Function at 0x180002f50
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
xor eax, eax
mov dword [rbp - 0x40], 0x44465a6e
xor r14d, r14d
mov byte [rbp - 0x3c], al
mov rbx, rdx
mov rdi, r9
mov rsi, r8
mov edx, r14d
lea r12d, [rax + 1]
mov r15b, 0x27
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r12d
xor byte [rbp + rcx - 0x40], al
cmp edx, 4
jb 0x180002f91
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x3c], r14b
mov rcx, rdi
call fcn.18006c920
test rax, rax
jne 0x180003321
movdqa xmm0, xmmword [0x18009d6c0]
mov edx, r14d
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x10], 0x56555143
mov dword [rbp - 0xc], 0x444e5e
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r12d
xor byte [rbp + rcx - 0x20], al
cmp edx, 0x17
jb 0x180002fdb
lea rdx, [rbp - 0x20]
mov byte [rbp - 9], r14b
mov rcx, rdi
call fcn.18006c920
test rax, rax
jne 0x180003321
movdqa xmm0, xmmword [0x18009d750]
mov edx, r14d
movdqu xmmword [rbp - 0x34], xmm0
mov dword [rbp - 0x24], 0x404a52
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r12d
xor byte [rbp + rcx - 0x34], al
cmp edx, 0x13
jb 0x18000301e
lea rdx, [rbp - 0x34]
mov byte [rbp - 0x21], r14b
mov rcx, rdi
call fcn.18006c920
test rax, rax
jne 0x180003321
movdqa xmm0, xmmword [str.mxvlGM_K_XC_DQG]
mov edx, r14d
movdqu xmmword [rbp - 0x34], xmm0
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r12d
xor byte [rbp + rcx - 0x34], al
cmp edx, 0xf
jb 0x18000305a
lea rdx, [rbp - 0x34]
mov byte [rbp - 0x25], r14b
mov rcx, rdi
call fcn.18006c920
mov edx, r14d
test rax, rax
je 0x1800030be
xor eax, eax
mov dword [rbp - 0x40], 0x1a594165
mov byte [rbp - 0x36], al
mov dword [rbp - 0x3c], 0x4b630c1a
mov word [rbp - 0x38], 0x5b4c
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r12d
xor byte [rbp + rcx - 0x40], al
cmp edx, 0xa
jb 0x18000309e
mov byte [rbp - 0x36], r14b
lea rdx, [rbp - 0x40]
jmp 0x18000335a
xor eax, eax
mov dword [rbp - 0x40], 0x796d6d74
mov byte [rbp - 0x36], al
mov dword [rbp - 0x3c], 0x47494044
mov word [rbp - 0x38], 0x424a
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r12d
xor byte [rbp + rcx - 0x40], al
cmp edx, 0xa
jb 0x1800030d7
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x36], r14b
mov rcx, rsi
call fcn.18006c920
mov edx, r14d
test rax, rax
je 0x18000313c
xor eax, eax
mov dword [rbp - 0x34], 0x1a594165
mov byte [rbp - 0x28], al
mov dword [rbp - 0x30], 0xe610c1a
mov dword [rbp - 0x2c], 0x545d516c
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r12d
xor byte [rbp + rcx - 0x34], al
cmp edx, 0xc
jb 0x18000311c
mov byte [rbp - 0x28], r14b
lea rdx, [rbp - 0x34]
jmp 0x18000335a
mov dword [rbp - 0x40], 0x5c484d6f
mov dword [rbp - 0x3c], 0x5c587852
mov dword [rbp - 0x38], 0x45555d
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r12d
xor byte [rbp + rcx - 0x40], al
cmp edx, 0xb
jb 0x180003151
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x35], r14b
mov rcx, rdi
call fcn.18006c920
mov edx, r14d
test rax, rax
je 0x1800031af
mov dword [rbp - 0x34], 0x4f474745
mov dword [rbp - 0x30], 0x5a444474
mov dword [rbp - 0x2c], 0x5c585f5f
mov word [rbp - 0x28], 0x47
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r12d
xor byte [rbp + rcx - 0x34], al
cmp edx, 0xd
jb 0x180003197
jmp 0x180003352
xor eax, eax
mov dword [rbp - 0x40], 0x585b5d73
mov byte [rbp - 0x3a], al
mov word [rbp - 0x3c], 0x584e
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r12d
xor byte [rbp + rcx - 0x40], al
cmp edx, 6
jb 0x1800031c1
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x3a], r14b
mov rcx, rsi
call fcn.18006c920
mov edx, r14d
test rax, rax
je 0x180003220
mov dword [rbp - 0x40], 0x4f474745
mov dword [rbp - 0x3c], 0x4f484474
mov word [rbp - 0x38], 0x4b
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r12d
xor byte [rbp + rcx - 0x40], al
cmp edx, 9
jb 0x180003200
mov byte [rbp - 0x37], r14b
lea rdx, [rbp - 0x40]
jmp 0x18000335a
xor eax, eax
mov dword [rbp - 0x40], 0x4f404074
mov byte [rbp - 0x3a], al
mov word [rbp - 0x3c], 0x4847
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r12d
xor byte [rbp + rcx - 0x40], al
cmp edx, 6
jb 0x180003232
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x3a], r14b
mov rcx, rsi
call fcn.18006c920
test rax, rax
je 0x180003264
mov eax, 0x1a
jmp 0x180003368
xor eax, eax
mov dword [rbp - 0x40], 0x5c484d6f
mov byte [rbp - 0x36], al
mov edx, r14d
mov dword [rbp - 0x3c], 0x415f6852
mov word [rbp - 0x38], 0x5446
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r12d
xor byte [rbp + rcx - 0x40], al
cmp edx, 0xa
jb 0x180003280
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x36], r14b
mov rcx, rdi
call fcn.18006c920
test rax, rax
je 0x1800032b2
mov eax, 0x3d
jmp 0x180003368
cmp dword [0x1800fb224], r14d
mov edx, r14d
jne 0x1800032ef
xor eax, eax
mov dword [rbp - 0x40], 0x1a594165
mov byte [rbp - 0x36], al
mov dword [rbp - 0x3c], 0x4b650c1a
mov word [rbp - 0x38], 0x544e
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r12d
xor byte [rbp + rcx - 0x40], al
cmp edx, 0xa
jb 0x1800032d7
jmp 0x1800030b1
mov dword [rbp - 0x34], 0x1a594165
mov dword [rbp - 0x30], 0x5e7e0c1a
mov dword [rbp - 0x2c], 0x545e46
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r12d
xor byte [rbp + rcx - 0x34], al
cmp edx, 0xb
jb 0x180003304
mov byte [rbp - 0x29], r14b
lea rdx, [rbp - 0x34]
jmp 0x18000335a
mov dword [rbp - 0x34], 0x5a484d50
mov edx, r14d
mov dword [rbp - 0x30], 0x417d4244
mov dword [rbp - 0x2c], 0x535d6f5c
mov word [rbp - 0x28], 0x44
movsxd rcx, edx
lea eax, [r15 + rdx]
add edx, r12d
xor byte [rbp + rcx - 0x34], al
cmp edx, 0xd
jb 0x18000333f
lea rdx, [rbp - 0x34]
mov byte [rbp - 0x27], r14b
mov rax, qword [rbx]
mov rcx, rbx
mov r8, qword [rax + 0x18]
call r8
cwde
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret