Function at 0x140004240
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xe0
mov rax, qword [0x140028058]
xor rax, rsp
mov qword [rbp + 0x47], rax
lea rcx, [rbp - 0x19]
mov dword [rbp - 0x19], 0x5f327377
mov dword [rbp - 0x15], 0x642e3233
mov word [rbp - 0x11], 0x6c6c
mov byte [rbp - 0xf], 0
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x1400044e7
mov edx, 0x70
mov dword [rbp + 7], 0x73746573
mov dword [rbp + 0xb], 0x6f6b636f
lea ecx, [rdx - 0x30]
mov word [rbp + 0xf], 0x7470
mov byte [rbp + 0x11], 0
mov dword [rbp - 0x69], 0x76636572
mov byte [rbp - 0x65], 0
mov dword [rbp - 0x49], 0x656c6573
mov word [rbp - 0x45], 0x7463
mov byte [rbp - 0x43], 0
mov dword [rbp - 0x61], 0x646e6573
mov byte [rbp - 0x5d], 0
mov dword [rbp + 0x37], 0x47415357
mov dword [rbp + 0x3b], 0x614c7465
mov dword [rbp + 0x3f], 0x72457473
mov dword [rbp + 0x43], 0x726f72
mov dword [rbp + 0x27], 0x68746567
mov dword [rbp + 0x2b], 0x6274736f
mov dword [rbp + 0x2f], 0x6d616e79
mov word [rbp + 0x33], 0x65
mov dword [rbp + 0x17], 0x736f6c63
mov dword [rbp + 0x1b], 0x636f7365
mov dword [rbp + 0x1f], 0x74656b
mov dword [rbp - 0x51], 0x6b636f73
mov word [rbp - 0x4d], 0x7465
mov byte [rbp - 0x4b], 0
mov dword [rbp - 0x29], 0x53415357
mov dword [rbp - 0x25], 0x74726174
mov word [rbp - 0x21], 0x7075
mov byte [rbp - 0x1f], 0
mov dword [rbp - 9], 0x43415357
mov dword [rbp - 5], 0x6e61656c
mov word [rbp - 1], 0x7075
mov byte [rbp + 1], 0
mov dword [rbp - 0x59], 0x6e6f7468
mov word [rbp - 0x55], 0x73
mov dword [rbp - 0x39], 0x74656e69
mov dword [rbp - 0x35], 0x6464615f
mov word [rbp - 0x31], 0x72
mov dword [rbp - 0x41], 0x6e6e6f63
mov dword [rbp - 0x3d], 0x746365
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov qword [0x14002e310], rax
test rax, rax
je 0x1400044ee
lea rdx, [rbp + 0x17]
mov rcx, rbx
mov qword [rax], rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14002e310]
lea rdx, [rbp - 0x41]
mov qword [rcx + 0x38], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14002e310]
lea rdx, [rbp + 0x27]
mov qword [rcx + 0x68], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14002e310]
lea rdx, [rbp - 0x59]
mov qword [rcx + 0x30], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14002e310]
lea rdx, [rbp - 0x39]
mov qword [rcx + 0x58], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14002e310]
lea rdx, [rbp - 0x69]
mov qword [rcx + 0x60], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14002e310]
lea rdx, [rbp - 0x49]
mov qword [rcx + 0x10], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14002e310]
lea rdx, [rbp - 0x61]
mov qword [rcx + 0x18], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14002e310]
lea rdx, [rbp + 7]
mov qword [rcx + 0x20], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14002e310]
lea rdx, [rbp - 0x51]
mov qword [rcx + 8], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14002e310]
lea rdx, [rbp - 9]
mov qword [rcx + 0x40], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14002e310]
lea rdx, [rbp + 0x37]
mov qword [rcx + 0x50], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14002e310]
lea rdx, [rbp - 0x29]
mov qword [rcx + 0x28], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14002e310]
mov qword [rcx + 0x48], rax
mov rax, rcx
jmp 0x1400044ee
mov rax, qword [0x14002e310]
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.14000f440
mov rbx, qword [rsp + 0xf0]
add rsp, 0xe0
pop rbp
ret