Function at 0x140077990
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0xc0]
sub rsp, 0x1c0
xor eax, eax
mov dword [rsp + 0x40], 0xb3c0b1b0
xor edi, edi
mov dword [rsp + 0x44], 0x86b682bb
mov edx, edi
mov dword [rsp + 0x48], 0x85938599
mov byte [rsp + 0x4c], al
nop dword [rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0xc
jb 0x1400779d0
movdqa xmm0, xmmword [0x14026eca0]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov edx, edi
xor eax, eax
mov word [rsp + 0x50], 0x8f99
mov byte [rsp + 0x52], al
movdqu xmmword [rsp + 0x40], xmm0
nop
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0x12
jb 0x140077a10
movdqa xmm0, xmmword [0x14026ecb0]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x68], rax
mov edx, edi
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0xcd8f99
nop dword [rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0x13
jb 0x140077a50
lea rax, [rsp + 0x40]
mov dword [rsp + 0x40], 0xb3c0b1b0
mov qword [rsp + 0x70], rax
mov edx, edi
xor eax, eax
mov dword [rsp + 0x44], 0x94b598be
mov byte [rsp + 0x4a], al
mov word [rsp + 0x48], 0x87b1
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0xa
jb 0x140077a90
lea rax, [rsp + 0x40]
mov dword [rsp + 0x40], 0xb3c0b1b0
mov qword [rsp + 0x78], rax
mov edx, edi
mov dword [rsp + 0x44], 0x928698a4
mov dword [rsp + 0x48], 0x939fbd9a
mov word [rsp + 0x4c], 0x9d
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0xd
jb 0x140077ae0
lea rax, [rsp + 0x40]
mov dword [rsp + 0x40], 0xb3c0b1b0
mov qword [rbp - 0x80], rax
mov edx, edi
mov dword [rsp + 0x44], 0x838685b8
mov dword [rsp + 0x48], 0x829490b0
mov word [rsp + 0x4c], 0x9f
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0xd
jb 0x140077b30
movdqa xmm0, xmmword [0x14026eb80]
lea rax, [rsp + 0x40]
mov qword [rbp - 0x78], rax
mov edx, edi
movdqu xmmword [rsp + 0x40], xmm0
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0xf
jb 0x140077b60
lea rax, [rsp + 0x40]
mov dword [rsp + 0x40], 0xb3c0b1b0
mov qword [rbp - 0x70], rax
mov edx, edi
xor eax, eax
mov dword [rsp + 0x44], 0xa0b4b6b8
mov byte [rsp + 0x48], al
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 8
jb 0x140077ba0
lea rax, [rsp + 0x40]
mov dword [rbp + 0xd0], 0xb3c0b1b0
mov qword [rbp - 0x68], rax
mov edx, edi
mov dword [rbp + 0xd4], 0x94819e
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0xd0]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 7
jb 0x140077be0
movdqa xmm0, xmmword [0x14026ee30]
lea rax, [rbp + 0xd0]
mov qword [rbp - 0x60], rax
mov edx, edi
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x50], 0xb2
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0x11
jb 0x140077c20
lea rax, [rsp + 0x40]
mov dword [rsp + 0x40], 0xb3c0b1b0
mov qword [rbp - 0x58], rax
mov edx, edi
mov dword [rsp + 0x44], 0x8b9db3a6
mov dword [rsp + 0x48], 0x849380b3
mov word [rsp + 0x4c], Ordinal_143
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0xd
jb 0x140077c70
movdqa xmm0, xmmword [0x14026ee00]
lea rax, [rsp + 0x40]
mov qword [rbp - 0x50], rax
mov edx, edi
xor eax, eax
mov byte [rsp + 0x50], al
movdqu xmmword [rsp + 0x40], xmm0
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0x10
jb 0x140077cb0
movdqa xmm0, xmmword [0x14026eb90]
lea rax, [rsp + 0x40]
mov qword [rbp - 0x48], rax
mov edx, edi
movdqu xmmword [rsp + 0x40], xmm0
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0xf
jb 0x140077ce0
movdqa xmm0, xmmword [0x14026ee30]
lea rax, [rsp + 0x40]
mov qword [rbp - 0x40], rax
mov edx, edi
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x50], 0xb2
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0x11
jb 0x140077d20
lea rax, [rsp + 0x40]
mov dword [rsp + 0x40], 0xb3c0b1b0
mov qword [rbp - 0x38], rax
mov edx, edi
mov dword [rsp + 0x44], 0x8b9db3a6
mov dword [rsp + 0x48], 0x849380b3
mov word [rsp + 0x4c], Ordinal_143
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0xd
jb 0x140077d70
movdqa xmm0, xmmword [0x14026ecf0]
lea rax, [rsp + 0x40]
mov qword [rbp - 0x30], rax
mov edx, edi
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0xbb9aaf95
mov word [rsp + 0x54], Ordinal_79
nop
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0x15
jb 0x140077db0
movdqa xmm0, xmmword [0x14026eb90]
lea rax, [rsp + 0x40]
mov qword [rbp - 0x28], rax
mov edx, edi
movdqu xmmword [rsp + 0x40], xmm0
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0xf
jb 0x140077de0
movdqa xmm0, xmmword [0x14026ed20]
lea rax, [rsp + 0x40]
mov qword [rbp - 0x20], rax
mov edx, edi
xor eax, eax
mov dword [rsp + 0x50], 0xbcaeb485
mov byte [rsp + 0x54], al
movdqu xmmword [rsp + 0x40], xmm0
nop
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0x14
jb 0x140077e20
lea rax, [rsp + 0x40]
mov dword [rsp + 0x40], 0xb3c0b1b0
mov qword [rbp - 0x18], rax
mov edx, edi
xor eax, eax
mov dword [rsp + 0x44], 0x9a919c86
mov byte [rsp + 0x48], al
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 8
jb 0x140077e60
movdqa xmm0, xmmword [0x14026ee40]
lea rax, [rsp + 0x40]
mov qword [rbp - 0x10], rax
mov edx, edi
xor eax, eax
mov byte [rsp + 0x50], al
movdqu xmmword [rsp + 0x40], xmm0
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0x10
jb 0x140077ea0
lea rax, [rsp + 0x40]
mov dword [rsp + 0x40], 0x869ca9b0
mov qword [rbp - 8], rax
mov edx, edi
mov dword [rsp + 0x44], 0xaf809486
mov dword [rsp + 0x48], 0x82949882
mov word [rsp + 0x4c], Ordinal_143
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0xd
jb 0x140077ef0
lea rax, [rsp + 0x40]
mov dword [rsp + 0x40], 0x869ca9b0
mov qword [rbp], rax
mov edx, edi
mov dword [rsp + 0x44], 0xaf809486
mov dword [rsp + 0x48], 0x9e919882
mov word [rsp + 0x4c], 0x9c
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0xd
jb 0x140077f40
movdqa xmm0, xmmword [0x14026ec90]
lea rax, [rsp + 0x40]
mov qword [rbp + 8], rax
mov edx, edi
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x9a90b7
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0x13
jb 0x140077f80
movdqa xmm0, xmmword [0x14026ed50]
lea rax, [rsp + 0x40]
mov qword [rbp + 0x10], rax
mov edx, edi
xor eax, eax
mov word [rsp + 0x50], 0x9299
mov byte [rsp + 0x52], al
movdqu xmmword [rsp + 0x40], xmm0
nop dword [rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0x12
jb 0x140077fc0
movdqa xmm0, xmmword [0x14026ed80]
lea rax, [rsp + 0x40]
mov qword [rbp + 0x18], rax
mov edx, edi
xor eax, eax
mov byte [rsp + 0x50], al
movdqu xmmword [rsp + 0x40], xmm0
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0x10
jb 0x140078000
movdqa xmm0, xmmword [0x14026ed90]
lea rax, [rsp + 0x40]
mov qword [rbp + 0x20], rax
mov edx, edi
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x50], 0xdf
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0x11
jb 0x140078040
movdqa xmm0, xmmword [0x14026eda0]
lea rax, [rsp + 0x40]
mov qword [rbp + 0x28], rax
mov edx, edi
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0xaab2b3
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0x13
jb 0x140078080
movdqa xmm0, xmmword [0x14026ed00]
lea rax, [rsp + 0x40]
mov qword [rbp + 0x30], rax
mov edx, edi
xor eax, eax
mov dword [rsp + 0x50], 0x8b9f8f99
mov byte [rsp + 0x5e], al
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x54], 0x406c6e69
mov dword [rsp + 0x58], 0x7368706b
mov word [rsp + 0x5c], 0x7b6d
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0x1e
jb 0x1400780e0
movdqa xmm0, xmmword [0x14026ed60]
lea rax, [rsp + 0x40]
mov qword [rbp + 0x38], rax
mov edx, edi
xor eax, eax
mov byte [rsp + 0x50], al
movdqu xmmword [rsp + 0x40], xmm0
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0x10
jb 0x140078120
lea rax, [rsp + 0x40]
mov dword [rsp + 0x40], 0x9b9c84ba
mov qword [rbp + 0x40], rax
mov edx, edi
mov dword [rsp + 0x44], 0xa4df9e99
mov dword [rsp + 0x48], 0xaa9b9d
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0xb
jb 0x140078160
lea rax, [rsp + 0x40]
mov dword [rsp + 0x40], 0x9781afba
mov qword [rbp + 0x48], rax
mov edx, edi
xor eax, eax
mov dword [rsp + 0x44], 0x9e9695a7
mov byte [rsp + 0x48], al
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 8
jb 0x1400781a0
lea rax, [rsp + 0x40]
mov dword [rbp + 0xd0], 0x9781afba
mov qword [rbp + 0x50], rax
mov edx, edi
xor eax, eax
mov word [rbp + 0xd4], 0xb7a3
mov byte [rbp + 0xd6], al
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp + 0xd0]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 6
jb 0x1400781e0
lea rax, [rbp + 0xd0]
mov dword [rsp + 0x40], 0x9781afba
mov qword [rbp + 0x58], rax
mov edx, edi
mov dword [rsp + 0x44], 0x80879ebd
mov word [rsp + 0x48], __WSAFDIsSet
nop dword [rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 9
jb 0x140078220
lea rax, [rsp + 0x40]
mov dword [rsp + 0x40], 0x9781afba
mov qword [rbp + 0x60], rax
mov edx, edi
mov dword [rsp + 0x44], 0x809784b7
mov word [rsp + 0x48], 0x80
nop dword [rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 9
jb 0x140078260
lea rax, [rsp + 0x40]
mov dword [rbp + 0xd0], 0x868d809a
mov qword [rbp + 0x68], rax
mov edx, edi
xor eax, eax
mov byte [rbp + 0xd4], al
nop dword [rax]
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0xd0]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 4
jb 0x1400782a0
lea rax, [rbp + 0xd0]
mov dword [rbp + 0xd0], 0x8886809a
mov qword [rbp + 0x70], rax
mov edx, edi
xor eax, eax
mov word [rbp + 0xd4], 0x8296
mov byte [rbp + 0xd6], al
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0xd0]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 6
jb 0x1400782f0
lea rax, [rbp + 0xd0]
mov dword [rbp + 0xd0], 0x8083809a
mov qword [rbp + 0x78], rax
mov edx, edi
mov dword [rbp + 0xd4], 0x978285
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0xd0]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 7
jb 0x140078330
lea rax, [rbp + 0xd0]
mov dword [rsp + 0x40], 0x8a83809a
mov qword [rbp + 0x80], rax
mov edx, edi
xor eax, eax
mov dword [rsp + 0x44], 0x9f86929d
mov byte [rsp + 0x48], al
nop
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 8
jb 0x140078370
lea rax, [rsp + 0x40]
mov dword [rbp + 0xd0], 0x9c9b809a
mov qword [rbp + 0x88], rax
mov edx, edi
mov word [rbp + 0xd4], __WSAFDIsSet
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0xd0]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 5
jb 0x1400783b0
lea rax, [rbp + 0xd0]
mov dword [rsp + 0x40], 0x9c9b809a
mov qword [rbp + 0x90], rax
mov edx, edi
xor eax, eax
mov dword [rsp + 0x44], 0x869d9c92
mov byte [rsp + 0x4a], al
mov word [rsp + 0x48], 0x9087
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 0xa
jb 0x140078400
lea rax, [rsp + 0x40]
mov dword [rsp + 0x40], 0xb096809a
mov qword [rbp + 0x98], rax
mov edx, edi
xor eax, eax
mov dword [rsp + 0x44], 0x92958783
mov byte [rsp + 0x48], al
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 8
jb 0x140078440
lea rax, [rsp + 0x40]
mov dword [rbp + 0xd0], 0x8196809a
mov qword [rbp + 0xa0], rax
mov edx, edi
xor eax, eax
mov word [rbp + 0xd4], 0x8595
mov byte [rbp + 0xd6], al
movsxd rax, edx
lea rcx, [rbp + 0xd0]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 6
jb 0x140078480
lea rax, [rbp + 0xd0]
mov dword [rbp + 0xd0], 0xd796809a
mov qword [rbp + 0xa8], rax
mov edx, edi
mov word [rbp + 0xd4], Ordinal_200
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp + 0xd0]
add rcx, rax
lea eax, [rdx - 0x14]
inc edx
xor byte [rcx], al
cmp edx, 5
jb 0x1400784c0
lea rax, [rbp + 0xd0]
mov rbx, rdi
mov qword [rbp + 0xb0], rax
nop word [rax + rax]
mov rcx, qword [rsp + rbx*8 + 0x60]
xor r9d, r9d
mov qword [rsp + 0x30], rdi
mov edx, 0x80000000
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
cmp rax, 0xffffffffffffffff
jne 0x140078540
inc rbx
cmp rbx, 0x2b
jl 0x1400784f0
lea r11, [rsp + 0x1c0]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
call fcn.14006cb60
lea rcx, [0x14040d7b0]
call fcn.1400729b0
call fcn.14006cb60
mov ecx, 1
call fcn.140238768
int3