Function at 0x140009890
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x68
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x3b263f06
mov dword [rbp - 0x44], 0x173a0231
mov dword [rbp - 0x40], 0x23c122f
mov word [rbp - 0x3c], 0x609
mov byte [rbp - 0x3a], 0x47
call fcn.140004960
mov rdx, qword [0x1400101b8]
mov r12, rax
mov qword [rbp + 0x60], rdx
test rdx, rdx
je 0x140009a37
test rax, rax
je 0x140009a37
movsxd rcx, dword [rdx + 0x3c]
xor r14d, r14d
mov r13d, r14d
mov eax, dword [rcx + rdx + 0x88]
add rax, rdx
mov qword [rbp - 0x28], rax
mov ecx, dword [rax + 0x1c]
mov r8d, dword [rax + 0x24]
add rcx, rdx
mov qword [rbp - 0x48], rcx
add r8, rdx
mov ecx, dword [rax + 0x20]
add rcx, rdx
mov qword [rbp - 0x10], r8
mov qword [rbp - 0x20], rcx
cmp dword [rax + 0x18], r14d
jbe 0x140009a3a
mov word [rbp + 0x48], 0x5a41
mov word [rbp + 0x50], 0x5a41
nop dword [rax]
mov eax, r13d
mov rsi, r14
mov qword [rbp - 0x18], rax
mov edi, dword [rcx + rax*4]
lea rcx, [rbp + 0x48]
add rdi, rdx
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rdi], cl
je 0x140009974
lea rcx, [rbp + 0x48]
inc rsi
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rsi + rdi], cl
jne 0x140009960
lea rcx, [rbp + 0x50]
mov rbx, r14
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [r12], cl
je 0x1400099a5
nop dword [rax]
lea rcx, [rbp + 0x50]
inc rbx
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rbx + r12], cl
jne 0x140009990
cmp rsi, rbx
jne 0x140009a03
mov r15, r12
mov word [rbp + 0x58], 0x5a41
sub r15, rdi
mov rsi, rdi
nop dword [rax]
lea rcx, [rbp + 0x58]
mov rbx, r14
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rdi], cl
je 0x1400099e7
lea rcx, [rbp + 0x58]
inc rbx
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rbx + rdi], cl
jne 0x1400099d3
mov rax, rsi
sub rax, rdi
dec rbx
cmp rax, rbx
jae 0x140009a1d
movzx eax, byte [r15 + rsi]
cmp byte [rsi], al
jne 0x140009a03
inc rsi
jmp 0x1400099c0
mov rax, qword [rbp - 0x28]
inc r13d
cmp r13d, dword [rax + 0x18]
jae 0x140009a3a
mov rdx, qword [rbp + 0x60]
mov rcx, qword [rbp - 0x20]
jmp 0x140009940
mov rcx, qword [rbp - 0x10]
mov rax, qword [rbp - 0x18]
movzx eax, word [rcx + rax*2]
mov rcx, qword [rbp - 0x48]
mov r14d, dword [rcx + rax*4]
add r14, qword [rbp + 0x60]
jmp 0x140009a3a
xor r14d, r14d
lea rcx, [rbp - 0x48]
mov qword [0x140010130], r14
mov dword [rbp - 0x48], 0xa372802
mov dword [rbp - 0x44], 0x3e0d0837
mov dword [rbp - 0x40], 0x32f1339
mov byte [rbp - 0x3c], 0x7a
call fcn.140004700
mov rcx, qword [0x1400101b8]
mov rdx, rax
call r14
movdqa xmm0, xmmword [0x14000f0e0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010100], rax
mov dword [rbp - 0x38], 0x500d1132
call fcn.1400026f0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010110], rax
mov dword [rbp - 0x48], 0x1f203317
mov dword [rbp - 0x44], 0x17350c36
mov dword [rbp - 0x40], 0x4211a27
mov byte [rbp - 0x3c], 0x7a
call fcn.140004700
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000f0b0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x1400100f8], rax
mov word [rbp - 0x38], 0x2532
mov byte [rbp - 0x36], 0x79
call fcn.1400043c0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000f1e0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010178], rax
mov byte [rbp - 0x38], 0x57
call fcn.1400014c0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010140], rax
mov dword [rbp - 0x48], 0xa372802
mov dword [rbp - 0x44], 0x24090837
mov dword [rbp - 0x40], 0x142b1524
mov word [rbp - 0x3c], 0x2209
mov byte [rbp - 0x3a], 0x47
call fcn.140004960
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp + 0x48]
mov qword [0x140010148], rax
mov dword [rbp + 0x48], 0xe373612
mov word [rbp + 0x4c], 0x6d33
call fcn.140004260
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010158], rax
mov dword [rbp - 0x48], 0xf33350d
mov dword [rbp - 0x44], 0x243b040f
mov dword [rbp - 0x40], 0x3037042a
mov byte [rbp - 0x3c], 0x7a
call fcn.140004700
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x1400101c0], rax
mov dword [rbp - 0x48], 0xf33350d
mov dword [rbp - 0x44], 0x243b040f
mov dword [rbp - 0x40], 0x2637042a
mov byte [rbp - 0x3c], 0x7a
call fcn.140004700
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010128], rax
mov dword [rbp - 0x48], 0x183d3602
mov dword [rbp - 0x44], 0x38382526
mov dword [rbp - 0x40], 0x672b1a2f
call fcn.140004020
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000f130]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010150], rax
mov dword [rbp - 0x38], 0x32181b25
mov dword [rbp - 0x34], 0x471a123a
call fcn.140003c30
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000f220]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010170], rax
mov dword [rbp - 0x38], 0x20181c04
mov dword [rbp - 0x34], 0x33221f25
mov byte [rbp - 0x30], 0x72
call fcn.140003810
mov rcx, qword [0x1400101a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000f240]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
call fcn.140003540
mov rcx, qword [0x1400101a8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x83d2811
mov dword [rbp - 0x44], 0x652a1e26
mov dword [rbp - 0x40], 0x1f2b3879
mov word [rbp - 0x3c], 0x220e
mov byte [rbp - 0x3a], 0x47
call fcn.140004960
mov rcx, qword [0x1400101a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000f180]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x283c0122
mov byte [rbp - 0x34], 0x56
call fcn.1400031c0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
mov dword [rbp - 0x48], 0x3f263f06
mov dword [rbp - 0x44], 0x15320e2a
mov dword [rbp - 0x40], 0x13200324
mov word [rbp - 0x3c], 0x414c
lea rcx, [rbp - 0x48]
mov byte [rbp - 0x3a], 0x47
call fcn.140004960
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x38263f06
mov dword [rbp - 0x44], 0x332d1e3a
mov dword [rbp - 0x40], 0x1203f26
mov word [rbp - 0x3c], 0x7515
call fcn.140001180
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x24353f13
mov dword [rbp - 0x44], 0x1d370833
mov dword [rbp - 0x40], 0x1f0b0f2e
mov word [rbp - 0x3c], 0x752d
call fcn.140001180
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x28353f13
mov dword [rbp - 0x44], 0x332a022f
mov dword [rbp - 0x40], 0x67371300
call fcn.140004020
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x28263f06
mov dword [rbp - 0x44], 0x392a1f36
mov dword [rbp - 0x40], 0x14212639
mov byte [rbp - 0x3c], 0x7a
call fcn.140004700
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000f100]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x502e0a12
call fcn.1400026f0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0xa372802
mov dword [rbp - 0x44], 0x3f1f0837
mov dword [rbp - 0x40], 0x67191327
call fcn.140004020
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010160], rax
mov dword [rbp - 0x48], 0x1f3b2816
mov dword [rbp - 0x44], 0x3a302b26
mov word [rbp - 0x40], 0x762e
call fcn.140002fd0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010188], rax
mov dword [rbp - 0x48], 0xf3c3307
mov dword [rbp - 0x44], 0x252b0405
mov dword [rbp - 0x40], 0xb27303f
mov word [rbp - 0x3c], 0x221f
mov byte [rbp - 0x3a], 0x47
call fcn.140004960
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010198], rax
mov dword [rbp - 0x48], 0xf3c3307
mov dword [rbp - 0x44], 0x2221080d
mov dword [rbp - 0x40], 0x2221f0d
mov word [rbp - 0x3c], 0x752d
call fcn.140001180
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010190], rax
mov dword [rbp - 0x48], 0xf3c3307
mov dword [rbp - 0x44], 0x25360100
mov word [rbp - 0x40], 0x762e
call fcn.140002fd0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000f250]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010168], rax
call fcn.140003540
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010118], rax
mov dword [rbp - 0x48], 0x1f203317
mov dword [rbp - 0x44], 0x10350c36
mov dword [rbp - 0x40], 0x672b1339
call fcn.140004020
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0xe24350c
mov dword [rbp - 0x44], 0x33350405
mov word [rbp - 0x40], 0x761c
call fcn.140002fd0
mov rcx, qword [0x1400101a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000f110]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010138], rax
mov word [rbp - 0x38], 0x7200
call fcn.140002cc0
mov rcx, qword [0x1400101a8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010180], rax
mov dword [rbp - 0x48], 0x1f3b2204
mov dword [rbp - 0x44], 0x35361f13
mov dword [rbp - 0x40], 0x673d052e
call fcn.140004020
mov rcx, qword [0x1400101a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000f1a0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010120], rax
mov dword [rbp - 0x38], 0x500b133f
call fcn.1400026f0
mov rdx, rax
mov rcx, qword [0x1400101a8]
call rbx
mov qword [0x140010108], rax
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret