Function at 0x6789ef80
Capabilities:
Create thread
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6793bb35
mov eax, dword fs:[0]
push eax
sub esp, 0x1a0
mov eax, dword [0x67ad7034]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [0x67b6b48c]
call fcn.6789edd0
mov dword [esi + 0x10], eax
cmp eax, 4
jne 0x6789f055
mov dword [ebp - 0x44], 0xe6fae5fe
xor ecx, ecx
mov dword [ebp - 0x40], 0xa7a6a7ed
mov word [ebp - 0x3c], 0xac
mov byte [ebp - 0x3a], 1
nop
lea eax, [ecx - 0x70]
xor byte [ebp + ecx - 0x44], al
inc ecx
cmp ecx, 9
jb 0x6789efe0
movaps xmm0, xmmword [0x67ac5e40]
xor ecx, ecx
movups xmmword [ebp - 0x78], xmm0
mov byte [ebp - 0x3a], 0
movaps xmm0, xmmword [0x67ac5790]
movups xmmword [ebp - 0x68], xmm0
mov dword [ebp - 0x58], 0x100918a
lea eax, [ecx - 0x51]
xor byte [ebp + ecx - 0x78], al
inc ecx
cmp ecx, 0x22
jb 0x6789f010
push 0x41034
lea eax, [ebp - 0x44]
mov byte [ebp - 0x55], 0
push eax
lea eax, [ebp - 0x78]
push eax
push 0
call dword [sym.imp.user32.dll_MessageBoxA]
sub eax, 2
je 0x6789f04e
sub eax, 4
je 0x6789f04e
sub eax, 1
jne 0x6789f04e
mov dword [esi + 0x10], 1
jmp 0x6789f055
mov dword [esi + 0x10], 0
cmp dword [esi + 0x10], 0
je 0x6789f132
mov dword [0x67b374fc], 0x962e4e4
mov dword [0x67b374f8], 0x925d434
mov dword [0x67b37514], 0x96111c0
mov dword [0x67b37508], 0x6081618
mov dword [0x67b37504], 0x3a48ba8
mov dword [0x67b3751c], 0xe92d4ff0
mov dword [0x67b37520], 0xe59f0010
mov dword [0x67b37524], 0xe3a01001
mov dword [0x67b37528], 0xe08f0000
mov dword [0x67b3752c], 0xebd7159e
mov dword [0x67b37530], 0xe3a00000
mov dword [0x67b37534], 0xe8bd8ff0
mov dword [0x67b37538], 0xc
mov byte [0x67b374d9], 0x18
mov byte [0x67b374da], 0xa8
mov byte [0x67b374d8], 0x6e
mov dword [0x67b374d4], 0xb0
mov dword [0x67b37518], 0x26049dc
mov dword [0x67b37500], 0x30fa000
mov dword [0x67b37510], 0x26049dc
mov dword [0x67b374e4], 0x2c9efb4
mov dword [0x67b3750c], 0x2c9f2b8
push 4
call fcn.67934403
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [eax], esi
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0
mov edi, dword [sym.imp.ucrtbase.dll__beginthreadex]
push ecx
push 0
push eax
push 0x678abc20
push 0
push 0
call edi
add esp, 0x18
mov dword [ebp - 0x24], eax
test eax, eax
je 0x6789f6d7
push 4
mov dword [ebp - 4], 1
call fcn.67934403
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [eax], esi
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 2
push ecx
push 0
push eax
push 0x678abc80
push 0
push 0
call edi
add esp, 0x18
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x6789f6c8
push 4
mov byte [ebp - 4], 3
call fcn.67934403
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [eax], esi
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 4
push ecx
push 0
push eax
push 0x678abce0
push 0
push 0
call edi
add esp, 0x18
mov dword [ebp - 0x34], eax
test eax, eax
je 0x6789f6b9
push 4
mov byte [ebp - 4], 5
call fcn.67934403
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [eax], esi
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 6
push ecx
push 0
push eax
push 0x678abd40
push 0
push 0
call edi
add esp, 0x18
mov dword [ebp - 0x2c], eax
test eax, eax
je 0x6789f6aa
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 7
call fcn.677da340
lea ecx, [ebp - 0x1c]
call fcn.677da340
lea ecx, [ebp - 0x34]
call fcn.677da340
lea ecx, [ebp - 0x2c]
call fcn.677da340
mov edx, dword [esi + 8]
mov edi, dword [sym.imp.kernel32.dll_CreateThread]
cmp edx, 0x1000
jae 0x6789f3da
push 0x1388
call dword [sym.imp.kernel32.dll_Sleep]
lea ecx, [ebp - 0x24]
call fcn.677da340
lea ecx, [ebp - 0x1c]
call fcn.677da340
mov edx, dword [esi + 8]
cmp edx, 0x1000
jae 0x6789f3da
movaps xmm0, xmmword [0x67ac57e0]
xor ecx, ecx
movups xmmword [ebp - 0x1a8], xmm0
mov dword [ebp - 0x88], 0xbcb8f0bb
movaps xmm0, xmmword [0x67ac5a10]
movups xmmword [ebp - 0x198], xmm0
mov dword [ebp - 0x84], 0xb4bab8f3
movaps xmm0, xmmword [0x67ac5870]
movups xmmword [ebp - 0x188], xmm0
mov dword [ebp - 0x80], 0x100a1b5
movaps xmm0, xmmword [0x67ac5620]
movups xmmword [ebp - 0x178], xmm0
movaps xmm0, xmmword [0x67ac5740]
movups xmmword [ebp - 0x168], xmm0
movaps xmm0, xmmword [0x67ac49e0]
movups xmmword [ebp - 0x158], xmm0
movaps xmm0, xmmword [0x67ac49c0]
movups xmmword [ebp - 0x148], xmm0
movaps xmm0, xmmword [0x67ac5440]
movups xmmword [ebp - 0x138], xmm0
movaps xmm0, xmmword [0x67ac54a0]
movups xmmword [ebp - 0x128], xmm0
movaps xmm0, xmmword [0x67ac5490]
movups xmmword [ebp - 0x118], xmm0
movaps xmm0, xmmword [0x67ac4a00]
movups xmmword [ebp - 0x108], xmm0
movaps xmm0, xmmword [0x67ac4980]
movups xmmword [ebp - 0xf8], xmm0
movaps xmm0, xmmword [0x67ac5530]
movups xmmword [ebp - 0xe8], xmm0
movaps xmm0, xmmword [0x67ac5e10]
movups xmmword [ebp - 0xd8], xmm0
movaps xmm0, xmmword [0x67ac5db0]
movups xmmword [ebp - 0xc8], xmm0
movaps xmm0, xmmword [0x67ac5e20]
movups xmmword [ebp - 0xb8], xmm0
movaps xmm0, xmmword [0x67ac5cc0]
movups xmmword [ebp - 0xa8], xmm0
movaps xmm0, xmmword [0x67ac5960]
movups xmmword [ebp - 0x98], xmm0
lea eax, [ecx - 0x51]
xor byte [ebp + ecx - 0x1a8], al
inc ecx
cmp ecx, 0x12a
jb 0x6789f392
push 0x41010
push 0
lea eax, [ebp - 0x1a8]
mov byte [ebp - 0x7d], 0
push eax
push 0
call dword [sym.imp.user32.dll_MessageBoxA]
push 0
push 0
push 0
push 0x678bbb20
push 0
push 0
call edi
push eax
call dword [sym.imp.kernel32.dll_CloseHandle]
mov edx, dword [esi + 8]
mov dword [ebp - 0x44], 0xb3a6d4c5
xor ecx, ecx
mov dword [ebp - 0x40], 0xb7acb5b4
mov dword [ebp - 0x3c], 0xc3bfe1a8
mov word [ebp - 0x38], 0x100
lea eax, [ecx - 0x70]
xor byte [ebp + ecx - 0x44], al
inc ecx
cmp ecx, 0xc
jb 0x6789f3f7
push edx
lea eax, [ebp - 0x44]
mov byte [ebp - 0x37], 0
push eax
push 4
push dword [0x67b6d578]
call fcn.67893350
add esp, 0x10
mov dword [ebp - 0x54], 0xfcfed2d7
mov dword [ebp - 0x50], 0xb7acf1e1
xor ecx, ecx
mov dword [ebp - 0x4c], 0xc3bfe1a8
mov word [ebp - 0x48], 0x100
nop word [eax + eax]
lea eax, [ecx - 0x70]
xor byte [ebp + ecx - 0x54], al
inc ecx
cmp ecx, 0xc
jb 0x6789f440
push dword [esi + 0xc]
lea eax, [ebp - 0x54]
mov byte [ebp - 0x47], 0
push eax
push 4
push dword [0x67b6d578]
call fcn.67893350
mov eax, dword [0x67b6b48c]
add esp, 0x10
mov eax, dword [eax + 8]
add eax, dword [0x67b37514]
push 0
push 0
push 0
push 0x678a49b0
push 0
push 0
mov dword [esi + 0x14], eax
call edi
mov dword [ebp - 0x14], eax
test eax, eax
je 0x6789f4b4
mov ecx, dword [0x67b71948]
cmp ecx, dword [0x67b7194c]
je 0x6789f4aa
mov dword [ecx], eax
add dword [0x67b71948], 4
jmp 0x6789f4b4
lea eax, [ebp - 0x14]
push eax
push ecx
call fcn.678ded80
push 0
push 0
push 0
push 0x678a0350
push 0
push 0
call edi
mov dword [ebp - 0x14], eax
test eax, eax
je 0x6789f4ef
mov ecx, dword [0x67b71948]
cmp ecx, dword [0x67b7194c]
je 0x6789f4e5
mov dword [ecx], eax
add dword [0x67b71948], 4
jmp 0x6789f4ef
lea eax, [ebp - 0x14]
push eax
push ecx
call fcn.678ded80
push 0
push 0
push 0
push 0x678a1600
push 0
push 0
call edi
mov dword [ebp - 0x14], eax
test eax, eax
je 0x6789f52a
mov ecx, dword [0x67b71948]
cmp ecx, dword [0x67b7194c]
je 0x6789f520
mov dword [ecx], eax
add dword [0x67b71948], 4
jmp 0x6789f52a
lea eax, [ebp - 0x14]
push eax
push ecx
call fcn.678ded80
push 0
push 0
push 0
push 0x678a4970
push 0
push 0
call edi
mov dword [ebp - 0x14], eax
test eax, eax
je 0x6789f565
mov ecx, dword [0x67b71948]
cmp ecx, dword [0x67b7194c]
je 0x6789f55b
mov dword [ecx], eax
add dword [0x67b71948], 4
jmp 0x6789f565
lea eax, [ebp - 0x14]
push eax
push ecx
call fcn.678ded80
push 0
push 0
push 0
push 0x678a5fe0
push 0
push 0
call edi
mov dword [ebp - 0x14], eax
test eax, eax
je 0x6789f5a0
mov ecx, dword [0x67b71948]
cmp ecx, dword [0x67b7194c]
je 0x6789f596
mov dword [ecx], eax
add dword [0x67b71948], 4
jmp 0x6789f5a0
lea eax, [ebp - 0x14]
push eax
push ecx
call fcn.678ded80
push 0
push 0
push 0
push 0x678a6a40
push 0
push 0
call edi
mov dword [ebp - 0x14], eax
test eax, eax
je 0x6789f5db
mov ecx, dword [0x67b71948]
cmp ecx, dword [0x67b7194c]
je 0x6789f5d1
mov dword [ecx], eax
add dword [0x67b71948], 4
jmp 0x6789f5db
lea eax, [ebp - 0x14]
push eax
push ecx
call fcn.678ded80
push 0
push 0
push 0
push 0x678a6d20
push 0
push 0
call edi
mov dword [ebp - 0x14], eax
test eax, eax
je 0x6789f616
mov ecx, dword [0x67b71948]
cmp ecx, dword [0x67b7194c]
je 0x6789f60c
mov dword [ecx], eax
add dword [0x67b71948], 4
jmp 0x6789f616
lea eax, [ebp - 0x14]
push eax
push ecx
call fcn.678ded80
push 0
push 0
push 0
push 0x678a6da0
push 0
push 0
call edi
mov dword [ebp - 0x14], eax
test eax, eax
je 0x6789f651
mov ecx, dword [0x67b71948]
cmp ecx, dword [0x67b7194c]
je 0x6789f647
mov dword [ecx], eax
add dword [0x67b71948], 4
jmp 0x6789f651
lea eax, [ebp - 0x14]
push eax
push ecx
call fcn.678ded80
push 0
push 0
push 0
push 0x678a4580
push 0
push 0
call edi
mov dword [ebp - 0x14], eax
test eax, eax
je 0x6789f68c
mov ecx, dword [0x67b71948]
cmp ecx, dword [0x67b7194c]
je 0x6789f682
mov dword [ecx], eax
add dword [0x67b71948], 4
jmp 0x6789f68c
lea eax, [ebp - 0x14]
push eax
push ecx
call fcn.678ded80
cmp dword [ebp - 0x28], 0
jne 0x6789f6a4
cmp dword [ebp - 0x30], 0
jne 0x6789f6a4
cmp dword [ebp - 0x18], 0
jne 0x6789f6a4
cmp dword [ebp - 0x20], 0
je 0x6789f6e6
call dword [sym.imp.ucrtbase.dll_terminate]
push 6
mov dword [ebp - 0x28], 0
call dword [sym.imp.msvcp140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push 6
mov dword [ebp - 0x30], 0
call dword [sym.imp.msvcp140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push 6
mov dword [ebp - 0x18], 0
call dword [sym.imp.msvcp140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push 6
mov dword [ebp - 0x20], 0
call dword [sym.imp.msvcp140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.679343f5
mov esp, ebp
pop ebp
ret