Function at 0x1400ca010
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x40
xor ebx, ebx
mov dword [rbp - 0x20], 0x4044404b
mov qword [rcx], rbx
mov rsi, rcx
mov qword [rcx + 8], rbx
mov qword [rcx + 0x10], rbx
mov qword [rcx + 0x18], rbx
mov qword [rcx + 0x20], rbx
mov qword [rcx + 0x28], rbx
mov qword [rcx + 0x30], rbx
mov qword [rcx + 0x38], rbx
mov qword [rcx + 0x40], rbx
mov qword [rcx + 0x48], rbx
mov qword [rcx + 0x50], rbx
mov qword [rcx + 0x58], rbx
mov qword [rcx + 0x60], rbx
mov qword [rcx + 0x68], rbx
mov qword [rcx + 0x70], rbx
mov qword [rcx + 0x78], rbx
mov ecx, ebx
mov dword [rbp - 0x1c], 0x404d4050
mov dword [rbp - 0x18], 0x40494041
mov dword [rbp - 0x14], 0x40354035
mov dword [rbp - 0x10], 0x404d4026
mov dword [rbp - 0xc], 0x40474046
mov word [rbp - 8], bx
mov byte [rbp - 6], 1
mov eax, 0x4000
add eax, ecx
xor word [rbp + rcx*2 - 0x20], ax
inc rcx
cmp rcx, 0xc
jb 0x1400ca0a7
lea rcx, [rbp - 0x20]
mov byte [rbp - 6], bl
call fcn.140085680
mov rdi, rax
mov qword [rsi], rax
mov rax, rbx
mov dword [rbp - 0x20], 0x6d67714f
mov dword [rbp - 0x1c], 0x64697754
mov dword [rbp - 0x18], 0x797a6d
mov byte [rbp - 0x14], 1
xor byte [rbp + rax - 0x20], al
inc rax
cmp rax, 0xb
jb 0x1400ca0ea
mov byte [rbp - 0x14], bl
test rdi, rdi
jne 0x1400ca104
mov rax, rbx
jmp 0x1400ca150
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x1400ca12a
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
call 0x140a97063
int3
movdqa xmm0, xmmword [0x14022a3f0]
mov qword [rsi + 8], rax
mov rax, rbx
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x10], 0x1007571
xor byte [rbp + rax - 0x20], al
inc rax
cmp rax, 0x12
jb 0x1400ca16b
mov rdi, qword [rsi]
mov byte [rbp - 0xd], bl
test rdi, rdi
jne 0x1400ca188
mov rax, rbx
jmp 0x1400ca1d4
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x1400ca1ae
lea r14, [r14 + 4]
add r15, 2
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
push rdx
call 0x1403efcca
test eax, eax
jne 0x1400ca1a6
mov eax, dword [r12 + rdi + 0x1c]
movzx ecx, word [r15]
add rax, rdi
mov eax, dword [rax + rcx*4]
add rax, rdi
movdqa xmm0, xmmword [0x14022a330]
mov qword [rsi + 0x10], rax
mov rax, rbx
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x10], 0x667275
mov byte [rbp - 0xc], 1
xor byte [rbp + rax - 0x20], al
inc rax
cmp rax, 0x13
jb 0x1400ca1f3
mov rdi, qword [rsi]
mov byte [rbp - 0xc], bl
test rdi, rdi
jne 0x1400ca210
mov rax, rbx
jmp 0x1400ca25c
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x1400ca236
lea r14, [r14 + 4]
add r15, 2
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
push rax
call 0x140408062
test eax, eax
jne 0x1400ca22e
mov eax, dword [r12 + rdi + 0x1c]
movzx ecx, word [r15]
add rax, rdi
mov eax, dword [rax + rcx*4]
add rax, rdi
mov qword [rsi + 0x18], rax
mov rax, rbx
mov dword [rbp - 0x20], 0x77706856
mov dword [rbp - 0x1c], 0x466a6471
mov dword [rbp - 0x18], 0x68656564
mov dword [rbp - 0x14], 0x1007549
xor byte [rbp + rax - 0x20], al
inc rax
cmp rax, 0xe
jb 0x1400ca27f
mov rdi, qword [rsi]
mov byte [rbp - 0x11], bl
test rdi, rdi
jne 0x1400ca29c
mov rax, rbx
jmp 0x1400ca2e8
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x1400ca2c2
lea r14, [r14 + 4]
add r15, 2
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
push rax
call 0x1408d97ef
test eax, eax
jne 0x1400ca2ba
mov eax, dword [r12 + rdi + 0x1c]
movzx ecx, word [r15]
add rax, rdi
mov eax, dword [rax + rcx*4]
add rax, rdi
mov qword [rsi + 0x30], rax
mov rax, rbx
mov dword [rbp - 0x20], 0x77706856
mov dword [rbp - 0x1c], 0x416a6471
mov dword [rbp - 0x18], 0x4e6f6c7a
mov word [rbp - 0x14], 0x74
mov byte [rbp - 0x12], 1
xor byte [rbp + rax - 0x20], al
inc rax
cmp rax, 0xd
jb 0x1400ca30e
mov rdi, qword [rsi]
mov byte [rbp - 0x12], bl
test rdi, rdi
jne 0x1400ca32b
mov rax, rbx
jmp 0x1400ca377
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x1400ca351
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
call 0x140989d37
int3
mov qword [rsi + 0x48], rax
mov rax, rbx
mov dword [rbp - 0x20], 0x77706856
mov dword [rbp - 0x1c], 0x416a6471
mov dword [rbp - 0x18], 0x6f6c7a
mov byte [rbp - 0x14], 1
xor byte [rbp + rax - 0x20], al
inc rax
cmp rax, 0xb
jb 0x1400ca397
mov rdi, qword [rsi]
mov byte [rbp - 0x14], bl
test rdi, rdi
jne 0x1400ca3b4
mov rax, rbx
jmp 0x1400ca400
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x1400ca3da
lea r14, [r14 + 4]
add r15, 2
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
push rax
call 0x140bcea2b
test eax, eax
jne 0x1400ca3d2
mov eax, dword [r12 + rdi + 0x1c]
movzx ecx, word [r15]
add rax, rdi
mov eax, dword [rax + rcx*4]
add rax, rdi
mov qword [rsi + 0x50], rax
mov rax, rbx
mov dword [rbp - 0x20], 0x706d6d43
mov dword [rbp - 0x1c], 0x69674d61
mov dword [rbp - 0x18], 0x6f656c
mov byte [rbp - 0x14], 1
xor byte [rbp + rax - 0x20], al
inc rax
cmp rax, 0xb
jb 0x1400ca420
mov rdi, qword [rsi]
mov byte [rbp - 0x14], bl
test rdi, rdi
jne 0x1400ca43d
mov rax, rbx
jmp 0x1400ca489
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x1400ca463
lea r14, [r14 + 4]
add r15, 2
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
push rsi
call 0x140977c33
test eax, eax
jne 0x1400ca45b
mov eax, dword [r12 + rdi + 0x1c]
movzx ecx, word [r15]
add rax, rdi
mov eax, dword [rax + rcx*4]
add rax, rdi
mov qword [rsi + 0x38], rax
mov rax, rbx
mov dword [rbp - 0x20], 0x67636e4c
mov dword [rbp - 0x1c], 0x75646c48
mov dword [rbp - 0x18], 0x4a737b69
mov word [rbp - 0x14], 0x100
xor byte [rbp + rax - 0x20], al
inc rax
cmp rax, 0xc
jb 0x1400ca4ab
mov rdi, qword [rsi]
mov byte [rbp - 0x13], bl
test rdi, rdi
jne 0x1400ca4c8
mov rax, rbx
jmp 0x1400ca514
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x1400ca4ee
lea r14, [r14 + 4]
add r15, 2
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
push rdx
call 0x1407a54d8
test eax, eax
jne 0x1400ca4e6
mov eax, dword [r12 + rdi + 0x1c]
movzx ecx, word [r15]
add rax, rdi
mov eax, dword [rax + rcx*4]
add rax, rdi
mov qword [rsi + 0x20], rax
mov rax, rbx
mov dword [rbp - 0x20], 0x53766447
mov dword [rbp - 0x1c], 0x46656a76
mov dword [rbp - 0x18], 0x6e786d6c
mov dword [rbp - 0x14], 0x1007e7f
xor byte [rbp + rax - 0x20], al
inc rax
cmp rax, 0xe
jb 0x1400ca537
mov rdi, qword [rsi]
mov byte [rbp - 0x11], bl
test rdi, rdi
jne 0x1400ca554
mov rax, rbx
jmp 0x1400ca5a0
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x1400ca57a
lea r14, [r14 + 4]
add r15, 2
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
push rbp
call 0x1403c05d9
test eax, eax
jne 0x1400ca572
mov eax, dword [r12 + rdi + 0x1c]
movzx ecx, word [r15]
add rax, rdi
mov eax, dword [rax + rcx*4]
add rax, rdi
movdqa xmm0, xmmword [0x14022a2a0]
mov qword [rsi + 0x28], rax
mov rax, rbx
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x10], 0x1006862
xor byte [rbp + rax - 0x20], al
inc rax
cmp rax, 0x12
jb 0x1400ca5bb
mov rdi, qword [rsi]
mov byte [rbp - 0xd], bl
test rdi, rdi
jne 0x1400ca5d8
mov rax, rbx
jmp 0x1400ca624
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x1400ca5fe
lea r14, [r14 + 4]
add r15, 2
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
push rbx
call 0x140779300
test eax, eax
jne 0x1400ca5f6
mov eax, dword [r12 + rdi + 0x1c]
movzx ecx, word [r15]
add rax, rdi
mov eax, dword [rax + rcx*4]
add rax, rdi
movdqa xmm0, xmmword [0x14022a510]
mov qword [rsi + 0x40], rax
mov rax, rbx
movdqu xmmword [rbp - 0x20], xmm0
mov word [rbp - 0x10], 0x100
xor byte [rbp + rax - 0x20], al
inc rax
cmp rax, 0x10
jb 0x1400ca63e
mov rdi, qword [rsi]
mov byte [rbp - 0xf], bl
test rdi, rdi
jne 0x1400ca65b
mov rax, rbx
jmp 0x1400ca6a7
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x1400ca681
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
call 0x1407bc484
int3
movdqa xmm0, xmmword [0x14022a520]
mov qword [rsi + 0x58], rax
mov rax, rbx
movdqu xmmword [rbp - 0x20], xmm0
mov word [rbp - 0x10], 0x100
xor byte [rbp + rax - 0x20], al
inc rax
cmp rax, 0x10
jb 0x1400ca6c1
mov rdi, qword [rsi]
mov byte [rbp - 0xf], bl
test rdi, rdi
jne 0x1400ca6de
mov rax, rbx
jmp 0x1400ca72a
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x1400ca704
lea r14, [r14 + 4]
add r15, 2
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
push rax
call 0x14047d7b4
test eax, eax
jne 0x1400ca6fc
mov eax, dword [r12 + rdi + 0x1c]
movzx ecx, word [r15]
add rax, rdi
mov eax, dword [rax + rcx*4]
add rax, rdi
movdqa xmm0, xmmword [0x14022a240]
mov qword [rsi + 0x60], rax
mov rax, rbx
movdqu xmmword [rbp - 0x20], xmm0
mov word [rbp - 0x10], 0x100
xor byte [rbp + rax - 0x20], al
inc rax
cmp rax, 0x10
jb 0x1400ca744
mov rdi, qword [rsi]
mov byte [rbp - 0xf], bl
test rdi, rdi
jne 0x1400ca761
mov rax, rbx
jmp 0x1400ca7ad
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x1400ca787
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
call 0x1408baacb
int3
mov qword [rsi + 0x68], rax
mov rax, rbx
mov dword [rbp - 0x20], 0x76716452
mov dword [rbp - 0x1c], 0x6f526069
mov dword [rbp - 0x18], 0x6f6b6c7a
mov word [rbp - 0x14], 0x100
xor byte [rbp + rax - 0x20], al
inc rax
cmp rax, 0xc
jb 0x1400ca7cf
mov rdi, qword [rsi]
mov byte [rbp - 0x13], bl
test rdi, rdi
jne 0x1400ca7ec
mov rax, rbx
jmp 0x1400ca838
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x1400ca812
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
call 0x14066d7d0
int3
movdqa xmm0, xmmword [0x14022a2d0]
mov qword [rsi + 0x70], rax
mov rax, rbx
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x10], 0x7b717053
mov word [rbp - 0xc], 0x71
mov byte [rbp - 0xa], 1
xor byte [rbp + rax - 0x20], al
inc rax
cmp rax, 0x15
jb 0x1400ca85d
mov rdi, qword [rsi]
mov byte [rbp - 0xa], bl
test rdi, rdi
je 0x1400ca8c1
movsxd rax, dword [rdi + 0x3c]
mov r12d, dword [rax + rdi + 0x88]
mov r14d, dword [r12 + rdi + 0x20]
mov r15d, dword [r12 + rdi + 0x24]
add r14, rdi
add r15, rdi
jmp 0x1400ca89b
lea r14, [r14 + 4]
add r15, 2
mov ecx, dword [r14]
lea rdx, [rbp - 0x20]
add rcx, rdi
push rsi
call 0x140857fdb
test eax, eax
jne 0x1400ca893
mov eax, dword [r12 + rdi + 0x1c]
movzx ecx, word [r15]
add rax, rdi
mov ebx, dword [rax + rcx*4]
add rbx, rdi
mov rdi, qword [rsp + 0x70]
mov rax, rsi
mov r12, qword [rsp + 0x78]
mov qword [rsi + 0x78], rbx
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x40
pop r15
pop r14
pop rbp
ret