Function at 0x1ebcb7a60
Capabilities:
Contain obfuscated stackstrings

Disassembly:
lea r12, [rsp - 0x468]
cmp r12, qword [r14 + 0x10]
jbe 0x1ebcb8828
push rbp
mov rbp, rsp
sub rsp, 0x4e0
lea rdi, [rsp + 0x3a8]
lea rdi, [rdi - 0x10]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.1ebb9c141
mov rbp, qword [rbp]
movups xmmword [rsp + 0x2c7], xmm15
movups xmmword [rsp + 0x2ce], xmm15
mov byte [rsp + 0x2c7], 0x43
mov word [rsp + 0x2c8], 0x5c3a
mov dword [rsp + 0x2ca], 0x676f7250
movabs rdx, 0x656c6946206d6172
mov qword [rsp + 0x2ce], rdx
movabs rdx, 0x657261774d565c73
mov qword [rsp + 0x2d6], rdx
xor eax, eax
lea rbx, [rsp + 0x2c7]
mov ecx, 0x17
nop
call fcn.1ebb83400
mov qword [rsp + 0x3b0], rbx
mov qword [rsp + 0x3a8], rax
movups xmmword [rsp + 0x2ad], xmm15
movups xmmword [rsp + 0x2b7], xmm15
mov word [rsp + 0x2ad], 0x3a43
movabs rdx, 0x6d6172676f72505c
mov qword [rsp + 0x2af], rdx
movabs rdx, 0x505c73656c694620
mov qword [rsp + 0x2b7], rdx
movabs rdx, 0x736c656c6c617261
mov qword [rsp + 0x2bf], rdx
xor eax, eax
lea rbx, [rsp + 0x2ad]
mov ecx, 0x1a
call fcn.1ebb83400
mov qword [rsp + 0x3c0], rbx
mov qword [rsp + 0x3b8], rax
movups xmmword [rsp + 0x286], xmm15
movups xmmword [rsp + 0x28d], xmm15
movups xmmword [rsp + 0x29d], xmm15
mov byte [rsp + 0x286], 0x43
mov word [rsp + 0x287], 0x5c3a
mov dword [rsp + 0x289], 0x646e6977
movabs rdx, 0x747379535c73776f
mov qword [rsp + 0x28d], rdx
movabs rsi, 0x6972445c32336d65
mov qword [rsp + 0x295], rsi
movabs rsi, 0x6d6d565c73726576
mov qword [rsp + 0x29d], rsi
movabs rsi, 0x7379732e6573756f
mov qword [rsp + 0x2a5], rsi
xor eax, eax
lea rbx, [rsp + 0x286]
mov ecx, 0x27
call fcn.1ebb83400
mov qword [rsp + 0x3d0], rbx
mov qword [rsp + 0x3c8], rax
movups xmmword [rsp + 0x260], xmm15
movups xmmword [rsp + 0x266], xmm15
movups xmmword [rsp + 0x276], xmm15
mov word [rsp + 0x260], 0x3a43
mov dword [rsp + 0x262], 0x6e69775c
movabs rdx, 0x7379535c73776f64
mov qword [rsp + 0x266], rdx
movabs rsi, 0x72445c32336d6574
mov qword [rsp + 0x26e], rsi
movabs r8, 0x6d765c7372657669
mov qword [rsp + 0x276], r8
movabs r9, 0x6c6c642e79617274
mov qword [rsp + 0x27e], r9
xor eax, eax
lea rbx, [rsp + 0x260]
mov ecx, 0x26
call fcn.1ebb83400
mov qword [rsp + 0x3e0], rbx
mov qword [rsp + 0x3d8], rax
movups xmmword [rsp + 0x235], xmm15
movups xmmword [rsp + 0x240], xmm15
movups xmmword [rsp + 0x250], xmm15
mov byte [rsp + 0x235], 0x43
mov word [rsp + 0x236], 0x5c3a
movabs rdx, 0x5c73776f646e6977
mov qword [rsp + 0x238], rdx
movabs rsi, 0x32336d6574737953
mov qword [rsp + 0x240], rsi
movabs r8, 0x737265766972445c
mov qword [rsp + 0x248], r8
movabs r8, 0x736c6f6f544d565c
mov qword [rsp + 0x250], r8
movabs r8, 0x6c6c642e6b6f6f48
mov qword [rsp + 0x258], r8
xor eax, eax
lea rbx, [rsp + 0x235]
mov ecx, 0x2b
call fcn.1ebb83400
mov qword [rsp + 0x3f0], rbx
mov qword [rsp + 0x3e8], rax
movups xmmword [rsp + 0x20b], xmm15
movups xmmword [rsp + 0x215], xmm15
movups xmmword [rsp + 0x225], xmm15
mov word [rsp + 0x20b], 0x3a43
movabs rdx, 0x73776f646e69775c
mov qword [rsp + 0x20d], rdx
movabs rsi, 0x336d65747379535c
mov qword [rsp + 0x215], rsi
movabs r8, 0x7265766972445c32
mov qword [rsp + 0x21d], r8
movabs r9, 0x73756f6d6d765c73
mov qword [rsp + 0x225], r9
movabs r9, 0x6c6c642e72657665
mov qword [rsp + 0x22d], r9
xor eax, eax
lea rbx, [rsp + 0x20b]
mov ecx, 0x2a
call fcn.1ebb83400
mov qword [rsp + 0x400], rbx
mov qword [rsp + 0x3f8], rax
movups xmmword [rsp + 0x1e5], xmm15
movups xmmword [rsp + 0x1eb], xmm15
movups xmmword [rsp + 0x1fb], xmm15
mov word [rsp + 0x1e5], 0x3a43
mov dword [rsp + 0x1e7], 0x6e69775c
movabs rdx, 0x7379535c73776f64
mov qword [rsp + 0x1eb], rdx
movabs rsi, 0x72445c32336d6574
mov qword [rsp + 0x1f3], rsi
movabs r8, 0x6d765c7372657669
mov qword [rsp + 0x1fb], r8
movabs r8, 0x6c6c642e73666768
mov qword [rsp + 0x203], r8
xor eax, eax
lea rbx, [rsp + 0x1e5]
mov ecx, 0x26
call fcn.1ebb83400
mov qword [rsp + 0x410], rbx
mov qword [rsp + 0x408], rax
movups xmmword [rsp + 0x1bb], xmm15
movups xmmword [rsp + 0x1c5], xmm15
movups xmmword [rsp + 0x1d5], xmm15
mov word [rsp + 0x1bb], 0x3a43
movabs rdx, 0x73776f646e69775c
mov qword [rsp + 0x1bd], rdx
movabs rdx, 0x336d65747379535c
mov qword [rsp + 0x1c5], rdx
movabs rdx, 0x7265766972445c32
mov qword [rsp + 0x1cd], rdx
movabs rdx, 0x736575476d765c73
mov qword [rsp + 0x1d5], rdx
movabs rdx, 0x6c6c642e62694c74
mov qword [rsp + 0x1dd], rdx
xor eax, eax
lea rbx, [rsp + 0x1bb]
mov ecx, 0x2a
call fcn.1ebb83400
mov qword [rsp + 0x420], rbx
mov qword [rsp + 0x418], rax
movups xmmword [rsp + 0x192], xmm15
movups xmmword [rsp + 0x19b], xmm15
movups xmmword [rsp + 0x1ab], xmm15
mov byte [rsp + 0x192], 0x43
movabs rdx, 0x776f646e69775c3a
mov qword [rsp + 0x193], rdx
movabs rsi, 0x6d65747379535c73
mov qword [rsp + 0x19b], rsi
movabs r8, 0x65766972445c3233
mov qword [rsp + 0x1a3], r8
movabs r9, 0x4d786f42565c7372
mov qword [rsp + 0x1ab], r9
movabs r9, 0x7379732e6573756f
mov qword [rsp + 0x1b3], r9
xor eax, eax
lea rbx, [rsp + 0x192]
mov ecx, 0x29
call fcn.1ebb83400
mov qword [rsp + 0x430], rbx
mov qword [rsp + 0x428], rax
movups xmmword [rsp + 0x169], xmm15
movups xmmword [rsp + 0x172], xmm15
movups xmmword [rsp + 0x182], xmm15
mov byte [rsp + 0x169], 0x43
movabs rdx, 0x776f646e69775c3a
mov qword [rsp + 0x16a], rdx
movabs rsi, 0x6d65747379535c73
mov qword [rsp + 0x172], rsi
movabs r8, 0x65766972445c3233
mov qword [rsp + 0x17a], r8
movabs r9, 0x47786f42565c7372
mov qword [rsp + 0x182], r9
movabs r9, 0x7379732e74736575
mov qword [rsp + 0x18a], r9
xor eax, eax
lea rbx, [rsp + 0x169]
mov ecx, 0x29
call fcn.1ebb83400
mov qword [rsp + 0x440], rbx
mov qword [rsp + 0x438], rax
movups xmmword [rsp + 0x143], xmm15
movups xmmword [rsp + 0x149], xmm15
movups xmmword [rsp + 0x159], xmm15
mov word [rsp + 0x143], 0x3a43
mov dword [rsp + 0x145], 0x6e69775c
movabs rdx, 0x7379535c73776f64
mov qword [rsp + 0x149], rdx
movabs rdx, 0x72445c32336d6574
mov qword [rsp + 0x151], rdx
movabs rdx, 0x42565c7372657669
mov qword [rsp + 0x159], rdx
movabs rdx, 0x7379732e4653786f
mov qword [rsp + 0x161], rdx
xor eax, eax
lea rbx, [rsp + 0x143]
mov ecx, 0x26
call fcn.1ebb83400
mov qword [rsp + 0x450], rbx
mov qword [rsp + 0x448], rax
movups xmmword [rsp + 0x11a], xmm15
movups xmmword [rsp + 0x123], xmm15
movups xmmword [rsp + 0x133], xmm15
mov byte [rsp + 0x11a], 0x43
movabs rdx, 0x776f646e69775c3a
mov qword [rsp + 0x11b], rdx
movabs rdx, 0x6d65747379535c73
mov qword [rsp + 0x123], rdx
movabs rdx, 0x65766972445c3233
mov qword [rsp + 0x12b], rdx
movabs rdx, 0x56786f42565c7372
mov qword [rsp + 0x133], rdx
movabs rdx, 0x7379732e6f656469
mov qword [rsp + 0x13b], rdx
xor eax, eax
lea rbx, [rsp + 0x11a]
mov ecx, 0x29
call fcn.1ebb83400
mov qword [rsp + 0x460], rbx
mov qword [rsp + 0x458], rax
movups xmmword [rsp + 0xfa], xmm15
movups xmmword [rsp + 0x10a], xmm15
movabs rdx, 0x6f646e69775c3a43
mov qword [rsp + 0xfa], rdx
movabs rsi, 0x65747379535c7377
mov qword [rsp + 0x102], rsi
movabs r8, 0x786f62765c32336d
mov qword [rsp + 0x10a], r8
movabs r9, 0x6c6c642e70736964
mov qword [rsp + 0x112], r9
xor eax, eax
lea rbx, [rsp + 0xfa]
mov ecx, 0x20
call fcn.1ebb83400
mov qword [rsp + 0x470], rbx
mov qword [rsp + 0x468], rax
movups xmmword [rsp + 0xda], xmm15
movups xmmword [rsp + 0xea], xmm15
movabs rdx, 0x6f646e69775c3a43
mov qword [rsp + 0xda], rdx
movabs rsi, 0x65747379535c7377
mov qword [rsp + 0xe2], rsi
movabs r8, 0x786f62765c32336d
mov qword [rsp + 0xea], r8
movabs r9, 0x6c6c642e6b6f6f68
mov qword [rsp + 0xf2], r9
xor eax, eax
lea rbx, [rsp + 0xda]
mov ecx, 0x20
nop
call fcn.1ebb83400
mov qword [rsp + 0x480], rbx
mov qword [rsp + 0x478], rax
movups xmmword [rsp + 0xb3], xmm15
movups xmmword [rsp + 0xba], xmm15
movups xmmword [rsp + 0xca], xmm15
mov byte [rsp + 0xb3], 0x43
mov word [rsp + 0xb4], 0x5c3a
mov dword [rsp + 0xb6], 0x646e6977
movabs rdx, 0x747379535c73776f
mov qword [rsp + 0xba], rdx
movabs rdx, 0x6f62765c32336d65
mov qword [rsp + 0xc2], rdx
movabs rdx, 0x6f7272656c676f78
mov qword [rsp + 0xca], rdx
movabs rdx, 0x6c6c642e75707372
mov qword [rsp + 0xd2], rdx
xor eax, eax
lea rbx, [rsp + 0xb3]
mov ecx, 0x27
call fcn.1ebb83400
mov qword [rsp + 0x490], rbx
mov qword [rsp + 0x488], rax
movups xmmword [rsp + 0x86], xmm15
movups xmmword [rsp + 0x93], xmm15
movups xmmword [rsp + 0xa3], xmm15
mov byte [rsp + 0x86], 0x43
mov dword [rsp + 0x87], 0x69775c3a
movabs rdx, 0x79535c73776f646e
mov qword [rsp + 0x8b], rdx
movabs rdx, 0x765c32336d657473
mov qword [rsp + 0x93], rdx
movabs rdx, 0x61706c676f786f62
mov qword [rsp + 0x9b], rdx
movabs rdx, 0x67756f7268747373
mov qword [rsp + 0xa3], rdx
movabs rdx, 0x6c6c642e75707368
mov qword [rsp + 0xab], rdx
xor eax, eax
lea rbx, [rsp + 0x86]
mov ecx, 0x2d
call fcn.1ebb83400
mov qword [rsp + 0x4a0], rbx
mov qword [rsp + 0x498], rax
movups xmmword [rsp + 0x63], xmm15
movups xmmword [rsp + 0x66], xmm15
movups xmmword [rsp + 0x76], xmm15
mov byte [rsp + 0x63], 0x43
mov word [rsp + 0x64], 0x5c3a
movabs rdx, 0x5c73776f646e6977
mov qword [rsp + 0x66], rdx
movabs rsi, 0x32336d6574737953
mov qword [rsp + 0x6e], rsi
movabs r8, 0x726573786f62765c
mov qword [rsp + 0x76], r8
movabs r8, 0x6578652e65636976
mov qword [rsp + 0x7e], r8
xor eax, eax
lea rbx, [rsp + 0x63]
mov ecx, 0x23
call fcn.1ebb83400
mov qword [rsp + 0x4b0], rbx
mov qword [rsp + 0x4a8], rax
movups xmmword [rsp + 0x43], xmm15
movups xmmword [rsp + 0x53], xmm15
movabs rdx, 0x6f646e69775c3a43
mov qword [rsp + 0x43], rdx
movabs rdx, 0x65747379535c7377
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x786f62765c32336d
mov qword [rsp + 0x53], rdx
movabs rdx, 0x6578652e79617274
mov qword [rsp + 0x5b], rdx
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x20
call fcn.1ebb83400
mov qword [rsp + 0x4c0], rbx
mov qword [rsp + 0x4b8], rax
movups xmmword [rsp + 0x20], xmm15
movups xmmword [rsp + 0x23], xmm15
movups xmmword [rsp + 0x33], xmm15
mov byte [rsp + 0x20], 0x43
mov word [rsp + 0x21], 0x5c3a
movabs rdx, 0x5c73776f646e6977
mov qword [rsp + 0x23], rdx
movabs rdx, 0x32336d6574737953
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x6e6f43786f42565c
mov qword [rsp + 0x33], rdx
movabs rdx, 0x6578652e6c6f7274
mov qword [rsp + 0x3b], rdx
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 0x23
call fcn.1ebb83400
mov qword [rsp + 0x4d0], rbx
mov qword [rsp + 0x4c8], rax
lea rdx, [rsp + 0x3a8]
xor eax, eax
jmp 0x1ebcb85a7
mov rdx, qword [rsp + 0x4d8]
add rdx, 0x10
mov rax, qword [rsp + 0x3a0]
inc rax
cmp rax, 0x13
jge 0x1ebcb85db
mov qword [rsp + 0x3a0], rax
mov qword [rsp + 0x4d8], rdx
mov rax, qword [rdx]
mov rbx, qword [rdx + 8]
call fcn.1ebcb7440
test al, al
je 0x1ebcb8590
mov eax, 1
add rsp, 0x4e0
pop rbp
ret
movups xmmword [rsp + 0x2de], xmm15
lea rdi, [rsp + 0x2e0]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.1ebb9c16b
mov rbp, qword [rbp]
mov word [rsp + 0x2de], 0x6d76
movabs rdx, 0x652e64736c6f6f74
mov qword [rsp + 0x2e0], rdx
movabs rdx, 0x635f6c72702c6578
mov qword [rsp + 0x2e8], rdx
movabs rdx, 0x54502c6578652e63
mov qword [rsp + 0x2f0], rdx
movabs rdx, 0x652e746e65674149
mov qword [rsp + 0x2f8], rdx
movabs rdx, 0x745f6c72702c6578
mov qword [rsp + 0x300], rdx
movabs rdx, 0x6578652e736c6f6f
mov qword [rsp + 0x308], rdx
movabs rdx, 0x6f6f745f6c72702c
mov qword [rsp + 0x310], rdx
movabs rdx, 0x69767265735f736c
mov qword [rsp + 0x318], rdx
movabs rdx, 0x762c6578652e6563
mov qword [rsp + 0x320], rdx
movabs rdx, 0x617274657261776d
mov qword [rsp + 0x328], rdx
movabs rdx, 0x6d562c6578652e74
mov qword [rsp + 0x330], rdx
movabs rdx, 0x7265737565726177
mov qword [rsp + 0x338], rdx
movabs rdx, 0x616d562c6578652e
mov qword [rsp + 0x340], rdx
movabs rdx, 0x78652e706c687463
mov qword [rsp + 0x348], rdx
movabs rdx, 0x6573786f62762c65
mov qword [rsp + 0x350], rdx
movabs rdx, 0x78652e6563697672
mov qword [rsp + 0x358], rdx
movabs rdx, 0x7274786f62762c65
mov qword [rsp + 0x360], rdx
movabs rdx, 0x782c6578652e7961
mov qword [rsp + 0x368], rdx
movabs rdx, 0x6369767265736e65
mov qword [rsp + 0x370], rdx
movabs rdx, 0x65712c6578652e65
mov qword [rsp + 0x378], rdx
movabs rdx, 0x78652e61672d756d
mov qword [rsp + 0x380], rdx
movabs rdx, 0x767273756d762c65
mov qword [rsp + 0x388], rdx
movabs rdx, 0x6d762c6578652e63
mov qword [rsp + 0x390], rdx
movabs rdx, 0x6578652e63767273
mov qword [rsp + 0x398], rdx
xor eax, eax
lea rbx, [rsp + 0x2de]
mov ecx, 0xc2
call fcn.1ebb83400
xor ecx, ecx
xor edi, edi
call fcn.1ebc64ae0
test rbx, rbx
jne 0x1ebcb881a
nop dword [rax + rax]
call fcn.1ebcb8d00
test al, al
jne 0x1ebcb880c
call fcn.1ebcb8840
test al, al
je 0x1ebcb8801
mov eax, 1
add rsp, 0x4e0
pop rbp
nop
ret
xor eax, eax
add rsp, 0x4e0
pop rbp
ret
mov eax, 1
add rsp, 0x4e0
pop rbp
ret
mov eax, 1
add rsp, 0x4e0
pop rbp
ret
call fcn.1ebb99b80
jmp fcn.1ebcb7a60