Function at 0x180001d10
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
movabs rax, 0xd5fca21cd6cce1b9
mov qword [rsp + 0x628], rax
mov eax, 1
imul rax, rax, 8
mov byte [rsp + rax + 0x1e0], 0
movabs rax, 0x616827800144c831
mov qword [rsp + 0x630], rax
mov byte [rsp + 0x180], 0x6c
movabs rax, 0x90d4fe4cd11fb40f
mov qword [rsp + 0x638], rax
movabs rax, 0xeba5d1db790798e6
mov qword [rsp + 0x640], rax
mov byte [rsp + 0x181], 0x75
lea rdx, [rsp + 0x1e0]
mov rcx, qword [rsp + 0x1b8]
mov rax, qword [rsp + 0x1a8]
call qword [rax + 0x4494d0]
mov qword [rsp + 0x470], rax
mov eax, 1
imul rax, rax, 0
mov byte [rsp + rax + 0x1e0], 0x53
mov dword [rsp + 0x3c4], 0xd25603a5
mov dword [rsp + 0x3c8], 0x76158c8e
movabs rax, 0x28a3d005ad2ca9c1
mov qword [rsp + 0x648], rax
mov eax, 1
imul rax, rax, 1
mov byte [rsp + rax + 0x1e0], 0x65
mov byte [rsp + 0x182], 0xe8
movabs rax, 0xec487c81ae25cac0
mov qword [rsp + 0x650], rax
mov eax, 1
imul rax, rax, 2
mov byte [rsp + rax + 0x1e0], 0x74
movabs rax, 0x2dc2bf6cd79091d
mov qword [rsp + 0x658], rax
movabs rax, 0xe6f8a431b75422d0
mov qword [rsp + 0x660], rax
mov byte [rsp + 0x183], 0xb5
mov eax, 1
imul rax, rax, 3
mov byte [rsp + rax + 0x1e0], 0x46
mov dword [rsp + 0x3cc], 0x430dc22b
movabs rax, 0xd1bd8acc100d49ad
mov qword [rsp + 0x780], rax
mov eax, 1
imul rax, rax, 4
mov byte [rsp + rax + 0x1e0], 0x69
movabs rax, 0x1788424b78da3733
mov qword [rsp + 0x670], rax
mov eax, 1
imul rax, rax, 5
mov byte [rsp + rax + 0x1e0], 0x6c
movabs rax, 0xa9360096880af312
mov qword [rsp + 0x678], rax
mov byte [rsp + 0x184], 0xf1
mov dword [rsp + 0x3d0], 0x7e6a8a6c
mov eax, 1
imul rax, rax, 6
mov byte [rsp + rax + 0x1e0], 0x65
mov eax, 1
imul rax, rax, 7
mov byte [rsp + rax + 0x1e0], 0x50
mov dword [rsp + 0x3d4], 0xe6979704
mov eax, 1
imul rax, rax, 8
mov byte [rsp + rax + 0x1e0], 0x6f
mov dword [rsp + 0x3d8], 0x3c6eaec5
movabs rax, 0x3eb979d796aaa363
mov qword [rsp + 0x680], rax
mov eax, 1
imul rax, rax, 9
mov byte [rsp + rax + 0x1e0], 0x69
mov byte [rsp + 0x185], 0xcb
movabs rax, 0xfa6fadc6dd9a8513
mov qword [rsp + 0x688], rax
mov dword [rsp + 0x3dc], 0xdf135a4c
mov eax, 1
imul rax, rax, 0xa
mov byte [rsp + rax + 0x1e0], 0x6e
movabs rax, 0xe7a7fa92e7c28a4e
mov qword [rsp + 0x690], rax
mov byte [rsp + 0x186], 0x9b
movabs rax, 0x4338b37054c5f0b2
mov qword [rsp + 0x698], rax
mov eax, 1
imul rax, rax, 0xb
mov byte [rsp + rax + 0x1e0], 0x74
movabs rax, 0x164942fe01fea30a
mov qword [rsp + 0x6a0], rax
mov eax, 1
imul rax, rax, 0xc
mov byte [rsp + rax + 0x1e0], 0x65
movabs rax, 0x3992c1b46a4d02b7
mov qword [rsp + 0x6a8], rax
movabs rax, 0x357ffaf1414c9d6c
mov qword [rsp + 0x6b0], rax
mov byte [rsp + 0x187], 0xdc
mov dword [rsp + 0x3e0], 0xcb519cdb
mov eax, 1
imul rax, rax, 0xd
mov byte [rsp + rax + 0x1e0], 0x72
movabs rax, 0x405d15eb794e6c4
mov qword [rsp + 0x6b8], rax
movabs rax, 0xe9fe20ae9f5aa3af
mov qword [rsp + 0x6c0], rax
mov eax, 1
imul rax, rax, 0xe
mov byte [rsp + rax + 0x1e0], 0
mov dword [rsp + 0x3e4], 0x7e070d61
mov byte [rsp + 0x188], 0xe4
mov byte [rsp + 0x189], 0xa1
mov dword [rsp + 0x3e8], 0x2782b11a
lea rdx, [rsp + 0x1e0]
mov rcx, qword [rsp + 0x1b8]
mov rax, qword [rsp + 0x1a8]
call qword [rax + 0x4494d0]
mov qword [rsp + 0x460], rax
mov dword [rsp + 0x3ec], 0xda2a4ac
mov dword [rsp + 0x3f0], 0x4ad23c47
mov dword [rsp + 0x3f4], 0x862dc4da
mov dword [rsp + 0x3f8], 0x85083ab2
mov eax, 1
imul rax, rax, 0
mov byte [rsp + rax + 0x1e0], 0x56
mov eax, 1
imul rax, rax, 1
mov byte [rsp + rax + 0x1e0], 0x69
mov byte [rsp + 0x18a], 0x15
mov dword [rsp + 0x3fc], 0x49639779
mov byte [rsp + 0x18b], 0xfe
mov byte [rsp + 0x18c], 0x33
mov eax, 1
imul rax, rax, 2
mov byte [rsp + rax + 0x1e0], 0x72
mov dword [rsp + 0x400], 0x9475a74
mov dword [rsp + 0x404], 0xbc3b2477
mov eax, 1
imul rax, rax, 3
mov byte [rsp + rax + 0x1e0], 0x74
mov dword [rsp + 0x408], 0xde1a0c20
mov eax, 1
imul rax, rax, 4
mov byte [rsp + rax + 0x1e0], 0x75
mov eax, 1
imul rax, rax, 5
mov byte [rsp + rax + 0x1e0], 0x61
movabs rax, 0x3494f78fcd4648a2
mov qword [rsp + 0x6c8], rax
mov byte [rsp + 0x18d], 0xf3
mov eax, 1
imul rax, rax, 6
mov byte [rsp + rax + 0x1e0], 0x6c
mov eax, 1
imul rax, rax, 7
mov byte [rsp + rax + 0x1e0], 0x41
mov byte [rsp + 0x18e], 0xa7
mov dword [rsp + 0x40c], 0x6b82127b
mov eax, 1
imul rax, rax, 8
mov byte [rsp + rax + 0x1e0], 0x6c
movabs rax, 0x8a597872227b600d
mov qword [rsp + 0x6d0], rax
mov byte [rsp + 0x18f], 0x6a
movabs rax, 0x4fcba76a8891a786
mov qword [rsp + 0x6d8], rax
mov dword [rsp + 0x410], 0x6d3193c1
mov eax, 1
imul rax, rax, 9
mov byte [rsp + rax + 0x1e0], 0x6c
mov byte [rsp + 0x190], 0x8a
movabs rax, 0xe8946846fc5c0890
mov qword [rsp + 0x6e0], rax
mov byte [rsp + 0x191], 0xaa
movabs rax, 0x13c532889aaa3b7f
mov qword [rsp + 0x6e8], rax
mov eax, 1
imul rax, rax, 0xa
mov byte [rsp + rax + 0x1e0], 0x6f
movabs rax, 0x2e7950bc1bb76a11
mov qword [rsp + 0x6f0], rax
mov eax, 1
imul rax, rax, 0xb
mov byte [rsp + rax + 0x1e0], 0x63
mov eax, 1
imul rax, rax, 0xc
mov byte [rsp + rax + 0x1e0], 0
mov byte [rsp + 0x192], 0xed
mov dword [rsp + 0x414], 0x9f0d40fa
movabs rax, 0x38d0aefc9fa0fc3f
mov qword [rsp + 0x6f8], rax
movabs rax, 0x9d7fc274d6aa3ba8
mov qword [rsp + 0x700], rax
lea rdx, [rsp + 0x1e0]
mov rcx, qword [rsp + 0x1b8]
mov rax, qword [rsp + 0x1a8]
call qword [rax + 0x4494d0]
mov qword [rsp + 0x468], rax
movabs rax, 0x9293f7bcb91a178a
mov qword [rsp + 0x708], rax
mov byte [rsp + 0x193], 0xaf
mov byte [rsp + 0x50], 0xbe
mov byte [rsp + 0x51], 0xd9
mov byte [rsp + 0x52], reloc.OLEAUT32.dll_VarDecRound
mov byte [rsp + 0x53], 0xb4
mov byte [rsp + 0x54], 0x21
mov byte [rsp + 0x55], 0xa8
mov byte [rsp + 0x56], 0x7c
mov byte [rsp + 0x57], 0xfc
mov byte [rsp + 0x58], 0xa1
mov byte [rsp + 0x59], 0x87
mov byte [rsp + 0x5a], 0xdf
mov byte [rsp + 0x5b], 0x64
mov byte [rsp + 0x5c], 0x6e
mov byte [rsp + 0x5d], 0xe0
mov byte [rsp + 0x5e], 0xf9
mov byte [rsp + 0x5f], 0xf5
mov byte [rsp + 0x60], 0x2f
mov byte [rsp + 0x61], 0xd0
mov byte [rsp + 0x62], 3
invalid