Function at 0x140045010
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Link many functions at runtime

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x190
mov rax, qword [0x1400f4380]
xor rax, rsp
mov qword [rsp + 0x188], rax
mov r15, rcx
xor ebx, ebx
mov dword [r11 - 0x30], 0x445b4d6c
mov dword [r11 - 0x2c], 0x1c1e404e
mov dword [r11 - 0x28], 0x5e5d5401
xor eax, eax
mov byte [r11 - 0x24], al
mov edx, ebx
nop
movsxd rax, edx
lea rcx, [rsp + 0x178]
add rcx, rax
lea eax, [rdx + 0x27]
xor byte [rcx], al
inc edx
cmp edx, 0xc
jb 0x140045060
mov byte [rsp + 0x184], 0
lea rcx, [rsp + 0x178]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r14, rax
test rax, rax
jne 0x1400450b2
lea rcx, [rsp + 0x178]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r14, rax
test rax, rax
je 0x140045aaa
movdqa xmm0, xmmword [str.uMHNBMJCB]
movdqu xmmword [rsp + 0x130], xmm0
mov word [rsp + 0x140], 0x4e
mov edx, ebx
nop
movsxd rax, edx
lea rcx, [rsp + 0x130]
add rcx, rax
lea eax, [rdx + 0x27]
xor byte [rcx], al
inc edx
cmp edx, 0x11
jb 0x1400450d0
mov byte [rsp + 0x141], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140045120
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140003610
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [r15 + 8], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x1400451ac
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400451a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045ac5
call fcn.14008ca08
test rsi, rsi
je 0x140045acb
movdqa xmm0, xmmword [0x1400c2460]
movdqu xmmword [rsp + 0x130], xmm0
mov word [rsp + 0x140], 0x4145
xor eax, eax
mov byte [rsp + 0x142], al
mov edx, ebx
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x130]
add rcx, rax
lea eax, [rdx + 0x27]
xor byte [rcx], al
inc edx
cmp edx, 0x12
jb 0x1400451e0
mov byte [rsp + 0x142], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140045224
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140003610
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [r15 + 0x10], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x1400452b0
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400452ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045ae6
call fcn.14008ca08
test rsi, rsi
je 0x140045aec
movdqa xmm0, xmmword [0x1400c2440]
movdqu xmmword [rsp + 0x130], xmm0
mov word [rsp + 0x140], 0x5c56
xor eax, eax
mov byte [rsp + 0x142], al
mov edx, ebx
nop
movsxd rax, edx
lea rcx, [rsp + 0x130]
add rcx, rax
lea eax, [rdx + 0x27]
xor byte [rcx], al
inc edx
cmp edx, 0x12
jb 0x1400452e0
mov byte [rsp + 0x142], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140045324
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140003610
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [r15 + 0x18], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x1400453b0
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400453ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045b07
call fcn.14008ca08
test rsi, rsi
je 0x140045b0d
mov dword [rsp + 0x130], 0x5e5b4171
mov dword [rsp + 0x134], 0x6f414d5e
mov dword [rsp + 0x138], 0x515e5c43
mov word [rsp + 0x13c], 0x4c76
xor eax, eax
mov byte [rsp + 0x13e], al
mov edx, ebx
nop
movsxd rax, edx
lea rcx, [rsp + 0x130]
add rcx, rax
lea eax, [rdx + 0x27]
xor byte [rcx], al
inc edx
cmp edx, 0xe
jb 0x1400453f0
mov byte [rsp + 0x13e], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140045434
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140003610
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [r15 + 0x20], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x1400454c0
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400454bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045b28
call fcn.14008ca08
test rsi, rsi
je 0x140045b2e
mov dword [rsp + 0x130], 0x5e5b4171
mov dword [rsp + 0x134], 0x68414d5e
mov dword [rsp + 0x138], 0x7754555d
mov word [rsp + 0x13c], 0x4b
mov edx, ebx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x130]
add rcx, rax
lea eax, [rdx + 0x27]
xor byte [rcx], al
inc edx
cmp edx, 0xd
jb 0x140045500
mov byte [rsp + 0x13d], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140045544
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140003610
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [r15 + 0x28], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x1400455d0
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400455cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045b4f
call fcn.14008ca08
test rsi, rsi
je 0x140045b55
mov dword [rsp + 0x130], 0x5e5b4171
mov dword [rsp + 0x134], 0x7f414d5e
mov dword [rsp + 0x138], 0x4b43555a
mov word [rsp + 0x13c], 0x4c76
xor eax, eax
mov byte [rsp + 0x13e], al
mov edx, ebx
nop
movsxd rax, edx
lea rcx, [rsp + 0x130]
add rcx, rax
lea eax, [rdx + 0x27]
xor byte [rcx], al
inc edx
cmp edx, 0xe
jb 0x140045610
mov byte [rsp + 0x13e], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140045654
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140003610
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [r15 + 0x30], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x1400456e0
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400456db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045b76
call fcn.14008ca08
test rsi, rsi
je 0x140045b7c
movdqa xmm0, xmmword [0x1400c2420]
movdqu xmmword [rsp + 0x130], xmm0
xor eax, eax
mov byte [rsp + 0x140], al
mov edx, ebx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x130]
add rcx, rax
lea eax, [rdx + 0x27]
xor byte [rcx], al
inc edx
cmp edx, 0x10
jb 0x140045710
mov byte [rsp + 0x140], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140045754
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140003610
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [r15 + 0x68], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x1400457e0
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400457db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045b9d
call fcn.14008ca08
test rsi, rsi
je 0x140045ba3
mov dword [rsp + 0x168], 0x584c5b72
mov dword [rsp + 0x16c], 0x4a031e18
mov word [rsp + 0x170], 0x5c43
xor eax, eax
mov byte [rsp + 0x172], al
mov edx, ebx
nop dword [rax]
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x168]
add rcx, rax
lea eax, [rdx + 0x27]
xor byte [rcx], al
inc edx
cmp edx, 0xa
jb 0x140045820
mov byte [rsp + 0x172], 0
lea rcx, [rsp + 0x168]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rsi, rax
test rax, rax
jne 0x140045872
lea rcx, [rsp + 0x168]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
je 0x140045bc4
mov dword [rsp + 0x130], 0x4e474161
mov dword [rsp + 0x134], 0x4a43457c
mov dword [rsp + 0x138], 0x664740
mov edx, ebx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x130]
add rcx, rax
lea eax, [rdx + 0x27]
xor byte [rcx], al
inc edx
cmp edx, 0xb
jb 0x1400458a0
mov byte [rsp + 0x13b], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x1400458e4
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140003610
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r14, rax
mov qword [r15 + 0xd0], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x140045973
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004596e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045be5
call fcn.14008ca08
test r14, r14
je 0x140045beb
movdqa xmm0, xmmword [0x1400c2430]
movdqu xmmword [rsp + 0x130], xmm0
xor eax, eax
mov byte [rsp + 0x140], al
nop word [rax + rax]
movsxd rax, ebx
lea rcx, [rsp + 0x130]
add rcx, rax
lea eax, [rbx + 0x27]
xor byte [rcx], al
inc ebx
cmp ebx, 0x10
jb 0x1400459a0
mov byte [rsp + 0x140], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
inc rdi
cmp byte [rax + rdi], 0
jne 0x1400459e1
mov r8, rdi
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140003610
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [r15 + 0xd8], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x140045a72
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140045a6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140045c0c
call fcn.14008ca08
test rbx, rbx
je 0x140045c12
mov al, 1
jmp 0x140045a81
mov rcx, qword [rsp + 0x188]
xor rcx, rsp
call fcn.14008ce80
lea r11, [rsp + 0x190]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
lea rcx, [rsp + 0x28]
call fcn.14003dd00
lea rdx, [0x1400f27f0]
lea rcx, [rsp + 0x28]
call fcn.14008dde0
call fcn.140093a00
int3
lea rcx, [rsp + 0x40]
call fcn.14003dd00
lea rdx, [0x1400f27f0]
lea rcx, [rsp + 0x40]
call fcn.14008dde0
call fcn.140093a00
int3
lea rcx, [rsp + 0x58]
call fcn.14003dd00
lea rdx, [0x1400f27f0]
lea rcx, [rsp + 0x58]
call fcn.14008dde0
call fcn.140093a00
int3
lea rcx, [rsp + 0x70]
call fcn.14003dd00
lea rdx, [0x1400f27f0]
lea rcx, [rsp + 0x70]
call fcn.14008dde0
call fcn.140093a00
int3
lea rcx, [rsp + 0x88]
call fcn.14003dd00
lea rdx, [0x1400f27f0]
lea rcx, [rsp + 0x88]
call fcn.14008dde0
call fcn.140093a00
int3
lea rcx, [rsp + 0xa0]
call fcn.14003dd00
lea rdx, [0x1400f27f0]
lea rcx, [rsp + 0xa0]
call fcn.14008dde0
call fcn.140093a00
int3
lea rcx, [rsp + 0xb8]
call fcn.14003dd00
lea rdx, [0x1400f27f0]
lea rcx, [rsp + 0xb8]
call fcn.14008dde0
call fcn.140093a00
int3
lea rcx, [rsp + 0xd0]
call fcn.14003dd00
lea rdx, [0x1400f27f0]
lea rcx, [rsp + 0xd0]
call fcn.14008dde0
lea rcx, [rsp + 0xe8]
call fcn.14003dd00
lea rdx, [0x1400f27f0]
lea rcx, [rsp + 0xe8]
call fcn.14008dde0
call fcn.140093a00
int3
lea rcx, [rsp + 0x100]
call fcn.14003dd00
lea rdx, [0x1400f27f0]
lea rcx, [rsp + 0x100]
call fcn.14008dde0
call fcn.140093a00
int3
lea rcx, [rsp + 0x118]
call fcn.14003dd00
lea rdx, [0x1400f27f0]
lea rcx, [rsp + 0x118]
call fcn.14008dde0
int3