Function at 0x1800258a0
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x80
cmp qword [0x18007bf18], 0
mov rbx, rcx
mov dword [rbp - 0x20], 0x72657375
mov dword [rbp - 0x1c], 0x642e3233
mov dword [rbp - 0x18], 0x6c6c
mov byte [rbp - 0x14], 0
mov dword [rbp - 0x40], 0x46746547
mov dword [rbp - 0x3c], 0x6765726f
mov dword [rbp - 0x38], 0x6e756f72
mov dword [rbp - 0x34], 0x6e695764
mov qword [rbp - 0x30], 0x776f64
mov dword [rbp - 0x28], 0
mov byte [rbp - 0x24], 0
jne 0x180025936
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025936
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf18]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf18], rcx
cmp qword [0x18007bfc8], 0
mov dword [rbp - 0x40], 0x41746547
mov dword [rbp - 0x3c], 0x636e7973
mov dword [rbp - 0x38], 0x5379654b
mov qword [rbp - 0x34], 0x65746174
mov qword [rbp - 0x2c], 0
mov byte [rbp - 0x24], 0
jne 0x18002599a
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x18002599a
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bfc8]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bfc8], rcx
cmp qword [0x18007bf50], 0
mov dword [rbp - 0x40], 0x4b746547
mov dword [rbp - 0x3c], 0x74537965
mov qword [rbp - 0x38], 0x657461
mov qword [rbp - 0x30], 0
mov dword [rbp - 0x28], 0
mov byte [rbp - 0x24], 0
jne 0x1800259fe
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x1800259fe
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf50]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf50], rcx
cmp qword [0x18007bf70], 0
mov dword [rbp - 0x40], 0x4b746547
mov dword [rbp - 0x3c], 0x6f627965
mov dword [rbp - 0x38], 0x53647261
mov qword [rbp - 0x34], 0x65746174
mov qword [rbp - 0x2c], 0
mov byte [rbp - 0x24], 0
jne 0x180025a62
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025a62
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf70]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf70], rcx
cmp qword [0x18007bfc0], 0
mov dword [rbp - 0x40], 0x54746547
mov dword [rbp - 0x3c], 0x6957706f
mov qword [rbp - 0x38], 0x776f646e
mov qword [rbp - 0x30], 0
mov dword [rbp - 0x28], 0
mov byte [rbp - 0x24], 0
jne 0x180025ac6
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025ac6
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bfc0]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bfc0], rcx
cmp qword [0x18007bf80], 0
mov dword [rbp - 0x40], 0x69577349
mov dword [rbp - 0x3c], 0x776f646e
mov dword [rbp - 0x38], 0x62616e45
mov qword [rbp - 0x34], 0x64656c
mov qword [rbp - 0x2c], 0
mov byte [rbp - 0x24], 0
jne 0x180025b2a
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025b2a
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf80]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf80], rcx
cmp qword [0x18007bfa0], 0
mov dword [rbp - 0x40], 0x646e6957
mov dword [rbp - 0x3c], 0x7246776f
mov dword [rbp - 0x38], 0x6f506d6f
mov qword [rbp - 0x34], 0x746e69
mov qword [rbp - 0x2c], 0
mov byte [rbp - 0x24], 0
jne 0x180025b8e
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025b8e
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bfa0]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bfa0], rcx
cmp qword [0x18007bf40], 0
mov dword [rbp - 0x40], 0x43746553
mov dword [rbp - 0x3c], 0x6f737275
mov qword [rbp - 0x38], 0x72
mov qword [rbp - 0x30], 0
mov dword [rbp - 0x28], 0
mov byte [rbp - 0x24], 0
jne 0x180025bf2
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025bf2
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf40]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf40], rcx
cmp qword [0x18007bd08], 0
mov dword [rbp - 0x40], 0x57746547
mov dword [rbp - 0x3c], 0x6f646e69
mov dword [rbp - 0x38], 0x616c5077
mov dword [rbp - 0x34], 0x656d6563
mov qword [rbp - 0x30], 0x746e
mov dword [rbp - 0x28], 0
mov byte [rbp - 0x24], 0
jne 0x180025c5c
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025c5c
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bd08]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bd08], rcx
cmp qword [0x18007bf48], 0
mov dword [rbp - 0x40], 0x52746547
mov dword [rbp - 0x3c], 0x6e497761
mov dword [rbp - 0x38], 0x44747570
mov qword [rbp - 0x34], 0x617461
mov qword [rbp - 0x2c], 0
mov byte [rbp - 0x24], 0
jne 0x180025cc0
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025cc0
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf48]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf48], rcx
cmp qword [0x18007bfb0], 0
mov dword [rbp - 0x40], 0x52746547
mov dword [rbp - 0x3c], 0x6e497761
mov dword [rbp - 0x38], 0x42747570
mov dword [rbp - 0x34], 0x65666675
mov qword [rbp - 0x30], 0x72
mov dword [rbp - 0x28], 0
mov byte [rbp - 0x24], 0
jne 0x180025d2a
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025d2a
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bfb0]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bfb0], rcx
cmp qword [0x18007bf28], 0
mov dword [rbp - 0x20], 0x336d6d69
mov dword [rbp - 0x1c], 0x6c642e32
mov dword [rbp - 0x18], 0x6c
mov byte [rbp - 0x14], 0
mov dword [rbp - 0x40], 0x476d6d49
mov dword [rbp - 0x3c], 0x6f437465
mov dword [rbp - 0x38], 0x736f706d
mov dword [rbp - 0x34], 0x6f697469
mov dword [rbp - 0x30], 0x7274536e
mov qword [rbp - 0x2c], 0x41676e69
mov byte [rbp - 0x24], 0
jne 0x180025dad
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025dad
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf28]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf28], rcx
cmp qword [0x18007bf58], 0
mov dword [rbp - 0x40], 0x476d6d49
mov dword [rbp - 0x3c], 0x6f437465
mov dword [rbp - 0x38], 0x736f706d
mov dword [rbp - 0x34], 0x6f697469
mov dword [rbp - 0x30], 0x7274536e
mov qword [rbp - 0x2c], 0x57676e69
mov byte [rbp - 0x24], 0
jne 0x180025e17
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025e17
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x18007bf58]
test rax, rax
cmovne rcx, rax
mov qword [0x18007bf58], rcx
mov rdx, qword [0x18007c148]
mov rax, qword [0x18007c140]
xor ecx, ecx
sub rdx, rax
mov r9d, ecx
sar rdx, 2
test edx, edx
je 0x180025f0a
mov r8, rax
nop dword [rax]
cmp dword [r8], 0x41461427
je 0x180025e77
inc r9d
add r8, 4
cmp r9d, edx
jb 0x180025e40
test edx, edx
je 0x180025f0a
nop dword [rax]
cmp dword [rax], 0x42fb6966
je 0x180025e77
inc ecx
add rax, 4
cmp ecx, edx
jb 0x180025e60
jmp 0x180025f0a
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x706e6964
mov dword [rbp - 0x4c], 0x2e387475
mov dword [rbp - 0x48], 0x6c6c64
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025ebf
mov ecx, dword [rbx + 0x1000448]
call fcn.18001da90
mov qword [0x18007bfe0], rax
mov ecx, dword [rbx + 0x100044c]
call fcn.18001d9f0
mov qword [0x18007c000], rax
lea rcx, [rbp - 0x60]
mov dword [rbp - 0x60], 0x706e6964
mov dword [rbp - 0x5c], 0x642e7475
mov word [rbp - 0x58], 0x6c6c
mov byte [rbp - 0x56], 0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x180025f0a
mov ecx, dword [rbx + 0x1000450]
call fcn.18001d960
mov qword [0x18007bf30], rax
mov ecx, dword [rbx + 0x1000454]
call fcn.18001d8d0
mov qword [0x18007bfd8], rax
mov eax, 1
mov rbx, qword [rsp + 0x90]
add rsp, 0x80
pop rbp
ret