Function at 0x14020e270
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Execute anti-debugging instructions

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1290]
mov eax, 0x1390
call fcn.1403cb200
sub rsp, rax
xor eax, eax
mov dword [rbp - 0x58], 0x6d70646b
xor esi, esi
mov dword [rbp - 0x54], 0x35356961
mov ecx, esi
mov dword [rbp - 0x50], 0x67666d26
mov byte [rbp - 0x4c], al
nop dword [rax + rax]
movsxd rax, ecx
xor byte [rbp + rax - 0x58], cl
inc ecx
cmp ecx, 0xc
jb 0x14020e2c0
lea rdx, [0x1404ce490]
mov byte [rbp - 0x4c], sil
lea rcx, [rbp - 0x58]
call fcn.1401a7810
mov rbx, rax
mov dword [rbp - 0x4b], 0x6d70646b
xor eax, eax
mov dword [rbp - 0x47], 0x35356961
mov byte [rbp - 0x3f], al
mov ecx, esi
mov dword [rbp - 0x43], 0x67666d26
movsxd rax, ecx
xor byte [rbp + rax - 0x4b], cl
inc ecx
cmp ecx, 0xc
jb 0x14020e301
lea rdx, [0x1404ce6f8]
mov byte [rbp - 0x3f], sil
lea rcx, [rbp - 0x4b]
call fcn.1401a7810
xor edx, edx
lea rcx, [rbp + 0x290]
mov r8d, 0x1000
mov rdi, rax
call fcn.1403ccc50
xor edx, edx
lea rcx, [rbp - 0x30]
mov r8d, 0x2bc
call fcn.1403ccc50
xor eax, eax
mov dword [rsp + 0x20], 0x64007b
mov word [rsp + 0x6c], ax
mov ecx, esi
mov dword [rsp + 0x24], 0x660063
mov dword [rsp + 0x28], 0x370067
mov dword [rsp + 0x2c], 0x310034
mov dword [rsp + 0x30], 0x24006e
mov dword [rsp + 0x34], 0x320069
mov dword [rsp + 0x38], 0x3e006d
mov dword [rsp + 0x3c], 0x3b0023
mov dword [rsp + 0x40], 0x260027
mov dword [rsp + 0x44], 0x3e0073
mov dword [rsp + 0x48], 0x2d0075
mov dword [rsp + 0x4c], 0x210024
mov dword [rsp + 0x50], 0x7d0035
mov dword [rsp + 0x54], 0x78007e
mov dword [rsp + 0x58], 0x2c002b
mov dword [rsp + 0x5c], 0x7c0028
mov dword [rsp + 0x60], 0x420044
mov dword [rsp + 0x64], 0x460012
mov dword [rsp + 0x68], 0x580017
nop dword [rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x20], cx
inc ecx
cmp ecx, 0x26
jb 0x14020e3f0
mov word [rsp + 0x6c], si
mov ecx, esi
mov dword [rsp + 0x6e], 0x67004f
mov dword [rsp + 0x72], 0x6f0064
mov dword [rsp + 0x76], 0x6b006d
mov dword [rsp + 0x7a], 0x520063
mov dword [rsp + 0x7e], 0x600066
mov dword [rbp - 0x7e], 0x7e007b
mov dword [rbp - 0x7a], 0x440069
mov dword [rbp - 0x76], 0x5d004a
mov dword [rbp - 0x72], 0x7f0071
mov dword [rbp - 0x6e], 0x7c0076
mov dword [rbp - 0x6a], 0x460079
mov dword [rbp - 0x66], 0x720073
mov dword [rbp - 0x62], 0x7c
nop word [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x6e], cx
inc ecx
cmp ecx, 0x19
jb 0x14020e470
mov r9d, 0x1000
mov word [rbp - 0x60], si
lea r8, [rbp + 0x290]
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x6e]
call rbx
movsxd r9, eax
test eax, eax
je 0x14020e617
mov rcx, rsi
nop word [rax + rax]
rdtsc
shl rdx, 0x20
or rax, rdx
mov byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, r9
jb 0x14020e4b0
xor eax, eax
mov dword [rsp + 0x20], 0x64007b
mov word [rsp + 0x6c], ax
mov ecx, esi
mov dword [rsp + 0x24], 0x660063
mov dword [rsp + 0x28], 0x370067
mov dword [rsp + 0x2c], 0x310034
mov dword [rsp + 0x30], 0x24006e
mov dword [rsp + 0x34], 0x320069
mov dword [rsp + 0x38], 0x3e006d
mov dword [rsp + 0x3c], 0x3b0023
mov dword [rsp + 0x40], 0x260027
mov dword [rsp + 0x44], 0x3e0073
mov dword [rsp + 0x48], 0x2d0075
mov dword [rsp + 0x4c], 0x210024
mov dword [rsp + 0x50], 0x7d0035
mov dword [rsp + 0x54], 0x78007e
mov dword [rsp + 0x58], 0x2c002b
mov dword [rsp + 0x5c], 0x7c0028
mov dword [rsp + 0x60], 0x420044
mov dword [rsp + 0x64], 0x460012
mov dword [rsp + 0x68], 0x580017
nop word [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x20], cx
inc ecx
cmp ecx, 0x26
jb 0x14020e570
mov word [rsp + 0x6c], si
mov ecx, esi
mov dword [rsp + 0x6e], 0x67004f
mov dword [rsp + 0x72], 0x6f0064
mov dword [rsp + 0x76], 0x6b006d
mov dword [rsp + 0x7a], 0x520063
mov dword [rsp + 0x7e], 0x600066
mov dword [rbp - 0x7e], 0x7e007b
mov dword [rbp - 0x7a], 0x440069
mov dword [rbp - 0x76], 0x5d004a
mov dword [rbp - 0x72], 0x7f0071
mov dword [rbp - 0x6e], 0x7c0076
mov dword [rbp - 0x6a], 0x460079
mov dword [rbp - 0x66], 0x720073
mov dword [rbp - 0x62], 0x7c
nop word [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x6e], cx
inc ecx
cmp ecx, 0x19
jb 0x14020e5f0
lea r8, [rbp - 0x30]
mov word [rbp - 0x60], si
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x6e]
call rdi
mov byte [rbp - 0x30], sil
xor eax, eax
mov dword [rsp + 0x20], 0x64007b
mov word [rsp + 0x6c], ax
mov ecx, esi
mov dword [rsp + 0x24], 0x660063
mov dword [rsp + 0x28], 0x370067
mov dword [rsp + 0x2c], 0x310034
mov dword [rsp + 0x30], 0x24006e
mov dword [rsp + 0x34], 0x320069
mov dword [rsp + 0x38], 0x3e006d
mov dword [rsp + 0x3c], 0x3b0023
mov dword [rsp + 0x40], 0x260027
mov dword [rsp + 0x44], 0x3e0073
mov dword [rsp + 0x48], 0x2d0075
mov dword [rsp + 0x4c], 0x210024
mov dword [rsp + 0x50], 0x7d0035
mov dword [rsp + 0x54], 0x78007e
mov dword [rsp + 0x58], 0x2c002b
mov dword [rsp + 0x5c], 0x7c0028
mov dword [rsp + 0x60], 0x420044
mov dword [rsp + 0x64], 0x460012
mov dword [rsp + 0x68], 0x580017
nop dword [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x20], cx
inc ecx
cmp ecx, 0x26
jb 0x14020e6c0
xor eax, eax
mov word [rsp + 0x6c], si
mov word [rbp - 0x7a], ax
mov ecx, esi
mov dword [rsp + 0x6e], 0x6f0055
mov dword [rsp + 0x72], 0x6c006e
mov dword [rsp + 0x76], 0x6e0067
mov dword [rsp + 0x7a], 0x43004f
mov dword [rsp + 0x7e], 0x66004b
mov dword [rbp - 0x7e], 0x72007a
nop dword [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x6e], cx
inc ecx
cmp ecx, 0xc
jb 0x14020e710
mov r9d, 0x1000
mov word [rbp - 0x7a], si
lea r8, [rbp + 0x290]
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x6e]
call rbx
movsxd r9, eax
test eax, eax
je 0x14020e887
mov rcx, rsi
nop word [rax + rax]
rdtsc
shl rdx, 0x20
or rax, rdx
mov byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, r9
jb 0x14020e750
xor eax, eax
mov dword [rsp + 0x20], 0x64007b
mov word [rsp + 0x6c], ax
mov ecx, esi
mov dword [rsp + 0x24], 0x660063
mov dword [rsp + 0x28], 0x370067
mov dword [rsp + 0x2c], 0x310034
mov dword [rsp + 0x30], 0x24006e
mov dword [rsp + 0x34], 0x320069
mov dword [rsp + 0x38], 0x3e006d
mov dword [rsp + 0x3c], 0x3b0023
mov dword [rsp + 0x40], 0x260027
mov dword [rsp + 0x44], 0x3e0073
mov dword [rsp + 0x48], 0x2d0075
mov dword [rsp + 0x4c], 0x210024
mov dword [rsp + 0x50], 0x7d0035
mov dword [rsp + 0x54], 0x78007e
mov dword [rsp + 0x58], 0x2c002b
mov dword [rsp + 0x5c], 0x7c0028
mov dword [rsp + 0x60], 0x420044
mov dword [rsp + 0x64], 0x460012
mov dword [rsp + 0x68], 0x580017
nop word [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x20], cx
inc ecx
cmp ecx, 0x26
jb 0x14020e810
xor eax, eax
mov word [rsp + 0x6c], si
mov word [rbp - 0x7a], ax
mov ecx, esi
mov dword [rsp + 0x6e], 0x6f0055
mov dword [rsp + 0x72], 0x6c006e
mov dword [rsp + 0x76], 0x6e0067
mov dword [rsp + 0x7a], 0x43004f
mov dword [rsp + 0x7e], 0x66004b
mov dword [rbp - 0x7e], 0x72007a
nop dword [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x6e], cx
inc ecx
cmp ecx, 0xc
jb 0x14020e860
lea r8, [rbp - 0x30]
mov word [rbp - 0x7a], si
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x6e]
call rdi
mov byte [rbp - 0x30], sil
xor eax, eax
mov dword [rsp + 0x20], 0x64007b
mov word [rsp + 0x6c], ax
mov ecx, esi
mov dword [rsp + 0x24], 0x660063
mov dword [rsp + 0x28], 0x370067
mov dword [rsp + 0x2c], 0x310034
mov dword [rsp + 0x30], 0x24006e
mov dword [rsp + 0x34], 0x320069
mov dword [rsp + 0x38], 0x3e006d
mov dword [rsp + 0x3c], 0x3b0023
mov dword [rsp + 0x40], 0x260027
mov dword [rsp + 0x44], 0x3e0073
mov dword [rsp + 0x48], 0x2d0075
mov dword [rsp + 0x4c], 0x210024
mov dword [rsp + 0x50], 0x7d0035
mov dword [rsp + 0x54], 0x78007e
mov dword [rsp + 0x58], 0x2c002b
mov dword [rsp + 0x5c], 0x7c0028
mov dword [rsp + 0x60], 0x420044
mov dword [rsp + 0x64], 0x460012
mov dword [rsp + 0x68], 0x580017
nop dword [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x20], cx
inc ecx
cmp ecx, 0x26
jb 0x14020e930
xor eax, eax
mov word [rsp + 0x6c], si
mov word [rbp - 0x6a], ax
mov ecx, esi
mov dword [rsp + 0x6e], 0x67004f
mov dword [rsp + 0x72], 0x6f0064
mov dword [rsp + 0x76], 0x6b006d
mov dword [rsp + 0x7a], 0x520063
mov dword [rsp + 0x7e], 0x600066
mov dword [rbp - 0x7e], 0x7e007b
mov dword [rbp - 0x7a], 0x440069
mov dword [rbp - 0x76], 0x4a004a
mov dword [rbp - 0x72], 0x41005b
mov dword [rbp - 0x6e], 0x710067
nop word [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x6e], cx
inc ecx
cmp ecx, 0x14
jb 0x14020e9a0
mov r9d, 0x1000
mov word [rbp - 0x6a], si
lea r8, [rbp + 0x290]
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x6e]
call rbx
movsxd r9, eax
test eax, eax
je 0x14020eb37
mov rcx, rsi
nop word [rax + rax]
rdtsc
shl rdx, 0x20
or rax, rdx
mov byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, r9
jb 0x14020e9e0
xor eax, eax
mov dword [rsp + 0x20], 0x64007b
mov word [rsp + 0x6c], ax
mov ecx, esi
mov dword [rsp + 0x24], 0x660063
mov dword [rsp + 0x28], 0x370067
mov dword [rsp + 0x2c], 0x310034
mov dword [rsp + 0x30], 0x24006e
mov dword [rsp + 0x34], 0x320069
mov dword [rsp + 0x38], 0x3e006d
mov dword [rsp + 0x3c], 0x3b0023
mov dword [rsp + 0x40], 0x260027
mov dword [rsp + 0x44], 0x3e0073
mov dword [rsp + 0x48], 0x2d0075
mov dword [rsp + 0x4c], 0x210024
mov dword [rsp + 0x50], 0x7d0035
mov dword [rsp + 0x54], 0x78007e
mov dword [rsp + 0x58], 0x2c002b
mov dword [rsp + 0x5c], 0x7c0028
mov dword [rsp + 0x60], 0x420044
mov dword [rsp + 0x64], 0x460012
mov dword [rsp + 0x68], 0x580017
nop word [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x20], cx
inc ecx
cmp ecx, 0x26
jb 0x14020eaa0
xor eax, eax
mov word [rsp + 0x6c], si
mov word [rbp - 0x6a], ax
mov ecx, esi
mov dword [rsp + 0x6e], 0x67004f
mov dword [rsp + 0x72], 0x6f0064
mov dword [rsp + 0x76], 0x6b006d
mov dword [rsp + 0x7a], 0x520063
mov dword [rsp + 0x7e], 0x600066
mov dword [rbp - 0x7e], 0x7e007b
mov dword [rbp - 0x7a], 0x440069
mov dword [rbp - 0x76], 0x4a004a
mov dword [rbp - 0x72], 0x41005b
mov dword [rbp - 0x6e], 0x710067
nop word [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x6e], cx
inc ecx
cmp ecx, 0x14
jb 0x14020eb10
lea r8, [rbp - 0x30]
mov word [rbp - 0x6a], si
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x6e]
call rdi
mov byte [rbp - 0x30], sil
xor eax, eax
mov dword [rsp + 0x20], 0x64007b
mov word [rsp + 0x6c], ax
mov ecx, esi
mov dword [rsp + 0x24], 0x660063
mov dword [rsp + 0x28], 0x370067
mov dword [rsp + 0x2c], 0x310034
mov dword [rsp + 0x30], 0x24006e
mov dword [rsp + 0x34], 0x320069
mov dword [rsp + 0x38], 0x3e006d
mov dword [rsp + 0x3c], 0x3b0023
mov dword [rsp + 0x40], 0x260027
mov dword [rsp + 0x44], 0x3e0073
mov dword [rsp + 0x48], 0x2d0075
mov dword [rsp + 0x4c], 0x210024
mov dword [rsp + 0x50], 0x7d0035
mov dword [rsp + 0x54], 0x78007e
mov dword [rsp + 0x58], 0x2c002b
mov dword [rsp + 0x5c], 0x7c0028
mov dword [rsp + 0x60], 0x420044
mov dword [rsp + 0x64], 0x460012
mov dword [rsp + 0x68], 0x580017
nop dword [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x20], cx
inc ecx
cmp ecx, 0x26
jb 0x14020ebe0
xor eax, eax
mov word [rsp + 0x6c], si
mov word [rbp - 0x5a], ax
mov ecx, esi
mov dword [rsp + 0x6e], 0x67004f
mov dword [rsp + 0x72], 0x6f0064
mov dword [rsp + 0x76], 0x6b006d
mov dword [rsp + 0x7a], 0x520063
mov dword [rsp + 0x7e], 0x600066
mov dword [rbp - 0x7e], 0x7e007b
mov dword [rbp - 0x7a], 0x440069
mov dword [rbp - 0x76], 0x5d004a
mov dword [rbp - 0x72], 0x7f0071
mov dword [rbp - 0x6e], 0x7c0076
mov dword [rbp - 0x6a], 0x460079
mov dword [rbp - 0x66], 0x720073
mov dword [rbp - 0x62], 0x5a007c
mov dword [rbp - 0x5e], 0x580048
nop dword [rax]
nop word [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x6e], cx
inc ecx
cmp ecx, 0x1c
jb 0x14020ec70
mov r9d, 0x1000
mov word [rbp - 0x5a], si
lea r8, [rbp + 0x290]
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x6e]
call rbx
movsxd r9, eax
test eax, eax
je 0x14020ee23
mov rcx, rsi
nop word [rax + rax]
rdtsc
shl rdx, 0x20
or rax, rdx
mov byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, r9
jb 0x14020ecb0
xor eax, eax
mov dword [rsp + 0x20], 0x64007b
mov word [rsp + 0x6c], ax
mov ecx, esi
mov dword [rsp + 0x24], 0x660063
mov dword [rsp + 0x28], 0x370067
mov dword [rsp + 0x2c], 0x310034
mov dword [rsp + 0x30], 0x24006e
mov dword [rsp + 0x34], 0x320069
mov dword [rsp + 0x38], 0x3e006d
mov dword [rsp + 0x3c], 0x3b0023
mov dword [rsp + 0x40], 0x260027
mov dword [rsp + 0x44], 0x3e0073
mov dword [rsp + 0x48], 0x2d0075
mov dword [rsp + 0x4c], 0x210024
mov dword [rsp + 0x50], 0x7d0035
mov dword [rsp + 0x54], 0x78007e
mov dword [rsp + 0x58], 0x2c002b
mov dword [rsp + 0x5c], 0x7c0028
mov dword [rsp + 0x60], 0x420044
mov dword [rsp + 0x64], 0x460012
mov dword [rsp + 0x68], 0x580017
nop word [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x20], cx
inc ecx
cmp ecx, 0x26
jb 0x14020ed70
xor eax, eax
mov word [rsp + 0x6c], si
mov word [rbp - 0x5a], ax
mov ecx, esi
mov dword [rsp + 0x6e], 0x67004f
mov dword [rsp + 0x72], 0x6f0064
mov dword [rsp + 0x76], 0x6b006d
mov dword [rsp + 0x7a], 0x520063
mov dword [rsp + 0x7e], 0x600066
mov dword [rbp - 0x7e], 0x7e007b
mov dword [rbp - 0x7a], 0x440069
mov dword [rbp - 0x76], 0x5d004a
mov dword [rbp - 0x72], 0x7f0071
mov dword [rbp - 0x6e], 0x7c0076
mov dword [rbp - 0x6a], 0x460079
mov dword [rbp - 0x66], 0x720073
mov dword [rbp - 0x62], 0x5a007c
mov dword [rbp - 0x5e], 0x580048
nop dword [rax]
nop word [rax + rax]
movsxd rax, ecx
xor word [rsp + rax*2 + 0x6e], cx
inc ecx
cmp ecx, 0x1c
jb 0x14020ee00
lea r8, [rbp - 0x30]
mov word [rbp - 0x5a], si
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x6e]
call rdi
lea r11, [rsp + 0x1390]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret