Function at 0x140011810
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1030]
mov eax, 0x1130
call fcn.140020430
sub rsp, rax
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rsp + 0x1180], rbx
mov rax, qword [0x140081080]
xor rax, rsp
mov qword [rbp + 0x1020], rax
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x48], rcx
movdqa xmm0, xmmword [0x1400755e0]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x48], 0
mov r12, 0xffffffffffffffff
mov r8, r12
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140011880
lea rcx, [rsp + 0x48]
call fcn.140019f10
nop
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x20]
call fcn.1400111a0
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x1400118e2
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400118dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400120ad
call fcn.14001f794
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x420]
call fcn.140021810
xor edx, edx
mov r8, qword [rsp + 0x28]
mov rdi, qword [rsp + 0x20]
sub r8, rdi
je 0x140011934
lea rcx, [rbp + 0x420]
lea rax, [rbp + 0x420]
sub rdi, rax
nop dword [rax + rax]
movzx eax, byte [rdi + rcx]
mov byte [rcx], al
inc edx
lea rcx, [rcx + 1]
movsxd rax, edx
cmp rax, r8
jb 0x140011920
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x820]
call fcn.140021810
xor eax, eax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rax
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0xc20]
call fcn.140021810
mov word [rbp + 0x40e], 0x3939
mov dword [rbp + 0x3f0], 0x37383843
mov dword [rbp + 0x3ff], 0x42324436
mov dword [rbp + 0x3f5], 0x44433234
mov word [rbp + 0x408], 0x4342
mov dword [rbp + 0x403], 0x42413436
mov word [rbp + 0x3fc], 0x3945
mov word [rbp + 0x3f9], 0x4132
mov byte [rbp + 0x410], 0
mov byte [rbp + 0x3fb], 0x37
mov byte [rbp + 0x3f4], 0x44
mov word [rbp + 0x40b], 0x3836
mov byte [rbp + 0x40a], 0x46
mov byte [rbp + 0x407], 0x43
mov byte [rbp + 0x3fe], 0x46
mov byte [rbp + 0x40d], 0x46
lea r8, [rbp + 0x3f0]
mov edx, 0x400
lea rcx, [rbp + 0xc20]
call fcn.140023db4
lea rax, vtable.CRijndael.0
mov qword [rsp + 0x70], rax
mov byte [rsp + 0x78], 0
mov dword [rbp + 0x33c], 0x20
mov eax, 0x10
mov dword [rbp + 0x340], eax
movups xmm0, xmmword [rsp + 0x48]
movups xmmword [rbp + 0x348], xmm0
movsxd r8, eax
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x368]
call fcn.1400213b0
mov edi, dword [rbp + 0x33c]
cmp edi, 0x10
je 0x140011a72
mov ecx, 0xe
cmp edi, 0x18
jne 0x140011a96
mov eax, 0xc
cmp dword [rbp + 0x340], 0x20
cmovne ecx, eax
jmp 0x140011a96
cmp dword [rbp + 0x340], 0x10
jne 0x140011a82
mov ecx, 0xa
jmp 0x140011a96
mov ecx, 0xe
mov eax, 0xc
cmp dword [rbp + 0x340], 0x18
cmove ecx, eax
mov dword [rbp + 0x344], ecx
mov eax, dword [rbp + 0x340]
cdq
and edx, 3
add eax, edx
sar eax, 2
movsxd r15, eax
xor edx, edx
mov rsi, r15
test ecx, ecx
js 0x140011ae5
lea r8, [rsp + 0x7c]
nop dword [rax]
test r15d, r15d
jle 0x140011ad5
mov rdi, r8
xor eax, eax
mov rcx, r15
rep stosd dword [rdi], eax
mov ecx, dword [rbp + 0x344]
inc edx
add r8, 0x20
cmp edx, ecx
jle 0x140011ac0
mov edi, dword [rbp + 0x33c]
xor edx, edx
test ecx, ecx
js 0x140011b17
lea r8, [rbp + 0x15c]
test r15d, r15d
jle 0x140011b07
mov rdi, r8
xor eax, eax
mov rcx, r15
rep stosd dword [rdi], eax
mov ecx, dword [rbp + 0x344]
inc edx
add r8, 0x20
cmp edx, ecx
jle 0x140011af2
mov edi, dword [rbp + 0x33c]
lea ebx, [rcx + 1]
imul ebx, r15d
mov eax, edi
cdq
and edx, 3
add eax, edx
sar eax, 2
movsxd r13, eax
lea r8, [rbp + 0x388]
lea rdi, [rbp + 0xc20]
test eax, eax
jle 0x140011b85
mov r9d, r13d
nop dword [rax]
nop word [rax + rax]
movzx edx, byte [rdi]
movzx eax, byte [rdi + 1]
movzx ecx, byte [rdi + 2]
shl edx, 8
or edx, eax
shl edx, 8
or edx, ecx
shl edx, 8
movzx eax, byte [rdi + 3]
or edx, eax
mov dword [r8], edx
lea rdi, [rdi + 4]
lea r8, [r8 + 4]
sub r9, 1
jne 0x140011b50
mov ecx, dword [rbp + 0x344]
xor r9d, r9d
lea r14d, [r9 + 1]
test r13d, r13d
jle 0x140011be8
xor r11d, r11d
cmp r9d, ebx
jge 0x140011dad
mov eax, r9d
cdq
idiv r15d
movsxd rdi, eax
movsxd r8, edx
lea rcx, [r8 + rdi*8]
mov eax, dword [rbp + r11*4 + 0x388]
mov dword [rsp + rcx*4 + 0x7c], eax
mov eax, dword [rbp + 0x344]
sub eax, edi
cdqe
lea rcx, [r8 + rax*8]
mov eax, dword [rbp + r11*4 + 0x388]
mov dword [rbp + rcx*4 + 0x15c], eax
inc r11
inc r9d
cmp r11, r13
jl 0x140011b94
mov ecx, dword [rbp + 0x344]
cmp r9d, ebx
jge 0x140011db3
lea r12, [0x14006de40]
lea rsi, [0x140000000]
nop
mov edi, dword [rbp + r13*4 + 0x384]
movsxd rdx, edi
mov rax, rdx
sar rax, 0x10
movzx ecx, al
movsx r8d, byte [rcx + rsi + 0x70f60]
movsx eax, byte [r12]
xor r8d, eax
shl r8d, 8
mov rax, rdx
sar rax, 8
movzx ecx, al
movzx eax, byte [rcx + rsi + 0x70f60]
xor r8d, eax
shl r8d, 8
movzx eax, dl
movzx eax, byte [rax + rsi + 0x70f60]
xor r8d, eax
shl r8d, 8
mov eax, edi
shr rax, 0x18
movzx eax, byte [rax + rsi + 0x70f60]
xor r8d, eax
xor dword [rbp + 0x388], r8d
lea r12, [r12 + 1]
mov rcx, r14
cmp r13d, 8
je 0x140011cb0
cmp r14, r13
jge 0x140011d46
nop dword [rax]
nop dword [rax + rax]
mov eax, dword [rbp + rcx*4 + 0x384]
xor dword [rbp + rcx*4 + 0x388], eax
inc rcx
cmp rcx, r13
jl 0x140011c90
jmp 0x140011d46
mov eax, dword [rbp + rcx*4 + 0x384]
xor dword [rbp + rcx*4 + 0x388], eax
inc rcx
cmp rcx, 4
jl 0x140011cb0
mov eax, dword [rbp + 0x394]
movsxd rdx, eax
mov ecx, eax
shr rcx, 0x18
movsx edi, byte [rcx + rsi + 0x70f60]
shl edi, 8
mov rax, rdx
sar rax, 0x10
movzx ecx, al
movzx eax, byte [rcx + rsi + 0x70f60]
xor edi, eax
shl edi, 8
mov rax, rdx
sar rax, 8
movzx ecx, al
movzx eax, byte [rcx + rsi + 0x70f60]
xor edi, eax
shl edi, 8
movzx eax, dl
movzx eax, byte [rax + rsi + 0x70f60]
xor edi, eax
xor dword [rbp + 0x398], edi
mov ecx, 5
cmp r13, rcx
jle 0x140011d46
nop dword [rax]
mov eax, dword [rbp + rcx*4 + 0x384]
xor dword [rbp + rcx*4 + 0x388], eax
inc rcx
cmp rcx, r13
jl 0x140011d30
xor r11d, r11d
test r13d, r13d
jle 0x140011d9a
nop
cmp r9d, ebx
jge 0x140011da3
mov eax, r9d
cdq
idiv r15d
movsxd rdi, eax
movsxd r8, edx
lea rcx, [r8 + rdi*8]
mov eax, dword [rbp + r11*4 + 0x388]
mov dword [rsp + rcx*4 + 0x7c], eax
mov eax, dword [rbp + 0x344]
sub eax, edi
cdqe
lea rcx, [r8 + rax*8]
mov eax, dword [rbp + r11*4 + 0x388]
mov dword [rbp + rcx*4 + 0x15c], eax
inc r11
inc r9d
cmp r11, r13
jl 0x140011d50
cmp r9d, ebx
jl 0x140011c00
mov rsi, r15
mov r12, 0xffffffffffffffff
mov ecx, dword [rbp + 0x344]
cmp ecx, r14d
jle 0x140011e43
lea r10, [rbp + 0x17c]
test rsi, rsi
jle 0x140011e37
mov r8, r10
mov r9, rsi
lea r11, [0x140000000]
nop word [rax + rax]
mov eax, dword [r8]
movsxd rdi, eax
mov edx, eax
shr rdx, 0x18
mov rax, rdi
sar rax, 0x10
movzx ecx, al
mov edx, dword [r11 + rdx*4 + 0x6ea60]
xor edx, dword [r11 + rcx*4 + 0x6e660]
mov rax, rdi
sar rax, 8
movzx ecx, al
xor edx, dword [r11 + rcx*4 + 0x6e260]
movzx eax, dil
xor edx, dword [r11 + rax*4 + 0x6de60]
mov dword [r8], edx
lea r8, [r8 + 4]
sub r9, 1
jne 0x140011de0
mov ecx, dword [rbp + 0x344]
inc r14d
add r10, 0x20
cmp r14d, ecx
jl 0x140011dc3
mov byte [rsp + 0x78], 1
mov r15, qword [rsp + 0x28]
sub r15, qword [rsp + 0x20]
je 0x14001208a
movsxd rcx, dword [rbp + 0x340]
xor edx, edx
mov rax, r15
div rcx
test rdx, rdx
jne 0x14001208a
xor r14d, r14d
lea rsi, [rbp + 0x420]
lea rbx, [rbp + 0x820]
test rax, rax
je 0x140011fc6
nop word [rax + rax]
mov r8, rbx
mov rdx, rsi
lea rcx, [rsp + 0x70]
call fcn.140012710
lea rdi, [rbp + 0x368]
mov rax, rbx
cmp byte [rsp + 0x78], 0
je 0x140012067
xor r9d, r9d
movsxd r8, dword [rbp + 0x340]
test r8d, r8d
jle 0x140011f90
cmp r8d, 0x40
jb 0x140011f6a
lea ecx, [r8 - 1]
movsxd rdx, ecx
lea r10, [rbx + rdx]
lea rcx, [rbp + 0x368]
add rcx, rdx
cmp rbx, rcx
ja 0x140011ef8
lea rcx, [rbp + 0x368]
cmp r10, rcx
jae 0x140011f6a
mov ecx, r8d
and ecx, 0x8000003f
jge 0x140011f0a
dec ecx
or ecx, 0xffffffc0
inc ecx
mov edx, r8d
sub edx, ecx
nop
movdqu xmm1, xmmword [rax]
movdqu xmm0, xmmword [rdi]
pxor xmm1, xmm0
movdqu xmmword [rax], xmm1
movdqu xmm1, xmmword [rax + 0x10]
movdqu xmm0, xmmword [rdi + 0x10]
pxor xmm1, xmm0
movdqu xmmword [rax + 0x10], xmm1
movdqu xmm1, xmmword [rax + 0x20]
movdqu xmm0, xmmword [rdi + 0x20]
pxor xmm1, xmm0
movdqu xmmword [rax + 0x20], xmm1
movdqu xmm1, xmmword [rax + 0x30]
movdqu xmm0, xmmword [rdi + 0x30]
pxor xmm1, xmm0
movdqu xmmword [rax + 0x30], xmm1
add rdi, 0x40
add rax, 0x40
add r9d, 0x40
cmp r9d, edx
jl 0x140011f10
cmp r9d, r8d
jge 0x140011f90
sub rdi, rax
mov edx, r8d
sub edx, r9d
nop dword [rax + rax]
movzx ecx, byte [rdi + rax]
xor byte [rax], cl
lea rax, [rax + 1]
sub rdx, 1
jne 0x140011f80
mov rdx, rsi
lea rcx, [rbp + 0x368]
call fcn.1400213b0
movsxd rcx, dword [rbp + 0x340]
add rsi, rcx
add rbx, rcx
inc r14d
xor edx, edx
mov rax, r15
div rcx
mov rcx, rax
movsxd rax, r14d
cmp rax, rcx
jb 0x140011e90
mov rdi, qword [rsp + 0x38]
mov qword [rdi + 0x10], 0
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
lea rax, [rbp + 0x830]
inc r12
cmp byte [rax + r12], 0
jne 0x140011fe5
mov r8, r12
lea rdx, [rbp + 0x830]
mov rcx, rdi
call fcn.140019f10
nop
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x14001203a
mov rdx, qword [rsp + 0x30]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012035
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400120b3
call fcn.14001f794
mov rax, rdi
mov rcx, qword [rbp + 0x1020]
xor rcx, rsp
call fcn.14001f770
mov rbx, qword [rsp + 0x1180]
add rsp, 0x1130
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rdx, qword [0x140083850]
lea rcx, [rsp + 0x48]
call fcn.14001bc20
lea rdx, [0x14007f8d0]
lea rcx, [rsp + 0x48]
call fcn.1400212b4
int3
mov rdx, qword [0x140083858]
lea rcx, [rsp + 0x48]
call fcn.14001bc20
lea rdx, [0x14007f8d0]
lea rcx, [rsp + 0x48]
call fcn.1400212b4
nop
call fcn.140023c64
nop
call fcn.140023c64
int3