Function at 0x180032160
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov qword [rax + 8], rcx
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
xor eax, eax
mov dword [rbp - 0x40], 0x4241486b
xor esi, esi
mov dword [rbp - 0x3c], 0x5a465f75
mov rdi, rdx
mov word [rbp - 0x38], 0x4c40
mov rbx, r8
mov byte [rbp - 0x36], al
lea r14d, [rax + 1]
mov edx, esi
mov r15b, 0x2c
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r14d
xor byte [rbp + rcx - 0x40], al
cmp edx, 0xa
jb 0x1800321a9
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x36], sil
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x180032330
movdqa xmm0, xmmword [0x1800068b0]
xor eax, eax
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0xe], al
mov edx, esi
mov word [rbp - 0x10], 0x5959
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r14d
xor byte [rbp + rcx - 0x20], al
cmp edx, 0x12
jb 0x1800321f0
lea rdx, [rbp - 0x20]
mov byte [rbp - 0xe], sil
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x1800327b4
mov dword [rbp - 0x40], 0x444d445c
mov edx, esi
mov dword [rbp - 0x3c], 0x506d4145
mov dword [rbp - 0x38], 0x534655
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r14d
xor byte [rbp + rcx - 0x40], al
cmp edx, 0xb
jb 0x180032234
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x35], sil
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x1800327b4
mov dword [rbp - 0x40], 0x5b414260
mov edx, esi
mov dword [rbp - 0x3c], 0x6c4a5e52
mov dword [rbp - 0x38], 0x44595977
mov word [rbp - 0x34], 0x5d5d
mov byte [rbp - 0x32], al
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r14d
xor byte [rbp + rcx - 0x40], al
cmp edx, 0xe
jb 0x180032281
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x32], sil
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x1800327b4
mov dword [rbp + 0x20], 0x5b5e4c60
mov edx, esi
mov word [rbp + 0x24], 0x415f
mov byte [rbp + 0x26], al
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r14d
xor byte [rbp + rcx + 0x20], al
cmp edx, 6
jb 0x1800322c0
lea rdx, [rbp + 0x20]
mov byte [rbp + 0x26], sil
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x1800327b4
movdqa xmm0, xmmword [0x1800069d0]
mov edx, esi
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x10], 0x5a5848
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r14d
xor byte [rbp + rcx - 0x20], al
cmp edx, 0x13
jb 0x180032303
lea rdx, [rbp - 0x20]
mov byte [rbp - 0xd], sil
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x1800327b4
mov dword [rbp - 0x40], 0x465d4c6e
mov edx, esi
mov dword [rbp - 0x3c], 0x475c7453
mov dword [rbp - 0x38], 0x4f415d
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r14d
xor byte [rbp + rcx - 0x40], al
cmp edx, 0xb
jb 0x180032347
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x35], sil
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x1800323b7
movdqa xmm0, xmmword [0x180006900]
xor eax, eax
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0xe], al
mov edx, esi
mov word [rbp - 0x10], 0x584a
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r14d
xor byte [rbp + rcx - 0x20], al
cmp edx, 0x12
jb 0x18003238a
lea rdx, [rbp - 0x20]
mov byte [rbp - 0xe], sil
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x1800327b4
movdqa xmm0, xmmword [0x180006410]
mov edx, esi
movdqu xmmword [rbp - 0x40], xmm0
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r14d
xor byte [rbp + rcx - 0x40], al
cmp edx, 0xf
jb 0x1800323c6
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x31], sil
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x180032425
mov dword [rbp + 0x20], 0x425f4d
mov edx, esi
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r14d
xor byte [rbp + rcx + 0x20], al
cmp edx, 3
jb 0x1800323f8
lea rdx, [rbp + 0x20]
mov byte [rbp + 0x23], sil
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x1800327b4
mov dword [rbp - 0x40], 0x435e5549
mov edx, esi
mov dword [rbp - 0x3c], 0x455b425f
mov word [rbp - 0x38], 0x51
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r14d
xor byte [rbp + rcx - 0x40], al
cmp edx, 9
jb 0x18003243b
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x37], sil
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x18003248e
xor eax, eax
mov dword [rbp + 0x20], 0x4043404d
lea rcx, [rbp + 0x20]
mov byte [rbp + 0x24], al
call fcn.180038c4c
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x1800327b4
xor eax, eax
mov dword [rbp - 0x40], 0x4241486b
mov byte [rbp - 0x36], al
mov edx, esi
mov dword [rbp - 0x3c], 0x5a465f75
mov word [rbp - 0x38], 0x4c40
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r14d
xor byte [rbp + rcx - 0x40], al
cmp edx, 0xa
jb 0x1800324a9
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x36], sil
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x18003255b
movdqa xmm0, xmmword [0x180006490]
lea rcx, [rbp - 0x40]
xor eax, eax
movdqa xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x34], al
mov dword [rbp - 0x40], 0x4d43426e
mov dword [rbp - 0x3c], 0x5e5d5477
mov dword [rbp - 0x38], 0x4e444151
movd xmm0, dword [rbp - 0x20]
movd xmm1, eax
add eax, 4
pshufd xmm1, xmm1, 0
paddd xmm1, xmmword [0x1800063d0]
andps xmm1, xmmword [0x1800063e0]
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
lea rcx, [rcx + 4]
cmp eax, 0xc
jb 0x180032501
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x34], sil
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x1800327b4
movdqa xmm0, xmmword [0x180006410]
mov edx, esi
movdqu xmmword [rbp - 0x40], xmm0
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r14d
xor byte [rbp + rcx - 0x40], al
cmp edx, 0xf
jb 0x18003256a
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x31], sil
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x1800327b4
mov dword [rbp - 0x40], 0x4342584e
mov edx, esi
mov dword [rbp - 0x3c], 0x476d4555
mov dword [rbp - 0x38], 0x70543
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r14d
xor byte [rbp + rcx - 0x40], al
cmp edx, 0xb
jb 0x1800325ae
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x35], sil
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x180032601
xor eax, eax
mov dword [rbp + 0x20], 0x4043404d
lea rcx, [rbp + 0x20]
mov byte [rbp + 0x24], al
call fcn.180038c4c
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x1800327b4
mov dword [rbp - 0x40], 0x4342584e
mov edx, esi
mov dword [rbp - 0x3c], 0x406d4555
mov dword [rbp - 0x38], 0x5c555c40
mov word [rbp - 0x34], 0x41
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r14d
xor byte [rbp + rcx - 0x40], al
cmp edx, 0xd
jb 0x18003261e
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x33], sil
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x180032671
xor eax, eax
mov dword [rbp + 0x20], 0x4043404d
lea rcx, [rbp + 0x20]
mov byte [rbp + 0x24], al
call fcn.180038c4c
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x1800327b4
mov edx, dword [0x180006490]
lea rcx, [rbp - 0x40]
xor eax, eax
mov dword [rbp - 0x40], 0x424f414a
mov dword [rbp - 0x3c], 0x56405655
mov dword [rbp - 0x38], 0x5252545a
movd xmm0, edx
movdqa xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x34], al
movd xmm1, eax
add eax, 4
pshufd xmm1, xmm1, 0
paddd xmm1, xmmword [0x1800063d0]
andps xmm1, xmmword [0x1800063e0]
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
lea rcx, [rcx + 4]
cmp eax, 0xc
jb 0x18003269e
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x34], sil
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x18003271d
xor eax, eax
mov dword [rbp + 0x20], 0x4043404d
lea rcx, [rbp + 0x20]
mov byte [rbp + 0x24], al
call fcn.180038c4c
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x1800327b4
movdqa xmm0, xmmword [0x180006460]
lea rcx, [rbp - 0x40]
xor eax, eax
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x30], al
movd xmm0, dword [rbp - 0x20]
movd xmm1, eax
add eax, 4
pshufd xmm1, xmm1, 0
paddd xmm1, xmmword [0x1800063d0]
andps xmm1, xmmword [0x1800063e0]
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm0
movd xmm0, dword [rcx]
xorps xmm1, xmm0
movd dword [rcx], xmm1
lea rcx, [rcx + 4]
cmp eax, 0x10
jb 0x180032733
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x30], sil
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x1800327b2
xor eax, eax
mov dword [rbp + 0x20], 0x4043404d
lea rcx, [rbp + 0x20]
mov byte [rbp + 0x24], al
call fcn.180038c4c
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
setne al
jmp 0x1800327b7
jmp 0x1800327b7
mov al, r14b
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret