Function at 0x14000ec80
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x398]
sub rsp, 0x498
mov qword [rbp + 0x58], 0xfffffffffffffffe
mov rax, qword [0x1400970b0]
xor rax, rsp
mov qword [rbp + 0x380], rax
mov qword [rbp + 0x40], r9
mov qword [rbp + 0x48], r8
mov r13, rdx
mov r15, rcx
mov qword [rbp + 0x60], rcx
mov qword [rbp + 0x80], 0xf
xor edi, edi
mov qword [rbp + 0x78], rdi
mov byte [rbp + 0x68], dil
mov word [rbp + 0x147], 0x7068
mov word [rbp + 0x14a], 0x6975
mov dword [rbp + 0x151], 0x73253d6d
mov dword [rbp + 0x143], 0x702e7364
mov dword [rbp + 0x14d], 0x2673253d
mov word [rbp + 0x140], 0x752f
mov byte [rbp + 0x14c], 0x64
mov byte [rbp + 0x142], 0x69
mov byte [rbp + 0x155], dil
mov byte [rbp + 0x149], 0x3f
call fcn.140034030
mov rcx, rax
test rax, rax
jne 0x14000ed49
mov ecx, 0x80004005
call fcn.140033340
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x60], rax
lea r9, str.5e5399be05004b61a31c45de7d4b854d
mov r8, qword [r15]
lea rdx, [rbp + 0x140]
lea rcx, [rbp - 0x60]
call fcn.140033b50
call fcn.140034030
mov rcx, rax
test rax, rax
jne 0x14000ed89
mov ecx, 0x80004005
call fcn.140033340
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
mov dword [rbp + 0x139], 0x732573
mov word [rbp + 0x130], 0x7468
mov dword [rbp + 0x135], 0x252f2f3a
mov word [rbp + 0x133], 0x7370
mov byte [rbp + 0x132], 0x74
lea rcx, [rbp + 0x20]
call fcn.140034110
nop
mov r9, qword [rbp - 0x60]
mov r8, qword [rax]
lea rdx, [rbp + 0x130]
lea rcx, [rbp - 0x78]
call fcn.140033b50
nop
mov rdx, qword [rbp + 0x20]
add rdx, 0xffffffffffffffe8
or rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000ee07
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov r14d, edi
mov r12d, 1
cmp r14d, 3
jne 0x14000ee62
mov dword [rbp + 0x114], 0x7068702e
mov dword [rbp + 0x110], 0x73646975
mov byte [rbp + 0x118], 0
mov dword [rbp + 0x10a], 0x7068702e
mov byte [rbp + 0x10e], 0
mov word [rbp + 0x108], 0x6475
lea r8, [rbp + 0x108]
lea rdx, [rbp + 0x110]
lea rcx, [rbp - 0x78]
call fcn.1400360d0
mov rcx, qword [rbp - 0x78]
add rcx, 0xffffffffffffffe8
call fcn.140033580
add rax, 0x18
mov qword [rbp - 0x80], rax
mov dword [rbp + 0x125], 0x64253d
mov word [rbp + 0x120], 0x7426
mov word [rbp + 0x123], 0x656d
mov byte [rbp + 0x122], 0x69
call fcn.140023f10
mov r8d, eax
lea rdx, [rbp + 0x120]
lea rcx, [rbp - 0x80]
call fcn.140033160
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x160]
call fcn.140045030
mov edx, 0x104
lea rcx, [rbp + 0x160]
call fcn.140007420
lea rcx, [rbp + 0xc8]
call fcn.140026bc0
nop
mov qword [rbp + 0xc0], 0xf
mov qword [rbp + 0xb8], rdi
mov byte [rbp + 0xa8], 0
cmp byte [rbp + 0x160], 0
jne 0x14000ef0b
mov r8, rdi
jmp 0x14000ef1f
lea rax, [rbp + 0x160]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14000ef15
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0xa8]
call fcn.14002c510
nop
mov qword [rbp + 0xa0], 0xf
mov qword [rbp + 0x98], rdi
mov byte [rbp + 0x88], 0
mov rdx, qword [rbp - 0x80]
cmp byte [rdx], 0
jne 0x14000ef5a
mov r8, rdi
jmp 0x14000ef6a
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14000ef60
lea rcx, [rbp + 0x88]
call fcn.14002c510
nop
lea r9, [rbp + 0x68]
lea r8, [rbp + 0xa8]
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0xc8]
call fcn.140026dc0
movzx ebx, al
mov rcx, qword [rbp + 0xa0]
cmp rcx, 0x10
jb 0x14000eff0
inc rcx
mov rdx, qword [rbp + 0x88]
cmp rcx, 0x1000
jb 0x14000efe8
test dl, 0x1f
jne 0x14000f2da
mov rax, qword [rdx - 8]
cmp rax, rdx
jae 0x14000f2d4
sub rdx, rax
cmp rdx, 8
jb 0x14000f2ce
cmp rdx, 0x27
ja 0x14000f2c8
mov rdx, rax
mov rcx, rdx
call fcn.14003fbe8
mov qword [rbp + 0xa0], 0xf
mov qword [rbp + 0x98], rdi
mov byte [rbp + 0x88], 0
mov rax, qword [rbp + 0xc0]
cmp rax, 0x10
jb 0x14000f05d
inc rax
mov rcx, qword [rbp + 0xa8]
cmp rax, 0x1000
jb 0x14000f058
test cl, 0x1f
jne 0x14000f2f2
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14000f2ec
sub rcx, rax
cmp rcx, 8
jb 0x14000f2e6
cmp rcx, 0x27
ja 0x14000f2e0
mov rcx, rax
call fcn.14003fbe8
call fcn.140034030
test rax, rax
je 0x14000f8f6
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rdx, [0x14006fa68]
lea rcx, [rbp + 0x28]
call fcn.140017910
nop
mov r8d, edi
test bl, bl
setne r8b
mov rdx, qword [rax]
lea rcx, [rsp + 0x70]
call fcn.140033b50
nop
mov rdx, qword [rbp + 0x28]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000f0c2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rax, [rbp - 0x58]
mov qword [rsp + 0x68], rax
mov rdi, qword [rsp + 0x70]
add rdi, 0xffffffffffffffe8
mov rcx, rdi
call fcn.140033580
add rax, 0x18
mov qword [rbp - 0x58], rax
mov rcx, qword [r15]
sub rcx, 0x18
call fcn.140033580
add rax, 0x18
mov qword [rbp - 0x50], rax
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x50]
call fcn.140008810
test bl, bl
je 0x14000f266
call fcn.140034030
test rax, rax
je 0x14000f633
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
mov word [rsp + 0x51], 0x73
mov byte [rsp + 0x50], 0x25
lea r8, [rbp + 0x68]
cmp qword [rbp + 0x80], 0x10
cmovae r8, qword [rbp + 0x68]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x58]
call fcn.140033b50
mov rbx, qword [rsp + 0x58]
xor edi, edi
cmp byte [rbx], dil
je 0x14000f1d7
movsx ecx, byte [rbx]
call fcn.14004e7c4
test eax, eax
je 0x14000f17b
test rdi, rdi
jne 0x14000f17d
mov rdi, rbx
jmp 0x14000f17d
xor edi, edi
mov rcx, rbx
call fcn.14004e330
mov rbx, rax
cmp byte [rax], 0
jne 0x14000f165
test rdi, rdi
je 0x14000f1d7
mov rax, qword [rsp + 0x58]
sub edi, eax
js 0x14000f303
mov edx, r12d
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, edi
or ecx, edx
jge 0x14000f1bf
mov edx, edi
lea rcx, [rsp + 0x58]
call fcn.140035d70
mov rax, qword [rsp + 0x58]
cmp edi, dword [rax - 0xc]
jg 0x14000f2f8
mov dword [rax - 0x10], edi
movsxd rcx, edi
mov rax, qword [rsp + 0x58]
mov byte [rcx + rax], 0
lea rcx, [rsp + 0x58]
call fcn.140036d00
mov rcx, qword [rax]
mov ebx, dword [rcx - 0x10]
mov r8d, ebx
lea rdx, str.itcntl__d
lea rcx, [rsp + 0x70]
call fcn.140033b50
lea rax, [rbp - 0x48]
mov qword [rsp + 0x60], rax
mov rdi, qword [rsp + 0x70]
add rdi, 0xffffffffffffffe8
mov rcx, rdi
call fcn.140033580
add rax, 0x18
mov qword [rbp - 0x48], rax
mov rcx, qword [r15]
sub rcx, 0x18
call fcn.140033580
add rax, 0x18
mov qword [rbp - 0x40], rax
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x40]
call fcn.140008810
nop
mov rdx, qword [rsp + 0x58]
mov eax, esi
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], eax
cmp ebx, 0x6c
je 0x14000f30e
sub eax, 1
jg 0x14000f266
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov ecx, 0x12c
call fcn.140024240
nop
mov eax, esi
lock xadd dword [rdi + 0x10], eax
sub eax, 1
jg 0x14000f28a
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + 8]
nop
lea rcx, [rbp + 0xc8]
call fcn.140026c90
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000f2b4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
inc r14d
cmp r14d, 6
jge 0x14000f63e
xor edi, edi
jmp 0x14000ee10
call fcn.140045e90
int3
call fcn.140045e90
int3
call fcn.140045e90
int3
call fcn.140045e90
nop
call fcn.140045e90
int3
call fcn.140045e90
int3
call fcn.140045e90
int3
call fcn.140045e90
nop
mov ecx, 0x80070057
call fcn.140033340
int3
mov ecx, 0x80070057
call fcn.140033340
nop
sub eax, 1
jg 0x14000f31d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000f33c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
lea rcx, [rbp + 0xc8]
call fcn.140026c90
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000f366
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov dil, 1
lea rcx, [rbp - 0x68]
call fcn.14000e780
nop
lea rax, [rbp + 0x30]
mov qword [rsp + 0x60], rax
lea rax, [rbp - 0x38]
mov qword [rsp + 0x68], rax
lea rdx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0x10
cmovae rdx, qword [rbp + 0x68]
lea rcx, [rbp + 0x30]
call fcn.140031410
mov rbx, rax
mov rcx, qword [rbp - 0x68]
add rcx, 0xffffffffffffffe8
call fcn.140033580
add rax, 0x18
mov qword [rbp - 0x38], rax
lea rdx, [0x14006fa30]
lea rcx, [rbp + 0x38]
call fcn.140017910
nop
mov r9, rbx
lea r8, [rbp - 0x38]
mov rdx, rax
mov rcx, 0xffffffff80000002
call fcn.14000a2f0
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x270]
call fcn.140045030
mov r8d, 0x104
lea rdx, [rbp + 0x270]
xor ecx, ecx
call fcn.140023ca0
lea rcx, [rbp + 0x270]
call fcn.14001e5a0
mov dword [rbp + 0x101], 0x746164
mov byte [rbp + 0x100], 0x2e
lea r8, [rbp + 0x100]
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 8]
call fcn.1400325f0
nop
mov rdx, qword [rbp - 8]
lea rcx, [rbp + 0x270]
call fcn.140022080
xor r14d, r14d
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40000000
lea rcx, [rbp + 0x270]
call fcn.140021560
mov rbx, rax
mov dword [rbp - 0x70], r14d
lea rdx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0x10
cmovae rdx, qword [rbp + 0x68]
mov qword [rsp + 0x20], r14
lea r9, [rbp - 0x70]
mov r8d, dword [rbp + 0x78]
mov rcx, rax
call fcn.140024b60
mov rcx, rbx
call fcn.140024730
mov byte [rsp + 0x40], r14b
mov rcx, qword [r15]
sub rcx, 0x18
call fcn.140033580
add rax, 0x18
mov qword [rbp - 0x30], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], rax
movzx eax, byte [rbp + 0x408]
mov byte [rsp + 0x28], al
mov rax, qword [rbp + 0x400]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0x40]
mov r8, qword [rbp + 0x48]
mov rdx, r13
lea rcx, [rbp - 0x30]
call fcn.14000e900
call fcn.140034030
mov rcx, rax
test rax, rax
jne 0x14000f512
mov ecx, 0x80004005
call fcn.140033340
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
mov r8d, r14d
cmp byte [rsp + 0x40], r14b
setne r8b
lea rdx, str.itfnsnc__d
lea rcx, [rsp + 0x78]
call fcn.140033b50
lea rax, [rbp - 0x28]
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x78]
add rcx, 0xffffffffffffffe8
call fcn.140033580
add rax, 0x18
mov qword [rbp - 0x28], rax
mov rcx, qword [r15]
sub rcx, 0x18
call fcn.140033580
add rax, 0x18
mov qword [rbp - 0x20], rax
lea rdx, [rbp - 0x28]
lea rcx, [rbp - 0x20]
call fcn.140008810
mov r8d, r14d
cmp byte [r13], r14b
setne r8b
lea rdx, str.itncsnc__d
lea rcx, [rsp + 0x78]
call fcn.140033b50
lea rax, [rbp - 0x18]
mov qword [rsp + 0x60], rax
mov rbx, qword [rsp + 0x78]
lea rcx, [rbx - 0x18]
call fcn.140033580
add rax, 0x18
mov qword [rbp - 0x18], rax
mov rcx, qword [r15]
sub rcx, 0x18
call fcn.140033580
add rax, 0x18
mov qword [rbp - 0x10], rax
lea rdx, [rbp - 0x18]
lea rcx, [rbp - 0x10]
call fcn.140008810
nop
mov eax, esi
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x14000f5f6
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 8]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000f614
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000f640
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
jmp 0x14000f640
mov ecx, 0x80004005
call fcn.140033340
nop
xor edi, edi
call fcn.140034030
mov rcx, rax
test rax, rax
jne 0x14000f658
mov ecx, 0x80004005
call fcn.140033340
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
lea rdx, [0x14006fab0]
lea rcx, [rbp + 0x50]
call fcn.140017910
nop
movzx r8d, dil
mov rdx, qword [rax]
lea rcx, [rsp + 0x48]
call fcn.140033b50
nop
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000f6a7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rax, [rbp]
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe8
call fcn.140033580
add rax, 0x18
mov qword [rbp], rax
mov rcx, qword [r15]
sub rcx, 0x18
call fcn.140033580
add rax, 0x18
mov qword [rbp + 8], rax
lea rdx, [rbp]
lea rcx, [rbp + 8]
call fcn.140008810
lea r9, [rbp + 0x68]
cmp qword [rbp + 0x80], 0x10
cmovae r9, qword [rbp + 0x68]
mov r8, qword [rbp + 0x78]
lea rdx, str.itssnc__d__s
lea rcx, [rsp + 0x48]
call fcn.140033b50
mov r8b, 0x2d
mov dl, 0x2b
lea rcx, [rsp + 0x48]
call fcn.140035ff0
mov r8b, 0x5f
mov dl, 0x2f
lea rcx, [rsp + 0x48]
call fcn.140035ff0
mov r8b, 0x20
mov dl, VarI4FromDate
lea rcx, [rsp + 0x48]
call fcn.140035ff0
mov rbx, qword [rsp + 0x48]
mov r14, rbx
xor edi, edi
cmp byte [rbx], dil
je 0x14000f7c8
nop dword [rax]
movsx ecx, byte [r14]
call fcn.14004e7c4
test eax, eax
je 0x14000f767
test rdi, rdi
jne 0x14000f769
mov rdi, r14
jmp 0x14000f769
xor edi, edi
mov rcx, r14
call fcn.14004e330
mov r14, rax
cmp byte [rax], 0
jne 0x14000f750
test rdi, rdi
je 0x14000f7c8
sub edi, ebx
jns 0x14000f78d
mov ecx, 0x80070057
call fcn.140033340
int3
sub r12d, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, r12d
jge 0x14000f7ac
mov edx, edi
lea rcx, [rsp + 0x48]
call fcn.140035d70
mov rbx, qword [rsp + 0x48]
cmp edi, dword [rbx - 0xc]
jg 0x14000f7bd
mov dword [rbx - 0x10], edi
movsxd rax, edi
mov byte [rax + rbx], 0
jmp 0x14000f7c8
mov ecx, 0x80070057
call fcn.140033340
int3
lea rcx, [rsp + 0x48]
call fcn.140036d00
lea rax, [rbp + 0x10]
mov qword [rsp + 0x60], rax
mov rbx, qword [rsp + 0x48]
lea rcx, [rbx - 0x18]
call fcn.140033580
add rax, 0x18
mov qword [rbp + 0x10], rax
mov rcx, qword [r15]
sub rcx, 0x18
call fcn.140033580
add rax, 0x18
mov qword [rbp + 0x18], rax
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x18]
call fcn.140008810
nop
mov eax, esi
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x14000f82e
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000f84c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000f86a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rax, qword [rbp + 0x80]
cmp rax, 0x10
jb 0x14000f8c3
inc rax
mov rcx, qword [rbp + 0x68]
cmp rax, 0x1000
jb 0x14000f8be
test cl, 0x1f
je 0x14000f891
call fcn.140045e90
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14000f8a0
call fcn.140045e90
int3
sub rcx, rax
cmp rcx, 8
jae 0x14000f8af
call fcn.140045e90
int3
cmp rcx, 0x27
jbe 0x14000f8bb
call fcn.140045e90
int3
mov rcx, rax
call fcn.14003fbe8
mov qword [rbp + 0x80], 0xf
mov qword [rbp + 0x78], 0
mov byte [rbp + 0x68], 0
mov rdx, qword [r15]
sub rdx, 0x18
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x14000f901
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
jmp 0x14000f901
mov ecx, 0x80004005
call fcn.140033340
nop
mov rcx, qword [rbp + 0x380]
xor rcx, rsp
call fcn.14003ff20
add rsp, 0x498
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret