Function at 0x1400928c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x178]
sub rsp, 0x250
mov qword [rsp + 0x28], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
mov rax, qword [0x140499908]
xor rax, rsp
mov qword [rbp + 0x140], rax
mov r15d, r8d
mov r12, rdx
mov r14, rcx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], rdx
mov dword [rsp + 0x20], 0
lea rax, [rsp + 0x48]
mov qword [rsp + 0x40], rax
mov r8d, 3
mov rdx, qword [rdx]
lea rcx, [rsp + 0x40]
call fcn.14008d0c0
nop
mov rdi, qword [rsp + 0x40]
call fcn.1400b1c7c
mov rcx, rax
test rax, rax
jne 0x140092951
mov ecx, 0x80004005
call fcn.140082d10
int3
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0xe0], rbx
or rsi, 0xffffffffffffffff
test rdi, rdi
je 0x1400929ab
test rdi, 0xffffffffffff0000
jne 0x140092997
movzx edi, di
mov ecx, edi
call fcn.1400b2c04
test rax, rax
je 0x1400929c6
mov r8d, edi
mov rdx, rax
lea rcx, [rbp + 0xe0]
call fcn.140081520
jmp 0x1400929bf
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rdi + rax], 0
jne 0x1400929a0
jmp 0x1400929ad
xor eax, eax
mov r8d, eax
mov rdx, rdi
lea rcx, [rbp + 0xe0]
call fcn.140081660
mov rbx, qword [rbp + 0xe0]
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x40]
cmp rcx, rax
je 0x1400929da
call fcn.14033bf10
mov dword [rbp + 0xf0], 0x44434241
mov dword [rbp + 0xf4], 0x48474645
mov dword [rbp + 0xf8], 0x4c4b4a49
mov dword [rbp + 0xfc], 0x504f4e4d
mov dword [rbp + 0x100], 0x54535251
mov dword [rbp + 0x104], 0x58575655
mov dword [rbp + 0x108], 0x62615a59
mov dword [rbp + 0x10c], 0x66656463
mov dword [rbp + 0x110], 0x6a696867
mov dword [rbp + 0x114], 0x6e6d6c6b
mov dword [rbp + 0x118], 0x7271706f
mov dword [rbp + 0x11c], 0x76757473
mov dword [rbp + 0x120], 0x7a797877
mov dword [rbp + 0x124], 0x33323130
mov dword [rbp + 0x128], 0x37363534
mov dword [rbp + 0x12c], 0x2f2b3938
mov byte [rbp + 0x130], 0x3d
xor edi, edi
movsxd r11, dword [rbx - 0x10]
xor r10d, r10d
test r11, r11
jle 0x140092b79
nop dword [rax]
nop word [rax + rax]
movsxd r9, edi
add r9, rbx
lea r8, [rbp + 0xf0]
nop dword [rax]
xor eax, eax
movzx ecx, byte [r9]
cmp byte [r8], cl
jne 0x140092adb
nop dword [rax + rax]
cmp eax, 1
jge 0x140092ad9
inc r8
inc r9
inc eax
movzx ecx, byte [r9]
cmp byte [r8], cl
je 0x140092ac0
cmp eax, 1
je 0x140092af8
lea ecx, [rax - 1]
movsxd rdx, ecx
sub r8, rdx
movsxd rcx, eax
sub r9, rcx
lea rax, [rbp + 0x130]
cmp r8, rax
ja 0x140092b07
jmp 0x140092ab0
lea rax, [rbp + 0xf0]
sub r8, rax
dec r8
jmp 0x140092b0a
mov r8, rsi
mov byte [r10 + rbx], r8b
inc edi
inc r10
cmp r10, r11
jl 0x140092aa0
test r11, r11
jle 0x140092b79
mov r8, rbx
mov r9, r11
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [r8]
add ecx, r15d
mov eax, 0x7e07e07f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x41
sub ecx, eax
mov byte [r8], cl
lea r8, [r8 + 1]
sub r9, 1
jne 0x140092b30
test r11, r11
jle 0x140092b79
mov rdx, rbx
movzx eax, byte [rdx]
movzx ecx, byte [rbp + rax + 0xf0]
mov byte [rdx], cl
lea rdx, [rdx + 1]
sub r11, 1
jne 0x140092b62
mov rax, rsi
nop dword [rax]
inc rax
cmp byte [rbx + rax], 0
jne 0x140092b80
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp + 0xe0]
call fcn.140081660
lea rax, [rbp - 0x28]
mov qword [rbp - 0x30], rax
mov r8d, 3
mov rbx, qword [rbp + 0xe0]
mov rdx, rbx
lea rcx, [rbp - 0x30]
call fcn.14008d200
nop
mov rdi, qword [rbp - 0x30]
call fcn.1400b1c7c
mov rcx, rax
test rax, rax
jne 0x140092bd9
mov ecx, 0x80004005
call fcn.140082d10
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [r14], rax
test rdi, rdi
je 0x140092c22
test rdi, 0xffffffffffff0000
jne 0x140092c13
movzx edi, di
mov ecx, edi
call fcn.1400b2c04
test rax, rax
je 0x140092c33
mov r8d, edi
mov rdx, rax
mov rcx, r14
call fcn.140082750
jmp 0x140092c33
mov rax, rsi
inc rax
cmp word [rdi + rax*2], 0
jne 0x140092c16
jmp 0x140092c24
xor eax, eax
mov r8d, eax
mov rdx, rdi
mov rcx, r14
call fcn.140082b40
nop
lea rax, [rbp - 0x28]
mov rcx, qword [rbp - 0x30]
cmp rcx, rax
je 0x140092c46
call fcn.14033bf10
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140092c60
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [r12]
sub rdx, 0x18
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x140092c7c
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov rax, r14
mov rcx, qword [rbp + 0x140]
xor rcx, rsp
call fcn.14025d560
lea r11, [rsp + 0x250]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret