Function at 0x140166870
Capabilities:
Create process on windows
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x4a0
movaps xmmword [rsp + 0x490], xmm6
mov rax, qword [0x1404c39e8]
xor rax, rsp
mov qword [rsp + 0x480], rax
mov r15, rcx
mov qword [rsp + 0x80], rcx
xor edi, edi
xor r12b, r12b
xor r13b, r13b
mov byte [0x1404dbb50], r12b
xor r8d, r8d
lea rdx, [0x1403c0a50]
lea rcx, [0x1404dbb58]
call fcn.140136390
mov ecx, 0x1024
call fcn.1403913fc
mov rbx, rax
xor edx, edx
mov r8d, 0x1024
mov rcx, rax
call fcn.1403850b0
lea rax, [rsp + 0x170]
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x170], rdi
mov qword [rsp + 0x180], rdi
mov qword [rsp + 0x188], rdi
lea r8d, [rdi + 6]
lea rdx, str.remove
lea rcx, [rsp + 0x170]
call fcn.14012aa00
nop
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x250], rax
mov dword [rsp + 0x30], 0x100a4a5
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x30]
call fcn.140160460
mov rsi, rax
mov rdx, qword [0x1404dbca0]
mov qword [rsp + 0x210], rdi
mov qword [rsp + 0x220], rdi
mov qword [rsp + 0x228], rdi
mov r14, 0xffffffffffffffff
mov r8, r14
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140166990
lea rcx, [rsp + 0x210]
call fcn.14012aa00
nop
lea r9, [rsp + 0x170]
mov r8, rsi
lea rdx, [rsp + 0x210]
lea rcx, [rsp + 0x128]
call fcn.140130240
nop
cmp qword [rax + 0x18], 0x10
jb 0x1401669d3
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.1401309d0
nop
mov rdx, qword [rsp + 0x140]
cmp rdx, 0x10
jb 0x140166a22
inc rdx
mov rcx, qword [rsp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140166a1d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14016888c
call fcn.140382774
mov rcx, qword [0x1404dbca0]
call fcn.140390e00
mov qword [rsp + 0x170], rdi
mov qword [rsp + 0x180], rdi
mov qword [rsp + 0x188], rdi
mov r8, r14
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x140166a50
mov rdx, rbx
lea rcx, [rsp + 0x170]
call fcn.14012aa00
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x128]
call fcn.1401afd40
nop
cmp qword [rax + 0x18], 0x10
jb 0x140166a8a
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.1401309d0
nop
mov rdx, qword [rsp + 0x140]
cmp rdx, 0x10
jb 0x140166ad9
inc rdx
mov rcx, qword [rsp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140166ad4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140168892
call fcn.140382774
lea rdx, str.NB64
mov rcx, rbx
call fcn.1403855b8
test rax, rax
je 0x140166e62
mov ecx, dword [0x1404dbcd8]
sub ecx, 1
je 0x140166e02
sub ecx, 1
je 0x140166dab
sub ecx, 1
je 0x140166cd5
cmp ecx, 1
je 0x140166b72
mov dword [rsp + 0x40], 0xf5d1f7cd
mov dword [rsp + 0x44], 0xbff0eaf3
mov dword [rsp + 0x48], 0xccd0d3e5
mov word [rsp + 0x4c], 0xd6
mov byte [rsp + 0x4e], 1
nop dword [rax + rax]
lea eax, [rdi - 0x68]
xor byte [rsp + rdi + 0x40], al
inc rdi
cmp rdi, 0xd
jb 0x140166b40
mov byte [rsp + 0x4e], 0
lea rcx, [rsp + 0x40]
call fcn.1401329c0
mov byte [0x1404dbb51], 1
mov byte [0x1404dbce1], 1
jmp 0x1401687aa
mov dword [rsp + 0x40], 0xf8fff1db
mov dword [rsp + 0x44], 0xbfecf8f7
mov dword [rsp + 0x48], 0xcfcbc0c6
mov dword [rsp + 0x4c], 0x100c1c1
nop dword [rax]
nop word [rax + rax]
lea eax, [rdi - 0x68]
xor byte [rsp + rdi + 0x40], al
inc rdi
cmp rdi, 0xe
jb 0x140166ba0
mov byte [rsp + 0x4f], 0
lea rcx, [rsp + 0x40]
call fcn.1401329c0
cmp dword [0x1404dbcd8], 4
jne 0x140166cc2
mov edx, dword [0x1404dbcc0]
mov ecx, edx
test edx, edx
je 0x140166c71
sub ecx, 1
je 0x140166c71
sub ecx, 1
je 0x140166c71
mov byte [0x1404dbb51], 1
mov byte [0x1404dbce1], 1
mov dword [rsp + 0x40], 0xfff6f8df
mov dword [rsp + 0x44], 0xfaeceff3
mov word [rsp + 0x48], 0x100
lea rdx, [rsp + 0x128]
cmp ecx, 1
lea rcx, [rsp + 0x40]
je 0x140166c4b
call fcn.140160560
mov rdx, rax
lea rcx, [0x1404dbb58]
call fcn.14015f3c0
lea rcx, [rsp + 0x128]
call fcn.140129eb0
jmp 0x1401687aa
call fcn.140160560
mov rdx, rax
lea rcx, [0x1404dbb58]
call fcn.14015f3c0
lea rcx, [rsp + 0x128]
call fcn.140129eb0
jmp 0x1401687aa
inc edx
mov dword [0x1404dbcc0], edx
mov byte [0x1404dbb50], 1
mov dword [rsp + 0x30], 0xfee8f6db
mov word [rsp + 0x34], 0x100
lea rdx, [rsp + 0x128]
lea rcx, [rsp + 0x30]
call fcn.1401604e0
mov rdx, rax
lea rcx, [0x1404dbb58]
call fcn.14015f3c0
lea rcx, [rsp + 0x128]
call fcn.140129eb0
jmp 0x1401687aa
mov byte [0x1404dbb51], 1
mov byte [0x1404dbce1], 1
jmp 0x1401687aa
mov byte [0x1404dbb50], 0
mov dword [rsp + 0x40], 0xf2fdf6d4
mov dword [rsp + 0x44], 0xfef8bdf2
mov dword [rsp + 0x48], 0xc7c7cdc9
mov word [rsp + 0x4c], 0x100
nop dword [rax + rax]
lea eax, [rdi - 0x68]
xor byte [rsp + rdi + 0x40], al
inc rdi
cmp rdi, 0xc
jb 0x140166d00
mov byte [rsp + 0x4d], 0
mov qword [rsp + 0x180], reloc.WS2_32.dll_inet_ntoa
mov qword [rsp + 0x188], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [rsp + 0x40]
movsd qword [rsp + 0x170], xmm0
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x178], eax
mov byte [rsp + 0x17c], 0
lea rdx, [rsp + 0x170]
lea rcx, [0x1404dbba0]
call fcn.14015f3c0
mov rdx, qword [rsp + 0x188]
cmp rdx, 0x10
jb 0x140166da6
inc rdx
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140166da1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140168898
call fcn.140382774
jmp 0x1401687aa
movdqa xmm0, xmmword [0x1403ca6f0]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x50], 0xcc
mov byte [rsp + 0x52], 1
nop word [rax + rax]
lea eax, [rdi - 0x68]
xor byte [rsp + rdi + 0x40], al
inc rdi
cmp rdi, 0x11
jb 0x140166dd0
mov byte [rsp + 0x52], 0
lea rcx, [rsp + 0x40]
call fcn.1401329c0
mov byte [0x1404dbb51], 1
mov byte [0x1404dbce1], 1
jmp 0x1401687aa
movdqa xmm0, xmmword [0x1403ca6e0]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0xcec6c0c9
mov word [rsp + 0x54], 0xc8
mov byte [rsp + 0x56], 1
nop dword [rax]
nop dword [rax + rax]
lea eax, [rdi - 0x68]
xor byte [rsp + rdi + 0x40], al
inc rdi
cmp rdi, 0x15
jb 0x140166e30
mov byte [rsp + 0x56], 0
lea rcx, [rsp + 0x40]
call fcn.1401329c0
mov byte [0x1404dbb51], 1
mov byte [0x1404dbce1], 1
jmp 0x1401687aa
mov dword [0x1404dbcc0], edi
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rdi
mov r8d, 1
lea rdx, [0x1403c5860]
lea rcx, [rsp + 0x60]
call fcn.14012aa00
nop
mov qword [rsp + 0x1d0], rdi
mov qword [rsp + 0x1e0], rdi
mov qword [rsp + 0x1e8], rdi
mov r8, r14
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x140166ed0
mov rdx, rbx
lea rcx, [rsp + 0x1d0]
call fcn.14012aa00
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0x110]
call fcn.140130680
nop
mov rcx, rbx
call fcn.140390e00
xor edx, edx
lea r8d, [rdx + 0xa]
mov rcx, qword [rsp + 0x110]
call fcn.1401a7020
mov edx, eax
cmp eax, 0x22b
jg 0x140166ff4
je case.0x140167034.730
sub edx, 0x67
je 0x140166f54
sub edx, 0xa
je 0x140166f54
sub edx, 0x32
je 0x140166f54
sub edx, 0xf0
je 0x140166f54
cmp edx, 1
jne case.0x140167034.637
mov rcx, qword [rsp + 0x110]
add rcx, 0x20
cmp qword [rcx + 0x18], 0x10
jb 0x140166f6a
mov rcx, qword [rcx]
call fcn.1401329c0
mov byte [0x1404dbb51], 1
mov byte [0x1404dbce1], 1
mov rcx, qword [rsp + 0x110]
test rcx, rcx
je 0x140168887
lea r8, [rsp + 0x110]
mov rdx, qword [rsp + 0x118]
call fcn.14012f810
mov rdx, qword [rsp + 0x120]
mov rcx, qword [rsp + 0x110]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140168882
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14016889e
jmp 0x140168882
mov byte [0x1404dbb50], 1
jmp 0x1401671e5
cmp edx, 0x387
jg 0x14016715c
je case.0x140167034.701
add edx, 0xfffffd84
cmp edx, 0x91
ja case.0x140167034.637
movsxd rax, edx
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0x1688dc]
mov ecx, dword [rdx + rax*4 + 0x1688c4]
add rcx, rdx
jmp rcx
mov r13b, 1
inc dword [0x1404dbca8]
jmp 0x1401671e5
mov dword [rsp + 0x30], 0xeffff7b6
mov word [rsp + 0x34], 0x100
lea rcx, [rsp + 0x30]
call fcn.140170e20
mov rdx, rax
lea rcx, [0x1404dbd48]
call fcn.140139d50
test al, al
jne 0x14016707e
mov byte [0x1404dbb51], 1
mov byte [0x1404dbce1], 1
cmp dword [0x1404dbcc8], 0x369f
je 0x140167098
mov byte [0x1404dbb51], 1
mov byte [0x1404dbce1], 1
cmp dword [0x1404dbcd0], 0x2c5aa
je 0x1401670b2
mov byte [0x1404dbb51], 1
mov byte [0x1404dbce1], 1
lea rdx, [0x1404dbd68]
lea rcx, [rsp + 0x128]
call fcn.14012bf50
lea rdx, [0x1404dbd88]
lea rcx, [rsp + 0x128]
call fcn.140139d10
movzx ebx, al
lea rcx, [rsp + 0x128]
call fcn.140129eb0
test bl, bl
jne 0x1401670fc
mov byte [0x1404dbb51], 1
mov byte [0x1404dbce1], 1
mov r12b, 1
jmp 0x1401671e5
mov byte [0x1404dbb50], 1
mov byte [0x1404dbce0], 1
mov rdx, qword [rsp + 0x110]
add rdx, 0x20
lea rcx, [rsp + 0x128]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call fcn.1401365c0
mov rdx, rax
lea rcx, [0x1404dbd08]
call fcn.14015f3c0
lea rcx, [rsp + 0x1b0]
call fcn.140129eb0
jmp 0x1401671e5
cmp edx, 0xbbd
jg 0x1401687dc
je 0x140167194
sub edx, 0x3e9
je 0x140167371
sub edx, 0xa
je 0x140167371
sub edx, 0x29
je case.0x140167034.701
cmp edx, 0x7a0
jne case.0x140167034.637
mov byte [0x1404dbb50], 0
mov rdx, qword [rsp + 0x110]
add rdx, 0x20
cmp qword [rdx + 0x18], 0x10
jb 0x1401671b1
mov rdx, qword [rdx]
mov r8, r14
inc r8
cmp byte [rdx + r8], 0
jne 0x1401671b4
lea rcx, [0x1404dbba0]
call fcn.140136390
mov rcx, qword [rsp + 0x110]
add rcx, 0x20
cmp qword [rcx + 0x18], 0x10
jb 0x1401671e0
mov rcx, qword [rcx]
call fcn.1401329c0
cmp byte [0x1404dbb51], 0
jne 0x140166f7d
cmp byte [0x1404dbce1], 0
jne 0x140166f7d
test r13b, r13b
je 0x140168113
cmp dword [0x1404dbca8], 1
jne 0x140167519
mov ecx, 8
call fcn.140382738
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140167398
xor ecx, ecx
mov qword [rax], rcx
mov rcx, rax
call fcn.1401318e0
mov rbx, rax
jmp 0x14016739b
lea rdx, [0x1404dbd68]
lea rcx, [rsp + 0x128]
call fcn.14012bf50
lea rdx, [0x1404dbd88]
cmp qword [0x1404dbda0], 0x10
cmovae rdx, qword [0x1404dbd88]
lea rcx, [rsp + 0x128]
mov r15, qword [rsp + 0x140]
cmp r15, 0x10
setae r12b
mov rbx, qword [rsp + 0x128]
cmovae rcx, rbx
mov r8, qword [rsp + 0x138]
cmp r8, qword [0x1404dbd98]
jne 0x1401672b0
call fcn.1403854f0
test eax, eax
jne 0x1401672b0
xor sil, sil
jmp 0x1401672b3
mov sil, 1
test r12b, r12b
je 0x1401672e9
lea rdx, [r15 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x1401672e1
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401688a4
mov rcx, rbx
call fcn.140382774
test sil, sil
je 0x140167351
mov byte [0x1404dbb50], 0
mov rdx, qword [rsp + 0x110]
add rdx, 0x20
cmp qword [rdx + 0x18], 0x10
jb 0x14016730b
mov rdx, qword [rdx]
mov r8, r14
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x140167310
lea rcx, [0x1404dbba0]
call fcn.140136390
mov rcx, qword [rsp + 0x110]
add rcx, 0x20
cmp qword [rcx + 0x18], 0x10
jb 0x14016733c
mov rcx, qword [rcx]
call fcn.1401329c0
mov r15, qword [rsp + 0x80]
xor r12b, r12b
jmp 0x1401671e5
mov rcx, qword [rsp + 0x110]
add rcx, 0x20
cmp qword [rcx + 0x18], 0x10
jb 0x140167367
mov rcx, qword [rcx]
call fcn.1401329c0
jmp 0x140166f6f
mov byte [0x1404dbb50], 0
mov rcx, qword [rsp + 0x110]
add rcx, 0x20
cmp qword [rcx + 0x18], 0x10
jb 0x14016738e
mov rcx, qword [rcx]
call fcn.1401329c0
jmp 0x140166f6f
mov rbx, rdi
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x148], xmm0
mov qword [rsp + 0x158], rax
lea rax, [rsp + 0x128]
mov qword [rsp + 0x40], rax
mov word [rsp + 0x30], 0xa2
mov byte [rsp + 0x32], 1
lea rdx, [rsp + 0x128]
lea rcx, [rsp + 0x30]
call fcn.140160400
mov rsi, rax
mov rdx, qword [rsp + 0x110]
add rdx, 0x20
lea rcx, [rsp + 0x1b0]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x190]
call fcn.1401365c0
nop
mov r8, rsi
mov rdx, rax
lea rcx, [rsp + 0x148]
call fcn.140130680
nop
lea rcx, [0x1404dbc38]
mov rdx, qword [rsp + 0x148]
cmp rcx, rdx
je 0x14016744b
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x14016743e
mov rdx, qword [rdx]
call fcn.140136390
mov rdx, qword [rsp + 0x148]
lea rax, [rdx + 0x20]
lea rcx, [0x1404dbc18]
cmp rcx, rax
je 0x140167479
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x140167469
mov rax, qword [rax]
mov rdx, rax
call fcn.140136390
mov rdx, qword [rsp + 0x148]
add rdx, 0x20
lea rcx, [rsp + 0x170]
call fcn.14012bf50
mov r8, rax
lea rdx, [rsp + 0x210]
mov rcx, rbx
call fcn.1401319d0
mov rdx, rax
lea rcx, [0x1404dbbf8]
call fcn.14015f3c0
lea rcx, [rsp + 0x210]
call fcn.140129eb0
mov dword [0x1404dbccc], 0xf1
mov byte [0x1404dbb50], 1
mov rcx, qword [rsp + 0x148]
test rcx, rcx
je 0x140168113
lea r8, [rsp + 0x148]
mov rdx, qword [rsp + 0x150]
call fcn.14012f810
mov r8, qword [rsp + 0x158]
mov rdx, qword [rsp + 0x148]
sub r8, rdx
sar r8, 5
lea rcx, [rsp + 0x148]
call fcn.14012fec0
jmp 0x140168113
cmp dword [0x1404dbca8], 2
jne 0x140167c1d
mov rdx, qword [rsp + 0x110]
add rdx, 0x20
lea rcx, [rsp + 0x128]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call fcn.1401365c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14016755a
mov rax, qword [rax]
mov qword [rsp + 0x210], rdi
mov qword [rsp + 0x220], rdi
mov qword [rsp + 0x228], rdi
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x140167575
mov rdx, rax
lea rcx, [rsp + 0x210]
call fcn.14012aa00
nop
lea rcx, [rsp + 0x1b0]
call fcn.140129eb0
mov rdx, qword [rsp + 0x110]
add rdx, 0x40
lea rcx, [rsp + 0x190]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x148]
call fcn.1401365c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x1401675d1
mov rax, qword [rax]
mov qword [rsp + 0x170], rdi
mov qword [rsp + 0x180], rdi
mov qword [rsp + 0x188], rdi
mov r8, r14
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1401675f0
mov rdx, rax
lea rcx, [rsp + 0x170]
call fcn.14012aa00
nop
lea rcx, [rsp + 0x148]
call fcn.140129eb0
mov rdx, qword [rsp + 0x110]
add rdx, 0x60
lea rcx, [rsp + 0x1b0]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x250]
call fcn.1401365c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14016764c
mov rax, qword [rax]
mov qword [rsp + 0x128], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x138], xmm0
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x140167663
mov rdx, rax
lea rcx, [rsp + 0x128]
call fcn.14012aa00
nop
lea rcx, [rsp + 0x250]
call fcn.140129eb0
mov rdx, qword [rsp + 0x110]
sub rdx, 0xffffffffffffff80
lea rcx, [rsp + 0x190]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x148]
call fcn.1401365c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x1401676bf
mov rax, qword [rax]
mov qword [rsp + 0x1b0], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x1c0], xmm0
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x1401676d6
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call fcn.14012aa00
nop
lea rcx, [rsp + 0x148]
call fcn.140129eb0
mov rdx, qword [rsp + 0x110]
add rdx, 0xa0
lea rcx, [rsp + 0x40]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x250]
call fcn.1401365c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140167732
mov rax, qword [rax]
mov qword [rsp + 0x190], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x1a0], xmm0
mov r8, r14
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140167750
mov rdx, rax
lea rcx, [rsp + 0x190]
call fcn.14012aa00
nop
lea rcx, [rsp + 0x250]
call fcn.140129eb0
lea rbx, [r15 + 0x60]
mov rdx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x140167789
mov rdx, qword [rbx]
lea rcx, [rsp + 0x210]
cmp qword [rsp + 0x228], 0x10
cmovae rcx, qword [rsp + 0x210]
mov r8, qword [rsp + 0x220]
cmp r8, qword [rbx + 0x10]
jne 0x1401677be
call fcn.1403854f0
test eax, eax
je 0x1401678f4
xor r15b, r15b
lea r8, [0x1404dbce8]
cmp qword [0x1404dbd00], 0x10
cmovae r8, qword [0x1404dbce8]
movdqa xmm0, xmmword [0x1403ca760]
movdqu xmmword [rsp + 0x148], xmm0
mov dword [rsp + 0x158], 0xdfcbcdd8
mov dword [rsp + 0x15c], 0xdfcf8dc9
mov dword [rsp + 0x160], 0x8d90c0
mov byte [rsp + 0x164], 1
mov rcx, rdi
nop word [rax + rax]
lea eax, [rcx - 0x68]
xor byte [rsp + rcx + 0x148], al
inc rcx
cmp rcx, 0x1b
jb 0x140167820
mov byte [rsp + 0x164], r15b
mov word [rsp + 0x20], di
mov r9d, 0x44
lea rdx, [rsp + 0x148]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxExA]
sub eax, 6
je 0x140167869
