Function at 0x180024e00
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x80
cmp qword [0x18007be88], 0
mov rbx, rcx
mov dword [rbp - 0x20], 0x72657375
mov dword [rbp - 0x1c], 0x642e3233
mov dword [rbp - 0x18], 0x6c6c
mov byte [rbp - 0x14], 0
mov dword [rbp - 0x40], 0x46746547
mov dword [rbp - 0x3c], 0x6765726f
mov dword [rbp - 0x38], 0x6e756f72
mov dword [rbp - 0x34], 0x6e695764
mov qword [rbp - 0x30], 0x776f64
mov dword [rbp - 0x28], 0
mov byte [rbp - 0x24], 0
jne 0x180024e96
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180024e96
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007be88]
test rax, rax
cmovne rcx, rax
mov qword [0x18007be88], rcx
cmp qword [0x18007bf38], 0
mov dword [rbp - 0x40], 0x41746547
mov dword [rbp - 0x3c], 0x636e7973
mov dword [rbp - 0x38], 0x5379654b
mov qword [rbp - 0x34], 0x65746174
mov qword [rbp - 0x2c], 0
mov byte [rbp - 0x24], 0
jne 0x180024efa
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180024efa
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf38]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf38], rcx
cmp qword [0x18007bec0], 0
mov dword [rbp - 0x40], 0x4b746547
mov dword [rbp - 0x3c], 0x74537965
mov qword [rbp - 0x38], 0x657461
mov qword [rbp - 0x30], 0
mov dword [rbp - 0x28], 0
mov byte [rbp - 0x24], 0
jne 0x180024f5e
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180024f5e
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bec0]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bec0], rcx
cmp qword [0x18007bee0], 0
mov dword [rbp - 0x40], 0x4b746547
mov dword [rbp - 0x3c], 0x6f627965
mov dword [rbp - 0x38], 0x53647261
mov qword [rbp - 0x34], 0x65746174
mov qword [rbp - 0x2c], 0
mov byte [rbp - 0x24], 0
jne 0x180024fc2
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180024fc2
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bee0]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bee0], rcx
cmp qword [0x18007bf30], 0
mov dword [rbp - 0x40], 0x54746547
mov dword [rbp - 0x3c], 0x6957706f
mov qword [rbp - 0x38], 0x776f646e
mov qword [rbp - 0x30], 0
mov dword [rbp - 0x28], 0
mov byte [rbp - 0x24], 0
jne 0x180025026
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025026
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf30]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf30], rcx
cmp qword [0x18007bef0], 0
mov dword [rbp - 0x40], 0x69577349
mov dword [rbp - 0x3c], 0x776f646e
mov dword [rbp - 0x38], 0x62616e45
mov qword [rbp - 0x34], 0x64656c
mov qword [rbp - 0x2c], 0
mov byte [rbp - 0x24], 0
jne 0x18002508a
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x18002508a
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bef0]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bef0], rcx
cmp qword [0x18007bf10], 0
mov dword [rbp - 0x40], 0x646e6957
mov dword [rbp - 0x3c], 0x7246776f
mov dword [rbp - 0x38], 0x6f506d6f
mov qword [rbp - 0x34], 0x746e69
mov qword [rbp - 0x2c], 0
mov byte [rbp - 0x24], 0
jne 0x1800250ee
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x1800250ee
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf10]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf10], rcx
cmp qword [0x18007beb0], 0
mov dword [rbp - 0x40], 0x43746553
mov dword [rbp - 0x3c], 0x6f737275
mov qword [rbp - 0x38], 0x72
mov qword [rbp - 0x30], 0
mov dword [rbp - 0x28], 0
mov byte [rbp - 0x24], 0
jne 0x180025152
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025152
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007beb0]
test rax, rax
cmovne rcx, rax
mov qword [0x18007beb0], rcx
cmp qword [0x18007bb78], 0
mov dword [rbp - 0x40], 0x57746547
mov dword [rbp - 0x3c], 0x6f646e69
mov dword [rbp - 0x38], 0x616c5077
mov dword [rbp - 0x34], 0x656d6563
mov qword [rbp - 0x30], 0x746e
mov dword [rbp - 0x28], 0
mov byte [rbp - 0x24], 0
jne 0x1800251bc
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x1800251bc
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bb78]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bb78], rcx
cmp qword [0x18007beb8], 0
mov dword [rbp - 0x40], 0x52746547
mov dword [rbp - 0x3c], 0x6e497761
mov dword [rbp - 0x38], 0x44747570
mov qword [rbp - 0x34], 0x617461
mov qword [rbp - 0x2c], 0
mov byte [rbp - 0x24], 0
jne 0x180025220
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025220
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007beb8]
test rax, rax
cmovne rcx, rax
mov qword [0x18007beb8], rcx
cmp qword [0x18007bf20], 0
mov dword [rbp - 0x40], 0x52746547
mov dword [rbp - 0x3c], 0x6e497761
mov dword [rbp - 0x38], 0x42747570
mov dword [rbp - 0x34], 0x65666675
mov qword [rbp - 0x30], 0x72
mov dword [rbp - 0x28], 0
mov byte [rbp - 0x24], 0
jne 0x18002528a
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x18002528a
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf20]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf20], rcx
cmp qword [0x18007be98], 0
mov dword [rbp - 0x20], 0x336d6d69
mov dword [rbp - 0x1c], 0x6c642e32
mov dword [rbp - 0x18], 0x6c
mov byte [rbp - 0x14], 0
mov dword [rbp - 0x40], 0x476d6d49
mov dword [rbp - 0x3c], 0x6f437465
mov dword [rbp - 0x38], 0x736f706d
mov dword [rbp - 0x34], 0x6f697469
mov dword [rbp - 0x30], 0x7274536e
mov qword [rbp - 0x2c], 0x41676e69
mov byte [rbp - 0x24], 0
jne 0x18002530d
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x18002530d
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007be98]
test rax, rax
cmovne rcx, rax
mov qword [0x18007be98], rcx
cmp qword [0x18007bec8], 0
mov dword [rbp - 0x40], 0x476d6d49
mov dword [rbp - 0x3c], 0x6f437465
mov dword [rbp - 0x38], 0x736f706d
mov dword [rbp - 0x34], 0x6f697469
mov dword [rbp - 0x30], 0x7274536e
mov qword [rbp - 0x2c], 0x57676e69
mov byte [rbp - 0x24], 0
jne 0x180025377
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025377
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bec8]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bec8], rcx
mov rdx, qword [0x18007c0b8]
mov rax, qword [0x18007c0b0]
xor ecx, ecx
sub rdx, rax
mov r9d, ecx
sar rdx, 2
test edx, edx
je 0x18002546a
mov r8, rax
nop dword [rax]
cmp dword [r8], 0x41461427
je 0x1800253d7
inc r9d
add r8, 4
cmp r9d, edx
jb 0x1800253a0
test edx, edx
je 0x18002546a
nop dword [rax]
cmp dword [rax], 0x42fb6966
je 0x1800253d7
inc ecx
add rax, 4
cmp ecx, edx
jb 0x1800253c0
jmp 0x18002546a
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x706e6964
mov dword [rbp - 0x4c], 0x2e387475
mov dword [rbp - 0x48], 0x6c6c64
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x18002541f
mov ecx, dword [rbx + 0x1000448]
call fcn.18001d2c0
mov qword [0x18007bf50], rax
mov ecx, dword [rbx + 0x100044c]
call fcn.18001d220
mov qword [0x18007bf70], rax
lea rcx, [rbp - 0x60]
mov dword [rbp - 0x60], 0x706e6964
mov dword [rbp - 0x5c], 0x642e7475
mov word [rbp - 0x58], 0x6c6c
mov byte [rbp - 0x56], 0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x18002546a
mov ecx, dword [rbx + 0x1000450]
call fcn.18001d190
mov qword [0x18007bea0], rax
mov ecx, dword [rbx + 0x1000454]
call fcn.18001d100
mov qword [0x18007bf48], rax
mov eax, 1
mov rbx, qword [rsp + 0x90]
add rsp, 0x80
pop rbp
ret