Function at 0x1400017d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov r11, rsp
push rbp
lea rbp, [r11 - 0x5f]
sub rsp, 0xc0
mov rax, qword [0x14002a0a0]
mov rcx, qword [rax]
mov eax, 0x1db1
cmp word [rcx + 0x120], ax
jbe 0x140001b37
mov eax, 0xc
mov qword [r11 + 8], rbx
mov word [rbp - 1], ax
movzx eax, word [0x14002483a]
add ax, 0xc
mov dword [rbp - 0x49], 0x46004f
mov word [rbp + 1], ax
movzx eax, word [0x14002483c]
add ax, 0xc
mov dword [rbp - 0x45], 0x630068
mov word [rbp + 3], ax
movzx eax, word [0x14002483e]
add ax, 0xc
mov dword [rbp - 0x41], 0x7a0075
mov word [rbp + 5], ax
movzx eax, word [str.C:WindowsSystem32clfs.sys]
add ax, 0xc
mov dword [rbp - 0x3d], 0x7b0070
mov word [rbp + 7], ax
movzx eax, word [0x140024842]
add ax, 0xc
mov dword [rbp - 0x39], 0x7f0083
mov word [rbp + 9], ax
movzx eax, word [0x140024844]
add ax, 0xc
mov dword [rbp - 0x35], 0x5f0068
mov word [rbp + 0xb], ax
movzx eax, word [0x140024846]
add ax, 0xc
mov dword [rbp - 0x31], 0x7f0085
mov word [rbp + 0xd], ax
movzx eax, word [0x140024848]
add ax, 0xc
mov dword [rbp - 0x2d], 0x710080
mov word [rbp + 0xf], ax
movzx eax, word [0x14002484a]
add ax, 0xc
mov dword [rbp - 0x29], 0x3f0079
mov word [rbp + 0x11], ax
movzx eax, word [0x14002484c]
add ax, 0xc
mov dword [rbp - 0x25], 0x68003e
mov word [rbp + 0x13], ax
movzx eax, word [0x14002484e]
add ax, 0xc
mov dword [rbp - 0x21], 0x7e0070
mov word [rbp + 0x15], ax
movzx eax, word [0x140024850]
add ax, 0xc
mov dword [rbp - 0x1d], 0x820075
mov word [rbp + 0x17], ax
movzx eax, word [0x140024852]
add ax, 0xc
mov dword [rbp - 0x19], 0x7e0071
mov word [rbp + 0x19], ax
movzx eax, word [0x140024854]
add ax, 0xc
mov dword [rbp - 0x15], 0x68007f
mov word [rbp + 0x1b], ax
movzx eax, word [0x140024856]
add ax, 0xc
mov dword [rbp - 0x11], 0x78006f
mov word [rbp + 0x1d], ax
movzx eax, word [0x140024858]
add ax, 0xc
mov dword [rbp - 0xd], 0x7f0072
mov word [rbp + 0x1f], ax
movzx eax, word [0x14002485a]
add ax, 0xc
mov dword [rbp - 9], 0x7f003a
mov word [rbp + 0x21], ax
movzx eax, word [0x14002485c]
add ax, 0xc
mov dword [rbp - 5], 0x7f0085
mov word [rbp + 0x23], ax
movzx eax, word [0x14002485e]
add ax, 0xc
mov word [rbp + 0x25], ax
movzx eax, word [0x140024860]
add ax, 0xc
mov word [rbp + 0x27], ax
movzx eax, word [0x140024862]
add ax, 0xc
movdqa xmm1, xmmword [0x140024b40]
mov word [rbp + 0x29], ax
movzx eax, word [0x140024864]
mov rbx, qword [r11 + 8]
add ax, 0xc
mov word [rbp + 0x2b], ax
movzx eax, word [0x140024866]
add ax, 0xc
mov word [rbp + 0x2d], ax
movzx eax, word [0x140024868]
add ax, 0xc
mov word [rbp + 0x2f], ax
movzx eax, word [0x14002486a]
add ax, 0xc
mov word [rbp + 0x31], ax
movzx eax, word [0x14002486c]
add ax, 0xc
mov word [rbp + 0x33], ax
movzx eax, word [0x14002486e]
add ax, 0xc
mov word [rbp + 0x35], ax
movzx eax, word [0x140024870]
add ax, 0xc
mov word [rbp + 0x37], ax
movzx eax, word [0x140024872]
add ax, 0xc
mov word [rbp + 0x39], ax
movzx eax, word [0x140024874]
add ax, 0xc
mov word [rbp + 0x3b], ax
movzx eax, word [0x140024876]
add ax, 0xc
mov word [rbp + 0x3d], ax
movzx eax, word [0x140024878]
add ax, 0xc
mov word [rbp + 0x3f], ax
movzx eax, word [0x14002487a]
add ax, 0xc
mov word [rbp + 0x41], ax
movzx eax, word [0x14002487c]
add ax, 0xc
mov word [rbp + 0x43], ax
movzx eax, word [0x14002487e]
add ax, 0xc
mov word [rbp + 0x45], ax
movzx eax, word [str.SystemRoot_system32driversclfs.sys]
add ax, 0xc
mov word [rbp + 0x47], ax
xor eax, eax
mov word [rbp + 0x49], ax
nop dword [rax]
nop dword [rax + rax]
movdqu xmm0, xmmword [rbp + rax*2 - 0x49]
psubw xmm0, xmm1
movdqu xmmword [rbp + rax*2 - 0x49], xmm0
movdqu xmm0, xmmword [rbp + rax*2 - 0x39]
psubw xmm0, xmm1
movdqu xmmword [rbp + rax*2 - 0x39], xmm0
movdqu xmm0, xmmword [rbp + rax*2 - 0x29]
psubw xmm0, xmm1
movdqu xmmword [rbp + rax*2 - 0x29], xmm0
movdqu xmm0, xmmword [rbp + rax*2 - 0x19]
psubw xmm0, xmm1
movdqu xmmword [rbp + rax*2 - 0x19], xmm0
add rax, 0x20
cmp rax, 0x40
jb 0x140001ac0
cmp rax, 0x49
jae 0x140001b2e
mov ecx, 0xfff4
nop word [rax + rax]
add word [rbp + rax*2 - 0x49], cx
inc rax
cmp rax, 0x49
jb 0x140001b20
lea rcx, [rbp - 0x49]
jmp 0x140001db2
mov eax, 0xb
mov dword [rbp - 0x49], 0x45004e
mov word [rbp - 0x11], ax
movzx eax, word [0x14002487a]
add ax, 0xb
mov dword [rbp - 0x45], 0x620067
mov word [rbp - 0xf], ax
movzx eax, word [0x14002487c]
add ax, 0xb
mov dword [rbp - 0x41], 0x790074
mov word [rbp - 0xd], ax
movzx eax, word [0x14002487e]
add ax, 0xb
mov dword [rbp - 0x3d], 0x7a006f
mov word [rbp - 0xb], ax
movzx eax, word [str.SystemRoot_system32driversclfs.sys]
add ax, 0xb
mov dword [rbp - 0x39], 0x7e0082
mov word [rbp - 9], ax
movzx eax, word [0x140024882]
add ax, 0xb
mov dword [rbp - 0x35], 0x5e0067
mov word [rbp - 7], ax
movzx eax, word [0x140024884]
add ax, 0xb
mov dword [rbp - 0x31], 0x7e0084
mov word [rbp - 5], ax
movzx eax, word [0x140024886]
add ax, 0xb
mov dword [rbp - 0x2d], 0x70007f
mov word [rbp - 3], ax
movzx eax, word [0x140024888]
add ax, 0xb
mov dword [rbp - 0x29], 0x3e0078
mov word [rbp - 1], ax
movzx eax, word [0x14002488a]
add ax, 0xb
mov dword [rbp - 0x25], 0x67003d
mov word [rbp + 1], ax
movzx eax, word [0x14002488c]
add ax, 0xb
mov dword [rbp - 0x21], 0x77006e
mov word [rbp + 3], ax
movzx eax, word [0x14002488e]
add ax, 0xb
mov dword [rbp - 0x1d], 0x7e0071
mov word [rbp + 5], ax
movzx eax, word [0x140024890]
add ax, 0xb
mov dword [rbp - 0x19], 0x7e0039
mov word [rbp + 7], ax
movzx eax, word [0x140024892]
add ax, 0xb
mov dword [rbp - 0x15], 0x7e0084
mov word [rbp + 9], ax
movzx eax, word [0x140024894]
add ax, 0xb
mov word [rbp + 0xb], ax
movzx eax, word [0x140024896]
add ax, 0xb
mov word [rbp + 0xd], ax
movzx eax, word [0x140024898]
add ax, 0xb
mov word [rbp + 0xf], ax
movzx eax, word [0x14002489a]
add ax, 0xb
mov word [rbp + 0x11], ax
movzx eax, word [0x14002489c]
add ax, 0xb
mov word [rbp + 0x13], ax
movzx eax, word [0x14002489e]
add ax, 0xb
mov word [rbp + 0x15], ax
movzx eax, word [0x1400248a0]
add ax, 0xb
mov word [rbp + 0x17], ax
movzx eax, word [0x1400248a2]
add ax, 0xb
mov word [rbp + 0x19], ax
movzx eax, word [0x1400248a4]
add ax, 0xb
movdqa xmm2, xmmword [0x140024b30]
mov ecx, 0xfff5
movdqu xmm0, xmmword [rbp - 0x49]
movdqu xmm1, xmmword [rbp - 0x39]
psubw xmm0, xmm2
mov word [rbp + 0x1b], ax
psubw xmm1, xmm2
movzx eax, word [0x1400248a6]
add ax, 0xb
movdqu xmmword [rbp - 0x49], xmm0
movdqu xmm0, xmmword [rbp - 0x29]
mov word [rbp + 0x1d], ax
psubw xmm0, xmm2
movzx eax, word [str.SystemRoot_system32clfs.sys]
add ax, 0xb
movdqu xmmword [rbp - 0x39], xmm1
movdqu xmm1, xmmword [rbp - 0x19]
mov word [rbp + 0x1f], ax
psubw xmm1, xmm2
movzx eax, word [0x1400248aa]
add ax, 0xb
movdqu xmmword [rbp - 0x29], xmm0
mov word [rbp + 0x21], ax
movzx eax, word [0x1400248ac]
add ax, 0xb
movdqu xmmword [rbp - 0x19], xmm1
mov word [rbp + 0x23], ax
movzx eax, word [0x1400248ae]
add ax, 0xb
mov word [rbp + 0x25], ax
movzx eax, word [0x1400248b0]
add ax, 0xb
mov word [rbp + 0x27], ax
xor eax, eax
mov word [rbp + 0x29], ax
mov eax, 0x20
nop word [rax + rax]
add word [rbp + rax*2 - 0x49], cx
inc rax
cmp rax, 0x39
jb 0x140001da0
lea rcx, [rbp - 0x49]
mov r8d, 1
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
add rsp, 0xc0
pop rbp
ret