Function at 0x1d8c3d3a0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xd8
movabs rax, 0x610035004a0069
mov qword [rsp + 0x2e], rax
mov r13d, ecx
mov r12d, edx
mov ebx, r8d
mov word [rsp + 0x36], 0
mov rbp, r9
push rbx
sar bl, 0xa
push r15
emms
push r8
mov ebx, r15d
pop r8
xchg r15w, bx
pop r15
paddb mm2, mm0
pop rbx
movabs rax, 0x59007800790044
mov word [rsp + 0x40], 0
mov qword [rsp + 0x38], rax
cmp r15w, bx
jne 0x1d8c3d419
push rax
emms
push r14
emms
inc r14d
pop r14
rcr ax, 0x10
pop rax
jmp 0x1d8c3d42f
push r13
pslld mm2, 0x23
push r11
rol r11d, 0x15
not r13
pop r11
inc r13
pop r13
push rdx
maxss xmm6, xmm15
push r10
not dl
subps xmm13, xmm2
pop r10
nop
pop rdx
lea rdi, [rsp + 0x38]
lea rsi, [rsp + 0x2e]
mov rdx, rdi
mov rcx, rsi
call sub.msvcrt.dll_wcscmp
test eax, eax
jne 0x1d8c3d4d6
mov rax, rsi
lea rdx, [rsp + 0x36]
push r14
emms
emms
pcmpeqd mm4, mm7
push r11
paddusb mm4, mm1
psrlq mm5, 0x32
nop
push r12
minps xmm0, xmm8
pandn mm7, mm3
emms
pop r12
adc r14d, r11d
emms
nop
pop r11
mov r14, 0x16
shl r14b, 0x15
emms
pop r14
xor word [rax], 0x77
push r8
pandn mm2, mm3
nop
movaps xmm11, xmm10
neg r8b
push r13
xorps xmm13, xmm2
psrld mm6, 0x57
ucomiss xmm14, xmm12
nop
pop r13
psrlw mm0, 0x15
movups xmm7, xmm3
pxor mm2, mm0
psllq mm1, 0x16
pop r8
add rax, 2
cmp rax, rdx
jne 0x1d8c3d462
jmp 0x1d8c3d510
push r12
shr r12, 8
nop
andps xmm2, xmm14
push r14
xor r14w, r12w
psrlw mm7, 0x53
emms
push r9
adc r12, r14
paddusw mm3, mm0
nop
pop r9
sbb r14d, 0x14
nop
dec r12
pop r14
dec r12d
shl r12w, 0xc
sub r12d, 0x10
pop r12
push r13
nop
sbb r13b, 2
emms
sar r13w, 0x10
push rax
nop
psrad mm2, 0x4c
neg r13
push rdx
psllq mm6, 0x58
sar eax, 0xe
push rcx
nop
pop rcx
pslld mm4, 4
psraw mm5, 0x48
pop rdx
psrlq mm7, 0x35
neg r13d
nop
pop rax
shl r13b, 1
punpckhbw mm4, mm1
neg r13
emms
pop r13
push r9
nop
push rcx
rcl rcx, 0xe
sub cx, 0xd
push r11
nop
psrad mm2, 0xb
pmaddwd mm6, mm3
pop r11
nop
paddsw mm4, mm5
pop rcx
dec r9d
pop r9
mov dword [rsp + 0x38], r13d
push r14
mov r14, 3
push rbx
rol ebx, 0x15
inc rbx
push r10
ror rbx, 2
mov r10, 0xa
push r15
pmulhuw mm3, mm0
sub rbx, 0x13
push rdx
add r15w, dx
emms
push rcx
nop
emms
pop rcx
shl dl, 0xe
packsswb mm2, mm6
pop rdx
emms
dec r15
pop r15
not bl
punpckhwd mm1, mm7
pop r10
psrlw mm1, 0xb
nop
pop rbx
dec r14
jne 0x1d8c3d581
pop r14
call fcn.1d8c527e7
mov dword [rsp + 0x3c], r12d
push r9
comiss xmm11, xmm10
push rcx
adc r9, rcx
push r13
xor rcx, r9
pop r13
emms
pop rcx
comiss xmm1, xmm4
pop r9
xor edx, edx
mov qword [rsp + 0x40], rdx
push r9
nop
push rcx
rcl rcx, 0xe
sub cx, 0xd
push r11
nop
psrad mm2, 0xb
pmaddwd mm6, mm3
pop r11
nop
paddsw mm4, mm5
pop rcx
dec r9d
pop r9
lea rax, [fcn.1d8c3d3a0]
mov qword [rsp + 0x48], rax
cmp r15b, 2
jne 0x1d8c3d656
push r8
maxps xmm11, xmm5
push r14
neg r8d
not r8b
pop r14
comiss xmm8, xmm11
pop r8
jmp 0x1d8c3d667
push rax
inc rax
push r12
not al
emms
pop r12
comiss xmm3, xmm8
pop rax
push r10
rcl r10, 0xe
push r9
pcmpgtb mm2, mm6
emms
pop r9
inc r10d
pop r10
test ebx, ebx
je 0x1d8c3d7d9
test rbp, rbp
je 0x1d8c3d7d9
cmp r15b, 2
jne 0x1d8c3d6be
push r8
maxps xmm11, xmm5
push r14
neg r8d
not r8b
pop r14
comiss xmm8, xmm11
pop r8
jmp 0x1d8c3d6cf
push rax
inc rax
push r12
not al
emms
pop r12
comiss xmm3, xmm8
pop rax
push r10
rcl r10, 0xe
push r9
pcmpgtb mm2, mm6
emms
pop r9
inc r10d
pop r10
cmp ebx, 0xf
jbe 0x1d8c3d70f
push rax
psrld mm6, 0x33
push rcx
movhlps xmm9, xmm4
push r10
mulps xmm0, xmm8
push rbx
nop
pop rbx
psraw mm5, 0x32
pop r10
neg rax
pop rcx
ror rax, 0xd
pop rax
mov ebx, 0xf
push r12
psrlq mm0, 0x1e
por mm4, mm5
maxss xmm14, xmm13
psraw mm1, 0x62
neg r12
pxor mm4, mm0
nop
pop r12
mov dword [rsp + 0x50], ebx
push r12
movlhps xmm11, xmm6
inc r12
packuswb mm2, mm7
emms
pmaddwd mm3, mm6
inc r12
rcpps xmm15, xmm14
emms
emms
paddusw mm7, mm4
sar r12, 7
nop
pop r12
mov ecx, 0x20
call sub.msvcrt.dll_malloc
mov rcx, rax
xor eax, eax
cmp r15, rax
jne 0x1d8c3d770
push rdx
rcl rdx, 0xf
pop rdx
jmp 0x1d8c3d775
push r14
nop
pop r14
push r8
dec r8d
pop r8
xor qword [rcx + rax*8], 0x78
push r12
packuswb mm7, mm1
push rcx
sbb r12, 9
push rbx
adc ebx, ecx
pop rbx
emms
pop rcx
subss xmm14, xmm1
pop r12
inc rax
cmp rax, 4
jne 0x1d8c3d763
call sub.msvcrt.dll_free
push r9
dec r9
nop
mulss xmm3, xmm0
nop
psllq mm3, 0x46
ror r9, 0xa
sbb r9w, 5
pop r9
mov edx, ebx
lea rcx, [rsp + 0x58]
mov r8, rbp
shl rdx, 3
mov r9, rdx
call fcn.1d8c49ac2
jmp 0x1d8c3d82a
push r13
neg r13
paddd mm4, mm3
dec r13d
shl r13, 0x14
push r12
paddb mm6, mm4
nop
sbb r13b, 0x16
push r14
emms
add r14b, r12b
push r11
movlhps xmm11, xmm2
pop r11
mov r12b, 7
shl r13d, 3
pop r14
inc r13
psadbw mm1, mm6
pcmpgtb mm5, mm7
pop r12
nop
mov r13w, 0xa
punpcklwd mm2, mm6
pslld mm5, 0x61
pop r13
xor eax, eax
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x28], 0x7e472e71
mov word [rsp + 0x2c], 0x50
push r13
psrld mm5, 0x55
psrlq mm5, 0x2e
psraw mm0, 0x41
psrlq mm0, 0x22
push r15
psubusw mm2, mm6
pmulhuw mm4, mm0
orps xmm9, xmm2
psllq mm2, 0x49
pop r15
pslld mm0, 0x4f
emms
pcmpeqd mm5, mm2
paddsw mm5, mm6
pop r13
mov dword [rsp + 0x2e], 0x345a3638
mov word [rsp + 0x32], 0x40
cmp r15w, 0x13
jne 0x1d8c3d890
push r12
subss xmm3, xmm6
pop r12
jmp 0x1d8c3d897
push r13
dec r13d
pop r13
push r10
mulss xmm8, xmm3
pop r10
lea rcx, [rsp + 0x28]
mov rdx, rsi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x1d8c3d8d6
push rcx
nop
push r9
movaps xmm14, xmm15
punpckhwd mm0, mm1
push r14
and r9, r14
not r14b
mulps xmm6, xmm2
pop r14
shl cl, 5
ucomiss xmm11, xmm0
pop r9
nop
pop rcx
jmp 0x1d8c3d907
mov rax, rsi
lea rdx, [rsp + 0x33]
push r13
punpckldq mm2, mm5
push rcx
pmaxsw mm3, mm1
push rbx
neg r13
pop rbx
rcpps xmm8, xmm3
pop rcx
xorps xmm7, xmm2
pop r13
xor byte [rax], 0x17
push rdx
shl dx, 2
pop rdx
inc rax
cmp rax, rdx
jne 0x1d8c3d8de
push r13
andps xmm15, xmm5
neg r13b
push rax
movhlps xmm6, xmm4
rcpps xmm6, xmm7
push rdx
not r13
psrld mm0, 0x3d
push r9
ucomiss xmm5, xmm15
nop
pop r9
neg r13d
psrlw mm5, 0x3a
pop rdx
ror r13d, 0x12
dec rax
pop rax
psubw mm6, mm5
addps xmm9, xmm7
pop r13
mov rcx, rdi
call fcn.1d8c4e4ea
nop
add rsp, 0xd8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret