Function at 0x140036870
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x40
lea rcx, [rbp - 0x20]
mov dword [rbp - 0x20], 0x1f202a34
mov dword [rbp - 0x1c], 0x2141c00
mov dword [rbp - 0x18], 0x10010a20
mov word [rbp - 0x14], 0x61b
mov byte [rbp - 0x12], 0x49
call fcn.14000b5b0
mov r11, qword [0x1400a58b0]
mov rbx, qword [rax]
test r11, r11
je 0x140036945
test rbx, rbx
je 0x140036945
movsxd rax, dword [r11 + 0x3c]
xor r15d, r15d
mov r9d, r15d
mov ecx, dword [rax + r11 + 0x88]
add rcx, r11
mov esi, dword [rcx + 0x1c]
mov r10d, dword [rcx + 0x20]
add rsi, r11
mov r14d, dword [rcx + 0x24]
add r10, r11
mov edi, dword [rcx + 0x18]
add r14, r11
test edi, edi
je 0x140036948
nop dword [rax + rax]
mov eax, dword [r10]
mov r8, rbx
add rax, r11
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140036923
inc rax
test ecx, ecx
jne 0x140036910
test edx, edx
je 0x140036935
inc r9d
add r10, 4
cmp r9d, edi
jb 0x140036900
jmp 0x140036948
mov eax, r9d
movzx ecx, word [r14 + rax*2]
mov eax, dword [rsi + rcx*4]
add rax, r11
jmp 0x14003694b
xor r15d, r15d
mov rax, r15
lea rcx, [rbp - 0x20]
mov qword [0x1400a58a0], rax
mov dword [rbp - 0x20], 0x2e313d30
mov dword [rbp - 0x1c], 0x2b231606
mov dword [rbp - 0x18], 0x11120b36
mov byte [rbp - 0x14], 0x68
call fcn.14000b210
mov r11, qword [0x1400a58b0]
mov rbx, qword [rax]
test r11, r11
je 0x1400369f7
test rbx, rbx
je 0x1400369f7
movsxd rax, dword [r11 + 0x3c]
mov r9d, r15d
mov ecx, dword [rax + r11 + 0x88]
add rcx, r11
mov esi, dword [rcx + 0x1c]
mov r10d, dword [rcx + 0x20]
add rsi, r11
mov r14d, dword [rcx + 0x24]
add r10, r11
mov edi, dword [rcx + 0x18]
add r14, r11
test edi, edi
je 0x1400369f7
nop word [rax + rax]
mov eax, dword [r10]
mov r8, rbx
add rax, r11
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1400369e3
inc rax
test ecx, ecx
jne 0x1400369d0
test edx, edx
je 0x140036ebc
inc r9d
add r10, 4
cmp r9d, edi
jb 0x1400369c0
mov rax, r15
movdqa xmm0, xmmword [0x140046e20]
lea rcx, [rbp - 0x20]
movdqu xmmword [rbp - 0x20], xmm0
mov qword [0x1400a5878], rax
mov dword [rbp - 0x10], 0x493c302c
call fcn.14000ac30
mov r11, qword [0x1400a58b0]
mov rbx, qword [rax]
test r11, r11
je 0x140036a97
test rbx, rbx
je 0x140036a97
movsxd rax, dword [r11 + 0x3c]
mov r9d, r15d
mov ecx, dword [rax + r11 + 0x88]
add rcx, r11
mov esi, dword [rcx + 0x1c]
mov r10d, dword [rcx + 0x20]
add rsi, r11
mov r14d, dword [rcx + 0x24]
add r10, r11
mov edi, dword [rcx + 0x18]
add r14, r11
test edi, edi
je 0x140036a97
nop
mov eax, dword [r10]
mov r8, rbx
add rax, r11
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140036a83
inc rax
test ecx, ecx
jne 0x140036a70
test edx, edx
je 0x140036ecf
inc r9d
add r10, 4
cmp r9d, edi
jb 0x140036a60
mov rax, r15
lea rcx, [rbp - 0x20]
mov qword [0x1400a5888], rax
mov dword [rbp - 0x20], 0x3b262625
mov dword [rbp - 0x1c], 0x21b1207
mov dword [rbp - 0x18], 0x161c0228
mov byte [rbp - 0x14], 0x68
call fcn.14000b210
mov r11, qword [0x1400a58b0]
mov rbx, qword [rax]
test r11, r11
je 0x140036b47
test rbx, rbx
je 0x140036b47
movsxd rax, dword [r11 + 0x3c]
mov r9d, r15d
mov ecx, dword [rax + r11 + 0x88]
add rcx, r11
mov esi, dword [rcx + 0x1c]
mov r10d, dword [rcx + 0x20]
add rsi, r11
mov r14d, dword [rcx + 0x24]
add r10, r11
mov edi, dword [rcx + 0x18]
add r14, r11
test edi, edi
je 0x140036b47
nop dword [rax]
nop dword [rax + rax]
mov eax, dword [r10]
mov r8, rbx
add rax, r11
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140036b33
inc rax
test ecx, ecx
jne 0x140036b20
test edx, edx
je 0x140036ee2
inc r9d
add r10, 4
cmp r9d, edi
jb 0x140036b10
mov rax, r15
movdqa xmm0, xmmword [0x140046e30]
lea rcx, [rbp - 0x20]
movdqu xmmword [rbp - 0x20], xmm0
mov qword [0x1400a5870], rax
mov word [rbp - 0x10], 0x42c
mov byte [rbp - 0xe], 0x48
call fcn.14000a690
mov r11, qword [0x1400a58b0]
mov rbx, qword [rax]
test r11, r11
je 0x140036bf7
test rbx, rbx
je 0x140036bf7
movsxd rax, dword [r11 + 0x3c]
mov r9d, r15d
mov ecx, dword [rax + r11 + 0x88]
add rcx, r11
mov esi, dword [rcx + 0x1c]
mov r10d, dword [rcx + 0x20]
add rsi, r11
mov r14d, dword [rcx + 0x24]
add r10, r11
mov edi, dword [rcx + 0x18]
add r14, r11
test edi, edi
je 0x140036bf7
nop dword [rax]
nop word [rax + rax]
mov eax, dword [r10]
mov r8, rbx
add rax, r11
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140036be3
inc rax
test ecx, ecx
jne 0x140036bd0
test edx, edx
je 0x140036ef5
inc r9d
add r10, 4
cmp r9d, edi
jb 0x140036bc0
mov rax, r15
movdqa xmm0, xmmword [0x140046df0]
lea rcx, [rbp - 0x20]
movdqu xmmword [rbp - 0x20], xmm0
mov qword [0x1400a5868], rax
mov byte [rbp - 0x10], 0x49
call fcn.140001570
mov r11, qword [0x1400a58b0]
mov rbx, qword [rax]
test r11, r11
je 0x140036c97
test rbx, rbx
je 0x140036c97
movsxd rax, dword [r11 + 0x3c]
mov r9d, r15d
mov ecx, dword [rax + r11 + 0x88]
add rcx, r11
mov esi, dword [rcx + 0x1c]
mov r10d, dword [rcx + 0x20]
add rsi, r11
mov r14d, dword [rcx + 0x24]
add r10, r11
mov edi, dword [rcx + 0x18]
add r14, r11
test edi, edi
je 0x140036c97
nop dword [rax]
mov eax, dword [r10]
mov r8, rbx
add rax, r11
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140036c83
inc rax
test ecx, ecx
jne 0x140036c70
test edx, edx
je 0x140036f08
inc r9d
add r10, 4
cmp r9d, edi
jb 0x140036c60
mov rax, r15
lea rcx, [rbp - 0x20]
mov qword [0x1400a5860], rax
mov dword [rbp - 0x20], 0x2e313d30
mov dword [rbp - 0x1c], 0x31271606
mov dword [rbp - 0x18], 0x6160d2b
mov word [rbp - 0x14], 0x221b
mov byte [rbp - 0x12], 0x49
call fcn.14000b5b0
lea rcx, [rbp + 0x20]
mov dword [rbp + 0x20], 0x2a312320
mov word [rbp + 0x24], 0x7302
call fcn.14000a4a0
mov r11, qword [0x1400a58b0]
mov rbx, qword [rax]
test r11, r11
je 0x140036d57
test rbx, rbx
je 0x140036d57
movsxd rax, dword [r11 + 0x3c]
mov r9d, r15d
mov ecx, dword [rax + r11 + 0x88]
add rcx, r11
mov esi, dword [rcx + 0x1c]
mov r10d, dword [rcx + 0x20]
add rsi, r11
mov r14d, dword [rcx + 0x24]
add r10, r11
mov edi, dword [rcx + 0x18]
add r14, r11
test edi, edi
je 0x140036d57
mov eax, dword [r10]
mov r8, rbx
add rax, r11
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140036d43
inc rax
test ecx, ecx
jne 0x140036d30
test edx, edx
je 0x140036f1b
inc r9d
add r10, 4
cmp r9d, edi
jb 0x140036d20
mov rax, r15
lea rcx, [rbp - 0x20]
mov qword [0x1400a5880], rax
mov dword [rbp - 0x20], 0x2b35203f
mov dword [rbp - 0x1c], 0x31151a3e
mov dword [rbp - 0x18], 0x220a1c25
mov byte [rbp - 0x14], 0x68
call fcn.14000b210
mov r11, qword [0x1400a58b0]
mov rbx, qword [rax]
test r11, r11
je 0x140036e07
test rbx, rbx
je 0x140036e07
movsxd rax, dword [r11 + 0x3c]
mov r9d, r15d
mov ecx, dword [rax + r11 + 0x88]
add rcx, r11
mov esi, dword [rcx + 0x1c]
mov r10d, dword [rcx + 0x20]
add rsi, r11
mov r14d, dword [rcx + 0x24]
add r10, r11
mov edi, dword [rcx + 0x18]
add r14, r11
test edi, edi
je 0x140036e07
nop dword [rax]
nop dword [rax + rax]
mov eax, dword [r10]
mov r8, rbx
add rax, r11
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140036df3
inc rax
test ecx, ecx
jne 0x140036de0
test edx, edx
je 0x140036f2e
inc r9d
add r10, 4
cmp r9d, edi
jb 0x140036dd0
mov rax, r15
lea rcx, [rbp - 0x20]
mov qword [0x1400a58b8], rax
mov dword [rbp - 0x20], 0x2b35203f
mov dword [rbp - 0x1c], 0x31151a3e
mov dword [rbp - 0x18], 0x340a1c25
mov byte [rbp - 0x14], 0x68
call fcn.14000b210
mov r11, qword [0x1400a58b0]
mov rbx, qword [rax]
test r11, r11
je 0x140036f50
test rbx, rbx
je 0x140036f50
movsxd rax, dword [r11 + 0x3c]
mov r9d, r15d
mov ecx, dword [rax + r11 + 0x88]
add rcx, r11
mov esi, dword [rcx + 0x1c]
mov r10d, dword [rcx + 0x20]
add rsi, r11
mov r14d, dword [rcx + 0x24]
add r10, r11
mov edi, dword [rcx + 0x18]
add r14, r11
test edi, edi
je 0x140036f50
mov eax, dword [r10]
mov r8, rbx
add rax, r11
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140036ea3
inc rax
test ecx, ecx
jne 0x140036e90
test edx, edx
je 0x140036f41
inc r9d
add r10, 4
cmp r9d, edi
jb 0x140036e80
jmp 0x140036f50
mov eax, r9d
movzx ecx, word [r14 + rax*2]
mov eax, dword [rsi + rcx*4]
add rax, r11
jmp 0x1400369fa
mov eax, r9d
movzx ecx, word [r14 + rax*2]
mov eax, dword [rsi + rcx*4]
add rax, r11
jmp 0x140036a9a
mov eax, r9d
movzx ecx, word [r14 + rax*2]
mov eax, dword [rsi + rcx*4]
add rax, r11
jmp 0x140036b4a
mov eax, r9d
movzx ecx, word [r14 + rax*2]
mov eax, dword [rsi + rcx*4]
add rax, r11
jmp 0x140036bfa
mov eax, r9d
movzx ecx, word [r14 + rax*2]
mov eax, dword [rsi + rcx*4]
add rax, r11
jmp 0x140036c9a
mov eax, r9d
movzx ecx, word [r14 + rax*2]
mov eax, dword [rsi + rcx*4]
add rax, r11
jmp 0x140036d5a
mov eax, r9d
movzx ecx, word [r14 + rax*2]
mov eax, dword [rsi + rcx*4]
add rax, r11
jmp 0x140036e0a
mov eax, r9d
movzx ecx, word [r14 + rax*2]
mov r15d, dword [rsi + rcx*4]
add r15, r11
lea rcx, [rbp - 0x20]
mov qword [0x1400a5898], r15
mov dword [rbp - 0x20], 0x3c3b2330
mov dword [rbp - 0x1c], 0x2d163b17
mov dword [rbp - 0x18], 0x75160220
call fcn.140004930
mov rbx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
add rsp, 0x40
pop r15
pop r14
pop rbp
ret