Function at 0x1400a2dc0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xa0
mov rax, qword [0x1400cc020]
xor rax, rsp
mov qword [rbp + 0x47], rax
mov r14, rcx
mov dword [rbp + 0x2e], 0x496e6f69
xor ebx, ebx
mov dword [rbp + 0x2a], 0x73736553
mov dword [rcx], ebx
mov edi, 0xffffffff
lea rcx, [rbp - 1]
mov dword [rbp + 0x21], 0x6f436576
mov dword [rbp + 0x17], 0x47535457
mov dword [rbp + 0x26], 0x656c6f73
mov dword [rbp + 0x1d], 0x69746341
mov word [rbp + 0x32], 0x64
mov word [rbp + 0x1b], 0x7465
mov byte [rbp + 0x25], 0x6e
mov word [rbp], 0x7265
mov dword [rbp + 8], 0x6c6c64
mov dword [rbp + 3], 0x32336c65
mov byte [rbp + 2], 0x6e
mov byte [rbp - 1], 0x4b
mov byte [rbp + 7], 0x2e
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [rbp + 0x17]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400a2e70
call rax
mov edi, eax
mov ecx, 0x14
lea rdx, [rbp - 9]
mov eax, 0xa
cmp edi, 0xffffffff
cmovne eax, ecx
mov ecx, edi
mov dword [r14], eax
call fcn.140018990
test eax, eax
je 0x1400a2eaa
mov rcx, qword [rbp - 9]
test rcx, rcx
je 0x1400a2eaa
inc dword [r14]
call fcn.1400988f0
mov eax, edi
jmp 0x1400a3001
lea rcx, [rbp - 1]
mov dword [rbp + 0x20], 0x6c6c64
mov word [rbp + 0x1d], 0x3233
mov byte [rbp + 0x1f], 0x2e
mov dword [rbp + 0x18], 0x70617374
mov byte [rbp + 0x17], 0x57
mov byte [rbp + 0x1c], 0x69
mov dword [rbp + 0x3c], 0x61726269
mov dword [rbp + 0x38], 0x4c64616f
mov word [rbp + 0x41], 0x4179
mov byte [rbp + 0x37], 0x4c
mov byte [rbp + 0x43], bl
mov byte [rbp + 0x40], 0x72
mov word [rbp], 0x7265
mov dword [rbp + 8], 0x6c6c64
mov dword [rbp + 3], 0x32336c65
mov byte [rbp + 2], 0x6e
mov byte [rbp - 1], 0x4b
mov byte [rbp + 7], 0x2e
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [rbp + 0x37]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400a2f9a
lea rcx, [rbp + 0x17]
call rax
mov rdi, rax
test rax, rax
je 0x1400a2f9a
lea rdx, [rbp - 1]
mov dword [rbp + 0x10], 0x41736e6f
mov rcx, rax
mov dword [rbp + 0xa], 0x73655365
mov dword [rbp + 2], 0x6d756e45
mov word [rbp - 1], 0x5457
mov word [rbp + 7], 0x6172
mov word [rbp + 0xe], 0x6973
mov byte [rbp + 0x14], bl
mov byte [rbp + 1], 0x53
mov byte [rbp + 9], 0x74
mov byte [rbp + 6], 0x65
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400a2f92
xor edx, edx
lea rcx, [rbp - 0x19]
mov qword [rsp + 0x20], rcx
lea r9, [rbp - 0x11]
xor ecx, ecx
lea r8d, [rdx + 1]
call rax
mov rcx, rdi
call fcn.140098790
mov ecx, dword [rbp - 0x19]
test ecx, ecx
je 0x1400a2ff3
mov rdi, rbx
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [rbp - 0x11]
movups xmm0, xmmword [rdi + rax]
movsd xmm1, qword [rdi + rax + 0x10]
movsd qword [rbp + 0x27], xmm1
cmp dword [rbp + 0x27], 0
movups xmmword [rbp + 0x17], xmm0
jne 0x1400a2fe9
mov ecx, dword [rbp + 0x17]
lea rdx, [rbp - 1]
call fcn.140018990
test eax, eax
je 0x1400a2fe6
mov rcx, qword [rbp - 1]
test rcx, rcx
jne 0x1400a3026
mov ecx, dword [rbp - 0x19]
inc ebx
add rdi, 0x18
cmp ebx, ecx
jb 0x1400a2fb0
mov rcx, qword [rbp - 0x11]
call fcn.1400a39c0
mov eax, 0xffffffff
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.140060fb0
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
add dword [r14], 2
call fcn.1400988f0
mov rcx, qword [rbp - 0x11]
call fcn.1400a39c0
mov eax, dword [rbp + 0x17]
jmp 0x1400a3001