Function at 0x140002dfb
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov byte [rsp + 0x7f], 0x65
mov byte [rsp + 0x80], 0
mov byte [rsp + 0x188], 0x53
mov byte [rsp + 0x189], 0x65
mov byte [rsp + 0x18a], 0x74
mov byte [rsp + 0x18b], 0x46
mov byte [rsp + 0x18c], 0x69
mov word [rcx], es
add byte [rax], al
imul ebp, ecx, 0x11e9
test eax, eax
jne 0x140005362
jmp 0x140004d82
mov qword [rsp + 0x350], rax
cmp qword [rsp + 0x2c8], 0xffffffffffffffff
je 0x140005c1d
jmp 0x1400074f4
mov word [rsp + 0x2fe], ax
mov eax, 0x2e
mov word [rsp + 0x300], ax
add eax, dword [rax]
add byte [rax + 0x64], bh
mov word [rsp + 0x302], ax
mov eax, 0x6c
mov word [rsp + 0x304], ax
mov eax, 0x6c
jmp 0x1400075fc
add byte [rax], al
mov byte [rsp + 0x201], 0x53
mov byte [rsp + 0x1b2], 0x48
mov byte [rsp + 0x1b3], 0x65
mov byte [rsp + 0x1b4], 0x61
mov byte [rsp + 0x1b5], 0x70
mov byte [rsp + 0x1b6], 0
mov byte [rsp + 0x98], 0x48
mov byte [rsp + 0x99], 0x65
jmp 0x140005c56
movsxd rax, dword [rsp + 0x48]
mov rcx, qword [rsp + 0x70]
movsx eax, byte [rcx + rax]
cmp eax, 0x2e
jne 0x140005310
jmp 0x140002d38
mov qword [rsp + 0x3b8], rax
cmp qword [rsp + 0x2d0], 0
je 0x140005977
jmp 0x1400071b6
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
mov rcx, qword [rsp + 0x70]
call qword [rsp + 0x378]
jmp 0x140002c51
mov byte [rsp + 0x278], 0x72
mov byte [rsp + 0x279], 0x65
mov byte [rsp + 0x27a], 0x71
mov byte [rsp + 0x27b], 0x75
mov byte [rsp + 0x27c], 0x69
mov byte [rsp + 0x27d], 0x72
mov byte [rsp + 0x27e], 0x65
jmp 0x1400060e8
mov byte [rsp + 0x13e], 0x6c
mov byte [rsp + 0x13f], 0x41
mov byte [rsp + 0x140], 0x6c
mov byte [rsp + 0x141], 0x6c
mov byte [rsp + 0x142], 0x6f
mov byte [rsp + 0x143], 0x63
mov byte [rsp + 0x144], 0
jmp 0x1400052af
mov byte [rsp + 0x89], 0x65
mov byte [rsp + 0x8a], 0x61
mov byte [rsp + 0x8b], 0x70
mov byte [rsp + 0x8c], 0x46
mov byte [rsp + 0x8d], 0x72
mov byte [rsp + 0x8e], 0x65
mov byte [rsp + 0x8f], 0x65
jmp 0x140004ad5
mov qword [rsp + 0x3c0], rax
lea rdx, [rsp + 0x1a8]
mov rcx, qword [rsp + 0x40]
call fcn.1400072eb
jmp 0x140004a35
mov byte [rsp + 0x26a], 0x73
mov byte [rsp + 0x26b], 0x20
mov byte [rsp + 0x26c], 0x61
mov byte [rsp + 0x26d], 0x70
mov byte [rsp + 0x26e], 0x70
mov byte [rsp + 0x26f], 0x6c
mov byte [rsp + 0x270], 0x69
jmp 0x140005f6e
call qword [rsp + 0x3c8]
mov r8d, 0x200
mov edx, 8
mov rcx, rax
call qword [rsp + 0x3d0]
mov qword [rsp + 0x70], rax
lea r9, [rsp + 0x360]
mov r8, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x340]
jmp 0x1400068cd
lea r8, [rsp + 0x360]
mov rdx, qword [rsp + 0x350]
mov rcx, qword [rsp + 0x2c8]
call fcn.140006b62
jmp 0x14000140c
mov byte [rsp + 0x15d], 0x69
mov byte [rsp + 0x15e], 0x62
mov byte [rsp + 0x15f], 0x72
mov byte [rsp + 0x160], 0x61
mov byte [rsp + 0x161], 0x72
mov byte [rsp + 0x162], 0x79
mov byte [rsp + 0x163], 0x57
jmp 0x140005669
mov word [rsp + 0x31e], ax
mov eax, 0x2e
mov word [rsp + 0x320], ax
mov eax, 0x64
mov word [rsp + 0x322], ax
mov eax, 0x6c
mov word [rsp + 0x324], ax
mov eax, 0x6c
jmp 0x14000269a
mov byte [rsp + 0x128], 0x70
mov byte [rsp + 0x129], 0x61
mov byte [rsp + 0x12a], 0x74
mov byte [rsp + 0x12b], 0x63
mov byte [rsp + 0x12c], 0x68
mov byte [rsp + 0x12d], 0x5f
mov byte [rsp + 0x12e], 0x30
xor cl, ch
cmp al, 0xf
add byte [rax], al
movzx r8d, byte [rcx + rdx]
mov byte [rax + rdx], r8b
inc rdx
test r8b, r8b
je 0x140001948
jmp 0x1400021f6
mov byte [rsp + 0x54], 0x45
mov byte [rsp + 0x55], 0x72
mov byte [rsp + 0x56], 0x72
mov byte [rsp + 0x57], 0x6f
mov byte [rsp + 0x58], 0x72
mov byte [rsp + 0x59], 0
mov byte [rsp + 0x240], 0x70
mov byte [rsp + 0x241], 0x61
mov byte [rsp + 0x242], 0x74
jmp 0x140004076
mov eax, dword [rsp + 0x48]
inc eax
mov dword [rsp + 0x48], eax
movsxd rax, dword [rsp + 0x48]
mov rcx, qword [rsp + 0x70]
movsx eax, byte [rcx + rax]
test eax, eax
je 0x140003fab
jmp 0x1400018d7
mov byte [rsp + 0x258], 0x73
mov byte [rsp + 0x259], 0x74
mov byte [rsp + 0x25a], 0
xor r9d, r9d
lea r8, [rsp + 0x54]
lea rdx, [rsp + 0x240]
xor ecx, ecx
call qword [rsp + 0x3b8]
jmp 0x140006958
mov byte [rsp + 0x214], 0x6f
mov byte [rsp + 0x215], 0x6b
mov byte [rsp + 0x216], 0x65
mov byte [rsp + 0x217], 0x6e
mov byte [rsp + 0x218], 0x49
mov byte [rsp + 0x219], 0x6e
mov byte [rsp + 0x21a], 0x66
jmp 0x1400057cd
inc qword [rsp + 0x2c0]
mov rax, qword [rsp + 0x2c0]
cmp byte [rax], 0
jne 0x140002450
jmp 0x1400071d7
mov byte [rsp + 0x199], 0x65
mov byte [rsp + 0x19a], 0x74
mov byte [rsp + 0x19b], 0x50
mov byte [rsp + 0x19c], 0x72
mov byte [rsp + 0x19d], 0x6f
mov byte [rsp + 0x19e], 0x63
mov byte [rsp + 0x19f], 0x41
jmp 0x1400038dc
mov word [rsp + 0x2f6], ax
mov eax, 0x70
mov word [rsp + 0x2f8], ax
mov eax, 0x69
mov word [rsp + 0x2fa], ax
mov eax, 0x33
mov word [rsp + 0x2fc], ax
mov eax, 0x32
jmp 0x14000146e
mov byte [rsp + 0x153], 0x41
mov byte [rsp + 0x154], 0
mov byte [rsp + 0x158], 0x4c
mov byte [rsp + 0x159], 0x6f
mov byte [rsp + 0x15a], 0x61
mov byte [rsp + 0x15b], 0x64
mov byte [rsp + 0x15c], 0x4c
jmp 0x140002060
mov byte [rsp + 0x18d], 0x6c
mov byte [rsp + 0x18e], 0x65
mov byte [rsp + 0x18f], 0x50
mov byte [rsp + 0x190], 0x6f
mov byte [rsp + 0x191], 0x69
add byte [rax], al
imul eax, esi, 0x1922484
add byte [rax], al
outsb dx, byte [rsi]
mov byte [rsp + 0x193], 0x74
jmp 0x14000395b
mov qword [rsp + 0x380], rax
lea rdx, [rsp + 0x78]
mov rcx, qword [rsp + 0x40]
call fcn.1400072eb
jmp 0x140006a3a
mov word [rsp + 0x326], ax
xor eax, eax
mov word [rsp + 0x328], ax
mov eax, 0x75
mov word [rsp + 0x2d8], ax
mov eax, 0x73
mov word [rsp + 0x2da], ax
mov eax, 0x65
jmp 0x140007b58
mov byte [rsp + 0x11f], 0x42
mov byte [rsp + 0x120], 0x6f
mov byte [rsp + 0x121], 0x78
mov byte [rsp + 0x122], 0x41
mov byte [rsp + 0x123], 0
mov byte [rsp + 0x1f8], 0x47
mov byte [rsp + 0x1f9], 0x65
jmp 0x140006cc4
mov qword [rsp + 0x398], rax
lea rdx, [rsp + 0x158]
mov rcx, qword [rsp + 0x40]
call fcn.1400072eb
jmp 0x140007761
mov byte [rsp + 0x16f], 0x65
mov byte [rsp + 0x170], 0x6d
mov byte [rsp + 0x171], 0x54
mov byte [rsp + 0x172], 0x69
mov byte [rsp + 0x173], 0x6d
mov byte [rsp + 0x174], 0x65
mov byte [rsp + 0x175], 0
jmp 0x140006f37
mov qword [rsp + 0x2d0], rax
mov byte [rsp + 0x138], 0x56
mov byte [rsp + 0x139], 0x69
mov byte [rsp + 0x13a], 0x72
mov byte [rsp + 0x13b], 0x74
mov byte [rsp + 0x13c], 0x75
mov byte [rsp + 0x13d], 0x61
jmp 0x140001a51
mov byte [rsp + 0xc9], 0x72
mov byte [rsp + 0xca], 0x65
mov byte [rsp + 0xcb], 0x61
mov byte [rsp + 0xcc], 0x74
mov byte [rsp + 0xcd], 0x65
mov byte [rsp + 0xce], 0x46
mov byte [rsp + 0xcf], 0x69
jmp 0x14000427e
mov qword [rsp + 0x3d8], rax
lea rdx, [rsp + 0x88]
mov rcx, qword [rsp + 0x40]
call fcn.1400072eb
jmp 0x140007aa3
mov qword [rsp + 0x2c8], rax
cmp qword [rsp + 0x2c8], 0xffffffffffffffff
jne 0x1400074f4
jmp 0x140002210
mov byte [rsp + 0x181], 0x6f
mov byte [rsp + 0x182], 0x74
mov byte [rsp + 0x183], 0x65
mov byte [rsp + 0x184], 0x63
mov byte [rsp + 0x185], 0x74
mov byte [rsp + 0x186], 0
mov byte [rsp + 0xc8], 0x43
jmp 0x140002b31
movsxd rax, dword [rsp + 0x48]
mov rcx, qword [rsp + 0x70]
mov byte [rcx + rax], 0
jmp 0x1400022c7
sub rsp, 0x428
mov eax, 0x6b
mov word [rsp + 0x310], ax
mov eax, 0x65
mov word [rsp + 0x312], ax
mov eax, 0x72
mov word [rsp + 0x314], ax
mov eax, 0x6e
jmp 0x140004b6b
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, [rsp + 0x128]
call qword [rsp + 0x378]
mov qword [rsp + 0x2c8], rax
jmp 0x140005e7f
call qword [rsp + 0x3e8]
mov qword [rsp + 0x348], rax
call qword [rsp + 0x3c8]
mov r8d, 0x200
mov edx, 8
mov rcx, rax
call qword [rsp + 0x3d0]
mov qword [rsp + 0x340], rax
jmp 0x140001f1f
mov byte [rsp + 0x12f], 0x2e
mov byte [rsp + 0x130], 0x64
mov byte [rsp + 0x131], 0x61
mov byte [rsp + 0x132], 0x74
mov byte [rsp + 0x133], 0
mov qword [rsp + 0x30], 0
jmp 0x140002e33
lea rcx, [rsp + 0x2d8]
call qword [rsp + 0x3a0]
mov qword [rsp + 0x338], rax
lea rdx, [rsp + 0x118]
mov rcx, qword [rsp + 0x338]
call fcn.1400072eb
jmp 0x1400018f3
test rax, rax
jne 0x140004d82
jmp 0x140004d3d
mov qword [rsp + 0x3f0], rax
lea rdx, [rsp + 0x210]
mov rcx, qword [rsp + 0x2d0]
call fcn.1400072eb
jmp 0x140006c19
mov byte [rsp + 0x1d3], 0x54
mov byte [rsp + 0x1d4], 0x6f
mov byte [rsp + 0x1d5], 0x6b
mov byte [rsp + 0x1d6], 0x65
mov byte [rsp + 0x1d7], 0x6e
mov byte [rsp + 0x1d8], 0
mov byte [rsp + 0x1e0], 0x47
jmp 0x140007459
mov byte [rsp + 0xa1], 0
mov byte [rsp + 0xf8], 0x48
mov byte [rsp + 0xf9], 0x65
mov byte [rsp + 0xfa], 0x61
mov byte [rsp + 0xfb], 0x70
mov byte [rsp + 0xfc], 0x52
mov byte [rsp + 0xfd], 0x65
jmp 0x140005325
mov qword [rsp + 0x370], rax
lea rdx, [rsp + 0xc8]
mov rcx, qword [rsp + 0x40]
call fcn.1400072eb
jmp 0x140007e78
mov byte [rsp + 0xaf], 0x61
mov byte [rsp + 0xb0], 0x5c
mov byte [rsp + 0xb1], 0
mov byte [rsp + 0x64], 0x2d
mov byte [rsp + 0x65], 0x2d
mov byte [rsp + 0x66], 0x74
mov byte [rsp + 0x67], 0x65
mov byte [rsp + 0x68], 0x73
jmp 0x140004470
mov byte [rsp + 0xee], 0x62
mov byte [rsp + 0xef], 0x72
mov byte [rsp + 0xf0], 0x61
mov byte [rsp + 0xf1], 0x72
mov byte [rsp + 0xf2], 0x79
mov byte [rsp + 0xf3], 0
mov byte [rsp + 0x198], 0x47
jmp 0x140002480
mov byte [rsp + 0x1a0], 0x64
mov byte [rsp + 0x1a1], 0x64
mov byte [rsp + 0x1a2], 0x72
mov byte [rsp + 0x1a3], 0x65
mov byte [rsp + 0x1a4], 0x73
mov byte [rsp + 0x1a5], 0x73
mov byte [rsp + 0x1a6], 0
jmp 0x1400042c5
mov byte [rsp + 0x194], 0x65
mov byte [rsp + 0x195], 0x72
mov byte [rsp + 0x196], 0
mov byte [rsp + 0x148], 0x4c
mov byte [rsp + 0x149], 0x6f
mov byte [rsp + 0x14a], 0x61
mov byte [rsp + 0x14b], 0x64
jmp 0x140005711
mov word [rsp + 0x2ec], ax
mov eax, 0x61
mov word [rsp + 0x2f0], ax
mov eax, 0x64
mov word [rsp + 0x2f2], ax
mov eax, 0x76
mov word [rsp + 0x2f4], ax
mov eax, 0x61
jmp 0x1400024ce
mov byte [rsp + 0x294], 0x6c
mov byte [rsp + 0x295], 0x65
mov byte [rsp + 0x296], 0x67
mov byte [rsp + 0x297], 0x65
mov byte [rsp + 0x298], 0x73
mov byte [rsp + 0x299], 0x2e
mov byte [rsp + 0x29a], 0xa
jmp 0x140007b1b
mov byte [rsp + 0x24a], 0x74
mov byte [rsp + 0x24b], 0x20
mov byte [rsp + 0x24c], 0x64
mov byte [rsp + 0x24d], 0x6f
mov byte [rsp + 0x24e], 0x65
mov byte [rsp + 0x24f], 0x73
mov byte [rsp + 0x250], 0x20
jmp 0x1400050f1
mov byte [rsp + 0x2a9], 0x61
mov byte [rsp + 0x2aa], 0x64
mov byte [rsp + 0x2ab], 0x6d
mov byte [rsp + 0x2ac], 0x69
mov byte [rsp + 0x2ad], 0x6e
mov byte [rsp + 0x2ae], 0x69
mov byte [rsp + 0x2af], 0x73
jmp 0x140004369
mov qword [rsp + 0x418], rax
cmp qword [rsp + 0x338], 0
je 0x140003297
jmp 0x14000784e
mov byte [rsp + 0x5c], 0x5f
mov byte [rsp + 0x5d], 0x30
mov byte [rsp + 0x5e], 0x2e
mov byte [rsp + 0x5f], 0x64
mov byte [rsp + 0x60], 0x61
mov byte [rsp + 0x61], 0x74
mov byte [rsp + 0x62], 0
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x2c0], rax
dec qword [rsp + 0x2c0]
jmp 0x140002450
mov byte [rsp + 0x1ef], 0x73
mov byte [rsp + 0x1f0], 0x73
mov byte [rsp + 0x1f1], 0
mov byte [rsp + 0x210], 0x47
mov byte [rsp + 0x211], 0x65
mov byte [rsp + 0x212], 0x74
mov byte [rsp + 0x213], 0x54
jmp 0x140002413
mov byte [rsp + 0x243], 0x63
mov byte [rsp + 0x244], 0x68
mov byte [rsp + 0x245], 0x5f
mov byte [rsp + 0x246], 0x30
mov byte [rsp + 0x247], 0x2e
mov byte [rsp + 0x248], 0x64
mov byte [rsp + 0x249], 0x61
jmp 0x140003dbe
mov byte [rsp + 0xd0], 0x6c
mov byte [rsp + 0xd1], 0x65
mov byte [rsp + 0xd2], 0x41
mov byte [rsp + 0xd3], 0
mov byte [rsp + 0xd8], 0x43
mov byte [rsp + 0xd9], 0x6c
mov byte [rsp + 0xda], 0x6f
jmp 0x14000629c
mov byte [rsp + 0x118], 0x4d
mov byte [rsp + 0x119], 0x65
mov byte [rsp + 0x11a], 0x73
mov byte [rsp + 0x11b], 0x73
mov byte [rsp + 0x11c], 0x61
mov byte [rsp + 0x11d], 0x67
mov byte [rsp + 0x11e], 0x65
jmp 0x140002940
mov qword [rsp + 0x3a8], rax
lea rdx, [rsp + 0xe8]
mov rcx, qword [rsp + 0x40]
call fcn.1400072eb
jmp 0x1400078b8
mov byte [rsp + 0x2b0], 0x74
mov byte [rsp + 0x2b1], 0x72
mov byte [rsp + 0x2b2], 0x61
mov byte [rsp + 0x2b3], 0x74
mov byte [rsp + 0x2b4], 0x6f
mov byte [rsp + 0x2b5], 0x72
xor r9d, r9d
jmp 0x14000719b
mov byte [rsp + 0x2a2], 0x72
mov byte [rsp + 0x2a3], 0x75
mov byte [rsp + 0x2a4], 0x6e
mov byte [rsp + 0x2a5], 0x20
mov byte [rsp + 0x2a6], 0x61
mov byte [rsp + 0x2a7], 0x73
mov byte [rsp + 0x2a8], 0x20
jmp 0x140003e73
mov byte [rsp + 0x69], 0x74
mov byte [rsp + 0x6a], 0
lea rdx, [rsp + 0x64]
mov rcx, qword [rsp + 0x348]
call fcn.1400058e9
jmp 0x140003489
mov qword [rsp + 0x3f8], rax
lea rdx, [rsp + 0x108]
mov rcx, qword [rsp + 0x40]
call fcn.1400072eb
jmp 0x1400065ad
mov qword [rsp + 0x338], rax
lea rcx, [rsp + 0x2f0]
call fcn.1400047c8
jmp 0x140002ade
test rax, rax
je 0x140004d82
jmp 0x140001f84
mov qword [rsp + 0x3c8], rax
lea rdx, [rsp + 0x98]
mov rcx, qword [rsp + 0x40]
call fcn.1400072eb
jmp 0x140006a06
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x2d8]
call fcn.1400047c8
jmp 0x14000477b
mov byte [rsp + 0x90], 0
mov byte [rsp + 0x1b8], 0x47
mov byte [rsp + 0x1b9], 0x65
mov byte [rsp + 0x1ba], 0x74
mov byte [rsp + 0x1bb], 0x43
mov byte [rsp + 0x1bc], 0x6f
mov byte [rsp + 0x1bd], 0x6d
jmp 0x140007fda
mov word [rsp + 0x316], ax
mov eax, 0x65
mov word [rsp + 0x318], ax
mov eax, 0x6c
mov word [rsp + 0x31a], ax
mov eax, 0x33
mov word [rsp + 0x31c], ax
mov eax, 0x32
jmp 0x140002104
invalid
invalid
xchg esp, eax