Function at 0x14009efca
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbx
sub rsp, 0x68
mov dword [rsp + 0x40], 0x45004b
mov dword [rsp + 0x44], 0x4e0052
mov dword [rsp + 0x48], 0x4c0045
mov dword [rsp + 0x4c], 0x320033
mov dword [rsp + 0x50], 0x44002e
mov dword [rsp + 0x54], 0x4c004c
mov dword [rsp + 0x58], 0
mov dword [rsp + 0x20], 0x65006b
mov dword [rsp + 0x24], 0x6e0072
mov dword [rsp + 0x28], 0x6c0065
mov dword [rsp + 0x2c], 0x320033
mov dword [rsp + 0x30], 0x64002e
mov dword [rsp + 0x34], 0x6c006c
mov dword [rsp + 0x38], 0
lea rax, [0x1400a16ab]
push rax
push r13
push r12
push r15
push r14
push rbp
mov rbp, rsp
sub rsp, 0x20
mov qword [rbp - 0xd], r8
sub r13, r12
add dword [0x1400cd648], edx
add dword [rbp - 0x17], eax
mov dword [rbp - 0x1a], ecx
sub dword [rbp - 8], ecx
mov ecx, eax
add dx, word [rbp - 0x1d]
cmp r15, qword [0x1400cc292]
jne 0x14009f358
mov edx, ecx
lea ecx, [rbp - 6]
mov word [rbp - 0x10], ax
lea r10, [rbp - 0x15]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x14009f333
add dword [rbp - 9], eax
mov ecx, dword [rbp - 2]
sub edx, dword [rbp - 0xb]
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0x1f]
mov dword [rbp - 0x1a], ecx
lea rax, [rbp - 0x16]
add ecx, 0xa24a
mov qword [0x1400cefde], rdx
lea r12, [rbp - 0xa]
mov qword [rbp - 0xd], rax
mov qword [rbp - 0x10], r14
mov cx, 0x8d45
mov dword [rbp - 0xb], eax
mov r8, 0x720
mov r9, qword [rbp - 0x1e]
mov dword [rbp - 0x15], ecx
add edx, edx
xor eax, dword [rbp - 2]
and r10, qword [rbp - 0x1e]
mov ecx, dword [rbp - 0xc]
mov r9, rax
mov eax, dword [rbp - 8]
mov dword [rbp - 0x1d], edx
mov eax, eax
mov rdx, qword [rbp - 8]
movzx edx, byte [rbp - 0x17]
mov eax, ecx
mov rdx, qword [rbp - 8]
mov edx, dword [rbp - 0x19]
add rdx, 0x451a
mov dword [rbp - 6], eax
mov qword [rbp - 0x1b], rax
mov r15, r14
mov qword [rbp - 0x1d], r8
mov eax, dword [rbp - 0xa]
mov ecx, dword [rbp - 5]
mov ecx, dword [rbp - 0x19]
mov r11, qword [rbp - 0x12]
mov eax, dword [rbp - 0x15]
sub eax, 0x64ff
mov qword [rbp - 0x1b], r12
mov qword [rbp - 0x11], r14
mov r13, r13
add edx, dword [rbp - 7]
sub ecx, eax
movzx edx, ch
mov rdx, rdx
movzx edx, dx
add r8, qword [rbp - 0x1c]
mov ecx, 0x4bb3
mov dword [rbp - 0x15], eax
mov edx, dword [rbp - 1]
mov qword [rbp - 0x16], r8
mov r12, qword [rbp - 0xf]
mov eax, dword [rbp - 0x1a]
or qword [rbp - 0x19], r9
sub word [rbp - 0x14], ax
mov qword [rbp - 0xc], r11
mov r9, qword [rbp - 0x16]
add eax, 0xc355
xor dword [rbp - 0x12], eax
mov byte [0x1400cf185], ah
mov ecx, ecx
mov edx, edx
lea rdx, [rbp - 8]
sub r9, qword [rbp - 4]
mov dword [rbp - 0x13], eax
mov rcx, qword [rbp - 0x1b]
and edx, dword [rbp - 2]
sub r12, rdx
sub rdx, r9
mov eax, dword [rbp - 1]
mov edx, eax
mov qword [rbp - 8], r12
add rdx, qword [rbp - 7]
lea eax, [rbp - 0x1c]
call fcn.1400a122d
sub ecx, 0x8660
call fcn.1400a0d4c
mov qword [rbp - 0x12], r11
add ecx, 0x9c44
mov dword [0x1400cf037], edx
and qword [rbp - 0xb], r12
movzx ecx, ch
lea r10, [rbp - 8]
mov r11, qword [rbp - 0x16]
add cx, dx
xor r14, qword [rbp - 7]
add qword [rbp - 9], r12
mov rdx, r9
add r11, r11
add r12, qword [rbp - 0x16]
sub r10, 0x5e1a
mov dword [rbp - 0xf], ecx
and qword [0x1400cd0ac], r11
sub ecx, 0x8fff
or ecx, dword [rbp - 0x1e]
mov ecx, eax
sub r13, qword [rbp - 0xf]
sub r11, 0x1590
sub ecx, ecx
movzx eax, dx
mov eax, ecx
mov eax, eax
mov dword [rbp - 0xd], eax
mov dword [rbp - 0xb], ecx
add ecx, edx
mov qword [rbp - 0x1f], r12
movzx eax, ch
mov dword [rbp - 0x15], edx
mov ecx, dword [rbp - 0xb]
mov dh, byte [rbp - 0x1c]
xor dword [rbp - 0xc], ecx
xor r11, 0xc75c
add dword [rbp - 0x17], edx
sub qword [rbp - 0x19], r9
add eax, 0x4ea3
mov qword [rbp - 0xd], r13
and r11, rax
mov ecx, dword [rbp - 3]
movzx edx, ax
mov r14, qword [rbp - 0x11]
add dl, al
mov edx, ecx
mov r8, rax
add rax, 0xbe7c
add dword [rbp - 5], ecx
mov r13, 0xda2c
mov rax, qword [rbp - 6]
mov qword [rbp - 0x1d], r12
mov r15, qword [rbp - 0x18]
or qword [rbp - 0x1d], r10
add edx, eax
or edx, dword [rbp - 0xf]
sub r13, r13
mov qword [rbp - 0xb], r15
add edx, ecx
sub edx, dword [rbp - 0x1e]
sub qword [rbp - 0x1b], r10
mov r13, qword [rbp - 0x18]
lea r10, [rbp - 0x1d]
xor dword [rbp - 8], edx
mov dh, byte [rbp - 0xa]
mov qword [rbp - 0xf], r13
mov dword [rbp - 5], edx
movzx eax, dl
mov eax, dword [rbp - 0xf]
mov ecx, dword [rbp - 0xd]
add eax, 0x8542
mov rcx, 0xc6c6
add ecx, dword [rbp - 0x15]
movzx ecx, byte [rbp - 0x1d]
add ecx, 0x3d29
mov r14, rcx
add r13, qword [rbp - 0x19]
xor qword [rbp - 0x15], rax
or r12, qword [rbp - 0xa]
mov qword [rbp - 0x1d], r13
xor r10, rax
movzx edx, dh
add rcx, 0xc784
mov r10, r11
sub eax, dword [rbp]
mov r8, qword [rbp - 0x19]
mov ecx, eax
call fcn.1400a0579
add ecx, dword [rbp - 0x1d]
movzx edx, dl
mov qword [rbp - 0x18], r10
add r15, r12
mov dword [rbp - 0x1b], eax
mov r8, qword [rbp - 3]
mov eax, dword [rbp - 0xb]
mov dword [rbp - 7], edx
sub r8, qword [rbp - 0xd]
mov r10, r10
mov rax, rax
add rax, r14
inc qword [rsp]
mov eax, 8
cmp eax, dword [rsp]
jl 0x14009f09e
add rsp, 0x10
and r12, 0xdbfd
movzx ecx, dx
xor ecx, ecx
sub qword [rbp - 8], rdx
movzx edx, ah
sub dword [rbp - 8], eax
sub edx, 0x6601
mov qword [rbp - 0x1d], r9
mov dword [rbp - 0x1a], eax
mov ecx, 0xda27
or dword [rbp - 0x15], eax
mov qword [rbp - 0x12], rdx
mov ecx, 0xda2
add rdx, qword [rbp - 0x15]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x14009f406
mov r10, 0x58f4
add edx, edx
sub dword [rbp - 0xe], ecx
sub eax, 0xc9cc
mov r12, r13
lea r8, [rbp - 0xe]
mov eax, dword [rbp - 0x1e]
mov dword [rbp - 0x13], edx
and eax, dword [rbp - 0x16]
add r8, qword [rbp - 0xd]
mov qword [rbp - 0x16], r15
and dword [rbp - 0x17], eax
mov edx, eax
mov r11, r10
movzx edx, ch
mov ecx, dword [0x1400cea8d]
mov qword [rbp - 0xb], r11
sub eax, 0x14e3
mov r14, qword [rbp - 0xe]
xor qword [rbp - 0xb], r12
xor r8, r11
mov dl, dl
and r15, qword [rbp - 7]
mov edx, dword [rbp - 0x13]
mov eax, dword [rbp - 4]
mov qword [rbp - 0x11], rax
mov rdx, qword [rbp - 8]
add r14, 0xbc83
mov r15, qword [rbp - 0x16]
movzx edx, ah
mov r10, qword [rbp - 0x18]
mov ecx, dword [rbp - 3]
inc qword [rsp]
cmp dword [rsp], 5
jl 0x14009f38b
add rsp, 0x10
lea r14, [rbp - 0xb]
mov ecx, dword [rbp - 0xa]
lea r13, [0x1400ccba6]
mov r14, qword [0x1400cf39f]
movzx ecx, dx
cmp cx, word [0x1400ce73a]
je 0x14009f56b
sub dword [0x1400cba38], eax
add edx, edx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x14009f524
mov ax, word [0x1400cbfeb]
or edx, dword [0x1400cd822]
mov edx, dword [rbp - 6]
mov qword [rbp - 0x1b], r15
mov r11, 0xd3db
and dword [0x1400cdf9b], eax
mov dword [rbp - 0x15], edx
and eax, dword [rbp - 0xc]
movzx eax, dh
mov r10, qword [rbp - 3]
mov ecx, eax
sub r14, rcx
mov eax, eax
and r15, r12
or dword [rbp - 0xa], eax
mov rax, r15
lea eax, [rbp - 0x1b]
mov r10, rax
movzx eax, dl
add ecx, eax
and rax, qword [rbp - 0xd]
xor eax, 0x9815
mov r10, qword [rbp - 0xd]
mov rax, rax
mov ecx, 0xed56
mov qword [rbp - 0xf], rcx
mov dword [rbp - 0x13], ecx
add eax, dword [rbp - 3]
sub ecx, 0x51a8
movzx eax, ah
mov r12, 0x92d
mov dword [rbp - 0xf], ecx
movzx eax, dx
mov rcx, qword [rbp - 0x10]
add ecx, edx
xor qword [rbp - 0xa], r15
sub edx, dword [rbp - 0x1e]
mov r10, qword [rbp - 8]
mov edx, dword [rbp - 0xc]
mov r10, qword [rbp - 0x14]
mov r13, 0xb759
mov dword [0x1400cd785], eax
or dword [0x1400ce4c8], ecx
mov rcx, qword [rbp - 0x1c]
movzx edx, al
sub rcx, 0x8c06
mov r13, qword [rbp - 9]
mov qword [rbp - 0xb], r12
mov eax, 0x4722
or eax, eax
mov qword [rbp - 0x12], r15
xor r11, qword [rbp - 0x1e]
inc qword [rsp]
cmp qword [rsp], 0x19
jle 0x14009f452
add rsp, 0x10
mov eax, edx
mov dx, ax
mov dword [rbp - 5], eax
mov rdx, rax
mov ecx, 0x5ae1
mov rdx, r10
mov dword [rbp - 0x1c], eax
mov qword [rbp - 0x1a], r12
add ecx, dword [rbp - 0xb]
and qword [rbp - 0x1e], r11
add ecx, ecx
mov r12, 0x2e79
mov qword [rbp - 0x1f], r10
and rdx, 0xd2cf
mov dword [rbp - 0xd], eax
sub rcx, r10
sub qword [rbp - 0x10], r15
mov rdx, r8
add rcx, qword [0x1400cc56e]
or eax, dword [rbp - 4]
mov ecx, edx
movzx ecx, cx
cmp eax, dword [0x1400cec76]
je 0x14009f598
mov r11, r8
sub edx, edx
mov rcx, qword [rbp - 0x16]
mov r14, r14
mov eax, dword [rbp - 0x11]
mov qword [rbp - 0x1d], r12
mov rdx, qword [rbp - 0xd]
mov ecx, dword [rbp - 5]
sub r11, rcx
mov rax, qword [rbp - 1]
mov edx, dword [rbp - 0x14]
mov edx, dword [rbp - 0xc]
cmp r9, qword [0x1400cb6ae]
jmp 0x14009f630
mov qword [rbp - 0x13], r8
mov ecx, dword [rbp - 0x16]
leave
pop r14
pop r15
pop r12
pop r13
ret