Function at 0x14001a800
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x280]
sub rsp, 0x380
mov qword [rbp + 0x20], 0xfffffffffffffffe
mov rax, qword [0x1401c3e90]
xor rax, rsp
mov qword [rbp + 0x270], rax
mov r14, r8
mov rdi, rdx
mov r15, rcx
xor r12d, r12d
mov word [rbp + 0x60], r12w
xor edx, edx
mov r8d, 0x206
lea rcx, [rbp + 0x62]
call fcn.1400d6ac0
mov r8d, 0x104
lea rdx, [rbp + 0x60]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x14001a942
mov eax, dword [0x1401cbd80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
cmp ecx, 5
jne 0x14001a8a5
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1401cbd80], eax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x60], rax
lea rdx, str.e0d7c2ded3d1d7e6dad7f3d5d7dcc6edf5d7c6ffddd6c7ded7f4dbded7fcd3dfd7ed
lea rcx, [rbp - 0x50]
call fcn.140002110
nop
mov rdx, rax
lea rcx, [rbp]
call fcn.14002a5d0
mov rbx, rax
lea rcx, [0x1401c39a8]
mov rdx, qword [0x1401c39a8]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
mov r8, rbx
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x18]
call fcn.140023520
nop
mov rdx, rax
mov rcx, r15
call fcn.1400158e0
nop
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001a91f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001a939
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp]
jmp 0x14001b03e
lea rcx, [0x1401c39a8]
mov rax, qword [0x1401c39a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x20], rax
mov r8, rdi
lea rdx, str._echo_off_r_nIF_NOT____XIST__
lea rcx, [rbp - 0x80]
call fcn.14001ca10
nop
lea r8, str.__GOTO____ND_r_nS___T__a_i0_r_n
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.14001c930
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x20]
call fcn.140010fc0
nop
mov rdx, qword [rbp + 0x10]
add rdx, 0xffffffffffffffe8
or rsi, 0xffffffffffffffff
lock add dword [rdx + 0x10], esi
jg 0x14001a9b2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001a9ca
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401c39a8]
mov rax, qword [0x1401c39a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x30], rax
lea rdx, str.:LOOP_r_nIF__i_
test rdx, 0xffffffffffff0000
jne 0x14001aa15
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14001aa26
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400025b0
jmp 0x14001aa26
mov r8d, 0xe
lea rcx, [rsp + 0x30]
call fcn.1400022c0
nop
lea r8, str.100_GOTO____ND_r_n
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x20]
call fcn.14001c930
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x20]
call fcn.140010fc0
nop
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001aa67
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001aa80
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r8, rdi
lea rdx, str.MOV_____Y__
lea rcx, [rbp - 0x10]
call fcn.14001ca10
nop
lea r8, [0x1401564f0]
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14001c930
nop
lea r8, [rbp + 0x60]
mov rdx, rax
lea rcx, [rbp - 8]
call fcn.14001c930
nop
lea r8, [0x1401564e8]
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.14001c930
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x20]
call fcn.140010fc0
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001aaf8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001ab11
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001ab2a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x10]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001ab42
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r8, rdi
lea rdx, str.IF_NOT____XIST__
lea rcx, [rbp + 8]
call fcn.14001ca10
nop
lea r8, str.__GOTO____ND_r_n
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.14001c930
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x20]
call fcn.140010fc0
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001ab97
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001abaf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r8d, 0x34
lea rdx, str.ping_1.1.1.1__n_1__w_1000___nul_r_nS___T__a_i_i_1
lea rcx, [rsp + 0x20]
call fcn.140010fc0
mov dword [rbp + 0x30], 0xa000d
mov dword [rbp + 0x34], 0x4f0047
mov dword [rbp + 0x38], 0x4f0054
mov dword [rbp + 0x3c], 0x4c0020
mov dword [rbp + 0x40], 0x4f004f
mov dword [rbp + 0x44], 0xd0050
mov dword [rbp + 0x48], 0x3a000a
mov dword [rbp + 0x4c], 0x4e0045
mov dword [rbp + 0x50], 0xd0044
mov dword [rbp + 0x54], 0x44000a
mov dword [rbp + 0x58], 0x4c0045
mov word [rbp + 0x5c], r12w
lea rcx, [rbp + 0x30]
mov rax, rsi
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x14001ac20
mov r8d, eax
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x20]
call fcn.140010fc0
mov r8d, 5
lea rdx, str.__0_r_n
lea rcx, [rsp + 0x20]
call fcn.140010fc0
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x40]
call fcn.1400293b0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x20]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14001acba
cmp dword [rbx + 0x10], 0
jl 0x14001acab
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14001acab
call fcn.140002410
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14001aca0
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x20], rax
jmp 0x14001acba
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x20]
call fcn.1400022c0
nop
mov rdx, qword [rbp - 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001acd2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [rbp - 0x30]
call fcn.1400288d0
nop
mov r8, rax
mov rdx, r14
lea rcx, [rbp + 0x18]
call fcn.140010500
nop
lea r8, str..bat
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.14001c930
nop
mov rdx, qword [rbp + 0x18]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001ad1a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001ad32
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401c39a8]
mov rax, qword [0x1401c39a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x28], rbx
lea rcx, [0x1401c39a8]
mov rax, qword [0x1401c39a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.14002a420
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x38]
call fcn.14002c9a0
test al, al
je 0x14001aef2
lea rax, [rsp + 0x70]
mov qword [rbp + 0x28], rax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x58], rax
lea rdx, [0x140154028]
lea rcx, [rsp + 0x70]
call fcn.140002110
mov rdi, rax
mov rcx, qword [rsp + 0x38]
add rcx, 0xffffffffffffffe8
call fcn.140002410
add rax, 0x18
mov qword [rsp + 0x48], rax
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.140029490
test al, al
je 0x14001ae16
call fcn.140012f90
test al, al
jne 0x14001afeb
mov eax, 0x41
mov r8d, 0xb4
test r8d, r8d
je 0x14001ae08
mov ecx, r8d
cdq
idiv r8d
mov r8d, edx
mov eax, ecx
test ecx, ecx
jne 0x14001adf3
add eax, r8d
mov dword [0x1401cbd80], eax
jmp 0x14001afeb
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x58], rcx
mov edx, eax
lea rcx, [rbp - 0x58]
call fcn.1400235e0
mov rdi, rax
lea rdx, str.e0d7c2ded3d1d7e6dad7f3d5d7dcc6ede0c7dcf7cad7ed
lea rcx, [rsp + 0x78]
call fcn.140002110
nop
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.14002a5d0
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.140023520
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14001aeb7
cmp dword [rbx + 0x10], 0
jl 0x14001aea8
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14001aea8
call fcn.140002410
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14001ae9d
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x28], rax
jmp 0x14001aeb7
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x28]
call fcn.1400022c0
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001aed0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001aee9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
jmp 0x14001afc9
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rbp - 0x48]
mov qword [rsp + 0x58], rcx
mov edx, eax
lea rcx, [rsp + 0x60]
call fcn.1400235e0
mov rdi, rax
lea rdx, str.e0d7c2ded3d1d7e6dad7f3d5d7dcc6ededc5d4ddc2d7dcedc1ed
lea rcx, [rbp - 0x48]
call fcn.140002110
nop
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.14002a5d0
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp - 0x38]
call fcn.140023520
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14001af92
cmp dword [rbx + 0x10], 0
jl 0x14001af83
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14001af83
call fcn.140002410
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14001af78
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x28], rax
jmp 0x14001af92
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x28]
call fcn.1400022c0
nop
mov rdx, qword [rbp - 0x38]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001afab
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001afc4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001afdd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [rsp + 0x28]
mov rcx, r15
call fcn.1400158e0
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001b005
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x28]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001b01f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001b039
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x20]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001b052
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rbp + 0x270]
xor rcx, rsp
call fcn.1400d1680
add rsp, 0x380
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret