Function at 0x1401bfb20
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
xor r12b, r12b
mov r13d, r8d
xor ebx, ebx
mov r15d, edx
mov edi, 0xe
call fcn.140140f70
cmp dword [rax + 0x30], 0xa
jb 0x1401bfc38
mov dword [rsp + 0x58], 0x640053
mov ecx, ebx
mov dword [rsp + 0x5c], 0x67006c
mov dword [rsp + 0x60], 0x6b006d
mov dword [rsp + 0x64], 0x270061
mov dword [rsp + 0x68], 0x68006c
mov dword [rsp + 0x6c], 0x6a007e
mov dword [rsp + 0x70], 0x6b002c
mov dword [rsp + 0x74], 0x66006f
mov dword [rsp + 0x78], 0x74007c
mov dword [rsp + 0x7c], 0x330076
mov dword [rbp - 0x80], 0x730075
mov dword [rbp - 0x7c], 0x720062
mov dword [rbp - 0x78], 0x39006a
mov dword [rbp - 0x74], 0x2b002b
mov dword [rbp - 0x70], 0x7c003c
mov dword [rbp - 0x6c], 0x6b006a
mov dword [rbp - 0x68], 0x4c0045
mov dword [rbp - 0x64], 0x570052
mov dword [rbp - 0x60], 0x50057
mov dword [rbp - 0x5c], 0x41000e
mov dword [rbp - 0x58], 0xc0008
mov dword [rbp - 0x54], 0x2004e
mov dword [rbp - 0x50], 2
movsxd rax, ecx
xor word [rsp + rax*2 + 0x58], cx
inc ecx
cmp ecx, 0x2d
jb 0x1401bfc11
mov r8d, edi
mov word [rbp - 0x4e], bx
lea rdx, [rsp + 0x58]
xor ecx, ecx
call fcn.1401a8110
call fcn.1401a9e40
lea rdx, [rbp + 0xd8]
mov qword [rbp + 0x78], rbx
lea rcx, [rbp - 8]
mov byte [rbp + 0xd8], r12b
mov qword [rbp - 8], rbx
mov qword [rbp + 8], rbx
mov qword [rbp + 0x10], 0xf
call fcn.14013eec4
lea rdx, [rbp + 0xd8]
mov byte [rbp + 0xd8], r12b
lea rcx, [rbp - 0x28]
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x10], 0xf
call fcn.14013eec4
lea rdx, [rbp + 0xd8]
mov byte [rbp + 0xd8], r12b
lea rcx, [rbp - 0x48]
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x30], 0xf
call fcn.14013eec4
call fcn.140141104
mov r14, rax
call fcn.140140f70
mov qword [rbp + 0x58], rbx
mov qword [rbp + 0x68], rbx
mov qword [rbp + 0x70], rbx
lea rdi, [rax + 0x42d0]
cmp qword [rdi + 0x18], 0x10
mov rsi, qword [rdi + 0x10]
jb 0x1401bfcdf
mov rdi, qword [rdi]
cmp rsi, 0x10
jae 0x1401bfcf3
movups xmm0, xmmword [rdi]
mov ebx, 0xf
movups xmmword [rbp + 0x58], xmm0
jmp 0x1401bfd68
movabs rax, 0x7fffffffffffffff
mov rbx, rsi
or rbx, 0xf
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1401bfd47
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1401c0728
mov rcx, rax
call fcn.1403caaf4
mov rcx, rax
test rax, rax
je 0x1401c072e
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1401bfd55
test rcx, rcx
je 0x1401bfd53
call fcn.1403caaf4
jmp 0x1401bfd55
xor eax, eax
lea r8, [rsi + 1]
mov qword [rbp + 0x58], rax
mov rdx, rdi
mov rcx, rax
call fcn.1403cc5a0
cmp rbx, 0x10
mov qword [rbp + 0x70], rbx
lea rdi, [rbp + 0x58]
mov qword [rbp + 0x68], rsi
cmovae rdi, qword [rbp + 0x58]
xor ebx, ebx
mov ecx, ebx
mov dword [rsp + 0x40], 0x26387225
mov dword [rsp + 0x44], 0x6e233f77
mov dword [rsp + 0x48], 0x632c32
nop dword [rax]
movsxd rax, ecx
xor byte [rsp + rax + 0x40], cl
inc ecx
cmp ecx, 0xb
jb 0x1401bfda0
lea rdx, [rsp + 0x40]
mov byte [rsp + 0x4b], bl
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], 0xf
call fcn.14013eec4
mov rax, qword [rbp + 0xc0]
lea r8, [rsp + 0x58]
mov dword [rsp + 0x30], r13d
lea rdx, [rbp + 0x18]
mov dword [rsp + 0x28], r15d
mov r9, rdi
mov rcx, r14
mov qword [rsp + 0x20], rax
call fcn.1401a5020
mov rdx, qword [rbp + 0x70]
cmp rdx, 0x10
jb 0x1401bfe39
mov rcx, qword [rbp + 0x58]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401bfe34
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401c072e
call fcn.1403cad84
mov qword [rbp + 0x68], rbx
mov qword [rbp + 0x70], 0xf
mov byte [rbp + 0x58], bl
call fcn.140140ddc
cmp qword [rbp + 0x30], 0x10
lea rsi, [rbp + 0x18]
mov r14, qword [rbp + 0x18]
mov rdi, qword [rbp + 0x28]
setae r15b
cmovae rsi, r14
mov qword [rbp + 0x38], rbx
mov qword [rbp + 0x48], rbx
mov qword [rbp + 0x50], rbx
cmp rdi, 0x10
jae 0x1401bfe89
movups xmm0, xmmword [rsi]
mov qword [rbp + 0x50], 0xf
movups xmmword [rbp + 0x38], xmm0
jmp 0x1401bff04
movabs rax, 0x7fffffffffffffff
mov rbx, rdi
or rbx, 0xf
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1401bfedd
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1401c073a
mov rcx, rax
call fcn.1403caaf4
mov rcx, rax
test rax, rax
je 0x1401c0734
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1401bfeeb
test rcx, rcx
je 0x1401bfee9
call fcn.1403caaf4
jmp 0x1401bfeeb
xor eax, eax
lea r8, [rdi + 1]
mov qword [rbp + 0x38], rax
mov rdx, rsi
mov rcx, rax
call fcn.1403cc5a0
mov qword [rbp + 0x50], rbx
xor ebx, ebx
lea r8, [rbp + 0x78]
mov qword [rbp + 0x48], rdi
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x38]
call fcn.1401db4d0
test r15b, r15b
mov qword [rbp + 0x28], rbx
lea rcx, [rbp + 0x18]
cmovne rcx, r14
mov byte [rcx], r12b
test al, al
je 0x1401c0572
cmp qword [rbp + 0x10], 0x10
lea rsi, [rbp - 8]
mov rdi, qword [rbp + 8]
cmovae rsi, qword [rbp - 8]
cmp rdi, 0x10
jae 0x1401bff5c
movups xmm0, xmmword [rsi]
mov qword [rbp + 0x50], 0xf
movups xmmword [rbp + 0x38], xmm0
jmp 0x1401bffd7
movabs r14, 0x7fffffffffffffff
mov rbx, rdi
or rbx, 0xf
cmp rbx, r14
cmova rbx, r14
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1401bffb0
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1401c0740
mov rcx, rax
call fcn.1403caaf4
mov rcx, rax
test rax, rax
je 0x1401c0722
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1401bffbe
test rcx, rcx
je 0x1401bffbc
call fcn.1403caaf4
jmp 0x1401bffbe
xor eax, eax
lea r8, [rdi + 1]
mov qword [rbp + 0x38], rax
mov rdx, rsi
mov rcx, rax
call fcn.1403cc5a0
mov qword [rbp + 0x50], rbx
xor ebx, ebx
mov qword [rbp + 0x48], rdi
lea r8, [rbp - 0x28]
mov edi, 0xe
lea rdx, [rbp + 0x38]
mov ecx, edi
call fcn.1401c7930
test al, al
je 0x1401c0168
call fcn.140140ddc
cmp qword [rbp - 0x10], 0x10
lea rdx, [rbp - 0x28]
mov rcx, qword [rbp + 0x78]
lea r8, [rbp - 0x48]
cmovae rdx, qword [rbp - 0x28]
call fcn.1401dc500
test al, al
jne 0x1401c039d
lea ecx, [rdi + 0x56]
call qword [sym.imp.kernel32.dll_Sleep]
call fcn.140140f70
mov rdx, qword [rbp + 0x30]
inc dword [rax + 0x30]
cmp rdx, 0x10
jb 0x1401c006b
mov rcx, qword [rbp + 0x18]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401c0066
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401c0722
call fcn.1403cad84
mov rdx, qword [rbp - 0x30]
mov qword [rbp + 0x28], rbx
mov qword [rbp + 0x30], 0xf
mov byte [rbp + 0x18], r12b
cmp rdx, 0x10
jb 0x1401c00b6
mov rcx, qword [rbp - 0x48]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401c00b1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401c0722
call fcn.1403cad84
mov rdx, qword [rbp - 0x10]
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], r12b
cmp rdx, 0x10
jb 0x1401c0101
mov rcx, qword [rbp - 0x28]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401c00fc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401c0722
call fcn.1403cad84
mov rdx, qword [rbp + 0x10]
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x10], 0xf
mov byte [rbp - 0x28], r12b
cmp rdx, 0x10
jb 0x1401c014c
mov rcx, qword [rbp - 8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401c0147
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401c0722
call fcn.1403cad84
mov r15d, dword [rbp + 0xc8]
mov qword [rbp + 8], rbx
mov qword [rbp + 0x10], 0xf
mov byte [rbp - 8], r12b
jmp 0x1401bfb55
call fcn.140140f70
mov ebx, dword [rax + 0x28]
call fcn.140140f70
cmp dword [rax + 0x24], ebx
jbe 0x1401c0254
mov ecx, dword [0x140548a38]
cmp ecx, 0x1c
je 0x1401c0191
lea eax, [rcx - 7]
cmp eax, 1
ja 0x1401c01f4
movdqa xmm0, xmmword [0x1404d0550]
xor eax, eax
movdqa xmm1, xmmword [0x1404d0070]
movdqu xmmword [rsp + 0x58], xmm0
mov dword [rsp + 0x78], 0x35b594f
movdqu xmmword [rsp + 0x68], xmm1
mov dword [rsp + 0x7c], 0x51544057
mov dword [rbp - 0x80], 0x584f4a41
mov word [rbp - 0x7c], 2
nop dword [rax]
movsxd rcx, eax
xor byte [rsp + rcx + 0x58], al
inc eax
cmp eax, 0x2d
jb 0x1401c01d0
lea rdx, [rsp + 0x58]
mov byte [rbp - 0x7b], r12b
xor ecx, ecx
call fcn.1401a7f70
mov ecx, dword [0x140548a38]
cmp ecx, 6
jne 0x1401c024f
movdqa xmm0, xmmword [0x1404d0590]
xor eax, eax
movdqa xmm1, xmmword [0x1404d01c0]
xor ecx, ecx
movdqu xmmword [rsp + 0x58], xmm0
mov dword [rbp - 0x78], 0x1d5c465f
movdqa xmm0, xmmword [0x1404cf700]
movdqu xmmword [rsp + 0x78], xmm0
mov byte [rbp - 0x74], al
movdqu xmmword [rsp + 0x68], xmm1
movsxd rax, ecx
xor byte [rsp + rax + 0x58], cl
inc ecx
cmp ecx, 0x34
jb 0x1401c0231
lea rdx, [rsp + 0x58]
mov byte [rbp - 0x74], r12b
xor ecx, ecx
call fcn.1401a7f70
call fcn.1401a9e40
mov ecx, 0x1388
call qword [sym.imp.kernel32.dll_Sleep]
call fcn.140140f70
mov rdx, qword [rbp + 0x30]
inc dword [rax + 0x24]
cmp rdx, 0x10
jb 0x1401c02a2
mov rcx, qword [rbp + 0x18]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401c029d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401c0722
call fcn.1403cad84
mov rdx, qword [rbp - 0x30]
xor ebx, ebx
mov qword [rbp + 0x28], rbx
mov qword [rbp + 0x30], 0xf
mov byte [rbp + 0x18], bl
cmp rdx, 0x10
jb 0x1401c02ee
mov rcx, qword [rbp - 0x48]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401c02e9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401c0722
call fcn.1403cad84
mov rdx, qword [rbp - 0x10]
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], bl
cmp rdx, 0x10
jb 0x1401c0338
mov rcx, qword [rbp - 0x28]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401c0333
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401c0722
call fcn.1403cad84
mov rdx, qword [rbp + 0x10]
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x10], 0xf
mov byte [rbp - 0x28], bl
cmp rdx, 0x10
jb 0x1401c0382
mov rcx, qword [rbp - 8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401c037d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401c0722
call fcn.1403cad84
mov r15d, dword [rbp + 0xc8]
mov qword [rbp + 8], rbx
mov qword [rbp + 0x10], 0xf
mov byte [rbp - 8], bl
jmp 0x1401bfb55
call fcn.140140f70
mov dword [rsp + 0x40], 0x5c607473
mov ecx, ebx
mov dword [rsp + 0x44], 0x7d697762
mov word [rsp + 0x48], 0x676d
mov dword [rax + 0x30], ebx
xor eax, eax
mov byte [rsp + 0x4a], al
nop dword [rax]
nop dword [rax + rax]
movsxd rax, ecx
xor byte [rsp + rax + 0x40], cl
inc ecx
cmp ecx, 0xa
jb 0x1401c03d0
cmp qword [rbp - 0x30], 0x10
lea rcx, [rbp - 0x48]
mov r9, qword [rbp - 0x48]
lea r8, [rsp + 0x40]
cmovae rcx, r9
mov byte [rsp + 0x4a], r12b
setae r10b
sub r8, rcx
movzx edx, byte [rcx]
movzx eax, byte [rcx + r8]
sub edx, eax
jne 0x1401c0413
inc rcx
test eax, eax
jne 0x1401c0400
mov ecx, ebx
test edx, edx
jne 0x1401c0464
mov dword [rsp + 0x40], 0x740053
mov dword [rsp + 0x44], 0x230060
mov dword [rsp + 0x48], 0x770062
mov dword [rsp + 0x4c], 0x7d0069
mov dword [rsp + 0x50], 0x67006d
mov dword [rsp + 0x54], 0x24
nop dword [rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x40], cx
inc ecx
cmp ecx, 0xb
jb 0x1401c0450
jmp 0x1401c050f
xor eax, eax
mov dword [rsp + 0x40], 0x5c607473
mov byte [rsp + 0x4a], al
mov dword [rsp + 0x44], 0x6e726665
mov word [rsp + 0x48], 0x6c7e
movsxd rax, ecx
xor byte [rsp + rax + 0x40], cl
inc ecx
cmp ecx, 0xa
jb 0x1401c0481
test r10b, r10b
mov byte [rsp + 0x4a], r12b
lea rax, [rbp - 0x48]
cmovne rax, r9
lea r8, [rsp + 0x40]
sub r8, rax
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1401c04c3
inc rax
test ecx, ecx
jne 0x1401c04b0
test edx, edx
jne 0x1401c0526
mov dword [rsp + 0x40], 0x740053
mov ecx, ebx
mov dword [rsp + 0x44], 0x230060
mov dword [rsp + 0x48], 0x660065
mov dword [rsp + 0x4c], 0x6e0072
mov dword [rsp + 0x50], 0x6c007e
mov dword [rsp + 0x54], 0x24
nop dword [rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x40], cx
inc ecx
cmp ecx, 0xb
jb 0x1401c0500
lea rdx, [rsp + 0x40]
mov word [rsp + 0x56], bx
mov ecx, 1
call fcn.1401a8110
mov r12b, 1
call fcn.140140f70
mov dword [rax + 0x2c], ebx
lea rax, [rbp - 8]
cmp qword [rbp + 0x10], 0x10
mov qword [rbp + 8], rbx
cmovae rax, qword [rbp - 8]
mov byte [rax], 0
lea rax, [rbp - 0x28]
cmp qword [rbp - 0x10], 0x10
mov qword [rbp - 0x18], rbx
cmovae rax, qword [rbp - 0x28]
mov byte [rax], 0
lea rax, [rbp - 0x48]
cmp qword [rbp - 0x30], 0x10
mov qword [rbp - 0x38], rbx
cmovae rax, qword [rbp - 0x48]
mov byte [rax], 0
jmp 0x1401c05ff
xor eax, eax
mov dword [rsp + 0x58], 0x6f0045
mov word [rbp - 0x74], ax
mov ecx, ebx
mov dword [rsp + 0x5c], 0x710061
mov dword [rsp + 0x60], 0x75007d
mov dword [rsp + 0x64], 0x6e0072
mov dword [rsp + 0x68], 0x670067
mov dword [rsp + 0x6c], 0x6a002a
mov dword [rsp + 0x70], 0x64007c
mov dword [rsp + 0x74], 0x78002e
mov dword [rsp + 0x78], 0x620071
mov dword [rsp + 0x7c], 0x750032
mov dword [rbp - 0x80], 0x7c0075
mov dword [rbp - 0x7c], 0x72007a
mov dword [rbp - 0x78], 0x37007c
nop
movsxd rax, ecx
xor word [rsp + rax*2 + 0x58], cx
inc ecx
cmp ecx, 0x1a
jb 0x1401c05e0
lea rdx, [rsp + 0x58]
mov word [rbp - 0x74], bx
xor ecx, ecx
call fcn.1401a8110
mov rdx, qword [rbp + 0x30]
cmp rdx, 0x10
jb 0x1401c063a
mov rcx, qword [rbp + 0x18]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401c0635
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401c0722
call fcn.1403cad84
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x1401c0675
mov rcx, qword [rbp - 0x48]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401c0670
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401c0722
call fcn.1403cad84
mov rdx, qword [rbp - 0x10]
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], 0
cmp rdx, 0x10
jb 0x1401c06bc
mov rcx, qword [rbp - 0x28]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401c06b7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401c0722
call fcn.1403cad84
mov rdx, qword [rbp + 0x10]
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x10], 0xf
mov byte [rbp - 0x28], 0
cmp rdx, 0x10
jb 0x1401c0703
mov rcx, qword [rbp - 8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401c06fe
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401c0722
call fcn.1403cad84
mov rbx, qword [rsp + 0x1d0]
movzx eax, r12b
add rsp, 0x180
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1403d7020
int3
call fcn.1401391d8
int3
call fcn.1403d7020
int3
call fcn.1403d7020
int3
call fcn.1401391d8
int3
call fcn.1401391d8
int3