Function at 0x14013c774
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
lea rbp, [rax - 0x38]
sub rsp, 0x120
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
call fcn.14014142c
mov rcx, rax
call fcn.14013f97c
xor edi, edi
cmp byte [rax + 0x8ba], dil
jne 0x14013d06c
call fcn.14014142c
mov rcx, rax
call fcn.14013f97c
cmp byte [rax + 0x8b9], dil
je 0x14013d06c
movss xmm0, dword [0x1404ceb48]
movaps xmm1, xmm0
call fcn.140151d50
mov ecx, edi
mov dword [rsp + 0x50], 0x6b767441
mov dword [rsp + 0x54], 0x7d6f776b
lea esi, [rdi + 1]
mov dword [rsp + 0x58], 0x64637d69
mov word [rsp + 0x5c], 0x62
movsxd rax, ecx
xor byte [rsp + rax + 0x50], cl
add ecx, esi
cmp ecx, 0xd
jb 0x14013c800
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5d], dil
call fcn.1401726bc
mov rcx, rax
call fcn.14016a8e4
and dword [rbp + 0x40], edi
lea rcx, [rbp + 0x40]
mov dword [rbp + 0x44], 0x40800000
call fcn.14016c928
lea rcx, [rbp + 0x40]
mov byte [rbp + 0x40], dil
call fcn.14016a8e4
movss xmm8, dword [0x1404cebcc]
movss xmm7, dword [0x1404ceb44]
movaps xmm1, xmm8
movaps xmm0, xmm7
call fcn.140151d50
movdqa xmm0, xmmword [0x1404d00d0]
mov ecx, edi
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x287d79
movsxd rax, ecx
xor byte [rsp + rax + 0x50], cl
add ecx, esi
cmp ecx, 0x13
jb 0x14013c87a
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x63], dil
call fcn.1401726bc
mov rcx, rax
call fcn.14016a8e4
movaps xmm1, xmm8
xorps xmm0, xmm0
call fcn.140151d50
movdqa xmm0, xmmword [0x1404cfc20]
xor eax, eax
movdqa xmm1, xmmword [0x1404d0350]
mov ecx, edi
movdqu xmmword [rbp - 0x69], xmm0
mov dword [rbp - 0x29], 0x37233334
movdqa xmm0, xmmword [0x1404cf710]
movdqu xmmword [rbp - 0x59], xmm1
mov dword [rbp - 0x25], 0x67282a2d
movdqa xmm1, xmmword [0x1404cf740]
movdqu xmmword [rbp - 0x49], xmm0
mov dword [rbp - 0x21], 0x2c2b3d3b
movdqu xmmword [rbp - 0x39], xmm1
mov word [rbp - 0x1d], 0x6329
mov byte [rbp - 0x1b], al
movsxd rax, ecx
xor byte [rbp + rax - 0x69], cl
add ecx, esi
cmp ecx, 0x4e
jb 0x14013c901
lea rcx, [rbp - 0x69]
mov byte [rbp - 0x1b], dil
call fcn.1401726bc
mov edx, edi
mov word [rbp + 0x40], 0x3f
movsxd rcx, edx
xor byte [rbp + rcx + 0x40], dl
add edx, esi
cmp edx, esi
jb 0x14013c924
mov rdx, rax
mov byte [rbp + 0x41], dil
lea rcx, [rbp + 0x40]
call fcn.14013acc4
lea rcx, [rbp + 0x40]
mov byte [rbp + 0x40], dil
call fcn.14016a8e4
movss xmm6, dword [0x1404ceb3c]
xorps xmm0, xmm0
movaps xmm1, xmm6
call fcn.140151d50
call fcn.14014142c
mov rcx, rax
call fcn.14013f97c
movdqa xmm0, xmmword [0x1404cef20]
mov edx, edi
movdqu xmmword [rsp + 0x50], xmm0
movsxd rcx, edx
xor byte [rsp + rcx + 0x50], dl
add edx, esi
cmp edx, 0xf
jb 0x14013c97e
xor r9d, r9d
mov byte [rsp + 0x5f], dil
mov rdx, rax
lea rcx, [rsp + 0x50]
lea ebx, [r9 + 0x18]
mov r8d, ebx
call fcn.14016d580
lea rcx, [rbp + 0x40]
mov byte [rbp + 0x40], dil
call fcn.14016a8e4
movaps xmm1, xmm8
movaps xmm0, xmm7
call fcn.140151d50
mov ecx, edi
mov dword [rsp + 0x40], 0x70716050
mov dword [rsp + 0x44], 0x63746a73
mov word [rsp + 0x48], 0x32
movsxd rax, ecx
xor byte [rsp + rax + 0x40], cl
add ecx, esi
cmp ecx, 9
jb 0x14013c9da
lea rcx, [rsp + 0x40]
mov byte [rsp + 0x49], dil
call fcn.1401726bc
mov rcx, rax
call fcn.14016a8e4
lea rcx, [rbp + 0x40]
mov byte [rbp + 0x40], dil
call fcn.14016a8e4
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140151d50
call fcn.14014142c
mov rcx, rax
call fcn.14013f97c
movdqa xmm0, xmmword [0x1404cef10]
mov ecx, edi
movdqu xmmword [rsp + 0x50], xmm0
lea rdx, [rax + 0x78]
movsxd rax, ecx
xor byte [rsp + rax + 0x50], cl
add ecx, esi
cmp ecx, 0xf
jb 0x14013ca38
mov r9d, 0x8008
mov byte [rsp + 0x5f], dil
mov r8, rbx
lea rcx, [rsp + 0x50]
call fcn.14016d580
and dword [rbp + 0x40], edi
lea rcx, [rbp + 0x40]
mov dword [rbp + 0x44], 0x40800000
call fcn.14016c928
lea rcx, [rbp + 0x40]
mov byte [rbp + 0x40], dil
call fcn.14016a8e4
movaps xmm1, xmm6
movaps xmm0, xmm6
call fcn.140151d50
call fcn.14014142c
mov rcx, rax
call fcn.14013f97c
cmp byte [rax + 0x8b6], dil
je 0x14013cafa
movss xmm0, dword [0x1404ceb6c]
mov ecx, edi
movss xmm1, dword [0x1404ceb18]
movss dword [rbp + 0x48], xmm0
movss dword [rbp + 0x4c], xmm1
mov dword [rbp + 0x40], 0x6a656e4c
mov word [rbp + 0x44], 0x6a
movsxd rax, ecx
xor byte [rbp + rax + 0x40], cl
add ecx, esi
cmp ecx, 5
jb 0x14013cac8
lea rcx, [rbp + 0x40]
mov byte [rbp + 0x45], dil
call fcn.1401726bc
lea rdx, [rbp + 0x48]
mov rcx, rax
call fcn.14016b12c
mov byte [0x140549340], al
jmp 0x14013cbb5
movaps xmm0, xmmword [0x1404cf360]
lea rdx, [rsp + 0x50]
mov ecx, 0x15
movups xmmword [rsp + 0x50], xmm0
call fcn.140144a68
lea rdx, [rsp + 0x50]
mov ecx, 0x16
call fcn.140144a68
lea rdx, [rsp + 0x50]
mov ecx, 0x17
call fcn.140144a68
movaps xmm0, xmmword [0x1404cf5b0]
lea rdx, [rsp + 0x50]
xor ecx, ecx
movups xmmword [rsp + 0x50], xmm0
call fcn.140144a68
movss xmm0, dword [0x1404ceb6c]
mov ecx, edi
movss xmm1, dword [0x1404ceb18]
movss dword [rbp + 0x48], xmm0
movss dword [rbp + 0x4c], xmm1
mov dword [rbp + 0x40], 0x6a656e4c
mov word [rbp + 0x44], 0x6a
movsxd rax, ecx
xor byte [rbp + rax + 0x40], cl
add ecx, esi
cmp ecx, 5
jb 0x14013cb74
lea rcx, [rbp + 0x40]
mov byte [rbp + 0x45], dil
call fcn.1401726bc
lea rdx, [rbp + 0x48]
mov rcx, rax
call fcn.14016b12c
mov byte [0x140549340], al
call fcn.140144adc
call fcn.140144adc
call fcn.140144adc
call fcn.140144adc
call fcn.14014142c
mov rcx, rax
call fcn.14013f97c
cmp byte [rax + 0x8b6], dil
je 0x14013ce47
and dword [rbp + 0x40], edi
lea rcx, [rbp + 0x40]
mov dword [rbp + 0x44], 0x40800000
call fcn.14016c928
lea rcx, [rbp + 0x40]
mov byte [rbp + 0x40], dil
call fcn.14016a8e4
movss xmm1, dword [0x1404ceb4c]
xorps xmm0, xmm0
call fcn.140151d50
movdqa xmm0, xmmword [0x1404cfe00]
xor eax, eax
movdqu xmmword [rbp - 0x80], xmm0
mov byte [rbp - 0x6a], al
mov ecx, edi
mov dword [rbp - 0x70], 0x67617877
mov word [rbp - 0x6c], 0x6771
movsxd rax, ecx
xor byte [rbp + rax - 0x80], cl
add ecx, esi
cmp ecx, 0x16
jb 0x14013cc20
lea rcx, [rbp - 0x80]
mov byte [rbp - 0x6a], dil
call fcn.1401726bc
movups xmm7, xmmword [0x1404f3780]
mov rbx, rax
movups xmm6, xmmword [0x1404f3770]
call fcn.14014142c
mov rcx, rax
call fcn.14013f97c
mov r9, rbx
movdqa xmmword [rsp + 0x50], xmm7
lea r8, [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm6
lea rdx, [rsp + 0x70]
lea rcx, [rax + 0x920]
call fcn.14013b330
test al, al
je 0x14013ccaa
call fcn.14014142c
mov rcx, rax
call fcn.14013f97c
mov byte [rax + 0x8ba], sil
call fcn.14014142c
mov rcx, rax
call fcn.14013f97c
mov byte [rax + 0x8b9], dil
movss xmm0, dword [0x1404cea44]
lea rcx, [rbp + 0x40]
and dword [rbp + 0x40], edi
movss dword [rbp + 0x44], xmm0
call fcn.14016c928
lea rcx, [rbp + 0x40]
mov byte [rbp + 0x40], dil
call fcn.14016a8e4
movss xmm1, dword [0x1404ceb54]
xorps xmm0, xmm0
call fcn.140151d50
movdqa xmm0, xmmword [0x1404cfb50]
xor eax, eax
movdqu xmmword [rbp - 0x80], xmm0
mov byte [rbp - 0x6c], al
mov ecx, edi
mov dword [rbp - 0x70], 0x2c617c75
movsxd rax, ecx
xor byte [rbp + rax - 0x80], cl
add ecx, esi
cmp ecx, 0x14
jb 0x14013ccfb
lea rcx, [rbp - 0x80]
mov byte [rbp - 0x6c], dil
call fcn.1401726bc
movups xmm7, xmmword [0x1404f3780]
mov rbx, rax
movups xmm6, xmmword [0x1404f3770]
call fcn.14014142c
mov rcx, rax
call fcn.14013f97c
mov r9, rbx
movdqa xmmword [rsp + 0x50], xmm7
lea r8, [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm6
lea rdx, [rsp + 0x70]
lea rcx, [rax + 0x930]
call fcn.14013b330
test al, al
je 0x14013ce47
xor eax, eax
mov dword [rsp + 0x40], 0x6d70646b
mov byte [rsp + 0x4c], al
mov ecx, edi
mov dword [rsp + 0x44], 0x35356961
mov dword [rsp + 0x48], 0x67666d26
movsxd rax, ecx
xor byte [rsp + rax + 0x40], cl
add ecx, esi
cmp ecx, 0xc
jb 0x14013cd81
lea rcx, [rsp + 0x40]
mov byte [rsp + 0x4c], dil
call qword [sym.imp.kernel32.dll_GetModuleHandleA]
mov r8, rax
cmp rax, 0xffffffffffffffff
jne 0x14013cde9
xor eax, eax
mov dword [rsp + 0x70], 0x6d70646b
mov byte [rsp + 0x7c], al
mov ecx, edi
mov dword [rsp + 0x74], 0x35356961
mov dword [rsp + 0x78], 0x67666d26
movsxd rax, ecx
xor byte [rsp + rax + 0x70], cl
add ecx, esi
cmp ecx, 0xc
jb 0x14013cdc8
lea rcx, [rsp + 0x70]
mov byte [rsp + 0x7c], dil
call qword [sym.imp.kernel32.dll_LoadLibraryA]
mov r8, rax
xor eax, eax
mov dword [rsp + 0x50], 0x62677343
mov byte [rsp + 0x5c], al
mov ecx, edi
mov dword [rsp + 0x54], 0x6f526070
mov dword [rsp + 0x58], 0x6f6b6c7a
movsxd rax, ecx
xor byte [rsp + rax + 0x50], cl
add ecx, esi
cmp ecx, 0xc
jb 0x14013ce09
lea rdx, [rsp + 0x50]
mov byte [rsp + 0x5c], dil
mov rcx, r8
call qword [sym.imp.kernel32.dll_GetProcAddress]
xor r9d, r9d
mov qword [rsp + 0x28], rdi
lea r8, [0x14013c050]
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [case.0x140173169.0]
call fcn.14014142c
mov rcx, rax
call fcn.14013f97c
cmp byte [rax + 0x8b6], dil
jne 0x14013ce7f
mov word [rbp + 0x40], 0x20
mov ecx, edi
movsxd rax, ecx
xor byte [rbp + rax + 0x40], cl
add ecx, esi
cmp ecx, esi
jb 0x14013ce65
lea rcx, [rbp + 0x40]
mov byte [rbp + 0x41], dil
call fcn.140152cb8
mov word [rbp + 0x40], 0x20
mov ecx, edi
movsxd rax, ecx
xor byte [rbp + rax + 0x40], cl
add ecx, esi
cmp ecx, esi
jb 0x14013ce87
lea rcx, [rbp + 0x40]
mov byte [rbp + 0x41], dil
call fcn.140153158
test al, al
je 0x14013cf3f
lea rcx, [rbp + 0x40]
mov byte [rbp + 0x40], dil
call fcn.14016a8e4
movaps xmm1, xmm8
xorps xmm0, xmm0
call fcn.140151d50
xor eax, eax
mov dword [rsp + 0x40], 0x67636e4c
mov byte [rsp + 0x4a], al
mov ecx, edi
mov dword [rsp + 0x44], 0x29616b6d
mov word [rsp + 0x48], 0x2726
movsxd rax, ecx
xor byte [rsp + rax + 0x40], cl
add ecx, esi
cmp ecx, 0xa
jb 0x14013cee1
lea rcx, [rsp + 0x40]
mov byte [rsp + 0x4a], dil
call fcn.1401726bc
mov rcx, rax
call fcn.14016a8e4
movaps xmm1, xmm8
xorps xmm0, xmm0
call fcn.140151d50
lea rcx, [rbp + 0x40]
mov byte [rbp + 0x40], dil
call fcn.14016a8e4
call fcn.14014142c
mov rcx, rax
call fcn.14013f97c
cmp byte [rax + 0x8b6], dil
je 0x14013cf3f
call fcn.140153024
call fcn.14015322c
call fcn.14013c2ec
cmp byte [0x140549340], dil
je 0x14013d06c
call fcn.14014142c
mov rcx, rax
call fcn.14013f97c
cmp byte [rax + 0x8b6], dil
je 0x14013d06c
mov byte [0x140549340], dil
call fcn.14014142c
mov rcx, rax
call fcn.14013f97c
mov dword [rsp + 0x50], 0x6d70646b
mov ecx, edi
mov dword [rsp + 0x54], 0x35356961
mov dword [rsp + 0x58], 0x67666d26
mov byte [rax + 0x8b6], dil
xor eax, eax
mov byte [rsp + 0x5c], al
movsxd rax, ecx
xor byte [rsp + rax + 0x50], cl
add ecx, esi
cmp ecx, 0xc
jb 0x14013cfa6
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5c], dil
call qword [sym.imp.kernel32.dll_GetModuleHandleA]
mov r8, rax
cmp rax, 0xffffffffffffffff
jne 0x14013d00e
xor eax, eax
mov dword [rsp + 0x70], 0x6d70646b
mov byte [rsp + 0x7c], al
mov ecx, edi
mov dword [rsp + 0x74], 0x35356961
mov dword [rsp + 0x78], 0x67666d26
movsxd rax, ecx
xor byte [rsp + rax + 0x70], cl
add ecx, esi
cmp ecx, 0xc
jb 0x14013cfed
lea rcx, [rsp + 0x70]
mov byte [rsp + 0x7c], dil
call qword [sym.imp.kernel32.dll_LoadLibraryA]
mov r8, rax
xor eax, eax
mov dword [rsp + 0x40], 0x62677343
mov byte [rsp + 0x4c], al
mov ecx, edi
mov dword [rsp + 0x44], 0x6f526070
mov dword [rsp + 0x48], 0x6f6b6c7a
movsxd rax, ecx
xor byte [rsp + rax + 0x40], cl
add ecx, esi
cmp ecx, 0xc
jb 0x14013d02e
lea rdx, [rsp + 0x40]
mov byte [rsp + 0x4c], dil
mov rcx, r8
call qword [sym.imp.kernel32.dll_GetProcAddress]
xor r9d, r9d
mov qword [rsp + 0x28], rdi
lea r8, [0x14013d090]
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [case.0x140173169.0]
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x30]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop rdi
pop rsi
pop rbp
ret