Function at 0x1400f2ae0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Get kernel32 base address
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2d8]
sub rsp, 0x3d8
mov rax, qword [0x140188020]
xor rax, rsp
mov qword [rbp + 0x2c0], rax
mov rax, r9
mov qword [rbp - 0x60], rax
mov rdi, r8
mov qword [rbp - 0x18], r8
mov qword [rbp + 0x68], rdx
mov qword [rbp + 0x70], rcx
mov qword [rbp + 0xe0], r8
mov qword [rbp + 0xe8], rax
xor r13d, r13d
mov dword [rsp + 0x30], r13d
mov cl, 0x75
mov byte [rbp + 0xf0], cl
mov word [rbp + 0x120], 0x5f29
xor eax, eax
mov byte [rbp + 0x122], al
movsx ebx, cl
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x1400f2b6d
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x1400f2b7c
mov edx, 0x9d
call fcn.140128630
imul r11d, ebx, 0x5bd1e995
mov r8d, r13d
lea r9, [rbp + 0xf4]
mov esi, 8
mov r10d, esi
nop word [rax + rax]
mov eax, r11d
shr eax, 0x18
xor eax, r11d
imul eax, eax, 0x5bd1e995
mov ecx, r8d
xor ecx, eax
imul edx, ecx, 0x286a90b9
xor edx, 0xaa2a7357
mov eax, edx
shr eax, 0xd
xor eax, edx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9], eax
add r8d, 0x5bd1e995
lea r9, [r9 + 4]
sub r10, 1
jne 0x1400f2ba0
lea r9d, [r10 + 2]
lea r8, [rbp + 0xf4]
lea rdx, [rbp + 0x120]
call fcn.14011c9b0
mov qword [rbp + 0x118], rax
movsx ebx, byte [rbp + 0xf0]
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x1400f2c25
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x1400f2c34
mov edx, 0x9d
call fcn.140128630
imul r11d, ebx, 0x5bd1e995
mov r8d, r13d
lea r9, [rbp + 0xf4]
mov r10, rsi
nop dword [rax + rax]
mov eax, r11d
shr eax, 0x18
xor eax, r11d
imul eax, eax, 0x5bd1e995
mov ecx, r8d
xor ecx, eax
imul edx, ecx, 0x286a90b9
xor edx, 0xaa2a7357
mov eax, edx
shr eax, 0xd
xor eax, edx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9], eax
add r8d, 0x5bd1e995
lea r9, [r9 + 4]
sub r10, 1
jne 0x1400f2c50
mov r9d, dword [0x140196874]
lea r8, [rbp + 0xf4]
mov rdx, qword [rbp + 0x118]
call fcn.14011cb00
mov r8, rax
test rax, rax
jne 0x1400f2cbf
mov r8, r13
jmp 0x1400f2cd2
movzx eax, byte [rbp + 0xf0]
xor byte [r8], al
xor byte [r8 + 1], al
mov byte [r8 + 2], 0
mov rdx, rdi
lea rcx, [rbp + 0x160]
call fcn.14001ed60
nop
lea r12, [rbp + 0x160]
cmp qword [rbp + 0x178], 0x10
cmovae r12, qword [rbp + 0x160]
mov cl, 0x63
mov byte [rsp + 0x40], cl
mov dword [rsp + 0x70], 0x70d0a25
mov dword [rsp + 0x74], 0x10110a25
mov dword [rsp + 0x78], 0xf0a2517
mov word [rsp + 0x7c], 0x2206
xor eax, eax
mov byte [rsp + 0x7e], al
movsx ebx, cl
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x1400f2d3f
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x1400f2d4e
mov edx, 0x9d
call fcn.140128630
imul r11d, ebx, 0x5bd1e995
mov r8d, r13d
lea r9, [rsp + 0x44]
mov r10, rsi
mov eax, r11d
shr eax, 0x18
xor eax, r11d
imul eax, eax, 0x5bd1e995
mov ecx, r8d
xor ecx, eax
imul edx, ecx, 0x286a90b9
xor edx, 0xaa2a7357
mov eax, edx
shr eax, 0xd
xor eax, edx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9], eax
add r8d, 0x5bd1e995
lea r9, [r9 + 4]
sub r10, 1
jne 0x1400f2d60
mov ebx, 0xe
mov r9d, ebx
lea r8, [rsp + 0x44]
lea rdx, [rsp + 0x70]
call fcn.14011c9b0
mov qword [rsp + 0x68], rax
movsx edi, byte [rsp + 0x40]
mov ecx, edi
call fcn.140013f00
add edi, eax
cmp edi, 0xfffffff0
jg 0x1400f2ddf
lea edx, [rbx + 0x76]
call fcn.140128630
cmp edi, 0xffffffb7
jg 0x1400f2dee
mov edx, 0x9d
call fcn.140128630
imul r10d, edi, 0x5bd1e995
mov edx, r13d
lea r8, [rsp + 0x44]
mov r9, rsi
mov eax, r10d
shr eax, 0x18
xor eax, r10d
imul eax, eax, 0x5bd1e995
xor eax, edx
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8], eax
add edx, 0x5bd1e995
lea r8, [r8 + 4]
sub r9, 1
jne 0x1400f2e00
mov r9d, dword [0x140196874]
lea r8, [rsp + 0x44]
mov rdx, qword [rsp + 0x68]
call fcn.14011cb00
mov rsi, rax
test rax, rax
jne 0x1400f2e68
xor ebx, ebx
mov esi, ebx
jmp 0x1400f2e7f
movzx ecx, byte [rsp + 0x40]
nop dword [rax]
xor byte [rax], cl
lea rax, [rax + 1]
sub rbx, 1
jne 0x1400f2e70
mov byte [rsi + 0xe], bl
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov eax, 0x5a4d
cmp qword [rdi + 0x60], 0
je 0x1400f2f5d
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x1400f2f56
cmp word [r11], ax
jne 0x1400f2f5d
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x1400f2f5d
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x1400f2f5d
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, ebx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x1400f2f51
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x1400f2f45
mov rdx, rsi
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x1400f2f40
cmp byte [rcx], al
jne 0x1400f2f45
mov r8b, 1
inc rcx
cmp byte [rcx], 0
jne 0x1400f2f16
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x1400f2f60
test r8b, r8b
jne 0x1400f2f2d
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x1400f2f02
mov eax, 0x5a4d
xor ebx, ebx
jmp 0x1400f2e98
mov rax, rbx
lea rdx, [rbp + 0x180]
mov rcx, r12
call rax
mov qword [rbp + 0x78], rax
cmp rax, 0xffffffffffffffff
jne 0x1400f2fa0
lea rcx, [rbp + 0x160]
call fcn.14001e820
nop
mov rcx, qword [rbp - 0x18]
call fcn.14001e820
nop
mov rcx, qword [rbp - 0x60]
call fcn.14001e820
xor al, al
jmp 0x1400f40b3
mov edi, dword [rsp + 0x30]
or edi, 1
lea rdx, [0x14015ff50]
lea rcx, [rbp + 0x128]
call fcn.1400f74e0
mov rcx, rax
call fcn.14001d3a0
lea rcx, [rbp + 0x1ac]
sub rax, rcx
nop dword [rax]
movzx r8d, byte [rcx]
movzx edx, byte [rcx + rax]
sub r8d, edx
jne 0x1400f2fe4
inc rcx
test edx, edx
jne 0x1400f2fd0
test r8d, r8d
je 0x1400f318d
or edi, 2
mov cl, 1
mov byte [rbp - 0x50], cl
mov word [rbp - 0x20], 0x2f2f
xor eax, eax
mov byte [rbp - 0x1e], al
movsx ebx, cl
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x1400f301b
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x1400f302a
mov edx, 0x9d
call fcn.140128630
imul r10d, ebx, 0x5bd1e995
xor r13d, r13d
mov edx, r13d
lea r8, [rbp - 0x4c]
mov esi, 8
mov r9d, esi
nop dword [rax]
nop word [rax + rax]
mov eax, r10d
shr eax, 0x18
xor eax, r10d
imul eax, eax, 0x5bd1e995
xor eax, edx
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8], eax
add edx, 0x5bd1e995
lea r8, [r8 + 4]
sub r9, 1
jne 0x1400f3050
mov r9d, 2
lea r8, [rbp - 0x4c]
lea rdx, [rbp - 0x20]
call fcn.14011c9b0
mov qword [rbp - 0x28], rax
movsx ebx, byte [rbp - 0x50]
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x1400f30c7
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x1400f30d6
mov edx, 0x9d
call fcn.140128630
imul r10d, ebx, 0x5bd1e995
xor ebx, ebx
mov edx, ebx
lea r8, [rbp - 0x4c]
mov r9, rsi
nop dword [rax + rax]
mov eax, r10d
shr eax, 0x18
xor eax, r10d
imul eax, eax, 0x5bd1e995
xor eax, edx
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8], eax
add edx, 0x5bd1e995
lea r8, [r8 + 4]
sub r9, 1
jne 0x1400f30f0
mov r9d, dword [0x140196874]
lea r8, [rbp - 0x4c]
mov rdx, qword [rbp - 0x28]
call fcn.14011cb00
mov rdx, rax
test rax, rax
jne 0x1400f3155
mov rdx, rbx
jmp 0x1400f3161
movzx eax, byte [rbp - 0x50]
xor byte [rdx], al
xor byte [rdx + 1], al
mov byte [rdx + 2], bl
lea rax, [rbp + 0x1ac]
sub rdx, rax
nop dword [rax + rax]
movzx r8d, byte [rax]
movzx ecx, byte [rax + rdx]
sub r8d, ecx
jne 0x1400f3184
inc rax
test ecx, ecx
jne 0x1400f3170
test r8d, r8d
je 0x1400f3192
xor al, al
jmp 0x1400f3194
mov esi, 8
mov al, 1
test dil, 2
je 0x1400f319d
and edi, 0xfffffffd
and edi, 0xfffffffe
mov dword [rsp + 0x30], edi
test al, al
jne 0x1400f3b7c
lea rdx, [0x14015ff58]
lea rcx, [rsp + 0x40]
call fcn.1400f75d0
mov rcx, rax
call fcn.14001d3a0
mov r8, rax
mov rdx, qword [rbp - 0x18]
lea rcx, [rbp + 0x48]
call fcn.14001ed60
nop
lea rdx, [rbp + 0x1ac]
mov rcx, rax
call fcn.14001e570
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xf0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x100], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or edi, 4
mov dword [rsp + 0x30], edi
lea rcx, [rbp + 0x48]
call fcn.14001e820
test byte [rbp + 0x180], 0x10
je 0x1400f3415
lea rax, [rbp - 0x50]
mov qword [rbp - 0x58], rax
mov cl, 0x76
mov byte [rbp + 0x10], cl
mov word [rbp + 0x40], 0x2a
movsx ebx, cl
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x1400f3254
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x1400f3263
mov edx, 0x9d
call fcn.140128630
imul r10d, ebx, 0x5bd1e995
xor r13d, r13d
mov edx, r13d
lea r8, [rbp + 0x14]
mov r9, rsi
nop word [rax + rax]
mov eax, r10d
shr eax, 0x18
xor eax, r10d
imul eax, eax, 0x5bd1e995
xor eax, edx
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8], eax
add edx, 0x5bd1e995
lea r8, [r8 + 4]
sub r9, 1
jne 0x1400f3280
mov r9d, 1
lea r8, [rbp + 0x14]
lea rdx, [rbp + 0x40]
call fcn.14011c9b0
mov qword [rbp + 0x38], rax
movsx ebx, byte [rbp + 0x10]
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x1400f32f7
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x1400f3306
mov edx, 0x9d
call fcn.140128630
imul r10d, ebx, 0x5bd1e995
mov edx, r13d
lea r8, [rbp + 0x14]
mov r9, rsi
nop word [rax + rax]
mov eax, r10d
shr eax, 0x18
xor eax, r10d
imul eax, eax, 0x5bd1e995
xor eax, edx
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8], eax
add edx, 0x5bd1e995
lea r8, [r8 + 4]
sub r9, 1
jne 0x1400f3320
mov r9d, dword [0x140196874]
lea r8, [rbp + 0x14]
mov rdx, qword [rbp + 0x38]
call fcn.14011cb00
mov r8, rax
test rax, rax
jne 0x1400f3385
mov r8, r13
jmp 0x1400f3390
movzx eax, byte [rbp + 0x10]
xor byte [r8], al
mov byte [r8 + 1], r13b
mov rdx, qword [rbp - 0x60]
lea rcx, [rbp - 0x10]
call fcn.14001ed60
nop
lea rdx, [rbp + 0x1ac]
mov rcx, rax
call fcn.14001e570
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x40], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or edi, 8
mov dword [rsp + 0x30], edi
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0x128]
call fcn.14001e730
nop
lea r9, [rbp - 0x50]
mov r8, rax
mov rdx, qword [rbp + 0x68]
mov rcx, qword [rbp + 0x70]
call fcn.1400f2ae0
nop
lea rcx, [rbp - 0x10]
call fcn.14001e820
jmp 0x1400f3b6e
mov qword [rbp + 0x128], rbx
mov qword [rbp + 0x138], rbx
mov qword [rbp + 0x140], 0xf
mov byte [rbp + 0x128], 0
xor r8d, r8d
lea rdx, [0x14015febb]
lea rcx, [rbp + 0x128]
call fcn.14001ea30
nop
lea rcx, [rsp + 0x40]
call fcn.1400f76c0
mov rcx, rax
call fcn.14001d3a0
mov r8, rax
mov rdx, qword [rbp - 0x60]
lea rcx, [rbp - 0x50]
call fcn.14001ed60
nop
mov rdx, rax
lea rcx, [rbp + 0x128]
call fcn.14001e600
nop
lea rcx, [rbp - 0x50]
call fcn.14001e820
lea rdx, [rbp + 0x1ac]
lea rcx, [rbp + 0x128]
call fcn.14001e570
lea rdx, [rbp + 0xf0]
cmp qword [rbp + 0x108], 0x10
cmovae rdx, qword [rbp + 0xf0]
mov qword [rbp + 0x10], rbx
mov qword [rbp + 0x20], rbx
mov qword [rbp + 0x28], 0xf
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x1400f34d0
lea rcx, [rbp + 0x10]
call fcn.14001ea30
lea rax, [rbp + 0x10]
mov qword [rbp - 0x58], rax
lea r13, [rbp + 0x10]
cmp qword [rbp + 0x28], 0x10
cmovae r13, qword [rbp + 0x10]
lea rcx, [rsp + 0x40]
call fcn.1400f77a0
mov rcx, rax
call fcn.14001d7f0
mov r14, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rsi, qword [rcx]
cmp qword [rsi + 0x60], 0
je 0x1400f35e5
mov r11, qword [rsi + 0x30]
mov rsi, qword [rsi]
test r11, r11
je 0x1400f3522
mov edi, 0x5a4d
cmp word [r11], di
jne 0x1400f35e0
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x1400f35e0
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x1400f35e0
lea rax, [r11 + rcx]
mov r15d, dword [rax + 0x1c]
add r15, r11
mov edi, dword [rax + 0x20]
add rdi, r11
mov r12d, dword [rax + 0x24]
add r12, r11
mov r10d, ebx
mov r9, rbx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x1400f35d9
nop dword [rax + rax]
xor dl, dl
mov ecx, dword [rdi + r9*4]
add rcx, r11
cmp byte [rcx], dl
je 0x1400f35ce
mov r8, r14
sub r8, rcx
movzx eax, byte [r8 + rcx]
test al, al
je 0x1400f35ca
cmp byte [rcx], al
jne 0x1400f35ce
mov dl, 1
inc rcx
cmp byte [rcx], 0
jne 0x1400f35a3
movzx eax, word [r12 + r9*2]
mov r10d, dword [r15 + rax*4]
add r10, r11
xor ebx, ebx
jmp 0x1400f35e8
test dl, dl
jne 0x1400f35ba
inc r10d
inc r9
cmp r10d, ebx
jb 0x1400f3590
xor ebx, ebx
jmp 0x1400f3522
mov r10, rbx
jmp 0x1400f35ed
mov r10, rbx
mov edi, 0x5a4d
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r9d, 0xffffffff
mov r8, r13
xor edx, edx
mov ecx, 0xfde9
call r10
mov dword [rbp - 0x70], eax
xor r8d, r8d
movsxd rdx, eax
lea rcx, [rbp - 0x50]
call fcn.14001e470
or dword [rsp + 0x30], 0x10
lea r13, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae r13, qword [rbp - 0x50]
lea rax, [rbp + 0x10]
cmp qword [rbp + 0x28], 0x10
cmovae rax, qword [rbp + 0x10]
mov qword [rbp - 0x68], rax
lea rcx, [rbp + 0x90]
call fcn.1400f7890
mov rcx, rax
call fcn.14001d7f0
mov r14, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rsi, qword [rcx]
cmp qword [rsi + 0x60], 0
je 0x1400f3742
nop word [rax + rax]
mov r11, qword [rsi + 0x30]
mov rsi, qword [rsi]
test r11, r11
je 0x1400f372c
cmp word [r11], di
jne 0x1400f373d
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x1400f373d
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x1400f373d
lea rax, [r11 + rcx]
mov r15d, dword [rax + 0x1c]
add r15, r11
mov edi, dword [rax + 0x20]
add rdi, r11
mov r12d, dword [rax + 0x24]
add r12, r11
mov r10d, ebx
mov r9, rbx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x1400f372a
xor dl, dl
mov ecx, dword [rdi + r9*4]
add rcx, r11
cmp byte [rcx], dl
je 0x1400f371f
mov r8, r14
sub r8, rcx
movzx eax, byte [r8 + rcx]
test al, al
je 0x1400f371b
cmp byte [rcx], al
jne 0x1400f371f
mov dl, 1
inc rcx
cmp byte [rcx], 0
jne 0x1400f36f4
movzx eax, word [r12 + r9*2]
mov r10d, dword [r15 + rax*4]
add r10, r11
xor ebx, ebx
jmp 0x1400f3745
test dl, dl
jne 0x1400f370b
inc r10d
inc r9
cmp r10d, ebx
jb 0x1400f36e1
xor ebx, ebx
cmp qword [rsi + 0x60], 0
je 0x1400f3742
mov edi, 0x5a4d
jmp 0x1400f3680
mov r10, rbx
jmp 0x1400f374a
mov r10, rbx
mov edi, 0x5a4d
mov eax, dword [rbp - 0x70]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r13
mov r9d, 0xffffffff
mov r8, qword [rbp - 0x68]
xor edx, edx
mov ecx, 0xfde9
call r10
nop
lea rcx, [rbp + 0x10]
call fcn.14001e820
lea rax, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae rax, qword [rbp - 0x50]
mov qword [rbp - 0x58], rax
lea rdx, [rbp + 0x128]
cmp qword [rbp + 0x140], 0x10
cmovae rdx, qword [rbp + 0x128]
mov qword [rbp - 0x10], rbx
mov qword [rbp], rbx
mov qword [rbp + 8], 0xf
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x1400f37b4
lea rcx, [rbp - 0x10]
call fcn.14001ea30
lea rax, [rbp - 0x10]
mov qword [rbp + 0x80], rax
lea r13, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae r13, qword [rbp - 0x10]
lea rcx, [rbp + 0x90]
call fcn.1400f77a0
mov rcx, rax
call fcn.14001d7f0
mov r14, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rsi, qword [rcx]
cmp qword [rsi + 0x60], 0
je 0x1400f38e2
nop word [rax + rax]
mov r11, qword [rsi + 0x30]
mov rsi, qword [rsi]
test r11, r11
je 0x1400f38cc
cmp word [r11], di
jne 0x1400f38dd
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x1400f38dd
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x1400f38dd
lea rax, [r11 + rcx]
mov r15d, dword [rax + 0x1c]
add r15, r11
mov edi, dword [rax + 0x20]
add rdi, r11
mov r12d, dword [rax + 0x24]
add r12, r11
mov r10d, ebx
mov r9, rbx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x1400f38ca
xor dl, dl
mov ecx, dword [rdi + r9*4]
add rcx, r11
cmp byte [rcx], dl
je 0x1400f38bf
mov r8, r14
sub r8, rcx
movzx eax, byte [r8 + rcx]
test al, al
je 0x1400f38bb
cmp byte [rcx], al
jne 0x1400f38bf
mov dl, 1
inc rcx
cmp byte [rcx], 0
jne 0x1400f3894
movzx eax, word [r12 + r9*2]
mov r10d, dword [r15 + rax*4]
add r10, r11
xor ebx, ebx
jmp 0x1400f38e5
test dl, dl
jne 0x1400f38ab
inc r10d
inc r9
cmp r10d, ebx
jb 0x1400f3881
xor ebx, ebx
cmp qword [rsi + 0x60], 0
je 0x1400f38e2
mov edi, 0x5a4d
jmp 0x1400f3820
mov r10, rbx
jmp 0x1400f38ea
mov r10, rbx
mov edi, 0x5a4d
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r9d, 0xffffffff
mov r8, r13
xor edx, edx
mov ecx, 0xfde9
call r10
mov dword [rbp - 0x70], eax
xor r8d, r8d
movsxd rdx, eax
lea rcx, [rbp + 0x48]
call fcn.14001e470
or dword [rsp + 0x30], 0x20
lea r13, [rbp + 0x48]
cmp qword [rbp + 0x60], 8
cmovae r13, qword [rbp + 0x48]
lea rax, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae rax, qword [rbp - 0x10]
mov qword [rbp - 0x68], rax
lea rcx, [rsp + 0x40]
call fcn.1400f7890
mov rcx, rax
call fcn.14001d7f0
mov r14, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rsi, qword [rcx]
cmp qword [rsi + 0x60], 0
je 0x1400f3a3b
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rsi + 0x30]
mov rsi, qword [rsi]
test r11, r11
je 0x1400f3a2a
cmp word [r11], di
jne 0x1400f3a3b
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x1400f3a3b
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x1400f3a3b
lea rax, [r11 + rcx]
mov r15d, dword [rax + 0x1c]
add r15, r11
mov edi, dword [rax + 0x20]
add rdi, r11
mov r12d, dword [rax + 0x24]
add r12, r11
mov r10d, ebx
mov r9, rbx
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x1400f3a28
xor dl, dl
mov ecx, dword [rdi + r9*4]
add rcx, r11
cmp byte [rcx], dl
je 0x1400f3a1d
mov r8, r14
sub r8, rcx
movzx eax, byte [r8 + rcx]
test al, al
je 0x1400f3a19
cmp byte [rcx], al
jne 0x1400f3a1d
mov dl, 1
inc rcx
cmp byte [rcx], 0
jne 0x1400f39f4
movzx eax, word [r12 + r9*2]
mov r10d, dword [r15 + rax*4]
add r10, r11
jmp 0x1400f3a3e
test dl, dl
jne 0x1400f3a0b
inc r10d
inc r9
cmp r10d, ebx
jb 0x1400f39e1
xor ebx, ebx
cmp qword [rsi + 0x60], 0
je 0x1400f3a3b
mov edi, 0x5a4d
jmp 0x1400f3980
mov r10, rbx
mov eax, dword [rbp - 0x70]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r13
mov r9d, 0xffffffff
mov r8, qword [rbp - 0x68]
xor edx, edx
mov ecx, 0xfde9
call r10
nop
lea rcx, [rbp - 0x10]
call fcn.14001e820
lea rax, [rbp + 0x48]
mov rcx, qword [rbp + 0x48]
mov rdx, qword [rbp + 0x60]
cmp rdx, 8
cmovae rax, rcx
mov r10, qword [rbp + 0x68]
test r10, r10
jne 0x1400f3a8c
mov eax, 0x10000
jmp 0x1400f3abc
cmp dword [r10], 2
je 0x1400f3a99
mov eax, 0x80000
jmp 0x1400f3abc
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8, qword [rbp - 0x58]
mov rdx, rax
mov rcx, qword [r10 + 8]
call fcn.140125e10
mov rdx, qword [rbp + 0x60]
mov rcx, qword [rbp + 0x48]
mov dword [0x14018df3c], eax
mov ebx, dword [rsp + 0x30]
and ebx, 0xffffffdf
cmp rdx, 8
jb 0x1400f3b01
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f3afc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f4101
call fcn.14012b910
xor r13d, r13d
mov qword [rbp + 0x58], r13
mov qword [rbp + 0x60], 7
mov word [rbp + 0x48], r13w
and ebx, 0xffffffef
mov dword [rsp + 0x30], ebx
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x1400f3b5d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f3b57
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f40fb
call fcn.14012b910
nop
lea rcx, [rbp + 0x128]
call fcn.14001e820
mov esi, 8
lea rcx, [rbp + 0xf0]
call fcn.14001e820
jmp 0x1400f3b7f
xor r13d, r13d
mov cl, 0x2f
mov byte [rsp + 0x40], cl
mov dword [rsp + 0x70], 0x4b414669
mov dword [rsp + 0x74], 0x5b574a61
mov dword [rsp + 0x78], 0x4a434669
mov word [rsp + 0x7c], 0x6e
movsx ebx, cl
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x1400f3bbf
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x1400f3bce
mov edx, 0x9d
call fcn.140128630
imul r11d, ebx, 0x5bd1e995
mov r8d, r13d
lea r9, [rsp + 0x44]
mov r10, rsi
mov eax, r11d
shr eax, 0x18
xor eax, r11d
imul eax, eax, 0x5bd1e995
mov ecx, r8d
xor ecx, eax
imul edx, ecx, 0x286a90b9
xor edx, 0xaa2a7357
mov eax, edx
shr eax, 0xd
xor eax, edx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9], eax
add r8d, 0x5bd1e995
lea r9, [r9 + 4]
sub r10, 1
jne 0x1400f3be0
lea r9d, [r10 + 0xd]
lea r8, [rsp + 0x44]
lea rdx, [rsp + 0x70]
call fcn.14011c9b0
mov qword [rsp + 0x68], rax
movsx ebx, byte [rsp + 0x40]
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x1400f3c5d
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x1400f3c6c
mov edx, 0x9d
call fcn.140128630
imul r11d, ebx, 0x5bd1e995
xor ebx, ebx
mov r8d, ebx
lea r9, [rsp + 0x44]
mov r10, rsi
mov eax, r11d
shr eax, 0x18
xor eax, r11d
imul eax, eax, 0x5bd1e995
mov ecx, r8d
xor ecx, eax
imul edx, ecx, 0x286a90b9
xor edx, 0xaa2a7357
mov eax, edx
shr eax, 0xd
xor eax, edx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9], eax
add r8d, 0x5bd1e995
lea r9, [r9 + 4]
sub r10, 1
jne 0x1400f3c80
mov r9d, dword [0x140196874]
lea r8, [rsp + 0x44]
mov rdx, qword [rsp + 0x68]
call fcn.14011cb00
mov r14, rax
test rax, rax
jne 0x1400f3ceb
mov r14, rbx
jmp 0x1400f3d10
mov ecx, 0xd
movzx edx, byte [rsp + 0x40]
nop word [rax + rax]
xor byte [rax], dl
lea rax, [rax + 1]
sub rcx, 1
jne 0x1400f3d00
mov byte [r14 + 0xd], bl
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
cmp qword [rsi + 0x60], rbx
je 0x1400f3e05
xor r13d, r13d
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rsi + 0x30]
mov rsi, qword [rsi]
test r11, r11
je 0x1400f3df9
mov edi, 0x5a4d
cmp word [r11], di
jne 0x1400f3f9b
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x1400f3f9b
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x1400f3f9b
lea rax, [r11 + rcx]
mov r15d, dword [rax + 0x1c]
add r15, r11
mov ebx, dword [rax + 0x20]
add rbx, r11
mov r12d, dword [rax + 0x24]
add r12, r11
mov r10d, r13d
mov r9, r13
mov edi, dword [rax + 0x18]
test edi, edi
je 0x1400f3df9
nop word [rax + rax]
xor dl, dl
mov eax, dword [rbx + r9*4]
add rax, r11
cmp byte [rax], dl
je 0x1400f3dee
mov r8, r14
sub r8, rax
movzx ecx, byte [rax + r8]
test cl, cl
je 0x1400f3dea
cmp byte [rax], cl
jne 0x1400f3dee
mov dl, 1
inc rax
cmp byte [rax], r13b
jne 0x1400f3dc3
movzx eax, word [r12 + r9*2]
mov r8d, dword [r15 + rax*4]
add r8, r11
xor ebx, ebx
jmp 0x1400f3e08
test dl, dl
jne 0x1400f3dda
inc r10d
inc r9
cmp r10d, edi
jb 0x1400f3db0
cmp qword [rsi + 0x60], r13
jne 0x1400f3d40
xor ebx, ebx
mov r8, rbx
mov edi, 0x5a4d
lea rdx, [rbp + 0x180]
mov r12, qword [rbp + 0x78]
mov rcx, r12
call r8
test eax, eax
jne 0x1400f2fa0
mov cl, 0x57
mov byte [rsp + 0x40], cl
mov dword [rsp + 0x70], 0x33393e11
mov dword [rsp + 0x74], 0x24383b14
mov word [rsp + 0x78], 0x32
movsx ebx, cl
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x1400f3e5e
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x1400f3e6d
mov edx, 0x9d
call fcn.140128630
imul r11d, ebx, 0x5bd1e995
xor r13d, r13d
mov r8d, r13d
lea r9, [rsp + 0x44]
mov esi, 8
mov r10d, esi
nop word [rax + rax]
mov eax, r11d
shr eax, 0x18
xor eax, r11d
imul eax, eax, 0x5bd1e995
mov ecx, r8d
xor ecx, eax
imul edx, ecx, 0x286a90b9
xor edx, 0xaa2a7357
mov eax, edx
shr eax, 0xd
xor eax, edx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9], eax
add r8d, 0x5bd1e995
lea r9, [r9 + 4]
sub r10, 1
jne 0x1400f3e90
lea r9d, [r10 + 9]
lea r8, [rsp + 0x44]
lea rdx, [rsp + 0x70]
call fcn.14011c9b0
mov qword [rsp + 0x68], rax
movsx ebx, byte [rsp + 0x40]
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x1400f3f0d
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x1400f3f1c
mov edx, 0x9d
call fcn.140128630
imul r10d, ebx, 0x5bd1e995
mov r8d, r13d
lea r9, [rsp + 0x44]
nop dword [rax + rax]
mov eax, r10d
shr eax, 0x18
xor eax, r10d
imul eax, eax, 0x5bd1e995
mov ecx, r8d
xor ecx, eax
imul edx, ecx, 0x286a90b9
xor edx, 0xaa2a7357
mov eax, edx
shr eax, 0xd
xor eax, edx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9], eax
add r8d, 0x5bd1e995
lea r9, [r9 + 4]
sub rsi, 1
jne 0x1400f3f30
mov r9d, dword [0x140196874]
lea r8, [rsp + 0x44]
mov rdx, qword [rsp + 0x68]
call fcn.14011cb00
mov rbx, rax
test rax, rax
jne 0x1400f3fa5
mov rbx, r13
jmp 0x1400f3fc8
xor ebx, ebx
mov r8d, ebx
jmp 0x1400f3e0d
movzx eax, byte [rsp + 0x40]
xor byte [rbx], al
xor byte [rbx + 1], al
xor byte [rbx + 2], al
xor byte [rbx + 3], al
xor byte [rbx + 4], al
xor byte [rbx + 5], al
xor byte [rbx + 6], al
xor byte [rbx + 7], al
xor byte [rbx + 8], al
mov byte [rbx + 9], r13b
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
cmp qword [rsi + 0x60], r13
je 0x1400f408a
nop word [rax + rax]
mov r11, qword [rsi + 0x30]
mov rsi, qword [rsi]
test r11, r11
je 0x1400f40eb
cmp word [r11], di
jne 0x1400f408a
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x1400f408a
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x1400f408a
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
mov r10d, r13d
mov edi, dword [rax + 0x18]
test edi, edi
je 0x1400f40eb
nop dword [rax + rax]
xor r8b, r8b
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], r8b
je 0x1400f40db
mov rdx, rbx
sub rdx, rcx
movzx eax, byte [rdx + rcx]
test al, al
je 0x1400f40d6
cmp byte [rcx], al
jne 0x1400f40db
mov r8b, 1
inc rcx
cmp byte [rcx], r13b
jne 0x1400f4064
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov r13d, dword [r14 + rcx*4]
add r13, r11
mov rcx, r12
call r13
nop
lea rcx, [rbp + 0x160]
call fcn.14001e820
nop
mov rcx, qword [rbp - 0x18]
call fcn.14001e820
nop
mov rcx, qword [rbp - 0x60]
call fcn.14001e820
mov al, 1
mov rcx, qword [rbp + 0x2c0]
xor rcx, rsp
call fcn.14012b8f0
add rsp, 0x3d8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
test r8b, r8b
jne 0x1400f407b
inc r10d
add r9, 4
cmp r10d, edi
jb 0x1400f4050
cmp qword [rsi + 0x60], r13
je 0x1400f408a
mov edi, 0x5a4d
jmp 0x1400f3ff0
call fcn.140133e80
nop
call fcn.140133e80
int3