Function at 0x140009f40
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x170]
sub rsp, 0x270
mov rax, qword [0x14015a198]
xor rax, rsp
mov qword [rbp + 0x160], rax
test cl, cl
je 0x14000a137
call fcn.140036710
mov rcx, rax
test rax, rax
je 0x14000a652
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x68], rbx
mov dword [rsp + 0x4c], 1
mov dword [rsp + 0x48], 0x104
mov dword [rbp - 0x36], 0x6e616d6d
mov word [rbp - 0x3f], 0x5c6c
mov dword [rbp - 0x3c], 0x5c6e6570
mov word [rbp - 0x32], 0x64
mov dword [rbp - 0x48], 0x70747468
mov dword [rbp - 0x43], 0x6c656873
mov word [rbp - 0x38], 0x6f63
mov byte [rbp - 0x3d], 0x6f
mov byte [rbp - 0x44], 0x5c
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x104
or eax, ecx
jge 0x14000a006
mov edx, 0x104
lea rcx, [rsp + 0x68]
call fcn.1400389d0
mov rbx, qword [rsp + 0x68]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x4c]
lea r8, [0x140176fa9]
lea rdx, [rbp - 0x48]
mov rcx, 0xffffffff80000000
call fcn.1400284e0
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.1400a38cc
test eax, eax
js 0x14000a65d
cmp eax, dword [rbx - 0xc]
jg 0x14000a65d
mov dword [rbx - 0x10], eax
cdqe
mov byte [rax + rbx], 0
lea rcx, [rsp + 0x68]
call fcn.140037030
mov dword [rsp + 0x70], 0x45524946
mov byte [rsp + 0x74], 0
mov rbx, qword [rsp + 0x68]
cmp dword [rbx - 0x10], 0
jl 0x14000a09d
lea rdx, [rsp + 0x70]
mov rcx, rbx
call fcn.1400a4230
test rax, rax
je 0x14000a09d
cmp eax, ebx
js 0x14000a09d
lea rdx, [rbx - 0x18]
mov esi, 0xffffffff
jmp 0x14000a399
mov word [rbp - 0x60], 0x4843
mov dword [rbp - 0x5d], 0x454d4f
mov byte [rbp - 0x5e], 0x52
cmp dword [rbx - 0x10], 0
jl 0x14000a0f3
lea rdx, [rbp - 0x60]
mov rcx, rbx
call fcn.1400a4230
test rax, rax
je 0x14000a0f3
cmp eax, ebx
js 0x14000a0f3
lea rdx, [rbx - 0x18]
mov esi, 0xffffffff
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x14000a43c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov eax, 1
jmp 0x14000a3b1
mov word [rsp + 0x38], 0x4549
mov byte [rsp + 0x3a], 0
cmp dword [rbx - 0x10], 0
jl 0x14000a129
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.1400a4230
test rax, rax
je 0x14000a129
cmp eax, ebx
js 0x14000a129
lea rdx, [rbx - 0x18]
mov esi, 0xffffffff
jmp 0x14000a491
lea rdx, [rbx - 0x18]
mov esi, 0xffffffff
jmp 0x14000a5af
call fcn.140036710
mov rcx, rax
test rax, rax
je 0x14000a668
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x40], 1
mov dword [rsp + 0x50], 0x104
mov dword [rbp + 0x46], 0x6f684372
mov dword [rbp + 0x12], 0x6e69575c
mov word [rbp + 0xd], 0x736f
mov word [rbp + 0x2f], 0x6c72
mov word [rbp + 0x1e], 0x6c6c
mov word [rbp], 0x6f53
mov word [rbp + 0xa], 0x6369
mov dword [rbp + 0x16], 0x73776f64
mov dword [rbp + 3], 0x72617774
mov dword [rbp + 0x2a], 0x5c736e6f
mov word [rbp + 0x22], 0x7373
mov word [rbp + 0x1b], 0x6853
mov dword [rbp + 0x4a], 0x656369
mov dword [rbp + 0x31], 0x6f737341
mov dword [rbp + 0x3e], 0x70747468
mov dword [rbp + 0x35], 0x74616963
mov dword [rbp + 0x39], 0x736e6f69
mov word [rbp + 0x25], 0x6963
mov byte [rbp + 0xc], 0x72
mov word [rbp + 0xf], 0x666f
mov word [rbp + 0x28], 0x6974
mov word [rbp + 0x20], 0x415c
mov word [rbp + 7], 0x5c65
mov dword [rbp + 0x42], 0x6573555c
mov byte [rbp + 0x11], 0x74
mov byte [rbp + 0x24], 0x6f
mov byte [rbp + 0x1a], 0x5c
mov byte [rbp + 0x2e], 0x55
mov byte [rbp + 0x1d], 0x65
mov byte [rbp + 2], 0x66
mov byte [rbp + 0x3d], 0x5c
mov byte [rbp + 0x27], 0x61
mov byte [rbp + 9], 0x4d
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x50]
call fcn.140073280
mov edx, 0x104
lea rcx, [rbp + 0x50]
call fcn.140009c70
call fcn.140036710
mov rcx, rax
test rax, rax
je 0x14000a63c
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
lea rdx, [0x140177760]
lea rcx, [rsp + 0x60]
call fcn.14001c1f0
nop
lea r9, [rbp]
lea r8, [rbp + 0x50]
mov rdx, qword [rax]
lea rcx, [rsp + 0x58]
call fcn.1400363e0
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov esi, 0xffffffff
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000a2ae
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov word [rbp - 0x58], 0x7250
mov dword [rbp - 0x55], 0x646967
mov byte [rbp - 0x56], 0x6f
mov rbx, qword [rsp + 0x30]
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x104
or eax, ecx
jge 0x14000a2ec
mov edx, 0x104
lea rcx, [rsp + 0x30]
call fcn.1400389d0
mov rbx, qword [rsp + 0x30]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x40]
lea r8, [rbp - 0x58]
mov rdi, qword [rsp + 0x58]
mov rdx, rdi
mov rcx, 0xffffffff80000003
call fcn.1400284e0
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.1400a38cc
test eax, eax
js 0x14000a647
cmp eax, dword [rbx - 0xc]
jg 0x14000a647
mov dword [rbx - 0x10], eax
cdqe
mov byte [rax + rbx], 0
lea rcx, [rsp + 0x30]
call fcn.140037030
mov dword [rsp + 0x78], 0x45524946
mov byte [rsp + 0x7c], 0
mov rbx, qword [rsp + 0x30]
cmp dword [rbx - 0x10], 0
jl 0x14000a3d9
lea rdx, [rsp + 0x78]
mov rcx, rbx
call fcn.1400a4230
test rax, rax
je 0x14000a3d9
cmp eax, ebx
js 0x14000a3d9
lea rdx, [rdi - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000a390
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x14000a3ac
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov eax, 2
mov rcx, qword [rbp + 0x160]
xor rcx, rsp
call fcn.140043aa0
lea r11, [rsp + 0x270]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
mov dword [rbp - 0x4f], 0x4d4f5248
mov word [rbp - 0x4b], 0x45
mov byte [rbp - 0x50], 0x43
cmp dword [rbx - 0x10], 0
jl 0x14000a446
lea rdx, [rbp - 0x50]
mov rcx, rbx
call fcn.1400a4230
test rax, rax
je 0x14000a446
cmp eax, ebx
js 0x14000a446
lea rdx, [rdi - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000a41f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x14000a43c
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [r8 + 8]
mov eax, 1
jmp 0x14000a3b1
mov word [rsp + 0x3d], 0x45
mov byte [rsp + 0x3c], 0x49
cmp dword [rbx - 0x10], 0
jl 0x14000a4ae
lea rdx, [rsp + 0x3c]
mov rcx, rbx
call fcn.1400a4230
test rax, rax
je 0x14000a4ae
cmp eax, ebx
js 0x14000a4ae
lea rdx, [rdi - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000a488
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x14000a4a4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov eax, 3
jmp 0x14000a3b1
mov word [rbp - 0x26], 0x454d
mov word [rbp - 0x12], 0x5950
mov dword [rbp - 0xf], 0x563852
mov dword [rbp - 0x1d], 0x46304533
mov dword [rbp - 0x2b], 0x56454630
mov dword [rbp - 0x2f], 0x51585050
mov dword [rbp - 0x17], 0x45503741
mov word [rbp - 0x19], 0x5142
mov word [rbp - 0x23], 0x5950
mov word [rbp - 0x20], 0x3236
mov byte [rbp - 0x10], 0x4b
mov byte [rbp - 0x27], 0x5a
mov byte [rbp - 0x24], 0x32
mov byte [rbp - 0x30], 0x41
mov byte [rbp - 0x13], 0x41
mov byte [rbp - 0x21], 0x53
mov byte [rbp - 0x1e], 0x4e
cmp dword [rbx - 0x10], 0
jl 0x14000a526
lea rdx, [rbp - 0x30]
mov rcx, rbx
call fcn.1400a4230
test rax, rax
je 0x14000a526
cmp eax, ebx
jns 0x14000a54c
mov dword [rbp - 0x80], 0x45474445
mov byte [rbp - 0x7c], 0
cmp dword [rbx - 0x10], 0
jl 0x14000a58c
lea rdx, [rbp - 0x80]
mov rcx, rbx
call fcn.1400a4230
test rax, rax
je 0x14000a58c
cmp eax, ebx
js 0x14000a58c
lea rdx, [rdi - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000a566
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x14000a582
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov eax, 4
jmp 0x14000a3b1
lea rdx, [rdi - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000a5a6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x14000a5c2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov dword [rbp - 0x77], 0x707474
mov byte [rbp - 0x78], 0x68
lea rcx, [rbp - 0x78]
call fcn.14000a680
test eax, eax
jne 0x14000a3b1
mov dword [rbp - 0x67], 0x73707474
mov byte [rbp - 0x68], 0x68
mov byte [rbp - 0x63], al
lea rcx, [rbp - 0x68]
call fcn.14000a680
test eax, eax
jne 0x14000a3b1
mov word [rbp - 0x6d], 0x6d
mov word [rbp - 0x70], 0x682e
mov byte [rbp - 0x6e], 0x74
lea rcx, [rbp - 0x70]
call fcn.14000a680
test eax, eax
jne 0x14000a3b1
mov dword [rsp + 0x68], 0x6d74682e
mov word [rsp + 0x6c], 0x6c
lea rcx, [rsp + 0x68]
call fcn.14000a680
jmp 0x14000a3b1
mov ecx, 0x80004005
call fcn.140035ad0
nop
mov ecx, 0x80070057
call fcn.140035ad0
nop
mov ecx, 0x80004005
call fcn.140035ad0
nop
mov ecx, 0x80070057
call fcn.140035ad0
nop
mov ecx, 0x80004005
call fcn.140035ad0
int3