Function at 0x18000a070
Capabilities:
Contain obfuscated stackstrings
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
lea rbp, [rsp - 0x240]
sub rsp, 0x340
mov rcx, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov qword [0x180057bc8], rax
mov rcx, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov qword [0x180057bc0], rax
mov qword [rbp + 0x250], 0
lea r8, [rbp + 0x250]
lea rdx, [0x180002370]
mov ecx, 4
call qword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
mov rax, qword [rbp + 0x250]
mov qword [0x180057bd0], rax
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x30]
call fcn.180019ff0
mov dword [rbp - 0x48], 0x5e067057
mov dword [rbp - 0x44], 0x730b757b
mov dword [rbp - 0x40], 0x777b5f79
mov dword [rbp - 0x3c], 0x6a7f537d
mov word [rbp - 0x38], 0x7661
mov byte [rbp - 0x36], 0x9a
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x35], xmm0
mov qword [rbp - 0x25], rax
mov dword [rbp - 0x1d], eax
xor r9d, r9d
movabs r11, 0x31cf5db7714f2942
mov r10, r11
lea rax, [rbp - 0x48]
sub r10, rax
nop dword [rax]
lea r8, [rbp - 0x48]
add r8, r9
movzx edx, byte [r8]
lea rax, [r8 + r10]
and rax, rdx
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r11
add rcx, r9
add cl, 0x32
mov byte [r8], cl
inc r9
cmp r9, 0x2f
jb 0x18000a140
mov dword [rsp + 0x30], 0xd00140b
mov dword [rsp + 0x34], 0xc5c50911
mov dword [rsp + 0x38], 0x37362df6
mov byte [rsp + 0x3c], 0x8c
xor eax, eax
mov qword [rsp + 0x3d], rax
mov word [rsp + 0x45], ax
mov byte [rsp + 0x47], al
xor r9d, r9d
movabs r11, 0xb4b29ada42d9cf98
mov r10, r11
lea rax, [rsp + 0x30]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
lea r8, [rsp + 0x30]
add r8, r9
movzx edx, byte [r8]
lea rax, [r8 + r10]
and rax, rdx
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r11
add rcx, r9
sub cl, 0x28
mov byte [r8], cl
inc r9
cmp r9, 0x18
jb 0x18000a1c0
lea rcx, [rsp + 0x30]
call fcn.180009bb0
lea rdx, [rbp - 0x48]
mov rcx, rax
call fcn.1800096f0
mov r8d, 0x104
lea rdx, [rbp + 0x30]
mov rcx, qword [0x180057bd0]
call rax
mov dword [rbp - 0x73], 0xbbac8296
mov dword [rbp - 0x6f], 0x838a869c
mov dword [rbp - 0x6b], 0x848c82a0
mov dword [rbp - 0x67], 0x8883b6ac
mov word [rbp - 0x63], 0x11bf
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x61], xmm0
mov qword [rbp - 0x51], rax
mov byte [rbp - 0x49], al
xor r9d, r9d
movabs r11, 0x7155864ae29fcd5b
mov r10, r11
lea rax, [rbp - 0x73]
sub r10, rax
lea r8, [rbp - 0x73]
add r8, r9
movzx edx, byte [r8]
lea rax, [r8 + r10]
and rax, rdx
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r11
add rcx, r9
sub cl, 0x7d
mov byte [r8], cl
inc r9
cmp r9, 0x2b
jb 0x18000a261
mov dword [rsp + 0x48], 0xa4aeb1ab
mov dword [rsp + 0x4c], 0xd18f9585
mov dword [rsp + 0x50], 0xe396958c
xor eax, eax
mov qword [rsp + 0x54], rax
mov dword [rsp + 0x5c], eax
mov byte [rsp + 0x60], al
xor r9d, r9d
movabs r11, 0x4d97b02145e8755c
mov r10, r11
lea rax, [rsp + 0x48]
sub r10, rax
nop
lea r8, [rsp + 0x48]
add r8, r9
movzx edx, byte [r8]
lea rax, [r8 + r10]
and rax, rdx
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r11
add rcx, r9
add cl, 0x7c
mov byte [r8], cl
inc r9
cmp r9, 0x19
jb 0x18000a2d0
lea rcx, [rsp + 0x48]
call fcn.180009bb0
lea rdx, [rbp - 0x73]
mov rcx, rax
call fcn.1800096f0
lea rcx, [rbp + 0x30]
call rax
mov r11, rax
mov dword [rsp + 0x61], 0xa328ad4d
mov dword [rsp + 0x65], 0xa751a141
mov dword [rsp + 0x69], 0xbb4da550
mov dword [rsp + 0x6d], 0xbf59b932
mov dword [rsp + 0x71], 0xb356bd8e
mov dword [rsp + 0x75], 0xb74ab14c
mov word [rsp + 0x79], 0xb5b4
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x7b], xmm0
mov word [rbp - 0x75], ax
xor r9d, r9d
movabs rbx, 0x338d05276745e967
mov r10, rbx
lea rax, [rsp + 0x61]
sub r10, rax
nop dword [rax + rax]
lea r8, [rsp + 0x61]
add r8, r9
movzx edx, byte [r8]
lea ecx, [r9 + 0x66]
and cl, dl
add cl, cl
movzx eax, r9b
sub al, cl
sub dl, 0x64
add al, dl
mov byte [r8], al
movzx edx, byte [r8 + 1]
lea rax, [r8 + r10]
and rax, rdx
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, rbx
add rcx, r9
add cl, 0x36
mov byte [r8 + 1], cl
add r9, 2
cmp r9, 0x2c
jb 0x18000a380
lea rdx, [rsp + 0x61]
mov rcx, r11
call fcn.180023ea8
test eax, eax
je 0x18000a43d
call fcn.18000f480
mov rbx, rax
lea rax, [0x18004d680]
mov qword [rbp - 0x18], rax
lea rax, [method.std::basic_streambuf_char__struct_std::char_traits_char__.virtual_8]
mov qword [rbp - 0x10], rax
lea rax, [rbp - 0x18]
mov qword [rbp + 0x20], rax
lea rax, [rbp - 0x18]
mov qword [rbp + 0x250], rax
lea rcx, [rbx + 0x30]
lea rdx, [rbp - 0x18]
call fcn.18000f310
mov rcx, rbx
call fcn.180001f50
nop
mov rcx, qword [rbp + 0x20]
test rcx, rcx
je 0x18000a43d
mov rax, qword [rcx]
lea rdx, [rbp - 0x18]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x18000ce60]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rbx, qword [rsp + 0x358]
add rsp, 0x340
pop rbp
ret