Function at 0x14002df30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
lea rbp, [rax - 0x3a8]
sub rsp, 0x4a0
mov rbx, rdx
mov dword [rbp - 0x20], 0x41ea9ea8
mov dword [rbp - 0x1c], 0x1b599156
mov dword [rbp - 0x18], 0x4b02cfd
mov dword [rbp - 0x14], 0x71194bf
mov dword [rbp - 0x10], 0x6c148e88
mov dword [rbp - 0xc], 0x53c3291c
mov dword [rbp - 8], 0xb0e65b4d
mov dword [rbp - 4], 0xf0f02479
mov dword [rbp], 0xf2bffcad
mov dword [rbp + 4], 0x30358183
mov dword [rbp + 8], 0x5193cb60
mov dword [rbp + 0xc], 0x4d075e2c
mov dword [rbp + 0xa0], 0xe5f49cd5
mov dword [rbp + 0xa4], 0x228ab40a
mov dword [rbp + 0xa8], 0x8f6b16b4
mov dword [rbp + 0xac], 0x82b0849b
mov dword [rbp + 0xb0], 0x97692112
mov dword [rbp + 0xb4], 0x85850f5e
mov dword [rbp + 0xb8], 0x2c5a8ce7
mov dword [rbp + 0xbc], 0xa4eb1e85
mov dword [rbp + 0xc0], 0xd29201a5
mov dword [rbp + 0xc4], 0x4c88e02b
mov dword [rbp + 0xc8], 0xa298ed1
mov dword [rbp + 0xcc], 0xf4c91396
mov dword [rbp + 0xd0], 0xa16687f1
mov dword [rbp + 0xd4], 0x4fe5d00d
mov dword [rbp + 0xd8], 0x44c1425
mov dword [rbp + 0xdc], 0xd7e310ec
mov dword [rsp + 0x60], 0xe20f671a
mov dword [rsp + 0x64], 0x35b7de0e
mov dword [rsp + 0x68], 0xed0ba770
mov dword [rsp + 0x6c], 0x81095b71
mov dword [rsp + 0x70], 0xdeb305ec
mov dword [rsp + 0x74], 0x74418361
mov dword [rsp + 0x78], 0xd325c321
mov dword [rsp + 0x7c], 0xc9dc4ed4
mov dword [rbp + 0x10], 0x25c244e7
mov dword [rbp + 0x14], 0xb4b98a1e
mov dword [rbp + 0x18], 0x205ceca7
mov dword [rbp + 0x1c], 0xa5a7ca14
mov dword [rbp + 0x20], 0xa135d397
mov dword [rbp + 0x24], 0x2110992c
mov dword [rbp + 0x28], 0x23ad5575
mov dword [rbp + 0x2c], 0xedf1fd57
mov dword [rbp + 0x30], 0xf96a73a0
mov dword [rbp + 0x34], 0x9b6a876e
mov dword [rbp + 0x38], 0x9c9b861
mov dword [rbp + 0x3c], 0x74cd977d
mov dword [rbp + 0x40], 0x279b8cc3
mov dword [rbp + 0x44], 0x7d5583f0
mov dword [rbp + 0x48], 0xef4a258f
mov dword [rbp + 0x4c], 0x9d9baeca
mov dword [rbp + 0x50], 0xcffc0317
mov dword [rbp + 0x54], 0x73d1257b
mov dword [rbp + 0x58], 0x3d830ca7
mov dword [rbp + 0x5c], 0x846eabb
mov dword [rbp + 0x60], 0x58012761
mov dword [rbp + 0x64], 0xf749fec
mov dword [rbp + 0x68], 0x25933acf
mov dword [rbp + 0x6c], 0x43ab1498
mov dword [rsp + 0x20], 0xa0f6bcd0
mov dword [rsp + 0x24], 0xcf7ec763
mov dword [rsp + 0x28], 0x57bffa20
mov dword [rsp + 0x2c], 0xeb316b08
mov dword [rsp + 0x30], 0x2f35b8d7
mov dword [rsp + 0x34], 0xf9950257
mov dword [rsp + 0x38], 0x541b275a
mov dword [rsp + 0x3c], 0x73356d18
mov dword [rbp + 0xe0], 0x737843e8
mov dword [rbp + 0xe4], 0x939568d7
mov dword [rbp + 0xe8], 0xd5248def
mov dword [rbp + 0xec], 0xbfdd2354
mov dword [rbp + 0xf0], 0x9d001cb8
mov dword [rbp + 0xf4], 0x893c5d86
mov dword [rbp + 0xf8], 0x7a7d8dbe
mov dword [rbp + 0xfc], 0x92830b39
mov dword [rbp + 0x100], 0xe1e642bf
mov dword [rbp + 0x104], 0x48f543c
mov dword [rbp + 0x108], 0x5f563dc2
mov dword [rbp + 0x10c], 0xd95bbbb7
mov dword [rbp + 0x110], 0xdfdd9621
mov dword [rbp + 0x114], 0x865f4fdc
mov dword [rbp + 0x118], 0xc658639e
mov dword [rbp + 0x11c], 0x7845b5eb
mov dword [rbp + 0x120], 0xcddfa11e
mov dword [rbp + 0x124], 0x73ccfe3e
mov dword [rbp + 0x128], 0x1f405b2a
mov dword [rbp + 0x12c], 0x43b7310b
mov dword [rbp + 0x130], 0xaad33bcf
mov dword [rbp + 0x134], 0xe4967c3f
mov dword [rbp + 0x138], 0x4dbd81f
mov dword [rbp + 0x13c], 0x78536999
mov dword [rbp + 0x140], 0xa472227d
mov dword [rbp + 0x144], 0x1c7a4066
mov dword [rbp + 0x148], 0xd8c6733
mov dword [rbp + 0x14c], 0x344de8e1
mov dword [rbp + 0x150], 0xdc7d94a6
mov dword [rbp + 0x154], 0x3f95c31b
mov dword [rbp + 0x158], 0x788c1800
mov dword [rbp + 0x15c], 0xc824c2a7
mov dword [rbp + 0x320], 0x737843e8
mov dword [rbp + 0x324], 0x939568d7
mov dword [rbp + 0x328], 0xd5248def
mov dword [rbp + 0x32c], 0xbfdd2354
mov dword [rbp + 0x330], 0x9d001cb8
mov dword [rbp + 0x334], 0x893c5d86
mov dword [rbp + 0x338], 0x7a7d8dbe
mov dword [rbp + 0x33c], 0x92830b39
mov dword [rbp + 0x340], 0x9fbf13e3
mov dword [rbp + 0x344], 0xbdd731b9
mov dword [rbp + 0x348], 0xdff338b4
mov dword [rbp + 0x34c], 0x84415035
mov dword [rbp + 0x350], 0xb514bfb8
mov dword [rbp + 0x354], 0xd8848000
mov dword [rbp + 0x358], 0x9a4f4359
mov dword [rbp + 0x35c], 0xa294be56
mov dword [rbp + 0x360], 0x50966268
mov dword [rbp + 0x364], 0x8f684bfe
mov dword [rbp + 0x368], 0xf395d74a
mov dword [rbp + 0x36c], 0x721d4951
mov dword [rbp + 0x370], 0x88cd32e7
mov dword [rbp + 0x374], 0x3ac0e25a
mov dword [rbp + 0x378], 0x146ebdd9
mov dword [rbp + 0x37c], 0x84e3ae91
mov dword [rbp + 0x380], 0xc32cdc0f
mov dword [rbp + 0x384], 0x504147c7
mov dword [rbp + 0x388], 0x98ba02d3
mov dword [rbp + 0x38c], 0xe08472f7
mov dword [rbp + 0x390], 0xea3eed85
mov dword [rbp + 0x394], 0xdd125e95
mov dword [rbp + 0x398], 0xd1743300
mov dword [rbp + 0x39c], 0x65a3eb74
mov dword [rbp + 0x2b0], 0xd93dc2b3
mov dword [rbp + 0x2b4], 0xecea665f
mov dword [rbp + 0x2b8], 0x13182041
mov dword [rbp + 0x2bc], 0x2ca09c09
mov dword [rbp + 0x2c0], 0xbbaabb59
mov dword [rbp + 0x2c4], 0xe182ef9e
mov dword [rbp + 0x2c8], 0x59900645
mov dword [rbp + 0x2cc], 0xaac8e4c
mov dword [rbp + 0x2d0], 0xc9a07a69
mov dword [rbp + 0x2d4], 0x6e7b7791
mov dword [rbp + 0x2d8], 0x7d8e1d3e
mov dword [rbp + 0x2dc], 0xfc30e205
mov dword [rbp + 0x2e0], 0x9d19fe4e
mov dword [rbp + 0x2e4], 0x17ff8afa
mov dword [rbp + 0x2e8], 0xf5943177
mov dword [rbp + 0x2ec], 0xe3aa524
mov dword [rbp + 0x2f0], 0x5d16c25b
mov dword [rbp + 0x2f4], 0x612a22a8
mov dword [rbp + 0x2f8], 0xc0a2a330
mov dword [rbp + 0x2fc], 0xaf6f1808
mov dword [rbp + 0x300], 0xb717b666
mov dword [rbp + 0x304], 0x62fbd550
mov dword [rbp + 0x308], 0xa9ee3b8a
mov dword [rbp + 0x30c], 0x894792c3
mov dword [rbp + 0x310], 0x24e7dd0f
mov dword [rbp + 0x314], 0x7b363ca8
mov dword [rbp + 0x318], 0x615df6c5
mov dword [rbp + 0x31c], 0x89d199e7
mov dword [rsp + 0x40], 0x63eefa28
mov dword [rsp + 0x44], 0x3a1398c4
mov dword [rsp + 0x48], 0x5bda0fdf
mov dword [rsp + 0x4c], 0xdeca1fb2
mov dword [rbp + 0x70], 0xb99c5092
mov dword [rbp + 0x74], 0x5ba1fade
mov dword [rbp + 0x78], 0x723ea83b
mov dword [rbp + 0x7c], 0x51265441
mov dword [rbp + 0x80], 0x18e49763
mov dword [rbp + 0x84], 0xfaa58c11
mov dword [rbp + 0x88], 0xbc2d90
mov dword [rbp + 0x8c], 0xf75c6fac
mov dword [rbp + 0x90], 0x997088df
mov dword [rbp + 0x94], 0xd803aaae
mov dword [rbp + 0x98], 0x8a70f446
mov dword [rbp + 0x9c], 0xa32a9b94
mov dword [rbp - 0x80], 0x37c1a2d0
mov dword [rbp - 0x7c], 0x709f3286
mov dword [rbp - 0x78], 0x8cc049ab
mov dword [rbp - 0x74], 0xd144cb3f
mov dword [rbp - 0x70], 0x5b3bf81f
mov dword [rbp - 0x6c], 0x710c2594
mov dword [rbp - 0x68], 0x95471e1e
mov dword [rbp - 0x64], 0xa71267a4
mov dword [rbp - 0x60], 0x30099674
mov dword [rbp - 0x5c], 0xbe2ce10c
mov dword [rbp - 0x58], 0x28f37950
mov dword [rbp - 0x54], 0x25adab16
mov dword [rbp - 0x50], 0xda915d16
mov dword [rbp - 0x4c], 0x18cde66c
mov dword [rbp - 0x48], 0xfbf1c82e
mov dword [rbp - 0x44], 0x322403df
mov dword [rbp + 0x1f0], 0x3b8d6864
mov dword [rbp + 0x1f4], 0xa0235a01
mov dword [rbp + 0x1f8], 0x7ad4ffc1
mov dword [rbp + 0x1fc], 0x49314055
mov dword [rbp + 0x200], 0x30b892da
mov dword [rbp + 0x204], 0xfb0c7927
mov dword [rbp + 0x208], 0x727b457d
mov dword [rbp + 0x20c], 0x68abd6ae
mov dword [rbp + 0x210], 0xcaa65763
mov dword [rbp + 0x214], 0x7b0f372
mov dword [rbp + 0x218], 0x6126ac48
mov dword [rbp + 0x21c], 0xd93a4cf
mov dword [rbp + 0x220], 0xcdbb1e34
mov dword [rbp + 0x224], 0xac92698c
mov dword [rbp + 0x228], 0x7cceedf3
mov dword [rbp + 0x22c], 0x8b3413be
mov dword [rbp + 0x230], 0x421239f7
mov dword [rbp + 0x234], 0x91ce4294
mov dword [rbp + 0x238], 0x8cad8594
mov dword [rbp + 0x23c], 0x283283e3
mov dword [rbp + 0x240], 0xa2415539
mov dword [rbp + 0x244], 0x68ab380d
mov dword [rbp + 0x248], 0xd469f297
mov dword [rbp + 0x24c], 0x2fcec5e
mov dword [rbp + 0x1a0], 0x7ee438a6
mov dword [rbp + 0x1a4], 0x19774d1d
mov dword [rbp + 0x1a8], 0xcd174ff2
mov dword [rbp + 0x1ac], 0xacc314e5
mov dword [rbp + 0x1b0], 0x1973c590
mov dword [rbp + 0x1b4], 0xd4278c33
mov dword [rbp + 0x1b8], 0x2fefcb6d
mov dword [rbp + 0x1bc], 0x200d6966
mov dword [rbp + 0x1c0], 0xe4ff540f
mov dword [rbp + 0x1c4], 0x71ea5470
mov dword [rbp + 0x1c8], 0x56d477c6
mov dword [rbp + 0x1cc], 0x424d949a
mov dword [rbp + 0x1d0], 0x15302072
mov dword [rbp + 0x1d4], 0xf0d4921
mov dword [rbp + 0x1d8], 0x975bd277
mov dword [rbp + 0x1dc], 0x3e65cad9
mov dword [rbp + 0x1e0], 0x2a6882dc
mov dword [rbp + 0x1e4], 0xc01e9583
mov dword [rbp + 0x1e8], 0x15bc2218
mov dword [rbp + 0x1ec], 0xffce3d02
mov dword [rbp + 0x250], 0x737843e8
mov dword [rbp + 0x254], 0x939568d7
mov dword [rbp + 0x258], 0xd5248def
mov dword [rbp + 0x25c], 0xbfdd2354
mov dword [rbp + 0x260], 0xe07bd760
mov dword [rbp + 0x264], 0xbf3f192d
mov dword [rbp + 0x268], 0x7515f38d
mov dword [rbp + 0x26c], 0xbe747b6e
mov dword [rbp + 0x270], 0x5b3a23b0
mov dword [rbp + 0x274], 0x3482c278
mov dword [rbp + 0x278], 0xdde04052
mov dword [rbp + 0x27c], 0x53416c4e
mov dword [rbp + 0x280], 0x8db8604c
mov dword [rbp + 0x284], 0x277d1ade
mov dword [rbp + 0x288], 0x208f479f
mov dword [rbp + 0x28c], 0xc919029f
mov dword [rbp + 0x290], 0x33a2c50a
mov dword [rbp + 0x294], 0x3635c8a9
mov dword [rbp + 0x298], 0x11d0712b
mov dword [rbp + 0x29c], 0x87df9eb9
mov dword [rbp + 0x2a0], 0x80f37080
mov dword [rbp + 0x2a4], 0xcf121216
mov dword [rbp + 0x2a8], 0x247cb10
mov dword [rbp + 0x2ac], 0x9792a591
mov dword [rsp + 0x50], 0x66a2b979
mov dword [rsp + 0x54], 0x7111272a
mov dword [rsp + 0x58], 0xfba7dea4
mov dword [rsp + 0x5c], 0x40904158
mov dword [rbp + 0x160], 0x737843e8
mov dword [rbp + 0x164], 0x939568d7
mov dword [rbp + 0x168], 0xd5248def
mov dword [rbp + 0x16c], 0xbfdd2354
mov dword [rbp + 0x170], 0xe07bd760
mov dword [rbp + 0x174], 0xbf3f192d
mov dword [rbp + 0x178], 0x7515f38d
mov dword [rbp + 0x17c], 0xbe747b6e
mov dword [rbp + 0x180], 0x823c7dfd
mov dword [rbp + 0x184], 0x99e387c7
mov dword [rbp + 0x188], 0xf0434d01
mov dword [rbp + 0x18c], 0x5bbbab33
mov dword [rbp + 0x190], 0x341a46e6
mov dword [rbp + 0x194], 0xc9a01cc4
mov dword [rbp + 0x198], 0xfe64cc5
mov dword [rbp + 0x19c], 0x646310b7
mov dword [rbp - 0x40], 0x9b8b7c25
mov dword [rbp - 0x3c], 0x8458a390
mov dword [rbp - 0x38], 0x13db5b4b
mov dword [rbp - 0x34], 0xad73969d
mov dword [rbp - 0x30], 0xec404d13
mov dword [rbp - 0x2c], 0xfe31c782
mov dword [rbp - 0x28], 0x40dbff25
mov dword [rbp - 0x24], 0xaf5d9029
cmp ecx, 0x14
ja case.default.0x14002e9bd
mov qword [rax + 8], rsi
lea rdx, [0x140000000]
mov qword [rax + 0x10], rdi
mov eax, ecx
mov ecx, dword [rdx + rax*4 + 0x2eb54]
add rcx, rdx
jmp rcx
lea rsi, [rbp - 0x20]
mov edi, 0x30
jmp 0x14002ead0
lea rsi, [rbp + 0xa0]
mov edi, 0x40
jmp 0x14002ead0
lea rsi, [rsp + 0x60]
jmp 0x14002eacb
lea rsi, [rbp + 0x10]
mov edi, 0x30
jmp 0x14002ead0
lea rsi, [rbp + 0x40]
mov edi, 0x30
jmp 0x14002ead0
lea rsi, [rsp + 0x20]
mov edi, 0x10
jmp 0x14002ead0
lea rsi, [rsp + 0x30]
mov edi, 0x10
jmp 0x14002ead0
lea rsi, [rbp + 0xe0]
mov edi, 0x40
jmp 0x14002ead0
lea rsi, [rbp + 0x120]
mov edi, 0x40
jmp 0x14002ead0
lea rsi, [rbp + 0x320]
mov edi, pe_nt_image_headers64
jmp 0x14002ead0
lea rsi, [rbp + 0x2b0]
mov edi, 0x70
jmp 0x14002ead0
lea rsi, [rsp + 0x40]
mov edi, 0x10
jmp 0x14002ead0
lea rsi, [rbp + 0x70]
mov edi, 0x30
jmp 0x14002ead0
lea rsi, [rbp - 0x80]
jmp 0x14002eacb
lea rsi, [rbp - 0x60]
jmp 0x14002eacb
lea rsi, [rbp + 0x1f0]
mov edi, 0x60
jmp 0x14002ead0
lea rsi, [rbp + 0x1a0]
mov edi, 0x50
jmp 0x14002ead0
lea rsi, [rbp + 0x250]
mov edi, 0x60
jmp 0x14002ead0
lea rsi, [rsp + 0x50]
mov edi, 0x10
jmp 0x14002ead0
lea rsi, [rbp + 0x160]
mov edi, 0x40
jmp 0x14002ead0
lea rsi, [rbp - 0x40]
mov edi, 0x20
mov rdx, rdi
mov rcx, rbx
call fcn.140027510
mov rcx, qword [rbx]
mov rbx, qword [rbx + 8]
sub rbx, rcx
test rcx, rcx
jne 0x14002eaf7
call fcn.14004331c
mov dword [rax], 0x16
jmp 0x14002eb2d
test rsi, rsi
je 0x14002eb0e
cmp rbx, rdi
jb 0x14002eb0e
mov r8, rdi
mov rdx, rsi
call fcn.1405e55e0
jmp 0x14002eb32
mov r8, rbx
xor edx, edx
call fcn.1405e5c90
test rsi, rsi
je 0x14002eaea
cmp rbx, rdi
jae 0x14002eb32
call fcn.14004331c
mov dword [rax], 0x22
call fcn.14005a3a8
mov rsi, qword [rsp + 0x4b0]
mov rdi, qword [rsp + 0x4b8]
mov rbx, qword [rsp + 0x4c0]
add rsp, 0x4a0
pop rbp
ret