Function at 0x14001b330
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Hash data using murmur2
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1e0]
sub rsp, 0x2e0
mov rax, qword [0x140188020]
xor rax, rsp
mov qword [rbp + 0x1d0], rax
mov qword [rbp - 0x10], rcx
xor eax, eax
mov cl, 0x64
mov dword [rsp + 0x60], r9d
movsx ebx, cl
mov byte [rsp + 0x70], cl
mov ecx, ebx
mov dword [rbp - 0x60], 0x16011711
mov dword [rbp - 0x5c], 0x4a5657
mov word [rbp - 0x58], 0x808
mov byte [rbp - 0x56], al
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14001b3a3
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14001b3b2
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rsp + 0x74]
mov r13d, 8
mov r9d, r13d
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor r15d, r15d
mov edx, r15d
nop word [rax + rax]
mov eax, r10d
lea r8, [r8 + 4]
xor eax, edx
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x14001b3e0
mov r9d, 0xa
lea r8, [rsp + 0x74]
lea rdx, [rbp - 0x60]
call fcn.14011c9b0
movsx ebx, byte [rsp + 0x70]
mov ecx, ebx
mov qword [rbp - 0x68], rax
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14001b44e
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14001b45d
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rsp + 0x74]
mov edx, r15d
mov r9, r13
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
nop dword [rax]
mov eax, r10d
lea r8, [r8 + 4]
xor eax, edx
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x14001b480
mov r9d, dword [0x140196874]
lea r8, [rsp + 0x74]
mov rdx, qword [rbp - 0x68]
call fcn.14011cb00
mov r14, rax
test rax, rax
jne 0x14001b4db
mov r14, r15
jmp 0x14001b50b
movzx eax, byte [rsp + 0x70]
xor byte [r14], al
xor byte [r14 + 1], al
xor byte [r14 + 2], al
xor byte [r14 + 3], al
xor byte [r14 + 4], al
xor byte [r14 + 5], al
xor byte [r14 + 6], al
xor byte [r14 + 7], al
xor byte [r14 + 8], al
xor byte [r14 + 9], al
mov byte [r14 + 0xa], r15b
mov cl, 0x2b
mov dword [rbp - 0x20], 0x4f4a4467
movsx ebx, cl
xor eax, eax
mov byte [rbp - 0x50], cl
mov ecx, ebx
mov dword [rbp - 0x1c], 0x59494267
mov dword [rbp - 0x18], 0x6a52594a
mov byte [rbp - 0x14], al
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14001b545
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14001b554
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rbp - 0x4c]
mov edx, r15d
mov r9, r13
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
nop dword [rax]
nop word [rax + rax]
mov eax, r10d
lea r8, [r8 + 4]
xor eax, edx
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x14001b580
mov edi, 0xc
lea r8, [rbp - 0x4c]
mov r9d, edi
lea rdx, [rbp - 0x20]
call fcn.14011c9b0
movsx ebx, byte [rbp - 0x50]
mov ecx, ebx
mov qword [rbp - 0x28], rax
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14001b5ec
lea edx, [rdi + 0x78]
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14001b5fb
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rbp - 0x4c]
mov edx, r15d
mov r9, r13
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
nop dword [rax]
mov eax, r10d
lea r8, [r8 + 4]
xor eax, edx
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x14001b620
mov r9d, dword [0x140196874]
lea r8, [rbp - 0x4c]
mov rdx, qword [rbp - 0x28]
call fcn.14011cb00
mov rsi, rax
test rax, rax
jne 0x14001b67a
mov rsi, r15
jmp 0x14001b691
movzx edx, byte [rbp - 0x50]
mov rcx, rdi
xor byte [rax], dl
lea rax, [rax + 1]
sub rcx, 1
jne 0x14001b681
mov byte [rsi + 0xc], r15b
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov eax, 0x5a4d
cmp qword [rdi + 0x60], r15
je 0x14001b780
nop dword [rax]
nop dword [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001b772
cmp word [r11], ax
jne 0x14001b77d
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14001b77d
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14001b77d
mov r15d, dword [r11 + rcx + 0x1c]
lea rax, [r11 + rcx]
mov r10d, dword [rax + 0x20]
add r15, r11
mov r12d, dword [rax + 0x24]
add r10, r11
mov ebx, dword [rax + 0x18]
add r12, r11
xor r9d, r9d
test ebx, ebx
je 0x14001b76d
mov ecx, dword [r10]
xor dl, dl
add rcx, r11
cmp byte [rcx], dl
je 0x14001b761
mov r8, rsi
sub r8, rcx
movzx eax, byte [rcx + r8]
test al, al
je 0x14001b75d
cmp byte [rcx], al
jne 0x14001b761
inc rcx
mov dl, 1
cmp byte [rcx], 0
jne 0x14001b732
movsxd rax, r9d
movzx ecx, word [r12 + rax*2]
mov eax, dword [r15 + rcx*4]
add rax, r11
xor r15d, r15d
jmp 0x14001b783
test dl, dl
jne 0x14001b749
inc r9d
add r10, 4
cmp r9d, ebx
jb 0x14001b720
mov eax, 0x5a4d
cmp qword [rdi + 0x60], 0
jne 0x14001b6c0
xor r15d, r15d
mov rax, r15
mov rcx, r14
call rax
mov cl, 0x5b
mov dword [rbp + 0xf0], 0x22293819
movsx ebx, cl
xor eax, eax
mov byte [rbp + 0xc0], cl
mov ecx, ebx
mov dword [rbp + 0xf4], 0x3f752f2b
mov word [rbp + 0xf8], 0x3737
mov byte [rbp + 0xfa], al
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14001b7d0
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14001b7df
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rbp + 0xc4]
mov edx, r15d
mov r10, r13
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r11d, ecx, 0x5bd1e995
mov eax, r11d
lea r8, [r8 + 4]
xor eax, edx
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r10, 1
jne 0x14001b800
lea r9d, [r10 + 0xa]
lea r8, [rbp + 0xc4]
lea rdx, [rbp + 0xf0]
call fcn.14011c9b0
movsx ebx, byte [rbp + 0xc0]
mov ecx, ebx
mov qword [rbp + 0xe8], rax
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14001b876
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14001b885
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rbp + 0xc4]
mov edx, r15d
mov r9, r13
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
nop word [rax + rax]
mov eax, r10d
lea r8, [r8 + 4]
xor eax, edx
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x14001b8b0
mov r9d, dword [0x140196874]
lea r8, [rbp + 0xc4]
mov rdx, qword [rbp + 0xe8]
call fcn.14011cb00
mov r13, rax
test rax, rax
jne 0x14001b910
mov r13, r15
jmp 0x14001b944
movzx eax, byte [rbp + 0xc0]
xor byte [r13], al
xor byte [r13 + 1], al
xor byte [r13 + 2], al
xor byte [r13 + 3], al
xor byte [r13 + 4], al
xor byte [r13 + 5], al
xor byte [r13 + 6], al
xor byte [r13 + 7], al
xor byte [r13 + 8], al
xor byte [r13 + 9], al
mov byte [r13 + 0xa], 0
mov cl, 0x74
mov dword [rbp + 0x30], 0x10151b38
movsx ebx, cl
xor eax, eax
mov byte [rbp], cl
mov ecx, ebx
mov dword [rbp + 0x34], 0x6161d38
mov dword [rbp + 0x38], 0x350d0615
mov byte [rbp + 0x3c], al
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14001b97e
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14001b98d
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rbp + 4]
mov edi, 8
mov edx, r15d
mov r9d, edi
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x14001b9b0
mov r12d, 0xc
lea r8, [rbp + 4]
mov r9d, r12d
lea rdx, [rbp + 0x30]
call fcn.14011c9b0
movsx ebx, byte [rbp]
mov ecx, ebx
mov qword [rbp + 0x28], rax
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14001ba1f
lea edx, [r12 + 0x78]
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14001ba2e
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rbp + 4]
mov edx, r15d
mov r9, rdi
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
nop dword [rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x14001ba50
mov r9d, dword [0x140196874]
lea r8, [rbp + 4]
mov rdx, qword [rbp + 0x28]
call fcn.14011cb00
mov rsi, rax
test rax, rax
jne 0x14001baaa
mov rsi, r15
jmp 0x14001bac0
movzx edx, byte [rbp]
mov rcx, r12
xor byte [rax], dl
lea rax, [rax + 1]
sub rcx, 1
jne 0x14001bab1
mov byte [rsi + 0xc], cl
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
cmp qword [rdi + 0x60], 0
je 0x14001bbab
nop
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001bb9d
mov r14d, 0x5a4d
cmp word [r11], r14w
jne 0x14001bd2b
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14001bd2b
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14001bd2b
mov r14d, dword [r11 + rcx + 0x1c]
lea rax, [r11 + rcx]
mov r9d, dword [rax + 0x20]
add r14, r11
mov r15d, dword [rax + 0x24]
add r9, r11
mov ebx, dword [rax + 0x18]
add r15, r11
xor r10d, r10d
test ebx, ebx
je 0x14001bb9d
nop word [rax + rax]
mov ecx, dword [r9]
xor dl, dl
add rcx, r11
cmp byte [rcx], dl
je 0x14001bb91
mov r8, rsi
sub r8, rcx
movzx eax, byte [rcx + r8]
test al, al
je 0x14001bb8d
cmp byte [rcx], al
jne 0x14001bb91
inc rcx
mov dl, 1
cmp byte [rcx], 0
jne 0x14001bb62
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor r15d, r15d
jmp 0x14001bbae
test dl, dl
jne 0x14001bb79
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x14001bb50
cmp qword [rdi + 0x60], 0
jne 0x14001bae0
xor r15d, r15d
mov rax, r15
mov r14d, 0x5a4d
mov rcx, r13
call rax
mov cl, 0x1f
mov dword [rbp - 0x60], 0x6f666d5c
movsx ebx, cl
mov byte [rsp + 0x70], cl
mov ecx, ebx
mov dword [rbp - 0x5c], 0x312d2c6b
mov dword [rbp - 0x58], 0x73737b
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14001bbef
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14001bbfe
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rsp + 0x74]
mov edi, 8
mov edx, r15d
mov r9d, edi
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
nop dword [rax]
nop word [rax + rax]
mov eax, r10d
lea r8, [r8 + 4]
xor eax, edx
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x14001bc30
mov r9d, 0xb
lea r8, [rsp + 0x74]
lea rdx, [rbp - 0x60]
call fcn.14011c9b0
movsx ebx, byte [rsp + 0x70]
mov ecx, ebx
mov qword [rbp - 0x68], rax
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14001bc9e
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14001bcad
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rsp + 0x74]
mov edx, r15d
mov r9, rdi
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
nop dword [rax]
mov eax, r10d
lea r8, [r8 + 4]
xor eax, edx
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x14001bcd0
mov r9d, dword [0x140196874]
lea r8, [rsp + 0x74]
mov rdx, qword [rbp - 0x68]
call fcn.14011cb00
mov r13, rax
test rax, rax
jne 0x14001bd36
mov r13, r15
jmp 0x14001bd6c
xor r15d, r15d
mov eax, r15d
jmp 0x14001bbb4
movzx eax, byte [rsp + 0x70]
xor byte [r13], al
xor byte [r13 + 1], al
xor byte [r13 + 2], al
xor byte [r13 + 3], al
xor byte [r13 + 4], al
xor byte [r13 + 5], al
xor byte [r13 + 6], al
xor byte [r13 + 7], al
xor byte [r13 + 8], al
xor byte [r13 + 9], al
xor byte [r13 + 0xa], al
mov byte [r13 + 0xb], 0
mov cl, 0x3b
mov dword [rbp + 0x70], 0x5f5a5477
movsx ebx, cl
xor eax, eax
mov byte [rbp + 0x40], cl
mov ecx, ebx
mov dword [rbp + 0x74], 0x49595277
mov dword [rbp + 0x78], 0x7a42495a
mov byte [rbp + 0x7c], al
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14001bda6
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14001bdb5
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rbp + 0x44]
mov edx, r15d
mov r9, rdi
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
nop dword [rax]
nop word [rax + rax]
mov eax, r10d
lea r8, [r8 + 4]
xor eax, edx
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x14001bde0
mov r9d, r12d
lea r8, [rbp + 0x44]
lea rdx, [rbp + 0x70]
call fcn.14011c9b0
movsx ebx, byte [rbp + 0x40]
mov ecx, ebx
mov qword [rbp + 0x68], rax
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14001be49
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14001be58
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rbp + 0x44]
mov edx, r15d
mov r9, rdi
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
nop word [rax + rax]
mov eax, r10d
lea r8, [r8 + 4]
xor eax, edx
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x14001be80
mov r9d, dword [0x140196874]
lea r8, [rbp + 0x44]
mov rdx, qword [rbp + 0x68]
call fcn.14011cb00
mov rsi, rax
test rax, rax
jne 0x14001beda
mov rsi, r15
jmp 0x14001bef0
movzx edx, byte [rbp + 0x40]
mov rcx, r12
xor byte [rax], dl
lea rax, [rax + 1]
sub rcx, 1
jne 0x14001bee1
mov byte [rsi + 0xc], cl
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
cmp qword [rdi + 0x60], 0
je 0x14001bfda
nop
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001bfbd
cmp word [r11], r14w
jne 0x14001bfcf
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14001bfcf
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14001bfcf
mov r14d, dword [r11 + rcx + 0x1c]
lea rax, [r11 + rcx]
mov r9d, dword [rax + 0x20]
add r14, r11
mov r15d, dword [rax + 0x24]
add r9, r11
mov ebx, dword [rax + 0x18]
add r15, r11
xor r10d, r10d
test ebx, ebx
je 0x14001bfbd
mov ecx, dword [r9]
xor dl, dl
add rcx, r11
cmp byte [rcx], dl
je 0x14001bfb1
mov r8, rsi
sub r8, rcx
movzx eax, byte [rcx + r8]
test al, al
je 0x14001bfad
cmp byte [rcx], al
jne 0x14001bfb1
inc rcx
mov dl, 1
cmp byte [rcx], 0
jne 0x14001bf82
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor r15d, r15d
jmp 0x14001bfdd
test dl, dl
jne 0x14001bf99
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x14001bf70
cmp qword [rdi + 0x60], 0
je 0x14001bfd7
mov r14d, 0x5a4d
jmp 0x14001bf10
xor r15d, r15d
mov eax, r15d
jmp 0x14001bfe3
xor r15d, r15d
mov rax, r15
mov r14d, 0x5a4d
mov rcx, r13
call rax
mov cl, 0x1e
mov dword [rbp + 0x130], 0x2d777a79
movsx ebx, cl
mov byte [rbp + 0x100], cl
mov ecx, ebx
mov dword [rbp + 0x134], 0x727a302c
mov word [rbp + 0x138], 0x72
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14001c028
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14001c037
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rbp + 0x104]
mov edi, 8
mov edx, r15d
mov r9d, edi
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
nop dword [rax]
mov eax, r10d
lea r8, [r8 + 4]
xor eax, edx
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x14001c060
mov r9d, 9
lea r8, [rbp + 0x104]
lea rdx, [rbp + 0x130]
call fcn.14011c9b0
movsx ebx, byte [rbp + 0x100]
mov ecx, ebx
mov qword [rbp + 0x128], rax
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14001c0d8
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14001c0e7
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rbp + 0x104]
mov edx, r15d
mov r9, rdi
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
nop dword [rax + rax]
mov eax, r10d
lea r8, [r8 + 4]
xor eax, edx
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x14001c110
mov r9d, dword [0x140196874]
lea r8, [rbp + 0x104]
mov rdx, qword [rbp + 0x128]
call fcn.14011cb00
mov r13, rax
test rax, rax
jne 0x14001c170
mov r13, r15
jmp 0x14001c1a0
movzx eax, byte [rbp + 0x100]
xor byte [r13], al
xor byte [r13 + 1], al
xor byte [r13 + 2], al
xor byte [r13 + 3], al
xor byte [r13 + 4], al
xor byte [r13 + 5], al
xor byte [r13 + 6], al
xor byte [r13 + 7], al
xor byte [r13 + 8], al
mov byte [r13 + 9], 0
mov cl, 0x1a
mov dword [rbp + 0xb0], 0x7e7b7556
movsx ebx, cl
xor eax, eax
mov byte [rbp + 0x80], cl
mov ecx, ebx
mov dword [rbp + 0xb4], 0x68787356
mov dword [rbp + 0xb8], 0x5b63687b
mov byte [rbp + 0xbc], al
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14001c1e9
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14001c1f8
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rbp + 0x84]
mov edx, r15d
mov r9, rdi
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
nop dword [rax]
mov eax, r10d
lea r8, [r8 + 4]
xor eax, edx
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x14001c220
mov r9d, r12d
lea r8, [rbp + 0x84]
lea rdx, [rbp + 0xb0]
call fcn.14011c9b0
movsx ebx, byte [rbp + 0x80]
mov ecx, ebx
mov qword [rbp + 0xa8], rax
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14001c295
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14001c2a4
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rbp + 0x84]
mov edx, r15d
mov r9, rdi
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
nop word [rax + rax]
mov eax, r10d
lea r8, [r8 + 4]
xor eax, edx
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x14001c2d0
mov r9d, dword [0x140196874]
lea r8, [rbp + 0x84]
mov rdx, qword [rbp + 0xa8]
call fcn.14011cb00
mov rsi, rax
test rax, rax
jne 0x14001c330
mov rsi, r15
jmp 0x14001c350
movzx ecx, byte [rbp + 0x80]
nop word [rax + rax]
xor byte [rax], cl
lea rax, [rax + 1]
sub r12, 1
jne 0x14001c340
mov byte [rsi + 0xc], r12b
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
cmp qword [rdi + 0x60], 0
je 0x14001c432
nop
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14001c41d
cmp word [r11], r14w
jne 0x14001c42f
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14001c42f
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14001c42f
mov r14d, dword [r11 + rcx + 0x1c]
lea rax, [r11 + rcx]
mov r9d, dword [rax + 0x20]
add r14, r11
mov r15d, dword [rax + 0x24]
add r9, r11
mov ebx, dword [rax + 0x18]
add r15, r11
xor r10d, r10d
test ebx, ebx
je 0x14001c41d
mov ecx, dword [r9]
xor dl, dl
add rcx, r11
cmp byte [rcx], dl
je 0x14001c411
mov r8, rsi
sub r8, rcx
movzx eax, byte [rcx + r8]
test al, al
je 0x14001c40d
cmp byte [rcx], al
jne 0x14001c411
inc rcx
mov dl, 1
cmp byte [rcx], 0
jne 0x14001c3e2
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor r15d, r15d
jmp 0x14001c435
test dl, dl
jne 0x14001c3f9
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x14001c3d0
cmp qword [rdi + 0x60], 0
je 0x14001c42f
mov r14d, 0x5a4d
jmp 0x14001c370
xor r15d, r15d
mov rax, r15
mov rcx, r13
call rax
mov cl, 0x7a
mov dword [rbp - 0x20], 0x49484b
movsx ebx, cl
mov byte [rbp - 0x50], cl
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14001c461
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14001c470
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rbp - 0x4c]
mov edi, 8
mov edx, r15d
mov r9d, edi
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
nop dword [rax]
nop word [rax + rax]
mov eax, r10d
lea r8, [r8 + 4]
xor eax, edx
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x14001c4a0
mov r9d, 3
lea r8, [rbp - 0x4c]
lea rdx, [rbp - 0x20]
call fcn.14011c9b0
movsx ebx, byte [rbp - 0x50]
mov ecx, ebx
mov qword [rbp - 0x28], rax
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14001c50c
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14001c51b
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rbp - 0x4c]
mov edx, r15d
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r9d, ecx, 0x5bd1e995
nop word [rax + rax]
mov eax, r9d
lea r8, [r8 + 4]
xor eax, edx
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub rdi, 1
jne 0x14001c540
mov r9d, dword [0x140196874]
lea r8, [rbp - 0x4c]
mov rdx, qword [rbp - 0x28]
call fcn.14011cb00
mov r9, rax
test rax, rax
jne 0x14001c59a
mov r9, r15
jmp 0x14001c5ae
movzx eax, byte [rbp - 0x50]
xor byte [r9], al
xor byte [r9 + 1], al
xor byte [r9 + 2], al
mov byte [r9 + 3], 0
call fcn.1401275e0
mov rcx, rax
mov rbx, rax
call fcn.140016880
test rbx, rbx
jne 0x14001c5da
mov esi, 0x10000
xor r8d, r8d
xor edx, edx
mov dword [0x14018df3c], esi
call fcn.1400262f0
jmp 0x14001c63a
cmp dword [rbx], 2
mov esi, 0x80000
je 0x14001c5f5
mov r8d, dword [rsp + 0x60]
mov rdx, qword [rbp - 0x10]
mov dword [0x14018df3c], esi
jmp 0x14001c625
mov rdi, qword [rbx + 8]
cmp byte [rdi + 0x40], 0
jne 0x14001c607
mov rcx, rdi
call fcn.1401274f0
mov rdx, qword [rdi + 0x30]
mov eax, 0x20000
mov r8d, dword [rdi + 0x28]
test rdx, rdx
mov byte [rdi + 0x40], 1
cmovne eax, r15d
mov dword [0x14018df3c], eax
call fcn.1400262f0
cmp dword [rbx], 2
jne 0x14001c63a
mov rcx, qword [rbx + 8]
call fcn.140123890
mov esi, eax
mov eax, dword [0x1401603f0]
mov edx, 0x7f00
movsd xmm0, qword [str.Steam]
xor ecx, ecx
mov rbx, qword [rbp - 0x10]
mov dword [rbp + 0x1c8], eax
lea rax, [0x14001b130]
mov qword [rbp + 0x148], rax
lea rax, [rbp + 0x1c0]
movsd qword [rbp + 0x1c0], xmm0
xorps xmm0, xmm0
mov qword [rbp + 0x180], rax
mov dword [0x14018df3c], esi
mov qword [rbp + 0x140], r15
mov qword [rbp + 0x150], r15
mov qword [rbp + 0x160], r15
movdqu xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x158], rbx
call qword [sym.imp.USER32.dll_LoadCursorW]
lea rcx, [rbp + 0x140]
mov qword [rbp + 0x168], rax
call qword [sym.imp.USER32.dll_RegisterClassW]
mov qword [rsp + 0x58], r15
lea r8, str.Steam_Login
mov qword [rsp + 0x50], rbx
lea rdx, [rbp + 0x1c0]
mov qword [rsp + 0x48], r15
mov r9d, 0xcb0000
mov qword [rsp + 0x40], r15
xor ecx, ecx
mov dword [rsp + 0x38], 0x96
mov dword [rsp + 0x30], 0x12c
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 0x80000000
call qword [sym.imp.USER32.dll_CreateWindowExW]
test rax, rax
je 0x14001c799
mov edx, dword [rsp + 0x60]
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
xorps xmm0, xmm0
lea rcx, [rbp + 0x190]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
movups xmmword [rbp + 0x190], xmm0
movups xmmword [rbp + 0x1a0], xmm0
movups xmmword [rbp + 0x1b0], xmm0
call qword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x14001c793
nop dword [rax + rax]
lea rcx, [rbp + 0x190]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x190]
call qword [sym.imp.USER32.dll_DispatchMessageW]
xor r9d, r9d
lea rcx, [rbp + 0x190]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
jne 0x14001c760
mov eax, dword [rbp + 0x1a0]
mov rcx, qword [rbp + 0x1d0]
xor rcx, rsp
call fcn.14012b8f0
mov rbx, qword [rsp + 0x328]
add rsp, 0x2e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret