Function at 0x1404d2030
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
xchg rbx, rcx
mov qword [rsp + 0x10], rcx
xchg rbx, rcx
mov qword [rsp + 0x18], rdi
push rbp
mov r13, r13
lea rbp, [rsp - 0x57]
add rsp, 0x59238b4
sub rsp, 0x5923944
mov rcx, qword [rcx + 0x38]
xchg r9, r9
xchg r8, r13
mov rdi, r13
xchg r8, r13
xchg rdx, rbx
mov rdx, rbx
xchg rbx, rdx
call fcn.1404cc750
mov dword [rsp - 0xc], esi
xor eax, 0x1ac04423
cmp eax, 0x4c11ef35
jne 0x1404d2582
cmp dword [rdi], 0x64
xchg r13, r13
pushf
mov dword [rbp - 0x19], 0x79273941
xor dword [rbp - 0x19], 0x33a08b91
add dword [rbp - 0x19], 0x2fd38a02
sub dword [rbp - 0x19], 0x4061dac9
sub dword [rbp - 0x19], 0x2b982ebd
popf
pushf
mov dword [rbp - 0x15], 0x552db1a1
sub dword [rbp - 0x15], 0x54bf6c7
sub dword [rbp - 0x15], 0x40946557
add dword [rbp - 0x15], 0x308427e6
xor dword [rbp - 0x15], 0xdbb4a00d
popf
pushf
mov dword [rbp - 0x11], 0x7d09045d
sub dword [rbp - 0x11], 0x6be9ef53
sub dword [rbp - 0x11], 0xbee0a40
xor dword [rbp - 0x11], 0xdd7545ba
popf
pushf
mov dword [rbp - 0xd], 0x34660438
sub dword [rbp - 0xd], 0x31323f4
xor dword [rbp - 0xd], 0x26ba9f6f
xor dword [rbp - 0xd], 0x7066267a
sub dword [rbp - 0xd], 0x5500ff88
popf
pushf
mov dword [rbp - 9], 0xa0be17f
add dword [rbp - 9], 0x4618e2a3
add dword [rbp - 9], 0x16bef12a
sub dword [rbp - 9], 0x62ae7083
xor dword [rbp - 9], 0x62b806f6
popf
pushf
mov dword [rbp - 5], 0x306487a9
add dword [rbp - 5], 0x438a7439
sub dword [rbp - 5], 0x4c59b28c
xor dword [rbp - 5], 0x57fbe364
add dword [rbp - 5], 0x616d9835
popf
pushf
mov dword [rbp - 1], 0x3c4c2b
add dword [rbp - 1], 0xa258a9d
add dword [rbp - 1], 0x699457af
sub dword [rbp - 1], 0x909610d
xor dword [rbp - 1], 0xda08e9d3
popf
pushf
mov dword [rbp + 3], 0x766ea5e1
xor dword [rbp + 3], 0x1bfbf249
xor dword [rbp + 3], 0xa0fe7
add dword [rbp + 3], 0x4f222cf9
popf
pushf
mov dword [rbp + 7], 0x2400fd37
add dword [rbp + 7], 0x4babbc0f
add dword [rbp + 7], 0xf32fd3b
xor dword [rbp + 7], 0x60c0915
add dword [rbp + 7], 0x71414b0b
popf
pushf
mov dword [rbp + 0xb], 0x6ca9ead7
xor dword [rbp + 0xb], 0x68fa4ad3
xor dword [rbp + 0xb], 0x8831ae6
xor dword [rbp + 0xb], 0x15c12cc2
popf
pushf
mov dword [rbp + 0xf], 0x3c07fc7f
xor dword [rbp + 0xf], 0x55b334b2
xor dword [rbp + 0xf], 0x61a78ed6
add dword [rbp + 0xf], 0x10f93fe8
popf
pushf
mov dword [rbp + 0x13], 0x3c9b93f8
xor dword [rbp + 0x13], 0x6af300b8
add dword [rbp + 0x13], 0x25262fc3
add dword [rbp + 0x13], 0x424a2a6f
popf
pushf
mov dword [rbp + 0x17], 0x42c52f59
xor dword [rbp + 0x17], 0x5000997b
add dword [rbp + 0x17], 0x4d588660
sub dword [rbp + 0x17], 0x5f5c4b96
add dword [rbp + 0x17], 0xd742fc8f
popf
pushf
mov dword [rbp + 0x1b], 0x7688c96
add dword [rbp + 0x1b], 0x35ff922
add dword [rbp + 0x1b], 0x45a97eec
xor dword [rbp + 0x1b], 0xd09a3668
popf
pushf
mov dword [rbp + 0x1f], 0x56be9ce8
sub dword [rbp + 0x1f], 0x4756df2c
add dword [rbp + 0x1f], 0x2135a512
add dword [rbp + 0x1f], 0x778e3335
popf
pushf
mov dword [rbp + 0x23], 0x15cdbb6d
add dword [rbp + 0x23], 0x33a5dc64
xor dword [rbp + 0x23], 0x472a2a2
sub dword [rbp + 0x23], 0x248a1232
xor dword [rbp + 0x23], 0xe7aa800
popf
pushf
mov dword [rbp + 0x27], 0x625d080
add dword [rbp + 0x27], 0x385fe05b
xor dword [rbp + 0x27], 0x4f08593a
xor dword [rbp + 0x27], 0x5d3f97be
xor dword [rbp + 0x27], 0x4fa49d9b
popf
pushf
mov dword [rbp + 0x2b], 0x20b57e8
xor dword [rbp + 0x2b], 0x2840f63e
add dword [rbp + 0x2b], 0x52ff1e8c
xor dword [rbp + 0x2b], 0x38e96e00
xor dword [rbp + 0x2b], 0xccd772bd
popf
pushf
mov dword [rbp + 0x2f], 0x19f23b32
add dword [rbp + 0x2f], 0x5234ca15
sub dword [rbp + 0x2f], 0xf7550ab
sub dword [rbp + 0x2f], 0x1f41a792
popf
pushf
mov dword [rbp + 0x33], 0x51334e62
sub dword [rbp + 0x33], 0x3a88a9b1
xor dword [rbp + 0x33], 0x256a1fc9
add dword [rbp + 0x33], 0x8c3d98b
popf
pushf
mov dword [rbp + 0x37], 0xa239005
add dword [rbp + 0x37], 0x1c22c2bb
sub dword [rbp + 0x37], 0x1459fef7
add dword [rbp + 0x37], 0x631eefbb
add dword [rbp + 0x37], 0x4875a9f6
popf
pushf
mov dword [rbp + 0x3b], 0x36ac18aa
sub dword [rbp + 0x3b], 0x4020728
add dword [rbp + 0x3b], 0x26f4dc29
add dword [rbp + 0x3b], 0x82a83968
popf
pushf
mov dword [rbp + 0x3f], 0x48479bcd
add dword [rbp + 0x3f], 0x22dd6b4a
add dword [rbp + 0x3f], 0x12669b86
add dword [rbp + 0x3f], 0x5fdc177
popf
pushf
mov dword [rbp + 0x43], 0x29741be3
xor dword [rbp + 0x43], 0x3359b880
add dword [rbp + 0x43], 0x3747ad2e
xor dword [rbp + 0x43], 0x4772893f
add dword [rbp + 0x43], 0xe7294a96
popf
pushf
mov dword [rbp + 0x47], 0x7085d691
xor dword [rbp + 0x47], 0x4827dac1
add dword [rbp + 0x47], 0x1e626152
add dword [rbp + 0x47], 0x63e11433
popf
jb 0x1404d2999
mov qword [rsp + 0xa0], rsi
mov dword [rsp - 0x2c], 0x72f3189f
lea r10, [rbp - 0x18]
lea r11, [rbp - 0x17]
nop
movabs r9, 0xffffffff6fe61ca8
sub r9, 0x2dfb3018
xor r9, 0x6bed4f8a
add r9, 0x3b340f11
add r9, 0x7fffffff
add r9, 0x1ac44dd4
sub r10, rbx
mov dword [rsp - 0x24], esi
lea rsi, [rbp - 0x19]
sub r11, rbx
lea r8, [rbx + 2]
mov dword [rsp - 0x40], ebp
sub r9, rbx
sub rsi, rbx
nop dword [rax]
xchg r12, r12
lea edx, [r9 + r8]
mov eax, 0x790598bb
sub eax, 0x3256c1ab
add eax, 0x310fd955
sub eax, 0x348b8060
mov ecx, edx
mov dword [rsp - 0x14], edx
lea r8, [r8 + 5]
rol eax, cl
lea ecx, [rdx + 1]
xor al, byte [r8 + rsi - 7]
xchg rcx, rcx
mov byte [r8 - 7], al
mov eax, 0x146b10fb
add eax, 0x39aa2c0a
sub eax, 0x1f6bc8e0
xor eax, 0x6d9a4420
rol eax, cl
lea ecx, [rdx + 2]
xchg rsp, rsp
xor al, byte [r10 + r8 - 7]
mov byte [r8 - 6], al
mov eax, 0x202ef9
add eax, 0x43c70a9d
xor eax, 0x52bfe484
add eax, 0x31da52f3
rol eax, cl
lea ecx, [rdx + 3]
xchg r8, r8
xor al, byte [r8 + rsi - 5]
mov byte [r8 - 5], al
mov eax, 0x12b438f
xor eax, 0x2008d4a5
xor eax, 0x66fb0cd0
xor eax, 0x3d1d56f3
sub eax, 0x37929d04
rol eax, cl
mov r11, r11
lea ecx, [rdx + 4]
xor al, byte [r10 + r8 - 5]
mov byte [r8 - 4], al
mov eax, 0x3d613019
xor eax, 0x41d42dfb
sub eax, 0x60279d9
sub eax, 0x337f7404
rol eax, cl
xor al, byte [r11 + r8 - 5]
mov dword [rsp - 0x18], 0xd66819f
mov byte [r8 - 3], al
lea rax, [r9 + r8]
cmp rax, 0x64
jb 0x1404d247c
xchg r12, r12
mov rsi, qword [rsp + 0xa0]
xor eax, eax
mov dword [rdi], 0x294ff7d2
sub dword [rdi], 0xe7b627
xor dword [rdi], 0x3bb1ee14
sub dword [rdi], 0x13d9af5b
jmp 0x1404d29cb
cmp eax, 0x7a9cb6d3
jne 0x1404d29b2
cmp dword [rdi], 0x61
xchg rcx, rcx
pushf
mov dword [rbp - 0x19], 0x3677aaea
sub dword [rbp - 0x19], 0x2063778c
sub dword [rbp - 0x19], 0x43d0848
xor dword [rbp - 0x19], 0x4501290e
sub dword [rbp - 0x19], 0x3a6fcecb
popf
pushf
mov dword [rbp - 0x15], 0x3a971eb1
sub dword [rbp - 0x15], 0x360bcce4
xor dword [rbp - 0x15], 0x7119c1da
add dword [rbp - 0x15], 0x2bd09d44
popf
pushf
mov dword [rbp - 0x11], 0x2b63b9f1
xor dword [rbp - 0x11], 0x101ed458
sub dword [rbp - 0x11], 0xc619277
xor dword [rbp - 0x11], 0x43b50869
sub dword [rbp - 0x11], 0x44654d18
popf
pushf
mov dword [rbp - 0xd], 0x69c698f9
sub dword [rbp - 0xd], 0x167aca18
xor dword [rbp - 0xd], 0x169ed76c
add dword [rbp - 0xd], 0x896c156d
popf
pushf
mov dword [rbp - 9], 0xe0d9090
xor dword [rbp - 9], 0x72c62cbd
sub dword [rbp - 9], 0x3f5e0a81
add dword [rbp - 9], 0x38477643
sub dword [rbp - 9], 0xeed3a23
popf
pushf
mov dword [rbp - 5], 0x5d4dca7
add dword [rbp - 5], 0x5173e690
xor dword [rbp - 5], 0x94a1993
xor dword [rbp - 5], 0x78333d1e
sub dword [rbp - 5], 0x14ad715a
popf
pushf
mov dword [rbp - 1], 0x1ec7f2af
xor dword [rbp - 1], 0x3b9fb046
sub dword [rbp - 1], 0x23a329b0
add dword [rbp - 1], 0x3d3373a
popf
pushf
mov dword [rbp + 3], 0x52ce9a4a
add dword [rbp + 3], 0x56fb86d
sub dword [rbp + 3], 0x56b41f80
xor dword [rbp + 3], 0x3118df7
popf
pushf
mov dword [rbp + 7], 0x1f7ec471
add dword [rbp + 7], 0x15a0a26b
xor dword [rbp + 7], 0x4dd9b535
sub dword [rbp + 7], 0x160f9441
add dword [rbp + 7], 0x4b638a5d
popf
pushf
mov dword [rbp + 0xb], 0x27ed7b1a
add dword [rbp + 0xb], 0x178d731d
xor dword [rbp + 0xb], 0x2a1cfe13
xor dword [rbp + 0xb], 0xb436b8cc
popf
pushf
mov dword [rbp + 0xf], 0x4394b13f
add dword [rbp + 0xf], 0x182fa1ec
sub dword [rbp + 0xf], 0x1ebe7c20
xor dword [rbp + 0xf], 0x48c5c05d
sub dword [rbp + 0xf], 0x5c73d954
popf
pushf
mov dword [rbp + 0x13], 0x220a6156
xor dword [rbp + 0x13], 0x3229c5b8
xor dword [rbp + 0x13], 0xd5571d6
add dword [rbp + 0x13], 0x1b6002a3
add dword [rbp + 0x13], 0x51708e58
popf
pushf
mov dword [rbp + 0x17], 0x680662e0
sub dword [rbp + 0x17], 0x3f22ef18
xor dword [rbp + 0x17], 0x5886018
add dword [rbp + 0x17], 0x38a2dbab
popf
pushf
mov dword [rbp + 0x1b], 0x691960ad
sub dword [rbp + 0x1b], 0x5952a914
xor dword [rbp + 0x1b], 0x4dfc9c98
add dword [rbp + 0x1b], 0x2cc3535f
popf
pushf
mov dword [rbp + 0x1f], 0x61c53ba7
sub dword [rbp + 0x1f], 0x5953adee
xor dword [rbp + 0x1f], 0x2db46db2
xor dword [rbp + 0x1f], 0x14b38552
add dword [rbp + 0x1f], 0x4f4a6280
popf
pushf
mov dword [rbp + 0x23], 0x9346658
xor dword [rbp + 0x23], 0x14ecb956
add dword [rbp + 0x23], 0x34babbac
sub dword [rbp + 0x23], 0x3a5bddf1
xor dword [rbp + 0x23], 0xdb3d37c9
popf
pushf
mov dword [rbp + 0x27], 0x33317151
xor dword [rbp + 0x27], 0x31bd1c2b
xor dword [rbp + 0x27], 0x4aa987a0
xor dword [rbp + 0x27], 0x5e0c77b5
add dword [rbp + 0x27], 0x8b336c7d
popf
pushf
mov dword [rbp + 0x2b], 0x691aefdb
sub dword [rbp + 0x2b], 0x321901e
sub dword [rbp + 0x2b], 0x1bdb1368
xor dword [rbp + 0x2b], 0x6006cc72
popf
pushf
mov dword [rbp + 0x2f], 0x1d5e69e0
xor dword [rbp + 0x2f], 0x85b2e9f
xor dword [rbp + 0x2f], 0x615b0af
add dword [rbp + 0x2f], 0x52d14318
sub dword [rbp + 0x2f], 0x13e284b0
popf
pushf
mov dword [rbp + 0x33], 0x4b0acf58
sub dword [rbp + 0x33], 0x3b789a96
xor dword [rbp + 0x33], 0x5999d343
xor dword [rbp + 0x33], 0x6ea4465
xor dword [rbp + 0x33], 0x82a68d72
popf
pushf
mov dword [rbp + 0x37], 0x2422446d
add dword [rbp + 0x37], 0xdb41583
sub dword [rbp + 0x37], 0x18370923
add dword [rbp + 0x37], 0x538fdf94
add dword [rbp + 0x37], 0x3060bcb2
popf
pushf
mov dword [rbp + 0x3b], 0x91fe028
add dword [rbp + 0x3b], 0x3aa56d34
sub dword [rbp + 0x3b], 0x4af335a
add dword [rbp + 0x3b], 0x30e138a4
xor dword [rbp + 0x3b], 0xc77837dd
popf
pushf
mov dword [rbp + 0x3f], 0x5aed928f
xor dword [rbp + 0x3f], 0x6e839e1
xor dword [rbp + 0x3f], 0x114a9d06
sub dword [rbp + 0x3f], 0x7058599
popf
pushf
mov dword [rbp + 0x43], 0x3082bff5
sub dword [rbp + 0x43], 0x29eb5748
add dword [rbp + 0x43], 0x383de676
sub dword [rbp + 0x43], 0x269c032c
sub dword [rbp + 0x43], 0x1637c80e
popf
pushf
mov byte [rbp + 0x47], 0x5e
xor byte [rbp + 0x47], 0x65
sub byte [rbp + 0x47], 0x38
add byte [rbp + 0x47], 0x6a
sub byte [rbp + 0x47], 0x68
popf
jb 0x1404d2999
mov rbx, rbx
xor r8d, r8d
lea r9, [rbp - 0x19]
sub r9, rbx
nop dword [rax + rax]
mov rbx, rbx
lea rax, [r8 + rbx]
mov ecx, r8d
mov edx, 0xe677ac0
xor edx, 0x593cf96
add edx, 0x1e53393d
sub edx, 0x1b6a83fc
xor edx, 0x4dee5a92
inc r8
rol edx, cl
xor dl, byte [r9 + rax]
mov dword [rsp - 0x34], 0x5a69791d
mov byte [rax], dl
cmp r8, 0x61
jb 0x1404d292f
mov dword [rdi], 0x4fe8bf1c
sub dword [rdi], 0x381934bf
xor dword [rdi], 0x4baeb428
add dword [rdi], 0x1bd79812
sub dword [rdi], 0x7838d626
xor eax, eax
mov dword [rsp - 0x20], esp
jmp 0x1404d29cb
mov eax, 0x2eb45760
xor eax, 0xc61c689
xor eax, 0x63b32143
xor eax, 0x8166b089
jmp 0x1404d29cb
mov eax, 0x239a628f
add eax, 0x3e53ef40
sub eax, 0xabd7515
xor eax, 0x2c681337
xor eax, 0xbb58cf8f
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x18]
xchg rdi, rsp
mov rsp, qword [r11 + 0x20]
xchg rdi, rsp
xchg rsp, r11
mov r11, rsp
xchg r11, rsp
nop
mov rbp, qword [rsp]
add rsp, 8
ret