Function at 0x140111669
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
test rcx, rcx
je 0x140111d52
mov r11, rsp
push rbx
push r12
sub rsp, 0xf8
mov rax, qword [0x140229498]
xor rax, rsp
mov qword [rsp + 0xc0], rax
test rdx, rdx
mov r12, rdx
mov rbx, rcx
je 0x140111d38
movzx eax, byte [rcx + 0x154]
mov qword [r11 + 0x18], rbp
mov qword [r11 - 0x18], rsi
cmp al, 8
mov qword [r11 - 0x20], rdi
mov qword [r11 - 0x28], r13
mov qword [r11 - 0x30], r14
mov qword [r11 - 0x38], r15
jae 0x140111735
movzx edi, al
mov esi, 8
sub rsi, rdi
lea rdx, [rdx + rdi + 0x24]
mov r8, rsi
call fcn.140118890
lea rcx, [r12 + 0x24]
mov r8, rsi
mov rdx, rdi
mov byte [rbx + 0x154], 8
call fcn.140112670
test eax, eax
je 0x140111728
cmp rdi, 4
jae 0x140111719
lea r8, [rsi - 4]
lea rcx, [r12 + 0x24]
mov rdx, rdi
call fcn.140112670
test eax, eax
je 0x140111719
lea rdx, str.Not_a_PNG_file
mov rcx, rbx
call fcn.140113310
jmp 0x140111728
lea rdx, str.PNG_file_corrupted_by_ASCII_conversion
mov rcx, rbx
call fcn.140113310
cmp rdi, 3
jae 0x140111735
or dword [rbx + 0x44], 0x1000
mov byte [rsp + 0x70], 0x49
mov byte [rsp + 0x71], 0x48
mov byte [rsp + 0x72], 0x44
mov byte [rsp + 0x73], 0x52
mov byte [rsp + 0x74], 0
mov byte [rsp + 0x30], 0x49
mov byte [rsp + 0x31], 0x44
mov byte [rsp + 0x32], 0x41
mov byte [rsp + 0x33], 0x54
mov byte [rsp + 0x34], 0
mov byte [rsp + 0xb0], 0x49
mov byte [rsp + 0xb1], 0x45
mov byte [rsp + 0xb2], 0x4e
mov byte [rsp + 0xb3], 0x44
mov byte [rsp + 0xb4], 0
mov byte [rsp + 0x40], 0x50
mov byte [rsp + 0x41], 0x4c
mov byte [rsp + 0x42], 0x54
mov byte [rsp + 0x43], 0x45
mov byte [rsp + 0x44], 0
mov byte [rsp + 0x80], 0x62
mov byte [rsp + 0x81], 0x4b
mov byte [rsp + 0x82], 0x47
mov byte [rsp + 0x83], 0x44
mov byte [rsp + 0x84], 0
mov byte [rsp + 0x50], 0x63
mov byte [rsp + 0x51], 0x48
mov byte [rsp + 0x52], 0x52
mov byte [rsp + 0x53], 0x4d
mov byte [rsp + 0x54], 0
mov byte [rsp + 0xa0], 0x67
mov byte [rsp + 0xa1], 0x41
mov byte [rsp + 0xa2], 0x4d
mov byte [rsp + 0xa3], 0x41
mov byte [rsp + 0xa4], 0
mov byte [rsp + 0x60], 0x68
mov byte [rsp + 0x61], 0x49
mov byte [rsp + 0x62], 0x53
mov byte [rsp + 0x63], 0x54
mov byte [rsp + 0x64], 0
mov byte [rsp + 0x68], 0x69
mov byte [rsp + 0x69], 0x43
mov byte [rsp + 0x6a], 0x43
mov byte [rsp + 0x6b], 0x50
mov byte [rsp + 0x6c], 0
mov byte [rsp + 0x90], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0x91], 0x46
mov byte [rsp + 0x92], 0x46
mov byte [rsp + 0x93], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x94], 0
mov byte [rsp + 0x20], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x21], 0x43
mov byte [rsp + 0x22], 0x41
mov byte [rsp + 0x23], 0x4c
mov byte [rsp + 0x24], 0
mov byte [rsp + 0x38], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x39], 0x48
mov byte [rsp + 0x3a], 0x59
mov byte [rsp + 0x3b], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x3c], 0
mov byte [rsp + 0x48], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x49], 0x42
mov byte [rsp + 0x4a], 0x49
mov byte [rsp + 0x4b], 0x54
mov byte [rsp + 0x4c], 0
mov byte [rsp + 0x28], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x29], 0x43
mov byte [rsp + 0x2a], 0x41
mov byte [rsp + 0x2b], 0x4c
mov byte [rsp + 0x2c], 0
mov byte [rsp + 0x78], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x79], 0x50
mov byte [rsp + 0x7a], 0x4c
mov byte [rsp + 0x7b], 0x54
mov byte [rsp + 0x7c], 0
mov byte [rsp + 0x58], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x59], 0x52
mov byte [rsp + 0x5a], 0x47
mov byte [rsp + 0x5b], 0x42
mov byte [rsp + 0x5c], 0
mov byte [rsp + 0x88], 0x74
mov r14d, dword [rsp + 0x70]
mov ebp, dword [rsp + 0x30]
mov r15d, dword [rsp + 0xb0]
mov r13d, dword [rsp + 0x40]
mov byte [rsp + 0x89], 0x45
mov byte [rsp + 0x8a], 0x58
mov byte [rsp + 0x8b], 0x74
mov byte [rsp + 0x8c], 0
mov byte [rsp + 0x98], 0x74
mov byte [rsp + 0x99], 0x49
mov byte [rsp + 0x9a], 0x4d
mov byte [rsp + 0x9b], 0x45
mov byte [rsp + 0x9c], 0
mov byte [rsp + 0xa8], 0x74
mov byte [rsp + 0xa9], 0x52
mov byte [rsp + 0xaa], 0x4e
mov byte [rsp + 0xab], 0x53
mov byte [rsp + 0xac], 0
mov byte [rsp + 0xb8], 0x7a
mov byte [rsp + 0xb9], 0x54
mov byte [rsp + 0xba], 0x58
mov byte [rsp + 0xbb], 0x74
mov byte [rsp + 0xbc], 0
mov rcx, rbx
call fcn.140119cf0
cmp dword [rbx + 0x144], ebp
mov esi, eax
jne 0x1401119d8
mov ecx, dword [rbx + 0x44]
test cl, 8
je 0x1401119d8
bts ecx, 0xd
mov dword [rbx + 0x44], ecx
cmp dword [rbx + 0x144], r14d
jne 0x1401119f1
mov r8d, eax
mov rdx, r12
mov rcx, rbx
call fcn.140119f70
jmp 0x1401119b7
cmp dword [rbx + 0x144], r15d
jne 0x140111a0a
mov r8d, eax
mov rdx, r12
mov rcx, rbx
call fcn.14011a340
jmp 0x1401119b7
lea rdx, [rbx + 0x144]
mov rcx, rbx
call fcn.140112cf0
test eax, eax
je 0x140111a74
cmp dword [rbx + 0x144], ebp
jne 0x140111a29
or dword [rbx + 0x44], 4
mov r8d, esi
mov rdx, r12
mov rcx, rbx
call fcn.14011c750
cmp dword [rbx + 0x144], r13d
jne 0x140111a49
or dword [rbx + 0x44], 2
jmp 0x1401119b7
cmp dword [rbx + 0x144], ebp
jne 0x1401119b7
mov eax, dword [rbx + 0x44]
test al, 1
jne 0x140111cb4
lea rdx, str.Missing_IHDR_before_IDAT
mov rcx, rbx
call fcn.140113310
jmp 0x140111d08
cmp dword [rbx + 0x144], r13d
jne 0x140111a90
mov r8d, esi
mov rdx, r12
mov rcx, rbx
call fcn.14011a160
jmp 0x1401119b7
cmp dword [rbx + 0x144], ebp
je 0x140111cd2
mov eax, dword [rsp + 0x80]
cmp dword [rbx + 0x144], eax
jne 0x140111abe
mov r8d, esi
mov rdx, r12
mov rcx, rbx
call fcn.14011b5c0
jmp 0x1401119b7
mov eax, dword [rsp + 0x50]
cmp dword [rbx + 0x144], eax
jne 0x140111add
mov r8d, esi
mov rdx, r12
mov rcx, rbx
call fcn.14011a730
jmp 0x1401119b7
mov eax, dword [rsp + 0xa0]
cmp dword [rbx + 0x144], eax
jne 0x140111aff
mov r8d, esi
mov rdx, r12
mov rcx, rbx
call fcn.14011a3a0
jmp 0x1401119b7
mov eax, dword [rsp + 0x60]
cmp dword [rbx + 0x144], eax
jne 0x140111b1e
mov r8d, esi
mov rdx, r12
mov rcx, rbx
call fcn.14011b800
jmp 0x1401119b7
mov eax, dword [rsp + 0x90]
cmp dword [rbx + 0x144], eax
jne 0x140111b40
mov r8d, esi
mov rdx, r12
mov rcx, rbx
call fcn.14011baa0
jmp 0x1401119b7
mov eax, dword [rsp + 0x20]
cmp dword [rbx + 0x144], eax
jne 0x140111b5f
mov r8d, esi
mov rdx, r12
mov rcx, rbx
call fcn.14011bbf0
jmp 0x1401119b7
mov eax, dword [rsp + 0x28]
cmp dword [rbx + 0x144], eax
jne 0x140111b7e
mov r8d, esi
mov rdx, r12
mov rcx, rbx
call fcn.14011bf60
jmp 0x1401119b7
mov eax, dword [rsp + 0x38]
cmp dword [rbx + 0x144], eax
jne 0x140111b9d
mov r8d, esi
mov rdx, r12
mov rcx, rbx
call fcn.14011b950
jmp 0x1401119b7
mov eax, dword [rsp + 0x48]
cmp dword [rbx + 0x144], eax
jne 0x140111bbc
mov r8d, esi
mov rdx, r12
mov rcx, rbx
call fcn.14011a570
jmp 0x1401119b7
mov eax, dword [rsp + 0x58]
cmp dword [rbx + 0x144], eax
jne 0x140111bdb
mov r8d, esi
mov rdx, r12
mov rcx, rbx
call fcn.14011ab60
jmp 0x1401119b7
mov eax, dword [rsp + 0x68]
cmp dword [rbx + 0x144], eax
jne 0x140111bfa
mov r8d, esi
mov rdx, r12
mov rcx, rbx
call fcn.14011ada0
jmp 0x1401119b7
mov eax, dword [rsp + 0x78]
cmp dword [rbx + 0x144], eax
jne 0x140111c19
mov r8d, esi
mov rdx, r12
mov rcx, rbx
call fcn.14011b020
jmp 0x1401119b7
mov eax, dword [rsp + 0x88]
cmp dword [rbx + 0x144], eax
jne 0x140111c3b
mov r8d, esi
mov rdx, r12
mov rcx, rbx
call fcn.14011c2d0
jmp 0x1401119b7
mov eax, dword [rsp + 0x98]
cmp dword [rbx + 0x144], eax
jne 0x140111c5d
mov r8d, esi
mov rdx, r12
mov rcx, rbx
call fcn.14011c1a0
jmp 0x1401119b7
mov eax, dword [rsp + 0xa8]
cmp dword [rbx + 0x144], eax
jne 0x140111c7f
mov r8d, esi
mov rdx, r12
mov rcx, rbx
call fcn.14011b370
jmp 0x1401119b7
mov eax, dword [rsp + 0xb8]
cmp dword [rbx + 0x144], eax
jne 0x140111ca1
mov r8d, esi
mov rdx, r12
mov rcx, rbx
call fcn.14011c4f0
jmp 0x1401119b7
mov r8d, esi
mov rdx, r12
mov rcx, rbx
call fcn.14011c750
jmp 0x1401119b7
cmp byte [rbx + 0x14e], 3
jne 0x140111d08
test al, 2
jne 0x140111d08
lea rdx, str.Missing_PLTE_before_IDAT
mov rcx, rbx
call fcn.140113310
jmp 0x140111d08
mov eax, dword [rbx + 0x44]
test al, 1
jne 0x140111ce2
lea rdx, str.Missing_IHDR_before_IDAT
jmp 0x140111cf6
cmp byte [rbx + 0x14e], 3
jne 0x140111cfe
test al, 2
jne 0x140111cfe
lea rdx, str.Missing_PLTE_before_IDAT
mov rcx, rbx
call fcn.140113310
or dword [rbx + 0x44], 4
mov dword [rbx + 0x12c], esi
mov r14, qword [rsp + 0xd8]
mov r13, qword [rsp + 0xe0]
mov rdi, qword [rsp + 0xe8]
mov rsi, qword [rsp + 0xf0]
mov rbp, qword [rsp + 0x120]
mov r15, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0xc0]
xor rcx, rsp
call fcn.14011f1c0
add rsp, 0xf8
pop r12
pop rbx
ret 0