Function at 0x140053d90
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0x100
mov rax, qword [0x140436b28]
xor rax, rsp
mov qword [rbp + 0xf], rax
xor r14d, r14d
mov qword [rbp - 0x71], rcx
cmp dword [r9 + 0xc], 2
mov ebx, r14d
mov rcx, qword [rbp + 0x7f]
mov r13, r8
mov qword [rsp + 0x30], rbx
mov rax, rdx
mov qword [rbp - 0x69], rcx
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x60], r14
mov qword [rbp - 0x79], r14
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x38], r14
mov dword [rbp - 0x61], 0x4f004f
mov dword [rbp - 0x5d], 0x42
mov dword [rbp - 0x59], 0x4f004f
mov dword [rbp - 0x55], 0x54
mov dword [rbp - 0x41], 0x410056
mov dword [rbp - 0x3d], 0x49004c
mov dword [rbp - 0x39], 0x490044
mov dword [rbp - 0x35], 0x590054
mov word [rbp - 0x31], r14w
mov dword [rbp - 0x51], 0x4f004e
mov dword [rbp - 0x4d], 0x45004e
mov word [rbp - 0x49], r14w
mov dword [rbp - 0x29], 0x73006d
mov dword [rbp - 0x25], 0x740066
mov dword [rbp - 0x21], 0x73003a
mov dword [rbp - 0x1d], 0x2f006c
mov dword [rbp - 0x19], 0x690074
mov dword [rbp - 0x15], 0x65006d
mov dword [rbp - 0x11], 0x2f0072
mov dword [rbp - 0xd], 0x730025
mov dword [rbp - 9], 0x25002f
mov dword [rbp - 5], 0x2f0073
mov dword [rbp - 1], 0x730025
mov dword [rbp + 3], 0x25002f
mov dword [rbp + 7], 0x73
je 0x140053ed4
cmp dword [r9 + 0xc], 6
je 0x140053eca
cmp dword [r9 + 0xc], 9
je 0x140053ec0
mov edi, 0x80070057
mov ecx, edi
call fcn.140079c40
jmp 0x14005404d
mov rsi, qword [r9 + 0x48]
lea r15, [rbp - 0x41]
jmp 0x140053edc
lea r15, [rbp - 0x61]
lea rsi, [rbp - 0x51]
jmp 0x140053edc
mov rsi, qword [r9 + 0x40]
lea r15, [rbp - 0x59]
mov edx, 0x3b
lea r8, [rsp + 0x40]
mov rcx, rax
call fcn.140069684
mov edi, eax
test eax, eax
jns 0x140053ef8
mov ecx, eax
jmp 0x140053eb6
test rsi, rsi
je 0x140053ffb
cmp dword [rsp + 0x44], ebx
jle 0x140053ffb
test rbx, rbx
je 0x140053f2a
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
and qword [rsp + 0x30], 0
mov rcx, qword [rsp + 0x48]
lea rdx, [rbp - 0x29]
mov r9, qword [rbp - 0x71]
mov r8, r15
and dword [rsp + 0x3c], 0
and dword [rsp + 0x38], 0
movsxd rax, r14d
mov qword [rsp + 0x28], rsi
mov rax, qword [rcx + rax*8]
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x20], rax
call fcn.140069888
mov edi, eax
test eax, eax
js 0x14005410e
test r13, r13
je 0x140053fb5
mov r8d, 0x7fffffff
lea rdx, [rsp + 0x50]
mov rcx, r13
call fcn.140079840
mov edi, eax
test eax, eax
js 0x140053f9f
mov r8d, dword [rsp + 0x50]
lea rcx, [rsp + 0x30]
mov rdx, r13
call fcn.14006f61c
mov edi, eax
test eax, eax
jns 0x140053fa6
mov ecx, eax
call fcn.140079c40
mov ecx, edi
call fcn.140079c60
test edi, edi
js 0x14005410a
mov rbx, qword [rsp + 0x30]
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.140079b08
mov edi, eax
test eax, eax
js 0x140053ef4
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x60]
call fcn.14007945c
mov edi, eax
test eax, eax
js 0x140053ef4
inc r14d
cmp r14d, dword [rsp + 0x44]
jl 0x140053f0b
xor r14d, r14d
and qword [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x38], r14
call fcn.140077fbc
mov rdx, qword [rbp - 0x69]
lea rcx, [rsp + 0x30]
call fcn.140077fbc
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.1400795ac
mov rsi, qword [rsp + 0x38]
test rsi, rsi
je 0x14005404d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, edi
call fcn.140079c60
test rbx, rbx
je 0x14005406d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x58]
test rax, rax
je 0x140054096
lea rbx, [rax - 4]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor ecx, ecx
call fcn.140079c60
xor edx, edx
lea rcx, [rsp + 0x60]
call fcn.1400795ac
mov rbx, qword [rbp - 0x79]
test rbx, rbx
je 0x1400540bf
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov ecx, edi
jmp 0x140054110
mov ecx, eax
call fcn.140079c40
mov rbx, qword [rsp + 0x30]
jmp 0x14005404d