Function at 0x140004780
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x220]
sub rsp, 0x320
mov rax, qword [0x1400cc020]
xor rax, rsp
mov qword [rbp + 0x210], rax
xor r14d, r14d
mov dword [rsp + 0x54], r14d
mov dword [rsp + 0x50], r14d
mov dword [rsp + 0x40], r14d
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x48], r14
xor eax, eax
movups xmmword [rsp + 0x78], xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x60], r14
call fcn.140013de0
mov rdi, rax
test rax, rax
je 0x140004b86
lea rdx, [0x1400ccb60]
cmp qword [0x1400ccb78], 0x10
cmovae rdx, qword [0x1400ccb60]
mov rcx, rax
call fcn.1400a4220
mov rsi, rax
test rax, rax
jne 0x14000483d
mov rcx, rdi
call fcn.140098df0
jmp 0x140004b86
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
call fcn.140018f70
test eax, eax
jne 0x140004b86
call fcn.140019040
cmp eax, 0x7a
jne 0x140004b66
mov ebx, dword [rsp + 0x40]
call fcn.140013ba0
mov rcx, rax
mov r8d, ebx
call fcn.140007da0
mov rbx, rax
test rax, rax
jne 0x14000489c
mov rcx, rdi
call fcn.140098df0
mov rcx, rsi
call fcn.140098df0
jmp 0x140004b86
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x40]
mov r8, rbx
mov rcx, rsi
call fcn.140018f70
test eax, eax
jne 0x1400048d7
mov rcx, rdi
call fcn.140098df0
mov rcx, rsi
call fcn.140098df0
call fcn.140013ba0
mov r8, rbx
jmp 0x140004b7e
mov r12d, r14d
call fcn.1400a38f0
mov r15, rax
test rax, rax
je 0x1400048ba
mov word [rbp - 0x21], 0x6972
mov dword [rbp - 0x1b], 0x6c636144
mov dword [rbp - 0x26], 0x73654479
mov word [rbp - 0x1e], 0x6f74
mov dword [rbp - 0x2d], 0x75636553
mov byte [rbp - 0x22], 0x63
mov byte [rbp - 0x17], r12b
mov word [rbp - 0x29], 0x6972
mov byte [rbp - 0x1f], 0x70
mov word [rbp - 0x30], 0x6547
mov byte [rbp - 0x1c], 0x72
mov byte [rbp - 0x27], 0x74
mov byte [rbp - 0x2e], 0x74
lea rdx, [rbp - 0x30]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140004955
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x54]
mov rcx, rbx
call rax
mov r12d, eax
mov rcx, r15
call fcn.140098790
test r12d, r12d
je 0x1400048ba
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp - 0x10]
call fcn.140063480
mov dword [rsp + 0x5c], 0x104
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x100]
call fcn.140063480
mov dword [rsp + 0x58], 0x104
lea rdx, [0x1400bad00]
lea rcx, [rbp - 0x30]
call fcn.14009c7c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x1400049b6
mov rax, qword [rax]
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.140018dc0
test eax, eax
sete r15b
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140004a04
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400049ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004bb8
call fcn.14006126c
test r15b, r15b
jne 0x1400048ba
mov r12, qword [rsp + 0x60]
call fcn.1400a38f0
mov r15, rax
test rax, rax
je 0x1400048ba
mov word [rbp - 0x21], 0x4164
mov byte [rbp - 0x1f], 0
mov dword [rbp - 0x26], 0x53746e75
mov dword [rbp - 0x2a], 0x6f636341
mov dword [rbp - 0x30], 0x6b6f6f4c
mov word [rbp - 0x2c], 0x7075
mov byte [rbp - 0x22], 0x69
lea rdx, [rbp - 0x30]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140004a91
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp + 0x100]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x5c]
lea r8, [rbp - 0x10]
mov rdx, r12
xor ecx, ecx
call rax
mov r14d, eax
mov rcx, r15
call fcn.140098790
test r14d, r14d
je 0x1400048ba
mov r9d, 3
lea r8d, [r9 + 0x1f]
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x60]
call fcn.1400a3fc0
lea r9, [rsp + 0x48]
mov r8, qword [rsp + 0x68]
lea rdx, [rbp - 0x60]
call fcn.140007e50
test eax, eax
jne 0x1400048ba
lea rcx, [rsp + 0x78]
call fcn.140013c40
test eax, eax
jne 0x140004b06
mov rcx, rdi
call fcn.140098df0
mov rcx, rsi
call fcn.140098df0
mov rcx, qword [rsp + 0x48]
call fcn.140013b00
call fcn.140013ba0
mov r8, rbx
jmp 0x140004b7e
mov r8, qword [rsp + 0x48]
lea rcx, [rsp + 0x78]
call fcn.140013d10
test eax, eax
je 0x140004ae2
lea r8, [rsp + 0x78]
mov rcx, rsi
call fcn.140098ea0
test eax, eax
je 0x140004ae2
mov rcx, rsi
call fcn.140098df0
mov rcx, rdi
test eax, eax
jne 0x140004b5f
call fcn.140098df0
mov rcx, qword [rsp + 0x48]
call fcn.140013b00
call fcn.140013ba0
mov rcx, rax
mov r8, rbx
call fcn.140098d40
mov eax, 1
jmp 0x140004b88
call fcn.140098df0
jmp 0x140004b3e
mov rcx, rdi
call fcn.140098df0
mov rcx, rsi
call fcn.140098df0
call fcn.140013ba0
xor r8d, r8d
mov rcx, rax
call fcn.140098d40
xor eax, eax
mov rcx, qword [rbp + 0x210]
xor rcx, rsp
call fcn.140060fb0
lea r11, [rsp + 0x320]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.140067948
int3