Function at 0x140030a30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xd0
mov qword [rbp - 0x61], 0xfffffffffffffffe
mov qword [rsp + 0x128], rbx
mov rax, qword [0x14011c018]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov rdi, r8
mov rbx, rdx
mov rsi, rcx
mov qword [rbp - 0x59], rcx
lea r15, [rcx + 0x88]
mov rcx, r15
call fcn.140001fec
nop
mov byte [rsi + 0xa8], 1
xor r12d, r12d
mov qword [rsi], r12
mov qword [rsi + 8], r12
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r12
mov dword [rsi + 0x20], r12d
lea rcx, [rsi + 0x24]
xor edx, edx
lea r8d, [r12 + 0x60]
call fcn.1400a2390
mov rdx, rbx
lea rcx, [rbp - 0x29]
call fcn.140002e64
nop
lea rcx, [rbp - 0x29]
call fcn.140002da0
test al, al
je 0x140030ad3
lea rcx, [rbp - 0x29]
call fcn.14001aa50
lea rcx, [rbp - 0x29]
call fcn.140002da0
test al, al
jne 0x140030f69
mov rcx, rdi
call fcn.140002da0
test al, al
jne 0x140030f69
mov r8, rdi
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x49]
call fcn.140003b40
nop
mov rdx, rax
lea rcx, [rbp - 0x29]
call fcn.140002dcc
nop
lea rcx, [rbp - 0x49]
call fcn.140001c70
mov dword [rbp - 9], 0x43002e
mov dword [rbp - 5], 0x650068
mov dword [rbp - 1], 0x6b0063
mov dword [rbp + 3], 0x740053
mov dword [rbp + 7], 0x740061
mov dword [rbp + 0xb], 0x64002e
mov dword [rbp + 0xf], 0x740061
mov dword [rbp + 0x13], 0x61
lea rcx, [rbp - 9]
call fcn.140001de4
mov r13, rax
lea rcx, [rbp - 0x29]
call fcn.140001ca0
mov rbx, rax
mov r14, qword [rax + 0x10]
mov rax, qword [rax + 0x18]
mov qword [rbp - 0x69], rax
mov rcx, rax
sub rcx, r14
cmp r13, rcx
ja 0x140030bbc
lea rdi, [r14 + r13]
mov qword [rbx + 0x10], rdi
cmp rax, 8
jb 0x140030b93
mov rbx, qword [rbx]
lea rcx, [rbx + r14*2]
mov r8, r13
lea rdx, [rbp - 9]
call fcn.140001ddc
mov word [rsp + 0x20], r12w
lea rcx, [rbx + rdi*2]
lea rdx, [rsp + 0x20]
call fcn.140001dd4
jmp 0x140030d84
lea rcx, [rbp - 0x29]
call fcn.140001f74
sub rax, r14
cmp rax, r13
jb 0x140030fac
lea r12, [r14 + r13]
lea rcx, [rbp - 0x29]
call fcn.140001f74
mov rdi, rax
lea rcx, [rbp - 0x29]
call fcn.140001ca0
mov rcx, r12
or rcx, 7
mov qword [rbp - 0x71], rcx
cmp rcx, rdi
ja 0x140030c27
mov rdx, qword [rax + 0x18]
mov rcx, rdx
shr rcx, 1
mov rax, rdi
sub rax, rcx
cmp rdx, rax
ja 0x140030c27
lea rax, [rcx + rdx]
mov qword [rbp - 0x79], rax
lea rdx, [rbp - 0x79]
lea rcx, [rbp - 0x71]
call fcn.140001d84
mov rdi, qword [rax]
lea rax, [rdi + 1]
lea rdx, [rax + rax]
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
jbe 0x140030c4a
mov rax, 0xffffffffffffffff
mov rdx, rax
jmp 0x140030c5a
cmp rdx, 0x1000
jb 0x140030c84
mov rax, 0xffffffffffffffff
lea rcx, [rdx + 0x27]
cmp rcx, rdx
cmovbe rcx, rax
call fcn.1400a08c4
mov rcx, rax
test rax, rax
je 0x140030fb2
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140030c95
test rdx, rdx
je 0x140030c93
mov rcx, rdx
call fcn.1400a08c4
jmp 0x140030c95
xor eax, eax
mov qword [rsp + 0x28], rax
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], rdi
mov r12, qword [rsp + 0x28]
mov r8, r14
mov rcx, r12
cmp qword [rbp - 0x69], 8
jb 0x140030d2b
mov rdi, qword [rbx]
mov rdx, rdi
call fcn.140001ddc
lea rcx, [r12 + r14*2]
mov r8, r13
lea rdx, [rbp - 9]
call fcn.140001ddc
xor eax, eax
mov word [rsp + 0x20], ax
lea rax, [r14 + r13]
lea rcx, [r12 + rax*2]
lea rdx, [rsp + 0x20]
call fcn.140001dd4
mov rax, qword [rbp - 0x69]
lea rdx, [rax*2 + 2]
cmp rdx, 0x1000
jb 0x140030d19
add rdx, 0x27
mov rcx, qword [rdi - 8]
sub rdi, rcx
lea rax, [rdi - 8]
cmp rax, 0x1f
ja 0x140030fb8
mov rdi, rcx
mov rcx, rdi
call fcn.1400a0900
mov rax, qword [rsp + 0x28]
mov qword [rbx], rax
jmp 0x140030d84
mov rdx, rbx
call fcn.140001ddc
lea rcx, [r12 + r14*2]
mov r8, r13
lea rdx, [rbp - 9]
call fcn.140001ddc
xor eax, eax
mov word [rsp + 0x20], ax
lea rax, [r14 + r13]
lea rcx, [r12 + rax*2]
lea rdx, [rsp + 0x20]
call fcn.140001dd4
mov rcx, rbx
call fcn.140001ca0
mov rdx, rax
mov ecx, 8
call fcn.140001bf0
mov rbx, rax
lea rcx, [rsp + 0x28]
call fcn.140001ca0
mov rcx, qword [rax]
mov qword [rbx], rcx
lea rcx, [rbp - 0x29]
call fcn.140001ca0
cmp r15, rax
je 0x140030f69
lea rcx, [rbp - 0x29]
call fcn.140001ca0
mov r13, rax
cmp qword [rax + 0x18], 8
jb 0x140030dac
mov r13, qword [rax]
mov r14, qword [rax + 0x10]
mov rcx, r15
call fcn.140001ca0
mov rdi, rax
mov r12, qword [rax + 0x18]
cmp r14, r12
ja 0x140030dfc
mov rbx, rax
cmp r12, 8
jb 0x140030dd0
mov rbx, qword [rax]
mov qword [rax + 0x10], r14
mov r8, r14
mov rdx, r13
mov rcx, rbx
call fcn.140001ddc
xor eax, eax
mov word [rsp + 0x20], ax
lea rcx, [rbx + r14*2]
lea rdx, [rsp + 0x20]
call fcn.140001dd4
jmp 0x140030f69
mov rcx, r15
call fcn.140001f74
cmp r14, rax
ja 0x140030fbe
mov rcx, r15
call fcn.140001f74
mov rbx, rax
mov rcx, r15
call fcn.140001ca0
mov rcx, r14
or rcx, 7
mov qword [rbp - 0x79], rcx
cmp rcx, rbx
ja 0x140030e5d
mov rdx, qword [rax + 0x18]
mov rcx, rdx
shr rcx, 1
mov rax, rbx
sub rax, rcx
cmp rdx, rax
ja 0x140030e5d
lea rax, [rcx + rdx]
mov qword [rbp - 0x71], rax
lea rdx, [rbp - 0x71]
lea rcx, [rbp - 0x79]
call fcn.140001d84
mov rbx, qword [rax]
lea rax, [rbx + 1]
lea rdx, [rax + rax]
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
jbe 0x140030e80
mov rax, 0xffffffffffffffff
mov rdx, rax
jmp 0x140030e90
cmp rdx, 0x1000
jb 0x140030eba
mov rax, 0xffffffffffffffff
lea rcx, [rdx + 0x27]
cmp rcx, rdx
cmovbe rcx, rax
call fcn.1400a08c4
mov rcx, rax
test rax, rax
je 0x140030fc4
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140030ecb
test rdx, rdx
je 0x140030ec9
mov rcx, rdx
call fcn.1400a08c4
jmp 0x140030ecb
xor eax, eax
mov qword [rsp + 0x28], rax
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], rbx
mov rbx, qword [rsp + 0x28]
mov r8, r14
mov rdx, r13
mov rcx, rbx
call fcn.140001ddc
xor eax, eax
mov word [rsp + 0x20], ax
lea rcx, [rbx + r14*2]
lea rdx, [rsp + 0x20]
call fcn.140001dd4
cmp r12, 8
jb 0x140030f41
mov rcx, qword [rdi]
lea rdx, [r12*2 + 2]
cmp rdx, 0x1000
jb 0x140030f32
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140030fa6
mov rcx, r8
call fcn.1400a0900
mov rax, qword [rsp + 0x28]
mov qword [rdi], rax
jmp 0x140030f69
mov rcx, rdi
call fcn.140001ca0
mov rdx, rax
mov ecx, 8
call fcn.140001bf0
mov rbx, rax
lea rcx, [rsp + 0x28]
call fcn.140001ca0
mov rcx, qword [rax]
mov qword [rbx], rcx
mov rcx, rsi
call fcn.140031050
nop
lea rcx, [rbp - 0x29]
call fcn.140001c70
nop
mov rax, rsi
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.1400a08a0
mov rbx, qword [rsp + 0x128]
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400a4d80
nop
call fcn.140001f60
int3
call fcn.1400a4d80
int3
call fcn.1400a4d80
int3
call fcn.140001f60
int3
call fcn.1400a4d80
int3