Function at 0x14003fa00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
nop
sub rsp, 8
mov qword [rsp], rbp
push rdi
nop
sub rsp, 8
mov qword [rsp], r14
lea rbp, [rsp - 0x30]
sub rsp, 0x130
mov esi, edx
mov rbx, rcx
xor r14d, r14d
mov word [rbp + 0x68], r14w
mov r9d, r14d
lea r10, [rbp + 0x69]
nop
inc qword [rbx + 0x18]
xchg rdx, rax
mov rdx, qword [rbx]
xchg rdx, rax
cmp rax, qword [rbx + 8]
je 0x14003fa66
movzx edx, byte [rax]
inc rax
xchg r13, rax
mov qword [rbx], r13
xchg r13, rax
jmp 0x14003fa95
mov edx, 0x3f38670a
add edx, 0x289dcd08
xor edx, 0x4f8b1b90
add edx, 0x3ae169ba
sub edx, 0x4e08336a
sub edx, 0x1acaf48
add edx, 0x3f565ec6
add edx, 0xad1feaaf
mov dword [rbx + 0x10], edx
cmp edx, 0xffffffff
je 0x14003fb22
mov ecx, r14d
cmp esi, 5
sete cl
movzx eax, byte [rbx + 0x20]
cmp eax, ecx
je 0x14003fabe
mov byte [r10], dl
jmp 0x14003fac3
mov byte [rbp + r9 + 0x68], dl
inc r9
dec r10
cmp r9, 2
jb 0x14003fa3f
movzx eax, word [rbp + 0x68]
mov word [r8], ax
mov al, 0x29
add al, 0x52
xor al, 0x4b
add al, 0xa
xor al, 0x62
xor al, 0xf
sub al, 0x2a
sub al, 0x2c
lea r11, [rsp + 0x130]
xchg rbx, r8
mov r8, qword [r11 + 0x20]
xchg r8, rbx
mov rsi, qword [r11 + 0x28]
mov rsp, r11
nop
add rsp, 8
xchg qword [rsp - 8], r14
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
mov rdi, qword [rbx + 0x28]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], 0x364c416d
add qword [rsp + 0x40], 0x21e58c6c
sub qword [rsp + 0x40], 0x15b86944
add qword [rsp + 0x40], 0x366a3935
sub qword [rsp + 0x40], 0x629a5515
sub qword [rsp + 0x40], 0x164948af
mov qword [rsp + 0x48], 0x37ba181b
add qword [rsp + 0x48], 0x2c612c1f
add qword [rsp + 0x48], 0xfcd13d9
xor qword [rsp + 0x48], 0x3618b563
add qword [rsp + 0x48], 0x50c632f
sub qword [rsp + 0x48], 0x3fafdc1a
sub qword [rsp + 0x48], 0xb4d7476
mov eax, dword [0x1400017b4]
mov dword [rsp + 0x30], eax
movzx eax, word [0x1400017b8]
mov word [rsp + 0x34], ax
mov byte [rsp + 0x36], r14b
movups xmmword [rsp + 0x50], xmm0
mov edx, 0x28b64ccb
add edx, 0x14cb4d6f
sub edx, 0xf73ef00
sub edx, 0x2db7f923
xor edx, 0x2dc2f0e4
xor edx, 0x4e011ea9
sub edx, 0x63965c3a
lea rcx, [rsp + 0x50]
call fcn.1400537e0
xchg rdx, rcx
mov rcx, rax
xchg rcx, rdx
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], 0x66777460
xor qword [rsp + 0x60], 0x61128322
add qword [rsp + 0x60], 0x6a08f370
sub qword [rsp + 0x60], 0x42b9f90c
sub qword [rsp + 0x60], 0x1bfd0e2f
xor qword [rsp + 0x60], 0x37a7ff52
add qword [rsp + 0x60], 0x44432cb0
sub qword [rsp + 0x60], 0x34df8df2
xor qword [rsp + 0x60], 0x3473baf4
mov qword [rsp + 0x68], 0x9550716
xor qword [rsp + 0x68], 0x4a440c18
add qword [rsp + 0x68], 0x5d8fbae
add qword [rsp + 0x68], 0xb9ad26f
sub qword [rsp + 0x68], 0x3f81b2d4
add qword [rsp + 0x68], 0x4cd4d967
sub qword [rsp + 0x68], 0x15244f93
sub qword [rsp + 0x68], 0x12e6c3e
sub qword [rsp + 0x68], 0x4b8543ce
movups xmm0, xmmword [0x140001948]
xchg rcx, rax
movups xmmword [rcx], xmm0
xchg rcx, rax
mov ecx, dword [0x140001958]
mov dword [rax + 0x10], ecx
movzx ecx, word [0x14000195c]
mov word [rax + 0x14], cx
movzx eax, byte [0x14000195e]
mov byte [rdx + 0x16], al
mov byte [rdx + 0x17], 0x46
xor byte [rdx + 0x17], 0x22
add byte [rdx + 0x17], 0x19
sub byte [rdx + 0x17], 0x7d
add byte [rdx + 0x17], 0x43
xor byte [rdx + 0x17], 0x70
sub byte [rdx + 0x17], 0x33
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
mov r8d, esi
lea rdx, [rbp - 0x70]
xchg rcx, r10
mov r10, rbx
xchg rcx, r10
call fcn.140055670
nop
mov qword [rsp + 0x20], r14
xchg r9, r14
mov r14, rax
xchg r14, r9
xchg rdx, r8
mov rdx, qword [rbx + 0x18]
xchg rdx, r8
mov edx, 0x4cefe6ba
xor edx, 0x425a016c
add edx, 0xe406156
xor edx, 0x6411c414
sub edx, 0x6d16c2ef
xor edx, 0x4283d906
xor edx, 0x49531321
lea rcx, [rbp - 0x50]
call fcn.140038e80
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], 0x2f6285f8
add qword [rbp - 0x80], 0x32a97011
xor qword [rbp - 0x80], 0x417d98da
add qword [rbp - 0x80], 0x2e8b046d
add qword [rbp - 0x80], 0x1d1f9609
sub qword [rbp - 0x80], 0x65bf7ad5
sub qword [rbp - 0x80], 0x9618e67
mov qword [rbp - 0x78], 0x6700d2a1
xor qword [rbp - 0x78], 0x14d6aa01
sub qword [rbp - 0x78], 0x27f7131c
xor qword [rbp - 0x78], 0x76031469
sub qword [rbp - 0x78], 0x348abc83
add qword [rbp - 0x78], 0x228511cc
xor qword [rbp - 0x78], 0x3a2be2a8
xor qword [rbp - 0x78], 0x11fd2591
movsd xmm0, qword [0x140001960]
movsd qword [rsp + 0x70], xmm0
mov ecx, dword [0x140001968]
mov dword [rsp + 0x78], ecx
movzx ecx, byte [0x14000196c]
mov byte [rsp + 0x7c], cl
mov byte [rsp + 0x7d], 0x48
sub byte [rsp + 0x7d], 0x34
add byte [rsp + 0x7d], 0x34
sub byte [rsp + 0x7d], 0x11
xor byte [rsp + 0x7d], 8
sub byte [rsp + 0x7d], 0x3f
mov byte [rdi + 0x28], 0x19
add byte [rdi + 0x28], 8
add byte [rdi + 0x28], 0x16
sub byte [rdi + 0x28], 0x33
add byte [rdi + 0x28], 0x3f
sub byte [rdi + 0x28], 4
xor byte [rdi + 0x28], 0x3e
cmp byte [rdi + 0x29], 0
jne 0x14003ffe4
lea rbx, [0x140004a88]
mov qword [rbp - 0x30], rbx
lea rcx, [rbp - 0x28]
call sub.VCRUNTIME140.dll___std_exception_destroy
mov qword [rbp - 0x50], rbx
lea rcx, [rbp - 0x48]
call sub.VCRUNTIME140.dll___std_exception_destroy
nop
xchg r9, rdx
mov r9, qword [rbp - 0x58]
xchg r9, rdx
cmp rdx, 0x10
jb 0x14003fec9
inc rdx
xchg rcx, rbx
mov rbx, qword [rbp - 0x70]
xchg rbx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003fec4
neg rdx
add rdx, 0xffffffffffffffd9
neg rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
neg rax
add rax, 8
neg rax
cmp rax, 0x1f
jbe 0x14003fec4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcccc
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], 0x327e98bc
xor qword [rbp - 0x58], 0x20c4250
add qword [rbp - 0x58], 0x335b2798
add qword [rbp - 0x58], 0x12cdd8ae
xor qword [rbp - 0x58], 0x374e97d1
sub qword [rbp - 0x58], 0x201edfba
sub qword [rbp - 0x58], 0x21b66d1a
mov byte [rbp - 0x70], 0x3a
xor byte [rbp - 0x70], 0x6c
xor byte [rbp - 0x70], 0x6d
add byte [rbp - 0x70], 0x37
xor byte [rbp - 0x70], 0x31
sub byte [rbp - 0x70], 0xc
xor byte [rbp - 0x70], 0x37
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x14003ff74
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ff6e
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
neg rax
add rax, 8
neg rax
cmp rax, 0x1f
jbe 0x14003ff6e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcccc
nop
xchg r15, rdx
mov r15, qword [rsp + 0x48]
xchg rdx, r15
cmp rdx, 0x10
jb 0x14003ffdd
inc rdx
xchg rcx, r13
mov r13, qword [rsp + 0x30]
xchg rcx, r13
xchg rcx, rdx
mov rax, rdx
xchg rcx, rdx
cmp rdx, 0x1000
jb 0x14003ffd8
nop
sub rdx, 0x7c6d3599
add rdx, 0x7c6d35c0
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
jbe 0x14003ffd8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcccc
xor al, al
jmp 0x14003faeb
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
lea rcx, [rbp - 0x10]
call fcn.14004c040
lea rdx, [0x140215748]
lea rcx, [rbp - 0x10]
call sub.VCRUNTIME140.dll__CxxThrowException
int3