Function at 0x1400a5740
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
lea rbp, [rsp - 0x258]
sub rsp, 0x358
xor esi, esi
lea ecx, [rsi + 1]
call fcn.1400ba130
mov qword [rbp + 0x290], rax
lea rcx, [rbp + 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x1400a7620]
xor edx, edx
xor ecx, ecx
call fcn.1400d5ef0
mov qword [rbp + 0x30], rax
test rax, rax
je 0x1400a60b3
cmp dword [rbp + 0x38], esi
je 0x1400a60a8
movaps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rbp - 0x70]
call fcn.1400bdb8c
test eax, eax
jne 0x1400a60a8
xorps xmm0, xmm0
movaps xmmword [rsp + 0x70], xmm0
movdqa xmmword [rbp + 0x30], xmm0
movdqa xmm0, xmmword [0x14013e430]
movdqu xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x50], 0x23282c13
mov dword [rbp - 0x4c], 0x1003e27
mov ecx, esi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x34]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0x16
jb 0x1400a57f0
mov byte [rbp - 0x49], 0
xor edx, edx
lea rcx, [rbp - 0x60]
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x1400a582d
lea rdx, [rbp + 0x280]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edi, dword [rbp + 0x280]
jmp 0x1400a582f
mov edi, esi
movdqa xmm0, xmmword [0x14013e370]
movdqu xmmword [rbp - 0x1b], xmm0
mov dword [rbp - 0xb], 0x1003721
mov rcx, rsi
nop word [rax + rax]
lea eax, [rcx + 0x34]
xor byte [rbp + rcx - 0x1b], al
inc rcx
cmp rcx, 0x12
jb 0x1400a5850
mov byte [rbp - 8], 0
xor edx, edx
lea rcx, [rbp - 0x1b]
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x1400a588d
lea rdx, [rbp + 0x288]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ebx, dword [rbp + 0x288]
jmp 0x1400a588f
mov ebx, esi
test edi, edi
jne 0x1400a589d
test ebx, ebx
je 0x1400a593c
jmp 0x1400a58a8
mov ecx, edi
call fcn.1400b70e0
test ebx, ebx
je 0x1400a58af
mov ecx, ebx
call fcn.1400b70e0
movdqa xmm0, xmmword [0x14013e610]
movdqu xmmword [rbp + 0x60], xmm0
movdqa xmm1, xmmword [0x14013e8a0]
movdqu xmmword [rbp + 0x70], xmm1
movdqa xmm0, xmmword [0x14013e5d0]
movdqu xmmword [rbp + 0x80], xmm0
movdqa xmm1, xmmword [0x14013e5c0]
movdqu xmmword [rbp + 0x90], xmm1
mov dword [rbp + 0xa0], 0x90929fdb
mov dword [rbp + 0xa4], 0x776f698b
mov word [rbp + 0xa8], 0x66
mov byte [rbp + 0xaa], 1
mov rcx, rsi
lea eax, [rcx - 0x45]
xor byte [rbp + rcx + 0x60], al
inc rcx
cmp rcx, 0x49
jb 0x1400a5910
mov byte [rbp + 0xaa], 0
mov r9d, 0x40
xor r8d, r8d
lea rdx, [rbp + 0x60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 0x3dcccccd
xchg dword [0x1402440e4], eax
lea rax, [rbp + 0xb0]
mov qword [rbp + 0x298], rax
mov dword [rsp + 0x3d], 0x415f4750
mov dword [rsp + 0x41], 0x4c654b5d
mov dword [rsp + 0x45], 0x464d1348
mov word [rsp + 0x49], 0x33
mov byte [rsp + 0x4b], 1
mov rcx, rsi
nop dword [rax]
lea eax, [rcx + 0x34]
xor byte [rsp + rcx + 0x3d], al
inc rcx
cmp rcx, 0xd
jb 0x1400a5980
mov byte [rsp + 0x4b], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xc8], rsi
mov r8d, 0xd
lea rdx, [rsp + 0x3d]
lea rcx, [rbp + 0xb0]
call fcn.140061160
nop
lea rax, [rbp + 0xd0]
mov qword [rbp + 0x20], rax
mov rdx, qword [0x1402442c8]
add rdx, 0x120
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], rsi
mov qword [rbp + 0xe8], rsi
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rdx + r8], 0
jne 0x1400a5a00
lea rcx, [rbp + 0xd0]
call fcn.140061160
nop
mov rdx, qword [0x1402442c8]
add rdx, 0x100
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], rsi
mov qword [rbp + 0x108], rsi
mov r8, rbx
inc r8
cmp byte [rdx + r8], 0
jne 0x1400a5a40
lea rcx, [rbp + 0xf0]
call fcn.140061160
nop
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xd0]
lea r8, [rbp + 0xf0]
lea rdx, [rbp + 0x230]
mov rcx, qword [0x140244110]
call fcn.140096530
nop
mov eax, 0x3ecccccd
xchg dword [0x1402440e4], eax
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], 0xf
mov byte [rbp], 0
mov rcx, rsi
cmp dword [0x140244158], 0
jne 0x1400a5afc
mov dword [rsp + 0x5b], 0x43445443
mov dword [rsp + 0x5f], 0x5f544c50
mov dword [rsp + 0x63], 0x5b104f59
mov dword [rsp + 0x67], 0x1002d2c
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x34]
xor byte [rsp + rcx + 0x5b], al
inc rcx
cmp rcx, 0xe
jb 0x1400a5ae0
mov byte [rsp + 0x6a], 0
lea rdx, [rsp + 0x5b]
jmp 0x1400a5b38
movdqa xmm0, xmmword [0x14013e870]
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0xa1a0af
mov byte [rbp - 0x1c], 1
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 0x45]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x13
jb 0x1400a5b20
mov byte [rbp - 0x1c], 0
lea rdx, [rbp - 0x30]
lea rax, [rbp + 0x110]
mov qword [rbp + 0x298], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x120], rsi
mov qword [rbp + 0x128], rsi
mov r8, rbx
inc r8
cmp byte [rdx + r8], 0
jne 0x1400a5b61
lea rcx, [rbp + 0x110]
call fcn.140061160
nop
lea rax, [rbp + 0x130]
mov qword [rbp + 0x28], rax
mov rdx, qword [0x1402442c8]
add rdx, 0x120
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
mov qword [rbp + 0x140], rsi
mov qword [rbp + 0x148], rsi
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x1400a5bb0
lea rcx, [rbp + 0x130]
call fcn.140061160
nop
mov rdx, qword [0x1402442c8]
add rdx, 0x100
xorps xmm0, xmm0
movups xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0x160], rsi
mov qword [rbp + 0x168], rsi
mov r8, rbx
inc r8
cmp byte [rdx + r8], 0
jne 0x1400a5bf0
lea rcx, [rbp + 0x150]
call fcn.140061160
nop
lea rax, [rbp + 0x110]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x130]
lea r8, [rbp + 0x150]
lea rdx, [rbp + 0x210]
mov rcx, qword [0x140244110]
call fcn.1400955a0
mov rdi, rax
lea rax, [rbp]
cmp rax, rdi
je 0x1400a5cab
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x1400a5c7d
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a5c78
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a5c78
call fcn.1400d3378
int3
call fcn.1400b9d58
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], 0xf
mov byte [rbp], 0
movups xmm0, xmmword [rdi]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
lea rcx, [rbp + 0x210]
call fcn.14005ed40
mov eax, 0x3f19999a
xchg dword [0x1402440e4], eax
mov dword [rsp + 0x30], 0x17445463
mov dword [rsp + 0x34], 0x554f516c
mov dword [rsp + 0x38], 0x4c5858
mov byte [rsp + 0x3c], 1
mov rcx, rsi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x34]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0xb
jb 0x1400a5cf0
mov byte [rsp + 0x3c], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], rsi
mov qword [rbp + 0x188], rsi
lea rax, [rsp + 0x30]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400a5d25
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x170]
call fcn.140061160
nop
mov rdx, qword [0x1402442c8]
add rdx, 0x100
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], rsi
mov qword [rbp + 0x58], rsi
mov r8, rbx
inc r8
cmp byte [rdx + r8], 0
jne 0x1400a5d61
lea rcx, [rbp + 0x40]
call fcn.140061160
nop
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x40]
call fcn.1400b80d0
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x1400a5dc3
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a5dbe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a5dbe
call fcn.1400d3378
int3
call fcn.1400b9d58
mov qword [rbp + 0x50], rsi
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
lea rcx, [rbp + 0x170]
call fcn.14005ed40
lea rcx, [rbp + 0x230]
call fcn.140082620
test al, al
jne 0x1400a5e27
movdqa xmm0, xmmword [0x14013e3c0]
movdqu xmmword [rsp + 0x70], xmm0
mov dword [rbp - 0x80], 0x1002121
lea rcx, [rsp + 0x70]
call fcn.14008ccc0
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call fcn.1400d47a8
int3
cmp byte [0x140244029], 0
je 0x1400a5fd6
lea rax, [rbp + 0x190]
mov qword [rbp + 0x298], rax
mov dword [rsp + 0x4c], 0x4f534555
mov dword [rsp + 0x50], 0x524d5167
mov dword [rsp + 0x54], 0x464d1358
mov word [rsp + 0x58], 0x33
mov byte [rsp + 0x5a], 1
mov rcx, rsi
nop dword [rax]
lea eax, [rcx + 0x34]
xor byte [rsp + rcx + 0x4c], al
inc rcx
cmp rcx, 0xd
jb 0x1400a5e70
mov byte [rsp + 0x5a], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1a0], rsi
mov qword [rbp + 0x1a8], rsi
mov r8d, 0xd
lea rdx, [rsp + 0x4c]
lea rcx, [rbp + 0x190]
call fcn.140061160
nop
lea rax, [rbp + 0x1b0]
mov qword [rbp + 0x28], rax
mov rdx, qword [0x1402442c8]
add rdx, 0x120
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], rsi
mov qword [rbp + 0x1c8], rsi
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x1400a5ef0
lea rcx, [rbp + 0x1b0]
call fcn.140061160
nop
mov rdx, qword [0x1402442c8]
add rdx, 0x100
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d0], xmm0
mov qword [rbp + 0x1e0], rsi
mov qword [rbp + 0x1e8], rsi
nop dword [rax]
inc rbx
cmp byte [rdx + rbx], 0
jne 0x1400a5f30
mov r8, rbx
lea rcx, [rbp + 0x1d0]
call fcn.140061160
nop
lea rax, [rbp + 0x190]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1b0]
lea r8, [rbp + 0x1d0]
lea rdx, [rbp + 0x1f0]
mov rcx, qword [0x140244110]
call fcn.140096530
nop
mov eax, 0x3f4ccccd
xchg dword [0x1402440e4], eax
lea rcx, [rbp + 0x1f0]
call fcn.140082620
test al, al
jne 0x1400a5fca
movdqa xmm0, xmmword [0x14013e3d0]
movdqu xmmword [rsp + 0x70], xmm0
mov dword [rbp - 0x80], 0x1002121
lea rcx, [rsp + 0x70]
call fcn.14008ccc0
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call fcn.1400d47a8
nop
lea rcx, [rbp + 0x1f0]
call fcn.14005ed40
mov eax, 0x3f666666
xchg dword [0x1402440e4], eax
lea rcx, [rbp]
call fcn.14005c1e0
test al, al
jne 0x1400a6025
movdqa xmm0, xmmword [0x14013e6d0]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rbp - 0x80], 0x100
lea rcx, [rsp + 0x70]
call fcn.14005d1a0
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call fcn.1400d47a8
int3
movss xmm1, dword [0x14013dc20]
call fcn.1400a70b0
mov dword [rbp - 0x70], 0x54554067
mov dword [rbp - 0x6c], 0x494a5d
mov byte [rbp - 0x68], 1
lea rcx, [rbp - 0x70]
call fcn.14008fa30
mov r8, rax
movdqa xmm0, xmmword [0x14013e630]
movdqu xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x14013e8b0]
movdqu xmmword [rbp - 0x50], xmm1
mov dword [rbp - 0x40], 0xb0b8b4ac
mov dword [rbp - 0x3c], 0xc29589ff
mov dword [rbp - 0x38], 0x82848b8f
mov dword [rbp - 0x34], 0x1008c82
lea rcx, [rbp - 0x60]
call fcn.1400a61d0
mov r9d, 0x40
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call fcn.1400d47a8
nop
mov ecx, 1
call fcn.1400bda90
nop
mov dword [rbp + 0x38], esi
mov ecx, 6
call fcn.1400bda90
int3