Function at 0x14000f300
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbx
push rbp
push rdi
push r12
push r14
push r15
sub rsp, 0xa8
mov rax, qword [0x140051098]
xor rax, rsp
mov qword [rsp + 0x90], rax
mov eax, 0xfffe
mov qword [rsp + 0x30], 0x46464952
mov word [rsp + 0x44], ax
mov rbp, rdx
mov rdi, r8
mov dword [rsp + 0x38], 0x45564157
movzx r8d, byte [rdx + 2]
mov r14, r9
mov edx, dword [rdx + 4]
movzx eax, r8b
shr al, 4
xor r12d, r12d
movzx r9d, al
mov r15, rcx
mov word [rsp + 0x46], r9w
mov dword [rsp + 0x3c], 0x20746d66
mov dword [rsp + 0x40], 0x28
mov dword [rsp + 0x48], edx
cmp rbp, 0x1000
jb 0x14000f3a8
movabs rax, 0xffff800000000000
test rax, rbp
jne 0x14000f3a8
movzx ecx, byte [rbp + 1]
cmp cl, 0xff
je 0x14000f39f
shl edx, cl
jmp 0x14000f3ab
movzx eax, byte [rbp]
imul edx, eax
jmp 0x14000f3ab
mov edx, r12d
movzx eax, byte [rbp]
and r8b, 0xf
shl r8b, 3
mov ecx, 0x18
mov dword [rsp + 0x4c], edx
mov edx, r12d
mov word [rsp + 0x50], ax
mov rbx, r9
movzx eax, r8b
mov r8, r12
mov word [rsp + 0x52], ax
mov word [rsp + 0x56], ax
mov word [rsp + 0x54], cx
mov dword [rsp + 0x58], edx
test r9, r9
je 0x14000f424
mov r11d, r12d
nop dword [rax]
movzx r9d, byte [r8 + rbp + 8]
lea r10d, [r9 - 4]
cmp r10d, 0x11
ja 0x14000f4af
lea ecx, [r9 - 4]
movzx eax, cl
bt r11d, eax
jb 0x14000f48d
bts edx, r10d
inc r8
mov dword [rsp + 0x58], edx
mov r11d, edx
cmp r8, rbx
jb 0x14000f3f0
lea rdx, str.00000001_0000_0010_8000_00aa00389b71
lea rcx, [rsp + 0x80]
call qword [sym.imp.VBoxRT.dll_RTUuidFromStr]
test eax, eax
js 0x14000f580
movups xmm0, xmmword [rsp + 0x80]
mov r8d, 0x222
mov qword [rsp + 0x6c], 0x61746164
mov rdx, r15
mov qword [rdi + 8], 0xffffffffffffffff
lea rcx, [rdi + 8]
movups xmmword [rsp + 0x5c], xmm0
call qword [sym.imp.VBoxRT.dll_RTFileOpen]
test eax, eax
jns 0x14000f4ce
lea r8, str.RTFileOpen_failed
mov edx, eax
mov rcx, r14
call qword [sym.imp.VBoxRT.dll_RTErrInfoSet]
jmp 0x14000f580
mov dword [rsp + 0x20], r9d
mov edx, 0xfffffffe
mov r9, r8
mov rcx, r14
lea r8, str.Channel__u_repeats_channel_ID__d
call qword [sym.imp.VBoxRT.dll_RTErrInfoSetF]
jmp 0x14000f580
mov qword [rsp + 0x20], r8
mov edx, 0xfffffffe
lea r8, str.Invalid_channel_ID__d_for_channel__u
mov rcx, r14
call qword [sym.imp.VBoxRT.dll_RTErrInfoSetF]
jmp 0x14000f580
mov rcx, qword [rdi + 8]
lea rdx, [rsp + 0x30]
xor r9d, r9d
mov qword [rsp + 0xa0], rsi
lea r8d, [r9 + 0x44]
call qword [sym.imp.VBoxRT.dll_RTFileWrite]
mov esi, eax
test eax, eax
js 0x14000f543
mov rcx, qword [rdi + 8]
mov byte [rdi + 4], r12b
mov qword [rdi + 0x14], r12
mov dword [rdi + 0x10], r12d
movups xmm0, xmmword [rbp]
movups xmmword [rdi + 0x1c], xmm0
movups xmm1, xmmword [rbp + 0x10]
movups xmmword [rdi + 0x2c], xmm1
call qword [sym.imp.VBoxRT.dll_RTFileTell]
mov dword [rdi + 0x10], eax
cmp eax, 0xffffffff
je 0x14000f52a
mov dword [rdi], 0x19260526
xor eax, eax
jmp 0x14000f578
lea r8, str.RTFileTell_failed
mov edx, 0xffffff95
mov rcx, r14
call qword [sym.imp.VBoxRT.dll_RTErrInfoSet]
mov esi, eax
jmp 0x14000f555
lea r8, str.RTFileWrite_failed_writing_header
mov edx, eax
mov rcx, r14
call qword [sym.imp.VBoxRT.dll_RTErrInfoSet]
mov rcx, qword [rdi + 8]
call qword [sym.imp.VBoxRT.dll_RTFileClose]
mov rcx, r15
mov qword [rdi + 8], 0xffffffffffffffff
mov dword [rdi], 0x19910928
call qword [sym.imp.VBoxRT.dll_RTFileDelete]
mov eax, esi
mov rsi, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.140035120
add rsp, 0xa8
pop r15
pop r14
pop r12
pop rdi
pop rbp
pop rbx
ret