Function at 0x180024f70
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x80
cmp qword [0x18007be98], 0
mov rbx, rcx
mov dword [rbp - 0x20], 0x72657375
mov dword [rbp - 0x1c], 0x642e3233
mov dword [rbp - 0x18], 0x6c6c
mov byte [rbp - 0x14], 0
mov dword [rbp - 0x40], 0x46746547
mov dword [rbp - 0x3c], 0x6765726f
mov dword [rbp - 0x38], 0x6e756f72
mov dword [rbp - 0x34], 0x6e695764
mov qword [rbp - 0x30], 0x776f64
mov dword [rbp - 0x28], 0
mov byte [rbp - 0x24], 0
jne 0x180025006
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025006
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007be98]
test rax, rax
cmovne rcx, rax
mov qword [0x18007be98], rcx
cmp qword [0x18007bf48], 0
mov dword [rbp - 0x40], 0x41746547
mov dword [rbp - 0x3c], 0x636e7973
mov dword [rbp - 0x38], 0x5379654b
mov qword [rbp - 0x34], 0x65746174
mov qword [rbp - 0x2c], 0
mov byte [rbp - 0x24], 0
jne 0x18002506a
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x18002506a
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf48]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf48], rcx
cmp qword [0x18007bed0], 0
mov dword [rbp - 0x40], 0x4b746547
mov dword [rbp - 0x3c], 0x74537965
mov qword [rbp - 0x38], 0x657461
mov qword [rbp - 0x30], 0
mov dword [rbp - 0x28], 0
mov byte [rbp - 0x24], 0
jne 0x1800250ce
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x1800250ce
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bed0]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bed0], rcx
cmp qword [0x18007bef0], 0
mov dword [rbp - 0x40], 0x4b746547
mov dword [rbp - 0x3c], 0x6f627965
mov dword [rbp - 0x38], 0x53647261
mov qword [rbp - 0x34], 0x65746174
mov qword [rbp - 0x2c], 0
mov byte [rbp - 0x24], 0
jne 0x180025132
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025132
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bef0]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bef0], rcx
cmp qword [0x18007bf40], 0
mov dword [rbp - 0x40], 0x54746547
mov dword [rbp - 0x3c], 0x6957706f
mov qword [rbp - 0x38], 0x776f646e
mov qword [rbp - 0x30], 0
mov dword [rbp - 0x28], 0
mov byte [rbp - 0x24], 0
jne 0x180025196
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025196
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf40]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf40], rcx
cmp qword [0x18007bf00], 0
mov dword [rbp - 0x40], 0x69577349
mov dword [rbp - 0x3c], 0x776f646e
mov dword [rbp - 0x38], 0x62616e45
mov qword [rbp - 0x34], 0x64656c
mov qword [rbp - 0x2c], 0
mov byte [rbp - 0x24], 0
jne 0x1800251fa
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x1800251fa
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf00]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf00], rcx
cmp qword [0x18007bf20], 0
mov dword [rbp - 0x40], 0x646e6957
mov dword [rbp - 0x3c], 0x7246776f
mov dword [rbp - 0x38], 0x6f506d6f
mov qword [rbp - 0x34], 0x746e69
mov qword [rbp - 0x2c], 0
mov byte [rbp - 0x24], 0
jne 0x18002525e
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x18002525e
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf20]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf20], rcx
cmp qword [0x18007bec0], 0
mov dword [rbp - 0x40], 0x43746553
mov dword [rbp - 0x3c], 0x6f737275
mov qword [rbp - 0x38], 0x72
mov qword [rbp - 0x30], 0
mov dword [rbp - 0x28], 0
mov byte [rbp - 0x24], 0
jne 0x1800252c2
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x1800252c2
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bec0]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bec0], rcx
cmp qword [0x18007bc88], 0
mov dword [rbp - 0x40], 0x57746547
mov dword [rbp - 0x3c], 0x6f646e69
mov dword [rbp - 0x38], 0x616c5077
mov dword [rbp - 0x34], 0x656d6563
mov qword [rbp - 0x30], 0x746e
mov dword [rbp - 0x28], 0
mov byte [rbp - 0x24], 0
jne 0x18002532c
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x18002532c
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bc88]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bc88], rcx
cmp qword [0x18007bec8], 0
mov dword [rbp - 0x40], 0x52746547
mov dword [rbp - 0x3c], 0x6e497761
mov dword [rbp - 0x38], 0x44747570
mov qword [rbp - 0x34], 0x617461
mov qword [rbp - 0x2c], 0
mov byte [rbp - 0x24], 0
jne 0x180025390
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025390
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bec8]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bec8], rcx
cmp qword [0x18007bf30], 0
mov dword [rbp - 0x40], 0x52746547
mov dword [rbp - 0x3c], 0x6e497761
mov dword [rbp - 0x38], 0x42747570
mov dword [rbp - 0x34], 0x65666675
mov qword [rbp - 0x30], 0x72
mov dword [rbp - 0x28], 0
mov byte [rbp - 0x24], 0
jne 0x1800253fa
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x1800253fa
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf30]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf30], rcx
cmp qword [0x18007bea8], 0
mov dword [rbp - 0x20], 0x336d6d69
mov dword [rbp - 0x1c], 0x6c642e32
mov dword [rbp - 0x18], 0x6c
mov byte [rbp - 0x14], 0
mov dword [rbp - 0x40], 0x476d6d49
mov dword [rbp - 0x3c], 0x6f437465
mov dword [rbp - 0x38], 0x736f706d
mov dword [rbp - 0x34], 0x6f697469
mov dword [rbp - 0x30], 0x7274536e
mov qword [rbp - 0x2c], 0x41676e69
mov byte [rbp - 0x24], 0
jne 0x18002547d
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x18002547d
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bea8]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bea8], rcx
cmp qword [0x18007bed8], 0
mov dword [rbp - 0x40], 0x476d6d49
mov dword [rbp - 0x3c], 0x6f437465
mov dword [rbp - 0x38], 0x736f706d
mov dword [rbp - 0x34], 0x6f697469
mov dword [rbp - 0x30], 0x7274536e
mov qword [rbp - 0x2c], 0x57676e69
mov byte [rbp - 0x24], 0
jne 0x1800254e7
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x1800254e7
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bed8]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bed8], rcx
mov rdx, qword [0x18007c0c8]
mov rax, qword [0x18007c0c0]
xor ecx, ecx
sub rdx, rax
mov r9d, ecx
sar rdx, 2
test edx, edx
je 0x1800255da
mov r8, rax
nop dword [rax]
cmp dword [r8], 0x41461427
je 0x180025547
inc r9d
add r8, 4
cmp r9d, edx
jb 0x180025510
test edx, edx
je 0x1800255da
nop dword [rax]
cmp dword [rax], 0x42fb6966
je 0x180025547
inc ecx
add rax, 4
cmp ecx, edx
jb 0x180025530
jmp 0x1800255da
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x706e6964
mov dword [rbp - 0x4c], 0x2e387475
mov dword [rbp - 0x48], 0x6c6c64
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x18002558f
mov ecx, dword [rbx + 0x1000448]
call fcn.18001d590
mov qword [0x18007bf60], rax
mov ecx, dword [rbx + 0x100044c]
call fcn.18001d4f0
mov qword [0x18007bf80], rax
lea rcx, [rbp - 0x60]
mov dword [rbp - 0x60], 0x706e6964
mov dword [rbp - 0x5c], 0x642e7475
mov word [rbp - 0x58], 0x6c6c
mov byte [rbp - 0x56], 0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x1800255da
mov ecx, dword [rbx + 0x1000450]
call fcn.18001d460
mov qword [0x18007beb0], rax
mov ecx, dword [rbx + 0x1000454]
call fcn.18001d3d0
mov qword [0x18007bf58], rax
mov eax, 1
mov rbx, qword [rsp + 0x90]
add rsp, 0x80
pop rbp
ret