Function at 0x1001c5000
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x110
mov qword [rbp + 0x10], rcx
mov byte [rbp - 0x110], 0x4c
mov byte [rbp - 0x10f], 0x6f
mov byte [rbp - 0x10e], 0x61
mov byte [rbp - 0x10d], 0x64
mov byte [rbp - 0x10c], 0x69
mov byte [rbp - 0x10b], 0x6e
mov byte [rbp - 0x10a], 0x67
mov byte [rbp - 0x109], 0x20
mov byte [rbp - 0x108], 0x41
mov byte [rbp - 0x107], 0x50
mov byte [rbp - 0x106], 0x49
mov byte [rbp - 0x105], 0x73
mov byte [rbp - 0x104], 0x3a
mov byte [rbp - 0x103], 0
mov rax, 1
mov byte [rbp - 0x110], 0x6b
mov byte [rbp - 0x10f], 0x65
mov byte [rbp - 0x10e], 0x72
mov byte [rbp - 0x10d], 0x6e
mov byte [rbp - 0x10c], 0x65
mov byte [rbp - 0x10b], 0x6c
mov byte [rbp - 0x10a], 0x33
mov byte [rbp - 0x109], 0x32
mov byte [rbp - 0x108], 0x2e
mov byte [rbp - 0x107], 0x64
mov byte [rbp - 0x106], 0x6c
mov byte [rbp - 0x105], 0x6c
mov byte [rbp - 0x104], 0
mov rax, 1
lea rax, [rbp - 0x110]
sub rsp, 0x20
mov rcx, rax
call qword [sym.imp.KERNEL32.DLL_LoadLibraryA]
add rsp, 0x20
test rax, rax
je 0x1001c5363
mov qword [rbp - 0x10], rax
mov byte [rbp - 0x110], 0x47
mov byte [rbp - 0x10f], 0x65
mov byte [rbp - 0x10e], 0x74
mov byte [rbp - 0x10d], 0x4d
mov byte [rbp - 0x10c], 0x6f
mov byte [rbp - 0x10b], 0x64
mov byte [rbp - 0x10a], 0x75
mov byte [rbp - 0x109], 0x6c
mov byte [rbp - 0x108], 0x65
mov byte [rbp - 0x107], 0x48
mov byte [rbp - 0x106], 0x61
mov byte [rbp - 0x105], 0x6e
mov byte [rbp - 0x104], 0x64
mov byte [rbp - 0x103], 0x6c
mov byte [rbp - 0x102], 0x65
mov byte [rbp - 0x101], 0x41
mov byte [rbp - 0x100], 0
mov rax, 1
lea rax, [rbp - 0x110]
sub rsp, 0x20
mov rcx, qword [rbp - 0x10]
mov rdx, rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
add rsp, 0x20
test rax, rax
je 0x1001c5363
mov r10, qword [rbp + 0x10]
mov qword [r10 + 0x38], rax
mov byte [rbp - 0x110], 0x56
mov byte [rbp - 0x10f], 0x69
mov byte [rbp - 0x10e], 0x72
mov byte [rbp - 0x10d], 0x74
mov byte [rbp - 0x10c], 0x75
mov byte [rbp - 0x10b], 0x61
mov byte [rbp - 0x10a], 0x6c
mov byte [rbp - 0x109], 0x41
mov byte [rbp - 0x108], 0x6c
mov byte [rbp - 0x107], 0x6c
mov byte [rbp - 0x106], 0x6f
mov byte [rbp - 0x105], 0x63
mov byte [rbp - 0x104], 0
mov rax, 1
lea rax, [rbp - 0x110]
sub rsp, 0x20
mov rcx, qword [rbp - 0x10]
mov rdx, rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
add rsp, 0x20
test rax, rax
je 0x1001c5363
mov r10, qword [rbp + 0x10]
mov qword [r10 + 0x40], rax
mov byte [rbp - 0x110], 0x56
mov byte [rbp - 0x10f], 0x69
mov byte [rbp - 0x10e], 0x72
mov byte [rbp - 0x10d], 0x74
mov byte [rbp - 0x10c], 0x75
mov byte [rbp - 0x10b], 0x61
mov byte [rbp - 0x10a], 0x6c
mov byte [rbp - 0x109], 0x50
mov byte [rbp - 0x108], 0x72
mov byte [rbp - 0x107], 0x6f
mov byte [rbp - 0x106], 0x74
mov byte [rbp - 0x105], 0x65
mov byte [rbp - 0x104], 0x63
mov byte [rbp - 0x103], 0x74
mov byte [rbp - 0x102], 0
mov rax, 1
lea rax, [rbp - 0x110]
sub rsp, 0x20
mov rcx, qword [rbp - 0x10]
mov rdx, rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
add rsp, 0x20
test rax, rax
je 0x1001c5363
mov r10, qword [rbp + 0x10]
mov qword [r10 + 0x48], rax
mov byte [rbp - 0x110], 0x56
mov byte [rbp - 0x10f], 0x69
mov byte [rbp - 0x10e], 0x72
mov byte [rbp - 0x10d], 0x74
mov byte [rbp - 0x10c], 0x75
mov byte [rbp - 0x10b], 0x61
mov byte [rbp - 0x10a], 0x6c
mov byte [rbp - 0x109], 0x46
mov byte [rbp - 0x108], 0x72
mov byte [rbp - 0x107], 0x65
mov byte [rbp - 0x106], 0x65
mov byte [rbp - 0x105], 0
mov rax, 1
lea rax, [rbp - 0x110]
sub rsp, 0x20
mov rcx, qword [rbp - 0x10]
mov rdx, rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
add rsp, 0x20
test rax, rax
je 0x1001c5363
mov r10, qword [rbp + 0x10]
mov qword [r10 + 0x50], rax
mov rax, 1
leave
ret
sub rax, rax
leave
ret