Function at 0x140073620
Capabilities:
Create thread
Encode data using xor
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x100
mov rax, qword [0x14033b600]
xor rax, rsp
mov qword [rbp + 0x47], rax
call fcn.1400704c0
xor ecx, ecx
call fcn.140233e7c
mov rcx, rax
call fcn.140233020
mov edx, 0x63
lea rcx, [rbp + 7]
call fcn.1400701d0
cmp qword [rax + 0x18], 0x10
jb 0x140073671
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0x10
jb 0x1400736b7
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400736b2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400736b2
call fcn.14023482c
int3
call fcn.140223f10
mov ecx, 8
call fcn.1402241b0
lea rcx, [0x140073610]
mov qword [rax], rcx
mov qword [rbp - 0x19], rax
lea rcx, [rbp - 9]
mov qword [rsp + 0x28], rcx
xor edi, edi
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140084fe0]
xor edx, edx
xor ecx, ecx
call fcn.140238a3c
mov qword [rbp - 0x11], rax
test rax, rax
je 0x140073ead
mov dword [rbp - 0x79], 0x9090b00
mov dword [rbp - 0x75], 0xb4815
mov byte [rbp - 0x71], 1
mov ecx, edi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x63]
xor byte [rbp + rcx - 0x79], al
inc rcx
cmp rcx, 7
jb 0x140073720
mov byte [rbp - 0x71], 0
lea rcx, [rbp - 0x79]
call fcn.140239ffc
mov dword [rbp - 0x79], 0x80b0b20
mov dword [rbp - 0x75], 0x31d0b02
mov dword [rbp - 0x71], 0x40430b05
mov word [rbp - 0x6d], 0x41
mov byte [rbp - 0x6b], 1
mov rcx, rdi
nop
lea eax, [rcx + 0x63]
xor byte [rbp + rcx - 0x79], al
inc rcx
cmp rcx, 0xd
jb 0x140073760
mov byte [rbp - 0x6b], 0
lea rdx, [rbp - 0x79]
call fcn.140077240
lea rcx, [0x1403459c0]
call fcn.140068d60
lea rcx, [0x1403459c0]
call fcn.14006b400
test al, al
je 0x1400737a4
call fcn.14006dfd0
call fcn.140234cb8
int3
mov dword [rbp - 0x19], 0x362820
mov byte [rbp - 0x15], 1
mov rcx, rdi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x63]
xor byte [rbp + rcx - 0x19], al
inc rcx
cmp rcx, 3
jb 0x1400737c0
mov byte [rbp - 0x15], 0
lea rcx, [rbp - 0x19]
call fcn.140239ffc
call fcn.1400703f0
mov qword [rbp + 7], rdi
mov qword [rbp + 0x17], rdi
mov qword [rbp + 0x1f], reloc.WS2_32.dll_ntohs
mov byte [rbp + 7], 0
xor r8d, r8d
lea rdx, [0x1403067bb]
lea rcx, [rbp + 7]
call fcn.140060430
nop
mov qword [rbp + 0x27], rdi
mov qword [rbp + 0x37], rdi
mov qword [rbp + 0x3f], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x27], 0
xor r8d, r8d
lea rdx, [0x1403067bb]
lea rcx, [rbp + 0x27]
call fcn.140060430
nop
mov dword [rbp - 0x79], 0x14001736
mov dword [rbp - 0x75], 0xf040909
mov dword [rbp - 0x71], 0x1004c51
mov rcx, rdi
nop word [rax + rax]
lea eax, [rcx + 0x63]
xor byte [rbp + rcx - 0x79], al
inc rcx
cmp rcx, 0xa
jb 0x140073850
mov byte [rbp - 0x6e], 0
lea rdx, [rbp - 0x79]
call fcn.140077240
lea rdx, [rbp + 7]
lea rcx, [0x140343dd0]
call fcn.14007feb0
mov dword [rbp - 0x79], 0x15160533
mov dword [rbp - 0x75], 0xe1b0710
mov dword [rbp - 0x71], 0x1004c51
mov rdx, rdi
nop word [rax + rax]
lea eax, [rdx + 0x63]
xor byte [rbp + rdx - 0x79], al
inc rdx
cmp rdx, 0xa
jb 0x1400738a0
mov byte [rbp - 0x6e], 0
lea rdx, [rbp - 0x79]
call fcn.140077240
lea rdx, [rbp + 0x27]
lea rcx, [0x140343dd0]
call fcn.14007feb0
lea rax, [rbp - 0x59]
mov qword [rbp - 0x19], rax
lea rdx, [rbp + 0x27]
lea rcx, [rbp - 0x59]
call fcn.14005f950
mov rbx, rax
lea rdx, [rbp + 7]
lea rcx, [rbp - 0x39]
call fcn.14005f950
nop
mov r8, rbx
mov rdx, rax
lea rcx, [0x1403459c0]
call fcn.140069ec0
mov dword [rbp - 0x19], 0x362820
mov byte [rbp - 0x15], 1
mov rcx, rdi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x63]
xor byte [rbp + rcx - 0x19], al
inc rcx
cmp rcx, 3
jb 0x140073920
mov byte [rbp - 0x15], 0
lea rcx, [rbp - 0x19]
call fcn.140239ffc
call fcn.1400703f0
movdqa xmm0, xmmword [str.8U8G_____O3]
movdqu xmmword [rbp - 0x79], xmm0
mov dword [rbp - 0x69], 0x4101a12
mov word [rbp - 0x65], 0x100
mov rcx, rdi
nop
lea eax, [rcx + 0x63]
xor byte [rbp + rcx - 0x79], al
inc rcx
cmp rcx, 0x14
jb 0x140073960
mov byte [rbp - 0x64], 0
lea rcx, [rbp - 0x79]
call fcn.140239ef0
movdqa xmm0, xmmword [str.8V8G___L.]
movdqu xmmword [rbp - 0x79], xmm0
mov word [rbp - 0x69], 1
mov byte [rbp - 0x67], 1
mov rcx, rdi
nop word [rax + rax]
lea eax, [rcx + 0x63]
xor byte [rbp + rcx - 0x79], al
inc rcx
cmp rcx, 0x11
jb 0x1400739a0
mov byte [rbp - 0x67], 0
lea rcx, [rbp - 0x79]
call fcn.140239ef0
movdqa xmm0, xmmword [str.8W8G_9K_]
movdqu xmmword [rbp - 0x79], xmm0
mov word [rbp - 0x69], 0x100
mov rcx, rdi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x63]
xor byte [rbp + rcx - 0x79], al
inc rcx
cmp rcx, 0x10
jb 0x1400739e0
mov byte [rbp - 0x68], 0
lea rcx, [rbp - 0x79]
call fcn.140239ef0
movdqa xmm0, xmmword [str.8P8G9_K_]
movdqu xmmword [rbp - 0x79], xmm0
mov word [rbp - 0x69], 0x100
mov rcx, rdi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x63]
xor byte [rbp + rcx - 0x79], al
inc rcx
cmp rcx, 0x10
jb 0x140073a20
mov byte [rbp - 0x68], 0
lea rcx, [rbp - 0x79]
call fcn.140239ef0
movdqa xmm0, xmmword [str.8Q8G___K_]
movdqu xmmword [rbp - 0x79], xmm0
mov word [rbp - 0x69], 0x100
mov rcx, rdi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x63]
xor byte [rbp + rcx - 0x79], al
inc rcx
cmp rcx, 0x10
jb 0x140073a60
mov byte [rbp - 0x68], 0
lea rcx, [rbp - 0x79]
call fcn.140239ef0
movdqa xmm0, xmmword [0x1403118d0]
movdqu xmmword [rbp - 0x79], xmm0
mov dword [rbp - 0x69], 0x191a0420
mov dword [rbp - 0x65], 0xb1d11
mov byte [rbp - 0x61], 1
mov rcx, rdi
nop
lea eax, [rcx + 0x63]
xor byte [rbp + rcx - 0x79], al
inc rcx
cmp rcx, 0x17
jb 0x140073aa0
mov byte [rbp - 0x61], 0
lea rcx, [rbp - 0x79]
call fcn.140239ef0
movdqa xmm0, xmmword [0x140311670]
movdqu xmmword [rbp - 0x79], xmm0
mov dword [rbp - 0x69], 0x101a1b03
mov dword [rbp - 0x65], 0x1000a12
mov rcx, rdi
nop dword [rax + rax]
lea eax, [rcx + 0x63]
xor byte [rbp + rcx - 0x79], al
inc rcx
cmp rcx, 0x16
jb 0x140073ae0
mov byte [rbp - 0x62], 0
lea rcx, [rbp - 0x79]
call fcn.140239ef0
movdqa xmm0, xmmword [0x1403118e0]
movdqu xmmword [rbp - 0x79], xmm0
mov dword [rbp - 0x69], 0x191a0420
mov dword [rbp - 0x65], 0xb1d11
mov byte [rbp - 0x61], 1
mov rcx, rdi
nop
lea eax, [rcx + 0x63]
xor byte [rbp + rcx - 0x79], al
inc rcx
cmp rcx, 0x17
jb 0x140073b20
mov byte [rbp - 0x61], 0
lea rcx, [rbp - 0x79]
call fcn.140239ef0
movdqa xmm0, xmmword [0x1403118c0]
movdqu xmmword [rbp - 0x79], xmm0
mov dword [rbp - 0x69], 0x191a0420
mov dword [rbp - 0x65], 0xb1d11
mov byte [rbp - 0x61], 1
mov rcx, rdi
nop
lea eax, [rcx + 0x63]
xor byte [rbp + rcx - 0x79], al
inc rcx
cmp rcx, 0x17
jb 0x140073b60
mov byte [rbp - 0x61], 0
lea rcx, [rbp - 0x79]
call fcn.140239ef0
mov dword [rbp - 0x79], 0x3b555538
mov dword [rbp - 0x75], 0x628485d
mov word [rbp - 0x71], 7
mov byte [rbp - 0x6f], 1
mov rcx, rdi
nop dword [rax + rax]
lea eax, [rcx + 0x63]
xor byte [rbp + rcx - 0x79], al
inc rcx
cmp rcx, 9
jb 0x140073ba0
mov byte [rbp - 0x6f], 0
lea rcx, [rbp - 0x79]
call fcn.140239ef0
mov dword [rbp - 1], edi
mov dword [rbp - 0x19], 0x5c5b496a
mov word [rbp - 0x15], 0x47
mov byte [rbp - 0x13], 1
nop dword [rax]
nop word [rax + rax]
lea eax, [rdi + 0x63]
xor byte [rbp + rdi - 0x19], al
inc rdi
cmp rdi, 5
jb 0x140073be0
mov byte [rbp - 0x13], 0
lea rdx, [rbp - 0x19]
call fcn.140077240
lea rdx, [rbp - 1]
call fcn.140077900
mov eax, dword [rbp - 1]
dec eax
cmp eax, 9
ja case.default.0x140073c25
lea rdx, [0x140000000]
mov ecx, dword [rdx + rax*4 + 0x73ebc]
add rcx, rdx
jmp rcx
mov dword [rbp - 0x19], 0x362820
mov byte [rbp - 0x15], 1
lea rcx, [rbp - 0x19]
call fcn.140066f10
mov rcx, rax
call fcn.140239ffc
call fcn.1400703f0
call fcn.140070730
lea rcx, [rbp - 0x11]
call fcn.140062fb0
xor ecx, ecx
call fcn.140234cac
int3
mov dword [rbp - 0x19], 0x362820
mov byte [rbp - 0x15], 1
lea rcx, [rbp - 0x19]
call fcn.140066f10
mov rcx, rax
call fcn.140239ffc
call fcn.1400703f0
call fcn.140070a20
lea rcx, [rbp - 0x11]
call fcn.140062fb0
xor ecx, ecx
call fcn.140234cac
int3
mov dword [rbp - 0x19], 0x362820
mov byte [rbp - 0x15], 1
lea rcx, [rbp - 0x19]
call fcn.140066f10
mov rcx, rax
call fcn.140239ffc
call fcn.1400703f0
call fcn.140070f50
lea rcx, [rbp - 0x11]
call fcn.140062fb0
xor ecx, ecx
call fcn.140234cac
int3
mov dword [rbp - 0x19], 0x362820
mov byte [rbp - 0x15], 1
lea rcx, [rbp - 0x19]
call fcn.140066f10
mov rcx, rax
call fcn.140239ffc
call fcn.1400703f0
call fcn.140071170
lea rcx, [rbp - 0x11]
call fcn.140062fb0
xor ecx, ecx
call fcn.140234cac
int3
mov dword [rbp - 0x19], 0x362820
mov byte [rbp - 0x15], 1
lea rcx, [rbp - 0x19]
call fcn.140066f10
mov rcx, rax
call fcn.140239ffc
call fcn.1400703f0
call fcn.140071a10
lea rcx, [rbp - 0x11]
call fcn.140062fb0
xor ecx, ecx
call fcn.140234cac
int3
mov dword [rbp - 0x19], 0x362820
mov byte [rbp - 0x15], 1
lea rcx, [rbp - 0x19]
call fcn.140066f10
mov rcx, rax
call fcn.140239ffc
call fcn.1400703f0
call fcn.140071dc0
lea rcx, [rbp - 0x11]
call fcn.140062fb0
xor ecx, ecx
call fcn.140234cac
int3
mov dword [rbp - 0x19], 0x362820
mov byte [rbp - 0x15], 1
lea rcx, [rbp - 0x19]
call fcn.140066f10
mov rcx, rax
call fcn.140239ffc
call fcn.1400703f0
call fcn.140072770
lea rcx, [rbp - 0x11]
call fcn.140062fb0
xor ecx, ecx
call fcn.140234cac
int3
mov dword [rbp - 0x19], 0x362820
mov byte [rbp - 0x15], 1
lea rcx, [rbp - 0x19]
call fcn.140066f10
mov rcx, rax
call fcn.140239ffc
call fcn.1400703f0
call fcn.140072e90
lea rcx, [rbp - 0x11]
call fcn.140062fb0
xor ecx, ecx
call fcn.140234cac
int3
mov dword [rbp - 0x19], 0x362820
mov byte [rbp - 0x15], 1
lea rcx, [rbp - 0x19]
call fcn.140066f10
mov rcx, rax
call fcn.140239ffc
call fcn.1400703f0
call fcn.140073190
lea rcx, [rbp - 0x11]
call fcn.140062fb0
xor ecx, ecx
call fcn.140234cac
int3
mov dword [rbp - 0x19], 0x362820
mov byte [rbp - 0x15], 1
lea rcx, [rbp - 0x19]
call fcn.140066f10
mov rcx, rax
call fcn.140239ffc
call fcn.1400703f0
call fcn.140073460
lea rcx, [rbp - 0x11]
call fcn.140062fb0
xor ecx, ecx
call fcn.140234cac
int3
mov dword [rbp - 0x19], 0x362820
mov byte [rbp - 0x15], 1
lea rcx, [rbp - 0x19]
call fcn.140066f10
mov rcx, rax
call fcn.140239ffc
call fcn.1400703f0
mov dword [rbp - 0x79], 0x29373626
mov dword [rbp - 0x75], 0x5a5d4835
mov dword [rbp - 0x71], 0x1004d5f
lea rcx, [rbp - 0x79]
call fcn.14006b3d0
mov rcx, rax
call fcn.140239ef0
lea rcx, [rbp - 0x11]
call fcn.140062fb0
call fcn.140239dac
mov ecx, 1
call fcn.140234cac
nop
mov dword [rbp - 9], edi
mov ecx, 6
call fcn.140223288
int3