Function at 0x180003644
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xe8
xor r15d, r15d
mov dword [rsp + 0x20], 0x37246742
mov dword [rsp + 0x24], 0x46507351
mov dword [rsp + 0x28], 0x5f687646
mov dword [rsp + 0x2c], 0x3c6b6e6d
mov dword [rsp + 0x30], 0x74334a40
mov word [rbp - 0x79], r15w
mov dword [rsp + 0x34], 0x636b57
mov dword [rsp + 0x38], 0x65006b
mov dword [rsp + 0x3c], 0x6e0072
mov dword [rsp + 0x40], 0x6c0065
mov dword [rsp + 0x44], 0x320033
mov dword [rsp + 0x48], 0x64002e
mov dword [rbp - 0x7d], 0x6c006c
mov edx, 0x3d090c
mov eax, r15d
lea rcx, [rbp - 0x59]
mov byte [rcx], al
inc eax
inc rcx
cmp eax, 0x6a
jb 0x1800036d4
dec rdx
jne 0x1800036cd
cmp byte [rbp - 0x29], 0x30
jne 0x1800036fa
lea rcx, [rsp + 0x38]
call fcn.180003ba8
mov rbx, rax
jmp 0x1800036fe
mov rbx, qword [rbp + 0x67]
mov edx, 0xe3142
mov rcx, rbx
call fcn.180003bfc
mov edx, 0xd5786
mov rcx, rbx
mov rdi, rax
call fcn.180003bfc
mov edx, 0x348bfa
mov rcx, rbx
mov qword [rbp - 0x69], rax
call fcn.180003bfc
mov esi, 0x3000
mov r12d, 0x1bd000
mov r9d, 4
xor ecx, ecx
mov r8d, esi
mov edx, r12d
mov qword [rbp - 0x71], rax
call rdi
movsx r8d, byte [rbp - 0x59]
mov r10d, r15d
mov r14, rax
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
mov eax, 0x92f11385
imul ecx
add edx, ecx
imul ecx, r8d, 0xfffffeaa
mov r8d, 0x66666667
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, byte [rbp - 0x36]
imul edx, eax
imul eax, edx, 0xe
movsxd r11, eax
mov eax, r8d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r8d
imul edx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r8d
imul edx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r8d
imul edx
mov eax, r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul edx
mov eax, r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul edx
mov ecx, edx
sar ecx, 1
mov eax, ecx
shr eax, 0x1f
add ecx, eax
mov eax, 0xbfa02fe9
imul ecx
add edx, ecx
sar edx, 8
mov eax, edx
movabs rbx, resource.1
shr eax, 0x1f
add edx, eax
movsx rax, byte [rbp - 0x59]
movsxd rcx, edx
mov r9, rcx
imul rdx, rax, 0xd7c
sub r9, rdx
sub rdx, rcx
sub rdx, r14
add r9, r14
add rbx, rdx
movsxd rcx, r10d
movabs rax, 0xaaaaaaaaaaaaaaab
inc r10d
mul rcx
shr rdx, 4
lea rax, [rdx + rdx*2]
shl rax, 3
sub rcx, rax
add rcx, r11
mov al, byte [rsp + rcx + 0x20]
xor al, byte [rbx + r9]
mov byte [r9], al
inc r9
cmp r10d, r12d
jb 0x180003821
mov rcx, r14
call fcn.180003aa4
movsx r9d, byte [rbp - 0x51]
mov r8d, esi
shl r9d, 3
mov rdx, rax
xor ecx, ecx
call rdi
mov rbx, rax
test rax, rax
je 0x180003a8e
movsxd rdi, dword [r14 + 0x3c]
mov r13, rax
mov rdx, r14
add rdi, r14
mov rcx, rax
sub r13, qword [rdi + 0x30]
mov r8d, dword [rdi + 0x54]
movzx esi, word [rdi + 0x14]
mov qword [rbp + 0x77], r13
mov qword [rbp + 0x7f], rdi
mov qword [rdi + 0x30], rax
call fcn.180003ac4
mov r10, qword [rdi + 0xb0]
mov r11, qword [rdi + 0x90]
xor eax, eax
mov qword [rbp + 0x6f], r10
mov r12, r15
cmp ax, word [rdi + 6]
jae 0x180003a8e
add rsi, 0x24
mov r13d, eax
add rsi, rdi
mov r9d, dword [rsi]
cmp r10d, r9d
jb 0x1800038ef
mov ecx, dword [rsi - 4]
add ecx, r9d
cmp r10d, ecx
jae 0x1800038ef
lea r12, [rsi - 0xc]
cmp r11d, r9d
jb 0x180003903
mov ecx, dword [rsi - 4]
add ecx, r9d
cmp r11d, ecx
jae 0x180003903
lea r13, [rsi - 0xc]
mov edx, dword [rsi + 8]
mov r8d, dword [rsi + 4]
lea rcx, [rbx + r9]
add rdx, r14
call fcn.180003ac4
movzx eax, word [rdi + 6]
inc r15d
add rsi, 0x28
cmp r15d, eax
jl 0x1800038d8
xor r8d, r8d
test r13, r13
mov r13, qword [rbp + 0x77]
je 0x180003a8e
mov eax, dword [rbp + 0x73]
mov r11d, r8d
test rax, rax
je 0x1800039c7
xor edi, edi
mov r15d, dword [r12 + 0x14]
add r15, r11
add r11, 8
mov esi, dword [r15 + r14 + 4]
sub rsi, 8
shr rsi, 1
je 0x1800039bb
mov eax, dword [r12 + 0x14]
add rax, r11
add r11, 2
movzx ecx, word [rax + r14]
mov eax, 0xf000
test ax, cx
je 0x1800039b3
mov r10d, dword [r15 + r14]
and ecx, 0xfff
mov r8d, 8
lea rax, [rbx + rcx]
lea rcx, [rbp + 0x67]
mov qword [rbp + 0x67], rdi
add r10, rax
mov rdx, r10
call fcn.180003ac4
add qword [rbp + 0x67], r13
lea rdx, [rbp + 0x67]
mov rcx, r10
call fcn.180003ac4
dec rsi
jne 0x180003961
mov eax, dword [rbp + 0x73]
cmp r11, rax
jb 0x180003947
mov rdi, qword [rbp + 0x7f]
xor r8d, r8d
mov r15d, dword [rdi + 0x90]
add r15, rbx
je 0x180003a8e
add r15, 0xc
cmp dword [r15], r8d
je 0x180003a41
mov r13, qword [rbp - 0x71]
mov ecx, dword [r15]
add rcx, rbx
call qword [rbp - 0x69]
xor r8d, r8d
mov r12, rax
test rax, rax
je 0x180003a8e
mov esi, dword [r15 + 4]
add rsi, rbx
jmp 0x180003a33
mov rax, qword [rsi]
movabs rcx, 0x8000000000000000
test rcx, rax
mov rcx, r12
je 0x180003a1f
movzx edx, ax
jmp 0x180003a26
lea rdx, [rax + 2]
add rdx, rbx
call r13
mov qword [rsi], rax
add rsi, 8
xor r8d, r8d
cmp qword [rsi], r8
jne 0x180003a05
add r15, 0x14
cmp dword [r15], r8d
jne 0x1800039e4
mov rcx, r14
call fcn.180003ab0
test eax, eax
je 0x180003a72
mov eax, dword [rdi + 0xd0]
mov rsi, qword [rax + rbx + 0x18]
jmp 0x180003a6a
xor r8d, r8d
mov rcx, r14
lea edx, [r8 + 1]
call rax
lea rsi, [rsi + 8]
mov rax, qword [rsi]
test rax, rax
jne 0x180003a5a
mov eax, dword [rdi + 0x28]
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 1]
add rax, rbx
call rax
neg eax
sbb rax, rax
and rax, rbx
jmp 0x180003a90
xor eax, eax
add rsp, 0xe8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret