Function at 0x140015170
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x30
xor edi, edi
xor edx, edx
mov dword [rcx + 8], edi
mov r8d, 0x37b8
mov qword [rcx + 0x68], rdi
mov rbx, rcx
mov qword [rcx + 0xf0], rdi
mov qword [rcx + 0xdf4], rdi
mov qword [rcx + 0x36d8], rdi
mov qword [rcx + 0x36e0], rdi
mov qword [rcx + 0x36e8], rdi
mov qword [rcx + 0x36f0], rdi
mov qword [rcx + 0x36f8], rdi
mov qword [rcx + 0x3700], rdi
mov qword [rcx + 0x37a8], rdi
mov qword [rcx + 0x37b0], rdi
call sub.VCRUNTIME140.dll_memset
mov qword [rbx], rdi
movabs rsi, 0xaa3965f6ab60872b
mov dword [rbx + 8], 0xbf800000
mov r10, rsi
mov dword [rbx + 0xc], 0xbf800000
mov r9d, edi
mov dword [rbx + 0x10], 0x3c888889
mov r11d, 0xf
mov dword [rbx + 0x14], 0x40a00000
mov byte [rbp - 0x10], 0x49
mov byte [rbp - 0xf], 0x43
mov byte [rbp - 0xe], 0x4d
mov byte [rbp - 0xd], 0x53
mov byte [rbp - 0xc], 0x46
mov byte [rbp - 0xb], 0x18
mov byte [rbp - 0xa], 0x53
mov byte [rbp - 9], 0x56
mov byte [rbp - 8], 0x5c
mov byte [rbp - 7], 0x3b
movzx eax, byte [rbp - 0x10]
lea rax, [rbp - 0x10]
sub r10, rax
nop
mov rcx, r9
lea r8, [rbp - 0x10]
add r8, r9
and ecx, r11d
cmp rcx, r11
mov rdx, rsi
cmovae rcx, r11
shl cl, 2
lea eax, [r10 + r8]
shr rdx, cl
and dl, r11b
xor dl, al
movzx eax, byte [r8]
xor dl, al
mov byte [rbp + r9 - 0x10], dl
inc r9
cmp r9, 0xa
jb 0x140015250
lea rax, [rbp - 0x10]
mov r8, rdi
mov qword [rbx + 0x18], rax
movabs r9, 0x2d98d43c83478f93
mov byte [rbp - 0x10], 0xf9
mov byte [rbp - 0xf], 0xf0
mov byte [rbp - 0xe], 0xfd
mov byte [rbp - 0xd], 0xeb
mov byte [rbp - 0xc], 0xf9
mov byte [rbp - 0xb], 0xc3
mov byte [rbp - 0xa], 0xf6
mov byte [rbp - 9], 0xfd
mov byte [rbp - 8], 0xf0
mov byte [rbp - 7], 0xb1
mov byte [rbp - 6], 0xed
mov byte [rbp - 5], 0xeb
mov byte [rbp - 4], 0xe3
mov byte [rbp - 3], 0xa9
movzx eax, byte [rbp - 0x10]
nop dword [rax + rax]
movzx eax, byte [rbp + r8 - 0x10]
mov rcx, r8
and ecx, r11d
mov rdx, r9
cmp rcx, r11
cmovae rcx, r11
shl cl, 2
shr rdx, cl
and dl, r11b
xor dl, al
lea eax, [r8 - 0x6d]
xor dl, al
mov byte [rbp + r8 - 0x10], dl
inc r8
cmp r8, 0xe
jb 0x1400152e0
lea rax, [rbp - 0x10]
mov dword [rbx + 0x28], 0x3e99999a
lea rcx, [rbx + 0xf8]
mov qword [rbx + 0x20], rax
mov edx, 0xffffffff
mov dword [rbx + 0x2c], 0x40c00000
mov r8d, 0xa30
call sub.VCRUNTIME140.dll_memset
mov dword [rbx + 0x34], 0x3e8ccccd
lea rax, [0x14002a7f0]
mov qword [rbx + 0xa8], rax
mov ecx, 0x28c
mov dword [rbx + 0x38], 0x3d4ccccd
lea rax, [0x14002a950]
mov qword [rbx + 0xb0], rax
lea rax, [0x14002aa20]
mov qword [rbx + 0xc0], rax
lea rax, [rbx + 0xe18]
mov dword [rbx + 0x3c], 0x3e99999a
mov dword [rbx + 0x40], 0x3dcccccd
mov qword [rbx + 0x48], rdi
mov qword [rbx + 0x50], rdi
mov dword [rbx + 0x58], 0x3f800000
mov qword [rbx + 0x60], rdi
mov byte [rbx + 0x5c], dil
mov dword [rbx + 0x68], 0x3f800000
mov dword [rbx + 0x6c], 0x3f800000
mov dword [rbx + 0x70], 0x1010000
mov dword [rbx + 0x74], 0x10000
mov dword [rbx + 0x78], 0x42700000
mov qword [rbx + 0x88], rdi
mov qword [rbx + 0x80], rdi
mov qword [rbx + 0xa0], rdi
mov qword [rbx + 0x98], rdi
mov qword [rbx + 0x90], rdi
mov qword [rbx + 0xb8], rdi
mov dword [rbx + 0xdf4], 0xff7fffff
mov dword [rbx + 0xdf8], 0xff7fffff
mov dword [rbx + 0x36d8], 0xff7fffff
mov dword [rbx + 0x36dc], 0xff7fffff
mov dword [rbx + 0x30], 0x40c00000
mov dword [rbx + 0x3774], 0xbf800000
mov dword [rbx + 0x3760], 0xbf800000
mov dword [rbx + 0x3778], 0xbf800000
mov dword [rbx + 0x3764], 0xbf800000
mov dword [rbx + 0x377c], 0xbf800000
mov dword [rbx + 0x3768], 0xbf800000
mov dword [rbx + 0x3780], 0xbf800000
mov dword [rbx + 0x376c], 0xbf800000
mov dword [rbx + 0x3784], 0xbf800000
mov dword [rbx + 0x3770], 0xbf800000
nop dword [rax + rax]
mov dword [rax + 4], 0xbf800000
mov dword [rax], 0xbf800000
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140015490
mov rsi, qword [rsp + 0x48]
mov rax, rbx
mov rdi, qword [rsp + 0x50]
mov word [rbx + 0x37a1], 0xff01
mov byte [rbx + 0x37a3], 1
mov rbx, qword [rsp + 0x40]
add rsp, 0x30
pop rbp
ret