Function at 0x1800030a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x20]
sub rsp, 0x120
mov rsi, r8
mov r14, rdx
mov rbx, rcx
mov dword [rbp - 0x20], 0x18
mov dword [rsp + 0x54], 0x6f63673d
mov dword [rsp + 0x58], 0x64605e61
mov dword [rsp + 0x5c], 0x54455674
mov dword [rsp + 0x60], 0x6c666257
mov dword [rsp + 0x64], 0x4cac6262
mov dword [rsp + 0x68], 0x747e487f
mov dword [rsp + 0x6c], 0x7171757e
mov byte [rsp + 0x70], 0xe2
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x71], xmm0
mov byte [rbp - 0x7f], al
xor r9d, r9d
movabs r11, 0x6624bda9cc95d5c0
mov r10, r11
lea rax, [rsp + 0x54]
sub r10, rax
nop dword [rax]
lea r8, [rsp + 0x54]
add r8, r9
movzx ecx, byte [r8]
lea eax, [r9 - 0x41]
and al, cl
add al, al
sub cl, al
sub cl, 0x7a
add cl, r9b
mov byte [r8], cl
movzx edx, byte [r8 + 1]
lea rax, [r8 + r10]
and rax, rdx
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r11
add rcx, r9
sub cl, 0x39
mov byte [r8 + 1], cl
add r9, 2
cmp r9, 0x2e
jb 0x180003130
mov dword [rsp + 0x40], 0xc0aebde5
mov dword [rsp + 0x44], 0xd1146b2
mov dword [rsp + 0x48], 0x4f4c4508
mov byte [rsp + 0x4c], 0xda
xor eax, eax
mov dword [rsp + 0x4d], eax
mov word [rsp + 0x51], ax
xor r9d, r9d
movabs r11, 0x136a26b8e184c9fb
mov r10, r11
lea rax, [rsp + 0x40]
sub r10, rax
nop dword [rax]
lea r8, [rsp + 0x40]
add r8, r9
movzx edx, byte [r8]
lea rax, [r8 + r10]
and rax, rdx
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r11
add rcx, r9
add cl, 0x23
mov byte [r8], cl
inc r9
cmp r9, 0x13
jb 0x1800031c0
lea rcx, [rsp + 0x40]
call fcn.180009bb0
lea rdx, [rsp + 0x54]
mov rcx, rax
call fcn.1800096f0
mov edx, 1
lea rcx, [rbp - 8]
call rax
mov dword [rsp + 0x54], 0x5e786e5b
mov dword [rsp + 0x58], 0x717b6c69
mov dword [rsp + 0x5c], 0x470b7179
mov dword [rsp + 0x60], 0x69657461
mov dword [rsp + 0x64], 0x62686561
mov dword [rsp + 0x68], 0x727f5d6c
mov word [rsp + 0x6c], 0x9d6a
xor eax, eax
mov qword [rsp + 0x6e], rax
mov byte [rsp + 0x76], al
xor r9d, r9d
movabs r11, 0x9cb97ef4209cd6c1
mov r10, r11
lea rax, [rsp + 0x54]
sub r10, rax
nop dword [rax + rax]
lea r8, [rsp + 0x54]
add r8, r9
movzx edx, byte [r8]
lea rax, [r8 + r10]
and rax, rdx
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r11
add rcx, r9
sub cl, 0x47
mov byte [r8], cl
inc r9
cmp r9, 0x23
jb 0x180003270
mov dword [rbp - 0x78], 0x704e7d95
mov dword [rbp - 0x74], 0x8d817642
mov dword [rbp - 0x70], 0x4f4c7588
mov byte [rbp - 0x6c], 0xda
xor eax, eax
mov qword [rbp - 0x6b], rax
mov dword [rbp - 0x63], eax
mov word [rbp - 0x5f], ax
xor r9d, r9d
movabs r11, 0xf02d495f03add163
mov r10, r11
lea rax, [rbp - 0x78]
sub r10, rax
nop dword [rax]
lea r8, [rbp - 0x78]
add r8, r9
movzx edx, byte [r8]
lea rax, [r8 + r10]
and rax, rdx
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r11
add rcx, r9
add cl, 0x4b
mov byte [r8], cl
inc r9
cmp r9, 0x1b
jb 0x1800032e0
lea rcx, [rbp - 0x78]
call fcn.180009bb0
lea rdx, [rsp + 0x54]
mov rcx, rax
call fcn.1800096f0
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
lea rcx, [rbp - 8]
call rax
lea rax, [rbp - 8]
mov qword [rbp - 0x18], rax
mov dword [rbp - 0x10], 1
mov dword [rbp - 0x58], 0x585fab73
mov dword [rbp - 0x54], 0x547a5aae
mov dword [rbp - 0x50], 0x23594652
xor eax, eax
mov qword [rbp - 0x4c], rax
mov word [rbp - 0x44], ax
mov byte [rbp - 0x42], al
xor r9d, r9d
movabs r11, 0xac7b6e9ddf5a1127
mov r10, r11
lea rax, [rbp - 0x58]
sub r10, rax
nop dword [rax]
lea r8, [rbp - 0x58]
add r8, r9
movzx edx, byte [r8]
lea rax, [r8 + r10]
and rax, rdx
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r11
add rcx, r9
sub cl, 0x11
mov byte [r8], cl
inc r9
cmp r9, 0x17
jb 0x180003380
mov dword [rsp + 0x40], 0x8d888483
mov dword [rsp + 0x44], 0x45458189
mov dword [rsp + 0x48], 0x87868d46
mov byte [rsp + 0x4c], 0xc
xor eax, eax
mov dword [rsp + 0x4d], eax
mov word [rsp + 0x51], ax
mov byte [rsp + 0x53], al
xor r9d, r9d
movabs r11, 0xb87a77e0cdbd5d04
mov r10, r11
lea rax, [rsp + 0x40]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
lea r8, [rsp + 0x40]
add r8, r9
movzx edx, byte [r8]
lea rax, [r8 + r10]
and rax, rdx
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r11
add rcx, r9
sub cl, 0x1c
mov byte [r8], cl
inc r9
cmp r9, 0x14
jb 0x180003400
lea rcx, [rsp + 0x40]
call fcn.180009bb0
lea rdx, [rbp - 0x58]
mov rcx, rax
call fcn.1800096f0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
lea r9, [rbp - 0x20]
mov edx, 0xc0000000
mov r8d, 1
mov rcx, qword [rbx]
call rax
mov rdi, rax
mov qword [rbp - 0x78], rax
mov rcx, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 0x70], rcx
mov byte [rbp - 0x68], 1
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x1800035ed
mov dword [rbp + 0x40], 0
mov dword [rsp + 0x54], 0x57434b77
mov dword [rsp + 0x58], 0x434f6b49
mov word [rsp + 0x5c], 0xd14d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x5e], xmm0
mov dword [rsp + 0x6e], eax
mov word [rsp + 0x72], ax
xor r9d, r9d
movabs r11, 0xd053e6d7d6b2aae5
mov r10, r11
lea rax, [rsp + 0x54]
sub r10, rax
nop
lea r8, [rsp + 0x54]
add r8, r9
movzx edx, byte [r8]
lea ecx, [r9 - 0x1c]
and cl, dl
add cl, cl
movzx eax, r9b
sub al, cl
sub dl, 0x58
add al, dl
mov byte [r8], al
movzx edx, byte [r8 + 1]
lea rax, [r8 + r10]
and rax, rdx
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r11
add rcx, r9
sub cl, 0x3c
mov byte [r8 + 1], cl
add r9, 2
cmp r9, 0x20
jb 0x1800034e0
mov dword [rbp - 0x41], 0x958a9e9b
mov dword [rbp - 0x3d], 0xcdc9919d
mov dword [rbp - 0x39], 0xafaca5d0
mov byte [rbp - 0x35], 2
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x34], xmm0
mov word [rbp - 0x24], ax
mov byte [rbp - 0x22], al
xor r9d, r9d
movabs r11, 0x40f55096ac136a58
mov r10, r11
lea rax, [rbp - 0x41]
sub r10, rax
nop dword [rax]
lea r8, [rbp - 0x41]
add r8, r9
movzx edx, byte [r8]
lea ecx, [r9 + 0x57]
and cl, dl
add cl, cl
movzx eax, r9b
sub al, cl
sub dl, 0xa
add al, dl
mov byte [r8], al
movzx edx, byte [r8 + 1]
lea rax, [r8 + r10]
and rax, rdx
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r11
add rcx, r9
sub cl, 0x61
mov byte [r8 + 1], cl
add r9, 2
cmp r9, 0x20
jb 0x180003570
lea rcx, [rbp - 0x41]
call fcn.180009bb0
lea rdx, [rsp + 0x54]
mov rcx, rax
call fcn.1800096f0
mov qword [rsp + 0x20], 0
lea r9, [rbp + 0x40]
mov r8d, esi
mov rdx, r14
mov rcx, rdi
call rax
mov bl, 1
jmp 0x1800035ef
xor bl, bl
test rdi, rdi
je 0x1800035fe
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
movzx eax, bl
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret