Function at 0x43c530
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x178
xor eax, eax
mov ebx, 0xffffe668
xor r11d, r11d
mov ebp, 0x6564
mov r12d, 0x723b
mov r13, rcx
mov ecx, 0x1d
mov word [rsp + 0x80], bx
mov rsi, rdx
lea rdi, [rsp + 0x82]
movzx edx, byte [r13 + 0x3a6]
rep stosq qword [rdi], rax
mov ecx, dword [r13 + 0x3a0]
movabs rax, 0x4d20101a8c00101
mov dword [rsp + 0x8d], 0x4d014014
mov qword [rsp + 0x96], rax
lea rbx, [rsp + 0x80]
movabs rax, 0x626104d20101a8c0
mov qword [rsp + 0x9e], rax
movabs rax, 0x6e69622e74736574
mov qword [rsp + 0x108], rax
mov rax, qword [0x005270d0]
mov dword [rsp + 0x86], ecx
movzx ecx, word [r13 + 0x3a4]
mov word [rsp + 0xae], bp
lea rbp, [rsp + 0x58]
mov word [rdi], r11w
mov byte [rdi + 2], 0
mov edi, 0x7010
mov byte [rsp + 0x83], 0xe6
mov byte [rsp + 0x85], 0x68
mov word [rbx + 0xa], cx
movsx cx, byte [rsi]
mov word [rsp + 0x92], di
mov byte [rbx + 0xc], dl
lea rdx, [rsp + 0x4c]
mov qword [rsp + 0x50], rax
lea r8, [rdx + 1]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x50]
movzx ecx, cx
mov byte [rsp + 0xa6], 0x63
mov byte [rsp + 0xb0], 0x66
mov dword [rsp + 0xb8], 0x7563742f
mov byte [rsp + 0xbc], 0x2f
mov byte [rsp + 0xe0], 0x2f
mov word [rsp + 0x16c], r12w
mov byte [rsp + 0x16e], 0x16
mov qword [rsp + 0x38], rax
call fcn.0040f1c0
movzx eax, byte [rsp + 0x4c]
lea rdx, [rsp + 0x4e]
mov ecx, 9
lea r8, [rdx + 1]
lea rbp, [rsp + 0x58]
mov byte [rsp + 0x94], al
movzx eax, byte [rsp + 0x4d]
mov byte [rsp + 0x95], al
lea rax, [rsp + 0x50]
mov qword [rsp + 0x38], rax
call fcn.0040f240
movzx eax, byte [rsp + 0x4e]
lea rdx, [rsi + 1]
mov r8d, 0xd4
lea rcx, [rbx + 0x18]
mov byte [rsp + 0x96], al
movzx eax, byte [rsp + 0x4f]
mov byte [rsp + 0x97], al
call fcn.00453060
lea r9, [rbx + 6]
mov edx, 0xffffffff
lea r10, [rbx + 0xec]
nop word [rax + rax]
movzx eax, byte [r9]
mov ecx, 8
xor edx, eax
nop dword [rax + rax]
movzx eax, dx
sar eax, 1
mov r8d, eax
xor r8w, 0xa001
and edx, 1
mov edx, r8d
cmove edx, eax
sub ecx, 1
jne 0x43c710
add r9, 1
cmp r10, r9
jne 0x43c700
lea rax, [rsp + 0x50]
mov byte [rsp + 0x16c], dl
shr dx, 8
mov r8d, 0xef
mov byte [rsp + 0x16d], dl
lea rbp, [rsp + 0x58]
mov rdx, rbx
mov rcx, rax
mov qword [rsp + 0x38], rax
call qword [0x005270e0]
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x70], rax
mov edx, dword [rax]
add edx, 1
cmp edx, 1
ja 0x43caaa
lea rsi, [rsp + 0x70]
mov rcx, r13
mov rdx, rsi
call fcn.0042c940
mov rcx, qword [rsp + 0x70]
mov eax, dword [rcx]
test eax, eax
je 0x43ca94
cmp eax, 0xffffffff
je 0x43c7b3
lock sub dword [rcx], 1
mov rcx, qword [rsp + 0x70]
je 0x43ca94
mov rax, qword [rsp + 0x50]
lea rbp, [rsp + 0x58]
mov r10d, dword [rax + 4]
test r10d, r10d
jle 0x43c97a
mov ebx, 1
mov r14, qword [0x005273a8]
lea rbp, [rsp + 0x58]
mov r15, qword [0x00527298]
jmp 0x43c8b8
movsxd rcx, dword [rax + 4]
mov r8d, dword [rax + 8]
lea edx, [rcx + 2]
and r8d, 0x7fffffff
cmp edx, r8d
jbe 0x43c816
mov r8d, 1
mov rcx, rsi
call qword [0x00527248]
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx + 1]
mov dword [rax + 4], edx
add rax, qword [rax + 0x10]
mov edx, 0x20
lea rax, [rax + rcx*2]
xor ecx, ecx
mov word [rax], dx
mov rdx, rsi
mov word [rax + 2], cx
mov rcx, rbp
call r15
mov rcx, qword [rsp + 0x70]
mov eax, dword [rcx]
test eax, eax
je 0x43ca62
cmp eax, 0xffffffff
je 0x43c85e
lock sub dword [rcx], 1
mov rcx, qword [rsp + 0x70]
je 0x43ca62
mov rcx, qword [rsp + 0x68]
mov eax, dword [rcx]
test eax, eax
je 0x43c935
cmp eax, 0xffffffff
je 0x43c881
lock sub dword [rcx], 1
mov rcx, qword [rsp + 0x68]
je 0x43c935
mov rcx, qword [rsp + 0x60]
mov eax, dword [rcx]
test eax, eax
je 0x43c955
cmp eax, 0xffffffff
je 0x43c8a4
lock sub dword [rcx], 1
mov rcx, qword [rsp + 0x60]
je 0x43c955
mov rax, qword [rsp + 0x50]
mov edx, ebx
add rbx, 1
cmp edx, dword [rax + 4]
jge 0x43c97a
lea rcx, [0x004a0d91]
mov edx, 2
call qword [0x00527278]
lea rdi, [rsp + 0x68]
mov r9d, 0x30
mov qword [rsp + 0x60], rax
movzx r8d, byte [rsp + rbx + 0x7f]
lea r12, [rsp + 0x60]
mov word [rsp + 0x28], r9w
mov rcx, rdi
mov r9d, 2
mov dword [rsp + 0x20], 0x10
mov rdx, r12
call r14
mov rdx, qword [rsp + 0x68]
mov qword [rsp + 0x70], rdx
mov eax, dword [rdx]
add eax, 1
cmp eax, 1
ja 0x43ca78
mov rax, qword [rsp + 0x70]
mov edx, dword [rax]
cmp edx, 1
jbe 0x43c7e7
mov edx, dword [rax + 4]
add edx, 2
jmp 0x43c7fe
mov r8d, 8
mov edx, 2
call qword [0x005270c8]
mov rcx, qword [rsp + 0x60]
mov eax, dword [rcx]
test eax, eax
jne 0x43c890
mov edx, 2
mov r8d, 8
call qword [0x005270c8]
mov rax, qword [rsp + 0x50]
mov edx, ebx
add rbx, 1
cmp edx, dword [rax + 4]
jl 0x43c8b8
mov rax, qword [r13 + 0x40]
mov edx, 7
mov rcx, rsi
mov rbx, qword [rax + 0x108]
call qword [0x00527478]
mov rdx, rsi
mov rcx, rbx
mov rbx, qword [0x00527c08]
call rbx
mov rcx, r13
call fcn.0042cc80
mov rax, qword [r13 + 0x40]
lea rdi, [rsp + 0x68]
mov r8d, 0xd
lea rdx, [0x004a0d94]
mov rcx, rdi
mov r12, qword [rax + 0x108]
call qword [0x00527268]
mov rdx, rbp
mov rcx, rdi
call qword [0x00527298]
lea r8, [0x004a0da2]
mov rdx, rdi
mov rcx, rsi
call fcn.00491630
mov rdx, rsi
mov rcx, r12
call qword [0x00527c30]
mov rcx, rsi
call fcn.00491270
mov rcx, rdi
call fcn.00491270
mov rax, qword [r13 + 0x40]
mov edx, 0x386487
mov rcx, rsi
mov rdi, qword [rax + 0x108]
call qword [0x00527480]
mov rdx, rsi
mov rcx, rdi
call rbx
mov rcx, rbp
call fcn.00491270
mov rcx, qword [rsp + 0x50]
mov eax, dword [rcx]
test eax, eax
je 0x43ca81
cmp eax, 0xffffffff
je 0x43ca4e
lock sub dword [rcx], 1
mov rcx, qword [rsp + 0x50]
je 0x43ca81
add rsp, 0x178
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov r8d, 8
mov edx, 2
call qword [0x005270c8]
jmp 0x43c85e
lock add dword [rdx], 1
jmp 0x43c91a
mov r8d, 8
mov edx, 1
call qword [0x005270c8]
jmp 0x43ca4e
mov r8d, 8
mov edx, 1
call qword [0x005270c8]
jmp 0x43c7b3
lock add dword [rax], 1
jmp 0x43c780