Function at 0x1400016d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x588]
sub rsp, 0x650
mov qword [rbp - 0x18], 0xfffffffffffffffe
mov qword [rax + 0x20], rbx
mov rax, qword [0x1401fcb40]
xor rax, rsp
mov qword [rbp + 0x540], rax
mov rdi, r8
mov qword [rsp + 0x60], r8
mov rsi, rdx
mov r12, rcx
mov qword [rbp - 0x70], rcx
mov qword [rbp + 0x130], r8
xor r13d, r13d
mov dword [rsp + 0x58], r13d
mov qword [rcx], r13
mov qword [rcx + 8], r13
mov qword [rcx + 0x10], r13
mov dword [rsp + 0x58], 1
call fcn.14000104c
lea eax, [r13 + 0x4a]
mov word [rbp + 0x200], ax
mov dword [rbp + 0x202], 0x69006c
lea eax, [r13 + 0x49]
mov word [rbp + 0x206], ax
lea eax, [r13 + 0x67]
mov word [rbp + 0x208], ax
lea eax, [r13 + 0x77]
mov word [rbp + 0x20a], ax
lea eax, [r13 + 0x6b]
mov word [rbp + 0x20c], ax
lea eax, [r13 + 0x50]
mov word [rbp + 0x20e], ax
lea eax, [r13 + 0x63]
mov word [rbp + 0x210], ax
mov dword [rbp + 0x212], 0x690068
mov word [rbp + 0x216], r13w
lea eax, [r13 + 0x6e]
mov word [rbp + 0x188], ax
lea eax, [r13 + 0x64]
mov word [rbp + 0x18a], ax
lea eax, [r13 + 0x76]
mov word [rbp + 0x18c], ax
mov dword [rbp + 0x18e], 0x42
lea rax, [rbp + 0x90]
mov qword [rsp + 0x50], rax
lea rdx, [rbp + 0x188]
lea rcx, [rbp + 0x90]
call fcn.140003284
mov rbx, rax
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x108]
call fcn.140003284
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x138]
call fcn.1400010d8
nop
mov qword [rbp - 0x50], 0xf
mov qword [rbp - 0x58], r13
mov byte [rbp - 0x68], r13b
or r15, 0xffffffffffffffff
mov r9, r15
xor r8d, r8d
lea rdx, [rbp + 0x138]
lea rcx, [rbp - 0x68]
call fcn.140003604
lea rdx, [rbp - 0x68]
mov rcx, rsi
call fcn.14000130c
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rax
mov r14, rax
mov qword [rsp + 0x50], rax
cmp qword [rbp + 0x150], 0x10
jb 0x140001884
mov rcx, qword [rbp + 0x138]
call fcn.140005610
call fcn.14000104c
mov dword [rbp + 0x218], 0x6e004e
mov dword [rbp + 0x21c], 0x4c007a
mov eax, 0x66
mov word [rbp + 0x220], ax
mov eax, 0x68
mov word [rbp + 0x222], ax
mov eax, 0x63
mov word [rbp + 0x224], ax
mov eax, 0x54
mov word [rbp + 0x226], ax
mov dword [rbp + 0x228], 0x7a0074
mov eax, VarBstrFromDisp
mov dword [rbp + 0x22c], 0x710072
mov word [rbp + 0x230], ax
mov dword [rbp + 0x232], 0x67
mov dword [rbp + 0x1a8], 0x460072
mov eax, 0x4d
mov word [rbp + 0x1ac], ax
mov eax, 0x65
mov word [rbp + 0x1ae], ax
mov eax, 0x6d
mov word [rbp + 0x1b0], ax
mov dword [rbp + 0x1b2], 0x4e004f
mov word [rbp + 0x1b6], r13w
lea rax, [rbp + 0x40]
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x1a8]
lea rcx, [rbp + 0x40]
call fcn.140003284
mov rbx, rax
lea rdx, [rbp + 0x218]
lea rcx, [rbp + 0xb8]
call fcn.140003284
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x138]
call fcn.1400010d8
nop
mov qword [rbp - 0x28], 0xf
mov qword [rbp - 0x30], r13
mov byte [rbp - 0x40], r13b
mov r9, r15
xor r8d, r8d
lea rdx, [rbp + 0x138]
lea rcx, [rbp - 0x40]
call fcn.140003604
mov ebx, 0x118
lea rdx, [rbp - 0x40]
mov rcx, rsi
call fcn.14000130c
xor r9d, r9d
movzx r8d, bx
lea rdx, [0x1401c26f8]
mov rcx, r14
call rax
mov r15, rax
cmp qword [rbp + 0x150], 0x10
jb 0x1400019dd
mov rcx, qword [rbp + 0x138]
call fcn.140005610
mov qword [rbp + 8], 7
mov qword [rbp], r13
mov word [rbp - 0x10], r13w
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp - 0x10]
call fcn.140003810
lea r8, [rbp - 0x10]
mov rdx, rsi
mov rcx, r15
call fcn.140001404
mov r13, rax
xor ebx, ebx
test r14, r14
je 0x14000207c
test r15, r15
je 0x14000207c
lea eax, [rbx + 0x59]
mov word [rbp + 0x258], ax
mov dword [rbp + 0x25a], 0x75006e
mov dword [rbp + 0x25e], 0x6a0044
lea eax, [rbx + 0x78]
mov word [rbp + 0x262], ax
lea eax, [rbx + 0x65]
mov word [rbp + 0x264], ax
lea eax, [rbx + 0x4f]
mov word [rbp + 0x266], ax
lea eax, [rbx + 0x67]
mov word [rbp + 0x268], ax
lea eax, [rbx + 0x73]
mov word [rbp + 0x26a], ax
lea eax, [rbx + 0x6b]
mov word [rbp + 0x26c], ax
mov dword [rbp + 0x26e], 0x75004e
mov dword [rbp + 0x272], 0x6a0075
mov dword [rbp + 0x276], 0x750061
mov dword [rbp + 0x27a], 0x79
lea eax, [rbx + 0x63]
mov word [rbp + 0x1e8], ax
lea eax, [rbx + 0x46]
mov word [rbp + 0x1ea], ax
lea eax, [rbx + 0x48]
mov word [rbp + 0x1ec], ax
lea eax, [rbx + 0x77]
mov word [rbp + 0x1ee], ax
lea eax, [rbx + 0x71]
mov word [rbp + 0x1f0], ax
lea eax, [rbx + 0x45]
mov word [rbp + 0x1f2], ax
lea eax, [rbx + 0x50]
mov word [rbp + 0x1f4], ax
mov dword [rbp + 0x1f6], 0x57
lea rax, [rbp + 0x68]
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x1e8]
lea rcx, [rbp + 0x68]
call fcn.140003284
mov rbx, rax
lea rdx, [rbp + 0x258]
lea rcx, [rbp + 0xe0]
call fcn.140003284
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.1400010d8
nop
call fcn.14000104c
mov qword [rbp + 0x150], 0xf
xor ebx, ebx
mov qword [rbp + 0x148], rbx
mov byte [rbp + 0x138], bl
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x138]
call fcn.140003604
lea rdx, [rbp + 0x138]
mov rcx, rsi
call fcn.14000130c
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r13
call rax
lea eax, [rbx + 0x52]
mov word [rbp + 0x2a8], ax
mov dword [rbp + 0x2aa], 0x680061
lea eax, [rbx + 0x45]
mov word [rbp + 0x2ae], ax
lea eax, [rbx + 0x6f]
mov word [rbp + 0x2b0], ax
lea eax, [rbx + 0x6c]
mov word [rbp + 0x2b2], ax
lea eax, [rbx + 0x6a]
mov word [rbp + 0x2b4], ax
lea eax, [rbx + 0x4f]
mov word [rbp + 0x2b6], ax
mov dword [rbp + 0x2b8], 0x75007a
lea eax, [rbx + 0x79]
mov word [rbp + 0x2bc], ax
lea eax, [rbx + 0x66]
mov word [rbp + 0x2be], ax
mov dword [rbp + 0x2c0], 0x770071
lea eax, [rbx + 0x4c]
mov word [rbp + 0x2c4], ax
mov dword [rbp + 0x2c6], 0x6e0062
mov dword [rbp + 0x2ca], 0x690068
mov dword [rbp + 0x2ce], 0x6e006b
mov dword [rbp + 0x2d2], 0x77
mov dword [rbp + 0x198], 0x530076
mov dword [rbp + 0x19c], 0x580075
mov word [rbp + 0x1a0], bx
lea rax, [rsp + 0x68]
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x198]
lea rcx, [rsp + 0x68]
call fcn.140003284
mov rbx, rax
lea rdx, [rbp + 0x2a8]
lea rcx, [rbp + 0x18]
call fcn.140003284
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x138]
call fcn.1400010d8
nop
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.1400031d0
nop
cmp qword [rbp + 0x150], 0x10
jb 0x140001cc1
mov rcx, qword [rbp + 0x138]
call fcn.140005610
call fcn.14000104c
mov qword [rbp + 0x150], 0xf
xor ebx, ebx
mov qword [rbp + 0x148], rbx
mov byte [rbp + 0x138], bl
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x138]
call fcn.140003604
lea rdx, [rbp + 0x138]
mov rcx, rsi
call fcn.14000130c
xor edx, edx
mov rcx, r13
call rax
lea eax, [rbx + 0x48]
mov word [rbp + 0x238], ax
lea eax, [rbx + 0x73]
mov word [rbp + 0x23a], ax
lea eax, [rbx + 0x6c]
mov word [rbp + 0x23c], ax
lea eax, [rbx + 0x59]
mov word [rbp + 0x23e], ax
mov dword [rbp + 0x240], 0x64006f
mov dword [rbp + 0x244], 0x420071
mov dword [rbp + 0x248], 0x6b0070
mov dword [rbp + 0x24c], 0x550062
mov dword [rbp + 0x250], 0x640076
mov dword [rbp + 0x254], 0x62
mov dword [rbp + 0x1d0], 0x6b004c
lea eax, [rbx + 0x79]
mov word [rbp + 0x1d4], ax
lea eax, [rbx + 0x72]
mov word [rbp + 0x1d6], ax
mov dword [rbp + 0x1d8], 0x6b0056
mov dword [rbp + 0x1dc], 0x4b0042
mov word [rbp + 0x1e0], bx
lea rax, [rsp + 0x68]
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x1d0]
lea rcx, [rsp + 0x68]
call fcn.140003284
mov rbx, rax
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x18]
call fcn.140003284
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x138]
call fcn.1400010d8
nop
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.1400031d0
nop
cmp qword [rbp + 0x150], 0x10
jb 0x140001e15
mov rcx, qword [rbp + 0x138]
call fcn.140005610
xor ebx, ebx
mov dword [rsp + 0x44], ebx
mov qword [rbp + 0x150], 0xf
mov qword [rbp + 0x148], rbx
mov byte [rbp + 0x138], bl
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x138]
call fcn.140003604
lea rdx, [rbp + 0x138]
mov rcx, rsi
call fcn.14000130c
mov qword [rsp + 0x48], rax
lea r9, [rsp + 0x44]
mov r8d, 0x258
lea rdx, [rbp + 0x2e0]
mov rcx, r13
call rax
test eax, eax
je 0x140001ee1
mov rdi, qword [rsp + 0x48]
call fcn.14000104c
mov r11d, dword [rsp + 0x44]
test r11d, r11d
je 0x140001ed7
mov r14d, ebx
lea rbx, [rbp + 0x2e0]
mov al, byte [rbx]
mov byte [rsp + 0x40], al
lea rdx, [rsp + 0x40]
mov rcx, r12
call fcn.140003510
inc r14d
inc rbx
cmp r14d, dword [rsp + 0x44]
jb 0x140001e9a
xor ebx, ebx
lea r9, [rsp + 0x44]
mov r8d, 0x258
lea rdx, [rbp + 0x2e0]
mov rcx, r13
call rdi
test eax, eax
jne 0x140001e81
mov rdi, qword [rsp + 0x60]
mov r14, qword [rsp + 0x50]
mov eax, 0x4a
mov word [rbp + 0x280], ax
mov dword [rbp + 0x282], 0x76006b
lea ecx, [rax + 0xa]
mov word [rbp + 0x286], cx
lea ecx, [rax + 0x1f]
mov word [rbp + 0x288], cx
mov dword [rbp + 0x28a], 0x670064
mov dword [rbp + 0x28e], 0x790049
lea ecx, [rax + 0x27]
mov dword [rbp + 0x292], 0x610071
mov word [rbp + 0x296], cx
mov dword [rbp + 0x298], 0x6b0057
lea eax, [rcx - 0xc]
mov word [rbp + 0x29c], ax
mov dword [rbp + 0x29e], 0x79006a
mov dword [rbp + 0x2a2], 0x67
lea eax, [rcx - 3]
mov word [rbp + 0x1b8], ax
mov dword [rbp + 0x1ba], 0x490043
lea eax, [rcx - 4]
mov word [rbp + 0x1be], ax
lea eax, [rcx - 1]
mov word [rbp + 0x1c0], ax
lea eax, [rcx - 0x26]
mov word [rbp + 0x1c2], ax
lea eax, [rcx - 0x1f]
mov word [rbp + 0x1c4], ax
mov dword [rbp + 0x1c6], 0x47
lea rax, [rsp + 0x68]
mov qword [rsp + 0x50], rax
lea rdx, [rbp + 0x1b8]
lea rcx, [rsp + 0x68]
call fcn.140003284
mov rbx, rax
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x18]
call fcn.140003284
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x138]
call fcn.1400010d8
nop
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.1400031d0
nop
cmp qword [rbp + 0x150], 0x10
jb 0x140002009
mov rcx, qword [rbp + 0x138]
call fcn.140005610
mov qword [rbp + 0x150], 0xf
xor ebx, ebx
mov qword [rbp + 0x148], rbx
mov byte [rbp + 0x138], bl
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x138]
call fcn.140003604
lea rdx, [rbp + 0x138]
mov rcx, rsi
call fcn.14000130c
mov rbx, rax
call fcn.14000104c
mov rcx, r13
call rbx
mov rcx, r15
call rbx
mov rcx, r14
call rbx
nop
cmp qword [rbp + 0x178], 0x10
jb 0x14000207a
mov rcx, qword [rbp + 0x160]
call fcn.140005610
xor ebx, ebx
cmp qword [rdi + 0x18], 8
jb 0x14000208b
mov rcx, qword [rdi]
call fcn.140005610
mov qword [rdi + 0x18], 7
mov qword [rdi + 0x10], rbx
mov word [rdi], bx
mov rax, r12
mov rcx, qword [rbp + 0x540]
xor rcx, rsp
call fcn.14014bf20
mov rbx, qword [rsp + 0x6a8]
add rsp, 0x650
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret