Function at 0x1400040c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x138]
sub rsp, 0x238
mov rax, qword [0x1400cc020]
xor rax, rsp
mov qword [rbp + 0x120], rax
mov r13, r9
mov rbx, r8
mov qword [rsp + 0x58], rdx
mov r14, rcx
mov qword [rsp + 0x60], rcx
mov r15, qword [rbp + 0x1a0]
mov r12, qword [rbp + 0x1b0]
mov qword [rsp + 0x48], r12
xor esi, esi
mov dword [rsp + 0x40], esi
mov byte [rdx], sil
lea rcx, [rbp - 0x58]
call fcn.1400a01a0
nop
lea rax, [rbp - 0x78]
mov qword [rsp + 0x50], rax
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x78]
call fcn.14001aa50
nop
lea rdx, [0x1400bace0]
lea rcx, [rbp - 0x38]
call fcn.14009c7c0
nop
mov r9, r15
lea r8, [rbp - 0x78]
mov rdx, rax
call fcn.140017880
cmp qword [r15 + 0x10], rsi
setne al
mov byte [rbx], al
mov byte [r13], sil
cmp qword [r15 + 0x10], rsi
jne 0x140004506
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x10]
call fcn.140063480
lea rdx, [rbp + 0x10]
call fcn.140098a30
lea rcx, [rbp + 0x10]
call fcn.140007f10
lea rdx, [0x1400bad58]
lea rcx, [rbp - 0x78]
call fcn.14009c7c0
mov rdi, rax
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x78], rsi
mov qword [rbp - 0x80], rsi
mov rsi, qword [rbp - 0x48]
lea r12, [rbp - 0x58]
cmp qword [rbp - 0x40], 0x10
cmovae r12, qword [rbp - 0x58]
cmp rsi, 0x10
jae 0x1400041ea
mov r8d, 0x10
mov rdx, r12
lea rcx, [rsp + 0x68]
call fcn.140062140
mov ebx, 0xf
jmp 0x140004260
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14000423e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004747
mov rcx, rax
call fcn.140061274
mov rcx, rax
test rax, rax
je 0x14000474d
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000424c
test rcx, rcx
je 0x14000424a
call fcn.140061274
jmp 0x14000424c
xor eax, eax
mov qword [rsp + 0x68], rax
lea r8, [rsi + 1]
mov rdx, r12
mov rcx, rax
call fcn.140062140
mov qword [rbp - 0x80], rbx
mov qword [rsp + 0x78], rsi
mov dword [rsp + 0x40], 1
mov r9, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x14000427e
mov r9, qword [rdi]
mov rdi, qword [rdi + 0x10]
mov rax, rbx
sub rax, rsi
cmp rdi, rax
ja 0x1400042bd
lea rax, [rdi + rsi]
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x68]
cmp rbx, 0x10
cmovae rax, qword [rsp + 0x68]
lea rbx, [rax + rsi]
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call fcn.140062140
mov byte [rdi + rbx], 0
jmp 0x1400042d0
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rsp + 0x68]
call fcn.14001a170
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x14000430b
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004306
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004753
call fcn.14006126c
xor esi, esi
mov qword [rbp - 0x68], rsi
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], sil
lea rdi, [rsp + 0x68]
cmp qword [rbp - 0x80], 0x10
cmovae rdi, qword [rsp + 0x68]
call fcn.1400a3820
mov rbx, rax
test rax, rax
je 0x140004379
mov dword [rbp - 0x10], 0x41646e
mov dword [rbp - 0x17], 0x41687461
mov word [rbp - 0x12], 0x6570
mov byte [rbp - 0x18], 0x50
mov byte [rbp - 0x13], 0x70
lea rdx, [rbp - 0x18]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140004371
mov rdx, rdi
lea rcx, [rbp + 0x10]
call rax
mov rcx, rbx
call fcn.140098790
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
lea rcx, [rbp + 0x10]
call fcn.1400190e0
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400044ba
mov dword [rsp + 0x50], esi
mov edi, 0xffffffff
mov dword [rbp - 0x18], 0x46746547
mov word [rbp - 0xe], 0x65
mov word [rbp - 0x14], 0x6c69
mov word [rbp - 0x11], 0x6953
mov byte [rbp - 0x12], 0x65
mov byte [rbp - 0xf], 0x7a
mov word [rbp - 7], 0x7265
mov dword [rbp + 1], 0x6c6c64
mov dword [rbp - 4], 0x32336c65
mov byte [rbp - 5], 0x6e
mov byte [rbp - 8], 0x4b
mov byte [rbp], 0x2e
lea rcx, [rbp - 8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rbp - 0x18]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14000440f
xor edx, edx
mov rcx, rbx
call rax
mov edi, eax
lea ecx, [rdi + 1]
call fcn.1400617c4
mov rsi, rax
mov ecx, edi
mov byte [rcx + rax], 0
lea r9, [rsp + 0x50]
mov r8d, edi
mov rdx, rax
mov rcx, rbx
call fcn.140013e80
test eax, eax
je 0x1400044a8
lea rdx, [0x1400baa8c]
lea rcx, [rbp - 0x38]
call fcn.14009c7c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140004452
mov rax, qword [rax]
mov r8, rsi
mov rdx, rax
mov rcx, r15
call fcn.14001c1d0
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x14000449c
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004497
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004759
call fcn.14006126c
cmp qword [r15 + 0x10], 0
setne al
mov byte [r13], al
mov rcx, rsi
call fcn.14006126c
mov rcx, rbx
call fcn.1400988f0
xor esi, esi
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x1400044f6
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400044f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000475f
call fcn.14006126c
mov r12, qword [rsp + 0x48]
cmp qword [r15 + 0x10], 0
je 0x14000468a
mov rdx, r14
lea rcx, [rbp - 0x38]
call fcn.14001aa50
cmp qword [r15 + 0x18], 0x10
jb 0x14000451c
mov r15, qword [r15]
lea rdx, [rbp - 0x38]
mov rcx, r15
call fcn.14000d310
mov byte [r12], al
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x68], rsi
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], 0
mov r8d, esi
test al, al
setne r8b
lea rdx, str.itcncr__d
lea rcx, [rbp - 0x78]
call fcn.14001c1d0
lea rax, [rsp + 0x68]
mov qword [rbp - 0x18], rax
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x78], rsi
mov qword [rbp - 0x80], rsi
mov rdi, qword [rbp - 0x68]
lea rsi, [rbp - 0x78]
cmp qword [rbp - 0x60], 0x10
cmovae rsi, qword [rbp - 0x78]
cmp rdi, 0x10
jae 0x1400045a5
mov r8d, 0x10
mov rdx, rsi
lea rcx, [rsp + 0x68]
call fcn.140062140
mov qword [rbp - 0x80], 0xf
jmp 0x14000461f
mov rbx, rdi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400045f9
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004765
mov rcx, rax
call fcn.140061274
mov rcx, rax
test rax, rax
je 0x14000476b
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140004607
test rcx, rcx
je 0x140004605
call fcn.140061274
jmp 0x140004607
xor eax, eax
mov qword [rsp + 0x68], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.140062140
mov qword [rbp - 0x80], rbx
mov qword [rsp + 0x78], rdi
mov rdx, r14
lea rcx, [rbp - 0x38]
call fcn.14001aa50
nop
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x38]
call fcn.140097900
cmp byte [r12], 0
setne al
mov rcx, qword [rsp + 0x58]
mov byte [rcx], al
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x14000468a
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004684
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004771
call fcn.14006126c
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x1400046c1
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400046bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000473b
call fcn.14006126c
xor ebx, ebx
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x40], 0xf
mov byte [rbp - 0x58], bl
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x140004708
inc rdx
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x140004703
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140004741
mov rcx, r8
call fcn.14006126c
mov qword [r14 + 0x10], rbx
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
mov rcx, qword [rbp + 0x120]
xor rcx, rsp
call fcn.140060fb0
add rsp, 0x238
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140067948
nop
call fcn.140067948
nop
call fcn.14001ad60
int3
call fcn.140067948
nop
call fcn.140067948
int3
call fcn.140067948
nop
call fcn.140067948
nop
call fcn.14001ad60
int3
call fcn.140067948
nop
call fcn.140067948
int3