cmp eax, 1
jne 0x1401688aa
xor sil, sil
jmp 0x14016786c
mov sil, 1
xor edx, edx
mov rcx, rbx
call fcn.1401a6f80
movaps xmm6, xmm0
xor edx, edx
lea rcx, [rsp + 0x210]
call fcn.1401a6f80
subsd xmm0, xmm6
andps xmm0, xmmword [0x1403c1ae0]
comisd xmm0, xmmword [0x1403ca5a8]
jb 0x1401678e2
movdqa xmm0, xmmword [0x1403ca750]
movdqu xmmword [rsp + 0x148], xmm0
movdqa xmm1, xmmword [0x1403ca790]
movdqu xmmword [rsp + 0x158], xmm1
mov dword [rsp + 0x168], 0x100dccc
lea rcx, [rsp + 0x148]
call fcn.140170e50
mov rcx, rax
call fcn.1401329c0
mov r15b, 1
test sil, sil
jne 0x140167ab6
test r15b, r15b
jne 0x140167ab6
lea rcx, [rsp + 0x170]
cmp qword [rsp + 0x188], 0x10
cmovae rcx, qword [rsp + 0x170]
mov r8, qword [rsp + 0x180]
cmp r8, 1
jne 0x140167a1e
lea rdx, [0x1403c15c4]
call fcn.1403854f0
test eax, eax
jne 0x140167a1e
movdqa xmm0, xmmword [0x1403ca650]
movdqu xmmword [rsp + 0x1d0], xmm0
movdqa xmm1, xmmword [0x1403ca7a0]
movdqu xmmword [rsp + 0x1e0], xmm1
movdqa xmm0, xmmword [0x1403ca6c0]
movdqu xmmword [rsp + 0x1f0], xmm0
mov dword [rsp + 0x200], 0xbdafade8
mov dword [rsp + 0x204], 0xbfa1a1a9
mov dword [rsp + 0x208], 0xf3a3b5
mov byte [rsp + 0x20c], 1
lea eax, [rdi - 0x68]
xor byte [rsp + rdi + 0x1d0], al
inc rdi
cmp rdi, 0x3b
jb 0x140167990
mov byte [rsp + 0x20c], 0
lea rcx, [rsp + 0x1d0]
call fcn.1401329c0
mov byte [0x1404dbb51], 1
mov byte [0x1404dbce1], 1
lea rcx, [rsp + 0x190]
call fcn.140129eb0
nop
lea rcx, [rsp + 0x1b0]
call fcn.140129eb0
nop
lea rcx, [rsp + 0x128]
call fcn.140129eb0
nop
lea rcx, [rsp + 0x170]
call fcn.140129eb0
nop
lea rcx, [rsp + 0x210]
call fcn.140129eb0
nop
lea rcx, [rsp + 0x110]
call fcn.14012fcd0
jmp 0x1401687aa
mov dword [rsp + 0x30], 0xfeefebec
mov word [rsp + 0x34], 0x100
lea rdx, [rsp + 0x148]
lea rcx, [rsp + 0x30]
call fcn.1401604e0
mov rdx, rax
lea rcx, [0x1404dbd48]
call fcn.14015f3c0
lea rcx, [rsp + 0x148]
call fcn.140129eb0
mov dword [0x1404dbcc8], 0xd0035f3
mov byte [0x1404dbb50], 1
lea rcx, [rsp + 0x190]
call fcn.140129eb0
nop
lea rcx, [rsp + 0x1b0]
call fcn.140129eb0
nop
lea rcx, [rsp + 0x128]
call fcn.140129eb0
nop
lea rcx, [rsp + 0x170]
call fcn.140129eb0
nop
lea rcx, [rsp + 0x210]
call fcn.140129eb0
jmp 0x140168113
mov r8d, 0x104
lea rdx, [rsp + 0x270]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rdx, [rsp + 0x270]
lea rcx, [rsp + 0x148]
call fcn.14012fd40
nop
cmp qword [rax + 0x18], 0x10
jb 0x140167aec
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.140154810
nop
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x1d0]
call fcn.140130010
nop
lea rcx, [rsp + 0x60]
call fcn.140129eb0
nop
lea rcx, [rsp + 0x148]
call fcn.140129eb0
lea r8, [rsp + 0x1d0]
cmp qword [rsp + 0x1e8], 0x10
cmovae r8, qword [rsp + 0x1d0]
movabs rax, 0x59ce91446cb817bf
mov qword [rsp + 0x250], rax
movabs rcx, 0x1e89bfd5fa4c3cf4
mov qword [rsp + 0x258], rcx
movabs rax, 0x59ce914402dd67d0
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rcx
movdqa xmm0, xmmword [rsp + 0x250]
pxor xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea rdx, [rsp + 0x40]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov byte [0x1404dbb51], 1
mov byte [0x1404dbce1], 1
lea rcx, [rsp + 0x1d0]
call fcn.140129eb0
nop
lea rcx, [rsp + 0x190]
call fcn.140129eb0
nop
lea rcx, [rsp + 0x1b0]
call fcn.140129eb0
nop
lea rcx, [rsp + 0x128]
call fcn.140129eb0
nop
lea rcx, [rsp + 0x170]
call fcn.140129eb0
nop
lea rcx, [rsp + 0x210]
call fcn.140129eb0
nop
lea rcx, [rsp + 0x110]
call fcn.14012fcd0
jmp 0x1401687aa
cmp dword [0x1404dbca8], 3
jne 0x1401680ea
mov dword [rsp + 0x30], 0xfeefebec
mov word [rsp + 0x34], 0x100
lea rcx, [rsp + 0x30]
call fcn.140170e20
mov rdx, rax
lea rcx, [0x1404dbd48]
call fcn.140139d50
test al, al
jne 0x140167c64
mov byte [0x1404dbb51], 1
mov byte [0x1404dbce1], 1
cmp dword [0x1404dbcc8], 0xd0035f3
je 0x140167c7e
mov byte [0x1404dbb51], 1
mov byte [0x1404dbce1], 1
mov rdx, qword [rsp + 0x110]
add rdx, 0x20
lea rcx, [rsp + 0x128]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call fcn.1401365c0
nop
xor edx, edx
lea r8d, [rdx + 0xa]
mov rcx, rax
call fcn.1401a7020
mov dword [0x1404dba30], eax
lea rcx, [rsp + 0x1b0]
call fcn.140129eb0
mov rdx, qword [rsp + 0x110]
add rdx, 0x40
lea rcx, [rsp + 0x128]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call fcn.1401365c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140167cfd
mov rax, qword [rax]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x140167d00
mov rdx, rax
lea rcx, [0x1404dba78]
call fcn.140136390
nop
lea rcx, [rsp + 0x1b0]
call fcn.140129eb0
mov rdx, qword [rsp + 0x110]
add rdx, 0x60
lea rcx, [rsp + 0x128]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x190]
call fcn.1401365c0
nop
xor edx, edx
lea r8d, [rdx + 0xa]
mov rcx, rax
call fcn.1401a7020
mov edx, eax
lea rcx, [rsp + 0x1b0]
call fcn.1401a8e70
mov rdx, rax
lea rcx, [0x1404dbab8]
call fcn.14015f3c0
lea rcx, [rsp + 0x1b0]
call fcn.140129eb0
nop
lea rcx, [rsp + 0x190]
call fcn.140129eb0
mov rdx, qword [rsp + 0x110]
sub rdx, 0xffffffffffffff80
lea rcx, [rsp + 0x128]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call fcn.1401365c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140167dcc
mov rax, qword [rax]
mov r8, r14
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140167dd0
mov rdx, rax
lea rcx, [0x1404dba98]
call fcn.140136390
nop
lea rcx, [rsp + 0x1b0]
call fcn.140129eb0
mov rdx, qword [rsp + 0x110]
add rdx, 0xa0
lea rcx, [rsp + 0x128]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call fcn.1401365c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140167e2e
mov rax, qword [rax]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x140167e31
mov rdx, rax
lea rcx, [0x1404dba58]
call fcn.140136390
nop
lea rcx, [rsp + 0x1b0]
call fcn.140129eb0
mov rdx, qword [rsp + 0x110]
add rdx, 0xc0
lea rcx, [rsp + 0x128]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call fcn.1401365c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140167e8f
mov rax, qword [rax]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x140167e92
mov rdx, rax
lea rcx, [0x1404dbc18]
call fcn.140136390
nop
lea rcx, [rsp + 0x1b0]
call fcn.140129eb0
mov rdx, qword [rsp + 0x110]
add rdx, 0xe0
lea rcx, [rsp + 0x128]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call fcn.1401365c0
nop
xor edx, edx
lea r8d, [rdx + 0xa]
mov rcx, rax
call fcn.1401a7020
mov dword [0x1404dbb4c], eax
lea rcx, [rsp + 0x1b0]
call fcn.140129eb0
mov dword [rsp + 0x30], 0xeffff7b6
mov word [rsp + 0x34], 0x100
lea rdx, [rsp + 0x128]
lea rcx, [rsp + 0x30]
call fcn.1401604e0
mov rdx, rax
lea rcx, [0x1404dbd48]
call fcn.14015f3c0
lea rcx, [rsp + 0x128]
call fcn.140129eb0
mov dword [0x1404dbcc8], 0x369f
mov dword [0x1404dbcd0], 0x2c5aa
movdqa xmm0, xmmword [0x1403ca710]
movdqu xmmword [rsp + 0x90], xmm0
movdqa xmm1, xmmword [0x1403ca720]
movdqu xmmword [rsp + 0xa0], xmm1
movdqa xmm0, xmmword [0x1403ca6b0]
movdqu xmmword [rsp + 0xb0], xmm0
movdqa xmm1, xmmword [0x1403ca640]
movdqu xmmword [rsp + 0xc0], xmm1
movdqa xmm0, xmmword [0x1403ca670]
movdqu xmmword [rsp + 0xd0], xmm0
movdqa xmm1, xmmword [0x1403ca6d0]
movdqu xmmword [rsp + 0xe0], xmm1
movdqa xmm0, xmmword [0x1403ca610]
movdqu xmmword [rsp + 0xf0], xmm0
mov dword [rsp + 0x100], 0x6a7e684c
mov word [rsp + 0x104], 0x100
lea rdx, [rsp + 0x128]
lea rcx, [rsp + 0x90]
call fcn.140160660
mov rdx, rax
lea rcx, [0x1404dbd68]
call fcn.14015f3c0
lea rcx, [rsp + 0x128]
call fcn.140129eb0
mov byte [0x1404dbb50], 1
mov dword [rsp + 0x30], 0x100acd1
lea rdx, [rsp + 0x128]
lea rcx, [rsp + 0x30]
call fcn.140160460
mov rdx, rax
lea rcx, [0x1404dbb58]
call fcn.14015f3c0
lea rcx, [rsp + 0x128]
call fcn.140129eb0
movdqa xmm0, xmmword [0x1403ca780]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0xc7dfcfdb
mov dword [rsp + 0x54], 0x100d4c0
mov rcx, rdi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x68]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 0x16
jb 0x140168080
mov byte [rsp + 0x57], 0
mov qword [rsp + 0x128], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x138], xmm0
mov r8d, reloc.WS2_32.dll_shutdown
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x128]
call fcn.14013c200
lea rdx, [rsp + 0x128]
lea rcx, [0x1404dbba0]
call fcn.14015f3c0
lea rcx, [rsp + 0x128]
call fcn.140129eb0
inc dword [0x1404dbca8]
jmp 0x140168113
cmp dword [0x1404dbca8], 4
je 0x140168113
mov byte [0x1404dbb51], 1
mov byte [0x1404dbce1], 1
lea rcx, [rsp + 0x110]
call fcn.14012fcd0
jmp 0x1401687aa
test r12b, r12b
je 0x140168746
mov rdx, qword [rsp + 0x110]
add rdx, 0x20
lea rcx, [rsp + 0x1b0]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x128]
call fcn.1401365c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140168150
mov rax, qword [rax]
mov qword [rsp + 0x170], rdi
mov qword [rsp + 0x180], rdi
mov qword [rsp + 0x188], rdi
mov r8, r14
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140168170
mov rdx, rax
lea rcx, [rsp + 0x170]
call fcn.14012aa00
nop
mov rdx, qword [rsp + 0x140]
cmp rdx, 0x10
jb 0x1401681ce
inc rdx
mov rcx, qword [rsp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401681c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401688b5
call fcn.140382774
movdqa xmm0, xmmword [0x1403c0a10]
movdqu xmmword [rsp + 0x138], xmm0
mov byte [rsp + 0x128], 0
lea rcx, [rsp + 0x170]
cmp qword [rsp + 0x188], 0x10
cmovae rcx, qword [rsp + 0x170]
mov r8, qword [rsp + 0x180]
cmp r8, 8
jne 0x14016871b
lea rdx, str.Req_IDNF
call fcn.1403854f0
test eax, eax
jne 0x14016871b
xor r8d, r8d
lea rdx, [0x1403c0a50]
lea rcx, [0x1404dbb28]
call fcn.140136390
mov rdx, qword [rsp + 0x110]
add rdx, 0x40
lea rcx, [rsp + 0x190]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x1d0]
call fcn.1401365c0
nop
xor edx, edx
lea r8d, [rdx + 0xa]
mov rcx, rax
call fcn.1401a7020
mov dword [0x1404dba30], eax
lea rcx, [rsp + 0x1d0]
call fcn.140129eb0
mov rdx, qword [rsp + 0x110]
add rdx, 0x60
lea rcx, [rsp + 0x60]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x210]
call fcn.1401365c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x1401682b9
mov rax, qword [rax]
mov r8, r14
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1401682c0
mov rdx, rax
lea rcx, [0x1404dba78]
call fcn.140136390
nop
lea rcx, [rsp + 0x210]
call fcn.140129eb0
mov rdx, qword [rsp + 0x110]
sub rdx, 0xffffffffffffff80
lea rcx, [rsp + 0x190]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x148]
call fcn.1401365c0
nop
xor edx, edx
lea r8d, [rdx + 0xa]
mov rcx, rax
call fcn.1401a7020
mov edx, eax
lea rcx, [rsp + 0x1d0]
call fcn.1401a8e70
mov rdx, rax
lea rcx, [0x1404dbab8]
call fcn.14015f3c0
lea rcx, [rsp + 0x1d0]
call fcn.140129eb0
nop
lea rcx, [rsp + 0x148]
call fcn.140129eb0
mov rdx, qword [rsp + 0x110]
add rdx, 0xa0
lea rcx, [rsp + 0x60]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x210]
call fcn.1401365c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14016838c
mov rax, qword [rax]
mov r8, r14
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140168390
mov rdx, rax
lea rcx, [0x1404dba98]
call fcn.140136390
nop
lea rcx, [rsp + 0x210]
call fcn.140129eb0
mov rdx, qword [rsp + 0x110]
add rdx, 0xc0
lea rcx, [rsp + 0x190]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x1d0]
call fcn.1401365c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x1401683ee
mov rax, qword [rax]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x1401683f1
mov rdx, rax
lea rcx, [0x1404dba58]
call fcn.140136390
nop
lea rcx, [rsp + 0x1d0]
call fcn.140129eb0
mov rdx, qword [rsp + 0x110]
cmp qword [rdx + 0xf0], 0
je 0x1401684bd
lea rax, [rsp + 0x190]
mov qword [rsp + 0x40], rax
mov word [rsp + 0x30], 0xe4
mov byte [rsp + 0x32], 1
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x30]
call fcn.140160400
mov rbx, rax
mov rdx, qword [rsp + 0x110]
add rdx, 0xe0
lea rcx, [rsp + 0x1d0]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.1401365c0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x148]
call fcn.140130680
mov rdx, rax
lea rcx, [0x1404dbad8]
call fcn.14015f6f0
lea rcx, [rsp + 0x148]
call fcn.14012fcd0
mov rdx, qword [rsp + 0x110]
cmp qword [rdx + 0x110], 0
je 0x140168566
lea rax, [rsp + 0x190]
mov qword [rsp + 0x40], rax
mov word [rsp + 0x30], 0xe4
mov byte [rsp + 0x32], 1
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x30]
call fcn.140160400
mov rbx, rax
mov rdx, qword [rsp + 0x110]
add rdx, 0x100
lea rcx, [rsp + 0x1d0]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.1401365c0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x148]
call fcn.140130680
mov rdx, rax
lea rcx, [0x1404dbaf0]
call fcn.14015f6f0
lea rcx, [rsp + 0x148]
call fcn.14012fcd0
mov dword [0x1404dbb48], 0xf018b3
mov rdx, qword [rsp + 0x110]
jmp 0x14016856c
mov dword [0x1404dbb48], edi
add rdx, 0x160
lea rcx, [rsp + 0x190]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x1d0]
call fcn.1401365c0
nop
xor edx, edx
lea r8d, [rdx + 0xa]
mov rcx, rax
call fcn.1401a7020
mov dword [0x1404dbb4c], eax
lea rcx, [rsp + 0x1d0]
call fcn.140129eb0
mov rax, qword [rsp + 0x110]
lea rdx, [rax + 0x180]
cmp qword [rdx + 0x10], 0
je 0x140168622
lea rcx, [rsp + 0x190]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x1d0]
call fcn.1401365c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x1401685f0
mov rax, qword [rax]
inc r14
cmp byte [rax + r14], 0
jne 0x1401685f0
mov r8, r14
mov rdx, rax
lea rcx, [0x1404dbb28]
call fcn.140136390
nop
lea rcx, [rsp + 0x1d0]
call fcn.140129eb0
mov rax, qword [rsp + 0x110]
cmp qword [rax + 0x1b0], 0
je 0x1401686c0
lea rax, [rsp + 0x190]
mov qword [rsp + 0x40], rax
mov word [rsp + 0x30], 0xe4
mov byte [rsp + 0x32], 1
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x30]
call fcn.140160400
mov rbx, rax
mov rdx, qword [rsp + 0x110]
add rdx, 0x1a0
lea rcx, [rsp + 0x1d0]
call fcn.14012bf50
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.1401365c0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x148]
call fcn.140130680
mov rdx, rax
lea rcx, [0x1404dbb08]
call fcn.14015f6f0
lea rcx, [rsp + 0x148]
call fcn.14012fcd0
mov byte [0x1404dbb20], 1
jmp 0x1401686c7
mov byte [0x1404dbb20], 0
mov byte [0x1404dbb50], 1
mov dword [rsp + 0x30], 0xfee8f6db
mov word [rsp + 0x34], 0x100
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x30]
call fcn.1401604e0
mov rdx, rax
lea rcx, [0x1404dbb58]
call fcn.14015f3c0
lea rcx, [rsp + 0x190]
call fcn.140129eb0
nop
lea rcx, [rsp + 0x170]
call fcn.140129eb0
jmp 0x140168746
mov byte [0x1404dbb51], 1
mov byte [0x1404dbce1], 1
lea rcx, [rsp + 0x170]
call fcn.140129eb0
nop
lea rcx, [rsp + 0x110]
call fcn.14012fcd0
jmp 0x1401687aa
mov rcx, qword [rsp + 0x110]
test rcx, rcx
je 0x1401687aa
lea r8, [rsp + 0x110]
mov rdx, qword [rsp + 0x118]
call fcn.14012f810
mov rdx, qword [rsp + 0x120]
mov rcx, qword [rsp + 0x110]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401687a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401688bb
call fcn.140382774
nop
mov rcx, qword [rsp + 0x480]
xor rcx, rsp
call fcn.140382da0
lea r11, [rsp + 0x4a0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
cmp edx, 0xd1f
je 0x140166f54
cmp edx, 0x19b4
je 0x140168874
cmp edx, 0x2719
je 0x140168823
mov byte [0x1404dbb50], 0
mov rcx, qword [rsp + 0x110]
add rcx, 0x20
cmp qword [rcx + 0x18], 0x10
jb 0x140168819
mov rcx, qword [rcx]
call fcn.1401329c0
jmp 0x140166f6f
mov byte [0x1404dbb50], 0
mov dword [rsp + 0x40], 0xfeeef7d1
mov dword [rsp + 0x44], 0xf3fff3ee
mov dword [rsp + 0x48], 0xd1d0e480
mov dword [rsp + 0x4c], 0x100d7cb
nop word [rax + rax]
lea eax, [rdi - 0x68]
xor byte [rsp + rdi + 0x40], al
inc rdi
cmp rdi, 0xe
jb 0x140168850
mov byte [rsp + 0x4f], 0
lea rcx, [rsp + 0x40]
call fcn.1401329c0
jmp 0x140166f6f
mov word [0x1404dbb50], 0x100
jmp 0x140166f76
call fcn.140382774
jmp 0x1401687aa
call fcn.140389824
int3
call fcn.140389824
int3
call fcn.140389824
int3
call fcn.140389824
nop
call fcn.140389824
nop
mov ecx, 0x2b
call fcn.14039170c
nop
call fcn.140389824
nop
call fcn.140389824
int3