Function at 0x140187b58
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov qword [rax + 8], rcx
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x138]
sub rsp, 0x210
mov rsi, r8
lea rcx, [rbp + 0x70]
mov r14, rdx
mov ebx, 0x98
mov r8d, ebx
xor edx, edx
call fcn.1403ccc50
mov dword [rbp + 0x70], ebx
call fcn.140141298
xor r15d, r15d
mov rdx, rsi
mov rcx, qword [rax + 0x28]
mov qword [rbp + 0x78], rcx
lea rcx, [rbp + 0x50]
mov qword [rbp + 0x50], r15
mov qword [rbp + 0x60], r15
mov qword [rbp + 0x68], 0xf
call fcn.14013eec4
mov ecx, r15d
mov dword [rbp + 0x140], 0x662c2b00
mov dword [rbp + 0x144], 0x6607c
lea ebx, [r15 + 1]
movsxd rax, ecx
xor byte [rbp + rax + 0x140], cl
add ecx, ebx
cmp ecx, 7
jb 0x140187be5
or rdi, 0xffffffffffffffff
mov byte [rbp + 0x147], r15b
mov r8, rdi
lea rax, [rbp + 0x140]
inc r8
cmp byte [rax + r8], r15b
jne 0x140187c0b
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x50]
call fcn.140194e18
cmp qword [rbp + 0x68], 0x10
lea rax, [rbp + 0x50]
mov qword [rbp + 0xc0], r15
cmovae rax, qword [rbp + 0x50]
mov qword [rbp + 0x88], rax
call fcn.14014142c
mov rcx, rax
call fcn.14013fb04
add rax, 0x822
mov dword [rbp + 0xa8], 0x104
lea rdx, [0x1404c05a8]
mov qword [rbp + 0xa0], rax
lea rcx, [rbp + 0x30]
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x48], 0xf
call fcn.14013eec4
xor eax, eax
mov dword [rsp + 0x20], 0x666e6453
mov byte [rsp + 0x28], al
mov ecx, r15d
mov dword [rsp + 0x24], 0x20267167
movsxd rax, ecx
xor byte [rsp + rax + 0x20], cl
add ecx, ebx
cmp ecx, 8
jb 0x140187c9d
mov byte [rsp + 0x28], r15b
lea rax, [rsp + 0x20]
mov r8, rdi
inc r8
cmp byte [rax + r8], r15b
jne 0x140187cb8
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x30]
call fcn.140194e18
mov r8, rdi
inc r8
cmp byte [rsi + r8], r15b
jne 0x140187cd2
mov rdx, rsi
lea rcx, [rbp + 0x30]
call fcn.140194e18
movdqa xmm0, xmmword [0x1404cf950]
mov ecx, r15d
movdqu xmmword [rsp + 0x74], xmm0
mov dword [rbp - 0x7c], 0x6177757c
mov word [rbp - 0x78], 0x3a
movsxd rax, ecx
xor byte [rsp + rax + 0x74], cl
add ecx, ebx
cmp ecx, 0x15
jb 0x140187d05
mov byte [rbp - 0x77], r15b
lea rax, [rsp + 0x74]
inc rdi
cmp byte [rax + rdi], r15b
jne 0x140187d1c
mov r8, rdi
lea rdx, [rsp + 0x74]
lea rcx, [rbp + 0x30]
call fcn.140194e18
cmp qword [rbp + 0x48], 0x10
lea rax, [rbp + 0x30]
lea rcx, [rbp + 0x70]
mov dword [rbp + 0xd0], 0x2001000
cmovae rax, qword [rbp + 0x30]
mov qword [rbp + 0xc8], rax
call qword [sym.imp.comdlg32.dll_GetOpenFileNameA]
test eax, eax
je 0x140187fd8
call fcn.14014142c
mov rcx, rax
call fcn.14013fb04
mov edi, 0x822
mov rdx, rsi
lea rcx, [rdi + rax]
call fcn.1403cbcb0
test rax, rax
je 0x140187f2a
call fcn.140141298
call fcn.14014142c
mov rcx, rax
call fcn.14013fb04
mov dword [rbp + 0x140], 0x6b766050
mov ecx, r15d
lea r9, [rdi + rax]
xor eax, eax
mov byte [rbp + 0x144], al
movsxd rax, ecx
xor byte [rbp + rax + 0x140], cl
add ecx, ebx
cmp ecx, 4
jb 0x140187db9
mov r8, r14
mov byte [rbp + 0x144], r15b
lea rdx, [rbp + 0x140]
call fcn.14019cba8
xor eax, eax
mov dword [rbp - 0x76], 0x600047
mov word [rbp + 0x2a], ax
mov esi, 0x27
mov dword [rbp - 0x72], 0x66006f
mov ecx, r15d
mov dword [rbp - 0x6e], 0x750024
mov dword [rbp - 0x6a], 0x730067
mov dword [rbp - 0x66], 0x290060
mov dword [rbp - 0x62], 0x6a007d
mov dword [rbp - 0x5e], 0x2d007f
mov dword [rbp - 0x5a], 0x6e007d
mov dword [rbp - 0x56], 0x740066
mov dword [rbp - 0x52], 0x330076
mov dword [rbp - 0x4e], 0x7a0060
mov dword [rbp - 0x4a], 0x740036
mov dword [rbp - 0x46], 0x770077
mov dword [rbp - 0x42], 0x72007c
mov dword [rbp - 0x3e], 0x3d007b
mov dword [rbp - 0x3a], 0x760078
mov dword [rbp - 0x36], 0x44004c
mov dword [rbp - 0x32], 0x3000c
mov dword [rbp - 0x2e], 0x43006d
mov dword [rbp - 0x2a], 0x490006
mov dword [rbp - 0x26], 0x4c004d
mov dword [rbp - 0x22], 0xb004e
mov dword [rbp - 0x1e], 0x45004f
mov dword [rbp - 0x1a], 0x41004f
mov dword [rbp - 0x16], 0x540057
mov dword [rbp - 0x12], 0x430012
mov dword [rbp - 0xe], 0x410055
mov dword [rbp - 0xa], 0x17005e
mov dword [rbp - 6], 0x4c0052
mov dword [rbp - 2], 0x4f0049
mov dword [rbp + 2], 0x59001c
mov dword [rbp + 6], 0x53005b
mov dword [rbp + 0xa], 0x350025
mov dword [rbp + 0xe], 0x630027
mov dword [rbp + 0x12], 0x360063
mov dword [rbp + 0x16], 0x280032
mov dword [rbp + 0x1a], 0x6e003a
mov dword [rbp + 0x1e], 0x2d006a
mov dword [rbp + 0x22], 0x210025
mov dword [rbp + 0x26], 0x61002b
movsxd rax, ecx
xor word [rbp + rax*2 - 0x76], cx
add ecx, ebx
cmp ecx, 0x50
jb 0x140187f06
lea rdx, [rbp - 0x76]
mov word [rbp + 0x2a], r15w
mov ecx, ebx
call fcn.1401a8110
jmp 0x1401880a1
mov dword [rsp + 0x2a], 0x640053
mov ecx, r15d
mov dword [rsp + 0x2e], 0x66006e
mov edx, 0x21
mov dword [rsp + 0x32], 0x710067
mov dword [rsp + 0x36], 0x630063
mov dword [rsp + 0x3a], 0x600028
mov dword [rsp + 0x3e], 0x680064
mov dword [rsp + 0x42], 0x7f0063
mov dword [rsp + 0x46], 0x6a007c
mov dword [rsp + 0x4a], 0x650073
mov dword [rsp + 0x4e], 0x750032
mov dword [rsp + 0x52], 0x79007d
mov dword [rsp + 0x56], 0x3b0073
mov dword [rsp + 0x5a], 0x780038
mov dword [rsp + 0x5e], 0x740078
mov dword [rsp + 0x62], 0x69006e
mov dword [rsp + 0x66], 0x7b007b
mov dword [rsp + 0x6a], 0xe
movsxd rax, ecx
xor word [rsp + rax*2 + 0x2a], cx
add ecx, ebx
cmp ecx, edx
jb 0x140187fba
mov word [rsp + 0x6c], r15w
lea rdx, [rsp + 0x2a]
jmp 0x140188092
xor eax, eax
mov dword [rsp + 0x2a], 0x600047
mov word [rsp + 0x72], ax
mov r9d, 0x24
mov dword [rsp + 0x2e], 0x66006f
mov ecx, r15d
mov dword [rsp + 0x32], 0x750024
mov dword [rsp + 0x36], 0x730067
mov dword [rsp + 0x3a], 0x290060
mov dword [rsp + 0x3e], 0x6a007d
mov dword [rsp + 0x42], 0x2d007f
mov dword [rsp + 0x46], 0x600060
mov dword [rsp + 0x4a], 0x310064
mov dword [rsp + 0x4e], 0x760061
mov dword [rsp + 0x52], 0x700078
mov dword [rsp + 0x56], 0x630075
mov dword [rsp + 0x5a], 0x7d007d
mov dword [rsp + 0x5e], 0x3b0036
mov dword [rsp + 0x62], 0x7f007d
mov dword [rsp + 0x66], 0x6d0071
mov dword [rsp + 0x6a], 0x440054
mov dword [rsp + 0x6e], 0xd0046
movsxd rax, ecx
xor word [rsp + rax*2 + 0x2a], cx
add ecx, ebx
cmp ecx, r9d
jb 0x140188078
mov word [rsp + 0x72], r15w
lea rdx, [rsp + 0x2a]
xor ecx, ecx
call fcn.1401a8110
mov esi, 0x27
mov bl, r15b
mov rdx, qword [rbp + 0x48]
mov edi, 0x1000
cmp rdx, 0x10
jb 0x1401880d8
mov rcx, qword [rbp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, rdi
jb 0x1401880d3
mov rcx, qword [rcx - 8]
add rdx, rsi
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018813d
call fcn.1403cad84
mov rdx, qword [rbp + 0x68]
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x48], 0xf
mov byte [rbp + 0x30], r15b
cmp rdx, 0x10
jb 0x14018811a
mov rcx, qword [rbp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, rdi
jb 0x140188115
mov rcx, qword [rcx - 8]
add rdx, rsi
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018813d
call fcn.1403cad84
lea r11, [rsp + 0x210]
mov al, bl
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1403d7020
int3