Function at 0x18020e3ac
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov rax, rsp
mov byte [rax + 0x10], dl
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
mov qword [rbp + 0x27], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov rbx, rcx
mov edx, dword [0x1802bccdc]
mov rax, qword gs:[0x58]
mov ecx, 4
mov r8, qword [rax + rdx*8]
mov eax, dword [rcx + r8]
cmp dword [0x1802c9d78], eax
jle 0x18020e5c1
lea rcx, [0x1802c9d78]
call fcn.1802696f0
cmp dword [0x1802c9d78], 0xffffffff
jne 0x18020e5c1
lea rax, [rbp + 7]
mov qword [rbp + 0x77], rax
mov byte [rbp - 0x39], 0x48
mov byte [rbp - 0x38], 0x77
mov byte [rbp - 0x37], 0x6a
mov byte [rbp - 0x36], 0x66
mov byte [rbp - 0x35], 0x79
mov byte [rbp - 0x34], 0x6a
mov byte [rbp - 0x33], 0x59
mov byte [rbp - 0x32], 0x6d
mov byte [rbp - 0x31], 0x77
mov byte [rbp - 0x30], 0x6a
mov byte [rbp - 0x2f], 0x66
mov byte [rbp - 0x2e], 0x69
mov byte [rbp - 0x2d], 0
mov al, byte [rbp - 0x39]
xor ecx, ecx
mov al, byte [rbp + rcx - 0x39]
sub al, 5
mov byte [rbp + rcx - 0x39], al
inc rcx
cmp rcx, 0xc
jb 0x18020e44f
xorps xmm0, xmm0
movups xmmword [rbp + 7], xmm0
and qword [rbp + 0x17], 0
and qword [rbp + 0x1f], 0
lea rax, [rbp - 0x39]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x18020e47b
lea rdx, [rbp - 0x39]
lea rcx, [rbp + 7]
call fcn.18007b70c
nop
mov dword [rbp - 0x29], 0x7d
mov byte [rbp - 0x25], 0x16
mov byte [rbp - 0x24], 0x18
mov byte [rbp - 0x23], 0xf
mov byte [rbp - 0x22], 0x13
mov byte [rbp - 0x21], 0x18
mov byte [rbp - 0x20], 0x11
mov byte [rbp - 0x1f], 0x4e
mov byte [rbp - 0x1e], 0x4f
xor eax, eax
mov byte [rbp - 0x1d], al
mov al, byte [rbp - 0x25]
xor edx, edx
mov al, byte [rbp + rdx - 0x25]
mov ecx, dword [rbp - 0x29]
xor cl, al
mov byte [rbp + rdx - 0x25], cl
inc rdx
cmp rdx, 8
jb 0x18020e4c4
mov byte [rbp - 0x1d], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 9], xmm1
lea rax, [rbp - 0x25]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x18020e4f5
lea rdx, [rbp - 0x25]
lea rcx, [rbp - 0x19]
call fcn.18007b70c
nop
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 0x2f]
call fcn.180188b20
nop
and qword [rsp + 0x20], 0
mov r9b, 1
lea r8, [rbp + 7]
mov rdx, rax
lea rcx, [0x1802c9590]
call fcn.1801ba8b4
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0x10
jb 0x18020e576
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18020e571
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18020e571
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180269534
movdqa xmm0, xmmword [0x180280de0]
movdqu xmmword [rbp - 9], xmm0
mov byte [rbp - 0x19], 0
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rbp - 0x25]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xd]
lea rcx, [rbp - 0x39]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x18027e510]
call fcn.18026951c
nop
lea rcx, [0x1802c9d78]
call fcn.180269690
lea rax, [rbp + 0x6f]
mov qword [rsp + 0x30], rax
and dword [rsp + 0x28], 0
mov qword [rsp + 0x20], rbx
lea r9, [0x18020ce6c]
lea rcx, [0x1802c9590]
call fcn.18024eb2c
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x18020e618
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
call fcn.18020aab4
test al, al
je 0x18020e618
or edx, 0xffffffff
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp qword [0x1802b61b8], 0
ja 0x18020e629
mov rbx, qword [rsp + 0xe0]
add rsp, 0xd0
pop rbp
ret
call fcn.18014e36c
int3