Function at 0x18001abb0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x18]
sub rsp, 0x118
mov rax, qword [0x180067a78]
xor rax, rsp
mov qword [rbp], rax
mov rax, qword [rbp + 0x90]
mov rdi, rcx
movdqa xmm0, xmmword [str.dsssssaaaaaiiiii]
mov rsi, rdx
mov r12, qword [rbp + 0x80]
mov r15, r9
mov r13, qword [rbp + 0x88]
mov r14, r8
mov qword [rbp - 0x58], rax
mov rax, qword [rbp + 0x98]
mov qword [rbp - 0x60], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp - 0x68], rax
movzx eax, word [0x1800674a8]
mov word [rsp + 0x64], ax
mov eax, 0xbc93
movzx ebx, word [0x1800674b0]
mov word [rsp + 0x58], ax
mov al, byte [0x180067436]
mov eax, dword [0x180067530]
mov rcx, qword [0x1800674e0]
mov qword [rbp - 0x80], rax
movzx eax, word [0x1800674a8]
mov dword [rsp + 0x70], 0xbe
mov word [rsp + 0x54], cx
mov word [rsp + 0x64], ax
mov eax, 0x6cbd
mov word [rsp + 0x60], ax
movzx eax, word [0x180067508]
mov dword [rsp + 0x78], eax
mov eax, dword [0x1800674a0]
mov dword [rsp + 0x7c], eax
mov eax, dword [0x180067510]
mov dword [rsp + 0x6c], eax
movzx eax, byte [0x18006741f]
mov byte [rsp + 0x5c], 0xb7
mov dword [rsp + 0x74], ecx
xor ecx, ecx
mov qword [rbp - 0x78], rax
mov eax, 0xffffea94
mov word [rsp + 0x60], ax
movsx eax, byte [0x180067437]
mov word [rsp + 0x50], ax
lea edx, [rcx + 1]
movzx eax, word [0x180067524]
mov word [rsp + 0x50], ax
mov eax, 0x30bc
mov byte [rsp + 0x50], 0x45
mov word [rsp + 0x50], ax
movsxd rax, dword [0x1800674f8]
mov qword [rbp - 0x70], rax
movsx eax, byte [0x18006745a]
mov word [rsp + 0x50], ax
mov rax, qword [0x1800674a8]
mov qword [rbp - 0x70], rax
mov eax, 0x39
mov word [rsp + 0x50], ax
mov rax, qword [0x180067518]
mov eax, dword [0x1800674b8]
mov byte [rsp + 0x50], al
mov eax, ecx
mov qword [rbp - 0x70], 0xb8
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x10], 0x6b6b6b69
mov dword [rbp - 0xc], 0x63636363
mov byte [rbp - 8], cl
add byte [rbp + rax - 0x20], 2
add rax, rdx
cmp rax, 0x18
jb 0x18001ad37
mov rdx, qword [rbp - 0x80]
mov r9d, 0x73
movzx eax, word [0x1800674b0]
movzx r8d, word [0x180067500]
mov word [rsp + 0x28], cx
movzx ecx, word [0x180067508]
mov word [rsp + 0x20], ax
call fcn.18001b36c
xor r8d, r8d
movzx ecx, ax
cmp ecx, 0x3e
mov edx, r8d
mov eax, r8d
setne dl
test ecx, ecx
setne al
cmp eax, edx
jae 0x18001ae15
mov byte [0x180067436], 3
movzx eax, byte [0x180067436]
mov ecx, eax
test al, al
je 0x18001ae07
sub ecx, 1
je 0x18001addc
cmp ecx, 1
jne 0x18001ae4c
movsx ecx, byte [rsp + 0x5c]
mov eax, 0x10e0
add cx, ax
mov word [0x18006746c], cx
mov eax, dword [rsp + 0x70]
imul eax, eax, 0xa5a
mov qword [0x180067550], rax
jmp 0x18001ae4c
mov eax, dword [0x1800674c8]
shl eax, 3
cdqe
mov qword [rbp - 0x78], rax
movzx eax, word [0x1800674e8]
add ax, 0xc
not ax
sub ax, word [0x1800674bc]
mov word [rsp + 0x54], ax
jmp 0x18001ae4c
mov al, byte [0x18006746e]
mov byte [0x18006745a], al
jmp 0x18001ae4c
mov eax, dword [0x1800674b8]
mov rax, qword [rbp - 0x80]
movsx rcx, word [rsp + 0x60]
mov rax, qword [rbp - 0x80]
imul rax, rcx
movzx ecx, byte [0x18006746a]
add rcx, rax
mov rax, qword [0x1800674c0]
add rax, rcx
mov ecx, r8d
sete cl
mov word [rsp + 0x54], cx
movsx r8d, byte [0x18006745a]
xor ecx, ecx
mov rdx, qword [0x180067498]
lea r9d, [rcx + 0x4e]
call fcn.18001bdb8
mov eax, eax
mov qword [0x1800674d8], rax
mov rax, qword [0x1800674d8]
mov ecx, dword [rsp + 0x74]
cmp ecx, ebx
jge 0x18001ae98
mov ecx, dword [0x1800674f8]
sub ecx, dword [0x180067520]
mov eax, dword [0x1800674f8]
add eax, ecx
mov dword [0x1800674f8], eax
mov al, byte [0x18006746e]
xor edx, edx
test al, al
je 0x18001af07
movzx ecx, word [rsp + 0x58]
movabs rax, 0x2df9b315d4a86
cmp rax, rcx
je 0x18001aed8
mov rax, qword [0x180067550]
test rax, rax
je 0x18001aed8
mov eax, dword [0x180067538]
add eax, 0x23
cdqe
mov qword [0x1800674a0], rax
jmp 0x18001af12
cmp word [0x180067524], dx
je 0x18001aee6
movzx eax, word [rsp + 0x54]
movzx eax, word [rsp + 0x60]
shl ax, 2
mov word [rsp + 0x54], ax
mov rax, qword [rbp - 0x78]
add rax, 0xaf
mov qword [0x180067548], rax
jmp 0x18001af12
mov eax, dword [rsp + 0x78]
sub eax, 0xf
mov dword [rsp + 0x6c], eax
mov r8d, 2
mov word [rsp + 0x68], 0x23ff
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x20]
call fcn.18001a7ac
mov qword [rbp - 0x50], rax
mov r9, r12
xor eax, eax
mov qword [rbp - 0x48], rdi
movups xmm0, xmmword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov r8, r15
mov rax, qword [rbp - 0x68]
mov rdx, r14
movsd xmm1, qword [rbp - 0x40]
mov rcx, rsi
mov qword [rsp + 0x40], rax
mov rax, qword [rbp - 0x60]
mov qword [rsp + 0x38], rax
mov rax, qword [rbp - 0x58]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x38]
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rax
movups xmmword [rbp - 0x38], xmm0
movsd qword [rbp - 0x28], xmm1
call fcn.18000a100
mov rbx, rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov word [rsp + 0x58], ax
xor edx, edx
movzx ecx, word [rsp + 0x58]
test cx, cx
je 0x18001afc5
movsx edx, byte [0x180067437]
mov ecx, dword [rsp + 0x7c]
cmp edx, ecx
jne 0x18001afe4
movzx ecx, word [rsp + 0x64]
dec cx
mov word [rsp + 0x64], cx
mov al, byte [0x18006746b]
jmp 0x18001afe4
mov eax, dword [0x1800674c8]
cmp qword [0x180067510], rdx
je 0x18001afd8
mov eax, dword [rsp + 0x6c]
mov rax, qword [0x180067550]
mov word [rsp + 0x58], ax
mov rax, rbx
mov rcx, qword [rbp]
xor rcx, rsp
call fcn.18003f550
add rsp, 0x118
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret