Function at 0x1401f1b99
Capabilities:
Contain obfuscated stackstrings

Disassembly:
test rcx, rcx
je 0x1401f1eef
mov r11, rsp
push rbp
push rbx
push r14
lea rbp, [r11 - 0x5f]
sub rsp, 0xf0
mov rax, qword [0x140462840]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov qword [r11 + 0x18], rsi
mov qword [r11 - 0x20], rdi
mov qword [r11 - 0x28], r12
mov r14, rdx
mov qword [r11 - 0x30], r13
xor edx, edx
mov qword [r11 - 0x38], r15
mov rbx, rcx
call fcn.14021d800
mov dword [rbp - 0x39], 0x54414449
mov r15d, dword [rbp - 0x39]
mov dword [rbp - 0x79], 0x444e4549
mov r13d, dword [rbp - 0x79]
mov dword [rbp + 7], 0x45544c50
mov r12d, dword [rbp + 7]
mov dword [rbp - 0x69], 0x52444849
mov byte [rbp - 0x65], 0
mov byte [rbp - 0x35], 0
mov byte [rbp - 0x75], 0
mov byte [rbp + 0xb], 0
mov dword [rbp - 0x29], 0x44474b62
mov byte [rbp - 0x25], 0
mov dword [rbp - 0x59], 0x4d524863
mov byte [rbp - 0x55], 0
mov dword [rbp - 9], 0x414d4167
mov byte [rbp - 5], 0
mov dword [rbp - 0x49], 0x54534968
mov byte [rbp - 0x45], 0
mov dword [rbp - 0x41], 0x50434369
mov byte [rbp - 0x3d], 0
mov dword [rbp - 0x19], 0x7346466f
mov byte [rbp - 0x15], 0
mov dword [rsp + 0x20], 0x4c414370
mov byte [rsp + 0x24], 0
mov dword [rbp - 0x71], 0x73594870
mov byte [rbp - 0x6d], 0
mov dword [rbp - 0x61], 0x54494273
mov byte [rbp - 0x5d], 0
mov dword [rsp + 0x28], 0x4c414373
mov byte [rbp - 0x7d], 0
mov dword [rbp - 0x31], 0x544c5073
mov byte [rbp - 0x2d], 0
mov dword [rbp - 0x51], 0x42475273
mov byte [rbp - 0x4d], 0
mov dword [rbp - 0x21], 0x74584574
mov byte [rbp - 0x1d], 0
mov dword [rbp - 0x11], 0x454d4974
mov byte [rbp - 0xd], 0
mov dword [rbp - 1], 0x534e5274
mov byte [rbp + 3], 0
mov dword [rbp + 0xf], 0x7458547a
mov byte [rbp + 0x13], 0
lea rsi, [rbx + 0x254]
nop dword [rax]
mov rcx, rbx
call fcn.1402207d0
mov rcx, rbx
mov edi, eax
mov eax, dword [rbp - 0x69]
cmp dword [rsi], eax
jne 0x1401f1cf4
mov r8d, edi
mov rdx, r14
call fcn.14021e270
jmp 0x1401f1ea3
cmp dword [rsi], r13d
jne 0x1401f1d09
mov r8d, edi
mov rdx, r14
call fcn.14021e210
jmp 0x1401f1ea3
mov rdx, rsi
call fcn.1401dec60
test eax, eax
je 0x1401f1d5c
cmp dword [rsi], r15d
jne 0x1401f1d39
test edi, edi
jne 0x1401f1d2a
test dword [rbx + 0x14c], 0x2000
je 0x1401f1d39
lea rdx, str.Too_many_IDATs_found
mov rcx, rbx
call fcn.1401df280
mov r8d, edi
mov rdx, r14
mov rcx, rbx
call fcn.140220420
cmp dword [rsi], r12d
jne 0x1401f1ea3
or dword [rbx + 0x14c], 2
jmp 0x1401f1ea3
cmp dword [rsi], r15d
jne 0x1401f1d8f
test edi, edi
jne 0x1401f1d71
test dword [rbx + 0x14c], 0x2000
je 0x1401f1d80
lea rdx, str.Too_many_IDATs_found
mov rcx, rbx
call fcn.1401df280
mov edx, edi
mov rcx, rbx
call fcn.14021d800
jmp 0x1401f1ea3
mov r8d, edi
mov rdx, r14
mov rcx, rbx
cmp dword [rsi], r12d
jne 0x1401f1da7
call fcn.14021e410
jmp 0x1401f1ea3
mov eax, dword [rbp - 0x29]
cmp dword [rsi], eax
jne 0x1401f1db8
call fcn.14021e5d0
jmp 0x1401f1ea3
mov eax, dword [rbp - 0x59]
cmp dword [rsi], eax
jne 0x1401f1dc9
call fcn.14021e7c0
jmp 0x1401f1ea3
mov eax, dword [rbp - 9]
cmp dword [rsi], eax
jne 0x1401f1dda
call fcn.14021ec20
jmp 0x1401f1ea3
mov eax, dword [rbp - 0x49]
cmp dword [rsi], eax
jne 0x1401f1deb
call fcn.14021ede0
jmp 0x1401f1ea3
mov eax, dword [rbp - 0x19]
cmp dword [rsi], eax
jne 0x1401f1dfc
call fcn.14021f190
jmp 0x1401f1ea3
mov eax, dword [rsp + 0x20]
cmp dword [rsi], eax
jne 0x1401f1e0e
call fcn.14021f2b0
jmp 0x1401f1ea3
mov eax, dword [rsp + 0x28]
cmp dword [rsi], eax
jne 0x1401f1e20
call fcn.14021f840
jmp 0x1401f1ea3
mov eax, dword [rbp - 0x71]
cmp dword [rsi], eax
jne 0x1401f1e2e
call fcn.14021f5e0
jmp 0x1401f1ea3
mov eax, dword [rbp - 0x61]
cmp dword [rsi], eax
jne 0x1401f1e3c
call fcn.14021f6f0
jmp 0x1401f1ea3
mov eax, dword [rbp - 0x51]
cmp dword [rsi], eax
jne 0x1401f1e4a
call fcn.14021fd30
jmp 0x1401f1ea3
mov eax, dword [rbp - 0x41]
cmp dword [rsi], eax
jne 0x1401f1e58
call fcn.14021ef10
jmp 0x1401f1ea3
mov eax, dword [rbp - 0x31]
cmp dword [rsi], eax
jne 0x1401f1e66
call fcn.14021fa60
jmp 0x1401f1ea3
mov eax, dword [rbp - 0x21]
cmp dword [rsi], eax
jne 0x1401f1e74
call fcn.14021ff60
jmp 0x1401f1ea3
mov eax, dword [rbp - 0x11]
cmp dword [rsi], eax
jne 0x1401f1e82
call fcn.140220120
jmp 0x1401f1ea3
mov eax, dword [rbp - 1]
cmp dword [rsi], eax
jne 0x1401f1e90
call fcn.140220230
jmp 0x1401f1ea3
mov eax, dword [rbp + 0xf]
cmp dword [rsi], eax
jne 0x1401f1e9e
call fcn.1402205c0
jmp 0x1401f1ea3
call fcn.140220420
test byte [rbx + 0x14c], 0x10
je 0x1401f1cd0
mov r15, qword [rsp + 0xd0]
mov r13, qword [rsp + 0xd8]
mov r12, qword [rsp + 0xe0]
mov rdi, qword [rsp + 0xe8]
mov rsi, qword [rsp + 0x120]
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.140289bf0
add rsp, 0xf0
pop r14
pop rbx
pop rbp
ret