Function at 0x1800085e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rsi
push rdi
sub rsp, 0x9d8
mov rax, qword [0x180022040]
xor rax, rsp
mov qword [rsp + 0x9c0], rax
lea rcx, [0x180019778]
call fcn.180007380
lea rdx, str.GetThreadContext
mov rcx, rax
call fcn.180007600
mov qword [rsp + 0xe8], rax
mov byte [rsp + 0x20], 0x59
mov qword [rsp + 0xf8], 3
lea rax, [rsp + 0x1d8]
lea rcx, str.jCotYAnekviQqWSlFwTVgNRPMpzrZGEBLIJusOXHbDxcKUyfd
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov qword [rsp + 0x100], 0
mov eax, 2
mov word [rsp + 0x3c], ax
mov eax, 3
mov word [rsp + 0x40], ax
mov dword [rsp + 0xac], 8
mov byte [rsp + 0x21], 0
lea rcx, [0x1800197e8]
call fcn.180007380
lea rdx, str.SetThreadContext
mov rcx, rax
call fcn.180007600
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0x108], 1
mov dword [rsp + 0xb0], 7
mov eax, 7
mov word [rsp + 0x44], ax
mov qword [rsp + 0x110], 0
mov byte [rsp + 0x22], 0x66
mov byte [rsp + 0x23], 0
mov eax, 4
mov word [rsp + 0x48], ax
lea rax, [rsp + 0x210]
lea rcx, str.xWcpuHQgLjXASndROzrJEsohbMfaKyVPYeCDvUkBITilmZFqG
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov dword [rsp + 0xb4], 0
mov byte [rsp + 0x24], 0x4b
mov eax, 9
mov word [rsp + 0x4c], ax
mov eax, 4
mov word [rsp + 0x50], ax
mov dword [rsp + 0xb8], 0
mov qword [rsp + 0x118], 9
mov byte [rsp + 0x25], 0
mov qword [rsp + 0x120], 0
lea rax, [rsp + 0x248]
lea rcx, str.ZWBJrgtzIvkwXNTaOHKdsEflbSDohcQMFVALexinjPmGUpCyR
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x4f0]
mov rdi, rax
xor eax, eax
mov ecx, 0x4d0
rep stosb byte [rdi], al
mov eax, 3
mov word [rsp + 0x54], ax
mov qword [rsp + 0x128], 2
mov byte [rsp + 0x26], 0
mov dword [rsp + 0xbc], 6
mov qword [rsp + 0x130], 0
mov eax, 4
mov word [rsp + 0x58], ax
mov byte [rsp + 0x27], 0x61
lea rax, [rsp + 0x280]
lea rcx, str.XbaBvUkFRGdgKZojfNLlcOzTYHmAxrDCIQEwVypneisWShMuP
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov dword [rsp + 0x520], 0x100010
mov byte [rsp + 0x28], 0x4d
mov eax, 9
mov word [rsp + 0x5c], ax
mov qword [rsp + 0x138], 4
mov byte [rsp + 0x29], 0
mov eax, 6
mov word [rsp + 0x60], ax
lea rax, [rsp + 0x2b8]
lea rcx, str.HNOKhZolnEwaeRxidLTSUpDBfzYrgIqAWmcPtQuskGXCbjFvJ
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov qword [rsp + 0x140], 0
mov dword [rsp + 0xc0], 3
lea rdx, [rsp + 0x4f0]
mov rcx, qword [0x1800229d0]
call qword [rsp + 0xe8]
mov byte [rsp + 0x2a], 0x75
mov eax, 6
mov word [rsp + 0x64], ax
lea rax, [rsp + 0x2f0]
lea rcx, str.aMYsGbxREkeILWltSimhnTPBJfwHXUNjKgAqVZcrFCvDpQuzO
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov qword [rsp + 0x148], 2
mov eax, 9
mov word [rsp + 0x68], ax
mov dword [rsp + 0xc4], 5
mov qword [rsp + 0x150], 0
mov byte [rsp + 0x2b], 0
lea rax, [fcn.180008510]
mov qword [rsp + 0x538], rax
mov byte [rsp + 0x2c], 0x68
mov dword [rsp + 0xc8], 6
mov byte [rsp + 0x2d], 0
mov eax, 5
mov word [rsp + 0x6c], ax
mov eax, 7
mov word [rsp + 0x70], ax
mov qword [rsp + 0x158], 3
mov qword [rsp + 0x160], 0
lea rax, [rsp + 0x328]
lea rcx, str.rNxLyjHCFZhBlIiqbpuofATQKwnseVaEMSvODPUzYdGkJWgRX
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0x560]
or rax, 1
mov qword [rsp + 0x560], rax
mov eax, 7
mov word [rsp + 0x74], ax
mov qword [rsp + 0x168], 0
mov byte [rsp + 0x2e], 0
lea rax, [rsp + 0x360]
lea rcx, str.PGTSjUiJneOrARBgpfMVwIFlkWbcuExQKZdqmDosYXyazvHhC
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov dword [rsp + 0xcc], 6
mov qword [rsp + 0x170], 5
mov eax, 5
mov word [rsp + 0x78], ax
mov byte [rsp + 0x2f], 0x6a
mov rax, qword [rsp + 0x560]
btr rax, 0x10
mov qword [rsp + 0x560], rax
mov byte [rsp + 0x30], 0x55
lea rax, [rsp + 0x398]
lea rcx, str.mzriTgINkjJRUaAfDotEpdvOneuMwGhFSLKWQsVBZHbxCyPcq
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov eax, 4
mov word [rsp + 0x7c], ax
mov qword [rsp + 0x178], 9
mov byte [rsp + 0x31], 0
mov dword [rsp + 0xd0], 5
mov eax, 6
mov word [rsp + 0x80], ax
mov qword [rsp + 0x180], 0
mov rax, qword [rsp + 0x560]
btr rax, 0x11
mov qword [rsp + 0x560], rax
lea rax, [rsp + 0x3d0]
lea rcx, str.QNKRFfnbGmXpVUPOHiTlvhtearwuEsBMZSyYdgkCWLqDzxAJj
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov byte [rsp + 0x32], 0
mov byte [rsp + 0x33], 0x72
mov qword [rsp + 0x188], 0
mov dword [rsp + 0xd4], 1
mov eax, 8
mov word [rsp + 0x84], ax
mov qword [rsp + 0x190], 8
mov eax, 5
mov word [rsp + 0x88], ax
mov dword [rsp + 0x520], 0x100010
mov qword [rsp + 0x198], 1
mov byte [rsp + 0x34], 0x50
mov eax, 8
mov word [rsp + 0x8c], ax
mov eax, 3
mov word [rsp + 0x90], ax
lea rax, [rsp + 0x408]
lea rcx, str.dGmlJLIAtnoDgrbPEvqyBRkUMYuWzpCQZsNeOxSchTXijwKfF
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov dword [rsp + 0xd8], 2
mov byte [rsp + 0x35], 0
mov qword [rsp + 0x1a0], 0
lea rdx, [rsp + 0x4f0]
mov rcx, qword [0x1800229d0]
call qword [rsp + 0xf0]
test eax, eax
jne 0x180008be7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____Could_not_set_new_thread_context:_0x_X
call fcn.180002900
mov eax, 7
mov word [rsp + 0x94], ax
lea rax, [rsp + 0x440]
lea rcx, str.YywZPgQXpJAjTnKvWzoxdfaDOCreHhGlBbiERVtFNScLqImMU
mov rdi, rax
mov rsi, rcx
mov ecx, 0x32
rep movsb byte [rdi], byte [rsi]
mov qword [rsp + 0x1a8], 1
mov byte [rsp + 0x36], 0
mov eax, 6
mov word [rsp + 0x98], ax
mov byte [rsp + 0x37], 0x69
mov dword [rsp + 0xdc], 9
mov qword [rsp + 0x1b0], 0
xor al, al
jmp 0x180008c4e
mov al, 1
jmp 0x180008c4e
mov rcx, qword [rsp + 0x9c0]
xor rcx, rsp
call fcn.180010840
add rsp, 0x9d8
pop rdi
pop rsi
ret