Function at 0x14000a430
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xe0
mov rax, qword [0x140152040]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov rsi, rdx
mov r15, rcx
mov qword [rbp - 9], rcx
mov qword [rbp - 0x19], rdx
xor r12d, r12d
mov dword [rbp - 0x41], r12d
mov qword [rbp - 9], r12
lea rax, [0x1401520b8]
mov qword [rbp - 1], rax
lea rdx, [rbp - 9]
lea rcx, [rbp - 0x61]
call fcn.140003110
mov dword [rbp - 0x41], 2
cmp dword [rbp - 9], r12d
jne 0x14000a9f6
lea rax, [rbp - 0x61]
cmp qword [rbp - 0x49], 7
cmova rax, qword [rbp - 0x61]
mov qword [rbp - 9], rax
mov rax, qword [rbp - 0x51]
mov qword [rbp - 1], rax
call fcn.14005846c
movaps xmm0, xmmword [rbp - 9]
movdqa xmmword [rbp - 9], xmm0
lea r8, [rbp - 9]
mov edx, eax
lea rcx, [rbp - 0x39]
call fcn.140007dd0
mov rdx, qword [0x14016a7d0]
cmp rdx, 0xf
jbe 0x14000a510
mov rcx, qword [0x14016a7b8]
inc rdx
cmp rdx, 0x1000
jb 0x14000a50b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000a575
mov rcx, r8
call fcn.140058ef8
movups xmm0, xmmword [rbp - 0x39]
movups xmmword [0x14016a7b8], xmm0
movups xmm1, xmmword [rbp - 0x29]
movups xmmword [0x14016a7c8], xmm1
movdqa xmm0, xmmword [0x140146550]
movdqu xmmword [rbp - 0x29], xmm0
mov byte [rbp - 0x39], 0
mov rdx, qword [rbp - 0x49]
cmp rdx, 7
jbe 0x14000a581
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a57c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a57c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140058ef8
mov dword [rbp - 9], 0x69622e43
mov word [rbp - 5], 0x6e
lea rcx, [rsp + 0x20]
call fcn.140009990
mov rbx, rax
mov r8, qword [rax + 0x10]
mov qword [rax + 0x10], r8
mov rdi, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14000a5b0
mov rdi, qword [rax]
lea r13, [0x14005bd29]
cmp r13, rdi
jbe 0x14000a5d2
lea rax, [rdi + r8]
cmp r13, rax
ja 0x14000a5d2
cmp rdi, r13
jbe 0x14000a5d2
mov r14, rdi
sub r14, r13
jmp 0x14000a5d5
mov r14, r12
inc r8
mov rdx, rdi
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
mov rdx, r13
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rdi + r14]
mov r8, r14
neg r8
lea rdx, [r14 + r13]
call sub.VCRUNTIME140.dll_memcpy
xorps xmm0, xmm0
movups xmmword [rbp - 0x61], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x51], xmm1
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x61], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x51], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
lea rax, [rbp - 8]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000a640
lea rdx, [rbp - 8]
lea rcx, [rbp - 0x61]
call fcn.140007470
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x39], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x29], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp - 0x39]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
movq r8, xmm1
lea rcx, [0x14016a7b8]
call fcn.140007470
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 0xf
jbe 0x14000a6e5
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a6df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a6df
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140058ef8
nop
mov rdx, qword [rbp - 0x49]
cmp rdx, 0xf
jbe 0x14000a723
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a71e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a71e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140058ef8
movdqa xmm0, xmmword [0x140146550]
movdqu xmmword [rbp - 0x51], xmm0
mov byte [rbp - 0x61], 0
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x14000a774
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a76f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a76f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140058ef8
lea rdx, [0x14016a7b8]
mov rcx, rsi
call fcn.140004f80
test al, al
je 0x14000a80e
lea rdx, [0x14016a7b8]
mov rcx, r15
call fcn.140007590
nop
mov rdx, qword [rsi + 0x18]
cmp rdx, 0xf
jbe 0x14000a7d5
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x14000a7d0
add rdx, 0x27
mov rax, qword [rcx - 8]
sub rcx, rax
add rcx, 0xfffffffffffffff8
cmp rcx, 0x1f
ja 0x14000a9ef
mov rcx, rax
call fcn.140058ef8
mov rax, r15
mov byte [rsi], 0
mov qword [rsi + 0x18], 0xf
mov qword [rsi + 0x10], r12
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.140058c00
mov rbx, qword [rsp + 0x130]
add rsp, 0xe0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
movdqa xmm0, xmmword [0x140146c70]
movdqu xmmword [rbp - 9], xmm0
mov dword [rbp + 7], 0x2064616f
mov dword [rbp + 0xb], 0x656c6966
mov word [rbp + 0xf], 0x21
lea rdx, [rbp - 8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400082a0
lea rdx, [0x140008470]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov cl, 0x76
mov word [rbp - 9], 0x76
movsx ecx, cl
movzx eax, cx
xor ax, 0x33
mov word [rbp - 7], ax
movzx eax, cx
xor ax, 4
mov word [rbp - 5], ax
mov word [rbp - 3], ax
xor cx, 0x19
mov word [rbp - 1], cx
mov word [rbp + 1], ax
mov word [rbp + 3], r12w
mov cl, 0x53
mov word [rsp + 0x20], 0x53
movsx edi, cl
movzx eax, di
xor ax, 0x15
mov word [rsp + 0x22], ax
movzx r11d, di
xor r11w, 0x32
mov word [rsp + 0x24], r11w
movzx ebx, di
xor bx, 0x3a
mov word [rsp + 0x26], bx
movzx r10d, di
xor r10w, 0x3f
mov word [rsp + 0x28], r10w
movzx r9d, di
xor r9w, 0x36
mov word [rsp + 0x2a], r9w
movzx r8d, di
xor r8w, 0x37
mov word [rsp + 0x2c], r8w
movzx edx, di
xor dx, 0x73
mov word [rsp + 0x2e], dx
movzx eax, di
xor ax, 0x27
mov word [rsp + 0x30], ax
movzx ecx, di
xor cx, 0x3c
mov word [rsp + 0x32], cx
mov word [rsp + 0x34], dx
mov word [rsp + 0x36], r8w
mov word [rsp + 0x38], cx
movzx eax, di
xor ax, 0x24
mov word [rbp - 0x7f], ax
movzx eax, di
xor ax, 0x3d
mov word [rbp - 0x7d], ax
mov word [rbp - 0x7b], r10w
mov word [rbp - 0x79], cx
mov word [rbp - 0x77], r11w
mov word [rbp - 0x75], r8w
mov word [rbp - 0x73], dx
movzx eax, di
xor ax, 0x35
mov word [rbp - 0x71], ax
mov word [rbp - 0x6f], bx
mov word [rbp - 0x6d], r10w
mov word [rbp - 0x6b], r9w
xor di, 0x72
mov word [rbp - 0x69], di
mov word [rbp - 0x67], r12w
xor r9d, r9d
lea r8, [rbp - 7]
lea rdx, [rsp + 0x22]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rax, [0x14016a7b8]
cmp qword [0x14016a7d0], 0xf
cmova rax, qword [0x14016a7b8]
mov qword [0x14016a7c8], r12
mov byte [rax], 0
lea rdx, [0x14016a7b8]
mov rcx, r15
call fcn.140007590
nop
mov rdx, qword [rsi + 0x18]
cmp rdx, 0xf
jbe 0x14000a7d5
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x14000a7d0
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000a9ef
mov rcx, r8
jmp 0x14000a7d0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea r8, [rbp - 0x61]
lea rdx, [rbp - 9]
call fcn.140002ce0
int3