Function at 0x1401adbf0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
xchg rdi, rbp
mov qword [rsp + 0x18], rbp
xchg rdi, rbp
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xa0
xchg r8, rcx
mov rdi, rcx
xchg rcx, r8
mov rbx, rdx
xchg r12, rcx
mov rsi, r12
xchg rcx, r12
test r8, r8
je 0x1401ae384
nop
mov dword [rbp - 0x29], 0x19859f8f
sub dword [rbp - 0x29], 0x57e17b9
add dword [rbp - 0x29], 0x2893fedd
add dword [rbp - 0x29], 0x2831742a
sub dword [rbp - 0x29], 0x37b1f5b8
add dword [rbp - 0x29], 0x4dedf1ca
sub dword [rbp - 0x29], 0x24455842
xor dword [rbp - 0x29], 0xa035685b
mov dword [rbp + 0x16], 0x15336d20
xor dword [rbp + 0x16], 0x70cacbb5
add dword [rbp + 0x16], 0x7b6724a
sub dword [rbp + 0x16], 0x107d2e00
sub dword [rbp + 0x16], 0x3d11049d
add dword [rbp + 0x16], 0x1d1a54f8
mov dword [rbp - 0x25], 0x4811e23d
add dword [rbp - 0x25], 0xcb89416
add dword [rbp - 0x25], 0x79d20ea
xor dword [rbp - 0x25], 0x48f69aa9
xor dword [rbp - 0x25], 0x761228aa
xor dword [rbp - 0x25], 0x145cffb7
xor dword [rbp - 0x25], 0x323b5fbb
add dword [rbp - 0x25], 0xb21271c4
mov dword [rbp + 0x1a], 0x61c1671d
add dword [rbp + 0x1a], 0xd9bfe64
sub dword [rbp + 0x1a], 0x329c7c6a
xor dword [rbp + 0x1a], 0x23ccb109
add dword [rbp + 0x1a], 0x411a180c
xor dword [rbp + 0x1a], 0x78177f00
add dword [rbp + 0x1a], 0x1c49d123
add dword [rbp + 0x1a], 0xcc55ef1
mov dword [rbp - 0x21], 0x4a856048
sub dword [rbp - 0x21], 0xb8d976d
xor dword [rbp - 0x21], 0x2bf4e33d
add dword [rbp - 0x21], 0x5ea29f88
sub dword [rbp - 0x21], 0x399ce65c
add dword [rbp - 0x21], 0xbcee11e4
mov dword [rbp + 0x1e], 0x4014f833
xor dword [rbp + 0x1e], 0x99861c7
sub dword [rbp + 0x1e], 0x1d8793cd
xor dword [rbp + 0x1e], 0x4013e9c1
xor dword [rbp + 0x1e], 0x7f74607c
add dword [rbp + 0x1e], 0x38e8b3a8
mov dword [rbp - 0x1d], 0x22e0193c
xor dword [rbp - 0x1d], 0x67e3e67b
xor dword [rbp - 0x1d], 0x65681863
add dword [rbp - 0x1d], 0x2b707a69
add dword [rbp - 0x1d], 0x1a2bac32
sub dword [rbp - 0x1d], 0x72b203
sub dword [rbp - 0x1d], 0x14d60047
xor dword [rbp - 0x1d], 0x63d3ffb5
add dword [rbp - 0x1d], 0xc38a5236
mov dword [rbp + 0x22], 0x5423173a
add dword [rbp + 0x22], 0x18378741
add dword [rbp + 0x22], 0xfdcc7d9
xor dword [rbp + 0x22], 0xb3753fc
add dword [rbp + 0x22], 0x12d3097
sub dword [rbp + 0x22], 0x15d423a8
sub dword [rbp + 0x22], 0x2eed3027
add dword [rbp + 0x22], 0x1ce33bdd
mov dword [rbp - 0x19], 0x98616a7
add dword [rbp - 0x19], 0x56a0c09f
xor dword [rbp - 0x19], 0x1cd34180
sub dword [rbp - 0x19], 0x6cea0378
add dword [rbp - 0x19], 0x4b0a7197
xor dword [rbp - 0x19], 0x63283e33
sub dword [rbp - 0x19], 0x1747ce40
add dword [rbp - 0x19], 0xd6008a60
mov dword [rbp + 0x26], 0x45395a18
add dword [rbp + 0x26], 0x322816a1
xor dword [rbp + 0x26], 0x3bbfa8a
sub dword [rbp + 0x26], 0xf96e796
xor dword [rbp + 0x26], 0x17da6c49
sub dword [rbp + 0x26], 0x71717306
add dword [rbp + 0x26], 0x154734da
add dword [rbp + 0x26], 0x3de3c1a9
mov dword [rbp - 0x15], 0x3ee8d2b9
sub dword [rbp - 0x15], 0x1b844f74
xor dword [rbp - 0x15], 0x63416f0a
sub dword [rbp - 0x15], 0x3aeeb86
sub dword [rbp - 0x15], 0x2cf80f55
add dword [rbp - 0x15], 0x4925b74c
sub dword [rbp - 0x15], 0x4a21abb7
add dword [rbp - 0x15], 0xe873f9ed
mov dword [rbp + 0x2a], 0x781e846
add dword [rbp + 0x2a], 0x55ba3714
sub dword [rbp + 0x2a], 0x20a889d3
xor dword [rbp + 0x2a], 0x57eb62d4
sub dword [rbp + 0x2a], 0x3a3b1f94
add dword [rbp + 0x2a], 0x27197e96
mov dword [rbp - 0x11], 0x5866131a
add dword [rbp - 0x11], 0xd51e5bf
sub dword [rbp - 0x11], 0x4305046f
xor dword [rbp - 0x11], 0x2118d03a
xor dword [rbp - 0x11], 0xffa2ac4
add dword [rbp - 0x11], 0xeaa6e862
mov dword [rbp + 0x2e], 0x6227f2e5
xor dword [rbp + 0x2e], 0x7773359e
sub dword [rbp + 0x2e], 0x5f9c670
add dword [rbp + 0x2e], 0x673bc7bb
sub dword [rbp + 0x2e], 0x463dc9e3
sub dword [rbp + 0x2e], 0x1fa951bc
add dword [rbp + 0x2e], 0x4babad32
mov dword [rbp - 0xd], 0x3c46f0ae
add dword [rbp - 0xd], 0x2bda688e
xor dword [rbp - 0xd], 0x1c4f8ac2
xor dword [rbp - 0xd], 0x1685538d
sub dword [rbp - 0xd], 0x349f31fa
sub dword [rbp - 0xd], 0x11f4d605
xor dword [rbp - 0xd], 0xeaa18e82
mov dword [rbp + 0x32], 0x6b296e4f
sub dword [rbp + 0x32], 0x4a9a86b2
add dword [rbp + 0x32], 0x4c5797e9
sub dword [rbp + 0x32], 0x5fa542d1
add dword [rbp + 0x32], 0xdc1bdd0
add dword [rbp + 0x32], 0x2947e3a8
add dword [rbp + 0x32], 0x13dac5d8
xor dword [rbp + 0x32], 0x2b991fe7
xor dword [rbp + 0x32], 0x13e3e5bf
mov dword [rbp - 9], 0x5e445a7a
sub dword [rbp - 9], 0x1c507cda
xor dword [rbp - 9], 0x3bbe71ab
sub dword [rbp - 9], 0x321df5f4
add dword [rbp - 9], 0x296c5e32
add dword [rbp - 9], 0x855ae2ad
mov dword [rbp + 0x36], 0x5a20ca02
xor dword [rbp + 0x36], 0x7d7292b9
add dword [rbp + 0x36], 0x2c91efb3
xor dword [rbp + 0x36], 0x3237bf21
add dword [rbp + 0x36], 0xc5640c0
xor dword [rbp + 0x36], 0x5807fba9
add dword [rbp + 0x36], 0x1e8bc6d3
add dword [rbp + 0x36], 0xfa9d7e8
mov dword [rbp - 5], 0x6cb98aec
add dword [rbp - 5], 0x983b57
xor dword [rbp - 5], 0x5d8962c0
xor dword [rbp - 5], 0x8f4c74f
xor dword [rbp - 5], 0x6b3a3f3
add dword [rbp - 5], 0xb85736b7
mov dword [rbp + 0x3a], 0x5409d94a
sub dword [rbp + 0x3a], 0x24d1bbc0
add dword [rbp + 0x3a], 0x33ba75da
sub dword [rbp + 0x3a], 0x1985bfc2
sub dword [rbp + 0x3a], 0x1c205f7b
add dword [rbp + 0x3a], 0x7d6ebf1
add dword [rbp + 0x3a], 0x3e7fc2aa
xor dword [rbp + 0x3a], 0x93ff763
sub dword [rbp + 0x3a], 0xc2f6936
mov dword [rbp - 1], 0x4c68a960
add dword [rbp - 1], 0x1446a204
sub dword [rbp - 1], 0xba225c8
sub dword [rbp - 1], 0x1f624a16
sub dword [rbp - 1], 0x6426b81
xor dword [rbp - 1], 0x670d3163
xor dword [rbp - 1], 0x5fa5632d
xor dword [rbp - 1], 0x68a05e7c
xor dword [rbp - 1], 0x89968ac1
mov dword [rbp + 0x3e], 0x41e095ed
sub dword [rbp + 0x3e], 0x2bbd5304
xor dword [rbp + 0x3e], 0x2c6d1147
xor dword [rbp + 0x3e], 0x7846a1de
xor dword [rbp + 0x3e], 0x5c6a2fb6
add dword [rbp + 0x3e], 0x2d9d2190
xor dword [rbp + 0x3e], 0x398e8f39
mov dword [rbp + 3], 0x5dba6c55
xor dword [rbp + 3], 0x10bc9571
xor dword [rbp + 3], 0x699d3b30
sub dword [rbp + 3], 0x2e0deec
xor dword [rbp + 3], 0x2dad6906
add dword [rbp + 3], 0xeadf6cc8
mov dword [rbp + 0x42], 0x187bd80e
xor dword [rbp + 0x42], 0x111f6530
add dword [rbp + 0x42], 0x7796005
add dword [rbp + 0x42], 0xb6a78ec
add dword [rbp + 0x42], 0x42077dcf
xor dword [rbp + 0x42], 0x3d4f4746
xor dword [rbp + 0x42], 0x10ab1b89
sub dword [rbp + 0x42], 0x5c3029da
add dword [rbp + 0x42], 0x5ef14f1c
mov dword [rbp + 7], 0x7e453113
sub dword [rbp + 7], 0x6569a228
add dword [rbp + 7], 0x33597e78
sub dword [rbp + 7], 0x353f6dbb
sub dword [rbp + 7], 0x1563d61c
add dword [rbp + 7], 0x666302c7
sub dword [rbp + 7], 0x548f1be5
xor dword [rbp + 7], 0x7cf1fa66
xor dword [rbp + 7], 0x9962bcfe
mov dword [rbp + 0x46], 0xc8e6d6a
sub dword [rbp + 0x46], 0xc649070
add dword [rbp + 0x46], 0x32f741fa
add dword [rbp + 0x46], 0x4b3e935c
sub dword [rbp + 0x46], 0x2a3ef58b
add dword [rbp + 0x46], 0x10c11cdc
xor dword [rbp + 0x46], 0x8e0ebdd
add dword [rbp + 0x46], 0xe7845fb
mov dword [rbp + 0xb], 0x5b31c294
xor dword [rbp + 0xb], 0x372e5957
sub dword [rbp + 0xb], 0x611a0df5
xor dword [rbp + 0xb], 0x1613c9d9
add dword [rbp + 0xb], 0x50e67eff
sub dword [rbp + 0xb], 0x186bdcca
xor dword [rbp + 0xb], 0xa36610ba
mov dword [rbp + 0x4a], 0x1679cd52
xor dword [rbp + 0x4a], 0x5cc90e40
sub dword [rbp + 0x4a], 0x15ba0189
xor dword [rbp + 0x4a], 0x56bba8b
xor dword [rbp + 0x4a], 0x5ed89845
add dword [rbp + 0x4a], 0xf379934
mov dword [rbp + 0xf], 0x598bb751
sub dword [rbp + 0xf], 0x20ec58af
sub dword [rbp + 0xf], 0x274b8717
add dword [rbp + 0xf], 0x40762b46
add dword [rbp + 0xf], 0x12c28e0c
sub dword [rbp + 0xf], 0x887dfa7
xor dword [rbp + 0xf], 0xaaf247c0
mov dword [rbp + 0x4e], 0x4670f9a3
add dword [rbp + 0x4e], 0x2297f315
xor dword [rbp + 0x4e], 0x6a3c0e6c
add dword [rbp + 0x4e], 0x194a3b65
add dword [rbp + 0x4e], 0x3254e716
add dword [rbp + 0x4e], 0x1551d486
add dword [rbp + 0x4e], 0x1e5ba6aa
mov word [rbp + 0x13], 0x6cb6
sub word [rbp + 0x13], 0x18a8
sub word [rbp + 0x13], 0x5384
xor word [rbp + 0x13], 0x5ad2
add word [rbp + 0x13], 0x12b3
sub word [rbp + 0x13], 0x3701
add word [rbp + 0x13], 0x38b5
add word [rbp + 0x13], 0x8837
mov word [rbp + 0x52], 0x567c
sub word [rbp + 0x52], 0x12c2
sub word [rbp + 0x52], 0x1212
add word [rbp + 0x52], 0x4040
sub word [rbp + 0x52], 0x2d00
xor word [rbp + 0x52], 0xc06b
xor eax, eax
mov byte [rbp + 0x54], al
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rbp + rax + 0x16]
movzx edx, byte [rbp + rax - 0x29]
add dl, cl
mov byte [rbp + rax + 0x16], dl
mov byte [rbp + rax - 0x29], reloc.SHLWAPI.dll_SHCreateMemStream
add byte [rbp + rax - 0x29], 0x41
sub byte [rbp + rax - 0x29], 0x21
add byte [rbp + rax - 0x29], 0x48
sub byte [rbp + rax - 0x29], 0x26
xor byte [rbp + rax - 0x29], 0x4e
inc rax
cmp rax, 0x3e
jb 0x1401ae2aa
mov edx, 0x3c04738b
add edx, 0x31ee8f1c
xor edx, 0x6ca421e1
add edx, 0xa5b414a
add edx, 0x47861086
add edx, 0x1ac7cc56
sub edx, 0x394680b8
xor edx, 0x13bf2ed4
sub edx, 0x2706ee22
xor ecx, ecx
call fcn.1401af9e0
movsxd rcx, eax
movzx edx, byte [rbp + rcx + 0x16]
xor eax, eax
nop dword [rax]
nop dword [rax + rax]
mov byte [rbp + rax + 0x16], 0xe
sub byte [rbp + rax + 0x16], 7
sub byte [rbp + rax + 0x16], 6
add byte [rbp + rax + 0x16], 0x19
xor byte [rbp + rax + 0x16], 0x25
sub byte [rbp + rax + 0x16], 0x3d
xor byte [rbp + rax + 0x16], 2
inc rax
cmp rax, 0x3e
jb 0x1401ae337
mov byte [rbx], dl
inc rbx
sub rdi, 1
jne 0x1401adc32
xchg rcx, rbx
mov qword [rsi], rcx
xchg rcx, rbx
jmp 0x1401ae387
mov qword [rcx], rdx
xchg rbx, rsi
mov rax, rbx
xchg rbx, rsi
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
xchg rdi, rcx
mov rcx, qword [r11 + 0x20]
xchg rcx, rdi
mov rsp, r11
push rbx
push rax
push rdx
push rax
xchg qword [rsp + 0x20], rbp
pop rax
pop rdx
pop rax
pop rbx
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]