Function at 0x14000fcf0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x270]
sub rsp, 0x370
mov rax, qword [0x1400a7020]
xor rax, rsp
mov qword [rbp + 0x260], rax
mov dword [rsp + 0x34], 0
mov dword [rbp - 0x30], 0x74666f53
mov dword [rbp - 0x29], 0x55455c65
mov word [rbp - 0x25], 0x4b44
mov word [rbp - 0x2c], 0x6177
mov byte [rbp - 0x23], 0
mov byte [rbp - 0x2a], 0x72
call fcn.14001b940
mov rcx, rax
test rax, rax
je 0x14001068b
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x38], rax
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x38]
call fcn.14001b1d0
mov rsi, 0xffffffffffffffff
test al, al
jne 0x14000fdad
lea rcx, [rbp - 0x30]
mov rax, rsi
inc rax
cmp byte [rcx + rax], 0
jne 0x14000fd92
mov r8d, eax
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x38]
call fcn.14001b4a0
nop
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x40]
call fcn.14001ef80
lea rcx, [rbp + 0x40]
call fcn.1400808c0
call fcn.14001b940
mov rcx, rax
test rax, rax
je 0x140010696
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x60]
call fcn.14001b1d0
test al, al
jne 0x14000fe1b
lea rcx, [rbp + 0x40]
mov rax, rsi
inc rax
cmp byte [rcx + rax], 0
jne 0x14000fe00
mov r8d, eax
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x60]
call fcn.14001b4a0
nop
mov rbx, qword [rsp + 0x60]
lea r13, [rbx - 0x18]
mov rcx, qword [r13]
test rcx, rcx
je 0x14000fe3b
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x14000fe55
call fcn.14001b940
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rax, rax
je 0x1400106a1
mov rax, qword [rcx]
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x70], rdi
mov dword [rsp + 0x34], 1
lea r12, [0x14009af74]
inc rsi
cmp byte [r12 + rsi], 0
jne 0x14000fe73
movsxd r15, dword [rbx - 0x10]
lea r14d, [r15 + rsi]
test r14d, r14d
js 0x140010680
mov ecx, 1
sub ecx, dword [rdi - 8]
mov eax, dword [rdi - 0xc]
sub eax, r14d
or eax, ecx
jge 0x14000feb2
mov edx, r14d
lea rcx, [rsp + 0x70]
call fcn.14001b440
mov rdi, qword [rsp + 0x70]
test r15, r15
je 0x14000fedc
test rdi, rdi
jne 0x14000fece
call fcn.140021dc0
mov dword [rax], 0x16
call fcn.140021c5c
jmp 0x14000fedc
mov r8, r15
mov rdx, rbx
mov rcx, rdi
call fcn.14001e8d0
lea rcx, [r15 + rdi]
movsxd r8, esi
test esi, esi
je 0x14000ff06
test rcx, rcx
jne 0x14000fefe
call fcn.140021dc0
mov dword [rax], 0x16
call fcn.140021c5c
jmp 0x14000ff06
mov rdx, r12
call fcn.14001e8d0
cmp r14d, dword [rdi - 0xc]
jg 0x140010680
mov dword [rdi - 0x10], r14d
movsxd rax, r14d
mov byte [rax + rdi], 0
lea r15, [rdi - 0x18]
mov rcx, qword [r15]
test rcx, rcx
je 0x14000ff35
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x14000ff4f
call fcn.14001b940
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rax, rax
je 0x1400106ac
mov rax, qword [rcx]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x78], rbx
mov dword [rsp + 0x34], 3
mov rsi, qword [rsp + 0x38]
mov eax, dword [rsi - 0x10]
mov dword [rsp + 0x30], eax
movsxd r12, dword [rdi - 0x10]
lea r14d, [rax + r12]
test r14d, r14d
js 0x140010675
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, ecx
jge 0x14000ffa7
mov edx, r14d
lea rcx, [rsp + 0x78]
call fcn.14001b440
mov rbx, qword [rsp + 0x78]
test r12, r12
je 0x14000ffd1
test rbx, rbx
jne 0x14000ffc3
call fcn.140021dc0
mov dword [rax], 0x16
call fcn.140021c5c
jmp 0x14000ffd1
mov r8, r12
mov rdx, rdi
mov rcx, rbx
call fcn.14001e8d0
lea rcx, [r12 + rbx]
movsxd r8, dword [rsp + 0x30]
test r8, r8
je 0x14000fffe
test rcx, rcx
jne 0x14000fff6
call fcn.140021dc0
mov dword [rax], 0x16
call fcn.140021c5c
jmp 0x14000fffe
mov rdx, rsi
call fcn.14001e8d0
cmp r14d, dword [rbx - 0xc]
jg 0x140010675
mov dword [rbx - 0x10], r14d
movsxd rax, r14d
mov byte [rax + rbx], 0
lea rdi, [rbx - 0x18]
add rsi, 0xffffffffffffffe8
cmp rdi, rsi
je 0x140010076
cmp dword [rsi + 0x10], 0
jl 0x140010065
mov rax, qword [rsi]
cmp qword [rdi], rax
jne 0x140010065
mov rcx, rdi
call fcn.14001ade0
mov rbx, rax
mov r14, 0xffffffffffffffff
mov ecx, r14d
lock xadd dword [rsi + 0x10], ecx
sub ecx, 1
jg 0x14001005a
mov rcx, qword [rsi]
mov r8, qword [rcx]
mov rdx, rsi
call qword [r8 + 8]
lea rax, [rbx + 0x18]
mov qword [rsp + 0x38], rax
jmp 0x14001007d
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rsp + 0x38]
call fcn.14001b4a0
mov r14, 0xffffffffffffffff
mov dword [rsp + 0x34], 1
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
sub eax, 1
jg 0x14001009f
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + 8]
nop
mov eax, r14d
lock xadd dword [r15 + 0x10], eax
sub eax, 1
jg 0x1400100ba
mov rcx, qword [r15]
mov rax, qword [rcx]
mov rdx, r15
call qword [rax + 8]
nop
mov eax, r14d
lock xadd dword [r13 + 0x10], eax
sub eax, 1
jg 0x1400100d5
mov rcx, qword [r13]
mov rax, qword [rcx]
mov rdx, r13
call qword [rax + 8]
xor r13d, r13d
mov dword [rsp + 0x40], r13d
mov dword [rsp + 0x50], 4
mov dword [rsp + 0x54], 4
mov dword [rbp + 1], 0x65747379
mov dword [rbp + 5], 0x4455456d
mov dword [rbp + 0xd], 0x70795474
mov word [rbp + 0x11], 0x65
mov byte [rbp], 0x53
mov word [rbp + 0xa], 0x6f46
mov byte [rbp + 0xc], 0x6e
mov byte [rbp + 9], 0x4b
mov word [rbp - 0x19], 0x642e
mov dword [rbp - 0x1f], 0x61776c68
mov word [rbp - 0x16], 0x6c
mov word [rbp - 0x1b], 0x6970
mov byte [rbp - 0x17], 0x6c
mov byte [rbp - 0x20], 0x53
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x1400101bb
mov word [rbp - 0xd], 0x7465
mov word [rbp - 0xa], 0x6c61
mov word [rbp - 7], 0x4165
mov word [rbp - 0xf], 0x4748
mov byte [rbp - 5], r13b
mov byte [rbp - 0xb], 0x56
mov byte [rbp - 0x10], 0x53
mov byte [rbp - 8], 0x75
lea rdx, [rbp - 0x10]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400101b2
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x54]
lea r8, [rbp]
mov rdx, qword [rsp + 0x38]
mov rcx, 0xffffffff80000003
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp dword [rsp + 0x40], 1
jne 0x140010627
call fcn.14001b940
mov rcx, rax
test rax, rax
je 0x1400106b7
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
mov dword [rbp + 0x2e], 0x253d7026
mov word [rbp + 0x18], 0x7468
mov dword [rbp + 0x1b], 0x2f3a7370
mov dword [rbp + 0x1f], 0x2f73252f
mov word [rbp + 0x35], 0x313d
mov word [rbp + 0x26], 0x6870
mov word [rbp + 0x23], 0x6c6c
mov word [rbp + 0x32], 0x2673
mov word [rbp + 0x2c], 0x7325
mov byte [rbp + 0x34], 0x73
mov byte [rbp + 0x1a], 0x74
mov byte [rbp + 0x25], 0x2e
mov word [rbp + 0x29], 0x693f
mov byte [rbp + 0x28], 0x70
mov byte [rbp + 0x37], 0
mov byte [rbp + 0x2b], 0x3d
lea rcx, [rbp - 0x78]
call fcn.140017ec0
mov rbx, rax
lea rcx, [rbp - 0x80]
call fcn.14001aa10
nop
lea rcx, str.f24f189a2ea94dc09cca2e67c5746b22
mov qword [rsp + 0x20], rcx
mov r9, qword [rbx]
mov r8, qword [rax]
lea rdx, [rbp + 0x18]
lea rcx, [rsp + 0x48]
call fcn.14001a2b0
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140010293
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400102b1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov r15d, r13d
mov dword [rsp + 0x30], r13d
mov rbx, qword [rsp + 0x48]
nop
cmp r15d, 3
jne 0x1400104ff
mov word [rbp - 0x3b], 0x70
mov dword [rbp - 0x40], 0x702e6c6c
mov byte [rbp - 0x3c], 0x68
mov word [rbp - 0x33], 0x70
mov dword [rbp - 0x38], 0x702e6767
mov byte [rbp - 0x34], 0x68
lea rax, [rbp - 0x40]
mov r12, r14
inc r12
cmp byte [rax + r12], 0
jne 0x1400102f3
test r12d, r12d
je 0x1400104ff
lea rcx, [rbp - 0x38]
mov rax, r14
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140010310
mov qword [rsp + 0x68], rax
mov esi, r13d
mov rdi, rbx
movsxd r15, dword [rbx - 0x10]
add r15, rbx
cmp rbx, r15
jae 0x1400104fa
lea rdx, [rbp - 0x40]
mov rcx, rdi
call fcn.140027d44
test rax, rax
je 0x14001036b
movsxd r14, r12d
nop dword [rax + rax]
inc esi
lea rdi, [rax + r14]
lea rdx, [rbp - 0x40]
mov rcx, rdi
call fcn.140027d44
test rax, rax
jne 0x140010350
lea r14, [rax - 1]
test rdi, rdi
je 0x14001037e
mov rax, r14
inc rax
cmp byte [rdi + rax], 0
jne 0x140010373
jmp 0x140010381
mov eax, r13d
inc eax
movsxd rcx, eax
add rdi, rcx
cmp rdi, r15
jb 0x140010334
test esi, esi
jle 0x1400104fa
movsxd r13, dword [rbx - 0x10]
mov r15, qword [rsp + 0x68]
mov r14d, r15d
sub r14d, r12d
imul r14d, esi
add r14d, r13d
mov dword [rsp + 0x58], r14d
mov edx, r13d
cmp r14d, r13d
cmovg edx, r14d
test edx, edx
js 0x1400106ed
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edx
or eax, ecx
jge 0x1400103e3
lea rcx, [rsp + 0x48]
call fcn.14001b440
mov rbx, qword [rsp + 0x48]
mov rdi, rbx
lea rsi, [rbx + r13]
mov qword [rbp - 0x68], rsi
cmp rbx, rsi
jae 0x1400104d9
nop word [rax + rax]
lea rdx, [rbp - 0x40]
mov rcx, rdi
call fcn.140027d44
mov r14, rax
test rax, rax
je 0x1400104aa
movsxd r15, r15d
movsxd rax, r12d
mov qword [rbp - 0x70], rax
mov esi, ebx
sub esi, r14d
sub esi, r12d
add esi, r13d
movsxd r8, esi
lea rdx, [r14 + rax]
lea rdi, [r14 + r15]
je 0x140010454
test rdi, rdi
je 0x1400106c2
test rdx, rdx
je 0x1400106c2
mov rcx, rdi
call fcn.14001e8d0
test r15, r15
je 0x140010471
test r14, r14
je 0x1400106dd
mov r8, r15
lea rdx, [rbp - 0x38]
mov rcx, r14
call fcn.14001e8d0
mov rdx, qword [rsp + 0x68]
lea eax, [rsi + rdx]
movsxd rcx, eax
mov byte [rcx + r14], 0
mov eax, edx
sub eax, r12d
add r13d, eax
lea rdx, [rbp - 0x40]
mov rcx, rdi
call fcn.140027d44
mov r14, rax
test rax, rax
mov rax, qword [rbp - 0x70]
jne 0x140010422
mov r15, qword [rsp + 0x68]
mov rsi, qword [rbp - 0x68]
test rdi, rdi
je 0x1400104c1
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdi + rax], 0
jne 0x1400104b6
jmp 0x1400104c3
xor eax, eax
inc eax
movsxd rcx, eax
add rdi, rcx
cmp rdi, rsi
jb 0x140010400
mov r14d, dword [rsp + 0x58]
test r14d, r14d
js 0x1400106ed
cmp r14d, dword [rbx - 0xc]
jg 0x1400106ed
mov dword [rbx - 0x10], r14d
movsxd rax, r14d
mov byte [rax + rbx], 0
xor r13d, r13d
mov r15d, dword [rsp + 0x30]
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x150]
call fcn.14001ef80
lea rcx, [rbp + 0x150]
call fcn.1400808c0
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
lea r8, [rbp - 0x60]
mov rdx, rbx
call fcn.140008a80
mov rsi, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x60]
test al, al
je 0x140010571
lea rax, [rbp - 0x60]
cmp rsi, 0x10
cmovae rax, rdi
cmp qword [rbp - 0x50], 1
jne 0x140010571
cmp byte [rax], 0x31
jne 0x140010568
mov eax, r13d
jmp 0x14001056d
sbb eax, eax
or eax, 1
test eax, eax
je 0x1400105cd
mov ecx, 0x3e8
call fcn.14000a3f0
nop
cmp rsi, 0x10
jb 0x1400105b3
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400105ab
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400106f8
mov rcx, rdi
call fcn.14001cc6c
inc r15d
mov dword [rsp + 0x30], r15d
cmp r15d, 6
jge 0x140010605
mov r14, 0xffffffffffffffff
jmp 0x1400102c0
cmp rsi, 0x10
jb 0x140010605
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400105fc
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400106f8
mov rcx, rdi
call fcn.14001cc6c
nop
lea rdx, [rbx - 0x18]
mov r14, 0xffffffffffffffff
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140010627
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r14d
sub r14d, 1
jg 0x140010645
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rbp + 0x260]
xor rcx, rsp
call fcn.14001c9b0
lea r11, [rsp + 0x370]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x80070057
call fcn.14001b6d0
nop
mov ecx, 0x80070057
call fcn.14001b6d0
nop
mov ecx, 0x80004005
call fcn.14001b6d0
nop
mov ecx, 0x80004005
call fcn.14001b6d0
nop
mov ecx, 0x80004005
call fcn.14001b6d0
nop
mov ecx, 0x80004005
call fcn.14001b6d0
nop
mov ecx, 0x80004005
call fcn.14001b6d0
nop
call fcn.140021dc0
mov dword [rax], 0x16
call fcn.140021c5c
mov ecx, 0x80070057
call fcn.14001b6d0
int3
call fcn.140021dc0
mov dword [rax], 0x16
call fcn.140021c5c
mov ecx, 0x80070057
call fcn.14001b6d0
int3
call fcn.140021c7c
int3