Function at 0x180001210
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xd0
mov rax, qword [0x18000b008]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov r15, rdx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rbx, rax
test rax, rax
jne 0x180001354
mov byte [rbp - 0x59], 0xc6
mov byte [rbp - 0x58], 0xee
mov byte [rbp - 0x57], 0xec
mov byte [rbp - 0x56], 0xee
mov byte [rbp - 0x55], 0xe2
mov byte [rbp - 0x54], 0xe6
mov byte [rbp - 0x53], 0xae
mov byte [rbp - 0x52], 0xf8
mov byte [rbp - 0x51], 0xea
mov byte [rbp - 0x50], 0xa6
mov byte [rbp - 0x4f], 0xf8
mov byte [rbp - 0x4e], 0xf5
mov byte [rbp - 0x4d], 0xea
mov byte [rbp - 0x4c], 0xb7
mov byte [rbp - 0x4b], 0xfa
mov byte [rbp - 0x4a], 0xfb
mov byte [rbp - 0x49], 0xf4
mov byte [rbp - 0x48], 0xea
mov byte [rbp - 0x47], 0xf9
mov byte [rbp - 0x46], 0xf7
mov byte [rbp - 0x45], 0xb7
mov byte [rbp - 0x44], 0xfa
mov byte [rbp - 0x43], 0xff
mov byte [rbp - 0x42], 0xf2
mov byte [rbp - 0x41], 0xf1
mov byte [rbp - 0x40], 0xfa
mov byte [rbp - 0x3f], 0xca
mov byte [rbp - 0x3e], 0x8e
mov byte [rbp - 0x3d], 0xae
movzx eax, byte [rbp - 0x59]
xor esi, esi
movabs rbx, 0x134c1f9b129dbd86
mov r10, rbx
lea rax, [rbp - 0x59]
sub r10, rax
lea r11d, [rsi + 0xf]
nop dword [rax]
lea r8, [rbp - 0x59]
add r8, rsi
movzx r9d, byte [r8]
mov rax, rsi
and eax, r11d
cmp rax, r11
cmovae rax, r11
shl al, 2
mov rdx, rbx
movzx ecx, al
shr rdx, cl
and dl, r11b
lea eax, [r8 + r10]
xor dl, al
xor dl, r9b
mov byte [rbp + rsi - 0x59], dl
inc rsi
cmp rsi, 0x1d
jb 0x1800012f0
lea rdx, [rbp - 0x59]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.180007430
mov rcx, rax
lea rdx, [0x180007600]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor eax, eax
jmp 0x1800016a5
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov r9d, 0x18
lea r8, [rbp - 0x21]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
mov r14, qword [rbp - 0x21]
mov qword [rbp - 0x31], r14
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xor esi, esi
mov r10d, esi
mov qword [rbp - 9], rsi
mov edi, esi
mov qword [rbp - 1], rsi
mov r12d, esi
mov qword [rbp + 7], rsi
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [r15 + rax], 0
jne 0x1800013a0
mov ebx, 0xf
test rax, rax
je 0x18000151f
lea r14, [r15 + 1]
mov rdx, r15
not rdx
mov qword [rbp - 0x39], rdx
movzx eax, byte [r14 - 1]
cmp al, 0x3f
jne 0x180001409
cmp byte [r14], al
jne 0x180001409
mov byte [rbp - 0x79], 0
cmp rdi, r12
je 0x1800013ec
mov byte [rdi], 0
inc rdi
mov qword [rbp - 1], rdi
jmp 0x1800014f2
lea r8, [rbp - 0x79]
mov rdx, rdi
lea rcx, [rbp - 9]
call fcn.1800076b0
mov r12, qword [rbp + 7]
mov rdi, qword [rbp - 1]
jmp 0x1800014ee
mov byte [rbp - 0x75], al
movzx eax, byte [r14]
mov byte [rbp - 0x74], al
xorps xmm0, xmm0
movups xmmword [rbp + 0xf], xmm0
mov qword [rbp + 0x27], rbx
mov byte [rbp + 0xf], 0
mov qword [rbp + 0x1f], 2
movzx eax, word [rbp - 0x75]
mov word [rbp + 0xf], ax
mov byte [rbp + 0x11], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov r13, rax
lea rbx, [rbp + 0xf]
cmp qword [rbp + 0x27], 0x10
cmovae rbx, qword [rbp + 0xf]
mov dword [rax], esi
mov r8d, 0x10
lea rdx, [rbp - 0x29]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
cmp rbx, qword [rbp - 0x29]
je 0x180001579
cmp dword [r13], 0x22
je 0x18000156b
mov byte [rbp - 0x78], al
cmp rdi, r12
je 0x18000148a
mov byte [rdi], al
inc rdi
mov qword [rbp - 1], rdi
jmp 0x1800014a2
lea r8, [rbp - 0x78]
mov rdx, rdi
lea rcx, [rbp - 9]
call fcn.1800076b0
mov r12, qword [rbp + 7]
mov rdi, qword [rbp - 1]
mov rdx, qword [rbp + 0x27]
cmp rdx, 0x10
jb 0x1800014dd
inc rdx
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800014d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180001564
call fcn.180007870
mov qword [rbp + 0x1f], rsi
mov ebx, 0xf
mov qword [rbp + 0x27], rbx
mov byte [rbp + 0xf], 0
mov rdx, qword [rbp - 0x39]
add r14, 3
mov rcx, 0xffffffffffffffff
nop dword [rax]
inc rcx
cmp byte [r15 + rcx], 0
jne 0x180001500
lea rax, [rdx + r14]
cmp rax, rcx
jb 0x1800013c6
mov r10, qword [rbp - 9]
mov r14, qword [rbp - 0x31]
sub rdi, r10
mov r11d, dword [rbp - 0x19]
sub r11, rdi
je 0x180001595
mov rdx, r14
mov r8, r10
sub r8, r14
mov r9, rsi
test rdi, rdi
je 0x18000155b
mov rax, rdx
nop
movzx ecx, byte [r8 + rax]
test cl, cl
je 0x18000154d
cmp cl, byte [rax]
jne 0x180001587
inc rax
mov rcx, rax
sub rcx, rdx
cmp rcx, rdi
jb 0x180001540
lea rsi, [r9 + r14]
jmp 0x180001667
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rcx, str.stoi_argument_out_of_range
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const____ptr64_]
int3
lea rcx, str.invalid_stoi_argument
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xinvalid_argument_char_const____ptr64_]
nop
inc r9
dec r8
inc rdx
cmp r9, r11
jb 0x18000153c
mov byte [rbp - 0x71], 0x40
mov byte [rbp - 0x70], 0x77
mov byte [rbp - 0x6f], 0x61
mov byte [rbp - 0x6e], 0x6f
mov byte [rbp - 0x6d], 0x73
mov byte [rbp - 0x6c], 0x6d
mov byte [rbp - 0x6b], 0x79
mov byte [rbp - 0x6a], 0x36
mov byte [rbp - 0x69], 0x71
mov byte [rbp - 0x68], 0x72
mov byte [rbp - 0x67], 0x57
mov byte [rbp - 0x66], 0xa
mov byte [rbp - 0x65], 0x4e
mov byte [rbp - 0x64], 0x45
mov byte [rbp - 0x63], 0x57
mov byte [rbp - 0x62], 0x49
mov byte [rbp - 0x61], 0x44
mov byte [rbp - 0x60], 8
mov byte [rbp - 0x5f], 0x25
movzx eax, byte [rbp - 0x71]
mov r10, rsi
movabs rdi, 0x269ab321bb4c2d16
mov r11, rdi
lea rax, [rbp - 0x71]
sub r11, rax
nop dword [rax]
lea r8, [rbp - 0x71]
add r8, r10
movzx r9d, byte [r8]
mov rax, r10
and eax, 0xf
cmp rax, 0xf
cmovae rax, rbx
shl al, 2
mov rdx, rdi
movzx ecx, al
shr rdx, cl
and dl, 0xf
add r8b, r11b
xor dl, r8b
xor dl, r9b
mov byte [rbp + r10 - 0x71], dl
inc r10
cmp r10, 0x13
jb 0x180001600
lea rdx, [rbp - 0x71]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.180007430
mov rcx, rax
lea rdx, [0x180007600]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r12, qword [rbp + 7]
mov r10, qword [rbp - 9]
test r10, r10
je 0x1800016a2
sub r12, r10
mov rax, r10
cmp r12, 0x1000
jb 0x180001697
add r12, 0x27
mov r10, qword [r10 - 8]
sub rax, r10
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180001697
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, r12
mov rcx, r10
call fcn.180007870
mov rax, rsi
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.180007850
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret