Function at 0x405f70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov r11, rsp
sub rsp, 0x238
mov qword [rsp + 0xe8], 0xfffffffffffffffe
mov qword [r11 + 0x18], rbx
mov qword [r11 + 0x20], rbp
mov qword [r11 - 8], rsi
mov qword [r11 - 0x10], rdi
mov qword [r11 - 0x18], r12
mov rax, qword [0x00419040]
xor rax, rsp
mov qword [rsp + 0x218], rax
mov word [r11 - 0x60], 0x4b
mov word [r11 - 0x5e], 0x62
mov word [r11 - 0x5c], 0x69
mov word [r11 - 0x5a], 0x65
mov word [r11 - 0x58], 0x65
mov word [r11 - 0x56], 0x69
mov word [r11 - 0x54], 0x33
mov word [r11 - 0x52], 0x32
mov word [r11 - 0x50], 0x2e
mov word [r11 - 0x4e], 0x75
mov word [r11 - 0x4c], 0x63
mov word [r11 - 0x4a], 0x6c
mov word [r11 - 0x48], 0
mov word [rsp + 0x190], 0x61
mov word [rsp + 0x192], 0x78
mov word [rsp + 0x194], 0x72
mov word [rsp + 0x196], 0x72
mov word [rsp + 0x198], 0
lea rax, [rsp + 0x48]
mov qword [r11 - 0x178], rax
mov edx, 7
mov qword [rsp + 0x68], rdx
xor esi, esi
mov r8, rsi
mov qword [rsp + 0x60], rsi
mov word [rsp + 0x50], si
xor eax, eax
mov r12, 0xffffffffffffffff
mov rcx, r12
lea rdi, [r11 - 0xa8]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov rbx, rcx
movabs rbp, 0x7ffffffffffffffe
cmp rcx, rbp
jbe 0x40609c
call fcn.00410510
mov rdx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x60]
cmp rdx, rbx
jae 0x4060b5
mov rdx, rbx
lea rcx, [rsp + 0x48]
call fcn.00407f40
mov rdx, qword [rsp + 0x68]
jmp 0x4060d3
test rbx, rbx
jne 0x4060d3
mov qword [rsp + 0x60], rsi
lea rax, [rsp + 0x50]
cmp rdx, 8
cmovae rax, qword [rsp + 0x50]
mov word [rax], si
jmp 0x406118
test rbx, rbx
je 0x406118
lea rcx, [rsp + 0x50]
cmp rdx, 8
cmovae rcx, qword [rsp + 0x50]
lea rdi, [rbx + rbx]
add rdx, rdx
mov r9, rdi
lea r8, [rsp + 0x190]
call fcn.00408f60
mov qword [rsp + 0x60], rbx
lea rax, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rax, qword [rsp + 0x50]
mov word [rax + rdi], si
mov edx, 7
mov qword [rsp + 0x40], rdx
mov r8, rsi
mov qword [rsp + 0x38], rsi
mov word [rsp + 0x28], r8w
xor eax, eax
mov rcx, r12
lea rdi, [rsp + 0x1d8]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov rbx, rcx
cmp rcx, rbp
jbe 0x40615e
call fcn.00410510
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x38]
cmp rdx, rbx
jae 0x406177
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.00407f40
mov rdx, qword [rsp + 0x40]
jmp 0x406195
test rbx, rbx
jne 0x406195
mov qword [rsp + 0x38], rsi
lea rax, [rsp + 0x28]
cmp rdx, 8
cmovae rax, qword [rsp + 0x28]
mov word [rax], bx
jmp 0x4061dc
test rbx, rbx
je 0x4061dc
lea rcx, [rsp + 0x28]
cmp rdx, 8
cmovae rcx, qword [rsp + 0x28]
lea rdi, [rbx + rbx]
add rdx, rdx
mov r9, rdi
lea r8, [rsp + 0x1d8]
call fcn.00408f60
mov qword [rsp + 0x38], rbx
lea rax, [rsp + 0x28]
cmp qword [rsp + 0x40], 8
cmovae rax, qword [rsp + 0x28]
mov word [rax + rdi], 0
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x168]
call fcn.00401270
nop
mov word [rsp + 0x1f8], 0x57
mov word [rsp + 0x1fa], 0x69
mov word [rsp + 0x1fc], 0x6f
mov word [rsp + 0x1fe], 0x75
mov word [rsp + 0x200], 0x7a
mov word [rsp + 0x202], 0x65
mov word [rsp + 0x204], 0x33
mov word [rsp + 0x206], 0x32
mov word [rsp + 0x208], 0x2e
mov word [rsp + 0x20a], 0x69
mov word [rsp + 0x20c], 0x65
mov word [rsp + 0x20e], 0x66
mov word [rsp + 0x210], 0
mov word [rsp + 0x1a0], 0x77
mov word [rsp + 0x1a2], 0x66
mov word [rsp + 0x1a4], 0x74
mov word [rsp + 0x1a6], 0x55
mov word [rsp + 0x1a8], 0x4b
mov word [rsp + 0x1aa], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0xc0], rax
mov edx, 7
mov qword [rsp + 0x90], rdx
mov r8, rsi
mov qword [rsp + 0x88], rsi
mov word [rsp + 0x78], r8w
xor eax, eax
mov rcx, r12
lea rdi, [rsp + 0x1a0]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov rbx, rcx
cmp rcx, rbp
jbe 0x406311
call fcn.00410510
mov rdx, qword [rsp + 0x90]
mov r8, qword [rsp + 0x88]
cmp rdx, rbx
jae 0x40632d
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.00407f40
mov rdx, qword [rsp + 0x90]
jmp 0x40634e
test rbx, rbx
jne 0x40634e
mov qword [rsp + 0x88], rsi
lea rax, [rsp + 0x78]
cmp rdx, 8
cmovae rax, qword [rsp + 0x78]
mov word [rax], bx
jmp 0x40639b
test rbx, rbx
je 0x40639b
lea rcx, [rsp + 0x78]
cmp rdx, 8
cmovae rcx, qword [rsp + 0x78]
lea rdi, [rbx + rbx]
add rdx, rdx
mov r9, rdi
lea r8, [rsp + 0x1a0]
call fcn.00408f60
mov qword [rsp + 0x88], rbx
lea rax, [rsp + 0x78]
cmp qword [rsp + 0x90], 8
cmovae rax, qword [rsp + 0x78]
mov word [rdi + rax], 0
mov edx, 7
mov qword [rsp + 0xb8], rdx
mov r8, rsi
mov qword [rsp + 0xb0], rsi
mov word [rsp + 0xa0], r8w
xor eax, eax
mov rcx, r12
lea rdi, [rsp + 0x1f8]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov rbx, rcx
cmp rcx, rbp
jbe 0x4063f0
call fcn.00410510
mov rdx, qword [rsp + 0xb8]
mov r8, qword [rsp + 0xb0]
cmp rdx, rbx
jae 0x40640f
mov rdx, rbx
lea rcx, [rsp + 0x98]
call fcn.00407f40
mov rdx, qword [rsp + 0xb8]
jmp 0x406436
test rbx, rbx
jne 0x406436
mov qword [rsp + 0xb0], rsi
lea rax, [rsp + 0xa0]
cmp rdx, 8
cmovae rax, qword [rsp + 0xa0]
mov word [rax], bx
jmp 0x40648f
test rbx, rbx
je 0x40648f
lea rcx, [rsp + 0xa0]
cmp rdx, 8
cmovae rcx, qword [rsp + 0xa0]
lea rdi, [rbx + rbx]
add rdx, rdx
mov r9, rdi
lea r8, [rsp + 0x1f8]
call fcn.00408f60
mov qword [rsp + 0xb0], rbx
lea rax, [rsp + 0xa0]
cmp qword [rsp + 0xb8], 8
cmovae rax, qword [rsp + 0xa0]
mov word [rdi + rax], 0
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x118]
call fcn.00401270
nop
mov word [rsp + 0x1c0], 0x6a
mov word [rsp + 0x1c2], 0x79
mov word [rsp + 0x1c4], 0x66
mov word [rsp + 0x1c6], 0x75
mov word [rsp + 0x1c8], 0x6a
mov word [rsp + 0x1ca], 0x74
mov word [rsp + 0x1cc], 0x63
mov word [rsp + 0x1ce], 0x2e
mov word [rsp + 0x1d0], 0x74
mov word [rsp + 0x1d2], 0x64
mov word [rsp + 0x1d4], 0x79
mov word [rsp + 0x1d6], 0
mov word [rsp + 0x1b0], 0x6e
mov word [rsp + 0x1b2], 0x51
mov word [rsp + 0x1b4], 0x73
mov word [rsp + 0x1b6], 0x6e
mov word [rsp + 0x1b8], 0x71
mov word [rsp + 0x1ba], 0x41
mov word [rsp + 0x1bc], 0
lea rax, [rsp + 0x48]
mov qword [rsp + 0xc0], rax
mov edx, 7
mov qword [rsp + 0x68], rdx
mov r8, rsi
mov qword [rsp + 0x60], rsi
mov word [rsp + 0x50], r8w
xor eax, eax
mov rcx, r12
lea rdi, [rsp + 0x1b0]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov rbx, rcx
cmp rcx, rbp
jbe 0x4065bb
call fcn.00410510
mov rdx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x60]
cmp rdx, rbx
jae 0x4065d4
mov rdx, rbx
lea rcx, [rsp + 0x48]
call fcn.00407f40
mov rdx, qword [rsp + 0x68]
jmp 0x4065f2
test rbx, rbx
jne 0x4065f2
mov qword [rsp + 0x60], rsi
lea rax, [rsp + 0x50]
cmp rdx, 8
cmovae rax, qword [rsp + 0x50]
mov word [rax], bx
jmp 0x406639
test rbx, rbx
je 0x406639
lea rcx, [rsp + 0x50]
cmp rdx, 8
cmovae rcx, qword [rsp + 0x50]
lea rdi, [rbx + rbx]
add rdx, rdx
mov r9, rdi
lea r8, [rsp + 0x1b0]
call fcn.00408f60
mov qword [rsp + 0x60], rbx
lea rax, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rax, qword [rsp + 0x50]
mov word [rax + rdi], 0
mov edx, 7
mov qword [rsp + 0x40], rdx
mov r8, rsi
mov qword [rsp + 0x38], rsi
mov word [rsp + 0x28], r8w
xor eax, eax
mov rcx, r12
lea rdi, [rsp + 0x1c0]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov rbx, rcx
cmp rcx, rbp
jbe 0x40667f
call fcn.00410510
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x38]
cmp rdx, rbx
jae 0x406698
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.00407f40
mov rdx, qword [rsp + 0x40]
jmp 0x4066b6
test rbx, rbx
jne 0x4066b6
mov qword [rsp + 0x38], rsi
lea rax, [rsp + 0x28]
cmp rdx, 8
cmovae rax, qword [rsp + 0x28]
mov word [rax], bx
jmp 0x4066fd
test rbx, rbx
je 0x4066fd
lea rcx, [rsp + 0x28]
cmp rdx, 8
cmovae rcx, qword [rsp + 0x28]
lea rdi, [rbx + rbx]
add rdx, rdx
mov r9, rdi
lea r8, [rsp + 0x1c0]
call fcn.00408f60
mov qword [rsp + 0x38], rbx
lea rax, [rsp + 0x28]
cmp qword [rsp + 0x40], 8
cmovae rax, qword [rsp + 0x28]
mov word [rax + rdi], 0
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x140]
call fcn.00401270
nop
lea rcx, [rsp + 0x170]
cmp qword [rsp + 0x188], 0x10
cmovae rcx, qword [rsp + 0x170]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdx, rax
lea rcx, [rsp + 0xf0]
call fcn.00401bf0
nop
mov r11, qword [rsp + 0x110]
mov rbx, qword [rsp + 0xf8]
mov r9, qword [rsp + 0x108]
test r9, r9
je 0x406a7c
cmp r9, 3
jb 0x406a7c
add r9, 0xfffffffffffffffe
lea r10, [rsp + 0xf8]
cmp r11, 8
cmovae r10, rbx
nop
nop
nop
mov rax, r9
mov rdx, r10
test r9, r9
je 0x406a7c
nop
cmp word [rdx], 0x74
je 0x4067b6
add rdx, 2
sub rax, 1
je 0x406a7c
jmp 0x4067a0
test rdx, rdx
je 0x406a7c
mov ecx, 3
lea rdi, [0x00414f78]
mov r8, rdx
nop
movzx eax, word [rdi]
cmp word [r8], ax
jne 0x4067e9
add r8, 2
add rdi, 2
sub rcx, 1
je 0x406815
jmp 0x4067d0
mov ecx, 1
cmp word [r8], ax
cmovb ecx, r12d
test ecx, ecx
je 0x406815
mov rcx, rdx
sub rcx, r10
sar rcx, 1
mov rax, r12
sub rax, rcx
add r9, rax
lea r10, [rdx + 2]
jmp 0x406790
lea rax, [rsp + 0xf8]
cmp r11, 8
cmovae rax, rbx
sub rdx, rax
sar rdx, 1
cmp rdx, 0xffffffffffffffff
je 0x406a7c
lea rax, [rsp + 0x98]
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xb8], 7
mov qword [rsp + 0xb0], rsi
mov word [rsp + 0xa0], 0
mov r9, r12
xor r8d, r8d
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x98]
call fcn.00407270
nop
mov qword [rsp + 0x40], 0xf
mov qword [rsp + 0x38], rsi
mov byte [rsp + 0x28], 0
mov r9, r12
xor r8d, r8d
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x20]
call fcn.00407060
lea rdx, [rsp + 0x20]
xor ecx, ecx
call fcn.004019b0
nop
lea r8, [rsp + 0x98]
mov rdx, rax
lea rcx, [rsp + 0xc8]
call fcn.004035d0
nop
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
je 0x40699d
mov rax, qword [rsp + 0xd8]
sub rax, rcx
cmp rax, 0x3e8
jbe 0x40699d
mov qword [rsp + 0x90], 0xf
mov qword [rsp + 0x88], rsi
mov byte [rsp + 0x78], 0
mov r9, r12
xor r8d, r8d
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0x70]
call fcn.00407060
lea rdx, [rsp + 0x70]
xor ecx, ecx
call fcn.004019b0
mov rdi, rax
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x48]
call fcn.00406db0
mov rdx, rdi
mov rcx, rax
call fcn.00404610
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x48]
call fcn.00406db0
mov rdi, rax
lea rcx, [rsp + 0x170]
cmp qword [rsp + 0x188], 0x10
cmovae rcx, qword [rsp + 0x170]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdx, rax
mov rcx, rdi
call fcn.00405580
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
je 0x4069a7
call fcn.00408f50
mov qword [rsp + 0xd0], rsi
mov qword [rsp + 0xd8], rsi
mov qword [rsp + 0xe0], rsi
cmp qword [rsp + 0x110], 8
jb 0x4069d7
mov rcx, qword [rsp + 0xf8]
call fcn.00408f50
mov qword [rsp + 0x110], 7
mov qword [rsp + 0x108], rsi
mov word [rsp + 0xf8], 0
cmp qword [rsp + 0x160], 0x10
jb 0x406a0d
mov rcx, qword [rsp + 0x148]
call fcn.00408f50
mov qword [rsp + 0x160], 0xf
mov qword [rsp + 0x158], rsi
mov byte [rsp + 0x148], 0
cmp qword [rsp + 0x138], 0x10
jb 0x406a41
mov rcx, qword [rsp + 0x120]
call fcn.00408f50
mov qword [rsp + 0x138], 0xf
mov qword [rsp + 0x130], rsi
mov byte [rsp + 0x120], 0
cmp qword [rsp + 0x188], 0x10
jb 0x406a75
mov rcx, qword [rsp + 0x170]
call fcn.00408f50
xor eax, eax
jmp 0x406b2a
cmp r11, 8
jb 0x406a8a
mov rcx, rbx
call fcn.00408f50
mov qword [rsp + 0x110], 7
mov qword [rsp + 0x108], rsi
mov word [rsp + 0xf8], 0
cmp qword [rsp + 0x160], 0x10
jb 0x406ac0
mov rcx, qword [rsp + 0x148]
call fcn.00408f50
mov qword [rsp + 0x160], 0xf
mov qword [rsp + 0x158], rsi
mov byte [rsp + 0x148], 0
cmp qword [rsp + 0x138], 0x10
jb 0x406af4
mov rcx, qword [rsp + 0x120]
call fcn.00408f50
mov qword [rsp + 0x138], 0xf
mov qword [rsp + 0x130], rsi
mov byte [rsp + 0x120], 0
cmp qword [rsp + 0x188], 0x10
jb 0x406b28
mov rcx, qword [rsp + 0x170]
call fcn.00408f50
xor eax, eax
mov rcx, qword [rsp + 0x218]
xor rcx, rsp
call fcn.00408d00
mov rbx, qword [rsp + 0x250]
mov rbp, qword [rsp + 0x258]
mov rsi, qword [rsp + 0x230]
mov rdi, qword [rsp + 0x228]
mov r12, qword [rsp + 0x220]
add rsp, 0x238
ret