Function at 0x1800237a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x468]
sub rsp, 0x540
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x18007b358]
xor rax, rsp
mov qword [rbp + 0x428], rax
mov dword [rbp + 0x3e8], 0x66006f
mov dword [rbp + 0x3ec], 0x730066
mov dword [rbp + 0x3f0], 0x740065
mov ecx, 0x20
mov word [rbp + 0x3f4], cx
mov dword [rbp + 0x3f6], 0x250027
mov dword [rbp + 0x3fa], 0x270064
mov dword [rbp + 0x3fe], 0x690020
mov eax, 0x73
mov word [rbp + 0x402], ax
mov dword [rbp + 0x404], 0x6f0020
mov dword [rbp + 0x408], 0x740075
mov word [rbp + 0x40c], cx
mov dword [rbp + 0x40e], 0x66006f
mov word [rbp + 0x412], cx
mov dword [rbp + 0x414], 0x610072
mov dword [rbp + 0x418], 0x3a006e
mov dword [rbp + 0x41c], 0x67005c
mov dword [rbp + 0x420], 0x65
xor r12d, r12d
mov r14b, 1
mov qword [rsp + 0x68], r12
mov esi, 0x129
lea r13, [0x180000000]
lea r15, [0x18007b060]
movsd xmm6, qword [0x180075140]
mov ebx, dword [rsp + 0x58]
nop dword [rax]
cmp esi, 0x129
ja 0x1800239ec
je 0x1800239c3
lea eax, [rsi - 9]
cmp eax, 0xfc
ja case.0x1800238e4.14
movzx eax, byte [rax + r13 + 0x23f84]
mov ecx, dword [r13 + rax*4 + 0x23f68]
add rcx, r13
jmp rcx
mov byte [rsp + 0x51], 4
jmp case.0x1800238e4.14
mov eax, dword [SHChangeNotifyRegister]
dec eax
cmp eax, 1
ja 0x180023b9a
mov byte [rsp + 0x52], r12b
jmp case.0x1800238e4.14
mov byte [rsp + 0x53], r14b
jmp case.0x1800238e4.14
movsd xmm3, qword [0x18007b060]
movaps xmm0, xmm3
divsd xmm0, qword [0x180075168]
cvttsd2si eax, xmm0
movd xmm2, eax
cvtdq2pd xmm2, xmm2
movaps xmm1, xmm2
mulsd xmm1, qword [0x180075168]
subsd xmm3, xmm1
divsd xmm3, qword [0x180075138]
addsd xmm3, xmm2
movsd qword [0x18007b060], xmm3
jmp case.0x1800238e4.14
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x18002396b
mov edi, dword [rax]
jmp 0x18002396e
mov edi, r12d
mov eax, dword [SHChangeNotifyRegister]
mov dword [rsp + 0x60], eax
lea r8, [rsp + 0x60]
mov edx, 0xca
xor ecx, ecx
call fcn.18003ef30
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x40], rcx
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rax
mov r9, r15
lea r8, str.float2x2_vectors__float2x2_corner____s__sk_InvocationID__2_____3___corner____s__sk_InvocationID__1_____3___
mov edx, 5
mov rcx, r15
call fcn.18003c520
jmp case.0x1800238e4.14
xor edx, edx
mov r8d, 0xf9
mov rcx, r15
call fcn.180048320
mov dword [0x18007b110], 0x3c
mov dword [0x18007b114], 0x3840
jmp case.0x1800238e4.14
mov eax, esi
sub eax, 0x144
je 0x180023a46
sub eax, 0x3f
je 0x180023b9a
sub eax, 0xb5
je 0x180023b9a
sub eax, 0x710
je 0x180023a28
cmp eax, 0x81f
jne case.0x1800238e4.14
movsd qword [0x18007b108], xmm6
jmp case.0x1800238e4.14
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xda
call fcn.18000c1d0
mov qword [0x18007b118], rax
jmp case.0x1800238e4.14
cmp qword [rsp + 0x68], r12
je case.0x1800238e4.14
mov edi, 3
nop word [rax + rax]
mov eax, edi
sub eax, 3
je 0x180023b0e
sub eax, 0x3d
je 0x180023acf
sub eax, 0x3d
je 0x180023aab
sub eax, 0x3d
je 0x180023a95
cmp eax, 0x3d
jne 0x180023b79
mov rax, qword [rsp + 0x68]
mov ecx, dword [rax]
mov dword [0x18007b09c], ecx
jmp 0x180023b79
mov rcx, qword [rbp - 0x80]
movzx eax, byte [rsp + 0x50]
cmp byte [rcx], al
jne 0x180023b9a
jmp 0x180023b79
mov r8, qword [rsp + 0x68]
mov edx, 0x76
lea rcx, [rsp + 0x50]
call fcn.1800348a0
mov rbx, rax
test eax, eax
js 0x180023b9a
jmp 0x180023b79
test ebx, ebx
js 0x180023b9a
mov eax, dword [SHChangeNotifyRegister]
mov dword [rsp + 0x60], eax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x68]
mov r8, r15
mov edx, 0x16
lea rcx, [rbp - 0x80]
call fcn.180051240
mov ebx, eax
test eax, eax
js 0x180023b9a
jmp 0x180023b79
mov eax, dword [SHChangeNotifyRegister]
mov dword [rsp + 0x70], eax
mov qword [rsp + 0x28], r15
lea rax, [rsp + 0x51]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x52]
lea r8, [rsp + 0x53]
mov edx, 0x78
lea rcx, [rsp + 0x70]
call fcn.180035970
test eax, eax
js 0x180023b9a
mov eax, dword [SHChangeNotifyRegister]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x3d8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
xor r9d, r9d
mov r8d, 0xb6
mov rdx, r15
lea rcx, [rsp + 0x58]
call fcn.180034fb0
mov ebx, eax
add edi, 0x3d
cmp edi, 0x134
jb 0x180023a60
add esi, 0x81f
cmp esi, 0x6174
jbe 0x1800238b0
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x40], ILRemoveLastID
mov byte [rbp - 0x58], r12b
mov r9d, 0x104
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x58]
call fcn.180064b40
test al, al
jne 0x180023c05
xor edx, edx
mov r8d, 0x3cc
lea rcx, [rbp - 0xc]
call sub.VCRUNTIME140.dll_memset
mov dword [rbp - 0x10], 0x3d0
lea rdx, [rbp - 0x10]
mov ecx, 1
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov edx, 0x7f
xor ecx, ecx
lea r9d, [rdx - 0x7e]
mov r8d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_EnumCalendarInfoA]
jmp 0x180023ef3
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x60], ILRemoveLastID
mov byte [rbp - 0x78], 0
lea rdx, [rsp + 0x78]
xor ecx, ecx
call sub.IMM32.dll_ImmGetStatusWindowPos
mov ebx, eax
movsd xmm0, qword [0x18007b108]
mulsd xmm0, qword [0x180075168]
addsd xmm0, qword [0x1800750c8]
cvttsd2si rcx, xmm0
mov dword [rsp + 0x58], ecx
mov dword [rsp + 0x20], 0x21
lea r9, [rsp + 0x58]
lea r8, [0x18007b088]
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x78]
call fcn.18000a4d0
test ebx, ebx
jne 0x180023d3c
lea r8d, [rbx + 4]
lea rdx, [0x180074e5c]
lea rcx, [rbp + 0x3c0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
lea rcx, [rbp + 0x3c0]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x180023c94
movzx eax, word [0x180074e60]
mov word [rcx], ax
mov eax, 0x5f
mov word [rbp + 0x3c4], ax
movzx eax, word [0x180074e64]
mov word [rbp + 0x3c5], ax
mov eax, 0x4f
mov word [rbp + 0x3c7], ax
mov eax, 0x4d
mov word [rbp + 0x3c8], ax
mov eax, 0x49
mov word [rbp + 0x3c9], ax
lea rcx, [rbp + 0x3c0]
dec rcx
nop
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x180023cf0
mov eax, dword [str.C_STO]
mov dword [rcx], eax
movzx eax, word [0x180074e6c]
mov word [rcx + 4], ax
movzx eax, word [0x1800749a4]
mov word [rbp + 0x3cf], ax
movzx eax, byte [0x1800749a6]
mov byte [rbp + 0x3d1], al
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x3c0]
call qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
xor r14b, r14b
lea r9, [rbp - 0x78]
xor edx, edx
xor ecx, ecx
mov r8d, 0x123
call fcn.18005dfc0
test al, al
jne 0x180023e77
mov byte [rbp + 0x3c0], al
lea rcx, [rbp + 0x3c0]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x180023d67
movzx eax, word [0x18006c848]
mov word [rcx], ax
mov r8d, 4
lea rdx, str.ecid
lea rcx, [rbp + 0x3c0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov eax, 0x65
mov word [rbp + 0x3c5], ax
mov dword [rbp + 0x3c6], 0x746553
lea r8d, [rax - 0x63]
lea rdx, [0x180074e78]
lea rcx, [rbp + 0x3c0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 1
lea rdx, [0x18006c840]
lea rcx, [rbp + 0x3c0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov eax, dword [str._Var]
mov dword [rbp + 0x3cc], eax
movzx eax, byte [0x180074e80]
mov byte [rbp + 0x3d0], al
mov eax, 0x307b
mov word [rbp + 0x3d8], ax
mov dword [rbp + 0x3da], 0x6974207d
movzx eax, word [0x180074e9c]
mov word [rbp + 0x3de], ax
movzx eax, byte [0x180074e9e]
mov byte [rbp + 0x3e0], al
mov dword [rbp + 0x3e1], 0x206e6961
mov word [rbp + 0x3e5], 0x70
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
movups xmmword [rbp - 0x28], xmm0
lea r8, [rbp - 0x38]
xor edx, edx
xor ecx, ecx
call sub.IMM32.dll_ImmGetCandidateWindow
mov ebx, eax
lea rdx, [rbp + 0x3d8]
lea rcx, [rbp + 0x3c0]
call sub.IMM32.dll_ImmInstallIMEA
test ebx, ebx
je 0x180023ea5
lea rdx, [rbp - 0x38]
xor ecx, ecx
call sub.IMM32.dll_ImmSetCandidateWindow
jmp 0x180023ea5
test r14b, r14b
je 0x180023e88
lea rdx, [rsp + 0x78]
xor ecx, ecx
call sub.IMM32.dll_ImmSetStatusWindowPos
lea rcx, [rbp + 0x3e8]
call qword [sym.imp.SHLWAPI.dll_PathStripToRootW]
xor r8d, r8d
mov edx, 0xa5
xor ecx, ecx
call fcn.18001f9f0
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x180023ee3
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180023ede
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180023ede
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180069570
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x60], ILRemoveLastID
mov byte [rbp - 0x78], 0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x180023f31
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180023f2c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180023f2c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180069570
mov rcx, qword [rbp + 0x428]
xor rcx, rsp
call fcn.180069d20
lea r11, [rsp + 0x540]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret