Function at 0x140030ef0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r15
mov rbp, rsp
sub rsp, 0x80
mov r15, r9
mov rbx, r8
mov r12, rdx
mov rdi, rcx
test rdx, rdx
jne 0x140030fed
mov dword [rbp - 0x60], 0x3bde3ba9
xor eax, eax
mov dword [rbp - 0x5c], 0x3bd53ba9
mov r8d, 0x3bf2
mov dword [rbp - 0x58], 0x3b983bb8
mov dword [rbp - 0x54], 0x3b943bd8
mov dword [rbp - 0x50], 0x3b9f3b95
mov dword [rbp - 0x4c], 0x3b913b89
mov dword [rbp - 0x48], 0x3bdf3b9b
mov dword [rbp - 0x44], 0x3c653c61
mov dword [rbp - 0x40], 0x3c713c66
mov dword [rbp - 0x3c], 0x3c763c61
mov dword [rbp - 0x38], 0x3c273c75
mov dword [rbp - 0x34], 0x3c663c7c
mov dword [rbp - 0x30], 0x3c6d3c2a
mov dword [rbp - 0x2c], 0x3c633c65
mov dword [rbp - 0x28], 0x3c2f3c6a
mov dword [rbp - 0x24], 0x3c703c60
mov dword [rbp - 0x20], 0x3c673c66
mov dword [rbp - 0x1c], 0x3c673c71
mov dword [rbp - 0x18], 0x3c78
mov byte [rbp - 0x14], 1
nop
lea edx, [r8 + rax]
xor word [rbp + rax*2 - 0x60], dx
inc rax
cmp rax, 0x25
jb 0x140030fb0
mov byte [rbp - 0x14], 0
lea rdx, [rbp - 0x60]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1400355d0
lea rdx, [0x1400357b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
xor eax, eax
jmp 0x1400312f0
cmp rbx, 0x40000000
jbe 0x1400310bf
mov dword [rbp - 0x60], 0x3bde3ba9
xor eax, eax
mov dword [rbp - 0x5c], 0x3bd53ba9
mov r8d, 0x3bf2
mov dword [rbp - 0x58], 0x3b963bb5
mov dword [rbp - 0x54], 0x3bde3b96
mov dword [rbp - 0x50], 0x3bdb3b8e
mov dword [rbp - 0x4c], 0x3b943b9a
mov dword [rbp - 0x48], 0x3b9b3b90
mov dword [rbp - 0x44], 0x3c713c20
mov dword [rbp - 0x40], 0x3c773c63
mov dword [rbp - 0x3c], 0x3c603c70
mov dword [rbp - 0x38], 0x3c693c74
mov dword [rbp - 0x34], 0x3c293c24
mov dword [rbp - 0x30], 0x3c643c5e
mov dword [rbp - 0x2c], 0x3c2d3c63
mov dword [rbp - 0x28], 0x3c663c6c
mov dword [rbp - 0x24], 0x3c313c77
mov dword [rbp - 0x20], 0x3c763c61
mov dword [rbp - 0x1c], 0x3c613c77
mov dword [rbp - 0x18], 0x3c783c7f
mov dword [rbp - 0x14], 0x3c76
mov byte [rbp - 0x10], 1
nop dword [rax]
nop word [rax + rax]
lea edx, [r8 + rax]
xor word [rbp + rax*2 - 0x60], dx
inc rax
cmp rax, 0x27
jb 0x1400310a0
mov byte [rbp - 0x10], 0
lea rdx, [rbp - 0x60]
jmp 0x140030fca
mov rcx, rbx
mov qword [rsp + 0xa8], r14
call fcn.1400acfb8
mov r9, rbx
mov r8, r12
mov rdx, rax
mov rcx, rdi
mov r14, rax
call fcn.14002da30
test al, al
jne 0x1400311bd
xor eax, eax
mov dword [rbp - 0x60], 0x3bde3ba9
mov word [rbp - 0x14], ax
mov r8d, 0x3bf2
mov dword [rbp - 0x5c], 0x3bd53ba9
mov dword [rbp - 0x58], 0x3b923ba4
mov dword [rbp - 0x54], 0x3b9d3b99
mov dword [rbp - 0x50], 0x3b9d3bda
mov dword [rbp - 0x4c], 0x3b943b9d
mov dword [rbp - 0x48], 0x3b9a3b92
mov dword [rbp - 0x44], 0x3c213c64
mov dword [rbp - 0x40], 0x3c6d3c6b
mov dword [rbp - 0x3c], 0x3c433c24
mov dword [rbp - 0x38], 0x3c693c6f
mov dword [rbp - 0x34], 0x3c593c6c
mov dword [rbp - 0x30], 0x3c7f3c6b
mov dword [rbp - 0x2c], 0x3c683c78
mov dword [rbp - 0x28], 0x3c613c7c
mov dword [rbp - 0x24], 0x3c653c51
mov dword [rbp - 0x20], 0x3c763c59
mov dword [rbp - 0x1c], 0x3c7b3c66
mov dword [rbp - 0x18], 0x3c7b3c73
mov byte [rbp - 0x12], 1
lea edx, [r8 + rax]
xor word [rbp + rax*2 - 0x60], dx
inc rax
cmp rax, 0x26
jb 0x140031180
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, [rbp - 0x60]
mov byte [rbp - 0x12], 0
call fcn.1400355d0
lea rdx, [0x1400357b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
xor eax, eax
jmp 0x1400312e8
mov r11, qword [rbp + 0x40]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [r11 + rax], 0
jne 0x1400311d0
sub rbx, rax
mov qword [rsp + 0xa0], rsi
mov eax, 0
mov r10d, eax
je 0x140031241
movzx edi, byte [r11]
mov rsi, r14
sub rsi, r15
nop dword [rax]
mov r8, r11
mov rdx, r15
test dil, dil
je 0x140031230
movzx ecx, dil
lea r9, [rsi + r10]
cmp cl, 0x78
jne 0x140031221
movzx ecx, byte [rdx]
cmp byte [r9 + rdx], cl
jne 0x140031239
movzx ecx, byte [r8 + 1]
inc r8
inc rdx
test cl, cl
jne 0x140031213
cmp byte [r8], al
je 0x140031309
inc r10
cmp r10, rbx
jb 0x140031200
mov dword [rbp - 0x60], 0x3bde3ba9
mov r8d, 0x3bf2
mov dword [rbp - 0x5c], 0x3bd53ba9
mov dword [rbp - 0x58], 0x3b963bb5
mov dword [rbp - 0x54], 0x3bde3b96
mov dword [rbp - 0x50], 0x3bdb3b8e
mov dword [rbp - 0x4c], 0x3b943b9a
mov dword [rbp - 0x48], 0x3b9b3b90
mov dword [rbp - 0x44], 0x3c713c20
mov dword [rbp - 0x40], 0x3c773c63
mov dword [rbp - 0x3c], 0x3c603c70
mov dword [rbp - 0x38], 0x3c693c74
mov word [rbp - 0x34], ax
mov byte [rbp - 0x32], 1
nop dword [rax]
lea edx, [r8 + rax]
xor word [rbp + rax*2 - 0x60], dx
inc rax
cmp rax, 0x16
jb 0x1400312a0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, [rbp - 0x60]
mov byte [rbp - 0x32], 0
call fcn.1400355d0
lea rdx, [0x1400357b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rcx, r14
call fcn.1400ac900
xor eax, eax
mov rsi, qword [rsp + 0xa0]
mov r14, qword [rsp + 0xa8]
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r12
pop rbp
ret
lea rbx, [r10 + r14]
test rbx, rbx
je 0x140031241
mov rcx, r14
call fcn.1400ac900
sub rbx, r14
lea rax, [r12 + rbx]
jmp 0x1400312e0