Function at 0x1802138b8
Capabilities:
Encode data using xor
Parse pe header

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], r8
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x558]
sub rsp, 0x620
mov qword [rbp + 0x458], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov sil, r9b
mov r14, rdx
mov r15, rcx
call fcn.180209ce0
xor r13d, r13d
test al, al
je 0x18021599b
mov r8d, dword [0x1802bccdc]
mov rax, qword gs:[0x58]
mov rdi, qword [rax + r8*8]
or rbx, 0xffffffffffffffff
lea r12d, [r13 + 1]
mov eax, 4
mov eax, dword [rdi + rax]
cmp dword [0x1802c96ac], eax
jle 0x180213b4c
lea rcx, [0x1802c96ac]
call fcn.1802696f0
cmp dword [0x1802c96ac], ebx
jne 0x180213b4c
lea rax, [rbp + 0x3f8]
mov qword [rbp + 0x58], rax
mov byte [rbp - 0x34], 0x5b
lea eax, [r13 + 0x7f]
mov byte [rbp - 0x33], al
lea ecx, [rbx + 0x70]
mov byte [rbp - 0x32], cl
mov byte [rbp - 0x31], al
mov byte [rbp - 0x30], cl
lea eax, [rbx + 0x60]
mov byte [rbp - 0x2f], al
lea eax, [rbx + 0x7e]
mov byte [rbp - 0x2e], al
mov byte [rbp - 0x2d], cl
mov byte [rbp - 0x2c], 0x7c
mov byte [rbp - 0x2b], 0x4b
lea eax, [rbx + 0x5b]
mov byte [rbp - 0x2a], al
lea eax, [rbx + 0x4e]
mov byte [rbp - 0x29], al
mov byte [rbp - 0x28], r13b
mov al, byte [rbp - 0x34]
mov ecx, r13d
lea r15d, [r13 + 0xc]
mov al, byte [rbp + rcx - 0x34]
sub al, 0xa
mov byte [rbp + rcx - 0x34], al
add rcx, r12
cmp rcx, r15
jb 0x18021399f
xorps xmm0, xmm0
movups xmmword [rbp + 0x3f8], xmm0
mov qword [rbp + 0x408], r13
mov qword [rbp + 0x410], r13
lea rax, [rbp - 0x34]
mov r8, rbx
inc r8
cmp byte [rax + r8], r13b
jne 0x1802139d0
lea rdx, [rbp - 0x34]
lea rcx, [rbp + 0x3f8]
call fcn.18007b70c
nop
mov eax, 0xc
mov dword [rbp], eax
mov byte [rbp + 4], 0x67
mov eax, 0x69
mov byte [rbp + 5], al
mov byte [rbp + 6], 0x7e
mov byte [rbp + 7], 0x62
mov byte [rbp + 8], al
mov eax, 0x60
mov byte [rbp + 9], al
mov byte [rbp + 0xa], 0x3f
mov byte [rbp + 0xb], 0x3e
xor eax, eax
mov byte [rbp + 0xc], al
mov al, byte [rbp + 4]
mov rdx, r13
mov r15d, 8
mov al, byte [rbp + rdx + 4]
mov ecx, dword [rbp]
xor cl, al
mov byte [rbp + rdx + 4], cl
add rdx, r12
cmp rdx, r15
jb 0x180213a2a
mov byte [rbp + 0xc], r13b
xorps xmm0, xmm0
movups xmmword [rbp + 0x358], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x368], xmm1
lea rax, [rbp + 4]
mov r8, rbx
mov r15, qword [rbp + 0x560]
inc r8
cmp byte [rax + r8], r13b
jne 0x180213a66
lea rdx, [rbp + 4]
lea rcx, [rbp + 0x358]
call fcn.18007b70c
nop
lea rdx, [rbp + 0x358]
lea rcx, [rbp + 0x460]
call fcn.180188b20
nop
mov qword [rsp + 0x20], r13
mov r9b, r12b
lea r8, [rbp + 0x3f8]
mov rdx, rax
lea rcx, [0x1802c9f30]
call fcn.18008b3e4
nop
mov rdx, qword [rbp + 0x370]
mov eax, 0x10
cmp rdx, rax
jb 0x180213afb
inc rdx
mov rcx, qword [rbp + 0x358]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180213af6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180213af6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rbp + 0x368], xmm0
mov byte [rbp + 0x358], r13b
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rbp + 4]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xd]
lea rcx, [rbp - 0x34]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027e5dc]
call fcn.18026951c
nop
lea rcx, [0x1802c96ac]
call fcn.180269690
mov eax, 4
mov eax, dword [rdi + rax]
cmp dword [0x1802c8a28], eax
jle 0x180213e43
lea rcx, [0x1802c8a28]
call fcn.1802696f0
cmp dword [0x1802c8a28], ebx
jne 0x180213e43
lea rax, [rbp + 0x418]
mov qword [rbp + 0x60], rax
mov r9d, 0x72
mov dword [rbp - 0x80], r9d
mov eax, dword [rbp - 0x80]
xor al, 0x5a
mov byte [rbp - 0x7c], al
mov eax, dword [rbp - 0x80]
add al, r12b
xor al, 0x77
mov byte [rbp - 0x7b], al
mov eax, dword [rbp - 0x80]
add al, 2
xor al, 0x53
mov byte [rbp - 0x7a], al
mov eax, dword [rbp - 0x80]
add al, 3
lea edx, [r9 - 0xd]
xor al, dl
mov byte [rbp - 0x79], al
mov eax, dword [rbp - 0x80]
add al, 4
lea r15d, [r9 + 2]
xor al, r15b
mov byte [rbp - 0x78], al
mov eax, dword [rbp - 0x80]
add al, 5
xor al, 0x49
mov byte [rbp - 0x77], al
mov eax, dword [rbp - 0x80]
add al, 6
lea r10d, [r9 - 4]
xor al, r10b
mov byte [rbp - 0x76], al
mov eax, dword [rbp - 0x80]
add al, 7
xor al, 0x66
mov byte [rbp - 0x75], al
mov eax, dword [rbp - 0x80]
add al, 8
lea r11d, [r9 - 3]
xor al, r11b
mov byte [rbp - 0x74], al
mov eax, dword [rbp - 0x80]
add al, 9
xor al, r9b
mov byte [rbp - 0x73], al
mov eax, dword [rbp - 0x80]
add al, 0xa
xor al, 0x6d
mov byte [rbp - 0x72], al
mov eax, dword [rbp - 0x80]
add al, 0xb
lea r8d, [r9 - 0x11]
xor al, r8b
mov byte [rbp - 0x71], al
mov eax, dword [rbp - 0x80]
add al, 0xc
xor al, r15b
mov byte [rbp - 0x70], al
mov eax, dword [rbp - 0x80]
add al, 0xd
xor al, 0x69
mov byte [rbp - 0x6f], al
mov eax, dword [rbp - 0x80]
add al, 0xe
xor al, r11b
mov byte [rbp - 0x6e], al
mov eax, dword [rbp - 0x80]
add al, 0xf
xor al, r10b
mov byte [rbp - 0x6d], al
mov eax, dword [rbp - 0x80]
add al, 0x10
xor al, 0x54
mov byte [rbp - 0x6c], al
mov eax, dword [rbp - 0x80]
add al, 0x11
xor al, 0x68
mov byte [rbp - 0x6b], al
mov eax, dword [rbp - 0x80]
add al, 0x12
xor al, r9b
mov byte [rbp - 0x6a], al
mov eax, dword [rbp - 0x80]
add al, 0x13
xor al, dl
mov byte [rbp - 0x69], al
mov eax, dword [rbp - 0x80]
add al, 0x14
xor al, r8b
mov byte [rbp - 0x68], al
mov eax, dword [rbp - 0x80]
add al, 0x15
xor al, 0x64
mov byte [rbp - 0x67], al
xor eax, eax
mov byte [rbp - 0x66], al
mov al, byte [rbp - 0x7c]
mov rdx, r13
lea r15d, [r9 - 0x5c]
mov al, byte [rbp + rdx - 0x7c]
mov ecx, dword [rbp - 0x80]
add cl, dl
xor cl, al
mov byte [rbp + rdx - 0x7c], cl
add rdx, r12
cmp rdx, r15
jb 0x180213c95
mov byte [rbp - 0x66], r13b
xorps xmm0, xmm0
movups xmmword [rbp + 0x418], xmm0
mov qword [rbp + 0x428], r13
mov qword [rbp + 0x430], r13
lea rax, [rbp - 0x7c]
mov r8, rbx
inc r8
cmp byte [rax + r8], r13b
jne 0x180213ccf
lea rdx, [rbp - 0x7c]
lea rcx, [rbp + 0x418]
call fcn.18007b70c
nop
mov eax, 0x10
mov dword [rbp - 0x18], eax
mov byte [rbp - 0x14], 0x7e
mov eax, 0x64
mov byte [rbp - 0x13], al
mov eax, 0x74
mov byte [rbp - 0x12], al
mov eax, 0x7c
mov byte [rbp - 0x11], al
mov byte [rbp - 0x10], al
xor eax, eax
mov byte [rbp - 0xf], al
mov al, byte [rbp - 0x14]
mov rdx, r13
mov r15d, 5
mov al, byte [rbp + rdx - 0x14]
mov ecx, dword [rbp - 0x18]
xor cl, al
mov byte [rbp + rdx - 0x14], cl
add rdx, r12
cmp rdx, r15
jb 0x180213d21
mov byte [rbp - 0xf], r13b
xorps xmm0, xmm0
movups xmmword [rbp + 0x338], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x348], xmm1
lea rax, [rbp - 0x14]
mov r8, rbx
mov r15, qword [rbp + 0x560]
inc r8
cmp byte [rax + r8], r13b
jne 0x180213d5d
lea rdx, [rbp - 0x14]
lea rcx, [rbp + 0x338]
call fcn.18007b70c
nop
lea rdx, [rbp + 0x338]
lea rcx, [rbp + 0x480]
call fcn.180188b20
nop
mov qword [rsp + 0x20], r13
mov r9b, r12b
lea r8, [rbp + 0x418]
mov rdx, rax
lea rcx, [0x1802c9080]
call fcn.18024dfe0
nop
mov rdx, qword [rbp + 0x350]
mov eax, 0x10
cmp rdx, rax
jb 0x180213df2
inc rdx
mov rcx, qword [rbp + 0x338]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180213ded
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180213ded
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rbp + 0x348], xmm0
mov byte [rbp + 0x338], r13b
xor edx, edx
lea r8d, [rdx + 6]
lea rcx, [rbp - 0x14]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x17]
lea rcx, [rbp - 0x7c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027e5d0]
call fcn.18026951c
nop
lea rcx, [0x1802c8a28]
call fcn.180269690
mov eax, 4
mov eax, dword [rdi + rax]
cmp dword [0x1802c98f8], eax
jle 0x180214076
lea rcx, [0x1802c98f8]
call fcn.1802696f0
cmp dword [0x1802c98f8], ebx
jne 0x180214076
lea rax, [rbp + 0x438]
mov qword [rbp + 0x60], rax
mov eax, 0x56
mov byte [rbp - 0x27], al
mov byte [rbp - 0x26], 0x7c
mov eax, 0x5a
mov byte [rbp - 0x25], al
lea ecx, [rax + 0x13]
mov byte [rbp - 0x24], cl
lea eax, [rcx + 0xe]
mov byte [rbp - 0x23], al
lea eax, [rcx + 0x10]
mov byte [rbp - 0x22], al
lea eax, [rcx + 8]
mov byte [rbp - 0x21], al
mov byte [rbp - 0x20], cl
lea eax, [rcx - 0x11]
mov byte [rbp - 0x1f], al
mov byte [rbp - 0x1e], 0x70
lea eax, [rcx + 0xd]
mov byte [rbp - 0x1d], al
mov byte [rbp - 0x1c], cl
mov byte [rbp - 0x1b], 0x69
lea eax, [rcx - 1]
mov byte [rbp - 0x1a], al
mov byte [rbp - 0x19], r13b
mov al, byte [rbp - 0x27]
mov rcx, r13
mov edx, 8
lea r15d, [rdx + 6]
mov al, byte [rbp + rcx - 0x27]
sub al, dl
mov byte [rbp + rcx - 0x27], al
add rcx, r12
cmp rcx, r15
jb 0x180213ed9
xorps xmm0, xmm0
movups xmmword [rbp + 0x438], xmm0
mov qword [rbp + 0x448], r13
mov qword [rbp + 0x450], r13
lea rax, [rbp - 0x27]
mov r8, rbx
inc r8
cmp byte [rax + r8], r13b
jne 0x180213f0a
lea rdx, [rbp - 0x27]
lea rcx, [rbp + 0x438]
call fcn.18007b70c
nop
mov eax, 0x5f
mov dword [rbp - 0xc], eax
mov byte [rbp - 8], 0x31
mov byte [rbp - 7], 0x2b
mov byte [rbp - 6], 0x3b
mov eax, 0x33
mov byte [rbp - 5], al
mov byte [rbp - 4], al
xor eax, eax
mov byte [rbp - 3], al
mov al, byte [rbp - 8]
mov rdx, r13
mov r15d, 5
mov al, byte [rbp + rdx - 8]
mov ecx, dword [rbp - 0xc]
xor cl, al
mov byte [rbp + rdx - 8], cl
add rdx, r12
cmp rdx, r15
jb 0x180213f54
mov byte [rbp - 3], r13b
xorps xmm0, xmm0
movups xmmword [rbp + 0x318], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x328], xmm1
lea rax, [rbp - 8]
mov r8, rbx
mov r15, qword [rbp + 0x560]
inc r8
cmp byte [rax + r8], r13b
jne 0x180213f90
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x318]
call fcn.18007b70c
nop
lea rdx, [rbp + 0x318]
lea rcx, [rbp + 0x4a0]
call fcn.180188b20
nop
mov qword [rsp + 0x20], r13
mov r9b, r12b
lea r8, [rbp + 0x438]
mov rdx, rax
lea rcx, [0x1802c97e0]
call fcn.18008a844
nop
mov rdx, qword [rbp + 0x330]
mov eax, 0x10
cmp rdx, rax
jb 0x180214025
inc rdx
mov rcx, qword [rbp + 0x318]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180214020
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180214020
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rbp + 0x328], xmm0
mov byte [rbp + 0x318], r13b
xor edx, edx
lea r8d, [rdx + 6]
lea rcx, [rbp - 8]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xf]
lea rcx, [rbp - 0x27]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027e5c4]
call fcn.18026951c
nop
lea rcx, [0x1802c98f8]
call fcn.180269690
mov r10d, 0x73
lea r9d, [r10 + 6]
mov eax, 4
mov eax, dword [rdi + rax]
cmp dword [0x1802c8cf8], eax
jle 0x180214356
lea rcx, [0x1802c8cf8]
call fcn.1802696f0
cmp dword [0x1802c8cf8], ebx
jne 0x18021434c
lea rax, [rbp + 0x378]
mov qword [rbp + 0x60], rax
mov edx, 0x6a
mov dword [rsp + 0x6c], edx
mov eax, dword [rsp + 0x6c]
xor al, 0x4e
mov byte [rsp + 0x70], al
mov eax, dword [rsp + 0x6c]
add al, r12b
xor al, 0x74
mov byte [rsp + 0x71], al
mov eax, dword [rsp + 0x6c]
add al, 2
xor al, 0x53
mov byte [rsp + 0x72], al
mov eax, dword [rsp + 0x6c]
add al, 3
xor al, 0x75
mov byte [rsp + 0x73], al
mov eax, dword [rsp + 0x6c]
add al, 4
xor al, 0x73
mov byte [rsp + 0x74], al
mov eax, dword [rsp + 0x6c]
add al, 5
xor al, 0x70
mov byte [rsp + 0x75], al
mov eax, dword [rsp + 0x6c]
add al, 6
lea ecx, [rdx - 5]
xor al, cl
mov byte [rsp + 0x76], al
mov eax, dword [rsp + 0x6c]
add al, 7
xor al, 0x6e
mov byte [rsp + 0x77], al
mov eax, dword [rsp + 0x6c]
add al, 8
lea edx, [rcx - 1]
xor al, dl
mov byte [rsp + 0x78], al
mov eax, dword [rsp + 0x6c]
add al, 9
xor al, 0x54
mov byte [rsp + 0x79], al
mov eax, dword [rsp + 0x6c]
add al, 0xa
xor al, 0x68
mov byte [rsp + 0x7a], al
mov eax, dword [rsp + 0x6c]
add al, 0xb
xor al, 0x72
mov byte [rsp + 0x7b], al
mov eax, dword [rsp + 0x6c]
add al, 0xc
xor al, cl
mov byte [rsp + 0x7c], al
mov eax, dword [rsp + 0x6c]
add al, 0xd
xor al, 0x61
mov byte [rsp + 0x7d], al
mov eax, dword [rsp + 0x6c]
add al, 0xe
xor al, dl
mov byte [rsp + 0x7e], al
xor eax, eax
mov byte [rsp + 0x7f], al
mov al, byte [rsp + 0x70]
mov rdx, r13
lea r15d, [rcx - 0x56]
mov al, byte [rsp + rdx + 0x70]
mov ecx, dword [rsp + 0x6c]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x70], cl
add rdx, r12
cmp rdx, r15
jb 0x18021418a
mov byte [rsp + 0x7f], r13b
xorps xmm0, xmm0
movups xmmword [rbp + 0x378], xmm0
mov qword [rbp + 0x388], r13
mov qword [rbp + 0x390], r13
lea rax, [rsp + 0x70]
mov r8, rbx
mov r15, qword [rbp + 0x560]
inc r8
cmp byte [rax + r8], r13b
jne 0x1802141ce
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x378]
call fcn.18007b70c
nop
mov eax, 0x73
mov byte [rbp + 0x570], al
lea edx, [rax + 6]
mov byte [rbp + 0x571], dl
mov byte [rbp + 0x572], 0x69
lea eax, [rdx - 8]
mov byte [rbp + 0x573], al
mov byte [rbp + 0x574], al
mov byte [rbp + 0x575], r13b
mov al, byte [rbp + 0x570]
mov rcx, r13
mov edx, 5
mov al, byte [rbp + rcx + 0x570]
sub al, dl
mov byte [rbp + rcx + 0x570], al
add rcx, r12
cmp rcx, rdx
jb 0x180214228
xorps xmm0, xmm0
movups xmmword [rbp + 0x2f8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x308], xmm1
lea rax, [rbp + 0x570]
mov r8, rbx
inc r8
cmp byte [rax + r8], r13b
jne 0x18021425f
lea rdx, [rbp + 0x570]
lea rcx, [rbp + 0x2f8]
call fcn.18007b70c
nop
lea rdx, [rbp + 0x2f8]
lea rcx, [rbp + 0x4c0]
call fcn.180188b20
nop
mov qword [rsp + 0x20], r13
mov r9b, r12b
lea r8, [rbp + 0x378]
mov rdx, rax
lea rcx, [0x1802c9ab0]
call fcn.18008a844
nop
mov rdx, qword [rbp + 0x310]
mov eax, 0x10
cmp rdx, rax
jb 0x1802142f7
inc rdx
mov rcx, qword [rbp + 0x2f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1802142f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1802142f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rbp + 0x308], xmm0
mov byte [rbp + 0x2f8], r13b
xor edx, edx
lea r8d, [rdx + 6]
lea rcx, [rbp + 0x570]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x10]
lea rcx, [rsp + 0x70]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027e5b8]
call fcn.18026951c
nop
lea rcx, [0x1802c8cf8]
call fcn.180269690
mov r10d, 0x73
lea r9d, [r10 + 6]
mov dword [rbp + 0x68], 0x31
mov r8d, 0x11
mov word [rbp + 0x6c], r8w
lea eax, [r8 + 0x33]
mov word [rbp + 0x6e], ax
lea ecx, [rax - 2]
mov word [rbp + 0x70], cx
lea edx, [rax + 0x14]
mov word [rbp + 0x72], dx
lea edx, [rax + 0x1b]
mov word [rbp + 0x74], dx
lea edx, [rax + 0x12]
mov word [rbp + 0x76], dx
mov word [rbp + 0x78], r8w
lea edx, [rax + 0x1c]
mov word [rbp + 0x7a], dx
mov word [rbp + 0x7c], ax
lea edx, [rax + 0x10]
mov word [rbp + 0x7e], dx
mov word [rbp + 0x80], ax
mov word [rbp + 0x82], dx
lea eax, [rcx + 0x22]
mov word [rbp + 0x84], ax
mov word [rbp + 0x86], cx
mov word [rbp + 0x88], dx
lea eax, [rcx + 1]
mov word [rbp + 0x8a], ax
lea eax, [rcx + 0x2e]
mov word [rbp + 0x8c], ax
lea eax, [rcx + 0x1f]
mov word [rbp + 0x8e], ax
lea r11d, [r8 + 0x61]
mov word [rbp + 0x90], r11w
xor eax, eax
mov word [rbp + 0x92], ax
movzx eax, word [rbp + 0x6c]
mov rdx, r13
lea r8d, [rcx - 0x2f]
movzx eax, word [rbp + rdx*2 + 0x6c]
mov ecx, dword [rbp + 0x68]
xor cx, ax
mov word [rbp + rdx*2 + 0x6c], cx
add rdx, r12
cmp rdx, r8
jb 0x180214407
mov word [rbp + 0x92], r13w
mov eax, 0x5f
mov word [rbp + 0xc4], ax
mov eax, 0x2f
mov word [rbp + 0xc6], ax
mov eax, 0x61
mov word [rbp + 0xc8], ax
lea ecx, [rax - 0x3d]
mov word [rbp + 0xca], cx
lea eax, [rcx + 0x25]
mov word [rbp + 0xcc], ax
lea eax, [rcx + 0x58]
mov word [rbp + 0xce], ax
lea edx, [rcx + 0x45]
mov word [rbp + 0xd0], dx
lea eax, [rcx + 0x43]
mov word [rbp + 0xd2], ax
mov word [rbp + 0xd4], r9w
lea eax, [rcx + 0x54]
mov word [rbp + 0xd6], ax
lea eax, [rcx + 0x49]
mov word [rbp + 0xd8], ax
mov word [rbp + 0xda], r11w
lea eax, [rcx + 0x47]
mov word [rbp + 0xdc], ax
mov word [rbp + 0xde], cx
lea eax, [rcx + 0x43]
mov word [rbp + 0xe0], ax
mov word [rbp + 0xe2], r10w
lea eax, [rcx + 0x44]
mov word [rbp + 0xe4], ax
mov word [rbp + 0xe6], dx
mov word [rbp + 0xe8], cx
lea eax, [rcx + 0x46]
mov word [rbp + 0xea], ax
lea eax, [rcx + 0x52]
mov word [rbp + 0xec], ax
mov word [rbp + 0xee], r10w
lea r8d, [rcx + 0x4d]
mov word [rbp + 0xf0], r8w
mov word [rbp + 0xf2], cx
lea eax, [rcx + 0x10]
mov word [rbp + 0xf4], ax
lea eax, [rcx + 0x58]
mov word [rbp + 0xf6], ax
mov word [rbp + 0xf8], r13w
movzx eax, word [rbp + 0xc4]
mov rcx, r13
lea edx, [r8 - 0x57]
lea r8d, [rdx - 0x16]
movzx eax, word [rbp + rcx*2 + 0xc4]
sub ax, r8w
mov word [rbp + rcx*2 + 0xc4], ax
add rcx, r12
cmp rcx, rdx
jb 0x180214539
lea r9, [rbp + 0x6c]
mov r8, r15
lea rcx, [rbp + 0xc4]
call fcn.18026507c
nop
xor edx, edx
lea r8d, [rdx + 0x36]
lea rcx, [rbp + 0xc4]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x28]
lea rcx, [rbp + 0x6c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
test r14, r14
je 0x180214e42
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
cmp r14, rax
je 0x180214e42
mov r12b, r13b
test sil, sil
je 0x1802147bf
mov rdx, r14
lea rcx, [0x1802c9ab0]
call fcn.18008b374
mov r8d, eax
test eax, eax
je 0x1802147b5
mov r15d, 0x60
lea ebx, [r15 + 0x11]
cmp byte [0x1802b61a3], r13b
jne 0x180214785
lea ecx, [rbx - 0x13]
mov word [rbp + 0x188], cx
lea r9d, [r15 - 0x3c]
mov word [rbp + 0x18a], r9w
mov word [rbp + 0x18c], r15w
lea ecx, [rbx - 0x4e]
mov word [rbp + 0x18e], cx
lea eax, [rbx - 0xf]
mov word [rbp + 0x190], ax
lea edi, [rbx - 0x20]
mov word [rbp + 0x192], di
lea r12d, [r15 + 0x17]
mov word [rbp + 0x194], r12w
lea eax, [rbx - 0x1b]
mov word [rbp + 0x196], ax
lea edx, [rbx + 7]
mov word [rbp + 0x198], dx
lea eax, [rbx + 5]
mov word [rbp + 0x19a], ax
lea eax, [rbx + 2]
mov word [rbp + 0x19c], ax
lea r10d, [r15 + 8]
mov word [rbp + 0x19e], r10w
mov word [rbp + 0x1a0], bx
lea edx, [rbx - 0xa]
mov word [rbp + 0x1a2], dx
lea eax, [rbx - 0x1a]
mov word [rbp + 0x1a4], ax
lea edi, [rbx - 6]
mov word [rbp + 0x1a6], di
lea esi, [rbx + 4]
mov word [rbp + 0x1a8], si
mov word [rbp + 0x1aa], r10w
lea r11d, [r15 + 4]
mov word [rbp + 0x1ac], r11w
mov word [rbp + 0x1ae], dx
mov word [rbp + 0x1b0], cx
lea eax, [rbx - 8]
mov word [rbp + 0x1b2], ax
mov word [rbp + 0x1b4], r11w
lea eax, [rbx - 5]
mov word [rbp + 0x1b6], ax
lea r11d, [r15 + 0xf]
mov word [rbp + 0x1b8], r11w
mov word [rbp + 0x1ba], r10w
mov word [rbp + 0x1bc], dx
mov word [rbp + 0x1be], cx
lea edx, [rbx + 9]
mov word [rbp + 0x1c0], dx
mov word [rbp + 0x1c2], ax
mov word [rbp + 0x1c4], r12w
mov word [rbp + 0x1c6], di
lea eax, [rbx - 0x34]
mov word [rbp + 0x1c8], ax
mov word [rbp + 0x1ca], cx
lea ecx, [rbx - 0x3e]
mov word [rbp + 0x1cc], cx
lea edi, [rbx + 0xa]
mov word [rbp + 0x1ce], di
mov word [rbp + 0x1d0], r13w
movzx eax, word [rbp + 0x188]
mov rcx, r13
lea edx, [rbx - 0x70]
movzx eax, word [rbp + rcx*2 + 0x188]
sub ax, 3
mov word [rbp + rcx*2 + 0x188], ax
add rcx, rdx
cmp rcx, r9
jb 0x180214747
lea rcx, [rbp + 0x188]
call fcn.1800ae954
nop
xor edx, edx
lea r8d, [rdx + 0x4a]
lea rcx, [rbp + 0x188]
call qword [sym.imp.VCRUNTIME140.dll_memset]
jmp 0x18021478d
mov edi, 0x7b
lea esi, [rdi - 6]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [0x1802b61a4], r13b
jne 0x180215a76
cmp byte [0x1802b61aa], r13b
jne 0x180215a76
jmp 0x18021599b
mov ebx, 1
mov r12b, bl
jmp 0x1802147c4
mov ebx, 1
xor r9d, r9d
mov r8, r14
mov rdx, r15
lea rcx, [0x1802c9f30]
call fcn.18008bf14
test eax, eax
jne 0x180214c4f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
mov esi, 0x22
mov dword [rbp + 0x10], esi
mov ecx, dword [rbp + 0x10]
xor cx, 0x5b
mov word [rbp + 0x14], cx
mov ecx, dword [rbp + 0x10]
add cx, bx
xor cx, 0x2d
mov word [rbp + 0x16], cx
mov ecx, dword [rbp + 0x10]
add cx, 2
xor cx, 0x5d
mov word [rbp + 0x18], cx
mov eax, dword [rbp + 0x10]
add ax, 3
lea r9d, [rsi - 2]
xor ax, r9w
mov word [rbp + 0x1a], ax
mov eax, dword [rbp + 0x10]
add ax, 4
lea edi, [rsi + 0x2f]
xor ax, di
mov word [rbp + 0x1c], ax
mov eax, dword [rbp + 0x10]
add ax, 5
lea ecx, [rsi + 0x53]
xor ax, cx
mov word [rbp + 0x1e], ax
mov eax, dword [rbp + 0x10]
add ax, 6
lea edx, [rsi + 0x43]
xor ax, dx
mov word [rbp + 0x20], ax
mov eax, dword [rbp + 0x10]
add ax, 7
xor ax, cx
mov word [rbp + 0x22], ax
mov eax, dword [rbp + 0x10]
add ax, 8
xor ax, dx
mov word [rbp + 0x24], ax
mov eax, dword [rbp + 0x10]
add ax, 9
xor ax, 0x55
mov word [rbp + 0x26], ax
mov eax, dword [rbp + 0x10]
add ax, 0xa
xor ax, 0x73
mov word [rbp + 0x28], ax
mov eax, dword [rbp + 0x10]
add ax, 0xb
xor ax, dx
mov word [rbp + 0x2a], ax
mov eax, dword [rbp + 0x10]
add ax, 0xc
xor ax, 0x72
mov word [rbp + 0x2c], ax
mov eax, dword [rbp + 0x10]
add ax, 0xd
xor ax, 0x41
mov word [rbp + 0x2e], ax
mov eax, dword [rbp + 0x10]
add ax, 0xe
xor ax, 0x50
mov word [rbp + 0x30], ax
mov eax, dword [rbp + 0x10]
add ax, 0xf
xor ax, 0x43
mov word [rbp + 0x32], ax
mov eax, dword [rbp + 0x10]
add ax, 0x10
xor ax, r9w
mov word [rbp + 0x34], ax
mov eax, dword [rbp + 0x10]
add ax, 0x11
xor ax, 0x66
mov word [rbp + 0x36], ax
mov eax, dword [rbp + 0x10]
add ax, 0x12
xor ax, 0x61
mov word [rbp + 0x38], ax
mov eax, dword [rbp + 0x10]
add ax, 0x13
lea r10d, [rsi + 0x47]
xor ax, r10w
mov word [rbp + 0x3a], ax
mov eax, dword [rbp + 0x10]
add ax, 0x14
xor ax, 0x6c
mov word [rbp + 0x3c], ax
mov eax, dword [rbp + 0x10]
add ax, 0x15
xor ax, dx
mov word [rbp + 0x3e], ax
mov eax, dword [rbp + 0x10]
add ax, 0x16
xor ax, 0x64
mov word [rbp + 0x40], ax
mov eax, dword [rbp + 0x10]
add ax, 0x17
xor ax, r9w
mov word [rbp + 0x42], ax
mov eax, dword [rbp + 0x10]
add ax, 0x18
xor ax, 0x77
mov word [rbp + 0x44], ax
mov eax, dword [rbp + 0x10]
add ax, 0x19
xor ax, r10w
mov word [rbp + 0x46], ax
mov eax, dword [rbp + 0x10]
add ax, 0x1a
xor ax, 0x74
mov word [rbp + 0x48], ax
mov eax, dword [rbp + 0x10]
add ax, 0x1b
xor ax, 0x68
mov word [rbp + 0x4a], ax
mov eax, dword [rbp + 0x10]
add ax, 0x1c
lea ebx, [rsi + 0x18]
xor ax, bx
mov word [rbp + 0x4c], ax
mov eax, dword [rbp + 0x10]
add ax, 0x1d
xor ax, r9w
mov word [rbp + 0x4e], ax
mov eax, dword [rbp + 0x10]
add ax, 0x1e
lea r15d, [rsi + 0xe]
xor ax, r15w
mov word [rbp + 0x50], ax
mov eax, dword [rbp + 0x10]
add ax, 0x1f
xor ax, 0x78
mov word [rbp + 0x52], ax
xor eax, eax
mov word [rbp + 0x54], ax
movzx eax, word [rbp + 0x14]
xor r10d, r10d
mov edx, r10d
lea esi, [rdi - 0x50]
movzx eax, word [rbp + rdx*2 + 0x14]
mov ecx, dword [rbp + 0x10]
add cx, dx
xor cx, ax
mov word [rbp + rdx*2 + 0x14], cx
add rdx, rsi
cmp rdx, r9
jb 0x1802149f0
mov word [rbp + 0x54], r10w
lea rcx, [rbp + 0x14]
call fcn.18016fd00
nop
xor edx, edx
lea r8d, [rdx + 0x42]
lea rcx, [rbp + 0x14]
call qword [sym.imp.VCRUNTIME140.dll_memset]
test r12b, r12b
mov esi, 0x22
je 0x180214c24
mov rdx, r14
lea rcx, [0x1802c97e0]
call fcn.18008b374
mov r8d, eax
xor r12d, r12d
test eax, eax
je 0x180214c27
lea eax, [rsi + 0x34]
mov dword [rbp + 0x1d4], eax
lea eax, [rsi - 0x15]
mov word [rbp + 0x1d8], ax
lea eax, [rsi + 0x55]
mov word [rbp + 0x1da], ax
lea eax, [rsi - 0x17]
mov word [rbp + 0x1dc], ax
lea edx, [rsi + 0x54]
mov word [rbp + 0x1de], dx
lea eax, [rsi - 0xa]
mov word [rbp + 0x1e0], ax
mov word [rbp + 0x1e2], si
lea eax, [rsi - 0x1e]
mov word [rbp + 0x1e4], ax
lea r10d, [rsi + 0x11]
mov word [rbp + 0x1e6], r10w
lea eax, [rsi + 3]
mov word [rbp + 0x1e8], ax
lea ecx, [rsi + 1]
mov word [rbp + 0x1ea], cx
lea eax, [rsi + 0x19]
mov word [rbp + 0x1ec], ax
mov word [rbp + 0x1ee], r10w
lea eax, [rsi - 0x20]
mov word [rbp + 0x1f0], ax
lea r11d, [rsi + 0x1c]
mov word [rbp + 0x1f2], r11w
lea r9d, [rsi + 2]
mov word [rbp + 0x1f4], r9w
mov word [rbp + 0x1f6], r10w
lea eax, [rsi + 0x15]
mov word [rbp + 0x1f8], ax
lea ecx, [rsi + 0x10]
mov word [rbp + 0x1fa], cx
mov word [rbp + 0x1fc], dx
mov word [rbp + 0x1fe], r15w
mov word [rbp + 0x200], ax
lea r9d, [rsi + 0x1d]
mov word [rbp + 0x202], r9w
mov word [rbp + 0x204], bx
mov word [rbp + 0x206], r10w
mov word [rbp + 0x208], cx
mov word [rbp + 0x20a], dx
lea eax, [rsi - 1]
mov word [rbp + 0x20c], ax
mov word [rbp + 0x20e], r9w
mov word [rbp + 0x210], si
mov word [rbp + 0x212], r11w
lea eax, [rsi + 0x4a]
mov word [rbp + 0x214], ax
mov word [rbp + 0x216], dx
lea eax, [rsi + 0x44]
mov word [rbp + 0x218], ax
lea eax, [rsi + 0xc]
mov word [rbp + 0x21a], ax
xor eax, eax
mov word [rbp + 0x21c], ax
movzx eax, word [rbp + 0x1d8]
mov edx, r12d
lea r13d, [rsi - 0x21]
movzx eax, word [rbp + rdx*2 + 0x1d8]
mov ecx, dword [rbp + 0x1d4]
xor cx, ax
mov word [rbp + rdx*2 + 0x1d8], cx
add rdx, r13
cmp rdx, rsi
jb 0x180214bad
mov word [rbp + 0x21c], r12w
lea rcx, [rbp + 0x1d8]
call fcn.1800ae954
nop
xor edx, edx
lea r8d, [rdx + 0x46]
lea rcx, [rbp + 0x1d8]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [0x1802b61a4], r12b
mov r13d, 0x5d
jne 0x180215b35
cmp byte [0x1802b61aa], r12b
jne 0x180215b35
jmp 0x18021599b
xor r12d, r12d
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [0x1802b61a4], r12b
jne 0x180215bef
cmp byte [0x1802b61aa], r12b
jne 0x180215bef
jmp 0x18021599b
mov rdx, r14
lea rcx, [0x1802c97e0]
call fcn.18008b374
mov r8d, eax
test eax, eax
je 0x180214e2d
mov eax, 0x61
mov word [rbp + 0xfa], ax
mov eax, 0x27
mov word [rbp + 0xfc], ax
mov eax, 0x63
mov word [rbp + 0xfe], ax
mov eax, 0x26
mov word [rbp + 0x100], ax
lea ecx, [rax + 0x2e]
mov word [rbp + 0x102], cx
lea edi, [rax + 0x54]
mov word [rbp + 0x104], di
lea ecx, [rax + 0x32]
mov word [rbp + 0x106], cx
lea ecx, [rax + 0x45]
mov word [rbp + 0x108], cx
lea edx, [rax + 0x53]
mov word [rbp + 0x10a], dx
lea edx, [rax + 0x55]
mov word [rbp + 0x10c], dx
lea r15d, [rax + 0x4d]
mov word [rbp + 0x10e], r15w
mov word [rbp + 0x110], cx
lea edx, [rax + 0x34]
mov word [rbp + 0x112], dx
lea r10d, [rax + 0x48]
mov word [rbp + 0x114], r10w
lea edx, [rax + 0x52]
mov word [rbp + 0x116], dx
mov word [rbp + 0x118], cx
lea edx, [rax + 0x41]
mov word [rbp + 0x11a], dx
lea r9d, [rax + 0x44]
mov word [rbp + 0x11c], r9w
mov word [rbp + 0x11e], ax
lea r11d, [rax + 0x46]
mov word [rbp + 0x120], r11w
mov word [rbp + 0x122], dx
lea edx, [rax + 0x49]
mov word [rbp + 0x124], dx
lea r12d, [rax + 0x4c]
mov word [rbp + 0x126], r12w
mov word [rbp + 0x128], cx
mov word [rbp + 0x12a], r9w
mov word [rbp + 0x12c], ax
lea ecx, [rax + 0x57]
mov word [rbp + 0x12e], cx
mov word [rbp + 0x130], dx
mov word [rbp + 0x132], di
mov word [rbp + 0x134], r10w
lea ecx, [rax + 0x1a]
mov word [rbp + 0x136], cx
mov word [rbp + 0x138], ax
lea eax, [rdi - 0x44]
mov word [rbp + 0x13a], ax
lea eax, [rdi + 4]
mov word [rbp + 0x13c], ax
mov word [rbp + 0x13e], r13w
movzx eax, word [rbp + 0xfa]
mov rcx, r13
lea esi, [rdi - 0x58]
lea r10d, [rdi - 0x74]
movzx eax, word [rbp + rcx*2 + 0xfa]
sub ax, r10w
mov word [rbp + rcx*2 + 0xfa], ax
add rcx, rbx
cmp rcx, rsi
jb 0x180214dc9
lea rcx, [rbp + 0xfa]
call fcn.1800ae954
nop
xor edx, edx
lea r8d, [rdx + 0x46]
lea rcx, [rbp + 0xfa]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [0x1802b61a4], r13b
jne 0x180215d0e
cmp byte [0x1802b61aa], r13b
jne 0x180215d0e
jmp 0x18021599b
mov edx, 0xbb8
mov rcx, r14
call fcn.180198678
mov rcx, r14
jmp 0x180215995
mov esi, 0x55
mov eax, 4
mov eax, dword [rdi + rax]
cmp dword [0x1802ca168], eax
jle 0x180215062
lea rcx, [0x1802ca168]
call fcn.1802696f0
cmp dword [0x1802ca168], ebx
jne 0x180215062
lea rax, [rbp + 0x398]
mov qword [rbp + 0x60], rax
mov byte [rbp - 0x40], 0x4f
lea ecx, [rsi + 0x20]
mov byte [rbp - 0x3f], cl
mov byte [rbp - 0x3e], sil
lea edx, [rsi + 0x11]
mov byte [rbp - 0x3d], dl
lea eax, [rsi + 0x1f]
mov byte [rbp - 0x3c], al
mov byte [rbp - 0x3b], cl
mov byte [rbp - 0x3a], 0x42
lea eax, [rsi + 0x18]
mov byte [rbp - 0x39], al
mov byte [rbp - 0x38], dl
lea eax, [rsi + 0x1e]
mov byte [rbp - 0x37], al
mov byte [rbp - 0x36], cl
mov byte [rbp - 0x35], r13b
mov al, byte [rbp - 0x40]
mov rcx, r13
lea r14d, [rsi - 0x4a]
mov al, byte [rbp + rcx - 0x40]
sub al, r12b
mov byte [rbp + rcx - 0x40], al
add rcx, r12
cmp rcx, r14
jb 0x180214ebf
xorps xmm0, xmm0
movups xmmword [rbp + 0x398], xmm0
mov qword [rbp + 0x3a8], r13
mov qword [rbp + 0x3b0], r13
lea rax, [rbp - 0x40]
mov r8, rbx
inc r8
cmp byte [rax + r8], r13b
jne 0x180214ef1
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x398]
call fcn.18007b70c
nop
mov edx, 0x79
mov byte [rsp + 0x64], dl
lea eax, [rdx + 6]
mov byte [rsp + 0x65], al
lea r11d, [rdx - 0xa]
mov byte [rsp + 0x66], r11b
lea eax, [rdx - 2]
mov byte [rsp + 0x67], al
mov byte [rsp + 0x68], al
mov byte [rsp + 0x69], r13b
mov al, byte [rsp + 0x64]
mov rcx, r13
lea r15d, [rdx - 0x74]
mov al, byte [rsp + rcx + 0x64]
sub al, r14b
mov byte [rsp + rcx + 0x64], al
add rcx, r12
cmp rcx, r15
jb 0x180214f3f
xorps xmm0, xmm0
movups xmmword [rbp + 0x2d8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x2e8], xmm1
lea rax, [rsp + 0x64]
mov r8, rbx
mov r15, qword [rbp + 0x560]
inc r8
cmp byte [rax + r8], r13b
jne 0x180214f76
lea rdx, [rsp + 0x64]
lea rcx, [rbp + 0x2d8]
call fcn.18007b70c
nop
lea rdx, [rbp + 0x2d8]
lea rcx, [rbp + 0x4e0]
call fcn.180188b20
nop
mov qword [rsp + 0x20], r13
mov r9b, r12b
lea r8, [rbp + 0x398]
mov rdx, rax
lea rcx, [0x1802c8910]
call fcn.18024d4b0
nop
mov rdx, qword [rbp + 0x2f0]
mov r14d, 0x10
cmp rdx, r14
jb 0x180215010
inc rdx
mov rcx, qword [rbp + 0x2d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18021500b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
lea r8d, [r14 + 0xf]
cmp rax, r8
jbe 0x18021500b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rbp + 0x2e8], xmm0
mov byte [rbp + 0x2d8], r13b
xor edx, edx
lea r8d, [rdx + 6]
lea rcx, [rsp + 0x64]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xc]
lea rcx, [rbp - 0x40]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027e5ac]
call fcn.18026951c
nop
lea rcx, [0x1802ca168]
call fcn.180269690
mov eax, 4
mov eax, dword [rdi + rax]
cmp dword [0x1802c8bd8], eax
jle 0x180215316
lea rcx, [0x1802c8bd8]
call fcn.1802696f0
cmp dword [0x1802c8bd8], ebx
jne 0x180215316
lea rax, [rbp + 0x3b8]
mov qword [rbp + 0x60], rax
mov edi, 0x6b
mov dword [rbp - 0x64], edi
mov eax, dword [rbp - 0x64]
xor al, 0x43
mov byte [rbp - 0x60], al
mov eax, dword [rbp - 0x64]
add al, r12b
lea edx, [rdi + 7]
xor al, dl
mov byte [rbp - 0x5f], al
mov eax, dword [rbp - 0x64]
add al, 2
lea ecx, [rdi - 6]
xor al, cl
mov byte [rbp - 0x5e], al
mov eax, dword [rbp - 0x64]
add al, 3
lea r8d, [rdi - 0xa]
xor al, r8b
mov byte [rbp - 0x5d], al
mov eax, dword [rbp - 0x64]
add al, 4
xor al, 0x74
mov byte [rbp - 0x5c], al
mov eax, dword [rbp - 0x64]
add al, 5
xor al, cl
mov byte [rbp - 0x5b], al
mov eax, dword [rbp - 0x64]
add al, 6
xor al, 0x54
mov byte [rbp - 0x5a], al
mov eax, dword [rbp - 0x64]
add al, 7
xor al, 0x68
mov byte [rbp - 0x59], al
mov eax, dword [rbp - 0x64]
add al, 8
xor al, dl
mov byte [rbp - 0x58], al
mov eax, dword [rbp - 0x64]
add al, 9
xor al, cl
mov byte [rbp - 0x57], al
mov eax, dword [rbp - 0x64]
add al, 0xa
xor al, r8b
mov byte [rbp - 0x56], al
mov eax, dword [rbp - 0x64]
add al, 0xb
xor al, 0x64
mov byte [rbp - 0x55], al
xor eax, eax
mov byte [rbp - 0x54], al
mov al, byte [rbp - 0x60]
mov rdx, r13
lea r14d, [rdi - 0x5f]
mov al, byte [rbp + rdx - 0x60]
mov ecx, dword [rbp - 0x64]
add cl, dl
xor cl, al
mov byte [rbp + rdx - 0x60], cl
add rdx, r12
cmp rdx, r14
jb 0x180215133
mov byte [rbp - 0x54], r13b
xorps xmm0, xmm0
movups xmmword [rbp + 0x3b8], xmm0
mov qword [rbp + 0x3c8], r13
mov qword [rbp + 0x3d0], r13
lea rax, [rbp - 0x60]
mov r8, rbx
inc r8
cmp byte [rax + r8], r13b
jne 0x18021516d
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x3b8]
call fcn.18007b70c
nop
mov eax, 0x6f
mov dword [rbp - 0x50], eax
mov eax, dword [rbp - 0x50]
xor al, dil
mov byte [rbp - 0x4c], al
mov eax, dword [rbp - 0x50]
add al, r12b
mov ecx, 0x65
xor al, cl
mov byte [rbp - 0x4b], al
mov eax, dword [rbp - 0x50]
add al, 2
xor al, 0x72
mov byte [rbp - 0x4a], al
mov eax, dword [rbp - 0x50]
add al, 3
xor al, 0x6e
mov byte [rbp - 0x49], al
mov eax, dword [rbp - 0x50]
add al, 4
xor al, cl
mov byte [rbp - 0x48], al
mov eax, dword [rbp - 0x50]
add al, 5
xor al, 0x6c
mov byte [rbp - 0x47], al
mov eax, dword [rbp - 0x50]
add al, 6
xor al, 0x33
mov byte [rbp - 0x46], al
mov eax, dword [rbp - 0x50]
add al, 7
xor al, 0x32
mov byte [rbp - 0x45], al
xor eax, eax
mov byte [rbp - 0x44], al
mov al, byte [rbp - 0x4c]
mov rdx, r13
lea r14d, [rcx - 0x5d]
mov al, byte [rbp + rdx - 0x4c]
mov ecx, dword [rbp - 0x50]
add cl, dl
xor cl, al
mov byte [rbp + rdx - 0x4c], cl
add rdx, r12
cmp rdx, r14
jb 0x1802151f3
mov byte [rbp - 0x44], r13b
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x2c8], xmm1
lea rax, [rbp - 0x4c]
mov r14d, 0x10
inc rbx
cmp byte [rax + rbx], r13b
jne 0x18021522d
mov r8, rbx
lea rdx, [rbp - 0x4c]
lea rcx, [rbp + 0x2b8]
call fcn.18007b70c
nop
lea rdx, [rbp + 0x2b8]
lea rcx, [rbp + 0x500]
call fcn.180188b20
nop
mov qword [rsp + 0x20], r13
mov r9b, r12b
lea r8, [rbp + 0x3b8]
mov rdx, rax
lea rcx, [0x1802c9500]
call fcn.1801ba8b4
nop
mov rdx, qword [rbp + 0x2d0]
cmp rdx, r14
jb 0x1802152c5
inc rdx
mov rcx, qword [rbp + 0x2b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1802152c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
mov r8d, 0x1f
cmp rax, r8
jbe 0x1802152c0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rbp + 0x2c8], xmm0
mov byte [rbp + 0x2b8], r13b
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rbp - 0x4c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xd]
lea rcx, [rbp - 0x60]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027e5a0]
call fcn.18026951c
nop
lea rcx, [0x1802c8bd8]
call fcn.180269690
lea rax, [rbp + 0x580]
mov qword [rsp + 0x30], rax
mov eax, 4
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r15
lea r9, [0x18020ce6c]
lea rcx, [0x1802c9500]
call fcn.18024eb2c
mov rbx, rax
xor r9d, r9d
mov r8, rax
mov rdx, r15
lea rcx, [0x1802c9f30]
call fcn.18008bf14
mov edi, 0x46
lea r15d, [rdi + 1]
test eax, eax
je 0x1802156c1
lea ecx, [rdi - 0x23]
mov word [rbp + 0x94], cx
lea eax, [rdi + 0x1f]
mov word [rbp + 0x96], ax
lea edx, [rdi + 0x32]
mov word [rbp + 0x98], dx
lea r8d, [rdi + 0x31]
mov word [rbp + 0x9a], r8w
mov word [rbp + 0x9c], cx
lea eax, [rdi + 0x20]
mov word [rbp + 0x9e], ax
lea eax, [rdi + 0x2c]
mov word [rbp + 0xa0], ax
lea eax, [rdi + 0x2b]
mov word [rbp + 0xa2], ax
mov word [rbp + 0xa4], r8w
lea r8d, [rdi + 0x26]
mov word [rbp + 0xa6], r8w
mov word [rbp + 0xa8], ax
mov word [rbp + 0xaa], dx
mov word [rbp + 0xac], r8w
mov word [rbp + 0xae], ax
lea edx, [rdi + 0x24]
mov word [rbp + 0xb0], dx
mov word [rbp + 0xb2], cx
lea ecx, [rdi + 0x1e]
mov word [rbp + 0xb4], cx
mov word [rbp + 0xb6], ax
lea edx, [rdi + 0x36]
mov word [rbp + 0xb8], dx
lea eax, [rdi + 0x34]
mov word [rbp + 0xba], ax
mov word [rbp + 0xbc], cx
mov word [rbp + 0xbe], dx
lea eax, [rdi - 0x15]
mov word [rbp + 0xc0], ax
mov word [rbp + 0xc2], r13w
movzx eax, word [rbp + 0x94]
mov rcx, r13
lea r14d, [rdi - 0x2f]
movzx eax, word [rbp + rcx*2 + 0x94]
sub ax, 3
mov word [rbp + rcx*2 + 0x94], ax
add rcx, r12
cmp rcx, r14
jb 0x180215450
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
mov dword [rbp + 0x140], 0x2f
mov eax, 0x74
mov word [rbp + 0x144], ax
mov eax, 2
mov word [rbp + 0x146], ax
mov eax, 0x72
mov word [rbp + 0x148], ax
lea r9d, [rax - 0x63]
mov word [rbp + 0x14a], r9w
lea eax, [r9 + 0x6f]
mov word [rbp + 0x14c], ax
lea ecx, [rax - 0x24]
mov word [rbp + 0x14e], cx
lea eax, [rcx - 0x10]
mov word [rbp + 0x150], ax
mov word [rbp + 0x152], cx
mov word [rbp + 0x154], ax
lea edx, [rcx + 0x20]
mov word [rbp + 0x156], dx
lea ecx, [rax + 0x12]
mov word [rbp + 0x158], cx
mov word [rbp + 0x15a], ax
lea r13d, [r9 + 0x4e]
mov word [rbp + 0x15c], r13w
lea ecx, [rax + 0x24]
mov word [rbp + 0x15e], cx
lea ecx, [rax + 0x35]
mov word [rbp + 0x160], cx
lea r11d, [r9 + 0x5d]
mov word [rbp + 0x162], r11w
mov word [rbp + 0x164], r9w
lea ecx, [rax - 1]
mov word [rbp + 0x166], cx
lea ecx, [rax + 4]
mov word [rbp + 0x168], cx
mov word [rbp + 0x16a], di
lea ecx, [rax - 7]
mov word [rbp + 0x16c], cx
mov word [rbp + 0x16e], ax
lea eax, [rdx - 0x2f]
mov word [rbp + 0x170], ax
mov word [rbp + 0x172], r9w
lea ecx, [rdx - 0x22]
mov word [rbp + 0x174], cx
mov word [rbp + 0x176], di
lea eax, [rdx - 0x1f]
mov word [rbp + 0x178], ax
mov word [rbp + 0x17a], r15w
lea eax, [rdx - 0x65]
mov word [rbp + 0x17c], ax
mov word [rbp + 0x17e], r9w
lea r15d, [r9 + 0x10]
mov word [rbp + 0x180], r15w
lea eax, [rdx - 0x23]
mov word [rbp + 0x182], ax
xor eax, eax
mov word [rbp + 0x184], ax
movzx eax, word [rbp + 0x144]
xor r13d, r13d
mov edx, r13d
lea r9d, [r11 - 0x4c]
lea r14d, [r11 - 0x5c]
movzx eax, word [rbp + rdx*2 + 0x144]
mov ecx, dword [rbp + 0x140]
xor cx, ax
mov word [rbp + rdx*2 + 0x144], cx
add rdx, r12
cmp rdx, r9
jb 0x1802155d2
mov word [rbp + 0x184], r13w
cmp byte [0x1802bd270], r13b
je 0x180215694
lea rax, [rbp + 0x94]
mov qword [rsp + 0x20], rax
mov r9d, r8d
lea rdx, [rbp + 0x144]
lea rcx, [rbp + 0x3d8]
call fcn.180267460
nop
lea rdx, [rbp + 0x3d8]
mov cl, r12b
call fcn.18014e37c
nop
mov rdx, qword [rbp + 0x3f0]
cmp rdx, r14
jb 0x18021567d
inc rdx
mov rcx, qword [rbp + 0x3d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180215678
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r15
jbe 0x180215678
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rbp + 0x3e8], xmm0
mov byte [rbp + 0x3d8], r13b
xor edx, edx
lea r8d, [rdx + 0x42]
lea rcx, [rbp + 0x144]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x30]
lea rcx, [rbp + 0x94]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov r15d, 0x47
lea r14, [0x1802c9098]
mov rcx, r14
mov eax, 0x10
cmp qword [0x1802c90b0], rax
cmovae rcx, qword [0x1802c9098]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
jne 0x180215719
mov rcx, r14
mov eax, 0x10
cmp qword [0x1802c90b0], rax
cmovae rcx, qword [0x1802c9098]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x1802c9090], rax
mov r8, rax
mov rdx, r14
call fcn.18008c99c
xor r9d, r9d
xor r8d, r8d
mov edx, r12d
mov rcx, rbx
call qword [0x1802c9088]
mov rdx, rbx
lea rcx, [0x1802c97e0]
call fcn.18008b374
mov r8d, eax
test eax, eax
je 0x180215911
mov eax, 0x21
mov dword [rbp + 0x220], eax
mov eax, 0x7a
mov word [rbp + 0x224], ax
mov word [rbp + 0x226], r13w
mov eax, 0x7c
mov word [rbp + 0x228], ax
mov word [rbp + 0x22a], r12w
mov eax, 0x6f
mov word [rbp + 0x22c], ax
mov word [rbp + 0x22e], si
mov eax, 0x73
mov word [rbp + 0x230], ax
lea r9d, [rax - 0x2f]
mov word [rbp + 0x232], r9w
lea ecx, [rax - 0x21]
mov word [rbp + 0x234], cx
lea eax, [rcx + 2]
mov word [rbp + 0x236], ax
lea eax, [rcx - 6]
mov word [rbp + 0x238], ax
mov word [rbp + 0x23a], r9w
lea eax, [rcx + 0x23]
mov word [rbp + 0x23c], ax
lea r10d, [r9 + 5]
mov word [rbp + 0x23e], r10w
lea eax, [rcx + 1]
mov word [rbp + 0x240], ax
mov word [rbp + 0x242], r9w
lea ecx, [rax - 0x13]
mov word [rbp + 0x244], cx
lea edx, [rax - 0xe]
mov word [rbp + 0x246], dx
mov word [rbp + 0x248], r12w
mov word [rbp + 0x24a], r15w
mov word [rbp + 0x24c], cx
lea eax, [rcx + 8]
mov word [rbp + 0x24e], ax
lea ecx, [rdx + 8]
mov word [rbp + 0x250], cx
mov word [rbp + 0x252], r9w
mov word [rbp + 0x254], dx
mov word [rbp + 0x256], r12w
lea ecx, [rdx + 0x11]
mov word [rbp + 0x258], cx
mov word [rbp + 0x25a], ax
mov word [rbp + 0x25c], si
mov word [rbp + 0x25e], r10w
lea ecx, [rdx - 0x2a]
mov word [rbp + 0x260], cx
mov word [rbp + 0x262], r12w
lea ecx, [rdx - 0x34]
mov word [rbp + 0x264], cx
lea eax, [rdx + 0x14]
mov word [rbp + 0x266], ax
xor eax, eax
mov word [rbp + 0x268], ax
movzx eax, word [rbp + 0x224]
mov rdx, r13
lea esi, [rcx + 0x11]
movzx eax, word [rbp + rdx*2 + 0x224]
mov ecx, dword [rbp + 0x220]
xor cx, ax
mov word [rbp + rdx*2 + 0x224], cx
add rdx, r12
cmp rdx, rsi
jb 0x1802158a3
mov word [rbp + 0x268], r13w
lea rcx, [rbp + 0x224]
call fcn.1800ae954
nop
mov r8, rdi
xor edx, edx
lea rcx, [rbp + 0x224]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, r13
cmp byte [0x1802b61a4], r13b
jne 0x1802159b6
cmp byte [0x1802b61aa], r13b
jne 0x1802159b6
lea rdi, [0x1802c8928]
mov rcx, rdi
mov esi, 0x10
cmp qword [0x1802c8940], rsi
cmovae rcx, qword [0x1802c8928]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
jne 0x180215964
mov rcx, rdi
cmp qword [0x1802c8940], rsi
cmovae rcx, qword [0x1802c8928]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x1802c8920], rax
mov r8, rax
mov rdx, rdi
call fcn.18008c99c
call qword [0x1802c8918]
lea rax, [rbx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x18021599b
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
call fcn.18020aab4
test al, al
je 0x18021599b
or edx, 0xffffffff
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, qword [rsp + 0x668]
add rsp, 0x620
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x5e
mov dword [rsp + 0x40], ecx
lea eax, [rcx - 0x4e]
mov word [rsp + 0x44], ax
lea eax, [rcx - 0x34]
mov word [rsp + 0x46], ax
lea eax, [rcx - 0x52]
mov word [rsp + 0x48], ax
lea ecx, [rax + 0x2f]
mov word [rsp + 0x4a], cx
lea edx, [rax + 0x21]
mov word [rsp + 0x4c], dx
lea eax, [rcx - 0x10]
mov word [rsp + 0x4e], ax
lea eax, [rcx - 8]
mov word [rsp + 0x50], ax
mov word [rsp + 0x52], cx
lea eax, [rcx - 0x31]
mov word [rsp + 0x54], ax
lea eax, [rcx - 5]
mov word [rsp + 0x56], ax
lea eax, [rcx - 0xf]
mov word [rsp + 0x58], ax
mov word [rsp + 0x5a], cx
lea eax, [rcx + 4]
mov word [rsp + 0x5c], ax
lea ebx, [rcx - 1]
mov word [rsp + 0x5e], bx
xor eax, eax
mov word [rsp + 0x60], ax
movzx eax, word [rsp + 0x44]
lea rcx, [rsp + 0x40]
call fcn.1800f18e0
mov rdx, rax
lea rcx, [rbp + 0x270]
call fcn.18007a4fc
nop
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x290]
call fcn.18020408c
lea rdx, [0x1802b2d60]
lea rcx, [rbp + 0x290]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov eax, 0x5b
mov word [rsp + 0x40], ax
mov eax, 0x81
mov word [rsp + 0x42], ax
mov word [rsp + 0x44], r15w
mov eax, 0x82
mov word [rsp + 0x46], ax
mov eax, 0x80
mov word [rsp + 0x48], ax
mov eax, 0x7d
mov word [rsp + 0x4a], ax
mov eax, 0x72
mov word [rsp + 0x4c], ax
mov word [rsp + 0x4e], di
mov word [rsp + 0x50], bx
lea ecx, [rax - 0x11]
mov word [rsp + 0x52], cx
mov word [rsp + 0x54], si
lea ecx, [rax + 0xd]
mov word [rsp + 0x56], cx
mov word [rsp + 0x58], ax
lea eax, [rcx - 0x11]
mov word [rsp + 0x5a], ax
mov word [rsp + 0x5c], bx
mov word [rsp + 0x5e], r13w
movzx eax, word [rsp + 0x40]
lea rcx, [rsp + 0x40]
call fcn.18024d44c
mov rdx, rax
lea rcx, [rbp + 0x270]
call fcn.18007a4fc
nop
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x290]
call fcn.18020408c
lea rdx, [0x1802b2d60]
lea rcx, [rbp + 0x290]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov eax, 0x57
mov word [rsp + 0x40], ax
mov eax, 0x7d
mov word [rsp + 0x42], ax
mov eax, 0x5b
mov word [rsp + 0x44], ax
lea ecx, [rax + 0x13]
mov word [rsp + 0x46], cx
lea eax, [rcx + 0xe]
mov word [rsp + 0x48], ax
lea eax, [rcx + 0x10]
mov word [rsp + 0x4a], ax
lea eax, [rcx + 8]
mov word [rsp + 0x4c], ax
mov word [rsp + 0x4e], cx
mov word [rsp + 0x50], r13w
lea eax, [rcx + 3]
mov word [rsp + 0x52], ax
lea eax, [rcx + 0xd]
mov word [rsp + 0x54], ax
mov word [rsp + 0x56], cx
lea eax, [rcx - 4]
mov word [rsp + 0x58], ax
lea eax, [rcx - 1]
mov word [rsp + 0x5a], ax
mov word [rsp + 0x5c], r12w
movzx eax, word [rsp + 0x40]
lea rcx, [rsp + 0x40]
call fcn.18024d430
mov rdx, rax
lea rcx, [rbp + 0x270]
call fcn.18007a4fc
nop
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x290]
call fcn.18020408c
lea rdx, [0x1802b2d60]
lea rcx, [rbp + 0x290]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov eax, 0x26
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
xor ax, di
mov word [rsp + 0x44], ax
mov eax, dword [rsp + 0x40]
inc ax
mov ecx, 0x75
xor ax, cx
mov word [rsp + 0x46], ax
mov eax, dword [rsp + 0x40]
add ax, 2
lea edx, [rcx - 0x10]
xor ax, dx
mov word [rsp + 0x48], ax
mov eax, dword [rsp + 0x40]
add ax, 3
xor ax, cx
mov word [rsp + 0x4a], ax
mov eax, dword [rsp + 0x40]
add ax, 4
xor ax, dx
mov word [rsp + 0x4c], ax
mov eax, dword [rsp + 0x40]
add ax, 5
xor ax, 0x55
mov word [rsp + 0x4e], ax
mov eax, dword [rsp + 0x40]
add ax, 6
xor ax, 0x73
mov word [rsp + 0x50], ax
mov eax, dword [rsp + 0x40]
add ax, 7
xor ax, dx
mov word [rsp + 0x52], ax
mov eax, dword [rsp + 0x40]
add ax, 8
xor ax, 0x72
mov word [rsp + 0x54], ax
mov eax, dword [rsp + 0x40]
add ax, 9
xor ax, 0x41
mov word [rsp + 0x56], ax
mov eax, dword [rsp + 0x40]
add ax, 0xa
xor ax, 0x50
mov word [rsp + 0x58], ax
mov eax, dword [rsp + 0x40]
add ax, 0xb
xor ax, 0x43
mov word [rsp + 0x5a], ax
xor eax, eax
mov word [rsp + 0x5c], ax
movzx eax, word [rsp + 0x44]
lea rcx, [rsp + 0x40]
call fcn.180079828
mov rdx, rax
lea rcx, [rbp + 0x270]
call fcn.18007a4fc
nop
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x290]
call fcn.18020408c
lea rdx, [0x1802b2d60]
lea rcx, [rbp + 0x290]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov r9d, 8
mov dword [rsp + 0x40], r9d
mov eax, dword [rsp + 0x40]
xor ax, 0x4e
mov word [rsp + 0x44], ax
mov eax, dword [rsp + 0x40]
add ax, bx
xor ax, 0x74
mov word [rsp + 0x46], ax
mov eax, dword [rsp + 0x40]
add ax, 2
xor ax, 0x52
mov word [rsp + 0x48], ax
mov eax, dword [rsp + 0x40]
add ax, 3
lea ecx, [r9 + 0x5d]
xor ax, cx
mov word [rsp + 0x4a], ax
mov eax, dword [rsp + 0x40]
add ax, 4
xor ax, r15w
mov word [rsp + 0x4c], ax
mov eax, dword [rsp + 0x40]
add ax, 5
xor ax, 0x75
mov word [rsp + 0x4e], ax
mov eax, dword [rsp + 0x40]
add ax, 6
xor ax, 0x6d
mov word [rsp + 0x50], ax
mov eax, dword [rsp + 0x40]
add ax, 7
xor ax, cx
mov word [rsp + 0x52], ax
mov eax, dword [rsp + 0x40]
add ax, r9w
xor ax, 0x54
mov word [rsp + 0x54], ax
mov eax, dword [rsp + 0x40]
add ax, 9
xor ax, 0x68
mov word [rsp + 0x56], ax
mov eax, dword [rsp + 0x40]
add ax, 0xa
xor ax, r12w
mov word [rsp + 0x58], ax
mov eax, dword [rsp + 0x40]
add ax, 0xb
xor ax, cx
mov word [rsp + 0x5a], ax
mov eax, dword [rsp + 0x40]
add ax, 0xc
xor ax, 0x61
mov word [rsp + 0x5c], ax
mov eax, dword [rsp + 0x40]
add ax, 0xd
xor ax, 0x64
mov word [rsp + 0x5e], ax
xor eax, eax
mov word [rsp + 0x60], ax
movzx eax, word [rsp + 0x44]
lea rcx, [rsp + 0x40]
call fcn.180079d6c
mov rdx, rax
lea rcx, [rbp + 0x270]
call fcn.18007a4fc
nop
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x290]
call fcn.18020408c
lea rdx, [0x1802b2d60]
lea rcx, [rbp + 0x290]
call sub.VCRUNTIME140.dll__CxxThrowException
int3