Function at 0x140028c00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x68]
sub rsp, 0x140
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x1400970b0]
xor rax, rsp
mov qword [rbp + 0x38], rax
mov r13d, edx
mov dword [rbp + 0x2b], 0x74746553
mov word [rbp + 0x1e], 0x6f69
mov word [rbp + 0x17], 0x6e65
mov word [rbp + 0xd], 0x646e
mov dword [rbp + 0x1a], 0x73726556
mov dword [rbp + 0x21], 0x746e495c
mov word [rbp - 3], 0x7261
mov dword [rbp + 0x25], 0x656e7265
mov word [rbp + 0x10], 0x7377
mov dword [rbp + 0x2f], 0x73676e69
mov dword [rbp - 8], 0x74666f53
mov dword [rbp + 0x13], 0x72727543
mov byte [rbp - 4], 0x77
mov dword [rbp + 9], 0x69575c74
mov dword [rbp], 0x63694d5c
mov word [rbp + 0x29], 0x2074
mov dword [rbp + 5], 0x666f736f
mov byte [rbp + 0xf], 0x6f
mov byte [rbp + 0x19], 0x74
mov byte [rbp + 0x20], 0x6e
mov byte [rbp + 0x33], 0
mov byte [rbp + 4], 0x72
mov byte [rbp + 0x12], 0x5c
mov byte [rbp - 1], 0x65
mov dword [rbp - 0x28], 0x786f7250
mov word [rbp - 0x22], 0x616e
mov word [rbp - 0x1f], 0x656c
mov word [rbp - 0x24], 0x4579
mov byte [rbp - 0x1d], 0
mov byte [rbp - 0x20], 0x62
mov dword [rbp - 0x12], 0x65767265
mov dword [rbp - 0x17], 0x79786f72
mov byte [rbp - 0x13], 0x53
mov word [rbp - 0xe], 0x72
mov byte [rbp - 0x18], 0x50
lea r8, [0x14006f7c8]
mov rdx, rcx
lea rcx, [rbp - 0x50]
call fcn.14003f560
nop
lea r8, [rbp - 8]
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.14003f4f0
nop
lea rcx, [rbp - 0x50]
call fcn.14002a3d0
lea rax, [rsp + 0x20]
mov qword [rbp - 0x30], rax
mov qword [rsp + 0x38], 0xf
xor edi, edi
mov qword [rsp + 0x30], rdi
mov byte [rsp + 0x20], dil
cmp byte [rbp - 0x28], dil
jne 0x140028d5b
mov r8d, edi
jmp 0x140028d6c
lea rax, [rbp - 0x28]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], dil
jne 0x140028d63
lea rdx, [rbp - 0x28]
lea rcx, [rsp + 0x20]
call fcn.14002c510
nop
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0x10
cmovae rdx, qword [rbp - 0x70]
mov qword [rsp + 0x58], 0xf
mov qword [rsp + 0x50], rdi
mov byte [rsp + 0x40], 0
cmp byte [rdx], 0
jne 0x140028da6
mov r8, rdi
jmp 0x140028dba
or r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140028db0
lea rcx, [rsp + 0x40]
call fcn.14002c510
nop
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x40]
mov rcx, 0xffffffff80000003
call fcn.140029080
cmp eax, 1
sete r12b
lea rax, [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x58], 0xf
mov qword [rsp + 0x50], rdi
mov byte [rsp + 0x40], 0
cmp byte [rbp - 0x18], 0
jne 0x140028e0a
mov r8, rdi
jmp 0x140028e1c
lea rax, [rbp - 0x18]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140028e12
lea rdx, [rbp - 0x18]
lea rcx, [rsp + 0x40]
call fcn.14002c510
nop
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0x10
cmovae rdx, qword [rbp - 0x70]
mov qword [rsp + 0x38], 0xf
mov qword [rsp + 0x30], rdi
mov byte [rsp + 0x20], 0
cmp byte [rdx], 0
jne 0x140028e56
mov r8, rdi
jmp 0x140028e6a
or r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140028e60
lea rcx, [rsp + 0x20]
call fcn.14002c510
nop
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x20]
mov rdx, 0xffffffff80000003
lea rcx, [rsp + 0x70]
call fcn.140029160
mov word [rbp - 0x30], 0x7468
mov word [rbp - 0x2d], 0x3d70
mov byte [rbp - 0x2b], 0
mov byte [rbp - 0x2e], 0x74
lea rax, [rbp - 0x30]
or r15, 0xffffffffffffffff
nop dword [rax]
inc r15
cmp byte [rax + r15], 0
jne 0x140028eb0
mov rbx, qword [rbp - 0x80]
test r15, r15
jne 0x140028ecb
mov rsi, rdi
jmp 0x140028f50
test rbx, rbx
je 0x140028f4c
cmp r15, rbx
ja 0x140028f4c
sub rbx, r15
inc rbx
lea r14, [rsp + 0x70]
cmp qword [rbp - 0x78], 0x10
cmovae r14, qword [rsp + 0x70]
nop dword [rax + rax]
test rbx, rbx
je 0x140028f48
mov r8, rbx
mov edx, 0x68
mov rcx, r14
call fcn.1400451d0
mov rsi, rax
test rax, rax
je 0x140028f48
mov r8, r15
lea rdx, [rbp - 0x30]
mov rcx, rax
call fcn.140044f50
test eax, eax
je 0x140028f2f
sub r14, rsi
dec r14
add rbx, r14
lea r14, [rsi + 1]
jmp 0x140028ef0
lea rax, [rsp + 0x70]
cmp qword [rbp - 0x78], 0x10
cmovae rax, qword [rsp + 0x70]
sub rsi, rax
mov rbx, qword [rbp - 0x80]
jmp 0x140028f50
mov rbx, qword [rbp - 0x80]
or rsi, 0xffffffffffffffff
mov dword [rbp - 0x2d], 0x3d7370
mov word [rbp - 0x2f], 0x7474
mov byte [rbp - 0x30], 0x68
lea rax, [rbp - 0x30]
or r15, 0xffffffffffffffff
nop dword [rax]
inc r15
cmp byte [rax + r15], 0
jne 0x140028f70
test r15, r15
je 0x140028ff8
test rbx, rbx
je 0x140028ff4
cmp r15, rbx
ja 0x140028ff4
sub rbx, r15
inc rbx
lea r14, [rsp + 0x70]
cmp qword [rbp - 0x78], 0x10
cmovae r14, qword [rsp + 0x70]
nop
test rbx, rbx
je 0x140028ff4
mov r8, rbx
mov edx, 0x68
mov rcx, r14
call fcn.1400451d0
mov rdi, rax
test rax, rax
je 0x140028ff4
mov r8, r15
lea rdx, [rbp - 0x30]
mov rcx, rax
call fcn.140044f50
test eax, eax
je 0x140028fdf
sub r14, rdi
dec r14
add rbx, r14
lea r14, [rdi + 1]
jmp 0x140028fa0
lea rax, [rsp + 0x70]
cmp qword [rbp - 0x78], 0x10
cmovae rax, qword [rsp + 0x70]
sub rdi, rax
jmp 0x140028ff8
or rdi, 0xffffffffffffffff
test r12b, r12b
je 0x140029037
cmp rsi, 0xffffffffffffffff
jne 0x140029008
cmp rdi, rsi
je 0x140029013
test r13d, r13d
jne 0x14002902b
cmp rsi, 0xffffffffffffffff
je 0x140029037
lea rcx, [rsp + 0x70]
call fcn.14002a3d0
nop
lea rcx, [rbp - 0x70]
call fcn.14002a3d0
mov al, 1
jmp 0x14002904d
cmp r13d, 1
jne 0x140029037
cmp rdi, 0xffffffffffffffff
jmp 0x140029011
lea rcx, [rsp + 0x70]
call fcn.14002a3d0
nop
lea rcx, [rbp - 0x70]
call fcn.14002a3d0
xor al, al
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.14003ff20
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret