Function at 0x180002db0
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xc0
mov rax, qword [0x18003c080]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov edi, r8d
mov r14, rdx
call fcn.180002620
test eax, eax
je 0x180003068
mov r8d, eax
mov ecx, 0x42a
call fcn.180001c20
mov rbx, rax
test rax, rax
je 0x180003068
lea rcx, [rbp - 9]
mov dword [rbp - 9], 0x4e52654b
mov dword [rbp - 5], 0x32334c65
mov dword [rbp - 1], 0x4c6c442e
mov byte [rbp + 3], 0
mov dword [rbp + 7], 0x74726956
mov dword [rbp + 0xb], 0x416c6175
mov dword [rbp + 0xf], 0x636f6c6c
mov word [rbp + 0x13], 0x7845
mov byte [rbp + 0x15], 0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [rbp + 7]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r9d, 0x1000
mov dword [rsp + 0x20], 4
mov r8d, edi
xor edx, edx
mov rcx, rbx
mov esi, edi
call rax
mov rdi, rax
test rax, rax
je 0x180003068
movdqa xmm0, xmmword [0x180036fc0]
lea rcx, [rbp - 0x41]
movdqu xmmword [rbp - 0x21], xmm0
mov dword [rbp - 0x41], 0x4e52654b
mov dword [rbp - 0x3d], 0x32334c65
mov dword [rbp - 0x39], 0x4c6c442e
mov byte [rbp - 0x35], 0
mov word [rbp - 0x11], 0x7972
mov byte [rbp - 0xf], 0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [rbp - 0x21]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
xor r15d, r15d
mov r9d, esi
mov r8, r14
mov qword [rsp + 0x20], r15
mov rdx, rdi
mov rcx, rbx
call rax
test eax, eax
je 0x180003068
movdqa xmm0, xmmword [0x180037000]
lea rcx, [rbp - 0x41]
movdqu xmmword [rbp - 0x21], xmm0
mov dword [rbp - 0x41], 0x4e52654b
mov dword [rbp - 0x3d], 0x32334c65
mov dword [rbp - 0x39], 0x4c6c442e
mov byte [rbp - 0x35], r15b
mov byte [rbp - 0x11], r15b
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [rbp - 0x21]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rbp - 0x49]
mov r8d, esi
mov qword [rsp + 0x20], rcx
lea r9d, [r15 + 0x10]
mov rcx, rbx
mov rdx, rdi
call rax
cmp dword [rbp - 0x49], r15d
je 0x180003068
movdqa xmm0, xmmword [0x180036f30]
lea rcx, [rbp - 0x41]
movdqu xmmword [rbp + 0x17], xmm0
mov dword [rbp - 0x41], 0x4e52654b
mov dword [rbp - 0x3d], 0x32334c65
mov dword [rbp - 0x39], 0x4c6c442e
mov byte [rbp - 0x35], r15b
mov word [rbp + 0x27], 0x6461
mov byte [rbp + 0x29], r15b
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [rbp + 0x17]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x30], r15
mov r9, rdi
mov dword [rsp + 0x28], r15d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], r15
mov rcx, rbx
call rax
mov rsi, rax
test rax, rax
je 0x180003068
movdqa xmm0, xmmword [0x180036f70]
lea rcx, [rbp - 0x31]
movdqu xmmword [rbp - 0x21], xmm0
mov dword [rbp - 0x31], 0x4e52654b
mov dword [rbp - 0x2d], 0x32334c65
mov dword [rbp - 0x29], 0x4c6c442e
mov byte [rbp - 0x25], r15b
mov dword [rbp - 0x11], 0x746365
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [rbp - 0x21]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, 0xbb8
mov rcx, rsi
call rax
lea rcx, [rbp - 0x31]
mov dword [rbp - 0x31], 0x4e52654b
mov dword [rbp - 0x2d], 0x32334c65
mov dword [rbp - 0x29], 0x4c6c442e
mov byte [rbp - 0x25], r15b
mov dword [rbp - 0x21], 0x74726956
mov dword [rbp - 0x1d], 0x466c6175
mov dword [rbp - 0x19], 0x45656572
mov word [rbp - 0x15], 0x78
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [rbp - 0x21]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call rax
mov rcx, rsi
call fcn.180001cb0
mov rcx, rbx
call fcn.180001cb0
xor eax, eax
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.18000b370
mov rbx, qword [rsp + 0x108]
add rsp, 0xc0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret