Function at 0x140002ddf
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
sub rsp, 0x290
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x220], rcx
mov qword [rbp + 0x228], rdx
lea rax, [0x1400d0144]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rcx, rax
lea rax, [0x1400d0337]
mov rdx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x208], rax
pxor xmm0, xmm0
movaps xmmword [rbp + 0xa0], xmm0
movaps xmmword [rbp + 0xb0], xmm0
movaps xmmword [rbp + 0xc0], xmm0
movaps xmmword [rbp + 0xd0], xmm0
movq qword [rbp + 0xe0], xmm0
mov rax, qword [rbp + 0x228]
mov qword [rbp + 0xd8], rax
lea rax, [rbp + 0xf0]
lea rdx, [rbp + 0xef]
mov rcx, rax
call fcn.1400026f2
mov rax, qword [rbp + 0xf0]
mov rdx, qword [rbp + 0xf8]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rdx
mov rax, qword [rbp + 0x100]
mov rdx, qword [rbp + 0x108]
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rdx
mov rax, qword [rbp + 0x110]
mov rdx, qword [rbp + 0x118]
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], rdx
mov rax, qword [rbp + 0x120]
mov rdx, qword [rbp + 0x128]
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], rdx
movzx eax, word [rbp + 0x130]
mov word [rbp + 0x50], ax
lea rax, [rbp + 0x10]
mov rcx, rax
call fcn.140025ef0
mov rax, qword [rbp + 0x220]
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8d, 0x48
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
call rax
mov qword [rbp + 0x200], rax
mov byte [rbp + 0x60], 0x6f
mov byte [rbp + 0x61], 0x7c
mov byte [rbp + 0x62], 0x78
mov byte [rbp + 0x63], 0x71
mov byte [rbp + 0x64], 0x77
mov byte [rbp + 0x65], 0x64
mov byte [rbp + 0x66], 0x1a
mov byte [rbp + 0x67], 0x1b
mov byte [rbp + 0x68], 0x7d
mov byte [rbp + 0x69], 0x51
mov byte [rbp + 0x6a], 0x52
mov byte [rbp + 0x6b], 0x50
mov byte [rbp + 0x6c], 0x23
mov byte [rbp + 0x6d], 0x20
mov byte [rbp + 0x6e], 0x36
mov byte [rbp + 0x6f], 0x26
mov byte [rbp + 0x70], 0x20
mov byte [rbp + 0x71], 0x65
mov byte [rbp + 0x72], 0x12
mov byte [rbp + 0x73], 0x17
mov byte [rbp + 0x74], 0x17
mov byte [rbp + 0x75], 0xd
mov byte [rbp + 0x76], 3
mov byte [rbp + 0x77], 0x19
mov byte [rbp + 0x78], 9
mov byte [rbp + 0x79], 0xe
mov byte [rbp + 0x7a], 0x1a
mov byte [rbp + 0x7b], 0x6f
mov byte [rbp + 0x7c], 0x3d
mov byte [rbp + 0x7d], 0x34
mov byte [rbp + 0x7e], 0x3f
mov byte [rbp + 0x7f], 0x3c
mov byte [rbp + 0x80], 0x26
mov byte [rbp + 0x81], 0x2c
mov byte [rbp + 0x82], 0x76
mov byte [rbp + 0x83], 0x3e
mov byte [rbp + 0x84], 0x36
mov byte [rbp + 0x85], 0x79
mov byte [rbp + 0x86], 0x2e
mov byte [rbp + 0x87], 0x33
mov byte [rbp + 0x88], 0x39
mov byte [rbp + 0x89], 0x7d
mov byte [rbp + 0x8a], 0x2a
mov byte [rbp + 0x8b], 0x3e
mov byte [rbp + 0x8c], 0x12
mov byte [rbp + 0x8d], 6
mov byte [rbp + 0x8e], 7
mov byte [rbp + 0x8f], 0x17
mov byte [rbp + 0x90], 0x44
mov byte [rbp + 0x91], 0x15
mov byte [rbp + 0x92], 0x46
mov byte [rbp + 0x93], 0x5a
mov byte [rbp + 0x94], 0x55
mov byte [rbp + 0x95], 0x52
mov byte [rbp + 0x96], 0x4b
mov byte [rbp + 0x97], 0x4a
mov byte [rbp + 0x98], 0
mov byte [rbp + 0x99], 0x1b
mov byte [rbp + 0x9a], 0x3c
lea rax, [rbp + 0x60]
mov qword [rbp + 0x1f0], rax
mov rax, qword [rbp + 0x1f0]
movzx eax, byte [rax + 0x3a]
test al, al
setne al
test al, al
je 0x140003106
lea rax, [rbp + 0x60]
lea rdx, [rbp + 0x60]
mov qword [rbp + 0x1e8], rdx
mov qword [rbp + 0x1e0], rax
mov dword [rbp + 0x1dc], 0
jmp 0x1400030fc
mov eax, dword [rbp + 0x1dc]
movsxd rdx, eax
mov rax, qword [rbp + 0x1e0]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x1dc]
movsxd rdx, eax
imul rdx, rdx, 0x51eb851f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x32
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x34
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x1e8]
mov eax, dword [rbp + 0x1dc]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x1dc], 1
cmp dword [rbp + 0x1dc], 0x3a
jle 0x14000309d
nop
lea rax, [rbp + 0x60]
mov rdx, qword [rbp + 0x200]
mov r8, rdx
mov rdx, rax
lea rax, [0x1400d0349]
mov rcx, rax
call fcn.140001450
mov dword [rbp + 0x1d8], 0
jmp 0x140003146
mov eax, dword [rbp + 0x1d8]
cdqe
mov byte [rbp + rax + 0x60], 0
add dword [rbp + 0x1d8], 1
cmp dword [rbp + 0x1d8], 0x3a
jle 0x140003132
nop
mov r10, qword [0x1400fe050]
lea rcx, [rbp + 0xa0]
mov rdx, qword [rbp + 0x200]
mov rax, qword [rbp + 0x220]
mov qword [rsp + 0x20], 0
mov r9d, 0x48
mov r8, rcx
mov rcx, rax
call r10
mov dword [rbp + 0x1fc], eax
lea rax, [rbp + 0x140]
lea rdx, [rbp + 0x13f]
mov rcx, rax
call fcn.140002914
mov rax, qword [rbp + 0x140]
mov rdx, qword [rbp + 0x148]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rdx
mov rax, qword [rbp + 0x150]
mov rdx, qword [rbp + 0x158]
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rdx
mov rax, qword [rbp + 0x160]
mov rdx, qword [rbp + 0x168]
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], rdx
mov rax, qword [rbp + 0x16e]
mov rdx, qword [rbp + 0x176]
mov qword [rbp + 0x3e], rax
mov qword [rbp + 0x46], rdx
lea rax, [rbp + 0x10]
mov rcx, rax
call fcn.140025e20
mov r10, qword [rbp + 0x208]
mov rax, qword [0x1400fe0c8]
mov rdx, qword [rbp + 0x200]
mov qword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0
mov rcx, rax
call r10
lea rax, [rbp + 0x180]
lea rdx, [rbp + 0x17f]
mov rcx, rax
call fcn.140002b16
mov rax, qword [rbp + 0x180]
mov rdx, qword [rbp + 0x188]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rdx
mov rax, qword [rbp + 0x190]
mov rdx, qword [rbp + 0x198]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x1a0]
mov rdx, qword [rbp + 0x1a8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x1b0]
mov rdx, qword [rbp + 0x1b8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x1c0]
mov rdx, qword [rbp + 0x1c8]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x1cf]
mov qword [rbp - 1], rax
lea rax, [rbp - 0x50]
mov rcx, rax
call fcn.140025fc0
nop
add rsp, 0x290
pop rbp
ret