Function at 0x1400206f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rsi
push rdi
sub rsp, 0x348
mov rsi, rcx
lea rax, [rsp + 0x38]
mov qword [rsp + 0x28], rax
movabs rax, 0x6100640069
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], 3
lea rax, [rsp + 0x58]
mov qword [rsp + 0x48], rax
movabs rax, 0x64003200330078
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x60], 0x670062
mov qword [rsp + 0x50], 6
mov word [rsp + 0x64], 0
lea rax, [rsp + 0x78]
mov qword [rsp + 0x68], rax
movabs rax, 0x64003400360078
mov qword [rsp + 0x78], rax
mov dword [rsp + 0x80], 0x670062
mov qword [rsp + 0x70], 6
mov word [rsp + 0x84], 0
lea rax, [rsp + 0x98]
mov qword [rsp + 0x88], rax
movabs rax, 0x36006100640069
mov qword [rsp + 0x98], rax
mov dword [rsp + 0xa0], 0x34
mov qword [rsp + 0x90], 5
lea rcx, [rsp + 0xa8]
lea rax, [rsp + 0xb8]
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0x20], 0x10
lea rdx, [rsp + 0x20]
xor r8d, r8d
call fcn.1400b92e0
mov qword [rsp + 0xa8], rax
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0xb8], rcx
vmovups ymm0, ymmword [str.x86_64_SSE4_AVX2]
vmovups ymmword [rax], ymm0
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xb0], rcx
mov word [rax + rcx*2], 0
lea rcx, [rsp + 0xc8]
lea rax, [rsp + 0xd8]
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0x20], 9
lea rdx, [rsp + 0x20]
xor r8d, r8d
vzeroupper
call fcn.1400b92e0
mov qword [rsp + 0xc8], rax
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0xd8], rcx
vmovups xmm0, xmmword [str.wireshark]
vmovups xmmword [rax], xmm0
mov word [rax + 0x10], 0x6b
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0xd0], rcx
mov word [rax + rcx*2], 0
lea rcx, [rsp + 0xe8]
lea rax, [rsp + 0xf8]
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0x20], 0xd
lea rdx, [rsp + 0x20]
xor r8d, r8d
call fcn.1400b92e0
mov qword [rsp + 0xe8], rax
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0xf8], rcx
vmovups xmm0, xmmword [0x1400e956a]
vmovups xmmword [rax + 0xa], xmm0
vmovups xmm0, xmmword [str.processhacker]
vmovups xmmword [rax], xmm0
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0xf0], rcx
mov word [rax + rcx*2], 0
lea rax, [rsp + 0x118]
mov qword [rsp + 0x108], rax
movabs rax, 0x7300740065006e
mov qword [rsp + 0x118], rax
movabs rax, 0x74006100740073
mov qword [rsp + 0x11e], rax
mov qword [rsp + 0x110], 7
mov word [rsp + 0x126], 0
lea rax, [rsp + 0x138]
mov qword [rsp + 0x128], rax
movabs rax, 0x6d00740065006e
mov qword [rsp + 0x138], rax
mov dword [rsp + 0x140], 0x6e006f
mov qword [rsp + 0x130], 6
mov word [rsp + 0x144], 0
lea rax, [rsp + 0x158]
mov qword [rsp + 0x148], rax
movabs rax, 0x76007000630074
mov qword [rsp + 0x158], rax
movabs rax, 0x77006500690076
mov qword [rsp + 0x15e], rax
mov qword [rsp + 0x150], 7
mov word [rsp + 0x166], 0
lea rax, [rsp + 0x178]
mov qword [rsp + 0x168], rax
movabs rax, 0x6e006f006d0065
mov qword [rsp + 0x17e], rax
movabs rax, 0x65006c00690066
mov qword [rsp + 0x178], rax
mov qword [rsp + 0x170], 7
mov word [rsp + 0x186], 0
lea rax, [rsp + 0x198]
mov qword [rsp + 0x188], rax
movabs rax, 0x6d006700650072
mov qword [rsp + 0x198], rax
mov dword [rsp + 0x1a0], 0x6e006f
mov qword [rsp + 0x190], 6
mov word [rsp + 0x1a4], 0
lea rax, [rsp + 0x1b8]
mov qword [rsp + 0x1a8], rax
movabs rax, 0x6e006900610063
mov qword [rsp + 0x1b8], rax
mov qword [rsp + 0x1b0], 4
mov word [rsp + 0x1c0], 0
lea rax, [rsp + 0x1d8]
mov qword [rsp + 0x1c8], rax
movabs rax, 0x79006c006c006f
mov qword [rsp + 0x1d8], rax
movabs rax, 0x67006200640079
mov qword [rsp + 0x1de], rax
mov qword [rsp + 0x1d0], 7
mov word [rsp + 0x1e6], 0
lea rax, [rsp + 0x1f8]
mov qword [rsp + 0x1e8], rax
movabs rax, 0x64006e00690077
mov qword [rsp + 0x1f8], rax
mov dword [rsp + 0x200], 0x670062
mov qword [rsp + 0x1f0], 6
mov word [rsp + 0x204], 0
lea rcx, [rsp + 0x208]
lea rax, [rsp + 0x218]
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x20], 9
lea rdx, [rsp + 0x20]
xor r8d, r8d
call fcn.1400b92e0
mov qword [rsp + 0x208], rax
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x218], rcx
vmovups xmm0, xmmword [str.debugview]
vmovups xmmword [rax], xmm0
mov word [rax + 0x10], 0x77
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0x210], rcx
mov word [rax + rcx*2], 0
lea rax, [rsp + 0x238]
mov qword [rsp + 0x228], rax
movabs rax, 0x64006900680067
mov qword [rsp + 0x238], rax
mov dword [rsp + 0x240], 0x610072
mov qword [rsp + 0x230], 6
mov word [rsp + 0x244], 0
lea rax, [rsp + 0x258]
mov qword [rsp + 0x248], rax
movabs rax, 0x61006400610072
mov qword [rsp + 0x258], rax
movabs rax, 0x32006500720061
mov qword [rsp + 0x25e], rax
mov qword [rsp + 0x250], 7
mov word [rsp + 0x266], 0
lea rcx, [rsp + 0x268]
lea rax, [rsp + 0x278]
mov qword [rsp + 0x268], rax
mov qword [rsp + 0x20], 8
lea rdx, [rsp + 0x20]
xor r8d, r8d
call fcn.1400b92e0
mov qword [rsp + 0x268], rax
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x278], rcx
vmovups xmm0, xmmword [str.ollydbg2]
vmovups xmmword [rax], xmm0
mov rax, qword [rsp + 0x268]
mov qword [rsp + 0x270], rcx
mov word [rax + rcx*2], 0
lea rcx, [rsp + 0x288]
lea rax, [rsp + 0x298]
mov qword [rsp + 0x288], rax
mov qword [rsp + 0x20], 8
lea rdx, [rsp + 0x20]
xor r8d, r8d
call fcn.1400b92e0
mov qword [rsp + 0x288], rax
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x298], rcx
vmovups xmm0, xmmword [str.x64dbg]
vmovups xmmword [rax], xmm0
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x290], rcx
mov word [rax + rcx*2], 0
lea rax, [rsp + 0x2b8]
mov qword [rsp + 0x2a8], rax
movabs rax, 0x700073006e0064
mov qword [rsp + 0x2b8], rax
mov dword [rsp + 0x2c0], 0x79
mov qword [rsp + 0x2b0], 5
lea rax, [rsp + 0x2d8]
mov qword [rsp + 0x2c8], rax
movabs rax, 0x700073006c0069
mov qword [rsp + 0x2d8], rax
mov dword [rsp + 0x2e0], 0x79
mov qword [rsp + 0x2d0], 5
lea rax, [rsp + 0x2f8]
mov qword [rsp + 0x2e8], rax
movabs rax, 0x70006e00690077
mov qword [rsp + 0x2f8], rax
movabs rax, 0x70006100630070
mov qword [rsp + 0x2fe], rax
mov qword [rsp + 0x2f0], 7
mov word [rsp + 0x306], 0
lea rcx, [rsp + 0x318]
mov qword [rsp + 0x308], rcx
mov qword [rsp + 0x318], rax
mov qword [rsp + 0x310], 4
mov word [rsp + 0x320], 0
lea rax, [rsp + 0x338]
mov qword [rsp + 0x328], rax
movabs rax, 0x70006d00750064
mov qword [rsp + 0x338], rax
mov qword [rsp + 0x330], 4
mov word [rsp + 0x340], 0
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rsi], xmm0
mov qword [rsi + 0x10], 0
lea rdi, [rsp + 0x348]
lea rdx, [rsp + 0x28]
mov rcx, rsi
mov r8, rdi
call fcn.1400affa0
mov rsi, 0xfffffffffffffce0
jmp 0x140020e5a
add rdi, 0xffffffffffffffe0
add rsi, 0x20
je 0x140020e6e
mov rcx, qword [rdi - 0x20]
lea rax, [rdi - 0x10]
cmp rax, rcx
je 0x140020e50
call fcn.1400e4650
jmp 0x140020e50
add rsp, 0x348
pop rdi
pop rsi
ret