Function at 0x180199bbc
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov rax, rsp
mov byte [rax + 0x18], r8b
mov qword [rax + 0x10], rdx
mov byte [rax + 8], cl
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x8d8]
sub rsp, 0x998
mov qword [rbp + 0x450], 0xfffffffffffffffe
mov r12b, r8b
mov r13b, cl
xor esi, esi
mov r14d, esi
mov dword [rbp + 0x8e8], esi
mov edx, dword [0x1802bccdc]
mov rax, qword gs:[0x58]
mov edi, 4
mov rbx, qword [rax + rdx*8]
mov eax, dword [rbx + rdi]
cmp dword [0x1802c7c68], eax
jle 0x180199c50
lea rcx, [0x1802c7c68]
call fcn.1802696f0
cmp dword [0x1802c7c68], 0xffffffff
jne 0x180199c50
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x1802c637c], eax
lea rcx, [0x1802c7c68]
call fcn.180269690
mov eax, dword [rbx + rdi]
cmp dword [0x1802c5b58], eax
jle 0x180199ca9
lea rcx, [0x1802c5b58]
call fcn.1802696f0
cmp dword [0x1802c5b58], 0xffffffff
jne 0x180199ca9
lea rcx, [0x18027e1f0]
call fcn.18026951c
mov edx, dword [0x1802c637c]
lea rdi, [0x1802c54f8]
mov rcx, rdi
call fcn.18018f934
mov qword [0x1802c6b08], rdi
lea rcx, [0x1802c5b58]
call fcn.180269690
mov edi, 4
mov eax, dword [rbx + rdi]
cmp dword [0x1802c7a98], eax
jle 0x180199cf4
lea rcx, [0x1802c7a98]
call fcn.1802696f0
cmp dword [0x1802c7a98], 0xffffffff
jne 0x180199cf4
mov edx, dword [0x1802c637c]
lea rcx, [0x1802c7c48]
call fcn.180194c54
lea rcx, [0x18027e1e4]
call fcn.18026951c
nop
lea rcx, [0x1802c7a98]
call fcn.180269690
xorps xmm0, xmm0
movups xmmword [rbp + 0x318], xmm0
mov qword [rbp + 0x328], rsi
mov r8d, 7
mov qword [rbp + 0x330], r8
mov word [rbp + 0x318], si
lea eax, [r8 + 0x63]
mov dword [rbp - 0x24], eax
mov eax, dword [rbp - 0x24]
lea edx, [r8 + 0x5e]
xor ax, dx
mov word [rbp - 0x20], ax
mov eax, dword [rbp - 0x24]
lea r15d, [r8 - 6]
add ax, r15w
lea r10d, [r8 + 0x71]
xor ax, r10w
mov word [rbp - 0x1e], ax
mov eax, dword [rbp - 0x24]
add ax, 2
xor ax, 0x70
mov word [rbp - 0x1c], ax
mov eax, dword [rbp - 0x24]
add ax, 3
xor ax, 0x6c
mov word [rbp - 0x1a], ax
mov eax, dword [rbp - 0x24]
add ax, 4
xor ax, 0x6f
mov word [rbp - 0x18], ax
mov eax, dword [rbp - 0x24]
add ax, 5
lea ecx, [rdx + 0xd]
xor ax, cx
mov word [rbp - 0x16], ax
mov eax, dword [rbp - 0x24]
add ax, 6
xor ax, dx
mov word [rbp - 0x14], ax
mov eax, dword [rbp - 0x24]
add ax, r8w
xor ax, cx
mov word [rbp - 0x12], ax
mov eax, dword [rbp - 0x24]
add ax, 8
xor ax, 0x2e
mov word [rbp - 0x10], ax
mov eax, dword [rbp - 0x24]
add ax, 9
xor ax, dx
mov word [rbp - 0xe], ax
mov eax, dword [rbp - 0x24]
add ax, 0xa
xor ax, r10w
mov word [rbp - 0xc], ax
mov eax, dword [rbp - 0x24]
add ax, 0xb
xor ax, dx
mov word [rbp - 0xa], ax
xor eax, eax
mov word [rbp - 8], ax
movzx eax, word [rbp - 0x20]
mov rdx, rsi
lea r8d, [r15 + 0xb]
movzx eax, word [rbp + rdx*2 - 0x20]
mov ecx, dword [rbp - 0x24]
add cx, dx
xor cx, ax
mov word [rbp + rdx*2 - 0x20], cx
add rdx, r15
cmp rdx, r8
jb 0x180199dea
mov word [rbp - 8], si
xorps xmm0, xmm0
movups xmmword [rbp + 0x428], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x438], xmm1
lea rax, [rbp - 0x20]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], si
jne 0x180199e26
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x428]
call fcn.18007b5dc
nop
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x428]
call fcn.180195afc
nop
lea rcx, [rbp + 0x428]
call fcn.18007a444
nop
xor edx, edx
lea r8d, [rdx + 0x1a]
lea rcx, [rbp - 0x20]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov eax, dword [rbx + rdi]
cmp dword [0x1802c640c], eax
jle 0x18019a0d5
lea rcx, [0x1802c640c]
call fcn.1802696f0
cmp dword [0x1802c640c], 0xffffffff
jne 0x18019a0d5
lea rax, [rbp + 0x3c8]
mov qword [rbp + 0x108], rax
mov dword [rbp - 0x44], 0x31
mov byte [rbp - 0x40], 0x72
mov byte [rbp - 0x3f], 0x43
mov byte [rbp - 0x3e], 0x54
mov byte [rbp - 0x3d], 0x50
mov byte [rbp - 0x3c], 0x45
mov byte [rbp - 0x3b], 0x54
mov ecx, 0x65
mov byte [rbp - 0x3a], cl
mov ecx, 0x5e
mov byte [rbp - 0x39], cl
mov byte [rbp - 0x38], cl
lea eax, [rcx - 1]
mov byte [rbp - 0x37], al
mov byte [rbp - 0x36], 0x59
mov byte [rbp - 0x35], 0x54
mov byte [rbp - 0x34], al
mov byte [rbp - 0x33], 0x41
lea eax, [rcx - 0x5c]
mov byte [rbp - 0x32], al
mov byte [rbp - 0x31], 3
mov byte [rbp - 0x30], 0x62
mov byte [rbp - 0x2f], 0x5f
mov byte [rbp - 0x2e], 0x50
mov byte [rbp - 0x2d], 0x41
mov byte [rbp - 0x2c], 0x42
mov byte [rbp - 0x2b], 0x59
mov byte [rbp - 0x2a], cl
mov byte [rbp - 0x29], 0x45
xor eax, eax
mov byte [rbp - 0x28], al
mov al, byte [rbp - 0x40]
mov rdx, rsi
lea edi, [rcx - 0x46]
mov al, byte [rbp + rdx - 0x40]
mov ecx, dword [rbp - 0x44]
xor cl, al
mov byte [rbp + rdx - 0x40], cl
add rdx, r15
cmp rdx, rdi
jb 0x180199f24
mov byte [rbp - 0x28], sil
xorps xmm0, xmm0
movups xmmword [rbp + 0x3c8], xmm0
mov qword [rbp + 0x3d8], rsi
mov qword [rbp + 0x3e0], rsi
lea rax, [rbp - 0x40]
or r8, 0xffffffffffffffff
mov edi, 4
inc r8
cmp byte [rax + r8], sil
jne 0x180199f62
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x3c8]
call fcn.18007b70c
nop
mov eax, 0x6f
mov byte [rsp + 0x50], al
mov byte [rsp + 0x51], 0x69
mov byte [rsp + 0x52], 0x76
mov byte [rsp + 0x53], 0x72
mov byte [rsp + 0x54], 0x69
mov eax, 0x70
mov byte [rsp + 0x55], al
mov eax, 0x37
mov byte [rsp + 0x56], al
mov byte [rsp + 0x57], 0x36
mov byte [rsp + 0x58], sil
mov al, byte [rsp + 0x50]
mov rcx, rsi
mov al, byte [rsp + rcx + 0x50]
sub al, 4
mov byte [rsp + rcx + 0x50], al
add rcx, r15
cmp rcx, 8
jb 0x180199fbc
xorps xmm0, xmm0
movups xmmword [rbp + 0x380], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x390], xmm1
lea rax, [rsp + 0x50]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], sil
jne 0x180199fed
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x380]
call fcn.18007b70c
nop
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0x5d8]
call fcn.180188b20
nop
mov qword [rsp + 0x20], rsi
mov r9b, r15b
lea r8, [rbp + 0x3c8]
mov rdx, rax
lea rcx, [0x1802c5920]
call fcn.18008908c
nop
mov rdx, qword [rbp + 0x398]
mov eax, 0x10
cmp rdx, rax
jb 0x18019a083
inc rdx
mov rcx, qword [rbp + 0x380]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18019a07e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18019a07e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rbp + 0x390], xmm0
mov byte [rbp + 0x380], sil
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rsp + 0x50]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x19]
lea rcx, [rbp - 0x40]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027e1d8]
call fcn.18026951c
nop
lea rcx, [0x1802c640c]
call fcn.180269690
mov eax, dword [rbx + rdi]
cmp dword [0x1802c5be8], eax
jle 0x18019a35d
lea rcx, [0x1802c5be8]
call fcn.1802696f0
cmp dword [0x1802c5be8], 0xffffffff
jne 0x18019a35d
lea rax, [rbp + 0x3e8]
mov qword [rbp + 0x108], rax
mov dword [rbp - 0x74], 0x2e
mov byte [rbp - 0x70], 0x7e
mov byte [rbp - 0x6f], 0x5c
mov byte [rbp - 0x6e], 0x41
mov eax, 0x4d
mov byte [rbp - 0x6d], al
mov byte [rbp - 0x6c], 0x4b
mov eax, 0x5d
mov byte [rbp - 0x6b], al
mov byte [rbp - 0x6a], al
mov byte [rbp - 0x69], 0x1d
mov byte [rbp - 0x68], 0x1c
lea ecx, [rax + 0xb]
mov byte [rbp - 0x67], cl
mov byte [rbp - 0x66], 0x47
mov byte [rbp - 0x65], 0x5c
mov byte [rbp - 0x64], al
lea eax, [rcx - 0xe]
mov byte [rbp - 0x63], al
lea eax, [rcx + 0x11]
mov byte [rbp - 0x62], al
xor eax, eax
mov byte [rbp - 0x61], al
mov al, byte [rbp - 0x70]
mov rdx, rsi
lea edi, [rcx - 0x59]
mov al, byte [rbp + rdx - 0x70]
mov ecx, dword [rbp - 0x74]
xor cl, al
mov byte [rbp + rdx - 0x70], cl
add rdx, r15
cmp rdx, rdi
jb 0x18019a168
mov byte [rbp - 0x61], sil
xorps xmm0, xmm0
movups xmmword [rbp + 0x3e8], xmm0
mov qword [rbp + 0x3f8], rsi
mov qword [rbp + 0x400], rsi
lea rax, [rbp - 0x70]
or r8, 0xffffffffffffffff
mov edi, 4
inc r8
cmp byte [rax + r8], sil
jne 0x18019a1a6
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x3e8]
call fcn.18007b70c
nop
mov dword [rsp + 0x5c], 0x54
mov eax, dword [rsp + 0x5c]
xor al, 0x6b
mov byte [rsp + 0x60], al
mov eax, dword [rsp + 0x5c]
add al, r15b
mov ecx, 0x65
xor al, cl
mov byte [rsp + 0x61], al
mov eax, dword [rsp + 0x5c]
add al, 2
xor al, 0x72
mov byte [rsp + 0x62], al
mov eax, dword [rsp + 0x5c]
add al, 3
xor al, 0x6e
mov byte [rsp + 0x63], al
mov eax, dword [rsp + 0x5c]
add al, 4
xor al, cl
mov byte [rsp + 0x64], al
mov eax, dword [rsp + 0x5c]
add al, 5
xor al, 0x6c
mov byte [rsp + 0x65], al
mov eax, dword [rsp + 0x5c]
add al, 6
xor al, 0x33
mov byte [rsp + 0x66], al
mov eax, dword [rsp + 0x5c]
add al, 7
xor al, 0x32
mov byte [rsp + 0x67], al
xor eax, eax
mov byte [rsp + 0x68], al
mov al, byte [rsp + 0x60]
mov rdx, rsi
mov al, byte [rsp + rdx + 0x60]
mov ecx, dword [rsp + 0x5c]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x60], cl
add rdx, r15
cmp rdx, 8
jb 0x18019a239
mov byte [rsp + 0x68], sil
xorps xmm0, xmm0
movups xmmword [rbp + 0x338], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x348], xmm1
lea rax, [rsp + 0x60]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], sil
jne 0x18019a275
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x338]
call fcn.18007b70c
nop
lea rdx, [rbp + 0x338]
lea rcx, [rbp + 0x5f8]
call fcn.180188b20
nop
mov qword [rsp + 0x20], rsi
mov r9b, r15b
lea r8, [rbp + 0x3e8]
mov rdx, rax
lea rcx, [0x1802c5ec0]
call fcn.180086d10
nop
mov rdx, qword [rbp + 0x350]
mov eax, 0x10
cmp rdx, rax
jb 0x18019a30b
inc rdx
mov rcx, qword [rbp + 0x338]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18019a306
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18019a306
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rbp + 0x348], xmm0
mov byte [rbp + 0x338], sil
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rsp + 0x60]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x10]
lea rcx, [rbp - 0x70]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027e1cc]
call fcn.18026951c
nop
lea rcx, [0x1802c5be8]
call fcn.180269690
mov eax, dword [rbx + rdi]
cmp dword [0x1802c65d4], eax
jle 0x18019a5a2
lea rcx, [0x1802c65d4]
call fcn.1802696f0
cmp dword [0x1802c65d4], 0xffffffff
jne 0x18019a5a2
lea rax, [rbp + 0x408]
mov qword [rbp + 0x108], rax
mov eax, 0x5b
mov byte [rsp + 0x74], al
mov byte [rsp + 0x75], 0x7d
mov eax, 0x7a
mov byte [rsp + 0x76], al
mov byte [rsp + 0x77], 0x6e
lea ecx, [rax - 0xa]
mov byte [rsp + 0x78], cl
lea eax, [rcx + 0xe]
mov byte [rsp + 0x79], al
mov byte [rsp + 0x7a], al
mov byte [rsp + 0x7b], 0x3e
mov byte [rsp + 0x7c], 0x3d
mov byte [rsp + 0x7d], 0x59
mov byte [rsp + 0x7e], cl
mov byte [rsp + 0x7f], 0x83
mov byte [rbp - 0x80], 0x7f
mov byte [rbp - 0x7f], 0x62
mov byte [rbp - 0x7e], sil
mov al, byte [rsp + 0x74]
mov rcx, rsi
mov r12d, 0xe
mov al, byte [rsp + rcx + 0x74]
sub al, 0xb
mov byte [rsp + rcx + 0x74], al
add rcx, r15
cmp rcx, r12
jb 0x18019a3f2
xorps xmm0, xmm0
movups xmmword [rbp + 0x408], xmm0
mov qword [rbp + 0x418], rsi
mov qword [rbp + 0x420], rsi
lea rax, [rsp + 0x74]
or r8, 0xffffffffffffffff
mov r12b, byte [rbp + 0x8f0]
inc r8
cmp byte [rax + r8], sil
jne 0x18019a42c
lea rdx, [rsp + 0x74]
lea rcx, [rbp + 0x408]
call fcn.18007b70c
nop
mov dword [rbp - 0x60], 0x56
mov byte [rbp - 0x5c], 0x3d
mov eax, 0x33
mov byte [rbp - 0x5b], al
mov byte [rbp - 0x5a], 0x24
mov byte [rbp - 0x59], 0x38
mov byte [rbp - 0x58], al
mov byte [rbp - 0x57], 0x3a
mov eax, 0x65
mov byte [rbp - 0x56], al
mov eax, 0x64
mov byte [rbp - 0x55], al
xor eax, eax
mov byte [rbp - 0x54], al
mov al, byte [rbp - 0x5c]
mov rdx, rsi
mov al, byte [rbp + rdx - 0x5c]
mov ecx, dword [rbp - 0x60]
xor cl, al
mov byte [rbp + rdx - 0x5c], cl
add rdx, r15
cmp rdx, 8
jb 0x18019a484
mov byte [rbp - 0x54], sil
xorps xmm0, xmm0
movups xmmword [rbp + 0x360], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x370], xmm1
lea rax, [rbp - 0x5c]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], sil
jne 0x18019a4bb
lea rdx, [rbp - 0x5c]
lea rcx, [rbp + 0x360]
call fcn.18007b70c
nop
lea rdx, [rbp + 0x360]
lea rcx, [rbp + 0x458]
call fcn.180188b20
nop
mov qword [rsp + 0x20], rsi
mov r9b, r15b
lea r8, [rbp + 0x408]
mov rdx, rax
lea rcx, [0x1802c7850]
call fcn.180086d10
nop
mov rdx, qword [rbp + 0x378]
mov eax, 0x10
cmp rdx, rax
jb 0x18019a550
inc rdx
mov rcx, qword [rbp + 0x360]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18019a54b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18019a54b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rbp + 0x370], xmm0
mov byte [rbp + 0x360], sil
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rbp - 0x5c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xf]
lea rcx, [rsp + 0x74]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027e1c0]
call fcn.18026951c
nop
lea rcx, [0x1802c65d4]
call fcn.180269690
xor r8d, r8d
lea edx, [r8 + 2]
lea rcx, [0x1802c5920]
call fcn.180089bc8
mov rdi, rax
xor edx, edx
mov r8d, 0x234
lea rcx, [rbp + 0x654]
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 0x650], 0x238
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x2a8], xmm0
mov qword [rbp + 0x2b8], rsi
lea rcx, [0x1802c5ec0]
lea r8, [rbp + 0x650]
mov rdx, rdi
call fcn.180087840
test eax, eax
je 0x18019a703
mov eax, dword [0x1802c637c]
cmp dword [rbp + 0x658], eax
je 0x18019a671
xorps xmm0, xmm0
movups xmmword [rbp + 0x2f8], xmm0
mov qword [rbp + 0x308], rsi
mov qword [rbp + 0x310], rsi
lea rax, [rbp + 0x67c]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], si
jne 0x18019a637
lea rdx, [rbp + 0x67c]
lea rcx, [rbp + 0x2f8]
call fcn.18007b5dc
or r14d, r15d
lea rdx, [rbp + 0x2f8]
mov rcx, qword [0x1802c6b08]
call fcn.18009594c
test al, al
mov bl, sil
je 0x18019a674
mov bl, r15b
test r15b, r14b
je 0x18019a6d9
and r14d, 0xfffffffe
mov rdx, qword [rbp + 0x310]
cmp rdx, 8
jb 0x18019a6bf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18019a6ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18019a6fc
call fcn.180269534
mov qword [rbp + 0x308], rsi
mov eax, 7
mov qword [rbp + 0x310], rax
mov word [rbp + 0x2f8], si
test bl, bl
jne 0x18019a6f0
lea rdx, [rbp + 0x650]
lea rcx, [rbp + 0x2a8]
call fcn.180086be8
lea rcx, [0x1802c7850]
jmp 0x18019a5ef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rcx, [rbp + 0x2a8]
call fcn.1800952a8
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r15, rsi
mov r14, qword [rbp + 0x2a8]
mov rdi, qword [rbp + 0x2b0]
mov qword [rbp + 0x298], rdi
mov ebx, 0x20
cmp r14, rdi
je 0x18019a807
mov ebx, 1
lea rdx, [r14 + 0x2c]
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], rsi
mov qword [rbp + 0xe8], rsi
or r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], si
jne 0x18019a763
lea rcx, [rbp + 0xd0]
call fcn.18007b5dc
nop
lea rdx, [0x1802bfc70]
lea rcx, [rbp + 0xd0]
mov eax, 8
cmp qword [rbp + 0xe8], rax
cmovae rcx, qword [rbp + 0xd0]
mov r8, qword [rdx + 0x10]
mov r9, rdx
cmp qword [rdx + 0x18], rax
jb 0x18019a7ac
mov r9, qword [rdx]
cmp r8, qword [rbp + 0xe0]
jne 0x18019aca7
test r8, r8
je 0x18019a7d8
sub r9, rcx
movzx eax, word [r9 + rcx]
cmp ax, word [rcx]
jne 0x18019aca7
add rcx, 2
sub r8, rbx
jne 0x18019a7c1
lea rcx, [rbp + 0xd0]
call fcn.18007a444
add r14, 0x238
cmp r14, rdi
jne 0x18019a743
mov rdi, qword [rbp + 0x2b0]
mov r14, qword [rbp + 0x2a8]
mov ebx, 0x20
sub rdi, r14
movabs rax, 0x73615a240e6c2b45
imul rdi
mov r9, rdx
sar r9, 8
mov rax, r9
shr rax, 0x3f
add r9, rax
mov r10d, 0x14
mov dword [rbp + 0x58], r10d
mov eax, dword [rbp + 0x58]
xor ax, bx
mov word [rbp + 0x5c], ax
mov eax, dword [rbp + 0x58]
lea r11d, [r10 - 0x13]
add ax, r11w
lea r8d, [r10 + 0x60]
xor ax, r8w
mov word [rbp + 0x5e], ax
mov eax, dword [rbp + 0x58]
add ax, 2
lea r14d, [r10 + 0x5e]
xor ax, r14w
mov word [rbp + 0x60], ax
mov eax, dword [rbp + 0x58]
add ax, 3
xor ax, 0x69
mov word [rbp + 0x62], ax
mov eax, dword [rbp + 0x58]
add ax, 4
xor ax, 0x65
mov word [rbp + 0x64], ax
mov eax, dword [rbp + 0x58]
add ax, 5
xor ax, 0x73
mov word [rbp + 0x66], ax
mov eax, dword [rbp + 0x58]
add ax, 6
xor ax, bx
mov word [rbp + 0x68], ax
mov eax, dword [rbp + 0x58]
add ax, 7
lea r12d, [r10 + 0x5b]
xor ax, r12w
mov word [rbp + 0x6a], ax
mov eax, dword [rbp + 0x58]
lea edi, [r10 - 0xc]
add ax, di
xor ax, 0x75
mov word [rbp + 0x6c], ax
mov eax, dword [rbp + 0x58]
add ax, 9
xor ax, r8w
mov word [rbp + 0x6e], ax
mov eax, dword [rbp + 0x58]
add ax, 0xa
xor ax, bx
mov word [rbp + 0x70], ax
mov eax, dword [rbp + 0x58]
add ax, 0xb
xor ax, r12w
mov word [rbp + 0x72], ax
mov eax, dword [rbp + 0x58]
add ax, 0xc
xor ax, 0x66
mov word [rbp + 0x74], ax
mov eax, dword [rbp + 0x58]
lea r13d, [r10 - 7]
add ax, r13w
xor ax, bx
mov word [rbp + 0x76], ax
xor eax, eax
mov word [rbp + 0x78], ax
movzx eax, word [rbp + 0x5c]
mov rdx, rsi
lea r12d, [r10 - 6]
movzx eax, word [rbp + rdx*2 + 0x5c]
mov ecx, dword [rbp + 0x58]
add cx, dx
xor cx, ax
mov word [rbp + rdx*2 + 0x5c], cx
add rdx, r11
cmp rdx, r12
jb 0x18019a924
mov word [rbp + 0x78], si
mov eax, 0x39
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x7c]
xor ax, 0x46
mov word [rbp + 0x80], ax
mov eax, dword [rbp + 0x7c]
add ax, r11w
xor ax, 0x69
mov word [rbp + 0x82], ax
mov eax, dword [rbp + 0x7c]
add ax, 2
mov edx, 0x6e
xor ax, dx
mov word [rbp + 0x84], ax
mov eax, dword [rbp + 0x7c]
add ax, 3
xor ax, 0x64
mov word [rbp + 0x86], ax
mov eax, dword [rbp + 0x7c]
add ax, 4
xor ax, 0x69
mov word [rbp + 0x88], ax
mov eax, dword [rbp + 0x7c]
add ax, 5
xor ax, dx
mov word [rbp + 0x8a], ax
mov eax, dword [rbp + 0x7c]
add ax, 6
xor ax, 0x67
mov word [rbp + 0x8c], ax
mov eax, dword [rbp + 0x7c]
add ax, 7
xor ax, bx
mov word [rbp + 0x8e], ax
mov eax, dword [rbp + 0x7c]
add ax, di
mov edx, 0x73
xor ax, dx
mov word [rbp + 0x90], ax
mov eax, dword [rbp + 0x7c]
add ax, 9
xor ax, 0x75
mov word [rbp + 0x92], ax
mov eax, dword [rbp + 0x7c]
add ax, 0xa
xor ax, 0x69
mov word [rbp + 0x94], ax
mov eax, dword [rbp + 0x7c]
add ax, 0xb
xor ax, r8w
mov word [rbp + 0x96], ax
mov eax, dword [rbp + 0x7c]
add ax, 0xc
xor ax, 0x61
mov word [rbp + 0x98], ax
mov eax, dword [rbp + 0x7c]
add ax, r13w
xor ax, 0x62
mov word [rbp + 0x9a], ax
mov eax, dword [rbp + 0x7c]
add ax, r12w
lea r13d, [rdx - 7]
xor ax, r13w
mov word [rbp + 0x9c], ax
mov eax, dword [rbp + 0x7c]
add ax, 0xf
lea r12d, [rdx - 0xe]
xor ax, r12w
mov word [rbp + 0x9e], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x10
xor ax, bx
mov word [rbp + 0xa0], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x11
xor ax, 0x70
mov word [rbp + 0xa2], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x12
xor ax, r14w
mov word [rbp + 0xa4], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x13
xor ax, 0x6f
mov word [rbp + 0xa6], ax
mov eax, dword [rbp + 0x7c]
add ax, r10w
xor ax, 0x63
mov word [rbp + 0xa8], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x15
xor ax, r12w
mov word [rbp + 0xaa], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x16
xor ax, dx
mov word [rbp + 0xac], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x17
xor ax, dx
mov word [rbp + 0xae], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x18
xor ax, bx
mov word [rbp + 0xb0], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x19
lea edx, [r13 - 6]
xor ax, dx
mov word [rbp + 0xb2], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x1a
xor ax, 0x61
mov word [rbp + 0xb4], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x1b
xor ax, 0x69
mov word [rbp + 0xb6], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x1c
xor ax, r13w
mov word [rbp + 0xb8], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x1d
xor ax, r12w
mov word [rbp + 0xba], ax
mov eax, dword [rbp + 0x7c]
lea edi, [rdx - 0x48]
add ax, di
xor ax, 0x64
mov word [rbp + 0xbc], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x1f
xor ax, bx
mov word [rbp + 0xbe], ax
mov eax, dword [rbp + 0x7c]
add ax, bx
xor ax, 0x61
mov word [rbp + 0xc0], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x21
xor ax, dx
mov word [rbp + 0xc2], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x22
xor ax, r8w
mov word [rbp + 0xc4], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x23
xor ax, r12w
mov word [rbp + 0xc6], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x24
xor ax, r14w
mov word [rbp + 0xc8], ax
mov eax, dword [rbp + 0x7c]
add ax, 0x25
xor ax, bx
mov word [rbp + 0xca], ax
xor eax, eax
mov word [rbp + 0xcc], ax
movzx eax, word [rbp + 0x80]
mov r10, rsi
lea ebx, [rdx - 0x40]
movzx eax, word [rbp + r10*2 + 0x80]
mov ecx, dword [rbp + 0x7c]
add cx, r10w
xor cx, ax
mov word [rbp + r10*2 + 0x80], cx
add r10, r11
cmp r10, rbx
jb 0x18019ac13
mov word [rbp + 0xcc], si
lea r8, [rbp + 0x5c]
mov rdx, r15
lea rcx, [rbp + 0x80]
call fcn.1800955ec
nop
xor edx, edx
lea r8d, [rdx + 0x4e]
lea rcx, [rbp + 0x80]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
mov r8, rdi
xor edx, edx
lea rcx, [rbp + 0x5c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
or ebx, 0xffffffff
lea rcx, [rbp + 0x2a8]
call fcn.180086c84
nop
lea rcx, [rbp + 0x318]
call fcn.18007a444
mov eax, ebx
add rsp, 0x998
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
add rdx, 0x20
lea rax, [0x1802bfdd0]
cmp rdx, rax
jne 0x18019a781
mov eax, dword [0x1802c637c]
cmp dword [r14 + 8], eax
je 0x18019a7d8
lea rdx, [rbp + 0xd0]
mov rcx, qword [0x1802c6b08]
call fcn.18009594c
test al, al
jne 0x18019a7d8
mov edx, dword [r14 + 8]
lea rcx, [rbp + 0x478]
call fcn.180194c54
mov rdx, rax
lea rcx, [rbp + 0x318]
call fcn.18008c67c
lea rcx, [rbp + 0x478]
call fcn.18007a444
mov r9, qword [0x1802c7c58]
lea rcx, [0x1802c7c48]
mov r11d, 8
cmp qword [0x1802c7c60], r11
cmovae rcx, qword [0x1802c7c48]
mov r10, qword [rbp + 0x328]
lea r8, [rbp + 0x318]
cmp qword [rbp + 0x330], r11
cmovae r8, qword [rbp + 0x318]
mov rdx, r10
cmp r9, r10
cmovb rdx, r9
lea ebx, [r11 - 7]
test rdx, rdx
je 0x18019ad7e
sub r8, rcx
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x18019b836
add rcx, 2
sub rdx, rbx
jne 0x18019ad67
cmp r10, r9
jb 0x18019b836
ja 0x18019b836
test r13b, r13b
je 0x18019bbdc
add r15, rbx
mov qword [rbp + 0x108], r15
mov edx, dword [r14 + 8]
mov dword [rsp + 0x28], 0x400
xor r8d, r8d
mov byte [rsp + 0x20], sil
test r12b, r12b
je 0x18019adc5
mov r9b, bl
lea rcx, [rbp + 0x630]
jmp 0x18019adcf
xor r9d, r9d
lea rcx, [rbp + 0x618]
call fcn.1801920a0
movsd xmm1, qword [rax + 0x10]
movups xmm0, xmmword [rax]
movsd qword [rbp + 0x2d0], xmm1
movups xmmword [rbp + 0x2c0], xmm0
mov rcx, qword [rbp + 0x2c0]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x18019b7e2
mov dword [rbp + 0x8f8], esi
lea rdx, [rbp + 0x8f8]
call fcn.18019c71c
test al, al
je 0x18019ae2b
cmp dword [rbp + 0x8f8], esi
setne al
cmp al, byte [0x1802b61ac]
je 0x18019b842
mov dword [rsp + 0x6c], 0x6b
mov eax, dword [rsp + 0x6c]
xor ax, 0x3a
mov word [rsp + 0x70], ax
xor eax, eax
mov word [rsp + 0x72], ax
movzx eax, word [rsp + 0x70]
movzx eax, word [rsp + 0x70]
mov ecx, dword [rsp + 0x6c]
xor cx, ax
mov word [rsp + 0x70], cx
mov word [rsp + 0x72], si
xorps xmm0, xmm0
movups xmmword [rbp + 0x2d8], xmm0
mov qword [rbp + 0x2e8], rsi
mov qword [rbp + 0x2f0], rsi
lea rax, [rsp + 0x70]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], si
jne 0x18019ae83
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x2d8]
call fcn.18007b5dc
nop
xor edx, edx
lea r8d, [rdx + 4]
lea rcx, [rsp + 0x70]
call qword [sym.imp.VCRUNTIME140.dll_memset]
test r12b, r12b
je 0x18019b01d
mov dword [rbp + 0x148], 0x2f
mov r9d, 0xf
mov word [rbp + 0x14c], r9w
lea eax, [r9 - 8]
mov word [rbp + 0x14e], ax
lea eax, [r9 + 0x49]
mov word [rbp + 0x150], ax
lea eax, [r9 + 0x37]
mov word [rbp + 0x152], ax
lea edx, [rax + 0x15]
mov word [rbp + 0x154], dx
lea r10d, [r9 + 0x38]
mov word [rbp + 0x156], r10w
mov word [rbp + 0x158], r9w
lea eax, [rdx - 0xd]
mov word [rbp + 0x15a], ax
lea r15d, [r9 + 0x34]
mov word [rbp + 0x15c], r15w
lea ecx, [rdx - 0x11]
mov word [rbp + 0x15e], cx
lea r8d, [r9 + 0x4e]
mov word [rbp + 0x160], r8w
mov word [rbp + 0x162], dx
mov word [rbp + 0x164], ax
lea r11d, [r9 + 0x3e]
mov word [rbp + 0x166], r11w
mov word [rbp + 0x168], r15w
mov word [rbp + 0x16a], cx
mov word [rbp + 0x16c], r9w
mov word [rbp + 0x16e], dx
mov word [rbp + 0x170], r10w
mov word [rbp + 0x172], r8w
mov word [rbp + 0x174], cx
mov word [rbp + 0x176], ax
lea eax, [rdx - 0x10]
mov word [rbp + 0x178], ax
lea eax, [rdx - 0x55]
mov word [rbp + 0x17a], ax
lea eax, [rdx - 0x46]
mov word [rbp + 0x17c], ax
mov word [rbp + 0x17e], r9w
xor eax, eax
mov word [rbp + 0x180], ax
movzx eax, word [rbp + 0x14c]
mov rdx, rsi
lea edi, [rcx - 0x30]
movzx eax, word [rbp + rdx*2 + 0x14c]
mov ecx, dword [rbp + 0x148]
xor cx, ax
mov word [rbp + rdx*2 + 0x14c], cx
add rdx, rbx
cmp rdx, rdi
jb 0x18019afce
mov word [rbp + 0x180], si
lea rdx, [rbp + 0x14c]
lea rcx, [rbp + 0x2d8]
call fcn.18007a3c8
nop
xor edx, edx
lea r8d, [rdx + 0x36]
lea rcx, [rbp + 0x14c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov eax, 0x2c
mov word [rbp + 0x224], ax
mov eax, 0xd
mov word [rbp + 0x226], ax
lea ecx, [rax + 0x16]
mov word [rbp + 0x228], cx
mov word [rbp + 0x22a], cx
mov word [rbp + 0x22c], cx
mov word [rbp + 0x22e], cx
lea r12d, [rax + 0x58]
mov word [rbp + 0x230], r12w
lea r15d, [rax + 0x6b]
mov word [rbp + 0x232], r15w
lea r8d, [rax + 0x6a]
mov word [rbp + 0x234], r8w
mov word [rbp + 0x236], cx
lea eax, [rcx + 0x49]
mov word [rbp + 0x238], ax
mov word [rbp + 0x23a], r8w
mov word [rbp + 0x23c], cx
mov word [rbp + 0x23e], r8w
mov word [rbp + 0x240], r15w
lea edx, [rcx + 0x52]
mov word [rbp + 0x242], dx
lea r13d, [rcx + 0x4e]
mov word [rbp + 0x244], r13w
lea r11d, [rcx + 0x45]
mov word [rbp + 0x246], r11w
lea r10d, [rcx + 0x44]
mov word [rbp + 0x248], r10w
mov word [rbp + 0x24a], cx
lea eax, [rcx + 0x4f]
mov word [rbp + 0x24c], ax
mov word [rbp + 0x24e], r15w
mov word [rbp + 0x250], r8w
mov word [rbp + 0x252], cx
mov word [rbp + 0x254], r8w
mov word [rbp + 0x256], ax
mov word [rbp + 0x258], cx
mov word [rbp + 0x25a], r12w
mov word [rbp + 0x25c], r11w
mov word [rbp + 0x25e], cx
lea r9d, [rcx + 0x37]
mov word [rbp + 0x260], r9w
mov word [rbp + 0x262], ax
lea r9d, [rcx + 0x57]
mov word [rbp + 0x264], r9w
lea r9d, [rcx + 0x16]
mov word [rbp + 0x266], r9w
lea r9d, [rcx + 0x14]
mov word [rbp + 0x268], r9w
mov word [rbp + 0x26a], cx
mov word [rbp + 0x26c], ax
mov word [rbp + 0x26e], dx
mov word [rbp + 0x270], cx
lea edx, [rcx + 0x43]
mov word [rbp + 0x272], dx
mov word [rbp + 0x274], ax
mov word [rbp + 0x276], r15w
lea edx, [rcx + 0x4c]
mov word [rbp + 0x278], dx
mov word [rbp + 0x27a], r10w
mov word [rbp + 0x27c], r13w
lea eax, [rcx + 7]
mov word [rbp + 0x27e], ax
mov word [rbp + 0x280], r8w
mov word [rbp + 0x282], cx
mov word [rbp + 0x284], r8w
mov word [rbp + 0x286], r11w
mov word [rbp + 0x288], dx
mov word [rbp + 0x28a], dx
lea eax, [rcx + 0xe]
mov word [rbp + 0x28c], ax
mov word [rbp + 0x28e], si
movzx eax, word [rbp + 0x224]
mov rcx, rsi
movzx eax, word [rbp + rcx*2 + 0x224]
sub ax, 3
mov word [rbp + rcx*2 + 0x224], ax
add rcx, rbx
cmp rcx, 0x35
jb 0x18019b203
lea rax, [rbp + 0x498]
mov qword [rbp + 0x358], rax
mov edx, dword [r14 + 8]
lea rcx, [rbp + 0x498]
call fcn.18018f934
mov rbx, rax
mov qword [rbp + 0x140], rax
mov dword [rbp + 0xfc], 0x5e
mov eax, 0x7e
mov word [rbp + 0x100], ax
mov eax, 0x76
mov word [rbp + 0x102], ax
xor eax, eax
mov word [rbp + 0x104], ax
movzx ecx, word [rbp + 0x100]
mov rdx, rsi
lea r8d, [rax + 1]
lea r12d, [rax + 2]
movzx eax, word [rbp + rdx*2 + 0x100]
mov ecx, dword [rbp + 0xfc]
xor cx, ax
mov word [rbp + rdx*2 + 0x100], cx
add rdx, r8
cmp rdx, r12
jb 0x18019b285
mov r12d, 0x65
mov word [rbp + 0x104], si
mov r15d, dword [r14 + 8]
lea eax, [r12 - 0x44]
mov dword [rbp + 0x124], eax
mov word [rbp + 0x128], r8w
lea eax, [r12 - 0x59]
mov word [rbp + 0x12a], ax
mov word [rbp + 0x12c], r8w
mov word [rbp + 0x12e], r13w
lea ecx, [rax + 0x5c]
mov word [rbp + 0x130], cx
mov word [rbp + 0x132], r12w
lea eax, [rcx - 0x4d]
mov word [rbp + 0x134], ax
mov word [rbp + 0x136], r8w
xor eax, eax
mov word [rbp + 0x138], ax
movzx eax, word [rbp + 0x128]
mov rdx, rsi
movzx eax, word [rbp + rdx*2 + 0x128]
mov ecx, dword [rbp + 0x124]
xor cx, ax
mov word [rbp + rdx*2 + 0x128], cx
add rdx, r8
cmp rdx, 8
jb 0x18019b31d
mov word [rbp + 0x138], si
lea rax, [rbp + 0x4b8]
mov qword [rbp + 0x3a0], rax
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x4b8]
call fcn.18007a534
mov r12, rax
mov qword [rbp + 0x448], rax
lea rdx, [rbp + 0x2d8]
lea rcx, [rbp + 0x4d8]
call fcn.18007a534
mov r13, rax
mov qword [rbp + 0x290], rax
mov eax, 0x5e
mov word [rbp + 0x1c8], ax
mov eax, 0x30
mov word [rbp + 0x1ca], ax
mov eax, 0x60
mov word [rbp + 0x1cc], ax
lea edx, [rax - 0x3d]
mov word [rbp + 0x1ce], dx
lea eax, [rdx + 0x37]
mov word [rbp + 0x1d0], ax
lea r10d, [rdx + 0x41]
mov word [rbp + 0x1d2], r10w
lea edi, [rdx + 0x53]
mov word [rbp + 0x1d4], di
mov word [rbp + 0x1d6], dx
lea eax, [rdx + 0x4a]
mov word [rbp + 0x1d8], ax
lea eax, [rdx + 0x55]
mov word [rbp + 0x1da], ax
mov word [rbp + 0x1dc], di
lea r8d, [rdx + 0x54]
mov word [rbp + 0x1de], r8w
mov word [rbp + 0x1e0], dx
lea r11d, [rdx + 0x47]
mov word [rbp + 0x1e2], r11w
lea eax, [rdx + 0x4f]
mov word [rbp + 0x1e4], ax
lea ecx, [rdx + 0x49]
mov word [rbp + 0x1e6], cx
lea ecx, [rdx + 0x4e]
mov word [rbp + 0x1e8], cx
mov word [rbp + 0x1ea], r11w
mov word [rbp + 0x1ec], dx
mov word [rbp + 0x1ee], r8w
mov word [rbp + 0x1f0], ax
mov word [rbp + 0x1f2], dx
mov word [rbp + 0x1f4], r8w
mov word [rbp + 0x1f6], r10w
lea r9d, [rdx + 0x52]
mov word [rbp + 0x1f8], r9w
mov word [rbp + 0x1fa], r11w
lea r11d, [rdx + 0x45]
mov word [rbp + 0x1fc], r11w
mov word [rbp + 0x1fe], r8w
mov word [rbp + 0x200], dx
mov word [rbp + 0x202], ax
lea r8d, [rdx + 0x50]
mov word [rbp + 0x204], r8w
mov word [rbp + 0x206], r11w
mov word [rbp + 0x208], cx
mov word [rbp + 0x20a], r10w
lea ecx, [rdx + 0x42]
mov word [rbp + 0x20c], cx
lea ecx, [rdx + 0x4c]
mov word [rbp + 0x20e], cx
mov word [rbp + 0x210], r11w
mov word [rbp + 0x212], dx
mov word [rbp + 0x214], r8w
mov word [rbp + 0x216], r9w
mov word [rbp + 0x218], ax
lea eax, [rdx + 0x43]
mov word [rbp + 0x21a], ax
mov word [rbp + 0x21c], r11w
mov word [rbp + 0x21e], di
mov word [rbp + 0x220], di
mov word [rbp + 0x222], si
movzx eax, word [rbp + 0x1c8]
mov rcx, rsi
lea edi, [rdx - 0x22]
movzx eax, word [rbp + rcx*2 + 0x1c8]
sub ax, 3
mov word [rbp + rcx*2 + 0x1c8], ax
add rcx, rdi
cmp rcx, 0x2d
jb 0x18019b537
mov rdi, qword [rbp + 0x298]
cmp byte [0x1802bd270], sil
je 0x18019b67f
lea rax, [rbp + 0x5b8]
mov qword [rbp + 0x3a0], rax
mov rdx, rbx
lea rcx, [rbp + 0x5b8]
call fcn.18007a534
mov rdi, rax
lea rax, [rbp + 0x4f8]
mov qword [rbp + 0x358], rax
mov rdx, r12
lea rcx, [rbp + 0x4f8]
call fcn.18007a534
mov rbx, rax
mov rdx, r13
lea rcx, [rbp + 0x518]
call fcn.18007a534
nop
lea rcx, [rbp + 0x224]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], rdi
lea rcx, [rbp + 0x100]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], r15d
lea rcx, [rbp + 0x128]
mov qword [rsp + 0x20], rcx
mov r9, rbx
mov r8, rax
lea rdx, [rbp + 0x1c8]
lea rcx, [rbp + 0x3a8]
call fcn.180201230
nop
lea rdx, [rbp + 0x3a8]
mov ecx, 1
call fcn.18014e37c
nop
mov rdx, qword [rbp + 0x3c0]
mov eax, 0x10
cmp rdx, rax
jb 0x18019b657
inc rdx
mov rcx, qword [rbp + 0x3a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18019b652
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18019bbc7
call fcn.180269534
mov qword [rbp + 0x3b8], rsi
mov eax, 0xf
mov qword [rbp + 0x3c0], rax
mov byte [rbp + 0x3a8], sil
mov rbx, qword [rbp + 0x140]
mov rdi, qword [rbp + 0x298]
mov rcx, r13
call fcn.18007a444
nop
mov rcx, r12
call fcn.18007a444
nop
mov rcx, rbx
call fcn.18007a444
nop
xor edx, edx
lea r8d, [rdx + 0x5c]
lea rcx, [rbp + 0x1c8]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x12]
lea rcx, [rbp + 0x128]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 6]
lea rcx, [rbp + 0x100]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x6c]
lea rcx, [rbp + 0x224]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov rcx, qword [rbp + 0x2c0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x2c8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp + 0x2f0]
mov ebx, 8
cmp rdx, rbx
jb 0x18019b74e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18019b749
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18019bbce
call fcn.180269534
mov qword [rbp + 0x2e8], rsi
mov r15d, 7
mov qword [rbp + 0x2f0], r15
mov word [rbp + 0x2d8], si
mov rdx, qword [rbp + 0xe8]
cmp rdx, rbx
jb 0x18019b7ae
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18019b7a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18019bbd5
call fcn.180269534
mov qword [rbp + 0xe8], r15
mov r15, qword [rbp + 0x108]
mov r12b, byte [rbp + 0x8f0]
mov r13b, byte [rbp + 0x8e0]
mov word [rbp + 0xd0], si
mov qword [rbp + 0xe0], rsi
mov ebx, 1
jmp 0x18019a7e4
mov rdx, qword [rbp + 0xe8]
cmp rdx, 8
jb 0x18019b828
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xd0]
cmp rdx, 0x1000
mov rax, rcx
jb 0x18019b823
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18019bff1
call fcn.180269534
mov eax, 7
mov qword [rbp + 0xe8], rax
jmp 0x18019b7ca
mov rdx, qword [rbp + 0xe8]
cmp rdx, r11
jmp 0x18019b7ed
mov eax, 0x32
mov word [rbp + 0x8e8], ax
mov word [rbp + 0x8ea], si
movzx eax, word [rbp + 0x8e8]
movzx eax, word [rbp + 0x8e8]
sub ax, 9
mov word [rbp + 0x8e8], ax
lea rax, [rbp + 0x538]
mov qword [rbp + 0x2a0], rax
mov edx, dword [r14 + 8]
lea rcx, [rbp + 0x538]
call fcn.18018f934
mov rdi, rax
mov dword [rbp + 0xf0], 0x56
mov eax, 0x76
mov word [rbp + 0xf4], ax
mov eax, 0x7e
mov word [rbp + 0xf6], ax
xor eax, eax
mov word [rbp + 0xf8], ax
movzx ecx, word [rbp + 0xf4]
mov rdx, rsi
lea r8d, [rax + 2]
movzx eax, word [rbp + rdx*2 + 0xf4]
mov ecx, dword [rbp + 0xf0]
xor cx, ax
mov word [rbp + rdx*2 + 0xf4], cx
add rdx, rbx
cmp rdx, r8
jb 0x18019b8c8
mov word [rbp + 0xf8], si
mov ebx, dword [r14 + 8]
mov ecx, 0x22
mov dword [rbp + 0x40], ecx
mov eax, dword [rbp + 0x40]
mov ecx, 0x20
xor ax, cx
mov word [rbp + 0x44], ax
mov eax, dword [rbp + 0x40]
lea r15d, [rcx - 0x1f]
add ax, r15w
lea r13d, [rcx + 0xd]
xor ax, r13w
mov word [rbp + 0x46], ax
mov eax, dword [rbp + 0x40]
add ax, r8w
xor ax, cx
mov word [rbp + 0x48], ax
mov eax, dword [rbp + 0x40]
add ax, 3
xor ax, 0x50
mov word [rbp + 0x4a], ax
mov eax, dword [rbp + 0x40]
add ax, 4
xor ax, 0x49
mov word [rbp + 0x4c], ax
mov eax, dword [rbp + 0x40]
add ax, 5
xor ax, 0x44
mov word [rbp + 0x4e], ax
mov eax, dword [rbp + 0x40]
add ax, 6
xor ax, 0x3a
mov word [rbp + 0x50], ax
mov eax, dword [rbp + 0x40]
add ax, 7
xor ax, cx
mov word [rbp + 0x52], ax
xor eax, eax
mov word [rbp + 0x54], ax
movzx eax, word [rbp + 0x44]
mov rdx, rsi
movzx eax, word [rbp + rdx*2 + 0x44]
mov ecx, dword [rbp + 0x40]
add cx, dx
xor cx, ax
mov word [rbp + rdx*2 + 0x44], cx
add rdx, r15
cmp rdx, 8
jb 0x18019b987
mov word [rbp + 0x54], si
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x558]
call fcn.18007a534
mov rdx, rax
mov ecx, 0x68
mov word [rbp + 0x184], cx
lea eax, [rcx - 0x2d]
mov word [rbp + 0x186], ax
lea eax, [rcx + 2]
mov word [rbp + 0x188], ax
mov word [rbp + 0x18a], r13w
lea eax, [rcx - 4]
mov word [rbp + 0x18c], ax
lea eax, [rcx + 0xe]
mov word [rbp + 0x18e], ax
lea r12d, [rcx + 0x11]
mov word [rbp + 0x190], r12w
mov word [rbp + 0x192], r12w
mov word [rbp + 0x194], r13w
lea eax, [rcx + 0x19]
mov word [rbp + 0x196], ax
lea r11d, [rcx + 6]
mov word [rbp + 0x198], r11w
lea r10d, [rcx + 0x17]
mov word [rbp + 0x19a], r10w
lea r8d, [rcx + 0xc]
mov word [rbp + 0x19c], r8w
lea r8d, [rcx + 0xa]
mov word [rbp + 0x19e], r8w
mov word [rbp + 0x1a0], ax
mov word [rbp + 0x1a2], r13w
lea ecx, [rax - 5]
mov word [rbp + 0x1a4], cx
lea r9d, [r12 + 4]
mov word [rbp + 0x1a6], r9w
mov word [rbp + 0x1a8], r8w
lea eax, [rcx - 1]
mov word [rbp + 0x1aa], ax
mov word [rbp + 0x1ac], r11w
lea eax, [rcx - 0xd]
mov word [rbp + 0x1ae], ax
mov word [rbp + 0x1b0], r12w
mov word [rbp + 0x1b2], r8w
mov word [rbp + 0x1b4], r13w
mov word [rbp + 0x1b6], r9w
mov word [rbp + 0x1b8], r10w
mov word [rbp + 0x1ba], cx
lea eax, [rcx - 0xc]
mov word [rbp + 0x1bc], ax
mov word [rbp + 0x1be], r8w
lea eax, [rcx + 4]
mov word [rbp + 0x1c0], ax
mov word [rbp + 0x1c2], ax
mov word [rbp + 0x1c4], r13w
mov word [rbp + 0x1c6], si
movzx eax, word [rbp + 0x184]
lea r9d, [r12 - 0x6c]
lea r12d, [r11 - 0x4d]
movzx eax, word [rbp + rsi*2 + 0x184]
sub ax, r9w
mov word [rbp + rsi*2 + 0x184], ax
add rsi, r15
cmp rsi, r12
jb 0x18019bb0a
lea rax, [rbp + 0x8e8]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdi
lea rax, [rbp + 0xf4]
mov qword [rsp + 0x20], rax
mov r9d, ebx
lea r8, [rbp + 0x44]
lea rcx, [rbp + 0x184]
call fcn.1801ff7dc
nop
xor edx, edx
lea r8d, [rdx + 0x44]
lea rcx, [rbp + 0x184]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x12]
lea rcx, [rbp + 0x44]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 6]
lea rcx, [rbp + 0xf4]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 4]
lea rcx, [rbp + 0x8e8]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov rcx, qword [rbp + 0x2c0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x2c8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, 0x1f
jmp 0x18019bf9f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov eax, 7
mov dword [rbp - 0x7c], eax
mov eax, 0x2e
mov word [rbp - 0x78], ax
xor eax, eax
mov word [rbp - 0x76], ax
movzx eax, word [rbp - 0x78]
movzx eax, word [rbp - 0x78]
mov ecx, dword [rbp - 0x7c]
xor cx, ax
mov word [rbp - 0x78], cx
mov word [rbp - 0x76], si
lea rax, [rbp + 0x578]
mov qword [rbp + 0x2a0], rax
mov edx, dword [r14 + 8]
lea rcx, [rbp + 0x578]
call fcn.18018f934
mov qword [rbp + 0x108], rax
mov edi, 8
mov dword [rbp - 0x50], edi
mov ecx, dword [rbp - 0x50]
xor cx, 0x20
mov word [rbp - 0x4c], cx
mov ecx, dword [rbp - 0x50]
add cx, bx
xor cx, 0x28
mov word [rbp - 0x4a], cx
xor eax, eax
mov word [rbp - 0x48], ax
movzx ecx, word [rbp - 0x4c]
mov rdx, rsi
lea r12d, [rdi - 6]
movzx eax, word [rbp + rdx*2 - 0x4c]
mov ecx, dword [rbp - 0x50]
add cx, dx
xor cx, ax
mov word [rbp + rdx*2 - 0x4c], cx
add rdx, rbx
cmp rdx, r12
jb 0x18019bc60
mov word [rbp - 0x48], si
mov r15d, dword [r14 + 8]
mov ebx, 0x26
mov word [rbp + 0x110], bx
lea eax, [rbx + 0xd]
mov word [rbp + 0x112], ax
mov word [rbp + 0x114], bx
lea eax, [rbx + 0x30]
mov word [rbp + 0x116], ax
lea eax, [rbx + 0x29]
mov word [rbp + 0x118], ax
lea eax, [rbx + 0x24]
mov word [rbp + 0x11a], ax
lea eax, [rbx + 0x1a]
mov word [rbp + 0x11c], ax
mov word [rbp + 0x11e], bx
mov word [rbp + 0x120], si
movzx eax, word [rbp + 0x110]
mov rcx, rsi
mov r12, qword [rbp + 0x108]
lea edx, [rbx - 0x20]
lea r13d, [rbx - 0x25]
movzx eax, word [rbp + rcx*2 + 0x110]
sub ax, dx
mov word [rbp + rcx*2 + 0x110], ax
add rcx, r13
cmp rcx, rdi
jb 0x18019bcee
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x598]
call fcn.18007a534
mov r11, rax
mov dword [rbp - 4], ebx
mov ecx, dword [rbp - 4]
xor cx, 0x5b
mov word [rbp], cx
mov ecx, dword [rbp - 4]
add cx, r13w
xor cx, 0x2e
mov word [rbp + 2], cx
mov ecx, dword [rbp - 4]
add cx, 2
xor cx, 0x5d
mov word [rbp + 4], cx
mov eax, dword [rbp - 4]
add ax, 3
mov ecx, 0x20
xor ax, cx
mov word [rbp + 6], ax
mov eax, dword [rbp - 4]
add ax, 4
xor ax, 0x57
mov word [rbp + 8], ax
mov eax, dword [rbp - 4]
add ax, 5
xor ax, 0x69
mov word [rbp + 0xa], ax
mov eax, dword [rbp - 4]
add ax, 6
lea r8d, [rcx + 0x4c]
xor ax, r8w
mov word [rbp + 0xc], ax
mov eax, dword [rbp - 4]
add ax, 7
xor ax, r8w
mov word [rbp + 0xe], ax
mov eax, dword [rbp - 4]
add ax, di
xor ax, cx
mov word [rbp + 0x10], ax
mov eax, dword [rbp - 4]
add ax, 9
lea r8d, [rcx + 0x54]
xor ax, r8w
mov word [rbp + 0x12], ax
mov eax, dword [rbp - 4]
add ax, 0xa
lea edx, [rcx + 0x52]
xor ax, dx
mov word [rbp + 0x14], ax
mov eax, dword [rbp - 4]
add ax, 0xb
xor ax, 0x79
mov word [rbp + 0x16], ax
mov eax, dword [rbp - 4]
add ax, 0xc
xor ax, cx
mov word [rbp + 0x18], ax
mov eax, dword [rbp - 4]
add ax, 0xd
xor ax, r8w
mov word [rbp + 0x1a], ax
mov eax, dword [rbp - 4]
add ax, 0xe
xor ax, 0x6f
mov word [rbp + 0x1c], ax
mov eax, dword [rbp - 4]
add ax, 0xf
xor ax, cx
mov word [rbp + 0x1e], ax
mov eax, dword [rbp - 4]
add ax, 0x10
xor ax, r8w
mov word [rbp + 0x20], ax
mov eax, dword [rbp - 4]
add ax, 0x11
xor ax, 0x61
mov word [rbp + 0x22], ax
mov eax, dword [rbp - 4]
lea ebx, [rcx - 0xe]
add ax, bx
xor ax, dx
mov word [rbp + 0x24], ax
mov eax, dword [rbp - 4]
add ax, 0x13
xor ax, 0x67
mov word [rbp + 0x26], ax
mov eax, dword [rbp - 4]
add ax, 0x14
lea r9d, [rcx + 0x45]
xor ax, r9w
mov word [rbp + 0x28], ax
mov eax, dword [rbp - 4]
add ax, 0x15
xor ax, r8w
mov word [rbp + 0x2a], ax
mov eax, dword [rbp - 4]
add ax, 0x16
xor ax, cx
mov word [rbp + 0x2c], ax
mov eax, dword [rbp - 4]
add ax, 0x17
xor ax, 0x70
mov word [rbp + 0x2e], ax
mov eax, dword [rbp - 4]
add ax, 0x18
xor ax, dx
mov word [rbp + 0x30], ax
mov eax, dword [rbp - 4]
add ax, 0x19
xor ax, 0x6f
mov word [rbp + 0x32], ax
mov eax, dword [rbp - 4]
add ax, 0x1a
xor ax, 0x63
mov word [rbp + 0x34], ax
mov eax, dword [rbp - 4]
add ax, 0x1b
xor ax, r9w
mov word [rbp + 0x36], ax
mov eax, dword [rbp - 4]
add ax, 0x1c
lea edx, [rcx + 0x53]
xor ax, dx
mov word [rbp + 0x38], ax
mov eax, dword [rbp - 4]
add ax, 0x1d
xor ax, dx
mov word [rbp + 0x3a], ax
mov eax, dword [rbp - 4]
add ax, 0x1e
xor ax, cx
mov word [rbp + 0x3c], ax
xor eax, eax
mov word [rbp + 0x3e], ax
movzx eax, word [rbp]
mov rdx, rsi
lea edi, [rcx - 1]
movzx eax, word [rbp + rdx*2]
mov ecx, dword [rbp - 4]
add cx, dx
xor cx, ax
mov word [rbp + rdx*2], cx
add rdx, r13
cmp rdx, rdi
jb 0x18019bf0c
mov word [rbp + 0x3e], si
lea rax, [rbp - 0x78]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
lea rax, [rbp - 0x4c]
mov qword [rsp + 0x20], rax
mov r9d, r15d
lea r8, [rbp + 0x110]
mov rdx, r11
lea rcx, [rbp]
call fcn.1801ff7dc
nop
xor edx, edx
lea r8d, [rdx + 0x40]
lea rcx, [rbp]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
mov r8, rbx
xor edx, edx
lea rcx, [rbp + 0x110]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 6]
lea rcx, [rbp - 0x4c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 4]
lea rcx, [rbp - 0x78]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
mov ebx, dword [r14 + 8]
mov rdx, qword [rbp + 0xe8]
mov eax, 8
cmp rdx, rax
jb 0x18019ac78
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18019bfe7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rdi
ja 0x18019bff1
call fcn.180269534
jmp 0x18019ac78
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3