Function at 0x1400046dc
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xe0
movdqa xmm0, xmmword [0x14000b2c0]
lea r9, [rbp + 0x6f]
movdqa xmm1, xmmword [0x14000b330]
lea rdx, [rbp - 9]
xor r13d, r13d
mov word [rbp + 0x17], 0xe644
movdqu xmmword [rbp - 9], xmm0
mov qword [rbp + 0x6f], r13
movdqu xmmword [rbp + 7], xmm1
mov byte [rbp + 0x19], 0x1b
call fcn.140002294
mov ebx, r13d
mov ecx, 0x200
mov dword [rbp + 0x67], ebx
call fcn.140001094
mov rdi, rax
mov esi, 0x100
mov rax, qword [section..data]
test rax, rax
jne 0x140004774
mov ecx, esi
call fcn.140001094
test rax, rax
je 0x14000476a
mov rcx, rax
call fcn.1400013b4
jmp 0x14000476d
mov rax, r13
mov qword [section..data], rax
mov r8, qword [rbp + 0x6f]
or r9d, 0xffffffff
mov dword [rsp + 0x28], esi
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rdi
call qword [rax + 0x80]
lea rcx, [rbp - 0x71]
mov qword [rbp + 0x6f], r13
mov r14, r13
mov dword [rbp - 0x71], 0xd001c
mov dword [rbp - 0x6d], 0x1f002c
mov dword [rbp - 0x69], 0x130073
mov dword [rbp - 0x65], 0x6bffb8
mov dword [rbp - 0x61], 0x28ffe9
mov dword [rbp - 0x5d], 0xffccff85
mov dword [rbp - 0x59], 0xbffca
mov dword [rbp - 0x55], 0x53001d
mov dword [rbp - 0x51], 0xffc70027
mov dword [rbp - 0x4d], 0x5c007f
mov dword [rbp - 0x49], 0xff970002
mov dword [rbp - 0x45], 0x3f003c
mov dword [rbp - 0x41], 0x460052
mov dword [rbp - 0x3d], 0x710048
mov dword [rbp - 0x39], 0x7e0014
mov dword [rbp - 0x35], 0xe00cb
mov dword [rbp - 0x31], 0x4d0087
mov dword [rbp - 0x2d], 0xbb00e2
mov dword [rbp - 0x29], 0x6e00b9
mov dword [rbp - 0x25], 0x34006d
mov dword [rbp - 0x21], 0xa20054
mov dword [rbp - 0x1d], 0x340015
mov dword [rbp - 0x19], 0xe00065
mov dword [rbp - 0x15], 0x3f0048
mov dword [rbp - 0x11], 0x932cb978
call fcn.140003abc
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x30], 0x32003a
mov dword [rsp + 0x34], 0x1003c
mov dword [rsp + 0x38], 0x520014
mov dword [rbp - 0x7d], 0x480046
mov dword [rbp - 0x79], 0x140071
mov dword [rbp - 0x75], 0x3dd62765
call fcn.140003ae0
mov r15d, 1
mov r10, r13
mov r9, r13
mov r11, r13
mov rsi, r13
lea r12d, [r15 + 0x1e]
mov edx, 0x410
mov rax, r13
cmp word [rdi], r13w
je 0x140004959
add rax, r15
cmp word [rdi + rax*2], r13w
jne 0x1400048b0
cmp r10, rax
jae 0x140004959
movzx eax, word [rsi + rdi]
sub ax, 0x41
cmp ax, 0x19
lea r8d, [rax + 0x61]
movzx eax, word [rsp + r9*2 + 0x30]
cmova r8w, word [rsi + rdi]
sub ax, 0x41
cmp ax, 0x19
lea ecx, [rax + 0x61]
cmova cx, word [rsp + r9*2 + 0x30]
movzx eax, cx
sub ax, dx
cmp ax, r12w
movzx eax, r8w
lea edx, [rcx + 0x20]
cmova dx, cx
mov ecx, 0x410
sub ax, cx
lea ecx, [r8 + 0x20]
cmp ax, r12w
cmova cx, r8w
cmp cx, dx
jne 0x14000498e
add r9, r15
mov rax, r13
cmp word [rsp + 0x30], r13w
je 0x140004939
add rax, r15
cmp word [rsp + rax*2 + 0x30], r13w
jne 0x14000492e
cmp r9, rax
jne 0x14000499b
lea r9, [rbp + 0x67]
mov rcx, rdi
lea r8, [rbp + 0x6f]
lea rdx, [rbp - 0x71]
call fcn.140001d40
mov ebx, dword [rbp + 0x67]
mov r14, qword [rbp + 0x6f]
lea esi, [rbx + 0x200000]
mov edi, 0xc8
mov ebx, 0x40000000
mov rax, qword [section..data]
test rax, rax
jne 0x1400049b1
mov ecx, 0x100
call fcn.140001094
test rax, rax
je 0x1400049a7
mov rcx, rax
call fcn.1400013b4
jmp 0x1400049aa
add r11, r15
mov r9, r13
mov r10, r11
lea rsi, [r11 + r11]
add r10, r15
add rsi, 2
jmp 0x14000489e
mov rax, r13
mov qword [section..data], rax
mov rax, qword [rax + 0x90]
mov r9d, 4
mov r8d, 0x1000
mov rdx, rbx
xor ecx, ecx
call rax
test rax, rax
jne 0x140004969
cmp rbx, rsi
jbe 0x1400049da
shr rbx, 1
jmp 0x140004969
sub rdi, r15
je 0x1400049ef
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140004969
test r14, r14
je 0x140004a46
lea rcx, [rbp - 9]
mov qword [rbp - 1], r13
mov qword [rbp + 7], r13
mov qword [rbp - 9], r14
call fcn.1400042ec
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x30], 0xd542514d
mov dword [rsp + 0x34], 0x2b3000b7
mov dword [rsp + 0x38], 0xb7bb
mov dword [rbp - 0x7d], 0xdaa96f5
call fcn.140003aa0
cmp qword [rbp + 7], r13
je 0x140004a46
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 9]
call fcn.1400041e0
mov rbx, qword [rsp + 0x130]
add rsp, 0xe0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret