Function at 0x140036900
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
lea rbp, [rsp - 0xb0]
sub rsp, 0x1b0
mov rax, qword [0x1401c67c0]
xor rax, rsp
mov qword [rbp + 0xa0], rax
mov cl, 0x30
mov word [rsp + 0x30], 0x30
movsx edx, cl
movzx eax, dx
movzx ecx, dx
xor ax, 0x5e
xor cx, 0x54
mov word [rsp + 0x32], ax
movzx eax, dx
xor ax, 0x44
mov word [rsp + 0x36], cx
mov word [rsp + 0x34], ax
movzx eax, dx
xor ax, 0x5c
mov word [rsp + 0x3e], cx
mov word [rsp + 0x38], ax
lea rcx, [rsp + 0x32]
mov word [rsp + 0x3a], ax
xor dx, 0x1e
mov word [rsp + 0x40], ax
mov word [rsp + 0x42], ax
xor eax, eax
mov word [rsp + 0x44], ax
mov word [rsp + 0x3c], dx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
je 0x140036a07
lea rdx, [rsp + 0x21]
mov qword [rsp + 0x1c0], rbx
mov rcx, rax
mov dword [rsp + 0x20], 0x6c745208
mov dword [rsp + 0x24], 0x56746547
mov dword [rsp + 0x28], 0x69737265
mov word [rsp + 0x2c], 0x6e6f
mov byte [rsp + 0x2e], 0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
je 0x1400369ff
xor edx, edx
lea rcx, [rbp - 0x7c]
mov r8d, 0x110
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp - 0x80]
mov dword [rbp - 0x80], 0x114
call rbx
test eax, eax
jne 0x140036a1f
mov eax, dword [rbp - 0x74]
mov dword [0x1401c8e90], eax
mov rbx, qword [rsp + 0x1c0]
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.140103e40
add rsp, 0x1b0
pop rbp
ret
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x48]
call fcn.140036b20
movzx r8d, byte [rax]
lea rdx, [rax + 1]
xor byte [rdx], r8b
xor byte [rax + 2], r8b
xor byte [rax + 3], r8b
xor byte [rax + 4], r8b
xor byte [rax + 5], r8b
xor byte [rax + 6], r8b
xor byte [rax + 7], r8b
xor byte [rax + 8], r8b
xor byte [rax + 9], r8b
xor byte [rax + 0xa], r8b
xor byte [rax + 0xb], r8b
xor byte [rax + 0xc], r8b
xor byte [rax + 0xd], r8b
xor byte [rax + 0xe], r8b
xor byte [rax + 0xf], r8b
xor byte [rax + 0x10], r8b
xor byte [rax + 0x11], r8b
xor byte [rax + 0x12], r8b
xor byte [rax + 0x13], r8b
xor byte [rax + 0x14], r8b
xor byte [rax + 0x15], r8b
xor byte [rax + 0x16], r8b
xor byte [rax + 0x17], r8b
xor byte [rax + 0x18], r8b
xor byte [rax + 0x19], r8b
xor byte [rax + 0x1a], r8b
xor byte [rax + 0x1b], r8b
xor byte [rax + 0x1c], r8b
xor byte [rax + 0x1d], r8b
xor byte [rax + 0x1e], r8b
xor byte [rax + 0x1f], r8b
xor byte [rax + 0x20], r8b
xor byte [rax + 0x21], r8b
xor byte [rax + 0x22], r8b
xor byte [rax + 0x23], r8b
xor byte [rax + 0x24], r8b
xor byte [rax + 0x25], r8b
xor byte [rax + 0x26], r8b
xor byte [rax + 0x27], r8b
xor byte [rax + 0x28], r8b
xor byte [rax + 0x29], r8b
xor byte [rax + 0x2a], r8b
xor byte [rax + 0x2b], r8b
xor byte [rax + 0x2c], r8b
xor byte [rax + 0x2d], r8b
xor byte [rax + 0x2e], r8b
xor byte [rax + 0x2f], r8b
mov byte [rax + 0x30], 0
call fcn.140004600
lea rdx, [0x1400047e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.14002de10
int3