Function at 0x210041c30
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
loopne 0x210041463
add byte [rax], al
outsd dx, dword [rsi]
mov eax, 1
add byte [rdi - 0x48], ch
add dword [rax], eax
add byte [rax], al
imul rax, rax, 3
mov byte [rsp + rax + 0x1e0], 0x73
movabs rax, 0x4c8d98e4431a7abe
mov qword [rsp + 0x518], rax
movabs rax, 0xcc1518d543416b7
mov qword [rsp + 0x520], rax
mov eax, 1
imul rax, rax, 4
mov byte [rsp + rax + 0x1e0], 0x65
mov eax, 1
imul rax, rax, 5
mov byte [rsp + rax + 0x1e0], 0x48
movabs rax, 0x68ccecab99f1293
mov qword [rsp + 0x528], rax
mov eax, 1
imul rax, rax, 6
mov byte [rsp + rax + 0x1e0], 0x61
mov dword [rsp + 0x338], 0x13c1855c
mov dword [rsp + 0x33c], 0xd7382524
mov dword [rsp + 0x340], 0x71faac46
mov eax, 1
imul rax, rax, 7
mov byte [rsp + rax + 0x1e0], 0x6e
mov dword [rsp + 0x344], 0x94a4278f
mov dword [rsp + 0x348], 0xba8077b4
mov byte [rsp + 0x160], 0xda
mov eax, 1
imul rax, rax, 8
mov byte [rsp + rax + 0x1e0], 0x64
mov dword [rsp + 0x34c], 0x1a870c15
mov byte [rsp + 0x161], 0x5a
movabs rax, 0xcd92d49c2d4a4173
mov qword [rsp + 0x530], rax
and al, 0x30
add eax, 0x1b80000
add byte [rax], al
add byte [rax + 0x6b], cl
ror byte [rcx], 0xc6
test byte [rax + riz*8], al
add dword [rax], eax
add byte [rsi + rax*8 - 0x7c], ch
and al, 0x62
add dword [rax], eax
add byte [rax], bl
mov eax, 1
imul rax, rax, 0xa
mov byte [rsp + rax + 0x1e0], 0x65
mov dword [rsp + 0x350], 0x62643ebc
mov eax, 1
imul rax, rax, 0xb
mov byte [rsp + rax + 0x1e0], 0
mov byte [rsp + 0x163], 0xa8
movabs rax, 0x90c1bfc34a975840
mov qword [rsp + 0x538], rax
mov dword [rsp + 0x354], 0x3816dd91
mov byte [rsp + 0x164], 0xdc
mov byte [rsp + 0x165], 0xf7
lea rdx, [rsp + 0x1e0]
mov rcx, qword [rsp + 0x1b8]
mov rax, qword [rsp + 0x1a8]
call qword [rax + 0xb300]
mov qword [rsp + 0x488], rax
mov dword [rsp + 0x358], 0x94d31fa9
mov eax, 1
imul rax, rax, 0
mov byte [rsp + rax + 0x1e0], 0x43
mov byte [rsp + 0x166], 0xbc
mov eax, 1
imul rax, rax, 1
mov byte [rsp + rax + 0x1e0], 0x72
mov eax, 1
imul rax, rax, 2
mov byte [rsp + rax + 0x1e0], 0x65
mov dword [rsp + 0x35c], 0x82b2047c
mov eax, 1
imul rax, rax, 3
mov byte [rsp + rax + 0x1e0], 0x61
movabs rax, 0x55a13dd115d8e3b3
mov qword [rsp + 0x540], rax
mov eax, 1
imul rax, rax, 4
mov byte [rsp + rax + 0x1e0], 0x74
mov dword [rsp + 0x360], 0x87f023b6
mov dword [rsp + 0x364], 0x6386d6a5
mov byte [rsp + 0x167], 0x85
mov byte [rsp + 0x168], 0x9d
mov eax, 1
imul rax, rax, 5
mov byte [rsp + rax + 0x1e0], 0x65
mov dword [rsp + 0x368], 0x149ae8ea
mov byte [rsp + 0x169], 0x64
