Function at 0x140049da0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
xchg r14, rbx
mov qword [rsp + 8], r14
xchg r14, rbx
push rbp
lea rbp, [rsp - 0x120]
sub rsp, 0x220
xchg rcx, rsi
mov rbx, rsi
xchg rcx, rsi
xchg r15, rdx
movups xmm0, xmmword [r15]
xchg rdx, r15
xchg rbp, rcx
movups xmmword [rbp], xmm0
xchg rcx, rbp
mov dword [rcx + 0x10], 0x271d54e5
add dword [rcx + 0x10], 0x57d4a475
sub dword [rcx + 0x10], 0x7e034e3e
add dword [rcx + 0x10], 0x6f5eda35
sub dword [rcx + 0x10], 0x1694f0bb
add dword [rcx + 0x10], 0xa6476b69
xor eax, eax
xchg r14, rax
mov qword [rcx + 0x18], r14
xchg r14, rax
mov byte [rcx + 0x20], 0x7c
sub byte [rcx + 0x20], 7
xor byte [rcx + 0x20], 0x37
xor byte [rcx + 0x20], 6
add byte [rcx + 0x20], 0x25
add byte [rcx + 0x20], 9
sub byte [rcx + 0x20], 0x4b
sub byte [rcx + 0x20], 0x26
mov dword [rcx + 0x24], r8d
xchg rbx, rax
mov qword [rcx + 0x28], rbx
xchg rbx, rax
movdqa xmm0, xmmword [0x140002cd0]
movdqa xmm1, xmmword [0x140002ce0]
movups xmmword [rcx + 0x30], xmm0
xchg r14, rcx
movups xmmword [r14 + 0x40], xmm1
xchg r14, rcx
mov dword [rbp + 0xa0], 0x5ba2824d
sub dword [rbp + 0xa0], 0x2a93ecfc
sub dword [rbp + 0xa0], 0x2e242e77
add dword [rbp + 0xa0], 0x683bb827
sub dword [rbp + 0xa0], 0x1f62756e
xor dword [rbp + 0xa0], 0x655c386c
xor dword [rbp + 0xa0], 0x2e9f918a
xorps xmm0, xmm0
xchg r12, rbp
movups xmmword [r12 + 0xa8], xmm0
xchg rbp, r12
movdqa xmm1, xmmword [0x140002cc0]
xchg rbp, rcx
movdqu xmmword [rcx + 0xb8], xmm1
xchg rcx, rbp
mov eax, dword [0x140001878]
mov dword [rbp + 0xa8], eax
movzx eax, word [0x14000187c]
mov word [rbp + 0xac], ax
mov byte [rbp + 0xae], 0x6c
sub byte [rbp + 0xae], 0x31
xor byte [rbp + 0xae], 3
xor byte [rbp + 0xae], 0x2c
xor byte [rbp + 0xae], 0x1c
add byte [rbp + 0xae], 0x24
sub byte [rbp + 0xae], 0x22
sub byte [rbp + 0xae], 0xa
mov dword [rbp + 0x78], 0x16779773
xor dword [rbp + 0x78], 0x236f65b6
xor dword [rbp + 0x78], 0x7abf461a
sub dword [rbp + 0x78], 0x52ba269
sub dword [rbp + 0x78], 0x20724570
add dword [rbp + 0x78], 0x280dcb02
xor dword [rbp + 0x78], 0x52179865
xchg r14, rbp
movups xmmword [r14 + 0x80], xmm0
xchg rbp, r14
xchg rbp, rdi
movdqu xmmword [rdi + 0x90], xmm1
xchg rdi, rbp
mov eax, dword [0x140001880]
mov dword [rbp + 0x80], eax
movzx eax, word [0x140001884]
mov word [rbp + 0x84], ax
mov byte [rbp + 0x86], 0x6b
sub byte [rbp + 0x86], 8
sub byte [rbp + 0x86], 0x5b
add byte [rbp + 0x86], 0xb
add byte [rbp + 0x86], 0x5f
sub byte [rbp + 0x86], 0x45
add byte [rbp + 0x86], 0
sub byte [rbp + 0x86], 0xf
xor byte [rbp + 0x86], 0x1e
mov dword [rbp + 0x50], 0x2445c1ba
add dword [rbp + 0x50], 0x4a0b04e5
sub dword [rbp + 0x50], 0x6c85e568
xor dword [rbp + 0x50], 0x4786ba6f
sub dword [rbp + 0x50], 0x2c29190c
xor dword [rbp + 0x50], 0x57372922
add dword [rbp + 0x50], 0x3159e09b
add dword [rbp + 0x50], 0xc3bdfe
sub dword [rbp + 0x50], 0x7f32099b
xchg rbp, rcx
movups xmmword [rcx + 0x58], xmm0
xchg rcx, rbp
movdqa xmm1, xmmword [0x140002cb0]
xchg rbp, rcx
movdqu xmmword [rcx + 0x68], xmm1
xchg rbp, rcx
mov eax, dword [0x140001888]
mov dword [rbp + 0x58], eax
movzx eax, byte [0x14000188c]
mov byte [rbp + 0x5c], al
mov byte [rbp + 0x5d], 0x10
add byte [rbp + 0x5d], 9
xor byte [rbp + 0x5d], 0x1f
add byte [rbp + 0x5d], 0x5c
sub byte [rbp + 0x5d], 0x17
sub byte [rbp + 0x5d], 0x4b
mov dword [rbp + 0xf0], 0x31ff0363
add dword [rbp + 0xf0], 0x1f582e9a
add dword [rbp + 0xf0], 0x24e43026
add dword [rbp + 0xf0], 0x56dc73d
sub dword [rbp + 0xf0], 0x75014d60
sub dword [rbp + 0xf0], 0x6a7db97
movups xmmword [rbp + 0xf8], xmm0
movdqa xmm1, xmmword [0x140002ca0]
movdqu xmmword [rbp + 0x108], xmm1
mov dword [rbp + 0xf8], 0x73218a5f
sub dword [rbp + 0xf8], 0x5f590f54
add dword [rbp + 0xf8], 0x92350a6
xor dword [rbp + 0xf8], 0x510582b
sub dword [rbp + 0xf8], 0x1336bbb1
xor dword [rbp + 0xf8], 0xd2ecdc5
add dword [rbp + 0xf8], 0x2c8a543d
mov byte [rbp + 0xfc], 0x77
xor byte [rbp + 0xfc], 0xf
xor byte [rbp + 0xfc], 4
sub byte [rbp + 0xfc], 0x32
xor byte [rbp + 0xfc], 0x17
add byte [rbp + 0xfc], 7
sub byte [rbp + 0xfc], 0x24
sub byte [rbp + 0xfc], 0x40
mov dword [rbp + 0x28], 0x61b8391c
sub dword [rbp + 0x28], 0x54643cf2
add dword [rbp + 0x28], 0x5e88b0d2
xor dword [rbp + 0x28], 0x6ad697dd
add dword [rbp + 0x28], 0x4ba59c04
sub dword [rbp + 0x28], 0x35ae089
sub dword [rbp + 0x28], 0x77c2708
sub dword [rbp + 0x28], 0x41d8cf30
movups xmmword [rbp + 0x30], xmm0
movdqa xmm1, xmmword [0x140002cc0]
xchg rdx, rbp
movdqu xmmword [rdx + 0x40], xmm1
xchg rbp, rdx
mov eax, dword [0x140001890]
mov dword [rbp + 0x30], eax
movzx eax, word [0x140001894]
mov word [rbp + 0x34], ax
mov byte [rbp + 0x36], 0x63
xor byte [rbp + 0x36], 0x30
xor byte [rbp + 0x36], 2
sub byte [rbp + 0x36], 0x24
xor byte [rbp + 0x36], 0x20
add byte [rbp + 0x36], 0x51
add byte [rbp + 0x36], 0xd
sub byte [rbp + 0x36], 0x6b
mov dword [rbp], 0x27053be8
add dword [rbp], 0xfc8fda9
xor dword [rbp], 0x1be89f6f
add dword [rbp], 0x490f6e53
sub dword [rbp], 0x36194c64
xor dword [rbp], 0x3c3cf4e0
xor dword [rbp], 0x5caded3a
xor dword [rbp], 0x208dd162
xchg rbx, rbp
movups xmmword [rbx + 8], xmm0
xchg rbp, rbx
movdqa xmm1, xmmword [0x140002cb0]
movdqu xmmword [rbp + 0x18], xmm1
mov eax, dword [0x140001898]
mov dword [rbp + 8], eax
movzx eax, byte [0x14000189c]
mov byte [rbp + 0xc], al
mov byte [rbp + 0xd], 0x71
sub byte [rbp + 0xd], 0x5a
add byte [rbp + 0xd], 7
add byte [rbp + 0xd], 0x44
sub byte [rbp + 0xd], 0x48
sub byte [rbp + 0xd], 0x1a
mov dword [rbp - 0x28], 0x7ce9ab05
sub dword [rbp - 0x28], 0x664192af
xor dword [rbp - 0x28], 0x1d1819a2
add dword [rbp - 0x28], 0xc33d812
xor dword [rbp - 0x28], 0x27566c17
add dword [rbp - 0x28], 0x4d43a715
sub dword [rbp - 0x28], 0x48aa36a3
sub dword [rbp - 0x28], 0x354f2636
movups xmmword [rbp - 0x20], xmm0
movdqa xmm1, xmmword [0x140002cc0]
xchg rbp, rdi
movdqu xmmword [rdi - 0x10], xmm1
xchg rdi, rbp
mov eax, dword [0x1400018a0]
mov dword [rbp - 0x20], eax
movzx eax, word [0x1400018a4]
mov word [rbp - 0x1c], ax
mov byte [rbp - 0x1a], SHCreateMemStream
add byte [rbp - 0x1a], 0x46
sub byte [rbp - 0x1a], 0x11
sub byte [rbp - 0x1a], 0xf
add byte [rbp - 0x1a], 0x13
add byte [rbp - 0x1a], 0x33
sub byte [rbp - 0x1a], 0x5c
sub byte [rbp - 0x1a], 0x19
sub byte [rbp - 0x1a], 2
mov dword [rbp - 0x50], 0x14553ced
add dword [rbp - 0x50], 0x3cc6a0a0
sub dword [rbp - 0x50], 0x3cf22cab
add dword [rbp - 0x50], 0x3d11a017
xor dword [rbp - 0x50], 0x167e303a
add dword [rbp - 0x50], 0x430dc30
sub dword [rbp - 0x50], 0x4b763ca7
xchg r14, rbp
movups xmmword [r14 - 0x48], xmm0
xchg r14, rbp
movdqa xmm1, xmmword [0x140002cb0]
xchg rbp, r13
movdqu xmmword [r13 - 0x38], xmm1
xchg r13, rbp
mov eax, dword [0x1400018a8]
mov dword [rbp - 0x48], eax
movzx eax, byte [0x1400018ac]
mov byte [rbp - 0x44], al
mov byte [rbp - 0x43], 0x79
xor byte [rbp - 0x43], 0x5d
xor byte [rbp - 0x43], 0x45
sub byte [rbp - 0x43], 0x5f
xor byte [rbp - 0x43], 0x6a
sub byte [rbp - 0x43], 0x3b
add byte [rbp - 0x43], 0x1d
sub byte [rbp - 0x43], 6
sub byte [rbp - 0x43], 0x44
mov dword [rbp - 0x78], 0x472476b
add dword [rbp - 0x78], 0x415f895c
xor dword [rbp - 0x78], 0x25f83a51
xor dword [rbp - 0x78], 0x70a83ea0
add dword [rbp - 0x78], 0x2efc2cd7
xor dword [rbp - 0x78], 0x57d78a12
sub dword [rbp - 0x78], 0x68a98ad6
xchg r15, rbp
movups xmmword [r15 - 0x70], xmm0
xchg r15, rbp
xchg rbp, rbx
movdqu xmmword [rbx - 0x60], xmm1
xchg rbx, rbp
mov eax, dword [0x1400018b0]
mov dword [rbp - 0x70], eax
movzx eax, byte [0x1400018b4]
mov byte [rbp - 0x6c], al
mov byte [rbp - 0x6b], 0x7b
xor byte [rbp - 0x6b], 0x6f
xor byte [rbp - 0x6b], 0x6d
xor byte [rbp - 0x6b], 0x14
add byte [rbp - 0x6b], 0xe
sub byte [rbp - 0x6b], 0x4a
sub byte [rbp - 0x6b], 7
sub byte [rbp - 0x6b], 0x2a
mov dword [rsp + 0x60], 0x6530482b
sub dword [rsp + 0x60], 0x2a0758b2
sub dword [rsp + 0x60], 0x11855b1b
xor dword [rsp + 0x60], 0x74bed53
sub dword [rsp + 0x60], 0x43d0c73
sub dword [rsp + 0x60], 0x2aab6c56
movups xmmword [rsp + 0x68], xmm0
movdqa xmm1, xmmword [0x140002cc0]
movdqu xmmword [rsp + 0x78], xmm1
mov eax, dword [0x1400018b8]
mov dword [rsp + 0x68], eax
movzx eax, word [0x1400018bc]
mov word [rsp + 0x6c], ax
mov byte [rsp + 0x6e], 8
add byte [rsp + 0x6e], 0x38
add byte [rsp + 0x6e], 0x1a
add byte [rsp + 0x6e], 0x1f
xor byte [rsp + 0x6e], 0x18
xor byte [rsp + 0x6e], 0x22
sub byte [rsp + 0x6e], 0x41
sub byte [rsp + 0x6e], 2
mov dword [rbp + 0xc8], 0x466ab0f5
sub dword [rbp + 0xc8], 0x16be93a
xor dword [rbp + 0xc8], 0x3ef484d6
xor dword [rbp + 0xc8], 0x5fe6cdf3
xor dword [rbp + 0xc8], 0x5e5322fb
xor dword [rbp + 0xc8], 0x7bbfac26
xchg rsi, rbp
movups xmmword [rsi + 0xd0], xmm0
xchg rbp, rsi
movdqa xmm1, xmmword [0x140002ca0]
xchg r13, rbp
movdqu xmmword [r13 + 0xe0], xmm1
xchg r13, rbp
mov dword [rbp + 0xd0], 0x4cadddc5
add dword [rbp + 0xd0], 0x1ac8ab4d
sub dword [rbp + 0xd0], 0x335e28a8
add dword [rbp + 0xd0], 0x1d95b5b3
add dword [rbp + 0xd0], 0x1ddedfb5
sub dword [rbp + 0xd0], 0x4b82a14e
add dword [rbp + 0xd0], 0x4e5713df
mov byte [rbp + 0xd4], 0x2f
sub byte [rbp + 0xd4], 0x15
xor byte [rbp + 0xd4], 0x5d
sub byte [rbp + 0xd4], 0xd
sub byte [rbp + 0xd4], 0x28
sub byte [rbp + 0xd4], 0x12
sub rcx, 0xffffffffffffffb0
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x58], rax
lea rax, [rbp + 0x78]
xchg r12, rax
mov qword [rsp + 0x50], r12
xchg r12, rax
lea rax, [rbp + 0x50]
xchg rcx, rax
mov qword [rsp + 0x48], rcx
xchg rcx, rax
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x28]
mov qword [rsp + 0x38], rax
lea rax, [rbp]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x28]
xchg r13, rax
mov qword [rsp + 0x28], r13
xchg r13, rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x78]
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0xc8]
call fcn.1400485f0
xchg r14, rdx
mov r14, qword [rbp + 0xe8]
xchg rdx, r14
cmp rdx, 0x10
jb 0x14004a5c6
inc rdx
xchg r8, rcx
mov r8, qword [rbp + 0xd0]
xchg r8, rcx
xchg r11, rax
mov r11, rcx
xchg r11, rax
cmp rdx, 0x1000
jb 0x14004a5c1
neg rdx
add rdx, 0xffffffffffffffd9
neg rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xffffffffb664578a
add rax, 0xffffffffb6645782
cmp rax, 0x1f
ja 0x14004a90a
call fcn.1401fcb00
xchg rdx, r8
mov r8, qword [rbp - 0x80]
xchg r8, rdx
cmp rdx, 0x10
jb 0x14004a61f
inc rdx
mov rcx, qword [rsp + 0x68]
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14004a61a
nop
sub rdx, 0x7515beec
add rdx, 0x7515bf13
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004a90a
call fcn.1401fcb00
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x14004a671
inc rdx
xchg rcx, r10
mov r10, qword [rbp - 0x70]
xchg r10, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a66c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xffffffffe81900f7
add rax, 0xffffffffe81900ef
cmp rax, 0x1f
ja 0x14004a90a
call fcn.1401fcb00
xchg rdx, rcx
mov rcx, qword [rbp - 0x30]
xchg rdx, rcx
cmp rdx, 0x10
jb 0x14004a6c0
inc rdx
xchg rcx, r10
mov r10, qword [rbp - 0x48]
xchg rcx, r10
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a6bb
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
ja 0x14004a90a
call fcn.1401fcb00
xchg r11, rdx
mov r11, qword [rbp - 8]
xchg rdx, r11
cmp rdx, 0x10
jb 0x14004a714
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a70f
nop
add rdx, 0x47d422d5
sub rdx, 0x47d422ae
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
ja 0x14004a90a
call fcn.1401fcb00
mov rdx, qword [rbp + 0x20]
cmp rdx, 0x10
jb 0x14004a761
inc rdx
xchg r14, rcx
mov r14, qword [rbp + 8]
xchg r14, rcx
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14004a75c
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
ja 0x14004a90a
call fcn.1401fcb00
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x14004a7b0
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a7ab
neg rdx
add rdx, 0xffffffffffffffd9
neg rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
neg rax
add rax, 8
neg rax
cmp rax, 0x1f
ja 0x14004a90a
call fcn.1401fcb00
mov rdx, qword [rbp + 0x110]
cmp rdx, 0x10
jb 0x14004a7f9
inc rdx
mov rcx, qword [rbp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a7f4
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004a90a
call fcn.1401fcb00
mov rdx, qword [rbp + 0x70]
cmp rdx, 0x10
jb 0x14004a848
inc rdx
xchg rcx, r13
mov r13, qword [rbp + 0x58]
xchg rcx, r13
xchg r11, rcx
mov rax, r11
xchg r11, rcx
cmp rdx, 0x1000
jb 0x14004a843
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004a90a
call fcn.1401fcb00
xchg r13, rdx
mov r13, qword [rbp + 0x98]
xchg r13, rdx
cmp rdx, 0x10
jb 0x14004a8b1
inc rdx
xchg r15, rcx
mov r15, qword [rbp + 0x80]
xchg rcx, r15
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a8ac
nop
sub rdx, 0x4f5fc15
add rdx, 0x4f5fc3c
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xffffffffe061e9b3
add rax, 0xffffffffe061e9ab
cmp rax, 0x1f
ja 0x14004a90a
call fcn.1401fcb00
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0x10
jb 0x14004a916
inc rdx
xchg rdi, rcx
mov rdi, qword [rbp + 0xa8]
xchg rcx, rdi
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14004a911
nop
sub rdx, 0x1ea908d9
add rdx, 0x1ea90900
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
jbe 0x14004a911
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcb00
mov rax, rbx
mov rbx, qword [rsp + 0x230]
add rsp, 0x220
nop
add rsp, 8
xchg qword [rsp - 8], rbp
nop
add rsp, 8
jmp qword [rsp - 8]