Function at 0x140009290
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x68
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x71e0720
mov dword [rbp - 0x44], 0x2f0b0d15
mov dword [rbp - 0x40], 0x6022c1c
mov word [rbp - 0x3c], 0x3923
mov byte [rbp - 0x3a], 0x64
call fcn.140004960
mov rdx, qword [0x1400101b8]
mov r12, rax
mov qword [rbp + 0x60], rdx
test rdx, rdx
je 0x140009437
test rax, rax
je 0x140009437
movsxd rcx, dword [rdx + 0x3c]
xor r14d, r14d
mov r13d, r14d
mov eax, dword [rcx + rdx + 0x88]
add rax, rdx
mov qword [rbp - 0x28], rax
mov ecx, dword [rax + 0x1c]
mov r8d, dword [rax + 0x24]
add rcx, rdx
mov qword [rbp - 0x48], rcx
add r8, rdx
mov ecx, dword [rax + 0x20]
add rcx, rdx
mov qword [rbp - 0x10], r8
mov qword [rbp - 0x20], rcx
cmp dword [rax + 0x18], r14d
jbe 0x14000943a
mov word [rbp + 0x48], 0x6267
mov word [rbp + 0x50], 0x6267
nop dword [rax]
mov eax, r13d
mov rsi, r14
mov qword [rbp - 0x18], rax
mov edi, dword [rcx + rax*4]
lea rcx, [rbp + 0x48]
add rdi, rdx
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rdi], cl
je 0x140009374
lea rcx, [rbp + 0x48]
inc rsi
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rsi + rdi], cl
jne 0x140009360
lea rcx, [rbp + 0x50]
mov rbx, r14
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [r12], cl
je 0x1400093a5
nop dword [rax]
lea rcx, [rbp + 0x50]
inc rbx
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rbx + r12], cl
jne 0x140009390
cmp rsi, rbx
jne 0x140009403
mov r15, r12
mov word [rbp + 0x58], 0x6267
sub r15, rdi
mov rsi, rdi
nop dword [rax]
lea rcx, [rbp + 0x58]
mov rbx, r14
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rdi], cl
je 0x1400093e7
lea rcx, [rbp + 0x58]
inc rbx
call fcn.140001850
movzx ecx, byte [rax]
cmp byte [rbx + rdi], cl
jne 0x1400093d3
mov rax, rsi
sub rax, rdi
dec rbx
cmp rax, rbx
jae 0x14000941d
movzx eax, byte [r15 + rsi]
cmp byte [rsi], al
jne 0x140009403
inc rsi
jmp 0x1400093c0
mov rax, qword [rbp - 0x28]
inc r13d
cmp r13d, dword [rax + 0x18]
jae 0x14000943a
mov rdx, qword [rbp + 0x60]
mov rcx, qword [rbp - 0x20]
jmp 0x140009340
mov rcx, qword [rbp - 0x10]
mov rax, qword [rbp - 0x18]
movzx eax, word [rcx + rax*2]
mov rcx, qword [rbp - 0x48]
mov r14d, dword [rcx + rax*4]
add r14, qword [rbp + 0x60]
jmp 0x14000943a
xor r14d, r14d
lea rcx, [rbp - 0x48]
mov qword [0x140010130], r14
mov dword [rbp - 0x48], 0x360f1024
mov dword [rbp - 0x44], 0x63c0713
mov dword [rbp - 0x40], 0x7112d0a
mov byte [rbp - 0x3c], 0x50
call fcn.140004700
mov rcx, qword [0x1400101b8]
mov rdx, rax
call r14
movdqa xmm0, xmmword [0x14000ed10]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010100], rax
mov dword [rbp - 0x38], 0x63383b10
call fcn.1400026f0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010110], rax
mov dword [rbp - 0x48], 0x23180b31
mov dword [rbp - 0x44], 0x2f040312
mov dword [rbp - 0x40], 0x1f2414
mov byte [rbp - 0x3c], 0x50
call fcn.140004700
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ed60]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x1400100f8], rax
mov word [rbp - 0x38], 0xf10
mov byte [rbp - 0x36], 0x4c
call fcn.1400043c0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ed90]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010178], rax
mov byte [rbp - 0x38], 0x75
call fcn.1400014c0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010140], rax
mov dword [rbp - 0x48], 0x360f1024
mov dword [rbp - 0x44], 0x1c380713
mov dword [rbp - 0x40], 0x10152b17
mov word [rbp - 0x3c], 0x1d23
mov byte [rbp - 0x3a], 0x64
call fcn.140004960
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp + 0x48]
mov qword [0x140010148], rax
mov dword [rbp + 0x48], 0x320f0e34
mov word [rbp + 0x4c], 0x6217
call fcn.140004260
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010158], rax
mov dword [rbp - 0x48], 0x330b0d2b
mov dword [rbp - 0x44], 0x1c0a0b2b
mov dword [rbp - 0x40], 0x34093a19
mov byte [rbp - 0x3c], 0x50
call fcn.140004700
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x1400101c0], rax
mov dword [rbp - 0x48], 0x330b0d2b
mov dword [rbp - 0x44], 0x1c0a0b2b
mov dword [rbp - 0x40], 0x22093a19
mov byte [rbp - 0x3c], 0x50
call fcn.140004700
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010128], rax
mov dword [rbp - 0x48], 0x24050e24
mov dword [rbp - 0x44], 0x92a02
mov dword [rbp - 0x40], 0x6315241c
call fcn.140004020
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ecc0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010150], rax
mov dword [rbp - 0x38], 0x12d3107
mov dword [rbp - 0x34], 0x762f260d
call fcn.140003c30
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ee00]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010170], rax
mov dword [rbp - 0x38], 0x132d3626
mov dword [rbp - 0x34], 0x2172b12
mov byte [rbp - 0x30], 0x50
call fcn.140003810
mov rcx, qword [0x1400101a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ee50]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
call fcn.140003540
mov rcx, qword [0x1400101a8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x34051037
mov dword [rbp - 0x44], 0x5d1b1102
mov dword [rbp - 0x40], 0x1b15064a
mov word [rbp - 0x3c], 0x1d24
mov byte [rbp - 0x3a], 0x64
call fcn.140004960
mov rcx, qword [0x1400101a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ec90]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x1b092b00
mov byte [rbp - 0x34], 0x61
call fcn.1400031c0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
mov dword [rbp - 0x48], 0x31e0720
mov dword [rbp - 0x44], 0x2d03010e
mov dword [rbp - 0x40], 0x171e3d17
mov word [rbp - 0x3c], 0x7e66
lea rcx, [rbp - 0x48]
mov byte [rbp - 0x3a], 0x64
call fcn.140004960
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x41e0720
mov dword [rbp - 0x44], 0xb1c111e
mov dword [rbp - 0x40], 0x51e0115
mov word [rbp - 0x3c], 0x4a3f
call fcn.140001180
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x180d0735
mov dword [rbp - 0x44], 0x25060717
mov dword [rbp - 0x40], 0x1b35311d
mov word [rbp - 0x3c], 0x4a07
call fcn.140001180
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x140d0735
mov dword [rbp - 0x44], 0xb1b0d0b
mov dword [rbp - 0x40], 0x63092d33
call fcn.140004020
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x141e0720
mov dword [rbp - 0x44], 0x11b1012
mov dword [rbp - 0x40], 0x101f180a
mov byte [rbp - 0x3c], 0x50
call fcn.140004700
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ece0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x631b2030
call fcn.1400026f0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x360f1024
mov dword [rbp - 0x44], 0x72e0713
mov dword [rbp - 0x40], 0x63272d14
call fcn.140004020
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010160], rax
mov dword [rbp - 0x48], 0x23031030
mov dword [rbp - 0x44], 0x2012402
mov word [rbp - 0x40], 0x481d
call fcn.140002fd0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010188], rax
mov dword [rbp - 0x48], 0x33040b21
mov dword [rbp - 0x44], 0x1d1a0b21
mov dword [rbp - 0x40], 0xf190e0c
mov word [rbp - 0x3c], 0x1d35
mov byte [rbp - 0x3a], 0x64
call fcn.140004960
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010198], rax
mov dword [rbp - 0x48], 0x33040b21
mov dword [rbp - 0x44], 0x1a100729
mov dword [rbp - 0x40], 0x61c213e
mov word [rbp - 0x3c], 0x4a07
call fcn.140001180
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010190], rax
mov dword [rbp - 0x48], 0x33040b21
mov dword [rbp - 0x44], 0x1d070e24
mov word [rbp - 0x40], 0x481d
call fcn.140002fd0
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ee40]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010168], rax
call fcn.140003540
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010118], rax
mov dword [rbp - 0x48], 0x23180b31
mov dword [rbp - 0x44], 0x28040312
mov dword [rbp - 0x40], 0x63152d0a
call fcn.140004020
mov rcx, qword [0x1400101b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x321c0d2a
mov dword [rbp - 0x44], 0xb040b21
mov word [rbp - 0x40], 0x482f
call fcn.140002fd0
mov rcx, qword [0x1400101a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000ed00]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010138], rax
mov word [rbp - 0x38], 0x5822
call fcn.140002cc0
mov rcx, qword [0x1400101a8]
mov rdx, rax
call rbx
mov rbx, qword [0x140010130]
lea rcx, [rbp - 0x48]
mov qword [0x140010180], rax
mov dword [rbp - 0x48], 0x23031a22
mov dword [rbp - 0x44], 0xd071037
mov dword [rbp - 0x40], 0x63033b1d
call fcn.140004020
mov rcx, qword [0x1400101a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000eda0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140010130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140010120], rax
mov dword [rbp - 0x38], 0x633e391d
call fcn.1400026f0
mov rdx, rax
mov rcx, qword [0x1400101a8]
call rbx
mov qword [0x140010108], rax
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret