Function at 0x4a53e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x88
lea edi, [r9*8 + 8]
add edi, dword [rsp + 0xf0]
mov r14d, edx
mov r12, rcx
mov ecx, 0x3436
mov r13, r8
mov dword [rsp + 0x76], 0x20202020
mov word [rsp + 0x44], cx
lea rcx, [rsp + 0x70]
mov ebp, r9d
movabs rdx, 0x2020202020202020
mov qword [rsp + 0x46], rdx
lea rbx, [rsp + 0x40]
lea esi, [rdi + 7]
mov qword [rsp + 0x4e], rdx
and esi, 0xfffffff8
mov qword [rsp + 0x56], rdx
mov qword [rsp + 0x5e], rdx
mov r8d, esi
mov qword [rsp + 0x66], rdx
mov qword [rsp + 0x6e], rdx
mov edx, 0x2020
mov word [rsp + 0x7a], dx
mov edx, 0xa
mov dword [rsp + 0x40], 0x4d59532f
mov byte [rsp + 0x46], 0x2f
call fcn.00420510
test eax, eax
jne 0x4a54a0
xor eax, eax
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
xor ecx, ecx
call qword [sym.imp.msvcrt.dll__time64]
lea rcx, [rbx + 0x10]
mov edx, 0xc
lea r8, [0x005051e2]
mov r9d, eax
call fcn.00420460
xor r9d, r9d
mov edx, 6
lea rcx, [rbx + 0x1c]
lea r8, [0x005051e2]
call fcn.00420460
xor r9d, r9d
mov edx, 6
lea rcx, [rbx + 0x22]
lea r8, [0x005051e2]
call fcn.00420460
xor r9d, r9d
mov edx, 8
lea rcx, [rbx + 0x28]
lea r8, str.__7lo
call fcn.00420460
mov eax, 0xa60
mov r8, r12
mov rcx, rbx
mov edx, 0x3c
mov word [rsp + 0x7a], ax
call fcn.00425d40
cmp rax, 0x3c
jne 0x4a5480
lea rbx, [rsp + 0x38]
mov ecx, ebp
mov rdx, rbx
call fcn.00428500
mov r8, r12
mov edx, 8
mov rcx, rbx
call fcn.00425d40
cmp rax, 8
jne 0x4a5480
mov rax, qword [r12 + 0xd8]
test rax, rax
mov qword [rsp + 0x20], rax
je 0x4a5694
test ebp, ebp
je 0x4a5694
add r14d, esi
lea rax, [r14 + 0x44]
xor r14d, r14d
mov qword [rsp + 0x28], rax
cmp ebp, r14d
jbe 0x4a55f0
mov eax, r14d
mov rcx, qword [rsp + 0x20]
lea rax, [rax + rax*2]
cmp qword [r13 + rax*8 + 8], rcx
jne 0x4a55f0
lea eax, [r14 + 1]
lea rax, [rax + rax*2]
lea r15, [r13 + rax*8 + 8]
jmp 0x4a55c8
add r14d, 1
cmp ebp, r14d
je 0x4a55f0
add r15, 0x18
mov rax, qword [rsp + 0x20]
cmp qword [r15 - 0x18], rax
jne 0x4a55f0
mov rcx, qword [rsp + 0x28]
mov rdx, rbx
call fcn.00428500
mov r8, r12
mov edx, 8
mov rcx, rbx
call fcn.00425d40
cmp rax, 8
je 0x4a55b0
jmp 0x4a5480
mov rdx, qword [rsp + 0x28]
add rdx, 0x3c
test byte [r12 + 0x44], 1
jne 0x4a5611
mov rax, qword [rsp + 0x20]
mov rax, qword [rax + 0xc0]
add rdx, qword [rax + 8]
mov rax, rdx
shr rax, 0x3f
lea rcx, [rdx + rax]
and ecx, 1
sub rcx, rax
mov rax, rcx
add rax, rdx
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x20]
mov rax, qword [rax + 0xd0]
test rax, rax
mov qword [rsp + 0x20], rax
je 0x4a564c
cmp ebp, r14d
ja 0x4a5582
lea eax, [rbp - 1]
lea rax, [rax + rax*2]
lea r14, [r13 + rax*8 + 0x18]
jmp 0x4a5669
add r13, 0x18
cmp r14, r13
je 0x4a5698
mov rax, qword [r13]
mov rbp, qword [rax]
mov rcx, rbp
call sub.msvcrt.dll_strlen
mov r8, r12
mov rcx, rbp
lea rbx, [rax + 1]
mov rdx, rbx
call fcn.00425d40
cmp rax, rbx
je 0x4a5660
jmp 0x4a5480
test ebp, ebp
jne 0x4a564c
lea rbx, [0x005051ec]
sub esi, edi
jne 0x4a56aa
jmp 0x4a56c5
sub esi, 1
je 0x4a56c5
mov r8, r12
mov edx, 1
mov rcx, rbx
call fcn.00425d40
cmp rax, 1
je 0x4a56a5
jmp 0x4a5480
mov eax, 1
jmp 0x4a5482