Function at 0x140094790
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xd0]
sub rsp, 0x1d0
mov rax, qword [0x1400cc020]
xor rax, rsp
mov qword [rbp + 0xc0], rax
movzx edi, r9b
mov rbx, r8
mov r13, rdx
mov esi, ecx
mov dword [rsp + 0x30], ecx
lea rdx, [0x1400baf74]
lea rcx, [rbp + 0x80]
call fcn.14009c7c0
nop
mov rdx, rbx
mov r8, qword [rbx + 0x18]
cmp r8, 0x10
jb 0x1400947f4
mov rdx, qword [rbx]
mov rcx, rax
cmp qword [rax + 0x18], 0x10
jb 0x140094801
mov rcx, qword [rax]
xor r14d, r14d
cmp rdx, rcx
je 0x14009483b
mov qword [rbx + 0x10], r14
mov rcx, rbx
cmp r8, 0x10
jb 0x140094819
mov rcx, qword [rbx]
mov byte [rcx], r14b
cmp rbx, rax
je 0x14009483b
mov rdx, rax
cmp qword [rax + 0x18], 0x10
jb 0x14009482e
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
mov rcx, rbx
call fcn.14001adc0
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x14009487c
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140094877
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140095021
call fcn.14006126c
lea rcx, [rbp + 0x80]
test dil, dil
je 0x140094a07
lea rdx, [0x1400baf7c]
call fcn.14009c7c0
nop
mov rdx, rax
mov rcx, rbx
call fcn.14001b7b0
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x1400948e6
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400948e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140095027
call fcn.14006126c
mov qword [rsp + 0x38], r14
lea rdx, [rsp + 0x38]
mov ecx, esi
call fcn.140018990
test eax, eax
je 0x1400949fa
cmp qword [rsp + 0x38], 0
je 0x1400949fa
lea rdx, [0x1400baf88]
lea rcx, [rbp + 0x80]
call fcn.14009c7c0
nop
mov rdx, rax
mov rcx, rbx
call fcn.14001b7b0
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x14009496c
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140094967
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009502d
call fcn.14006126c
mov dword [rsp + 0x30], r14d
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 8
mov r8, r13
lea edx, [r9 + 0xb]
mov rcx, qword [rsp + 0x38]
call fcn.140098c70
cmp qword [r13], 0
je 0x1400949ff
lea rdx, [0x1400baf98]
lea rcx, [rbp + 0x80]
call fcn.14009c7c0
nop
mov rdx, rax
mov rcx, rbx
call fcn.14001b7b0
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x1400949fa
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400949f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140095033
call fcn.14006126c
cmp qword [r13], 0
setne al
jmp 0x140094ff1
lea rdx, [0x1400bafa4]
call fcn.14009c7c0
nop
mov rdx, rax
mov rcx, rbx
call fcn.14001b7b0
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x140094a61
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140094a5c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140095039
call fcn.14006126c
xor dil, dil
mov dword [rsp + 0x40], 4
mov dword [rsp + 0x44], r14d
mov dword [rsp + 0x50], 0x130
call fcn.140098830
mov rsi, rax
mov qword [rsp + 0x38], rax
cmp rax, 0xffffffffffffffff
je 0x140094fed
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140007710
cmp eax, 1
jne 0x140094fe3
nop word [rax + rax]
lea rdx, [0x1400bacc0]
lea rcx, [rbp + 0x80]
call fcn.14009c7c0
cmp qword [rax + 0x18], 0x10
jb 0x140094acd
mov rax, qword [rax]
lea rdx, [rsp + 0x7c]
mov rcx, rax
call fcn.14006d240
test eax, eax
sete dil
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x140094b21
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140094b1c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140095045
call fcn.14006126c
test dil, dil
je 0x140094f40
lea rdx, [0x1400bafac]
lea rcx, [rbp + 0x80]
call fcn.14009c7c0
nop
mov rdx, rbx
mov r8, qword [rbx + 0x18]
cmp r8, 0x10
jb 0x140094b4e
mov rdx, qword [rbx]
mov rcx, rax
cmp qword [rax + 0x18], 0x10
jb 0x140094b5b
mov rcx, qword [rax]
cmp rdx, rcx
je 0x140094b92
mov qword [rbx + 0x10], r14
mov rcx, rbx
cmp r8, 0x10
jb 0x140094b70
mov rcx, qword [rbx]
mov byte [rcx], 0
cmp rbx, rax
je 0x140094b92
mov rdx, rax
cmp qword [rax + 0x18], 0x10
jb 0x140094b85
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
mov rcx, rbx
call fcn.14001adc0
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x140094bd3
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140094bce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009504b
call fcn.14006126c
mov r8d, dword [rsp + 0x58]
call fcn.140018c30
mov r12, rax
test rax, rax
je 0x140094f40
lea rdx, [0x1400bafb8]
lea rcx, [rbp + 0x80]
call fcn.14009c7c0
nop
mov rdx, rbx
mov r8, qword [rbx + 0x18]
cmp r8, 0x10
jb 0x140094c0d
mov rdx, qword [rbx]
mov rcx, rax
cmp qword [rax + 0x18], 0x10
jb 0x140094c1a
mov rcx, qword [rax]
cmp rdx, rcx
je 0x140094c51
mov qword [rbx + 0x10], r14
mov rcx, rbx
cmp r8, 0x10
jb 0x140094c2f
mov rcx, qword [rbx]
mov byte [rcx], 0
cmp rbx, rax
je 0x140094c51
mov rdx, rax
cmp qword [rax + 0x18], 0x10
jb 0x140094c44
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
mov rcx, rbx
call fcn.14001adc0
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x140094c92
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140094c8d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140095051
call fcn.14006126c
mov r8, r13
mov edx, 0xa
mov rcx, r12
call fcn.140013980
test eax, eax
je 0x140094f26
lea rdx, [0x1400bafc8]
lea rcx, [rbp + 0x80]
call fcn.14009c7c0
nop
mov rdx, rbx
mov r8, qword [rbx + 0x18]
cmp r8, 0x10
jb 0x140094cce
mov rdx, qword [rbx]
mov rcx, rax
cmp qword [rax + 0x18], 0x10
jb 0x140094cdb
mov rcx, qword [rax]
cmp rdx, rcx
je 0x140094d12
mov qword [rbx + 0x10], r14
mov rcx, rbx
cmp r8, 0x10
jb 0x140094cf0
mov rcx, qword [rbx]
mov byte [rcx], 0
cmp rbx, rax
je 0x140094d12
mov rdx, rax
cmp qword [rax + 0x18], 0x10
jb 0x140094d05
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
mov rcx, rbx
call fcn.14001adc0
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x140094d53
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140094d4e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140095057
call fcn.14006126c
mov r14d, dword [rsp + 0x40]
mov r15, qword [r13]
xor esi, esi
call fcn.1400a38f0
mov rdi, rax
test rax, rax
je 0x140094def
mov dword [rbp + 0x84], 0x6e656b6f
mov dword [rbp + 0x8f], 0x6e6f6974
mov word [rbp + 0x8a], 0x6f66
mov dword [rbp + 0x80], 0x54746547
mov byte [rbp + 0x93], sil
mov word [rbp + 0x8d], 0x616d
mov word [rbp + 0x88], 0x6e49
mov byte [rbp + 0x8c], 0x72
lea rdx, [rbp + 0x80]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140094de7
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x20], rcx
mov r9d, r14d
lea r8, [rsp + 0x44]
lea edx, [rsi + 0xc]
mov rcx, r15
call rax
mov esi, eax
mov rcx, rdi
call fcn.140098790
test esi, esi
je 0x140094f1e
lea rdx, [0x1400bafd8]
lea rcx, [rbp + 0x80]
call fcn.14009c7c0
nop
mov rdx, rbx
mov r8, qword [rbx + 0x18]
cmp r8, 0x10
jb 0x140094e1b
mov rdx, qword [rbx]
mov rcx, rax
cmp qword [rax + 0x18], 0x10
jb 0x140094e28
mov rcx, qword [rax]
xor r14d, r14d
cmp rdx, rcx
je 0x140094e62
mov qword [rbx + 0x10], r14
mov rcx, rbx
cmp r8, 0x10
jb 0x140094e40
mov rcx, qword [rbx]
mov byte [rcx], r14b
cmp rbx, rax
je 0x140094e62
mov rdx, rax
cmp qword [rax + 0x18], 0x10
jb 0x140094e55
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
mov rcx, rbx
call fcn.14001adc0
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x140094ea3
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140094e9e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009501b
call fcn.14006126c
mov eax, dword [rsp + 0x30]
cmp eax, dword [rsp + 0x44]
jne 0x140094f21
lea rdx, [0x1400baff0]
lea rcx, [rbp + 0x80]
call fcn.14009c7c0
nop
mov rdx, rax
mov rcx, rbx
call fcn.14001b7b0
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x140094f0e
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140094f09
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009503f
call fcn.14006126c
mov dil, 1
mov rcx, r12
call fcn.1400988f0
jmp 0x140094fe3
xor r14d, r14d
mov rsi, qword [rsp + 0x38]
mov rcx, qword [r13]
test rcx, rcx
je 0x140094f38
call fcn.1400988f0
mov qword [r13], r14
mov rcx, r12
call fcn.1400988f0
mov word [rbp + 0xbb], 0x7478
mov dword [rbp + 0xb1], 0x65636f72
mov dword [rbp + 0xb6], 0x4e323373
mov byte [rbp + 0xb0], 0x50
mov byte [rbp + 0xb5], 0x73
mov byte [rbp + 0xba], 0x65
mov byte [rbp + 0xbd], 0
mov word [rbp + 0xa1], 0x7265
mov dword [rbp + 0xa9], 0x6c6c64
mov dword [rbp + 0xa4], 0x32336c65
mov byte [rbp + 0xa3], 0x6e
mov byte [rbp + 0xa0], 0x4b
mov byte [rbp + 0xa8], 0x2e
lea rcx, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rbp + 0xb0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140094fe0
lea rdx, [rsp + 0x50]
mov rcx, rsi
call rax
cmp eax, 1
je 0x140094ab0
xor dil, dil
mov rcx, qword [rsp + 0x38]
call fcn.1400988f0
movzx eax, dil
mov rcx, qword [rbp + 0xc0]
xor rcx, rsp
call fcn.140060fb0
mov rbx, qword [rsp + 0x228]
add rsp, 0x1d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140067948
int3
call fcn.140067948
int3
call fcn.140067948
int3
call fcn.140067948
int3
call fcn.140067948
int3
call fcn.140067948
int3
call fcn.140067948
int3
call fcn.140067948
int3
call fcn.140067948
int3
call fcn.140067948
int3
call fcn.140067948
int3