Function at 0x14009dc70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xa0
mov rax, qword [0x1400cc020]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov r12, rcx
mov qword [rbp - 0x31], 0
mov qword [rbp - 0x21], 0
mov qword [rbp - 0x19], 0xf
mov byte [rbp - 0x31], 0
mov dword [rbp - 0x39], 0x400
lea rdx, [0x1400bb4c8]
lea rcx, [rbp - 0x11]
call fcn.14009c7c0
mov r15, rax
xor esi, esi
mov eax, dword [rbp - 0x39]
test eax, eax
cmovg esi, eax
mov rcx, qword [rbp - 0x19]
cmp rcx, 1
jae 0x14009dd68
test esi, esi
jne 0x14009dd68
mov rdx, qword [rbp - 0x21]
cmp rdx, 1
jb 0x14009dd12
mov qword [rbp - 0x21], 1
lea rax, [rbp - 0x31]
cmp rcx, 0x10
cmovae rax, qword [rbp - 0x31]
mov byte [rax + 1], sil
jmp 0x14009dd64
mov edi, 1
sub rdi, rdx
mov rax, rcx
sub rax, rdx
cmp rdi, rax
ja 0x14009dd50
mov qword [rbp - 0x21], 1
lea rbx, [rbp - 0x31]
cmp rcx, 0x10
cmovae rbx, qword [rbp - 0x31]
add rbx, rdx
mov r8, rdi
xor edx, edx
mov rcx, rbx
call fcn.140063480
mov byte [rdi + rbx], 0
jmp 0x14009dd64
mov byte [rsp + 0x20], 0
mov r9, rdi
mov rdx, rdi
lea rcx, [rbp - 0x31]
call fcn.14001cb10
mov rcx, qword [rbp - 0x19]
movsxd rdx, esi
mov r8, qword [rbp - 0x21]
cmp rdx, r8
ja 0x14009dd8b
mov qword [rbp - 0x21], rdx
lea rax, [rbp - 0x31]
cmp rcx, 0x10
cmovae rax, qword [rbp - 0x31]
mov byte [rax + rdx], 0
jmp 0x14009ddd7
mov rdi, rdx
sub rdi, r8
mov rax, rcx
sub rax, r8
cmp rdi, rax
ja 0x14009ddc3
mov qword [rbp - 0x21], rdx
lea rbx, [rbp - 0x31]
cmp rcx, 0x10
cmovae rbx, qword [rbp - 0x31]
add rbx, r8
mov r8, rdi
xor edx, edx
mov rcx, rbx
call fcn.140063480
mov byte [rdi + rbx], 0
jmp 0x14009ddd7
mov byte [rsp + 0x20], 0
mov r9, rdi
mov rdx, rdi
lea rcx, [rbp - 0x31]
call fcn.14001cb10
lea rdi, [rbp - 0x31]
cmp qword [rbp - 0x19], 0x10
cmovae rdi, qword [rbp - 0x31]
cmp qword [r15 + 0x18], 0x10
jb 0x14009ddef
mov r15, qword [r15]
call fcn.1400a3820
mov rbx, rax
mov r14d, 2
test rax, rax
je 0x14009de66
mov dword [rbp + 0x14], 0x72657551
mov word [rbp + 0x12], 0x636f
mov dword [rbp + 0x1b], 0x676e6972
mov word [rbp + 0xf], 0x7341
mov word [rbp + 0x19], 0x7453
mov word [rbp + 0x1f], 0x41
mov byte [rbp + 0x11], 0x73
mov byte [rbp + 0x18], 0x79
lea rdx, [rbp + 0xf]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14009de5d
lea rcx, [rbp - 0x39]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rdi
mov r9, r15
mov r8, r12
mov edx, r14d
xor ecx, ecx
call rax
mov rcx, rbx
call fcn.140098790
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0x10
jb 0x14009dea1
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009de9c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009e53b
call fcn.14006126c
lea rcx, [rbp - 0x31]
mov rdx, qword [rbp - 0x19]
cmp rdx, 0x10
jb 0x14009debc
mov rcx, qword [rbp - 0x31]
test rcx, rcx
jne 0x14009debc
xor eax, eax
jmp 0x14009dec9
call fcn.140067b40
mov rdx, qword [rbp - 0x19]
mov rcx, qword [rbp - 0x31]
movsxd r8, eax
mov r9, qword [rbp - 0x21]
cmp r8, r9
ja 0x14009deec
mov qword [rbp - 0x21], r8
lea rax, [rbp - 0x31]
cmp rdx, 0x10
cmovae rax, rcx
mov byte [rax + r8], 0
jmp 0x14009df38
mov rdi, r8
sub rdi, r9
mov rax, rdx
sub rax, r9
cmp rdi, rax
ja 0x14009df23
mov qword [rbp - 0x21], r8
lea rbx, [rbp - 0x31]
cmp rdx, 0x10
cmovae rbx, rcx
add rbx, r9
mov r8, rdi
xor edx, edx
mov rcx, rbx
call fcn.140063480
mov byte [rdi + rbx], 0
jmp 0x14009df38
mov byte [rsp + 0x20], 0
mov r9, rdi
mov rdx, rdi
lea rcx, [rbp - 0x31]
call fcn.14001cb10
nop
mov cl, 1
call fcn.140060270
mov r15, rax
mov qword [rbp + 0x17], rax
lea rsi, [rbp - 0x31]
mov r8, qword [rbp - 0x31]
cmp qword [rbp - 0x19], 0x10
cmovae rsi, r8
lea r12, [rbp - 0x31]
cmovae r12, r8
add r12, qword [rbp - 0x21]
lea rdi, [rbp - 0x31]
cmp qword [rbp - 0x19], 0x10
cmovae rdi, r8
cmp rdi, r12
je 0x14009dfa4
sub rsi, rdi
nop dword [rax + rax]
movzx ebx, byte [rdi]
lea rcx, [rbp + 0xf]
call fcn.14001a820
mov r8, qword [rax]
movzx edx, bl
mov rcx, rax
call qword [r8 + 0x30]
mov byte [rsi + rdi], al
inc rdi
cmp rdi, r12
jne 0x14009df80
test r15, r15
je 0x14009dfc5
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x10]
test rax, rax
je 0x14009dfc5
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8]
lea rdx, [0x1400bb4e0]
lea rcx, [rbp - 0x11]
call fcn.14009c7c0
mov rdi, rax
cmp qword [rax + 0x18], 0x10
jb 0x14009dfe2
mov rdi, qword [rax]
mov rcx, rdi
call fcn.140067b40
mov rsi, rax
lea r15, [rbp - 0x31]
cmp qword [rbp - 0x19], 0x10
cmovae r15, qword [rbp - 0x31]
mov rcx, qword [rbp - 0x21]
cmp rax, rcx
ja 0x14009e065
test rax, rax
jne 0x14009e00d
xor ebx, ebx
jmp 0x14009e06c
mov r12, r15
sub r12, rsi
add r12, rcx
lea r8, [r12 + 1]
sub r8, r15
movsx edx, byte [rdi]
mov rcx, r15
call fcn.140063950
mov rbx, rax
test rax, rax
je 0x14009e065
mov r8, rsi
mov rdx, rdi
mov rcx, rbx
call fcn.140063870
test eax, eax
je 0x14009e10b
inc rbx
lea r8, [r12 + 1]
sub r8, rbx
movsx edx, byte [rdi]
mov rcx, rbx
call fcn.140063950
mov rbx, rax
test rax, rax
jne 0x14009e031
mov rbx, 0xffffffffffffffff
mov r12d, 0xffffffff
cmp rbx, 0xffffffffffffffff
cmove ebx, r12d
shr ebx, 0x1f
xor bl, 1
mov rdx, qword [rbp + 7]
cmp rdx, 0x10
jb 0x14009e0bb
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009e0b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009e541
call fcn.14006126c
test bl, bl
jne 0x14009e4d3
lea rdx, [0x1400bb4f8]
lea rcx, [rbp - 0x11]
call fcn.14009c7c0
mov rdi, rax
cmp qword [rax + 0x18], 0x10
jb 0x14009e0e0
mov rdi, qword [rax]
mov rcx, rdi
call fcn.140067b40
mov rsi, rax
lea r14, [rbp - 0x31]
cmp qword [rbp - 0x19], 0x10
cmovae r14, qword [rbp - 0x31]
mov rcx, qword [rbp - 0x21]
cmp rax, rcx
ja 0x14009e173
test rax, rax
jne 0x14009e113
xor ebx, ebx
jmp 0x14009e17a
sub rbx, r15
jmp 0x14009e06c
mov r15, r14
sub r15, rsi
add r15, rcx
lea r8, [r15 + 1]
sub r8, r14
movsx edx, byte [rdi]
mov rcx, r14
call fcn.140063950
mov rbx, rax
test rax, rax
je 0x14009e173
nop word [rax + rax]
mov r8, rsi
mov rdx, rdi
mov rcx, rbx
call fcn.140063870
test eax, eax
je 0x14009e213
inc rbx
lea r8, [r15 + 1]
sub r8, rbx
movsx edx, byte [rdi]
mov rcx, rbx
call fcn.140063950
mov rbx, rax
test rax, rax
jne 0x14009e140
mov rbx, 0xffffffffffffffff
cmp rbx, 0xffffffffffffffff
cmove ebx, r12d
shr ebx, 0x1f
xor bl, 1
mov rdx, qword [rbp + 7]
cmp rdx, 0x10
jb 0x14009e1c3
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009e1be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009e547
call fcn.14006126c
test bl, bl
je 0x14009e2d3
lea rdx, [0x1400bb508]
lea rcx, [rbp - 0x11]
call fcn.14009c7c0
mov rdi, rax
cmp qword [rax + 0x18], 0x10
jb 0x14009e1e8
mov rdi, qword [rax]
mov rcx, rdi
call fcn.140067b40
mov rsi, rax
lea r14, [rbp - 0x31]
cmp qword [rbp - 0x19], 0x10
cmovae r14, qword [rbp - 0x31]
mov rcx, qword [rbp - 0x21]
cmp rax, rcx
ja 0x14009e26f
test rax, rax
jne 0x14009e21b
xor ebx, ebx
jmp 0x14009e276
sub rbx, r14
jmp 0x14009e17a
mov r15, r14
sub r15, rsi
add r15, rcx
lea r8, [r15 + 1]
sub r8, r14
movsx edx, byte [rdi]
mov rcx, r14
call fcn.140063950
mov rbx, rax
test rax, rax
je 0x14009e26f
nop
mov r8, rsi
mov rdx, rdi
mov rcx, rbx
call fcn.140063870
test eax, eax
je 0x14009e2ce
inc rbx
lea r8, [r15 + 1]
sub r8, rbx
movsx edx, byte [rdi]
mov rcx, rbx
call fcn.140063950
mov rbx, rax
test rax, rax
jne 0x14009e240
mov rbx, 0xffffffffffffffff
cmp rbx, 0xffffffffffffffff
cmove ebx, r12d
shr ebx, 0x1f
xor bl, 1
mov rdx, qword [rbp + 7]
cmp rdx, 0x10
jb 0x14009e2bf
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009e2ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009e54d
call fcn.14006126c
test bl, bl
je 0x14009e2d3
mov r14d, 1
jmp 0x14009e4d3
sub rbx, r14
jmp 0x14009e276
lea rdx, [0x1400bb520]
lea rcx, [rbp - 0x11]
call fcn.14009c7c0
mov rdi, rax
cmp qword [rax + 0x18], 0x10
jb 0x14009e2f0
mov rdi, qword [rax]
mov rcx, rdi
call fcn.140067b40
mov rsi, rax
lea r14, [rbp - 0x31]
cmp qword [rbp - 0x19], 0x10
cmovae r14, qword [rbp - 0x31]
mov rcx, qword [rbp - 0x21]
cmp rax, rcx
ja 0x14009e36f
test rax, rax
jne 0x14009e31b
xor ebx, ebx
jmp 0x14009e376
mov r15, r14
sub r15, rsi
add r15, rcx
lea r8, [r15 + 1]
sub r8, r14
movsx edx, byte [rdi]
mov rcx, r14
call fcn.140063950
mov rbx, rax
test rax, rax
je 0x14009e36f
nop
mov r8, rsi
mov rdx, rdi
mov rcx, rbx
call fcn.140063870
test eax, eax
je 0x14009e3ce
inc rbx
lea r8, [r15 + 1]
sub r8, rbx
movsx edx, byte [rdi]
mov rcx, rbx
call fcn.140063950
mov rbx, rax
test rax, rax
jne 0x14009e340
mov rbx, 0xffffffffffffffff
cmp rbx, 0xffffffffffffffff
cmove ebx, r12d
shr ebx, 0x1f
xor bl, 1
mov rdx, qword [rbp + 7]
cmp rdx, 0x10
jb 0x14009e3bf
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009e3ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009e553
call fcn.14006126c
test bl, bl
je 0x14009e3d3
mov r14d, 3
jmp 0x14009e4d3
sub rbx, r14
jmp 0x14009e376
lea rdx, [0x1400bb538]
lea rcx, [rbp - 0x11]
call fcn.14009c7c0
mov rdi, rax
cmp qword [rax + 0x18], 0x10
jb 0x14009e3f0
mov rdi, qword [rax]
mov rcx, rdi
call fcn.140067b40
mov rsi, rax
lea r14, [rbp - 0x31]
cmp qword [rbp - 0x19], 0x10
cmovae r14, qword [rbp - 0x31]
mov rcx, qword [rbp - 0x21]
cmp rax, rcx
ja 0x14009e46f
test rax, rax
jne 0x14009e41b
xor ebx, ebx
jmp 0x14009e476
mov r15, r14
sub r15, rsi
add r15, rcx
lea r8, [r15 + 1]
sub r8, r14
movsx edx, byte [rdi]
mov rcx, r14
call fcn.140063950
mov rbx, rax
test rax, rax
je 0x14009e46f
nop
mov r8, rsi
mov rdx, rdi
mov rcx, rbx
call fcn.140063870
test eax, eax
je 0x14009e4cb
inc rbx
lea r8, [r15 + 1]
sub r8, rbx
movsx edx, byte [rdi]
mov rcx, rbx
call fcn.140063950
mov rbx, rax
test rax, rax
jne 0x14009e440
mov rbx, 0xffffffffffffffff
cmp rbx, 0xffffffffffffffff
cmove ebx, r12d
shr ebx, 0x1f
xor bl, 1
mov rdx, qword [rbp + 7]
cmp rdx, 0x10
jb 0x14009e4bf
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009e4ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009e559
call fcn.14006126c
test bl, bl
je 0x14009e4d0
mov r14d, 4
jmp 0x14009e4d3
sub rbx, r14
jmp 0x14009e476
xor r14d, r14d
mov rdx, qword [rbp - 0x19]
cmp rdx, 0x10
jb 0x14009e50a
inc rdx
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009e505
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009e535
call fcn.14006126c
mov eax, r14d
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.140060fb0
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.140067948
nop
call fcn.140067948
nop
call fcn.140067948
int3
call fcn.140067948
int3
call fcn.140067948
int3
call fcn.140067948
int3
call fcn.140067948
int3