Function at 0x14000df80
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x68
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x1a21022e
mov dword [rbp - 0x44], 0x350a0a17
mov dword [rbp - 0x40], 0x2b342d3d
mov word [rbp - 0x3c], 0x3e09
mov byte [rbp - 0x3a], 0x4f
call fcn.140006c90
mov rdx, qword [0x140026670]
mov r12, rax
mov qword [rbp + 0x60], rdx
test rdx, rdx
je 0x14000e127
test rax, rax
je 0x14000e127
movsxd rcx, dword [rdx + 0x3c]
xor r14d, r14d
mov r13d, r14d
mov eax, dword [rcx + rdx + 0x88]
add rax, rdx
mov qword [rbp - 0x28], rax
mov ecx, dword [rax + 0x1c]
mov r8d, dword [rax + 0x24]
add rcx, rdx
mov qword [rbp - 0x48], rcx
add r8, rdx
mov ecx, dword [rax + 0x20]
add rcx, rdx
mov qword [rbp - 0x10], r8
mov qword [rbp - 0x20], rcx
cmp dword [rax + 0x18], r14d
jbe 0x14000e12a
mov word [rbp + 0x48], 0x6769
mov word [rbp + 0x50], 0x6769
nop dword [rax]
mov eax, r13d
mov rsi, r14
mov qword [rbp - 0x18], rax
mov edi, dword [rcx + rax*4]
lea rcx, [rbp + 0x48]
add rdi, rdx
call fcn.140001700
movzx ecx, byte [rax]
cmp byte [rdi], cl
je 0x14000e064
lea rcx, [rbp + 0x48]
inc rsi
call fcn.140001700
movzx ecx, byte [rax]
cmp byte [rsi + rdi], cl
jne 0x14000e050
lea rcx, [rbp + 0x50]
mov rbx, r14
call fcn.140001700
movzx ecx, byte [rax]
cmp byte [r12], cl
je 0x14000e095
nop dword [rax]
lea rcx, [rbp + 0x50]
inc rbx
call fcn.140001700
movzx ecx, byte [rax]
cmp byte [rbx + r12], cl
jne 0x14000e080
cmp rsi, rbx
jne 0x14000e0f3
mov r15, r12
mov word [rbp + 0x58], 0x6769
sub r15, rdi
mov rsi, rdi
nop dword [rax]
lea rcx, [rbp + 0x58]
mov rbx, r14
call fcn.140001700
movzx ecx, byte [rax]
cmp byte [rdi], cl
je 0x14000e0d7
lea rcx, [rbp + 0x58]
inc rbx
call fcn.140001700
movzx ecx, byte [rax]
cmp byte [rbx + rdi], cl
jne 0x14000e0c3
mov rax, rsi
sub rax, rdi
dec rbx
cmp rax, rbx
jae 0x14000e10d
movzx eax, byte [r15 + rsi]
cmp byte [rsi], al
jne 0x14000e0f3
inc rsi
jmp 0x14000e0b0
mov rax, qword [rbp - 0x28]
inc r13d
cmp r13d, dword [rax + 0x18]
jae 0x14000e12a
mov rdx, qword [rbp + 0x60]
mov rcx, qword [rbp - 0x20]
jmp 0x14000e030
mov rcx, qword [rbp - 0x10]
mov rax, qword [rbp - 0x18]
movzx eax, word [rcx + rax*2]
mov rcx, qword [rbp - 0x48]
mov r14d, dword [rcx + rax*4]
add r14, qword [rbp + 0x60]
jmp 0x14000e12a
xor r14d, r14d
lea rcx, [rbp - 0x48]
mov qword [0x140026648], r14
mov dword [rbp - 0x48], 0x2b30152a
mov dword [rbp - 0x44], 0x1c3d0011
mov dword [rbp - 0x40], 0x2a272c2b
mov byte [rbp - 0x3c], 0x7a
call fcn.140006990
mov rcx, qword [0x140026670]
mov rdx, rax
call r14
movdqa xmm0, xmmword [0x1400100c0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140026648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140026618], rax
mov dword [rbp - 0x38], 0x652c363d
call fcn.140003a10
mov rcx, qword [0x140026670]
mov rdx, rax
call rbx
mov rbx, qword [0x140026648]
lea rcx, [rbp - 0x48]
mov qword [0x140026628], rax
mov dword [rbp - 0x48], 0x3e270e3f
mov dword [rbp - 0x44], 0x35050410
mov dword [rbp - 0x40], 0x2d292535
mov byte [rbp - 0x3c], 0x7a
call fcn.140006990
mov rcx, qword [0x140026670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x140010110]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140026648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140026608], rax
mov word [rbp - 0x38], 0x23d
mov byte [rbp - 0x36], 0x58
call fcn.140006570
mov rcx, qword [0x140026670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x140010090]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140026648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140026650], rax
mov byte [rbp - 0x38], 0x58
call fcn.1400061b0
mov rcx, qword [0x140026670]
mov rdx, rax
call rbx
mov rbx, qword [0x140026648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x2b30152a
mov dword [rbp - 0x44], 0x6390011
mov dword [rbp - 0x40], 0x3d232a36
mov word [rbp - 0x3c], 0x1a09
mov byte [rbp - 0x3a], 0x4f
call fcn.140006c90
mov rcx, qword [0x140026670]
mov rdx, rax
call rbx
mov rbx, qword [0x140026648]
lea rcx, [rbp + 0x48]
mov dword [rbp + 0x48], 0x2f300b3a
mov word [rbp + 0x4c], 0x6515
call fcn.140006010
mov rcx, qword [0x140026670]
mov rdx, rax
call rbx
mov rbx, qword [0x140026648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x2e340825
mov dword [rbp - 0x44], 0x60b0c29
mov dword [rbp - 0x40], 0x193f3b38
mov byte [rbp - 0x3c], 0x7a
call fcn.140006990
mov rcx, qword [0x140026670]
mov rdx, rax
call rbx
mov rbx, qword [0x140026648]
lea rcx, [rbp - 0x48]
mov qword [0x140026678], rax
mov dword [rbp - 0x48], 0x2e340825
mov dword [rbp - 0x44], 0x60b0c29
mov dword [rbp - 0x40], 0xf3f3b38
mov byte [rbp - 0x3c], 0x7a
call fcn.140006990
mov rcx, qword [0x140026670]
mov rdx, rax
call rbx
mov rbx, qword [0x140026648]
lea rcx, [rbp - 0x48]
mov qword [0x140026640], rax
mov dword [rbp - 0x48], 0x393a0b2a
mov dword [rbp - 0x44], 0x1a082d00
mov dword [rbp - 0x40], 0x4e23253d
call fcn.140005d40
mov rcx, qword [0x140026670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x140010120]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140026648]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x7393c2a
mov dword [rbp - 0x34], 0x61150e2d
call fcn.140005830
mov rcx, qword [0x140026670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x1400101f0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140026648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140026610], rax
mov dword [rbp - 0x38], 0x15393b0b
mov dword [rbp - 0x34], 0x152d0332
mov byte [rbp - 0x30], 0x57
call fcn.1400052f0
mov rcx, qword [0x140026660]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x1400101c0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140026648]
movdqu xmmword [rbp - 0x48], xmm0
call fcn.140004f60
mov rcx, qword [0x140026660]
mov rdx, rax
call rbx
mov rbx, qword [0x140026648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x293a1539
mov dword [rbp - 0x44], 0x471a1600
mov dword [rbp - 0x40], 0x3623076b
mov word [rbp - 0x3c], 0x1a0e
mov byte [rbp - 0x3a], 0x4f
call fcn.140006c90
mov rcx, qword [0x140026660]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x140010180]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140026648]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x1d1d262d
mov byte [rbp - 0x34], 0x41
call fcn.140004ae0
mov rcx, qword [0x140026670]
mov rdx, rax
call rbx
mov rbx, qword [0x140026648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x1e21022e
mov dword [rbp - 0x44], 0x3702060c
mov dword [rbp - 0x40], 0x3a283c36
mov word [rbp - 0x3c], 0x794c
mov byte [rbp - 0x3a], 0x4f
call fcn.140006c90
mov rdx, rax
mov rcx, qword [0x140026670]
call rbx
mov rbx, qword [0x140026648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x1921022e
mov dword [rbp - 0x44], 0x111d161c
mov dword [rbp - 0x40], 0x28280034
mov word [rbp - 0x3c], 0x4d15
call fcn.1400047b0
mov rcx, qword [0x140026670]
mov rdx, rax
call rbx
mov rbx, qword [0x140026648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x532023b
mov dword [rbp - 0x44], 0x3f070015
mov dword [rbp - 0x40], 0x3603303c
mov word [rbp - 0x3c], 0x4d2d
call fcn.1400047b0
mov rcx, qword [0x140026670]
mov rdx, rax
call rbx
mov rbx, qword [0x140026648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x932023b
mov dword [rbp - 0x44], 0x111a0a09
mov dword [rbp - 0x40], 0x4e3f2c12
call fcn.140005d40
mov rcx, qword [0x140026670]
mov rdx, rax
call rbx
mov rbx, qword [0x140026648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x921022e
mov dword [rbp - 0x44], 0x1b1a1710
mov dword [rbp - 0x40], 0x3d29192b
mov byte [rbp - 0x3c], 0x7a
call fcn.140006990
mov rcx, qword [0x140026670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x140010160]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140026648]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x650f2d1d
call fcn.140003a10
mov rcx, qword [0x140026670]
mov rdx, rax
call rbx
mov rbx, qword [0x140026648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x2b30152a
mov dword [rbp - 0x44], 0x1d2f0011
mov dword [rbp - 0x40], 0x4e112c35
call fcn.140005d40
mov rcx, qword [0x140026670]
mov rdx, rax
call rbx
mov rbx, qword [0x140026648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x3e3c153e
mov dword [rbp - 0x44], 0x18002300
mov word [rbp - 0x40], 0x493c
call fcn.140004550
mov rcx, qword [0x140026670]
mov rdx, rax
call rbx
mov rbx, qword [0x140026648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x2e3b0e2f
mov dword [rbp - 0x44], 0x71b0c23
mov dword [rbp - 0x40], 0x222f0f2d
mov word [rbp - 0x3c], 0x1a1f
mov byte [rbp - 0x3a], 0x4f
call fcn.140006c90
mov rcx, qword [0x140026670]
mov rdx, rax
call rbx
mov rbx, qword [0x140026648]
mov dword [rbp - 0x48], 0x2e3b0e2f
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x44], 0x11002b
mov dword [rbp - 0x40], 0x2b2a201f
mov word [rbp - 0x3c], 0x4d2d
call fcn.1400047b0
mov rcx, qword [0x140026670]
mov rdx, rax
call rbx
mov rbx, qword [0x140026648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x2e3b0e2f
mov dword [rbp - 0x44], 0x7060926
mov word [rbp - 0x40], 0x493c
call fcn.140004550
mov rcx, qword [0x140026670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x1400101b0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140026648]
movdqu xmmword [rbp - 0x48], xmm0
call fcn.140004f60
mov rcx, qword [0x140026670]
mov rdx, rax
call rbx
mov rbx, qword [0x140026648]
lea rcx, [rbp - 0x48]
mov qword [0x140026630], rax
mov dword [rbp - 0x48], 0x3e270e3f
mov dword [rbp - 0x44], 0x32050410
mov dword [rbp - 0x40], 0x4e232c2b
call fcn.140005d40
mov rcx, qword [0x140026670]
mov rdx, rax
call rbx
mov rbx, qword [0x140026648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x2f230824
mov dword [rbp - 0x44], 0x11050c23
mov word [rbp - 0x40], 0x490e
call fcn.140004550
mov rcx, qword [0x140026660]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x140010140]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140026648]
movdqu xmmword [rbp - 0x48], xmm0
mov word [rbp - 0x38], 0x550f
call fcn.140004160
mov rcx, qword [0x140026660]
mov rdx, rax
call rbx
mov rbx, qword [0x140026648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x3e3c1f2c
mov dword [rbp - 0x44], 0x17061735
mov dword [rbp - 0x40], 0x4e353a3c
call fcn.140005d40
mov rcx, qword [0x140026660]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x140010030]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140026648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140026638], rax
mov dword [rbp - 0x38], 0x652a3430
call fcn.140003a10
mov rcx, qword [0x140026660]
mov rdx, rax
call rbx
mov qword [0x140026620], rax
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret