Function at 0x140009540
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x68
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x1201093e
mov dword [rbp - 0x44], 0x2c3b1a1f
mov dword [rbp - 0x40], 0x2e0a3022
mov word [rbp - 0x3c], 0x3429
mov byte [rbp - 0x3a], 0x7a
call fcn.140005aa0
mov rdx, qword [0x140025670]
mov r12, rax
mov qword [rbp + 0x60], rdx
test rdx, rdx
je 0x1400096e7
test rax, rax
je 0x1400096e7
movsxd rcx, dword [rdx + 0x3c]
xor r14d, r14d
mov r13d, r14d
mov eax, dword [rcx + rdx + 0x88]
add rax, rdx
mov qword [rbp - 0x28], rax
mov ecx, dword [rax + 0x1c]
mov r8d, dword [rax + 0x24]
add rcx, rdx
mov qword [rbp - 0x48], rcx
add r8, rdx
mov ecx, dword [rax + 0x20]
add rcx, rdx
mov qword [rbp - 0x10], r8
mov qword [rbp - 0x20], rcx
cmp dword [rax + 0x18], r14d
jbe 0x1400096ea
mov word [rbp + 0x48], 0x6c79
mov word [rbp + 0x50], 0x6c79
nop dword [rax]
mov eax, r13d
mov rsi, r14
mov qword [rbp - 0x18], rax
mov edi, dword [rcx + rax*4]
lea rcx, [rbp + 0x48]
add rdi, rdx
call fcn.140001620
movzx ecx, byte [rax]
cmp byte [rdi], cl
je 0x140009624
lea rcx, [rbp + 0x48]
inc rsi
call fcn.140001620
movzx ecx, byte [rax]
cmp byte [rsi + rdi], cl
jne 0x140009610
lea rcx, [rbp + 0x50]
mov rbx, r14
call fcn.140001620
movzx ecx, byte [rax]
cmp byte [r12], cl
je 0x140009655
nop dword [rax]
lea rcx, [rbp + 0x50]
inc rbx
call fcn.140001620
movzx ecx, byte [rax]
cmp byte [rbx + r12], cl
jne 0x140009640
cmp rsi, rbx
jne 0x1400096b3
mov r15, r12
mov word [rbp + 0x58], 0x6c79
sub r15, rdi
mov rsi, rdi
nop dword [rax]
lea rcx, [rbp + 0x58]
mov rbx, r14
call fcn.140001620
movzx ecx, byte [rax]
cmp byte [rdi], cl
je 0x140009697
lea rcx, [rbp + 0x58]
inc rbx
call fcn.140001620
movzx ecx, byte [rax]
cmp byte [rbx + rdi], cl
jne 0x140009683
mov rax, rsi
sub rax, rdi
dec rbx
cmp rax, rbx
jae 0x1400096cd
movzx eax, byte [r15 + rsi]
cmp byte [rsi], al
jne 0x1400096b3
inc rsi
jmp 0x140009670
mov rax, qword [rbp - 0x28]
inc r13d
cmp r13d, dword [rax + 0x18]
jae 0x1400096ea
mov rdx, qword [rbp + 0x60]
mov rcx, qword [rbp - 0x20]
jmp 0x1400095f0
mov rcx, qword [rbp - 0x10]
mov rax, qword [rbp - 0x18]
movzx eax, word [rcx + rax*2]
mov rcx, qword [rbp - 0x48]
mov r14d, dword [rcx + rax*4]
add r14, qword [rbp + 0x60]
jmp 0x1400096ea
xor r14d, r14d
lea rcx, [rbp - 0x48]
mov qword [0x140025648], r14
mov dword [rbp - 0x48], 0x23101e3a
mov dword [rbp - 0x44], 0x50c1019
mov dword [rbp - 0x40], 0x2f193134
mov byte [rbp - 0x3c], 0x5a
call fcn.140005840
mov rcx, qword [0x140025670]
mov rdx, rax
call r14
movdqa xmm0, xmmword [0x14000f0d0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140025618], rax
mov dword [rbp - 0x38], 0x742e0d12
call fcn.1400032c0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov qword [0x140025628], rax
mov dword [rbp - 0x48], 0x3607052f
mov dword [rbp - 0x44], 0x2c341418
mov dword [rbp - 0x40], 0x2817382a
mov byte [rbp - 0x3c], 0x5a
call fcn.140005840
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000f130]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140025608], rax
mov word [rbp - 0x38], 0x3912
mov byte [rbp - 0x36], 0x5a
call fcn.140005500
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000f160]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140025650], rax
mov byte [rbp - 0x38], 0x77
call fcn.140005210
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x23101e3a
mov dword [rbp - 0x44], 0x1f081019
mov dword [rbp - 0x40], 0x381d3729
mov word [rbp - 0x3c], 0x1029
mov byte [rbp - 0x3a], 0x7a
call fcn.140005aa0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp + 0x48]
mov dword [rbp + 0x48], 0x2710002a
mov word [rbp + 0x4c], 0x751d
call fcn.1400050b0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x26140335
mov dword [rbp - 0x44], 0x1f3a1c21
mov dword [rbp - 0x40], 0x1c012627
mov byte [rbp - 0x3c], 0x5a
call fcn.140005840
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov qword [0x140025678], rax
mov dword [rbp - 0x48], 0x26140335
mov dword [rbp - 0x44], 0x1f3a1c21
mov dword [rbp - 0x40], 0xa012627
mov byte [rbp - 0x3c], 0x5a
call fcn.140005840
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov qword [0x140025640], rax
mov dword [rbp - 0x48], 0x311a003a
mov dword [rbp - 0x44], 0x3393d08
mov dword [rbp - 0x40], 0x4b1d3822
call fcn.140004e70
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000f070]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x163b0705
mov dword [rbp - 0x34], 0x7702080d
call fcn.140004a80
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000f1a0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140025610], rax
mov dword [rbp - 0x38], 0x43b0024
mov dword [rbp - 0x34], 0x33a0512
mov byte [rbp - 0x30], 0x66
call fcn.140004660
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000f1f0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
call fcn.140004390
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x211a1e29
mov dword [rbp - 0x44], 0x5e2b0608
mov dword [rbp - 0x40], 0x331d1a74
mov word [rbp - 0x3c], 0x102e
mov byte [rbp - 0x3a], 0x7a
call fcn.140005aa0
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000f040]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0xc1f1d02
mov byte [rbp - 0x34], 0x61
call fcn.140004010
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x1601093e
mov dword [rbp - 0x44], 0x2e331604
mov dword [rbp - 0x40], 0x3f162129
mov word [rbp - 0x3c], 0x736c
mov byte [rbp - 0x3a], 0x7a
call fcn.140005aa0
mov rdx, rax
mov rcx, qword [0x140025670]
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x1101093e
mov dword [rbp - 0x44], 0x82c0614
mov dword [rbp - 0x40], 0x2d161d2b
mov word [rbp - 0x3c], 0x4735
call fcn.140003d90
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0xd12092b
mov dword [rbp - 0x44], 0x2636101d
mov dword [rbp - 0x40], 0x333d2d23
mov word [rbp - 0x3c], 0x470d
call fcn.140003d90
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x112092b
mov dword [rbp - 0x44], 0x82b1a01
mov dword [rbp - 0x40], 0x4b01310d
call fcn.140004e70
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x101093e
mov dword [rbp - 0x44], 0x22b0718
mov dword [rbp - 0x40], 0x38170434
mov byte [rbp - 0x3c], 0x5a
call fcn.140005840
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000f0c0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x740d1632
call fcn.1400032c0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x23101e3a
mov dword [rbp - 0x44], 0x41e1019
mov dword [rbp - 0x40], 0x4b2f312a
call fcn.140004e70
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x361c1e2e
mov dword [rbp - 0x44], 0x1313308
mov word [rbp - 0x40], 0x5423
call fcn.140003ba0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x261b053f
mov dword [rbp - 0x44], 0x1e2a1c2b
mov dword [rbp - 0x40], 0x27111232
mov word [rbp - 0x3c], 0x103f
mov byte [rbp - 0x3a], 0x7a
call fcn.140005aa0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
mov dword [rbp - 0x48], 0x261b053f
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x44], 0x19201023
mov dword [rbp - 0x40], 0x2e143d00
mov word [rbp - 0x3c], 0x470d
call fcn.140003d90
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x261b053f
mov dword [rbp - 0x44], 0x1e37192e
mov word [rbp - 0x40], 0x5423
call fcn.140003ba0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000f1e0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
call fcn.140004390
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov qword [0x140025630], rax
mov dword [rbp - 0x48], 0x3607052f
mov dword [rbp - 0x44], 0x2b341418
mov dword [rbp - 0x40], 0x4b1d3134
call fcn.140004e70
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x27030334
mov dword [rbp - 0x44], 0x8341c2b
mov word [rbp - 0x40], 0x5411
call fcn.140003ba0
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000f0b0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov word [rbp - 0x38], 0x6e20
call fcn.140003890
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x361c143c
mov dword [rbp - 0x44], 0xe37073d
mov dword [rbp - 0x40], 0x4b0b2723
call fcn.140004e70
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000f170]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140025638], rax
mov dword [rbp - 0x38], 0x74280f1f
call fcn.1400032c0
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
mov qword [0x140025620], rax
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret