Function at 0x1402e2b20
Capabilities:
Access peb ldr_data
Check os version
Create thread
Encode data using xor
Hash data using fnv
Read file on windows
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4900]
mov eax, 0x4a00
call fcn.1403633e0
sub rsp, rax
movaps xmmword [rsp + 0x49f0], xmm6
movaps xmmword [rsp + 0x49e0], xmm7
mov rax, qword [0x1403e9140]
xor rax, rsp
mov qword [rbp + 0x48d0], rax
mov r13, rcx
xor r12d, r12d
xor eax, eax
mov byte [rbp - 0x5c], al
mov byte [rbp - 0x4c], al
lea rdx, [rbp + 0x4e0]
lea rcx, [rbp - 0x4c]
call fcn.1402c20f0
mov r9, rax
mov byte [rax + 0x10], r12b
mov r10d, r12d
lea r8, [rax + 0xc]
nop word [rax + rax]
lea esi, [r10 + r10*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, r10b
add al, al
lea ebx, [rax + r10]
movzx r11d, bl
add r11b, byte [r9 + 0x13]
xor r11b, dl
mov byte [r8], r11b
xor dl, dl
lea eax, [rsi + 1]
movzx edi, byte [rax + r9]
nop
movzx eax, dil
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2be6
inc dl
cmp dl, 4
jne 0x1402e2bd0
jmp 0x1402e2bf5
movsx ecx, r11b
movzx eax, byte [r9 + 0x16]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r11d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1402e2c14
inc cl
cmp cl, 8
jne 0x1402e2c02
jmp 0x1402e2c23
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x15]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r11 + r9]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1402e2c42
inc cl
cmp cl, 5
jne 0x1402e2c30
jmp 0x1402e2c51
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x14]
btc ecx, eax
mov byte [r8], cl
add bl, byte [r9 + 0x12]
xor byte [r8], bl
inc r10d
inc r8
cmp r10d, 4
jne 0x1402e2ba0
lea rdx, [r9 + 0xc]
lea rcx, [rbp + 0x6c0]
call fcn.140092a40
mov r15, rax
lea rdx, [rbp + 0x408]
lea rcx, [rbp - 0x5c]
call fcn.1402c20c0
mov r9, rax
lea r14, [rax + 9]
mov byte [r14 + 3], 0
mov r10d, r12d
mov r8, r14
nop dword [rax]
lea esi, [r10 + r10*2]
movzx edx, byte [rsi + r9]
mov byte [r8], dl
movzx eax, r10b
add al, al
lea ebx, [rax + r10]
movzx r11d, bl
add r11b, byte [r9 + 0xf]
xor r11b, dl
mov byte [r8], r11b
xor dl, dl
lea eax, [rsi + 1]
movzx edi, byte [rax + r9]
nop
movzx eax, dil
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2ce6
inc dl
cmp dl, 4
jne 0x1402e2cd0
jmp 0x1402e2cf5
movsx ecx, r11b
movzx eax, byte [r9 + 0x12]
btc ecx, eax
mov byte [r8], cl
mov cl, 5
lea eax, [rsi + 2]
mov r11d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1402e2d14
inc cl
cmp cl, 8
jne 0x1402e2d02
jmp 0x1402e2d23
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x11]
btc ecx, eax
mov byte [r8], cl
xor cl, cl
movzx edx, byte [r11 + r9]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1402e2d42
inc cl
cmp cl, 5
jne 0x1402e2d30
jmp 0x1402e2d51
movsx ecx, byte [r8]
movzx eax, byte [r9 + 0x10]
btc ecx, eax
mov byte [r8], cl
add bl, byte [r9 + 0xe]
xor byte [r8], bl
inc r10d
inc r8
cmp r10d, 3
jne 0x1402e2ca0
lea edx, [r10 - 2]
mov rcx, r15
call fcn.14008d260
movzx edi, byte [rax]
movzx ebx, byte [r14]
lea rcx, [rbp + 0x6c0]
call fcn.140092d70
cmp bl, dil
jne 0x1402e38b4
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x1402e2e39
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x1402e2e39
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rsi + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
mov r10d, 0xb67aa04b
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e2e34
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e2e00
cmp r10d, 0x9cbd3947
je 0x1402e2e41
test r11d, r11d
jne 0x1402e2de0
mov rax, qword [rax]
jmp 0x1402e2db0
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov ecx, dword [rcx + rax*4]
add rcx, rbx
call rcx
mov r12d, eax
xor eax, eax
mov byte [rbp - 0x49], al
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x49]
call fcn.1402c2120
mov r11, rax
mov byte [rax + 8], 0
xor r10d, r10d
lea r9, [rax + 6]
nop dword [rax]
nop word [rax + rax]
lea r8d, [r10 + r10*2]
movzx edx, byte [r8 + r11]
mov byte [r9], dl
movzx eax, r10b
add al, al
lea edi, [rax + r10]
movzx ebx, dil
add bl, byte [r11 + 0xb]
xor bl, dl
mov byte [r9], bl
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + r11]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2ed6
inc dl
cmp dl, 4
jne 0x1402e2ec0
jmp 0x1402e2ee4
movsx ecx, bl
movzx eax, byte [r11 + 0xe]
btc ecx, eax
mov byte [r9], cl
mov dl, 5
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, byte [rax + r11]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2f09
inc dl
cmp dl, 8
jne 0x1402e2ef3
jmp 0x1402e2f18
movsx ecx, byte [r9]
movzx eax, byte [r11 + 0xd]
btc ecx, eax
mov byte [r9], cl
xor dl, dl
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, byte [rax + r11]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e2f46
inc dl
cmp dl, 5
jne 0x1402e2f30
jmp 0x1402e2f55
movsx ecx, byte [r9]
movzx eax, byte [r11 + 0xc]
btc ecx, eax
mov byte [r9], cl
add dil, byte [r11 + 0xa]
xor byte [r9], dil
inc r10d
inc r9
cmp r10d, 2
jne 0x1402e2e90
mov eax, 0xaaaaaaab
mul r12d
shr edx, 1
lea eax, [rdx + rdx*2]
mov ecx, r12d
sub ecx, eax
mov r14d, ecx
cmp byte [rcx + r11 + 6], 0x5d
je 0x1402e38b1
xor eax, eax
mov byte [rbp - 0x48], al
lea rdx, [rbp + 0x98]
lea rcx, [rbp - 0x48]
call fcn.1402c2140
mov rdx, rax
mov byte [rax + 4], 0
movzx r9d, byte [rax + 7]
xor r9b, byte [rax]
mov byte [rax + 3], r9b
xor cl, cl
movzx r8d, byte [rax + 1]
nop dword [rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x1402e2fd3
inc cl
cmp cl, 4
jne 0x1402e2fc0
jmp 0x1402e2fe1
movsx ecx, r9b
movzx eax, byte [rdx + 0xa]
btc ecx, eax
mov byte [rdx + 3], cl
mov cl, 5
movzx r8d, byte [rdx + 2]
nop dword [rax + rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x1402e3003
inc cl
cmp cl, 8
jne 0x1402e2ff0
jmp 0x1402e3011
movsx ecx, byte [rdx + 3]
movzx eax, byte [rdx + 9]
btc ecx, eax
mov byte [rdx + 3], cl
xor cl, cl
movzx eax, r8b
sar al, cl
test al, 1
jne 0x1402e3026
inc cl
cmp cl, 5
jne 0x1402e3013
jmp 0x1402e3034
movsx ecx, byte [rdx + 3]
movzx eax, byte [rdx + 8]
btc ecx, eax
mov byte [rdx + 3], cl
movzx eax, byte [rdx + 6]
xor byte [rdx + 3], al
mov r15, r12
mov rax, r12
and eax, 1
cmp byte [rax + rdx + 3], 0x20
je 0x1402e38b1
xor eax, eax
mov byte [rsp + 0x44], al
lea rdx, [rbp + 0x170]
lea rcx, [rsp + 0x44]
call fcn.1402c2160
mov r11, rax
mov byte [rax + 8], 0
xor r10d, r10d
lea r9, [rax + 6]
nop dword [rax]
nop dword [rax + rax]
lea r8d, [r10 + r10*2]
movzx edx, byte [r8 + r11]
mov byte [r9], dl
movzx eax, r10b
add al, al
lea edi, [rax + r10]
movzx ebx, dil
add bl, byte [r11 + 0xb]
xor bl, dl
mov byte [r9], bl
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + r11]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e30c6
inc dl
cmp dl, 4
jne 0x1402e30b0
jmp 0x1402e30d4
movsx ecx, bl
movzx eax, byte [r11 + 0xe]
btc ecx, eax
mov byte [r9], cl
mov dl, 5
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, byte [rax + r11]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e30f9
inc dl
cmp dl, 8
jne 0x1402e30e3
jmp 0x1402e3108
movsx ecx, byte [r9]
movzx eax, byte [r11 + 0xd]
btc ecx, eax
mov byte [r9], cl
xor dl, dl
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, byte [rax + r11]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3136
inc dl
cmp dl, 5
jne 0x1402e3120
jmp 0x1402e3145
movsx ecx, byte [r9]
movzx eax, byte [r11 + 0xc]
btc ecx, eax
mov byte [r9], cl
add dil, byte [r11 + 0xa]
xor byte [r9], dil
inc r10d
inc r9
cmp r10d, 2
jne 0x1402e3080
cmp byte [r14 + r11 + 6], 0xa
je 0x1402e38b1
xor eax, eax
mov byte [rsp + 0x45], al
lea rdx, [rbp + 0x390]
lea rcx, [rsp + 0x45]
call fcn.1402c2180
mov r11, rax
mov byte [rax + 0xc], 0
xor r10d, r10d
lea r9, [rax + 9]
nop dword [rax]
lea r8d, [r10 + r10*2]
movzx edx, byte [r8 + r11]
mov byte [r9], dl
movzx eax, r10b
add al, al
lea edi, [rax + r10]
movzx ebx, dil
add bl, byte [r11 + 0xf]
xor bl, dl
mov byte [r9], bl
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + r11]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e31d6
inc dl
cmp dl, 4
jne 0x1402e31c0
jmp 0x1402e31e4
movsx ecx, bl
movzx eax, byte [r11 + 0x12]
btc ecx, eax
mov byte [r9], cl
mov dl, 5
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, byte [rax + r11]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3209
inc dl
cmp dl, 8
jne 0x1402e31f3
jmp 0x1402e3218
movsx ecx, byte [r9]
movzx eax, byte [r11 + 0x11]
btc ecx, eax
mov byte [r9], cl
xor dl, dl
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, byte [rax + r11]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3246
inc dl
cmp dl, 5
jne 0x1402e3230
jmp 0x1402e3255
movsx ecx, byte [r9]
movzx eax, byte [r11 + 0x10]
btc ecx, eax
mov byte [r9], cl
add dil, byte [r11 + 0xe]
xor byte [r9], dil
inc r10d
inc r9
cmp r10d, 3
jne 0x1402e3190
and r15d, r10d
cmp byte [r15 + r11 + 9], 0x2e
je 0x1402e38b1
cmp r12d, 0xe7c39675
ja 0x1402e38b1
inc r12d
xor r12d, 0xe7c39675
cmp r12d, 0x1845b662
jne 0x1402e38b1
xor eax, eax
mov byte [rsp + 0x46], al
lea rdx, [rbp + 0x438]
lea rcx, [rsp + 0x46]
call fcn.1402c21b0
mov r11, rax
mov byte [rax + 0xc], 0
xor r12d, r12d
mov r10d, r12d
lea r9, [rax + 9]
nop word [rax + rax]
lea r8d, [r10 + r10*2]
movzx edx, byte [r8 + r11]
mov byte [r9], dl
movzx eax, r10b
add al, al
lea edi, [rax + r10]
movzx ebx, dil
add bl, byte [r11 + 0xf]
xor bl, dl
mov byte [r9], bl
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + r11]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3316
inc dl
cmp dl, 4
jne 0x1402e3300
jmp 0x1402e3324
movsx ecx, bl
movzx eax, byte [r11 + 0x12]
btc ecx, eax
mov byte [r9], cl
mov dl, 5
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, byte [rax + r11]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3349
inc dl
cmp dl, 8
jne 0x1402e3333
jmp 0x1402e3358
movsx ecx, byte [r9]
movzx eax, byte [r11 + 0x11]
btc ecx, eax
mov byte [r9], cl
xor dl, dl
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, byte [rax + r11]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3386
inc dl
cmp dl, 5
jne 0x1402e3370
jmp 0x1402e3395
movsx ecx, byte [r9]
movzx eax, byte [r11 + 0x10]
btc ecx, eax
mov byte [r9], cl
add dil, byte [r11 + 0xe]
xor byte [r9], dil
inc r10d
inc r9
cmp r10d, 3
jne 0x1402e32d0
cmp byte [r11 + 9], r10b
jne 0x1402e348d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x1402e3459
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x1402e3459
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + rsi]
add r9, rbx
mov r10d, 0x732a1bee
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e3454
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e3420
cmp r10d, 0xf54da9ee
je 0x1402e3461
test r11d, r11d
jne 0x1402e3400
mov rax, qword [rax]
jmp 0x1402e33d0
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r8d, dword [rcx + rax*4]
add r8, rbx
mov edx, 0x923c2db6
mov ecx, 0x4f36856b
call r8
jmp 0x1402e38b4
xor eax, eax
mov byte [rsp + 0x47], al
lea rdx, [rbp + 0x450]
lea rcx, [rsp + 0x47]
call fcn.1402c21d0
mov r11, rax
mov byte [rax + 0xc], r12b
mov r10d, r12d
lea r9, [rax + 9]
nop dword [rax]
nop word [rax + rax]
lea r8d, [r10 + r10*2]
movzx edx, byte [r8 + r11]
mov byte [r9], dl
movzx eax, r10b
add al, al
lea edi, [rax + r10]
movzx ebx, dil
add bl, byte [r11 + 0xf]
xor bl, dl
mov byte [r9], bl
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + r11]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3506
inc dl
cmp dl, 4
jne 0x1402e34f0
jmp 0x1402e3514
movsx ecx, bl
movzx eax, byte [r11 + 0x12]
btc ecx, eax
mov byte [r9], cl
mov dl, 5
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, byte [rax + r11]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3539
inc dl
cmp dl, 8
jne 0x1402e3523
jmp 0x1402e3548
movsx ecx, byte [r9]
movzx eax, byte [r11 + 0x11]
btc ecx, eax
mov byte [r9], cl
xor dl, dl
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, byte [rax + r11]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3576
inc dl
cmp dl, 5
jne 0x1402e3560
jmp 0x1402e3585
movsx ecx, byte [r9]
movzx eax, byte [r11 + 0x10]
btc ecx, eax
mov byte [r9], cl
add dil, byte [r11 + 0xe]
xor byte [r9], dil
inc r10d
inc r9
cmp r10d, 3
jne 0x1402e34c0
cmp byte [r11 + 0xb], 4
jne 0x1402e38b4
movss xmm1, dword [0x1403e9cf4]
movaps xmm0, xmm1
divss xmm0, dword [0x1403e9cf0]
mulss xmm0, xmm1
addss xmm1, xmm0
movss dword [0x1403e9cf4], xmm1
xor eax, eax
mov byte [rsp + 0x48], al
lea rdx, [rbp + 0xa8]
lea rcx, [rsp + 0x48]
call fcn.1402c2200
mov r9, rax
mov r8d, dword [rax + 4]
movzx ecx, byte [rax + 0xa]
mov edx, r8d
shr edx, cl
test dl, 1
je 0x1402e3605
movzx ecx, byte [rax]
inc cl
mov edx, r8d
shr edx, cl
test dl, 1
jne 0x1402e3651
movzx ecx, byte [rax]
lea eax, [rcx + 2]
movzx edx, al
bt r8d, ecx
setae cl
bt r8d, edx
setae al
test al, cl
je 0x1402e3651
movzx ecx, byte [r9 + 8]
mov eax, r8d
shr eax, cl
test al, 1
jne 0x1402e3651
movzx ecx, byte [r9 + 9]
shr r8d, cl
test r8b, 1
jne 0x1402e3651
movss xmm0, dword [0x1403e9cf0]
comiss xmm0, dword [0x1403e9cf4]
jbe 0x1402e38b4
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e36f9
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e36f9
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rbx + r11*4]
mov r9d, dword [rdx + rdi]
add r9, rbx
mov r10d, 0xae960243
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e36f4
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e36c0
cmp r10d, 0x395f96ef
je 0x1402e3701
test r11d, r11d
jne 0x1402e36a0
mov rax, qword [rax]
jmp 0x1402e3670
mov edx, dword [rsi + 0x1c]
add rdx, rbx
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
call rax
mov r14, rax
test rax, rax
je 0x1402e38b4
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop word [rax + rax]
mov rbx, qword [rcx + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov esi, dword [rdx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e37c9
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e37c9
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rbx + r11*4]
mov r9d, dword [rdx + rdi]
add r9, rbx
mov r10d, 0xb11e9385
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e37c4
movsx eax, r8b
sub r8b, 0x41
mov edx, eax
or edx, 0x20
cmp r8b, 0x19
cmova edx, eax
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e3790
cmp r10d, 0xf7879165
je 0x1402e37d1
test r11d, r11d
jne 0x1402e3770
mov rcx, qword [rcx]
jmp 0x1402e3740
mov edx, dword [rsi + 0x1c]
add rdx, rbx
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
mov rcx, r14
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e3889
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e3889
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rdi + r11*4]
mov r9d, dword [rdx + rbx]
add r9, rbx
mov r10d, 0x7f0515f6
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e3884
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e3850
cmp r10d, 0x7528e5e4
je 0x1402e3891
test r11d, r11d
jne 0x1402e3830
mov rax, qword [rax]
jmp 0x1402e3800
mov edx, dword [rsi + 0x1c]
add rdx, rbx
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
mov ecx, 0xa07a3427
call rax
jmp 0x1402e38b4
xor r12d, r12d
test r13, r13
je 0x1402e3909
lea rdx, [r13 + 0x340]
movzx eax, byte [r13 + 0x9a]
mov byte [rsp + 0x30], al
mov eax, dword [r13 + 0x6c]
mov dword [rsp + 0x28], eax
movzx eax, byte [r13 + 0x84]
mov byte [rsp + 0x20], al
movzx r9d, byte [r13 + 0x72]
movss xmm2, dword [r13 + 0x38]
movss xmm1, dword [r13 + 0x34]
mov rcx, r13
call rdx
test al, al
je 0x1402e3900
mov rbx, qword [r13 + 0x40]
jmp 0x1402e390c
mov rbx, qword [r13 + 0x118]
jmp 0x1402e390c
mov rbx, r12
movss xmm0, dword [rbx]
call fcn.140375ae8
movaps xmm6, xmm0
xor eax, eax
mov byte [rsp + 0x49], al
lea rdx, [rbp + 0xb4]
lea rcx, [rsp + 0x49]
call fcn.1402bbe70
mov r9, rax
mov r8d, dword [rax + 4]
movzx ecx, byte [rax + 0xa]
mov edx, r8d
shr edx, cl
xorps xmm7, xmm7
test dl, 1
je 0x1402e3955
movzx ecx, byte [rax]
inc cl
mov eax, r8d
shr eax, cl
test al, 1
jne 0x1402e398d
movzx ecx, byte [r9]
lea eax, [rcx + 2]
movzx edx, al
bt r8d, ecx
setae cl
bt r8d, edx
setae al
test al, cl
je 0x1402e398d
movzx ecx, byte [r9 + 8]
mov eax, r8d
shr eax, cl
test al, 1
jne 0x1402e398d
movzx ecx, byte [r9 + 9]
shr r8d, cl
test r8b, 1
je 0x1402e39b6
comiss xmm7, xmm6
jbe 0x1402e39b6
xorps xmm2, xmm2
cvtss2sd xmm2, xmm6
lea rdx, [rbx + 0x48]
movq r8, xmm2
lea rcx, [0x1403c5f00]
call fcn.1402fc9a0
mov rbx, r12
jmp 0x1402e3b13
call qword [sym.imp.KERNEL32.dll_GetACP]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x1402e39e1
mov edx, edi
lea rcx, [0x1403c5f08]
call fcn.1402fc9a0
jmp 0x1402e3a13
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x1402e3a08
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
jmp 0x1402e3a13
mov ecx, 4
call qword [sym.imp.USER32.dll_SetDebugErrorLevel]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_DebugActiveProcessStop]
mov rcx, qword [rbx + 0x2a8]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [rbx + 0xe0c]
mov dword [rsp + 0x30], eax
mov eax, dword [rbx + 0xe18]
mov dword [rsp + 0x28], eax
mov eax, dword [rbx + 0xe14]
mov dword [rsp + 0x20], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_SetWindowPos]
test eax, eax
je 0x1402e3a78
mov edx, 1
xor ecx, ecx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], r12d
mov r9, rbx
lea r8, [0x1402bbe00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rdi, rax
test rax, rax
je 0x1402e3af6
mov edx, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov edx, dword [rbx + 0xd0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [rbx + 0x160]
call qword [sym.imp.USER32.dll_ShowCursor]
call qword [sym.imp.USER32.dll_GetShellWindow]
mov qword [rbx + 0x780], rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbx + 0x818]
test rcx, rcx
je 0x1402e3aef
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbx + 0x818], r12
test rbx, rbx
je 0x1402e3b13
mov edx, dword [rbx + 0x18]
imul edx, dword [rbx + 0x10]
mov eax, dword [rbx + 0x38]
lea ecx, [rax + rax*4]
add ecx, ecx
sub edx, ecx
movsxd rax, edx
movsxd rbx, dword [rbx + rax*4]
mov r14, r12
cmp byte [rbx], 0
je 0x1402e3b51
nop dword [rax + rax]
inc rbx
inc r14
movzx ecx, byte [rbx]
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [rdx + rdx*2]
sub ecx, eax
cmp ecx, 1
jne 0x1402e3b42
add rbx, 3
jmp 0x1402e3b4a
test r14, r14
jne 0x1402e3b4a
inc rbx
cmp byte [rbx + r14], 0
jne 0x1402e3b20
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov rdi, qword [rax + 0x30]
movsxd rcx, dword [rdi + 0x3c]
mov r15d, dword [rcx + rdi + 0x88]
add r15, rdi
cmp r15, rdi
je 0x1402e3bf9
mov r11d, dword [r15 + 0x18]
test r11d, r11d
je 0x1402e3bf9
mov esi, dword [r15 + 0x20]
nop word [rax + rax]
dec r11d
lea rdx, [rsi + r11*4]
mov r9d, dword [rdx + rdi]
add r9, rdi
mov r10d, 0x62d3dd2d
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e3bf4
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e3bc0
cmp r10d, 0x6017547f
je 0x1402e3c01
test r11d, r11d
jne 0x1402e3ba0
mov rax, qword [rax]
jmp 0x1402e3b70
mov edx, dword [r15 + 0x1c]
add rdx, rdi
mov ecx, dword [r15 + 0x24]
add rcx, rdi
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rdi
call rax
mov r15d, eax
add r15, r14
add r15, rbx
je 0x1402e3c2a
hlt
vmxoff
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e3cc9
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e3cc9
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rdi + r11*4]
mov r9d, dword [rdx + rbx]
add r9, rbx
mov r10d, 0x845e8e93
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e3cc4
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e3c90
cmp r10d, 0x331152a7
je 0x1402e3cd1
test r11d, r11d
jne 0x1402e3c70
mov rax, qword [rax]
jmp 0x1402e3c40
mov edx, dword [rsi + 0x1c]
add rdx, rbx
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
call rax
mov rbx, rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov r13, 0xffffffffffffffff
cmp rbx, rax
jne 0x1402e3e67
mov rcx, qword [r15 + 0xa8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rdx, qword [r15 + 0xc8]
mov rcx, qword [r15 + 0xc0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
xor ecx, ecx
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov r14, rax
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
mov rbx, qword [rcx + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov esi, dword [rdx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e3dc9
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e3dc9
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rdi + r11*4]
mov r9d, dword [rdx + rbx]
add r9, rbx
mov r10d, 0x5098c3c2
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e3dc4
movsx eax, r8b
sub r8b, 0x41
mov edx, eax
or edx, 0x20
cmp r8b, 0x19
cmova edx, eax
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e3d90
cmp r10d, 0x6242e7c8
je 0x1402e3dd1
test r11d, r11d
jne 0x1402e3d70
mov rcx, qword [rcx]
jmp 0x1402e3d40
mov edx, dword [rsi + 0x1c]
add rdx, rbx
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
mov edx, 1
mov rcx, r14
call rax
mov ebx, eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [r15 + 0x19d8]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
test rax, rax
je 0x1402e3e53
mov qword [rsp + 0x20], r12
mov r9, qword [r15 + 0x1124]
mov r8d, reloc.WS2_32.dll_sendto
mov rdx, qword [r15 + 0x1100]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp ebx, eax
jne 0x1402ee936
add r15, 0x28
jmp 0x1402e3e6a
mov r15, r12
mov esi, dword [r15]
mov r14d, dword [r15 + 4]
xor eax, eax
mov byte [rsp + 0x4a], al
lea rdx, [rbp + 0xbf0]
lea rcx, [rsp + 0x4a]
call fcn.1402bbd30
mov rbx, rax
mov byte [rax + 0x38], 0
mov r9d, r12d
lea r10, [rax + 0x2a]
nop word [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x3b]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3ee6
inc dl
cmp dl, 4
jne 0x1402e3ed0
jmp 0x1402e3ef4
movsx ecx, r11b
movzx eax, byte [rbx + 0x3e]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3f19
inc dl
cmp dl, 8
jne 0x1402e3f03
jmp 0x1402e3f27
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x3d]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e3f56
inc dl
cmp dl, 5
jne 0x1402e3f40
jmp 0x1402e3f64
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x3c]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea edx, [rax + r9]
add dl, byte [rbx + 0x3a]
xor byte [r10], dl
inc r9d
inc r10
cmp r9d, 0xe
jne 0x1402e3ea0
mov r8d, r14d
mov edx, esi
lea rcx, [rbx + 0x2a]
call fcn.1402fc9a0
lea eax, [rsi*4 + 8]
movsxd rbx, eax
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x4490]
call fcn.140395dd0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x20]
mov rdx, qword [r15 + rbx*4 + 0x14]
lea rcx, [rbp + 0x4490]
call fcn.1402fae30
nop
xor eax, eax
cmp qword [rbp + 0x4520], rax
je 0x1402e406d
movdqa xmm0, xmmword [reloc.d2d1.dll_Ordinal_1]
movdqu xmmword [rbp + 0x4f8], xmm0
mov qword [rbp + 0x508], rax
movaps xmmword [rbp + 0x510], xmm0
movsd xmm0, qword [rbp + 0x508]
movsd qword [rbp + 0x520], xmm0
lea rdx, [rbp + 0x510]
lea rcx, [rbp + 0x4490]
call fcn.1402fb050
xor eax, eax
mov word [rbp + 0x4324], ax
lea r8d, [rax + 1]
lea rdx, [rbp + 0x4324]
lea rcx, [rbp + 0x4490]
call fcn.1400f7170
lea rcx, [rbp + 0x4490]
call fcn.140079d30
cmp byte [rbp + 0x4324], 0x30
jne 0x1402e4308
lea rdi, [rbx + 0x30b]
lea rdi, [r15 + rdi*4]
jmp 0x1402e430b
mov byte [rsp + 0x4b], al
lea rdx, [rbp + 0x888]
lea rcx, [rsp + 0x4b]
call fcn.1402c12f0
mov r11, rax
lea rsi, [rax + 0x1e]
mov word [rsi + 0xa], r12w
mov r10d, r12d
mov rbx, rsi
nop dword [rax]
nop dword [rax + rax]
lea r8d, [r10 + r10*2]
movzx edx, word [r11 + r8*2]
mov word [rbx], dx
movzx eax, r10w
add ax, ax
lea r9d, [rax + r10]
movzx eax, byte [r11 + 0x2c]
add r9w, ax
xor r9w, dx
mov word [rbx], r9w
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, word [r11 + rax*2]
nop dword [rax]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e40f7
inc dl
cmp dl, 4
jne 0x1402e40e0
jmp 0x1402e4108
movzx r9d, r9w
movzx eax, byte [r11 + 0x2f]
btc r9d, eax
mov word [rbx], r9w
mov dl, 5
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, word [r11 + rax*2]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e4137
inc dl
cmp dl, 8
jne 0x1402e4120
jmp 0x1402e414a
movzx ecx, r9w
movzx eax, byte [r11 + 0x2e]
btc ecx, eax
movzx r9d, cx
mov word [rbx], cx
xor dl, dl
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, word [r11 + rax*2]
nop dword [rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e4177
inc dl
cmp dl, 5
jne 0x1402e4160
jmp 0x1402e418a
movzx ecx, r9w
movzx eax, byte [r11 + 0x2d]
btc ecx, eax
movzx r9d, cx
mov word [rbx], cx
movzx eax, r10w
add ax, ax
lea ecx, [rax + r10]
movzx eax, byte [r11 + 0x2b]
add cx, ax
xor cx, r9w
mov word [rbx], cx
inc r10d
add rbx, 2
cmp r10d, 5
jne 0x1402e40a0
xor eax, eax
mov byte [rsp + 0x4c], al
lea rdx, [rbp + 0xa60]
lea rcx, [rsp + 0x4c]
call fcn.1402c1280
mov r11, rax
mov word [rax + 0x38], r12w
mov r10d, r12d
lea rbx, [rax + 0x2a]
nop dword [rax + rax]
lea r8d, [r10 + r10*2]
movzx edx, word [r11 + r8*2]
mov word [rbx], dx
movzx eax, r10w
add ax, ax
lea r9d, [rax + r10]
movzx eax, byte [r11 + 0x3c]
add r9w, ax
xor r9w, dx
mov word [rbx], r9w
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, word [r11 + rax*2]
nop dword [rax]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e4237
inc dl
cmp dl, 4
jne 0x1402e4220
jmp 0x1402e4248
movzx r9d, r9w
movzx eax, byte [r11 + 0x3f]
btc r9d, eax
mov word [rbx], r9w
mov dl, 5
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, word [r11 + rax*2]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e4277
inc dl
cmp dl, 8
jne 0x1402e4260
jmp 0x1402e428a
movzx ecx, r9w
movzx eax, byte [r11 + 0x3e]
btc ecx, eax
movzx r9d, cx
mov word [rbx], cx
xor dl, dl
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, word [r11 + rax*2]
nop dword [rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e42b7
inc dl
cmp dl, 5
jne 0x1402e42a0
jmp 0x1402e42ca
movzx ecx, r9w
movzx eax, byte [r11 + 0x3d]
btc ecx, eax
movzx r9d, cx
mov word [rbx], cx
movzx eax, r10w
add ax, ax
lea ecx, [rax + r10]
movzx eax, byte [r11 + 0x3b]
add cx, ax
xor cx, r9w
mov word [rbx], cx
inc r10d
add rbx, 2
cmp r10d, 7
jne 0x1402e41e0
xor r9d, r9d
mov r8, rsi
lea rdx, [r11 + 0x2a]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
mov rdi, r13
lea rcx, [rbp + 0x4540]
call fcn.140078030
lea rcx, [rbp + 0x4540]
call fcn.14007f9f0
call fcn.1402fa030
mov r14d, dword [rdi]
mov r15d, dword [rdi + 4]
xor eax, eax
mov byte [rsp + 0x4d], al
lea rdx, [rbp + 0xc30]
lea rcx, [rsp + 0x4d]
call fcn.1402bbd30
mov rbx, rax
mov byte [rax + 0x38], 0
mov r9d, r12d
lea r10, [rax + 0x2a]
nop dword [rax]
nop dword [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x3b]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e43a6
inc dl
cmp dl, 4
jne 0x1402e4390
jmp 0x1402e43b4
movsx ecx, r11b
movzx eax, byte [rbx + 0x3e]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e43d9
inc dl
cmp dl, 8
jne 0x1402e43c3
jmp 0x1402e43e7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x3d]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e4416
inc dl
cmp dl, 5
jne 0x1402e4400
jmp 0x1402e4424
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x3c]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea edx, [rax + r9]
add dl, byte [rbx + 0x3a]
xor byte [r10], dl
inc r9d
inc r10
cmp r9d, 0xe
jne 0x1402e4360
mov r8d, r15d
mov edx, r14d
lea rcx, [rbx + 0x2a]
call fcn.1402fc9a0
lea eax, [r14*4 + 8]
movsxd rbx, eax
call fcn.1402c2220
mov r10d, r12d
movsxd rsi, dword [rdi + rbx*4 + 4]
add rbx, 3
lea rbx, [rdi + rbx*4]
test esi, esi
jle 0x1402e44c6
mov r11, r12
nop word [rax + rax]
mov eax, 1
test r11, r11
cmovne rax, r11
mov r8d, dword [rbx + rax*4 - 4]
mov r9d, 1
cmp dword [rbx + rax*4], r8d
cmovl r9, r13
add r9, rax
lea ecx, [r10 + 1]
test r11, r11
cmovne ecx, r10d
mov r10d, 1
cmp dword [rbx + rax*4], r8d
cmovl r10d, r13d
add r10d, ecx
mov r11, r9
cmp r9, rsi
jl 0x1402e4480
imul esi, r10d
movsxd rax, esi
lea rsi, [rbx + rax*4]
movsxd rax, dword [rsi]
lea rsi, [rsi + 4]
mov r13d, 2
mov r14, rax
lea r12d, [r13 + 1]
lea rax, [rsi + 8]
mov qword [rbp - 0x38], rax
nop dword [rax]
xor eax, eax
mov byte [rsp + 0x4e], al
lea rdx, [rbp + 0x530]
lea rcx, [rsp + 0x4e]
call fcn.1402bbda0
mov rbx, rax
lea r15, [rax + 0xc]
mov byte [r15 + 4], 0
xor r9d, r9d
mov r10, r15
nop dword [rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x13]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e4566
inc dl
cmp dl, 4
jne 0x1402e4550
jmp 0x1402e4574
movsx ecx, r11b
movzx eax, byte [rbx + 0x16]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e4599
inc dl
cmp dl, 8
jne 0x1402e4583
jmp 0x1402e45a7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x15]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e45d6
inc dl
cmp dl, 5
jne 0x1402e45c0
jmp 0x1402e45e4
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x14]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x12]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 4
jne 0x1402e4520
xor eax, eax
mov byte [rsp + 0x4f], al
lea rdx, [rbp + 0x660]
lea rcx, [rsp + 0x4f]
call fcn.1402bbdd0
mov rbx, rax
mov byte [rax + 0x14], 0
xor r9d, r9d
lea r11, [rax + 0xf]
nop dword [rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r11], dl
movzx eax, r9b
add al, al
lea r10d, [rax + r9]
add r10b, byte [rbx + 0x17]
xor r10b, dl
mov byte [r11], r10b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e4676
inc dl
cmp dl, 4
jne 0x1402e4660
jmp 0x1402e4684
movsx ecx, r10b
movzx eax, byte [rbx + 0x1a]
btc ecx, eax
mov byte [r11], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e46a9
inc dl
cmp dl, 8
jne 0x1402e4693
jmp 0x1402e46b7
movsx ecx, byte [r11]
movzx eax, byte [rbx + 0x19]
btc ecx, eax
mov byte [r11], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e46e6
inc dl
cmp dl, 5
jne 0x1402e46d0
jmp 0x1402e46f4
movsx ecx, byte [r11]
movzx eax, byte [rbx + 0x18]
btc ecx, eax
mov byte [r11], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x16]
xor byte [r11], cl
inc r9d
inc r11
cmp r9d, 5
jne 0x1402e4630
movsx eax, byte [rbx + 0x11]
lea eax, [rax + rax*4]
cdqe
movsx ecx, byte [r15 + rax]
sub ecx, dword [rsi + 4]
cmp r13d, ecx
jge 0x1402e4771
mov eax, r13d
imul eax, dword [rsi]
mov rdi, qword [rbp - 0x38]
add dword [rdi], eax
lea r8d, [r13 + 1]
mov rdx, r12
cmp r12, r14
jge 0x1402e475e
movsxd rax, dword [rsi + r14*4 - 4]
mov ecx, dword [rsi + rax*4]
cmp dword [rsi + rdx*4], ecx
jge 0x1402e4753
mov dword [rsi + 4], r8d
inc r8d
inc rdx
cmp rdx, r14
jl 0x1402e4742
inc r13d
add rdi, 4
mov qword [rbp - 0x38], rdi
inc r12
jmp 0x1402e44f0
mov eax, r14d
lea eax, [rax*4]
movsxd rcx, eax
lea r8, [rsi + rcx*4]
nop
nop
int 0x2c
nop
test r8, r8
je 0x1402e47f7
mov edx, dword [r8 + 0x18]
imul edx, dword [r8 + 0x10]
mov eax, dword [r8 + 0x38]
lea ecx, [rax + rax*4]
add ecx, ecx
sub edx, ecx
movsxd rax, edx
movsxd rbx, dword [r8 + rax*4]
test rbx, rbx
je 0x1402e47f7
lea rdx, [rbx + 0x340]
movzx eax, byte [rbx + 0x9a]
mov byte [rsp + 0x30], al
mov eax, dword [rbx + 0x6c]
mov dword [rsp + 0x28], eax
movzx eax, byte [rbx + 0x84]
mov byte [rsp + 0x20], al
movzx r9d, byte [rbx + 0x72]
movss xmm2, dword [rbx + 0x38]
movss xmm1, dword [rbx + 0x34]
mov rcx, rbx
call rdx
test al, al
je 0x1402e47ee
mov rsi, qword [rbx + 0x40]
jmp 0x1402e47f9
mov rsi, qword [rbx + 0x118]
jmp 0x1402e47f9
xor esi, esi
movsxd rax, dword [rsi]
mov r13d, 2
mov r14, rax
lea r12d, [r13 + 1]
lea rax, [rsi + 0xc]
mov qword [rbp - 0x38], rax
xor eax, eax
mov byte [rsp + 0x50], al
lea rdx, [rbp + 0x4c8]
lea rcx, [rsp + 0x50]
call fcn.1402bbda0
mov rbx, rax
lea r15, [rax + 0xc]
mov byte [r15 + 4], 0
xor r9d, r9d
mov r10, r15
nop word [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x13]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e4886
inc dl
cmp dl, 4
jne 0x1402e4870
jmp 0x1402e4894
movsx ecx, r11b
movzx eax, byte [rbx + 0x16]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e48b9
inc dl
cmp dl, 8
jne 0x1402e48a3
jmp 0x1402e48c7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x15]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e48f6
inc dl
cmp dl, 5
jne 0x1402e48e0
jmp 0x1402e4904
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x14]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x12]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 4
jne 0x1402e4840
xor eax, eax
mov byte [rsp + 0x51], al
lea rdx, [rbp + 0x680]
lea rcx, [rsp + 0x51]
call fcn.1402bbdd0
mov rbx, rax
mov byte [rax + 0x14], 0
xor r9d, r9d
lea r11, [rax + 0xf]
nop dword [rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r11], dl
movzx eax, r9b
add al, al
lea r10d, [rax + r9]
add r10b, byte [rbx + 0x17]
xor r10b, dl
mov byte [r11], r10b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e4996
inc dl
cmp dl, 4
jne 0x1402e4980
jmp 0x1402e49a4
movsx ecx, r10b
movzx eax, byte [rbx + 0x1a]
btc ecx, eax
mov byte [r11], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e49c9
inc dl
cmp dl, 8
jne 0x1402e49b3
jmp 0x1402e49d7
movsx ecx, byte [r11]
movzx eax, byte [rbx + 0x19]
btc ecx, eax
mov byte [r11], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e4a06
inc dl
cmp dl, 5
jne 0x1402e49f0
jmp 0x1402e4a14
movsx ecx, byte [r11]
movzx eax, byte [rbx + 0x18]
btc ecx, eax
mov byte [r11], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x16]
xor byte [r11], cl
inc r9d
inc r11
cmp r9d, 5
jne 0x1402e4950
movsx eax, byte [rbx + 0x11]
lea eax, [rax + rax*4]
cdqe
movsx ecx, byte [rax + r15]
sub ecx, dword [rsi + 8]
cmp r13d, ecx
jge 0x1402e4aa0
mov eax, r13d
imul eax, dword [rsi + 4]
mov rdi, qword [rbp - 0x38]
add dword [rdi], eax
lea r8d, [r13 + 1]
mov rdx, r12
cmp r12, r14
jge 0x1402e4a8d
nop dword [rax]
nop word [rax + rax]
movsxd rax, dword [rsi + r14*4]
mov ecx, dword [rsi + rax*4 + 4]
cmp dword [rsi + rdx*4 + 4], ecx
jge 0x1402e4a82
mov dword [rsi + 8], r8d
inc r8d
inc rdx
cmp rdx, r14
jl 0x1402e4a70
inc r13d
add rdi, 4
mov qword [rbp - 0x38], rdi
inc r12
jmp 0x1402e4811
mov eax, r14d
lea eax, [rax*4]
movsxd rcx, eax
inc rcx
lea r15, [rsi + rcx*4]
xor eax, eax
mov byte [rsp + 0x52], al
mov byte [rsp + 0x53], al
lea rdx, [rbp + 0x560]
lea rcx, [rsp + 0x53]
call fcn.1402c20f0
mov rbx, rax
mov byte [rax + 0x10], 0
xor r12d, r12d
mov r9d, r12d
lea r10, [rax + 0xc]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x13]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e4b26
inc dl
cmp dl, 4
jne 0x1402e4b10
jmp 0x1402e4b34
movsx ecx, r11b
movzx eax, byte [rbx + 0x16]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e4b59
inc dl
cmp dl, 8
jne 0x1402e4b43
jmp 0x1402e4b67
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x15]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e4b96
inc dl
cmp dl, 5
jne 0x1402e4b80
jmp 0x1402e4ba4
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x14]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x12]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 4
jne 0x1402e4ae0
lea rdx, [rbx + 0xc]
lea rcx, [rbp + 0x6e0]
call fcn.140092a40
mov rdi, rax
cmp qword [rax + 0x18], 0xf
jbe 0x1402e4be1
mov rdi, qword [rax]
lea rdx, [rbp + 0x3a8]
lea rcx, [rsp + 0x52]
call fcn.1402c20c0
mov rbx, rax
mov byte [rax + 0xc], 0
mov r9d, r12d
lea r10, [rax + 9]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0xf]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e4c46
inc dl
cmp dl, 4
jne 0x1402e4c30
jmp 0x1402e4c54
movsx ecx, r11b
movzx eax, byte [rbx + 0x12]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e4c79
inc dl
cmp dl, 8
jne 0x1402e4c63
jmp 0x1402e4c87
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x11]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e4cb6
inc dl
cmp dl, 5
jne 0x1402e4ca0
jmp 0x1402e4cc4
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x10]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0xe]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 3
jne 0x1402e4c00
movzx edi, byte [rdi + 1]
movzx ebx, byte [rbx + 9]
lea rcx, [rbp + 0x6e0]
call fcn.140092d70
cmp bl, dil
jne 0x1402e5831
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e4da9
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e4da9
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rdi + r11*4]
mov r9d, dword [rdx + rbx]
add r9, rbx
mov r10d, 0xb67aa04b
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e4da4
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e4d70
cmp r10d, 0x9cbd3947
je 0x1402e4db1
test r11d, r11d
jne 0x1402e4d50
mov rax, qword [rax]
jmp 0x1402e4d20
mov edx, dword [rsi + 0x1c]
add rdx, rbx
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
call rax
mov esi, eax
xor eax, eax
mov byte [rsp + 0x54], al
lea rdx, [rbp + 0x180]
lea rcx, [rsp + 0x54]
call fcn.1402c2120
mov rbx, rax
mov byte [rax + 8], 0
mov r9d, r12d
lea r10, [rax + 6]
nop dword [rax]
nop word [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0xb]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e4e46
inc dl
cmp dl, 4
jne 0x1402e4e30
jmp 0x1402e4e54
movsx ecx, r11b
movzx eax, byte [rbx + 0xe]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e4e79
inc dl
cmp dl, 8
jne 0x1402e4e63
jmp 0x1402e4e87
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0xd]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e4eb6
inc dl
cmp dl, 5
jne 0x1402e4ea0
jmp 0x1402e4ec4
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0xc]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0xa]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 2
jne 0x1402e4e00
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea eax, [rdx + rdx*2]
mov ecx, esi
sub ecx, eax
cmp byte [rcx + rbx + 6], 0x5d
je 0x1402e5831
xor eax, eax
mov byte [rsp + 0x55], al
lea rdx, [rbp + 0xc0]
lea rcx, [rsp + 0x55]
call fcn.1402c2140
mov rdx, rax
mov byte [rax + 4], 0
movzx r9d, byte [rax + 7]
xor r9b, byte [rax]
mov byte [rax + 3], r9b
xor cl, cl
movzx r8d, byte [rax + 1]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x1402e4f43
inc cl
cmp cl, 4
jne 0x1402e4f30
jmp 0x1402e4f51
movsx ecx, r9b
movzx eax, byte [rdx + 0xa]
btc ecx, eax
mov byte [rdx + 3], cl
mov cl, 5
movzx r8d, byte [rdx + 2]
nop dword [rax + rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x1402e4f73
inc cl
cmp cl, 8
jne 0x1402e4f60
jmp 0x1402e4f81
movsx ecx, byte [rdx + 3]
movzx eax, byte [rdx + 9]
btc ecx, eax
mov byte [rdx + 3], cl
xor cl, cl
movzx eax, r8b
sar al, cl
test al, 1
jne 0x1402e4f96
inc cl
cmp cl, 5
jne 0x1402e4f83
jmp 0x1402e4fa4
movsx ecx, byte [rdx + 3]
movzx eax, byte [rdx + 8]
btc ecx, eax
mov byte [rdx + 3], cl
movzx eax, byte [rdx + 6]
xor byte [rdx + 3], al
mov eax, esi
and eax, 1
cmp byte [rax + rdx + 3], 0x20
je 0x1402e5831
xor eax, eax
mov byte [rsp + 0x56], al
lea rdx, [rbp + 0x190]
lea rcx, [rsp + 0x56]
call fcn.1402c2160
mov rbx, rax
mov byte [rax + 8], 0
mov r9d, r12d
lea r10, [rax + 6]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0xb]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5026
inc dl
cmp dl, 4
jne 0x1402e5010
jmp 0x1402e5034
movsx ecx, r11b
movzx eax, byte [rbx + 0xe]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5059
inc dl
cmp dl, 8
jne 0x1402e5043
jmp 0x1402e5067
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0xd]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5096
inc dl
cmp dl, 5
jne 0x1402e5080
jmp 0x1402e50a4
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0xc]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0xa]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 2
jne 0x1402e4fe0
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea eax, [rdx + rdx*2]
mov ecx, esi
sub ecx, eax
cmp byte [rcx + rbx + 6], 0xa
je 0x1402e5831
xor eax, eax
mov byte [rsp + 0x57], al
lea rdx, [rbp + 0x3c0]
lea rcx, [rsp + 0x57]
call fcn.1402c2180
mov rbx, rax
mov byte [rax + 0xc], 0
mov r9d, r12d
lea r10, [rax + 9]
nop dword [rax]
nop dword [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0xf]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5156
inc dl
cmp dl, 4
jne 0x1402e5140
jmp 0x1402e5164
movsx ecx, r11b
movzx eax, byte [rbx + 0x12]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5189
inc dl
cmp dl, 8
jne 0x1402e5173
jmp 0x1402e5197
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x11]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e51c6
inc dl
cmp dl, 5
jne 0x1402e51b0
jmp 0x1402e51d4
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x10]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0xe]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 3
jne 0x1402e5110
mov eax, esi
and eax, r9d
cmp byte [rax + rbx + 9], 0x2e
je 0x1402e5831
cmp esi, 0xe7c39675
ja 0x1402e5831
inc esi
xor esi, 0xe7c39675
cmp esi, 0x1845b662
jne 0x1402e5831
xor eax, eax
mov byte [rsp + 0x58], al
lea rdx, [rbp + 0x3d8]
lea rcx, [rsp + 0x58]
call fcn.1402c21b0
mov rbx, rax
mov byte [rax + 0xc], 0
mov r9d, r12d
lea r10, [rax + 9]
nop dword [rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0xf]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5296
inc dl
cmp dl, 4
jne 0x1402e5280
jmp 0x1402e52a4
movsx ecx, r11b
movzx eax, byte [rbx + 0x12]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e52c9
inc dl
cmp dl, 8
jne 0x1402e52b3
jmp 0x1402e52d7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x11]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5306
inc dl
cmp dl, 5
jne 0x1402e52f0
jmp 0x1402e5314
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x10]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0xe]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 3
jne 0x1402e5250
cmp byte [rbx + 9], r9b
jne 0x1402e540c
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e53d9
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e53d9
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rdi + r11*4]
mov r9d, dword [rdx + rbx]
add r9, rbx
mov r10d, 0x732a1bee
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e53d4
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e53a0
cmp r10d, 0xf54da9ee
je 0x1402e53e1
test r11d, r11d
jne 0x1402e5380
mov rax, qword [rax]
jmp 0x1402e5350
mov r9d, dword [rsi + 0x1c]
add r9, rbx
mov r8d, dword [rsi + 0x24]
add r8, rbx
movzx r8d, word [r8 + r11*2]
mov eax, dword [r9 + r8*4]
add rax, rbx
mov edx, 0x923c2db6
mov ecx, 0x4f36856b
call rax
jmp 0x1402e5831
xor eax, eax
mov byte [rsp + 0x59], al
lea rdx, [rbp + 0x420]
lea rcx, [rsp + 0x59]
call fcn.1402c21d0
mov rbx, rax
mov byte [rax + 0xc], 0
mov r9d, r12d
lea r10, [rax + 9]
nop dword [rax]
nop word [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0xf]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5486
inc dl
cmp dl, 4
jne 0x1402e5470
jmp 0x1402e5494
movsx ecx, r11b
movzx eax, byte [rbx + 0x12]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e54b9
inc dl
cmp dl, 8
jne 0x1402e54a3
jmp 0x1402e54c7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x11]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e54f6
inc dl
cmp dl, 5
jne 0x1402e54e0
jmp 0x1402e5504
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x10]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0xe]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 3
jne 0x1402e5440
cmp byte [rbx + 0xb], 4
jne 0x1402e5831
movss xmm1, dword [0x1403e9cf4]
movaps xmm0, xmm1
divss xmm0, dword [0x1403e9cf0]
mulss xmm0, xmm1
addss xmm1, xmm0
movss dword [0x1403e9cf4], xmm1
xor eax, eax
mov byte [rsp + 0x5a], al
lea rdx, [rbp + 0xd0]
lea rcx, [rsp + 0x5a]
call fcn.1402c2200
mov r9, rax
mov r8d, dword [rax + 4]
movzx ecx, byte [rax + 0xa]
mov edx, r8d
shr edx, cl
test dl, 1
je 0x1402e558c
movzx ecx, byte [rax]
inc cl
mov edx, r8d
shr edx, cl
test dl, 1
jne 0x1402e55d8
movzx ecx, byte [rax]
lea eax, [rcx + 2]
movzx edx, al
bt r8d, ecx
setae cl
bt r8d, edx
setae al
test al, cl
je 0x1402e55d8
movzx ecx, byte [r9 + 8]
mov eax, r8d
shr eax, cl
test al, 1
jne 0x1402e55d8
movzx ecx, byte [r9 + 9]
shr r8d, cl
test r8b, 1
jne 0x1402e55d8
movss xmm0, dword [0x1403e9cf0]
comiss xmm0, dword [0x1403e9cf4]
jbe 0x1402e5831
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e5679
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e5679
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rbx + r11*4]
mov r9d, dword [rdx + rdi]
add r9, rbx
mov r10d, 0xae960243
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e5674
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e5640
cmp r10d, 0x395f96ef
je 0x1402e5681
test r11d, r11d
jne 0x1402e5620
mov rax, qword [rax]
jmp 0x1402e55f0
mov edx, dword [rsi + 0x1c]
add rdx, rbx
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
call rax
mov r14, rax
test rax, rax
je 0x1402e5831
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop word [rax + rax]
mov rbx, qword [rcx + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov esi, dword [rdx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e5749
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e5749
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rbx + r11*4]
mov r9d, dword [rdx + rdi]
add r9, rbx
mov r10d, 0xb11e9385
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e5744
movsx eax, r8b
sub r8b, 0x41
mov edx, eax
or edx, 0x20
cmp r8b, 0x19
cmova edx, eax
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e5710
cmp r10d, 0xf7879165
je 0x1402e5751
test r11d, r11d
jne 0x1402e56f0
mov rcx, qword [rcx]
jmp 0x1402e56c0
mov edx, dword [rsi + 0x1c]
add rdx, rbx
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
mov rcx, r14
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e5809
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e5809
mov rax, qword [rax]
jmp 0x1402e5780
movss xmm0, dword [r15]
call fcn.140375ae8
movaps xmm6, xmm0
xor eax, eax
mov byte [rsp + 0x5b], al
lea rdx, [rbp + 0xdc]
lea rcx, [rsp + 0x5b]
call fcn.1402bbe70
mov r9, rax
mov r8d, dword [rax + 4]
movzx ecx, byte [rax + 0xa]
mov edx, r8d
shr edx, cl
test dl, 1
je 0x1402e5879
movzx ecx, byte [rax]
inc cl
mov edx, r8d
shr edx, cl
test dl, 1
jne 0x1402e58b0
movzx ecx, byte [rax]
lea eax, [rcx + 2]
movzx edx, al
bt r8d, ecx
setae cl
bt r8d, edx
setae al
test al, cl
je 0x1402e58b0
movzx ecx, byte [r9 + 8]
mov eax, r8d
shr eax, cl
test al, 1
jne 0x1402e58b0
movzx ecx, byte [r9 + 9]
shr r8d, cl
test r8b, 1
je 0x1402e58d9
comiss xmm7, xmm6
jbe 0x1402e58d9
xorps xmm2, xmm2
cvtss2sd xmm2, xmm6
lea rdx, [r15 + 0x48]
movq r8, xmm2
lea rcx, [0x1403c5f00]
call fcn.1402fc9a0
mov r15, r12
jmp 0x1402e5a1e
call qword [sym.imp.KERNEL32.dll_GetACP]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x1402e5904
mov edx, ebx
lea rcx, [0x1403c5f08]
call fcn.1402fc9a0
jmp 0x1402e5936
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x1402e592b
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
jmp 0x1402e5936
mov ecx, 4
call qword [sym.imp.USER32.dll_SetDebugErrorLevel]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_DebugActiveProcessStop]
mov rcx, qword [r15 + 0x2a8]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [r15 + 0xe0c]
mov dword [rsp + 0x30], eax
mov eax, dword [r15 + 0xe18]
mov dword [rsp + 0x28], eax
mov eax, dword [r15 + 0xe14]
mov dword [rsp + 0x20], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_SetWindowPos]
test eax, eax
je 0x1402e599e
mov edx, 1
xor ecx, ecx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], r12d
mov r9, r15
lea r8, [0x1402bbe00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rbx, rax
test rax, rax
je 0x1402e5a1e
mov edx, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov edx, dword [r15 + 0xd0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [r15 + 0x160]
call qword [sym.imp.USER32.dll_ShowCursor]
call qword [sym.imp.USER32.dll_GetShellWindow]
mov qword [r15 + 0x780], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [r15 + 0x818]
test rcx, rcx
je 0x1402e5a17
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [r15 + 0x818], r12
mov ecx, 4
mov rax, qword gs:[0x58]
mov rax, qword [rax]
mov eax, dword [rcx + rax]
cmp dword [0x140423d88], eax
jle 0x1402e7507
lea rcx, [0x140423d88]
call fcn.140362b98
cmp dword [0x140423d88], 0xffffffff
jne 0x1402e7507
xorps xmm0, xmm0
xor eax, eax
movups xmmword [0x140423d90], xmm0
mov qword [0x140423da0], rax
mov byte [rsp + 0x5c], al
lea rdx, [rbp + 0x2290]
lea rcx, [rsp + 0x5c]
call fcn.1402be910
mov rbx, rax
mov byte [rax + 0xb0], 0
mov r9d, r12d
lea r10, [rax + 0x84]
nop dword [rax]
nop word [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0xb3]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5ae6
inc dl
cmp dl, 4
jne 0x1402e5ad0
jmp 0x1402e5af7
movsx ecx, r11b
movzx eax, byte [rbx + 0xb6]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5b26
inc dl
cmp dl, 8
jne 0x1402e5b10
jmp 0x1402e5b37
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0xb5]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5b66
inc dl
cmp dl, 5
jne 0x1402e5b50
jmp 0x1402e5b77
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0xb4]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0xb2]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0x2c
jne 0x1402e5aa0
lea rdx, [rbx + 0x84]
lea rcx, [rbp + 0x700]
call fcn.140092a40
nop
lea rax, [rbp + 0x700]
mov qword [rbp + 0x30], rax
lea rax, [rbp + 0x720]
mov qword [rbp + 0x38], rax
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x1a0]
call fcn.1402faa60
nop
movzx eax, byte [r15 + 0x35]
mov byte [rbp + 0x2410], al
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x2418]
call fcn.1402fc3d0
nop
xor eax, eax
mov byte [rsp + 0x5d], al
lea rdx, [rbp + 0xfd0]
lea rcx, [rsp + 0x5d]
call fcn.1402bea60
mov rbx, rax
mov byte [rax + 0x40], 0
mov r9d, r12d
lea r10, [rax + 0x30]
nop dword [rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x43]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5c66
inc dl
cmp dl, 4
jne 0x1402e5c50
jmp 0x1402e5c74
movsx ecx, r11b
movzx eax, byte [rbx + 0x46]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5c99
inc dl
cmp dl, 8
jne 0x1402e5c83
jmp 0x1402e5ca7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x45]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5cd6
inc dl
cmp dl, 5
jne 0x1402e5cc0
jmp 0x1402e5ce4
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x44]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x42]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0x10
jne 0x1402e5c20
lea rdx, [rbx + 0x30]
lea rcx, [rbp + 0xc70]
call fcn.140092a40
nop
xor eax, eax
mov byte [rsp + 0x5e], al
lea rdx, [rbp + 0x1530]
lea rcx, [rsp + 0x5e]
call fcn.1402beae0
mov rbx, rax
mov byte [rax + 0x58], 0
mov r9d, r12d
lea r10, [rax + 0x42]
nop word [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x5b]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5d86
inc dl
cmp dl, 4
jne 0x1402e5d70
jmp 0x1402e5d94
movsx ecx, r11b
movzx eax, byte [rbx + 0x5e]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5db9
inc dl
cmp dl, 8
jne 0x1402e5da3
jmp 0x1402e5dc7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x5d]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5df6
inc dl
cmp dl, 5
jne 0x1402e5de0
jmp 0x1402e5e04
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x5c]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x5a]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0x16
jne 0x1402e5d40
lea rdx, [rbx + 0x42]
lea rcx, [rbp + 0xc90]
call fcn.140092a40
nop
lea rax, [rbp + 0xc70]
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0xcb0]
mov qword [rbp + 0x28], rax
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x1b0]
call fcn.1402faa60
nop
movzx eax, byte [r15 + 0x36]
mov byte [rbp + 0x2428], al
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x2430]
call fcn.1402fc3d0
nop
xor eax, eax
mov byte [rsp + 0x5f], al
lea rdx, [rbp + 0x1f30]
lea rcx, [rsp + 0x5f]
call fcn.1402beb80
mov rbx, rax
mov byte [rax + 0x8c], 0
mov r9d, r12d
lea r10, [rax + 0x69]
nop dword [rax]
nop word [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x8f]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5ef6
inc dl
cmp dl, 4
jne 0x1402e5ee0
jmp 0x1402e5f07
movsx ecx, r11b
movzx eax, byte [rbx + 0x92]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5f36
inc dl
cmp dl, 8
jne 0x1402e5f20
jmp 0x1402e5f47
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x91]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e5f76
inc dl
cmp dl, 5
jne 0x1402e5f60
jmp 0x1402e5f87
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x90]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x8e]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0x23
jne 0x1402e5eb0
lea rdx, [rbx + 0x69]
lea rcx, [rbp + 0x1b00]
call fcn.140092a40
nop
xor eax, eax
mov byte [rsp + 0x60], al
lea rdx, [rbp + 0xcb0]
lea rcx, [rsp + 0x60]
call fcn.1402bec80
mov rbx, rax
mov byte [rax + 0x38], 0
mov r9d, r12d
lea r10, [rax + 0x2a]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x3b]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e6026
inc dl
cmp dl, 4
jne 0x1402e6010
jmp 0x1402e6034
movsx ecx, r11b
movzx eax, byte [rbx + 0x3e]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e6059
inc dl
cmp dl, 8
jne 0x1402e6043
jmp 0x1402e6067
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x3d]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e6096
inc dl
cmp dl, 5
jne 0x1402e6080
jmp 0x1402e60a4
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x3c]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x3a]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0xe
jne 0x1402e5fe0
lea rdx, [rbx + 0x2a]
lea rcx, [rbp + 0x1b20]
call fcn.140092a40
nop
xor eax, eax
mov byte [rsp + 0x61], al
lea rdx, [rbp + 0x1590]
lea rcx, [rsp + 0x61]
call fcn.1402becf0
mov rbx, rax
mov byte [rax + 0x58], 0
mov r9d, r12d
lea r10, [rax + 0x42]
nop word [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x5b]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e6146
inc dl
cmp dl, 4
jne 0x1402e6130
jmp 0x1402e6154
movsx ecx, r11b
movzx eax, byte [rbx + 0x5e]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e6179
inc dl
cmp dl, 8
jne 0x1402e6163
jmp 0x1402e6187
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x5d]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e61b6
inc dl
cmp dl, 5
jne 0x1402e61a0
jmp 0x1402e61c4
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x5c]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x5a]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0x16
jne 0x1402e6100
lea rdx, [rbx + 0x42]
lea rcx, [rbp + 0x1b40]
call fcn.140092a40
nop
xor eax, eax
mov byte [rsp + 0x62], al
lea rdx, [rbp + 0x2a50]
lea rcx, [rsp + 0x62]
call fcn.1402bed90
mov rbx, rax
mov byte [rax + 0xc4], 0
mov r9d, r12d
lea r10, [rax + 0x93]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0xc7]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e6266
inc dl
cmp dl, 4
jne 0x1402e6250
jmp 0x1402e6277
movsx ecx, r11b
movzx eax, byte [rbx + 0xca]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e62a6
inc dl
cmp dl, 8
jne 0x1402e6290
jmp 0x1402e62b7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0xc9]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e62e6
inc dl
cmp dl, 5
jne 0x1402e62d0
jmp 0x1402e62f7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0xc8]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0xc6]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0x31
jne 0x1402e6220
lea rdx, [rbx + 0x93]
lea rcx, [rbp + 0x1b60]
call fcn.140092a40
nop
lea rax, [rbp + 0x1b00]
mov qword [rbp + 0x10], rax
lea rax, [rbp + 0x1b80]
mov qword [rbp + 0x18], rax
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x1c0]
call fcn.1402faa60
nop
movzx eax, byte [r15 + 0x37]
mov byte [rbp + 0x2440], al
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x2448]
call fcn.1402fc3d0
nop
xor eax, eax
mov byte [rsp + 0x63], al
lea rdx, [rbp + 0x3700]
lea rcx, [rsp + 0x63]
call fcn.1402bef00
mov rbx, rax
mov byte [rax + 0x180], 0
mov r9d, r12d
lea r10, [rax + 0x120]
nop
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x183]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e63e6
inc dl
cmp dl, 4
jne 0x1402e63d0
jmp 0x1402e63f7
movsx ecx, r11b
movzx eax, byte [rbx + 0x186]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e6426
inc dl
cmp dl, 8
jne 0x1402e6410
jmp 0x1402e6437
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x185]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e6466
inc dl
cmp dl, 5
jne 0x1402e6450
jmp 0x1402e6477
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x184]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x182]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0x60
jne 0x1402e63a0
lea rdx, [rbx + 0x120]
lea rcx, [rbp + 0xcf0]
call fcn.140092a40
nop
xor eax, eax
mov byte [rsp + 0x64], al
lea rdx, [rbp + 0x3460]
lea rcx, [rsp + 0x64]
call fcn.1402bf210
mov rbx, rax
mov byte [rax + 0x144], 0
mov r9d, r12d
lea r10, [rax + 0xf3]
nop dword [rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x147]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e6526
inc dl
cmp dl, 4
jne 0x1402e6510
jmp 0x1402e6537
movsx ecx, r11b
movzx eax, byte [rbx + 0x14a]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e6566
inc dl
cmp dl, 8
jne 0x1402e6550
jmp 0x1402e6577
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x149]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e65a6
inc dl
cmp dl, 5
jne 0x1402e6590
jmp 0x1402e65b7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x148]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x146]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0x51
jne 0x1402e64e0
lea rdx, [rbx + 0xf3]
lea rcx, [rbp + 0xd10]
call fcn.140092a40
nop
lea rax, [rbp + 0xcf0]
mov qword [rbp], rax
lea rax, [rbp + 0xd30]
mov qword [rbp + 8], rax
lea rdx, [rbp]
lea rcx, [rbp + 0x1d0]
call fcn.1402faa60
nop
movzx eax, byte [r15 + 0x38]
mov byte [rbp + 0x2458], al
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x2460]
call fcn.1402fc3d0
nop
xor eax, eax
mov byte [rsp + 0x65], al
lea rdx, [rbp + 0x2690]
lea rcx, [rsp + 0x65]
call fcn.1402bf4a0
mov rbx, rax
mov byte [rax + 0xf0], 0
mov r9d, r12d
lea r10, [rax + 0xb4]
nop
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0xf3]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e66a6
inc dl
cmp dl, 4
jne 0x1402e6690
jmp 0x1402e66b7
movsx ecx, r11b
movzx eax, byte [rbx + 0xf6]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e66e6
inc dl
cmp dl, 8
jne 0x1402e66d0
jmp 0x1402e66f7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0xf5]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e6726
inc dl
cmp dl, 5
jne 0x1402e6710
jmp 0x1402e6737
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0xf4]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0xf2]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0x3c
jne 0x1402e6660
lea rdx, [rbx + 0xb4]
lea rcx, [rbp + 0x1b80]
call fcn.140092a40
nop
xor eax, eax
mov byte [rsp + 0x66], al
lea rdx, [rbp + 0x2bf0]
lea rcx, [rsp + 0x66]
call fcn.1402bf670
mov rbx, rax
mov byte [rax + 0xcc], 0
mov r9d, r12d
lea r10, [rax + 0x99]
nop dword [rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0xcf]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e67e6
inc dl
cmp dl, 4
jne 0x1402e67d0
movsx ecx, r11b
movzx eax, byte [rbx + 0xd2]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e6826
cmp dword [r15 + 0x44], 1
jle 0x1402e7bc4
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
mov byte [rsp + 0x70], al
lea rdx, [rbp + 0x2db0]
lea rcx, [rsp + 0x70]
call fcn.1402c0800
mov r11, rax
mov word [rax + 0xd0], r12w
mov r10d, r12d
lea rbx, [rax + 0x9c]
nop dword [rax]
lea r8d, [r10 + r10*2]
movzx edx, word [r11 + r8*2]
mov word [rbx], dx
movzx eax, r10w
add ax, ax
lea r9d, [rax + r10]
movzx eax, byte [r11 + 0xd4]
add r9w, ax
xor r9w, dx
mov word [rbx], r9w
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, word [r11 + rax*2]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e75a7
inc dl
cmp dl, 4
jne 0x1402e7590
jmp 0x1402e75bb
movzx r9d, r9w
movzx eax, byte [r11 + 0xd7]
btc r9d, eax
mov word [rbx], r9w
mov dl, 5
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, word [r11 + rax*2]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e75e7
inc dl
cmp dl, 8
jne 0x1402e75d0
jmp 0x1402e75fd
movzx ecx, r9w
movzx eax, byte [r11 + 0xd6]
btc ecx, eax
movzx r9d, cx
mov word [rbx], cx
xor dl, dl
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, word [r11 + rax*2]
nop dword [rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e7627
inc dl
cmp dl, 5
jne 0x1402e7610
jmp 0x1402e763d
movzx ecx, r9w
movzx eax, byte [r11 + 0xd5]
btc ecx, eax
movzx r9d, cx
mov word [rbx], cx
movzx eax, r10w
add ax, ax
lea ecx, [rax + r10]
movzx eax, byte [r11 + 0xd3]
add cx, ax
xor cx, r9w
mov word [rbx], cx
inc r10d
add rbx, 2
cmp r10d, 0x1a
jne 0x1402e7550
lea rdx, [r11 + 0x9c]
lea rcx, [rbp + 0x4338]
call fcn.1400913d0
nop
cmp qword [rbp + 0x4348], 0
je 0x1402e78a2
xor eax, eax
mov byte [rsp + 0x71], al
lea rdx, [rbp + 0x2fa0]
lea rcx, [rsp + 0x71]
call fcn.1402c0970
mov rbx, rax
mov byte [rax + 0x104], 0
mov r9d, r12d
lea r10, [rax + 0xc3]
nop dword [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x107]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e7706
inc dl
cmp dl, 4
jne 0x1402e76f0
jmp 0x1402e7717
movsx ecx, r11b
movzx eax, byte [rbx + 0x10a]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e7746
inc dl
cmp dl, 8
jne 0x1402e7730
jmp 0x1402e7757
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x109]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e7786
inc dl
cmp dl, 5
jne 0x1402e7770
jmp 0x1402e7797
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x108]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x106]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0x41
jne 0x1402e76c0
lea rdx, [rbx + 0xc3]
lea rcx, [rbp + 0xd70]
call fcn.140092a40
nop
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x4338]
call fcn.140081c30
mov rbx, qword [rax]
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x4338]
call fcn.140081c50
lea r9, [rsp + 0x72]
mov r8, rbx
mov rdx, qword [rax]
lea rcx, [rbp + 0xd90]
call fcn.14006f7f0
nop
lea rax, [rbp + 0xd70]
mov qword [rbp + 0x250], rax
lea rax, [rbp + 0xdb0]
mov qword [rbp + 0x258], rax
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x260]
call fcn.1402faa60
nop
movzx eax, byte [r15 + 0x3d]
mov byte [rbp + 0x578], al
lea rdx, [rbp + 0x260]
lea rcx, [rbp + 0x580]
call fcn.1402fc3d0
nop
lea rdx, [rbp + 0x578]
lea rcx, [0x140423d90]
call fcn.1402fc290
nop
lea rcx, [rbp + 0x580]
call fcn.1402fa9f0
nop
lea rcx, [rbp + 0x260]
call fcn.1402fa9f0
nop
lea r9, [fcn.140092dd0]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea r8d, [rdx - 0x1e]
lea rcx, [rbp + 0xd70]
call fcn.140362a20
xor eax, eax
mov byte [rsp + 0x73], al
lea rdx, [rbp + 0x18c0]
lea rcx, [rsp + 0x73]
call fcn.1402c0b70
mov rbx, rax
mov byte [rax + 0x80], 0
mov r9d, r12d
lea r10, [rax + 0x60]
nop word [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x83]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e7916
inc dl
cmp dl, 4
jne 0x1402e7900
jmp 0x1402e7927
movsx ecx, r11b
movzx eax, byte [rbx + 0x86]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e7956
inc dl
cmp dl, 8
jne 0x1402e7940
jmp 0x1402e7967
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x85]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e7996
inc dl
cmp dl, 5
jne 0x1402e7980
jmp 0x1402e79a7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x84]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0x82]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0x20
jne 0x1402e78d0
lea rdx, [rbx + 0x60]
lea rcx, [rbp + 0xdb0]
call fcn.140092a40
nop
xor eax, eax
mov byte [rsp + 0x74], al
lea rdx, [rbp + 0x2110]
lea rcx, [rsp + 0x74]
call fcn.1402c0c50
mov rbx, rax
mov byte [rax + 0xac], 0
mov r9d, r12d
lea r10, [rax + 0x81]
nop word [rax + rax]
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0xaf]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e7a56
inc dl
cmp dl, 4
jne 0x1402e7a40
jmp 0x1402e7a67
movsx ecx, r11b
movzx eax, byte [rbx + 0xb2]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e7a96
inc dl
cmp dl, 8
jne 0x1402e7a80
jmp 0x1402e7aa7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0xb1]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e7ad6
inc dl
cmp dl, 5
jne 0x1402e7ac0
jmp 0x1402e7ae7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0xb0]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea ecx, [rax + r9]
add cl, byte [rbx + 0xae]
xor byte [r10], cl
inc r9d
inc r10
cmp r9d, 0x2b
jne 0x1402e7a10
lea rdx, [rbx + 0x81]
lea rcx, [rbp + 0xdd0]
call fcn.140092a40
nop
lea rax, [rbp + 0xdb0]
mov qword [rbp + 0x270], rax
lea rax, [rbp + 0xdf0]
mov qword [rbp + 0x278], rax
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x280]
call fcn.1402faa60
nop
movzx eax, byte [r15 + 0x3e]
mov byte [rbp + 0x590], al
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x598]
call fcn.1402fc3d0
nop
lea rdx, [rbp + 0x590]
lea rcx, [0x140423d90]
call fcn.1402fc290
nop
lea rcx, [rbp + 0x598]
call fcn.1402fa9f0
nop
lea rcx, [rbp + 0x280]
call fcn.1402fa9f0
nop
lea r9, [fcn.140092dd0]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea r8d, [rdx - 0x1e]
lea rcx, [rbp + 0xdb0]
call fcn.140362a20
nop
lea rcx, [rbp + 0x4338]
call fcn.140091b10
mov rcx, qword [0x140423d98]
sub rcx, qword [0x140423d90]
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov dword [r15 + 0x50], edx
xor edx, edx
lea rcx, [0x140423d90]
call fcn.1402fabb0
mov rbx, rax
test rax, rax
je 0x1402e7c52
lea rdx, [rax + 0x340]
movzx ecx, byte [rax + 0x9a]
mov byte [rsp + 0x30], cl
mov ecx, dword [rax + 0x6c]
mov dword [rsp + 0x28], ecx
movzx ecx, byte [rax + 0x84]
mov byte [rsp + 0x20], cl
movzx r9d, byte [rax + 0x72]
movss xmm2, dword [rax + 0x38]
movss xmm1, dword [rax + 0x34]
mov rcx, rax
call rdx
test al, al
je 0x1402e7c49
mov r15, qword [rbx + 0x40]
jmp 0x1402e7c55
mov r15, qword [rbx + 0x118]
jmp 0x1402e7c55
mov r15, r12
call fcn.1402c2220
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e7cf9
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e7cf9
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rdi + r11*4]
mov r9d, dword [rdx + rbx]
add r9, rbx
mov r10d, 0x845e8e93
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e7cf4
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e7cc0
cmp r10d, 0x331152a7
je 0x1402e7d01
test r11d, r11d
jne 0x1402e7ca0
mov rax, qword [rax]
jmp 0x1402e7c70
mov edx, dword [rsi + 0x1c]
add rdx, rbx
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
call rax
mov rbx, rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rbx, rax
jne 0x1402e7e97
mov rcx, qword [r15 + 0xa8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rdx, qword [r15 + 0xc8]
mov rcx, qword [r15 + 0xc0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
xor ecx, ecx
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov r14, rax
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax]
mov rbx, qword [rcx + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov esi, dword [rdx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e7df9
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e7df9
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rdi + r11*4]
mov r9d, dword [rdx + rbx]
add r9, rbx
mov r10d, 0x5098c3c2
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e7df4
movsx eax, r8b
sub r8b, 0x41
mov edx, eax
or edx, 0x20
cmp r8b, 0x19
cmova edx, eax
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e7dc0
cmp r10d, 0x6242e7c8
je 0x1402e7e01
test r11d, r11d
jne 0x1402e7da0
mov rcx, qword [rcx]
jmp 0x1402e7d70
mov edx, dword [rsi + 0x1c]
add rdx, rbx
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
mov edx, 1
mov rcx, r14
call rax
mov ebx, eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [r15 + 0x19d8]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
test rax, rax
je 0x1402e7e83
mov qword [rsp + 0x20], r12
mov r9, qword [r15 + 0x1124]
mov r8d, reloc.WS2_32.dll_sendto
mov rdx, qword [r15 + 0x1100]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp ebx, eax
jne 0x1402ee92f
add r15, 0x28
jmp 0x1402e7e9a
mov r15, r12
mov rsi, r12
cmp byte [r15], sil
je 0x1402e7ee2
nop dword [rax]
nop word [rax + rax]
inc r15
inc rsi
movzx ecx, byte [r15]
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [rdx + rdx*2]
sub ecx, eax
cmp ecx, 1
jne 0x1402e7ed3
add r15, 3
jmp 0x1402e7edb
test rsi, rsi
jne 0x1402e7edb
inc r15
cmp byte [r15 + rsi], 0
jne 0x1402e7eb0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x1402e7f89
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x1402e7f89
mov edi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rdx, [rbx + r11*4]
mov r9d, dword [rdx + rdi]
add r9, rbx
mov r10d, 0x62d3dd2d
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e7f84
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1402e7f50
cmp r10d, 0x6017547f
je 0x1402e7f91
test r11d, r11d
jne 0x1402e7f30
mov rax, qword [rax]
jmp 0x1402e7f00
mov edx, dword [r14 + 0x1c]
add rdx, rbx
mov ecx, dword [r14 + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
call rax
mov eax, eax
add rsi, rax
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x45a0]
call fcn.140395dd0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x20]
mov rdx, qword [r15 + rsi + 0x10]
lea rcx, [rbp + 0x45a0]
call fcn.1402fae30
nop
lea r14, vtable.std::ios_base.0
xor eax, eax
cmp qword [rbp + 0x4630], rax
je 0x1402e80a7
movdqa xmm0, xmmword [reloc.d2d1.dll_Ordinal_1]
movdqu xmmword [rbp + 0x5a8], xmm0
mov qword [rbp + 0x5b8], rax
movaps xmmword [rbp + 0x5c0], xmm0
movsd xmm0, qword [rbp + 0x5b8]
movsd qword [rbp + 0x5d0], xmm0
lea rdx, [rbp + 0x5c0]
lea rcx, [rbp + 0x45a0]
call fcn.1402fb050
xor eax, eax
mov word [rbp + 0x4320], ax
lea r8d, [rax + 1]
lea rdx, [rbp + 0x4320]
lea rcx, [rbp + 0x45a0]
call fcn.1400f7170
lea rcx, [rbp + 0x45a0]
call fcn.140079d30
cmp byte [rbp + 0x4320], 0x30
jne 0x1402e8338
lea rbx, [rsi + 0xc28]
add rbx, r15
lea rcx, [rbp + 0x4650]
call fcn.140078030
lea rcx, [rbp + 0x4650]
call fcn.14007f9f0
mov r13, 0xffffffffffffffff
jmp 0x1402e8363
mov byte [rsp + 0x75], al
lea rdx, [rbp + 0x8c0]
lea rcx, [rsp + 0x75]
call fcn.1402c12f0
mov r11, rax
lea rsi, [rax + 0x1e]
mov word [rsi + 0xa], r12w
mov r10d, r12d
mov rbx, rsi
nop
lea r8d, [r10 + r10*2]
movzx edx, word [r11 + r8*2]
mov word [rbx], dx
movzx eax, r10w
add ax, ax
lea r9d, [rax + r10]
movzx eax, byte [r11 + 0x2c]
add r9w, ax
xor r9w, dx
mov word [rbx], r9w
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, word [r11 + rax*2]
nop dword [rax]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e8127
inc dl
cmp dl, 4
jne 0x1402e8110
jmp 0x1402e8138
movzx r9d, r9w
movzx eax, byte [r11 + 0x2f]
btc r9d, eax
mov word [rbx], r9w
mov dl, 5
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, word [r11 + rax*2]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e8167
inc dl
cmp dl, 8
jne 0x1402e8150
jmp 0x1402e817a
movzx ecx, r9w
movzx eax, byte [r11 + 0x2e]
btc ecx, eax
movzx r9d, cx
mov word [rbx], cx
xor dl, dl
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, word [r11 + rax*2]
nop dword [rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e81a7
inc dl
cmp dl, 5
jne 0x1402e8190
jmp 0x1402e81ba
movzx ecx, r9w
movzx eax, byte [r11 + 0x2d]
btc ecx, eax
movzx r9d, cx
mov word [rbx], cx
movzx eax, r10w
add ax, ax
lea ecx, [rax + r10]
movzx eax, byte [r11 + 0x2b]
add cx, ax
xor cx, r9w
mov word [rbx], cx
inc r10d
add rbx, 2
cmp r10d, 5
jne 0x1402e80d0
xor eax, eax
mov byte [rsp + 0x76], al
lea rdx, [rbp + 0xab0]
lea rcx, [rsp + 0x76]
call fcn.1402c1280
mov r11, rax
mov word [rax + 0x38], r12w
mov r10d, r12d
lea rbx, [rax + 0x2a]
nop dword [rax + rax]
lea r8d, [r10 + r10*2]
movzx edx, word [r11 + r8*2]
mov word [rbx], dx
movzx eax, r10w
add ax, ax
lea r9d, [rax + r10]
movzx eax, byte [r11 + 0x3c]
add r9w, ax
xor r9w, dx
mov word [rbx], r9w
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, word [r11 + rax*2]
nop dword [rax]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e8267
inc dl
cmp dl, 4
jne 0x1402e8250
jmp 0x1402e8278
movzx r9d, r9w
movzx eax, byte [r11 + 0x3f]
btc r9d, eax
mov word [rbx], r9w
mov dl, 5
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, word [r11 + rax*2]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e82a7
inc dl
cmp dl, 8
jne 0x1402e8290
jmp 0x1402e82ba
movzx ecx, r9w
movzx eax, byte [r11 + 0x3e]
btc ecx, eax
movzx r9d, cx
mov word [rbx], cx
xor dl, dl
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, word [r11 + rax*2]
nop dword [rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e82e7
inc dl
cmp dl, 5
jne 0x1402e82d0
jmp 0x1402e82fa
movzx ecx, r9w
movzx eax, byte [r11 + 0x3d]
btc ecx, eax
movzx r9d, cx
mov word [rbx], cx
movzx eax, r10w
add ax, ax
lea ecx, [rax + r10]
movzx eax, byte [r11 + 0x3b]
add cx, ax
xor cx, r9w
mov word [rbx], cx
inc r10d
add rbx, 2
cmp r10d, 7
jne 0x1402e8210
xor r9d, r9d
mov r8, rsi
lea rdx, [r11 + 0x2a]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
lea rcx, [rbp + 0x4650]
call fcn.140078030
nop
mov qword [rbp + 0x4650], r14
lea rcx, [rbp + 0x4650]
call fcn.14030c6f0
nop
mov r13, 0xffffffffffffffff
mov rbx, r13
mov r10d, r12d
movsxd rsi, dword [rbx]
test esi, esi
jle 0x1402e83b8
mov r11, r12
mov eax, 1
test r11, r11
cmovne rax, r11
mov r8d, dword [rbx + rax*4 + 4]
mov r9d, 1
cmp dword [rbx + rax*4 + 8], r8d
cmovl r9, r13
add r9, rax
lea ecx, [r10 + 1]
test r11, r11
cmovne ecx, r10d
mov r10d, 1
cmp dword [rbx + rax*4 + 8], r8d
cmovl r10d, r13d
add r10d, ecx
mov r11, r9
cmp r9, rsi
jl 0x1402e8370
imul esi, r10d
movsxd rax, esi
lea rbx, [rbx + rax*4]
add rbx, 8
movss xmm0, dword [rbx]
call fcn.140375ae8
movaps xmm6, xmm0
xor eax, eax
mov byte [rsp + 0x77], al
lea rdx, [rbp + 0xe8]
lea rcx, [rsp + 0x77]
call fcn.1402bbe70
mov r9, rax
mov r8d, dword [rax + 4]
movzx ecx, byte [rax + 0xa]
mov edx, r8d
shr edx, cl
test dl, 1
je 0x1402e840e
movzx ecx, byte [rax]
inc cl
mov edx, r8d
shr edx, cl
test dl, 1
jne 0x1402e8445
movzx ecx, byte [rax]
lea eax, [rcx + 2]
movzx edx, al
bt r8d, ecx
setae cl
bt r8d, edx
setae al
test al, cl
je 0x1402e8445
movzx ecx, byte [r9 + 8]
mov eax, r8d
shr eax, cl
test al, 1
jne 0x1402e8445
movzx ecx, byte [r9 + 9]
shr r8d, cl
test r8b, 1
je 0x1402e846e
comiss xmm7, xmm6
jbe 0x1402e846e
xorps xmm2, xmm2
cvtss2sd xmm2, xmm6
lea rdx, [rbx + 0x48]
movq r8, xmm2
lea rcx, [0x1403c5f00]
call fcn.1402fc9a0
mov rbx, r12
jmp 0x1402e85ae
call qword [sym.imp.KERNEL32.dll_GetACP]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x1402e8499
mov edx, edi
lea rcx, [0x1403c5f08]
call fcn.1402fc9a0
jmp 0x1402e84cb
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x1402e84c0
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
jmp 0x1402e84cb
mov ecx, 4
call qword [sym.imp.USER32.dll_SetDebugErrorLevel]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_DebugActiveProcessStop]
mov rcx, qword [rbx + 0x2a8]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [rbx + 0xe0c]
mov dword [rsp + 0x30], eax
mov eax, dword [rbx + 0xe18]
mov dword [rsp + 0x28], eax
mov eax, dword [rbx + 0xe14]
mov dword [rsp + 0x20], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_SetWindowPos]
test eax, eax
je 0x1402e8530
mov edx, 1
xor ecx, ecx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], r12d
mov r9, rbx
lea r8, [0x1402bbe00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rdi, rax
test rax, rax
je 0x1402e85ae
mov edx, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov edx, dword [rbx + 0xd0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [rbx + 0x160]
call qword [sym.imp.USER32.dll_ShowCursor]
call qword [sym.imp.USER32.dll_GetShellWindow]
mov qword [rbx + 0x780], rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbx + 0x818]
test rcx, rcx
je 0x1402e85a7
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbx + 0x818], r12
mov r10d, r12d
movsxd rsi, dword [rbx]
test esi, esi
jle 0x1402e8608
mov r11, r12
nop dword [rax + rax]
mov eax, 1
test r11, r11
cmovne rax, r11
mov r8d, dword [rbx + rax*4 + 4]
mov r9d, 1
cmp dword [rbx + rax*4 + 8], r8d
cmovl r9, r13
add r9, rax
lea ecx, [r10 + 1]
test r11, r11
cmovne ecx, r10d
mov r10d, 1
cmp dword [rbx + rax*4 + 8], r8d
cmovl r10d, r13d
add r10d, ecx
mov r11, r9
cmp r9, rsi
jl 0x1402e85c0
imul esi, r10d
movsxd rdi, esi
add rdi, 2
lea rdi, [rbx + rdi*4]
test rdi, rdi
je 0x1402e861f
hlt
vmxoff
mov r14d, dword [rdi]
mov r15d, dword [rdi + 4]
xor eax, eax
mov byte [rsp + 0x78], al
lea rdx, [rbp + 0xdf0]
lea rcx, [rsp + 0x78]
call fcn.1402bbd30
mov rbx, rax
mov byte [rax + 0x38], 0
mov r9d, r12d
lea r10, [rax + 0x2a]
nop
lea r8d, [r9 + r9*2]
movzx edx, byte [r8 + rbx]
mov byte [r10], dl
movzx eax, r9b
add al, al
lea r11d, [rax + r9]
add r11b, byte [rbx + 0x3b]
xor r11b, dl
mov byte [r10], r11b
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, byte [rax + rbx]
nop dword [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e8696
inc dl
cmp dl, 4
jne 0x1402e8680
jmp 0x1402e86a4
movsx ecx, r11b
movzx eax, byte [rbx + 0x3e]
btc ecx, eax
mov byte [r10], cl
mov dl, 5
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e86c9
inc dl
cmp dl, 8
jne 0x1402e86b3
jmp 0x1402e86d7
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x3d]
btc ecx, eax
mov byte [r10], cl
xor dl, dl
lea eax, [r9 + 1]
lea eax, [r9 + rax*2]
movzx r8d, byte [rax + rbx]
nop word [rax + rax]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1402e8706
inc dl
cmp dl, 5
jne 0x1402e86f0
jmp 0x1402e8714
movsx ecx, byte [r10]
movzx eax, byte [rbx + 0x3c]
btc ecx, eax
mov byte [r10], cl
movzx eax, r9b
add al, al
lea edx, [rax + r9]
add dl, byte [rbx + 0x3a]
xor byte [r10], dl
inc r9d
inc r10
cmp r9d, 0xe
jne 0x1402e8650
mov r8d, r15d
mov edx, r14d
lea rcx, [rbx + 0x2a]
call fcn.1402fc9a0
lea eax, [r14*4 + 8]
movsxd rbx, eax
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x46b0]
call fcn.140395dd0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x20]
mov rdx, qword [rdi + rbx*4 + 0x14]
lea rcx, [rbp + 0x46b0]
call fcn.1402fae30
nop
xor eax, eax
cmp qword [rbp + 0x4740], rax
je 0x1402e8843
movdqa xmm0, xmmword [reloc.d2d1.dll_Ordinal_1]
movdqu xmmword [rbp + 0x548], xmm0
mov qword [rbp + 0x558], rax
movaps xmmword [rbp + 0x600], xmm0
movsd xmm0, qword [rbp + 0x558]
movsd qword [rbp + 0x610], xmm0
lea rdx, [rbp + 0x600]
lea rcx, [rbp + 0x46b0]
call fcn.1402fb050
xor eax, eax
mov word [rbp + 0x4330], ax
lea r8d, [rax + 1]
lea rdx, [rbp + 0x4330]
lea rcx, [rbp + 0x46b0]
call fcn.1400f7170
lea rcx, [rbp + 0x46b0]
call fcn.140079d30
cmp byte [rbp + 0x4330], 0x30
jne 0x1402e8ad8
add rbx, 0x30b
lea rbx, [rdi + rbx*4]
lea rcx, [rbp + 0x4760]
call fcn.140078030
lea rcx, [rbp + 0x4760]
call fcn.14007f9f0
test rbx, rbx
jne 0x1402e8b03
mov r15, r12
jmp 0x1402e8b4c
mov byte [rsp + 0x79], al
lea rdx, [rbp + 0x780]
lea rcx, [rsp + 0x79]
call fcn.1402c12f0
mov r11, rax
lea rsi, [rax + 0x1e]
mov word [rsi + 0xa], r12w
mov r10d, r12d
mov rbx, rsi
nop word [rax + rax]
lea r8d, [r10 + r10*2]
movzx edx, word [r11 + r8*2]
mov word [rbx], dx
movzx eax, r10w
add ax, ax
lea r9d, [rax + r10]
movzx eax, byte [r11 + 0x2c]
add r9w, ax
xor r9w, dx
mov word [rbx], r9w
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, word [r11 + rax*2]
nop dword [rax]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e88c7
inc dl
cmp dl, 4
jne 0x1402e88b0
jmp 0x1402e88d8
movzx r9d, r9w
movzx eax, byte [r11 + 0x2f]
btc r9d, eax
mov word [rbx], r9w
mov dl, 5
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, word [r11 + rax*2]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e8907
inc dl
cmp dl, 8
jne 0x1402e88f0
jmp 0x1402e891a
movzx ecx, r9w
movzx eax, byte [r11 + 0x2e]
btc ecx, eax
movzx r9d, cx
mov word [rbx], cx
xor dl, dl
lea eax, [r10 + 1]
lea eax, [r10 + rax*2]
movzx r8d, word [r11 + rax*2]
nop dword [rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e8947
inc dl
cmp dl, 5
jne 0x1402e8930
jmp 0x1402e895a
movzx ecx, r9w
movzx eax, byte [r11 + 0x2d]
btc ecx, eax
movzx r9d, cx
mov word [rbx], cx
movzx eax, r10w
add ax, ax
lea ecx, [rax + r10]
movzx eax, byte [r11 + 0x2b]
add cx, ax
xor cx, r9w
mov word [rbx], cx
inc r10d
add rbx, 2
cmp r10d, 5
jne 0x1402e8870
xor eax, eax
mov byte [rsp + 0x7a], al
lea rdx, [rbp + 0xb00]
lea rcx, [rsp + 0x7a]
call fcn.1402c1280
mov r11, rax
mov word [rax + 0x38], r12w
mov r10d, r12d
lea rbx, [rax + 0x2a]
nop dword [rax + rax]
lea r8d, [r10 + r10*2]
movzx edx, word [r11 + r8*2]
mov word [rbx], dx
movzx eax, r10w
add ax, ax
lea r9d, [rax + r10]
movzx eax, byte [r11 + 0x3c]
add r9w, ax
xor r9w, dx
mov word [rbx], r9w
xor dl, dl
lea eax, [r8 + 1]
movzx r8d, word [r11 + rax*2]
nop dword [rax]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r8w
shr ax, cl
test al, 1
jne 0x1402e8a07
lea rcx, [rbp + 0x4760]
call fcn.140078030
nop
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x4760], rax
lea rcx, [rbp + 0x4760]
call fcn.14030c6f0
nop
mov rbx, r13
lea rdx, [rbx + 0x340]
movzx eax, byte [rbx + 0x9a]
mov byte [rsp + 0x30], al
mov eax, dword [rbx + 0x6c]
mov dword [rsp + 0x28], eax
movzx eax, byte [rbx + 0x84]
mov byte [rsp + 0x20], al
movzx r9d, byte [rbx + 0x72]
movss xmm2, dword [rbx + 0x38]
movss xmm1, dword [rbx + 0x34]
mov rcx, rbx
call rdx
test al, al
je 0x1402e8b45
mov r15, qword [rbx + 0x40]
jmp 0x1402e8b4c
mov r15, qword [rbx + 0x118]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x1402e8be9
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1402e8be9
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rbx + r11*4]
mov r9d, dword [rdx + rdi]
add r9, rbx
mov r10d, 0x845e8e93
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1402e8be4
mov rax, qword [rax]
jmp 0x1402e8b60
mov r13, 0xffffffffffffffff
mov ecx, r13d
call fcn.140375e84
int3