Function at 0x140047220
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
xchg rcx, rdi
mov qword [rsp + 0x20], rcx
xchg rcx, rdi
nop
mov qword [rsp - 8], rbp
sub rsp, 8
push r12
nop
sub rsp, 8
mov qword [rsp], r13
push r14
push r8
mov qword [rsp], r15
lea rbp, [rsp - 0x30]
sub rsp, 0x130
xchg rsi, r8
mov r8, r9
xchg r8, rsi
xchg rsi, r8
mov r15, rsi
xchg r8, rsi
mov r13d, edx
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
mov r12b, 0x5c
add r12b, 0x1f
xor r12b, 0x21
sub r12b, 0x2a
xor r12b, 0x76
sub r12b, 0x31
add r12b, 0x17
add r12b, 0xa
sub r12b, 0x35
xor r14d, r14d
test r8, r8
je 0x1400473bd
movzx ebx, byte [rbp + 0x70]
nop
inc qword [rdi + 0x18]
mov rax, qword [rdi]
cmp rax, qword [rdi + 8]
je 0x1400472d3
movzx ecx, byte [rax]
inc rax
xchg r15, rax
mov qword [rdi], r15
xchg r15, rax
jmp 0x1400472fc
mov ecx, 0x744f7ec1
xor ecx, 0x20c2f21f
add ecx, 0x107d2880
xor ecx, 0x11c60b74
xor ecx, 0x78e0a2b0
add ecx, 0x208b1d08
add ecx, 0xd348c65d
mov dword [rdi + 0x10], ecx
cmp ecx, 0xffffffff
je 0x140047425
xchg rdx, r14
mov r14, qword [rsi + 0x10]
xchg rdx, r14
xchg r11, r8
mov r11, qword [rsi + 0x18]
xchg r11, r8
cmp rdx, r8
jae 0x140047378
lea rax, [rdx + 1]
mov qword [rsi + 0x10], rax
xchg rsi, r9
mov rax, r9
xchg r9, rsi
cmp r8, 0x10
jb 0x140047343
mov rax, qword [rsi]
mov byte [rax + rdx], cl
mov byte [rax + rdx + 1], 0x56
sub byte [rax + rdx + 1], 0x42
add byte [rax + rdx + 1], 0x5b
sub byte [rax + rdx + 1], 0x41
sub byte [rax + rdx + 1], 0x1d
add byte [rax + rdx + 1], 0x28
add byte [rax + rdx + 1], 0x28
sub byte [rax + rdx + 1], 0x60
sub byte [rax + rdx + 1], 1
jmp 0x1400473b1
movzx r9d, cl
movzx r8d, bl
mov edx, 0x5ca15dd6
xor edx, 0x1371c35a
add edx, 0xbfeed81
xor edx, 0x56c6761b
add edx, 0x4aa5a48c
xor edx, 0x57af9ea3
xchg rsi, rcx
mov rsi, rcx
xchg rcx, rsi
call fcn.1400352a0
inc r14
cmp r14, r15
jb 0x1400472b0
movzx eax, r12b
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x30]
xchg rsi, r13
mov r13, qword [r11 + 0x38]
xchg rsi, r13
xchg r10, rdi
mov r10, qword [r11 + 0x48]
xchg r10, rdi
mov rsp, r11
nop
mov r15, qword [rsp]
add rsp, 8
push rax
xchg qword [rsp + 8], r14
add rsp, 0x10
push rbx
push rbx
push rax
push rbx
push rcx
push rcx
push rcx
xchg qword [rsp + 0x38], r13
pop rcx
pop rcx
pop rcx
pop rbx
pop rax
pop rbx
pop rbx
add rsp, 8
push rbx
push rax
push rax
xchg qword [rsp + 0x18], r12
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rbp
ret
mov rbx, qword [rdi + 0x28]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], 0x147d90f7
add qword [rsp + 0x40], 0xd30a454
sub qword [rsp + 0x40], 0xdcd3850
xor qword [rsp + 0x40], 0xb9a4fd8
xor qword [rsp + 0x40], 0x3f820268
add qword [rsp + 0x40], 0x4b299090
xor qword [rsp + 0x40], 0x696f1eda
sub qword [rsp + 0x40], 0x1a4d5efb
mov qword [rsp + 0x48], 0x2ee47f21
xor qword [rsp + 0x48], 0x47a25e20
sub qword [rsp + 0x48], 0x39abb1d1
add qword [rsp + 0x48], 0x3efbb1b6
sub qword [rsp + 0x48], 0x44a8e89f
sub qword [rsp + 0x48], 0x29ed3838
mov eax, dword [0x140001790]
mov dword [rsp + 0x30], eax
movzx eax, word [0x140001794]
mov word [rsp + 0x34], ax
mov byte [rsp + 0x36], 0x23
xor byte [rsp + 0x36], 0x42
sub byte [rsp + 0x36], 0x22
add byte [rsp + 0x36], 0x20
sub byte [rsp + 0x36], 0x42
add byte [rsp + 0x36], 0x3d
xor byte [rsp + 0x36], 0x5d
add byte [rsp + 0x36], 0x23
sub byte [rsp + 0x36], 0x2a
movups xmmword [rsp + 0x50], xmm0
mov edx, 0x5c3de907
xor edx, 0x59c67f56
xor edx, 0x777cf35
xor edx, 0x7c85051f
xor edx, 0xfab663f
sub edx, 0x541ba44d
sub edx, 0x42f9785
xor edx, 0x179ea9e8
xor edx, 0xec857ba
lea rcx, [rsp + 0x50]
call fcn.1400535d0
mov rcx, rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], 0x5dfca770
sub qword [rsp + 0x60], 0x31c63583
add qword [rsp + 0x60], 0x52b147d8
xor qword [rsp + 0x60], 0x67fba81c
add qword [rsp + 0x60], 0x3168cbf9
add qword [rsp + 0x60], 0x114030dc
xor qword [rsp + 0x60], 0x5bc50eb9
mov qword [rsp + 0x68], 0x2e420a2c
xor qword [rsp + 0x68], 0x6aeeb2d9
add qword [rsp + 0x68], 0x1cfbfc01
xor qword [rsp + 0x68], 0xd6f6164
sub qword [rsp + 0x68], 0x3124428c
xor qword [rsp + 0x68], 0xd0d5ad4
sub qword [rsp + 0x68], 0x1c070119
xor qword [rsp + 0x68], 0x52a68a73
sub qword [rsp + 0x68], 0x480142ab
movups xmm0, xmmword [0x140001948]
xchg r9, rax
movups xmmword [r9], xmm0
xchg r9, rax
mov eax, dword [0x140001958]
mov dword [rcx + 0x10], eax
movzx eax, word [0x14000195c]
mov word [rcx + 0x14], ax
movzx eax, byte [0x14000195e]
mov byte [rcx + 0x16], al
mov byte [rcx + 0x17], 0x7d
sub byte [rcx + 0x17], 0x1c
sub byte [rcx + 0x17], 0x1e
xor byte [rcx + 0x17], 0x24
sub byte [rcx + 0x17], 0x1b
sub byte [rcx + 0x17], 0x4c
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
mov r8d, r13d
lea rdx, [rbp - 0x70]
xchg rcx, rdi
mov rdi, rcx
xchg rcx, rdi
call fcn.140055450
nop
xor esi, esi
mov qword [rsp + 0x20], rsi
xchg r9, rax
mov rax, r9
xchg r9, rax
xchg rbp, r8
mov rbp, qword [rdi + 0x18]
xchg r8, rbp
lea edx, [rsi + 0x6e]
lea rcx, [rbp - 0x50]
call fcn.140038dd0
xchg r12, rdx
mov r12, rax
xchg r12, rdx
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], 0x3f41e1ca
xor qword [rbp - 0x80], 0x58bb333a
sub qword [rbp - 0x80], 0x58de81b3
add qword [rbp - 0x80], 0x3ae188ef
sub qword [rbp - 0x80], 0x3e93a1ea
add qword [rbp - 0x80], 0x139fc8f6
sub qword [rbp - 0x80], 0x1f0a012b
mov qword [rbp - 0x78], 0x3b5e462b
add qword [rbp - 0x78], 0x2d229aba
sub qword [rbp - 0x78], 0x3725738
sub qword [rbp - 0x78], 0x32754913
xor qword [rbp - 0x78], 0x28f905d9
sub qword [rbp - 0x78], 0x1a604534
movsd xmm0, qword [0x140001960]
movsd qword [rsp + 0x70], xmm0
mov eax, dword [0x140001968]
mov dword [rsp + 0x78], eax
movzx eax, byte [0x14000196c]
mov byte [rsp + 0x7c], al
mov byte [rsp + 0x7d], sil
mov byte [rbx + 0x28], 0x3b
xor byte [rbx + 0x28], 0x26
add byte [rbx + 0x28], 0x23
xor byte [rbx + 0x28], 0x6c
xor byte [rbx + 0x28], 0x2a
add byte [rbx + 0x28], 0x26
sub byte [rbx + 0x28], 0x2b
cmp byte [rbx + 0x29], sil
jne 0x1400478d9
lea rbx, [0x140004a88]
mov qword [rbp - 0x30], rbx
lea rcx, [rbp - 0x28]
call sub.VCRUNTIME140.dll___std_exception_destroy
xchg r12, rbx
mov qword [rbp - 0x50], r12
xchg rbx, r12
lea rcx, [rbp - 0x48]
call sub.VCRUNTIME140.dll___std_exception_destroy
nop
xchg rdx, r12
mov r12, qword [rbp - 0x58]
xchg rdx, r12
cmp rdx, 0x10
jb 0x1400477ad
inc rdx
xchg r13, rcx
mov r13, qword [rbp - 0x70]
xchg rcx, r13
xchg rdx, rcx
mov rax, rdx
xchg rdx, rcx
cmp rdx, 0x1000
jb 0x1400477a8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
neg rax
add rax, 8
neg rax
cmp rax, 0x1f
jbe 0x1400477a8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fd08c
xchg rsi, r13
mov qword [rbp - 0x60], r13
xchg rsi, r13
mov qword [rbp - 0x58], 0x7a4e2df7
sub qword [rbp - 0x58], 0xeda97ac
sub qword [rbp - 0x58], 0x3fdf709d
sub qword [rbp - 0x58], 0x168547a9
xor qword [rbp - 0x58], 0x6e497b5
xor qword [rbp - 0x58], 0x44a4c1d8
xor qword [rbp - 0x58], 0x6c42c918
sub qword [rbp - 0x58], 0x3b0c4161
mov byte [rbp - 0x70], 0x19
add byte [rbp - 0x70], 0xd
sub byte [rbp - 0x70], 0x1b
add byte [rbp - 0x70], 0x61
sub byte [rbp - 0x70], 0x65
add byte [rbp - 0x70], 0x70
sub byte [rbp - 0x70], 0x3d
add byte [rbp - 0x70], 0xb
sub byte [rbp - 0x70], 0x45
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x140047875
inc rdx
mov rcx, qword [rsp + 0x50]
xchg r12, rax
mov r12, rcx
xchg r12, rax
cmp rdx, 0x1000
jb 0x14004786f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xffffffffa561a02f
add rax, 0xffffffffa561a027
cmp rax, 0x1f
jbe 0x14004786f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fd08c
nop
xchg r9, rdx
mov r9, qword [rsp + 0x48]
xchg rdx, r9
cmp rdx, 0x10
jb 0x1400478d1
inc rdx
xchg r8, rcx
mov r8, qword [rsp + 0x30]
xchg r8, rcx
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x1400478cc
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
jbe 0x1400478cc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fd08c
xor r12b, r12b
jmp 0x1400473bd
lea rcx, [rbp - 0x10]
call fcn.14004bfd0
lea rdx, [0x1402158b0]
lea rcx, [rbp - 0x10]
call sub.VCRUNTIME140.dll__CxxThrowException
int3