Function at 0x7ff76836a430
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xe0
mov rax, qword [0x7ff7684b2040]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov rsi, rdx
mov r15, rcx
mov qword [rbp - 9], rcx
mov qword [rbp - 0x19], rdx
xor r12d, r12d
mov dword [rbp - 0x41], r12d
mov qword [rbp - 9], r12
lea rax, [0x7ff7684b20b8]
mov qword [rbp - 1], rax
lea rdx, [rbp - 9]
lea rcx, [rbp - 0x61]
call fcn.7ff768363110
mov dword [rbp - 0x41], 2
cmp dword [rbp - 9], r12d
jne 0x7ff76836a9f6
lea rax, [rbp - 0x61]
cmp qword [rbp - 0x49], 7
cmova rax, qword [rbp - 0x61]
mov qword [rbp - 9], rax
mov rax, qword [rbp - 0x51]
mov qword [rbp - 1], rax
call fcn.7ff7683b846c
movaps xmm0, xmmword [rbp - 9]
movdqa xmmword [rbp - 9], xmm0
lea r8, [rbp - 9]
mov edx, eax
lea rcx, [rbp - 0x39]
call fcn.7ff768367dd0
mov rdx, qword [0x7ff7684ca7d0]
cmp rdx, 0xf
jbe 0x7ff76836a510
mov rcx, qword [0x7ff7684ca7b8]
inc rdx
cmp rdx, 0x1000
jb 0x7ff76836a50b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x7ff76836a575
mov rcx, r8
call fcn.7ff7683b8ef8
movups xmm0, xmmword [rbp - 0x39]
movups xmmword [0x7ff7684ca7b8], xmm0
movups xmm1, xmmword [rbp - 0x29]
movups xmmword [0x7ff7684ca7c8], xmm1
movdqa xmm0, xmmword [0x7ff7684a6550]
movdqu xmmword [rbp - 0x29], xmm0
mov byte [rbp - 0x39], 0
mov rdx, qword [rbp - 0x49]
cmp rdx, 7
jbe 0x7ff76836a581
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff76836a57c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff76836a57c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.7ff7683b8ef8
mov dword [rbp - 9], 0x69622e43
mov word [rbp - 5], 0x6e
lea rcx, [rsp + 0x20]
call fcn.7ff768369990
mov rbx, rax
mov r8, qword [rax + 0x10]
mov qword [rax + 0x10], r8
mov rdi, rax
cmp qword [rax + 0x18], 0xf
jbe 0x7ff76836a5b0
mov rdi, qword [rax]
lea r13, [0x7ff7683bbd29]
cmp r13, rdi
jbe 0x7ff76836a5d2
lea rax, [rdi + r8]
cmp r13, rax
ja 0x7ff76836a5d2
cmp rdi, r13
jbe 0x7ff76836a5d2
mov r14, rdi
sub r14, r13
jmp 0x7ff76836a5d5
mov r14, r12
inc r8
mov rdx, rdi
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
mov rdx, r13
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rdi + r14]
mov r8, r14
neg r8
lea rdx, [r14 + r13]
call sub.VCRUNTIME140.dll_memcpy
xorps xmm0, xmm0
movups xmmword [rbp - 0x61], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x51], xmm1
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x61], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x51], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
lea rax, [rbp - 8]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x7ff76836a640
lea rdx, [rbp - 8]
lea rcx, [rbp - 0x61]
call fcn.7ff768367470
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x39], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x29], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp - 0x39]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
movq r8, xmm1
lea rcx, [0x7ff7684ca7b8]
call fcn.7ff768367470
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 0xf
jbe 0x7ff76836a6e5
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff76836a6df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff76836a6df
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7683b8ef8
nop
mov rdx, qword [rbp - 0x49]
cmp rdx, 0xf
jbe 0x7ff76836a723
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff76836a71e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff76836a71e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7683b8ef8
movdqa xmm0, xmmword [0x7ff7684a6550]
movdqu xmmword [rbp - 0x51], xmm0
mov byte [rbp - 0x61], 0
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x7ff76836a774
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff76836a76f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff76836a76f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7683b8ef8
lea rdx, [0x7ff7684ca7b8]
mov rcx, rsi
call fcn.7ff768364f80
test al, al
je 0x7ff76836a80e
lea rdx, [0x7ff7684ca7b8]
mov rcx, r15
call fcn.7ff768367590
nop
mov rdx, qword [rsi + 0x18]
cmp rdx, 0xf
jbe 0x7ff76836a7d5
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x7ff76836a7d0
add rdx, 0x27
mov rax, qword [rcx - 8]
sub rcx, rax
add rcx, 0xfffffffffffffff8
cmp rcx, 0x1f
ja 0x7ff76836a9ef
mov rcx, rax
call fcn.7ff7683b8ef8
mov rax, r15
mov byte [rsi], 0
mov qword [rsi + 0x18], 0xf
mov qword [rsi + 0x10], r12
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.7ff7683b8c00
mov rbx, qword [rsp + 0x130]
add rsp, 0xe0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
movdqa xmm0, xmmword [0x7ff7684a6c70]
movdqu xmmword [rbp - 9], xmm0
mov dword [rbp + 7], 0x2064616f
mov dword [rbp + 0xb], 0x656c6966
mov word [rbp + 0xf], 0x21
lea rdx, [rbp - 8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.7ff7683682a0
lea rdx, [0x7ff768368470]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov cl, 0x76
mov word [rbp - 9], 0x76
movsx ecx, cl
movzx eax, cx
xor ax, 0x33
mov word [rbp - 7], ax
movzx eax, cx
xor ax, 4
mov word [rbp - 5], ax
mov word [rbp - 3], ax
xor cx, 0x19
mov word [rbp - 1], cx
mov word [rbp + 1], ax
mov word [rbp + 3], r12w
mov cl, 0x53
mov word [rsp + 0x20], 0x53
movsx edi, cl
movzx eax, di
xor ax, 0x15
mov word [rsp + 0x22], ax
movzx r11d, di
xor r11w, 0x32
mov word [rsp + 0x24], r11w
movzx ebx, di
xor bx, 0x3a
mov word [rsp + 0x26], bx
movzx r10d, di
xor r10w, 0x3f
mov word [rsp + 0x28], r10w
movzx r9d, di
xor r9w, 0x36
mov word [rsp + 0x2a], r9w
movzx r8d, di
xor r8w, 0x37
mov word [rsp + 0x2c], r8w
movzx edx, di
xor dx, 0x73
mov word [rsp + 0x2e], dx
movzx eax, di
xor ax, 0x27
mov word [rsp + 0x30], ax
movzx ecx, di
xor cx, 0x3c
mov word [rsp + 0x32], cx
mov word [rsp + 0x34], dx
mov word [rsp + 0x36], r8w
mov word [rsp + 0x38], cx
movzx eax, di
xor ax, 0x24
mov word [rbp - 0x7f], ax
movzx eax, di
xor ax, 0x3d
mov word [rbp - 0x7d], ax
mov word [rbp - 0x7b], r10w
mov word [rbp - 0x79], cx
mov word [rbp - 0x77], r11w
mov word [rbp - 0x75], r8w
mov word [rbp - 0x73], dx
movzx eax, di
xor ax, 0x35
mov word [rbp - 0x71], ax
mov word [rbp - 0x6f], bx
mov word [rbp - 0x6d], r10w
mov word [rbp - 0x6b], r9w
xor di, 0x72
mov word [rbp - 0x69], di
mov word [rbp - 0x67], r12w
xor r9d, r9d
lea r8, [rbp - 7]
lea rdx, [rsp + 0x22]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rax, [0x7ff7684ca7b8]
cmp qword [0x7ff7684ca7d0], 0xf
cmova rax, qword [0x7ff7684ca7b8]
mov qword [0x7ff7684ca7c8], r12
mov byte [rax], 0
lea rdx, [0x7ff7684ca7b8]
mov rcx, r15
call fcn.7ff768367590
nop
mov rdx, qword [rsi + 0x18]
cmp rdx, 0xf
jbe 0x7ff76836a7d5
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x7ff76836a7d0
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x7ff76836a9ef
mov rcx, r8
jmp 0x7ff76836a7d0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea r8, [rbp - 0x61]
lea rdx, [rbp - 9]
call fcn.7ff768362ce0
int3