mov eax, 1
imul rax, rax, 6
mov byte [rsp + rax + 0x1e0], 0x46
add al, 0xe0
add dword [rax], eax
add byte [rsi - 0x3a], al
test byte [rdx + rbp*2], ah
add dword [rax], eax
add byte [rbp - 0x39], ah
test byte [rsp + rbp*2], ah
add eax, dword [rax]
add byte [rdi + rbx - 0x7b38b0d3], dl
and al, 0x70
add eax, dword [rax]
add byte [rbp + 0x7d], bh
pop rcx
xchg esp, eax
mov dword [rsp + 0x374], 0x3920e699
mov eax, 1
imul rax, rax, 7
mov byte [rsp + rax + 0x1e0], 0x69
mov eax, 1
imul rax, rax, 8
mov byte [rsp + rax + 0x1e0], 0x6c
movabs rax, 0xe7128745b063121f
mov qword [rsp + 0x548], rax
mov eax, 1
imul rax, rax, 9
mov byte [rsp + rax + 0x1e0], 0x65
mov byte [rsp + 0x16b], 0x40
movabs rax, 0xa986575d8bbd00b3
mov qword [rsp + 0x550], rax
mov byte [rsp + 0x16c], 0xf7
mov eax, 1
imul rax, rax, 0xa
mov byte [rsp + rax + 0x1e0], 0x41
movabs rax, 0x3d61c703699509aa
mov qword [rsp + 0x558], rax
movabs rax, 0x1a984e7902539638
mov qword [rsp + 0x560], rax
mov dword [rsp + 0x378], 0xf73d7617
mov byte [rsp + 0x16d], 0xba
mov eax, 1
imul rax, rax, 0xb
mov byte [rsp + rax + 0x1e0], 0
mov dword [rsp + 0x37c], 0x8350e1c2
mov dword [rsp + 0x380], 0x55b6e27
mov byte [rsp + 0x16e], 0xf1
mov byte [rsp + 0x16f], 0xe4
mov byte [rsp + 0x170], 2
mov byte [rsp + 0x171], 0x7b
mov byte [rsp + 0x172], 0x69
mov dword [rsp + 0x384], 0x8fed08e4
lea rdx, [rsp + 0x1e0]
mov rcx, qword [rsp + 0x1b8]
mov rax, qword [rsp + 0x1a8]
call qword [rax + 0xb300]
mov qword [rsp + 0x468], rax
mov dword [rsp + 0x388], 0x27b3ca2d
mov byte [rsp + 0x173], 0x8d
mov eax, 1
imul rax, rax, 0
mov byte [rsp + rax + 0x1e0], 0x47
mov byte [rsp + 0x174], 0x7f
mov eax, 1
imul rax, rax, 1
mov byte [rsp + rax + 0x1e0], 0x65
mov dword [rsp + 0x38c], 0xa7e56f43
movabs rax, 0x403ad18a8371a712
mov qword [rsp + 0x568], rax
mov byte [rsp + 0x175], 0x50
mov eax, 1
imul rax, rax, 2
mov byte [rsp + rax + 0x1e0], 0x74
je 0x2100418fa
mov eax, 0xf463d9de
and al, 0x48
xchg ecx, eax
mov qword [rsp + 0x570], rax
mov dword [rsp + 0x390], 0x3c1b1514
mov eax, 1
imul rax, rax, 3
mov byte [rsp + rax + 0x1e0], 0x4d
mov byte [rsp + 0x176], 0x16
movabs rax, 0x1d46f570e183fb37
mov qword [rsp + 0x578], rax
mov byte [rsp + 0x177], 0x54
mov dword [rsp + 0x394], 0x8ac1728f
mov eax, 1
imul rax, rax, 4
mov byte [rsp + rax + 0x1e0], 0x6f
mov eax, 1
imul rax, rax, 5
mov byte [rsp + rax + 0x1e0], 0x64
mov dword [rsp + 0x398], 0x1e3489a6
mov eax, 1
imul rax, rax, 6
mov byte [rsp + rax + 0x1e0], 0x75
movabs rax, 0xab03475591fe2115
push rbp
add r13d, dword [r11 + 0x24848948]
add byte [0x194cb195f], 0x24
pushfq
add eax, dword [rax]
add byte [rbx - 0x3911aad2], dh
test byte [rax + rdi*2], ah
add dword [rax], eax
add byte [rsi - 0x48], ch
add dword [rax], eax
add byte [rax], al
imul rax, rax, 7
mov byte [rsp + rax + 0x1e0], 0x6c
mov eax, 1
imul rax, rax, 8
mov byte [rsp + rax + 0x1e0], 0x65
mov byte [rsp + 0x179], 0xd8
movabs rax, 0x6166008b52e001e4
mov qword [rsp + 0x588], rax
movabs rax, 0xf64fcbded418598c
mov qword [rsp + 0x590], rax
mov eax, 1
imul rax, rax, 9
mov byte [rsp + rax + 0x1e0], 0x46
mov eax, 1
imul rax, rax, 0xa
mov byte [rsp + rax + 0x1e0], 0x69
movabs rax, 0xe42c3492bf6bb051
mov qword [rsp + 0x598], rax
mov eax, 1
imul rax, rax, 0xb
mov byte [rsp + rax + 0x1e0], 0x6c
mov dword [rsp + 0x3a0], 0x32455e6c
mov dword [rsp + 0x3a4], 0x5ac4014
mov eax, 1
imul rax, rax, 0xc
mov byte [rsp + rax + 0x1e0], 0x65
movabs rax, 0x2510811659972ca1
mov qword [rsp + 0x5a0], rax
mov eax, 1
imul rax, rax, 0xd
mov byte [rsp + rax + 0x1e0], 0x4e
mov byte [rsp + 0x17a], 0x67
movabs rax, 0xd456bf219533a2d3
mov qword [rsp + 0x5a8], rax
mov dword [rsp + 0x3a8], 0xfb1fbca8
mov dword [rsp + 0x3ac], 0xeb61ea1
mov eax, 1
imul rax, rax, 0xe
mov byte [rsp + rax + 0x1e0], 0x61
mov byte [rsp + 0x17b], 0x72
mov eax, 1
imul rax, rax, 0xf
mov byte [rsp + rax + 0x1e0], 0x6d
mov eax, 1
imul rax, rax, 0x10
mov byte [rsp + rax + 0x1e0], 0x65
movabs rax, 0xd599be1cb37c65d3
mov qword [rsp + 0x5b0], rax
mov dword [rsp + 0x3b0], 0x8c907150
mov eax, 1
imul rax, rax, 0x11
mov byte [rsp + rax + 0x1e0], 0x41
mov eax, 1
imul rax, rax, 0x12
mov byte [rsp + rax + 0x1e0], 0
movabs rax, 0x435d7870f95e81af
mov qword [rsp + 0x5b8], rax
mov byte [rsp + 0x17c], 0xf2
mov byte [rsp + 0x17d], 0x10
lea rdx, [rsp + 0x1e0]
mov rcx, qword [rsp + 0x1b8]
mov rax, qword [rsp + 0x1a8]
call qword [rax + 0xb300]
mov qword [rsp + 0x460], rax
mov eax, 1
imul rax, rax, 0
mov byte [rsp + rax + 0x1e0], 0x52
mov eax, 1
imul rax, rax, 1
mov byte [rsp + rax + 0x1e0], 0x65
mov byte [rsp + 0x17e], 0xaf
mov byte [rsp + 0x17f], 0xbb
movabs rax, 0x60ab19e70fc4b8a2
mov qword [rsp + 0x5c0], rax
movabs rax, 0xb6c6f1ff5dee3791
mov qword [rsp + 0x5c8], rax
mov eax, 1
imul rax, rax, 2
mov byte [rsp + rax + 0x1e0], 0x61
mov byte [rsp + 0x180], 7
mov eax, 1
imul rax, rax, 3
mov byte [rsp + rax + 0x1e0], 0x64
mov dword [rsp + 0x3b4], 0x32884f2a
mov dword [rsp + 0x3b8], 0xdd9dc2b5
mov byte [rsp + 0x181], 0x64
mov byte [rsp + 0x182], 0xc
mov eax, 1
imul rax, rax, 4
mov byte [rsp + rax + 0x1e0], 0x46
movabs rax, 0x3760cfe3b25e89e9
mov qword [rsp + 0x5d0], rax
mov byte [rsp + 0x183], 0x45
mov dword [rsp + 0x3bc], 0x9c3ce9a9
movabs rax, 0xccb586758ecf09b3
mov qword [rsp + 0x5d8], rax
mov eax, 1
add byte [rax + 0x6b], cl
rol byte [0x1f008a100], 1
add byte [rax], al
imul eax, edi, 0x3c02484
add byte [rax], al
jae 0x210041bfa
jp 0x210041bd2
mov byte [rsp + 0x184], 0xf3
mov eax, 1
imul rax, rax, 6
mov byte [rsp + rax + 0x1e0], 0x6c
mov eax, 1
imul rax, rax, 7
mov byte [rsp + rax + 0x1e0], 0x65
mov dword [rsp + 0x3c4], 0x5555fc8a
mov eax, 1
imul rax, rax, 8
mov byte [rsp + rax + 0x1e0], 0
mov byte [rsp + 0x185], 0x17
mov dword [rsp + 0x3c8], 0x60d80b95
mov dword [rsp + 0x3cc], 0x3da0b056
movabs rax, 0xac5b44bc92d46324
mov qword [rsp + 0x5e0], rax
lea rdx, [rsp + 0x1e0]
mov rcx, qword [rsp + 0x1b8]
mov rax, qword [rsp + 0x1a8]
call qword [rax + 0xb300]
mov qword [rsp + 0x480], rax
mov byte [rsp + 0x186], 0x92
mov eax, 1
imul rax, rax, 0
mov byte [rsp + rax + 0x1e0], 0x53
movabs rax, 0xc4cab45e6a1270bd
mov qword [rsp + 0x5e8], rax
mov eax, 1
imul rax, rax, 1
mov byte [rsp + rax + 0x1e0], 0x65
mov dword [rsp + 0x3d0], 0xc6ea37c8
movabs rax, 0x6807eeb512d92473
mov qword [rsp + 0x700], rax
mov eax, 1
imul rax, rax, 2
mov byte [rsp + rax + 0x1e0], 0x74
mov eax, 1
imul rax, rax, 3
mov byte [rsp + rax + 0x1e0], 0x46
mov byte [rsp + 0x187], 0x11
movabs rax, 0xf01a8ccf59ce5a1c
mov qword [rsp + 0x5f8], rax
mov eax, 1
imul rax, rax, 4
mov byte [rsp + rax + 0x1e0], 0x69
mov eax, 1
imul rax, rax, 5
mov byte [rsp + rax + 0x1e0], 0x6c
movabs rax, 0xd15a0b43c77572ec
mov qword [rsp + 0x600], rax
mov dword [rsp + 0x3d4], 0xbe993948
movabs rax, 0xa2c5ff5c07b5910f
mov qword [rsp + 0x608], rax
mov eax, 1
imul rax, rax, 6
mov byte [rsp + rax + 0x1e0], 0x65
mov eax, 1
imul rax, rax, 7
mov byte [rsp + rax + 0x1e0], 0x50
mov byte [rsp + 0x188], 0x51
mov byte [rsp + 0x189], 0x67
mov eax, 1
imul rax, rax, 8
mov byte [rsp + rax + 0x1e0], 0x6f
mov byte [rsp + 0x18a], 0x22
mov dword [rsp + 0x3d8], 0x42268838
mov eax, 1
imul rax, rax, 9
mov byte [rsp + rax + 0x1e0], 0x69
mov dword [rsp + 0x3dc], 0xc710aa24
mov dword [rsp + 0x3e0], 0x10c1e35f
movabs rax, 0x498cebd1e965fabf
mov qword [rsp + 0x610], rax
mov eax, 1
imul rax, rax, 0xa
mov byte [rsp + rax + 0x1e0], 0x6e
mov byte [rsp + 0x18b], 0xc3
movabs rax, 0x3660f326d373f29c
mov qword [rsp + 0x618], rax
mov eax, 1
imul rax, rax, 0xb
mov byte [rsp + rax + 0x1e0], 0x74
movabs rax, 0xc210fdefb1e27518
mov qword [rsp + 0x620], rax
mov dword [rsp + 0x3e4], 0xa7954041
mov eax, 1
imul rax, rax, 0xc
mov byte [rsp + rax + 0x1e0], 0x65
movabs rax, 0x7cabf2dcfc4c7338
invalid
invalid
invalid