Function at 0x14014fe40
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xb0
mov qword [rbp - 0x51], 0xfffffffffffffffe
mov qword [rsp + 0x100], rbx
mov rax, qword [0x1402c4148]
xor rax, rsp
mov qword [rbp + 0x1f], rax
mov rbx, rdx
mov r13, rcx
mov ecx, 0x8001
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
movdqa xmm0, xmmword [0x14024e320]
movdqu xmmword [rbp - 0x19], xmm0
xor edi, edi
mov word [rbp - 0x29], di
mov r15, 0xffffffffffffffff
mov r8, r15
inc r8
cmp word [rbx + r8*2], di
jne 0x14014fea4
mov rdx, rbx
lea rcx, [rbp - 0x29]
call fcn.140006b60
nop
lea rdx, str.__r_t_n
lea rcx, [rbp - 0x29]
call fcn.1400b5ef0
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x69], xmm0
mov qword [rbp - 0x59], rdi
mov edx, 0x22
lea r8, [rbp - 0x69]
lea rcx, [rbp - 0x29]
call fcn.1400b7650
mov r12, qword [rbp - 0x61]
mov rax, r12
mov rbx, qword [rbp - 0x69]
sub rax, rbx
sar rax, 5
cmp rax, 1
jne 0x140150203
cmp rbx, r12
je 0x14014ffdf
movabs rax, 0x7ffffffffffffffe
mov qword [rbp - 0x39], rdi
mov qword [rbp - 0x31], rdi
mov rsi, qword [rbx + 0x10]
mov r14, rbx
cmp qword [rbx + 0x18], 8
jb 0x14014ff31
mov r14, qword [rbx]
cmp rsi, 8
jae 0x14014ff49
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x49], xmm0
mov qword [rbp - 0x31], 7
jmp 0x14014ff81
mov rdi, rsi
or rdi, 7
cmp rdi, rax
cmova rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp - 0x49]
call fcn.140007020
mov qword [rbp - 0x49], rax
lea r8, [rsi*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.14018d350
mov qword [rbp - 0x31], rdi
xor edi, edi
mov qword [rbp - 0x39], rsi
lea rdx, str.__r_t_n
lea rcx, [rbp - 0x49]
call fcn.1400b5ef0
nop
mov rdx, qword [rbp - 0x31]
cmp rdx, 8
jb 0x14014ffd6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14014ffd1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401502dd
call fcn.140187064
add rbx, 0x20
jmp 0x14014ff05
xor bl, bl
movdqa xmm0, xmmword [0x14024e320]
movdqu xmmword [rbp - 0x39], xmm0
mov word [rbp - 0x49], di
mov r8d, 0x2c
lea rdx, str.RC_SAFE_C6D58EED_1BA6_4305_8557_4008C83214E3
lea rcx, [rbp - 0x49]
call fcn.140006b60
nop
lea r8, [rbp - 0x49]
cmp qword [rbp - 0x31], 8
cmovae r8, qword [rbp - 0x49]
mov r14d, 1
mov r9d, r14d
xor edx, edx
xor ecx, ecx
call fcn.1401f4b70
mov qword [r13 + 0xe0], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x140150055
movzx ebx, r14b
mov rcx, qword [r13 + 0xe0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [r13 + 0xe0], rdi
mov rdx, qword [rbp - 0x31]
cmp rdx, 8
jb 0x140150095
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140150090
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401502e3
call fcn.140187064
test bl, bl
mov rbx, qword [rbp - 0x69]
jne 0x140150203
mov rax, qword [rbp - 0x61]
sub rax, rbx
sar rax, 5
cmp rax, 1
jne 0x140150206
mov dword [rbp - 9], 0x6e002f
mov dword [rbp - 5], 0x74006f
mov dword [rbp - 1], 0x660069
mov dword [rbp + 3], 0x5f0079
mov dword [rbp + 7], 0x650064
mov dword [rbp + 0xb], 0x6b0073
mov dword [rbp + 0xf], 0x67005f
mov dword [rbp + 0x13], 0x610075
mov dword [rbp + 0x17], 0x640072
mov word [rbp + 0x1b], di
movdqa xmm0, xmmword [0x14024e320]
movdqu xmmword [rbp - 0x39], xmm0
mov word [rbp - 0x49], di
lea rax, [rbp - 9]
nop
inc r15
cmp word [rax + r15*2], 0
jne 0x140150110
mov r8, r15
lea rdx, [rbp - 9]
lea rcx, [rbp - 0x49]
call fcn.140006b60
nop
mov rbx, qword [rbp - 0x69]
mov rcx, rbx
mov r10, qword [rbx + 0x18]
cmp r10, 8
jb 0x140150140
mov rcx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rsi, qword [rbp - 0x31]
mov rdi, qword [rbp - 0x49]
cmp r8, 0xd
jne 0x14015017d
mov r9, r8
lea rdx, str._notify_guard
sub rcx, rdx
nop
movzx eax, word [rdx]
cmp word [rdx + rcx], ax
jne 0x14015017d
add rdx, 2
sub r9, 1
jne 0x140150160
mov rcx, r13
call fcn.140151f00
jmp 0x1401501be
lea rcx, [rbp - 0x49]
cmp rsi, 8
cmovae rcx, rdi
mov rdx, rbx
cmp r10, 8
jb 0x140150195
mov rdx, qword [rbx]
cmp r8, qword [rbp - 0x39]
jne 0x1401501c2
test r8, r8
je 0x1401501b6
sub rdx, rcx
movzx eax, word [rcx]
cmp word [rcx + rdx], ax
jne 0x1401501c2
add rcx, 2
sub r8, 1
jne 0x1401501a3
mov rcx, r13
call fcn.140152350
mov rbx, qword [rbp - 0x69]
cmp rsi, 8
jb 0x140150206
lea rdx, [rsi*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1401501f5
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401502e9
mov rcx, rdi
call fcn.140187064
mov rbx, qword [rbp - 0x69]
jmp 0x140150206
mov r14d, edi
test rbx, rbx
je 0x140150271
mov rdi, qword [rbp - 0x61]
cmp rbx, rdi
je 0x140150229
mov rcx, rbx
call fcn.140006a90
add rbx, 0x20
cmp rbx, rdi
jne 0x140150214
mov rbx, qword [rbp - 0x69]
mov rdx, qword [rbp - 0x59]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x140150259
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401502ef
mov rcx, rbx
call fcn.140187064
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x69], xmm0
mov qword [rbp - 0x59], 0
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x1401502ad
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401502a8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401502d7
call fcn.140187064
mov eax, r14d
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.140187610
mov rbx, qword [rsp + 0x100]
add rsp, 0xb0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140199e4c
nop
call fcn.140199e4c
nop
call fcn.140199e4c
int3
call fcn.140199e4c
nop
call fcn.140199e4c
int3