Function at 0x7ff668d5a720
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xc0
mov rdi, rdx
mov rbx, rcx
cmp qword [rcx + 8], 0xffffffffffffffff
jne 0x7ff668d5aa3e
mov byte [rcx + 0xa0], 0
rdtsc
shl rdx, 0x20
or rax, rdx
mov rcx, rax
mov eax, 0xffffffff
imul rcx, rax
movabs rax, 0x2000400080011
mul rcx
sub rcx, rdx
shr rcx, 1
add rcx, rdx
shr rcx, 0xe
mov dword [rbx + 0x9c], ecx
mov ecx, 0x14
mov dword [rbp + 7], 0x480014
mov dword [rbp + 0xb], 0x3a0048
mov dword [rbp + 0xf], 0x530048
mov dword [rbp + 0x13], 0x7b0078
mov dword [rbp + 0x17], 0x750076
mov dword [rbp + 0x1b], 0x480078
mov dword [rbp + 0x1f], 0x7a0051
mov dword [rbp + 0x23], 0x5d0071
mov dword [rbp + 0x27], 0x14007b
movzx eax, word [0x7ff668db1cda]
xor ax, cx
mov word [rbp + 0x2b], ax
movzx eax, word [0x7ff668db1cdc]
xor ax, cx
mov word [rbp + 0x2d], ax
movzx eax, word [0x7ff668db1cde]
xor ax, cx
mov word [rbp + 0x2f], ax
movzx eax, word [0x7ff668db1ce0]
xor ax, cx
mov word [rbp + 0x31], ax
movzx eax, word [0x7ff668db1ce2]
xor ax, cx
mov word [rbp + 0x33], ax
movzx eax, word [0x7ff668db1ce4]
xor ax, cx
mov word [rbp + 0x35], ax
movzx eax, word [0x7ff668db1ce6]
xor ax, cx
mov word [rbp + 0x37], ax
movzx eax, word [0x7ff668db1ce8]
xor ax, cx
mov word [rbp + 0x39], ax
movzx eax, word [0x7ff668db1cea]
xor ax, cx
mov word [rbp + 0x3b], ax
movzx eax, word [0x7ff668db1cec]
xor ax, cx
mov word [rbp + 0x3d], ax
movzx eax, word [0x7ff668db1cee]
xor ax, cx
mov word [rbp + 0x3f], ax
movzx eax, word [0x7ff668db1cf0]
xor ax, cx
mov word [rbp + 0x41], ax
movzx eax, word [0x7ff668db1cf2]
xor ax, cx
mov word [rbp + 0x43], ax
movzx eax, word [0x7ff668db1cf4]
xor ax, cx
mov word [rbp + 0x45], ax
movzx eax, word [0x7ff668db1cf6]
xor ax, cx
mov word [rbp + 0x47], ax
movzx eax, word [0x7ff668db1cf8]
xor ax, cx
mov word [rbp + 0x49], ax
xor eax, eax
mov word [rbp + 0x4b], ax
xor esi, esi
nop word [rax + rax]
xor word [rbp + rax*2 + 9], cx
inc rax
cmp rax, 0x21
jae 0x7ff668d5a8d4
movzx ecx, word [rbp + 7]
jmp 0x7ff668d5a8c0
mov word [rbp + 0x4b], si
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rbp + 9]
push rsi
call 0x7ff668e0c08d
mov qword [rbx + 8], rax
cmp rax, 0xffffffffffffffff
je 0x7ff668d5aa42
mov byte [rbx + 0xa0], 1
mov rcx, rbx
call fcn.7ff668d5b780
test eax, eax
jns 0x7ff668d5a96a
mov rcx, rbx
call fcn.7ff668d5b380
lea rcx, [0x7ff668db1ce0]
call fcn.7ff66912c305
nop
mov rdx, rax
lea rcx, [0x7ff668dcab60]
call fcn.7ff668d63650
mov rcx, rax
call fcn.7ff668d638c0
lea rcx, [0x7ff668db1cf0]
call fcn.7ff66912c305
nop
mov rcx, rax
call fcn.7ff668d7ff10
mov eax, 0xc0000001
jmp 0x7ff668d5aa59
mov cl, 0xa
mov dword [rbp - 0x29], 0x657e640a
mov dword [rbp - 0x25], 0x64786179
mov dword [rbp - 0x21], 0x726f2466
mov word [rbp - 0x1d], 0x6f
mov rax, rsi
nop word [rax + rax]
xor byte [rbp + rax - 0x28], cl
inc rax
cmp rax, 0xc
jae 0x7ff668d5a9a3
movzx ecx, byte [rbp - 0x29]
jmp 0x7ff668d5a990
mov byte [rbp - 0x1c], sil
mov qword [rbp - 0x19], rsi
mov qword [rbp - 9], rsi
mov qword [rbp - 1], 0xf
mov byte [rbp - 0x19], 0
lea rax, [rbp - 0x28]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x7ff668d5a9c6
lea rdx, [rbp - 0x28]
lea rcx, [rbp - 0x19]
call fcn.7ff668d61fd0
nop
lea rcx, [rbp - 0x19]
call fcn.7ff668d71020
mov qword [rbx], rax
mov rdx, qword [rbp - 1]
cmp rdx, 0x10
jb 0x7ff668d5aa21
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff668d5aa1c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff668d5aa72
call fcn.7ff668d73fb8
cmp qword [rbx], 0
jne 0x7ff668d5aa3b
mov rcx, rbx
call fcn.7ff668d5b380
lea rcx, [0x7ff668db1d08]
jmp 0x7ff668d5a92e
mov dword [rbx + 0x10], esi
xor eax, eax
jmp 0x7ff668d5aa59
mov rdx, rdi
lea rcx, [rbp - 0x19]
call fcn.7ff668d60410
mov rdx, rax
mov rcx, rbx
call fcn.7ff668d5aa80
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
call fcn.7ff668d81620
int3