Function at 0x14000b970
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x90
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x7c], 0
mov dword [rsp + 0x80], 0x80006
movaps xmm0, xmmword [0x14002d290]
movaps xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0xfbe4e55a
xorps xmm0, xmm0
movups xmmword [rsp + 0x54], xmm0
mov byte [rsp + 0x64], 0
lea rsi, [rsp + 0x40]
call fcn.140017b20
mov rdi, qword [rax]
call fcn.140017b30
mov rcx, qword [rax]
xor eax, eax
jmp 0x14000ba58
lea r8d, [rax + 0x7fca3dff]
lea r10d, [rdx + rax]
add r10d, 0x7fca3dff
and r8d, edx
add r8d, r8d
sub r10d, r8d
add r10b, 7
mov byte [rsp + rax + 0x40], r10b
movzx r8d, r10b
not rcx
add rcx, rax
sub rcx, r8
mov rax, rcx
mov rcx, r9
lea r8d, [rax - 0x9c83444]
lea r9d, [rax + rdx]
add r9d, 0xf637cbbc
and r8d, edx
add r8d, r8d
sub r9d, r8d
add r9b, 0xdc
mov byte [rsp + rax + 0x40], r9b
sub rax, rdi
inc rdi
movzx r8d, byte [rsp + rax + 0x3e]
add rax, 0xfffffffffffffffe
movzx edx, r8b
add rax, rcx
add rax, rdx
inc rax
cmp rax, 0x25
jae 0x14000bcd3
cmp rdi, rax
ja 0x14000bcc1
movzx r8d, byte [rsp + rax + 0x40]
movzx edx, r8b
lea r9, [rcx + 1]
cmp rdi, r9
jae 0x14000bad0
cmp rcx, rax
ja 0x14000bccb
lea r10, [rcx + 3]
cmp rdi, r10
jae 0x14000bb40
lea r11, [rdi + rcx]
cmp r11, rax
jbe 0x14000bb80
lea r8, [rcx + 8]
cmp rdi, r8
jne 0x14000b9bf
lea r9d, [rax - 0x6980aae2]
lea r8d, [rax + rdx]
add r8d, 0x967f551e
and r9d, edx
add r9d, r9d
sub r8d, r9d
add r8b, 0x2e
jmp 0x14000bb71
je 0x14000ba41
lea r10, [rcx + 2]
cmp rdi, r10
je 0x14000ba0d
lea r10, [rcx + 5]
cmp rdi, r10
jne 0x14000bbc5
lea r9d, [rax + 0x3903299]
lea r8d, [rax + rdx]
add r8d, 0x3903299
and r9d, edx
add r9d, r9d
sub r8d, r9d
add r8b, 0xd1
lea r9d, [rax - 0x6d10dd7b]
lea r10d, [rdx + rax]
add r10d, 0x92ef2285
and r9d, edx
add r9d, r9d
sub r10d, r9d
add r10b, r8b
add r10b, 0x5d
mov byte [rsp + rax + 0x40], r10b
jmp 0x14000bb71
cmp rdi, r9
je 0x14000bbff
cmp rdi, r10
jne 0x14000bbd3
lea r9d, [rax + 0x574429e3]
lea r8d, [rax + rdx]
add r8d, 0x574429e3
and r9d, edx
add r9d, r9d
sub r8d, r9d
add r8b, 0xcb
add rdi, rcx
movzx edx, r8b
not rdx
jmp 0x14000ba48
cmp r11, 9
je 0x14000b9d6
cmp rdi, r9
je 0x14000bbff
lea r11, [rcx + 2]
cmp rdi, r11
je 0x14000bbce
cmp rdi, r10
jne 0x14000bc2b
lea r9d, [rax - 0x1478cc0f]
lea r8d, [rax + rdx]
add r8d, 0xeb8733f1
and r9d, edx
add r9d, r9d
sub r8d, r9d
add r8b, 0x69
jmp 0x14000bb0f
lea r10, [rcx + 3]
cmp rdi, r10
jne 0x14000bbf2
mov r9, rcx
jmp 0x14000bc20
lea r11, [rcx + 6]
cmp rdi, r11
je 0x14000b9d6
lea r11, [rcx + 4]
cmp rdi, r11
je 0x14000ba41
jmp 0x14000ba8a
lea r10, [rcx + 4]
cmp rdi, r10
jne 0x14000ba74
lea ecx, [rax - 0x59ebf8f5]
lea r8d, [rax + rdx]
add r8d, 0xa614070b
and ecx, edx
add ecx, ecx
sub r8d, ecx
add r8b, 0xb3
mov byte [rsp + rax + 0x40], r8b
dec rax
mov rcx, r9
jmp 0x14000ba4b
lea r10, [rcx + 5]
cmp rdi, r10
jne 0x14000bc58
lea r9d, [rax - 0x3ac2951b]
lea r8d, [rax + rdx]
add r8d, 0xc53d6ae5
and r9d, edx
add r9d, r9d
sub r8d, r9d
add r8b, 0xbd
jmp 0x14000bb74
lea r10, [rcx + 7]
cmp rdi, r10
je 0x14000b9d6
cmp rdi, 1
ja 0x14000bc9a
cmp rcx, 4
ja 0x14000bbff
lea r8d, [rax + 0x766d8dbd]
lea r9d, [rax + rdx]
add r9d, 0x766d8dbd
and r8d, edx
add r8d, r8d
sub r9d, r8d
add r9b, 0xd5
mov byte [rsp + rax + 0x40], r9b
jmp 0x14000ba4b
lea r9d, [rax + 0x1c8194c8]
lea r10d, [rax + rdx]
add r10d, 0x1c8194c8
and r9d, edx
add r9d, r9d
sub r10d, r9d
add r8b, r10b
add r8b, 0x88
jmp 0x14000bb0f
lea rsi, [rsp + 0xc8c8f9]
jmp 0x14000bcd3
lea rsi, [rsp + 0x15b3b3c]
mov qword [rsp + 0x88], rsi
mov dword [rsp + 0x40], 0x57
lea rdx, [rsp + 0x44]
mov byte [rsp + 0x44], 0x1b
mov byte [rsp + 0x45], 0x33
mov byte [rsp + 0x46], 0x25
mov byte [rsp + 0x47], 0x10
mov byte [rsp + 0x48], 0x32
mov byte [rsp + 0x49], 0x23
mov byte [rsp + 0x4a], 0x13
mov byte [rsp + 0x4b], 0x3b
mov byte [rsp + 0x4c], 0x3b
mov byte [rsp + 0x4d], 0x1f
mov byte [rsp + 0x4e], 0x36
mov byte [rsp + 0x4f], 0x39
mov byte [rsp + 0x50], 0x33
mov byte [rsp + 0x51], 0x3b
mov byte [rsp + 0x52], 0x32
mov byte [rsp + 0x53], 0x12
mov byte [rsp + 0x54], 0x2f
mov byte [rsp + 0x55], 0
movzx eax, byte [rsp + 0x44]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x44], cl
movzx eax, byte [rsp + 0x45]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x45], cl
movzx eax, byte [rsp + 0x46]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x46], cl
movzx eax, byte [rsp + 0x47]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x47], cl
movzx eax, byte [rsp + 0x48]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x48], cl
movzx eax, byte [rsp + 0x49]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x49], cl
movzx eax, byte [rsp + 0x4a]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x4a], cl
movzx eax, byte [rsp + 0x4b]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x4b], cl
movzx eax, byte [rsp + 0x4c]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x4c], cl
movzx eax, byte [rsp + 0x4d]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x4d], cl
movzx eax, byte [rsp + 0x4e]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x4e], cl
movzx eax, byte [rsp + 0x4f]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x4f], cl
movzx eax, byte [rsp + 0x50]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x50], cl
movzx eax, byte [rsp + 0x51]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x51], cl
movzx eax, byte [rsp + 0x52]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x52], cl
movzx eax, byte [rsp + 0x53]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x53], cl
movzx eax, byte [rsp + 0x54]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + 0x54], cl
mov byte [rsp + 0x55], 0
mov dword [rsp + 0x30], 4
lea rcx, [rsp + 0x34]
mov byte [rsp + 0x34], 0x6a
mov byte [rsp + 0x35], 0x70
mov byte [rsp + 0x36], 0x60
mov byte [rsp + 0x37], 0x68
mov byte [rsp + 0x38], 0x68
mov byte [rsp + 0x39], 0x2a
mov byte [rsp + 0x3a], 0x60
mov byte [rsp + 0x3b], 0x68
mov byte [rsp + 0x3c], 0x68
mov byte [rsp + 0x3d], 0
movzx eax, byte [rsp + 0x34]
mov r8d, dword [rsp + 0x30]
xor r8b, al
mov byte [rsp + 0x34], r8b
movzx eax, byte [rsp + 0x35]
mov r8d, dword [rsp + 0x30]
xor r8b, al
mov byte [rsp + 0x35], r8b
movzx eax, byte [rsp + 0x36]
mov r8d, dword [rsp + 0x30]
xor r8b, al
mov byte [rsp + 0x36], r8b
movzx eax, byte [rsp + 0x37]
mov r8d, dword [rsp + 0x30]
xor r8b, al
mov byte [rsp + 0x37], r8b
movzx eax, byte [rsp + 0x38]
mov r8d, dword [rsp + 0x30]
xor r8b, al
mov byte [rsp + 0x38], r8b
movzx eax, byte [rsp + 0x39]
mov r8d, dword [rsp + 0x30]
xor r8b, al
mov byte [rsp + 0x39], r8b
movzx eax, byte [rsp + 0x3a]
mov r8d, dword [rsp + 0x30]
xor r8b, al
mov byte [rsp + 0x3a], r8b
movzx eax, byte [rsp + 0x3b]
mov r8d, dword [rsp + 0x30]
xor r8b, al
mov byte [rsp + 0x3b], r8b
movzx eax, byte [rsp + 0x3c]
mov r8d, dword [rsp + 0x30]
xor r8b, al
mov byte [rsp + 0x3c], r8b
mov byte [rsp + 0x3d], 0
call fcn.14000d1d0
test rax, rax
je 0x14000c30d
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x80]
mov ecx, 1
xor edx, edx
xor r8d, r8d
call rax
mov ecx, eax
mov eax, 0xc0000135
test ecx, ecx
jns 0x14000c30f
mov dword [rsp + 0x40], 0x66
lea rdx, [rsp + 0x44]
mov eax, dword [rsp + 0x40]
xor al, 0x52
mov byte [rsp + 0x44], al
mov eax, dword [rsp + 0x40]
inc al
xor al, 0x74
mov byte [rsp + 0x45], al
mov eax, dword [rsp + 0x40]
add al, 2
xor al, 0x6c
mov byte [rsp + 0x46], al
mov eax, dword [rsp + 0x40]
add al, 3
xor al, 0x49
mov byte [rsp + 0x47], al
mov eax, dword [rsp + 0x40]
add al, 4
xor al, 0x6d
mov byte [rsp + 0x48], al
mov eax, dword [rsp + 0x40]
add al, 5
xor al, 0x61
mov byte [rsp + 0x49], al
mov eax, dword [rsp + 0x40]
add al, 6
xor al, 0x67
mov byte [rsp + 0x4a], al
mov eax, dword [rsp + 0x40]
add al, 7
xor al, 0x65
mov byte [rsp + 0x4b], al
mov eax, dword [rsp + 0x40]
add al, 8
xor al, 0x44
mov byte [rsp + 0x4c], al
mov eax, dword [rsp + 0x40]
add al, 9
xor al, 0x69
mov byte [rsp + 0x4d], al
mov eax, dword [rsp + 0x40]
add al, 0xa
xor al, 0x72
mov byte [rsp + 0x4e], al
mov eax, dword [rsp + 0x40]
add al, 0xb
xor al, 0x65
mov byte [rsp + 0x4f], al
mov eax, dword [rsp + 0x40]
add al, 0xc
xor al, 0x63
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x40]
add al, 0xd
xor al, 0x74
mov byte [rsp + 0x51], al
mov eax, dword [rsp + 0x40]
add al, 0xe
xor al, 0x6f
mov byte [rsp + 0x52], al
mov eax, dword [rsp + 0x40]
add al, 0xf
xor al, 0x72
mov byte [rsp + 0x53], al
mov eax, dword [rsp + 0x40]
add al, 0x10
xor al, 0x79
mov byte [rsp + 0x54], al
mov eax, dword [rsp + 0x40]
add al, 0x11
xor al, 0x45
mov byte [rsp + 0x55], al
mov eax, dword [rsp + 0x40]
add al, 0x12
xor al, 0x6e
mov byte [rsp + 0x56], al
mov eax, dword [rsp + 0x40]
add al, 0x13
xor al, 0x74
mov byte [rsp + 0x57], al
mov eax, dword [rsp + 0x40]
add al, 0x14
xor al, 0x72
mov byte [rsp + 0x58], al
mov eax, dword [rsp + 0x40]
add al, 0x15
xor al, 0x79
mov byte [rsp + 0x59], al
mov eax, dword [rsp + 0x40]
add al, 0x16
xor al, 0x54
mov byte [rsp + 0x5a], al
mov eax, dword [rsp + 0x40]
add al, 0x17
xor al, 0x6f
mov byte [rsp + 0x5b], al
mov eax, dword [rsp + 0x40]
add al, 0x18
xor al, 0x44
mov byte [rsp + 0x5c], al
mov eax, dword [rsp + 0x40]
add al, 0x19
xor al, 0x61
mov byte [rsp + 0x5d], al
mov eax, dword [rsp + 0x40]
add al, 0x1a
xor al, 0x74
mov byte [rsp + 0x5e], al
mov eax, dword [rsp + 0x40]
add al, 0x1b
xor al, 0x61
mov byte [rsp + 0x5f], al
mov byte [rsp + 0x60], 0
xor eax, eax
nop dword [rax]
movzx ecx, byte [rsp + rax + 0x44]
mov r8d, dword [rsp + 0x40]
add r8d, eax
xor r8b, cl
mov byte [rsp + rax + 0x44], r8b
movzx ecx, byte [rsp + rax + 0x45]
mov r8d, dword [rsp + 0x40]
add r8d, eax
inc r8b
xor r8b, cl
mov byte [rsp + rax + 0x45], r8b
add rax, 2
cmp rax, 0x1c
jne 0x14000c0d0
mov byte [rsp + 0x60], 0
mov dword [rsp + 0x30], 0x79
lea rcx, [rsp + 0x34]
mov eax, dword [rsp + 0x30]
xor al, 0x6e
mov byte [rsp + 0x34], al
mov eax, dword [rsp + 0x30]
inc al
xor al, 0x74
mov byte [rsp + 0x35], al
mov eax, dword [rsp + 0x30]
add al, 2
xor al, 0x64
mov byte [rsp + 0x36], al
mov eax, dword [rsp + 0x30]
add al, 3
xor al, 0x6c
mov byte [rsp + 0x37], al
mov eax, dword [rsp + 0x30]
add al, 4
xor al, 0x6c
mov byte [rsp + 0x38], al
mov eax, dword [rsp + 0x30]
add al, 5
xor al, 0x2e
mov byte [rsp + 0x39], al
mov eax, dword [rsp + 0x30]
add al, 6
xor al, 0x64
mov byte [rsp + 0x3a], al
mov eax, dword [rsp + 0x30]
add al, 7
xor al, 0x6c
mov byte [rsp + 0x3b], al
mov eax, dword [rsp + 0x30]
add al, 8
xor al, 0x6c
mov byte [rsp + 0x3c], al
mov byte [rsp + 0x3d], 0
movzx eax, byte [rsp + 0x34]
mov r8d, dword [rsp + 0x30]
xor r8b, al
mov byte [rsp + 0x34], r8b
movzx eax, byte [rsp + 0x35]
mov r8d, dword [rsp + 0x30]
inc r8b
xor r8b, al
mov byte [rsp + 0x35], r8b
movzx eax, byte [rsp + 0x36]
mov r8d, dword [rsp + 0x30]
add r8b, 2
xor r8b, al
mov byte [rsp + 0x36], r8b
movzx eax, byte [rsp + 0x37]
mov r8d, dword [rsp + 0x30]
add r8b, 3
xor r8b, al
mov byte [rsp + 0x37], r8b
movzx eax, byte [rsp + 0x38]
mov r8d, dword [rsp + 0x30]
add r8b, 4
xor r8b, al
mov byte [rsp + 0x38], r8b
movzx eax, byte [rsp + 0x39]
mov r8d, dword [rsp + 0x30]
add r8b, 5
xor r8b, al
mov byte [rsp + 0x39], r8b
movzx eax, byte [rsp + 0x3a]
mov r8d, dword [rsp + 0x30]
add r8b, 6
xor r8b, al
mov byte [rsp + 0x3a], r8b
movzx eax, byte [rsp + 0x3b]
mov r8d, dword [rsp + 0x30]
add r8b, 7
xor r8b, al
mov byte [rsp + 0x3b], r8b
movzx eax, byte [rsp + 0x3c]
mov r8d, dword [rsp + 0x30]
add r8b, 8
xor r8b, al
mov byte [rsp + 0x3c], r8b
mov byte [rsp + 0x3d], 0
call fcn.14000d1d0
test rax, rax
je 0x14000c30d
mov rcx, qword [rsp + 0x70]
lea r9, [rsp + 0x7c]
mov dl, 1
xor r8d, r8d
call rax
test rax, rax
je 0x14000c31d
mov ecx, dword [rax + 0x18]
test rcx, rcx
je 0x14000c306
mov rdx, qword [rsp + 0x70]
mov r8d, dword [rax + 0x20]
add r8, rdx
mov r9d, dword [0x14003d098]
mov r10d, dword [0x14003d09c]
mov r11d, dword [0x14003d0a0]
lea rsi, [rdx + 1]
xor edi, edi
nop dword [rax]
mov eax, dword [r8 + rdi*4]
movzx ebp, byte [rdx + rax]
mov ebx, 0
test bpl, bpl
je 0x14000c2ea
add rax, rsi
xor r14d, r14d
nop dword [rax + rax]
movsx ebx, bpl
xor ebx, r14d
rol ebx, 3
inc ebx
movzx ebp, byte [rax]
inc rax
mov r14d, ebx
test bpl, bpl
jne 0x14000c2d0
mov eax, 0xc0000462
cmp ebx, r9d
je 0x14000c30f
cmp ebx, r10d
je 0x14000c30f
cmp ebx, r11d
je 0x14000c30f
inc rdi
cmp rdi, rcx
jne 0x14000c2b0
mov eax, 0xc00000bb
jmp 0x14000c30f
xor eax, eax
add rsp, 0x90
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
mov eax, 0xc000007b
jmp 0x14000c30f