Function at 0x140001160
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x70]
sub rsp, 0x170
xor r12d, r12d
mov dword [rbp - 0x30], 0x65006b
mov rsi, rcx
mov qword [rbp - 8], r12
mov ecx, 0xbdbf9c13
mov qword [rbp - 0x38], r12
mov qword [rbp + 8], r12
mov r13d, edx
mov qword [rbp + 0x10], r12
mov qword [rbp], r12
mov qword [rbp - 0x10], r12
mov qword [rbp + 0x18], r12
mov dword [rbp + 0x24], r12d
mov dword [rsp + 0x24], r12d
mov dword [rbp - 0x2c], 0x6e0072
mov dword [rbp - 0x28], 0x6c0065
mov dword [rbp - 0x24], 0x320033
mov dword [rbp - 0x20], 0x64002e
mov dword [rbp - 0x1c], 0x6c006c
mov dword [rsp + 0x40], 0x65656c53
mov byte [rsp + 0x44], 0x70
mov dword [rsp + 0x58], 0x64616f4c
mov dword [rsp + 0x5c], 0x7262694c
mov dword [rsp + 0x60], 0x41797261
mov dword [rsp + 0x48], 0x74726956
mov dword [rsp + 0x4c], 0x416c6175
mov dword [rsp + 0x50], 0x636f6c6c
mov dword [rsp + 0x68], 0x74726956
mov dword [rsp + 0x6c], 0x506c6175
mov dword [rsp + 0x70], 0x65746f72
mov word [rsp + 0x74], 0x7463
mov dword [rbp - 0x58], 0x73756c46
mov dword [rbp - 0x54], 0x736e4968
mov dword [rbp - 0x50], 0x63757274
mov dword [rbp - 0x4c], 0x6e6f6974
mov dword [rbp - 0x48], 0x68636143
mov byte [rbp - 0x44], 0x65
mov dword [rsp + 0x78], 0x4e746547
mov dword [rsp + 0x7c], 0x76697461
mov dword [rbp - 0x80], 0x73795365
mov dword [rbp - 0x7c], 0x496d6574
mov word [rbp - 0x78], 0x666e
mov byte [rbp - 0x76], 0x6f
mov dword [rbp - 0x70], 0x416c7452
mov dword [rbp - 0x6c], 0x75466464
mov dword [rbp - 0x68], 0x6974636e
mov dword [rbp - 0x64], 0x61546e6f
mov word [rbp - 0x60], 0x6c62
mov byte [rbp - 0x5e], 0x65
call fcn.140001020
mov ecx, 0x5ed941b5
mov rbx, rax
call fcn.140001020
mov r14, rax
mov dword [rbp + 0x20], 0x180018
lea rax, [rbp - 0x30]
xor edx, edx
lea r9, [rsp + 0x38]
mov qword [rbp + 0x28], rax
lea r8, [rbp + 0x20]
xor ecx, ecx
call rbx
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x48]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x38]
mov dword [rsp + 0x20], 0xc000c
lea rdx, [rsp + 0x20]
call r14
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x68]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rbp]
mov dword [rsp + 0x20], 0xe000e
lea rdx, [rsp + 0x20]
call r14
lea rax, [rbp - 0x58]
mov dword [rsp + 0x20], 0x150015
mov qword [rsp + 0x28], rax
mov rcx, qword [rsp + 0x38]
lea r9, [rbp + 8]
xor r8d, r8d
lea rdx, [rsp + 0x20]
call r14
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x78]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x10]
mov dword [rsp + 0x20], 0x130013
lea rdx, [rsp + 0x20]
call r14
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x40]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x10]
mov dword [rsp + 0x20], 0x50005
lea rdx, [rsp + 0x20]
call r14
mov rcx, qword [rsp + 0x38]
lea rax, [rbp - 0x70]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x18]
mov dword [rsp + 0x20], 0x130013
lea rdx, [rsp + 0x20]
call r14
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x58]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rbp - 8]
mov dword [rsp + 0x20], 0xc000c
lea rdx, [rsp + 0x20]
call r14
cmp qword [rbp - 0x38], r12
je 0x140001b96
cmp qword [rbp], r12
je 0x140001b96
cmp qword [rbp - 0x10], r12
je 0x140001b96
cmp qword [rbp + 8], r12
je 0x140001b96
mov r10, qword [rbp + 0x10]
test r10, r10
je 0x140001b96
movsxd rdi, dword [rsi + 0x3c]
add rdi, rsi
cmp dword [rdi], 0x4550
jne 0x140001b96
mov eax, 0x8664
cmp word [rdi + 4], ax
jne 0x140001b96
mov r9d, dword [rdi + 0x38]
test r9b, 1
jne 0x140001b96
movzx ecx, word [rdi + 0x14]
mov ebx, r12d
movzx eax, word [rdi + 6]
add rcx, 0x24
cmp r12w, ax
jae 0x140001495
add rcx, rdi
mov r8d, eax
mov eax, dword [rcx + 4]
mov edx, dword [rcx]
test eax, eax
jne 0x140001482
lea eax, [rdx + r9]
jmp 0x140001484
add eax, edx
cmp eax, ebx
cmovbe eax, ebx
add rcx, 0x28
mov ebx, eax
sub r8, 1
jne 0x140001473
lea rcx, [rbp + 0x38]
call r10
mov edx, dword [rbp + 0x3c]
mov r8d, edx
lea r15d, [rdx - 1]
neg edx
add r15d, dword [rdi + 0x50]
lea rcx, [r8 - 1]
mov eax, edx
and r15, rax
mov eax, ebx
add rcx, rax
lea rax, [r8 - 1]
not rax
and rcx, rax
cmp r15, rcx
jne 0x140001b96
mov rcx, qword [rdi + 0x30]
mov r9d, 4
mov r8d, 0x3000
mov rdx, r15
call qword [rbp - 0x38]
mov rbx, rax
test rax, rax
jne 0x140001500
lea r9d, [rax + 4]
mov r8d, 0x3000
mov rdx, r15
xor ecx, ecx
call qword [rbp - 0x38]
mov rbx, rax
mov r11d, dword [rbp + 0xd8]
test r11b, 1
je 0x140001532
mov eax, dword [rsi + 0x3c]
mov dword [rbx + 0x3c], eax
mov edx, dword [rsi + 0x3c]
cmp edx, dword [rdi + 0x54]
jae 0x140001550
nop dword [rax + rax]
mov ecx, edx
inc edx
movzx eax, byte [rcx + rsi]
mov byte [rcx + rbx], al
cmp edx, dword [rdi + 0x54]
jb 0x140001520
jmp 0x140001550
mov edx, r12d
cmp dword [rdi + 0x54], r12d
jbe 0x140001550
nop dword [rax + rax]
mov ecx, edx
inc edx
movzx eax, byte [rcx + rsi]
mov byte [rcx + rbx], al
cmp edx, dword [rdi + 0x54]
jb 0x140001540
movsxd r12, dword [rbx + 0x3c]
xor r15d, r15d
add r12, rbx
mov r10d, r15d
mov qword [rbp + 0x30], r12
movzx r9d, word [r12 + 0x14]
add r9, 0x28
cmp r15w, word [r12 + 6]
jae 0x1400015b2
add r9, r12
mov r8d, r15d
cmp dword [r9], r15d
jbe 0x1400015a0
nop
mov edx, dword [r9 + 4]
mov ecx, dword [r9 - 4]
mov eax, r8d
inc r8d
add rcx, rax
add rdx, rax
movzx eax, byte [rdx + rsi]
mov byte [rcx + rbx], al
cmp r8d, dword [r9]
jb 0x140001580
movzx eax, word [r12 + 6]
inc r10d
add r9, 0x28
cmp r10d, eax
jb 0x140001576
mov rdi, rbx
sub rdi, qword [r12 + 0x30]
je 0x1400016ae
cmp dword [r12 + 0xb4], r15d
je 0x1400016ae
mov r9d, dword [r12 + 0xb0]
add r9, rbx
cmp dword [r9], r15d
je 0x1400016ae
mov eax, dword [r9 + 4]
lea r11, [r9 + 8]
add rax, r9
cmp r11, rax
je 0x14000169b
nop word [rax + rax]
movzx r10d, word [r11]
movzx ecx, r10w
movzx eax, r10w
shr cx, 0xc
cmp cx, 0xa
jne 0x140001635
mov r8d, dword [r9]
and r10d, 0xfff
lea rax, [r8 + r10]
mov rdx, qword [rax + rbx]
lea rax, [r8 + r10]
add rdx, rdi
mov qword [rax + rbx], rdx
jmp 0x140001687
cmp cx, 3
jne 0x14000164d
mov edx, dword [r9]
and eax, 0xfff
add rax, rbx
add rdx, rax
mov eax, edi
jmp 0x140001684
cmp cx, 1
jne 0x14000166d
mov edx, dword [r9]
and eax, 0xfff
add rax, rbx
add rdx, rax
mov rax, rdi
shr rax, 0x10
movzx eax, ax
jmp 0x140001684
cmp cx, 2
jne 0x140001687
mov edx, dword [r9]
and eax, 0xfff
add rax, rbx
add rdx, rax
movzx eax, di
add qword [rdx], rax
mov eax, dword [r9 + 4]
add r11, 2
add rax, r9
cmp r11, rax
jne 0x140001600
mov r9, r11
cmp dword [r11], r15d
jne 0x1400015e2
mov r11d, dword [rbp + 0xd8]
cmp dword [r12 + 0x94], r15d
je 0x14000187a
mov ecx, dword [r12 + 0x90]
mov r13d, r15d
lea r10, [rcx + rbx]
cmp dword [r10 + 0xc], r15d
lea rax, [r10 + 0xc]
je 0x1400016ec
nop word [rax + rax]
inc r13d
lea rax, [rax + 0x14]
cmp dword [rax], r15d
jne 0x1400016e0
mov eax, r11d
mov dword [rbp - 0x40], r15d
and eax, 4
mov dword [rbp - 0x18], eax
mov eax, ecx
je 0x14000179c
cmp r13d, 1
jbe 0x14000179c
mov eax, r11d
mov r9d, r15d
shr eax, 0x10
lea r11d, [r13 - 1]
mov dword [rbp - 0x40], eax
mov eax, ecx
test r11d, r11d
je 0x14000179c
mov r8, r10
nop dword [rax]
movups xmm0, xmmword [r8]
xor edx, edx
mov ecx, r13d
imul esi, esi, 0x343fd
lea r8, [r8 + 0x14]
sub ecx, r9d
mov eax, 0x7fff
div ecx
xor edx, edx
add esi, 0x269ec3
lea ecx, [rax + 1]
mov eax, esi
shr eax, 0x10
and eax, 0x7fff
div ecx
add eax, r9d
inc r9d
lea rcx, [rax + rax*4]
mov edx, dword [r10 + rcx*4 + 0x10]
movups xmm1, xmmword [r10 + rcx*4]
movups xmmword [r10 + rcx*4], xmm0
mov eax, dword [r8 - 4]
mov dword [r10 + rcx*4 + 0x10], eax
movups xmmword [r8 - 0x14], xmm1
mov dword [r8 - 4], edx
cmp r9d, r11d
jb 0x140001730
mov eax, dword [r12 + 0x90]
mov r15d, eax
add r15, rbx
mov eax, dword [r15 + 0xc]
test eax, eax
je 0x140001873
mov r12d, dword [rbp - 0x40]
mov ecx, eax
add rcx, rbx
call qword [rbp - 8]
mov qword [rsp + 0x38], rax
mov r10, rax
mov esi, dword [r15]
mov edi, dword [r15 + 0x10]
add rsi, rbx
add rdi, rbx
mov rdx, qword [rsi]
test rdx, rdx
je 0x140001844
test rdx, rdx
jns 0x1400017e4
movzx r8d, dx
xor edx, edx
jmp 0x140001823
lea r8, [rbx + 2]
xor ecx, ecx
add r8, rdx
cmp byte [r8], cl
je 0x14000180c
mov rax, r8
nop word [rax + rax]
inc rcx
lea rax, [rax + 1]
cmp byte [rax], 0
jne 0x140001800
mov qword [rsp + 0x28], r8
lea rdx, [rsp + 0x20]
xor r8d, r8d
mov word [rsp + 0x20], cx
mov word [rsp + 0x22], cx
mov r9, rdi
mov rcx, r10
call r14
mov rdx, qword [rsi + 8]
add rsi, 8
add rdi, 8
test rdx, rdx
je 0x140001844
mov r10, qword [rsp + 0x38]
jmp 0x1400017d7
test r12d, r12d
je 0x14000185f
cmp dword [rbp - 0x18], 0
je 0x14000185f
cmp r13d, 1
jbe 0x14000185f
imul ecx, r12d, 0x3e8
call qword [rbp - 0x10]
mov eax, dword [r15 + 0x20]
add r15, 0x14
test eax, eax
jne 0x1400017b2
mov r12, qword [rbp + 0x30]
mov r13d, dword [rbp + 0xb8]
cmp dword [r12 + 0xf4], 0
je 0x140001941
mov r15d, dword [r12 + 0xf0]
add r15, 4
add r15, rbx
mov eax, dword [r15]
test eax, eax
je 0x140001941
mov ecx, eax
add rcx, rbx
call qword [rbp - 8]
mov qword [rsp + 0x38], rax
mov r10, rax
mov edi, dword [r15 + 8]
mov esi, dword [r15 + 0xc]
add rdi, rbx
add rsi, rbx
cmp qword [rdi], 0
je 0x140001931
mov rdx, qword [rsi]
test rdx, rdx
jns 0x1400018d7
movzx r8d, dx
xor edx, edx
jmp 0x140001913
lea r8, [rbx + 2]
xor ecx, ecx
add r8, rdx
cmp byte [r8], cl
je 0x1400018fc
mov rax, r8
nop dword [rax + rax]
inc rcx
lea rax, [rax + 1]
cmp byte [rax], 0
jne 0x1400018f0
mov qword [rsp + 0x28], r8
lea rdx, [rsp + 0x20]
xor r8d, r8d
mov word [rsp + 0x20], cx
mov word [rsp + 0x22], cx
mov r9, rdi
mov rcx, r10
call r14
add rdi, 8
add rsi, 8
cmp qword [rdi], 0
je 0x140001931
mov r10, qword [rsp + 0x38]
jmp 0x1400018c7
mov eax, dword [r15 + 0x20]
add r15, 0x20
test eax, eax
jne 0x1400018a3
movzx edi, word [r12 + 0x14]
xor r14d, r14d
add rdi, 0x28
mov esi, r14d
lea r15d, [r14 + 1]
cmp r14w, word [r12 + 6]
jae 0x140001a11
add rdi, r12
lea edx, [r14 + 2]
lea r9d, [r14 + 0x10]
lea r10d, [r14 + 0x20]
cmp dword [rdi], r14d
je 0x1400019fd
mov eax, dword [rdi + 0x14]
mov ecx, eax
and ecx, 0x40000000
bt eax, 0x1d
jb 0x1400019aa
test ecx, ecx
jne 0x14000199c
test eax, eax
mov r8d, 8
cmovns r8d, r15d
jmp 0x1400019c8
test eax, eax
mov r8d, 4
cmovns r8d, edx
jmp 0x1400019c8
test ecx, ecx
jne 0x1400019bc
test eax, eax
mov r8d, 0x80
cmovns r8d, r9d
jmp 0x1400019c8
test eax, eax
mov r8d, 0x40
cmovns r8d, r10d
mov dword [rsp + 0x30], r8d
test dword [rdi + 0x14], 0x4000000
je 0x1400019e0
bts r8d, 9
mov dword [rsp + 0x30], r8d
mov ecx, dword [rdi - 4]
lea r9, [rsp + 0x30]
mov edx, dword [rdi]
add rcx, rbx
call qword [rbp]
mov edx, 2
lea r9d, [rdx + 0xe]
lea r10d, [rdx + 0x1e]
movzx eax, word [r12 + 6]
inc esi
add rdi, 0x28
cmp esi, eax
jb 0x140001970
xor edx, edx
xor r8d, r8d
lea rcx, [rdx - 1]
call qword [rbp + 8]
cmp dword [r12 + 0xd4], r14d
je 0x140001a58
mov eax, dword [r12 + 0xd0]
mov rdi, qword [rax + rbx + 0x18]
mov rax, qword [rdi]
test rax, rax
je 0x140001a58
nop dword [rax]
xor r8d, r8d
mov edx, r15d
mov rcx, rbx
call rax
mov rax, qword [rdi + 8]
lea rdi, [rdi + 8]
test rax, rax
jne 0x140001a40
mov r9, qword [rbp + 0x18]
test r9, r9
je 0x140001a93
mov eax, dword [r12 + 0xa4]
test eax, eax
je 0x140001a93
mov ecx, eax
mov r8, rbx
movabs rax, 0xaaaaaaaaaaaaaaab
mul rcx
mov ecx, dword [r12 + 0xa0]
shr rdx, 3
add rcx, rbx
dec edx
call r9
mov eax, dword [r12 + 0x28]
mov r8, r15
add rax, rbx
mov edx, r15d
mov rcx, rbx
call rax
test r13d, r13d
je 0x140001b91
cmp dword [r12 + 0x8c], r14d
je 0x140001b91
mov r11d, dword [r12 + 0x88]
add r11, rbx
mov edi, dword [r11 + 0x18]
test edi, edi
je 0x140001b91
cmp dword [r11 + 0x14], r14d
je 0x140001b91
mov r9d, dword [r11 + 0x20]
mov r10d, r14d
mov r8d, dword [r11 + 0x24]
add r9, rbx
add r8, rbx
test edi, edi
je 0x140001b91
nop word [rax + rax]
mov edx, dword [r9]
mov ecx, r14d
add rdx, rbx
je 0x140001b91
movzx eax, byte [rdx]
test al, al
je 0x140001b3d
nop word [rax + rax]
movsx eax, al
lea rdx, [rdx + 1]
add ecx, eax
movzx eax, byte [rdx]
ror ecx, 0xd
test al, al
jne 0x140001b20
cmp r13d, ecx
jne 0x140001b3d
test r8, r8
jne 0x140001b52
inc r10d
add r9, 4
add r8, 2
cmp r10d, edi
jb 0x140001b00
mov rax, rbx
jmp 0x140001b98
movzx ecx, word [r8]
mov eax, dword [r11 + 0x1c]
add rax, rbx
mov r8d, dword [rax + rcx*4]
add r8, rbx
test byte [rbp + 0xd8], 8
je 0x140001b81
mov rcx, qword [rbp + 0xd0]
mov edx, 8
call r8
mov rax, rbx
jmp 0x140001b98
mov edx, dword [rbp + 0xc8]
mov rcx, qword [rbp + 0xc0]
call r8
mov rax, rbx
jmp 0x140001b98
xor eax, eax
mov rbx, qword [rsp + 0x1b0]
add rsp, 0x170
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret