Function at 0x140019420
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Parse pe header

Disassembly:
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x1250]
mov eax, 0x1350
call fcn.140055010
sub rsp, rax
mov dword [rsp + 0x20], 0x1c
mov eax, dword [rsp + 0x20]
xor al, 0x49
mov byte [rsp + 0x24], al
mov eax, dword [rsp + 0x20]
inc al
xor al, 0x6e
mov byte [rsp + 0x25], al
mov eax, dword [rsp + 0x20]
add al, 2
xor al, 0x73
mov byte [rsp + 0x26], al
mov eax, dword [rsp + 0x20]
add al, 3
xor al, 0x74
mov byte [rsp + 0x27], al
mov eax, dword [rsp + 0x20]
add al, 4
xor al, 0x61
mov byte [rsp + 0x28], al
mov eax, dword [rsp + 0x20]
add al, 5
xor al, 0x6c
mov byte [rsp + 0x29], al
mov eax, dword [rsp + 0x20]
add al, 6
xor al, 0x6c
mov byte [rsp + 0x2a], al
mov eax, dword [rsp + 0x20]
add al, 7
xor al, 0x69
mov byte [rsp + 0x2b], al
mov eax, dword [rsp + 0x20]
add al, 8
xor al, 0x6e
mov byte [rsp + 0x2c], al
mov eax, dword [rsp + 0x20]
add al, 9
xor al, 0x67
mov byte [rsp + 0x2d], al
mov eax, dword [rsp + 0x20]
add al, 0xa
xor al, 0x20
mov byte [rsp + 0x2e], al
mov eax, dword [rsp + 0x20]
add al, 0xb
xor al, 0x53
mov byte [rsp + 0x2f], al
mov eax, dword [rsp + 0x20]
add al, 0xc
xor al, 0x65
mov byte [rsp + 0x30], al
mov eax, dword [rsp + 0x20]
add al, 0xd
xor al, 0x72
mov byte [rsp + 0x31], al
mov eax, dword [rsp + 0x20]
add al, 0xe
xor al, 0x76
mov byte [rsp + 0x32], al
mov eax, dword [rsp + 0x20]
add al, 0xf
xor al, 0x69
mov byte [rsp + 0x33], al
mov eax, dword [rsp + 0x20]
add al, 0x10
xor al, 0x63
mov byte [rsp + 0x34], al
mov eax, dword [rsp + 0x20]
add al, 0x11
xor al, 0x65
mov byte [rsp + 0x35], al
mov eax, dword [rsp + 0x20]
add al, 0x12
xor al, 0x20
mov byte [rsp + 0x36], al
mov eax, dword [rsp + 0x20]
add al, 0x13
xor al, 0x42
mov byte [rsp + 0x37], al
mov eax, dword [rsp + 0x20]
add al, 0x14
xor al, 0x6f
mov byte [rsp + 0x38], al
mov eax, dword [rsp + 0x20]
add al, 0x15
xor al, 0x6f
mov byte [rsp + 0x39], al
mov eax, dword [rsp + 0x20]
add al, 0x16
xor al, 0x74
mov byte [rsp + 0x3a], al
mov eax, dword [rsp + 0x20]
add al, 0x17
xor al, 0x2e
mov byte [rsp + 0x3b], al
mov eax, dword [rsp + 0x20]
add al, 0x18
xor al, 0x2e
mov byte [rsp + 0x3c], al
xor eax, eax
xor r15d, r15d
mov byte [rsp + 0x3d], al
movzx eax, byte [rsp + 0x24]
mov edx, r15d
movzx eax, byte [rsp + rdx + 0x24]
mov ecx, dword [rsp + 0x20]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x24], cl
inc rdx
cmp rdx, 0x19
jb 0x140019580
mov r14, 0xffffffffffffffff
mov byte [rsp + 0x3d], r15b
mov r8, r14
mov qword [rbp - 0x10], r15
mov qword [rbp], r15
lea rax, [rsp + 0x24]
mov qword [rbp + 8], 0xf
nop
inc r8
cmp byte [rax + r8], r15b
jne 0x1400195c0
lea rdx, [rsp + 0x24]
lea rcx, [rbp - 0x10]
call fcn.1400078f0
lea rcx, [rbp - 0x10]
call fcn.14001b970
mov byte [rsp + 0x74], 0x6e
mov rcx, r15
mov byte [rsp + 0x75], 0x78
mov byte [rsp + 0x76], 0x6f
mov byte [rsp + 0x77], 0x39
mov byte [rsp + 0x78], 0x70
mov byte [rsp + 0x79], 0x83
mov byte [rsp + 0x7a], 0x70
mov byte [rsp + 0x7b], 0x2b
mov byte [rsp + 0x7c], 0x3a
mov byte [rsp + 0x7d], 0x6e
mov byte [rsp + 0x7e], 0x2b
mov byte [rsp + 0x7f], 0x7e
mov byte [rbp - 0x80], 0x7f
mov byte [rbp - 0x7f], 0x6c
mov byte [rbp - 0x7e], 0x7d
mov byte [rbp - 0x7d], 0x7f
mov byte [rbp - 0x7c], 0x2b
mov byte [rbp - 0x7b], 0x3a
mov byte [rbp - 0x7a], 0x4d
mov byte [rbp - 0x79], 0x2b
mov byte [rbp - 0x78], 0x2d
mov byte [rbp - 0x77], 0x2d
mov byte [rbp - 0x76], 0x2b
mov byte [rbp - 0x75], 0x2d
mov byte [rbp - 0x74], 0x4e
mov byte [rbp - 0x73], 0x45
mov byte [rbp - 0x72], 0x67
mov byte [rbp - 0x71], 0x5b
mov byte [rbp - 0x70], 0x7d
mov byte [rbp - 0x6f], 0x7a
mov byte [rbp - 0x6e], 0x72
mov byte [rbp - 0x6d], 0x7d
mov byte [rbp - 0x6c], 0x6c
mov byte [rbp - 0x6b], 0x78
mov byte [rbp - 0x6a], 0x2b
mov byte [rbp - 0x69], 0x51
mov byte [rbp - 0x68], 0x74
mov byte [rbp - 0x67], 0x77
mov byte [rbp - 0x66], 0x70
mov byte [rbp - 0x65], 0x7e
mov byte [rbp - 0x64], 0x2b
mov byte [rbp - 0x63], 0x33
mov byte [rbp - 0x62], 0x83
mov byte [rbp - 0x61], 0x43
mov byte [rbp - 0x60], 0x41
mov byte [rbp - 0x5f], 0x34
mov byte [rbp - 0x5e], 0x67
mov byte [rbp - 0x5d], 0x62
mov byte [rbp - 0x5c], 0x70
mov byte [rbp - 0x5b], 0x72
mov byte [rbp - 0x5a], 0x6c
mov byte [rbp - 0x59], 0x78
mov byte [rbp - 0x58], 0x70
mov byte [rbp - 0x57], 0x67
mov byte [rbp - 0x56], 0x80
mov byte [rbp - 0x55], 0x7b
mov byte [rbp - 0x54], 0x6f
mov byte [rbp - 0x53], 0x6c
mov byte [rbp - 0x52], 0x7f
mov byte [rbp - 0x51], 0x70
mov byte [rbp - 0x50], 0x39
mov byte [rbp - 0x4f], 0x70
mov byte [rbp - 0x4e], 0x83
mov byte [rbp - 0x4d], 0x70
mov byte [rbp - 0x4c], 0x2d
mov byte [rbp - 0x4b], r15b
movzx eax, byte [rsp + 0x74]
nop dword [rax]
movzx eax, byte [rsp + rcx + 0x74]
sub al, 0xb
mov byte [rsp + rcx + 0x74], al
inc rcx
cmp rcx, 0x41
jb 0x140019700
xor edx, edx
lea rcx, [rbp + 0x1050]
mov r8d, 0x100
call fcn.140057130
mov byte [rsp + 0x40], 0x4a
mov rcx, r15
mov byte [rsp + 0x41], 0x73
mov byte [rsp + 0x42], 0x6c
mov byte [rsp + 0x43], 0x7d
mov byte [rsp + 0x44], 0x6c
mov byte [rsp + 0x45], 0x79
mov byte [rsp + 0x46], 0x5a
mov byte [rsp + 0x47], 0x76
mov byte [rsp + 0x48], 0x68
mov byte [rsp + 0x49], 0x79
mov byte [rsp + 0x4a], 0x50
mov byte [rsp + 0x4b], 0x75
mov byte [rsp + 0x4c], 0x7a
mov byte [rsp + 0x4d], 0x7b
mov byte [rsp + 0x4e], r15b
movzx eax, byte [rsp + 0x40]
nop dword [rax + rax]
movzx eax, byte [rsp + rcx + 0x40]
sub al, 7
mov byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 0xe
jb 0x140019780
lea r8, [rsp + 0x40]
mov edx, 0xff
lea rcx, [rbp + 0x1050]
call fcn.140017ab0
lea rax, [rbp + 0x1050]
mov rdi, r14
inc rdi
cmp byte [rax + rdi], r15b
jne 0x1400197b4
xor edx, edx
lea rcx, [rbp + 0x1150]
mov r8d, 0x100
inc edi
call fcn.140057130
lea r9, [rsp + 0x74]
mov edx, 0xff
lea r8, [0x14009760c]
lea rcx, [rbp + 0x1150]
call fcn.140017ab0
lea rax, [rbp + 0x1150]
mov rsi, r14
nop word [rax + rax]
inc rsi
cmp byte [rax + rsi], r15b
jne 0x140019800
mov byte [rsp + 0x4f], 0x3f
inc esi
mov byte [rsp + 0x50], 0x42
mov rcx, r15
mov byte [rsp + 0x51], 0x43
mov byte [rsp + 0x52], 0x6d
mov byte [rsp + 0x53], 0x6e
mov byte [rsp + 0x54], 0x6e
mov byte [rsp + 0x55], 0x44
mov byte [rsp + 0x56], 0x3d
mov byte [rsp + 0x57], 0x39
mov byte [rsp + 0x58], 0x45
mov byte [rsp + 0x59], 0x44
mov byte [rsp + 0x5a], 0x40
mov byte [rsp + 0x5b], 0x40
mov byte [rsp + 0x5c], 0x39
mov byte [rsp + 0x5d], 0x3f
mov byte [rsp + 0x5e], 0x41
mov byte [rsp + 0x5f], 0x72
mov byte [rsp + 0x60], 0x3d
mov byte [rsp + 0x61], 0x39
mov byte [rsp + 0x62], 0x6d
mov byte [rsp + 0x63], 0x70
mov byte [rsp + 0x64], 0x3f
mov byte [rsp + 0x65], 0x3e
mov byte [rsp + 0x66], 0x39
mov byte [rsp + 0x67], 0x45
mov byte [rsp + 0x68], 0x44
mov byte [rsp + 0x69], 0x72
mov byte [rsp + 0x6a], 0x3c
mov byte [rsp + 0x6b], 0x3f
mov byte [rsp + 0x6c], 0x44
mov byte [rsp + 0x6d], 0x3c
mov byte [rsp + 0x6e], 0x3c
mov byte [rsp + 0x6f], 0x3d
mov byte [rsp + 0x70], 0x3c
mov byte [rsp + 0x71], 0x3c
mov byte [rsp + 0x72], 0x3f
mov byte [rsp + 0x73], r15b
movzx eax, byte [rsp + 0x4f]
nop dword [rax]
movzx eax, byte [rsp + rcx + 0x4f]
sub al, 0xc
mov byte [rsp + rcx + 0x4f], al
inc rcx
cmp rcx, 0x24
jb 0x1400198d0
mov byte [rbp + 0x1280], 0x70
mov rcx, r15
mov byte [rbp + 0x1281], 0x76
mov byte [rbp + 0x1282], 0x75
mov byte [rbp + 0x1283], 0x78
mov byte [rbp + 0x1284], 0x65
mov byte [rbp + 0x1285], 0x75
mov byte [rbp + 0x1286], r15b
movzx eax, byte [rbp + 0x1280]
nop
movzx eax, byte [rbp + rcx + 0x1280]
sub al, 2
mov byte [rbp + rcx + 0x1280], al
inc rcx
cmp rcx, 6
jb 0x140019920
lea r9, [rbp + 0x30]
lea rdx, [rsp + 0x4f]
lea rcx, [rbp + 0x1280]
call fcn.1400181d0
test eax, eax
je 0x140019967
mov eax, 1
add rsp, 0x1350
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
mov qword [rsp + 0x1390], rbx
lea rcx, [rbp + 0x44]
mov ebx, 0x800
xor edx, edx
mov r8d, ebx
call fcn.140057130
mov r8d, ebx
mov dword [rbp + 0x844], r15d
xor edx, edx
lea rcx, [rbp + 0x848]
call fcn.140057130
mov ecx, dword [rbp + 0x844]
mov eax, ebx
sub eax, ecx
mov dword [rbp + 0x1048], r15d
mov dword [rbp + 0x3c], r15d
mov edx, 1
mov dword [rbp + 0x40], edx
cmp eax, 4
jae 0x1400199c1
mov dword [rbp + 0x3c], edx
jmp 0x1400199dc
mov dword [rbp + rcx + 0x44], r15d
mov ecx, dword [rbp + 0x844]
mov edx, dword [rbp + 0x40]
add ecx, 4
mov dword [rbp + 0x844], ecx
test edx, edx
je 0x140019a2a
mov eax, ebx
sub eax, ecx
cmp eax, 4
jae 0x1400199ee
mov dword [rbp + 0x3c], 1
jmp 0x140019a05
mov dword [rbp + rcx + 0x44], r15d
mov ecx, dword [rbp + 0x844]
mov edx, dword [rbp + 0x40]
add ecx, 4
mov dword [rbp + 0x844], ecx
test edx, edx
je 0x140019a2a
mov eax, ebx
sub eax, ecx
cmp eax, 4
jae 0x140019a1b
mov dword [rbp + 0x3c], 1
jmp 0x140019a2a
mov dword [rbp + rcx + 0x44], 0xf003f
add dword [rbp + 0x844], 4
mov edx, 0x1b
lea rcx, [rbp + 0x30]
call fcn.140018330
test eax, eax
jne 0x140019fa5
cmp dword [rbp + 0x1048], 0x18
jne 0x140019fa5
cmp dword [rbp + 0x85c], r15d
jne 0x140019fa5
mov eax, dword [rbp + 0x858]
mov rdx, r15
movups xmm0, xmmword [rbp + 0x848]
mov dword [rbp - 0x18], eax
xor eax, eax
mov byte [rbp - 0x30], al
movups xmmword [rbp - 0x28], xmm0
mov dword [rbp - 0x48], 3
mov byte [rbp - 0x44], 0x40
mov byte [rbp - 0x43], 0x71
mov byte [rbp - 0x42], 0x66
mov byte [rbp - 0x41], 0x62
mov byte [rbp - 0x40], 0x77
mov byte [rbp - 0x3f], 0x6a
mov byte [rbp - 0x3e], 0x6d
mov byte [rbp - 0x3d], 0x64
mov byte [rbp - 0x3c], 0x23
mov byte [rbp - 0x3b], 0x51
mov byte [rbp - 0x3a], 0x53
mov byte [rbp - 0x39], 0x40
mov byte [rbp - 0x38], 0x23
mov byte [rbp - 0x37], 0x50
mov byte [rbp - 0x36], 0x66
mov byte [rbp - 0x35], 0x71
mov byte [rbp - 0x34], 0x75
mov byte [rbp - 0x33], 0x6a
mov byte [rbp - 0x32], 0x60
mov byte [rbp - 0x31], 0x66
movzx eax, byte [rbp - 0x44]
movzx eax, byte [rbp + rdx - 0x44]
mov ecx, dword [rbp - 0x48]
xor cl, al
mov byte [rbp + rdx - 0x44], cl
inc rdx
cmp rdx, 0x14
jb 0x140019ad1
mov byte [rbp - 0x30], r15b
lea rax, [rbp - 0x44]
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x28], 0xf
inc r14
cmp byte [rax + r14], r15b
jne 0x140019b00
mov r8, r14
lea rdx, [rbp - 0x44]
lea rcx, [rbp + 0x10]
call fcn.1400078f0
lea rcx, [rbp + 0x10]
call fcn.14001b970
mov r8, rbx
lea rcx, [rbp + 0x44]
xor edx, edx
call fcn.140057130
mov r8, rbx
mov dword [rbp + 0x844], r15d
xor edx, edx
lea rcx, [rbp + 0x848]
call fcn.140057130
mov ecx, dword [rbp + 0x844]
mov eax, ebx
sub eax, ecx
mov dword [rbp + 0x1048], r15d
mov dword [rbp + 0x3c], r15d
mov edx, 1
mov dword [rbp + 0x40], edx
cmp eax, 0x14
jae 0x140019b6f
mov dword [rbp + 0x3c], edx
jmp 0x140019ba0
movups xmm0, xmmword [rbp - 0x28]
mov rax, rcx
lea rcx, [rbp + 0x44]
add rcx, rax
mov eax, dword [rbp - 0x18]
movups xmmword [rcx], xmm0
mov dword [rcx + 0x10], eax
mov ecx, dword [rbp + 0x844]
mov edx, dword [rbp + 0x40]
add ecx, 0x14
mov dword [rbp + 0x844], ecx
test edx, edx
je 0x140019f8a
mov eax, ebx
sub eax, ecx
cmp eax, 4
jae 0x140019bb2
mov dword [rbp + 0x3c], 1
jmp 0x140019bc8
mov dword [rbp + rcx + 0x44], edi
mov ecx, dword [rbp + 0x844]
mov edx, dword [rbp + 0x40]
add ecx, 4
mov dword [rbp + 0x844], ecx
test edx, edx
je 0x140019f8a
mov eax, ebx
sub eax, ecx
cmp eax, 4
jae 0x140019be2
mov dword [rbp + 0x3c], 1
jmp 0x140019bf9
mov dword [rbp + rcx + 0x44], r15d
mov ecx, dword [rbp + 0x844]
mov edx, dword [rbp + 0x40]
add ecx, 4
mov dword [rbp + 0x844], ecx
test edx, edx
je 0x140019f8a
mov eax, ebx
sub eax, ecx
cmp eax, 4
jae 0x140019c13
mov dword [rbp + 0x3c], 1
jmp 0x140019c29
mov dword [rbp + rcx + 0x44], edi
mov ecx, dword [rbp + 0x844]
mov edx, dword [rbp + 0x40]
add ecx, 4
mov dword [rbp + 0x844], ecx
test edx, edx
je 0x140019f8a
mov eax, ebx
sub eax, ecx
cmp edi, eax
jbe 0x140019c42
mov dword [rbp + 0x3c], 1
jmp 0x140019c71
mov eax, ecx
lea rdx, [rbp + 0x1050]
lea rcx, [rbp + 0x44]
mov r8d, edi
add rcx, rax
call fcn.140056a80
mov ecx, dword [rbp + 0x844]
lea eax, [rdi + 3]
mov edx, dword [rbp + 0x40]
and eax, 0xfffffffc
add ecx, eax
mov dword [rbp + 0x844], ecx
test edx, edx
je 0x140019f8a
mov eax, ebx
sub eax, ecx
cmp eax, 4
jae 0x140019c8b
mov dword [rbp + 0x3c], 1
jmp 0x140019ca2
mov dword [rbp + rcx + 0x44], r15d
mov ecx, dword [rbp + 0x844]
mov edx, dword [rbp + 0x40]
add ecx, 4
mov dword [rbp + 0x844], ecx
test edx, edx
je 0x140019f8a
mov eax, ebx
sub eax, ecx
cmp eax, 4
jae 0x140019cbc
mov dword [rbp + 0x3c], 1
jmp 0x140019cd6
mov dword [rbp + rcx + 0x44], 0xf01ff
mov ecx, dword [rbp + 0x844]
mov edx, dword [rbp + 0x40]
add ecx, 4
mov dword [rbp + 0x844], ecx
test edx, edx
je 0x140019f8a
mov eax, ebx
sub eax, ecx
cmp eax, 4
jae 0x140019cf0
mov dword [rbp + 0x3c], 1
jmp 0x140019d0a
mov dword [rbp + rcx + 0x44], 0x10
mov ecx, dword [rbp + 0x844]
mov edx, dword [rbp + 0x40]
add ecx, 4
mov dword [rbp + 0x844], ecx
test edx, edx
je 0x140019f8a
mov eax, ebx
sub eax, ecx
cmp eax, 4
jae 0x140019d24
mov dword [rbp + 0x3c], 1
jmp 0x140019d3e
mov dword [rbp + rcx + 0x44], 2
mov ecx, dword [rbp + 0x844]
mov edx, dword [rbp + 0x40]
add ecx, 4
mov dword [rbp + 0x844], ecx
test edx, edx
je 0x140019f8a
mov eax, ebx
sub eax, ecx
cmp eax, 4
jae 0x140019d58
mov dword [rbp + 0x3c], 1
jmp 0x140019d6f
mov dword [rbp + rcx + 0x44], r15d
mov ecx, dword [rbp + 0x844]
mov edx, dword [rbp + 0x40]
add ecx, 4
mov dword [rbp + 0x844], ecx
test edx, edx
je 0x140019f8a
mov eax, ebx
sub eax, ecx
cmp eax, 4
jae 0x140019d89
mov dword [rbp + 0x3c], 1
jmp 0x140019d9f
mov dword [rbp + rcx + 0x44], esi
mov ecx, dword [rbp + 0x844]
mov edx, dword [rbp + 0x40]
add ecx, 4
mov dword [rbp + 0x844], ecx
test edx, edx
je 0x140019f8a
mov eax, ebx
sub eax, ecx
cmp eax, 4
jae 0x140019db9
mov dword [rbp + 0x3c], 1
jmp 0x140019dd0
mov dword [rbp + rcx + 0x44], r15d
mov ecx, dword [rbp + 0x844]
mov edx, dword [rbp + 0x40]
add ecx, 4
mov dword [rbp + 0x844], ecx
test edx, edx
je 0x140019f8a
mov eax, ebx
sub eax, ecx
cmp eax, 4
jae 0x140019dea
mov dword [rbp + 0x3c], 1
jmp 0x140019e00
mov dword [rbp + rcx + 0x44], esi
mov ecx, dword [rbp + 0x844]
mov edx, dword [rbp + 0x40]
add ecx, 4
mov dword [rbp + 0x844], ecx
test edx, edx
je 0x140019f8a
mov eax, ebx
sub eax, ecx
cmp esi, eax
jbe 0x140019e19
mov dword [rbp + 0x3c], 1
jmp 0x140019e48
mov eax, ecx
lea rdx, [rbp + 0x1150]
lea rcx, [rbp + 0x44]
mov r8d, esi
add rcx, rax
call fcn.140056a80
mov ecx, dword [rbp + 0x844]
lea eax, [rsi + 3]
mov edx, dword [rbp + 0x40]
and eax, 0xfffffffc
add ecx, eax
mov dword [rbp + 0x844], ecx
test edx, edx
je 0x140019f8a
mov eax, ebx
sub eax, ecx
cmp eax, 4
jae 0x140019e62
mov dword [rbp + 0x3c], 1
jmp 0x140019e79
mov dword [rbp + rcx + 0x44], r15d
mov ecx, dword [rbp + 0x844]
mov edx, dword [rbp + 0x40]
add ecx, 4
mov dword [rbp + 0x844], ecx
test edx, edx
je 0x140019f8a
mov eax, ebx
sub eax, ecx
cmp eax, 4
jae 0x140019e93
mov dword [rbp + 0x3c], 1
jmp 0x140019eaa
mov dword [rbp + rcx + 0x44], r15d
mov ecx, dword [rbp + 0x844]
mov edx, dword [rbp + 0x40]
add ecx, 4
mov dword [rbp + 0x844], ecx
test edx, edx
je 0x140019f8a
mov eax, ebx
sub eax, ecx
cmp eax, 4
jae 0x140019ec4
mov dword [rbp + 0x3c], 1
jmp 0x140019edb
mov dword [rbp + rcx + 0x44], r15d
mov ecx, dword [rbp + 0x844]
mov edx, dword [rbp + 0x40]
add ecx, 4
mov dword [rbp + 0x844], ecx
test edx, edx
je 0x140019f8a
mov eax, ebx
sub eax, ecx
cmp eax, 4
jae 0x140019ef5
mov dword [rbp + 0x3c], 1
jmp 0x140019f0c
mov dword [rbp + rcx + 0x44], r15d
mov ecx, dword [rbp + 0x844]
mov edx, dword [rbp + 0x40]
add ecx, 4
mov dword [rbp + 0x844], ecx
test edx, edx
je 0x140019f8a
mov eax, ebx
sub eax, ecx
cmp eax, 4
jae 0x140019f26
mov dword [rbp + 0x3c], 1
jmp 0x140019f3d
mov dword [rbp + rcx + 0x44], r15d
mov ecx, dword [rbp + 0x844]
mov edx, dword [rbp + 0x40]
add ecx, 4
mov dword [rbp + 0x844], ecx
test edx, edx
je 0x140019f8a
mov eax, ebx
sub eax, ecx
cmp eax, 4
jae 0x140019f53
mov dword [rbp + 0x3c], 1
jmp 0x140019f6a
mov dword [rbp + rcx + 0x44], r15d
mov ecx, dword [rbp + 0x844]
mov edx, dword [rbp + 0x40]
add ecx, 4
mov dword [rbp + 0x844], ecx
test edx, edx
je 0x140019f8a
sub ebx, ecx
cmp ebx, 4
jae 0x140019f7e
mov dword [rbp + 0x3c], 1
jmp 0x140019f8a
mov dword [rbp + rcx + 0x44], r15d
add dword [rbp + 0x844], 4
mov edx, 0x18
lea rcx, [rbp + 0x30]
call fcn.140018330
test eax, eax
jne 0x140019fa5
cmp dword [rbp + 0x1048], 0x1c
je 0x140019fb6
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 1
jmp 0x140019fcb
mov rcx, qword [rbp + 0x30]
cmp dword [rbp + 0x860], r15d
jne 0x140019fa9
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov rbx, qword [rsp + 0x1390]
add rsp, 0x1350
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret