Function at 0x140017a70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x10078
call fcn.140019070
sub rsp, rax
movaps xmmword [rsp + 0x10060], xmm6
lea rcx, [rsp + 0x60]
mov r8d, 0x10000
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov ecx, 0x52534d42
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [0x14001c288]
mov esi, 1
test eax, eax
je 0x14001807d
mov edi, eax
lea r8, [rsp + 0x60]
mov ecx, 0x52534d42
xor edx, edx
mov r9d, eax
call qword [0x14001c288]
test eax, eax
je 0x14001807d
mov ecx, dword [rsp + 0x64]
add edi, 0xfffffff8
cmp ecx, edi
jne 0x14001807d
test ecx, ecx
je 0x140017ef6
lea rsi, [rsp + 0x68]
mov edi, 1
xor ebx, ebx
xorps xmm6, xmm6
lea r13, [rsp + 0x20]
xor eax, eax
nop
movzx edx, byte [rsi]
test dl, dl
jne 0x140017b40
test edi, edi
je 0x140017b40
cmp byte [rsi + 0x16], 0xff
je 0x140017bc6
xor edi, edi
cmp byte [rsi + 0x17], 0xff
sete dil
jmp 0x140017df0
cmp dl, 0x11
jge 0x140017bb0
cmp dl, 4
jne 0x140017df0
movzx edx, byte [rsi + 7]
mov rcx, rsi
call fcn.1400164b0
mov r15, rax
movaps xmmword [rsp + 0x20], xmm6
movaps xmmword [rsp + 0x30], xmm6
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x14001809b
mov r14, rax
cmp rax, 0xf
ja 0x140017bd0
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], 0xf
mov rcx, r13
mov rdx, r15
mov r8, r14
call sub.VCRUNTIME140.dll_memcpy
add r14, rsp
add r14, 0x20
jmp 0x140017c36
jne 0x140017df0
cmp word [rsi + 0xc], 0
jne 0x140017df0
jmp 0x140017e0f
mov edi, 1
jmp 0x140017df0
mov r13, r14
or r13, 0xf
cmp r13, 0x17
mov eax, 0x16
cmovb r13, rax
cmp r13, 0xfff
jb 0x140017c05
lea rcx, [r13 + 0x28]
call fcn.140018fe4
lea r12, [rax + 0x27]
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
jmp 0x140017c11
lea rcx, [r13 + 1]
call fcn.140018fe4
mov r12, rax
mov qword [rsp + 0x20], r12
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], r13
mov rcx, r12
mov rdx, r15
mov r8, r14
call sub.VCRUNTIME140.dll_memcpy
add r14, r12
lea r13, [rsp + 0x20]
mov byte [r14], 0
mov dword [rsp + 0x44], 0x1d
mov eax, dword [rsp + 0x44]
xor al, 0x51
mov byte [rsp + 0x48], al
mov eax, dword [rsp + 0x44]
inc al
xor al, 0x45
mov byte [rsp + 0x49], al
mov eax, dword [rsp + 0x44]
add al, 2
xor al, 0x4d
mov byte [rsp + 0x4a], al
mov eax, dword [rsp + 0x44]
add al, 3
xor al, 0x55
mov byte [rsp + 0x4b], al
mov byte [rsp + 0x4c], 0
movzx eax, byte [rsp + 0x48]
mov ecx, dword [rsp + 0x44]
xor cl, al
mov byte [rsp + 0x48], cl
movzx eax, byte [rsp + 0x49]
mov ecx, dword [rsp + 0x44]
inc cl
xor cl, al
mov byte [rsp + 0x49], cl
movzx eax, byte [rsp + 0x4a]
mov ecx, dword [rsp + 0x44]
add cl, 2
xor cl, al
mov byte [rsp + 0x4a], cl
movzx eax, byte [rsp + 0x4b]
mov ecx, dword [rsp + 0x44]
add cl, 3
xor cl, al
mov byte [rsp + 0x4b], cl
mov byte [rsp + 0x4c], 0
lea rcx, [rsp + 0x48]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov r15, rax
mov rcx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x30]
mov r8, qword [rsp + 0x38]
cmp r8, 0x10
mov r12, r13
cmovae r12, rcx
sub rax, r15
jae 0x140017cfb
xor ebp, ebp
cmp r8, 0x10
jae 0x140017db7
jmp 0x140017de8
test r15, r15
je 0x140017da4
mov qword [rsp + 0x50], r8
mov qword [rsp + 0x58], rcx
lea r14, [r12 + rax]
inc r14
movsx ebp, byte [rsp + 0x48]
mov r8, r14
sub r8, r12
mov rcx, r12
mov edx, ebp
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x140017d6f
mov r13, rax
nop word cs:[rax + rax]
mov rcx, r13
lea rdx, [rsp + 0x48]
mov r8, r15
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140017d88
inc r13
mov r8, r14
sub r8, r13
mov rcx, r13
mov edx, ebp
call sub.VCRUNTIME140.dll_memchr
mov r13, rax
test rax, rax
jne 0x140017d40
xor ebp, ebp
lea r13, [rsp + 0x20]
mov rcx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x50]
cmp r8, 0x10
jae 0x140017db7
jmp 0x140017de8
sub r13, r12
cmp r13, 0xffffffffffffffff
lea r13, [rsp + 0x20]
mov rcx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x50]
je 0x140017cea
movzx eax, word [rsi + 0x14]
cmp eax, 0x7d0
sete bpl
cmp r8, 0x10
jb 0x140017de8
lea rdx, [r8 + 1]
cmp rdx, 0x1000
jb 0x140017de3
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x1400180a0
add r8, 0x28
mov rdx, r8
mov rcx, rax
call fcn.140019028
movzx eax, bpl
nop dword [rax]
movzx ecx, byte [rsi + 1]
add rsi, rcx
inc rsi
nop word [rax + rax]
cmp word [rsi - 1], 0
lea rsi, [rsi + 1]
jne 0x140017e00
mov ecx, dword [rsp + 0x64]
inc ebx
cmp ebx, ecx
jb 0x140017b10
test eax, eax
je 0x140017ef6
cmp byte [0x14001c088], 0
je 0x140017edb
mov byte [rsp + 0x20], 0x64
mov byte [rsp + 0x21], 0x81
mov byte [rsp + 0x22], 0x66
mov byte [rsp + 0x23], 0x29
mov byte [rsp + 0x24], 0x5c
mov byte [rsp + 0x25], 0x4a
mov byte [rsp + 0x26], 0x57
mov byte [rsp + 0x27], 0x4d
mov byte [rsp + 0x28], 0x4b
mov byte [rsp + 0x29], 0x58
mov byte [rsp + 0x2a], 0x61
mov byte [rsp + 0x2b], 0
add byte [rsp + 0x20], 0xf7
add byte [rsp + 0x21], 0xf7
add byte [rsp + 0x22], 0xf7
add byte [rsp + 0x23], 0xf7
add byte [rsp + 0x24], 0xf7
add byte [rsp + 0x25], 0xf7
add byte [rsp + 0x26], 0xf7
add byte [rsp + 0x27], 0xf7
add byte [rsp + 0x28], 0xf7
add byte [rsp + 0x29], 0xf7
add byte [rsp + 0x2a], 0xf7
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x20]
call fcn.1400014b0
mov rsi, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
add rcx, rsi
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
mov rcx, rsi
mov edx, eax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::put_char____ptr64]
mov rcx, rsi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::flush_void____ptr64]
mov rdi, qword [0x14001c238]
call qword [0x14001c1c8]
xor esi, esi
mov rcx, rax
xor edx, edx
call rdi
jmp 0x14001807d
xor esi, esi
cmp byte [0x14001c088], 0
je 0x14001807d
mov dword [rsp + 0x20], 0x30
lea rdx, [rsp + 0x24]
mov byte [rsp + 0x24], 0x6b
mov byte [rsp + 0x25], 0x1b
mov byte [rsp + 0x26], 0x6d
mov byte [rsp + 0x27], 0x10
mov byte [rsp + 0x28], 0x62
mov byte [rsp + 0x29], 0x63
mov byte [rsp + 0x2a], 0x7d
mov byte [rsp + 0x2b], 0x72
mov byte [rsp + 0x2c], 0x10
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], 0x71
mov byte [rsp + 0x2f], 0x63
mov byte [rsp + 0x30], 0x63
mov byte [rsp + 0x31], 0x75
mov byte [rsp + 0x32], 0x74
mov byte [rsp + 0x33], 0
movzx eax, byte [rsp + 0x24]
mov ecx, dword [rsp + 0x20]
xor cl, al
mov byte [rsp + 0x24], cl
movzx eax, byte [rsp + 0x25]
mov ecx, dword [rsp + 0x20]
xor cl, al
mov byte [rsp + 0x25], cl
movzx eax, byte [rsp + 0x26]
mov ecx, dword [rsp + 0x20]
xor cl, al
mov byte [rsp + 0x26], cl
movzx eax, byte [rsp + 0x27]
mov ecx, dword [rsp + 0x20]
xor cl, al
mov byte [rsp + 0x27], cl
movzx eax, byte [rsp + 0x28]
mov ecx, dword [rsp + 0x20]
xor cl, al
mov byte [rsp + 0x28], cl
movzx eax, byte [rsp + 0x29]
mov ecx, dword [rsp + 0x20]
xor cl, al
mov byte [rsp + 0x29], cl
movzx eax, byte [rsp + 0x2a]
mov ecx, dword [rsp + 0x20]
xor cl, al
mov byte [rsp + 0x2a], cl
movzx eax, byte [rsp + 0x2b]
mov ecx, dword [rsp + 0x20]
xor cl, al
mov byte [rsp + 0x2b], cl
movzx eax, byte [rsp + 0x2c]
mov ecx, dword [rsp + 0x20]
xor cl, al
mov byte [rsp + 0x2c], cl
movzx eax, byte [rsp + 0x2d]
mov ecx, dword [rsp + 0x20]
xor cl, al
mov byte [rsp + 0x2d], cl
movzx eax, byte [rsp + 0x2e]
mov ecx, dword [rsp + 0x20]
xor cl, al
mov byte [rsp + 0x2e], cl
movzx eax, byte [rsp + 0x2f]
mov ecx, dword [rsp + 0x20]
xor cl, al
mov byte [rsp + 0x2f], cl
movzx eax, byte [rsp + 0x30]
mov ecx, dword [rsp + 0x20]
xor cl, al
mov byte [rsp + 0x30], cl
movzx eax, byte [rsp + 0x31]
mov ecx, dword [rsp + 0x20]
xor cl, al
mov byte [rsp + 0x31], cl
movzx eax, byte [rsp + 0x32]
mov ecx, dword [rsp + 0x20]
xor cl, al
mov byte [rsp + 0x32], cl
mov byte [rsp + 0x33], 0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400014b0
mov rdi, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
add rcx, rdi
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
mov rcx, rdi
mov edx, eax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::put_char____ptr64]
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::flush_void____ptr64]
mov eax, esi
movaps xmm6, xmmword [rsp + 0x10060]
add rsp, 0x10078
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.140005210
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3