Function at 0x360046d8
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x140
xor edi, edi
cmp qword [0x3601d130], rdi
jne 0x360052bc
mov rax, qword [0x3601d400]
cmp rax, rdi
je 0x36004770
mov rax, qword [rax + 0x40]
movabs rcx, 0xf5ccb82abaa6cfd
mov edx, 0x82a99f01
mov r9d, 0x567e2cee
mov r8d, 0xc9f065ef
imul rax, rcx
mov ecx, 0x51b3c62
call rax
mov r11, qword [0x3601d400]
movabs rcx, 0x18083e8c2de6230d
mov rax, qword [r11 + 0x260]
mov edx, 0x31f67468
imul rax, rcx
mov ecx, 0x888bdf79
call rax
mov r11, qword [0x3601d400]
movabs rcx, 0xf2ffaca79e8881f4
mov rax, qword [r11 + 0x2a0]
imul rax, rcx
call rax
lea rcx, [rsp + 0x41]
xor edx, edx
mov r8d, 0xff
call fcn.36010e70
lea rcx, [rsp + 0x40]
mov byte [rsp + 0x40], 0x57
mov byte [rsp + 0x41], 0x49
mov byte [rsp + 0x42], 0x4e
mov byte [rsp + 0x43], 0x49
mov byte [rsp + 0x44], 0x4e
mov byte [rsp + 0x45], 0x45
mov byte [rsp + 0x46], 0x54
mov byte [rsp + 0x47], dil
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r10, qword [0x3601d400]
mov rbx, rax
cmp r10, rdi
je 0x3600490a
mov r10, qword [r10 + 0x178]
movabs rax, 0xfb7fc8d82f311f1a
mov edx, 0xe5fe2ee9
mov r9d, 0x26dacae3
mov r8d, 0xfbe44bdd
mov ecx, 0xc5c73dc4
or r10, rax
mov dword [rsp + 0x20], 0xe59163a9
call r10
mov r11, qword [0x3601d400]
movabs rcx, 0xaf40f58f6dd03c9a
mov rax, qword [r11 + 0x300]
mov edx, 0xe82adb5a
mov r9d, 0xa2de6717
xor rax, rcx
mov r8d, 0x231e6c3
mov ecx, 0x5ec5df6d
mov dword [rsp + 0x20], 0xb5340abb
call rax
mov r11, qword [0x3601d400]
mov rax, qword [r11 + 0xc0]
movabs rcx, 0x9dc75ec8750b7bfd
mov edx, 0x24ddff75
mov r9d, 0x82dc5917
mov r8d, 0xa5a77bf5
imul rax, rcx
mov ecx, 0xb6e85d50
call rax
mov r11, qword [0x3601d400]
movabs rcx, 0x3f050e6c95c07eae
mov rax, qword [r11 + 0x2f0]
mov edx, 0x3fe926fd
mov r9d, 0xcb558b50
xor rax, rcx
mov r8d, 0xedb6b395
mov ecx, 0x927d1bd3
mov dword [rsp + 0x20], 0x75916cf
call rax
mov r11, qword [0x3601d400]
mov rax, qword [r11 + 0x158]
movabs rcx, 0x3b93066dbe0e8b9e
mov edx, 0x8ca24027
add rax, rcx
mov ecx, 0x6fb0dcab
call rax
mov r11, qword [0x3601d400]
movabs rcx, 0xaf5d7a034995f149
mov rax, qword [r11 + 0xf8]
mov edx, 0x7bd071c3
mov r9d, 0xc4c0cbfe
mov r8d, 0xd816ad0c
mov dword [rsp + 0x20], 0x35e2609d
imul rax, rcx
mov ecx, 0xf66d834f
call rax
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x40], 0x49
mov byte [rsp + 0x41], 0x6e
mov byte [rsp + 0x42], 0x74
mov byte [rsp + 0x43], 0x65
mov byte [rsp + 0x44], 0x72
mov byte [rsp + 0x45], 0x6e
mov byte [rsp + 0x46], 0x65
mov byte [rsp + 0x47], 0x74
mov byte [rsp + 0x48], 0x4f
mov byte [rsp + 0x49], 0x70
mov byte [rsp + 0x4a], 0x65
mov byte [rsp + 0x4b], 0x6e
mov byte [rsp + 0x4c], 0x41
mov byte [rsp + 0x4d], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x3601d130], rax
mov rax, qword [0x3601d400]
cmp rax, rdi
je 0x360049e0
mov rax, qword [rax + 0x2c8]
movabs rcx, 0x18e02359fb85d8b8
mov edx, 0x65be6215
mov r9d, 0x981c2f19
mov r8d, 0xc81af183
mov dword [rsp + 0x28], 0x2419f960
imul rax, rcx
mov ecx, 0x9d69cd4b
mov dword [rsp + 0x20], 0x67a22037
call rax
mov rax, qword [0x3601d400]
xor edx, edx
mov rax, qword [rax + 0x70]
movabs rcx, 0xc6fd800cba246c19
mov r9d, 0xcd2c8c
div rcx
mov edx, 0x916c2451
mov r8d, 0x96bf7d53
mov ecx, 0x6ec3a809
call rax
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x48], 0x43
mov byte [rsp + 0x49], 0x6c
mov byte [rsp + 0x4a], 0x6f
mov byte [rsp + 0x4b], 0x73
mov byte [rsp + 0x4c], 0x65
mov byte [rsp + 0x4d], 0x48
mov byte [rsp + 0x4e], 0x61
mov byte [rsp + 0x4f], 0x6e
mov byte [rsp + 0x50], 0x64
mov byte [rsp + 0x51], 0x6c
mov byte [rsp + 0x52], 0x65
mov byte [rsp + 0x53], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x3601d148], rax
mov rax, qword [0x3601d400]
cmp rax, rdi
je 0x36004a9c
mov rax, qword [rax + 0x110]
movabs rcx, 0x77b4d5bfdb74d7f1
mov edx, 0x59b79b77
or rax, rcx
mov ecx, 0xdd8e93b3
call rax
mov r11, qword [0x3601d400]
movabs rcx, 0xe6084b8ab5ce051d
mov rax, qword [r11 + 0x170]
or rax, rcx
call rax
mov r11, qword [0x3601d400]
movabs rcx, 0x580e1eb4cb34177f
mov rax, qword [r11 + 0x1a0]
add rax, rcx
mov ecx, 0xadf3935f
call rax
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x48], 0x43
mov byte [rsp + 0x49], 0x6f
mov byte [rsp + 0x4a], 0x6e
mov byte [rsp + 0x4b], 0x6e
mov byte [rsp + 0x4c], 0x65
mov byte [rsp + 0x4d], 0x63
mov byte [rsp + 0x4e], 0x74
mov byte [rsp + 0x4f], 0x41
mov byte [rsp + 0x50], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x3601d140], rax
mov rax, qword [0x3601d400]
cmp rax, rdi
je 0x36004b26
mov rax, qword [rax + 0x1a0]
movabs rcx, 0x1be953d0fed64084
mov edx, 0x4b9cdf54
sub rax, rcx
mov r9d, 0xffb5d692
mov r8d, 0xe39bb307
mov ecx, 0x8c5479b8
mov dword [rsp + 0x28], 0x2ef77e95
mov dword [rsp + 0x20], 0x3152364
call rax
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x48], 0x51
mov byte [rsp + 0x49], 0x75
mov byte [rsp + 0x4a], 0x65
mov byte [rsp + 0x4b], 0x72
mov byte [rsp + 0x4c], 0x79
mov byte [rsp + 0x4d], 0x4f
mov byte [rsp + 0x4e], 0x70
mov byte [rsp + 0x4f], 0x74
mov byte [rsp + 0x50], 0x69
mov byte [rsp + 0x51], 0x6f
mov byte [rsp + 0x52], 0x6e
mov byte [rsp + 0x53], 0x41
mov byte [rsp + 0x54], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x3601d138], rax
mov rax, qword [0x3601d400]
cmp rax, rdi
je 0x36004cce
mov rax, qword [rax + 0x88]
xor edx, edx
movabs rcx, 0xbd72ff94060955f8
div rcx
mov r8d, 0x6565ef4
mov ecx, 0x2b72d5f5
mov r9, rdx
mov edx, 0x9de6e32c
call r9
mov r11, qword [0x3601d400]
movabs rcx, 0x875bc584a81d2e12
mov rax, qword [r11 + 0xc8]
mov edx, 0x1d9727b9
mov r8d, 0x526b7733
or rax, rcx
mov ecx, 0x87e108e3
call rax
mov r11, qword [0x3601d400]
movabs rcx, 0x14d6c28bee919cbe
mov rax, qword [r11 + 0x78]
mov edx, 0xdc37771a
mov r9d, 0xbf46e75f
or rax, rcx
mov r8d, 0xfedb3492
mov ecx, 0x5b871304
mov dword [rsp + 0x28], 0x77af9e46
mov dword [rsp + 0x20], 0x1368a93b
call rax
mov rax, qword [0x3601d400]
xor edx, edx
movabs rcx, 0x89f32fe113338cca
mov rax, qword [rax + 0x170]
mov dword [rsp + 0x30], 0x2497da00
mov r9d, 0x4d685d7e
div rcx
mov r8d, 0x1917ffa3
mov edx, 0x735f96b2
mov ecx, 0x485a2119
mov dword [rsp + 0x28], 0x80416359
mov dword [rsp + 0x20], 0x2c477e
call rax
mov rax, qword [0x3601d400]
xor edx, edx
mov rax, qword [rax + 0x260]
movabs rcx, 0x3ae59bd03cd7e180
mov r8d, 0x5ba83bbe
div rcx
mov edx, 0x4a43737
mov ecx, 0xb73d28bd
call rax
mov r11, qword [0x3601d400]
movabs rcx, 0xcc9958692b2099b
mov rax, qword [r11 + 0x130]
mov edx, 0xcb9f0d60
mov r8d, 0x61e36bfe
or rax, rcx
mov ecx, 0x637e97d5
call rax
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x4d], 0x44
mov byte [rsp + 0x4e], 0x61
mov byte [rsp + 0x4f], 0x74
mov byte [rsp + 0x50], 0x61
mov byte [rsp + 0x51], 0x41
mov byte [rsp + 0x52], 0x76
mov byte [rsp + 0x53], 0x61
mov byte [rsp + 0x54], 0x69
mov byte [rsp + 0x55], 0x6c
mov byte [rsp + 0x56], 0x61
mov byte [rsp + 0x57], 0x62
mov byte [rsp + 0x58], 0x6c
mov byte [rsp + 0x59], 0x65
mov byte [rsp + 0x5a], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x3601d120], rax
mov rax, qword [0x3601d400]
cmp rax, rdi
je 0x36004d96
mov rax, qword [rax + 0x220]
movabs rcx, 0xc11955993319ef3d
mov dword [rsp + 0x30], 0x37803e9a
xor rax, rcx
mov edx, 0xa08fe8d7
mov r9d, 0x4155c4a8
mov r8d, 0x464ee6bc
mov ecx, 0x7b3d1b3c
mov dword [rsp + 0x28], 0xff1ef24b
mov dword [rsp + 0x20], 0xd3bb76c6
call rax
mov r11, qword [0x3601d400]
mov rax, qword [r11 + 0x288]
movabs rcx, 0xc8894f11d27df48
or rax, rcx
call rax
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x48], 0x52
mov byte [rsp + 0x49], 0x65
mov byte [rsp + 0x4a], 0x61
mov byte [rsp + 0x4b], 0x64
mov byte [rsp + 0x4c], 0x46
mov byte [rsp + 0x4d], 0x69
mov byte [rsp + 0x4e], 0x6c
mov byte [rsp + 0x4f], 0x65
mov byte [rsp + 0x50], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x48], 0x43
mov qword [0x3601d188], rax
mov byte [rsp + 0x49], 0x72
mov byte [rsp + 0x4a], 0x61
mov byte [rsp + 0x4b], 0x63
mov byte [rsp + 0x4c], 0x6b
mov byte [rsp + 0x4d], 0x55
mov byte [rsp + 0x4e], 0x72
mov byte [rsp + 0x4f], 0x6c
mov byte [rsp + 0x50], 0x41
mov byte [rsp + 0x51], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x49], 0x61
mov byte [rsp + 0x4a], 0x6e
mov qword [0x3601d178], rax
mov byte [rsp + 0x4b], 0x6f
mov byte [rsp + 0x4c], 0x6e
mov byte [rsp + 0x4d], 0x69
mov byte [rsp + 0x4e], 0x63
mov byte [rsp + 0x4f], 0x61
mov byte [rsp + 0x50], 0x6c
mov byte [rsp + 0x51], 0x69
mov byte [rsp + 0x52], 0x7a
mov byte [rsp + 0x53], 0x65
mov byte [rsp + 0x54], 0x55
mov byte [rsp + 0x55], 0x72
mov byte [rsp + 0x56], 0x6c
mov byte [rsp + 0x57], 0x41
mov byte [rsp + 0x58], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x49], 0x68
mov byte [rsp + 0x4a], 0x65
mov byte [rsp + 0x4b], 0x63
mov qword [0x3601d160], rax
mov byte [rsp + 0x4c], 0x6b
mov byte [rsp + 0x4d], 0x43
mov byte [rsp + 0x4e], 0x6f
mov byte [rsp + 0x4f], 0x6e
mov byte [rsp + 0x50], 0x6e
mov byte [rsp + 0x51], 0x65
mov byte [rsp + 0x52], 0x63
mov byte [rsp + 0x53], 0x74
mov byte [rsp + 0x54], 0x69
mov byte [rsp + 0x55], 0x6f
mov byte [rsp + 0x56], 0x6e
mov byte [rsp + 0x57], 0x41
mov byte [rsp + 0x58], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov byte [rsp + 0x48], 0x47
mov byte [rsp + 0x49], 0x65
mov byte [rsp + 0x4a], 0x74
mov qword [0x3601d168], rax
mov byte [rsp + 0x4b], 0x43
mov byte [rsp + 0x4c], 0x6f
mov byte [rsp + 0x4d], 0x6e
mov byte [rsp + 0x4e], 0x6e
mov byte [rsp + 0x4f], 0x65
mov byte [rsp + 0x50], 0x63
mov byte [rsp + 0x51], 0x74
mov byte [rsp + 0x52], 0x65
mov byte [rsp + 0x53], 0x64
mov byte [rsp + 0x54], 0x53
mov byte [rsp + 0x55], 0x74
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x56], 0x61
mov byte [rsp + 0x57], 0x74
mov byte [rsp + 0x58], 0x65
mov byte [rsp + 0x59], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x3601d180], rax
mov rax, qword [0x3601d400]
cmp rax, rdi
je 0x36004f8a
mov rax, qword [rax + 0x268]
movabs rcx, 0x3c39e2026d1dd9ad
mov edx, 0x24631efa
add rax, rcx
mov ecx, 0xd070c2c3
mov r8d, 0xa0fdeb32
call rax
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x40], 0x48
mov byte [rsp + 0x41], 0x74
mov byte [rsp + 0x42], 0x74
mov byte [rsp + 0x43], 0x70
mov byte [rsp + 0x44], 0x4f
mov byte [rsp + 0x45], 0x70
mov byte [rsp + 0x46], 0x65
mov byte [rsp + 0x47], 0x6e
mov byte [rsp + 0x48], 0x52
mov byte [rsp + 0x49], 0x65
mov byte [rsp + 0x4a], 0x71
mov byte [rsp + 0x4b], 0x75
mov byte [rsp + 0x4c], 0x65
mov byte [rsp + 0x4d], 0x73
mov byte [rsp + 0x4e], 0x74
mov byte [rsp + 0x4f], 0x41
mov byte [rsp + 0x50], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x3601d158], rax
mov rax, qword [0x3601d400]
cmp rax, rdi
je 0x360050ca
mov rax, qword [rax + 0x1a8]
movabs rcx, 0x42bb9b4502860fff
xor rax, rcx
call rax
mov r11, qword [0x3601d400]
movabs rcx, 0x5005c185d2689671
mov rax, qword [r11 + 0x88]
mov edx, 0xedb0766c
mov r9d, 0xe27d6bff
sub rax, rcx
mov r8d, 0xc8b64383
mov ecx, 0xfb2c6bd8
mov dword [rsp + 0x28], 0x9b31b03f
mov dword [rsp + 0x20], 0x3d2052e9
call rax
mov r11, qword [0x3601d400]
movabs rcx, 0x42e87c7831045d79
mov edx, 0x4c007350
mov rax, qword [r11 + 0x2d8]
mov r9d, 0xa4d7fa77
mov r8d, 0x705ec788
xor rax, rcx
mov ecx, 0xb92865d5
mov dword [rsp + 0x28], 0x159f7f26
mov dword [rsp + 0x20], 0xde97d74b
call rax
mov r11, qword [0x3601d400]
mov rax, qword [r11 + 0x60]
movabs rcx, 0x2a2afb38b8074d08
mov edx, 0x2060771a
add rax, rcx
mov ecx, 0x60a0aac5
mov r8d, 0xacf82307
call rax
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x44], 0x53
mov byte [rsp + 0x45], 0x65
mov byte [rsp + 0x46], 0x6e
mov byte [rsp + 0x47], 0x64
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x3601d128], rax
mov rax, qword [0x3601d400]
cmp rax, rdi
je 0x36005163
mov rax, qword [rax + 0x110]
movabs rcx, 0x269f6a242fbbcfbf
xor edx, edx
div rcx
mov ecx, 0xd49959db
call rdx
mov r11, qword [0x3601d400]
movabs rcx, 0x6d265c2587db39ca
mov rax, qword [r11 + 0x40]
mov edx, 0x6eb09968
mov r8d, 0x23642d2c
xor rax, rcx
mov ecx, 0xce0f7c06
call rax
mov r11, qword [0x3601d400]
movabs rcx, 0x6bb2c16f5e09dbcd
mov rax, qword [r11 + 0x258]
xor rax, rcx
call rax
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x44], 0x51
mov byte [rsp + 0x45], 0x75
mov byte [rsp + 0x46], 0x65
mov byte [rsp + 0x47], 0x72
mov byte [rsp + 0x48], 0x79
mov byte [rsp + 0x49], 0x49
mov byte [rsp + 0x4a], 0x6e
mov byte [rsp + 0x4b], 0x66
mov byte [rsp + 0x4c], 0x6f
mov byte [rsp + 0x4d], 0x41
mov byte [rsp + 0x4e], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x3601d170], rax
mov rax, qword [0x3601d400]
cmp rax, rdi
je 0x36005248
mov rax, qword [rax + 0x90]
xor edx, edx
movabs rcx, 0x75f389dd52d4c705
div rcx
mov dword [rsp + 0x30], 0x7921a6e3
mov r9d, 0xf30b423a
mov r10, rdx
mov r8d, 0xe1cd6537
mov ecx, 0x81f0bf2
mov edx, 0x17c1e2b3
mov dword [rsp + 0x28], 0x2d5c7978
mov dword [rsp + 0x20], 0xb00f98a1
call r10
mov r11, qword [0x3601d400]
movabs rcx, 0x650595ab5507d5fd
mov rax, qword [r11 + 0x160]
sub rax, rcx
call rax
mov r11, qword [0x3601d400]
movabs rcx, 0x4fa652c6f232ec8f
mov rax, qword [r11 + 0x150]
or rax, rcx
mov ecx, 0x30793541
call rax
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov byte [rsp + 0x44], 0x41
mov byte [rsp + 0x45], 0x64
mov byte [rsp + 0x46], 0x64
mov byte [rsp + 0x47], 0x52
mov byte [rsp + 0x48], 0x65
mov byte [rsp + 0x49], 0x71
mov byte [rsp + 0x4a], 0x75
mov byte [rsp + 0x4b], 0x65
mov byte [rsp + 0x4c], 0x73
mov byte [rsp + 0x4d], 0x74
mov byte [rsp + 0x4e], 0x48
mov byte [rsp + 0x4f], 0x65
mov byte [rsp + 0x50], 0x61
mov byte [rsp + 0x51], 0x64
mov byte [rsp + 0x52], 0x65
mov byte [rsp + 0x53], 0x72
mov byte [rsp + 0x54], 0x73
mov byte [rsp + 0x55], 0x41
mov byte [rsp + 0x56], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x3601d150], rax
mov rbx, qword [rsp + 0x150]
add rsp, 0x140
pop rdi
ret