Function at 0x180002f80
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [0x18027af10]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov qword [rsp + 0x20], rcx
mov r14d, 0x3bd
lea r13, [0x18021e3e0]
lea rdi, [0x18021e3e1]
lea rsi, [0x18021e3e2]
lea r12, str.vve_V_GPQ6K
mov ebx, 0x3d0924
mov r15d, 0x6e80
dec edx
je 0x180002ff5
dec edx
je 0x1800031ed
jmp 0x1800033a7
mov dword [rsp + 0x28], 0x76563977
mov dword [rbp - 0x7d], 0x56256575
mov dword [rbp - 0x79], 0x5150472b
mov dword [rbp - 0x75], 0x4b365e2a
mov dword [rbp - 0x71], 0x3f394235
mov dword [rbp - 0x6d], 0x77664366
mov byte [rbp - 0x69], 0
mov rdx, rbx
nop word [rax + rax]
xor eax, eax
lea rcx, [rbp - 0x59]
nop word [rax + rax]
mov byte [rcx], al
inc eax
lea rcx, [rcx + 1]
cmp eax, 0x72
jb 0x180003040
dec rdx
jne 0x180003030
cmp byte [rbp - 0x18], 0x41
jne 0x1800031ed
xor ecx, ecx
mov edx, 0x1ba00
mov r8d, 0x3000
lea r9d, [rcx + 4]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
movsx edx, byte [rbp]
mov r11, rdi
mov rdi, rsi
mov ecx, r14d
xor edx, 0x3e5
sub ecx, edx
mov rsi, r12
mov r10, r13
sub r11, rax
sub rdi, rax
sub r10, rax
movsxd r15, ecx
mov r8, rax
mov r14d, 2
mov r9, rax
sub rsi, rax
movabs rbx, 0x47ae147ae147ae15
mov r12d, 0x6e80
nop dword [rax]
lea eax, [r14 - 2]
lea r9, [r9 + 4]
movsxd rcx, eax
mov rax, rbx
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0x19
sub rcx, rax
imul rcx, r15
movzx eax, byte [rsp + rcx + 0x28]
xor al, byte [r9 + r10 - 4]
mov byte [r9 - 4], al
lea eax, [r14 - 1]
movsxd rcx, eax
mov rax, rbx
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0x19
sub rcx, rax
imul rcx, r15
movzx eax, byte [rsp + rcx + 0x28]
movsxd rcx, r14d
xor al, byte [r9 + r11 - 4]
mov byte [r9 - 3], al
mov rax, rbx
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0x19
sub rcx, rax
imul rcx, r15
movzx eax, byte [rsp + rcx + 0x28]
xor al, byte [r9 + rdi - 4]
mov byte [r9 - 2], al
lea eax, [r14 + 1]
add r14d, 4
movsxd rcx, eax
mov rax, rbx
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0x19
sub rcx, rax
imul rcx, r15
movzx eax, byte [rsp + rcx + 0x28]
xor al, byte [r9 + rsi - 4]
mov byte [r9 - 1], al
dec r12
jne 0x1800030c0
mov rdx, r8
call fcn.180002eb0
mov rcx, qword [rsp + 0x20]
lea edx, [r12 + 1]
xor r8d, r8d
mov qword [0x18028cc60], rax
call qword [0x18028cc70]
mov ebx, 0x3d0924
lea rdi, [0x18021e3e1]
lea rsi, [0x18021e3e2]
lea r12, str.vve_V_GPQ6K
mov r14d, 0x3bd
mov r15d, 0x6e80
mov dword [rsp + 0x28], 0x76563977
mov dword [rbp - 0x7d], 0x56256575
mov dword [rbp - 0x79], 0x5150472b
mov dword [rbp - 0x75], 0x4b365e2a
mov dword [rbp - 0x71], 0x3f394235
mov dword [rbp - 0x6d], 0x77664366
mov byte [rbp - 0x69], 0
nop dword [rax]
xor eax, eax
lea rcx, [rbp - 0x59]
nop word [rax + rax]
mov byte [rcx], al
inc eax
lea rcx, [rcx + 1]
cmp eax, 0x72
jb 0x180003230
dec rbx
jne 0x180003220
cmp byte [rbp - 0x18], 0x41
jne 0x1800033a7
lea r9d, [rbx + 4]
mov edx, 0x1ba00
xor ecx, ecx
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
movsx ecx, byte [rbp]
mov r10d, 2
xor ecx, 0x3e5
sub r13, rax
sub rdi, rax
sub r14d, ecx
sub rsi, rax
mov r11, rax
movsxd rbx, r14d
movabs r14, 0x47ae147ae147ae15
mov r9, rax
sub r12, rax
nop word [rax + rax]
lea eax, [r10 - 2]
lea r9, [r9 + 4]
movsxd rcx, eax
mov rax, r14
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0x19
sub rcx, rax
imul rcx, rbx
movzx eax, byte [rsp + rcx + 0x28]
xor al, byte [r13 + r9 - 4]
mov byte [r9 - 4], al
lea eax, [r10 - 1]
movsxd rcx, eax
mov rax, r14
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0x19
sub rcx, rax
imul rcx, rbx
movzx eax, byte [rsp + rcx + 0x28]
movsxd rcx, r10d
xor al, byte [rdi + r9 - 4]
mov byte [r9 - 3], al
mov rax, r14
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0x19
sub rcx, rax
imul rcx, rbx
movzx eax, byte [rsp + rcx + 0x28]
xor al, byte [rsi + r9 - 4]
mov byte [r9 - 2], al
lea eax, [r10 + 1]
add r10d, 4
movsxd r8, eax
mov rax, r14
mul r8
mov rax, r8
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0x19
sub r8, rax
imul r8, rbx
movzx eax, byte [rsp + r8 + 0x28]
xor al, byte [r12 + r9 - 4]
mov byte [r9 - 1], al
dec r15
jne 0x1800032a0
mov rdx, r11
call fcn.180002eb0
mov rcx, qword [rsp + 0x20]
lea edx, [r15 + 2]
xor r8d, r8d
mov qword [0x18028cc60], rax
call qword [0x18028cc70]
mov eax, 1
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.180190680
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret