Function at 0x180001290
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Set console window title

Disassembly:
sub rsp, 0x88
mov rax, qword [0x1800576c8]
xor rax, rsp
mov qword [rsp + 0x80], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_AttachConsole]
test eax, eax
setne byte [0x180058770]
jne 0x1800012c8
call qword [sym.imp.KERNEL32.dll_AllocConsole]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [0x180058778], rax
test rax, rax
je 0x180001546
movabs r8, 0x8725d596929e9068
mov byte [rsp + 0x20], 0x21
mov byte [rsp + 0x21], 0xb
mov byte [rsp + 0x22], 0x1c
mov byte [rsp + 0x23], 3
mov byte [rsp + 0x24], 0xc
mov byte [rsp + 0x25], 7
mov byte [rsp + 0x26], 9
mov byte [rsp + 0x27], 2
mov byte [rsp + 0x28], 0x5b
mov byte [rsp + 0x29], 0x14
mov byte [rsp + 0x2a], 2
mov byte [rsp + 0x2b], 0x1f
mov byte [rsp + 0x2c], 0x5c
mov byte [rsp + 0x2d], 4
mov byte [rsp + 0x2e], 0x12
mov byte [rsp + 0x2f], 0xd
mov byte [rsp + 0x30], 0x19
mov byte [rsp + 0x31], 0xf
mov byte [rsp + 0x32], 0xe
mov byte [rsp + 0x33], 0x5f
mov byte [rsp + 0x34], 0x17
mov byte [rsp + 0x35], 0xc
mov byte [rsp + 0x36], 0x19
mov byte [rsp + 0x37], 0x15
mov byte [rsp + 0x38], 0xf3
mov byte [rsp + 0x39], 0xfc
mov byte [rsp + 0x3a], 0xee
mov byte [rsp + 0x3b], 0xe1
mov byte [rsp + 0x3c], 0xef
mov byte [rsp + 0x3d], 0xa7
mov byte [rsp + 0x3e], 0xfd
mov byte [rsp + 0x3f], 0xaf
mov byte [rsp + 0x40], 0xc2
mov byte [rsp + 0x41], 0xca
mov byte [rsp + 0x42], 0xde
mov byte [rsp + 0x43], 0xc3
mov byte [rsp + 0x44], 0xa2
mov byte [rsp + 0x45], 0xc6
mov byte [rsp + 0x46], 0xde
mov byte [rsp + 0x47], 0xc7
mov byte [rsp + 0x48], 0xd8
mov byte [rsp + 0x49], 0xdb
mov byte [rsp + 0x4a], 0xdf
mov byte [rsp + 0x4b], 0xbe
mov byte [rsp + 0x4c], 0xed
mov byte [rsp + 0x4d], 0xb7
mov byte [rsp + 0x4e], 0xde
mov byte [rsp + 0x4f], 0xd1
mov byte [rsp + 0x50], 0xdc
mov byte [rsp + 0x51], 0xc6
mov byte [rsp + 0x52], 0xba
mov byte [rsp + 0x53], 0xd7
mov byte [rsp + 0x54], 0xca
mov byte [rsp + 0x55], 0xd1
mov byte [rsp + 0x56], 0xdf
mov byte [rsp + 0x57], 0xc3
mov byte [rsp + 0x58], 0xf2
mov byte [rsp + 0x59], 0xe7
mov byte [rsp + 0x5a], 0xf5
mov byte [rsp + 0x5b], 0x8e
mov byte [rsp + 0x5c], 0xdd
mov byte [rsp + 0x5d], 0x87
mov byte [rsp + 0x5e], 0xc9
mov byte [rsp + 0x5f], 0xdb
mov byte [rsp + 0x60], 0xd4
mov byte [rsp + 0x61], 0xdf
mov byte [rsp + 0x62], 0xd9
mov byte [rsp + 0x63], 0x98
mov byte [rsp + 0x64], 0x8d
mov byte [rsp + 0x65], 0x8b
mov byte [rsp + 0x66], 0xc8
mov byte [rsp + 0x67], 0xcf
mov byte [rsp + 0x68], 0xc5
mov byte [rsp + 0x69], 0xdb
mov byte [rsp + 0x6a], 0xd8
mov byte [rsp + 0x6b], 0xcc
mov byte [rsp + 0x6c], 0xd5
mov byte [rsp + 0x6d], 0x99
mov byte [rsp + 0x6e], 0xd6
mov byte [rsp + 0x6f], 0xd8
mov byte [rsp + 0x70], 0x9f
mov byte [rsp + 0x71], 0x88
mov byte [rsp + 0x72], 0xfd
mov byte [rsp + 0x73], 0xc4
mov byte [rsp + 0x74], 0xe8
mov byte [rsp + 0x75], 0xf1
mov byte [rsp + 0x76], 0xdd
mov byte [rsp + 0x77], 0xf7
mov byte [rsp + 0x78], 0xb7
mov byte [rsp + 0x79], 0x98
mov byte [rsp + 0x7a], 0xaf
mov byte [rsp + 0x7b], 0xce
mov edx, 0x69
mov r10d, 4
nop word cs:[rax + rax]
lea r9d, [rdx - 1]
lea ecx, [r10 - 4]
and cl, 0x38
mov rax, r8
shr rax, cl
and eax, 0xf
xor eax, r9d
xor byte [rsp + rdx - 0x49], al
mov ecx, r10d
and cl, 0x3c
mov rax, r8
shr rax, cl
and eax, 0xf
xor eax, edx
xor byte [rsp + rdx - 0x48], al
add rdx, 2
add r10, 8
cmp rdx, 0xc5
jne 0x1800014d0
lea rcx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
lea rcx, [0x180058668]
lea rdx, [0x18004c96f]
mov r8d, 0xa
mov r9d, 0x40
call fcn.180001560
mov rcx, qword [rsp + 0x80]
xor rcx, rsp
call fcn.180018f40
nop
add rsp, 0x88
ret