Function at 0x14003e470
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
push r12
push r14
push r15
sub rsp, 0x140
mov rax, qword [0x140090040]
xor rax, rsp
mov qword [rsp + 0x130], rax
xor r15d, r15d
mov dword [r11 - 0xa8], r15d
mov word [rsp + 0xa9], 0x74
movdqa xmm0, xmmword [0x140046f10]
movdqu xmmword [rsp + 0x90], xmm0
mov dword [rsp + 0xa0], 0x7475615c
mov dword [rsp + 0xa4], 0x75617668
mov byte [rsp + 0xa8], 0x6c
mov byte [r11 - 0xad], r15b
lea r9, [rsp + 0x30]
lea r8, [r11 - 0xae]
lea rdx, [r11 - 0xc8]
lea rcx, [r11 - 0x78]
call fcn.14003b800
nop
lea rcx, [rsp + 0xb8]
call fcn.14003fe30
mov rbx, rax
mov dword [rsp + 0x3e], 0x5c7372
mov dword [rsp + 0x38], 0x555c3a43
mov word [rsp + 0x3c], 0x6573
mov byte [rsp + 0x42], r15b
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x41]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x70]
call fcn.14003b800
nop
mov r9, rbx
lea r8, [rsp + 0x70]
movzx edx, byte [rsp + 0x30]
lea rcx, [rsp + 0x48]
call fcn.14003d2d0
nop
lea r9, [rsp + 0xe0]
lea r8, [rsp + 0x48]
movzx edx, byte [rsp + 0x30]
lea rcx, [rsp + 0x110]
call fcn.14003d2d0
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x14003e5c4
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e5be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003e5be
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400433a0
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x14003e608
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e602
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003e602
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400433a0
nop
mov rdx, qword [rsp + 0xd0]
cmp rdx, 0xf
jbe 0x14003e64e
inc rdx
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e649
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003e649
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400433a0
movdqa xmm0, xmmword [0x140086a50]
movdqu xmmword [rsp + 0xc8], xmm0
mov byte [rsp + 0xb8], 0
mov rdx, qword [rsp + 0xf8]
cmp rdx, 0xf
jbe 0x14003e6ae
inc rdx
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e6a8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003e6a8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400433a0
nop
xor r8d, r8d
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x48]
call fcn.14003c260
nop
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 7
cmova rcx, qword [rsp + 0x48]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rsp + 0xe0]
call fcn.1400427d8
mov r8d, eax
test eax, eax
jne 0x14003e748
mov edx, dword [rsp + 0xf0]
test dl, 1
mov ecx, 0x1ff
mov eax, 0x16d
cmovne ecx, eax
mov dword [rsp + 0x74], ecx
mov ecx, edx
shr ecx, 0xa
test cl, 1
je 0x14003e73d
mov eax, dword [rsp + 0xf4]
cmp eax, 0xa000000c
jne 0x14003e72f
mov edx, 4
jmp 0x14003e76c
cmp eax, 0xa0000003
jne 0x14003e73d
mov edx, 0xa
jmp 0x14003e76c
shr edx, 4
and edx, 1
or edx, 2
jmp 0x14003e76c
mov dword [rsp + 0x74], 0xffff
sub eax, 2
je 0x14003e767
sub eax, 1
je 0x14003e767
sub eax, 0x32
je 0x14003e767
cmp eax, 0x46
mov edx, r15d
jne 0x14003e76c
mov edx, 1
mov dword [rsp + 0x70], r8d
lea r12, [0x140090010]
mov qword [rsp + 0x78], r12
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
test edx, edx
je 0x14003e81b
cmp edx, 1
sete bl
lea rcx, [rsp + 0x48]
call fcn.14003e310
test bl, bl
je 0x14003e8c1
lea rax, [rsp + 0x48]
mov qword [rsp + 0x70], rax
lea rsi, [rsp + 0x110]
cmp qword [rsp + 0x128], 0xf
cmova rsi, qword [rsp + 0x110]
mov rdi, qword [rsp + 0x120]
call fcn.140042624
mov r14d, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], 7
mov word [rsp + 0x48], r15w
mov dword [rsp + 0xb0], 0x13f
test rdi, rdi
je 0x14003e892
cmp rdi, 0x7fffffff
ja 0x14003e935
jmp 0x14003e82b
mov bl, 1
test r8d, r8d
jne 0x14003e940
jmp 0x14003e796
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov r8d, edi
mov rdx, rsi
mov ecx, r14d
call fcn.14004264c
mov rbx, rax
shr rax, 0x20
test eax, eax
jne 0x14003e957
xor r8d, r8d
movsxd rdx, ebx
lea rcx, [rsp + 0x48]
call fcn.140040850
lea r9, [rsp + 0x48]
cmp qword [rsp + 0x60], 7
cmova r9, qword [rsp + 0x48]
mov dword [rsp + 0x20], ebx
mov r8d, edi
mov rdx, rsi
mov ecx, r14d
call fcn.14004264c
mov rcx, rax
shr rax, 0x20
test eax, eax
jne 0x14003e962
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], r12
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x48]
call fcn.14003e990
cmp dword [rsp + 0x70], 0
jne 0x14003e96c
lea rcx, [rsp + 0x48]
call fcn.14003e310
nop
mov rdx, qword [rsp + 0x128]
cmp rdx, 0xf
jbe 0x14003e907
inc rdx
mov rcx, qword [rsp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e902
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003e902
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400433a0
mov rcx, qword [rsp + 0x130]
xor rcx, rsp
call fcn.140042d90
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop r12
ret
mov ecx, 0x16
call fcn.14003e290
nop
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x70]
lea rcx, [0x140046aac]
call fcn.14003e1c0
nop
shr rbx, 0x20
mov ecx, ebx
call fcn.14003e2d0
shr rcx, 0x20
call fcn.14003e2d0
nop
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x70]
lea rcx, str.create_directories
call fcn.14003e1c0
int3