Function at 0x1800ce520
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x208
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x4a
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x228]
mov rax, qword [0x180370940]
xor rax, rbp
mov qword [rbp + 0x1d8], rax
mov edx, 0x2e
mov rcx, qword [rbp + 0x200]
call fcn.1800cb5c0
mov qword [rbp + 8], rax
cmp qword [rbp + 8], 0
je 0x1800ce596
mov rax, qword [rbp + 0x200]
mov rcx, qword [rbp + 8]
sub rcx, rax
mov rax, rcx
sar rax, 1
mov qword [rbp + 0x1b8], rax
jmp 0x1800ce5a9
mov rcx, qword [rbp + 0x200]
call fcn.1800cb840
mov qword [rbp + 0x1b8], rax
mov rax, qword [rbp + 0x1b8]
mov qword [rbp + 0x28], rax
lea rcx, [0x180257228]
call fcn.1800cb840
mov rcx, qword [rbp + 0x28]
lea rax, [rcx + rax + 1]
mov qword [rbp + 0x1b8], rax
mov eax, 2
mov rcx, qword [rbp + 0x1b8]
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.18015fcb0
mov qword [rbp + 0x148], rax
mov rax, qword [rbp + 0x148]
mov qword [rbp + 0x48], rax
mov r8, qword [rbp + 0x28]
mov rdx, qword [rbp + 0x200]
mov rcx, qword [rbp + 0x48]
call fcn.1800cb730
mov qword [rbp + 0x68], rax
xor eax, eax
mov rcx, qword [rbp + 0x68]
mov word [rcx], ax
lea rdx, [0x180257228]
mov rcx, qword [rbp + 0x68]
call fcn.1800c1850
lea rdx, [rbp + 0x48]
lea rcx, [0x180376b30]
call fcn.1800d2ad0
lea rcx, [0x180376b30]
call fcn.1800d2bd0
dec rax
mov rcx, rax
call fcn.1800d0130
movzx eax, al
test eax, eax
je 0x1800ce762
mov byte [rbp + 0x168], 0x5b
mov byte [rbp + 0x169], 0x63
mov byte [rbp + 0x16a], 0x6f
mov byte [rbp + 0x16b], 0x6e
mov byte [rbp + 0x16c], 0x66
mov byte [rbp + 0x16d], 0x69
mov byte [rbp + 0x16e], 0x67
mov byte [rbp + 0x16f], 0x2e
mov byte [rbp + 0x170], 0x63
mov byte [rbp + 0x171], 0x70
mov byte [rbp + 0x172], 0x70
mov byte [rbp + 0x173], 0x3a
mov byte [rbp + 0x174], 0x32
mov byte [rbp + 0x175], 0x39
mov byte [rbp + 0x176], 0x33
mov byte [rbp + 0x177], 0x5d
mov byte [rbp + 0x178], 0x20
mov byte [rbp + 0x179], 0
lea rcx, [rbp + 0x168]
call fcn.1800ceb30
mov r8, rax
mov dl, 1
lea rcx, [0x1802c1e08]
call fcn.18015e150
mov qword [rbp + 0x1b8], rax
lea rdx, str.created_configuration_file:__
mov rcx, qword [rbp + 0x1b8]
call fcn.18015de80
mov qword [rbp + 0x1c0], rax
mov rax, qword [rbp + 0x48]
mov qword [rbp + 0x1c8], rax
mov rdx, qword [rbp + 0x1c8]
mov rcx, qword [rbp + 0x1c0]
call fcn.18015ded0
mov qword [rbp + 0x1d0], rax
lea rdx, [0x180257224]
mov rcx, qword [rbp + 0x1d0]
call fcn.18015de80
mov al, 1
jmp 0x1800ce858
mov byte [rbp + 0x198], 0x5b
mov byte [rbp + 0x199], 0x63
mov byte [rbp + 0x19a], 0x6f
mov byte [rbp + 0x19b], 0x6e
mov byte [rbp + 0x19c], 0x66
mov byte [rbp + 0x19d], 0x69
mov byte [rbp + 0x19e], 0x67
mov byte [rbp + 0x19f], 0x2e
mov byte [rbp + 0x1a0], 0x63
mov byte [rbp + 0x1a1], 0x70
mov byte [rbp + 0x1a2], 0x70
mov byte [rbp + 0x1a3], 0x3a
mov byte [rbp + 0x1a4], 0x32
mov byte [rbp + 0x1a5], 0x39
mov byte [rbp + 0x1a6], 0x37
mov byte [rbp + 0x1a7], 0x5d
mov byte [rbp + 0x1a8], 0x20
mov byte [rbp + 0x1a9], 0
lea rcx, [rbp + 0x198]
call fcn.1800ceb30
mov r8, rax
mov dl, 2
lea rcx, [0x1802c1e08]
call fcn.18015e150
mov qword [rbp + 0x1b8], rax
lea rdx, str.failed_to_create_configuration_file:__
mov rcx, qword [rbp + 0x1b8]
call fcn.18015de80
mov qword [rbp + 0x1c0], rax
mov rax, qword [rbp + 0x48]
mov qword [rbp + 0x1c8], rax
mov rdx, qword [rbp + 0x1c8]
mov rcx, qword [rbp + 0x1c0]
call fcn.18015ded0
mov qword [rbp + 0x1d0], rax
lea rdx, [0x180257224]
mov rcx, qword [rbp + 0x1d0]
call fcn.18015de80
xor al, al
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x1802569a0]
call fcn.180224a80
mov rax, rdi
mov rcx, qword [rbp + 0x1d8]
xor rcx, rbp
call fcn.180224dd0
lea rsp, [rbp + 0x1e8]
pop rdi
pop rbp
ret