Function at 0x1400015c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push r14
push rsi
push rdi
push rbx
sub rsp, 0x70
lea rbp, [rsp + 0x70]
mov qword [rbp - 8], 0xfffffffffffffffe
xorps xmm0, xmm0
movaps xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x46], xmm0
mov dword [rbp - 0x50], 0x787e939b
mov word [rbp - 0x4c], 0xd547
lea rsi, [rbp - 0x50]
call fcn.140017b20
mov rdi, qword [rax]
call fcn.140017b30
mov rcx, qword [rax]
xor eax, eax
jmp 0x14000168c
lea r8d, [rax + 0x24eb56cc]
lea r9d, [rax + rdx]
add r9d, 0x24eb56cc
and r8d, edx
add r8d, r8d
sub r9d, r8d
add r9b, 0x6c
mov byte [rbp + rax - 0x50], r9b
movzx r8d, r9b
not rcx
add rcx, rax
sub rcx, r8
mov rax, rcx
mov rcx, r10
lea r8d, [rax - 0x274be1d0]
lea r9d, [rax + rdx]
add r9d, 0xd8b41e30
and r8d, edx
add r8d, r8d
sub r9d, r8d
add r9b, 0xb0
mov byte [rbp + rax - 0x50], r9b
sub rax, rdi
inc rdi
movzx r9d, byte [rbp + rax - 0x52]
add rax, 0xfffffffffffffffe
movzx edx, r9b
add rax, rcx
add rax, rdx
inc rax
cmp rax, 0x1a
jae 0x14000183c
cmp rdi, rax
ja 0x14000182c
movzx r9d, byte [rbp + rax - 0x50]
movzx edx, r9b
lea r10, [rcx + 1]
cmp rdi, r10
jae 0x140001730
cmp rcx, rax
ja 0x140001835
lea r8, [rdi + rcx]
cmp r8, rax
jbe 0x140001780
lea r9, [rcx + 0x10]
cmp rdi, r9
jne 0x1400015f3
lea r10d, [rax + 0x76fa5950]
lea r9d, [rax + rdx]
add r9d, 0x76fa5950
and r10d, edx
add r10d, r10d
sub r9d, r10d
add r9b, 0xd0
lea r10d, [rax - 0x42a637fc]
lea r11d, [rdx + rax]
add r11d, 0xbd59c804
and r10d, edx
add r10d, r10d
sub r11d, r10d
add r11b, r9b
add r11b, 0xe4
mov byte [rbp + rax - 0x50], r11b
movzx edx, r9b
not rdx
add rax, rdx
mov rdi, r8
jmp 0x14000167f
je 0x140001675
lea r8, [rcx + 2]
cmp rdi, r8
je 0x140001641
lea r8, [rcx + 3]
cmp rdi, r8
jne 0x1400016ac
lea r8d, [rax + 0x21322014]
lea r9d, [rax + rdx]
add r9d, 0x21322014
and r8d, edx
add r8d, r8d
sub r9d, r8d
add r9b, 0x74
add rdi, rcx
mov r8, rdi
jmp 0x1400016ee
cmp rdi, r10
jne 0x1400017ab
lea ecx, [rax + 0x55c8393c]
lea r8d, [rax + rdx]
add r8d, 0x55c8393c
and ecx, edx
add ecx, ecx
sub r8d, ecx
add r8b, 0x5c
mov byte [rbp + rax - 0x50], r8b
mov rcx, rdi
jmp 0x1400017b4
lea r11, [rcx + 2]
cmp rdi, r11
jne 0x1400017bc
dec rax
jmp 0x14000167f
lea r11, [rcx + 4]
cmp rdi, r11
jne 0x1400017e9
lea r10d, [rax - 0x2350b344]
lea r9d, [rax + rdx]
add r9d, 0xdcaf4cbc
and r10d, edx
add r10d, r10d
sub r9d, r10d
add r9b, 0xdc
jmp 0x140001715
lea r8, [rcx + 6]
cmp rdi, r8
je 0x14000160a
lea r8, [rcx + 3]
cmp rdi, r8
je 0x140001675
lea r8d, [rax - 0x4c37389c]
lea r9d, [rax + rdx]
add r9d, 0xb3c8c764
and r8d, edx
add r8d, r8d
sub r9d, r8d
add r9b, 0x44
mov byte [rbp + rax - 0x50], r9b
jmp 0x14000167f
lea rsi, [rbp + 0x16ebe44]
jmp 0x14000183c
lea rsi, [rbp + 0x165f6e0]
xorps xmm0, xmm0
movaps xmmword [rbp - 0x20], xmm0
movaps xmmword [rbp - 0x30], xmm0
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x140001a7e
mov rdi, rax
cmp rax, 0xf
ja 0x140001885
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], 0xf
lea rcx, [rbp - 0x30]
mov rdx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rdi, rbp
add rdi, 0xffffffffffffffd0
jmp 0x1400018e3
mov rax, rdi
or rax, 0xf
cmp rax, 0x17
mov r14d, 0x16
cmovae r14, rax
cmp r14, 0xfff
jb 0x1400018ba
lea rcx, [r14 + 0x28]
call fcn.140024588
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1400018c6
lea rcx, [r14 + 1]
call fcn.140024588
mov rbx, rax
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], r14
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rdi, rbx
mov byte [rdi], 0
lea rcx, [rbp - 0x30]
call fcn.14001b860
mov ebx, eax
mov rax, qword [rbp - 0x18]
cmp rax, 0x10
jb 0x140001930
mov rcx, qword [rbp - 0x30]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000192b
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140001a83
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400245cc
test bl, bl
je 0x140001a5a
mov byte [section..data], 1
call qword [0x140042718]
mov qword [rbp - 0x50], 0
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 1
call rbx
mov byte [rbp - 0xa], 0x7c
mov byte [rbp - 9], 0
add byte [rbp - 0xa], 0xfb
mov byte [rbp - 0x30], 0x44
mov byte [rbp - 0x2f], 0x50
mov byte [rbp - 0x2e], 0x4f
mov byte [rbp - 0x2d], 0x50
mov byte [rbp - 0x2c], 0x56
mov byte [rbp - 0x2b], 0x55
mov byte [rbp - 0x2a], 0x25
mov byte [rbp - 0x29], 0
dec byte [rbp - 0x30]
dec byte [rbp - 0x2f]
dec byte [rbp - 0x2e]
dec byte [rbp - 0x2d]
dec byte [rbp - 0x2c]
dec byte [rbp - 0x2b]
dec byte [rbp - 0x2a]
mov rdi, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
lea rsi, [rbp - 0x50]
lea rdx, [rbp - 0x30]
lea r8, [rbp - 0xa]
mov rcx, rsi
mov r9, rax
call rdi
xor ecx, ecx
call rbx
mov byte [rbp - 0xa], 0x7c
mov byte [rbp - 9], 0
add byte [rbp - 0xa], 0xf6
mov dword [rbp - 0x30], 0x3e
lea rdx, [rbp - 0x2c]
mov byte [rbp - 0x2c], 0x7d
mov byte [rbp - 0x2b], 0x71
mov byte [rbp - 0x2a], 0x70
mov byte [rbp - 0x29], 0x77
mov byte [rbp - 0x28], 0x70
mov byte [rbp - 0x27], 0x1a
mov byte [rbp - 0x26], 0
movzx ecx, byte [rbp - 0x2c]
mov r8d, dword [rbp - 0x30]
xor r8b, cl
mov byte [rbp - 0x2c], r8b
movzx ecx, byte [rbp - 0x2b]
mov r8d, dword [rbp - 0x30]
xor r8b, cl
mov byte [rbp - 0x2b], r8b
movzx ecx, byte [rbp - 0x2a]
mov r8d, dword [rbp - 0x30]
xor r8b, cl
mov byte [rbp - 0x2a], r8b
movzx ecx, byte [rbp - 0x29]
mov r8d, dword [rbp - 0x30]
xor r8b, cl
mov byte [rbp - 0x29], r8b
movzx ecx, byte [rbp - 0x28]
mov r8d, dword [rbp - 0x30]
xor r8b, cl
mov byte [rbp - 0x28], r8b
movzx ecx, byte [rbp - 0x27]
mov r8d, dword [rbp - 0x30]
xor r8b, cl
mov byte [rbp - 0x27], r8b
mov byte [rbp - 0x26], 0
lea r8, [rbp - 0xa]
mov rcx, rsi
mov r9, rax
call rdi
jmp 0x140001a60
call qword [0x140042710]
lea rcx, section..text
mov edx, 1
call qword [0x140042788]
nop
add rsp, 0x70
pop rbx
pop rdi
pop rsi
pop r14
pop rbp
ret
call fcn.140005180
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3