Function at 0x1400079c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x380]
sub rsp, 0x480
mov rax, qword [0x140035040]
xor rax, rsp
mov qword [rbp + 0x370], rax
mov r14, r8
mov r15, rdx
mov rdi, rcx
mov qword [rsp + 0x28], rdx
xor r12d, r12d
lea rcx, [r8 + 0x130]
call fcn.140012eec
mov rbx, rax
test rax, rax
je 0x140007a23
lea r8, [r14 + 0x130]
xor edx, edx
mov rcx, rax
call fcn.140023250
jmp 0x140007a26
mov rbx, r12
mov qword [rsp + 0x28], rbx
lea r8, [r14 + 0x130]
xor edx, edx
mov rcx, rbx
call fcn.140023250
mov r8, r14
lea rdx, [0x14000a810]
mov rcx, rbx
call fcn.140022bb0
mov rax, qword [rdi]
mov rcx, qword [rax + 0xa8]
movdqa xmm0, xmmword [0x1400267c0]
movdqu xmmword [rbp + 0x210], xmm0
mov dword [rbp + 0x220], 0x6b6e75
lea r9, [0x14002661c]
lea r8, [rbp + 0x211]
lea rdx, [rbp + 0x110]
call fcn.140008fd0
nop
cmp byte [rbp + 0x160], 0
jne 0x140007acc
mov dword [0x140036030], 0xc00001
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x140036034], eax
mov dword [0x140036038], r12d
lea rcx, [0x140036030]
call fcn.1400078a0
cmp byte [rbp + 0x160], 0
je 0x14000841a
mov rax, qword [rbp + 0x110]
mov qword [rbp + 0x320], rax
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x328]
call fcn.140001e00
nop
lea rdx, [rbp + 0x138]
lea rcx, [rbp + 0x348]
call fcn.140001ca0
movzx eax, word [rbp + 0x158]
mov word [rbp + 0x368], ax
movzx eax, byte [rbp + 0x15a]
mov byte [rbp + 0x36a], al
movzx eax, byte [rbp + 0x15b]
mov byte [rbp + 0x36b], al
movzx eax, byte [rbp + 0x15c]
mov byte [rbp + 0x36c], al
mov rax, qword [rbp + 0x320]
mov qword [r14 + rbx + 0xb0], rax
mov rax, qword [rdi]
mov rcx, qword [rax + 0xa8]
movdqa xmm0, xmmword [0x140026800]
movdqu xmmword [rbp + 0x210], xmm0
mov dword [rbp + 0x220], 0x72656863
mov byte [rbp + 0x224], 0
lea r9, [0x14002661c]
lea r8, [rbp + 0x211]
lea rdx, [rbp + 0xb0]
call fcn.140008fd0
nop
cmp byte [rbp + 0x100], 0
jne 0x140007bca
mov dword [0x140036030], 0xc00001
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x140036034], eax
mov dword [0x140036038], r12d
lea rcx, [0x140036030]
call fcn.1400078a0
cmp byte [rbp + 0x100], 0
je 0x140008420
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x2d0], rax
lea rdx, [rbp + 0xb8]
lea rcx, [rbp + 0x2d8]
call fcn.140001e00
nop
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x2f8]
call fcn.140001ca0
movzx eax, word [rbp + 0xf8]
mov word [rbp + 0x318], ax
movzx eax, byte [rbp + 0xfa]
mov byte [rbp + 0x31a], al
movzx eax, byte [rbp + 0xfb]
mov byte [rbp + 0x31b], al
movzx eax, byte [rbp + 0xfc]
mov byte [rbp + 0x31c], al
mov rax, qword [rbp + 0x2d0]
mov qword [r14 + rbx + 0xb8], rax
mov rax, qword [rdi]
mov rcx, qword [rax + 0xa8]
movdqa xmm0, xmmword [0x1400267b0]
movdqu xmmword [rbp + 0x210], xmm0
mov dword [rbp + 0x220], 0x61707369
mov dword [rbp + 0x224], 0x65686374
mov word [rbp + 0x228], 0x72
lea r9, [0x14002661c]
lea r8, [rbp + 0x211]
lea rdx, [rbp + 0x50]
call fcn.140008fd0
nop
cmp byte [rbp + 0xa0], 0
jne 0x140007cd1
mov dword [0x140036030], 0xc00001
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x140036034], eax
mov dword [0x140036038], r12d
lea rcx, [0x140036030]
call fcn.1400078a0
cmp byte [rbp + 0xa0], 0
je 0x140008426
mov rax, qword [rbp + 0x50]
mov qword [rbp + 0x280], rax
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x288]
call fcn.140001e00
nop
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x2a8]
call fcn.140001ca0
movzx eax, word [rbp + 0x98]
mov word [rbp + 0x2c8], ax
movzx eax, byte [rbp + 0x9a]
mov byte [rbp + 0x2ca], al
movzx eax, byte [rbp + 0x9b]
mov byte [rbp + 0x2cb], al
movzx eax, byte [rbp + 0x9c]
mov byte [rbp + 0x2cc], al
mov rax, qword [rbp + 0x280]
mov qword [r14 + rbx + 0xc0], rax
mov rax, qword [rdi]
mov rcx, qword [rax + 0xa8]
movdqa xmm0, xmmword [0x1400267d0]
movdqu xmmword [rbp + 0x210], xmm0
mov dword [rbp + 0x220], 0x70736944
mov dword [rbp + 0x224], 0x68637461
mov word [rbp + 0x228], 0x7265
mov byte [rbp + 0x22a], 0
lea r9, [0x14002661c]
lea r8, [rbp + 0x211]
lea rdx, [rbp - 0x10]
call fcn.140008fd0
nop
cmp byte [rbp + 0x40], 0
jne 0x140007dd0
mov dword [0x140036030], 0xc00001
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x140036034], eax
mov dword [0x140036038], r12d
lea rcx, [0x140036030]
call fcn.1400078a0
cmp byte [rbp + 0x40], 0
je 0x14000842c
mov rax, qword [rbp - 0x10]
mov qword [rbp + 0x230], rax
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x238]
call fcn.140001e00
nop
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x258]
call fcn.140001ca0
movzx eax, word [rbp + 0x38]
mov word [rbp + 0x278], ax
movzx eax, byte [rbp + 0x3a]
mov byte [rbp + 0x27a], al
movzx eax, byte [rbp + 0x3b]
mov byte [rbp + 0x27b], al
movzx eax, byte [rbp + 0x3c]
mov byte [rbp + 0x27c], al
mov rax, qword [rbp + 0x230]
mov qword [r14 + rbx + 0xa8], rax
mov rax, qword [rdi]
mov rcx, qword [rax + 0xa8]
mov dword [rbp + 0x210], 0x5070540d
mov dword [rbp + 0x214], 0x5774736f
mov dword [rbp + 0x218], 0x6b726f
lea r9, [0x14002661c]
lea r8, [rbp + 0x211]
lea rdx, [rbp - 0x70]
call fcn.140008fd0
nop
cmp byte [rbp - 0x20], 0
jne 0x140007ead
mov dword [0x140036030], 0xc00001
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x140036034], eax
mov dword [0x140036038], r12d
lea rcx, [0x140036030]
call fcn.1400078a0
cmp byte [rbp - 0x20], 0
je 0x140008432
mov rax, qword [rbp - 0x70]
mov qword [rbp + 0x1c0], rax
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x1c8]
call fcn.140001e00
nop
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x1e8]
call fcn.140001ca0
movzx eax, word [rbp - 0x28]
mov word [rbp + 0x208], ax
movzx eax, byte [rbp - 0x26]
mov byte [rbp + 0x20a], al
movzx eax, byte [rbp - 0x25]
mov byte [rbp + 0x20b], al
movzx eax, byte [rbp - 0x24]
mov byte [rbp + 0x20c], al
mov rax, qword [rbp + 0x1c0]
mov qword [r14 + rbx + 0xd8], rax
mov rax, qword [rdi]
mov rcx, qword [rax + 0xa8]
mov dword [rbp + 0x210], 0x41705427
mov dword [rbp + 0x214], 0x636f6c6c
mov dword [rbp + 0x218], 0x6b726f57
mov byte [rbp + 0x21c], 0
lea r9, [0x14002661c]
lea r8, [rbp + 0x211]
lea rdx, [rsp + 0x30]
call fcn.140008fd0
nop
cmp byte [rbp - 0x80], 0
jne 0x140007f92
mov dword [0x140036030], 0xc00001
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x140036034], eax
mov dword [0x140036038], r12d
lea rcx, [0x140036030]
call fcn.1400078a0
cmp byte [rbp - 0x80], 0
je 0x140008438
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x170], rax
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x178]
call fcn.140001e00
nop
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x198]
call fcn.140001ca0
movzx eax, word [rsp + 0x78]
mov word [rbp + 0x1b8], ax
movzx eax, byte [rsp + 0x7a]
mov byte [rbp + 0x1ba], al
movzx eax, byte [rsp + 0x7b]
mov byte [rbp + 0x1bb], al
movzx eax, byte [rsp + 0x7c]
mov byte [rbp + 0x1bc], al
mov rax, qword [rbp + 0x170]
mov qword [r14 + rbx + 0xd0], rax
mov rcx, qword [rdi]
mov rcx, qword [rcx + 0xb8]
call fcn.14000a2a0
add rax, 0x174641c
mov qword [r14 + rbx + 0xf8], rax
mov rcx, qword [rdi]
mov rcx, qword [rcx + 0xb8]
call fcn.14000a2a0
add rax, 0x16b4fd8
mov qword [r14 + rbx + 0x100], rax
mov rcx, qword [rdi]
mov rcx, qword [rcx + 0xb8]
call fcn.14000a2a0
add rax, 0x1745e9c
mov qword [r14 + rbx + 0x108], rax
mov rcx, qword [rdi]
mov rcx, qword [rcx + 0xb8]
call fcn.14000a2a0
add rax, 0x13c4916
mov qword [r14 + rbx + 0x110], rax
mov rcx, qword [rdi]
mov rcx, qword [rcx + 0xb8]
call fcn.14000a2a0
add rax, 0x12bba49
mov qword [r14 + rbx + 0x118], rax
mov rcx, qword [rdi]
mov rcx, qword [rcx + 0xb8]
call fcn.14000a2a0
add rax, 0x16b4a4f
mov qword [r14 + rbx + 0x120], rax
mov qword [r14 + rbx + 0xc8], r12
mov rcx, qword [rdi]
mov rcx, qword [rcx + 0xb8]
call fcn.14000a2a0
add rax, 0xa3c060
mov qword [r14 + rbx + 0xa0], rax
mov rcx, qword [rdi]
mov rcx, qword [rcx + 0xb8]
call fcn.14000a2a0
add rax, 0x136e360
mov qword [r14 + rbx + 0xe8], rax
mov rcx, qword [rdi]
mov rcx, qword [rcx + 0xb8]
call fcn.14000a2a0
add rax, 0xa3c0a0
mov qword [r14 + rbx + 0x98], rax
mov qword [r14 + rbx + 0x128], r12
mov byte [r14 + rbx], 1
mov qword [r15], rbx
mov rdx, qword [rbp + 0x1b0]
cmp rdx, 0xf
jbe 0x14000815b
inc rdx
mov rcx, qword [rbp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008156
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000843e
call fcn.140012d84
mov qword [rbp + 0x1a8], r12
mov qword [rbp + 0x1b0], 0xf
mov byte [rbp + 0x198], 0
lea rcx, [rbp + 0x178]
call fcn.1400035b0
nop
cmp byte [rbp - 0x80], 0
je 0x140008192
lea rcx, [rsp + 0x30]
call fcn.1400078d0
nop
mov rdx, qword [rbp + 0x200]
cmp rdx, 0xf
jbe 0x1400081d3
inc rdx
mov rcx, qword [rbp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400081ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008444
call fcn.140012d84
mov qword [rbp + 0x1f8], r12
mov qword [rbp + 0x200], 0xf
mov byte [rbp + 0x1e8], 0
lea rcx, [rbp + 0x1c8]
call fcn.1400035b0
nop
cmp byte [rbp - 0x20], 0
je 0x140008209
lea rcx, [rbp - 0x70]
call fcn.1400078d0
nop
mov rdx, qword [rbp + 0x270]
cmp rdx, 0xf
jbe 0x14000824a
inc rdx
mov rcx, qword [rbp + 0x258]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008245
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000844a
call fcn.140012d84
mov qword [rbp + 0x268], r12
mov qword [rbp + 0x270], 0xf
mov byte [rbp + 0x258], 0
lea rcx, [rbp + 0x238]
call fcn.1400035b0
nop
cmp byte [rbp + 0x40], 0
je 0x140008280
lea rcx, [rbp - 0x10]
call fcn.1400078d0
nop
mov rdx, qword [rbp + 0x2c0]
cmp rdx, 0xf
jbe 0x1400082c1
inc rdx
mov rcx, qword [rbp + 0x2a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400082bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008450
call fcn.140012d84
mov qword [rbp + 0x2b8], r12
mov qword [rbp + 0x2c0], 0xf
mov byte [rbp + 0x2a8], 0
lea rcx, [rbp + 0x288]
call fcn.1400035b0
nop
cmp byte [rbp + 0xa0], 0
je 0x1400082fa
lea rcx, [rbp + 0x50]
call fcn.1400078d0
nop
mov rdx, qword [rbp + 0x310]
cmp rdx, 0xf
jbe 0x14000833b
inc rdx
mov rcx, qword [rbp + 0x2f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008336
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008456
call fcn.140012d84
mov qword [rbp + 0x308], r12
mov qword [rbp + 0x310], 0xf
mov byte [rbp + 0x2f8], 0
lea rcx, [rbp + 0x2d8]
call fcn.1400035b0
nop
cmp byte [rbp + 0x100], 0
je 0x140008377
lea rcx, [rbp + 0xb0]
call fcn.1400078d0
nop
mov rdx, qword [rbp + 0x360]
cmp rdx, 0xf
jbe 0x1400083b4
inc rdx
mov rcx, qword [rbp + 0x348]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400083af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008414
call fcn.140012d84
mov qword [rbp + 0x358], r12
mov qword [rbp + 0x360], 0xf
mov byte [rbp + 0x348], 0
lea rcx, [rbp + 0x328]
call fcn.1400035b0
nop
cmp byte [rbp + 0x160], 0
je 0x1400083f0
lea rcx, [rbp + 0x110]
call fcn.1400078d0
nop
mov rax, r15
mov rcx, qword [rbp + 0x370]
xor rcx, rsp
call fcn.140012ea0
add rsp, 0x480
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140018ca4
nop
call fcn.140004b30
nop
call fcn.140004b30
nop
call fcn.140004b30
nop
call fcn.140004b30
nop
call fcn.140004b30
nop
call fcn.140004b30
int3
call fcn.140018ca4
nop
call fcn.140018ca4
nop
call fcn.140018ca4
nop
call fcn.140018ca4
nop
call fcn.140018ca4
int3