Function at 0x18000fa80
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x1800760b0]
xor rax, rsp
mov qword [rbp - 8], rax
mov rax, qword [0x180079580]
mov edi, ecx
cmp rax, 0xffffffffffffffff
jne 0x18000fab1
xor eax, eax
jmp 0x18000fd97
test rax, rax
je 0x18000fac0
mov eax, 1
jmp 0x18000fd97
mov r10, qword [0x180079a90]
test r10, r10
jne 0x18000fb10
mov rcx, qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call fcn.180015880
test rax, rax
je 0x18000faaa
lea rdx, [rbp - 0x38]
mov rcx, rax
mov dword [rbp - 0x38], 0x4c72644c
mov dword [rbp - 0x34], 0x4464616f
mov word [rbp - 0x30], 0x6c6c
mov byte [rbp - 0x2e], 0
call fcn.180014780
mov r10, rax
mov qword [0x180079a90], rax
test rax, rax
je 0x18000faaa
lea rax, [rbp - 0x28]
mov qword [rsp + 0x88], rsi
mov dword [rbp - 0x28], 0x5f0066
mov qword [rbp - 0x40], rax
mov eax, 0x1c
mov dword [rbp - 0x24], 0x6f006c
mov word [rbp - 0x46], ax
mov dword [rbp - 0x20], 0x630067
mov dword [rbp - 0x1c], 0x72006f
or rax, 0xffffffffffffffff
mov esi, 0x72
mov dword [rbp - 0x18], 0x2e0065
mov dword [rbp - 0x14], 0x6c0064
mov dword [rbp - 0x10], 0x6c
lea rcx, [rbp - 0x28]
nop word [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x18000fb70
add ax, ax
lea r9, [0x180079580]
lea r8, [rbp - 0x48]
xor edx, edx
xor ecx, ecx
mov word [rbp - 0x48], ax
call r10
mov rcx, qword [0x180079580]
test rcx, rcx
jne 0x18000fbb1
mov qword [0x180079580], 0xffffffffffffffff
xor eax, eax
jmp 0x18000fd8f
mov eax, dword [rcx + 0x3c]
mov qword [rsp + 0x80], rbx
lea r8, [rbp - 0x50]
mov ebx, dword [rax + rcx + 0x28]
mov edx, esi
mov qword [rbp - 0x50], 0xc8
add rbx, rcx
call rbx
test eax, eax
je 0x18000fd73
mov rax, qword [rbp - 0x50]
mov rcx, qword [0x180079580]
lea r8, [rbp - 0x50]
mov edx, esi
mov qword [0x180079588], rax
mov qword [rbp - 0x50], 0xc9
call rbx
test eax, eax
je 0x18000fd73
mov rax, qword [rbp - 0x50]
mov rcx, qword [0x180079580]
lea r8, [rbp - 0x50]
mov edx, esi
mov qword [0x180079598], rax
mov qword [rbp - 0x50], 0xca
call rbx
test eax, eax
je 0x18000fd73
mov rax, qword [rbp - 0x50]
mov rcx, qword [0x180079580]
lea r8, [rbp - 0x50]
mov edx, esi
mov qword [0x1800795a0], rax
mov qword [rbp - 0x50], 0xcb
call rbx
test eax, eax
je 0x18000fd73
mov rax, qword [rbp - 0x50]
mov rcx, qword [0x180079580]
lea r8, [rbp - 0x50]
mov edx, esi
mov qword [0x1800795a8], rax
mov qword [rbp - 0x50], 0x12c
call rbx
test eax, eax
je 0x18000fd73
mov rax, qword [rbp - 0x50]
mov rcx, qword [0x180079580]
lea r8, [rbp - 0x50]
mov edx, esi
mov qword [0x1800795b0], rax
mov qword [rbp - 0x50], 0x12d
call rbx
test eax, eax
je 0x18000fd73
mov rax, qword [rbp - 0x50]
mov rcx, qword [0x180079580]
lea r8, [rbp - 0x50]
mov edx, esi
mov qword [0x1800795b8], rax
mov qword [rbp - 0x50], 0x190
call rbx
test eax, eax
je 0x18000fd73
mov rax, qword [rbp - 0x50]
mov rcx, qword [0x180079580]
lea r8, [rbp - 0x50]
mov edx, esi
mov qword [0x1800795c0], rax
mov qword [rbp - 0x50], 0x191
call rbx
test eax, eax
je 0x18000fd73
mov rax, qword [rbp - 0x50]
mov rcx, qword [0x180079580]
lea r8, [rbp - 0x50]
mov edx, esi
mov qword [0x1800795c8], rax
mov qword [rbp - 0x50], 0xcc
call rbx
test eax, eax
je 0x18000fd73
mov rax, qword [rbp - 0x50]
mov qword [0x1800795d0], rax
test edi, edi
je 0x18000fd82
mov rcx, qword [0x180079580]
lea r8, [rbp - 0x50]
mov edx, esi
mov qword [rbp - 0x50], 0xcd
call rbx
test eax, eax
je 0x18000fd73
mov rax, qword [rbp - 0x50]
mov rcx, qword [0x180079580]
lea r8, [rbp - 0x50]
mov edx, esi
mov qword [0x180079590], rax
mov qword [rbp - 0x50], 0xce
call rbx
test eax, eax
jne 0x18000fd77
xor eax, eax
jmp 0x18000fd87
mov rax, qword [rbp - 0x50]
mov qword [0x1800795d8], rax
mov eax, 1
mov rbx, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x88]
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.18001a840
mov rdi, qword [rsp + 0x90]
add rsp, 0x70
pop rbp
ret