Function at 0x14000d790
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x68
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x1e160700
mov dword [rbp - 0x44], 0x1331241c
mov dword [rbp - 0x40], 0x1c2b0822
mov word [rbp - 0x3c], 0x263a
mov byte [rbp - 0x3a], 0x78
call fcn.140005660
mov rdx, qword [0x1400111b8]
mov r12, rax
mov qword [rbp + 0x60], rdx
test rdx, rdx
je 0x14000d937
test rax, rax
je 0x14000d937
movsxd rcx, dword [rdx + 0x3c]
xor r14d, r14d
mov r13d, r14d
mov eax, dword [rcx + rdx + 0x88]
add rax, rdx
mov qword [rbp - 0x28], rax
mov ecx, dword [rax + 0x1c]
mov r8d, dword [rax + 0x24]
add rcx, rdx
mov qword [rbp - 0x48], rcx
add r8, rdx
mov ecx, dword [rax + 0x20]
add rcx, rdx
mov qword [rbp - 0x10], r8
mov qword [rbp - 0x20], rcx
cmp dword [rax + 0x18], r14d
jbe 0x14000d93a
mov word [rbp + 0x48], 0x6247
mov word [rbp + 0x50], 0x6247
nop dword [rax]
mov eax, r13d
mov rsi, r14
mov qword [rbp - 0x18], rax
mov edi, dword [rcx + rax*4]
lea rcx, [rbp + 0x48]
add rdi, rdx
call fcn.1400019f0
movzx ecx, byte [rax]
cmp byte [rdi], cl
je 0x14000d874
lea rcx, [rbp + 0x48]
inc rsi
call fcn.1400019f0
movzx ecx, byte [rax]
cmp byte [rsi + rdi], cl
jne 0x14000d860
lea rcx, [rbp + 0x50]
mov rbx, r14
call fcn.1400019f0
movzx ecx, byte [rax]
cmp byte [r12], cl
je 0x14000d8a5
nop dword [rax]
lea rcx, [rbp + 0x50]
inc rbx
call fcn.1400019f0
movzx ecx, byte [rax]
cmp byte [rbx + r12], cl
jne 0x14000d890
cmp rsi, rbx
jne 0x14000d903
mov r15, r12
mov word [rbp + 0x58], 0x6247
sub r15, rdi
mov rsi, rdi
nop dword [rax]
lea rcx, [rbp + 0x58]
mov rbx, r14
call fcn.1400019f0
movzx ecx, byte [rax]
cmp byte [rdi], cl
je 0x14000d8e7
lea rcx, [rbp + 0x58]
inc rbx
call fcn.1400019f0
movzx ecx, byte [rax]
cmp byte [rbx + rdi], cl
jne 0x14000d8d3
mov rax, rsi
sub rax, rdi
dec rbx
cmp rax, rbx
jae 0x14000d91d
movzx eax, byte [r15 + rsi]
cmp byte [rsi], al
jne 0x14000d903
inc rsi
jmp 0x14000d8c0
mov rax, qword [rbp - 0x28]
inc r13d
cmp r13d, dword [rax + 0x18]
jae 0x14000d93a
mov rdx, qword [rbp + 0x60]
mov rcx, qword [rbp - 0x20]
jmp 0x14000d840
mov rcx, qword [rbp - 0x10]
mov rax, qword [rbp - 0x18]
movzx eax, word [rcx + rax*2]
mov rcx, qword [rbp - 0x48]
mov r14d, dword [rcx + rax*4]
add r14, qword [rbp + 0x60]
jmp 0x14000d93a
xor r14d, r14d
lea rcx, [rbp - 0x48]
mov qword [0x140011130], r14
mov dword [rbp - 0x48], 0x2f071004
mov dword [rbp - 0x44], 0x3a062e1a
mov dword [rbp - 0x40], 0x1d380934
mov byte [rbp - 0x3c], 0x49
call fcn.140005360
mov rcx, qword [0x1400111b8]
mov rdx, rax
call r14
movdqa xmm0, xmmword [0x14000fbb0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140011130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140011100], rax
mov dword [rbp - 0x38], 0x45330a2e
call fcn.140002ad0
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov qword [0x140011110], rax
mov dword [rbp - 0x48], 0x3a100b11
mov dword [rbp - 0x44], 0x133e2a1b
mov dword [rbp - 0x40], 0x1a36002a
mov byte [rbp - 0x3c], 0x49
call fcn.140005360
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000fb40]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140011130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x1400110f8], rax
mov word [rbp - 0x38], 0x3e2e
mov byte [rbp - 0x36], 0x47
call fcn.140004f40
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000faa0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140011130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140011178], rax
mov byte [rbp - 0x38], 0x4b
call fcn.140001590
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov qword [0x140011140], rax
mov dword [rbp - 0x48], 0x2f071004
mov dword [rbp - 0x44], 0x20022e1a
mov dword [rbp - 0x40], 0xa3c0f29
mov word [rbp - 0x3c], 0x23a
mov byte [rbp - 0x3a], 0x78
call fcn.140005660
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp + 0x48]
mov qword [0x140011148], rax
mov dword [rbp + 0x48], 0x2b070e14
mov word [rbp + 0x4c], 0x4b1e
call fcn.140004da0
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov qword [0x140011158], rax
mov dword [rbp - 0x48], 0x2a030d0b
mov dword [rbp - 0x44], 0x20302222
mov dword [rbp - 0x40], 0x2e201e27
mov byte [rbp - 0x3c], 0x49
call fcn.140005360
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov qword [0x1400111c0], rax
mov dword [rbp - 0x48], 0x2a030d0b
mov dword [rbp - 0x44], 0x20302222
mov dword [rbp - 0x40], 0x38201e27
mov byte [rbp - 0x3c], 0x49
call fcn.140005360
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov qword [0x140011128], rax
mov dword [rbp - 0x48], 0x3d0d0e04
mov dword [rbp - 0x44], 0x3c33030b
mov dword [rbp - 0x40], 0x793c0022
call fcn.140004ad0
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000fb30]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140011130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140011150], rax
mov dword [rbp - 0x38], 0x27260039
mov dword [rbp - 0x34], 0x55000302
call fcn.1400045c0
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000fc40]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140011130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140011170], rax
mov dword [rbp - 0x38], 0x35260718
mov dword [rbp - 0x34], 0x21380e1d
mov byte [rbp - 0x30], 0x77
call fcn.140004080
mov rcx, qword [0x1400111a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000fc10]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140011130]
movdqu xmmword [rbp - 0x48], xmm0
call fcn.140003cf0
mov rcx, qword [0x1400111a8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x2d0d1017
mov dword [rbp - 0x44], 0x6121380b
mov dword [rbp - 0x40], 0x13c2274
mov word [rbp - 0x3c], 0x23d
mov byte [rbp - 0x3a], 0x78
call fcn.140005660
mov rcx, qword [0x1400111a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000fbe0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140011130]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x3d021a3e
mov byte [rbp - 0x34], 0x6e
call fcn.140003870
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
mov dword [rbp - 0x48], 0x1a160700
mov dword [rbp - 0x44], 0x11392807
mov dword [rbp - 0x40], 0xd371929
mov word [rbp - 0x3c], 0x617f
lea rcx, [rbp - 0x48]
mov byte [rbp - 0x3a], 0x78
call fcn.140005660
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x1d160700
mov dword [rbp - 0x44], 0x37263817
mov dword [rbp - 0x40], 0x1f37252b
mov word [rbp - 0x3c], 0x5526
call fcn.140001180
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x1050715
mov dword [rbp - 0x44], 0x193c2e1e
mov dword [rbp - 0x40], 0x11c1523
mov word [rbp - 0x3c], 0x551e
call fcn.140001180
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0xd050715
mov dword [rbp - 0x44], 0x37212402
mov dword [rbp - 0x40], 0x7920090d
call fcn.140004ad0
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0xd160700
mov dword [rbp - 0x44], 0x3d21391b
mov dword [rbp - 0x40], 0xa363c34
mov byte [rbp - 0x3c], 0x49
call fcn.140005360
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000fb00]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140011130]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x4510110e
call fcn.140002ad0
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x2f071004
mov dword [rbp - 0x44], 0x3b142e1a
mov dword [rbp - 0x40], 0x790e092a
call fcn.140004ad0
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov qword [0x140011160], rax
mov dword [rbp - 0x48], 0x3a0b1010
mov dword [rbp - 0x44], 0x3e3b0d0b
mov word [rbp - 0x40], 0x6c23
call fcn.140003610
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov qword [0x140011188], rax
mov dword [rbp - 0x48], 0x2a0c0b01
mov dword [rbp - 0x44], 0x21202228
mov dword [rbp - 0x40], 0x15302a32
mov word [rbp - 0x3c], 0x22c
mov byte [rbp - 0x3a], 0x78
call fcn.140005660
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov qword [0x140011198], rax
mov dword [rbp - 0x48], 0x2a0c0b01
mov dword [rbp - 0x44], 0x262a2e20
mov dword [rbp - 0x40], 0x1c350500
mov word [rbp - 0x3c], 0x551e
call fcn.140001180
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov qword [0x140011190], rax
mov dword [rbp - 0x48], 0x2a0c0b01
mov dword [rbp - 0x44], 0x213d272d
mov word [rbp - 0x40], 0x6c23
call fcn.140003610
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000fc20]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140011130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140011168], rax
call fcn.140003cf0
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov qword [0x140011118], rax
mov dword [rbp - 0x48], 0x3a100b11
mov dword [rbp - 0x44], 0x143e2a1b
mov dword [rbp - 0x40], 0x793c0934
call fcn.140004ad0
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x2b140d0a
mov dword [rbp - 0x44], 0x373e2228
mov word [rbp - 0x40], 0x6c11
call fcn.140003610
mov rcx, qword [0x1400111a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000faf0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140011130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140011138], rax
mov word [rbp - 0x38], 0x691c
call fcn.140003220
mov rcx, qword [0x1400111a8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov qword [0x140011180], rax
mov dword [rbp - 0x48], 0x3a0b1a02
mov dword [rbp - 0x44], 0x313d393e
mov dword [rbp - 0x40], 0x792a1f23
call fcn.140004ad0
mov rcx, qword [0x1400111a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000fa90]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140011130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140011120], rax
mov dword [rbp - 0x38], 0x45350823
call fcn.140002ad0
mov rdx, rax
mov rcx, qword [0x1400111a8]
call rbx
mov qword [0x140011108], rax
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret