Function at 0x1400084b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r15
push rbp
sub rsp, 0x2c0
mov rsi, rdx
mov rax, qword [0x140024c20]
movabs rdx, 0
xor rax, rsp
mov rdi, rcx
mov qword [rsp + 0x2b0], rax
xor ebp, ebp
mov eax, 0x260
mov dword [rsp + 0x2a0], edx
mov qword [rsp + rax + 0x38], rdx
mov qword [rsp + rax + 0x30], rdx
mov qword [rsp + rax + 0x28], rdx
mov qword [rsp + rax + 0x20], rdx
sub rax, 0x20
jne 0x1400084f1
lea rcx, str.ssprsecimpl
mov edx, 1
call fcn.140011da0
mov rbx, rax
mov ecx, 1
mov edx, 6
call qword [sym.imp.MSVCR100.dll_calloc]
mov qword [rsi + 0x150], rax
test rax, rax
je 0x140008ac7
mov rcx, rbx
lea rdx, str.calling_transform_encoding_username_to_code_page
mov qword [rsi + 0x18], 6
add dword [rsi + 4], 6
call fcn.140010c10
mov rax, qword [rdi + 0x178]
xor r12d, r12d
xor edi, edi
mov ecx, 0xfde9
xor edx, edx
mov r9d, 0xffffffff
mov r13, qword [rax + 8]
mov r8, r13
mov qword [rsp + 0x20], 0
xor ebp, ebp
mov dword [rsp + 0x28], 0
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov r15d, eax
test r15d, r15d
je 0x140008627
movsxd rcx, r15d
mov edx, 2
call qword [sym.imp.MSVCR100.dll_calloc]
mov rdi, rax
test rdi, rdi
je 0x140008627
mov ecx, 0xfde9
xor edx, edx
mov r8, r13
mov r9d, 0xffffffff
mov qword [rsp + 0x20], rdi
mov dword [rsp + 0x28], r15d
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
je 0x140008627
xor ecx, ecx
xor eax, eax
xor edx, edx
mov r8, rdi
mov r9d, 0xffffffff
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov r13d, eax
test r13d, r13d
je 0x140008627
movsxd rcx, r13d
mov edx, 1
call qword [sym.imp.MSVCR100.dll_calloc]
mov rbp, rax
test rbp, rbp
jne 0x1400086bb
mov qword [rsp + 0x2a8], 0
call qword [sym.imp.orauts.dll_GetLastError]
mov r12d, eax
mov ecx, 0x1100
xor edx, edx
mov r8d, r12d
mov r9d, 0x400
lea rax, [rsp + 0x2a8]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x30], 0
call qword [sym.imp.KERNEL32.dll_FormatMessageA]
mov r9, qword [rsp + 0x2a8]
test r9, r9
lea rax, [0x14001f414]
lea rcx, [rsp + 0x40]
cmove r9, rax
mov edx, 0x200
lea r8, [0x14001e308]
call qword [sym.imp.MSVCR100.dll__snprintf]
mov rcx, qword [rsp + 0x2a8]
call qword [sym.imp.KERNEL32.dll_LocalFree]
test rbp, rbp
je 0x1400086ec
mov rcx, rbp
call qword [sym.imp.MSVCR100.dll_free]
jmp 0x1400086ec
xor ecx, ecx
xor eax, eax
xor edx, edx
mov r8, rdi
mov r9d, 0xffffffff
mov qword [rsp + 0x20], rbp
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
je 0x140008627
test rdi, rdi
je 0x1400086fa
mov rcx, rdi
call qword [sym.imp.MSVCR100.dll_free]
test r12d, r12d
jne 0x140008968
mov rcx, rbx
lea rdx, str.after_calling_transform_encoding_username_to_code_page
call fcn.140010c10
mov rcx, rbx
lea rdx, str.user_name_is__s_n
mov r8, rbp
call fcn.140010c10
mov rdx, rbp
lea rcx, [rsp + 0x40]
call sub.orawsec12.dll_sswseCheckUserExists
mov r15d, eax
mov rcx, rbx
lea rdx, str.For_user___s__after_calling_check_user_exists_return_is___d__n
mov r8, rbp
mov r9d, r15d
call fcn.140010c10
cmp r15d, 1
je 0x1400088df
cmp r15d, 0xe
je 0x1400088df
cmp r15d, 0xa
je 0x1400088df
test r15d, r15d
jne 0x1400087a0
mov rcx, rbx
lea rdx, str.User___s__does_not_exist_n
mov r8, rbp
mov dword [rsi + 0x100], 0
call fcn.140010c10
mov rax, qword [rsi + 0x150]
mov word [rax + 4], 0x65
mov dword [rax], 0x736c6166
jmp 0x14000890c
mov rcx, rbx
lea rdx, str.error_while_checking_if_User___s__exist_return_value_is__d_n
mov r8, rbp
mov r9d, r15d
call fcn.140010c10
lea rcx, str.ssprsecimpl
mov edx, 1
call fcn.140011da0
mov r13, rax
lea rdx, [rsp + 0x40]
mov rcx, rdx
and rdx, 0xfffffffffffffff0
pxor xmm0, xmm0
pcmpeqb xmm0, xmmword [rdx]
pmovmskb eax, xmm0
and ecx, 0xf
shr eax, cl
bsf eax, eax
jne 0x1400087f6
mov rax, rdx
add rdx, rcx
call fcn.140018880
inc rax
mov ecx, 1
movsxd r12, eax
mov edi, r12d
mov rdx, r12
mov dword [rsi + 0x100], 1
mov qword [rsi + 0x20], r12
add dword [rsi + 4], edi
call qword [sym.imp.MSVCR100.dll_calloc]
mov qword [rsi + 0x158], rax
test rax, rax
je 0x14000894a
mov rcx, rax
lea rdx, [rsp + 0x40]
mov r8, r12
call qword [sym.imp.MSVCR100.dll_strncpy]
lea rdx, [rsp + 0x240]
mov rcx, rdx
and rdx, 0xfffffffffffffff0
pxor xmm0, xmm0
pcmpeqb xmm0, xmmword [rdx]
pmovmskb eax, xmm0
and ecx, 0xf
shr eax, cl
bsf eax, eax
jne 0x14000886f
mov rax, rdx
add rdx, rcx
call fcn.140018880
test rax, rax
jbe 0x1400088c8
mov rdx, qword [rsi + 0x158]
mov rcx, rdx
and rdx, 0xfffffffffffffff0
pxor xmm0, xmm0
pcmpeqb xmm0, xmmword [rdx]
pmovmskb eax, xmm0
and ecx, 0xf
shr eax, cl
bsf eax, eax
jne 0x1400088a3
mov rax, rdx
add rdx, rcx
call fcn.140018880
cmp eax, 0x7ff
jge 0x1400088c8
mov rcx, r13
lea rdx, str._s:other_info:__s_n
lea r8, str.handleMiscErrors
lea r9, [rsp + 0x240]
call fcn.140010c10
mov dword [rsi + 0x104], r15d
test r13, r13
je 0x14000890c
mov rcx, r13
call qword [sym.imp.MSVCR100.dll_fclose]
jmp 0x14000890c
mov rcx, rbx
lea rdx, str.User___s__exists.__n
mov r8, rbp
mov dword [rsi + 0x100], 0
call fcn.140010c10
mov rax, qword [rsi + 0x150]
mov byte [rax + 4], 0
mov dword [rax], 0x65757274
test rbx, rbx
je 0x14000891a
mov rcx, rbx
call qword [sym.imp.MSVCR100.dll_fclose]
test rbp, rbp
je 0x140008928
mov rcx, rbp
call qword [sym.imp.MSVCR100.dll_free]
mov rcx, qword [rsp + 0x2b0]
xor rcx, rsp
call fcn.14001c150
add rsp, 0x2c0
pop rbp
pop r15
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rcx, r13
lea rdx, str._s:failed_to_allocate__d_bytes_of_memory_for_response
lea r8, str.handleMiscErrors
mov r9d, edi
call fcn.140010c10
jmp 0x1400088cf
mov rcx, rbx
lea rdx, str.failed_while_encoding_username_to_code_page
call fcn.140010c10
lea rcx, str.ssprsecimpl
mov edx, 1
call fcn.140011da0
mov rdi, rax
lea rdx, [rsp + 0x40]
mov rcx, rdx
and rdx, 0xfffffffffffffff0
pxor xmm0, xmm0
pcmpeqb xmm0, xmmword [rdx]
pmovmskb eax, xmm0
and ecx, 0xf
shr eax, cl
bsf eax, eax
jne 0x1400089b8
mov rax, rdx
add rdx, rcx
call fcn.140018880
inc rax
mov ecx, 1
movsxd r12, eax
mov r13d, r12d
mov rdx, r12
mov dword [rsi + 0x100], 1
mov qword [rsi + 0x20], r12
add dword [rsi + 4], r13d
call qword [sym.imp.MSVCR100.dll_calloc]
mov qword [rsi + 0x158], rax
test rax, rax
je 0x140008aac
mov rcx, rax
lea rdx, [rsp + 0x40]
mov r8, r12
call qword [sym.imp.MSVCR100.dll_strncpy]
lea rdx, [rsp + 0x240]
mov rcx, rdx
and rdx, 0xfffffffffffffff0
pxor xmm0, xmm0
pcmpeqb xmm0, xmmword [rdx]
pmovmskb eax, xmm0
and ecx, 0xf
shr eax, cl
bsf eax, eax
jne 0x140008a32
mov rax, rdx
add rdx, rcx
call fcn.140018880
test rax, rax
jbe 0x140008a8b
mov rdx, qword [rsi + 0x158]
mov rcx, rdx
and rdx, 0xfffffffffffffff0
pxor xmm0, xmm0
pcmpeqb xmm0, xmmword [rdx]
pmovmskb eax, xmm0
and ecx, 0xf
shr eax, cl
bsf eax, eax
jne 0x140008a66
mov rax, rdx
add rdx, rcx
call fcn.140018880
cmp eax, 0x7ff
jge 0x140008a8b
mov rcx, rdi
lea rdx, str._s:other_info:__s_n
lea r8, str.handleMiscErrors
lea r9, [rsp + 0x240]
call fcn.140010c10
mov dword [rsi + 0x104], 0
test rdi, rdi
je 0x14000890c
mov rcx, rdi
call qword [sym.imp.MSVCR100.dll_fclose]
jmp 0x14000890c
mov rcx, rdi
lea rdx, str._s:failed_to_allocate__d_bytes_of_memory_for_response
lea r8, str.handleMiscErrors
mov r9d, r13d
call fcn.140010c10
jmp 0x140008a95
mov rcx, rbx
lea rdx, str.failed_to_allocate__d_bytes_of_memory_for_response
mov r8d, 6
call fcn.140010c10
mov byte [rsp + 0x5a], 0
mov word [rsp + 0x58], 0x7365
mov dword [rsp + 0x54], 0x74796220
mov dword [rsp + 0x50], 0x36206574
mov dword [rsp + 0x4c], 0x61636f6c
mov dword [rsp + 0x48], 0x6c61206f
mov dword [rsp + 0x44], 0x74206465
mov dword [rsp + 0x40], 0x6c696166
lea rcx, str.ssprsecimpl
mov edx, 1
call fcn.140011da0
mov rdi, rax
lea rdx, [rsp + 0x40]
mov rcx, rdx
and rdx, 0xfffffffffffffff0
pxor xmm0, xmm0
pcmpeqb xmm0, xmmword [rdx]
pmovmskb eax, xmm0
and ecx, 0xf
shr eax, cl
bsf eax, eax
jne 0x140008b59
mov rax, rdx
add rdx, rcx
call fcn.140018880
inc rax
mov ecx, 1
movsxd r12, eax
mov r13d, r12d
mov rdx, r12
mov dword [rsi + 0x100], 1
mov qword [rsi + 0x20], r12
add dword [rsi + 4], r13d
call qword [sym.imp.MSVCR100.dll_calloc]
mov qword [rsi + 0x158], rax
test rax, rax
je 0x140008c4d
mov rcx, rax
lea rdx, [rsp + 0x40]
mov r8, r12
call qword [sym.imp.MSVCR100.dll_strncpy]
lea rdx, [rsp + 0x240]
mov rcx, rdx
and rdx, 0xfffffffffffffff0
pxor xmm0, xmm0
pcmpeqb xmm0, xmmword [rdx]
pmovmskb eax, xmm0
and ecx, 0xf
shr eax, cl
bsf eax, eax
jne 0x140008bd3
mov rax, rdx
add rdx, rcx
call fcn.140018880
test rax, rax
jbe 0x140008c2c
mov rdx, qword [rsi + 0x158]
mov rcx, rdx
and rdx, 0xfffffffffffffff0
pxor xmm0, xmm0
pcmpeqb xmm0, xmmword [rdx]
pmovmskb eax, xmm0
and ecx, 0xf
shr eax, cl
bsf eax, eax
jne 0x140008c07
mov rax, rdx
add rdx, rcx
call fcn.140018880
cmp eax, 0x7ff
jge 0x140008c2c
mov rcx, rdi
lea rdx, str._s:other_info:__s_n
lea r8, str.handleMiscErrors
lea r9, [rsp + 0x240]
call fcn.140010c10
mov dword [rsi + 0x104], 0
test rdi, rdi
je 0x14000890c
mov rcx, rdi
call qword [sym.imp.MSVCR100.dll_fclose]
jmp 0x14000890c
mov rcx, rdi
lea rdx, str._s:failed_to_allocate__d_bytes_of_memory_for_response
lea r8, str.handleMiscErrors
mov r9d, r13d
call fcn.140010c10
jmp 0x140008c36