Function at 0x140025f60
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x78]
sub rsp, 0x150
mov qword [rbp - 0x58], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x1400970b0]
xor rax, rsp
mov qword [rbp + 0x40], rax
mov rdi, rcx
mov qword [rbp - 0x60], rcx
mov qword [rbp - 0x50], rcx
xor r8d, r8d
mov dword [rbp - 0x70], r8d
movdqa xmm0, xmmword [0x140075e90]
movdqu xmmword [rsp + 0x60], xmm0
mov esi, r8d
mov r14d, r8d
mov r15d, r8d
mov r12d, r8d
mov dword [rsp + 0x78], r8d
mov dword [rsp + 0x74], r8d
mov dword [rsp + 0x70], r8d
xor eax, eax
xor ecx, ecx
cpuid
mov r9d, eax
xor eax, eax
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rax
mov dword [rbp - 0x20], ebx
mov dword [rbp - 0x1c], edx
mov dword [rbp - 0x18], ecx
nop dword [rax + rax]
mov eax, r8d
xor ecx, ecx
cpuid
mov dword [rsp + 0x68], ecx
mov dword [rsp + 0x6c], edx
cmp r8d, 1
jne 0x140026063
mov esi, eax
sar esi, 4
and esi, 0xf
mov r14d, eax
sar r14d, 8
and r14d, 0xf
mov r15d, eax
sar r15d, 0xc
and r15d, 3
mov r12d, eax
sar r12d, 0x10
and r12d, 0xf
sar eax, 0x14
movzx r11d, al
mov dword [rsp + 0x78], r11d
movzx r11d, bl
mov dword [rsp + 0x74], r11d
sar ebx, 8
movzx r10d, bl
shl r10d, 3
mov dword [rsp + 0x70], r10d
inc r8d
cmp r8d, r9d
jbe 0x140026000
mov eax, 0x80000000
xor ecx, ecx
cpuid
mov r9d, eax
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x64], ebx
mov dword [rsp + 0x68], ecx
mov dword [rsp + 0x6c], edx
xor eax, eax
mov qword [rbp], rax
mov qword [rbp + 8], rax
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], rax
mov r8d, 0x80000000
cmp r9d, r8d
jb 0x140026119
nop dword [rax]
nop dword [rax + rax]
mov eax, r8d
xor ecx, ecx
cpuid
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x64], ebx
mov dword [rsp + 0x68], ecx
mov dword [rsp + 0x6c], edx
cmp r8d, 0x80000002
jne 0x1400260eb
movups xmm0, xmmword [rsp + 0x60]
movaps xmmword [rbp], xmm0
jmp 0x140026111
cmp r8d, 0x80000003
jne 0x1400260ff
movups xmm0, xmmword [rsp + 0x60]
movaps xmmword [rbp + 0x10], xmm0
jmp 0x140026111
cmp r8d, 0x80000004
jne 0x140026111
movups xmm0, xmmword [rsp + 0x60]
movaps xmmword [rbp + 0x20], xmm0
inc r8d
cmp r8d, r9d
jbe 0x1400260c0
call fcn.140034030
mov rcx, rax
test rax, rax
jne 0x140026131
mov ecx, 0x80004005
call fcn.140033340
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rdi], rax
mov dword [rbp - 0x70], 1
call fcn.140034030
mov rcx, rax
test rax, rax
jne 0x14002615d
mov ecx, 0x80004005
call fcn.140033340
int3
mov rax, qword [rax]
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rbp - 0x80], rdi
lea rcx, [rbp - 0x20]
lea rax, [rbp - 0x20]
test rax, 0xffffffffffff0000
jne 0x14002625f
movzx ebx, cx
xor edx, edx
mov ecx, ebx
call fcn.140033290
mov r13, rax
test rax, rax
je 0x140026270
mov eax, ebx
shr eax, 4
inc ax
movzx edx, ax
mov r8d, 6
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FindResourceW]
test rax, rax
je 0x140026270
mov r8d, ebx
mov rdx, rax
mov rcx, r13
call fcn.140036e30
mov r13, rax
test rax, rax
je 0x140026270
movzx ebx, word [rax]
mov ecx, 1
sub ecx, dword [rdi - 8]
mov eax, dword [rdi - 0xc]
sub eax, ebx
or eax, ecx
jge 0x1400261f7
mov edx, ebx
lea rcx, [rbp - 0x80]
call fcn.14003eac0
mov rdi, qword [rbp - 0x80]
movzx r9d, word [r13]
lea r8, [r13 + 2]
mov rdx, rbx
mov rcx, rdi
call fcn.140051458
test eax, eax
je 0x140026244
cmp eax, 0xc
je 0x140026239
cmp eax, 0x16
je 0x14002622e
cmp eax, 0x22
je 0x14002622e
cmp eax, 0x50
je 0x140026244
mov ecx, 0x80004005
call fcn.140033340
int3
mov ecx, 0x80070057
call fcn.140033340
int3
mov ecx, 0x8007000e
call fcn.140033340
int3
cmp ebx, dword [rdi - 0xc]
jg 0x140026254
mov dword [rdi - 0x10], ebx
xor ecx, ecx
mov word [rdi + rbx*2], cx
jmp 0x140026270
mov ecx, 0x80070057
call fcn.140033340
int3
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x80]
call fcn.14003f140
mov rdi, qword [rbp - 0x80]
call fcn.140034030
mov rcx, rax
test rax, rax
jne 0x140026288
mov ecx, 0x80004005
call fcn.140033340
int3
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x78], rbx
lea rcx, [rbp]
lea rax, [rbp]
test rax, 0xffffffffffff0000
jne 0x14002639c
movzx r13d, cx
xor edx, edx
mov ecx, r13d
call fcn.140033290
mov rcx, rax
mov qword [rbp - 0x68], rax
test rax, rax
je 0x1400263ad
mov eax, r13d
shr eax, 4
inc ax
movzx edx, ax
mov r8d, 6
call qword [sym.imp.KERNEL32.dll_FindResourceW]
test rax, rax
je 0x1400263ad
mov r8d, r13d
mov rdx, rax
mov rcx, qword [rbp - 0x68]
call fcn.140036e30
mov rcx, rax
mov qword [rbp - 0x68], rax
test rax, rax
je 0x1400263ad
movzx r13d, word [rax]
mov edx, 1
sub edx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r13d
or eax, edx
jge 0x140026332
mov edx, r13d
lea rcx, [rbp - 0x78]
call fcn.14003eac0
mov rbx, qword [rbp - 0x78]
mov rcx, qword [rbp - 0x68]
movzx r9d, word [rcx]
lea r8, [rcx + 2]
mov rdx, r13
mov rcx, rbx
call fcn.140051458
test eax, eax
je 0x14002637e
cmp eax, 0xc
je 0x140026373
cmp eax, 0x16
je 0x140026368
cmp eax, 0x22
je 0x140026368
cmp eax, 0x50
je 0x14002637e
mov ecx, 0x80004005
call fcn.140033340
int3
mov ecx, 0x80070057
call fcn.140033340
int3
mov ecx, 0x8007000e
call fcn.140033340
int3
cmp r13d, dword [rbx - 0xc]
jg 0x140026391
mov dword [rbx - 0x10], r13d
xor ecx, ecx
mov word [rbx + r13*2], cx
jmp 0x1400263ad
mov ecx, 0x80070057
call fcn.140033340
int3
lea rdx, [rbp]
lea rcx, [rbp - 0x78]
call fcn.14003f140
mov rbx, qword [rbp - 0x78]
mov edx, 0x25
mov dword [rbp - 0x3a], 0x250064
mov dword [rbp - 0x26], 0x64
mov dword [rbp - 0x40], 0x640025
mov dword [rbp - 0x46], 0x250073
mov dword [rbp - 0x2e], 0x250064
lea eax, [rdx + 0x4e]
mov word [rbp - 0x48], dx
mov dword [rbp - 0x2a], 0x250064
mov dword [rbp - 0x32], 0x250064
mov dword [rbp - 0x36], 0x250064
mov word [rbp - 0x3c], dx
mov word [rbp - 0x42], ax
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x50], eax
mov ecx, dword [rsp + 0x74]
mov dword [rsp + 0x48], ecx
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], r12d
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], esi
mov r9, rbx
mov r8, rdi
lea rdx, [rbp - 0x48]
mov rdi, qword [rbp - 0x60]
mov rcx, rdi
call fcn.14003f360
nop
lea rdx, [rbx - 0x18]
or ebx, 0xffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140026458
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], ebx
sub ebx, 1
jg 0x140026473
mov rcx, qword [rdx]
mov rbx, qword [rcx]
call qword [rbx + 8]
mov rax, rdi
mov rcx, qword [rbp + 0x40]
xor rcx, rsp
call fcn.14003ff20
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret