Function at 0x14000f3d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rsi
sub rsp, 0x60
mov ecx, dword [0x140014c38]
mov dword [rsp + 0x38], ecx
mov eax, dword [rsp + 0x38]
imul eax, eax, 0xaaaaaaab
add eax, 0x2aaaaaaa
cmp eax, 0x55555555
jb 0x14000f426
mov eax, dword [rsp + 0x38]
add eax, ecx
add eax, 2
mov dword [rsp + 0x38], eax
nop word cs:[rax + rax]
nop dword [rax]
mov eax, dword [rsp + 0x38]
test al, 3
jne 0x14000f50d
add dword [rsp + 0x38], 1
jmp 0x14000f410
mov edx, dword [rsp + 0x38]
mov eax, dword [rsp + 0x38]
test dl, 1
jne 0x14000f488
mov edx, dword [rsp + 0x38]
test al, 3
je 0x14000f4d0
add edx, 2
add ecx, 3
imul ecx, edx
mov dword [rsp + 0x38], ecx
jmp 0x14000f457
add eax, 0xffffffff
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x38]
test al, 1
jne 0x14000f50d
mov eax, dword [rsp + 0x38]
imul ecx, eax, 0xcccccccd
add ecx, 0x19999999
mov eax, dword [rsp + 0x38]
cmp ecx, 0x33333333
jae 0x14000f450
add eax, 1
mov dword [rsp + 0x38], eax
jmp 0x14000f457
sub eax, ecx
add eax, 2
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x38]
imul eax, eax, 0xaaaaaaab
add eax, 0x2aaaaaaa
cmp eax, 0x55555554
ja 0x14000f50d
nop word [rax + rax]
add dword [rsp + 0x38], 1
mov eax, dword [rsp + 0x38]
imul eax, eax, 0xaaaaaaab
add eax, 0x2aaaaaaa
cmp eax, 0x55555555
jb 0x14000f4b0
jmp 0x14000f50d
imul eax, edx, 0xcccccccd
add eax, 0x19999999
cmp eax, 0x33333333
jb 0x14000f50d
mov eax, dword [rsp + 0x38]
add eax, 0xb
add ecx, 0x17
cdq
idiv ecx
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x38]
imul eax, eax, 0xaaaaaaab
add eax, 0x2aaaaaaa
cmp eax, 0x55555554
jbe 0x14000f6e5
mov rax, qword [0x140014c40]
mov byte [rsp + 0x38], 0
lea rdx, [rsp + 0x39]
mov byte [rsp + 0x39], 0x2f
mov byte [rsp + 0x3a], 0x10
mov byte [rsp + 0x3b], 0xb
mov byte [rsp + 0x3c], 0xd
mov byte [rsp + 0x3d], 0xc
mov byte [rsp + 0x3e], 0x18
mov byte [rsp + 0x3f], 0x15
mov byte [rsp + 0x40], 0x38
mov byte [rsp + 0x41], 0x15
mov byte [rsp + 0x42], 0x15
mov byte [rsp + 0x43], 0x16
mov byte [rsp + 0x44], 0x1a
mov byte [rsp + 0x45], 0x3c
mov byte [rsp + 0x46], 1
mov byte [rsp + 0x47], 0x37
mov byte [rsp + 0x48], 0xc
mov byte [rsp + 0x49], 0x14
mov byte [rsp + 0x4a], 0x18
mov byte [rsp + 0x4b], 0x79
mov cl, byte [rsp + 0x38]
test cl, 1
jne 0x14000f5e5
xor byte [rsp + 0x39], 0x79
xor byte [rsp + 0x3a], 0x79
xor byte [rsp + 0x3b], 0x79
xor byte [rsp + 0x3c], 0x79
xor byte [rsp + 0x3d], 0x79
xor byte [rsp + 0x3e], 0x79
xor byte [rsp + 0x3f], 0x79
xor byte [rsp + 0x40], 0x79
xor byte [rsp + 0x41], 0x79
xor byte [rsp + 0x42], 0x79
xor byte [rsp + 0x43], 0x79
xor byte [rsp + 0x44], 0x79
xor byte [rsp + 0x45], 0x79
xor byte [rsp + 0x46], 0x79
xor byte [rsp + 0x47], 0x79
xor byte [rsp + 0x48], 0x79
xor byte [rsp + 0x49], 0x79
xor byte [rsp + 0x4a], 0x79
xor byte [rsp + 0x4b], 0x79
mov rcx, qword [0x140014c38]
call rax
mov rsi, rax
test rax, rax
je 0x14000f628
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 4
mov r8d, 0x3e8
mov rcx, rax
xor edx, edx
mov r9d, 0x3000
call rsi
test rax, rax
je 0x14000fae2
mov dword [rsp + 0x38], esi
mov eax, dword [rsp + 0x38]
imul eax, eax, 0xaaaaaaab
add eax, 0x2aaaaaaa
cmp eax, 0x55555555
jb 0x14000f666
mov eax, dword [rsp + 0x38]
add eax, esi
add eax, 2
mov dword [rsp + 0x38], eax
nop
mov eax, dword [rsp + 0x38]
test al, 3
jne 0x14000f78d
add dword [rsp + 0x38], 1
jmp 0x14000f650
mov ecx, dword [rsp + 0x38]
mov eax, dword [rsp + 0x38]
test cl, 1
jne 0x14000f706
mov ecx, dword [rsp + 0x38]
test al, 3
je 0x14000f750
add ecx, 2
lea eax, [rsi + 3]
imul eax, ecx
jmp 0x14000f693
add eax, 1
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x38]
test al, 1
jne 0x14000f78d
mov eax, dword [rsp + 0x38]
imul ecx, eax, 0xcccccccd
add ecx, 0x19999999
mov eax, dword [rsp + 0x38]
cmp ecx, 0x33333333
jb 0x14000f690
add eax, 0xffffffff
jmp 0x14000f693
add eax, 0xffffffff
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x38]
imul eax, eax, 0xaaaaaaab
add eax, 0x2aaaaaaa
cmp eax, 0x55555555
jae 0x14000f50d
mov eax, dword [rsp + 0x38]
imul ecx, eax, 0xcccccccd
add ecx, 0x19999999
mov eax, dword [rsp + 0x38]
cmp ecx, 0x33333333
jb 0x14000f6c4
add eax, 1
jmp 0x14000f6c7
sub eax, esi
add eax, 2
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x38]
imul eax, eax, 0xaaaaaaab
add eax, 0x2aaaaaaa
cmp eax, 0x55555554
ja 0x14000f78d
nop word cs:[rax + rax]
nop
add dword [rsp + 0x38], 1
mov eax, dword [rsp + 0x38]
imul eax, eax, 0xaaaaaaab
add eax, 0x2aaaaaaa
cmp eax, 0x55555555
jb 0x14000f730
jmp 0x14000f78d
imul eax, ecx, 0xcccccccd
add eax, 0x19999999
cmp eax, 0x33333333
jb 0x14000f78d
mov eax, dword [rsp + 0x38]
add eax, 0xb
lea ecx, [rsi + 0x17]
cdq
idiv ecx
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x38]
imul eax, eax, 0xaaaaaaab
add eax, 0x2aaaaaaa
cmp eax, 0x55555554
jbe 0x14000fac1
mov rsi, qword [0x140014c40]
mov byte [rsp + 0x38], 0
mov byte [rsp + 0x39], 0x63
mov byte [rsp + 0x3a], 0x52
mov byte [rsp + 0x3b], 0x45
mov byte [rsp + 0x3c], 0x41
mov byte [rsp + 0x3d], 0x54
mov byte [rsp + 0x3e], 0x45
mov byte [rsp + 0x3f], 0x66
mov byte [rsp + 0x40], 0x49
mov byte [rsp + 0x41], 0x4c
mov byte [rsp + 0x42], 0x45
mov byte [rsp + 0x43], 0x6d
mov byte [rsp + 0x44], 0x41
mov byte [rsp + 0x45], 0x50
mov byte [rsp + 0x46], 0x50
mov byte [rsp + 0x47], 0x49
mov byte [rsp + 0x48], 0x4e
mov byte [rsp + 0x49], 0x47
mov byte [rsp + 0x4a], 0x6e
mov byte [rsp + 0x4b], 0x55
mov byte [rsp + 0x4c], 0x4d
mov byte [rsp + 0x4d], 0x41
mov byte [rsp + 0x4e], 0x61
mov byte [rsp + 0x4f], 0x20
lea rcx, [rsp + 0x38]
call fcn.14000daa0
mov rcx, qword [0x140014c38]
mov rdx, rax
call rsi
test rax, rax
je 0x14000f85d
mov dword [rsp + 0x30], 0xffffffff
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x1000
mov rcx, 0xffffffffffffffff
xor edx, edx
mov r8d, 4
xor r9d, r9d
call rax
test rax, rax
je 0x14000fae2
mov rax, qword [0x140014c40]
mov byte [rsp + 0x38], 0
lea rdx, [rsp + 0x39]
mov byte [rsp + 0x39], 0x4b
mov byte [rsp + 0x3a], 0x61
mov byte [rsp + 0x3b], 0x7e
mov byte [rsp + 0x3c], 0x4c
mov byte [rsp + 0x3d], 0x61
mov byte [rsp + 0x3e], 0x61
mov byte [rsp + 0x3f], 0x62
mov byte [rsp + 0x40], 0x6e
mov byte [rsp + 0x41], 0xd
mov cl, byte [rsp + 0x38]
test cl, 1
jne 0x14000f8d1
xor byte [rsp + 0x39], 0xd
xor byte [rsp + 0x3a], 0xd
xor byte [rsp + 0x3b], 0xd
xor byte [rsp + 0x3c], 0xd
xor byte [rsp + 0x3d], 0xd
xor byte [rsp + 0x3e], 0xd
xor byte [rsp + 0x3f], 0xd
xor byte [rsp + 0x40], 0xd
xor byte [rsp + 0x41], 0xd
mov rcx, qword [0x140014c38]
call rax
test rax, rax
je 0x14000f8ec
xor ecx, ecx
call rax
cmp eax, 0xffffffff
je 0x14000fae2
mov byte [rsp + 0x50], 0
mov byte [rsp + 0x51], 0x3a
mov byte [rsp + 0x52], 0x3a
mov byte [rsp + 0x53], 0
mov byte [rsp + 0x54], 8
mov byte [rsp + 0x55], 0x15
mov byte [rsp + 0x56], 0x11
mov byte [rsp + 0x57], 0x1c
mov byte [rsp + 0x58], 0x65
mov al, byte [rsp + 0x50]
test al, 1
jne 0x14000f949
xor byte [rsp + 0x51], 0x65
xor byte [rsp + 0x52], 0x65
xor byte [rsp + 0x53], 0x65
xor byte [rsp + 0x54], 0x65
xor byte [rsp + 0x55], 0x65
xor byte [rsp + 0x56], 0x65
xor byte [rsp + 0x57], 0x65
xor byte [rsp + 0x58], 0x65
lea rdx, [rsp + 0x51]
mov byte [rsp + 0x38], 0
lea rcx, [rsp + 0x39]
mov byte [rsp + 0x39], 0x29
mov byte [rsp + 0x3a], 0x50
mov byte [rsp + 0x3b], 0x36
mov byte [rsp + 0x3c], 0x3d
mov byte [rsp + 0x3d], 3
mov byte [rsp + 0x3e], 4
mov byte [rsp + 0x3f], 0xe
mov byte [rsp + 0x40], 5
mov byte [rsp + 0x41], 0x1d
mov byte [rsp + 0x42], 0x19
mov byte [rsp + 0x43], 0x36
mov byte [rsp + 0x44], 0x3d
mov byte [rsp + 0x45], 0xf
mov byte [rsp + 0x46], 8
mov byte [rsp + 0x47], 0x36
mov byte [rsp + 0x48], 0x40
mov byte [rsp + 0x49], 0x6a
mov al, byte [rsp + 0x38]
test al, 1
jne 0x14000fa0a
xor byte [rsp + 0x39], 0x6a
xor byte [rsp + 0x3a], 0x6a
xor byte [rsp + 0x3b], 0x6a
xor byte [rsp + 0x3c], 0x6a
xor byte [rsp + 0x3d], 0x6a
xor byte [rsp + 0x3e], 0x6a
xor byte [rsp + 0x3f], 0x6a
xor byte [rsp + 0x40], 0x6a
xor byte [rsp + 0x41], 0x6a
xor byte [rsp + 0x42], 0x6a
xor byte [rsp + 0x43], 0x6a
xor byte [rsp + 0x44], 0x6a
xor byte [rsp + 0x45], 0x6a
xor byte [rsp + 0x46], 0x6a
xor byte [rsp + 0x47], 0x6a
xor byte [rsp + 0x48], 0x6a
xor byte [rsp + 0x49], 0x6a
call fcn.1400058d0
test eax, eax
jne 0x14000fae2
mov byte [rsp + 0x38], 0
lea rcx, [rsp + 0x39]
mov byte [rsp + 0x39], 0x45
mov byte [rsp + 0x3a], 0x51
mov byte [rsp + 0x3b], 0x49
mov byte [rsp + 0x3c], 0x58
mov byte [rsp + 0x3d], 0x58
mov byte [rsp + 0x3e], 6
mov byte [rsp + 0x3f], 0x4d
mov byte [rsp + 0x40], 0x50
mov byte [rsp + 0x41], 0x4d
mov byte [rsp + 0x42], 0x28
mov al, byte [rsp + 0x38]
test al, 1
jne 0x14000fa8d
xor byte [rsp + 0x39], 0x28
xor byte [rsp + 0x3a], 0x28
xor byte [rsp + 0x3b], 0x28
xor byte [rsp + 0x3c], 0x28
xor byte [rsp + 0x3d], 0x28
xor byte [rsp + 0x3e], 0x28
xor byte [rsp + 0x3f], 0x28
xor byte [rsp + 0x40], 0x28
xor byte [rsp + 0x41], 0x28
xor byte [rsp + 0x42], 0x28
call fcn.140002320
test eax, eax
je 0x14000fae2
add rsp, 0x60
pop rsi
ret
add eax, 1
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x38]
imul eax, eax, 0xaaaaaaab
add eax, 0x2aaaaaaa
cmp eax, 0x55555555
jae 0x14000f78d
mov eax, dword [rsp + 0x38]
imul ecx, eax, 0xcccccccd
add ecx, 0x19999999
mov eax, dword [rsp + 0x38]
cmp ecx, 0x33333333
jae 0x14000faa0
add eax, 0xffffffff
jmp 0x14000faa3
mov ecx, 1
call fcn.140011438
int3