Function at 0x1400d2a80
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1a0]
sub rsp, 0x2a0
mov rax, qword [0x140418ca8]
xor rax, rsp
mov qword [rbp + 0x190], rax
lea rax, [rbp - 0x38]
mov qword [rbp - 0x50], rax
lea rdx, [0x14041ec80]
lea rcx, [rbp - 0x38]
call fcn.14005dfe0
mov rsi, rax
lea rax, [rbp - 0x18]
mov qword [rbp - 0x48], rax
lea rdx, [0x14041ed18]
lea rcx, [rbp - 0x18]
call fcn.14005dfe0
mov rdi, rax
lea rax, [rbp + 8]
mov qword [rbp - 0x40], rax
lea rdx, [0x14041ecc0]
lea rcx, [rbp + 8]
call fcn.14005dfe0
mov rbx, rax
lea rdx, [0x14041ecf8]
lea rcx, [rbp + 0x28]
call fcn.14005dfe0
nop
mov qword [rsp + 0x20], rsi
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400c18b0
nop
mov dword [rsp + 0x50], 0x68e06b7
mov dword [rsp + 0x54], 0x68a06ba
mov dword [rsp + 0x58], 0x771076d
mov dword [rsp + 0x5c], 0x7710767
mov dword [rsp + 0x60], 0x7690747
mov dword [rsp + 0x64], 0x762076f
mov dword [rsp + 0x68], 0x77d0766
mov dword [rsp + 0x6c], 0x76e0724
mov dword [rsp + 0x70], 0x7680774
xor ebx, ebx
mov word [rsp + 0x74], bx
mov byte [rsp + 0x76], 1
mov ecx, ebx
mov edi, 0x6fc
nop dword [rax]
lea eax, [rdi + rcx]
xor word [rsp + rcx*2 + 0x50], ax
inc rcx
cmp rcx, 0x12
jb 0x1400d2b90
mov byte [rsp + 0x76], bl
lea rcx, [rsp + 0x50]
call fcn.1400c5f80
test al, al
jne 0x1400d337f
mov dword [rsp + 0x30], 0x69c06a8
mov dword [rsp + 0x34], 0x694068d
mov dword [rsp + 0x38], 0x766076d
mov dword [rsp + 0x3c], 0x72d0770
mov dword [rsp + 0x40], 0x77d0761
mov dword [rsp + 0x44], 0x763
mov byte [rsp + 0x48], 1
mov rcx, rbx
nop
lea eax, [rdi + rcx]
xor word [rsp + rcx*2 + 0x30], ax
inc rcx
cmp rcx, 0xb
jb 0x1400d2bf0
mov byte [rsp + 0x48], bl
lea rcx, [rsp + 0x30]
call fcn.1400c5f80
test al, al
jne 0x1400d33cb
mov dword [rsp + 0x50], 0x6a906b4
mov dword [rsp + 0x54], 0x6af06aa
mov dword [rsp + 0x58], 0x7640744
mov dword [rsp + 0x5c], 0x7760760
mov dword [rsp + 0x60], 0x7620763
mov dword [rsp + 0x64], 0x7750763
mov dword [rsp + 0x68], 0x740075d
mov dword [rsp + 0x6c], 0x76e0724
mov dword [rsp + 0x70], 0x7680774
mov word [rsp + 0x74], bx
mov byte [rsp + 0x76], 1
mov rcx, rbx
nop dword [rax]
lea eax, [rdi + rcx]
xor word [rsp + rcx*2 + 0x50], ax
inc rcx
cmp rcx, 0x12
jb 0x1400d2c70
mov byte [rsp + 0x76], bl
lea rcx, [rsp + 0x50]
call fcn.1400c5f80
test al, al
jne 0x1400d3415
mov dword [rsp + 0x50], 0x6a906b4
mov dword [rsp + 0x54], 0x6af06aa
mov dword [rsp + 0x58], 0x7640744
mov dword [rsp + 0x5c], 0x7760760
mov dword [rsp + 0x60], 0x7620763
mov dword [rsp + 0x64], 0x7750763
mov dword [rsp + 0x68], 0x77f075b
mov dword [rsp + 0x6c], 0x7250769
mov dword [rsp + 0x70], 0x7750769
mov dword [rsp + 0x74], 0x76b
mov byte [rsp + 0x78], 1
mov rcx, rbx
nop
lea eax, [rdi + rcx]
xor word [rsp + rcx*2 + 0x50], ax
inc rcx
cmp rcx, 0x13
jb 0x1400d2cf0
mov byte [rsp + 0x78], bl
lea rcx, [rsp + 0x50]
call fcn.1400c5f80
test al, al
jne 0x1400d346e
mov dword [rsp + 0x50], 0x69206ba
mov dword [rsp + 0x54], 0x69b0692
mov dword [rsp + 0x58], 0x7730765
mov dword [rsp + 0x5c], 0x76b0741
mov dword [rsp + 0x60], 0x76b0765
mov dword [rsp + 0x64], 0x7620761
mov dword [rsp + 0x68], 0x75f077b
mov dword [rsp + 0x6c], 0x76e0763
mov dword [rsp + 0x70], 0x723077b
mov dword [rsp + 0x74], 0x777076b
mov dword [rsp + 0x78], 0x775
mov byte [rsp + 0x7c], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rdi + rcx]
xor word [rsp + rcx*2 + 0x50], ax
inc rcx
cmp rcx, 0x15
jb 0x1400d2d80
mov byte [rsp + 0x7c], bl
lea rcx, [rsp + 0x50]
call fcn.1400c5f80
test al, al
jne 0x1400d34c5
mov dword [rsp + 0x50], 0x68f06ac
mov dword [rsp + 0x54], 0x69c0691
mov dword [rsp + 0x58], 0x7720765
mov dword [rsp + 0x5c], 0x74b0771
mov dword [rsp + 0x60], 0x7660765
mov dword [rsp + 0x64], 0x762076d
mov dword [rsp + 0x68], 0x727077a
mov dword [rsp + 0x6c], 0x773076f
mov dword [rsp + 0x70], 0x769
mov byte [rsp + 0x74], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rdi + rcx]
xor word [rsp + rcx*2 + 0x50], ax
inc rcx
cmp rcx, 0x11
jb 0x1400d2e00
mov byte [rsp + 0x74], bl
lea rcx, [rsp + 0x50]
call fcn.1400c5f80
test al, al
jne 0x1400d3514
mov dword [rsp + 0x30], 0x68f068c
mov dword [rsp + 0x34], 0x69c0691
mov dword [rsp + 0x38], 0x76e076d
mov dword [rsp + 0x3c], 0x72d076c
mov dword [rsp + 0x40], 0x77d0761
mov dword [rsp + 0x44], 0x763
mov byte [rsp + 0x48], 1
mov rcx, rbx
nop
lea eax, [rdi + rcx]
xor word [rsp + rcx*2 + 0x30], ax
inc rcx
cmp rcx, 0xb
jb 0x1400d2e60
mov byte [rsp + 0x48], bl
lea rcx, [rsp + 0x30]
call fcn.1400c5f80
test al, al
jne 0x1400d3569
mov dword [rsp + 0x30], 0x6990695
mov dword [rsp + 0x34], 0x68e069f
mov dword [rsp + 0x38], 0x764072e
mov dword [rsp + 0x3c], 0x766077a
mov word [rsp + 0x40], bx
mov byte [rsp + 0x42], 1
mov rcx, rbx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rdi + rcx]
xor word [rsp + rcx*2 + 0x30], ax
inc rcx
cmp rcx, 8
jb 0x1400d2ec0
mov byte [rsp + 0x42], bl
lea rcx, [rsp + 0x30]
call fcn.1400c5f80
test al, al
jne 0x1400d35b1
mov dword [rsp + 0x30], 0x6990695
mov dword [rsp + 0x34], 0x68e069f
mov dword [rsp + 0x38], 0x7350736
mov dword [rsp + 0x3c], 0x766072c
mov dword [rsp + 0x40], 0x760077c
mov word [rsp + 0x44], bx
mov byte [rsp + 0x46], 1
mov rcx, rbx
nop dword [rax]
lea eax, [rdi + rcx]
xor word [rsp + rcx*2 + 0x30], ax
inc rcx
cmp rcx, 0xa
jb 0x1400d2f20
mov byte [rsp + 0x46], bl
lea rcx, [rsp + 0x30]
call fcn.1400c5f80
test al, al
jne 0x1400d35f0
mov dword [rsp + 0x30], 0x69406ab
mov dword [rsp + 0x34], 0x69a068c
mov dword [rsp + 0x38], 0x7690773
mov dword [rsp + 0x3c], 0x7710763
mov dword [rsp + 0x40], 0x72b076f
mov dword [rsp + 0x44], 0x77f0763
mov dword [rsp + 0x48], 0x76d
mov byte [rsp + 0x4c], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rdi + rcx]
xor word [rsp + rcx*2 + 0x30], ax
inc rcx
cmp rcx, 0xd
jb 0x1400d2f90
mov byte [rsp + 0x4c], bl
lea rcx, [rsp + 0x30]
call fcn.1400c5f80
test al, al
jne 0x1400d362f
mov dword [rsp + 0x30], 0x69406ba
mov dword [rsp + 0x34], 0x69b069a
mov dword [rsp + 0x38], 0x764076c
mov dword [rsp + 0x3c], 0x72d0770
mov dword [rsp + 0x40], 0x77d0761
mov dword [rsp + 0x44], 0x763
mov byte [rsp + 0x48], 1
mov rcx, rbx
nop
lea eax, [rdi + rcx]
xor word [rsp + rcx*2 + 0x30], ax
inc rcx
cmp rcx, 0xb
jb 0x1400d2ff0
mov byte [rsp + 0x48], bl
lea rcx, [rsp + 0x30]
call fcn.1400c5f80
test al, al
jne 0x1400d3680
mov dword [rsp + 0x30], 0x69806a4
mov dword [rsp + 0x34], 0x6900690
mov dword [rsp + 0x38], 0x7370773
mov dword [rsp + 0x3c], 0x72d0736
mov dword [rsp + 0x40], 0x77d0761
mov dword [rsp + 0x44], 0x763
mov byte [rsp + 0x48], 1
mov rcx, rbx
nop
lea eax, [rdi + rcx]
xor word [rsp + rcx*2 + 0x30], ax
inc rcx
cmp rcx, 0xb
jb 0x1400d3050
mov byte [rsp + 0x48], bl
lea rcx, [rsp + 0x30]
call fcn.1400c5f80
test al, al
jne 0x1400d36ca
mov dword [rsp + 0x50], 0x69506bf
mov dword [rsp + 0x54], 0x69e069b
mov dword [rsp + 0x58], 0x7210774
mov dword [rsp + 0x5c], 0x76d0747
mov dword [rsp + 0x60], 0x76c0763
mov dword [rsp + 0x64], 0x7620768
mov dword [rsp + 0x68], 0x76c0726
mov dword [rsp + 0x6c], 0x76e0772
mov word [rsp + 0x70], bx
mov byte [rsp + 0x72], 1
mov rcx, rbx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rdi + rcx]
xor word [rsp + rcx*2 + 0x50], ax
inc rcx
cmp rcx, 0x10
jb 0x1400d30d0
mov byte [rsp + 0x72], bl
lea rcx, [rsp + 0x50]
call fcn.1400c5f80
test al, al
jne 0x1400d3714
mov dword [rsp + 0x50], 0x6a906b4
mov dword [rsp + 0x54], 0x6af06aa
mov dword [rsp + 0x58], 0x7450720
mov dword [rsp + 0x5c], 0x7610767
mov dword [rsp + 0x60], 0x7620771
mov dword [rsp + 0x64], 0x7620761
mov dword [rsp + 0x68], 0x729077a
mov dword [rsp + 0x6c], 0x762075d
mov dword [rsp + 0x70], 0x7690762
mov dword [rsp + 0x74], 0x7780761
mov dword [rsp + 0x78], 0x7310763
mov dword [rsp + 0x7c], 0x7760741
mov dword [rbp - 0x80], 0x7630766
mov dword [rbp - 0x7c], 0x774077f
mov dword [rbp - 0x78], 0x739077d
mov dword [rbp - 0x74], 0x7280732
mov dword [rbp - 0x70], 0x73d072e
mov dword [rbp - 0x6c], 0x776077c
mov dword [rbp - 0x68], 0x7080754
mov dword [rbp - 0x64], 0x746070c
mov dword [rbp - 0x60], 0x740075c
mov word [rbp - 0x5c], bx
mov byte [rbp - 0x5a], 1
mov rcx, rbx
lea eax, [rdi + rcx]
xor word [rsp + rcx*2 + 0x50], ax
inc rcx
cmp rcx, 0x2a
jb 0x1400d31a1
mov byte [rbp - 0x5a], bl
lea rcx, [rsp + 0x50]
call fcn.1400c5f80
test al, al
jne 0x1400d3768
mov dword [rsp + 0x30], 0x68e06b7
mov dword [rsp + 0x34], 0x68a06ba
mov dword [rsp + 0x38], 0x771076d
mov dword [rsp + 0x3c], 0x7710767
mov dword [rsp + 0x40], 0x760072a
mov dword [rsp + 0x44], 0x762077e
mov word [rsp + 0x48], bx
mov byte [rsp + 0x4a], 1
mov rcx, rbx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rdi + rcx]
xor word [rsp + rcx*2 + 0x30], ax
inc rcx
cmp rcx, 0xc
jb 0x1400d3210
mov byte [rsp + 0x4a], bl
lea rcx, [rsp + 0x30]
call fcn.1400c5f80
test al, al
jne 0x1400d37c1
mov dword [rsp + 0x50], 0x6bb06bf
mov dword [rsp + 0x54], 0x6ba06b8
mov dword [rsp + 0x58], 0x7710778
mov dword [rsp + 0x5c], 0x76c076e
mov dword [rsp + 0x60], 0x7600776
mov dword [rsp + 0x64], 0x7290774
mov dword [rsp + 0x68], 0x771076d
mov dword [rsp + 0x6c], 0x76f
mov byte [rsp + 0x70], 1
mov rcx, rbx
nop
lea eax, [rdi + rcx]
xor word [rsp + rcx*2 + 0x50], ax
inc rcx
cmp rcx, 0xf
jb 0x1400d3280
mov byte [rsp + 0x70], bl
lea rcx, [rsp + 0x50]
call fcn.1400c5f80
test al, al
jne 0x1400d380d
mov dword [rsp + 0x30], 0x6cb0684
mov dword [rsp + 0x34], 0x69b06ca
mov dword [rsp + 0x38], 0x7660762
mov dword [rsp + 0x3c], 0x766072c
mov dword [rsp + 0x40], 0x760077c
mov word [rsp + 0x44], bx
mov byte [rsp + 0x46], 1
nop dword [rax]
lea eax, [rdi + rbx]
xor word [rsp + rbx*2 + 0x30], ax
inc rbx
cmp rbx, 0xa
jb 0x1400d32e0
mov byte [rsp + 0x46], 0
lea rcx, [rsp + 0x30]
call fcn.1400c5f80
test al, al
jne 0x1400d333d
lea rcx, [rbp + 0x50]
call fcn.1400c2f40
mov rcx, qword [rbp + 0x190]
xor rcx, rsp
call fcn.14027a5e0
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rdx, str.x64dbg_Detected
lea rcx, [rsp + 0x50]
call fcn.1400bfd50
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400d68e0
mov dword [rbp - 0x50], 0xbbcacb84
mov dword [rbp - 0x4c], 0x1004642
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x50]
call fcn.1400c3e50
mov rcx, rax
call fcn.1400d2200
int3
lea rdx, str.KsDumperClient_Detected
lea rcx, [rsp + 0x30]
call fcn.1400bfd50
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400d68e0
mov dword [rsp + 0x30], 0x8aba8eb7
mov dword [rsp + 0x34], 0x7167716d
mov word [rsp + 0x38], 0x100
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.1400c3f30
mov rcx, rax
call fcn.1400d2200
int3
lea rdx, str.Taskmgr_Detected
lea rcx, [rsp + 0x50]
call fcn.1400bfd50
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400d68e0
mov dword [rsp + 0x30], 0x948d9ca8
mov dword [rsp + 0x34], 0x70666d
mov byte [rsp + 0x38], 1
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.1400c3ec0
mov rcx, rax
call fcn.1400d2200
int3
lea rdx, str.HTTP_DebuggerUi_Detected
lea rcx, [rsp + 0x50]
call fcn.1400bfd50
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400d68e0
mov dword [rsp + 0x30], 0xafaaa9b4
mov dword [rsp + 0x34], 0x61674520
mov dword [rsp + 0x38], 0x62616271
mov word [rsp + 0x3c], 0x7a
mov byte [rsp + 0x3e], 1
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.1400c4240
mov rcx, rax
call fcn.1400d2200
int3
lea rdx, str.HTTP_Debuggersvc_Detected
lea rcx, [rsp + 0x50]
call fcn.1400bfd50
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400d68e0
movdqa xmm0, xmmword [0x1402d43e0]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x6c677b7e
mov word [rsp + 0x44], 0x75
mov byte [rsp + 0x46], 1
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.1400c40f0
mov rcx, rax
call fcn.1400d2200
int3
lea rdx, str.FolderChangesView_Detected
lea rcx, [rsp + 0x50]
call fcn.1400bfd50
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400d68e0
movdqa xmm0, xmmword [0x1402d43f0]
movdqu xmmword [rsp + 0x30], xmm0
mov word [rsp + 0x40], 0x7b
mov byte [rsp + 0x42], 1
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.1400c4080
mov rcx, rax
call fcn.1400d2200
int3
lea rdx, str.ProcessHacker_Detected
lea rcx, [rsp + 0x50]
call fcn.1400bfd50
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400d68e0
mov dword [rsp + 0x30], 0x9c918fac
mov dword [rsp + 0x34], 0x23717265
mov dword [rsp + 0x38], 0x6c65644c
mov dword [rsp + 0x3c], 0x1007b6d
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.1400c42b0
mov rcx, rax
call fcn.1400d2200
int3
lea rdx, str.procmon.exe_Detected
lea rcx, [rsp + 0x50]
call fcn.1400bfd50
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400d68e0
movdqa xmm0, xmmword [0x1402d36b0]
movdqu xmmword [rsp + 0x30], xmm0
mov byte [rsp + 0x40], 1
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.1400c4010
mov rcx, rax
call fcn.1400d2200
int3
lea rdx, str.idaq.exe_Detected
lea rcx, [rsp + 0x50]
call fcn.1400bfd50
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400d68e0
mov dword [rbp - 0x50], 0xbfb9b5
mov byte [rbp - 0x4c], 1
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x50]
call fcn.1400c3de0
mov rcx, rax
call fcn.1400d2200
int3
lea rdx, str.idaq64.exe_Detected
lea rcx, [rsp + 0x50]
call fcn.1400bfd50
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400d68e0
mov dword [rbp - 0x50], 0xbfb9b5
mov byte [rbp - 0x4c], 1
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x50]
call fcn.1400c3de0
mov rcx, rax
call fcn.1400d2200
int3
lea rdx, str.Wireshark_Detected
lea rcx, [rsp + 0x50]
call fcn.1400bfd50
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400d68e0
mov dword [rsp + 0x30], 0x9a8c94ab
mov dword [rsp + 0x34], 0x71636953
mov word [rsp + 0x38], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0x3a], 1
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.1400c3fa0
mov rcx, rax
call fcn.1400d2200
int3
lea rdx, str.Fiddler_Detected
lea rcx, [rsp + 0x50]
call fcn.1400bfd50
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400d68e0
mov dword [rsp + 0x30], 0x9b9a94ba
mov dword [rsp + 0x34], 0x70646c
mov byte [rsp + 0x38], 1
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.1400c3ec0
mov rcx, rax
call fcn.1400d2200
int3
lea rdx, str.Xenos64_Detected
lea rcx, [rsp + 0x50]
call fcn.1400bfd50
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400d68e0
mov dword [rsp + 0x30], 0x909098a4
mov dword [rsp + 0x34], 0x363773
mov byte [rsp + 0x38], 1
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.1400c3ec0
mov rcx, rax
call fcn.1400d2200
int3
lea rdx, str.Cheat_Engine_Detected
lea rcx, [rsp + 0x50]
call fcn.1400bfd50
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400d68e0
mov dword [rsp + 0x30], 0x9e9b95bf
mov dword [rsp + 0x34], 0x6d472174
mov dword [rsp + 0x38], 0x62686c63
mov word [rsp + 0x3c], 0x100
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.1400c41d0
mov rcx, rax
call fcn.1400d2200
int3
lea rdx, str.HTTP_Debugger_Detected
lea rcx, [rsp + 0x50]
call fcn.1400bfd50
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400d68e0
mov dword [rsp + 0x30], 0xafaaa9b4
mov dword [rsp + 0x34], 0x61674520
mov dword [rsp + 0x38], 0x62616271
mov word [rsp + 0x3c], 0x7a
mov byte [rsp + 0x3e], 1
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.1400c4240
mov rcx, rax
call fcn.1400d2200
int3
lea rdx, str.KsDumper_Detected
lea rcx, [rsp + 0x50]
call fcn.1400bfd50
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400d68e0
mov dword [rsp + 0x30], 0x8aba8eb7
mov dword [rsp + 0x34], 0x7167716d
mov word [rsp + 0x38], 0x100
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.1400c3f30
mov rcx, rax
call fcn.1400d2200
int3
lea rdx, str.CFFExplorer_Detected
lea rcx, [rsp + 0x50]
call fcn.1400bfd50
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400d68e0
mov dword [rsp + 0x30], 0xbab8bbbf
mov dword [rsp + 0x34], 0x6c6e7178
mov dword [rsp + 0x38], 0x746076
mov byte [rsp + 0x3c], 1
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.1400c4160
mov rcx, rax
call fcn.1400d2200
int3