Function at 0x140037190
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov rax, rsp
push rbp
push r13
push r15
lea rbp, [rax - 0x3a8]
sub rsp, 0x490
mov qword [rbp - 0x80], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], r12
mov rax, qword [0x14006d798]
xor rax, rsp
mov qword [rbp + 0x380], rax
mov dword [rbp + 0x150], 0x130
xor r8d, r8d
lea r15d, [r8 + 2]
mov edx, r15d
lea r12, [0x14006e7b0]
mov rcx, r12
call fcn.14004a860
mov rdi, rax
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0x280]
call sub.VCRUNTIME140.dll_memset
lea edx, [r15 + 1]
lea r8d, [r15 - 1]
lea rcx, [rbp + 0x280]
call fcn.1400020a0
nop
lea r8, [rbp + 0x150]
mov rdx, rdi
mov rcx, r12
call fcn.14004be8c
mov r13d, 0x1000
cmp eax, 1
jne 0x140036feb
movdqa xmm0, xmmword [0x14005af40]
movdqa xmmword [rbp + 0x10], xmm0
movdqa xmm1, xmmword [0x14005b1a0]
movdqa xmmword [rbp + 0x20], xmm1
movdqa xmm0, xmmword [str.______________r_n__r_n___________________________________________________r_n___G3i_h]
movdqa xmmword [rbp + 0x30], xmm0
movdqa xmm1, xmmword [0x14005b1b0]
movdqa xmmword [rbp + 0x40], xmm1
movdqa xmm0, xmmword [0x14005af50]
movdqa xmmword [rbp + 0x50], xmm0
movdqa xmm1, xmmword [0x14005af70]
movdqa xmmword [rbp + 0x60], xmm1
movdqa xmm0, xmmword [0x14005af60]
movdqa xmmword [rbp + 0x70], xmm0
movdqa xmm1, xmmword [0x14005afa0]
movdqa xmmword [rbp + 0x80], xmm1
movdqa xmm0, xmmword [0x14005b2a0]
movdqa xmmword [rbp + 0x90], xmm0
movdqa xmm1, xmmword [0x14005b020]
movdqa xmmword [rbp + 0xa0], xmm1
movdqa xmm0, xmmword [0x14005b010]
movdqa xmmword [rbp + 0xb0], xmm0
movdqa xmm1, xmmword [0x14005b150]
movdqa xmmword [rbp + 0xc0], xmm1
movdqa xmm0, xmmword [0x14005afc0]
movdqa xmmword [rbp + 0xd0], xmm0
movdqa xmm1, xmmword [0x140059490]
movdqa xmmword [rbp + 0xe0], xmm1
movdqa xmm0, xmm1
movdqa xmmword [rbp + 0xf0], xmm1
movdqa xmmword [rbp + 0x100], xmm1
movdqa xmmword [rbp + 0x110], xmm1
movdqa xmmword [rbp + 0x120], xmm1
movdqa xmmword [rbp + 0x130], xmm1
mov dword [rbp + 0x140], 0x2d2d2d2d
mov dword [rbp + 0x144], 0x2d2d2d2d
mov dword [rbp + 0x148], 0x2d2d2d2d
mov word [rbp + 0x14c], 0x2d2d
mov byte [rbp + 0x14e], 0xd
xor ebx, ebx
mov dl, byte [rbp + rbx + 0x10]
lea rcx, [rbp + 0x290]
call fcn.14000b590
inc rbx
cmp rbx, 0x13f
jb 0x140036d8e
mov cl, 0x3c
mov dword [rsp + 0x20], 0x36313c
xor eax, eax
xor byte [rsp + rax + 0x21], cl
inc rax
cmp rax, r15
jae 0x140036dc8
mov cl, byte [rsp + 0x20]
jmp 0x140036db6
mov byte [rsp + 0x23], 0
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x290]
call fcn.140001090
lea r8, [rbp + 0x150]
mov rdx, rdi
mov rcx, r12
call fcn.14004bf40
cmp eax, 1
jne 0x140036feb
mov r8b, 0x20
mov rdx, r15
lea rcx, [rsp + 0x38]
call fcn.140005818
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x140036e18
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x290]
call fcn.1400013c4
mov edx, dword [rbp + 0x158]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov dl, 0x57
mov dword [rsp + 0x20], 0x777b57
xor ecx, ecx
xor byte [rsp + rcx + 0x21], dl
inc rcx
cmp rcx, r15
jae 0x140036e54
mov dl, byte [rsp + 0x20]
jmp 0x140036e42
mov byte [rsp + 0x23], 0
lea rdx, [rsp + 0x21]
mov rcx, rax
call fcn.140001090
mov rcx, rax
lea rdx, [rbp + 0x17c]
call fcn.140001090
mov dl, 0x16
mov dword [rsp + 0x30], 0x1c1b16
xor ecx, ecx
xor byte [rsp + rcx + 0x31], dl
inc rcx
cmp rcx, r15
jae 0x140036e93
mov dl, byte [rsp + 0x30]
jmp 0x140036e81
mov byte [rsp + 0x33], 0
lea rdx, [rsp + 0x31]
mov rcx, rax
call fcn.140001090
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0x10
jb 0x140036edf
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, r13
jb 0x140036eda
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036fdd
call fcn.14004cdd8
mov r8b, 0x20
mov rdx, r15
lea rcx, [rsp + 0x38]
call fcn.140005818
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x140036efe
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x290]
call fcn.1400013c4
mov r8, rax
movdqa xmm0, xmmword [0x14005b050]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x14005b060]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmm1
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmmword [rbp - 0x10], xmm1
xor eax, eax
mov byte [rbp], al
xor ecx, ecx
mov al, byte [rbp - 0x70]
xor byte [rbp + rcx - 0x6f], al
inc rcx
cmp rcx, 0x6f
jb 0x140036f4e
mov byte [rbp], 0
lea rdx, [rbp - 0x6f]
mov rcx, r8
call fcn.140001090
mov dl, 0x28
mov dword [rsp + 0x28], 0x222528
xor ecx, ecx
xor byte [rsp + rcx + 0x29], dl
inc rcx
cmp rcx, r15
jae 0x140036f8c
mov dl, byte [rsp + 0x28]
jmp 0x140036f7a
mov byte [rsp + 0x2b], 0
lea rdx, [rsp + 0x29]
mov rcx, rax
call fcn.140001090
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0x10
jb 0x140036dde
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, r13
jb 0x140036fd3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036fe4
call fcn.14004cdd8
jmp 0x140036dde
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r8b, 0x20
mov rdx, r15
lea rcx, [rsp + 0x38]
call fcn.140005818
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x14003700a
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x290]
call fcn.1400013c4
mov r8, rax
movdqa xmm0, xmmword [0x14005af90]
movdqu xmmword [rsp + 0x58], xmm0
movdqa xmm1, xmmword [0x14005b1e0]
movdqu xmmword [rsp + 0x68], xmm1
mov dword [rsp + 0x78], 0x666765
xor ecx, ecx
mov al, byte [rsp + 0x58]
xor byte [rsp + rcx + 0x59], al
inc rcx
cmp rcx, 0x22
jb 0x140037042
mov byte [rsp + 0x7b], 0
lea rdx, [rsp + 0x59]
mov rcx, r8
call fcn.140001090
mov dl, 0x4f
mov dword [rsp + 0x28], 0x45424f
xor ecx, ecx
xor byte [rsp + rcx + 0x29], dl
inc rcx
cmp rcx, r15
jae 0x140037083
mov dl, byte [rsp + 0x28]
jmp 0x140037071
mov byte [rsp + 0x2b], 0
lea rdx, [rsp + 0x29]
mov rcx, rax
call fcn.140001090
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0x10
jb 0x1400370d2
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, r13
jb 0x1400370cd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400370cd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004cdd8
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x298]
call fcn.140005074
nop
lea rdx, [0x14006e6f0]
cmp qword [0x14006e708], 0x10
cmovae rdx, qword [0x14006e6f0]
and qword [rsp + 0x48], 0
mov qword [rsp + 0x50], 0xf
mov byte [rsp + 0x38], 0
lea rcx, [rsp + 0x38]
call fcn.140002b2c
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x38]
lea rcx, [0x14006e3c0]
call fcn.140016de0
test rdi, rdi
je 0x14003714b
mov rdx, rdi
mov rcx, r12
call fcn.14004a7ac
nop
lea rcx, [rbp + 0x318]
call fcn.140002370
lea rcx, [rbp + 0x318]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rcx, qword [rbp + 0x380]
xor rcx, rsp
call fcn.14004cef0
lea r11, [rsp + 0x490]
mov rbx, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov r12, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r13
pop rbp
ret
push rbx
sub rsp, 0x20
mov rbx, rcx
call fcn.140032a74
mov rcx, rbx
call fcn.140032988
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp 0x140036bbc