Function at 0x14000b990
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x68
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x121f1429
mov dword [rbp - 0x44], 0x27373521
mov dword [rbp - 0x40], 0x16110802
mov word [rbp - 0x3c], 0x914
mov byte [rbp - 0x3a], 0x6b
call fcn.140004960
mov rdx, qword [0x1400101b8]
mov r12, rax
mov qword [rbp + 0x60], rdx
test rdx, rdx
je 0x14000bb37
test rax, rax
je 0x14000bb37
movsxd rcx, dword [rdx + 0x3c]
xor r14d, r14d
mov r13d, r14d
mov eax, dword [rcx + rdx + 0x88]
add rax, rdx
mov qword [rbp - 0x28], rax
mov ecx, dword [rax + 0x1c]
mov r8d, dword [rax + 0x24]
add rcx, rdx
mov qword [rbp - 0x48], rcx
add r8, rdx
mov ecx, dword [rax + 0x20]
add rcx, rdx
mov qword [rbp - 0x10], r8
mov qword [rbp - 0x20], rcx
cmp dword [rax + 0x18], r14d
jbe 0x14000bb3a
mov word [rbp + 0x48], 0x716e
mov word [rbp + 0x50], 0x716e
nop dword [rax]
mov eax, r13d
mov rsi, r14
mov qword [rbp - 0x18], rax
mov edi, dword [rcx + rax*4]
lea rcx, [rbp + 0x48]
add rdi, rdx
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rdi], cl
je 0x14000ba74
lea rcx, [rbp + 0x48]
inc rsi
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rsi + rdi], cl
jne 0x14000ba60
lea rcx, [rbp + 0x50]
mov rbx, r14
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [r12], cl
je 0x14000baa5
nop dword [rax]
lea rcx, [rbp + 0x50]
inc rbx
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rbx + r12], cl
jne 0x14000ba90
cmp rsi, rbx
jne 0x14000bb03
mov r15, r12
mov word [rbp + 0x58], 0x716e
sub r15, rdi
mov rsi, rdi
nop dword [rax]
lea rcx, [rbp + 0x58]
mov rbx, r14
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rdi], cl
je 0x14000bae7
lea rcx, [rbp + 0x58]
inc rbx
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rbx + rdi], cl
jne 0x14000bad3
mov rax, rsi
sub rax, rdi
dec rbx
cmp rax, rbx
jae 0x14000bb1d
movzx eax, byte [r15 + rsi]
cmp byte [rsi], al
jne 0x14000bb03
inc rsi
jmp 0x14000bac0
mov rax, qword [rbp - 0x28]
inc r13d
cmp r13d, dword [rax + 0x18]
jae 0x14000bb3a
mov rdx, qword [rbp + 0x60]
mov rcx, qword [rbp - 0x20]
jmp 0x14000ba40
mov rcx, qword [rbp - 0x10]
mov rax, qword [rbp - 0x18]
movzx eax, word [rcx + rax*2]
mov rcx, qword [rbp - 0x48]
mov r14d, dword [rcx + rax*4]
add r14, qword [rbp + 0x60]
jmp 0x14000bb3a
xor r14d, r14d
lea rcx, [rbp - 0x48]
mov qword [0x140010130], r14
mov dword [rbp - 0x48], 0x230e032d
mov dword [rbp - 0x44], 0xe003f27
mov dword [rbp - 0x40], 0x17020914
mov byte [rbp - 0x3c], 0x67
call fcn.140004700
mov rcx, qword [0x1400101b8]
mov rdx, rax
call r14
movdqa xmm0, xmmword [0x14000ed20]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010100], rax
mov dword [rbp - 0x38], 0x4a331704
call fcn.1400026f0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010110], rax
mov dword [rbp - 0x48], 0x36191838
mov dword [rbp - 0x44], 0x27383b26
mov dword [rbp - 0x40], 0x100c000a
mov byte [rbp - 0x3c], 0x67
call fcn.140004700
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ed10]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x1400100f8], rax
mov word [rbp - 0x38], 0x2304
mov byte [rbp - 0x36], 0x47
call fcn.1400043c0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ec30]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010178], rax
mov byte [rbp - 0x38], 0x61
call fcn.1400014c0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010140], rax
mov dword [rbp - 0x48], 0x230e032d
mov dword [rbp - 0x44], 0x14043f27
mov dword [rbp - 0x40], 0x60f09
mov word [rbp - 0x3c], 0x2d14
mov byte [rbp - 0x3a], 0x6b
call fcn.140004960
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp + 0x48]
mov qword [0x140010148], rax
mov dword [rbp + 0x48], 0x270e1d3d
mov word [rbp + 0x4c], 0x5a23
call fcn.140004260
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010158], rax
mov dword [rbp - 0x48], 0x260a1e22
mov dword [rbp - 0x44], 0x1436331f
mov dword [rbp - 0x40], 0x241a1e07
mov byte [rbp - 0x3c], 0x67
call fcn.140004700
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x1400101c0], rax
mov dword [rbp - 0x48], 0x260a1e22
mov dword [rbp - 0x44], 0x1436331f
mov dword [rbp - 0x40], 0x321a1e07
mov byte [rbp - 0x3c], 0x67
call fcn.140004700
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010128], rax
mov dword [rbp - 0x48], 0x31041d2d
mov dword [rbp - 0x44], 0x8351236
mov dword [rbp - 0x40], 0x73060002
call fcn.140004020
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ecc0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010150], rax
mov dword [rbp - 0x38], 0x28261d13
mov dword [rbp - 0x34], 0x6b070a0b
call fcn.140003c30
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000edd0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010170], rax
mov dword [rbp - 0x38], 0x3a261a32
mov dword [rbp - 0x34], 0x1f3f0714
mov byte [rbp - 0x30], 0x77
call fcn.140003810
mov rcx, qword [0x1400101a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ed80]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
call fcn.140003540
mov rcx, qword [0x1400101a8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x2104033e
mov dword [rbp - 0x44], 0x55272936
mov dword [rbp - 0x40], 0xb062254
mov word [rbp - 0x3c], 0x2d13
mov byte [rbp - 0x3a], 0x6b
call fcn.140004960
mov rcx, qword [0x1400101a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ed50]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x32020714
mov byte [rbp - 0x34], 0x67
call fcn.1400031c0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
mov dword [rbp - 0x48], 0x161f1429
mov dword [rbp - 0x44], 0x253f393a
mov dword [rbp - 0x40], 0x70d1909
mov word [rbp - 0x3c], 0x4e51
lea rcx, [rbp - 0x48]
mov byte [rbp - 0x3a], 0x6b
call fcn.140004960
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x111f1429
mov dword [rbp - 0x44], 0x320292a
mov dword [rbp - 0x40], 0x150d250b
mov word [rbp - 0x3c], 0x7a08
call fcn.140001180
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0xd0c143c
mov dword [rbp - 0x44], 0x2d3a3f23
mov dword [rbp - 0x40], 0xb261503
mov word [rbp - 0x3c], 0x7a30
call fcn.140001180
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x10c143c
mov dword [rbp - 0x44], 0x327353f
mov dword [rbp - 0x40], 0x731a092d
call fcn.140004020
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x11f1429
mov dword [rbp - 0x44], 0x9272826
mov dword [rbp - 0x40], 0xc3c14
mov byte [rbp - 0x3c], 0x67
call fcn.140004700
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000eca0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x4a100c24
call fcn.1400026f0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x230e032d
mov dword [rbp - 0x44], 0xf123f27
mov dword [rbp - 0x40], 0x7334090a
call fcn.140004020
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010160], rax
mov dword [rbp - 0x48], 0x36020339
mov dword [rbp - 0x44], 0xa3d1c36
mov word [rbp - 0x40], 0x6c03
call fcn.140002fd0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010188], rax
mov dword [rbp - 0x48], 0x26051828
mov dword [rbp - 0x44], 0x15263315
mov dword [rbp - 0x40], 0x1f0a2a12
mov word [rbp - 0x3c], 0x2d02
mov byte [rbp - 0x3a], 0x6b
call fcn.140004960
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010198], rax
mov dword [rbp - 0x48], 0x26051828
mov dword [rbp - 0x44], 0x122c3f1d
mov dword [rbp - 0x40], 0x160f0520
mov word [rbp - 0x3c], 0x7a30
call fcn.140001180
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010190], rax
mov dword [rbp - 0x48], 0x26051828
mov dword [rbp - 0x44], 0x153b3610
mov word [rbp - 0x40], 0x6c03
call fcn.140002fd0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ed90]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010168], rax
call fcn.140003540
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010118], rax
mov dword [rbp - 0x48], 0x36191838
mov dword [rbp - 0x44], 0x20383b26
mov dword [rbp - 0x40], 0x73060914
call fcn.140004020
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x271d1e23
mov dword [rbp - 0x44], 0x3383315
mov word [rbp - 0x40], 0x6c31
call fcn.140002fd0
mov rcx, qword [0x1400101a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ec80]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010138], rax
mov word [rbp - 0x38], 0x7436
call fcn.140002cc0
mov rcx, qword [0x1400101a8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010180], rax
mov dword [rbp - 0x48], 0x3602092b
mov dword [rbp - 0x44], 0x53b2803
mov dword [rbp - 0x40], 0x73101f03
call fcn.140004020
mov rcx, qword [0x1400101a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ec10]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010120], rax
mov dword [rbp - 0x38], 0x4a351509
call fcn.1400026f0
mov rdx, rax
mov rcx, qword [0x1400101a8]
call rbx
mov qword [0x140010108], rax
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret