Function at 0x140031330
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push rbp
push rbx
push rdi
lea rbp, [rsp - 0xf70]
mov eax, 0x1070
call fcn.1400ad400
sub rsp, rax
mov rax, qword [0x1400e10c0]
xor rax, rsp
mov qword [rbp + 0xf60], rax
mov rdi, r9
mov rbx, r8
test r8, r8
je 0x140031548
mov r9d, 0x1000
lea rdx, [rsp + 0x60]
call fcn.14002da30
xor edx, edx
test al, al
jne 0x140031431
mov dword [rsp + 0x20], 0x3bde3ba9
mov r8d, 0x3bf2
mov dword [rsp + 0x24], 0x3bd53ba9
mov dword [rsp + 0x28], 0x3b963bb5
mov dword [rsp + 0x2c], 0x3bde3b96
mov dword [rsp + 0x30], 0x3bdb3b8e
mov dword [rsp + 0x34], 0x3b983b8e
mov dword [rsp + 0x38], 0x3b9b3b9f
mov dword [rsp + 0x3c], 0x3c6c3c20
mov dword [rsp + 0x40], 0x3c673c6d
mov dword [rsp + 0x44], 0x3c693c71
mov dword [rsp + 0x48], 0x3c273c63
mov dword [rsp + 0x4c], 0x3c6c3c60
mov dword [rsp + 0x50], 0x3c6f3c6b
mov dword [rsp + 0x54], 0x3c7f3c69
mov dword [rsp + 0x58], 0x3c7d
mov byte [rsp + 0x5c], 1
nop word [rax + rax]
lea eax, [r8 + rdx]
xor word [rsp + rdx*2 + 0x20], ax
inc rdx
cmp rdx, 0x1d
jb 0x140031410
mov byte [rsp + 0x5c], 0
lea rdx, [rsp + 0x20]
jmp 0x14003152c
movsxd rax, dword [rbp - 0x64]
lea rcx, [rsp + 0x60]
add rcx, rax
mov r9d, edx
movzx eax, word [rcx + 0x14]
lea r11, [rcx + 0x18]
movzx r10d, word [rcx + 6]
add r11, rax
test r10d, r10d
je 0x14003149b
nop word [rax + rax]
mov eax, r9d
lea rcx, [rax + rax*4]
cmp dword [r11 + rcx*8], 0x45474150
lea r8, [r11 + rcx*8]
jne 0x140031493
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [r8 + rax], dl
jne 0x140031480
cmp rax, 4
je 0x140031564
inc r9d
cmp r9d, r10d
jb 0x140031460
mov dword [rsp + 0x20], 0x3bde3ba9
mov r8d, 0x3bf2
mov dword [rsp + 0x24], 0x3bd53ba9
mov dword [rsp + 0x28], 0x3b963bb5
mov dword [rsp + 0x2c], 0x3bde3b96
mov dword [rsp + 0x30], 0x3bdb3b8e
mov dword [rsp + 0x34], 0x3b943b9a
mov dword [rsp + 0x38], 0x3b9b3b90
mov dword [rsp + 0x3c], 0x3c723c20
mov dword [rsp + 0x40], 0x3c603c67
mov dword [rsp + 0x44], 0x3c6c3c70
mov dword [rsp + 0x48], 0x3c693c69
mov word [rsp + 0x4c], dx
mov byte [rsp + 0x4e], 1
nop dword [rax]
nop word [rax + rax]
lea eax, [r8 + rdx]
xor word [rsp + rdx*2 + 0x20], ax
inc rdx
cmp rdx, 0x16
jb 0x140031510
mov byte [rsp + 0x4e], 0
lea rdx, [rsp + 0x20]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1400355d0
lea rdx, [0x1400357b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
xor eax, eax
mov rcx, qword [rbp + 0xf60]
xor rcx, rsp
call fcn.1400ac810
add rsp, 0x1070
pop rdi
pop rbx
pop rbp
ret
mov eax, dword [r8 + 0xc]
test eax, eax
je 0x14003149b
mov ecx, dword [r8 + 8]
lea rax, [rsp + rax + 0x60]
test rax, rax
je 0x14003149b
test ecx, ecx
je 0x14003149b
test rdi, rdi
je 0x140031591
mov dword [rdi], ecx
lea rcx, [rsp + 0x60]
sub rax, rcx
add rax, rbx
jmp 0x14003154a