Function at 0x14003ec50
Capabilities:
Contain obfuscated stackstrings

Disassembly:
xchg rbx, rbp
mov qword [rsp + 8], rbp
xchg rbx, rbp
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
nop
sub rsp, 8
mov qword [rsp], rbp
lea rbp, [rsp - 0x30]
sub rsp, 0x130
mov esi, edx
mov rbx, rcx
mov byte [rbp + 0x58], 0x58
sub byte [rbp + 0x58], 0x10
xor byte [rbp + 0x58], 0x19
add byte [rbp + 0x58], 0x27
xor byte [rbp + 0x58], 0x22
xor byte [rbp + 0x58], 0x66
sub byte [rbp + 0x58], 0x3c
xor r9d, r9d
lea r10, [rbp + 0x58]
nop dword [rax]
inc qword [rbx + 0x18]
mov rax, qword [rbx]
cmp rax, qword [rbx + 8]
je 0x14003ecc5
movzx edx, byte [rax]
inc rax
mov qword [rbx], rax
jmp 0x14003ecf4
mov edx, 0x540dc863
sub edx, 0x499f0280
add edx, 0x1540df02
sub edx, 0x13c9c26c
xor edx, 0x105d9d9
xor edx, 0x2dcd478
xor edx, 0x51e9908e
xor edx, 0xa62a80a9
mov dword [rbx + 0x10], edx
cmp edx, 0xffffffff
je 0x14003ed7f
xor ecx, ecx
cmp esi, 5
sete cl
movzx eax, byte [rbx + 0x20]
cmp eax, ecx
je 0x14003ed1c
mov byte [r10], dl
jmp 0x14003ed21
mov byte [rbp + r9 + 0x58], dl
inc r9
dec r10
cmp r9, 1
jb 0x14003eca6
movzx eax, byte [rbp + 0x58]
mov byte [r8], al
mov al, 0x46
xor al, 0x1e
sub al, 0x45
add al, 0x35
xor al, 0x6c
xor al, 0x74
add al, 0x1a
xor al, 0x5e
sub al, 0x33
lea r11, [rsp + 0x130]
xchg rsi, rbx
mov rsi, qword [r11 + 0x10]
xchg rsi, rbx
xchg r13, rsi
mov r13, qword [r11 + 0x18]
xchg rsi, r13
mov rdi, qword [r11 + 0x20]
mov rsp, r11
nop
xchg qword [rsp], rbp
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]
mov rdi, qword [rbx + 0x28]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], 0x7b237041
add qword [rsp + 0x40], 0x1258f8
sub qword [rsp + 0x40], 0x1efb063e
sub qword [rsp + 0x40], 0xf1a726
add qword [rsp + 0x40], 0x657fe10
add qword [rsp + 0x40], 0xf1bfd3e
sub qword [rsp + 0x40], 0x1ad7453
sub qword [rsp + 0x40], 0x48d67b88
xor qword [rsp + 0x40], 0x2639274e
mov qword [rsp + 0x48], 0x7200dc6e
xor qword [rsp + 0x48], 0x3821890c
add qword [rsp + 0x48], 0x3026be7f
sub qword [rsp + 0x48], 0x2a210235
sub qword [rsp + 0x48], 0x335c0711
xor qword [rsp + 0x48], 0x1ccb0a94
mov eax, dword [0x1400017b4]
mov dword [rsp + 0x30], eax
movzx eax, word [0x1400017b8]
mov word [rsp + 0x34], ax
mov byte [rsp + 0x36], 0x70
xor byte [rsp + 0x36], 0x25
add byte [rsp + 0x36], 4
sub byte [rsp + 0x36], 0x48
xor byte [rsp + 0x36], 0x77
xor byte [rsp + 0x36], 0x46
add byte [rsp + 0x36], 0x31
sub byte [rsp + 0x36], 0x16
sub byte [rsp + 0x36], 0x3b
movups xmmword [rsp + 0x50], xmm0
mov edx, 0x73f9af32
xor edx, 0x482855b0
add edx, 0x15ae12d3
sub edx, 0x4871ef6c
xor edx, 0x72928566
sub edx, 0x5b8a012b
add edx, 0xbcd73c2
xor edx, 0x2be00b06
lea rcx, [rsp + 0x50]
call fcn.1400535d0
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
xchg r13, rax
mov qword [rsp + 0x50], r13
xchg r13, rax
mov qword [rsp + 0x60], 0x59166fa
add qword [rsp + 0x60], 0x426e93e6
sub qword [rsp + 0x60], 0x18f55f64
add qword [rsp + 0x60], 0x1c448302
xor qword [rsp + 0x60], 0x7e23d99b
sub qword [rsp + 0x60], 0x2038eeb3
sub qword [rsp + 0x60], 0x1533d91b
mov qword [rsp + 0x68], 0x3d167112
add qword [rsp + 0x68], 0x3b1f6d5a
xor qword [rsp + 0x68], 0x19b468aa
xor qword [rsp + 0x68], 0x35be4b8b
add qword [rsp + 0x68], 0x8862197
xor qword [rsp + 0x68], 0x557402a3
sub qword [rsp + 0x68], 0x9b21c28
movups xmm0, xmmword [0x140001948]
movups xmmword [rax], xmm0
mov ecx, dword [0x140001958]
mov dword [rax + 0x10], ecx
movzx ecx, word [0x14000195c]
mov word [rax + 0x14], cx
movzx eax, byte [0x14000195e]
mov byte [rdx + 0x16], al
mov byte [rdx + 0x17], 0x30
add byte [rdx + 0x17], 0x3f
sub byte [rdx + 0x17], 0x2d
sub byte [rdx + 0x17], 0x36
add byte [rdx + 0x17], 0xc
add byte [rdx + 0x17], 0x24
xor byte [rdx + 0x17], 0x3c
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
mov r8d, esi
lea rdx, [rbp - 0x70]
mov rcx, rbx
call fcn.140055450
nop
mov qword [rsp + 0x20], 0x2623e979
add qword [rsp + 0x20], 0x28f1484d
xor qword [rsp + 0x20], 0x77810ef8
add qword [rsp + 0x20], 0x1d2470c3
xor qword [rsp + 0x20], 0x2b2f60f3
sub qword [rsp + 0x20], 0x3e5c4df1
sub qword [rsp + 0x20], 0x2955c6dc
sub qword [rsp + 0x20], 0x16e5bc25
mov r9, rax
mov r8, qword [rbx + 0x18]
mov edx, 0x266c8a52
xor edx, 0x485c39ee
xor edx, 0x5aec6328
xor edx, 0x3e748ecf
xor edx, 0x3802bb9b
add edx, 0x1dc40029
add edx, 0x22f21815
sub edx, 0x7360fd90
lea rcx, [rbp - 0x50]
call fcn.140038dd0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], 0x62cf1765
sub qword [rbp - 0x80], 0x5fe7dfff
add qword [rbp - 0x80], 0x1d3bba86
sub qword [rbp - 0x80], 0x56da537
sub qword [rbp - 0x80], 0x1a50f718
xor qword [rbp - 0x80], 0x1d77c7d7
add qword [rbp - 0x80], 0x266783db
sub qword [rbp - 0x80], 0x1a9210b4
xor qword [rbp - 0x80], 0x28e9057c
mov qword [rbp - 0x78], 0x7e295e4a
sub qword [rbp - 0x78], 0x2fcb3267
sub qword [rbp - 0x78], 0x2e7342b9
xor qword [rbp - 0x78], 0x36687767
add qword [rbp - 0x78], 0x3c8dca38
sub qword [rbp - 0x78], 0x5d2268a
sub qword [rbp - 0x78], 0x3195c3f7
sub qword [rbp - 0x78], 0x2ea87df5
movsd xmm0, qword [0x140001960]
movsd qword [rsp + 0x70], xmm0
mov ecx, dword [0x140001968]
mov dword [rsp + 0x78], ecx
movzx ecx, byte [0x14000196c]
mov byte [rsp + 0x7c], cl
mov byte [rsp + 0x7d], 0x1b
sub byte [rsp + 0x7d], 0x11
xor byte [rsp + 0x7d], 0x41
add byte [rsp + 0x7d], 0xc
sub byte [rsp + 0x7d], 0x21
xor byte [rsp + 0x7d], 0x36
mov byte [rdi + 0x28], 0x3b
add byte [rdi + 0x28], 0x17
xor byte [rdi + 0x28], 4
xor byte [rdi + 0x28], 0x1b
sub byte [rdi + 0x28], 0x2c
sub byte [rdi + 0x28], 0x20
cmp byte [rdi + 0x29], 0
jne 0x14003f2cd
lea rbx, [0x140004a88]
mov qword [rbp - 0x30], rbx
lea rcx, [rbp - 0x28]
call sub.VCRUNTIME140.dll___std_exception_destroy
mov qword [rbp - 0x50], rbx
lea rcx, [rbp - 0x48]
call sub.VCRUNTIME140.dll___std_exception_destroy
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x14003f183
inc rdx
mov rcx, qword [rbp - 0x70]
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14003f17e
nop
sub rdx, 0x2fea2aa6
add rdx, 0x2fea2acd
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xffffffffe78f02c4
add rax, 0xffffffffe78f02bc
cmp rax, 0x1f
jbe 0x14003f17e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fd08c
mov qword [rbp - 0x60], 0x3ad373ac
add qword [rbp - 0x60], 0x891d484
sub qword [rbp - 0x60], 0x1edfbc5
sub qword [rbp - 0x60], 0x2156adf
add qword [rbp - 0x60], 0x1c84f88e
xor qword [rbp - 0x60], 0x5be6da1a
mov qword [rbp - 0x58], 0x228e3723
add qword [rbp - 0x58], 0x420fd8e2
sub qword [rbp - 0x58], 0x1d6418ca
sub qword [rbp - 0x58], 0x338ec979
sub qword [rbp - 0x58], 0xff677ef
xor qword [rbp - 0x58], 0xe88682a
xor qword [rbp - 0x58], 0xd3cddf6
mov byte [rbp - 0x70], 0x16
add byte [rbp - 0x70], 0x59
sub byte [rbp - 0x70], 0x52
sub byte [rbp - 0x70], 0x17
add byte [rbp - 0x70], 0xa
add byte [rbp - 0x70], 0x4b
sub byte [rbp - 0x70], 0x5b
xchg rdx, rdi
mov rdi, qword [rsp + 0x68]
xchg rdi, rdx
cmp rdx, 0x10
jb 0x14003f26a
inc rdx
xchg r12, rcx
mov r12, qword [rsp + 0x50]
xchg rcx, r12
xchg r9, rax
mov r9, rcx
xchg r9, rax
cmp rdx, 0x1000
jb 0x14003f264
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
neg rax
add rax, 8
neg rax
cmp rax, 0x1f
jbe 0x14003f264
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fd08c
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x14003f2c6
inc rdx
xchg rcx, r13
mov r13, qword [rsp + 0x30]
xchg rcx, r13
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14003f2c1
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
neg rax
add rax, 8
neg rax
cmp rax, 0x1f
jbe 0x14003f2c1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fd08c
xor al, al
jmp 0x14003ed4a
xchg r10, rax
mov rdx, r10
xchg r10, rax
lea rcx, [rbp - 0x10]
call fcn.14004bfd0
lea rdx, [0x1402158b0]
lea rcx, [rbp - 0x10]
call sub.VCRUNTIME140.dll__CxxThrowException
int3