Function at 0x140029070
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x90
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x7c], 0
mov dword [rsp + 0x80], 0x80006
movaps xmm0, xmmword [0x140086e10]
movaps xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0xa3a2a13c
mov qword [rsp + 0x54], 0
mov qword [rsp + 0x5a], 0
movabs rdi, 0x8937302348447af0
lea rsi, [rsp + 0x40]
movabs rbx, 0x5629003f280a9c30
call fcn.1400372c0
mov r14, qword [rax]
call fcn.1400372d0
mov rcx, qword [rax]
xor eax, eax
nop word [rax + rax]
cmp r14, rax
ja 0x14002930c
movzx r9d, byte [rsp + rax + 0x40]
movzx r8d, r9b
lea rdx, [rcx + 1]
cmp r14, rdx
jae 0x140029150
cmp rcx, rax
ja 0x140029316
lea r10, [r14 + rcx]
cmp r10, rax
jbe 0x140029160
lea r10, [rcx + 2]
cmp r14, r10
je 0x14002916f
lea r10, [rcx + 0x10]
cmp r14, r10
je 0x140029287
cmp r14, rdx
je 0x1400291a9
lea r8, [rcx + 0xa]
mov rdx, rcx
cmp r14, r8
je 0x14002920f
jmp 0x1400290d8
jne 0x1400291a0
mov rdx, rcx
jmp 0x14002920f
cmp r10, 9
je 0x1400291a9
cmp r14, rdx
jne 0x140029241
lea ecx, [rax + 0x48635758]
lea r9d, [rax + r8]
add r9d, 0x48635758
and ecx, r8d
add ecx, ecx
sub r9d, ecx
add r9b, 0x98
mov byte [rsp + rax + 0x40], r9b
jmp 0x14002928a
lea r10, [rcx + 2]
cmp r14, r10
jne 0x14002921b
lea r9d, [rax + 0x286732f8]
lea r10d, [r8 + rax]
add r10d, 0x286732f8
and r9d, r8d
add r9d, r9d
sub r10d, r9d
add r10b, 0x38
mov byte [rsp + rax + 0x40], r10b
movzx r9d, r10b
not rcx
add rcx, rax
sub rcx, r9
lea eax, [rcx - 0x5f97d620]
lea r9d, [rcx + r8]
add r9d, 0xa06829e0
and eax, r8d
add eax, eax
sub r9d, eax
add r9b, 0xe0
mov byte [rsp + rcx + 0x40], r9b
sub rcx, r14
inc r14
movzx r9d, byte [rsp + rcx + 0x3e]
add rcx, 0xfffffffffffffffe
mov rax, rcx
movzx ecx, r9b
add rax, rdx
add rax, rcx
jmp 0x14002928d
lea r10, [rcx + 5]
cmp r14, r10
jne 0x14002927a
lea edx, [rax + 0xf8]
mov r9d, r8d
and r9d, edx
add r8, rax
add r9, r9
sub r8, r9
add r8, rbx
add r14, rcx
jmp 0x14002926b
lea r9, [rcx + 3]
cmp r14, r9
je 0x140029287
lea r11, [rcx + 2]
cmp r14, r11
jne 0x14002929f
lea edx, [rax + 0x58]
mov r9d, r8d
and r9d, edx
add r8, rax
add r9, r9
sub r8, r9
add r8, rdi
mov r14, r10
not r8d
or r8, 0xffffffffffffff00
add rax, r8
jmp 0x140029290
lea r10, [rcx + 7]
cmp r14, r10
jne 0x14002910c
mov rdx, rcx
dec rax
mov rcx, rdx
inc rax
cmp rax, 0x22
jb 0x1400290f0
jmp 0x14002931e
lea r10, [rcx + 7]
cmp r14, r10
je 0x1400291a9
cmp r14, r9
jbe 0x1400292dc
lea r10d, [rax + 0x704f1650]
lea r9d, [rax + r8]
add r9d, 0x704f1650
and r10d, r8d
add r10d, r10d
sub r9d, r10d
add r9b, 0xd0
cmp rcx, 1
ja 0x14002916f
jmp 0x140029305
lea r10d, [rax + 0x7800f6e8]
lea r9d, [rax + r8]
add r9d, 0x7800f6e8
and r10d, r8d
add r10d, r10d
sub r9d, r10d
add r9b, 0xa8
cmp rcx, 1
ja 0x14002916f
mov byte [rsp + rax + 0x40], r9b
jmp 0x140029290
lea rsi, [rsp + 0x66db08]
jmp 0x14002931e
lea rsi, [rsp + 0x165e420]
mov qword [rsp + 0x88], rsi
mov dword [rsp + 0x40], 0x54
lea rdx, [rsp + 0x44]
mov byte [rsp + 0x44], 0x18
mov byte [rsp + 0x45], 0x30
mov byte [rsp + 0x46], 0x26
mov byte [rsp + 0x47], 0x13
mov byte [rsp + 0x48], 0x31
mov byte [rsp + 0x49], 0x20
mov byte [rsp + 0x4a], 0x10
mov byte [rsp + 0x4b], 0x38
mov byte [rsp + 0x4c], 0x38
mov byte [rsp + 0x4d], 0x1c
mov byte [rsp + 0x4e], 0x35
mov byte [rsp + 0x4f], 0x3a
mov byte [rsp + 0x50], 0x30
mov byte [rsp + 0x51], 0x38
mov byte [rsp + 0x52], 0x31
mov byte [rsp + 0x53], 0x11
mov byte [rsp + 0x54], 0x2c
mov byte [rsp + 0x55], 0
movzx eax, byte [rsp + 0x44]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x44], cl
movzx eax, byte [rsp + 0x45]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x45], cl
movzx eax, byte [rsp + 0x46]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x46], cl
movzx eax, byte [rsp + 0x47]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x47], cl
movzx eax, byte [rsp + 0x48]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x48], cl
movzx eax, byte [rsp + 0x49]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x49], cl
movzx eax, byte [rsp + 0x4a]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x4a], cl
movzx eax, byte [rsp + 0x4b]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x4b], cl
movzx eax, byte [rsp + 0x4c]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x4c], cl
movzx eax, byte [rsp + 0x4d]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x4d], cl
movzx eax, byte [rsp + 0x4e]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x4e], cl
movzx eax, byte [rsp + 0x4f]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x4f], cl
movzx eax, byte [rsp + 0x50]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x50], cl
movzx eax, byte [rsp + 0x51]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x51], cl
movzx eax, byte [rsp + 0x52]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x52], cl
movzx eax, byte [rsp + 0x53]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x53], cl
movzx eax, byte [rsp + 0x54]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x54], cl
mov byte [rsp + 0x55], 0
mov dword [rsp + 0x30], 0xe
lea rcx, [rsp + 0x34]
mov eax, dword [rsp + 0x30]
xor al, 0x6e
mov byte [rsp + 0x34], al
mov eax, dword [rsp + 0x30]
inc al
xor al, 0x74
mov byte [rsp + 0x35], al
mov eax, dword [rsp + 0x30]
add al, 2
xor al, 0x64
mov byte [rsp + 0x36], al
mov eax, dword [rsp + 0x30]
add al, 3
xor al, 0x6c
mov byte [rsp + 0x37], al
mov eax, dword [rsp + 0x30]
add al, 4
xor al, 0x6c
mov byte [rsp + 0x38], al
mov eax, dword [rsp + 0x30]
add al, 5
xor al, 0x2e
mov byte [rsp + 0x39], al
mov eax, dword [rsp + 0x30]
add al, 6
xor al, 0x64
mov byte [rsp + 0x3a], al
mov eax, dword [rsp + 0x30]
add al, 7
xor al, 0x6c
mov byte [rsp + 0x3b], al
mov eax, dword [rsp + 0x30]
add al, 8
xor al, 0x6c
mov byte [rsp + 0x3c], al
mov byte [rsp + 0x3d], 0
movzx eax, byte [rsp + 0x34]
mov r8d, dword [rsp + 0x30]
xor r8b, al
mov byte [rsp + 0x34], r8b
movzx eax, byte [rsp + 0x35]
mov r8d, dword [rsp + 0x30]
inc r8b
xor r8b, al
mov byte [rsp + 0x35], r8b
movzx eax, byte [rsp + 0x36]
mov r8d, dword [rsp + 0x30]
add r8b, 2
xor r8b, al
mov byte [rsp + 0x36], r8b
movzx eax, byte [rsp + 0x37]
mov r8d, dword [rsp + 0x30]
add r8b, 3
xor r8b, al
mov byte [rsp + 0x37], r8b
movzx eax, byte [rsp + 0x38]
mov r8d, dword [rsp + 0x30]
add r8b, 4
xor r8b, al
mov byte [rsp + 0x38], r8b
movzx eax, byte [rsp + 0x39]
mov r8d, dword [rsp + 0x30]
add r8b, 5
xor r8b, al
mov byte [rsp + 0x39], r8b
movzx eax, byte [rsp + 0x3a]
mov r8d, dword [rsp + 0x30]
add r8b, 6
xor r8b, al
mov byte [rsp + 0x3a], r8b
movzx eax, byte [rsp + 0x3b]
mov r8d, dword [rsp + 0x30]
add r8b, 7
xor r8b, al
mov byte [rsp + 0x3b], r8b
movzx eax, byte [rsp + 0x3c]
mov r8d, dword [rsp + 0x30]
add r8b, 8
xor r8b, al
mov byte [rsp + 0x3c], r8b
mov byte [rsp + 0x3d], 0
call fcn.14002a820
test rax, rax
je 0x14002991d
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x80]
mov ecx, 1
xor edx, edx
xor r8d, r8d
call rax
mov ecx, eax
mov eax, 0xc0000135
test ecx, ecx
jns 0x14002991f
mov byte [rsp + 0x40], 0x5a
mov byte [rsp + 0x41], 0x7c
mov byte [rsp + 0x42], 0x74
mov byte [rsp + 0x43], 0x51
mov byte [rsp + 0x44], 0x75
mov byte [rsp + 0x45], 0x69
mov byte [rsp + 0x46], 0x6f
mov byte [rsp + 0x47], 0x6d
mov byte [rsp + 0x48], 0x4c
mov byte [rsp + 0x49], 0x71
mov byte [rsp + 0x4a], 0x7a
mov byte [rsp + 0x4b], 0x6d
mov byte [rsp + 0x4c], 0x6b
mov byte [rsp + 0x4d], 0x7c
mov byte [rsp + 0x4e], 0x77
mov byte [rsp + 0x4f], 0x7a
mov byte [rsp + 0x50], 0x81
mov byte [rsp + 0x51], 0x4d
mov byte [rsp + 0x52], 0x76
mov byte [rsp + 0x53], 0x7c
mov byte [rsp + 0x54], 0x7a
mov byte [rsp + 0x55], 0x81
mov byte [rsp + 0x56], 0x5c
mov byte [rsp + 0x57], 0x77
mov byte [rsp + 0x58], 0x4c
mov byte [rsp + 0x59], 0x69
mov byte [rsp + 0x5a], 0x7c
mov byte [rsp + 0x5b], 0x69
mov byte [rsp + 0x5c], 0
add byte [rsp + 0x40], 0xf8
add byte [rsp + 0x41], 0xf8
add byte [rsp + 0x42], 0xf8
add byte [rsp + 0x43], 0xf8
add byte [rsp + 0x44], 0xf8
add byte [rsp + 0x45], 0xf8
add byte [rsp + 0x46], 0xf8
add byte [rsp + 0x47], 0xf8
add byte [rsp + 0x48], 0xf8
add byte [rsp + 0x49], 0xf8
add byte [rsp + 0x4a], 0xf8
add byte [rsp + 0x4b], 0xf8
add byte [rsp + 0x4c], 0xf8
add byte [rsp + 0x4d], 0xf8
add byte [rsp + 0x4e], 0xf8
add byte [rsp + 0x4f], 0xf8
add byte [rsp + 0x50], 0xf8
add byte [rsp + 0x51], 0xf8
add byte [rsp + 0x52], 0xf8
add byte [rsp + 0x53], 0xf8
add byte [rsp + 0x54], 0xf8
add byte [rsp + 0x55], 0xf8
add byte [rsp + 0x56], 0xf8
add byte [rsp + 0x57], 0xf8
add byte [rsp + 0x58], 0xf8
add byte [rsp + 0x59], 0xf8
add byte [rsp + 0x5a], 0xf8
add byte [rsp + 0x5b], 0xf8
mov dword [rsp + 0x30], 0x25
lea rcx, [rsp + 0x34]
mov eax, dword [rsp + 0x30]
xor al, 0x6e
mov byte [rsp + 0x34], al
mov eax, dword [rsp + 0x30]
inc al
xor al, 0x74
mov byte [rsp + 0x35], al
mov eax, dword [rsp + 0x30]
add al, 2
xor al, 0x64
mov byte [rsp + 0x36], al
mov eax, dword [rsp + 0x30]
add al, 3
xor al, 0x6c
mov byte [rsp + 0x37], al
mov eax, dword [rsp + 0x30]
add al, 4
xor al, 0x6c
mov byte [rsp + 0x38], al
mov eax, dword [rsp + 0x30]
add al, 5
xor al, 0x2e
mov byte [rsp + 0x39], al
mov eax, dword [rsp + 0x30]
add al, 6
xor al, 0x64
mov byte [rsp + 0x3a], al
mov eax, dword [rsp + 0x30]
add al, 7
xor al, 0x6c
mov byte [rsp + 0x3b], al
mov eax, dword [rsp + 0x30]
add al, 8
xor al, 0x6c
mov byte [rsp + 0x3c], al
mov byte [rsp + 0x3d], 0
movzx eax, byte [rsp + 0x34]
mov edx, dword [rsp + 0x30]
xor dl, al
mov byte [rsp + 0x34], dl
movzx eax, byte [rsp + 0x35]
mov edx, dword [rsp + 0x30]
inc dl
xor dl, al
mov byte [rsp + 0x35], dl
movzx eax, byte [rsp + 0x36]
mov edx, dword [rsp + 0x30]
add dl, 2
xor dl, al
mov byte [rsp + 0x36], dl
movzx eax, byte [rsp + 0x37]
mov edx, dword [rsp + 0x30]
add dl, 3
xor dl, al
mov byte [rsp + 0x37], dl
movzx eax, byte [rsp + 0x38]
mov edx, dword [rsp + 0x30]
add dl, 4
xor dl, al
mov byte [rsp + 0x38], dl
movzx eax, byte [rsp + 0x39]
mov edx, dword [rsp + 0x30]
add dl, 5
xor dl, al
mov byte [rsp + 0x39], dl
movzx eax, byte [rsp + 0x3a]
mov edx, dword [rsp + 0x30]
add dl, 6
xor dl, al
mov byte [rsp + 0x3a], dl
movzx eax, byte [rsp + 0x3b]
mov edx, dword [rsp + 0x30]
add dl, 7
xor dl, al
mov byte [rsp + 0x3b], dl
movzx eax, byte [rsp + 0x3c]
mov edx, dword [rsp + 0x30]
add dl, 8
xor dl, al
mov byte [rsp + 0x3c], dl
mov byte [rsp + 0x3d], 0
lea rdx, [rsp + 0x40]
call fcn.14002a820
mov r10, rax
mov eax, 0
test r10, r10
je 0x14002991f
mov rcx, qword [rsp + 0x70]
lea r9, [rsp + 0x7c]
mov dl, 1
xor r8d, r8d
call r10
test rax, rax
je 0x14002992d
mov ecx, dword [rax + 0x18]
test rcx, rcx
je 0x140029916
mov rdx, qword [rsp + 0x70]
mov r8d, dword [rax + 0x20]
add r8, rdx
mov r9d, dword [0x1400a72fc]
mov r10d, dword [0x1400a7300]
mov r11d, dword [0x1400a7304]
lea rsi, [rdx + 1]
xor edi, edi
nop word cs:[rax + rax]
mov eax, dword [r8 + rdi*4]
movzx ebp, byte [rdx + rax]
mov ebx, 0
test bpl, bpl
je 0x1400298fa
add rax, rsi
xor r14d, r14d
nop dword [rax + rax]
movsx ebx, bpl
xor ebx, r14d
rol ebx, 3
inc ebx
movzx ebp, byte [rax]
inc rax
mov r14d, ebx
test bpl, bpl
jne 0x1400298e0
mov eax, 0xc0000462
cmp ebx, r9d
je 0x14002991f
cmp ebx, r10d
je 0x14002991f
cmp ebx, r11d
je 0x14002991f
inc rdi
cmp rdi, rcx
jne 0x1400298c0
mov eax, 0xc00000bb
jmp 0x14002991f
xor eax, eax
add rsp, 0x90
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
mov eax, 0xc000007b
jmp 0x14002991f