Function at 0x1400e8190
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x310
mov rax, qword [0x14015d040]
xor rax, rsp
mov qword [rsp + 0x300], rax
xor ebx, ebx
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1b0], xmm1
lea ecx, [rbx + 0x60]
call fcn.14010ee60
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x1b0], rax
movdqa xmm0, xmmword [0x140137e20]
movdqu xmmword [rsp + 0xc8], xmm0
movdqa xmm1, xmmword [0x140137920]
movdqu xmmword [rsp + 0xd8], xmm1
movdqa xmm0, xmmword [0x140133720]
movdqu xmmword [rsp + 0xe8], xmm0
mov dword [rsp + 0xf8], 0x646f71
mov byte [rsp + 0xfc], 1
mov ecx, ebx
nop dword [rax + rax]
lea eax, [rcx - 0x2b]
xor byte [rsp + rcx + 0xc8], al
inc rcx
cmp rcx, 0x33
jb 0x1400e8230
mov byte [rsp + 0xfc], 0
mov dword [rsp + 0x98], 0xaab2a580
mov dword [rsp + 0x9c], 0xb9bc9bf4
mov dword [rsp + 0xa0], 0x100aab3
mov rcx, rbx
nop
lea eax, [rcx - 0x2b]
xor byte [rsp + rcx + 0x98], al
inc rcx
cmp rcx, 0xa
jb 0x1400e8270
mov byte [rsp + 0xa3], 0
lea rax, [rsp + 0x98]
mov qword [rsp + 0xa8], rax
lea rax, [rsp + 0xc8]
mov qword [rsp + 0xb0], rax
lea r8, [rsp + 0xa8]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x1b0]
call fcn.1400ca920
movdqa xmm0, xmmword [0x140135420]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x1008b8a
mov rcx, rbx
nop
lea eax, [rcx - 0x2b]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x12
jb 0x1400e82e0
mov byte [rsp + 0x63], 0
mov dword [rsp + 0x78], 0xaca4b99d
mov word [rsp + 0x7c], 0x100
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx - 0x2b]
xor byte [rsp + rcx + 0x78], al
inc rcx
cmp rcx, 4
jb 0x1400e8310
mov byte [rsp + 0x7d], 0
lea rax, [rsp + 0x78]
mov qword [rsp + 0xa8], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0xb0], rax
lea r8, [rsp + 0xa8]
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x1b0]
call fcn.1400ca920
xorps xmm0, xmm0
movups xmmword [rsp + 0x1c0], xmm0
movdqa xmm1, xmmword [0x140136ab0]
movdqu xmmword [rsp + 0x50], xmm1
mov dword [rsp + 0x60], 0x89c98486
mov dword [rsp + 0x64], 0x8d868b82
mov dword [rsp + 0x68], 0x9581c084
mov word [rsp + 0x6c], 0x85
mov byte [rsp + 0x6e], 1
mov rcx, rbx
nop dword [rax]
lea eax, [rcx - 0x2b]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x1d
jb 0x1400e83a0
mov byte [rsp + 0x6e], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x88], xmm1
lea rax, [rsp + 0x50]
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400e83e0
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x78]
call fcn.14002c630
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0xa8], xmm0
movdqa xmm1, xmmword [0x140131ac0]
movdqu xmmword [rsp + 0xb8], xmm1
mov byte [rsp + 0xa8], 0
movups xmmword [rsp + 0x50], xmm0
movdqu xmmword [rsp + 0x60], xmm1
mov byte [rsp + 0x50], 0
lea r9, [rsp + 0xa8]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x1c0]
call fcn.14003bae0
nop
lea rcx, [rsp + 0x50]
call fcn.14002b140
nop
lea rcx, [rsp + 0xa8]
call fcn.14002b140
nop
lea rcx, [rsp + 0x78]
call fcn.14002b140
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rbx
lea rax, [rsp + 0x98]
mov qword [rsp + 0xa8], rax
lea rax, [rsp + 0x98]
mov qword [rsp + 0xb0], rax
mov ecx, 0x60
call fcn.14010ee60
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x98], rax
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x98]
call fcn.140051ba0
nop
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x1c0]
call fcn.140068b20
mov rax, qword [rsp + 0x1c0]
mov byte [rax + 0x3c8], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x1d0], xmm0
movups xmmword [rsp + 0x1e0], xmm0
movdqa xmm1, xmmword [0x1401349c0]
movdqu xmmword [rsp + 0x50], xmm1
mov dword [rsp + 0x60], 0x8983b997
mov dword [rsp + 0x64], 0x9cc58b9d
mov dword [rsp + 0x68], 0x1009e85
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx - 0x2b]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x1a
jb 0x1400e8540
mov byte [rsp + 0x6b], 0
mov rsi, qword [rsp + 0x1c0]
xorps xmm0, xmm0
movups xmmword [rsp + 0xa8], xmm0
movdqa xmm1, xmmword [0x140131ac0]
movdqu xmmword [rsp + 0xb8], xmm1
mov byte [rsp + 0xa8], 0
movdqu xmmword [rsp + 0x78], xmm0
mov ecx, 0x60
call fcn.14010ee60
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x148], rbx
mov qword [rsp + 0x188], rbx
mov qword [rsp + 0x48], rbx
lea rax, [rsp + 0x110]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x150]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea rdx, [rsp + 0x1d0]
mov rcx, rsi
call fcn.140068770
nop
mov r8, qword [rsp + 0x78]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x78]
call fcn.140051df0
mov edx, 0x60
mov rcx, qword [rsp + 0x78]
call fcn.14010f1ac
nop
lea rcx, [rsp + 0xa8]
call fcn.14002b140
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x190], xmm0
mov qword [rsp + 0x1a0], rax
mov rdx, qword [rsp + 0x1d0]
add rdx, 0x58
lea rcx, [rsp + 0xc8]
call fcn.14002a640
mov rdx, rax
lea rcx, [rsp + 0x190]
call fcn.140066fb0
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x190]
call fcn.1400674d0
lea rcx, [rsp + 0x50]
call fcn.14002b140
mov dword [rsp + 0x78], 0xaea5b3a6
mov dword [rsp + 0x7c], 0x100a8bc
mov rcx, rbx
nop dword [rax]
lea eax, [rcx - 0x2b]
xor byte [rsp + rcx + 0x78], al
inc rcx
cmp rcx, 6
jb 0x1400e86b0
mov byte [rsp + 0x7f], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea rax, [rsp + 0x78]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400e86e0
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x50]
call fcn.14002c630
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x190]
call fcn.1400672e0
mov rsi, rax
lea rcx, [rsp + 0x50]
call fcn.14002b140
test rsi, rsi
je 0x1400e88ab
mov dword [rsp + 0x78], 0xaca5b9a5
mov word [rsp + 0x7c], 0x100
mov rcx, rbx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 0x2b]
xor byte [rsp + rcx + 0x78], al
inc rcx
cmp rcx, 4
jb 0x1400e8740
mov byte [rsp + 0x7d], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea rax, [rsp + 0x78]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400e8770
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x50]
call fcn.14002c630
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x190]
call fcn.1400672e0
lea rcx, [rax + 0x38]
cmp qword [rcx + 0x18], 0xf
jbe 0x1400e87aa
mov rcx, qword [rcx]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov rcx, qword [0x140167a98]
mov dword [rcx + 0x130], eax
lea rcx, [rsp + 0x50]
call fcn.14002b140
mov dword [rsp + 0x78], 0xaca5b9a5
mov word [rsp + 0x7c], 0x100
mov rcx, rbx
nop dword [rax]
lea eax, [rcx - 0x2b]
xor byte [rsp + rcx + 0x78], al
inc rcx
cmp rcx, 4
jb 0x1400e87e0
mov byte [rsp + 0x7d], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0xa8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xb8], xmm1
lea rax, [rsp + 0x78]
inc rdi
cmp byte [rax + rdi], 0
jne 0x1400e8811
mov r8, rdi
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0xa8]
call fcn.14002c630
nop
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x190]
call fcn.1400672e0
lea rcx, [rsp + 0x50]
test rax, rax
je 0x1400e885a
lea rdx, [rax + 0x38]
call fcn.14002a640
jmp 0x1400e887b
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
xor r8d, r8d
lea rdx, [0x14012f079]
call fcn.14002c630
nop
lea rcx, [rsp + 0x50]
call fcn.140004f80
mov rcx, qword [0x140167a98]
mov dword [rcx + 0x134], eax
lea rcx, [rsp + 0x50]
call fcn.14002b140
nop
lea rcx, [rsp + 0xa8]
call fcn.14002b140
nop
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rsp + 0x1f0]
call sub.VCRUNTIME140.dll_memset
movdqa xmm0, xmmword [0x140134a10]
movdqu xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [0x1401377c0]
movdqu xmmword [rsp + 0x60], xmm1
mov dword [rsp + 0x70], 0x8c84999d
mov word [rsp + 0x74], 0x8a
mov byte [rsp + 0x76], 1
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x2b]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x25
jb 0x1400e8900
mov byte [rsp + 0x76], 0
mov r8d, 2
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1f0]
call fcn.140029300
nop
cmp qword [rsp + 0x278], 0
je 0x1400e8a07
movdqa xmm0, xmmword [0x140136840]
movdqu xmmword [rsp + 0xc8], xmm0
movdqa xmm1, xmmword [0x140138020]
movdqu xmmword [rsp + 0xd8], xmm1
movdqa xmm0, xmmword [0x140133db0]
movdqu xmmword [rsp + 0xe8], xmm0
mov dword [rsp + 0xf8], 0x696e766a
mov dword [rsp + 0xfc], 0x6368243b
mov word [rsp + 0x100], 0x60
mov byte [rsp + 0x102], 1
nop dword [rax + rax]
lea eax, [rbx - 0x2b]
xor byte [rsp + rbx + 0xc8], al
inc rbx
cmp rbx, 0x39
jb 0x1400e89a0
mov byte [rsp + 0x102], 0
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x1f0]
call fcn.14002b8a0
lea rcx, [rsp + 0x1f8]
call fcn.14002aac0
test rax, rax
jne 0x1400e8a07
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x1f0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x1f0], rax
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x1ec], edx
lea rcx, [rsp + 0x1f8]
call fcn.1400291e0
lea rcx, [rsp + 0x200]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x298]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x190]
call fcn.1400ca170
nop
mov r8, qword [rsp + 0x1e0]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x1e0]
lea rcx, [rsp + 0x1e0]
call fcn.140051df0
mov edx, 0x60
mov rcx, qword [rsp + 0x1e0]
call fcn.14010f1ac
mov rbx, qword [rsp + 0x1d0]
test rbx, rbx
je 0x1400e8ac9
mov rcx, rbx
call fcn.14002fc20
mov edx, 0x128
mov rcx, rbx
call fcn.14010f1ac
nop
mov rcx, qword [rsp + 0x1c0]
test rcx, rcx
je 0x1400e8ae1
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
nop
mov r8, qword [rsp + 0x1b0]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x1b0]
call fcn.140051df0
mov edx, 0x60
mov rcx, qword [rsp + 0x1b0]
call fcn.14010f1ac
nop
mov rcx, qword [rsp + 0x300]
xor rcx, rsp
call fcn.14010ee40
lea r11, [rsp + 0x310]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret