Function at 0x180006c70
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push rbx
push rsi
push rdi
push r14
push r15
sub rsp, 0x90
mov rbx, rdx
mov r14, rcx
call fcn.180004d50
mov edi, 4
mov qword [0x18000a4d8], rax
lea rax, [r14 + 8]
mov byte [r14], 1
mov edx, edi
lea rax, [rax + 0x80]
movups xmm0, xmmword [rbx]
lea rbx, [rbx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm1, xmmword [rbx - 0x70]
movups xmmword [rax - 0x70], xmm1
movups xmm0, xmmword [rbx - 0x60]
movups xmmword [rax - 0x60], xmm0
movups xmm1, xmmword [rbx - 0x50]
movups xmmword [rax - 0x50], xmm1
movups xmm0, xmmword [rbx - 0x40]
movups xmmword [rax - 0x40], xmm0
movups xmm1, xmmword [rbx - 0x30]
movups xmmword [rax - 0x30], xmm1
movups xmm0, xmmword [rbx - 0x20]
movups xmmword [rax - 0x20], xmm0
movups xmm1, xmmword [rbx - 0x10]
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x180006ca0
movups xmm0, xmmword [rbx]
mov rdx, qword [0x18000a4e0]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rbx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rbx + 0x30]
movups xmmword [rax + 0x30], xmm1
test rdx, rdx
je 0x180006d4e
mov rdx, qword [rdx + 0x178]
test rdx, rdx
jne 0x180006d63
mov edx, 1
xor ecx, ecx
mov r8d, 0x3d9972f5
call fcn.180004030
mov rdx, rax
mov rax, qword [0x18000a4e0]
mov qword [rax + 0x178], rdx
jmp 0x180006d63
mov edx, 1
xor ecx, ecx
mov r8d, 0x3d9972f5
call fcn.180004030
mov rdx, rax
mov ecx, 0x258
call rdx
xor r15d, r15d
mov ebx, r15d
shl rbx, 0x10
rdtsc
shl rdx, 0x20
or rax, rdx
mov rdx, qword [0x18000a4e0]
movzx ecx, ax
or rbx, rcx
test rdx, rdx
je 0x180006dc0
mov rdx, qword [rdx + 0x178]
test rdx, rdx
jne 0x180006dd5
mov edx, 1
xor ecx, ecx
mov r8d, 0x3d9972f5
call fcn.180004030
mov rdx, rax
mov rax, qword [0x18000a4e0]
mov qword [rax + 0x178], rdx
jmp 0x180006dd5
mov edx, 1
xor ecx, ecx
mov r8d, 0x3d9972f5
call fcn.180004030
mov rdx, rax
mov ecx, ebx
and ecx, 0xf
call rdx
sub rdi, 1
jne 0x180006d70
mov byte [rsp + 0x30], r15b
mov dword [rsp + 0x34], 0x6c4a485b
mov dword [rsp + 0x38], 0x6c4c484f
mov dword [rsp + 0x3c], 0x6c224837
mov dword [rsp + 0x40], 0x6c7a487e
mov eax, dword [rsp + 0x34]
movzx eax, byte [rsp + 0x30]
test al, al
jne 0x180006e36
mov rdx, r15
nop word [rax + rax]
mov eax, dword [rsp + rdx*4 + 0x34]
xor eax, 0x6c7a487e
mov dword [rsp + rdx*4 + 0x34], eax
inc rdx
cmp rdx, 4
jb 0x180006e20
mov r8, rbx
mov qword [rsp + 0xd0], rbp
lea rdx, [rsp + 0x34]
lea rcx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_wsprintfW]
mov ecx, dword [r14 + 8]
lea r8, [rsp + 0x50]
call fcn.180006750
mov qword [r14 + 0x248], rax
test rax, rax
je 0x180007011
mov ebp, r15d
nop dword [rax]
nop word [rax + rax]
mov edi, r15d
mov qword [rsp + 0xc8], r15
cmp qword [r14 + 0x18], rdi
jbe 0x180006fad
mov rsi, r15
nop dword [rax + rax]
mov r8, qword [r14 + 0x20]
lea rax, [rsp + 0xc8]
mov rcx, qword [r14 + 0x10]
lea r9, [rsp + 0xc0]
mov rdx, qword [r14 + 0x248]
mov qword [rsp + 0xc0], r15
mov r8, qword [r8]
mov rcx, qword [rsi + rcx]
mov qword [rsp + 0x20], rax
call fcn.180002620
mov rbx, qword [rsp + 0xc0]
cmp eax, 0xc8
je 0x18000702a
test rbx, rbx
je 0x180006f49
mov r9, qword [0x18000a4e0]
test r9, r9
je 0x180006f26
mov r9, qword [r9 + 0x58]
test r9, r9
jne 0x180006f3b
lea edx, [r9 + 1]
xor ecx, ecx
mov r8d, 0x3a35705f
call fcn.180004030
mov r9, rax
mov rax, qword [0x18000a4e0]
mov qword [rax + 0x58], r9
jmp 0x180006f3b
mov edx, 1
xor ecx, ecx
mov r8d, 0x3a35705f
call fcn.180004030
mov r9, rax
xor edx, edx
mov r8d, 0x8000
mov rcx, rbx
call r9
mov rax, qword [0x18000a4e0]
test rax, rax
je 0x180006f81
mov rax, qword [rax + 0x178]
test rax, rax
jne 0x180006f93
lea edx, [rax + 1]
xor ecx, ecx
mov r8d, 0x3d9972f5
call fcn.180004030
mov rcx, qword [0x18000a4e0]
mov qword [rcx + 0x178], rax
jmp 0x180006f93
mov edx, 1
xor ecx, ecx
mov r8d, 0x3d9972f5
call fcn.180004030
mov ecx, 0x1388
call rax
inc edi
add rsi, 8
movsxd rax, edi
cmp rax, qword [r14 + 0x18]
jb 0x180006ea0
mov rdx, qword [0x18000a4e0]
test rdx, rdx
je 0x180006fea
mov rdx, qword [rdx + 0x178]
test rdx, rdx
jne 0x180006fff
mov edx, 1
xor ecx, ecx
mov r8d, 0x3d9972f5
call fcn.180004030
mov rdx, rax
mov rax, qword [0x18000a4e0]
mov qword [rax + 0x178], rdx
jmp 0x180006fff
mov edx, 1
xor ecx, ecx
mov r8d, 0x3d9972f5
call fcn.180004030
mov rdx, rax
mov ecx, 0x258
call rdx
inc ebp
cmp ebp, 5
jl 0x180006e80
xor eax, eax
mov rbp, qword [rsp + 0xd0]
add rsp, 0x90
pop r15
pop r14
pop rdi
pop rsi
pop rbx
ret
mov rdx, qword [rsp + 0xc8]
mov rcx, rbx
call fcn.180001510
test rbx, rbx
je 0x180007098
mov r9, qword [0x18000a4e0]
test r9, r9
je 0x180007075
mov r9, qword [r9 + 0x58]
test r9, r9
jne 0x18000708a
lea edx, [r9 + 1]
xor ecx, ecx
mov r8d, 0x3a35705f
call fcn.180004030
mov r9, rax
mov rax, qword [0x18000a4e0]
mov qword [rax + 0x58], r9
jmp 0x18000708a
mov edx, 1
xor ecx, ecx
mov r8d, 0x3a35705f
call fcn.180004030
mov r9, rax
xor edx, edx
mov r8d, 0x8000
mov rcx, rbx
call r9
mov eax, 1
jmp 0x180007013