Function at 0x18000b630
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
mov rax, qword [0x18007e010]
xor rax, rsp
mov qword [rbp - 8], rax
mov rbx, qword [0x18007f050]
mov eax, dword [rbx + 0x3e20]
cmp dword [rbx + 0x3e24], eax
je 0x18000b677
call fcn.18000b2d0
mov eax, dword [rbx + 0x3e28]
xor r15d, r15d
mov edi, r15d
mov dword [rbp - 0x20], eax
mov eax, dword [rbx + 0x3e20]
mov dword [rbp - 0x10], eax
mov dword [rbx + 0x3e28], eax
mov dword [rbx + 0xec], r15d
cmp dword [rbx + 0x5b98], r15d
jle 0x18000b6e0
mov esi, r15d
nop dword [rax + rax]
mov rcx, qword [rbx + 0x5ba0]
cmp dword [rcx + rsi + 4], 4
jne 0x18000b6d2
mov rax, qword [rcx + rsi + 0x10]
movsxd rdx, edi
shl rdx, 5
add rdx, rcx
mov rcx, rbx
call rax
inc edi
add rsi, 0x20
cmp edi, dword [rbx + 0x5b98]
jl 0x18000b6b0
mov r12d, r15d
cmp dword [rbx + 0x4858], r15d
je 0x18000b7df
mov rcx, r15
mov qword [rbp - 0x18], rcx
nop word [rax + rax]
mov rax, qword [rbx + 0x4860]
mov esi, 2
mov r13, qword [rcx + rax]
lea rdi, [r13 + 0x78]
xor edx, edx
mov rcx, rdi
call fcn.18001b710
add rdi, 0x10
sub rsi, 1
jne 0x18000b714
cmp qword [r13 + 0x38], r15
je 0x18000b7c3
lea r8, [rbp - 0x2f]
mov dword [rbp - 0x30], 0x42232374
xor edx, edx
mov dword [rbp - 0x2c], 0x676b6361
mov rcx, r13
mov dword [rbp - 0x28], 0x6e756f72
mov word [rbp - 0x24], 0x64
call fcn.180007750
mov rdi, rax
mov eax, dword [rax]
test eax, eax
je 0x18000b7c3
cmp eax, 1
jne 0x18000b779
mov rcx, qword [rdi + 8]
cmp dword [rcx + 0x20], r15d
jne 0x18000b779
cmp qword [rcx + 0x28], r15
je 0x18000b7c3
mov ecx, dword [r13 + 0x7c]
mov r8d, dword [r13 + 0x78]
cmp r8d, ecx
jne 0x18000b7b0
inc r8d
test ecx, ecx
je 0x18000b798
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18000b79d
mov eax, 8
cmp eax, r8d
lea rcx, [r13 + 0x78]
cmovg r8d, eax
mov edx, r8d
call fcn.18001b680
movsxd rcx, dword [r13 + 0x78]
mov rax, qword [r13 + 0x80]
mov qword [rax + rcx*8], rdi
inc dword [r13 + 0x78]
mov rcx, qword [rbp - 0x18]
inc r12d
add rcx, 8
mov qword [rbp - 0x18], rcx
cmp r12d, dword [rbx + 0x4858]
jne 0x18000b700
mov r12d, dword [rbp - 0x10]
mov edi, dword [rbp - 0x20]
cmp edi, r12d
je 0x18000b7f0
call fcn.18000aea0
mov rax, qword [rbx + 0x49d8]
test rax, rax
je 0x18000b815
test dword [rax + 0xc], 0x2000
jne 0x18000b815
mov r13, qword [rax + 0x358]
mov r14, qword [rbx + 0x49e8]
jmp 0x18000b829
mov r13, r15
test rax, rax
je 0x18000b826
mov r14, qword [rbx + 0x49e8]
jmp 0x18000b829
mov r14, r15
mov esi, r15d
cmp dword [rbx + 0x3e40], r15d
je 0x18000b890
mov rdi, r15
nop dword [rax + rax]
mov rax, qword [rbx + 0x3e48]
mov rcx, qword [rdi + rax]
cmp byte [rcx + 0x96], r15b
je 0x18000b87b
cmp byte [rcx + 0x9d], r15b
jne 0x18000b87b
mov edx, dword [rcx + 0xc]
bt edx, 0x18
jb 0x18000b87b
cmp rcx, r13
je 0x18000b87b
cmp rcx, r14
je 0x18000b87b
shr edx, 0x19
and edx, 1
call fcn.18000aa20
inc esi
add rdi, 8
cmp esi, dword [rbx + 0x3e40]
jne 0x18000b840
mov edi, dword [rbp - 0x20]
nop dword [rax]
test r13, r13
je 0x18000b8b9
cmp byte [r13 + 0x96], r15b
je 0x18000b8b9
cmp byte [r13 + 0x9d], r15b
jne 0x18000b8b9
mov edx, dword [r13 + 0xc]
mov rcx, r13
shr edx, 0x19
and edx, 1
call fcn.18000aa20
test r14, r14
je 0x18000b8e2
cmp byte [r14 + 0x96], r15b
je 0x18000b8e2
cmp byte [r14 + 0x9d], r15b
jne 0x18000b8e2
mov edx, dword [r14 + 0xc]
mov rcx, r14
shr edx, 0x19
and edx, 1
call fcn.18000aa20
cmp byte [rbx + 0x78], r15b
je 0x18000b90e
cmp edi, r12d
je 0x18000b90e
mov r8d, dword [rbx + 0x4a10]
cmp r8d, 0xffffffff
je 0x18000b90e
movss xmm1, dword [rbx + 0x3898]
mov rcx, qword [rbx + 0xdfc]
call fcn.1800067d0
mov r13d, r15d
mov qword [rbx + 0xe4], r15
cmp dword [rbx + 0x4858], r15d
jle 0x18000bae6
mov rcx, r15
mov qword [rbp - 0x18], rcx
nop dword [rax]
mov rax, qword [rbx + 0x4860]
mov rsi, qword [rcx + rax]
movsxd r12, dword [rsi + 0x78]
lea rcx, [rsi + 0x78]
mov edx, dword [rsi + 0x88]
add edx, r12d
call fcn.18001b710
movsxd rax, dword [rsi + 0x88]
test eax, eax
je 0x18000b988
mov rdx, qword [rsi + 0x90]
mov r8, rax
mov rax, qword [rsi + 0x80]
shl r8, 3
lea rcx, [rax + r12*8]
call sub.VCRUNTIME140.dll_memcpy
xor edx, edx
lea rcx, [rsi + 0x88]
call fcn.18001b710
cmp qword [rsi + 0x40], r15
je 0x18000ba24
lea r8, [rbp - 0x2f]
mov dword [rbp - 0x30], 0x4623235f
mov edx, 1
mov dword [rbp - 0x2c], 0x6765726f
mov rcx, rsi
mov dword [rbp - 0x28], 0x6e756f72
mov word [rbp - 0x24], 0x64
call fcn.180007750
mov r14, rax
mov ecx, dword [rax]
test ecx, ecx
je 0x18000ba24
cmp ecx, 1
jne 0x18000b9dc
mov rcx, qword [rax + 8]
cmp dword [rcx + 0x20], r15d
jne 0x18000b9dc
cmp qword [rcx + 0x28], r15
je 0x18000ba24
mov ecx, dword [rsi + 0x7c]
mov r8d, dword [rsi + 0x78]
cmp r8d, ecx
jne 0x18000ba12
inc r8d
test ecx, ecx
je 0x18000b9fa
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18000b9ff
mov eax, 8
cmp eax, r8d
lea rcx, [rsi + 0x78]
cmovg r8d, eax
mov edx, r8d
call fcn.18001b680
movsxd rcx, dword [rsi + 0x78]
mov rax, qword [rsi + 0x80]
mov qword [rax + rcx*8], r14
inc dword [rsi + 0x78]
mov rcx, qword [0x18007f050]
mov byte [rsi + 0x48], 1
cmp dword [rsi + 0x78], r15d
jle 0x18000ba3e
mov rax, qword [rsi + 0x80]
jmp 0x18000ba41
mov rax, r15
mov qword [rsi + 0x58], rax
mov r10d, r15d
mov eax, dword [rsi + 0x78]
mov dword [rsi + 0x4c], eax
mov qword [rsi + 0x50], r15
movups xmm0, xmmword [rsi + 4]
movups xmmword [rsi + 0x60], xmm0
movsd xmm0, qword [rcx + 0x70]
mov ecx, r15d
movsd qword [rsi + 0x70], xmm0
jle 0x18000babb
mov r8, r15
nop dword [rax]
mov rax, qword [rsi + 0x80]
mov rdx, qword [r8 + rax]
movsxd rax, dword [rdx]
test eax, eax
je 0x18000ba9f
imul rcx, rax, 0x38
lea r9d, [rax - 1]
mov rax, qword [rdx + 8]
cmp dword [rcx + rax - 0x18], r15d
jne 0x18000ba9f
cmp qword [rcx + rax - 0x10], r15
jne 0x18000ba9f
mov dword [rdx], r9d
mov ecx, dword [rdx + 0x20]
inc r10d
add ecx, dword [rsi + 0x54]
add r8, 8
mov dword [rsi + 0x54], ecx
mov eax, dword [rdx + 0x10]
add dword [rsi + 0x50], eax
cmp r10d, dword [rsi + 0x78]
jl 0x18000ba70
add dword [rbx + 0xe4], ecx
inc r13d
mov rcx, qword [rbp - 0x18]
mov eax, dword [rsi + 0x50]
add rcx, 8
add dword [rbx + 0xe8], eax
mov qword [rbp - 0x18], rcx
cmp r13d, dword [rbx + 0x4858]
jl 0x18000b930
cmp dword [rbx + 0x5b98], r15d
jle 0x18000bb21
mov rdi, r15
mov rax, qword [rbx + 0x5ba0]
cmp dword [rdi + rax + 4], 5
jne 0x18000bb11
movsxd rdx, r15d
mov rcx, rbx
shl rdx, 5
add rdx, rax
call qword [rdi + rax + 0x10]
inc r15d
add rdi, 0x20
cmp r15d, dword [rbx + 0x5b98]
jl 0x18000baf2
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.18006ba20
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret