Function at 0x1400a1540
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x160]
sub rsp, 0x260
mov rax, qword [0x1400cc020]
xor rax, rsp
mov qword [rbp + 0x150], rax
mov r12, rcx
mov qword [rbp + 0x140], rcx
mov qword [rsp + 0x78], rcx
xor r14d, r14d
mov dword [rsp + 0x40], r14d
lea rdx, [0x1400ba9a0]
lea rcx, [rbp - 0x20]
call fcn.14009c7c0
nop
mov dword [rsp + 0x70], 0x200
mov dword [rsp + 0x74], 0x100
mov qword [r12], r14
mov qword [r12 + 0x10], r14
mov qword [r12 + 0x18], 0xf
mov byte [r12], r14b
mov edi, 1
mov dword [rsp + 0x40], edi
mov esi, r14d
mov qword [rsp + 0x58], r14
nop word [rax + rax]
mov qword [rsp + 0x50], r14
lea rdx, [0x1400ba9d0]
lea rcx, [rbp - 0x40]
call fcn.14009c7c0
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x1400a1602
mov rbx, qword [rax]
mov r14d, dword [rsp + rsi*4 + 0x70]
or r14d, 0x20019
mov r15d, 1
call fcn.1400a38f0
mov rsi, rax
test rax, rax
je 0x1400a16ab
mov word [rbp + 0x12a], 0x7845
mov word [rbp + 0x121], 0x6765
mov byte [rbp + 0x120], 0x52
mov word [rbp + 0x124], 0x6570
mov word [rbp + 0x127], 0x654b
mov byte [rbp + 0x123], 0x4f
mov byte [rbp + 0x126], 0x6e
mov byte [rbp + 0x129], 0x79
mov word [rbp + 0x12c], 0x41
lea rdx, [rbp + 0x120]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400a16a2
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x20], rcx
mov r9d, r14d
xor r8d, r8d
mov rdx, rbx
mov rcx, 0xffffffff80000002
call rax
mov r15d, eax
mov rcx, rsi
call fcn.140098790
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x1400a16e6
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a16e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a2783
call fcn.14006126c
xor r14d, r14d
mov qword [rbp - 0x80], r14
mov ecx, r14d
mov qword [rbp - 0x70], rcx
mov edx, 0xf
mov qword [rbp - 0x68], rdx
mov byte [rbp - 0x80], cl
mov r13d, r14d
test r15d, r15d
jne 0x1400a1f70
nop dword [rax]
mov dword [rsp + 0x68], 0x104
cmp dword [rbp - 0x70], 0x104
jge 0x1400a17a6
cmp rcx, 0x104
jb 0x1400a174c
mov qword [rbp - 0x70], 0x104
lea rax, [rbp - 0x80]
cmp rdx, 0x10
cmovae rax, qword [rbp - 0x80]
mov byte [rax + 0x104], 0
jmp 0x1400a179e
mov esi, 0x104
sub rsi, rcx
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x1400a178a
mov qword [rbp - 0x70], 0x104
lea rbx, [rbp - 0x80]
cmp rdx, 0x10
cmovae rbx, qword [rbp - 0x80]
add rbx, rcx
mov r8, rsi
xor edx, edx
mov rcx, rbx
call fcn.140063480
mov byte [rbx + rsi], 0
jmp 0x1400a179e
mov byte [rsp + 0x20], 0
mov r9, rsi
mov rdx, rsi
lea rcx, [rbp - 0x80]
call fcn.14001cb10
mov rdx, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x70]
lea rbx, [rbp - 0x80]
cmp rdx, 0x10
cmovae rbx, qword [rbp - 0x80]
mov r15, qword [rsp + 0x50]
mov r14d, 1
call fcn.1400a38f0
mov rsi, rax
test rax, rax
je 0x1400a1845
mov dword [rbp + 0x131], 0x6e456765
mov word [rbp + 0x13c], 0x41
mov dword [rbp + 0x137], 0x4579654b
mov byte [rbp + 0x130], 0x52
mov word [rbp + 0x135], 0x6d75
mov byte [rbp + 0x13b], 0x78
lea rdx, [rbp + 0x130]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400a183d
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x68]
mov r8, rbx
mov edx, r13d
mov rcx, r15
call rax
mov r14d, eax
mov rcx, rsi
call fcn.140098790
inc r13d
mov dword [rsp + 0x4c], r13d
lea rcx, [rbp - 0x80]
mov r8, qword [rbp - 0x68]
cmp r8, 0x10
jb 0x1400a1868
mov rcx, qword [rbp - 0x80]
test rcx, rcx
jne 0x1400a1868
xor eax, eax
jmp 0x1400a1875
call fcn.140067b40
mov r8, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x80]
movsxd rdx, eax
mov r9, qword [rbp - 0x70]
cmp rdx, r9
ja 0x1400a1897
mov qword [rbp - 0x70], rdx
lea rax, [rbp - 0x80]
cmp r8, 0x10
cmovae rax, rcx
mov byte [rax + rdx], 0
jmp 0x1400a18e2
mov rsi, rdx
sub rsi, r9
mov rax, r8
sub rax, r9
cmp rsi, rax
ja 0x1400a18ce
mov qword [rbp - 0x70], rdx
lea rbx, [rbp - 0x80]
cmp r8, 0x10
cmovae rbx, rcx
add rbx, r9
mov r8, rsi
xor edx, edx
mov rcx, rbx
call fcn.140063480
mov byte [rbx + rsi], 0
jmp 0x1400a18e2
mov byte [rsp + 0x20], 0
mov r9, rsi
mov rdx, rsi
lea rcx, [rbp - 0x80]
call fcn.14001cb10
test r14d, r14d
jne 0x1400a1f69
xor r14d, r14d
mov ecx, r14d
mov rdx, qword [rbp - 0x10]
test edx, edx
cmovns ecx, edx
mov eax, dword [rbp - 0x70]
mov r8d, eax
cmp ecx, eax
cmovle r8d, ecx
test eax, eax
jns 0x1400a192d
mov qword [rbp - 0x60], r14
mov r8d, r14d
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], r8b
or edi, 2
mov dword [rsp + 0x40], edi
jmp 0x1400a1a09
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], r14b
movsxd r8, r8d
cmp qword [rbp - 0x70], r8
cmovb r8, qword [rbp - 0x70]
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae rdx, qword [rbp - 0x80]
lea rcx, [rbp - 0x40]
call fcn.14001adc0
or edi, 4
mov dword [rsp + 0x40], edi
mov qword [rbp - 0x60], r14
mov r8, r14
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], r8b
mov rcx, qword [rbp - 0x40]
mov rax, qword [rbp - 0x28]
cmp rax, 0x10
jb 0x1400a1999
lea rdx, [rbp - 0x60]
cmp rdx, rcx
je 0x1400a19c6
mov qword [rbp - 0x50], r14
mov byte [rbp - 0x60], 0
lea rdx, [rbp - 0x40]
cmp rax, 0x10
cmovae rdx, rcx
mov r8, qword [rbp - 0x30]
lea rcx, [rbp - 0x60]
call fcn.14001adc0
mov r8, qword [rbp - 0x50]
mov rax, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x40]
or edi, 2
mov dword [rsp + 0x40], edi
cmp rax, 0x10
jb 0x1400a1a05
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a19fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a2789
call fcn.14006126c
mov r8, qword [rbp - 0x50]
mov rdx, qword [rbp - 0x10]
lea rax, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rax, qword [rbp - 0x20]
lea r9, [rbp - 0x60]
mov rcx, qword [rbp - 0x60]
cmp qword [rbp - 0x48], 0x10
cmovae r9, rcx
cmp r8, rdx
jne 0x1400a1a44
mov rdx, rax
mov rcx, r9
call fcn.140063870
mov rcx, qword [rbp - 0x60]
test eax, eax
jne 0x1400a1a44
mov bl, 1
jmp 0x1400a1a46
xor bl, bl
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x1400a1a7d
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a1a78
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a278f
call fcn.14006126c
test bl, bl
jne 0x1400a1a8e
mov rdx, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x70]
jmp 0x1400a1710
mov dword [rsp + 0x48], 1
mov dword [rsp + 0x44], 0x104
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
lea rcx, str.oeuhakxhmagyrlopjaappf
call fcn.140067b40
mov r8, rax
lea rcx, [rbp]
call fcn.140008620
lea rbx, [0x1400baa40]
mov rcx, rbx
call fcn.140067b40
cmp eax, 2
jle 0x1400a1d0a
mov rcx, rbx
call fcn.140067b40
test al, 1
je 0x1400a1b45
mov rdx, rbx
lea rcx, [rbp - 0x40]
call fcn.14001cff0
or edi, 8
mov dword [rsp + 0x40], edi
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x1400a1b3c
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a1b37
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a27a1
call fcn.14006126c
mov qword [rbp - 0x50], r14
jmp 0x1400a1e11
cdq
sub eax, edx
sar eax, 1
mov rsi, r14
movsxd r14, eax
test eax, eax
jle 0x1400a1d07
movzx r15d, byte [rbp + 0x100]
lea r11, [rbp]
add r11, r15
movzx r13d, byte [rbp + 0x104]
movzx r12d, byte [rbp + 0x101]
nop word [rax + rax]
movzx eax, r13b
lea rcx, [rbp]
add rcx, rax
movzx edx, byte [rcx]
add r12b, byte [r11]
mov byte [rbp + 0x101], r12b
movzx eax, r12b
inc r15b
mov byte [rbp + 0x100], r15b
movzx eax, byte [rbp + rax]
mov byte [rcx], al
movzx eax, byte [rbp + 0x103]
movzx ecx, byte [rbp + 0x101]
movzx eax, byte [rbp + rax]
mov byte [rbp + rcx], al
movzx eax, byte [rbp + 0x100]
movzx ecx, byte [rbp + 0x103]
movzx eax, byte [rbp + rax]
mov byte [rbp + rcx], al
movzx eax, byte [rbp + 0x100]
mov byte [rbp + rax], dl
movzx ecx, byte [rbp + 0x102]
add cl, byte [rbp + rdx]
mov byte [rbp + 0x102], cl
movzx edx, cl
movzx r15d, byte [rbp + 0x100]
lea r11, [rbp]
add r11, r15
mov qword [rsp + 0x60], r11
movzx r9d, byte [r11]
movzx r12d, byte [rbp + 0x101]
movzx r8d, byte [rbp + r12]
movzx r13d, byte [rbx + rsi*2 + 1]
sub r13b, 0x80
movzx eax, byte [rbx + rsi*2]
shl al, 4
or r13b, al
movzx edx, byte [rbp + rdx]
movzx eax, byte [rbp + 0x104]
movzx ecx, byte [rbp + rax]
add rdx, rcx
movzx eax, byte [rbp + 0x103]
movzx ecx, byte [rbp + rax]
add rdx, rcx
movzx eax, dl
movzx ecx, byte [rbp + rax]
movzx r10d, r13b
xor r10b, byte [rbp + rcx]
mov byte [rbp + 0x104], r10b
lea rcx, [r9 + r8]
movzx eax, cl
xor r10b, byte [rbp + rax]
mov byte [rbp + 0x103], r10b
mov byte [rbp + 0x104], r13b
test rsi, rsi
je 0x1400a1cf4
mov rax, qword [rbp - 0x50]
mov rdx, qword [rbp - 0x48]
mov rcx, rdx
sub rcx, rax
cmp rcx, 1
jb 0x1400a1cd9
lea rcx, [rax + 1]
mov qword [rbp - 0x50], rcx
lea rbx, [rbp - 0x60]
cmp rdx, 0x10
cmovae rbx, qword [rbp - 0x60]
add rbx, rax
movsx edx, r10b
mov r8d, 1
mov rcx, rbx
call fcn.140063480
mov byte [rbx + 1], 0
lea rbx, [0x1400baa40]
jmp 0x1400a1cef
mov byte [rsp + 0x20], r10b
mov edx, 1
mov r9d, edx
lea rcx, [rbp - 0x60]
call fcn.14001cb10
mov r11, qword [rsp + 0x60]
inc rsi
cmp rsi, r14
jl 0x1400a1b80
mov r12, qword [rbp + 0x140]
xor r14d, r14d
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], r14
mov rsi, qword [rbp - 0x50]
lea r14, [rbp - 0x60]
cmp qword [rbp - 0x48], 0x10
cmovae r14, qword [rbp - 0x60]
cmp rsi, 0x10
jae 0x1400a1d4a
mov r8d, 0x10
mov rdx, r14
lea rcx, [rbp - 0x40]
call fcn.140062140
mov qword [rbp - 0x28], 0xf
jmp 0x1400a1dc3
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400a1d9e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400a279b
mov rcx, rax
call fcn.140061274
mov rcx, rax
test rax, rax
je 0x1400a2795
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400a1dac
test rcx, rcx
je 0x1400a1daa
call fcn.140061274
jmp 0x1400a1dac
xor eax, eax
mov qword [rbp - 0x40], rax
lea r8, [rsi + 1]
mov rdx, r14
mov rcx, rax
call fcn.140062140
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x30], rsi
or edi, 8
mov dword [rsp + 0x40], edi
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x1400a1e09
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a1e04
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a27a1
call fcn.14006126c
mov qword [rbp - 0x50], 0
mov byte [rbp - 0x60], 0
mov qword [rbp - 0x48], 0xf
mov edx, 0x104
mov rcx, r12
call fcn.14001ca60
mov r13, rax
lea rsi, [rbp - 0x40]
cmp qword [rbp - 0x28], 0x10
cmovae rsi, qword [rbp - 0x40]
lea r14, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae r14, qword [rbp - 0x80]
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x60], rax
mov r15d, 1
call fcn.1400a3820
mov rbx, rax
test rax, rax
je 0x1400a1eec
mov word [rbp + 0x113], 0x7465
mov word [rbp + 0x116], 0x6c61
mov word [rbp + 0x119], 0x4165
mov word [rbp + 0x111], 0x4748
mov byte [rbp + 0x11b], 0
mov byte [rbp + 0x115], 0x56
mov byte [rbp + 0x110], 0x53
mov byte [rbp + 0x118], 0x75
lea rdx, [rbp + 0x110]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400a1ee3
lea rcx, [rsp + 0x44]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x48]
mov r8, rsi
mov rdx, r14
mov rcx, qword [rsp + 0x60]
call rax
mov r15d, eax
mov rcx, rbx
call fcn.140098790
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x1400a1f27
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a1f22
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a27a7
call fcn.14006126c
mov rcx, r12
cmp qword [r12 + 0x18], 0x10
jb 0x1400a1f36
mov rcx, qword [r12]
test rcx, rcx
jne 0x1400a1f3f
xor eax, eax
jmp 0x1400a1f44
call fcn.140067b40
movsxd rdx, eax
xor r8d, r8d
mov rcx, r12
call fcn.14001cd30
test r15d, r15d
je 0x1400a1f69
mov rdx, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x70]
mov r13d, dword [rsp + 0x4c]
jmp 0x1400a1710
mov rdx, qword [rbp - 0x68]
xor r14d, r14d
cmp qword [r12 + 0x10], 0
jne 0x1400a1fc7
cmp rdx, 0x10
jb 0x1400a1faf
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a1faa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a27ad
call fcn.14006126c
mov rsi, qword [rsp + 0x58]
inc rsi
mov qword [rsp + 0x58], rsi
cmp rsi, 2
jge 0x1400a1ffe
jmp 0x1400a15e0
cmp rdx, 0x10
jb 0x1400a1ffe
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a1ff9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a27ad
call fcn.14006126c
mov rsi, r14
mov qword [rsp + 0x58], r14
nop word [rax + rax]
mov qword [rsp + 0x50], r14
lea rdx, [0x1400ba9d0]
lea rcx, [rbp - 0x40]
call fcn.14009c7c0
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x1400a2032
mov rbx, qword [rax]
mov r14d, dword [rsp + rsi*4 + 0x70]
or r14d, 0x20019
mov r15d, 1
call fcn.1400a38f0
mov rsi, rax
test rax, rax
je 0x1400a20db
mov word [rbp + 0x13a], 0x7845
mov word [rbp + 0x131], 0x6765
mov byte [rbp + 0x130], 0x52
mov word [rbp + 0x134], 0x6570
mov word [rbp + 0x137], 0x654b
mov byte [rbp + 0x133], 0x4f
mov byte [rbp + 0x136], 0x6e
mov byte [rbp + 0x139], 0x79
mov word [rbp + 0x13c], 0x41
lea rdx, [rbp + 0x130]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400a20d2
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x20], rcx
mov r9d, r14d
xor r8d, r8d
mov rdx, rbx
mov rcx, 0xffffffff80000001
call rax
mov r15d, eax
mov rcx, rsi
call fcn.140098790
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x1400a2116
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a2111
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a27b3
call fcn.14006126c
xor r14d, r14d
mov qword [rbp - 0x80], r14
mov ecx, r14d
mov qword [rbp - 0x70], rcx
mov edx, 0xf
mov qword [rbp - 0x68], rdx
mov byte [rbp - 0x80], cl
mov r13d, r14d
test r15d, r15d
jne 0x1400a261a
nop dword [rax]
mov dword [rsp + 0x4c], 0x104
cmp dword [rbp - 0x70], 0x104
jge 0x1400a21d6
cmp rcx, 0x104
jb 0x1400a217c
mov qword [rbp - 0x70], 0x104
lea rax, [rbp - 0x80]
cmp rdx, 0x10
cmovae rax, qword [rbp - 0x80]
mov byte [rax + 0x104], 0
jmp 0x1400a21ce
mov esi, 0x104
sub rsi, rcx
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x1400a21ba
mov qword [rbp - 0x70], 0x104
lea rbx, [rbp - 0x80]
cmp rdx, 0x10
cmovae rbx, qword [rbp - 0x80]
add rbx, rcx
mov r8, rsi
xor edx, edx
mov rcx, rbx
call fcn.140063480
mov byte [rsi + rbx], 0
jmp 0x1400a21ce
mov byte [rsp + 0x20], 0
mov r9, rsi
mov rdx, rsi
lea rcx, [rbp - 0x80]
call fcn.14001cb10
mov rdx, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x70]
lea rbx, [rbp - 0x80]
cmp rdx, 0x10
cmovae rbx, qword [rbp - 0x80]
mov r15, qword [rsp + 0x50]
mov r14d, 1
call fcn.1400a38f0
mov rsi, rax
test rax, rax
je 0x1400a22f5
mov dword [rbp + 0x121], 0x6e456765
mov word [rbp + 0x12c], 0x41
mov dword [rbp + 0x127], 0x4579654b
mov byte [rbp + 0x120], 0x52
mov word [rbp + 0x125], 0x6d75
mov byte [rbp + 0x12b], 0x78
lea rdx, [rbp + 0x120]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400a2271
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x4c]
mov r8, rbx
mov edx, r13d
mov rcx, r15
call rax
mov r14d, eax
mov dword [rbp + 0x110], 0x65657246
mov dword [rbp + 0x118], 0x797261
mov word [rbp + 0x115], 0x6269
mov byte [rbp + 0x114], 0x4c
mov byte [rbp + 0x117], 0x72
mov word [rbp + 0x141], 0x7265
mov dword [rbp + 0x149], 0x6c6c64
mov dword [rbp + 0x144], 0x32336c65
mov byte [rbp + 0x143], 0x6e
mov byte [rbp + 0x140], 0x4b
mov byte [rbp + 0x148], 0x2e
lea rcx, [rbp + 0x140]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rbp + 0x110]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400a22f5
mov rcx, rsi
call rax
inc r13d
lea rcx, [rbp - 0x80]
mov r8, qword [rbp - 0x68]
cmp r8, 0x10
jb 0x1400a2313
mov rcx, qword [rbp - 0x80]
test rcx, rcx
jne 0x1400a2313
xor eax, eax
jmp 0x1400a2320
call fcn.140067b40
mov r8, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x80]
movsxd rdx, eax
mov r9, qword [rbp - 0x70]
cmp rdx, r9
ja 0x1400a2342
mov qword [rbp - 0x70], rdx
lea rax, [rbp - 0x80]
cmp r8, 0x10
cmovae rax, rcx
mov byte [rax + rdx], 0
jmp 0x1400a238d
mov rsi, rdx
sub rsi, r9
mov rax, r8
sub rax, r9
cmp rsi, rax
ja 0x1400a2379
mov qword [rbp - 0x70], rdx
lea rbx, [rbp - 0x80]
cmp r8, 0x10
cmovae rbx, rcx
add rbx, r9
mov r8, rsi
xor edx, edx
mov rcx, rbx
call fcn.140063480
mov byte [rsi + rbx], 0
jmp 0x1400a238d
mov byte [rsp + 0x20], 0
mov r9, rsi
mov rdx, rsi
lea rcx, [rbp - 0x80]
call fcn.14001cb10
test r14d, r14d
jne 0x1400a2613
mov eax, dword [rbp - 0x10]
xor r14d, r14d
mov ecx, r14d
test eax, eax
cmovns ecx, eax
mov eax, dword [rbp - 0x70]
mov edx, eax
cmp ecx, eax
cmovle edx, ecx
test eax, eax
jns 0x1400a23d5
mov qword [rbp - 0x60], r14
mov r8d, r14d
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], r8b
or edi, 0x10
mov dword [rsp + 0x40], edi
jmp 0x1400a24ad
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], r14b
movsxd r8, edx
cmp qword [rbp - 0x70], r8
cmovb r8, qword [rbp - 0x70]
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae rdx, qword [rbp - 0x80]
lea rcx, [rbp - 0x40]
call fcn.14001adc0
or edi, 0x20
mov dword [rsp + 0x40], edi
mov qword [rbp - 0x60], r14
mov r8, r14
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], r8b
mov rcx, qword [rbp - 0x40]
mov rax, qword [rbp - 0x28]
cmp rax, 0x10
jb 0x1400a2441
lea rdx, [rbp - 0x60]
cmp rdx, rcx
je 0x1400a246e
mov qword [rbp - 0x50], r14
mov byte [rbp - 0x60], 0
lea rdx, [rbp - 0x40]
cmp rax, 0x10
cmovae rdx, rcx
mov r8, qword [rbp - 0x30]
lea rcx, [rbp - 0x60]
call fcn.14001adc0
mov r8, qword [rbp - 0x50]
mov rax, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x40]
or edi, 0x10
mov dword [rsp + 0x40], edi
cmp rax, 0x10
jb 0x1400a24ad
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a24a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a27b9
call fcn.14006126c
mov r8, qword [rbp - 0x50]
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rdx, qword [rbp - 0x20]
lea rax, [rbp - 0x60]
mov rcx, qword [rbp - 0x60]
cmp qword [rbp - 0x48], 0x10
cmovae rax, rcx
cmp r8, qword [rbp - 0x10]
jne 0x1400a24e6
mov rcx, rax
call fcn.140063870
mov rcx, qword [rbp - 0x60]
test eax, eax
jne 0x1400a24e6
mov bl, 1
jmp 0x1400a24e8
xor bl, bl
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x1400a251f
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a251a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a27bf
call fcn.14006126c
test bl, bl
jne 0x1400a2530
mov rdx, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x70]
jmp 0x1400a2140
mov dword [rsp + 0x44], 1
mov dword [rsp + 0x48], 0x104
lea rdx, [0x1400baa40]
lea rcx, [rbp - 0x40]
call fcn.14009c7c0
mov rbx, rax
mov edx, 0x104
mov rcx, r12
call fcn.14001ca60
cmp qword [rbx + 0x18], 0x10
jb 0x1400a256a
mov rbx, qword [rbx]
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae rdx, qword [rbp - 0x80]
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x44]
mov r8, rbx
mov rcx, qword [rsp + 0x50]
call fcn.140098ae0
mov ebx, eax
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x1400a25d6
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a25d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a27c5
call fcn.14006126c
mov rcx, r12
cmp qword [r12 + 0x18], 0x10
jb 0x1400a25e5
mov rcx, qword [r12]
test rcx, rcx
jne 0x1400a25ef
mov eax, r14d
jmp 0x1400a25f4
call fcn.140067b40
movsxd rdx, eax
xor r8d, r8d
mov rcx, r12
call fcn.14001cd30
test ebx, ebx
je 0x1400a2616
mov rdx, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x70]
jmp 0x1400a2140
xor r14d, r14d
mov rdx, qword [rbp - 0x68]
cmp qword [r12 + 0x10], 0
jne 0x1400a2671
cmp rdx, 0x10
jb 0x1400a2659
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a2654
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a27cb
call fcn.14006126c
mov rsi, qword [rsp + 0x58]
inc rsi
mov qword [rsp + 0x58], rsi
cmp rsi, 2
jge 0x1400a26a8
jmp 0x1400a2010
cmp rdx, 0x10
jb 0x1400a26a8
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a26a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a27cb
call fcn.14006126c
cmp qword [r12 + 0x10], 0
je 0x1400a2713
lea rdx, [0x1400baa70]
lea rcx, [rbp - 0x40]
call fcn.14009c7c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x1400a26cb
mov rax, qword [rax]
mov rdx, rax
mov rcx, r12
call fcn.14001c430
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x1400a2713
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a270d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a27d1
call fcn.14006126c
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1400a274a
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a2745
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a277d
call fcn.14006126c
mov rax, r12
mov rcx, qword [rbp + 0x150]
xor rcx, rsp
call fcn.140060fb0
lea r11, [rsp + 0x260]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140067948
nop
call fcn.140067948
nop
call fcn.140067948
int3
call fcn.140067948
nop
call fcn.140067948
int3
call fcn.14001ad60
nop
call fcn.140067948
int3
call fcn.140067948
nop
call fcn.140067948
int3
call fcn.140067948
nop
call fcn.140067948
int3
call fcn.140067948
int3
call fcn.140067948
nop
call fcn.140067948
int3
call fcn.140067948
int3