Function at 0x1402963a0
Capabilities:
Access peb ldr_data
Check os version
Create thread
Encode data using xor
Hash data using fnv
Read file on windows
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4910]
mov eax, 0x4a10
call fcn.140314660
sub rsp, rax
movaps xmmword [rsp + 0x4a00], xmm6
movaps xmmword [rsp + 0x49f0], xmm7
mov rax, qword [0x140398130]
xor rax, rsp
mov qword [rbp + 0x48e0], rax
mov qword [rbp - 0x40], rcx
xor r12d, r12d
xor eax, eax
mov byte [rbp - 0x5c], al
mov byte [rbp - 0x4c], al
lea rdx, [rbp + 0x4f0]
lea rcx, [rbp - 0x4c]
call fcn.1402778a0
mov r9, rax
mov byte [rax + 0x10], r12b
mov r10d, r12d
lea r8, [rax + 0xc]
nop dword [rax + rax]
lea esi, [r10 + r10*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, r10b
add al, al
lea ebx, [rax + r10]
movzx r11d, bl
add r11b, byte [r9 + 0x13]
xor r11b, dl
mov byte [r8], r11b
xor dl, dl
lea eax, [rsi + 1]
movzx edi, byte [rax + r9]
nop
movzx eax, dil
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140296466
inc dl
cmp dl, 4
jne 0x140296450
jmp 0x140296475
movsx ecx, r11b
movzx eax, byte [r9 + 0x16]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r11d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140296494
inc cl
cmp cl, 8
jne 0x140296482
jmp 0x1402964a3
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x15]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r11 + r9]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1402964c2
inc cl
cmp cl, 5
jne 0x1402964b0
jmp 0x1402964d1
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x14]
btc ecx, eax
mov byte [r8], cl
add bl, byte [r9 + 0x12]
xor byte [r8], bl
inc r10d
inc r8
cmp r10d, 4
jne 0x140296420
lea rdx, [r9 + 0xc]
lea rcx, [rbp + 0x6d0]
call fcn.140086d40
mov r15, rax
lea rdx, [rbp + 0x418]
lea rcx, [rbp - 0x5c]
call fcn.140277870
mov r9, rax
lea r14, [rax + 9]
mov byte [r14 + 3], 0
mov r10d, r12d
mov r8, r14
nop dword [rax]
lea esi, [r10 + r10*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, r10b
add al, al
lea ebx, [rax + r10]
movzx r11d, bl
add r11b, byte [r9 + 0xf]
xor r11b, dl
mov byte [r8], r11b
xor dl, dl
lea eax, [rsi + 1]
movzx edi, byte [rax + r9]
nop
movzx eax, dil
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140296566
inc dl
cmp dl, 4
jne 0x140296550
jmp 0x140296575
movsx ecx, r11b
movzx eax, byte [r9 + 0x12]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r11d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140296594
inc cl
cmp cl, 8
jne 0x140296582
jmp 0x1402965a3
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x11]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r11 + r9]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1402965c2
inc cl
cmp cl, 5
jne 0x1402965b0
jmp 0x1402965d1
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x10]
btc ecx, eax
mov byte [r8], cl
add bl, byte [r9 + 0xe]
xor byte [r8], bl
inc r10d
inc r8
cmp r10d, 3
jne 0x140296520
lea edx, [r10 - 2]
mov rcx, r15
call fcn.140081690
movzx edi, byte [rax]
movzx ebx, byte [r14]
lea rcx, [rbp + 0x6d0]
call fcn.140087070
cmp bl, dil
jne 0x1402970d6
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x1402966b9
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x1402966b9
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rsi + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
mov r10d, 0x7333d7
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402966b4
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140296680
cmp r10d, 0xe63a9383
je 0x1402966c1
test r11d, r11d
jne 0x140296660
mov rax, qword [rax]
jmp 0x140296630
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov ecx, dword [rcx + rax*4]
add rcx, rbx
call rcx
mov r13d, eax
xor eax, eax
mov byte [rbp - 0x49], al
lea rdx, [rbp + 0x170]
lea rcx, [rbp - 0x49]
call fcn.1402778d0
mov r9, rax
mov byte [rax + 8], 0
mov r11d, r12d
lea r8, [rax + 6]
nop dword [rax]
nop word [rax + rax]
lea esi, [r11 + r11*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, r11b
add al, al
lea edi, [rax + r11]
movzx r10d, dil
add r10b, byte [r9 + 0xb]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx ebx, byte [rax + r9]
nop
movzx eax, bl
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140296755
inc dl
cmp dl, 4
jne 0x140296740
jmp 0x140296764
movsx ecx, r10b
movzx eax, byte [r9 + 0xe]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140296783
inc cl
cmp cl, 8
jne 0x140296771
jmp 0x140296792
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0xd]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
nop dword [rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1402967b2
inc cl
cmp cl, 5
jne 0x1402967a0
jmp 0x1402967c1
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0xc]
btc ecx, eax
mov byte [r8], cl
add dil, byte [r9 + 0xa]
xor byte [r8], dil
inc r11d
inc r8
cmp r11d, 2
jne 0x140296710
mov eax, 0xaaaaaaab
mul r13d
shr edx, 1
lea eax, [rdx + rdx*2]
mov ecx, r13d
sub ecx, eax
mov r15d, ecx
cmp byte [rcx + r9 + 6], 0x5d
je 0x1402970d6
xor eax, eax
mov byte [rbp - 0x48], al
lea rdx, [rbp + 0xa8]
lea rcx, [rbp - 0x48]
call fcn.1402778f0
mov rdx, rax
mov byte [rax + 4], 0
movzx r9d, byte [rax + 7]
xor r9b, byte [rax]
mov byte [rax + 3], r9b
xor cl, cl
movzx r8d, byte [rax + 1]
nop dword [rax + rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140296843
inc cl
cmp cl, 4
jne 0x140296830
jmp 0x140296851
movsx ecx, r9b
movzx eax, byte [rdx + 0xa]
btc ecx, eax
mov byte [rdx + 3], cl
mov cl, 5
movzx r8d, byte [rdx + 2]
nop dword [rax + rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140296873
inc cl
cmp cl, 8
jne 0x140296860
jmp 0x140296881
movsx ecx, byte [rdx + 3]
movzx eax, byte [rdx + 9]
btc ecx, eax
mov byte [rdx + 3], cl
xor cl, cl
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140296896
inc cl
cmp cl, 5
jne 0x140296883
jmp 0x1402968a4
movsx ecx, byte [rdx + 3]
movzx eax, byte [rdx + 8]
btc ecx, eax
mov byte [rdx + 3], cl
movzx eax, byte [rdx + 6]
xor byte [rdx + 3], al
mov r12, r13
mov rax, r13
and eax, 1
cmp byte [rax + rdx + 3], 0x20
je 0x1402970d3
xor eax, eax
mov byte [rsp + 0x44], al
lea rdx, [rbp + 0x180]
lea rcx, [rsp + 0x44]
call fcn.140277910
mov r9, rax
mov byte [rax + 8], 0
xor r11d, r11d
lea r8, [rax + 6]
nop dword [rax]
nop dword [rax + rax]
lea esi, [r11 + r11*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, r11b
add al, al
lea edi, [rax + r11]
movzx r10d, dil
add r10b, byte [r9 + 0xb]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx ebx, byte [rax + r9]
nop
movzx eax, bl
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140296935
inc dl
cmp dl, 4
jne 0x140296920
jmp 0x140296944
movsx ecx, r10b
movzx eax, byte [r9 + 0xe]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140296963
inc cl
cmp cl, 8
jne 0x140296951
jmp 0x140296972
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0xd]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
nop dword [rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140296992
inc cl
cmp cl, 5
jne 0x140296980
jmp 0x1402969a1
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0xc]
btc ecx, eax
mov byte [r8], cl
add dil, byte [r9 + 0xa]
xor byte [r8], dil
inc r11d
inc r8
cmp r11d, 2
jne 0x1402968f0
cmp byte [r15 + r9 + 6], 0xa
je 0x1402970d3
xor eax, eax
mov byte [rsp + 0x45], al
lea rdx, [rbp + 0x3a0]
lea rcx, [rsp + 0x45]
call fcn.140277930
mov r9, rax
mov byte [rax + 0xc], 0
xor r11d, r11d
lea r8, [rax + 9]
nop dword [rax]
lea esi, [r11 + r11*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, r11b
add al, al
lea edi, [rax + r11]
movzx r10d, dil
add r10b, byte [r9 + 0xf]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx ebx, byte [rax + r9]
nop
movzx eax, bl
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140296a35
inc dl
cmp dl, 4
jne 0x140296a20
jmp 0x140296a44
movsx ecx, r10b
movzx eax, byte [r9 + 0x12]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140296a63
inc cl
cmp cl, 8
jne 0x140296a51
jmp 0x140296a72
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x11]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
nop dword [rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140296a92
inc cl
cmp cl, 5
jne 0x140296a80
jmp 0x140296aa1
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x10]
btc ecx, eax
mov byte [r8], cl
add dil, byte [r9 + 0xe]
xor byte [r8], dil
inc r11d
inc r8
cmp r11d, 3
jne 0x1402969f0
and r12d, r11d
cmp byte [r12 + r9 + 9], 0x2e
je 0x1402970d3
cmp r13d, 0xad820032
ja 0x1402970d3
inc r13d
xor r13d, 0xad820032
cmp r13d, 0x8dde74ea
jne 0x1402970d3
xor eax, eax
mov byte [rsp + 0x46], al
lea rdx, [rbp + 0x448]
lea rcx, [rsp + 0x46]
call fcn.140277950
mov r9, rax
mov byte [rax + 0xc], 0
xor r12d, r12d
mov r11d, r12d
lea r8, [rax + 9]
nop dword [rax]
nop word [rax + rax]
lea esi, [r11 + r11*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, r11b
add al, al
lea ebx, [rax + r11]
movzx r10d, bl
add r10b, byte [r9 + 0xf]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx edi, byte [rax + r9]
nop
movzx eax, dil
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140296b66
inc dl
cmp dl, 4
jne 0x140296b50
jmp 0x140296b75
movsx ecx, r10b
movzx eax, byte [r9 + 0x12]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140296b94
inc cl
cmp cl, 8
jne 0x140296b82
jmp 0x140296ba3
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x11]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140296bc2
inc cl
cmp cl, 5
jne 0x140296bb0
jmp 0x140296bd1
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x10]
btc ecx, eax
mov byte [r8], cl
add bl, byte [r9 + 0xe]
xor byte [r8], bl
inc r11d
inc r8
cmp r11d, 3
jne 0x140296b20
cmp byte [r9 + 9], r11b
jne 0x140296ccd
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x140296c99
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x140296c99
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rsi + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
mov r10d, 0x163fc1ba
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140296c94
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140296c60
cmp r10d, 0x6669f02
je 0x140296ca1
test r11d, r11d
jne 0x140296c40
mov rax, qword [rax]
jmp 0x140296c10
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r8d, dword [rcx + rax*4]
add r8, rbx
mov edx, 0x3cadc558
mov ecx, 0x6f3d8698
call r8
jmp 0x1402970d6
xor eax, eax
mov byte [rsp + 0x47], al
lea rdx, [rbp + 0x460]
lea rcx, [rsp + 0x47]
call fcn.140277980
mov r9, rax
mov byte [rax + 0xc], r12b
mov r11d, r12d
lea r8, [rax + 9]
nop dword [rax]
nop word [rax + rax]
lea esi, [r11 + r11*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, r11b
add al, al
lea ebx, [rax + r11]
movzx r10d, bl
add r10b, byte [r9 + 0xf]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx edi, byte [rax + r9]
nop
movzx eax, dil
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140296d46
inc dl
cmp dl, 4
jne 0x140296d30
jmp 0x140296d55
movsx ecx, r10b
movzx eax, byte [r9 + 0x12]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140296d74
inc cl
cmp cl, 8
jne 0x140296d62
jmp 0x140296d83
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x11]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140296da2
inc cl
cmp cl, 5
jne 0x140296d90
jmp 0x140296db1
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x10]
btc ecx, eax
mov byte [r8], cl
add bl, byte [r9 + 0xe]
xor byte [r8], bl
inc r11d
inc r8
cmp r11d, 3
jne 0x140296d00
cmp byte [r9 + 0xb], 4
jne 0x1402970d6
movss xmm1, dword [0x140398ca4]
movaps xmm0, xmm1
divss xmm0, dword [0x140398ca0]
mulss xmm0, xmm1
addss xmm1, xmm0
movss dword [0x140398ca4], xmm1
xor eax, eax
mov byte [rsp + 0x48], al
lea rdx, [rbp + 0xb8]
lea rcx, [rsp + 0x48]
call fcn.1402779b0
mov r9, rax
mov r8d, dword [rax + 4]
movzx ecx, byte [rax + 0xa]
mov edx, r8d
shr edx, cl
test dl, 1
je 0x140296e31
movzx ecx, byte [rax]
inc cl
mov edx, r8d
shr edx, cl
test dl, 1
jne 0x140296e7d
movzx edx, byte [rax]
lea eax, [rdx + 2]
movzx ecx, al
bt r8d, ecx
setae cl
bt r8d, edx
setae al
test al, cl
je 0x140296e7d
movzx ecx, byte [r9 + 8]
mov eax, r8d
shr eax, cl
test al, 1
jne 0x140296e7d
movzx ecx, byte [r9 + 9]
shr r8d, cl
test r8b, 1
jne 0x140296e7d
movss xmm0, dword [0x140398ca0]
comiss xmm0, dword [0x140398ca4]
jbe 0x1402970d6
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x140296f19
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x140296f19
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + rsi]
add r9, rbx
mov r10d, 0xbc6684e7
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140296f14
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140296ee0
cmp r10d, 0x3c408843
je 0x140296f21
test r11d, r11d
jne 0x140296ec0
mov rax, qword [rax]
jmp 0x140296e90
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov ecx, dword [rcx + rax*4]
add rcx, rbx
call rcx
mov r15, rax
test rax, rax
je 0x1402970d6
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax]
mov rbx, qword [rcx + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov r14d, dword [rdx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x140296fe9
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x140296fe9
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rax, [rbx + r11*4]
mov r9d, dword [rax + rsi]
add r9, rbx
mov r10d, 0x5d8d5001
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140296fe4
movsx eax, r8b
sub r8b, 0x41
mov edx, eax
or edx, 0x20
cmp r8b, 0x19
cmova edx, eax
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140296fb0
cmp r10d, 0xb0839921
je 0x140296ff1
test r11d, r11d
jne 0x140296f90
mov rcx, qword [rcx]
jmp 0x140296f60
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov edx, dword [rcx + rax*4]
add rdx, rbx
mov rcx, r15
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x1402970a9
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x1402970a9
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rsi + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
mov r10d, 0xd7fa3e62
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402970a4
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140297070
cmp r10d, 0x1d7f4a30
je 0x1402970b1
test r11d, r11d
jne 0x140297050
mov rax, qword [rax]
jmp 0x140297020
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov edx, dword [rcx + rax*4]
add rdx, rbx
mov ecx, 0xe12c14a9
call rdx
jmp 0x1402970d6
xor r12d, r12d
mov rbx, qword [rbp - 0x40]
test rbx, rbx
je 0x14029712a
lea rdx, [rbx + 0x340]
movzx eax, byte [rbx + 0x9a]
mov byte [rsp + 0x30], al
mov eax, dword [rbx + 0x6c]
mov dword [rsp + 0x28], eax
movzx eax, byte [rbx + 0x84]
mov byte [rsp + 0x20], al
movzx r9d, byte [rbx + 0x72]
movss xmm2, dword [rbx + 0x38]
movss xmm1, dword [rbx + 0x34]
mov rcx, rbx
call rdx
test al, al
je 0x140297121
mov rbx, qword [rbx + 0x40]
jmp 0x14029712d
mov rbx, qword [rbx + 0x118]
jmp 0x14029712d
mov rbx, r12
movss xmm0, dword [rbx]
call fcn.1403268e8
movaps xmm6, xmm0
xor eax, eax
mov byte [rsp + 0x49], al
lea rdx, [rbp + 0xc4]
lea rcx, [rsp + 0x49]
call fcn.1402715b0
mov r9, rax
mov r8d, dword [rax + 4]
movzx ecx, byte [rax + 0xa]
mov edx, r8d
shr edx, cl
xorps xmm7, xmm7
test dl, 1
je 0x140297176
movzx ecx, byte [rax]
inc cl
mov eax, r8d
shr eax, cl
test al, 1
jne 0x1402971ae
movzx edx, byte [r9]
lea eax, [rdx + 2]
movzx ecx, al
bt r8d, ecx
setae cl
bt r8d, edx
setae al
test al, cl
je 0x1402971ae
movzx ecx, byte [r9 + 8]
mov eax, r8d
shr eax, cl
test al, 1
jne 0x1402971ae
movzx ecx, byte [r9 + 9]
shr r8d, cl
test r8b, 1
je 0x1402971d7
comiss xmm7, xmm6
jbe 0x1402971d7
xorps xmm2, xmm2
cvtss2sd xmm2, xmm6
lea rdx, [rbx + 0x48]
movq r8, xmm2
lea rcx, [0x140375eb0]
call fcn.1402ae6e0
mov rbx, r12
jmp 0x140297334
call qword [sym.imp.KERNEL32.dll_GetACP]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x140297202
mov edx, edi
lea rcx, [0x140375eb8]
call fcn.1402ae6e0
jmp 0x140297234
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x140297229
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
jmp 0x140297234
mov ecx, 4
call qword [sym.imp.USER32.dll_SetDebugErrorLevel]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_DebugActiveProcessStop]
mov rcx, qword [rbx + 0x2a8]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [rbx + 0xe0c]
mov dword [rsp + 0x30], eax
mov eax, dword [rbx + 0xe18]
mov dword [rsp + 0x28], eax
mov eax, dword [rbx + 0xe14]
mov dword [rsp + 0x20], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_SetWindowPos]
test eax, eax
je 0x140297299
mov edx, 1
xor ecx, ecx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], r12d
mov r9, rbx
lea r8, [0x140271540]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rdi, rax
test rax, rax
je 0x140297317
mov edx, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov edx, dword [rbx + 0xd0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [rbx + 0x160]
call qword [sym.imp.USER32.dll_ShowCursor]
call qword [sym.imp.USER32.dll_GetShellWindow]
mov qword [rbx + 0x780], rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbx + 0x818]
test rcx, rcx
je 0x140297310
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbx + 0x818], r12
test rbx, rbx
je 0x140297334
mov edx, dword [rbx + 0x18]
imul edx, dword [rbx + 0x10]
mov eax, dword [rbx + 0x38]
lea ecx, [rax + rax*4]
add ecx, ecx
sub edx, ecx
movsxd rax, edx
movsxd rbx, dword [rbx + rax*4]
mov r15, r12
cmp byte [rbx], 0
je 0x140297371
nop dword [rax]
inc rbx
inc r15
movzx ecx, byte [rbx]
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [rdx + rdx*2]
sub ecx, eax
cmp ecx, 1
jne 0x140297362
add rbx, 3
jmp 0x14029736a
test r15, r15
jne 0x14029736a
inc rbx
cmp byte [rbx + r15], 0
jne 0x140297340
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov rdi, qword [rax + 0x30]
movsxd rcx, dword [rdi + 0x3c]
mov r13d, dword [rcx + rdi + 0x88]
add r13, rdi
cmp r13, rdi
je 0x140297419
mov r11d, dword [r13 + 0x18]
test r11d, r11d
je 0x140297419
mov r14d, dword [r13 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [r14 + r11*4]
mov r9d, dword [rcx + rdi]
add r9, rdi
mov r10d, 0x3674fc09
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140297414
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402973e0
cmp r10d, 0x3fc264a3
je 0x140297421
test r11d, r11d
jne 0x1402973c0
mov rax, qword [rax]
jmp 0x140297390
mov ecx, dword [r13 + 0x1c]
add rcx, rdi
mov eax, dword [r13 + 0x24]
add rax, rdi
movzx eax, word [rax + r11*2]
mov ecx, dword [rcx + rax*4]
add rcx, rdi
call rcx
mov r13d, eax
add r13, r15
add r13, rbx
je 0x14029744a
hlt
vmxoff
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x1402974e9
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x1402974e9
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rsi + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
mov r10d, 0x240857cf
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402974e4
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402974b0
cmp r10d, 0x757d29f3
je 0x1402974f1
test r11d, r11d
jne 0x140297490
mov rax, qword [rax]
jmp 0x140297460
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov ecx, dword [rcx + rax*4]
add rcx, rbx
call rcx
mov rbx, rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rbx, rax
jne 0x14029768b
mov rcx, qword [r13 + 0xa8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rdx, qword [r13 + 0xc8]
mov rcx, qword [r13 + 0xc0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
xor ecx, ecx
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov r15, rax
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax + rax]
mov rbx, qword [rcx + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov r14d, dword [rdx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x1402975e9
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x1402975e9
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rax, [rsi + r11*4]
mov r9d, dword [rax + rbx]
add r9, rbx
mov r10d, 0x24c7b41e
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402975e4
movsx eax, r8b
sub r8b, 0x41
mov edx, eax
or edx, 0x20
cmp r8b, 0x19
cmova edx, eax
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402975b0
cmp r10d, 0x81cc0ab4
je 0x1402975f1
test r11d, r11d
jne 0x140297590
mov rcx, qword [rcx]
jmp 0x140297560
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r8d, dword [rcx + rax*4]
add r8, rbx
mov edx, 1
mov rcx, r15
call r8
mov ebx, eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1000
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [r13 + 0x19d8]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
test rax, rax
je 0x140297677
mov qword [rsp + 0x20], r12
mov r9, qword [r13 + 0x1124]
mov r8d, reloc.WS2_32.dll_sendto
mov rdx, qword [r13 + 0x1100]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp ebx, eax
jne 0x1402a13f1
add r13, 0x28
jmp 0x14029768e
mov r13, r12
mov r15d, dword [r13]
mov r12d, dword [r13 + 4]
xor eax, eax
mov byte [rsp + 0x4a], al
lea rdx, [rbp + 0xc00]
lea rcx, [rsp + 0x4a]
call fcn.140271470
mov r9, rax
mov byte [rax + 0x38], 0
xor ebx, ebx
lea r8, [rax + 0x2a]
nop word [rax + rax]
lea esi, [rbx + rbx*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, bl
add al, al
lea edi, [rax + rbx]
movzx r10d, dil
add r10b, byte [r9 + 0x3b]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx r11d, byte [rax + r9]
nop dword [rax + rax]
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140297706
inc dl
cmp dl, 4
jne 0x1402976f0
jmp 0x140297715
movsx ecx, r10b
movzx eax, byte [r9 + 0x3e]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140297734
inc cl
cmp cl, 8
jne 0x140297722
jmp 0x140297743
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x3d]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140297762
inc cl
cmp cl, 5
jne 0x140297750
jmp 0x140297771
movsx edx, byte [r8]
movzx eax, byte [r9 + 0x3c]
btc edx, eax
mov byte [r8], dl
add dil, byte [r9 + 0x3a]
xor byte [r8], dil
inc ebx
inc r8
cmp ebx, 0xe
jne 0x1402976c0
mov r8d, r12d
mov edx, r15d
lea rcx, [r9 + 0x2a]
call fcn.1402ae6e0
lea eax, [r15*4 + 8]
movsxd rbx, eax
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x44a0]
call fcn.1403163f0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x20]
mov rdx, qword [r13 + rbx*4 + 0x14]
lea rcx, [rbp + 0x44a0]
call fcn.1402acb80
nop
xor eax, eax
cmp qword [rbp + 0x4530], rax
je 0x140297871
movdqa xmm0, xmmword [reloc.d2d1.dll_Ordinal_1]
movdqu xmmword [rbp + 0x508], xmm0
mov qword [rbp + 0x518], rax
movaps xmmword [rbp + 0x520], xmm0
movsd xmm0, qword [rbp + 0x518]
movsd qword [rbp + 0x530], xmm0
lea rdx, [rbp + 0x520]
lea rcx, [rbp + 0x44a0]
call fcn.1402acd60
xor eax, eax
mov word [rbp + 0x4334], ax
lea r8d, [rax + 1]
lea rdx, [rbp + 0x4334]
lea rcx, [rbp + 0x44a0]
call fcn.1400f20f0
lea rcx, [rbp + 0x44a0]
call fcn.14006e910
cmp byte [rbp + 0x4334], 0x30
jne 0x140297a9b
lea r14, [rbx*4 + 0xc2c]
add r14, r13
jmp 0x140297aa2
mov byte [rsp + 0x4b], al
lea rdx, [rbp + 0x898]
lea rcx, [rsp + 0x4b]
call fcn.140276b10
mov r9, rax
lea r15, [rax + 0x1e]
xor r12d, r12d
mov word [r15 + 0xa], r12w
mov ebx, r12d
mov r10, r15
nop dword [rax + rax]
lea edi, [rbx + rbx*2]
movzx edx, word [r9 + rdi*2]
mov word [r10], dx
movzx eax, bx
add ax, ax
lea esi, [rax + rbx]
movzx r8d, byte [r9 + 0x2c]
add r8w, si
xor r8w, dx
mov word [r10], r8w
xor dl, dl
lea eax, [rdi + 1]
movzx r11d, word [r9 + rax*2]
movzx ecx, dl
movzx eax, r11w
shr ax, cl
test al, 1
jne 0x1402978e7
inc dl
cmp dl, 4
jne 0x1402978d0
jmp 0x1402978f8
movzx r8d, r8w
movzx eax, byte [r9 + 0x2f]
btc r8d, eax
mov word [r10], r8w
mov cl, 5
lea eax, [rdi + 2]
mov r11d, eax
movzx edx, word [r9 + rax*2]
movzx eax, dx
shr ax, cl
test al, 1
jne 0x140297918
inc cl
cmp cl, 8
jne 0x140297905
jmp 0x14029792c
movzx ecx, r8w
movzx eax, byte [r9 + 0x2e]
btc ecx, eax
movzx r8d, cx
mov word [r10], cx
xor cl, cl
movzx edx, word [r9 + r11*2]
movzx eax, dx
shr ax, cl
test al, 1
jne 0x140297946
inc cl
cmp cl, 5
jne 0x140297933
jmp 0x14029795a
movzx ecx, r8w
movzx eax, byte [r9 + 0x2d]
btc ecx, eax
movzx r8d, cx
mov word [r10], cx
movzx eax, byte [r9 + 0x2b]
add ax, si
xor ax, r8w
mov word [r10], ax
inc ebx
add r10, 2
cmp ebx, 5
jne 0x1402978a0
xor eax, eax
mov byte [rsp + 0x4c], al
lea rdx, [rbp + 0xa70]
lea rcx, [rsp + 0x4c]
call fcn.140276aa0
mov r9, rax
lea r14, [rax + 0x2a]
mov word [r14 + 0xe], r12w
mov ebx, r12d
mov r11, r14
nop dword [rax]
nop word [rax + rax]
lea edi, [rbx + rbx*2]
movzx edx, word [r9 + rdi*2]
mov word [r11], dx
movzx eax, bx
add ax, ax
lea esi, [rax + rbx]
movzx r8d, byte [r9 + 0x3c]
add r8w, si
xor r8w, dx
mov word [r11], r8w
xor dl, dl
lea eax, [rdi + 1]
movzx r10d, word [r9 + rax*2]
movzx ecx, dl
movzx eax, r10w
shr ax, cl
test al, 1
jne 0x1402979f7
inc dl
cmp dl, 4
jne 0x1402979e0
jmp 0x140297a08
movzx r8d, r8w
movzx eax, byte [r9 + 0x3f]
btc r8d, eax
mov word [r11], r8w
mov cl, 5
lea eax, [rdi + 2]
mov r10d, eax
movzx edx, word [r9 + rax*2]
movzx eax, dx
shr ax, cl
test al, 1
jne 0x140297a28
inc cl
cmp cl, 8
jne 0x140297a15
jmp 0x140297a3c
movzx ecx, r8w
movzx eax, byte [r9 + 0x3e]
btc ecx, eax
movzx r8d, cx
mov word [r11], cx
xor cl, cl
movzx edx, word [r9 + r10*2]
movzx eax, dx
shr ax, cl
test al, 1
jne 0x140297a56
inc cl
cmp cl, 5
jne 0x140297a43
jmp 0x140297a6a
movzx ecx, r8w
movzx eax, byte [r9 + 0x3d]
btc ecx, eax
movzx r8d, cx
mov word [r11], cx
movzx eax, byte [r9 + 0x3b]
add ax, si
xor ax, r8w
mov word [r11], ax
inc ebx
add r11, 2
cmp ebx, 7
jne 0x1402979b0
xor r9d, r9d
mov r8, r15
mov rdx, r14
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
mov r14, 0xffffffffffffffff
lea rcx, [rbp + 0x4550]
call fcn.14006cc70
lea rcx, [rbp + 0x4550]
call fcn.140074030
call fcn.1402abdf0
mov r12d, dword [r14]
mov r13d, dword [r14 + 4]
xor eax, eax
mov byte [rsp + 0x4d], al
lea rdx, [rbp + 0xc40]
lea rcx, [rsp + 0x4d]
call fcn.140271470
mov r9, rax
mov byte [rax + 0x38], 0
xor ebx, ebx
lea r8, [rax + 0x2a]
nop word [rax + rax]
lea edi, [rbx + rbx*2]
movzx edx, byte [rdi + r9]
mov byte [r8], dl
movzx eax, bl
add al, al
lea esi, [rax + rbx]
movzx r10d, sil
add r10b, byte [r9 + 0x3b]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rdi + 1]
movzx r11d, byte [rax + r9]
nop dword [rax + rax]
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140297b36
inc dl
cmp dl, 4
jne 0x140297b20
jmp 0x140297b45
movsx ecx, r10b
movzx eax, byte [r9 + 0x3e]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rdi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140297b64
inc cl
cmp cl, 8
jne 0x140297b52
jmp 0x140297b73
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x3d]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140297b92
inc cl
cmp cl, 5
jne 0x140297b80
jmp 0x140297ba1
movsx edx, byte [r8]
movzx eax, byte [r9 + 0x3c]
btc edx, eax
mov byte [r8], dl
add sil, byte [r9 + 0x3a]
xor byte [r8], sil
inc ebx
inc r8
cmp ebx, 0xe
jne 0x140297af0
mov r8d, r13d
mov edx, r12d
lea rcx, [r9 + 0x2a]
call fcn.1402ae6e0
lea eax, [r12*4 + 8]
movsxd rbx, eax
call fcn.1402779d0
xor r10d, r10d
movsxd rsi, dword [r14 + rbx*4 + 4]
add rbx, 3
lea rbx, [r14 + rbx*4]
test esi, esi
jle 0x140297c36
xor r11d, r11d
lea r14, [r10 - 1]
mov eax, 1
test r11, r11
cmovne rax, r11
mov r8d, dword [rbx + rax*4 - 4]
mov r9d, 1
cmp dword [rbx + rax*4], r8d
cmovl r9, r14
add r9, rax
lea ecx, [r10 + 1]
test r11, r11
cmovne ecx, r10d
mov r10d, 1
cmp dword [rbx + rax*4], r8d
cmovl r10d, r14d
add r10d, ecx
mov r11, r9
cmp r9, rsi
jl 0x140297bf0
imul esi, r10d
movsxd rax, esi
lea r15, [rbx + rax*4]
movsxd rcx, dword [r15]
lea r15, [r15 + 4]
mov dword [rbp - 0x40], 2
mov r12, rcx
mov qword [rbp - 0x28], 3
lea rax, [r15 + 8]
mov qword [rbp - 0x38], rax
xor eax, eax
mov byte [rsp + 0x4e], al
lea rdx, [rbp + 0x540]
lea rcx, [rsp + 0x4e]
call fcn.1402714e0
mov r10, rax
lea r13, [rax + 0xc]
mov byte [r13 + 4], 0
xor edi, edi
mov r8, r13
nop word [rax + rax]
lea ebx, [rdi + rdi*2]
movzx edx, byte [rbx + r10]
mov byte [r8], dl
movzx eax, dil
add al, al
lea esi, [rax + rdi]
movzx r9d, sil
add r9b, byte [r10 + 0x13]
xor r9b, dl
mov byte [r8], r9b
xor dl, dl
lea eax, [rbx + 1]
movzx r11d, byte [rax + r10]
nop dword [rax]
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140297cd6
inc dl
cmp dl, 4
jne 0x140297cc0
jmp 0x140297ce5
movsx ecx, r9b
movzx eax, byte [r10 + 0x16]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rbx + 2]
mov r9d, eax
movzx edx, byte [rax + r10]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140297d04
inc cl
cmp cl, 8
jne 0x140297cf2
jmp 0x140297d13
movsx ecx, byte [r8]
movzx eax, byte [r10 + 0x15]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r9 + r10]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140297d32
inc cl
cmp cl, 5
jne 0x140297d20
jmp 0x140297d41
movsx ecx, byte [r8]
movzx eax, byte [r10 + 0x14]
btc ecx, eax
mov byte [r8], cl
add sil, byte [r10 + 0x12]
xor byte [r8], sil
inc edi
inc r8
cmp edi, 4
jne 0x140297c90
xor eax, eax
mov byte [rsp + 0x4f], al
lea rdx, [rbp + 0x670]
lea rcx, [rsp + 0x4f]
call fcn.140271510
mov r11, rax
mov byte [rax + 0x14], 0
xor edi, edi
lea r8, [rax + 0xf]
nop word [rax + rax]
lea ebx, [rdi + rdi*2]
movzx edx, byte [rbx + r11]
mov byte [r8], dl
movzx eax, dil
add al, al
lea esi, [rax + rdi]
movzx r9d, sil
add r9b, byte [r11 + 0x17]
xor r9b, dl
mov byte [r8], r9b
xor dl, dl
lea eax, [rbx + 1]
movzx r10d, byte [rax + r11]
nop dword [rax]
movzx eax, r10b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140297dc6
inc dl
cmp dl, 4
jne 0x140297db0
jmp 0x140297dd5
movsx ecx, r9b
movzx eax, byte [r11 + 0x1a]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rbx + 2]
mov r9d, eax
movzx edx, byte [rax + r11]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140297df4
inc cl
cmp cl, 8
jne 0x140297de2
jmp 0x140297e03
movsx ecx, byte [r8]
movzx eax, byte [r11 + 0x19]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r9 + r11]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140297e22
inc cl
cmp cl, 5
jne 0x140297e10
jmp 0x140297e31
movsx ecx, byte [r8]
movzx eax, byte [r11 + 0x18]
btc ecx, eax
mov byte [r8], cl
add sil, byte [r11 + 0x16]
xor byte [r8], sil
inc edi
inc r8
cmp edi, 5
jne 0x140297d80
movsx eax, byte [r11 + 0x11]
lea eax, [rax + rax*4]
cdqe
movsx ecx, byte [rax + r13]
sub ecx, dword [r15 + 4]
mov edx, dword [rbp - 0x40]
cmp edx, ecx
jge 0x140297eb2
mov eax, edx
imul eax, dword [r15]
mov rsi, qword [rbp - 0x38]
add dword [rsi], eax
lea r8d, [rdx + 1]
mov dword [rbp - 0x40], r8d
mov rbx, qword [rbp - 0x28]
mov rdx, rbx
cmp rbx, r12
jge 0x140297e9e
movsxd rax, dword [r15 + r12*4 - 4]
mov ecx, dword [r15 + rax*4]
cmp dword [r15 + rdx*4], ecx
jge 0x140297e93
mov dword [r15 + 4], r8d
inc r8d
inc rdx
cmp rdx, r12
jl 0x140297e80
add rsi, 4
mov qword [rbp - 0x38], rsi
inc rbx
mov qword [rbp - 0x28], rbx
jmp 0x140297c62
mov eax, r12d
lea eax, [rax*4]
movsxd rcx, eax
lea r8, [r15 + rcx*4]
nop
nop
int 0x2c
nop
test r8, r8
je 0x140297f38
mov edx, dword [r8 + 0x18]
imul edx, dword [r8 + 0x10]
mov eax, dword [r8 + 0x38]
lea ecx, [rax + rax*4]
add ecx, ecx
sub edx, ecx
movsxd rax, edx
movsxd rbx, dword [r8 + rax*4]
test rbx, rbx
je 0x140297f38
lea rdx, [rbx + 0x340]
movzx eax, byte [rbx + 0x9a]
mov byte [rsp + 0x30], al
mov eax, dword [rbx + 0x6c]
mov dword [rsp + 0x28], eax
movzx eax, byte [rbx + 0x84]
mov byte [rsp + 0x20], al
movzx r9d, byte [rbx + 0x72]
movss xmm2, dword [rbx + 0x38]
movss xmm1, dword [rbx + 0x34]
mov rcx, rbx
call rdx
test al, al
je 0x140297f2f
mov r15, qword [rbx + 0x40]
jmp 0x140297f3b
mov r15, qword [rbx + 0x118]
jmp 0x140297f3b
xor r15d, r15d
movsxd rcx, dword [r15]
mov dword [rbp - 0x30], 2
mov r12, rcx
mov qword [rbp - 0x38], 3
lea rax, [r15 + 0xc]
mov qword [rbp - 0x28], rax
nop dword [rax + rax]
xor eax, eax
mov byte [rsp + 0x50], al
lea rdx, [rbp + 0x4d8]
lea rcx, [rsp + 0x50]
call fcn.1402714e0
mov r10, rax
lea r13, [rax + 0xc]
mov byte [r13 + 4], 0
xor edi, edi
mov r8, r13
nop dword [rax + rax]
lea ebx, [rdi + rdi*2]
movzx edx, byte [rbx + r10]
mov byte [r8], dl
movzx eax, dil
add al, al
lea esi, [rax + rdi]
movzx r9d, sil
add r9b, byte [r10 + 0x13]
xor r9b, dl
mov byte [r8], r9b
xor dl, dl
lea eax, [rbx + 1]
movzx r11d, byte [rax + r10]
nop dword [rax]
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140297fd6
inc dl
cmp dl, 4
jne 0x140297fc0
jmp 0x140297fe5
movsx ecx, r9b
movzx eax, byte [r10 + 0x16]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rbx + 2]
mov r9d, eax
movzx edx, byte [rax + r10]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140298004
inc cl
cmp cl, 8
jne 0x140297ff2
jmp 0x140298013
movsx ecx, byte [r8]
movzx eax, byte [r10 + 0x15]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r9 + r10]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140298032
inc cl
cmp cl, 5
jne 0x140298020
jmp 0x140298041
movsx ecx, byte [r8]
movzx eax, byte [r10 + 0x14]
btc ecx, eax
mov byte [r8], cl
add sil, byte [r10 + 0x12]
xor byte [r8], sil
inc edi
inc r8
cmp edi, 4
jne 0x140297f90
xor eax, eax
mov byte [rsp + 0x51], al
lea rdx, [rbp + 0x690]
lea rcx, [rsp + 0x51]
call fcn.140271510
mov r11, rax
mov byte [rax + 0x14], 0
xor edi, edi
lea r8, [rax + 0xf]
nop word [rax + rax]
lea ebx, [rdi + rdi*2]
movzx edx, byte [rbx + r11]
mov byte [r8], dl
movzx eax, dil
add al, al
lea esi, [rax + rdi]
movzx r9d, sil
add r9b, byte [r11 + 0x17]
xor r9b, dl
mov byte [r8], r9b
xor dl, dl
lea eax, [rbx + 1]
movzx r10d, byte [rax + r11]
nop dword [rax]
movzx eax, r10b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402980c6
inc dl
cmp dl, 4
jne 0x1402980b0
jmp 0x1402980d5
movsx ecx, r9b
movzx eax, byte [r11 + 0x1a]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rbx + 2]
mov r9d, eax
movzx edx, byte [rax + r11]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1402980f4
inc cl
cmp cl, 8
jne 0x1402980e2
jmp 0x140298103
movsx ecx, byte [r8]
movzx eax, byte [r11 + 0x19]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r9 + r11]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140298122
inc cl
cmp cl, 5
jne 0x140298110
jmp 0x140298131
movsx ecx, byte [r8]
movzx eax, byte [r11 + 0x18]
btc ecx, eax
mov byte [r8], cl
add sil, byte [r11 + 0x16]
xor byte [r8], sil
inc edi
inc r8
cmp edi, 5
jne 0x140298080
movsx eax, byte [r11 + 0x11]
lea eax, [rax + rax*4]
cdqe
movsx ecx, byte [rax + r13]
sub ecx, dword [r15 + 8]
mov edx, dword [rbp - 0x30]
cmp edx, ecx
jge 0x1402981c3
mov eax, edx
imul eax, dword [r15 + 4]
mov rsi, qword [rbp - 0x28]
add dword [rsi], eax
lea r8d, [rdx + 1]
mov dword [rbp - 0x30], r8d
mov rbx, qword [rbp - 0x38]
mov rdx, rbx
cmp rbx, r12
jge 0x1402981af
nop dword [rax]
nop word [rax + rax]
movsxd rax, dword [r15 + r12*4]
mov ecx, dword [r15 + rax*4 + 4]
cmp dword [r15 + rdx*4 + 4], ecx
jge 0x1402981a4
mov dword [r15 + 8], r8d
inc r8d
inc rdx
cmp rdx, r12
jl 0x140298190
add rsi, 4
mov qword [rbp - 0x28], rsi
inc rbx
mov qword [rbp - 0x38], rbx
jmp 0x140297f60
mov eax, r12d
lea eax, [rax*4]
movsxd rcx, eax
inc rcx
lea rax, [r15 + rcx*4]
mov qword [rbp - 0x38], rax
xor ecx, ecx
mov byte [rsp + 0x52], cl
xor eax, eax
mov byte [rsp + 0x53], al
lea rdx, [rbp + 0x570]
lea rcx, [rsp + 0x53]
call fcn.1402778a0
mov r9, rax
mov byte [rax + 0x10], 0
xor r12d, r12d
mov ebx, r12d
lea r8, [rax + 0xc]
nop dword [rax]
lea edi, [rbx + rbx*2]
movzx edx, byte [rdi + r9]
mov byte [r8], dl
movzx eax, bl
add al, al
lea esi, [rax + rbx]
movzx r10d, sil
add r10b, byte [r9 + 0x13]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rdi + 1]
movzx r11d, byte [rax + r9]
nop dword [rax + rax]
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140298256
inc dl
cmp dl, 4
jne 0x140298240
jmp 0x140298265
movsx ecx, r10b
movzx eax, byte [r9 + 0x16]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rdi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140298284
inc cl
cmp cl, 8
jne 0x140298272
jmp 0x140298293
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x15]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1402982b2
inc cl
cmp cl, 5
jne 0x1402982a0
jmp 0x1402982c1
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x14]
btc ecx, eax
mov byte [r8], cl
add sil, byte [r9 + 0x12]
xor byte [r8], sil
inc ebx
inc r8
cmp ebx, 4
jne 0x140298210
lea rdx, [r9 + 0xc]
lea rcx, [rbp + 0x6f0]
call fcn.140086d40
mov r14, rax
cmp qword [rax + 0x18], 0x10
jb 0x1402982f3
mov r14, qword [rax]
lea rdx, [rbp + 0x3b8]
lea rcx, [rsp + 0x52]
call fcn.140277870
mov r9, rax
mov byte [rax + 0xc], 0
mov edi, r12d
lea r8, [rax + 9]
nop dword [rax]
nop word [rax + rax]
lea ebx, [rdi + rdi*2]
movzx edx, byte [rbx + r9]
mov byte [r8], dl
movzx eax, dil
add al, al
lea esi, [rax + rdi]
movzx r10d, sil
add r10b, byte [r9 + 0xf]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rbx + 1]
movzx r11d, byte [rax + r9]
nop dword [rax]
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140298366
inc dl
cmp dl, 4
jne 0x140298350
jmp 0x140298375
movsx ecx, r10b
movzx eax, byte [r9 + 0x12]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rbx + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140298394
inc cl
cmp cl, 8
jne 0x140298382
jmp 0x1402983a3
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x11]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1402983c2
inc cl
cmp cl, 5
jne 0x1402983b0
jmp 0x1402983d1
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x10]
btc ecx, eax
mov byte [r8], cl
add sil, byte [r9 + 0xe]
xor byte [r8], sil
inc edi
inc r8
cmp edi, 3
jne 0x140298320
movzx edi, byte [r14 + 1]
movzx ebx, byte [r9 + 9]
lea rcx, [rbp + 0x6f0]
call fcn.140087070
cmp bl, dil
jne 0x140298ec6
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x1402984a9
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x1402984a9
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rsi + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
mov r10d, 0x7333d7
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402984a4
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140298470
cmp r10d, 0xe63a9383
je 0x1402984b1
test r11d, r11d
jne 0x140298450
mov rax, qword [rax]
jmp 0x140298420
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov ecx, dword [rcx + rax*4]
add rcx, rbx
call rcx
mov r13d, eax
xor eax, eax
mov byte [rsp + 0x54], al
lea rdx, [rbp + 0x190]
lea rcx, [rsp + 0x54]
call fcn.1402778d0
mov r9, rax
mov byte [rax + 8], 0
mov ebx, r12d
lea r8, [rax + 6]
nop dword [rax]
nop dword [rax + rax]
lea esi, [rbx + rbx*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, bl
add al, al
lea edi, [rax + rbx]
movzx r10d, dil
add r10b, byte [r9 + 0xb]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx r11d, byte [rax + r9]
nop dword [rax + rax]
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140298546
inc dl
cmp dl, 4
jne 0x140298530
jmp 0x140298555
movsx ecx, r10b
movzx eax, byte [r9 + 0xe]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140298574
inc cl
cmp cl, 8
jne 0x140298562
jmp 0x140298583
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0xd]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1402985a2
inc cl
cmp cl, 5
jne 0x140298590
jmp 0x1402985b1
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0xc]
btc ecx, eax
mov byte [r8], cl
add dil, byte [r9 + 0xa]
xor byte [r8], dil
inc ebx
inc r8
cmp ebx, 2
jne 0x140298500
mov eax, 0xaaaaaaab
mul r13d
shr edx, 1
lea eax, [rdx + rdx*2]
mov ecx, r13d
sub ecx, eax
mov r15d, ecx
cmp byte [rcx + r9 + 6], 0x5d
je 0x140298ec6
xor eax, eax
mov byte [rsp + 0x55], al
lea rdx, [rbp + 0xd0]
lea rcx, [rsp + 0x55]
call fcn.1402778f0
mov rdx, rax
mov byte [rax + 4], 0
movzx r9d, byte [rax + 7]
xor r9b, byte [rax]
mov byte [rax + 3], r9b
xor cl, cl
movzx r8d, byte [rax + 1]
nop dword [rax + rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140298633
inc cl
cmp cl, 4
jne 0x140298620
jmp 0x140298641
movsx ecx, r9b
movzx eax, byte [rdx + 0xa]
btc ecx, eax
mov byte [rdx + 3], cl
mov cl, 5
movzx r8d, byte [rdx + 2]
nop dword [rax + rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140298663
inc cl
cmp cl, 8
jne 0x140298650
jmp 0x140298671
movsx ecx, byte [rdx + 3]
movzx eax, byte [rdx + 9]
btc ecx, eax
mov byte [rdx + 3], cl
xor cl, cl
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140298686
inc cl
cmp cl, 5
jne 0x140298673
jmp 0x140298694
movsx ecx, byte [rdx + 3]
movzx eax, byte [rdx + 8]
btc ecx, eax
mov byte [rdx + 3], cl
movzx eax, byte [rdx + 6]
xor byte [rdx + 3], al
mov r12, r13
mov rax, r13
and eax, 1
cmp byte [rax + rdx + 3], 0x20
je 0x140298ec3
xor eax, eax
mov byte [rsp + 0x56], al
lea rdx, [rbp + 0x1a0]
lea rcx, [rsp + 0x56]
call fcn.140277910
mov r9, rax
mov byte [rax + 8], 0
xor edi, edi
lea r8, [rax + 6]
nop dword [rax]
nop word [rax + rax]
lea ebx, [rdi + rdi*2]
movzx edx, byte [rbx + r9]
mov byte [r8], dl
movzx eax, dil
add al, al
lea esi, [rax + rdi]
movzx r10d, sil
add r10b, byte [r9 + 0xb]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rbx + 1]
movzx r11d, byte [rax + r9]
nop dword [rax]
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140298726
inc dl
cmp dl, 4
jne 0x140298710
jmp 0x140298735
movsx ecx, r10b
movzx eax, byte [r9 + 0xe]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rbx + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140298754
inc cl
cmp cl, 8
jne 0x140298742
jmp 0x140298763
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0xd]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140298782
inc cl
cmp cl, 5
jne 0x140298770
jmp 0x140298791
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0xc]
btc ecx, eax
mov byte [r8], cl
add sil, byte [r9 + 0xa]
xor byte [r8], sil
inc edi
inc r8
cmp edi, 2
jne 0x1402986e0
cmp byte [r15 + r9 + 6], 0xa
je 0x140298ec3
xor eax, eax
mov byte [rsp + 0x57], al
lea rdx, [rbp + 0x3d0]
lea rcx, [rsp + 0x57]
call fcn.140277930
mov r9, rax
mov byte [rax + 0xc], 0
xor ebx, ebx
lea r8, [rax + 9]
nop word [rax + rax]
lea edi, [rbx + rbx*2]
movzx edx, byte [rdi + r9]
mov byte [r8], dl
movzx eax, bl
add al, al
lea esi, [rax + rbx]
movzx r10d, sil
add r10b, byte [r9 + 0xf]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rdi + 1]
movzx r11d, byte [rax + r9]
nop dword [rax + rax]
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140298826
inc dl
cmp dl, 4
jne 0x140298810
jmp 0x140298835
movsx ecx, r10b
movzx eax, byte [r9 + 0x12]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rdi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140298854
inc cl
cmp cl, 8
jne 0x140298842
jmp 0x140298863
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x11]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140298882
inc cl
cmp cl, 5
jne 0x140298870
jmp 0x140298891
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x10]
btc ecx, eax
mov byte [r8], cl
add sil, byte [r9 + 0xe]
xor byte [r8], sil
inc ebx
inc r8
cmp ebx, 3
jne 0x1402987e0
and r12d, ebx
cmp byte [r12 + r9 + 9], 0x2e
je 0x140298ec3
cmp r13d, 0xad820032
ja 0x140298ec3
inc r13d
xor r13d, 0xad820032
cmp r13d, 0x8dde74ea
jne 0x140298ec3
xor eax, eax
mov byte [rsp + 0x58], al
lea rdx, [rbp + 0x3e8]
lea rcx, [rsp + 0x58]
call fcn.140277950
mov r9, rax
mov byte [rax + 0xc], 0
xor r12d, r12d
mov ebx, r12d
lea r8, [rax + 9]
nop dword [rax]
nop word [rax + rax]
lea esi, [rbx + rbx*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, bl
add al, al
lea edi, [rax + rbx]
movzx r10d, dil
add r10b, byte [r9 + 0xf]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx r11d, byte [rax + r9]
nop dword [rax + rax]
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140298956
inc dl
cmp dl, 4
jne 0x140298940
jmp 0x140298965
movsx ecx, r10b
movzx eax, byte [r9 + 0x12]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140298984
inc cl
cmp cl, 8
jne 0x140298972
jmp 0x140298993
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x11]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1402989b2
inc cl
cmp cl, 5
jne 0x1402989a0
jmp 0x1402989c1
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x10]
btc ecx, eax
mov byte [r8], cl
add dil, byte [r9 + 0xe]
xor byte [r8], dil
inc ebx
inc r8
cmp ebx, 3
jne 0x140298910
cmp byte [r9 + 9], bl
jne 0x140298abd
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x140298a89
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x140298a89
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + rsi]
add r9, rbx
mov r10d, 0x163fc1ba
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140298a84
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140298a50
cmp r10d, 0x6669f02
je 0x140298a91
test r11d, r11d
jne 0x140298a30
mov rax, qword [rax]
jmp 0x140298a00
mov r8d, dword [r14 + 0x1c]
add r8, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r8d, dword [r8 + rax*4]
add r8, rbx
mov edx, 0x3cadc558
mov ecx, 0x6f3d8698
call r8
jmp 0x140298ec6
xor eax, eax
mov byte [rsp + 0x59], al
lea rdx, [rbp + 0x430]
lea rcx, [rsp + 0x59]
call fcn.140277980
mov r9, rax
mov byte [rax + 0xc], r12b
mov ebx, r12d
lea r8, [rax + 9]
nop dword [rax]
nop word [rax + rax]
lea esi, [rbx + rbx*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, bl
add al, al
lea edi, [rax + rbx]
movzx r10d, dil
add r10b, byte [r9 + 0xf]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx r11d, byte [rax + r9]
nop dword [rax + rax]
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140298b36
inc dl
cmp dl, 4
jne 0x140298b20
jmp 0x140298b45
movsx ecx, r10b
movzx eax, byte [r9 + 0x12]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140298b64
inc cl
cmp cl, 8
jne 0x140298b52
jmp 0x140298b73
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x11]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140298b92
inc cl
cmp cl, 5
jne 0x140298b80
jmp 0x140298ba1
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x10]
btc ecx, eax
mov byte [r8], cl
add dil, byte [r9 + 0xe]
xor byte [r8], dil
inc ebx
inc r8
cmp ebx, 3
jne 0x140298af0
cmp byte [r9 + 0xb], 4
jne 0x140298ec6
movss xmm1, dword [0x140398ca4]
movaps xmm0, xmm1
divss xmm0, dword [0x140398ca0]
mulss xmm0, xmm1
addss xmm1, xmm0
movss dword [0x140398ca4], xmm1
xor eax, eax
mov byte [rsp + 0x5a], al
lea rdx, [rbp + 0xe0]
lea rcx, [rsp + 0x5a]
call fcn.1402779b0
mov r9, rax
mov r8d, dword [rax + 4]
movzx ecx, byte [rax + 0xa]
mov edx, r8d
shr edx, cl
test dl, 1
je 0x140298c1f
movzx ecx, byte [rax]
inc cl
mov edx, r8d
shr edx, cl
test dl, 1
jne 0x140298c6b
movzx edx, byte [rax]
lea eax, [rdx + 2]
movzx ecx, al
bt r8d, ecx
setae cl
bt r8d, edx
setae al
test al, cl
je 0x140298c6b
movzx ecx, byte [r9 + 8]
mov eax, r8d
shr eax, cl
test al, 1
jne 0x140298c6b
movzx ecx, byte [r9 + 9]
shr r8d, cl
test r8b, 1
jne 0x140298c6b
movss xmm0, dword [0x140398ca0]
comiss xmm0, dword [0x140398ca4]
jbe 0x140298ec6
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x140298d09
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x140298d09
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + rsi]
add r9, rbx
mov r10d, 0xbc6684e7
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140298d04
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140298cd0
cmp r10d, 0x3c408843
je 0x140298d11
test r11d, r11d
jne 0x140298cb0
mov rax, qword [rax]
jmp 0x140298c80
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov ecx, dword [rcx + rax*4]
add rcx, rbx
call rcx
mov r15, rax
test rax, rax
je 0x140298ec6
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax]
mov rbx, qword [rcx + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov r14d, dword [rdx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x140298dd9
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x140298dd9
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rax, [rbx + r11*4]
mov r9d, dword [rax + rsi]
add r9, rbx
mov r10d, 0x5d8d5001
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140298dd4
movsx eax, r8b
sub r8b, 0x41
mov edx, eax
or edx, 0x20
cmp r8b, 0x19
cmova edx, eax
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140298da0
cmp r10d, 0xb0839921
je 0x140298de1
test r11d, r11d
jne 0x140298d80
mov rcx, qword [rcx]
jmp 0x140298d50
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov edx, dword [rcx + rax*4]
add rdx, rbx
mov rcx, r15
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x140298e99
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x140298e99
mov rax, qword [rax]
jmp 0x140298e10
xor r12d, r12d
mov r15, qword [rbp - 0x38]
movss xmm0, dword [r15]
call fcn.1403268e8
movaps xmm6, xmm0
xor eax, eax
mov byte [rsp + 0x5b], al
lea rdx, [rbp + 0xec]
lea rcx, [rsp + 0x5b]
call fcn.1402715b0
mov r9, rax
mov r8d, dword [rax + 4]
movzx ecx, byte [rax + 0xa]
mov edx, r8d
shr edx, cl
test dl, 1
je 0x140298f12
movzx ecx, byte [rax]
inc cl
mov edx, r8d
shr edx, cl
test dl, 1
jne 0x140298f49
movzx ecx, byte [rax]
lea eax, [rcx + 2]
movzx edx, al
bt r8d, ecx
setae cl
bt r8d, edx
setae al
test al, cl
je 0x140298f49
movzx ecx, byte [r9 + 8]
mov eax, r8d
shr eax, cl
test al, 1
jne 0x140298f49
movzx ecx, byte [r9 + 9]
shr r8d, cl
test r8b, 1
je 0x140298f72
comiss xmm7, xmm6
jbe 0x140298f72
xorps xmm2, xmm2
cvtss2sd xmm2, xmm6
lea rdx, [r15 + 0x48]
movq r8, xmm2
lea rcx, [0x140375eb0]
call fcn.1402ae6e0
mov r15, r12
jmp 0x1402990b7
call qword [sym.imp.KERNEL32.dll_GetACP]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x140298f9d
mov edx, ebx
lea rcx, [0x140375eb8]
call fcn.1402ae6e0
jmp 0x140298fcf
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x140298fc4
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
jmp 0x140298fcf
mov ecx, 4
call qword [sym.imp.USER32.dll_SetDebugErrorLevel]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_DebugActiveProcessStop]
mov rcx, qword [r15 + 0x2a8]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [r15 + 0xe0c]
mov dword [rsp + 0x30], eax
mov eax, dword [r15 + 0xe18]
mov dword [rsp + 0x28], eax
mov eax, dword [r15 + 0xe14]
mov dword [rsp + 0x20], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_SetWindowPos]
test eax, eax
je 0x140299037
mov edx, 1
xor ecx, ecx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], r12d
mov r9, r15
lea r8, [0x140271540]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rbx, rax
test rax, rax
je 0x1402990b7
mov edx, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov edx, dword [r15 + 0xd0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [r15 + 0x160]
call qword [sym.imp.USER32.dll_ShowCursor]
call qword [sym.imp.USER32.dll_GetShellWindow]
mov qword [r15 + 0x780], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [r15 + 0x818]
test rcx, rcx
je 0x1402990b0
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [r15 + 0x818], r12
mov ecx, 4
mov rax, qword gs:[0x58]
mov rax, qword [rax]
mov eax, dword [rcx + rax]
cmp dword [0x1403d2e30], eax
jle 0x14029a8e7
lea rcx, [0x1403d2e30]
call fcn.140313e18
cmp dword [0x1403d2e30], 0xffffffff
jne 0x14029a8e7
xorps xmm0, xmm0
xor eax, eax
movups xmmword [0x1403d2e38], xmm0
mov qword [0x1403d2e48], rax
mov byte [rsp + 0x5c], al
lea rdx, [rbp + 0x22a0]
lea rcx, [rsp + 0x5c]
call fcn.140274120
mov r9, rax
mov byte [rax + 0xb0], 0
mov ebx, r12d
lea r8, [rax + 0x84]
nop dword [rax]
lea esi, [rbx + rbx*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, bl
add al, al
lea edi, [rax + rbx]
movzx r10d, dil
add r10b, byte [r9 + 0xb3]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx r11d, byte [rax + r9]
nop
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140299176
inc dl
cmp dl, 4
jne 0x140299160
jmp 0x140299188
movsx ecx, r10b
movzx eax, byte [r9 + 0xb6]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1402991a7
inc cl
cmp cl, 8
jne 0x140299195
jmp 0x1402991b9
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0xb5]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1402991d2
inc cl
cmp cl, 5
jne 0x1402991c0
jmp 0x1402991e4
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0xb4]
btc ecx, eax
mov byte [r8], cl
add dil, byte [r9 + 0xb2]
xor byte [r8], dil
inc ebx
inc r8
cmp ebx, 0x2c
jne 0x140299130
lea rdx, [r9 + 0x84]
lea rcx, [rbp + 0x710]
call fcn.140086d40
nop
lea rax, [rbp + 0x710]
mov qword [rbp + 0x40], rax
lea rax, [rbp + 0x730]
mov qword [rbp + 0x48], rax
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x1b0]
call fcn.1402ac810
nop
movzx eax, byte [r15 + 0x35]
mov byte [rbp + 0x2420], al
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x2428]
call fcn.1402ae0f0
nop
xor eax, eax
mov byte [rsp + 0x5d], al
lea rdx, [rbp + 0xfe0]
lea rcx, [rsp + 0x5d]
call fcn.140274260
mov r9, rax
mov byte [rax + 0x40], 0
mov ebx, r12d
lea r8, [rax + 0x30]
nop dword [rax + rax]
lea esi, [rbx + rbx*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, bl
add al, al
lea edi, [rax + rbx]
movzx r10d, dil
add r10b, byte [r9 + 0x43]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx r11d, byte [rax + r9]
nop dword [rax + rax]
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402992c6
inc dl
cmp dl, 4
jne 0x1402992b0
jmp 0x1402992d5
movsx ecx, r10b
movzx eax, byte [r9 + 0x46]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1402992f4
inc cl
cmp cl, 8
jne 0x1402992e2
jmp 0x140299303
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x45]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140299322
inc cl
cmp cl, 5
jne 0x140299310
jmp 0x140299331
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x44]
btc ecx, eax
mov byte [r8], cl
add dil, byte [r9 + 0x42]
xor byte [r8], dil
inc ebx
inc r8
cmp ebx, 0x10
jne 0x140299280
lea rdx, [r9 + 0x30]
lea rcx, [rbp + 0xc80]
call fcn.140086d40
nop
xor eax, eax
mov byte [rsp + 0x5e], al
lea rdx, [rbp + 0x1540]
lea rcx, [rsp + 0x5e]
call fcn.1402742d0
mov r9, rax
mov byte [rax + 0x58], 0
mov ebx, r12d
lea r8, [rax + 0x42]
nop dword [rax]
lea esi, [rbx + rbx*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, bl
add al, al
lea edi, [rax + rbx]
movzx r10d, dil
add r10b, byte [r9 + 0x5b]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx r11d, byte [rax + r9]
nop dword [rax + rax]
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402993c6
inc dl
cmp dl, 4
jne 0x1402993b0
jmp 0x1402993d5
movsx ecx, r10b
movzx eax, byte [r9 + 0x5e]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1402993f4
inc cl
cmp cl, 8
jne 0x1402993e2
jmp 0x140299403
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x5d]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140299422
inc cl
cmp cl, 5
jne 0x140299410
jmp 0x140299431
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x5c]
btc ecx, eax
mov byte [r8], cl
add dil, byte [r9 + 0x5a]
xor byte [r8], dil
inc ebx
inc r8
cmp ebx, 0x16
jne 0x140299380
lea rdx, [r9 + 0x42]
lea rcx, [rbp + 0xca0]
call fcn.140086d40
nop
lea rax, [rbp + 0xc80]
mov qword [rbp + 0x30], rax
lea rax, [rbp + 0xcc0]
mov qword [rbp + 0x38], rax
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x1c0]
call fcn.1402ac810
nop
movzx eax, byte [r15 + 0x36]
mov byte [rbp + 0x2438], al
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x2440]
call fcn.1402ae0f0
nop
xor eax, eax
mov byte [rsp + 0x5f], al
lea rdx, [rbp + 0x1f40]
lea rcx, [rsp + 0x5f]
call fcn.140274370
mov r9, rax
mov byte [rax + 0x8c], 0
mov ebx, r12d
lea r8, [rax + 0x69]
nop word [rax + rax]
lea esi, [rbx + rbx*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, bl
add al, al
lea edi, [rax + rbx]
movzx r10d, dil
add r10b, byte [r9 + 0x8f]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx r11d, byte [rax + r9]
nop
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140299516
inc dl
cmp dl, 4
jne 0x140299500
jmp 0x140299528
movsx ecx, r10b
movzx eax, byte [r9 + 0x92]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140299547
inc cl
cmp cl, 8
jne 0x140299535
jmp 0x140299559
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x91]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140299572
inc cl
cmp cl, 5
jne 0x140299560
jmp 0x140299584
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x90]
btc ecx, eax
mov byte [r8], cl
add dil, byte [r9 + 0x8e]
xor byte [r8], dil
inc ebx
inc r8
cmp ebx, 0x23
jne 0x1402994d0
lea rdx, [r9 + 0x69]
lea rcx, [rbp + 0x1b10]
call fcn.140086d40
nop
xor eax, eax
mov byte [rsp + 0x60], al
lea rdx, [rbp + 0xcc0]
lea rcx, [rsp + 0x60]
call fcn.140274470
mov r9, rax
mov byte [rax + 0x38], 0
mov ebx, r12d
lea r8, [rax + 0x2a]
nop dword [rax]
nop word [rax + rax]
lea esi, [rbx + rbx*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, bl
add al, al
lea edi, [rax + rbx]
movzx r10d, dil
add r10b, byte [r9 + 0x3b]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx r11d, byte [rax + r9]
nop dword [rax + rax]
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140299626
inc dl
cmp dl, 4
jne 0x140299610
jmp 0x140299635
movsx ecx, r10b
movzx eax, byte [r9 + 0x3e]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140299654
inc cl
cmp cl, 8
jne 0x140299642
jmp 0x140299663
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x3d]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140299682
inc cl
cmp cl, 5
jne 0x140299670
jmp 0x140299691
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x3c]
btc ecx, eax
mov byte [r8], cl
add dil, byte [r9 + 0x3a]
xor byte [r8], dil
inc ebx
inc r8
cmp ebx, 0xe
jne 0x1402995e0
lea rdx, [r9 + 0x2a]
lea rcx, [rbp + 0x1b30]
call fcn.140086d40
nop
xor eax, eax
mov byte [rsp + 0x61], al
lea rdx, [rbp + 0x15a0]
lea rcx, [rsp + 0x61]
call fcn.1402744e0
mov r9, rax
mov byte [rax + 0x58], 0
mov ebx, r12d
lea r8, [rax + 0x42]
nop dword [rax]
lea esi, [rbx + rbx*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, bl
add al, al
lea edi, [rax + rbx]
movzx r10d, dil
add r10b, byte [r9 + 0x5b]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx r11d, byte [rax + r9]
nop dword [rax + rax]
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140299726
inc dl
cmp dl, 4
jne 0x140299710
jmp 0x140299735
movsx ecx, r10b
movzx eax, byte [r9 + 0x5e]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140299754
inc cl
cmp cl, 8
jne 0x140299742
jmp 0x140299763
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x5d]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140299782
inc cl
cmp cl, 5
jne 0x140299770
jmp 0x140299791
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x5c]
btc ecx, eax
mov byte [r8], cl
add dil, byte [r9 + 0x5a]
xor byte [r8], dil
inc ebx
inc r8
cmp ebx, 0x16
jne 0x1402996e0
lea rdx, [r9 + 0x42]
lea rcx, [rbp + 0x1b50]
call fcn.140086d40
nop
xor eax, eax
mov byte [rsp + 0x62], al
lea rdx, [rbp + 0x2a60]
lea rcx, [rsp + 0x62]
call fcn.140274580
mov r9, rax
mov byte [rax + 0xc4], 0
mov ebx, r12d
lea r8, [rax + 0x93]
nop dword [rax]
nop word [rax + rax]
lea esi, [rbx + rbx*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, bl
add al, al
lea edi, [rax + rbx]
movzx r10d, dil
add r10b, byte [r9 + 0xc7]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx r11d, byte [rax + r9]
nop
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140299836
inc dl
cmp dl, 4
jne 0x140299820
jmp 0x140299848
movsx ecx, r10b
movzx eax, byte [r9 + 0xca]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140299867
inc cl
cmp cl, 8
jne 0x140299855
jmp 0x140299879
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0xc9]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140299892
inc cl
cmp cl, 5
jne 0x140299880
jmp 0x1402998a4
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0xc8]
btc ecx, eax
mov byte [r8], cl
add dil, byte [r9 + 0xc6]
xor byte [r8], dil
inc ebx
inc r8
cmp ebx, 0x31
jne 0x1402997f0
lea rdx, [r9 + 0x93]
lea rcx, [rbp + 0x1b70]
call fcn.140086d40
nop
lea rax, [rbp + 0x1b10]
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0x1b90]
mov qword [rbp + 0x28], rax
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x1d0]
call fcn.1402ac810
nop
movzx eax, byte [r15 + 0x37]
mov byte [rbp + 0x2450], al
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x2458]
call fcn.1402ae0f0
nop
xor eax, eax
mov byte [rsp + 0x63], al
lea rdx, [rbp + 0x3710]
lea rcx, [rsp + 0x63]
call fcn.1402746f0
mov r9, rax
mov byte [rax + 0x180], 0
mov ebx, r12d
lea r8, [rax + 0x120]
nop dword [rax]
nop word [rax + rax]
lea esi, [rbx + rbx*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, bl
add al, al
lea edi, [rax + rbx]
movzx r10d, dil
add r10b, byte [r9 + 0x183]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx r11d, byte [rax + r9]
nop
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140299996
inc dl
cmp dl, 4
jne 0x140299980
jmp 0x1402999a8
movsx ecx, r10b
movzx eax, byte [r9 + 0x186]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1402999c7
inc cl
cmp cl, 8
jne 0x1402999b5
jmp 0x1402999d9
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x185]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1402999f2
inc cl
cmp cl, 5
jne 0x1402999e0
jmp 0x140299a04
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x184]
btc ecx, eax
mov byte [r8], cl
add dil, byte [r9 + 0x182]
xor byte [r8], dil
inc ebx
inc r8
cmp ebx, 0x60
jne 0x140299950
lea rdx, [r9 + 0x120]
lea rcx, [rbp + 0xd00]
call fcn.140086d40
nop
xor eax, eax
mov byte [rsp + 0x64], al
lea rdx, [rbp + 0x3470]
lea rcx, [rsp + 0x64]
call fcn.140274a00
mov r9, rax
mov byte [rax + 0x144], 0
mov ebx, r12d
lea r8, [rax + 0xf3]
nop dword [rax + rax]
lea esi, [rbx + rbx*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, bl
add al, al
lea edi, [rax + rbx]
movzx r10d, dil
add r10b, byte [r9 + 0x147]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx r11d, byte [rax + r9]
nop
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140299aa6
inc dl
cmp dl, 4
jne 0x140299a90
jmp 0x140299ab8
movsx ecx, r10b
movzx eax, byte [r9 + 0x14a]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140299ad7
inc cl
cmp cl, 8
jne 0x140299ac5
jmp 0x140299ae9
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x149]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140299b02
inc cl
cmp cl, 5
jne 0x140299af0
jmp 0x140299b14
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x148]
btc ecx, eax
mov byte [r8], cl
add dil, byte [r9 + 0x146]
xor byte [r8], dil
inc ebx
inc r8
cmp ebx, 0x51
jne 0x140299a60
lea rdx, [r9 + 0xf3]
lea rcx, [rbp + 0xd20]
call fcn.140086d40
nop
lea rax, [rbp + 0xd00]
mov qword [rbp + 0x10], rax
lea rax, [rbp + 0xd40]
mov qword [rbp + 0x18], rax
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x1e0]
call fcn.1402ac810
nop
movzx eax, byte [r15 + 0x38]
mov byte [rbp + 0x2468], al
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x2470]
call fcn.1402ae0f0
nop
xor eax, eax
mov byte [rsp + 0x65], al
lea rdx, [rbp + 0x26a0]
lea rcx, [rsp + 0x65]
call fcn.140274c90
mov r9, rax
mov byte [rax + 0xf0], 0
mov ebx, r12d
lea r8, [rax + 0xb4]
nop dword [rax]
nop word [rax + rax]
lea esi, [rbx + rbx*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, bl
add al, al
lea edi, [rax + rbx]
movzx r10d, dil
add r10b, byte [r9 + 0xf3]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx r11d, byte [rax + r9]
nop
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140299c06
inc dl
cmp dl, 4
jne 0x140299bf0
jmp 0x140299c18
movsx ecx, r10b
movzx eax, byte [r9 + 0xf6]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140299c37
inc cl
cmp cl, 8
jne 0x140299c25
jmp 0x140299c49
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0xf5]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140299c62
inc cl
cmp cl, 5
jne 0x140299c50
jmp 0x140299c74
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0xf4]
btc ecx, eax
mov byte [r8], cl
add dil, byte [r9 + 0xf2]
xor byte [r8], dil
inc ebx
inc r8
cmp ebx, 0x3c
jne 0x140299bc0
lea rdx, [r9 + 0xb4]
lea rcx, [rbp + 0x1b90]
call fcn.140086d40
nop
xor eax, eax
mov byte [rsp + 0x66], al
lea rdx, [rbp + 0x2c00]
lea rcx, [rsp + 0x66]
call fcn.140274e60
mov r9, rax
mov byte [rax + 0xcc], 0
mov ebx, r12d
lea r8, [rax + 0x99]
nop dword [rax + rax]
lea esi, [rbx + rbx*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, bl
add al, al
lea edi, [rax + rbx]
movzx r10d, dil
add r10b, byte [r9 + 0xcf]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx r11d, byte [rax + r9]
nop
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140299d16
inc dl
cmp dl, 4
jne 0x140299d00
movsx ecx, r10b
movzx eax, byte [r9 + 0xd2]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140299d47
cmp dword [r15 + 0x44], 1
jle 0x14029aef4
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
mov byte [rsp + 0x70], al
lea rdx, [rbp + 0x2dc0]
lea rcx, [rsp + 0x70]
call fcn.140275ff0
mov r9, rax
mov word [rax + 0xd0], r12w
mov ebx, r12d
lea r10, [rax + 0x9c]
nop dword [rax]
lea edi, [rbx + rbx*2]
movzx edx, word [r9 + rdi*2]
mov word [r10], dx
movzx eax, bx
add ax, ax
lea esi, [rax + rbx]
movzx r8d, byte [r9 + 0xd4]
add r8w, si
xor r8w, dx
mov word [r10], r8w
xor dl, dl
lea eax, [rdi + 1]
movzx r11d, word [r9 + rax*2]
nop dword [rax]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r11w
shr ax, cl
test al, 1
jne 0x14029a987
inc dl
cmp dl, 4
jne 0x14029a970
jmp 0x14029a99b
movzx r8d, r8w
movzx eax, byte [r9 + 0xd7]
btc r8d, eax
mov word [r10], r8w
mov cl, 5
lea eax, [rdi + 2]
mov r11d, eax
movzx edx, word [r9 + rax*2]
nop dword [rax + rax]
movzx eax, dx
shr ax, cl
test al, 1
jne 0x14029a9c3
inc cl
cmp cl, 8
jne 0x14029a9b0
jmp 0x14029a9da
movzx ecx, r8w
movzx eax, byte [r9 + 0xd6]
btc ecx, eax
movzx r8d, cx
mov word [r10], cx
xor cl, cl
movzx edx, word [r9 + r11*2]
movzx eax, dx
shr ax, cl
test al, 1
jne 0x14029a9f4
inc cl
cmp cl, 5
jne 0x14029a9e1
jmp 0x14029aa0b
movzx ecx, r8w
movzx eax, byte [r9 + 0xd5]
btc ecx, eax
movzx r8d, cx
mov word [r10], cx
movzx eax, byte [r9 + 0xd3]
add ax, si
xor ax, r8w
mov word [r10], ax
inc ebx
add r10, 2
cmp ebx, 0x1a
jne 0x14029a930
lea rdx, [r9 + 0x9c]
lea rcx, [rbp + 0x4348]
call fcn.1400856c0
nop
cmp qword [rbp + 0x4358], 0
je 0x14029ac34
xor eax, eax
mov byte [rsp + 0x71], al
lea rdx, [rbp + 0x2fb0]
lea rcx, [rsp + 0x71]
call fcn.140276170
mov r9, rax
mov byte [rax + 0x104], 0
mov ebx, r12d
lea r8, [rax + 0xc3]
nop word [rax + rax]
lea esi, [rbx + rbx*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, bl
add al, al
lea edi, [rax + rbx]
movzx r10d, dil
add r10b, byte [r9 + 0x107]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx r11d, byte [rax + r9]
nop
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x14029aac6
inc dl
cmp dl, 4
jne 0x14029aab0
jmp 0x14029aad8
movsx ecx, r10b
movzx eax, byte [r9 + 0x10a]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x14029aaf7
inc cl
cmp cl, 8
jne 0x14029aae5
jmp 0x14029ab09
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x109]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x14029ab22
inc cl
cmp cl, 5
jne 0x14029ab10
jmp 0x14029ab34
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x108]
btc ecx, eax
mov byte [r8], cl
add dil, byte [r9 + 0x106]
xor byte [r8], dil
inc ebx
inc r8
cmp ebx, 0x41
jne 0x14029aa80
lea rdx, [r9 + 0xc3]
lea rcx, [rbp + 0xd80]
call fcn.140086d40
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x4348]
call fcn.140076250
mov rbx, qword [rax]
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x4348]
call fcn.140076270
lea r9, [rsp + 0x72]
mov r8, rbx
mov rdx, qword [rax]
lea rcx, [rbp + 0xda0]
call fcn.140065090
nop
lea rax, [rbp + 0xd80]
mov qword [rbp + 0x260], rax
lea rax, [rbp + 0xdc0]
mov qword [rbp + 0x268], rax
lea rdx, [rbp + 0x260]
lea rcx, [rbp + 0x270]
call fcn.1402ac810
nop
movzx eax, byte [r15 + 0x3d]
mov byte [rbp + 0x588], al
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x590]
call fcn.1402ae0f0
nop
lea rdx, [rbp + 0x588]
lea rcx, [0x1403d2e38]
call fcn.1402adfb0
nop
lea rcx, [rbp + 0x590]
call fcn.1402ac7a0
nop
lea rcx, [rbp + 0x270]
call fcn.1402ac7a0
nop
lea r9, [fcn.1400870d0]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea r8d, [rdx - 0x1e]
lea rcx, [rbp + 0xd80]
call fcn.140313ca0
xor eax, eax
mov byte [rsp + 0x73], al
lea rdx, [rbp + 0x18d0]
lea rcx, [rsp + 0x73]
call fcn.140276370
mov r9, rax
mov byte [rax + 0x80], 0
mov ebx, r12d
lea r8, [rax + 0x60]
nop dword [rax]
lea esi, [rbx + rbx*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, bl
add al, al
lea edi, [rax + rbx]
movzx r10d, dil
add r10b, byte [r9 + 0x83]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx r11d, byte [rax + r9]
nop
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x14029aca6
inc dl
cmp dl, 4
jne 0x14029ac90
jmp 0x14029acb8
movsx ecx, r10b
movzx eax, byte [r9 + 0x86]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x14029acd7
inc cl
cmp cl, 8
jne 0x14029acc5
jmp 0x14029ace9
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x85]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x14029ad02
inc cl
cmp cl, 5
jne 0x14029acf0
jmp 0x14029ad14
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x84]
btc ecx, eax
mov byte [r8], cl
add dil, byte [r9 + 0x82]
xor byte [r8], dil
inc ebx
inc r8
cmp ebx, 0x20
jne 0x14029ac60
lea rdx, [r9 + 0x60]
lea rcx, [rbp + 0xdc0]
call fcn.140086d40
nop
xor eax, eax
mov byte [rsp + 0x74], al
lea rdx, [rbp + 0x2120]
lea rcx, [rsp + 0x74]
call fcn.140276450
mov r9, rax
mov byte [rax + 0xac], 0
mov ebx, r12d
lea r8, [rax + 0x81]
nop dword [rax + rax]
lea esi, [rbx + rbx*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, bl
add al, al
lea edi, [rax + rbx]
movzx r10d, dil
add r10b, byte [r9 + 0xaf]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx r11d, byte [rax + r9]
nop
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x14029adb6
inc dl
cmp dl, 4
jne 0x14029ada0
jmp 0x14029adc8
movsx ecx, r10b
movzx eax, byte [r9 + 0xb2]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x14029ade7
inc cl
cmp cl, 8
jne 0x14029add5
jmp 0x14029adf9
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0xb1]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x14029ae12
inc cl
cmp cl, 5
jne 0x14029ae00
jmp 0x14029ae24
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0xb0]
btc ecx, eax
mov byte [r8], cl
add dil, byte [r9 + 0xae]
xor byte [r8], dil
inc ebx
inc r8
cmp ebx, 0x2b
jne 0x14029ad70
lea rdx, [r9 + 0x81]
lea rcx, [rbp + 0xde0]
call fcn.140086d40
nop
lea rax, [rbp + 0xdc0]
mov qword [rbp + 0x280], rax
lea rax, [rbp + 0xe00]
mov qword [rbp + 0x288], rax
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x290]
call fcn.1402ac810
nop
movzx eax, byte [r15 + 0x3e]
mov byte [rbp + 0x5a0], al
lea rdx, [rbp + 0x290]
lea rcx, [rbp + 0x5a8]
call fcn.1402ae0f0
nop
lea rdx, [rbp + 0x5a0]
lea rcx, [0x1403d2e38]
call fcn.1402adfb0
nop
lea rcx, [rbp + 0x5a8]
call fcn.1402ac7a0
nop
lea rcx, [rbp + 0x290]
call fcn.1402ac7a0
nop
lea r9, [fcn.1400870d0]
lea edx, [rbx - 0xb]
lea r8d, [rbx - 0x29]
lea rcx, [rbp + 0xdc0]
call fcn.140313ca0
nop
lea rcx, [rbp + 0x4348]
call fcn.140085e10
mov rcx, qword [0x1403d2e40]
sub rcx, qword [0x1403d2e38]
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov dword [r15 + 0x50], edx
xor edx, edx
lea rcx, [0x1403d2e38]
call fcn.1402ac950
mov rbx, rax
test rax, rax
je 0x14029af82
lea rdx, [rax + 0x340]
movzx ecx, byte [rax + 0x9a]
mov byte [rsp + 0x30], cl
mov ecx, dword [rax + 0x6c]
mov dword [rsp + 0x28], ecx
movzx ecx, byte [rax + 0x84]
mov byte [rsp + 0x20], cl
movzx r9d, byte [rax + 0x72]
movss xmm2, dword [rax + 0x38]
movss xmm1, dword [rax + 0x34]
mov rcx, rax
call rdx
test al, al
je 0x14029af79
mov r13, qword [rbx + 0x40]
jmp 0x14029af85
mov r13, qword [rbx + 0x118]
jmp 0x14029af85
mov r13, r12
call fcn.1402779d0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x14029b029
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x14029b029
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rsi + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
mov r10d, 0x240857cf
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14029b024
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x14029aff0
cmp r10d, 0x757d29f3
je 0x14029b031
test r11d, r11d
jne 0x14029afd0
mov rax, qword [rax]
jmp 0x14029afa0
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov ecx, dword [rcx + rax*4]
add rcx, rbx
call rcx
mov rbx, rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rbx, rax
jne 0x14029b1cb
mov rcx, qword [r13 + 0xa8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rdx, qword [r13 + 0xc8]
mov rcx, qword [r13 + 0xc0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
xor ecx, ecx
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov r15, rax
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax + rax]
mov rbx, qword [rcx + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov r14d, dword [rdx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x14029b129
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x14029b129
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rax, [rsi + r11*4]
mov r9d, dword [rax + rbx]
add r9, rbx
mov r10d, 0x24c7b41e
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14029b124
movsx eax, r8b
sub r8b, 0x41
mov edx, eax
or edx, 0x20
cmp r8b, 0x19
cmova edx, eax
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x14029b0f0
cmp r10d, 0x81cc0ab4
je 0x14029b131
test r11d, r11d
jne 0x14029b0d0
mov rcx, qword [rcx]
jmp 0x14029b0a0
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r8d, dword [rcx + rax*4]
add r8, rbx
mov edx, 1
mov rcx, r15
call r8
mov ebx, eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1000
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [r13 + 0x19d8]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
test rax, rax
je 0x14029b1b7
mov qword [rsp + 0x20], r12
mov r9, qword [r13 + 0x1124]
mov r8d, reloc.WS2_32.dll_sendto
mov rdx, qword [r13 + 0x1100]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp ebx, eax
jne 0x1402a13f1
add r13, 0x28
jmp 0x14029b1ce
mov r13, r12
mov r14, r12
cmp byte [r13], 0
je 0x14029b213
nop dword [rax + rax]
inc r13
inc r14
movzx ecx, byte [r13]
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [rdx + rdx*2]
sub ecx, eax
cmp ecx, 1
jne 0x14029b204
add r13, 3
jmp 0x14029b20c
test r14, r14
jne 0x14029b20c
inc r13
cmp byte [r14 + r13], 0
jne 0x14029b1e0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r15d, dword [rcx + rbx + 0x88]
add r15, rbx
cmp r15, rbx
je 0x14029b2b9
mov r11d, dword [r15 + 0x18]
test r11d, r11d
je 0x14029b2b9
mov esi, dword [r15 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rsi + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
mov r10d, 0x3674fc09
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14029b2b4
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x14029b280
cmp r10d, 0x3fc264a3
je 0x14029b2c1
test r11d, r11d
jne 0x14029b260
mov rax, qword [rax]
jmp 0x14029b230
mov ecx, dword [r15 + 0x1c]
add rcx, rbx
mov eax, dword [r15 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov ecx, dword [rcx + rax*4]
add rcx, rbx
call rcx
mov eax, eax
add r14, rax
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x45b0]
call fcn.1403163f0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x20]
mov rdx, qword [r14 + r13 + 0x10]
lea rcx, [rbp + 0x45b0]
call fcn.1402acb80
nop
xor eax, eax
cmp qword [rbp + 0x4640], rax
je 0x14029b3d0
movdqa xmm0, xmmword [reloc.d2d1.dll_Ordinal_1]
movdqu xmmword [rbp + 0x5b8], xmm0
mov qword [rbp + 0x5c8], rax
movaps xmmword [rbp + 0x5d0], xmm0
movsd xmm0, qword [rbp + 0x5c8]
movsd qword [rbp + 0x5e0], xmm0
lea rdx, [rbp + 0x5d0]
lea rcx, [rbp + 0x45b0]
call fcn.1402acd60
xor eax, eax
mov word [rbp + 0x4330], ax
lea r8d, [rax + 1]
lea rdx, [rbp + 0x4330]
lea rcx, [rbp + 0x45b0]
call fcn.1400f20f0
lea rcx, [rbp + 0x45b0]
call fcn.14006e910
cmp byte [rbp + 0x4330], 0x30
jne 0x14029b5fb
lea rbx, [r14 + 0xc28]
add rbx, r13
lea rcx, [rbp + 0x4660]
call fcn.14006cc70
lea rcx, [rbp + 0x4660]
call fcn.140074030
mov r14, 0xffffffffffffffff
jmp 0x14029b62d
mov byte [rsp + 0x75], al
lea rdx, [rbp + 0x8d0]
lea rcx, [rsp + 0x75]
call fcn.140276b10
mov r9, rax
lea r15, [rax + 0x1e]
mov word [r15 + 0xa], r12w
mov ebx, r12d
mov r10, r15
nop word [rax + rax]
lea edi, [rbx + rbx*2]
movzx edx, word [r9 + rdi*2]
mov word [r10], dx
movzx eax, bx
add ax, ax
lea esi, [rax + rbx]
movzx r8d, byte [r9 + 0x2c]
add r8w, si
xor r8w, dx
mov word [r10], r8w
xor dl, dl
lea eax, [rdi + 1]
movzx r11d, word [r9 + rax*2]
movzx ecx, dl
movzx eax, r11w
shr ax, cl
test al, 1
jne 0x14029b447
inc dl
cmp dl, 4
jne 0x14029b430
jmp 0x14029b458
movzx r8d, r8w
movzx eax, byte [r9 + 0x2f]
btc r8d, eax
mov word [r10], r8w
mov cl, 5
lea eax, [rdi + 2]
mov r11d, eax
movzx edx, word [r9 + rax*2]
movzx eax, dx
shr ax, cl
test al, 1
jne 0x14029b478
inc cl
cmp cl, 8
jne 0x14029b465
jmp 0x14029b48c
movzx ecx, r8w
movzx eax, byte [r9 + 0x2e]
btc ecx, eax
movzx r8d, cx
mov word [r10], cx
xor cl, cl
movzx edx, word [r9 + r11*2]
movzx eax, dx
shr ax, cl
test al, 1
jne 0x14029b4a6
inc cl
cmp cl, 5
jne 0x14029b493
jmp 0x14029b4ba
movzx ecx, r8w
movzx eax, byte [r9 + 0x2d]
btc ecx, eax
movzx r8d, cx
mov word [r10], cx
movzx eax, byte [r9 + 0x2b]
add ax, si
xor ax, r8w
mov word [r10], ax
inc ebx
add r10, 2
cmp ebx, 5
jne 0x14029b400
xor eax, eax
mov byte [rsp + 0x76], al
lea rdx, [rbp + 0xac0]
lea rcx, [rsp + 0x76]
call fcn.140276aa0
mov r9, rax
lea r14, [rax + 0x2a]
mov word [r14 + 0xe], r12w
mov ebx, r12d
mov r10, r14
nop dword [rax]
nop word [rax + rax]
lea edi, [rbx + rbx*2]
movzx edx, word [r9 + rdi*2]
mov word [r10], dx
movzx eax, bx
add ax, ax
lea esi, [rax + rbx]
movzx r8d, byte [r9 + 0x3c]
add r8w, si
xor r8w, dx
mov word [r10], r8w
xor dl, dl
lea eax, [rdi + 1]
movzx r11d, word [r9 + rax*2]
movzx ecx, dl
movzx eax, r11w
shr ax, cl
test al, 1
jne 0x14029b557
inc dl
cmp dl, 4
jne 0x14029b540
jmp 0x14029b568
movzx r8d, r8w
movzx eax, byte [r9 + 0x3f]
btc r8d, eax
mov word [r10], r8w
mov cl, 5
lea eax, [rdi + 2]
mov r11d, eax
movzx edx, word [r9 + rax*2]
movzx eax, dx
shr ax, cl
test al, 1
jne 0x14029b588
inc cl
cmp cl, 8
jne 0x14029b575
jmp 0x14029b59c
movzx ecx, r8w
movzx eax, byte [r9 + 0x3e]
btc ecx, eax
movzx r8d, cx
mov word [r10], cx
xor cl, cl
movzx edx, word [r9 + r11*2]
movzx eax, dx
shr ax, cl
test al, 1
jne 0x14029b5b6
inc cl
cmp cl, 5
jne 0x14029b5a3
jmp 0x14029b5ca
movzx ecx, r8w
movzx eax, byte [r9 + 0x3d]
btc ecx, eax
movzx r8d, cx
mov word [r10], cx
movzx eax, byte [r9 + 0x3b]
add ax, si
xor ax, r8w
mov word [r10], ax
inc ebx
add r10, 2
cmp ebx, 7
jne 0x14029b510
xor r9d, r9d
mov r8, r15
mov rdx, r14
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
lea rcx, [rbp + 0x4660]
call fcn.14006cc70
nop
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x4660], rax
lea rcx, [rbp + 0x4660]
call fcn.1402bd96c
nop
mov r14, 0xffffffffffffffff
mov rbx, r14
mov r10d, r12d
movsxd rsi, dword [rbx]
test esi, esi
jle 0x14029b688
mov r11, r12
nop word [rax + rax]
mov eax, 1
test r11, r11
cmovne rax, r11
mov r8d, dword [rbx + rax*4 + 4]
mov r9d, 1
cmp dword [rbx + rax*4 + 8], r8d
cmovl r9, r14
add r9, rax
lea ecx, [r10 + 1]
test r11, r11
cmovne ecx, r10d
mov r10d, 1
cmp dword [rbx + rax*4 + 8], r8d
cmovl r10d, r14d
add r10d, ecx
mov r11, r9
cmp r9, rsi
jl 0x14029b640
imul esi, r10d
movsxd rax, esi
lea rbx, [rbx + rax*4]
add rbx, 8
movss xmm0, dword [rbx]
call fcn.1403268e8
movaps xmm6, xmm0
xor eax, eax
mov byte [rsp + 0x77], al
lea rdx, [rbp + 0xf8]
lea rcx, [rsp + 0x77]
call fcn.1402715b0
mov r9, rax
mov r8d, dword [rax + 4]
movzx ecx, byte [rax + 0xa]
mov edx, r8d
shr edx, cl
test dl, 1
je 0x14029b6de
movzx ecx, byte [rax]
inc cl
mov edx, r8d
shr edx, cl
test dl, 1
jne 0x14029b715
movzx edx, byte [rax]
lea eax, [rdx + 2]
movzx ecx, al
bt r8d, ecx
setae cl
bt r8d, edx
setae al
test al, cl
je 0x14029b715
movzx ecx, byte [r9 + 8]
mov eax, r8d
shr eax, cl
test al, 1
jne 0x14029b715
movzx ecx, byte [r9 + 9]
shr r8d, cl
test r8b, 1
je 0x14029b73e
comiss xmm7, xmm6
jbe 0x14029b73e
xorps xmm2, xmm2
cvtss2sd xmm2, xmm6
lea rdx, [rbx + 0x48]
movq r8, xmm2
lea rcx, [0x140375eb0]
call fcn.1402ae6e0
mov rbx, r12
jmp 0x14029b87e
call qword [sym.imp.KERNEL32.dll_GetACP]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x14029b769
mov edx, edi
lea rcx, [0x140375eb8]
call fcn.1402ae6e0
jmp 0x14029b79b
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x14029b790
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
jmp 0x14029b79b
mov ecx, 4
call qword [sym.imp.USER32.dll_SetDebugErrorLevel]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_DebugActiveProcessStop]
mov rcx, qword [rbx + 0x2a8]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [rbx + 0xe0c]
mov dword [rsp + 0x30], eax
mov eax, dword [rbx + 0xe18]
mov dword [rsp + 0x28], eax
mov eax, dword [rbx + 0xe14]
mov dword [rsp + 0x20], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_SetWindowPos]
test eax, eax
je 0x14029b800
mov edx, 1
xor ecx, ecx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], r12d
mov r9, rbx
lea r8, [0x140271540]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rdi, rax
test rax, rax
je 0x14029b87e
mov edx, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov edx, dword [rbx + 0xd0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [rbx + 0x160]
call qword [sym.imp.USER32.dll_ShowCursor]
call qword [sym.imp.USER32.dll_GetShellWindow]
mov qword [rbx + 0x780], rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbx + 0x818]
test rcx, rcx
je 0x14029b877
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbx + 0x818], r12
mov r10d, r12d
movsxd rsi, dword [rbx]
test esi, esi
jle 0x14029b8d8
mov r11, r12
nop dword [rax + rax]
mov eax, 1
test r11, r11
cmovne rax, r11
mov r8d, dword [rbx + rax*4 + 4]
mov r9d, 1
cmp dword [rbx + rax*4 + 8], r8d
cmovl r9, r14
add r9, rax
lea ecx, [r10 + 1]
test r11, r11
cmovne ecx, r10d
mov r10d, 1
cmp dword [rbx + rax*4 + 8], r8d
cmovl r10d, r14d
add r10d, ecx
mov r11, r9
cmp r9, rsi
jl 0x14029b890
imul esi, r10d
movsxd r14, esi
add r14, 2
lea r14, [rbx + r14*4]
test r14, r14
je 0x14029b8ef
hlt
vmxoff
mov r12d, dword [r14]
mov r13d, dword [r14 + 4]
xor eax, eax
mov byte [rsp + 0x78], al
lea rdx, [rbp + 0xe00]
lea rcx, [rsp + 0x78]
call fcn.140271470
mov r9, rax
mov byte [rax + 0x38], 0
xor ebx, ebx
lea r8, [rax + 0x2a]
nop dword [rax]
lea esi, [rbx + rbx*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, bl
add al, al
lea edi, [rax + rbx]
movzx r10d, dil
add r10b, byte [r9 + 0x3b]
xor r10b, dl
mov byte [r8], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx r11d, byte [rax + r9]
nop dword [rax + rax]
movzx eax, r11b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x14029b966
inc dl
cmp dl, 4
jne 0x14029b950
jmp 0x14029b975
movsx ecx, r10b
movzx eax, byte [r9 + 0x3e]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r10d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x14029b994
inc cl
cmp cl, 8
jne 0x14029b982
jmp 0x14029b9a3
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x3d]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r10 + r9]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x14029b9c2
inc cl
cmp cl, 5
jne 0x14029b9b0
jmp 0x14029b9d1
movsx edx, byte [r8]
movzx eax, byte [r9 + 0x3c]
btc edx, eax
mov byte [r8], dl
add dil, byte [r9 + 0x3a]
xor byte [r8], dil
inc ebx
inc r8
cmp ebx, 0xe
jne 0x14029b920
mov r8d, r13d
mov edx, r12d
lea rcx, [r9 + 0x2a]
call fcn.1402ae6e0
lea eax, [r12*4 + 8]
movsxd rbx, eax
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x46c0]
call fcn.1403163f0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x20]
mov rdx, qword [r14 + rbx*4 + 0x14]
lea rcx, [rbp + 0x46c0]
call fcn.1402acb80
nop
xor eax, eax
cmp qword [rbp + 0x4750], rax
je 0x14029baf8
movdqa xmm0, xmmword [reloc.d2d1.dll_Ordinal_1]
movdqu xmmword [rbp + 0x558], xmm0
mov qword [rbp + 0x568], rax
movaps xmmword [rbp + 0x610], xmm0
movsd xmm0, qword [rbp + 0x568]
movsd qword [rbp + 0x620], xmm0
lea rdx, [rbp + 0x610]
lea rcx, [rbp + 0x46c0]
call fcn.1402acd60
xor eax, eax
mov word [rbp + 0x4340], ax
lea r8d, [rax + 1]
lea rdx, [rbp + 0x4340]
lea rcx, [rbp + 0x46c0]
call fcn.1400f20f0
lea rcx, [rbp + 0x46c0]
call fcn.14006e910
cmp byte [rbp + 0x4340], 0x30
jne 0x14029bd2b
add rbx, 0x30b
lea rbx, [r14 + rbx*4]
lea rcx, [rbp + 0x4770]
call fcn.14006cc70
lea rcx, [rbp + 0x4770]
call fcn.140074030
test rbx, rbx
jne 0x14029bd5a
xor r13d, r13d
mov r12d, r13d
jmp 0x14029bda6
mov byte [rsp + 0x79], al
lea rdx, [rbp + 0x790]
lea rcx, [rsp + 0x79]
call fcn.140276b10
mov r9, rax
lea r15, [rax + 0x1e]
xor r12d, r12d
mov word [r15 + 0xa], r12w
mov ebx, r12d
mov r10, r15
nop dword [rax]
nop word [rax + rax]
lea edi, [rbx + rbx*2]
movzx edx, word [r9 + rdi*2]
mov word [r10], dx
movzx eax, bx
add ax, ax
lea esi, [rax + rbx]
movzx r8d, byte [r9 + 0x2c]
add r8w, si
xor r8w, dx
mov word [r10], r8w
xor dl, dl
lea eax, [rdi + 1]
movzx r11d, word [r9 + rax*2]
movzx ecx, dl
movzx eax, r11w
shr ax, cl
test al, 1
jne 0x14029bb77
inc dl
cmp dl, 4
jne 0x14029bb60
jmp 0x14029bb88
movzx r8d, r8w
movzx eax, byte [r9 + 0x2f]
btc r8d, eax
mov word [r10], r8w
mov cl, 5
lea eax, [rdi + 2]
mov r11d, eax
movzx edx, word [r9 + rax*2]
movzx eax, dx
shr ax, cl
test al, 1
jne 0x14029bba8
inc cl
cmp cl, 8
jne 0x14029bb95
jmp 0x14029bbbc
movzx ecx, r8w
movzx eax, byte [r9 + 0x2e]
btc ecx, eax
movzx r8d, cx
mov word [r10], cx
xor cl, cl
movzx edx, word [r9 + r11*2]
movzx eax, dx
shr ax, cl
test al, 1
jne 0x14029bbd6
inc cl
cmp cl, 5
jne 0x14029bbc3
jmp 0x14029bbea
movzx ecx, r8w
movzx eax, byte [r9 + 0x2d]
btc ecx, eax
movzx r8d, cx
mov word [r10], cx
movzx eax, byte [r9 + 0x2b]
add ax, si
xor ax, r8w
mov word [r10], ax
inc ebx
add r10, 2
cmp ebx, 5
jne 0x14029bb30
xor eax, eax
mov byte [rsp + 0x7a], al
lea rdx, [rbp + 0xb10]
lea rcx, [rsp + 0x7a]
call fcn.140276aa0
mov r9, rax
lea r14, [rax + 0x2a]
mov word [r14 + 0xe], r12w
mov ebx, r12d
mov r10, r14
nop dword [rax]
nop word [rax + rax]
lea edi, [rbx + rbx*2]
movzx edx, word [r9 + rdi*2]
mov word [r10], dx
movzx eax, bx
add ax, ax
lea esi, [rax + rbx]
movzx r8d, byte [r9 + 0x3c]
add r8w, si
xor r8w, dx
mov word [r10], r8w
xor dl, dl
lea eax, [rdi + 1]
movzx r11d, word [r9 + rax*2]
movzx ecx, dl
movzx eax, r11w
shr ax, cl
test al, 1
jne 0x14029bc87
lea rcx, [rbp + 0x4770]
call fcn.14006cc70
nop
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x4770], rax
lea rcx, [rbp + 0x4770]
call fcn.1402bd96c
nop
mov rbx, 0xffffffffffffffff
lea rdx, [rbx + 0x340]
movzx eax, byte [rbx + 0x9a]
mov byte [rsp + 0x30], al
mov eax, dword [rbx + 0x6c]
mov dword [rsp + 0x28], eax
movzx eax, byte [rbx + 0x84]
mov byte [rsp + 0x20], al
movzx r9d, byte [rbx + 0x72]
movss xmm2, dword [rbx + 0x38]
movss xmm1, dword [rbx + 0x34]
mov rcx, rbx
call rdx
xor r13d, r13d
test al, al
je 0x14029bd9f
mov r12, qword [rbx + 0x40]
jmp 0x14029bda6
mov r12, qword [rbx + 0x118]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x14029be49
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x14029be49
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + rsi]
add r9, rbx
mov r10d, 0x240857cf
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14029be44
mov rax, qword [rax]
jmp 0x14029bdc0
mov ecx, 0xffffffff
call fcn.140326c84
int3