Function at 0x140005400
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x138]
sub rsp, 0x238
mov rax, qword [0x1400f7020]
xor rax, rsp
mov qword [rbp + 0x120], rax
mov r13, r9
mov rbx, r8
mov qword [rsp + 0x58], rdx
mov r14, rcx
mov qword [rsp + 0x60], rcx
mov r15, qword [rbp + 0x1a0]
mov rdi, qword [rbp + 0x1b0]
mov qword [rsp + 0x50], rdi
xor r12d, r12d
mov dword [rsp + 0x40], r12d
mov byte [rdx], r12b
lea rcx, [rbp - 0x58]
call fcn.140005ac0
nop
lea rax, [rbp - 0x78]
mov qword [rsp + 0x48], rax
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x78]
call fcn.140018d70
nop
lea rdx, [0x1400ead90]
lea rcx, [rbp - 0x38]
call fcn.1400bd560
nop
mov r9, r15
lea r8, [rbp - 0x78]
mov rdx, rax
call fcn.1400c31e0
cmp qword [r15 + 0x10], r12
setne al
mov byte [rbx], al
mov byte [r13], r12b
cmp qword [r15 + 0x10], r12
jne 0x140005841
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x10]
call fcn.140020c60
lea rdx, [rbp + 0x10]
call fcn.1400c5360
lea rcx, [rbp + 0x10]
call fcn.140016e00
lea rdx, [0x1400eae08]
lea rcx, [rbp - 0x78]
call fcn.1400bd560
mov rsi, rax
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x80], r12
mov rdi, qword [rbp - 0x48]
lea r12, [rbp - 0x58]
cmp qword [rbp - 0x40], 0x10
cmovae r12, qword [rbp - 0x58]
cmp rdi, 0x10
jae 0x140005523
movups xmm0, xmmword [r12]
movups xmmword [rsp + 0x68], xmm0
mov ebx, 0xf
jmp 0x140005599
mov rbx, rdi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140005577
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140005a7e
mov rcx, rax
call fcn.14001e454
mov rcx, rax
test rax, rax
je 0x140005a84
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140005585
test rcx, rcx
je 0x140005583
call fcn.14001e454
jmp 0x140005585
xor eax, eax
mov qword [rsp + 0x68], rax
lea r8, [rdi + 1]
mov rdx, r12
mov rcx, rax
call fcn.1400205b0
mov qword [rbp - 0x80], rbx
mov qword [rsp + 0x78], rdi
mov dword [rsp + 0x40], 1
mov r9, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x1400055b7
mov r9, qword [rsi]
mov rsi, qword [rsi + 0x10]
mov rax, rbx
sub rax, rdi
cmp rsi, rax
ja 0x1400055f6
lea rax, [rdi + rsi]
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x68]
cmp rbx, 0x10
cmovae rax, qword [rsp + 0x68]
lea rbx, [rax + rdi]
mov r8, rsi
mov rdx, r9
mov rcx, rbx
call fcn.1400205b0
mov byte [rsi + rbx], 0
jmp 0x140005609
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rsp + 0x68]
call fcn.140018490
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x140005644
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000563f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a8a
call fcn.14001e44c
xor r12d, r12d
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], r12b
lea rdi, [rsp + 0x68]
cmp qword [rbp - 0x80], 0x10
cmovae rdi, qword [rsp + 0x68]
call fcn.1400d3170
mov rbx, rax
test rax, rax
je 0x1400056b3
mov dword [rbp - 0x10], 0x41646e
mov dword [rbp - 0x17], 0x41687461
mov word [rbp - 0x12], 0x6570
mov byte [rbp - 0x18], 0x50
mov byte [rbp - 0x13], 0x70
lea rdx, [rbp - 0x18]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400056ab
mov rdx, rdi
lea rcx, [rbp + 0x10]
call rax
mov rcx, rbx
call fcn.1400c4d80
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
lea rcx, [rbp + 0x10]
call fcn.140016eb0
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400057f5
mov dword [rsp + 0x48], r12d
mov edi, 0xffffffff
mov dword [rbp - 0x18], 0x46746547
mov word [rbp - 0xe], 0x65
mov word [rbp - 0x14], 0x6c69
mov word [rbp - 0x11], 0x6953
mov byte [rbp - 0x12], 0x65
mov byte [rbp - 0xf], 0x7a
mov word [rbp - 7], 0x7265
mov dword [rbp + 1], 0x6c6c64
mov dword [rbp - 4], 0x32336c65
mov byte [rbp - 5], 0x6e
mov byte [rbp - 8], 0x4b
mov byte [rbp], 0x2e
lea rcx, [rbp - 8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rbp - 0x18]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14000574b
xor edx, edx
mov rcx, rbx
call rax
mov edi, eax
lea ecx, [rdi + 1]
call fcn.14001e9a4
mov rsi, rax
mov ecx, edi
mov byte [rcx + rax], r12b
lea r9, [rsp + 0x48]
mov r8d, edi
mov rdx, rax
mov rcx, rbx
call fcn.1400d3c00
test eax, eax
je 0x1400057e4
lea rdx, [0x1400eab3c]
lea rcx, [rbp - 0x38]
call fcn.1400bd560
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000578e
mov rax, qword [rax]
mov r8, rsi
mov rdx, rax
mov rcx, r15
call fcn.14001a670
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x1400057d8
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400057d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a90
call fcn.14001e44c
cmp qword [r15 + 0x10], 0
setne al
mov byte [r13], al
mov rcx, rsi
call fcn.14001e44c
mov rcx, rbx
call fcn.14000a880
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x140005831
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000582c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a96
call fcn.14001e44c
mov rdi, qword [rsp + 0x50]
cmp qword [r15 + 0x10], 0
je 0x1400059c1
mov rdx, r14
lea rcx, [rbp - 0x38]
call fcn.140018d70
cmp qword [r15 + 0x18], 0x10
jb 0x140005857
mov r15, qword [r15]
lea rdx, [rbp - 0x38]
mov rcx, r15
call fcn.140014650
mov byte [rdi], al
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], 0
mov r8d, r12d
test al, al
setne r8b
lea rdx, str.itcncr__d
lea rcx, [rbp - 0x78]
call fcn.14001a670
lea rax, [rsp + 0x68]
mov qword [rbp - 0x18], rax
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x80], r12
lea r15, [rbp - 0x78]
mov r13, qword [rbp - 0x60]
cmp r13, 0x10
setae r12b
mov rdi, qword [rbp - 0x78]
cmovae r15, rdi
mov rsi, qword [rbp - 0x68]
cmp rsi, 0x10
jae 0x1400058de
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x68], xmm0
mov qword [rbp - 0x80], 0xf
jmp 0x140005958
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140005932
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140005a9c
mov rcx, rax
call fcn.14001e454
mov rcx, rax
test rax, rax
je 0x140005aa2
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140005940
test rcx, rcx
je 0x14000593e
call fcn.14001e454
jmp 0x140005940
xor eax, eax
mov qword [rsp + 0x68], rax
lea r8, [rsi + 1]
mov rdx, r15
mov rcx, rax
call fcn.1400205b0
mov qword [rbp - 0x80], rbx
mov qword [rsp + 0x78], rsi
mov rdx, r14
lea rcx, [rbp - 0x38]
call fcn.140018d70
nop
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x38]
call fcn.140015c70
mov rax, qword [rsp + 0x50]
cmp byte [rax], 0
setne al
mov rcx, qword [rsp + 0x58]
mov byte [rcx], al
test r12b, r12b
je 0x1400059c1
lea rdx, [r13 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400059b8
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005aa8
mov rcx, rdi
call fcn.14001e44c
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x1400059f8
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400059f3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a72
call fcn.14001e44c
xor ebx, ebx
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x40], 0xf
mov byte [rbp - 0x58], bl
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x140005a3f
inc rdx
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x140005a3a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140005a78
mov rcx, r8
call fcn.14001e44c
mov qword [r14 + 0x10], rbx
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
mov rcx, qword [rbp + 0x120]
xor rcx, rsp
call fcn.14001e190
add rsp, 0x238
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140024b1c
nop
call fcn.140024b1c
nop
call fcn.140019070
int3
call fcn.140024b1c
nop
call fcn.140024b1c
int3
call fcn.140024b1c
nop
call fcn.140024b1c
nop
call fcn.140019070
int3
call fcn.140024b1c
nop
call fcn.140024b1c
int3