Function at 0x180012bd0
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x90
mov rax, qword [0x180047520]
xor rax, rsp
mov qword [rbp + 0x47], rax
cmp qword [0x18007bc98], 0
mov rbx, rcx
mov dword [rbp + 7], 0x72657375
mov dword [rbp + 0xb], 0x642e3233
mov dword [rbp + 0xf], 0x6c6c
mov byte [rbp + 0x13], 0
mov dword [rbp - 0x19], 0x46746547
mov dword [rbp - 0x15], 0x6765726f
mov dword [rbp - 0x11], 0x6e756f72
mov dword [rbp - 0xd], 0x6e695764
mov qword [rbp - 9], 0x776f64
mov dword [rbp - 1], 0
mov byte [rbp + 3], 0
je 0x180012c4e
cmp dword [0x18007b898], 0
je 0x180012c7f
lea rcx, [rbp + 7]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180012c7f
lea rdx, [rbp - 0x19]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bc98]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bc98], rcx
cmp qword [0x18007bf50], 0
mov dword [rbp - 0x19], 0x41746547
mov dword [rbp - 0x15], 0x636e7973
mov dword [rbp - 0x11], 0x5379654b
mov qword [rbp - 0xd], 0x65746174
mov qword [rbp - 5], 0
mov byte [rbp + 3], 0
je 0x180012cbb
cmp dword [0x18007b898], 0
je 0x180012cec
lea rcx, [rbp + 7]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180012cec
lea rdx, [rbp - 0x19]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf50]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf50], rcx
cmp qword [0x18007bed0], 0
mov dword [rbp - 0x19], 0x4b746547
mov dword [rbp - 0x15], 0x74537965
mov qword [rbp - 0x11], 0x657461
mov qword [rbp - 9], 0
mov dword [rbp - 1], 0
mov byte [rbp + 3], 0
je 0x180012d28
cmp dword [0x18007b898], 0
je 0x180012d59
lea rcx, [rbp + 7]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180012d59
lea rdx, [rbp - 0x19]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bed0]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bed0], rcx
cmp qword [0x18007bef8], 0
mov dword [rbp - 0x19], 0x4b746547
mov dword [rbp - 0x15], 0x6f627965
mov dword [rbp - 0x11], 0x53647261
mov qword [rbp - 0xd], 0x65746174
mov qword [rbp - 5], 0
mov byte [rbp + 3], 0
je 0x180012d95
cmp dword [0x18007b898], 0
je 0x180012dc6
lea rcx, [rbp + 7]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180012dc6
lea rdx, [rbp - 0x19]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bef8]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bef8], rcx
cmp qword [0x18007bf48], 0
mov dword [rbp - 0x19], 0x54746547
mov dword [rbp - 0x15], 0x6957706f
mov qword [rbp - 0x11], 0x776f646e
mov qword [rbp - 9], 0
mov dword [rbp - 1], 0
mov byte [rbp + 3], 0
je 0x180012e02
cmp dword [0x18007b898], 0
je 0x180012e33
lea rcx, [rbp + 7]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180012e33
lea rdx, [rbp - 0x19]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf48]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf48], rcx
cmp qword [0x18007bf00], 0
mov dword [rbp - 0x19], 0x69577349
mov dword [rbp - 0x15], 0x776f646e
mov dword [rbp - 0x11], 0x62616e45
mov qword [rbp - 0xd], 0x64656c
mov qword [rbp - 5], 0
mov byte [rbp + 3], 0
je 0x180012e6f
cmp dword [0x18007b898], 0
je 0x180012ea0
lea rcx, [rbp + 7]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180012ea0
lea rdx, [rbp - 0x19]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf00]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf00], rcx
cmp qword [0x18007bf28], 0
mov dword [rbp - 0x19], 0x646e6957
mov dword [rbp - 0x15], 0x7246776f
mov dword [rbp - 0x11], 0x6f506d6f
mov qword [rbp - 0xd], 0x746e69
mov qword [rbp - 5], 0
mov byte [rbp + 3], 0
je 0x180012edc
cmp dword [0x18007b898], 0
je 0x180012f0d
lea rcx, [rbp + 7]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180012f0d
lea rdx, [rbp - 0x19]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf28]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf28], rcx
cmp qword [0x18007bec0], 0
mov dword [rbp - 0x19], 0x43746553
mov dword [rbp - 0x15], 0x6f737275
mov qword [rbp - 0x11], 0x72
mov qword [rbp - 9], 0
mov dword [rbp - 1], 0
mov byte [rbp + 3], 0
je 0x180012f49
cmp dword [0x18007b898], 0
je 0x180012f7a
lea rcx, [rbp + 7]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180012f7a
lea rdx, [rbp - 0x19]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bec0]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bec0], rcx
cmp qword [0x18007bb88], 0
mov dword [rbp - 0x19], 0x57746547
mov dword [rbp - 0x15], 0x6f646e69
mov dword [rbp - 0x11], 0x616c5077
mov dword [rbp - 0xd], 0x656d6563
mov qword [rbp - 9], 0x746e
mov dword [rbp - 1], 0
mov byte [rbp + 3], 0
je 0x180012fbc
cmp dword [0x18007b898], 0
je 0x180012fed
lea rcx, [rbp + 7]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180012fed
lea rdx, [rbp - 0x19]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bb88]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bb88], rcx
cmp qword [0x18007bec8], 0
mov dword [rbp - 0x19], 0x52746547
mov dword [rbp - 0x15], 0x6e497761
mov dword [rbp - 0x11], 0x44747570
mov qword [rbp - 0xd], 0x617461
mov qword [rbp - 5], 0
mov byte [rbp + 3], 0
je 0x180013029
cmp dword [0x18007b898], 0
je 0x18001305a
lea rcx, [rbp + 7]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x18001305a
lea rdx, [rbp - 0x19]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bec8]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bec8], rcx
cmp qword [0x18007bf38], 0
mov dword [rbp - 0x19], 0x52746547
mov dword [rbp - 0x15], 0x6e497761
mov dword [rbp - 0x11], 0x42747570
mov dword [rbp - 0xd], 0x65666675
mov qword [rbp - 9], 0x72
mov dword [rbp - 1], 0
mov byte [rbp + 3], 0
je 0x18001309c
cmp dword [0x18007b898], 0
je 0x1800130cd
lea rcx, [rbp + 7]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x1800130cd
lea rdx, [rbp - 0x19]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf38]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf38], rcx
cmp qword [0x18007bea8], 0
mov dword [rbp + 7], 0x336d6d69
mov dword [rbp + 0xb], 0x6c642e32
mov dword [rbp + 0xf], 0x6c
mov byte [rbp + 0x13], 0
mov dword [rbp - 0x19], 0x476d6d49
mov dword [rbp - 0x15], 0x6f437465
mov dword [rbp - 0x11], 0x736f706d
mov dword [rbp - 0xd], 0x6f697469
mov dword [rbp - 9], 0x7274536e
mov qword [rbp - 5], 0x41676e69
mov byte [rbp + 3], 0
je 0x180013128
cmp dword [0x18007b898], 0
je 0x180013159
lea rcx, [rbp + 7]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180013159
lea rdx, [rbp - 0x19]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bea8]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bea8], rcx
cmp qword [0x18007bed8], 0
mov dword [rbp - 0x19], 0x476d6d49
mov dword [rbp - 0x15], 0x6f437465
mov dword [rbp - 0x11], 0x736f706d
mov dword [rbp - 0xd], 0x6f697469
mov dword [rbp - 9], 0x7274536e
mov qword [rbp - 5], 0x57676e69
mov byte [rbp + 3], 0
je 0x18001319b
cmp dword [0x18007b898], 0
je 0x1800131cc
lea rcx, [rbp + 7]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x1800131cc
lea rdx, [rbp - 0x19]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bed8]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bed8], rcx
mov ecx, 0x41461427
call fcn.18000b750
test eax, eax
jne 0x1800131ec
mov ecx, 0x42fb6966
call fcn.18000b750
test eax, eax
je 0x18001327f
lea rcx, [rbp + 0x37]
mov dword [rbp + 0x37], 0x706e6964
mov dword [rbp + 0x3b], 0x2e387475
mov dword [rbp + 0x3f], 0x6c6c64
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180013234
mov ecx, dword [rbx + 0x1000448]
call fcn.18000bfe0
mov qword [0x18007bb58], rax
mov ecx, dword [rbx + 0x100044c]
call fcn.18000bfe0
mov qword [0x18007bb78], rax
lea rcx, [rbp + 0x27]
mov dword [rbp + 0x27], 0x706e6964
mov dword [rbp + 0x2b], 0x642e7475
mov word [rbp + 0x2f], 0x6c6c
mov byte [rbp + 0x31], 0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x18001327f
mov ecx, dword [rbx + 0x1000450]
call fcn.18000c090
mov qword [0x18007beb0], rax
mov ecx, dword [rbx + 0x1000454]
call fcn.18000c090
mov qword [0x18007bb50], rax
mov eax, 1
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.180024b60
mov rbx, qword [rsp + 0xa8]
add rsp, 0x90
pop rbp
ret