Function at 0x140057f50
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov rax, rsp
push rbp
push rbx
push rdi
push r14
lea rbp, [rax - 0xa8]
sub rsp, 0x188
movdqa xmm0, xmmword [str.lAdd_new_filter]
lea rdx, [rsp + 0x50]
mov qword [rax + 0x10], rsi
xor r8d, r8d
mov rsi, rcx
mov qword [rsp + 0x78], rcx
movaps xmmword [rax - 0x48], xmm7
lea rcx, [rsp + 0x69]
xorps xmm7, xmm7
mov qword [rsp + 0x50], 0
movdqu xmmword [rsp + 0x68], xmm0
call fcn.1400bb170
movss xmm1, dword [0x1401cd450]
xorps xmm0, xmm0
movzx ebx, al
call fcn.1400f8590
movdqa xmm0, xmmword [0x1401cdf20]
xor r14d, r14d
movdqa xmm1, xmmword [0x1401cf880]
mov ecx, r14d
movdqa xmm4, xmmword [0x1401cf850]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm0, xmmword [0x1401cdff0]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm0, xmmword [0x1401ce030]
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmm1, xmmword [0x1401cf890]
movdqa xmmword [rbp + 0x10], xmm0
movdqa xmm0, xmmword [0x1401cf830]
movdqa xmmword [rbp], xmm1
movdqa xmm1, xmmword [0x1401cdf50]
movdqa xmmword [rbp + 0x30], xmm0
movdqa xmm0, xmmword [str.896_9_90wu___u]
movdqa xmmword [rbp + 0x20], xmm1
movdqa xmm1, xmmword [0x1401cdfc0]
movdqa xmmword [rbp + 0x50], xmm0
movdqa xmmword [rbp - 0x40], xmm4
movdqa xmmword [rbp + 0x40], xmm1
nop dword [rax]
movzx eax, byte [rbp - 0x40]
xor byte [rbp + rcx - 0x3f], al
movzx eax, byte [rbp - 0x40]
xor byte [rbp + rcx - 0x3e], al
add rcx, 2
cmp rcx, 0x9e
jb 0x140058040
lea rcx, [rbp - 0x3f]
mov byte [rbp + 0x5f], r14b
call fcn.140125ba0
test bl, bl
je 0x14005808f
xor edx, edx
mov dword [rsp + 0x40], 0x6c694615
lea rcx, [rsp + 0x41]
mov dword [rsp + 0x44], 0x73726574
mov byte [rsp + 0x48], r14b
call fcn.1400f9c20
xor edx, edx
mov dword [rsp + 0x40], 0x6c694665
lea rcx, [rsp + 0x41]
mov dword [rsp + 0x44], 0x73726574
mov byte [rsp + 0x48], r14b
call fcn.1400fa310
test al, al
je 0x14005861d
lea rcx, [rsp + 0x41]
mov dword [rsp + 0x40], 0x6c694604
mov dword [rsp + 0x44], 0x73726574
mov word [rsp + 0x48], 0x3a
call fcn.1400b9f40
lea rcx, [rsp + 0x69]
mov qword [rbp - 0x80], r14
mov dword [rsp + 0x68], 0x6c69667b
mov dword [rsp + 0x6c], 0x73726574
mov dword [rsp + 0x70], 0x6c6c615f
mov byte [rsp + 0x74], r14b
call fcn.1400f53c0
lea rcx, [rbp - 0x80]
movss dword [rsp + 0x28], xmm7
mov qword [rsp + 0x20], rcx
xor r9d, r9d
lea rcx, [rsp + 0x69]
mov r8d, 2
mov edx, eax
call fcn.14011a6e0
test al, al
je 0x1400585c6
mov rcx, qword [rsi + 0x10]
movabs rax, 0x6666666666666667
sub rcx, qword [rsi + 8]
mov edi, r14d
imul rcx
mov dword [rsp + 0x58], r14d
sar rdx, 7
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x1400585c1
mov qword [rsp + 0x1c0], r12
mov rbx, r14
mov qword [rsp + 0x1c8], r13
lea r12, [rsi + 0x20]
mov qword [rsp + 0x180], r15
movaps xmmword [rsp + 0x170], xmm6
movdqa xmm6, xmmword [0x1401ce540]
mov qword [rbp - 0x70], r12
mov qword [rsp + 0x40], rbx
nop dword [rax]
movaps xmm1, xmm7
xor ecx, ecx
call fcn.14011ddd0
mov r15, qword [rsi + 8]
mov esi, r14d
mov rdx, qword [0x1401f26f8]
add r15, rbx
mov qword [rbp - 0x78], r15
nop
mov rcx, qword [rdx + 0x5000]
test rcx, rcx
je 0x1400581eb
mov eax, dword [rcx + 0x74]
cmp eax, esi
je 0x1400581eb
cmp eax, 0xffffffff
je 0x1400581dd
call fcn.14011eb20
mov edx, esi
call fcn.14011e940
mov rdx, qword [0x1401f26f8]
mov rbx, qword [rdx + 0x4140]
mov edx, edi
mov rcx, rbx
call fcn.1400e8a00
add rbx, 0x130
mov edi, eax
mov ecx, dword [rbx + 4]
mov r8d, dword [rbx]
cmp r8d, ecx
jne 0x140058239
inc r8d
test ecx, ecx
je 0x140058222
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x140058227
mov eax, 8
cmp eax, r8d
mov rcx, rbx
cmovg r8d, eax
mov edx, r8d
call fcn.1400b31b0
movsxd rcx, dword [rbx]
xor r13b, r13b
mov rax, qword [rbx + 8]
mov dword [rax + rcx*4], edi
inc dword [rbx]
mov rbx, qword [r12]
mov r14, qword [r12 + 8]
cmp rbx, r14
je 0x1400582b3
lea rdi, [r15 + 0x118]
mov r12, qword [rdi + 0x10]
mov r15, qword [rdi + 0x18]
mov rdx, rdi
cmp r15, 0xf
jbe 0x140058271
mov rdx, qword [rdi]
cmp qword [rbx + 0x130], 0xf
lea rcx, [rbx + 0x118]
mov r8, qword [rbx + 0x128]
jbe 0x14005828c
mov rcx, qword [rcx]
cmp r8, r12
jne 0x14005829a
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400582a8
add rbx, 0x140
cmp rbx, r14
jne 0x140058265
jmp 0x1400582ab
mov r13b, 1
mov r12, qword [rbp - 0x70]
mov r15, qword [rbp - 0x78]
test esi, esi
je 0x1400582e4
cmp esi, 1
je 0x140058319
mov rdx, qword [0x1401f26f8]
inc esi
mov rax, qword [rdx + 0x4140]
dec dword [rax + 0x130]
cmp esi, 2
jge 0x14005854c
mov edi, dword [rsp + 0x58]
jmp 0x1400581c0
lea rcx, [r15 + 0x118]
cmp qword [rcx + 0x18], 0xf
jbe 0x1400582f5
mov rcx, qword [rcx]
call fcn.1400b9f40
mov rdx, qword [0x1401f26f8]
mov edi, dword [rsp + 0x58]
mov rax, qword [rdx + 0x4140]
dec dword [rax + 0x130]
inc esi
jmp 0x1400581c0
test r13b, r13b
je 0x1400584db
mov rbx, qword [0x1401f26f8]
lea rdx, [rbp - 0x58]
mov dword [rbp - 0x58], 0x15
movups xmm0, xmmword [rbx + 0x3c30]
lea rcx, [rbx + 0x4be8]
movups xmmword [rbp - 0x54], xmm0
call fcn.140119870
cmp dword [rbx + 0x4be4], 0x15
je 0x14005835b
movups xmmword [rbx + 0x3c30], xmm6
xor r8d, r8d
mov qword [rbp - 0x68], 0
lea rdx, [rbp - 0x68]
mov dword [rsp + 0x50], 0x6d65527d
lea rcx, [rsp + 0x51]
mov dword [rsp + 0x54], 0x65766f
call fcn.1400bb170
test al, al
je 0x140058498
mov r13, qword [rsp + 0x78]
lea rsi, [r15 + 0x118]
mov rbx, qword [r12]
mov r14, qword [r13 + 0x28]
cmp rbx, r14
je 0x140058458
mov rdi, qword [rsi + 0x18]
mov r15, qword [rsi + 0x10]
mov rdx, rsi
cmp rdi, 0xf
jbe 0x1400583bd
mov rdx, qword [rsi]
cmp qword [rbx + 0x130], 0xf
lea rcx, [rbx + 0x118]
mov r8, qword [rbx + 0x128]
jbe 0x1400583d8
mov rcx, qword [rcx]
cmp r8, r15
jne 0x1400583e6
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400583f2
add rbx, 0x140
cmp rbx, r14
jne 0x1400583b1
cmp rbx, r14
je 0x140058458
lea rdi, [rbx + 0x140]
cmp rdi, r14
je 0x140058458
cmp qword [rsi + 0x18], 0xf
mov rdx, rsi
jbe 0x140058410
mov rdx, qword [rsi]
cmp qword [rdi + 0x130], 0xf
lea rcx, [rdi + 0x118]
mov r8, qword [rdi + 0x128]
jbe 0x14005842b
mov rcx, qword [rcx]
cmp r8, qword [rsi + 0x10]
jne 0x14005843a
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14005844c
mov rdx, rdi
mov rcx, rbx
call fcn.1400586b0
add rbx, 0x140
add rdi, 0x140
cmp rdi, r14
jne 0x140058403
mov rsi, qword [r13 + 0x28]
cmp rbx, rsi
je 0x140058498
lea rdi, [rbx + 0x100]
nop dword [rax + rax]
lea rcx, [rdi + 0x18]
call fcn.140011ad0
mov rcx, rdi
call fcn.14003bd90
add rdi, 0x140
lea rax, [rdi - 0x100]
cmp rax, rsi
jne 0x140058470
mov qword [r13 + 0x28], rbx
mov r8, qword [0x1401f26f8]
movsxd rax, dword [r8 + 0x4be8]
cmp eax, 1
jl 0x140058538
mov rcx, qword [r8 + 0x4bf0]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x3ae
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x4be8]
jmp 0x140058538
xor r8d, r8d
mov qword [rbp - 0x60], 0
lea rdx, [rbp - 0x60]
mov dword [rsp + 0x5c], 0x6464415e
lea rcx, [rsp + 0x5d]
mov byte [rsp + 0x60], 0
call fcn.1400bb170
test al, al
je 0x140058538
mov r13, qword [rsp + 0x78]
mov rax, qword [r13 + 0x28]
cmp rax, qword [r13 + 0x30]
je 0x14005852a
mov rdx, r15
mov rcx, rax
call fcn.14004bd90
add qword [r12 + 8], 0x140
jmp 0x140058538
mov r8, r15
mov rdx, rax
mov rcx, r12
call fcn.140058980
mov rax, qword [0x1401f26f8]
mov rcx, qword [rax + 0x4140]
dec dword [rcx + 0x130]
mov rsi, qword [rsp + 0x78]
movabs rax, 0x6666666666666667
mov edi, dword [rsp + 0x58]
mov r14d, 0
mov rbx, qword [rsp + 0x40]
inc edi
add rbx, 0x140
mov dword [rsp + 0x58], edi
mov rcx, qword [rsi + 0x10]
sub rcx, qword [rsi + 8]
imul rcx
mov qword [rsp + 0x40], rbx
sar rdx, 7
mov rax, rdx
shr rax, 0x3f
add rdx, rax
movsxd rax, edi
cmp rax, rdx
jb 0x1400581a0
movaps xmm6, xmmword [rsp + 0x170]
mov r15, qword [rsp + 0x180]
mov r13, qword [rsp + 0x1c8]
mov r12, qword [rsp + 0x1c0]
call fcn.14011d0d0
mov rbx, qword [0x1401f26f8]
mov rcx, qword [rbx + 0x4140]
cmp qword [rbx + 0x4d00], rcx
jne 0x140058601
cmp byte [rbx + 0x4da9], 0
je 0x140058601
cmp dword [rbx + 0x4d50], 0
jne 0x140058601
mov eax, dword [rbx + 0x4dac]
and eax, 0xfffffff2
or eax, 2
mov dword [rbx + 0x4dac], eax
test dword [rcx + 0x14], 0x1000000
je 0x140058611
mov byte [rbx + 0x40aa], 1
call fcn.1400f3c20
mov byte [rbx + 0x40aa], 0
mov rdi, qword [rsi + 0x28]
mov rbx, qword [rsi + 0x20]
movaps xmm7, xmmword [rsp + 0x160]
mov rsi, qword [rsp + 0x1b8]
cmp rbx, rdi
je 0x14005869e
nop word [rax + rax]
cmp qword [rbx + 0x130], 0xf
lea rcx, [rbx + 0x118]
jbe 0x140058654
mov rcx, qword [rcx]
mov qword [rsp + 0x38], r14
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], r14
mov r9d, pe_nt_image_headers64
mov dword [rsp + 0x28], r14d
mov r8, rbx
xor edx, edx
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x40], 0
call fcn.1400c72c0
test al, al
je 0x140058692
mov rcx, rbx
call fcn.1400e3870
add rbx, 0x140
cmp rbx, rdi
jne 0x140058640
add rsp, 0x188
pop r14
pop rdi
pop rbx
pop rbp
ret