Function at 0x14000ab50
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [0x14015a198]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov r12, rcx
mov qword [rbp - 9], rcx
xor r15d, r15d
mov dword [rbp - 0x69], r15d
mov word [rbp + 0x1a], 0x6974
mov word [rbp + 0x1d], 0x6e
mov dword [rbp + 0xf], 0x74736e49
mov dword [rbp + 0x13], 0x4c6c6c61
mov word [rbp + 0x18], 0x6163
mov byte [rbp + 0x17], 0x6f
mov byte [rbp + 0x1c], 0x6f
mov dword [rbp + 7], 0x65726946
mov dword [rbp + 0xb], 0x786f66
mov word [rbp + 4], 0x616c
mov dword [rbp - 1], 0x697a6f4d
mov byte [rbp + 6], 0x20
mov byte [rbp + 3], 0x6c
call fcn.140036710
mov rcx, rax
test rax, rax
je 0x14000b3ab
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x59], rax
lea rax, [rbp - 1]
lea r14, [r15 - 1]
cmp rax, 0x10000
jae 0x14000ac1c
lea rax, [rbp - 1]
movzx edx, ax
lea rcx, [rbp - 0x59]
call fcn.140036ea0
jmp 0x14000ac3d
lea rcx, [rbp - 1]
mov rax, r14
inc rax
cmp byte [rcx + rax], 0
jne 0x14000ac23
mov r8d, eax
lea rdx, [rbp - 1]
lea rcx, [rbp - 0x59]
call fcn.1400399e0
nop
mov dword [rbp - 0x29], 0x200
mov dword [rbp - 0x25], 0x100
call fcn.140036710
mov rcx, rax
test rax, rax
je 0x14000b3b6
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [r12], rax
mov dword [rbp - 0x69], 1
mov dword [rbp - 0x65], 0x104
mov rsi, r15
mov qword [rbp - 0x61], r15
nop
mov qword [rbp - 0x31], r15
lea rdx, [0x1401776f0]
lea rcx, [rbp - 0x19]
call fcn.14001c1f0
nop
mov r9d, dword [rbp + rsi*4 - 0x29]
or r9d, 0x20019
lea rcx, [rbp - 0x31]
mov qword [rsp + 0x20], rcx
xor r8d, r8d
mov rdx, qword [rax]
mov rcx, 0xffffffff80000002
call fcn.140027970
mov edi, eax
mov rdx, qword [rbp - 0x19]
add rdx, 0xffffffffffffffe8
mov ecx, r14d
lock xadd dword [rdx + 0x10], ecx
sub ecx, 1
jg 0x14000acdd
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [r8 + 8]
call fcn.140036710
mov rcx, rax
test rax, rax
je 0x14000b3a0
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x51], rbx
mov r13d, r15d
test edi, edi
jne 0x14000af72
nop word [rax + rax]
mov dword [rbp - 0x65], 0x104
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x104
or eax, ecx
jge 0x14000ad3d
mov edx, 0x104
lea rcx, [rbp - 0x51]
call fcn.1400389d0
mov rbx, qword [rbp - 0x51]
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, [rbp - 0x65]
mov r8, rbx
mov edx, r13d
mov rcx, qword [rbp - 0x31]
call fcn.140027670
mov edi, eax
inc r13d
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.1400a38cc
test eax, eax
js 0x14000b3dd
cmp eax, dword [rbx - 0xc]
jg 0x14000b3dd
mov dword [rbx - 0x10], eax
cdqe
mov byte [rax + rbx], 0
test edi, edi
jne 0x14000af6e
mov rsi, qword [rbp - 0x59]
mov eax, dword [rsi - 0x10]
mov ecx, r15d
test eax, eax
cmovns ecx, eax
mov edx, dword [rbx - 0x10]
mov eax, edx
cmp ecx, edx
cmovle eax, ecx
mov r14d, r15d
test edx, edx
cmovns r14d, eax
cmp r14d, edx
jne 0x14000add4
lea rcx, [rbx - 0x18]
call fcn.140035ce0
lea rdi, [rax + 0x18]
or dword [rbp - 0x69], 2
jmp 0x14000ae8f
mov rcx, qword [rbx - 0x18]
test rcx, rcx
je 0x14000adf0
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
je 0x14000adf0
mov r15, rbx
jmp 0x14000ae0d
call fcn.140036710
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
mov r15, rbx
test rax, rax
je 0x14000b3d2
test r15, r15
jne 0x14000ae1b
test r14d, r14d
jne 0x14000b3dd
mov rax, qword [rcx]
mov r8d, 1
mov edx, r14d
call qword [rax]
test rax, rax
je 0x14000b3cc
lea rdi, [rax + 0x18]
test r14d, r14d
js 0x14000b3dd
cmp r14d, dword [rdi - 0xc]
jg 0x14000b3dd
mov dword [rdi - 0x10], r14d
movsxd r8, r14d
mov byte [r8 + rdi], 0
test r14d, r14d
je 0x14000ae88
mov rcx, rdi
test r15, r15
je 0x14000ae6c
mov rdx, r15
call fcn.1400715f0
jmp 0x14000ae88
xor edx, edx
call fcn.140073280
test rbx, rbx
jne 0x14000ae88
call fcn.1400810d4
mov dword [rax], 0x16
call fcn.140080f28
or dword [rbp - 0x69], 2
xor r15d, r15d
mov rdx, rsi
mov rcx, rdi
call fcn.1400a3d20
test eax, eax
sete bl
lea rdx, [rdi - 0x18]
mov r14, 0xffffffffffffffff
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000aec0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
test bl, bl
jne 0x14000aecd
mov rbx, qword [rbp - 0x51]
jmp 0x14000ad10
mov dword [rbp - 0x3d], 1
mov dword [rbp - 0x41], 0x104
mov rax, qword [r12]
mov edx, 1
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, 0x104
or ecx, edx
jge 0x14000af01
mov edx, 0x104
mov rcx, r12
call fcn.1400389d0
mov rax, qword [r12]
lea rcx, [rbp - 0x41]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x3d]
lea r8, [rbp + 0xf]
mov rbx, qword [rbp - 0x51]
mov rdx, rbx
mov rcx, qword [rbp - 0x31]
call fcn.1400284e0
mov edi, eax
mov rcx, qword [r12]
test rcx, rcx
jne 0x14000af3b
mov eax, r15d
jmp 0x14000af4c
movsxd rdx, dword [rcx - 0xc]
call fcn.1400a38cc
test eax, eax
js 0x14000b3c1
mov rcx, qword [r12]
cmp eax, dword [rcx - 0xc]
jg 0x14000b3c1
mov dword [rcx - 0x10], eax
mov ecx, eax
mov rax, qword [r12]
mov byte [rcx + rax], 0
test edi, edi
jne 0x14000ad10
mov rsi, qword [rbp - 0x61]
mov rax, qword [r12]
lea rdx, [rbx - 0x18]
cmp dword [rax - 0x10], 0
mov eax, r14d
jne 0x14000afa8
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000af96
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
inc rsi
mov qword [rbp - 0x61], rsi
cmp rsi, 2
jge 0x14000afbb
jmp 0x14000ac80
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000afbb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rsi, r15
mov qword [rbp - 0x61], r15
nop dword [rax]
nop word [rax + rax]
mov qword [rbp - 0x21], r15
lea rdx, [0x1401776f0]
lea rcx, [rbp - 0x11]
call fcn.14001c1f0
nop
mov r9d, dword [rbp + rsi*4 - 0x29]
or r9d, 0x20019
lea rcx, [rbp - 0x21]
mov qword [rsp + 0x20], rcx
xor r8d, r8d
mov rdx, qword [rax]
mov rcx, 0xffffffff80000001
call fcn.140027970
mov edi, eax
mov rdx, qword [rbp - 0x11]
add rdx, 0xffffffffffffffe8
mov ecx, r14d
lock xadd dword [rdx + 0x10], ecx
sub ecx, 1
jg 0x14000b02d
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [r8 + 8]
call fcn.140036710
mov rcx, rax
test rax, rax
je 0x14000b395
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x49], rbx
mov r13d, r15d
test edi, edi
jne 0x14000b2c2
nop word [rax + rax]
mov dword [rbp - 0x65], 0x104
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x104
or eax, ecx
jge 0x14000b08d
mov edx, 0x104
lea rcx, [rbp - 0x49]
call fcn.1400389d0
mov rbx, qword [rbp - 0x49]
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, [rbp - 0x65]
mov r8, rbx
mov edx, r13d
mov rcx, qword [rbp - 0x21]
call fcn.140027670
mov edi, eax
inc r13d
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.1400a38cc
test eax, eax
js 0x14000b404
cmp eax, dword [rbx - 0xc]
jg 0x14000b404
mov dword [rbx - 0x10], eax
cdqe
mov byte [rax + rbx], 0
test edi, edi
jne 0x14000b2be
mov rsi, qword [rbp - 0x59]
mov eax, dword [rsi - 0x10]
mov ecx, r15d
test eax, eax
cmovns ecx, eax
mov edx, dword [rbx - 0x10]
mov eax, edx
cmp ecx, edx
cmovle eax, ecx
mov r14d, r15d
test edx, edx
cmovns r14d, eax
cmp r14d, edx
jne 0x14000b124
lea rcx, [rbx - 0x18]
call fcn.140035ce0
lea rdi, [rax + 0x18]
or dword [rbp - 0x69], 4
jmp 0x14000b1df
mov rcx, qword [rbx - 0x18]
test rcx, rcx
je 0x14000b140
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
je 0x14000b140
mov r15, rbx
jmp 0x14000b15d
call fcn.140036710
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
mov r15, rbx
test rax, rax
je 0x14000b3f9
test r15, r15
jne 0x14000b16b
test r14d, r14d
jne 0x14000b404
mov rax, qword [rcx]
mov r8d, 1
mov edx, r14d
call qword [rax]
test rax, rax
je 0x14000b3f3
lea rdi, [rax + 0x18]
test r14d, r14d
js 0x14000b404
cmp r14d, dword [rdi - 0xc]
jg 0x14000b404
mov dword [rdi - 0x10], r14d
movsxd r8, r14d
mov byte [r8 + rdi], 0
test r14d, r14d
je 0x14000b1d8
mov rcx, rdi
test r15, r15
je 0x14000b1bc
mov rdx, r15
call fcn.1400715f0
jmp 0x14000b1d8
xor edx, edx
call fcn.140073280
test rbx, rbx
jne 0x14000b1d8
call fcn.1400810d4
mov dword [rax], 0x16
call fcn.140080f28
or dword [rbp - 0x69], 4
xor r15d, r15d
mov rdx, rsi
mov rcx, rdi
call fcn.1400a3d20
test eax, eax
sete bl
lea rdx, [rdi - 0x18]
mov r14, 0xffffffffffffffff
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000b210
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
test bl, bl
jne 0x14000b21d
mov rbx, qword [rbp - 0x49]
jmp 0x14000b060
mov dword [rbp - 0x35], 1
mov dword [rbp - 0x39], 0x104
mov rax, qword [r12]
mov edx, 1
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, 0x104
or ecx, edx
jge 0x14000b251
mov edx, 0x104
mov rcx, r12
call fcn.1400389d0
mov rax, qword [r12]
lea rcx, [rbp - 0x39]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x35]
lea r8, [rbp + 0xf]
mov rbx, qword [rbp - 0x49]
mov rdx, rbx
mov rcx, qword [rbp - 0x21]
call fcn.1400284e0
mov edi, eax
mov rcx, qword [r12]
test rcx, rcx
jne 0x14000b28b
mov eax, r15d
jmp 0x14000b29c
movsxd rdx, dword [rcx - 0xc]
call fcn.1400a38cc
test eax, eax
js 0x14000b3e8
mov rcx, qword [r12]
cmp eax, dword [rcx - 0xc]
jg 0x14000b3e8
mov dword [rcx - 0x10], eax
mov ecx, eax
mov rax, qword [r12]
mov byte [rcx + rax], 0
test edi, edi
jne 0x14000b060
mov rsi, qword [rbp - 0x61]
mov rax, qword [r12]
lea rdx, [rbx - 0x18]
cmp dword [rax - 0x10], 0
mov eax, r14d
jne 0x14000b2f8
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000b2e6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
inc rsi
mov qword [rbp - 0x61], rsi
cmp rsi, 2
jge 0x14000b30b
jmp 0x14000afd0
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000b30b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rax, qword [r12]
cmp dword [rax - 0x10], 0
je 0x14000b347
mov word [rbp + 0x1f], 0x665c
mov word [rbp + 0x22], 0x6572
mov word [rbp + 0x25], 0x786f
mov dword [rbp + 0x28], 0x657865
mov byte [rbp + 0x27], 0x2e
mov byte [rbp + 0x24], 0x66
mov byte [rbp + 0x21], 0x69
lea rdx, [rbp + 0x1f]
mov rcx, r12
call fcn.140035900
nop
mov rdx, qword [rbp - 0x59]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r14d
sub r14d, 1
jg 0x14000b365
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [r8 + 8]
mov rax, r12
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.140043aa0
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x80004005
call fcn.140035ad0
int3
mov ecx, 0x80004005
call fcn.140035ad0
nop
mov ecx, 0x80004005
call fcn.140035ad0
nop
mov ecx, 0x80004005
call fcn.140035ad0
nop
mov ecx, 0x80070057
call fcn.140035ad0
int3
call fcn.140039b40
int3
mov ecx, 0x80004005
call fcn.140035ad0
int3
mov ecx, 0x80070057
call fcn.140035ad0
nop
mov ecx, 0x80070057
call fcn.140035ad0
int3
call fcn.140039b40
int3
mov ecx, 0x80004005
call fcn.140035ad0
int3
mov ecx, 0x80070057
call fcn.140035ad0
int3