Function at 0x14000314c
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x288]
sub rsp, 0x360
mov rax, qword [section..data]
mov ebx, 0x190
test rax, rax
jne 0x14000319e
mov ecx, ebx
call fcn.140001034
test rax, rax
je 0x140003197
mov rcx, rax
call fcn.140001454
mov qword [section..data], rax
call qword [rax + 0xb8]
test eax, eax
je 0x1400031b2
mov eax, 1
jmp 0x140003c3d
mov rax, qword [section..data]
test rax, rax
jne 0x1400031da
mov rcx, rbx
call fcn.140001034
test rax, rax
je 0x1400031d3
mov rcx, rax
call fcn.140001454
mov qword [section..data], rax
mov rax, qword [rax + 0x50]
xor edx, edx
lea ecx, [rdx + 2]
call rax
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x140003c3b
mov rax, qword [section..data]
xor r15d, r15d
xor r14d, r14d
mov dword [rbp + 0x20], 0x238
test rax, rax
jne 0x140003227
mov rcx, rbx
call fcn.140001034
test rax, rax
je 0x140003220
mov rcx, rax
call fcn.140001454
mov qword [section..data], rax
mov rax, qword [rax + 0xd0]
lea rdx, [rbp + 0x20]
mov rcx, rsi
call rax
mov edi, 1
jmp 0x140003623
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x20], 0x180005
mov dword [rsp + 0x24], 0xc0010
mov dword [rsp + 0x28], 0x12000f
mov dword [rsp + 0x2c], 0x120005
mov dword [rsp + 0x30], 0x5004e
mov dword [rsp + 0x34], 0x50018
mov dword [rsp + 0x38], 0x600060
mov dword [rsp + 0x3c], 0x600060
mov dword [rsp + 0x40], 0x600060
mov dword [rsp + 0x44], 0x600060
mov dword [rsp + 0x48], 0x600060
mov dword [rsp + 0x4c], 0x600060
mov dword [rsp + 0x50], 0x600060
call fcn.14000497c
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x4c]
call fcn.140002120
test al, al
je 0x1400032c8
add r15d, edi
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x20], 0x190010
mov dword [rsp + 0x24], 0x80014
mov dword [rsp + 0x28], 0xe000f
mov dword [rsp + 0x2c], 0x5004e
mov dword [rsp + 0x30], 0x50018
mov dword [rsp + 0x34], 0x600060
mov dword [rsp + 0x38], 0x600060
mov dword [rsp + 0x3c], 0x600060
mov dword [rsp + 0x40], 0x600060
mov dword [rsp + 0x44], 0x600060
mov dword [rsp + 0x48], 0x600060
call fcn.140004958
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x4c]
call fcn.140002120
lea rcx, [rsp + 0x20]
movzx ebx, al
mov dword [rsp + 0x20], 0x10014
mov dword [rsp + 0x24], 0xb0013
mov dword [rsp + 0x28], 0x7000d
mov dword [rsp + 0x2c], 0x4e0012
mov dword [rsp + 0x30], 0x180005
mov dword [rsp + 0x34], 0x600005
mov dword [rsp + 0x38], 0x600060
mov dword [rsp + 0x3c], 0x600060
mov dword [rsp + 0x40], 0x600060
mov dword [rsp + 0x44], 0x600060
mov dword [rsp + 0x48], 0x600060
mov dword [rsp + 0x4c], 0x600060
call fcn.140004934
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x4c]
call fcn.140002120
movzx eax, al
lea rcx, [rsp + 0x20]
or ebx, eax
mov dword [rsp + 0x20], 0x120010
mov dword [rsp + 0x24], 0x3000f
mov dword [rsp + 0x28], 0xf000d
mov dword [rsp + 0x2c], 0x4e000e
mov dword [rsp + 0x30], 0x180005
mov dword [rsp + 0x34], 0x600005
mov dword [rsp + 0x38], 0x600060
mov dword [rsp + 0x3c], 0x600060
mov dword [rsp + 0x40], 0x600060
mov dword [rsp + 0x44], 0x600060
mov dword [rsp + 0x48], 0x600060
mov dword [rsp + 0x4c], 0x600060
call fcn.140004934
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x4c]
call fcn.140002120
movzx eax, al
lea rcx, [rsp + 0x20]
or ebx, eax
mov dword [rsp + 0x20], 0x50012
mov dword [rsp + 0x24], 0xd0013
mov dword [rsp + 0x28], 0xe000f
mov dword [rsp + 0x2c], 0x5004e
mov dword [rsp + 0x30], 0x50018
mov dword [rsp + 0x34], 0x600060
mov dword [rsp + 0x38], 0x600060
mov dword [rsp + 0x3c], 0x600060
mov dword [rsp + 0x40], 0x600060
mov dword [rsp + 0x44], 0x600060
mov dword [rsp + 0x48], 0x600060
call fcn.140004958
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x4c]
call fcn.140002120
movzx eax, al
or ebx, eax
mov dword [rsp + 0x20], 0x160005
mov dword [rsp + 0x24], 0xe0005
mov dword [rsp + 0x28], 0x160014
mov dword [rsp + 0x2c], 0x120017
mov dword [rsp + 0x30], 0x5004e
mov dword [rsp + 0x34], 0x50018
mov dword [rsp + 0x38], 0x600060
mov dword [rsp + 0x3c], 0x600060
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x40], 0x600060
mov dword [rsp + 0x44], 0x600060
mov dword [rsp + 0x48], 0x600060
mov dword [rsp + 0x4c], 0x600060
mov dword [rsp + 0x50], 0x600060
call fcn.14000497c
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x4c]
call fcn.140002120
movzx eax, al
lea rcx, [rsp + 0x20]
or ebx, eax
mov dword [rsp + 0x20], 0x120010
mov dword [rsp + 0x24], 0x3000f
mov dword [rsp + 0x28], 0x130005
mov dword [rsp + 0x2c], 0x80013
mov dword [rsp + 0x30], 0x30001
mov dword [rsp + 0x34], 0x5000b
mov dword [rsp + 0x38], 0x4e0012
mov dword [rsp + 0x3c], 0x180005
mov dword [rsp + 0x40], 0x600005
mov dword [rsp + 0x44], 0x600060
mov dword [rsp + 0x48], 0x600060
mov dword [rsp + 0x4c], 0x600060
mov dword [rsp + 0x50], 0x600060
mov dword [rsp + 0x54], 0x600060
mov dword [rsp + 0x58], 0x600060
mov dword [rsp + 0x5c], 0x600060
mov dword [rsp + 0x60], 0x600060
mov dword [rsp + 0x64], 0x600060
call fcn.140004910
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x4c]
call fcn.140002120
movzx eax, al
lea ecx, [r14 + 1]
or eax, ebx
mov ebx, 0x190
mov rax, qword [section..data]
cmove ecx, r14d
mov r14d, ecx
test rax, rax
jne 0x140003613
mov ecx, ebx
call fcn.140001034
test rax, rax
je 0x14000360c
mov rcx, rax
call fcn.140001454
mov qword [section..data], rax
mov rax, qword [rax + 0xd8]
lea rdx, [rbp + 0x20]
mov rcx, rsi
call rax
test eax, eax
jne 0x140003241
mov rax, qword [section..data]
test rax, rax
jne 0x140003653
mov rcx, rbx
call fcn.140001034
test rax, rax
je 0x14000364c
mov rcx, rax
call fcn.140001454
mov qword [section..data], rax
mov rcx, rsi
call qword [rax + 0x38]
cmp r15d, edi
jg 0x140003c3b
test r14d, r14d
jle 0x140003794
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x20], 0x120025
mov dword [rsp + 0x24], 0xf0012
mov dword [rsp + 0x28], 0x400012
mov dword [rsp + 0x2c], 0x180050
mov dword [rsp + 0x30], 0x500058
mov dword [rsp + 0x34], 0x500050
mov dword [rsp + 0x38], 0x500050
mov dword [rsp + 0x3c], 0x550050
mov dword [rsp + 0x40], 0x40005a
mov dword [rsp + 0x44], 0x30021
mov dword [rsp + 0x48], 0x50003
mov dword [rsp + 0x4c], 0x130013
