Function at 0x140003a40
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
mov rbp, rsp
sub rsp, 0x40
mov byte [rbp - 0x20], 0
mov byte [rbp - 0x1f], 0x7b
mov byte [rbp - 0x1e], 0x6a
mov byte [rbp - 0x1d], 0x33
mov byte [rbp - 0x1c], 0x6a
mov byte [rbp - 0x1b], 0xf
mov byte [rbp - 0x1a], 0x6a
mov byte [rbp - 0x19], 0x72
mov byte [rbp - 0x18], 0x6a
mov byte [rbp - 0x17], 0x33
mov byte [rbp - 0x16], 0x6a
mov byte [rbp - 0x15], 0x64
mov byte [rbp - 0x14], 0x6a
mov byte [rbp - 0x13], 0x52
mov byte [rbp - 0x12], 0x6a
mov byte [rbp - 0x11], 0x4b
mov byte [rbp - 0x10], 0x6a
mov byte [rbp - 0xf], 0x2f
mov byte [rbp - 0xe], 0x6a
mov byte [rbp - 0xd], 0x2c
mov byte [rbp - 0xc], 0x6a
mov byte [rbp - 0xb], 0x64
mov byte [rbp - 0xa], 0x6a
mov byte [rbp - 9], 0x64
mov byte [rbp - 8], 0x6a
mov byte [rbp - 7], 0x6a
mov byte [rbp - 6], 0x6a
movzx eax, byte [rbp - 0x1f]
movzx eax, byte [rbp - 0x20]
test al, al
jne 0x140003b33
xor r8d, r8d
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rbp + r8 - 0x1f]
mov eax, 0x6a
sub eax, ecx
lea ecx, [rax + rax*8]
mov eax, 0x81020409
add ecx, ecx
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov eax, 0x81020409
add ecx, 0x7f
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov byte [rbp + r8 - 0x1f], cl
inc r8
cmp r8, 0x1a
jb 0x140003ae0
mov rax, qword gs:[0x60]
mov esi, 2
mov r8, qword [rax + 0x18]
mov eax, 0x55555556
mov dword [rbp + 0x10], 0x49f46e
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140003bb2
mov ecx, dword [rbp + 0x10]
add ecx, esi
add ecx, r8d
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x140003b80
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x140003c8e
nop dword [rax + rax]
mov eax, dword [rbp + 0x10]
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x140003ba9
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x140003b90
jmp 0x140003c8e
mov eax, dword [rbp + 0x10]
mov eax, dword [rbp + 0x10]
test dword [rbp + 0x10], 0x80000003
mov ecx, dword [rbp + 0x10]
je 0x140003c0f
add ecx, esi
lea eax, [r8 + 3]
imul ecx, eax
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
test al, 1
jne 0x140003c8e
nop dword [rax + rax]
mov ecx, dword [rbp + 0x10]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x10]
je 0x140003c01
dec eax
jmp 0x140003c03
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
test al, 1
je 0x140003be0
jmp 0x140003c8e
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x140003c8e
mov eax, dword [rbp + 0x10]
lea ecx, [r8 + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [rbp + 0x10], eax
mov eax, 0x55555556
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
jne 0x140003c8e
nop
mov ecx, dword [rbp + 0x10]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x10]
je 0x140003c71
inc eax
jmp 0x140003c73
dec eax
mov dword [rbp + 0x10], eax
mov eax, 0x55555556
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140003c50
mov rdi, qword [r8 + 0x18]
mov eax, 0x55555556
mov dword [rbp + 0x10], 0x49f46e
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140003d02
mov ecx, dword [rbp + 0x10]
add ecx, esi
add ecx, edi
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x140003ccc
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x140003dde
nop dword [rax]
nop dword [rax + rax]
mov eax, dword [rbp + 0x10]
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x140003cf9
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x140003ce0
jmp 0x140003dde
mov eax, dword [rbp + 0x10]
mov eax, dword [rbp + 0x10]
test dword [rbp + 0x10], 0x80000003
mov ecx, dword [rbp + 0x10]
je 0x140003d5f
add ecx, esi
lea eax, [rdi + 3]
imul ecx, eax
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
test al, 1
jne 0x140003dde
nop word [rax + rax]
mov ecx, dword [rbp + 0x10]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x10]
je 0x140003d51
dec eax
jmp 0x140003d53
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
test al, 1
je 0x140003d30
jmp 0x140003dde
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x140003dde
mov eax, dword [rbp + 0x10]
lea ecx, [rdi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [rbp + 0x10], eax
mov eax, 0x55555556
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
jne 0x140003dde
nop dword [rax]
mov ecx, dword [rbp + 0x10]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x10]
je 0x140003dc1
inc eax
jmp 0x140003dc3
dec eax
mov dword [rbp + 0x10], eax
mov eax, 0x55555556
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140003da0
mov r8, qword [rdi + 0x10]
mov eax, 0x55555556
mov dword [rbp + 0x10], 0x49f46e
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140003e52
mov ecx, dword [rbp + 0x10]
add ecx, esi
add ecx, r8d
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x140003e1d
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x140003f2e
nop word [rax + rax]
mov eax, dword [rbp + 0x10]
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x140003e49
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x140003e30
jmp 0x140003f2e
mov eax, dword [rbp + 0x10]
mov eax, dword [rbp + 0x10]
test dword [rbp + 0x10], 0x80000003
mov ecx, dword [rbp + 0x10]
je 0x140003eaf
add ecx, esi
lea eax, [r8 + 3]
imul ecx, eax
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
test al, 1
jne 0x140003f2e
nop dword [rax + rax]
mov ecx, dword [rbp + 0x10]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x10]
je 0x140003ea1
dec eax
jmp 0x140003ea3
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
test al, 1
je 0x140003e80
jmp 0x140003f2e
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x140003f2e
mov eax, dword [rbp + 0x10]
lea ecx, [r8 + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [rbp + 0x10], eax
mov eax, 0x55555556
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
jne 0x140003f2e
nop
mov ecx, dword [rbp + 0x10]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x10]
je 0x140003f11
inc eax
jmp 0x140003f13
dec eax
mov dword [rbp + 0x10], eax
mov eax, 0x55555556
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140003ef0
mov rbx, rdi
mov rbx, qword [rbx]
mov eax, 0x55555556
mov dword [rbp + 0x10], 0x49f46e
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140003fa2
mov ecx, dword [rbp + 0x10]
add ecx, esi
add ecx, ebx
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x140003f6e
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x14000407e
nop word [rax + rax]
mov eax, dword [rbp + 0x10]
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x140003f99
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x140003f80
jmp 0x14000407e
mov eax, dword [rbp + 0x10]
mov eax, dword [rbp + 0x10]
test dword [rbp + 0x10], 0x80000003
mov ecx, dword [rbp + 0x10]
je 0x140003fff
add ecx, esi
lea eax, [rbx + 3]
imul ecx, eax
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
test al, 1
jne 0x14000407e
nop word [rax + rax]
mov ecx, dword [rbp + 0x10]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x10]
je 0x140003ff1
dec eax
jmp 0x140003ff3
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
test al, 1
je 0x140003fd0
jmp 0x14000407e
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x14000407e
mov eax, dword [rbp + 0x10]
lea ecx, [rbx + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [rbp + 0x10], eax
mov eax, 0x55555556
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
jne 0x14000407e
nop dword [rax]
mov ecx, dword [rbp + 0x10]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x10]
je 0x140004061
inc eax
jmp 0x140004063
dec eax
mov dword [rbp + 0x10], eax
mov eax, 0x55555556
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140004040
mov r8, qword [rbx + 0x30]
test r8, r8
je 0x1400041dd
mov dword [rbp + 0x10], 0x49f46e
mov eax, 0x55555556
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x1400040f2
mov ecx, dword [rbp + 0x10]
add ecx, esi
add ecx, r8d
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x1400040c6
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x1400041ce
nop
mov eax, dword [rbp + 0x10]
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x1400040e9
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x1400040d0
jmp 0x1400041ce
mov eax, dword [rbp + 0x10]
mov eax, dword [rbp + 0x10]
test dword [rbp + 0x10], 0x80000003
mov ecx, dword [rbp + 0x10]
je 0x14000414f
add ecx, esi
lea eax, [r8 + 3]
imul ecx, eax
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
test al, 1
jne 0x1400041ce
nop dword [rax + rax]
mov ecx, dword [rbp + 0x10]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x10]
je 0x140004141
dec eax
jmp 0x140004143
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
test al, 1
je 0x140004120
jmp 0x1400041ce
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x1400041ce
mov eax, dword [rbp + 0x10]
lea ecx, [r8 + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [rbp + 0x10], eax
mov eax, 0x55555556
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
jne 0x1400041ce
nop
mov ecx, dword [rbp + 0x10]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x10]
je 0x1400041b1
inc eax
jmp 0x1400041b3
dec eax
mov dword [rbp + 0x10], eax
mov eax, 0x55555556
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140004190
mov rcx, rbx
call fcn.1400036a0
cmp eax, 0xb26771d8
je 0x1400041e6
cmp rdi, rbx
jne 0x140003f31
mov r9, qword [rbx + 0x30]
mov eax, 0x55555556
mov dword [rbp + 0x10], 0x49f46e
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140004252
mov ecx, dword [rbp + 0x10]
add ecx, esi
add ecx, r9d
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x140004225
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x140004332
nop dword [rax]
mov eax, dword [rbp + 0x10]
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x140004249
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x140004230
jmp 0x140004332
mov eax, dword [rbp + 0x10]
mov eax, dword [rbp + 0x10]
test dword [rbp + 0x10], 0x80000003
mov ecx, dword [rbp + 0x10]
je 0x1400042b2
add ecx, esi
lea eax, [r9 + 3]
imul ecx, eax
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
test al, 1
jne 0x140004332
nop dword [rax + rax]
mov ecx, dword [rbp + 0x10]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x10]
je 0x1400042a1
dec eax
jmp 0x1400042a3
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
test al, 1
je 0x140004280
jmp 0x140004332
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x140004332
mov eax, dword [rbp + 0x10]
lea ecx, [r9 + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [rbp + 0x10], eax
mov eax, 0x55555556
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
jne 0x140004332
mov ecx, dword [rbp + 0x10]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x10]
je 0x140004312
inc eax
jmp 0x140004314
dec eax
mov dword [rbp + 0x10], eax
mov eax, 0x55555556
mov r8d, dword [rbp + 0x10]
imul r8d
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*2]
cmp r8d, ecx
je 0x1400042f1
mov rbx, qword [rsp + 0x58]
mov rax, r9
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop rbp
ret