Function at 0x14000d190
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2c8]
sub rsp, 0x3a0
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x1400970b0]
xor rax, rsp
mov qword [rbp + 0x290], rax
mov dword [rbp + 0x18], 0x74666f53
mov dword [rbp + 0x1f], 0x55455c65
mov word [rbp + 0x23], 0x4b44
mov word [rbp + 0x1c], 0x6177
mov byte [rbp + 0x25], 0
mov byte [rbp + 0x1e], 0x72
call fcn.140034030
mov rcx, rax
test rax, rax
jne 0x14000d20a
mov ecx, 0x80004005
call fcn.140033340
int3
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x30], rbx
lea rcx, [rbp + 0x18]
lea rax, [rbp + 0x18]
xor r13d, r13d
or r15, 0xffffffffffffffff
test rax, 0xffffffffffff0000
jne 0x14000d25f
movzx edi, cx
xor edx, edx
mov ecx, edi
call fcn.140033290
test rax, rax
je 0x14000d346
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140034430
mov rbx, qword [rsp + 0x30]
jmp 0x14000d346
lea rax, [rbp + 0x18]
mov rdi, r15
inc rdi
cmp byte [rax + rdi], r13b
jne 0x14000d266
test edi, edi
jne 0x14000d2d1
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], r13d
je 0x14000d346
cmp dword [rdx + 0x10], r13d
jge 0x14000d2a7
cmp dword [rbx - 0xc], r13d
jge 0x14000d29b
mov ecx, 0x80070057
call fcn.140033340
int3
mov dword [rbx - 0x10], r13d
mov byte [rbx], r13b
jmp 0x14000d346
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000d2bd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x30], rbx
jmp 0x14000d346
mov r14d, dword [rbx - 0x10]
lea rsi, [rbp + 0x18]
sub rsi, rbx
test edi, edi
jns 0x14000d2eb
mov ecx, 0x80070057
call fcn.140033340
int3
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x14000d30d
mov edx, edi
lea rcx, [rsp + 0x30]
call fcn.140035d70
mov rbx, qword [rsp + 0x30]
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
cmp rsi, r14
ja 0x14000d327
lea r8, [rsi + rbx]
mov r9d, edi
call fcn.140033920
jmp 0x14000d333
movsxd r9, edi
lea r8, [rbp + 0x18]
call fcn.14003ec70
cmp edi, dword [rbx - 0xc]
jg 0x14000d9d9
mov dword [rbx - 0x10], edi
movsxd rax, edi
mov byte [rax + rbx], r13b
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x70]
call fcn.140045030
mov edx, 0x104
lea rcx, [rbp + 0x70]
call fcn.140007420
call fcn.140034030
mov rcx, rax
test rax, rax
jne 0x14000d37d
mov ecx, 0x80004005
call fcn.140033340
int3
mov rax, qword [rax]
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x38], rdi
lea rcx, [rbp + 0x70]
lea rax, [rbp + 0x70]
test rax, 0xffffffffffff0000
jne 0x14000d3c6
movzx edi, cx
xor edx, edx
mov ecx, edi
call fcn.140033290
test rax, rax
je 0x14000d4b5
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.140034430
jmp 0x14000d4b5
lea rax, [rbp + 0x70]
mov rsi, r15
nop dword [rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x14000d3d0
test esi, esi
jne 0x14000d440
lea rdx, [rdi - 0x18]
mov rsi, qword [rdx]
cmp dword [rdx + 8], 0
je 0x14000d4b5
cmp dword [rdx + 0x10], 0
jge 0x14000d411
cmp dword [rdi - 0xc], 0
jge 0x14000d405
mov ecx, 0x80070057
call fcn.140033340
int3
mov dword [rdi - 0x10], r13d
mov byte [rdi], 0
jmp 0x14000d4b5
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000d427
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x38], rax
mov rbx, qword [rsp + 0x30]
jmp 0x14000d4b5
mov r12d, dword [rdi - 0x10]
lea r14, [rbp + 0x70]
sub r14, rdi
test esi, esi
jns 0x14000d45a
mov ecx, 0x80070057
call fcn.140033340
int3
mov ecx, 1
sub ecx, dword [rdi - 8]
mov eax, dword [rdi - 0xc]
sub eax, esi
or eax, ecx
jge 0x14000d47c
mov edx, esi
lea rcx, [rsp + 0x38]
call fcn.140035d70
mov rdi, qword [rsp + 0x38]
movsxd rdx, dword [rdi - 0xc]
mov rcx, rdi
cmp r14, r12
ja 0x14000d496
lea r8, [r14 + rdi]
mov r9d, esi
call fcn.140033920
jmp 0x14000d4a2
movsxd r9, esi
lea r8, [rbp + 0x70]
call fcn.14003ec70
cmp esi, dword [rdi - 0xc]
jg 0x14000d9ce
mov dword [rdi - 0x10], esi
movsxd rax, esi
mov byte [rax + rdi], 0
lea r8, [0x14006f7c8]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x60]
call fcn.1400325f0
nop
lea r8, [rsp + 0x30]
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140032540
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14000d539
cmp dword [rbx + 0x10], 0
jl 0x14000d52a
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14000d52a
call fcn.140033580
mov rdi, rax
mov ecx, r15d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x14000d51f
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x30], rax
jmp 0x14000d539
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x30]
call fcn.140036c10
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000d559
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000d579
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000d598
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov dword [rsp + 0x40], r13d
mov dword [rsp + 0x44], 4
mov dword [rsp + 0x48], 4
mov dword [rbp + 0x38], 0x696570
mov dword [rbp + 0x29], 0x65747379
mov dword [rbp + 0x31], 0x6e6f464b
mov dword [rbp + 0x2d], 0x4455456d
mov word [rbp + 0x35], 0x5474
mov byte [rbp + 0x28], 0x53
mov byte [rbp + 0x37], 0x79
lea rax, [rsp + 0x44]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x48]
lea r8, [rbp + 0x28]
mov rbx, qword [rsp + 0x30]
mov rdx, rbx
mov rcx, 0xffffffff80000003
call fcn.14001ef10
cmp dword [rsp + 0x40], 1
jne 0x14000d9b3
lea rcx, [rbp - 0x20]
call fcn.140026bc0
nop
call fcn.140034030
mov rcx, rax
test rax, rax
jne 0x14000d635
mov ecx, 0x80004005
call fcn.140033340
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
mov dword [rbp + 0x55], 0x253d6469
mov dword [rbp + 0x40], 0x70747468
mov dword [rbp + 0x4c], 0x2e676f6c
mov dword [rbp + 0x45], 0x252f2f3a
mov dword [rbp + 0x5b], 0x73253d6d
mov dword [rbp + 0x50], 0x3f706870
mov word [rbp + 0x5f], 0x7326
mov byte [rbp + 0x44], 0x73
mov word [rbp + 0x49], 0x2f73
mov word [rbp + 0x59], 0x2673
mov word [rbp + 0x62], 0x31
mov byte [rbp + 0x54], 0x75
mov byte [rbp + 0x4b], 0x69
mov byte [rbp + 0x61], VarI4FromDate
lea rcx, [rsp + 0x70]
call fcn.140026680
mov rbx, rax
lea rcx, [rsp + 0x68]
call fcn.140034110
nop
lea rcx, str.5e5399be05004b61a31c45de7d4b854d
mov qword [rsp + 0x20], rcx
mov r9, qword [rbx]
mov r8, qword [rax]
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.140033b50
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000d6ef
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000d70e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov esi, r13d
mov rbx, qword [rsp + 0x50]
nop word [rax + rax]
mov qword [rbp - 0x68], 0xf
mov qword [rbp - 0x70], r13
mov byte [rbp - 0x80], 0
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x180]
call fcn.140045030
mov edx, 0x104
lea rcx, [rbp + 0x180]
call fcn.140007420
mov qword [rbp - 0x28], 0xf
mov qword [rbp - 0x30], r13
mov byte [rbp - 0x40], 0
cmp byte [rbp + 0x180], 0
jne 0x14000d773
mov r8, r13
jmp 0x14000d78a
lea rax, [rbp + 0x180]
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000d780
lea rdx, [rbp + 0x180]
lea rcx, [rbp - 0x40]
call fcn.14002c510
nop
mov qword [rbp - 0x48], 0xf
mov qword [rbp - 0x50], r13
mov byte [rbp - 0x60], 0
cmp byte [rbx], 0
jne 0x14000d7b5
mov r8, r13
jmp 0x14000d7ca
mov r8, r15
nop dword [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x14000d7c0
mov rdx, rbx
lea rcx, [rbp - 0x60]
call fcn.14002c510
nop
lea r9, [rbp - 0x80]
lea r8, [rbp - 0x40]
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x20]
call fcn.140026dc0
movzx edi, al
mov rcx, qword [rbp - 0x48]
cmp rcx, 0x10
jb 0x14000d841
inc rcx
mov rdx, qword [rbp - 0x60]
cmp rcx, 0x1000
jb 0x14000d839
test dl, 0x1f
jne 0x14000d949
mov rax, qword [rdx - 8]
cmp rax, rdx
jae 0x14000d943
sub rdx, rax
cmp rdx, 8
jb 0x14000d93d
cmp rdx, 0x27
ja 0x14000d937
mov rdx, rax
mov rcx, rdx
call fcn.14003fbe8
mov qword [rbp - 0x48], 0xf
mov qword [rbp - 0x50], r13
mov byte [rbp - 0x60], 0
mov rax, qword [rbp - 0x28]
cmp rax, 0x10
jb 0x14000d89f
inc rax
mov rcx, qword [rbp - 0x40]
cmp rax, 0x1000
jb 0x14000d89a
test cl, 0x1f
jne 0x14000d961
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14000d95b
sub rcx, rax
cmp rcx, 8
jb 0x14000d955
cmp rcx, 0x27
ja 0x14000d94f
mov rcx, rax
call fcn.14003fbe8
test dil, dil
je 0x14000d8e2
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae rcx, qword [rbp - 0x80]
mov r8d, 1
mov rdi, qword [rbp - 0x70]
cmp rdi, r8
cmovb r8, rdi
test r8, r8
je 0x14000d8d8
lea rdx, [0x14006f83c]
call fcn.140044f50
test eax, eax
jne 0x14000d8e2
cmp rdi, 1
je 0x14000d967
mov ecx, 0x3e8
call fcn.140024240
nop
mov rax, qword [rbp - 0x68]
cmp rax, 0x10
jb 0x14000d92b
inc rax
mov rcx, qword [rbp - 0x80]
cmp rax, 0x1000
jb 0x14000d926
test cl, 0x1f
jne 0x14000d984
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14000d97e
sub rcx, rax
cmp rcx, 8
jb 0x14000d978
cmp rcx, 0x27
ja 0x14000d972
mov rcx, rax
call fcn.14003fbe8
inc esi
cmp esi, 6
jge 0x14000d98a
jmp 0x14000d720
call fcn.140045e90
int3
call fcn.140045e90
int3
call fcn.140045e90
int3
call fcn.140045e90
nop
call fcn.140045e90
int3
call fcn.140045e90
int3
call fcn.140045e90
int3
call fcn.140045e90
nop
lea rcx, [rbp - 0x80]
call fcn.14002a3d0
jmp 0x14000d98a
call fcn.140045e90
int3
call fcn.140045e90
int3
call fcn.140045e90
int3
call fcn.140045e90
nop
lea rdx, [rbx - 0x18]
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000d9a5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
lea rcx, [rbp - 0x20]
call fcn.140026c90
mov rbx, qword [rsp + 0x30]
lea rdx, [rbx - 0x18]
lock xadd dword [rdx + 0x10], r15d
sub r15d, 1
jg 0x14000d9e4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
jmp 0x14000d9e4
mov ecx, 0x80070057
call fcn.140033340
nop
mov ecx, 0x80070057
call fcn.140033340
nop
mov rcx, qword [rbp + 0x290]
xor rcx, rsp
call fcn.14003ff20
lea r11, [rsp + 0x3a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret