Function at 0x140009d70
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x68
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x61e1324
mov dword [rbp - 0x44], 0x2724150a
mov dword [rbp - 0x40], 0x2d073c15
mov word [rbp - 0x3c], 0x2100
mov byte [rbp - 0x3a], 0x75
call fcn.140004960
mov rdx, qword [0x14000f1b8]
mov r12, rax
mov qword [rbp + 0x60], rdx
test rdx, rdx
je 0x140009f17
test rax, rax
je 0x140009f17
movsxd rcx, dword [rdx + 0x3c]
xor r14d, r14d
mov r13d, r14d
mov eax, dword [rcx + rdx + 0x88]
add rax, rdx
mov qword [rbp - 0x28], rax
mov ecx, dword [rax + 0x1c]
mov r8d, dword [rax + 0x24]
add rcx, rdx
mov qword [rbp - 0x48], rcx
add r8, rdx
mov ecx, dword [rax + 0x20]
add rcx, rdx
mov qword [rbp - 0x10], r8
mov qword [rbp - 0x20], rcx
cmp dword [rax + 0x18], r14d
jbe 0x140009f1a
mov word [rbp + 0x48], 0x7663
mov word [rbp + 0x50], 0x7663
nop dword [rax]
mov eax, r13d
mov rsi, r14
mov qword [rbp - 0x18], rax
mov edi, dword [rcx + rax*4]
lea rcx, [rbp + 0x48]
add rdi, rdx
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rdi], cl
je 0x140009e54
lea rcx, [rbp + 0x48]
inc rsi
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rsi + rdi], cl
jne 0x140009e40
lea rcx, [rbp + 0x50]
mov rbx, r14
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [r12], cl
je 0x140009e85
nop dword [rax]
lea rcx, [rbp + 0x50]
inc rbx
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rbx + r12], cl
jne 0x140009e70
cmp rsi, rbx
jne 0x140009ee3
mov r15, r12
mov word [rbp + 0x58], 0x7663
sub r15, rdi
mov rsi, rdi
nop dword [rax]
lea rcx, [rbp + 0x58]
mov rbx, r14
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rdi], cl
je 0x140009ec7
lea rcx, [rbp + 0x58]
inc rbx
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rbx + rdi], cl
jne 0x140009eb3
mov rax, rsi
sub rax, rdi
dec rbx
cmp rax, rbx
jae 0x140009efd
movzx eax, byte [r15 + rsi]
cmp byte [rsi], al
jne 0x140009ee3
inc rsi
jmp 0x140009ea0
mov rax, qword [rbp - 0x28]
inc r13d
cmp r13d, dword [rax + 0x18]
jae 0x140009f1a
mov rdx, qword [rbp + 0x60]
mov rcx, qword [rbp - 0x20]
jmp 0x140009e20
mov rcx, qword [rbp - 0x10]
mov rax, qword [rbp - 0x18]
movzx eax, word [rcx + rax*2]
mov rcx, qword [rbp - 0x48]
mov r14d, dword [rcx + rax*4]
add r14, qword [rbp + 0x60]
jmp 0x140009f1a
xor r14d, r14d
lea rcx, [rbp - 0x48]
mov qword [0x14000f130], r14
mov dword [rbp - 0x48], 0x370f0420
mov dword [rbp - 0x44], 0xe131f0c
mov dword [rbp - 0x40], 0x2c143d03
mov byte [rbp - 0x3c], 0x73
call fcn.140004700
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call r14
movdqa xmm0, xmmword [0x14000e620]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x14000f130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x14000f100], rax
mov dword [rbp - 0x38], 0x4e073328
call fcn.1400026f0
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call rbx
mov rbx, qword [0x14000f130]
lea rcx, [rbp - 0x48]
mov qword [0x14000f110], rax
mov dword [rbp - 0x48], 0x22181f35
mov dword [rbp - 0x44], 0x272b1b0d
mov dword [rbp - 0x40], 0x2b1a341d
mov byte [rbp - 0x3c], 0x73
call fcn.140004700
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000e630]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x14000f130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x14000f0f8], rax
mov word [rbp - 0x38], 0x728
mov byte [rbp - 0x36], 0x73
call fcn.1400043c0
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000e510]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x14000f130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x14000f178], rax
mov byte [rbp - 0x38], 0x4d
call fcn.1400014c0
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call rbx
mov rbx, qword [0x14000f130]
lea rcx, [rbp - 0x48]
mov qword [0x14000f140], rax
mov dword [rbp - 0x48], 0x370f0420
mov dword [rbp - 0x44], 0x14171f0c
mov dword [rbp - 0x40], 0x3b103b1e
mov word [rbp - 0x3c], 0x500
mov byte [rbp - 0x3a], 0x75
call fcn.140004960
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call rbx
mov rbx, qword [0x14000f130]
lea rcx, [rbp + 0x48]
mov qword [0x14000f148], rax
mov dword [rbp + 0x48], 0x330f1a30
mov word [rbp + 0x4c], 0x7a08
call fcn.140004260
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call rbx
mov rbx, qword [0x14000f130]
lea rcx, [rbp - 0x48]
mov qword [0x14000f158], rax
mov dword [rbp - 0x48], 0x320b192f
mov dword [rbp - 0x44], 0x14251334
mov dword [rbp - 0x40], 0x1f0c2a10
mov byte [rbp - 0x3c], 0x73
call fcn.140004700
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call rbx
mov rbx, qword [0x14000f130]
lea rcx, [rbp - 0x48]
mov qword [0x14000f1c0], rax
mov dword [rbp - 0x48], 0x320b192f
mov dword [rbp - 0x44], 0x14251334
mov dword [rbp - 0x40], 0x90c2a10
mov byte [rbp - 0x3c], 0x73
call fcn.140004700
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call rbx
mov rbx, qword [0x14000f130]
lea rcx, [rbp - 0x48]
mov qword [0x14000f128], rax
mov dword [rbp - 0x48], 0x25051a20
mov dword [rbp - 0x44], 0x826321d
mov dword [rbp - 0x40], 0x48103415
call fcn.140004020
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000e5c0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x14000f130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x14000f150], rax
mov dword [rbp - 0x38], 0x2c12393f
mov dword [rbp - 0x34], 0x42310200
call fcn.140003c30
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000e6b0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x14000f130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x14000f170], rax
mov dword [rbp - 0x38], 0x3e123e1e
mov dword [rbp - 0x34], 0x36090f1f
mov byte [rbp - 0x30], 0x78
call fcn.140003810
mov rcx, qword [0x14000f1a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000e680]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x14000f130]
movdqu xmmword [rbp - 0x48], xmm0
call fcn.140003540
mov rcx, qword [0x14000f1a8]
mov rdx, rax
call rbx
mov rbx, qword [0x14000f130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x35050433
mov dword [rbp - 0x44], 0x5534091d
mov dword [rbp - 0x40], 0x30101643
mov word [rbp - 0x3c], 0x507
mov byte [rbp - 0x3a], 0x75
call fcn.140004960
mov rcx, qword [0x14000f1a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000e560]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x14000f130]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x36362338
mov byte [rbp - 0x34], 0x6c
call fcn.1400031c0
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call rbx
mov rbx, qword [0x14000f130]
mov dword [rbp - 0x48], 0x21e1324
mov dword [rbp - 0x44], 0x252c1911
mov dword [rbp - 0x40], 0x3c1b2d1e
mov word [rbp - 0x3c], 0x6645
lea rcx, [rbp - 0x48]
mov byte [rbp - 0x3a], 0x75
call fcn.140004960
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call rbx
mov rbx, qword [0x14000f130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x51e1324
mov dword [rbp - 0x44], 0x3330901
mov dword [rbp - 0x40], 0x2e1b111c
mov word [rbp - 0x3c], 0x521c
call fcn.140001180
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call rbx
mov rbx, qword [0x14000f130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x190d1331
mov dword [rbp - 0x44], 0x2d291f08
mov dword [rbp - 0x40], 0x30302114
mov word [rbp - 0x3c], 0x5224
call fcn.140001180
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call rbx
mov rbx, qword [0x14000f130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x150d1331
mov dword [rbp - 0x44], 0x3341514
mov dword [rbp - 0x40], 0x480c3d3a
call fcn.140004020
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call rbx
mov rbx, qword [0x14000f130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x151e1324
mov dword [rbp - 0x44], 0x934080d
mov dword [rbp - 0x40], 0x3b1a0803
mov byte [rbp - 0x3c], 0x73
call fcn.140004700
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000e5d0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x14000f130]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x4e242808
call fcn.1400026f0
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call rbx
mov rbx, qword [0x14000f130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x370f0420
mov dword [rbp - 0x44], 0xf011f0c
mov dword [rbp - 0x40], 0x48223d1d
call fcn.140004020
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call rbx
mov rbx, qword [0x14000f130]
lea rcx, [rbp - 0x48]
mov qword [0x14000f160], rax
mov dword [rbp - 0x48], 0x22030434
mov dword [rbp - 0x44], 0xa2e3c1d
mov word [rbp - 0x40], 0x5814
call fcn.140002fd0
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call rbx
mov rbx, qword [0x14000f130]
lea rcx, [rbp - 0x48]
mov qword [0x14000f188], rax
mov dword [rbp - 0x48], 0x32041f25
mov dword [rbp - 0x44], 0x1535133e
mov dword [rbp - 0x40], 0x241c1e05
mov word [rbp - 0x3c], 0x516
mov byte [rbp - 0x3a], 0x75
call fcn.140004960
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call rbx
mov rbx, qword [0x14000f130]
lea rcx, [rbp - 0x48]
mov qword [0x14000f198], rax
mov dword [rbp - 0x48], 0x32041f25
mov dword [rbp - 0x44], 0x123f1f36
mov dword [rbp - 0x40], 0x2d193137
mov word [rbp - 0x3c], 0x5224
call fcn.140001180
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call rbx
mov rbx, qword [0x14000f130]
lea rcx, [rbp - 0x48]
mov qword [0x14000f190], rax
mov dword [rbp - 0x48], 0x32041f25
mov dword [rbp - 0x44], 0x1528163b
mov word [rbp - 0x40], 0x5814
call fcn.140002fd0
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000e690]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x14000f130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x14000f168], rax
call fcn.140003540
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call rbx
mov rbx, qword [0x14000f130]
lea rcx, [rbp - 0x48]
mov qword [0x14000f118], rax
mov dword [rbp - 0x48], 0x22181f35
mov dword [rbp - 0x44], 0x202b1b0d
mov dword [rbp - 0x40], 0x48103d03
call fcn.140004020
mov rcx, qword [0x14000f1b8]
mov rdx, rax
call rbx
mov rbx, qword [0x14000f130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x331c192e
mov dword [rbp - 0x44], 0x32b133e
mov word [rbp - 0x40], 0x5826
call fcn.140002fd0
mov rcx, qword [0x14000f1a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000e5e0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x14000f130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x14000f138], rax
mov word [rbp - 0x38], 0x501a
call fcn.140002cc0
mov rcx, qword [0x14000f1a8]
mov rdx, rax
call rbx
mov rbx, qword [0x14000f130]
lea rcx, [rbp - 0x48]
mov qword [0x14000f180], rax
mov dword [rbp - 0x48], 0x22030e26
mov dword [rbp - 0x44], 0x5280828
mov dword [rbp - 0x40], 0x48062b14
call fcn.140004020
mov rcx, qword [0x14000f1a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000e540]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x14000f130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x14000f120], rax
mov dword [rbp - 0x38], 0x4e013125
call fcn.1400026f0
mov rdx, rax
mov rcx, qword [0x14000f1a8]
call rbx
mov qword [0x14000f108], rax
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret