Function at 0x1400a9960
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x370]
sub rsp, 0x470
mov rax, qword [0x14040d7d8]
xor rax, rsp
mov qword [rbp + 0x360], rax
mov rdi, rcx
xor r14d, r14d
mov dword [rsp + 0x30], r14d
mov byte [0x14040efef], r14b
mov word [rsp + 0x34], 0x4047
mov word [rsp + 0x38], 0x4147
mov word [rsp + 0x3c], 0x4047
mov word [rsp + 0x40], 0x1047
mov word [rsp + 0x44], 0x5047
mov word [rsp + 0x48], 0x7147
mov word [rsp + 0x28], 0x3147
mov word [rsp + 0x20], 0x7047
mov word [rsp + 0x24], 0x3047
mov dword [rsp + 0x4c], 0x20011047
mov dword [rbp - 0x60], r14d
mov dword [rbp - 0x5c], 0x10004047
mov dword [rbp - 0x58], 0x11b00000
mov dword [rbp - 0x54], 0xc10000
mov dword [rbp - 0x50], 0xe0000000
mov dword [rbp - 0x4c], 0xe101001f
mov dword [rbp - 0x48], 0xab5a2300
mov qword [rbp - 0x44], 0xffffffffffffff82
mov qword [rbp - 0x3c], 0xffffffffffffffff
mov qword [rbp - 0x34], 0xffffffffffffffff
mov qword [rbp - 0x2c], 0xffffffffffffffff
mov qword [rbp - 0x24], 0xffffffffffffffff
mov qword [rbp - 0x1c], 0xffffffffffffffff
mov qword [rbp - 0x14], 0xffffffffffffffff
mov qword [rbp - 0xc], 0xffffffffffffffff
mov qword [rbp - 4], 0xffffffffffffffff
mov qword [rbp + 4], 0xffffffffffffffff
mov qword [rbp + 0xc], 0xffffffffffffffff
mov qword [rbp + 0x14], 0xffffffffffffffff
mov qword [rbp + 0x1c], 0xffffffffffffffff
mov qword [rbp + 0x24], 0xffffffffffffffff
mov qword [rbp + 0x2c], 0xffffffffffffffff
mov qword [rbp + 0x34], 0xffffffffffffffff
mov qword [rbp + 0x3c], 0xffffffffffffffff
mov qword [rbp + 0x44], 0xffffffffffffffff
mov qword [rbp + 0x4c], 0xffffffffffffffff
mov qword [rbp + 0x54], 0xffffffffffffffff
mov dword [rbp + 0x5c], 0xffffffff
mov dword [rbp + 0x60], r14d
mov dword [rbp + 0x64], 0x10004147
mov dword [rbp + 0x68], 0x39b00200
mov dword [rbp + 0x6c], 0xc10100
mov dword [rbp + 0x70], 0xf001f000
mov dword [rbp + 0x74], 0x4804050c
mov dword [rbp + 0x78], 0x88564d44
mov dword [rbp + 0x7c], 0xfcff0f04
mov dword [rbp + 0x80], 0x11f01bfc
mov dword [rbp + 0x84], 0x8050af0
mov dword [rbp + 0x88], 0x564d4448
mov dword [rbp + 0x8c], 0x3f561bff
mov dword [rbp + 0x90], 0xf000f181
mov dword [rbp + 0x94], 0x4104050c
mov dword [rbp + 0x98], 0x81332d43
mov dword [rbp + 0x9c], 0x5280404
mov dword [rbp + 0xa0], 0xb4659500
mov qword [rbp + 0xa4], 0xffffffffffffff0f
mov qword [rbp + 0xac], 0xffffffffffffffff
mov qword [rbp + 0xb4], 0xffffffffffffffff
mov qword [rbp + 0xbc], 0xffffffffffffffff
mov qword [rbp + 0xc4], 0xffffffffffffffff
mov qword [rbp + 0xcc], 0xffffffffffffffff
mov qword [rbp + 0xd4], 0xffffffffffffffff
mov qword [rbp + 0xdc], 0xffffffffffffffff
mov qword [rbp + 0xe4], 0xffffffffffffffff
mov qword [rbp + 0xec], 0xffffffffffffffff
mov qword [rbp + 0xf4], 0xffffffffffffffff
mov qword [rbp + 0xfc], 0xffffffffffffffff
mov qword [rbp + 0x104], 0xffffffffffffffff
mov qword [rbp + 0x10c], 0xffffffffffffffff
mov qword [rbp + 0x114], 0xffffffffffffffff
mov dword [rbp + 0x11c], 0xffffffff
mov dword [rbp + 0x120], r14d
mov dword [rbp + 0x124], 0x101f4047
mov dword [rbp + 0x128], 0x19f07f00
mov dword [rbp + 0x12c], 0xc1ffff
mov dword [rbp + 0x130], 0x630af000
mov qword [rbp + 0x134], 0xffffffffc8afc008
mov dword [rbp + 0x13c], 0x800100ff
mov dword [rbp + 0x140], 0x3ab4ae00
mov qword [rbp + 0x144], 0xffffffffffffff35
mov qword [rbp + 0x14c], 0xffffffffffffffff
mov qword [rbp + 0x154], 0xffffffffffffffff
mov qword [rbp + 0x15c], 0xffffffffffffffff
mov qword [rbp + 0x164], 0xffffffffffffffff
mov qword [rbp + 0x16c], 0xffffffffffffffff
mov qword [rbp + 0x174], 0xffffffffffffffff
mov qword [rbp + 0x17c], 0xffffffffffffffff
mov qword [rbp + 0x184], 0xffffffffffffffff
mov qword [rbp + 0x18c], 0xffffffffffffffff
mov qword [rbp + 0x194], 0xffffffffffffffff
mov qword [rbp + 0x19c], 0xffffffffffffffff
mov qword [rbp + 0x1a4], 0xffffffffffffffff
mov qword [rbp + 0x1ac], 0xffffffffffffffff
mov qword [rbp + 0x1b4], 0xffffffffffffffff
mov qword [rbp + 0x1bc], 0xffffffffffffffff
mov qword [rbp + 0x1c4], 0xffffffffffffffff
mov qword [rbp + 0x1cc], 0xffffffffffffffff
mov qword [rbp + 0x1d4], 0xffffffffffffffff
mov dword [rbp + 0x1dc], 0xffffffff
mov dword [rbp + 0x1e0], r14d
mov dword [rbp + 0x1e4], 0x20011047
mov qword [rbp + 0x1e8], 0x10b7
mov qword [rbp + 0x1f0], 0xffffffffffffffff
mov qword [rbp + 0x1f8], 0xffffffffffffffff
mov qword [rbp + 0x200], 0xffffffffffffffff
mov qword [rbp + 0x208], 0xffffffffffffffff
mov qword [rbp + 0x210], 0xffffffffffffffff
mov qword [rbp + 0x218], 0xffffffffffffffff
mov qword [rbp + 0x220], 0xffffffffffffffff
mov qword [rbp + 0x228], 0xffffffffffffffff
mov qword [rbp + 0x230], 0xffffffffffffffff
mov qword [rbp + 0x238], 0xffffffffffffffff
mov qword [rbp + 0x240], 0xffffffffffffffff
mov qword [rbp + 0x248], 0xffffffffffffffff
mov qword [rbp + 0x250], 0xffffffffffffffff
mov qword [rbp + 0x258], 0xffffffffffffffff
mov qword [rbp + 0x260], 0xffffffffffffffff
mov qword [rbp + 0x268], 0xffffffffffffffff
mov qword [rbp + 0x270], 0xffffffffffffffff
mov qword [rbp + 0x278], 0xffffffffffffffff
mov qword [rbp + 0x280], 0xffffffffffffffff
mov qword [rbp + 0x288], 0xffffffffffffffff
mov qword [rbp + 0x290], 0xffffffffffffffff
mov qword [rbp + 0x298], 0xffffffffffffffff
lea rdx, [rcx + 0x328]
lea rcx, [rsp + 0x78]
call qword [0x1400fec38]
nop
lea rdx, [rdi + 0x328]
lea rcx, [rsp + 0x60]
call qword [0x1400fec38]
mov rbx, rax
mov dword [rsp + 0x30], 1
lea r8d, [r14 - 1]
lea rdx, [0x140115664]
lea rcx, [rsp + 0x70]
call qword [0x1400fec08]
nop
mov rdx, rax
lea rcx, [rsp + 0x60]
call qword [0x1400fec18]
nop
lea rcx, [rsp + 0x70]
call qword [0x1400fec30]
lea r8, [rdi + 0x340]
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.14001d2f0
nop
lea rcx, [rsp + 0x60]
call qword [0x1400fec30]
lea rdx, [rsp + 0x58]
lea rcx, [0x14040f168]
call fcn.140064460
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x68]
call qword [0x1400fec38]
nop
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x68]
call qword [0x1400fe560]
nop
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rcx, qword [rbp - 0x80]
lea rdx, [0x14011b820]
call qword [0x140100158]
mov qword [rdi + 0x28], rax
mov dword [rsp + 0x30], r14d
mov edx, 0xc350
mov eax, 0x4c4b40
cmp qword [rdi + 0x48], 0x6400000
cmovae edx, eax
mov rcx, rdi
call fcn.1400ede00
mov esi, r14d
mov qword [rdi + 0x420], r14
cmp byte [0x14040eddf], r14b
jne 0x1400a9f6a
mov rcx, qword [rdi + 0x48]
cmp rcx, 0xa00000
jbe 0x1400a9f6a
movabs rax, 0xaaaaaaaaaaaaaaab
mul rcx
shr rdx, 1
mov qword [rdi + 0x48], rdx
mov qword [0x14040eef0], rdx
mov qword [rdi + 0x40], 4
xor r8d, r8d
lea edx, [r8 + 4]
mov rcx, qword [rdi + 0x10]
call qword [0x140100168]
mov r9, qword [rdi + 0x10]
mov edx, 1
lea r8d, [rdx + 3]
lea rcx, [rsp + 0x2c]
call qword [0x140100178]
mov rdx, qword [rdi + 0x40]
add rdx, 0x240
xor r8d, r8d
mov rcx, qword [rdi + 0x10]
call qword [0x140100168]
mov r9, qword [rdi + 0x10]
mov edx, 1
lea r8d, [rdx + 3]
lea rcx, [rsp + 0x50]
call qword [0x140100178]
mov ebx, dword [rsp + 0x4c]
movzx eax, word [rsp + 0x34]
cmp word [rsp + 0x2c], ax
jne 0x1400aa174
cmp byte [rsp + 0x2e], sil
jne 0x1400aa174
cmp dword [rsp + 0x50], ebx
jne 0x1400aa174
mov rax, qword [rdi + 0x40]
mov rcx, qword [rdi + 0x48]
cmp rax, rcx
jae 0x1400aa4a5
movzx r14d, word [rsp + 0x38]
movzx r15d, word [rsp + 0x3c]
movzx r12d, word [rsp + 0x40]
movzx r13d, word [rsp + 0x44]
ja 0x1400aa4a2
cmp byte [0x14040edcd], 0
jne 0x1400aa4a2
mov edx, dword [rsp + 0x30]
mov rcx, rdi
call fcn.1400ee730
mov dword [rsp + 0x2c], 0
xor r8d, r8d
mov rdx, qword [rdi + 0x40]
mov rcx, qword [rdi + 0x10]
call qword [0x140100168]
mov r9, qword [rdi + 0x10]
mov edx, 1
lea r8d, [rdx + 3]
lea rcx, [rsp + 0x2c]
call qword [0x140100178]
mov eax, dword [rsp + 0x2c]
movzx ecx, byte [rsp + 0x2e]
cmp ax, word [rsp + 0x34]
jne 0x1400aa081
test cl, cl
je 0x1400aa0e4
cmp ax, r14w
jne 0x1400aa08b
test cl, cl
je 0x1400aa0e4
cmp ax, r15w
jne 0x1400aa096
cmp cl, 0x1f
je 0x1400aa0e4
cmp ax, r12w
jne 0x1400aa0a1
cmp cl, 0x11
je 0x1400aa0e4
cmp ax, r13w
jne 0x1400aa0ac
cmp cl, 0x11
je 0x1400aa0e4
cmp ax, word [rsp + 0x48]
jne 0x1400aa0b7
test cl, cl
je 0x1400aa0e4
cmp ax, word [rsp + 0x28]
jne 0x1400aa0c2
test cl, cl
je 0x1400aa0e4
cmp eax, ebx
je 0x1400aa0e4
cmp ax, word [rsp + 0x24]
jne 0x1400aa0d2
cmp cl, 0x11
je 0x1400aa0e4
cmp ax, word [rsp + 0x20]
jne 0x1400aa0de
cmp cl, 0x11
je 0x1400aa0e4
mov rax, qword [rdi + 0x40]
jmp 0x1400aa15b
add qword [rdi + 0x40], 0xfffffffffffffffc
xor r8d, r8d
mov rdx, qword [rdi + 0x40]
mov rcx, qword [rdi + 0x10]
call qword [0x140100168]
xor r8d, r8d
mov rdx, rsi
mov rcx, qword [rdi + 0x10]
call qword [0x140100168]
mov r9, qword [rdi + 0x10]
mov edx, 1
mov r8d, 0xc0
lea rcx, [rbp + 0x2a0]
call qword [0x140100178]
mov r9, qword [rdi + 0x28]
mov edx, 1
mov r8d, 0xc0
lea rcx, [rbp + 0x2a0]
call qword [0x140100140]
add rsi, 0xc0
add dword [rsp + 0x30], 0xc0
mov rax, qword [rdi + 0x40]
add rax, 0xbf
inc rax
mov qword [rdi + 0x40], rax
mov rcx, qword [rdi + 0x48]
cmp rax, rcx
jb 0x1400aa023
jmp 0x1400aa4a2
mov qword [rdi + 0x40], 0x2ee
mov r9, qword [rdi + 0x28]
mov edx, 1
mov r8d, 0xc0
lea rcx, [rbp - 0x60]
call qword [0x140100140]
mov r9, qword [rdi + 0x28]
mov edx, 1
mov r8d, 0xc0
lea rcx, [rbp + 0x60]
call qword [0x140100140]
mov r9, qword [rdi + 0x28]
mov edx, 1
mov r8d, 0xc0
lea rcx, [rbp + 0x120]
call qword [0x140100140]
mov r9, qword [rdi + 0x28]
mov edx, 1
mov r8d, 0xc0
lea rcx, [rbp + 0x1e0]
call qword [0x140100140]
mov rax, qword [rdi + 0x40]
mov rcx, qword [rdi + 0x48]
cmp rax, rcx
jae 0x1400aa4a5
movzx r15d, word [rsp + 0x38]
movzx r12d, word [rsp + 0x3c]
movzx r13d, word [rsp + 0x40]
movzx esi, word [rsp + 0x44]
movzx r14d, word [rsp + 0x48]
ja 0x1400aa4a2
cmp byte [0x14040edcd], 0
jne 0x1400aa4a2
mov edx, dword [rsp + 0x30]
mov rcx, rdi
call fcn.1400ee730
mov dword [rsp + 0x2c], 0
xor r8d, r8d
mov rdx, qword [rdi + 0x40]
mov rcx, qword [rdi + 0x10]
call qword [0x140100168]
mov r9, qword [rdi + 0x10]
mov edx, 1
lea r8d, [rdx + 3]
lea rcx, [rsp + 0x2c]
call qword [0x140100178]
mov eax, dword [rsp + 0x2c]
movzx ecx, byte [rsp + 0x2e]
movzx r10d, word [rsp + 0x34]
cmp ax, r10w
jne 0x1400aa27d
test cl, cl
je 0x1400aa2ef
cmp ax, r15w
jne 0x1400aa287
test cl, cl
je 0x1400aa2ef
cmp ax, r12w
jne 0x1400aa292
cmp cl, 0x1f
je 0x1400aa2ef
cmp ax, r13w
jne 0x1400aa29d
cmp cl, 0x11
je 0x1400aa2ef
cmp ax, si
jne 0x1400aa2a7
cmp cl, 0x11
je 0x1400aa2ef
cmp ax, r14w
jne 0x1400aa2b1
test cl, cl
je 0x1400aa2ef
movzx edx, word [rsp + 0x28]
cmp ax, dx
jne 0x1400aa2bf
test cl, cl
je 0x1400aa2f4
movzx r9d, word [rsp + 0x24]
cmp eax, ebx
je 0x1400aa2fa
cmp ax, r9w
jne 0x1400aa2d4
cmp cl, 0x11
je 0x1400aa2fa
movzx r8d, word [rsp + 0x20]
cmp ax, r8w
jne 0x1400aa48a
cmp cl, 0x11
jne 0x1400aa48a
jmp 0x1400aa300
movzx edx, word [rsp + 0x28]
movzx r9d, word [rsp + 0x24]
movzx r8d, word [rsp + 0x20]
cmp ax, r13w
jne 0x1400aa30b
cmp cl, 0x11
je 0x1400aa33e
cmp ax, si
jne 0x1400aa315
cmp cl, 0x11
je 0x1400aa33e
cmp ax, r14w
jne 0x1400aa31f
test cl, cl
je 0x1400aa33e
cmp ax, dx
jne 0x1400aa328
test cl, cl
je 0x1400aa33e
cmp ax, r9w
jne 0x1400aa333
cmp cl, 0x11
je 0x1400aa33e
cmp ax, r8w
jne 0x1400aa3ab
cmp cl, 0x11
jne 0x1400aa3ab
add qword [rdi + 0x40], 0xfffffffffffffffc
xor r8d, r8d
mov rdx, qword [rdi + 0x40]
mov rcx, qword [rdi + 0x10]
call qword [0x140100168]
mov r9, qword [rdi + 0x10]
mov edx, 1
mov r8d, 0xc0
lea rcx, [rbp + 0x2a0]
call qword [0x140100178]
mov r9, qword [rdi + 0x28]
mov edx, 1
mov r8d, 0xc0
lea rcx, [rbp + 0x2a0]
call qword [0x140100140]
add qword [rdi + 0x40], 0xbf
add dword [rsp + 0x30], 0xc0
mov eax, dword [rsp + 0x2c]
movzx ecx, byte [rsp + 0x2e]
movzx r10d, word [rsp + 0x34]
cmp ax, si
jne 0x1400aa3b5
cmp cl, 0x11
je 0x1400aa3bf
cmp ax, r14w
jne 0x1400aa3c5
test cl, cl
jne 0x1400aa3c5
inc dword [rdi + 0x424]
cmp ax, r10w
jne 0x1400aa3cf
test cl, cl
je 0x1400aa3e8
cmp ax, r15w
jne 0x1400aa3d9
test cl, cl
je 0x1400aa3e8
cmp ax, r12w
jne 0x1400aa3e4
cmp cl, 0x1f
je 0x1400aa3e8
cmp eax, ebx
jne 0x1400aa3f0
add qword [rdi + 0x40], 0xbe
cmp dword [rdi + 0x424], 7
jne 0x1400aa48a
mov dword [rdi + 0x424], 0
inc dword [rdi + 0x420]
mov r9, qword [rdi + 0x28]
mov edx, 1
mov r8d, 0xc0
lea rcx, [rbp - 0x60]
call qword [0x140100140]
mov r9, qword [rdi + 0x28]
mov edx, 1
mov r8d, 0xc0
lea rcx, [rbp + 0x60]
call qword [0x140100140]
cmp dword [rdi + 0x420], 0xa
jne 0x1400aa46e
mov dword [rdi + 0x420], 0
mov r9, qword [rdi + 0x28]
mov edx, 1
mov r8d, 0xc0
lea rcx, [rbp + 0x120]
call qword [0x140100140]
mov r9, qword [rdi + 0x28]
mov edx, 1
mov r8d, 0xc0
lea rcx, [rbp + 0x1e0]
call qword [0x140100140]
mov rax, qword [rdi + 0x40]
inc rax
mov qword [rdi + 0x40], rax
mov rcx, qword [rdi + 0x48]
cmp rax, rcx
jb 0x1400aa21a
xor r14d, r14d
mov byte [0x14040eeda], 1
mov byte [0x14040f035], 1
mov rcx, qword [rdi + 0x30]
call qword [0x1400fe060]
mov rcx, qword [rdi + 0x28]
call qword [0x140100100]
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x1400aa50b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400aa506
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400aa506
call qword [0x140100068]
int3
call fcn.1400efc70
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r14w
lea rcx, [rsp + 0x68]
call qword [0x1400fec30]
nop
lea rcx, [rsp + 0x58]
call qword [0x1400fec30]
nop
lea rcx, [rsp + 0x78]
call qword [0x1400fec30]
mov rcx, qword [rbp + 0x360]
xor rcx, rsp
call fcn.1400effe0
lea r11, [rsp + 0x470]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret