Function at 0x1400952d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
mov rax, qword [0x1400de040]
xor rax, rsp
mov qword [rbp + 0x4f], rax
mov r8, qword [rcx]
lea rdx, [rbp + 0x1f]
add r8, 0x298
call fcn.140099920
cmp qword [rbp + 0x1f], 0
jne 0x140095353
movdqa xmm0, xmmword [0x1400cacf0]
lea rdx, [rbp - 0x18]
movdqa xmm1, xmmword [0x1400cacc0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqu xmmword [rbp - 0x19], xmm0
mov dword [rbp + 7], 0x2e726579
movdqu xmmword [rbp - 9], xmm1
mov byte [rbp + 0xb], 0
call fcn.140099390
lea rdx, [0x140099570]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
jmp 0x140095493
mov qword [rsp + 0xc8], rbx
lea rax, [rbp + 0x10]
xor ebx, ebx
mov dword [rbp + 0xf], 0x6d75486b
xorps xmm0, xmm0
mov qword [rbp - 9], rbx
mov qword [rbp - 1], rbx
mov r8, 0xffffffffffffffff
mov dword [rbp + 0x13], 0x696f6e61
mov word [rbp + 0x17], 0x64
movups xmmword [rbp - 0x19], xmm0
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], bl
jne 0x140095390
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x19]
call fcn.140002040
lea r8, [rbp - 0x19]
lea rdx, [rbp + 0xf]
lea rcx, [rbp + 0x1f]
call fcn.1400970c0
mov rax, qword [rbp + 0xf]
test rax, rax
jne 0x14009540f
movdqa xmm0, xmmword [0x1400cad10]
lea rdx, [rbp - 0x18]
movdqa xmm1, xmmword [0x1400cada0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqu xmmword [rbp - 0x19], xmm0
mov dword [rbp + 7], 0x65746361
movdqu xmmword [rbp - 9], xmm1
mov word [rbp + 0xb], 0x2e72
mov byte [rbp + 0xd], bl
call fcn.140099390
lea rdx, [0x140099570]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
jmp 0x14009548b
add rax, 0x17c
mov dword [rbp + 0x48], ebx
mov qword [rbp + 0x2f], rax
lea rax, [rbp + 0xf]
mov qword [rbp + 0x37], rax
mov eax, dword [0x1400dfbb8]
mov word [rbp + 0x4c], bx
mov byte [rbp + 0x4e], bl
mov dword [rbp + 0x27], 0x12b2d92
mov qword [rbp + 0x3f], 4
mov dword [rbp + 0x2b], eax
mov byte [rbp + 0x47], bl
test eax, eax
je 0x140095486
mov rcx, qword [0x1400dfbb0]
test rcx, rcx
je 0x140095486
mov qword [rsp + 0x38], rbx
lea rax, [rbp + 0x27]
mov qword [rsp + 0x30], rbx
lea r8, [rbp + 0x27]
mov dword [rsp + 0x28], 0x28
mov r9d, 0x28
mov edx, 0x224a14
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
movss xmm0, dword [rbp + 0xf]
mov rbx, qword [rsp + 0xc8]
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.1400b5c20
add rsp, 0xb0
pop rbp
ret