Function at 0x1401b4790
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x360]
sub rsp, 0x460
xor r13b, r13b
xor r14d, r14d
lea r15d, [r14 + 0xf]
nop dword [rax]
call fcn.140140f70
cmp dword [rax + 0x30], 0xa
jb 0x1401b48bb
mov dword [rsp + 0x40], 0x640053
mov ecx, r14d
mov dword [rsp + 0x44], 0x67006c
mov dword [rsp + 0x48], 0x6b006d
mov dword [rsp + 0x4c], 0x270061
mov dword [rsp + 0x50], 0x68006c
mov dword [rsp + 0x54], 0x6a007e
mov dword [rsp + 0x58], 0x6b002c
mov dword [rsp + 0x5c], 0x66006f
mov dword [rsp + 0x60], 0x74007c
mov dword [rsp + 0x64], 0x330076
mov dword [rsp + 0x68], 0x730075
mov dword [rsp + 0x6c], 0x720062
mov dword [rsp + 0x70], 0x39006a
mov dword [rsp + 0x74], 0x2b002b
mov dword [rsp + 0x78], 0x7c003c
mov dword [rsp + 0x7c], 0x6b006a
mov dword [rbp - 0x80], 0x4c0045
mov dword [rbp - 0x7c], 0x570052
mov dword [rbp - 0x78], 0x50057
mov dword [rbp - 0x74], 0x41000e
mov dword [rbp - 0x70], 0xc0008
mov dword [rbp - 0x6c], 0x2004e
mov dword [rbp - 0x68], 2
nop dword [rax]
nop word [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x40], cx
inc ecx
cmp ecx, 0x2d
jb 0x1401b4890
mov r8d, 4
mov word [rbp - 0x66], r14w
lea rdx, [rsp + 0x40]
xor ecx, ecx
call fcn.1401a8110
call fcn.1401a9e40
lea rdx, [rbp + 0x3a0]
mov qword [rbp + 0x3a8], r14
lea rcx, [rbp + 0x40]
mov byte [rbp + 0x3a0], r13b
mov qword [rbp + 0x40], r14
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x58], r15
call fcn.14013eec4
lea rdx, [rbp + 0x3a0]
mov byte [rbp + 0x3a0], r13b
lea rcx, [rbp + 0x20]
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], r15
call fcn.14013eec4
lea rdx, [rbp + 0x3a0]
mov byte [rbp + 0x3a0], r13b
lea rcx, [rbp - 0x20]
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], r15
call fcn.14013eec4
lea rdx, [rbp + 0x3a0]
mov byte [rbp + 0x3a0], r13b
lea rcx, [rbp]
mov qword [rbp], r14
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], r15
call fcn.14013eec4
call fcn.140141104
mov r15, rax
call fcn.140140f70
movzx r12d, byte [rax + 0x11]
call fcn.140140f70
lea rsi, [rax + 0x2aa8]
cmp qword [rsi + 0x18], 0x10
jb 0x1401b4976
mov rsi, qword [rsi]
call fcn.140140f70
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], r14
lea rdi, [rax + 0x42d0]
cmp qword [rdi + 0x18], 0x10
mov r14, qword [rdi + 0x10]
jb 0x1401b499c
mov rdi, qword [rdi]
cmp r14, 0x10
jae 0x1401b49b6
movups xmm0, xmmword [rdi]
mov edx, 0xf
mov ebx, edx
mov qword [rbp - 0x48], rdx
movups xmmword [rbp - 0x60], xmm0
jmp 0x1401b4a34
movabs rax, 0x7fffffffffffffff
mov rbx, r14
or rbx, 0xf
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1401b4a0a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1401b5d73
mov rcx, rax
call fcn.1403caaf4
mov rcx, rax
test rax, rax
je 0x1401b5d79
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1401b4a18
test rcx, rcx
je 0x1401b4a16
call fcn.1403caaf4
jmp 0x1401b4a18
xor eax, eax
lea r8, [r14 + 1]
mov qword [rbp - 0x60], rax
mov rdx, rdi
mov rcx, rax
call fcn.1403cc5a0
mov edx, 0xf
mov qword [rbp - 0x48], rbx
cmp rbx, 0x10
mov qword [rbp - 0x50], r14
lea rdi, [rbp - 0x60]
mov dword [rsp + 0x30], 0x263d7225
cmovae rdi, qword [rbp - 0x60]
xor eax, eax
xor r14d, r14d
mov dword [rsp + 0x34], 0x6e233a77
mov ecx, r14d
mov byte [rsp + 0x38], al
movsxd rax, ecx
xor byte [rsp + rax + 0x30], cl
inc ecx
cmp ecx, 8
jb 0x1401b4a61
mov qword [rsp + 0x58], rdx
lea rcx, [rsp + 0x40]
lea rdx, [rsp + 0x30]
mov byte [rsp + 0x38], r13b
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x50], r14
call fcn.14013eec4
mov r9, rdi
mov dword [rsp + 0x28], r12d
lea r8, [rsp + 0x40]
mov qword [rsp + 0x20], rsi
lea rdx, [rbp + 0x240]
mov rcx, r15
call fcn.1401a5020
mov rbx, rax
lea rax, [rbp]
cmp rax, rbx
je 0x1401b4b30
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x1401b4afa
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b4af5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b5d79
call fcn.1403cad84
mov qword [rbp + 0x10], r14
mov r15d, 0xf
mov qword [rbp + 0x18], r15
mov byte [rbp], r13b
movups xmm0, xmmword [rbx]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rbx + 0x10], r14
mov byte [rbx], r13b
mov qword [rbx + 0x18], r15
jmp 0x1401b4b36
mov r15d, 0xf
mov rdx, qword [rbp + 0x258]
cmp rdx, 0x10
jb 0x1401b4b77
mov rcx, qword [rbp + 0x240]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b4b72
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b5d79
call fcn.1403cad84
mov rdx, qword [rbp - 0x48]
mov qword [rbp + 0x250], r14
mov qword [rbp + 0x258], r15
mov byte [rbp + 0x240], r13b
cmp rdx, 0x10
jb 0x1401b4bc7
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b4bc2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b5d79
call fcn.1403cad84
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], r15
mov byte [rbp - 0x60], r13b
call fcn.140140ddc
cmp qword [rbp + 0x18], 0x10
lea rsi, [rbp]
mov rdi, qword [rbp + 0x10]
movabs r12, 0x7fffffffffffffff
cmovae rsi, qword [rbp]
mov qword [rbp + 0x60], r14
mov qword [rbp + 0x70], r14
mov qword [rbp + 0x78], r14
cmp rdi, 0x10
jae 0x1401b4c13
movups xmm0, xmmword [rsi]
mov qword [rbp + 0x78], r15
movups xmmword [rbp + 0x60], xmm0
jmp 0x1401b4c83
mov rbx, rdi
or rbx, 0xf
cmp rbx, r12
cmova rbx, r12
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1401b4c5d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1401b5d85
mov rcx, rax
call fcn.1403caaf4
mov rcx, rax
test rax, rax
je 0x1401b5d7f
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1401b4c6c
test rcx, rcx
je 0x1401b4c69
call fcn.1403caaf4
jmp 0x1401b4c6c
mov rax, r14
lea r8, [rdi + 1]
mov qword [rbp + 0x60], rax
mov rdx, rsi
mov rcx, rax
call fcn.1403cc5a0
mov qword [rbp + 0x78], rbx
lea r8, [rbp + 0x3a8]
mov qword [rbp + 0x70], rdi
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x60]
call fcn.1401db4d0
test al, al
je 0x1401b5ba2
cmp qword [rbp + 0x18], 0x10
lea rax, [rbp]
mov qword [rbp + 0x10], r14
lea rsi, [rbp + 0x40]
cmovae rax, qword [rbp]
mov byte [rax], r13b
cmp qword [rbp + 0x58], 0x10
mov rdi, qword [rbp + 0x50]
cmovae rsi, qword [rbp + 0x40]
cmp rdi, 0x10
jae 0x1401b4cdd
movups xmm0, xmmword [rsi]
mov qword [rbp + 0x78], r15
movups xmmword [rbp + 0x60], xmm0
jmp 0x1401b4d4d
mov rbx, rdi
or rbx, 0xf
cmp rbx, r12
cmova rbx, r12
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1401b4d27
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1401b5d8b
mov rcx, rax
call fcn.1403caaf4
mov rcx, rax
test rax, rax
je 0x1401b5d6d
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1401b4d36
test rcx, rcx
je 0x1401b4d33
call fcn.1403caaf4
jmp 0x1401b4d36
mov rax, r14
lea r8, [rdi + 1]
mov qword [rbp + 0x60], rax
mov rdx, rsi
mov rcx, rax
call fcn.1403cc5a0
mov qword [rbp + 0x78], rbx
lea r8, [rbp + 0x20]
mov qword [rbp + 0x70], rdi
lea rdx, [rbp + 0x60]
mov ecx, 4
call fcn.1401c7930
test al, al
je 0x1401b4edf
cmp qword [rbp + 0x18], 0x10
lea rax, [rbp]
mov qword [rbp + 0x10], r14
cmovae rax, qword [rbp]
mov byte [rax], r13b
call fcn.140140ddc
cmp qword [rbp + 0x38], 0x10
lea rdx, [rbp + 0x20]
mov rcx, qword [rbp + 0x3a8]
lea r8, [rbp - 0x20]
cmovae rdx, qword [rbp + 0x20]
call fcn.1401dc500
test al, al
jne 0x1401b4ffc
mov ecx, 0x64
call qword [sym.imp.kernel32.dll_Sleep]
call fcn.140140f70
inc dword [rax + 0x30]
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x1401b4df9
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b4df4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b5d6d
call fcn.1403cad84
mov rdx, qword [rbp - 8]
mov byte [rbp], r13b
mov qword [rbp + 0x18], r15
mov qword [rbp + 0x10], r14
cmp rdx, 0x10
jb 0x1401b4e40
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b4e3b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b5d6d
call fcn.1403cad84
mov rdx, qword [rbp + 0x38]
mov byte [rbp - 0x20], r13b
mov qword [rbp - 8], r15
mov qword [rbp - 0x10], r14
cmp rdx, 0x10
jb 0x1401b4e87
mov rcx, qword [rbp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b4e82
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b5d6d
call fcn.1403cad84
mov rdx, qword [rbp + 0x58]
mov byte [rbp + 0x20], r13b
mov qword [rbp + 0x38], r15
mov qword [rbp + 0x30], r14
cmp rdx, 0x10
jb 0x1401b4ece
mov rcx, qword [rbp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b4ec9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b5d6d
call fcn.1403cad84
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x58], r15
mov byte [rbp + 0x40], r13b
jmp 0x1401b47c0
call fcn.140140f70
mov ebx, dword [rax + 0x28]
call fcn.140140f70
cmp dword [rax + 0x24], ebx
jbe 0x1401b4fe4
mov ecx, dword [0x140548a38]
cmp ecx, 0x1c
je 0x1401b4f08
lea eax, [rcx - 7]
cmp eax, 1
ja 0x1401b4f75
movdqa xmm0, xmmword [0x1404d0550]
mov ecx, r14d
movdqa xmm1, xmmword [0x1404d0070]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x60], 0x35b594f
movdqu xmmword [rsp + 0x50], xmm1
mov dword [rsp + 0x64], 0x51544057
mov dword [rsp + 0x68], 0x584f4a41
mov word [rsp + 0x6c], 2
nop word [rax + rax]
movsxd rax, ecx
xor byte [rsp + rax + 0x40], cl
inc ecx
cmp ecx, 0x2d
jb 0x1401b4f50
lea rdx, [rsp + 0x40]
mov byte [rsp + 0x6d], r13b
xor ecx, ecx
call fcn.1401a7f70
mov ecx, dword [0x140548a38]
cmp ecx, 6
jne 0x1401b4fdf
movdqa xmm0, xmmword [0x1404d0590]
xor eax, eax
movdqa xmm1, xmmword [0x1404d01c0]
mov ecx, r14d
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x70], 0x1d5c465f
movdqa xmm0, xmmword [0x1404cf700]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x74], al
movdqu xmmword [rsp + 0x50], xmm1
nop word [rax + rax]
movsxd rax, ecx
xor byte [rsp + rax + 0x40], cl
inc ecx
cmp ecx, 0x34
jb 0x1401b4fc0
lea rdx, [rsp + 0x40]
mov byte [rsp + 0x74], r13b
xor ecx, ecx
call fcn.1401a7f70
call fcn.1401a9e40
mov ecx, 0x1388
call qword [sym.imp.kernel32.dll_Sleep]
call fcn.140140f70
inc dword [rax + 0x24]
jmp 0x1401b4dbe
call fcn.140140f70
mov dword [rbp - 0x34], 0x6f6e6877
mov ecx, r14d
mov dword [rbp - 0x30], 0x27636724
mov dword [rbp - 0x2c], 0x6564686a
mov dword [rax + 0x30], r14d
xor eax, eax
mov byte [rbp - 0x26], al
mov word [rbp - 0x28], 0x6969
nop dword [rax + rax]
movsxd rax, ecx
xor byte [rbp + rax - 0x34], cl
inc ecx
cmp ecx, 0xe
jb 0x1401b5030
cmp qword [rbp - 8], 0x10
lea rcx, [rbp - 0x20]
lea rdx, [rbp - 0x34]
mov byte [rbp - 0x26], r13b
cmovae rcx, qword [rbp - 0x20]
call fcn.1403cbcb0
mov ecx, 0xff
test rax, rax
je 0x1401b51d4
mov r8d, ecx
xor edx, edx
lea rcx, [rbp + 0x260]
call fcn.1403ccc50
movdqa xmm0, xmmword [0x1404cff30]
xor eax, eax
movdqu xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x48], al
mov ecx, r14d
mov dword [rbp - 0x50], 0x65777530
mov dword [rbp - 0x4c], 0x3773767d
nop dword [rax + rax]
movsxd rax, ecx
xor byte [rbp + rax - 0x60], cl
inc ecx
cmp ecx, 0x18
jb 0x1401b50a0
mov byte [rbp - 0x48], r13b
mov rcx, r14
nop word [rax + rax]
movzx eax, byte [rbp + rcx - 0x60]
mov byte [rbp + rcx + 0x260], al
lea rcx, [rcx + 1]
test al, al
jne 0x1401b50c0
cmp qword [rbp - 8], 0x10
lea r8, [rbp - 0x20]
lea rcx, [rbp + 0x260]
cmovae r8, qword [rbp - 0x20]
dec rcx
nop dword [rax]
cmp byte [rcx + 1], r13b
lea rcx, [rcx + 1]
jne 0x1401b50f0
xor edx, edx
nop dword [rax]
movzx eax, byte [r8 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x1401b5100
lea rdx, [rbp + 0x260]
xor ecx, ecx
call fcn.1401a8610
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1401b51a7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1401b51a7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xab323223
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1401b51a2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1401b5180
cmp r8d, 0xc5550e86
je 0x1401b51ac
test r9d, r9d
jne 0x1401b5160
mov rax, qword [rax]
jmp 0x1401b5130
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
mov ecx, 0x64
add rax, r10
call rax
call fcn.1401a9e40
call fcn.1401a9e40
mov dword [rsp + 0x30], 0x71677275
mov ecx, r14d
mov dword [rsp + 0x34], 0x6967675b
mov dword [rsp + 0x38], 0x6e6c66
nop
movsxd rax, ecx
xor byte [rsp + rax + 0x30], cl
inc ecx
cmp ecx, 0xb
jb 0x1401b51f0
mov r10, qword [rbp - 8]
lea rax, [rbp - 0x20]
mov r9, qword [rbp - 0x20]
lea r8, [rsp + 0x30]
cmp r10, 0x10
mov byte [rsp + 0x3b], r13b
cmovae rax, r9
sub r8, rax
nop
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1401b5233
inc rax
test ecx, ecx
jne 0x1401b5220
xor r12d, r12d
test edx, edx
jne 0x1401b5417
mov dword [rbp + 0x80], 0x690054
mov ecx, r12d
mov dword [rbp + 0x84], 0x770063
mov dword [rbp + 0x88], 0x640024
mov dword [rbp + 0x8c], 0x640065
mov dword [rbp + 0x90], 0x7c0067
mov dword [rbp + 0x94], 0x7f0064
mov dword [rbp + 0x98], 0x6c002c
mov dword [rbp + 0x9c], 0x6b0060
mov dword [rbp + 0xa0], 0x7c0030
mov dword [rbp + 0xa4], 0x700073
mov dword [rbp + 0xa8], 0x7c007c
mov dword [rbp + 0xac], 0x720078
mov dword [rbp + 0xb0], 0x700038
mov dword [rbp + 0xb4], 0x3b0069
mov dword [rbp + 0xb8], 0x7c007e
mov dword [rbp + 0xbc], 0x710070
mov dword [rbp + 0xc0], 0x450045
mov dword [rbp + 0xc4], 0x530002
mov dword [rbp + 0xc8], 0x570041
mov dword [rbp + 0xcc], 0x46004b
mov dword [rbp + 0xd0], 0x4c0046
mov dword [rbp + 0xd4], 0x5f0044
mov qword [rbp + 0xd8], 0x540040
nop dword [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0x80], cx
inc ecx
cmp ecx, 0x2f
jb 0x1401b5330
lea rdx, [rbp + 0x80]
mov word [rbp + 0xde], r12w
xor ecx, ecx
call fcn.1401a8450
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1401b53e7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1401b53e7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xe52c19a0
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1401b53e2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1401b53c0
cmp r8d, 0x473b7473
je 0x1401b53ec
test r9d, r9d
jne 0x1401b53a0
mov rax, qword [rax]
jmp 0x1401b5370
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
mov ecx, 0x64
add rax, r10
call rax
call fcn.1401a9e40
mov r10, qword [rbp - 8]
mov r9, qword [rbp - 0x20]
mov dword [rbp + 0x3a0], 0x676b7668
mov ecx, r12d
mov dword [rbp + 0x3a4], 0x6d6a5b
nop
movsxd rax, ecx
xor byte [rbp + rax + 0x3a0], cl
inc ecx
cmp ecx, 7
jb 0x1401b5430
cmp r10, 0x10
mov byte [rbp + 0x3a7], r13b
lea rax, [rbp - 0x20]
cmovae rax, r9
lea r8, [rbp + 0x3a0]
setae r11b
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1401b5475
inc rax
test ecx, ecx
jne 0x1401b5462
test edx, edx
jne 0x1401b5481
mov r13b, 1
jmp 0x1401b5b55
xor eax, eax
mov dword [rbp - 0x60], 0x676b7668
mov byte [rbp - 0x54], al
mov ecx, r12d
mov dword [rbp - 0x5c], 0x71686c5b
mov dword [rbp - 0x58], 0x6f636569
nop
movsxd rax, ecx
xor byte [rbp + rax - 0x60], cl
inc ecx
cmp ecx, 0xc
jb 0x1401b54a0
test r11b, r11b
mov byte [rbp - 0x54], r13b
lea rax, [rbp - 0x20]
cmovne rax, r9
lea r8, [rbp - 0x60]
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1401b54d7
inc rax
test ecx, ecx
jne 0x1401b54c4
test edx, edx
jne 0x1401b594c
mov dword [rbp + 0xe0], 0x60004d
mov r11d, 0xae
mov dword [rbp + 0xe4], 0x6b0061
mov dword [rbp + 0xe8], 0x6b006d
mov dword [rbp + 0xec], 0x270063
mov dword [rbp + 0xf0], 0x5e0040
mov dword [rbp + 0xf4], 0x4f0043
mov dword [rbp + 0xf8], 0x7a002c
mov dword [rbp + 0xfc], 0x7c006f
mov dword [rbp + 0x100], 0x720030
mov dword [rbp + 0x104], 0x72007a
mov dword [rbp + 0x108], 0x72007a
mov dword [rbp + 0x10c], 0x730073
mov dword [rbp + 0x110], 0x390036
mov dword [rbp + 0x114], 0x7d0053
mov dword [rbp + 0x118], 0x64003c
mov dword [rbp + 0x11c], 0x6a0071
mov dword [rbp + 0x120], 0x540000
mov dword [rbp + 0x124], 0x460051
mov dword [rbp + 0x128], 0x50040
mov dword [rbp + 0x12c], 0x490047
mov dword [rbp + 0x130], 0x90051
mov dword [rbp + 0x134], 0x7c0062
mov dword [rbp + 0x138], 0x690065
mov dword [rbp + 0x13c], 0x7c000e
mov dword [rbp + 0x140], 0x5e0040
mov dword [rbp + 0x144], 0x55005d
mov dword [rbp + 0x148], 0x470051
mov dword [rbp + 0x14c], 0x430016
mov dword [rbp + 0x150], 0x5c0050
mov dword [rbp + 0x154], 0x1b0054
mov dword [rbp + 0x158], 0x58004e
mov dword [rbp + 0x15c], 0x50005c
mov dword [rbp + 0x160], 0x35002f
mov dword [rbp + 0x164], 0x130062
mov dword [rbp + 0x168], 0x650007
mov dword [rbp + 0x16c], 0x290027
mov dword [rbp + 0x170], 0x69002c
mov dword [rbp + 0x174], 0x39003e
mov dword [rbp + 0x178], 0x6d0035
mov dword [rbp + 0x17c], 0x200022
mov dword [rbp + 0x180], 0x710037
mov dword [rbp + 0x184], 0x3d003b
mov dword [rbp + 0x188], 0x340074
mov dword [rbp + 0x18c], 0x360031
mov dword [rbp + 0x190], 0x370031
mov dword [rbp + 0x194], 0x7b0074
mov dword [rbp + 0x198], 0x3b0015
mov dword [rbp + 0x19c], 0x26007e
mov dword [rbp + 0x1a0], 0x14000f
mov dword [rbp + 0x1a4], 0x42
mov dword [rbp + 0x1a8], 0x4000c
mov dword [rbp + 0x1ac], 8
mov dword [rbp + 0x1b0], 0xd000d
mov dword [rbp + 0x1b4], 0x3b004a
mov dword [rbp + 0x1b8], 0x4d002f
mov dword [rbp + 0x1bc], 0x1d0001
mov dword [rbp + 0x1c0], 0x210050
mov dword [rbp + 0x1c4], 0x530031
mov dword [rbp + 0x1c8], 0x140004
mov dword [rbp + 0x1cc], 0x30004
mov dword [rbp + 0x1d0], 0x59000b
mov dword [rbp + 0x1d4], 0x13000e
mov dword [rbp + 0x1d8], 0x130019
mov dword [rbp + 0x1dc], 0x1c005e
mov dword [rbp + 0x1e0], 0xef00ef
mov dword [rbp + 0x1e4], 0xe200f6
mov dword [rbp + 0x1e8], 0xf100e7
mov dword [rbp + 0x1ec], 0xf400a6
mov dword [rbp + 0x1f0], 0xf900fd
mov dword [rbp + 0x1f4], 0xe400fa
mov dword [rbp + 0x1f8], 0xf900fe
mov dword [rbp + 0x1fc], 0xee00ae
mov dword [rbp + 0x200], 0xf500fe
mov dword [rbp + 0x204], 0xe000b2
mov dword [rbp + 0x208], 0xfb00f1
mov dword [rbp + 0x20c], 0xb700f2
mov dword [rbp + 0x210], 0xf100ec
mov dword [rbp + 0x214], 0xf600ff
mov dword [rbp + 0x218], 0xfc00bc
mov dword [rbp + 0x21c], 0xfc00fd
xor eax, eax
mov dword [rbp + 0x220], 0xd400cf
mov word [rbp + 0x23c], ax
mov ecx, r12d
mov dword [rbp + 0x224], 0xd700cc
mov dword [rbp + 0x228], 0xd00084
mov dword [rbp + 0x22c], 0xc200d5
mov dword [rbp + 0x230], 0xc700da
mov dword [rbp + 0x234], 0xc600cb
mov dword [rbp + 0x238], 0x8300c9
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 + 0xe0], cx
inc ecx
cmp ecx, r11d
jb 0x1401b5860
lea rdx, [rbp + 0xe0]
mov word [rbp + 0x23c], r12w
xor ecx, ecx
call fcn.1401a8450
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1401b5917
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1401b5917
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xe2dc4c9e
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1401b5912
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1401b58f0
cmp r8d, 0x33344a01
je 0x1401b591c
test r9d, r9d
jne 0x1401b58d0
mov rax, qword [rax]
jmp 0x1401b58a0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
mov ecx, 0x64
add rax, r10
call rax
call fcn.1401a9e40
call fcn.1401a9e40
mov r10, qword [rbp - 8]
mov r9, qword [rbp - 0x20]
mov dword [rbp - 0x40], 0x6d6c6062
mov ecx, r12d
mov dword [rbp - 0x3c], 0x6f596161
mov dword [rbp - 0x38], 0x6e607f
nop dword [rax]
nop dword [rax + rax]
movsxd rax, ecx
xor byte [rbp + rax - 0x40], cl
inc ecx
cmp ecx, 0xb
jb 0x1401b5970
cmp r10, 0x10
mov byte [rbp - 0x35], r13b
lea rax, [rbp - 0x20]
cmovae rax, r9
lea r8, [rbp - 0x40]
sub r8, rax
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1401b59b3
inc rax
test ecx, ecx
jne 0x1401b59a0
test edx, edx
jne 0x1401b5b55
mov dword [rsp + 0x40], 0x6e0059
mov ecx, r12d
mov dword [rsp + 0x44], 0x710077
mov dword [rsp + 0x48], 0x4d0024
mov dword [rsp + 0x4c], 0x4e0051
mov dword [rsp + 0x50], 0x29004c
mov dword [rsp + 0x54], 0x780063
mov dword [rsp + 0x58], 0x6f002c
mov dword [rsp + 0x5c], 0x6e0062
mov dword [rsp + 0x60], 0x7a0073
mov dword [rsp + 0x64], 0x7a007e
mov dword [rsp + 0x68], 0x610067
mov dword [rsp + 0x6c], 0x730073
mov dword [rsp + 0x70], 0x7f0038
mov dword [rsp + 0x74], 0x690075
mov dword [rsp + 0x78], 0x7c003c
mov dword [rsp + 0x7c], 0x6b006b
mov dword [rbp - 0x80], 0x4e0048
mov dword [rbp - 0x7c], 0x4a0050
mov dword [rbp - 0x78], 0x44005e
mov dword [rbp - 0x74], 0x4e0052
mov dword [rbp - 0x70], 0x470047
mov dword [rbp - 0x6c], 4
nop dword [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x40], cx
inc ecx
cmp ecx, 0x2b
jb 0x1401b5a70
lea rdx, [rsp + 0x40]
mov word [rbp - 0x6a], r12w
xor ecx, ecx
call fcn.1401a8450
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1401b5b27
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1401b5b27
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x9a0bdd0a
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x1401b5b22
nop
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x1401b5b00
cmp r8d, 0x4405a10d
je 0x1401b5b2c
test r9d, r9d
jne 0x1401b5ae0
mov rax, qword [rax]
jmp 0x1401b5ab0
mov edx, dword [rdi + 0x24]
mov ecx, 0x64
add rdx, r10
movzx r8d, word [rdx + r9*2]
mov edx, dword [rdi + 0x1c]
add rdx, r10
mov eax, dword [rdx + r8*4]
add rax, r10
call rax
call fcn.1401a9e40
call fcn.1401a9e40
call fcn.140140f70
mov dword [rax + 0x2c], r12d
lea rax, [rbp + 0x40]
cmp qword [rbp + 0x58], 0x10
mov qword [rbp + 0x50], r12
cmovae rax, qword [rbp + 0x40]
mov byte [rax], r14b
lea rax, [rbp + 0x20]
cmp qword [rbp + 0x38], 0x10
mov qword [rbp + 0x30], r12
cmovae rax, qword [rbp + 0x20]
mov byte [rax], r14b
lea rax, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
mov qword [rbp - 0x10], r12
cmovae rax, qword [rbp - 0x20]
mov byte [rax], r14b
jmp 0x1401b5c41
xor eax, eax
mov dword [rsp + 0x40], 0x6f0045
xor r12d, r12d
mov dword [rsp + 0x44], 0x710061
mov ecx, r12d
mov dword [rsp + 0x48], 0x75007d
mov dword [rsp + 0x4c], 0x6e0072
mov dword [rsp + 0x50], 0x670067
mov dword [rsp + 0x54], 0x6a002a
mov dword [rsp + 0x58], 0x64007c
mov dword [rsp + 0x5c], 0x78002e
mov dword [rsp + 0x60], 0x620071
mov dword [rsp + 0x64], 0x750032
mov dword [rsp + 0x68], 0x7c0075
mov dword [rsp + 0x6c], 0x72007a
mov dword [rsp + 0x70], 0x37007c
mov word [rsp + 0x74], ax
nop word [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x40], cx
inc ecx
cmp ecx, 0x1a
jb 0x1401b5c20
lea rdx, [rsp + 0x40]
mov word [rsp + 0x74], r12w
xor ecx, ecx
call fcn.1401a8110
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x1401b5c7c
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b5c77
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b5d6d
call fcn.1403cad84
mov rdx, qword [rbp - 8]
mov ebx, 0xf
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], rbx
mov byte [rbp], r14b
cmp rdx, 0x10
jb 0x1401b5cc8
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b5cc3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b5d6d
call fcn.1403cad84
mov rdx, qword [rbp + 0x38]
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], rbx
mov byte [rbp - 0x20], r14b
cmp rdx, 0x10
jb 0x1401b5d0b
mov rcx, qword [rbp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b5d06
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b5d6d
call fcn.1403cad84
mov rdx, qword [rbp + 0x58]
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], rbx
mov byte [rbp + 0x20], r14b
cmp rdx, 0x10
jb 0x1401b5d4e
mov rcx, qword [rbp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401b5d49
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401b5d6d
call fcn.1403cad84
mov rbx, qword [rsp + 0x4b0]
movzx eax, r13b
add rsp, 0x460
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1403d7020
int3
call fcn.1401391d8
int3
call fcn.1403d7020
int3
call fcn.1403d7020
int3
call fcn.1401391d8
int3
call fcn.1401391d8
int3