Function at 0x1800020d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x30
mov rsi, rdx
mov rbx, rcx
lea rdx, str.HeavyGunner
mov rcx, r8
mov rdi, r8
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18000215a
xor eax, eax
mov dword [rbp - 0x10], 0x46425027
mov byte [rbp - 2], al
mov cl, 0x27
mov dword [rbp - 0xc], 0x77494857
mov dword [rbp - 8], 0x4b785448
mov word [rbp - 4], 0x5046
xor byte [rbp + rax - 0xf], cl
inc rax
cmp rax, 0xd
jae 0x18000213f
mov cl, byte [rbp - 0x10]
jmp 0x18000212d
mov byte [rbp - 2], 0
lea rdx, [rbp - 0xf]
mov rax, qword [rbx]
mov rcx, rbx
mov r8, qword [rax + 0x18]
call r8
cwde
jmp 0x1800023e6
lea rdx, [0x180028560]
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1800023e1
mov r14b, byte [rdi]
mov cl, 0x3c
mov r15b, byte [rdi + 1]
mov al, r14b
mov r12b, byte [rdi + 2]
xor al, cl
mov r13b, byte [rdi + 3]
mov byte [rbp - 0xf], al
mov al, r15b
xor al, cl
mov byte [rbp - 0x10], cl
mov byte [rbp - 0xe], al
mov al, r12b
xor al, cl
mov byte [rbp - 0xd], al
mov al, r13b
xor al, cl
mov byte [rbp - 0xc], al
mov al, byte [rdi + 4]
xor al, cl
mov byte [rbp - 0xb], al
mov al, byte [rdi + 5]
xor al, cl
mov byte [rbp - 0xa], al
mov al, byte [rdi + 6]
xor al, cl
mov byte [rbp - 9], al
xor eax, eax
mov byte [rbp - 8], al
xor byte [rbp + rax - 0xf], cl
inc rax
cmp rax, 7
jae 0x1800021d4
mov cl, byte [rbp - 0x10]
jmp 0x1800021c2
lea rdx, str.LightDroid
mov byte [rbp - 8], 0
lea rcx, [rbp - 0xf]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1800023e1
lea rdx, [0x18002857c]
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x180002292
lea rdx, [0x180028588]
mov rcx, rsi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
xor r8d, r8d
test rax, rax
je 0x18000225c
xor eax, eax
mov dword [rbp - 0x10], 0x6b6a6705
mov byte [rbp - 2], al
mov cl, 5
mov dword [rbp - 0xc], 0x6c6d5a60
mov dword [rbp - 8], 0x6c6a7571
mov word [rbp - 4], 0x716b
xor byte [rbp + rax - 0xf], cl
inc rax
cmp rax, 0xd
jae 0x180002253
mov cl, byte [rbp - 0x10]
jmp 0x180002241
mov byte [rbp - 2], r8b
jmp 0x180002143
xor eax, eax
mov dword [rbp - 0x10], 0xb0a0765
mov byte [rbp - 6], al
mov cl, 0x65
mov dword [rbp - 0xc], 0xd3a00
mov word [rbp - 8], 0x104
xor byte [rbp + rax - 0xf], cl
inc rax
cmp rax, 9
jae 0x180002289
mov cl, byte [rbp - 0x10]
jmp 0x180002277
mov byte [rbp - 6], r8b
jmp 0x180002143
lea rdx, [0x1800285b8]
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
xor esi, esi
test eax, eax
jne 0x1800022e1
mov cl, 6
mov dword [rbp - 0x10], 0x766f4406
mov dword [rbp - 0xc], 0x4a263736
mov eax, esi
mov dword [rbp - 8], 0x6a674526
mov word [rbp - 4], 0x60
xor byte [rbp + rax - 0xf], cl
inc rax
cmp rax, 0xc
jae 0x1800022d8
mov cl, byte [rbp - 0x10]
jmp 0x1800022c6
mov byte [rbp - 3], sil
jmp 0x180002143
lea rdx, str.SED20
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x180002326
mov dl, 4
mov dword [rbp - 0x10], 0x746d4604
mov dword [rbp - 0xc], 0x48243534
mov rax, rsi
mov dword [rbp - 8], 0x68654724
mov word [rbp - 4], 0x62
xor byte [rbp + rax - 0xf], dl
inc rax
cmp rax, 0xc
jae 0x1800022d8
mov dl, byte [rbp - 0x10]
jmp 0x180002314
mov al, byte [rdi + 4]
mov cl, 0x2e
xor al, cl
mov byte [rbp - 0x10], cl
mov byte [rbp - 0xb], al
xor r14b, cl
mov al, byte [rdi + 5]
xor r15b, cl
xor al, cl
mov byte [rbp - 0xf], r14b
mov byte [rbp - 0xa], al
xor r12b, cl
mov al, byte [rdi + 6]
xor r13b, cl
xor al, cl
mov byte [rbp - 0xe], r15b
mov byte [rbp - 9], al
xor eax, eax
mov byte [rbp - 8], al
mov byte [rbp - 0xd], r12b
mov byte [rbp - 0xc], r13b
xor byte [rbp + rax - 0xf], cl
inc rax
cmp rax, 7
jae 0x180002376
mov cl, byte [rbp - 0x10]
jmp 0x180002364
lea rdx, str.SEDTeleporter
mov byte [rbp - 8], sil
lea rcx, [rbp - 0xf]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x1800023c4
mov cl, 0x4d
mov dword [rbp - 0x10], 0x3d240f4d
mov dword [rbp - 0xc], 0x16d7c7d
mov rax, rsi
mov dword [rbp - 8], 0x212c0e6d
mov word [rbp - 4], 0x2b
xor byte [rbp + rax - 0xf], cl
inc rax
cmp rax, 0xc
jae 0x1800022d8
mov cl, byte [rbp - 0x10]
jmp 0x1800023ae
cmp dword [0x18003b0dc], esi
lea rax, str.Bip01_Spine
lea rdx, str.Bip01_Head
cmovne rdx, rax
jmp 0x180002147
mov eax, 0x3d
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rbp
ret