Function at 0x14000f930
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2d0]
sub rsp, 0x3d0
mov qword [rbp + 0x50], 0xfffffffffffffffe
mov qword [rsp + 0x420], rbx
mov rax, qword [0x1400970b0]
xor rax, rsp
mov qword [rbp + 0x2c0], rax
mov qword [rbp - 0x70], r9
movzx edi, r8b
movzx r14d, dl
mov r12, rcx
mov rcx, qword [rbp + 0x330]
mov qword [rbp + 0x28], rcx
mov rcx, qword [rbp + 0x338]
mov qword [rbp + 0x20], rcx
mov rcx, qword [rbp + 0x340]
mov qword [rbp + 0x18], rcx
mov byte [r9], 0
call fcn.140034030
mov rcx, rax
test rax, rax
jne 0x14000f9b8
mov ecx, 0x80004005
call fcn.140033340
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
or rsi, 0xffffffffffffffff
test r12, r12
je 0x14000fa0c
test r12, 0xffffffffffff0000
jne 0x14000f9fd
movzx ebx, r12w
xor edx, edx
mov ecx, ebx
call fcn.140033290
test rax, rax
je 0x14000fa1f
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140034430
jmp 0x14000fa1f
mov rax, rsi
inc rax
cmp byte [r12 + rax], 0
jne 0x14000fa00
jmp 0x14000fa0e
xor eax, eax
mov r8d, eax
mov rdx, r12
lea rcx, [rsp + 0x58]
call fcn.140036c10
nop
mov dword [rbp + 0x162], 0x3d6469
mov dword [rbp + 0x15b], 0x68702e67
mov word [rbp + 0x15f], 0x3f70
mov byte [rbp + 0x161], 0x75
mov word [rbp + 0x158], 0x6c2f
mov byte [rbp + 0x15a], 0x6f
call fcn.140034030
mov rcx, rax
test rax, rax
jne 0x14000fa6b
mov ecx, 0x80004005
call fcn.140033340
int3
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x48], rbx
mov word [rsp + 0x31], 0x3d6d
mov byte [rsp + 0x30], 0x26
mov byte [rsp + 0x33], 0
lea r8, [rsp + 0x58]
lea rdx, [rbp + 0x158]
test dil, dil
je 0x14000fc24
mov dword [rbp + 0x19c], 0x3d6e6f
mov word [rbp + 0x193], 0x2632
mov word [rbp + 0x190], 0x7026
mov word [rbp + 0x197], 0x6574
mov word [rbp + 0x19a], 0x6973
mov word [rbp + 0x195], 0x7865
mov byte [rbp + 0x192], VarI4FromDate
mov byte [rbp + 0x199], 0x6e
lea rcx, [rbp - 0x48]
call fcn.1400326c0
nop
lea r8, [rsp + 0x30]
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.1400325f0
nop
lea r8, str.5e5399be05004b61a31c45de7d4b854d
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.1400325f0
nop
lea r8, [rbp + 0x190]
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.1400325f0
nop
lea rcx, [0x14006f83c]
lea r8, [0x14006fad8]
test r14b, r14b
cmovne r8, rcx
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.1400325f0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14000fba3
cmp dword [rbx + 0x10], 0
jl 0x14000fb94
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14000fb94
call fcn.140033580
mov rdi, rax
mov eax, esi
lock xadd dword [rbx + 0x10], eax
sub eax, 1
jg 0x14000fb89
mov rcx, qword [rbx]
mov rax, qword [rcx]
mov rdx, rbx
call qword [rax + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x48], rax
jmp 0x14000fba3
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x48]
call fcn.140036c10
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000fbc1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000fbdf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000fbfd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000fc1b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x48]
jmp 0x14000fd93
mov dword [rbp + 0x1ab], 0x3d6e6f69
mov dword [rbp + 0x1a6], 0x6e657478
mov dword [rbp + 0x1a0], 0x313d7026
mov word [rbp + 0x1a4], 0x6526
mov byte [rbp + 0x1aa], 0x73
mov byte [rbp + 0x1af], 0
lea rcx, [rbp - 0x20]
call fcn.1400326c0
nop
lea r8, [rsp + 0x30]
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.1400325f0
nop
lea r8, str.5e5399be05004b61a31c45de7d4b854d
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.1400325f0
nop
lea r8, [rbp + 0x1a0]
mov rdx, rax
lea rcx, [rbp - 0x38]
call fcn.1400325f0
nop
lea rcx, [0x14006f83c]
lea r8, [0x14006fad8]
test r14b, r14b
cmovne r8, rcx
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.1400325f0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14000fd17
cmp dword [rbx + 0x10], 0
jl 0x14000fd08
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14000fd08
call fcn.140033580
mov rdi, rax
mov eax, esi
lock xadd dword [rbx + 0x10], eax
sub eax, 1
jg 0x14000fcfd
mov rcx, qword [rbx]
mov rax, qword [rcx]
mov rdx, rbx
call qword [rax + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x48], rax
jmp 0x14000fd17
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x48]
call fcn.140036c10
nop
mov rdx, qword [rbp - 0x40]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000fd35
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x38]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000fd53
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000fd71
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000fd8f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000fdac
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
call fcn.140034030
mov rcx, rax
test rax, rax
jne 0x14000fdc4
mov ecx, 0x80004005
call fcn.140033340
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
mov dword [rbp + 0x188], 0x73257325
mov dword [rbp + 0x183], 0x2f3a7370
mov word [rbp + 0x180], 0x7468
mov byte [rbp + 0x18c], 0
mov byte [rbp + 0x182], 0x74
mov byte [rbp + 0x187], 0x2f
lea rcx, [rbp - 0x18]
call fcn.140034110
nop
mov r9, qword [rsp + 0x48]
mov r8, qword [rax]
lea rdx, [rbp + 0x180]
lea rcx, [rsp + 0x70]
call fcn.140033b50
nop
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000fe46
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor edi, edi
mov r15d, edi
movzx r13d, byte [rbp + 0x350]
cmp r15d, 3
jne 0x14000fe9f
mov dword [rbp + 0x16c], 0x706870
mov dword [rbp + 0x168], 0x2e676f6c
mov dword [rbp + 0x153], 0x706870
mov word [rbp + 0x150], 0x676c
mov byte [rbp + 0x152], 0x2e
lea r8, [rbp + 0x150]
lea rdx, [rbp + 0x168]
lea rcx, [rsp + 0x70]
call fcn.1400360d0
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x1b0]
call fcn.140045030
mov edx, 0x104
lea rcx, [rbp + 0x1b0]
call fcn.140007420
lea rcx, [rbp + 0x118]
call fcn.140026bc0
nop
mov qword [rbp + 0xb0], 0xf
mov qword [rbp + 0xa8], rdi
mov byte [rbp + 0x98], 0
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
call fcn.140033580
add rax, 0x18
mov qword [rsp + 0x68], rax
mov word [rbp + 0x170], 0x7426
mov dword [rbp + 0x175], 0x64253d
mov word [rbp + 0x173], 0x656d
mov byte [rbp + 0x172], 0x69
call fcn.140023f10
mov r8d, eax
lea rdx, [rbp + 0x170]
lea rcx, [rsp + 0x68]
call fcn.140033160
mov dword [rsp + 0x34], edi
mov qword [rbp + 0xd0], 0xf
mov qword [rbp + 0xc8], rdi
mov byte [rbp + 0xb8], 0
cmp byte [rbp + 0x1b0], 0
jne 0x14000ff68
mov r8, rdi
jmp 0x14000ff7c
lea rax, [rbp + 0x1b0]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14000ff72
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0xb8]
call fcn.14002c510
nop
mov qword [rbp + 0x48], 0xf
mov qword [rbp + 0x40], rdi
mov byte [rbp + 0x30], 0
mov rbx, qword [rsp + 0x68]
cmp byte [rbx], 0
jne 0x14000ffaf
mov r8, rdi
jmp 0x14000ffbc
mov r8, rsi
inc r8
cmp byte [rbx + r8], 0
jne 0x14000ffb2
mov rdx, rbx
lea rcx, [rbp + 0x30]
call fcn.14002c510
lea rax, [rbp + 0x98]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xb8]
lea r8, [rsp + 0x34]
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x118]
call fcn.140027830
movzx edi, al
lea rcx, [rbp + 0xb8]
call fcn.14002a3d0
test dil, dil
jne 0x140010018
mov ecx, 0x1f4
call fcn.140024240
nop
lea rdx, [rbx - 0x18]
jmp 0x1400103de
call fcn.140034030
mov rcx, rax
test rax, rax
je 0x14001050b
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
mov r8d, dword [rsp + 0x34]
lea rdx, str.itcdl__d
lea rcx, [rsp + 0x50]
call fcn.140033b50
lea rax, [rbp - 0x78]
mov qword [rsp + 0x60], rax
mov r14, qword [rsp + 0x50]
add r14, 0xffffffffffffffe8
mov rcx, r14
call fcn.140033580
add rax, 0x18
mov qword [rbp - 0x78], rax
mov rdx, r12
lea rcx, [rbp - 0x10]
call fcn.140031410
nop
lea rdx, [rbp - 0x78]
mov rcx, rax
call fcn.140008810
mov qword [rbp + 0x70], 0xf
xor edi, edi
mov qword [rbp + 0x68], rdi
mov byte [rbp + 0x58], dil
cmp dword [rsp + 0x34], 0x100000
jge 0x140010394
mov qword [rbp + 0x110], 0xf
mov qword [rbp + 0x108], rdi
mov byte [rbp + 0xf8], dil
cmp byte [rbp + 0x1b0], dil
jne 0x1400100d0
mov r8d, edi
jmp 0x1400100ea
lea rax, [rbp + 0x1b0]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400100e0
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0xf8]
call fcn.14002c510
nop
mov qword [rbp + 0xf0], 0xf
mov qword [rbp + 0xe8], rdi
mov byte [rbp + 0xd8], 0
cmp byte [rbx], 0
jne 0x140010121
mov r8, rdi
jmp 0x14001012e
mov r8, rsi
inc r8
cmp byte [rbx + r8], 0
jne 0x140010124
mov rdx, rbx
lea rcx, [rbp + 0xd8]
call fcn.14002c510
nop
lea r9, [rbp + 0x58]
lea r8, [rbp + 0xf8]
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x118]
call fcn.140026dc0
movzx ebx, al
lea rcx, [rbp + 0xd8]
call fcn.14002a3d0
nop
lea rcx, [rbp + 0xf8]
call fcn.14002a3d0
test bl, bl
je 0x140010394
mov r8d, 0xa
cmp qword [rbp + 0x68], r8
cmovbe r8, qword [rbp + 0x68]
lea rdx, [rbp + 0x58]
cmp qword [rbp + 0x70], 0x10
cmovae rdx, qword [rbp + 0x58]
mov qword [rbp + 0x90], 0xf
mov qword [rbp + 0x88], rdi
mov byte [rbp + 0x78], 0
lea rcx, [rbp + 0x78]
call fcn.14002c510
nop
lea r9, [rbp + 0x78]
cmp qword [rbp + 0x90], 0x10
cmovae r9, qword [rbp + 0x78]
mov r8d, dword [rbp + 0x68]
lea rdx, str.itcsal__d__s
lea rcx, [rsp + 0x50]
call fcn.140033b50
lea rax, [rbp - 0x80]
mov qword [rsp + 0x78], rax
mov r14, qword [rsp + 0x50]
add r14, 0xffffffffffffffe8
mov rcx, r14
call fcn.140033580
add rax, 0x18
mov qword [rbp - 0x80], rax
mov rdx, r12
lea rcx, [rbp - 8]
call fcn.140031410
nop
lea rdx, [rbp - 0x80]
mov rcx, rax
call fcn.140008810
cmp qword [rbp + 0x68], 0xa
jae 0x14001038b
lea rdx, [rbp + 0x58]
cmp qword [rbp + 0x70], 0x10
cmovae rdx, qword [rbp + 0x58]
lea rcx, [rsp + 0x38]
call fcn.140031410
nop
mov rdi, qword [rsp + 0x38]
xor ebx, ebx
cmp byte [rdi], bl
je 0x1400102c4
nop dword [rax]
movsx ecx, byte [rdi]
call fcn.14004e7c4
test eax, eax
je 0x140010266
test rbx, rbx
jne 0x140010268
mov rbx, rdi
jmp 0x140010268
xor ebx, ebx
mov rcx, rdi
call fcn.14004e330
mov rdi, rax
cmp byte [rax], 0
jne 0x140010250
test rbx, rbx
je 0x1400102c4
mov rax, qword [rsp + 0x38]
sub ebx, eax
js 0x140010428
mov edx, 1
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, ebx
or ecx, edx
jge 0x1400102ac
mov edx, ebx
lea rcx, [rsp + 0x38]
call fcn.140035d70
mov rax, qword [rsp + 0x38]
cmp ebx, dword [rax - 0xc]
jg 0x14001041d
mov dword [rax - 0x10], ebx
movsxd rcx, ebx
mov rax, qword [rsp + 0x38]
mov byte [rcx + rax], 0
lea rcx, [rsp + 0x38]
call fcn.140036d00
mov word [rsp + 0x40], 0x3031
mov byte [rsp + 0x42], 0
mov rax, qword [rsp + 0x38]
cmp dword [rax - 0x10], 0
jl 0x140010371
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.14004e4d0
mov rcx, rax
test rax, rax
mov rax, qword [rsp + 0x38]
je 0x140010371
cmp ecx, eax
js 0x140010371
lea rax, [rbp]
mov qword [rsp + 0x78], rax
lea rdx, str.itcsa10
lea rcx, [rbp]
call fcn.140031410
mov rbx, rax
mov rdx, r12
lea rcx, [rbp + 8]
call fcn.140031410
nop
mov rdx, rbx
mov rcx, rax
call fcn.140008810
mov rdx, r12
lea rcx, [rbp + 0x10]
call fcn.140031410
mov byte [rsp + 0x28], r13b
mov rcx, qword [rbp + 0x348]
mov qword [rsp + 0x20], rcx
mov r9, qword [rbp + 0x18]
mov r8, qword [rbp + 0x20]
mov rdx, qword [rbp + 0x28]
mov rcx, rax
call fcn.14000ec80
mov rax, qword [rsp + 0x38]
lea rdx, [rax - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001038b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
lea rcx, [rbp + 0x78]
call fcn.14002a3d0
mov eax, dword [rsp + 0x34]
add eax, 0xfffffff0
cmp eax, 0xffff0
ja 0x140010437
mov ecx, 0x1f4
call fcn.140024240
nop
lea rcx, [rbp + 0x58]
call fcn.14002a3d0
nop
mov eax, esi
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x1400103d5
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400103f4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
lea rcx, [rbp + 0x98]
call fcn.14002a3d0
nop
lea rcx, [rbp + 0x118]
call fcn.140026c90
inc r15d
cmp r15d, 6
jge 0x140010433
xor edi, edi
jmp 0x14000fe53
mov ecx, 0x80070057
call fcn.140033340
int3
mov ecx, 0x80070057
call fcn.140033340
nop
xor bl, bl
jmp 0x1400104ab
mov rax, qword [rbp - 0x70]
mov byte [rax], 1
cmp dword [rsp + 0x34], 0x100000
setg bl
lea rcx, [rbp + 0x58]
call fcn.14002a3d0
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140010472
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140010491
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
lea rcx, [rbp + 0x98]
call fcn.14002a3d0
nop
lea rcx, [rbp + 0x118]
call fcn.140026c90
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400104ca
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400104e9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rax, qword [rsp + 0x58]
lea rdx, [rax - 0x18]
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x140010506
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [r8 + 8]
movzx eax, bl
jmp 0x140010516
mov ecx, 0x80004005
call fcn.140033340
nop
mov rcx, qword [rbp + 0x2c0]
xor rcx, rsp
call fcn.14003ff20
mov rbx, qword [rsp + 0x420]
add rsp, 0x3d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret