Function at 0x140092cb0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x150]
sub rsp, 0x250
mov qword [rsp + 0x28], 0xfffffffffffffffe
mov qword [rsp + 0x290], rbx
mov rax, qword [0x140499908]
xor rax, rsp
mov qword [rbp + 0x140], rax
mov r15, rdx
mov r14, rcx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], rdx
mov dword [rsp + 0x20], 0
lea rax, [rsp + 0x48]
mov qword [rsp + 0x40], rax
mov r8d, 3
mov rdx, qword [rdx]
lea rcx, [rsp + 0x40]
call fcn.14008d0c0
nop
mov rdi, qword [rsp + 0x40]
call fcn.1400b1c7c
mov rcx, rax
test rax, rax
jne 0x140092d3c
mov ecx, 0x80004005
call fcn.140082d10
int3
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0xe0], rbx
or rsi, 0xffffffffffffffff
test rdi, rdi
je 0x140092d90
test rdi, 0xffffffffffff0000
jne 0x140092d82
movzx edi, di
mov ecx, edi
call fcn.1400b2c04
test rax, rax
je 0x140092dab
mov r8d, edi
mov rdx, rax
lea rcx, [rbp + 0xe0]
call fcn.140081520
jmp 0x140092da4
mov rax, rsi
inc rax
cmp byte [rdi + rax], 0
jne 0x140092d85
jmp 0x140092d92
xor eax, eax
mov r8d, eax
mov rdx, rdi
lea rcx, [rbp + 0xe0]
call fcn.140081660
mov rbx, qword [rbp + 0xe0]
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x40]
cmp rcx, rax
je 0x140092dbf
call fcn.14033bf10
mov dword [rbp + 0xf0], 0x44434241
mov dword [rbp + 0xf4], 0x48474645
mov dword [rbp + 0xf8], 0x4c4b4a49
mov dword [rbp + 0xfc], 0x504f4e4d
mov dword [rbp + 0x100], 0x54535251
mov dword [rbp + 0x104], 0x58575655
mov dword [rbp + 0x108], 0x62615a59
mov dword [rbp + 0x10c], 0x66656463
mov dword [rbp + 0x110], 0x6a696867
mov dword [rbp + 0x114], 0x6e6d6c6b
mov dword [rbp + 0x118], 0x7271706f
mov dword [rbp + 0x11c], 0x76757473
mov dword [rbp + 0x120], 0x7a797877
mov dword [rbp + 0x124], 0x33323130
mov dword [rbp + 0x128], 0x37363534
mov dword [rbp + 0x12c], 0x2f2b3938
mov byte [rbp + 0x130], 0x3d
xor edi, edi
movsxd r11, dword [rbx - 0x10]
xor r10d, r10d
test r11, r11
jle 0x140092f57
nop dword [rax + rax]
movsxd r9, edi
add r9, rbx
lea r8, [rbp + 0xf0]
nop dword [rax]
xor eax, eax
movzx ecx, byte [r9]
cmp byte [r8], cl
jne 0x140092ebb
nop dword [rax + rax]
cmp eax, 1
jge 0x140092eb9
inc r8
inc r9
inc eax
movzx ecx, byte [r9]
cmp byte [r8], cl
je 0x140092ea0
cmp eax, 1
je 0x140092ed8
lea ecx, [rax - 1]
movsxd rdx, ecx
sub r8, rdx
movsxd rcx, eax
sub r9, rcx
lea rax, [rbp + 0x130]
cmp r8, rax
ja 0x140092ee7
jmp 0x140092e90
lea rax, [rbp + 0xf0]
sub r8, rax
dec r8
jmp 0x140092eea
mov r8, rsi
mov byte [r10 + rbx], r8b
inc edi
inc r10
cmp r10, r11
jl 0x140092e80
test r11, r11
jle 0x140092f57
mov r8, rbx
mov r9, r11
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [r8]
add ecx, 7
mov eax, 0xfc0fc0fd
mul ecx
shr edx, 6
imul eax, edx, 0x41
sub ecx, eax
mov byte [r8], cl
lea r8, [r8 + 1]
sub r9, 1
jne 0x140092f10
test r11, r11
jle 0x140092f57
mov rdx, rbx
nop dword [rax + rax]
movzx eax, byte [rdx]
movzx ecx, byte [rbp + rax + 0xf0]
mov byte [rdx], cl
lea rdx, [rdx + 1]
sub r11, 1
jne 0x140092f40
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rbx + rax], 0
jne 0x140092f60
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp + 0xe0]
call fcn.140081660
lea rax, [rbp - 0x28]
mov qword [rbp - 0x30], rax
mov r8d, 3
mov rbx, qword [rbp + 0xe0]
mov rdx, rbx
lea rcx, [rbp - 0x30]
call fcn.14008d200
nop
mov rdi, qword [rbp - 0x30]
call fcn.1400b1c7c
mov rcx, rax
test rax, rax
jne 0x140092fb9
mov ecx, 0x80004005
call fcn.140082d10
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [r14], rax
test rdi, rdi
je 0x140093002
test rdi, 0xffffffffffff0000
jne 0x140092ff3
movzx edi, di
mov ecx, edi
call fcn.1400b2c04
test rax, rax
je 0x140093013
mov r8d, edi
mov rdx, rax
mov rcx, r14
call fcn.140082750
jmp 0x140093013
mov rax, rsi
inc rax
cmp word [rdi + rax*2], 0
jne 0x140092ff6
jmp 0x140093004
xor eax, eax
mov r8d, eax
mov rdx, rdi
mov rcx, r14
call fcn.140082b40
nop
lea rax, [rbp - 0x28]
mov rcx, qword [rbp - 0x30]
cmp rcx, rax
je 0x140093026
call fcn.14033bf10
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140093040
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [r15]
sub rdx, 0x18
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x14009305b
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov rax, r14
mov rcx, qword [rbp + 0x140]
xor rcx, rsp
call fcn.14025d560
mov rbx, qword [rsp + 0x290]
add rsp, 0x250
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret