Function at 0x140095b00
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov r11, rsp
push rbp
push rbx
push rsi
push rdi
lea rbp, [r11 - 0x57]
sub rsp, 0x88
mov word [rbp - 0x26], 0x7974
mov rsi, r8
mov word [rbp - 0x29], 0x6d45
mov rdi, rdx
mov byte [rbp - 0x27], 0x70
mov rbx, rcx
mov dword [rbp - 0x24], 0x79656b20
mov byte [rbp - 0x20], 0
mov dword [rbp - 0xe], 0x6c207965
mov dword [rbp - 0x17], 0x72726f63
mov word [rbp - 7], 0x6874
mov word [rbp - 0x19], 0x6e49
mov dword [rbp - 0x13], 0x20746365
mov byte [rbp - 0xf], 0x6b
mov word [rbp - 0xa], 0x6e65
mov byte [rbp - 5], 0
mov byte [rbp - 8], 0x67
mov word [rbp + 0xb], 0x636f
mov word [rbp + 8], 0x6220
mov word [rbp], 0x636e
mov dword [rbp + 0x12], 0x687467
mov byte [rbp - 1], 0x49
mov dword [rbp + 3], 0x63657272
mov word [rbp + 0x10], 0x6e65
mov word [rbp + 0xd], 0x206b
mov byte [rbp + 7], 0x74
mov byte [rbp + 0xf], 0x6c
mov byte [rbp + 0xa], 0x6c
mov byte [rbp + 2], 0x6f
test rdx, rdx
je 0x140096082
lea eax, [r9 - 0x10]
test eax, 0xffffffe7
jne 0x140096064
cmp r9d, 0x28
je 0x140096064
movsxd rcx, dword [rbp + 0x7f]
lea eax, [rcx - 0x10]
test eax, 0xffffffe7
jne 0x1400960a0
cmp ecx, 0x28
je 0x1400960a0
mov qword [r11 + 8], r12
mov r8, rcx
mov qword [r11 + 0x18], r13
mov rdx, rsi
mov dword [rbx + 0x3d0], ecx
lea rcx, [rbx + 0x3d8]
mov qword [r11 + 0x20], r14
mov qword [r11 - 0x28], r15
mov dword [rbx + 0x3cc], r9d
call fcn.140101b40
movsxd r8, dword [rbx + 0x3d0]
lea rcx, [rbx + 0x3f8]
mov rdx, rsi
call fcn.140101b40
mov eax, dword [rbx + 0x3cc]
mov ecx, dword [rbx + 0x3d0]
cmp eax, 0x10
je 0x140095c53
cmp eax, 0x18
mov eax, 0xe
jne 0x140095c6d
cmp ecx, 0x20
mov edx, 0xc
cmovne eax, edx
jmp 0x140095c6d
cmp ecx, 0x10
jne 0x140095c5d
lea eax, [rcx - 6]
jmp 0x140095c6d
cmp ecx, 0x18
mov eax, 0xe
mov edx, 0xc
cmove eax, edx
mov dword [rbx + 0x3d4], eax
xor r14d, r14d
mov eax, ecx
mov ecx, dword [rbx + 0x3d4]
cdq
and edx, 3
add eax, edx
sar eax, 2
movsxd r12, eax
mov r15, r12
test ecx, ecx
js 0x140095cbd
lea rsi, [rbx + 0xc]
test r12d, r12d
jle 0x140095cab
mov r8, r12
xor edx, edx
shl r8, 2
mov rcx, rsi
call fcn.1401021f0
mov ecx, dword [rbx + 0x3d4]
inc r14d
add rsi, 0x20
cmp r14d, ecx
jle 0x140095c95
xor esi, esi
test ecx, ecx
js 0x140095cf6
lea r14, [rbx + 0x1ec]
nop word [rax + rax]
test r12d, r12d
jle 0x140095ce6
mov r8, r12
xor edx, edx
shl r8, 2
mov rcx, r14
call fcn.1401021f0
mov ecx, dword [rbx + 0x3d4]
inc esi
add r14, 0x20
cmp esi, ecx
jle 0x140095cd0
mov eax, dword [rbx + 0x3cc]
lea esi, [rcx + 1]
cdq
imul esi, r12d
and edx, 3
add eax, edx
lea rdx, [rbx + 0x418]
sar eax, 2
movsxd r13, eax
test eax, eax
jle 0x140095d58
mov r8d, r13d
nop dword [rax]
movzx ecx, byte [rdi]
lea rdx, [rdx + 4]
shl ecx, 0x18
lea rdi, [rdi + 4]
mov dword [rdx - 4], ecx
movzx eax, byte [rdi - 3]
shl eax, 0x10
or eax, ecx
mov dword [rdx - 4], eax
movzx ecx, byte [rdi - 2]
shl ecx, 8
or ecx, eax
mov dword [rdx - 4], ecx
movzx eax, byte [rdi - 1]
or eax, ecx
mov dword [rdx - 4], eax
sub r8, 1
jne 0x140095d20
xor r10d, r10d
test r13d, r13d
jle 0x140095db9
xor r11d, r11d
lea r9, [rbx + 0x418]
nop word [rax + rax]
cmp r10d, esi
jge 0x140095ee5
mov eax, r10d
inc r11
cdq
inc r10d
idiv r12d
movsxd rcx, eax
movsxd r8, edx
lea rdx, [r8 + rcx*8]
mov ecx, dword [r9]
mov dword [rbx + rdx*4 + 0xc], ecx
mov ecx, dword [rbx + 0x3d4]
sub ecx, eax
movsxd rax, ecx
lea rcx, [r8 + rax*8]
mov eax, dword [r9]
add r9, 4
mov dword [rbx + rcx*4 + 0x1ec], eax
cmp r11, r13
jl 0x140095d70
cmp r10d, esi
jge 0x140095ee5
lea r11, [0x140174a30]
lea r15, [0x140000000]
mov r8d, dword [rbx + r13*4 + 0x414]
movsxd rdx, r8d
mov rax, rdx
sar rax, 0x10
movzx ecx, al
movsx eax, byte [r11]
inc r11
mov qword [rbp + 0x67], r11
movsx r9d, byte [rcx + r15 + 0x171830]
xor r9d, eax
mov rax, rdx
sar rax, 8
movzx ecx, al
shl r9d, 8
movzx eax, byte [rcx + r15 + 0x171830]
xor r9d, eax
movzx eax, dl
shl r9d, 8
movzx eax, byte [rax + r15 + 0x171830]
xor r9d, eax
mov eax, r8d
shr rax, 0x18
shl r9d, 8
movzx eax, byte [rax + r15 + 0x171830]
xor r9d, eax
xor dword [rbx + 0x418], r9d
cmp r13d, 8
je 0x140095fb0
cmp r13, 1
jle 0x140095e7f
lea rcx, [rbx + 0x41c]
lea rdx, [r13 - 1]
nop dword [rax]
nop word [rax + rax]
mov eax, dword [rcx - 4]
xor dword [rcx], eax
lea rcx, [rcx + 4]
sub rdx, 1
jne 0x140095e70
test r13d, r13d
jle 0x140095ed9
lea r9, [rbx + 0x418]
xor r11d, r11d
nop
cmp r10d, esi
jge 0x140095ee2
mov eax, r10d
inc r11
cdq
inc r10d
idiv r12d
movsxd rcx, eax
movsxd r8, edx
lea rdx, [r8 + rcx*8]
mov ecx, dword [r9]
mov dword [rbx + rdx*4 + 0xc], ecx
mov ecx, dword [rbx + 0x3d4]
sub ecx, eax
movsxd rax, ecx
lea rcx, [r8 + rax*8]
mov eax, dword [r9]
add r9, 4
mov dword [rbx + rcx*4 + 0x1ec], eax
cmp r11, r13
jl 0x140095e90
mov r11, qword [rbp + 0x67]
cmp r10d, esi
jl 0x140095dd0
mov r15, r12
mov r13, qword [rsp + 0xc0]
mov edi, 1
mov r12, qword [rsp + 0xb0]
cmp dword [rbx + 0x3d4], edi
jle 0x140095f90
lea rsi, [rbx + 0x20c]
nop dword [rax]
test r15, r15
jle 0x140095f82
mov r10, rsi
lea r14, [0x140000000]
mov r11, r15
nop dword [rax]
nop word [rax + rax]
mov eax, dword [r10]
lea r10, [r10 + 4]
mov edx, eax
movsxd r9, eax
shr rdx, 0x18
mov rax, r9
sar rax, 0x10
movzx ecx, al
mov rax, r9
sar rax, 8
mov r8d, dword [r14 + rdx*4 + 0x173a30]
xor r8d, dword [r14 + rcx*4 + 0x173e30]
movzx ecx, al
movzx eax, r9b
xor r8d, dword [r14 + rcx*4 + 0x174230]
xor r8d, dword [r14 + rax*4 + 0x174630]
mov dword [r10 - 4], r8d
sub r11, 1
jne 0x140095f30
inc edi
add rsi, 0x20
cmp edi, dword [rbx + 0x3d4]
jl 0x140095f10
mov r15, qword [rsp + 0x80]
mov r14, qword [rsp + 0xc8]
mov byte [rbx + 8], 1
add rsp, 0x88
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rcx, [rbx + 0x41c]
mov edx, 3
nop dword [rax]
mov eax, dword [rcx - 4]
xor dword [rcx], eax
lea rcx, [rcx + 4]
sub rdx, 1
jne 0x140095fc0
mov eax, dword [rbx + 0x424]
mov ecx, eax
movsxd rdx, eax
shr rcx, 0x18
mov rax, rdx
sar rax, 0x10
movsx r8d, byte [rcx + r15 + 0x171830]
movzx ecx, al
shl r8d, 8
movzx eax, byte [rcx + r15 + 0x171830]
xor r8d, eax
mov rax, rdx
sar rax, 8
shl r8d, 8
movzx ecx, al
movzx eax, byte [rcx + r15 + 0x171830]
xor r8d, eax
movzx eax, dl
shl r8d, 8
movzx eax, byte [rax + r15 + 0x171830]
xor r8d, eax
xor dword [rbx + 0x428], r8d
cmp r13, 5
jle 0x140095e7f
lea rax, [rbx + 0x42c]
lea rdx, [r13 - 5]
nop word [rax + rax]
mov ecx, dword [rax - 4]
xor dword [rax], ecx
lea rax, [rax + 4]
sub rdx, 1
jne 0x140096050
jmp 0x140095e84
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 0x17]
call fcn.140097540
lea rdx, [0x1401a71b0]
lea rcx, [rbp + 0x17]
call fcn.14010096c
int3
lea rdx, [rbp - 0x29]
lea rcx, [rbp + 0x17]
call fcn.140097540
lea rdx, [0x1401a71b0]
lea rcx, [rbp + 0x17]
call fcn.14010096c
int3
lea rdx, [rbp - 1]
lea rcx, [rbp + 0x17]
call fcn.140097540
lea rdx, [0x1401a71b0]
lea rcx, [rbp + 0x17]
call fcn.14010096c
int3