Function at 0x1400018d8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rsi
push rbx
sub rsp, 0xee8
call fcn.14000df00
mov qword [rsp + 0xed8], 0xffffffffdc3cba00
lea rdx, [rsp + 0xed8]
mov ecx, 0
call fcn.140004c0d
call fcn.1400040ab
call fcn.140004840
mov rax, qword [rax + 0x20]
mov rbx, qword [rax + 0x80]
lea rcx, [rsp + 0xcd0]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x70], 0x3e
mov word [rsp + 0x72], 0x44
mov word [rsp + 0x74], 0x3e
mov word [rsp + 0x76], 0x3f
mov word [rsp + 0x78], 0x30
mov word [rsp + 0x7a], 0x38
mov word [rsp + 0x7c], 0x3d
mov word [rsp + 0x7e], 0x3a
mov word [rsp + 0x80], 0x3a
mov word [rsp + 0x82], 0x3f
mov word [rsp + 0x84], 0x28
mov word [rsp + 0x86], 0xeb
cmp byte [0x140454658], 0
jne 0x1400019d3
mov byte [0x140454678], 1
mov eax, 0
lea rcx, [0x140454660]
movzx edx, word [rsp + rax*2 + 0x70]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xc
jne 0x1400019ad
mov byte [0x140454658], 1
lea rcx, [0x140001548]
call fcn.1400014f0
cmp byte [0x140454678], 0
je 0x140001a05
lea rdx, [0x140454660]
lea rcx, [rdx + 0x18]
movzx eax, word [rdx]
add ax, 0x1915
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x1400019e7
mov byte [0x140454678], 0
lea rdx, [0x140454660]
mov rcx, rbx
call fcn.140003a56
mov rdx, rax
lea rcx, [rsp + 0xcd0]
call sub.msvcrt.dll_wcscat
lea rcx, [rsp + 0xac0]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x70], 0x33
mov word [rsp + 0x72], 0x2a
mov word [rsp + 0x74], 0x50
mov word [rsp + 0x76], 0x4a
mov word [rsp + 0x78], 0x4b
mov word [rsp + 0x7a], 0x3c
mov word [rsp + 0x7c], 0x44
mov word [rsp + 0x7e], 0xa
mov word [rsp + 0x80], 9
mov word [rsp + 0x82], 0xd7
cmp byte [0x140454638], 0
jne 0x140001aca
mov byte [0x140454654], 1
mov eax, 0
lea rcx, [0x140454640]
movzx edx, word [rsp + rax*2 + 0x70]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xa
jne 0x140001aa4
mov byte [0x140454638], 1
lea rcx, [0x140001562]
call fcn.1400014f0
cmp byte [0x140454654], 0
je 0x140001afc
lea rdx, [0x140454640]
lea rcx, [rdx + 0x14]
movzx eax, word [rdx]
sub ax, 0x2ed7
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140001ade
mov byte [0x140454654], 0
lea rdx, [rsp + 0xcd0]
lea rcx, [rsp + 0xac0]
lea r8, [0x140454640]
call fcn.1400031f0
lea rcx, [rsp + 0x8b0]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x70], 0xe3
mov word [rsp + 0x72], 0xea
mov word [rsp + 0x74], 0xf4
mov word [rsp + 0x76], 0xeb
mov word [rsp + 0x78], 0xb5
mov word [rsp + 0x7a], 0xec
mov word [rsp + 0x7c], 0xff
mov word [rsp + 0x7e], 0xec
mov word [rsp + 0x80], 0x87
cmp byte [0x140454610], 0
jne 0x140001bb4
mov byte [0x140454632], 1
mov eax, 0
lea rcx, [0x140454620]
movzx edx, word [rsp + rax*2 + 0x70]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 9
jne 0x140001b8e
mov byte [0x140454610], 1
lea rcx, [0x14000157c]
call fcn.1400014f0
cmp byte [0x140454632], 0
je 0x140001be6
lea rdx, [0x140454620]
lea rcx, [rdx + 0x12]
movzx eax, word [rdx]
sub ax, 0x3a87
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140001bc8
mov byte [0x140454632], 0
lea rdx, [rsp + 0xac0]
lea rcx, [rsp + 0x8b0]
lea r8, [0x140454620]
call fcn.1400031f0
lea rcx, [rsp + 0x6a0]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x70], 0x2d
mov word [rsp + 0x72], 0x28
mov word [rsp + 0x74], 0x3a
mov word [rsp + 0x76], 0x3f
mov word [rsp + 0x78], 0x35
mov word [rsp + 0x7a], 0x40
mov word [rsp + 0x7c], 0x48
mov word [rsp + 0x7e], 0x44
mov word [rsp + 0x80], 0x21
mov word [rsp + 0x82], 0x40
mov word [rsp + 0x84], 0x48
mov word [rsp + 0x86], 0x36
mov word [rsp + 0x88], 0x43
mov word [rsp + 0x8a], 0x24
mov word [rsp + 0x8c], 0x39
mov word [rsp + 0x8e], 0x36
mov word [rsp + 0x90], 0x3d
mov word [rsp + 0x92], 0x3d
mov word [rsp + 0x94], 0x2d
mov word [rsp + 0x96], 0x47
mov word [rsp + 0x98], 2
mov word [rsp + 0x9a], 0xff
mov word [rsp + 0x9c], 1
mov word [rsp + 0x9e], 0x2d
mov word [rsp + 0xa0], 0x41
mov word [rsp + 0xa2], 0x40
mov word [rsp + 0xa4], 0x48
mov word [rsp + 0xa6], 0x36
mov word [rsp + 0xa8], 0x43
mov word [rsp + 0xaa], 0x44
mov word [rsp + 0xac], 0x39
mov word [rsp + 0xae], 0x36
mov word [rsp + 0xb0], 0x3d
mov word [rsp + 0xb2], 0x3d
mov word [rsp + 0xb4], 0xff
mov word [rsp + 0xb6], 0x36
mov word [rsp + 0xb8], 0x49
mov word [rsp + 0xba], 0x36
mov word [rsp + 0xbc], 0xd1
cmp byte [0x1404545b0], 0
jne 0x140001dca
mov byte [0x14045460e], 1
mov eax, 0
lea rcx, [0x1404545c0]
movzx edx, word [rsp + rax*2 + 0x70]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x27
jne 0x140001da4
mov byte [0x1404545b0], 1
lea rcx, [0x140001596]
call fcn.1400014f0
cmp byte [0x14045460e], 0
je 0x140001dfc
lea rdx, [0x1404545c0]
lea rcx, [rdx + 0x4e]
movzx eax, word [rdx]
sub ax, 0x5ed1
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140001dde
mov byte [0x14045460e], 0
lea rdx, [rsp + 0xac0]
lea rcx, [rsp + 0x6a0]
lea r8, [0x1404545c0]
call fcn.1400031f0
lea rcx, [rsp + 0x490]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x70], 0x7f
mov word [rsp + 0x72], 0x86
mov word [rsp + 0x74], 0x92
mov word [rsp + 0x76], 0x91
mov word [rsp + 0x78], 0x8b
mov word [rsp + 0x7a], 0x92
mov word [rsp + 0x7c], 0x96
mov word [rsp + 0x7e], 0x97
mov word [rsp + 0x80], 0x51
mov word [rsp + 0x82], 0x88
mov word [rsp + 0x84], 0x9b
mov word [rsp + 0x86], 0x88
mov word [rsp + 0x88], 0x23
cmp byte [0x140454580], 0
jne 0x140001edc
mov byte [0x1404545aa], 1
mov eax, 0
lea rcx, [0x140454590]
movzx edx, word [rsp + rax*2 + 0x70]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xd
jne 0x140001eb6
mov byte [0x140454580], 1
lea rcx, [0x1400015b0]
call fcn.1400014f0
cmp byte [0x1404545aa], 0
je 0x140001f0e
lea rdx, [0x140454590]
lea rcx, [rdx + 0x1a]
movzx eax, word [rdx]
sub ax, 0x3c23
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140001ef0
mov byte [0x1404545aa], 0
lea rdx, [rsp + 0xac0]
lea rcx, [rsp + 0x490]
lea r8, [0x140454590]
call fcn.1400031f0
lea rcx, [rsp + 0x280]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x70], 0xe9
mov word [rsp + 0x72], 1
mov word [rsp + 0x74], 7
mov word [rsp + 0x76], 0xf1
mov word [rsp + 0x78], 2
mov word [rsp + 0x7a], 2
mov word [rsp + 0x7c], 0
mov word [rsp + 0x7e], 1
mov word [rsp + 0x80], 0xfa
mov word [rsp + 0x82], 6
mov word [rsp + 0x84], 0xf3
mov word [rsp + 0x86], 0xfe
mov word [rsp + 0x88], 0xff
mov word [rsp + 0x8a], 0xbb
mov word [rsp + 0x8c], 1
mov word [rsp + 0x8e], 0xfa
mov word [rsp + 0x90], 0xfd
mov word [rsp + 0x92], 0x8d
cmp byte [0x140454528], 0
jne 0x140002020
mov byte [0x140454564], 1
mov eax, 0
lea rcx, [0x140454540]
movzx edx, word [rsp + rax*2 + 0x70]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x12
jne 0x140001ffa
mov byte [0x140454528], 1
lea rcx, [0x1400015cb]
call fcn.1400014f0
cmp byte [0x140454564], 0
je 0x140002052
lea rdx, [0x140454540]
lea rcx, [rdx + 0x24]
movzx eax, word [rdx]
sub ax, 0x3e8d
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140002034
mov byte [0x140454564], 0
mov word [rsp + 0x70], 0xe1
mov word [rsp + 0x72], 0xd2
mov word [rsp + 0x74], 0xda
mov word [rsp + 0x76], 0xdd
mov word [rsp + 0x78], 0xca
mov word [rsp + 0x7a], 0x8d
cmp byte [0x140454568], 0
jne 0x1400020be
mov byte [0x14045457c], 1
mov eax, 0
lea rcx, [0x140454570]
movzx edx, word [rsp + rax*2 + 0x70]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 6
jne 0x140002098
mov byte [0x140454568], 1
lea rcx, [0x1400015ca]
call fcn.1400014f0
cmp byte [0x14045457c], 0
je 0x1400020f0
lea rdx, [0x140454570]
lea rcx, [rdx + 0xc]
movzx eax, word [rdx]
sub ax, 0x3e8d
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x1400020d2
mov byte [0x14045457c], 0
lea rdx, [0x140454570]
mov rcx, rbx
call fcn.140003a56
mov rdx, rax
lea rcx, [rsp + 0x280]
lea r8, [0x140454540]
call fcn.1400031f0
lea rcx, [rsp + 0x70]
mov r8d, 0xa2
lea rdx, section..rdata
call sub.msvcrt.dll_memcpy
cmp byte [0x140454478], 0
jne 0x14000216f
mov byte [0x140454522], 1
mov eax, 0
lea rcx, [0x140454480]
movzx edx, word [rsp + rax*2 + 0x70]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x51
jne 0x140002149
mov byte [0x140454478], 1
lea rcx, [0x1400015e5]
call fcn.1400014f0
cmp byte [0x140454522], 0
je 0x1400021a4
lea rdx, [0x140454480]
lea rcx, [rdx + 0xa2]
movzx eax, word [rdx]
add ax, 0x6341
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x140002186
mov byte [0x140454522], 0
lea r8, [rsp + 0x6a0]
lea rdx, [rsp + 0xac0]
mov qword [rsp + 0x20], r8
lea r9, [0x140454480]
mov ecx, 1
call fcn.14000399a
lea rcx, [rsp + 0x70]
mov r8d, 0x130
lea rdx, [0x14044d0c0]
call sub.msvcrt.dll_memcpy
cmp byte [0x140454320], 0
jne 0x140002225
mov byte [0x140454470], 1
mov eax, 0
lea rcx, [0x140454340]
movzx edx, word [rsp + rax*2 + 0x70]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x98
jne 0x1400021fd
mov byte [0x140454320], 1
lea rcx, [0x140001602]
call fcn.1400014f0
cmp byte [0x140454470], 0
je 0x14000225a
lea rdx, [0x140454340]
lea rcx, [rdx + 0x130]
movzx eax, word [rdx]
add ax, 0x498b
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x14000223c
mov byte [0x140454470], 0
lea r8, [rsp + 0x8b0]
lea rdx, [rsp + 0xac0]
mov qword [rsp + 0x20], r8
lea r9, [0x140454340]
mov ecx, 0
call fcn.14000399a
call fcn.140002937
mov ebx, eax
cmp byte [0x140454308], 0
jne 0x1400022ce
mov byte [0x140454318], 1
mov word [0x140454310], 0x18
mov word [0x140454312], 0x27
mov word [0x140454314], 0x1b
mov word [0x140454316], 0xb3
mov byte [0x140454308], 1
lea rcx, [0x14000161f]
call fcn.1400014f0
cmp byte [0x140454318], 0
je 0x140002300
lea rdx, [0x140454310]
lea rcx, [rdx + 8]
movzx eax, word [rdx]
add ax, 0x614d
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x1400022e2
mov byte [0x140454318], 0
mov word [rsp + 0x70], 0xf
mov word [rsp + 0x72], 0xf5
mov word [rsp + 0x74], 0x14
mov word [rsp + 0x76], 0x26
mov word [rsp + 0x78], 0x18
mov word [rsp + 0x7a], 1
mov word [rsp + 0x7c], 0x14
mov word [rsp + 0x7e], 0x20
mov word [rsp + 0x80], 0x18
mov word [rsp + 0x82], 0x17
mov word [rsp + 0x84], 2
mov word [rsp + 0x86], 0x15
mov word [rsp + 0x88], 0x1d
mov word [rsp + 0x8a], 0x18
mov word [rsp + 0x8c], 0x16
mov word [rsp + 0x8e], 0x27
mov word [rsp + 0x90], 0x26
mov word [rsp + 0x92], 0xf
mov word [rsp + 0x94], 0x1a
mov word [rsp + 0x96], 0x27
mov word [rsp + 0x98], 0x2c
mov word [rsp + 0x9a], 0x18
mov word [rsp + 0x9c], 0x1a
mov word [rsp + 0x9e], 0x25
mov word [rsp + 0xa0], 0x23
mov word [rsp + 0xa2], 0x15
mov word [rsp + 0xa4], 0x1b
mov word [rsp + 0xa6], 0x22
mov word [rsp + 0xa8], 0x18
mov word [rsp + 0xaa], 0x27
mov word [rsp + 0xac], 0x16
mov word [rsp + 0xae], 0x27
mov word [rsp + 0xb0], 0x15
mov word [rsp + 0xb2], 0x1f
mov word [rsp + 0xb4], 0xb3
cmp byte [0x1404542a0], 0
jne 0x140002488
mov byte [0x140454306], 1
mov eax, 0
lea rcx, [0x1404542c0]
movzx edx, word [rsp + rax*2 + 0x70]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x23
jne 0x140002462
mov byte [0x1404542a0], 1
lea rcx, [0x140001620]
call fcn.1400014f0
cmp byte [0x140454306], 0
je 0x1400024ba
lea rdx, [0x1404542c0]
lea rcx, [rdx + 0x46]
movzx eax, word [rdx]
add ax, 0x614d
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x14000249c
mov byte [0x140454306], 0
mov word [rsp + 0x70], 0xf
mov word [rsp + 0x72], 0x18
mov word [rsp + 0x74], 0x2b
mov word [rsp + 0x76], 0x23
mov word [rsp + 0x78], 0x1f
mov word [rsp + 0x7a], 0x22
mov word [rsp + 0x7c], 0x25
mov word [rsp + 0x7e], 0x18
mov word [rsp + 0x80], 0x25
mov word [rsp + 0x82], 0xe1
mov word [rsp + 0x84], 0x18
mov word [rsp + 0x86], 0x2b
mov word [rsp + 0x88], 0x18
mov word [rsp + 0x8a], 0xb3
cmp byte [0x140454278], 0
jne 0x140002570
mov byte [0x14045429c], 1
mov eax, 0
lea rcx, [0x140454280]
movzx edx, word [rsp + rax*2 + 0x70]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xe
jne 0x14000254a
mov byte [0x140454278], 1
lea rcx, [0x14000163a]
call fcn.1400014f0
cmp byte [0x14045429c], 0
je 0x1400025a2
lea rdx, [0x140454280]
lea rcx, [rdx + 0x1c]
movzx eax, word [rdx]
add ax, 0x614d
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140002584
mov byte [0x14045429c], 0
lea rcx, [rsp + 0x70]
mov r8d, 0x1d4
lea rdx, [0x14044d200]
call sub.msvcrt.dll_memcpy
cmp byte [0x140454088], 0
jne 0x1400025fd
mov byte [0x140454274], 1
mov eax, 0
lea rcx, [0x1404540a0]
movzx edx, word [rsp + rax*2 + 0x70]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xea
jne 0x1400025d5
mov byte [0x140454088], 1
lea rcx, [0x140001654]
call fcn.1400014f0
cmp byte [0x140454274], 0
je 0x140002632
lea rdx, [0x1404540a0]
lea rcx, [rdx + 0x1d4]
movzx eax, word [rdx]
add ax, 0x614d
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140002614
mov byte [0x140454274], 0
mov edx, dword [0x14044b620]
lea rcx, [0x14001a020]
call fcn.1400016f0
mov edx, dword [0x140454044]
lea rcx, [0x140454040]
call fcn.1400016f0
cmp byte [0x140454070], 0
jne 0x14000269d
mov byte [0x140454080], 1
mov word [0x140454078], 0x56
mov word [0x14045407a], 0x65
mov word [0x14045407c], 0x59
mov word [0x14045407e], 0xf1
mov byte [0x140454070], 1
lea rcx, [0x140001671]
call fcn.1400014f0
cmp byte [0x140454080], 0
je 0x1400026cf
lea rdx, [0x140454078]
lea rcx, [rdx + 8]
movzx eax, word [rdx]
add ax, 0x7b0f
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x1400026b1
mov byte [0x140454080], 0
lea rdx, [0x140454310]
lea rcx, [0x140454078]
call sub.msvcrt.dll__wcsicmp
mov esi, eax
test eax, eax
jne 0x1400026fb
test bl, bl
jne 0x1400026fb
mov eax, 0
add rsp, 0xee8
pop rbx
pop rsi
ret
lea rcx, [rsp + 0x70]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x50], 0x29
mov word [rsp + 0x52], 0x32
mov word [rsp + 0x54], 0x45
mov word [rsp + 0x56], 0x3d
mov word [rsp + 0x58], 0x39
mov word [rsp + 0x5a], 0x3c
mov word [rsp + 0x5c], 0x3f
mov word [rsp + 0x5e], 0x32
mov word [rsp + 0x60], 0x3f
mov word [rsp + 0x62], 0xfb
mov word [rsp + 0x64], 0x32
mov word [rsp + 0x66], 0x45
mov word [rsp + 0x68], 0x32
mov word [rsp + 0x6a], 0xcd
cmp byte [0x140454048], 0
jne 0x1400027b4
mov byte [0x14045406c], 1
mov eax, 0
lea rcx, [0x140454050]
movzx edx, word [rsp + rax*2 + 0x50]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xe
jne 0x14000278e
mov byte [0x140454048], 1
lea rcx, [0x140001672]
call fcn.1400014f0
cmp byte [0x14045406c], 0
je 0x1400027e6
lea rdx, [0x140454050]
lea rcx, [rdx + 0x1c]
movzx eax, word [rdx]
sub ax, 0x62cd
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x1400027c8
mov byte [0x14045406c], 0
lea rdx, [0x140454280]
lea rcx, [0x140454050]
call sub.msvcrt.dll__wcsicmp
lea rdx, [rsp + 0xac0]
test eax, eax
jne 0x14000280d
lea rdx, [rsp + 0xcd0]
lea rcx, [rsp + 0x70]
lea r8, [0x140454280]
call fcn.1400031f0
test esi, esi
jne 0x140002879
movsxd r9, dword [0x14044b620]
lea r8, [0x14001a020]
lea rcx, [rsp + 0x280]
mov dword [rsp + 0x40], 1
lea rax, [0x1404540a0]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0xac0]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
lea rdx, [0x1404542c0]
call fcn.14000168c
jmp 0x1400026ec
movsxd r9, dword [0x140454044]
lea r8, [0x140454040]
jmp 0x140002830