Function at 0x140011a30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x190]
sub rsp, 0x290
mov rax, qword [0x1400a7020]
xor rax, rsp
mov qword [rbp + 0x180], rax
mov r14, rcx
call fcn.14001b940
mov rcx, rax
test rax, rax
je 0x14001232f
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
lea r15, [0x14009af30]
mov rdx, r15
lea rcx, [rsp + 0x58]
call fcn.14001b1d0
mov rdi, 0xffffffffffffffff
test al, al
jne 0x140011acb
mov rax, rdi
nop dword [rax]
inc rax
cmp byte [r15 + rax], 0
jne 0x140011ab0
mov r8d, eax
mov rdx, r15
lea rcx, [rsp + 0x58]
call fcn.14001b4a0
nop
mov qword [rbp - 0x78], 0
mov dword [rbp - 0x80], edi
lea rcx, [rbp - 0x80]
call fcn.140012620
mov ebx, eax
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x70]
call fcn.14001ef80
lea rdx, [rbp - 0x78]
mov ecx, ebx
call fcn.140016250
test eax, eax
je 0x140011bcd
mov rsi, qword [rbp - 0x78]
test rsi, rsi
je 0x140011bcd
mov word [rbp - 0x2f], 0x6568
mov byte [rbp - 0x30], 0x53
mov word [rbp - 0x26], 0x6c
mov word [rbp - 0x2c], 0x336c
mov word [rbp - 0x29], 0x642e
mov byte [rbp - 0x27], 0x6c
mov byte [rbp - 0x2d], 0x6c
mov byte [rbp - 0x2a], 0x32
lea rcx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x140011ba5
mov dword [rbp + 0x60], 0x50726564
mov dword [rbp + 0x65], 0x416874
mov dword [rbp + 0x58], 0x65474853
mov word [rbp + 0x5d], 0x6f46
mov byte [rbp + 0x5f], 0x6c
mov byte [rbp + 0x5c], 0x74
mov byte [rbp + 0x64], 0x61
lea rdx, [rbp + 0x58]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140011b9c
lea rcx, [rbp + 0x70]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov r8, rsi
lea edx, [r9 + 0x1c]
xor ecx, ecx
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov word [rsp + 0x38], 0x7325
mov byte [rsp + 0x3a], 0
lea r8, [rbp + 0x70]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x58]
call fcn.14001a2b0
mov rcx, qword [rbp - 0x78]
call fcn.14000a1b0
mov dword [rbp - 0xe], 0x39412d33
mov word [rbp - 0x14], 0x3143
mov word [rbp - 0x11], 0x4434
mov word [rbp - 0x1b], 0x4435
mov dword [rbp - 9], 0x37302d44
mov dword [rbp - 0x20], 0x4132367b
mov word [rbp - 5], 0x4430
mov word [rbp + 1], 0x4435
mov byte [rbp - 0x12], 0x2d
mov word [rbp - 2], 0x3444
mov byte [rbp], 0x39
mov dword [rbp + 3], 0x7d3739
mov dword [rbp - 0x19], 0x462d3238
mov byte [rbp - 0xa], 0x44
mov byte [rbp - 0xf], 0x43
mov byte [rbp - 0x15], 0x44
mov byte [rbp - 3], 0x31
mov byte [rbp - 0x1c], 0x42
lea rax, [rsp + 0x68]
mov qword [rsp + 0x60], rax
call fcn.14001b940
mov rcx, rax
test rax, rax
je 0x14001233a
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x68]
call fcn.14001b1d0
test al, al
jne 0x140011c8e
lea rcx, [rbp - 0x20]
mov rax, rdi
inc rax
cmp byte [rcx + rax], 0
jne 0x140011c73
mov r8d, eax
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x68]
call fcn.14001b4a0
nop
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x50]
call fcn.1400819f0
nop
mov dword [rbp + 0x12], 0x42463041
mov word [rbp + 0x29], 0x4146
mov dword [rbp + 0x17], 0x43464234
mov dword [rbp + 9], 0x41354337
mov dword [rbp + 0x24], 0x42304532
mov word [rbp + 0xd], 0x3034
mov dword [rbp + 0x2b], 0x7d4538
mov dword [rbp + 0x1b], 0x3437382d
mov dword [rbp + 0x1f], 0x30432d41
mov byte [rbp + 0x23], 0x46
mov word [rbp + 0x10], 0x2d46
mov byte [rbp + 0x16], 0x2d
mov byte [rbp + 0xf], 0x45
mov byte [rbp + 0x28], 0x39
mov byte [rbp + 8], 0x7b
lea rax, [rsp + 0x70]
mov qword [rsp + 0x60], rax
call fcn.14001b940
mov rcx, rax
test rax, rax
je 0x140012345
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rdx, [rbp + 8]
lea rcx, [rsp + 0x70]
call fcn.14001b1d0
test al, al
jne 0x140011d5b
lea rcx, [rbp + 8]
mov rax, rdi
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140011d40
mov r8d, eax
lea rdx, [rbp + 8]
lea rcx, [rsp + 0x70]
call fcn.14001b4a0
nop
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x40]
call fcn.1400819f0
nop
mov dword [rbp + 0x46], 0x412d3735
mov dword [rbp + 0x39], 0x4641362d
mov dword [rbp + 0x31], 0x30384436
mov dword [rbp + 0x3e], 0x3434342d
mov dword [rbp + 0x42], 0x39382d62
mov dword [rbp + 0x35], 0x37373339
mov dword [rbp + 0x4c], 0x30463337
mov word [rbp + 0x50], 0x3232
mov dword [rbp + 0x53], 0x7d4530
mov byte [rbp + 0x30], 0x7b
mov word [rbp + 0x4a], 0x3733
mov byte [rbp + 0x3d], 0x30
mov byte [rbp + 0x52], 0x30
lea rax, [rsp + 0x78]
mov qword [rsp + 0x60], rax
call fcn.14001b940
mov rcx, rax
test rax, rax
je 0x140012350
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x78]
call fcn.14001b1d0
test al, al
jne 0x140011e1b
lea rcx, [rbp + 0x30]
mov rax, rdi
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x140011e00
mov r8d, eax
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x78]
call fcn.14001b4a0
nop
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x30]
call fcn.1400819f0
nop
mov rax, qword [rsp + 0x30]
cmp dword [rax - 0x10], 0
jne 0x140011f4d
mov rdx, qword [rsp + 0x40]
lea rcx, [rdx - 0x18]
lea rbx, [rax - 0x18]
cmp rcx, rbx
je 0x140011e94
cmp dword [rbx + 0x10], 0
jl 0x140011e86
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140011e86
call fcn.14001ade0
mov rsi, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140011e7b
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rsi + 0x18]
mov qword [rsp + 0x30], rax
jmp 0x140011e94
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x30]
call fcn.14001b4a0
mov dword [rbp - 0x64], 0x38782820
mov word [rbp - 0x60], 0x2936
mov byte [rbp - 0x5e], 0
call fcn.14001b940
mov rcx, rax
test rax, rax
je 0x14001235b
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
lea rdx, [rbp - 0x64]
lea rcx, [rsp + 0x60]
call fcn.14001b1d0
test al, al
jne 0x140011efb
lea rcx, [rbp - 0x64]
mov rax, rdi
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x140011ee0
mov r8d, eax
lea rdx, [rbp - 0x64]
lea rcx, [rsp + 0x60]
call fcn.14001b4a0
nop
mov rbx, qword [rsp + 0x60]
test rbx, rbx
je 0x140011f34
mov rcx, qword [rsp + 0x30]
cmp dword [rcx - 0x10], 0
jl 0x140011f34
mov rdx, rbx
call fcn.140027d44
test rax, rax
je 0x140011f34
cmp eax, dword [rsp + 0x30]
js 0x140011f34
mov r8, r15
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.140019d60
nop
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140011f4d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov dword [rbp - 0x51], 0x6f726843
mov dword [rbp - 0x42], 0x5c6e6f69
mov dword [rbp - 0x57], 0x6c676f6f
mov word [rbp - 0x35], 0x65
mov dword [rbp - 0x3a], 0x652e656d
mov dword [rbp - 0x47], 0x6163696c
mov dword [rbp - 0x4b], 0x7070415c
mov byte [rbp - 0x36], 0x78
mov word [rbp - 0x53], 0x5c65
mov dword [rbp - 0x3e], 0x6f726863
mov byte [rbp - 0x43], 0x74
mov word [rbp - 0x4d], 0x656d
mov byte [rbp - 0x58], 0x47
call fcn.14001b940
mov rcx, rax
test rax, rax
je 0x140012319
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
mov dword [rbp - 0x6c], 0x255c7325
mov word [rbp - 0x68], 0x73
mov r8, qword [rsp + 0x40]
cmp dword [r8 - 8], 1
jle 0x140011fe8
mov edx, dword [r8 - 0x10]
lea rcx, [rsp + 0x40]
call fcn.14001b310
mov r8, qword [rsp + 0x40]
lea r9, [rbp - 0x58]
lea rdx, [rbp - 0x6c]
lea rcx, [rsp + 0x48]
call fcn.14001a2b0
mov rcx, qword [rsp + 0x40]
movsxd rdx, dword [rcx - 0xc]
call fcn.140027150
test eax, eax
js 0x140012324
mov rcx, qword [rsp + 0x40]
cmp eax, dword [rcx - 0xc]
jg 0x140012324
mov dword [rcx - 0x10], eax
movsxd rcx, eax
mov rax, qword [rsp + 0x40]
mov byte [rcx + rax], 0
mov rbx, qword [rsp + 0x48]
mov rcx, rbx
call fcn.140083a10
test eax, eax
jne 0x140012262
mov r8, qword [rsp + 0x30]
cmp dword [r8 - 8], 1
jle 0x140012061
mov edx, dword [r8 - 0x10]
lea rcx, [rsp + 0x30]
call fcn.14001b310
mov r8, qword [rsp + 0x30]
lea r9, [rbp - 0x58]
lea rdx, [rbp - 0x6c]
lea rcx, [rsp + 0x48]
call fcn.14001a2b0
mov rcx, qword [rsp + 0x30]
movsxd rdx, dword [rcx - 0xc]
call fcn.140027150
test eax, eax
js 0x140012324
mov rcx, qword [rsp + 0x30]
cmp eax, dword [rcx - 0xc]
jg 0x140012324
mov dword [rcx - 0x10], eax
movsxd rcx, eax
mov rax, qword [rsp + 0x30]
mov byte [rcx + rax], 0
mov rbx, qword [rsp + 0x48]
mov rcx, rbx
call fcn.140083a10
test eax, eax
jne 0x140012262
mov rbx, qword [rsp + 0x58]
cmp dword [rbx - 8], 1
jle 0x1400120d8
mov edx, dword [rbx - 0x10]
lea rcx, [rsp + 0x58]
call fcn.14001b310
mov rbx, qword [rsp + 0x58]
lea r9, [rbp - 0x58]
mov r8, rbx
lea rdx, [rbp - 0x6c]
lea rcx, [rsp + 0x48]
call fcn.14001a2b0
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.140027150
test eax, eax
js 0x140012324
cmp eax, dword [rbx - 0xc]
jg 0x140012324
mov dword [rbx - 0x10], eax
cdqe
mov byte [rax + rbx], 0
mov rbx, qword [rsp + 0x48]
mov rcx, rbx
call fcn.140083a10
test eax, eax
jne 0x140012262
mov r8, qword [rsp + 0x50]
cmp dword [r8 - 8], 1
jle 0x140012147
mov edx, dword [r8 - 0x10]
lea rcx, [rsp + 0x50]
call fcn.14001b310
mov r8, qword [rsp + 0x50]
lea r9, [rbp - 0x58]
lea rdx, [rbp - 0x6c]
lea rcx, [rsp + 0x48]
call fcn.14001a2b0
mov rcx, qword [rsp + 0x50]
movsxd rdx, dword [rcx - 0xc]
call fcn.140027150
test eax, eax
js 0x140012324
mov rcx, qword [rsp + 0x50]
cmp eax, dword [rcx - 0xc]
jg 0x140012324
mov dword [rcx - 0x10], eax
movsxd rcx, eax
mov rax, qword [rsp + 0x50]
mov byte [rcx + rax], 0
mov rbx, qword [rsp + 0x48]
mov rcx, rbx
call fcn.140083a10
test eax, eax
jne 0x140012262
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400121bb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400121da
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400121f9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140012218
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x140012234
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor al, al
mov rcx, qword [rbp + 0x180]
xor rcx, rsp
call fcn.14001c9b0
lea r11, [rsp + 0x290]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov word [rsp + 0x3d], 0x73
mov byte [rsp + 0x3c], 0x25
mov r8, rbx
lea rdx, [rsp + 0x3c]
mov rcx, r14
call fcn.14001a2b0
nop
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140012299
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400122b8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400122d7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400122f6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x140012312
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov al, 1
jmp 0x140012236
mov ecx, 0x80004005
call fcn.14001b6d0
nop
mov ecx, 0x80070057
call fcn.14001b6d0
nop
mov ecx, 0x80004005
call fcn.14001b6d0
nop
mov ecx, 0x80004005
call fcn.14001b6d0
nop
mov ecx, 0x80004005
call fcn.14001b6d0
nop
mov ecx, 0x80004005
call fcn.14001b6d0
nop
mov ecx, 0x80004005
call fcn.14001b6d0
int3