Function at 0x1800174e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rax - 0x158]
sub rsp, 0x240
xorps xmm0, xmm0
mov dword [rbp - 0x50], 0x690057
xorps xmm1, xmm1
mov dword [rbp - 0x4c], 0x64006e
xor r12d, r12d
mov dword [rbp - 0x48], 0x77006f
movups xmmword [rsp + 0x48], xmm0
xor eax, eax
mov rbx, rcx
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rax
movdqa xmm0, xmmword [str.LdrProcessInitiaLdrFastFailInLoalizationCompleteRtlLeaveCritical_]
movdqa xmmword [rbp + 0xe0], xmm0
movdqa xmm0, xmmword [0x1800227b0]
movups xmmword [rbp + 0xb0], xmm1
mov qword [rbp + 0xd0], rax
movups xmmword [rbp + 0xc0], xmm1
mov dword [rbp - 0x44], 0x200073
movdqa xmm1, xmmword [0x1800227c0]
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rbp - 0x40], 0x310031
mov word [rbp - 0x3c], r12w
mov dword [rbp - 0x10], 0x690057
mov dword [rbp - 0xc], 0x64006e
mov dword [rbp - 8], 0x77006f
mov dword [rbp - 4], 0x200073
mov dword [rbp], 0x300031
mov word [rbp + 4], r12w
mov dword [rsp + 0x70], 0x690057
mov dword [rsp + 0x74], 0x64006e
mov dword [rsp + 0x78], 0x77006f
mov dword [rsp + 0x7c], 0x200073
mov dword [rbp - 0x80], 0x2e0038
mov dword [rbp - 0x7c], 0x31
mov dword [rbp + 0x30], 0x690057
mov dword [rbp + 0x34], 0x64006e
mov dword [rbp + 0x38], 0x77006f
mov dword [rbp + 0x3c], 0x200073
mov dword [rbp + 0x40], 0x38
mov dword [rbp + 0x70], 0x690057
mov dword [rbp + 0x74], 0x64006e
mov dword [rbp + 0x78], 0x77006f
mov dword [rbp + 0x7c], 0x200073
mov dword [rbp + 0x80], 0x37
movdqa xmmword [rbp + 0xf0], xmm1
mov byte [rbp + 0x100], r12b
mov dword [rsp + 0x30], 0x43726564
mov dword [rsp + 0x34], 0x6f6c6c61
mov word [rsp + 0x38], 0x7475
mov byte [rsp + 0x3a], r12b
call fcn.180017b8c
test eax, eax
je 0x18001782e
lea rdx, [rsp + 0x48]
mov rcx, rbx
call fcn.180017980
lea rdx, [rbp + 0xb0]
mov rcx, rbx
call fcn.18001788c
lea rcx, [rbp + 0xb0]
call fcn.180017858
mov edi, eax
cmp eax, 0xffffffff
je 0x18001782e
lea rcx, [rsp + 0x48]
lea r8, [rbp - 0x50]
sub r8, rcx
lea esi, [r12 + 2]
movzx edx, word [rcx]
movzx r9d, word [rcx + r8]
sub edx, r9d
jne 0x1800176b6
add rcx, rsi
test r9d, r9d
jne 0x1800176a1
test edx, edx
je 0x1800177f9
lea rax, [rsp + 0x48]
lea rdx, [rbp - 0x10]
sub rdx, rax
movzx ecx, word [rax]
movzx r8d, word [rax + rdx]
sub ecx, r8d
jne 0x1800176df
add rax, rsi
test r8d, r8d
jne 0x1800176ca
test ecx, ecx
je 0x1800177f9
lea rax, [rsp + 0x48]
lea rdx, [rsp + 0x70]
sub rdx, rax
movzx ecx, word [rax]
movzx r8d, word [rax + rdx]
sub ecx, r8d
jne 0x180017709
add rax, rsi
test r8d, r8d
jne 0x1800176f4
test ecx, ecx
je 0x18001775b
lea rax, [rsp + 0x48]
lea rdx, [rbp + 0x30]
sub rdx, rax
movzx ecx, word [rax]
movzx r8d, word [rax + rdx]
sub ecx, r8d
jne 0x18001772e
add rax, rsi
test r8d, r8d
jne 0x180017719
test ecx, ecx
je 0x18001775b
lea rax, [rsp + 0x48]
lea rdx, [rbp + 0x70]
sub rdx, rax
movzx ecx, word [rax]
movzx r8d, word [rax + rdx]
sub ecx, r8d
jne 0x180017753
add rax, rsi
test r8d, r8d
jne 0x18001773e
test ecx, ecx
jne 0x18001782e
lea rdx, [rbp + 0xe0]
mov rcx, rbx
push rdx
call 0x18007b9a1
mov rcx, rax
test rax, rax
je 0x18001782e
lea rax, [rsp + 0x48]
lea r8, [rsp + 0x70]
sub r8, rax
movzx edx, word [rax]
movzx r9d, word [rax + r8]
sub edx, r9d
jne 0x180017799
add rax, rsi
test r9d, r9d
jne 0x180017784
test edx, edx
je 0x1800177f0
lea rax, [rsp + 0x48]
lea r8, [rbp + 0x30]
sub r8, rax
movzx edx, word [rax]
movzx r9d, word [rax + r8]
sub edx, r9d
jne 0x1800177be
add rax, rsi
test r9d, r9d
jne 0x1800177a9
test edx, edx
je 0x1800177f0
lea rax, [rsp + 0x48]
lea r8, [rbp + 0x70]
sub r8, rax
movzx edx, word [rax]
movzx r9d, word [rax + r8]
sub edx, r9d
jne 0x1800177e3
add rax, rsi
test r9d, r9d
jne 0x1800177ce
test edx, edx
jne 0x18001782e
mov eax, dword [rcx + 3]
mov dword [rax + rcx + 8], esi
jmp 0x180017827
mov eax, dword [rcx + 0x15]
mov dword [rax + rcx + 0x19], esi
jmp 0x180017827
lea rdx, [rsp + 0x20]
mov rcx, rbx
call 0x1800312d7
int3
mov eax, 1
jmp 0x180017830
xor eax, eax
lea r11, [rsp + 0x240]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret