Function at 0x180025820
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x80
cmp qword [0x18007be98], 0
mov rbx, rcx
mov dword [rbp - 0x20], 0x72657375
mov dword [rbp - 0x1c], 0x642e3233
mov dword [rbp - 0x18], 0x6c6c
mov byte [rbp - 0x14], 0
mov dword [rbp - 0x40], 0x46746547
mov dword [rbp - 0x3c], 0x6765726f
mov dword [rbp - 0x38], 0x6e756f72
mov dword [rbp - 0x34], 0x6e695764
mov qword [rbp - 0x30], 0x776f64
mov dword [rbp - 0x28], 0
mov byte [rbp - 0x24], 0
jne 0x1800258b6
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x1800258b6
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007be98]
test rax, rax
cmovne rcx, rax
mov qword [0x18007be98], rcx
cmp qword [0x18007bf48], 0
mov dword [rbp - 0x40], 0x41746547
mov dword [rbp - 0x3c], 0x636e7973
mov dword [rbp - 0x38], 0x5379654b
mov qword [rbp - 0x34], 0x65746174
mov qword [rbp - 0x2c], 0
mov byte [rbp - 0x24], 0
jne 0x18002591a
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x18002591a
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf48]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf48], rcx
cmp qword [0x18007bed0], 0
mov dword [rbp - 0x40], 0x4b746547
mov dword [rbp - 0x3c], 0x74537965
mov qword [rbp - 0x38], 0x657461
mov qword [rbp - 0x30], 0
mov dword [rbp - 0x28], 0
mov byte [rbp - 0x24], 0
jne 0x18002597e
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x18002597e
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bed0]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bed0], rcx
cmp qword [0x18007bef0], 0
mov dword [rbp - 0x40], 0x4b746547
mov dword [rbp - 0x3c], 0x6f627965
mov dword [rbp - 0x38], 0x53647261
mov qword [rbp - 0x34], 0x65746174
mov qword [rbp - 0x2c], 0
mov byte [rbp - 0x24], 0
jne 0x1800259e2
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x1800259e2
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bef0]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bef0], rcx
cmp qword [0x18007bf40], 0
mov dword [rbp - 0x40], 0x54746547
mov dword [rbp - 0x3c], 0x6957706f
mov qword [rbp - 0x38], 0x776f646e
mov qword [rbp - 0x30], 0
mov dword [rbp - 0x28], 0
mov byte [rbp - 0x24], 0
jne 0x180025a46
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025a46
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf40]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf40], rcx
cmp qword [0x18007bf00], 0
mov dword [rbp - 0x40], 0x69577349
mov dword [rbp - 0x3c], 0x776f646e
mov dword [rbp - 0x38], 0x62616e45
mov qword [rbp - 0x34], 0x64656c
mov qword [rbp - 0x2c], 0
mov byte [rbp - 0x24], 0
jne 0x180025aaa
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025aaa
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf00]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf00], rcx
cmp qword [0x18007bf20], 0
mov dword [rbp - 0x40], 0x646e6957
mov dword [rbp - 0x3c], 0x7246776f
mov dword [rbp - 0x38], 0x6f506d6f
mov qword [rbp - 0x34], 0x746e69
mov qword [rbp - 0x2c], 0
mov byte [rbp - 0x24], 0
jne 0x180025b0e
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025b0e
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf20]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf20], rcx
cmp qword [0x18007bec0], 0
mov dword [rbp - 0x40], 0x43746553
mov dword [rbp - 0x3c], 0x6f737275
mov qword [rbp - 0x38], 0x72
mov qword [rbp - 0x30], 0
mov dword [rbp - 0x28], 0
mov byte [rbp - 0x24], 0
jne 0x180025b72
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025b72
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bec0]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bec0], rcx
cmp qword [0x18007bc88], 0
mov dword [rbp - 0x40], 0x57746547
mov dword [rbp - 0x3c], 0x6f646e69
mov dword [rbp - 0x38], 0x616c5077
mov dword [rbp - 0x34], 0x656d6563
mov qword [rbp - 0x30], 0x746e
mov dword [rbp - 0x28], 0
mov byte [rbp - 0x24], 0
jne 0x180025bdc
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025bdc
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bc88]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bc88], rcx
cmp qword [0x18007bec8], 0
mov dword [rbp - 0x40], 0x52746547
mov dword [rbp - 0x3c], 0x6e497761
mov dword [rbp - 0x38], 0x44747570
mov qword [rbp - 0x34], 0x617461
mov qword [rbp - 0x2c], 0
mov byte [rbp - 0x24], 0
jne 0x180025c40
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025c40
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bec8]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bec8], rcx
cmp qword [0x18007bf30], 0
mov dword [rbp - 0x40], 0x52746547
mov dword [rbp - 0x3c], 0x6e497761
mov dword [rbp - 0x38], 0x42747570
mov dword [rbp - 0x34], 0x65666675
mov qword [rbp - 0x30], 0x72
mov dword [rbp - 0x28], 0
mov byte [rbp - 0x24], 0
jne 0x180025caa
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025caa
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf30]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf30], rcx
cmp qword [0x18007bea8], 0
mov dword [rbp - 0x20], 0x336d6d69
mov dword [rbp - 0x1c], 0x6c642e32
mov dword [rbp - 0x18], 0x6c
mov byte [rbp - 0x14], 0
mov dword [rbp - 0x40], 0x476d6d49
mov dword [rbp - 0x3c], 0x6f437465
mov dword [rbp - 0x38], 0x736f706d
mov dword [rbp - 0x34], 0x6f697469
mov dword [rbp - 0x30], 0x7274536e
mov qword [rbp - 0x2c], 0x41676e69
mov byte [rbp - 0x24], 0
jne 0x180025d2d
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025d2d
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bea8]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bea8], rcx
cmp qword [0x18007bed8], 0
mov dword [rbp - 0x40], 0x476d6d49
mov dword [rbp - 0x3c], 0x6f437465
mov dword [rbp - 0x38], 0x736f706d
mov dword [rbp - 0x34], 0x6f697469
mov dword [rbp - 0x30], 0x7274536e
mov qword [rbp - 0x2c], 0x57676e69
mov byte [rbp - 0x24], 0
jne 0x180025d97
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025d97
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bed8]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bed8], rcx
mov rdx, qword [0x18007c0c8]
mov rax, qword [0x18007c0c0]
xor ecx, ecx
sub rdx, rax
mov r9d, ecx
sar rdx, 2
test edx, edx
je 0x180025e8a
mov r8, rax
nop dword [rax]
cmp dword [r8], 0x41461427
je 0x180025df7
inc r9d
add r8, 4
cmp r9d, edx
jb 0x180025dc0
test edx, edx
je 0x180025e8a
nop dword [rax]
cmp dword [rax], 0x42fb6966
je 0x180025df7
inc ecx
add rax, 4
cmp ecx, edx
jb 0x180025de0
jmp 0x180025e8a
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x706e6964
mov dword [rbp - 0x4c], 0x2e387475
mov dword [rbp - 0x48], 0x6c6c64
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025e3f
mov ecx, dword [rbx + 0x1000448]
call fcn.18001da90
mov qword [0x18007bf60], rax
mov ecx, dword [rbx + 0x100044c]
call fcn.18001d9f0
mov qword [0x18007bf80], rax
lea rcx, [rbp - 0x60]
mov dword [rbp - 0x60], 0x706e6964
mov dword [rbp - 0x5c], 0x642e7475
mov word [rbp - 0x58], 0x6c6c
mov byte [rbp - 0x56], 0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025e8a
mov ecx, dword [rbx + 0x1000450]
call fcn.18001d960
mov qword [0x18007beb0], rax
mov ecx, dword [rbx + 0x1000454]
call fcn.18001d8d0
mov qword [0x18007bf58], rax
mov eax, 1
mov rbx, qword [rsp + 0x90]
add rsp, 0x80
pop rbp
ret