Function at 0x14019c0f8
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encode data using xor
Parse pe header

Disassembly:
mov qword [rsp + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10e0]
mov eax, 0x11e0
call fcn.14027bf80
sub rsp, rax
mov qword [rbp + 0x240], 0xfffffffffffffffe
mov qword [rsp + 0x1228], rbx
mov r15, r8
mov r13d, edx
mov rsi, rcx
mov byte [rcx + 0x409], 1
mov byte [rcx + 0x488], 1
mov dword [rcx + 0x40c], edx
mov byte [rcx + 0x3f8], 1
mov byte [rcx + 3], r9b
mov dword [rcx + 8], 2
xor edi, edi
mov byte [rcx + 0x48c], dil
mov qword [rbp + 0x120], rdi
mov qword [rbp + 0x130], rdi
mov qword [rbp + 0x138], 7
mov word [rbp + 0x120], di
neg r9b
sbb r12d, r12d
and r12d, 0xffffffd8
mov r14d, 4
or rbx, 0xffffffffffffffff
test edx, edx
je 0x14019c4f2
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp r13d, eax
je 0x14019c4f2
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [r14 + rcx]
cmp dword [0x1402d4c28], eax
jle 0x14019c4d2
lea rcx, [0x1402d4c28]
call fcn.14027b540
cmp dword [0x1402d4c28], ebx
jne 0x14019c4d2
lea rax, [rbp + 0x160]
mov qword [rbp + 0x20], rax
mov dword [rsp + 0x30], 0x51
mov eax, dword [rsp + 0x30]
xor al, 0x4f
mov byte [rsp + 0x34], al
mov eax, dword [rsp + 0x30]
inc al
xor al, 0x70
mov byte [rsp + 0x35], al
mov eax, dword [rsp + 0x30]
add al, 2
xor al, 0x65
mov byte [rsp + 0x36], al
mov eax, dword [rsp + 0x30]
add al, 3
xor al, 0x6e
mov byte [rsp + 0x37], al
mov eax, dword [rsp + 0x30]
add al, 4
xor al, 0x50
mov byte [rsp + 0x38], al
mov eax, dword [rsp + 0x30]
add al, 5
xor al, 0x72
mov byte [rsp + 0x39], al
mov eax, dword [rsp + 0x30]
add al, 6
xor al, 0x6f
mov byte [rsp + 0x3a], al
mov eax, dword [rsp + 0x30]
add al, 7
xor al, 0x63
mov byte [rsp + 0x3b], al
mov eax, dword [rsp + 0x30]
add al, 8
xor al, 0x65
mov byte [rsp + 0x3c], al
mov eax, dword [rsp + 0x30]
add al, 9
xor al, 0x73
mov byte [rsp + 0x3d], al
mov eax, dword [rsp + 0x30]
add al, 0xa
xor al, 0x73
mov byte [rsp + 0x3e], al
xor eax, eax
mov byte [rsp + 0x3f], al
mov al, byte [rsp + 0x34]
mov edx, edi
mov al, byte [rsp + rdx + 0x34]
mov ecx, dword [rsp + 0x30]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x34], cl
inc rdx
cmp rdx, 0xb
jb 0x14019c288
mov byte [rsp + 0x3f], dil
mov qword [rbp + 0x160], rdi
mov qword [rbp + 0x170], rdi
mov qword [rbp + 0x178], 0xf
lea rax, [rsp + 0x34]
mov r14, rbx
inc r14
cmp byte [rax + r14], dil
jne 0x14019c2c7
lea rcx, [rbp + 0x160]
cmp r14, 0xf
ja 0x14019c2fc
mov qword [rbp + 0x170], r14
mov r8, r14
lea rdx, [rsp + 0x34]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov byte [rbp + r14 + 0x160], dil
jmp 0x14019c30a
lea r9, [rsp + 0x34]
mov rdx, r14
call fcn.1400ada10
nop
mov dword [rsp + 0x6c], 0x5c
mov eax, dword [rsp + 0x6c]
xor al, 0x6b
mov byte [rsp + 0x70], al
mov eax, dword [rsp + 0x6c]
inc al
xor al, 0x65
mov byte [rsp + 0x71], al
mov eax, dword [rsp + 0x6c]
add al, 2
xor al, 0x72
mov byte [rsp + 0x72], al
mov eax, dword [rsp + 0x6c]
add al, 3
xor al, 0x6e
mov byte [rsp + 0x73], al
mov eax, dword [rsp + 0x6c]
add al, 4
xor al, 0x65
mov byte [rsp + 0x74], al
mov eax, dword [rsp + 0x6c]
add al, 5
xor al, 0x6c
mov byte [rsp + 0x75], al
mov eax, dword [rsp + 0x6c]
add al, 6
xor al, 0x33
mov byte [rsp + 0x76], al
mov eax, dword [rsp + 0x6c]
add al, 7
xor al, 0x32
mov byte [rsp + 0x77], al
xor eax, eax
mov byte [rsp + 0x78], al
mov al, byte [rsp + 0x70]
mov rdx, rdi
mov al, byte [rsp + rdx + 0x70]
mov ecx, dword [rsp + 0x6c]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x70], cl
inc rdx
cmp rdx, 8
jb 0x14019c37d
mov byte [rsp + 0x78], dil
mov qword [rbp + 0x80], rdi
mov qword [rbp + 0x90], rdi
mov qword [rbp + 0x98], 0xf
mov byte [rbp + 0x80], dil
lea rax, [rsp + 0x70]
mov r14, rbx
inc r14
cmp byte [rax + r14], dil
jne 0x14019c3c3
lea rcx, [rbp + 0x80]
cmp r14, 0xf
ja 0x14019c3f8
mov qword [rbp + 0x90], r14
mov r8, r14
lea rdx, [rsp + 0x70]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov byte [rbp + r14 + 0x80], dil
jmp 0x14019c406
lea r9, [rsp + 0x70]
mov rdx, r14
call fcn.1400ada10
nop
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x2b8]
call fcn.1401a82ac
nop
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp + 0x160]
mov rdx, rax
lea rcx, [0x1402d4150]
call fcn.140131338
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x14019c47d
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14019c478
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14019c478
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14027b384
mov qword [rbp + 0x90], rdi
mov qword [rbp + 0x98], 0xf
mov byte [rbp + 0x80], dil
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rsp + 0x70]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xc]
lea rcx, [rsp + 0x34]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x14028ee44]
call fcn.14027b36c
nop
lea rcx, [0x1402d4c28]
call fcn.14027b4e0
mov r9d, r13d
lea edx, [r12 + 0x438]
lea rcx, [0x1402d4150]
call fcn.1401319b4
mov qword [rsi + 0x400], rax
jmp 0x14019c51c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsi + 0x400], rax
mov byte [rsi + 0x48a], 1
cmp qword [r15 + 0x10], rdi
je 0x14019c515
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r13d, eax
mov byte [rsi + 0x489], dil
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rsi + 0x400], rdi
jne 0x14019c53c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, 0xb32
jmp 0x14019db77
mov r14, rdi
mov qword [rbp + 0x20], rdi
test r13d, r13d
je 0x14019c8e0
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1402d40bc], eax
jle 0x14019c8bf
lea rcx, [0x1402d40bc]
call fcn.14027b540
cmp dword [0x1402d40bc], ebx
jne 0x14019c8bf
lea rax, [rbp + 0x180]
mov qword [rbp + 0x50], rax
mov dword [rsp + 0x40], 0x23
mov eax, dword [rsp + 0x40]
xor al, 0x43
mov byte [rsp + 0x44], al
mov eax, dword [rsp + 0x40]
inc al
xor al, 0x72
mov byte [rsp + 0x45], al
mov eax, dword [rsp + 0x40]
add al, 2
mov dl, 0x65
xor al, dl
mov byte [rsp + 0x46], al
mov eax, dword [rsp + 0x40]
add al, 3
xor al, 0x61
mov byte [rsp + 0x47], al
mov eax, dword [rsp + 0x40]
add al, 4
xor al, 0x74
mov byte [rsp + 0x48], al
mov eax, dword [rsp + 0x40]
add al, 5
xor al, dl
mov byte [rsp + 0x49], al
mov eax, dword [rsp + 0x40]
add al, 6
xor al, 0x54
mov byte [rsp + 0x4a], al
mov eax, dword [rsp + 0x40]
add al, 7
mov cl, 0x6f
xor al, cl
mov byte [rsp + 0x4b], al
mov eax, dword [rsp + 0x40]
add al, 8
xor al, cl
mov byte [rsp + 0x4c], al
mov eax, dword [rsp + 0x40]
add al, 9
xor al, 0x6c
mov byte [rsp + 0x4d], al
mov eax, dword [rsp + 0x40]
add al, 0xa
xor al, 0x68
mov byte [rsp + 0x4e], al
mov eax, dword [rsp + 0x40]
add al, 0xb
xor al, dl
mov byte [rsp + 0x4f], al
mov eax, dword [rsp + 0x40]
add al, 0xc
xor al, 0x6c
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x40]
add al, 0xd
xor al, 0x70
mov byte [rsp + 0x51], al
mov eax, dword [rsp + 0x40]
add al, 0xe
xor al, 0x33
mov byte [rsp + 0x52], al
mov eax, dword [rsp + 0x40]
mov r12d, 0xf
add al, r12b
xor al, 0x32
mov byte [rsp + 0x53], al
mov eax, dword [rsp + 0x40]
add al, 0x10
xor al, 0x53
mov byte [rsp + 0x54], al
mov eax, dword [rsp + 0x40]
add al, 0x11
xor al, 0x6e
mov byte [rsp + 0x55], al
mov eax, dword [rsp + 0x40]
add al, 0x12
xor al, 0x61
mov byte [rsp + 0x56], al
mov eax, dword [rsp + 0x40]
add al, 0x13
xor al, 0x70
mov byte [rsp + 0x57], al
mov eax, dword [rsp + 0x40]
add al, 0x14
xor al, 0x73
mov byte [rsp + 0x58], al
mov eax, dword [rsp + 0x40]
add al, 0x15
xor al, 0x68
mov byte [rsp + 0x59], al
mov eax, dword [rsp + 0x40]
add al, 0x16
xor al, cl
mov byte [rsp + 0x5a], al
mov eax, dword [rsp + 0x40]
add al, 0x17
xor al, 0x74
mov byte [rsp + 0x5b], al
xor eax, eax
mov byte [rsp + 0x5c], al
mov al, byte [rsp + 0x44]
mov rdx, rdi
mov al, byte [rsp + rdx + 0x44]
mov ecx, dword [rsp + 0x40]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x44], cl
inc rdx
cmp rdx, 0x18
jb 0x14019c6cd
mov byte [rsp + 0x5c], dil
mov qword [rbp + 0x180], rdi
mov qword [rbp + 0x190], rdi
mov qword [rbp + 0x198], r12
lea rax, [rsp + 0x44]
mov r14, rbx
inc r14
cmp byte [rax + r14], dil
jne 0x14019c708
lea rcx, [rbp + 0x180]
cmp r14, r12
ja 0x14019c73c
mov qword [rbp + 0x190], r14
mov r8, r14
lea rdx, [rsp + 0x44]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov byte [rbp + r14 + 0x180], dil
jmp 0x14019c74a
lea r9, [rsp + 0x44]
mov rdx, r14
call fcn.1400ada10
nop
mov byte [rsp + 0x60], 0x75
mov byte [rsp + 0x61], 0x6f
mov byte [rsp + 0x62], 0x7c
mov byte [rsp + 0x63], 0x78
mov byte [rsp + 0x64], 0x6f
mov byte [rsp + 0x65], 0x76
mov byte [rsp + 0x66], 0x3d
mov byte [rsp + 0x67], 0x3c
mov byte [rsp + 0x68], dil
mov al, byte [rsp + 0x60]
mov rcx, rdi
mov al, byte [rsp + rcx + 0x60]
sub al, 0xa
mov byte [rsp + rcx + 0x60], al
inc rcx
cmp rcx, 8
jb 0x14019c77e
mov qword [rbp + 0xa0], rdi
mov qword [rbp + 0xb0], rdi
mov qword [rbp + 0xb8], r12
mov byte [rbp + 0xa0], dil
lea rax, [rsp + 0x60]
mov r14, rbx
inc r14
cmp byte [rax + r14], dil
jne 0x14019c7b5
lea rcx, [rbp + 0xa0]
cmp r14, r12
ja 0x14019c7e9
mov qword [rbp + 0xb0], r14
mov r8, r14
lea rdx, [rsp + 0x60]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov byte [rbp + r14 + 0xa0], dil
jmp 0x14019c7f7
lea r9, [rsp + 0x60]
mov rdx, r14
call fcn.1400ada10
nop
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x378]
call fcn.1401a82ac
nop
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp + 0x180]
mov rdx, rax
lea rcx, [0x1402d41e0]
call fcn.1400b9bb4
nop
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0x10
jb 0x14019c86e
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14019c869
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14019c869
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14027b384
mov qword [rbp + 0xb0], rdi
mov qword [rbp + 0xb8], r12
mov byte [rbp + 0xa0], dil
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rsp + 0x60]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x19]
lea rcx, [rsp + 0x44]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x14028ee38]
call fcn.14027b36c
nop
lea rcx, [0x1402d40bc]
call fcn.14027b4e0
mov r8d, r13d
mov edx, 8
lea rcx, [0x1402d41e0]
call fcn.1400ba230
mov r14, rax
mov qword [rbp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12b
je 0x14019c8f0
test r13d, r13d
jne 0x14019cfee
cmp qword [r15 + 0x10], rdi
jne 0x14019cfee
xorps xmm0, xmm0
movups xmmword [rbp + 0x268], xmm0
movups xmmword [rbp + 0x278], xmm0
movups xmmword [rbp + 0x288], xmm0
mov r14d, 0x400
mov r8d, r14d
xor edx, edx
lea rcx, [rbp + 0xce0]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x800]
call sub.VCRUNTIME140.dll_memset
mov r9d, 0x104
lea r8, [rbp + 0x800]
xor edx, edx
mov rcx, qword [rsi + 0x400]
call qword [sym.imp.KERNEL32.dll_K32GetModuleFileNameExW]
lea rdx, [rbp + 0x800]
lea rcx, [rbp + 0x2d8]
call fcn.1400ac71c
mov rdx, rax
lea rcx, [rbp + 0x120]
call fcn.1400bbecc
lea rcx, [rbp + 0x2d8]
call fcn.1400ac668
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
cmp qword [rsi + 0x400], rax
jne 0x14019c9c4
mov rbx, qword gs:[0x60]
test rbx, rbx
je 0x14019db82
mov rbx, qword [rbx + 0x10]
mov r8d, r14d
mov rdx, rbx
lea rcx, [rbp + 0xce0]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
jmp 0x14019cfc6
xor edx, edx
mov r8d, 0x2c8
lea rcx, [rbp + 0xa10]
call sub.VCRUNTIME140.dll_memset
mov r15d, 4
mov rax, qword gs:[0x58]
mov r12, qword [rax]
mov eax, dword [r15 + r12]
cmp dword [0x1402d40b8], eax
jle 0x14019cc83
lea rcx, [0x1402d40b8]
call fcn.14027b540
cmp dword [0x1402d40b8], ebx
jne 0x14019cc83
lea rax, [rbp + 0x1a0]
mov qword [rbp + 0x50], rax
mov byte [rbp - 0x2e], 0x57
mov byte [rbp - 0x2d], 0x7d
mov byte [rbp - 0x2c], 0x5a
mov byte [rbp - 0x2b], 0x7e
mov byte [rbp - 0x2a], 0x6e
mov byte [rbp - 0x29], 0x7b
mov byte [rbp - 0x28], 0x82
mov byte [rbp - 0x27], 0x52
mov byte [rbp - 0x26], 0x77
mov byte [rbp - 0x25], 0x6f
mov byte [rbp - 0x24], 0x78
mov byte [rbp - 0x23], 0x7b
mov byte [rbp - 0x22], 0x76
mov byte [rbp - 0x21], 0x6a
mov byte [rbp - 0x20], 0x7d
mov byte [rbp - 0x1f], 0x72
mov byte [rbp - 0x1e], 0x78
mov byte [rbp - 0x1d], 0x77
mov byte [rbp - 0x1c], 0x59
mov byte [rbp - 0x1b], 0x7b
mov byte [rbp - 0x1a], 0x78
mov byte [rbp - 0x19], 0x6c
mov byte [rbp - 0x18], 0x6e
mov byte [rbp - 0x17], 0x7c
mov byte [rbp - 0x16], 0x7c
mov byte [rbp - 0x15], dil
mov al, byte [rbp - 0x2e]
mov rcx, rdi
mov al, byte [rbp + rcx - 0x2e]
sub al, 9
mov byte [rbp + rcx - 0x2e], al
inc rcx
cmp rcx, 0x19
jb 0x14019ca8b
mov qword [rbp + 0x1a0], rdi
mov qword [rbp + 0x1b0], rdi
mov r13d, 0xf
mov qword [rbp + 0x1b8], r13
lea rax, [rbp - 0x2e]
mov r14, rbx
inc r14
cmp byte [rax + r14], dil
jne 0x14019cac0
lea rcx, [rbp + 0x1a0]
cmp r14, r13
ja 0x14019caf3
mov qword [rbp + 0x1b0], r14
mov r8, r14
lea rdx, [rbp - 0x2e]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov byte [rbp + r14 + 0x1a0], dil
jmp 0x14019cb00
lea r9, [rbp - 0x2e]
mov rdx, r14
call fcn.1400ada10
nop
mov byte [rbp + 0x1120], 0x7b
mov byte [rbp + 0x1121], 0x81
mov byte [rbp + 0x1122], 0x71
mov byte [rbp + 0x1123], 0x79
mov byte [rbp + 0x1124], 0x79
mov byte [rbp + 0x1125], dil
mov al, byte [rbp + 0x1120]
mov rcx, rdi
mov al, byte [rbp + rcx + 0x1120]
sub al, 0xd
mov byte [rbp + rcx + 0x1120], al
inc rcx
cmp rcx, 5
jb 0x14019cb33
mov qword [rbp + 0xc0], rdi
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], r13
mov byte [rbp + 0xc0], dil
lea rax, [rbp + 0x1120]
mov r14, rbx
inc r14
cmp byte [rax + r14], dil
jne 0x14019cb72
lea rcx, [rbp + 0xc0]
cmp r14, r13
ja 0x14019cba8
mov qword [rbp + 0xd0], r14
mov r8, r14
lea rdx, [rbp + 0x1120]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov byte [rbp + r14 + 0xc0], dil
jmp 0x14019cbb8
lea r9, [rbp + 0x1120]
mov rdx, r14
call fcn.1400ada10
nop
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x2f8]
call fcn.1401a82ac
nop
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp + 0x1a0]
mov rdx, rax
lea rcx, [0x1402d4540]
call fcn.14019f950
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0x10
jb 0x14019cc2f
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14019cc2a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14019cc2a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14027b384
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], r13
mov byte [rbp + 0xc0], dil
xor edx, edx
lea r8d, [rdx + 6]
lea rcx, [rbp + 0x1120]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x1a]
lea rcx, [rbp - 0x2e]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x14028ee2c]
call fcn.14027b36c
nop
lea rcx, [0x1402d40b8]
call fcn.14027b4e0
jmp 0x14019cc89
mov r13d, 0xf
mov eax, dword [r15 + r12]
cmp dword [0x1402d4658], eax
jle 0x14019cf25
lea rcx, [0x1402d4658]
call fcn.14027b540
cmp dword [0x1402d4658], ebx
jne 0x14019cf25
lea rax, [rbp + 0x1c0]
mov qword [rbp + 0x58], rax
mov byte [rbp - 0x40], 0x5d
mov byte [rbp - 0x3f], 0x70
mov byte [rbp - 0x3e], 0x6c
mov byte [rbp - 0x3d], 0x6f
mov byte [rbp - 0x3c], 0x5b
mov byte [rbp - 0x3b], 0x7d
mov byte [rbp - 0x3a], 0x7a
mov byte [rbp - 0x39], 0x6e
mov byte [rbp - 0x38], 0x70
mov byte [rbp - 0x37], 0x7e
mov byte [rbp - 0x36], 0x7e
mov byte [rbp - 0x35], 0x58
mov byte [rbp - 0x34], 0x70
mov byte [rbp - 0x33], 0x78
mov byte [rbp - 0x32], 0x7a
mov byte [rbp - 0x31], 0x7d
mov byte [rbp - 0x30], 0x84
mov byte [rbp - 0x2f], dil
mov al, byte [rbp - 0x40]
mov rcx, rdi
mov al, byte [rbp + rcx - 0x40]
sub al, 0xb
mov byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x11
jb 0x14019cd0a
mov qword [rbp + 0x1c0], rdi
mov qword [rbp + 0x1d0], rdi
mov qword [rbp + 0x1d8], r13
lea rax, [rbp - 0x40]
mov r14, rbx
inc r14
cmp byte [rax + r14], dil
jne 0x14019cd39
lea rcx, [rbp + 0x1c0]
cmp r14, r13
ja 0x14019cd6c
mov qword [rbp + 0x1d0], r14
mov r8, r14
lea rdx, [rbp - 0x40]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov byte [rbp + r14 + 0x1c0], dil
jmp 0x14019cd79
lea r9, [rbp - 0x40]
mov rdx, r14
call fcn.1400ada10
nop
mov dword [rsp + 0x7c], 0x35
mov eax, dword [rsp + 0x7c]
xor al, 0x6b
mov byte [rbp - 0x80], al
mov eax, dword [rsp + 0x7c]
inc al
xor al, 0x65
mov byte [rbp - 0x7f], al
mov eax, dword [rsp + 0x7c]
add al, 2
xor al, 0x72
mov byte [rbp - 0x7e], al
mov eax, dword [rsp + 0x7c]
add al, 3
xor al, 0x6e
mov byte [rbp - 0x7d], al
mov eax, dword [rsp + 0x7c]
add al, 4
xor al, 0x65
mov byte [rbp - 0x7c], al
mov eax, dword [rsp + 0x7c]
add al, 5
xor al, 0x6c
mov byte [rbp - 0x7b], al
mov eax, dword [rsp + 0x7c]
add al, 6
xor al, 0x33
mov byte [rbp - 0x7a], al
mov eax, dword [rsp + 0x7c]
add al, 7
xor al, 0x32
mov byte [rbp - 0x79], al
xor eax, eax
mov byte [rbp - 0x78], al
mov al, byte [rbp - 0x80]
mov rdx, rdi
mov al, byte [rbp + rdx - 0x80]
mov ecx, dword [rsp + 0x7c]
add cl, dl
xor cl, al
mov byte [rbp + rdx - 0x80], cl
inc rdx
cmp rdx, 8
jb 0x14019cde2
mov byte [rbp - 0x78], dil
mov qword [rbp + 0xe0], rdi
mov qword [rbp + 0xf0], rdi
mov qword [rbp + 0xf8], r13
mov byte [rbp + 0xe0], dil
lea rax, [rbp - 0x80]
inc rbx
cmp byte [rax + rbx], dil
jne 0x14019ce1f
lea rcx, [rbp + 0xe0]
cmp rbx, r13
ja 0x14019ce52
mov qword [rbp + 0xf0], rbx
mov r8, rbx
lea rdx, [rbp - 0x80]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov byte [rbp + rbx + 0xe0], dil
jmp 0x14019ce5f
lea r9, [rbp - 0x80]
mov rdx, rbx
call fcn.1400ada10
nop
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x318]
call fcn.1401a82ac
nop
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp + 0x1c0]
mov rdx, rax
lea rcx, [0x1402d4710]
call fcn.1401a1ae8
nop
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0x10
jb 0x14019ced6
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14019ced1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14019ced1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14027b384
mov qword [rbp + 0xf0], rdi
mov qword [rbp + 0xf8], r13
mov byte [rbp + 0xe0], dil
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rbp - 0x80]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0x12]
lea rcx, [rbp - 0x40]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x14028ee20]
call fcn.14027b36c
nop
lea rcx, [0x1402d4658]
call fcn.14027b4e0
lea rax, [rbp + 0x1138]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x268]
mov rdx, qword [rsi + 0x400]
lea rcx, [0x1402d4540]
call fcn.14019ffcc
lea rax, [rbp + 0x48]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x2c8
lea r9, [rbp + 0xa10]
mov r8, qword [rbp + 0x270]
mov rdx, qword [rsi + 0x400]
lea rcx, [0x1402d4710]
call fcn.1401a2164
test eax, eax
je 0x14019db82
mov rbx, qword [rbp + 0xa20]
lea rax, [rbp + 0x48]
mov qword [rsp + 0x28], rax
mov r14d, 0x400
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0xce0]
mov r8, rbx
mov rdx, qword [rsi + 0x400]
lea rcx, [0x1402d4710]
call fcn.1401a2164
test eax, eax
je 0x14019db82
movsxd rcx, dword [rbp + 0xd1c]
lea rax, [rcx + 0x108]
cmp rax, r14
ja 0x14019db82
mov r14d, dword [rbp + rcx + 0xd30]
mov byte [rsi + 4], 1
jmp 0x14019d9a3
lea rax, [r14 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14019db6b
mov r12d, 4
mov rax, qword gs:[0x58]
mov r13, qword [rax]
mov eax, dword [r12 + r13]
cmp dword [0x1402d4678], eax
jle 0x14019d285
lea rcx, [0x1402d4678]
call fcn.14027b540
cmp dword [0x1402d4678], ebx
jne 0x14019d285
lea rax, [rbp + 0x1e0]
mov qword [rbp + 0x58], rax
mov dword [rbp - 0x14], 0x3e
mov byte [rbp - 0x10], 0x73
mov byte [rbp - 0xf], 0x51
mov byte [rbp - 0xe], 0x5a
mov byte [rbp - 0xd], 0x4b
mov byte [rbp - 0xc], 0x52
mov byte [rbp - 0xb], 0x5b
mov byte [rbp - 0xa], 0xd
mov byte [rbp - 9], 0xc
mov byte [rbp - 8], 0x78
mov byte [rbp - 7], 0x57
mov byte [rbp - 6], 0x4c
mov byte [rbp - 5], 0x4d
mov byte [rbp - 4], 0x4a
mov byte [rbp - 3], 0x69
xor eax, eax
mov byte [rbp - 2], al
mov al, byte [rbp - 0x10]
mov rdx, rdi
mov al, byte [rbp + rdx - 0x10]
mov ecx, dword [rbp - 0x14]
xor cl, al
mov byte [rbp + rdx - 0x10], cl
inc rdx
cmp rdx, 0xe
jb 0x14019d08b
mov byte [rbp - 2], dil
mov qword [rbp + 0x1e0], rdi
mov qword [rbp + 0x1f0], rdi
mov qword [rbp + 0x1f8], 0xf
lea rax, [rbp - 0x10]
mov r14, rbx
inc r14
cmp byte [rax + r14], dil
jne 0x14019d0c5
lea rcx, [rbp + 0x1e0]
cmp r14, 0xf
ja 0x14019d0f9
mov qword [rbp + 0x1f0], r14
mov r8, r14
lea rdx, [rbp - 0x10]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov byte [rbp + r14 + 0x1e0], dil
jmp 0x14019d106
lea r9, [rbp - 0x10]
mov rdx, r14
call fcn.1400ada10
nop
mov dword [rbp], 0x26
mov byte [rbp + 4], 0x4d
mov byte [rbp + 5], 0x43
mov byte [rbp + 6], 0x54
mov byte [rbp + 7], 0x48
mov byte [rbp + 8], 0x43
mov byte [rbp + 9], 0x4a
mov byte [rbp + 0xa], 0x15
mov byte [rbp + 0xb], 0x14
xor eax, eax
mov byte [rbp + 0xc], al
mov al, byte [rbp + 4]
mov rdx, rdi
mov al, byte [rbp + rdx + 4]
mov ecx, dword [rbp]
xor cl, al
mov byte [rbp + rdx + 4], cl
inc rdx
cmp rdx, 8
jb 0x14019d138
mov byte [rbp + 0xc], dil
mov qword [rbp + 0x100], rdi
mov qword [rbp + 0x110], rdi
mov qword [rbp + 0x118], 0xf
mov byte [rbp + 0x100], dil
lea rax, [rbp + 4]
mov r14, rbx
inc r14
cmp byte [rax + r14], dil
jne 0x14019d179
lea rcx, [rbp + 0x100]
cmp r14, 0xf
ja 0x14019d1ad
mov qword [rbp + 0x110], r14
mov r8, r14
lea rdx, [rbp + 4]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov byte [rbp + r14 + 0x100], dil
jmp 0x14019d1ba
lea r9, [rbp + 4]
mov rdx, r14
call fcn.1400ada10
nop
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x338]
call fcn.1401a82ac
nop
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp + 0x1e0]
mov rdx, rax
lea rcx, [0x1402d4270]
call fcn.1401a005c
nop
mov rdx, qword [rbp + 0x118]
cmp rdx, 0x10
jb 0x14019d231
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14019d22c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14019d22c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14027b384
mov qword [rbp + 0x110], rdi
mov r14d, 0xf
mov qword [rbp + 0x118], r14
mov byte [rbp + 0x100], dil
xor edx, edx
lea r8d, [r14 - 6]
lea rcx, [rbp + 4]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
mov r8d, r14d
xor edx, edx
lea rcx, [rbp - 0x10]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x14028ee14]
call fcn.14027b36c
nop
lea rcx, [0x1402d4678]
call fcn.14027b4e0
mov eax, dword [r12 + r13]
cmp dword [0x1402d4674], eax
jle 0x14019d4b9
lea rcx, [0x1402d4674]
call fcn.14027b540
cmp dword [0x1402d4674], ebx
jne 0x14019d4b9
lea rax, [rbp + 0x200]
mov qword [rbp + 0x58], rax
mov byte [rbp - 0x74], 0x51
mov byte [rbp - 0x73], 0x73
mov byte [rbp - 0x72], 0x68
mov byte [rbp - 0x71], 0x79
mov byte [rbp - 0x70], 0x70
mov byte [rbp - 0x6f], 0x69
mov byte [rbp - 0x6e], 0x37
mov byte [rbp - 0x6d], 0x36
mov byte [rbp - 0x6c], 0x52
mov byte [rbp - 0x6b], 0x69
mov byte [rbp - 0x6a], 0x7c
mov byte [rbp - 0x69], 0x78
mov byte [rbp - 0x68], 0x5b
mov byte [rbp - 0x67], dil
mov al, byte [rbp - 0x74]
mov rcx, rdi
mov al, byte [rbp + rcx - 0x74]
sub al, 4
mov byte [rbp + rcx - 0x74], al
inc rcx
cmp rcx, 0xd
jb 0x14019d2f6
mov qword [rbp + 0x200], rdi
mov qword [rbp + 0x210], rdi
mov r12d, 0xf
mov qword [rbp + 0x218], r12
lea rax, [rbp - 0x74]
mov r14, rbx
inc r14
cmp byte [rax + r14], dil
jne 0x14019d32b
lea rcx, [rbp + 0x200]
cmp r14, r12
ja 0x14019d35e
mov qword [rbp + 0x210], r14
mov r8, r14
lea rdx, [rbp - 0x74]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov byte [rbp + r14 + 0x200], dil
jmp 0x14019d36b
lea r9, [rbp - 0x74]
mov rdx, r14
call fcn.1400ada10
nop
mov dword [rbp + 0x10], 0x45
mov byte [rbp + 0x14], 0x2e
mov byte [rbp + 0x15], 0x20
mov byte [rbp + 0x16], 0x37
mov byte [rbp + 0x17], 0x2b
mov byte [rbp + 0x18], 0x20
mov byte [rbp + 0x19], 0x29
mov byte [rbp + 0x1a], 0x76
mov byte [rbp + 0x1b], 0x77
xor eax, eax
mov byte [rbp + 0x1c], al
mov al, byte [rbp + 0x14]
mov rdx, rdi
mov al, byte [rbp + rdx + 0x14]
mov ecx, dword [rbp + 0x10]
xor cl, al
mov byte [rbp + rdx + 0x14], cl
inc rdx
cmp rdx, 8
jb 0x14019d39d
mov byte [rbp + 0x1c], dil
mov qword [rbp + 0x60], rdi
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], r12
mov byte [rbp + 0x60], dil
lea rax, [rbp + 0x14]
mov r14, rbx
inc r14
cmp byte [rax + r14], dil
jne 0x14019d3ce
lea rcx, [rbp + 0x60]
cmp r14, r12
ja 0x14019d3f8
mov qword [rbp + 0x70], r14
mov r8, r14
lea rdx, [rbp + 0x14]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov byte [rbp + r14 + 0x60], dil
jmp 0x14019d405
lea r9, [rbp + 0x14]
mov rdx, r14
call fcn.1400ada10
nop
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x358]
call fcn.1401a82ac
nop
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp + 0x200]
mov rdx, rax
lea rcx, [0x1402d4ba0]
call fcn.1401a005c
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x14019d473
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14019d46e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14019d46e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14027b384
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], r12
mov byte [rbp + 0x60], dil
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rbp + 0x14]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xe]
lea rcx, [rbp - 0x74]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x14028ee08]
call fcn.14027b36c
nop
lea rcx, [0x1402d4674]
call fcn.14027b4e0
mov r14d, 0x438
mov r8d, r14d
xor edx, edx
lea rcx, [rbp + 0x3c0]
call sub.VCRUNTIME140.dll_memset
mov r8d, r14d
xor edx, edx
lea rcx, [rbp + 0x3c0]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov dword [rbp + 0x3c0], r14d
lea r8, [rbp + 0x3c0]
mov r14, qword [rbp + 0x20]
mov rdx, r14
lea rcx, [0x1402d4270]
call fcn.1400b8cc8
test eax, eax
jne 0x14019d52b
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov dword [rsi + 0x440], ebx
jmp 0x14019db82
lea rdx, [rbp + 0x3f0]
lea rcx, [rbp + 0x28]
call fcn.1400ac71c
nop
lea rcx, [rbp + 0x28]
cmp qword [rbp + 0x40], 8
cmovae rcx, qword [rbp + 0x28]
mov rax, qword [rbp + 0x38]
lea r8, [rcx + rax*2]
lea rdx, [rbp + 0x28]
cmovae rdx, qword [rbp + 0x28]
lea rcx, [rbp - 0x60]
call fcn.1400af5d0
nop
mov r12, qword [r15 + 0x10]
mov r9, r15
cmp qword [r15 + 0x18], 0x10
jb 0x14019d576
mov r9, qword [r15]
lea rcx, [rbp - 0x60]
cmp qword [rbp - 0x48], 0x10
cmovae rcx, qword [rbp - 0x60]
mov qword [rsp + 0x20], r12
xor r8d, r8d
mov r14, qword [rbp - 0x50]
mov rdx, r14
call fcn.1400c5530
cmp rax, rbx
jne 0x14019d8e3
lea r9, [rbp - 0x60]
cmp qword [rbp - 0x48], 0x10
cmovae r9, qword [rbp - 0x60]
mov rcx, r15
cmp qword [r15 + 0x18], 0x10
jb 0x14019d5bc
mov rcx, qword [r15]
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, r12
call fcn.1400c5530
cmp rax, rbx
jne 0x14019d8e3
lea rdx, [rbp + 0x3f0]
lea rcx, [rbp + 0x248]
call fcn.1400ac71c
mov rdx, rax
lea rcx, [rbp + 0x28]
call fcn.1400bbecc
lea rcx, [rbp + 0x248]
call fcn.1400ac668
lea rcx, [rbp + 0x28]
cmp qword [rbp + 0x40], 8
cmovae rcx, qword [rbp + 0x28]
mov rax, qword [rbp + 0x38]
lea r8, [rcx + rax*2]
lea rdx, [rbp + 0x28]
cmovae rdx, qword [rbp + 0x28]
lea rcx, [rbp + 0x220]
call fcn.1400af5d0
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.1400bbff0
mov rdx, qword [rbp + 0x238]
cmp rdx, 0x10
jb 0x14019d67b
inc rdx
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14019d676
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14019d676
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14027b384
lea rcx, [rbp - 0x60]
mov r14, qword [rbp - 0x60]
mov r15, qword [rbp - 0x48]
cmp r15, 0x10
cmovae rcx, r14
lea rax, [rbp - 0x60]
cmovae rax, r14
mov r13, qword [rbp - 0x50]
add rax, r13
lea r12, [rbp - 0x60]
cmp r15, 0x10
cmovae r12, r14
cmp r12, rax
je 0x14019d6db
sub rcx, r12
mov r14, rcx
mov r15, rax
movzx ecx, byte [r12]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [r12 + r14], al
inc r12
cmp r12, r15
jne 0x14019d6b8
mov r14, qword [rbp - 0x60]
mov r13, qword [rbp - 0x50]
mov r15, qword [rbp - 0x48]
mov r12, qword [rbp + 0x1130]
mov rax, qword [r12 + 0x10]
mov r9, r12
cmp qword [r12 + 0x18], 0x10
jb 0x14019d6f6
mov r9, qword [r12]
lea rcx, [rbp - 0x60]
cmp r15, 0x10
cmovae rcx, r14
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r13
call fcn.1400c5530
cmp rax, rbx
jne 0x14019d8fc
lea r9, [rbp - 0x60]
cmp r15, 0x10
cmovae r9, r14
mov rcx, r12
cmp qword [r12 + 0x18], 0x10
jb 0x14019d736
mov rcx, qword [r12]
mov qword [rsp + 0x20], r13
xor r8d, r8d
mov rdx, qword [r12 + 0x10]
call fcn.1400c5530
cmp rax, rbx
jne 0x14019d8fc
lea r8, [rbp + 0x3c0]
mov rdx, qword [rbp + 0x20]
lea rcx, [0x1402d4ba0]
call fcn.1400b8cc8
test eax, eax
je 0x14019d873
lea rdx, [rbp + 0x3f0]
lea rcx, [rbp + 0x248]
call fcn.1400ac71c
mov rdx, rax
lea rcx, [rbp + 0x28]
call fcn.1400bbecc
lea rcx, [rbp + 0x248]
call fcn.1400ac668
lea rcx, [rbp + 0x28]
cmp qword [rbp + 0x40], 8
cmovae rcx, qword [rbp + 0x28]
mov rax, qword [rbp + 0x38]
lea r8, [rcx + rax*2]
lea rdx, [rbp + 0x28]
cmovae rdx, qword [rbp + 0x28]
lea rcx, [rbp + 0x220]
call fcn.1400af5d0
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.1400bbff0
mov rdx, qword [rbp + 0x238]
cmp rdx, 0x10
jb 0x14019d80f
inc rdx
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14019d80a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14019d86c
call fcn.14027b384
lea rcx, [rbp - 0x60]
mov r14, qword [rbp - 0x60]
mov r15, qword [rbp - 0x48]
cmp r15, 0x10
cmovae rcx, r14
lea rax, [rbp - 0x60]
cmovae rax, r14
mov r13, qword [rbp - 0x50]
add rax, r13
lea r12, [rbp - 0x60]
cmp r15, 0x10
cmovae r12, r14
cmp r12, rax
je 0x14019d6db
sub rcx, r12
mov r14, rcx
mov r15, rax
movzx ecx, byte [r12]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [r12 + r14], al
inc r12
cmp r12, r15
jne 0x14019d850
jmp 0x14019d6cf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov r8d, 0xbd4
mov rcx, rsi
call fcn.140196c24
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14019d8c5
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14019d8c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14019d97e
call fcn.14027b384
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], dil
lea rcx, [rbp + 0x28]
call fcn.1400ac668
jmp 0x14019db82
lea rcx, [rsi + 0x10]
lea rdx, [rbp - 0x60]
call fcn.1400bbf84
mov r15, qword [rbp - 0x48]
mov r13, qword [rbp - 0x50]
mov r14, qword [rbp - 0x60]
lea r8, [rbp - 0x60]
cmp r15, 0x10
cmovae r8, r14
add r8, r13
lea rdx, [rbp - 0x60]
cmp r15, 0x10
cmovae rdx, r14
lea rcx, [rbp + 0x398]
call fcn.1400c42a4
mov rdx, rax
lea rcx, [rbp + 0x120]
call fcn.1400bbecc
lea rcx, [rbp + 0x398]
call fcn.1400ac668
mov rbx, qword [rbp + 0x3d8]
mov r14d, dword [rbp + 0x3e0]
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14019d98a
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14019d985
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14019d985
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14027b384
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], dil
lea rcx, [rbp + 0x28]
call fcn.1400ac668
cmp qword [rbp + 0x130], rdi
je 0x14019db35
test rbx, rbx
je 0x14019db35
test r14, r14
je 0x14019db35
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x140]
call fcn.1400ac788
nop
lea rcx, [rsi + 0x410]
lea rdx, [rbp + 0x120]
call fcn.1401712a4
lea rcx, [rbp + 0x140]
cmp qword [rbp + 0x158], 8
cmovae rcx, qword [rbp + 0x140]
mov rax, qword [rbp + 0x150]
lea r8, [rcx + rax*2]
lea rdx, [rbp + 0x140]
cmovae rdx, qword [rbp + 0x140]
lea rcx, [rbp + 0x298]
call fcn.1400af5d0
lea rcx, [rsi + 0x10]
mov rdx, rax
call fcn.1400bbff0
mov rdx, qword [rbp + 0x2b0]
cmp rdx, 0x10
jb 0x14019da76
inc rdx
mov rcx, qword [rbp + 0x298]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14019da71
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14019da71
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14027b384
mov byte [rsi + 4], 1
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
cmp qword [rsi + 0x400], rax
je 0x14019db17
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rdx, [r14 + 1]
xor ecx, ecx
lea r9d, [rcx + 4]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsi + 0x3f0], rax
test rax, rax
jne 0x14019dac7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov r8d, 0xbf3
jmp 0x14019daf2
mov qword [rsi + 0x68], r14
mov qword [rsi + 0x478], rbx
mov r9, rbx
mov r8, r14
mov rdx, rax
mov rcx, rsi
call fcn.14019dbac
test al, al
jne 0x14019db07
mov edx, 0x80006
mov r8d, 0xbfb
mov rcx, rsi
call fcn.140196c24
nop
lea rcx, [rbp + 0x140]
jmp 0x14019d8d9
mov byte [rsi + 0x48c], dil
mov qword [rsi + 0x470], rdi
jmp 0x14019db29
mov qword [rsi + 0x3f0], rbx
mov qword [rsi + 0x68], r14
mov qword [rsi + 0x478], rbx
lea rcx, [rbp + 0x140]
call fcn.1400ac668
mov rax, qword [rbp + 0x20]
test rax, rax
je 0x14019db47
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, rsi
cmp qword [rsi + 0x3f0], rdi
jne 0x14019db61
mov r8d, 0xc0e
jmp 0x14019db7a
call fcn.140196fa0
mov dil, al
jmp 0x14019db82
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, 0xbb0
mov rcx, rsi
mov edx, eax
call fcn.140196c24
nop
lea rcx, [rbp + 0x120]
call fcn.1400ac668
mov al, dil
mov rbx, qword [rsp + 0x1228]
add rsp, 0x11e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret