Function at 0x140090f3f
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push r12
mov qword [rsp], rbp
nop
sub rsp, 8
mov qword [rsp], rbx
nop
push 0x66a9a7d5
mov qword [rsp], rsi
nop
sub rsp, 8
mov qword [rsp], rdi
lea rbp, [rsp - 0x78]
mov rdx, rdx
sub rsp, 0x178
lea rdi, [rcx + 8]
xchg r10, rsi
mov r10, rdx
xchg rsi, r10
xchg rdi, rdx
mov qword [rcx], rdx
xchg rdx, rdi
xchg r15, rcx
mov rbx, r15
xchg r15, rcx
xchg rdi, rcx
mov rdi, rcx
xchg rcx, rdi
xor edx, edx
mov r8d, 0x1fbbb329
sub r8d, 0x132918c6
add r8d, 0x1f4188d8
xor r8d, 0x70184a23
sub r8d, 0x5bcc6818
call fcn.140099900
xchg rsi, rsi
mov qword [rbx + 0x108], 0x674ae982
xor qword [rbx + 0x108], 0x25104fe6
add qword [rbx + 0x108], 0xc7d807b
sub qword [rbx + 0x108], 0x3aa2ac97
xor qword [rbx + 0x108], 0x14357a6e
xchg r14, rcx
mov r14, qword [rbx]
xchg rcx, r14
cmp rcx, rdi
je 0x140090e8b
mov dword [rsp - 0x3c], 0x29056616
call fcn.1400992c0
xor edx, edx
mov qword [rbx], rdi
mov r8d, 0x372bdd2
xor r8d, 0x145b26bd
xor r8d, 0x1affcce4
add r8d, 0x6b3112b8
xor r8d, 0x79076b43
xchg rcx, r9
mov r9, rdi
xchg rcx, r9
call fcn.140099900
mov dword [rsp - 0x10], esp
mov rdi, qword [rbx]
test rdi, rdi
je 0x14009147c
movzx r8d, byte [rsi + 0xf]
xchg r10, r10
mov eax, 0x1a309133
add eax, 0x3df5f8e
xor eax, 0x1cd755f1
xor eax, 0x2d8a5a6
movzx r10d, byte [rsi + 0xe]
movzx r11d, byte [rsi + 0xd]
movzx r9d, byte [rsi + 8]
mov dword [rsp - 0x2c], ebp
mov qword [rsp + 0x1a8], r12
movzx r12d, byte [rsi + 0xa]
mov word [rbp - 0x18], ax
xchg r15, r15
xor eax, eax
xchg r13, rsi
mov qword [rsp + 0x1b0], rsi
xchg rsi, r13
movzx r13d, byte [rsi + 9]
mov dword [rsp - 0xc], edx
xchg rbx, r14
mov qword [rsp + 0x1b8], rbx
xchg r14, rbx
movzx r14d, byte [rsi + 0xc]
mov dword [rsp + 0x70], 0x71f6426d
xor dword [rsp + 0x70], 0x7b9d13d3
xor dword [rsp + 0x70], 0x64282e80
add dword [rsp + 0x70], 0x1d2767a
xor dword [rsp + 0x70], 0x7003f528
mov dword [rsp + 0x74], 0x166ac69a
add dword [rsp + 0x74], 0x3e9b6e30
xor dword [rsp + 0x74], 0x1a334909
xor dword [rsp + 0x74], 0xf079994
xor dword [rsp + 0x74], 0x4006e4b8
mov dword [rsp + 0x78], 0x5837451b
sub dword [rsp + 0x78], 0x3f1d3fb6
xor dword [rsp + 0x78], 0x31731bd3
xor dword [rsp + 0x78], 0x41d15748
sub dword [rsp + 0x78], 0x694d492b
mov dword [rsp + 0x7c], 0x4b42b5be
sub dword [rsp + 0x7c], 0x82379fb
sub dword [rsp + 0x7c], 0x37565f55
xor dword [rsp + 0x7c], 0xbf7dc9c
mov dword [rbp - 0x80], 0x254587b0
sub dword [rbp - 0x80], 0x1580483b
add dword [rbp - 0x80], 0x1c363ef4
sub dword [rbp - 0x80], 0x2bde7d8e
mov dword [rbp - 0x7c], 0x60ff1bb5
add dword [rbp - 0x7c], 0xe5b4476
xor dword [rbp - 0x7c], 0x5c551dea
xor dword [rbp - 0x7c], 0x6adac932
sub dword [rbp - 0x7c], 0x5993b408
mov dword [rbp - 0x78], 0x314cb8e7
add dword [rbp - 0x78], 0x16495ec7
xor dword [rbp - 0x78], 0x372fbb84
sub dword [rbp - 0x78], 0x70a3ab64
mov dword [rbp - 0x74], 0x14c0e694
add dword [rbp - 0x74], 0x66688402
sub dword [rbp - 0x74], 0x3abd506f
sub dword [rbp - 0x74], 0x40381938
mov dword [rbp - 0x70], 0xaa1ea2c
add dword [rbp - 0x70], 0x86cf30f
add dword [rbp - 0x70], 0x1dab910e
sub dword [rbp - 0x70], 0x304f6d6a
mov dword [rbp - 0x6c], 0x3487f380
sub dword [rbp - 0x6c], 0x6de41a
xor dword [rbp - 0x6c], 0x7fc749f1
sub dword [rbp - 0x6c], 0x12ce880d
sub dword [rbp - 0x6c], 0x38cfbd98
mov dword [rbp - 0x68], 0x4923404c
add dword [rbp - 0x68], 0x2c4a37b
sub dword [rbp - 0x68], 0x133af638
sub dword [rbp - 0x68], 0x388fecb4
mov dword [rbp - 0x64], 0x7027080f
xor dword [rbp - 0x64], 0x565dc29c
add dword [rbp - 0x64], 0x3e481b44
sub dword [rbp - 0x64], 0x6480e4ea
mov dword [rbp - 0x60], 0x4677e4c5
add dword [rbp - 0x60], 0x34eb9627
sub dword [rbp - 0x60], 0x2b0415db
sub dword [rbp - 0x60], 0x505c6443
mov dword [rbp - 0x5c], 0x291b46aa
xor dword [rbp - 0x5c], 0x6939502
xor dword [rbp - 0x5c], 0x1e487e0
sub dword [rbp - 0x5c], 0x2e445357
mov dword [rbp - 0x58], 0x24dc6593
sub dword [rbp - 0x58], 0x187f8db9
xor dword [rbp - 0x58], 0x6fc72d96
xor dword [rbp - 0x58], 0x6385faff
mov dword [rbp - 0x54], 0x7484365f
xor dword [rbp - 0x54], 0x58591713
sub dword [rbp - 0x54], 0xe4a9779
xor dword [rbp - 0x54], 0x1eb88929
mov dword [rbp - 0x50], 0xa3fa3b6
add dword [rbp - 0x50], 0x4e411c72
sub dword [rbp - 0x50], 0x7509fd7
add dword [rbp - 0x50], 0x29c5517e
sub dword [rbp - 0x50], 0x7af4710a
mov dword [rbp - 0x4c], 0x68af5978
sub dword [rbp - 0x4c], 0x2ea9a8cc
add dword [rbp - 0x4c], 0x3fdb65d4
sub dword [rbp - 0x4c], 0x79a215f9
mov dword [rbp - 0x48], 0xa409947
sub dword [rbp - 0x48], 0x69ced67
add dword [rbp - 0x48], 0x6cfa922
sub dword [rbp - 0x48], 0xa565427
mov dword [rbp - 0x44], 0x126eb8b
add dword [rbp - 0x44], 0x2b96d3b8
add dword [rbp - 0x44], 0x22c9573
add dword [rbp - 0x44], 0x1f9c04ea
sub dword [rbp - 0x44], 0x4e4458b3
mov dword [rbp - 0x40], 0x4a7d767c
sub dword [rbp - 0x40], 0x62a11a7
add dword [rbp - 0x40], 0x12b4aeaa
xor dword [rbp - 0x40], 0xa342089
sub dword [rbp - 0x40], 0x5d393328
mov dword [rbp - 0x3c], 0x546299e8
add dword [rbp - 0x3c], 0x6ed3167
sub dword [rbp - 0x3c], 0x31b981af
xor dword [rbp - 0x3c], 0x29be4951
mov dword [rbp - 0x38], 0x58252640
xor dword [rbp - 0x38], 0x259ccabf
sub dword [rbp - 0x38], 0x62cb0f0c
add dword [rbp - 0x38], 0x3020f714
xor dword [rbp - 0x38], 0x4b19d5b4
mov dword [rbp - 0x34], 0x4a83d37f
sub dword [rbp - 0x34], 0x26117271
add dword [rbp - 0x34], 0x2798bc0b
sub dword [rbp - 0x34], 0x4bd71c2a
mov dword [rbp - 0x30], 0x36e27e3a
add dword [rbp - 0x30], 0x3c31a93a
sub dword [rbp - 0x30], 0x3d8675c9
add dword [rbp - 0x30], 0xfc94af4
sub dword [rbp - 0x30], 0x44ebfbc6
mov dword [rbp - 0x2c], 0x183025ff
xor dword [rbp - 0x2c], 0x7a067dc4
sub dword [rbp - 0x2c], 0x236830d2
xor dword [rbp - 0x2c], 0x3ee42793
mov dword [rbp - 0x28], 0x5bbb696f
xor dword [rbp - 0x28], 0x1f036c17
xor dword [rbp - 0x28], 0x147469d8
sub dword [rbp - 0x28], 0x39ee6f55
xor dword [rbp - 0x28], 0x16dcfd8e
mov dword [rbp - 0x24], 0x2eb9f1f7
xor dword [rbp - 0x24], 0x6778a3d5
sub dword [rbp - 0x24], 0x10f77f3a
sub dword [rbp - 0x24], 0x388ad261
mov dword [rbp - 0x20], 0x526f27de
xor dword [rbp - 0x20], 0x2572767d
xor dword [rbp - 0x20], 0x419f7388
xor dword [rbp - 0x20], 0xe8f3a6e
sub dword [rbp - 0x20], 0x37f0176a
mov dword [rbp - 0x1c], 0x3676cf0c
xor dword [rbp - 0x1c], 0x262cd8c0
add dword [rbp - 0x1c], 0x587f64ff
xor dword [rbp - 0x1c], 0x598af558
xor dword [rbp - 0x1c], 0x3111897e
mov qword [rbp + 0xa0], rax
mov dword [rsp - 0x14], esp
xchg rsp, rax
mov rsp, qword [rbp + 0xa0]
xchg rsp, rax
mov qword [rsp + 0x170], r15
movzx r15d, byte [rsi + 0xb]
nop dword [rax]
mov dword [rsp - 0x28], 0x7eee380c
mov rcx, qword [rbp + 0xa0]
xchg r14, rax
mov r14, qword [rbp + 0xa0]
xchg r14, rax
and cl, 3
shl cl, 3
mov dword [rsp - 0x24], edx
movzx edx, word [rsp + rax*2 + 0x70]
mov eax, 0x327e659d
xor eax, 0x13701a22
xor eax, 0x2a02e95
xor eax, 0x44ae0fa9
sub eax, 0x4c212a98
shr eax, cl
mov rcx, rcx
movzx ecx, al
xchg rsi, rax
mov rsi, qword [rbp + 0xa0]
xchg rsi, rax
xor cx, dx
mov word [rbp + rax*2 - 0x16], cx
xchg rdi, rdi
mov rax, qword [rbp + 0xa0]
inc rax
xchg rdi, rax
mov qword [rbp + 0xa0], rdi
xchg rdi, rax
xchg r8, rax
mov r8, qword [rbp + 0xa0]
xchg r8, rax
cmp rax, 0x3d
jb 0x140091324
mov dword [rsp + 0x68], r8d
mov rcx, rcx
xor eax, eax
mov dword [rsp + 0x60], r10d
lea r8, [rbp - 0x16]
mov dword [rsp + 0x58], r11d
xchg rsp, rsp
mov edx, 0x75f86e52
xor edx, 0x1b35ed5a
sub edx, 0x37701a60
sub edx, 0x375d6881
mov dword [rsp + 0x50], r14d
xchg r12, rcx
mov r12, rdi
xchg rcx, r12
mov dword [rsp + 0x48], r15d
mov rsi, rsi
mov dword [rsp + 0x40], r12d
mov word [rbp + 0x64], ax
movzx eax, word [rsi + 6]
mov r8, r8
mov dword [rsp + 0x38], r13d
mov dword [rsp + 0x30], r9d
mov r9d, dword [rsi]
mov dword [rsp - 0x10], ebp
mov dword [rsp + 0x28], eax
movzx eax, word [rsi + 4]
mov dword [rsp + 0x20], eax
mov dword [rsp - 0x34], 0x65e07437
call fcn.140091a80
mov r15, qword [rsp + 0x170]
lea rdi, [rbp - 0x16]
mov rbx, rbx
mov r14, qword [rsp + 0x1b8]
xor eax, eax
xchg r8, r13
mov r8, qword [rsp + 0x1b0]
xchg r8, r13
mov ecx, 0x48d4610
add ecx, 0x6c1f0cc0
sub ecx, 0x6ecf0bd9
add ecx, 0x3633cac5
sub ecx, 0x3811117f
xchg r12, rdi
mov rdi, qword [rsp + 0x1a8]
xchg rdi, r12
rep stosb byte [rdi], al
xchg r8, rbx
mov rax, r8
xchg r8, rbx
add rsp, 0x7b885890
sub rsp, 0x7b885718
nop
mov rdi, qword [rsp]
add rsp, 8
nop
mov rsi, qword [rsp]
add rsp, 8
pop rbx
nop
mov rbp, qword [rsp]
add rsp, 8
ret