Function at 0x180007b30
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov dword [rsp + 0x10], edx
push rbp
push rbx
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x88]
sub rsp, 0x188
movdqa xmm0, xmmword [0x18038fb60]
xor eax, eax
mov byte [rbp - 0x17], al
xor r12d, r12d
movdqu xmmword [rbp - 0x27], xmm0
mov qword [rbp + 0xd8], r12
mov r15, rcx
mov rax, qword [rbp + 0xd8]
mov rcx, qword [rbp + 0xd8]
mov rax, qword [rbp + 0xd8]
sub cl, 0x29
xor cl, byte [rbp + rax - 0x26]
mov rax, qword [rbp + 0xd8]
mov byte [rbp + rax - 0x26], cl
mov rax, qword [rbp + 0xd8]
inc rax
mov qword [rbp + 0xd8], rax
mov rax, qword [rbp + 0xd8]
cmp rax, 0xf
jb 0x180007b72
movdqa xmm0, xmmword [0x18038fb10]
xor r14b, r14b
xor eax, eax
mov byte [rbp - 0x17], r12b
mov byte [rbp - 0x28], al
mov qword [rsp + 0x58], r12
mov qword [rbp - 0x48], r12
mov dword [rbp + 0xd0], r12d
mov dword [rbp + 0xc8], r12d
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x58], r12
movdqu xmmword [rbp - 0x38], xmm0
mov qword [rbp + 0xd8], r12
mov rax, qword [rbp + 0xd8]
nop word [rax + rax]
mov rcx, qword [rbp + 0xd8]
mov rax, qword [rbp + 0xd8]
sub cl, 0x38
xor cl, byte [rbp + rax - 0x37]
mov rax, qword [rbp + 0xd8]
mov byte [rbp + rax - 0x37], cl
mov rax, qword [rbp + 0xd8]
inc rax
mov qword [rbp + 0xd8], rax
mov rax, qword [rbp + 0xd8]
cmp rax, 0xf
jb 0x180007c00
mov byte [rbp - 0x28], r12b
call fcn.180001690
mov ecx, dword [0x18039b468]
mov rdi, rax
mov rax, qword gs:[0x58]
mov edx, 4
mov rbx, qword [rax + rcx*8]
add rbx, rdx
mov eax, dword [rbx]
cmp dword [0x18039d510], eax
jle 0x180007c9e
lea rcx, [0x18039d510]
call fcn.180360f8c
cmp dword [0x18039d510], 0xffffffff
jne 0x180007c9e
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, [0x18039d510]
mov qword [0x1803a15b8], rax
call fcn.180360f2c
mov eax, dword [rbx]
cmp dword [0x1803a1558], eax
jle 0x180007cd7
lea rcx, [0x1803a1558]
call fcn.180360f8c
cmp dword [0x1803a1558], 0xffffffff
jne 0x180007cd7
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x1803a1558]
mov qword [0x1803a1560], rax
call fcn.180360f2c
mov rcx, rdi
mov qword [rsp + 0x180], rsi
call qword [0x1803a15b8]
mov rcx, rax
lea rdx, [rbp - 0x37]
call qword [0x1803a1560]
test rax, rax
je 0x1800084e9
xor r9d, r9d
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x38], rcx
lea rcx, [rbp - 0x50]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rcx
mov rcx, r15
lea edx, [r9 + 6]
mov qword [rsp + 0x20], r12
lea r8d, [r9 + 4]
call rax
movdqa xmm0, xmmword [0x18038f870]
movdqu xmmword [rsp + 0x7b], xmm0
mov dword [rbp - 0x75], 0x73704a79
mov dword [rbp - 0x71], 0x624648
mov qword [rbp + 0xd8], r12
mov rax, qword [rbp + 0xd8]
nop word [rax + rax]
mov rcx, qword [rbp + 0xd8]
mov rax, qword [rbp + 0xd8]
add cl, 0xe
xor cl, byte [rsp + rax + 0x7c]
mov rax, qword [rbp + 0xd8]
mov byte [rsp + rax + 0x7c], cl
mov rax, qword [rbp + 0xd8]
inc rax
mov qword [rbp + 0xd8], rax
mov rax, qword [rbp + 0xd8]
cmp rax, 0x16
jb 0x180007d60
mov byte [rbp - 0x6e], r12b
call fcn.180001690
mov rdi, rax
mov eax, dword [rbx]
cmp dword [0x18039d510], eax
jle 0x180007de3
lea rcx, [0x18039d510]
call fcn.180360f8c
cmp dword [0x18039d510], 0xffffffff
jne 0x180007de3
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, [0x18039d510]
mov qword [0x1803a15b8], rax
call fcn.180360f2c
mov eax, dword [rbx]
cmp dword [0x1803a1558], eax
jle 0x180007e1c
lea rcx, [0x1803a1558]
call fcn.180360f8c
cmp dword [0x1803a1558], 0xffffffff
jne 0x180007e1c
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x1803a1558]
mov qword [0x1803a1560], rax
call fcn.180360f2c
mov rcx, rdi
call qword [0x1803a15b8]
mov rcx, rax
lea rdx, [rsp + 0x7c]
call qword [0x1803a1560]
mov rdi, rax
test rax, rax
je 0x1800084e9
mov dword [rsp + 0x4b], 0x839ce3b3
mov dword [rsp + 0x4f], 0x9b80859e
mov dword [rsp + 0x53], 0x889585
mov qword [rbp + 0xd8], r12
mov rax, qword [rbp + 0xd8]
nop word [rax + rax]
mov rcx, qword [rbp + 0xd8]
mov rax, qword [rbp + 0xd8]
sub cl, 0x50
xor cl, byte [rsp + rax + 0x4c]
mov rax, qword [rbp + 0xd8]
mov byte [rsp + rax + 0x4c], cl
mov rax, qword [rbp + 0xd8]
inc rax
mov qword [rbp + 0xd8], rax
mov rax, qword [rbp + 0xd8]
cmp rax, 0xa
jb 0x180007e70
lea rdx, [rbp - 0x58]
mov byte [rsp + 0x56], r12b
lea rcx, [rsp + 0x4c]
call rdi
xor eax, eax
mov dword [rsp + 0x40], 0x7d7250ad
mov byte [rsp + 0x4a], al
mov dword [rsp + 0x44], 0x50674c7e
mov word [rsp + 0x48], 0x4146
mov qword [rbp + 0xd8], r12
mov rax, qword [rbp + 0xd8]
nop dword [rax]
mov rcx, qword [rbp + 0xd8]
mov rax, qword [rbp + 0xd8]
add cl, 0x1c
xor cl, byte [rsp + rax + 0x41]
mov rax, qword [rbp + 0xd8]
mov byte [rsp + rax + 0x41], cl
mov rax, qword [rbp + 0xd8]
inc rax
mov qword [rbp + 0xd8], rax
mov rax, qword [rbp + 0xd8]
cmp rax, 9
jb 0x180007ef0
mov byte [rsp + 0x4a], r12b
call fcn.1800015d0
mov rdi, rax
mov eax, dword [rbx]
cmp dword [0x18039d510], eax
jle 0x180007f74
lea rcx, [0x18039d510]
call fcn.180360f8c
cmp dword [0x18039d510], 0xffffffff
jne 0x180007f74
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, [0x18039d510]
mov qword [0x1803a15b8], rax
call fcn.180360f2c
mov eax, dword [rbx]
cmp dword [0x1803a1558], eax
jle 0x180007fad
lea rcx, [0x1803a1558]
call fcn.180360f8c
cmp dword [0x1803a1558], 0xffffffff
jne 0x180007fad
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x1803a1558]
mov qword [0x1803a1560], rax
call fcn.180360f2c
mov rcx, rdi
call qword [0x1803a15b8]
mov rcx, rax
lea rdx, [rsp + 0x41]
call qword [0x1803a1560]
mov rsi, rax
test rax, rax
je 0x1800084e9
movdqa xmm0, xmmword [0x18038f8f0]
lea rax, [rbp + 0x40]
mov qword [rbp + 0x70], rax
lea rdi, [rbp + 0x40]
mov qword [rbp + 0xd8], 0x23
mov qword [rbp], 0xd
mov rcx, qword [rbp + 0xd8]
mov rax, qword [rbp]
add rcx, rax
mov qword [rbp + 0xd8], rcx
xor eax, eax
mov rcx, qword [rbp + 0xd8]
rep stosb byte [rdi], al
mov rax, qword [rbp - 0x58]
mov qword [rbp + 0x68], rax
mov dword [rbp + 0x40], 0x10000000
mov qword [rbp + 0x44], 2
mov dword [rbp + 0x5c], r12d
mov dword [rbp + 0x60], 2
movdqu xmmword [rbp - 0x6d], xmm0
mov word [rbp - 0x5d], 0x5d
mov qword [rbp + 0xd8], r12
mov rax, qword [rbp + 0xd8]
mov rcx, qword [rbp + 0xd8]
mov rax, qword [rbp + 0xd8]
add cl, 0xd
xor cl, byte [rbp + rax - 0x6c]
mov rax, qword [rbp + 0xd8]
mov byte [rbp + rax - 0x6c], cl
mov rax, qword [rbp + 0xd8]
inc rax
mov qword [rbp + 0xd8], rax
mov rax, qword [rbp + 0xd8]
cmp rax, 0x10
jb 0x180008052
mov byte [rbp - 0x5c], r12b
call fcn.180001690
mov rdi, rax
mov eax, dword [rbx]
cmp dword [0x18039d510], eax
jle 0x1800080d5
lea rcx, [0x18039d510]
call fcn.180360f8c
cmp dword [0x18039d510], 0xffffffff
jne 0x1800080d5
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, [0x18039d510]
mov qword [0x1803a15b8], rax
call fcn.180360f2c
mov eax, dword [rbx]
cmp dword [0x1803a1558], eax
jle 0x18000810e
lea rcx, [0x1803a1558]
call fcn.180360f8c
cmp dword [0x1803a1558], 0xffffffff
jne 0x18000810e
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x1803a1558]
mov qword [0x1803a1560], rax
call fcn.180360f2c
mov rcx, rdi
call qword [0x1803a15b8]
mov rcx, rax
lea rdx, [rbp - 0x6c]
call qword [0x1803a1560]
test rax, rax
je 0x18000813c
mov r8, qword [rbp - 0x50]
lea r9, [rbp - 0x40]
lea rdx, [rbp + 0x40]
mov ecx, 1
call rax
movdqa xmm0, xmmword [0x18038f760]
movdqa xmm1, xmmword [0x18038f680]
movdqu xmmword [rbp + 8], xmm0
mov dword [rbp + 0x38], 0x2c32282b
movdqa xmm0, xmmword [0x18038f630]
movdqu xmmword [rbp + 0x28], xmm0
mov word [rbp + 0x3c], 0x1e
movdqu xmmword [rbp + 0x18], xmm1
mov qword [rbp + 0xd8], r12
mov rax, qword [rbp + 0xd8]
nop
mov rcx, qword [rbp + 0xd8]
mov rax, qword [rbp + 0xd8]
add cl, 0x2c
xor cl, byte [rbp + rax + 9]
mov rax, qword [rbp + 0xd8]
mov byte [rbp + rax + 9], cl
mov rax, qword [rbp + 0xd8]
inc rax
mov qword [rbp + 0xd8], rax
mov rax, qword [rbp + 0xd8]
cmp rax, 0x34
jb 0x180008180
mov byte [rbp + 0x3d], r12b
call fcn.180001690
mov rdi, rax
mov eax, dword [rbx]
cmp dword [0x18039d510], eax
jle 0x180008203
lea rcx, [0x18039d510]
call fcn.180360f8c
cmp dword [0x18039d510], 0xffffffff
jne 0x180008203
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, [0x18039d510]
mov qword [0x1803a15b8], rax
call fcn.180360f2c
mov eax, dword [rbx]
cmp dword [0x1803a1558], eax
jle 0x18000823c
lea rcx, [0x1803a1558]
call fcn.180360f8c
cmp dword [0x1803a1558], 0xffffffff
jne 0x18000823c
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x1803a1558]
mov qword [0x1803a1560], rax
call fcn.180360f2c
mov rcx, rdi
call qword [0x1803a15b8]
mov rcx, rax
lea rdx, [rbp + 9]
call qword [0x1803a1560]
test rax, rax
je 0x1800084d7
xor r9d, r9d
lea r8, [rsp + 0x58]
lea rcx, [rbp - 0x26]
lea edx, [r9 + 1]
call rax
test eax, eax
je 0x1800084d7
movdqa xmm0, xmmword [0x18038f6f0]
xor eax, eax
mov byte [rsp + 0x7a], al
movdqu xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x70], 0x51544a50
mov dword [rsp + 0x74], 0x487b5549
mov word [rsp + 0x78], 0x4749
mov qword [rbp + 0xd8], r12
mov rax, qword [rbp + 0xd8]
nop
mov rcx, qword [rbp + 0xd8]
mov rax, qword [rbp + 0xd8]
add cl, 0x13
xor cl, byte [rsp + rax + 0x61]
mov rax, qword [rbp + 0xd8]
mov byte [rsp + rax + 0x61], cl
mov rax, qword [rbp + 0xd8]
inc rax
mov qword [rbp + 0xd8], rax
mov rax, qword [rbp + 0xd8]
cmp rax, 0x19
jb 0x1800082b0
mov byte [rsp + 0x7a], r12b
call fcn.180001690
mov rdi, rax
mov eax, dword [rbx]
cmp dword [0x18039d510], eax
jle 0x180008334
lea rcx, [0x18039d510]
call fcn.180360f8c
cmp dword [0x18039d510], 0xffffffff
jne 0x180008334
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, [0x18039d510]
mov qword [0x1803a15b8], rax
call fcn.180360f2c
mov eax, dword [rbx]
cmp dword [0x1803a1558], eax
jle 0x18000836d
lea rcx, [0x1803a1558]
call fcn.180360f8c
cmp dword [0x1803a1558], 0xffffffff
jne 0x18000836d
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x1803a1558]
mov qword [0x1803a1560], rax
call fcn.180360f2c
mov rcx, rdi
call qword [0x1803a15b8]
mov rcx, rax
lea rdx, [rsp + 0x61]
call qword [0x1803a1560]
test rax, rax
je 0x1800084d7
mov rcx, qword [rsp + 0x58]
lea r9, [rbp + 0xc8]
lea r8, [rbp - 0x48]
lea rdx, [rbp + 0xd0]
call rax
test eax, eax
je 0x1800084d7
movdqa xmm0, xmmword [0x18038fc10]
xor eax, eax
mov byte [rbp - 6], al
movdqu xmmword [rbp - 0x16], xmm0
mov qword [rbp + 0xd8], r12
mov rax, qword [rbp + 0xd8]
nop
mov rcx, qword [rbp + 0xd8]
mov rax, qword [rbp + 0xd8]
sub cl, 0x72
xor cl, byte [rbp + rax - 0x15]
mov rax, qword [rbp + 0xd8]
mov byte [rbp + rax - 0x15], cl
mov rax, qword [rbp + 0xd8]
inc rax
mov qword [rbp + 0xd8], rax
mov rax, qword [rbp + 0xd8]
cmp rax, 0xf
jb 0x1800083d0
mov byte [rbp - 6], r12b
call fcn.180001690
mov rdi, rax
mov eax, dword [rbx]
cmp dword [0x18039d510], eax
jle 0x180008453
lea rcx, [0x18039d510]
call fcn.180360f8c
cmp dword [0x18039d510], 0xffffffff
jne 0x180008453
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, [0x18039d510]
mov qword [0x1803a15b8], rax
call fcn.180360f2c
mov eax, dword [rbx]
cmp dword [0x1803a1558], eax
jle 0x18000848c
lea rcx, [0x1803a1558]
call fcn.180360f8c
cmp dword [0x1803a1558], 0xffffffff
jne 0x18000848c
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x1803a1558]
mov qword [0x1803a1560], rax
call fcn.180360f2c
mov rcx, rdi
call qword [0x1803a15b8]
mov rcx, rax
lea rdx, [rbp - 0x15]
call qword [0x1803a1560]
mov rdi, rax
test rax, rax
je 0x1800084d7
mov rax, qword [rbp - 0x48]
xor r9d, r9d
mov qword [rsp + 0x30], rax
mov rcx, r15
mov rax, qword [rbp - 0x40]
mov qword [rsp + 0x28], rax
lea edx, [r9 + 6]
mov qword [rsp + 0x20], r12
lea r8d, [r9 + 0x14]
call rdi
test eax, eax
sete r14b
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1800084e3
call rsi
movzx eax, r14b
jmp 0x1800084eb
xor al, al
mov rsi, qword [rsp + 0x180]
add rsp, 0x188
pop r15
pop r14
pop r12
pop rdi
pop rbx
pop rbp
ret