Function at 0x140036d50
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister
Generate random numbers via winapi
Get file size
Read file on windows
Resolve function by parsing pe exports
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov byte [rsp + 0x20], r9b
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2970]
mov eax, 0x2a70
call fcn.140110640
sub rsp, rax
movaps xmmword [rsp + 0x2a60], xmm6
movaps xmmword [rsp + 0x2a50], xmm7
movaps xmmword [rsp + 0x2a40], xmm8
mov rsi, rdx
mov rdi, rcx
xor r13d, r13d
mov qword [rcx], r13
mov qword [rcx + 8], r13
mov qword [rcx + 0x10], r13
mov qword [rcx + 0x18], r13
mov qword [rcx + 0x20], r13
mov qword [rcx + 0x28], r13
mov qword [rcx + 0x30], r13
mov qword [rcx + 0x38], r13
mov qword [rcx + 0x40], r13
mov dword [rcx + 0x4c], r13d
mov qword [rcx + 0x50], r13
mov qword [rcx + 0x58], r13
mov qword [rcx + 0x60], r13
mov qword [rcx + 0x68], r13
mov qword [rcx + 0x70], r13
lea rbx, [rcx + 0x78]
mov qword [rbp + 0x4a8], rbx
mov qword [rbx], r13
mov qword [rbx + 8], r13
mov ecx, 0x98
call fcn.140110294
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbx], rax
mov qword [rdi + 0x88], r13
mov qword [rdi + 0x98], r13
mov qword [rdi + 0xa0], 7
mov word [rdi + 0x88], r13w
mov qword [rdi + 0xa8], r13
mov qword [rdi + 0xb8], r13
mov qword [rdi + 0xc0], 7
mov word [rdi + 0xa8], r13w
mov qword [rdi + 0xc8], r13
mov qword [rdi + 0xd8], r13
mov qword [rdi + 0xe0], 7
mov word [rdi + 0xc8], r13w
mov qword [rdi + 0xf0], r13
mov qword [rdi + 0x100], r13
mov qword [rdi + 0x108], 7
mov word [rdi + 0xf0], r13w
mov qword [rdi + 0x110], r13
mov qword [rdi + 0x120], r13
mov qword [rdi + 0x128], 7
mov word [rdi + 0x110], r13w
mov qword [rdi + 0x148], r13
mov qword [rdi + 0x150], r13
mov qword [rdi + 0x158], r13
mov qword [rdi + 0x160], r13
mov qword [rdi + 0x168], r13
mov qword [rdi + 0x170], r13
mov qword [rdi + 0x178], r13
mov qword [rdi + 0x188], r13
mov qword [rdi + 0x190], 7
mov word [rdi + 0x178], r13w
mov qword [rdi + 0x198], r13
mov qword [rdi + 0x1a0], r13
mov qword [rdi + 0x1a8], r13
mov qword [rdi + 0x1b0], r13
mov qword [rdi + 0x1c0], r13
mov qword [rdi + 0x1c8], 7
mov word [rdi + 0x1b0], r13w
mov qword [rdi + 0x1d0], r13
mov qword [rdi + 0x1d8], r13
mov qword [rdi + 0x1e8], r13
mov qword [rdi + 0x1f0], 7
mov word [rdi + 0x1d8], r13w
mov qword [rdi + 0x1f8], r13
mov qword [rdi + 0x208], r13
mov qword [rdi + 0x210], 7
mov word [rdi + 0x1f8], r13w
mov qword [rdi + 0x218], r13
mov qword [rdi + 0x228], r13
mov qword [rdi + 0x230], 7
mov word [rdi + 0x218], r13w
mov qword [rdi + 0x238], r13
mov qword [rdi + 0x248], r13
mov qword [rdi + 0x250], 7
mov word [rdi + 0x238], r13w
mov qword [rdi + 0x258], r13
mov qword [rdi + 0x268], r13
mov qword [rdi + 0x270], 7
mov word [rdi + 0x258], r13w
mov qword [rdi + 0x278], r13
mov qword [rdi + 0x288], r13
mov qword [rdi + 0x290], 7
mov word [rdi + 0x278], r13w
mov qword [rdi + 0x298], r13
mov qword [rdi + 0x2a0], r13
mov qword [rdi + 0x2a8], r13
mov qword [rdi + 0x2b0], r13
mov qword [rdi + 0x2d8], r13
mov qword [rdi + 0x2e0], r13
mov qword [rdi + 0x2e8], r13
mov qword [rdi + 0x2f0], r13
mov qword [rdi + 0x2f8], r13
mov qword [rdi + 0x300], r13
mov qword [rdi + 0x308], r13
mov qword [rdi + 0x310], r13
mov qword [rdi + 0x318], r13
mov qword [rdi + 0x320], r13
lea r14, [rdi + 0x540]
mov qword [rbp + 0x4a8], r14
lea rcx, [r14 + 8]
call fcn.14002aa20
nop
lea rcx, [r14 + 0x20]
call fcn.14002aa20
nop
mov qword [rdi + 0x5a8], rsi
mov qword [rdi + 0x5b0], r13
mov qword [rdi + 0x5b8], r13
lea rcx, [rdi + 0x5d8]
mov rdx, qword [rbp + 0x29e0]
call fcn.14002a8d0
nop
mov byte [rdi + 0x5f0], r13b
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov qword [rdi + 0x5f8], rax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
mov qword [rdi + 0x50], r13
mov rcx, qword [rdi + 0x58]
mov qword [rdi + 0x58], r13
test rcx, rcx
je 0x140037100
call fcn.14001ca10
mov eax, dword [rbp + 0x29d0]
mov dword [rdi + 0x538], eax
mov ecx, 0xe8
call fcn.140110294
mov rbx, rax
mov qword [rbp + 0x4a8], rax
test rax, rax
je 0x140037155
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, [0x1400028b0]
mov qword [rbx], rax
lea rcx, [rbx + 0x10]
call fcn.140027710
jmp 0x140037158
mov rbx, r13
lea rax, [rbx + 0x10]
mov qword [rdi + 0x318], rax
mov rcx, qword [rdi + 0x320]
mov qword [rdi + 0x320], rbx
test rcx, rcx
je 0x14003717f
call fcn.14001ca10
mov dword [rdi + 0xe8], r13d
mov rbx, qword [rdi + 0x70]
mov qword [rdi + 0x70], r13
test rbx, rbx
je 0x1400371ac
mov rcx, rbx
call fcn.1400b2ca0
mov edx, 0xf8
mov rcx, rbx
call fcn.1401102d0
mov byte [rdi + 0x328], 0
call fcn.1400becc0
mov rbx, rax
mov qword [rsp + 0x58], rax
mov rcx, rax
call fcn.1400beca0
mov rdx, rax
mov r8d, 0x41015a5c
mov rcx, rbx
call fcn.1400beb30
movabs rcx, 0x852396afe3269
xor rax, rcx
mov qword [0x140128080], rax
mov rcx, rbx
call fcn.1400becb0
mov rdx, rax
mov r8d, 0xbaab0208
mov rcx, rbx
call fcn.1400beb30
movabs rcx, 0xc562983199256
xor rax, rcx
mov qword [0x140128090], rax
mov dword [rbp + 0x5c8], r13d
mov dword [rbp - 4], 0xbebebebe
mov dword [rbp + 2], 0xffb1ffae
mov dword [rbp + 6], 0xffb1ffa9
mov byte [rbp], 0xbe
mov dword [rbp + 0xa], 0xff9e
mov rdx, r13
movzx ecx, word [rbp + rdx*2 + 2]
movzx eax, byte [rbp + rdx - 4]
add ax, cx
mov word [rbp + rdx*2 + 2], ax
mov byte [rbp + rdx - 4], 0
inc rdx
cmp rdx, 5
jb 0x140037244
mov qword [rbp + 0x5d8], r13
mov qword [rbp + 0x5e8], r13
mov qword [rbp + 0x5f0], 7
mov word [rbp + 0x5d8], r13w
lea rax, [rbp + 2]
mov r15, 0xffffffffffffffff
mov r8, r15
inc r8
cmp word [rax + r8*2], 0
jne 0x140037297
lea rdx, [rbp + 2]
lea rcx, [rbp + 0x5d8]
call fcn.14000f4a0
nop
mov rax, r13
nop
mov byte [rbp + rax + 2], 0
inc rax
cmp rax, 0xa
jb 0x1400372bb
mov edx, dword [rdi + 0x538]
lea rcx, [rbp + 0x1148]
call 0x1400a62a0
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x1400372f2
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x5d8]
call fcn.14001d890
nop
lea rcx, [rbp + 0x1148]
call fcn.14000f270
lea rcx, [rbp + 0x5d8]
cmp qword [rbp + 0x5f0], 8
cmovae rcx, qword [rbp + 0x5d8]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x120089
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x1400374dd
mov dword [rbp + 0x44], 0xbebebebe
mov dword [rbp + 0x4a], 0xffb4ff87
mov dword [rbp + 0x4e], 0xffb1ffb4
mov byte [rbp + 0x48], 0xbe
mov dword [rbp + 0x52], 0xffb4
mov rdx, r13
nop word [rax + rax]
movzx ecx, word [rbp + rdx*2 + 0x4a]
movzx eax, byte [rbp + rdx + 0x44]
add ax, cx
mov word [rbp + rdx*2 + 0x4a], ax
mov byte [rbp + rdx + 0x44], 0
inc rdx
cmp rdx, 5
jb 0x140037383
mov dword [rbp + 0x538], 0xbebebebe
mov dword [rbp + 0x54e], 0xffa3ff88
mov dword [rbp + 0x552], 0xffaeffab
mov dword [rbp + 0x53c], 0xbebebebe
mov dword [rbp + 0x556], 0xffa6ffa7
mov dword [rbp + 0x55a], 0xffb6ff62
mov dword [rbp + 0x540], 0xbebebebe
mov dword [rbp + 0x55e], 0xff62ffb1
mov dword [rbp + 0x562], 0xffb1ffae
mov dword [rbp + 0x544], 0xbebebebe
mov dword [rbp + 0x566], 0xffa6ffa3
mov dword [rbp + 0x56a], 0xffabff62
mov dword [rbp + 0x548], 0xbebebebe
mov dword [rbp + 0x56e], 0xffa3ffaf
mov dword [rbp + 0x572], 0xffa7ffa9
xor eax, eax
mov word [rbp + 0x576], ax
mov rdx, r13
nop dword [rax]
nop word [rax + rax]
movzx ecx, word [rbp + rdx*2 + 0x54e]
movzx eax, byte [rbp + rdx + 0x538]
add ax, cx
mov word [rbp + rdx*2 + 0x54e], ax
mov byte [rbp + rdx + 0x538], 0
inc rdx
cmp rdx, 0x14
jb 0x140037457
mov r9d, 0x10
lea r8, [rbp + 0x4a]
lea rdx, [rbp + 0x54e]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rax, r13
nop dword [rax + rax]
mov byte [rbp + rax + 0x54e], 0
inc rax
cmp rax, 0x28
jb 0x1400374ab
mov byte [rbp + r13 + 0x4a], 0
inc r13
cmp r13, 0xa
jb 0x1400374c0
mov ecx, r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov rcx, qword [rdi + 0x318]
mov dword [rcx + 0x80], eax
mov rax, qword [rdi + 0x318]
mov edx, dword [rax + 0x80]
xor ecx, ecx
lea r9d, [rcx + 4]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rcx, qword [rdi + 0x318]
mov qword [rcx + 0x78], rax
mov rax, qword [rdi + 0x318]
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x5c8]
mov r8d, dword [rax + 0x80]
mov rdx, qword [rax + 0x78]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp + 0x5f0]
cmp rdx, 8
jb 0x1400375a5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x5d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400375a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400375a0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
mov qword [rbp + 0x5e8], r13
mov qword [rbp + 0x5f0], 7
mov word [rbp + 0x5d8], r13w
mov dword [rbp + 0x900], 1
mov qword [rbp + 0x908], r13
mov qword [rbp + 0x910], r13
xor r8d, r8d
lea rdx, [rbp + 0x900]
lea rcx, [rdi + 0x5b0]
call sub.gdiplus.dll_GdiplusStartup
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x70], xmm0
movdqu xmmword [rbp + 0x588], xmm0
mov eax, dword [rdi + 0x538]
mov rdx, r13
test eax, eax
je 0x140037a59
cmp eax, 2
je 0x14003777d
mov dword [rbp + 0x32], 0xbebebebe
mov dword [rbp + 0x38], 0xffb4ff87
mov dword [rbp + 0x3c], 0xffb1ffb4
mov byte [rbp + 0x36], 0xbe
mov dword [rbp + 0x40], 0xffb4
nop dword [rax]
movzx ecx, word [rbp + rdx*2 + 0x38]
movzx eax, byte [rbp + rdx + 0x32]
add ax, cx
mov word [rbp + rdx*2 + 0x38], ax
mov byte [rbp + rdx + 0x32], 0
inc rdx
cmp rdx, 5
jb 0x14003763f
mov dword [rbp + 0x3f0], 0xbebebebe
mov dword [rbp + 0x402], 0xffb0ff8b
mov dword [rbp + 0x406], 0xffa3ffb8
mov dword [rbp + 0x3f4], 0xbebebebe
mov dword [rbp + 0x40a], 0xffabffae
mov dword [rbp + 0x40e], 0xff62ffa6
mov dword [rbp + 0x3f8], 0xbebebebe
mov dword [rbp + 0x412], 0xffa3ffb2
mov dword [rbp + 0x416], 0xffa3ffb4
mov dword [rbp + 0x3fc], 0xbebebebe
mov dword [rbp + 0x41a], 0xffa7ffaf
mov dword [rbp + 0x41e], 0xffa7ffb6
mov byte [rbp + 0x400], 0xbe
mov dword [rbp + 0x422], 0xffb4
mov rdx, r13
nop dword [rax]
movzx ecx, word [rbp + rdx*2 + 0x402]
movzx eax, byte [rbp + rdx + 0x3f0]
add ax, cx
mov word [rbp + rdx*2 + 0x402], ax
mov byte [rbp + rdx + 0x3f0], 0
inc rdx
cmp rdx, 0x11
jb 0x1400376f3
mov r9d, 0x10
lea r8, [rbp + 0x38]
lea rdx, [rbp + 0x402]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rax, r13
nop dword [rax + rax]
mov byte [rbp + rax + 0x402], 0
inc rax
cmp rax, 0x22
jb 0x140037747
mov byte [rbp + r13 + 0x38], 0
inc r13
cmp r13, 0xa
jb 0x14003775c
mov rcx, 0xffffffffffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [r14], 1
mov dword [rdi + 0x578], r13d
mov dword [rbp - 0x16], 0xbebebebe
mov dword [rbp - 0x10], 0xff8bff94
mov dword [rbp - 0xc], 0xff8dff88
mov byte [rbp - 0x12], 0xbe
mov dword [rbp - 8], 0xff79
nop dword [rax]
movzx ecx, word [rbp + rdx*2 - 0x10]
movzx eax, byte [rbp + rdx - 0x16]
add ax, cx
mov word [rbp + rdx*2 - 0x10], ax
mov byte [rbp + rdx - 0x16], 0
inc rdx
cmp rdx, 5
jb 0x1400377af
movups xmm0, xmmword [rbp - 0x16]
movaps xmmword [rbp + 0x8e0], xmm0
movzx eax, word [rbp - 6]
mov word [rbp + 0x8f0], ax
lea rdx, [rbp + 0x8e6]
lea rcx, [rbp + 0x9b0]
call fcn.14002a8d0
nop
mov rax, r13
nop dword [rax]
mov byte [rbp + rax + 0x8e6], 0
inc rax
cmp rax, 0xa
jb 0x140037803
lea rcx, [rdi + 0x548]
lea rdx, [rbp + 0x9b0]
call fcn.14002ac40
nop
lea rcx, [rbp + 0x9b0]
call fcn.14002ab80
nop
mov rax, r13
nop word [rax + rax]
mov byte [rbp + rax - 0x10], 0
inc rax
cmp rax, 0xa
jb 0x140037847
mov dword [rbp + 0xc2], 0xbebebebe
mov dword [rbp + 0xd4], 0xffb6ffaa
mov dword [rbp + 0xd8], 0xffb2ffb6
mov dword [rbp + 0xc6], 0xbebebebe
mov dword [rbp + 0xdc], 0xff7cffb5
mov dword [rbp + 0xe0], 0xff71ff71
mov dword [rbp + 0xca], 0xbebebebe
mov dword [rbp + 0xe4], 0xffabffb4
mov dword [rbp + 0xe8], 0xffadffa8
mov dword [rbp + 0xce], 0xbebebebe
mov dword [rbp + 0xec], 0xff70ff79
mov dword [rbp + 0xf0], 0xffb1ffa5
mov byte [rbp + 0xd2], 0xbe
mov dword [rbp + 0xf4], 0xffaf
mov rdx, r13
nop word [rax + rax]
movzx ecx, word [rbp + rdx*2 + 0xd4]
movzx eax, byte [rbp + rdx + 0xc2]
add ax, cx
mov word [rbp + rdx*2 + 0xd4], ax
mov byte [rbp + rdx + 0xc2], 0
inc rdx
cmp rdx, 0x11
jb 0x1400378eb
movups xmm0, xmmword [rbp + 0xc2]
movaps xmmword [rbp + 0x940], xmm0
movups xmm1, xmmword [rbp + 0xd2]
movaps xmmword [rbp + 0x950], xmm1
movups xmm0, xmmword [rbp + 0xe2]
movaps xmmword [rbp + 0x960], xmm0
mov eax, dword [rbp + 0xf2]
mov dword [rbp + 0x970], eax
movzx eax, word [rbp + 0xf6]
mov word [rbp + 0x974], ax
lea rdx, [rbp + 0x952]
lea rcx, [rbp + 0x9c8]
call fcn.14002a8d0
nop
mov rax, r13
nop word [rax + rax]
mov byte [rbp + rax + 0x952], 0
inc rax
cmp rax, 0x22
jb 0x14003797f
lea rcx, [rdi + 0x560]
lea rdx, [rbp + 0x9c8]
call fcn.14002ac40
nop
lea rcx, [rbp + 0x9c8]
call fcn.14002ab80
nop
mov rax, r13
nop word [rax + rax]
mov byte [rbp + rax + 0xd4], 0
inc rax
cmp rax, 0x22
jb 0x1400379c3
mov word [rdi + 0x57c], 0x100
mov byte [rdi + 0x57e], 1
mov dword [rsp + 0x60], 0xff46e146
mov esi, 0xff242f3d
mov dword [rbp + 0x4e4], esi
mov dword [rbp + 0x4e8], esi
mov dword [rbp + 0x4ec], 0xff555555
mov dword [rbp + 0x4a4], 0x64ff64ff
mov r14d, 0xffa43bff
mov r15d, 0x16502ff
mov rax, qword [rdi + 0x318]
mov dword [rax + 0x84], 0x96
mov rax, qword [rdi + 0x318]
mov dword [rax + 0x88], 0x1f4
mov rax, qword [rdi + 0x318]
mov dword [rax + 0x8c], 0x190
jmp 0x140037e01
mov dword [r14], r13d
mov rcx, 0xffffffffffffffff
mov dword [rdi + 0x578], ecx
mov dword [rbp + 0xf8], 0xbebebebe
mov dword [rbp + 0x106], 0xffb0ff87
mov dword [rbp + 0x10a], 0xffabffa9
mov dword [rbp + 0xfc], 0xbebebebe
mov dword [rbp + 0x10e], 0xffa7ffb0
mov dword [rbp + 0x112], 0xffb9ff91
mov dword [rbp + 0x100], 0xbebebebe
mov dword [rbp + 0x116], 0xffabffb0
mov dword [rbp + 0x11a], 0xffa9ffb0
xor eax, eax
mov word [rbp + 0x11e], ax
nop word [rax + rax]
movzx ecx, word [rbp + rdx*2 + 0x106]
movzx eax, byte [rbp + rdx + 0xf8]
add ax, cx
mov word [rbp + rdx*2 + 0x106], ax
mov byte [rbp + rdx + 0xf8], 0
inc rdx
cmp rdx, 0xc
jb 0x140037ad7
movups xmm0, xmmword [rbp + 0xf8]
movaps xmmword [rbp + 0xa40], xmm0
movups xmm1, xmmword [rbp + 0x108]
movaps xmmword [rbp + 0xa50], xmm1
movsd xmm0, qword [rbp + 0x118]
movsd qword [rbp + 0xa60], xmm0
lea rdx, [rbp + 0xa4e]
lea rcx, [rbp + 0x9e0]
call fcn.14002a8d0
nop
mov rax, r13
nop
mov byte [rbp + rax + 0xa4e], 0
inc rax
cmp rax, 0x18
jb 0x140037b4b
lea rcx, [rdi + 0x548]
lea rdx, [rbp + 0x9e0]
call fcn.14002ac40
nop
lea rcx, [rbp + 0x9e0]
call fcn.14002ab80
nop
mov rax, r13
nop word [rax + rax]
mov byte [rbp + rax + 0x106], 0
inc rax
cmp rax, 0x18
jb 0x140037b8f
mov dword [rbp + 0x200], 0xbebebebe
mov dword [rbp + 0x21c], 0xffb6ffaa
mov dword [rbp + 0x220], 0xffb2ffb6
mov dword [rbp + 0x204], 0xbebebebe
mov dword [rbp + 0x224], 0xff7cffb5
mov dword [rbp + 0x228], 0xff71ff71
mov dword [rbp + 0x208], 0xbebebebe
mov dword [rbp + 0x22c], 0xffb9ffb9
mov dword [rbp + 0x230], 0xff70ffb9
mov dword [rbp + 0x20c], 0xbebebebe
mov dword [rbp + 0x234], 0xffb0ffa7
mov dword [rbp + 0x238], 0xffabffa9
mov dword [rbp + 0x210], 0xbebebebe
mov dword [rbp + 0x23c], 0xffa7ffb0
mov dword [rbp + 0x240], 0xffb9ffb1
mov dword [rbp + 0x214], 0xbebebebe
mov dword [rbp + 0x244], 0xffabffb0
mov dword [rbp + 0x248], 0xffa9ffb0
mov word [rbp + 0x218], 0xbebe
mov dword [rbp + 0x24c], 0xffb6ff70
mov byte [rbp + 0x21a], 0xbe
mov dword [rbp + 0x250], 0xffb1
mov rdx, r13
nop dword [rax]
movzx ecx, word [rbp + rdx*2 + 0x21c]
movzx eax, byte [rbp + rdx + 0x200]
add ax, cx
mov word [rbp + rdx*2 + 0x21c], ax
mov byte [rbp + rdx + 0x200], 0
inc rdx
cmp rdx, 0x1b
jb 0x140037c83
movups xmm0, xmmword [rbp + 0x200]
movaps xmmword [rbp + 0xc20], xmm0
movups xmm1, xmmword [rbp + 0x210]
movaps xmmword [rbp + 0xc30], xmm1
movups xmm0, xmmword [rbp + 0x220]
movaps xmmword [rbp + 0xc40], xmm0
movups xmm1, xmmword [rbp + 0x230]
movaps xmmword [rbp + 0xc50], xmm1
movups xmm0, xmmword [rbp + 0x240]
movaps xmmword [rbp + 0xc60], xmm0
mov eax, dword [rbp + 0x250]
mov dword [rbp + 0xc70], eax
lea rdx, [rbp + 0xc3c]
lea rcx, [rbp + 0x9f8]
call fcn.14002a8d0
nop
mov rax, r13
nop word [rax + rax]
mov byte [rbp + rax + 0xc3c], 0
inc rax
cmp rax, 0x36
jb 0x140037d27
lea rcx, [rdi + 0x560]
lea rdx, [rbp + 0x9f8]
call fcn.14002ac40
nop
lea rcx, [rbp + 0x9f8]
call fcn.14002ab80
nop
mov rax, r13
nop word [rax + rax]
mov byte [rbp + rax + 0x21c], 0
inc rax
cmp rax, 0x36
jb 0x140037d6b
mov word [rdi + 0x57c], 1
mov byte [rdi + 0x57e], 0
mov eax, 0xffffffff
mov dword [rsp + 0x60], eax
mov dword [rbp + 0x4e4], 0xff444444
mov dword [rbp + 0x4e8], 0xff646464
mov dword [rbp + 0x4ec], 0xff555555
mov dword [rbp + 0x4a4], eax
mov esi, 0xff555555
mov r14d, 0xff31c444
mov r15d, 0xff1e7a18
mov rax, qword [rdi + 0x318]
mov dword [rax + 0x84], 0x96
mov rax, qword [rdi + 0x318]
mov dword [rax + 0x88], 0x320
mov rax, qword [rdi + 0x318]
mov dword [rax + 0x8c], 0x258
mov rax, qword [rdi + 0x318]
mov dword [rax + 0x68], 0xff242424
mov rax, qword [rdi + 0x318]
mov dword [rax + 0x6c], 0x27ffffff
mov rax, qword [rdi + 0x318]
mov dword [rax + 0x70], 0x78ffffff
mov rcx, qword [rdi + 0x318]
mov eax, dword [rsp + 0x60]
mov dword [rcx + 0x74], eax
mov eax, dword [rdi + 0x578]
cmp eax, 0xffffffff
je 0x140037e50
mov dword [rdi + 0x48], eax
jmp 0x140037ef7
mov dword [rdi + 0x48], r13d
xor edx, edx
mov r8d, 0xac
lea rcx, [rbp + 0x11f0]
call sub.VCRUNTIME140.dll_memset
mov edx, 0x55
lea rcx, [rbp + 0x11f0]
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLocaleName]
test eax, eax
je 0x140037ef7
cmp word [rbp + 0x11f4], 0x2d
jne 0x140037ef7
mov rax, qword [rbp + 0x11f0]
cmp ax, 0x64
jne 0x140037ebb
cmp word [rbp + 0x11f2], 0x65
jne 0x140037ef7
mov dword [rdi + 0x48], 2
jmp 0x140037ef7
cmp ax, 0x63
jne 0x140037ed8
cmp word [rbp + 0x11f2], 0x6e
je 0x140037ef0
jmp 0x140037ef7
cmp ax, 0x7a
jne 0x140037ef7
cmp word [rbp + 0x11f2], 0x68
jne 0x140037ef7
mov dword [rdi + 0x48], 1
mov ecx, dword [rdi + 0x48]
mov qword [rbp + 0x860], rdi
mov qword [rbp + 0x7e0], rdi
mov qword [rbp + 0x8a0], rdi
test ecx, ecx
je 0x140037f89
sub ecx, 1
je 0x140037f58
cmp ecx, 1
jne 0x140037f89
mov rax, qword [rdi + 0x38]
cmp qword [rdi + 0x30], rax
jne 0x140037f4f
lea edx, [rcx + 0x4f]
lea rcx, [rdi + 0x30]
call fcn.1400a5630
lea rcx, [rbp + 0x860]
call fcn.140048370
mov rdx, qword [rdi + 0x30]
jmp 0x140037fb2
mov rax, qword [rdi + 0x20]
cmp qword [rdi + 0x18], rax
jne 0x140037f80
mov edx, 0x50
lea rcx, [rdi + 0x18]
call fcn.1400a5630
lea rcx, [rbp + 0x8a0]
call fcn.14007b3d0
mov rdx, qword [rdi + 0x18]
jmp 0x140037fb2
mov rax, qword [rdi + 8]
cmp qword [rdi], rax
jne 0x140037faf
mov edx, 0x50
mov rcx, rdi
call fcn.1400a5630
lea rcx, [rbp + 0x7e0]
call fcn.140063aa0
mov rdx, qword [rdi]
add rdx, 0x18
lea rcx, [rbp + 0x10c8]
call fcn.14002a810
lea rcx, [rbp + 0x10c8]
call fcn.14002ab80
cmp qword [0x140128e90], 0
jne 0x14003804a
mov ecx, 0x1a8
call fcn.140110294
mov qword [rsp + 0x48], rax
test rax, rax
je 0x140038001
mov rcx, rax
call fcn.14000a140
jmp 0x140038004
mov rax, r13
mov qword [rbp + 0x608], r13
mov rdx, qword [0x140128e90]
mov qword [0x140128e90], rax
test rdx, rdx
je 0x14003804a
lea rcx, [0x140128e90]
call fcn.140089d10
mov rdx, qword [rbp + 0x608]
test rdx, rdx
je 0x14003804a
lea rcx, [rbp + 0x608]
call fcn.140089d10
mov dword [rbp + 0x366], 0xbebebebe
mov dword [rbp + 0x374], 0xffa7ffad
mov dword [rbp + 0x378], 0xffb0ffb4
mov dword [rbp + 0x36a], 0xbebebebe
mov dword [rbp + 0x37c], 0xffaeffa7
mov dword [rbp + 0x380], 0xff74ff75
mov dword [rbp + 0x36e], 0xbebebebe
mov dword [rbp + 0x384], 0xffa6ff70
mov dword [rbp + 0x388], 0xffaeffae
xor eax, eax
mov word [rbp + 0x38c], ax
mov rdx, r13
nop word [rax + rax]
movzx ecx, word [rbp + rdx*2 + 0x374]
movzx eax, byte [rbp + rdx + 0x366]
add ax, cx
mov word [rbp + rdx*2 + 0x374], ax
mov byte [rbp + rdx + 0x366], 0
inc rdx
cmp rdx, 0xc
jb 0x1400380ba
xor r8d, r8d
lea rdx, [rbp + 0x374]
mov rcx, qword [rsp + 0x58]
call fcn.1400bf720
mov qword [rdi + 0x580], rax
mov rax, r13
nop word [rax + rax]
mov byte [rbp + rax + 0x374], 0
inc rax
cmp rax, 0x18
jb 0x14003810e
mov dword [rbp + 0x1de], 0xbebebebe
mov dword [rbp + 0x1ea], 0xffb5ffb7
mov dword [rbp + 0x1ee], 0xffb4ffa7
mov dword [rbp + 0x1e2], 0xbebebebe
mov dword [rbp + 0x1f2], 0xff74ff75
mov dword [rbp + 0x1f6], 0xffa6ff70
mov word [rbp + 0x1e6], 0xbebe
mov dword [rbp + 0x1fa], 0xffaeffae
xor eax, eax
mov word [rbp + 0x1fe], ax
mov rdx, r13
nop dword [rax]
movzx ecx, word [rbp + rdx*2 + 0x1ea]
movzx eax, byte [rbp + rdx + 0x1de]
add ax, cx
mov word [rbp + rdx*2 + 0x1ea], ax
mov byte [rbp + rdx + 0x1de], 0
inc rdx
cmp rdx, 0xa
jb 0x140038182
xor r8d, r8d
lea rdx, [rbp + 0x1ea]
mov rcx, qword [rsp + 0x58]
call fcn.1400bf720
mov qword [rdi + 0x588], rax
mov rax, r13
nop word [rax + rax]
mov byte [rbp + rax + 0x1ea], 0
inc rax
cmp rax, 0x14
jb 0x1400381d6
mov dword [rbp + 0xa4], 0xbebebebe
mov dword [rbp + 0xae], 0xffa6ffa9
mov dword [rbp + 0xb2], 0xff75ffab
mov dword [rbp + 0xa8], 0xbebebebe
mov dword [rbp + 0xb6], 0xff70ff74
mov dword [rbp + 0xba], 0xffaeffa6
mov byte [rbp + 0xac], 0xbe
mov dword [rbp + 0xbe], 0xffae
mov rdx, r13
nop dword [rax]
nop word [rax + rax]
movzx ecx, word [rbp + rdx*2 + 0xae]
movzx eax, byte [rbp + rdx + 0xa4]
add ax, cx
mov word [rbp + rdx*2 + 0xae], ax
mov byte [rbp + rdx + 0xa4], 0
inc rdx
cmp rdx, 9
jb 0x14003824a
xor r8d, r8d
lea rdx, [rbp + 0xae]
mov rcx, qword [rsp + 0x58]
call fcn.1400bf720
mov qword [rdi + 0x590], rax
mov rax, r13
nop word [rax + rax]
mov byte [rbp + rax + 0xae], 0
inc rax
cmp rax, 0x12
jb 0x14003829e
mov dword [rbp + 0x33e], 0xbebebebe
mov dword [rbp + 0x34c], 0xff86ff83
mov dword [rbp + 0x350], 0xff83ff98
mov dword [rbp + 0x342], 0xbebebebe
mov dword [rbp + 0x354], 0xff8bff92
mov dword [rbp + 0x358], 0xff74ff75
mov dword [rbp + 0x346], 0xbebebebe
mov dword [rbp + 0x35c], 0xffa6ff70
mov dword [rbp + 0x360], 0xffaeffae
xor eax, eax
mov word [rbp + 0x364], ax
mov rdx, r13
nop word [rax + rax]
movzx ecx, word [rbp + rdx*2 + 0x34c]
movzx eax, byte [rbp + rdx + 0x33e]
add ax, cx
mov word [rbp + rdx*2 + 0x34c], ax
mov byte [rbp + rdx + 0x33e], 0
inc rdx
cmp rdx, 0xc
jb 0x140038322
xor r8d, r8d
lea rdx, [rbp + 0x34c]
mov rcx, qword [rsp + 0x58]
call fcn.1400bf720
mov qword [rdi + 0x598], rax
mov rax, r13
nop word [rax + rax]
mov byte [rbp + rax + 0x34c], 0
inc rax
cmp rax, 0x18
jb 0x140038376
mov dword [rbp + 0x1ba], 0xbebebebe
mov dword [rbp + 0x1c6], 0xffa6ffa9
mov dword [rbp + 0x1ca], 0xffb2ffab
mov dword [rbp + 0x1be], 0xbebebebe
mov dword [rbp + 0x1ce], 0xffb7ffae
mov dword [rbp + 0x1d2], 0xff70ffb5
mov word [rbp + 0x1c2], 0xbebe
mov dword [rbp + 0x1d6], 0xffaeffa6
mov byte [rbp + 0x1c4], 0xbe
mov dword [rbp + 0x1da], 0xffae
mov rdx, r13
nop dword [rax]
nop dword [rax + rax]
movzx ecx, word [rbp + rdx*2 + 0x1c6]
movzx eax, byte [rbp + rdx + 0x1ba]
add ax, cx
mov word [rbp + rdx*2 + 0x1c6], ax
mov byte [rbp + rdx + 0x1ba], 0
inc rdx
cmp rdx, 0xb
jb 0x1400383fa
xor r8d, r8d
lea rdx, [rbp + 0x1c6]
mov rcx, qword [rsp + 0x58]
call fcn.1400bf720
mov qword [rdi + 0x5a0], rax
mov rax, r13
nop word [rax + rax]
mov byte [rbp + rax + 0x1c6], 0
inc rax
cmp rax, 0x16
jb 0x14003844e
lea rbx, [rdi + 0x2f0]
mov r8, rbx
mov rdx, qword [rdi + 0x580]
mov rcx, qword [rsp + 0x58]
call fcn.1400bdbd0
mov r8, rbx
mov rdx, qword [rdi + 0x588]
mov rcx, qword [rsp + 0x58]
call fcn.1400bdbd0
mov rcx, qword [rsp + 0x58]
call fcn.1400beca0
mov rdx, rax
mov r8, rbx
mov rcx, qword [rsp + 0x58]
call fcn.1400bdbd0
mov r8, rbx
mov rdx, qword [rdi + 0x590]
mov rcx, qword [rsp + 0x58]
call fcn.1400bdbd0
mov r8, rbx
mov rdx, qword [rdi + 0x598]
mov rcx, qword [rsp + 0x58]
call fcn.1400bdbd0
mov r8, rbx
mov rdx, qword [rdi + 0x5a0]
mov rcx, qword [rsp + 0x58]
call fcn.1400bdbd0
cmp byte [rbp + 0x29c8], 0
jne 0x140039345
mov ecx, 0x58
call fcn.140110294
mov qword [rsp + 0x48], rax
test rax, rax
je 0x14003851a
mov rcx, rax
call fcn.1400c4f10
jmp 0x14003851d
mov rax, r13
mov qword [rsp + 0x50], rax
lea rcx, [rbp + 0xae0]
lea rdx, [rdi + 0x60]
cmp rdx, rcx
je 0x140038559
mov rcx, qword [rdx]
mov qword [rsp + 0x40], rcx
mov qword [rdx], rax
test rcx, rcx
je 0x14003857d
call fcn.1400c4ff0
mov rcx, qword [rsp + 0x40]
jmp 0x14003856f
test rax, rax
je 0x14003857d
mov rcx, rax
call fcn.1400c4ff0
mov rcx, qword [rsp + 0x50]
mov edx, 0x58
call fcn.1401102d0
lea rdx, [rdi + 0x60]
mov rax, qword [rdx]
mov qword [rsp + 0x40], rax
mov dword [rbp + 0x142], 0xbebebebe
mov dword [rbp + 0x150], 0xffa7ffa4
mov dword [rbp + 0x154], 0xffa7ffb5
mov dword [rbp + 0x146], 0xbebebebe
mov dword [rbp + 0x158], 0xffb8ffb4
mov dword [rbp + 0x15c], 0xffa5ffab
mov dword [rbp + 0x14a], 0xbebebebe
mov dword [rbp + 0x160], 0xff70ffa7
mov dword [rbp + 0x164], 0xffbaffa7
mov byte [rbp + 0x14e], 0xbe
mov dword [rbp + 0x168], 0xffa7
mov rdx, r13
nop dword [rax + rax]
movzx ecx, word [rbp + rdx*2 + 0x150]
movzx eax, byte [rbp + rdx + 0x142]
add ax, cx
mov word [rbp + rdx*2 + 0x150], ax
mov byte [rbp + rdx + 0x142], 0
inc rdx
cmp rdx, 0xd
jb 0x1400385f8
mov qword [rbp + 0x640], r13
mov qword [rbp + 0x650], r13
mov qword [rbp + 0x658], 7
mov word [rbp + 0x640], r13w
lea rcx, [rbp + 0x150]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rcx + r8*2], 0
jne 0x14003865c
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x640]
call fcn.14000f4a0
nop
lea rdx, [rbp + 0x640]
mov rcx, qword [rsp + 0x40]
call fcn.1400c5280
nop
mov r8, qword [rbp + 0x658]
cmp r8, 8
jb 0x1400386b8
inc r8
mov rdx, qword [rbp + 0x640]
lea rcx, [rbp + 0x640]
call fcn.14001ede0
mov qword [rbp + 0x650], r13
mov qword [rbp + 0x658], 7
mov word [rbp + 0x640], r13w
mov rax, r13
mov byte [rbp + rax + 0x150], 0
inc rax
cmp rax, 0x1a
jb 0x1400386d5
mov rax, qword [rdi + 0x60]
mov qword [rsp + 0x40], rax
mov dword [rbp + 0x254], 0xbebebebe
mov dword [rbp + 0x266], 0xffa7ffa4
mov dword [rbp + 0x26a], 0xffa7ffb5
mov dword [rbp + 0x258], 0xbebebebe
mov dword [rbp + 0x26e], 0xffb8ffb4
mov dword [rbp + 0x272], 0xffa5ffab
mov dword [rbp + 0x25c], 0xbebebebe
mov dword [rbp + 0x276], 0xffa1ffa7
mov dword [rbp + 0x27a], 0xff78ffba
mov dword [rbp + 0x260], 0xbebebebe
mov dword [rbp + 0x27e], 0xff70ff76
mov dword [rbp + 0x282], 0xffbaffa7
mov byte [rbp + 0x264], 0xbe
mov dword [rbp + 0x286], 0xffa7
mov rdx, r13
nop word [rax + rax]
movzx ecx, word [rbp + rdx*2 + 0x266]
movzx eax, byte [rbp + rdx + 0x254]
add ax, cx
mov word [rbp + rdx*2 + 0x266], ax
mov byte [rbp + rdx + 0x254], 0
inc rdx
cmp rdx, 0x11
jb 0x140038788
mov qword [rbp + 0x660], r13
mov qword [rbp + 0x670], r13
mov qword [rbp + 0x678], 7
mov word [rbp + 0x660], r13w
lea rcx, [rbp + 0x266]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rcx + r8*2], 0
jne 0x1400387ec
lea rdx, [rbp + 0x266]
lea rcx, [rbp + 0x660]
call fcn.14000f4a0
nop
lea rdx, [rbp + 0x660]
mov rcx, qword [rsp + 0x40]
call fcn.1400c5280
nop
mov r8, qword [rbp + 0x678]
cmp r8, 8
jb 0x140038848
inc r8
mov rdx, qword [rbp + 0x660]
lea rcx, [rbp + 0x660]
call fcn.14001ede0
mov qword [rbp + 0x670], r13
mov qword [rbp + 0x678], 7
mov word [rbp + 0x660], r13w
mov rax, r13
mov byte [rbp + rax + 0x266], 0
inc rax
cmp rax, 0x22
jb 0x140038865
mov rax, qword [rdi + 0x60]
mov qword [rsp + 0x40], rax
mov dword [rbp + 0x86], 0xbebebebe
mov dword [rbp + 0x90], 0xffb6ffb5
mov dword [rbp + 0x94], 0xffa3ffa7
mov dword [rbp + 0x8a], 0xbebebebe
mov dword [rbp + 0x98], 0xff70ffaf
mov dword [rbp + 0x9c], 0xffbaffa7
mov byte [rbp + 0x8e], 0xbe
mov dword [rbp + 0xa0], 0xffa7
mov rdx, r13
nop dword [rax + rax]
movzx ecx, word [rbp + rdx*2 + 0x90]
movzx eax, byte [rbp + rdx + 0x86]
add ax, cx
mov word [rbp + rdx*2 + 0x90], ax
mov byte [rbp + rdx + 0x86], 0
inc rdx
cmp rdx, 9
jb 0x1400388d8
mov qword [rbp + 0x680], r13
mov qword [rbp + 0x690], r13
mov qword [rbp + 0x698], 7
mov word [rbp + 0x680], r13w
lea rcx, [rbp + 0x90]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rcx + r8*2], 0
jne 0x14003893c
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x680]
call fcn.14000f4a0
nop
lea rdx, [rbp + 0x680]
mov rcx, qword [rsp + 0x40]
call fcn.1400c5280
nop
mov r8, qword [rbp + 0x698]
cmp r8, 8
jb 0x140038998
inc r8
mov rdx, qword [rbp + 0x680]
lea rcx, [rbp + 0x680]
call fcn.14001ede0
mov qword [rbp + 0x690], r13
mov qword [rbp + 0x698], 7
mov word [rbp + 0x680], r13w
mov rax, r13
mov byte [rbp + rax + 0x90], 0
inc rax
cmp rax, 0x12
jb 0x1400389b5
mov rax, qword [rdi + 0x60]
mov qword [rsp + 0x40], rax
mov dword [rbp + 0x38e], 0xbebebebe
mov dword [rbp + 0x3a0], 0xffb6ffb5
mov dword [rbp + 0x3a4], 0xffa3ffa7
mov dword [rbp + 0x392], 0xbebebebe
mov dword [rbp + 0x3a8], 0xffb5ffaf
mov dword [rbp + 0x3ac], 0xffb4ffa7
mov dword [rbp + 0x396], 0xbebebebe
mov dword [rbp + 0x3b0], 0xffabffb8
mov dword [rbp + 0x3b4], 0xffa7ffa5
mov dword [rbp + 0x39a], 0xbebebebe
mov dword [rbp + 0x3b8], 0xffa7ff70
mov dword [rbp + 0x3bc], 0xffa7ffba
xor eax, eax
mov word [rbp + 0x3c0], ax
mov rdx, r13
nop
movzx ecx, word [rbp + rdx*2 + 0x3a0]
movzx eax, byte [rbp + rdx + 0x38e]
add ax, cx
mov word [rbp + rdx*2 + 0x3a0], ax
mov byte [rbp + rdx + 0x38e], 0
inc rdx
cmp rdx, 0x10
jb 0x140038a58
mov qword [rbp + 0x6a0], r13
mov qword [rbp + 0x6b0], r13
mov qword [rbp + 0x6b8], 7
mov word [rbp + 0x6a0], r13w
lea rcx, [rbp + 0x3a0]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rcx + r8*2], 0
jne 0x140038abc
lea rdx, [rbp + 0x3a0]
lea rcx, [rbp + 0x6a0]
call fcn.14000f4a0
nop
lea rdx, [rbp + 0x6a0]
mov rcx, qword [rsp + 0x40]
call fcn.1400c5280
nop
mov r8, qword [rbp + 0x6b8]
cmp r8, 8
jb 0x140038b18
inc r8
mov rdx, qword [rbp + 0x6a0]
lea rcx, [rbp + 0x6a0]
call fcn.14001ede0
mov qword [rbp + 0x6b0], r13
mov qword [rbp + 0x6b8], 7
mov word [rbp + 0x6a0], r13w
mov rax, r13
mov byte [rbp + rax + 0x3a0], 0
inc rax
cmp rax, 0x20
jb 0x140038b35
mov rax, qword [rdi + 0x60]
mov qword [rsp + 0x40], rax
mov dword [rbp + 0x426], 0xbebebebe
mov dword [rbp + 0x43a], 0xffb6ffb5
mov dword [rbp + 0x43e], 0xffa3ffa7
mov dword [rbp + 0x42a], 0xbebebebe
mov dword [rbp + 0x442], 0xffb9ffaf
mov dword [rbp + 0x446], 0xffa4ffa7
mov dword [rbp + 0x42e], 0xbebebebe
mov dword [rbp + 0x44a], 0xffa7ffaa
mov dword [rbp + 0x44e], 0xffb2ffae
mov dword [rbp + 0x432], 0xbebebebe
mov dword [rbp + 0x452], 0xffb4ffa7
mov dword [rbp + 0x456], 0xffa7ff70
mov word [rbp + 0x436], 0xbebe
mov dword [rbp + 0x45a], 0xffa7ffba
xor eax, eax
mov word [rbp + 0x45e], ax
mov rdx, r13
nop dword [rax]
nop word [rax + rax]
movzx ecx, word [rbp + rdx*2 + 0x43a]
movzx eax, byte [rbp + rdx + 0x426]
add ax, cx
mov word [rbp + rdx*2 + 0x43a], ax
mov byte [rbp + rdx + 0x426], 0
inc rdx
cmp rdx, 0x12
jb 0x140038bf8
mov qword [rbp + 0x6c0], r13
mov qword [rbp + 0x6d0], r13
mov qword [rbp + 0x6d8], 7
mov word [rbp + 0x6c0], r13w
lea rcx, [rbp + 0x43a]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rcx + r8*2], 0
jne 0x140038c5c
lea rdx, [rbp + 0x43a]
lea rcx, [rbp + 0x6c0]
call fcn.14000f4a0
nop
lea rdx, [rbp + 0x6c0]
mov rcx, qword [rsp + 0x40]
call fcn.1400c5280
nop
mov r8, qword [rbp + 0x6d8]
cmp r8, 8
jb 0x140038cb8
inc r8
mov rdx, qword [rbp + 0x6c0]
lea rcx, [rbp + 0x6c0]
call fcn.14001ede0
mov qword [rbp + 0x6d0], r13
mov qword [rbp + 0x6d8], 7
mov word [rbp + 0x6c0], r13w
mov rax, r13
mov byte [rbp + rax + 0x43a], 0
inc rax
cmp rax, 0x24
jb 0x140038cd5
mov rax, qword [rdi + 0x60]
mov qword [rsp + 0x40], rax
mov dword [rbp + 0x28a], 0xbebebebe
mov dword [rbp + 0x29c], 0xffa3ffa7
mov dword [rbp + 0x2a0], 0xffbbffb5
mov dword [rbp + 0x28e], 0xbebebebe
mov dword [rbp + 0x2a4], 0xffb0ffa3
mov dword [rbp + 0x2a8], 0xffabffb6
mov dword [rbp + 0x292], 0xbebebebe
mov dword [rbp + 0x2ac], 0xffaaffa5
mov dword [rbp + 0x2b0], 0xffa3ffa7
mov dword [rbp + 0x296], 0xbebebebe
mov dword [rbp + 0x2b4], 0xff70ffb6
mov dword [rbp + 0x2b8], 0xffbaffa7
mov byte [rbp + 0x29a], 0xbe
mov dword [rbp + 0x2bc], 0xffa7
mov rdx, r13
nop word [rax + rax]
movzx ecx, word [rbp + rdx*2 + 0x29c]
movzx eax, byte [rbp + rdx + 0x28a]
add ax, cx
mov word [rbp + rdx*2 + 0x29c], ax
mov byte [rbp + rdx + 0x28a], 0
inc rdx
cmp rdx, 0x11
jb 0x140038d88
mov qword [rbp + 0x6e0], r13
mov qword [rbp + 0x6f0], r13
mov qword [rbp + 0x6f8], 7
mov word [rbp + 0x6e0], r13w
lea rcx, [rbp + 0x29c]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
invalid
invalid
invalid