Function at 0x14000a250
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x10], rdx
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x110]
sub rsp, 0x210
mov rbx, rdx
mov rsi, rcx
rdtsc
shl rdx, 0x20
or rax, rdx
mov rcx, rax
call fcn.14002c1ac
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsi + 0x38], xmm0
movups xmmword [rsi + 0x48], xmm0
movups xmmword [rsi + 0x58], xmm0
movups xmmword [rsi + 0x68], xmm0
movups xmmword [rsi + 0x78], xmm0
movups xmmword [rsi + 0x88], xmm0
mov dword [rsi + 0x98], eax
call fcn.14002c180
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 2
sub r8d, ecx
add r8d, 0xa
movsxd r14, r8d
xor r15d, r15d
test r8d, r8d
jle 0x14000a32a
mov edi, r15d
movabs r12, 0x4ec4ec4ec4ec4ec5
lea r13, str.abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
nop
call fcn.14002c180
movsxd rcx, eax
mov rax, r12
mul rcx
shr rdx, 4
imul rax, rdx, 0x34
sub rcx, rax
movzx eax, byte [rcx + r13]
mov byte [rsi + rdi + 0x38], al
inc rdi
cmp rdi, r14
jl 0x14000a300
lea rdx, [rbp - 0x28]
mov rcx, rsi
call fcn.14000e4c0
nop
mov r8d, 4
lea rdx, str..sys
mov rcx, rax
call fcn.140012f60
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x14000a3bc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a3b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000aae9
call fcn.140021138
mov qword [rbp - 0x18], r15
mov qword [rbp - 0x10], 7
mov word [rbp - 0x28], r15w
cmp qword [rsp + 0x50], 0
jne 0x14000a49d
lea rcx, [0x14005dad8]
call fcn.1403db833
nop
mov rdx, rax
lea rcx, [0x1400759e0]
call fcn.140010d70
mov rcx, rax
call fcn.140010fe0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x14000a440
mov rcx, qword [rsp + 0x40]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a43b
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000aadd
call fcn.140021138
mov word [rsp + 0x40], r15w
mov qword [rsp + 0x58], 7
mov qword [rsp + 0x50], r15
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x14000a493
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
mov rcx, qword [rbx]
jb 0x14000a48e
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000aae3
mov rcx, r8
call fcn.140021138
mov eax, 0xc0000001
jmp 0x14000a785
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
call fcn.14002c7a4
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rdx, qword [rsp + 0x40]
lea rcx, [rbp]
call fcn.14000f5d0
nop
mov r8d, 0x4448
lea rdx, [0x140070cd0]
lea rcx, [rbp]
call fcn.14000f6f0
mov rcx, qword [rax]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbp + 8]
test byte [rdx + rax + 0x10], 6
je 0x14000a5aa
call fcn.140010160
test rax, rax
jne 0x14000a531
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea r9, [rbp]
add rcx, r9
mov edx, 6
mov eax, 2
cmp qword [rcx + 0x48], 0
cmovne edx, eax
or edx, dword [rcx + 0x10]
xor r8d, r8d
call fcn.140009c20
nop
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx], rax
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx - 4], edx
lea rcx, [rbp + 8]
call fcn.14000f320
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx], rax
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx - 4], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0xa8], rax
lea rcx, [rbp + 0xa8]
call fcn.1400206bc
nop
lea rcx, [0x14005dae8]
jmp 0x14000a3e0
call fcn.140010160
test rax, rax
jne 0x14000a5e1
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea r9, [rbp]
add rcx, r9
mov edx, 6
mov eax, 2
cmp qword [rcx + 0x48], 0
cmovne edx, eax
or edx, dword [rcx + 0x10]
xor r8d, r8d
call fcn.140009c20
nop
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx], rax
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx - 4], edx
lea rcx, [rbp + 8]
call fcn.14000f320
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx], rax
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx - 4], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0xa8], rax
lea rcx, [rbp + 0xa8]
call fcn.1400206bc
nop
lea rdx, [rbp - 0x48]
mov rcx, rsi
call fcn.14000e3e0
nop
lea r8, [rsp + 0x40]
mov rdx, rax
mov rcx, rsi
call fcn.14000cb40
mov dword [rsi + 0x10], eax
mov rdx, qword [rbp - 0x30]
cmp rdx, 8
jb 0x14000a6ae
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a6a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000aaef
call fcn.140021138
cmp dword [rsi + 0x10], 0
jge 0x14000a7b6
lea rcx, [0x14005daf8]
call fcn.1403db833
nop
mov rdx, rax
lea rcx, [0x1400759e0]
call fcn.140010d70
mov rcx, rax
call fcn.140010fe0
mov edi, dword [rsi + 0x10]
mov rax, qword gs:[0x30]
mov dword [rax + 0x1250], edi
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x14000a730
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
cmp rdx, 0x1000
mov rax, rcx
jb 0x14000a72b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000aadd
call fcn.140021138
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r15w
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x14000a783
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x14000a77e
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000aae3
mov rcx, r8
call fcn.140021138
mov eax, edi
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 7
mov word [rbx], r15w
lea r11, [rsp + 0x210]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x2f
mov dword [rsp + 0x6e], 0x73002f
mov dword [rsp + 0x72], 0x10073
mov dword [rsp + 0x76], 0x680073
mov dword [rsp + 0x7a], 0x400043
mov dword [rsp + 0x7e], 0x4e004d
mov dword [rbp - 0x7e], 0x730043
mov dword [rbp - 0x7a], 0x41006a
mov dword [rbp - 0x76], 0x66004a
mov dword [rbp - 0x72], 0x2f0040
movzx eax, word [0x14005da8a]
xor ax, cx
mov word [rbp - 0x6e], ax
movzx eax, word [0x14005da8c]
xor ax, cx
mov word [rbp - 0x6c], ax
movzx eax, word [0x14005da8e]
xor ax, cx
mov word [rbp - 0x6a], ax
movzx eax, word [0x14005da90]
xor ax, cx
mov word [rbp - 0x68], ax
movzx eax, word [0x14005da92]
xor ax, cx
mov word [rbp - 0x66], ax
movzx eax, word [0x14005da94]
xor ax, cx
mov word [rbp - 0x64], ax
movzx eax, word [0x14005da96]
xor ax, cx
mov word [rbp - 0x62], ax
movzx eax, word [0x14005da98]
xor ax, cx
mov word [rbp - 0x60], ax
movzx eax, word [0x14005da9a]
xor ax, cx
mov word [rbp - 0x5e], ax
movzx eax, word [0x14005da9c]
xor ax, cx
mov word [rbp - 0x5c], ax
movzx eax, word [0x14005da9e]
xor ax, cx
mov word [rbp - 0x5a], ax
movzx eax, word [0x14005daa0]
xor ax, cx
mov word [rbp - 0x58], ax
movzx eax, word [0x14005daa2]
xor ax, cx
mov word [rbp - 0x56], ax
movzx eax, word [0x14005daa4]
xor ax, cx
mov word [rbp - 0x54], ax
movzx eax, word [0x14005daa6]
xor ax, cx
mov word [rbp - 0x52], ax
movzx eax, word [str.B_dvUd_c_u]
xor ax, cx
mov word [rbp - 0x50], ax
xor eax, eax
mov word [rbp - 0x4e], ax
mov rax, r15
nop dword [rax + rax]
xor word [rsp + rax*2 + 0x70], cx
inc rax
cmp rax, 0x21
jae 0x14000a905
movzx ecx, word [rsp + 0x6e]
jmp 0x14000a8f0
mov word [rbp - 0x4e], r15w
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsi + 8], rax
cmp rax, 0xffffffffffffffff
jne 0x14000a977
lea rcx, [0x14005db08]
call fcn.1403db833
nop
mov rdx, rax
lea rcx, [0x1400759e0]
call fcn.140010d70
mov rcx, rax
call fcn.140010fe0
mov rax, qword gs:[0x30]
mov edi, dword [rax + 0x1250]
mov dword [rsi + 0x10], edi
jmp 0x14000a6ee
mov rcx, rsi
call fcn.14000af00
test eax, eax
jns 0x14000a9b4
lea rcx, [0x14005db18]
call fcn.1403db833
nop
mov rdx, rax
lea rcx, [0x1400759e0]
call fcn.140010d70
mov rcx, rax
call fcn.140010fe0
mov rcx, rsi
call fcn.14000ab00
jmp 0x14000a3fe
mov cl, 0x11
mov dword [rsp + 0x60], 0x7e657f11
mov dword [rsp + 0x64], 0x7f637a62
mov dword [rsp + 0x68], 0x69743f7d
mov word [rsp + 0x6c], 0x74
mov rax, r15
nop dword [rax + rax]
xor byte [rsp + rax + 0x61], cl
inc rax
cmp rax, 0xc
jae 0x14000a9f4
movzx ecx, byte [rsp + 0x60]
jmp 0x14000a9e0
mov byte [rsp + 0x6d], 0
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], 0
lea rax, [rsp + 0x61]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000aa20
lea rdx, [rsp + 0x61]
lea rcx, [rbp - 0x48]
call fcn.140010610
nop
lea rcx, [rbp - 0x48]
call fcn.14001fc40
mov qword [rsi], rax
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x14000aa7c
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000aa77
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000aad7
call fcn.140021138
cmp qword [rsi], 0
jne 0x14000aa8e
lea rcx, [0x14005db28]
jmp 0x14000a98a
mov edi, dword [rsi + 0x10]
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x14000a730
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a72b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000aadd
jmp 0x14000a72b
call fcn.14002e15c
nop
call fcn.14002e15c
nop
call fcn.14002e15c
nop
call fcn.14002e15c
int3
call fcn.14002e15c
int3