Function at 0x140071060
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xc48
mov qword [rsp + 0xf0], 0xfffffffffffffffe
mov rax, qword [0x140210cc8]
xor rax, rsp
mov qword [rsp + 0xc30], rax
mov dword [rsp + 0x4c], 0
mov rax, qword [rsp + 0xc60]
cmp dword [rax + 0xc], 0
je 0x1400710e0
mov rax, qword [rsp + 0xc60]
add rax, 0x70
mov rdx, rax
mov rcx, qword [rsp + 0xc68]
call fcn.140013d80
mov eax, dword [rsp + 0x4c]
or eax, 1
mov dword [rsp + 0x4c], eax
mov rax, qword [rsp + 0xc68]
jmp 0x140071adc
mov rax, qword [rsp + 0xc60]
mov dword [rax + 0xc], 1
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x48], 0
mov byte [rsp + 0x360], 0
lea rax, [rsp + 0x361]
mov rdi, rax
xor eax, eax
mov ecx, 0x63
rep stosb byte [rdi], al
mov byte [rsp + 0x3d0], 0
lea rax, [rsp + 0x3d1]
mov rdi, rax
xor eax, eax
mov ecx, 0x21f
rep stosb byte [rdi], al
mov byte [rsp + 0x340], 0
lea rax, [rsp + 0x341]
mov rdi, rax
xor eax, eax
mov ecx, 0xf
rep stosb byte [rdi], al
lea rcx, [rsp + 0x128]
call fcn.140013ec0
nop
mov byte [rsp + 0x2f0], 0x53
mov byte [rsp + 0x2f1], 0x43
mov byte [rsp + 0x2f2], 0x53
mov byte [rsp + 0x2f3], 0x49
mov byte [rsp + 0x2f4], 0x44
mov byte [rsp + 0x2f5], 0x49
mov byte [rsp + 0x2f6], 0x53
mov byte [rsp + 0x2f7], 0x4b
mov byte [rsp + 0x2f8], 0
lea rax, [rsp + 0x360]
mov rdi, rax
xor eax, eax
mov ecx, 0x64
rep stosb byte [rdi], al
lea rax, [rsp + 0x100]
mov rdi, rax
xor eax, eax
mov ecx, 0x24
rep stosb byte [rdi], al
lea rax, [rsp + 0x1a0]
mov rdi, rax
xor eax, eax
mov ecx, 0x18
rep stosb byte [rdi], al
lea rax, [rsp + 0x1e0]
mov rdi, rax
xor eax, eax
mov ecx, 0x104
rep stosb byte [rdi], al
mov byte [rsp + 0x310], 0x5c
mov byte [rsp + 0x311], 0x5c
mov byte [rsp + 0x312], 0x2e
mov byte [rsp + 0x313], 0x5c
mov byte [rsp + 0x314], 0x50
mov byte [rsp + 0x315], 0x68
mov byte [rsp + 0x316], 0x79
mov byte [rsp + 0x317], 0x73
mov byte [rsp + 0x318], 0x69
mov byte [rsp + 0x319], 0x63
mov byte [rsp + 0x31a], 0x61
mov byte [rsp + 0x31b], 0x6c
mov byte [rsp + 0x31c], 0x44
mov byte [rsp + 0x31d], 0x72
mov byte [rsp + 0x31e], 0x69
mov byte [rsp + 0x31f], 0x76
mov byte [rsp + 0x320], 0x65
mov byte [rsp + 0x321], 0x25
mov byte [rsp + 0x322], 0x64
mov byte [rsp + 0x323], 0
mov r8d, dword [rsp + 0xc70]
lea rdx, [rsp + 0x310]
lea rcx, [rsp + 0x360]
call fcn.14006ccf0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 3
mov edx, 0xc0000000
lea rcx, [rsp + 0x360]
call fcn.140424af6
dec byte [rax - 0x77]
and al, 0x40
cmp qword [rsp + 0x40], 0xffffffffffffffff
je 0x140071488
mov qword [rsp + 0x38], 0
lea rax, [rsp + 0x48]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x18
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x74080
mov rcx, qword [rsp + 0x40]
push rbx
call fcn.140292479
test eax, eax
je 0x140071483
mov dword [rsp + 0x100], 0x200
mov byte [rsp + 0x105], 1
mov byte [rsp + 0x106], 1
mov eax, dword [rsp + 0xc70]
and eax, 1
test eax, eax
je 0x140071376
mov byte [rsp + 0x109], 0xb0
jmp 0x14007137e
mov byte [rsp + 0x109], 0xa0
cmp dword [rsp + 0xc70], 0
jbe 0x1400713c0
movzx eax, byte [rsp + 0x1a3]
mov ecx, dword [rsp + 0xc70]
sar eax, cl
and eax, 0x10
test eax, eax
je 0x1400713aa
mov dword [rsp + 0x50], 0xa1
jmp 0x1400713b2
mov dword [rsp + 0x50], 0xec
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x10a], al
jmp 0x1400713c8
mov byte [rsp + 0x10a], 0xec
mov qword [rsp + 0x38], 0
lea rax, [rsp + 0x48]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x220
lea rax, [rsp + 0x3d0]
mov qword [rsp + 0x20], rax
mov r9d, 0x24
lea r8, [rsp + 0x100]
mov edx, 0x7c088
mov rcx, qword [rsp + 0x40]
push rsi
call fcn.14053dbb0
test eax, eax
je 0x140071460
mov byte [rsp + 0x10a], 0xec
mov qword [rsp + 0x38], 0
lea rax, [rsp + 0x48]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x220
lea rax, [rsp + 0x3d0]
mov qword [rsp + 0x20], rax
mov r9d, 0x24
lea r8, [rsp + 0x100]
mov edx, 0x7c088
mov rcx, qword [rsp + 0x40]
call fcn.1402bb53f
ret 0x1b8
mov eax, 1
imul rax, rax, 0x10
lea rcx, [rsp + 0x1e0]
mov rdi, rcx
lea rsi, [rsp + rax + 0x3d0]
mov ecx, 0x100
rep movsb byte [rdi], byte [rsi]
jmp 0x140071640
mov byte [rsp + 0x300], 0x5c
mov byte [rsp + 0x301], 0x5c
mov byte [rsp + 0x302], 0x2e
mov byte [rsp + 0x303], 0x5c
mov byte [rsp + 0x304], 0x53
mov byte [rsp + 0x305], 0x63
mov byte [rsp + 0x306], 0x73
mov byte [rsp + 0x307], 0x69
mov byte [rsp + 0x308], 0x25
mov byte [rsp + 0x309], 0x64
mov byte [rsp + 0x30a], 0x3a
mov byte [rsp + 0x30b], 0
mov r8d, dword [rsp + 0xc70]
lea rdx, [rsp + 0x300]
lea rcx, [rsp + 0x360]
call fcn.14006ccf0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 3
mov edx, 0xc0000000
lea rcx, [rsp + 0x360]
push rax
call fcn.140492ca7
mov qword [rsp + 0x40], rax
cmp qword [rsp + 0x40], 0xffffffffffffffff
je 0x140071640
lea rax, [rsp + 0x150]
mov rdi, rax
xor eax, eax
mov ecx, 0x48
rep stosb byte [rdi], al
mov rax, qword [rsp + 0x2f0]
mov qword [rsp + 0x154], rax
mov dword [rsp + 0x164], 2
mov dword [rsp + 0x170], 0x220
mov dword [rsp + 0x168], 0x1b0501
mov dword [rsp + 0x174], 0x200
mov byte [rsp + 0x179], 1
mov byte [rsp + 0x17a], 1
mov eax, dword [rsp + 0xc70]
and eax, 1
test eax, eax
je 0x1400715c3
mov byte [rsp + 0x17d], 0xb0
jmp 0x1400715cb
mov byte [rsp + 0x17d], 0xa0
mov byte [rsp + 0x17e], 0xec
mov qword [rsp + 0x38], 0
lea rax, [rsp + 0x48]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x23c
lea rax, [rsp + 0x5f0]
mov qword [rsp + 0x20], rax
mov r9d, 0x48
lea r8, [rsp + 0x150]
mov edx, 0x4d008
mov rcx, qword [rsp + 0x40]
call fcn.140344bde
in al, dx
test eax, eax
je 0x140071640
mov eax, 1
imul rax, rax, 0x2c
lea rcx, [rsp + 0x1e0]
mov rdi, rcx
lea rsi, [rsp + rax + 0x5f0]
mov ecx, 0x100
rep movsb byte [rdi], byte [rsi]
mov r9d, 0x14
lea r8, [rsp + 0x1f4]
lea rdx, [rsp + 0x1b8]
mov rcx, qword [rsp + 0xc60]
call fcn.1400744d0
mov qword [rsp + 0xa8], rax
mov rdx, qword [rsp + 0xa8]
lea rcx, [rsp + 0x128]
call fcn.1400140b0
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rsp + 0x1b8]
call fcn.140018070
nop
lea rdx, [0x1400ac306]
lea rcx, [rsp + 0x128]
call fcn.140018cb0
test eax, eax
jne 0x1400716b6
mov dword [rsp + 0x54], 1
jmp 0x1400716be
mov dword [rsp + 0x54], 0
movzx eax, byte [rsp + 0x54]
test eax, eax
je 0x140071900
mov byte [rsp + 0x328], 0x5c
mov byte [rsp + 0x329], 0x5c
mov byte [rsp + 0x32a], 0x2e
mov byte [rsp + 0x32b], 0x5c
mov byte [rsp + 0x32c], 0x50
mov byte [rsp + 0x32d], 0x68
mov byte [rsp + 0x32e], 0x79
mov byte [rsp + 0x32f], 0x73
mov byte [rsp + 0x330], 0x69
mov byte [rsp + 0x331], 0x63
mov byte [rsp + 0x332], 0x61
mov byte [rsp + 0x333], 0x6c
mov byte [rsp + 0x334], 0x44
mov byte [rsp + 0x335], 0x72
mov byte [rsp + 0x336], 0x69
mov byte [rsp + 0x337], 0x76
mov byte [rsp + 0x338], 0x65
mov byte [rsp + 0x339], 0x25
mov byte [rsp + 0x33a], 0x64
mov byte [rsp + 0x33b], 0
mov r8d, dword [rsp + 0xc70]
lea rdx, [rsp + 0x328]
lea rcx, [rsp + 0x360]
call fcn.14006ccf0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 3
xor edx, edx
lea rcx, [rsp + 0x360]
push rcx
call fcn.1403c9060
mov qword [rsp + 0x40], rax
cmp qword [rsp + 0x40], 0xffffffffffffffff
je 0x1400718fb
mov dword [rsp + 0x68], 0
lea rax, [rsp + 0x350]
mov rdi, rax
xor eax, eax
mov ecx, 0xc
rep stosb byte [rdi], al
lea rax, [rsp + 0x830]
mov rdi, rax
xor eax, eax
mov ecx, 0x400
rep stosb byte [rdi], al
mov dword [rsp + 0x74], 0x400
mov qword [rsp + 0x38], 0
lea rax, [rsp + 0x68]
mov qword [rsp + 0x30], rax
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x830]
mov qword [rsp + 0x20], rax
mov r9d, 0xc
lea r8, [rsp + 0x350]
mov edx, 0x2d1400
mov rcx, qword [rsp + 0x40]
push rbx
call fcn.1402678d2
test eax, eax
je 0x1400718fb
mov r8d, 0x400
lea rdx, [rsp + 0x830]
mov rcx, qword [rsp + 0xc60]
call fcn.14006fb90
mov dword [rsp + 0x6c], eax
mov r8d, 0xa
lea rdx, [rsp + 0x340]
mov ecx, dword [rsp + 0x6c]
call fcn.140086a50
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
movsx eax, byte [rax]
test eax, eax
jne 0x1400718a6
mov qword [rsp + 0x98], 0
jmp 0x1400718e1
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0x60], 0xffffffffffffffff
inc qword [rsp + 0x60]
mov rax, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0x60]
cmp byte [rax + rcx], 0
jne 0x1400718bc
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x98], rax
mov r8, qword [rsp + 0x98]
mov rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0x128]
call fcn.1400188c0
jmp 0x140071a73
lea rax, [rsp + 0x128]
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0xc0]
add rax, 0x10
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0xc8]
mov rax, qword [rax]
mov qword [rsp + 0xd8], rax
lea rax, [rsp + 0x128]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
cmp qword [rax + 0x18], 0x10
jb 0x14007199b
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x80]
mov rax, qword [rax]
mov qword [rsp + 0x88], rax
jmp 0x1400719ab
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0xe0], rax
mov r8d, dword [rsp + 0xd8]
mov rdx, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xc60]
call fcn.14006fb90
mov dword [rsp + 0x70], eax
mov r8d, 0xa
lea rdx, [rsp + 0x340]
mov ecx, dword [rsp + 0x70]
call fcn.140086a50
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x90]
movsx eax, byte [rax]
test eax, eax
jne 0x140071a18
mov qword [rsp + 0xa0], 0
jmp 0x140071a56
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0x58], 0xffffffffffffffff
inc qword [rsp + 0x58]
mov rax, qword [rsp + 0xe8]
mov rcx, qword [rsp + 0x58]
cmp byte [rax + rcx], 0
jne 0x140071a31
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0xa0], rax
mov r8, qword [rsp + 0xa0]
mov rdx, qword [rsp + 0x90]
lea rcx, [rsp + 0x128]
call fcn.1400188c0
mov rcx, qword [rsp + 0x40]
call fcn.14032f269
mov eax, 0x24848b48
invalid
mov rcx, qword [rsp + 0xc30]
xor rcx, rsp
call fcn.14009ba30
add rsp, 0xc48
pop rdi
pop rsi
ret