Function at 0x14000d4b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
mov rax, qword [0x1400a7020]
xor rax, rsp
mov qword [rbp + 0x4f], rax
mov rsi, rcx
call fcn.14001b940
mov rcx, rax
test rax, rax
je 0x14000d866
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x21], rbx
mov dword [rbp - 0x19], 0x400
mov dword [rbp - 0x15], 0x6e65704f
mov byte [rbp - 0x11], 0
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x400
or eax, ecx
jge 0x14000d534
mov edx, 0x400
lea rcx, [rbp - 0x21]
call fcn.14001b440
mov rbx, qword [rbp - 0x21]
cmp dword [rbx - 0xc], 0x400
jl 0x14000d85b
mov dword [rbx - 0x10], 0x400
mov byte [rbx + 0x400], 0
mov word [rbp + 0x2e], 0x642e
mov dword [rbp + 0x28], 0x61776c68
mov word [rbp + 0x31], 0x6c
mov word [rbp + 0x2c], 0x6970
mov byte [rbp + 0x30], 0x6c
mov byte [rbp + 0x27], 0x53
lea rcx, [rbp + 0x27]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdi, rax
test rax, rax
je 0x14000d5e9
mov dword [rbp + 0x3c], 0x72657551
mov word [rbp + 0x3a], 0x636f
mov dword [rbp + 0x43], 0x676e6972
mov word [rbp + 0x37], 0x7341
mov word [rbp + 0x41], 0x7453
mov word [rbp + 0x47], 0x41
mov byte [rbp + 0x39], 0x73
mov byte [rbp + 0x40], 0x79
lea rdx, [rbp + 0x37]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14000d5e0
lea rcx, [rbp - 0x19]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rbx
lea r9, [rbp - 0x15]
mov r8, rsi
mov edx, 2
xor ecx, ecx
call rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.140027150
test eax, eax
js 0x14000d85b
cmp eax, dword [rbx - 0xc]
jg 0x14000d85b
mov dword [rbx - 0x10], eax
cdqe
mov byte [rax + rbx], 0
movsxd rdi, dword [rbx - 0x10]
test edi, edi
js 0x14000d85b
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x14000d63b
mov edx, edi
lea rcx, [rbp - 0x21]
call fcn.14001b440
mov rbx, qword [rbp - 0x21]
lea eax, [rdi + 1]
movsxd rdx, eax
mov rcx, rbx
call fcn.140027be8
test eax, eax
je 0x14000d671
cmp eax, 0xc
je 0x14000d850
cmp eax, 0x16
je 0x14000d85b
cmp eax, 0x22
je 0x14000d85b
cmp eax, 0x50
jne 0x14000d871
cmp edi, dword [rbx - 0xc]
jg 0x14000d85b
mov dword [rbx - 0x10], edi
mov byte [rdi + rbx], 0
mov word [rbp + 0xf], 0x4946
mov word [rbp + 0x12], 0x4645
mov byte [rbp + 0x11], 0x52
mov word [rbp + 0x15], 0x58
mov byte [rbp + 0x14], 0x4f
cmp dword [rbx - 0x10], 0
jl 0x14000d6fd
lea rdx, [rbp + 0xf]
mov rcx, rbx
call fcn.140027d44
test rax, rax
je 0x14000d6fd
cmp eax, ebx
js 0x14000d6fd
lea rdx, [rbx - 0x18]
mov ecx, 0xffffffff
lock xadd dword [rdx + 0x10], ecx
sub ecx, 1
jg 0x14000d6d3
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [r8 + 8]
mov eax, 2
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.14001c9b0
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
mov dword [rbp - 0xd], 0x474f4f47
mov word [rbp - 8], 0x45
mov byte [rbp - 9], 0x4c
cmp dword [rbx - 0x10], 0
jl 0x14000d77c
lea rdx, [rbp - 0xd]
mov rcx, rbx
call fcn.140027d44
test rax, rax
je 0x14000d77c
cmp eax, ebx
js 0x14000d77c
mov dword [rbp - 4], 0x4d4f5248
mov word [rbp], 0x45
mov byte [rbp - 5], 0x43
cmp dword [rbx - 0x10], 0
jl 0x14000d77c
lea rdx, [rbp - 5]
mov rcx, rbx
call fcn.140027d44
test rax, rax
je 0x14000d77c
cmp eax, ebx
js 0x14000d77c
lea rdx, [rbx - 0x18]
mov ecx, 0xffffffff
lock xadd dword [rdx + 0x10], ecx
sub ecx, 1
jg 0x14000d772
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [r8 + 8]
mov eax, 1
jmp 0x14000d6d8
mov word [rbp + 0x18], 0x5845
mov word [rbp + 0x1b], 0x4f4c
mov word [rbp + 0x1e], 0x45
mov byte [rbp + 0x1a], 0x50
mov byte [rbp + 0x17], 0x49
mov byte [rbp + 0x1d], 0x52
cmp dword [rbx - 0x10], 0
jl 0x14000d7db
lea rdx, [rbp + 0x17]
mov rcx, rbx
call fcn.140027d44
test rax, rax
je 0x14000d7db
cmp eax, ebx
js 0x14000d7db
lea rdx, [rbx - 0x18]
mov ecx, 0xffffffff
lock xadd dword [rdx + 0x10], ecx
sub ecx, 1
jg 0x14000d7d1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov eax, 3
jmp 0x14000d6d8
mov dword [rbp + 6], 0x454744
mov word [rbp + 4], 0x4553
mov byte [rbp + 3], 0x4d
cmp dword [rbx - 0x10], 0
jl 0x14000d82d
lea rdx, [rbp + 3]
mov rcx, rbx
call fcn.140027d44
test rax, rax
je 0x14000d82d
cmp eax, ebx
js 0x14000d82d
lea rdx, [rbx - 0x18]
mov ecx, 0xffffffff
lock xadd dword [rdx + 0x10], ecx
sub ecx, 1
jg 0x14000d823
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov eax, 4
jmp 0x14000d6d8
lea rdx, [rbx - 0x18]
mov ecx, 0xffffffff
lock xadd dword [rdx + 0x10], ecx
sub ecx, 1
jg 0x14000d849
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor eax, eax
jmp 0x14000d6d8
mov ecx, 0x8007000e
call fcn.14001b6d0
int3
mov ecx, 0x80070057
call fcn.14001b6d0
nop
mov ecx, 0x80004005
call fcn.14001b6d0
nop
mov ecx, 0x80004005
call fcn.14001b6d0
int3