Function at 0x1800b301c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbx
sub rsp, 0x68
mov dword [rsp + 0x40], 0x45004b
mov dword [rsp + 0x44], 0x4e0052
mov dword [rsp + 0x48], 0x4c0045
mov dword [rsp + 0x4c], 0x320033
mov dword [rsp + 0x50], 0x44002e
mov dword [rsp + 0x54], 0x4c004c
mov dword [rsp + 0x58], 0
mov dword [rsp + 0x20], 0x65006b
mov dword [rsp + 0x24], 0x6e0072
mov dword [rsp + 0x28], 0x6c0065
mov dword [rsp + 0x2c], 0x320033
mov dword [rsp + 0x30], 0x64002e
mov dword [rsp + 0x34], 0x6c006c
mov dword [rsp + 0x38], 0
lea rax, [0x1800b3639]
push rax
push rdi
push r14
push rsi
push r15
push r13
push rbx
push rbp
mov rbp, rsp
sub rsp, 0x1d0
sub qword [rbp - 0x5b], rsi
mov dword [rbp - 0xa9], ecx
mov ecx, dword [rbp - 0x192]
mov qword [rbp - 0x63], rax
mov dword [0x1800d9d31], edx
mov rbx, qword [rbp - 0x196]
mov edx, dword [rbp - 0x33]
mov dword [rbp - 0x14c], esi
lea rax, [rbp - 0xb9]
mov rdi, qword [rbp - 0xf1]
mov dword [rbp - 0xe1], esi
mov ecx, edx
mov edi, ebx
mov ebx, edx
mov edi, dword [rbp - 0x126]
and r8, rdi
sub r9, rdx
mov ebx, dword [rbp - 0xc5]
mov r15, r13
add r11, r14
mov edx, dword [rbp - 0x116]
mov r14, qword [rbp - 0x51]
mov dword [rbp - 0xe6], edi
movzx ebx, bh
mov dword [rbp - 0x5a], edx
test qword [0x1800da012], r13
jns 0x1800b312f
mov r14, qword [rbp - 0x15c]
mov dword [rbp - 0x12f], edi
cmp ch, 0xfa
je 0x1800b32ae
mov qword [rbp - 0x70], rdi
cmp r13, 0xffffffff833745ee
je 0x1800b3208
or rdi, qword [rbp - 0x77]
movzx edi, dh
mov dword [rbp - 0x114], edi
xor ecx, dword [rbp - 0x84]
mov r15, rcx
mov r8, rcx
add r9, 0x4e7c
mov rdx, qword [rbp - 0x184]
and qword [rbp - 0xdb], rsi
movzx edx, cl
mov rcx, qword [rbp - 0x191]
add qword [rbp - 0x193], rcx
movzx eax, byte [0x1800d9b78]
mov dword [0x1800da176], ebx
mov qword [rbp - 0xd4], rax
mov r13, qword [rbp - 0x1bf]
xor dword [rbp - 0x193], ecx
add rdx, qword [rbp - 0x48]
mov eax, eax
mov dword [rbp - 0x57], edx
mov bh, ch
mov dword [rbp - 0x14c], eax
add edi, 0xb1bc
cmp rcx, r8
je 0x1800b3208
mov r9, qword [rbp - 0x26]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800b31eb
mov dword [rbp - 0xa], esi
add rdx, qword [rbp - 0xa4]
inc qword [rsp]
cmp dword [rsp], 0x1f
jl 0x1800b31dd
add rsp, 0x10
sub edi, eax
mov rsi, 0xcd1d
mov r8, r10
mov r9, qword [rbp - 0x14f]
sub r10, qword [rbp - 0x1a1]
add r14, rax
and qword [rbp - 0x182], r11
sub r13, qword [rbp - 0x1c6]
mov r10, r15
mov r14, qword [rbp - 0x164]
sub r10, qword [0x1800d9330]
sub rdx, rbx
mov rbx, qword [rbp - 0x6d]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800b325b
mov r8, qword [rbp - 0x181]
sub r15, r8
mov qword [rbp - 0x10c], r15
inc qword [rsp]
cmp dword [rsp], 0x30
jl 0x1800b3246
add rsp, 0x10
mov qword [rbp - 0x116], r15
test r15, 0x69898d88
jne 0x1800b329e
mov qword [rbp - 0x108], rcx
mov eax, 0x7f65
mov r8, rsi
mov edi, dword [rbp - 0xd3]
mov dword [rbp - 0xcf], ecx
mov ax, word [rbp - 0x23]
add qword [str.zkJDDYCMyihwd2vbqJBAUJJBFZrkr5ktxhT4LZQlLOEAFQfAjsczlJyIAHdBKUUtSbGEWteqaBctybfKOfRTmFRJk4o], rdi
xor edx, dword [rbp - 0x5b]
mov esi, eax
or rbx, qword [rbp - 0xf5]
mov qword [rbp - 0xb1], r11
mov eax, dword [rbp - 0x1bd]
xor edx, dword [rbp - 0x79]
mov edi, dword [rbp - 0xa3]
sub edx, edi
mov qword [rbp - 0x164], rbx
add eax, dword [rbp - 0x119]
mov qword [rbp - 0x170], rax
mov qword [rbp - 0xd3], r15
movzx ecx, dh
sub esi, ebx
mov dword [rbp - 0xbf], ecx
mov rbx, qword [rbp - 0xef]
cmp r15, 0xe6b25a5
jmp 0x1800b32f9
add r8, 0x8f85
cmp ah, 0x55
jmp 0x1800b3305
mov dword [rbp - 0x77], eax
test edi, edi
je 0x1800b33bc
sub r8, 0x7709
movzx eax, word [rbp - 0x97]
mov r11, qword [rbp - 0x1bf]
and qword [rbp - 0x1b], rsi
mov r15, qword [rbp - 0x58]
mov dword [rbp - 0x168], edx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800b33a4
and dword [rbp - 0x12], ecx
sub bh, byte [str.zznadOQws4AneQVZtSks4LxqMVKkCwkdpSCkmrRe2v455kiVMC2tZYyNYdbxgCJ0JyhJWphUw0m1jSHAUYXvOkfXfnFZBrYAb6hqmFDMMKPGz]
mov dword [rbp - 0x24], ecx
lea r13, [rbp - 0x181]
add edi, dword [rbp - 0x1a7]
lea r8, [rbp - 0x3f]
movzx eax, ah
sub r15, 0x5762
movzx eax, dh
xor r9, qword [rbp - 0x77]
add r15, r14
mov dword [rbp - 0x130], ecx
mov r10, qword [rbp - 0x15f]
mov r14, 0x2685
sub ebx, dword [rbp - 0xae]
sub rdi, qword [0x1800d9cb2]
or r10, r8
add dword [rbp - 5], eax
mov dx, word [rbp - 0x186]
inc qword [rsp]
mov r10, 0x2b
cmp qword [rsp], r10
jle 0x1800b3341
add rsp, 0x10
mov qword [rbp - 0x112], r10
cmp ecx, 0x706d5bbb
jo 0x1800b33ca
add rax, 0x1925
cmp r13, rsi
js 0x1800b3537
movzx edx, ah
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800b3513
add edi, ecx
mov qword [0x1800d95fa], r14
sub rax, qword [rbp - 0xe4]
sub ebx, dword [rbp - 0x35]
mov qword [rbp - 0xbc], rdi
sub dword [rbp - 0x61], edx
mov edx, esi
mov r8, qword [rbp - 0x51]
mov qword [rbp - 0x10b], r13
movzx ebx, dl
add dword [rbp - 0x1af], ebx
mov rax, qword [rbp - 0xf2]
mov qword [rbp - 0x3e], rdx
mov qword [rbp - 0x14b], rcx
mov eax, 0x33de
mov ebx, 0xa4dd
xor qword [rbp - 0x159], rsi
and rdi, qword [rbp - 0x74]
and qword [rbp - 0x100], rdi
mov ebx, esi
mov r14, r11
mov edi, ecx
mov esi, dword [rbp - 0x1bb]
mov rax, qword [rbp - 0xe4]
mov ebx, edi
mov dword [rbp - 0x158], ecx
mov edx, dword [rbp - 0xe1]
movzx esi, ah
mov eax, 0x8eff
mov rcx, qword [rbp - 0x3c]
sub qword [rbp - 0xdf], rcx
movzx edx, dl
mov dword [rbp - 0xcc], ecx
mov rdi, 0xa4bb
mov eax, 0x720b
mov r15, qword [0x1800d9a88]
sub esi, dword [rbp - 0x72]
movzx ebx, byte [0x1800d951d]
mov rdi, qword [rbp - 0xc0]
or qword [rbp - 0x154], rsi
add rbx, rdx
sub rax, rsi
mov rax, qword [rbp - 0x10]
mov ebx, dword [rbp - 0x46]
and bx, word [rbp - 0xbe]
add dword [rbp - 0x182], edx
add bh, cl
mov edx, dword [rbp - 0xa9]
mov edi, 0xcc5a
movzx ebx, ah
mov rax, qword [0x1800d9fd5]
sub qword [rbp - 0xe7], r11
mov byte [rbp - 0x4f], dl
add ebx, 0x3940
xor edi, dword [rbp - 0xc5]
mov r9, rsi
mov r10, qword [rbp - 0x115]
movzx ecx, dh
mov r14, qword [rbp - 0xf7]
mov r9, r11
inc qword [rsp]
cmp dword [rsp], 0xc
jl 0x1800b33e7
add rsp, 0x10
mov ecx, dword [0x1800d932b]
mov qword [rbp - 0xe6], rax
mov ecx, eax
mov rdi, qword [rbp - 0xb2]
mov rax, rax
movzx ebx, di
add edx, 0xc180
cmp ecx, edx
ja 0x1800b3547
cmp esi, dword [0x1800d9833]
jae 0x1800b3588
mov qword [0x1800d98e9], r15
mov r15, qword [rbp - 0xe0]
or esi, dword [0x1800d9770]
mov r9, rsi
mov dword [rbp - 0x103], ebx
mov esi, dword [rbp - 0x1c6]
sub r9, qword [rbp - 0x41]
sub r8, r15
add r8, r10
mov esi, 0x9836
mov qword [rbp - 0x1cb], r14
mov r10, qword [rbp - 0x1c3]
mov al, byte [rbp - 0x11]
mov qword [rbp - 0x1ac], r14
and r8, r15
xor rbx, qword [rbp - 0x169]
cmp rcx, 0x4bdda060
je 0x1800b3628
and rax, r9
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800b361e
add dword [rbp - 0x1b8], ebx
or r8, 0x58af
mov dx, word [rbp - 0xc0]
sub eax, dword [rbp - 0x1ce]
mov dword [rbp - 0x131], esi
mov ecx, dword [rbp - 0x154]
movzx edi, cx
xor edi, ebx
mov r15, qword [rbp - 0x48]
mov dword [rbp - 0x87], ecx
mov al, byte [rbp - 0x16d]
mov dword [rbp - 0x18e], eax
mov rax, 0xfa38
mov dword [rbp - 0x16], eax
mov r11, qword [0x1800d9855]
movzx edx, dx
add ecx, ebx
add esi, dword [0x1800d961d]
inc qword [rsp]
cmp dword [rsp], 0x26
jl 0x1800b35bd
add rsp, 0x10
leave
pop rbx
pop r13
pop r15
pop rsi
pop r14
pop rdi
ret