Function at 0x180001080
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push r12
lea rbp, [rsp - 0x170]
sub rsp, 0x270
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x150], rax
mov dword [rsp + 0x50], 0x55e725f2
mov dword [rsp + 0x54], 0x701d1174
mov dword [rsp + 0x58], 0x1bf61a0
mov dword [rsp + 0x5c], 0xfbab1971
mov dword [rsp + 0x60], 0x85f41dcf
mov dword [rsp + 0x64], 0xc8606d2c
mov dword [rsp + 0x68], 0x6d8339e2
mov dword [rsp + 0x6c], 0x1ed4733c
mov dword [rsp + 0x70], 0xe920e3e1
mov dword [rsp + 0x74], 0xd70eb900
mov dword [rsp + 0x78], 0xb4e5d31a
mov dword [rsp + 0x7c], 0x737fc67b
mov dword [rbp - 0x80], 0xc33ddc72
mov dword [rbp - 0x7c], 0xf088f4e4
mov dword [rbp - 0x78], 0xef7f1a3a
mov dword [rbp - 0x74], 0x16a4c978
mov dword [rbp - 0x70], 0x30949cef
mov dword [rbp - 0x6c], 0xda1e70d2
mov dword [rbp - 0x68], 0xede526ea
mov dword [rbp - 0x64], 0xafb03ad7
mov dword [rbp - 0x60], 0xdcd682f7
mov dword [rbp - 0x5c], 0x895cef4f
mov dword [rbp - 0x58], 0xbbbe0df4
mov dword [rbp - 0x54], 0x93774786
mov dword [rbp - 0x50], 0xb88d054b
mov dword [rbp - 0x4c], 0xf825ad26
mov dword [rbp - 0x48], 0x19715dbf
mov dword [rbp - 0x44], 0xac16a9c3
mov dword [rbp - 0x40], 0xcd95770a
mov dword [rbp - 0x3c], 0x42114b88
mov dword [rbp - 0x38], 0x28ce494d
mov dword [rbp - 0x34], 0xd5d14d71
mov dword [rbp - 0x30], 0xb3c3627d
mov dword [rbp - 0x2c], 0xe4223713
mov dword [rbp - 0x28], 0x6cf10c3d
mov dword [rbp - 0x24], 0x5191cab1
mov dword [rbp - 0x20], 0x8b2d78fe
mov dword [rbp - 0x1c], 0xe75a950e
mov dword [rbp - 0x18], 0x86e4a07c
mov dword [rbp - 0x14], 0xbec691c3
mov dword [rbp - 0x10], 0x9cdca6cc
mov dword [rbp - 0xc], 0xc2881219
mov dword [rbp - 8], 0x7de339ff
mov dword [rbp - 4], 0x665ea141
mov dword [rbp], 0x788ebdd4
mov dword [rbp + 4], 0xed24b3be
mov dword [rbp + 8], 0x3131a78b
mov dword [rbp + 0xc], 0x64da8ff3
mov dword [rbp + 0x10], 0xeb012ec6
mov dword [rbp + 0x14], 0xe312f311
mov dword [rbp + 0x18], 0xe9466a32
mov dword [rbp + 0x1c], 0x154ce45d
mov dword [rbp + 0x20], 0xe236b8f9
mov dword [rbp + 0x24], 0x440a914d
mov dword [rbp + 0x28], 0x7e40fb93
mov dword [rbp + 0x2c], 0xfc54276b
mov dword [rbp + 0x30], 0xa1b52f1c
mov dword [rbp + 0x34], 0x901029fc
mov dword [rbp + 0x38], 0x94c909d0
mov dword [rbp + 0x3c], 0x90436db8
mov dword [rbp + 0x40], 0x1c8a93b5
mov dword [rbp + 0x44], 0x10064d7b
mov dword [rbp + 0x48], 0xec6c27b9
mov dword [rbp + 0x4c], 0x501f33a3
mov dword [rbp + 0x50], 0x2d9f8b47
mov dword [rbp + 0x54], 0xee621600
mov dword [rbp + 0x58], 0x925a9438
mov dword [rbp + 0x5c], 0x318ac2f3
mov dword [rbp + 0x60], 0x61b3f61b
mov dword [rbp + 0x64], 0xa8d489af
mov dword [rbp + 0x68], 0x9a29b05a
mov dword [rbp + 0x6c], 0x9d34f8b3
mov dword [rbp + 0x70], 0x5cbd458a
mov dword [rbp + 0x74], 0x21951d65
mov dword [rbp + 0x78], 0x17abc24
mov dword [rbp + 0x7c], 0x5dc6296e
mov dword [rbp + 0x80], 0xe967dd15
mov dword [rbp + 0x84], 0xf6242572
mov dword [rbp + 0x88], 0xfdfca9b0
mov dword [rbp + 0x8c], 0x6b8846a8
mov dword [rbp + 0x90], 0xdc7bc70f
mov edx, 0x1ff
mov dword [rbp + 0x94], 0x62b35543
xor ecx, ecx
mov dword [rbp + 0x98], 0x2f1bf437
mov r9d, 4
mov dword [rbp + 0x9c], 0x8a80373e
mov r8d, 0x3000
mov dword [rbp + 0xa0], 0xa1e1e075
mov dword [rbp + 0xa4], 0xd3f8bf58
mov dword [rbp + 0xa8], 0xd959a068
mov dword [rbp + 0xac], 0x93ef0a6c
mov dword [rbp + 0xb0], 0x21711568
mov dword [rbp + 0xb4], 0xf79432a5
mov dword [rbp + 0xb8], 0xd7f84a4a
mov dword [rbp + 0xbc], 0x73bf5af1
mov dword [rbp + 0xc0], 0xb274cca9
mov dword [rbp + 0xc4], 0xb4020730
mov dword [rbp + 0xc8], 0xedf277c5
mov dword [rbp + 0xcc], 0x415ca1c1
mov dword [rbp + 0xd0], 0xc95d99fd
mov dword [rbp + 0xd4], 0x1356433
mov dword [rbp + 0xd8], 0xb29fcfa1
mov dword [rbp + 0xdc], 0xca7e1ab5
mov dword [rbp + 0xe0], 0x6d7db99b
mov dword [rbp + 0xe4], 0xf29de4e0
mov dword [rbp + 0xe8], 0xdfdb00ef
mov dword [rbp + 0xec], 0x226cf40a
mov dword [rbp + 0xf0], 0xa6f4839e
mov dword [rbp + 0xf4], 0xc9218989
mov dword [rbp + 0xf8], 0x91bea2f1
mov dword [rbp + 0xfc], 0x56b7b75d
mov dword [rbp + 0x100], 0xf324e8d3
mov dword [rbp + 0x104], 0x4a010b40
mov dword [rbp + 0x108], 0x88beebe
mov dword [rbp + 0x10c], 0x5ff81d7f
mov dword [rbp + 0x110], 0xc5f39188
mov dword [rbp + 0x114], 0x83951e16
mov dword [rbp + 0x118], 0xfa79f923
mov dword [rbp + 0x11c], 0xb7b6d02f
mov dword [rbp + 0x120], 0x43295f4d
mov dword [rbp + 0x124], 0x50d57127
mov dword [rbp + 0x128], 0x6993a59
mov dword [rbp + 0x12c], 0x4ffacff6
mov dword [rbp + 0x130], 0xe477249f
mov dword [rbp + 0x134], 0xa22a43b4
mov dword [rbp + 0x138], 0x9d52ebe5
mov dword [rbp + 0x13c], 0x3a3b6b35
mov dword [rbp + 0x140], 0xf4f7f76e
mov dword [rbp + 0x144], 0x5195a2df
mov dword [rbp + 0x148], 0x4a28172e
mov word [rbp + 0x14c], 0xe01c
mov byte [rbp + 0x14e], 9
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r12, rax
test rax, rax
jne 0x18000152f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.VirtualAlloc_failed:
mov ebx, eax
call fcn.180001870
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x180001a50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x1800017a1
mov rcx, r12
lea r8, [rsp + 0x50]
mov eax, 3
nop dword [rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [r8]
movups xmm1, xmmword [r8 + 0x10]
lea r8, [r8 + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [r8 - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [r8 - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [r8 - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [r8 - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [r8 - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [r8 - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rax, 1
jne 0x180001540
movups xmm0, xmmword [r8]
mov rax, qword [r8 + 0x70]
lea r9, [rsp + 0x44]
movups xmm1, xmmword [r8 + 0x10]
mov edx, 0x1ff
movups xmmword [rcx], xmm0
movups xmm0, xmmword [r8 + 0x20]
movups xmmword [rcx + 0x10], xmm1
movups xmm1, xmmword [r8 + 0x30]
movups xmmword [rcx + 0x20], xmm0
movups xmm0, xmmword [r8 + 0x40]
movups xmmword [rcx + 0x30], xmm1
movups xmm1, xmmword [r8 + 0x50]
movups xmmword [rcx + 0x40], xmm0
movups xmm0, xmmword [r8 + 0x60]
movups xmmword [rcx + 0x50], xmm1
movups xmmword [rcx + 0x60], xmm0
mov qword [rcx + 0x70], rax
mov eax, dword [r8 + 0x78]
mov dword [rcx + 0x78], eax
movzx eax, word [r8 + 0x7c]
mov word [rcx + 0x7c], ax
movzx eax, byte [r8 + 0x7e]
mov r8d, 0x20
mov byte [rcx + 0x7e], al
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x180001661
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.VirtualProtect_failed:
mov ebx, eax
call fcn.180001870
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x180001a50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor edx, edx
mov r8d, 0x8000
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_VirtualFree]
jmp 0x1800017a1
mov qword [rsp + 0x290], rsi
lea rcx, str.kernel32
mov qword [rsp + 0x298], rdi
mov qword [rsp + 0x2a0], r13
mov qword [rsp + 0x268], r14
mov qword [rsp + 0x260], r15
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r14, rax
xor edi, edi
movsxd rcx, dword [rax + 0x3c]
mov esi, dword [rcx + rax + 0x88]
add rsi, rax
mov eax, dword [rsi + 0x1c]
mov r13d, dword [rsi + 0x20]
add rax, r14
mov qword [rsp + 0x30], rax
add r13, r14
mov eax, dword [rsi + 0x24]
add rax, r14
mov qword [rsp + 0x38], rax
cmp dword [rsi + 0x14], edi
jbe 0x180001733
nop dword [rax + rax]
mov ebx, dword [r13 + rdi*4]
add rbx, r14
je 0x18000172c
mov edx, 0x32
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strnlen]
xor r8d, r8d
mov r9d, 0x35
test rax, rax
je 0x18000172c
nop word [rax + rax]
movsx edx, byte [r8 + rbx]
inc r8
imul ecx, r9d, 0x10f29f
add edx, ecx
and edx, 0xffffff
add r9d, edx
cmp r8, rax
jb 0x180001700
cmp r9d, 0x544e304
je 0x1800017bc
inc edi
cmp edi, dword [rsi + 0x14]
jb 0x1800016d0
mov rdi, qword [rsp + 0x30]
xor ecx, ecx
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea r8, [0x180001070]
mov r9, r12
mov dword [rsp + 0x20], ecx
xor edx, edx
mov dword [rsp + 0x40], ecx
call rdi
mov edx, 0xffffffff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
xor edx, edx
mov r8d, 0x8000
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov r15, qword [rsp + 0x260]
mov r14, qword [rsp + 0x268]
mov r13, qword [rsp + 0x2a0]
mov rdi, qword [rsp + 0x298]
mov rsi, qword [rsp + 0x290]
mov rcx, qword [rbp + 0x150]
xor rcx, rsp
call fcn.180001aa0
add rsp, 0x270
pop r12
pop rbx
pop rbp
ret
mov rcx, qword [rsp + 0x30]
mov r8d, 0x544e304
mov rax, qword [rsp + 0x38]
mov rdx, rbx
movzx eax, word [rax + rdi*2]
mov edi, dword [rcx + rax*4]
lea rcx, str._s_:_0x_x_:__p_n
add rdi, r14
mov r9, rdi
call fcn.180001010
jmp 0x180001738