Function at 0x1400369a0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x90
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x7c], 0
mov dword [rsp + 0x80], 0x80006
movaps xmm0, xmmword [0x140093dd0]
movaps xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0xd3d2d17c
xorps xmm0, xmm0
movups xmmword [rsp + 0x54], xmm0
mov qword [rsp + 0x62], 0
movabs rdi, 0x3e8eb35a414ab8c0
lea rsi, [rsp + 0x40]
movabs rbx, 0xf024135b75f74520
call fcn.140044ae0
mov r14, qword [rax]
call fcn.140044af0
mov rcx, qword [rax]
xor eax, eax
jmp 0x140036a8b
lea r9d, [rax - 0x48be0220]
lea r10d, [rdx + rax]
add r10d, 0xb741fde0
and r9d, edx
add r9d, r9d
sub r10d, r9d
add r10b, 0xe0
mov byte [rsp + rax + 0x40], r10b
movzx r9d, r10b
not rcx
add rcx, rax
sub rcx, r9
mov rax, rcx
mov rcx, r8
mov r8d, eax
and r8d, edx
add edx, eax
add r8d, r8d
sub edx, r8d
mov byte [rsp + rax + 0x40], dl
sub rax, r14
inc r14
movzx r9d, byte [rsp + rax + 0x3e]
add rax, 0xfffffffffffffffe
movzx edx, r9b
add rax, rcx
add rax, rdx
inc rax
cmp rax, 0x2a
jae 0x140036d19
cmp r14, rax
ja 0x140036d07
movzx r9d, byte [rsp + rax + 0x40]
movzx edx, r9b
lea r8, [rcx + 1]
cmp r14, r8
jae 0x140036af0
cmp rcx, rax
ja 0x140036d11
lea r10, [rcx + 8]
cmp r14, r10
jb 0x140036b30
cmp r14, r8
jne 0x140036b30
lea ecx, [rax + 0x57e23760]
lea r9d, [rdx + rax]
add r9d, 0x57e23760
and ecx, edx
add ecx, ecx
sub r9d, ecx
add r9b, 0x60
mov byte [rsp + rax + 0x40], r9b
jmp 0x140036c9d
je 0x140036a74
lea r10, [rcx + 2]
cmp r14, r10
je 0x140036a1b
lea r10, [rcx + 5]
cmp r14, r10
jne 0x140036bdd
lea r9d, [rax - 0x39b89e20]
lea r8d, [rax + rdx]
add r8d, 0xc64761e0
and r9d, edx
add r9d, r9d
sub r8d, r9d
add r8b, 0xe0
jmp 0x140036c2b
lea r11, [r14 + rcx]
cmp r11, rax
jbe 0x140036b73
lea r8, [rcx + 4]
cmp r14, r8
je 0x140036c9a
lea r8, [rcx + 0x28]
cmp r14, r8
jne 0x140036c72
mov r9d, eax
or r9d, 0x7d895fc0
lea r8d, [r9 + rdx]
and r9d, edx
add r9d, r9d
sub r8d, r9d
add r8b, 0xc0
jmp 0x140036c2b
lea r10, [rcx + 3]
cmp r14, r10
jbe 0x140036c3a
cmp r14, r8
je 0x140036a74
lea r11d, [rax - 0x118b6ce0]
lea r9d, [rax + rdx]
add r9d, 0xee749320
and r11d, edx
add r11d, r11d
sub r9d, r11d
add r9b, 0x20
lea r11, [rcx + 2]
cmp r14, r11
je 0x140036a1b
cmp r14, r10
jne 0x140036ca8
mov r8d, eax
or r8d, 0x80
add r8d, edx
mov r9d, eax
and r9d, edx
add r9d, r9d
sub r8d, r9d
add r8b, 0x80
jmp 0x140036c2b
lea r10, [rcx + 3]
cmp r14, r10
jne 0x140036c8d
lea r10, [rax + rbx]
lea r8, [r10 + rdx]
mov r9d, edx
and r9d, r10d
mov r10b, 0x20
add r9d, r9d
sub r8d, r9d
add r8b, r10b
lea r9d, [rax + 0x7921aa0]
lea r10d, [rdx + rax]
add r10d, 0x7921aa0
and r9d, edx
add r9d, r9d
sub r10d, r9d
add r10b, r8b
add r10b, 0xa0
mov byte [rsp + rax + 0x40], r10b
add r14, rcx
movzx edx, r8b
not rdx
jmp 0x140036a7b
cmp r14, r8
je 0x140036abe
cmp r14, r10
je 0x140036c9a
lea r11, [rcx + 2]
cmp r14, r11
jne 0x140036cc9
lea r9d, [rax + 0x5ce40360]
lea r8d, [rax + rdx]
add r8d, 0x5ce40360
and r9d, edx
add r9d, r9d
sub r8d, r9d
add r8b, 0x60
jmp 0x140036c2b
cmp r14, r10
je 0x140036a52
lea rdx, [rcx + 3]
cmp r14, rdx
je 0x140036a74
jmp 0x140036a07
lea r10, [rcx + 6]
cmp r14, r10
jne 0x140036aa7
mov r8, rcx
dec rax
mov rcx, r8
jmp 0x140036a7e
lea r10, [rcx + 6]
cmp r14, r10
jne 0x140036cf3
mov r10, rax
or r10, rdi
lea r8, [r10 + rdx]
mov r9d, edx
and r9d, r10d
mov r10b, 0xc0
jmp 0x140036bfb
lea ebp, [rax + 0x57d7f1a0]
lea r9d, [rax + rdx]
add r9d, 0x57d7f1a0
and ebp, edx
add ebp, ebp
sub r9d, ebp
add r9b, 0xa0
cmp r14, r11
jne 0x140036bb5
jmp 0x140036a1b
cmp rcx, 4
ja 0x140036abe
mov byte [rsp + rax + 0x40], r9b
jmp 0x140036a7e
lea rsi, [rsp + 0xee4960]
jmp 0x140036d19
lea rsi, [rsp + 0x15657c0]
mov qword [rsp + 0x88], rsi
mov byte [rsp + 0x40], 0x52
mov byte [rsp + 0x41], 0x6a
mov byte [rsp + 0x42], pe_nt_image_headers64
mov byte [rsp + 0x43], 0x4d
mov byte [rsp + 0x44], 0x6b
mov byte [rsp + 0x45], 0x7a
mov byte [rsp + 0x46], 0x4a
mov byte [rsp + 0x47], 0x72
mov byte [rsp + 0x48], 0x72
mov byte [rsp + 0x49], 0x4e
mov byte [rsp + 0x4a], 0x67
mov byte [rsp + 0x4b], 0x74
mov byte [rsp + 0x4c], 0x6a
mov byte [rsp + 0x4d], 0x72
mov byte [rsp + 0x4e], 0x6b
mov byte [rsp + 0x4f], 0x4b
mov byte [rsp + 0x50], 0x7e
mov byte [rsp + 0x51], 0
add byte [rsp + 0x40], 0xfa
add byte [rsp + 0x41], 0xfa
add byte [rsp + 0x42], 0xfa
add byte [rsp + 0x43], 0xfa
add byte [rsp + 0x44], 0xfa
add byte [rsp + 0x45], 0xfa
add byte [rsp + 0x46], 0xfa
add byte [rsp + 0x47], 0xfa
add byte [rsp + 0x48], 0xfa
add byte [rsp + 0x49], 0xfa
add byte [rsp + 0x4a], 0xfa
add byte [rsp + 0x4b], 0xfa
add byte [rsp + 0x4c], 0xfa
add byte [rsp + 0x4d], 0xfa
add byte [rsp + 0x4e], 0xfa
add byte [rsp + 0x4f], 0xfa
add byte [rsp + 0x50], 0xfa
mov byte [rsp + 0x36], 0x77
mov byte [rsp + 0x37], 0x7d
mov byte [rsp + 0x38], 0x6d
mov byte [rsp + 0x39], 0x75
mov byte [rsp + 0x3a], 0x75
mov byte [rsp + 0x3b], 0x37
mov byte [rsp + 0x3c], 0x6d
mov byte [rsp + 0x3d], 0x75
mov byte [rsp + 0x3e], 0x75
mov byte [rsp + 0x3f], 0
add byte [rsp + 0x36], 0xf7
add byte [rsp + 0x37], 0xf7
add byte [rsp + 0x38], 0xf7
add byte [rsp + 0x39], 0xf7
add byte [rsp + 0x3a], 0xf7
add byte [rsp + 0x3b], 0xf7
add byte [rsp + 0x3c], 0xf7
add byte [rsp + 0x3d], 0xf7
add byte [rsp + 0x3e], 0xf7
lea rcx, [rsp + 0x36]
lea rdx, [rsp + 0x40]
call fcn.140038010
test rax, rax
je 0x14003713d
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x80]
mov ecx, 1
xor edx, edx
xor r8d, r8d
call rax
mov ecx, eax
mov eax, 0xc0000135
test ecx, ecx
jns 0x14003713f
mov dword [rsp + 0x40], 0x1f
lea rdx, [rsp + 0x44]
mov eax, dword [rsp + 0x40]
xor al, 0x52
mov byte [rsp + 0x44], al
mov eax, dword [rsp + 0x40]
inc al
xor al, 0x74
mov byte [rsp + 0x45], al
mov eax, dword [rsp + 0x40]
add al, 2
xor al, 0x6c
mov byte [rsp + 0x46], al
mov eax, dword [rsp + 0x40]
add al, 3
xor al, 0x49
mov byte [rsp + 0x47], al
mov eax, dword [rsp + 0x40]
add al, 4
xor al, 0x6d
mov byte [rsp + 0x48], al
mov eax, dword [rsp + 0x40]
add al, 5
xor al, 0x61
mov byte [rsp + 0x49], al
mov eax, dword [rsp + 0x40]
add al, 6
xor al, 0x67
mov byte [rsp + 0x4a], al
mov eax, dword [rsp + 0x40]
add al, 7
xor al, 0x65
mov byte [rsp + 0x4b], al
mov eax, dword [rsp + 0x40]
add al, 8
xor al, 0x44
mov byte [rsp + 0x4c], al
mov eax, dword [rsp + 0x40]
add al, 9
xor al, 0x69
mov byte [rsp + 0x4d], al
mov eax, dword [rsp + 0x40]
add al, 0xa
xor al, 0x72
mov byte [rsp + 0x4e], al
mov eax, dword [rsp + 0x40]
add al, 0xb
xor al, 0x65
mov byte [rsp + 0x4f], al
mov eax, dword [rsp + 0x40]
add al, 0xc
xor al, 0x63
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x40]
add al, 0xd
xor al, 0x74
mov byte [rsp + 0x51], al
mov eax, dword [rsp + 0x40]
add al, 0xe
xor al, 0x6f
mov byte [rsp + 0x52], al
mov eax, dword [rsp + 0x40]
add al, 0xf
xor al, 0x72
mov byte [rsp + 0x53], al
mov eax, dword [rsp + 0x40]
add al, 0x10
xor al, 0x79
mov byte [rsp + 0x54], al
mov eax, dword [rsp + 0x40]
add al, 0x11
xor al, 0x45
mov byte [rsp + 0x55], al
mov eax, dword [rsp + 0x40]
add al, 0x12
xor al, 0x6e
mov byte [rsp + 0x56], al
mov eax, dword [rsp + 0x40]
add al, 0x13
xor al, 0x74
mov byte [rsp + 0x57], al
mov eax, dword [rsp + 0x40]
add al, 0x14
xor al, 0x72
mov byte [rsp + 0x58], al
mov eax, dword [rsp + 0x40]
add al, 0x15
xor al, 0x79
mov byte [rsp + 0x59], al
mov eax, dword [rsp + 0x40]
add al, 0x16
xor al, 0x54
mov byte [rsp + 0x5a], al
mov eax, dword [rsp + 0x40]
add al, 0x17
xor al, 0x6f
mov byte [rsp + 0x5b], al
mov eax, dword [rsp + 0x40]
add al, 0x18
xor al, 0x44
mov byte [rsp + 0x5c], al
mov eax, dword [rsp + 0x40]
add al, 0x19
xor al, 0x61
mov byte [rsp + 0x5d], al
mov eax, dword [rsp + 0x40]
add al, 0x1a
xor al, 0x74
mov byte [rsp + 0x5e], al
mov eax, dword [rsp + 0x40]
add al, 0x1b
xor al, 0x61
mov byte [rsp + 0x5f], al
mov byte [rsp + 0x60], 0
xor eax, eax
nop word cs:[rax + rax]
movzx ecx, byte [rsp + rax + 0x44]
mov r8d, dword [rsp + 0x40]
add r8d, eax
xor r8b, cl
mov byte [rsp + rax + 0x44], r8b
movzx ecx, byte [rsp + rax + 0x45]
mov r8d, dword [rsp + 0x40]
add r8d, eax
inc r8b
xor r8b, cl
mov byte [rsp + rax + 0x45], r8b
add rax, 2
cmp rax, 0x1c
jne 0x140036fe0
mov byte [rsp + 0x60], 0
mov byte [rsp + 0x36], pe_nt_image_headers64
mov byte [rsp + 0x37], 0x7e
mov byte [rsp + 0x38], 0x6e
mov byte [rsp + 0x39], 0x76
mov byte [rsp + 0x3a], 0x76
mov byte [rsp + 0x3b], 0x38
mov byte [rsp + 0x3c], 0x6e
mov byte [rsp + 0x3d], 0x76
mov byte [rsp + 0x3e], 0x76
mov byte [rsp + 0x3f], 0
add byte [rsp + 0x36], 0xf6
add byte [rsp + 0x37], 0xf6
add byte [rsp + 0x38], 0xf6
add byte [rsp + 0x39], 0xf6
add byte [rsp + 0x3a], 0xf6
add byte [rsp + 0x3b], 0xf6
add byte [rsp + 0x3c], 0xf6
add byte [rsp + 0x3d], 0xf6
add byte [rsp + 0x3e], 0xf6
lea rcx, [rsp + 0x36]
call fcn.140038010
test rax, rax
je 0x14003713d
mov rcx, qword [rsp + 0x70]
lea r9, [rsp + 0x7c]
mov dl, 1
xor r8d, r8d
call rax
test rax, rax
je 0x14003714d
mov ecx, dword [rax + 0x18]
test rcx, rcx
je 0x140037136
mov rdx, qword [rsp + 0x70]
mov r8d, dword [rax + 0x20]
add r8, rdx
mov r9d, dword [0x1400b42fc]
mov r10d, dword [0x1400b4300]
mov r11d, dword [0x1400b4304]
lea rsi, [rdx + 1]
xor edi, edi
nop dword [rax + rax]
mov eax, dword [r8 + rdi*4]
movzx ebp, byte [rdx + rax]
mov ebx, 0
test bpl, bpl
je 0x14003711a
add rax, rsi
xor r14d, r14d
nop dword [rax + rax]
movsx ebx, bpl
xor ebx, r14d
rol ebx, 3
inc ebx
movzx ebp, byte [rax]
inc rax
mov r14d, ebx
test bpl, bpl
jne 0x140037100
mov eax, 0xc0000462
cmp ebx, r9d
je 0x14003713f
cmp ebx, r10d
je 0x14003713f
cmp ebx, r11d
je 0x14003713f
inc rdi
cmp rdi, rcx
jne 0x1400370e0
mov eax, 0xc00000bb
jmp 0x14003713f
xor eax, eax
add rsp, 0x90
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
mov eax, 0xc000007b
jmp 0x14003713f