Function at 0x1400947a0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov r11, rsp
push rbp
push rbx
push rsi
push rdi
lea rbp, [r11 - 0x57]
sub rsp, 0x88
mov word [rbp - 0x26], 0x7974
mov rsi, r8
mov word [rbp - 0x29], 0x6d45
mov rdi, rdx
mov byte [rbp - 0x27], 0x70
mov rbx, rcx
mov dword [rbp - 0x24], 0x79656b20
mov byte [rbp - 0x20], 0
mov dword [rbp - 0xe], 0x6c207965
mov dword [rbp - 0x17], 0x72726f63
mov word [rbp - 7], 0x6874
mov word [rbp - 0x19], 0x6e49
mov dword [rbp - 0x13], 0x20746365
mov byte [rbp - 0xf], 0x6b
mov word [rbp - 0xa], 0x6e65
mov byte [rbp - 5], 0
mov byte [rbp - 8], 0x67
mov word [rbp + 0xb], 0x636f
mov word [rbp + 8], 0x6220
mov word [rbp], 0x636e
mov dword [rbp + 0x12], 0x687467
mov byte [rbp - 1], 0x49
mov dword [rbp + 3], 0x63657272
mov word [rbp + 0x10], 0x6e65
mov word [rbp + 0xd], 0x206b
mov byte [rbp + 7], 0x74
mov byte [rbp + 0xf], 0x6c
mov byte [rbp + 0xa], 0x6c
mov byte [rbp + 2], 0x6f
test rdx, rdx
je 0x140094d22
lea eax, [r9 - 0x10]
test eax, 0xffffffe7
jne 0x140094d04
cmp r9d, 0x28
je 0x140094d04
movsxd rcx, dword [rbp + 0x7f]
lea eax, [rcx - 0x10]
test eax, 0xffffffe7
jne 0x140094d40
cmp ecx, 0x28
je 0x140094d40
mov qword [r11 + 8], r12
mov r8, rcx
mov qword [r11 + 0x18], r13
mov rdx, rsi
mov dword [rbx + 0x3d0], ecx
lea rcx, [rbx + 0x3d8]
mov qword [r11 + 0x20], r14
mov qword [r11 - 0x28], r15
mov dword [rbx + 0x3cc], r9d
call fcn.1401007b0
movsxd r8, dword [rbx + 0x3d0]
lea rcx, [rbx + 0x3f8]
mov rdx, rsi
call fcn.1401007b0
mov eax, dword [rbx + 0x3cc]
mov ecx, dword [rbx + 0x3d0]
cmp eax, 0x10
je 0x1400948f3
cmp eax, 0x18
mov eax, 0xe
jne 0x14009490d
cmp ecx, 0x20
mov edx, 0xc
cmovne eax, edx
jmp 0x14009490d
cmp ecx, 0x10
jne 0x1400948fd
lea eax, [rcx - 6]
jmp 0x14009490d
cmp ecx, 0x18
mov eax, 0xe
mov edx, 0xc
cmove eax, edx
mov dword [rbx + 0x3d4], eax
xor r14d, r14d
mov eax, ecx
mov ecx, dword [rbx + 0x3d4]
cdq
and edx, 3
add eax, edx
sar eax, 2
movsxd r12, eax
mov r15, r12
test ecx, ecx
js 0x14009495d
lea rsi, [rbx + 0xc]
test r12d, r12d
jle 0x14009494b
mov r8, r12
xor edx, edx
shl r8, 2
mov rcx, rsi
call fcn.140100e60
mov ecx, dword [rbx + 0x3d4]
inc r14d
add rsi, 0x20
cmp r14d, ecx
jle 0x140094935
xor esi, esi
test ecx, ecx
js 0x140094996
lea r14, [rbx + 0x1ec]
nop word [rax + rax]
test r12d, r12d
jle 0x140094986
mov r8, r12
xor edx, edx
shl r8, 2
mov rcx, r14
call fcn.140100e60
mov ecx, dword [rbx + 0x3d4]
inc esi
add r14, 0x20
cmp esi, ecx
jle 0x140094970
mov eax, dword [rbx + 0x3cc]
lea esi, [rcx + 1]
cdq
imul esi, r12d
and edx, 3
add eax, edx
lea rdx, [rbx + 0x418]
sar eax, 2
movsxd r13, eax
test eax, eax
jle 0x1400949f8
mov r8d, r13d
nop dword [rax]
movzx ecx, byte [rdi]
lea rdx, [rdx + 4]
shl ecx, 0x18
lea rdi, [rdi + 4]
mov dword [rdx - 4], ecx
movzx eax, byte [rdi - 3]
shl eax, 0x10
or eax, ecx
mov dword [rdx - 4], eax
movzx ecx, byte [rdi - 2]
shl ecx, 8
or ecx, eax
mov dword [rdx - 4], ecx
movzx eax, byte [rdi - 1]
or eax, ecx
mov dword [rdx - 4], eax
sub r8, 1
jne 0x1400949c0
xor r10d, r10d
test r13d, r13d
jle 0x140094a59
xor r11d, r11d
lea r9, [rbx + 0x418]
nop word [rax + rax]
cmp r10d, esi
jge 0x140094b85
mov eax, r10d
inc r11
cdq
inc r10d
idiv r12d
movsxd rcx, eax
movsxd r8, edx
lea rdx, [r8 + rcx*8]
mov ecx, dword [r9]
mov dword [rbx + rdx*4 + 0xc], ecx
mov ecx, dword [rbx + 0x3d4]
sub ecx, eax
movsxd rax, ecx
lea rcx, [r8 + rax*8]
mov eax, dword [r9]
add r9, 4
mov dword [rbx + rcx*4 + 0x1ec], eax
cmp r11, r13
jl 0x140094a10
cmp r10d, esi
jge 0x140094b85
lea r11, [0x140173a30]
lea r15, [0x140000000]
mov r8d, dword [rbx + r13*4 + 0x414]
movsxd rdx, r8d
mov rax, rdx
sar rax, 0x10
movzx ecx, al
movsx eax, byte [r11]
inc r11
mov qword [rbp + 0x67], r11
movsx r9d, byte [rcx + r15 + 0x170830]
xor r9d, eax
mov rax, rdx
sar rax, 8
movzx ecx, al
shl r9d, 8
movzx eax, byte [rcx + r15 + 0x170830]
xor r9d, eax
movzx eax, dl
shl r9d, 8
movzx eax, byte [rax + r15 + 0x170830]
xor r9d, eax
mov eax, r8d
shr rax, 0x18
shl r9d, 8
movzx eax, byte [rax + r15 + 0x170830]
xor r9d, eax
xor dword [rbx + 0x418], r9d
cmp r13d, 8
je 0x140094c50
cmp r13, 1
jle 0x140094b1f
lea rcx, [rbx + 0x41c]
lea rdx, [r13 - 1]
nop dword [rax]
nop word [rax + rax]
mov eax, dword [rcx - 4]
xor dword [rcx], eax
lea rcx, [rcx + 4]
sub rdx, 1
jne 0x140094b10
test r13d, r13d
jle 0x140094b79
lea r9, [rbx + 0x418]
xor r11d, r11d
nop
cmp r10d, esi
jge 0x140094b82
mov eax, r10d
inc r11
cdq
inc r10d
idiv r12d
movsxd rcx, eax
movsxd r8, edx
lea rdx, [r8 + rcx*8]
mov ecx, dword [r9]
mov dword [rbx + rdx*4 + 0xc], ecx
mov ecx, dword [rbx + 0x3d4]
sub ecx, eax
movsxd rax, ecx
lea rcx, [r8 + rax*8]
mov eax, dword [r9]
add r9, 4
mov dword [rbx + rcx*4 + 0x1ec], eax
cmp r11, r13
jl 0x140094b30
mov r11, qword [rbp + 0x67]
cmp r10d, esi
jl 0x140094a70
mov r15, r12
mov r13, qword [rsp + 0xc0]
mov edi, 1
mov r12, qword [rsp + 0xb0]
cmp dword [rbx + 0x3d4], edi
jle 0x140094c30
lea rsi, [rbx + 0x20c]
nop dword [rax]
test r15, r15
jle 0x140094c22
mov r10, rsi
lea r14, [0x140000000]
mov r11, r15
nop dword [rax]
nop word [rax + rax]
mov eax, dword [r10]
lea r10, [r10 + 4]
mov edx, eax
movsxd r9, eax
shr rdx, 0x18
mov rax, r9
sar rax, 0x10
movzx ecx, al
mov rax, r9
sar rax, 8
mov r8d, dword [r14 + rdx*4 + 0x172a30]
xor r8d, dword [r14 + rcx*4 + 0x172e30]
movzx ecx, al
movzx eax, r9b
xor r8d, dword [r14 + rcx*4 + 0x173230]
xor r8d, dword [r14 + rax*4 + 0x173630]
mov dword [r10 - 4], r8d
sub r11, 1
jne 0x140094bd0
inc edi
add rsi, 0x20
cmp edi, dword [rbx + 0x3d4]
jl 0x140094bb0
mov r15, qword [rsp + 0x80]
mov r14, qword [rsp + 0xc8]
mov byte [rbx + 8], 1
add rsp, 0x88
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rcx, [rbx + 0x41c]
mov edx, 3
nop dword [rax]
mov eax, dword [rcx - 4]
xor dword [rcx], eax
lea rcx, [rcx + 4]
sub rdx, 1
jne 0x140094c60
mov eax, dword [rbx + 0x424]
mov ecx, eax
movsxd rdx, eax
shr rcx, 0x18
mov rax, rdx
sar rax, 0x10
movsx r8d, byte [rcx + r15 + 0x170830]
movzx ecx, al
shl r8d, 8
movzx eax, byte [rcx + r15 + 0x170830]
xor r8d, eax
mov rax, rdx
sar rax, 8
shl r8d, 8
movzx ecx, al
movzx eax, byte [rcx + r15 + 0x170830]
xor r8d, eax
movzx eax, dl
shl r8d, 8
movzx eax, byte [rax + r15 + 0x170830]
xor r8d, eax
xor dword [rbx + 0x428], r8d
cmp r13, 5
jle 0x140094b1f
lea rax, [rbx + 0x42c]
lea rdx, [r13 - 5]
nop word [rax + rax]
mov ecx, dword [rax - 4]
xor dword [rax], ecx
lea rax, [rax + 4]
sub rdx, 1
jne 0x140094cf0
jmp 0x140094b24
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 0x17]
call fcn.1400961e0
lea rdx, [0x1401a61a8]
lea rcx, [rbp + 0x17]
call fcn.1400ff5dc
int3
lea rdx, [rbp - 0x29]
lea rcx, [rbp + 0x17]
call fcn.1400961e0
lea rdx, [0x1401a61a8]
lea rcx, [rbp + 0x17]
call fcn.1400ff5dc
int3
lea rdx, [rbp - 1]
lea rcx, [rbp + 0x17]
call fcn.1400961e0
lea rdx, [0x1401a61a8]
lea rcx, [rbp + 0x17]
call fcn.1400ff5dc
int3