Function at 0x140014480
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
xor eax, eax
mov r8d, 1
lock cmpxchg dword [0x1400a6e9c], r8d
jne 0x1400148c5
lea ecx, [r8 + 0x44]
mov dword [rsp + 0x20], 0x160045
mov dword [rsp + 0x24], 0x10020
mov dword [rsp + 0x28], 0x270020
mov dword [rsp + 0x2c], 0x220030
mov dword [rsp + 0x30], 0x370015
mov dword [rsp + 0x34], 0x33002c
mov dword [rsp + 0x38], 0x29002c
mov dword [rsp + 0x3c], 0x220020
mov dword [rsp + 0x40], 0x450020
movzx eax, word [0x1400990ea]
xor ax, cx
mov word [rsp + 0x44], ax
movzx eax, word [0x1400990ec]
xor ax, cx
mov word [rsp + 0x46], ax
movzx eax, word [0x1400990ee]
xor ax, cx
mov word [rsp + 0x48], ax
movzx eax, word [str.SeLoadDriverPrivilege]
xor ax, cx
mov word [rsp + 0x4a], ax
movzx eax, word [0x1400990f2]
xor ax, cx
mov word [rsp + 0x4c], ax
movzx eax, word [0x1400990f4]
xor ax, cx
mov word [rsp + 0x4e], ax
movzx eax, word [0x1400990f6]
xor ax, cx
mov word [rsp + 0x50], ax
movzx eax, word [0x1400990f8]
xor ax, cx
mov word [rsp + 0x52], ax
movzx eax, word [0x1400990fa]
xor ax, cx
mov word [rsp + 0x54], ax
movzx eax, word [0x1400990fc]
xor ax, cx
mov word [rsp + 0x56], ax
movzx eax, word [0x1400990fe]
xor ax, cx
mov word [rsp + 0x58], ax
movzx eax, word [0x140099100]
xor ax, cx
mov word [rsp + 0x5a], ax
movzx eax, word [0x140099102]
xor ax, cx
mov word [rsp + 0x5c], ax
movzx eax, word [0x140099104]
xor ax, cx
mov word [rsp + 0x5e], ax
movzx eax, word [0x140099106]
xor ax, cx
mov word [rsp + 0x60], ax
movzx eax, word [0x140099108]
xor ax, cx
mov word [rsp + 0x62], ax
xor eax, eax
mov word [rsp + 0x64], ax
xor edi, edi
xor word [rsp + rax*2 + 0x22], cx
inc rax
cmp rax, 0x21
jae 0x140014616
movzx ecx, word [rsp + 0x20]
jmp 0x140014601
mov word [rsp + 0x64], di
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
mov esi, 7
mov qword [rbp - 0x18], rsi
lea rax, [rsp + 0x22]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140014640
lea rdx, [rsp + 0x22]
lea rcx, [rbp - 0x30]
call fcn.140008560
lea rcx, [rbp - 0x30]
call fcn.140014900
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x1400146a2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001469d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400148ee
call fcn.140016950
mov ecx, 0x43
mov dword [rsp + 0x70], 0x100043
mov dword [rsp + 0x74], 0xf0026
mov dword [rsp + 0x78], 0x22002c
mov dword [rsp + 0x7c], 0x70027
mov dword [rbp - 0x80], 0x2a0031
mov dword [rbp - 0x7c], 0x260035
mov dword [rbp - 0x78], 0x130031
mov dword [rbp - 0x74], 0x2a0031
mov dword [rbp - 0x70], 0x2a0035
mov dword [rbp - 0x6c], 0x26002f
mov dword [rbp - 0x68], 0x260024
mov word [rbp - 0x64], cx
movzx eax, word [0x14009911c]
xor ax, cx
mov word [rbp - 0x62], ax
movzx eax, word [0x14009911e]
xor ax, cx
mov word [rbp - 0x60], ax
movzx eax, word [str.ntdll.dll]
xor ax, cx
mov word [rbp - 0x5e], ax
movzx eax, word [0x140099122]
xor ax, cx
mov word [rbp - 0x5c], ax
movzx eax, word [0x140099124]
xor ax, cx
mov word [rbp - 0x5a], ax
movzx eax, word [0x140099126]
xor ax, cx
mov word [rbp - 0x58], ax
movzx eax, word [0x140099128]
xor ax, cx
mov word [rbp - 0x56], ax
movzx eax, word [0x14009912a]
xor ax, cx
mov word [rbp - 0x54], ax
movzx eax, word [0x14009912c]
xor ax, cx
mov word [rbp - 0x52], ax
movzx eax, word [0x14009912e]
xor ax, cx
mov word [rbp - 0x50], ax
movzx eax, word [0x140099130]
xor ax, cx
mov word [rbp - 0x4e], ax
movzx eax, word [0x140099132]
xor ax, cx
mov word [rbp - 0x4c], ax
movzx eax, word [0x140099134]
xor ax, cx
mov word [rbp - 0x4a], ax
movzx eax, word [0x140099136]
xor ax, cx
mov word [rbp - 0x48], ax
movzx eax, word [str.RtlDosPathNameToNtPathName_U]
xor ax, cx
mov word [rbp - 0x46], ax
movzx eax, word [0x14009913a]
xor ax, cx
mov word [rbp - 0x44], ax
movzx eax, word [0x14009913c]
xor ax, cx
mov word [rbp - 0x42], ax
movzx eax, word [0x14009913e]
xor ax, cx
mov word [rbp - 0x40], ax
movzx eax, word [0x140099140]
xor ax, cx
mov word [rbp - 0x3e], ax
movzx eax, word [0x140099142]
xor ax, cx
mov word [rbp - 0x3c], ax
movzx eax, word [0x140099144]
xor ax, cx
mov word [rbp - 0x3a], ax
xor eax, eax
mov word [rbp - 0x38], ax
mov rax, rdi
nop dword [rax + rax]
xor word [rsp + rax*2 + 0x72], cx
inc rax
cmp rax, 0x2b
jae 0x140014845
movzx ecx, word [rsp + 0x70]
jmp 0x140014830
mov word [rbp - 0x38], di
mov qword [rbp - 0x10], rdi
mov qword [rbp], rdi
mov qword [rbp + 8], rsi
lea rax, [rsp + 0x72]
nop word [rax + rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140014860
mov r8, rbx
lea rdx, [rsp + 0x72]
lea rcx, [rbp - 0x10]
call fcn.140008560
lea rcx, [rbp - 0x10]
call fcn.140014900
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb 0x1400148c0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400148bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400148e8
call fcn.140016950
call fcn.140014a10
mov al, 1
lea r11, [rsp + 0x110]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.140028100
int3
call fcn.140028100
int3