Function at 0x140003610
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rax, qword [0x140028058]
xor rax, rsp
mov qword [rbp - 8], rax
xor edi, edi
cmp qword [0x14002e340], 0xffffffffffffffff
mov rsi, rcx
je 0x14000369c
mov rax, qword [0x14002e320]
test rax, rax
je 0x140003686
lea rcx, [0x14002e338]
call qword [rax + 0x48]
cmp qword [0x14002e328], rdi
jne 0x140003667
cmp qword [0x14002e330], rdi
je 0x140003686
mov rax, qword [0x14002e320]
lea rcx, [0x14002e328]
call qword [rax + 0x20]
mov qword [0x14002e330], rdi
mov qword [0x14002e328], rdi
mov qword [0x14002e340], 0xffffffffffffffff
mov qword [0x14002e338], 0xffffffffffffffff
cmp qword [0x14002e320], rdi
jne 0x140003751
lea rcx, [rbp - 0x30]
mov qword [rsp + 0x68], rbx
mov dword [rbp - 0x30], 0x75636553
mov dword [rbp - 0x2c], 0x2e323372
mov dword [rbp - 0x28], 0x6c6c64
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x140003726
lea rdx, [rbp - 0x20]
mov rcx, rax
mov dword [rbp - 0x20], 0x74696e49
mov dword [rbp - 0x1c], 0x75636553
mov dword [rbp - 0x18], 0x79746972
mov dword [rbp - 0x14], 0x65746e49
mov dword [rbp - 0x10], 0x63616672
mov word [rbp - 0xc], 0x5765
mov byte [rbp - 0xa], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14000371d
call rax
mov qword [0x14002e320], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp qword [0x14002e320], rdi
mov rbx, qword [rsp + 0x68]
jne 0x140003751
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x140003745
mov eax, 0x80004005
jmp 0x1400037a2
jle 0x1400037a2
movzx eax, ax
or eax, 0x80070000
jmp 0x1400037a2
lea rcx, [0x14002e328]
xor edx, edx
call fcn.140002180
test eax, eax
js 0x1400037a2
lea rax, str.qVdssfWuJ3zt1j_BSSD5Z0CD4czdTRFOD5vKFxjSYDYMbr2Ra_meYsh7OIaUqClzjJNtzsfrPn8OjA34nfREH8ltDRROT5IpdhaAcF8KAN6Xpw3rThAZleREClI5gYSJQq3UJIjYxD9LJQIRsdFMM8u9ERys3MMP1YY5y3QAeOvNxPToT8GlZRaCgl7CMVhft8Yy16PPelW7pWMp1oZAGCuPOOFa5Om4LaYQ8HaU5wx1ObzdgtBBKSVjeG4nrcczS6fFYWE4otQ9NElnXcovvu7cXVB_tsb106uTIZUX345obTM5GkrB4aJskIQWHCA7SYR8V2cTeheVVpeV_zKSOvSjHutrxFZ0Sf35A1_NobmtvYVOrNOK_UKZrCLuBVt5YEjbB6tndKW2PvZrkpBDF8By0hUf70J0HoJvV0UpzJHlk7cJIIdeY9GuzHFLVCP48hZ4mmiFVQYEEYfPp_kfOEqnstH0OtGqUhY5BA45BN3nf6D0cjQA27bVylDOTf96onlNpxtRJ7vhaKSY351jhoU1lVJqXEbSaBsltV3taQH1Cw2jwleTRPWIJDYc5KOIBuAVpuIJ_jHzFKg12Cy85UHEEg9K4XNEqNK0iHaBn0OXFYUPsWVJW1hg04Orcx526SHEJfXddvuinqrRT301YW2_5MzVrmgJYiLkhAIIMzvH4tlUkTHAcVWnLUOHeGs50QfBnDixZdM8CDvCj08EDjVlU1HeRZr3xEDtOxpVylFb565d1nS4CTfoGAUsZGodrfdTY2kvC0MSZP_F0JDcsnm1Tf9jlfe2ofYZ7lRVNWuDUguqWl_7YjqCnETW3Ae5Q7wprlNGy2Sl3w_HoX4mn2wYmKxvkbkOPMD9qLK_6zaP8FgkiGA00X3Vq61Mia614ktvGaVsw27Nko7J89qhKTsCkOWmp_X2A3gIfqta8q_vLJKTzqDzKWCD8yyPcAqkJsK16HYF3j8Z6jdQrVNIGxjRl6780kqjMNiY0B3zxbHsm0XJOEGNPaKBx4qxN7koBtQryhp_9hY_2MVAaG26udIAhe0M0
mov rcx, rsi
mov qword [0x14002e318], rax
call fcn.140002ff0
test eax, eax
js 0x1400037a2
mov r9, qword [0x14002e320]
lea r8, [0x14002e348]
lea rcx, [0x14002e338]
mov edx, 4
call qword [r9 + 0x58]
test eax, eax
cmovs edi, eax
mov eax, edi
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.14000f440
mov rsi, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
add rsp, 0x50
pop rbp
ret