Function at 0x1400027fc
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5d8]
sub rsp, 0x6a0
mov qword [rbp - 0x18], 0xfffffffffffffffe
mov qword [rax + 0x20], rbx
mov rax, qword [0x1401fc9c8]
xor rax, rsp
mov qword [rbp + 0x590], rax
mov rdi, r8
mov qword [rsp + 0x60], r8
mov rsi, rdx
mov r12, rcx
mov qword [rbp - 0x70], rcx
mov qword [rbp + 0x130], r8
xor r13d, r13d
mov dword [rsp + 0x58], r13d
mov qword [rcx], r13
mov qword [rcx + 8], r13
mov qword [rcx + 0x10], r13
mov dword [rsp + 0x58], 1
call fcn.140002148
lea eax, [r13 + 0x4a]
mov word [rbp + 0x250], ax
mov dword [rbp + 0x252], 0x69006c
lea eax, [r13 + 0x49]
mov word [rbp + 0x256], ax
lea eax, [r13 + 0x67]
mov word [rbp + 0x258], ax
lea eax, [r13 + 0x77]
mov word [rbp + 0x25a], ax
lea eax, [r13 + 0x6b]
mov word [rbp + 0x25c], ax
lea eax, [r13 + 0x50]
mov word [rbp + 0x25e], ax
lea eax, [r13 + 0x63]
mov word [rbp + 0x260], ax
mov dword [rbp + 0x262], 0x690068
mov word [rbp + 0x266], r13w
lea eax, [r13 + 0x6e]
mov word [rbp + 0x1e8], ax
lea eax, [r13 + 0x64]
mov word [rbp + 0x1ea], ax
lea eax, [r13 + 0x76]
mov word [rbp + 0x1ec], ax
mov dword [rbp + 0x1ee], 0x42
lea rax, [rbp + 0x40]
mov qword [rsp + 0x50], rax
lea rdx, [rbp + 0x1e8]
lea rcx, [rbp + 0x40]
call fcn.1400043f4
mov rbx, rax
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x108]
call fcn.1400043f4
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1b0]
call fcn.1400021cc
nop
lea r15d, [r13 + 0xf]
mov qword [rbp + 8], r15
mov qword [rbp], r13
mov byte [rbp - 0x10], r13b
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp - 0x10]
call fcn.140004774
lea rdx, [rbp - 0x10]
mov rcx, rsi
call fcn.140002410
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rax
mov r14, rax
mov qword [rsp + 0x50], rax
cmp qword [rbp + 0x1c8], 0x10
jb 0x1400029a7
mov rcx, qword [rbp + 0x1b0]
call fcn.140005798
mov qword [rbp + 0x1c8], r15
mov qword [rbp + 0x1c0], r13
mov byte [rbp + 0x1b0], r13b
call fcn.140002148
mov dword [rbp + 0x268], 0x6e004e
mov dword [rbp + 0x26c], 0x4c007a
mov eax, 0x66
mov word [rbp + 0x270], ax
mov eax, 0x68
mov word [rbp + 0x272], ax
mov eax, 0x63
mov word [rbp + 0x274], ax
mov eax, 0x54
mov word [rbp + 0x276], ax
mov dword [rbp + 0x278], 0x7a0074
mov eax, VarBstrFromDisp
mov dword [rbp + 0x27c], 0x710072
mov word [rbp + 0x280], ax
mov dword [rbp + 0x282], 0x67
mov dword [rbp + 0x1f8], 0x460072
mov eax, 0x4d
mov word [rbp + 0x1fc], ax
mov eax, 0x65
mov word [rbp + 0x1fe], ax
mov eax, 0x6d
mov word [rbp + 0x200], ax
mov dword [rbp + 0x202], 0x4e004f
mov word [rbp + 0x206], r13w
lea rax, [rbp + 0x68]
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x1f8]
lea rcx, [rbp + 0x68]
call fcn.1400043f4
mov rbx, rax
lea rdx, [rbp + 0x268]
lea rcx, [rbp + 0xe0]
call fcn.1400043f4
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x188]
call fcn.1400021cc
nop
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x58], r13
mov byte [rbp - 0x68], r13b
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x188]
lea rcx, [rbp - 0x68]
call fcn.140004774
mov ebx, 0x118
lea rdx, [rbp - 0x68]
mov rcx, rsi
call fcn.140002410
xor r9d, r9d
movzx r8d, bx
lea rdx, [0x1401c2a08]
mov rcx, r14
call rax
mov r15, rax
cmp qword [rbp + 0x1a0], 0x10
jb 0x140002b12
mov rcx, qword [rbp + 0x188]
call fcn.140005798
mov qword [rbp + 0x1a0], 0xf
mov qword [rbp + 0x198], r13
mov byte [rbp + 0x188], r13b
mov qword [rbp - 0x28], 7
mov qword [rbp - 0x30], r13
mov word [rbp - 0x40], r13w
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp - 0x40]
call fcn.140004980
lea r8, [rbp - 0x40]
mov rdx, rsi
mov rcx, r15
call fcn.140002508
mov r13, rax
xor ebx, ebx
test r14, r14
je 0x1400031d0
test r15, r15
je 0x1400031d0
lea eax, [rbx + 0x59]
mov word [rbp + 0x2a8], ax
mov dword [rbp + 0x2aa], 0x75006e
mov dword [rbp + 0x2ae], 0x6a0044
lea eax, [rbx + 0x78]
mov word [rbp + 0x2b2], ax
lea eax, [rbx + 0x65]
mov word [rbp + 0x2b4], ax
lea eax, [rbx + 0x4f]
mov word [rbp + 0x2b6], ax
lea eax, [rbx + 0x67]
mov word [rbp + 0x2b8], ax
lea eax, [rbx + 0x73]
mov word [rbp + 0x2ba], ax
lea eax, [rbx + 0x6b]
mov word [rbp + 0x2bc], ax
mov dword [rbp + 0x2be], 0x75004e
mov dword [rbp + 0x2c2], 0x6a0075
mov dword [rbp + 0x2c6], 0x750061
mov dword [rbp + 0x2ca], 0x79
lea eax, [rbx + 0x63]
mov word [rbp + 0x220], ax
lea eax, [rbx + 0x46]
mov word [rbp + 0x222], ax
lea eax, [rbx + 0x48]
mov word [rbp + 0x224], ax
lea eax, [rbx + 0x77]
mov word [rbp + 0x226], ax
lea eax, [rbx + 0x71]
mov word [rbp + 0x228], ax
lea eax, [rbx + 0x45]
mov word [rbp + 0x22a], ax
lea eax, [rbx + 0x50]
mov word [rbp + 0x22c], ax
mov dword [rbp + 0x22e], 0x57
lea rax, [rbp + 0x90]
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 0x90]
call fcn.1400043f4
mov rbx, rax
lea rdx, [rbp + 0x2a8]
lea rcx, [rbp + 0xb8]
call fcn.1400043f4
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.1400021cc
nop
call fcn.140002148
mov qword [rbp + 0x150], 0xf
xor ebx, ebx
mov qword [rbp + 0x148], rbx
mov byte [rbp + 0x138], bl
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x138]
call fcn.140004774
lea rdx, [rbp + 0x138]
mov rcx, rsi
call fcn.140002410
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r13
call rax
lea eax, [rbx + 0x52]
mov word [rbp + 0x2f8], ax
mov dword [rbp + 0x2fa], 0x680061
lea eax, [rbx + 0x45]
mov word [rbp + 0x2fe], ax
lea eax, [rbx + 0x6f]
mov word [rbp + 0x300], ax
lea eax, [rbx + 0x6c]
mov word [rbp + 0x302], ax
lea eax, [rbx + 0x6a]
mov word [rbp + 0x304], ax
lea eax, [rbx + 0x4f]
mov word [rbp + 0x306], ax
mov dword [rbp + 0x308], 0x75007a
lea eax, [rbx + 0x79]
mov word [rbp + 0x30c], ax
lea eax, [rbx + 0x66]
mov word [rbp + 0x30e], ax
mov dword [rbp + 0x310], 0x770071
lea eax, [rbx + 0x4c]
mov word [rbp + 0x314], ax
mov dword [rbp + 0x316], 0x6e0062
mov dword [rbp + 0x31a], 0x690068
mov dword [rbp + 0x31e], 0x6e006b
mov dword [rbp + 0x322], 0x77
mov dword [rbp + 0x1d8], 0x530076
mov dword [rbp + 0x1dc], 0x580075
mov word [rbp + 0x1e0], bx
lea rax, [rsp + 0x68]
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x1d8]
lea rcx, [rsp + 0x68]
call fcn.1400043f4
mov rbx, rax
lea rdx, [rbp + 0x2f8]
lea rcx, [rbp + 0x18]
call fcn.1400043f4
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x138]
call fcn.1400021cc
nop
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.140004340
nop
cmp qword [rbp + 0x150], 0x10
jb 0x140002e15
mov rcx, qword [rbp + 0x138]
call fcn.140005798
call fcn.140002148
mov qword [rbp + 0x150], 0xf
xor ebx, ebx
mov qword [rbp + 0x148], rbx
mov byte [rbp + 0x138], bl
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x138]
call fcn.140004774
lea rdx, [rbp + 0x138]
mov rcx, rsi
call fcn.140002410
xor edx, edx
mov rcx, r13
call rax
lea eax, [rbx + 0x48]
mov word [rbp + 0x288], ax
lea eax, [rbx + 0x73]
mov word [rbp + 0x28a], ax
lea eax, [rbx + 0x6c]
mov word [rbp + 0x28c], ax
lea eax, [rbx + 0x59]
mov word [rbp + 0x28e], ax
mov dword [rbp + 0x290], 0x64006f
mov dword [rbp + 0x294], 0x420071
mov dword [rbp + 0x298], 0x6b0070
mov dword [rbp + 0x29c], 0x550062
mov dword [rbp + 0x2a0], 0x640076
mov dword [rbp + 0x2a4], 0x62
mov dword [rbp + 0x238], 0x6b004c
lea eax, [rbx + 0x79]
mov word [rbp + 0x23c], ax
lea eax, [rbx + 0x72]
mov word [rbp + 0x23e], ax
mov dword [rbp + 0x240], 0x6b0056
mov dword [rbp + 0x244], 0x4b0042
mov word [rbp + 0x248], bx
lea rax, [rsp + 0x68]
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x238]
lea rcx, [rsp + 0x68]
call fcn.1400043f4
mov rbx, rax
lea rdx, [rbp + 0x288]
lea rcx, [rbp + 0x18]
call fcn.1400043f4
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x138]
call fcn.1400021cc
nop
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.140004340
nop
cmp qword [rbp + 0x150], 0x10
jb 0x140002f69
mov rcx, qword [rbp + 0x138]
call fcn.140005798
xor ebx, ebx
mov dword [rsp + 0x44], ebx
mov qword [rbp + 0x150], 0xf
mov qword [rbp + 0x148], rbx
mov byte [rbp + 0x138], bl
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x138]
call fcn.140004774
lea rdx, [rbp + 0x138]
mov rcx, rsi
call fcn.140002410
mov qword [rsp + 0x48], rax
lea r9, [rsp + 0x44]
mov r8d, 0x258
lea rdx, [rbp + 0x330]
mov rcx, r13
call rax
test eax, eax
je 0x140003035
mov rdi, qword [rsp + 0x48]
call fcn.140002148
mov r11d, dword [rsp + 0x44]
test r11d, r11d
je 0x14000302b
mov r14d, ebx
lea rbx, [rbp + 0x330]
mov al, byte [rbx]
mov byte [rsp + 0x40], al
lea rdx, [rsp + 0x40]
mov rcx, r12
call fcn.140004680
inc r14d
inc rbx
cmp r14d, dword [rsp + 0x44]
jb 0x140002fee
xor ebx, ebx
lea r9, [rsp + 0x44]
mov r8d, 0x258
lea rdx, [rbp + 0x330]
mov rcx, r13
call rdi
test eax, eax
jne 0x140002fd5
mov rdi, qword [rsp + 0x60]
mov r14, qword [rsp + 0x50]
mov eax, 0x4a
mov word [rbp + 0x2d0], ax
mov dword [rbp + 0x2d2], 0x76006b
lea ecx, [rax + 0xa]
mov word [rbp + 0x2d6], cx
lea ecx, [rax + 0x1f]
mov word [rbp + 0x2d8], cx
mov dword [rbp + 0x2da], 0x670064
mov dword [rbp + 0x2de], 0x790049
lea ecx, [rax + 0x27]
mov dword [rbp + 0x2e2], 0x610071
mov word [rbp + 0x2e6], cx
mov dword [rbp + 0x2e8], 0x6b0057
lea eax, [rcx - 0xc]
mov word [rbp + 0x2ec], ax
mov dword [rbp + 0x2ee], 0x79006a
mov dword [rbp + 0x2f2], 0x67
lea eax, [rcx - 3]
mov word [rbp + 0x208], ax
mov dword [rbp + 0x20a], 0x490043
lea eax, [rcx - 4]
mov word [rbp + 0x20e], ax
lea eax, [rcx - 1]
mov word [rbp + 0x210], ax
lea eax, [rcx - 0x26]
mov word [rbp + 0x212], ax
lea eax, [rcx - 0x1f]
mov word [rbp + 0x214], ax
mov dword [rbp + 0x216], 0x47
lea rax, [rsp + 0x68]
mov qword [rsp + 0x50], rax
lea rdx, [rbp + 0x208]
lea rcx, [rsp + 0x68]
call fcn.1400043f4
mov rbx, rax
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp + 0x18]
call fcn.1400043f4
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x138]
call fcn.1400021cc
nop
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.140004340
nop
cmp qword [rbp + 0x150], 0x10
jb 0x14000315d
mov rcx, qword [rbp + 0x138]
call fcn.140005798
mov qword [rbp + 0x150], 0xf
xor ebx, ebx
mov qword [rbp + 0x148], rbx
mov byte [rbp + 0x138], bl
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x138]
call fcn.140004774
lea rdx, [rbp + 0x138]
mov rcx, rsi
call fcn.140002410
mov rbx, rax
call fcn.140002148
mov rcx, r13
call rbx
mov rcx, r15
call rbx
mov rcx, r14
call rbx
nop
cmp qword [rbp + 0x178], 0x10
jb 0x1400031ce
mov rcx, qword [rbp + 0x160]
call fcn.140005798
xor ebx, ebx
cmp qword [rdi + 0x18], 8
jb 0x1400031df
mov rcx, qword [rdi]
call fcn.140005798
mov qword [rdi + 0x18], 7
mov qword [rdi + 0x10], rbx
mov word [rdi], bx
mov rax, r12
mov rcx, qword [rbp + 0x590]
xor rcx, rsp
call fcn.14014bfe0
mov rbx, qword [rsp + 0x6f8]
add rsp, 0x6a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret