Function at 0x1400130d7
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push rbp
push rbx
cmp dl, spl
push rdi
xchg cl, bpl
cdqe
and dil, r13b
push r15
shl edi, cl
bts ecx, ecx
lea rbp, [rsp - 0xa8]
mov cl, r14b
movzx ecx, ax
sub rsp, 0x1a8
bsr rdi, rcx
shl cl, 0x24
mov dword [rbp + 0xd0], 0x69466457
movzx eax, r8w
bsf cx, di
sbb di, r8w
movabs rdi, 0xca2ffb2e8aeebe02
shld ax, bp, 1
cmp si, 0xff29
mov qword [rbp - 0x28], rdi
xadd ah, ch
mov rax, qword [rbp - 0x28]
mov dword [rbp + 0xd4], 0x7265746c
movsx cx, r12b
xor rax, qword [rbp + 0xd0]
cmc
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x28]
sbb rcx, r9
shl cx, 0x20
sbb cl, 0x3f
mov qword [rbp + 0xd0], 0x7379732e
rcl cx, 0xb7
add ch, 0x10
add cx, sp
xor rax, qword [rbp + 0xd0]
sar cl, cl
cmovle cx, r12w
bsf ecx, r15d
mov qword [rbp - 0x18], rax
shr ax, 0x94
sub ebx, ebx
and ecx, eax
mov qword [rbp + 0xd0], 2
cmovb eax, esi
ror cl, cl
mov ecx, ebx
mov rax, qword [rbp + 0xd0]
movsx rax, bp
bswap ax
nop word [rax + rax]
xor al, sil
movzx eax, r10w
mov rax, qword [rbp - 0x28]
xor qword [rbp + rcx*8 - 0x20], rax
cdqe
seta al
bswap ax
inc rcx
mov rax, qword [rbp + 0xd0]
stc
cmp r15w, 0x73a7
jmp 0x1400131f2
cmp rcx, rax
jmp 0x1400131fa
jb 0x1400131cb
mov qword [rsp + 0x1a0], rsi
movsx ecx, cx
mov cx, 0xfd14
lea rcx, [rbp - 0x20]
mov qword [rsp + 0x188], r14
jmp 0x140013220
call fcn.140001930
mov qword [rbp + 0x70], rax
clc
cmovs r15d, esi
mov r15, rax
jmp 0x140013236
test rax, rax
je 0x140013d8e
mov qword [rbp - 0x10], rdi
movzx rcx, r13w
mov rcx, qword [rbp - 0x10]
shrd eax, r15d, 9
mov rax, qword [rbp - 0x10]
mov dword [rbp + 0xd0], 0x38203834
stc
clc
mov dword [rbp + 0xd4], 0x44302042
test sil, bpl
stc
clc
xor rcx, qword [rbp + 0xd0]
mov dword [rbp + 0xd0], 0x3f203f20
stc
test r11, rax
jmp 0x140013289
mov dword [rbp + 0xd4], 0x3f203f20
xor rax, qword [rbp + 0xd0]
mov qword [rbp], rax
sbb ax, r12w
rcr al, cl
mov rax, qword [rbp - 0x10]
cmc
mov dword [rbp + 0xd0], 0x20464620
cmp r13d, ebp
mov dword [rbp + 0xd4], 0x3530
cmp spl, 0xa8
xor rax, qword [rbp + 0xd0]
cmc
cmp rax, 0x7a1b13a8
mov qword [rbp + 8], rax
shrd ax, cx, 9
mov qword [rbp - 8], rcx
btc ax, 0x8e
and ax, 0x6abc
add al, bpl
mov rcx, rbx
shld ax, ax, 0x25
or al, 0x9f
bts ax, r9w
mov qword [rbp + 0xd0], 3
stc
sar ah, cl
movzx eax, r8w
mov rax, qword [rbp + 0xd0]
mov ax, r13w
sub rax, r11
mov rax, qword [rbp - 0x10]
jmp 0x140013327
xor qword [rbp + rcx*8 - 8], rax
mov ax, r8w
inc rcx
setg al
not ax
rcr al, 0x8b
mov rax, qword [rbp + 0xd0]
cmp rcx, rax
jmp 0x14001334b
jb 0x14001331b
mov qword [rsp + 0x78], rdi
sal ah, cl
or al, r12b
rcl al, 0xb3
mov rcx, rbx
movzx eax, cx
mov rax, qword [rsp + 0x78]
mov qword [rbp + 0xd0], 0x45474150
test r11w, r8w
test r11d, 0x3226af9a
jmp 0x140013384
xor rax, qword [rbp + 0xd0]
clc
mov qword [rbp - 0x80], rax
mov qword [rbp + 0xd0], 1
mov rax, qword [rbp + 0xd0]
btc ax, 8
neg ax
cwde
mov rax, qword [rsp + 0x78]
cmp bl, 0x27
xor qword [rbp + rcx*8 - 0x80], rax
movsx ax, r14b
movzx eax, r13w
movsx rax, r9w
inc rcx
sub ax, bp
mov rax, qword [rbp + 0xd0]
cmc
stc
cmp rcx, rax
jmp 0x1400133dc
jb 0x1400133ab
xor r9d, r9d
movsx r8w, al
movsx r8d, cx
lea r8, [rbp - 8]
lea rdx, [rbp - 0x80]
mov cx, 0xca36
mov rcx, r15
jmp 0x140013402
call fcn.14000f363
test rax, rax
jmp 0x14001340f
je 0x140013d8e
mov ecx, dword [rax + 3]
sub edx, 0xc30de83a
add ecx, 7
xadd dh, dl
movsxd rdx, ecx
cmp r14d, r9d
add rdx, rax
jmp 0x140013432
je 0x140013d8e
lea r14, [rdx - 8]
test r14, r14
jmp 0x140013444
je 0x140013d8e
mov dword [rbp + 0xd0], 0x6e0049
xorps xmm0, xmm0
dec ch
ror cx, 0xaa
sub ch, 0x8c
mov dword [rbp + 0xd4], 0x650074
add al, 0xbb
ror ax, cl
bsf cx, r12w
mov rcx, rbx
seto al
movups xmmword [rbp + 0x60], xmm0
shl al, 0x84
mov qword [rbp + 0x30], rdi
xor ah, al
mov al, r15b
cbw
mov rax, qword [rbp + 0x30]
cmp rsi, 0x12bc5925
xor rax, qword [rbp + 0xd0]
mov qword [rbp + 0x38], rax
adc al, 0x88
mov rax, qword [rbp + 0x30]
mov dword [rbp + 0xd0], 0x20006c
test r8b, sil
mov dword [rbp + 0xd4], 0x6f0043
test r12, rbx
xor rax, qword [rbp + 0xd0]
cmp r12d, r11d
test r10b, 0x28
mov qword [rbp + 0x40], rax
mov rax, qword [rbp + 0x30]
cmp r12b, 0xad
mov dword [rbp + 0xd0], 0x700072
mov dword [rbp + 0xd4], 0x72006f
cmp r10b, r12b
xor rax, qword [rbp + 0xd0]
mov qword [rbp + 0x48], rax
test bh, 0x9c
ror al, cl
sete al
mov rax, qword [rbp + 0x30]
jmp 0x140013514
mov dword [rbp + 0xd0], 0x740061
test spl, r10b
mov dword [rbp + 0xd4], 0x6f0069
xor rax, qword [rbp + 0xd0]
test r8w, 0xbe95
cmc
mov qword [rbp + 0x50], rax
bt ax, r10w
adc ax, 0x1c27
stc
mov rax, qword [rbp + 0x30]
stc
test r14b, 0x18
mov qword [rbp + 0xd0], 0x6e
stc
xor rax, qword [rbp + 0xd0]
mov qword [rbp + 0x58], rax
mov qword [rbp + 0xd0], 5
lahf
ror ah, 0xbf
mov rax, qword [rbp + 0xd0]
cmp r10b, r13b
bsr rax, r12
and ax, r15w
mov qword [rsp + 0x198], r12
mov qword [rsp + 0x190], r13
or ah, 0x83
btr ax, r15w
nop word [rax + rax]
mov rax, qword [rbp + 0x30]
clc
test eax, 0x96252b00
xor qword [rbp + rcx*8 + 0x38], rax
movsx eax, dx
not rax
movsxd rax, r15d
inc rcx
sar rax, cl
mov rax, qword [rbp + 0xd0]
test ax, dx
test rbx, 0xffffffff833d2e85
cmp rcx, rax
jb 0x1400135a6
mov rcx, qword [0x140006080]
btr ax, 0xab
test r9b, dl
sal ah, cl
lea r13, [0x1400060b0]
bts r9w, ax
jmp 0x140013600
movabs r12, 0x69c02f341fcea2b8
movzx r11d, ax
lea r9, [0x1400060c0]
test r14b, dl
sar r10b, cl
mov rax, r12
rcl r8w, 0xa3
mov r8d, ebx
xchg qword [rbp - 0x68], rax
bt ax, bp
not dx
adc r10, rcx
xchg qword [rbp + 0xd8], rcx
rol eax, 0x91
cdq
bts r10d, r12d
mov rcx, qword [rbp + 0xd8]
cmp cx, 0x931e
movsxd r10, esi
mov rdx, r13
or r10b, r12b
xadd r11w, ax
mov rax, qword [rbp - 0x68]
bts r11, rbp
xor rcx, rax
rol r10b, 0x8f
cmovne r10d, r15d
mov qword [rbp + 0xd8], rcx
mov cx, 0xbb8c
mov r10, qword [rbp + 0xd8]
shl ax, cl
nop word [rax + rax]
mov rcx, qword [rdx]
not r11w
movzx eax, r9w
lea r11, [0x140000000]
rcr ax, 0xd
rcl eax, cl
mov rax, r12
xchg qword [rbp - 0x60], rax
cmp dx, 0x6bb6
xchg qword [rbp + 0xe0], rcx
clc
mov rcx, qword [rbp + 0xe0]
or al, r11b
mov rax, qword [rbp - 0x60]
stc
clc
xor rcx, rax
lahf
dec ax
mov qword [rbp + 0xe0], rcx
cmp rsp, r14
mov rcx, qword gs:[0x188]
xor al, dil
shld ax, dx, 0xa8
mov rax, qword [rbp + 0xe0]
clc
cmc
cmp al, 0x88
cmp rax, rcx
jmp 0x1400136ff
je 0x140013745
inc r8d
test dx, dx
jmp 0x140013710
add rdx, 8
cmp rdx, r9
jmp 0x14001371c
jl 0x14001368e
sub r9d, r9d
lea rdx, [rbp + 0x38]
sub r8d, r8d
seta ch
xchg cl, ch
mov cl, sil
lea rcx, [rbp + 0x60]
jmp 0x14001373d
call r10
jmp 0x14001387b
movsxd rax, r8d
cdq
shr ch, 0x2f
adc cl, r12b
mov r9d, 0x200
sal rcx, cl
mov qword [rsp + 0x38], rbx
shld cx, cx, 0xae
xor r8d, r8d
xor dl, cl
mov qword [rsp + 0x30], rbx
lea rdx, [rax*8]
shld rax, rsi, 0x19
mov rax, r12
mov rcx, qword [rdx + r11 + 0x6018]
stc
cmp r9b, r11b
xchg qword [rbp - 0x58], rax
cbw
test al, r10b
rcl rax, cl
xchg qword [rbp + 0xe8], rcx
xor cl, bl
btr rax, r8
movsx eax, r10w
mov rcx, qword [rbp + 0xe8]
mov rax, qword [rbp - 0x58]
test r10w, di
xor rcx, rax
sub ah, 0xaa
add eax, esp
sal ah, cl
mov qword [rbp + 0xe8], rcx
movzx cx, r9b
not cx
shld ax, r8w, 0x2d
mov rcx, r10
bt ax, 0x8f
movsx ax, dh
mov rax, qword [rbp + 0xe8]
clc
mov rdx, qword [rdx + r11 + 0x6120]
jmp 0x1400137f8
mov qword [0x140006010], rax
mov rax, r12
stc
clc
xchg qword [rbp - 0x50], rax
btr ax, bx
movsx ax, r12b
bsf ax, sp
xchg qword [rsp + 0x40], rdx
rcl eax, 0x37
sub dx, 0xe393
mov rdx, qword [rsp + 0x40]
sub ax, 0x9b2
nop
shrd rax, r14, 0xbc
mov rax, qword [rbp - 0x50]
test r14b, r12b
clc
xor rdx, rax
cwde
lea rax, [rbp + 0x38]
jmp 0x140013847
mov qword [rsp + 0x28], rax
cmovbe ax, dx
cwde
movsx eax, r13w
lea rax, [rbp + 0x60]
mov qword [rsp + 0x40], rdx
movsx rdx, bp
mov rdx, qword [rsp + 0x40]
jmp 0x14001386c
mov qword [rsp + 0x20], rax
jmp 0x140013876
call int.140005660
mov rdi, qword [r14]
shr sil, 0xb6
mov esi, ebx
test sil, 0x11
cmp r14, rdi
je 0x140013b79
lea r15, [0x140000000]
bts r9, rdi
nop dword [rax]
nop dword [rax + rax]
bsf r9, r15
mov rcx, qword [0x1400060e0]
bts r10d, r13d
shr r8d, cl
mov ax, r14w
lea r10, [rdi + 0x30]
movsx r9, di
sal r11b, cl
clc
mov rax, r12
sbb r11b, spl
or r8, rsi
movsxd r9, esi
xchg qword [rbp - 0x48], rax
cdqe
btr r9, 0x23
xchg qword [rsp + 0x48], rcx
cmp r8b, r14b
mov rcx, qword [rsp + 0x48]
mov rax, qword [rbp - 0x48]
not r8b
or r9, 0xe8483ba
inc r11b
xor rcx, rax
mov rax, rbx
mov qword [rsp + 0x48], rcx
bswap edx
movsx r11w, cl
mov r11, qword [rsp + 0x48]
sub r9, r13
cmp bl, r15b
shrd edx, r12d, 0x94
lea r9, [rax*8]
cmc
mov rcx, r12
mov rdx, qword [r9 + r13]
xchg qword [rbp - 0x40], rcx
shl r8b, cl
xchg qword [rsp + 0x50], rdx
sal r8w, 0xa3
mov r8, qword [rsp + 0x50]
stc
movsx dx, r8b
mov rdx, qword [rbp - 0x40]
xor r8, rdx
movsx rdx, r12w
shl edx, 0xb3
rcl edx, 0xa8
mov qword [rsp + 0x50], r8
adc r8b, r8b
mov r8, qword gs:[0x188]
dec edx
mov rdx, qword [rsp + 0x50]
cmp rdx, r8
jmp 0x14001397e
je 0x1400139bc
inc rax
cmp r12b, r8b
jmp 0x140013992
cmp rax, 2
jmp 0x14001399b
jl 0x140013921
xor r9d, r9d
lea rdx, [rbp + 0x60]
mov rcx, r10
lea r8d, [r9 + 1]
jmp 0x1400139b4
call r11
jmp 0x140013aab
mov rcx, qword [r9 + r15 + 0x6018]
mov rax, r12
bts edx, r14d
bt dx, bx
xchg qword [rbp - 0x38], rax
bt dx, 0x1d
xchg qword [rsp + 0x58], rcx
rol dx, cl
mov rcx, qword [rsp + 0x58]
sub r8d, r8d
mov rax, qword [rbp - 0x38]
sal dl, cl
cmp dl, r15b
xor rcx, rax
movsx eax, r9w
mov qword [rsp + 0x38], rbx
jmp 0x140013a07
mov qword [rsp + 0x58], rcx
movsx cx, bpl
cwd
btc rax, r10
mov rcx, r11
mov rax, qword [rsp + 0x58]
sal dx, cl
mov rdx, qword [r9 + r15 + 0x6120]
shl r9b, 0x90
mov r9d, 0x200
mov qword [0x140006010], rax
test r13b, r8b
bsr rax, r12
mov rax, r12
xchg qword [rbp - 0x30], rax
xchg qword [rsp + 0x60], rdx
mov rdx, qword [rsp + 0x60]
mov rax, qword [rbp - 0x30]
cmc
test r11w, ax
xor rdx, rax
jmp 0x140013a68
mov qword [rsp + 0x30], 1
cmovne ax, sp
bswap rax
lea rax, [rbp + 0x60]
jmp 0x140013a81
mov qword [rsp + 0x60], rdx
movzx dx, ah
setl dl
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x28], rax
jmp 0x140013a9c
mov qword [rsp + 0x20], r10
jmp 0x140013aa6
call int.140005660
test eax, eax
jne 0x140013b4d
mov rcx, qword [rdi + 8]
lahf
not al
bswap ax
xorps xmm0, xmm0
nop
mov rax, qword [rdi]
jmp 0x140013aca
inc esi
cmc
movups xmmword [rsp + 0x68], xmm0
test r15b, 0x8b
test r8b, al
stc
mov qword [rcx], rax
clc
adc ecx, r14d
rcr ch, 2
mov rcx, qword [rdi]
movzx ax, al
movsx rax, r10w
sal eax, cl
mov rax, qword [rdi + 8]
movups xmmword [rsp + 0x78], xmm0
mov qword [rcx + 8], rax
movsx ax, r8b
sbb al, 0x8f
movups xmmword [rbp - 0x78], xmm0
movups xmmword [rbp - 0x68], xmm0
and ax, 0x7823
btr ax, sp
movups xmmword [rbp - 0x58], xmm0
cmovg ax, r9w
movups xmmword [rbp - 0x48], xmm0
neg ax
xadd al, al
rcl ax, 0x27
movups xmmword [rbp - 0x38], xmm0
shld ax, si, 0x39
neg ax
movups xmmword [rbp - 0x28], xmm0
mov rax, 0xfffffffffb3dee03
movups xmmword [rbp - 0x18], xmm0
rcl ax, 0x3e
not al
mov rax, qword [rdi]
btc rdi, 0xb0
ror di, 0xba
mov rdi, rax
test r9d, r13d
jmp 0x140013b64
cmp r14, rax
jmp 0x140013b6c
jne 0x1400138ac
mov r15, qword [rbp + 0x70]
adc dl, r9b
mov r13, qword [rsp + 0x190]
setnp r12b
movabs rdx, 0xca2ffb2e8aeebe02
and ecx, r11d
movzx r12, r8w
mov r12, qword [rsp + 0x198]
shrd cx, bx, 0xab
shl ecx, cl
mov rcx, rbx
mov qword [rbp + 0x10], rdx
mov rax, rcx
mov rax, qword [rbp + 0x10]
cmp r8, 0xffffffffadad50ba
cmp r15b, bpl
mov dword [rbp + 0xd0], 0x30204646
mov dword [rbp + 0xd4], 0x203f2035
cmp r8b, r13b
stc
xor rax, qword [rbp + 0xd0]
cmp r11b, r13b
cmp r8, 0x58968db6
mov qword [rbp + 0x18], rax
shl al, cl
mov rax, qword [rbp + 0x10]
mov dword [rbp + 0xd0], 0x203f203f
mov dword [rbp + 0xd4], 0x3834203f
test r11w, di
test r12b, 0x3e
xor rax, qword [rbp + 0xd0]
mov qword [rbp + 0x20], rax
sar ax, cl
sbb al, bh
mov rax, qword [rbp + 0x10]
jmp 0x140013c25
mov dword [rbp + 0xd0], 0x20393320
test di, 0xe0ba
mov dword [rbp + 0xd4], 0x3131
cmp rax, rdi
stc
xor rax, qword [rbp + 0xd0]
cmp dil, r8b
test dx, 0xd71f
stc
mov qword [rbp + 0x28], rax
or ah, 0xa6
movzx ax, al
mov qword [rbp + 0xd0], 3
xor ax, 0xb084
sar ax, cl
mov rax, qword [rbp + 0xd0]
nop word [rax + rax]
xor ax, bp
bsr eax, eax
cwde
mov rax, qword [rbp + 0x10]
cmp r12d, edx
xor qword [rbp + rcx*8 + 0x18], rax
setne ah
mov al, bpl
inc rcx
btr eax, 0xa0
or al, r11b
mov rax, qword [rbp + 0xd0]
cmp rcx, rax
jb 0x140013c87
mov qword [rbp - 0x78], rdx
mov rax, qword [rbp - 0x78]
jmp 0x140013cc0
mov qword [rbp + 0xd0], 0x45474150
test bpl, 0x10
xor rax, qword [rbp + 0xd0]
jmp 0x140013ce2
mov qword [rbp - 0x70], rax
rcl ah, cl
mov qword [rbp + 0xd0], 1
ror al, cl
mov rax, qword [rbp + 0xd0]
nop dword [rax + rax]
mov rax, qword [rbp - 0x78]
cmp r9, r12
xor qword [rbp + rbx*8 - 0x70], rax
inc rbx
mov rax, qword [rbp + 0xd0]
cmc
cmp rbx, rax
jb 0x140013d04
sub r9d, r9d
cwd
lea r8, [rbp + 0x18]
seto cl
mov dl, dl
lea rdx, [rbp - 0x70]
movsx cx, r11b
movzx rcx, r8w
movzx ecx, r11w
mov rcx, r15
jmp 0x140013d4b
call fcn.14000f363
test rax, rax
jmp 0x140013d58
je 0x140013d8e
mov ecx, dword [rax + 2]
add ecx, 6
dec dx
or dl, 0xb9
movsxd rdx, ecx
jmp 0x140013d72
add rdx, rax
jmp 0x140013d7a
je 0x140013d8e
sub dword [rdx], esi
mov al, 1
jmp 0x140013d89
jmp 0x140013d99
sub al, al
clc
bts r14w, di
rcl r15, cl
mov r14, qword [rsp + 0x188]
sub r15b, r15b
mov rsi, qword [rsp + 0x1a0]
not bx
add rsp, 0x1a8
movzx di, r14b
pop r15
xchg bl, bpl
mov bh, 0x3a
movsx rdi, cx
pop rdi
movsxd rbx, ebx
pop rbx
movzx rbp, sp
xchg bpl, bpl
setge bpl
pop rbp
jmp 0x140013ddd
ret