Function at 0x180009a30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rsi
push rdi
sub rsp, 0x9d8
mov rax, qword [0x180024040]
xor rax, rsp
mov qword [rsp + 0x9c0], rax
lea rcx, [0x18001c7d8]
call fcn.1800087a0
lea rdx, str.GetThreadContext
mov rcx, rax
call fcn.1800089c0
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0xf8], 8
mov byte [rsp + 0x20], 0x41
mov dword [rsp + 0xac], 3
mov eax, 8
mov word [rsp + 0x3c], ax
mov qword [rsp + 0x100], 0
mov eax, 7
mov word [rsp + 0x40], ax
mov byte [rsp + 0x21], 0
lea rax, [rsp + 0x1d8]
lea rcx, str.AyjngeEBoRcCTGDktIbdlNsvPprQHzZuMYiwmaXJUWOfVqFLK
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
lea rcx, [0x18001c848]
call fcn.1800087a0
lea rdx, str.SetThreadContext
mov rcx, rax
call fcn.1800089c0
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0x108], 0
mov qword [rsp + 0x110], 0
mov byte [rsp + 0x22], 0x69
mov eax, 3
mov word [rsp + 0x44], ax
mov byte [rsp + 0x23], 0
lea rax, [rsp + 0x210]
lea rcx, str.HkShAUWMogwJIaQCuxEYtDiRzNdOvVmcjqylfPpbKsLrXGeBn
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov eax, 2
mov word [rsp + 0x48], ax
mov dword [rsp + 0xb0], 2
mov dword [rsp + 0xb4], 0
mov eax, 6
mov word [rsp + 0x4c], ax
mov qword [rsp + 0x118], 0
mov byte [rsp + 0x24], 0x70
mov byte [rsp + 0x25], 0
mov eax, 9
mov word [rsp + 0x50], ax
mov dword [rsp + 0xb8], 0
lea rax, [rsp + 0x248]
lea rcx, str.XBImrajcePTkfwxSypYdNHisOQlDVZCEFuUzKWnMvtAJbgGLq
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov qword [rsp + 0x120], 7
lea rax, [rsp + 0x4f0]
mov rdi, rax
xor eax, eax
mov ecx, 0x4d0
rep stosb byte [rdi], al
mov eax, 9
mov word [rsp + 0x54], ax
mov dword [rsp + 0xbc], 1
lea rax, [rsp + 0x280]
lea rcx, str.vVMGTCJeswBDpqibucxolAPRLWdNgkUQtXyHYEnmOKrSFjZIz
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov byte [rsp + 0x26], 0
mov eax, 6
mov word [rsp + 0x58], ax
mov qword [rsp + 0x128], 8
mov byte [rsp + 0x27], 0x79
mov qword [rsp + 0x130], 0
mov dword [rsp + 0x520], 0x100010
lea rax, [rsp + 0x2b8]
lea rcx, str.wVTiWItHaNlrzPdOFDSkZKcpJUhjQvLmnEYqMoesXxyCuGfBR
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov eax, 8
mov word [rsp + 0x5c], ax
xor eax, eax
mov word [rsp + 0x60], ax
mov byte [rsp + 0x28], 0
mov dword [rsp + 0xc0], 0
mov qword [rsp + 0x138], 0
mov byte [rsp + 0x29], 0x47
mov qword [rsp + 0x140], 9
lea rdx, [rsp + 0x4f0]
mov rcx, qword [0x1800249d0]
call qword [rsp + 0xe8]
mov byte [rsp + 0x2a], 0x76
mov eax, 8
mov word [rsp + 0x64], ax
mov qword [rsp + 0x148], 0
mov byte [rsp + 0x2b], 0
mov eax, 7
mov word [rsp + 0x68], ax
lea rax, [rsp + 0x2f0]
lea rcx, str.EcmVOWpUJxGBwjzelthdsLgiYfaPoNTZyMDRHuIQvbkrSnFAC
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov dword [rsp + 0xc4], 4
mov qword [rsp + 0x150], 1
lea rax, [fcn.180009930]
mov qword [rsp + 0x538], rax
mov dword [rsp + 0xc8], 5
mov byte [rsp + 0x2c], 0
mov qword [rsp + 0x158], 0
mov byte [rsp + 0x2d], 0x70
lea rax, [rsp + 0x328]
lea rcx, str.JSsrItKZfLPQGBzXDlgvxCYdVikWuEhyOwemNRcoaTbpnqUAj
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov qword [rsp + 0x160], 6
mov eax, 1
mov word [rsp + 0x6c], ax
mov eax, 5
mov word [rsp + 0x70], ax
mov rax, qword [rsp + 0x560]
or rax, 1
mov qword [rsp + 0x560], rax
mov eax, 6
mov word [rsp + 0x74], ax
mov byte [rsp + 0x2e], 0x62
mov dword [rsp + 0xcc], 2
mov qword [rsp + 0x168], 0
mov byte [rsp + 0x2f], 0
lea rax, [rsp + 0x360]
lea rcx, str.scVOUkvYptuSRnbWgLTFwdMrilfByAjNoXGJmIzhCHDKQPaeE
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov eax, 5
mov word [rsp + 0x78], ax
mov qword [rsp + 0x170], 4
mov rax, qword [rsp + 0x560]
btr rax, 0x10
mov qword [rsp + 0x560], rax
mov qword [rsp + 0x178], 0
mov byte [rsp + 0x30], 0x70
mov qword [rsp + 0x180], 9
mov eax, 5
mov word [rsp + 0x7c], ax
lea rax, [rsp + 0x398]
lea rcx, str.uMTeiAnsdqBcyIoWHXYkURVwEKLDJfFjtSGNxCglmZvpharPO
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov eax, 1
mov word [rsp + 0x80], ax
mov byte [rsp + 0x31], 0
mov dword [rsp + 0xd0], 7
mov rax, qword [rsp + 0x560]
btr rax, 0x11
mov qword [rsp + 0x560], rax
mov eax, 8
mov word [rsp + 0x84], ax
mov eax, 9
mov word [rsp + 0x88], ax
mov qword [rsp + 0x188], 0
mov byte [rsp + 0x32], 0x65
lea rax, [rsp + 0x3d0]
lea rcx, str.hHLDrUbZlqeKSzOagWkjfJyMTuRYicVnCwmANpPdFQoGxIvXs
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov qword [rsp + 0x190], 2
mov dword [rsp + 0xd4], 3
mov byte [rsp + 0x33], 0
mov dword [rsp + 0x520], 0x100010
mov eax, 6
mov word [rsp + 0x8c], ax
mov dword [rsp + 0xd8], 8
mov eax, 8
mov word [rsp + 0x90], ax
mov qword [rsp + 0x198], 0
mov qword [rsp + 0x1a0], 3
mov byte [rsp + 0x34], 0
lea rax, [rsp + 0x408]
lea rcx, str.vjzSBilYIckCRNuFeJQZOtWfGdKVnbMrLpxHXEAwqUyPDgoTh
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov byte [rsp + 0x35], 0x44
lea rdx, [rsp + 0x4f0]
mov rcx, qword [0x1800249d0]
call qword [rsp + 0xf0]
test eax, eax
jne 0x18000a034
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____Could_not_set_new_thread_context:_0x_X
call fcn.1800028e0
mov eax, 8
mov word [rsp + 0x94], ax
mov byte [rsp + 0x36], 0
mov qword [rsp + 0x1a8], 5
mov byte [rsp + 0x37], 0x72
lea rax, [rsp + 0x440]
lea rcx, str.EpMbydVBhYOQiavWkJToAHrRxePnUtcKzCFqXmlsINLfjwuSg
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov dword [rsp + 0xdc], 8
mov qword [rsp + 0x1b0], 0
mov eax, 4
mov word [rsp + 0x98], ax
xor al, al
jmp 0x18000a09b
mov al, 1
jmp 0x18000a09b
mov rcx, qword [rsp + 0x9c0]
xor rcx, rsp
call fcn.180013c40
add rsp, 0x9d8
pop rdi
pop rsi
ret