Function at 0x14000a630
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xe0
mov rax, qword [0x140153040]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov rsi, rdx
mov r15, rcx
mov qword [rbp - 9], rcx
mov qword [rbp - 0x19], rdx
xor r12d, r12d
mov dword [rbp - 0x41], r12d
mov qword [rbp - 9], r12
lea rax, [0x1401530b8]
mov qword [rbp - 1], rax
lea rdx, [rbp - 9]
lea rcx, [rbp - 0x61]
call fcn.140003110
mov dword [rbp - 0x41], 2
cmp dword [rbp - 9], r12d
jne 0x14000abf6
lea rax, [rbp - 0x61]
cmp qword [rbp - 0x49], 7
cmova rax, qword [rbp - 0x61]
mov qword [rbp - 9], rax
mov rax, qword [rbp - 0x51]
mov qword [rbp - 1], rax
call fcn.140058a8c
movaps xmm0, xmmword [rbp - 9]
movdqa xmmword [rbp - 9], xmm0
lea r8, [rbp - 9]
mov edx, eax
lea rcx, [rbp - 0x39]
call fcn.140007dd0
mov rdx, qword [0x14016b7d0]
cmp rdx, 0xf
jbe 0x14000a710
mov rcx, qword [0x14016b7b8]
inc rdx
cmp rdx, 0x1000
jb 0x14000a70b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000a775
mov rcx, r8
call fcn.140059518
movups xmm0, xmmword [rbp - 0x39]
movups xmmword [0x14016b7b8], xmm0
movups xmm1, xmmword [rbp - 0x29]
movups xmmword [0x14016b7c8], xmm1
movdqa xmm0, xmmword [0x140147570]
movdqu xmmword [rbp - 0x29], xmm0
mov byte [rbp - 0x39], 0
mov rdx, qword [rbp - 0x49]
cmp rdx, 7
jbe 0x14000a781
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a77c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a77c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140059518
mov dword [rbp - 9], 0x69622e27
mov word [rbp - 5], 0x6e
lea rcx, [rsp + 0x20]
call fcn.140009990
mov rbx, rax
mov r8, qword [rax + 0x10]
mov qword [rax + 0x10], r8
mov rdi, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14000a7b0
mov rdi, qword [rax]
lea r13, [0x14005cd29]
cmp r13, rdi
jbe 0x14000a7d2
lea rax, [rdi + r8]
cmp r13, rax
ja 0x14000a7d2
cmp rdi, r13
jbe 0x14000a7d2
mov r14, rdi
sub r14, r13
jmp 0x14000a7d5
mov r14, r12
inc r8
mov rdx, rdi
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
mov rdx, r13
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rdi + r14]
mov r8, r14
neg r8
lea rdx, [r14 + r13]
call sub.VCRUNTIME140.dll_memcpy
xorps xmm0, xmm0
movups xmmword [rbp - 0x61], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x51], xmm1
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x61], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x51], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
lea rax, [rbp - 8]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000a840
lea rdx, [rbp - 8]
lea rcx, [rbp - 0x61]
call fcn.140007470
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x39], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x29], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp - 0x39]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
movq r8, xmm1
lea rcx, [0x14016b7b8]
call fcn.140007470
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 0xf
jbe 0x14000a8e5
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a8df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a8df
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059518
nop
mov rdx, qword [rbp - 0x49]
cmp rdx, 0xf
jbe 0x14000a923
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a91e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a91e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059518
movdqa xmm0, xmmword [0x140147570]
movdqu xmmword [rbp - 0x51], xmm0
mov byte [rbp - 0x61], 0
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x14000a974
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a96f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a96f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059518
lea rdx, [0x14016b7b8]
mov rcx, rsi
call fcn.140004f80
test al, al
je 0x14000aa0e
lea rdx, [0x14016b7b8]
mov rcx, r15
call fcn.140007590
nop
mov rdx, qword [rsi + 0x18]
cmp rdx, 0xf
jbe 0x14000a9d5
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x14000a9d0
add rdx, 0x27
mov rax, qword [rcx - 8]
sub rcx, rax
add rcx, 0xfffffffffffffff8
cmp rcx, 0x1f
ja 0x14000abef
mov rcx, rax
call fcn.140059518
mov rax, r15
mov byte [rsi], 0
mov qword [rsi + 0x18], 0xf
mov qword [rsi + 0x10], r12
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.140059220
mov rbx, qword [rsp + 0x130]
add rsp, 0xe0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
movdqa xmm0, xmmword [0x140147c90]
movdqu xmmword [rbp - 9], xmm0
mov dword [rbp + 7], 0x2064616f
mov dword [rbp + 0xb], 0x656c6966
mov word [rbp + 0xf], 0x21
lea rdx, [rbp - 8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400082a0
lea rdx, [0x140008470]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov cl, 0x36
mov word [rbp - 9], 0x36
movsx ecx, cl
movzx eax, cx
xor ax, 0x73
mov word [rbp - 7], ax
movzx eax, cx
xor ax, 0x44
mov word [rbp - 5], ax
mov word [rbp - 3], ax
xor cx, 0x59
mov word [rbp - 1], cx
mov word [rbp + 1], ax
mov word [rbp + 3], r12w
mov cl, 0x10
mov word [rsp + 0x20], 0x10
movsx edi, cl
movzx eax, di
xor ax, 0x56
mov word [rsp + 0x22], ax
movzx r11d, di
xor r11w, 0x71
mov word [rsp + 0x24], r11w
movzx ebx, di
xor bx, 0x79
mov word [rsp + 0x26], bx
movzx r10d, di
xor r10w, 0x7c
mov word [rsp + 0x28], r10w
movzx r9d, di
xor r9w, 0x75
mov word [rsp + 0x2a], r9w
movzx r8d, di
xor r8w, 0x74
mov word [rsp + 0x2c], r8w
movzx edx, di
xor dx, 0x30
mov word [rsp + 0x2e], dx
movzx eax, di
xor ax, 0x64
mov word [rsp + 0x30], ax
movzx ecx, di
xor cx, 0x7f
mov word [rsp + 0x32], cx
mov word [rsp + 0x34], dx
mov word [rsp + 0x36], r8w
mov word [rsp + 0x38], cx
movzx eax, di
xor ax, 0x67
mov word [rbp - 0x7f], ax
movzx eax, di
xor ax, 0x7e
mov word [rbp - 0x7d], ax
mov word [rbp - 0x7b], r10w
mov word [rbp - 0x79], cx
mov word [rbp - 0x77], r11w
mov word [rbp - 0x75], r8w
mov word [rbp - 0x73], dx
movzx eax, di
xor ax, 0x76
mov word [rbp - 0x71], ax
mov word [rbp - 0x6f], bx
mov word [rbp - 0x6d], r10w
mov word [rbp - 0x6b], r9w
xor di, 0x31
mov word [rbp - 0x69], di
mov word [rbp - 0x67], r12w
xor r9d, r9d
lea r8, [rbp - 7]
lea rdx, [rsp + 0x22]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rax, [0x14016b7b8]
cmp qword [0x14016b7d0], 0xf
cmova rax, qword [0x14016b7b8]
mov qword [0x14016b7c8], r12
mov byte [rax], 0
lea rdx, [0x14016b7b8]
mov rcx, r15
call fcn.140007590
nop
mov rdx, qword [rsi + 0x18]
cmp rdx, 0xf
jbe 0x14000a9d5
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x14000a9d0
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000abef
mov rcx, r8
jmp 0x14000a9d0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea r8, [rbp - 0x61]
lea rdx, [rbp - 9]
call fcn.140002ce0
int3