Function at 0x18000ab10
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x98
lea rbp, [rsp + 0x80]
movaps xmmword [rbp], xmm6
mov qword [rbp - 8], 0xfffffffffffffffe
mov r15d, ecx
mov byte [rbp - 0x40], 0
lea rdi, [rbp - 0x3f]
mov byte [rbp - 0x3f], 0x6b
mov byte [rbp - 0x3e], 0x2f
mov byte [rbp - 0x3d], 0x6e
mov byte [rbp - 0x3c], 0x2f
mov byte [rbp - 0x3b], 0xd9
mov byte [rbp - 0x3a], 0x2f
mov byte [rbp - 0x39], 0xdb
mov byte [rbp - 0x38], 0x2f
mov byte [rbp - 0x37], 0x6e
mov byte [rbp - 0x36], 0x2f
mov byte [rbp - 0x35], 0xdc
mov byte [rbp - 0x34], 0x2f
mov byte [rbp - 0x33], 0x87
mov byte [rbp - 0x32], 0x2f
mov byte [rbp - 0x31], 0x16
mov byte [rbp - 0x30], 0x2f
mov byte [rbp - 0x2f], 0x2f
mov byte [rbp - 0x2e], 0x2f
mov esi, 0x493f9f60
mov r8d, 0x536d98d4
mov r9d, 0x7f16c098
nop word [rax + rax]
cmp esi, 0x493f9f5f
jg 0x18000abe0
cmp esi, 0x89223219
je 0x18000acbf
cmp esi, 0x98e11536
je 0x18000ac2c
cmp esi, 0xaddfb9f
jne 0x18000aba0
mov qword [rbp - 0x20], rdx
mov rax, qword [rbp - 0x20]
cmp rax, 0x12
mov esi, 0x98e11536
cmovb esi, r8d
jmp 0x18000aba0
cmp esi, 0x7f16c098
je 0x18000ac36
cmp esi, 0x536d98d4
je 0x18000ac42
cmp esi, 0x493f9f60
jne 0x18000aba0
movzx ecx, byte [rbp - 0x40]
mov ebx, ecx
not bl
and bl, 0x2e
mov eax, ecx
and al, 0xd1
or al, bl
xor al, 0xd1
and cl, 0x51
mov ebx, eax
and bl, 0xae
or bl, cl
xor bl, 0xaf
and al, 0xfe
or al, bl
cmp al, 0xff
mov esi, 0x89223219
cmove esi, r9d
jmp 0x18000aba0
mov esi, 0x89223219
jmp 0x18000aba0
mov esi, 0xaddfb9f
xor edx, edx
jmp 0x18000aba0
mov rdx, qword [rbp - 0x20]
movzx eax, byte [rbp + rdx - 0x3f]
movzx eax, al
add eax, eax
mov ecx, 0x5e
sub ecx, eax
movsx ebx, cx
imul ebx, ebx, 0xffff905b
shr ebx, 0x10
sub ebx, eax
add ebx, 0x5e
movzx eax, bx
movsx ebx, ax
shr eax, 0xf
sar ebx, 7
add ebx, eax
imul eax, ebx, 0xe3
neg eax
lea ebx, [rcx + rax]
add ebx, 0xe3
movzx ecx, bx
imul ecx, ecx, 0x20b5
shr ecx, 0x10
mov eax, ebx
sub eax, ecx
movzx eax, ax
shr eax, 1
add eax, ecx
shr eax, 7
imul eax, eax, 0xe3
sub ebx, eax
mov byte [rbp + rdx - 0x3f], bl
mov rdx, qword [rbp - 0x20]
add rdx, 1
mov esi, 0xaddfb9f
jmp 0x18000aba0
movaps xmm6, xmmword [0x180035720]
movups xmmword [rbp - 0x50], xmm6
mov word [rbp - 0x60], 0
mov rcx, rdi
call fcn.18002532c
lea r14, [rbp - 0x60]
mov rcx, r14
mov rdx, rdi
mov r8, rax
call fcn.180011850
mov byte [rbp - 0x20], 0
lea rdi, [rbp - 0x1f]
mov byte [rbp - 0x1f], 0xc1
mov byte [rbp - 0x1e], 0x3e
mov byte [rbp - 0x1d], 0x8b
mov byte [rbp - 0x1c], 0x3e
mov byte [rbp - 0x1b], 0x38
mov byte [rbp - 0x1a], 0x3e
mov byte [rbp - 0x19], 0x60
mov byte [rbp - 0x18], 0x3e
mov byte [rbp - 0x17], 0xb7
mov byte [rbp - 0x16], 0x3e
mov byte [rbp - 0x15], 0x38
mov byte [rbp - 0x14], 0x3e
mov byte [rbp - 0x13], 0x3e
mov byte [rbp - 0x12], 0x3e
mov esi, 0xd2e4de67
mov r8d, 0x463e9e8f
mov r9d, 0x5589435c
nop dword [rax + rax]
cmp esi, 0x194a1076
jg 0x18000ad70
cmp esi, 0xa7130efa
je 0x18000ad95
cmp esi, 0xd2e4de67
je 0x18000adac
cmp esi, 0xde01474f
jne 0x18000ad40
mov esi, 0x194a1077
jmp 0x18000ad40
cmp esi, 0x194a1077
je 0x18000ae63
cmp esi, 0x463e9e8f
je 0x18000ade4
cmp esi, 0x5589435c
jne 0x18000ad40
mov esi, 0xa7130efa
xor edx, edx
jmp 0x18000ad40
mov qword [rbp - 0x10], rdx
mov rax, qword [rbp - 0x10]
cmp rax, 0xe
mov esi, 0xde01474f
cmovb esi, r8d
jmp 0x18000ad40
movzx ebx, byte [rbp - 0x20]
mov eax, ebx
not al
and al, 0x6f
and bl, 0x90
or bl, al
mov ecx, ebx
xor cl, 0x90
xor bl, 0x4c
and bl, 0x5c
mov eax, ecx
and al, 0xa3
or al, bl
xor al, 0xa2
and cl, 0xfe
or cl, al
cmp cl, 0xff
mov esi, 0x194a1077
cmove esi, r9d
jmp 0x18000ad40
mov rdx, qword [rbp - 0x10]
movzx eax, byte [rbp + rdx - 0x1f]
movzx eax, al
imul eax, eax, 0xffffffac
mov esi, eax
add esi, 0x1458
movsx ecx, si
imul ecx, ecx, 0xffff905b
shr ecx, 0x10
add eax, ecx
add eax, 0x1458
movzx eax, ax
movsx ecx, ax
shr eax, 0xf
sar ecx, 7
add ecx, eax
imul eax, ecx, 0xe3
sub esi, eax
add esi, 0xe3
movzx eax, si
imul eax, eax, 0x20b5
shr eax, 0x10
mov ecx, esi
sub ecx, eax
movzx ecx, cx
shr ecx, 1
add ecx, eax
shr ecx, 7
imul eax, ecx, 0xe3
sub esi, eax
mov byte [rbp + rdx - 0x1f], sil
mov rdx, qword [rbp - 0x10]
add rdx, 1
mov esi, 0xa7130efa
jmp 0x18000ad40
movups xmmword [rbp - 0x30], xmm6
mov word [rbp - 0x40], 0
mov rcx, rdi
call fcn.18002532c
lea rsi, [rbp - 0x40]
mov rcx, rsi
mov rdx, rdi
mov r8, rax
call fcn.180011850
call fcn.180017848
test eax, eax
je 0x18000aeba
xor edi, edi
lea rcx, [rbp - 0x40]
call fcn.180010980
lea rcx, [rbp - 0x60]
call fcn.180010980
mov eax, edi
movaps xmm6, xmmword [rbp]
add rsp, 0x98
pop rbx
pop rdi
pop rsi
pop r14
pop r15
pop rbp
ret
mov dil, 1
test r15d, r15d
je 0x18000ae92
cmp r15d, 2
je 0x18000af32
cmp r15d, 1
jne 0x18000b064
lea rax, [0x180045208]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x20], rax
cmp qword [0x180045220], 0x10
mov ecx, 0xfb8b70f1
mov eax, 0xa25b0fc5
cmovae eax, ecx
mov ecx, 0xafa09e1
nop
cmp ecx, 0xa25b0fc5
je 0x18000af92
cmp ecx, 0xfb8b70f1
je 0x18000af24
cmp ecx, 0xafa09e1
jne 0x18000af00
mov rdx, qword [rbp - 0x20]
mov ecx, eax
jmp 0x18000af00
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rcx]
mov ecx, 0xa25b0fc5
jmp 0x18000af00
lea rax, [0x1800454c0]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x20], rax
cmp qword [0x1800454d8], 0x10
mov ecx, 0xfb8b70f1
mov eax, 0xa25b0fc5
cmovae eax, ecx
mov ecx, 0xafa09e1
nop
cmp ecx, 0xa25b0fc5
je 0x18000afeb
cmp ecx, 0xfb8b70f1
je 0x18000af84
cmp ecx, 0xafa09e1
jne 0x18000af60
mov rdx, qword [rbp - 0x20]
mov ecx, eax
jmp 0x18000af60
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rcx]
mov ecx, 0xa25b0fc5
jmp 0x18000af60
mov qword [rbp - 0x10], r14
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x20], rax
cmp qword [rbp - 0x48], 8
mov eax, 0x629f3caf
mov ebx, 0x4173a0c
cmovae ebx, eax
mov eax, 0xc53155e
nop word cs:[rax + rax]
nop
cmp eax, 0x4173a0c
je 0x18000b03b
cmp eax, 0x629f3caf
je 0x18000afdd
cmp eax, 0xc53155e
jne 0x18000afc0
mov rcx, qword [rbp - 0x20]
mov eax, ebx
jmp 0x18000afc0
mov rax, qword [rbp - 0x10]
mov rcx, qword [rax]
mov eax, 0x4173a0c
jmp 0x18000afc0
mov qword [rbp - 0x10], rsi
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x20], rax
cmp qword [rbp - 0x28], 8
mov eax, 0x629f3caf
mov ebx, 0x4173a0c
cmovae ebx, eax
mov eax, 0xc53155e
nop
cmp eax, 0x4173a0c
je 0x18000b082
cmp eax, 0x629f3caf
je 0x18000b02d
cmp eax, 0xc53155e
jne 0x18000b010
mov rcx, qword [rbp - 0x20]
mov eax, ebx
jmp 0x18000b010
mov rax, qword [rbp - 0x10]
mov rcx, qword [rax]
mov eax, 0x4173a0c
jmp 0x18000b010
lea r8, [0x18000b4d0]
lea r9, [0x180045648]
call fcn.180019a01
test eax, eax
jne 0x18000ae90
mov rax, qword [0x180045648]
mov qword [0x180045578], rax
xor ecx, ecx
call fcn.180019654
lea rdx, [0x18000dca0]
mov ecx, 1
call qword [0x180045598]
jmp 0x18000ae92
lea r8, [0x18000bc00]
lea r9, [0x180045650]
call fcn.180019a01
test eax, eax
jne 0x18000ae90
lea rax, [0x1800454e0]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x20], rax
cmp qword [0x1800454f8], 0x10
mov ecx, 0xfb8b70f1
mov eax, 0xa25b0fc5
cmovae eax, ecx
mov ecx, 0xafa09e1
nop word [rax + rax]
cmp ecx, 0xa25b0fc5
je 0x18000b0fe
cmp ecx, 0xfb8b70f1
je 0x18000b0f0
cmp ecx, 0xafa09e1
jne 0x18000b0d0
mov rdx, qword [rbp - 0x20]
mov ecx, eax
jmp 0x18000b0d0
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rcx]
mov ecx, 0xa25b0fc5
jmp 0x18000b0d0
mov qword [rbp - 0x10], rsi
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x20], rax
cmp qword [rbp - 0x28], 8
mov eax, 0x629f3caf
mov ebx, 0x4173a0c
cmovae ebx, eax
mov eax, 0xc53155e
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp eax, 0x4173a0c
je 0x18000b15b
cmp eax, 0x629f3caf
je 0x18000b14d
cmp eax, 0xc53155e
jne 0x18000b130
mov rcx, qword [rbp - 0x20]
mov eax, ebx
jmp 0x18000b130
mov rax, qword [rbp - 0x10]
mov rcx, qword [rax]
mov eax, 0x4173a0c
jmp 0x18000b130
lea r8, [0x18000c270]
lea r9, [0x180045658]
call fcn.180019a01
test eax, eax
jne 0x18000ae90
lea rax, [0x1800452a8]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x20], rax
cmp qword [0x1800452c0], 0x10
mov ecx, 0xfb8b70f1
mov eax, 0xa25b0fc5
cmovae eax, ecx
mov ecx, 0xafa09e1
nop word cs:[rax + rax]
nop dword [rax]
cmp ecx, 0xa25b0fc5
je 0x18000b1de
cmp ecx, 0xfb8b70f1
je 0x18000b1d0
cmp ecx, 0xafa09e1
jne 0x18000b1b0
mov rdx, qword [rbp - 0x20]
mov ecx, eax
jmp 0x18000b1b0
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rcx]
mov ecx, 0xa25b0fc5
jmp 0x18000b1b0
mov qword [rbp - 0x10], r14
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x20], rax
cmp qword [rbp - 0x48], 8
mov eax, 0x629f3caf
mov ebx, 0x4173a0c
cmovae ebx, eax
mov eax, 0xc53155e
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp eax, 0x4173a0c
je 0x18000b23b
cmp eax, 0x629f3caf
je 0x18000b22d
cmp eax, 0xc53155e
jne 0x18000b210
mov rcx, qword [rbp - 0x20]
mov eax, ebx
jmp 0x18000b210
mov rax, qword [rbp - 0x10]
mov rcx, qword [rax]
mov eax, 0x4173a0c
jmp 0x18000b210
lea r8, [0x18000c900]
lea r9, [0x180045660]
call fcn.180019a01
test eax, eax
jne 0x18000ae90
lea rax, [0x1800452c8]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x20], rax
cmp qword [0x1800452e0], 0x10
mov ecx, 0xfb8b70f1
mov eax, 0xa25b0fc5
cmovae eax, ecx
mov ecx, 0xafa09e1
cmp ecx, 0xa25b0fc5
je 0x18000b2b1
cmp ecx, 0xfb8b70f1
je 0x18000b2a3
cmp ecx, 0xafa09e1
jne 0x18000b283
mov rdx, qword [rbp - 0x20]
mov ecx, eax
jmp 0x18000b283
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rcx]
mov ecx, 0xa25b0fc5
jmp 0x18000b283
mov qword [rbp - 0x10], r14
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x20], rax
cmp qword [rbp - 0x48], 8
mov eax, 0x629f3caf
mov ebx, 0x4173a0c
cmovae ebx, eax
mov eax, 0xc53155e
cmp eax, 0x4173a0c
je 0x18000b2ff
cmp eax, 0x629f3caf
je 0x18000b2f1
cmp eax, 0xc53155e
jne 0x18000b2d4
mov rcx, qword [rbp - 0x20]
mov eax, ebx
jmp 0x18000b2d4
mov rax, qword [rbp - 0x10]
mov rcx, qword [rax]
mov eax, 0x4173a0c
jmp 0x18000b2d4
lea r8, [0x18000cee0]
lea r9, [0x180045668]
call fcn.180019a01
test eax, eax
jne 0x18000ae90
lea rax, [0x1800452e8]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x20], rax
cmp qword [0x180045300], 0x10
mov ecx, 0xfb8b70f1
mov eax, 0xa25b0fc5
cmovae eax, ecx
mov ecx, 0xafa09e1
cmp ecx, 0xa25b0fc5
je 0x18000b375
cmp ecx, 0xfb8b70f1
je 0x18000b367
cmp ecx, 0xafa09e1
jne 0x18000b347
mov rdx, qword [rbp - 0x20]
mov ecx, eax
jmp 0x18000b347
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rcx]
mov ecx, 0xa25b0fc5
jmp 0x18000b347
mov qword [rbp - 0x10], r14
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x20], rax
cmp qword [rbp - 0x48], 8
mov eax, 0x629f3caf
mov ebx, 0x4173a0c
cmovae ebx, eax
mov eax, 0xc53155e
cmp eax, 0x4173a0c
je 0x18000b3c3
cmp eax, 0x629f3caf
je 0x18000b3b5
cmp eax, 0xc53155e
jne 0x18000b398
mov rcx, qword [rbp - 0x20]
mov eax, ebx
jmp 0x18000b398
mov rax, qword [rbp - 0x10]
mov rcx, qword [rax]
mov eax, 0x4173a0c
jmp 0x18000b398
lea r8, [0x18000d5c0]
lea r9, [0x180045670]
call fcn.180019a01
test eax, eax
jne 0x18000ae90
jmp 0x18000b064