x2e
mov word [rsp + 0x150], ax
mov eax, dword [rsp + 0x148]
add ax, 3
xor ax, 0x5d
mov word [rsp + 0x152], ax
mov eax, dword [rsp + 0x148]
add ax, 4
xor ax, r15w
mov word [rsp + 0x154], ax
mov eax, dword [rsp + 0x148]
add ax, r8w
xor ax, 0x53
mov word [rsp + 0x156], ax
mov eax, dword [rsp + 0x148]
add ax, 6
xor ax, 0x70
mov word [rsp + 0x158], ax
mov eax, dword [rsp + 0x148]
add ax, 7
xor ax, r9w
mov word [rsp + 0x15a], ax
mov eax, dword [rsp + 0x148]
add ax, bx
xor ax, 0x77
mov word [rsp + 0x15c], ax
mov eax, dword [rsp + 0x148]
add ax, 9
lea ecx, [rdx + 0x64]
xor ax, cx
mov word [rsp + 0x15e], ax
mov eax, dword [rsp + 0x148]
add ax, dx
xor ax, 0x69
mov word [rsp + 0x160], ax
mov eax, dword [rsp + 0x148]
add ax, 0xb
xor ax, cx
mov word [rsp + 0x162], ax
mov eax, dword [rsp + 0x148]
add ax, 0xc
xor ax, 0x67
mov word [rsp + 0x164], ax
mov eax, dword [rsp + 0x148]
add ax, 0xd
xor ax, 0x3a
mov word [rsp + 0x166], ax
mov eax, dword [rsp + 0x148]
add ax, 0xe
xor ax, r15w
mov word [rsp + 0x168], ax
mov eax, dword [rsp + 0x148]
add ax, r12w
xor ax, 0x28
mov word [rsp + 0x16a], ax
xor eax, eax
mov word [rsp + 0x16c], ax
movzx eax, word [rsp + 0x14c]
mov rdx, rdi
movzx eax, word [rsp + rdx*2 + 0x14c]
mov ecx, dword [rsp + 0x148]
add cx, dx
xor cx, ax
mov word [rsp + rdx*2 + 0x14c], cx
add rdx, rsi
cmp rdx, 0x10
jb 0x140249f10
mov word [rsp + 0x16c], di
lea rcx, [rsp + 0xb20]
call fcn.1400ab8b4
nop
lea rdx, [rsp + 0x14c]
lea rcx, [rsp + 0xb20]
call fcn.1400ad624
mov rcx, rax
lea rdx, [rsp + 0xd00]
call fcn.1400ad624
mov rcx, rax
lea rdx, [rsp + 0x280]
call fcn.1400ad624
lea rdx, [rsp + 0x680]
lea rcx, [rsp + 0xb28]
call fcn.1400aca50
mov ebx, dword [rsp + 0x54]
or ebx, 0x40
mov dword [rsp + 0x54], ebx
lea rcx, [rsp + 0x680]
mov r9d, 8
cmp qword [rsp + 0x698], r9
cmovae rcx, qword [rsp + 0x680]
mov rax, qword [rsp + 0x690]
lea r8, [rcx + rax*2]
lea rdx, [rsp + 0x680]
cmovae rdx, qword [rsp + 0x680]
lea rcx, [rsp + 0x6e0]
call fcn.1400af5d0
or ebx, r15d
mov dword [rsp + 0x54], ebx
lea rdx, [0x140290d28]
lea rcx, [rsp + 0x6e0]
call fcn.1400ace7c
nop
lea rcx, [rsp + 0x680]
call fcn.1400ac668
nop
lea rcx, [rsp + 0xb20]
call fcn.1400aa2f8
lea rdx, [rsp + 0x6e0]
xor ecx, ecx
call fcn.140173fb4
and ebx, 0xffffffdf
mov dword [rsp + 0x54], ebx
mov r8, qword [rsp + 0x6f8]
cmp r8, 0x10
mov r14, qword [rsp + 0x1d60]
jb 0x14024a08c
inc r8
mov rcx, qword [rsp + 0x6e0]
mov rax, rcx
cmp r8, 0x1000
jb 0x14024a084
add r8, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
mov edx, 0x1f
cmp rax, rdx
jbe 0x14024a084
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, r8
call fcn.14027b384
mov qword [rsp + 0x6f0], rdi
mov qword [rsp + 0x6f8], r12
mov byte [rsp + 0x6e0], dil
xor edx, edx
lea r8d, [rdx + 0x22]
lea rcx, [rsp + 0x14c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xc]
lea rcx, [rsp + 0x280]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
lea rcx, [rsp + 0x790]
call fcn.1400ac668
mov dword [rsp + 0x1d78], 0x1c
mov dword [rsp + 0x94], 0x1d
mov ebx, 8
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1402d8a98], eax
jle 0x14024a46b
lea rcx, [0x1402d8a98]
call fcn.14027b540
cmp dword [0x1402d8a98], r13d
jne 0x14024a46b
lea rax, [rsp + 0x6a0]
mov qword [rsp + 0x5d8], rax
mov dword [rsp + 0xbc], 0x21
mov byte [rsp + 0xc0], 0x62
mov eax, 0x53
mov byte [rsp + 0xc1], al
mov byte [rsp + 0xc2], 0x44
mov byte [rsp + 0xc3], 0x40
mov byte [rsp + 0xc4], 0x55
mov byte [rsp + 0xc5], 0x44
mov byte [rsp + 0xc6], 0x71
mov byte [rsp + 0xc7], al
mov byte [rsp + 0xc8], 0x4e
mov byte [rsp + 0xc9], 0x42
mov byte [rsp + 0xca], 0x44
mov byte [rsp + 0xcb], 0x52
mov byte [rsp + 0xcc], 0x52
mov byte [rsp + 0xcd], 0x76
xor eax, eax
mov byte [rsp + 0xce], al
mov al, byte [rsp + 0xc0]
mov rdx, rdi
mov al, byte [rsp + rdx + 0xc0]
mov ecx, dword [rsp + 0xbc]
xor cl, al
mov byte [rsp + rdx + 0xc0], cl
add rdx, rsi
cmp rdx, 0xe
jb 0x14024a1d0
mov byte [rsp + 0xce], dil
mov qword [rsp + 0x6a0], rdi
mov qword [rsp + 0x6b0], rdi
mov qword [rsp + 0x6b8], r12
lea rcx, [rsp + 0xc0]
mov rax, r13
mov r14, qword [rsp + 0x1d60]
inc rax
cmp byte [rcx + rax], dil
jne 0x14024a223
mov qword [rsp + 0x1d68], rax
lea rcx, [rsp + 0x6a0]
cmp rax, r12
ja 0x14024a26c
mov qword [rsp + 0x6b0], rax
mov r8, rax
lea rdx, [rsp + 0xc0]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov rax, qword [rsp + 0x1d68]
mov byte [rsp + rax + 0x6a0], dil
jmp 0x14024a27d
lea r9, [rsp + 0xc0]
mov rdx, rax
call fcn.1400ada10
nop
mov dword [rsp + 0x78], r12d
mov eax, dword [rsp + 0x78]
xor al, 0x6b
mov byte [rsp + 0x7c], al
mov eax, dword [rsp + 0x78]
add al, sil
xor al, 0x65
mov byte [rsp + 0x7d], al
mov eax, dword [rsp + 0x78]
add al, 2
xor al, 0x72
mov byte [rsp + 0x7e], al
mov eax, dword [rsp + 0x78]
add al, 3
xor al, 0x6e
mov byte [rsp + 0x7f], al
mov eax, dword [rsp + 0x78]
add al, 4
xor al, 0x65
mov byte [rsp + 0x80], al
mov eax, dword [rsp + 0x78]
add al, 5
xor al, 0x6c
mov byte [rsp + 0x81], al
mov eax, dword [rsp + 0x78]
add al, 6
xor al, 0x33
mov byte [rsp + 0x82], al
mov eax, dword [rsp + 0x78]
add al, 7
xor al, 0x32
mov byte [rsp + 0x83], al
xor eax, eax
mov byte [rsp + 0x84], al
mov al, byte [rsp + 0x7c]
mov rdx, rdi
mov al, byte [rsp + rdx + 0x7c]
mov ecx, dword [rsp + 0x78]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x7c], cl
add rdx, rsi
cmp rdx, rbx
jb 0x14024a2fd
mov byte [rsp + 0x84], dil
mov qword [rsp + 0x608], rdi
mov qword [rsp + 0x618], rdi
mov qword [rsp + 0x620], r12
mov byte [rsp + 0x608], dil
lea rcx, [rsp + 0x7c]
mov rax, r13
inc rax
cmp byte [rcx + rax], dil
jne 0x14024a345
mov qword [rsp + 0x1d68], rax
lea rcx, [rsp + 0x608]
cmp rax, r12
ja 0x14024a38b
mov qword [rsp + 0x618], rax
mov r8, rax
lea rdx, [rsp + 0x7c]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov rax, qword [rsp + 0x1d68]
mov byte [rsp + rax + 0x608], dil
jmp 0x14024a399
lea r9, [rsp + 0x7c]
mov rdx, rax
call fcn.1400ada10
nop
lea rdx, [rsp + 0x608]
lea rcx, [rsp + 0x928]
call fcn.1401a82ac
nop
mov qword [rsp + 0x20], rdi
mov r9b, sil
lea r8, [rsp + 0x6a0]
mov rdx, rax
lea rcx, [0x1402d7fe0]
call fcn.140260054
nop
mov rdx, qword [rsp + 0x620]
cmp rdx, 0x10
jb 0x14024a415
inc rdx
mov rcx, qword [rsp + 0x608]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14024a410
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14024a410
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14027b384
mov qword [rsp + 0x618], rdi
mov qword [rsp + 0x620], r12
mov byte [rsp + 0x608], dil
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rsp + 0x7c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
mov r8, r12
xor edx, edx
lea rcx, [rsp + 0xc0]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x14028f6e4]
call fcn.14027b36c
nop
lea rcx, [0x1402d8a98]
call fcn.14027b4e0
lea rcx, [0x1402d7ff8]
cmp qword [0x1402d8010], 0x10
cmovae rcx, qword [0x1402d7ff8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
jne 0x14024a4c0
lea rcx, [0x1402d7ff8]
cmp qword [0x1402d8010], 0x10
cmovae rcx, qword [0x1402d7ff8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x1402d7ff0], rax
mov r8, rax
lea rdx, [0x1402d7ff8]
call fcn.1400bc1a0
lea rax, [rsp + 0x648]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x810]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x8080004
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0xd00]
xor ecx, ecx
call qword [0x1402d7fe8]
test eax, eax
setne byte [rsp + 0x1d68]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x5d8], eax
cmp qword [rsp + 0x380], rdi
je 0x14024a5d0
cmp qword [rsp + 0x290], r13
je 0x14024a5d0
lea rdx, str._t_n_v_f_r
lea rcx, [rsp + 0x888]
call fcn.1400ac71c
nop
lea r8, [rsp + 0x888]
lea rdx, [rsp + 0x370]
lea rcx, [rsp + 0x968]
call fcn.14017544c
lea rcx, [rsp + 0x968]
call fcn.1400ac668
nop
lea rcx, [rsp + 0x888]
call fcn.1400ac668
mov dword [rsp + 0x5d0], edi
mov eax, dword [rsp + 0x380]
lea r8d, [rax*2 + 2]
lea rdx, [rsp + 0x370]
cmp qword [rsp + 0x388], rbx
cmovae rdx, qword [rsp + 0x370]
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x5d0]
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0x640]
test rcx, rcx
je 0x14024a5ee
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rsp + 0x878], rdi
je 0x14024a618
cmp dword [rsp + 0x58], 0xffffffff
je 0x14024a618
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, qword [rsp + 0x878]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rsp + 0x5e0]
cmp rcx, r13
je 0x14024a62b
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x290]
cmp rcx, r13
je 0x14024a63e
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [rsp + 0x1d68], dil
jne 0x14024aaa3
mov eax, 0x59
mov dword [rsp + 0x214], eax
mov eax, dword [rsp + 0x214]
xor ax, 0x5b
mov word [rsp + 0x218], ax
mov eax, dword [rsp + 0x214]
add ax, si
mov edx, 0x21
xor ax, dx
mov word [rsp + 0x21a], ax
mov eax, dword [rsp + 0x214]
add ax, 2
xor ax, 0x5d
mov word [rsp + 0x21c], ax
mov eax, dword [rsp + 0x214]
add ax, 3
xor ax, r15w
mov word [rsp + 0x21e], ax
mov eax, dword [rsp + 0x214]
add ax, 4
xor ax, 0x53
mov word [rsp + 0x220], ax
mov eax, dword [rsp + 0x214]
add ax, 5
lea r8d, [rdx + 0x4f]
xor ax, r8w
mov word [rsp + 0x222], ax
mov eax, dword [rsp + 0x214]
add ax, 6
xor ax, 0x61
mov word [rsp + 0x224], ax
mov eax, dword [rsp + 0x214]
add ax, 7
xor ax, 0x77
mov word [rsp + 0x226], ax
mov eax, dword [rsp + 0x214]
add ax, bx
lea ecx, [rdx + 0x4d]
xor ax, cx
mov word [rsp + 0x228], ax
mov eax, dword [rsp + 0x214]
add ax, 9
lea r10d, [rdx + 0x48]
xor ax, r10w
mov word [rsp + 0x22a], ax
mov eax, dword [rsp + 0x214]
add ax, 0xa
xor ax, cx
mov word [rsp + 0x22c], ax
mov eax, dword [rsp + 0x214]
add ax, 0xb
xor ax, 0x67
mov word [rsp + 0x22e], ax
mov eax, dword [rsp + 0x214]
add ax, 0xc
xor ax, r15w
mov word [rsp + 0x230], ax
mov eax, dword [rsp + 0x214]
add ax, 0xd
lea r11d, [rdx + 0x42]
xor ax, r11w
mov word [rsp + 0x232], ax
mov eax, dword [rsp + 0x214]
add ax, 0xe
xor ax, 0x68
mov word [rsp + 0x234], ax
mov eax, dword [rsp + 0x214]
add ax, r12w
xor ax, r10w
mov word [rsp + 0x236], ax
mov eax, dword [rsp + 0x214]
add ax, 0x10
xor ax, 0x6c
mov word [rsp + 0x238], ax
mov eax, dword [rsp + 0x214]
add ax, 0x11
xor ax, 0x64
mov word [rsp + 0x23a], ax
mov eax, dword [rsp + 0x214]
add ax, 0x12
xor ax, r15w
mov word [rsp + 0x23c], ax
mov eax, dword [rsp + 0x214]
add ax, 0x13
xor ax, r8w
mov word [rsp + 0x23e], ax
mov eax, dword [rsp + 0x214]
add ax, 0x14
lea r8d, [rdx + 0x51]
xor ax, r8w
mov word [rsp + 0x240], ax
mov eax, dword [rsp + 0x214]
add ax, 0x15
lea r9d, [rdx + 0x4e]
xor ax, r9w
mov word [rsp + 0x242], ax
mov eax, dword [rsp + 0x214]
add ax, 0x16
xor ax, r11w
mov word [rsp + 0x244], ax
mov eax, dword [rsp + 0x214]
add ax, 0x17
xor ax, 0x65
mov word [rsp + 0x246], ax
mov eax, dword [rsp + 0x214]
add ax, 0x18
lea ecx, [rdx + 0x52]
xor ax, cx
mov word [rsp + 0x248], ax
mov eax, dword [rsp + 0x214]
add ax, 0x19
xor ax, cx
mov word [rsp + 0x24a], ax
mov eax, dword [rsp + 0x214]
add ax, 0x1a
xor ax, r15w
mov word [rsp + 0x24c], ax
mov eax, dword [rsp + 0x214]
add ax, 0x1b
xor ax, 0x46
mov word [rsp + 0x24e], ax
mov eax, dword [rsp + 0x214]
add ax, 0x1c
xor ax, 0x41
mov word [rsp + 0x250], ax
mov eax, dword [rsp + 0x214]
add ax, 0x1d
xor ax, 0x49
mov word [rsp + 0x252], ax
mov eax, dword [rsp + 0x214]
add ax, 0x1e
xor ax, 0x4c
mov word [rsp + 0x254], ax
mov eax, dword [rsp + 0x214]
add ax, 0x1f
lea r10d, [rdx + 0x24]
xor ax, r10w
mov word [rsp + 0x256], ax
mov eax, dword [rsp + 0x214]
add ax, r15w
xor ax, 0x44
mov word [rsp + 0x258], ax
mov eax, dword [rsp + 0x214]
add ax, dx
xor ax, 0x2e
mov word [rsp + 0x25a], ax
mov eax, dword [rsp + 0x214]
add ax, 0x22
xor ax, r15w
mov word [rsp + 0x25c], ax
mov eax, dword [rsp + 0x214]
add ax, 0x23
xor ax, r10w
mov word [rsp + 0x25e], ax
mov eax, dword [rsp + 0x214]
add ax, 0x24
xor ax, r8w
mov word [rsp + 0x260], ax
mov eax, dword [rsp + 0x214]
add ax, 0x25
xor ax, r8w
mov word [rsp + 0x262], ax
mov eax, dword [rsp + 0x214]
add ax, 0x26
xor ax, r9w
mov word [rsp + 0x264], ax
mov eax, dword [rsp + 0x214]
add ax, 0x27
xor ax, r8w
mov word [rsp + 0x266], ax
mov eax, dword [rsp + 0x214]
add ax, 0x28
xor ax, 0x3a
mov word [rsp + 0x268], ax
mov eax, dword [rsp + 0x214]
add ax, 0x29
xor ax, r15w
mov word [rsp + 0x26a], ax
xor eax, eax
mov word [rsp + 0x26c], ax
movzx eax, word [rsp + 0x218]
mov rdx, rdi
lea r11d, [r8 - 0x48]
movzx eax, word [rsp + rdx*2 + 0x218]
mov ecx, dword [rsp + 0x214]
add cx, dx
xor cx, ax
mov word [rsp + rdx*2 + 0x218], cx
add rdx, rsi
cmp rdx, r11
jb 0x14024aa4e
mov word [rsp + 0x26c], di
mov edx, dword [rsp + 0x5d8]
lea rcx, [rsp + 0x218]
call fcn.1400c4958
nop
mov r8d, 0x56
lea rcx, [rsp + 0x218]
jmp 0x1402484ef
mov r13d, dword [rsp + 0x58]
test r13d, r13d
je 0x14024b8f3
mov edx, dword [rsp + 0x658]
lea rcx, [rsp + 0x8e8]
call fcn.1401aedc0
nop
mov r8b, sil
xor edx, edx
mov rcx, rax
call fcn.1401b4898
mov dword [rsp + 0x1d68], eax
lea rcx, [rsp + 0x8e8]
call fcn.1400ac668
mov r10d, dword [rsp + 0x1d68]
cmp r10d, 0xffffffff
je 0x14024b1bd
cmp r10d, r13d
jne 0x14024b1c4
mov dword [rsp + 0x1d60], 0x71
mov ecx, dword [rsp + 0x1d60]
mov edx, 0x29
xor cx, dx
mov word [rsp + 0x1d64], cx
xor eax, eax
mov word [rsp + 0x1d66], ax
movzx eax, word [rsp + 0x1d64]
movzx eax, word [rsp + 0x1d64]
mov ecx, dword [rsp + 0x1d60]
xor cx, ax
mov word [rsp + 0x1d64], cx
mov word [rsp + 0x1d66], di
lea r13d, [rdx - 0xb]
mov dword [rsp + 0xd0], r13d
mov eax, dword [rsp + 0xd0]
xor ax, 0x5b
mov word [rsp + 0xd4], ax
mov eax, dword [rsp + 0xd0]
add ax, si
lea r9d, [rdx + 2]
xor ax, r9w
mov word [rsp + 0xd6], ax
mov eax, dword [rsp + 0xd0]
add ax, 2
xor ax, 0x5d
mov word [rsp + 0xd8], ax
mov eax, dword [rsp + 0xd0]
add ax, 3
xor ax, r15w
mov word [rsp + 0xda], ax
mov eax, dword [rsp + 0xd0]
add ax, 4
xor ax, 0x53
mov word [rsp + 0xdc], ax
mov eax, dword [rsp + 0xd0]
add ax, 5
lea r10d, [rdx + 0x47]
xor ax, r10w
mov word [rsp + 0xde], ax
mov eax, dword [rsp + 0xd0]
add ax, 6
xor ax, 0x61
mov word [rsp + 0xe0], ax
mov eax, dword [rsp + 0xd0]
add ax, 7
xor ax, 0x77
mov word [rsp + 0xe2], ax
mov eax, dword [rsp + 0xd0]
add ax, bx
xor ax, 0x6e
mov word [rsp + 0xe4], ax
mov eax, dword [rsp + 0xd0]
add ax, 9
mov r11w, 0x65
xor ax, r11w
mov word [rsp + 0xe6], ax
mov eax, dword [rsp + 0xd0]
add ax, 0xa
xor ax, 0x64
mov word [rsp + 0xe8], ax
mov eax, dword [rsp + 0xd0]
add ax, 0xb
xor ax, r15w
mov word [rsp + 0xea], ax
mov eax, dword [rsp + 0xd0]
add ax, 0xc
xor ax, 0x63
mov word [rsp + 0xec], ax
mov eax, dword [rsp + 0xd0]
add ax, 0xd
lea ebx, [rdx + 0x3f]
xor ax, bx
mov word [rsp + 0xee], ax
mov eax, dword [rsp + 0xd0]
add ax, 0xe
xor ax, 0x69
mov word [rsp + 0xf0], ax
mov eax, dword [rsp + 0xd0]
add ax, r12w
lea r8d, [rdx + 0x43]
xor ax, r8w
mov word [rsp + 0xf2], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x10
xor ax, 0x64
mov word [rsp + 0xf4], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x11
xor ax, r15w
mov word [rsp + 0xf6], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x12
xor ax, bx
mov word [rsp + 0xf8], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x13
lea ebx, [rdx + 0x38]
xor ax, bx
mov word [rsp + 0xfa], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x14
xor ax, 0x76
mov word [rsp + 0xfc], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x15
xor ax, r11w
mov word [rsp + 0xfe], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x16
xor ax, r15w
mov word [rsp + 0x100], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x17
xor ax, bx
mov word [rsp + 0x102], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x18
xor ax, r15w
mov word [rsp + 0x104], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x19
xor ax, r10w
mov word [rsp + 0x106], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x1a
lea ecx, [rdx + 0x49]
xor ax, cx
mov word [rsp + 0x108], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x1b
lea ebx, [rdx + 0x46]
xor ax, bx
mov word [rsp + 0x10a], ax
mov eax, dword [rsp + 0xd0]
add ax, word [rsp + 0x1d78]
xor ax, r10w
mov word [rsp + 0x10c], ax
mov eax, dword [rsp + 0xd0]
add ax, word [rsp + 0x94]
xor ax, r11w
mov word [rsp + 0x10e], ax
mov eax, dword [rsp + 0xd0]
add ax, r13w
xor ax, cx
mov word [rsp + 0x110], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x1f
xor ax, r8w
mov word [rsp + 0x112], ax
mov eax, dword [rsp + 0xd0]
add ax, r15w
xor ax, 0x79
mov word [rsp + 0x114], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x21
xor ax, r15w
mov word [rsp + 0x116], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x22
lea r13d, [rdx + 0x4a]
xor ax, r13w
mov word [rsp + 0x118], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x23
xor ax, r10w
mov word [rsp + 0x11a], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x24
xor ax, bx
mov word [rsp + 0x11c], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x25
xor ax, bx
mov word [rsp + 0x11e], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x26
xor ax, 0x66
mov word [rsp + 0x120], ax
mov eax, dword [rsp + 0xd0]
lea ebx, [rdx - 2]
add ax, bx
xor ax, r11w
mov word [rsp + 0x122], ax
mov eax, dword [rsp + 0xd0]
lea r10d, [rdx - 1]
add ax, r10w
xor ax, 0x64
mov word [rsp + 0x124], ax
mov eax, dword [rsp + 0xd0]
add ax, dx
xor ax, r15w
mov word [rsp + 0x126], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x2a
lea edx, [rcx - 0x22]
xor ax, dx
mov word [rsp + 0x128], ax
mov eax, dword [rsp + 0xd0]
add ax, r9w
xor ax, 0x61
mov word [rsp + 0x12a], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x2c
xor ax, cx
mov word [rsp + 0x12c], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x2d
xor ax, r11w
mov word [rsp + 0x12e], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x2e
xor ax, 0x6e
mov word [rsp + 0x130], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x2f
lea r8d, [r9 + 0x49]
xor ax, r8w
mov word [rsp + 0x132], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x30
xor ax, r15w
mov word [rsp + 0x134], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x31
xor ax, dx
mov word [rsp + 0x136], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x32
xor ax, 0x49
mov word [rsp + 0x138], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x33
xor ax, 0x44
mov word [rsp + 0x13a], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x34
xor ax, r15w
mov word [rsp + 0x13c], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x35
xor ax, r8w
mov word [rsp + 0x13e], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x36
xor ax, 0x6f
mov word [rsp + 0x140], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x37
xor ax, r15w
mov word [rsp + 0x142], ax
mov eax, dword [rsp + 0xd0]
add ax, 0x38
xor ax, r10w
mov word [rsp + 0x144], ax
xor eax, eax
mov word [rsp + 0x146], ax
movzx eax, word [rsp + 0xd4]
mov rdx, rdi
lea r8d, [r9 + 0xe]
movzx eax, word [rsp + rdx*2 + 0xd4]
mov ecx, dword [rsp + 0xd0]
add cx, dx
xor cx, ax
mov word [rsp + rdx*2 + 0xd4], cx
add rdx, rsi
cmp rdx, r8
jb 0x14024b0bf
mov word [rsp + 0x146], di
cmp byte [0x1402cccc1], dil
je 0x14024b18d
lea r9, [rsp + 0x1d64]
mov r8d, dword [rsp + 0x1d68]
lea rdx, [rsp + 0xd4]
lea rcx, [rsp + 0x758]
call fcn.140279b70
nop
lea rdx, [rsp + 0x758]
mov cl, sil
call fcn.140173fb4
nop
mov rdx, qword [rsp + 0x770]
cmp rdx, 0x10
jb 0x14024b175
inc rdx
mov rcx, qword [rsp + 0x758]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14024b170
add rdx, rbx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14024b170
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14027b384
mov qword [rsp + 0x768], rdi
mov qword [rsp + 0x770], r12
mov byte [rsp + 0x758], dil
xor edx, edx
lea r8d, [rdx + 0x74]
lea rcx, [rsp + 0xd4]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
mov r8d, 4
lea rcx, [rsp + 0x1d64]
xor edx, edx
call qword [sym.imp.VCRUNTIME140.dll_memset]
jmp 0x14024b8f9
mov dword [rsp + 0x1d68], edi
mov dword [rsp + 0x328], 0x1e
mov r8d, 0x37
mov word [rsp + 0x32c], r8w
lea r9d, [r8 - 7]
mov word [rsp + 0x32e], r9w
lea eax, [r8 + 7]
mov word [rsp + 0x330], ax
lea ecx, [rax + 0xc]
mov word [rsp + 0x332], cx
lea ecx, [rax + 0x38]
mov word [rsp + 0x334], cx
lea r11d, [r8 + 0x40]
mov word [rsp + 0x336], r11w
lea ecx, [rax + 0x2f]
mov word [rsp + 0x338], cx
mov word [rsp + 0x33a], ax
lea edx, [rax + 0x3f]
mov word [rsp + 0x33c], dx
lea r10d, [r8 + 0x48]
mov word [rsp + 0x33e], r10w
lea edx, [rax + 0x32]
mov word [rsp + 0x340], dx
mov word [rsp + 0x342], ax
lea edx, [rax + 0x3e]
mov word [rsp + 0x344], dx
lea edx, [rax + 0x3d]
mov word [rsp + 0x346], dx
mov word [rsp + 0x348], ax
mov word [rsp + 0x34a], r10w
mov word [rsp + 0x34c], ax
lea r13d, [r8 + 0x41]
mov word [rsp + 0x34e], r13w
mov word [rsp + 0x350], r10w
lea r10d, [r8 + 0x3b]
mov word [rsp + 0x352], r10w
mov word [rsp + 0x354], cx
mov word [rsp + 0x356], dx
mov word [rsp + 0x358], ax
lea r10d, [r8 + 0x37]
mov word [rsp + 0x35a], r10w
lea eax, [rcx + 4]
mov word [rsp + 0x35c], ax
mov word [rsp + 0x35e], cx
mov word [rsp + 0x360], r11w
lea eax, [rcx - 3]
mov word [rsp + 0x362], ax
mov word [rsp + 0x364], r11w
lea ecx, [rdx - 0x13]
mov word [rsp + 0x366], cx
mov word [rsp + 0x368], dx
mov word [rsp + 0x36a], r9w
xor eax, eax
mov word [rsp + 0x36c], ax
movzx eax, word [rsp + 0x32c]
mov r9, rdi
movzx eax, word [rsp + r9*2 + 0x32c]
mov ecx, dword [rsp + 0x328]
xor cx, ax
mov word [rsp + r9*2 + 0x32c], cx
add r9, rsi
cmp r9, r15
jb 0x14024b330
mov word [rsp + 0x36c], di
mov dword [rsp + 0x2b0], 0x42
mov eax, 0x6b
mov word [rsp + 0x2b4], ax
lea ecx, [rax - 9]
mov word [rsp + 0x2b6], cx
mov word [rsp + 0x2b8], r15w
mov word [rsp + 0x2ba], r8w
lea r8d, [rax - 0x35]
mov word [rsp + 0x2bc], r8w
mov word [rsp + 0x2be], cx
lea eax, [rcx - 0x37]
mov word [rsp + 0x2c0], ax
lea r9d, [rcx - 0x31]
mov word [rsp + 0x2c2], r9w
mov word [rsp + 0x2c4], cx
mov word [rsp + 0x2c6], ax
lea r11d, [rcx - 0x36]
mov word [rsp + 0x2c8], r11w
mov word [rsp + 0x2ca], r9w
mov word [rsp + 0x2cc], r8w
lea eax, [rcx - 0x3b]
mov word [rsp + 0x2ce], ax
lea eax, [rcx - 0x3f]
mov word [rsp + 0x2d0], ax
lea ebx, [rcx - 0x3c]
mov word [rsp + 0x2d2], bx
mov word [rsp + 0x2d4], r13w
mov word [rsp + 0x2d6], cx
lea r13d, [rcx + 8]
mov word [rsp + 0x2d8], r13w
xor eax, eax
mov word [rsp + 0x2da], ax
movzx eax, word [rsp + 0x2b4]
mov r8, rdi
movzx eax, word [rsp + r8*2 + 0x2b4]
mov ecx, dword [rsp + 0x2b0]
xor cx, ax
mov word [rsp + r8*2 + 0x2b4], cx
add r8, rsi
cmp r8, 0x13
jb 0x14024b441
mov word [rsp + 0x2da], di
mov eax, 0x61
mov word [rsp + 0x4b8], ax
lea ecx, [rax - 0x2e]
mov word [rsp + 0x4ba], cx
lea eax, [rcx + 0x30]
mov word [rsp + 0x4bc], ax
mov word [rsp + 0x4be], bx
lea eax, [rcx + 0x26]
mov word [rsp + 0x4c0], ax
lea ecx, [rax + 0x1d]
mov word [rsp + 0x4c2], cx
lea r8d, [rax + 0xe]
mov word [rsp + 0x4c4], r8w
lea eax, [rcx + 7]
mov word [rsp + 0x4c6], ax
lea r14d, [rcx - 2]
mov word [rsp + 0x4c8], r14w
lea r11d, [rcx - 0xb]
mov word [rsp + 0x4ca], r11w
mov word [rsp + 0x4cc], r13w
mov word [rsp + 0x4ce], bx
lea eax, [rcx - 0xd]
mov word [rsp + 0x4d0], ax
mov word [rsp + 0x4d2], r10w
lea eax, [rcx - 7]
mov word [rsp + 0x4d4], ax
lea r9d, [rcx - 4]
mov word [rsp + 0x4d6], r9w
mov word [rsp + 0x4d8], r13w
mov word [rsp + 0x4da], bx
lea r13d, [rcx - 3]
mov word [rsp + 0x4dc], r13w
mov word [rsp + 0x4de], r8w
lea eax, [rcx + 9]
mov word [rsp + 0x4e0], ax
mov word [rsp + 0x4e2], bx
mov word [rsp + 0x4e4], r14w
lea eax, [rcx - 1]
mov word [rsp + 0x4e6], ax
lea eax, [rcx + 4]
mov word [rsp + 0x4e8], ax
mov word [rsp + 0x4ea], bx
mov word [rsp + 0x4ec], r10w
mov word [rsp + 0x4ee], r8w
lea r8d, [rcx + 6]
mov word [rsp + 0x4f0], r8w
mov word [rsp + 0x4f2], r11w
mov word [rsp + 0x4f4], bx
lea r14d, [rcx - 0x20]
mov word [rsp + 0x4f6], r14w
lea r8d, [rcx - 0xf]
mov word [rsp + 0x4f8], r8w
lea r8d, [rcx + 2]
mov word [rsp + 0x4fa], r8w
mov word [rsp + 0x4fc], r11w
lea r8d, [rcx - 2]
mov word [rsp + 0x4fe], r8w
mov word [rsp + 0x500], ax
mov word [rsp + 0x502], bx
mov word [rsp + 0x504], r14w
lea eax, [rcx - 0x27]
mov word [rsp + 0x506], ax
lea eax, [rcx - 0x2c]
mov word [rsp + 0x508], ax
mov word [rsp + 0x50a], bx
lea r8d, [rcx + 3]
mov word [rsp + 0x50c], r8w
mov word [rsp + 0x50e], cx
lea eax, [rcx - 1]
mov word [rsp + 0x510], ax
mov word [rsp + 0x512], ax
lea eax, [rcx - 0xa]
mov word [rsp + 0x514], ax
mov word [rsp + 0x516], r11w
lea r14d, [rcx - 0xc]
mov word [rsp + 0x518], r14w
lea ecx, [rax - 0x3a]
mov word [rsp + 0x51a], cx
mov word [rsp + 0x51c], bx
mov word [rsp + 0x51e], r8w
mov word [rsp + 0x520], r10w
lea eax, [rcx + 0x43]
mov word [rsp + 0x522], ax
mov word [rsp + 0x524], dx
mov word [rsp + 0x526], r9w
mov word [rsp + 0x528], r14w
mov word [rsp + 0x52a], bx
lea eax, [rcx + 0x36]
mov word [rsp + 0x52c], ax
mov word [rsp + 0x52e], r11w
lea eax, [rcx + 0xe]
mov word [rsp + 0x530], ax
mov word [rsp + 0x532], bx
lea eax, [rcx - 4]
mov word [rsp + 0x534], ax
mov word [rsp + 0x536], di
movzx eax, word [rsp + 0x4b8]
mov rcx, rdi
lea edx, [r11 - 0x2c]
mov r14, qword [rsp + 0x1d60]
lea r8d, [r11 - 0x65]
movzx eax, word [rsp + rcx*2 + 0x4b8]
sub ax, r8w
mov word [rsp + rcx*2 + 0x4b8], ax
add rcx, rsi
cmp rcx, rdx
jb 0x14024b713
cmp byte [0x1402cccc1], dil
je 0x14024b8b4
lea rcx, [rsp + 0xc10]
call fcn.1400ab8b4
nop
lea rdx, [rsp + 0x4b8]
lea rcx, [rsp + 0xc10]
call fcn.1400ad624
mov edx, dword [rsp + 0x58]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_unsigned_short_int__struct_std::char_traits_unsigned_short_int______ptr64___cdecl_std::basic_ostream_unsigned_short_int__struct_std::char_traits_unsigned_short_int__::operator___unsigned_int____ptr64]
mov rcx, rax
lea rdx, [rsp + 0x2b4]
call fcn.1400ad624
mov edx, dword [rsp + 0x1d68]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_unsigned_short_int__struct_std::char_traits_unsigned_short_int______ptr64___cdecl_std::basic_ostream_unsigned_short_int__struct_std::char_traits_unsigned_short_int__::operator___unsigned_int____ptr64]
mov rcx, rax
lea rdx, [rsp + 0x32c]
call fcn.1400ad624
lea rdx, [rsp + 0x6c0]
lea rcx, [rsp + 0xc18]
call fcn.1400aca50
mov ebx, dword [rsp + 0x54]
bts ebx, 8
mov dword [rsp + 0x54], ebx
lea rcx, [rsp + 0x6c0]
mov r9d, 8
cmp qword [rsp + 0x6d8], r9
cmovae rcx, qword [rsp + 0x6c0]
mov rax, qword [rsp + 0x6d0]
lea r8, [rcx + rax*2]
lea rdx, [rsp + 0x6c0]
cmovae rdx, qword [rsp + 0x6c0]
lea rcx, [rsp + 0x718]
call fcn.1400af5d0
bts ebx, 7
mov dword [rsp + 0x54], ebx
lea rdx, [0x140290d28]
lea rcx, [rsp + 0x718]
call fcn.1400ace7c
nop
lea rcx, [rsp + 0x6c0]
call fcn.1400ac668
nop
lea rcx, [rsp + 0xc10]
call fcn.1400aa2f8
lea rdx, [rsp + 0x718]
mov cl, sil
call fcn.140173fb4
btr ebx, 7
mov dword [rsp + 0x54], ebx
mov rdx, qword [rsp + 0x730]
cmp rdx, 0x10
jb 0x14024b89c
inc rdx
mov rcx, qword [rsp + 0x718]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14024b897
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14024b897
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14027b384
mov qword [rsp + 0x728], rdi
mov qword [rsp + 0x730], r12
mov byte [rsp + 0x718], dil
xor edx, edx
mov r8d, 0x80
lea rcx, [rsp + 0x4b8]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x28]
lea rcx, [rsp + 0x2b4]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
mov r8d, 0x42
lea rcx, [rsp + 0x32c]
jmp 0x14024b1b0
mov r13d, 0x73
mov ebx, 0x29
mov dword [rsp + 0x58], 0x78
lea eax, [rbx + 0x28]
mov word [rsp + 0x5c], ax
xor eax, eax
mov word [rsp + 0x5e], ax
movzx eax, word [rsp + 0x5c]
movzx eax, word [rsp + 0x5c]
mov ecx, dword [rsp + 0x58]
xor cx, ax
mov word [rsp + 0x5c], cx
mov word [rsp + 0x5e], di
mov edx, dword [rsp + 0x658]
lea rcx, [rsp + 0x908]
call fcn.1401aedc0
mov r9, rax
mov dword [rsp + 0x270], esi
lea edx, [rbx - 8]
mov word [rsp + 0x274], dx
mov word [rsp + 0x276], bx
xor eax, eax
mov word [rsp + 0x278], ax
movzx ecx, word [rsp + 0x274]
mov r8, rdi
lea r10d, [rbx - 0x27]
movzx eax, word [rsp + r8*2 + 0x274]
mov ecx, dword [rsp + 0x270]
xor cx, ax
mov word [rsp + r8*2 + 0x274], cx
add r8, rsi
cmp r8, r10
jb 0x14024b97a
mov word [rsp + 0x278], di
mov dword [rsp + 0x1c0], r12d
mov eax, dword [rsp + 0x1c0]
xor ax, 0x5b
mov word [rsp + 0x1c4], ax
mov eax, dword [rsp + 0x1c0]
add ax, si
xor ax, 0x2b
mov word [rsp + 0x1c6], ax
mov eax, dword [rsp + 0x1c0]
add ax, r10w
xor ax, 0x5d
mov word [rsp + 0x1c8], ax
mov eax, dword [rsp + 0x1c0]
add ax, 3
xor ax, r15w
mov word [rsp + 0x1ca], ax
mov eax, dword [rsp + 0x1c0]
add ax, 4
xor ax, 0x50
mov word [rsp + 0x1cc], ax
mov eax, dword [rsp + 0x1c0]
add ax, 5
xor ax, 0x72
mov word [rsp + 0x1ce], ax
mov eax, dword [rsp + 0x1c0]
add ax, 6
xor ax, 0x6f
mov word [rsp + 0x1d0], ax
mov eax, dword [rsp + 0x1c0]
add ax, 7
xor ax, 0x63
mov word [rsp + 0x1d2], ax
mov eax, dword [rsp + 0x1c0]
add ax, 8
mov r10w, 0x65
xor ax, r10w
mov word [rsp + 0x1d4], ax
mov eax, dword [rsp + 0x1c0]
add ax, 9
xor ax, r13w
mov word [rsp + 0x1d6], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0xa
xor ax, r13w
mov word [rsp + 0x1d8], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0xb
xor ax, r15w
mov word [rsp + 0x1da], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0xc
xor ax, r13w
mov word [rsp + 0x1dc], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0xd
xor ax, 0x70
mov word [rsp + 0x1de], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0xe
xor ax, 0x61
mov word [rsp + 0x1e0], ax
mov eax, dword [rsp + 0x1c0]
add ax, r12w
mov r8d, 0x77
xor ax, r8w
mov word [rsp + 0x1e2], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0x10
xor ax, 0x6e
mov word [rsp + 0x1e4], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0x11
xor ax, r15w
mov word [rsp + 0x1e6], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0x12
xor ax, r13w
mov word [rsp + 0x1e8], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0x13
xor ax, 0x75
mov word [rsp + 0x1ea], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0x14
lea r11d, [r8 - 0x14]
xor ax, r11w
mov word [rsp + 0x1ec], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0x15
xor ax, r11w
mov word [rsp + 0x1ee], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0x16
xor ax, r10w
mov word [rsp + 0x1f0], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0x17
xor ax, r10w
mov word [rsp + 0x1f2], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0x18
lea r11d, [r8 - 0x13]
xor ax, r11w
mov word [rsp + 0x1f4], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0x19
xor ax, r10w
mov word [rsp + 0x1f6], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0x1a
xor ax, r11w
mov word [rsp + 0x1f8], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0x1b
xor ax, 0x2e
mov word [rsp + 0x1fa], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0x1c
xor ax, r15w
mov word [rsp + 0x1fc], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0x1d
lea ebx, [r8 - 0x29]
xor ax, bx
mov word [rsp + 0x1fe], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0x1e
xor ax, r10w
mov word [rsp + 0x200], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0x1f
xor ax, r8w
mov word [rsp + 0x202], ax
mov eax, dword [rsp + 0x1c0]
add ax, r15w
xor ax, r15w
mov word [rsp + 0x204], ax
mov eax, dword [rsp + 0x1c0]
add ax, dx
xor ax, 0x50
mov word [rsp + 0x206], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0x22
xor ax, 0x49
mov word [rsp + 0x208], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0x23
xor ax, 0x44
mov word [rsp + 0x20a], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0x24
xor ax, 0x3a
mov word [rsp + 0x20c], ax
mov eax, dword [rsp + 0x1c0]
add ax, 0x25
xor ax, r15w
mov word [rsp + 0x20e], ax
xor eax, eax
mov word [rsp + 0x210], ax
movzx eax, word [rsp + 0x1c4]
mov rdx, rdi
movzx eax, word [rsp + rdx*2 + 0x1c4]
mov ecx, dword [rsp + 0x1c0]
add cx, dx
xor cx, ax
mov word [rsp + rdx*2 + 0x1c4], cx
add rdx, rsi
cmp rdx, 0x26
jb 0x14024bd3d
mov word [rsp + 0x210], di
lea rax, [rsp + 0x5c]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x274]
mov edx, dword [rsp + 0x658]
lea rcx, [rsp + 0x1c4]
call fcn.1400c47ac
nop
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x1c4]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 6]
lea rcx, [rsp + 0x274]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 4]
lea rcx, [rsp + 0x5c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
movups xmm7, xmmword [rsp + 0x648]
movsd xmm6, qword [rsp + 0x658]
lea rcx, [rsp + 0x370]
call fcn.1400ac668
movups xmmword [r14], xmm7
movsd qword [r14 + 0x10], xmm6
mov rax, r14
lea r11, [rsp + 0x1d20]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.14009f088
nop
call fcn.14009f088
int3