Function at 0x180014210
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x100
mov rax, qword [0x18006e218]
xor rax, rsp
mov qword [rbp + 0x4f], rax
mov r8d, 5
lea rdx, str._bac
lea rcx, [rbp + 0x2f]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
movsd xmm0, qword [str.king_stor]
movsd qword [rbp + 0x33], xmm0
movzx eax, word [0x180062f80]
mov word [rbp + 0x3b], ax
movzx eax, word [0x180062f84]
mov word [rbp + 0x3c], ax
movzx eax, byte [0x180062f86]
mov byte [rbp + 0x3e], al
mov r8d, 4
lea rdx, str.Inli
lea rcx, [rbp + 0x2f]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
movzx eax, word [0x180062f90]
mov word [rbp + 0x42], ax
movsd xmm0, qword [str.dSamples]
movsd qword [rbp + 0x44], xmm0
movzx eax, byte [0x180062fa0]
mov byte [rbp + 0x4c], al
xor edx, edx
mov r8d, 0x123
lea rcx, [0x18006e120]
call fcn.180052cd0
xor esi, esi
mov qword [rbp - 0x29], rsi
mov qword [rbp - 0x21], 0xf
mov byte [rbp - 0x39], sil
lea rax, [rbp + 0x2f]
mov rbx, 0xffffffffffffffff
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x1800142f0
xor r9d, r9d
xor r8d, r8d
mov edx, SHStripMneumonicW
lea rcx, [rbp - 0x39]
call fcn.18000d280
test al, al
jne 0x18001449a
mov r8d, 2
lea rdx, [0x180062fab]
lea rcx, [rbp - 0x19]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
movzx eax, word [0x180062fba]
mov word [rbp - 0x17], ax
movzx eax, byte [0x180062fbc]
mov byte [rbp - 0x15], al
mov dword [rbp - 0x14], 0x4d5f455f
mov eax, 0x5f44
mov word [rbp - 0x10], ax
mov byte [rbp - 0xe], 0x47
mov eax, 0x4e45
mov word [rbp - 0xd], ax
mov byte [rbp - 0xb], 0
mov r8d, 1
lea rdx, [0x180062fdc]
lea rcx, [rbp - 0x19]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov byte [rbp - 0xa], 0x52
mov dword [rbp - 9], 0x495f4349
mov byte [rbp - 5], 0
mov r8d, 2
lea rdx, [0x180063042]
lea rcx, [rbp - 0x19]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov dword [rbp - 3], 0x54524f
call qword [sym.imp.KERNEL32.dll_GetConsoleAliasExesLengthW]
lea rcx, [rbp - 0x19]
call qword [sym.imp.WINMM.dll_mciGetDeviceIDA]
mov ebx, eax
test eax, eax
je 0x180014697
mov ecx, dword [str.crea]
mov dword [rbp + 0xf], ecx
movzx ecx, word [0x18006306c]
mov word [rbp + 0x13], cx
movzx ecx, byte [0x18006306e]
mov byte [rbp + 0x15], cl
mov r8d, 6
lea rdx, str._objec
lea rcx, [rbp + 0xf]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 2
lea rdx, [0x180063078]
lea rcx, [rbp + 0xf]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov eax, 0x66
mov word [rbp + 0x1d], ax
lea rcx, [rbp + 0xf]
dec rcx
nop dword [rax]
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x180014420
movzx eax, word [0x18006307c]
mov word [rcx], ax
movzx eax, byte [0x18006307e]
mov byte [rcx + 2], al
mov r8d, 1
lea rdx, [0x180063080]
lea rcx, [rbp + 0xf]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 3
lea rdx, [0x180063084]
lea rcx, [rbp + 0xf]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov eax, 0x2e
mov word [rbp + 0x24], ax
movzx eax, word [0x180063088]
mov word [rbp + 0x25], ax
movzx eax, byte [0x18006308a]
mov byte [rbp + 0x27], al
lea rdx, [rbp + 0xf]
mov ecx, ebx
call qword [sym.imp.WINMM.dll_mciGetDeviceIDFromElementIDA]
jmp 0x180014697
mov dword [rbp - 0x71], esi
mov qword [rbp - 0x49], rsi
mov qword [rbp - 0x41], 0xf
mov byte [rbp - 0x59], 0
mov qword [rbp - 0x61], rsi
movsd xmm0, qword [0x18006e1c8]
mulsd xmm0, qword [0x180067538]
addsd xmm0, qword [0x180067520]
cvttsd2si rax, xmm0
mov dword [rbp - 0x79], eax
lea rax, [rbp - 0x59]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x39]
lea r8, [0x18006e148]
mov edx, 0x15
lea rcx, [rbp - 0x79]
call fcn.180027aa0
lea r9, [rbp - 0x61]
lea r8, [rbp - 0x71]
mov edx, ebx
lea rcx, [rbp + 0x2f]
call sub.RPCRT4.dll_MesEncodeFixedBufferHandleCreate
mov edi, eax
xor r8d, r8d
mov edx, 0xab
lea rcx, [rbp - 0x59]
call fcn.180052f70
test al, al
jne 0x1800145e8
mov dword [rbp - 0x19], 0x6d0069
mov eax, 0x61
mov word [rbp - 0x15], ax
mov dword [rbp - 0x13], 0x650067
mov dword [rbp - 0xf], 0x2d0073
mov dword [rbp - 0xb], 0x6e0069
mov dword [rbp - 7], 0x62002d
mov dword [rbp - 3], 0x740075
mov eax, 0x74
mov word [rbp + 1], ax
mov dword [rbp + 3], 0x6e006f
mov dword [rbp + 7], 0x73
mov qword [rbp - 0x69], rsi
lea r9, [rbp - 0x69]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesEncodeIncrementalHandleCreate
mov qword [rbp - 0x79], rsi
xor edx, edx
xor ecx, ecx
test eax, eax
je 0x1800145b7
lea r9, [rbp - 0x79]
xor r8d, r8d
call sub.RPCRT4.dll_MesEncodeIncrementalHandleCreate
test eax, eax
jne 0x1800145dc
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp - 0x79]
call sub.RPCRT4.dll_MesIncrementalHandleReset
jmp 0x1800145ce
lea r8, [rbp - 0x79]
call sub.RPCRT4.dll_MesDecodeIncrementalHandleCreate
mov rcx, qword [rbp - 0x69]
test rcx, rcx
je 0x1800145ce
call sub.RPCRT4.dll_MesHandleFree
mov rcx, qword [rbp - 0x79]
test rcx, rcx
je 0x1800145dc
call sub.RPCRT4.dll_MesHandleFree
lea rcx, [rbp - 0x19]
call qword [sym.imp.SHLWAPI.dll_UrlIsOpaqueW]
jmp 0x180014649
test edi, edi
jne 0x18001461e
mov qword [rbp - 0x69], rsi
lea rax, [rbp - 0x71]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
lea r9, [rbp - 0x69]
xor r8d, r8d
lea edx, [rdi + 1]
mov rcx, qword [rbp - 0x61]
call sub.RPCRT4.dll_MesBufferHandleReset
mov rcx, qword [rbp - 0x61]
test rcx, rcx
je 0x18001461e
call sub.RPCRT4.dll_MesHandleFree
xor edx, edx
mov ecx, 0x32595559
mov r8d, 0x40000
call qword [sym.imp.WINMM.dll_mmioInstallIOProcW]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
mov edx, 0x11a
xor ecx, ecx
call fcn.1800318b0
nop
mov rdx, qword [rbp - 0x41]
cmp rdx, 0x10
jb 0x180014687
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180014682
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180014682
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18005b188
mov qword [rbp - 0x49], rsi
mov qword [rbp - 0x41], 0xf
mov byte [rbp - 0x59], 0
mov rdx, qword [rbp - 0x21]
cmp rdx, 0x10
jb 0x1800146d5
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800146d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800146d0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18005b188
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.18005b930
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret