Function at 0x1400038c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x288]
sub rsp, 0x360
mov qword [rbp - 0x70], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x140176220]
xor rax, rsp
mov qword [rbp + 0x250], rax
movzx r13d, cl
mov dword [rbp - 0x48], 0x74666f53
mov dword [rbp - 0x41], 0x55455c65
mov word [rbp - 0x3d], 0x4b44
mov word [rbp - 0x44], 0x6177
mov byte [rbp - 0x3b], 0
mov byte [rbp - 0x42], 0x72
call fcn.14001e010
mov rdx, rax
xor r12d, r12d
mov ecx, r12d
test rax, rax
setne cl
test ecx, ecx
jne 0x140003948
mov ecx, 0x80004005
call fcn.14001d600
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x38], rbx
lea rcx, [rbp - 0x48]
lea rax, [rbp - 0x48]
or r14, 0xffffffffffffffff
test rax, 0xffffffffffff0000
jne 0x14000399d
movzx edi, cx
xor edx, edx
mov ecx, edi
call fcn.14001d490
test rax, rax
je 0x140003a7c
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.14001ede0
mov rbx, qword [rsp + 0x38]
jmp 0x140003a7c
lea rax, [rbp - 0x48]
mov rdi, r14
inc rdi
cmp byte [rax + rdi], 0
jne 0x1400039a4
test edi, edi
jne 0x140003a09
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], 0
je 0x140003a7c
cmp dword [rdx + 0x10], 0
jge 0x1400039e5
cmp dword [rbx - 0xc], 0
jge 0x1400039d9
mov ecx, 0x80070057
call fcn.14001d600
int3
mov dword [rbx - 0x10], r12d
mov byte [rbx], 0
jmp 0x140003a7c
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400039f5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x38], rbx
jmp 0x140003a7c
mov r15d, dword [rbx - 0x10]
lea rsi, [rbp - 0x48]
sub rsi, rbx
test edi, edi
jns 0x140003a23
mov ecx, 0x80070057
call fcn.14001d600
int3
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x140003a45
mov edx, edi
lea rcx, [rsp + 0x38]
call fcn.14001f180
mov rbx, qword [rsp + 0x38]
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
cmp rsi, r15
movsxd r15, edi
mov r9, r15
ja 0x140003a62
lea r8, [rsi + rbx]
call fcn.1400561a0
jmp 0x140003a6b
lea r8, [rbp - 0x48]
call fcn.140053dd4
cmp edi, dword [rbx - 0xc]
jg 0x140004038
mov dword [rbx - 0x10], edi
mov byte [r15 + rbx], 0
mov byte [rbp + 0x30], 0
xor edx, edx
mov r8d, 0x103
lea rcx, [rbp + 0x31]
call fcn.140054c50
mov edx, 0x104
lea rcx, [rbp + 0x30]
call fcn.14013c410
call fcn.14001e010
mov rdx, rax
mov ecx, r12d
test rax, rax
setne cl
test ecx, ecx
jne 0x140003abf
mov ecx, 0x80004005
call fcn.14001d600
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x40], rdi
lea rcx, [rbp + 0x30]
lea rax, [rbp + 0x30]
test rax, 0xffffffffffff0000
jne 0x140003b0b
movzx edi, cx
xor edx, edx
mov ecx, edi
call fcn.14001d490
test rax, rax
je 0x140003bf2
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.14001ede0
jmp 0x140003bf2
lea rax, [rbp + 0x30]
mov rsi, r14
inc rsi
cmp byte [rax + rsi], 0
jne 0x140003b12
test esi, esi
jne 0x140003b7c
lea rdx, [rdi - 0x18]
mov rsi, qword [rdx]
cmp dword [rdx + 8], 0
je 0x140003bf2
cmp dword [rdx + 0x10], 0
jge 0x140003b53
cmp dword [rdi - 0xc], 0
jge 0x140003b47
mov ecx, 0x80070057
call fcn.14001d600
int3
mov dword [rdi - 0x10], r12d
mov byte [rdi], 0
jmp 0x140003bf2
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140003b63
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x40], rax
mov rbx, qword [rsp + 0x38]
jmp 0x140003bf2
mov r12d, dword [rdi - 0x10]
lea r15, [rbp + 0x30]
sub r15, rdi
test esi, esi
jns 0x140003b96
mov ecx, 0x80070057
call fcn.14001d600
int3
mov ecx, 1
sub ecx, dword [rdi - 8]
mov eax, dword [rdi - 0xc]
sub eax, esi
or eax, ecx
jge 0x140003bb8
mov edx, esi
lea rcx, [rsp + 0x40]
call fcn.14001f180
mov rdi, qword [rsp + 0x40]
movsxd rdx, dword [rdi - 0xc]
mov rcx, rdi
cmp r15, r12
movsxd r12, esi
mov r9, r12
ja 0x140003bd5
lea r8, [r15 + rdi]
call fcn.1400561a0
jmp 0x140003bde
lea r8, [rbp + 0x30]
call fcn.140053dd4
cmp esi, dword [rdi - 0xc]
jg 0x14000402d
mov dword [rdi - 0x10], esi
mov byte [r12 + rdi], 0
xor r12d, r12d
lea r8, [0x140145778]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x78]
call fcn.14001cc30
nop
lea r8, [rsp + 0x38]
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.14001cab0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140003c6f
cmp dword [rbx + 0x10], 0
jl 0x140003c60
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140003c60
call fcn.14001d6a0
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140003c55
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x38], rax
jmp 0x140003c6f
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.14001f890
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140003c88
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140003ca2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140003cbb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x50], 4
mov dword [rsp + 0x4c], 4
mov dword [rbp - 0x28], 0x696570
mov dword [rbp - 0x37], 0x65747379
mov dword [rbp - 0x2f], 0x6e6f464b
mov dword [rbp - 0x33], 0x4455456d
mov word [rbp - 0x2b], 0x5474
mov byte [rbp - 0x38], 0x53
mov byte [rbp - 0x29], 0x79
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x4c]
lea r8, [rbp - 0x38]
mov rbx, qword [rsp + 0x38]
mov rdx, rbx
mov rcx, 0xffffffff80000003
call fcn.14000e550
cmp dword [rsp + 0x48], 1
jne 0x140004017
lea rcx, [rsp + 0x30]
call fcn.140124c90
nop
call fcn.14001e010
mov rdx, rax
mov ecx, r12d
test rax, rax
setne cl
test ecx, ecx
jne 0x140003d61
mov ecx, 0x80004005
call fcn.14001d600
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
test r13b, r13b
je 0x140003e2f
mov dword [rbp + 0x1d], 0x253d6469
mov dword [rbp + 8], 0x70747468
mov dword [rbp + 0x14], 0x2e676f6c
mov dword [rbp + 0xd], 0x252f2f3a
mov dword [rbp + 0x23], 0x73253d6d
mov dword [rbp + 0x18], 0x3f706870
mov word [rbp + 0x27], 0x7326
mov byte [rbp + 0xc], 0x73
mov word [rbp + 0x11], 0x2f73
mov word [rbp + 0x21], 0x2673
mov word [rbp + 0x2a], 0x31
mov byte [rbp + 0x1c], 0x75
mov byte [rbp + 0x13], 0x69
mov byte [rbp + 0x29], 0x3d
lea rcx, [rsp + 0x60]
call fcn.14012d890
mov rbx, rax
movzx edx, r13b
lea rcx, [rsp + 0x70]
call fcn.14001e0f0
nop
lea rcx, str.f7d3b0c12eda407e9c915e650de09a72
mov qword [rsp + 0x20], rcx
mov r9, qword [rbx]
mov r8, qword [rax]
lea rdx, [rbp + 8]
lea rcx, [rsp + 0x58]
call fcn.14001db30
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140003e25
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x60]
jmp 0x140003ee6
mov dword [rbp - 0x1a], 0x73252f2f
mov word [rbp - 0xe], 0x3f70
mov dword [rbp - 0x1f], 0x73707474
mov word [rbp - 3], 0x7326
mov word [rbp - 8], 0x7026
mov word [rbp - 0x15], 0x6c69
mov word [rbp], 0x31
mov word [rbp - 0xb], 0x253d
mov word [rbp - 6], 0x253d
mov byte [rbp - 0x16], 0x2f
mov dword [rbp - 0x13], 0x702e676f
mov byte [rbp - 1], 0x3d
mov byte [rbp - 4], 0x73
mov byte [rbp - 0xf], 0x68
mov byte [rbp - 0xc], 0x69
mov byte [rbp - 0x20], 0x68
mov byte [rbp - 0x1b], 0x3a
mov byte [rbp - 9], 0x73
lea rcx, [rbp - 0x80]
call fcn.14012d890
mov rbx, rax
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.14001e0f0
nop
lea rcx, str.f7d3b0c12eda407e9c915e650de09a72
mov qword [rsp + 0x20], rcx
mov r9, qword [rbx]
mov r8, qword [rax]
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x58]
call fcn.14001db30
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140003ee2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140003efa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov esi, r12d
mov rbx, qword [rsp + 0x58]
nop dword [rax]
nop word [rax + rax]
mov byte [rbp + 0x140], 0
xor edx, edx
mov r8d, 0x103
lea rcx, [rbp + 0x141]
call fcn.140054c50
mov edx, 0x104
lea rcx, [rbp + 0x140]
call fcn.14013c410
mov qword [rbp - 0x50], 0xf
mov qword [rbp - 0x58], r12
mov byte [rbp - 0x68], 0
lea r8, [rbp - 0x68]
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.140010f70
test al, al
je 0x140003fbd
lea rcx, [rbp - 0x68]
mov r12, qword [rbp - 0x68]
mov r15, qword [rbp - 0x50]
cmp r15, 0x10
cmovae rcx, r12
mov r8d, 1
mov rdi, qword [rbp - 0x58]
cmp rdi, r8
cmovb r8, rdi
test r8, r8
jne 0x140003f8f
xor eax, eax
jmp 0x140003f9b
lea rdx, [0x1401457bc]
call fcn.140054b70
cdqe
test rax, rax
jne 0x140003fb6
cmp rdi, 1
jae 0x140003fad
mov eax, r14d
jmp 0x140003fb6
xor eax, eax
cmp rdi, 1
setne al
test eax, eax
je 0x140003fe4
xor r12d, r12d
mov ecx, 0x3e8
call fcn.1401228c0
nop
cmp qword [rbp - 0x50], 0x10
jb 0x140003fd8
mov rcx, qword [rbp - 0x68]
call fcn.140052004
inc esi
cmp esi, 6
jge 0x140003ff3
jmp 0x140003f10
cmp r15, 0x10
jb 0x140003ff3
mov rcx, r12
call fcn.140052004
nop
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140004008
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
lea rcx, [rsp + 0x30]
call fcn.140134f30
mov rbx, qword [rsp + 0x38]
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140004043
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
jmp 0x140004043
mov ecx, 0x80070057
call fcn.14001d600
nop
mov ecx, 0x80070057
call fcn.14001d600
nop
mov rcx, qword [rbp + 0x250]
xor rcx, rsp
call fcn.140052380
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret