Function at 0x140127c90
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x140276168]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov r14, qword [rbp + 0x70]
xor esi, esi
mov edi, r9d
mov dword [rsp + 0x60], r9d
mov r13, r8
mov r12, rdx
mov rbx, rcx
mov qword [rsp + 0x40], r14
cmp qword [rcx + 0x98], rsi
je 0x140127d7b
mov rax, qword [rcx + 0x68]
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x30], esi
mov rcx, r12
mov dword [rsp + 0x28], esi
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rsi
call rax
test eax, eax
js 0x1401281b3
mov rax, qword [rbx + 0x70]
xor r9d, r9d
mov rcx, qword [rsp + 0x50]
mov r8d, edi
mov rdx, r13
call rax
mov edi, eax
test eax, eax
js 0x140127d69
mov rax, qword [rbx + 0x10]
lea rdx, [0x140214608]
xor r9d, r9d
lea rcx, [rsp + 0x60]
xor r8d, r8d
call rax
mov edi, eax
test eax, eax
js 0x140127d69
mov rax, qword [rbx + 0x98]
mov r8, r14
mov r9d, dword [rbp + 0x78]
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x50]
mov dword [rsp + 0x20], esi
call rax
mov rcx, qword [rsp + 0x60]
xor edx, edx
mov edi, eax
call qword [rbx + 0x28]
mov rcx, qword [rsp + 0x50]
call qword [rbx + 0x88]
mov eax, edi
jmp 0x1401281b3
mov rax, qword [rcx + 0x18]
lea r8, [rsp + 0x58]
lea rcx, [rsp + 0x68]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rcx
lea rdx, str.HashDigestLength
mov rcx, r12
mov r9d, 4
call rax
test eax, eax
js 0x1401281b3
mov eax, dword [rsp + 0x58]
cmp eax, 0x40
jbe 0x140127dbf
mov eax, 0xc00000bb
jmp 0x1401281b3
add eax, eax
cmp eax, dword [rbp + 0x78]
jae 0x140127dd0
mov eax, 0xc000000d
jmp 0x1401281b3
mov rax, qword [rbx + 0x18]
lea rcx, [rsp + 0x68]
mov dword [rsp + 0x28], esi
lea r8, [rsp + 0x5c]
mov qword [rsp + 0x20], rcx
lea rdx, str.ObjectLength
mov rcx, r12
mov r9d, 4
call rax
test eax, eax
js 0x1401281b3
mov ecx, dword [rsp + 0x58]
mov eax, dword [rsp + 0x5c]
mov qword [rsp + 0x108], r15
lea edi, [rax + rcx*2]
mov qword [rsp + 0x48], rdi
call qword [case.0x1400c272e.15]
mov r8d, edi
xor edx, edx
mov rcx, rax
call qword [case.0x1400c272e.16]
mov r15, rax
test rax, rax
jne 0x140127e3f
mov eax, 0xc0000017
jmp 0x1401281ab
mov r9d, dword [rsp + 0x5c]
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x30], esi
mov r8, r15
mov dword [rsp + 0x28], esi
mov rcx, r12
mov qword [rsp + 0x20], rsi
lea r14, [rax + r9]
mov rax, qword [rbx + 0x68]
call rax
mov edi, eax
test eax, eax
js 0x140128175
mov rax, qword [rbx + 0x70]
xor r9d, r9d
mov r8d, dword [rsp + 0x60]
mov rdx, r13
mov rcx, qword [rsp + 0x50]
call rax
mov edi, eax
test eax, eax
js 0x140127ea4
mov rax, qword [rbx + 0x78]
xor r9d, r9d
mov r8d, dword [rsp + 0x58]
mov rdx, r14
mov rcx, qword [rsp + 0x50]
call rax
mov edi, eax
mov rcx, qword [rsp + 0x50]
call qword [rbx + 0x88]
test edi, edi
js 0x140128175
mov r8d, dword [rsp + 0x58]
mov r9d, esi
mov dword [rsp + 0x70], 0x36363636
mov dword [rbp - 0x50], 0x5c5c5c5c
mov dword [rsp + 0x74], 0x36363636
mov dword [rbp - 0x4c], 0x5c5c5c5c
mov dword [rsp + 0x78], 0x36363636
mov dword [rbp - 0x48], 0x5c5c5c5c
mov dword [rsp + 0x7c], 0x36363636
mov dword [rbp - 0x44], 0x5c5c5c5c
mov dword [rbp - 0x80], 0x36363636
mov dword [rbp - 0x40], 0x5c5c5c5c
mov dword [rbp - 0x7c], 0x36363636
mov dword [rbp - 0x3c], 0x5c5c5c5c
mov dword [rbp - 0x78], 0x36363636
mov dword [rbp - 0x38], 0x5c5c5c5c
mov dword [rbp - 0x74], 0x36363636
mov dword [rbp - 0x34], 0x5c5c5c5c
mov dword [rbp - 0x70], 0x36363636
mov dword [rbp - 0x30], 0x5c5c5c5c
mov dword [rbp - 0x6c], 0x36363636
mov dword [rbp - 0x2c], 0x5c5c5c5c
mov dword [rbp - 0x68], 0x36363636
mov dword [rbp - 0x28], 0x5c5c5c5c
mov dword [rbp - 0x64], 0x36363636
mov dword [rbp - 0x24], 0x5c5c5c5c
mov dword [rbp - 0x60], 0x36363636
mov dword [rbp - 0x20], 0x5c5c5c5c
mov dword [rbp - 0x5c], 0x36363636
mov dword [rbp - 0x1c], 0x5c5c5c5c
mov dword [rbp - 0x58], 0x36363636
mov dword [rbp - 0x18], 0x5c5c5c5c
mov dword [rbp - 0x54], 0x36363636
mov dword [rbp - 0x14], 0x5c5c5c5c
test r8d, r8d
jle 0x14012808c
cmp r8d, 0x10
jb 0x140128056
lea eax, [r8 - 1]
movsxd rcx, eax
lea rdx, [rbp - 0x50]
add rdx, rcx
lea r10, [rbp - 0x50]
lea rax, [rcx + r14]
cmp r10, rax
ja 0x140127fda
cmp rdx, r14
jae 0x140128056
lea rdx, [rsp + 0x70]
add rdx, rcx
lea rcx, [rsp + 0x70]
cmp rcx, rax
ja 0x140127ff1
cmp rdx, r14
jae 0x140128056
mov ecx, r8d
and ecx, 0x8000000f
jge 0x140128003
dec ecx
or ecx, 0xfffffff0
inc ecx
mov eax, r8d
mov rdx, r14
sub eax, ecx
mov rcx, rsi
movsxd r10, eax
lea rax, [rsp + 0x70]
sub rdx, rax
nop dword [rax]
lea rax, [rsp + 0x70]
add r9d, 0x10
add rax, rcx
movdqu xmm1, xmmword [rax + rdx]
movdqu xmm0, xmmword [rax]
pxor xmm0, xmm1
movdqu xmmword [rax], xmm0
movdqu xmm0, xmmword [rbp + rcx - 0x50]
pxor xmm1, xmm0
movdqu xmmword [rbp + rcx - 0x50], xmm1
add rcx, 0x10
cmp rcx, r10
jl 0x140128020
cmp r9d, r8d
jge 0x14012808c
lea rax, [rsp + 0x70]
movsxd rdx, r9d
mov r10, r14
sub r10, rax
sub r8d, r9d
mov r9d, r8d
nop
lea rax, [rsp + 0x70]
add rax, rdx
movzx ecx, byte [rax + r10]
xor byte [rbp + rdx - 0x50], cl
inc rdx
xor byte [rax], cl
sub r9, 1
jne 0x140128070
mov rax, qword [rbx + 0x68]
lea rdx, [rsp + 0x50]
mov r9d, dword [rsp + 0x5c]
mov r8, r15
mov dword [rsp + 0x30], esi
mov rcx, r12
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
call rax
mov edi, eax
test eax, eax
js 0x140128175
mov rax, qword [rbx + 0x70]
lea rdx, [rsp + 0x70]
mov rcx, qword [rsp + 0x50]
xor r9d, r9d
lea r8d, [r9 + 0x40]
call rax
mov rcx, qword [rsp + 0x50]
mov edi, eax
test eax, eax
js 0x14012816c
mov rax, qword [rbx + 0x78]
xor r9d, r9d
mov r8d, dword [rsp + 0x58]
mov rdx, r14
call rax
mov rcx, qword [rsp + 0x50]
mov edi, eax
call qword [rbx + 0x88]
test edi, edi
js 0x140128175
mov rax, qword [rbx + 0x68]
lea rdx, [rsp + 0x50]
mov r9d, dword [rsp + 0x5c]
mov r8, r15
mov dword [rsp + 0x30], esi
mov rcx, r12
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
call rax
mov edi, eax
test eax, eax
js 0x140128175
mov rax, qword [rbx + 0x70]
lea rdx, [rbp - 0x50]
mov rcx, qword [rsp + 0x50]
xor r9d, r9d
lea r8d, [r9 + 0x40]
call rax
mov edi, eax
test eax, eax
js 0x14012815f
mov r8d, dword [rsp + 0x58]
xor r9d, r9d
mov rax, qword [rbx + 0x78]
mov rcx, qword [rsp + 0x50]
lea rdx, [r14 + r8]
call rax
mov edi, eax
mov rcx, qword [rsp + 0x50]
call qword [rbx + 0x88]
jmp 0x140128175
mov rax, qword [rbx + 0x88]
call rax
mov r8d, dword [rbp + 0x78]
mov rdx, r14
mov rcx, qword [rsp + 0x40]
call fcn.1400c7640
mov r8, qword [rsp + 0x48]
xor edx, edx
mov rcx, r15
call fcn.1400c7cf0
call qword [case.0x1400c272e.15]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [case.0x1400c272e.18]
mov eax, edi
mov r15, qword [rsp + 0x108]
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1400c3d30
add rsp, 0x110
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret