Function at 0x140002650
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0xe0]
sub rsp, 0x1e0
mov rax, qword [0x140028030]
xor rax, rsp
mov qword [rbp + 0xd0], rax
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x30], 0x686e6957
mov dword [rsp + 0x34], 0x2e707474
mov dword [rsp + 0x38], 0x6c6c64
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x140002b93
cmp qword [0x14002b7c0], 0
mov dword [rbp], 0x486e6957
mov dword [rbp + 4], 0x51707474
mov dword [rbp + 8], 0x79726575
mov dword [rbp + 0xc], 0x64616548
mov dword [rbp + 0x10], 0x737265
jne 0x1400026e6
lea rdx, [rbp]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b7c0], rax
cmp qword [0x14002b7c8], 0
mov dword [rbp - 0x18], 0x486e6957
mov dword [rbp - 0x14], 0x53707474
mov dword [rbp - 0x10], 0x69547465
mov dword [rbp - 0xc], 0x756f656d
mov word [rbp - 8], 0x7374
mov byte [rbp - 6], 0
jne 0x14000272a
lea rdx, [rbp - 0x18]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b7c8], rax
cmp qword [0x14002b7b8], 0
mov dword [rsp + 0x70], 0x486e6957
mov dword [rsp + 0x74], 0x57707474
mov dword [rsp + 0x78], 0x65746972
mov dword [rsp + 0x7c], 0x61746144
mov byte [rbp - 0x80], 0
jne 0x14000276d
lea rdx, [rsp + 0x70]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b7b8], rax
cmp qword [0x14002b7b0], 0
mov dword [rbp + 0x48], 0x486e6957
mov dword [rbp + 0x4c], 0x41707474
mov dword [rbp + 0x50], 0x65526464
mov dword [rbp + 0x54], 0x73657571
mov dword [rbp + 0x58], 0x61654874
mov dword [rbp + 0x5c], 0x73726564
mov byte [rbp + 0x60], 0
jne 0x1400027b9
lea rdx, [rbp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b7b0], rax
cmp qword [0x14002b7a8], 0
mov dword [rsp + 0x50], 0x486e6957
mov dword [rsp + 0x54], 0x43707474
mov dword [rsp + 0x58], 0x6b636172
mov dword [rsp + 0x5c], 0x6c7255
jne 0x1400027f8
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b7a8], rax
cmp qword [0x14002b748], 0
mov dword [rbp - 0x60], 0x486e6957
mov dword [rbp - 0x5c], 0x43707474
mov dword [rbp - 0x58], 0x65736f6c
mov dword [rbp - 0x54], 0x646e6148
mov word [rbp - 0x50], 0x656c
mov byte [rbp - 0x4e], 0
jne 0x14000283c
lea rdx, [rbp - 0x60]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b748], rax
cmp qword [0x14002b750], 0
mov dword [rsp + 0x40], 0x486e6957
mov dword [rsp + 0x44], 0x43707474
mov dword [rsp + 0x48], 0x656e6e6f
mov word [rsp + 0x4c], 0x7463
mov byte [rsp + 0x4e], 0
jne 0x14000287f
lea rdx, [rsp + 0x40]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b750], rax
cmp qword [0x14002b758], 0
mov dword [rbp + 0x88], 0x486e6957
mov dword [rbp + 0x8c], 0x44707474
mov dword [rbp + 0x90], 0x63657465
mov dword [rbp + 0x94], 0x74754174
mov dword [rbp + 0x98], 0x6f72506f
mov dword [rbp + 0x9c], 0x6f437978
mov dword [rbp + 0xa0], 0x6769666e
mov dword [rbp + 0xa4], 0x6c7255
jne 0x1400028f0
lea rdx, [rbp + 0x88]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b758], rax
cmp qword [0x14002b760], 0
mov dword [rbp + 0xa8], 0x486e6957
mov dword [rbp + 0xac], 0x47707474
mov dword [rbp + 0xb0], 0x45497465
mov dword [rbp + 0xb4], 0x786f7250
mov dword [rbp + 0xb8], 0x6e6f4379
mov dword [rbp + 0xbc], 0x46676966
mov dword [rbp + 0xc0], 0x7543726f
mov dword [rbp + 0xc4], 0x6e657272
mov dword [rbp + 0xc8], 0x65735574
mov word [rbp + 0xcc], 0x72
jne 0x140002974
lea rdx, [rbp + 0xa8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b760], rax
cmp qword [0x14002b768], 0
mov dword [rbp + 0x18], 0x486e6957
mov dword [rbp + 0x1c], 0x47707474
mov dword [rbp + 0x20], 0x72507465
mov dword [rbp + 0x24], 0x4679786f
mov dword [rbp + 0x28], 0x7255726f
mov word [rbp + 0x2c], 0x6c
jne 0x1400029bb
lea rdx, [rbp + 0x18]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b768], rax
cmp qword [0x14002b770], 0
mov dword [rsp + 0x20], 0x486e6957
mov dword [rsp + 0x24], 0x4f707474
mov dword [rsp + 0x28], 0x6e6570
jne 0x1400029f2
lea rdx, [rsp + 0x20]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b770], rax
cmp qword [0x14002b778], 0
mov dword [rbp - 0x48], 0x486e6957
mov dword [rbp - 0x44], 0x4f707474
mov dword [rbp - 0x40], 0x526e6570
mov dword [rbp - 0x3c], 0x65757165
mov word [rbp - 0x38], 0x7473
mov byte [rbp - 0x36], 0
jne 0x140002a36
lea rdx, [rbp - 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b778], rax
cmp qword [0x14002b780], 0
mov dword [rbp + 0x68], 0x486e6957
mov dword [rbp + 0x6c], 0x51707474
mov dword [rbp + 0x70], 0x79726575
mov dword [rbp + 0x74], 0x61746144
mov dword [rbp + 0x78], 0x69617641
mov dword [rbp + 0x7c], 0x6c62616c
mov word [rbp + 0x80], 0x65
jne 0x140002a87
lea rdx, [rbp + 0x68]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b780], rax
cmp qword [0x14002b788], 0
mov dword [rsp + 0x60], 0x486e6957
mov dword [rsp + 0x64], 0x52707474
mov dword [rsp + 0x68], 0x44646165
mov dword [rsp + 0x6c], 0x617461
jne 0x140002ac6
lea rdx, [rsp + 0x60]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b788], rax
cmp qword [0x14002b790], 0
mov dword [rbp + 0x30], 0x486e6957
mov dword [rbp + 0x34], 0x52707474
mov dword [rbp + 0x38], 0x69656365
mov dword [rbp + 0x3c], 0x65526576
mov dword [rbp + 0x40], 0x6e6f7073
mov word [rbp + 0x44], 0x6573
mov byte [rbp + 0x46], 0
jne 0x140002b11
lea rdx, [rbp + 0x30]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b790], rax
cmp qword [0x14002b798], 0
mov dword [rbp - 0x30], 0x486e6957
mov dword [rbp - 0x2c], 0x53707474
mov dword [rbp - 0x28], 0x52646e65
mov dword [rbp - 0x24], 0x65757165
mov word [rbp - 0x20], 0x7473
mov byte [rbp - 0x1e], 0
jne 0x140002b55
lea rdx, [rbp - 0x30]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b798], rax
cmp qword [0x14002b7a0], 0
mov dword [rbp - 0x78], 0x486e6957
mov dword [rbp - 0x74], 0x53707474
mov dword [rbp - 0x70], 0x704f7465
mov dword [rbp - 0x6c], 0x6e6f6974
mov byte [rbp - 0x68], 0
jne 0x140002b93
lea rdx, [rbp - 0x78]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b7a0], rax
mov rcx, qword [rbp + 0xd0]
xor rcx, rsp
call fcn.14000e440
mov rbx, qword [rsp + 0x1f0]
add rsp, 0x1e0
pop rbp
ret