Function at 0x140005380
Capabilities:
Contain obfuscated stackstrings
Enumerate pe sections

Disassembly:
push rbp
push rbx
push rdi
lea rbp, [rsp - 0x3f]
sub rsp, 0xb0
mov rax, qword [0x14000a008]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov r9, rcx
movzx eax, byte [r8 + 2]
movzx ecx, byte [r8 + 3]
xor ebx, ebx
shl ecx, 8
mov rdi, rdx
or ecx, eax
mov dword [rbp - 0x11], 0x64636579
shl ecx, 8
movzx eax, byte [r8 + 1]
or ecx, eax
mov dword [rbp + 3], 0x36615833
shl ecx, 8
movzx eax, byte [r8]
or ecx, eax
mov qword [rbp + 7], 0x174
mov dword [rbp - 0xd], ecx
movzx eax, byte [r8 + 6]
movzx ecx, byte [r8 + 7]
shl ecx, 8
or ecx, eax
mov dword [rbp + 0x17], 0x5a344d54
movzx eax, byte [r8 + 5]
shl ecx, 8
or ecx, eax
movzx eax, byte [r8 + 4]
shl ecx, 8
or ecx, eax
movzx eax, byte [r8 + 0xa]
mov dword [rbp - 9], ecx
movzx ecx, byte [r8 + 0xb]
shl ecx, 8
or ecx, eax
movzx eax, byte [r8 + 9]
shl ecx, 8
or ecx, eax
movzx eax, byte [r8 + 8]
shl ecx, 8
or ecx, eax
movzx eax, byte [r8 + 0xe]
mov dword [rbp - 5], ecx
movzx ecx, byte [r8 + 0xf]
shl ecx, 8
or ecx, eax
movzx eax, byte [r8 + 0xd]
shl ecx, 8
or ecx, eax
movzx eax, byte [r8 + 0xc]
shl ecx, 8
or ecx, eax
mov rax, qword [rbp + 0x7f]
mov dword [rbp - 1], ecx
movzx ecx, byte [r8 + 0x13]
shl ecx, 8
mov dword [rbp + 0xf], eax
shr rax, 0x20
mov dword [rbp + 0x13], eax
movzx eax, byte [r8 + 0x12]
or ecx, eax
movzx eax, byte [r8 + 0x11]
shl ecx, 8
or ecx, eax
movzx eax, byte [r8 + 0x10]
shl ecx, 8
or ecx, eax
movzx eax, byte [r8 + 0x16]
mov dword [rbp + 0x1b], ecx
movzx ecx, byte [r8 + 0x17]
shl ecx, 8
or ecx, eax
movzx eax, byte [r8 + 0x15]
shl ecx, 8
or ecx, eax
movzx eax, byte [r8 + 0x14]
shl ecx, 8
or ecx, eax
movzx eax, byte [r8 + 0x1a]
mov dword [rbp + 0x1f], ecx
movzx ecx, byte [r8 + 0x1b]
shl ecx, 8
or ecx, eax
movzx eax, byte [r8 + 0x19]
movzx edx, byte [r8 + 0x1f]
shl edx, 8
shl ecx, 8
or ecx, eax
mov dword [rbp + 0x2b], 0x4d654c
movzx eax, byte [r8 + 0x18]
shl ecx, 8
or ecx, eax
movzx eax, byte [r8 + 0x1e]
or edx, eax
mov dword [rbp + 0x23], ecx
movzx eax, byte [r8 + 0x1d]
mov rcx, r9
shl edx, 8
or edx, eax
movzx eax, byte [r8 + 0x1c]
shl edx, 8
lea r8, [rbp - 0x11]
or edx, eax
mov dword [rbp + 0x27], edx
lea rdx, [rbp - 0x51]
call fcn.1400050a0
mov eax, 2
mov r9d, eax
nop
lea ecx, [rax - 2]
mov edx, ecx
and ecx, 3
shr rdx, 2
shl ecx, 3
mov edx, dword [rbp + rdx*4 - 0x51]
shr edx, cl
lea ecx, [rax - 1]
mov r8d, ecx
mov byte [rbx + rdi], dl
and r8d, 3
test ecx, ecx
jns 0x14000554d
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
mov ecx, eax
mov byte [rbx + rdi + 1], r8b
mov r8d, eax
and r8d, 3
test eax, eax
jns 0x14000557c
lea ecx, [rax + 3]
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 1]
mov byte [rbx + rdi + 2], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x1400055ac
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 2]
mov byte [rbx + rdi + 3], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x1400055dc
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 3]
mov byte [rbx + rdi + 4], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x14000560c
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 4]
mov byte [rbx + rdi + 5], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x14000563c
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 5]
mov byte [rbx + rdi + 6], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x14000566c
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 6]
mov byte [rbx + rdi + 7], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x14000569c
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 7]
mov byte [rbx + rdi + 8], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x1400056cc
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 8]
mov byte [rbx + rdi + 9], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x1400056fc
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 9]
mov byte [rbx + rdi + 0xa], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x14000572c
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 0xa]
mov byte [rbx + rdi + 0xb], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x14000575c
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 0xb]
mov byte [rbx + rdi + 0xc], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x14000578c
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 0xc]
mov byte [rbx + rdi + 0xd], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x1400057bc
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 0xd]
mov byte [rbx + rdi + 0xe], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x1400057ec
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 0xe]
mov byte [rbx + rdi + 0xf], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x14000581c
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 0xf]
mov byte [rbx + rdi + 0x10], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x14000584c
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 0x10]
mov byte [rbx + rdi + 0x11], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x14000587c
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 0x11]
mov byte [rbx + rdi + 0x12], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x1400058ac
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 0x12]
mov byte [rbx + rdi + 0x13], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x1400058dc
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 0x13]
mov byte [rbx + rdi + 0x14], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x14000590c
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 0x14]
mov byte [rbx + rdi + 0x15], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x14000593c
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 0x15]
mov byte [rbx + rdi + 0x16], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x14000596c
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 0x16]
mov byte [rbx + rdi + 0x17], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x14000599c
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 0x17]
mov byte [rbx + rdi + 0x18], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x1400059cc
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 0x18]
mov byte [rbx + rdi + 0x19], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x1400059fc
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 0x19]
mov byte [rbx + rdi + 0x1a], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x140005a2c
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 0x1a]
mov byte [rbx + rdi + 0x1b], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x140005a5c
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 0x1b]
mov byte [rbx + rdi + 0x1c], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x140005a8c
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 0x1c]
mov byte [rbx + rdi + 0x1d], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x140005abc
add ecx, 3
sub r8d, 4
sar ecx, 2
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
lea ecx, [rax + 0x1d]
mov byte [rbx + rdi + 0x1e], r8b
mov r8d, ecx
and r8d, 3
test ecx, ecx
jns 0x140005aec
add ecx, 3
sub r8d, 4
sar ecx, 2
add eax, 0x20
movsxd rdx, ecx
lea ecx, [r8*8]
mov r8d, dword [rbp + rdx*4 - 0x51]
shr r8d, cl
mov byte [rbx + rdi + 0x1f], r8b
add rbx, 0x20
sub r9, 1
jne 0x140005520
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.140005b40
add rsp, 0xb0
pop rdi
pop rbx
pop rbp
ret