Function at 0x1401dd110
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r15
lea rbp, [rsp - 0x1f8]
sub rsp, 0x2f8
mov rsi, rdx
mov byte [rbp + 0x230], 0
xor r12d, r12d
mov qword [rbp - 0x18], 0xf
lea rdx, [rbp + 0x230]
mov qword [rbp - 0x30], r12
lea rcx, [rbp - 0x30]
mov qword [rbp - 0x20], r12
mov r15, r9
mov rdi, r8
call fcn.14013eec4
xor edx, edx
lea rcx, [rbp - 0x10]
mov r8d, 0xff
call fcn.1403ccc50
xor eax, eax
mov dword [rsp + 0x30], 0x4d327955
mov byte [rsp + 0x3a], al
mov ecx, r12d
mov dword [rsp + 0x34], 0x735c483c
mov word [rsp + 0x38], 0x455d
xor byte [rsp + rcx + 0x30], al
inc eax
movsxd rcx, eax
cmp rcx, 0xa
jb 0x1401dd191
lea rcx, [rbp - 0x10]
mov byte [rsp + 0x3a], r12b
dec rcx
nop dword [rax]
cmp byte [rcx + 1], r12b
lea rcx, [rcx + 1]
jne 0x1401dd1b0
lea r8, [rsp + 0x30]
xor edx, edx
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r8 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x1401dd1d0
mov dword [rsp + 0x30], 0x68664230
mov eax, r12d
mov dword [rsp + 0x34], 0x4831447d
mov rcx, r12
mov dword [rsp + 0x38], 0x413a64
nop
xor byte [rsp + rcx + 0x30], al
inc eax
movsxd rcx, eax
cmp rcx, 0xb
jb 0x1401dd200
lea rcx, [rbp - 0x10]
mov byte [rsp + 0x3b], r12b
dec rcx
nop dword [rax + rax]
cmp byte [rcx + 1], r12b
lea rcx, [rcx + 1]
jne 0x1401dd220
lea r8, [rsp + 0x30]
xor edx, edx
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r8 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x1401dd240
mov dword [rsp + 0x30], 0x76567653
mov eax, r12d
mov dword [rsp + 0x34], 0x427f3546
mov rcx, r12
mov dword [rsp + 0x38], 0x6d5059
nop
xor byte [rsp + rcx + 0x30], al
inc eax
movsxd rcx, eax
cmp rcx, 0xb
jb 0x1401dd270
lea rcx, [rbp - 0x10]
mov byte [rsp + 0x3b], r12b
dec rcx
nop dword [rax + rax]
cmp byte [rcx + 1], r12b
lea rcx, [rcx + 1]
jne 0x1401dd290
lea r9, [rsp + 0x30]
xor edx, edx
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r9 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x1401dd2b0
xor edx, edx
lea rcx, [rbp + 0xf0]
mov r8d, 0xff
call fcn.1403ccc50
mov eax, r12d
mov dword [rbp + 0x230], 0x793a3446
mov rcx, r12
mov dword [rbp + 0x234], 0x4a4936
nop
xor byte [rbp + rcx + 0x230], al
inc eax
movsxd rcx, eax
cmp rcx, 7
jb 0x1401dd2f0
lea rcx, [rbp + 0xf0]
mov byte [rbp + 0x237], r12b
dec rcx
cmp byte [rcx + 1], r12b
lea rcx, [rcx + 1]
jne 0x1401dd313
lea r8, [rbp + 0x230]
xor edx, edx
nop word [rax + rax]
movzx eax, byte [r8 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x1401dd330
mov dword [rsp + 0x30], 0x59676b34
mov eax, r12d
mov dword [rsp + 0x34], 0x36735568
mov rcx, r12
mov word [rsp + 0x38], 0x5c
nop dword [rax]
xor byte [rsp + rcx + 0x30], al
inc eax
movsxd rcx, eax
cmp rcx, 9
jb 0x1401dd360
lea rcx, [rbp + 0xf0]
mov byte [rsp + 0x39], r12b
dec rcx
nop
cmp byte [rcx + 1], r12b
lea rcx, [rcx + 1]
jne 0x1401dd380
lea r8, [rsp + 0x30]
xor edx, edx
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r8 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x1401dd3a0
mov qword [rsp + 0x340], rbx
xorps xmm0, xmm0
mov qword [rsp + 0x2f0], r14
movabs r13, 0x7fffffffffffffff
mov qword [rsp + 0x40], r12
movdqu xmmword [rsp + 0x30], xmm0
test rdi, rdi
je 0x1401dd444
cmp rdi, r13
ja 0x1401dd918
cmp rdi, 0x1000
jb 0x1401dd41b
lea rcx, [rdi + 0x27]
cmp rcx, rdi
jbe 0x1401dd91e
call fcn.1403caaf4
mov rcx, rax
test rax, rax
je 0x1401dd900
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1401dd423
mov rcx, rdi
call fcn.1403caaf4
lea rbx, [rax + rdi]
mov qword [rsp + 0x30], rax
mov r8, rdi
mov qword [rsp + 0x40], rbx
mov rdx, rsi
mov rcx, rax
call fcn.1403cc5a0
mov qword [rsp + 0x38], rbx
mov ecx, 0x30
call fcn.1403caaf4
mov r14, rax
call fcn.140141104
lea rdx, [rbp + 0xf0]
mov qword [rsp + 0x68], r12
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x80], 0xf
call fcn.14013eec4
mov rsi, qword [rsp + 0x78]
xorps xmm0, xmm0
mov qword [rbp - 0x38], r12
movdqu xmmword [rbp - 0x48], xmm0
test rsi, rsi
je 0x1401dd4f9
cmp rsi, r13
ja 0x1401dd906
cmp rsi, 0x1000
jb 0x1401dd4ca
lea rcx, [rsi + 0x27]
cmp rcx, rsi
jbe 0x1401dd90c
call fcn.1403caaf4
test rax, rax
je 0x1401dd912
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1401dd4d5
mov rcx, rsi
call fcn.1403caaf4
mov rdi, rax
lea rbx, [rdi + rsi]
mov qword [rbp - 0x48], rdi
mov r8, rsi
mov qword [rbp - 0x38], rbx
xor edx, edx
mov rcx, rdi
call fcn.1403ccc50
mov rsi, qword [rsp + 0x78]
mov qword [rbp - 0x40], rbx
jmp 0x1401dd4fd
mov rdi, qword [rbp - 0x48]
mov rcx, r12
test rsi, rsi
je 0x1401dd531
nop word [rax + rax]
cmp qword [rbp - 0x80], 0x10
lea rax, [rsp + 0x68]
cmovae rax, qword [rsp + 0x68]
movzx eax, byte [rax + rcx]
mov byte [rdi + rcx], al
inc rcx
cmp rcx, qword [rsp + 0x78]
jb 0x1401dd510
call fcn.140141104
lea rdx, [rbp - 0x10]
mov qword [rsp + 0x48], r12
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], 0xf
call fcn.14013eec4
mov rsi, qword [rsp + 0x58]
xorps xmm0, xmm0
mov qword [rbp - 0x50], r12
movdqu xmmword [rbp - 0x60], xmm0
test rsi, rsi
je 0x1401dd5d7
cmp rsi, r13
ja 0x1401dd906
cmp rsi, 0x1000
jb 0x1401dd5a8
lea rcx, [rsi + 0x27]
cmp rcx, rsi
jbe 0x1401dd90c
call fcn.1403caaf4
test rax, rax
je 0x1401dd912
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1401dd5b3
mov rcx, rsi
call fcn.1403caaf4
mov rdi, rax
lea rbx, [rdi + rsi]
mov qword [rbp - 0x60], rdi
mov r8, rsi
mov qword [rbp - 0x50], rbx
xor edx, edx
mov rcx, rdi
call fcn.1403ccc50
mov rsi, qword [rsp + 0x58]
mov qword [rbp - 0x58], rbx
jmp 0x1401dd5db
mov rdi, qword [rbp - 0x60]
mov rcx, r12
test rsi, rsi
je 0x1401dd605
cmp qword [rsp + 0x60], 0x10
lea rax, [rsp + 0x48]
cmovae rax, qword [rsp + 0x48]
movzx eax, byte [rax + rcx]
mov byte [rcx + rdi], al
inc rcx
cmp rcx, qword [rsp + 0x58]
jb 0x1401dd5e3
lea r8, [rbp - 0x48]
mov rcx, r14
lea rdx, [rbp - 0x60]
call fcn.1401d9f20
mov rdx, qword [rsp + 0x60]
mov rbx, rax
cmp rdx, 0x10
jb 0x1401dd655
mov rcx, qword [rsp + 0x48]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401dd650
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401dd912
call fcn.1403cad84
mov rdx, qword [rbp - 0x80]
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], 0xf
mov byte [rsp + 0x48], r12b
cmp rdx, 0x10
jb 0x1401dd6a4
mov rcx, qword [rsp + 0x68]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401dd69f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401dd912
call fcn.1403cad84
xorps xmm0, xmm0
mov qword [rsp + 0x78], r12
lea r8, [rbp - 0x78]
mov qword [rbp - 0x80], 0xf
lea rdx, [rsp + 0x30]
mov byte [rsp + 0x68], r12b
mov rcx, rbx
mov qword [rbp - 0x68], r12
movdqu xmmword [rbp - 0x78], xmm0
call fcn.1401da170
mov r8, qword [rbp - 0x70]
mov rcx, qword [rbp - 0x78]
sub r8, rcx
je 0x1401dd829
lea rax, [rbp + 0x238]
mov qword [rbp + 0x230], r12
lea r9, [rbp + 0x230]
mov qword [rsp + 0x20], rax
mov rdx, rcx
mov qword [rbp + 0x238], r12
call fcn.1401dad80
test al, al
je 0x1401dd825
mov rax, qword [rbp + 0x238]
mov rbx, r12
mov r14, qword [rbp + 0x230]
mov rsi, r12
mov rdi, rax
test rax, rax
je 0x1401dd788
cmp rax, r13
ja 0x1401dd918
cmp rax, 0x1000
jb 0x1401dd76b
lea rcx, [rax + 0x27]
cmp rcx, rax
jbe 0x1401dd91e
call fcn.1403caaf4
test rax, rax
je 0x1401dd900
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1401dd776
mov rcx, rdi
call fcn.1403caaf4
mov rbx, rax
mov r8, rdi
lea rsi, [rbx + rdi]
mov rdx, r14
mov rcx, rbx
call fcn.1403cc5a0
lea rax, [rbp - 0x60]
cmp r15, rax
je 0x1401dd7e1
mov rcx, qword [r15]
test rcx, rcx
je 0x1401dd7ca
mov rdx, qword [r15 + 0x10]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x1401dd7c5
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1401dd900
mov rcx, r8
call fcn.1403cad84
mov rcx, qword [rbp - 0x78]
mov qword [r15], rbx
mov bl, 1
mov qword [rbp - 0x70], rcx
mov qword [r15 + 8], rsi
mov qword [r15 + 0x10], rsi
jmp 0x1401dd82b
test rbx, rbx
je 0x1401dd819
sub rsi, rbx
mov rax, rbx
cmp rsi, 0x1000
jb 0x1401dd80e
mov rbx, qword [rbx - 8]
add rsi, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401dd900
mov rdx, rsi
mov rcx, rbx
call fcn.1403cad84
mov rcx, qword [rbp - 0x78]
mov bl, 1
mov qword [rbp - 0x70], rcx
jmp 0x1401dd82b
mov rcx, qword [rbp - 0x78]
xor bl, bl
test rcx, rcx
je 0x1401dd86d
mov rdx, qword [rbp - 0x68]
mov rax, rcx
sub rdx, rcx
cmp rdx, 0x1000
jb 0x1401dd85c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401dd900
call fcn.1403cad84
xorps xmm0, xmm0
mov qword [rbp - 0x68], r12
movdqu xmmword [rbp - 0x78], xmm0
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x1401dd8a5
mov rdx, qword [rsp + 0x40]
mov rax, rcx
sub rdx, rcx
cmp rdx, 0x1000
jb 0x1401dd8a0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401dd900
call fcn.1403cad84
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1401dd8dc
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401dd8d7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401dd900
call fcn.1403cad84
mov r14, qword [rsp + 0x2f0]
movzx eax, bl
mov rbx, qword [rsp + 0x340]
add rsp, 0x2f8
pop r15
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1403d7020
int3
call fcn.140194870
int3
call fcn.1401391d8
int3
call fcn.1403d7020
int3
call fcn.140194870
int3
call fcn.1401391d8
int3