Function at 0x3600af68
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov r11, rsp
push rbx
push rbp
push rsi
push rdi
push r12
push r14
sub rsp, 0x148
mov qword [rsp + 0x130], 0xfffffffffffffffe
mov rax, qword [0x3601c018]
mov qword [rsp + 0x28], rax
mov byte [r11 + 8], 0x69
lea r8, [r11 + 8]
mov r14d, 1
mov edx, r14d
lea rcx, [rsp + 0x28]
call fcn.360069e0
mov byte [rsp + 0x188], 0x70
lea r8, [rsp + 0x188]
mov edx, r14d
lea rcx, [rsp + 0x28]
call fcn.360069e0
mov byte [rsp + 0x190], 0x68
lea r8, [rsp + 0x190]
mov edx, r14d
lea rcx, [rsp + 0x28]
call fcn.360069e0
mov byte [rsp + 0x198], 0x6c
lea r8, [rsp + 0x198]
mov edx, r14d
lea rcx, [rsp + 0x28]
call fcn.360069e0
mov byte [rsp + 0xc0], 0x70
lea r8, [rsp + 0xc0]
mov edx, r14d
lea rcx, [rsp + 0x28]
call fcn.360069e0
mov byte [rsp + 0xe0], 0x61
lea r8, [rsp + 0xe0]
mov edx, r14d
lea rcx, [rsp + 0x28]
call fcn.360069e0
mov byte [rsp + 0xa8], 0x70
lea r8, [rsp + 0xa8]
mov edx, r14d
lea rcx, [rsp + 0x28]
call fcn.360069e0
mov byte [rsp + 0xd0], 0x69
lea r8, [rsp + 0xd0]
mov edx, r14d
lea rcx, [rsp + 0x28]
call fcn.360069e0
mov byte [rsp + 0x48], 0x2e
lea r8, [rsp + 0x48]
mov edx, r14d
lea rcx, [rsp + 0x28]
call fcn.360069e0
mov byte [rsp + 0xc8], 0x64
lea r8, [rsp + 0xc8]
mov edx, r14d
lea rcx, [rsp + 0x28]
call fcn.360069e0
mov byte [rsp + 0x58], 0x6c
lea r8, [rsp + 0x58]
mov edx, r14d
lea rcx, [rsp + 0x28]
call fcn.360069e0
mov byte [rsp + 0xb8], 0x6c
lea r8, [rsp + 0xb8]
mov edx, r14d
lea rcx, [rsp + 0x28]
call fcn.360069e0
mov rbx, qword [rsp + 0x28]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbp, rax
test rax, rax
jne 0x3600b11f
lea rcx, [rbx - 0xc]
cmp rcx, qword [0x3601c010]
je 0x3600b118
or edi, 0xffffffff
mov eax, edi
lock xadd dword [rcx], eax
add eax, edi
test eax, eax
jg 0x3600b118
call fcn.36010af8
xor al, al
jmp 0x3600b605
mov rax, qword [0x3601c018]
mov qword [rsp + 0x20], rax
mov byte [rsp + 0x68], 0x47
lea r8, [rsp + 0x68]
mov edx, r14d
lea rcx, [rsp + 0x20]
call fcn.360069e0
mov byte [rsp + 0xd8], 0x65
lea r8, [rsp + 0xd8]
mov edx, r14d
lea rcx, [rsp + 0x20]
call fcn.360069e0
mov byte [rsp + 0x78], 0x74
lea r8, [rsp + 0x78]
mov edx, r14d
lea rcx, [rsp + 0x20]
call fcn.360069e0
mov byte [rsp + 0xa0], 0x41
lea r8, [rsp + 0xa0]
mov edx, r14d
lea rcx, [rsp + 0x20]
call fcn.360069e0
mov byte [rsp + 0x88], 0x64
lea r8, [rsp + 0x88]
mov edx, r14d
lea rcx, [rsp + 0x20]
call fcn.360069e0
mov byte [rsp + 0xb0], 0x61
lea r8, [rsp + 0xb0]
mov edx, r14d
lea rcx, [rsp + 0x20]
call fcn.360069e0
mov byte [rsp + 0x98], 0x70
lea r8, [rsp + 0x98]
mov edx, r14d
lea rcx, [rsp + 0x20]
call fcn.360069e0
mov byte [rsp + 0x30], 0x74
lea r8, [rsp + 0x30]
mov edx, r14d
lea rcx, [rsp + 0x20]
call fcn.360069e0
mov byte [rsp + 0x38], 0x65
lea r8, [rsp + 0x38]
mov edx, r14d
lea rcx, [rsp + 0x20]
call fcn.360069e0
mov byte [rsp + 0x40], 0x72
lea r8, [rsp + 0x40]
mov edx, r14d
lea rcx, [rsp + 0x20]
call fcn.360069e0
mov byte [rsp + 0x50], 0x73
lea r8, [rsp + 0x50]
mov edx, r14d
lea rcx, [rsp + 0x20]
call fcn.360069e0
mov byte [rsp + 0x60], 0x49
lea r8, [rsp + 0x60]
mov edx, r14d
lea rcx, [rsp + 0x20]
call fcn.360069e0
mov byte [rsp + 0x70], 0x6e
lea r8, [rsp + 0x70]
mov edx, r14d
lea rcx, [rsp + 0x20]
call fcn.360069e0
mov byte [rsp + 0x80], 0x66
lea r8, [rsp + 0x80]
mov edx, r14d
lea rcx, [rsp + 0x20]
call fcn.360069e0
mov byte [rsp + 0x90], 0x6f
lea r8, [rsp + 0x90]
mov edx, r14d
lea rcx, [rsp + 0x20]
call fcn.360069e0
mov rbx, qword [rsp + 0x20]
mov rdx, rbx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
jne 0x3600b313
lea rcx, [rbx - 0xc]
or edi, 0xffffffff
cmp rcx, qword [0x3601c010]
je 0x3600b2e9
mov eax, edi
lock xadd dword [rcx], eax
add eax, edi
test eax, eax
jg 0x3600b2e9
call fcn.36010af8
nop
mov rax, qword [rsp + 0x28]
lea rcx, [rax - 0xc]
cmp rcx, qword [0x3601c010]
je 0x3600b30c
mov eax, edi
lock xadd dword [rcx], eax
add eax, edi
test eax, eax
jg 0x3600b30c
call fcn.36010af8
xor al, al
jmp 0x3600b605
and dword [rsp + 0xe8], 0
lea rdx, [rsp + 0xe8]
xor ecx, ecx
call rdi
mov ecx, dword [rsp + 0xe8]
call fcn.36010b00
mov rsi, rax
mov qword [rsp + 0x100], rax
lea rdx, [rsp + 0xe8]
mov rcx, rax
call rdi
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
or edi, 0xffffffff
test rsi, rsi
je 0x3600b5b3
lea r12, [rsi + 0x1f0]
mov rax, qword [0x3601c018]
mov qword [rsp + 0xf0], rax
mov rdx, r12
lea rcx, [rsp + 0xf0]
call fcn.36008eac
mov rbx, qword [rsp + 0xf0]
cmp dword [rbx - 8], 0
je 0x3600b502
cmp dword [rbx - 0xc], 0
jl 0x3600b3b5
mov qword [rsp + 0xf8], rbx
lock add dword [rbx - 0xc], r14d
mov rbx, qword [rsp + 0xf0]
jmp 0x3600b3d4
mov rax, qword [0x3601c018]
mov qword [rsp + 0xf8], rax
mov rdx, rbx
lea rcx, [rsp + 0xf8]
call fcn.36008eac
xor ebp, ebp
xor r9d, r9d
mov rax, qword [rsp + 0xf8]
movsxd r8, dword [rax - 8]
test r8d, r8d
je 0x3600b429
xor ecx, ecx
lea r10, [r8 + rax - 1]
cmp byte [r10], 0x2e
jne 0x3600b3ff
add ecx, 8
xor r9d, r9d
jmp 0x3600b420
movsx edx, byte [r10]
sub edx, 0x30
cmp r9d, r14d
jne 0x3600b410
lea edx, [rdx + rdx*4]
add edx, edx
cmp r9d, 2
jne 0x3600b419
imul edx, edx, 0x64
add r9d, r14d
shl edx, cl
add ebp, edx
sub r10, r14
add r8d, 0xffffffff
jne 0x3600b3f1
lea rcx, [rax - 0xc]
cmp rcx, qword [0x3601c010]
je 0x3600b459
mov eax, edi
lock xadd dword [rcx], eax
add eax, edi
test eax, eax
jg 0x3600b451
call fcn.36010af8
mov rbx, qword [rsp + 0xf0]
jmp 0x3600b459
mov rbx, qword [rsp + 0xf0]
mov dword [rsp + 0x108], 0xe0000004
mov dword [rsp + 0x10c], 8
mov dword [rsp + 0x110], 0xa000008
mov dword [rsp + 0x114], 0x7f000008
mov dword [rsp + 0x118], 0xac10000c
mov dword [rsp + 0x11c], 0xc612000f
mov dword [rsp + 0x120], 0xa9fe0010
mov dword [rsp + 0x124], 0xc0a80010
mov dword [rsp + 0x128], 0xc0000218
mov dword [rsp + 0x12c], 0xc0586318
xor r9d, r9d
lea r10, [rsp + 0x108]
mov r8d, dword [r10]
and r8d, 0xffffff00
mov ecx, 0x20
sub ecx, dword [r10]
mov edx, r14d
shl edx, cl
sub edx, r14d
not edx
and edx, ebp
cmp r8d, edx
je 0x3600b52d
add r9d, r14d
add r10, 4
cmp r9d, 0xa
jb 0x3600b4d2
mov rsi, qword [rsi]
lea rcx, [rbx - 0xc]
cmp rcx, qword [0x3601c010]
je 0x3600b523
mov eax, edi
lock xadd dword [rcx], eax
add eax, edi
test eax, eax
jg 0x3600b523
call fcn.36010af8
test rsi, rsi
je 0x3600b5a6
jmp 0x3600b367
lea rcx, [rbx - 0xc]
cmp rcx, qword [0x3601c010]
je 0x3600b54c
mov eax, edi
lock xadd dword [rcx], eax
add eax, edi
test eax, eax
jg 0x3600b54c
call fcn.36010af8
nop
mov rcx, qword [rsp + 0x100]
call fcn.36010af0
nop
mov rcx, qword [rsp + 0x20]
add rcx, 0xfffffffffffffff4
cmp rcx, qword [0x3601c010]
je 0x3600b57e
mov eax, edi
lock xadd dword [rcx], eax
add eax, edi
test eax, eax
jg 0x3600b57e
call fcn.36010af8
nop
mov rax, qword [rsp + 0x28]
lea rcx, [rax - 0xc]
cmp rcx, qword [0x3601c010]
je 0x3600b5a1
mov edx, edi
lock xadd dword [rcx], edx
add edx, edi
test edx, edx
jg 0x3600b5a1
call fcn.36010af8
mov al, r14b
jmp 0x3600b605
mov rbx, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x100]
test rsi, rsi
je 0x3600b5c1
mov rcx, rsi
call fcn.36010af0
nop
lea rcx, [rbx - 0xc]
cmp rcx, qword [0x3601c010]
je 0x3600b5e0
mov eax, edi
lock xadd dword [rcx], eax
add eax, edi
test eax, eax
jg 0x3600b5e0
call fcn.36010af8
nop
mov rax, qword [rsp + 0x28]
lea rcx, [rax - 0xc]
cmp rcx, qword [0x3601c010]
je 0x3600b603
mov eax, edi
lock xadd dword [rcx], eax
add eax, edi
test eax, eax
jg 0x3600b603
call fcn.36010af8
xor al, al
add rsp, 0x148
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret