Function at 0x1400ede50
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf0]
sub rsp, 0x1f0
mov rax, qword [0x1402bf200]
xor rax, rsp
mov qword [rbp + 0xe8], rax
mov rdi, qword [rbp + 0x130]
mov r13, qword [rbp + 0x138]
xor ebx, ebx
mov dword [rsp + 0x30], 0x44333635
mov dword [rsp + 0x34], 0x33363738
mov dword [rsp + 0x40], 0x6e657665
mov dword [rsp + 0x44], 0x5f725f74
mov dword [rsp + 0x48], 0x637072
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x4c], rax
mov dword [rsp + 0x54], 0x22
lea rcx, [rsp + 0x58]
call fcn.140026d50
lea r9, [rsp + 0x40]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140025780
nop
lea rcx, [rsp + 0x70]
call fcn.1400fc110
lea rdx, str._this
mov rcx, rax
call fcn.14003e030
mov byte [rsp + 0x20], 0x22
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400f9080
lea rdx, [rdi + 0xc0]
mov rcx, rax
call fcn.14002a020
mov byte [rsp + 0x20], 0x22
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400f9080
mov byte [rsp + 0x20], 0x2c
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400f9080
mov ecx, dword [r13 + 0x20]
mov dword [rsp + 0x30], ecx
lea rdx, [rsp + 0x30]
mov rcx, rax
call fcn.1400093e0
lea rdx, [0x14023cf20]
mov rcx, rax
call fcn.14003e030
nop
lea rcx, [rsp + 0x70]
call fcn.140028440
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd0], xmm1
mov qword [rbp + 0xe0], rbx
lea r12, [rdi + 0x258]
mov rcx, r12
call fcn.1400db5e0
mov rdi, qword [rdi + 0x2b0]
mov rdi, qword [rdi]
cmp byte [rdi + 0x19], bl
jne 0x1400ee139
mov rbx, qword [rdi + 0x28]
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
jne 0x1400ee0d9
nop word [rax + rax]
mov r15, qword [rbx + 0x58]
mov rsi, qword [rbx + 0x50]
cmp rsi, r15
je 0x1400ee03b
nop dword [rax]
mov rcx, qword [rsi]
add rcx, 0x78
mov rdx, r13
call fcn.1400e5820
test al, al
jne 0x1400edffc
add rsi, 0x10
cmp rsi, r15
jne 0x1400edfe0
cmp rsi, r15
je 0x1400ee03b
lea r14, [rsi + 0x10]
cmp r14, r15
je 0x1400ee03b
nop word [rax + rax]
mov rcx, qword [r14]
add rcx, 0x78
mov rdx, r13
call fcn.1400e5820
test al, al
jne 0x1400ee032
mov rdx, r14
mov rcx, rsi
call fcn.140050e50
add rsi, 0x10
add r14, 0x10
cmp r14, r15
jne 0x1400ee010
mov rcx, qword [rbx + 0x58]
cmp rsi, rcx
je 0x1400ee075
mov r8, rsi
mov rdx, rcx
call fcn.1400e3e30
mov r15, rax
mov r14, qword [rbx + 0x58]
mov rsi, rax
cmp rax, r14
je 0x1400ee071
nop
mov rcx, rsi
call fcn.1400060d0
add rsi, 0x10
cmp rsi, r14
jne 0x1400ee060
mov qword [rbx + 0x58], r15
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x1400ee0a8
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x1400ee0a3
nop dword [rax]
cmp rbx, qword [rax + 0x10]
jne 0x1400ee0a3
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x1400ee090
mov rbx, rax
jmp 0x1400ee0cf
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x1400ee0cf
nop dword [rax]
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x1400ee0c0
cmp byte [rbx + 0x19], 0
je 0x1400edfd0
mov rax, qword [rdi + 0x10]
cmp byte [rax + 0x19], 0
je 0x1400ee108
mov rax, qword [rdi + 8]
cmp byte [rax + 0x19], 0
jne 0x1400ee103
nop dword [rax]
cmp rdi, qword [rax + 0x10]
jne 0x1400ee103
mov rdi, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x1400ee0f0
mov rdi, rax
jmp 0x1400ee12f
mov rdi, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x1400ee12f
nop dword [rax]
nop dword [rax + rax]
mov rdi, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x1400ee120
cmp byte [rdi + 0x19], 0
je 0x1400edfb5
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
dec dword [r12 + 0x44]
cmp dword [r12 + 0x44], 0
jg 0x1400ee174
mov dword [r12 + 0x40], 0xffffffff
mov rcx, qword [r12 + 0x50]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov rcx, qword [r12 + 0x48]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rbp + 0xd0]
call fcn.1400f7e00
mov rcx, qword [rbp + 0xe8]
xor rcx, rsp
call fcn.14019acb0
mov rbx, qword [rsp + 0x240]
add rsp, 0x1f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret