Function at 0x140087d20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xe0]
sub rsp, 0x1e0
mov rax, qword [0x1400a4088]
xor rax, rsp
mov qword [rbp + 0xd8], rax
mov r15, rcx
mov ecx, 0x91b
mov edi, edx
xor ebx, ebx
mov dword [rbp + 0xc0], 0x47444753
mov dword [rbp + 0xc4], 0x65537465
mov dword [rbp + 0xc8], 0x6f697373
mov dword [rbp + 0xcc], 0x6174536e
mov dword [rbp + 0xd0], 0x6574
call fcn.140029ab4
mov r13, rax
test rax, rax
je 0x140088014
lea r9, [rsp + 0x40]
lea r8, [rbp + 0xc0]
mov edx, edi
mov rcx, r15
mov esi, ebx
mov r14d, ebx
call fcn.140005ac8
cmp al, 1
jne 0x140088014
mov ecx, dword [rsp + 0x40]
test ecx, ecx
je 0x140088014
cmp ecx, edi
jae 0x140088014
lea eax, [rcx + 0x1000]
cmp eax, edi
jae 0x140088014
lea rax, [rsp + 0x50]
lea r8d, [rbx + 2]
add rcx, r15
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
xor r9d, r9d
mov edx, 0x1000
mov qword [rsp + 0x28], rbx
or dword [rsp + 0x20], 0xffffffff
call fcn.14008a254
mov r12d, ebx
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x50]
call fcn.140089fbc
test eax, eax
jne 0x140087ee7
mov eax, dword [rbp + 0x90]
mov rcx, qword [rsp + 0x58]
mov r8d, 0x512
add rcx, rax
mov rax, qword [rbp + 0xb8]
mov qword [rsp + 0x58], rcx
movzx edx, word [rax + 6]
mov eax, dword [rbp + 0x18]
cmp r8w, dx
jne 0x140087e79
cmp qword [rbp + 0x28], 0x40000
jne 0x140087e79
test eax, eax
je 0x140087e79
cmp qword [rbp - 0x10], 0x40
jne 0x140087e79
test esi, esi
jne 0x140087eac
mov esi, eax
sub esi, r15d
add esi, ecx
jmp 0x140087ea8
mov r8d, 0x510
cmp r8w, dx
jne 0x140087ea8
cmp qword [rbp + 0x28], 0x40000
jne 0x140087ea8
test eax, eax
je 0x140087ea8
cmp qword [rbp - 0x10], 0x40
jne 0x140087ea8
test r14d, r14d
jne 0x140087ea8
mov r14d, eax
sub r14d, r15d
add r14d, ecx
test esi, esi
je 0x140087eba
cmp esi, edi
jae 0x140087eba
test r14d, r14d
je 0x140087eba
cmp r14d, edi
jb 0x140087ec8
inc r12d
cmp r12d, 0x1e
jae 0x140087ee7
jmp 0x140087e14
mov edx, esi
mov ecx, 0x91e
add rdx, r13
call fcn.140029bac
mov edx, r14d
mov ecx, 0x91d
add rdx, r13
call fcn.140029bac
test esi, esi
je 0x140088014
test r14d, r14d
je 0x140088014
lea r9, [rsp + 0x40]
lea r8, [rbp + 0xc0]
mov edx, edi
mov rcx, r15
mov dword [rbp + 0xc0], 0x53444753
mov dword [rbp + 0xc4], 0x69737365
mov dword [rbp + 0xc8], 0x6e496e6f
mov dword [rbp + 0xcc], 0x61697469
mov qword [rbp + 0xd0], 0x657a696c
call fcn.140005ac8
cmp al, 1
jne 0x140088014
mov ecx, dword [rsp + 0x40]
test ecx, ecx
je 0x140088014
cmp ecx, edi
jae 0x140088014
lea eax, [rcx + 0x1000]
cmp eax, edi
jae 0x140088014
lea rax, [rsp + 0x50]
xor r9d, r9d
add rcx, r15
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
lea r8d, [r9 + 2]
mov edx, 0x1000
mov qword [rsp + 0x28], rbx
or dword [rsp + 0x20], 0xffffffff
call fcn.14008a254
mov esi, ebx
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x50]
call fcn.140089fbc
test eax, eax
jne 0x140088014
mov eax, dword [rbp + 0x90]
mov rcx, qword [rsp + 0x58]
mov edx, 0x4dd
add rcx, rax
mov rax, qword [rbp + 0xb8]
mov qword [rsp + 0x58], rcx
cmp dx, word [rax + 6]
jne 0x140087ffa
cmp qword [rbp + 0x28], 0x40000
jne 0x140087ffa
mov eax, dword [rbp + 0x18]
test eax, eax
je 0x140087ffa
cmp qword [rbp - 0x10], 0x20
jne 0x140087ffa
cmp dword [rbp - 0x58], 1
jne 0x140087ffa
sub eax, r15d
add eax, ecx
je 0x140087ffa
cmp eax, edi
jb 0x140088003
inc esi
cmp esi, 0x64
jae 0x140088014
jmp 0x140087f9a
mov edx, eax
mov ecx, 0x91f
add rdx, r13
call fcn.140029bac
mov bl, 1
mov al, bl
mov rcx, qword [rbp + 0xd8]
xor rcx, rsp
call fcn.14008c320
mov rbx, qword [rsp + 0x230]
add rsp, 0x1e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret