Function at 0x180032b40
Capabilities:
Encode data using xor
Parse pe header

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x738]
sub rsp, 0x800
mov qword [rbp + 0x628], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov r15, rcx
mov r13d, 1
mov ebx, r13d
xor edx, edx
lea r8d, [r13 + 0x2f]
lea rcx, [rbp + 0x630]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov edx, dword [0x180195f94]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rsi, qword [rax + rdx*8]
or r14, 0xffffffffffffffff
xor r12d, r12d
lea edi, [r13 + 0x26]
mov eax, dword [rsi + rcx]
cmp dword [0x18019b714], eax
jle 0x180032dea
lea rcx, [0x18019b714]
call fcn.180157af0
cmp dword [0x18019b714], r14d
jne 0x180032dea
lea rax, [rbp + 0x5a8]
mov qword [rbp + 0x3b0], rax
lea ecx, [rdi + 0x27]
mov byte [rsp + 0x78], cl
lea ecx, [rdi + 0x45]
mov byte [rsp + 0x79], cl
lea eax, [rdi + 0x54]
mov byte [rsp + 0x7a], al
mov byte [rsp + 0x7b], 0x5a
mov byte [rsp + 0x7c], 0x80
mov byte [rsp + 0x7d], 0x7a
mov byte [rsp + 0x7e], al
mov byte [rsp + 0x7f], cl
lea eax, [rdi + 0x4d]
mov byte [rbp - 0x80], al
lea eax, [rdi + 0x29]
mov byte [rbp - 0x7f], al
lea ecx, [rdi + 0x4e]
mov byte [rbp - 0x7e], cl
lea eax, [rdi + 0x46]
mov byte [rbp - 0x7d], al
mov byte [rbp - 0x7c], 0x76
mov byte [rbp - 0x7b], r12b
mov al, byte [rsp + 0x78]
mov ecx, r12d
lea r12d, [r13 + 0xc]
mov al, byte [rsp + rcx + 0x78]
sub al, 7
mov byte [rsp + rcx + 0x78], al
add rcx, r13
cmp rcx, r12
jb 0x180032c3a
xorps xmm0, xmm0
movups xmmword [rbp + 0x5a8], xmm0
xor r12d, r12d
mov qword [rbp + 0x5b8], r12
mov qword [rbp + 0x5c0], r12
lea rax, [rsp + 0x78]
mov r8, r14
inc r8
cmp byte [rax + r8], r12b
jne 0x180032c6f
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x5a8]
call fcn.18000c7ac
nop
mov dword [rbp - 0x64], 0x67
mov eax, 0xc
mov byte [rbp - 0x60], al
lea ecx, [rax - 0xa]
mov byte [rbp - 0x5f], cl
lea eax, [rcx + 0x13]
mov byte [rbp - 0x5e], al
lea eax, [rcx + 7]
mov byte [rbp - 0x5d], al
mov byte [rbp - 0x5c], cl
lea eax, [rcx + 9]
mov byte [rbp - 0x5b], al
lea eax, [rcx + 0x52]
mov byte [rbp - 0x5a], al
lea ecx, [rax + 1]
mov byte [rbp - 0x59], cl
xor eax, eax
mov byte [rbp - 0x58], al
mov al, byte [rbp - 0x60]
mov rdx, r12
lea r8d, [rcx - 0x4d]
mov al, byte [rbp + rdx - 0x60]
mov ecx, dword [rbp - 0x64]
xor cl, al
mov byte [rbp + rdx - 0x60], cl
add rdx, r13
cmp rdx, r8
jb 0x180032ccf
mov byte [rbp - 0x58], r12b
xorps xmm0, xmm0
movups xmmword [rbp + 0x3e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3f8], xmm1
lea rax, [rbp - 0x60]
mov r8, r14
inc r8
cmp byte [rax + r8], r12b
jne 0x180032d04
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x3e8]
call fcn.18000c7ac
nop
lea rdx, [rbp + 0x3e8]
lea rcx, [rbp + 0x680]
call fcn.1800ceb58
nop
mov qword [rsp + 0x20], r12
mov r9b, r13b
lea r8, [rbp + 0x5a8]
mov rdx, rax
lea rcx, [0x18019ca50]
call fcn.18006ac60
nop
mov rdx, qword [rbp + 0x400]
mov eax, 0x10
cmp rdx, rax
jb 0x180032d98
inc rdx
mov rcx, qword [rbp + 0x3e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180032d93
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180032d93
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165930]
movdqu xmmword [rbp + 0x3f8], xmm0
mov byte [rbp + 0x3e8], r12b
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rbp - 0x60]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xe]
lea rcx, [rsp + 0x78]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x180162fa8]
call fcn.1801579fc
nop
lea rcx, [0x18019b714]
call fcn.180157a84
lea rdi, [0x18019ca60]
mov rcx, rdi
mov eax, 0x10
cmp qword [0x18019ca78], rax
cmovae rcx, qword [0x18019ca60]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
jne 0x180032e42
mov rcx, rdi
mov eax, 0x10
cmp qword [0x18019ca78], rax
cmovae rcx, qword [0x18019ca60]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x18019ca58], rax
mov r8, rax
mov rdx, rdi
call fcn.1800150f8
lea rcx, [rbp + 0x630]
call qword [0x18019ca50]
movzx eax, word [rbp + 0x630]
mov ecx, 9
cmp ax, cx
je 0x180032e67
test ax, ax
cmovne ebx, r12d
mov ecx, dword [rbp + 0x650]
mov edi, r12d
movzx eax, bl
cmp rcx, qword [r15 + 0x18]
cmovae edi, eax
mov dword [rbp + 0x750], r12d
mov r8b, r13b
lea rdx, [rbp + 0x750]
mov rcx, r15
call fcn.1800390a4
test al, al
je 0x180032ee2
mov dword [rbp + 0x748], r12d
xor r8d, r8d
lea rdx, [rbp + 0x748]
mov rcx, r15
call fcn.1800390a4
test al, al
je 0x180032ee2
mov r8d, dword [rbp + 0x748]
imul r8d, dword [rbp + 0x750]
mov ecx, r8d
mov edx, r12d
movzx eax, dil
cmp rcx, qword [r15 + 0x18]
cmovae edx, eax
movzx edi, dl
cmp r8d, dword [rbp + 0x650]
cmovne edi, r12d
mov qword [rbp + 0x758], r12
mov ebx, 0x64
mov eax, 4
mov eax, dword [rsi + rax]
cmp dword [0x18019bad0], eax
jle 0x1800332f4
lea rcx, [0x18019bad0]
call fcn.180157af0
cmp dword [0x18019bad0], r14d
jne 0x1800332f4
lea rax, [rbp + 0x5c8]
mov qword [rbp + 0x3b8], rax
lea ecx, [rbx - 0x5c]
mov dword [rsp + 0x30], ecx
mov eax, dword [rsp + 0x30]
xor al, 0x47
mov byte [rsp + 0x34], al
mov eax, dword [rsp + 0x30]
add al, r13b
mov r8w, 0x65
xor al, r8b
mov byte [rsp + 0x35], al
mov eax, dword [rsp + 0x30]
add al, 2
xor al, 0x74
mov byte [rsp + 0x36], al
mov eax, dword [rsp + 0x30]
add al, 3
xor al, 0x50
mov byte [rsp + 0x37], al
mov eax, dword [rsp + 0x30]
add al, 4
xor al, 0x68
mov byte [rsp + 0x38], al
mov eax, dword [rsp + 0x30]
add al, 5
mov r9w, 0x79
xor al, r9b
mov byte [rsp + 0x39], al
mov eax, dword [rsp + 0x30]
add al, 6
xor al, 0x73
mov byte [rsp + 0x3a], al
mov eax, dword [rsp + 0x30]
add al, 7
xor al, 0x69
mov byte [rsp + 0x3b], al
mov eax, dword [rsp + 0x30]
add al, cl
xor al, 0x63
mov byte [rsp + 0x3c], al
mov eax, dword [rsp + 0x30]
add al, 9
lea r11d, [rbx - 3]
xor al, r11b
mov byte [rsp + 0x3d], al
mov eax, dword [rsp + 0x30]
add al, 0xa
lea edx, [rbx + 8]
xor al, dl
mov byte [rsp + 0x3e], al
mov eax, dword [rsp + 0x30]
add al, 0xb
xor al, dl
mov byte [rsp + 0x3f], al
mov eax, dword [rsp + 0x30]
add al, 0xc
xor al, r9b
mov byte [rsp + 0x40], al
mov eax, dword [rsp + 0x30]
add al, 0xd
xor al, 0x49
mov byte [rsp + 0x41], al
mov eax, dword [rsp + 0x30]
add al, 0xe
xor al, 0x6e
mov byte [rsp + 0x42], al
mov eax, dword [rsp + 0x30]
add al, 0xf
xor al, 0x73
mov byte [rsp + 0x43], al
mov eax, dword [rsp + 0x30]
add al, 0x10
lea r10d, [rbx + 0x10]
xor al, r10b
mov byte [rsp + 0x44], al
mov eax, dword [rsp + 0x30]
add al, 0x11
xor al, r11b
mov byte [rsp + 0x45], al
mov eax, dword [rsp + 0x30]
add al, 0x12
xor al, dl
mov byte [rsp + 0x46], al
mov eax, dword [rsp + 0x30]
add al, 0x13
xor al, dl
mov byte [rsp + 0x47], al
mov eax, dword [rsp + 0x30]
add al, 0x14
xor al, r8b
mov byte [rsp + 0x48], al
mov eax, dword [rsp + 0x30]
add al, 0x15
xor al, bl
mov byte [rsp + 0x49], al
mov eax, dword [rsp + 0x30]
add al, 0x16
xor al, 0x53
mov byte [rsp + 0x4a], al
mov eax, dword [rsp + 0x30]
add al, 0x17
xor al, r9b
mov byte [rsp + 0x4b], al
mov eax, dword [rsp + 0x30]
add al, 0x18
xor al, 0x73
mov byte [rsp + 0x4c], al
mov eax, dword [rsp + 0x30]
add al, 0x19
xor al, r10b
mov byte [rsp + 0x4d], al
mov eax, dword [rsp + 0x30]
add al, 0x1a
xor al, r8b
mov byte [rsp + 0x4e], al
mov eax, dword [rsp + 0x30]
add al, 0x1b
lea ecx, [rbx + 9]
xor al, cl
mov byte [rsp + 0x4f], al
mov eax, dword [rsp + 0x30]
add al, 0x1c
xor al, 0x4d
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x30]
add al, 0x1d
xor al, r8b
mov byte [rsp + 0x51], al
mov eax, dword [rsp + 0x30]
add al, 0x1e
xor al, cl
mov byte [rsp + 0x52], al
mov eax, dword [rsp + 0x30]
lea ebx, [rdx - 0x4d]
add al, bl
xor al, 0x6f
mov byte [rsp + 0x53], al
mov eax, dword [rsp + 0x30]
add al, 0x20
xor al, 0x72
mov byte [rsp + 0x54], al
mov eax, dword [rsp + 0x30]
add al, 0x21
xor al, r9b
mov byte [rsp + 0x55], al
xor eax, eax
mov byte [rsp + 0x56], al
mov al, byte [rsp + 0x34]
mov rdx, r12
lea r8d, [r11 - 0x3f]
mov al, byte [rsp + rdx + 0x34]
mov ecx, dword [rsp + 0x30]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x34], cl
add rdx, r13
cmp rdx, r8
jb 0x1800330ff
mov byte [rsp + 0x56], r12b
xorps xmm0, xmm0
movups xmmword [rbp + 0x5c8], xmm0
mov qword [rbp + 0x5d8], r12
mov qword [rbp + 0x5e0], r12
lea rax, [rsp + 0x34]
mov r8, r14
inc r8
cmp byte [rax + r8], r12b
jne 0x18003313c
lea rdx, [rsp + 0x34]
lea rcx, [rbp + 0x5c8]
call fcn.18000c7ac
nop
mov eax, 0x52
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x68]
xor al, 0x6b
mov byte [rsp + 0x6c], al
mov eax, dword [rsp + 0x68]
add al, r13b
xor al, 0x65
mov byte [rsp + 0x6d], al
mov eax, dword [rsp + 0x68]
add al, 2
xor al, 0x72
mov byte [rsp + 0x6e], al
mov eax, dword [rsp + 0x68]
add al, 3
xor al, 0x6e
mov byte [rsp + 0x6f], al
mov eax, dword [rsp + 0x68]
add al, 4
xor al, 0x65
mov byte [rsp + 0x70], al
mov eax, dword [rsp + 0x68]
add al, 5
xor al, 0x6c
mov byte [rsp + 0x71], al
mov eax, dword [rsp + 0x68]
add al, 6
xor al, 0x33
mov byte [rsp + 0x72], al
mov eax, dword [rsp + 0x68]
add al, 7
xor al, 0x32
mov byte [rsp + 0x73], al
xor eax, eax
mov byte [rsp + 0x74], al
mov al, byte [rsp + 0x6c]
mov rdx, r12
mov r8d, 8
mov al, byte [rsp + rdx + 0x6c]
mov ecx, dword [rsp + 0x68]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x6c], cl
add rdx, r13
cmp rdx, r8
jb 0x1800331d2
mov byte [rsp + 0x74], r12b
xorps xmm0, xmm0
movups xmmword [rbp + 0x408], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x418], xmm1
lea rax, [rsp + 0x6c]
mov r8, r14
inc r8
cmp byte [rax + r8], r12b
jne 0x18003320c
lea rdx, [rsp + 0x6c]
lea rcx, [rbp + 0x408]
call fcn.18000c7ac
nop
lea rdx, [rbp + 0x408]
lea rcx, [rbp + 0x6a0]
call fcn.1800ceb58
nop
mov qword [rsp + 0x20], r12
mov r9b, r13b
lea r8, [rbp + 0x5c8]
mov rdx, rax
lea rcx, [0x18019ba50]
call fcn.18006a600
nop
mov rdx, qword [rbp + 0x420]
mov eax, 0x10
cmp rdx, rax
jb 0x1800332a1
inc rdx
mov rcx, qword [rbp + 0x408]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003329c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rbx
jbe 0x18003329c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165930]
movdqu xmmword [rbp + 0x418], xmm0
mov byte [rbp + 0x408], r12b
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rsp + 0x6c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x23]
lea rcx, [rsp + 0x34]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x180162f9c]
call fcn.1801579fc
nop
lea rcx, [0x18019bad0]
call fcn.180157a84
lea rbx, [0x18019ba60]
mov rcx, rbx
mov eax, 0x10
cmp qword [0x18019ba78], rax
cmovae rcx, qword [0x18019ba60]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
jne 0x18003334c
mov rcx, rbx
mov eax, 0x10
cmp qword [0x18019ba78], rax
cmovae rcx, qword [0x18019ba60]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x18019ba58], rax
mov r8, rax
mov rdx, rbx
call fcn.1800150f8
lea rcx, [rbp + 0x758]
call qword [0x18019ba50]
test eax, eax
je 0x180033374
imul rax, qword [r15 + 0x18], 0x3ff00000
shr rax, 0xa
cmp qword [rbp + 0x758], rax
jae 0x18003338d
jmp 0x18003338a
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xd
jne 0x18003338a
mov eax, 3
cmp qword [r15 + 0x18], rax
jb 0x18003338d
mov dil, r12b
mov ebx, 0x40
mov r8d, ebx
xor edx, edx
lea rcx, [rbp + 0x6c0]
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 0x6c0], ebx
mov ebx, 0x60
mov eax, 4
mov eax, dword [rsi + rax]
cmp dword [0x18019c5a4], eax
jle 0x180033640
lea rcx, [0x18019c5a4]
call fcn.180157af0
cmp dword [0x18019c5a4], r14d
jne 0x180033640
lea rax, [rbp + 0x5e8]
mov qword [rbp + 0x3b8], rax
lea eax, [rbx - 0xc]
mov byte [rbp - 0x7a], al
mov byte [rbp - 0x79], 0x79
mov byte [rbp - 0x78], 0x7c
lea eax, [rbx + 0xf]
mov byte [rbp - 0x77], al
lea esi, [rbx + 0xe]
mov byte [rbp - 0x76], sil
mov byte [rbp - 0x75], 0x79
mov byte [rbp - 0x74], 0x5a
lea eax, [rbx + 0x12]
mov byte [rbp - 0x73], al
mov byte [rbp - 0x72], 0x7a
mov byte [rbp - 0x71], 0x7c
mov byte [rbp - 0x70], 0x7f
mov byte [rbp - 0x6f], 0x86
mov byte [rbp - 0x6e], bl
mov byte [rbp - 0x6d], 0x81
mov byte [rbp - 0x6c], sil
mov byte [rbp - 0x6b], 0x81
mov byte [rbp - 0x6a], 0x82
mov byte [rbp - 0x69], 0x80
lea eax, [rbx - 0xe]
mov byte [rbp - 0x68], al
mov byte [rbp - 0x67], 0x85
mov byte [rbp - 0x66], r12b
mov al, byte [rbp - 0x7a]
mov rcx, r12
lea r12d, [rbx - 0x4c]
mov al, byte [rbp + rcx - 0x7a]
sub al, 0xd
mov byte [rbp + rcx - 0x7a], al
add rcx, r13
cmp rcx, r12
jb 0x180033451
xorps xmm0, xmm0
movups xmmword [rbp + 0x5e8], xmm0
xor r12d, r12d
mov qword [rbp + 0x5f8], r12
mov qword [rbp + 0x600], r12
lea rax, [rbp - 0x7a]
mov r8, r14
inc r8
cmp byte [rax + r8], r12b
jne 0x180033485
lea rdx, [rbp - 0x7a]
lea rcx, [rbp + 0x5e8]
call fcn.18000c7ac
nop
mov eax, 0x4c
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x58]
xor al, 0x6b
mov byte [rsp + 0x5c], al
mov eax, dword [rsp + 0x58]
add al, r13b
xor al, 0x65
mov byte [rsp + 0x5d], al
mov eax, dword [rsp + 0x58]
add al, 2
xor al, 0x72
mov byte [rsp + 0x5e], al
mov eax, dword [rsp + 0x58]
add al, 3
xor al, sil
mov byte [rsp + 0x5f], al
mov eax, dword [rsp + 0x58]
add al, 4
xor al, 0x65
mov byte [rsp + 0x60], al
mov eax, dword [rsp + 0x58]
add al, 5
xor al, 0x6c
mov byte [rsp + 0x61], al
mov eax, dword [rsp + 0x58]
add al, 6
xor al, 0x33
mov byte [rsp + 0x62], al
mov eax, dword [rsp + 0x58]
add al, 7
xor al, 0x32
mov byte [rsp + 0x63], al
xor eax, eax
mov byte [rsp + 0x64], al
mov al, byte [rsp + 0x5c]
mov rdx, r12
mov r12d, 8
mov al, byte [rsp + rdx + 0x5c]
mov ecx, dword [rsp + 0x58]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x5c], cl
add rdx, r13
cmp rdx, r12
jb 0x18003351b
xor r12d, r12d
mov byte [rsp + 0x64], r12b
xorps xmm0, xmm0
movups xmmword [rbp + 0x428], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x438], xmm1
lea rax, [rsp + 0x5c]
mov r8, r14
inc r8
cmp byte [rax + r8], r12b
jne 0x180033558
lea rdx, [rsp + 0x5c]
lea rcx, [rbp + 0x428]
call fcn.18000c7ac
nop
lea rdx, [rbp + 0x428]
lea rcx, [rbp + 0x660]
call fcn.1800ceb58
nop
mov qword [rsp + 0x20], r12
mov r9b, r13b
lea r8, [rbp + 0x5e8]
mov rdx, rax
lea rcx, [0x18019c9d0]
call fcn.180069fb4
nop
mov rdx, qword [rbp + 0x440]
mov eax, 0x10
cmp rdx, rax
jb 0x1800335ee
inc rdx
mov rcx, qword [rbp + 0x428]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800335e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800335e9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165930]
movdqu xmmword [rbp + 0x438], xmm0
mov byte [rbp + 0x428], r12b
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rsp + 0x5c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x15]
lea rcx, [rbp - 0x7a]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x180162f90]
call fcn.1801579fc
nop
lea rcx, [0x18019c5a4]
call fcn.180157a84
lea rbx, [0x18019c9e0]
mov rcx, rbx
mov eax, 0x10
cmp qword [0x18019c9f8], rax
cmovae rcx, qword [0x18019c9e0]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
jne 0x180033698
mov rcx, rbx
mov eax, 0x10
cmp qword [0x18019c9f8], rax
cmovae rcx, qword [0x18019c9e0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x18019c9d8], rax
mov r8, rax
mov rdx, rbx
call fcn.1800150f8
lea rcx, [rbp + 0x6c0]
call qword [0x18019c9d0]
test eax, eax
je 0x1800336ba
imul rax, qword [r15 + 0x18], 0x3ff00000
cmp qword [rbp + 0x6c8], rax
jae 0x1800336bd
mov dil, r12b
lea rdx, [rbp + 0x3e0]
mov rcx, r15
call fcn.180039568
neg al
sbb cl, cl
and cl, dil
movabs rdx, 0x740000000
mov rax, qword [r15 + 0x18]
imul rax, rdx
movzx esi, cl
cmp qword [rbp + 0x3e0], rax
cmovb esi, r12d
mov edx, 2
cmp qword [r15 + 0x18], rdx
jb 0x180035daf
mov dword [rbp - 0x54], 0x64
mov eax, dword [rbp - 0x54]
xor ax, 0x53
mov word [rbp - 0x50], ax
mov eax, dword [rbp - 0x54]
add ax, r13w
lea ecx, [rdx + 0x43]
xor ax, cx
mov word [rbp - 0x4e], ax
mov eax, dword [rbp - 0x54]
add ax, dx
xor ax, 0x4c
mov word [rbp - 0x4c], ax
mov eax, dword [rbp - 0x54]
add ax, 3
xor ax, cx
mov word [rbp - 0x4a], ax
mov eax, dword [rbp - 0x54]
add ax, 4
xor ax, 0x43
mov word [rbp - 0x48], ax
mov eax, dword [rbp - 0x54]
add ax, 5
xor ax, 0x54
mov word [rbp - 0x46], ax
mov eax, dword [rbp - 0x54]
add ax, 6
lea r8d, [rdx + 0x1e]
xor ax, r8w
mov word [rbp - 0x44], ax
mov eax, dword [rbp - 0x54]
add ax, 7
xor ax, 0x2a
mov word [rbp - 0x42], ax
mov eax, dword [rbp - 0x54]
add ax, 8
xor ax, r8w
mov word [rbp - 0x40], ax
mov eax, dword [rbp - 0x54]
add ax, 9
lea edx, [rcx + 1]
xor ax, dx
mov word [rbp - 0x3e], ax
mov eax, dword [rbp - 0x54]
add ax, 0xa
xor ax, 0x52
mov word [rbp - 0x3c], ax
mov eax, dword [rbp - 0x54]
add ax, 0xb
xor ax, 0x4f
mov word [rbp - 0x3a], ax
mov eax, dword [rbp - 0x54]
add ax, 0xc
xor ax, 0x4d
mov word [rbp - 0x38], ax
mov eax, dword [rbp - 0x54]
add ax, 0xd
xor ax, r8w
mov word [rbp - 0x36], ax
mov eax, dword [rbp - 0x54]
add ax, 0xe
xor ax, 0x57
mov word [rbp - 0x34], ax
mov eax, dword [rbp - 0x54]
add ax, 0xf
xor ax, 0x69
mov word [rbp - 0x32], ax
mov eax, dword [rbp - 0x54]
add ax, 0x10
lea r8d, [rcx + 0x29]
xor ax, r8w
mov word [rbp - 0x30], ax
mov eax, dword [rbp - 0x54]
add ax, 0x11
xor ax, 0x33
mov word [rbp - 0x2e], ax
mov eax, dword [rbp - 0x54]
add ax, 0x12
xor ax, 0x32
mov word [rbp - 0x2c], ax
mov eax, dword [rbp - 0x54]
add ax, 0x13
xor ax, 0x5f
mov word [rbp - 0x2a], ax
mov eax, dword [rbp - 0x54]
add ax, 0x14
xor ax, dx
mov word [rbp - 0x28], ax
mov eax, dword [rbp - 0x54]
add ax, 0x15
xor ax, 0x61
mov word [rbp - 0x26], ax
mov eax, dword [rbp - 0x54]
add ax, 0x16
xor ax, r8w
mov word [rbp - 0x24], ax
xor eax, eax
mov word [rbp - 0x22], ax
movzx eax, word [rbp - 0x50]
mov rdx, r12
lea edi, [rcx - 0x2e]
movzx eax, word [rbp + rdx*2 - 0x50]
mov ecx, dword [rbp - 0x54]
add cx, dx
xor cx, ax
mov word [rbp + rdx*2 - 0x50], cx
add rdx, r13
cmp rdx, rdi
jb 0x180033877
mov word [rbp - 0x22], r12w
xorps xmm0, xmm0
movups xmmword [rbp + 0x448], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x458], xmm1
lea rax, [rbp - 0x50]
mov r8, r14
mov edi, 8
inc r8
cmp word [rax + r8*2], r12w
jne 0x1800338b8
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x448]
call fcn.18000c67c
nop
lea rdx, [rbp + 0x448]
mov rcx, r15
call fcn.18003906c
mov ebx, eax
mov rdx, qword [rbp + 0x460]
cmp rdx, rdi
jb 0x18003392c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x448]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180033927
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180033927
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165920]
movdqu xmmword [rbp + 0x458], xmm0
mov word [rbp + 0x448], r12w
xor edx, edx
lea r8d, [rdx + 0x30]
lea rcx, [rbp - 0x50]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov rdi, r12
cmp ebx, r13d
setb dil
mov eax, 0x49
mov dword [rbp + 0x1a4], eax
mov eax, 0x1a
mov word [rbp + 0x1a8], ax
lea ecx, [rax - 0xe]
mov word [rbp + 0x1aa], cx
lea eax, [rcx - 7]
mov word [rbp + 0x1ac], ax
mov word [rbp + 0x1ae], cx
lea edx, [rcx - 2]
mov word [rbp + 0x1b0], dx
lea eax, [rcx + 0x11]
mov word [rbp + 0x1b2], ax
lea r8d, [rcx + 0x5d]
mov word [rbp + 0x1b4], r8w
lea eax, [rcx + 0x57]
mov word [rbp + 0x1b6], ax
mov word [rbp + 0x1b8], r8w
lea eax, [rcx + 3]
mov word [rbp + 0x1ba], ax
lea eax, [rcx + 0xf]
mov word [rbp + 0x1bc], ax
lea eax, [rcx - 6]
mov word [rbp + 0x1be], ax
lea ecx, [rdx - 6]
mov word [rbp + 0x1c0], cx
mov word [rbp + 0x1c2], r8w
lea eax, [rdx + 0x14]
mov word [rbp + 0x1c4], ax
lea r8d, [rdx + 0x16]
mov word [rbp + 0x1c6], r8w
lea eax, [rdx + 0x1d]
mov word [rbp + 0x1c8], ax
lea eax, [rdx + 0x70]
mov word [rbp + 0x1ca], ax
lea eax, [rdx + 0x71]
mov word [rbp + 0x1cc], ax
lea eax, [rdx + 0xc]
mov word [rbp + 0x1ce], ax
mov word [rbp + 0x1d0], dx
lea eax, [rdx + 0x1e]
mov word [rbp + 0x1d2], ax
lea eax, [rdx + 0x20]
mov word [rbp + 0x1d4], ax
lea eax, [rdx + 0x17]
mov word [rbp + 0x1d6], ax
lea eax, [rdx + 0x22]
mov word [rbp + 0x1d8], ax
mov word [rbp + 0x1da], cx
mov word [rbp + 0x1dc], ax
lea eax, [rdx + 0x1a]
mov word [rbp + 0x1de], ax
lea eax, [rdx + 0x1c]
mov word [rbp + 0x1e0], ax
lea eax, [rdx + 0x31]
mov word [rbp + 0x1e2], ax
lea eax, [rdx + 0x26]
mov word [rbp + 0x1e4], ax
xor eax, eax
mov word [rbp + 0x1e6], ax
movzx eax, word [rbp + 0x1a8]
mov rdx, r12
lea r12d, [rcx + 0x1b]
movzx eax, word [rbp + rdx*2 + 0x1a8]
mov ecx, dword [rbp + 0x1a4]
xor cx, ax
mov word [rbp + rdx*2 + 0x1a8], cx
add rdx, r13
cmp rdx, r12
jb 0x180033aac
xor r12d, r12d
mov word [rbp + 0x1e6], r12w
xorps xmm0, xmm0
movups xmmword [rbp + 0x468], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x478], xmm1
lea rax, [rbp + 0x1a8]
mov r8, r14
inc r8
cmp word [rax + r8*2], r12w
jne 0x180033af7
lea rdx, [rbp + 0x1a8]
lea rcx, [rbp + 0x468]
call fcn.18000c67c
nop
lea rdx, [rbp + 0x468]
mov rcx, r15
call fcn.18003906c
mov ebx, eax
mov rdx, qword [rbp + 0x480]
mov eax, 8
cmp rdx, rax
jb 0x180033b73
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x468]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180033b6e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180033b6e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165920]
movdqu xmmword [rbp + 0x478], xmm0
mov word [rbp + 0x468], r12w
xor edx, edx
lea r8d, [rdx + 0x40]
lea rcx, [rbp + 0x1a8]
call qword [sym.imp.VCRUNTIME140.dll_memset]
cmp ebx, r13d
jae 0x180033ba6
inc rdi
mov ecx, 0x45
mov dword [rbp + 0xf0], ecx
mov eax, dword [rbp + 0xf0]
xor ax, 0x53
mov word [rbp + 0xf4], ax
mov eax, dword [rbp + 0xf0]
add ax, r13w
xor ax, cx
mov word [rbp + 0xf6], ax
mov eax, dword [rbp + 0xf0]
add ax, 2
xor ax, 0x4c
mov word [rbp + 0xf8], ax
mov eax, dword [rbp + 0xf0]
add ax, 3
xor ax, cx
mov word [rbp + 0xfa], ax
mov eax, dword [rbp + 0xf0]
add ax, 4
xor ax, 0x43
mov word [rbp + 0xfc], ax
mov eax, dword [rbp + 0xf0]
add ax, 5
xor ax, 0x54
mov word [rbp + 0xfe], ax
mov eax, dword [rbp + 0xf0]
add ax, 6
lea edx, [rcx - 0x25]
xor ax, dx
mov word [rbp + 0x100], ax
mov eax, dword [rbp + 0xf0]
add ax, 7
xor ax, 0x2a
mov word [rbp + 0x102], ax
mov eax, dword [rbp + 0xf0]
add ax, 8
xor ax, dx
mov word [rbp + 0x104], ax
mov eax, dword [rbp + 0xf0]
add ax, 9
xor ax, 0x46
mov word [rbp + 0x106], ax
mov eax, dword [rbp + 0xf0]
add ax, 0xa
xor ax, 0x52
mov word [rbp + 0x108], ax
mov eax, dword [rbp + 0xf0]
add ax, 0xb
xor ax, 0x4f
mov word [rbp + 0x10a], ax
mov eax, dword [rbp + 0xf0]
add ax, 0xc
lea r8d, [rcx + 8]
xor ax, r8w
mov word [rbp + 0x10c], ax
mov eax, dword [rbp + 0xf0]
add ax, 0xd
xor ax, dx
mov word [rbp + 0x10e], ax
mov eax, dword [rbp + 0xf0]
add ax, 0xe
xor ax, 0x57
mov word [rbp + 0x110], ax
mov eax, dword [rbp + 0xf0]
add ax, 0xf
lea r9d, [rcx + 0x24]
xor ax, r9w
mov word [rbp + 0x112], ax
mov eax, dword [rbp + 0xf0]
add ax, 0x10
xor ax, 0x6e
mov word [rbp + 0x114], ax
mov eax, dword [rbp + 0xf0]
add ax, 0x11
xor ax, 0x33
mov word [rbp + 0x116], ax
mov eax, dword [rbp + 0xf0]
add ax, 0x12
xor ax, 0x32
mov word [rbp + 0x118], ax
mov eax, dword [rbp + 0xf0]
add ax, 0x13
xor ax, 0x5f
mov word [rbp + 0x11a], ax
mov eax, dword [rbp + 0xf0]
add ax, 0x14
xor ax, 0x50
mov word [rbp + 0x11c], ax
mov eax, dword [rbp + 0xf0]
add ax, 0x15
xor ax, 0x68
mov word [rbp + 0x11e], ax
mov eax, dword [rbp + 0xf0]
add ax, 0x16
xor ax, 0x79
mov word [rbp + 0x120], ax
mov eax, dword [rbp + 0xf0]
add ax, 0x17
xor ax, 0x73
mov word [rbp + 0x122], ax
mov eax, dword [rbp + 0xf0]
add ax, 0x18
xor ax, r9w
mov word [rbp + 0x124], ax
mov eax, dword [rbp + 0xf0]
add ax, 0x19
xor ax, 0x63
mov word [rbp + 0x126], ax
mov eax, dword [rbp + 0xf0]
add ax, 0x1a
xor ax, 0x61
mov word [rbp + 0x128], ax
mov eax, dword [rbp + 0xf0]
add ax, 0x1b
xor ax, 0x6c
mov word [rbp + 0x12a], ax
mov eax, dword [rbp + 0xf0]
add ax, 0x1c
xor ax, r8w
mov word [rbp + 0x12c], ax
mov eax, dword [rbp + 0xf0]
add ax, 0x1d
xor ax, 0x65
mov word [rbp + 0x12e], ax
mov eax, dword [rbp + 0xf0]
add ax, 0x1e
xor ax, 0x6d
mov word [rbp + 0x130], ax
mov eax, dword [rbp + 0xf0]
add ax, 0x1f
xor ax, 0x6f
mov word [rbp + 0x132], ax
mov eax, dword [rbp + 0xf0]
add ax, dx
xor ax, 0x72
mov word [rbp + 0x134], ax
mov eax, dword [rbp + 0xf0]
add ax, 0x21
xor ax, 0x79
mov word [rbp + 0x136], ax
xor eax, eax
mov word [rbp + 0x138], ax
movzx eax, word [rbp + 0xf4]
mov rdx, r12
lea r12d, [rcx - 0x23]
movzx eax, word [rbp + rdx*2 + 0xf4]
mov ecx, dword [rbp + 0xf0]
add cx, dx
xor cx, ax
mov word [rbp + rdx*2 + 0xf4], cx
add rdx, r13
cmp rdx, r12
jb 0x180033e93
xor r12d, r12d
mov word [rbp + 0x138], r12w
xorps xmm0, xmm0
movups xmmword [rbp + 0x488], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x498], xmm1
lea rax, [rbp + 0xf4]
mov r8, r14
inc r8
cmp word [rax + r8*2], r12w
jne 0x180033ee1
lea rdx, [rbp + 0xf4]
lea rcx, [rbp + 0x488]
call fcn.18000c67c
nop
lea rdx, [rbp + 0x488]
mov rcx, r15
call fcn.18003906c
mov ebx, eax
mov rdx, qword [rbp + 0x4a0]
mov eax, 8
cmp rdx, rax
jb 0x180033f62
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x488]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180033f5d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
mov r8d, 0x1f
cmp rax, r8
jbe 0x180033f5d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165920]
movdqu xmmword [rbp + 0x498], xmm0
mov word [rbp + 0x488], r12w
xor edx, edx
lea r8d, [rdx + 0x46]
lea rcx, [rbp + 0xf4]
call qword [sym.imp.VCRUNTIME140.dll_memset]
cmp ebx, r13d
jae 0x180033f95
add rdi, r13
mov eax, 9
mov dword [rbp + 0x2b8], eax
mov eax, 0x5a
mov word [rbp + 0x2bc], ax
lea ecx, [rax - 0xe]
mov word [rbp + 0x2be], cx
lea eax, [rcx - 7]
mov word [rbp + 0x2c0], ax
mov word [rbp + 0x2c2], cx
lea eax, [rcx - 2]
mov word [rbp + 0x2c4], ax
lea eax, [rcx + 0x11]
mov word [rbp + 0x2c6], ax
lea eax, [rcx - 0x23]
mov word [rbp + 0x2c8], ax
lea ecx, [rax - 6]
mov word [rbp + 0x2ca], cx
mov word [rbp + 0x2cc], ax
lea ecx, [rax + 0x26]
mov word [rbp + 0x2ce], cx
lea ecx, [rax + 0x32]
mov word [rbp + 0x2d0], cx
lea ecx, [rax + 0x1d]
mov word [rbp + 0x2d2], cx
lea edx, [rax + 0x1b]
mov word [rbp + 0x2d4], dx
mov word [rbp + 0x2d6], ax
lea eax, [rcx + 0x18]
mov word [rbp + 0x2d8], ax
lea ecx, [rdx + 0x1c]
mov word [rbp + 0x2da], cx
lea eax, [rdx + 0x23]
mov word [rbp + 0x2dc], ax
lea eax, [rdx - 0xa]
mov word [rbp + 0x2de], ax
lea eax, [rdx - 9]
mov word [rbp + 0x2e0], ax
lea eax, [rdx + 0x12]
mov word [rbp + 0x2e2], ax
mov word [rbp + 0x2e4], dx
lea edx, [rcx + 0xc]
mov word [rbp + 0x2e6], dx
lea eax, [rcx + 4]
mov word [rbp + 0x2e8], ax
lea eax, [rcx + 6]
mov word [rbp + 0x2ea], ax
lea eax, [rcx + 0x1b]
mov word [rbp + 0x2ec], ax
lea eax, [rcx + 0x10]
mov word [rbp + 0x2ee], ax
lea eax, [rcx - 0x13]
mov word [rbp + 0x2f0], ax
mov word [rbp + 0x2f2], dx
lea eax, [rcx + 0x1f]
mov word [rbp + 0x2f4], ax
mov word [rbp + 0x2f6], cx
lea eax, [rcx + 0xa]
mov word [rbp + 0x2f8], ax
mov word [rbp + 0x2fa], dx
xor eax, eax
mov word [rbp + 0x2fc], ax
movzx eax, word [rbp + 0x2bc]
mov rdx, r12
lea r8d, [rcx - 0x40]
movzx eax, word [rbp + rdx*2 + 0x2bc]
mov ecx, dword [rbp + 0x2b8]
xor cx, ax
mov word [rbp + rdx*2 + 0x2bc], cx
add rdx, r13
cmp rdx, r8
jb 0x1800340e4
mov word [rbp + 0x2fc], r12w
xorps xmm0, xmm0
movups xmmword [rbp + 0x4a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4b8], xmm1
lea rax, [rbp + 0x2bc]
mov r8, r14
inc r8
cmp word [rax + r8*2], r12w
jne 0x18003412c
lea rdx, [rbp + 0x2bc]
lea rcx, [rbp + 0x4a8]
call fcn.18000c67c
nop
lea rdx, [rbp + 0x4a8]
mov rcx, r15
call fcn.18003906c
mov ebx, eax
mov rdx, qword [rbp + 0x4c0]
mov eax, 8
cmp rdx, rax
jb 0x1800341ad
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x4a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800341a8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
mov r8d, 0x1f
cmp rax, r8
jbe 0x1800341a8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165920]
movdqu xmmword [rbp + 0x4b8], xmm0
mov word [rbp + 0x4a8], r12w
xor edx, edx
lea r8d, [rdx + 0x42]
lea rcx, [rbp + 0x2bc]
call qword [sym.imp.VCRUNTIME140.dll_memset]
cmp ebx, r13d
jae 0x1800341e0
add rdi, r13
mov eax, 0x5b
mov word [rbp + 0x22c], ax
mov eax, 0x4d
mov word [rbp + 0x22e], ax
lea ecx, [rax + 7]
mov word [rbp + 0x230], cx
mov word [rbp + 0x232], ax
lea eax, [rcx - 9]
mov word [rbp + 0x234], ax
lea eax, [rcx + 8]
mov word [rbp + 0x236], ax
lea ecx, [rax - 0x34]
mov word [rbp + 0x238], cx
lea eax, [rcx + 0xa]
mov word [rbp + 0x23a], ax
mov word [rbp + 0x23c], cx
lea eax, [rcx + 0x26]
mov word [rbp + 0x23e], ax
lea eax, [rcx + 0x32]
mov word [rbp + 0x240], ax
lea eax, [rcx + 0x2f]
mov word [rbp + 0x242], ax
lea edx, [rcx + 0x2d]
mov word [rbp + 0x244], dx
mov word [rbp + 0x246], cx
lea eax, [rcx + 0x37]
mov word [rbp + 0x248], ax
lea eax, [rcx + 0x49]
mov word [rbp + 0x24a], ax
lea eax, [rcx + 0x4e]
mov word [rbp + 0x24c], ax
lea eax, [rcx + 0x13]
mov word [rbp + 0x24e], ax
lea eax, [rcx + 0x12]
mov word [rbp + 0x250], ax
lea eax, [rcx + 0x3f]
mov word [rbp + 0x252], ax
mov word [rbp + 0x254], dx
lea eax, [rcx + 0x45]
mov word [rbp + 0x256], ax
lea eax, [rcx + 0x4d]
mov word [rbp + 0x258], ax
lea eax, [rcx + 0x4f]
mov word [rbp + 0x25a], ax
lea ecx, [rdx + 0x25]
mov word [rbp + 0x25c], cx
lea eax, [rdx + 0x2c]
mov word [rbp + 0x25e], ax
lea r10d, [rdx - 0xc]
mov word [rbp + 0x260], r10w
mov word [rbp + 0x262], cx
mov word [rbp + 0x264], cx
lea ecx, [rdx + 0x14]
mov word [rbp + 0x266], cx
mov word [rbp + 0x268], ax
mov word [rbp + 0x26a], r12w
movzx eax, word [rbp + 0x22c]
mov rcx, r12
lea r12d, [rdx - 0x36]
lea r8d, [rdx - 0x4d]
movzx eax, word [rbp + rcx*2 + 0x22c]
sub ax, r8w
mov word [rbp + rcx*2 + 0x22c], ax
add rcx, r13
cmp rcx, r12
jb 0x180034321
xorps xmm0, xmm0
movups xmmword [rbp + 0x4c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4d8], xmm1
lea rax, [rbp + 0x22c]
mov r8, r14
xor r12d, r12d
inc r8
cmp word [rax + r8*2], r12w
jne 0x18003435f
lea rdx, [rbp + 0x22c]
lea rcx, [rbp + 0x4c8]
call fcn.18000c67c
nop
lea rdx, [rbp + 0x4c8]
mov rcx, r15
call fcn.18003906c
mov ebx, eax
mov rdx, qword [rbp + 0x4e0]
mov eax, 8
cmp rdx, rax
jb 0x1800343e0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x4c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800343db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
mov r8d, 0x1f
cmp rax, r8
jbe 0x1800343db
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165920]
movdqu xmmword [rbp + 0x4d8], xmm0
mov word [rbp + 0x4c8], r12w
xor edx, edx
lea r8d, [rdx + 0x40]
lea rcx, [rbp + 0x22c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
cmp ebx, r13d
jae 0x180034413
add rdi, r13
mov eax, 0x1f
mov dword [rbp + 0x300], eax
mov eax, 0x4c
mov word [rbp + 0x304], ax
mov eax, 0x5a
mov word [rbp + 0x306], ax
lea ecx, [rax - 7]
mov word [rbp + 0x308], cx
mov word [rbp + 0x30a], ax
lea eax, [rcx + 9]
mov word [rbp + 0x30c], ax
lea ecx, [rax - 0x11]
mov word [rbp + 0x30e], cx
lea ecx, [rax - 0x1d]
mov word [rbp + 0x310], cx
lea eax, [rcx - 0xa]
mov word [rbp + 0x312], ax
mov word [rbp + 0x314], cx
lea eax, [rcx + 0x1a]
mov word [rbp + 0x316], ax
lea eax, [rcx + 0xe]
mov word [rbp + 0x318], ax
lea eax, [rcx + 0x11]
mov word [rbp + 0x31a], ax
lea eax, [rcx + 0x13]
mov word [rbp + 0x31c], ax
mov word [rbp + 0x31e], cx
lea eax, [rcx + 9]
mov word [rbp + 0x320], ax
lea eax, [rcx + 0x37]
mov word [rbp + 0x322], ax
lea eax, [rcx + 0x32]
mov word [rbp + 0x324], ax
lea eax, [rcx - 0x13]
mov word [rbp + 0x326], ax
lea eax, [rcx - 0x12]
mov word [rbp + 0x328], ax
lea eax, [rcx + 1]
mov word [rbp + 0x32a], ax
lea eax, [rcx + 0xa]
mov word [rbp + 0x32c], ax
lea ecx, [rax + 0x27]
mov word [rbp + 0x32e], cx
lea eax, [rcx + 3]
mov word [rbp + 0x330], ax
lea eax, [rcx - 5]
mov word [rbp + 0x332], ax
lea eax, [rcx + 0xe]
mov word [rbp + 0x334], ax
lea eax, [rcx + 8]
mov word [rbp + 0x336], ax
lea edx, [rcx + 0xa]
mov word [rbp + 0x338], dx
lea eax, [rcx - 0x21]
mov word [rbp + 0x33a], ax
lea eax, [rcx - 3]
mov word [rbp + 0x33c], ax
mov word [rbp + 0x33e], cx
lea eax, [rcx + 0xd]
mov word [rbp + 0x340], ax
mov word [rbp + 0x342], dx
xor eax, eax
mov word [rbp + 0x344], ax
movzx eax, word [rbp + 0x304]
mov rdx, r12
lea r12d, [rcx - 0x50]
movzx eax, word [rbp + rdx*2 + 0x304]
mov ecx, dword [rbp + 0x300]
xor cx, ax
mov word [rbp + rdx*2 + 0x304], cx
add rdx, r13
cmp rdx, r12
jb 0x18003456a
xor r12d, r12d
mov word [rbp + 0x344], r12w
xorps xmm0, xmm0
movups xmmword [rbp + 0x4e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4f8], xmm1
lea rax, [rbp + 0x304]
mov r8, r14
inc r8
cmp word [rax + r8*2], r12w
jne 0x1800345b5
lea rdx, [rbp + 0x304]
lea rcx, [rbp + 0x4e8]
call fcn.18000c67c
nop
lea rdx, [rbp + 0x4e8]
mov rcx, r15
call fcn.18003906c
mov ebx, eax
mov rdx, qword [rbp + 0x500]
mov eax, 8
cmp rdx, rax
jb 0x180034636
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x4e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180034631
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
mov r8d, 0x1f
cmp rax, r8
jbe 0x180034631
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165920]
movdqu xmmword [rbp + 0x4f8], xmm0
mov word [rbp + 0x4e8], r12w
xor edx, edx
lea r8d, [rdx + 0x42]
lea rcx, [rbp + 0x304]
call qword [sym.imp.VCRUNTIME140.dll_memset]
cmp ebx, r13d
jae 0x180034669
add rdi, r13
mov eax, 0x76
mov dword [rbp + 0x24], eax
mov eax, dword [rbp + 0x24]
xor ax, 0x53
mov word [rbp + 0x28], ax
mov eax, dword [rbp + 0x24]
add ax, r13w
mov ecx, 0x45
xor ax, cx
mov word [rbp + 0x2a], ax
mov eax, dword [rbp + 0x24]
add ax, 2
xor ax, 0x4c
mov word [rbp + 0x2c], ax
mov eax, dword [rbp + 0x24]
add ax, 3
xor ax, cx
mov word [rbp + 0x2e], ax
mov eax, dword [rbp + 0x24]
add ax, 4
xor ax, 0x43
mov word [rbp + 0x30], ax
mov eax, dword [rbp + 0x24]
add ax, 5
xor ax, 0x54
mov word [rbp + 0x32], ax
mov eax, dword [rbp + 0x24]
add ax, 6
lea edx, [rcx - 0x25]
xor ax, dx
mov word [rbp + 0x34], ax
mov eax, dword [rbp + 0x24]
add ax, 7
xor ax, 0x2a
mov word [rbp + 0x36], ax
mov eax, dword [rbp + 0x24]
add ax, 8
xor ax, dx
mov word [rbp + 0x38], ax
mov eax, dword [rbp + 0x24]
add ax, 9
xor ax, 0x46
mov word [rbp + 0x3a], ax
mov eax, dword [rbp + 0x24]
add ax, 0xa
xor ax, 0x52
mov word [rbp + 0x3c], ax
mov eax, dword [rbp + 0x24]
add ax, 0xb
xor ax, 0x4f
mov word [rbp + 0x3e], ax
mov eax, dword [rbp + 0x24]
add ax, 0xc
xor ax, 0x4d
mov word [rbp + 0x40], ax
mov eax, dword [rbp + 0x24]
add ax, 0xd
xor ax, dx
mov word [rbp + 0x42], ax
mov eax, dword [rbp + 0x24]
add ax, 0xe
xor ax, 0x57
mov word [rbp + 0x44], ax
mov eax, dword [rbp + 0x24]
add ax, 0xf
xor ax, 0x69
mov word [rbp + 0x46], ax
mov eax, dword [rbp + 0x24]
add ax, 0x10
lea r8d, [rcx + 0x29]
xor ax, r8w
mov word [rbp + 0x48], ax
mov eax, dword [rbp + 0x24]
add ax, 0x11
xor ax, 0x33
mov word [rbp + 0x4a], ax
mov eax, dword [rbp + 0x24]
add ax, 0x12
xor ax, 0x32
mov word [rbp + 0x4c], ax
mov eax, dword [rbp + 0x24]
add ax, 0x13
xor ax, 0x5f
mov word [rbp + 0x4e], ax
mov eax, dword [rbp + 0x24]
add ax, 0x14
xor ax, 0x50
mov word [rbp + 0x50], ax
mov eax, dword [rbp + 0x24]
add ax, 0x15
lea r9d, [rcx + 0x2a]
xor ax, r9w
mov word [rbp + 0x52], ax
mov eax, dword [rbp + 0x24]
add ax, 0x16
lea r10d, [rcx + 0x2d]
xor ax, r10w
mov word [rbp + 0x54], ax
mov eax, dword [rbp + 0x24]
add ax, 0x17
lea r11d, [rcx + 0x2f]
xor ax, r11w
mov word [rbp + 0x56], ax
mov eax, dword [rbp + 0x24]
add ax, 0x18
xor ax, 0x43
mov word [rbp + 0x58], ax
mov eax, dword [rbp + 0x24]
add ax, 0x19
xor ax, r9w
mov word [rbp + 0x5a], ax
mov eax, dword [rbp + 0x24]
add ax, 0x1a
xor ax, r8w
mov word [rbp + 0x5c], ax
mov eax, dword [rbp + 0x24]
add ax, 0x1b
xor ax, r8w
mov word [rbp + 0x5e], ax
mov eax, dword [rbp + 0x24]
add ax, 0x1c
xor ax, 0x65
mov word [rbp + 0x60], ax
mov eax, dword [rbp + 0x24]
add ax, 0x1d
xor ax, 0x63
mov word [rbp + 0x62], ax
mov eax, dword [rbp + 0x24]
add ax, 0x1e
xor ax, r11w
mov word [rbp + 0x64], ax
mov eax, dword [rbp + 0x24]
add ax, 0x1f
xor ax, r9w
mov word [rbp + 0x66], ax
mov eax, dword [rbp + 0x24]
add ax, dx
xor ax, r10w
mov word [rbp + 0x68], ax
xor eax, eax
mov word [rbp + 0x6a], ax
movzx eax, word [rbp + 0x28]
mov rdx, r12
lea r12d, [rcx - 0x24]
movzx eax, word [rbp + rdx*2 + 0x28]
mov ecx, dword [rbp + 0x24]
add cx, dx
xor cx, ax
mov word [rbp + rdx*2 + 0x28], cx
add rdx, r13
cmp rdx, r12
jb 0x18003487f
xor r12d, r12d
mov word [rbp + 0x6a], r12w
xorps xmm0, xmm0
movups xmmword [rbp + 0x508], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x518], xmm1
lea rax, [rbp + 0x28]
mov r8, r14
inc r8
cmp word [rax + r8*2], r12w
jne 0x1800348be
lea rdx, [rbp + 0x28]
lea rcx, [rbp + 0x508]
call fcn.18000c67c
nop
lea rdx, [rbp + 0x508]
mov rcx, r15
call fcn.18003906c
mov ebx, eax
mov rdx, qword [rbp + 0x520]
mov eax, 8
cmp rdx, rax
jb 0x18003493c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x508]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180034937
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
mov r8d, 0x1f
cmp rax, r8
jbe 0x180034937
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165920]
movdqu xmmword [rbp + 0x518], xmm0
mov word [rbp + 0x508], r12w
xor edx, edx
lea r8d, [rdx + 0x44]
lea rcx, [rbp + 0x28]
call qword [sym.imp.VCRUNTIME140.dll_memset]
cmp ebx, r13d
jae 0x18003496c
add rdi, r13
mov dword [rbp + 0x348], 0x38
mov edx, 0x6b
mov word [rbp + 0x34c], dx
lea eax, [rdx + 0x12]
mov word [rbp + 0x34e], ax
lea r9d, [rdx + 9]
mov word [rbp + 0x350], r9w
mov word [rbp + 0x352], ax
lea eax, [rdx + 0x10]
mov word [rbp + 0x354], ax
lea eax, [rdx + 1]
mov word [rbp + 0x356], ax
lea r8d, [rdx - 0x53]
mov word [rbp + 0x358], r8w
lea eax, [rdx - 0x59]
mov word [rbp + 0x35a], ax
mov word [rbp + 0x35c], r8w
lea eax, [rdx + 0x13]
mov word [rbp + 0x35e], ax
lea eax, [rdx - 1]
mov word [rbp + 0x360], ax
lea ecx, [rdx + 0xc]
mov word [rbp + 0x362], cx
lea r9d, [rdx + 0xa]
mov word [rbp + 0x364], r9w
mov word [rbp + 0x366], r8w
lea eax, [rdx + 4]
mov word [rbp + 0x368], ax
lea eax, [rdx - 0x1a]
mov word [rbp + 0x36a], ax
lea eax, [rdx - 0x15]
mov word [rbp + 0x36c], ax
lea eax, [rdx - 0x60]
mov word [rbp + 0x36e], ax
lea eax, [rdx - 0x61]
mov word [rbp + 0x370], ax
lea eax, [rdx - 4]
mov word [rbp + 0x372], ax
mov word [rbp + 0x374], dx
mov word [rbp + 0x376], r9w
lea eax, [rdx + 0xf]
mov word [rbp + 0x378], ax
lea eax, [rdx + 6]
mov word [rbp + 0x37a], ax
mov word [rbp + 0x37c], cx
mov word [rbp + 0x37e], dx
mov word [rbp + 0x380], r9w
lea eax, [rdx - 0xe]
mov word [rbp + 0x382], ax
lea ecx, [rdx - 0x16]
mov word [rbp + 0x384], cx
lea eax, [rdx - 0x14]
mov word [rbp + 0x386], ax
lea eax, [rdx - 0x21]
mov word [rbp + 0x388], ax
lea eax, [rdx - 0x2a]
mov word [rbp + 0x38a], ax
xor eax, eax
mov word [rbp + 0x38c], ax
movzx eax, word [rbp + 0x34c]
mov rdx, r12
lea r12d, [r8 + 8]
movzx eax, word [rbp + rdx*2 + 0x34c]
mov ecx, dword [rbp + 0x348]
xor cx, ax
mov word [rbp + rdx*2 + 0x34c], cx
add rdx, r13
cmp rdx, r12
jb 0x180034ac1
xor r12d, r12d
mov word [rbp + 0x38c], r12w
xorps xmm0, xmm0
movups xmmword [rbp + 0x528], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x538], xmm1
lea rax, [rbp + 0x34c]
mov r8, r14
inc r8
cmp word [rax + r8*2], r12w
jne 0x180034b0c
lea rdx, [rbp + 0x34c]
lea rcx, [rbp + 0x528]
call fcn.18000c67c
nop
lea rdx, [rbp + 0x528]
mov rcx, r15
call fcn.18003906c
mov ebx, eax
mov rdx, qword [rbp + 0x540]
mov eax, 8
cmp rdx, rax
jb 0x180034b8d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x528]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180034b88
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
mov r8d, 0x1f
cmp rax, r8
jbe 0x180034b88
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165920]
movdqu xmmword [rbp + 0x538], xmm0
mov word [rbp + 0x528], r12w
xor edx, edx
lea r8d, [rdx + 0x42]
lea rcx, [rbp + 0x34c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
cmp ebx, r13d
jae 0x180034bc0
add rdi, r13
mov dword [rbp + 0x1e8], 0x42
mov edx, 0x11
mov word [rbp + 0x1ec], dx
lea eax, [rdx - 0xa]
mov word [rbp + 0x1ee], ax
lea ecx, [rdx - 3]
mov word [rbp + 0x1f0], cx
mov word [rbp + 0x1f2], ax
mov word [rbp + 0x1f4], r13w
lea eax, [rdx + 5]
mov word [rbp + 0x1f6], ax
lea eax, [rdx + 0x51]
mov word [rbp + 0x1f8], ax
lea ecx, [rdx + 0x57]
mov word [rbp + 0x1fa], cx
mov word [rbp + 0x1fc], ax
lea ecx, [rdx - 0xd]
mov word [rbp + 0x1fe], cx
lea ecx, [rdx - 1]
mov word [rbp + 0x200], cx
lea ecx, [rdx - 4]
mov word [rbp + 0x202], cx
lea ecx, [rdx - 2]
mov word [rbp + 0x204], cx
mov word [rbp + 0x206], ax
mov word [rbp + 0x208], r13w
lea eax, [rdx - 6]
mov word [rbp + 0x20a], ax
mov word [rbp + 0x20c], cx
lea eax, [rdx + 0xc]
mov word [rbp + 0x20e], ax
lea eax, [rdx + 3]
mov word [rbp + 0x210], ax
lea ecx, [rdx + 0x1c]
mov word [rbp + 0x212], cx
lea eax, [rdx + 0x1d]
mov word [rbp + 0x214], ax
lea eax, [rdx + 0x25]
mov word [rbp + 0x216], ax
lea eax, [rdx + 0x12]
mov word [rbp + 0x218], ax
lea eax, [rdx + 0x14]
mov word [rbp + 0x21a], ax
lea eax, [rdx + 0x16]
mov word [rbp + 0x21c], ax
mov word [rbp + 0x21e], dx
mov word [rbp + 0x220], ax
lea eax, [rdx + 0x1b]
mov word [rbp + 0x222], ax
lea eax, [rdx + 0x20]
mov word [rbp + 0x224], ax
mov word [rbp + 0x226], cx
lea eax, [rdx + 0x1f]
mov word [rbp + 0x228], ax
xor eax, eax
mov word [rbp + 0x22a], ax
movzx eax, word [rbp + 0x1ec]
mov rdx, r12
lea r12d, [rcx - 0xe]
movzx eax, word [rbp + rdx*2 + 0x1ec]
mov ecx, dword [rbp + 0x1e8]
xor cx, ax
mov word [rbp + rdx*2 + 0x1ec], cx
add rdx, r13
cmp rdx, r12
jb 0x180034d00
xor r12d, r12d
mov word [rbp + 0x22a], r12w
xorps xmm0, xmm0
movups xmmword [rbp + 0x548], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x558], xmm1
lea rax, [rbp + 0x1ec]
mov r8, r14
inc r8
cmp word [rax + r8*2], r12w
jne 0x180034d4b
lea rdx, [rbp + 0x1ec]
lea rcx, [rbp + 0x548]
call fcn.18000c67c
nop
lea rdx, [rbp + 0x548]
mov rcx, r15
call fcn.18003906c
mov ebx, eax
mov rdx, qword [rbp + 0x560]
mov eax, 8
cmp rdx, rax
jb 0x180034dcc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x548]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180034dc7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
mov r8d, 0x1f
cmp rax, r8
jbe 0x180034dc7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165920]
movdqu xmmword [rbp + 0x558], xmm0
mov word [rbp + 0x548], r12w
xor edx, edx
lea r8d, [rdx + 0x40]
lea rcx, [rbp + 0x1ec]
call qword [sym.imp.VCRUNTIME140.dll_memset]
cmp ebx, r13d
jae 0x180034dff
add rdi, r13
mov eax, 0x66
mov dword [rbp + 0xb8], eax
mov eax, dword [rbp + 0xb8]
xor ax, 0x53
mov word [rbp + 0xbc], ax
mov eax, dword [rbp + 0xb8]
add ax, r13w
mov ecx, 0x45
xor ax, cx
mov word [rbp + 0xbe], ax
mov eax, dword [rbp + 0xb8]
add ax, 2
xor ax, 0x4c
mov word [rbp + 0xc0], ax
mov eax, dword [rbp + 0xb8]
add ax, 3
xor ax, cx
mov word [rbp + 0xc2], ax
mov eax, dword [rbp + 0xb8]
add ax, 4
xor ax, 0x43
mov word [rbp + 0xc4], ax
mov eax, dword [rbp + 0xb8]
add ax, 5
xor ax, 0x54
mov word [rbp + 0xc6], ax
mov eax, dword [rbp + 0xb8]
add ax, 6
lea edx, [rcx - 0x25]
xor ax, dx
mov word [rbp + 0xc8], ax
mov eax, dword [rbp + 0xb8]
add ax, 7
xor ax, 0x2a
mov word [rbp + 0xca], ax
mov eax, dword [rbp + 0xb8]
add ax, 8
xor ax, dx
mov word [rbp + 0xcc], ax
mov eax, dword [rbp + 0xb8]
add ax, 9
xor ax, 0x46
mov word [rbp + 0xce], ax
mov eax, dword [rbp + 0xb8]
add ax, 0xa
xor ax, 0x52
mov word [rbp + 0xd0], ax
mov eax, dword [rbp + 0xb8]
add ax, 0xb
xor ax, 0x4f
mov word [rbp + 0xd2], ax
mov eax, dword [rbp + 0xb8]
add ax, 0xc
lea r8d, [rcx + 8]
xor ax, r8w
mov word [rbp + 0xd4], ax
mov eax, dword [rbp + 0xb8]
add ax, 0xd
xor ax, dx
mov word [rbp + 0xd6], ax
mov eax, dword [rbp + 0xb8]
add ax, 0xe
xor ax, 0x43
mov word [rbp + 0xd8], ax
mov eax, dword [rbp + 0xb8]
add ax, 0xf
xor ax, 0x49
mov word [rbp + 0xda], ax
mov eax, dword [rbp + 0xb8]
add ax, 0x10
xor ax, r8w
mov word [rbp + 0xdc], ax
mov eax, dword [rbp + 0xb8]
add ax, 0x11
xor ax, 0x5f
mov word [rbp + 0xde], ax
mov eax, dword [rbp + 0xb8]
add ax, 0x12
xor ax, r8w
mov word [rbp + 0xe0], ax
mov eax, dword [rbp + 0xb8]
add ax, 0x13
xor ax, 0x65
mov word [rbp + 0xe2], ax
mov eax, dword [rbp + 0xb8]
add ax, 0x14
xor ax, 0x6d
mov word [rbp + 0xe4], ax
mov eax, dword [rbp + 0xb8]
add ax, 0x15
xor ax, 0x6f
mov word [rbp + 0xe6], ax
mov eax, dword [rbp + 0xb8]
add ax, 0x16
xor ax, 0x72
mov word [rbp + 0xe8], ax
mov eax, dword [rbp + 0xb8]
add ax, 0x17
xor ax, 0x79
mov word [rbp + 0xea], ax
xor eax, eax
mov word [rbp + 0xec], ax
movzx eax, word [rbp + 0xbc]
mov rdx, r12
lea r12d, [rcx - 0x2d]
movzx eax, word [rbp + rdx*2 + 0xbc]
mov ecx, dword [rbp + 0xb8]
add cx, dx
xor cx, ax
mov word [rbp + rdx*2 + 0xbc], cx
add rdx, r13
cmp rdx, r12
jb 0x18003501c
xor r12d, r12d
mov word [rbp + 0xec], r12w
xorps xmm0, xmm0
movups xmmword [rbp + 0x568], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x578], xmm1
lea rax, [rbp + 0xbc]
mov r8, r14
inc r8
cmp word [rax + r8*2], r12w
jne 0x18003506a
lea rdx, [rbp + 0xbc]
lea rcx, [rbp + 0x568]
call fcn.18000c67c
nop
lea rdx, [rbp + 0x568]
mov rcx, r15
call fcn.18003906c
mov ebx, eax
mov rdx, qword [rbp + 0x580]
mov eax, 8
cmp rdx, rax
jb 0x1800350eb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x568]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800350e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
mov r8d, 0x1f
cmp rax, r8
jbe 0x1800350e6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165920]
movdqu xmmword [rbp + 0x578], xmm0
mov word [rbp + 0x568], r12w
xor edx, edx
lea r8d, [rdx + 0x32]
lea rcx, [rbp + 0xbc]
call qword [sym.imp.VCRUNTIME140.dll_memset]
cmp ebx, r13d
jae 0x18003511e
add rdi, r13
mov eax, 0x56
mov dword [rbp - 0x20], eax
mov eax, dword [rbp - 0x20]
mov r9d, 0x53
xor ax, r9w
mov word [rbp - 0x1c], ax
mov eax, dword [rbp - 0x20]
add ax, r13w
lea ecx, [r9 - 0xe]
xor ax, cx
mov word [rbp - 0x1a], ax
mov eax, dword [rbp - 0x20]
add ax, 2
xor ax, 0x4c
mov word [rbp - 0x18], ax
mov eax, dword [rbp - 0x20]
add ax, 3
xor ax, cx
mov word [rbp - 0x16], ax
mov eax, dword [rbp - 0x20]
add ax, 4
xor ax, 0x43
mov word [rbp - 0x14], ax
mov eax, dword [rbp - 0x20]
add ax, 5
xor ax, 0x54
mov word [rbp - 0x12], ax
mov eax, dword [rbp - 0x20]
add ax, 6
lea edx, [rcx - 0x25]
xor ax, dx
mov word [rbp - 0x10], ax
mov eax, dword [rbp - 0x20]
add ax, 7
xor ax, 0x2a
mov word [rbp - 0xe], ax
mov eax, dword [rbp - 0x20]
add ax, 8
xor ax, dx
mov word [rbp - 0xc], ax
mov eax, dword [rbp - 0x20]
add ax, 9
xor ax, 0x46
mov word [rbp - 0xa], ax
mov eax, dword [rbp - 0x20]
add ax, 0xa
xor ax, 0x52
mov word [rbp - 8], ax
mov eax, dword [rbp - 0x20]
add ax, 0xb
xor ax, 0x4f
mov word [rbp - 6], ax
mov eax, dword [rbp - 0x20]
add ax, 0xc
lea r8d, [r9 - 6]
xor ax, r8w
mov word [rbp - 4], ax
mov eax, dword [rbp - 0x20]
add ax, 0xd
xor ax, dx
mov word [rbp - 2], ax
mov eax, dword [rbp - 0x20]
add ax, 0xe
xor ax, 0x43
mov word [rbp], ax
mov eax, dword [rbp - 0x20]
add ax, 0xf
xor ax, 0x49
mov word [rbp + 2], ax
mov eax, dword [rbp - 0x20]
add ax, 0x10
xor ax, r8w
mov word [rbp + 4], ax
mov eax, dword [rbp - 0x20]
add ax, 0x11
xor ax, 0x5f
mov word [rbp + 6], ax
mov eax, dword [rbp - 0x20]
add ax, 0x12
xor ax, 0x4e
mov word [rbp + 8], ax
mov eax, dword [rbp - 0x20]
add ax, 0x13
xor ax, 0x75
mov word [rbp + 0xa], ax
mov eax, dword [rbp - 0x20]
add ax, 0x14
xor ax, 0x6d
mov word [rbp + 0xc], ax
mov eax, dword [rbp - 0x20]
add ax, 0x15
xor ax, 0x65
mov word [rbp + 0xe], ax
mov eax, dword [rbp - 0x20]
add ax, 0x16
lea edx, [rcx + 0x2d]
xor ax, dx
mov word [rbp + 0x10], ax
mov eax, dword [rbp - 0x20]
add ax, 0x17
xor ax, 0x69
mov word [rbp + 0x12], ax
mov eax, dword [rbp - 0x20]
add ax, 0x18
xor ax, 0x63
mov word [rbp + 0x14], ax
mov eax, dword [rbp - 0x20]
add ax, 0x19
xor ax, r9w
mov word [rbp + 0x16], ax
mov eax, dword [rbp - 0x20]
add ax, 0x1a
xor ax, 0x65
mov word [rbp + 0x18], ax
mov eax, dword [rbp - 0x20]
add ax, 0x1b
xor ax, 0x6e
mov word [rbp + 0x1a], ax
mov eax, dword [rbp - 0x20]
add ax, 0x1c
xor ax, 0x73
mov word [rbp + 0x1c], ax
mov eax, dword [rbp - 0x20]
add ax, 0x1d
xor ax, 0x6f
mov word [rbp + 0x1e], ax
mov eax, dword [rbp - 0x20]
add ax, 0x1e
xor ax, dx
mov word [rbp + 0x20], ax
xor eax, eax
mov word [rbp + 0x22], ax
movzx eax, word [rbp - 0x1c]
mov rdx, r12
lea r12d, [r9 - 0x34]
movzx eax, word [rbp + rdx*2 - 0x1c]
mov ecx, dword [rbp - 0x20]
add cx, dx
xor cx, ax
mov word [rbp + rdx*2 - 0x1c], cx
add rdx, r13
cmp rdx, r12
jb 0x180035311
xor r12d, r12d
mov word [rbp + 0x22], r12w
xorps xmm0, xmm0
movups xmmword [rbp + 0x588], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x598], xmm1
lea rax, [rbp - 0x1c]
mov r8, r14
inc r8
cmp word [rax + r8*2], r12w
jne 0x180035350
lea rdx, [rbp - 0x1c]
lea rcx, [rbp + 0x588]
call fcn.18000c67c
nop
lea rdx, [rbp + 0x588]
mov rcx, r15
call fcn.18003906c
mov ebx, eax
mov rdx, qword [rbp + 0x5a0]
mov eax, 8
cmp rdx, rax
jb 0x1800353ce
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x588]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800353c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
mov r8d, 0x1f
cmp rax, r8
jbe 0x1800353c9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165920]
movdqu xmmword [rbp + 0x598], xmm0
mov word [rbp + 0x588], r12w
xor edx, edx
lea r8d, [rdx + 0x40]
lea rcx, [rbp - 0x1c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
cmp ebx, r13d
jae 0x1800353fe
add rdi, r13
mov r9d, 0xc
mov dword [rbp + 0x6c], r9d
mov eax, dword [rbp + 0x6c]
xor ax, 0x53
mov word [rbp + 0x70], ax
mov eax, dword [rbp + 0x6c]
add ax, r13w
lea ecx, [r9 + 0x39]
xor ax, cx
mov word [rbp + 0x72], ax
mov eax, dword [rbp + 0x6c]
add ax, 2
xor ax, 0x4c
mov word [rbp + 0x74], ax
mov eax, dword [rbp + 0x6c]
add ax, 3
xor ax, cx
mov word [rbp + 0x76], ax
mov eax, dword [rbp + 0x6c]
add ax, 4
xor ax, 0x43
mov word [rbp + 0x78], ax
mov eax, dword [rbp + 0x6c]
add ax, 5
xor ax, 0x54
mov word [rbp + 0x7a], ax
mov eax, dword [rbp + 0x6c]
add ax, 6
lea edx, [rcx - 0x25]
xor ax, dx
mov word [rbp + 0x7c], ax
mov eax, dword [rbp + 0x6c]
add ax, 7
xor ax, 0x2a
mov word [rbp + 0x7e], ax
mov eax, dword [rbp + 0x6c]
add ax, 8
xor ax, dx
mov word [rbp + 0x80], ax
mov eax, dword [rbp + 0x6c]
add ax, 9
xor ax, 0x46
mov word [rbp + 0x82], ax
mov eax, dword [rbp + 0x6c]
add ax, 0xa
xor ax, 0x52
mov word [rbp + 0x84], ax
mov eax, dword [rbp + 0x6c]
add ax, 0xb
xor ax, 0x4f
mov word [rbp + 0x86], ax
mov eax, dword [rbp + 0x6c]
add ax, r9w
lea r8d, [r9 + 0x41]
xor ax, r8w
mov word [rbp + 0x88], ax
mov eax, dword [rbp + 0x6c]
add ax, 0xd
xor ax, dx
mov word [rbp + 0x8a], ax
mov eax, dword [rbp + 0x6c]
add ax, 0xe
xor ax, 0x43
mov word [rbp + 0x8c], ax
mov eax, dword [rbp + 0x6c]
add ax, 0xf
xor ax, 0x49
mov word [rbp + 0x8e], ax
mov eax, dword [rbp + 0x6c]
add ax, 0x10
xor ax, r8w
mov word [rbp + 0x90], ax
mov eax, dword [rbp + 0x6c]
add ax, 0x11
xor ax, 0x5f
mov word [rbp + 0x92], ax
mov eax, dword [rbp + 0x6c]
add ax, 0x12
xor ax, 0x50
mov word [rbp + 0x94], ax
mov eax, dword [rbp + 0x6c]
add ax, 0x13
xor ax, 0x68
mov word [rbp + 0x96], ax
mov eax, dword [rbp + 0x6c]
add ax, 0x14
xor ax, 0x79
mov word [rbp + 0x98], ax
mov eax, dword [rbp + 0x6c]
add ax, 0x15
xor ax, 0x73
mov word [rbp + 0x9a], ax
mov eax, dword [rbp + 0x6c]
add ax, 0x16
xor ax, 0x69
mov word [rbp + 0x9c], ax
mov eax, dword [rbp + 0x6c]
add ax, 0x17
lea r9d, [rcx + 0x1e]
xor ax, r9w
mov word [rbp + 0x9e], ax
mov eax, dword [rbp + 0x6c]
add ax, 0x18
xor ax, 0x61
mov word [rbp + 0xa0], ax
mov eax, dword [rbp + 0x6c]
add ax, 0x19
xor ax, 0x6c
mov word [rbp + 0xa2], ax
mov eax, dword [rbp + 0x6c]
add ax, 0x1a
xor ax, 0x43
mov word [rbp + 0xa4], ax
mov eax, dword [rbp + 0x6c]
add ax, 0x1b
lea r8d, [rcx + 0x2a]
xor ax, r8w
mov word [rbp + 0xa6], ax
mov eax, dword [rbp + 0x6c]
add ax, 0x1c
lea ecx, [rdx + 0x4e]
xor ax, cx
mov word [rbp + 0xa8], ax
mov eax, dword [rbp + 0x6c]
add ax, 0x1d
xor ax, cx
mov word [rbp + 0xaa], ax
mov eax, dword [rbp + 0x6c]
add ax, 0x1e
xor ax, 0x65
mov word [rbp + 0xac], ax
mov eax, dword [rbp + 0x6c]
add ax, 0x1f
xor ax, r9w
mov word [rbp + 0xae], ax
mov eax, dword [rbp + 0x6c]
add ax, dx
xor ax, 0x74
mov word [rbp + 0xb0], ax
mov eax, dword [rbp + 0x6c]
add ax, 0x21
xor ax, r8w
mov word [rbp + 0xb2], ax
mov eax, dword [rbp + 0x6c]
add ax, 0x22
xor ax, 0x72
mov word [rbp + 0xb4], ax
xor eax, eax
mov word [rbp + 0xb6], ax
movzx eax, word [rbp + 0x70]
mov rdx, r12
lea r12d, [r9 - 0x40]
movzx eax, word [rbp + rdx*2 + 0x70]
mov ecx, dword [rbp + 0x6c]
add cx, dx
xor cx, ax
mov word [rbp + rdx*2 + 0x70], cx
add rdx, r13
cmp rdx, r12
jb 0x180035684
xor r12d, r12d
mov word [rbp + 0xb6], r12w
xorps xmm0, xmm0
movups xmmword [rbp + 0x3c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3d0], xmm1
lea rax, [rbp + 0x70]
mov r8, r14
inc r8
cmp word [rax + r8*2], r12w
jne 0x1800356c6
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x3c0]
call fcn.18000c67c
nop
lea rdx, [rbp + 0x3c0]
mov rcx, r15
call fcn.18003906c
mov ebx, eax
mov rdx, qword [rbp + 0x3d8]
mov eax, 8
cmp rdx, rax
jb 0x180035744
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003573f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
mov r8d, 0x1f
cmp rax, r8
jbe 0x18003573f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165920]
movdqu xmmword [rbp + 0x3d0], xmm0
mov word [rbp + 0x3c0], r12w
xor edx, edx
lea r8d, [rdx + 0x48]
lea rcx, [rbp + 0x70]
call qword [sym.imp.VCRUNTIME140.dll_memset]
cmp ebx, r13d
jae 0x180035774
add rdi, r13
mov r9d, 0x55
mov word [rbp + 0x13c], r9w
lea ecx, [r9 - 0xe]
mov word [rbp + 0x13e], cx
lea eax, [rcx + 7]
mov word [rbp + 0x140], ax
mov word [rbp + 0x142], cx
lea ecx, [rax - 9]
mov word [rbp + 0x144], cx
lea eax, [rcx + 0x11]
mov word [rbp + 0x146], ax
lea r8d, [r9 - 0x33]
mov word [rbp + 0x148], r8w
lea eax, [rcx - 0x19]
mov word [rbp + 0x14a], ax
mov word [rbp + 0x14c], r8w
lea eax, [rcx + 3]
mov word [rbp + 0x14e], ax
lea eax, [rcx + 0xf]
mov word [rbp + 0x150], ax
lea eax, [rcx + 0xc]
mov word [rbp + 0x152], ax
lea edx, [rcx + 0xa]
mov word [rbp + 0x154], dx
mov word [rbp + 0x156], r8w
mov word [rbp + 0x158], cx
lea eax, [rcx + 6]
mov word [rbp + 0x15a], ax
mov word [rbp + 0x15c], dx
lea eax, [rcx + 0x1c]
mov word [rbp + 0x15e], ax
mov word [rbp + 0x160], r9w
lea eax, [rcx + 0x22]
mov word [rbp + 0x162], ax
lea eax, [rcx + 0x2b]
mov word [rbp + 0x164], ax
lea eax, [rcx + 0x30]
mov word [rbp + 0x166], ax
lea eax, [rcx + 0x2c]
mov word [rbp + 0x168], ax
lea eax, [rcx + 0x2f]
mov word [rbp + 0x16a], ax
mov word [rbp + 0x16c], r12w
movzx eax, word [rbp + 0x13c]
mov rcx, r12
lea edx, [r9 - 0x53]
lea r12d, [r9 - 0x3d]
movzx eax, word [rbp + rcx*2 + 0x13c]
sub ax, dx
mov word [rbp + rcx*2 + 0x13c], ax
add rcx, r13
cmp rcx, r12
jb 0x180035876
xorps xmm0, xmm0
movups xmmword [rbp + 0x608], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x618], xmm1
lea rax, [rbp + 0x13c]
mov r8, r14
xor r12d, r12d
inc r8
cmp word [rax + r8*2], r12w
jne 0x1800358b3
lea rdx, [rbp + 0x13c]
lea rcx, [rbp + 0x608]
call fcn.18000c67c
nop
lea rdx, [rbp + 0x608]
mov rcx, r15
call fcn.18003906c
mov ebx, eax
lea rcx, [rbp + 0x608]
call fcn.18000bd8c
nop
xor edx, edx
lea r8d, [rdx + 0x32]
lea rcx, [rbp + 0x13c]
call qword [sym.imp.VCRUNTIME140.dll_memset]
cmp ebx, r13d
jae 0x18003590a
add rdi, r13
mov eax, 0x6e
mov dword [rbp + 0x170], eax
lea ecx, [rax - 0x31]
mov word [rbp + 0x174], cx
lea eax, [rcx - 0x12]
mov word [rbp + 0x176], ax
lea r8d, [rcx - 0x1b]
mov word [rbp + 0x178], r8w
mov word [rbp + 0x17a], ax
lea edx, [rcx - 0x10]
mov word [rbp + 0x17c], dx
lea eax, [rcx - 3]
mov word [rbp + 0x17e], ax
lea r9d, [rcx + 0x11]
mov word [rbp + 0x180], r9w
lea eax, [rcx + 7]
mov word [rbp + 0x182], ax
mov word [rbp + 0x184], r9w
lea eax, [rcx - 0x15]
mov word [rbp + 0x186], ax
lea eax, [rcx - 1]
mov word [rbp + 0x188], ax
lea eax, [rcx - 0x1c]
mov word [rbp + 0x18a], ax
lea r8d, [rcx - 0x1a]
mov word [rbp + 0x18c], r8w
mov word [rbp + 0x18e], r9w
mov word [rbp + 0x190], dx
lea eax, [rcx - 0x16]
mov word [rbp + 0x192], ax
mov word [rbp + 0x194], r8w
lea eax, [rcx - 0xc]
mov word [rbp + 0x196], ax
mov word [rbp + 0x198], cx
lea eax, [rcx - 0x3b]
mov word [rbp + 0x19a], ax
mov word [rbp + 0x19c], r13w
lea eax, [rcx - 0x23]
mov word [rbp + 0x19e], ax
xor eax, eax
mov word [rbp + 0x1a0], ax
movzx eax, word [rbp + 0x174]
mov rdx, r12
lea r12d, [rcx - 0x27]
movzx eax, word [rbp + rdx*2 + 0x174]
mov ecx, dword [rbp + 0x170]
xor cx, ax
mov word [rbp + rdx*2 + 0x174], cx
add rdx, r13
cmp rdx, r12
jb 0x1800359fd
xor r12d, r12d
mov word [rbp + 0x1a0], r12w
xorps xmm0, xmm0
movups xmmword [rbp + 0x390], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3a0], xmm1
lea rax, [rbp + 0x174]
mov r8, r14
inc r8
cmp word [rax + r8*2], r12w
jne 0x180035a48
lea rdx, [rbp + 0x174]
lea rcx, [rbp + 0x390]
call fcn.18000c67c
nop
lea rdx, [rbp + 0x390]
mov rcx, r15
call fcn.18003906c
mov ebx, eax
mov rdx, qword [rbp + 0x3a8]
mov eax, 8
cmp rdx, rax
jb 0x180035ac9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x390]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035ac4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
mov r8d, 0x1f
cmp rax, r8
jbe 0x180035ac4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165920]
movdqu xmmword [rbp + 0x3a0], xmm0
mov word [rbp + 0x390], r12w
xor edx, edx
lea r8d, [rdx + 0x2e]
lea rcx, [rbp + 0x174]
call qword [sym.imp.VCRUNTIME140.dll_memset]
cmp ebx, r13d
jae 0x180035afc
add rdi, r13
mov eax, 7
mov dword [rbp + 0x26c], eax
lea r8d, [rax + 0x4d]
mov word [rbp + 0x270], r8w
lea eax, [r8 - 0x12]
mov word [rbp + 0x272], ax
lea ecx, [rax + 9]
mov word [rbp + 0x274], cx
mov word [rbp + 0x276], ax
lea edx, [rax + 2]
mov word [rbp + 0x278], dx
lea r9d, [r8 - 1]
mov word [rbp + 0x27a], r9w
lea eax, [rcx - 0x24]
mov word [rbp + 0x27c], ax
lea ecx, [rdx - 0x17]
mov word [rbp + 0x27e], cx
mov word [rbp + 0x280], ax
lea ecx, [rdx - 3]
mov word [rbp + 0x282], cx
lea ecx, [rdx + 0x11]
mov word [rbp + 0x284], cx
lea ecx, [rdx + 4]
mov word [rbp + 0x286], cx
lea ecx, [rdx + 6]
mov word [rbp + 0x288], cx
mov word [rbp + 0x28a], ax
mov word [rbp + 0x28c], dx
lea eax, [rdx + 0xa]
mov word [rbp + 0x28e], ax
mov word [rbp + 0x290], cx
lea eax, [rdx + 0x14]
mov word [rbp + 0x292], ax
mov word [rbp + 0x294], r9w
lea eax, [rdx + 0x1e]
mov word [rbp + 0x296], ax
lea ecx, [rdx + 0x26]
mov word [rbp + 0x298], cx
lea ecx, [rdx + 0x33]
mov word [rbp + 0x29a], cx
mov word [rbp + 0x29c], ax
lea edx, [rax + 0x13]
mov word [rbp + 0x29e], dx
lea ecx, [rax + 4]
mov word [rbp + 0x2a0], cx
lea ecx, [rax + 0x11]
mov word [rbp + 0x2a2], cx
lea ecx, [rax + 0x10]
mov word [rbp + 0x2a4], cx
mov word [rbp + 0x2a6], dx
mov word [rbp + 0x2a8], ax
mov word [rbp + 0x2aa], r8w
mov word [rbp + 0x2ac], ax
lea eax, [rdx - 0xc]
mov word [rbp + 0x2ae], ax
lea eax, [rdx - 1]
mov word [rbp + 0x2b0], ax
lea eax, [rdx - 0xd]
mov word [rbp + 0x2b2], ax
mov word [rbp + 0x2b4], dx
xor eax, eax
mov word [rbp + 0x2b6], ax
movzx eax, word [rbp + 0x270]
mov rdx, r12
lea r12d, [r8 - 0x31]
movzx eax, word [rbp + rdx*2 + 0x270]
mov ecx, dword [rbp + 0x26c]
xor cx, ax
mov word [rbp + rdx*2 + 0x270], cx
add rdx, r13
cmp rdx, r12
jb 0x180035c5f
xor r12d, r12d
mov word [rbp + 0x2b6], r12w
xorps xmm0, xmm0
movups xmmword [rbp + 0x390], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3a0], xmm1
lea rax, [rbp + 0x270]
inc r14
cmp word [rax + r14*2], r12w
jne 0x180035ca7
mov r8, r14
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x390]
call fcn.18000c67c
nop
lea rdx, [rbp + 0x390]
mov rcx, r15
call fcn.18003906c
mov ebx, eax
mov rdx, qword [rbp + 0x3a8]
mov r14d, 8
cmp rdx, r14
jb 0x180035d2a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x390]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035d25
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
lea r8d, [r14 + 0x17]
cmp rax, r8
jbe 0x180035d25
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180157a14
movdqa xmm0, xmmword [0x180165920]
movdqu xmmword [rbp + 0x3a0], xmm0
mov word [rbp + 0x390], r12w
xor edx, edx
lea r8d, [rdx + 0x48]
lea rcx, [rbp + 0x270]
call qword [sym.imp.VCRUNTIME140.dll_memset]
cmp ebx, r13d
jae 0x180035d5d
add rdi, r13
mov eax, 0xf
cmp rdi, rax
jne 0x180035d74
mov eax, 3
cmp qword [r15 + 0x18], rax
jb 0x180035daf
jmp 0x180035d94
test rdi, rdi
je 0x180035daf
mov eax, 3
cmp qword [r15 + 0x18], rax
jae 0x180035d94
mov eax, 2
cmp qword [r15 + 0x18], rax
jb 0x180035d99
cmp rdi, r14
jbe 0x180035d9f
mov sil, r12b
jmp 0x180035daf
cmp qword [r15 + 0x18], r13
jb 0x180035daf
movzx esi, sil
mov ecx, 0xc
cmp rdi, rcx
cmova esi, r12d
mov al, sil
mov rbx, qword [rsp + 0x840]
add rsp, 0x800
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret