Function at 0x180001f50
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x4c0]
sub rsp, 0x5c0
lea rax, [0x1800023a0]
mov dword [rsp + 0x78], 0xf0e48348
xor edx, edx
mov qword [rbp - 0x75], rax
mov r8d, pe_nt_image_headers64
mov dword [rsp + 0x7c], 0x20ec8348
lea rcx, [rbp - 0x60]
mov dword [rbp - 0x80], 0xe8
mov dword [rbp - 0x7c], 0x25ff00
mov word [rbp - 0x78], 0
mov byte [rbp - 0x76], 0
call fcn.180019ff0
xor esi, esi
mov dword [rsp + 0x47], 0xde342dd4
xor eax, eax
mov dword [rbp + 0x4f0], esi
xorps xmm0, xmm0
mov dword [rsp + 0x70], eax
mov word [rsp + 0x74], ax
mov r8d, esi
mov dword [rsp + 0x4b], 0x50504dc1
mov dword [rsp + 0x4f], 0x57b5464c
mov dword [rsp + 0x53], 0x954148b9
mov dword [rsp + 0x57], 0xbf454cb5
mov dword [rsp + 0x5b], 0x5051ae40
mov byte [rsp + 0x5f], 0xce
movups xmmword [rsp + 0x60], xmm0
movzx ecx, byte [rsp + r8 + 0x47]
lea edx, [r8 - 0x45]
movzx eax, dl
and al, cl
add al, al
sub dl, al
sub dl, 0x1d
add dl, cl
mov byte [rsp + r8 + 0x47], dl
inc r8
cmp r8, 0x2f
jb 0x180002001
xor eax, eax
mov dword [rsp + 0x30], 0x477c4d40
mov qword [rsp + 0x3a], rax
mov r8, rsi
mov dword [rsp + 0x42], eax
mov byte [rsp + 0x46], al
mov dword [rsp + 0x34], 0x4b708b46
mov word [rsp + 0x38], 0xd94a
movzx ecx, byte [rsp + r8 + 0x30]
lea edx, [r8 + 0x63]
movzx eax, dl
and al, cl
add al, al
sub dl, al
add dl, 0x4b
add dl, cl
mov byte [rsp + r8 + 0x30], dl
inc r8
cmp r8, 0x17
jb 0x180002050
lea rcx, [rsp + 0x30]
call fcn.180009bb0
lea rdx, [rsp + 0x47]
mov rcx, rax
call fcn.1800096f0
mov edx, 0x20
lea r9, [rbp + 0x4f0]
lea r8, [rbp - 0x60]
lea ecx, [rdx - 0x1e]
call rax
xor ecx, ecx
movzx edi, ax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
xor edx, edx
lea rcx, [rbp + 0x2b0]
mov r8d, 0x208
mov rbx, rax
call fcn.180019ff0
mov r8d, 0x104
lea rdx, [rbp + 0x2b0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov r14d, esi
test rdi, rdi
je 0x180002362
mov rbx, rsi
nop dword [rax]
xor edx, edx
lea rcx, [rbp + 0xa0]
mov r8d, 0x208
call fcn.180019ff0
mov rdx, qword [rbp + rbx*8 - 0x60]
lea r8, [rbp + 0x500]
mov ecx, 4
mov qword [rbp + 0x500], rsi
call qword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
mov rcx, qword [rbp + 0x500]
lea rdx, [rbp + 0xa0]
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x2b0]
call fcn.180023ea8
test eax, eax
je 0x18000216c
inc r14d
inc rbx
cmp rbx, rdi
jl 0x1800020f0
add rsp, 0x5c0
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
movsxd rax, r14d
mov r8, rsi
mov dword [rbp + 0x4f8], esi
mov dword [rsp + 0x47], 0x8f827a68
mov dword [rsp + 0x4b], 0x6f887e8d
mov rdi, qword [rbp + rax*8 - 0x60]
xor eax, eax
mov qword [rsp + 0x56], rax
mov dword [rsp + 0x5e], eax
mov dword [rsp + 0x4f], 0x7484888c
mov word [rsp + 0x53], 0x9977
mov byte [rsp + 0x55], 4
nop dword [rax]
movzx ecx, byte [rsp + r8 + 0x47]
lea edx, [r8 + 3]
movzx eax, dl
and al, cl
add al, al
sub dl, al
sub dl, 0x15
add dl, cl
mov byte [rsp + r8 + 0x47], dl
inc r8
cmp r8, 0x1b
jb 0x1800021b0
xor eax, eax
mov dword [rsp + 0x30], 0x6d70646b
mov dword [rsp + 0x3d], eax
mov r8, rsi
mov word [rsp + 0x41], ax
mov dword [rsp + 0x34], 0x35356961
mov dword [rsp + 0x38], 0x67666d26
mov byte [rsp + 0x3c], 0xc
nop dword [rax]
nop word [rax + rax]
movzx edx, byte [rsp + r8 + 0x30]
movzx ecx, r8b
and cl, dl
movzx eax, r8b
add cl, cl
sub al, cl
add al, dl
mov byte [rsp + r8 + 0x30], al
inc r8
cmp r8, 0x13
jb 0x180002210
lea rcx, [rsp + 0x30]
call fcn.180009bb0
lea rdx, [rsp + 0x47]
mov rcx, rax
call fcn.1800096f0
mov edx, 0x1b
lea r9, [rbp + 0x4f8]
mov rcx, rdi
lea r8d, [rdx + 0x25]
call rax
xorps xmm0, xmm0
mov qword [rbp + 0x508], rsi
xor eax, eax
mov dword [rsp + 0x47], 0xb783b397
movups xmmword [rsp + 0x5a], xmm0
mov word [rsp + 0x6a], ax
mov r8, rsi
mov dword [rsp + 0x4b], 0x84889985
mov dword [rsp + 0x4f], 0x8c8db8bb
mov dword [rsp + 0x53], 0x8c8bbca5
mov word [rsp + 0x57], 0x8482
mov byte [rsp + 0x59], 0x1a
nop word [rax + rax]
movzx ecx, byte [rsp + r8 + 0x47]
lea edx, [r8 + 0x5a]
movzx eax, dl
and al, cl
add al, al
sub dl, al
sub dl, 0x76
add dl, cl
mov byte [rsp + r8 + 0x47], dl
inc r8
cmp r8, 0x25
jb 0x1800022b0
xor eax, eax
mov dword [rsp + 0x30], 0xd9c2cecb
mov dword [rsp + 0x3d], eax
mov byte [rsp + 0x41], al
mov dword [rsp + 0x34], 0x999dd5d1
mov dword [rsp + 0x38], 0xdfd0a99c
mov byte [rsp + 0x3c], 0x42
nop dword [rax]
movzx ecx, byte [rsp + rsi + 0x30]
lea edx, [rsi + 0xd]
movzx eax, dl
and al, cl
add al, al
sub dl, al
sub dl, 0x5b
add dl, cl
mov byte [rsp + rsi + 0x30], dl
inc rsi
cmp rsi, 0x12
jb 0x180002300
lea rcx, [rsp + 0x30]
call fcn.180009bb0
lea rdx, [rsp + 0x47]
mov rcx, rax
call fcn.1800096f0
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea rcx, [rbp + 0x508]
mov r9d, 0x1b
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0x78]
mov rcx, rax
mov rdx, rdi
call rbx
add rsp, 0x5c0
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret