Function at 0x412f80
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
sub rsp, 0x428
mov qword [rsp + 0x380], 0xfffffffffffffffe
mov rax, qword [0x00419040]
xor rax, rsp
mov qword [rsp + 0x410], rax
mov word [rsp + 0xc0], 0x4b
mov word [rsp + 0xc2], 0x62
mov word [rsp + 0xc4], 0x69
mov word [rsp + 0xc6], 0x65
mov word [rsp + 0xc8], 0x65
mov word [rsp + 0xca], 0x69
mov word [rsp + 0xcc], 0x33
mov word [rsp + 0xce], 0x32
mov word [rsp + 0xd0], 0x2e
mov word [rsp + 0xd2], 0x75
mov word [rsp + 0xd4], 0x63
mov word [rsp + 0xd6], 0x6c
mov word [rsp + 0xd8], 0
mov word [rsp + 0x160], 0x61
mov word [rsp + 0x162], 0x78
mov word [rsp + 0x164], 0x72
mov word [rsp + 0x166], 0x72
mov word [rsp + 0x168], 0
lea rax, [rsp + 0x170]
mov qword [rsp + 0x198], rax
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x1c8], rax
lea rdx, [rsp + 0x160]
mov rcx, qword [rsp + 0x198]
call fcn.00401c30
mov qword [rsp + 0x388], rax
mov rax, qword [rsp + 0x388]
mov qword [rsp + 0x390], rax
lea rdx, [rsp + 0xc0]
mov rcx, qword [rsp + 0x1c8]
call fcn.00401c30
mov qword [rsp + 0x398], rax
mov r8, qword [rsp + 0x390]
mov rdx, qword [rsp + 0x398]
lea rcx, [rsp + 0xe0]
call fcn.00410150
nop
mov word [rsp + 0x40], 0x57
mov word [rsp + 0x42], 0x69
mov word [rsp + 0x44], 0x6f
mov word [rsp + 0x46], 0x75
mov word [rsp + 0x48], 0x7a
mov word [rsp + 0x4a], 0x65
mov word [rsp + 0x4c], 0x33
mov word [rsp + 0x4e], 0x32
mov word [rsp + 0x50], 0x2e
mov word [rsp + 0x52], 0x69
mov word [rsp + 0x54], 0x65
mov word [rsp + 0x56], 0x66
mov word [rsp + 0x58], 0
mov word [rsp + 0xb0], 0x77
mov word [rsp + 0xb2], 0x66
mov word [rsp + 0xb4], 0x74
mov word [rsp + 0xb6], 0x55
mov word [rsp + 0xb8], 0x4b
mov word [rsp + 0xba], 0
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x1f8], rax
lea rax, [rsp + 0x200]
mov qword [rsp + 0x228], rax
lea rdx, [rsp + 0xb0]
mov rcx, qword [rsp + 0x1f8]
call fcn.00401c30
mov qword [rsp + 0x3a0], rax
mov rax, qword [rsp + 0x3a0]
mov qword [rsp + 0x3a8], rax
lea rdx, [rsp + 0x40]
mov rcx, qword [rsp + 0x228]
call fcn.00401c30
mov qword [rsp + 0x3b0], rax
mov r8, qword [rsp + 0x3a8]
mov rdx, qword [rsp + 0x3b0]
lea rcx, [rsp + 0x138]
call fcn.00410150
nop
mov word [rsp + 0x28], 0x6a
mov word [rsp + 0x2a], 0x79
mov word [rsp + 0x2c], 0x66
mov word [rsp + 0x2e], 0x75
mov word [rsp + 0x30], 0x6a
mov word [rsp + 0x32], 0x74
mov word [rsp + 0x34], 0x63
mov word [rsp + 0x36], 0x2e
mov word [rsp + 0x38], 0x74
mov word [rsp + 0x3a], 0x64
mov word [rsp + 0x3c], 0x79
mov word [rsp + 0x3e], 0
mov word [rsp + 0x128], 0x6e
mov word [rsp + 0x12a], 0x51
mov word [rsp + 0x12c], 0x73
mov word [rsp + 0x12e], 0x6e
mov word [rsp + 0x130], 0x71
mov word [rsp + 0x132], 0x41
mov word [rsp + 0x134], 0
lea rax, [rsp + 0x230]
mov qword [rsp + 0x258], rax
lea rax, [rsp + 0x260]
mov qword [rsp + 0x288], rax
lea rdx, [rsp + 0x128]
mov rcx, qword [rsp + 0x258]
call fcn.00401c30
mov qword [rsp + 0x3b8], rax
mov rax, qword [rsp + 0x3b8]
mov qword [rsp + 0x3c0], rax
lea rdx, [rsp + 0x28]
mov rcx, qword [rsp + 0x288]
call fcn.00401c30
mov qword [rsp + 0x3c8], rax
mov r8, qword [rsp + 0x3c0]
mov rdx, qword [rsp + 0x3c8]
lea rcx, [rsp + 0x88]
call fcn.00410150
nop
lea rcx, [rsp + 0xe0]
call fcn.00401ac0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.00411ea0
nop
xor r8d, r8d
lea rdx, [0x00415f88]
lea rcx, [rsp + 0x60]
call fcn.00401da0
cmp rax, 0xffffffffffffffff
jne 0x4133ae
mov dword [rsp + 0x290], 0
lea rcx, [rsp + 0x60]
call fcn.00401c90
nop
lea rcx, [rsp + 0x88]
call fcn.004019c0
nop
lea rcx, [rsp + 0x138]
call fcn.004019c0
nop
lea rcx, [rsp + 0xe0]
call fcn.004019c0
mov eax, dword [rsp + 0x290]
jmp 0x413590
lea rax, [rsp + 0x298]
mov qword [rsp + 0x2c0], rax
lea rax, [rsp + 0x2c8]
mov qword [rsp + 0x2f0], rax
lea rdx, [rsp + 0x60]
mov rcx, qword [rsp + 0x2c0]
call fcn.00401bc0
mov qword [rsp + 0x3d0], rax
mov rax, qword [rsp + 0x3d0]
mov qword [rsp + 0x3d8], rax
lea rdx, [rsp + 0x88]
mov rcx, qword [rsp + 0x2f0]
call fcn.004018f0
mov qword [rsp + 0x3e0], rax
mov rdx, qword [rsp + 0x3e0]
xor ecx, ecx
call fcn.0040ffe0
mov qword [rsp + 0x3e8], rax
mov r8, qword [rsp + 0x3d8]
mov rdx, qword [rsp + 0x3e8]
lea rcx, [rsp + 0x108]
call fcn.004123a0
nop
lea rcx, [rsp + 0x108]
call fcn.00401f80
cmp rax, 0x3e8
jbe 0x41353c
lea rax, [rsp + 0x2f8]
mov qword [rsp + 0x320], rax
lea rax, [rsp + 0x328]
mov qword [rsp + 0x348], rax
lea rdx, [rsp + 0x138]
mov rcx, qword [rsp + 0x320]
call fcn.004018f0
mov qword [rsp + 0x3f0], rax
mov rdx, qword [rsp + 0x3f0]
xor ecx, ecx
call fcn.0040ffe0
mov qword [rsp + 0x3f8], rax
lea rdx, [rsp + 0x108]
mov rcx, qword [rsp + 0x348]
call fcn.00401e20
mov qword [rsp + 0x400], rax
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x400]
call fcn.00410b40
lea rax, [rsp + 0x350]
mov qword [rsp + 0x370], rax
lea rdx, [rsp + 0x108]
mov rcx, qword [rsp + 0x370]
call fcn.00401e20
mov qword [rsp + 0x408], rax
lea rcx, [rsp + 0xe0]
call fcn.00401ac0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdx, rax
mov rcx, qword [rsp + 0x408]
call fcn.004104e0
mov dword [rsp + 0x378], 0
lea rcx, [rsp + 0x108]
call fcn.00401f60
nop
lea rcx, [rsp + 0x60]
call fcn.00401c90
nop
lea rcx, [rsp + 0x88]
call fcn.004019c0
nop
lea rcx, [rsp + 0x138]
call fcn.004019c0
nop
lea rcx, [rsp + 0xe0]
call fcn.004019c0
mov eax, dword [rsp + 0x378]
mov rcx, qword [rsp + 0x410]
xor rcx, rsp
call fcn.00406150
add rsp, 0x428
ret