Function at 0x140009dcc
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
sub rsp, 0xb8
mov byte [rsp + 0x58], 0xc7
mov byte [rsp + 0x59], 0x40
mov byte [rsp + 0x5a], 0x64
mov byte [rsp + 0x5b], 1
mov byte [rsp + 0x5c], 0
mov byte [rsp + 0x5d], 0
mov byte [rsp + 0x5e], 0
mov byte [rsp + 0x5f], 0x8b
mov byte [rsp + 0x60], 0x48
mov byte [rsp + 0x61], 0x64
mov byte [rsp + 0x62], 0x41
mov byte [rsp + 0x63], 0x89
mov byte [rsp + 0x64], 0x4c
mov byte [rsp + 0x65], 0x24
mov byte [rsp + 0x66], 0x2c
mov byte [rsp + 0x48], 0xc7
mov byte [rsp + 0x49], 0x40
mov byte [rsp + 0x4a], 0x64
mov byte [rsp + 0x4b], 1
mov byte [rsp + 0x4c], 0
mov byte [rsp + 0x4d], 0
mov byte [rsp + 0x4e], 0
mov byte [rsp + 0x4f], 0x8b
mov byte [rsp + 0x50], 0x48
mov byte [rsp + 0x51], 0x64
mov byte [rsp + 0x52], 0x89
mov byte [rsp + 0x53], 0x4b
mov byte [rsp + 0x54], 0xa8
mov byte [rsp + 0x40], 0x8b
mov byte [rsp + 0x41], 0x48
mov byte [rsp + 0x42], 0x64
mov byte [rsp + 0x43], 0x41
mov byte [rsp + 0x44], 0x89
mov byte [rsp + 0x45], 0x4c
mov byte [rsp + 0x46], 0x24
mov byte [rsp + 0x47], 0x2c
mov byte [rsp + 0x34], 0x8b
mov byte [rsp + 0x35], 0x48
mov byte [rsp + 0x36], 0x64
mov byte [rsp + 0x37], 0x89
mov byte [rsp + 0x38], 0x4b
mov byte [rsp + 0x39], 0xa8
mov rax, qword [rsp + 0xc0]
mov eax, dword [rax + 0xc]
mov dword [rsp + 0x30], eax
mov r9d, 0x100
mov r8, qword [0x1400cac40]
mov edx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0xc0]
call fcn.14008db50
mov r9d, 0x100
mov r8, qword [0x1400cab98]
mov edx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0xc0]
call fcn.14008db50
mov r9d, 0x100
mov r8, qword [0x1400cac60]
mov edx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0xc0]
call fcn.14008db50
mov r9d, 0x100
mov r8, qword [0x1400cac20]
mov edx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0xc0]
call fcn.14008db50
lea rax, [rsp + 0x68]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 3
lea r8, [rsp + 0x70]
mov rdx, qword [0x1400cab98]
mov rcx, qword [0x1400cac40]
call fcn.140008460
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
lea r8, [rsp + 0x80]
mov rdx, qword [0x1400cac20]
mov rcx, qword [0x1400cac60]
call fcn.140008460
mov rax, qword [0x1400cab98]
add rax, 0xf
lea rcx, [rsp + 0x88]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
xor r9d, r9d
lea r8, [rsp + 0x90]
mov rdx, qword [0x1400cac40]
mov rcx, rax
call fcn.140008460
mov rax, qword [0x1400cac20]
add rax, 0xd
lea rcx, [rsp + 0x98]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
xor r9d, r9d
lea r8, [rsp + 0xa0]
mov rdx, qword [0x1400cac60]
mov rcx, rax
call fcn.140008460
cmp dword [rsp + 0xc8], 0
je 0x14000a124
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x70]
mov r8, qword [0x1400cac40]
mov edx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0xc0]
call fcn.14008d9c0
mov qword [rsp + 0x20], 0xf
lea r9, [rsp + 0x58]
mov r8, qword [0x1400cab98]
mov edx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0xc0]
call fcn.14008d9c0
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x80]
mov r8, qword [0x1400cac60]
mov edx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0xc0]
call fcn.14008d9c0
mov qword [rsp + 0x20], 0xd
lea r9, [rsp + 0x48]
mov r8, qword [0x1400cac20]
mov edx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0xc0]
call fcn.14008d9c0
mov rax, qword [0x1400cab98]
add rax, 0xf
mov rcx, qword [rsp + 0x88]
mov qword [rsp + 0x20], rcx
mov r9, qword [rsp + 0x90]
mov r8, rax
mov edx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0xc0]
call fcn.14008d9c0
mov rax, qword [0x1400cac20]
add rax, 0xd
mov rcx, qword [rsp + 0x98]
mov qword [rsp + 0x20], rcx
mov r9, qword [rsp + 0xa0]
mov r8, rax
mov edx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0xc0]
call fcn.14008d9c0
jmp 0x14000a208
mov qword [rsp + 0x20], 8
lea r9, [rsp + 0x40]
mov r8, qword [0x1400cac40]
mov edx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0xc0]
call fcn.14008d9c0
mov qword [rsp + 0x20], 6
lea r9, [rsp + 0x34]
mov r8, qword [0x1400cac60]
mov edx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0xc0]
call fcn.14008d9c0
mov dword [rsp + 0x20], pe_nt_image_headers64
mov r9d, 4
mov r8, qword [0x1400cac40]
mov edx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0xc0]
call fcn.14008da98
mov dword [rsp + 0x20], pe_nt_image_headers64
mov r9d, 4
mov r8, qword [0x1400cab98]
mov edx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0xc0]
call fcn.14008da98
mov dword [rsp + 0x20], pe_nt_image_headers64
mov r9d, 4
mov r8, qword [0x1400cac60]
mov edx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0xc0]
call fcn.14008da98
mov dword [rsp + 0x20], pe_nt_image_headers64
mov r9d, 4
mov r8, qword [0x1400cac20]
mov edx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0xc0]
call fcn.14008da98
mov eax, 1
add rsp, 0xb8
ret