Function at 0x18006e940
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0x100
mov rax, qword [0x180211600]
xor rax, rsp
mov qword [rbp + 0x3f], rax
mov r14, rdx
xor ebx, ebx
mov word [rbp + 0x1f], 0x65
vmovdqu xmm0, xmmword [0x1801e5ba0]
vmovdqu xmmword [rbp + 0xf], xmm0
mov byte [rbp + 0x21], bl
lea rdx, [rbp + 0xf]
call fcn.180021410
lea rsi, [rax + 8]
cmp byte [rax], 4
cmovne rsi, rbx
mov dword [rbp + 0x2d], 0x656c62
mov dword [rbp + 0x27], 0x69766e49
mov word [rbp + 0x2b], 0x6963
mov byte [rbp + 0x31], bl
add r14, 0x90
mov ecx, 0x158
call fcn.18016cca4
mov qword [rbp - 0x79], rax
mov qword [rbp + 7], rbx
lea r15, vtable.std::_Func_impl_no_alloc_void____cdecl___void___void___.0
mov qword [rbp - 0x71], r15
lea rcx, [0x18001c4d0]
mov qword [rbp - 0x69], rcx
lea rcx, [rbp - 0x71]
mov qword [rbp - 0x39], rcx
lea rcx, [rbp - 0x31]
mov qword [rsp + 0x38], rcx
lea rcx, [rbp - 0x71]
mov qword [rsp + 0x30], rcx
mov byte [rsp + 0x28], bl
mov dword [rsp + 0x20], 2
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp + 0x27]
mov rcx, rax
call fcn.180069f50
nop
mov qword [rbp - 0x79], rbx
mov qword [rbp + 0xf], rax
mov rdx, qword [r14 + 8]
cmp rdx, qword [r14 + 0x10]
je 0x18004ed9a
mov ecx, ebx
mov qword [rdx], rax
add qword [r14 + 8], 8
jmp 0x18004edaa
lea r8, [rbp + 0xf]
mov rcx, r14
call fcn.18006a210
mov rcx, qword [rbp + 0xf]
test rcx, rcx
je 0x18004edba
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
nop
mov word [rbp + 0x37], 0x67
vmovdqu xmm0, xmmword [0x1801e5cd0]
vmovdqu xmmword [rbp + 0x27], xmm0
mov byte [rbp + 0x39], 0
lea rdx, [rbp + 0x27]
call fcn.180021410
lea rdi, [rax + 8]
cmp byte [rax], 4
cmovne rdi, rbx
mov word [rbp + 0x14], 0x67
mov dword [rbp + 0xf], 0x6f727453
mov byte [rbp + 0x13], 0x6e
mov byte [rbp + 0x16], 0
mov ecx, 0x158
call fcn.18016cca4
mov qword [rbp - 0x79], rax
mov qword [rbp + 7], rbx
mov qword [rbp - 0x71], r15
lea rsi, [0x18001c4f0]
mov qword [rbp - 0x69], rsi
lea rcx, [rbp - 0x71]
mov qword [rbp - 0x39], rcx
lea rcx, [rbp - 0x31]
mov qword [rsp + 0x38], rcx
lea rcx, [rbp - 0x71]
mov qword [rsp + 0x30], rcx
mov byte [rsp + 0x28], 0
mov dword [rsp + 0x20], 2
mov r9, rdi
xor r8d, r8d
lea rdx, [rbp + 0xf]
mov rcx, rax
call fcn.180069f50
nop
mov qword [rbp + 0x27], rbx
mov qword [rbp - 0x79], rax
mov rdx, qword [r14 + 8]
cmp rdx, qword [r14 + 0x10]
je 0x18004ee74
mov rcx, rbx
mov qword [rdx], rax
add qword [r14 + 8], 8
jmp 0x18004ee84
lea r8, [rbp - 0x79]
mov rcx, r14
call fcn.18006a210
mov rcx, qword [rbp - 0x79]
test rcx, rcx
je 0x18004ee94
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
nop
mov dword [rbp + 0x33], 0x6b6165
mov dword [rbp + 0x27], 0x69686556
mov dword [rbp + 0x2b], 0x5f656c63
mov dword [rbp + 0x2f], 0x4c6c694f
mov byte [rbp + 0x37], 0
lea rdx, [rbp + 0x27]
call fcn.180021410
lea rdi, [rax + 8]
cmp byte [rax], 4
cmovne rdi, rbx
mov word [rbp + 0x1f], 0
vmovdqu xmm0, xmmword [0x1801e59a0]
vmovdqu xmmword [rbp + 0xf], xmm0
mov ecx, 0x158
call fcn.18016cca4
mov qword [rbp + 0x27], rax
mov qword [rbp + 7], rbx
mov qword [rbp - 0x71], r15
mov qword [rbp - 0x69], rsi
lea rcx, [rbp - 0x71]
mov qword [rbp - 0x39], rcx
lea rcx, [rbp - 0x31]
mov qword [rsp + 0x38], rcx
lea rcx, [rbp - 0x71]
mov qword [rsp + 0x30], rcx
mov byte [rsp + 0x28], 0
mov dword [rsp + 0x20], 2
mov r9, rdi
xor r8d, r8d
lea rdx, [rbp + 0xf]
mov rcx, rax
call fcn.180069f50
nop
mov qword [rbp + 0x27], rbx
mov qword [rbp - 0x79], rax
mov rdx, qword [r14 + 8]
cmp rdx, qword [r14 + 0x10]
je 0x18004ef4e
mov rcx, rbx
mov qword [rdx], rax
add qword [r14 + 8], 8
jmp 0x18004ef5e
lea r8, [rbp - 0x79]
mov rcx, r14
call fcn.18006a210
mov rcx, qword [rbp - 0x79]
test rcx, rcx
je 0x18004ef6e
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
nop
mov word [rbp + 0x38], 0x6b
vmovdqu xmm0, xmmword [0x1801e5800]
vmovdqu xmmword [rbp + 0x27], xmm0
mov byte [rbp + 0x37], 0x61
mov byte [rbp + 0x3a], 0
lea rdx, [rbp + 0x27]
call fcn.180021410
lea rdi, [rax + 8]
cmp byte [rax], 4
cmovne rdi, rbx
mov dword [rbp + 0x1f], 0x676e69
vmovdqu xmm0, xmmword [0x1801e5ad0]
vmovdqu xmmword [rbp + 0xf], xmm0
mov byte [rbp + 0x23], 0
mov ecx, 0x158
call fcn.18016cca4
mov qword [rbp + 0x27], rax
mov qword [rbp + 7], rbx
mov qword [rbp - 0x71], r15
mov qword [rbp - 0x69], rsi
lea rcx, [rbp - 0x71]
mov qword [rbp - 0x39], rcx
lea rcx, [rbp - 0x31]
mov qword [rsp + 0x38], rcx
lea rcx, [rbp - 0x71]
mov qword [rsp + 0x30], rcx
mov byte [rsp + 0x28], 0
mov dword [rsp + 0x20], 2
mov r9, rdi
xor r8d, r8d
lea rdx, [rbp + 0xf]
mov rcx, rax
call fcn.180069f50
nop
mov qword [rbp + 0x27], rbx
mov qword [rbp - 0x79], rax
mov rdx, qword [r14 + 8]
cmp rdx, qword [r14 + 0x10]
je 0x18004f028
mov rcx, rbx
mov qword [rdx], rax
add qword [r14 + 8], 8
jmp 0x18004f038
lea r8, [rbp - 0x79]
mov rcx, r14
call fcn.18006a210
mov rcx, qword [rbp - 0x79]
test rcx, rcx
je 0x18004f048
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
nop
mov word [rbp + 0x37], 0
vmovdqu xmm0, xmmword [0x1801e58d0]
vmovdqu xmmword [rbp + 0x27], xmm0
lea rdx, [rbp + 0x27]
call fcn.180021410
lea rdi, [rax + 8]
cmp byte [rax], 4
cmovne rdi, rbx
mov word [rbp + 0x1f], 0
vmovdqu xmm0, xmmword [0x1801e5f50]
vmovdqu xmmword [rbp + 0xf], xmm0
mov ecx, 0x158
call fcn.18016cca4
mov qword [rbp + 0x27], rax
mov qword [rbp + 7], rbx
mov qword [rbp - 0x71], r15
mov qword [rbp - 0x69], rsi
lea rcx, [rbp - 0x71]
mov qword [rbp - 0x39], rcx
lea rcx, [rbp - 0x31]
mov qword [rsp + 0x38], rcx
lea rcx, [rbp - 0x71]
mov qword [rsp + 0x30], rcx
mov byte [rsp + 0x28], 0
mov dword [rsp + 0x20], 2
mov r9, rdi
xor r8d, r8d
lea rdx, [rbp + 0xf]
mov rcx, rax
call fcn.180069f50
nop
mov qword [rbp + 0x27], rbx
mov qword [rbp - 0x79], rax
mov rdx, qword [r14 + 8]
cmp rdx, qword [r14 + 0x10]
je 0x18004f0f5
mov rcx, rbx
mov qword [rdx], rax
add qword [r14 + 8], 8
jmp 0x18004f105
lea r8, [rbp - 0x79]
mov rcx, r14
call fcn.18006a210
mov rcx, qword [rbp - 0x79]
test rcx, rcx
je 0x18004f115
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
nop
mov dword [rbp + 0x39], 0x737361
vmovdqu xmm0, xmmword [0x1801e57c0]
vmovdqu xmmword [rbp + 0x27], xmm0
mov word [rbp + 0x37], 0x6c47
mov byte [rbp + 0x3d], 0
lea rdx, [rbp + 0x27]
call fcn.180021410
lea rdi, [rax + 8]
cmp byte [rax], 4
cmovne rdi, rbx
mov word [rbp + 0x1c], 0x73
mov dword [rbp + 0xf], 0x706d6554
mov dword [rbp + 0x13], 0x64657265
mov dword [rbp + 0x17], 0x616c4720
mov byte [rbp + 0x1b], 0x73
mov byte [rbp + 0x1e], 0
mov ecx, 0x158
call fcn.18016cca4
mov qword [rbp + 0x27], rax
mov qword [rbp + 7], rbx
mov qword [rbp - 0x71], r15
lea rcx, [0x18001c550]
mov qword [rbp - 0x69], rcx
lea rcx, [rbp - 0x71]
mov qword [rbp - 0x39], rcx
lea rcx, [rbp - 0x31]
mov qword [rsp + 0x38], rcx
lea rcx, [rbp - 0x71]
mov qword [rsp + 0x30], rcx
mov byte [rsp + 0x28], 0
mov dword [rsp + 0x20], 2
mov r9, rdi
xor r8d, r8d
lea rdx, [rbp + 0xf]
mov rcx, rax
call fcn.180069f50
nop
mov qword [rbp + 0x27], rbx
mov qword [rbp - 0x79], rax
mov rdx, qword [r14 + 8]
cmp rdx, qword [r14 + 0x10]
je 0x18004f1e4
mov rcx, rbx
mov qword [rdx], rax
add qword [r14 + 8], 8
jmp 0x18004f1f4
lea r8, [rbp - 0x79]
mov rcx, r14
call fcn.18006a210
mov rcx, qword [rbp - 0x79]
test rcx, rcx
je 0x18004f204
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
nop
mov word [rbp + 0x38], 0x72
vmovdqu xmm0, xmmword [0x1801e56f0]
vmovdqu xmmword [rbp + 0x27], xmm0
mov byte [rbp + 0x37], 0x69
mov byte [rbp + 0x3a], 0
lea rdx, [rbp + 0x27]
call fcn.180021410
lea rdi, [rax + 8]
cmp byte [rax], 4
cmovne rdi, rbx
mov dword [rbp + 0x17], 0x726961
mov dword [rbp + 0xf], 0x6f747541
mov dword [rbp + 0x13], 0x70655220
mov byte [rbp + 0x1b], 0
mov ecx, 0x158
call fcn.18016cca4
mov qword [rbp + 0x27], rax
mov qword [rbp + 7], rbx
lea rcx, vtable.std::_Func_impl_no_alloc_class__lambda_27749e726544be110f10657788878fb8___void___.0
mov qword [rbp - 0x71], rcx
lea rcx, [rbp - 0x71]
mov qword [rbp - 0x39], rcx
lea rcx, [rbp - 0x31]
mov qword [rsp + 0x38], rcx
lea rcx, [rbp - 0x71]
mov qword [rsp + 0x30], rcx
mov byte [rsp + 0x28], 0
mov dword [rsp + 0x20], 2
mov r9, rdi
xor r8d, r8d
lea rdx, [rbp + 0xf]
mov rcx, rax
call fcn.180069f50
nop
mov qword [rbp + 0x27], rbx
mov qword [rbp - 0x79], rax
mov rdx, qword [r14 + 8]
cmp rdx, qword [r14 + 0x10]
je 0x18004f2c2
mov rcx, rbx
mov qword [rdx], rax
add qword [r14 + 8], 8
jmp 0x18004f2d2
lea r8, [rbp - 0x79]
mov rcx, r14
call fcn.18006a210
mov rcx, qword [rbp - 0x79]
test rcx, rcx
je 0x18004f2e2
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
nop
mov word [rbp + 0x14], 0x72
mov dword [rbp + 0xf], 0x61706552
mov byte [rbp + 0x13], 0x69
mov byte [rbp + 0x16], 0
mov ecx, pe_nt_image_headers64
call fcn.18016cca4
mov qword [rbp + 0x27], rax
lea rcx, vtable.std::_Func_impl_no_alloc_class__lambda_42ffdb90b268d1c13d56c3e742a8799c___void___.0
mov qword [rbp - 0x71], rcx
lea rcx, [rbp - 0x71]
mov qword [rbp - 0x39], rcx
lea r9, [rbp - 0x71]
xor r8d, r8d
lea rdx, [rbp + 0xf]
mov rcx, rax
call fcn.1800378e0
nop
mov qword [rbp + 0x27], rbx
mov qword [rbp - 0x79], rax
mov rdx, qword [r14 + 8]
cmp rdx, qword [r14 + 0x10]
je 0x18004f348
mov qword [rdx], rax
add qword [r14 + 8], 8
jmp 0x18004f358
lea r8, [rbp - 0x79]
mov rcx, r14
call fcn.18006a210
mov rbx, qword [rbp - 0x79]
test rbx, rbx
je 0x18004f36b
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax]
nop
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.18016cc50
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov rdx, qword [rdx]
add rcx, 8
jmp 0x18004eca0