Function at 0x140043368
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x110
mov qword [rbp + 0x10], rcx
mov byte [rbp - 0x110], 0x6b
mov byte [rbp - 0x10f], 0x65
mov byte [rbp - 0x10e], 0x72
mov byte [rbp - 0x10d], 0x6e
mov byte [rbp - 0x10c], 0x65
mov byte [rbp - 0x10b], 0x6c
mov byte [rbp - 0x10a], 0x33
mov byte [rbp - 0x109], 0x32
mov byte [rbp - 0x108], 0x2e
mov byte [rbp - 0x107], 0x64
mov byte [rbp - 0x106], 0x6c
mov byte [rbp - 0x105], 0x6c
mov byte [rbp - 0x104], 0
lea rax, [rbp - 0x110]
sub rsp, 0x20
mov rcx, rax
call qword [sym.imp.KERNEL32.DLL_LoadLibraryA]
add rsp, 0x20
test rax, rax
je 0x1400437dd
mov qword [rbp - 0x10], rax
mov byte [rbp - 0x110], 0x43
mov byte [rbp - 0x10f], 0x72
mov byte [rbp - 0x10e], 0x65
mov byte [rbp - 0x10d], 0x61
mov byte [rbp - 0x10c], 0x74
mov byte [rbp - 0x10b], 0x65
mov byte [rbp - 0x10a], 0x46
mov byte [rbp - 0x109], 0x69
mov byte [rbp - 0x108], 0x6c
mov byte [rbp - 0x107], 0x65
mov byte [rbp - 0x106], 0x4d
mov byte [rbp - 0x105], 0x61
mov byte [rbp - 0x104], 0x70
mov byte [rbp - 0x103], 0x70
mov byte [rbp - 0x102], 0x69
mov byte [rbp - 0x101], 0x6e
mov byte [rbp - 0x100], 0x67
mov byte [rbp - 0xff], 0x41
mov byte [rbp - 0xfe], 0
lea rax, [rbp - 0x110]
sub rsp, 0x20
mov rcx, qword [rbp - 0x10]
mov rdx, rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
add rsp, 0x20
test rax, rax
je 0x1400437dd
mov r10, qword [rbp + 0x10]
mov qword [r10], rax
mov byte [rbp - 0x110], 0x4d
mov byte [rbp - 0x10f], 0x61
mov byte [rbp - 0x10e], 0x70
mov byte [rbp - 0x10d], 0x56
mov byte [rbp - 0x10c], 0x69
mov byte [rbp - 0x10b], 0x65
mov byte [rbp - 0x10a], 0x77
mov byte [rbp - 0x109], 0x4f
mov byte [rbp - 0x108], 0x66
mov byte [rbp - 0x107], 0x46
mov byte [rbp - 0x106], 0x69
mov byte [rbp - 0x105], 0x6c
mov byte [rbp - 0x104], 0x65
mov byte [rbp - 0x103], 0
lea rax, [rbp - 0x110]
sub rsp, 0x20
mov rcx, qword [rbp - 0x10]
mov rdx, rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
add rsp, 0x20
test rax, rax
je 0x1400437dd
mov r10, qword [rbp + 0x10]
mov qword [r10 + 8], rax
mov byte [rbp - 0x110], 0x55
mov byte [rbp - 0x10f], 0x6e
mov byte [rbp - 0x10e], 0x6d
mov byte [rbp - 0x10d], 0x61
mov byte [rbp - 0x10c], 0x70
mov byte [rbp - 0x10b], 0x56
mov byte [rbp - 0x10a], 0x69
mov byte [rbp - 0x109], 0x65
mov byte [rbp - 0x108], 0x77
mov byte [rbp - 0x107], 0x4f
mov byte [rbp - 0x106], 0x66
mov byte [rbp - 0x105], 0x46
mov byte [rbp - 0x104], 0x69
mov byte [rbp - 0x103], 0x6c
mov byte [rbp - 0x102], 0x65
mov byte [rbp - 0x101], 0
lea rax, [rbp - 0x110]
sub rsp, 0x20
mov rcx, qword [rbp - 0x10]
mov rdx, rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
add rsp, 0x20
test rax, rax
je 0x1400437dd
mov r10, qword [rbp + 0x10]
mov qword [r10 + 0x10], rax
mov byte [rbp - 0x110], 0x43
mov byte [rbp - 0x10f], 0x72
mov byte [rbp - 0x10e], 0x65
mov byte [rbp - 0x10d], 0x61
mov byte [rbp - 0x10c], 0x74
mov byte [rbp - 0x10b], 0x65
mov byte [rbp - 0x10a], 0x46
mov byte [rbp - 0x109], 0x69
mov byte [rbp - 0x108], 0x6c
mov byte [rbp - 0x107], 0x65
mov byte [rbp - 0x106], 0x41
mov byte [rbp - 0x105], 0
lea rax, [rbp - 0x110]
sub rsp, 0x20
mov rcx, qword [rbp - 0x10]
mov rdx, rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
add rsp, 0x20
test rax, rax
je 0x1400437dd
mov r10, qword [rbp + 0x10]
mov qword [r10 + 0x18], rax
mov byte [rbp - 0x110], 0x43
mov byte [rbp - 0x10f], 0x6c
mov byte [rbp - 0x10e], 0x6f
mov byte [rbp - 0x10d], 0x73
mov byte [rbp - 0x10c], 0x65
mov byte [rbp - 0x10b], 0x48
mov byte [rbp - 0x10a], 0x61
mov byte [rbp - 0x109], 0x6e
mov byte [rbp - 0x108], 0x64
mov byte [rbp - 0x107], 0x6c
mov byte [rbp - 0x106], 0x65
mov byte [rbp - 0x105], 0
lea rax, [rbp - 0x110]
sub rsp, 0x20
mov rcx, qword [rbp - 0x10]
mov rdx, rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
add rsp, 0x20
test rax, rax
je 0x1400437dd
mov r10, qword [rbp + 0x10]
mov qword [r10 + 0x20], rax
mov byte [rbp - 0x110], 0x47
mov byte [rbp - 0x10f], 0x65
mov byte [rbp - 0x10e], 0x74
mov byte [rbp - 0x10d], 0x46
mov byte [rbp - 0x10c], 0x69
mov byte [rbp - 0x10b], 0x6c
mov byte [rbp - 0x10a], 0x65
mov byte [rbp - 0x109], 0x53
mov byte [rbp - 0x108], 0x69
mov byte [rbp - 0x107], 0x7a
mov byte [rbp - 0x106], 0x65
mov byte [rbp - 0x105], 0
lea rax, [rbp - 0x110]
sub rsp, 0x20
mov rcx, qword [rbp - 0x10]
mov rdx, rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
add rsp, 0x20
test rax, rax
je 0x1400437dd
mov r10, qword [rbp + 0x10]
mov qword [r10 + 0x28], rax
mov byte [rbp - 0x110], 0x44
mov byte [rbp - 0x10f], 0x65
mov byte [rbp - 0x10e], 0x6c
mov byte [rbp - 0x10d], 0x65
mov byte [rbp - 0x10c], 0x74
mov byte [rbp - 0x10b], 0x65
mov byte [rbp - 0x10a], 0x46
mov byte [rbp - 0x109], 0x69
mov byte [rbp - 0x108], 0x6c
mov byte [rbp - 0x107], 0x65
mov byte [rbp - 0x106], 0x41
mov byte [rbp - 0x105], 0
lea rax, [rbp - 0x110]
sub rsp, 0x20
mov rcx, qword [rbp - 0x10]
mov rdx, rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
add rsp, 0x20
test rax, rax
je 0x1400437dd
mov r10, qword [rbp + 0x10]
mov qword [r10 + 0x30], rax
mov rax, 1
leave
ret
sub rax, rax
leave
ret