Function at 0x18008fca0
Capabilities:
Contain obfuscated stackstrings
Terminate process

Disassembly:
mov rax, rsp
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0x90
cmp byte [0x180147070], 0
je 0x1800901d6
movdqa xmm0, xmmword [0x180133740]
xor ecx, ecx
movdqa xmm1, xmmword [0x180133c90]
mov r9b, 0xe5
mov qword [rax + 0x18], rsi
mov r8b, 0x5d
mov qword [rax + 0x20], rdi
mov esi, 0x2a
mov eax, esi
xor edi, edi
mov dword [rbp - 9], eax
mov edx, edi
movdqu xmmword [rbp - 5], xmm0
mov dword [rbp + 0x1b], 0x1a136255
movdqu xmmword [rbp + 0xb], xmm1
mov dword [rbp + 0x1f], 0x990e2019
mov dword [rbp + 0x23], 0x5d42d8ae
mov byte [rbp + 0x27], r9b
mov word [rbp + 0x28], cx
mov byte [rbp + 0x2a], cl
nop dword [rax]
nop dword [rax + rax]
mov ecx, edx
inc edx
movzx eax, byte [rbp + rcx - 5]
sub al, r9b
xor al, r8b
mov byte [rbp + rcx - 5], al
mov eax, dword [rbp - 9]
cmp edx, eax
jae 0x18008fd46
movzx r9d, byte [rbp + 0x27]
movzx r8d, byte [rbp + 0x26]
jmp 0x18008fd20
xor r8d, r8d
mov byte [rbp + rax - 5], dil
xor edx, edx
lea rcx, [rbp - 5]
call fcn.18009d0c0
test al, al
je 0x1800901c1
mov r10, qword [0x180148a28]
lea rdx, [rbp + 0x67]
mov qword [rsp + 0xa8], rbx
mov r8d, 2
movaps xmmword [rsp + 0x80], xmm6
movaps xmmword [rsp + 0x70], xmm7
mov rcx, qword [r10 + 0x3ea0]
mov dword [rbp + 0x67], 0x42c80000
mov dword [rbp + 0x6b], 0x42c80000
call fcn.18009fb40
mov rcx, qword [r10 + 0x3ea0]
lea rdx, [rbp + 0x67]
mov dword [rbp + 0x67], 0x442f0000
mov dword [rbp + 0x6b], 0x43fa0000
call fcn.18009fcb0
mov rax, qword [0x180148cd8]
mov rbx, rdi
mov rcx, qword [0x180148cd0]
sub rax, rcx
sar rax, 3
test rax, rax
je 0x18008fe00
nop dword [rax]
call qword [rcx + rbx*8]
mov rax, qword [0x180148cd8]
inc rbx
mov rcx, qword [0x180148cd0]
sub rax, rcx
sar rax, 3
cmp rbx, rax
jb 0x18008fde0
movdqa xmm0, xmmword [0x180133c00]
xor eax, eax
mov rbx, qword [rsp + 0xa8]
mov r9b, 0xe5
movdqu xmmword [rbp - 5], xmm0
mov byte [rbp + 0x27], r9b
mov r8b, 0x5d
movdqa xmm1, xmm0
mov word [rbp + 0x28], ax
movdqu xmmword [rbp + 0xb], xmm0
mov byte [rbp + 0x2a], al
mov edx, edi
mov dword [rbp - 9], esi
mov dword [rbp + 0x1b], 0x55555555
mov dword [rbp + 0x1f], 0x55555555
mov dword [rbp + 0x23], 0x5d425555
nop dword [rax + rax]
mov ecx, edx
inc edx
movzx eax, byte [rbp + rcx - 5]
sub al, r9b
xor al, r8b
mov byte [rbp + rcx - 5], al
mov esi, dword [rbp - 9]
cmp edx, esi
jae 0x18008fe76
movzx r9d, byte [rbp + 0x27]
movzx r8d, byte [rbp + 0x26]
jmp 0x18008fe50
movss xmm7, dword [0x18013309c]
lea rdx, [rbp - 5]
movss dword [rbp - 0x19], xmm7
lea rcx, [rbp - 0x19]
movss dword [rbp - 0x15], xmm7
xorps xmm6, xmm6
movss dword [rbp - 0x11], xmm6
movss dword [rbp - 0xd], xmm7
movups xmm0, xmmword [rbp - 0x19]
mov byte [rbp + rsi - 5], dil
movups xmmword [rbp - 0x19], xmm0
call fcn.1800bcc90
movdqa xmm0, xmmword [0x180133f80]
mov r8b, 0x5d
movdqa xmm1, xmmword [0x180134230]
mov r9b, 0xe5
movdqu xmmword [rbp - 5], xmm0
mov dword [rbp - 9], 0x2d
mov edx, edi
movdqu xmmword [rbp + 0xb], xmm1
mov dword [rbp + 0x1b], 0xb6e19adc
mov dword [rbp + 0x1f], 0x9abbcda0
mov dword [rbp + 0x23], 0xc697add7
mov dword [rbp + 0x27], 0xe55d42c1
nop dword [rax]
nop dword [rax + rax]
mov ecx, edx
inc edx
movzx eax, byte [rbp + rcx - 5]
sub al, r9b
xor al, r8b
mov byte [rbp + rcx - 5], al
mov eax, dword [rbp - 9]
cmp edx, eax
jae 0x18008ff26
movzx r9d, byte [rbp + 0x2a]
movzx r8d, byte [rbp + 0x29]
jmp 0x18008ff00
movaps xmm0, xmm6
mov byte [rbp + rax - 5], dil
shufps xmm0, xmm0, 0xe1
lea rdx, [rbp - 5]
movss xmm0, xmm7
lea rcx, [rbp - 0x19]
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm7
shufps xmm0, xmm0, 0x27
movss xmm0, xmm7
shufps xmm0, xmm0, 0x39
movups xmmword [rbp - 0x19], xmm0
movups xmmword [rbp - 0x19], xmm0
call fcn.1800bcc90
mov eax, dword [0x180148960]
cmp eax, 1
jne 0x18008ffcd
movdqa xmm0, xmmword [0x180134450]
mov r8b, 0x5d
mov eax, 0x13
mov r9b, 0xe5
mov dword [rbp - 9], eax
mov edx, edi
mov dword [rbp + 0xb], 0x42cfd29a
mov dword [rbp + 0xf], 0xe55d
movdqu xmmword [rbp - 5], xmm0
test eax, eax
je 0x18008ffc6
nop dword [rax]
mov ecx, edx
inc edx
movzx eax, byte [rbp + rcx - 5]
sub al, r9b
xor al, r8b
mov byte [rbp + rcx - 5], al
mov eax, dword [rbp - 9]
cmp edx, eax
jae 0x18008ffc6
movzx r9d, byte [rbp + 0x10]
movzx r8d, byte [rbp + 0xf]
jmp 0x18008ffa0
mov byte [rbp + rax - 5], dil
jmp 0x18009004b
cmp eax, 2
jne 0x18009007f
movdqa xmm0, xmmword [0x180134440]
xor ecx, ecx
mov eax, 0x16
mov r9b, 0xe5
mov dword [rbp - 9], eax
mov r8b, 0x5d
mov dword [rbp + 0xb], 0xa0d1c99e
mov edx, edi
mov dword [rbp + 0xf], 0x5d42afb0
mov byte [rbp + 0x13], r9b
mov word [rbp + 0x14], cx
mov byte [rbp + 0x16], cl
movdqu xmmword [rbp - 5], xmm0
test eax, eax
je 0x180090046
nop dword [rax]
nop word [rax + rax]
mov ecx, edx
inc edx
movzx eax, byte [rbp + rcx - 5]
sub al, r9b
xor al, r8b
mov byte [rbp + rcx - 5], al
mov eax, dword [rbp - 9]
cmp edx, eax
jae 0x180090046
movzx r9d, byte [rbp + 0x13]
movzx r8d, byte [rbp + 0x12]
jmp 0x180090020
mov byte [rbp + rax - 5], dil
movaps xmm0, xmm6
lea rdx, [rbp - 5]
shufps xmm0, xmm0, 0xe1
lea rcx, [rbp - 0x19]
movss xmm0, xmm7
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm7
shufps xmm0, xmm0, 0x27
movss xmm0, xmm7
shufps xmm0, xmm0, 0x39
movups xmmword [rbp - 0x19], xmm0
movups xmmword [rbp - 0x19], xmm0
call fcn.1800bcc90
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rcx, [rax + 0x1a3f1f0]
call fcn.18008f530
comiss xmm0, dword [0x1801331e0]
jbe 0x18009012c
movdqa xmm0, xmmword [0x180133be0]
mov r8b, 0x5d
movdqu xmmword [rbp - 5], xmm0
mov dword [rbp - 9], 0x11
mov r9b, 0xe5
mov dword [rbp + 0xb], 0xe55d424d
mov edx, edi
nop dword [rax]
nop word [rax + rax]
mov ecx, edx
inc edx
movzx eax, byte [rbp + rcx - 5]
sub al, r9b
xor al, r8b
mov byte [rbp + rcx - 5], al
mov eax, dword [rbp - 9]
cmp edx, eax
jae 0x1800900f6
movzx r9d, byte [rbp + 0xe]
movzx r8d, byte [rbp + 0xd]
jmp 0x1800900d0
shufps xmm6, xmm6, 0xe1
lea rdx, [rbp - 5]
movss xmm6, xmm7
mov byte [rbp + rax - 5], dil
shufps xmm6, xmm6, 0xc6
lea rcx, [rbp - 0x19]
movss xmm6, xmm7
shufps xmm6, xmm6, 0x27
movss xmm6, xmm7
shufps xmm6, xmm6, 0x39
movups xmmword [rbp - 0x19], xmm6
movups xmmword [rbp - 0x19], xmm6
call fcn.1800bcc90
movdqa xmm0, xmmword [0x180133ff0]
xor ecx, ecx
movaps xmm7, xmmword [rsp + 0x70]
mov r8b, 0xe5
movaps xmm6, xmmword [rsp + 0x80]
mov dl, 0x5d
mov eax, 0x12
mov dword [rbp - 9], eax
mov dword [rbp + 0xb], 0x5d42b7ba
mov byte [rbp + 0xf], r8b
mov word [rbp + 0x10], cx
mov byte [rbp + 0x12], cl
movdqu xmmword [rbp - 5], xmm0
test eax, eax
je 0x180090194
nop dword [rax + rax]
mov ecx, edi
inc edi
movzx eax, byte [rbp + rcx - 5]
sub al, r8b
xor al, dl
mov byte [rbp + rcx - 5], al
mov eax, dword [rbp - 9]
cmp edi, eax
jae 0x180090194
movzx r8d, byte [rbp + 0xf]
movzx edx, byte [rbp + 0xe]
jmp 0x180090170
lea rdx, [rbp + 0x67]
mov byte [rbp + rax - 5], 0
lea rcx, [rbp - 5]
mov dword [rbp + 0x67], 0x42c80000
mov dword [rbp + 0x6b], 0x41f00000
call fcn.1800bd3e0
test al, al
je 0x1800901c1
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.18009f4f0
mov rsi, qword [rsp + 0xb0]
mov rdi, qword [rsp + 0xb8]
add rsp, 0x90
pop rbp
ret