Function at 0x140014970
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x240]
sub rsp, 0x340
mov rax, qword [0x1400cc020]
xor rax, rsp
mov qword [rbp + 0x230], rax
mov r15, rdx
movsxd r12, ecx
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
xor eax, eax
mov r13d, eax
mov qword [rsp + 0x40], rax
mov rdi, qword [rsp + 0x38]
cmp r12, 1
jle 0x140014abc
mov esi, 1
nop word [rax + rax]
mov rbx, qword [r15 + rsi*8]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], 0xf
mov byte [rsp + 0x68], 0
mov rcx, rbx
call fcn.140067b40
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14001adc0
nop
cmp rdi, r13
je 0x140014a54
xor ebx, ebx
mov qword [rdi], rbx
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], rbx
lea r8d, [rbx + 0x20]
lea rdx, [rsp + 0x68]
mov rcx, rdi
call fcn.140062140
mov qword [rsp + 0x78], rbx
mov eax, 0xf
mov qword [rbp - 0x80], rax
mov byte [rsp + 0x68], bl
add rdi, 0x20
mov qword [rsp + 0x38], rdi
jmp 0x140014a74
lea r8, [rsp + 0x68]
mov rdx, rdi
lea rcx, [rsp + 0x30]
call fcn.14001bda0
mov r13, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x38]
mov rax, qword [rbp - 0x80]
cmp rax, 0x10
jb 0x140014aad
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014aa8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400152fc
call fcn.14006126c
inc rsi
cmp rsi, r12
jge 0x140014abc
xor eax, eax
jmp 0x1400149e0
mov r14, qword [rsp + 0x30]
cmp r12d, 2
jl 0x140015100
mov rax, qword [r15 + 8]
cmp byte [rax], 0x2d
jne 0x14001521f
lea rdx, [0x1400bb9b0]
lea rcx, [rbp - 0x78]
call fcn.14009c7c0
mov rsi, rax
mov rbx, r14
cmp r14, rdi
je 0x140014b29
mov rdx, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x140014b00
mov rdx, qword [rsi]
mov rcx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x140014b0d
mov rcx, qword [rbx]
mov r8, qword [rbx + 0x10]
cmp r8, qword [rsi + 0x10]
jne 0x140014b20
call fcn.140063870
test eax, eax
je 0x140014b29
add rbx, 0x20
cmp rbx, rdi
jne 0x140014af3
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x140014b64
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014b5f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015302
call fcn.14006126c
cmp rbx, rdi
je 0x14001521f
lea rdx, [0x1400bb9c8]
lea rcx, [rbp - 0x58]
call fcn.14009c7c0
mov rsi, rax
mov rbx, r14
cmp r14, rdi
je 0x140014bcc
mov rdx, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x140014b95
mov rdx, qword [rsi]
mov rcx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x140014ba2
mov rcx, qword [rbx]
mov r8, qword [rbx + 0x10]
cmp r8, qword [rsi + 0x10]
jne 0x140014bb5
call fcn.140063870
test eax, eax
je 0x140014bbe
add rbx, 0x20
cmp rbx, rdi
jmp 0x140014b86
cmp rbx, rdi
je 0x140014bcc
add rbx, 0x20
cmp rbx, rdi
jne 0x140014bf3
mov rax, qword gs:[0x58]
mov edx, 4
mov rcx, qword [rax]
lea rbx, [0x1400ce9b8]
mov eax, dword [rdx + rcx]
cmp dword [0x1400ce9b0], eax
jg 0x140015308
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x140014c2e
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014c29
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015378
call fcn.14006126c
xor r15d, r15d
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x40], 0xf
mov byte [rbp - 0x58], r15b
cmp qword [rbx + 0x10], r15
je 0x14001521f
lea rcx, [rbp - 0x78]
call fcn.1400992a0
nop
cmp qword [rbp - 0x68], r15
je 0x1400150bd
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x20], 0xf
mov byte [rbp - 0x38], r15b
lea r9d, [r15 + 3]
lea r8d, [r15 + 0x1d]
lea rdx, [rbp - 0x18]
lea rcx, [rbp - 0x78]
call fcn.14001b350
mov rsi, rax
lea r9d, [r15 + 3]
xor r8d, r8d
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x78]
call fcn.14001b350
mov r14, rax
lea rdx, [0x1400bb8b8]
lea rcx, [rsp + 0x68]
call fcn.14009c7c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140014cbf
mov rax, qword [rax]
cmp qword [rsi + 0x18], 0x10
jb 0x140014cc9
mov rsi, qword [rsi]
cmp qword [r14 + 0x18], 0x10
jb 0x140014cd3
mov r14, qword [r14]
mov r9, rsi
mov r8, r14
mov rdx, rax
lea rcx, [rbp - 0x38]
call fcn.14001c1d0
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x140014d22
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014d1d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001537e
call fcn.14006126c
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x80], 0xf
mov byte [rsp + 0x68], 0
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x140014d71
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014d6c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015384
call fcn.14006126c
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], 0xf
mov byte [rsp + 0x48], 0
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x140014dbf
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014dba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001538a
call fcn.14006126c
cmp qword [rbx + 0x18], 0x10
jb 0x140014dc9
mov rbx, qword [rbx]
lea r15, [rbp - 0x38]
cmp qword [rbp - 0x20], 0x10
cmovae r15, qword [rbp - 0x38]
call fcn.1400604d0
mov r12, qword [rax + 8]
mov qword [rsp + 0x50], r12
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 8]
nop
lea rcx, [rsp + 0x48]
call fcn.14001a820
mov r14, rax
sub r15, rbx
mov r8, qword [r14]
movzx edx, byte [rbx + r15]
mov rcx, r14
call qword [r8 + 0x20]
movsx esi, al
mov r8, qword [r14]
movzx edx, byte [rbx]
mov rcx, r14
call qword [r8 + 0x20]
lea rbx, [rbx + 1]
test sil, sil
je 0x140014e2d
cmp sil, al
je 0x140014e00
movsx eax, al
mov ebx, esi
sub ebx, eax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
test rax, rax
je 0x140014e51
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8]
test ebx, ebx
jne 0x140015081
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x10]
call fcn.140063480
lea rdx, [rbp + 0x10]
call fcn.140098a30
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x120]
call fcn.140063480
lea rcx, [rbp + 0x10]
call fcn.140018ac0
mov r8, rax
mov edx, 0x104
lea rcx, [rbp + 0x120]
call fcn.14006bcf8
lea rdx, [rbp + 0x120]
lea rcx, [rsp + 0x68]
call fcn.14001cff0
nop
mov r8, qword [rsp + 0x78]
lea eax, [r8 - 4]
xor r15d, r15d
mov ecx, r15d
test eax, eax
cmovns ecx, eax
cmp ecx, r8d
jge 0x140014f1b
movsxd r9, ecx
cmp r8, r9
jb 0x140015396
mov rax, r8
sub rax, r9
mov edx, 4
cmp rax, rdx
cmovb rdx, rax
lea rcx, [rsp + 0x68]
cmp qword [rbp - 0x80], 0x10
cmovae rcx, qword [rsp + 0x68]
add rcx, r9
sub r8, rdx
mov qword [rsp + 0x78], r8
sub r8, r9
inc r8
add rdx, rcx
call fcn.140062140
mov r8, qword [rsp + 0x78]
cmp r8d, 0xffffffff
jge 0x140014fa7
cmp r8, 0xffffffffffffffff
jb 0x140014f4a
mov qword [rsp + 0x78], 0xffffffffffffffff
lea rax, [rsp + 0x68]
cmp qword [rbp - 0x80], 0x10
cmovae rax, qword [rsp + 0x68]
mov byte [rax - 1], r15b
jmp 0x140014fa2
mov rsi, r8
not rsi
mov rcx, qword [rbp - 0x80]
mov rax, rcx
sub rax, r8
cmp rsi, rax
ja 0x140014f8d
mov qword [rsp + 0x78], 0xffffffffffffffff
lea rbx, [rsp + 0x68]
cmp rcx, 0x10
cmovae rbx, qword [rsp + 0x68]
add rbx, r8
mov r8, rsi
xor edx, edx
mov rcx, rbx
call fcn.140063480
mov byte [rsi + rbx], r15b
jmp 0x140014fa2
mov byte [rsp + 0x20], r15b
mov r9, rsi
mov rdx, rsi
lea rcx, [rsp + 0x68]
call fcn.14001cb10
mov r8, qword [rsp + 0x78]
lea rax, [rsp + 0x68]
cmp qword [rbp - 0x80], 0x10
cmovae rax, qword [rsp + 0x68]
mov qword [rbp - 0x58], rax
lea rax, [0x140001ec0]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x40], r15
call fcn.1400a38f0
mov rbx, rax
test rax, rax
je 0x140015044
mov dword [rsp + 0x5c], 0x68637461
mov word [rsp + 0x4d], 0x6553
mov dword [rsp + 0x50], 0x65636976
mov dword [rsp + 0x56], 0x69446c72
mov dword [rsp + 0x60], 0x417265
mov word [rsp + 0x54], 0x7443
mov dword [rsp + 0x48], 0x72617453
mov word [rsp + 0x5a], 0x7073
mov byte [rsp + 0x4f], 0x72
mov byte [rsp + 0x4c], 0x74
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14001503b
lea rcx, [rbp - 0x58]
call rax
mov rcx, rbx
call fcn.140098790
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x140015081
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001507b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140015390
call fcn.14006126c
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x1400150bd
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400150b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001539c
call fcn.14006126c
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x14001521f
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015219
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400152f6
jmp 0x140015219
lea rdx, [0x1400bb9e0]
lea rcx, [rbp - 0x18]
call fcn.14009c7c0
mov rsi, rax
lea rdx, [0x1400bba20]
lea rcx, [rbp - 0x78]
call fcn.14009c7c0
mov rbx, rax
cmp qword [rsi + 0x18], 0x10
jb 0x140015130
mov rsi, qword [rsi]
cmp qword [rax + 0x18], 0x10
jb 0x14001513a
mov rbx, qword [rax]
call fcn.1400a36f0
mov r14, rax
test rax, rax
je 0x140015194
mov dword [rsp + 0x4d], 0x6f426567
mov dword [rsp + 0x48], 0x7373654d
mov byte [rsp + 0x4c], 0x61
mov word [rsp + 0x51], 0x4178
mov byte [rsp + 0x53], 0
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14001518b
mov r9d, 0x10
mov r8, rsi
mov rdx, rbx
xor ecx, ecx
call rax
mov rcx, r14
call fcn.140098790
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x1400151cf
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400151ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400153a2
call fcn.14006126c
mov qword [rbp - 0x68], 0
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], 0
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x14001521f
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015219
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400153a8
call fcn.14006126c
nop
mov r14, qword [rsp + 0x30]
test r14, r14
je 0x1400152be
mov rbx, r14
cmp r14, rdi
je 0x14001528b
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14001526f
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x14001526a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400152f0
mov rcx, r8
call fcn.14006126c
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
add rbx, 0x20
cmp rbx, rdi
jne 0x140015235
sub r13, r14
and r13, 0xffffffffffffffe0
mov rax, r14
cmp r13, 0x1000
jb 0x1400152b3
add r13, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400152f0
mov rdx, r13
mov rcx, r14
call fcn.14006126c
xor eax, eax
mov rcx, qword [rbp + 0x230]
xor rcx, rsp
call fcn.140060fb0
lea r11, [rsp + 0x340]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140067948
nop
call fcn.140067948
nop
call fcn.140067948
nop
call fcn.140067948
nop
lea rcx, [0x1400ce9b0]
call fcn.140061464
cmp dword [0x1400ce9b0], 0xffffffff
jne 0x140014bf3
mov qword [0x1400ce9b8], 0
movdqa xmm0, xmmword [0x1400c0cd0]
movdqu xmmword [0x1400ce9c8], xmm0
lea rcx, [0x1400ba5a0]
call fcn.140067b40
mov r8, rax
lea rdx, [0x1400ba5a0]
mov rcx, rbx
call fcn.14001adc0
lea rcx, [0x1400a4e20]
call fcn.1400617ac
nop
lea rcx, [0x1400ce9b0]
call fcn.140061404
jmp 0x140014bf3
call fcn.140067948
nop
call fcn.140067948
nop
call fcn.140067948
nop
call fcn.140067948
int3
call fcn.140067948
nop
call fcn.14001a930
nop
call fcn.140067948
nop
call fcn.140067948
nop
call fcn.140067948
int3