Function at 0x14008bacc
Capabilities:
Check if file exists
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x37]
sub rsp, 0x100
mov qword [rbp + 0x2f], 0xfffffffffffffffe
mov rsi, rcx
lea rdx, [0x1400bcee3]
lea rcx, [rsp + 0x30]
call fcn.1400109fc
nop
lea rcx, [rsp + 0x30]
call fcn.14008c030
mov dword [rbp - 0x63], 0x2d323844
mov word [rbp - 0x52], 0x2d44
mov dword [rbp - 0x4f], 0x31443037
mov dword [rbp - 0x67], 0x35424132
mov word [rbp - 0x55], 0x3941
mov dword [rbp - 0x46], 0x7d3739
mov dword [rbp - 0x5d], 0x342d3143
mov dword [rbp - 0x4a], 0x44353934
xor r14d, r14d
mov word [rbp - 0x69], 0x367b
mov byte [rbp - 0x53], 0x44
mov word [rbp - 0x58], 0x3343
mov byte [rbp - 0x56], reloc.WLDAP32.dll_Ordinal_45
mov word [rbp - 0x5f], 0x4446
mov byte [rbp - 0x50], Ordinal_50
mov byte [rbp - 0x4b], 0x44
mov byte [rbp - 0x59], 0x44
lea rdx, [rbp - 0x69]
lea rcx, [rbp + 0x17]
call fcn.1400109fc
mov rdx, rax
lea rcx, [rbp + 0xf]
call fcn.14008c0f4
nop
mov dword [rbp - 0x31], 0x2d434642
mov dword [rbp - 0x23], 0x46394230
mov word [rbp - 0x25], 0x4532
mov dword [rbp - 0x1e], 0x7d4538
mov dword [rbp - 0x38], 0x4630412d
mov dword [rbp - 0x2d], 0x41343738
mov word [rbp - 0x28], 0x3043
mov dword [rbp - 0x3c], 0x46453034
mov byte [rbp - 0x26], 0x46
mov byte [rbp - 0x29], reloc.WLDAP32.dll_Ordinal_45
mov dword [rbp - 0x40], 0x41354337
mov byte [rbp - 0x1f], 0x41
mov word [rbp - 0x33], 0x342d
mov byte [rbp - 0x34], 0x42
mov byte [rbp - 0x41], 0x7b
lea rdx, [rbp - 0x41]
lea rcx, [rbp + 0x1f]
call fcn.1400109fc
mov rdx, rax
lea rcx, [rsp + 0x28]
call fcn.14008c0f4
nop
mov dword [rbp - 0x14], 0x37373339
mov dword [rbp - 0xc], 0x34342d30
mov dword [rbp - 0x10], 0x4641362d
mov dword [rbp + 2], 0x46333737
mov dword [rbp - 8], 0x382d6234
mov dword [rbp - 2], 0x33412d37
mov dword [rbp + 7], 0x30303232
mov word [rbp + 0xb], 0x7d45
mov byte [rbp + 0xd], r14b
mov word [rbp - 0x16], 0x3038
mov byte [rbp + 6], Ordinal_50
mov word [rbp - 0x19], 0x367b
mov byte [rbp - 0x17], 0x44
mov word [rbp - 4], 0x3539
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 0x27]
call fcn.1400109fc
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.14008c0f4
nop
mov rax, qword [rsp + 0x20]
cmp dword [rax - 0x10], r14d
jne 0x14008bcd3
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x20]
call fcn.140008b54
mov word [rbp + 0x80], 0x7828
mov word [rbp + 0x83], 0x2936
mov byte [rbp + 0x7f], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x85], r14b
mov byte [rbp + 0x82], gethostname
mov rcx, qword [rsp + 0x20]
cmp dword [rcx - 0x10], r14d
jl 0x14008bcd3
lea rdx, [rbp + 0x7f]
call fcn.140060390
test rax, rax
je 0x14008bcd3
cmp eax, dword [rsp + 0x20]
js 0x14008bcd3
lea r8, [0x1400bcee3]
lea rdx, [rbp + 0x7f]
lea rcx, [rsp + 0x20]
call fcn.140008760
mov dword [rsp + 0x3f], 0x6f726843
mov dword [rbp - 0x7b], 0x5c6e6f69
mov dword [rsp + 0x39], 0x6c676f6f
mov word [rbp - 0x6e], 0x65
mov dword [rbp - 0x73], 0x652e656d
mov dword [rbp - 0x80], 0x6163696c
mov dword [rsp + 0x45], 0x7070415c
mov byte [rbp - 0x6f], 0x78
mov word [rsp + 0x3d], 0x5c65
mov dword [rbp - 0x77], 0x6f726863
mov byte [rbp - 0x7c], reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x43], 0x656d
mov byte [rsp + 0x38], 0x47
mov word [rbp + 0x7a], 0x7325
mov word [rbp + 0x77], 0x7325
mov byte [rbp + 0x7c], r14b
mov byte [rbp + 0x79], 0x5c
call fcn.140010fb4
mov rcx, rax
test rax, rax
jne 0x14008bd54
mov ecx, 0x80004005
call fcn.140010d40
int3
mov rax, qword [rax]
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp + 0x6f], rax
mov r8, qword [rsp + 0x28]
mov edi, 1
cmp dword [r8 - 8], edi
jle 0x14008bd85
mov edx, dword [r8 - 0x10]
lea rcx, [rsp + 0x28]
call fcn.140010b2c
mov r8, qword [rsp + 0x28]
lea r9, [rsp + 0x38]
lea rdx, [rbp + 0x77]
lea rcx, [rbp + 0x6f]
call fcn.14000da78
mov rcx, qword [rsp + 0x28]
movsxd rdx, dword [rcx - 0xc]
call fcn.1400606d8
test eax, eax
js 0x14008c010
mov rcx, qword [rsp + 0x28]
cmp eax, dword [rcx - 0xc]
jg 0x14008c010
mov dword [rcx - 0x10], eax
movsxd rcx, eax
mov rax, qword [rsp + 0x28]
mov byte [rcx + rax], r14b
mov rbx, qword [rbp + 0x6f]
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
jne 0x14008bf5b
mov r8, qword [rsp + 0x20]
cmp dword [r8 - 8], edi
jle 0x14008bdfd
mov edx, dword [r8 - 0x10]
lea rcx, [rsp + 0x20]
call fcn.140010b2c
mov r8, qword [rsp + 0x20]
lea r9, [rsp + 0x38]
lea rdx, [rbp + 0x77]
lea rcx, [rbp + 0x6f]
call fcn.14000da78
mov rcx, qword [rsp + 0x20]
movsxd rdx, dword [rcx - 0xc]
call fcn.1400606d8
test eax, eax
js 0x14008bf50
mov rcx, qword [rsp + 0x20]
cmp eax, dword [rcx - 0xc]
jg 0x14008bf50
mov dword [rcx - 0x10], eax
movsxd rcx, eax
mov rax, qword [rsp + 0x20]
mov byte [rcx + rax], r14b
mov rbx, qword [rbp + 0x6f]
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
jne 0x14008bf5b
mov r8, qword [rsp + 0x30]
cmp dword [r8 - 8], edi
jle 0x14008be75
mov edx, dword [r8 - 0x10]
lea rcx, [rsp + 0x30]
call fcn.140010b2c
mov r8, qword [rsp + 0x30]
lea r9, [rsp + 0x38]
lea rdx, [rbp + 0x77]
lea rcx, [rbp + 0x6f]
call fcn.14000da78
mov rcx, qword [rsp + 0x30]
movsxd rdx, dword [rcx - 0xc]
call fcn.1400606d8
test eax, eax
js 0x14008bf45
mov rcx, qword [rsp + 0x30]
cmp eax, dword [rcx - 0xc]
jg 0x14008bf45
mov dword [rcx - 0x10], eax
movsxd rcx, eax
mov rax, qword [rsp + 0x30]
mov byte [rcx + rax], r14b
mov rbx, qword [rbp + 0x6f]
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
jne 0x14008bf5b
mov r8, qword [rbp + 0xf]
cmp dword [r8 - 8], edi
jle 0x14008beea
mov edx, dword [r8 - 0x10]
lea rcx, [rbp + 0xf]
call fcn.140010b2c
mov r8, qword [rbp + 0xf]
lea r9, [rsp + 0x38]
lea rdx, [rbp + 0x77]
lea rcx, [rbp + 0x6f]
call fcn.14000da78
mov rcx, qword [rbp + 0xf]
movsxd rdx, dword [rcx - 0xc]
call fcn.1400606d8
test eax, eax
js 0x14008bf3a
mov rcx, qword [rbp + 0xf]
cmp eax, dword [rcx - 0xc]
jg 0x14008bf3a
mov dword [rcx - 0x10], eax
movsxd rcx, eax
mov rax, qword [rbp + 0xf]
mov byte [rcx + rax], r14b
mov rbx, qword [rbp + 0x6f]
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
jne 0x14008bf5b
mov dil, r14b
jmp 0x14008bf6e
mov ecx, 0x80070057
call fcn.140010d40
int3
mov ecx, 0x80070057
call fcn.140010d40
int3
mov ecx, 0x80070057
call fcn.140010d40
int3
mov r8, rbx
lea rdx, [0x1400bd164]
mov rcx, rsi
call fcn.14000da78
nop
lea rdx, [rbx - 0x18]
or ebx, 0xffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14008bf8c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x20]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14008bfac
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x28]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14008bfcc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp + 0xf]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14008bfeb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rax, qword [rsp + 0x30]
lea rdx, [rax - 0x18]
mov ecx, ebx
lock xadd dword [rdx + 0x10], ecx
add ecx, ebx
test ecx, ecx
jg 0x14008c00b
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.WS2_32.dll_htonl + 8]
mov al, dil
jmp 0x14008c01b
mov ecx, 0x80070057
call fcn.140010d40
nop
add rsp, 0x100
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret