Function at 0x14009dc90
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov r11, rsp
push rbp
push rbx
push rsi
push rdi
lea rbp, [r11 - 0x57]
sub rsp, 0x88
mov word [rbp - 0x26], 0x7974
mov rsi, r8
mov word [rbp - 0x29], 0x6d45
mov rdi, rdx
mov byte [rbp - 0x27], 0x70
mov rbx, rcx
mov dword [rbp - 0x24], 0x79656b20
mov byte [rbp - 0x20], 0
mov dword [rbp - 0xe], 0x6c207965
mov dword [rbp - 0x17], 0x72726f63
mov word [rbp - 7], 0x6874
mov word [rbp - 0x19], 0x6e49
mov dword [rbp - 0x13], 0x20746365
mov byte [rbp - 0xf], 0x6b
mov word [rbp - 0xa], 0x6e65
mov byte [rbp - 5], 0
mov byte [rbp - 8], 0x67
mov word [rbp + 0xb], 0x636f
mov word [rbp + 8], 0x6220
mov word [rbp], 0x636e
mov dword [rbp + 0x12], 0x687467
mov byte [rbp - 1], 0x49
mov dword [rbp + 3], 0x63657272
mov word [rbp + 0x10], 0x6e65
mov word [rbp + 0xd], 0x206b
mov byte [rbp + 7], 0x74
mov byte [rbp + 0xf], 0x6c
mov byte [rbp + 0xa], 0x6c
mov byte [rbp + 2], 0x6f
test rdx, rdx
je 0x14009e212
lea eax, [r9 - 0x10]
test eax, 0xffffffe7
jne 0x14009e1f4
cmp r9d, 0x28
je 0x14009e1f4
movsxd rcx, dword [rbp + 0x7f]
lea eax, [rcx - 0x10]
test eax, 0xffffffe7
jne 0x14009e230
cmp ecx, 0x28
je 0x14009e230
mov qword [r11 + 8], r12
mov r8, rcx
mov qword [r11 + 0x18], r13
mov rdx, rsi
mov dword [rbx + 0x3d0], ecx
lea rcx, [rbx + 0x3d8]
mov qword [r11 + 0x20], r14
mov qword [r11 - 0x28], r15
mov dword [rbx + 0x3cc], r9d
call fcn.1400e0d60
movsxd r8, dword [rbx + 0x3d0]
lea rcx, [rbx + 0x3f8]
mov rdx, rsi
call fcn.1400e0d60
mov eax, dword [rbx + 0x3cc]
mov ecx, dword [rbx + 0x3d0]
cmp eax, 0x10
je 0x14009dde3
cmp eax, 0x18
mov eax, 0xe
jne 0x14009ddfd
cmp ecx, 0x20
mov edx, 0xc
cmovne eax, edx
jmp 0x14009ddfd
cmp ecx, 0x10
jne 0x14009dded
lea eax, [rcx - 6]
jmp 0x14009ddfd
cmp ecx, 0x18
mov eax, 0xe
mov edx, 0xc
cmove eax, edx
mov dword [rbx + 0x3d4], eax
xor r14d, r14d
mov eax, ecx
mov ecx, dword [rbx + 0x3d4]
cdq
and edx, 3
add eax, edx
sar eax, 2
movsxd r12, eax
mov r15, r12
test ecx, ecx
js 0x14009de4d
lea rsi, [rbx + 0xc]
test r12d, r12d
jle 0x14009de3b
mov r8, r12
xor edx, edx
shl r8, 2
mov rcx, rsi
call fcn.1400e1410
mov ecx, dword [rbx + 0x3d4]
inc r14d
add rsi, 0x20
cmp r14d, ecx
jle 0x14009de25
xor esi, esi
test ecx, ecx
js 0x14009de86
lea r14, [rbx + 0x1ec]
nop word [rax + rax]
test r12d, r12d
jle 0x14009de76
mov r8, r12
xor edx, edx
shl r8, 2
mov rcx, r14
call fcn.1400e1410
mov ecx, dword [rbx + 0x3d4]
inc esi
add r14, 0x20
cmp esi, ecx
jle 0x14009de60
mov eax, dword [rbx + 0x3cc]
lea esi, [rcx + 1]
cdq
imul esi, r12d
and edx, 3
add eax, edx
lea rdx, [rbx + 0x418]
sar eax, 2
movsxd r13, eax
test eax, eax
jle 0x14009dee8
mov r8d, r13d
nop dword [rax]
movzx ecx, byte [rdi]
lea rdx, [rdx + 4]
shl ecx, 0x18
lea rdi, [rdi + 4]
mov dword [rdx - 4], ecx
movzx eax, byte [rdi - 3]
shl eax, 0x10
or eax, ecx
mov dword [rdx - 4], eax
movzx ecx, byte [rdi - 2]
shl ecx, 8
or ecx, eax
mov dword [rdx - 4], ecx
movzx eax, byte [rdi - 1]
or eax, ecx
mov dword [rdx - 4], eax
sub r8, 1
jne 0x14009deb0
xor r10d, r10d
test r13d, r13d
jle 0x14009df49
xor r11d, r11d
lea r9, [rbx + 0x418]
nop word [rax + rax]
cmp r10d, esi
jge 0x14009e075
mov eax, r10d
inc r11
cdq
inc r10d
idiv r12d
movsxd rcx, eax
movsxd r8, edx
lea rdx, [r8 + rcx*8]
mov ecx, dword [r9]
mov dword [rbx + rdx*4 + 0xc], ecx
mov ecx, dword [rbx + 0x3d4]
sub ecx, eax
movsxd rax, ecx
lea rcx, [r8 + rax*8]
mov eax, dword [r9]
add r9, 4
mov dword [rbx + rcx*4 + 0x1ec], eax
cmp r11, r13
jl 0x14009df00
cmp r10d, esi
jge 0x14009e075
lea r11, [0x140135e30]
lea r15, [0x140000000]
mov r8d, dword [rbx + r13*4 + 0x414]
movsxd rdx, r8d
mov rax, rdx
sar rax, 0x10
movzx ecx, al
movsx eax, byte [r11]
inc r11
mov qword [rbp + 0x67], r11
movsx r9d, byte [rcx + r15 + 0x132c30]
xor r9d, eax
mov rax, rdx
sar rax, 8
movzx ecx, al
shl r9d, 8
movzx eax, byte [rcx + r15 + 0x132c30]
xor r9d, eax
movzx eax, dl
shl r9d, 8
movzx eax, byte [rax + r15 + 0x132c30]
xor r9d, eax
mov eax, r8d
shr rax, 0x18
shl r9d, 8
movzx eax, byte [rax + r15 + 0x132c30]
xor r9d, eax
xor dword [rbx + 0x418], r9d
cmp r13d, 8
je 0x14009e140
cmp r13, 1
jle 0x14009e00f
lea rcx, [rbx + 0x41c]
lea rdx, [r13 - 1]
nop dword [rax]
nop word [rax + rax]
mov eax, dword [rcx - 4]
xor dword [rcx], eax
lea rcx, [rcx + 4]
sub rdx, 1
jne 0x14009e000
test r13d, r13d
jle 0x14009e069
lea r9, [rbx + 0x418]
xor r11d, r11d
nop
cmp r10d, esi
jge 0x14009e072
mov eax, r10d
inc r11
cdq
inc r10d
idiv r12d
movsxd rcx, eax
movsxd r8, edx
lea rdx, [r8 + rcx*8]
mov ecx, dword [r9]
mov dword [rbx + rdx*4 + 0xc], ecx
mov ecx, dword [rbx + 0x3d4]
sub ecx, eax
movsxd rax, ecx
lea rcx, [r8 + rax*8]
mov eax, dword [r9]
add r9, 4
mov dword [rbx + rcx*4 + 0x1ec], eax
cmp r11, r13
jl 0x14009e020
mov r11, qword [rbp + 0x67]
cmp r10d, esi
jl 0x14009df60
mov r15, r12
mov r13, qword [rsp + 0xc0]
mov edi, 1
mov r12, qword [rsp + 0xb0]
cmp dword [rbx + 0x3d4], edi
jle 0x14009e120
lea rsi, [rbx + 0x20c]
nop dword [rax]
test r15, r15
jle 0x14009e112
mov r10, rsi
lea r14, [0x140000000]
mov r11, r15
nop dword [rax]
nop word [rax + rax]
mov eax, dword [r10]
lea r10, [r10 + 4]
mov edx, eax
movsxd r9, eax
shr rdx, 0x18
mov rax, r9
sar rax, 0x10
movzx ecx, al
mov rax, r9
sar rax, 8
mov r8d, dword [r14 + rdx*4 + 0x134e30]
xor r8d, dword [r14 + rcx*4 + 0x135230]
movzx ecx, al
movzx eax, r9b
xor r8d, dword [r14 + rcx*4 + 0x135630]
xor r8d, dword [r14 + rax*4 + 0x135a30]
mov dword [r10 - 4], r8d
sub r11, 1
jne 0x14009e0c0
inc edi
add rsi, 0x20
cmp edi, dword [rbx + 0x3d4]
jl 0x14009e0a0
mov r15, qword [rsp + 0x80]
mov r14, qword [rsp + 0xc8]
mov byte [rbx + 8], 1
add rsp, 0x88
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rcx, [rbx + 0x41c]
mov edx, 3
nop dword [rax]
mov eax, dword [rcx - 4]
xor dword [rcx], eax
lea rcx, [rcx + 4]
sub rdx, 1
jne 0x14009e150
mov eax, dword [rbx + 0x424]
mov ecx, eax
movsxd rdx, eax
shr rcx, 0x18
mov rax, rdx
sar rax, 0x10
movsx r8d, byte [rcx + r15 + 0x132c30]
movzx ecx, al
shl r8d, 8
movzx eax, byte [rcx + r15 + 0x132c30]
xor r8d, eax
mov rax, rdx
sar rax, 8
shl r8d, 8
movzx ecx, al
movzx eax, byte [rcx + r15 + 0x132c30]
xor r8d, eax
movzx eax, dl
shl r8d, 8
movzx eax, byte [rax + r15 + 0x132c30]
xor r8d, eax
xor dword [rbx + 0x428], r8d
cmp r13, 5
jle 0x14009e00f
lea rax, [rbx + 0x42c]
lea rdx, [r13 - 5]
nop word [rax + rax]
mov ecx, dword [rax - 4]
xor dword [rax], ecx
lea rax, [rax + 4]
sub rdx, 1
jne 0x14009e1e0
jmp 0x14009e014
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 0x17]
call fcn.14009c7b0
lea rdx, [0x140157a50]
lea rcx, [rbp + 0x17]
call fcn.1400dfbc4
int3
lea rdx, [rbp - 0x29]
lea rcx, [rbp + 0x17]
call fcn.14009c7b0
lea rdx, [0x140157a50]
lea rcx, [rbp + 0x17]
call fcn.1400dfbc4
int3
lea rdx, [rbp - 1]
lea rcx, [rbp + 0x17]
call fcn.14009c7b0
lea rdx, [0x140157a50]
lea rcx, [rbp + 0x17]
call fcn.1400dfbc4
int3