Function at 0x140003b30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
jmp 0x140003b30
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
push rdi
sub rsp, 0x548
mov rdi, rsp
movabs rcx, 0x152
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x560]
mov qword [rsp + 0x480], 0xfffffffffffffffe
mov rax, qword [0x1402e1aa8]
xor rax, rsp
mov qword [rsp + 0x530], rax
mov byte [rsp + 0x38], 0x4e
mov byte [rsp + 0x39], 0x43
mov byte [rsp + 0x3a], 0x4f
mov byte [rsp + 0x3b], 0x52
mov byte [rsp + 0x3c], 0x51
mov byte [rsp + 0x3d], 0x56
mov byte [rsp + 0x3e], 0x46
mov byte [rsp + 0x3f], 0x4e
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x64], 0x56
mov byte [rsp + 0x65], 0x4f
mov byte [rsp + 0x66], 0x6a
mov byte [rsp + 0x67], 0x59
mov byte [rsp + 0x68], 0x75
mov byte [rsp + 0x69], 0
mov byte [rsp + 0x84], VarCyFromDisp
mov byte [rsp + 0x85], 0x76
mov byte [rsp + 0x86], 0x47
mov byte [rsp + 0x87], 0x77
mov byte [rsp + 0x88], reloc.OLEAUT32.dll_VarBstrFromDisp
mov byte [rsp + 0x89], VarCyFromDisp
mov byte [rsp + 0x8a], 0
mov byte [rsp + 0xa4], 0x75
mov byte [rsp + 0xa5], VarCyFromDisp
mov byte [rsp + 0xa6], 0x44
mov byte [rsp + 0xa7], VarDateFromDisp
mov byte [rsp + 0xa8], VarDateFromDisp
mov byte [rsp + 0xa9], VarCyFromDisp
mov byte [rsp + 0xaa], 0
mov byte [rsp + 0xc8], 0x47
mov byte [rsp + 0xc9], VarCyFromDisp
mov byte [rsp + 0xca], 0x77
mov byte [rsp + 0xcb], 0x54
mov byte [rsp + 0xcc], 0x69
mov byte [rsp + 0xcd], 0x76
mov byte [rsp + 0xce], reloc.OLEAUT32.dll_VarCyFromDisp
mov byte [rsp + 0xcf], 0x45
mov byte [rsp + 0xd0], 0x74
mov byte [rsp + 0xd1], VarCyFromDisp
mov byte [rsp + 0xd2], 0x55
mov byte [rsp + 0xd3], VarCyFromDisp
mov byte [rsp + 0xd4], 0x50
mov byte [rsp + 0xd5], 0
mov byte [rsp + 0xf8], 0x50
mov byte [rsp + 0xf9], VarCyFromDisp
mov byte [rsp + 0xfa], 0x51
mov byte [rsp + 0xfb], 0x46
mov byte [rsp + 0xfc], 0x54
mov byte [rsp + 0xfd], reloc.OLEAUT32.dll_VarBstrFromDisp
mov byte [rsp + 0xfe], 0x75
mov byte [rsp + 0xff], 0x75
mov byte [rsp + 0x100], 0
lea rax, [rsp + 0x258]
mov qword [rsp + 0x288], rax
lea rax, [rsp + 0x290]
mov qword [rsp + 0x2c0], rax
lea rax, [rsp + 0x1e8]
mov qword [rsp + 0x218], rax
lea rax, [rsp + 0x220]
mov qword [rsp + 0x250], rax
lea rdx, [rsp + 0x64]
mov rcx, qword [rsp + 0x288]
call fcn.14000102d
mov qword [rsp + 0x488], rax
mov rax, qword [rsp + 0x488]
mov qword [rsp + 0x490], rax
lea rdx, [rsp + 0x38]
mov rcx, qword [rsp + 0x2c0]
call fcn.14000102d
mov qword [rsp + 0x498], rax
mov r9d, 0x2e5
mov r8, qword [rsp + 0x490]
mov rdx, qword [rsp + 0x498]
lea rcx, [rsp + 0x2c8]
call fcn.14000125d
mov qword [rsp + 0x4a0], rax
mov rax, qword [rsp + 0x4a0]
mov qword [rsp + 0x4a8], rax
mov rcx, qword [rsp + 0x4a8]
call fcn.140001005
mov rbx, rax
lea rdx, [rsp + 0xf8]
mov rcx, qword [rsp + 0x218]
call fcn.14000102d
mov qword [rsp + 0x4b0], rax
mov rax, qword [rsp + 0x4b0]
mov qword [rsp + 0x4b8], rax
lea rdx, [rsp + 0xc8]
mov rcx, qword [rsp + 0x250]
call fcn.14000102d
mov qword [rsp + 0x4c0], rax
mov r9d, 0x141
mov r8, qword [rsp + 0x4b8]
mov rdx, qword [rsp + 0x4c0]
mov rcx, qword [rsp + 0x560]
call fcn.140001389
mov r11, rax
lea rax, [rsp + 0x128]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rdx, rbx
mov rcx, 0xffffffff80000001
call r11
test eax, eax
je 0x140003e63
mov dword [rsp + 0x4c8], 1
jmp 0x140003e6e
mov dword [rsp + 0x4c8], 0
movzx eax, byte [rsp + 0x4c8]
mov byte [rsp + 0x1e0], al
lea rcx, [rsp + 0x2c8]
call fcn.1400013bb
movzx r11d, byte [rsp + 0x1e0]
test r11d, r11d
je 0x140003e9f
xor eax, eax
jmp 0x140004243
mov byte [rsp + 0x148], 0x44
mov byte [rsp + 0x149], VarCyFromDisp
mov byte [rsp + reloc.OLEAUT32.dll_VarUdateFromDate], 0x75
mov byte [rsp + reloc.OLEAUT32.dll_GetAltMonthNames], 0x48
mov byte [rsp + 0x14c], VarBstrFromDate
mov byte [rsp + 0x14d], reloc.OLEAUT32.dll_VarBstrFromDisp
mov byte [rsp + 0x14e], 0x48
mov byte [rsp + 0x14f], 0x78
mov byte [rsp + 0x150], 0x7a
mov byte [rsp + 0x151], VarBstrFromDate
mov byte [rsp + 0x152], VarBstrFromDate
mov byte [rsp + 0x153], 0x43
mov byte [rsp + 0x154], VarBstrFromDate
mov byte [rsp + 0x155], 0x54
mov byte [rsp + 0x156], 0
mov byte [rsp + 0x174], VarBstrFromDate
mov byte [rsp + 0x175], 0x78
mov byte [rsp + 0x176], 0x4f
mov byte [rsp + 0x177], 0x50
mov byte [rsp + 0x178], 0x49
mov byte [rsp + 0x179], 0x79
mov byte [rsp + 0x17a], 0
lea rax, [rsp + 0x370]
mov qword [rsp + 0x3a0], rax
lea rax, [rsp + 0x3a8]
mov qword [rsp + 0x3d8], rax
lea rax, [rsp + 0x300]
mov qword [rsp + 0x330], rax
lea rax, [rsp + 0x338]
mov qword [rsp + 0x368], rax
lea rdx, [rsp + 0xa4]
mov rcx, qword [rsp + 0x3a0]
call fcn.14000102d
mov qword [rsp + 0x4d0], rax
mov rax, qword [rsp + 0x4d0]
mov qword [rsp + 0x4d8], rax
lea rdx, [rsp + 0x84]
mov rcx, qword [rsp + 0x3d8]
call fcn.14000102d
mov qword [rsp + 0x4e0], rax
mov r9d, 0x37
mov r8, qword [rsp + 0x4d8]
mov rdx, qword [rsp + 0x4e0]
lea rcx, [rsp + 0x3e0]
call fcn.14000125d
mov qword [rsp + 0x4e8], rax
mov rax, qword [rsp + 0x4e8]
mov qword [rsp + 0x4f0], rax
mov rcx, qword [rsp + 0x4f0]
call fcn.140001005
mov rbx, rax
lea rdx, [rsp + 0x174]
mov rcx, qword [rsp + 0x330]
call fcn.14000102d
mov qword [rsp + 0x4f8], rax
mov rax, qword [rsp + 0x4f8]
mov qword [rsp + 0x500], rax
lea rdx, [rsp + 0x148]
mov rcx, qword [rsp + 0x368]
call fcn.14000102d
mov qword [rsp + 0x508], rax
mov r9d, 0x4a
mov r8, qword [rsp + 0x500]
mov rdx, qword [rsp + 0x508]
mov rcx, qword [rsp + 0x560]
call fcn.140001389
mov r11, rax
mov rax, qword [rsp + 0x568]
mov eax, dword [rax + 8]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x568]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov r9d, 3
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [rsp + 0x128]
call r11
test eax, eax
je 0x1400040db
mov dword [rsp + 0x510], 1
jmp 0x1400040e6
mov dword [rsp + 0x510], 0
movzx eax, byte [rsp + 0x510]
mov byte [rsp + 0x2f8], al
lea rcx, [rsp + 0x3e0]
call fcn.1400013bb
movzx r11d, byte [rsp + 0x2f8]
test r11d, r11d
je 0x140004117
xor eax, eax
jmp 0x140004243
mov byte [rsp + 0x198], VarDateFromDisp
mov byte [rsp + 0x199], 0x76
mov byte [rsp + 0x19a], 0x74
mov byte [rsp + 0x19b], 0x53
mov byte [rsp + 0x19c], reloc.OLEAUT32.dll_VarCyFromDisp
mov byte [rsp + 0x19d], 0x77
mov byte [rsp + 0x19e], VarBstrFromDate
mov byte [rsp + 0x19f], reloc.OLEAUT32.dll_VarBstrFromDisp
mov byte [rsp + 0x1a0], 0x41
mov byte [rsp + 0x1a1], VarCyFromDisp
mov byte [rsp + 0x1a2], VarCyFromDisp
mov byte [rsp + 0x1a3], 0
mov byte [rsp + 0x1c4], 0x69
mov byte [rsp + 0x1c5], reloc.OLEAUT32.dll_VarBstrFromDisp
mov byte [rsp + 0x1c6], VarBstrFromDate
mov byte [rsp + 0x1c7], 0x51
mov byte [rsp + 0x1c8], 0x77
mov byte [rsp + 0x1c9], 0
lea rax, [rsp + 0x410]
mov qword [rsp + 0x440], rax
lea rax, [rsp + 0x448]
mov qword [rsp + 0x478], rax
lea rdx, [rsp + 0x1c4]
mov rcx, qword [rsp + 0x440]
call fcn.14000102d
mov qword [rsp + 0x518], rax
mov rax, qword [rsp + 0x518]
mov qword [rsp + 0x520], rax
lea rdx, [rsp + 0x198]
mov rcx, qword [rsp + 0x478]
call fcn.14000102d
mov qword [rsp + 0x528], rax
mov r9d, 0x40
mov r8, qword [rsp + 0x520]
mov rdx, qword [rsp + 0x528]
mov rcx, qword [rsp + 0x560]
call fcn.140001389
mov rcx, qword [rsp + 0x128]
call rax
mov eax, 1
mov rdi, rax
mov rcx, rsp
lea rdx, [0x140253190]
call fcn.14014e6c0
mov rax, rdi
mov rcx, qword [rsp + 0x530]
xor rcx, rsp
call fcn.14014fec0
add rsp, 0x548
pop rdi
pop rbx
ret