Function at 0x140001100
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
jmp 0x140001100
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x200
mov rdi, rsp
movabs rcx, 0x80
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x210]
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x20], 0
mov byte [rsp + 0x38], 0x57
mov byte [rsp + 0x39], 0x69
mov byte [rsp + 0x3a], 0x6e
mov byte [rsp + 0x3b], 0x68
mov byte [rsp + 0x3c], 0x74
mov byte [rsp + 0x3d], 0x74
mov byte [rsp + 0x3e], 0x70
mov byte [rsp + 0x3f], 0x2e
mov byte [rsp + 0x40], 0x64
mov byte [rsp + 0x41], 0x6c
mov byte [rsp + 0x42], 0x6c
mov byte [rsp + 0x43], 0
lea rcx, [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rsp + 0x20], rax
mov byte [rsp + 0x68], 0x2f
mov byte [rsp + 0x69], 0xa
mov byte [rsp + 0x6a], 0x1d
mov byte [rsp + 0x6b], 0x30
mov byte [rsp + 0x6c], 0x17
mov byte [rsp + 0x6d], 7
mov byte [rsp + 0x6e], 8
mov byte [rsp + 0x6f], 0x2c
mov byte [rsp + 0x70], 3
mov byte [rsp + 0x71], 0x1d
mov byte [rsp + 0x72], 0xd
mov byte [rsp + 0x73], 0
lea r8, [0x14001aad0]
mov edx, 0xc
lea rcx, [rsp + 0x68]
call fcn.14000100f
lea rdx, [rsp + 0x68]
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r11, rax
mov rax, qword [rsp + 0x210]
mov qword [rax], r11
mov byte [rsp + 0x98], 0x15
mov byte [rsp + 0x99], 0x3f
mov byte [rsp + 0x9a], 8
mov byte [rsp + 0x9b], 0x2c
mov byte [rsp + 0x9c], 0x36
mov byte [rsp + 0x9d], 0x22
mov byte [rsp + 0x9e], 0x16
mov byte [rsp + 0x9f], 0x27
mov byte [rsp + 0xa0], 0x2d
mov byte [rsp + 0xa1], 0x38
mov byte [rsp + 0xa2], 8
mov byte [rsp + 0xa3], 1
mov byte [rsp + 0xa4], 0x21
mov byte [rsp + 0xa5], 0x22
mov byte [rsp + 0xa6], 0
lea r8, str.BVfd
mov edx, 0xf
lea rcx, [rsp + 0x98]
call fcn.14000100f
lea rdx, [rsp + 0x98]
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r11, rax
mov rax, qword [rsp + 0x210]
mov qword [rax + 8], r11
mov byte [rsp + 0xc8], 0x25
mov byte [rsp + 0xc9], 1
mov byte [rsp + 0xca], 4
mov byte [rsp + 0xcb], 0x23
mov byte [rsp + 0xcc], 6
mov byte [rsp + 0xcd], 0x1c
mov byte [rsp + 0xce], 0x1a
mov byte [rsp + 0xcf], 0x24
mov byte [rsp + 0xd0], 2
mov byte [rsp + 0xd1], 0xd
mov byte [rsp + 0xd2], 4
mov byte [rsp + 0xd3], 0x39
mov byte [rsp + 0xd4], 0x17
mov byte [rsp + 0xd5], 0x19
mov byte [rsp + 0xd6], 0x1f
mov byte [rsp + 0xd7], 0xe
mov byte [rsp + 0xd8], 1
mov byte [rsp + 0xd9], 0x1c
mov byte [rsp + 0xda], 0
lea r8, str.rhjk
mov edx, 0x13
lea rcx, [rsp + 0xc8]
call fcn.14000100f
lea rdx, [rsp + 0xc8]
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r11, rax
mov rax, qword [rsp + 0x210]
mov qword [rax + 0x10], r11
mov byte [rsp + 0xf8], 0x2e
mov byte [rsp + 0xf9], 0x1d
mov byte [rsp + 0xfa], 0x1c
mov byte [rsp + 0xfb], 0x2d
mov byte [rsp + 0xfc], 3
mov byte [rsp + 0xfd], 0xd
mov byte [rsp + 0xfe], 4
mov byte [rsp + 0xff], 0x21
mov byte [rsp + 0x100], 0
mov byte [rsp + 0x101], 0x19
mov byte [rsp + 0x102], 0x1d
mov byte [rsp + 0x103], 0x26
mov byte [rsp + 0x104], 0x17
mov byte [rsp + 0x105], 0x14
mov byte [rsp + 0x106], 2
mov byte [rsp + 0x107], 0x1c
mov byte [rsp + 0x108], 7
mov byte [rsp + 0x109], 6
mov byte [rsp + 0x10a], 0
lea r8, str.ytrew
mov edx, 0x13
lea rcx, [rsp + 0xf8]
call fcn.14000100f
lea rdx, [rsp + 0xf8]
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r11, rax
mov rax, qword [rsp + 0x210]
mov qword [rax + 0x18], r11
mov byte [rsp + 0x128], 0x35
mov byte [rsp + 0x129], 7
mov byte [rsp + 0x12a], 3
mov byte [rsp + 0x12b], 0x3e
mov byte [rsp + 0x12c], 0x17
mov byte [rsp + 0x12d], 0xc
mov byte [rsp + 0x12e], 0x12
mov byte [rsp + 0x12f], 0x3c
mov byte [rsp + 0x130], 8
mov byte [rsp + 0x131], 0x15
mov byte [rsp + 0x132], 6
mov byte [rsp + 0x133], 0x11
mov byte [rsp + 0x134], 0x14
mov byte [rsp + 0x135], 0xb
mov byte [rsp + 0x136], 0x3f
mov byte [rsp + 0x137], 0x13
mov byte [rsp + 0x138], 0x10
mov byte [rsp + 0x139], 8
mov byte [rsp + 0x13a], 0xd
mov byte [rsp + 0x13b], 0
mov byte [rsp + 0x13c], 0x1e
mov byte [rsp + 0x13d], 0x13
mov byte [rsp + 0x13e], 0
lea r8, str.bnmvcx
mov edx, 0x17
lea rcx, [rsp + 0x128]
call fcn.14000100f
lea rdx, [rsp + 0x128]
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r11, rax
mov rax, qword [rsp + 0x210]
mov qword [rax + 0x20], r11
mov byte [rsp + 0x158], 0x23
mov byte [rsp + 0x159], 0xf
mov byte [rsp + 0x15a], 9
mov byte [rsp + 0x15b], 0x2d
mov byte [rsp + 0x15c], 0x10
mov byte [rsp + 0x15d], 0
mov byte [rsp + 0x15e], 0x16
mov byte [rsp + 0x15f], 0x36
mov byte [rsp + 0x160], 0x10
mov byte [rsp + 0x161], 1
mov byte [rsp + 0x162], 6
mov byte [rsp + 0x163], 0x1f
mov byte [rsp + 0x164], 0x23
mov byte [rsp + 0x165], 4
mov byte [rsp + 0x166], 0x10
mov byte [rsp + 0x167], 0x15
mov byte [rsp + 0x168], 0x27
mov byte [rsp + 0x169], 0x11
mov byte [rsp + 0x16a], 4
mov byte [rsp + 0x16b], 0xd
mov byte [rsp + 0x16c], 0x18
mov byte [rsp + 0x16d], 7
mov byte [rsp + 0x16e], 5
mov byte [rsp + 0x16f], 9
mov byte [rsp + 0x170], 1
mov byte [rsp + 0x171], 0
lea r8, str.tfged
mov edx, 0x1a
lea rcx, [rsp + 0x158]
call fcn.14000100f
lea rdx, [rsp + 0x158]
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r11, rax
mov rax, qword [rsp + 0x210]
mov qword [rax + 0x28], r11
mov byte [rsp + 0x198], 0x30
mov byte [rsp + 0x199], 3
mov byte [rsp + 0x19a], 5
mov byte [rsp + 0x19b], 0x2f
mov byte [rsp + 0x19c], 0x1e
mov byte [rsp + 0x19d], 0x1f
mov byte [rsp + 0x19e], 0x17
mov byte [rsp + 0x19f], 0x38
mov byte [rsp + 0x1a0], 0xe
mov byte [rsp + 0x1a1], 6
mov byte [rsp + 0x1a2], 0xe
mov byte [rsp + 0x1a3], 0x2f
mov byte [rsp + 0x1a4], 6
mov byte [rsp + 0x1a5], 0x1e
mov byte [rsp + 0x1a6], 0xa
mov byte [rsp + 0x1a7], 0
lea r8, [0x14001aafc]
mov edx, 0x10
lea rcx, [rsp + 0x198]
call fcn.14000100f
lea rdx, [rsp + 0x198]
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r11, rax
mov rax, qword [rsp + 0x210]
mov qword [rax + 0x30], r11
mov byte [rsp + 0x1c8], 0x22
mov byte [rsp + 0x1c9], 0x1d
mov byte [rsp + 0x1ca], 8
mov byte [rsp + 0x1cb], 0x3d
mov byte [rsp + 0x1cc], 0
mov byte [rsp + 0x1cd], 0x12
mov byte [rsp + 0x1ce], 5
mov byte [rsp + 0x1cf], 0x37
mov byte [rsp + 0x1d0], 0xa
mov byte [rsp + 0x1d1], 0x1a
mov byte [rsp + 0x1d2], 7
mov byte [rsp + 0x1d3], 3
mov byte [rsp + 0x1d4], 0x3d
mov byte [rsp + 0x1d5], 0x15
mov byte [rsp + 0x1d6], 8
mov byte [rsp + 0x1d7], 0x11
mov byte [rsp + 0x1d8], 0x18
mov byte [rsp + 0x1d9], 3
mov byte [rsp + 0x1da], 0
lea r8, [0x14001ab00]
mov edx, 0x13
lea rcx, [rsp + 0x1c8]
call fcn.14000100f
lea rdx, [rsp + 0x1c8]
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r11, rax
mov rax, qword [rsp + 0x210]
mov qword [rax + 0x38], r11
mov eax, 1
mov rdi, rax
mov rcx, rsp
lea rdx, [0x14001ae20]
call fcn.140002040
mov rax, rdi
mov rcx, qword [rsp + 0x1f0]
xor rcx, rsp
call fcn.140002020
add rsp, 0x200
pop rdi
ret