Function at 0x1800029c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xa0
mov rsi, r9
mov r15, r8
mov rdi, rdx
test rdx, rdx
jne 0x180002a02
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rdi, rax
test rax, rax
je 0x180002e03
xor eax, eax
mov dword [rbp + 0x10], 0xe7ece086
xor ebx, ebx
mov dword [rbp + 0x14], 0xe0e5e886
mov r8d, ebx
mov dword [rbp + 0x18], 0xeef1e3dd
mov dword [rbp + 0x1c], 0x2f81a5f1
mov byte [rbp + 0x20], al
nop dword [rax + rax]
movzx edx, byte [rbp + r8 + 0x10]
lea ecx, [r8 + 0x34]
movzx eax, dl
and al, cl
add al, al
sub dl, al
sub dl, 0x6c
add dl, cl
mov byte [rbp + r8 + 0x10], dl
inc r8
cmp r8, 0x11
jb 0x180002a30
xor eax, eax
mov dword [rbp - 0x10], 0xb9c2cecb
xorps xmm0, xmm0
mov word [rbp + 0xd], ax
movups xmmword [rbp - 3], xmm0
mov byte [rbp + 0xf], al
mov r8, rbx
mov dword [rbp - 0xc], 0x999db5b1
mov dword [rbp - 8], 0x5f50499c
mov byte [rbp - 4], 0xe2
nop dword [rax]
nop word [rax + rax]
movzx edx, byte [rbp + r8 - 0x10]
lea ecx, [r8 - 0x43]
movzx eax, dl
and al, cl
sub cl, 0x2b
add al, al
sub dl, al
add dl, cl
lea ecx, [r8 - 0x42]
mov byte [rbp + r8 - 0x10], dl
movzx edx, byte [rbp + r8 - 0xf]
movzx eax, dl
and al, cl
add al, al
sub dl, al
sub dl, 0x2b
add dl, cl
mov byte [rbp + r8 - 0xf], dl
add r8, 2
cmp r8, 0x20
jb 0x180002a90
lea rcx, [rbp - 0x10]
call fcn.180009bb0
lea rdx, [rbp + 0x10]
mov rcx, rax
call fcn.1800096f0
movzx r9d, word [rbp + 0x7f]
mov rdx, rsi
mov r8, qword [rbp + 0x77]
mov rcx, rdi
call rax
mov rsi, rax
test rax, rax
je 0x180002e03
xor eax, eax
mov dword [rbp - 0x2d], 0x62c0413
mov qword [rbp - 0x1e], rax
mov r9, rbx
mov word [rbp - 0x16], ax
mov byte [rbp - 0x14], al
mov dword [rbp - 0x29], 0x3a28033b
mov dword [rbp - 0x25], 0xd0f060b
mov word [rbp - 0x21], 0x3c3f
mov byte [rbp - 0x1f], 0x9e
nop word [rax + rax]
movzx edx, byte [rbp + r9 - 0x2d]
lea r8d, [r9 + 0x1a]
movzx eax, dl
mov ecx, 0x25
and al, r8b
sub cl, al
add cl, cl
add cl, dl
movzx edx, byte [rbp + r9 - 0x2c]
add cl, r8b
movzx eax, dl
mov byte [rbp + r9 - 0x2d], cl
lea r8d, [r9 + 0x1b]
and al, r8b
mov ecx, 0x25
sub cl, al
add cl, cl
add cl, dl
add cl, r8b
mov byte [rbp + r9 - 0x2c], cl
add r9, 2
cmp r9, 0x1a
jb 0x180002b40
xor eax, eax
mov dword [rbp - 0x49], 0x21242823
mov qword [rbp - 0x3c], rax
mov r9, rbx
mov dword [rbp - 0x34], eax
mov word [rbp - 0x30], ax
mov dword [rbp - 0x45], 0x41413d35
mov dword [rbp - 0x41], 0x17161146
mov byte [rbp - 0x3d], 0x78
nop dword [rax]
movzx edx, byte [rbp + r9 - 0x49]
lea r8d, [r9 - 0x12]
movzx eax, dl
mov ecx, 0x3f
and al, r8b
sub cl, al
add cl, cl
add cl, dl
add cl, r8b
mov byte [rbp + r9 - 0x49], cl
inc r9
cmp r9, 0x1b
jb 0x180002bc0
lea rcx, [rbp - 0x49]
call fcn.180009bb0
lea rdx, [rbp - 0x2d]
mov rcx, rax
call fcn.1800096f0
mov rdx, rsi
mov rcx, rdi
call rax
mov r14d, eax
test eax, eax
je 0x180002e03
xorps xmm0, xmm0
mov dword [rbp - 0x2d], 0x477b4e6c
movups xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x29], 0x40454866
mov r8, rbx
mov dword [rbp - 0x25], 0x4e71435d
mov byte [rbp - 0x21], 0xcc
nop word [rax + rax]
movzx edx, byte [rbp + r8 - 0x2d]
lea ecx, [r8 - 0x1c]
movzx eax, dl
and al, cl
add al, al
sub dl, al
sub dl, 0x3c
add dl, cl
mov byte [rbp + r8 - 0x2d], dl
inc r8
cmp r8, 0x1d
jb 0x180002c40
xor eax, eax
mov dword [rbp - 0x49], 0x4d40744b
mov qword [rbp - 0x3c], rax
mov r9, rbx
mov dword [rbp - 0x34], eax
mov word [rbp - 0x30], ax
mov byte [rbp - 0x2e], al
mov dword [rbp - 0x45], 0x65654971
mov dword [rbp - 0x41], 0x37364d76
mov byte [rbp - 0x3d], 0xac
movzx edx, byte [rbp + r9 - 0x49]
lea r8d, [r9 + 0x68]
movzx eax, dl
mov ecx, 0x14
and al, r8b
sub cl, al
add cl, cl
add cl, dl
movzx edx, byte [rbp + r9 - 0x48]
add cl, r8b
movzx eax, dl
mov byte [rbp + r9 - 0x49], cl
lea r8d, [r9 + 0x69]
and al, r8b
mov ecx, 0x14
sub cl, al
add cl, cl
add cl, dl
add cl, r8b
mov byte [rbp + r9 - 0x48], cl
add r9, 2
cmp r9, 0x1c
jb 0x180002c92
lea rcx, [rbp - 0x49]
call fcn.180009bb0
lea rdx, [rbp - 0x2d]
mov rcx, rax
call fcn.1800096f0
mov rdx, rsi
mov rcx, rdi
call rax
mov rdi, rax
test rax, rax
je 0x180002e03
xor eax, eax
mov dword [rbp - 0x10], 0xf6c9f4d2
xorps xmm0, xmm0
mov word [rbp + 0xd], ax
movups xmmword [rbp - 3], xmm0
mov byte [rbp + 0xf], al
mov r8, rbx
mov dword [rbp - 0xc], 0xfefdcadc
mov dword [rbp - 8], 0xc0c1f3f5
mov byte [rbp - 4], 0x6a
nop word [rax + rax]
movzx edx, byte [rbp + r8 - 0x10]
lea ecx, [r8 - 0x6f]
movzx eax, dl
and al, cl
add cl, 9
add al, al
sub dl, al
add dl, cl
lea ecx, [r8 - 0x6e]
mov byte [rbp + r8 - 0x10], dl
movzx edx, byte [rbp + r8 - 0xf]
movzx eax, dl
and al, cl
add al, al
sub dl, al
add dl, 9
add dl, cl
mov byte [rbp + r8 - 0xf], dl
add r8, 2
cmp r8, 0x20
jb 0x180002d40
xorps xmm0, xmm0
mov dword [rbp + 0x10], 0x8d90848b
xor eax, eax
mov dword [rbp + 0x14], 0xb5b58981
movups xmmword [rbp + 0x1d], xmm0
mov word [rbp + 0x2d], ax
mov dword [rbp + 0x18], 0x67666da6
mov byte [rbp + 0x1c], 0xcc
nop word [rax + rax]
movzx edx, byte [rbp + rbx + 0x10]
lea r8d, [rbx + 0x60]
movzx eax, dl
mov ecx, 0x30
and al, r8b
sub cl, al
add cl, cl
add cl, dl
add cl, r8b
mov byte [rbp + rbx + 0x10], cl
inc rbx
cmp rbx, 0x1f
jb 0x180002db0
lea rcx, [rbp + 0x10]
call fcn.180009bb0
lea rdx, [rbp - 0x10]
mov rcx, rax
call fcn.1800096f0
mov rcx, rdi
call rax
test rax, rax
je 0x180002e03
test r15, r15
je 0x180002e05
mov dword [r15], r14d
jmp 0x180002e05
xor eax, eax
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret