Function at 0x140002050
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x50]
sub rsp, 0x150
mov rax, qword [0x140028030]
xor rax, rsp
mov qword [rbp + 0x48], rax
lea rcx, [rbp + 0x38]
mov dword [rbp + 0x38], 0x6376736d
mov dword [rbp + 0x3c], 0x642e7472
mov word [rbp + 0x40], 0x6c6c
mov byte [rbp + 0x42], 0
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x140002626
cmp qword [0x14002b658], 0
mov dword [rbp - 0x48], 0x6f66775f
mov dword [rbp - 0x44], 0x6e6570
jne 0x1400020ca
lea rdx, [rbp - 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b658], rax
cmp qword [0x14002b660], 0
mov dword [rbp - 0x80], 0x69727766
mov word [rbp - 0x7c], 0x6574
mov byte [rbp - 0x7a], 0
jne 0x1400020f9
lea rdx, [rbp - 0x80]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b660], rax
cmp qword [0x14002b668], 0
mov dword [rsp + 0x58], 0x6f6c6366
mov word [rsp + 0x5c], 0x6573
mov byte [rsp + 0x5e], 0
jne 0x14000212c
lea rdx, [rsp + 0x58]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b668], rax
cmp qword [0x14002b670], 0
mov dword [rbp - 0x18], 0x74736377
mov dword [rbp - 0x14], 0x73626d6f
mov byte [rbp - 0x10], 0
jne 0x14000215c
lea rdx, [rbp - 0x18]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b670], rax
cmp qword [0x14002b678], 0
mov dword [rbp + 8], 0x7473626d
mov dword [rbp + 0xc], 0x7363776f
mov byte [rbp + 0x10], 0
jne 0x14000218c
lea rdx, [rbp + 8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b678], rax
cmp qword [0x14002b680], 0
mov dword [rbp - 0x38], 0x6c616572
mov dword [rbp - 0x34], 0x636f6c
jne 0x1400021b8
lea rdx, [rbp - 0x38]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b680], rax
cmp qword [0x14002b688], 0
mov dword [rsp + 0x28], 0x65657266
mov byte [rsp + 0x2c], 0
jne 0x1400021e4
lea rdx, [rsp + 0x28]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b688], rax
cmp qword [0x14002b690], 0
mov dword [rbp + 0x18], 0x7274735f
mov dword [rbp + 0x1c], 0x706d6369
mov byte [rbp + 0x20], 0
jne 0x140002214
lea rdx, [rbp + 0x18]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b690], rax
cmp qword [0x14002b698], 0
mov dword [rbp - 0x28], 0x69727073
mov dword [rbp - 0x24], 0x66746e
jne 0x140002240
lea rdx, [rbp - 0x28]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b698], rax
cmp qword [0x14002b6a0], 0
mov dword [rbp - 8], 0x72707773
mov dword [rbp - 4], 0x66746e69
mov byte [rbp], 0
jne 0x140002270
lea rdx, [rbp - 8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b6a0], rax
cmp qword [0x14002b6a8], 0
mov dword [rsp + 0x38], 0x6e617273
mov word [rsp + 0x3c], 0x64
jne 0x14000229e
lea rdx, [rsp + 0x38]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b6a8], rax
cmp qword [0x14002b6b0], 0
mov dword [rsp + 0x30], 0x646e6172
mov byte [rsp + 0x34], 0
jne 0x1400022ca
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b6b0], rax
cmp qword [0x14002b6b8], 0
mov dword [rbp - 0x50], 0x6c6c6163
mov word [rbp - 0x4c], 0x636f
mov byte [rbp - 0x4a], 0
jne 0x1400022f9
lea rdx, [rbp - 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b6b8], rax
cmp qword [0x14002b6c0], 0
mov dword [rsp + 0x68], 0x6c6c616d
mov word [rsp + 0x6c], 0x636f
mov byte [rsp + 0x6e], 0
jne 0x14000232c
lea rdx, [rsp + 0x68]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b6c0], rax
cmp qword [0x14002b6c8], 0
mov dword [rbp - 0x58], 0x636d656d
mov word [rbp - 0x54], 0x7970
mov byte [rbp - 0x52], 0
jne 0x14000235b
lea rdx, [rbp - 0x58]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b6c8], rax
cmp qword [0x14002b6d0], 0
mov dword [rsp + 0x78], 0x736d656d
mov word [rsp + 0x7c], 0x7465
mov byte [rsp + 0x7e], 0
jne 0x14000238e
lea rdx, [rsp + 0x78]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b6d0], rax
cmp qword [0x14002b6d8], 0
mov dword [rbp - 0x40], 0x6d6d656d
mov dword [rbp - 0x3c], 0x65766f
jne 0x1400023ba
lea rdx, [rbp - 0x40]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b6d8], rax
cmp qword [0x14002b6e0], 0
mov dword [rsp + 0x20], 0x6c696563
mov byte [rsp + 0x24], 0
jne 0x1400023e6
lea rdx, [rsp + 0x20]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b6e0], rax
cmp qword [0x14002b6e8], 0
mov dword [rsp + 0x40], 0x6f74775f
mov word [rsp + 0x44], 0x69
jne 0x140002414
lea rdx, [rsp + 0x40]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b6e8], rax
cmp qword [0x14002b6f0], 0
mov dword [rbp - 0x68], 0x6c736377
mov word [rbp - 0x64], 0x6e65
mov byte [rbp - 0x62], 0
jne 0x140002443
lea rdx, [rbp - 0x68]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b6f0], rax
cmp qword [0x14002b6f8], 0
mov dword [rbp - 0x78], 0x74736377
mov word [rbp - 0x74], 0x6b6f
mov byte [rbp - 0x72], 0
jne 0x140002472
lea rdx, [rbp - 0x78]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b6f8], rax
cmp qword [0x14002b700], 0
mov dword [rbp - 0x30], 0x63737773
mov dword [rbp - 0x2c], 0x666e61
jne 0x14000249e
lea rdx, [rbp - 0x30]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b700], rax
cmp qword [0x14002b708], 0
mov dword [rbp + 0x28], 0x7363775f
mov dword [rbp + 0x2c], 0x6d63696e
mov word [rbp + 0x30], 0x70
jne 0x1400024d0
lea rdx, [rbp + 0x28]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b708], rax
cmp qword [0x14002b710], 0
mov dword [rsp + 0x60], 0x63727473
mov word [rsp + 0x64], 0x7970
mov byte [rsp + 0x66], 0
jne 0x140002503
lea rdx, [rsp + 0x60]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b710], rax
cmp qword [0x14002b718], 0
mov dword [rsp + 0x70], 0x63736377
mov word [rsp + 0x74], 0x7970
mov byte [rsp + 0x76], 0
jne 0x140002536
lea rdx, [rsp + 0x70]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b718], rax
cmp qword [0x14002b720], 0
mov dword [rsp + 0x48], 0x6c727473
mov word [rsp + 0x4c], 0x6e65
mov byte [rsp + 0x4e], 0
jne 0x140002569
lea rdx, [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b720], rax
cmp qword [0x14002b728], 0
mov dword [rbp - 0x70], 0x63727473
mov word [rbp - 0x6c], 0x7461
mov byte [rbp - 0x6a], 0
jne 0x140002598
lea rdx, [rbp - 0x70]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b728], rax
cmp qword [0x14002b730], 0
mov dword [rbp - 0x20], 0x72736377
mov dword [rbp - 0x1c], 0x726863
jne 0x1400025c4
lea rdx, [rbp - 0x20]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b730], rax
cmp qword [0x14002b738], 0
mov dword [rbp - 0x60], 0x63736377
mov word [rbp - 0x5c], 0x7461
mov byte [rbp - 0x5a], 0
jne 0x1400025f3
lea rdx, [rbp - 0x60]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b738], rax
cmp qword [0x14002b740], 0
mov dword [rsp + 0x50], 0x73736377
mov word [rsp + 0x54], 0x7274
mov byte [rsp + 0x56], 0
jne 0x140002626
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14002b740], rax
mov rcx, qword [rbp + 0x48]
xor rcx, rsp
call fcn.14000e440
mov rbx, qword [rsp + 0x160]
add rsp, 0x150
pop rbp
ret