Function at 0x14008ebcc
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x40
xor ebx, ebx
mov dword [rbp - 0x20], 0x6853685e
mov qword [rcx], rbx
mov rsi, rcx
mov qword [rcx + 8], rbx
mov qword [rcx + 0x10], rbx
mov qword [rcx + 0x18], rbx
mov qword [rcx + 0x20], rbx
mov qword [rcx + 0x28], rbx
mov qword [rcx + 0x30], rbx
mov qword [rcx + 0x38], rbx
mov qword [rcx + 0x40], rbx
mov qword [rcx + 0x48], rbx
mov qword [rcx + 0x50], rbx
mov qword [rcx + 0x58], rbx
mov qword [rcx + 0x60], rbx
mov qword [rcx + 0x68], rbx
mov qword [rcx + 0x70], rbx
mov qword [rcx + 0x78], rbx
mov ecx, ebx
mov dword [rbp - 0x1c], 0x68566845
mov dword [rbp - 0x18], 0x6856685c
mov dword [rbp - 0x14], 0x682e6828
mov dword [rbp - 0x10], 0x685a6833
mov dword [rbp - 0xc], 0x686c6853
mov word [rbp - 8], bx
mov byte [rbp - 6], 1
mov eax, 0x6815
add eax, ecx
xor word [rbp + rcx*2 - 0x20], ax
inc rcx
cmp rcx, 0xc
jb 0x14008ec63
lea rcx, [rbp - 0x20]
mov byte [rbp - 6], bl
call fcn.14004a174
mov rdi, rax
mov qword [rsi], rax
mov rcx, rbx
mov dword [rbp - 0x20], 0x7672665a
mov dword [rbp - 0x1c], 0x7f746849
mov dword [rbp - 0x18], 0x6c6d78
mov byte [rbp - 0x14], 1
lea eax, [rcx + 0x15]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0xb
jb 0x14008eca6
mov byte [rbp - 0x14], bl
test rdi, rdi
jne 0x14008ecc3
mov rax, rbx
jmp 0x14008ed0f
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x14008ece9
lea r14, [r14 + 4]
add r15, 2
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
push rbp
call 0x1409a7504
test eax, eax
jne 0x14008ece1
mov ecx, dword [r12 + rdi + 0x1c]
movzx edx, word [r15]
add rcx, rdi
mov eax, dword [rcx + rdx*4]
add rax, rdi
movdqa xmm0, xmmword [0x14021e010]
mov rcx, rbx
movdqu xmmword [rbp - 0x20], xmm0
mov qword [rsi + 8], rax
mov dword [rbp - 0x10], 0x1004244
lea eax, [rcx + 0x15]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0x12
jb 0x14008ed2a
mov rdi, qword [rsi]
mov byte [rbp - 0xd], bl
test rdi, rdi
jne 0x14008ed4a
mov rax, rbx
jmp 0x14008ed96
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x14008ed70
lea r14, [r14 + 4]
add r15, 2
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
push rcx
call 0x140891ccc
test eax, eax
jne 0x14008ed68
mov eax, dword [r12 + rdi + 0x1c]
movzx ecx, word [r15]
add rax, rdi
mov eax, dword [rax + rcx*4]
add rax, rdi
movdqa xmm0, xmmword [0x14021e160]
mov rcx, rbx
movdqu xmmword [rbp - 0x20], xmm0
mov qword [rsi + 0x10], rax
mov dword [rbp - 0x10], 0x534540
mov byte [rbp - 0xc], 1
lea eax, [rcx + 0x15]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0x13
jb 0x14008edb5
mov rdi, qword [rsi]
mov byte [rbp - 0xc], bl
test rdi, rdi
jne 0x14008edd5
mov rax, rbx
jmp 0x14008ee21
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x14008edfb
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
call 0x140cd29a1
int3
mov qword [rsi + 0x18], rax
mov rcx, rbx
mov dword [rbp - 0x20], 0x6c657f43
mov dword [rbp - 0x1c], 0x5d777b6c
mov dword [rbp - 0x18], 0x43707271
mov dword [rbp - 0x14], 0x1005a64
lea eax, [rcx + 0x15]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0xe
jb 0x14008ee44
mov rdi, qword [rsi]
mov byte [rbp - 0x11], bl
test rdi, rdi
jne 0x14008ee64
mov rax, rbx
jmp 0x14008eeb0
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x14008ee8a
lea r14, [r14 + 4]
add r15, 2
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
push rcx
call 0x140bf370a
test eax, eax
jne 0x14008ee82
mov eax, dword [r12 + rdi + 0x1c]
movzx ecx, word [r15]
add rax, rdi
mov eax, dword [rax + rcx*4]
add rax, rdi
mov qword [rsi + 0x30], rax
mov rcx, rbx
mov dword [rbp - 0x20], 0x6c657f43
mov dword [rbp - 0x1c], 0x5a777b6c
mov dword [rbp - 0x18], 0x657a7b6f
mov word [rbp - 0x14], 0x59
mov byte [rbp - 0x12], 1
lea eax, [rcx + 0x15]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0xd
jb 0x14008eed6
mov rdi, qword [rsi]
mov byte [rbp - 0x12], bl
test rdi, rdi
jne 0x14008eef6
mov rax, rbx
jmp 0x14008ef42
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x14008ef1c
lea r14, [r14 + 4]
add r15, 2
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
push rdx
call 0x14058217b
test eax, eax
jne 0x14008ef14
mov eax, dword [r12 + rdi + 0x1c]
movzx ecx, word [r15]
add rax, rdi
mov eax, dword [rax + rcx*4]
add rax, rdi
mov qword [rsi + 0x48], rax
mov rcx, rbx
mov dword [rbp - 0x20], 0x6c657f43
mov dword [rbp - 0x1c], 0x5a777b6c
mov dword [rbp - 0x18], 0x7a7b6f
mov byte [rbp - 0x14], 1
lea eax, [rcx + 0x15]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0xb
jb 0x14008ef62
mov rdi, qword [rsi]
mov byte [rbp - 0x14], bl
test rdi, rdi
jne 0x14008ef82
mov rax, rbx
jmp 0x14008efce
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x14008efa8
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
call 0x1406dd91b
int3
mov qword [rsi + 0x50], rax
mov rcx, rbx
mov dword [rbp - 0x20], 0x6b787a56
mov dword [rbp - 0x1c], 0x727a527c
mov dword [rbp - 0x18], 0x7a7279
mov byte [rbp - 0x14], 1
lea eax, [rcx + 0x15]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0xb
jb 0x14008efee
mov rdi, qword [rsi]
mov byte [rbp - 0x14], bl
test rdi, rdi
jne 0x14008f00e
mov rax, rbx
jmp 0x14008f05a
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x14008f034
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
call 0x1408b7643
int3
mov qword [rsi + 0x38], rax
mov rcx, rbx
mov dword [rbp - 0x20], 0x7c767959
mov dword [rbp - 0x1c], 0x6e797355
mov dword [rbp - 0x18], 0x61666c7c
mov word [rbp - 0x14], 0x100
lea eax, [rcx + 0x15]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0xc
jb 0x14008f07c
mov rdi, qword [rsi]
mov byte [rbp - 0x13], bl
test rdi, rdi
jne 0x14008f09c
mov rax, rbx
jmp 0x14008f0e8
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x14008f0c2
lea r14, [r14 + 4]
add r15, 2
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
push rcx
call 0x1404515fe
test eax, eax
jne 0x14008f0ba
mov eax, dword [r12 + rdi + 0x1c]
movzx ecx, word [r15]
add rax, rdi
mov eax, dword [rax + rcx*4]
add rax, rdi
mov qword [rsi + 0x20], rax
mov rcx, rbx
mov dword [rbp - 0x20], 0x48637352
mov dword [rbp - 0x1c], 0x5d78756b
mov dword [rbp - 0x18], 0x456d7a79
mov dword [rbp - 0x14], 0x1005152
lea eax, [rcx + 0x15]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0xe
jb 0x14008f10b
mov rdi, qword [rsi]
mov byte [rbp - 0x11], bl
test rdi, rdi
jne 0x14008f12b
mov rax, rbx
jmp 0x14008f177
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x14008f151
lea r14, [r14 + 4]
add r15, 2
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
push rsi
call 0x1404514af
test eax, eax
jne 0x14008f149
mov eax, dword [r12 + rdi + 0x1c]
movzx ecx, word [r15]
add rax, rdi
mov eax, dword [rax + rcx*4]
add rax, rdi
movdqa xmm0, xmmword [0x14021e0e0]
mov rcx, rbx
movdqu xmmword [rbp - 0x20], xmm0
mov qword [rsi + 0x28], rax
mov dword [rbp - 0x10], 0x1005f57
lea eax, [rcx + 0x15]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0x12
jb 0x14008f192
mov rdi, qword [rsi]
mov byte [rbp - 0xd], bl
test rdi, rdi
jne 0x14008f1b2
mov rax, rbx
jmp 0x14008f1fe
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x14008f1d8
lea r14, [r14 + 4]
add r15, 2
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
push rdi
call 0x14084ef80
test eax, eax
jne 0x14008f1d0
mov ecx, dword [r12 + rdi + 0x1c]
movzx edx, word [r15]
add rcx, rdi
mov eax, dword [rcx + rdx*4]
add rax, rdi
movdqa xmm0, xmmword [0x14021e1a0]
mov rcx, rbx
movdqu xmmword [rbp - 0x20], xmm0
mov qword [rsi + 0x40], rax
mov word [rbp - 0x10], 0x100
lea eax, [rcx + 0x15]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0x10
jb 0x14008f218
mov rdi, qword [rsi]
mov byte [rbp - 0xf], bl
test rdi, rdi
jne 0x14008f238
mov rax, rbx
jmp 0x14008f284
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x14008f25e
lea r14, [r14 + 4]
add r15, 2
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
push rdx
call 0x140cd300a
test eax, eax
jne 0x14008f256
mov ecx, dword [r12 + rdi + 0x1c]
movzx edx, word [r15]
add rcx, rdi
mov eax, dword [rcx + rdx*4]
add rax, rdi
movdqa xmm0, xmmword [0x14021e190]
mov rcx, rbx
movdqu xmmword [rbp - 0x20], xmm0
mov qword [rsi + 0x58], rax
mov word [rbp - 0x10], 0x100
lea eax, [rcx + 0x15]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0x10
jb 0x14008f29e
mov rdi, qword [rsi]
mov byte [rbp - 0xf], bl
test rdi, rdi
jne 0x14008f2be
mov rax, rbx
jmp 0x14008f30a
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x14008f2e4
lea r14, [r14 + 4]
add r15, 2
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
push rdx
call 0x1406f9f6f
test eax, eax
jne 0x14008f2dc
mov ecx, dword [r12 + rdi + 0x1c]
movzx edx, word [r15]
add rcx, rdi
mov eax, dword [rcx + rdx*4]
add rax, rdi
movdqa xmm0, xmmword [0x14021e330]
mov rcx, rbx
movdqu xmmword [rbp - 0x20], xmm0
mov qword [rsi + 0x60], rax
mov word [rbp - 0x10], 0x100
lea eax, [rcx + 0x15]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0x10
jb 0x14008f324
mov rdi, qword [rsi]
mov byte [rbp - 0xf], bl
test rdi, rdi
jne 0x14008f344
mov rax, rbx
jmp 0x14008f390
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x14008f36a
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
call 0x140ab5e6e
int3
mov qword [rsi + 0x68], rax
mov rcx, rbx
mov dword [rbp - 0x20], 0x6d647347
mov dword [rbp - 0x1c], 0x744f7f74
mov dword [rbp - 0x18], 0x447e7b6f
mov word [rbp - 0x14], 0x100
lea eax, [rcx + 0x15]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0xc
jb 0x14008f3b2
mov rdi, qword [rsi]
mov byte [rbp - 0x13], bl
test rdi, rdi
jne 0x14008f3d2
mov rax, rbx
jmp 0x14008f41e
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x14008f3f8
lea r14, [r14 + 4]
add r15, 2
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
push rbx
call 0x1409020ed
test eax, eax
jne 0x14008f3f0
mov eax, dword [r12 + rdi + 0x1c]
movzx ecx, word [r15]
add rax, rdi
mov eax, dword [rax + rcx*4]
add rax, rdi
movdqa xmm0, xmmword [0x14021e0b0]
mov rcx, rbx
movdqu xmmword [rbp - 0x20], xmm0
mov qword [rsi + 0x70], rax
mov dword [rbp - 0x10], 0x40444766
mov word [rbp - 0xc], 0x4c
mov byte [rbp - 0xa], 1
lea eax, [rcx + 0x15]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0x15
jb 0x14008f443
mov rdi, qword [rsi]
mov byte [rbp - 0xa], bl
test rdi, rdi
je 0x14008f4aa
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x14008f484
lea r14, [r14 + 4]
add r15, 2
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
push rcx
call 0x1408daed9
test eax, eax
jne 0x14008f47c
mov eax, dword [r12 + rdi + 0x1c]
movzx ecx, word [r15]
add rax, rdi
mov ebx, dword [rax + rcx*4]
add rbx, rdi
mov rdi, qword [rsp + 0x70]
mov rax, rsi
mov r12, qword [rsp + 0x78]
mov qword [rsi + 0x78], rbx
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x40
pop r15
pop r14
pop rbp
ret