mov dword [rsp + 0x50], 0x90040
mov dword [rsp + 0x54], 0x400013
mov dword [rsp + 0x58], 0x50024
mov dword [rsp + 0x5c], 0x9000e
mov dword [rsp + 0x60], 0x40005
mov dword [rsp + 0x64], 0x600060
mov dword [rsp + 0x68], 0x600060
mov dword [rsp + 0x6c], 0x600060
mov dword [rsp + 0x70], 0x600060
mov dword [rsp + 0x74], 0x600060
mov dword [rsp + 0x78], 0x600060
mov dword [rsp + 0x7c], 0x600060
mov dword [rbp - 0x80], 0x600060
mov dword [rbp - 0x7c], 0x600060
mov dword [rbp - 0x78], 0x600060
mov dword [rbp - 0x74], 0x600060
mov dword [rbp - 0x70], 0x600060
mov dword [rbp - 0x6c], 0x600060
mov dword [rbp - 0x68], 0x600060
mov dword [rbp - 0x64], 0x600060
mov dword [rbp - 0x60], 0x600060
mov dword [rbp - 0x5c], 0x600060
mov dword [rbp - 0x58], 0x600060
call fcn.1400048ec
lea rcx, [rsp + 0x20]
call fcn.140002ae8
mov eax, r14d
jmp 0x140003c3d
mov rax, qword [section..data]
mov ebx, 0x40
mov dword [rbp - 0x20], ebx
mov r14d, 0x190
test rax, rax
jne 0x1400037ca
mov ecx, r14d
call fcn.140001034
test rax, rax
je 0x1400037c3
mov rcx, rax
call fcn.140001454
mov qword [section..data], rax
lea rcx, [rbp - 0x20]
call qword [rax + 0x98]
mov eax, 0x80000000
cmp qword [rbp - 0x18], rax
jae 0x14000390c
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x20], 0x120025
mov dword [rsp + 0x24], 0xf0012
mov dword [rsp + 0x28], 0x400012
mov dword [rsp + 0x2c], 0x180050
mov dword [rsp + 0x30], 0x500058
mov dword [rsp + 0x34], 0x510050
mov dword [rsp + 0x38], 0x500050
mov dword [rsp + 0x3c], 0x550050
mov dword [rsp + 0x40], 0x40005a
mov dword [rsp + 0x44], 0x30021
mov dword [rsp + 0x48], 0x50003
mov dword [rsp + 0x4c], 0x130013
mov dword [rsp + 0x50], 0x90040
mov dword [rsp + 0x54], 0x400013
mov dword [rsp + 0x58], 0x50024
mov dword [rsp + 0x5c], 0x9000e
mov dword [rsp + 0x60], 0x40005
mov dword [rsp + 0x64], 0x600060
mov dword [rsp + 0x68], 0x600060
mov dword [rsp + 0x6c], 0x600060
mov dword [rsp + 0x70], 0x600060
mov dword [rsp + 0x74], 0x600060
mov dword [rsp + 0x78], 0x600060
mov dword [rsp + 0x7c], 0x600060
mov dword [rbp - 0x80], 0x600060
mov dword [rbp - 0x7c], 0x600060
mov dword [rbp - 0x78], 0x600060
mov dword [rbp - 0x74], 0x600060
mov dword [rbp - 0x70], 0x600060
mov dword [rbp - 0x6c], 0x600060
mov dword [rbp - 0x68], 0x600060
mov dword [rbp - 0x64], 0x600060
mov dword [rbp - 0x60], 0x600060
mov dword [rbp - 0x5c], 0x600060
mov dword [rbp - 0x58], 0x600060
call fcn.1400048ec
lea rcx, [rsp + 0x20]
call fcn.140002ae8
mov eax, dword [rbp - 0x18]
jmp 0x140003c3d
mov rax, qword [section..data]
test rax, rax
jne 0x140003934
mov rcx, r14
call fcn.140001034
test rax, rax
je 0x14000392d
mov rcx, rax
call fcn.140001454
mov qword [section..data], rax
call qword [rax + 0x90]
mov rsi, rax
mov rax, qword [section..data]
test rax, rax
jne 0x140003965
mov rcx, r14
call fcn.140001034
test rax, rax
je 0x14000395e
mov rcx, rax
call fcn.140001454
mov qword [section..data], rax
mov r15d, 0x3e8
mov ecx, r15d
call qword [rax + 0xe8]
mov rax, qword [section..data]
test rax, rax
jne 0x14000399c
mov rcx, r14
call fcn.140001034
test rax, rax
je 0x140003995
mov rcx, rax
call fcn.140001454
mov qword [section..data], rax
call qword [rax + 0x90]
mov rdi, rax
sub rdi, rsi
cmp rdi, r15
jae 0x140003ad9
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x20], 0x120025
mov dword [rsp + 0x24], 0xf0012
mov dword [rsp + 0x28], 0x400012
mov dword [rsp + 0x2c], 0x180050
mov dword [rsp + 0x30], 0x500058
mov dword [rsp + 0x34], 0x520050
mov dword [rsp + 0x38], 0x500050
mov dword [rsp + 0x3c], 0x550050
mov dword [rsp + 0x40], 0x40005a
mov dword [rsp + 0x44], 0x30021
mov dword [rsp + 0x48], 0x50003
mov dword [rsp + 0x4c], 0x130013
mov dword [rsp + 0x50], 0x90040
mov dword [rsp + 0x54], 0x400013
mov dword [rsp + 0x58], 0x50024
mov dword [rsp + 0x5c], 0x9000e
mov dword [rsp + 0x60], 0x40005
mov dword [rsp + 0x64], 0x600060
mov dword [rsp + 0x68], 0x600060
mov dword [rsp + 0x6c], 0x600060
mov dword [rsp + 0x70], 0x600060
mov dword [rsp + 0x74], 0x600060
mov dword [rsp + 0x78], 0x600060
mov dword [rsp + 0x7c], 0x600060
mov dword [rbp - 0x80], 0x600060
mov dword [rbp - 0x7c], 0x600060
mov dword [rbp - 0x78], 0x600060
mov dword [rbp - 0x74], 0x600060
mov dword [rbp - 0x70], 0x600060
mov dword [rbp - 0x6c], 0x600060
mov dword [rbp - 0x68], 0x600060
mov dword [rbp - 0x64], 0x600060
mov dword [rbp - 0x60], 0x600060
mov dword [rbp - 0x5c], 0x600060
mov dword [rbp - 0x58], 0x600060
call fcn.1400048ec
lea rcx, [rsp + 0x20]
call fcn.140002ae8
mov eax, edi
jmp 0x140003c3d
mov rax, qword [section..data]
test rax, rax
jne 0x140003b01
mov rcx, r14
call fcn.140001034
test rax, rax
je 0x140003afa
mov rcx, rax
call fcn.140001454
mov qword [section..data], rax
lea rcx, [rbp - 0x50]
call qword [rax + 0x88]
cmp dword [rbp - 0x30], 2
jae 0x140003c3b
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x20], 0x120025
mov dword [rsp + 0x24], 0xf0012
mov dword [rsp + 0x28], 0x400012
mov dword [rsp + 0x2c], 0x180050
mov dword [rsp + 0x30], 0x500058
mov dword [rsp + 0x34], 0x530050
mov dword [rsp + 0x38], 0x500050
mov dword [rsp + 0x3c], 0x550050
mov dword [rsp + 0x40], 0x40005a
mov dword [rsp + 0x44], 0x30021
mov dword [rsp + 0x48], 0x50003
mov dword [rsp + 0x4c], 0x130013
mov dword [rsp + 0x50], 0x90040
mov dword [rsp + 0x54], 0x400013
mov dword [rsp + 0x58], 0x50024
mov dword [rsp + 0x5c], 0x9000e
mov dword [rsp + 0x60], 0x40005
mov dword [rsp + 0x64], 0x600060
mov dword [rsp + 0x68], 0x600060
mov dword [rsp + 0x6c], 0x600060
mov dword [rsp + 0x70], 0x600060
mov dword [rsp + 0x74], 0x600060
mov dword [rsp + 0x78], 0x600060
mov dword [rsp + 0x7c], 0x600060
mov dword [rbp - 0x80], 0x600060
mov dword [rbp - 0x7c], 0x600060
mov dword [rbp - 0x78], 0x600060
mov dword [rbp - 0x74], 0x600060
mov dword [rbp - 0x70], 0x600060
mov dword [rbp - 0x6c], 0x600060
mov dword [rbp - 0x68], 0x600060
mov dword [rbp - 0x64], 0x600060
mov dword [rbp - 0x60], 0x600060
mov dword [rbp - 0x5c], 0x600060
mov dword [rbp - 0x58], 0x600060
call fcn.1400048ec
lea rcx, [rsp + 0x20]
call fcn.140002ae8
mov eax, dword [rbp - 0x30]
jmp 0x140003c3d
xor eax, eax
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret