Function at 0x14000b120
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x68
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x133a1f00
mov dword [rbp - 0x44], 0x381a3505
mov dword [rbp - 0x40], 0x323e010e
mov word [rbp - 0x3c], 0x300b
mov byte [rbp - 0x3a], 0x67
call fcn.140005aa0
mov rdx, qword [0x140025670]
mov r12, rax
mov qword [rbp + 0x60], rdx
test rdx, rdx
je 0x14000b2c7
test rax, rax
je 0x14000b2c7
movsxd rcx, dword [rdx + 0x3c]
xor r14d, r14d
mov r13d, r14d
mov eax, dword [rcx + rdx + 0x88]
add rax, rdx
mov qword [rbp - 0x28], rax
mov ecx, dword [rax + 0x1c]
mov r8d, dword [rax + 0x24]
add rcx, rdx
mov qword [rbp - 0x48], rcx
add r8, rdx
mov ecx, dword [rax + 0x20]
add rcx, rdx
mov qword [rbp - 0x10], r8
mov qword [rbp - 0x20], rcx
cmp dword [rax + 0x18], r14d
jbe 0x14000b2ca
mov word [rbp + 0x48], 0x7a47
mov word [rbp + 0x50], 0x7a47
nop dword [rax]
mov eax, r13d
mov rsi, r14
mov qword [rbp - 0x18], rax
mov edi, dword [rcx + rax*4]
lea rcx, [rbp + 0x48]
add rdi, rdx
call fcn.140001620
movzx ecx, byte [rax]
cmp byte [rdi], cl
je 0x14000b204
lea rcx, [rbp + 0x48]
inc rsi
call fcn.140001620
movzx ecx, byte [rax]
cmp byte [rsi + rdi], cl
jne 0x14000b1f0
lea rcx, [rbp + 0x50]
mov rbx, r14
call fcn.140001620
movzx ecx, byte [rax]
cmp byte [r12], cl
je 0x14000b235
nop dword [rax]
lea rcx, [rbp + 0x50]
inc rbx
call fcn.140001620
movzx ecx, byte [rax]
cmp byte [rbx + r12], cl
jne 0x14000b220
cmp rsi, rbx
jne 0x14000b293
mov r15, r12
mov word [rbp + 0x58], 0x7a47
sub r15, rdi
mov rsi, rdi
nop dword [rax]
lea rcx, [rbp + 0x58]
mov rbx, r14
call fcn.140001620
movzx ecx, byte [rax]
cmp byte [rdi], cl
je 0x14000b277
lea rcx, [rbp + 0x58]
inc rbx
call fcn.140001620
movzx ecx, byte [rax]
cmp byte [rbx + rdi], cl
jne 0x14000b263
mov rax, rsi
sub rax, rdi
dec rbx
cmp rax, rbx
jae 0x14000b2ad
movzx eax, byte [r15 + rsi]
cmp byte [rsi], al
jne 0x14000b293
inc rsi
jmp 0x14000b250
mov rax, qword [rbp - 0x28]
inc r13d
cmp r13d, dword [rax + 0x18]
jae 0x14000b2ca
mov rdx, qword [rbp + 0x60]
mov rcx, qword [rbp - 0x20]
jmp 0x14000b1d0
mov rcx, qword [rbp - 0x10]
mov rax, qword [rbp - 0x18]
movzx eax, word [rcx + rax*2]
mov rcx, qword [rbp - 0x48]
mov r14d, dword [rcx + rax*4]
add r14, qword [rbp + 0x60]
jmp 0x14000b2ca
xor r14d, r14d
lea rcx, [rbp - 0x48]
mov qword [0x140025648], r14
mov dword [rbp - 0x48], 0x222b0804
mov dword [rbp - 0x44], 0x112d3f03
mov dword [rbp - 0x40], 0x332d0018
mov byte [rbp - 0x3c], 0x78
call fcn.140005840
mov rcx, qword [0x140025670]
mov rdx, rax
call r14
movdqa xmm0, xmmword [0x14000ed00]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140025618], rax
mov dword [rbp - 0x38], 0x4b1b3b22
call fcn.1400032c0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov qword [0x140025628], rax
mov dword [rbp - 0x48], 0x373c1311
mov dword [rbp - 0x44], 0x38153b02
mov dword [rbp - 0x40], 0x34230906
mov byte [rbp - 0x3c], 0x78
call fcn.140005840
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ed50]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140025608], rax
mov word [rbp - 0x38], 0xf22
mov byte [rbp - 0x36], 0x6f
call fcn.140005500
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000edf0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140025650], rax
mov byte [rbp - 0x38], 0x47
call fcn.140005210
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x222b0804
mov dword [rbp - 0x44], 0xb293f03
mov dword [rbp - 0x40], 0x24290605
mov word [rbp - 0x3c], 0x140b
mov byte [rbp - 0x3a], 0x67
call fcn.140005aa0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp + 0x48]
mov dword [rbp + 0x48], 0x262b1614
mov word [rbp + 0x4c], 0x5a07
call fcn.1400050b0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x272f150b
mov dword [rbp - 0x44], 0xb1b333b
mov dword [rbp - 0x40], 0x35170b
mov byte [rbp - 0x3c], 0x78
call fcn.140005840
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov qword [0x140025678], rax
mov dword [rbp - 0x48], 0x272f150b
mov dword [rbp - 0x44], 0xb1b333b
mov dword [rbp - 0x40], 0x1635170b
mov byte [rbp - 0x3c], 0x78
call fcn.140005840
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov qword [0x140025640], rax
mov dword [rbp - 0x48], 0x30211604
mov dword [rbp - 0x44], 0x17181212
mov dword [rbp - 0x40], 0x5729090e
call fcn.140004e70
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ed70]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x290e3135
mov dword [rbp - 0x34], 0x5724221d
call fcn.140004a80
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ee40]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140025610], rax
mov dword [rbp - 0x38], 0x3b0e3614
mov dword [rbp - 0x34], 0x231c2f02
mov byte [rbp - 0x30], 0x48
call fcn.140004660
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ee90]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
call fcn.140004390
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x20210817
mov dword [rbp - 0x44], 0x4a0a2912
mov dword [rbp - 0x40], 0x2f292b58
mov word [rbp - 0x3c], 0x140c
mov byte [rbp - 0x3a], 0x67
call fcn.140005aa0
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ecd0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x332a2b32
mov byte [rbp - 0x34], 0x71
call fcn.140004010
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x173a1f00
mov dword [rbp - 0x44], 0x3a12391e
mov dword [rbp - 0x40], 0x23221005
mov word [rbp - 0x3c], 0x774e
mov byte [rbp - 0x3a], 0x67
call fcn.140005aa0
mov rdx, rax
mov rcx, qword [0x140025670]
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x103a1f00
mov dword [rbp - 0x44], 0x1c0d290e
mov dword [rbp - 0x40], 0x31222c07
mov word [rbp - 0x3c], 0x4317
call fcn.140003d90
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0xc291f15
mov dword [rbp - 0x44], 0x32173f07
mov dword [rbp - 0x40], 0x2f091c0f
mov word [rbp - 0x3c], 0x432f
call fcn.140003d90
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x291f15
mov dword [rbp - 0x44], 0x1c0a351b
mov dword [rbp - 0x40], 0x57350021
call fcn.140004e70
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x3a1f00
mov dword [rbp - 0x44], 0x160a2802
mov dword [rbp - 0x40], 0x24233518
mov byte [rbp - 0x3c], 0x78
call fcn.140005840
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ed90]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x4b382002
call fcn.1400032c0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x222b0804
mov dword [rbp - 0x44], 0x103f3f03
mov dword [rbp - 0x40], 0x571b0006
call fcn.140004e70
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x37270810
mov dword [rbp - 0x44], 0x15101c12
mov word [rbp - 0x40], 0x650f
call fcn.140003ba0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x27201301
mov dword [rbp - 0x44], 0xa0b3331
mov dword [rbp - 0x40], 0x3b25231e
mov word [rbp - 0x3c], 0x141d
mov byte [rbp - 0x3a], 0x67
call fcn.140005aa0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
mov dword [rbp - 0x48], 0x27201301
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x44], 0xd013f39
mov dword [rbp - 0x40], 0x32200c2c
mov word [rbp - 0x3c], 0x432f
call fcn.140003d90
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x27201301
mov dword [rbp - 0x44], 0xa163634
mov word [rbp - 0x40], 0x650f
call fcn.140003ba0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ee80]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
call fcn.140004390
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov qword [0x140025630], rax
mov dword [rbp - 0x48], 0x373c1311
mov dword [rbp - 0x44], 0x3f153b02
mov dword [rbp - 0x40], 0x57290018
call fcn.140004e70
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x2638150a
mov dword [rbp - 0x44], 0x1c153331
mov word [rbp - 0x40], 0x653d
call fcn.140003ba0
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000eda0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov word [rbp - 0x38], 0x5810
call fcn.140003890
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x37270202
mov dword [rbp - 0x44], 0x1a162827
mov dword [rbp - 0x40], 0x573f160f
call fcn.140004e70
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ee10]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140025638], rax
mov dword [rbp - 0x38], 0x4b1d392f
call fcn.1400032c0
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
mov qword [0x140025620], rax
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret