Function at 0x281b71920
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x118
mov edx, 0x7865
movabs rax, 0x7265726f6c707865
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x60]
mov rbp, rcx
lea rdi, [rsp + 0x40]
mov qword [rsp + 0x50], rax
mov ecx, 0x7865
movabs rax, 0x6e6f676f6c6e6977
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x70], rax
movabs rax, 0x78652e737361736c
mov qword [rsp + 0x80], rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x90], rax
movabs rax, 0x7365636976726573
mov qword [rsp + 0xa0], rax
lea rax, [rsp + 0xc0]
mov qword [rsp + 0xb0], rax
movabs rax, 0x2e74736f68637673
mov qword [rsp + 0xc0], rax
mov eax, 0x7865
mov word [rsp + 0xc8], ax
lea rax, [rsp + 0xe0]
mov qword [rsp + 0xd0], rax
movabs rax, 0x2e76736c6f6f7073
mov qword [rsp + 0xe0], rax
lea rax, [rsp + 0x100]
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x48], 0x6578652e
mov qword [rsp + 0x38], 0xc
mov byte [rsp + 0x4c], 0
mov dword [rsp + 0x68], 0x6578652e
mov qword [rsp + 0x58], 0xc
mov byte [rsp + 0x6c], 0
mov byte [rsp + 0x88], 0x65
mov qword [rsp + 0x78], 9
mov byte [rsp + 0x89], 0
mov dword [rsp + 0xa8], 0x6578652e
mov qword [rsp + 0x98], 0xc
mov byte [rsp + 0xac], 0
mov byte [rsp + 0xca], 0x65
mov qword [rsp + 0xb8], 0xb
mov byte [rsp + 0xcb], 0
mov word [rsp + 0xe8], dx
mov byte [rsp + 0xea], 0x65
mov qword [rsp + 0xd8], 0xb
mov byte [rsp + 0xeb], 0
mov qword [rsp + 0xf0], rax
movabs rax, 0x2e74696e696e6977
mov word [rsp + 0x108], cx
mov ecx, 0xe0
mov qword [rsp + 0x100], rax
mov byte [rsp + 0x10a], 0x65
mov qword [rsp + 0xf8], 0xb
mov byte [rsp + 0x10b], 0
call fcn.281c3b090
mov r13, qword [rsp + 0x30]
lea rcx, [rax + 0x10]
mov rbx, qword [rsp + 0x38]
mov r12, rax
mov qword [rax], rcx
mov rax, r13
add rax, rbx
je 0x281b71b1d
test r13, r13
je 0x281b7230e
mov qword [rsp + 0x28], rbx
cmp rbx, 0xf
ja 0x281b72060
cmp rbx, 1
jne 0x281b71ef0
movzx eax, byte [r13]
mov byte [r12 + 0x10], al
mov qword [r12 + 8], rbx
mov byte [rcx + rbx], 0
mov r13, qword [rsp + 0x50]
lea rcx, [r12 + 0x30]
lea rbx, [r12 + 0x20]
mov rsi, qword [rsp + 0x58]
mov qword [r12 + 0x20], rcx
mov rax, r13
add rax, rsi
je 0x281b71b73
test r13, r13
je 0x281b72311
mov qword [rsp + 0x28], rsi
cmp rsi, 0xf
ja 0x281b720a0
cmp rsi, 1
je 0x281b71f60
test rsi, rsi
jne 0x281b720c2
mov qword [r12 + 0x28], rsi
lea rbx, [r12 + 0x40]
mov byte [rcx + rsi], 0
mov r13, qword [rsp + 0x70]
lea rcx, [r12 + 0x50]
mov rsi, qword [rsp + 0x78]
mov qword [r12 + 0x40], rcx
mov rax, r13
add rax, rsi
je 0x281b71bc8
test r13, r13
je 0x281b72311
mov qword [rsp + 0x28], rsi
cmp rsi, 0xf
ja 0x281b72020
cmp rsi, 1
je 0x281b71f50
test rsi, rsi
jne 0x281b72042
mov qword [r12 + 0x48], rsi
lea rbx, [r12 + 0x60]
mov byte [rcx + rsi], 0
mov r13, qword [rsp + 0x90]
lea rcx, [r12 + 0x70]
mov rsi, qword [rsp + 0x98]
mov qword [r12 + 0x60], rcx
mov rax, r13
add rax, rsi
je 0x281b71c23
test r13, r13
je 0x281b72311
mov qword [rsp + 0x28], rsi
cmp rsi, 0xf
ja 0x281b71fe0
cmp rsi, 1
je 0x281b71f40
test rsi, rsi
jne 0x281b72002
mov qword [r12 + 0x68], rsi
lea rbx, [r12 + 0x80]
mov byte [rcx + rsi], 0
mov r13, qword [rsp + 0xb0]
lea rcx, [r12 + 0x90]
mov rsi, qword [rsp + 0xb8]
mov qword [r12 + 0x80], rcx
mov rax, r13
add rax, rsi
je 0x281b71c87
test r13, r13
je 0x281b72311
mov qword [rsp + 0x28], rsi
cmp rsi, 0xf
ja 0x281b71f98
cmp rsi, 1
je 0x281b71f28
test rsi, rsi
jne 0x281b71fc0
mov qword [r12 + 0x88], rsi
lea rbx, [r12 + 0xa0]
mov byte [rcx + rsi], 0
mov r13, qword [rsp + 0xd0]
lea rcx, [r12 + 0xb0]
mov rsi, qword [rsp + 0xd8]
mov qword [r12 + 0xa0], rcx
mov rax, r13
add rax, rsi
je 0x281b71cee
test r13, r13
je 0x281b72311
mov qword [rsp + 0x28], rsi
cmp rsi, 0xf
ja 0x281b72168
cmp rsi, 1
je 0x281b71f10
test rsi, rsi
jne 0x281b72190
mov qword [r12 + 0xa8], rsi
lea rbx, [r12 + 0xc0]
mov byte [rcx + rsi], 0
mov r14, qword [rsp + 0xf0]
lea rcx, [r12 + 0xd0]
mov rsi, qword [rsp + 0xf8]
mov qword [r12 + 0xc0], rcx
mov rax, r14
add rax, rsi
setne r13b
test r14, r14
sete al
and r13b, al
jne 0x281b72311
mov qword [rsp + 0x28], rsi
cmp rsi, 0xf
ja 0x281b720e0
cmp rsi, 1
jne 0x281b71f70
movzx eax, byte [r14]
mov byte [r12 + 0xd0], al
mov qword [r12 + 0xc8], rsi
lea r14, [rsp + 0x30]
lea rbx, [rsp + 0xf0]
mov byte [rcx + rsi], 0
lea rsi, [r12 + 0xe0]
jmp 0x281b71dc1
mov rax, qword [rbx + 0x10]
lea rdx, [rax + 1]
call fcn.281c3b050
lea rax, [rbx - 0x20]
cmp r14, rbx
je 0x281b71dd6
mov rbx, rax
mov rcx, qword [rbx]
lea rax, [rbx + 0x10]
cmp rcx, rax
jne 0x281b71da8
lea rax, [rbx - 0x20]
cmp r14, rbx
jne 0x281b71dbe
lea r15, [rbp + 0x2c]
mov qword [rsp + 0x30], rdi
mov rcx, r15
call sub.msvcrt.dll_strlen
mov qword [rsp + 0x28], rax
mov rbx, rax
cmp rax, 0xf
ja 0x281b72128
cmp rax, 1
jne 0x281b71f80
movzx edx, byte [rbp + 0x2c]
mov byte [rsp + 0x40], dl
mov rdx, rdi
mov qword [rsp + 0x38], rax
mov byte [rdx + rax], 0
mov rbx, qword [rsp + 0x38]
mov r14, qword [rsp + 0x30]
test rbx, rbx
je 0x281b721b0
cmp rbx, qword [r12 + 8]
je 0x281b72220
cmp rbx, qword [r12 + 0x28]
je 0x281b72250
cmp rbx, qword [r12 + 0x48]
je 0x281b72270
cmp rbx, qword [r12 + 0x68]
je 0x281b72290
cmp rbx, qword [r12 + 0x88]
je 0x281b722b0
cmp rbx, qword [r12 + 0xa8]
je 0x281b722d0
cmp rbx, qword [r12 + 0xc8]
je 0x281b722f0
cmp r14, rdi
je 0x281b71e96
mov rax, qword [rsp + 0x40]
mov rcx, r14
lea rdx, [rax + 1]
call fcn.281c3b050
mov rbx, r12
nop dword [rax]
mov rcx, qword [rbx]
lea rax, [rbx + 0x10]
cmp rcx, rax
je 0x281b71f00
mov rax, qword [rbx + 0x10]
add rbx, 0x20
lea rdx, [rax + 1]
call fcn.281c3b050
cmp rbx, rsi
jne 0x281b71ea0
mov edx, 0xe0
mov rcx, r12
call fcn.281c3b050
mov eax, r13d
add rsp, 0x118
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
test rbx, rbx
je 0x281b71b40
jmp 0x281b72081
add rbx, 0x20
cmp rbx, rsi
jne 0x281b71ea0
jmp 0x281b71ec2
movzx eax, byte [r13]
mov byte [r12 + 0xb0], al
jmp 0x281b71d10
movzx eax, byte [r13]
mov byte [r12 + 0x90], al
jmp 0x281b71ca9
movzx eax, byte [r13]
mov byte [r12 + 0x70], al
jmp 0x281b71c45
movzx eax, byte [r13]
mov byte [r12 + 0x50], al
jmp 0x281b71bea
movzx eax, byte [r13]
mov byte [r12 + 0x30], al
jmp 0x281b71b95
test rsi, rsi
je 0x281b71d82
jmp 0x281b72108
test rax, rax
jne 0x281b7231d
mov rdx, rdi
jmp 0x281b71e0e
lea rdx, [rsp + 0x28]
xor r8d, r8d
mov rcx, rbx
call fcn.281c1d440
mov qword [r12 + 0x80], rax
mov rcx, rax
mov rax, qword [rsp + 0x28]
mov qword [r12 + 0x90], rax
mov r8, rsi
mov rdx, r13
call sub.msvcrt.dll_memcpy
mov rsi, qword [rsp + 0x28]
mov rcx, qword [r12 + 0x80]
jmp 0x281b71ca9
lea rdx, [rsp + 0x28]
xor r8d, r8d
mov rcx, rbx
call fcn.281c1d440
mov qword [r12 + 0x60], rax
mov rcx, rax
mov rax, qword [rsp + 0x28]
mov qword [r12 + 0x70], rax
mov r8, rsi
mov rdx, r13
call sub.msvcrt.dll_memcpy
mov rsi, qword [rsp + 0x28]
mov rcx, qword [r12 + 0x60]
jmp 0x281b71c45
lea rdx, [rsp + 0x28]
xor r8d, r8d
mov rcx, rbx
call fcn.281c1d440
mov qword [r12 + 0x40], rax
mov rcx, rax
mov rax, qword [rsp + 0x28]
mov qword [r12 + 0x50], rax
mov r8, rsi
mov rdx, r13
call sub.msvcrt.dll_memcpy
mov rsi, qword [rsp + 0x28]
mov rcx, qword [r12 + 0x40]
jmp 0x281b71bea
lea rdx, [rsp + 0x28]
xor r8d, r8d
mov rcx, r12
call fcn.281c1d440
mov qword [r12], rax
mov rcx, rax
mov rax, qword [rsp + 0x28]
mov qword [r12 + 0x10], rax
mov r8, rbx
mov rdx, r13
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x28]
mov rcx, qword [r12]
jmp 0x281b71b40
lea rdx, [rsp + 0x28]
xor r8d, r8d
mov rcx, rbx
call fcn.281c1d440
mov qword [r12 + 0x20], rax
mov rcx, rax
mov rax, qword [rsp + 0x28]
mov qword [r12 + 0x30], rax
mov r8, rsi
mov rdx, r13
call sub.msvcrt.dll_memcpy
mov rsi, qword [rsp + 0x28]
mov rcx, qword [r12 + 0x20]
jmp 0x281b71b95
lea rdx, [rsp + 0x28]
xor r8d, r8d
mov rcx, rbx
call fcn.281c1d440
mov qword [r12 + 0xc0], rax
mov rcx, rax
mov rax, qword [rsp + 0x28]
mov qword [r12 + 0xd0], rax
mov r8, rsi
mov rdx, r14
call sub.msvcrt.dll_memcpy
mov rsi, qword [rsp + 0x28]
mov rcx, qword [r12 + 0xc0]
jmp 0x281b71d82
lea rdx, [rsp + 0x28]
xor r8d, r8d
mov rcx, r14
call fcn.281c1d440
mov qword [rsp + 0x30], rax
mov rcx, rax
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x40], rax
mov rdx, r15
mov r8, rbx
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x30]
jmp 0x281b71e0e
lea rdx, [rsp + 0x28]
xor r8d, r8d
mov rcx, rbx
call fcn.281c1d440
mov qword [r12 + 0xa0], rax
mov rcx, rax
mov rax, qword [rsp + 0x28]
mov qword [r12 + 0xb0], rax
mov r8, rsi
mov rdx, r13
call sub.msvcrt.dll_memcpy
mov rsi, qword [rsp + 0x28]
mov rcx, qword [r12 + 0xa0]
jmp 0x281b71d10
cmp qword [r12 + 8], 0
mov r13d, 1
je 0x281b71e80
cmp qword [r12 + 0x28], 0
je 0x281b71e80
cmp qword [r12 + 0x48], 0
je 0x281b71e80
cmp qword [r12 + 0x68], 0
je 0x281b71e80
cmp qword [r12 + 0x88], 0
je 0x281b71e80
cmp qword [r12 + 0xa8], 0
je 0x281b71e80
cmp qword [r12 + 0xc8], 0
sete r13b
jmp 0x281b71e80
mov rdx, qword [r12]
mov r8, rbx
mov rcx, r14
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x281b71e35
nop word [rax + rax]
mov r13d, 1
jmp 0x281b71e80
mov rdx, qword [r12 + 0x20]
mov r8, rbx
mov rcx, r14
call sub.msvcrt.dll_memcmp
test eax, eax
je 0x281b72240
jmp 0x281b71e40
mov rdx, qword [r12 + 0x40]
mov r8, rbx
mov rcx, r14
call sub.msvcrt.dll_memcmp
test eax, eax
je 0x281b72240
jmp 0x281b71e4b
mov rdx, qword [r12 + 0x60]
mov r8, rbx
mov rcx, r14
call sub.msvcrt.dll_memcmp
test eax, eax
je 0x281b72240
jmp 0x281b71e56
mov rdx, qword [r12 + 0x80]
mov r8, rbx
mov rcx, r14
call sub.msvcrt.dll_memcmp
test eax, eax
je 0x281b72240
jmp 0x281b71e64
mov rdx, qword [r12 + 0xa0]
mov r8, rbx
mov rcx, r14
call sub.msvcrt.dll_memcmp
test eax, eax
je 0x281b72240
jmp 0x281b71e72
mov rdx, qword [r12 + 0xc0]
mov r8, rbx
mov rcx, r14
call sub.msvcrt.dll_memcmp
test eax, eax
sete r13b
jmp 0x281b71e80
mov rbx, r12
lea rcx, section..rdata
call fcn.281c3c580
mov rcx, rdi
jmp 0x281b7214a