Function at 0x1400353ef
Capabilities:
Contain obfuscated stackstrings

Disassembly:
and al, 0xc8
jo 0x14003313b
jle 0x140033146
or al, 0
xor byte [rbp + 0x2e], dh
mov rdi, qword [0x140143070]
lea r9d, [r14 + 0x40]
movabs rdx, 0x2732d56586d88413
mov dword [rsp - 0x1c], edx
lea r8, [rbp + 0x856]
add rdi, rdx
movabs rcx, 0x4e04da5d9048bfe4
jmp 0x140034ee8
je 0x14003451d
call fcn.140033555
add rsp, 0x77
pop r10
ret
pop r10
call qword [rdx + 0xb8]
je 0x140033645
jne 0x140033645
cmp r11, rcx
mov r10d, 0xf347b80f
dec r10
sub r8d, 0x684f3930
popf
int3
jmp 0x14003324c
jne 0x14003401b
je 0x14003401b
call fcn.1400338c1
add rsp, 0x77
pop r12
ret
pop r12
jne 0x14003388d
je 0x14003388d
and edi, 0x49c04a32
sub r11d, 0xb9cf781c
rol r10d, 0xe2
ror r8d, 0xe
test r13d, 0xecce907
popf
test r12, rdx
jno 0x140033ea1
or edx, 0x51a64c88
syscall
mov r14d, 0xc588f025
call rax
cmp edi, 0x30bd4243
sub r8d, 0x2154faaa
call rcx
movabs rbx, 0x29e23a00001421e9
sub r15d, 0x7d9eed1a
dec r9
dec ecx
jmp 0x140034cb3
lea rdx, [rbp + 0xe88]
add rdi, rcx
mov dword [rsp - 0x10], 0x54b8fcfb
mov rsp, rsp
mov rcx, rax
je 0x140033d47
jne 0x140033d47
xor r15d, 0x7ea8e586
rcr esi, 0x81
lea r14d, [rcx + 0x4e2a]
xor r10d, 0x4846ba67
lea esi, [rbp + 0x251f]
movabs rsi, 0xedda8000007f5e9
pause
cmp r8d, 0xdbb5b191
call rax
add r11d, 0x5fecec4b
mul r9
call fcn.14003373a
jmp 0x140034541
add byte [rbp], dh
lea rdi, [rbp + 0xe88]
mov dword [rsp - 0x44], 0x47473b63
mov rcx, r13
push r12
movabs r12, 0x29e519fffff81fe9
je 0x14003404b
jmp 0x14003383f
jne 0x14003404b
rol r14d, 0xe5
div r13
xor r13d, 0xce9d979b
add r12d, 0xb2f6ebc5
mov r14d, 0x47b9a860
lea r12d, [rcx + 0x2fd6]
movabs r8, 0x7110d1fffff7d7e9
rol edi, 0xa9
rcr r12d, 0x87
jmp 0x140033122
jmp 0x140033827
mov dword [rsp - 0x30], edi
push r10
movabs r10, 0x88ae3fffff0d8e9
jne 0x14003451d
jmp 0x1400335fa
jmp 0x1400335e8
not rdi
rol rdi, 0x25
mov dword [rsp - 0x20], 0x6fc49efd
mov rbx, rbx
not rdi
call rdi
xor eax, eax
jmp 0x140034005
and al, 0xd8
shr byte [rdi + rcx*4 + 0x33], 1
mov dword [rsp - 0x10], 0x15db1f59
mov dword [rsp - 0x40], 0x1620c74e
jmp 0x140034b66
test eax, eax
jne 0x14003aa68
lea rcx, [rbp + 0x8f0]
mov dword [rsp - 0x18], 0x6210d1cf
jmp fcn.140033984
rep stosb byte [rdi], al
lea rdi, [rbp + 0x856]
xchg rsp, rsp
mov rcx, rsi
mov rcx, rax
mov rdx, qword [rax]
xchg r13, r13
mov dword [rsp - 0x10], 0x1161c588
jmp 0x140034515
xchg rdi, rdi
mov dword [rsp - 0x30], ebp
not rdi
jmp 0x140033d0b
mov dword [rsp - 0x1c], 0x49d675c0
mov dword [rsp - 0x1c], 0x26c62ad3
mov dword [rsp - 0x2c], 0x4523afc1
jmp 0x1400358a7
push r12
movabs r12, 0x37267000000ade9
jne 0x1400350ce
jmp 0x140035180
jmp 0x140035771
mov dword [rsp - 0x18], edx
xchg rsp, rsp
mov dword [rsp - 0x3c], 0x79d982cf
mov dword [rsp - 0x34], ebx
jne 0x140035125
je 0x140035125
mul r13
cmp r14, rdx
jmp rax
jmp 0x140035291
xchg r14, r14
mov dword [rsp - 0x14], 0x7b822f7
xor r14d, r14d
mov word [rbp + 0x854], r14w
mov rcx, qword [rbx]
xchg rbx, rbx
jmp 0x140035565
rol rdi, 0x25
not rdi
call rdi
lea rdi, [rbp + 0x824]
xchg rsp, rsp
jmp fcn.1400358a0
ret
pop r12
mov dword [rbp + 0x25c], 0x10026
mov dword [rbp + 0x260], 0x42003f
mov dword [rbp + 0x264], 0x360061
mov dword [rbp + 0x268], 0x6d
mov dword [rsp - 0x30], 0x565ea461
jmp 0x1400354b3
xchg r15, r15
mov dword [rsp - 0x28], 0x2c1be85e
lea r8, [rbp + 0x824]
add rdi, rdx
je 0x140035204
jne 0x140035204
neg r9
cpuid
cmp r15, rdi
lea r12d, [rbp - 0x4d4c]
ror r13d, 0xdf
mov r11d, 0x61dc08f3
cmp r14, rdx
add esi, 0x3c29a929
add r9d, 0x5a0acafe
pop r15
lea r10d, [rbp - 0x49aa]
movabs r14, 0x87a7100000320e9
jmp fcn.140034295
jmp 0x140035529
mov dword [rsp - 0x20], edi
mov r8, r8
mov dword [rsp - 0x10], 0x1cee1916
xchg r14, r14
xchg r13, r13
jmp 0x14003573f
xor cx, dx
mov word [rbp + rax*2 + 0x824], cx
mov rax, qword [rbp + 0x10a8]
mov dword [rsp - 0x34], 0x2d1f9fac
mov rsp, rsp
jmp 0x1400356bc
jne 0x1400354fb
je 0x1400354fb
call fcn.1400353ef
add rsp, 0x1a
pop rcx
ret
pop rcx
jmp 0x14003522b
pop r11
add rax, r14
mov qword [rbp + 0x10a8], rax
mov rax, qword [rbp + 0x10a8]
mov dword [rsp - 0x14], ebp
mov r13, r13
mov dword [rsp - 0x28], 0x786ce4e3
jmp 0x1400357a6
mov dword [rsp - 0x34], 0x2098b332
push r11
movabs r11, 0x6011efed2b65cbeb
jne 0x14003529d
jmp 0x14003526a
je 0x14003529d
jmp 0x14003592d
pop rdx
mov dword [rbp + 0x270], 0x1e007d
mov dword [rbp + 0x274], 0x1c0036
mov dword [rbp + 0x278], 0x1e0064
mov dword [rsp - 0x34], edi
mov qword [rbp + 0x10a8], r9
jmp 0x140035508
movabs rdx, 0x2732d56586d88413
mov r13, r13
xchg rdx, rdx
mov dword [rsp - 0x20], 0x278faec3
jmp 0x1400351b7
jne 0x1400358c6
je 0x1400358c6
call 0x1400354a3
add rsp, 0x1a
sbb ch, cl
pop rcx
invalid
add byte [rax], al
xchg rdx, rdx
and cl, 3
shl cl, 3
movzx edx, word [rbp + rax*2 - 0x12]
mov eax, r12d
xchg rsp, rsp
jmp 0x1400359c4
mov dword [rbp + 0x254], 0x2a0067
mov dword [rbp + 0x258], 0x10002a
mov dword [rsp - 0x38], 0x1f0527d9
xchg rbx, rbx
mov dword [rsp - 0x44], 0x3d617c6f
mov r12, r12
mov dword [rsp - 0x34], 0x6bfccc04
jmp 0x1400350ca
xchg esi, esi
mov dword [rsp - 0x1c], 0x4cb3cf1
mov dword [rbp + 0x244], 0x64004f
mov dword [rbp + 0x248], 0x58001e
mov dword [rbp + 0x24c], 0x20006f
mov dword [rsp - 0x24], 0x2e2c2a5a
mov dword [rbp + 0x250], 0x470022
jmp 0x1400353b7
mov dword [rbp + 2], 0x5a0023
mov dword [rbp + 6], 0x27006b
mov dword [rbp + 0xa], 0x590039
mov dword [rbp + 0xe], 0x2a0061
jne 0x14003545e
je 0x14003545e
lea ebp, [rdi - 0xc09f]
neg rbx
popf
test rbp, rcx
movabs rdi, 0x6e8e6bfffffc4ae9
cmp ecx, 0x4ba5505b
call rcx
cpuid
jp 0x1400346e2
jmp 0x1400350ad
call fcn.140036343
mov dword [rsp - 0x38], 0x496e6b06
call qword [rdx + 0xb8]
mov rdi, qword [0x140143070]
lea r9d, [r14 + 0x10]
jmp 0x1400352dd
mov dword [rsp - 0x24], 0x42122037
mov rax, qword [rbp + 0x10a8]
and cl, 3
shl cl, 3
jmp 0x140035707
mov dword [rsp - 0x14], 0x36ff7cf3
mov dword [rsp - 0x40], 0x4905ca8e
mov dword [rbp + 0x26c], 0x610076
push rdx
movabs rdx, 0x780d33fffffdd9e9
invalid
push qword [rbx]
invalid
js 0x14003554e
invalid
jmp 0x1400352ae
je 0x1400354d0
jmp 0x140035873
mov rax, qword [rbp + 0x10a8]
mov dword [rsp - 0xc], 0x168bc8f
mov dword [rsp - 0x28], 0x72478501
push rcx
movabs rcx, 0x575660fffffd64e9
jmp 0x14003524d
jmp 0x140035264
mov rax, qword [rbp + 0x10a8]
mov rcx, qword [rbp + 0x10a8]
mov rdi, rdi
mov r9, r9
mov dword [rsp - 0x20], 0x4f5c7d59
jmp 0x140035499
push rbp
movabs rbp, 0x4e1b9400000332e9
jne 0x14003552c
jmp 0x140035863
je 0x14003552c
jne 0x14003554f
je 0x14003554f
popfq
dec r14
or r14d, 0x955ec37c
test r10, rbp
div rsi
movabs r14, 0xe8c5400000304e9
and r15d, 0xfea84bd4
cpuid
jmp 0x140034e98
jmp 0x140035858
mov dword [rsp - 0x20], 0x604e992a
mov rcx, qword [rcx]
call fcn.1400f07a0
mov rcx, rax
mov rdx, qword [rax]
mov dword [rsp - 0xc], 0xeedf4b1
jmp 0x14003547b
push r9
movabs r9, 0x55fd26000001a7e9
jne 0x14003558c
jmp 0x140035738
je 0x14003558c
je 0x1400355a0
jne 0x1400355a0
pushfq
pop rdi
movabs r15, 0xda1c800000187e9
pop r10
pause
int3
jmp 0x14003572c
lea rdx, [rbp + 0xf50]
add rdi, rcx
mov rcx, rax
not rdi
mov dword [rsp - 0x2c], 0x44f09058
xchg r10, r10
xchg rcx, rcx
je 0x14003561d
jne 0x14003561d
jmp 0x1400357d2
jmp 0x140035167
mov dword [rsp - 0x44], 0x50c1dbc8
mov dword [rsp - 0x10], 0x21cfa63e
cmp rax, rsi
jb 0x14003588a
mov rbx, qword [rbp + 0x1090]
mov dword [rsp - 0x10], esp
je 0x140035664
jne 0x140035664
movabs rsi, 0x7abedafffffadde9
cmp rdi, rbx
test ecx, 0x83fa8e5f
jo 0x140035dc1
jmp 0x140035146
div r15
sub r12d, 0x3284435b
lea edx, [rdi - 0xfed7]
call fcn.14003624b
movzx ecx, al
mov rbx, rbx
mov dword [rsp - 0x18], 0x7fd1bd7
mov rax, qword [rbp + 0x10a8]
xor cx, dx
mov word [rbp + rax*2 + 0x9f2], cx
mov rax, qword [rbp + 0x10a8]
jmp 0x1400350dd
add rax, r14
mov qword [rbp + 0x10a8], rax
mov rax, qword [rbp + 0x10a8]
jne 0x1400356e5
je 0x1400356e5
lea r15d, [rcx + 0x8e69]
call rcx
cmp r11d, 0x6bc5f4c7
imul esp, dword [rsi - 0x64], 0x49
mov eax, 0xffff50e9
call qword [rdx]
out 0x5b, eax
jmp 0x14003563a
movzx edx, word [rbp + rax*2 + 0x21c]
mov r8, r8
mov dword [rsp - 0x38], 0x354a5d6f
mov dword [rsp - 0x14], 0x15e52850
mov eax, r12d
shr eax, cl
jmp 0x140035690
call 0x140035646
add rsp, 0x1a
adc eax, 0x48ffffff
add esp, 0x1a
pop r9
ret
pop r9
jmp 0x14003542e
mov dword [rbp - 6], 0x1d006d
lea ecx, [rax + 0x30]
mov dword [rbp - 2], 0xd002e
rep stosb byte [rdi], al
mov dword [rsp - 0xc], ecx
jmp 0x140035588
not rdi
xchg r9, r9
mov dword [rsp - 0xc], 0x2b8e52c0
mov r14, r14
jmp 0x1400355e9
je 0x1400350ce
call 0x1400357e1
add rsp, 0x1a
pop r12
jne 0x140035790
je 0x140035790
and r14d, 0x192977b1
ret
jmp 0x14003517f
mov dword [rsp - 0x18], 0x181d1083
cmp rax, rdi
jb 0x14003550f
mov r8d, r11d
mov word [rbp + 0xa52], r9w
mov dword [rsp - 0x38], 0x6c89fa15
je 0x1400357eb
jne 0x1400357eb
ror ebx, 0x6f
rcl edi, 0x6a
mov ebp, 0x1707b659
bswap rdi
lea r13d, [rcx - 0x6976]
rcl r8d, 0x10
call rcx
movabs r11, 0x478d5f1d054514eb
bswap r10
jp 0x14003572d
xlatb
push 0xffffffffffffffbd
pop rcx
mov dh, 7
invalid
jmp 0x140035801
call fcn.140034d91
mov dword [rsp - 0x2c], 0x3218a572
mov dword [rsp - 0x1c], 0x7eb2d7ea
mov dword [rsp - 0x28], 0x5832c2ec
lea rdx, [rbp + 0x9f2]
lea rcx, [rbp + 0xf50]
call fcn.140016b40
xor eax, eax
jmp 0x1400359a5
lea rdi, [rbp + 0x9f2]
mov dword [rbp - 0xe], 0x510039
mov dword [rbp - 0xa], 0x710060
mov dword [rsp - 0x44], 0x243d5195
xchg r13, r13
jmp 0x140035211
call fcn.1400358e2
add rsp, 0x1a
pop rbp
ret
pop rbp
movabs rcx, 0x4e04da5d9048bfe4
jmp 0x14003575b
call fcn.140035a56
add rsp, 0x1a
pop rdx
ret
mov rax, qword [rbp + 0x10a8]
mov rcx, qword [rbp + 0x10a8]
mov rax, qword [rbp + 0x10a8]
xchg r9, r9
jmp 0x14003539e
mov r11, r11
mov dword [rbp + 0x12], 0x75006d
mov dword [rbp + 0x16], 0x36007c
mov dword [rbp + 0x1a], 0x420022
mov dword [rsp - 0x28], esi
push rbp
movabs rbp, 0x661376b9531031eb
jmp 0x140035384
jmp 0x1400358f9
pop rbp
ret
pop rbp
mov qword [rbp + 0x10a8], rax
jmp 0x140035883
call fcn.1400359f6
add rsp, 0x1a
pop r11
ret
mov r8, r8
mov dword [rsp - 0x24], 0x683cd438
mov dword [rsp - 0x28], ebp
mov dword [rsp - 0x2c], edi
mov dword [rbp - 0x12], 0x25005d
jmp 0x140035833
xchg r12, r12
mov dword [rsp - 0x18], edi
mov r13, r13
shr eax, cl
movzx ecx, al
jmp 0x1400354e1
and al, 0xc0
rcr al, cl
retf
call fcn.140099c60
mov dword [rsp - 0x28], 0x44d859e
jmp fcn.14003b586
mov dword [rsp - 0x30], 0x425232ef
mov dword [rsp - 0x14], edi
xchg r15, r15
test rdi, rdi
je fcn.14003b586
mov rcx, rdi
jmp 0x140036f7e
movabs r8, 0x558a4000006f5e9
jne 0x140036912
jmp 0x14003700c
je 0x140036912
call int.140036a81
add rsp, 0x51
jmp 0x140037009
ret
pop rbx
lea rcx, [rbp + 0xb40]
call fcn.1400c0c6c
mov rdi, qword [rbp + 0x6c0]
jmp 0x1400368a4
jne 0x14003706a
je 0x14003706a
call fcn.140036d6f
add rsp, 0x51
pop rbx
jne 0x140036e3d
je 0x140036e3d
rol ebp, 0x3d
pause
ret
jmp 0x140036d91
mov r10, r10
mov dword [rsp - 0x44], edx
call fcn.14007f258
push r8
je 0x140036fc7
jne 0x140036fc7
or r12d, 0x4c65d036
popf
mov r11d, 0x734e9a88
sub r11d, 0xef94e81d
int3
jmp 0x140036910
pop r8
ret
pop r8
mov rdx, rsi
mov rcx, rdi
jmp 0x140036833
mov esi, 0x40
push rbx
movabs rbx, 0x20b1fbfffffd23e9
jmp 0x140036df6
jmp 0x140036d92
mov eax, 0x3f
mov dword [rsp + 0x30], 0x25005d
mov word [rsp + 0x5c], ax
mov rbx, rbx
mov dword [rsp - 0x44], esi
mov rdx, rdx
mov r12d, 0x304d440e
je 0x14003aa95
jne 0x14003aa95
test rcx, rdi
pop r8
movabs rdi, 0x2889f700000bcce9
push rsi
bswap r13
sub edx, 0x6326c33a
test r11d, 0xca377985
lea edi, [rdx - 0x627e]
call fcn.14003b046
jmp fcn.14003b666