Function at 0x18001ab80
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xf8
imul r14d, ecx, 0x46a
xor edi, edi
mov r12, r8
mov dword [rsp + 0x50], ecx
mov r15d, ecx
mov esi, ecx
mov dword [rsp + 0x24], r14d
cmp ecx, r14d
ja 0x18001b03f
movzx r14d, byte [rbp + 0x67]
lea r9d, [rdi + 0x69]
imul eax, r15d, 0x71
lea r10d, [rdi + 0x6c]
mov r15d, dword [rbp + 0x67]
lea r11d, [rdi + 0x4c]
lea r8d, [rdi + 0x73]
mov dword [rsp + 0x20], eax
mov ecx, dword [rsp + 0x20]
mov eax, dword [rsp + 0x24]
cmp esi, 0x1e15
ja 0x18001ace8
je 0x18001acce
cmp esi, 0x11
je 0x18001acb8
cmp esi, 0xfd
je 0x18001aca7
cmp esi, 0x792
je 0x18001ac71
cmp esi, 0xf13
je 0x18001ac57
cmp esi, 0x1694
jne 0x18001b028
lea rcx, [rbp - 0x79]
dec rcx
nop dword [rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18001ac40
mov eax, dword [0x18004491c]
mov dword [rcx], eax
jmp 0x18001b020
movzx eax, word [0x180044914]
mov word [rbp - 0x73], r9w
mov word [rbp - 0x72], ax
mov word [rbp - 0x70], r10w
jmp 0x18001b024
mov r8d, 2
mov word [rbp - 0x76], r11w
lea rdx, [0x180044918]
lea rcx, [rbp - 0x79]
call fcn.18002ccf0
mov rdx, qword [rbp + 0x6f]
mov r8d, 0x73
lea r9d, [r8 - 0xa]
lea r10d, [r8 - 7]
lea r11d, [r8 - 0x27]
jmp 0x18001b020
mov dword [rsp + 0x58], 5
mov byte [rbp + 0x7f], 0
jmp 0x18001b028
movzx eax, word [0x180044884]
mov word [rbp - 0x79], ax
mov word [rbp - 0x77], 0x74
jmp 0x18001b024
movzx eax, word [0x180044920]
mov word [rbp - 0x6c], ax
movzx eax, byte [0x180044922]
mov byte [rbp - 0x6a], al
jmp 0x18001b024
cmp esi, 0x2596
je 0x18001aff0
cmp esi, 0x70aa
je 0x18001afe2
cmp esi, 0xe057
je 0x18001ae8b
cmp esi, 0x15004
jne 0x18001b028
mov ebx, dword [rsp + 0x58]
cmp ebx, 1
jl 0x18001b028
mov r13d, ebx
nop dword [rax + rax]
mov r12d, 0x19
cmp r12d, 0x5e56
ja 0x18001ad69
cmp r12d, 0x25cb
jne 0x18001ae60
mov edx, 0x118
mov qword [rsp + 0x28], 0xfffffffffffffffa
lea rcx, [rsp + 0x28]
call fcn.18001b480
jmp 0x18001ae60
cmp r12d, 0x712f
je 0x18001addb
cmp r12d, 0x8408
je 0x18001ad9f
cmp r12d, 0x96e1
jne 0x18001ae60
mov dword [rsp + 0x30], 0x73646368
mov eax, dword [rsp + 0x30]
mov dword [0x18005cf78], eax
jmp 0x18001ae60
mov dword [rsp + 0x38], 0x34333241
mov dword [rsp + 0x3c], 0x38373635
movsd xmm0, qword [rsp + 0x38]
mov dword [rsp + 0x40], 0x514a5439
mov eax, dword [rsp + 0x40]
movsd qword [0x18005cf68], xmm0
mov dword [0x18005cf70], eax
mov byte [0x18005cf74], 0x4b
jmp 0x18001ae60
mov eax, edi
lea rcx, [rbp - 0x29]
mov byte [rcx], al
lea rcx, [rcx + 1]
inc eax
cmp eax, 0x34
jl 0x18001ade1
mov esi, 0x34
lea rdi, [rbp + 0xa]
nop word [rax + rax]
mov ebx, 0xb2
mov eax, ebx
sub eax, 0xb2
je 0x18001ae32
sub eax, 1
je 0x18001ae1d
cmp eax, 1
jne 0x18001ae4a
mov byte [rdi], r14b
jmp 0x18001ae4a
movsxd rax, r15d
lea rcx, [rbp - 0x29]
add rcx, rax
movzx eax, byte [rdi]
movzx r14d, byte [rcx]
mov byte [rcx], al
jmp 0x18001ae4a
lea r8, [rsp + 0x28]
mov dword [rsp + 0x28], esi
xor edx, edx
mov ecx, 0xc0
call fcn.18001b610
mov r15d, eax
inc ebx
cmp ebx, 0xb5
jb 0x18001ae05
dec esi
dec rdi
cmp esi, 1
jg 0x18001ae00
xor edi, edi
add r12d, 0x12d9
cmp r12d, 0xbc7a
jbe 0x18001ad36
sub r13, 1
jne 0x18001ad30
mov r12, qword [rbp + 0x77]
mov esi, dword [rsp + 0x50]
jmp 0x18001ac8c
mov eax, dword [r12]
test eax, eax
jle 0x18001aee8
mov rcx, qword [rdx]
cmp byte [rcx], 0x2d
jne 0x18001aed8
cmp byte [rcx + 1], 0x72
jne 0x18001aed8
cmp byte [rcx + 2], 0
jne 0x18001aed8
mov ecx, MakeDragList
nop dword [rax]
mov eax, ecx
sub eax, 0xb
je 0x18001aec5
cmp eax, 1
jne 0x18001aec9
mov byte [rbp + 0x7f], al
add rdx, 8
jmp 0x18001aec9
dec dword [r12]
dec ecx
cmp ecx, 0xa
ja 0x18001aeb0
mov eax, dword [r12]
mov qword [rbp + 0x6f], rdx
test eax, eax
jle 0x18001aee8
mov rcx, qword [rdx]
call fcn.18002dd64
mov dword [rsp + 0x58], eax
cmp byte [rbp + 0x7f], 0
je 0x18001afb7
mov edi, 0x12b
cmp edi, 0x12b
je 0x18001af33
cmp edi, 0x4293
jne 0x18001afa0
mov rax, qword [rbp - 0x31]
lea r8, [rsp + 0x28]
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x50]
mov rax, qword [rbp - 0x39]
mov edx, 0x4b
mov qword [rsp + 0x28], rax
call fcn.18001e110
jmp 0x18001afa0
mov ebx, 0x54
mov eax, ebx
sub eax, 0x54
je 0x18001af52
sub eax, 0x6b
je 0x18001af90
sub eax, 0x3b
je 0x18001afa0
cmp eax, 0x184a
je 0x18001afa0
jmp 0x18001af72
mov r9d, 0x67
mov qword [rsp + 0x28], 0x10
xor r8d, r8d
lea rdx, [rbp - 0x39]
lea rcx, [rsp + 0x28]
call fcn.18001d4b0
add ebx, 0x18f0
cmp ebx, 0x63c0
jbe 0x18001af38
jmp 0x18001afa0
lea r8, [rbp - 0x39]
xor edx, edx
mov ecx, 0xaa
call fcn.180024190
add edi, 0x4168
cmp edi, 0x82d0
jbe 0x18001aef7
jmp 0x18001ac8c
lea r8, [rsp + 0x28]
mov qword [rsp + 0x50], 0x36
mov edx, 0x4b
mov qword [rsp + 0x28], 0x2a
lea rcx, [rsp + 0x50]
call fcn.18001e110
jmp 0x18001ac8c
add rdx, 8
dec dword [r12]
mov qword [rbp + 0x6f], rdx
jmp 0x18001b024
lea rcx, [rbp - 0x79]
mov word [rbp - 0x6a], r8w
dec rcx
nop dword [rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18001b000
movsd xmm0, qword [str.sorInfor]
movzx eax, byte [0x180044910]
movsd qword [rcx], xmm0
mov byte [rcx + 8], al
mov ecx, dword [rsp + 0x20]
mov eax, dword [rsp + 0x24]
add esi, ecx
mov edi, 0
mov dword [rsp + 0x50], esi
cmp esi, eax
jbe 0x18001abf2
mov r15d, dword [rbp + 0x67]
lea r14d, [r15 + 0x1c2]
cmp r15d, r14d
jae 0x18001b2dc
mov rsi, qword [rbp + 0x7f]
mov r13d, 0x6d
movabs rbx, 0x6c0064002e0032
cmp r15d, 0xf2
ja 0x18001b2b5
je 0x18001b214
mov eax, r15d
sub eax, 0x11
je 0x18001b1e7
sub eax, 0x2d
je 0x18001b1c8
sub eax, 0x2d
je 0x18001b1ad
sub eax, 0x2d
je 0x18001b18a
cmp eax, 0x2d
jne 0x18001b331
lea r8d, [rax - 0x2c]
lea rdx, [0x180044964]
lea rcx, [rbp - 0x59]
call fcn.18002ca9c
mov edi, 0x126
nop
mov eax, edi
sub eax, 0x66
je 0x18001b10e
sub eax, 0x2e
je 0x18001b15e
sub eax, 0x69
je 0x18001b17a
sub eax, 0x29
je 0x18001b0eb
cmp eax, 0x97
je 0x18001b17a
jmp 0x18001b13c
xor r8d, r8d
lea rcx, [rbp - 0x59]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rcx, rax
lea rdx, [rbp - 0x79]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x28], rax
jmp 0x18001b13c
movzx ebx, word [rbp - 0x59]
lea rdx, [rbp - 0x59]
xor r9d, r9d
xor r8d, r8d
mov ecx, 0xe4
call fcn.180008b50
lea rdx, [rbp + 0x7f]
mov word [rbp + 0x7f], bx
mov ecx, 0x32
call fcn.180024070
mov byte [rsp + 0x28], al
add edi, 0x97
cmp edi, 0x419
jb 0x18001b0c0
mov rsi, qword [rsp + 0x28]
xor edi, edi
mov dword [rsp + 0x48], edi
jmp 0x18001b331
movzx eax, word [rbp - 0x59]
movzx edx, ax
shr dx, 7
xor dx, ax
shr ax, 0xe
lea ecx, [rax + 3]
shr dx, cl
mov byte [rsp + 0x28], dl
mov rsi, qword [rsp + 0x28]
xor edi, edi
mov dword [rsp + 0x48], edi
jmp 0x18001b331
mov r8d, 5
lea rdx, [0x180044934]
lea rcx, [rbp - 0x59]
call fcn.18002ca9c
mov qword [rbp - 0x4b], rbx
mov word [rbp - 0x43], di
jmp 0x18001b331
mov r8d, 2
lea rdx, [0x180044996]
lea rcx, [rbp - 0x59]
call fcn.18002ca9c
jmp 0x18001b331
mov r8d, 1
lea rdx, [0x180044954]
lea rcx, [rbp - 0x79]
call fcn.18002ccf0
mov word [rbp - 0x59], di
jmp 0x18001b331
lea rcx, [rbp - 0x79]
mov word [rbp - 0x61], r13w
dec rcx
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18001b1f3
mov eax, dword [str.atio]
mov dword [rcx], eax
movzx eax, byte [0x1800449ac]
mov byte [rcx + 4], al
jmp 0x18001b331
lea rdx, [rsp + 0x48]
xor ecx, ecx
call rsi
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x18001b2ce
mov rdi, qword [r12 + 8]
mov rdx, qword [r12]
mov rcx, rdi
mov ebx, dword [rsp + 0x48]
sub rcx, rdx
sar rcx, 5
shr rbx, 5
mov byte [rbp + 0x67], 0
cmp rbx, rcx
jae 0x18001b263
shl rbx, 5
add rbx, rdx
mov qword [r12 + 8], rbx
xor edi, edi
jmp 0x18001b331
jbe 0x18001b2ae
mov rax, qword [r12 + 0x10]
sub rax, rdx
sar rax, 5
cmp rbx, rax
jbe 0x18001b28c
lea r8, [rbp + 0x67]
mov rdx, rbx
mov rcx, r12
call fcn.180003810
xor edi, edi
jmp 0x18001b331
sub rbx, rcx
je 0x18001b2a9
mov r8, rbx
xor edx, edx
shl r8, 5
mov rcx, rdi
call fcn.180029c80
shl rbx, 5
add rdi, rbx
mov qword [r12 + 8], rdi
xor edi, edi
jmp 0x18001b331
mov eax, r15d
sub eax, 0xfd
je 0x18001b32d
sub eax, 0x22
je 0x18001b2f4
sub eax, 0xb
je 0x18001b2dc
cmp eax, 0x22
jne 0x18001b331
mov rax, qword [r12 + 8]
cmp qword [r12], rax
setne byte [rsp + 0x20]
mov eax, dword [rsp + 0x20]
add rsp, 0xf8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, qword [r12]
lea rdx, [rsp + 0x48]
call rsi
test eax, eax
jne 0x18001b2ae
mov ecx, 0x27
mov eax, ecx
sub eax, 0x27
je 0x18001b316
cmp eax, 1
je 0x18001b2dc
jmp 0x18001b324
mov rax, qword [r12]
mov qword [r12 + 8], rax
mov byte [rsp + 0x20], 0
inc ecx
cmp ecx, 0x29
jb 0x18001b308
jmp 0x18001b331
mov dword [rsp + 0x20], edi
add r15d, 0x2d
cmp r15d, r14d
jae 0x18001b2dc
jmp 0x18001b059