Function at 0x1400421c4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov byte [rsp + 0x28d], 0x72
mov byte [rsp + 0x28e], 0x20
mov byte [rsp + 0x28f], 0x70
mov byte [rsp + 0x290], 0x72
mov byte [rsp + 0x291], 0x69
mov byte [rsp + 0x292], 0x76
mov byte [rsp + 0x293], 0x69
jmp 0x140044b64
mov byte [rsp + 0x21b], 0x6f
mov byte [rsp + 0x21c], 0x72
mov byte [rsp + 0x21d], 0x6d
mov byte [rsp + 0x21e], 0x61
mov byte [rsp + 0x21f], 0x74
mov byte [rsp + 0x220], 0x69
mov byte [rsp + 0x221], 0x6f
jmp 0x140042153
mov byte [rsp + 0xbf], 0x46
mov byte [rsp + 0xc0], 0x72
mov byte [rsp + 0xc1], 0x65
mov byte [rsp + 0xc2], 0x65
mov byte [rsp + 0xc3], 0
mov byte [rsp + 0x178], 0x56
mov byte [rsp + 0x179], 0x69
jmp 0x1400417ee
mov rax, qword [rsp + 0x2c0]
lea rcx, [rsp + 0x5c]
mov byte [rsp + 0x208], 0x6e
mov byte [rsp + 0x209], 0x66
mov byte [rsp + 0x20a], 0x6f
mov byte [rsp + 0x20b], 0
mov byte [rsp + 0x1a8], 0x47
mov byte [rsp + 0x1a9], 0x65
mov byte [rsp + 0x1aa], 0x74
jmp 0x140044573
mov byte [rsp + 0xd0], 0x6c
mov byte [rsp + 0xd1], 0x65
mov byte [rsp + 0xd2], 0x41
mov byte [rsp + 0xd3], 0
mov byte [rsp + 0xd8], 0x43
mov byte [rsp + 0xd9], 0x6c
mov byte [rsp + 0xda], 0x6f
jmp 0x140045328
lea r8, [rsp + 0x360]
lea rdx, [rsp + 0x330]
mov rcx, qword [rsp + 0x2c8]
call fcn.1400464c0
jmp 0x140041fcd
mov byte [rsp + 0x199], 0x65
mov byte [rsp + 0x19a], 0x74
mov byte [rsp + 0x19b], 0x50
mov byte [rsp + 0x19c], 0x72
mov byte [rsp + 0x19d], 0x6f
mov byte [rsp + 0x19e], 0x63
mov byte [rsp + 0x19f], 0x41
jmp 0x140043c9d
mov byte [rsp + 0x17a], 0x72
mov byte [rsp + 0x17b], 0x74
mov byte [rsp + 0x17c], 0x75
mov byte [rsp + 0x17d], 0x61
add byte [rcx - 0x3a], ah
test byte [rsi + rdi*2], ah
add dword [rax], eax
add byte [rsi + rax*8 - 0x7c], ch
and al, 0x7f
add dword [rax], eax
add byte [rax - 0x3a], dl
test byte [rax + rax*4], ah
add dword [rax], eax
add byte [rdx - 0x17], dh
sbb bl, byte [rax + rax]
mov byte [rsp + 0xb8], 0x56
mov byte [rsp + 0xb9], 0x69
mov byte [rsp + 0xba], 0x72
mov byte [rsp + 0xbb], 0x74
mov byte [rsp + 0xbc], 0x75
mov byte [rsp + 0xbd], 0x61
mov byte [rsp + 0xbe], 0x6c
jmp 0x14004127c
mov byte [rsp + 0x15d], 0x69
mov byte [rsp + 0x15e], 0x62
mov byte [rsp + 0x15f], 0x72
mov byte [rsp + 0x160], 0x61
mov byte [rsp + 0x161], 0x72
mov byte [rsp + 0x162], 0x79
mov byte [rsp + 0x163], 0x57
jmp 0x140047098
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, [rsp + 0x128]
call qword [rsp + 0x378]
mov qword [rsp + 0x2c8], rax
jmp 0x140046330
mov qword [rsp + 0x380], rax
lea rdx, [rsp + 0x78]
mov rcx, qword [rsp + 0x40]
call fcn.1400410a6
jmp 0x14004700a
mov byte [rsp + 0x1d3], 0x54
mov byte [rsp + 0x1d4], 0x6f
mov byte [rsp + 0x1d5], 0x6b
mov byte [rsp + 0x1d6], 0x65
mov byte [rsp + 0x1d7], 0x6e
mov byte [rsp + 0x1d8], 0
mov byte [rsp + 0x1e0], 0x47
jmp 0x140043ba2
mov byte [rsp + 0x2a9], 0x61
mov byte [rsp + 0x2aa], 0x64
mov byte [rsp + 0x2ab], 0x6d
mov byte [rsp + 0x2ac], 0x69
mov byte [rsp + 0x2ad], 0x6e
mov byte [rsp + 0x2ae], 0x69
mov byte [rsp + 0x2af], 0x73
jmp 0x140042ac5
mov qword [rsp + 0x368], rax
lea rdx, [rsp + 0x178]
mov byte [rsp + 0x222], 0x6e
mov byte [rsp + 0x223], 0
mov byte [rsp + 0x108], 0x47
mov byte [rsp + 0x109], 0x65
mov byte [rsp + 0x10a], 0x74
mov byte [rsp + 0x10b], 0x46
mov byte [rsp + 0x10c], 0x69
jmp 0x14004695b
mov qword [rsp + 0x3b0], rax
lea rdx, [rsp + 0x1f8]
mov rcx, qword [rsp + 0x40]
call fcn.1400410a6
jmp 0x140047029
sub rsp, 0x428
mov eax, 0x6b
mov word [rsp + 0x310], ax
mov eax, 0x65
mov word [rsp + 0x312], ax
mov eax, 0x72
mov word [rsp + 0x314], ax
mov eax, 0x6e
jmp 0x140042706
mov byte [rsp + 0x263], 0x6f
mov byte [rsp + 0x264], 0x72
mov byte [rsp + 0x265], 0x3a
mov byte [rsp + 0x266], 0x20
mov byte [rsp + 0x267], 0x54
mov byte [rsp + 0x268], 0x68
mov byte [rsp + 0x269], 0x69
jmp 0x140043608
lea r8, [rsp + 0x4c]
lea rdx, [rsp + 0x260]
xor ecx, ecx
call qword [rsp + 0x3b8]
jmp 0x140041fcd
mov qword [rsp + 0x3d0], rax
lea rdx, [rsp + 0xf8]
mov rcx, qword [rsp + 0x40]
call fcn.1400410a6
jmp 0x140042a3b
mov byte [rsp + 0x236], 0x6c
mov byte [rsp + 0x237], 0x65
mov byte [rsp + 0x238], 0x54
mov byte [rsp + 0x239], 0x69
mov byte [rsp + 0x23a], 0x6d
mov byte [rsp + 0x23b], 0x65
mov byte [rsp + 0x23c], 0
jmp 0x140046dab
mov byte [rsp + 0x194], 0x65
mov byte [rsp + 0x195], 0x72
mov byte [rsp + 0x196], 0
mov byte [rsp + 0x148], 0x4c
mov byte [rsp + 0x149], 0x6f
mov byte [rsp + 0x14a], 0x61
mov byte [rsp + 0x14b], 0x64
jmp 0x1400467af
mov byte [rsp + 0x5c], 0x5f
mov byte [rsp + 0x5d], 0x30
mov byte [rsp + 0x5e], 0x2e
mov byte [rsp + 0x5f], 0x64
mov byte [rsp + 0x60], 0x61
mov byte [rsp + 0x61], 0x74
mov byte [rsp + 0x62], 0
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x2c0], rax
dec qword [rsp + 0x2c0]
jmp 0x1400478da
mov rcx, qword [rsp + 0x350]
call qword [rsp + 0x380]
call qword [rsp + 0x3c8]
mov r8, qword [rsp + 0x70]
xor edx, edx
mov rcx, rax
call qword [rsp + 0x3e0]
call qword [rsp + 0x3c8]
mov r8, qword [rsp + 0x340]
jmp 0x140047789
mov byte [rsp + 0x1e8], 0x6e
mov byte [rsp + 0x1e9], 0x74
mov byte [rsp + 0x1ea], 0x50
mov byte [rsp + 0x1eb], 0x72
mov byte [rsp + 0x1ec], 0x6f
mov byte [rsp + 0x1ed], 0x63
mov byte [rsp + 0x1ee], 0x65
jmp 0x140042bab
mov word [rsp + 0x316], ax
mov eax, 0x65
mov word [rsp + 0x318], ax
mov eax, 0x6c
mov word [rsp + 0x31a], ax
mov eax, 0x33
mov word [rsp + 0x31c], ax
mov eax, 0x32
jmp 0x1400470e4
mov qword [rsp + 0x3a0], rax
lea rdx, [rsp + 0x198]
mov rcx, qword [rsp + 0x40]
call fcn.1400410a6
jmp 0x14004547d
lea rcx, [rsp + 0x2d8]
call qword [rsp + 0x3a0]
mov qword [rsp + 0x338], rax
lea rdx, [rsp + 0x118]
mov rcx, qword [rsp + 0x338]
call fcn.1400410a6
jmp 0x140047529
mov qword [rsp + 0x3d8], rax
lea rdx, [rsp + 0x88]
mov rcx, qword [rsp + 0x40]
call fcn.1400410a6
jmp 0x140047585
mov byte [rsp + 0x2b0], 0x74
mov byte [rsp + 0x2b1], 0x72
mov byte [rsp + 0x2b2], 0x61
mov byte [rsp + 0x2b3], 0x74
mov byte [rsp + 0x2b4], 0x6f
mov byte [rsp + 0x2b5], 0x72
xor r9d, r9d
jmp 0x140042339
mov byte [rsp + 0x69], 0x74
mov byte [rsp + 0x6a], 0
lea rdx, [rsp + 0x64]
mov rcx, qword [rsp + 0x348]
call fcn.140043856
jmp 0x140042daa
mov byte [rsp + 0x1ef], 0x73
mov byte [rsp + 0x1f0], 0x73
mov byte [rsp + 0x1f1], 0
mov byte [rsp + 0x210], 0x47
mov byte [rsp + 0x211], 0x65
mov byte [rsp + 0x212], 0x74
mov byte [rsp + 0x213], 0x54
jmp 0x140045bd0
mov eax, dword [rsp + 0x48]
inc eax
mov dword [rsp + 0x48], eax
movsxd rax, dword [rsp + 0x48]
mov rcx, qword [rsp + 0x70]
movsx eax, byte [rcx + rax]
test eax, eax
jne 0x140044eb6
jmp 0x1400424fa
mov byte [rsp + 0xc9], 0x72
mov byte [rsp + 0xca], 0x65
mov byte [rsp + 0xcb], 0x61
mov byte [rsp + 0xcc], 0x74
mov byte [rsp + 0xcd], 0x65
mov byte [rsp + 0xce], 0x46
mov byte [rsp + 0xcf], 0x69
jmp 0x140041578
test rax, rax
jne 0x140042537
jmp 0x1400460f2
mov word [rsp + 0x2f6], ax
mov eax, 0x70
mov word [rsp + 0x2f8], ax
mov eax, 0x69
mov word [rsp + 0x2fa], ax
mov eax, 0x33
mov word [rsp + 0x2fc], ax
mov eax, 0x32
jmp 0x140045dac
mov qword [rsp + 0x418], rax
cmp qword [rsp + 0x338], 0
je 0x1400429fd
jmp 0x140046bb3
mov rcx, qword [rsp + 0x348]
call fcn.14004114c
jmp 0x1400439ba
mov byte [rsp + 0x2a2], 0x72
mov byte [rsp + 0x2a3], 0x75
mov byte [rsp + 0x2a4], 0x6e
mov byte [rsp + 0x2a5], 0x20
mov byte [rsp + 0x2a6], 0x61
mov byte [rsp + 0x2a7], 0x73
mov byte [rsp + 0x2a8], 0x20
jmp 0x140041f58
mov byte [rsp + 0x153], 0x41
mov byte [rsp + 0x154], 0
mov byte [rsp + 0x158], 0x4c
mov byte [rsp + 0x159], 0x6f
mov byte [rsp + 0x15a], 0x61
mov byte [rsp + 0x15b], 0x64
mov byte [rsp + 0x15c], 0x4c
jmp 0x140041b3a
mov qword [rsp + 0x398], rax
lea rdx, [rsp + 0x158]
mov rcx, qword [rsp + 0x40]
call fcn.1400410a6
jmp 0x14004294f
mov qword [rsp + 0x400], rax
lea rcx, [rsp + 0x360]
call fcn.140044780
jmp 0x1400459e8
mov qword [rsp + 0x410], rax
lea rdx, [rsp + 0x168]
mov rcx, qword [rsp + 0x40]
call fcn.1400410a6
jmp 0x140043139
mov byte [rsp + 0x26a], 0x73
mov byte [rsp + 0x26b], 0x20
mov byte [rsp + 0x26c], 0x61
mov byte [rsp + 0x26d], 0x70
mov byte [rsp + 0x26e], 0x70
mov byte [rsp + 0x26f], 0x6c
mov byte [rsp + 0x270], 0x69
jmp 0x140047c3d
mov byte [rsp + 0xaf], 0x61
mov byte [rsp + 0xb0], 0x5c
mov byte [rsp + 0xb1], 0
mov byte [rsp + 0x64], 0x2d
mov byte [rsp + 0x65], 0x2d
mov byte [rsp + 0x66], 0x74
mov byte [rsp + 0x67], 0x65
mov byte [rsp + 0x68], 0x73
jmp 0x140042b53
mov byte [rsp + 0x128], 0x70
mov byte [rsp + 0x129], 0x61
mov byte [rsp + 0x12a], 0x74
mov byte [rsp + 0x12b], 0x63
mov byte [rsp + 0x12c], 0x68
mov byte [rsp + 0x12d], 0x5f
mov byte [rsp + 0x12e], 0x30
jmp 0x1400445b0
mov qword [rsp + 0x408], rax
lea rdx, [rsp + 0x228]
mov rcx, qword [rsp + 0x40]
call fcn.1400410a6
jmp 0x1400434fd
mov byte [rsp + 0x1e1], 0x65
mov byte [rsp + 0x1e2], 0x74
mov byte [rsp + 0x1e3], 0x43
mov byte [rsp + 0x1e4], 0x75
mov byte [rsp + 0x1e5], 0x72
mov byte [rsp + 0x1e6], 0x72
mov byte [rsp + 0x1e7], 0x65
jmp 0x140042598
mov byte [rsp + 0x1a0], 0x64
mov byte [rsp + 0x1a1], 0x64
mov byte [rsp + 0x1a2], 0x72
mov byte [rsp + 0x1a3], 0x65
mov byte [rsp + 0x1a4], 0x73
mov byte [rsp + 0x1a5], 0x73
mov byte [rsp + 0x1a6], 0
mov byte [rsp + 0x118], 0x4d
mov byte [rsp + 0x119], 0x65
mov byte [rsp + 0x11a], 0x73
mov byte [rsp + 0x11b], 0x73
mov byte [rsp + 0x11c], 0x61
mov byte [rsp + 0x11d], 0x67
mov byte [rsp + 0x11e], 0x65
jmp 0x14004596e
jmp 0x140041fcd
movsxd rax, dword [rsp + 0x48]
mov rcx, qword [rsp + 0x70]
movsx eax, byte [rcx + rax]
test eax, eax
jne 0x140044eb6
jmp 0x1400424fa
mov byte [rsp + 0x16f], 0x65
mov byte [rsp + 0x170], 0x6d
mov byte [rsp + 0x171], 0x54
mov byte [rsp + 0x172], 0x69
mov byte [rsp + 0x173], 0x6d
mov byte [rsp + 0x174], 0x65
mov byte [rsp + 0x175], 0
jmp 0x140044167
mov byte [rsp + 0x286], 0x69
mov byte [rsp + 0x287], 0x73
mov byte [rsp + 0x288], 0x74
mov byte [rsp + 0x289], 0x72
mov byte [rsp + 0x28a], 0x61
mov byte [rsp + 0x28b], 0x74
mov byte [rsp + 0x28c], 0x6f
jmp 0x1400410fe
lea rdx, [rsp + 0x1c8]
mov rcx, qword [rsp + 0x2d0]
call fcn.1400410a6
jmp 0x1400455af
mov byte [rsp + 0x29b], 0x50
mov byte [rsp + 0x29c], 0x6c
mov byte [rsp + 0x29d], 0x65
mov byte [rsp + 0x29e], 0x61
mov byte [rsp + 0x29f], 0x73
mov byte [rsp + 0x2a0], 0x65
mov byte [rsp + 0x2a1], 0x20
jmp 0x14004327f
mov byte [rsp + 0x7f], 0x65
mov byte [rsp + 0x80], 0
mov byte [rsp + 0x188], 0x53
mov byte [rsp + 0x189], 0x65
mov byte [rsp + 0x18a], 0x74
mov byte [rsp + 0x18b], 0x46
mov byte [rsp + 0x18c], 0x69
jmp 0x140044732
lea rdx, [rsp + 0x138]
mov rcx, qword [rsp + 0x40]
call fcn.1400410a6
jmp 0x1400441b4
mov qword [rsp + 0x360], rax
lea rdx, [rsp + 0xb8]
mov rcx, qword [rsp + 0x40]
call fcn.1400410a6
jmp 0x1400420b8
mov word [rsp + 0x326], ax
xor eax, eax
mov word [rsp + 0x328], ax
mov eax, 0x75
mov word [rsp + 0x2d8], ax
mov eax, 0x73
mov word [rsp + 0x2da], ax
mov eax, 0x65
jmp 0x140045745
mov byte [rsp + 0xa1], 0
mov byte [rsp + 0xf8], 0x48
mov byte [rsp + 0xf9], 0x65
mov byte [rsp + 0xfa], 0x61
mov byte [rsp + 0xfb], 0x70
mov byte [rsp + 0xfc], 0x52
mov byte [rsp + 0xfd], 0x65
jmp 0x140047660
mov qword [rsp + 0x338], rax
lea rcx, [rsp + 0x2f0]
call fcn.140046d62
jmp 0x140045f55
mov byte [rsp + 0x1ab], 0x50
mov byte [rsp + 0x1ac], 0x72
mov byte [rsp + 0x1ad], 0x6f
mov byte [rsp + 0x1ae], 0x63
mov byte [rsp + 0x1af], 0x65
mov byte [rsp + 0x1b0], 0x73
mov byte [rsp + 0x1b1], 0x73
jmp 0x14004726d
mov byte [rsp + 0x12f], 0x2e
mov byte [rsp + 0x130], 0x64
mov byte [rsp + 0x131], 0x61
mov byte [rsp + 0x132], 0x74
mov byte [rsp + 0x133], 0
mov qword [rsp + 0x30], 0
jmp 0x140041c63
lea r8, [rsp + 0x360]
invalid
invalid
xchg esp, eax
and al, 0x50
add eax, dword [rax]