Function at 0x180026b10
Capabilities:
Contain obfuscated stackstrings
Open clipboard
Write clipboard data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x10], rdx
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x12f0]
mov eax, 0x13f0
call fcn.1800cf070
sub rsp, rax
mov rax, qword [0x18014a1c0]
xor rax, rsp
mov qword [rbp + 0x12e0], rax
xor ebx, ebx
mov dword [rsp + 0x50], ebx
mov dword [rsp + 0x54], ebx
lea rax, [rbp + 0x5b0]
mov qword [rbp + 0x460], rax
mov dword [rbp - 0x20], 0xfffbe3d4
mov dword [rbp - 0x1c], 0xf0c1f2fb
mov dword [rbp - 0x18], 0xf6f3e7ec
mov word [rbp - 0x14], 0xa5f5
xor eax, eax
mov dword [rbp - 0x12], eax
mov byte [rbp - 0xe], al
mov qword [rsp + 0x38], rbx
mov rax, qword [rsp + 0x38]
movabs r9, 0xb9da7db12523c113
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax - 0x20]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x7b
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax - 0x20], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x13
jb 0x180026bb0
movzx edx, byte [rsp + 0x30]
lea rcx, [rbp + 0x5b0]
call fcn.1800180a0
nop
lea rax, [rbp - 0x20]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x180026c15
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x5b0]
call fcn.1800180c0
nop
lea r8, [rbp + 0x5b0]
lea rdx, [rbp + 0x1008]
lea rcx, [rbp + 0x1328]
call fcn.18003a5a0
mov byte [0x18014e7c2], 1
mov dword [rbp], 0xed3ec33
mov dword [rbp + 4], 0x613036d0
mov dword [rbp + 8], 0x1e11111d
mov dword [rbp + 0xc], 0x1e6a6ed8
mov dword [rbp + 0x10], 0x707696a
mov word [rbp + 0x14], 0xe132
xor eax, eax
mov qword [rbp + 0x16], rax
mov dword [rbp + 0x1e], eax
mov word [rbp + 0x22], ax
mov byte [rbp + 0x24], al
mov qword [rsp + 0x38], rbx
mov rax, qword [rsp + 0x38]
movabs r9, 0x4e1cd8437869c21e
nop
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x2e
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x25
jb 0x180026ca0
lea rdx, [rbp]
lea rcx, [0x18014cdc0]
call fcn.1800169d0
mov rcx, rax
call fcn.180016c80
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xff0], xmm0
mov qword [rbp + 0x1000], rax
lea rcx, [rbp + 0xff0]
call fcn.180026610
nop
cmp byte [0x18014e7c2], 1
jne 0x180029fce
movzx r14d, byte [rsp + 0x30]
movzx r13d, byte [rsp + 0x30]
movzx r15d, byte [rsp + 0x30]
movzx esi, byte [rsp + 0x30]
movzx ebx, byte [rsp + 0x30]
movzx edi, byte [rsp + 0x30]
nop
lea rdx, [0x18012e970]
lea rcx, [0x18014cdc0]
call fcn.1800169d0
mov rcx, rax
call fcn.180016c80
lea rdx, [rbp + 0xa88]
lea rcx, [rbp + 0x1008]
call fcn.18003a410
mov rdx, rax
lea rcx, [rbp + 0xff0]
call fcn.18002a140
lea rcx, [rbp + 0xa88]
call fcn.180011e20
mov rdx, qword [rbp + 0xff8]
mov qword [rbp + 0x460], rdx
mov rax, rdx
mov rcx, qword [rbp + 0xff0]
mov qword [rbp + 0x390], rcx
sub rax, rcx
cmp rax, 8
jb 0x180029fc1
cmp rcx, rdx
je 0x180029fc1
nop
mov rax, qword [rcx]
mov qword [rbp + 0xf38], rax
test rax, rax
jne 0x180026de5
mov byte [0x18014e7c2], al
lea rdx, [rbp + 0xf60]
lea rcx, [rbp + 0xf38]
call fcn.18003a180
nop
xor r8d, r8d
lea rdx, [0x18012e980]
lea rcx, [rbp + 0xf60]
call fcn.18002ab30
cmp rax, 0xffffffffffffffff
je 0x180026e5c
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x20], rcx
mov r9, rax
xor r8d, r8d
lea rdx, [rbp + 0xf60]
lea rcx, [rbp + 0x9a8]
call fcn.180015180
or dword [rsp + 0x50], 0x10
lea rdx, [rbp + 0x9a8]
lea rcx, [rbp + 0xf60]
call fcn.1800135b0
lea rcx, [rbp + 0x9a8]
call fcn.180013550
lea rdx, [rbp + 0xd90]
lea rcx, [rbp + 0xf38]
call fcn.18003a320
lea rdx, [0x18012e984]
mov rcx, rax
call fcn.180016820
mov byte [rsp + 0x30], al
lea rcx, [rbp + 0xd90]
call fcn.180013550
cmp byte [rsp + 0x30], 0
je 0x180029f96
mov dword [rbp + 0x1b0], 0x9793aeac
mov dword [rbp + 0x1b4], 0xaea4a1a7
mov word [rbp + 0x1b8], 0x8eb6
mov byte [rbp + 0x1ba], 0x2a
xor eax, eax
mov dword [rbp + 0x1bb], eax
mov word [rbp + 0x1bf], ax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs r12, 0xc8425d578b5c288
mov r8, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x1b0]
add r8, r12
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x48
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x1b0], cl
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x11
jb 0x180026ee0
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0xf60]
call fcn.180016820
test al, al
je 0x18002718f
mov eax, 1
mov word [rbp + 0xf4c], ax
mov rdx, qword [rbp + 0xf38]
add rdx, 0x1b8
mov qword [rsp + 0x20], 0
lea r9d, [rax + 1]
lea r8, [rbp + 0xf4c]
mov rcx, qword [0x18014e7d8]
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
lea rax, [rbp + 0x5d0]
mov qword [rsp + 0x48], rax
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0x5d0]
call fcn.1800180a0
nop
mov r8d, 1
lea rdx, [0x18012e988]
lea rcx, [rbp + 0x5d0]
call fcn.1800180c0
nop
lea rdx, [rbp + 0x5d0]
lea rcx, [rbp + 0xf38]
call fcn.18003a1f0
lea rdx, [rbp + 0xaa0]
lea rcx, [rbp + 0xf38]
call fcn.18003a410
nop
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
sub rdx, rcx
sar rdx, 3
test rdx, rdx
je 0x18002a01d
lea rdx, [rbp + 0x1030]
call fcn.18003a320
nop
lea rcx, [rbp + 0xaa0]
call fcn.180011e20
lea rdx, [0x18012dac5]
lea rcx, [rbp + 0x1030]
call fcn.180016820
test al, al
je 0x180027083
lea rax, [rbp + 0x5f0]
mov qword [rsp + 0x48], rax
movzx edx, r14b
lea rcx, [rbp + 0x5f0]
call fcn.1800180a0
nop
mov r8d, 1
lea rdx, [0x18012e98c]
lea rcx, [rbp + 0x5f0]
call fcn.1800180c0
nop
lea rdx, [rbp + 0x5f0]
lea rcx, [rbp + 0xf38]
call fcn.18003a1f0
nop
lea rcx, [rbp + 0x1030]
call fcn.180013550
jmp 0x180029f96
lea rdx, [rbp + 0x1030]
lea rcx, [rbp + 0xdb0]
call fcn.1800137c0
mov rdx, rax
lea rcx, [rbp + 0x1010]
call fcn.18001f390
nop
lea rax, [rbp + 0x1010]
cmp qword [rbp + 0x1028], 0xf
cmova rax, qword [rbp + 0x1010]
cmp byte [rax], 0
jne 0x180027102
lea rax, [rbp + 0x610]
mov qword [rsp + 0x48], rax
movzx edx, r15b
lea rcx, [rbp + 0x610]
call fcn.1800180a0
nop
mov r8d, 1
lea rdx, [0x18012e98c]
lea rcx, [rbp + 0x610]
call fcn.1800180c0
nop
lea rdx, [rbp + 0x610]
jmp 0x180027164
mov rcx, qword [rbp + 0xf38]
add rcx, 0x158
call fcn.180008b10
lea rcx, [rax + 0x10]
lea rdx, [rbp + 0x1010]
call fcn.180039e70
lea rax, [rbp + 0x630]
mov qword [rsp + 0x48], rax
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0x630]
call fcn.1800180a0
nop
mov r8d, 1
lea rdx, [0x18012e990]
lea rcx, [rbp + 0x630]
call fcn.1800180c0
nop
lea rdx, [rbp + 0x630]
lea rcx, [rbp + 0xf38]
call fcn.18003a1f0
nop
lea rcx, [rbp + 0x1010]
call fcn.180013550
nop
lea rcx, [rbp + 0x1030]
call fcn.180013550
jmp 0x180029f96
mov dword [rbp - 0x80], 0xd4d6e8d7
mov dword [rbp - 0x7c], 0xd7dfd7e7
mov dword [rbp - 0x78], 0x2f33e3d0
mov dword [rbp - 0x74], 0x1b2d1e1d
mov word [rbp - 0x70], 0xbd19
xor eax, eax
mov qword [rbp - 0x6e], rax
mov dword [rbp - 0x66], eax
mov word [rbp - 0x62], ax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs r15, 0x2afb50799381d2f6
nop dword [rax]
nop word [rax + rax]
mov r8, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax - 0x80]
add r8, r15
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x46
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax - 0x80], cl
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x20
jb 0x1800271e0
movzx r15d, byte [rsp + 0x30]
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0xf60]
call fcn.180016820
test al, al
je 0x180027738
mov r14d, 1
mov word [rbp + 0xf40], r14w
mov rdx, qword [rbp + 0xf38]
add rdx, 0x1b8
mov qword [rsp + 0x20], 0
lea r9d, [r14 + 1]
lea r8, [rbp + 0xf40]
mov rcx, qword [0x18014e7d8]
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
lea rax, [rbp + 0x650]
mov qword [rsp + 0x48], rax
movzx edx, r13b
lea rcx, [rbp + 0x650]
call fcn.1800180a0
nop
mov r8d, r14d
lea rdx, [0x18012e988]
lea rcx, [rbp + 0x650]
call fcn.1800180c0
nop
lea rdx, [rbp + 0x650]
lea rcx, [rbp + 0xf38]
call fcn.18003a1f0
mov r14d, dword [rsp + 0x50]
nop dword [rax]
lea rdx, [rbp + 0x770]
lea rcx, [rbp + 0xf38]
call fcn.18003a410
mov rcx, rax
or r14d, 1
mov rax, qword [rax + 8]
sub rax, qword [rcx]
cmp rax, 8
jb 0x180027301
cmp qword [rbp + 0xf38], 0
jne 0x180027313
lea rcx, [rbp + 0x770]
call fcn.180011e20
and r14d, 0xfffffffe
jmp 0x1800272d0
lea rcx, [rbp + 0x770]
call fcn.180011e20
and r14d, 0xfffffffe
mov dword [rsp + 0x50], r14d
cmp qword [rbp + 0xf38], 0
movzx r14d, byte [rsp + 0x30]
jne 0x180027351
lea rcx, [rbp + 0xf60]
call fcn.180013550
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x50], eax
jmp 0x180029fa2
lea rdx, [rbp + 0xab8]
lea rcx, [rbp + 0xf38]
call fcn.18003a410
nop
mov rdx, qword [rax]
mov rcx, qword [rax + 8]
sub rcx, rdx
sar rcx, 3
test rcx, rcx
je 0x18002a023
mov rax, qword [rdx]
mov qword [rbp + 0xf58], rax
lea rcx, [rbp + 0xab8]
call fcn.180011e20
mov dword [rbp + 0x110], 0x6c697452
mov dword [rbp + 0x114], 0x716d5c76
mov qword [rbp + 0x118], 0xb707d79
xor eax, eax
mov word [rbp + 0x120], ax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x50], eax
movabs r15, 0xe6678e0cb2992a81
mov r8, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x110]
add r8, r15
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x79
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x110], cl
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x12
jb 0x1800273d6
movzx r15d, byte [rsp + 0x30]
lea rdx, [rbp + 0xdd0]
lea rcx, [rbp + 0xf58]
call fcn.18003a0e0
lea rdx, [rbp + 0x110]
mov rcx, rax
call fcn.180016820
mov byte [rsp + 0x30], al
lea rcx, [rbp + 0xdd0]
call fcn.180013550
mov rdx, qword [rbp + 0xf58]
cmp byte [rsp + 0x30], 0
je 0x180027470
add rdx, 0x1b8
jmp 0x180027477
add rdx, 0x158
add rdx, 0x10
mov qword [rsp + 0x20], 0
mov r9d, 8
lea r8, [rbp + 0xf30]
mov rcx, qword [0x18014e7d8]
call qword [sym.imp.kernel32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0xf30]
add rdx, 0x10
lea rcx, [rbp + 0x1070]
call fcn.180039b00
nop
lea rdx, [rbp + 0x1070]
lea rcx, [rbp + 0xdf0]
call fcn.180021a60
mov rdx, rax
lea rcx, [rbp + 0x1070]
call fcn.1800135b0
lea rcx, [rbp + 0xdf0]
call fcn.180013550
lea rdx, [rbp + 0x1070]
lea rcx, [rbp + 0x1050]
call fcn.180026630
nop
mov dword [rbp + 0x3a0], 0xe2f1031
mov byte [rbp + 0x3a4], 0xf0
xor eax, eax
mov qword [rbp + 0x3a5], rax
mov dword [rbp + 0x3ad], eax
mov word [rbp + 0x3b1], ax
xor r9d, r9d
mov qword [rsp + 0x38], r9
mov rax, qword [rsp + 0x38]
movabs r13, 0xa02d1d7c5563ee9e
mov r8, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x3a0]
add r8, r13
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
sub cl, 0x52
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x3a0], cl
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x13
jb 0x180027536
movzx r13d, byte [rsp + 0x30]
mov dword [rbp + 0x130], 0xc6c6c8da
mov dword [rbp + 0x134], 0xa896c3c6
mov qword [rbp + 0x138], 0x7ba58889
xor eax, eax
mov word [rbp + 0x140], ax
mov qword [rsp + 0x38], r9
mov rax, qword [rsp + 0x38]
movabs r14, 0xae29ddea40df7c8e
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x130]
add rcx, r14
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x1e
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x130], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x12
jb 0x1800275c3
movzx r14d, byte [rsp + 0x30]
lea r8, [rbp + 0x1050]
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0xe30]
call fcn.180016870
nop
lea rcx, [rbp + 0x3a0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rcx + r8], 0
jne 0x180027640
lea rdx, [rbp + 0x3a0]
mov rcx, rax
call fcn.1800134c0
mov rdx, rax
lea rcx, [rbp + 0x9c8]
call fcn.180013640
or dword [rsp + 0x50], 0x200000
lea rdx, [rbp + 0x9c8]
lea rcx, [rbp + 0xe10]
call fcn.18001fcd0
mov rdx, rax
lea rcx, [rbp + 0x1050]
call fcn.1800135b0
lea rcx, [rbp + 0xe10]
call fcn.180013550
nop
lea rcx, [rbp + 0xe30]
call fcn.180013550
mov rcx, qword [rbp + 0xf38]
add rcx, 0x158
call fcn.180008b10
lea rcx, [rax + 0x10]
lea rdx, [rbp + 0x1050]
call fcn.180039e70
lea rax, [rbp + 0x670]
mov qword [rsp + 0x48], rax
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0x670]
call fcn.1800180a0
nop
mov r8d, 1
lea rdx, [0x18012e990]
lea rcx, [rbp + 0x670]
call fcn.1800180c0
nop
lea rdx, [rbp + 0x670]
lea rcx, [rbp + 0xf38]
call fcn.18003a1f0
nop
lea rcx, [rbp + 0x1050]
call fcn.180013550
nop
lea rcx, [rbp + 0x1070]
call fcn.180013550
jmp 0x180029f96
mov dword [rbp + 0x90], 0x74867083
mov dword [rbp + 0x94], 0x7976707c
mov dword [rbp + 0x98], 0x7f8c6477
mov byte [rbp + 0x9c], 0
xor eax, eax
mov qword [rbp + 0x9d], rax
mov dword [rbp + 0xa5], eax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs r15, 0xb597fe23fc6fe202
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x90]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0xe
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x90], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x19
jb 0x180027780
movzx r15d, byte [rsp + 0x30]
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0xf60]
call fcn.180016820
test al, al
je 0x18002797b
lea rax, [rbp + 0x690]
mov qword [rsp + 0x48], rax
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0x690]
call fcn.1800180a0
nop
mov r8d, 1
lea rdx, [0x18012e988]
lea rcx, [rbp + 0x690]
call fcn.1800180c0
nop
lea rdx, [rbp + 0x690]
lea rcx, [rbp + 0xf38]
call fcn.18003a1f0
lea rdx, [rbp + 0xad0]
lea rcx, [rbp + 0xf38]
call fcn.18003a410
nop
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
sub rdx, rcx
sar rdx, 3
test rdx, rdx
je 0x18002a029
lea rdx, [rbp + 0x1090]
call fcn.18003a320
nop
lea rcx, [rbp + 0xad0]
call fcn.180011e20
xor ecx, ecx
call qword [sym.imp.user32.dll_OpenClipboard]
call qword [sym.imp.user32.dll_EmptyClipboard]
mov rdx, qword [rbp + 0x10a0]
inc rdx
mov ecx, 2
call qword [sym.imp.kernel32.dll_GlobalAlloc]
mov qword [rsp + 0x38], rax
test rax, rax
jne 0x1800278b6
call qword [sym.imp.user32.dll_CloseClipboard]
mov rax, qword [rsp + 0x38]
mov rcx, rax
call qword [sym.imp.kernel32.dll_GlobalLock]
mov qword [rsp + 0x48], rax
test rax, rax
jne 0x1800278da
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.kernel32.dll_GlobalFree]
call qword [sym.imp.user32.dll_CloseClipboard]
lea rcx, [rbp + 0x1090]
call fcn.1800133d0
mov rdx, qword [rbp + 0x10a0]
inc rdx
mov r8, rax
mov rcx, qword [rsp + 0x48]
call fcn.1800ddd90
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.kernel32.dll_GlobalUnlock]
mov rdx, qword [rsp + 0x38]
mov ecx, 1
call qword [sym.imp.user32.dll_SetClipboardData]
call qword [sym.imp.user32.dll_CloseClipboard]
lea rax, [rbp + 0x6b0]
mov qword [rsp + 0x48], rax
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0x6b0]
call fcn.1800180a0
nop
mov r8d, 1
lea rdx, [0x18012db8c]
lea rcx, [rbp + 0x6b0]
call fcn.1800180c0
nop
lea rdx, [rbp + 0x6b0]
lea rcx, [rbp + 0xf38]
call fcn.18003a1f0
nop
lea rcx, [rbp + 0x1090]
call fcn.180013550
jmp 0x180029f96
mov dword [rbp + 0x1d0], 0xc5f6c4f3
mov dword [rbp + 0x1d4], 0xc6c5f6f4
mov word [rbp + 0x1d8], 0x69f8
xor eax, eax
mov dword [rbp + 0x1da], eax
mov word [rbp + 0x1de], ax
mov byte [rbp + 0x1e0], al
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs r12, 0x642ca571b6d24710
mov r8, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x1d0]
add r8, r12
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
sub cl, 0x70
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x1d0], cl
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x11
jb 0x1800279c1
movzx r12d, byte [rsp + 0x30]
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0xf60]
call fcn.180016820
test al, al
je 0x180027b62
lea rax, [rbp + 0x6d0]
mov qword [rsp + 0x48], rax
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0x6d0]
call fcn.1800180a0
nop
mov r8d, 1
lea rdx, [0x18012e988]
lea rcx, [rbp + 0x6d0]
call fcn.1800180c0
nop
lea rdx, [rbp + 0x6d0]
lea rcx, [rbp + 0xf38]
call fcn.18003a1f0
lea rdx, [rbp + 0xae8]
lea rcx, [rbp + 0xf38]
call fcn.18003a410
nop
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
sub rdx, rcx
sar rdx, 3
test rdx, rdx
je 0x18002a02f
lea rdx, [rbp + 0x1110]
call fcn.18003a320
nop
lea rcx, [rbp + 0xae8]
call fcn.180011e20
xor edx, edx
lea r8d, [rdx + 0xa]
lea rcx, [rbp + 0x1110]
call fcn.180020320
mov dword [rbp + 0xf50], eax
mov rdx, qword [0x18014e7d0]
add rdx, 0x4e80c80
mov qword [rsp + 0x20], 0
mov r9d, 8
lea r8, [rbp + 0xf50]
mov rcx, qword [0x18014e7d8]
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
lea rax, [rbp + 0x6f0]
mov qword [rsp + 0x48], rax
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0x6f0]
call fcn.1800180a0
nop
mov r8d, 1
lea rdx, [0x18012e990]
lea rcx, [rbp + 0x6f0]
call fcn.1800180c0
nop
lea rdx, [rbp + 0x6f0]
lea rcx, [rbp + 0xf38]
call fcn.18003a1f0
nop
lea rcx, [rbp + 0x1110]
call fcn.180013550
jmp 0x180029f96
mov dword [rbp + 0x150], 0x56aea856
mov dword [rbp + 0x154], 0xa3a5bca7
mov word [rbp + 0x158], 0xb44d
mov byte [rbp + 0x15a], 0x2a
xor eax, eax
mov dword [rbp + 0x15b], eax
mov word [rbp + 0x15f], ax
mov byte [rbp + 0x161], al
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs r13, 0x6781d512492f2c28
nop
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x150]
add rcx, r13
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x18
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x150], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x12
jb 0x180027bb0
movzx r13d, byte [rsp + 0x30]
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0xf60]
call fcn.180016820
test al, al
je 0x180029a3a
mov eax, 1
mov word [rbp + 0xf44], ax
mov rdx, qword [rbp + 0xf38]
add rdx, 0x1b8
mov qword [rsp + 0x20], 0
lea r9d, [rax + 1]
lea r8, [rbp + 0xf44]
mov rcx, qword [0x18014e7d8]
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
lea rax, [rbp + 0x710]
mov qword [rsp + 0x48], rax
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0x710]
call fcn.1800180a0
nop
mov r8d, 1
lea rdx, [0x18012e988]
lea rcx, [rbp + 0x710]
call fcn.1800180c0
nop
lea rdx, [rbp + 0x710]
lea rcx, [rbp + 0xf38]
call fcn.18003a1f0
lea rdx, [rbp + 0xb00]
lea rcx, [rbp + 0xf38]
call fcn.18003a410
nop
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
sub rdx, rcx
sar rdx, 3
test rdx, rdx
je 0x18002a011
lea rdx, [rbp + 0x11d0]
call fcn.18003a320
nop
lea rcx, [rbp + 0xb00]
call fcn.180011e20
mov qword [rbp + 0xf28], 0
mov byte [rsp + 0x20], 0
mov r9b, 1
lea r8, [rbp + 0xef0]
lea rdx, [rbp + 0x11d0]
lea rcx, [rbp + 0xf80]
call fcn.18002c610
nop
lea rcx, [rbp + 0xf90]
call fcn.1800138e0
lea rcx, [rbp + 0xfb0]
call fcn.1800138e0
lea rcx, [rbp + 0xfd0]
call fcn.1800138e0
nop
mov dword [rbp + 0x3c0], 0x4380809
mov word [rbp + 0x3c4], 0x303
mov byte [rbp + 0x3c6], 0xb0
xor eax, eax
mov qword [rbp + 0x3c7], rax
mov dword [rbp + 0x3cf], eax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs r14, 0xa6a0656f698eb719
nop dword [rax]
mov r8, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x3c0]
add r8, r14
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x51
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x3c0], cl
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x13
jb 0x180027d80
movzx r14d, byte [rsp + 0x30]
lea rdx, [rbp + 0x3c0]
lea rcx, [rbp + 0xe50]
call fcn.180013780
mov rdx, rax
lea rcx, [rbp + 0xf80]
call fcn.18002e520
movzx r8d, byte [rsp + 0x40]
lea rdx, [rbp + 0xa08]
mov rcx, rax
call fcn.180030fa0
or dword [rsp + 0x50], 0x80000000
lea rdx, [rbp + 0xa08]
lea rcx, [rbp + 0xfb0]
call fcn.1800135b0
lea rcx, [rbp + 0xa08]
call fcn.180013550
mov dword [rbp + 0x210], 0x9c848280
mov dword [rbp + 0x214], 0x98839ea4
mov byte [rbp + 0x218], 0x7e
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x219], xmm0
mov word [rbp + 0x229], ax
mov byte [rbp + 0x22b], al
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs r15, 0xcabfa8b382e4122f
nop word [rax + rax]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x210]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x49
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x210], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x1c
jb 0x180027e80
movzx r15d, byte [rsp + 0x30]
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0xe70]
call fcn.180013780
mov rdx, rax
lea rcx, [rbp + 0xf80]
call fcn.18002e520
movzx r8d, byte [rsp + 0x40]
lea rdx, [rbp + 0xa28]
mov rcx, rax
call fcn.180030fa0
or dword [rsp + 0x54], 1
lea rdx, [rbp + 0xa28]
lea rcx, [rbp + 0xfd0]
call fcn.1800135b0
lea rcx, [rbp + 0xa28]
call fcn.180013550
mov dword [rbp + 0x4f0], 0x6f6b6e78
mov byte [rbp + 0x4f4], 0xc2
xor eax, eax
mov qword [rbp + 0x4f5], rax
mov dword [rbp + 0x4fd], eax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs r13, 0x737fcd05e751cce1
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x4f0]
add rcx, r13
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x27
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x4f0], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x11
jb 0x180027f63
movzx r13d, byte [rsp + 0x30]
lea rdx, [rbp + 0x4f0]
lea rcx, [rbp + 0xfb0]
call fcn.180016820
test al, al
je 0x180028301
movzx edx, sil
lea rcx, [rbp + 0x750]
call fcn.1800180a0
nop
xor r8d, r8d
lea rdx, [0x18012dac5]
lea rcx, [rbp + 0x750]
call fcn.1800180c0
nop
mov dword [rbp + 0x4b0], 0x3f233e34
mov byte [rbp + 0x4b4], 0x82
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x4b5], xmm0
mov qword [rbp + 0x4c5], rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs r14, 0xcc61c18c4097dfeb
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x4b0]
add rcx, r14
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x6d
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x4b0], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x1d
jb 0x180028032
movzx r14d, byte [rsp + 0x30]
movzx edx, bl
lea rcx, [rbp + 0x730]
call fcn.1800180a0
nop
lea rax, [rbp + 0x4b0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1800280a4
lea rdx, [rbp + 0x4b0]
lea rcx, [rbp + 0x730]
call fcn.1800180c0
nop
lea r9, [rbp + 0x750]
lea r8, [rbp + 0xfd0]
lea rdx, [rbp + 0x730]
lea rcx, [rbp + 0xe90]
call fcn.180023160
nop
mov rdx, rax
lea rcx, [rbp + 0x1230]
call fcn.180026630
nop
lea rcx, [rbp + 0xe90]
call fcn.180013550
nop
lea rcx, [rbp + 0x730]
call fcn.180013550
nop
lea rcx, [rbp + 0x750]
call fcn.180013550
mov dword [rbp + 0x400], 0x6e8f8869
mov byte [rbp + 0x404], 0xc8
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x405], xmm0
mov word [rbp + 0x415], ax
mov byte [rbp + 0x417], al
xor r9d, r9d
mov qword [rsp + 0x38], r9
mov rax, qword [rsp + 0x38]
movabs r15, 0xf207fc624aab8d62
nop dword [rax + rax]
mov r8, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x400]
add r8, r15
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x52
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x400], cl
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x18
jb 0x180028160
movzx r15d, byte [rsp + 0x30]
mov dword [rbp + 0x170], 0x2c2c3e34
mov dword [rbp + 0x174], 0x3afc0b30
mov dword [rbp + 0x178], 0x9b3dded9
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x17c], xmm0
mov byte [rbp + 0x18c], al
mov qword [rsp + 0x38], r9
mov rax, qword [rsp + 0x38]
movabs r13, 0x3e50732d88cd7b1b
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x170]
add rcx, r13
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x43
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x170], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x1d
jb 0x1800281f5
movzx r13d, byte [rsp + 0x30]
lea r8, [rbp + 0x1230]
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0xeb0]
call fcn.180016870
nop
lea rcx, [rbp + 0x400]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rcx + r8], 0
jne 0x180028272
lea rdx, [rbp + 0x400]
mov rcx, rax
call fcn.1800134c0
mov rdx, rax
lea rcx, [rbp + 0xa48]
call fcn.180013640
or dword [rsp + 0x54], 0x10
lea rdx, [rbp + 0xa48]
lea rcx, [rbp + 0x11f0]
call fcn.18001fcd0
nop
lea rcx, [rbp + 0xeb0]
call fcn.180013550
mov rcx, qword [rbp + 0xf38]
add rcx, 0x158
call fcn.180008b10
lea rcx, [rax + 0x10]
lea rdx, [rbp + 0x11f0]
call fcn.180039e70
nop
lea rcx, [rbp + 0x11f0]
call fcn.180013550
nop
lea rcx, [rbp + 0x1230]
call fcn.180013550
jmp 0x1800299a5
mov dword [rbp + 0x3e0], 0x7f737b7f
mov word [rbp + 0x3e4], 0x8169
xor eax, eax
mov qword [rbp + 0x3e6], rax
mov dword [rbp + 0x3ee], eax
mov word [rbp + 0x3f2], ax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs rsi, 0x3a50aa11bd29bc41
nop
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x3e0]
add rcx, rsi
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x39
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x3e0], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x14
jb 0x180028340
movzx esi, byte [rsp + 0x30]
lea rdx, [rbp + 0x3e0]
lea rcx, [rbp + 0xfb0]
call fcn.180016820
test al, al
je 0x18002860e
mov dword [rbp + 0x2f0], 0x878c8e93
mov dword [rbp + 0x2f4], 0x84828b91
mov byte [rbp + 0x2f8], 8
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x2f9], xmm0
mov byte [rbp + 0x309], al
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs r14, 0x97884eacc14ad8
nop
mov r8, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x2f0]
add r8, r14
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x18
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x2f0], cl
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x1a
jb 0x1800283f0
movzx r14d, byte [rsp + 0x30]
lea rdx, [rbp + 0x2f0]
lea rcx, [rbp + 0xf80]
call fcn.18002c730
movzx r8d, byte [rsp + 0x40]
lea rdx, [rbp + 0x1210]
mov rcx, rax
call fcn.180030fa0
or dword [rsp + 0x54], 0x200
lea rcx, [rbp + 0x1210]
call fcn.1800133d0
mov qword [rsp + 0x48], rax
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0x788]
call fcn.1800180a0
nop
mov r8, 0xffffffffffffffff
mov rax, qword [rsp + 0x48]
inc r8
cmp byte [rax + r8], 0
jne 0x1800284a0
mov rdx, rax
lea rcx, [rbp + 0x788]
call fcn.1800180c0
nop
lea rdx, [rbp + 0x788]
lea rcx, [rbp + 0xed0]
call fcn.1800043e0
mov rdx, rax
lea rcx, [rbp + 0xf90]
call fcn.1800135b0
lea rcx, [rbp + 0xed0]
call fcn.180013550
nop
lea rcx, [rbp + 0x788]
call fcn.180013550
mov dword [rbp + 0x310], 0x4f7b434f
mov word [rbp + 0x314], 0xdd7d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x316], xmm0
mov qword [rbp + 0x326], rax
mov byte [rbp + 0x32e], al
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs rbx, 0xe97055446d161e63
mov r8, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x310]
add r8, rbx
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x4b
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x310], cl
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x1f
jb 0x180028535
movzx ebx, byte [rsp + 0x30]
movzx edx, dil
lea rcx, [rbp + 0x530]
call fcn.1800180a0
nop
lea rax, [rbp + 0x310]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1800285a4
lea rdx, [rbp + 0x310]
lea rcx, [rbp + 0x530]
call fcn.1800180c0
nop
lea r9, [rbp + 0xf90]
lea r8, [rbp + 0xfd0]
lea rdx, [rbp + 0x530]
lea rcx, [rbp + 0xb30]
call fcn.180023160
lea rcx, [rbp + 0xb30]
call fcn.180013550
nop
lea rcx, [rbp + 0x530]
call fcn.180013550
nop
lea rcx, [rbp + 0x1210]
call fcn.180013550
jmp 0x1800299a5
mov dword [rbp + 0x440], 0xd6c2ddcd
mov word [rbp + 0x444], 0xd5c2
mov byte [rbp + 0x446], 0x76
xor eax, eax
mov qword [rbp + 0x447], rax
mov dword [rbp + 0x44f], eax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs r12, 0x2353c73a8e82e64e
nop dword [rax + rax]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x440]
add rcx, r12
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x22
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x440], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x13
jb 0x180028650
movzx r12d, byte [rsp + 0x30]
lea rdx, [rbp + 0x440]
lea rcx, [rbp + 0xfb0]
call fcn.180016820
test al, al
je 0x1800288bc
mov dword [rbp + 0x290], 0x70c0e3b
mov dword [rbp + 0x294], 0x141a1329
mov byte [rbp + 0x298], 0x80
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x299], xmm0
mov dword [rbp + 0x2a9], eax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs r15, 0x44053cc4768e596c
mov r8, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x290]
add r8, r15
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0xc
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x290], cl
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x1d
jb 0x180028700
movzx r15d, byte [rsp + 0x30]
lea rdx, [rbp + 0x290]
lea rcx, [rbp + 0xf80]
call fcn.18002c730
lea rdx, [rbp + 0x11b0]
mov rcx, rax
call fcn.18002c850
nop
lea rcx, [rbp + 0x11b0]
call fcn.1800133d0
mov rdx, rax
lea rcx, [rbp + 0x7e8]
call fcn.180013780
nop
lea rdx, [rbp + 0x7e8]
lea rcx, [rbp + 0xb50]
call fcn.1800043e0
mov rdx, rax
lea rcx, [rbp + 0xf90]
call fcn.1800135b0
lea rcx, [rbp + 0xb50]
call fcn.180013550
nop
lea rcx, [rbp + 0x7e8]
call fcn.180013550
mov dword [rbp + 0x420], 0xa6babdad
mov word [rbp + 0x424], 0xa5ba
mov byte [rbp + 0x426], 0x56
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x427], xmm0
mov word [rbp + 0x437], ax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs r13, 0xcf78d19cf320cc8a
nop dword [rax]
mov r8, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x420]
add r8, r13
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x3a
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x420], cl
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x19
jb 0x180028810
movzx r13d, byte [rsp + 0x30]
lea rdx, [rbp + 0x420]
lea rcx, [rbp + 0x808]
call fcn.180013780
nop
lea r9, [rbp + 0xf90]
lea r8, [rbp + 0xfd0]
lea rdx, [rbp + 0x808]
lea rcx, [rbp + 0xd70]
call fcn.180023160
lea rcx, [rbp + 0xd70]
call fcn.180013550
nop
lea rcx, [rbp + 0x808]
call fcn.180013550
nop
lea rcx, [rbp + 0x11b0]
jmp 0x1800299a0
mov dword [rbp + 0x2b0], 0x5c545e52
mov word [rbp + 0x2b4], 0x5a2e
mov byte [rbp + 0x2b6], 0xbc
xor eax, eax
mov qword [rbp + 0x2b7], rax
mov dword [rbp + 0x2bf], eax
mov word [rbp + 0x2c3], ax
mov byte [rbp + 0x2c5], al
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs rsi, 0x1a2515062da8d167
mov r8, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x2b0]
add r8, rsi
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x2f
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x2b0], cl
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x16
jb 0x180028906
movzx esi, byte [rsp + 0x30]
lea rdx, [rbp + 0x2b0]
lea rcx, [rbp + 0xfb0]
call fcn.180016820
test al, al
je 0x180028a70
lea rdx, [0x18012dac5]
lea rcx, [rbp + 0x868]
call fcn.180013780
nop
mov dword [rbp + 0x490], 0x50282e32
mov word [rbp + 0x494], 0x525e
mov byte [rbp + 0x496], 0xe8
xorps xmm0, xmm0
movups xmmword [rbp + 0x497], xmm0
mov qword [rsp + 0x38], 0
mov rax, qword [rsp + 0x38]
movabs r14, 0x1e05871a679e3b3d
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x490]
add rcx, r14
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x55
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x490], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x17
jb 0x1800289c1
movzx r14d, byte [rsp + 0x30]
lea rdx, [rbp + 0x490]
lea rcx, [rbp + 0x848]
call fcn.180013780
nop
lea r9, [rbp + 0x868]
lea r8, [rbp + 0xfd0]
lea rdx, [rbp + 0x848]
lea rcx, [rbp + 0xb70]
call fcn.180023160
lea rcx, [rbp + 0xb70]
call fcn.180013550
nop
lea rcx, [rbp + 0x848]
call fcn.180013550
nop
lea rcx, [rbp + 0x868]
jmp 0x1800299a0
mov dword [rbp + 0x330], 0xdad8dac5
mov word [rbp + 0x334], 0xd4dc
mov byte [rbp + 0x336], 0x76
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x337], xmm0
mov qword [rbp + 0x347], rax
mov byte [rbp + 0x34f], al
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs rbx, 0xe21ee835d0d6e44e
nop word [rax + rax]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x330]
add rcx, rbx
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x22
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x330], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x20
jb 0x180028ac0
movzx ebx, byte [rsp + 0x30]
lea rdx, [rbp + 0x330]
lea rcx, [rbp + 0xfb0]
call fcn.180016820
test al, al
je 0x180028de3
lea rdx, [0x18012dac5]
lea rcx, [rbp + 0x8a8]
call fcn.180013780
nop
mov dword [rbp + 0x350], 0xf2f0e2f5
mov word [rbp + 0x354], 0xf4fc
mov byte [rbp + 0x356], 0x66
xor eax, eax
mov qword [rbp + 0x357], rax
mov dword [rbp + 0x35f], eax
mov byte [rbp + 0x363], al
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs rdi, 0x1f794565c9c4c972
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x350]
add rcx, rdi
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x1e
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x350], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x14
jb 0x180028b85
movzx edi, byte [rsp + 0x30]
lea rdx, [rbp + 0x350]
lea rcx, [rbp + 0x888]
call fcn.180013780
nop
lea r9, [rbp + 0x8a8]
lea r8, [rbp + 0xfd0]
lea rdx, [rbp + 0x888]
lea rcx, [rbp + 0x10f0]
call fcn.180023160
nop
lea rcx, [rbp + 0x888]
call fcn.180013550
nop
lea rcx, [rbp + 0x8a8]
call fcn.180013550
mov dword [rbp + 0x470], 0xbe9f9cbd
mov byte [rbp + 0x474], 0x44
xor eax, eax
mov qword [rbp + 0x475], rax
mov dword [rbp + 0x47d], eax
mov word [rbp + 0x481], ax
xor r9d, r9d
mov qword [rsp + 0x38], r9
mov rax, qword [rsp + 0x38]
movabs r15, 0xcdaabc7d1cc4c70c
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x470]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x54
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x470], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x13
jb 0x180028c65
movzx r15d, byte [rsp + 0x30]
mov dword [rbp + 0x190], 0xc0c0cec0
mov dword [rbp + 0x194], 0xa268dbdc
mov dword [rbp + 0x198], 0x43a18e8d
xor eax, eax
mov qword [rbp + 0x19c], rax
mov dword [rbp + 0x1a4], eax
mov qword [rsp + 0x38], r9
mov rax, qword [rsp + 0x38]
movabs r13, 0x42c4d30bba5e768d
nop word [rax + rax]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x190]
add rcx, r13
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x25
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x190], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x18
jb 0x180028d00
movzx r13d, byte [rsp + 0x30]
lea r8, [rbp + 0x10f0]
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0xbb0]
call fcn.180016870
nop
lea r8, [rbp + 0x470]
mov rdx, rax
lea rcx, [rbp + 0xb90]
call fcn.180016380
mov rdx, rax
lea rcx, [rbp + 0x1190]
call fcn.18001fcd0
nop
lea rcx, [rbp + 0xbb0]
call fcn.180013550
lea rcx, [rbp + 0xf38]
call fcn.18003a0d0
lea rcx, [rax + 0x158]
call fcn.180008b10
lea rcx, [rax + 0x10]
lea rdx, [rbp + 0x1190]
call fcn.180039e70
nop
lea rcx, [rbp + 0x1190]
call fcn.180013550
nop
lea rcx, [rbp + 0x10f0]
jmp 0x1800299a0
mov dword [rbp + 0x230], 0xccb4cab1
mov dword [rbp + 0x234], 0xd5aba9d0
mov byte [rbp + 0x238], 0x40
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x239], xmm0
mov dword [rbp + 0x249], eax
mov word [rbp + 0x24d], ax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs rsi, 0x945d7c31bdca708c
nop dword [rax + rax]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x230]
add rcx, rsi
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x2c
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x230], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x1f
jb 0x180028e30
movzx esi, byte [rsp + 0x30]
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0xfb0]
call fcn.180016820
test al, al
je 0x18002913a
lea rdx, [0x18012dac5]
lea rcx, [rbp + 0x948]
call fcn.180013780
nop
mov dword [rbp + 0x250], 0x726e7871
mov dword [rbp + 0x254], 0x716b6d76
mov byte [rbp + 0x258], 0x8e
xor eax, eax
mov qword [rbp + 0x259], rax
mov dword [rbp + 0x261], eax
mov word [rbp + 0x265], ax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs r14, 0x866be0de326a6dc1
nop word [rax + rax]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x250]
add rcx, r14
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x47
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x250], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x17
jb 0x180028f00
movzx r14d, byte [rsp + 0x30]
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x928]
call fcn.180013780
nop
lea r9, [rbp + 0x948]
lea r8, [rbp + 0xfd0]
lea rdx, [rbp + 0x928]
lea rcx, [rbp + 0x1130]
call fcn.180023160
nop
lea rcx, [rbp + 0x928]
call fcn.180013550
nop
lea rcx, [rbp + 0x948]
call fcn.180013550
mov dword [rbp + 0x4d0], 0x14373609
mov byte [rbp + 0x4d4], 0x7a
xor eax, eax
mov qword [rbp + 0x4d5], rax
mov dword [rbp + 0x4dd], eax
mov byte [rbp + 0x4e1], al
xor r9d, r9d
mov qword [rsp + 0x38], r9
mov rax, qword [rsp + 0x38]
movabs rbx, 0x3ac993a5e55b9eef
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x4d0]
add rcx, rbx
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x77
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x4d0], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x12
jb 0x180028fe0
movzx ebx, byte [rsp + 0x30]
mov dword [rsp + 0x60], 0xacac5ea4
mov dword [rsp + 0x64], 0x421c53a8
mov qword [rsp + 0x68], 0x235d7e61
mov qword [rsp + 0x38], r9
mov rax, qword [rsp + 0x38]
movabs rdi, 0xa04eb71d1402f027
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rsp + rax + 0x60]
add rcx, rdi
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x11
mov rax, qword [rsp + 0x38]
mov byte [rsp + rax + 0x60], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x10
jb 0x180029060
movzx edi, byte [rsp + 0x30]
lea r8, [rbp + 0x1130]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xbf0]
call fcn.180016870
nop
lea r8, [rbp + 0x4d0]
mov rdx, rax
lea rcx, [rbp + 0xbd0]
call fcn.180016380
mov rdx, rax
lea rcx, [rbp + 0x10d0]
call fcn.18001fcd0
nop
lea rcx, [rbp + 0xbf0]
call fcn.180013550
lea rcx, [rbp + 0xf38]
call fcn.18003a0d0
lea rcx, [rax + 0x158]
call fcn.180008b10
lea rcx, [rax + 0x10]
lea rdx, [rbp + 0x10d0]
call fcn.180039e70
nop
lea rcx, [rbp + 0x10d0]
call fcn.180013550
nop
lea rcx, [rbp + 0x1130]
jmp 0x1800299a0
mov dword [rbp + 0xf0], 0x3c352231
mov dword [rbp + 0xf4], 0x23282c3c
mov word [rbp + 0xf8], 0x2b21
mov byte [rbp + 0xfa], 0x58
xor eax, eax
mov qword [rbp + 0xfb], rax
mov word [rbp + 0x103], ax
mov byte [rbp + 0x105], al
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs r15, 0xde8e858db932394b
nop dword [rax + rax]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0xf0]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0xd
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0xf0], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x16
jb 0x180029190
movzx r15d, byte [rsp + 0x30]
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0xfb0]
call fcn.180016820
test al, al
je 0x180029306
lea rdx, [0x18012dac5]
lea rcx, [rbp + 0xa68]
call fcn.180013780
nop
mov dword [rbp + 0x70], 0x7c057201
mov dword [rbp + 0x74], 0x73080c7c
mov word [rbp + 0x78], 0xb71
mov byte [rbp + 0x7a], 0x98
xor eax, eax
mov qword [rbp + 0x7b], rax
mov dword [rbp + 0x83], eax
mov word [rbp + 0x87], ax
mov byte [rbp + 0x89], al
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs r12, 0x8c5fc74295c04443
nop dword [rax + rax]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x70]
add rcx, r12
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x2b
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x70], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x1a
jb 0x180029260
movzx r12d, byte [rsp + 0x30]
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x9e8]
call fcn.180013780
nop
lea r9, [rbp + 0xa68]
lea r8, [rbp + 0xfd0]
lea rdx, [rbp + 0x9e8]
lea rcx, [rbp + 0xc10]
call fcn.180023160
lea rcx, [rbp + 0xc10]
call fcn.180013550
nop
lea rcx, [rbp + 0x9e8]
call fcn.180013550
nop
lea rcx, [rbp + 0xa68]
jmp 0x1800299a0
mov dword [rbp + 0xb0], 0xe6dee8e8
mov dword [rbp + 0xb4], 0xd4dce4d4
mov dword [rbp + 0xb8], 0x2d1fe1d8
mov byte [rbp + 0xbc], 0xb8
xor eax, eax
mov dword [rbp + 0xbd], eax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs r13, 0xfe7fc6e6191f97f6
nop word [rax + rax]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0xb0]
add rcx, r13
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x46
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0xb0], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x11
jb 0x180029350
movzx r13d, byte [rsp + 0x30]
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0xfb0]
call fcn.180016820
test al, al
je 0x1800294c3
lea rdx, [0x18012dac5]
lea rcx, [rbp + 0x988]
call fcn.180013780
nop
mov dword [rbp + 0xd0], 0x9c949e92
mov dword [rbp + 0xd4], 0x8e9a9a8e
mov dword [rbp + 0xd8], 0xb1a7a592
mov byte [rbp + 0xdc], 2
xor eax, eax
mov qword [rbp + 0xdd], rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs rsi, 0x8e16b8d1dd8e3b57
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0xd0]
add rcx, rsi
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x61
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0xd0], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x15
jb 0x180029415
movzx esi, byte [rsp + 0x30]
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x8e8]
call fcn.180013780
nop
lea r9, [rbp + 0x988]
lea r8, [rbp + 0xfd0]
lea rdx, [rbp + 0x8e8]
lea rcx, [rbp + 0xc30]
call fcn.180023160
lea rcx, [rbp + 0xc30]
call fcn.180013550
nop
lea rcx, [rbp + 0x8e8]
call fcn.180013550
nop
lea rcx, [rbp + 0x988]
jmp 0x1800299a0
mov dword [rbp + 0x270], 0x1f010a0a
mov dword [rbp + 0x274], 0x14141610
mov word [rbp + 0x278], 0x8d1b
xor eax, eax
mov qword [rbp + 0x27a], rax
mov dword [rbp + 0x282], eax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs r14, 0x361b81459f509eed
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x270]
add rcx, r14
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x7b
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x270], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x16
jb 0x180029503
movzx r14d, byte [rsp + 0x30]
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0xfb0]
call fcn.180016820
test al, al
je 0x180029803
lea rdx, [0x18012dac5]
lea rcx, [rbp + 0x908]
call fcn.180013780
nop
mov dword [rsp + 0x70], 0xf7f1080c
mov dword [rsp + 0x74], 0x20a0c02
mov word [rsp + 0x78], 0x69fb
xor eax, eax
mov dword [rsp + 0x7a], eax
mov word [rsp + 0x7e], ax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs rbx, 0x197f00f9b0248e70
nop dword [rax]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rsp + rax + 0x70]
add rcx, rbx
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x10
mov rax, qword [rsp + 0x38]
mov byte [rsp + rax + 0x70], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x10
jb 0x1800295c0
movzx ebx, byte [rsp + 0x30]
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x968]
call fcn.180013780
nop
lea r9, [rbp + 0x908]
lea r8, [rbp + 0xfd0]
lea rdx, [rbp + 0x968]
lea rcx, [rbp + 0x1170]
call fcn.180023160
nop
lea rcx, [rbp + 0x968]
call fcn.180013550
nop
lea rcx, [rbp + 0x908]
call fcn.180013550
mov dword [rbp + 0x510], 0x889796b5
mov byte [rbp + 0x514], 0xea
xorps xmm0, xmm0
movups xmmword [rbp + 0x515], xmm0
xor r9d, r9d
mov qword [rsp + 0x38], r9
mov rax, qword [rsp + 0x38]
movabs rdi, 0xdf00f1777dfa685d
nop dword [rax]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x510]
add rcx, rdi
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x75
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x510], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x15
jb 0x180029690
movzx edi, byte [rsp + 0x30]
mov dword [rbp + 0x1f0], 0x6c6c9e54
mov dword [rbp + 0x1f4], 0x92dc6368
mov dword [rbp + 0x1f8], 0xf39dbeb1
xorps xmm0, xmm0
movups xmmword [rbp + 0x1fc], xmm0
mov qword [rsp + 0x38], r9
mov rax, qword [rsp + 0x38]
movabs r15, 0x68167e544aeb685f
nop
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x1f0]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x67
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x1f0], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x1c
jb 0x180029720
movzx r15d, byte [rsp + 0x30]
lea r8, [rbp + 0x1170]
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0xc70]
call fcn.180016870
nop
lea r8, [rbp + 0x510]
mov rdx, rax
lea rcx, [rbp + 0xc50]
call fcn.180016380
mov rdx, rax
lea rcx, [rbp + 0x1150]
call fcn.18001fcd0
nop
lea rcx, [rbp + 0xc70]
call fcn.180013550
lea rcx, [rbp + 0xf38]
call fcn.18003a0d0
lea rcx, [rax + 0x158]
call fcn.180008b10
lea rcx, [rax + 0x10]
lea rdx, [rbp + 0x1150]
call fcn.180039e70
nop
lea rcx, [rbp + 0x1150]
call fcn.180013550
nop
lea rcx, [rbp + 0x1170]
jmp 0x1800299a0
mov dword [rbp + 0x30], 0xd4c6c8c7
mov dword [rbp + 0x34], 0xc4c2c6c5
mov dword [rbp + 0x38], 0xcccdd4d9
mov word [rbp + 0x3c], 0xcddd
mov byte [rbp + 0x3e], 0x7e
xor eax, eax
mov qword [rbp + 0x3f], rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs r13, 0x81d7842f116ae4ce
nop dword [rax]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x30]
add rcx, r13
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x5e
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x30], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x17
jb 0x180029840
movzx r13d, byte [rsp + 0x30]
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0xfb0]
call fcn.180016820
test al, al
je 0x1800299a5
lea rdx, [0x18012dac5]
lea rcx, [rbp + 0x828]
call fcn.180013780
nop
mov dword [rbp - 0x40], 0x4160817
mov dword [rbp - 0x3c], 0x14121615
mov dword [rbp - 0x38], 0xc0d0419
mov word [rbp - 0x34], 0xd1d
mov byte [rbp - 0x32], 0xbe
xor eax, eax
mov qword [rbp - 0x31], rax
mov dword [rbp - 0x29], eax
mov byte [rbp - 0x25], al
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs rsi, 0x9066a763a9804a46
nop dword [rax]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax - 0x40]
add rcx, rsi
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x16
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax - 0x40], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x1c
jb 0x180029900
movzx esi, byte [rsp + 0x30]
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x8c8]
call fcn.180013780
nop
lea r9, [rbp + 0x828]
lea r8, [rbp + 0xfd0]
lea rdx, [rbp + 0x8c8]
lea rcx, [rbp + 0xd50]
call fcn.180023160
lea rcx, [rbp + 0xd50]
call fcn.180013550
nop
lea rcx, [rbp + 0x8c8]
call fcn.180013550
nop
lea rcx, [rbp + 0x828]
call fcn.180013550
lea rax, [rbp + 0x550]
mov qword [rsp + 0x48], rax
movzx edx, r12b
lea rcx, [rbp + 0x550]
call fcn.1800180a0
nop
mov r8d, 1
lea rdx, [0x18012db8c]
lea rcx, [rbp + 0x550]
call fcn.1800180c0
nop
lea rdx, [rbp + 0x550]
lea rcx, [rbp + 0xf38]
call fcn.18003a1f0
nop
lea rcx, [rbp + 0xfd0]
call fcn.180013550
lea rcx, [rbp + 0xfb0]
call fcn.180013550
lea rcx, [rbp + 0xf90]
call fcn.180013550
nop
movzx edx, byte [rbp + 0xf80]
lea rcx, [rbp + 0xf88]
call fcn.18002bee0
nop
lea rcx, [rbp + 0x11d0]
call fcn.180013550
jmp 0x180029f96
mov dword [rbp - 0x60], 0x60af5ea1
mov dword [rbp - 0x5c], 0x9b9a9891
mov dword [rbp - 0x58], 0x93979195
mov dword [rbp - 0x54], 0xe7949793
xor eax, eax
mov qword [rbp - 0x50], rax
mov dword [rbp - 0x48], eax
mov word [rbp - 0x44], ax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs r14, 0x2eb8799d2a24f85d
nop word [rax + rax]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax - 0x60]
add rcx, r14
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x75
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax - 0x60], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x1e
jb 0x180029a80
movzx r14d, byte [rsp + 0x30]
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0xf60]
call fcn.180016820
test al, al
je 0x180029be2
lea rax, [rbp + 0x570]
mov qword [rsp + 0x48], rax
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0x570]
call fcn.1800180a0
nop
mov r8d, 1
lea rdx, [0x18012e988]
lea rcx, [rbp + 0x570]
call fcn.1800180c0
nop
lea rdx, [rbp + 0x570]
lea rcx, [rbp + 0xf38]
call fcn.18003a1f0
lea rdx, [rbp + 0xb18]
lea rcx, [rbp + 0xf38]
call fcn.18003a410
nop
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
sub rdx, rcx
sar rdx, 3
test rdx, rdx
je 0x18002a017
lea rdx, [rbp + 0xc90]
call fcn.18003a320
nop
mov rdx, rax
lea rcx, [0x18014e808]
call fcn.18002c920
nop
lea rcx, [rbp + 0xc90]
call fcn.180013550
nop
lea rcx, [rbp + 0xb18]
call fcn.180011e20
lea rax, [rbp + 0x590]
mov qword [rsp + 0x48], rax
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0x590]
call fcn.1800180a0
nop
mov r8d, 1
lea rdx, [0x18012db8c]
lea rcx, [rbp + 0x590]
call fcn.1800180c0
nop
lea rdx, [rbp + 0x590]
lea rcx, [rbp + 0xf38]
call fcn.18003a1f0
jmp 0x180029f96
mov dword [rbp + 0x2d0], 0x3160407
mov dword [rbp + 0x2d4], 0x970a0c1b
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x2d8], xmm0
mov word [rbp + 0x2e8], ax
mov byte [rbp + 0x2ea], al
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs rbx, 0xaaa2bd61efabb044
mov r8, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x2d0]
add r8, rbx
mov eax, edx
and rax, r8
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r8
add cl, 0x24
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x2d0], cl
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x1b
jb 0x180029c23
movzx ebx, byte [rsp + 0x30]
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp + 0xf60]
call fcn.180016820
test al, al
je 0x180029f96
lea rdx, [0x18012e988]
lea rcx, [rbp + 0xcb0]
call fcn.180013780
mov rdx, rax
lea rcx, [rbp + 0xf38]
call fcn.18003a1f0
lea rcx, [rbp + 0x1270]
call fcn.18003a840
lea rcx, [rbp + 0xcd0]
call fcn.180026810
nop
mov rdx, rax
lea rcx, [rbp + 0x1270]
call fcn.18003a890
nop
lea rcx, [rbp + 0xcd0]
call fcn.180013550
lea rcx, [rbp + 0x1270]
call fcn.18003ab50
lea rdx, [rbp + 0x1250]
lea rcx, [rbp + 0x1270]
call fcn.18003ac10
mov eax, 1
mov word [rbp + 0xf48], ax
mov rdx, qword [rbp + 0xf38]
add rdx, 0x1b8
mov qword [rsp + 0x20], 0
lea r9d, [rax + 1]
lea r8, [rbp + 0xf48]
mov rcx, qword [0x18014e7d8]
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
mov dword [rbp + 0x370], 0x8676605
mov byte [rbp + 0x374], 0xaa
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x375], xmm0
mov dword [rbp + 0x385], eax
mov word [rbp + 0x389], ax
mov byte [rbp + 0x38b], al
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs rdi, 0xb6bcfd7bf295d145
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x370]
add rcx, rdi
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x1d
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x370], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x1c
jb 0x180029d83
movzx edi, byte [rsp + 0x30]
lea rdx, [rbp + 0x1250]
lea rcx, [rbp + 0xd10]
call fcn.18003ac90
nop
mov rdx, rax
lea rcx, [rbp + 0xcf0]
call fcn.180026630
mov r10, rax
mov dword [rbp + 0x50], 0x6666281a
mov dword [rbp + 0x54], 0x48966366
mov dword [rbp + 0x58], 0xfb45a8a9
xor eax, eax
mov dword [rbp + 0x5c], eax
mov word [rbp + 0x60], ax
mov byte [rbp + 0x62], al
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
movabs r15, 0x75f78d49bb9c5be
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x38]
movzx edx, byte [rbp + rax + 0x50]
add rcx, r15
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x32
mov rax, qword [rsp + 0x38]
mov byte [rbp + rax + 0x50], r8b
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp rax, 0x13
jb 0x180029e31
movzx r15d, byte [rsp + 0x30]
lea rax, [rbp + 0x50]
mov r9, 0xffffffffffffffff
nop word [rax + rax]
inc r9
cmp byte [rax + r9], 0
jne 0x180029e90
lea r8, [rbp + 0x50]
xor edx, edx
mov rcx, r10
call fcn.18001aef0
mov rdx, rax
lea rcx, [rbp + 0x7a8]
call fcn.180013640
or dword [rsp + 0x54], 0x10000
lea rax, [rbp + 0x370]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x180029ed0
lea rdx, [rbp + 0x370]
lea rcx, [rbp + 0x7a8]
call fcn.1800134c0
mov rdx, rax
lea rcx, [rbp + 0x7c8]
call fcn.180013640
or dword [rsp + 0x54], 0x20000
lea rdx, [rbp + 0x7c8]
lea rcx, [rbp + 0x10b0]
call fcn.18001fcd0
nop
lea rcx, [rbp + 0x7a8]
call fcn.180013550
nop
lea rcx, [rbp + 0xcf0]
call fcn.180013550
nop
lea rcx, [rbp + 0xd10]
call fcn.180013550
lea rcx, [rbp + 0xf38]
call fcn.18003a0d0
lea rcx, [rax + 0x158]
call fcn.180008b10
lea rcx, [rax + 0x10]
lea rdx, [rbp + 0x10b0]
call fcn.180039e70
lea rdx, [0x18012db8c]
lea rcx, [rbp + 0xd30]
call fcn.180013780
mov rdx, rax
lea rcx, [rbp + 0xf38]
call fcn.18003a1f0
nop
lea rcx, [rbp + 0x10b0]
call fcn.180013550
nop
lea rcx, [rbp + 0xf60]
call fcn.180013550
mov rcx, qword [rbp + 0x390]
add rcx, 8
mov qword [rbp + 0x390], rcx
cmp rcx, qword [rbp + 0x460]
jne 0x180026dd0
cmp byte [0x18014e7c2], 1
je 0x180026d50
mov byte [0x18014e7c2], 0
lea rcx, [rbp + 0xff0]
call fcn.180011e20
mov rcx, qword [rbp + 0x12e0]
xor rcx, rsp
call fcn.1800ce3b0
lea r11, [rsp + 0x13f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.18002b7e0
nop
call fcn.18002b7e0
nop
call fcn.18002b7e0
nop
call fcn.18002b7e0
nop
call fcn.18002b7e0
nop
call fcn.18002b7e0
int3