Function at 0x140049c10
Capabilities:
Contain obfuscated stackstrings

Disassembly:
xchg rbx, r15
mov qword [rsp + 8], r15
xchg rbx, r15
push rdx
mov qword [rsp], rbp
lea rbp, [rsp - 0x120]
sub rsp, 0x220
mov rbx, rcx
movups xmm0, xmmword [rdx]
xchg r14, rcx
movups xmmword [r14], xmm0
xchg r14, rcx
mov dword [rcx + 0x10], 0x571dee84
sub dword [rcx + 0x10], 0x2ac77eaa
xor dword [rcx + 0x10], 0x6bdf1ca9
sub dword [rcx + 0x10], 0x438f8e12
add dword [rcx + 0x10], 0x4aa6c080
add dword [rcx + 0x10], 0x5c3b356
add dword [rcx + 0x10], 0xab9ba6c8
xor eax, eax
xchg r9, rax
mov qword [rcx + 0x18], r9
xchg r9, rax
mov byte [rcx + 0x20], 0x2a
xor byte [rcx + 0x20], 7
xor byte [rcx + 0x20], 0x6e
xor byte [rcx + 0x20], 0x25
xor byte [rcx + 0x20], 2
sub byte [rcx + 0x20], 0x2b
sub byte [rcx + 0x20], 0x2c
xor byte [rcx + 0x20], 0xc
mov dword [rcx + 0x24], r8d
mov qword [rcx + 0x28], rax
movdqa xmm0, xmmword [0x140002cd0]
movdqa xmm1, xmmword [0x140002ce0]
xchg rcx, r14
movups xmmword [r14 + 0x30], xmm0
xchg rcx, r14
xchg rcx, rsi
movups xmmword [rsi + 0x40], xmm1
xchg rsi, rcx
mov dword [rbp + 0xa0], 0x41835c7d
xor dword [rbp + 0xa0], 0x65ad6df
add dword [rbp + 0xa0], 0x32ce439
sub dword [rbp + 0xa0], 0x44770fc1
add dword [rbp + 0xa0], 0xbd03e80
add dword [rbp + 0xa0], 0x40799c24
xor dword [rbp + 0xa0], 0x3b6e5392
sub dword [rbp + 0xa0], 0x69b769b7
xorps xmm0, xmm0
xchg rcx, rbp
movups xmmword [rcx + 0xa8], xmm0
xchg rcx, rbp
movdqa xmm1, xmmword [0x140002cc0]
xchg rdi, rbp
movdqu xmmword [rdi + 0xb8], xmm1
xchg rbp, rdi
mov eax, dword [0x140001878]
mov dword [rbp + 0xa8], eax
movzx eax, word [0x14000187c]
mov word [rbp + 0xac], ax
mov byte [rbp + 0xae], 0x4f
sub byte [rbp + 0xae], 0x4a
add byte [rbp + 0xae], 0x19
sub byte [rbp + 0xae], 0x1c
xor byte [rbp + 0xae], 0x51
xor byte [rbp + 0xae], 0x45
xor byte [rbp + 0xae], 0x16
mov dword [rbp + 0x78], 0xe6ee955
sub dword [rbp + 0x78], 0xd8e1b00
add dword [rbp + 0x78], 0x1fad230
xor dword [rbp + 0x78], 0x7b292333
xor dword [rbp + 0x78], 0x54c63837
xor dword [rbp + 0x78], 0x2d34bbec
movups xmmword [rbp + 0x80], xmm0
movdqu xmmword [rbp + 0x90], xmm1
mov eax, dword [0x140001880]
mov dword [rbp + 0x80], eax
movzx eax, word [0x140001884]
mov word [rbp + 0x84], ax
mov byte [rbp + 0x86], 0x71
sub byte [rbp + 0x86], 0x62
xor byte [rbp + 0x86], 7
xor byte [rbp + 0x86], 0x65
xor byte [rbp + 0x86], 0x39
xor byte [rbp + 0x86], 0x54
mov dword [rbp + 0x50], 0x7ec721a0
xor dword [rbp + 0x50], 0x7c26832f
add dword [rbp + 0x50], 0x1d976ca6
xor dword [rbp + 0x50], 0x785dd791
xor dword [rbp + 0x50], 0x57b9fb22
xor dword [rbp + 0x50], 0xf9d23ea
xchg rbp, rcx
movups xmmword [rcx + 0x58], xmm0
xchg rbp, rcx
movdqa xmm1, xmmword [0x140002cb0]
xchg rcx, rbp
movdqu xmmword [rcx + 0x68], xmm1
xchg rcx, rbp
mov eax, dword [0x140001888]
mov dword [rbp + 0x58], eax
movzx eax, byte [0x14000188c]
mov byte [rbp + 0x5c], al
mov byte [rbp + 0x5d], 0x75
xor byte [rbp + 0x5d], 0x2a
xor byte [rbp + 0x5d], 0x50
add byte [rbp + 0x5d], 0x17
add byte [rbp + 0x5d], 0x14
xor byte [rbp + 0x5d], 0x3a
mov dword [rbp + 0xf0], 0x2efb11ea
sub dword [rbp + 0xf0], 0x2a118e6f
xor dword [rbp + 0xf0], 0x5c967d8f
sub dword [rbp + 0xf0], 0x3898247f
xor dword [rbp + 0xf0], 0x5910a00d
xor dword [rbp + 0xf0], 0x511fd459
sub dword [rbp + 0xf0], 0x17e8adb8
xchg r14, rbp
movups xmmword [r14 + 0xf8], xmm0
xchg r14, rbp
movdqa xmm1, xmmword [0x140002ca0]
xchg rbp, rdi
movdqu xmmword [rdi + 0x108], xmm1
xchg rdi, rbp
mov dword [rbp + 0xf8], 0x3f5f7a18
xor dword [rbp + 0xf8], 0x107b0bac
xor dword [rbp + 0xf8], 0x465d725d
sub dword [rbp + 0xf8], 0x2838c3a3
add dword [rbp + 0xf8], 0x1a2adff5
sub dword [rbp + 0xf8], 0x1d9e3890
xor dword [rbp + 0xf8], 0x2ed5beb2
add dword [rbp + 0xf8], 0x1e8c39fd
add dword [rbp + 0xf8], 0x6cedb53
mov byte [rbp + 0xfc], 0x3d
xor byte [rbp + 0xfc], 0x1b
add byte [rbp + 0xfc], 0x42
xor byte [rbp + 0xfc], 0x40
add byte [rbp + 0xfc], 0x12
xor byte [rbp + 0xfc], 0x51
sub byte [rbp + 0xfc], 0x6b
mov dword [rbp + 0x28], 0x51d8fa75
sub dword [rbp + 0x28], 0x36131866
xor dword [rbp + 0x28], 0x68fb6994
sub dword [rbp + 0x28], 0x720be568
xor dword [rbp + 0x28], 0x1fc39ea8
sub dword [rbp + 0x28], 0x1ef13837
xchg rbp, r11
movups xmmword [r11 + 0x30], xmm0
xchg r11, rbp
movdqa xmm1, xmmword [0x140002cc0]
xchg rdi, rbp
movdqu xmmword [rdi + 0x40], xmm1
xchg rbp, rdi
mov eax, dword [0x140001890]
mov dword [rbp + 0x30], eax
movzx eax, word [0x140001894]
mov word [rbp + 0x34], ax
mov byte [rbp + 0x36], 0x18
xor byte [rbp + 0x36], 0x7f
xor byte [rbp + 0x36], 0x12
sub byte [rbp + 0x36], 0x61
sub byte [rbp + 0x36], 0x10
add byte [rbp + 0x36], 0x57
sub byte [rbp + 0x36], 0x5b
mov dword [rbp], 0x477da281
add dword [rbp], 0xe208c57
xor dword [rbp], 0x724b56f0
xor dword [rbp], 0x5f3bf3e
xor dword [rbp], 0x194a92c4
sub dword [rbp], 0x90949b7
add dword [rbp], 0x4a1ff5e5
xor dword [rbp], 0x64a5843e
xor dword [rbp], 0x1826866b
xchg r8, rbp
movups xmmword [r8 + 8], xmm0
xchg rbp, r8
movdqa xmm1, xmmword [0x140002cb0]
xchg rdi, rbp
movdqu xmmword [rdi + 0x18], xmm1
xchg rdi, rbp
mov eax, dword [0x140001898]
mov dword [rbp + 8], eax
movzx eax, byte [0x14000189c]
mov byte [rbp + 0xc], al
mov byte [rbp + 0xd], 0x7b
xor byte [rbp + 0xd], 0x5f
add byte [rbp + 0xd], 0x40
sub byte [rbp + 0xd], 0x2f
xor byte [rbp + 0xd], 0x62
add byte [rbp + 0xd], 0x1f
sub byte [rbp + 0xd], 0x44
sub byte [rbp + 0xd], 0x32
mov dword [rbp - 0x28], 0x5583b45
add dword [rbp - 0x28], 0xb228086
sub dword [rbp - 0x28], 0x208e275
sub dword [rbp - 0x28], 0x1c87fd
add dword [rbp - 0x28], 0x67247505
sub dword [rbp - 0x28], 0x18b03ba2
xor dword [rbp - 0x28], 0x730d22f6
sub dword [rbp - 0x28], 0x12f8a485
sub dword [rbp - 0x28], 0x1ccc0378
xchg r8, rbp
movups xmmword [r8 - 0x20], xmm0
xchg rbp, r8
movdqa xmm1, xmmword [0x140002cc0]
xchg r10, rbp
movdqu xmmword [r10 - 0x10], xmm1
xchg rbp, r10
mov eax, dword [0x1400018a0]
mov dword [rbp - 0x20], eax
movzx eax, word [0x1400018a4]
mov word [rbp - 0x1c], ax
mov byte [rbp - 0x1a], 0x12
add byte [rbp - 0x1a], 0x3c
sub byte [rbp - 0x1a], 0x3f
add byte [rbp - 0x1a], 0x1d
sub byte [rbp - 0x1a], 0x19
sub byte [rbp - 0x1a], 0x13
mov dword [rbp - 0x50], 0x5713cc92
xor dword [rbp - 0x50], 0x3aed9de6
sub dword [rbp - 0x50], 0x57a8973e
add dword [rbp - 0x50], 0x4dd15c79
xor dword [rbp - 0x50], 0x2a78a2aa
sub dword [rbp - 0x50], 0x4e5fb3b9
movups xmmword [rbp - 0x48], xmm0
movdqa xmm1, xmmword [0x140002cb0]
xchg rbp, r11
movdqu xmmword [r11 - 0x38], xmm1
xchg r11, rbp
mov eax, dword [0x1400018a8]
mov dword [rbp - 0x48], eax
movzx eax, byte [0x1400018ac]
mov byte [rbp - 0x44], al
mov byte [rbp - 0x43], 0x77
sub byte [rbp - 0x43], 0x57
add byte [rbp - 0x43], 0x15
sub byte [rbp - 0x43], 4
xor byte [rbp - 0x43], 0x79
sub byte [rbp - 0x43], 0x48
mov dword [rbp - 0x78], 0x38a4fa4
xor dword [rbp - 0x78], 0x361e1a84
add dword [rbp - 0x78], 0x151a1ef3
add dword [rbp - 0x78], 0x30e79539
sub dword [rbp - 0x78], 0xfa8310
sub dword [rbp - 0x78], 0x7a9b85f3
movups xmmword [rbp - 0x70], xmm0
xchg rbp, rcx
movdqu xmmword [rcx - 0x60], xmm1
xchg rbp, rcx
mov eax, dword [0x1400018b0]
mov dword [rbp - 0x70], eax
movzx eax, byte [0x1400018b4]
mov byte [rbp - 0x6c], al
mov byte [rbp - 0x6b], 0x54
add byte [rbp - 0x6b], 0x1e
sub byte [rbp - 0x6b], 0x5e
add byte [rbp - 0x6b], 0x3a
xor byte [rbp - 0x6b], 0x52
add byte [rbp - 0x6b], 0x2b
sub byte [rbp - 0x6b], 0x34
add byte [rbp - 0x6b], 0x40
xor byte [rbp - 0x6b], 0x53
mov dword [rsp + 0x60], 0x76c03919
sub dword [rsp + 0x60], 0xd2a935e
xor dword [rsp + 0x60], 0x109d38d1
sub dword [rsp + 0x60], 0x5f2b2e49
add dword [rsp + 0x60], 0x4a31285e
xor dword [rsp + 0x60], 0x7cd9e07e
sub dword [rsp + 0x60], 0x18d776bd
movups xmmword [rsp + 0x68], xmm0
movdqa xmm1, xmmword [0x140002cc0]
movdqu xmmword [rsp + 0x78], xmm1
mov eax, dword [0x1400018b8]
mov dword [rsp + 0x68], eax
movzx eax, word [0x1400018bc]
mov word [rsp + 0x6c], ax
mov byte [rsp + 0x6e], 0x46
sub byte [rsp + 0x6e], 0x3b
add byte [rsp + 0x6e], 0x5b
xor byte [rsp + 0x6e], 0x40
xor byte [rsp + 0x6e], 0x26
add byte [rsp + 0x6e], 0x1e
sub byte [rsp + 0x6e], 0x1e
mov dword [rbp + 0xc8], 0x3d142200
xor dword [rbp + 0xc8], 0x30f3810
add dword [rbp + 0xc8], 0x182b61b4
xor dword [rbp + 0xc8], 0x6834a1d0
sub dword [rbp + 0xc8], 0x1adc7aa1
add dword [rbp + 0xc8], 0x1aaaab8
add dword [rbp + 0xc8], 0x154d0a25
xor dword [rbp + 0xc8], 0x7fa1b795
sub dword [rbp + 0xc8], 0x452fa382
xchg rbp, r12
movups xmmword [r12 + 0xd0], xmm0
xchg rbp, r12
movdqa xmm1, xmmword [0x140002ca0]
xchg r8, rbp
movdqu xmmword [r8 + 0xe0], xmm1
xchg r8, rbp
mov dword [rbp + 0xd0], 0x442a8cfc
xor dword [rbp + 0xd0], 0x870031
xor dword [rbp + 0xd0], 0x5242bf63
add dword [rbp + 0xd0], 0x4690a343
xor dword [rbp + 0xd0], 0x5efb94ac
xor dword [rbp + 0xd0], 0x39a28aa7
xor dword [rbp + 0xd0], 0x4847a099
mov byte [rbp + 0xd4], 0xa
add byte [rbp + 0xd4], 0x45
sub byte [rbp + 0xd4], 0x1a
sub byte [rbp + 0xd4], 0xa
xor byte [rbp + 0xd4], 0x3d
sub byte [rbp + 0xd4], 0xc
xor byte [rbp + 0xd4], 0x78
sub byte [rbp + 0xd4], 1
sub byte [rbp + 0xd4], 0x71
add rcx, 0x50
lea rax, [rbp + 0xa0]
xchg rdi, rax
mov qword [rsp + 0x58], rdi
xchg rdi, rax
lea rax, [rbp + 0x78]
xchg r8, rax
mov qword [rsp + 0x50], r8
xchg r8, rax
lea rax, [rbp + 0x50]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x28]
xchg r13, rax
mov qword [rsp + 0x38], r13
xchg r13, rax
lea rax, [rbp]
xchg r9, rax
mov qword [rsp + 0x30], r9
xchg r9, rax
lea rax, [rbp - 0x28]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x78]
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0xc8]
call fcn.1400484a0
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0x10
jb 0x14004a428
inc rdx
mov rcx, qword [rbp + 0xd0]
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14004a423
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
ja 0x14004a77d
call fcn.1401fcb88
xchg rdx, r8
mov r8, qword [rbp - 0x80]
xchg r8, rdx
cmp rdx, 0x10
jb 0x14004a47c
inc rdx
xchg rcx, r10
mov r10, qword [rsp + 0x68]
xchg r10, rcx
xchg rdi, rax
mov rdi, rcx
xchg rdi, rax
cmp rdx, 0x1000
jb 0x14004a477
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
ja 0x14004a77d
call fcn.1401fcb88
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x14004a4bf
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a4ba
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004a77d
call fcn.1401fcb88
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x14004a50f
inc rdx
mov rcx, qword [rbp - 0x48]
xchg r14, rax
mov r14, rcx
xchg r14, rax
cmp rdx, 0x1000
jb 0x14004a50a
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
add rax, 0xffffffffa715d343
sub rax, 0xffffffffa715d34b
cmp rax, 0x1f
ja 0x14004a77d
call fcn.1401fcb88
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14004a565
inc rdx
mov rcx, qword [rbp - 0x20]
xchg r15, rax
mov r15, rcx
xchg r15, rax
cmp rdx, 0x1000
jb 0x14004a560
neg rdx
add rdx, 0xffffffffffffffd9
neg rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
add rax, 0xffffffffc4130058
sub rax, 0xffffffffc4130060
cmp rax, 0x1f
ja 0x14004a77d
call fcn.1401fcb88
xchg rdx, rsi
mov rsi, qword [rbp + 0x20]
xchg rdx, rsi
cmp rdx, 0x10
jb 0x14004a5b8
inc rdx
xchg rcx, r12
mov r12, qword [rbp + 8]
xchg rcx, r12
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14004a5b3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004a77d
call fcn.1401fcb88
xchg rdx, r13
mov r13, qword [rbp + 0x48]
xchg r13, rdx
cmp rdx, 0x10
jb 0x14004a601
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a5fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
ja 0x14004a77d
call fcn.1401fcb88
mov rdx, qword [rbp + 0x110]
cmp rdx, 0x10
jb 0x14004a662
inc rdx
mov rcx, qword [rbp + 0xf8]
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14004a65d
nop
add rdx, 0x1e28125b
sub rdx, 0x1e281234
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
add rax, 0xffffffffd1027724
sub rax, 0xffffffffd102772c
cmp rax, 0x1f
ja 0x14004a77d
call fcn.1401fcb88
xchg rbx, rdx
mov rbx, qword [rbp + 0x70]
xchg rdx, rbx
cmp rdx, 0x10
jb 0x14004a6bb
inc rdx
xchg r13, rcx
mov r13, qword [rbp + 0x58]
xchg rcx, r13
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14004a6b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
neg rax
add rax, 8
neg rax
cmp rax, 0x1f
ja 0x14004a77d
call fcn.1401fcb88
xchg r14, rdx
mov r14, qword [rbp + 0x98]
xchg rdx, r14
cmp rdx, 0x10
jb 0x14004a71b
inc rdx
mov rcx, qword [rbp + 0x80]
xchg rcx, r14
mov rax, r14
xchg rcx, r14
cmp rdx, 0x1000
jb 0x14004a716
nop
sub rdx, 0x7f7ab176
add rdx, 0x7f7ab19d
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
ja 0x14004a77d
call fcn.1401fcb88
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0x10
jb 0x14004a789
inc rdx
xchg rcx, r13
mov r13, qword [rbp + 0xa8]
xchg r13, rcx
xchg r14, rax
mov r14, rcx
xchg r14, rax
cmp rdx, 0x1000
jb 0x14004a784
nop
add rdx, 0x820fe7e
sub rdx, 0x820fe57
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xffffffffdec97ee2
add rax, 0xffffffffdec97eda
cmp rax, 0x1f
jbe 0x14004a784
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcb88
xchg r8, rax
mov r8, rbx
xchg r8, rax
xchg rbx, rbp
mov rbp, qword [rsp + 0x230]
xchg rbp, rbx
add rsp, 0x220
nop
xchg qword [rsp], rbp
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]