Function at 0x1400029c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rdi
push rbx
push rsi
sub rsp, 0x120
mov eax, 0x835c3300
mov r8w, word [rsp + 0x11e]
mov qword [rsp + 0x108], 0x2e385974
mov r9, qword [rsp + 0x110]
mov r10, r9
xor r10, r10
mov qword [rsp + 0x110], r10
mov word [rsp + 0x102], 0x5e46
mov byte [rsp + 0x11d], 0xe0
mov dword [rsp + 0xfc], 0x51447024
mov r11d, dword [rsp + 0x104]
mov si, word [rsp + 0x102]
add si, 0xcc63
mov word [rsp + 0x8e], si
sub eax, dword [rsp + 0xfc]
mov dword [rsp + 0xc4], eax
mov eax, dword [rsp + 0xfc]
add eax, 0xebcea5b2
mov dword [rsp + 0x9c], eax
mov qword [rsp + 0x110], 0x41c888ee
mov r10, r9
or r10, 0x602bbd91
mov eax, dword [rsp + 0x9c]
mov qword [rsp + 0x110], r10
mov edi, dword [rsp + 0xfc]
mov ebx, r11d
or ebx, 0x5e8fc9e1
mov dword [rsp + 0x104], ebx
mov ebx, r11d
xor ebx, 0x43b0f11f
xor edi, 0x60ee08c2
mov dword [rsp + 0x104], ebx
mov dword [rsp + 0xb4], edi
mov edi, r11d
and edi, 0x55ab50
mov ebx, dword [rsp + 0xfc]
xor ebx, 0x495870de
mov dword [rsp + 0x104], edi
cmp ebx, eax
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x50], rcx
mov dword [rsp + 0x4c], r11d
mov word [rsp + 0x4a], r8w
mov qword [rsp + 0x40], r9
ja 0x140002e77
mov eax, 0xc952e36a
mov ecx, dword [rsp + 0x4c]
xor ecx, 0x33c0ed02
sub eax, dword [rsp + 0xfc]
mov dword [rsp + 0x104], ecx
cmp dword [rsp + 0xb4], eax
je 0x140002e77
jmp 0x140002eda
mov rax, qword [rsp + 0x40]
xor rax, 0x7a62d55
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0xf0]
add rsp, 0x120
pop rsi
pop rbx
pop rdi
ret
mov ax, word [rsp + 0xee]
mov ecx, dword [rsp + 0x4c]
or ecx, ecx
mov rdx, qword [rsp + 0x68]
mov dword [rsp + 0x104], ecx
shl rdx, 1
mov r8, qword [rsp + 0x50]
add r8, rdx
mov r9w, word [rsp + 0x4a]
mov word [rsp + 0x11e], r9w
mov r10b, byte [rsp + 0x11d]
mov r11b, byte [rsp + 0x11d]
mov si, word [rsp + 0x102]
xor r10b, r11b
mov byte [rsp + 0x11d], r10b
add si, 0x3df8
mov rdx, qword [rsp + 0x40]
sub rdx, 0x1d9900fe
mov qword [rsp + 0x110], rdx
mov qword [rsp + 0xa8], r8
cmp si, ax
ja 0x140002c3e
jmp 0x140002dda
mov eax, dword [rsp + 0xb0]
mov dword [rsp + 0x74], eax
mov cx, word [rsp + 0x102]
add cx, 0xa1ba
mov eax, dword [rsp + 0x74]
mov edx, eax
mov qword [rsp + 0x68], rdx
mov rdx, qword [rsp + 0xd8]
mov r8, qword [rsp + 0x68]
mov r9w, word [rdx + r8*2]
mov word [rsp + 0xa2], r9w
mov r9w, word [rsp + 0x4a]
mov word [rsp + 0x11e], r9w
mov r10w, word [rsp + 0xa2]
mov rdx, qword [rsp + 0x40]
or rdx, 0x4a9eb8c5
mov qword [rsp + 0x110], rdx
cmp r10w, cx
je 0x140003201
jmp 0x140002f89
mov rax, qword [rsp + 0x58]
cmp rax, 0
setne cl
and cl, 1
mov byte [rsp + 0xa5], cl
mov rdx, qword [rsp + 0xb8]
mov qword [rsp + 0xe0], rdx
mov rax, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0x40]
xor rcx, 0xfddac90
mov qword [rsp + 0x110], rcx
mov qword [rsp + 0xc8], rax
mov dx, word [rsp + 0x4a]
xor dx, 0x6b03
mov word [rsp + 0x11e], dx
mov dx, word [rsp + 0x4a]
xor dx, 0xe623
mov rax, qword [rsp + 0xc8]
mov word [rsp + 0x11e], dx
mov r8b, byte [rsp + 0x11d]
xor r8b, byte [rsp + 0x11d]
mov byte [rsp + 0x11d], r8b
mov r9d, dword [rsp + 0xc4]
mov dword [rsp + 0x104], 0x1626f4b0
mov rax, qword [rax + 0x20]
mov qword [rsp + 0xd0], rax
mov dx, word [rsp + 0x4a]
mov word [rsp + 0x11e], dx
mov rax, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0x40]
or rcx, rcx
mov qword [rsp + 0x110], rcx
xor dx, 0xffff
mov r10d, dword [rsp + 0xfc]
add r10d, 0xdd0d9ee4
mov word [rsp + 0x11e], dx
mov r11d, dword [rsp + 0x4c]
and r11d, r11d
mov rcx, qword [rsp + 0x58]
cmp rax, rcx
sete r8b
mov dword [rsp + 0x104], r11d
and r8b, 1
mov byte [rsp + 0x67], r8b
mov dx, word [rsp + 0x4a]
or dx, 0x6129
mov word [rsp + 0x11e], dx
mov byte [rsp + 0x11d], 0xd4
cmp r10d, r9d
jae 0x1400030da
jmp 0x1400031b1
mov eax, dword [rsp + 0x4c]
mov dword [rsp + 0x104], eax
mov cl, byte [rsp + 0x11d]
mov dx, word [rsp + 0x102]
mov r8w, word [rsp + 0x102]
mov byte [rsp + 0x11d], cl
xor dx, 0x5e12
or eax, 0x659c1965
add r8w, 0xa1eb
mov dword [rsp + 0x104], eax
movzx ecx, dx
mov word [rsp + 0x3e], r8w
call fcn.140005830
mov dx, word [rsp + 0x3e]
cmp ax, dx
je 0x1400030da
jmp 0x14000301c
mov eax, 0x51447025
mov ecx, dword [rsp + 0x74]
sub eax, dword [rsp + 0xfc]
add ecx, eax
mov dx, word [rsp + 0xa6]
mov r8, qword [rsp + 0xa8]
mov r9w, word [r8]
mov dword [rsp + 0x104], 0x500000
mov dword [rsp + 0xe8], ecx
cmp r9w, dx
je 0x140002e77
mov al, byte [rsp + 0x11d]
sub al, byte [rsp + 0x11d]
mov rcx, qword [rsp + 0xc8]
mov rcx, qword [rcx]
mov byte [rsp + 0x11d], al
mov rdx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x40]
mov qword [rsp + 0x110], r8
mov byte [rsp + 0x11d], 0x21
mov qword [rsp + 0xe0], rcx
mov qword [rsp + 0xf0], 0
cmp rcx, rdx
je 0x140002b1c
jmp 0x140002c64
mov eax, 0x3f402df5
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x110], rcx
mov edx, dword [rsp + 0x70]
mov r8d, dword [rsp + 0xe8]
mov r9, qword [rsp + 0xd0]
mov r10d, dword [rsp + 0xe8]
mov qword [rsp + 0x110], rcx
mov dword [rsp + 0xb0], r10d
mov qword [rsp + 0xf0], r9
mov r10d, dword [rsp + 0x4c]
sub eax, r10d
mov dword [rsp + 0x104], eax
cmp r8d, edx
jb 0x140002bc5
jmp 0x140002b1c
mov eax, 0x3a6bb2a4
mov ecx, eax
mov rdx, qword [rsp + 0x108]
mov eax, dword [rsp + 0x4c]
or eax, 0x1c137f59
mov dword [rsp + 0x104], eax
sub rcx, rdx
mov qword [rsp + 0x90], rcx
mov rcx, qword [rsp + 0x90]
mov qword [rsp + 0x30], rcx
call fcn.1400023f0
mov rcx, qword [rsp + 0x40]
sub rcx, 0x3567e74a
mov qword [rsp + 0x110], rcx
mov r8d, dword [rsp + 0x4c]
xor r8d, 0x7b5f2c04
mov rcx, qword [rsp + 0x108]
xor rcx, 0x6671b3fb
mov dword [rsp + 0x104], r8d
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x30]
cmp rcx, rax
ja 0x14000305f
jmp 0x140002e77
mov eax, 0x51447024
sub eax, dword [rsp + 0xfc]
mov qword [rsp + 0x110], 0x4000716
mov dword [rsp + 0xb0], eax
jmp 0x140002bc5
mov ax, 0x31c4
mov cx, word [rsp + 0x102]
add cx, 0x2c05
mov dx, word [rsp + 0xa2]
mov r8w, word [rsp + 0x102]
mov r9w, word [rsp + 0x8e]
sub ax, r8w
mov dword [rsp + 0x104], 0xd6e40bc
movzx r10d, dx
mov word [rsp + 0x2e], cx
mov ecx, r10d
mov word [rsp + 0x2c], r9w
mov word [rsp + 0x2a], ax
call fcn.140005830
mov word [rsp + 0xa6], ax
mov ax, word [rsp + 0x2a]
mov word [rsp + 0xee], ax
mov r11b, byte [rsp + 0x11d]
mov byte [rsp + 0x11d], r11b
mov ax, word [rsp + 0x2e]
mov dx, word [rsp + 0x2c]
cmp ax, dx
jb 0x140002c3e
jmp 0x140002b42
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x110], rax
mov rcx, qword [rsp + 0xc8]
add rcx, 0xfffffffffffffff0
mov dx, word [rsp + 0x4a]
and dx, dx
mov word [rsp + 0x11e], dx
mov r8d, dword [rsp + 0x4c]
mov dword [rsp + 0x104], r8d
mov qword [rsp + 0xf0], rcx
jmp 0x140002b1c
mov al, byte [rsp + 0x11d]
add al, 0x82
mov byte [rsp + 0x11d], al
mov rcx, qword [rsp + 0x78]
mov rcx, qword [rcx + 0x18]
add rcx, 0x20
mov qword [rsp + 0x80], rcx
mov dword [rsp + 0x104], 0x52ea038e
mov al, byte [rsp + 0x11d]
mov rcx, qword [rsp + 0x80]
mov byte [rsp + 0x11d], al
mov rcx, qword [rcx]
mov qword [rsp + 0xb8], rcx
mov rcx, qword [rsp + 0x80]
mov rdx, qword [rsp + 0xb8]
mov qword [rsp + 0xf0], 0
cmp rdx, rcx
je 0x140002b1c
jmp 0x140002c3e
mov ax, 0x5e46
mov word [rsp + 0x11e], 0x88c5
mov rcx, qword [rsp + 0xc8]
mov dx, word [rcx + 0x48]
mov r8d, dword [rsp + 0x4c]
add r8d, r8d
mov r9w, word [rsp + 0x102]
xor r9w, 0x5e47
mov dword [rsp + 0x104], r8d
mov rcx, qword [rsp + 0xc8]
mov r10w, word [rsp + 0x4a]
xor r10w, r10w
mov word [rsp + 0x11e], r10w
mov r11b, byte [rsp + 0x11d]
xor r11b, 9
mov r10w, word [rsp + 0x102]
mov rcx, qword [rcx + 0x50]
sub ax, r10w
mov byte [rsp + 0x11d], r11b
mov qword [rsp + 0xd8], rcx
mov r8d, dword [rsp + 0x4c]
xor r8d, 0xffffffff
mov cx, r9w
shr dx, cl
mov dword [rsp + 0x104], r8d
mov r9w, word [rsp + 0x4a]
sub r9w, r9w
movzx r8d, dx
mov word [rsp + 0x11e], r9w
mov dword [rsp + 0x70], r8d
mov rsi, qword [rsp + 0x40]
xor rsi, 0x6041cb7
mov qword [rsp + 0x110], rsi
cmp dx, ax
je 0x140002e18
jmp 0x140002f65
mov ax, 0x3bcd
mov cl, byte [rsp + 0x11d]
xor cl, 0xff
mov byte [rsp + 0x11d], cl
mov cl, byte [rsp + 0x67]
mov dx, word [rsp + 0x4a]
sub ax, dx
mov r8b, byte [rsp + 0xa5]
mov word [rsp + 0x11e], ax
xor dx, 0x8587
and r8b, cl
mov word [rsp + 0x11e], dx
test r8b, 1
jne 0x140002d78
jmp 0x1400030da
mov eax, 0x44105b47
mov rcx, qword [rsp + 0x68]
mov dx, word [rsp + 0x4a]
add dx, 0xfcc4
mov r8w, word [rsp + 0x102]
mov word [rsp + 0x11e], dx
mov r9, qword [rsp + 0x50]
mov dx, word [r9 + rcx*2]
add r8w, 0xa1ba
mov r10d, dword [rsp + 0x4c]
sub eax, r10d
mov dword [rsp + 0x104], eax
mov rcx, qword [rsp + 0xd0]
mov qword [rsp + 0xf0], rcx
cmp dx, r8w
je 0x140002b1c
jmp 0x140002e18