Function at 0x140001000
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0xe0]
sub rsp, 0x1e0
mov dword [rsp + 0x20], 0x474e5089
mov dword [rsp + 0x24], 0xa1a0a0d
mov dword [rsp + 0x28], 0xd000000
mov dword [rsp + 0x2c], 0x52444849
mov dword [rsp + 0x30], 0x18000000
mov dword [rsp + 0x34], 0x18000000
mov dword [rsp + 0x38], 0x608
mov dword [rsp + 0x3c], 0x3d77e000
mov dword [rsp + 0x40], 0xf8
mov dword [rsp + 0x44], 0x59487009
mov dword [rsp + 0x48], 0xb000073
mov dword [rsp + 0x4c], 0xb000013
mov dword [rsp + 0x50], 0x9a000113
mov dword [rsp + 0x54], 0x189c
mov dword [rsp + 0x58], 0x44497001
mov dword [rsp + 0x5c], 0x9c785441
mov dword [rsp + 0x60], 0x4bb1d4ed
mov dword [rsp + 0x64], 0xc7146156
mov dword [rsp + 0x68], 0x414457f1
mov dword [rsp + 0x6c], 0x30407fb4
mov dword [rsp + 0x70], 0xc921c148
mov dword [rsp + 0x74], 0x68b6d9a1
mov dword [rsp + 0x78], 0x1a9d21b4
mov dword [rsp + 0x7c], 0xf7321ac2
mov dword [rbp - 0x80], 0x821a2c1a
mov dword [rbp - 0x7c], 0xc1ac82b0
mov dword [rbp - 0x78], 0x113dbdc9
mov dword [rbp - 0x74], 0x3dd429cc
mov dword [rbp - 0x70], 0xffb2a6d4
mov dword [rbp - 0x6c], 0x34282940
mov dword [rbp - 0x68], 0x5c8fa1c5
mov dword [rbp - 0x64], 0x5f1c2f3a
mov dword [rbp - 0x60], 0x77cd4def
mov dword [rbp - 0x5c], 0xdc0f07f4
mov dword [rbp - 0x58], 0x73df3bfb
mov dword [rbp - 0x54], 0xe785cf7e
mov dword [rbp - 0x50], 0xb9dab5b9
mov dword [rbp - 0x4c], 0xa3b42ace
mov dword [rbp - 0x48], 0x28efc4a3
mov dword [rbp - 0x44], 0x743bff6a
mov dword [rbp - 0x40], 0x86b16f10
mov dword [rbp - 0x3c], 0x612e18cf
mov dword [rbp - 0x38], 0x156d466e
mov dword [rbp - 0x34], 0xa4e5706f
mov dword [rbp - 0x30], 0xec59dbb
mov dword [rbp - 0x2c], 0x187d066
mov dword [rbp - 0x28], 0xef1a604c
mov dword [rbp - 0x24], 0x77874d62
mov dword [rbp - 0x20], 0xe8999839
mov dword [rbp - 0x1c], 0x57e7fd99
mov dword [rbp - 0x18], 0x7abf89e1
mov dword [rbp - 0x14], 0x7758db88
mov dword [rbp - 0x10], 0x7d83d6bc
mov dword [rbp - 0xc], 0x5593ef14
mov dword [rbp - 8], 0xdb602fc3
mov dword [rbp - 4], 0x5d0bf5d9
mov dword [rbp], 0x34f70165
mov dword [rbp + 4], 0x2ca774f
mov dword [rbp + 8], 0xf0189a96
mov dword [rbp + 0xc], 0x177871b1
mov dword [rbp + 0x10], 0xb0189bf6
mov dword [rbp + 0x14], 0x701cce8f
mov dword [rbp + 0x18], 0x84fc02a3
mov dword [rbp + 0x1c], 0x2b610c7e
mov dword [rbp + 0x20], 0xf5e15bf9
mov dword [rbp + 0x24], 0xeba65307
mov dword [rbp + 0x28], 0x579e039
mov dword [rbp + 0x2c], 0x17989c34
mov dword [rbp + 0x30], 0xb86a9fc9
mov dword [rbp + 0x34], 0x967a650f
mov dword [rbp + 0x38], 0xa02a1603
mov dword [rbp + 0x3c], 0x6714c491
mov dword [rbp + 0x40], 0xc9d7aebf
mov dword [rbp + 0x44], 0x9de8ad1f
mov dword [rbp + 0x48], 0x2adf01cf
mov dword [rbp + 0x4c], 0x56b82fa0
mov dword [rbp + 0x50], 0xabf1c504
mov dword [rbp + 0x54], 0x15be78ab
mov dword [rbp + 0x58], 0xbd55afb5
mov dword [rbp + 0x5c], 0xe6a7e039
mov dword [rbp + 0x60], 0xd80e47eb
mov edx, 0x1be
mov dword [rbp + 0x64], 0x3c65854b
lea rcx, [0x1406dd910]
mov dword [rbp + 0x68], 0x8629e6c0
mov dword [rbp + 0x6c], 0x5638ec15
mov dword [rbp + 0x70], 0x397b792
mov dword [rbp + 0x74], 0x1e02e55e
mov dword [rbp + 0x78], 0xb1f71ba3
mov dword [rbp + 0x7c], 0xa192dd88
mov dword [rbp + 0x80], 0x9821f1bf
mov dword [rbp + 0x84], 0x1bc9e8ee
mov dword [rbp + 0x88], 0x5a03997d
mov dword [rbp + 0x8c], 0xf801b4f0
mov dword [rbp + 0x90], 0xb7a8b18e
mov dword [rbp + 0x94], 0xc6ae22e2
mov dword [rbp + 0x98], 0xa8bc29ea
mov dword [rbp + 0x9c], 0xaeb60ddd
mov dword [rbp + 0xa0], 0xb5a7f8dd
mov dword [rbp + 0xa4], 0xdee6dd94
mov dword [rbp + 0xa8], 0xf81b1922
mov dword [rbp + 0xac], 0xa047f783
mov dword [rbp + 0xb0], 0xc1733da3
mov dword [rbp + 0xb4], 0xbe51c46e
mov dword [rbp + 0xb8], 0xbd4f5c74
mov dword [rbp + 0xbc], 0x276d13b1
mov dword [rbp + 0xc0], 0xdd0edae0
mov dword [rbp + 0xc4], 0x4ed573da
mov dword [rbp + 0xc8], 0x7bb403a9
mov dword [rbp + 0xcc], 0x8ff81098
mov dword [rbp + 0xd0], 0x75bf
mov dword [rbp + 0xd4], 0x45490000
mov dword [rbp + 0xd8], 0x42ae444e
mov word [rbp + 0xdc], 0x8260
call fcn.140547be0
mov rbx, qword [0x1406dd910]
lea rdx, [rsp + 0x20]
mov rcx, rbx
mov r8d, 0x1be
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x1be]
lea rcx, [0x140642360]
mov qword [0x1406dd918], rax
mov rbx, qword [rsp + 0x1f0]
add rsp, 0x1e0
pop rbp
jmp fcn.14063c69c