Function at 0x180002cb0
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x2420
call fcn.18000fa90
sub rsp, rax
mov rax, qword [0x18002d5c0]
xor rax, rsp
mov qword [rsp + 0x2410], rax
lea rcx, [rsp + 0x68]
call fcn.18000c0e0
mov ecx, 0x3a32ca43
call fcn.1800014f0
mov qword [rsp + 0x90], rax
cmp qword [rsp + 0x90], 0
jne 0x180002d25
mov rcx, qword [rsp + 0x2430]
call fcn.18000c0e0
lea rcx, [rsp + 0x68]
call fcn.18000c4a0
mov rax, qword [rsp + 0x2430]
jmp 0x18000674a
mov edx, 0x4c54d5c4
mov rcx, qword [rsp + 0x90]
call fcn.180001650
mov qword [rsp + 0x250], rax
mov edx, 0xca49661e
mov rcx, qword [rsp + 0x90]
call fcn.180001650
mov qword [rsp + 0x260], rax
mov edx, 0x43393217
mov rcx, qword [rsp + 0x90]
call fcn.180001650
mov qword [rsp + 0x258], rax
mov edx, 0xb50446c4
mov rcx, qword [rsp + 0x90]
call fcn.180001650
mov qword [rsp + 0x268], rax
mov edx, 0xf8fa5049
mov rcx, qword [rsp + 0x90]
call fcn.180001650
mov qword [rsp + 0x170], rax
cmp qword [rsp + 0x250], 0
je 0x180002dde
cmp qword [rsp + 0x258], 0
je 0x180002dde
cmp qword [rsp + 0x260], 0
je 0x180002dde
cmp qword [rsp + 0x268], 0
je 0x180002dde
cmp qword [rsp + 0x170], 0
jne 0x180002e10
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2430]
call fcn.18000c0e0
lea rcx, [rsp + 0x68]
call fcn.18000c4a0
mov rax, qword [rsp + 0x2430]
jmp 0x18000674a
lea rax, [rsp + 0x5d0]
mov rdi, rax
xor eax, eax
mov ecx, 0x94
rep stosb byte [rdi], al
mov dword [rsp + 0x5d0], 0x94
lea rax, [rsp + 0x530]
mov rdi, rax
xor eax, eax
mov ecx, 0x30
rep stosb byte [rdi], al
lea rax, [rsp + 0x590]
mov rdi, rax
xor eax, eax
mov ecx, 0x40
rep stosb byte [rdi], al
mov dword [rsp + 0x1c0], 0x10
mov dword [rsp + 0x590], 0x40
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x448], rax
lea rcx, [rsp + 0x530]
call qword [rsp + 0x448]
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0x450], rax
lea rcx, [rsp + 0x5d0]
call qword [rsp + 0x450]
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0x458], rax
lea rcx, [rsp + 0x590]
call qword [rsp + 0x458]
mov rax, qword [rsp + 0x268]
mov qword [rsp + 0x468], rax
lea rdx, [rsp + 0x1c0]
lea rcx, [rsp + 0x9b0]
call qword [rsp + 0x468]
mov byte [rsp + 0x98], 0x7b
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0x99], 0x22
lea rdx, [rsp + 0x99]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0x9a], 0x76
lea rdx, [rsp + 0x9a]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0x9b], 0x65
lea rdx, [rsp + 0x9b]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0x9c], 0x72
lea rdx, [rsp + 0x9c]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0x9d], 0x73
lea rdx, [rsp + 0x9d]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0x9e], 0x69
lea rdx, [rsp + 0x9e]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0x9f], 0x6f
lea rdx, [rsp + 0x9f]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xa0], 0x6e
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xa1], 0x22
lea rdx, [rsp + 0xa1]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xa2], 0x3a
lea rdx, [rsp + 0xa2]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xa3], 0x22
lea rdx, [rsp + 0xa3]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov edx, dword [rsp + 0x5d8]
lea rcx, [rsp + 0x850]
call fcn.18000e820
mov qword [rsp + 0x470], rax
mov edx, dword [rsp + 0x5d4]
lea rcx, [rsp + 0x830]
call fcn.18000e820
lea r8, [0x1800225dc]
mov rdx, rax
lea rcx, [rsp + 0x810]
call fcn.180008f90
mov qword [rsp + 0x478], rax
mov r8, qword [rsp + 0x470]
mov rdx, qword [rsp + 0x478]
lea rcx, [rsp + 0x710]
call fcn.180008f50
lea rcx, [rsp + 0x810]
call fcn.18000c440
lea rcx, [rsp + 0x830]
call fcn.18000c440
lea rcx, [rsp + 0x850]
call fcn.18000c440
lea rax, [rsp + 0x710]
mov qword [rsp + 0x270], rax
mov rcx, qword [rsp + 0x270]
call fcn.18000d910
mov qword [rsp + 0x1d0], rax
mov rcx, qword [rsp + 0x270]
call fcn.18000d930
mov qword [rsp + 0x480], rax
jmp 0x18000310b
mov rax, qword [rsp + 0x1d0]
inc rax
mov qword [rsp + 0x1d0], rax
mov rax, qword [rsp + 0x480]
cmp qword [rsp + 0x1d0], rax
je 0x180003152
mov rax, qword [rsp + 0x1d0]
movzx eax, byte [rax]
mov byte [rsp + 0xa4], al
movzx eax, byte [rsp + 0xa4]
mov byte [rsp + 0xa5], al
lea rdx, [rsp + 0xa5]
lea rcx, [rsp + 0x68]
call fcn.18000e710
jmp 0x1800030f8
mov byte [rsp + 0xa6], 0x22
lea rdx, [rsp + 0xa6]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xa7], 0x2c
lea rdx, [rsp + 0xa7]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xa8], 0x22
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xa9], 0x63
lea rdx, [rsp + 0xa9]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xaa], 0x70
lea rdx, [rsp + 0xaa]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xab], 0x75
lea rdx, [rsp + 0xab]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xac], 0x5f
lea rdx, [rsp + 0xac]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xad], 0x63
lea rdx, [rsp + 0xad]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xae], 0x6f
lea rdx, [rsp + 0xae]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xaf], 0x75
lea rdx, [rsp + 0xaf]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xb0], 0x6e
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xb1], 0x74
lea rdx, [rsp + 0xb1]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xb2], 0x22
lea rdx, [rsp + 0xb2]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xb3], 0x3a
lea rdx, [rsp + 0xb3]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xb4], 0x22
lea rdx, [rsp + 0xb4]
lea rcx, [rsp + 0x68]
call fcn.18000e710
cmp dword [rsp + 0x550], 0xa
jb 0x18000333e
xor edx, edx
mov eax, dword [rsp + 0x550]
mov ecx, 0xa
div ecx
add eax, 0x30
mov byte [rsp + 0xb5], al
lea rdx, [rsp + 0xb5]
lea rcx, [rsp + 0x68]
call fcn.18000e710
xor edx, edx
mov eax, dword [rsp + 0x550]
mov ecx, 0xa
div ecx
mov eax, edx
add eax, 0x30
mov byte [rsp + 0xb6], al
lea rdx, [rsp + 0xb6]
lea rcx, [rsp + 0x68]
call fcn.18000e710
jmp 0x180003361
mov eax, dword [rsp + 0x550]
add eax, 0x30
mov byte [rsp + 0xb7], al
lea rdx, [rsp + 0xb7]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xb8], 0x22
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xb9], 0x2c
lea rdx, [rsp + 0xb9]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xba], 0x22
lea rdx, [rsp + 0xba]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xbb], 0x6d
lea rdx, [rsp + 0xbb]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xbc], 0x65
lea rdx, [rsp + 0xbc]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xbd], 0x6d
lea rdx, [rsp + 0xbd]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xbe], 0x22
lea rdx, [rsp + 0xbe]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xbf], 0x3a
lea rdx, [rsp + 0xbf]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xc0], 0x22
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov rdx, qword [rsp + 0x598]
lea rcx, [rsp + 0x6f0]
call fcn.18000e850
lea rax, [rsp + 0x6f0]
mov qword [rsp + 0x278], rax
mov rcx, qword [rsp + 0x278]
call fcn.18000d910
mov qword [rsp + 0x1c8], rax
mov rcx, qword [rsp + 0x278]
call fcn.18000d930
mov qword [rsp + 0x2a8], rax
jmp 0x1800034af
mov rax, qword [rsp + 0x1c8]
inc rax
mov qword [rsp + 0x1c8], rax
mov rax, qword [rsp + 0x2a8]
cmp qword [rsp + 0x1c8], rax
je 0x1800034f6
mov rax, qword [rsp + 0x1c8]
movzx eax, byte [rax]
mov byte [rsp + 0xc1], al
movzx eax, byte [rsp + 0xc1]
mov byte [rsp + 0xc2], al
lea rdx, [rsp + 0xc2]
lea rcx, [rsp + 0x68]
call fcn.18000e710
jmp 0x18000349c
mov byte [rsp + 0xc3], 0x22
lea rdx, [rsp + 0xc3]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xc4], 0x2c
lea rdx, [rsp + 0xc4]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xc5], 0x22
lea rdx, [rsp + 0xc5]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xc6], 0x70
lea rdx, [rsp + 0xc6]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xc7], 0x63
lea rdx, [rsp + 0xc7]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xc8], 0x22
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xc9], 0x3a
lea rdx, [rsp + 0xc9]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xca], 0x22
lea rdx, [rsp + 0xca]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov dword [rsp + 0x120], 0
jmp 0x1800035e3
mov eax, dword [rsp + 0x120]
inc eax
mov dword [rsp + 0x120], eax
mov eax, dword [rsp + 0x1c0]
cmp dword [rsp + 0x120], eax
jae 0x18000361e
movsxd rax, dword [rsp + 0x120]
movzx eax, byte [rsp + rax + 0x9b0]
mov byte [rsp + 0xcb], al
lea rdx, [rsp + 0xcb]
lea rcx, [rsp + 0x68]
call fcn.18000e710
jmp 0x1800035d3
mov byte [rsp + 0xcc], 0x22
lea rdx, [rsp + 0xcc]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xcd], 0x2c
lea rdx, [rsp + 0xcd]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xce], 0x22
lea rdx, [rsp + 0xce]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0x8a0], 0xa8
mov byte [rsp + 0x8a1], 0xca
mov byte [rsp + 0x8a2], 0xc9
mov byte [rsp + 0x8a3], 0xab
mov byte [rsp + 0x8a4], 0xdd
mov byte [rsp + 0x8a5], 0xb5
mov byte [rsp + 0x8a6], 0xb5
mov byte [rsp + 0x8a7], 0xb8
mov byte [rsp + 0x8a8], 0xbd
mov byte [rsp + 0x8a9], 0xb1
mov byte [rsp + 0x8aa], 0xbf
mov byte [rsp + 0x8ab], 0xaf
mov byte [rsp + 0x8ac], 0x50
mov byte [rsp + 0x8ad], 0x45
mov byte [rsp + 0x8ae], 0x43
mov byte [rsp + 0x8af], 0x57
mov byte [rsp + 0x8b0], 0x45
mov byte [rsp + 0x8b1], 0x20
mov byte [rsp + 0x8b2], 0x5a
mov byte [rsp + 0x8b3], 0x40
mov byte [rsp + 0x8b4], 0x67
mov byte [rsp + 0x8b5], 0x66
mov byte [rsp + 0x8b6], 0x6d
mov byte [rsp + 0x8b7], 0x67
mov byte [rsp + 0x8b8], 0x69
mov byte [rsp + 0x8b9], 0x51
mov byte [rsp + 0x8ba], 0x4d
mov byte [rsp + 0x8bb], 0x67
mov byte [rsp + 0x8bc], 0x62
mov byte [rsp + 0x8bd], 0x7e
mov byte [rsp + 0x8be], 0x7f
mov byte [rsp + 0x8bf], 0x76
mov byte [rsp + 0x8c0], 0x48
mov byte [rsp + 0x8c1], 0x40
mov byte [rsp + 0x8c2], 0x65
mov byte [rsp + 0x8c3], 0x72
mov byte [rsp + 0x8c4], 0x6a
mov byte [rsp + 0x8c5], 0x39
mov byte [rsp + 0x8c6], 0x5e
mov byte [rsp + 0x8c7], 0x7a
mov byte [rsp + 0x8c8], 0x68
mov byte [rsp + 0x8c9], 0x7c
mov byte [rsp + 0x8ca], 0x42
mov byte [rsp + 0x8cb], 0x53
mov byte [rsp + 0x8cc], 0x4f
mov byte [rsp + 0x8cd], 0x42
mov byte [rsp + 0x8ce], 0x43
mov byte [rsp + 0x8cf], 0x4f
mov byte [rsp + 0x8d0], 4
mov byte [rsp + 0x8d1], 0x76
mov byte [rsp + 0x8d2], 0x52
mov byte [rsp + 0x8d3], 0x46
mov byte [rsp + 0x8d4], 0x5c
mov byte [rsp + 0x8d5], 0x4c
mov byte [rsp + 0x8d6], 0x2a
mov r8b, 0xf4
mov edx, 0x37
lea rcx, [rsp + 0x8a0]
call fcn.180001480
lea rdx, [0x180022424]
lea rcx, [rsp + 0x670]
call fcn.18000b740
mov dword [rsp + 0x128], 0
jmp 0x18000386a
mov eax, dword [rsp + 0x128]
inc eax
mov dword [rsp + 0x128], eax
movsxd rax, dword [rsp + 0x128]
cmp rax, 0x37
jae 0x180003897
movsxd rax, dword [rsp + 0x128]
movzx edx, byte [rsp + rax + 0x8a0]
lea rcx, [rsp + 0x670]
call fcn.18000c790
jmp 0x18000385a
lea rcx, [rsp + 0x15c]
call fcn.180009b10
mov qword [rsp + 0x2c0], rax
lea rdx, [rsp + 0x518]
lea rcx, [rsp + 0x670]
call fcn.18000e120
mov rax, qword [rax]
mov qword [rsp + 0x2b0], rax
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0x2c8], rax
lea rdx, [rsp + 0x520]
lea rcx, [rsp + 0x670]
call fcn.18000ddb0
mov rax, qword [rax]
mov qword [rsp + 0x2b8], rax
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x2d0], rax
mov r9, qword [rsp + 0x2c0]
mov r8, qword [rsp + 0x2c8]
mov rdx, qword [rsp + 0x2d0]
lea rcx, [rsp + 0x6d0]
call fcn.180008dd0
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x2d8], rax
lea rcx, [rsp + 0x6d0]
call fcn.18000de10
mov r8d, 0x103
lea rdx, [rsp + 0x9c0]
mov rcx, rax
call qword [rsp + 0x2d8]
lea rax, [rsp + 0x9c0]
mov qword [rsp + 0x118], rax
lea rcx, [rsp + 0x9c0]
call fcn.180016548
shl rax, 1
mov word [rsp + 0x110], ax
movzx eax, word [rsp + 0x110]
add rax, 2
mov word [rsp + 0x112], ax
mov dword [rsp + 0x190], 0x30
mov qword [rsp + 0x198], 0
mov dword [rsp + 0x1a8], 0x40
lea rax, [rsp + 0x110]
mov qword [rsp + 0x1a0], rax
mov qword [rsp + 0x1b0], 0
mov qword [rsp + 0x1b8], 0
mov rdx, qword [0x18002e158]
mov ecx, dword [0x18002e148]
call fcn.18000f150
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x40], 0x60
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x240]
lea r8, [rsp + 0x190]
mov edx, 0x12019f
lea rcx, [rsp + 0x280]
call fcn.18000f172
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
jge 0x180003acc
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2430]
call fcn.18000c0e0
lea rcx, [rsp + 0x6d0]
call fcn.18000c470
lea rcx, [rsp + 0x670]
call fcn.18000c440
lea rcx, [rsp + 0x6f0]
call fcn.18000c440
lea rcx, [rsp + 0x710]
call fcn.18000c440
lea rcx, [rsp + 0x68]
call fcn.18000c4a0
mov rax, qword [rsp + 0x2430]
jmp 0x18000674a
mov byte [rsp + 0x918], 0xa8
mov byte [rsp + 0x919], 0xca
mov byte [rsp + 0x91a], 0xc9
mov byte [rsp + 0x91b], 0xab
mov byte [rsp + 0x91c], 0xdd
mov byte [rsp + 0x91d], 0xb5
mov byte [rsp + 0x91e], 0xb5
mov byte [rsp + 0x91f], 0xb8
mov byte [rsp + 0x920], 0xbd
mov byte [rsp + 0x921], 0xb1
mov byte [rsp + 0x922], 0xbf
mov byte [rsp + 0x923], 0xaf
mov byte [rsp + 0x924], 0x50
mov byte [rsp + 0x925], 0x45
mov byte [rsp + 0x926], 0x43
mov byte [rsp + 0x927], 0x57
mov byte [rsp + 0x928], 0x45
mov byte [rsp + 0x929], 0x20
mov byte [rsp + 0x92a], 0x5a
mov byte [rsp + 0x92b], 0x40
mov byte [rsp + 0x92c], 0x67
mov byte [rsp + 0x92d], 0x66
mov byte [rsp + 0x92e], 0x6d
mov byte [rsp + 0x92f], 0x67
mov byte [rsp + 0x930], 0x69
mov byte [rsp + 0x931], 0x51
mov byte [rsp + 0x932], 0x4d
mov byte [rsp + 0x933], 0x67
mov byte [rsp + 0x934], 0x62
mov byte [rsp + 0x935], 0x7e
mov byte [rsp + 0x936], 0x7f
mov byte [rsp + 0x937], 0x76
mov byte [rsp + 0x938], 0x48
mov byte [rsp + 0x939], 0x40
mov byte [rsp + 0x93a], 0x65
mov byte [rsp + 0x93b], 0x72
mov byte [rsp + 0x93c], 0x6a
mov byte [rsp + 0x93d], 0x39
mov byte [rsp + 0x93e], 0x5e
mov byte [rsp + 0x93f], 0x7a
mov byte [rsp + 0x940], 0x68
mov byte [rsp + 0x941], 0x7c
mov byte [rsp + 0x942], 0x42
mov byte [rsp + 0x943], 0x5b
mov byte [rsp + 0x944], 0x45
mov byte [rsp + 0x945], 0x47
mov byte [rsp + 0x946], 0x43
mov byte [rsp + 0x947], 0x56
mov byte [rsp + 0x948], 0x48
mov byte [rsp + 0x949], 0x51
mov byte [rsp + 0x94a], 0x7a
mov byte [rsp + 0x94b], 0x6b
mov byte [rsp + 0x94c], 0x47
mov byte [rsp + 0x94d], 0x4e
mov byte [rsp + 0x94e], 0x43
mov byte [rsp + 0x94f], 0x45
mov byte [rsp + 0x950], 0xc
mov byte [rsp + 0x951], 0x69
mov byte [rsp + 0x952], 0x4f
mov byte [rsp + 0x953], 0x5b
mov byte [rsp + 0x954], 0x51
mov byte [rsp + 0x955], 0x31
mov r8b, 0xf4
mov edx, 0x3e
lea rcx, [rsp + 0x918]
call fcn.180001480
lea rdx, [0x180022425]
lea rcx, [rsp + 0x690]
call fcn.18000b740
mov dword [rsp + 0x12c], 0
jmp 0x180003d02
mov eax, dword [rsp + 0x12c]
inc eax
mov dword [rsp + 0x12c], eax
movsxd rax, dword [rsp + 0x12c]
cmp rax, 0x3e
jae 0x180003d2f
movsxd rax, dword [rsp + 0x12c]
movzx edx, byte [rsp + rax + 0x918]
lea rcx, [rsp + 0x690]
call fcn.18000c790
jmp 0x180003cf2
lea rcx, [rsp + 0x158]
call fcn.180009b10
mov qword [rsp + 0x2f0], rax
lea rdx, [rsp + 0x528]
lea rcx, [rsp + 0x690]
call fcn.18000e120
mov rax, qword [rax]
mov qword [rsp + 0x2e0], rax
mov rax, qword [rsp + 0x2e0]
mov qword [rsp + 0x2f8], rax
lea rdx, [rsp + 0x568]
lea rcx, [rsp + 0x690]
call fcn.18000ddb0
mov rax, qword [rax]
mov qword [rsp + 0x2e8], rax
mov rax, qword [rsp + 0x2e8]
mov qword [rsp + 0x300], rax
mov r9, qword [rsp + 0x2f0]
mov r8, qword [rsp + 0x2f8]
mov rdx, qword [rsp + 0x300]
lea rcx, [rsp + 0x750]
call fcn.180008dd0
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x308], rax
lea rcx, [rsp + 0x750]
call fcn.18000de10
mov r8d, 0x103
lea rdx, [rsp + 0xbd0]
mov rcx, rax
call qword [rsp + 0x308]
lea rax, [rsp + 0xbd0]
mov qword [rsp + 0x118], rax
lea rcx, [rsp + 0xbd0]
call fcn.180016548
shl rax, 1
mov word [rsp + 0x110], ax
movzx eax, word [rsp + 0x110]
add rax, 2
mov word [rsp + 0x112], ax
mov dword [rsp + 0x190], 0x30
mov qword [rsp + 0x198], 0
mov dword [rsp + 0x1a8], 0x40
lea rax, [rsp + 0x110]
mov qword [rsp + 0x1a0], rax
mov qword [rsp + 0x1b0], 0
mov qword [rsp + 0x1b8], 0
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x40], 0x60
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x240]
lea r8, [rsp + 0x190]
mov edx, 0x12019f
lea rcx, [rsp + 0x290]
call fcn.18000f172
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
jge 0x180003f70
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2430]
call fcn.18000c0e0
lea rcx, [rsp + 0x750]
call fcn.18000c470
lea rcx, [rsp + 0x690]
call fcn.18000c440
lea rcx, [rsp + 0x6d0]
call fcn.18000c470
lea rcx, [rsp + 0x670]
call fcn.18000c440
lea rcx, [rsp + 0x6f0]
call fcn.18000c440
lea rcx, [rsp + 0x710]
call fcn.18000c440
lea rcx, [rsp + 0x68]
call fcn.18000c4a0
mov rax, qword [rsp + 0x2430]
jmp 0x18000674a
mov byte [rsp + 0x8d8], 0xa8
mov byte [rsp + 0x8d9], 0xca
mov byte [rsp + 0x8da], 0xc9
mov byte [rsp + 0x8db], 0xab
mov byte [rsp + 0x8dc], 0xdd
mov byte [rsp + 0x8dd], 0xb5
mov byte [rsp + 0x8de], 0xb5
mov byte [rsp + 0x8df], 0xb8
mov byte [rsp + 0x8e0], 0xbd
mov byte [rsp + 0x8e1], 0xb1
mov byte [rsp + 0x8e2], 0xbf
mov byte [rsp + 0x8e3], 0xaf
mov byte [rsp + 0x8e4], 0x50
mov byte [rsp + 0x8e5], 0x45
mov byte [rsp + 0x8e6], 0x43
mov byte [rsp + 0x8e7], 0x57
mov byte [rsp + 0x8e8], 0x45
mov byte [rsp + 0x8e9], 0x20
mov byte [rsp + 0x8ea], 0x5a
mov byte [rsp + 0x8eb], 0x40
mov byte [rsp + 0x8ec], 0x67
mov byte [rsp + 0x8ed], 0x66
mov byte [rsp + 0x8ee], 0x6d
mov byte [rsp + 0x8ef], 0x67
mov byte [rsp + 0x8f0], 0x69
mov byte [rsp + 0x8f1], 0x51
mov byte [rsp + 0x8f2], 0x4d
mov byte [rsp + 0x8f3], 0x67
mov byte [rsp + 0x8f4], 0x62
mov byte [rsp + 0x8f5], 0x7e
mov byte [rsp + 0x8f6], 0x7f
mov byte [rsp + 0x8f7], 0x76
mov byte [rsp + 0x8f8], 0x48
mov byte [rsp + 0x8f9], 0x40
mov byte [rsp + 0x8fa], 0x65
mov byte [rsp + 0x8fb], 0x72
mov byte [rsp + 0x8fc], 0x6a
mov byte [rsp + 0x8fd], 0x39
mov byte [rsp + 0x8fe], 0x5e
mov byte [rsp + 0x8ff], 0x7a
mov byte [rsp + 0x900], 0x68
mov byte [rsp + 0x901], 0x7c
mov byte [rsp + 0x902], 0x42
mov byte [rsp + 0x903], 0x5b
mov byte [rsp + 0x904], 0x45
mov byte [rsp + 0x905], 0x47
mov byte [rsp + 0x906], 0x43
mov byte [rsp + 0x907], 0x56
mov byte [rsp + 0x908], 0x48
mov byte [rsp + 0x909], 0x51
mov byte [rsp + 0x90a], 0x7a
mov byte [rsp + 0x90b], 0x70
mov byte [rsp + 0x90c], 0x4d
mov byte [rsp + 0x90d], 0x4b
mov byte [rsp + 0x90e], 0xa
mov byte [rsp + 0x90f], 0x6f
mov byte [rsp + 0x910], 0x4d
mov byte [rsp + 0x911], 0x59
mov byte [rsp + 0x912], 0x4f
mov byte [rsp + 0x913], 0x2f
mov r8b, 0xf4
mov edx, 0x3c
lea rcx, [rsp + 0x8d8]
call fcn.180001480
lea rdx, [0x180022426]
lea rcx, [rsp + 0x6b0]
call fcn.18000b740
mov dword [rsp + 0x130], 0
jmp 0x180004196
mov eax, dword [rsp + 0x130]
inc eax
mov dword [rsp + 0x130], eax
movsxd rax, dword [rsp + 0x130]
cmp rax, 0x3c
jae 0x1800041c3
movsxd rax, dword [rsp + 0x130]
movzx edx, byte [rsp + rax + 0x8d8]
lea rcx, [rsp + 0x6b0]
call fcn.18000c790
jmp 0x180004186
lea rcx, [rsp + 0x159]
call fcn.180009b10
mov qword [rsp + 0x320], rax
lea rdx, [rsp + 0x570]
lea rcx, [rsp + 0x6b0]
call fcn.18000e120
mov rax, qword [rax]
mov qword [rsp + 0x310], rax
mov rax, qword [rsp + 0x310]
mov qword [rsp + 0x328], rax
lea rdx, [rsp + 0x578]
lea rcx, [rsp + 0x6b0]
call fcn.18000ddb0
mov rax, qword [rax]
mov qword [rsp + 0x318], rax
mov rax, qword [rsp + 0x318]
mov qword [rsp + 0x330], rax
mov r9, qword [rsp + 0x320]
mov r8, qword [rsp + 0x328]
mov rdx, qword [rsp + 0x330]
lea rcx, [rsp + 0x790]
call fcn.180008dd0
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x338], rax
lea rcx, [rsp + 0x790]
call fcn.18000de10
mov r8d, 0x103
lea rdx, [rsp + 0xde0]
mov rcx, rax
call qword [rsp + 0x338]
lea rax, [rsp + 0xde0]
mov qword [rsp + 0x118], rax
lea rcx, [rsp + 0xde0]
call fcn.180016548
shl rax, 1
mov word [rsp + 0x110], ax
movzx eax, word [rsp + 0x110]
add rax, 2
mov word [rsp + 0x112], ax
mov dword [rsp + 0x190], 0x30
mov qword [rsp + 0x198], 0
mov dword [rsp + 0x1a8], 0x40
lea rax, [rsp + 0x110]
mov qword [rsp + 0x1a0], rax
mov qword [rsp + 0x1b0], 0
mov qword [rsp + 0x1b8], 0
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x40], 0x60
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x240]
lea r8, [rsp + 0x190]
mov edx, 0x12019f
lea rcx, [rsp + 0x298]
call fcn.18000f172
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
jge 0x18000441e
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2430]
call fcn.18000c0e0
lea rcx, [rsp + 0x790]
call fcn.18000c470
lea rcx, [rsp + 0x6b0]
call fcn.18000c440
lea rcx, [rsp + 0x750]
call fcn.18000c470
lea rcx, [rsp + 0x690]
call fcn.18000c440
lea rcx, [rsp + 0x6d0]
call fcn.18000c470
lea rcx, [rsp + 0x670]
call fcn.18000c440
lea rcx, [rsp + 0x6f0]
call fcn.18000c440
lea rcx, [rsp + 0x710]
call fcn.18000c440
lea rcx, [rsp + 0x68]
call fcn.18000c4a0
mov rax, qword [rsp + 0x2430]
jmp 0x18000674a
mov byte [rsp + 0x960], 0xa8
mov byte [rsp + 0x961], 0xca
mov byte [rsp + 0x962], 0xc9
mov byte [rsp + 0x963], 0xab
mov byte [rsp + 0x964], 0xdd
mov byte [rsp + 0x965], 0xb5
mov byte [rsp + 0x966], 0xb5
mov byte [rsp + 0x967], 0xb8
mov byte [rsp + 0x968], 0xbd
mov byte [rsp + 0x969], 0xb1
mov byte [rsp + 0x96a], 0xbf
mov byte [rsp + 0x96b], 0xaf
mov byte [rsp + 0x96c], 0x50
mov byte [rsp + 0x96d], 0x45
mov byte [rsp + 0x96e], 0x43
mov byte [rsp + 0x96f], 0x57
mov byte [rsp + 0x970], 0x45
mov byte [rsp + 0x971], 0x20
mov byte [rsp + 0x972], 0x5a
mov byte [rsp + 0x973], 0x40
mov byte [rsp + 0x974], 0x67
mov byte [rsp + 0x975], 0x66
mov byte [rsp + 0x976], 0x6d
mov byte [rsp + 0x977], 0x67
mov byte [rsp + 0x978], 0x69
mov byte [rsp + 0x979], 0x51
mov byte [rsp + 0x97a], 0x4d
mov byte [rsp + 0x97b], 0x67
mov byte [rsp + 0x97c], 0x62
mov byte [rsp + 0x97d], 0x7e
mov byte [rsp + 0x97e], 0x7f
mov byte [rsp + 0x97f], 0x76
mov byte [rsp + 0x980], 0x48
mov byte [rsp + 0x981], 0x40
mov byte [rsp + 0x982], 0x65
mov byte [rsp + 0x983], 0x72
mov byte [rsp + 0x984], 0x6a
mov byte [rsp + 0x985], 0x39
mov byte [rsp + 0x986], 0x5e
mov byte [rsp + 0x987], 0x7a
mov byte [rsp + 0x988], 0x68
mov byte [rsp + 0x989], 0x7c
mov byte [rsp + 0x98a], 0x42
mov byte [rsp + 0x98b], 0x5b
mov byte [rsp + 0x98c], 0x45
mov byte [rsp + 0x98d], 0x47
mov byte [rsp + 0x98e], 0x43
mov byte [rsp + 0x98f], 0x56
mov byte [rsp + 0x990], 0x48
mov byte [rsp + 0x991], 0x51
mov byte [rsp + 0x992], 0x7a
mov byte [rsp + 0x993], 0x69
mov byte [rsp + 0x994], 0x4d
mov byte [rsp + 0x995], 0x5d
mov byte [rsp + 0x996], 0x5d
mov byte [rsp + 0x997], 0x44
mov byte [rsp + 0x998], 0x5e
mov byte [rsp + 0x999], 0x46
mov byte [rsp + 0x99a], 0x72
mov byte [rsp + 0x99b], 0x6c
mov byte [rsp + 0x99c], 0x5f
mov byte [rsp + 0x99d], 0x5e
mov byte [rsp + 0x99e], 0x59
mov byte [rsp + 0x99f], 0x5a
mov byte [rsp + 0x9a0], 0x51
mov byte [rsp + 0x9a1], 0x46
mov byte [rsp + 0x9a2], 0x36
mov r8b, 0xf4
mov edx, 0x43
lea rcx, [rsp + 0x960]
call fcn.180001480
lea rdx, [0x180022427]
lea rcx, [rsp + 0x730]
call fcn.18000b740
mov dword [rsp + 0x134], 0
jmp 0x18000467c
mov eax, dword [rsp + 0x134]
inc eax
mov dword [rsp + 0x134], eax
movsxd rax, dword [rsp + 0x134]
cmp rax, 0x43
jae 0x1800046a9
movsxd rax, dword [rsp + 0x134]
movzx edx, byte [rsp + rax + 0x960]
lea rcx, [rsp + 0x730]
call fcn.18000c790
jmp 0x18000466c
lea rcx, [rsp + 0x15a]
call fcn.180009b10
mov qword [rsp + 0x350], rax
lea rdx, [rsp + 0x580]
lea rcx, [rsp + 0x730]
call fcn.18000e120
mov rax, qword [rax]
mov qword [rsp + 0x340], rax
mov rax, qword [rsp + 0x340]
mov qword [rsp + 0x358], rax
lea rdx, [rsp + 0x588]
lea rcx, [rsp + 0x730]
call fcn.18000ddb0
mov rax, qword [rax]
mov qword [rsp + 0x348], rax
mov rax, qword [rsp + 0x348]
mov qword [rsp + 0x360], rax
mov r9, qword [rsp + 0x350]
mov r8, qword [rsp + 0x358]
mov rdx, qword [rsp + 0x360]
lea rcx, [rsp + 0x7b0]
call fcn.180008dd0
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x368], rax
lea rcx, [rsp + 0x7b0]
call fcn.18000de10
mov r8d, 0x103
lea rdx, [rsp + 0xff0]
mov rcx, rax
call qword [rsp + 0x368]
lea rax, [rsp + 0xff0]
mov qword [rsp + 0x118], rax
lea rcx, [rsp + 0xff0]
call fcn.180016548
shl rax, 1
mov word [rsp + 0x110], ax
movzx eax, word [rsp + 0x110]
add rax, 2
mov word [rsp + 0x112], ax
mov dword [rsp + 0x190], 0x30
mov qword [rsp + 0x198], 0
mov dword [rsp + 0x1a8], 0x40
lea rax, [rsp + 0x110]
mov qword [rsp + 0x1a0], rax
mov qword [rsp + 0x1b0], 0
mov qword [rsp + 0x1b8], 0
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x40], 0x60
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x240]
lea r8, [rsp + 0x190]
mov edx, 0x12019f
lea rcx, [rsp + 0x288]
call fcn.18000f172
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
jge 0x18000491e
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2430]
call fcn.18000c0e0
lea rcx, [rsp + 0x7b0]
call fcn.18000c470
lea rcx, [rsp + 0x730]
call fcn.18000c440
lea rcx, [rsp + 0x790]
call fcn.18000c470
lea rcx, [rsp + 0x6b0]
call fcn.18000c440
lea rcx, [rsp + 0x750]
call fcn.18000c470
lea rcx, [rsp + 0x690]
call fcn.18000c440
lea rcx, [rsp + 0x6d0]
call fcn.18000c470
lea rcx, [rsp + 0x670]
call fcn.18000c440
lea rcx, [rsp + 0x6f0]
call fcn.18000c440
lea rcx, [rsp + 0x710]
call fcn.18000c440
lea rcx, [rsp + 0x68]
call fcn.18000c4a0
mov rax, qword [rsp + 0x2430]
jmp 0x18000674a
mov byte [rsp + 0xcf], 0x73
lea rdx, [rsp + 0xcf]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xd0], 0x74
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xd1], 0x61
lea rdx, [rsp + 0xd1]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xd2], 0x74
lea rdx, [rsp + 0xd2]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xd3], 0x65
lea rdx, [rsp + 0xd3]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xd4], 0x22
lea rdx, [rsp + 0xd4]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xd5], 0x3a
lea rdx, [rsp + 0xd5]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xd6], 0x22
lea rdx, [rsp + 0xd6]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov dword [rsp + 0x80], 0
mov dword [rsp + 0x420], 0x1000
lea rcx, [rsp + 0x178]
call fcn.18000c0e0
mov rdx, qword [0x18002e170]
mov ecx, dword [0x18002e160]
call fcn.18000f150
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0x1000
lea rax, [rsp + 0x1410]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x280]
call fcn.18000f172
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
jge 0x180004a85
cmp dword [rsp + 0x60], 0x103
jne 0x180004b11
cmp dword [rsp + 0x60], 0x103
jne 0x180004aaa
xor edx, edx
mov rcx, qword [rsp + 0x280]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [rsp + 0x160]
mov dword [rsp + 0x60], eax
mov eax, dword [rsp + 0x168]
mov dword [rsp + 0x80], eax
lea rdx, [rsp + 0x560]
lea rcx, [rsp + 0x178]
call fcn.18000e190
mov rax, qword [rax]
mov qword [rsp + 0x370], rax
mov eax, dword [rsp + 0x80]
lea rax, [rsp + rax + 0x1410]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1410]
mov r8, qword [rsp + 0x370]
lea rdx, [rsp + 0x4c0]
lea rcx, [rsp + 0x178]
call fcn.18000b3a0
cmp dword [rsp + 0x60], 0
jl 0x180004b29
cmp dword [rsp + 0x80], 0x1000
je 0x180004a23
mov dword [rsp + 0x108], 0
mov dword [rsp + 0x88], 0
jmp 0x180004b51
mov eax, dword [rsp + 0x88]
inc eax
mov dword [rsp + 0x88], eax
movsxd rax, dword [rsp + 0x88]
mov qword [rsp + 0x378], rax
lea rcx, [rsp + 0x178]
call fcn.18000e7a0
sub rax, 4
mov rcx, qword [rsp + 0x378]
cmp rcx, rax
jae 0x180004c73
movsxd rax, dword [rsp + 0x88]
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.18000c5f0
movzx eax, byte [rax]
cmp eax, 0x65
jne 0x180004c6e
mov eax, dword [rsp + 0x88]
inc eax
cdqe
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.18000c5f0
movzx eax, byte [rax]
cmp eax, 0x6e
jne 0x180004c6e
mov eax, dword [rsp + 0x88]
add eax, 2
cdqe
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.18000c5f0
movzx eax, byte [rax]
cmp eax, 0x63
jne 0x180004c6e
mov eax, dword [rsp + 0x88]
add eax, 3
cdqe
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.18000c5f0
movzx eax, byte [rax]
cmp eax, 0x72
jne 0x180004c6e
mov eax, dword [rsp + 0x88]
add eax, 4
cdqe
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.18000c5f0
movzx eax, byte [rax]
cmp eax, 0x79
jne 0x180004c6e
mov eax, dword [rsp + 0x88]
add eax, 5
cdqe
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.18000c5f0
movzx eax, byte [rax]
cmp eax, 0x70
jne 0x180004c6e
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x108], eax
jmp 0x180004c73
jmp 0x180004b41
mov eax, dword [rsp + 0x108]
add eax, 0x10
mov dword [rsp + 0x108], eax
lea rdx, [0x180022431]
lea rcx, [rsp + 0x770]
call fcn.18000b740
jmp 0x180004caa
mov eax, dword [rsp + 0x108]
inc eax
mov dword [rsp + 0x108], eax
mov eax, dword [rsp + 0x108]
mov edx, eax
lea rcx, [rsp + 0x178]
call fcn.18000c5f0
movzx eax, byte [rax]
cmp eax, 0x22
je 0x180004cf0
mov eax, dword [rsp + 0x108]
mov edx, eax
lea rcx, [rsp + 0x178]
call fcn.18000c5f0
movzx edx, byte [rax]
lea rcx, [rsp + 0x770]
call fcn.18000c790
jmp 0x180004c9a
lea rcx, [rsp + 0x770]
call fcn.18000e280
mov dword [rsp + 0x1f0], eax
lea rcx, [rsp + 0x770]
call fcn.18000d910
mov qword [rsp + 0x380], rax
lea r8, [rsp + 0x440]
mov edx, dword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x380]
call fcn.1800028b0
mov qword [rsp + 0x390], rax
mov qword [rsp + 0x3a0], 0
mov qword [rsp + 0x388], 0
mov byte [rsp + 0x880], 0xb0
mov byte [rsp + 0x881], 0xa5
mov byte [rsp + 0x882], 0xb7
mov byte [rsp + 0x883], 0xa7
mov byte [rsp + 0x884], 0xb1
mov byte [rsp + 0x885], 0xf9
mov r8b, 0xf4
mov edx, 6
lea rcx, [rsp + 0x880]
call fcn.180001480
lea r8, [rsp + 0x388]
lea rdx, [rsp + 0x880]
mov rcx, qword [rsp + 0x390]
call fcn.180016740
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0x398]
mov qword [rsp + 0x4a8], rax
mov dword [rsp + 0x4a0], 0x3e8
lea rcx, [rsp + 0x1d8]
call fcn.18000c0e0
mov ecx, 0xe43d0494
call fcn.1800014f0
mov edx, 0xf5140563
mov rcx, rax
call fcn.180001650
mov qword [rsp + 0x2a0], rax
cmp qword [rsp + 0x2a0], 0
jne 0x180004ef0
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2430]
call fcn.18000c0e0
lea rcx, [rsp + 0x1d8]
call fcn.18000c4a0
lea rcx, [rsp + 0x770]
call fcn.18000c440
lea rcx, [rsp + 0x178]
call fcn.18000c4a0
lea rcx, [rsp + 0x7b0]
call fcn.18000c470
lea rcx, [rsp + 0x730]
call fcn.18000c440
lea rcx, [rsp + 0x790]
call fcn.18000c470
lea rcx, [rsp + 0x6b0]
call fcn.18000c440
lea rcx, [rsp + 0x750]
call fcn.18000c470
lea rcx, [rsp + 0x690]
call fcn.18000c440
lea rcx, [rsp + 0x6d0]
call fcn.18000c470
lea rcx, [rsp + 0x670]
call fcn.18000c440
lea rcx, [rsp + 0x6f0]
call fcn.18000c440
lea rcx, [rsp + 0x710]
call fcn.18000c440
lea rcx, [rsp + 0x68]
call fcn.18000c4a0
mov rax, qword [rsp + 0x2430]
jmp 0x18000674a
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x3a8], rax
lea rax, [rsp + 0x4b0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x3a0]
lea rcx, [rsp + 0x4a0]
call qword [rsp + 0x3a8]
test eax, eax
jne 0x180005020
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2430]
call fcn.18000c0e0
lea rcx, [rsp + 0x1d8]
call fcn.18000c4a0
lea rcx, [rsp + 0x770]
call fcn.18000c440
lea rcx, [rsp + 0x178]
call fcn.18000c4a0
lea rcx, [rsp + 0x7b0]
call fcn.18000c470
lea rcx, [rsp + 0x730]
call fcn.18000c440
lea rcx, [rsp + 0x790]
call fcn.18000c470
lea rcx, [rsp + 0x6b0]
call fcn.18000c440
lea rcx, [rsp + 0x750]
call fcn.18000c470
lea rcx, [rsp + 0x690]
call fcn.18000c440
lea rcx, [rsp + 0x6d0]
call fcn.18000c470
lea rcx, [rsp + 0x670]
call fcn.18000c440
lea rcx, [rsp + 0x6f0]
call fcn.18000c440
lea rcx, [rsp + 0x710]
call fcn.18000c440
lea rcx, [rsp + 0x68]
call fcn.18000c4a0
mov rax, qword [rsp + 0x2430]
jmp 0x18000674a
mov dword [rsp + 0x124], 0
jmp 0x18000503d
mov eax, dword [rsp + 0x124]
inc eax
mov dword [rsp + 0x124], eax
mov eax, dword [rsp + 0x4b0]
cmp dword [rsp + 0x124], eax
jae 0x180005075
movsxd rax, dword [rsp + 0x124]
mov rcx, qword [rsp + 0x4b8]
add rcx, rax
mov rax, rcx
mov rdx, rax
lea rcx, [rsp + 0x1d8]
call fcn.18000e710
jmp 0x18000502d
mov byte [rsp + 0x870], 0x30
mov byte [rsp + 0x871], 0x31
mov byte [rsp + 0x872], 0x32
mov byte [rsp + 0x873], 0x33
mov byte [rsp + 0x874], 0x34
mov byte [rsp + 0x875], 0x35
mov byte [rsp + 0x876], 0x36
mov byte [rsp + 0x877], 0x37
mov byte [rsp + 0x878], 0x38
mov byte [rsp + 0x879], 0x39
mov byte [rsp + 0x87a], 0x41
mov byte [rsp + 0x87b], 0x42
mov byte [rsp + 0x87c], 0x43
mov byte [rsp + 0x87d], 0x44
mov byte [rsp + 0x87e], 0x45
mov byte [rsp + 0x87f], 0x46
mov dword [rsp + 0x138], 0
jmp 0x180005112
mov eax, dword [rsp + 0x138]
inc eax
mov dword [rsp + 0x138], eax
movsxd rax, dword [rsp + 0x138]
mov qword [rsp + 0x3b0], rax
lea rcx, [rsp + 0x1d8]
call fcn.18000e7a0
mov rcx, qword [rsp + 0x3b0]
cmp rcx, rax
jae 0x1800051cb
movsxd rax, dword [rsp + 0x138]
mov rdx, rax
lea rcx, [rsp + 0x1d8]
call fcn.18000c5f0
movzx eax, byte [rax]
mov byte [rsp + 0x84], al
movsx eax, byte [rsp + 0x84]
and eax, 0xf0
sar eax, 4
cdqe
movzx eax, byte [rsp + rax + 0x870]
mov byte [rsp + 0xd7], al
lea rdx, [rsp + 0xd7]
lea rcx, [rsp + 0x68]
call fcn.18000e710
movsx eax, byte [rsp + 0x84]
and eax, 0xf
sar eax, 0
cdqe
movzx eax, byte [rsp + rax + 0x870]
mov byte [rsp + 0xd8], al
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x68]
call fcn.18000e710
jmp 0x180005102
lea rcx, [rsp + 0x178]
call fcn.18000de60
lea rcx, [rsp + 0x1d8]
call fcn.18000de60
mov byte [rsp + 0xd9], 0x22
lea rdx, [rsp + 0xd9]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xda], 0x2c
lea rdx, [rsp + 0xda]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xdb], 0x22
lea rdx, [rsp + 0xdb]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xdc], 0x6c
lea rdx, [rsp + 0xdc]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xdd], 0x6f
lea rdx, [rsp + 0xdd]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xde], 0x67
lea rdx, [rsp + 0xde]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xdf], 0x69
lea rdx, [rsp + 0xdf]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xe0], 0x6e
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xe1], 0x73
lea rdx, [rsp + 0xe1]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xe2], 0x22
lea rdx, [rsp + 0xe2]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xe3], 0x3a
lea rdx, [rsp + 0xe3]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xe4], 0x22
lea rdx, [rsp + 0xe4]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov dword [rsp + 0x80], 0
lea rcx, [rsp + 0x228]
call fcn.18000c0e0
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0x1000
lea rax, [rsp + 0x1410]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x290]
call fcn.18000f172
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
jge 0x180005397
cmp dword [rsp + 0x60], 0x103
jne 0x180005423
cmp dword [rsp + 0x60], 0x103
jne 0x1800053bc
xor edx, edx
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [rsp + 0x160]
mov dword [rsp + 0x60], eax
mov eax, dword [rsp + 0x168]
mov dword [rsp + 0x80], eax
lea rdx, [rsp + 0x4c8]
lea rcx, [rsp + 0x228]
call fcn.18000e190
mov rax, qword [rax]
mov qword [rsp + 0x3b8], rax
mov eax, dword [rsp + 0x80]
lea rax, [rsp + rax + 0x1410]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1410]
mov r8, qword [rsp + 0x3b8]
lea rdx, [rsp + 0x4d0]
lea rcx, [rsp + 0x228]
call fcn.18000b3a0
cmp dword [rsp + 0x60], 0
jl 0x18000543b
cmp dword [rsp + 0x80], 0x1000
je 0x180005335
mov dword [rsp + 0x13c], 0
jmp 0x180005458
mov eax, dword [rsp + 0x13c]
inc eax
mov dword [rsp + 0x13c], eax
movsxd rax, dword [rsp + 0x13c]
mov qword [rsp + 0x3c0], rax
lea rcx, [rsp + 0x228]
call fcn.18000e7a0
mov rcx, qword [rsp + 0x3c0]
cmp rcx, rax
jae 0x180005511
movsxd rax, dword [rsp + 0x13c]
mov rdx, rax
lea rcx, [rsp + 0x228]
call fcn.18000c5f0
movzx eax, byte [rax]
mov byte [rsp + 0x85], al
movsx eax, byte [rsp + 0x85]
and eax, 0xf0
sar eax, 4
cdqe
movzx eax, byte [rsp + rax + 0x870]
mov byte [rsp + 0xe5], al
lea rdx, [rsp + 0xe5]
lea rcx, [rsp + 0x68]
call fcn.18000e710
movsx eax, byte [rsp + 0x85]
and eax, 0xf
sar eax, 0
cdqe
movzx eax, byte [rsp + rax + 0x870]
mov byte [rsp + 0xe6], al
lea rdx, [rsp + 0xe6]
lea rcx, [rsp + 0x68]
call fcn.18000e710
jmp 0x180005448
lea rcx, [rsp + 0x228]
call fcn.18000de60
mov byte [rsp + 0xe7], 0x22
lea rdx, [rsp + 0xe7]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xe8], 0x2c
lea rdx, [rsp + 0xe8]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xe9], 0x22
lea rdx, [rsp + 0xe9]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xea], 0x63
lea rdx, [rsp + 0xea]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xeb], 0x61
lea rdx, [rsp + 0xeb]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xec], 0x72
lea rdx, [rsp + 0xec]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xed], 0x64
lea rdx, [rsp + 0xed]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xee], 0x73
lea rdx, [rsp + 0xee]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xef], 0x22
lea rdx, [rsp + 0xef]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xf0], 0x3a
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xf1], 0x22
lea rdx, [rsp + 0xf1]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov dword [rsp + 0x80], 0
lea rcx, [rsp + 0x210]
call fcn.18000c0e0
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0x1000
lea rax, [rsp + 0x1410]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x298]
call fcn.18000f172
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
jge 0x1800056b6
cmp dword [rsp + 0x60], 0x103
jne 0x180005742
cmp dword [rsp + 0x60], 0x103
jne 0x1800056db
xor edx, edx
mov rcx, qword [rsp + 0x298]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [rsp + 0x160]
mov dword [rsp + 0x60], eax
mov eax, dword [rsp + 0x168]
mov dword [rsp + 0x80], eax
lea rdx, [rsp + 0x4d8]
lea rcx, [rsp + 0x210]
call fcn.18000e190
mov rax, qword [rax]
mov qword [rsp + 0x3c8], rax
mov eax, dword [rsp + 0x80]
lea rax, [rsp + rax + 0x1410]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1410]
mov r8, qword [rsp + 0x3c8]
lea rdx, [rsp + 0x4e0]
lea rcx, [rsp + 0x210]
call fcn.18000b3a0
cmp dword [rsp + 0x60], 0
jl 0x18000575a
cmp dword [rsp + 0x80], 0x1000
je 0x180005654
mov dword [rsp + 0x140], 0
jmp 0x180005777
mov eax, dword [rsp + 0x140]
inc eax
mov dword [rsp + 0x140], eax
movsxd rax, dword [rsp + 0x140]
mov qword [rsp + 0x3d0], rax
lea rcx, [rsp + 0x210]
call fcn.18000e7a0
mov rcx, qword [rsp + 0x3d0]
cmp rcx, rax
jae 0x180005830
movsxd rax, dword [rsp + 0x140]
mov rdx, rax
lea rcx, [rsp + 0x210]
call fcn.18000c5f0
movzx eax, byte [rax]
mov byte [rsp + 0x86], al
movsx eax, byte [rsp + 0x86]
and eax, 0xf0
sar eax, 4
cdqe
movzx eax, byte [rsp + rax + 0x870]
mov byte [rsp + 0xf2], al
lea rdx, [rsp + 0xf2]
lea rcx, [rsp + 0x68]
call fcn.18000e710
movsx eax, byte [rsp + 0x86]
and eax, 0xf
sar eax, 0
cdqe
movzx eax, byte [rsp + rax + 0x870]
mov byte [rsp + 0xf3], al
lea rdx, [rsp + 0xf3]
lea rcx, [rsp + 0x68]
call fcn.18000e710
jmp 0x180005767
lea rcx, [rsp + 0x210]
call fcn.18000de60
mov byte [rsp + 0xf4], 0x22
lea rdx, [rsp + 0xf4]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xf5], 0x2c
lea rdx, [rsp + 0xf5]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xf6], 0x22
lea rdx, [rsp + 0xf6]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xf7], 0x63
lea rdx, [rsp + 0xf7]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xf8], 0x6f
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xf9], 0x6f
lea rdx, [rsp + 0xf9]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xfa], 0x6b
lea rdx, [rsp + 0xfa]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xfb], 0x69
lea rdx, [rsp + 0xfb]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0x104], 0x65
lea rdx, [rsp + 0x104]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xfc], 0x73
lea rdx, [rsp + 0xfc]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xfd], 0x22
lea rdx, [rsp + 0xfd]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xfe], 0x3a
lea rdx, [rsp + 0xfe]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0xff], 0x22
lea rdx, [rsp + 0xff]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov dword [rsp + 0x80], 0
lea rcx, [rsp + 0x1f8]
call fcn.18000c0e0
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0x1000
lea rax, [rsp + 0x1410]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x288]
call fcn.18000f172
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
jge 0x180005a09
cmp dword [rsp + 0x60], 0x103
jne 0x180005a95
cmp dword [rsp + 0x60], 0x103
jne 0x180005a2e
xor edx, edx
mov rcx, qword [rsp + 0x288]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [rsp + 0x160]
mov dword [rsp + 0x60], eax
mov eax, dword [rsp + 0x168]
mov dword [rsp + 0x80], eax
lea rdx, [rsp + 0x4e8]
lea rcx, [rsp + 0x1f8]
call fcn.18000e190
mov rax, qword [rax]
mov qword [rsp + 0x3d8], rax
mov eax, dword [rsp + 0x80]
lea rax, [rsp + rax + 0x1410]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1410]
mov r8, qword [rsp + 0x3d8]
lea rdx, [rsp + 0x4f0]
lea rcx, [rsp + 0x1f8]
call fcn.18000b3a0
cmp dword [rsp + 0x60], 0
jl 0x180005aad
cmp dword [rsp + 0x80], 0x1000
je 0x1800059a7
mov dword [rsp + 0x144], 0
jmp 0x180005aca
mov eax, dword [rsp + 0x144]
inc eax
mov dword [rsp + 0x144], eax
movsxd rax, dword [rsp + 0x144]
mov qword [rsp + 0x3e0], rax
lea rcx, [rsp + 0x1f8]
call fcn.18000e7a0
mov rcx, qword [rsp + 0x3e0]
cmp rcx, rax
jae 0x180005b83
movsxd rax, dword [rsp + 0x144]
mov rdx, rax
lea rcx, [rsp + 0x1f8]
call fcn.18000c5f0
movzx eax, byte [rax]
mov byte [rsp + 0x87], al
movsx eax, byte [rsp + 0x87]
and eax, 0xf0
sar eax, 4
cdqe
movzx eax, byte [rsp + rax + 0x870]
mov byte [rsp + 0x100], al
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x68]
call fcn.18000e710
movsx eax, byte [rsp + 0x87]
and eax, 0xf
sar eax, 0
cdqe
movzx eax, byte [rsp + rax + 0x870]
mov byte [rsp + 0x101], al
lea rdx, [rsp + 0x101]
lea rcx, [rsp + 0x68]
call fcn.18000e710
jmp 0x180005aba
lea rcx, [rsp + 0x1f8]
call fcn.18000de60
mov byte [rsp + 0x102], 0x22
lea rdx, [rsp + 0x102]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0x103], 0x7d
lea rdx, [rsp + 0x103]
lea rcx, [rsp + 0x68]
call fcn.18000e710
mov byte [rsp + 0x888], 0xa8
mov byte [rsp + 0x889], 0xca
mov byte [rsp + 0x88a], 0xc9
mov byte [rsp + 0x88b], 0xab
mov byte [rsp + 0x88c], 0xdd
mov byte [rsp + 0x88d], 0xad
mov byte [rsp + 0x88e], 0xbf
mov byte [rsp + 0x88f], 0xb6
mov byte [rsp + 0x890], 0xac
mov byte [rsp + 0x891], 0xd8
mov byte [rsp + 0x892], 0xa2
mov byte [rsp + 0x893], 0x8b
mov byte [rsp + 0x894], 0x6d
mov byte [rsp + 0x895], 0x71
mov byte [rsp + 0x896], 0x2c
mov byte [rsp + 0x897], 0x68
mov byte [rsp + 0x898], 0x61
mov byte [rsp + 0x899], 0x7c
mov byte [rsp + 0x89a], 6
mov r8b, 0xf4
mov edx, 0x13
lea rcx, [rsp + 0x888]
call fcn.180001480
lea rdx, [0x180022432]
lea rcx, [rsp + 0x7d0]
call fcn.18000b740
mov dword [rsp + 0x148], 0
jmp 0x180005ca2
mov eax, dword [rsp + 0x148]
inc eax
mov dword [rsp + 0x148], eax
movsxd rax, dword [rsp + 0x148]
cmp rax, 0x13
jae 0x180005ccf
movsxd rax, dword [rsp + 0x148]
movzx edx, byte [rsp + rax + 0x888]
lea rcx, [rsp + 0x7d0]
call fcn.18000c790
jmp 0x180005c92
lea rcx, [rsp + 0x15b]
call fcn.180009b10
mov qword [rsp + 0x3f8], rax
lea rdx, [rsp + 0x4f8]
lea rcx, [rsp + 0x7d0]
call fcn.18000e120
mov rax, qword [rax]
mov qword [rsp + 0x3e8], rax
mov rax, qword [rsp + 0x3e8]
mov qword [rsp + 0x400], rax
lea rdx, [rsp + 0x500]
lea rcx, [rsp + 0x7d0]
call fcn.18000ddb0
mov rax, qword [rax]
mov qword [rsp + 0x3f0], rax
mov rax, qword [rsp + 0x3f0]
mov qword [rsp + 0x408], rax
mov r9, qword [rsp + 0x3f8]
mov r8, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x408]
lea rcx, [rsp + 0x7f0]
call fcn.180008dd0
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x410], rax
lea rcx, [rsp + 0x7f0]
call fcn.18000de10
mov r8d, 0x103
lea rdx, [rsp + 0x1200]
mov rcx, rax
call qword [rsp + 0x410]
lea rax, [rsp + 0x1200]
mov qword [rsp + 0x118], rax
lea rcx, [rsp + 0x1200]
call fcn.180016548
shl rax, 1
mov word [rsp + 0x110], ax
movzx eax, word [rsp + 0x110]
add rax, 2
mov word [rsp + 0x112], ax
mov dword [rsp + 0x190], 0x30
mov qword [rsp + 0x198], 0
mov dword [rsp + 0x1a8], 0x40
lea rax, [rsp + 0x110]
mov qword [rsp + 0x1a0], rax
mov qword [rsp + 0x1b0], 0
mov qword [rsp + 0x1b8], 0
mov rdx, qword [0x18002e158]
mov ecx, dword [0x18002e148]
call fcn.18000f150
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x40], 0x60
mov dword [rsp + 0x38], 5
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x240]
lea r8, [rsp + 0x190]
mov edx, 0x12019f
lea rcx, [rsp + 0x150]
call fcn.18000f172
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
jge 0x180005fbe
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2430]
call fcn.18000c0e0
lea rcx, [rsp + 0x7f0]
call fcn.18000c470
lea rcx, [rsp + 0x7d0]
call fcn.18000c440
lea rcx, [rsp + 0x1f8]
call fcn.18000c4a0
lea rcx, [rsp + 0x210]
call fcn.18000c4a0
lea rcx, [rsp + 0x228]
call fcn.18000c4a0
lea rcx, [rsp + 0x1d8]
call fcn.18000c4a0
lea rcx, [rsp + 0x770]
call fcn.18000c440
lea rcx, [rsp + 0x178]
call fcn.18000c4a0
lea rcx, [rsp + 0x7b0]
call fcn.18000c470
lea rcx, [rsp + 0x730]
call fcn.18000c440
lea rcx, [rsp + 0x790]
call fcn.18000c470
lea rcx, [rsp + 0x6b0]
call fcn.18000c440
lea rcx, [rsp + 0x750]
call fcn.18000c470
lea rcx, [rsp + 0x690]
call fcn.18000c440
lea rcx, [rsp + 0x6d0]
call fcn.18000c470
lea rcx, [rsp + 0x670]
call fcn.18000c440
lea rcx, [rsp + 0x6f0]
call fcn.18000c440
lea rcx, [rsp + 0x710]
call fcn.18000c440
lea rcx, [rsp + 0x68]
call fcn.18000c4a0
mov rax, qword [rsp + 0x2430]
jmp 0x18000674a
mov qword [rsp + 0x418], 0
mov rdx, qword [0x18002e188]
mov ecx, dword [0x18002e178]
call fcn.18000f150
lea rcx, [rsp + 0x68]
call fcn.18000e7a0
mov qword [rsp + 0x460], rax
lea rcx, [rsp + 0x68]
call fcn.18000ac70
mov qword [rsp + 0x428], rax
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x430], rax
mov qword [rsp + 0x40], 0
lea rax, [rsp + 0x418]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x430]
call fcn.18000f172
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
jge 0x18000618d
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2430]
call fcn.18000c0e0
lea rcx, [rsp + 0x7f0]
call fcn.18000c470
lea rcx, [rsp + 0x7d0]
call fcn.18000c440
lea rcx, [rsp + 0x1f8]
call fcn.18000c4a0
lea rcx, [rsp + 0x210]
call fcn.18000c4a0
lea rcx, [rsp + 0x228]
call fcn.18000c4a0
lea rcx, [rsp + 0x1d8]
call fcn.18000c4a0
lea rcx, [rsp + 0x770]
call fcn.18000c440
lea rcx, [rsp + 0x178]
call fcn.18000c4a0
lea rcx, [rsp + 0x7b0]
call fcn.18000c470
lea rcx, [rsp + 0x730]
call fcn.18000c440
lea rcx, [rsp + 0x790]
call fcn.18000c470
lea rcx, [rsp + 0x6b0]
call fcn.18000c440
lea rcx, [rsp + 0x750]
call fcn.18000c470
lea rcx, [rsp + 0x690]
call fcn.18000c440
lea rcx, [rsp + 0x6d0]
call fcn.18000c470
lea rcx, [rsp + 0x670]
call fcn.18000c440
lea rcx, [rsp + 0x6f0]
call fcn.18000c440
lea rcx, [rsp + 0x710]
call fcn.18000c440
lea rcx, [rsp + 0x68]
call fcn.18000c4a0
mov rax, qword [rsp + 0x2430]
jmp 0x18000674a
mov rcx, qword [rsp + 0x150]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, qword [0x18002e158]
mov ecx, dword [0x18002e148]
call fcn.18000f150
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x40], 0x60
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x240]
lea r8, [rsp + 0x190]
mov edx, 0x12019f
lea rcx, [rsp + 0x150]
call fcn.18000f172
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
jge 0x180006335
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2430]
call fcn.18000c0e0
lea rcx, [rsp + 0x7f0]
call fcn.18000c470
lea rcx, [rsp + 0x7d0]
call fcn.18000c440
lea rcx, [rsp + 0x1f8]
call fcn.18000c4a0
lea rcx, [rsp + 0x210]
call fcn.18000c4a0
lea rcx, [rsp + 0x228]
call fcn.18000c4a0
lea rcx, [rsp + 0x1d8]
call fcn.18000c4a0
lea rcx, [rsp + 0x770]
call fcn.18000c440
lea rcx, [rsp + 0x178]
call fcn.18000c4a0
lea rcx, [rsp + 0x7b0]
call fcn.18000c470
lea rcx, [rsp + 0x730]
call fcn.18000c440
lea rcx, [rsp + 0x790]
call fcn.18000c470
lea rcx, [rsp + 0x6b0]
call fcn.18000c440
lea rcx, [rsp + 0x750]
call fcn.18000c470
lea rcx, [rsp + 0x690]
call fcn.18000c440
lea rcx, [rsp + 0x6d0]
call fcn.18000c470
lea rcx, [rsp + 0x670]
call fcn.18000c440
lea rcx, [rsp + 0x6f0]
call fcn.18000c440
lea rcx, [rsp + 0x710]
call fcn.18000c440
lea rcx, [rsp + 0x68]
call fcn.18000c4a0
mov rax, qword [rsp + 0x2430]
jmp 0x18000674a
mov rdx, qword [rsp + 0x2438]
mov rcx, qword [rsp + 0x150]
call fcn.180001ba0
mov rcx, qword [rsp + 0x150]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, qword [0x18002e158]
mov ecx, dword [0x18002e148]
call fcn.18000f150
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x40], 0x60
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x240]
lea r8, [rsp + 0x190]
mov edx, 0x12019f
lea rcx, [rsp + 0x150]
call fcn.18000f172
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
jge 0x1800064f2
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x2430]
call fcn.18000c0e0
lea rcx, [rsp + 0x7f0]
call fcn.18000c470
lea rcx, [rsp + 0x7d0]
call fcn.18000c440
lea rcx, [rsp + 0x1f8]
call fcn.18000c4a0
lea rcx, [rsp + 0x210]
call fcn.18000c4a0
lea rcx, [rsp + 0x228]
call fcn.18000c4a0
lea rcx, [rsp + 0x1d8]
call fcn.18000c4a0
lea rcx, [rsp + 0x770]
call fcn.18000c440
lea rcx, [rsp + 0x178]
call fcn.18000c4a0
lea rcx, [rsp + 0x7b0]
call fcn.18000c470
lea rcx, [rsp + 0x730]
call fcn.18000c440
lea rcx, [rsp + 0x790]
call fcn.18000c470
lea rcx, [rsp + 0x6b0]
call fcn.18000c440
lea rcx, [rsp + 0x750]
call fcn.18000c470
lea rcx, [rsp + 0x690]
call fcn.18000c440
lea rcx, [rsp + 0x6d0]
call fcn.18000c470
lea rcx, [rsp + 0x670]
call fcn.18000c440
lea rcx, [rsp + 0x6f0]
call fcn.18000c440
lea rcx, [rsp + 0x710]
call fcn.18000c440
lea rcx, [rsp + 0x68]
call fcn.18000c4a0
mov rax, qword [rsp + 0x2430]
jmp 0x18000674a
mov dword [rsp + 0x80], 0
lea rcx, [rsp + 0x488]
call fcn.18000c0e0
mov rdx, qword [0x18002e170]
mov ecx, dword [0x18002e160]
call fcn.18000f150
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0x1000
lea rax, [rsp + 0x1410]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x150]
call fcn.18000f172
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
jge 0x18000657e
cmp dword [rsp + 0x60], 0x103
jne 0x18000660a
cmp dword [rsp + 0x60], 0x103
jne 0x1800065a3
xor edx, edx
mov rcx, qword [rsp + 0x150]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [rsp + 0x160]
mov dword [rsp + 0x60], eax
mov eax, dword [rsp + 0x168]
mov dword [rsp + 0x80], eax
lea rdx, [rsp + 0x508]
lea rcx, [rsp + 0x488]
call fcn.18000e190
mov rax, qword [rax]
mov qword [rsp + 0x438], rax
mov eax, dword [rsp + 0x80]
lea rax, [rsp + rax + 0x1410]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1410]
mov r8, qword [rsp + 0x438]
lea rdx, [rsp + 0x510]
lea rcx, [rsp + 0x488]
call fcn.18000b3a0
cmp dword [rsp + 0x60], 0
jl 0x180006622
cmp dword [rsp + 0x80], 0x1000
je 0x18000651c
lea rcx, [rsp + 0x68]
call fcn.18000de60
lea rdx, [rsp + 0x488]
mov rcx, qword [rsp + 0x2430]
call fcn.18000bfb0
lea rcx, [rsp + 0x488]
call fcn.18000c4a0
lea rcx, [rsp + 0x7f0]
call fcn.18000c470
lea rcx, [rsp + 0x7d0]
call fcn.18000c440
lea rcx, [rsp + 0x1f8]
call fcn.18000c4a0
lea rcx, [rsp + 0x210]
call fcn.18000c4a0
lea rcx, [rsp + 0x228]
call fcn.18000c4a0
lea rcx, [rsp + 0x1d8]
call fcn.18000c4a0
lea rcx, [rsp + 0x770]
call fcn.18000c440
lea rcx, [rsp + 0x178]
call fcn.18000c4a0
lea rcx, [rsp + 0x7b0]
call fcn.18000c470
lea rcx, [rsp + 0x730]
call fcn.18000c440
lea rcx, [rsp + 0x790]
call fcn.18000c470
lea rcx, [rsp + 0x6b0]
call fcn.18000c440
lea rcx, [rsp + 0x750]
call fcn.18000c470
lea rcx, [rsp + 0x690]
call fcn.18000c440
lea rcx, [rsp + 0x6d0]
call fcn.18000c470
lea rcx, [rsp + 0x670]
call fcn.18000c440
lea rcx, [rsp + 0x6f0]
call fcn.18000c440
lea rcx, [rsp + 0x710]
call fcn.18000c440
lea rcx, [rsp + 0x68]
call fcn.18000c4a0
mov rax, qword [rsp + 0x2430]
mov rcx, qword [rsp + 0x2410]
xor rcx, rsp
call fcn.18000faf0
add rsp, 0x2420
pop rdi
ret