Function at 0x18000f240
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x1800750b0]
xor rax, rsp
mov qword [rbp - 8], rax
mov rax, qword [0x180078560]
mov edi, ecx
cmp rax, 0xffffffffffffffff
jne 0x18000f271
xor eax, eax
jmp 0x18000f557
test rax, rax
je 0x18000f280
mov eax, 1
jmp 0x18000f557
mov r10, qword [0x180078a70]
test r10, r10
jne 0x18000f2d0
mov rcx, qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call fcn.180015560
test rax, rax
je 0x18000f26a
lea rdx, [rbp - 0x38]
mov rcx, rax
mov dword [rbp - 0x38], 0x4c72644c
mov dword [rbp - 0x34], 0x4464616f
mov word [rbp - 0x30], 0x6c6c
mov byte [rbp - 0x2e], 0
call fcn.180014460
mov r10, rax
mov qword [0x180078a70], rax
test rax, rax
je 0x18000f26a
lea rax, [rbp - 0x28]
mov qword [rsp + 0x88], rsi
mov dword [rbp - 0x28], 0x5f0066
mov qword [rbp - 0x40], rax
mov eax, 0x1c
mov dword [rbp - 0x24], 0x6f006c
mov word [rbp - 0x46], ax
mov dword [rbp - 0x20], 0x630067
mov dword [rbp - 0x1c], 0x72006f
or rax, 0xffffffffffffffff
mov esi, 0x72
mov dword [rbp - 0x18], 0x2e0065
mov dword [rbp - 0x14], 0x6c0064
mov dword [rbp - 0x10], 0x6c
lea rcx, [rbp - 0x28]
nop word [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x18000f330
add ax, ax
lea r9, [0x180078560]
lea r8, [rbp - 0x48]
xor edx, edx
xor ecx, ecx
mov word [rbp - 0x48], ax
call r10
mov rcx, qword [0x180078560]
test rcx, rcx
jne 0x18000f371
mov qword [0x180078560], 0xffffffffffffffff
xor eax, eax
jmp 0x18000f54f
mov eax, dword [rcx + 0x3c]
mov qword [rsp + 0x80], rbx
lea r8, [rbp - 0x50]
mov ebx, dword [rax + rcx + 0x28]
mov edx, esi
mov qword [rbp - 0x50], 0xc8
add rbx, rcx
call rbx
test eax, eax
je 0x18000f533
mov rax, qword [rbp - 0x50]
mov rcx, qword [0x180078560]
lea r8, [rbp - 0x50]
mov edx, esi
mov qword [0x180078568], rax
mov qword [rbp - 0x50], 0xc9
call rbx
test eax, eax
je 0x18000f533
mov rax, qword [rbp - 0x50]
mov rcx, qword [0x180078560]
lea r8, [rbp - 0x50]
mov edx, esi
mov qword [0x180078578], rax
mov qword [rbp - 0x50], 0xca
call rbx
test eax, eax
je 0x18000f533
mov rax, qword [rbp - 0x50]
mov rcx, qword [0x180078560]
lea r8, [rbp - 0x50]
mov edx, esi
mov qword [0x180078580], rax
mov qword [rbp - 0x50], 0xcb
call rbx
test eax, eax
je 0x18000f533
mov rax, qword [rbp - 0x50]
mov rcx, qword [0x180078560]
lea r8, [rbp - 0x50]
mov edx, esi
mov qword [0x180078588], rax
mov qword [rbp - 0x50], 0x12c
call rbx
test eax, eax
je 0x18000f533
mov rax, qword [rbp - 0x50]
mov rcx, qword [0x180078560]
lea r8, [rbp - 0x50]
mov edx, esi
mov qword [0x180078590], rax
mov qword [rbp - 0x50], 0x12d
call rbx
test eax, eax
je 0x18000f533
mov rax, qword [rbp - 0x50]
mov rcx, qword [0x180078560]
lea r8, [rbp - 0x50]
mov edx, esi
mov qword [0x180078598], rax
mov qword [rbp - 0x50], 0x190
call rbx
test eax, eax
je 0x18000f533
mov rax, qword [rbp - 0x50]
mov rcx, qword [0x180078560]
lea r8, [rbp - 0x50]
mov edx, esi
mov qword [0x1800785a0], rax
mov qword [rbp - 0x50], 0x191
call rbx
test eax, eax
je 0x18000f533
mov rax, qword [rbp - 0x50]
mov rcx, qword [0x180078560]
lea r8, [rbp - 0x50]
mov edx, esi
mov qword [0x1800785a8], rax
mov qword [rbp - 0x50], 0xcc
call rbx
test eax, eax
je 0x18000f533
mov rax, qword [rbp - 0x50]
mov qword [0x1800785b0], rax
test edi, edi
je 0x18000f542
mov rcx, qword [0x180078560]
lea r8, [rbp - 0x50]
mov edx, esi
mov qword [rbp - 0x50], 0xcd
call rbx
test eax, eax
je 0x18000f533
mov rax, qword [rbp - 0x50]
mov rcx, qword [0x180078560]
lea r8, [rbp - 0x50]
mov edx, esi
mov qword [0x180078570], rax
mov qword [rbp - 0x50], 0xce
call rbx
test eax, eax
jne 0x18000f537
xor eax, eax
jmp 0x18000f547
mov rax, qword [rbp - 0x50]
mov qword [0x1800785b8], rax
mov eax, 1
mov rbx, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x88]
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.18001a000
mov rdi, qword [rsp + 0x90]
add rsp, 0x70
pop rbp
ret