Function at 0x140019870
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x180]
sub rsp, 0x280
mov rax, qword [0x14015a198]
xor rax, rsp
mov qword [rbp + 0x170], rax
mov r14, rcx
call fcn.140036710
mov rcx, rax
test rax, rax
je 0x14001a1f2
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
lea r15, [0x140176fa9]
mov rdi, 0xffffffffffffffff
cmp r15, 0x10000
jae 0x1400198ee
movzx edx, r15w
lea rcx, [rsp + 0x48]
call fcn.140036ea0
jmp 0x14001990c
mov rax, rdi
inc rax
cmp byte [r15 + rax], 0
jne 0x1400198f1
mov r8d, eax
mov rdx, r15
lea rcx, [rsp + 0x48]
call fcn.1400399e0
nop
mov qword [rbp - 0x78], 0
mov dword [rbp - 0x80], edi
lea rcx, [rbp - 0x80]
call fcn.140009b30
mov ebx, eax
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x60]
call fcn.140073280
lea rdx, [rbp - 0x78]
mov ecx, ebx
call fcn.140029610
test eax, eax
je 0x14001998a
mov r8, qword [rbp - 0x78]
test r8, r8
je 0x14001998a
lea rax, [rbp + 0x60]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea edx, [r9 + 0x1c]
xor ecx, ecx
call fcn.140028200
mov word [rsp + 0x39], 0x73
mov byte [rsp + 0x38], 0x25
lea r8, [rbp + 0x60]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x48]
call fcn.1400363e0
mov rcx, qword [rbp - 0x78]
call fcn.140023630
mov word [rbp - 0x14], 0x3542
mov dword [rbp - 2], 0x302d4444
mov dword [rbp - 0x11], 0x462d3238
mov dword [rbp + 2], 0x31443037
mov dword [rbp - 0xd], 0x2d314344
mov dword [rbp - 9], 0x33434434
mov dword [rbp + 0xb], 0x7d3739
mov dword [rbp + 7], 0x44353934
mov dword [rbp - 0x18], 0x4132367b
mov byte [rbp - 0x12], 0x44
mov word [rbp - 5], 0x412d
mov byte [rbp + 6], 0x44
mov byte [rbp - 3], 0x39
lea rax, [rsp + 0x60]
mov qword [rsp + 0x78], rax
call fcn.140036710
mov rcx, rax
test rax, rax
je 0x14001a1fd
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
lea rax, [rbp - 0x18]
cmp rax, 0x10000
jae 0x140019a23
lea rax, [rbp - 0x18]
movzx edx, ax
lea rcx, [rsp + 0x60]
call fcn.140036ea0
jmp 0x140019a4b
lea rcx, [rbp - 0x18]
mov rax, rdi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140019a30
mov r8d, eax
lea rdx, [rbp - 0x18]
lea rcx, [rsp + 0x60]
call fcn.1400399e0
nop
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x58]
call fcn.14000b660
nop
mov dword [rbp + 0x29], 0x32463043
mov dword [rbp + 0x14], 0x45303441
mov dword [rbp + 0x2f], 0x41463942
mov dword [rbp + 0x33], 0x7d4538
mov word [rbp + 0x19], 0x412d
mov word [rbp + 0x24], 0x3738
mov word [rbp + 0x1c], 0x4246
mov word [rbp + 0x1f], 0x4234
mov word [rbp + 0x27], 0x2d41
mov word [rbp + 0x22], 0x2d43
mov byte [rbp + 0x26], 0x34
mov word [rbp + 0x2d], 0x3045
mov byte [rbp + 0x18], 0x46
mov byte [rbp + 0x21], 0x46
mov dword [rbp + 0x10], 0x3543377b
mov byte [rbp + 0x1e], 0x2d
mov byte [rbp + 0x1b], 0x30
lea rax, [rsp + 0x68]
mov qword [rsp + 0x78], rax
call fcn.140036710
mov rcx, rax
test rax, rax
je 0x14001a208
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
lea rax, [rbp + 0x10]
cmp rax, 0x10000
jae 0x140019b05
lea rax, [rbp + 0x10]
movzx edx, ax
lea rcx, [rsp + 0x68]
call fcn.140036ea0
jmp 0x140019b2b
lea rcx, [rbp + 0x10]
mov rax, rdi
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140019b10
mov r8d, eax
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x68]
call fcn.1400399e0
nop
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x40]
call fcn.14000b660
nop
mov dword [rbp + 0x39], 0x30384436
mov word [rbp + 0x41], 0x362d
mov word [rbp + 0x56], 0x3046
mov dword [rbp + 0x49], 0x382d6234
mov word [rbp + 0x3e], 0x3733
mov dword [rbp + 0x50], 0x3733412d
mov dword [rbp + 0x5b], 0x7d4530
mov word [rbp + 0x59], 0x3032
mov byte [rbp + 0x3d], 0x39
mov word [rbp + 0x47], 0x3434
mov word [rbp + 0x4d], 0x3539
mov word [rbp + 0x54], 0x3337
mov byte [rbp + 0x4f], 0x37
mov word [rbp + 0x44], 0x3046
mov byte [rbp + 0x40], 0x37
mov byte [rbp + 0x38], 0x7b
mov byte [rbp + 0x58], 0x32
mov byte [rbp + 0x43], 0x41
mov byte [rbp + 0x46], 0x2d
lea rax, [rsp + 0x70]
mov qword [rsp + 0x78], rax
call fcn.140036710
mov rcx, rax
test rax, rax
je 0x14001a213
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rax, [rbp + 0x38]
cmp rax, 0x10000
jae 0x140019bec
lea rax, [rbp + 0x38]
movzx edx, ax
lea rcx, [rsp + 0x70]
call fcn.140036ea0
jmp 0x140019c0e
lea rcx, [rbp + 0x38]
mov rax, rdi
inc rax
cmp byte [rcx + rax], 0
jne 0x140019bf3
mov r8d, eax
lea rdx, [rbp + 0x38]
lea rcx, [rsp + 0x70]
call fcn.1400399e0
nop
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14000b660
nop
mov rax, qword [rsp + 0x30]
cmp dword [rax - 0x10], 0
jne 0x140019d4e
mov rdx, qword [rsp + 0x40]
lea rcx, [rdx - 0x18]
lea rbx, [rax - 0x18]
cmp rcx, rbx
je 0x140019c87
cmp dword [rbx + 0x10], 0
jl 0x140019c79
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140019c79
call fcn.140035ce0
mov rsi, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140019c6e
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rsi + 0x18]
mov qword [rsp + 0x30], rax
jmp 0x140019c87
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x30]
call fcn.1400399e0
mov word [rbp - 0x44], 0x2936
mov word [rbp - 0x47], 0x7828
mov byte [rbp - 0x48], 0x20
mov byte [rbp - 0x42], 0
mov byte [rbp - 0x45], 0x38
call fcn.140036710
mov rcx, rax
test rax, rax
je 0x14001a21e
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
lea rax, [rbp - 0x48]
cmp rax, 0x10000
jae 0x140019cdc
lea rax, [rbp - 0x48]
movzx edx, ax
lea rcx, [rbp - 0x70]
call fcn.140036ea0
jmp 0x140019cfd
lea rcx, [rbp - 0x48]
mov rax, rdi
inc rax
cmp byte [rcx + rax], 0
jne 0x140019ce3
mov r8d, eax
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x70]
call fcn.1400399e0
nop
mov rbx, qword [rbp - 0x70]
test rbx, rbx
je 0x140019d35
mov rcx, qword [rsp + 0x30]
cmp dword [rcx - 0x10], 0
jl 0x140019d35
mov rdx, rbx
call fcn.1400a4230
test rax, rax
je 0x140019d35
cmp eax, dword [rsp + 0x30]
js 0x140019d35
mov r8, r15
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.140038c00
nop
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140019d4e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov dword [rbp - 0x39], 0x6f726843
mov word [rbp - 0x2b], 0x6974
mov word [rbp - 0x28], 0x5c6e
mov dword [rbp - 0x34], 0x70415c65
mov dword [rbp - 0x20], 0x6578652e
mov dword [rbp - 0x3d], 0x5c656c67
mov dword [rbp - 0x25], 0x6d6f7268
mov dword [rbp - 0x2f], 0x6163696c
mov byte [rbp - 0x1c], 0
mov byte [rbp - 0x21], 0x65
mov word [rbp - 0x40], 0x6f47
mov byte [rbp - 0x35], 0x6d
mov byte [rbp - 0x26], 0x63
mov byte [rbp - 0x30], 0x70
mov byte [rbp - 0x3e], 0x6f
mov byte [rbp - 0x29], 0x6f
call fcn.140036710
mov rcx, rax
test rax, rax
je 0x14001a1dc
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
lea rdx, [0x140177760]
lea rcx, [rbp - 0x60]
call fcn.14001c1f0
mov rbx, rax
mov r8, qword [rsp + 0x40]
cmp dword [r8 - 8], 1
jle 0x140019df8
mov edx, dword [r8 - 0x10]
lea rcx, [rsp + 0x40]
call fcn.140036310
mov r8, qword [rsp + 0x40]
lea r9, [rbp - 0x40]
mov rdx, qword [rbx]
lea rcx, [rsp + 0x50]
call fcn.1400363e0
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140019e27
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rsp + 0x40]
movsxd rdx, dword [rcx - 0xc]
call fcn.1400a38cc
test eax, eax
js 0x14001a1e7
mov rcx, qword [rsp + 0x40]
cmp eax, dword [rcx - 0xc]
jg 0x14001a1e7
mov dword [rcx - 0x10], eax
movsxd rcx, eax
mov rax, qword [rsp + 0x40]
mov byte [rcx + rax], 0
mov rbx, qword [rsp + 0x50]
mov rcx, rbx
call fcn.140026dd0
test eax, eax
jne 0x14001a125
lea rdx, [0x140177760]
lea rcx, [rbp - 0x58]
call fcn.14001c1f0
mov rbx, rax
mov r8, qword [rsp + 0x30]
cmp dword [r8 - 8], 1
jle 0x140019ea1
mov edx, dword [r8 - 0x10]
lea rcx, [rsp + 0x30]
call fcn.140036310
mov r8, qword [rsp + 0x30]
lea r9, [rbp - 0x40]
mov rdx, qword [rbx]
lea rcx, [rsp + 0x50]
call fcn.1400363e0
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140019ed0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rsp + 0x30]
movsxd rdx, dword [rcx - 0xc]
call fcn.1400a38cc
test eax, eax
js 0x14001a1e7
mov rcx, qword [rsp + 0x30]
cmp eax, dword [rcx - 0xc]
jg 0x14001a1e7
mov dword [rcx - 0x10], eax
movsxd rcx, eax
mov rax, qword [rsp + 0x30]
mov byte [rcx + rax], 0
mov rbx, qword [rsp + 0x50]
mov rcx, rbx
call fcn.140026dd0
test eax, eax
jne 0x14001a125
lea rdx, [0x140177760]
lea rcx, [rbp - 0x50]
call fcn.14001c1f0
mov rbx, rax
mov r8, qword [rsp + 0x48]
cmp dword [r8 - 8], 1
jle 0x140019f4a
mov edx, dword [r8 - 0x10]
lea rcx, [rsp + 0x48]
call fcn.140036310
mov r8, qword [rsp + 0x48]
lea r9, [rbp - 0x40]
mov rdx, qword [rbx]
lea rcx, [rsp + 0x50]
call fcn.1400363e0
nop
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140019f79
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rsp + 0x48]
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.1400a38cc
test eax, eax
js 0x14001a1e7
cmp eax, dword [rbx - 0xc]
jg 0x14001a1e7
mov dword [rbx - 0x10], eax
cdqe
mov byte [rax + rbx], 0
mov rbx, qword [rsp + 0x50]
mov rcx, rbx
call fcn.140026dd0
test eax, eax
jne 0x14001a125
lea rdx, [0x140177760]
lea rcx, [rsp + 0x78]
call fcn.14001c1f0
mov rbx, rax
mov r8, qword [rsp + 0x58]
cmp dword [r8 - 8], 1
jle 0x140019fec
mov edx, dword [r8 - 0x10]
lea rcx, [rsp + 0x58]
call fcn.140036310
mov r8, qword [rsp + 0x58]
lea r9, [rbp - 0x40]
mov rdx, qword [rbx]
lea rcx, [rsp + 0x50]
call fcn.1400363e0
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001a01c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rsp + 0x58]
movsxd rdx, dword [rcx - 0xc]
call fcn.1400a38cc
test eax, eax
js 0x14001a1e7
mov rcx, qword [rsp + 0x58]
cmp eax, dword [rcx - 0xc]
jg 0x14001a1e7
mov dword [rcx - 0x10], eax
movsxd rcx, eax
mov rax, qword [rsp + 0x58]
mov byte [rcx + rax], 0
mov rbx, qword [rsp + 0x50]
mov rcx, rbx
call fcn.140026dd0
test eax, eax
jne 0x14001a125
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001a07e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001a09d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001a0bc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001a0db
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x14001a0f7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor al, al
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.140043aa0
lea r11, [rsp + 0x280]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov word [rsp + 0x3d], 0x73
mov byte [rsp + 0x3c], 0x25
mov r8, rbx
lea rdx, [rsp + 0x3c]
mov rcx, r14
call fcn.1400363e0
nop
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001a15c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001a17b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001a19a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001a1b9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x14001a1d5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov al, 1
jmp 0x14001a0f9
mov ecx, 0x80004005
call fcn.140035ad0
nop
mov ecx, 0x80070057
call fcn.140035ad0
nop
mov ecx, 0x80004005
call fcn.140035ad0
nop
mov ecx, 0x80004005
call fcn.140035ad0
nop
mov ecx, 0x80004005
call fcn.140035ad0
nop
mov ecx, 0x80004005
call fcn.140035ad0
nop
mov ecx, 0x80004005
call fcn.140035ad0
int3