Function at 0x1401b1350
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x110]
sub rsp, 0x210
mov r15, r8
mov r12, rdx
mov r13, rcx
xor ebx, ebx
call fcn.140140f70
cmp dword [rax + 0x30], 0xa
jb 0x1401b1477
mov edx, 2
mov dword [rsp + 0x40], 0x640053
mov dword [rbp - 0x68], edx
mov ecx, ebx
mov dword [rsp + 0x44], 0x67006c
mov dword [rsp + 0x48], 0x6b006d
mov dword [rsp + 0x4c], 0x270061
mov dword [rsp + 0x50], 0x68006c
mov dword [rsp + 0x54], 0x6a007e
mov dword [rsp + 0x58], 0x6b002c
mov dword [rsp + 0x5c], 0x66006f
mov dword [rsp + 0x60], 0x74007c
mov dword [rsp + 0x64], 0x330076
mov dword [rsp + 0x68], 0x730075
mov dword [rsp + 0x6c], 0x720062
mov dword [rsp + 0x70], 0x39006a
mov dword [rsp + 0x74], 0x2b002b
mov dword [rsp + 0x78], 0x7c003c
mov dword [rsp + 0x7c], 0x6b006a
mov dword [rbp - 0x80], 0x4c0045
mov dword [rbp - 0x7c], 0x570052
mov dword [rbp - 0x78], 0x50057
mov dword [rbp - 0x74], 0x41000e
mov dword [rbp - 0x70], 0xc0008
mov dword [rbp - 0x6c], 0x2004e
nop word [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x40], cx
inc ecx
cmp ecx, 0x2d
jb 0x1401b1450
mov r8d, edx
mov word [rbp - 0x66], bx
lea rdx, [rsp + 0x40]
xor ecx, ecx
call fcn.1401a8110
call fcn.1401a9e40
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rax + r13], 0
jne 0x1401b1480
cmp eax, 3
jb 0x1401b272b
cmp eax, 0x19
ja 0x1401b26b4
mov rax, 0xffffffffffffffff
inc rax
cmp byte [r12 + rax], 0
jne 0x1401b14a3
cmp eax, 8
jb 0x1401b263e
cmp eax, 0x19
ja 0x1401b25c0
lea rdx, [rbp + 0x158]
mov qword [rbp + 0xe8], rbx
lea rcx, [rbp + 0x28]
mov byte [rbp + 0x158], 0
mov qword [rbp + 0x28], rbx
mov qword [rbp + 0x38], rbx
mov qword [rbp + 0x40], 0xf
call fcn.14013eec4
lea rdx, [rbp + 0x158]
mov byte [rbp + 0x158], 0
lea rcx, [rbp + 8]
mov qword [rbp + 8], rbx
mov qword [rbp + 0x18], rbx
mov qword [rbp + 0x20], 0xf
call fcn.14013eec4
lea rdx, [rbp + 0x158]
mov byte [rbp + 0x158], 0
lea rcx, [rbp - 0x18]
mov qword [rbp - 0x18], rbx
mov qword [rbp - 8], rbx
mov qword [rbp], 0xf
call fcn.14013eec4
lea rdx, [rbp + 0x158]
mov byte [rbp + 0x158], 0
lea rcx, [rbp - 0x38]
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x20], 0xf
call fcn.14013eec4
movzx eax, byte [0x1404c9774]
xor r14b, r14b
mov byte [rbp - 0x40], al
mov ecx, ebx
xor eax, eax
mov byte [rbp - 0x3f], al
nop word [rax + rax]
movsxd rax, ecx
xor byte [rbp + rax - 0x40], cl
inc ecx
cmp ecx, 1
jb 0x1401b1580
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x3f], r14b
lea rcx, [rbp + 0x48]
mov qword [rbp + 0x48], rbx
mov qword [rbp + 0x58], rbx
mov qword [rbp + 0x60], 0xf
call fcn.14013eec4
mov rax, 0xffffffffffffffff
inc rax
cmp byte [r15 + rax], r14b
jne 0x1401b15b6
test rax, rax
je 0x1401b15d0
mov rdx, r15
lea rcx, [rbp + 0x48]
call fcn.14013eec4
call fcn.140141104
mov rsi, rax
call fcn.140140f70
lea rbx, [rax + 0x2aa8]
cmp qword [rbx + 0x18], 0x10
jb 0x1401b15ee
mov rbx, qword [rbx]
cmp qword [rbp + 0x60], 0x10
lea rdi, [rbp + 0x48]
mov dword [rbp - 0x58], 0x263d7225
cmovae rdi, qword [rbp + 0x48]
xor edx, edx
mov ecx, edx
mov dword [rbp - 0x54], 0x74233a77
mov dword [rbp - 0x50], 0x792c37
nop word [rax + rax]
movsxd rax, ecx
xor byte [rbp + rax - 0x58], cl
inc ecx
cmp ecx, 0xb
jb 0x1401b1620
mov byte [rbp - 0x4d], dl
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x50], rdx
lea rdx, [rbp - 0x58]
mov qword [rsp + 0x58], 0xf
call fcn.14013eec4
mov qword [rsp + 0x30], rbx
lea r8, [rsp + 0x40]
mov qword [rsp + 0x28], rdi
lea rdx, [rbp + 0xf0]
mov r9, r13
mov qword [rsp + 0x20], r12
mov rcx, rsi
call fcn.1401a5020
mov rbx, rax
lea rax, [rbp - 0x38]
cmp rax, rbx
je 0x1401b16f0
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x1401b16bf
mov rcx, qword [rbp - 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b16ba
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b27c9
call fcn.1403cad84
mov qword [rbp - 0x20], 0xf
xor eax, eax
mov qword [rbp - 0x28], rax
mov byte [rbp - 0x38], al
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x38], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x28], xmm1
mov qword [rbx + 0x10], rax
mov byte [rbx], al
mov qword [rbx + 0x18], 0xf
nop dword [rax]
mov rdx, qword [rbp + 0x108]
cmp rdx, 0x10
jb 0x1401b1731
mov rcx, qword [rbp + 0xf0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b172c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b27c9
call fcn.1403cad84
xor ebx, ebx
mov qword [rbp + 0x108], 0xf
mov qword [rbp + 0x100], rbx
mov byte [rbp + 0xf0], bl
call fcn.140140ddc
cmp qword [rbp - 0x20], 0x10
lea rsi, [rbp - 0x38]
mov rdi, qword [rbp - 0x28]
cmovae rsi, qword [rbp - 0x38]
mov qword [rbp + 0xc8], rbx
mov qword [rbp + 0xd8], rbx
mov qword [rbp + 0xe0], rbx
cmp rdi, 0x10
jae 0x1401b1797
movups xmm0, xmmword [rsi]
mov qword [rbp + 0xe0], 0xf
movups xmmword [rbp + 0xc8], xmm0
jmp 0x1401b181a
movabs rax, 0x7fffffffffffffff
mov rbx, rdi
or rbx, 0xf
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1401b17eb
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1401b27d5
mov rcx, rax
call fcn.1403caaf4
mov rcx, rax
test rax, rax
je 0x1401b27cf
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1401b17fb
test rcx, rcx
je 0x1401b17f7
call fcn.1403caaf4
jmp 0x1401b17fb
xor edx, edx
mov eax, edx
lea r8, [rdi + 1]
mov qword [rbp + 0xc8], rax
mov rdx, rsi
mov rcx, rax
call fcn.1403cc5a0
mov qword [rbp + 0xe0], rbx
xor ebx, ebx
lea r8, [rbp + 0xe8]
mov qword [rbp + 0xd8], rdi
lea rdx, [rbp + 0x28]
lea rcx, [rbp + 0xc8]
call fcn.1401db4d0
test al, al
je 0x1401b23b1
cmp qword [rbp - 0x20], 0x10
lea rax, [rbp - 0x38]
mov qword [rbp - 0x28], rbx
lea rsi, [rbp + 0x28]
cmovae rax, qword [rbp - 0x38]
mov byte [rax], r14b
cmp qword [rbp + 0x40], 0x10
mov rdi, qword [rbp + 0x38]
cmovae rsi, qword [rbp + 0x28]
cmp rdi, 0x10
jae 0x1401b1887
movups xmm0, xmmword [rsi]
mov qword [rbp + 0xe0], 0xf
movups xmmword [rbp + 0xc8], xmm0
jmp 0x1401b190a
movabs rax, 0x7fffffffffffffff
mov rbx, rdi
or rbx, 0xf
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1401b18db
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1401b27db
mov rcx, rax
call fcn.1403caaf4
mov rcx, rax
test rax, rax
je 0x1401b27c3
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1401b18eb
test rcx, rcx
je 0x1401b18e7
call fcn.1403caaf4
jmp 0x1401b18eb
xor edx, edx
mov eax, edx
lea r8, [rdi + 1]
mov qword [rbp + 0xc8], rax
mov rdx, rsi
mov rcx, rax
call fcn.1403cc5a0
mov qword [rbp + 0xe0], rbx
xor ebx, ebx
lea r8, [rbp + 8]
mov qword [rbp + 0xd8], rdi
lea rdx, [rbp + 0xc8]
mov ecx, 2
call fcn.1401c7930
test al, al
je 0x1401b1ae8
call fcn.140140ddc
cmp qword [rbp + 0x20], 0x10
lea rdx, [rbp + 8]
mov rcx, qword [rbp + 0xe8]
lea r8, [rbp - 0x18]
cmovae rdx, qword [rbp + 8]
call fcn.1401dc500
test al, al
jne 0x1401b1d70
mov ecx, 0x64
call qword [sym.imp.kernel32.dll_Sleep]
call fcn.140140f70
inc dword [rax + 0x30]
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x1401b19a7
mov rcx, qword [rbp + 0x48]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b19a2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b27c3
call fcn.1403cad84
mov rdx, qword [rbp - 0x20]
mov qword [rbp + 0x58], rbx
mov qword [rbp + 0x60], 0xf
mov byte [rbp + 0x48], r14b
cmp rdx, 0x10
jb 0x1401b19f2
mov rcx, qword [rbp - 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b19ed
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b27c3
call fcn.1403cad84
mov rdx, qword [rbp]
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x20], 0xf
mov byte [rbp - 0x38], r14b
cmp rdx, 0x10
jb 0x1401b1a3d
mov rcx, qword [rbp - 0x18]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b1a38
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b27c3
call fcn.1403cad84
mov rdx, qword [rbp + 0x20]
mov qword [rbp - 8], rbx
mov qword [rbp], 0xf
mov byte [rbp - 0x18], r14b
cmp rdx, 0x10
jb 0x1401b1a88
mov rcx, qword [rbp + 8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b1a83
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b27c3
call fcn.1403cad84
mov rdx, qword [rbp + 0x40]
mov qword [rbp + 0x18], rbx
mov qword [rbp + 0x20], 0xf
mov byte [rbp + 8], r14b
cmp rdx, 0x10
jb 0x1401b1ad3
mov rcx, qword [rbp + 0x28]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b1ace
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b27c3
call fcn.1403cad84
mov qword [rbp + 0x38], rbx
mov qword [rbp + 0x40], 0xf
mov byte [rbp + 0x28], r14b
jmp 0x1401b1382
call fcn.140140f70
mov ebx, dword [rax + 0x28]
call fcn.140140f70
cmp dword [rax + 0x24], ebx
jbe 0x1401b1be4
mov ecx, dword [0x140548a38]
cmp ecx, 0x1c
je 0x1401b1b11
lea eax, [rcx - 7]
cmp eax, 1
ja 0x1401b1b76
movdqa xmm0, xmmword [0x1404d0550]
xor ebx, ebx
movdqa xmm1, xmmword [0x1404d0070]
mov ecx, ebx
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x60], 0x35b594f
movdqu xmmword [rsp + 0x50], xmm1
mov dword [rsp + 0x64], 0x51544057
mov dword [rsp + 0x68], 0x584f4a41
mov word [rsp + 0x6c], 2
movsxd rax, ecx
xor byte [rsp + rax + 0x40], cl
inc ecx
cmp ecx, 0x2d
jb 0x1401b1b50
lea rdx, [rsp + 0x40]
mov byte [rsp + 0x6d], bl
xor ecx, ecx
call fcn.1401a7f70
mov ecx, dword [0x140548a38]
jmp 0x1401b1b78
xor ebx, ebx
cmp ecx, 6
jne 0x1401b1bdf
movdqa xmm0, xmmword [0x1404d0590]
xor eax, eax
movdqa xmm1, xmmword [0x1404d01c0]
mov ecx, ebx
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x70], 0x1d5c465f
movdqa xmm0, xmmword [0x1404cf700]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x74], al
movdqu xmmword [rsp + 0x50], xmm1
nop word [rax + rax]
movsxd rax, ecx
xor byte [rsp + rax + 0x40], cl
inc ecx
cmp ecx, 0x34
jb 0x1401b1bc0
lea rdx, [rsp + 0x40]
mov byte [rsp + 0x74], r14b
xor ecx, ecx
call fcn.1401a7f70
call fcn.1401a9e40
mov ecx, 0x1388
call qword [sym.imp.kernel32.dll_Sleep]
call fcn.140140f70
inc dword [rax + 0x24]
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x1401b1c32
mov rcx, qword [rbp + 0x48]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b1c2d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b27c3
call fcn.1403cad84
mov rdx, qword [rbp - 0x20]
xor ebx, ebx
mov qword [rbp + 0x58], rbx
mov qword [rbp + 0x60], 0xf
mov byte [rbp + 0x48], bl
cmp rdx, 0x10
jb 0x1401b1c7e
mov rcx, qword [rbp - 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b1c79
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b27c3
call fcn.1403cad84
mov rdx, qword [rbp]
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x20], 0xf
mov byte [rbp - 0x38], bl
cmp rdx, 0x10
jb 0x1401b1cc8
mov rcx, qword [rbp - 0x18]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b1cc3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b27c3
call fcn.1403cad84
mov rdx, qword [rbp + 0x20]
mov qword [rbp - 8], rbx
mov qword [rbp], 0xf
mov byte [rbp - 0x18], bl
cmp rdx, 0x10
jb 0x1401b1d12
mov rcx, qword [rbp + 8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b1d0d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b27c3
call fcn.1403cad84
mov rdx, qword [rbp + 0x40]
mov qword [rbp + 0x18], rbx
mov qword [rbp + 0x20], 0xf
mov byte [rbp + 8], bl
cmp rdx, 0x10
jb 0x1401b1d5c
mov rcx, qword [rbp + 0x28]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b1d57
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b27c3
call fcn.1403cad84
mov qword [rbp + 0x38], rbx
mov qword [rbp + 0x40], 0xf
mov byte [rbp + 0x28], bl
jmp 0x1401b1382
call fcn.140140f70
movdqa xmm0, xmmword [0x1404cfa80]
mov ecx, ebx
movdqu xmmword [rbp - 0x58], xmm0
mov dword [rbp - 0x48], 0x777c71
mov dword [rax + 0x30], ebx
nop
movsxd rax, ecx
xor byte [rbp + rax - 0x58], cl
inc ecx
cmp ecx, 0x13
jb 0x1401b1d90
mov r10, qword [rbp]
lea rax, [rbp - 0x18]
mov r9, qword [rbp - 0x18]
lea r8, [rbp - 0x58]
cmp r10, 0x10
mov byte [rbp - 0x45], r14b
cmovae rax, r9
setae r11b
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1401b1dd4
inc rax
test ecx, ecx
jne 0x1401b1dc1
mov ecx, ebx
test edx, edx
jne 0x1401b1ed4
xor eax, eax
mov dword [rsp + 0x40], 0x690054
mov word [rbp - 0x5c], ax
mov dword [rsp + 0x44], 0x70006b
mov dword [rsp + 0x48], 0x700024
mov dword [rsp + 0x4c], 0x620075
mov dword [rsp + 0x50], 0x67007a
mov dword [rsp + 0x54], 0x66006b
mov dword [rsp + 0x58], 0x2d0069
mov dword [rsp + 0x5c], 0x7c0067
mov dword [rsp + 0x60], 0x630030
mov dword [rsp + 0x64], 0x600077
mov dword [rsp + 0x68], 0x670060
mov dword [rsp + 0x6c], 0x74007f
mov dword [rsp + 0x70], 0x7c006c
mov dword [rsp + 0x74], 0x37007e
mov dword [rsp + 0x78], 0x69003c
mov dword [rsp + 0x7c], 0x66006c
mov dword [rbp - 0x80], 0x400000
mov dword [rbp - 0x7c], 0x4c004c
mov dword [rbp - 0x78], 0x4d0050
mov dword [rbp - 0x74], 0x550043
mov dword [rbp - 0x70], 0x5c0008
mov dword [rbp - 0x6c], 0x4e0059
mov dword [rbp - 0x68], 0x43005e
mov dword [rbp - 0x64], 0x42004f
mov dword [rbp - 0x60], 0x1f0055
nop dword [rax]
nop word [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x40], cx
inc ecx
cmp ecx, 0x32
jb 0x1401b1eb0
lea rdx, [rsp + 0x40]
mov word [rbp - 0x5c], bx
xor ecx, ecx
call fcn.1401a8110
jmp 0x1401b2365
movdqa xmm0, xmmword [0x1404cfd30]
movdqu xmmword [rbp - 0x58], xmm0
mov dword [rbp - 0x48], 0x76666279
mov dword [rbp - 0x44], 0x727066
nop
movsxd rax, ecx
xor byte [rbp + rax - 0x58], cl
inc ecx
cmp ecx, 0x17
jb 0x1401b1ef0
test r11b, r11b
mov byte [rbp - 0x41], r14b
lea rax, [rbp - 0x18]
cmovne rax, r9
lea r8, [rbp - 0x58]
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1401b1f27
inc rax
test ecx, ecx
jne 0x1401b1f14
test edx, edx
jne 0x1401b1fd5
xor eax, eax
mov dword [rsp + 0x40], 0x720055
xor ebx, ebx
mov dword [rsp + 0x44], 0x710067
mov ecx, ebx
mov dword [rsp + 0x48], 0x64006a
mov dword [rsp + 0x4c], 0x62006b
mov dword [rsp + 0x50], 0x680028
mov dword [rsp + 0x54], 0x790066
mov dword [rsp + 0x58], 0x6c0069
mov dword [rsp + 0x5c], 0x76006a
mov dword [rsp + 0x60], 0x630030
mov dword [rsp + 0x64], 0x740077
mov dword [rsp + 0x68], 0x66007d
mov dword [rsp + 0x6c], 0x720062
mov dword [rsp + 0x70], 0x7c006a
mov dword [rsp + 0x74], 0x35007e
mov word [rsp + 0x78], ax
nop word [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x40], cx
inc ecx
cmp ecx, 0x1c
jb 0x1401b1fb0
lea rdx, [rsp + 0x40]
mov word [rsp + 0x78], bx
xor ecx, ecx
call fcn.1401a8110
jmp 0x1401b2365
movdqa xmm0, xmmword [0x1404ceee0]
mov ecx, ebx
movdqu xmmword [rbp - 0x58], xmm0
nop dword [rax]
nop dword [rax + rax]
movsxd rax, ecx
xor byte [rbp + rax - 0x58], cl
inc ecx
cmp ecx, 0xf
jb 0x1401b1ff0
test r11b, r11b
mov byte [rbp - 0x49], r14b
lea rax, [rbp - 0x18]
cmovne rax, r9
lea r8, [rbp - 0x58]
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1401b2027
inc rax
test ecx, ecx
jne 0x1401b2014
xor esi, esi
test edx, edx
jne 0x1401b20cd
mov dword [rsp + 0x40], 0x560048
mov ecx, esi
mov dword [rsp + 0x44], 0x4a0046
mov dword [rsp + 0x48], 0x250057
mov dword [rsp + 0x4c], 0x6b0067
mov dword [rsp + 0x50], 0x6c007a
mov dword [rsp + 0x54], 0x6f006b
mov dword [rsp + 0x58], 0x2d0075
mov dword [rsp + 0x5c], 0x6a007c
mov dword [rsp + 0x60], 0x780077
mov dword [rsp + 0x64], 0x670061
mov dword [rsp + 0x68], 0x670071
mov dword [rsp + 0x6c], 0x730073
mov dword [rsp + 0x70], 0x36
nop dword [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x40], cx
inc ecx
cmp ecx, 0x19
jb 0x1401b20a0
lea rdx, [rsp + 0x40]
mov word [rsp + 0x72], si
xor ecx, ecx
call fcn.1401a8110
call fcn.1401a9e40
mov r10, qword [rbp]
mov r9, qword [rbp - 0x18]
mov dword [rbp - 0x58], 0x60617473
mov ecx, esi
mov dword [rbp - 0x54], 0x58757661
mov dword [rbp - 0x50], 0x6d6c7a
nop dword [rax]
nop dword [rax + rax]
movsxd rax, ecx
xor byte [rbp + rax - 0x58], cl
inc ecx
cmp ecx, 0xb
jb 0x1401b20f0
cmp r10, 0x10
mov byte [rbp - 0x4d], r14b
lea rax, [rbp - 0x18]
cmovae rax, r9
lea r8, [rbp - 0x58]
setae r11b
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1401b2133
inc rax
test ecx, ecx
jne 0x1401b2120
test edx, edx
jne 0x1401b213f
mov r14b, 1
jmp 0x1401b2363
mov dword [rbp - 0x58], 0x6d6c6062
mov ecx, esi
mov dword [rbp - 0x54], 0x6f596161
mov dword [rbp - 0x50], 0x6e607f
nop word [rax + rax]
movsxd rax, ecx
xor byte [rbp + rax - 0x58], cl
inc ecx
cmp ecx, 0xb
jb 0x1401b2160
test r11b, r11b
mov byte [rbp - 0x4d], r14b
lea rax, [rbp - 0x18]
cmovne rax, r9
lea r8, [rbp - 0x58]
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1401b2197
inc rax
test ecx, ecx
jne 0x1401b2184
test edx, edx
jne 0x1401b2363
mov dword [rbp + 0x68], 0x6e0059
lea r13d, [rdx + 0x64]
mov dword [rbp + 0x6c], 0x710077
mov ecx, esi
mov dword [rbp + 0x70], 0x680024
mov dword [rbp + 0x74], 0x640067
mov dword [rbp + 0x78], 0x600060
mov dword [rbp + 0x7c], 0x6e0064
mov dword [rbp + 0x80], 0x64002c
mov dword [rbp + 0x84], 0x2f007d
mov dword [rbp + 0x88], 0x700072
mov dword [rbp + 0x8c], 0x7d007c
mov dword [rbp + 0x90], 0x710071
mov dword [rbp + 0x94], 0x370038
mov dword [rbp + 0x98], 0x7c004a
mov dword [rbp + 0x9c], 0x72007d
mov dword [rbp + 0xa0], 0x69006f
mov dword [rbp + 0xa4], 0x7e006c
mov dword [rbp + 0xa8], 0x480054
mov dword [rbp + 0xac], 0x4d004d
mov dword [rbp + 0xb0], 0x440004
mov dword [rbp + 0xb4], 0x480044
mov dword [rbp + 0xb8], 0x5d005a
mov dword [rbp + 0xbc], 0x4f004f
mov dword [rbp + 0xc0], 2
nop dword [rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x68], cx
inc ecx
cmp ecx, 0x2d
jb 0x1401b2280
lea rdx, [rbp + 0x68]
mov word [rbp + 0xc2], si
xor ecx, ecx
call fcn.1401a8450
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1401b2337
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1401b2337
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x36666b37
lea rcx, [r10 + r9*4]
mov ecx, dword [rcx + rbx]
add rcx, r10
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x1401b2332
nop dword [rax]
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x1401b2310
cmp r8d, 0xed67e13a
je 0x1401b233c
test r9d, r9d
jne 0x1401b22f0
mov rax, qword [rax]
jmp 0x1401b22c0
mov edx, dword [rdi + 0x24]
mov ecx, r13d
add rdx, r10
movzx r8d, word [rdx + r9*2]
mov edx, dword [rdi + 0x1c]
add rdx, r10
mov eax, dword [rdx + r8*4]
add rax, r10
call rax
call fcn.1401a9e40
call fcn.1401a9e40
xor ebx, ebx
call fcn.140140f70
mov dword [rax + 0x2c], ebx
lea rax, [rbp + 0x28]
cmp qword [rbp + 0x40], 0x10
mov qword [rbp + 0x38], rbx
cmovae rax, qword [rbp + 0x28]
mov byte [rax], 0
lea rax, [rbp + 8]
cmp qword [rbp + 0x20], 0x10
mov qword [rbp + 0x18], rbx
cmovae rax, qword [rbp + 8]
mov byte [rax], 0
lea rax, [rbp - 0x18]
cmp qword [rbp], 0x10
mov qword [rbp - 8], rbx
cmovae rax, qword [rbp - 0x18]
mov byte [rax], 0
jmp 0x1401b2450
xor eax, eax
mov dword [rsp + 0x40], 0x6f0045
xor ebx, ebx
mov dword [rsp + 0x44], 0x710061
mov ecx, ebx
mov dword [rsp + 0x48], 0x75007d
mov dword [rsp + 0x4c], 0x6e0072
mov dword [rsp + 0x50], 0x670067
mov dword [rsp + 0x54], 0x6a002a
mov dword [rsp + 0x58], 0x64007c
mov dword [rsp + 0x5c], 0x78002e
mov dword [rsp + 0x60], 0x620071
mov dword [rsp + 0x64], 0x750032
mov dword [rsp + 0x68], 0x7c0075
mov dword [rsp + 0x6c], 0x72007a
mov dword [rsp + 0x70], 0x37007c
mov word [rsp + 0x74], ax
nop dword [rax]
nop dword [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x40], cx
inc ecx
cmp ecx, 0x1a
jb 0x1401b2430
lea rdx, [rsp + 0x40]
mov word [rsp + 0x74], bx
xor ecx, ecx
call fcn.1401a8110
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x1401b248b
mov rcx, qword [rbp + 0x48]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b2486
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b27c3
call fcn.1403cad84
mov rdx, qword [rbp - 0x20]
mov qword [rbp + 0x58], rbx
mov qword [rbp + 0x60], 0xf
mov byte [rbp + 0x48], 0
cmp rdx, 0x10
jb 0x1401b24d6
mov rcx, qword [rbp - 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b24d1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b27c3
call fcn.1403cad84
mov rdx, qword [rbp]
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x20], 0xf
mov byte [rbp - 0x38], 0
cmp rdx, 0x10
jb 0x1401b2521
mov rcx, qword [rbp - 0x18]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b251c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b27c3
call fcn.1403cad84
mov rdx, qword [rbp + 0x20]
mov qword [rbp - 8], rbx
mov qword [rbp], 0xf
mov byte [rbp - 0x18], 0
cmp rdx, 0x10
jb 0x1401b256c
mov rcx, qword [rbp + 8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b2567
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b27c3
call fcn.1403cad84
mov rdx, qword [rbp + 0x40]
mov qword [rbp + 0x18], rbx
mov qword [rbp + 0x20], 0xf
mov byte [rbp + 8], 0
cmp rdx, 0x10
jb 0x1401b25b7
mov rcx, qword [rbp + 0x28]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b25b2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b27c3
call fcn.1403cad84
movzx eax, r14b
jmp 0x1401b27a2
xor eax, eax
mov dword [rsp + 0x40], 0x600050
xor edx, edx
mov dword [rsp + 0x44], 0x700071
mov ecx, edx
mov dword [rsp + 0x48], 0x6a0073
mov dword [rsp + 0x4c], 0x630074
mov dword [rsp + 0x50], 0x7d0028
mov dword [rsp + 0x54], 0x640065
mov dword [rsp + 0x58], 0x61002c
mov dword [rsp + 0x5c], 0x610061
mov dword [rsp + 0x60], 0x3f0077
mov word [rsp + 0x64], ax
nop dword [rax]
nop word [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x40], cx
inc ecx
cmp ecx, 0x12
jb 0x1401b2620
mov word [rsp + 0x64], dx
lea rdx, [rsp + 0x40]
jmp 0x1401b2799
xor edx, edx
mov dword [rsp + 0x40], 0x600050
mov ecx, edx
mov dword [rsp + 0x44], 0x700071
mov dword [rsp + 0x48], 0x6a0073
mov dword [rsp + 0x4c], 0x630074
mov dword [rsp + 0x50], 0x7d0028
mov dword [rsp + 0x54], 0x640065
mov dword [rsp + 0x58], 0x7e002c
mov dword [rsp + 0x5c], 0x600066
mov dword [rsp + 0x60], 0x650062
mov dword [rsp + 0x64], 0x3c
nop dword [rax]
nop word [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x40], cx
inc ecx
cmp ecx, 0x13
jb 0x1401b26a0
jmp 0x1401b278f
xor eax, eax
mov dword [rsp + 0x40], 0x720055
xor edx, edx
mov dword [rsp + 0x44], 0x710067
mov ecx, edx
mov dword [rsp + 0x48], 0x64006a
mov dword [rsp + 0x4c], 0x62006b
mov dword [rsp + 0x50], 0x7d0028
mov dword [rsp + 0x54], 0x640065
mov dword [rsp + 0x58], 0x61002c
mov dword [rsp + 0x5c], 0x610061
mov dword [rsp + 0x60], 0x3f0077
mov word [rsp + 0x64], ax
nop word [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x40], cx
inc ecx
cmp ecx, 0x12
jb 0x1401b2710
mov word [rsp + 0x64], dx
lea rdx, [rsp + 0x40]
jmp 0x1401b2799
xor edx, edx
mov dword [rsp + 0x40], 0x720055
mov ecx, edx
mov dword [rsp + 0x44], 0x710067
mov dword [rsp + 0x48], 0x64006a
mov dword [rsp + 0x4c], 0x62006b
mov dword [rsp + 0x50], 0x7d0028
mov dword [rsp + 0x54], 0x640065
mov dword [rsp + 0x58], 0x7e002c
mov dword [rsp + 0x5c], 0x600066
mov dword [rsp + 0x60], 0x650062
mov dword [rsp + 0x64], 0x3c
nop
movsxd rax, ecx
xor word [rsp + rax*2 + 0x40], cx
inc ecx
cmp ecx, 0x13
jb 0x1401b2780
mov word [rsp + 0x66], dx
lea rdx, [rsp + 0x40]
xor ecx, ecx
call fcn.1401a8110
xor al, al
lea r11, [rsp + 0x210]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1403d7020
int3
call fcn.1403d7020
int3
call fcn.1403d7020
int3
call fcn.1401391d8
int3
call fcn.1401391d8
int3