Function at 0x140009c00
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x68
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x14363526
mov dword [rbp - 0x44], 0x29200304
mov dword [rbp - 0x40], 0x261d0928
mov word [rbp - 0x3c], 0x3101
mov byte [rbp - 0x3a], 0x7a
call fcn.140005aa0
mov rdx, qword [0x140025670]
mov r12, rax
mov qword [rbp + 0x60], rdx
test rdx, rdx
je 0x140009da7
test rax, rax
je 0x140009da7
movsxd rcx, dword [rdx + 0x3c]
xor r14d, r14d
mov r13d, r14d
mov eax, dword [rcx + rdx + 0x88]
add rax, rdx
mov qword [rbp - 0x28], rax
mov ecx, dword [rax + 0x1c]
mov r8d, dword [rax + 0x24]
add rcx, rdx
mov qword [rbp - 0x48], rcx
add r8, rdx
mov ecx, dword [rax + 0x20]
add rcx, rdx
mov qword [rbp - 0x10], r8
mov qword [rbp - 0x20], rcx
cmp dword [rax + 0x18], r14d
jbe 0x140009daa
mov word [rbp + 0x48], 0x5061
mov word [rbp + 0x50], 0x5061
nop dword [rax]
mov eax, r13d
mov rsi, r14
mov qword [rbp - 0x18], rax
mov edi, dword [rcx + rax*4]
lea rcx, [rbp + 0x48]
add rdi, rdx
call fcn.140001620
movzx ecx, byte [rax]
cmp byte [rdi], cl
je 0x140009ce4
lea rcx, [rbp + 0x48]
inc rsi
call fcn.140001620
movzx ecx, byte [rax]
cmp byte [rsi + rdi], cl
jne 0x140009cd0
lea rcx, [rbp + 0x50]
mov rbx, r14
call fcn.140001620
movzx ecx, byte [rax]
cmp byte [r12], cl
je 0x140009d15
nop dword [rax]
lea rcx, [rbp + 0x50]
inc rbx
call fcn.140001620
movzx ecx, byte [rax]
cmp byte [rbx + r12], cl
jne 0x140009d00
cmp rsi, rbx
jne 0x140009d73
mov r15, r12
mov word [rbp + 0x58], 0x5061
sub r15, rdi
mov rsi, rdi
nop dword [rax]
lea rcx, [rbp + 0x58]
mov rbx, r14
call fcn.140001620
movzx ecx, byte [rax]
cmp byte [rdi], cl
je 0x140009d57
lea rcx, [rbp + 0x58]
inc rbx
call fcn.140001620
movzx ecx, byte [rax]
cmp byte [rbx + rdi], cl
jne 0x140009d43
mov rax, rsi
sub rax, rdi
dec rbx
cmp rax, rbx
jae 0x140009d8d
movzx eax, byte [r15 + rsi]
cmp byte [rsi], al
jne 0x140009d73
inc rsi
jmp 0x140009d30
mov rax, qword [rbp - 0x28]
inc r13d
cmp r13d, dword [rax + 0x18]
jae 0x140009daa
mov rdx, qword [rbp + 0x60]
mov rcx, qword [rbp - 0x20]
jmp 0x140009cb0
mov rcx, qword [rbp - 0x10]
mov rax, qword [rbp - 0x18]
movzx eax, word [rcx + rax*2]
mov rcx, qword [rbp - 0x48]
mov r14d, dword [rcx + rax*4]
add r14, qword [rbp + 0x60]
jmp 0x140009daa
xor r14d, r14d
lea rcx, [rbp - 0x48]
mov qword [0x140025648], r14
mov dword [rbp - 0x48], 0x25272222
mov dword [rbp - 0x44], 0x170902
mov dword [rbp - 0x40], 0x270e083e
mov byte [rbp - 0x3c], 0x72
call fcn.140005840
mov rcx, qword [0x140025670]
mov rdx, rax
call r14
movdqa xmm0, xmmword [str.6100]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140025618], rax
mov dword [rbp - 0x38], 0x6b03152b
call fcn.1400032c0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov qword [0x140025628], rax
mov dword [rbp - 0x48], 0x30303937
mov dword [rbp - 0x44], 0x292f0d03
mov dword [rbp - 0x40], 0x20000120
mov byte [rbp - 0x3c], 0x72
call fcn.140005840
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [str.56_t]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140025608], rax
mov word [rbp - 0x38], 0x212b
mov byte [rbp - 0x36], 0x77
call fcn.140005500
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000e880]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140025650], rax
mov byte [rbp - 0x38], 0x4e
call fcn.140005210
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x25272222
mov dword [rbp - 0x44], 0x1a130902
mov dword [rbp - 0x40], 0x300a0e23
mov word [rbp - 0x3c], 0x1501
mov byte [rbp - 0x3a], 0x7a
call fcn.140005aa0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp + 0x48]
mov dword [rbp + 0x48], 0x21273c32
mov word [rbp + 0x4c], 0x6c06
call fcn.1400050b0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x20233f2d
mov dword [rbp - 0x44], 0x1a21053a
mov dword [rbp - 0x40], 0x14161f2d
mov byte [rbp - 0x3c], 0x72
call fcn.140005840
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov qword [0x140025678], rax
mov dword [rbp - 0x48], 0x20233f2d
mov dword [rbp - 0x44], 0x1a21053a
mov dword [rbp - 0x40], 0x2161f2d
mov byte [rbp - 0x3c], 0x72
call fcn.140005840
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov qword [0x140025640], rax
mov dword [rbp - 0x48], 0x372d3c22
mov dword [rbp - 0x44], 0x6222413
mov dword [rbp - 0x40], 0x430a0128
call fcn.140004e70
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000e7d0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x9161f3c
mov dword [rbp - 0x34], 0x6416363b
call fcn.140004a80
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000e8c0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140025610], rax
mov dword [rbp - 0x38], 0x1b16181d
mov dword [rbp - 0x34], 0x102e3b24
mov byte [rbp - 0x30], 0x65
call fcn.140004660
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000e8f0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
call fcn.140004390
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x272d2231
mov dword [rbp - 0x44], 0x5b301f13
mov dword [rbp - 0x40], 0x3b0a237e
mov word [rbp - 0x3c], 0x1506
mov byte [rbp - 0x3a], 0x7a
call fcn.140005aa0
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000e810]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x1332053b
mov byte [rbp - 0x34], 0x57
call fcn.140004010
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x10363526
mov dword [rbp - 0x44], 0x2b280f1f
mov dword [rbp - 0x40], 0x37011823
mov word [rbp - 0x3c], 0x7644
mov byte [rbp - 0x3a], 0x7a
call fcn.140005aa0
mov rdx, rax
mov rcx, qword [0x140025670]
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x17363526
mov dword [rbp - 0x44], 0xd371f0f
mov dword [rbp - 0x40], 0x25012421
mov word [rbp - 0x3c], 0x421d
call fcn.140003d90
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0xb253533
mov dword [rbp - 0x44], 0x232d0906
mov dword [rbp - 0x40], 0x3b2a1429
mov word [rbp - 0x3c], 0x4225
call fcn.140003d90
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x7253533
mov dword [rbp - 0x44], 0xd30031a
mov dword [rbp - 0x40], 0x43160807
call fcn.140004e70
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x7363526
mov dword [rbp - 0x44], 0x7301e03
mov dword [rbp - 0x40], 0x30003d3e
mov byte [rbp - 0x3c], 0x72
call fcn.140005840
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000e7a0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x6b200e0b
call fcn.1400032c0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x25272222
mov dword [rbp - 0x44], 0x1050902
mov dword [rbp - 0x40], 0x43380820
call fcn.140004e70
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x302b2236
mov dword [rbp - 0x44], 0x42a2a13
mov word [rbp - 0x40], 0x6d29
call fcn.140003ba0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x202c3927
mov dword [rbp - 0x44], 0x1b310530
mov dword [rbp - 0x40], 0x2f062b38
mov word [rbp - 0x3c], 0x1517
mov byte [rbp - 0x3a], 0x7a
call fcn.140005aa0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
mov dword [rbp - 0x48], 0x202c3927
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x44], 0x1c3b0938
mov dword [rbp - 0x40], 0x2603040a
mov word [rbp - 0x3c], 0x4225
call fcn.140003d90
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x202c3927
mov dword [rbp - 0x44], 0x1b2c0035
mov word [rbp - 0x40], 0x6d29
call fcn.140003ba0
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000e8e0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
call fcn.140004390
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov qword [0x140025630], rax
mov dword [rbp - 0x48], 0x30303937
mov dword [rbp - 0x44], 0x2e2f0d03
mov dword [rbp - 0x40], 0x430a083e
call fcn.140004e70
mov rcx, qword [0x140025670]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x21343f2c
mov dword [rbp - 0x44], 0xd2f0530
mov word [rbp - 0x40], 0x6d1b
call fcn.140003ba0
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000e790]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov word [rbp - 0x38], 0x7619
call fcn.140003890
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
mov rbx, qword [0x140025648]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x302b2824
mov dword [rbp - 0x44], 0xb2c1e26
mov dword [rbp - 0x40], 0x431c1e29
call fcn.140004e70
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x14000e870]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140025648]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140025638], rax
mov dword [rbp - 0x38], 0x6b051726
call fcn.1400032c0
mov rcx, qword [0x140025660]
mov rdx, rax
call rbx
mov qword [0x140025620], rax
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret