Function at 0x140004c50
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Get common file path
Get file attributes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xa0
mov r14, rdx
mov r12, rcx
movdqa xmm0, xmmword [0x14004f9d0]
movdqu xmmword [rbp - 0x29], xmm0
movdqa xmm1, xmmword [str.ler_by_emlinhax_n____ntoskrnl___ind_one_or_both___Kernel_driver_VKernelMode.sys__Home_to_unload.ind_your_driver._Info__Press_F1npath__s__typen_Info__Press_VKLsc_start__s_NULAsc_stop_tinkel__sc_stop_tinkel_l___restored_vaZ_Debug__Resumedl___driver_hand]
movdqu xmmword [rbp - 0x19], xmm1
mov byte [rbp - 9], 0
lea rcx, [rbp - 0x28]
call fcn.140001470
xor r13d, r13d
mov qword [rbp - 0x29], r13
mov qword [rbp - 0x19], r13
mov qword [rbp - 0x11], 0xf
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [r12 + r8], r13b
jne 0x140004cc0
mov rdx, r12
lea rcx, [rbp - 0x29]
call fcn.14000dba0
lea rcx, [rbp - 0x29]
cmp qword [rbp - 0x11], 0x10
cmovae rcx, qword [rbp - 0x29]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x140004cf6
test al, 0x10
jne 0x140004cf6
mov bl, 1
jmp 0x140004cf8
xor bl, bl
mov rdx, qword [rbp - 0x11]
cmp rdx, 0x10
jb 0x140004d33
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004d2e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400058ff
call fcn.140017dc8
test bl, bl
jne 0x140004da5
movdqa xmm0, xmmword [0x14004f980]
movdqu xmmword [rbp - 0x29], xmm0
movdqa xmm1, xmmword [0x14004f890]
movdqu xmmword [rbp - 0x19], xmm1
mov word [rbp - 9], 0xa
lea rcx, [rbp - 0x28]
call fcn.140001470
nop
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x140004d9b
inc rdx
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x140004d96
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400058f9
mov rcx, r8
call fcn.140017dc8
mov eax, 0xfffffffe
jmp 0x140005192
lea rsi, [0x14005a5f0]
nop dword [rax]
mov dword [rbp - 0x39], 0x2e5c5c5b
mov dword [rbp - 0x35], 0x6e69575c
mov word [rbp - 0x31], 0x6f49
mov byte [rbp - 0x2f], r13b
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 3]
lea rcx, [rbp - 0x38]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x140057cd0], rax
cmp rax, 0xffffffffffffffff
jne 0x140005089
mov rdx, rsi
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
mov dword [rbp + 7], 0x69575c31
mov dword [rbp + 0xb], 0x364f496e
mov dword [rbp + 0xf], 0x79732e34
mov word [rbp + 0x13], 0x73
lea rcx, [rsi - 1]
lea rcx, [rcx + 1]
cmp byte [rcx], r13b
jne 0x140004e31
lea r8, [rbp + 8]
xor edx, edx
movzx eax, byte [r8 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x140004e40
mov qword [rbp - 0x29], r13
mov qword [rbp - 0x19], r13
mov qword [rbp - 0x11], 0xf
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rsi + r8], r13b
jne 0x140004e67
mov rdx, rsi
lea rcx, [rbp - 0x29]
call fcn.14000dba0
lea rcx, [rbp - 0x29]
cmp qword [rbp - 0x11], 0x10
cmovae rcx, qword [rbp - 0x29]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x140004e9d
test al, 0x10
jne 0x140004e9d
mov bl, 1
jmp 0x140004e9f
xor bl, bl
mov rdx, qword [rbp - 0x11]
cmp rdx, 0x10
jb 0x140004eda
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004ed5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400058f3
call fcn.140017dc8
test bl, bl
je 0x140005023
movdqa xmm0, xmmword [0x14004f8e0]
movdqu xmmword [rbp - 0x29], xmm0
mov dword [rbp - 0x19], 0x6b6e6970
mov dword [rbp - 0x15], 0x2072656c
mov dword [rbp - 0x11], 0x4c554e3e
mov byte [rbp - 0xd], r13b
lea rcx, [rbp - 0x28]
call fcn.140021734
movdqa xmm0, xmmword [0x14004f940]
movdqu xmmword [rbp - 0x29], xmm0
mov dword [rbp - 0x19], 0x69705f6c
mov dword [rbp - 0x15], 0x656c6b6e
mov dword [rbp - 0x11], 0x4e3e2072
mov word [rbp - 0xd], 0x4c55
mov byte [rbp - 0xb], r13b
lea rcx, [rbp - 0x28]
call fcn.140021734
movdqa xmm0, xmmword [0x14004f820]
movdqu xmmword [rbp + 0x15], xmm0
lea rax, [rbp + 0x16]
mov rcx, 0xffffffffffffffff
nop
inc rcx
cmp byte [rax + rcx], r13b
jne 0x140004f60
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rsi + rax], r13b
jne 0x140004f70
add rax, 0x35
add rcx, rax
call fcn.1400236c8
mov rdi, rax
lea rax, [rbp + 0x16]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], r13b
jne 0x140004f93
add rcx, 0xe
call fcn.1400236c8
mov rbx, rax
movdqa xmm0, xmmword [0x14004f9a0]
movdqu xmmword [rbp - 0x29], xmm0
movdqa xmm1, xmmword [0x14004f8b0]
movdqu xmmword [rbp - 0x19], xmm1
mov dword [rbp - 9], 0x6e72656b
mov dword [rbp - 5], 0x4e3e6c65
mov word [rbp - 1], 0x4c55
mov byte [rbp + 1], r13b
mov r9, rsi
lea r8, [rbp + 0x16]
lea rdx, [rbp - 0x28]
mov rcx, rdi
call fcn.1400014c0
movdqa xmm0, xmmword [0x14004f8d0]
movdqu xmmword [rbp - 0x29], xmm0
mov byte [rbp - 0x19], r13b
lea r8, [rbp + 0x16]
lea rdx, [rbp - 0x28]
mov rcx, rbx
call fcn.1400014c0
mov rcx, rdi
call fcn.140021734
mov rcx, rbx
call fcn.140021734
jmp 0x140004db0
mov dword [rbp - 0x39], 0x7561705b
mov dword [rbp - 0x35], 0x4e3e6573
mov word [rbp - 0x31], 0x4c55
mov byte [rbp - 0x2f], r13b
lea rcx, [rbp - 0x38]
call fcn.140021734
nop
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x14000507f
inc rdx
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x14000507a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400058f9
mov rcx, r8
call fcn.140017dc8
mov eax, 0xfffffffd
jmp 0x140005192
movdqa xmm0, xmmword [0x14004f920]
movdqu xmmword [rbp - 0x29], xmm0
mov dword [rbp - 0x19], 0x203a656c
mov dword [rbp - 0x15], 0xa7025
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.140001470
movdqa xmm0, xmmword [0x14004fa10]
movdqu xmmword [rbp - 0x29], xmm0
mov dword [rbp - 0x19], 0x6e726b73
mov dword [rbp - 0x15], 0x2e2e2e6c
mov word [rbp - 0x11], 0xa
lea rcx, [rbp - 0x28]
call fcn.140001470
mov rsi, r13
movabs rdi, 0x200000000
nop word [rax + rax]
mov ecx, 2
call fcn.1400236c8
mov rbx, rax
mov r8d, 2
mov rdx, rax
mov rcx, rsi
call fcn.1400049b0
cmp byte [rbx], 0x4d
jne 0x14000511d
cmp byte [rbx + 1], 0x5a
je 0x1400051bd
mov rcx, rbx
call fcn.140022c18
add rsi, 0x100000
cmp rsi, rdi
jb 0x1400050f0
mov dword [rbp - 0x39], 0x75617076
mov dword [rbp - 0x35], 0x4e3e6573
mov word [rbp - 0x31], 0x4c55
mov byte [rbp - 0x2f], r13b
lea rcx, [rbp - 0x38]
call fcn.140021734
nop
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x14000518d
inc rdx
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x140005188
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400058f9
mov rcx, r8
call fcn.140017dc8
mov eax, 0xfffffffb
mov qword [r14 + 0x10], r13
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
mov rbx, qword [rsp + 0xe0]
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
movdqa xmm0, xmmword [0x14004f840]
movdqu xmmword [rbp - 0x29], xmm0
mov dword [rbp - 0x19], 0x70257830
mov word [rbp - 0x15], 0xa
mov rdx, rsi
lea rcx, [rbp - 0x28]
call fcn.140001470
test rsi, rsi
je 0x140005131
mov ecx, 0xbfffff
call fcn.1400236c8
mov rbx, rax
mov r8d, 0xbfffff
mov rdx, rax
mov rcx, rsi
call fcn.1400049b0
mov r15, r13
mov r10d, r13d
lea r11, [rbx + 2]
lea rdx, [0x140057cd9]
sub rdx, rbx
nop
mov cl, 1
mov r9d, r13d
mov rax, r11
test cl, cl
je 0x1400053b5
movzx r8d, byte [rdx + rax - 3]
test r8b, r8b
je 0x140005248
cmp byte [rax - 2], r8b
je 0x140005248
xor cl, cl
jmp 0x1400053b5
movzx r8d, byte [rdx + rax - 2]
test r8b, r8b
je 0x140005260
cmp byte [rax - 1], r8b
je 0x140005260
xor cl, cl
jmp 0x1400053b5
movzx r8d, byte [rdx + rax - 1]
test r8b, r8b
je 0x140005277
cmp byte [rax], r8b
je 0x140005277
xor cl, cl
jmp 0x1400053b5
movzx r8d, byte [rdx + rax]
test r8b, r8b
je 0x14000528e
cmp byte [rax + 1], r8b
je 0x14000528e
xor cl, cl
jmp 0x1400053b5
movzx r8d, byte [rdx + rax + 1]
test r8b, r8b
je 0x1400052a6
cmp byte [rax + 2], r8b
je 0x1400052a6
xor cl, cl
jmp 0x1400053b5
movzx r8d, byte [rdx + rax + 2]
test r8b, r8b
je 0x1400052be
cmp byte [rax + 3], r8b
je 0x1400052be
xor cl, cl
jmp 0x1400053b5
movzx r8d, byte [rdx + rax + 3]
test r8b, r8b
je 0x1400052d6
cmp byte [rax + 4], r8b
je 0x1400052d6
xor cl, cl
jmp 0x1400053b5
movzx r8d, byte [rdx + rax + 4]
test r8b, r8b
je 0x1400052ee
cmp byte [rax + 5], r8b
je 0x1400052ee
xor cl, cl
jmp 0x1400053b5
movzx r8d, byte [rdx + rax + 5]
test r8b, r8b
je 0x140005306
cmp byte [rax + 6], r8b
je 0x140005306
xor cl, cl
jmp 0x1400053b5
movzx r8d, byte [rdx + rax + 6]
test r8b, r8b
je 0x14000531e
cmp byte [rax + 7], r8b
je 0x14000531e
xor cl, cl
jmp 0x1400053b5
movzx r8d, byte [rdx + rax + 7]
test r8b, r8b
je 0x140005336
cmp byte [rax + 8], r8b
je 0x140005336
xor cl, cl
jmp 0x1400053b5
movzx r8d, byte [rdx + rax + 8]
test r8b, r8b
je 0x14000534b
cmp byte [rax + 9], r8b
je 0x14000534b
xor cl, cl
jmp 0x1400053b5
movzx r8d, byte [rdx + rax + 9]
test r8b, r8b
je 0x140005360
cmp byte [rax + 0xa], r8b
je 0x140005360
xor cl, cl
jmp 0x1400053b5
movzx r8d, byte [rdx + rax + 0xa]
test r8b, r8b
je 0x140005375
cmp byte [rax + 0xb], r8b
je 0x140005375
xor cl, cl
jmp 0x1400053b5
movzx r8d, byte [rdx + rax + 0xb]
test r8b, r8b
je 0x14000538a
cmp byte [rax + 0xc], r8b
je 0x14000538a
xor cl, cl
jmp 0x1400053b5
movzx r8d, byte [rdx + rax + 0xc]
test r8b, r8b
je 0x14000539f
cmp byte [rax + 0xd], r8b
je 0x14000539f
xor cl, cl
jmp 0x1400053b5
movzx r8d, byte [rdx + rax + 0xd]
test r8b, r8b
je 0x1400053b5
movzx ecx, cl
cmp byte [rax + 0xe], r8b
cmovne ecx, r13d
add r9d, 0x11
add rax, 0x11
cmp r9d, 0x11
jb 0x140005228
test cl, cl
jne 0x1400053e3
inc r10d
inc r11
dec rdx
cmp r10d, 0xbfffff
jb 0x140005220
jmp 0x1400053e9
movsxd r15, r10d
add r15, rsi
mov rcx, rbx
call fcn.140022c18
mov ecx, 0xbfffff
call fcn.1400236c8
mov rdi, rax
mov r8d, 0xbfffff
mov rdx, rax
mov rcx, rsi
call fcn.1400049b0
mov rbx, r13
mov r10d, r13d
lea r11, [rdi + 2]
lea rdx, [0x140057cb1]
sub rdx, rdi
nop dword [rax]
nop word [rax + rax]
mov cl, 1
mov r9d, r13d
mov rax, r11
test cl, cl
je 0x140005622
movzx r8d, byte [rax + rdx - 3]
test r8b, r8b
je 0x140005458
cmp byte [rax - 2], r8b
je 0x140005458
xor cl, cl
jmp 0x140005622
movzx r8d, byte [rax + rdx - 2]
test r8b, r8b
je 0x140005470
cmp byte [rax - 1], r8b
je 0x140005470
xor cl, cl
jmp 0x140005622
movzx r8d, byte [rax + rdx - 1]
test r8b, r8b
je 0x140005487
cmp byte [rax], r8b
je 0x140005487
xor cl, cl
jmp 0x140005622
movzx r8d, byte [rax + rdx]
test r8b, r8b
je 0x14000549e
cmp byte [rax + 1], r8b
je 0x14000549e
xor cl, cl
jmp 0x140005622
movzx r8d, byte [rax + rdx + 1]
test r8b, r8b
je 0x1400054b6
cmp byte [rax + 2], r8b
je 0x1400054b6
xor cl, cl
jmp 0x140005622
movzx r8d, byte [rax + rdx + 2]
test r8b, r8b
je 0x1400054ce
cmp byte [rax + 3], r8b
je 0x1400054ce
xor cl, cl
jmp 0x140005622
movzx r8d, byte [rax + rdx + 3]
test r8b, r8b
je 0x1400054e6
cmp byte [rax + 4], r8b
je 0x1400054e6
xor cl, cl
jmp 0x140005622
movzx r8d, byte [rax + rdx + 4]
test r8b, r8b
je 0x1400054fe
cmp byte [rax + 5], r8b
je 0x1400054fe
xor cl, cl
jmp 0x140005622
movzx r8d, byte [rax + rdx + 5]
test r8b, r8b
je 0x140005516
cmp byte [rax + 6], r8b
je 0x140005516
xor cl, cl
jmp 0x140005622
movzx r8d, byte [rax + rdx + 6]
test r8b, r8b
je 0x14000552e
cmp byte [rax + 7], r8b
je 0x14000552e
xor cl, cl
jmp 0x140005622
movzx r8d, byte [rax + rdx + 7]
test r8b, r8b
je 0x140005546
cmp byte [rax + 8], r8b
je 0x140005546
xor cl, cl
jmp 0x140005622
movzx r8d, byte [rax + rdx + 8]
test r8b, r8b
je 0x14000555e
cmp byte [rax + 9], r8b
je 0x14000555e
xor cl, cl
jmp 0x140005622
movzx r8d, byte [rax + rdx + 9]
test r8b, r8b
je 0x140005576
cmp byte [rax + 0xa], r8b
je 0x140005576
xor cl, cl
jmp 0x140005622
movzx r8d, byte [rax + rdx + 0xa]
test r8b, r8b
je 0x14000558e
cmp byte [rax + 0xb], r8b
je 0x14000558e
xor cl, cl
jmp 0x140005622
movzx r8d, byte [rax + rdx + 0xb]
test r8b, r8b
je 0x1400055a3
cmp byte [rax + 0xc], r8b
je 0x1400055a3
xor cl, cl
jmp 0x140005622
movzx r8d, byte [rax + rdx + 0xc]
test r8b, r8b
je 0x1400055b8
cmp byte [rax + 0xd], r8b
je 0x1400055b8
xor cl, cl
jmp 0x140005622
movzx r8d, byte [rax + rdx + 0xd]
test r8b, r8b
je 0x1400055cd
cmp byte [rax + 0xe], r8b
je 0x1400055cd
xor cl, cl
jmp 0x140005622
movzx r8d, byte [rax + rdx + 0xe]
test r8b, r8b
je 0x1400055e2
cmp byte [rax + 0xf], r8b
je 0x1400055e2
xor cl, cl
jmp 0x140005622
movzx r8d, byte [rax + rdx + 0xf]
test r8b, r8b
je 0x1400055f7
cmp byte [rax + 0x10], r8b
je 0x1400055f7
xor cl, cl
jmp 0x140005622
movzx r8d, byte [rax + rdx + 0x10]
test r8b, r8b
je 0x14000560c
cmp byte [rax + 0x11], r8b
je 0x14000560c
xor cl, cl
jmp 0x140005622
movzx r8d, byte [rax + rdx + 0x11]
test r8b, r8b
je 0x140005622
movzx ecx, cl
cmp byte [rax + 0x12], r8b
cmovne ecx, r13d
add r9d, 0x15
add rax, 0x15
cmp r9d, 0x15
jb 0x140005438
test cl, cl
jne 0x140005650
inc r10d
inc r11
dec rdx
cmp r10d, 0xbfffff
jb 0x140005430
jmp 0x140005656
movsxd rbx, r10d
add rbx, rsi
mov rcx, rdi
call fcn.140022c18
test r15, r15
je 0x140005856
test rbx, rbx
je 0x140005856
mov r8d, 6
lea rdx, [0x14005a5e0]
mov rcx, r15
call fcn.1400049b0
mov r8d, 6
lea rdx, [0x14005a6f4]
mov rcx, rbx
call fcn.1400049b0
lea rdx, [0x140057cc8]
mov rcx, r15
call fcn.140004a80
lea rdx, [0x140057cc8]
mov rcx, rbx
call fcn.140004a80
movdqa xmm0, xmmword [0x14004f9e0]
movdqu xmmword [rbp - 0x29], xmm0
movdqa xmm1, xmmword [0x14004fa30]
movdqu xmmword [rbp - 0x19], xmm1
mov word [rbp - 9], 0xa2e
mov byte [rbp - 7], r13b
lea rcx, [rbp - 0x28]
call fcn.140001470
mov rcx, r14
cmp qword [r14 + 0x18], 0x10
jb 0x1400056f2
mov rcx, qword [r14]
mov rdx, r12
call fcn.140004b50
movdqa xmm0, xmmword [0x14004fa80]
movdqu xmmword [rbp - 0x29], xmm0
mov dword [rbp - 0x19], 0xa217265
mov byte [rbp - 0x15], r13b
lea rcx, [rbp - 0x28]
call fcn.140001470
lea rdx, [0x14005a5e0]
mov rcx, r15
call fcn.140004a80
lea rdx, [0x14005a6f4]
mov rcx, rbx
call fcn.140004a80
movdqa xmm0, xmmword [0x14004f900]
movdqu xmmword [rbp - 0x29], xmm0
movdqa xmm1, xmmword [0x14004f960]
movdqu xmmword [rbp - 0x19], xmm1
mov dword [rbp - 9], 0xa2e73
lea rcx, [rbp - 0x28]
call fcn.140001470
movdqa xmm0, xmmword [0x14004f8f0]
movdqu xmmword [rbp - 0x29], xmm0
mov dword [rbp - 0x19], 0x6b6e6970
mov dword [rbp - 0x15], 0x2072656c
mov dword [rbp - 0x11], 0x4c554e3e
mov byte [rbp - 0xd], r13b
lea rcx, [rbp - 0x28]
call fcn.140021734
movdqa xmm0, xmmword [0x14004f950]
movdqu xmmword [rbp - 0x29], xmm0
mov dword [rbp - 0x19], 0x69705f6c
mov dword [rbp - 0x15], 0x656c6b6e
mov dword [rbp - 0x11], 0x4e3e2072
mov word [rbp - 0xd], 0x4c55
mov byte [rbp - 0xb], r13b
lea rcx, [rbp - 0x28]
call fcn.140021734
movdqa xmm0, xmmword [0x14004f9b0]
movdqu xmmword [rbp - 0x29], xmm0
mov dword [rbp - 0x19], 0x206f696e
mov dword [rbp - 0x15], 0x76697264
mov dword [rbp - 0x11], 0xa2e7265
mov byte [rbp - 0xd], r13b
lea rcx, [rbp - 0x28]
call fcn.140001470
mov dword [rbp - 0x39], 0x5d2a5b59
mov dword [rbp - 0x35], 0x6e6f6420
mov dword [rbp - 0x31], 0xa2165
lea rcx, [rbp - 0x38]
call fcn.140001470
nop
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x14000584f
inc rdx
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x14000584a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400058f9
mov rcx, r8
call fcn.140017dc8
xor eax, eax
jmp 0x140005192
movdqa xmm0, xmmword [0x14004f970]
movdqu xmmword [rbp - 0x29], xmm0
movdqa xmm1, xmmword [0x14004f850]
movdqu xmmword [rbp - 0x19], xmm1
mov dword [rbp - 9], 0x74746170
mov dword [rbp - 5], 0x736e7265
mov word [rbp - 1], 0xa2e
mov byte [rbp + 1], r13b
lea rcx, [rbp - 0x28]
call fcn.140001470
mov dword [rbp - 0x39], 0x75617054
mov dword [rbp - 0x35], 0x4e3e6573
mov word [rbp - 0x31], 0x4c55
mov byte [rbp - 0x2f], r13b
lea rcx, [rbp - 0x38]
call fcn.140021734
nop
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x1400058e9
inc rdx
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x1400058e4
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400058f9
mov rcx, r8
call fcn.140017dc8
mov eax, 0xfffffffa
jmp 0x140005192
call fcn.140023650
nop
call fcn.140023650
nop
call fcn.140023650
int3