Function at 0x140009290
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x68
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x39100d28
mov dword [rbp - 0x44], 0x31163934
mov dword [rbp - 0x40], 0x21c3e07
mov word [rbp - 0x3c], 0x53e
mov byte [rbp - 0x3a], 0x75
call fcn.140004960
mov rdx, qword [0x1400101b8]
mov r12, rax
mov qword [rbp + 0x60], rdx
test rdx, rdx
je 0x140009437
test rax, rax
je 0x140009437
movsxd rcx, dword [rdx + 0x3c]
xor r14d, r14d
mov r13d, r14d
mov eax, dword [rcx + rdx + 0x88]
add rax, rdx
mov qword [rbp - 0x28], rax
mov ecx, dword [rax + 0x1c]
mov r8d, dword [rax + 0x24]
add rcx, rdx
mov qword [rbp - 0x48], rcx
add r8, rdx
mov ecx, dword [rax + 0x20]
add rcx, rdx
mov qword [rbp - 0x10], r8
mov qword [rbp - 0x20], rcx
cmp dword [rax + 0x18], r14d
jbe 0x14000943a
mov word [rbp + 0x48], 0x686f
mov word [rbp + 0x50], 0x686f
nop dword [rax]
mov eax, r13d
mov rsi, r14
mov qword [rbp - 0x18], rax
mov edi, dword [rcx + rax*4]
lea rcx, [rbp + 0x48]
add rdi, rdx
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rdi], cl
je 0x140009374
lea rcx, [rbp + 0x48]
inc rsi
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rsi + rdi], cl
jne 0x140009360
lea rcx, [rbp + 0x50]
mov rbx, r14
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [r12], cl
je 0x1400093a5
nop dword [rax]
lea rcx, [rbp + 0x50]
inc rbx
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rbx + r12], cl
jne 0x140009390
cmp rsi, rbx
jne 0x140009403
mov r15, r12
mov word [rbp + 0x58], 0x686f
sub r15, rdi
mov rsi, rdi
nop dword [rax]
lea rcx, [rbp + 0x58]
mov rbx, r14
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rdi], cl
je 0x1400093e7
lea rcx, [rbp + 0x58]
inc rbx
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rbx + rdi], cl
jne 0x1400093d3
mov rax, rsi
sub rax, rdi
dec rbx
cmp rax, rbx
jae 0x14000941d
movzx eax, byte [r15 + rsi]
cmp byte [rsi], al
jne 0x140009403
inc rsi
jmp 0x1400093c0
mov rax, qword [rbp - 0x28]
inc r13d
cmp r13d, dword [rax + 0x18]
jae 0x14000943a
mov rdx, qword [rbp + 0x60]
mov rcx, qword [rbp - 0x20]
jmp 0x140009340
mov rcx, qword [rbp - 0x10]
mov rax, qword [rbp - 0x18]
movzx eax, word [rcx + rax*2]
mov rcx, qword [rbp - 0x48]
mov r14d, dword [rcx + rax*4]
add r14, qword [rbp + 0x60]
jmp 0x14000943a
xor r14d, r14d
lea rcx, [rbp - 0x48]
mov qword [0x140010130], r14
mov dword [rbp - 0x48], 0x8011a2c
mov dword [rbp - 0x44], 0x18213332
mov dword [rbp - 0x40], 0x30f3f11
mov byte [rbp - 0x3c], 0x4d
call fcn.140004700
mov rcx, qword [0x1400101b8]
mov rdx, rax
call r14
movdqa xmm0, xmmword [0x14000edf0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010100], rax
mov dword [rbp - 0x38], 0x4702020b
call fcn.1400026f0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010110], rax
mov dword [rbp - 0x48], 0x1d160139
mov dword [rbp - 0x44], 0x31193733
mov dword [rbp - 0x40], 0x401360f
mov byte [rbp - 0x3c], 0x4d
call fcn.140004700
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ee30]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x1400100f8], rax
mov word [rbp - 0x38], 0x360b
mov byte [rbp - 0x36], 0x76
call fcn.1400043c0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ed70]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010178], rax
mov byte [rbp - 0x38], 0x6e
call fcn.1400014c0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010140], rax
mov dword [rbp - 0x48], 0x8011a2c
mov dword [rbp - 0x44], 0x2253332
mov dword [rbp - 0x40], 0x140b390c
mov word [rbp - 0x3c], 0x213e
mov byte [rbp - 0x3a], 0x75
call fcn.140004960
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp + 0x48]
mov qword [0x140010148], rax
mov dword [rbp + 0x48], 0xc01043c
mov word [rbp + 0x4c], 0x5636
call fcn.140004260
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010158], rax
mov dword [rbp - 0x48], 0xd050723
mov dword [rbp - 0x44], 0x2173f0a
mov dword [rbp - 0x40], 0x30172802
mov byte [rbp - 0x3c], 0x4d
call fcn.140004700
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x1400101c0], rax
mov dword [rbp - 0x48], 0xd050723
mov dword [rbp - 0x44], 0x2173f0a
mov dword [rbp - 0x40], 0x26172802
mov byte [rbp - 0x3c], 0x4d
call fcn.140004700
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010128], rax
mov dword [rbp - 0x48], 0x1a0b042c
mov dword [rbp - 0x44], 0x1e141e23
mov dword [rbp - 0x40], 0x670b3607
call fcn.140004020
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000eda0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010150], rax
mov dword [rbp - 0x38], 0x2517081c
mov dword [rbp - 0x34], 0x653f2116
call fcn.140003c30
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000eec0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010170], rax
mov dword [rbp - 0x38], 0x37170f3d
mov dword [rbp - 0x34], 0x11072c09
mov byte [rbp - 0x30], 0x75
call fcn.140003810
mov rcx, qword [0x1400101a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ee80]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
call fcn.140003540
mov rcx, qword [0x1400101a8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0xa0b1a3f
mov dword [rbp - 0x44], 0x43062523
mov dword [rbp - 0x40], 0x1f0b1451
mov word [rbp - 0x3c], 0x2139
mov byte [rbp - 0x3a], 0x75
call fcn.140004960
mov rcx, qword [0x1400101a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ee70]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x3f33121b
mov byte [rbp - 0x34], 0x7a
call fcn.1400031c0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
mov dword [rbp - 0x48], 0x3d100d28
mov dword [rbp - 0x44], 0x331e352f
mov dword [rbp - 0x40], 0x13002f0c
mov word [rbp - 0x3c], 0x427b
lea rcx, [rbp - 0x48]
mov byte [rbp - 0x3a], 0x75
call fcn.140004960
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x3a100d28
mov dword [rbp - 0x44], 0x1501253f
mov dword [rbp - 0x40], 0x100130e
mov word [rbp - 0x3c], 0x7622
call fcn.140001180
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x26030d3d
mov dword [rbp - 0x44], 0x3b1b3336
mov dword [rbp - 0x40], 0x1f2b2306
mov word [rbp - 0x3c], 0x761a
call fcn.140001180
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x2a030d3d
mov dword [rbp - 0x44], 0x1506392a
mov dword [rbp - 0x40], 0x67173f28
call fcn.140004020
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x2a100d28
mov dword [rbp - 0x44], 0x1f062433
mov dword [rbp - 0x40], 0x14010a11
mov byte [rbp - 0x3c], 0x4d
call fcn.140004700
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000edc0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x4721192b
call fcn.1400026f0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x8011a2c
mov dword [rbp - 0x44], 0x19333332
mov dword [rbp - 0x40], 0x67393f0f
call fcn.140004020
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010160], rax
mov dword [rbp - 0x48], 0x1d0d1a38
mov dword [rbp - 0x44], 0x1c1c1023
mov word [rbp - 0x40], 0x5a06
call fcn.140002fd0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010188], rax
mov dword [rbp - 0x48], 0xd0a0129
mov dword [rbp - 0x44], 0x3073f00
mov dword [rbp - 0x40], 0xb071c17
mov word [rbp - 0x3c], 0x2128
mov byte [rbp - 0x3a], 0x75
call fcn.140004960
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010198], rax
mov dword [rbp - 0x48], 0xd0a0129
mov dword [rbp - 0x44], 0x40d3308
mov dword [rbp - 0x40], 0x2023325
mov word [rbp - 0x3c], 0x761a
call fcn.140001180
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010190], rax
mov dword [rbp - 0x48], 0xd0a0129
mov dword [rbp - 0x44], 0x31a3a05
mov word [rbp - 0x40], 0x5a06
call fcn.140002fd0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ee90]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010168], rax
call fcn.140003540
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010118], rax
mov dword [rbp - 0x48], 0x1d160139
mov dword [rbp - 0x44], 0x36193733
mov dword [rbp - 0x40], 0x670b3f11
call fcn.140004020
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0xc120722
mov dword [rbp - 0x44], 0x15193f00
mov word [rbp - 0x40], 0x5a34
call fcn.140002fd0
mov rcx, qword [0x1400101a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000edd0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010138], rax
mov word [rbp - 0x38], 0x6139
call fcn.140002cc0
mov rcx, qword [0x1400101a8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010180], rax
mov dword [rbp - 0x48], 0x1d0d102a
mov dword [rbp - 0x44], 0x131a2416
mov dword [rbp - 0x40], 0x671d2906
call fcn.140004020
mov rcx, qword [0x1400101a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ecf0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010120], rax
mov dword [rbp - 0x38], 0x47040006
call fcn.1400026f0
mov rdx, rax
mov rcx, qword [0x1400101a8]
call rbx
mov qword [0x140010108], rax
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret