Function at 0x180001650
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xd0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov r15, rdx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rbx, rax
test rax, rax
jne 0x180001797
mov byte [rbp - 0x59], 0xe6
mov byte [rbp - 0x58], 0xce
mov byte [rbp - 0x57], 0xc3
mov byte [rbp - 0x56], 0xc0
mov byte [rbp - 0x55], 0xc9
mov byte [rbp - 0x54], 0xc7
mov byte [rbp - 0x53], 0x81
mov byte [rbp - 0x52], 0xdf
mov byte [rbp - 0x51], 0xc3
mov byte [rbp - 0x50], 0x8e
mov byte [rbp - 0x4f], 0xc6
mov byte [rbp - 0x4e], 0xc7
mov byte [rbp - 0x4d], 0xc4
mov byte [rbp - 0x4c], 0x98
mov byte [rbp - 0x4b], 0xde
mov byte [rbp - 0x4a], 0xd5
mov byte [rbp - 0x49], 0xd4
mov byte [rbp - 0x48], 0xca
mov byte [rbp - 0x47], 0xd6
mov byte [rbp - 0x46], 0xd9
mov byte [rbp - 0x45], 0x9c
mov byte [rbp - 0x44], 0xdb
mov byte [rbp - 0x43], 0xd0
mov byte [rbp - 0x42], 0xd5
mov byte [rbp - 0x41], 0xd8
mov byte [rbp - 0x40], 0xd2
mov byte [rbp - 0x3f], 0xd4
mov byte [rbp - 0x3e], 0x9c
mov byte [rbp - 0x3d], 0xc0
movzx eax, byte [rbp - 0x59]
xor esi, esi
movabs r11, 0x9190df300ba4bca4
mov r10, r11
lea rax, [rbp - 0x59]
sub r10, rax
lea eax, [rbx + 0xf]
nop dword [rax + rax]
lea r8, [rbp - 0x59]
add r8, rsi
movzx r9d, byte [r8]
mov rcx, rsi
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, rax
shl cl, 2
mov rdx, r11
shr rdx, cl
and dl, 0xf
lea eax, [r8 + r10]
xor dl, al
xor dl, r9b
mov byte [rbp + rsi - 0x59], dl
inc rsi
cmp rsi, 0x1d
mov eax, 0xf
jb 0x180001730
lea rdx, [rbp - 0x59]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.18000cbf0
mov rcx, rax
lea rdx, [0x18000cdc0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor eax, eax
jmp 0x180001ae2
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov r9d, 0x18
lea r8, [rbp - 0x21]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
mov r14, qword [rbp - 0x21]
mov qword [rbp - 0x31], r14
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xor esi, esi
mov r10d, esi
mov qword [rbp - 9], rsi
mov edi, esi
mov qword [rbp - 1], rsi
mov r12d, esi
mov qword [rbp + 7], rsi
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [r15 + rax], 0
jne 0x1800017e0
mov ebx, 0xf
test rax, rax
je 0x18000195f
lea r14, [r15 + 1]
mov rdx, r15
not rdx
mov qword [rbp - 0x39], rdx
movzx eax, byte [r14 - 1]
cmp al, 0x3f
jne 0x180001849
cmp byte [r14], al
jne 0x180001849
mov byte [rbp - 0x79], 0
cmp rdi, r12
je 0x18000182c
mov byte [rdi], 0
inc rdi
mov qword [rbp - 1], rdi
jmp 0x180001932
lea r8, [rbp - 0x79]
mov rdx, rdi
lea rcx, [rbp - 9]
call fcn.18000d680
mov r12, qword [rbp + 7]
mov rdi, qword [rbp - 1]
jmp 0x18000192e
mov byte [rbp - 0x75], al
movzx eax, byte [r14]
mov byte [rbp - 0x74], al
xorps xmm0, xmm0
movups xmmword [rbp + 0xf], xmm0
mov qword [rbp + 0x1f], rsi
mov qword [rbp + 0x27], rsi
mov r8d, 2
lea rdx, [rbp - 0x75]
lea rcx, [rbp + 0xf]
call fcn.18000d0e0
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov r13, rax
lea rbx, [rbp + 0xf]
cmp qword [rbp + 0x27], 0xf
cmova rbx, qword [rbp + 0xf]
mov dword [rax], esi
mov r8d, 0x10
lea rdx, [rbp - 0x29]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
cmp rbx, qword [rbp - 0x29]
je 0x1800019b9
cmp dword [r13], 0x22
je 0x1800019ab
mov byte [rbp - 0x78], al
cmp rdi, r12
je 0x1800018ca
mov byte [rdi], al
inc rdi
mov qword [rbp - 1], rdi
jmp 0x1800018e2
lea r8, [rbp - 0x78]
mov rdx, rdi
lea rcx, [rbp - 9]
call fcn.18000d680
mov r12, qword [rbp + 7]
mov rdi, qword [rbp - 1]
mov rdx, qword [rbp + 0x27]
cmp rdx, 0xf
jbe 0x18000191d
inc rdx
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180001918
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800019a4
call fcn.18000d830
mov qword [rbp + 0x1f], rsi
mov ebx, 0xf
mov qword [rbp + 0x27], rbx
mov byte [rbp + 0xf], 0
mov rdx, qword [rbp - 0x39]
add r14, 3
mov rcx, 0xffffffffffffffff
nop dword [rax]
inc rcx
cmp byte [r15 + rcx], 0
jne 0x180001940
lea rax, [rdx + r14]
cmp rax, rcx
jb 0x180001806
mov r10, qword [rbp - 9]
mov r14, qword [rbp - 0x31]
sub rdi, r10
mov r11d, dword [rbp - 0x19]
cmp r11, rdi
je 0x1800019db
mov rdx, r14
mov r8, r10
sub r8, r14
mov r9, rsi
test rdi, rdi
je 0x18000199b
mov rax, rdx
nop
movzx ecx, byte [r8 + rax]
test cl, cl
je 0x18000198d
cmp cl, byte [rax]
jne 0x1800019c7
inc rax
mov rcx, rax
sub rcx, rdx
cmp rcx, rdi
jb 0x180001980
lea rsi, [r9 + r14]
jmp 0x180001aa4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rcx, str.stoi_argument_out_of_range
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const____ptr64_]
int3
lea rcx, str.invalid_stoi_argument
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xinvalid_argument_char_const____ptr64_]
nop
inc r9
dec r8
inc rdx
mov rax, r11
sub rax, rdi
cmp r9, rax
jb 0x18000197c
mov byte [rbp - 0x71], 0x70
mov byte [rbp - 0x70], 0x4e
mov byte [rbp - 0x6f], 0x5a
mov byte [rbp - 0x6e], 0x56
mov byte [rbp - 0x6d], 0x55
mov byte [rbp - 0x6c], 0x48
mov byte [rbp - 0x6b], 0x58
mov byte [rbp - 0x6a], 0x14
mov byte [rbp - 0x69], 0x54
mov byte [rbp - 0x68], 0x51
mov byte [rbp - 0x67], 0x46
mov byte [rbp - 0x66], 0x18
mov byte [rbp - 0x65], 0x5a
mov byte [rbp - 0x64], 0x50
mov byte [rbp - 0x63], 0x4e
mov byte [rbp - 0x62], 0x5d
mov byte [rbp - 0x61], 0x54
mov byte [rbp - 0x60], 0x11
mov byte [rbp - 0x5f], 0x3e
movzx eax, byte [rbp - 0x71]
mov r9, rsi
movabs r11, 0x8164f4be74b0d02c
mov r10, r11
lea rax, [rbp - 0x71]
sub r10, rax
lea rdx, [rbp - 0x71]
add rdx, r9
movzx r8d, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, rbx
shl cl, 2
mov rax, r11
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x71], al
inc r9
cmp r9, 0x13
jb 0x180001a42
lea rdx, [rbp - 0x71]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.18000cbf0
mov rcx, rax
lea rdx, [0x18000cdc0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r12, qword [rbp + 7]
mov r10, qword [rbp - 9]
test r10, r10
je 0x180001adf
sub r12, r10
mov rax, r10
cmp r12, 0x1000
jb 0x180001ad4
add r12, 0x27
mov r10, qword [r10 - 8]
sub rax, r10
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180001ad4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, r12
mov rcx, r10
call fcn.18000d830
mov rax, rsi
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.18000d810
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret