Function at 0x14000d780
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Link many functions at runtime

Disassembly:
mov r11, rsp
push r14
sub rsp, 0x1a0
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov rax, qword [0x1400ab088]
xor rax, rsp
mov qword [rsp + 0x198], rax
mov dword [r11 - 0x20], 0x746b7d5c
mov dword [r11 - 0x1c], 0x2c2e707e
mov dword [r11 - 0x18], 0x4e4d4431
xor eax, eax
mov byte [r11 - 0x14], al
xor ebx, ebx
mov edx, ebx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x188]
add rcx, rax
lea eax, [rdx + 0x17]
xor byte [rcx], al
inc edx
cmp edx, 0xc
jb 0x14000d7e0
mov byte [rsp + 0x194], bl
lea rcx, [rsp + 0x188]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r14, rax
test rax, rax
jne 0x14000d831
lea rcx, [rsp + 0x188]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r14, rax
test rax, rax
je 0x14000e25f
movdqa xmm0, xmmword [0x140097270]
movdqu xmmword [rsp + 0x138], xmm0
mov word [rsp + 0x148], 0x5e
mov edx, ebx
nop
movsxd rax, edx
lea rcx, [rsp + 0x138]
add rcx, rax
lea eax, [rdx + 0x17]
xor byte [rcx], al
inc edx
cmp edx, 0x11
jb 0x14000d850
mov byte [rsp + 0x149], bl
movdqa xmm0, xmmword [0x1400971d0]
movdqu xmmword [rsp + 0x168], xmm0
mov byte [rsp + 0x158], bl
lea rax, [rsp + 0x138]
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], bl
jne 0x14000d8a0
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x158]
call fcn.140002320
lea rdx, [rsp + 0x158]
cmp qword [rsp + 0x170], 0x10
cmovae rdx, qword [rsp + 0x158]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400b04f8], rax
test rax, rax
sete sil
mov rdx, qword [rsp + 0x170]
cmp rdx, 0x10
jb 0x14000d932
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d92d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e281
call fcn.1400357d4
test sil, sil
jne 0x14000e287
movdqa xmm0, xmmword [0x140097240]
movdqu xmmword [rsp + 0x138], xmm0
mov word [rsp + 0x148], 0x5155
xor eax, eax
mov byte [rsp + 0x14a], al
mov edx, ebx
movsxd rax, edx
lea rcx, [rsp + 0x138]
add rcx, rax
lea eax, [rdx + 0x17]
xor byte [rcx], al
inc edx
cmp edx, 0x12
jb 0x14000d961
mov byte [rsp + 0x14a], bl
movdqa xmm0, xmmword [0x1400971d0]
movdqu xmmword [rsp + 0x168], xmm0
mov byte [rsp + 0x158], bl
lea rax, [rsp + 0x138]
mov r8, rdi
inc r8
cmp byte [rax + r8], bl
jne 0x14000d9a5
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x158]
call fcn.140002320
lea rdx, [rsp + 0x158]
cmp qword [rsp + 0x170], 0x10
cmovae rdx, qword [rsp + 0x158]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400b0500], rax
test rax, rax
sete sil
mov rdx, qword [rsp + 0x170]
cmp rdx, 0x10
jb 0x14000da37
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000da32
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e2a9
call fcn.1400357d4
test sil, sil
jne 0x14000e2af
movdqa xmm0, xmmword [0x140097220]
movdqu xmmword [rsp + 0x138], xmm0
mov word [rsp + 0x148], 0x4c46
xor eax, eax
mov byte [rsp + 0x14a], al
mov edx, ebx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x138]
add rcx, rax
lea eax, [rdx + 0x17]
xor byte [rcx], al
inc edx
cmp edx, 0x12
jb 0x14000da70
mov byte [rsp + 0x14a], bl
movdqa xmm0, xmmword [0x1400971d0]
movdqu xmmword [rsp + 0x168], xmm0
mov byte [rsp + 0x158], bl
lea rax, [rsp + 0x138]
mov r8, rdi
inc r8
cmp byte [rax + r8], bl
jne 0x14000dab4
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x158]
call fcn.140002320
lea rdx, [rsp + 0x158]
cmp qword [rsp + 0x170], 0x10
cmovae rdx, qword [rsp + 0x158]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400b0508], rax
test rax, rax
sete sil
mov rdx, qword [rsp + 0x170]
cmp rdx, 0x10
jb 0x14000db46
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000db41
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e2d1
call fcn.1400357d4
test sil, sil
jne 0x14000e2d7
mov dword [rsp + 0x138], 0x6e6b7141
mov dword [rsp + 0x13c], 0x5f717d6e
mov dword [rsp + 0x140], 0x414e4c73
mov word [rsp + 0x144], 0x5c66
xor eax, eax
mov byte [rsp + 0x146], al
mov edx, ebx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x138]
add rcx, rax
lea eax, [rdx + 0x17]
xor byte [rcx], al
inc edx
cmp edx, 0xe
jb 0x14000db90
mov byte [rsp + 0x146], bl
movdqa xmm0, xmmword [0x1400971d0]
movdqu xmmword [rsp + 0x168], xmm0
mov byte [rsp + 0x158], bl
lea rax, [rsp + 0x138]
mov r8, rdi
inc r8
cmp byte [rax + r8], bl
jne 0x14000dbd4
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x158]
call fcn.140002320
lea rdx, [rsp + 0x158]
cmp qword [rsp + 0x170], 0x10
cmovae rdx, qword [rsp + 0x158]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400b0510], rax
test rax, rax
sete sil
mov rdx, qword [rsp + 0x170]
cmp rdx, 0x10
jb 0x14000dc66
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dc61
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e2f9
call fcn.1400357d4
test sil, sil
jne 0x14000e2ff
mov dword [rsp + 0x138], 0x6e6b7141
mov dword [rsp + 0x13c], 0x58717d6e
mov dword [rsp + 0x140], 0x6744456d
mov word [rsp + 0x144], 0x5b
mov edx, ebx
nop dword [rax]
movsxd rax, edx
lea rcx, [rsp + 0x138]
add rcx, rax
lea eax, [rdx + 0x17]
xor byte [rcx], al
inc edx
cmp edx, 0xd
jb 0x14000dca0
mov byte [rsp + 0x145], bl
movdqa xmm0, xmmword [0x1400971d0]
movdqu xmmword [rsp + 0x168], xmm0
mov byte [rsp + 0x158], bl
lea rax, [rsp + 0x138]
mov r8, rdi
inc r8
cmp byte [rax + r8], bl
jne 0x14000dce4
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x158]
call fcn.140002320
lea rdx, [rsp + 0x158]
cmp qword [rsp + 0x170], 0x10
cmovae rdx, qword [rsp + 0x158]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400b0518], rax
test rax, rax
sete sil
mov rdx, qword [rsp + 0x170]
cmp rdx, 0x10
jb 0x14000dd76
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dd71
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e327
call fcn.1400357d4
test sil, sil
jne 0x14000e32d
mov dword [rsp + 0x138], 0x6e6b7141
mov dword [rsp + 0x13c], 0x4f717d6e
mov dword [rsp + 0x140], 0x5b53456a
mov word [rsp + 0x144], 0x5c66
xor eax, eax
mov byte [rsp + 0x146], al
mov edx, ebx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x138]
add rcx, rax
lea eax, [rdx + 0x17]
xor byte [rcx], al
inc edx
cmp edx, 0xe
jb 0x14000ddc0
mov byte [rsp + 0x146], bl
movdqa xmm0, xmmword [0x1400971d0]
movdqu xmmword [rsp + 0x168], xmm0
mov byte [rsp + 0x158], bl
lea rax, [rsp + 0x138]
mov r8, rdi
inc r8
cmp byte [rax + r8], bl
jne 0x14000de04
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x158]
call fcn.140002320
lea rdx, [rsp + 0x158]
cmp qword [rsp + 0x170], 0x10
cmovae rdx, qword [rsp + 0x158]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400b0520], rax
test rax, rax
sete sil
mov rdx, qword [rsp + 0x170]
cmp rdx, 0x10
jb 0x14000de96
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000de91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e355
call fcn.1400357d4
test sil, sil
jne 0x14000e35b
movdqa xmm0, xmmword [0x140097280]
movdqu xmmword [rsp + 0x138], xmm0
xor eax, eax
mov byte [rsp + 0x148], al
mov edx, ebx
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x138]
add rcx, rax
lea eax, [rdx + 0x17]
xor byte [rcx], al
inc edx
cmp edx, 0x10
jb 0x14000dec0
mov byte [rsp + 0x148], bl
movdqa xmm0, xmmword [0x1400971d0]
movdqu xmmword [rsp + 0x168], xmm0
mov byte [rsp + 0x158], bl
lea rax, [rsp + 0x138]
mov r8, rdi
inc r8
cmp byte [rax + r8], bl
jne 0x14000df04
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x158]
call fcn.140002320
lea rdx, [rsp + 0x158]
cmp qword [rsp + 0x170], 0x10
cmovae rdx, qword [rsp + 0x158]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400b0558], rax
test rax, rax
sete sil
mov rdx, qword [rsp + 0x170]
cmp rdx, 0x10
jb 0x14000df96
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000df91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e383
call fcn.1400357d4
test sil, sil
jne 0x14000e389
mov dword [rsp + 0x178], 0x687c6b42
mov dword [rsp + 0x17c], 0x7a332e28
mov word [rsp + 0x180], 0x4c73
xor eax, eax
mov byte [rsp + 0x182], al
mov edx, ebx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x178]
add rcx, rax
lea eax, [rdx + 0x17]
xor byte [rcx], al
inc edx
cmp edx, 0xa
jb 0x14000dfd0
mov byte [rsp + 0x182], bl
lea rcx, [rsp + 0x178]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rsi, rax
test rax, rax
jne 0x14000e021
lea rcx, [rsp + 0x178]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
je 0x14000e3b1
mov dword [rsp + 0x138], 0x7e777151
mov dword [rsp + 0x13c], 0x7a73754c
mov dword [rsp + 0x140], 0x765770
mov edx, ebx
nop dword [rax]
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x138]
add rcx, rax
lea eax, [rdx + 0x17]
xor byte [rcx], al
inc edx
cmp edx, 0xb
jb 0x14000e050
mov byte [rsp + 0x143], bl
movdqa xmm0, xmmword [0x1400971d0]
movdqu xmmword [rsp + 0x168], xmm0
mov byte [rsp + 0x158], bl
lea rax, [rsp + 0x138]
mov r8, rdi
inc r8
cmp byte [rax + r8], bl
jne 0x14000e094
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x158]
call fcn.140002320
lea rdx, [rsp + 0x158]
cmp qword [rsp + 0x170], 0x10
cmovae rdx, qword [rsp + 0x158]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400b05c0], rax
test rax, rax
sete r14b
mov rdx, qword [rsp + 0x170]
cmp rdx, 0x10
jb 0x14000e126
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e121
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e3d9
call fcn.1400357d4
test r14b, r14b
jne 0x14000e3df
movdqa xmm0, xmmword [str.Pm_hesTEXqWEQCTjoyOrOUGwLWCXhtKnrzSRvLO_H_jpnLoqERQnAHI_hMlpCDQPi_KVsohhIqtEOrQMSOExKnrzSRoFIJTAqknnqNmOUG_P__wvqnlMlvVHNFC_p]
movdqu xmmword [rsp + 0x138], xmm0
xor eax, eax
mov byte [rsp + 0x148], al
nop dword [rax]
movsxd rax, ebx
lea rcx, [rsp + 0x138]
add rcx, rax
lea eax, [rbx + 0x17]
xor byte [rcx], al
inc ebx
cmp ebx, 0x10
jb 0x14000e150
mov byte [rsp + 0x148], 0
movdqa xmm0, xmmword [0x1400971d0]
movdqu xmmword [rsp + 0x168], xmm0
mov byte [rsp + 0x158], 0
lea rax, [rsp + 0x138]
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000e193
mov r8, rdi
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x158]
call fcn.140002320
lea rdx, [rsp + 0x158]
cmp qword [rsp + 0x170], 0x10
cmovae rdx, qword [rsp + 0x158]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400b05c8], rax
test rax, rax
sete bl
mov rdx, qword [rsp + 0x170]
cmp rdx, 0x10
jb 0x14000e227
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e222
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e407
call fcn.1400357d4
test bl, bl
jne 0x14000e40d
mov al, 1
jmp 0x14000e235
mov rcx, qword [rsp + 0x198]
xor rcx, rsp
call fcn.1400357b0
lea r11, [rsp + 0x1a0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop r14
ret
lea rdx, str.dll_1__not_found.
lea rcx, [rsp + 0x30]
call fcn.140001150
lea rdx, [0x1400a9060]
lea rcx, [rsp + 0x30]
call fcn.140053b84
call fcn.140056d64
int3
lea rdx, str.Cannot_find_function_2.
lea rcx, [rsp + 0x48]
call fcn.140001150
lea rdx, [0x1400a9060]
lea rcx, [rsp + 0x48]
call fcn.140053b84
call fcn.140056d64
int3
lea rdx, str.Cannot_find_function_3.
lea rcx, [rsp + 0x60]
call fcn.140001150
lea rdx, [0x1400a9060]
lea rcx, [rsp + 0x60]
call fcn.140053b84
call fcn.140056d64
int3
lea rdx, str.Cannot_find_function_4.
lea rcx, [rsp + 0x78]
call fcn.140001150
lea rdx, [0x1400a9060]
lea rcx, [rsp + 0x78]
call fcn.140053b84
call fcn.140056d64
int3
lea rdx, str.Cannot_find_function_5.
lea rcx, [rsp + 0x90]
call fcn.140001150
lea rdx, [0x1400a9060]
lea rcx, [rsp + 0x90]
call fcn.140053b84
call fcn.140056d64
int3
lea rdx, str.Cannot_find_function_6.
lea rcx, [rsp + 0xa8]
call fcn.140001150
lea rdx, [0x1400a9060]
lea rcx, [rsp + 0xa8]
call fcn.140053b84
call fcn.140056d64
int3
lea rdx, str.Cannot_find_function_7.
lea rcx, [rsp + 0xc0]
call fcn.140001150
lea rdx, [0x1400a9060]
lea rcx, [rsp + 0xc0]
call fcn.140053b84
call fcn.140056d64
int3
lea rdx, str.Cannot_find_function_14.
lea rcx, [rsp + 0xd8]
call fcn.140001150
lea rdx, [0x1400a9060]
lea rcx, [rsp + 0xd8]
call fcn.140053b84
lea rdx, str.dll_3__not_found.
lea rcx, [rsp + 0xf0]
call fcn.140001150
lea rdx, [0x1400a9060]
lea rcx, [rsp + 0xf0]
call fcn.140053b84
call fcn.140056d64
int3
lea rdx, str.Cannot_find_function_b1.
lea rcx, [rsp + 0x108]
call fcn.140001150
lea rdx, [0x1400a9060]
lea rcx, [rsp + 0x108]
call fcn.140053b84
call fcn.140056d64
int3
lea rdx, str.Cannot_find_function_b2.
lea rcx, [rsp + 0x120]
call fcn.140001150
lea rdx, [0x1400a9060]
lea rcx, [rsp + 0x120]
call fcn.140053b84
int3