Function at 0x140009c00
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x68
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x383a1600
mov dword [rbp - 0x44], 0x2c202303
mov dword [rbp - 0x40], 0x1d242e32
mov word [rbp - 0x3c], 0x1615
mov byte [rbp - 0x3a], 0x72
call fcn.140005660
mov rdx, qword [0x1400111b8]
mov r12, rax
mov qword [rbp + 0x60], rdx
test rdx, rdx
je 0x140009da7
test rax, rax
je 0x140009da7
movsxd rcx, dword [rdx + 0x3c]
xor r14d, r14d
mov r13d, r14d
mov eax, dword [rcx + rdx + 0x88]
add rax, rdx
mov qword [rbp - 0x28], rax
mov ecx, dword [rax + 0x1c]
mov r8d, dword [rax + 0x24]
add rcx, rdx
mov qword [rbp - 0x48], rcx
add r8, rdx
mov ecx, dword [rax + 0x20]
add rcx, rdx
mov qword [rbp - 0x10], r8
mov qword [rbp - 0x20], rcx
cmp dword [rax + 0x18], r14d
jbe 0x140009daa
mov word [rbp + 0x48], 0x7347
mov word [rbp + 0x50], 0x7347
nop dword [rax]
mov eax, r13d
mov rsi, r14
mov qword [rbp - 0x18], rax
mov edi, dword [rcx + rax*4]
lea rcx, [rbp + 0x48]
add rdi, rdx
call fcn.1400019f0
movzx ecx, byte [rax]
cmp byte [rdi], cl
je 0x140009ce4
lea rcx, [rbp + 0x48]
inc rsi
call fcn.1400019f0
movzx ecx, byte [rax]
cmp byte [rsi + rdi], cl
jne 0x140009cd0
lea rcx, [rbp + 0x50]
mov rbx, r14
call fcn.1400019f0
movzx ecx, byte [rax]
cmp byte [r12], cl
je 0x140009d15
nop dword [rax]
lea rcx, [rbp + 0x50]
inc rbx
call fcn.1400019f0
movzx ecx, byte [rax]
cmp byte [rbx + r12], cl
jne 0x140009d00
cmp rsi, rbx
jne 0x140009d73
mov r15, r12
mov word [rbp + 0x58], 0x7347
sub r15, rdi
mov rsi, rdi
nop dword [rax]
lea rcx, [rbp + 0x58]
mov rbx, r14
call fcn.1400019f0
movzx ecx, byte [rax]
cmp byte [rdi], cl
je 0x140009d57
lea rcx, [rbp + 0x58]
inc rbx
call fcn.1400019f0
movzx ecx, byte [rax]
cmp byte [rbx + rdi], cl
jne 0x140009d43
mov rax, rsi
sub rax, rdi
dec rbx
cmp rax, rbx
jae 0x140009d8d
movzx eax, byte [r15 + rsi]
cmp byte [rsi], al
jne 0x140009d73
inc rsi
jmp 0x140009d30
mov rax, qword [rbp - 0x28]
inc r13d
cmp r13d, dword [rax + 0x18]
jae 0x140009daa
mov rdx, qword [rbp + 0x60]
mov rcx, qword [rbp - 0x20]
jmp 0x140009cb0
mov rcx, qword [rbp - 0x10]
mov rax, qword [rbp - 0x18]
movzx eax, word [rcx + rax*2]
mov rcx, qword [rbp - 0x48]
mov r14d, dword [rcx + rax*4]
add r14, qword [rbp + 0x60]
jmp 0x140009daa
xor r14d, r14d
lea rcx, [rbp - 0x48]
mov qword [0x140011130], r14
mov dword [rbp - 0x48], 0x92b0104
mov dword [rbp - 0x44], 0x5172905
mov dword [rbp - 0x40], 0x1c372f24
mov byte [rbp - 0x3c], 0x66
call fcn.140005360
mov rcx, qword [0x1400111b8]
mov rdx, rax
call r14
movdqa xmm0, xmmword [0x140010190]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140011130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140011100], rax
mov dword [rbp - 0x38], 0x531b2c01
call fcn.140002ad0
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov qword [0x140011110], rax
mov dword [rbp - 0x48], 0x1c3c1a11
mov dword [rbp - 0x44], 0x2c2f2d04
mov dword [rbp - 0x40], 0x1b39263a
mov byte [rbp - 0x3c], 0x66
call fcn.140005360
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x140010170]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140011130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x1400110f8], rax
mov word [rbp - 0x38], 0x1801
mov byte [rbp - 0x36], 0x6f
call fcn.140004f40
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x1400101a0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140011130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140011178], rax
mov byte [rbp - 0x38], 0x64
call fcn.140001590
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov qword [0x140011140], rax
mov dword [rbp - 0x48], 0x92b0104
mov dword [rbp - 0x44], 0x1f132905
mov dword [rbp - 0x40], 0xb332939
mov word [rbp - 0x3c], 0x3215
mov byte [rbp - 0x3a], 0x72
call fcn.140005660
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp + 0x48]
mov qword [0x140011148], rax
mov dword [rbp + 0x48], 0xd2b1f14
mov word [rbp + 0x4c], 0x4c01
call fcn.140004da0
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov qword [0x140011158], rax
mov dword [rbp - 0x48], 0xc2f1c0b
mov dword [rbp - 0x44], 0x1f21253d
mov dword [rbp - 0x40], 0x2f2f3837
mov byte [rbp - 0x3c], 0x66
call fcn.140005360
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov qword [0x1400111c0], rax
mov dword [rbp - 0x48], 0xc2f1c0b
mov dword [rbp - 0x44], 0x1f21253d
mov dword [rbp - 0x40], 0x392f3837
mov byte [rbp - 0x3c], 0x66
call fcn.140005360
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov qword [0x140011128], rax
mov dword [rbp - 0x48], 0x1b211f04
mov dword [rbp - 0x44], 0x3220414
mov dword [rbp - 0x40], 0x78332632
call fcn.140004ad0
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x140010130]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140011130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140011150], rax
mov dword [rbp - 0x38], 0x310e2616
mov dword [rbp - 0x34], 0x58332006
call fcn.1400045c0
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x140010210]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140011130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140011170], rax
mov dword [rbp - 0x38], 0x230e2137
mov dword [rbp - 0x34], 0x2c0b2d19
mov byte [rbp - 0x30], 0x71
call fcn.140004080
mov rcx, qword [0x1400111a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x140010250]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140011130]
movdqu xmmword [rbp - 0x48], xmm0
call fcn.140003cf0
mov rcx, qword [0x1400111a8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0xb210117
mov dword [rbp - 0x44], 0x5e303f14
mov dword [rbp - 0x40], 0x330464
mov word [rbp - 0x3c], 0x3212
mov byte [rbp - 0x3a], 0x72
call fcn.140005660
mov rcx, qword [0x1400111a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x1400100a0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140011130]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x2b2a3c11
mov byte [rbp - 0x34], 0x6a
call fcn.140003870
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
mov dword [rbp - 0x48], 0x3c3a1600
mov dword [rbp - 0x44], 0x2e282f18
mov dword [rbp - 0x40], 0xc383f39
mov word [rbp - 0x3c], 0x5150
lea rcx, [rbp - 0x48]
mov byte [rbp - 0x3a], 0x72
call fcn.140005660
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x3b3a1600
mov dword [rbp - 0x44], 0x8373f08
mov dword [rbp - 0x40], 0x1e38033b
mov word [rbp - 0x3c], 0x6509
call fcn.140001180
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x27291615
mov dword [rbp - 0x44], 0x262d2901
mov dword [rbp - 0x40], 0x133333
mov word [rbp - 0x3c], 0x6531
call fcn.140001180
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x2b291615
mov dword [rbp - 0x44], 0x830231d
mov dword [rbp - 0x40], 0x782f2f1d
call fcn.140004ad0
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x2b3a1600
mov dword [rbp - 0x44], 0x2303e04
mov dword [rbp - 0x40], 0xb391a24
mov byte [rbp - 0x3c], 0x66
call fcn.140005360
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x140010100]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140011130]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x53383721
call fcn.140002ad0
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x92b0104
mov dword [rbp - 0x44], 0x4052905
mov dword [rbp - 0x40], 0x78012f3a
call fcn.140004ad0
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov qword [0x140011160], rax
mov dword [rbp - 0x48], 0x1c270110
mov dword [rbp - 0x44], 0x12a0a14
mov word [rbp - 0x40], 0x4a33
call fcn.140003610
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov qword [0x140011188], rax
mov dword [rbp - 0x48], 0xc201a01
mov dword [rbp - 0x44], 0x1e312537
mov dword [rbp - 0x40], 0x143f0c22
mov word [rbp - 0x3c], 0x3203
mov byte [rbp - 0x3a], 0x72
call fcn.140005660
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov qword [0x140011198], rax
mov dword [rbp - 0x48], 0xc201a01
mov dword [rbp - 0x44], 0x193b293f
mov dword [rbp - 0x40], 0x1d3a2310
mov word [rbp - 0x3c], 0x6531
call fcn.140001180
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov qword [0x140011190], rax
mov dword [rbp - 0x48], 0xc201a01
mov dword [rbp - 0x44], 0x1e2c2032
mov word [rbp - 0x40], 0x4a33
call fcn.140003610
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x140010240]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140011130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140011168], rax
call fcn.140003cf0
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov qword [0x140011118], rax
mov dword [rbp - 0x48], 0x1c3c1a11
mov dword [rbp - 0x44], 0x2b2f2d04
mov dword [rbp - 0x40], 0x78332f24
call fcn.140004ad0
mov rcx, qword [0x1400111b8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0xd381c0a
mov dword [rbp - 0x44], 0x82f2537
mov word [rbp - 0x40], 0x4a01
call fcn.140003610
mov rcx, qword [0x1400111a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x140010120]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140011130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140011138], rax
mov word [rbp - 0x38], 0x4f33
call fcn.140003220
mov rcx, qword [0x1400111a8]
mov rdx, rax
call rbx
mov rbx, qword [0x140011130]
lea rcx, [rbp - 0x48]
mov qword [0x140011180], rax
mov dword [rbp - 0x48], 0x1c270b02
mov dword [rbp - 0x44], 0xe2c3e21
mov dword [rbp - 0x40], 0x78253933
call fcn.140004ad0
mov rcx, qword [0x1400111a8]
mov rdx, rax
call rbx
movdqa xmm0, xmmword [0x1400101d0]
lea rcx, [rbp - 0x48]
mov rbx, qword [0x140011130]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [0x140011120], rax
mov dword [rbp - 0x38], 0x531d2e0c
call fcn.140002ad0
mov rdx, rax
mov rcx, qword [0x1400111a8]
call rbx
mov qword [0x140011108], rax
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret