Function at 0x1400092c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
jmp 0x1400092c0
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0x100
mov rax, qword [0x140017d30]
xor rax, rsp
mov qword [rbp + 0x2f], rax
movdqa xmm0, xmmword [0x140013b80]
lea r15, [0x140000000]
xor ebx, ebx
movsx edi, cx
mov ecx, 0x71
mov dword [rsp + 0x2c], 0x3f003f
mov eax, 0x1a
mov word [rsp + 0x30], cx
mov word [rsp + 0x40], ax
lea rsi, [r15 + 0x16250]
mov eax, 0x79
mov dword [rsp + 0x24], 0x22003f
lea r13d, [rcx - 0x13]
mov word [rbp + 7], ax
movdqu xmmword [rbp + 0xf], xmm0
lea eax, [rdi - 1]
mov r12d, pe_nt_image_headers64
movdqa xmm0, xmmword [0x140013ba0]
movsxd rcx, eax
movdqu xmmword [rbp + 0x1f], xmm0
lea r14d, [r12 + 8]
mov word [rsp + 0x28], bx
movdqa xmm0, xmmword [0x140013bc0]
lea rsi, [rsi + rcx*8]
mov dword [rsp + 0x48], 0xd6005e
movsx ecx, word [rsi]
mov dword [rbp - 0x7d], 0x710108
mov dword [rbp - 0x69], 0x56005e
mov dword [rbp - 0x65], 0x220108
mov word [rbp - 0x61], bx
mov dword [rsp + 0x3c], 0x3e0016
mov dword [rsp + 0x34], 0xe20016
mov word [rsp + 0x38], bx
mov dword [rbp - 0x59], 0x58007e
mov dword [rbp - 0x55], 0x2b0108
mov word [rbp - 0x51], bx
mov dword [rbp - 0x79], 0x8c005e
mov dword [rbp - 0x75], 0x760108
mov dword [rbp - 0x49], 0x64005e
mov dword [rbp - 0x45], 0x920108
mov word [rbp - 0x41], bx
mov dword [rbp - 0x71], 0x88005e
mov dword [rbp - 0x6d], 0x760108
mov dword [rbp - 0x29], 0x64005e
mov dword [rbp - 0x25], 0x400108
mov dword [rbp - 0x21], 0x76
mov dword [rbp - 0x39], 0x640110
mov dword [rbp - 0x35], 0x2b0108
mov word [rbp - 0x31], bx
mov dword [rbp - 0x19], 0x7e0009
mov dword [rbp - 0x15], 0x1080056
mov dword [rbp - 0x11], 0x2b
movdqu xmmword [rbp - 9], xmm0
test ecx, ecx
je 0x140009f74
sub ecx, 1
je 0x140009eeb
sub ecx, 1
je 0x140009e09
sub ecx, 1
je 0x1400094e6
cmp ecx, 1
jne 0x140009c5a
cmp byte [0x140019888], bl
jne 0x140009edd
cmp byte [0x140019887], bl
mov byte [0x140019888], cl
je 0x140009484
lea ecx, [r12 - 1]
mov byte [0x140019887], bl
call fcn.14000141a
jmp 0x1400094ce
cmp byte [0x140019889], bl
jne 0x140009fbc
movzx ebx, byte [0x140019884]
test bl, bl
je 0x1400094b4
movsx rax, word [0x14001988c]
cmp word [r15 + rax*2 + 0x197fe], 0
jge 0x1400094b4
call fcn.140001424
cmp byte [0x1400181f9], 0
jne 0x1400094c9
test bl, bl
je 0x1400094c9
mov ecx, r13d
call fcn.140001514
call fcn.14000150f
mov ecx, 0x109
call fcn.14000141a
movzx ecx, dil
call fcn.1400010c3
jmp 0x140009c5a
cmp byte [0x140019887], bl
je 0x1400094fb
mov byte [0x140019887], bl
mov ecx, 0x107
jmp 0x14000950c
cmp byte [0x140019888], bl
je 0x140009511
mov byte [0x140019888], bl
mov ecx, r12d
call fcn.14000141a
movsx ecx, word [rsi + 2]
test ecx, ecx
je 0x140009c87
sub ecx, 1
je 0x140009b5c
sub ecx, 1
je 0x14000967a
cmp ecx, 1
jne 0x140009c5a
cmp byte [0x140019889], bl
jne 0x140009fbc
movzx ebx, byte [0x140019884]
test bl, bl
je 0x140009568
movsx rcx, word [0x14001988c]
cmp word [r15 + rcx*2 + 0x197fe], 0
jge 0x14000956f
call fcn.140001424
movzx ecx, word [0x14001988c]
cmp edi, 0x4d
jne 0x1400095f8
cmp byte [0x140019886], 0
movsx rax, cx
je 0x1400095a1
cmp byte [0x140019885], 0
mov edx, 0x10e
mov byte [0x140019886], 0
jne 0x1400095db
mov edx, 0x10a
jmp 0x1400095db
cmp word [r15 + rax*2 + 0x197fe], 0x49
jne 0x1400095c5
mov ecx, 0x12
mov word [r15 + rax*2 + 0x197fe], cx
call fcn.14000150f
jmp 0x140009c5a
cmp byte [0x140019885], 0
je 0x140009652
movsx rax, cx
mov edx, 0x10c
inc cx
mov word [r15 + rax*2 + 0x19800], dx
mov word [0x14001988c], cx
call fcn.14000150f
jmp 0x140009c5a
cmp edi, 0x5f
jne 0x140009607
test bl, bl
je 0x140009f88
jmp 0x140009627
cmp edi, 0x26
jne 0x140009639
cmp byte [0x14001987f], 0
jne 0x14000961f
test bl, bl
je 0x140009f95
jmp 0x140009627
test bl, bl
je 0x140009edd
mov ecx, r13d
call fcn.140001514
call fcn.14000150f
jmp 0x140009c5a
cmp edi, 0x2b
jne 0x140009652
test bl, bl
je 0x140009fbc
mov byte [0x140019889], 1
jmp 0x140009c5a
cmp byte [0x1400181f9], 0
jne 0x140009667
test bl, bl
je 0x140009667
mov ecx, r13d
call fcn.140001514
call fcn.14000150f
movzx ecx, word [rsi + 4]
call fcn.14000141a
jmp 0x140009c5a
cmp byte [0x140019881], bl
je 0x1400096bd
call fcn.14000150f
cmp byte [0x140019882], bl
je 0x1400096bd
lea rax, [0x140019600]
dec rax
nop dword [rax]
cmp byte [rax + 1], bl
lea rax, [rax + 1]
jne 0x1400096a0
movzx ecx, word [0x140013ad4]
mov word [rax], cx
movzx ecx, byte [0x140013ad6]
mov byte [rax + 2], cl
cmp byte [0x140019884], bl
jne 0x140009707
movsx rdx, word [0x14001988c]
movzx eax, word [rsi + 6]
mov word [0x140019890], ax
movzx eax, word [rsi + 4]
mov word [r15 + rdx*2 + 0x19800], ax
inc dx
mov word [0x14001988c], dx
mov byte [0x140019884], 1
call fcn.14000144c
mov byte [0x140019889], 0
jmp 0x140009c5a
movsx rax, word [0x140019890]
lea r9, [rax*8 + 0x16660]
add r9, r15
cmp word [0x140019800], 0x72
jne 0x14000975c
movzx eax, word [rsi + 4]
movsx rcx, word [0x14001988c]
mov byte [0x140019886], 1
mov word [r15 + rcx*2 + 0x197fe], ax
movzx eax, word [rsi + 6]
mov word [0x140019890], ax
call fcn.14000144c
mov byte [0x140019889], 0
jmp 0x140009c5a
movzx ecx, word [r9 + 2]
movzx r10d, byte [0x140019889]
movzx r8d, cx
add r8w, word [r9]
cmp cx, r8w
je 0x1400097a3
nop word [rax + rax]
movsx rax, cx
lea rdx, [rax*8]
movsx eax, byte [rdx + r15 + 0x168d0]
cmp ax, di
je 0x140009818
inc cx
cmp cx, r8w
jne 0x140009780
cmp edi, 0x72
jne 0x1400098f7
test r10b, r10b
jne 0x1400098f7
movzx r10d, word [r9 + 4]
movsx r8, word [0x14001988c]
test r10w, r10w
je 0x1400098cb
movzx eax, word [r15 + r8*2 + 0x197fe]
cmp r10w, 1
mov word [r15 + r8*2 + 0x19800], ax
mov eax, 0x7e
cmove r14w, ax
mov word [0x140019890], bx
mov word [r15 + r8*2 + 0x197fe], r14w
mov word [r15 + r8*2 + 0x19802], r12w
add r8w, 2
mov word [0x14001988c], r8w
jmp 0x140009a5f
cmp byte [rdx + r15 + 0x168d6], bl
je 0x1400097a3
test r10b, r10b
jne 0x1400097a3
movzx eax, word [rdx + r15 + 0x168d2]
movsx rcx, word [0x14001988c]
mov word [r15 + rcx*2 + 0x197fe], ax
movsx rax, word [rdx + r15 + 0x168d4]
mov word [0x140019890], ax
movzx eax, word [r15 + rax*8 + 0x16666]
mov word [0x14001987c], ax
test ax, ax
je 0x140009888
mov ebx, 1
mov word [0x140019840], ax
mov dword [0x1400181fc], ebx
mov byte [0x140019889], r10b
jmp 0x140009c5a
movsx rax, word [rsi + 6]
movzx edx, word [r15 + rax*8 + 0x16666]
mov word [0x14001987c], dx
test dx, dx
je 0x1400098b9
movsxd rcx, dword [0x1400181fc]
test ecx, ecx
je 0x1400098b9
mov word [r15 + rcx*2 + 0x19840], dx
lea ebx, [rcx + 1]
mov dword [0x1400181fc], ebx
mov byte [0x140019889], 0
jmp 0x140009c5a
mov ecx, 0x7d
mov dword [0x1400181fc], ebx
mov word [r15 + r8*2 + 0x19800], cx
inc r8w
mov word [0x14001988c], r8w
mov word [0x140019890], bx
jmp 0x140009a5f
movzx ecx, word [r9 + 6]
test cx, cx
je 0x140009934
test r10b, r10b
jne 0x140009934
movsx rdx, word [0x14001988c]
movzx eax, word [rsi + 4]
mov word [r15 + rdx*2 + 0x197fe], cx
mov word [r15 + rdx*2 + 0x19800], ax
movzx eax, word [rsi + 6]
mov word [0x140019890], ax
jmp 0x140009a50
mov r9d, dword [0x1400181fc]
test r9d, r9d
je 0x140009a10
movsx r10, word [0x14001988c]
movzx r8d, bx
cmp word [r15 + r10*2 + 0x197fe], r12w
je 0x1400099a2
test r9d, r9d
jle 0x14000998b
mov eax, ebx
add eax, r10d
movsx rdx, r8w
movsxd rcx, eax
inc r8w
movzx eax, word [r15 + rdx*2 + 0x19840]
mov word [r15 + rcx*2 + 0x197fe], ax
movsx eax, r8w
cmp eax, r9d
jl 0x140009962
movzx eax, word [rsi + 4]
add r10w, r9w
movsx rcx, r10w
mov word [r15 + rcx*2 + 0x197fe], ax
jmp 0x1400099fb
test r9d, r9d
jle 0x1400099d9
mov eax, ebx
nop dword [rax]
add eax, r10d
movsx rdx, r8w
movsxd rcx, eax
inc r8w
movzx eax, word [r15 + rdx*2 + 0x19840]
mov word [r15 + rcx*2 + 0x197fc], ax
movsx eax, r8w
cmp eax, r9d
jl 0x1400099b0
movzx eax, word [rsi + 4]
add r10w, r9w
movsx rcx, r10w
mov word [r15 + rcx*2 + 0x197fe], ax
movsx rax, r10w
mov word [r15 + rax*2 + 0x197fc], r12w
mov word [0x14001988c], r10w
movzx eax, word [rsi + 6]
mov word [0x140019890], ax
jmp 0x140009a5a
movsx rax, word [0x14001988c]
cmp word [r15 + rax*2 + 0x197fe], bx
jge 0x140009a28
call fcn.140001424
mov ecx, r13d
call fcn.140001514
movzx eax, word [rsi + 6]
movsx rdx, word [0x14001988c]
mov word [0x140019890], ax
movzx eax, word [rsi + 4]
mov word [r15 + rdx*2 + 0x19800], ax
inc dx
mov word [0x14001988c], dx
call fcn.14000144c
lea rdx, [rsp + 0x24]
lea rcx, [rsp + 0x2c]
call fcn.1400012bc
lea rdx, [rbp - 0x69]
lea rcx, [rsp + 0x48]
call fcn.1400012bc
lea rdx, [rsp + 0x34]
lea rcx, [rsp + 0x3c]
call fcn.1400012bc
lea rdx, [rbp - 0x59]
lea rcx, [rbp + 0xf]
call fcn.1400012bc
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x79]
call fcn.1400012bc
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x71]
call fcn.1400012bc
lea rdx, [rbp - 0x39]
lea rcx, [rbp + 0x1f]
call fcn.1400012bc
lea rdx, [rbp - 0x19]
lea rcx, [rbp - 9]
call fcn.1400012bc
movsx ecx, word [0x14001988c]
lea eax, [rcx - 3]
test eax, eax
jle 0x140009b50
mov r8d, ebx
mov r9d, 0x2b
nop dword [rax]
nop word [rax + rax]
movsx rdx, bx
cmp word [r15 + rdx*2 + 0x19800], r13w
jne 0x140009b3e
movsxd rax, r8d
cmp word [r15 + rax*2 + 0x19804], r12w
jne 0x140009b3e
cmp word [r15 + rdx*2 + 0x19806], 0x79
jne 0x140009b3e
movzx eax, word [r15 + rdx*2 + 0x19802]
lea ecx, [rbx + 2]
mov word [r15 + rdx*2 + 0x19800], ax
mov word [0x14001988c], cx
mov word [r15 + rdx*2 + 0x19802], r9w
inc bx
movsx eax, cx
movsx r8d, bx
sub eax, 3
cmp r8d, eax
jl 0x140009af0
mov byte [0x140019889], 0
jmp 0x140009c5a
cmp byte [0x140019881], bl
je 0x140009b9d
call fcn.14000150f
cmp byte [0x140019882], bl
je 0x140009b9d
lea rax, [0x140019600]
dec rax
nop dword [rax + rax]
cmp byte [rax + 1], bl
lea rax, [rax + 1]
jne 0x140009b80
movzx ecx, word [0x140013ad4]
mov word [rax], cx
movzx ecx, byte [0x140013ad6]
mov byte [rax + 2], cl
cmp byte [0x140019889], bl
jne 0x140009fbc
cmp byte [0x140019884], bl
movsx r8, word [0x14001988c]
je 0x140009c34
cmp word [r15 + r8*2 + 0x197fe], bx
jge 0x140009bd1
call fcn.140001424
movzx r8d, word [0x14001988c]
cmp edi, 0x69
jne 0x140009c0c
movzx edx, r8w
cmp r8w, 1
jl 0x140009bff
movzx ecx, dx
dec dx
movzx eax, word [r15 + rcx*2 + 0x197fe]
mov word [r15 + rcx*2 + 0x19800], ax
cmp dx, 1
jge 0x140009be1
movzx eax, word [rsi + 6]
mov word [0x140019800], ax
jmp 0x140009c41
movzx eax, word [rsi + 6]
sub di, 0x41
movsx rcx, r8w
mov word [r15 + rcx*2 + 0x19800], ax
mov eax, 0xffdf
test ax, di
je 0x140009c41
mov byte [0x140019885], 1
jmp 0x140009c41
movzx eax, word [rsi + 4]
mov word [r15 + r8*2 + 0x19800], ax
inc r8w
mov word [0x14001988c], r8w
mov byte [0x140019881], 1
mov byte [0x140019884], bl
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1400012e4
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
cmp byte [0x140019881], bl
je 0x140009cc3
call fcn.14000150f
cmp byte [0x140019882], bl
je 0x140009cc3
lea rax, [0x140019600]
dec rax
cmp byte [rax + 1], bl
lea rax, [rax + 1]
jne 0x140009ca6
movzx ecx, word [0x140013ad4]
mov word [rax], cx
movzx ecx, byte [0x140013ad6]
mov byte [rax + 2], cl
cmp byte [0x140019889], bl
jne 0x140009fbc
cmp byte [0x140019884], bl
movsx rdx, word [0x14001988c]
je 0x140009ded
cmp word [r15 + rdx*2 + 0x197fe], bx
jge 0x140009cfa
call fcn.140001424
movzx edx, word [0x14001988c]
movsx rax, dx
movzx ecx, word [r15 + rax*2 + 0x197fe]
cmp cx, 0x72
jne 0x140009d9c
cmp edi, 0x75
jne 0x140009d3a
dec dx
mov ecx, 0x7a
movsx rax, dx
inc dx
mov word [0x14001988c], dx
mov word [r15 + rax*2 + 0x19800], cx
jmp 0x140009c4d
cmp edi, 0x55
jne 0x140009d63
dec dx
mov ecx, 0x21
movsx rax, dx
inc dx
mov word [0x14001988c], dx
mov word [r15 + rax*2 + 0x19800], cx
jmp 0x140009c4d
cmp edi, 7
je 0x140009d72
sub di, 0xf
cmp di, 2
ja 0x140009dcb
movzx eax, word [rsi + 4]
dec dx
movsx rcx, dx
inc dx
mov byte [0x140019886], 1
mov word [0x14001988c], dx
mov word [r15 + rcx*2 + 0x19800], ax
jmp 0x140009c4d
cmp cx, 0x68
jne 0x140009dcb
cmp edi, 7
jne 0x140009dcb
dec dx
mov ecx, 0xe3
movsx rax, dx
inc dx
mov word [0x14001988c], dx
mov word [r15 + rax*2 + 0x19800], cx
jmp 0x140009c4d
movzx ecx, word [rsi + 6]
call fcn.140001514
movzx edx, word [0x14001988c]
dec dx
inc dx
mov word [0x14001988c], dx
jmp 0x140009c4d
movzx eax, word [rsi + 4]
mov word [r15 + rdx*2 + 0x19800], ax
inc dx
mov word [0x14001988c], dx
jmp 0x140009c4d
cmp byte [0x140019887], bl
je 0x140009e23
mov ecx, 0x107
mov byte [0x140019887], bl
call fcn.14000141a
jmp 0x140009e85
cmp byte [0x140019889], bl
jne 0x140009fbc
cmp byte [0x140019888], bl
je 0x140009e47
mov ecx, r12d
mov byte [0x140019888], bl
call fcn.14000141a
jmp 0x140009e85
movzx ebx, byte [0x140019884]
test bl, bl
je 0x140009e6b
movsx rax, word [0x14001988c]
cmp word [r15 + rax*2 + 0x197fe], 0
jge 0x140009e6b
call fcn.140001424
cmp byte [0x1400181f9], 0
jne 0x140009e80
test bl, bl
je 0x140009e80
mov ecx, r13d
call fcn.140001514
call fcn.14000150f
cmp edi, 0x1f
jne 0x140009ed4
call fcn.140001451
lea rdx, [0x140018e00]
dec rdx
nop dword [rax]
cmp byte [rdx + 1], 0
lea rdx, [rdx + 1]
jne 0x140009ea0
movzx eax, word [0x140013abc]
lea rcx, [0x140018e00]
mov word [rdx], ax
mov rdx, qword [0x1400181d8]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputs]
mov byte [0x140018e00], 0
jmp 0x140009c5a
cmp edi, 0x1e
je 0x140009c5a
movzx ecx, dil
call fcn.1400010c3
jmp 0x140009c5a
cmp byte [0x140019887], bl
jne 0x140009f66
cmp byte [0x140019888], bl
mov byte [0x140019887], 1
je 0x140009f12
mov ecx, r12d
mov byte [0x140019888], bl
call fcn.14000141a
jmp 0x140009f5c
cmp byte [0x140019889], bl
jne 0x140009fbc
movzx ebx, byte [0x140019884]
test bl, bl
je 0x140009f42
movsx rax, word [0x14001988c]
cmp word [r15 + rax*2 + 0x197fe], 0
jge 0x140009f42
call fcn.140001424
cmp byte [0x1400181f9], 0
jne 0x140009f57
test bl, bl
je 0x140009f57
mov ecx, r13d
call fcn.140001514
call fcn.14000150f
mov ecx, 0x100
call fcn.14000141a
movzx ecx, dil
call fcn.1400010c3
jmp 0x140009c5a
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x20], dil
mov byte [rsp + 0x21], bl
call fcn.140001311
int3
lea rcx, [0x140013ad8]
call fcn.140001311
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Error:_tabs_mode_not_selected_n
call fcn.1400014f6
lea rcx, [0x140013b08]
call fcn.140001311
int3
lea rcx, str.__._0123456789:_____ABCDEFGHIJKLMNOPQRSTUVWXYZ
call fcn.140001311
int3