Function at 0x18009f5c0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0x90
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm8
mov rax, qword [0x1802ee528]
xor rax, rsp
mov qword [rbp + 0x27], rax
xor ebx, ebx
mov dword [rbp - 9], 0x50791415
mov ecx, ebx
mov dword [rbp - 5], 0x49537957
mov word [rbp - 1], 0x100
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x36]
xor byte [rbp + rcx - 9], al
inc rcx
cmp rcx, 8
jb 0x18009f610
xor edx, edx
mov byte [rbp], bl
lea rcx, [rbp - 9]
lea r8d, [rdx + 0xb]
call fcn.18001ba80
mov rcx, rbx
mov dword [rbp + 0x17], 0x7b555e77
mov dword [rbp + 0x1b], 0x721c4f55
mov dword [rbp + 0x1f], 0x2e294b4e
mov dword [rbp + 0x23], 0x100302c
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x36]
xor byte [rbp + rcx + 0x17], al
inc rcx
cmp rcx, 0xe
jb 0x18009f660
mov byte [rbp + 0x26], bl
call fcn.180057ed0
lea rcx, [rbp - 9]
call fcn.180023400
movss xmm8, dword [0x18011152c]
lea rdx, [rbp + 0x17]
xor r9d, r9d
movss dword [rsp + 0x20], xmm8
xor r8d, r8d
lea rcx, [rbp + 7]
movss xmm6, dword [rax]
call fcn.18001f0b0
mulss xmm6, dword [0x180111498]
movaps xmm1, xmm8
movss xmm2, dword [rax]
mulss xmm2, dword [0x180111498]
subss xmm6, xmm2
movaps xmm0, xmm6
call fcn.18002f670
lea rcx, [rbp + 0x17]
call fcn.180058120
call fcn.180057ed0
mov ecx, 1
call fcn.1800a2100
xor edx, edx
mov dword [rbp + 7], 0x44480000
lea rcx, [rbp + 7]
mov dword [rbp + 0xb], 0x43fa0000
call fcn.1800308d0
mov r9d, 8
mov dword [rbp + 7], 0x43bb8000
mov r8b, 1
mov dword [rbp + 0xb], 0x43e10000
lea rdx, [rbp + 7]
lea rcx, str.1Bar
call fcn.18001dda0
mov rcx, rbx
mov dword [rbp - 9], 0x4f514377
mov dword [rbp - 5], 0x7c1c495b
mov dword [rbp - 1], 0x2e025257
mov word [rbp + 3], gethostname
mov byte [rbp + 5], 1
nop word [rax + rax]
lea eax, [rcx + 0x36]
xor byte [rbp + rcx - 9], al
inc rcx
cmp rcx, 0xd
jb 0x18009f750
lea rdx, [0x1802ef60d]
mov byte [rbp + 5], bl
lea rcx, [rbp - 9]
call fcn.18004c5d0
mov rcx, rbx
mov dword [rbp - 9], 0x4d4b587b
mov dword [rbp - 5], 0x1d4e5a48
mov dword [rbp - 1], 0x365078
mov byte [rbp + 3], 1
nop
lea eax, [rcx + 0x36]
xor byte [rbp + rcx - 9], al
inc rcx
cmp rcx, 0xb
jb 0x18009f790
lea rdx, [0x1802ef60e]
mov byte [rbp + 3], bl
lea rcx, [rbp - 9]
call fcn.18004c5d0
mov rcx, rbx
mov dword [rbp - 9], 0x4d4b587b
mov dword [rbp - 5], 0x1d4e5a48
mov dword [rbp - 1], 0x20325673
mov word [rbp + 3], 0x100
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x36]
xor byte [rbp + rcx - 9], al
inc rcx
cmp rcx, 0xc
jb 0x18009f7e0
lea rdx, [0x1802ef60f]
mov byte [rbp + 4], bl
lea rcx, [rbp - 9]
call fcn.18004c5d0
cmp byte [0x1802ef60f], bl
je 0x18009f8c9
mov dword [rbp + 7], 0x51565e7a
mov rcx, rbx
mov word [rbp + 0xb], 0x5b
mov byte [rbp + 0xd], 1
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x36]
xor byte [rbp + rcx + 7], al
inc rcx
cmp rcx, 5
jb 0x18009f830
movss xmm6, dword [0x1801114c4]
lea rdx, [0x1802eddb4]
movss xmm3, dword [0x180111500]
lea rcx, [rbp + 7]
movss dword [rsp + 0x28], xmm6
xorps xmm2, xmm2
mov qword [rsp + 0x20], rbx
mov byte [rbp + 0xd], bl
call fcn.1800579b0
mov rcx, rbx
mov dword [rbp - 9], 0x58555662
mov dword [rbp - 5], 0x535354
mov byte [rbp - 1], 1
nop word [rax + rax]
lea eax, [rcx + 0x36]
xor byte [rbp + rcx - 9], al
inc rcx
cmp rcx, 7
jb 0x18009f890
movss xmm3, dword [0x180111500]
lea rdx, [0x1802eddb0]
movss dword [rsp + 0x28], xmm6
lea rcx, [rbp - 9]
xorps xmm2, xmm2
mov qword [rsp + 0x20], rbx
mov byte [rbp - 1], bl
call fcn.1800579b0
call fcn.180020c60
movaps xmm1, xmm8
xorps xmm0, xmm0
call fcn.18002f670
mov rcx, rbx
mov dword [rbp - 9], 0x43c80000
mov dword [rbp - 5], 0x43e10000
mov dword [rbp + 7], 0x7b0a1415
mov dword [rbp + 0xb], 0x100495b
nop dword [rax]
lea eax, [rcx + 0x36]
xor byte [rbp + rcx + 7], al
inc rcx
cmp rcx, 6
jb 0x18009f900
mov r9d, 8
mov byte [rbp + 0xe], bl
mov r8b, 1
lea rdx, [rbp - 9]
lea rcx, [rbp + 7]
call fcn.18001dda0
mov rcx, rbx
mov dword [rbp - 9], 0x194e5870
mov dword [rbp - 5], 0x52505479
mov word [rbp - 1], Ordinal_79
mov byte [rbp + 1], 1
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x36]
xor byte [rbp + rcx - 9], al
inc rcx
cmp rcx, 9
jb 0x18009f950
xor r8d, r8d
mov byte [rbp + 1], bl
lea rdx, [0x1802ede38]
lea rcx, [rbp - 9]
call fcn.18004d360
mov rcx, rbx
mov dword [rbp - 9], 0x584a5e7b
mov dword [rbp - 5], 0x5153781a
mov dword [rbp - 1], 0x1004d51
nop
lea eax, [rcx + 0x36]
xor byte [rbp + rcx - 9], al
inc rcx
cmp rcx, 0xa
jb 0x18009f990
xor r8d, r8d
mov byte [rbp + 2], bl
lea rdx, [0x1802ede48]
lea rcx, [rbp - 9]
call fcn.18004d360
call fcn.180057ed0
mov rcx, rbx
mov dword [rbp + 7], 0x4e5870
mov byte [rbp + 0xb], 1
nop dword [rax]
lea eax, [rcx + 0x36]
xor byte [rbp + rcx + 7], al
inc rcx
cmp rcx, 3
jb 0x18009f9d0
mov r9d, 0x258
mov byte [rbp + 0xb], bl
mov r8d, 1
mov qword [rsp + 0x20], rbx
lea rdx, [0x1802ee270]
lea rcx, [rbp + 7]
call fcn.180057a00
mov rcx, rbx
mov dword [rbp - 9], 0x5a5d4566
mov dword [rbp - 5], 0x525d4853
mov word [rbp - 1], 0x100
nop dword [rax + rax]
lea eax, [rcx + 0x36]
xor byte [rbp + rcx - 9], al
inc rcx
cmp rcx, 8
jb 0x18009fa20
mov r9d, reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp], bl
lea rdx, [0x1802ee268]
mov qword [rsp + 0x20], rbx
lea rcx, [rbp - 9]
lea r8d, [r9 - 0x1d]
call fcn.180057a00
mov rcx, rbx
mov dword [rbp - 9], 0x4a565265
mov dword [rbp - 5], 0x51555953
mov dword [rbp - 1], 0x25215b57
mov word [rbp + 3], Ordinal_41
mov byte [rbp + 5], 1
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x36]
xor byte [rbp + rcx - 9], al
inc rcx
cmp rcx, 0xd
jb 0x18009fa80
mov r9d, 0x64
mov byte [rbp + 5], bl
lea rdx, [0x1802ee26c]
mov qword [rsp + 0x20], rbx
lea rcx, [rbp - 9]
lea r8d, [r9 - 0x63]
call fcn.180057a00
mov rcx, rbx
mov dword [rbp - 9], 0x4d4b5e72
mov dword [rbp - 5], 0x545f555b
mov dword [rbp - 1], 0x2c1b1f5f
mov word [rbp + 3], Ordinal_35
mov byte [rbp + 5], 1
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x36]
xor byte [rbp + rcx - 9], al
inc rcx
cmp rcx, 0xd
jb 0x18009fae0
mov r9d, 0x3e8
mov byte [rbp + 5], bl
mov r8d, 1
mov qword [rsp + 0x20], rbx
lea rdx, [0x1802c7f48]
lea rcx, [rbp - 9]
call fcn.180057a00
call fcn.180057ed0
mov rcx, rbx
mov dword [rbp - 9], 0x5b555e77
mov dword [rbp - 5], 0x7f1c4f55
mov dword [rbp - 1], 0x255151
mov byte [rbp + 3], 1
nop word [rax + rax]
lea eax, [rcx + 0x36]
xor byte [rbp + rcx - 9], al
inc rcx
cmp rcx, 0xb
jb 0x18009fb40
mov r9d, 7
mov byte [rbp + 3], bl
lea r8, str.Head
mov dword [rsp + reloc.WLDAP32.dll_Ordinal_32], 0x20
lea rdx, [0x1802f01c0]
lea rcx, [rbp - 9]
call fcn.180050860
mov qword [rbp - 9], rbx
mov dword [rbp + 7], 0x5b555e77
mov dword [rbp + 0xb], 0x761c4f55
mov dword [rbp + 0xf], 0x100465b
nop dword [rax]
nop word [rax + rax]
lea eax, [rbx + 0x36]
xor byte [rbp + rbx + 7], al
inc rbx
cmp rbx, 0xa
jb 0x18009fba0
lea r8, [rbp - 9]
mov byte [rbp + 0x12], 0
lea rdx, [0x1802ee274]
lea rcx, [rbp + 7]
call fcn.180024090
call fcn.180020c60
call fcn.1800208f0
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.180106c20
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x10]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm8, xmmword [r11 - 0x20]
mov rsp, r11
pop rbp
ret