Function at 0x1400320e0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Link many functions at runtime

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
push r14
sub rsp, 0x1d0
mov rax, qword [0x1400dd0c0]
xor rax, rsp
mov qword [rsp + 0x1c0], rax
xor r14d, r14d
mov dword [r11 - 0x38], 0x75687c53
mov dword [r11 - 0x34], 0x2d2d7179
mov dword [r11 - 0x30], 0x4f4e450e
xor eax, eax
mov byte [r11 - 0x2c], al
mov ecx, r14d
mov edx, r14d
lea eax, [rcx + 0x18]
xor byte [rsp + rdx + 0x1a0], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xc
jb 0x140032131
mov byte [rsp + 0x1ac], 0
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdi, rax
test rax, rax
jne 0x14003217e
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdi, rax
test rax, rax
je 0x140032dda
mov dword [rsp + 0x160], 0x757f6957
mov dword [rsp + 0x164], 0x7c716f4c
mov dword [rsp + 0x168], 0x515245
mov ecx, r14d
mov rdx, r14
nop word [rax + rax]
lea eax, [rcx + 0x18]
xor byte [rsp + rdx + 0x160], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xb
jb 0x1400321b0
mov byte [rsp + 0x16b], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], r14
lea rax, [rsp + 0x160]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140032200
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x180]
call fcn.1400164d0
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0xf
cmova rdx, qword [rsp + 0x180]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [0x1400e0c10], rax
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x14003228f
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003228a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140032df5
call fcn.140078cd0
test rsi, rsi
je 0x140032dfb
movdqa xmm0, xmmword [0x1400cd210]
movdqu xmmword [rsp + 0x160], xmm0
mov dword [rsp + 0x170], 0x5b4b477b
mov dword [rsp + 0x174], 0x5b41455f
xor eax, eax
mov byte [rsp + 0x178], al
mov ecx, r14d
mov rdx, r14
nop
lea eax, [rcx + 0x18]
xor byte [rsp + rdx + 0x160], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0x18
jb 0x1400322d0
mov byte [rsp + 0x178], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], r14
lea rax, [rsp + 0x160]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140032313
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x180]
call fcn.1400164d0
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0xf
cmova rdx, qword [rsp + 0x180]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [0x1400e0c48], rax
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x1400323a2
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003239d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140032e16
call fcn.140078cd0
test rsi, rsi
je 0x140032e1c
movdqa xmm0, xmmword [str.Hkuxynm_]
movdqu xmmword [rsp + 0x160], xmm0
mov ecx, r14d
mov rdx, r14
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x18]
xor byte [rsp + rdx + 0x160], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xf
jb 0x1400323d0
mov byte [rsp + 0x16f], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], r14
lea rax, [rsp + 0x160]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140032413
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x180]
call fcn.1400164d0
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0xf
cmova rdx, qword [rsp + 0x180]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [0x1400e0c50], rax
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x1400324a2
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003249d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140032e37
call fcn.140078cd0
test rsi, rsi
je 0x140032e3d
mov dword [rsp + 0x160], 0x78756b48
mov dword [rsp + 0x164], 0x2c6d6e79
mov dword [rsp + 0x168], 0x5b476f12
mov word [rsp + 0x16c], 0x7250
xor eax, eax
mov byte [rsp + 0x16e], al
mov ecx, r14d
mov rdx, r14
nop word [rax + rax]
lea eax, [rcx + 0x18]
xor byte [rsp + rdx + 0x160], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xe
jb 0x1400324f0
mov byte [rsp + 0x16e], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], r14
lea rax, [rsp + 0x160]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140032533
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x180]
call fcn.1400164d0
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0xf
cmova rdx, qword [rsp + 0x180]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [0x1400e0c58], rax
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x1400325c2
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400325bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140032e58
call fcn.140078cd0
test rsi, rsi
je 0x140032e5e
mov dword [rsp + 0x160], 0x6e7e7655
mov dword [rsp + 0x164], 0x2d2d7870
mov dword [rsp + 0x168], 0x50504866
mov word [rsp + 0x16c], 0x7250
xor eax, eax
mov byte [rsp + 0x16e], al
mov ecx, r14d
mov rdx, r14
nop word [rax + rax]
lea eax, [rcx + 0x18]
xor byte [rsp + rdx + 0x160], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xe
jb 0x140032610
mov byte [rsp + 0x16e], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], r14
lea rax, [rsp + 0x160]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140032653
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x180]
call fcn.1400164d0
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0xf
cmova rdx, qword [rsp + 0x180]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [0x1400e0c60], rax
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x1400326e2
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400326dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140032e7f
call fcn.140078cd0
test rsi, rsi
je 0x140032e85
mov dword [rsp + 0x160], 0x6e7e7655
mov dword [rsp + 0x164], 0x2d2d7870
mov dword [rsp + 0x168], 0x575a446e
mov word [rsp + 0x16c], 0x73
mov ecx, r14d
mov rdx, r14
nop dword [rax]
lea eax, [rcx + 0x18]
xor byte [rsp + rdx + 0x160], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xd
jb 0x140032720
mov byte [rsp + 0x16d], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], r14
lea rax, [rsp + 0x160]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140032763
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x180]
call fcn.1400164d0
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0xf
cmova rdx, qword [rsp + 0x180]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [0x1400e0c68], rax
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x1400327f2
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400327ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140032ea6
call fcn.140078cd0
test rsi, rsi
je 0x140032eac
movdqa xmm0, xmmword [0x1400cd260]
movdqu xmmword [rsp + 0x160], xmm0
mov dword [rsp + 0x170], 0x62535b47
mov dword [rsp + 0x174], 0x414b42
mov ecx, r14d
mov rdx, r14
nop dword [rax + rax]
lea eax, [rcx + 0x18]
xor byte [rsp + rdx + 0x160], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0x17
jb 0x140032830
mov byte [rsp + 0x177], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], r14
lea rax, [rsp + 0x160]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140032873
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x180]
call fcn.1400164d0
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0xf
cmova rdx, qword [rsp + 0x180]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [0x1400e0c70], rax
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x140032902
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400328fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140032ecd
call fcn.140078cd0
test rsi, rsi
je 0x140032ed3
movdqa xmm0, xmmword [str.lr]
movdqu xmmword [rsp + 0x160], xmm0
mov ecx, r14d
mov rdx, r14
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x18]
xor byte [rsp + rdx + 0x160], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xf
jb 0x140032930
mov byte [rsp + 0x16f], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], r14
lea rax, [rsp + 0x160]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140032973
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x180]
call fcn.1400164d0
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0xf
cmova rdx, qword [rsp + 0x180]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [0x1400e0c80], rax
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x140032a02
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400329fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140032ef4
call fcn.140078cd0
test rdi, rdi
je 0x140032efa
mov dword [rsp + 0x1b0], 0x7a6c7d59
mov dword [rsp + 0x1b4], 0x2d2d746c
mov dword [rsp + 0x1b8], 0x4f4e450e
xor eax, eax
mov byte [rsp + 0x1bc], al
mov ecx, r14d
mov rdx, r14
nop dword [rax + rax]
lea eax, [rcx + 0x18]
xor byte [rsp + rdx + 0x1b0], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xc
jb 0x140032a40
mov byte [rsp + 0x1bc], 0
lea rcx, [rsp + 0x1b0]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdi, rax
test rax, rax
jne 0x140032a8d
lea rcx, [rsp + 0x1b0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdi, rax
test rax, rax
je 0x140032f1b
movdqa xmm0, xmmword [0x1400cd250]
movdqu xmmword [rsp + 0x160], xmm0
xor eax, eax
mov byte [rsp + 0x170], al
mov ecx, r14d
mov rdx, r14
nop dword [rax]
lea eax, [rcx + 0x18]
xor byte [rsp + rdx + 0x160], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0x10
jb 0x140032ab0
mov byte [rsp + 0x170], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], r14
lea rax, [rsp + 0x160]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140032af3
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x180]
call fcn.1400164d0
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0xf
cmova rdx, qword [rsp + 0x180]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [0x1400e0c88], rax
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x140032b82
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140032b7d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140032f3c
call fcn.140078cd0
test rsi, rsi
je 0x140032f42
movdqa xmm0, xmmword [0x1400cd270]
movdqu xmmword [rsp + 0x160], xmm0
mov dword [rsp + 0x170], 0x4e4d4c44
mov word [rsp + 0x174], 0x5f
mov ecx, r14d
mov rdx, r14
nop word [rax + rax]
lea eax, [rcx + 0x18]
xor byte [rsp + rdx + 0x160], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0x15
jb 0x140032bc0
mov byte [rsp + 0x175], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], r14
lea rax, [rsp + 0x160]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140032c03
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x180]
call fcn.1400164d0
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0xf
cmova rdx, qword [rsp + 0x180]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [0x1400e0c98], rax
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x140032c92
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140032c8d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140032f63
call fcn.140078cd0
test rsi, rsi
je 0x140032f69
movdqa xmm0, xmmword [0x1400cd2a0]
movdqu xmmword [rsp + 0x160], xmm0
mov dword [rsp + 0x170], 0x4e5f4549
mov word [rsp + 0x174], 0x7b
mov ecx, r14d
mov rdx, r14
nop word [rax + rax]
lea eax, [rcx + 0x18]
xor byte [rsp + rdx + 0x160], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0x15
jb 0x140032cd0
mov byte [rsp + 0x175], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], r14
lea rax, [rsp + 0x160]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140032d10
mov r8, rbx
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x180]
call fcn.1400164d0
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0xf
cmova rdx, qword [rsp + 0x180]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [0x1400e0c90], rax
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x140032da1
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140032d9c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140032f8a
call fcn.140078cd0
test rbx, rbx
je 0x140032f90
mov al, 1
jmp 0x140032db0
mov rcx, qword [rsp + 0x1c0]
xor rcx, rsp
call fcn.140078cb0
lea r11, [rsp + 0x1d0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop r14
ret
lea rcx, [rsp + 0x28]
call fcn.1400313c0
lea rdx, [0x1400db768]
lea rcx, [rsp + 0x28]
call fcn.14007ae60
call fcn.14007fdc0
int3
lea rcx, [rsp + 0x40]
call fcn.1400313c0
lea rdx, [0x1400db768]
lea rcx, [rsp + 0x40]
call fcn.14007ae60
call fcn.14007fdc0
int3
lea rcx, [rsp + 0x58]
call fcn.1400313c0
lea rdx, [0x1400db768]
lea rcx, [rsp + 0x58]
call fcn.14007ae60
call fcn.14007fdc0
int3
lea rcx, [rsp + 0x70]
call fcn.1400313c0
lea rdx, [0x1400db768]
lea rcx, [rsp + 0x70]
call fcn.14007ae60
call fcn.14007fdc0
int3
lea rcx, [rsp + 0x88]
call fcn.1400313c0
lea rdx, [0x1400db768]
lea rcx, [rsp + 0x88]
call fcn.14007ae60
call fcn.14007fdc0
int3
lea rcx, [rsp + 0xa0]
call fcn.1400313c0
lea rdx, [0x1400db768]
lea rcx, [rsp + 0xa0]
call fcn.14007ae60
call fcn.14007fdc0
int3
lea rcx, [rsp + 0xb8]
call fcn.1400313c0
lea rdx, [0x1400db768]
lea rcx, [rsp + 0xb8]
call fcn.14007ae60
call fcn.14007fdc0
int3
lea rcx, [rsp + 0xd0]
call fcn.1400313c0
lea rdx, [0x1400db768]
lea rcx, [rsp + 0xd0]
call fcn.14007ae60
call fcn.14007fdc0
int3
lea rcx, [rsp + 0xe8]
call fcn.1400313c0
lea rdx, [0x1400db768]
lea rcx, [rsp + 0xe8]
call fcn.14007ae60
lea rcx, [rsp + 0x100]
call fcn.1400313c0
lea rdx, [0x1400db768]
lea rcx, [rsp + 0x100]
call fcn.14007ae60
call fcn.14007fdc0
int3
lea rcx, [rsp + 0x118]
call fcn.1400313c0
lea rdx, [0x1400db768]
lea rcx, [rsp + 0x118]
call fcn.14007ae60
call fcn.14007fdc0
int3
lea rcx, [rsp + 0x130]
call fcn.1400313c0
lea rdx, [0x1400db768]
lea rcx, [rsp + 0x130]
call fcn.14007ae60
call fcn.14007fdc0
int3
lea rcx, [rsp + 0x148]
call fcn.1400313c0
lea rdx, [0x1400db768]
lea rcx, [rsp + 0x148]
call fcn.14007ae60
int3