Function at 0x140004760
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x38]
sub rsp, 0x138
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov rax, qword [0x1402d9850]
xor rax, rsp
mov qword [rbp + 0x20], rax
mov rdi, r9
mov rsi, r8
mov r14, rdx
mov r15, rcx
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], r8
mov qword [rbp - 0x80], r9
mov r12, qword [rbp + 0xa0]
mov qword [rbp - 0x78], r12
lea rcx, [rbp]
call fcn.140008dc0
nop
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call fcn.14013248c
call fcn.140132460
mov dword [rsp + 0x50], eax
cmp qword [r12 + 0x18], 8
jb 0x1400047e8
mov r11, qword [r12]
jmp 0x1400047eb
mov r11, r12
lea r8, [rbp]
cmp qword [rbp + 0x18], 8
cmovae r8, qword [rbp]
cmp qword [rdi + 0x18], 8
jb 0x14000480a
mov rax, qword [rdi]
mov qword [rsp + 0x58], rax
jmp 0x14000480f
mov qword [rsp + 0x58], rdi
cmp qword [rsi + 0x18], 8
jb 0x14000481b
mov r13, qword [rsi]
jmp 0x14000481e
mov r13, rsi
cmp qword [r14 + 0x18], 8
jb 0x14000482a
mov r9, qword [r14]
jmp 0x14000482d
mov r9, r14
cmp qword [r15 + 0x18], 8
jb 0x140004839
mov r10, qword [r15]
jmp 0x14000483c
mov r10, r15
mov eax, 0x54
mov dword [rbp - 0x70], 0x710054
mov dword [rbp - 0x6c], 0x6b0027
mov dword [rbp - 0x68], 0x260024
mov dword [rbp - 0x64], 0x690030
mov dword [rbp - 0x60], 0x270071
mov dword [rbp - 0x5c], 0x350072
mov dword [rbp - 0x58], 0x320032
mov dword [rbp - 0x54], 0x710069
mov dword [rbp - 0x50], 0x720027
mov dword [rbp - 0x4c], 0x310022
mov dword [rbp - 0x48], 0x690026
mov dword [rbp - 0x44], 0x270071
mov dword [rbp - 0x40], 0x260072
mov dword [rbp - 0x3c], 0x30003a
mov dword [rbp - 0x38], 0x710069
mov dword [rbp - 0x34], 0x720030
mov dword [rbp - 0x30], 0x270021
mov dword [rbp - 0x2c], 0x30003d
mov dword [rbp - 0x28], 0x710069
mov dword [rbp - 0x24], 0x720027
mov dword [rbp - 0x20], 0x3d0024
mov dword [rbp - 0x1c], 0x13002c
mov dword [rbp - 0x18], 0x3d0021
mov dword [rbp - 0x14], 0x690030
mov dword [rbp - 0x10], 0x270071
xor ecx, ecx
mov word [rbp - 0xc], cx
xor ebx, ebx
mov edx, ebx
lea rcx, [rbp - 0x6e]
nop
xor word [rcx], ax
inc edx
lea rcx, [rcx + 2]
movsxd rax, edx
cmp rax, 0x31
jae 0x140004918
movzx eax, word [rbp - 0x70]
jmp 0x140004900
mov word [rbp - 0xc], bx
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x38], r8
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
mov r8, r10
lea rdx, [rbp - 0x6e]
lea rcx, [0x1402e17a8]
call fcn.140006500
mov eax, dword [rbp + 0xa8]
mov dword [0x1402db6c0], eax
mov r8, qword [rbp + 0x18]
cmp r8, 8
jb 0x140004976
inc r8
mov rdx, qword [rbp]
lea rcx, [rbp]
call fcn.140007540
mov qword [rbp + 0x18], 7
mov qword [rbp + 0x10], rbx
mov word [rbp], bx
cmp qword [r15 + 0x18], 8
jb 0x14000499f
mov r8, qword [r15 + 0x18]
inc r8
mov rdx, qword [r15]
mov rcx, r15
call fcn.140007540
mov qword [r15 + 0x18], 7
mov qword [r15 + 0x10], rbx
cmp qword [r15 + 0x18], 8
jb 0x1400049b5
mov r15, qword [r15]
mov word [r15], bx
cmp qword [r14 + 0x18], 8
jb 0x1400049d2
mov r8, qword [r14 + 0x18]
inc r8
mov rdx, qword [r14]
mov rcx, r14
call fcn.140007540
mov qword [r14 + 0x18], 7
mov qword [r14 + 0x10], rbx
cmp qword [r14 + 0x18], 8
jb 0x1400049e8
mov r14, qword [r14]
mov word [r14], bx
cmp qword [rsi + 0x18], 8
jb 0x140004a05
mov r8, qword [rsi + 0x18]
inc r8
mov rdx, qword [rsi]
mov rcx, rsi
call fcn.140007540
mov qword [rsi + 0x18], 7
mov qword [rsi + 0x10], rbx
cmp qword [rsi + 0x18], 8
jb 0x140004a1b
mov rsi, qword [rsi]
mov word [rsi], bx
cmp qword [rdi + 0x18], 8
jb 0x140004a37
mov r8, qword [rdi + 0x18]
inc r8
mov rdx, qword [rdi]
mov rcx, rdi
call fcn.140007540
mov qword [rdi + 0x18], 7
mov qword [rdi + 0x10], rbx
cmp qword [rdi + 0x18], 8
jb 0x140004a4d
mov rdi, qword [rdi]
mov word [rdi], bx
mov r8, qword [r12 + 0x18]
cmp r8, 8
jb 0x140004a6a
inc r8
mov rdx, qword [r12]
mov rcx, r12
call fcn.140007540
mov qword [r12 + 0x18], 7
mov qword [r12 + 0x10], rbx
cmp qword [r12 + 0x18], 8
jb 0x140004a89
mov rax, qword [r12]
mov word [rax], bx
jmp 0x140004a8e
mov word [r12], bx
mov rcx, qword [rbp + 0x20]
xor rcx, rsp
call fcn.14012a1e0
add rsp, 0x138
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret