Function at 0x140002930
Capabilities:
Contain obfuscated stackstrings
Terminate process

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x40
mov rax, qword [0x14001a008]
xor rax, rsp
mov qword [rbp - 8], rax
mov edx, 0xc
mov dword [rbp - 0x20], 0x2b3a3123
lea rcx, [rbp - 0x20]
mov dword [rbp - 0x1c], 0x2a342121
mov dword [rbp - 0x18], 0x362d367b
call fcn.1400010d0
mov edx, 0xc
mov qword [0x14001a6c0], rax
lea rcx, [rbp - 0x20]
mov dword [rbp - 0x20], 0x3c213e23
mov dword [rbp - 0x1c], 0x37263f3a
mov dword [rbp - 0x18], 0x362d367b
call fcn.1400010d0
mov edx, 0xd
mov qword [0x14001a6c8], rax
lea rcx, [rbp - 0x20]
mov dword [rbp - 0x20], 0x303a2105
mov dword [rbp - 0x1c], 0x653b3c38
mov dword [rbp - 0x18], 0x2b307d61
mov byte [rbp - 0x14], 0x30
call fcn.1400010d0
mov edx, 0xb
mov qword [0x14001a6d0], rax
lea rcx, [rbp - 0x20]
mov dword [rbp - 0x20], 0x303a2105
mov dword [rbp - 0x1c], 0x7d3b3c38
mov word [rbp - 0x18], 0x2b30
mov byte [rbp - 0x16], 0x30
call fcn.1400010d0
mov edx, 0x12
mov qword [0x14001a6d8], rax
lea rcx, [rbp - 0x20]
mov dword [rbp - 0x20], 0x3e3c2334
mov dword [rbp - 0x1c], 0x273c3d3a
mov dword [rbp - 0x18], 0x2b78213a
mov dword [rbp - 0x14], 0x367b656d
mov word [rbp - 0x10], 0x362d
call fcn.1400010d0
mov edx, 0x12
mov qword [0x14001a6e0], rax
lea rcx, [rbp - 0x20]
mov dword [rbp - 0x20], 0x3e3c2334
mov dword [rbp - 0x1c], 0x273c3d3a
mov dword [rbp - 0x18], 0x2b78213a
mov dword [rbp - 0x14], 0x367b6763
mov word [rbp - 0x10], 0x362d
call fcn.1400010d0
mov qword [0x14001a6e8], rax
call fcn.140001260
test eax, eax
je 0x140002a76
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.140001d90
mov eax, 2
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.140003690
add rsp, 0x40
pop rbp
ret
push rbx
sub rsp, 0x20
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call fcn.140002aa0
xor eax, eax
lea rcx, [0x14001a091]
xor r11d, r11d
lea rbx, [0x140000000]
nop
movzx edx, byte [rcx - 1]
xor r8d, r8d
cmp eax, 4
cmovne r8d, eax
test dl, dl
je 0x140002c8c
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a038]
xor r9d, r9d
mov byte [rcx - 1], dl
movzx edx, byte [rcx]
lea eax, [r8 + 1]
cmp r8d, 3
cmovne r9d, eax
test dl, dl
je 0x140002caf
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a038]
xor r8d, r8d
mov byte [rcx], dl
movzx edx, byte [rcx + 1]
lea eax, [r9 + 1]
cmp r9d, 3
cmovne r8d, eax
test dl, dl
je 0x140002cd2
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a038]
xor r9d, r9d
mov byte [rcx + 1], dl
movzx edx, byte [rcx + 2]
lea eax, [r8 + 1]
cmp r8d, 3
cmovne r9d, eax
test dl, dl
je 0x140002cf6
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a038]
xor r8d, r8d
mov byte [rcx + 2], dl
movzx edx, byte [rcx + 3]
lea eax, [r9 + 1]
cmp r9d, 3
cmovne r8d, eax
test dl, dl
je 0x140002d1a
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a038]
xor r9d, r9d
mov byte [rcx + 3], dl
movzx edx, byte [rcx + 4]
lea eax, [r8 + 1]
cmp r8d, 3
cmovne r9d, eax
test dl, dl
je 0x140002d3e
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a038]
xor r10d, r10d
mov byte [rcx + 4], dl
movzx edx, byte [rcx + 5]
lea eax, [r9 + 1]
cmp r9d, 3
cmovne r10d, eax
test dl, dl
je 0x140002d62
movsxd rax, r10d
xor dl, byte [rax + rbx + 0x1a038]
xor r8d, r8d
mov byte [rcx + 5], dl
movzx edx, byte [rcx + 6]
lea eax, [r10 + 1]
cmp r10d, 3
cmovne r8d, eax
test dl, dl
je 0x140002d86
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a038]
mov byte [rcx + 6], dl
lea eax, [r8 + 1]
add rcx, 8
add r11d, 8
cmp r11d, 8
jb 0x140002c70
xor eax, eax
lea rcx, str._d_____0a_26_____68
xor r10d, r10d
nop dword [rax + rax]
movzx edx, byte [rcx - 1]
xor r8d, r8d
cmp eax, 2
cmovne r8d, eax
test dl, dl
je 0x140002dcc
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a060]
xor r9d, r9d
mov byte [rcx - 1], dl
movzx edx, byte [rcx]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x140002def
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a060]
xor r8d, r8d
mov byte [rcx], dl
movzx edx, byte [rcx + 1]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x140002e12
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a060]
xor r9d, r9d
mov byte [rcx + 1], dl
movzx edx, byte [rcx + 2]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x140002e36
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a060]
xor r8d, r8d
mov byte [rcx + 2], dl
movzx edx, byte [rcx + 3]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x140002e5a
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a060]
xor r9d, r9d
mov byte [rcx + 3], dl
movzx edx, byte [rcx + 4]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x140002e7e
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a060]
xor r8d, r8d
mov byte [rcx + 4], dl
movzx edx, byte [rcx + 5]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x140002ea2
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a060]
xor r9d, r9d
mov byte [rcx + 5], dl
movzx edx, byte [rcx + 6]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x140002ec6
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a060]
xor r8d, r8d
mov byte [rcx + 6], dl
movzx edx, byte [rcx + 7]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x140002eea
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a060]
xor r9d, r9d
mov byte [rcx + 7], dl
movzx edx, byte [rcx + 8]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x140002f0e
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a060]
xor r8d, r8d
mov byte [rcx + 8], dl
movzx edx, byte [rcx + 9]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x140002f32
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a060]
xor r9d, r9d
mov byte [rcx + 9], dl
movzx edx, byte [rcx + 0xa]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x140002f56
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a060]
xor r8d, r8d
mov byte [rcx + 0xa], dl
movzx edx, byte [rcx + 0xb]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x140002f7a
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a060]
xor r9d, r9d
mov byte [rcx + 0xb], dl
movzx edx, byte [rcx + 0xc]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x140002f9e
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a060]
xor r8d, r8d
mov byte [rcx + 0xc], dl
movzx edx, byte [rcx + 0xd]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x140002fc2
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a060]
xor r9d, r9d
mov byte [rcx + 0xd], dl
movzx edx, byte [rcx + 0xe]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x140002fe6
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a060]
xor r8d, r8d
mov byte [rcx + 0xe], dl
movzx edx, byte [rcx + 0xf]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x14000300a
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a060]
xor r9d, r9d
mov byte [rcx + 0xf], dl
movzx edx, byte [rcx + 0x10]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x14000302e
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a060]
xor r8d, r8d
mov byte [rcx + 0x10], dl
movzx edx, byte [rcx + 0x11]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x140003052
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a060]
xor r9d, r9d
mov byte [rcx + 0x11], dl
movzx edx, byte [rcx + 0x12]
lea eax, [r8 + 1]
cmp r8d, 1
cmovne r9d, eax
test dl, dl
je 0x140003076
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a060]
xor r8d, r8d
mov byte [rcx + 0x12], dl
movzx edx, byte [rcx + 0x13]
lea eax, [r9 + 1]
cmp r9d, 1
cmovne r8d, eax
test dl, dl
je 0x14000309a
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a060]
mov byte [rcx + 0x13], dl
lea eax, [r8 + 1]
add rcx, 0x15
add r10d, 0x15
cmp r10d, 0x15
jb 0x140002db0
call fcn.140002aa0
xor eax, eax
lea rcx, [0x14001a079]
xor r11d, r11d
nop dword [rax]
nop dword [rax + rax]
movzx edx, byte [rcx - 1]
xor r8d, r8d
cmp eax, 7
cmovne r8d, eax
test dl, dl
je 0x1400030ec
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a090]
xor r9d, r9d
mov byte [rcx - 1], dl
movzx edx, byte [rcx]
lea eax, [r8 + 1]
cmp r8d, 6
cmovne r9d, eax
test dl, dl
je 0x14000310f
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a090]
xor r8d, r8d
mov byte [rcx], dl
movzx edx, byte [rcx + 1]
lea eax, [r9 + 1]
cmp r9d, 6
cmovne r8d, eax
test dl, dl
je 0x140003132
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a090]
xor r9d, r9d
mov byte [rcx + 1], dl
movzx edx, byte [rcx + 2]
lea eax, [r8 + 1]
cmp r8d, 6
cmovne r9d, eax
test dl, dl
je 0x140003156
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a090]
xor r8d, r8d
mov byte [rcx + 2], dl
movzx edx, byte [rcx + 3]
lea eax, [r9 + 1]
cmp r9d, 6
cmovne r8d, eax
test dl, dl
je 0x14000317a
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a090]
xor r9d, r9d
mov byte [rcx + 3], dl
movzx edx, byte [rcx + 4]
lea eax, [r8 + 1]
cmp r8d, 6
cmovne r9d, eax
test dl, dl
je 0x14000319e
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a090]
xor r10d, r10d
mov byte [rcx + 4], dl
movzx edx, byte [rcx + 5]
lea eax, [r9 + 1]
cmp r9d, 6
cmovne r10d, eax
test dl, dl
je 0x1400031c2
movsxd rax, r10d
xor dl, byte [rax + rbx + 0x1a090]
xor r8d, r8d
mov byte [rcx + 5], dl
movzx edx, byte [rcx + 6]
lea eax, [r10 + 1]
cmp r10d, 6
cmovne r8d, eax
test dl, dl
je 0x1400031e6
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a090]
mov byte [rcx + 6], dl
lea eax, [r8 + 1]
add rcx, 8
add r11d, 8
cmp r11d, 8
jb 0x1400030d0
xor eax, eax
lea rcx, [0x14001a065]
xor r10d, r10d
nop dword [rax + rax]
movzx edx, byte [rcx - 1]
xor r8d, r8d
cmp eax, 7
cmovne r8d, eax
test dl, dl
je 0x14000322c
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a090]
xor r9d, r9d
mov byte [rcx - 1], dl
movzx edx, byte [rcx]
lea eax, [r8 + 1]
cmp r8d, 6
cmovne r9d, eax
test dl, dl
je 0x14000324f
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a090]
xor r8d, r8d
mov byte [rcx], dl
movzx edx, byte [rcx + 1]
lea eax, [r9 + 1]
cmp r9d, 6
cmovne r8d, eax
test dl, dl
je 0x140003272
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a090]
xor r9d, r9d
mov byte [rcx + 1], dl
movzx edx, byte [rcx + 2]
lea eax, [r8 + 1]
cmp r8d, 6
cmovne r9d, eax
test dl, dl
je 0x140003296
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a090]
xor r8d, r8d
mov byte [rcx + 2], dl
movzx edx, byte [rcx + 3]
lea eax, [r9 + 1]
cmp r9d, 6
cmovne r8d, eax
test dl, dl
je 0x1400032ba
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a090]
mov byte [rcx + 3], dl
lea eax, [r8 + 1]
add rcx, 5
add r10d, 5
cmp r10d, 5
jb 0x140003210
call fcn.140002aa0
xor eax, eax
lea rcx, [0x14001a041]
xor r10d, r10d
nop dword [rax]
nop dword [rax + rax]
movzx edx, byte [rcx - 1]
xor r8d, r8d
cmp eax, 7
cmovne r8d, eax
test dl, dl
je 0x14000330c
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a090]
xor r9d, r9d
mov byte [rcx - 1], dl
movzx edx, byte [rcx]
lea eax, [r8 + 1]
cmp r8d, 6
cmovne r9d, eax
test dl, dl
je 0x14000332f
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a090]
xor r8d, r8d
mov byte [rcx], dl
movzx edx, byte [rcx + 1]
lea eax, [r9 + 1]
cmp r9d, 6
cmovne r8d, eax
test dl, dl
je 0x140003352
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a090]
xor r9d, r9d
mov byte [rcx + 1], dl
movzx edx, byte [rcx + 2]
lea eax, [r8 + 1]
cmp r8d, 6
cmovne r9d, eax
test dl, dl
je 0x140003376
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a090]
xor r8d, r8d
mov byte [rcx + 2], dl
movzx edx, byte [rcx + 3]
lea eax, [r9 + 1]
cmp r9d, 6
cmovne r8d, eax
test dl, dl
je 0x14000339a
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a090]
mov byte [rcx + 3], dl
lea eax, [r8 + 1]
add rcx, 5
add r10d, 5
cmp r10d, 5
jb 0x1400032f0
xor eax, eax
lea rcx, [0x14001a071]
xor r11d, r11d
nop
movzx edx, byte [rcx - 1]
xor r8d, r8d
cmp eax, 7
cmovne r8d, eax
test dl, dl
je 0x1400033dc
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a090]
xor r9d, r9d
mov byte [rcx - 1], dl
movzx edx, byte [rcx]
lea eax, [r8 + 1]
cmp r8d, 6
cmovne r9d, eax
test dl, dl
je 0x1400033ff
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a090]
xor r8d, r8d
mov byte [rcx], dl
movzx edx, byte [rcx + 1]
lea eax, [r9 + 1]
cmp r9d, 6
cmovne r8d, eax
test dl, dl
je 0x140003422
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a090]
xor r9d, r9d
mov byte [rcx + 1], dl
movzx edx, byte [rcx + 2]
lea eax, [r8 + 1]
cmp r8d, 6
cmovne r9d, eax
test dl, dl
je 0x140003446
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a090]
xor r8d, r8d
mov byte [rcx + 2], dl
movzx edx, byte [rcx + 3]
lea eax, [r9 + 1]
cmp r9d, 6
cmovne r8d, eax
test dl, dl
je 0x14000346a
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a090]
xor r9d, r9d
mov byte [rcx + 3], dl
movzx edx, byte [rcx + 4]
lea eax, [r8 + 1]
cmp r8d, 6
cmovne r9d, eax
test dl, dl
je 0x14000348e
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a090]
xor r10d, r10d
mov byte [rcx + 4], dl
movzx edx, byte [rcx + 5]
lea eax, [r9 + 1]
cmp r9d, 6
cmovne r10d, eax
test dl, dl
je 0x1400034b2
movsxd rax, r10d
xor dl, byte [rax + rbx + 0x1a090]
xor r8d, r8d
mov byte [rcx + 5], dl
movzx edx, byte [rcx + 6]
lea eax, [r10 + 1]
cmp r10d, 6
cmovne r8d, eax
test dl, dl
je 0x1400034d6
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a090]
mov byte [rcx + 6], dl
lea eax, [r8 + 1]
add rcx, 8
add r11d, 8
cmp r11d, 8
jb 0x1400033c0
xor eax, eax
lea rcx, [0x14001a081]
xor r10d, r10d
nop dword [rax + rax]
movzx edx, byte [rcx - 1]
xor r8d, r8d
cmp eax, 7
cmovne r8d, eax
test dl, dl
je 0x14000351c
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a090]
xor r9d, r9d
mov byte [rcx - 1], dl
movzx edx, byte [rcx]
lea eax, [r8 + 1]
cmp r8d, 6
cmovne r9d, eax
test dl, dl
je 0x14000353f
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a090]
xor r8d, r8d
mov byte [rcx], dl
movzx edx, byte [rcx + 1]
lea eax, [r9 + 1]
cmp r9d, 6
cmovne r8d, eax
test dl, dl
je 0x140003562
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a090]
xor r9d, r9d
mov byte [rcx + 1], dl
movzx edx, byte [rcx + 2]
lea eax, [r8 + 1]
cmp r8d, 6
cmovne r9d, eax
test dl, dl
je 0x140003586
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a090]
xor r8d, r8d
mov byte [rcx + 2], dl
movzx edx, byte [rcx + 3]
lea eax, [r9 + 1]
cmp r9d, 6
cmovne r8d, eax
test dl, dl
je 0x1400035aa
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a090]
xor r9d, r9d
mov byte [rcx + 3], dl
movzx edx, byte [rcx + 4]
lea eax, [r8 + 1]
cmp r8d, 6
cmovne r9d, eax
test dl, dl
je 0x1400035ce
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a090]
xor r8d, r8d
mov byte [rcx + 4], dl
movzx edx, byte [rcx + 5]
lea eax, [r9 + 1]
cmp r9d, 6
cmovne r8d, eax
test dl, dl
je 0x1400035f2
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a090]
xor r9d, r9d
mov byte [rcx + 5], dl
movzx edx, byte [rcx + 6]
lea eax, [r8 + 1]
cmp r8d, 6
cmovne r9d, eax
test dl, dl
je 0x140003616
movsxd rax, r9d
xor dl, byte [rax + rbx + 0x1a090]
xor r8d, r8d
mov byte [rcx + 6], dl
movzx edx, byte [rcx + 7]
lea eax, [r9 + 1]
cmp r9d, 6
cmovne r8d, eax
test dl, dl
je 0x14000363a
movsxd rax, r8d
xor dl, byte [rax + rbx + 0x1a090]
mov byte [rcx + 7], dl
lea eax, [r8 + 1]
add rcx, 9
add r10d, 9
cmp r10d, 9
jb 0x140003500
call fcn.140002aa0
add rsp, 0x20
pop rbx
jmp 0x140002930