Function at 0x164f04980
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf0]
sub rsp, 0x1f0
mov rax, qword [0x16514b200]
xor rax, rsp
mov qword [rbp + 0xe8], rax
mov rdi, qword [rbp + 0x130]
mov r13, qword [rbp + 0x138]
xor ebx, ebx
mov dword [rsp + 0x30], 0x42413441
mov dword [rsp + 0x34], 0x43323237
mov dword [rsp + 0x40], 0x6e657665
mov dword [rsp + 0x44], 0x5f725f74
mov dword [rsp + 0x48], 0x637072
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x4c], rax
mov dword [rsp + 0x54], 0x22
lea rcx, [rsp + 0x58]
call fcn.164e47a70
lea r9, [rsp + 0x40]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.164e47510
nop
lea rcx, [rsp + 0x70]
call fcn.164f12b90
lea rdx, str._this
mov rcx, rax
call fcn.164ea21e0
mov byte [rsp + 0x20], 0x22
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.164f0fab0
lea rdx, [rdi + 0xc0]
mov rcx, rax
call fcn.164ea2220
mov byte [rsp + 0x20], 0x22
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.164f0fab0
mov byte [rsp + 0x20], 0x2c
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.164f0fab0
mov ecx, dword [r13 + 0x20]
mov dword [rsp + 0x30], ecx
lea rdx, [rsp + 0x30]
mov rcx, rax
call fcn.164f232a0
lea rdx, [0x1650afd70]
mov rcx, rax
call fcn.164ea21e0
nop
lea rcx, [rsp + 0x70]
call fcn.164e47630
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd0], xmm1
mov qword [rbp + 0xe0], rbx
lea r12, [rdi + 0x258]
mov rcx, r12
call fcn.164ef1c50
mov rdi, qword [rdi + 0x2b0]
mov rdi, qword [rdi]
cmp byte [rdi + 0x19], bl
jne 0x164f04c69
mov rbx, qword [rdi + 0x28]
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
jne 0x164f04c09
nop word [rax + rax]
mov r15, qword [rbx + 0x58]
mov rsi, qword [rbx + 0x50]
cmp rsi, r15
je 0x164f04b6b
nop dword [rax]
mov rcx, qword [rsi]
add rcx, 0x78
mov rdx, r13
call fcn.164efc350
test al, al
jne 0x164f04b2c
add rsi, 0x10
cmp rsi, r15
jne 0x164f04b10
cmp rsi, r15
je 0x164f04b6b
lea r14, [rsi + 0x10]
cmp r14, r15
je 0x164f04b6b
nop word [rax + rax]
mov rcx, qword [r14]
add rcx, 0x78
mov rdx, r13
call fcn.164efc350
test al, al
jne 0x164f04b62
mov rdx, r14
mov rcx, rsi
call fcn.164e52a80
add rsi, 0x10
add r14, 0x10
cmp r14, r15
jne 0x164f04b40
mov rcx, qword [rbx + 0x58]
cmp rsi, rcx
je 0x164f04ba5
mov r8, rsi
mov rdx, rcx
call fcn.164efa8c0
mov r15, rax
mov r14, qword [rbx + 0x58]
mov rsi, rax
cmp rax, r14
je 0x164f04ba1
nop
mov rcx, rsi
call fcn.164e51d90
add rsi, 0x10
cmp rsi, r14
jne 0x164f04b90
mov qword [rbx + 0x58], r15
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x164f04bd8
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x164f04bd3
nop dword [rax]
cmp rbx, qword [rax + 0x10]
jne 0x164f04bd3
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x164f04bc0
mov rbx, rax
jmp 0x164f04bff
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x164f04bff
nop dword [rax]
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x164f04bf0
cmp byte [rbx + 0x19], 0
je 0x164f04b00
mov rax, qword [rdi + 0x10]
cmp byte [rax + 0x19], 0
je 0x164f04c38
mov rax, qword [rdi + 8]
cmp byte [rax + 0x19], 0
jne 0x164f04c33
nop dword [rax]
cmp rdi, qword [rax + 0x10]
jne 0x164f04c33
mov rdi, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x164f04c20
mov rdi, rax
jmp 0x164f04c5f
mov rdi, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x164f04c5f
nop dword [rax]
nop dword [rax + rax]
mov rdi, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x164f04c50
cmp byte [rdi + 0x19], 0
je 0x164f04ae5
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
dec dword [r12 + 0x44]
cmp dword [r12 + 0x44], 0
jg 0x164f04ca4
mov dword [r12 + 0x40], 0xffffffff
mov rcx, qword [r12 + 0x50]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov rcx, qword [r12 + 0x48]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rbp + 0xd0]
call fcn.164f0e930
mov rcx, qword [rbp + 0xe8]
xor rcx, rsp
call fcn.165001080
mov rbx, qword [rsp + 0x240]
add rsp, 0x1f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret