Function at 0x1400a46b0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov rax, rsp
push rbx
push rdi
sub rsp, 0x98
mov word [rsp + 0x23], 0x7974
mov rdi, rdx
mov word [rsp + 0x20], 0x6d45
mov rbx, rcx
mov byte [rsp + 0x22], 0x70
mov dword [rsp + 0x25], 0x79656b20
mov byte [rax - 0x7f], 0
mov dword [rsp + 0x3b], 0x6c207965
mov dword [rsp + 0x32], 0x72726f63
mov word [rsp + 0x42], 0x6874
mov word [rsp + 0x30], 0x6e49
mov dword [rsp + 0x36], 0x20746365
mov byte [rsp + 0x3a], 0x6b
mov word [rsp + 0x3f], 0x6e65
mov byte [rsp + 0x44], 0
mov byte [rsp + 0x41], 0x67
mov word [rsp + 0x54], 0x636f
mov word [rsp + 0x51], 0x6220
mov word [rsp + 0x49], 0x636e
mov dword [rsp + 0x5b], 0x687467
mov byte [rsp + 0x48], 0x49
mov dword [rsp + 0x4c], 0x63657272
mov word [rsp + 0x59], 0x6e65
mov word [rsp + 0x56], 0x206b
mov byte [rsp + 0x50], 0x74
mov byte [rsp + 0x58], 0x6c
mov byte [rsp + 0x53], 0x6c
mov byte [rsp + 0x4b], 0x6f
test rdx, rdx
je 0x1400a4bf4
mov dword [rcx + 0x3cc], 0x20
mov qword [rax + 8], rbp
mov dword [rcx + 0x3d0], 0x10
movups xmm0, xmmword [r8]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], r12
movups xmmword [rcx + 0x3d8], xmm0
mov qword [rax - 0x18], r13
movups xmm0, xmmword [r8]
mov qword [rax - 0x20], r14
mov qword [rax - 0x28], r15
movups xmmword [rcx + 0x3f8], xmm0
mov eax, dword [rcx + 0x3cc]
mov ecx, dword [rcx + 0x3d0]
cmp eax, 0x10
je 0x1400a47dc
cmp eax, 0x18
mov eax, 0xe
jne 0x1400a47f6
cmp ecx, 0x20
mov edx, 0xc
cmovne eax, edx
jmp 0x1400a47f6
cmp ecx, 0x10
jne 0x1400a47e6
lea eax, [rcx - 6]
jmp 0x1400a47f6
cmp ecx, 0x18
mov eax, 0xe
mov edx, 0xc
cmove eax, edx
mov dword [rbx + 0x3d4], eax
xor ebp, ebp
mov eax, ecx
mov ecx, dword [rbx + 0x3d4]
cdq
and edx, 3
add eax, edx
sar eax, 2
movsxd r15, eax
mov r14, r15
test ecx, ecx
js 0x1400a4846
lea rsi, [rbx + 0xc]
nop dword [rax]
test r15d, r15d
jle 0x1400a4836
mov r8, r14
xor edx, edx
shl r8, 2
mov rcx, rsi
call fcn.1400e93f0
mov ecx, dword [rbx + 0x3d4]
inc ebp
add rsi, 0x20
cmp ebp, ecx
jle 0x1400a4820
xor esi, esi
test ecx, ecx
js 0x1400a4879
lea rbp, [rbx + 0x1ec]
test r15d, r15d
jle 0x1400a4869
mov r8, r14
xor edx, edx
shl r8, 2
mov rcx, rbp
call fcn.1400e93f0
mov ecx, dword [rbx + 0x3d4]
inc esi
add rbp, 0x20
cmp esi, ecx
jle 0x1400a4853
mov eax, dword [rbx + 0x3cc]
lea esi, [rcx + 1]
cdq
imul esi, r15d
and edx, 3
add eax, edx
lea rdx, [rbx + 0x418]
sar eax, 2
movsxd r12, eax
test eax, eax
jle 0x1400a48d8
mov r8d, r12d
movzx ecx, byte [rdi]
lea rdx, [rdx + 4]
shl ecx, 0x18
lea rdi, [rdi + 4]
mov dword [rdx - 4], ecx
movzx eax, byte [rdi - 3]
shl eax, 0x10
or eax, ecx
mov dword [rdx - 4], eax
movzx ecx, byte [rdi - 2]
shl ecx, 8
or ecx, eax
mov dword [rdx - 4], ecx
movzx eax, byte [rdi - 1]
or eax, ecx
mov dword [rdx - 4], eax
sub r8, 1
jne 0x1400a48a0
xor r10d, r10d
lea r13, [0x140000000]
test r12d, r12d
jle 0x1400a493a
xor r11d, r11d
lea r9, [rbx + 0x418]
cmp r10d, esi
jge 0x1400a4a6c
mov eax, r10d
inc r11
cdq
inc r10d
idiv r15d
movsxd rcx, eax
movsxd r8, edx
lea rdx, [r8 + rcx*8]
mov ecx, dword [r9]
mov dword [rbx + rdx*4 + 0xc], ecx
mov ecx, dword [rbx + 0x3d4]
sub ecx, eax
movsxd rax, ecx
lea rcx, [r8 + rax*8]
mov eax, dword [r9]
add r9, 4
mov dword [rbx + rcx*4 + 0x1ec], eax
cmp r11, r12
jl 0x1400a48f1
cmp r10d, esi
jge 0x1400a4a6c
lea r13, [0x140148a40]
lea r11, [0x140000000]
mov r8d, dword [rbx + r12*4 + 0x414]
lea r13, [r13 + 1]
movsxd rdx, r8d
mov rax, rdx
sar rax, 0x10
movzx ecx, al
movsx eax, byte [r13 - 1]
movsx r9d, byte [rcx + r11 + 0x14bb60]
xor r9d, eax
mov rax, rdx
sar rax, 8
movzx ecx, al
shl r9d, 8
movzx eax, byte [rcx + r11 + 0x14bb60]
xor r9d, eax
movzx eax, dl
shl r9d, 8
movzx eax, byte [rax + r11 + 0x14bb60]
xor r9d, eax
mov eax, r8d
shr rax, 0x18
shl r9d, 8
movzx eax, byte [rax + r11 + 0x14bb60]
xor r9d, eax
xor dword [rbx + 0x418], r9d
cmp r12d, 8
je 0x1400a4b36
cmp r12, 1
jle 0x1400a49ff
lea rcx, [rbx + 0x41c]
lea rdx, [r12 - 1]
nop dword [rax]
nop word [rax + rax]
mov eax, dword [rcx - 4]
xor dword [rcx], eax
lea rcx, [rcx + 4]
sub rdx, 1
jne 0x1400a49f0
test r12d, r12d
jle 0x1400a4a5c
lea r9, [rbx + 0x418]
xor r11d, r11d
nop
cmp r10d, esi
jge 0x1400a4a65
mov eax, r10d
inc r11
cdq
inc r10d
idiv r15d
movsxd rcx, eax
movsxd r8, edx
lea rdx, [r8 + rcx*8]
mov ecx, dword [r9]
mov dword [rbx + rdx*4 + 0xc], ecx
mov ecx, dword [rbx + 0x3d4]
sub ecx, eax
movsxd rax, ecx
lea rcx, [r8 + rax*8]
mov eax, dword [r9]
add r9, 4
mov dword [rbx + rcx*4 + 0x1ec], eax
cmp r11, r12
jl 0x1400a4a10
lea r11, [0x140000000]
cmp r10d, esi
jl 0x1400a4951
lea r13, [0x140000000]
mov r15, qword [rsp + 0x80]
mov edi, 1
mov r12, qword [rsp + 0xc0]
mov rbp, qword [rsp + 0xb0]
cmp dword [rbx + 0x3d4], edi
jle 0x1400a4b10
lea rsi, [rbx + 0x20c]
test r14, r14
jle 0x1400a4b02
mov r10, rsi
mov r11, r14
nop dword [rax]
nop word [rax + rax]
mov eax, dword [r10]
lea r10, [r10 + 4]
mov edx, eax
movsxd r9, eax
shr rdx, 0x18
mov rax, r9
sar rax, 0x10
movzx ecx, al
mov rax, r9
sar rax, 8
mov r8d, dword [r13 + rdx*4 + 0x149660]
xor r8d, dword [r13 + rcx*4 + 0x149260]
movzx ecx, al
movzx eax, r9b
xor r8d, dword [r13 + rcx*4 + 0x148e60]
xor r8d, dword [r13 + rax*4 + 0x148a60]
mov dword [r10 - 4], r8d
sub r11, 1
jne 0x1400a4ab0
inc edi
add rsi, 0x20
cmp edi, dword [rbx + 0x3d4]
jl 0x1400a4a98
mov r14, qword [rsp + 0x88]
mov r13, qword [rsp + 0x90]
mov rsi, qword [rsp + 0xb8]
mov byte [rbx + 8], 1
add rsp, 0x98
pop rdi
pop rbx
ret
lea rcx, [rbx + 0x41c]
mov edx, 3
nop dword [rax]
nop word [rax + rax]
mov eax, dword [rcx - 4]
xor dword [rcx], eax
lea rcx, [rcx + 4]
sub rdx, 1
jne 0x1400a4b50
mov eax, dword [rbx + 0x424]
mov ecx, eax
movsxd rdx, eax
shr rcx, 0x18
mov rax, rdx
sar rax, 0x10
movsx r8d, byte [rcx + r11 + 0x14bb60]
movzx ecx, al
shl r8d, 8
movzx eax, byte [rcx + r11 + 0x14bb60]
xor r8d, eax
mov rax, rdx
sar rax, 8
shl r8d, 8
movzx ecx, al
movzx eax, byte [rcx + r11 + 0x14bb60]
xor r8d, eax
movzx eax, dl
shl r8d, 8
movzx eax, byte [rax + r11 + 0x14bb60]
xor r8d, eax
xor dword [rbx + 0x428], r8d
cmp r12, 5
jle 0x1400a49ff
lea rax, [rbx + 0x42c]
lea rdx, [r12 - 5]
nop dword [rax + rax]
mov ecx, dword [rax - 4]
xor dword [rax], ecx
lea rax, [rax + 4]
sub rdx, 1
jne 0x1400a4be0
jmp 0x1400a4a04
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x60]
call fcn.140021d80
lea rdx, [0x140160f68]
lea rcx, [rsp + 0x60]
call fcn.1400e8c70
int3