Function at 0x14013b3b0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x648]
sub rsp, 0x748
mov r13d, 0x41
xor r15d, r15d
or rdi, 0xffffffffffffffff
lea r12d, [r13 - 0x40]
xor edx, edx
lea rcx, [rbp + 0x240]
mov r8d, 0x400
call fcn.1403ccc50
call fcn.140141298
xor eax, eax
mov dword [rsp + 0x20], 0x66616241
mov byte [rsp + 0x28], al
mov ecx, r15d
mov dword [rsp + 0x24], 0x63637174
movsxd rax, ecx
xor byte [rsp + rax + 0x20], cl
add ecx, r12d
cmp ecx, 8
jb 0x14013b40f
mov byte [rsp + 0x28], r15b
mov ecx, r15d
mov dword [rbp + 0x698], 0x454055
movsxd rax, ecx
xor byte [rbp + rax + 0x698], cl
add ecx, r12d
cmp ecx, 3
jb 0x14013b430
lea r9, [rbp + 0x240]
mov byte [rbp + 0x69b], r15b
lea r8, [rsp + 0x20]
lea rdx, [rbp + 0x698]
call fcn.14019ce70
test al, al
je 0x14013b4a7
mov dword [rbp + 0x6a0], 0x716459
mov ecx, r15d
movsxd rax, ecx
xor byte [rbp + rax + 0x6a0], cl
add ecx, r12d
cmp ecx, 3
jb 0x14013b472
lea rdx, [rbp + 0x6a0]
mov byte [rbp + 0x6a3], r15b
lea rcx, [rbp + 0x240]
call fcn.1403cbcb0
test rax, rax
jne 0x14013be3f
mov ecx, 7
mov word [rbp + 0x690], r15w
mov qword [rbp + 0x238], rcx
lea rdx, [rbp + 0x690]
lea rcx, [rbp + 0x220]
mov qword [rbp + 0x220], r15
mov qword [rbp + 0x230], r15
call fcn.14013edcc
mov dword [rbp + 0x80], 0x2f0031
mov dword [rbp + 0x84], 0x420022
mov dword [rbp + 0x88], 0x7c006a
mov dword [rbp + 0x8c], 0x750026
mov dword [rbp + 0x90], 0x6e006d
mov dword [rbp + 0x94], 0x780063
mov dword [rbp + 0x98], 0x680078
mov dword [rbp + 0x9c], 0x6a007c
mov dword [rbp + 0xa0], 0x310074
mov dword [rbp + 0xa4], 0x700073
mov dword [rbp + 0xa8], 0x7a0077
mov dword [rbp + 0xac], 0x790063
mov dword [rbp + 0xb0], 0x39006c
mov dword [rbp + 0xb4], 0x68006f
mov dword [rbp + 0xb8], 0x730075
mov dword [rbp + 0xbc], 0x3f0079
mov dword [rbp + 0xc0], 0x490054
mov dword [rbp + 0xc4], 0x50004b
mov dword [rbp + 0xc8], 0x440004
mov dword [rbp + 0xcc], 0x570056
mov dword [rbp + 0xd0], 0x400044
mov dword [rbp + 0xd4], 0x4a0049
mov dword [rbp + 0xd8], 0x440058
mov dword [rbp + 0xdc], 0x410041
mov dword [rbp + 0xe0], 0x580010
mov dword [rbp + 0xe4], 0x130041
mov dword [rbp + 0xe8], 0x5b0055
mov dword [rbp + 0xec], 0x470016
mov dword [rbp + 0xf0], 0x56004a
mov dword [rbp + 0xf4], 0x5e004a
mov dword [rbp + 0xf8], 0x49004e
mov dword [rbp + 0xfc], 0x1f0047
mov dword [rbp + 0x100], 0x27002f
mov dword [rbp + 0x104], 0x270062
mov dword [rbp + 0x108], 0x330021
mov dword [rbp + 0x10c], 0x2b0023
mov dword [rbp + 0x110], 0x390027
mov dword [rbp + 0x114], 0x39002f
mov dword [rbp + 0x118], 0x6d003f
mov dword [rbp + 0x11c], 0x2a003a
mov dword [rbp + 0x120], 0x3c0031
mov dword [rbp + 0x124], 0x73007e
mov dword [rbp + 0x128], 0x3b003d
mov dword [rbp + 0x12c], 0x360076
mov dword [rbp + 0x130], 0x200036
mov dword [rbp + 0x134], 0x36007a
mov dword [rbp + 0x138], 0x300033
mov dword [rbp + 0x13c], 0x31003b
mov dword [rbp + 0x140], 0x410014
mov dword [rbp + 0x144], 0x60015
mov dword [rbp + 0x148], 0x40044
mov dword [rbp + 0x14c], 0x20014
mov dword [rbp + 0x150], 0xa0048
mov dword [rbp + 0x154], 0x5000b
mov dword [rbp + 0x158], 0x1e004c
mov dword [rbp + 0x15c], 0x1a
mov dword [rbp + 0x160], 0x510000
mov dword [rbp + 0x164], 0xb0017
mov dword [rbp + 0x168], 0x6001d
mov dword [rbp + 0x16c], 0x1e0002
mov dword [rbp + 0x170], 0x1e0016
mov dword [rbp + 0x174], 0x1a005a
mov dword [rbp + 0x178], 0x1e001f
mov dword [rbp + 0x17c], 0xa0011
mov dword [rbp + 0x180], 0xf500ee
mov dword [rbp + 0x184], 0xf400a2
mov dword [rbp + 0x188], 0xf100ed
mov dword [rbp + 0x18c], 0xe800ee
mov dword [rbp + 0x190], 0xfd00fd
mov dword [rbp + 0x194], 0xf900aa
mov dword [rbp + 0x198], 0xec00e9
mov dword [rbp + 0x19c], 0xe000fd
mov dword [rbp + 0x1a0], 0xe200fe
mov dword [rbp + 0x1a4], 0xb300bc
mov edx, 0xcd
mov dword [rbp + 0x1a8], 0xf900d5
mov ecx, r15d
mov dword [rbp + 0x1ac], 0xf800e5
mov r12d, 1
mov dword [rbp + 0x1b0], 0xf800b8
mov dword [rbp + 0x1b4], 0xf800f9
mov dword [rbp + 0x1b8], 0xe800f3
mov dword [rbp + 0x1bc], 0xeb00f0
mov dword [rbp + 0x1c0], 0xd60080
mov dword [rbp + 0x1c4], 0xcf00cb
mov dword [rbp + 0x1c8], 0x8500c8
mov dword [rbp + 0x1cc], 0xc200c4
mov dword [rbp + 0x1d0], 0xcd0088
mov dword [rbp + 0x1d4], 0xc700cf
mov dword [rbp + 0x1d8], 0xd900c9
mov dword [rbp + 0x1dc], 0xcb00cb
mov dword [rbp + 0x1e0], 0xd00090
mov dword [rbp + 0x1e4], 0xc700d4
mov dword [rbp + 0x1e8], 0xc700d1
mov dword [rbp + 0x1ec], 0x8e0096
mov dword [rbp + 0x1f0], 0x990088
mov dword [rbp + 0x1f4], 0xda00de
mov dword [rbp + 0x1f8], 0xce00c5
mov dword [rbp + 0x1fc], 0xd0009e
mov dword [rbp + 0x200], 0xe100a6
mov dword [rbp + 0x204], 0xad00ab
mov dword [rbp + 0x208], 0xa600a5
mov dword [rbp + 0x20c], 0xae00b2
mov dword [rbp + 0x210], 0xa000be
mov dword [rbp + 0x214], 0xb200be
mov dword [rbp + 0x218], 0xe2
movsxd rax, ecx
xor word [rbp + rax*2 + 0x80], cx
add ecx, r12d
cmp ecx, edx
jb 0x14013b8f0
mov word [rbp + 0x21a], r15w
lea rax, [rbp + 0x80]
mov r8, rdi
inc r8
cmp word [rax + r8*2], r15w
jne 0x14013b914
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x220]
call fcn.14013ec14
xor eax, eax
mov dword [rsp + 0x36], 0xb000d
mov word [rsp + 0x3a], ax
mov ecx, r15d
movsxd rax, ecx
xor word [rsp + rax*2 + 0x36], cx
add ecx, r12d
cmp ecx, 2
jb 0x14013b943
mov word [rsp + 0x3a], r15w
lea rax, [rsp + 0x36]
mov r8, rdi
inc r8
cmp word [rax + r8*2], r15w
jne 0x14013b961
lea rdx, [rsp + 0x36]
lea rcx, [rbp + 0x220]
call fcn.14013ec14
xor eax, eax
mov dword [rsp + 0x50], 0x2f0032
mov word [rbp + 0x24], ax
mov edx, 0x6a
mov dword [rsp + 0x54], 0x4b0022
mov ecx, r15d
mov dword [rsp + 0x58], 0x660065
mov dword [rsp + 0x5c], 0x6e006d
mov dword [rsp + 0x60], 0x6e0066
mov dword [rsp + 0x64], 0x6a0025
mov dword [rsp + 0x68], 0x6c0062
mov dword [rsp + 0x6c], 0x760062
mov dword [rsp + 0x70], 0x78006a
mov dword [rsp + 0x74], 0x74007c
mov dword [rsp + 0x78], 0x66003b
mov dword [rsp + 0x7c], 0x7e0078
mov dword [rbp - 0x80], 0x7f007e
mov dword [rbp - 0x7c], 0x750073
mov dword [rbp - 0x78], 0x3d007b
mov dword [rbp - 0x74], 0x6d006a
mov dword [rbp - 0x70], 0x470041
mov dword [rbp - 0x6c], 0x4a0044
mov dword [rbp - 0x68], 0x50047
mov dword [rbp - 0x64], 0x490047
mov dword [rbp - 0x60], 0x9004c
mov dword [rbp - 0x5c], 0x5f0045
mov dword [rbp - 0x58], 0x480044
mov dword [rbp - 0x54], 0x5c005c
mov dword [rbp - 0x50], 0x500010
mov dword [rbp - 0x4c], 0x470051
mov dword [rbp - 0x48], 0x5a005d
mov dword [rbp - 0x44], 0x440058
mov dword [rbp - 0x40], 0x4e0018
mov dword [rbp - 0x3c], 0x4f0053
mov dword [rbp - 0x38], 0x1d0054
mov dword [rbp - 0x34], 0x50004d
mov dword [rbp - 0x30], 0x350026
mov dword [rbp - 0x2c], 0x220035
mov dword [rbp - 0x28], 0x200036
mov dword [rbp - 0x24], 0x300066
mov dword [rbp - 0x20], 0x250021
mov dword [rbp - 0x1c], 0x6b0026
mov dword [rbp - 0x18], 0x21002e
mov dword [rbp - 0x14], 0x2c0021
mov dword [rbp - 0x10], 0x71003b
mov dword [rbp - 0xc], 0x3c002b
mov dword [rbp - 8], 0x270021
mov dword [rbp - 4], 0x360076
mov dword [rbp], 0x3a003b
mov dword [rbp + 4], 0x2e0035
mov dword [rbp + 8], 0x290032
mov dword [rbp + 0xc], 0x3e007e
mov dword [rbp + 0x10], 0x5000e
mov dword [rbp + 0x14], 0x70042
mov dword [rbp + 0x18], 0x130001
mov dword [rbp + 0x1c], 0x4000f
mov dword [rbp + 0x20], 0x47000d
movsxd rax, ecx
xor word [rsp + rax*2 + 0x50], cx
add ecx, r12d
cmp ecx, edx
jb 0x14013bb09
mov word [rbp + 0x24], r15w
lea rax, [rsp + 0x50]
mov r8, rdi
inc r8
cmp word [rax + r8*2], r15w
jne 0x14013bb25
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x220]
call fcn.14013ec14
xor eax, eax
mov dword [rsp + 0x3c], 0xb000d
mov word [rsp + 0x40], ax
mov ecx, r15d
movsxd rax, ecx
xor word [rsp + rax*2 + 0x3c], cx
add ecx, r12d
cmp ecx, 2
jb 0x14013bb52
mov word [rsp + 0x40], r15w
lea rax, [rsp + 0x3c]
mov r8, rdi
inc r8
cmp word [rax + r8*2], r15w
jne 0x14013bb70
lea rdx, [rsp + 0x3c]
lea rcx, [rbp + 0x220]
call fcn.14013ec14
mov ecx, r15d
mov dword [rsp + 0x50], 0x780042
mov dword [rsp + 0x54], 0x730022
mov dword [rsp + 0x58], 0x600076
mov dword [rsp + 0x5c], 0x740075
mov dword [rsp + 0x60], 0x670061
mov dword [rsp + 0x64], 0x2b006d
mov dword [rsp + 0x68], 0x54002e
mov dword [rsp + 0x6c], 0x5c004b
mov dword [rsp + 0x70], 0x310032
mov dword [rsp + 0x74], 0x660070
mov dword [rsp + 0x78], 0x610060
mov dword [rsp + 0x7c], 0x790079
mov dword [rbp - 0x80], 0x600038
mov dword [rbp - 0x7c], 0x6e0075
mov dword [rbp - 0x78], 0x7c003c
mov dword [rbp - 0x74], 0x7a006c
mov dword [rbp - 0x70], 0x400000
mov dword [rbp - 0x6c], 0x400041
mov dword [rbp - 0x68], 0x550041
mov dword [rbp - 0x64], 0x4e0052
mov dword [rbp - 0x60], 0x4e0046
mov dword [rbp - 0x5c], 0x44000a
mov dword [rbp - 0x58], 0x5f0059
mov dword [rbp - 0x54], 0x7b000e
mov dword [rbp - 0x50], 0x430055
mov dword [rbp - 0x4c], 0x40005f
mov dword [rbp - 0x48], 0x5a0014
mov dword [rbp - 0x44], 0x170050
mov dword [rbp - 0x40], 0x5c004b
mov dword [rbp - 0x3c], 0x4d0048
mov dword [rbp - 0x38], 0x5e0055
mov dword [rbp - 0x34], 0x4c005b
mov dword [rbp - 0x30], 0x6e
movsxd rax, ecx
xor word [rsp + rax*2 + 0x50], cx
add ecx, r12d
cmp ecx, r13d
jb 0x14013bc81
mov word [rbp - 0x2e], r15w
lea rax, [rsp + 0x50]
mov r8, rdi
inc r8
cmp word [rax + r8*2], r15w
jne 0x14013bc9e
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x220]
call fcn.14013ec14
xor eax, eax
mov dword [rsp + 0x42], 0xb000d
mov word [rsp + 0x46], ax
mov ecx, r15d
movsxd rax, ecx
xor word [rsp + rax*2 + 0x42], cx
add ecx, r12d
cmp ecx, 2
jb 0x14013bccb
mov word [rsp + 0x46], r15w
lea rax, [rsp + 0x42]
mov r8, rdi
inc r8
cmp word [rax + r8*2], r15w
jne 0x14013bce9
lea rdx, [rsp + 0x42]
lea rcx, [rbp + 0x220]
call fcn.14013ec14
mov ecx, r15d
mov dword [rbp + 0x50], 0x640054
mov dword [rbp + 0x54], 0x6e0070
mov r13d, 0x11
mov dword [rbp + 0x58], 0x250077
mov dword [rbp + 0x5c], 0x610069
mov dword [rbp + 0x60], 0x7a0028
mov dword [rbp + 0x64], 0x79006f
mov dword [rbp + 0x68], 0x64007a
mov dword [rbp + 0x6c], 0x6a006d
mov dword [rbp + 0x70], 0x63
movsxd rax, ecx
xor word [rbp + rax*2 + 0x50], cx
add ecx, r12d
cmp ecx, r13d
jb 0x14013bd4c
cmp qword [rbp + 0x238], 8
lea rbx, [rbp + 0x220]
mov r13d, 0x41
mov word [rbp + 0x72], r15w
cmovae rbx, qword [rbp + 0x220]
call qword [sym.imp.user32.dll_GetForegroundWindow]
lea r9d, [r13 + 3]
mov rdx, rbx
mov rcx, rax
lea r8, [rbp + 0x50]
call qword [sym.imp.user32.dll_MessageBoxW]
cmp eax, 6
jne 0x14013c00a
call fcn.140141298
mov ecx, r15d
mov dword [rbp + 0x6a8], 0x716459
movsxd rax, ecx
xor byte [rbp + rax + 0x6a8], cl
add ecx, r12d
cmp ecx, 3
jb 0x14013bdb3
xor eax, eax
mov byte [rbp + 0x6ab], r15b
mov byte [rsp + 0x31], al
mov ecx, r15d
mov dword [rsp + 0x29], 0x66616241
mov dword [rsp + 0x2d], 0x63637174
movsxd rax, ecx
xor byte [rsp + rax + 0x29], cl
add ecx, r12d
cmp ecx, 8
jb 0x14013bde5
mov byte [rsp + 0x31], r15b
mov ecx, r15d
mov dword [rsp + 0x32], 0x454055
movsxd rax, ecx
xor byte [rsp + rax + 0x32], cl
add ecx, r12d
cmp ecx, 3
jb 0x14013be04
lea r9, [rbp + 0x6a8]
mov byte [rsp + 0x35], r15b
lea r8, [rsp + 0x29]
lea rdx, [rsp + 0x32]
call fcn.14019cba8
lea rcx, [rbp + 0x220]
call fcn.14013ed68
jmp 0x14013b3dd
call fcn.140141298
call fcn.14014142c
mov rcx, rax
call fcn.14013f97c
lea rbx, [rax + 0x78]
call fcn.14014142c
mov rcx, rax
call fcn.14013f97c
mov r14d, 0xff
lea rcx, [rsp + 0x50]
mov r8d, r14d
xor edx, edx
mov rsi, rax
call fcn.1403ccc50
mov r8d, r14d
lea rcx, [rbp + 0x80]
xor edx, edx
call fcn.1403ccc50
xor eax, eax
mov dword [rsp + 0x29], 0x71677255
mov byte [rsp + 0x31], al
mov ecx, r15d
mov dword [rsp + 0x2d], 0x626b646a
movsxd rax, ecx
xor byte [rsp + rax + 0x29], cl
add ecx, r12d
cmp ecx, 8
jb 0x14013bea4
xor eax, eax
mov byte [rsp + 0x31], r15b
mov dword [rbp + 0x690], 0x6b767441
mov ecx, r15d
mov byte [rbp + 0x694], al
lea r13d, [rax + 4]
movsxd rax, ecx
xor byte [rbp + rax + 0x690], cl
add ecx, r12d
cmp ecx, r13d
jb 0x14013bed1
lea r9, [rsp + 0x50]
mov byte [rbp + 0x694], r15b
lea r8, [rsp + 0x29]
lea rdx, [rbp + 0x690]
call fcn.14019ce70
mov r14b, al
mov dword [rsp + 0x20], 0x70716050
xor eax, eax
mov dword [rsp + 0x24], 0x63746a73
mov byte [rsp + 0x28], al
mov ecx, r15d
movsxd rax, ecx
xor byte [rsp + rax + 0x20], cl
add ecx, r12d
cmp ecx, 8
jb 0x14013bf1c
xor eax, eax
mov byte [rsp + 0x28], r15b
mov byte [rbp + 0x69c], al
mov ecx, r15d
mov dword [rbp + 0x698], 0x6b767441
movsxd rax, ecx
xor byte [rbp + rax + 0x698], cl
add ecx, r12d
cmp ecx, r13d
jb 0x14013bf45
xor r15d, r15d
lea r9, [rbp + 0x80]
lea r8, [rsp + 0x20]
mov byte [rbp + 0x69c], r15b
lea rdx, [rbp + 0x698]
call fcn.14019ce70
test r14b, r14b
je 0x14013bfb8
test al, al
je 0x14013bfb8
lea rax, [rsp + 0x50]
sub rsi, rax
lea rcx, [rsp + 0x50]
mov al, byte [rcx]
mov byte [rcx + rsi], al
add rcx, r12
test al, al
jne 0x14013bf8f
lea rax, [rbp + 0x80]
sub rbx, rax
lea rcx, [rbp + 0x80]
mov al, byte [rcx]
mov byte [rcx + rbx], al
add rcx, r12
test al, al
jne 0x14013bfac
call fcn.14014142c
mov rcx, rax
call fcn.14013f97c
mov rcx, rdi
inc rcx
cmp byte [rax + rcx], r15b
jne 0x14013bfc8
cmp rcx, 3
jbe 0x14013c031
call fcn.14014142c
mov rcx, rax
call fcn.14013f97c
inc rdi
cmp byte [rax + rdi + 0x78], r15b
jne 0x14013bfe4
cmp rdi, 3
jbe 0x14013c031
call fcn.14014142c
mov rcx, rax
call fcn.14013f97c
mov byte [rax + 0xb4], r12b
jmp 0x14013c031
mov ecx, 7
cmp eax, ecx
jne 0x14013c025
call fcn.1401a9e40
call fcn.140140f70
mov rcx, rax
call fcn.1401ac830
lea rcx, [rbp + 0x220]
call fcn.14013ed68
add rsp, 0x748
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret