Function at 0x1800e5874
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x240]
sub rsp, 0x340
xor r9d, r9d
xor r15d, r15d
mov r12, r8
mov rdi, rdx
mov rbx, rcx
mov dword [rbp + 0x288], r9d
cmp byte [rdx], r9b
je 0x1800e5719
mov r13d, dword [rbp + 0x288]
lea r11d, [r9 + 1]
mov cl, byte [rbx]
mov r14, r12
mov dword [rbp + 0x298], r15d
test cl, cl
je 0x1800e5719
jmp 0x1800e53ca
add rdi, r11
mov al, byte [rdi]
cmp al, 0x20
je 0x1800e53c7
cmp al, 0x25
jne 0x1800e56f7
add rdi, r11
xor esi, esi
mov r8b, byte [rdi]
test r8b, r8b
je 0x1800e54f2
mov dword [rsp + 0x26], 0x59575d57
lea r10, [rsp + 0x26]
mov dword [rsp + 0x2a], 0x495a4042
xor r9d, r9d
mov dword [rsp + 0x2e], 0x1b5a5a5e
mov byte [rsp + 0x32], 0x3f
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
add r9d, r11d
sub al, cl
add al, 0x33
xor byte [r10], al
add r10, r11
cmp r9d, 0xd
jl 0x1800e540e
mov al, byte [rsp + 0x26]
lea rcx, [rsp + 0x26]
jmp 0x1800e544a
cmp al, r8b
je 0x1800e5450
add rcx, r11
mov al, byte [rcx]
test al, al
jne 0x1800e5440
jmp 0x1800e5459
test rcx, rcx
jne 0x1800e54eb
cmp r8b, 0x2a
jne 0x1800e5464
mov esi, r11d
jmp 0x1800e54dc
lea eax, [r8 - 0x4c]
test al, 0xdf
je 0x1800e54dc
lea eax, [r8 - 0x31]
cmp al, 8
ja 0x1800e54dc
mov rdx, rdi
sub r8b, 0x30
cmp r8b, 9
ja 0x1800e5489
add rdi, r11
mov r8b, byte [rdi]
jmp 0x1800e5477
xor eax, eax
mov rcx, rdi
sub rcx, rdx
je 0x1800e54b7
lea r8, [rsp + 0x40]
sub rdx, r8
lea r8, [rsp + 0x40]
add r8, rax
mov r9b, byte [r8 + rdx]
test r9b, r9b
je 0x1800e54b7
add rax, r11
mov byte [r8], r9b
cmp rax, rcx
jb 0x1800e549b
mov byte [rsp + rcx + 0x40], 0
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x288]
mov r8d, 0xa
call fcn.1800e4e0c
mov r11d, 1
sub rdi, r11
add rdi, r11
mov r8b, byte [rdi]
test r8b, r8b
jne 0x1800e53e9
mov r9d, dword [rbp + 0x288]
cmp byte [rdi], 0x73
je 0x1800e554e
cmp byte [rdi], 0x63
jne 0x1800e55a6
test r9d, r9d
cmove r9d, r11d
test esi, esi
jne 0x1800e5540
mov rdx, qword [r14]
add r12, 8
movsxd r8, r9d
test r9d, r9d
je 0x1800e553b
mov r10, rbx
mov rcx, rdx
sub r10, rdx
mov al, byte [rcx + r10]
test al, al
je 0x1800e553b
mov byte [rcx], al
add rcx, r11
mov rax, rcx
sub rax, rdx
cmp rax, r8
jb 0x1800e5523
mov byte [r8 + rdx], 0
movsxd rax, r9d
add rbx, rax
jmp 0x1800e56da
add rbx, r11
cmp byte [rbx], 0x20
je 0x1800e554b
test r9d, r9d
jne 0x1800e5570
lea rdx, [0x18000ce50]
mov rcx, rbx
call fcn.1800e683c
mov r9, rax
mov r11d, 1
test esi, esi
jne 0x1800e5540
mov rdx, qword [r14]
add r12, 8
movsxd r8, r9d
test r9d, r9d
je 0x1800e553b
mov r10, rbx
mov rcx, rdx
sub r10, rdx
mov al, byte [r10 + rcx]
test al, al
je 0x1800e553b
mov byte [rcx], al
add rcx, r11
mov rax, rcx
sub rax, rdx
cmp rax, r8
jb 0x1800e558c
jmp 0x1800e553b
mov dword [rsp + 0x20], 0x4e575b57
lea r10, [rsp + 0x20]
mov word [rsp + 0x24], 0x3842
xor r8d, r8d
mov eax, 0x51eb851f
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r8b
add r8d, r11d
sub al, cl
add al, 0x33
xor byte [r10], al
add r10, r11
cmp r8d, 6
jl 0x1800e55bd
mov al, byte [rsp + 0x20]
lea rcx, [rsp + 0x20]
jmp 0x1800e55f8
cmp al, byte [rdi]
je 0x1800e5601
add rcx, r11
mov al, byte [rcx]
test al, al
jne 0x1800e55ef
jmp 0x1800e56da
test rcx, rcx
je 0x1800e56da
jmp 0x1800e560f
add rbx, r11
cmp byte [rbx], 0x20
je 0x1800e560c
cmp byte [rdi], 0x64
je 0x1800e5645
cmp byte [rdi], 0x75
je 0x1800e5645
cmp byte [rdi], 0x78
jne 0x1800e562b
mov r13d, 0x10
jmp 0x1800e564b
cmp byte [rdi], 0x6f
jne 0x1800e5638
mov r13d, 8
jmp 0x1800e564b
cmp byte [rdi], 0x62
jne 0x1800e564b
mov r13d, 2
jmp 0x1800e564b
mov r13d, 0xa
test r9d, r9d
jne 0x1800e5689
test byte [rdi + 1], 0xdf
je 0x1800e5671
mov cl, byte [rbx]
mov rax, rbx
jmp 0x1800e5667
cmp cl, byte [rdi + 1]
je 0x1800e566d
add rax, r11
mov cl, byte [rax]
test cl, cl
jne 0x1800e565d
xor eax, eax
sub eax, ebx
jmp 0x1800e5686
lea rdx, [0x18000ce50]
mov rcx, rbx
call fcn.1800e683c
mov r11d, 1
mov r9d, eax
xor edx, edx
movsxd rax, r9d
test r9d, r9d
je 0x1800e56ba
lea rcx, [rsp + 0x40]
mov r8, rbx
sub r8, rcx
lea rcx, [rsp + 0x40]
add rcx, rdx
mov r9b, byte [rcx + r8]
test r9b, r9b
je 0x1800e56ba
add rdx, r11
mov byte [rcx], r9b
cmp rdx, rax
jb 0x1800e569e
add rbx, rax
mov byte [rsp + rax + 0x40], 0
test esi, esi
jne 0x1800e56da
mov rcx, qword [r14]
lea rdx, [rsp + 0x40]
add r12, 8
mov r8d, r13d
call fcn.1800e4e0c
xor r9d, r9d
inc r15d
mov dword [rbp + 0x288], r9d
test esi, esi
cmovne r15d, dword [rbp + 0x298]
lea r11d, [r9 + 1]
jmp 0x1800e570d
cmp cl, 0x20
jne 0x1800e5706
inc rbx
cmp byte [rbx], 0x20
je 0x1800e56fc
mov cl, byte [rbx]
cmp al, cl
jne 0x1800e5719
add rbx, r11
add rdi, r11
cmp byte [rdi], 0
jne 0x1800e53b1
mov rbx, qword [rsp + 0x380]
mov eax, r15d
add rsp, 0x340
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov r8, qword [rsp + 0x30]
mov rcx, rdx
mov rdx, r9
jmp 0x1800e5368