Function at 0x180008008
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x8a8
mov dword [rsp + 0x30], 0x9ce0d4a
lea rax, [0x18000ee58]
mov qword [rsp + 0x38], rax
lea rax, [0x18000ea50]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x48], 0xcd53f5dd
lea rax, [0x18000ee58]
mov qword [rsp + 0x50], rax
lea rax, [0x18000ea58]
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x60], 0x4f58972e
lea rax, [0x18000ee58]
mov qword [rsp + 0x68], rax
lea rax, [0x18000ea78]
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x78], 0xc1f3b876
lea rax, [0x18000ee58]
mov qword [rsp + 0x80], rax
lea rax, [0x18000ea90]
mov qword [rsp + 0x88], rax
mov dword [rsp + 0x90], 0xe62e824d
lea rax, [0x18000ee58]
mov qword [rsp + 0x98], rax
lea rax, [0x18000ea68]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x6b482023
lea rax, [0x18000ee58]
mov qword [rsp + 0xb0], rax
lea rax, [0x18000ea70]
mov qword [rsp + 0xb8], rax
mov dword [rsp + 0xc0], 0x8197004c
lea rax, [0x18000ee58]
mov qword [rsp + 0xc8], rax
lea rax, [0x18000eaa8]
mov qword [rsp + 0xd0], rax
mov dword [rsp + 0xd8], 0x267cf1a5
lea rax, [0x18000ee58]
mov qword [rsp + 0xe0], rax
lea rax, [0x18000eab0]
mov qword [rsp + 0xe8], rax
mov dword [rsp + 0xf0], 0xbc6b67bf
lea rax, [0x18000ee58]
mov qword [rsp + 0xf8], rax
lea rax, [0x18000eab8]
mov qword [rsp + 0x100], rax
mov dword [rsp + 0x108], 0x28ed5c0
lea rax, [0x18000ee58]
mov qword [rsp + 0x110], rax
lea rax, [0x18000eac0]
mov qword [rsp + 0x118], rax
mov dword [rsp + 0x120], 0xb09315f4
lea rax, [0x18000ee58]
mov qword [rsp + 0x128], rax
lea rax, [0x18000ea88]
mov qword [rsp + 0x130], rax
mov dword [rsp + 0x138], 0x5c856c47
lea rax, [0x18000ee58]
mov qword [rsp + 0x140], rax
lea rax, [0x18000ea98]
mov qword [rsp + 0x148], rax
mov dword [rsp + 0x150], 0x10066f2f
lea rax, [0x18000ee58]
mov qword [rsp + 0x158], rax
lea rax, [0x18000eaa0]
mov qword [rsp + 0x160], rax
mov dword [rsp + 0x168], 0xdf27514b
lea rax, [0x18000ee58]
mov qword [rsp + 0x170], rax
lea rax, [0x18000ea60]
mov qword [rsp + 0x178], rax
mov dword [rsp + 0x180], 0xff808c10
lea rax, [0x18000ee58]
mov qword [rsp + 0x188], rax
lea rax, [0x18000ea80]
mov qword [rsp + 0x190], rax
mov dword [rsp + 0x198], 0x251097cc
lea rax, [0x18000ee58]
mov qword [rsp + 0x1a0], rax
lea rax, [0x18000eac8]
mov qword [rsp + 0x1a8], rax
mov dword [rsp + 0x1b0], 0xfc6b42f1
lea rax, [0x18000ee58]
mov qword [rsp + 0x1b8], rax
lea rax, [0x18000ead0]
mov qword [rsp + 0x1c0], rax
mov dword [rsp + 0x1c8], 0x654fde9a
lea rax, [0x18000ee58]
mov qword [rsp + 0x1d0], rax
lea rax, [0x18000ead8]
mov qword [rsp + 0x1d8], rax
mov dword [rsp + 0x1e0], 0xcb1508dc
lea rax, [0x18000ee58]
mov qword [rsp + 0x1e8], rax
lea rax, [0x18000eae8]
mov qword [rsp + 0x1f0], rax
mov dword [rsp + 0x1f8], 0x2e50340b
lea rax, [0x18000ee58]
mov qword [rsp + 0x200], rax
lea rax, [0x18000eaf0]
mov qword [rsp + 0x208], rax
mov dword [rsp + 0x210], 0xb27c7ef
lea rax, [0x18000ee58]
mov qword [rsp + 0x218], rax
lea rax, [0x18000eb00]
mov qword [rsp + 0x220], rax
mov dword [rsp + 0x228], 0xe064a10
lea rax, [0x18000ee58]
mov qword [rsp + 0x230], rax
lea rax, [0x18000eb08]
mov qword [rsp + 0x238], rax
mov dword [rsp + 0x240], 0x3872beb9
lea rax, [0x18000ee58]
mov qword [rsp + 0x248], rax
lea rax, [0x18000eb10]
mov qword [rsp + 0x250], rax
mov dword [rsp + 0x258], 0x72641c0b
lea rax, [0x18000ee58]
mov qword [rsp + 0x260], rax
lea rax, [0x18000eb18]
mov qword [rsp + 0x268], rax
mov dword [rsp + 0x270], 0x906a06b0
lea rax, [0x18000ee58]
mov qword [rsp + 0x278], rax
lea rax, [0x18000eb20]
mov qword [rsp + 0x280], rax
mov dword [rsp + 0x288], 0xa1efe929
lea rax, [0x18000ee58]
mov qword [rsp + 0x290], rax
lea rax, [0x18000eb28]
mov qword [rsp + 0x298], rax
mov dword [rsp + 0x2a0], 0xcce95612
lea rax, [0x18000ee58]
mov qword [rsp + 0x2a8], rax
lea rax, [0x18000eb30]
mov qword [rsp + 0x2b0], rax
mov dword [rsp + 0x2b8], 0x95c03d0
lea rax, [0x18000ee58]
mov qword [rsp + 0x2c0], rax
lea rax, [0x18000eb38]
mov qword [rsp + 0x2c8], rax
mov dword [rsp + 0x2d0], 0xa7fb4165
lea rax, [0x18000ee58]
mov qword [rsp + 0x2d8], rax
lea rax, [0x18000eb40]
mov qword [rsp + 0x2e0], rax
mov dword [rsp + 0x2e8], 0x2b53c31b
lea rax, [0x18000ee58]
mov qword [rsp + 0x2f0], rax
lea rax, [0x18000eb48]
mov qword [rsp + 0x2f8], rax
mov dword [rsp + 0x300], 0xdf55cbf2
lea rax, [0x18000ee58]
mov qword [rsp + 0x308], rax
lea rax, [0x18000eb50]
mov qword [rsp + 0x310], rax
mov dword [rsp + 0x318], 0xd52d474a
lea rax, [0x18000ee58]
mov qword [rsp + 0x320], rax
lea rax, [0x18000eb58]
mov qword [rsp + 0x328], rax
mov dword [rsp + 0x330], 0x8aa21257
lea rax, [0x18000ee58]
mov qword [rsp + 0x338], rax
lea rax, [0x18000eb60]
mov qword [rsp + 0x340], rax
mov dword [rsp + 0x348], 0x72f11e39
lea rax, [0x18000ee58]
mov qword [rsp + 0x350], rax
lea rax, [0x18000eb68]
mov qword [rsp + 0x358], rax
mov dword [rsp + 0x360], 0x4552d021
lea rax, [0x18000ee58]
mov qword [rsp + 0x368], rax
lea rax, [0x18000eb70]
mov qword [rsp + 0x370], rax
mov dword [rsp + 0x378], 0xe9258e7a
lea rax, [0x18000ee58]
mov qword [rsp + 0x380], rax
lea rax, [0x18000eb78]
mov qword [rsp + 0x388], rax
mov dword [rsp + 0x390], 0xd0861aa4
lea rax, [0x18000ee58]
mov qword [rsp + 0x398], rax
lea rax, [0x18000eb98]
mov qword [rsp + 0x3a0], rax
mov dword [rsp + 0x3a8], 0x238b3114
lea rax, [0x18000ee58]
mov qword [rsp + 0x3b0], rax
lea rax, [0x18000eba0]
mov qword [rsp + 0x3b8], rax
mov dword [rsp + 0x3c0], 0xf5197707
lea rax, [0x18000ee58]
mov qword [rsp + 0x3c8], rax
lea rax, [0x18000eba8]
mov qword [rsp + 0x3d0], rax
mov dword [rsp + 0x3d8], 0x546114d
lea rax, [0x18000ee58]
mov qword [rsp + 0x3e0], rax
lea rax, [0x18000ebb0]
mov qword [rsp + 0x3e8], rax
mov dword [rsp + 0x3f0], 0x2d789102
lea rax, [0x18000ee58]
mov qword [rsp + 0x3f8], rax
lea rax, reloc.KERNEL32.dll_CreateMutexW
mov qword [rsp + 0x400], rax
mov dword [rsp + 0x408], 0x27ef86df
lea rax, [0x18000ee58]
mov qword [rsp + 0x410], rax
lea rax, [0x18000ebb8]
mov qword [rsp + 0x418], rax
mov dword [rsp + 0x420], 0x49e02c34
lea rax, [0x18000ee58]
mov qword [rsp + 0x428], rax
lea rax, [0x18000ebc8]
mov qword [rsp + 0x430], rax
mov dword [rsp + 0x438], 0x1db413e3
lea rax, [0x18000ee58]
mov qword [rsp + 0x440], rax
lea rax, [0x18000eaf8]
mov qword [rsp + 0x448], rax
mov dword [rsp + 0x450], 0x40cf273d
lea rax, [0x18000ee58]
mov qword [rsp + 0x458], rax
lea rax, [0x18000ebd0]
mov qword [rsp + 0x460], rax
mov dword [rsp + 0x468], 0xa89b382f
lea rax, [0x18000ee58]
mov qword [rsp + 0x470], rax
lea rax, [0x18000ebd8]
mov qword [rsp + 0x478], rax
mov dword [rsp + 0x480], 0x391ab6af
lea rax, [0x18000ee58]
mov qword [rsp + 0x488], rax
lea rax, [0x18000ebe0]
mov qword [rsp + 0x490], rax
mov dword [rsp + 0x498], 0xe21f6791
lea rax, [0x18000ee58]
mov qword [rsp + 0x4a0], rax
lea rax, [0x18000ebe8]
mov qword [rsp + 0x4a8], rax
mov dword [rsp + 0x4b0], 0x19e65db6
lea rax, [0x18000ee58]
mov qword [rsp + 0x4b8], rax
lea rax, [0x18000ebf0]
mov qword [rsp + 0x4c0], rax
mov dword [rsp + 0x4c8], 0xfa3d2f88
lea rax, [0x18000ee58]
mov qword [rsp + 0x4d0], rax
lea rax, [0x18000ebf8]
mov qword [rsp + 0x4d8], rax
mov dword [rsp + 0x4e0], 0x2f9019bd
lea rax, [0x18000ee58]
mov qword [rsp + 0x4e8], rax
lea rax, [0x18000ec00]
mov qword [rsp + 0x4f0], rax
mov dword [rsp + 0x4f8], 0xc97c1fff
lea rax, [0x18000ee58]
mov qword [rsp + 0x500], rax
lea rax, [0x18000ec08]
mov qword [rsp + 0x508], rax
mov dword [rsp + 0x510], 0x8d76f9a4
lea rax, [0x18000ee60]
mov qword [rsp + 0x518], rax
lea rax, [0x18000ec10]
mov qword [rsp + 0x520], rax
mov dword [rsp + 0x528], 0x58ff5064
lea rax, [0x18000ee60]
mov qword [rsp + 0x530], rax
lea rax, [0x18000ec18]
mov qword [rsp + 0x538], rax
mov dword [rsp + 0x540], 0x9a80e589
lea rax, [0x18000ee58]
mov qword [rsp + 0x548], rax
lea rax, [0x18000ec28]
mov qword [rsp + 0x550], rax
mov dword [rsp + 0x558], 0x9ff81f51
lea rax, [0x18000ee60]
mov qword [rsp + 0x560], rax
lea rax, [0x18000ec20]
mov qword [rsp + 0x568], rax
mov dword [rsp + 0x570], 0x6e68da7c
lea rax, [0x18000ee58]
mov qword [rsp + 0x578], rax
lea rax, [0x18000ec30]
mov qword [rsp + 0x580], rax
mov dword [rsp + 0x588], 0x5b4219f8
lea rax, [0x18000ee58]
mov qword [rsp + 0x590], rax
lea rax, [0x18000ec38]
mov qword [rsp + 0x598], rax
mov dword [rsp + 0x5a0], 0x2b0b47a5
lea rax, [0x18000ee58]
mov qword [rsp + 0x5a8], rax
lea rax, [0x18000ec40]
mov qword [rsp + 0x5b0], rax
mov dword [rsp + 0x5b8], 0xdfdff2f4
lea rax, [0x18000ee58]
mov qword [rsp + 0x5c0], rax
lea rax, [0x18000ec48]
mov qword [rsp + 0x5c8], rax
mov dword [rsp + 0x5d0], 0xd2e536b7
lea rax, [0x18000ee58]
mov qword [rsp + 0x5d8], rax
lea rax, reloc.KERNEL32.dll_GetLastError
mov qword [rsp + 0x5e0], rax
mov dword [rsp + 0x5e8], 0xcbfbd567
lea rax, [0x18000ee58]
mov qword [rsp + 0x5f0], rax
lea rax, [0x18000ec58]
mov qword [rsp + 0x5f8], rax
mov dword [rsp + 0x600], 0x3a1a4cf9
lea rax, [0x18000ee58]
mov qword [rsp + 0x608], rax
lea rax, [0x18000ec60]
mov qword [rsp + 0x610], rax
mov dword [rsp + 0x618], 0xcecef9a8
lea rax, [0x18000ee58]
mov qword [rsp + 0x620], rax
lea rax, [0x18000ec68]
mov qword [rsp + 0x628], rax
mov dword [rsp + 0x630], 0x1224ccb6
lea rax, [0x18000ee58]
mov qword [rsp + 0x638], rax
lea rax, [0x18000ec70]
mov qword [rsp + 0x640], rax
mov dword [rsp + 0x648], 0xe6f079e7
lea rax, [0x18000ee58]
mov qword [rsp + 0x650], rax
lea rax, [0x18000ec78]
mov qword [rsp + 0x658], rax
mov dword [rsp + 0x660], 0xf86a1d88
lea rax, [0x18000ee58]
mov qword [rsp + 0x668], rax
lea rax, [0x18000ec80]
mov qword [rsp + 0x670], rax
mov dword [rsp + 0x678], 0xdadd89eb
lea rax, [0x18000ee58]
mov qword [rsp + 0x680], rax
lea rax, [0x18000ec88]
mov qword [rsp + 0x688], rax
mov dword [rsp + 0x690], 0x1c8a17b6
lea rax, [0x18000ee58]
mov qword [rsp + 0x698], rax
lea rax, [0x18000ec90]
mov qword [rsp + 0x6a0], rax
mov dword [rsp + 0x6a8], 0xe85ea2e7
lea rax, [0x18000ee58]
mov qword [rsp + 0x6b0], rax
lea rax, [0x18000ec98]
mov qword [rsp + 0x6b8], rax
mov dword [rsp + 0x6c0], 0x46ded02d
lea rax, [0x18000ee58]
mov qword [rsp + 0x6c8], rax
lea rax, [0x18000eca0]
mov qword [rsp + 0x6d0], rax
mov dword [rsp + 0x6d8], 0xe058bb45
lea rax, [0x18000ee58]
mov qword [rsp + 0x6e0], rax
lea rax, [0x18000eca8]
mov qword [rsp + 0x6e8], rax
mov dword [rsp + 0x6f0], 0x3906ad5e
lea rax, [0x18000ee58]
mov qword [rsp + 0x6f8], rax
lea rax, [0x18000ecb0]
mov qword [rsp + 0x700], rax
mov dword [rsp + 0x708], 0x30601c1c
lea rax, [0x18000ee58]
mov qword [rsp + 0x710], rax
lea rax, [0x18000ecb8]
mov qword [rsp + 0x718], rax
mov dword [rsp + 0x720], 0xc4b4a94d
lea rax, [0x18000ee58]
mov qword [rsp + 0x728], rax
lea rax, [0x18000ecc0]
mov qword [rsp + 0x730], rax
mov dword [rsp + 0x738], 0xa21572ce
lea rax, [0x18000ee58]
mov qword [rsp + 0x740], rax
lea rax, [0x18000ecc8]
mov qword [rsp + 0x748], rax
mov dword [rsp + 0x750], 0x141dbc61
lea rax, [0x18000ee58]
mov qword [rsp + 0x758], rax
lea rax, [0x18000ecd0]
mov qword [rsp + 0x760], rax
mov dword [rsp + 0x768], 0xf49ca6cb
lea rax, [0x18000ee58]
mov qword [rsp + 0x770], rax
lea rax, reloc.KERNEL32.dll_PeekNamedPipe
mov qword [rsp + 0x778], rax
mov dword [rsp + 0x780], 0x1cca53fd
lea rax, [0x18000ee58]
mov qword [rsp + 0x788], rax
lea rax, [0x18000ece0]
mov qword [rsp + 0x790], rax
mov dword [rsp + 0x798], 0xab40bf8d
lea rax, [0x18000ee58]
mov qword [rsp + 0x7a0], rax
lea rax, [0x18000ece8]
mov qword [rsp + 0x7a8], rax
mov dword [rsp + 0x7b0], 0x59d89102
lea rax, [0x18000ee58]
mov qword [rsp + 0x7b8], rax
lea rax, [0x18000ecf0]
mov qword [rsp + 0x7c0], rax
mov dword [rsp + 0x7c8], 0xc9ebd5ce
lea rax, [0x18000ee58]
mov qword [rsp + 0x7d0], rax
lea rax, [0x18000ecf8]
mov qword [rsp + 0x7d8], rax
mov dword [rsp + 0x7e0], 0x3d3f609f
lea rax, [0x18000ee58]
mov qword [rsp + 0x7e8], rax
lea rax, [0x18000ed00]
mov qword [rsp + 0x7f0], rax
mov dword [rsp + 0x7f8], 0xd82bf69a
lea rax, [0x18000ee58]
mov qword [rsp + 0x800], rax
lea rax, [0x18000ed08]
mov qword [rsp + 0x808], rax
mov dword [rsp + 0x810], 0x75272948
lea rax, [0x18000ee58]
mov qword [rsp + 0x818], rax
lea rax, [0x18000ed18]
mov qword [rsp + 0x820], rax
mov dword [rsp + 0x828], 0x81f39c19
lea rax, [0x18000ee58]
mov qword [rsp + 0x830], rax
lea rax, [0x18000ed10]
mov qword [rsp + 0x838], rax
mov dword [rsp + 0x840], 0x7e02c2ca
lea rax, [0x18000ee58]
mov qword [rsp + 0x848], rax
lea rax, [0x18000ed20]
mov qword [rsp + 0x850], rax
mov dword [rsp + 0x858], 0xf7c7ae42
lea rax, [0x18000ee58]
mov qword [rsp + 0x860], rax
lea rax, [0x18000ed28]
mov qword [rsp + 0x868], rax
mov dword [rsp + 0x870], 0xb41b926c
lea rax, [0x18000ee58]
mov qword [rsp + 0x878], rax
lea rax, [0x18000ed30]
mov qword [rsp + 0x880], rax
mov dword [rsp + 0x888], 0x1bb43d20
lea rax, [0x18000ee58]
mov qword [rsp + 0x890], rax
lea rax, [0x18000ed38]
mov qword [rsp + 0x898], rax
mov dword [rsp + 0x20], 0
jmp 0x180008e6f
mov eax, dword [rsp + 0x20]
inc eax
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x20]
cmp rax, 0x5a
jae 0x180008ec5
mov eax, dword [rsp + 0x20]
imul rax, rax, 0x18
mov ecx, dword [rsp + 0x20]
imul rcx, rcx, 0x18
mov rcx, qword [rsp + rcx + 0x38]
xor r8d, r8d
mov edx, dword [rsp + rax + 0x30]
mov rcx, qword [rcx]
call fcn.180007128
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x20]
imul rax, rax, 0x18
mov rax, qword [rsp + rax + 0x40]
mov rcx, qword [rsp + 0x28]
mov qword [rax], rcx
cmp qword [rsp + 0x28], 0
jne 0x180008ec3
xor eax, eax
jmp 0x180008eca
jmp 0x180008e65
mov eax, 1
add rsp, 0x8a8
ret