Function at 0x140049a40
Capabilities:
Contain obfuscated stackstrings

Disassembly:
xchg r14, rbx
mov qword [rsp + 8], r14
xchg r14, rbx
nop
mov qword [rsp - 8], rbp
sub rsp, 8
lea rbp, [rsp - 0x120]
sub rsp, 0x220
xchg rbx, r13
mov r13, rcx
xchg r13, rbx
xchg rdx, r10
movups xmm0, xmmword [r10]
xchg r10, rdx
xchg rcx, r12
movups xmmword [r12], xmm0
xchg rcx, r12
mov dword [rcx + 0x10], 0x45235f84
add dword [rcx + 0x10], 0x1bc20f45
sub dword [rcx + 0x10], 0x11c4492d
sub dword [rcx + 0x10], 0x4205b3ba
add dword [rcx + 0x10], 0x2a888c15
add dword [rcx + 0x10], 0xc85c0208
xor eax, eax
mov qword [rcx + 0x18], rax
mov byte [rcx + 0x20], 6
add byte [rcx + 0x20], 0x77
xor byte [rcx + 0x20], 0x4c
add byte [rcx + 0x20], 0x3a
sub byte [rcx + 0x20], 0x18
xor byte [rcx + 0x20], 0x52
mov dword [rcx + 0x24], r8d
xchg r14, rax
mov qword [rcx + 0x28], r14
xchg r14, rax
movdqa xmm0, xmmword [0x140002cd0]
movdqa xmm1, xmmword [0x140002ce0]
xchg rdi, rcx
movups xmmword [rdi + 0x30], xmm0
xchg rcx, rdi
xchg rcx, r12
movups xmmword [r12 + 0x40], xmm1
xchg r12, rcx
mov dword [rbp + 0xa0], 0x681d726d
sub dword [rbp + 0xa0], 0x18181984
sub dword [rbp + 0xa0], 0x18142f4c
sub dword [rbp + 0xa0], 0x1b5278c6
add dword [rbp + 0xa0], 0x35d12be3
add dword [rbp + 0xa0], 0x2b202f35
sub dword [rbp + 0xa0], 0x778bcb3a
xor dword [rbp + 0xa0], 0x60440c0
xorps xmm0, xmm0
xchg rbp, rdi
movups xmmword [rdi + 0xa8], xmm0
xchg rdi, rbp
movdqa xmm1, xmmword [0x140002cc0]
xchg rbp, r13
movdqu xmmword [r13 + 0xb8], xmm1
xchg rbp, r13
mov eax, dword [0x140001878]
mov dword [rbp + 0xa8], eax
movzx eax, word [0x14000187c]
mov word [rbp + 0xac], ax
mov byte [rbp + 0xae], 0x1c
add byte [rbp + 0xae], 0x2d
xor byte [rbp + 0xae], 0x1e
add byte [rbp + 0xae], 3
xor byte [rbp + 0xae], 0x72
sub byte [rbp + 0xae], 0x28
mov dword [rbp + 0x78], 0x472bfbbe
add dword [rbp + 0x78], 0x9e7d7fa
xor dword [rbp + 0x78], 0x2c362093
sub dword [rbp + 0x78], 0xdef1752
sub dword [rbp + 0x78], 0x749d487
sub dword [rbp + 0x78], 0x4c6be225
xor dword [rbp + 0x78], 0x46b71410
sub dword [rbp + 0x78], 0x55eafc1a
xor dword [rbp + 0x78], 0x74b354e
xchg rbp, r13
movups xmmword [r13 + 0x80], xmm0
xchg rbp, r13
movdqu xmmword [rbp + 0x90], xmm1
mov eax, dword [0x140001880]
mov dword [rbp + 0x80], eax
movzx eax, word [0x140001884]
mov word [rbp + 0x84], ax
mov byte [rbp + 0x86], 0x5b
add byte [rbp + 0x86], 0x14
sub byte [rbp + 0x86], 0x31
xor byte [rbp + 0x86], 0x74
sub byte [rbp + 0x86], 0x3e
add byte [rbp + 0x86], 0x44
xor byte [rbp + 0x86], 0x50
add byte [rbp + 0x86], 0
mov dword [rbp + 0x50], 0x6c60aa00
sub dword [rbp + 0x50], 0x4beca771
add dword [rbp + 0x50], 0x770e8f2
sub dword [rbp + 0x50], 0x252a03e0
xor dword [rbp + 0x50], 0x34106340
add dword [rbp + 0x50], 0x20549d77
sub dword [rbp + 0x50], 0x56ff21ec
xchg r15, rbp
movups xmmword [r15 + 0x58], xmm0
xchg r15, rbp
movdqa xmm1, xmmword [0x140002cb0]
xchg r15, rbp
movdqu xmmword [r15 + 0x68], xmm1
xchg rbp, r15
mov eax, dword [0x140001888]
mov dword [rbp + 0x58], eax
movzx eax, byte [0x14000188c]
mov byte [rbp + 0x5c], al
mov byte [rbp + 0x5d], 0x25
add byte [rbp + 0x5d], 0x4a
xor byte [rbp + 0x5d], 0x2f
sub byte [rbp + 0x5d], 0x11
xor byte [rbp + 0x5d], 0x54
sub byte [rbp + 0x5d], 0x2e
add byte [rbp + 0x5d], 0x19
add byte [rbp + 0x5d], 0xd
sub byte [rbp + 0x5d], 0x73
mov dword [rbp + 0xf0], 0x78c690e6
xor dword [rbp + 0xf0], 0x5ceae1a0
xor dword [rbp + 0xf0], 0x67288f85
add dword [rbp + 0xf0], 0x416c091
add dword [rbp + 0xf0], 0x2389a06f
sub dword [rbp + 0xf0], 0x21279cb6
xor dword [rbp + 0xf0], 0x497dc364
xchg r10, rbp
movups xmmword [r10 + 0xf8], xmm0
xchg r10, rbp
movdqa xmm1, xmmword [0x140002ca0]
xchg rdx, rbp
movdqu xmmword [rdx + 0x108], xmm1
xchg rdx, rbp
mov dword [rbp + 0xf8], 0x79a8c534
sub dword [rbp + 0xf8], 0x36ba013b
xor dword [rbp + 0xf8], 0xf483707
sub dword [rbp + 0xf8], 0x305698a8
sub dword [rbp + 0xf8], 0xf156abd
xor dword [rbp + 0xf8], 0x364e9ff0
mov byte [rbp + 0xfc], 0x35
sub byte [rbp + 0xfc], 0x12
xor byte [rbp + 0xfc], 0x3e
xor byte [rbp + 0xfc], 0x5b
sub byte [rbp + 0xfc], 2
sub byte [rbp + 0xfc], 0x44
mov dword [rbp + 0x28], 0x2b8d70e7
add dword [rbp + 0x28], 0x3c1ce299
sub dword [rbp + 0x28], 0x73aea1b
sub dword [rbp + 0x28], 0x19d30b9a
xor dword [rbp + 0x28], 0x1eb263c7
sub dword [rbp + 0x28], 0x582e3da8
xchg rbp, r14
movups xmmword [r14 + 0x30], xmm0
xchg r14, rbp
movdqa xmm1, xmmword [0x140002cc0]
xchg rdx, rbp
movdqu xmmword [rdx + 0x40], xmm1
xchg rdx, rbp
mov eax, dword [0x140001890]
mov dword [rbp + 0x30], eax
movzx eax, word [0x140001894]
mov word [rbp + 0x34], ax
mov byte [rbp + 0x36], 0x6d
xor byte [rbp + 0x36], 0x1a
xor byte [rbp + 0x36], 0x21
add byte [rbp + 0x36], 8
sub byte [rbp + 0x36], 0x15
xor byte [rbp + 0x36], 0x7f
sub byte [rbp + 0x36], 0x36
mov dword [rbp], 0x143dfccc
add dword [rbp], 0x58de5a6e
sub dword [rbp], 0x3a64d2a
sub dword [rbp], 0xa125c8
sub dword [rbp], 0x14c050e
sub dword [rbp], 0x6788dee5
xchg rdi, rbp
movups xmmword [rdi + 8], xmm0
xchg rdi, rbp
movdqa xmm1, xmmword [0x140002cb0]
xchg rbp, r15
movdqu xmmword [r15 + 0x18], xmm1
xchg r15, rbp
mov eax, dword [0x140001898]
mov dword [rbp + 8], eax
movzx eax, byte [0x14000189c]
mov byte [rbp + 0xc], al
mov byte [rbp + 0xd], 0x35
sub byte [rbp + 0xd], 3
add byte [rbp + 0xd], 0x2f
sub byte [rbp + 0xd], 0x17
xor byte [rbp + 0xd], 0x42
xor byte [rbp + 0xd], 0x40
xor byte [rbp + 0xd], 0x4c
add byte [rbp + 0xd], 0x1b
sub byte [rbp + 0xd], 0x1f
mov dword [rbp - 0x28], 0x28d2f44f
add dword [rbp - 0x28], 0x230b1010
sub dword [rbp - 0x28], 0x27b4952c
add dword [rbp - 0x28], 0x84e943b
xor dword [rbp - 0x28], 0x74d8b55e
xor dword [rbp - 0x28], 0x6099ff4
sub dword [rbp - 0x28], 0x47d9efe2
add dword [rbp - 0x28], 0x1dce5444
sub dword [rbp - 0x28], 0x349d8dd9
xchg r14, rbp
movups xmmword [r14 - 0x20], xmm0
xchg rbp, r14
movdqa xmm1, xmmword [0x140002cc0]
movdqu xmmword [rbp - 0x10], xmm1
mov eax, dword [0x1400018a0]
mov dword [rbp - 0x20], eax
movzx eax, word [0x1400018a4]
mov word [rbp - 0x1c], ax
mov byte [rbp - 0x1a], 0x50
xor byte [rbp - 0x1a], 0x3e
sub byte [rbp - 0x1a], 0x4a
add byte [rbp - 0x1a], 0x2b
xor byte [rbp - 0x1a], 0x3d
sub byte [rbp - 0x1a], 0x5b
xor byte [rbp - 0x1a], 0x62
xor byte [rbp - 0x1a], 0x75
mov dword [rbp - 0x50], 0x780dbde9
xor dword [rbp - 0x50], 0x24a684e6
add dword [rbp - 0x50], 0x6c45dda
sub dword [rbp - 0x50], 0x55fd5451
sub dword [rbp - 0x50], 0xb7464f5
sub dword [rbp - 0x50], 0x1fddd57
movups xmmword [rbp - 0x48], xmm0
movdqa xmm1, xmmword [0x140002cb0]
xchg rbp, rsi
movdqu xmmword [rsi - 0x38], xmm1
xchg rbp, rsi
mov eax, dword [0x1400018a8]
mov dword [rbp - 0x48], eax
movzx eax, byte [0x1400018ac]
mov byte [rbp - 0x44], al
mov byte [rbp - 0x43], 0x3b
add byte [rbp - 0x43], 0x3f
xor byte [rbp - 0x43], 0x77
add byte [rbp - 0x43], 0x6a
sub byte [rbp - 0x43], 4
sub byte [rbp - 0x43], 0x73
mov dword [rbp - 0x78], 0x4be91f6f
add dword [rbp - 0x78], 0x123a8146
sub dword [rbp - 0x78], 0x80840dc
sub dword [rbp - 0x78], 0x2ac54e16
add dword [rbp - 0x78], 0x1ec8908d
sub dword [rbp - 0x78], 0x4a1ea207
movups xmmword [rbp - 0x70], xmm0
movdqu xmmword [rbp - 0x60], xmm1
mov eax, dword [0x1400018b0]
mov dword [rbp - 0x70], eax
movzx eax, byte [0x1400018b4]
mov byte [rbp - 0x6c], al
mov byte [rbp - 0x6b], 1
add byte [rbp - 0x6b], 0
xor byte [rbp - 0x6b], 0x5c
xor byte [rbp - 0x6b], 0xe
sub byte [rbp - 0x6b], 0x23
add byte [rbp - 0x6b], 0x47
sub byte [rbp - 0x6b], 6
sub byte [rbp - 0x6b], 0x17
xor byte [rbp - 0x6b], 0x5a
mov dword [rsp + 0x60], 0x3b1f1176
sub dword [rsp + 0x60], 0x35b9edae
add dword [rsp + 0x60], 0x65be4c36
sub dword [rsp + 0x60], 0x38d31540
add dword [rsp + 0x60], 0x52ff216
xor dword [rsp + 0x60], 0x46aa1154
sub dword [rsp + 0x60], 0x1f45dd91
sub dword [rsp + 0x60], 0x51e47fab
movups xmmword [rsp + 0x68], xmm0
movdqa xmm1, xmmword [0x140002cc0]
movdqu xmmword [rsp + 0x78], xmm1
mov eax, dword [0x1400018b8]
mov dword [rsp + 0x68], eax
movzx eax, word [0x1400018bc]
mov word [rsp + 0x6c], ax
mov byte [rsp + 0x6e], 0x2a
add byte [rsp + 0x6e], 0xc
add byte [rsp + 0x6e], 0x2e
sub byte [rsp + 0x6e], 8
sub byte [rsp + 0x6e], 0x21
add byte [rsp + 0x6e], 0x11
sub byte [rsp + 0x6e], 0x4c
mov dword [rbp + 0xc8], 0x1215b650
xor dword [rbp + 0xc8], 0x86115cc
add dword [rbp + 0xc8], 0x1f440bb5
xor dword [rbp + 0xc8], 0x2ad92a0b
add dword [rbp + 0xc8], 0x5fb2834
add dword [rbp + 0xc8], 0x2b7c33fd
xor dword [rbp + 0xc8], 0x1ee5b58f
sub dword [rbp + 0xc8], 0x5a3d53c1
xchg rdi, rbp
movups xmmword [rdi + 0xd0], xmm0
xchg rbp, rdi
movdqa xmm1, xmmword [0x140002ca0]
xchg rbp, r11
movdqu xmmword [r11 + 0xe0], xmm1
xchg rbp, r11
mov dword [rbp + 0xd0], 0x6d4ffadd
sub dword [rbp + 0xd0], 0x305ab117
sub dword [rbp + 0xd0], 0x3c6dc102
add dword [rbp + 0xd0], 0x4657ca9c
xor dword [rbp + 0xd0], 0x22442fe4
xor dword [rbp + 0xd0], 0x54ea0d2b
xor dword [rbp + 0xd0], 0x1288866
xor dword [rbp + 0xd0], 0x433891aa
mov byte [rbp + 0xd4], SHCreateMemStream
add byte [rbp + 0xd4], 0x6d
sub byte [rbp + 0xd4], 0x76
add byte [rbp + 0xd4], 0x56
add byte [rbp + 0xd4], 0xe
xor byte [rbp + 0xd4], 0x1f
sub byte [rbp + 0xd4], 0x79
neg rcx
add rcx, 0xffffffffffffffb0
neg rcx
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x58], rax
lea rax, [rbp + 0x78]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x50]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x28]
mov qword [rsp + 0x38], rax
lea rax, [rbp]
xchg r10, rax
mov qword [rsp + 0x30], r10
xchg r10, rax
lea rax, [rbp - 0x28]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x50]
xchg r9, rax
mov qword [rsp + 0x20], r9
xchg r9, rax
lea r9, [rbp - 0x78]
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0xc8]
call fcn.1400482e0
xchg r11, rdx
mov r11, qword [rbp + 0xe8]
xchg r11, rdx
cmp rdx, 0x10
jb 0x14004a261
inc rdx
mov rcx, qword [rbp + 0xd0]
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14004a25c
nop
sub rdx, 0x4988c58
add rdx, 0x4988c7f
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004a5d1
call fcn.1401fc438
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x14004a2b6
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a2b1
nop
add rdx, 0x7fd6697
sub rdx, 0x7fd6670
mov rcx, qword [rcx - 8]
sub rax, rcx
neg rax
add rax, 8
neg rax
cmp rax, 0x1f
ja 0x14004a5d1
call fcn.1401fc438
xchg rdx, r8
mov r8, qword [rbp - 0x58]
xchg rdx, r8
cmp rdx, 0x10
jb 0x14004a30c
inc rdx
mov rcx, qword [rbp - 0x70]
xchg r10, rax
mov r10, rcx
xchg r10, rax
cmp rdx, 0x1000
jb 0x14004a307
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
add rax, 0xfffffffffafaad3b
sub rax, 0xfffffffffafaad43
cmp rax, 0x1f
ja 0x14004a5d1
call fcn.1401fc438
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x14004a366
inc rdx
xchg r15, rcx
mov r15, qword [rbp - 0x48]
xchg rcx, r15
xchg r12, rcx
mov rax, r12
xchg r12, rcx
cmp rdx, 0x1000
jb 0x14004a361
nop
sub rdx, 0x1428c871
add rdx, 0x1428c898
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
ja 0x14004a5d1
call fcn.1401fc438
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14004a3bb
inc rdx
xchg rcx, r11
mov r11, qword [rbp - 0x20]
xchg rcx, r11
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a3b6
neg rdx
add rdx, 0xffffffffffffffd9
neg rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
neg rax
add rax, 8
neg rax
cmp rax, 0x1f
ja 0x14004a5d1
call fcn.1401fc438
xchg rcx, rdx
mov rcx, qword [rbp + 0x20]
xchg rdx, rcx
cmp rdx, 0x10
jb 0x14004a417
inc rdx
xchg rcx, rsi
mov rsi, qword [rbp + 8]
xchg rcx, rsi
xchg r9, rax
mov r9, rcx
xchg r9, rax
cmp rdx, 0x1000
jb 0x14004a412
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xffffffff93a58870
add rax, 0xffffffff93a58868
cmp rax, 0x1f
ja 0x14004a5d1
call fcn.1401fc438
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x14004a46d
inc rdx
mov rcx, qword [rbp + 0x30]
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14004a468
neg rdx
add rdx, 0xffffffffffffffd9
neg rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xffffffffcfd06456
add rax, 0xffffffffcfd0644e
cmp rax, 0x1f
ja 0x14004a5d1
call fcn.1401fc438
xchg r14, rdx
mov r14, qword [rbp + 0x110]
xchg r14, rdx
cmp rdx, 0x10
jb 0x14004a4cf
inc rdx
xchg r15, rcx
mov r15, qword [rbp + 0xf8]
xchg rcx, r15
xchg r10, rax
mov r10, rcx
xchg r10, rax
cmp rdx, 0x1000
jb 0x14004a4ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
add rax, 0xffffffff8b0105db
sub rax, 0xffffffff8b0105e3
cmp rax, 0x1f
ja 0x14004a5d1
call fcn.1401fc438
mov rdx, qword [rbp + 0x70]
cmp rdx, 0x10
jb 0x14004a51e
inc rdx
xchg r14, rcx
mov r14, qword [rbp + 0x58]
xchg rcx, r14
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a519
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
neg rax
add rax, 8
neg rax
cmp rax, 0x1f
ja 0x14004a5d1
call fcn.1401fc438
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x14004a57c
inc rdx
xchg r12, rcx
mov r12, qword [rbp + 0x80]
xchg r12, rcx
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14004a577
nop
add rdx, 0x5d2c4c28
sub rdx, 0x5d2c4c01
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004a5d1
call fcn.1401fc438
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0x10
jb 0x14004a5dd
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a5d8
nop
sub rdx, 0x77b1eef3
add rdx, 0x77b1ef1a
mov rcx, qword [rcx - 8]
sub rax, rcx
neg rax
add rax, 8
neg rax
cmp rax, 0x1f
jbe 0x14004a5d8
push rax
call 0x1404e1987
int3
call fcn.1401fc438
xchg rbx, rdi
mov rax, rdi
xchg rdi, rbx
xchg rbx, r13
mov r13, qword [rsp + 0x230]
xchg rbx, r13
add rsp, 0x220
nop
add rsp, 8
mov rbp, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]