Function at 0x1400041f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x470]
sub rsp, 0x570
mov rax, qword [0x140090080]
xor rax, rsp
mov qword [rbp + 0x460], rax
xor ebx, ebx
mov dword [rsp + 0x60], 0x2b3d3c20
mov dword [rsp + 0x64], 0x78323637
mov dword [rsp + 0x68], 0x3c2032
lea rcx, [rsp + 0x60]
call fcn.140008f70
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140009390
nop
mov dword [rsp + 0x48], 0x36656637
mov dword [rsp + 0x4c], 0x337b3331
mov word [rsp + 0x50], 0x3d2f
xor eax, eax
mov byte [rsp + 0x52], al
lea rcx, [rsp + 0x48]
call fcn.140009060
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.140009390
nop
mov dword [rsp + 0x60], 0x36636337
mov dword [rsp + 0x64], 0x337b3331
mov word [rsp + 0x68], 0x3d2f
xor eax, eax
mov byte [rsp + 0x6a], al
lea rcx, [rsp + 0x60]
call fcn.140009060
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.140009390
nop
mov dword [rsp + 0x48], 0x7c34392b
mov dword [rsp + 0x4c], 0x302c36
lea rcx, [rsp + 0x48]
call fcn.140008fd0
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp - 0x20]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x1400042f0
mov rdx, rdi
lea rcx, [rbp - 0x20]
call fcn.14000d5f0
nop
mov dword [rsp + 0x60], 0x2421333b
mov dword [rsp + 0x64], 0x7822313a
mov dword [rsp + 0x68], 0x3c2032
lea rcx, [rsp + 0x60]
call fcn.140008f70
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdi + r8], 0
jne 0x140004342
mov rdx, rdi
lea rcx, [rbp]
call fcn.14000d5f0
nop
mov dword [rsp + 0x28], 0x3d25252e
mov dword [rsp + 0x2c], 0x253b2121
mov dword [rsp + 0x30], 0x3f213d79
xor eax, eax
mov byte [rsp + 0x34], al
lea rcx, [rsp + 0x28]
call fcn.140008fa0
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0x20]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x1400043a0
mov rdx, rdi
lea rcx, [rbp + 0x20]
call fcn.14000d5f0
nop
mov dword [rsp + 0x48], 0x3d25252e
mov dword [rsp + 0x4c], 0x253b2121
mov dword [rsp + 0x50], 0x223c7634
mov word [rsp + 0x54], 0x3e
lea rcx, [rsp + 0x48]
call fcn.140009030
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0x40]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x140004400
mov rdx, rdi
lea rcx, [rbp + 0x40]
call fcn.14000d5f0
nop
mov dword [rsp + 0x60], 0x373d3929
mov dword [rsp + 0x64], 0x783b3b3e
mov dword [rsp + 0x68], 0x3c2032
lea rcx, [rsp + 0x60]
call fcn.140008f70
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0x60]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdi + r8], 0
jne 0x140004452
mov rdx, rdi
lea rcx, [rbp + 0x60]
call fcn.14000d5f0
nop
mov dword [rsp + 0x48], 0x313e223f
mov dword [rsp + 0x4c], 0x783b3b3e
mov dword [rsp + 0x50], 0x3c2032
lea rcx, [rsp + 0x48]
call fcn.140008f70
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0x80]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x1400044b0
mov rdx, rdi
lea rcx, [rbp + 0x80]
call fcn.14000d5f0
nop
mov dword [rsp + 0x60], 0x3f36353d
mov dword [rsp + 0x64], 0x337b3a3c
mov word [rsp + 0x68], 0x3d2f
xor eax, eax
mov byte [rsp + 0x6a], al
lea rcx, [rsp + 0x60]
call fcn.140009060
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0xa0]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x140004510
mov rdx, rdi
lea rcx, [rbp + 0xa0]
call fcn.14000d5f0
nop
mov dword [rsp + 0x28], 0x313e223f
mov dword [rsp + 0x2c], 0x78252c36
mov dword [rsp + 0x30], 0x3c2032
lea rcx, [rsp + 0x28]
call fcn.140008f70
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0xc0]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x140004570
mov rdx, rdi
lea rcx, [rbp + 0xc0]
call fcn.14000d5f0
nop
mov dword [rsp + 0x48], 0x23303426
mov dword [rsp + 0x4c], 0x332d317d
xor eax, eax
mov byte [rsp + 0x50], al
lea rcx, [rsp + 0x48]
call fcn.140009090
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0xe0]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdi + r8], 0
jne 0x1400045c6
mov rdx, rdi
lea rcx, [rbp + 0xe0]
call fcn.14000d5f0
nop
mov dword [rsp + 0x60], 0x23303426
mov dword [rsp + 0x64], 0x337b6065
mov word [rsp + 0x68], 0x3d2f
xor eax, eax
mov byte [rsp + 0x6a], al
lea rcx, [rsp + 0x60]
call fcn.140009060
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0x100]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdi + r8], 0
jne 0x140004623
mov rdx, rdi
lea rcx, [rbp + 0x100]
call fcn.14000d5f0
nop
mov dword [rsp + 0x48], 0x7c303426
mov dword [rsp + 0x4c], 0x302c36
lea rcx, [rsp + 0x48]
call fcn.140008fd0
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0x120]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdi + r8], 0
jne 0x140004673
mov rdx, rdi
lea rcx, [rbp + 0x120]
call fcn.14000d5f0
nop
movdqa xmm0, xmmword [0x140084640]
movdqu xmmword [rsp + 0x28], xmm0
mov dword [rsp + 0x38], 0x56570d2c
mov dword [rsp + 0x3c], 0x31d014d
xor eax, eax
mov byte [rsp + 0x40], al
lea rcx, [rsp + 0x28]
call fcn.140008e10
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0x140]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x1400046e0
mov rdx, rdi
lea rcx, [rbp + 0x140]
call fcn.14000d5f0
nop
movdqa xmm0, xmmword [0x140084640]
movdqu xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x70], 0x56570d2c
mov dword [rsp + 0x74], 0x31d014d
xor eax, eax
mov byte [rsp + 0x78], al
lea rcx, [rsp + 0x60]
call fcn.140008e10
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0x160]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdi + r8], 0
jne 0x140004744
mov rdx, rdi
lea rcx, [rbp + 0x160]
call fcn.14000d5f0
nop
mov dword [rsp + 0x48], 0x64303426
mov dword [rsp + 0x4c], 0x2e307a67
mov word [rsp + 0x50], reloc.WLDAP32.dll_Ordinal_50
lea rcx, [rsp + 0x48]
call fcn.140008ee0
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0x180]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x1400047a0
mov rdx, rdi
lea rcx, [rbp + 0x180]
call fcn.14000d5f0
nop
movdqa xmm0, xmmword [0x1400844e0]
movdqu xmmword [rsp + 0x28], xmm0
mov dword [rsp + 0x38], 0x7190571
xor eax, eax
mov byte [rsp + 0x3c], al
lea rcx, [rsp + 0x28]
call fcn.140008f10
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0x1a0]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x140004800
mov rdx, rdi
lea rcx, [rbp + 0x1a0]
call fcn.14000d5f0
nop
mov dword [rsp + 0x60], 0x37233918
mov dword [rsp + 0x64], 0x24343c20
mov dword [rsp + 0x68], 0x223c763c
mov word [rsp + 0x6c], 0x3e
lea rcx, [rsp + 0x60]
call fcn.140009030
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0x1c0]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdi + r8], 0
jne 0x140004860
mov rdx, rdi
lea rcx, [rbp + 0x1c0]
call fcn.14000d5f0
nop
mov dword [rsp + 0x28], 0x223c252b
mov dword [rsp + 0x2c], 0x78253530
mov dword [rsp + 0x30], 0x3c2032
lea rcx, [rsp + 0x28]
call fcn.140008f70
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0x1e0]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x1400048c0
mov rdx, rdi
lea rcx, [rbp + 0x1e0]
call fcn.14000d5f0
nop
movdqa xmm0, xmmword [0x1400845f0]
movdqu xmmword [rsp + 0x48], xmm0
xor eax, eax
mov byte [rsp + 0x58], al
lea rcx, [rsp + 0x48]
call fcn.140009000
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0x200]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdi + r8], 0
jne 0x140004914
mov rdx, rdi
lea rcx, [rbp + 0x200]
call fcn.14000d5f0
nop
mov dword [rsp + 0x60], 0x3d213d06
mov dword [rsp + 0x64], 0x13072021
mov dword [rsp + 0x68], 0x223c7614
mov word [rsp + 0x6c], 0x3e
lea rcx, [rsp + 0x60]
call fcn.140009030
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0x220]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdi + r8], 0
jne 0x140004973
mov rdx, rdi
lea rcx, [rbp + 0x220]
call fcn.14000d5f0
nop
mov dword [rsp + 0x28], 0x3d05151f
mov dword [rsp + 0x2c], 0x7826383c
mov dword [rsp + 0x30], 0x3c2032
lea rcx, [rsp + 0x28]
call fcn.140008f70
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0x240]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x1400049d0
mov rdx, rdi
lea rcx, [rbp + 0x240]
call fcn.14000d5f0
nop
mov dword [rsp + 0x60], 0x36233f03
mov dword [rsp + 0x64], 0x337b1103
mov word [rsp + 0x68], 0x3d2f
xor eax, eax
mov byte [rsp + 0x6a], al
lea rcx, [rsp + 0x60]
call fcn.140009060
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0x260]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x140004a30
mov rdx, rdi
lea rcx, [rbp + 0x260]
call fcn.14000d5f0
nop
mov dword [rsp + 0x28], 0x223c252b
mov dword [rsp + 0x2c], 0x78253530
mov dword [rsp + 0x30], 0x3c2032
lea rcx, [rsp + 0x28]
call fcn.140008f70
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0x280]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x140004a90
mov rdx, rdi
lea rcx, [rbp + 0x280]
call fcn.14000d5f0
nop
movdqa xmm0, xmmword [0x1400845e0]
movdqu xmmword [rsp + 0x60], xmm0
xor eax, eax
mov byte [rsp + 0x70], al
lea rcx, [rsp + 0x60]
call fcn.140009000
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0x2a0]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdi + r8], 0
jne 0x140004ae4
mov rdx, rdi
lea rcx, [rbp + 0x2a0]
call fcn.14000d5f0
nop
movdqa xmm0, xmmword [0x140084450]
movdqu xmmword [rsp + 0x28], xmm0
mov word [rsp + 0x38], Ordinal_60
lea rcx, [rsp + 0x28]
call fcn.140008de0
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0x2c0]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x140004b40
mov rdx, rdi
lea rcx, [rbp + 0x2c0]
call fcn.14000d5f0
nop
movdqa xmm0, xmmword [0x1400843a0]
movdqu xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.140008db0
mov rdi, rax
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0x2e0]
call fcn.140001ab0
nop
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdi + r8], 0
jne 0x140004b90
mov rdx, rdi
lea rcx, [rbp + 0x2e0]
call fcn.14000d5f0
nop
mov dword [rsp + 0x28], 0x34383e3c
mov dword [rsp + 0x2c], 0x3f3d0b35
mov dword [rsp + 0x30], 0x223c7623
mov word [rsp + 0x34], 0x3e
lea rcx, [rsp + 0x28]
call fcn.140009030
mov rdx, rax
lea rcx, [rbp + 0x300]
call fcn.140009390
nop
mov dword [rsp + 0x60], 0x363f3938
mov dword [rsp + 0x64], 0x337b3331
mov word [rsp + 0x68], 0x3d2f
xor eax, eax
mov byte [rsp + 0x6a], al
lea rcx, [rsp + 0x60]
call fcn.140009060
mov rdx, rax
lea rcx, [rbp + 0x320]
call fcn.140009390
nop
movdqa xmm0, xmmword [0x140084470]
movdqu xmmword [rsp + 0x28], xmm0
mov word [rsp + 0x38], Ordinal_60
lea rcx, [rsp + 0x28]
call fcn.140008de0
mov rdx, rax
lea rcx, [rbp + 0x340]
call fcn.140009390
nop
movdqa xmm0, xmmword [0x140084600]
movdqu xmmword [rsp + 0x60], xmm0
xor eax, eax
mov byte [rsp + 0x70], al
lea rcx, [rsp + 0x60]
call fcn.140009000
mov rdx, rax
lea rcx, [rbp + 0x360]
call fcn.140009390
nop
mov dword [rsp + 0x28], 0x36353929
mov dword [rsp + 0x2c], 0x7827313f
mov dword [rsp + 0x30], 0x3c2032
lea rcx, [rsp + 0x28]
call fcn.140008f70
mov rdx, rax
lea rcx, [rbp + 0x380]
call fcn.140009390
nop
movdqa xmm0, xmmword [0x140084460]
movdqu xmmword [rsp + 0x48], xmm0
mov word [rsp + 0x58], Ordinal_60
lea rcx, [rsp + 0x48]
call fcn.140008de0
mov rdx, rax
lea rcx, [rbp + 0x3a0]
call fcn.140009390
nop
mov dword [rsp + 0x60], 0x250e263b
mov dword [rsp + 0x64], 0x337b6660
mov word [rsp + 0x68], 0x3d2f
xor eax, eax
mov byte [rsp + 0x6a], al
lea rcx, [rsp + 0x60]
call fcn.140009060
mov rdx, rax
lea rcx, [rbp + 0x3c0]
call fcn.140009390
nop
mov dword [rsp + 0x48], 0x2a0e263b
mov dword [rsp + 0x4c], 0x337b6065
mov word [rsp + 0x50], 0x3d2f
xor eax, eax
mov byte [rsp + 0x52], al
lea rcx, [rsp + 0x48]
call fcn.140009060
mov rdx, rax
lea rcx, [rbp + 0x3e0]
call fcn.140009390
nop
mov dword [rsp + 0x28], 0x2030380c
mov dword [rsp + 0x2c], 0x7826313f
mov dword [rsp + 0x30], 0x3c2032
lea rcx, [rsp + 0x28]
call fcn.140008f70
mov rdx, rax
lea rcx, [rbp + 0x400]
call fcn.140009390
nop
movdqa xmm0, xmmword [0x140084630]
movdqu xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x70], 0x7190571
xor eax, eax
mov byte [rsp + 0x74], al
lea rcx, [rsp + 0x60]
call fcn.140008f10
mov rdx, rax
lea rcx, [rbp + 0x420]
call fcn.140009390
nop
movdqa xmm0, xmmword [0x1400843f0]
movdqu xmmword [rsp + 0x28], xmm0
mov dword [rsp + 0x38], 0x1a044e68
mov word [rsp + 0x3c], 6
lea rcx, [rsp + 0x28]
call fcn.140008d80
mov rdx, rax
lea rcx, [rbp + 0x440]
call fcn.140009390
nop
nop word [rax + rax]
movsxd rax, ebx
shl rax, 5
lea rdi, [rbp - 0x80]
add rdi, rax
mov rcx, rdi
call fcn.140009270
mov rcx, rax
call fcn.1400040c0
test eax, eax
jne 0x140004e20
inc ebx
cmp ebx, 0x27
jl 0x140004df0
xor bl, bl
jmp 0x140004ef6
mov rcx, rdi
call fcn.140009270
mov rcx, rax
call fcn.1400040c0
mov ecx, eax
mov edx, 0x800
call fcn.140002580
mov rcx, rax
call fcn.1400026b0
movzx ebx, al
mov rcx, rdi
call fcn.140009270
mov rcx, rax
call fcn.1400040c0
mov ecx, eax
mov edx, 1
call fcn.140002580
mov rcx, rax
call fcn.140002630
movzx esi, al
movdqa xmm0, xmmword [0x1400846d0]
movdqu xmmword [rsp + 0x28], xmm0
xor eax, eax
mov byte [rsp + 0x38], al
lea rcx, [rsp + 0x28]
call fcn.140009000
mov rdx, rax
mov r8, rdi
lea rcx, [rsp + 0x60]
call fcn.14000be90
mov rdx, rax
lea rcx, [0x140091040]
call fcn.14001d470
test bl, bl
jne 0x140004ef4
test sil, sil
jne 0x140004ef4
movdqa xmm0, xmmword [0x140084620]
movdqu xmmword [rsp + 0x28], xmm0
mov word [rsp + 0x38], 0x132c
xor eax, eax
mov byte [rsp + 0x3a], al
lea rcx, [rsp + 0x28]
call fcn.1400091a0
mov rcx, rax
xor r8d, r8d
lea rdx, [r8 - 1]
call fcn.140009cd0
test eax, eax
jns 0x140004ef4
mov byte [0], sil
mov bl, 1
lea r9, [fcn.140009300]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea r8d, [rdx + 7]
lea rcx, [rbp - 0x80]
call fcn.140071b58
movzx eax, bl
mov rcx, qword [rbp + 0x460]
xor rcx, rsp
call fcn.140071860
lea r11, [rsp + 0x570]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret