Function at 0x14000a9a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov r11, rsp
push rbp
push r12
push r14
lea rbp, [r11 - 0xc8]
sub rsp, 0x1b0
mov rax, qword [0x140028058]
xor rax, rsp
mov qword [rbp + 0xa0], rax
mov qword [r11 + 0x18], rdi
xor r14d, r14d
mov qword [r11 + 0x20], r13
mov qword [rsp + 0x70], r14
call fcn.140001d00
lea r12, str.JzGgfKWpc4PVfMEuS1y9PIuiS9QAyQ2_PjXXLdhyHTWXLJ0VDxMsdwznQfexTDswMkuosGJ3BIqL1CGQP4Yg
lea rdx, [rsp + 0x70]
mov rcx, r12
call fcn.140001de0
test eax, eax
jle 0x14000aa2e
xor edx, edx
mov r8d, 0x105
mov rcx, r12
call fcn.140011a90
mov rdi, qword [rsp + 0x70]
mov rcx, r12
mov rdx, rdi
sub rcx, rdi
movzx eax, byte [rdx]
inc rdx
mov byte [rcx + rdx - 1], al
test al, al
jne 0x14000aa12
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov qword [rsp + 0x70], rax
lea r13, str.0Ojcm6F1oAD3PysvRq7zBcRItomMfFUFX6CODjdHCxAUQQKAGET1O1kEPuLMRThaBY2pkrq7YXdxjgsgCc7pKfEKN5VhY6O9J0b5wuQzqA0
lea rdx, [rsp + 0x70]
mov rcx, r13
call fcn.140001de0
test eax, eax
jle 0x14000aa8c
xor edx, edx
mov r8d, 0x411
mov rcx, r13
call fcn.140011a90
mov rdi, qword [rsp + 0x70]
mov rcx, r13
mov rdx, rdi
sub rcx, rdi
nop word [rax + rax]
movzx eax, byte [rdx]
inc rdx
mov byte [rcx + rdx - 1], al
test al, al
jne 0x14000aa70
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov qword [rsp + 0x70], rax
lea rdi, str.gkOYUrb7SrvvIThKcQdrIfdxBzsqBqbQKIPlYXgCVlIU2O6lnhnSq4XujdO7zUTmcoOCng8NVPK5hK6WqSg
lea rdx, [rsp + 0x70]
mov rcx, rdi
call fcn.140001de0
test eax, eax
jle 0x14000aad9
xor edx, edx
mov r8d, 0x105
mov rcx, rdi
call fcn.140011a90
mov rcx, qword [rsp + 0x70]
mov rdx, rcx
sub rdi, rcx
nop
movzx eax, byte [rdx]
inc rdx
mov byte [rdi + rdx - 1], al
test al, al
jne 0x14000aac0
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov qword [rsp + 0x70], rax
lea rdi, str.4knuCn8fTYbDSFBKr3RUXWrh2asslgdR4Z0mSQrc1nZcW4tpo22LRNjFckKCNL77ie0joBJLwtX4qP8O_JZg
lea rdx, [rsp + 0x70]
mov rcx, rdi
call fcn.140001de0
test eax, eax
jle 0x14000ab29
xor edx, edx
mov r8d, 0x105
mov rcx, rdi
call fcn.140011a90
mov rcx, qword [rsp + 0x70]
mov rdx, rcx
sub rdi, rcx
nop dword [rax]
movzx eax, byte [rdx]
inc rdx
mov byte [rdi + rdx - 1], al
test al, al
jne 0x14000ab10
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov qword [rsp + 0x70], rax
lea rdi, str.IRFgeKRprw7FkpkZK5agGPrMcWBNz3jFEZvwBTBICdeYgU2LuOubhnvJiTZA6i1CI0WFqy9l3jpXsDxD9_Lbg
lea rdx, [rsp + 0x70]
mov rcx, rdi
call fcn.140001de0
test eax, eax
jle 0x14000ab79
xor edx, edx
mov r8d, 0x105
mov rcx, rdi
call fcn.140011a90
mov rcx, qword [rsp + 0x70]
mov rdx, rcx
sub rdi, rcx
nop dword [rax]
movzx eax, byte [rdx]
inc rdx
mov byte [rdi + rdx - 1], al
test al, al
jne 0x14000ab60
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov qword [rsp + 0x70], rax
lea rdi, str.fvXJalwD5XELoaQ6aw5WWHMUEDu4C1ffAOaU8aLgyY2egb2yEKVDnllLFda0Rv5o9jTNBz4UK8pe1CjkPA
lea rdx, [rsp + 0x70]
mov rcx, rdi
call fcn.140001de0
test eax, eax
jle 0x14000abc9
xor edx, edx
mov r8d, 0x105
mov rcx, rdi
call fcn.140011a90
mov rcx, qword [rsp + 0x70]
mov rdx, rcx
sub rdi, rcx
nop dword [rax]
movzx eax, byte [rdx]
inc rdx
mov byte [rdi + rdx - 1], al
test al, al
jne 0x14000abb0
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov qword [rsp + 0x70], rax
lea rdi, str.WcnOF3g1bYCstqMEaW2FmEV1qIqLnmSCAtnM3OCwTSvW57j9ocwq5pPzPO52ghXeChrCAW7DHwRNKUspmKvKA
lea rdx, [rsp + 0x70]
mov rcx, rdi
call fcn.140001de0
test eax, eax
jle 0x14000ac19
xor edx, edx
mov r8d, 0x105
mov rcx, rdi
call fcn.140011a90
mov rcx, qword [rsp + 0x70]
mov rdx, rcx
sub rdi, rcx
nop dword [rax]
movzx eax, byte [rdx]
inc rdx
mov byte [rdi + rdx - 1], al
test al, al
jne 0x14000ac00
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov qword [rsp + 0x70], rax
lea rdi, str.bsMMxrMHDNN5HM0Zo9D8A1pQauyLJbZui7MfF9cKLdDNwpaFhJJcnc8YuE63Nw4TrrOhs4pB_rjzLOGqdpA
lea rdx, [rsp + 0x70]
mov rcx, rdi
call fcn.140001de0
test eax, eax
jle 0x14000ac69
xor edx, edx
mov r8d, 0x105
mov rcx, rdi
call fcn.140011a90
mov rcx, qword [rsp + 0x70]
mov rdx, rcx
sub rdi, rcx
nop dword [rax]
movzx eax, byte [rdx]
inc rdx
mov byte [rdi + rdx - 1], al
test al, al
jne 0x14000ac50
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov qword [rsp + 0x70], rax
lea rdi, str.EFlor10Ns_CjJNURj08J7_WzItsolv4iquvIx546CfvVZRNd_Ihk1IH_B8FJzlUQoCpRfSfYYKBhDOpRMbS_w
lea rdx, [rsp + 0x70]
mov rcx, rdi
call fcn.140001de0
test eax, eax
jle 0x14000acb9
xor edx, edx
mov r8d, 0x105
mov rcx, rdi
call fcn.140011a90
mov rcx, qword [rsp + 0x70]
mov rdx, rcx
sub rdi, rcx
nop dword [rax]
movzx eax, byte [rdx]
inc rdx
mov byte [rdi + rdx - 1], al
test al, al
jne 0x14000aca0
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov qword [rsp + 0x70], rax
lea rdi, str.JCX4zDsXpAOm5DFLyCJGYN7Og8vvlOlWx5ClYVYrSP5bN31obc69A_QylkENu8_qrDo9_vmaIFCIRintujtTA
lea rdx, [rsp + 0x70]
mov rcx, rdi
call fcn.140001de0
test eax, eax
jle 0x14000ad09
xor edx, edx
mov r8d, 0x209
mov rcx, rdi
call fcn.140011a90
mov rcx, qword [rsp + 0x70]
mov rdx, rcx
sub rdi, rcx
nop dword [rax]
movzx eax, byte [rdx]
inc rdx
mov byte [rdi + rdx - 1], al
test al, al
jne 0x14000acf0
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x78]
call qword [sym.imp.ole32.dll_CoCreateGuid]
test eax, eax
jne 0x14000adf4
movdqa xmm0, xmmword [str._08x_04x_04x_02x_02x_02x_02x_02xSOFTWAREMicrosoftWindowsCurreinvalid_distance_too_far_back]
movdqa xmm1, xmmword [0x140024c50]
lea rcx, [rbp - 0x43]
xor edx, edx
mov r8d, 0xd7
mov qword [rsp + 0x1d0], rbx
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmmword [rbp - 0x60], xmm1
mov dword [rbp - 0x50], 0x78323025
mov dword [rbp - 0x4c], 0x78323025
mov dword [rbp - 0x48], 0x78323025
mov qword [rsp + 0x1d8], rsi
mov byte [rbp - 0x44], r14b
call fcn.140011a90
movzx edx, byte [rbp - 0x79]
movzx ecx, byte [rbp - 0x7b]
movzx r8d, byte [rbp - 0x7d]
movzx r9d, byte [rbp - 0x7e]
movzx eax, byte [rbp - 0x7a]
movzx edi, byte [rbp - 0x7c]
movzx r10d, byte [rbp - 0x7f]
movzx r11d, byte [rbp - 0x80]
movzx ebx, word [rsp + 0x7e]
movzx esi, word [rsp + 0x7c]
mov dword [rsp + 0x68], edx
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x58], ecx
mov dword [rsp + 0x50], edi
mov dword [rsp + 0x48], r8d
mov dword [rsp + 0x40], r9d
mov r9d, dword [rsp + 0x78]
mov dword [rsp + 0x38], r10d
mov dword [rsp + 0x30], r11d
lea r8, [rbp - 0x70]
lea rcx, [0x14002e3e0]
mov edx, 0x30
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], esi
call fcn.14000f98c
mov rsi, qword [rsp + 0x1d8]
mov rbx, qword [rsp + 0x1d0]
xor eax, eax
lea rdx, [0x14002e3e0]
lea rcx, [0x14002e368]
lea r8d, [rax + 0x10]
mov qword [0x14002e368], rax
mov qword [0x14002e370], rax
mov byte [0x14002e378], al
call fcn.14000fa50
lea rdi, str.u4eqb59m482PeAogasJ3cjGxaHI582rDCJn61rP22H23Xuxw37Zzy_qf_SLsrpLwmWko9aYFNZ14_g9HArKGewb_8h8tPjv7iGXhRnKAjXSePpI9p1ZC9gcGUkmQ3Fouk50M8BPzAWJZZELeQV6iJ3t08S_ht84M6d51sbc93SobRyIJq78L5B5EZZXRRVZ_4pyceXte4QGIJYLiJuFiEnb6ltyiyWqVi87L4JLYuip2BZc1C2WKhXCMLP8EsjjaEIIYWWznaEBiFxwntQ4D6x4NHk4sSYWxrWM8A
lea rdx, [rsp + 0x70]
mov rcx, rdi
call fcn.140001de0
test eax, eax
jle 0x14000ae79
xor edx, edx
mov r8d, 0xa29
mov rcx, rdi
call fcn.140011a90
mov rcx, qword [rsp + 0x70]
mov rdx, rcx
sub rdi, rcx
nop word [rax + rax]
movzx eax, byte [rdx]
inc rdx
mov byte [rdi + rdx - 1], al
test al, al
jne 0x14000ae60
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x70]
lea rcx, str.qVdssfWuJ3zt1j_BSSD5Z0CD4czdTRFOD5vKFxjSYDYMbr2Ra_meYsh7OIaUqClzjJNtzsfrPn8OjA34nfREH8ltDRROT5IpdhaAcF8KAN6Xpw3rThAZleREClI5gYSJQq3UJIjYxD9LJQIRsdFMM8u9ERys3MMP1YY5y3QAeOvNxPToT8GlZRaCgl7CMVhft8Yy16PPelW7pWMp1oZAGCuPOOFa5Om4LaYQ8HaU5wx1ObzdgtBBKSVjeG4nrcczS6fFYWE4otQ9NElnXcovvu7cXVB_tsb106uTIZUX345obTM5GkrB4aJskIQWHCA7SYR8V2cTeheVVpeV_zKSOvSjHutrxFZ0Sf35A1_NobmtvYVOrNOK_UKZrCLuBVt5YEjbB6tndKW2PvZrkpBDF8By0hUf70J0HoJvV0UpzJHlk7cJIIdeY9GuzHFLVCP48hZ4mmiFVQYEEYfPp_kfOEqnstH0OtGqUhY5BA45BN3nf6D0cjQA27bVylDOTf96onlNpxtRJ7vhaKSY351jhoU1lVJqXEbSaBsltV3taQH1Cw2jwleTRPWIJDYc5KOIBuAVpuIJ_jHzFKg12Cy85UHEEg9K4XNEqNK0iHaBn0OXFYUPsWVJW1hg04Orcx526SHEJfXddvuinqrRT301YW2_5MzVrmgJYiLkhAIIMzvH4tlUkTHAcVWnLUOHeGs50QfBnDixZdM8CDvCj08EDjVlU1HeRZr3xEDtOxpVylFb565d1nS4CTfoGAUsZGodrfdTY2kvC0MSZP_F0JDcsnm1Tf9jlfe2ofYZ7lRVNWuDUguqWl_7YjqCnETW3Ae5Q7wprlNGy2Sl3w_HoX4mn2wYmKxvkbkOPMD9qLK_6zaP8FgkiGA00X3Vq61Mia614ktvGaVsw27Nko7J89qhKTsCkOWmp_X2A3gIfqta8q_vLJKTzqDzKWCD8yyPcAqkJsK16HYF3j8Z6jdQrVNIGxjRl6780kqjMNiY0B3zxbHsm0XJOEGNPaKBx4qxN7koBtQryhp_9hY_2MVAaG26udIAhe0M0
call fcn.140001de0
test eax, eax
jle 0x14000aed7
lea rcx, str.qVdssfWuJ3zt1j_BSSD5Z0CD4czdTRFOD5vKFxjSYDYMbr2Ra_meYsh7OIaUqClzjJNtzsfrPn8OjA34nfREH8ltDRROT5IpdhaAcF8KAN6Xpw3rThAZleREClI5gYSJQq3UJIjYxD9LJQIRsdFMM8u9ERys3MMP1YY5y3QAeOvNxPToT8GlZRaCgl7CMVhft8Yy16PPelW7pWMp1oZAGCuPOOFa5Om4LaYQ8HaU5wx1ObzdgtBBKSVjeG4nrcczS6fFYWE4otQ9NElnXcovvu7cXVB_tsb106uTIZUX345obTM5GkrB4aJskIQWHCA7SYR8V2cTeheVVpeV_zKSOvSjHutrxFZ0Sf35A1_NobmtvYVOrNOK_UKZrCLuBVt5YEjbB6tndKW2PvZrkpBDF8By0hUf70J0HoJvV0UpzJHlk7cJIIdeY9GuzHFLVCP48hZ4mmiFVQYEEYfPp_kfOEqnstH0OtGqUhY5BA45BN3nf6D0cjQA27bVylDOTf96onlNpxtRJ7vhaKSY351jhoU1lVJqXEbSaBsltV3taQH1Cw2jwleTRPWIJDYc5KOIBuAVpuIJ_jHzFKg12Cy85UHEEg9K4XNEqNK0iHaBn0OXFYUPsWVJW1hg04Orcx526SHEJfXddvuinqrRT301YW2_5MzVrmgJYiLkhAIIMzvH4tlUkTHAcVWnLUOHeGs50QfBnDixZdM8CDvCj08EDjVlU1HeRZr3xEDtOxpVylFb565d1nS4CTfoGAUsZGodrfdTY2kvC0MSZP_F0JDcsnm1Tf9jlfe2ofYZ7lRVNWuDUguqWl_7YjqCnETW3Ae5Q7wprlNGy2Sl3w_HoX4mn2wYmKxvkbkOPMD9qLK_6zaP8FgkiGA00X3Vq61Mia614ktvGaVsw27Nko7J89qhKTsCkOWmp_X2A3gIfqta8q_vLJKTzqDzKWCD8yyPcAqkJsK16HYF3j8Z6jdQrVNIGxjRl6780kqjMNiY0B3zxbHsm0XJOEGNPaKBx4qxN7koBtQryhp_9hY_2MVAaG26udIAhe0M0
xor edx, edx
mov r8d, 0xa29
call fcn.140011a90
mov rdi, qword [rsp + 0x70]
lea rcx, str.qVdssfWuJ3zt1j_BSSD5Z0CD4czdTRFOD5vKFxjSYDYMbr2Ra_meYsh7OIaUqClzjJNtzsfrPn8OjA34nfREH8ltDRROT5IpdhaAcF8KAN6Xpw3rThAZleREClI5gYSJQq3UJIjYxD9LJQIRsdFMM8u9ERys3MMP1YY5y3QAeOvNxPToT8GlZRaCgl7CMVhft8Yy16PPelW7pWMp1oZAGCuPOOFa5Om4LaYQ8HaU5wx1ObzdgtBBKSVjeG4nrcczS6fFYWE4otQ9NElnXcovvu7cXVB_tsb106uTIZUX345obTM5GkrB4aJskIQWHCA7SYR8V2cTeheVVpeV_zKSOvSjHutrxFZ0Sf35A1_NobmtvYVOrNOK_UKZrCLuBVt5YEjbB6tndKW2PvZrkpBDF8By0hUf70J0HoJvV0UpzJHlk7cJIIdeY9GuzHFLVCP48hZ4mmiFVQYEEYfPp_kfOEqnstH0OtGqUhY5BA45BN3nf6D0cjQA27bVylDOTf96onlNpxtRJ7vhaKSY351jhoU1lVJqXEbSaBsltV3taQH1Cw2jwleTRPWIJDYc5KOIBuAVpuIJ_jHzFKg12Cy85UHEEg9K4XNEqNK0iHaBn0OXFYUPsWVJW1hg04Orcx526SHEJfXddvuinqrRT301YW2_5MzVrmgJYiLkhAIIMzvH4tlUkTHAcVWnLUOHeGs50QfBnDixZdM8CDvCj08EDjVlU1HeRZr3xEDtOxpVylFb565d1nS4CTfoGAUsZGodrfdTY2kvC0MSZP_F0JDcsnm1Tf9jlfe2ofYZ7lRVNWuDUguqWl_7YjqCnETW3Ae5Q7wprlNGy2Sl3w_HoX4mn2wYmKxvkbkOPMD9qLK_6zaP8FgkiGA00X3Vq61Mia614ktvGaVsw27Nko7J89qhKTsCkOWmp_X2A3gIfqta8q_vLJKTzqDzKWCD8yyPcAqkJsK16HYF3j8Z6jdQrVNIGxjRl6780kqjMNiY0B3zxbHsm0XJOEGNPaKBx4qxN7koBtQryhp_9hY_2MVAaG26udIAhe0M0
mov rdx, rdi
sub rcx, rdi
nop word [rax + rax]
movzx eax, byte [rdx]
inc rdx
mov byte [rdx + rcx - 1], al
test al, al
jne 0x14000aec0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LocalFree]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x30], r14
xor r9d, r9d
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rax
mov rax, qword [0x14002e308]
lea r8d, [r9 + 1]
lea rcx, str.qVdssfWuJ3zt1j_BSSD5Z0CD4czdTRFOD5vKFxjSYDYMbr2Ra_meYsh7OIaUqClzjJNtzsfrPn8OjA34nfREH8ltDRROT5IpdhaAcF8KAN6Xpw3rThAZleREClI5gYSJQq3UJIjYxD9LJQIRsdFMM8u9ERys3MMP1YY5y3QAeOvNxPToT8GlZRaCgl7CMVhft8Yy16PPelW7pWMp1oZAGCuPOOFa5Om4LaYQ8HaU5wx1ObzdgtBBKSVjeG4nrcczS6fFYWE4otQ9NElnXcovvu7cXVB_tsb106uTIZUX345obTM5GkrB4aJskIQWHCA7SYR8V2cTeheVVpeV_zKSOvSjHutrxFZ0Sf35A1_NobmtvYVOrNOK_UKZrCLuBVt5YEjbB6tndKW2PvZrkpBDF8By0hUf70J0HoJvV0UpzJHlk7cJIIdeY9GuzHFLVCP48hZ4mmiFVQYEEYfPp_kfOEqnstH0OtGqUhY5BA45BN3nf6D0cjQA27bVylDOTf96onlNpxtRJ7vhaKSY351jhoU1lVJqXEbSaBsltV3taQH1Cw2jwleTRPWIJDYc5KOIBuAVpuIJ_jHzFKg12Cy85UHEEg9K4XNEqNK0iHaBn0OXFYUPsWVJW1hg04Orcx526SHEJfXddvuinqrRT301YW2_5MzVrmgJYiLkhAIIMzvH4tlUkTHAcVWnLUOHeGs50QfBnDixZdM8CDvCj08EDjVlU1HeRZr3xEDtOxpVylFb565d1nS4CTfoGAUsZGodrfdTY2kvC0MSZP_F0JDcsnm1Tf9jlfe2ofYZ7lRVNWuDUguqWl_7YjqCnETW3Ae5Q7wprlNGy2Sl3w_HoX4mn2wYmKxvkbkOPMD9qLK_6zaP8FgkiGA00X3Vq61Mia614ktvGaVsw27Nko7J89qhKTsCkOWmp_X2A3gIfqta8q_vLJKTzqDzKWCD8yyPcAqkJsK16HYF3j8Z6jdQrVNIGxjRl6780kqjMNiY0B3zxbHsm0XJOEGNPaKBx4qxN7koBtQryhp_9hY_2MVAaG26udIAhe0M0
xor edx, edx
mov dword [rsp + 0x70], r14d
call qword [rax + 0x20]
test eax, eax
je 0x14000af72
mov edx, dword [rsp + 0x70]
mov ecx, 0x40
inc edx
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov rdi, rax
test rax, rax
je 0x14000af72
lea rax, [rsp + 0x70]
mov qword [rsp + 0x30], r14
xor edx, edx
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rax
mov rax, qword [0x14002e308]
lea r8d, [rdx + 1]
lea rcx, str.qVdssfWuJ3zt1j_BSSD5Z0CD4czdTRFOD5vKFxjSYDYMbr2Ra_meYsh7OIaUqClzjJNtzsfrPn8OjA34nfREH8ltDRROT5IpdhaAcF8KAN6Xpw3rThAZleREClI5gYSJQq3UJIjYxD9LJQIRsdFMM8u9ERys3MMP1YY5y3QAeOvNxPToT8GlZRaCgl7CMVhft8Yy16PPelW7pWMp1oZAGCuPOOFa5Om4LaYQ8HaU5wx1ObzdgtBBKSVjeG4nrcczS6fFYWE4otQ9NElnXcovvu7cXVB_tsb106uTIZUX345obTM5GkrB4aJskIQWHCA7SYR8V2cTeheVVpeV_zKSOvSjHutrxFZ0Sf35A1_NobmtvYVOrNOK_UKZrCLuBVt5YEjbB6tndKW2PvZrkpBDF8By0hUf70J0HoJvV0UpzJHlk7cJIIdeY9GuzHFLVCP48hZ4mmiFVQYEEYfPp_kfOEqnstH0OtGqUhY5BA45BN3nf6D0cjQA27bVylDOTf96onlNpxtRJ7vhaKSY351jhoU1lVJqXEbSaBsltV3taQH1Cw2jwleTRPWIJDYc5KOIBuAVpuIJ_jHzFKg12Cy85UHEEg9K4XNEqNK0iHaBn0OXFYUPsWVJW1hg04Orcx526SHEJfXddvuinqrRT301YW2_5MzVrmgJYiLkhAIIMzvH4tlUkTHAcVWnLUOHeGs50QfBnDixZdM8CDvCj08EDjVlU1HeRZr3xEDtOxpVylFb565d1nS4CTfoGAUsZGodrfdTY2kvC0MSZP_F0JDcsnm1Tf9jlfe2ofYZ7lRVNWuDUguqWl_7YjqCnETW3Ae5Q7wprlNGy2Sl3w_HoX4mn2wYmKxvkbkOPMD9qLK_6zaP8FgkiGA00X3Vq61Mia614ktvGaVsw27Nko7J89qhKTsCkOWmp_X2A3gIfqta8q_vLJKTzqDzKWCD8yyPcAqkJsK16HYF3j8Z6jdQrVNIGxjRl6780kqjMNiY0B3zxbHsm0XJOEGNPaKBx4qxN7koBtQryhp_9hY_2MVAaG26udIAhe0M0
mov r9, rdi
call qword [rax + 0x20]
test eax, eax
je 0x14000af69
mov edx, dword [rsp + 0x70]
test edx, edx
jle 0x14000af72
mov rcx, rdi
call fcn.140001f30
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LocalFree]
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, r13
repne scasb al, byte [rdi]
mov rdx, r14
not rcx
dec rcx
movsxd rcx, ecx
test rcx, rcx
js 0x14000afab
nop
cmp byte [rdx + r13], 0x2c
movzx eax, byte [rdx + r13]
cmove eax, r14d
inc rdx
mov byte [rdx + r13 - 1], al
cmp rdx, rcx
jle 0x14000af90
mov r13, qword [rsp + 0x1e8]
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, r12
mov rdx, r14
repne scasb al, byte [rdi]
mov rdi, qword [rsp + 0x1e0]
not rcx
dec rcx
movsxd rcx, ecx
test rcx, rcx
js 0x14000affd
nop word [rax + rax]
cmp byte [rdx + r12], 0x2c
movzx eax, byte [rdx + r12]
cmove eax, r14d
inc rdx
mov byte [rdx + r12 - 1], al
cmp rdx, rcx
jle 0x14000afe0
xor eax, eax
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.14000f440
add rsp, 0x1b0
pop r14
pop r12
pop rbp
ret