Function at 0x140009980
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x68
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x7273111
mov dword [rbp - 0x44], 0x1b37173c
mov dword [rbp - 0x40], 0x73f1c27
mov word [rbp - 0x3c], 0x405
mov byte [rbp - 0x3a], 0x59
call fcn.140005aa0
mov rdx, qword [0x140025670]
mov r12, rax
mov qword [rbp + 0x60], rdx
test rdx, rdx
je 0x140009b27
test rax, rax
je 0x140009b27
movsxd rcx, dword [rdx + 0x3c]
xor r14d, r14d
mov r13d, r14d
mov eax, dword [rcx + rdx + 0x88]
add rax, rdx
mov qword [rbp - 0x28], rax
mov ecx, dword [rax + 0x1c]
mov r8d, dword [rax + 0x24]
add rcx, rdx
mov qword [rbp - 0x48], rcx
add r8, rdx
mov ecx, dword [rax + 0x20]
add rcx, rdx
mov qword [rbp - 0x10], r8
mov qword [rbp - 0x20], rcx
cmp dword [rax + 0x18], r14d
jbe 0x140009b2a
mov word [rbp + 0x48], 0x5456
mov word [rbp + 0x50], 0x5456
nop dword [rax]
mov eax, r13d
mov rsi, r14
mov qword [rbp - 0x18], rax
mov edi, dword [rcx + rax*4]
lea rcx, [rbp + 0x48]
add rdi, rdx
call fcn.140001620
movzx ecx, byte [rax]
cmp byte [rdi], cl
je 0x140009a64
lea rcx, [rbp + 0x48]
inc rsi
call fcn.140001620
movzx ecx, byte [rax]
cmp byte [rsi + rdi], cl
jne 0x140009a50
lea rcx, [rbp + 0x50]
mov rbx, r14
call fcn.140001620
movzx ecx, byte [rax]
cmp byte [r12], cl
je 0x140009a95
nop dword [rax]
lea rcx, [rbp + 0x50]
inc rbx
call fcn.140001620
movzx ecx, byte [rax]
cmp byte [rbx + r12], cl
jne 0x140009a80
cmp rsi, rbx
jne 0x140009af3
mov r15, r12
mov word [rbp + 0x58], 0x5456
sub r15, rdi
mov rsi, rdi
nop dword [rax]
lea rcx, [rbp + 0x58]
mov rbx, r14
call fcn.140001620
movzx ecx, byte [rax]
cmp byte [rdi], cl
je 0x140009ad7
lea rcx, [rbp + 0x58]
inc rbx
call fcn.140001620
movzx ecx, byte [rax]
cmp byte [rbx + rdi], cl
jne 0x140009ac3
mov rax, rsi
sub rax, rdi
dec rbx
cmp rax, rbx
jae 0x140009b0d
movzx eax, byte [r15 + rsi]
cmp byte [rsi], al
jne 0x140009af3
inc rsi
jmp 0x140009ab0
mov rax, qword [rbp - 0x28]
inc r13d
cmp r13d, dword [rax + 0x18]
jae 0x140009b2a
mov rdx, qword [rbp + 0x60]
mov rcx, qword [rbp - 0x20]
jmp 0x140009a30
mov rcx, qword [rbp - 0x10]
mov rax, qword [rbp - 0x18]
movzx eax, word [rcx + rax*2]
mov rcx, qword [rbp - 0x48]
mov r14d, dword [rcx + rax*4]
add r14, qword [rbp + 0x60]
jmp 0x140009b2a
xor r14d, r14d
lea rcx, [rbp - 0x48]
mov qword [0x140025648], r14
mov dword [rbp - 0x48], 0x36362615
mov dword [rbp - 0x44], 0x32001d3a
mov dword [rbp - 0x40], 0x62c1d31
mov byte [rbp - 0x3c], 0x76
call fcn.140005840
mov rcx, qword [0x140025670]
mov rdx, rax
call r14
movdqa xmm0, xmmword [0x14000ec60]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140025618], rax
mov dword [rbp - 0x38], 0x4c132708
call fcn.1400032c0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov qword [0x140025628], rax
mov dword [rbp - 0x48], 0x23213d00
mov dword [rbp - 0x44], 0x1b38193b
mov dword [rbp - 0x40], 0x122142f
mov byte [rbp - 0x3c], 0x76
call fcn.140005840
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ec00]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140025608], rax
mov word [rbp - 0x38], 0x1308
mov byte [rbp - 0x36], 0x67
call fcn.140005500
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ed70]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140025650], rax
mov byte [rbp - 0x38], 0x6d
call fcn.140005210
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x36362615
mov dword [rbp - 0x44], 0x28041d3a
mov dword [rbp - 0x40], 0x11281b2c
mov word [rbp - 0x3c], 0x2005
mov byte [rbp - 0x3a], 0x59
call fcn.140005aa0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp + 0x48]
mov dword [rbp + 0x48], 0x32363805
mov word [rbp + 0x4c], 0x783e
call fcn.1400050b0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x33323b1a
mov dword [rbp - 0x44], 0x28361102
mov dword [rbp - 0x40], 0x35340a22
mov byte [rbp - 0x3c], 0x76
call fcn.140005840
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov qword [0x140025678], rax
mov dword [rbp - 0x48], 0x33323b1a
mov dword [rbp - 0x44], 0x28361102
mov dword [rbp - 0x40], 0x23340a22
mov byte [rbp - 0x3c], 0x76
call fcn.140005840
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov qword [0x140025640], rax
mov dword [rbp - 0x48], 0x243c3815
mov dword [rbp - 0x44], 0x3435302b
mov dword [rbp - 0x40], 0x62281427
call fcn.140004e70
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ecb0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x2e062d1f
mov dword [rbp - 0x34], 0x4b012625
call fcn.140004a80
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000edb0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140025610], rax
mov dword [rbp - 0x38], 0x3c062a3e
mov dword [rbp - 0x34], 0x3f392b3a
mov byte [rbp - 0x30], 0x59
call fcn.140004660
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000edc0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
call fcn.140004390
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x343c2606
mov dword [rbp - 0x44], 0x69270b2b
mov dword [rbp - 0x40], 0x1a283671
mov word [rbp - 0x3c], 0x2002
mov byte [rbp - 0x3a], 0x59
call fcn.140005aa0
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ecd0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x34223718
mov byte [rbp - 0x34], 0x49
call fcn.140004010
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x3273111
mov dword [rbp - 0x44], 0x193f1b27
mov dword [rbp - 0x40], 0x16230d2c
mov word [rbp - 0x3c], 0x4340
mov byte [rbp - 0x3a], 0x59
call fcn.140005aa0
mov rdx, rax
mov rcx, qword [0x140025670]
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x4273111
mov dword [rbp - 0x44], 0x3f200b37
mov dword [rbp - 0x40], 0x423312e
mov word [rbp - 0x3c], 0x7719
call fcn.140003d90
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x18343104
mov dword [rbp - 0x44], 0x113a1d3e
mov dword [rbp - 0x40], 0x1a080126
mov word [rbp - 0x3c], 0x7721
call fcn.140003d90
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x14343104
mov dword [rbp - 0x44], 0x3f271722
mov dword [rbp - 0x40], 0x62341d08
call fcn.140004e70
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x14273111
mov dword [rbp - 0x44], 0x35270a3b
mov dword [rbp - 0x40], 0x11222831
mov byte [rbp - 0x3c], 0x76
call fcn.140005840
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ec90]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x4c303c28
call fcn.1400032c0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x36362615
mov dword [rbp - 0x44], 0x33121d3a
mov dword [rbp - 0x40], 0x621a1d2f
call fcn.140004e70
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x233a2601
mov dword [rbp - 0x44], 0x363d3e2b
mov word [rbp - 0x40], 0x7826
call fcn.140003ba0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x333d3d10
mov dword [rbp - 0x44], 0x29261108
mov dword [rbp - 0x40], 0xe243e37
mov word [rbp - 0x3c], 0x2013
mov byte [rbp - 0x3a], 0x59
call fcn.140005aa0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
mov dword [rbp - 0x48], 0x333d3d10
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x44], 0x2e2c1d00
mov dword [rbp - 0x40], 0x7211105
mov word [rbp - 0x3c], 0x7721
call fcn.140003d90
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x333d3d10
mov dword [rbp - 0x44], 0x293b140d
mov word [rbp - 0x40], 0x7826
call fcn.140003ba0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000edd0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
call fcn.140004390
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov qword [0x140025630], rax
mov dword [rbp - 0x48], 0x23213d00
mov dword [rbp - 0x44], 0x1c38193b
mov dword [rbp - 0x40], 0x62281d31
call fcn.140004e70
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x32253b1b
mov dword [rbp - 0x44], 0x3f381108
mov word [rbp - 0x40], 0x7814
call fcn.140003ba0
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ec70]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov word [rbp - 0x38], 0x443a
call fcn.140003890
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x233a2c13
mov dword [rbp - 0x44], 0x393b0a1e
mov dword [rbp - 0x40], 0x623e0b26
call fcn.140004e70
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ed40]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140025638], rax
mov dword [rbp - 0x38], 0x4c152505
call fcn.1400032c0
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
mov qword [0x140025620], rax
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret