Function at 0x18f88b5004
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov qword [rax + 8], rcx
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xe0
mov rbx, r8
mov rdi, rdx
xor esi, esi
mov qword [rbp + 0x67], rsi
mov rcx, qword [0x18f88e5410]
mov rax, qword [rcx]
lea r9, [rbp + 0x67]
xor r8d, r8d
lea rdx, [0x18f88dd7a0]
call qword [rax + 0x60]
mov r8d, eax
test eax, eax
jns 0x18f88b5297
mov rdi, qword [rbx + 0x20]
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x17], xmm0
mov qword [rbp + 0x27], rsi
mov edx, 0x1c42
mov dword [rbp - 0x69], 0x1c011c42
mov dword [rbp - 0x65], 0x1c271c30
mov dword [rbp - 0x61], 0x1c361c23
mov dword [rbp - 0x5d], 0x1c621c27
mov dword [rbp - 0x59], 0x1c321c03
mov dword [rbp - 0x55], 0x1c061c32
mov dword [rbp - 0x51], 0x1c2f1c2d
mov dword [rbp - 0x4d], 0x1c2b1c23
mov dword [rbp - 0x49], 0x1c621c2c
mov dword [rbp - 0x45], 0x1c7c1c6f
mov dword [rbp - 0x41], 0x1c671c62
mov dword [rbp - 0x3d], 0x1c7a1c72
mov dword [rbp - 0x39], 0x1c481c1a
mov word [rbp - 0x35], dx
mov eax, edx
xor ax, word [0x18f88ddca4]
mov word [rbp - 0x33], ax
mov eax, edx
xor ax, word [0x18f88ddca6]
mov word [rbp - 0x31], ax
mov eax, edx
xor ax, word [str.Query_AppDomain_____08X_n]
mov word [rbp - 0x2f], ax
mov eax, edx
xor ax, word [0x18f88ddcaa]
mov word [rbp - 0x2d], ax
mov eax, edx
xor ax, word [0x18f88ddcac]
mov word [rbp - 0x2b], ax
mov eax, edx
xor ax, word [0x18f88ddcae]
mov word [rbp - 0x29], ax
mov eax, edx
xor ax, word [0x18f88ddcb0]
mov word [rbp - 0x27], ax
mov eax, edx
xor ax, word [0x18f88ddcb2]
mov word [rbp - 0x25], ax
mov eax, edx
xor ax, word [0x18f88ddcb4]
mov word [rbp - 0x23], ax
mov eax, edx
xor ax, word [0x18f88ddcb6]
mov word [rbp - 0x21], ax
mov eax, edx
xor ax, word [0x18f88ddcb8]
mov word [rbp - 0x1f], ax
mov eax, edx
xor ax, word [0x18f88ddcba]
mov word [rbp - 0x1d], ax
mov eax, edx
xor ax, word [0x18f88ddcbc]
mov word [rbp - 0x1b], ax
mov eax, edx
xor ax, word [0x18f88ddcbe]
mov word [rbp - 0x19], ax
mov eax, edx
xor ax, word [0x18f88ddcc0]
mov word [rbp - 0x17], ax
mov eax, edx
xor ax, word [0x18f88ddcc2]
mov word [rbp - 0x15], ax
mov eax, edx
xor ax, word [0x18f88ddcc4]
mov word [rbp - 0x13], ax
mov eax, edx
xor ax, word [0x18f88ddcc6]
mov word [rbp - 0x11], ax
mov eax, edx
xor ax, word [0x18f88ddcc8]
mov word [rbp - 0xf], ax
mov eax, edx
xor ax, word [0x18f88ddcca]
mov word [rbp - 0xd], ax
mov eax, edx
xor ax, word [0x18f88ddccc]
mov word [rbp - 0xb], ax
mov eax, edx
xor ax, word [0x18f88ddcce]
mov word [rbp - 9], ax
mov eax, edx
xor ax, word [0x18f88ddcd0]
mov word [rbp - 7], ax
mov eax, edx
xor ax, word [0x18f88ddcd2]
mov word [rbp - 5], ax
mov eax, edx
xor ax, word [0x18f88ddcd4]
mov word [rbp - 3], ax
xor eax, eax
mov word [rbp - 1], ax
mov eax, esi
lea ecx, [rsi + 1]
xor word [rbp + rax*2 - 0x67], dx
add rax, rcx
cmp rax, 0x33
jae 0x18f88b522d
movzx edx, word [rbp - 0x69]
jmp 0x18f88b5219
mov word [rbp - 1], si
lea rdx, [rbp - 0x67]
lea rcx, [rbp + 0x2f]
call fcn.18f88bba18
nop
lea r8, [rbp + 0x17]
mov rdx, rax
mov ecx, dword [rbx]
call rdi
nop
lea rcx, [rbp + 0x2f]
call fcn.18f88baf4c
nop
mov rcx, qword [rbp + 0x17]
test rcx, rcx
je 0x18f88b5503
mov rdx, qword [rbp + 0x27]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18f88b54fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18f88b552b
jmp 0x18f88b54fe
mov dword [rbp + 7], 0x5f696dc
mov dword [rbp + 0xb], 0x36632b29
mov dword [rbp + 0xf], 0x38c48bad
mov dword [rbp + 0x13], 0x13a7f29c
mov rcx, qword [rbp + 0x67]
mov rax, qword [rcx]
mov r8, rdi
lea rdx, [rbp + 7]
call qword [rax]
mov r8d, eax
test eax, eax
jns 0x18f88b5507
mov rdi, qword [rbx + 0x20]
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x17], xmm0
mov qword [rbp + 0x27], rsi
mov dword [rbp - 0x69], 0x760052
mov dword [rbp - 0x65], 0x730066
mov dword [rbp - 0x61], 0x21007a
mov dword [rbp - 0x5d], 0x710042
mov dword [rbp - 0x59], 0x450071
mov dword [rbp - 0x55], 0x6e0070
mov dword [rbp - 0x51], 0x6a0062
mov dword [rbp - 0x4d], 0x21006f
mov dword [rbp - 0x49], 0x3f002e
mov dword [rbp - 0x45], 0x260021
mov r9d, 0x31
mov dword [rbp - 0x41], 0x390031
mov dword [rbp - 0x3d], 0xb0059
lea ecx, [r9 - 0x30]
mov word [rbp - 0x39], cx
movzx eax, word [0x18f88ddcda]
add ax, cx
mov word [rbp - 0x37], ax
movzx eax, word [0x18f88ddcdc]
add ax, cx
mov word [rbp - 0x35], ax
movzx eax, word [0x18f88ddcde]
add ax, cx
mov word [rbp - 0x33], ax
movzx eax, word [str.EnumDomains_____08X_n]
add ax, cx
mov word [rbp - 0x31], ax
movzx eax, word [0x18f88ddce2]
add ax, cx
mov word [rbp - 0x2f], ax
movzx eax, word [0x18f88ddce4]
add ax, cx
mov word [rbp - 0x2d], ax
movzx eax, word [0x18f88ddce6]
add ax, cx
mov word [rbp - 0x2b], ax
movzx eax, word [0x18f88ddce8]
add ax, cx
mov word [rbp - 0x29], ax
movzx eax, word [0x18f88ddcea]
add ax, cx
mov word [rbp - 0x27], ax
movzx eax, word [0x18f88ddcec]
add ax, cx
mov word [rbp - 0x25], ax
movzx eax, word [0x18f88ddcee]
add ax, cx
mov word [rbp - 0x23], ax
movzx eax, word [0x18f88ddcf0]
add ax, cx
mov word [rbp - 0x21], ax
movzx eax, word [0x18f88ddcf2]
add ax, cx
mov word [rbp - 0x1f], ax
movzx eax, word [0x18f88ddcf4]
add ax, cx
mov word [rbp - 0x1d], ax
movzx eax, word [0x18f88ddcf6]
add ax, cx
mov word [rbp - 0x1b], ax
movzx eax, word [0x18f88ddcf8]
add ax, cx
mov word [rbp - 0x19], ax
movzx eax, word [0x18f88ddcfa]
add ax, cx
mov word [rbp - 0x17], ax
movzx eax, word [0x18f88ddcfc]
add ax, cx
mov word [rbp - 0x15], ax
movzx eax, word [0x18f88ddcfe]
add ax, cx
mov word [rbp - 0x13], ax
movzx eax, word [0x18f88ddd00]
add ax, cx
mov word [rbp - 0x11], ax
movzx eax, word [0x18f88ddd02]
add ax, cx
mov word [rbp - 0xf], ax
movzx eax, word [0x18f88ddd04]
add ax, cx
mov word [rbp - 0xd], ax
movzx eax, word [0x18f88ddd06]
add ax, cx
mov word [rbp - 0xb], ax
movzx eax, word [0x18f88ddd08]
add ax, cx
mov word [rbp - 9], ax
mov word [rbp - 7], si
mov rax, rsi
mov edx, 0xffff
add word [rbp + rax*2 - 0x69], dx
add rax, rcx
cmp rax, r9
jb 0x18f88b5497
lea rdx, [rbp - 0x69]
lea rcx, [rbp + 0x2f]
call fcn.18f88bba18
nop
lea r8, [rbp + 0x17]
mov rdx, rax
mov ecx, dword [rbx]
call rdi
nop
lea rcx, [rbp + 0x2f]
call fcn.18f88baf4c
nop
mov rcx, qword [rbp + 0x17]
test rcx, rcx
je 0x18f88b5503
mov rdx, qword [rbp + 0x27]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18f88b54fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18f88b5525
call fcn.18f88bd1e0
xor eax, eax
jmp 0x18f88b550c
mov eax, 1
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
call fcn.18f88c3388
int3
call fcn.18f88c3388
int3