Function at 0x1404c0ce0
Capabilities:
Contain obfuscated stackstrings
Encode data using add xor sub operations
Encode data using xor

Disassembly:
xchg r13, rbx
mov qword [rsp + 8], r13
xchg r13, rbx
mov qword [rsp + 0x10], rsi
mov dword [rsp - 0x20], edx
xchg rdi, rbx
mov qword [rsp + 0x18], rbx
xchg rbx, rdi
nop
sub rsp, 8
mov qword [rsp], rbp
mov rbp, rsp
mov dword [rsp - 0x14], 0x4e3adea3
sub rsp, 0x60
and qword [rbp - 0x30], 0
lea r9, [rbp - 0x28]
mov dword [rsp - 0x40], 0x26cb6c29
mov eax, 0x7e3c23eb
sub eax, 0x41bf9a77
sub eax, 0x15f61839
add eax, 0x4bc7ae49
sub eax, 0x724e1f44
mov rdi, r8
xchg r12, rsi
mov r12, rdx
xchg r12, rsi
mov dword [rsp + 0x28], eax
xchg rbx, r8
mov r8, rcx
xchg r8, rbx
mov dword [rsp + 0x20], 0x7d666f52
xor dword [rsp + 0x20], 0x2593ba72
xor dword [rsp + 0x20], 0x647a3aae
xor dword [rsp + 0x20], 0x3c8fdf8e
xor r8d, r8d
mov qword [rbp - 0x28], rax
xchg rsp, rsp
lea rdx, [rbp - 0x30]
or rcx, 0xffffffffffffffff
call fcn.140095390
mov dword [rsp - 0x2c], 0x302ae687
test eax, eax
js 0x1404c0f7a
xchg rcx, rax
mov rcx, qword [rbp - 0x30]
xchg rcx, rax
xchg r9, rsi
movups xmm0, xmmword [r9]
xchg rsi, r9
mov dword [rbp - 0x18], 0x5dd37e58
sub dword [rbp - 0x18], 0x5ca34cb
sub dword [rbp - 0x18], 0x1d74be46
add dword [rbp - 0x18], 0x61aea182
mov dword [rbp - 0x14], 0x5c33690c
sub dword [rbp - 0x14], 0x10053e46
sub dword [rbp - 0x14], 0x1d090f07
add dword [rbp - 0x14], 0xd9a4615
add dword [rbp - 0x14], 0xa9b457ef
xchg r8, rax
movdqu xmmword [r8], xmm0
xchg r8, rax
xchg r13, rax
mov r13, qword [rbp - 0x30]
xchg r13, rax
mov dword [rbp - 0x10], 0x6e869155
sub dword [rbp - 0x10], 0x367c3704
xor dword [rbp - 0x10], 0x3db5a5d8
xor dword [rbp - 0x10], 0x776310f3
mov dword [rbp - 0xc], 0x77583b7a
xor dword [rbp - 0xc], 0x18fd88ab
sub dword [rbp - 0xc], 0x11397eeb
add dword [rbp - 0xc], 0x6bf97df3
mov dword [rbp - 8], 0x2aa2a388
sub dword [rbp - 8], 0x13916491
xor dword [rbp - 8], 0x5e713ce4
add dword [rbp - 8], 0x260a3d56
add dword [rbp - 8], 0x3fecd7e6
xchg rbx, r15
mov qword [rax + 0x10], r15
xchg r15, rbx
xchg r9, rax
mov r9, qword [rbp - 0x30]
xchg r9, rax
mov byte [rbp - 4], 0x75
sub byte [rbp - 4], 0x22
sub byte [rbp - 4], 7
add byte [rbp - 4], 0x13
xchg rdi, r9
mov qword [rax + 0x18], r9
xchg r9, rdi
xchg rbx, rcx
mov rbx, qword [rbp - 0x30]
xchg rbx, rcx
lea rax, [rcx + 0x28]
mov qword [rcx + 0x20], rax
mov r12, r12
xchg rsp, r8
mov rsp, qword [rbp - 0x30]
xchg r8, rsp
add r8, 0x28
xor edx, edx
mov dword [rsp - 0x20], 0x183694d
mov ecx, edx
mov eax, 0x7e768bbc
xor eax, 0x144dba8f
xor eax, 0x4d26081d
add eax, 0x511c73de
sub eax, 0x45cfa0da
rol eax, cl
xor al, byte [rbp + rdx - 0x18]
mov r9, r9
inc rdx
mov byte [r8], al
inc r8
mov r9, r9
cmp rdx, 0x15
jb 0x1404c0eb7
xchg rbx, rax
mov rbx, qword [rbp - 0x30]
xchg rbx, rax
lea r8, [rbp + 0x28]
and dword [rbp + 0x28], 0
mov dword [rsp - 0x18], 0x536c43cc
lea rdx, [rbp - 0x20]
sub rax, 0xffffffffffffffd8
xchg rcx, r10
mov r10, rbx
xchg rcx, r10
xchg rbx, rax
mov qword [rbp - 0x20], rbx
xchg rbx, rax
call fcn.1404c07f8
neg al
xchg rbx, rbx
lea r8, [rbp - 0x28]
pushf
mov r9d, 0x13b7e253
add r9d, 0x12a42a26
add r9d, 0x4043eddf
add r9d, 0xae31ca4
sub r9d, 0x718296fc
popf
lea rdx, [rbp - 0x30]
sbb ebx, ebx
mov dword [rsp - 0x18], 0x4040b9c7
or rcx, 0xffffffffffffffff
not ebx
and ebx, 0xc0000001
mov r9, r9
call fcn.140095450
mov eax, ebx
lea r11, [rsp + 0x60]
mov rsp, rsp
mov rbx, qword [r11 + 0x10]
xchg rsi, r8
mov r8, qword [r11 + 0x18]
xchg rsi, r8
xchg rsi, rdi
mov rsi, qword [r11 + 0x20]
xchg rsi, rdi
xchg r11, rbx
mov rsp, rbx
xchg r11, rbx
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret