Function at 0x18001f380
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x18036d060]
xor rax, rsp
mov qword [rbp + 0x70], rax
movzx r13d, r9b
mov r14, r8
mov r12, rdx
mov r15, rcx
mov qword [rbp - 0x70], rcx
mov qword [rbp - 0x68], rdx
mov qword [rbp - 0x60], r8
mov rcx, qword [0x18038ba70]
test rcx, rcx
je 0x18001fc9a
call fcn.1800b7030
test al, al
je 0x18001fc9a
movdqa xmm0, xmmword [0x180317590]
movdqu xmmword [rbp - 0x38], xmm0
mov dword [rbp - 0x28], 0x707b777b
mov dword [rbp - 0x24], 0x3a3a3a71
xor eax, eax
mov byte [rbp - 0x20], al
xor esi, esi
mov ecx, esi
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rbp - 0x38]
xor byte [rbp + rcx - 0x37], al
inc rcx
cmp rcx, 0x17
jb 0x18001f410
mov byte [rbp - 0x20], sil
mov qword [rbp - 0x48], rsi
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x40], rdi
mov byte [rbp - 0x58], sil
lea rax, [rbp - 0x37]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], sil
jne 0x18001f444
lea rdx, [rbp - 0x37]
lea rcx, [rbp - 0x58]
call fcn.1800052d0
lea rcx, [rbp - 0x58]
call fcn.180037aa0
mov rdx, r14
lea rcx, [rbp - 0x38]
call fcn.180004860
mov rdx, rax
lea rcx, [rbp]
call fcn.180008340
nop
cmp byte [0x18038b6fc], 0
je 0x18001f4df
mov qword [rbp - 0x48], rsi
mov qword [rbp - 0x40], rdi
mov byte [rbp - 0x58], 0
mov r8d, ntohs
lea rdx, str.Error_get_Hwid
lea rcx, [rbp - 0x58]
call fcn.1800052d0
lea rcx, [rbp - 0x58]
call fcn.180037aa0
nop
lea rcx, [rbp]
call fcn.180005250
nop
mov rcx, r15
call fcn.180005250
nop
mov rcx, r12
call fcn.180005250
nop
mov rcx, r14
call fcn.180005250
mov eax, 0xfffffffd
jmp 0x18001fcb6
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x38], xmm1
mov qword [rbp - 0x28], rsi
lea rdx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rdx, qword [rbp]
mov r8, qword [rbp + 0x10]
add r8, rdx
lea rdx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rdx, qword [rbp]
lea rcx, [rbp - 0x38]
call fcn.180022d10
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], rax
lea rdx, [0x18037c5c0]
lea rcx, [rbp - 0x58]
call fcn.180004860
mov r9d, 4
mov r8, rax
lea rdx, [rbp - 0x38]
lea rcx, [rsp + 0x40]
call fcn.18001d380
nop
lea rdx, [rbp - 0x18]
mov rcx, rax
call fcn.18001d7e0
nop
mov rcx, qword [rsp + 0x74]
test rcx, rcx
je 0x18001f5a2
mov rdx, qword [rbp - 0x7c]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001f58f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fce9
call fcn.18007b164
mov qword [rsp + 0x74], rsi
mov qword [rsp + 0x7c], rsi
mov qword [rbp - 0x7c], rsi
mov r8, qword [rbp - 0x10]
mov rdx, qword [rbp - 0x18]
sub r8, rdx
mov rcx, qword [0x18038ba70]
call fcn.1800b6ec0
lea rcx, [rbp + 0x20]
call fcn.1800387f0
nop
cmp byte [rbp + 0x3c], 0
je 0x18001fb52
mov rdx, qword [rbp + 0x20]
mov ecx, dword [rdx + 0x20]
sub ecx, 0x35
je 0x18001f9cb
cmp ecx, 1
jne 0x18001fb52
lea rbx, [rdx + 0x34]
mov rdx, qword [rdx + 0x24]
lea rsi, [rdx + rbx]
mov qword [rbp - 0x48], 0
mov qword [rbp - 0x40], rdi
mov byte [rbp - 0x58], 0
lea rcx, [rbp - 0x58]
call fcn.180009760
lea rax, [rbp - 0x58]
mov qword [rsp + 0x20], rax
cmp rbx, rsi
je 0x18001f669
nop dword [rax]
movzx r9d, byte [rbx]
mov rcx, qword [rbp - 0x48]
mov rdx, qword [rbp - 0x40]
cmp rcx, rdx
jae 0x18001f651
lea rax, [rcx + 1]
mov qword [rbp - 0x48], rax
lea rax, [rbp - 0x58]
cmp rdx, 0x10
cmovae rax, qword [rbp - 0x58]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x18001f661
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp - 0x58]
call fcn.180005c00
inc rbx
cmp rbx, rsi
jne 0x18001f620
mov rsi, qword [rbp - 0x48]
lea rbx, [rbp - 0x58]
test r13b, r13b
je 0x18001f837
xor r13d, r13d
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x38], r13
cmp qword [rbp - 0x40], 0x10
cmovae rbx, qword [rbp - 0x58]
cmp rsi, 0x10
jae 0x18001f6a1
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x20], xmm0
jmp 0x18001f718
mov rdi, rsi
or rdi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
cmova rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x18001f6f5
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18001fcef
mov rcx, rax
call fcn.18007b16c
mov rcx, rax
test rax, rax
je 0x18001fcf5
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x18001f704
test rcx, rcx
je 0x18001f701
call fcn.18007b16c
jmp 0x18001f704
mov rax, r13
mov qword [rsp + 0x20], rax
lea r8, [rsi + 1]
mov rdx, rbx
mov rcx, rax
call fcn.180210e90
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], rdi
lea rcx, [rsp + 0x20]
call fcn.180037c60
mov ebx, eax
lea rcx, [rbp - 0x58]
call fcn.180005250
nop
lea rcx, [rbp + 0x48]
call fcn.180005250
mov rcx, qword [rbp + 0x20]
test rcx, rcx
je 0x18001f787
mov rdx, qword [rbp + 0x30]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001f776
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fcfb
call fcn.18007b164
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r13
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x18001f7cd
mov rdx, qword [rbp - 8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001f7bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd01
call fcn.18007b164
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], r13
mov rcx, qword [rbp - 0x38]
test rcx, rcx
je 0x18001f808
mov rdx, qword [rbp - 0x28]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001f802
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd07
call fcn.18007b164
nop
lea rcx, [rbp]
call fcn.180005250
nop
mov rcx, r15
call fcn.180005250
nop
mov rcx, r12
call fcn.180005250
nop
mov rcx, r14
call fcn.180005250
lea eax, [rbx + 0x3e8]
jmp 0x18001fcb6
xor r13d, r13d
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x38], r13
cmp qword [rbp - 0x40], 0x10
cmovae rbx, qword [rbp - 0x58]
cmp rsi, 0x10
jae 0x18001f85e
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x20], xmm0
jmp 0x18001f8d5
mov rdi, rsi
or rdi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
cmova rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x18001f8b2
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18001fd0d
mov rcx, rax
call fcn.18007b16c
mov rcx, rax
test rax, rax
je 0x18001fd13
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x18001f8c1
test rcx, rcx
je 0x18001f8be
call fcn.18007b16c
jmp 0x18001f8c1
mov rax, r13
mov qword [rsp + 0x20], rax
lea r8, [rsi + 1]
mov rdx, rbx
mov rcx, rax
call fcn.180210e90
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], rdi
lea rcx, [rsp + 0x20]
call fcn.180037aa0
nop
lea rcx, [rbp - 0x58]
call fcn.180005250
nop
lea rcx, [rbp + 0x48]
call fcn.180005250
mov rcx, qword [rbp + 0x20]
test rcx, rcx
je 0x18001f943
mov rdx, qword [rbp + 0x30]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001f932
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd19
call fcn.18007b164
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r13
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x18001f989
mov rdx, qword [rbp - 8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001f978
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd1f
call fcn.18007b164
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], r13
mov rcx, qword [rbp - 0x38]
test rcx, rcx
je 0x18001fc90
mov rdx, qword [rbp - 0x28]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001fc8a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fce3
jmp 0x18001fc8a
movdqa xmm0, xmmword [0x180317350]
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x30], 0x5f5d0d48
mov dword [rsp + 0x34], 0x4e424042
mov dword [rsp + 0x38], 0xc484942
xor eax, eax
mov byte [rsp + 0x3c], al
mov rcx, rsi
nop word [rax + rax]
movzx eax, byte [rsp + 0x20]
xor byte [rsp + rcx + 0x21], al
inc rcx
cmp rcx, 0x1b
jb 0x18001fa00
mov byte [rsp + 0x3c], 0
mov qword [rbp - 0x48], rsi
mov qword [rbp - 0x40], rdi
mov byte [rbp - 0x58], 0
lea rax, [rsp + 0x21]
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x18001fa30
mov r8, rbx
lea rdx, [rsp + 0x21]
lea rcx, [rbp - 0x58]
call fcn.1800052d0
lea rcx, [rbp - 0x58]
call fcn.180037aa0
nop
lea rcx, [rbp + 0x48]
call fcn.180005250
mov rcx, qword [rbp + 0x20]
test rcx, rcx
je 0x18001faa3
mov rdx, qword [rbp + 0x30]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001fa92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd25
call fcn.18007b164
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rsi
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x18001fae9
mov rdx, qword [rbp - 8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001fad8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd2b
call fcn.18007b164
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], rsi
mov rcx, qword [rbp - 0x38]
test rcx, rcx
je 0x18001fb24
mov rdx, qword [rbp - 0x28]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001fb1e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fcdd
call fcn.18007b164
nop
lea rcx, [rbp]
call fcn.180005250
nop
mov rcx, r15
call fcn.180005250
nop
mov rcx, r12
call fcn.180005250
nop
mov rcx, r14
call fcn.180005250
mov eax, 1
jmp 0x18001fcb6
movdqa xmm0, xmmword [str.:oTQTUMT]
movdqu xmmword [rsp + 0x20], xmm0
mov rcx, rsi
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rsp + 0x20]
xor byte [rsp + rcx + 0x21], al
inc rcx
cmp rcx, 0xe
jb 0x18001fb70
mov byte [rsp + 0x2f], 0
mov qword [rbp - 0x48], rsi
mov qword [rbp - 0x40], rdi
mov byte [rbp - 0x58], 0
lea rax, [rsp + 0x21]
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x18001fba0
mov r8, rbx
lea rdx, [rsp + 0x21]
lea rcx, [rbp - 0x58]
call fcn.1800052d0
lea rcx, [rbp - 0x58]
call fcn.180037aa0
nop
lea rcx, [rbp + 0x48]
call fcn.180005250
mov rcx, qword [rbp + 0x20]
test rcx, rcx
je 0x18001fc13
mov rdx, qword [rbp + 0x30]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001fc02
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd25
call fcn.18007b164
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rsi
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x18001fc59
mov rdx, qword [rbp - 8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001fc48
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fd2b
call fcn.18007b164
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], rsi
mov rcx, qword [rbp - 0x38]
test rcx, rcx
je 0x18001fc90
mov rdx, qword [rbp - 0x28]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001fc8a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001fcdd
call fcn.18007b164
nop
lea rcx, [rbp]
call fcn.180005250
nop
mov rcx, r15
call fcn.180005250
nop
mov rcx, r12
call fcn.180005250
nop
mov rcx, r14
call fcn.180005250
xor eax, eax
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.18007b140
mov rbx, qword [rsp + 0x1d8]
add rsp, 0x180
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18021e9c0
nop
call fcn.18021e9c0
nop
call fcn.18021e9c0
nop
call fcn.180002140
int3
call fcn.18021e9c0
nop
call fcn.18021e9c0
nop
call fcn.18021e9c0
nop
call fcn.18021e9c0
nop
call fcn.180002140
int3
call fcn.18021e9c0
nop
call fcn.18021e9c0
nop
call fcn.18021e9c0
nop
call fcn.18021e9c0
nop
call fcn.18021e9c0
int3