Function at 0x1800040c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rsi
push rdi
sub rsp, 0x9d8
mov rax, qword [0x180015040]
xor rax, rsp
mov qword [rsp + 0x9c0], rax
lea rcx, [0x18000f4c8]
call fcn.180002e30
lea rdx, str.GetThreadContext
mov rcx, rax
call fcn.180003050
mov qword [rsp + 0xe8], rax
mov byte [rsp + 0x20], 0
mov eax, 7
mov word [rsp + 0x3c], ax
mov byte [rsp + 0x21], 0x79
mov qword [rsp + 0xf8], 1
mov eax, 4
mov word [rsp + 0x40], ax
mov qword [rsp + 0x100], 0
mov dword [rsp + 0xac], 7
lea rax, [rsp + 0x1d8]
lea rcx, str.HkxzXAFIytoGwEuqhSRVcMgOJUjlCiNfsZLneKDarPdYvbBpW
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
lea rcx, [0x18000f538]
call fcn.180002e30
lea rdx, str.SetThreadContext
mov rcx, rax
call fcn.180003050
mov qword [rsp + 0xf0], rax
mov eax, 7
mov word [rsp + 0x44], ax
mov byte [rsp + 0x22], 0
mov qword [rsp + 0x108], 0
mov dword [rsp + 0xb0], 2
mov qword [rsp + 0x110], 1
mov byte [rsp + 0x23], 0x61
lea rax, [rsp + 0x210]
lea rcx, str.CoyDbMBjVXQHFIWltduRshLAPNJGmZfEgivaYwqpTSUzcxOKe
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov eax, 9
mov word [rsp + 0x48], ax
mov dword [rsp + 0xb4], 0
mov qword [rsp + 0x118], 0
mov eax, 6
mov word [rsp + 0x4c], ax
mov byte [rsp + 0x24], 0
mov eax, 8
mov word [rsp + 0x50], ax
mov byte [rsp + 0x25], 0x42
mov dword [rsp + 0xb8], 9
lea rax, [rsp + 0x248]
lea rcx, str.IjvnWSuVfdCtYpBqxgJbFZlakATUeMyENrPiwDmHKGzXhLcsO
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov qword [rsp + 0x120], 1
lea rax, [rsp + 0x4f0]
mov rdi, rax
xor eax, eax
mov ecx, 0x4d0
rep stosb byte [rdi], al
lea rax, [rsp + 0x280]
lea rcx, str.yKjqdJlxItEGTFSfgcnoWaOhvzNwArMBpmViPZekQUbsCRYHD
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov byte [rsp + 0x26], 0
mov eax, 6
mov word [rsp + 0x54], ax
mov byte [rsp + 0x27], 0x56
mov dword [rsp + 0xbc], 9
mov qword [rsp + 0x128], 5
mov qword [rsp + 0x130], 0
xor eax, eax
mov word [rsp + 0x58], ax
mov dword [rsp + 0x520], 0x100010
mov qword [rsp + 0x138], 3
mov dword [rsp + 0xc0], 8
lea rax, [rsp + 0x2b8]
lea rcx, str.HrUdKpSGiwJkWTCsvMhIfqYlQznRaNeZLmxjEFobBcgXuAPyV
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov eax, 4
mov word [rsp + 0x5c], ax
mov byte [rsp + 0x28], 0
mov qword [rsp + 0x140], 0
mov byte [rsp + 0x29], 0x78
mov eax, 4
mov word [rsp + 0x60], ax
lea rdx, [rsp + 0x4f0]
mov rcx, qword [0x180015758]
call qword [rsp + 0xe8]
mov eax, 7
mov word [rsp + 0x64], ax
mov byte [rsp + 0x2a], 0
mov qword [rsp + 0x148], 4
mov byte [rsp + 0x2b], 0x63
lea rax, [rsp + 0x2f0]
lea rcx, str.eoDmZXcdJvrpNGlWFUuPVLstKwRIhHjqBQxaSAzkCgfyOnYTE
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov eax, 3
mov word [rsp + 0x68], ax
mov dword [rsp + 0xc4], 7
mov qword [rsp + 0x150], 0
lea rax, [0x180003fc0]
mov qword [rsp + 0x538], rax
mov byte [rsp + 0x2c], 0
mov qword [rsp + 0x158], 6
mov eax, 3
mov word [rsp + 0x6c], ax
mov byte [rsp + 0x2d], 0x70
mov dword [rsp + 0xc8], 0
mov eax, 6
mov word [rsp + 0x70], ax
lea rax, [rsp + 0x328]
lea rcx, str.ktulUDZzMCBVWEGQAIfrJXcpiTSPeOhbwKgsFnmYxLayRqHdj
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov qword [rsp + 0x160], 0
mov rax, qword [rsp + 0x560]
or rax, 1
mov qword [rsp + 0x560], rax
mov qword [rsp + 0x168], 0
lea rax, [rsp + 0x360]
lea rcx, str.LqzsOJDHZicxyEGuhdtYrmTnXpbPUlSRWMAagwVFCBkNIKQof
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov dword [rsp + 0xcc], 3
mov byte [rsp + 0x2e], 0
mov eax, 5
mov word [rsp + 0x74], ax
mov qword [rsp + 0x170], 7
mov byte [rsp + 0x2f], 0x76
xor eax, eax
mov word [rsp + 0x78], ax
mov rax, qword [rsp + 0x560]
btr rax, 0x10
mov qword [rsp + 0x560], rax
lea rax, [rsp + 0x398]
lea rcx, str.rHXiBFglftLxERWnDpcojNwmzsGeIyVZMakOCQduShUqAYvbT
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov byte [rsp + 0x30], 0
mov qword [rsp + 0x178], 2
mov eax, 9
mov word [rsp + 0x7c], ax
mov eax, 6
mov word [rsp + 0x80], ax
mov byte [rsp + 0x31], 0x47
mov qword [rsp + 0x180], 0
mov dword [rsp + 0xd0], 8
mov rax, qword [rsp + 0x560]
btr rax, 0x11
mov qword [rsp + 0x560], rax
mov dword [rsp + 0xd4], 8
lea rax, [rsp + 0x3d0]
lea rcx, str.YAjzJRiWsZQLwXhpfSadbnGkPrvomBleNDgHCqTMFtyUEcuIO
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov byte [rsp + 0x32], 0
xor eax, eax
mov word [rsp + 0x84], ax
xor eax, eax
mov word [rsp + 0x88], ax
mov qword [rsp + 0x188], 0
mov byte [rsp + 0x33], 0x43
mov qword [rsp + 0x190], 9
mov dword [rsp + 0x520], 0x100010
mov byte [rsp + 0x34], 0x71
mov qword [rsp + 0x198], 0
mov qword [rsp + 0x1a0], 9
lea rax, [rsp + 0x408]
lea rcx, str.XfeDZFEUvywbzmHjPsVGaKMqnhBiIQYkxRSdrCopgNTLJcOtl
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov eax, 3
mov word [rsp + 0x8c], ax
mov dword [rsp + 0xd8], 9
mov byte [rsp + 0x35], 0
mov eax, 5
mov word [rsp + 0x90], ax
lea rdx, [rsp + 0x4f0]
mov rcx, qword [0x180015758]
call qword [rsp + 0xf0]
test eax, eax
jne 0x1800046bb
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____Could_not_set_new_thread_context:_0x_X
call fcn.1800028f0
mov qword [rsp + 0x1a8], 1
mov dword [rsp + 0xdc], 8
mov eax, 3
mov word [rsp + 0x94], ax
lea rax, [rsp + 0x440]
lea rcx, str.hNZYwnSqIDjAdboazcFsutrECpJOTHWeLXGUkBmPvlMQRfxiy
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov byte [rsp + 0x36], 0
mov byte [rsp + 0x37], 0x52
mov qword [rsp + 0x1b0], 0
mov eax, 5
mov word [rsp + 0x98], ax
xor al, al
jmp 0x180004722
mov al, 1
jmp 0x180004722
mov rcx, qword [rsp + 0x9c0]
xor rcx, rsp
call fcn.180007b40
add rsp, 0x9d8
pop rdi
pop rsi
ret