Function at 0x180006850
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x278
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x1e0], xmm11
movaps xmmword [rbp + 0x1d0], xmm10
movaps xmmword [rbp + 0x1c0], xmm9
movaps xmmword [rbp + 0x1b0], xmm8
movaps xmmword [rbp + 0x1a0], xmm7
movaps xmmword [rbp + 0x190], xmm6
mov qword [rbp + 0x188], 0xfffffffffffffffe
mov rdx, rcx
lea rcx, [rbp + 0x100]
call fcn.180007200
movaps xmm8, xmmword [0x1800410d0]
movups xmmword [rbp + 0x148], xmm8
mov qword [rbp + 0x158], 0xf
movabs rax, 0x6165686369746e61
mov qword [rbp + 0x140], rax
mov byte [rbp + 0x148], 0x74
lea r14, [rbp + 0x120]
lea rdx, [rbp + 0x130]
lea r8, [rbp + 0x140]
mov rcx, r14
call fcn.180010800
mov rdi, qword [rbp + 0x130]
mov rax, qword [rbp + 0x158]
cmp rax, 0x10
jb 0x18000694b
mov rcx, qword [rbp + 0x140]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180006946
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x180006ecf
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.180018c50
add rdi, 0x40
mov byte [rbp + 0x187], 0
movups xmmword [rbp - 0x18], xmm8
mov qword [rbp - 8], 0xf
movabs rax, 0x7261756765766966
mov qword [rbp - 0x20], rax
mov byte [rbp - 0x18], 0x64
lea r8, [0x1800587e1]
lea rdx, [rbp - 0x20]
lea r9, [rbp + 0x187]
mov rcx, rdi
call fcn.1800064e0
movaps xmm0, xmmword [0x1800410e0]
movups xmmword [rbp + 8], xmm0
mov qword [rbp + 0x18], 0xf
movabs rax, 0x6569687365766177
mov qword [rbp], rax
mov word [rbp + 8], 0x646c
lea r8, [0x1800587e2]
mov rdx, rbp
lea r9, [rbp + 0x187]
mov rcx, rdi
call fcn.1800064e0
xorps xmm6, xmm6
movaps xmmword [rbp + 0x40], xmm6
movaps xmm9, xmmword [0x1800410f0]
movaps xmmword [rbp + 0x50], xmm9
mov dword [rbp + 0x40], 0x6178696d
mov byte [rbp + 0x44], 0x73
lea r8, [0x1800587e3]
lea rdx, [rbp + 0x40]
lea r9, [rbp + 0x187]
mov rcx, rdi
call fcn.1800064e0
movaps xmmword [rbp + 0x140], xmm6
movaps xmm6, xmmword [0x180041100]
movaps xmmword [rbp + 0x150], xmm6
mov dword [rbp + 0x140], 0x666e6f63
mov word [rbp + 0x144], 0x6769
lea rdx, [rbp + 0x130]
lea r8, [rbp + 0x140]
mov rcx, r14
call fcn.180010800
mov rdi, qword [rbp + 0x130]
mov rax, qword [rbp + 0x158]
cmp rax, 0x10
jb 0x180006a92
mov rcx, qword [rbp + 0x140]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180006a8d
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x180006ecf
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.180018c50
add rdi, 0x40
movaps xmm10, xmmword [0x180041110]
movaps xmmword [rbp - 0x50], xmm10
movaps xmm0, xmmword [str.isolated]
movaps xmmword [rbp - 0x60], xmm0
lea r8, [0x1800587e0]
lea rdx, [rbp - 0x60]
lea r9, [rbp + 0x187]
mov rcx, rdi
call fcn.1800064e0
movups xmmword [rbp + 0x28], xmm8
mov qword [rbp + 0x38], 0xf
movabs rax, 0x6f69747563657865
mov qword [rbp + 0x20], rax
mov byte [rbp + 0x28], 0x6e
lea r8, [0x180057041]
lea rdx, [rbp + 0x20]
lea r9, [rbp + 0x187]
mov rcx, rdi
call fcn.1800064e0
xorps xmm7, xmm7
movaps xmmword [rbp + 0x60], xmm7
movaps xmmword [rbp + 0x70], xmm9
mov dword [rbp + 0x60], 0x68636163
mov byte [rbp + 0x64], 0x65
lea r8, [0x180057040]
lea rdx, [rbp + 0x60]
lea r9, [rbp + 0x187]
mov rcx, rdi
call fcn.1800064e0
movaps xmmword [rbp + 0x80], xmm7
movaps xmmword [rbp + 0x90], xmm6
mov dword [rbp + 0x80], 0x69726373
mov word [rbp + 0x84], 0x7470
lea r8, [0x1800587a8]
lea rdx, [rbp + 0x80]
lea r9, [rbp + 0x187]
mov rcx, rdi
call fcn.1800066c0
xorps xmm7, xmm7
movaps xmmword [rbp + 0xa0], xmm7
movaps xmm11, xmmword [0x180041130]
movaps xmmword [rbp + 0xb0], xmm11
mov dword [rbp + 0xa0], 0x73617263
mov dword [rbp + 0xa3], 0x72656873
lea r8, [0x1800587e4]
lea rdx, [rbp + 0xa0]
lea r9, [rbp + 0x187]
mov rcx, rdi
call fcn.1800064e0
movaps xmmword [rbp + 0x140], xmm7
movaps xmmword [rbp + 0x150], xmm6
mov dword [rbp + 0x140], 0x67726174
mov word [rbp + 0x144], 0x7465
lea rdx, [rbp + 0x130]
lea r8, [rbp + 0x140]
mov rcx, r14
call fcn.180010800
mov rdi, qword [rbp + 0x130]
mov rax, qword [rbp + 0x158]
cmp rax, 0x10
jb 0x180006c3e
mov rcx, qword [rbp + 0x140]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180006c39
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x180006ecf
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.180018c50
add rdi, 0x40
movaps xmmword [rbp - 0x30], xmm10
movaps xmm0, xmmword [str.resource]
movaps xmmword [rbp - 0x40], xmm0
lea r8, str.spawnmanager
lea rdx, [rbp - 0x40]
lea r9, [rbp + 0x187]
mov rcx, rdi
call fcn.1800066c0
xorps xmm6, xmm6
movaps xmmword [rbp + 0xc0], xmm6
movaps xmmword [rbp + 0xd0], xmm9
mov dword [rbp + 0xc0], 0x65646e69
mov byte [rbp + 0xc4], pe_nt_image_headers64
lea r8, [0x180058800]
lea rdx, [rbp + 0xc0]
lea r9, [rbp + 0x187]
mov rcx, rdi
call fcn.180006300
movaps xmmword [rbp + 0xe0], xmm6
movaps xmmword [rbp + 0xf0], xmm11
mov dword [rbp + 0xe0], 0x6c706572
mov dword [rbp + 0xe3], 0x6563616c
lea r8, [0x180058804]
lea rdx, [rbp + 0xe0]
lea rbx, [rbp + 0x187]
mov rcx, rdi
mov r9, rbx
call fcn.1800064e0
movups xmmword [rbp + 0x148], xmm8
mov qword [rbp + 0x158], 0xf
movabs rax, 0x73696c6b63616c62
mov qword [rbp + 0x140], rax
mov byte [rbp + 0x148], 0x74
lea rdx, [rbp + 0x130]
lea r15, [rbp + 0x140]
mov rcx, r14
mov r8, r15
call fcn.180010800
mov rsi, qword [rbp + 0x130]
mov rax, qword [rbp + 0x158]
cmp rax, 0x10
jb 0x180006d7f
mov rcx, qword [rbp + 0x140]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180006d7a
mov rdi, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rdi
cmp rcx, 0x20
jae 0x180006ecf
add rax, 0x28
mov rdx, rax
mov rcx, rdi
call fcn.180018c50
cmp byte [rbp + 0x187], 0
je 0x180006d94
lea rcx, [rbp + 0x100]
call fcn.180007cf0
add rsi, 0x40
lea rax, section..rdata
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], rsi
mov qword [rbp + 0x150], rbx
mov qword [rbp + 0x178], r15
mov rax, qword [0x180058788]
mov rsi, qword [rax]
mov rdi, qword [rax + 8]
mov rcx, r15
cmp rsi, rdi
je 0x180006e18
lea rbx, [rbp + 0x130]
nop dword [rax + rax]
mov rax, qword [rsi]
mov qword [rbp + 0x130], rax
mov rcx, qword [rbp + 0x178]
test rcx, rcx
je 0x180006eca
mov rax, qword [rcx]
mov rdx, rbx
call qword [rax + 0x10]
add rsi, 8
cmp rsi, rdi
jne 0x180006de0
mov rcx, qword [rbp + 0x178]
test rcx, rcx
je 0x180006e24
cmp rcx, r15
setne dl
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rax, qword [rbp + 0x120]
mov r8, qword [rax + 8]
mov rcx, r14
mov rdx, r14
call fcn.180010c70
mov rcx, qword [rbp + 0x120]
mov edx, 0x50
call fcn.180018c50
mov rax, qword [rbp + 0x118]
cmp rax, 0x10
jb 0x180006e8c
mov rcx, qword [rbp + 0x100]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x180006e87
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x180006ecf
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.180018c50
movaps xmm6, xmmword [rbp + 0x190]
movaps xmm7, xmmword [rbp + 0x1a0]
movaps xmm8, xmmword [rbp + 0x1b0]
movaps xmm9, xmmword [rbp + 0x1c0]
movaps xmm10, xmmword [rbp + 0x1d0]
movaps xmm11, xmmword [rbp + 0x1e0]
add rsp, 0x278
pop rbx
pop rdi
pop rsi
pop r14
pop r15
pop rbp
ret
call fcn.180019c64
call fcn.18002149c
int3